October 2023 - openSUSE Factory - openSUSE Mailing Lists

Re-stabilizing the order of /dev/sd* devices
by Martin Wilck 30 Oct '23

30 Oct '23

The discussion on the previous thread "SCSI device identification and SCSI symlink generation in sg3_utils 1.48" [1], the openSUSE Forum [2], bugzilla [3] has revealed that with one exception, the problems that users encountered had not been caused by the sg3_utils update, but by the almost simultaneous update of the TW kernel to 6.5.4, which changed scsi_mod and sd_mod from built-in to loadable modules. In the course of this discussion, the idea came up to stabilize the ordering of sd devices by loading sd_mod before any SCSI low level drivers, using a softdep. I have implemented this now in [4]. I would be grateful for testing this package on a variety of systems. I already tried a few, and saw no issues. Currently TW only. The expected effect is that the ordering of sd devices stabilizes again (if you test this, please undo manual workarounds that you may have applied so far). On systems with only NVMe hardware (e.g. laptops with M.2 SSDs) where multipath-tools is not installed (if you aren’t using dm-multipath, you can just uninstall it with “zypper rm multipath- tools”), an additional expected effect is that the system would come up without any SCSI drivers loaded (check /proc/modules). If an USB stick or some other SCSI device is added to such a system, SCSI modules should be loaded on demand, and the stick should be mounted as usual. Feedback very welcome. I plan to submit this to factory next week. Regards, Martin [1] https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… [2] https://forums.opensuse.org/t/problem-with-disks-order-after-snapshot-20230… [3] https://bugzilla.suse.com/show_bug.cgi?id=1216070 [4] https://download.opensuse.org/repositories/home:/mwilck:/suse-module-tools/…

7 16

[opensuse-factory] reproducible builds status 2023-10
by Bernhard M. Wiedemann 30 Oct '23

30 Oct '23

Hi, This month I made some more nice patches after I went to review all remaining packages with major issues. I'm off to the rb-summit in Hamburg this week. The ghc-rpm-macros patch is still pending in the pipeline. Once that goes through, the number of packages with issues remaining could be as low as 126. https://github.com/rpm-software-management/rpm/issues/2343 still breaks bit-identical results for many packages. https://github.com/openSUSE/post-build-checks/pull/58 by Jan Zerebecki could finally allow to enable normalization of mtimes in Factory, but OTOH breaks build-compare / build-tree-pruning on OBS rebuilds of certain packages. Since my main test-build machine is on the move to Prague atm, I only ran builds over a limited set of packages with known past problems. https://rb.zq1.de/spec/glossar.txt explains the meaning of below values: total-packages: 14895 build-tried: 753 build-failed: 26 build-n-a: 1 build-succeeded: 727 build-official-failed+na: 76 build-compare-failed: 119 build-compare-succeeded: 608 bit-by-bit-identical: 280 not-bit-by-bit-identical: 446 recent SRs and patches: https://github.com/elastic/elasticsearch-py/issues/2320 FTBFS # https://github.com/kovidgoyal/kitty/pull/6685 sort, tar mtime https://github.com/libpinyin/libpinyin/issues/162 ASLR https://github.com/djcb/mu/pull/2569 date in copyright https://github.com/djcb/mu/issues/2570 unknown https://sourceforge.net/p/sbcl/mailman/sbcl-devel/thread/3ebdd95c-c498-462f… report timestamp+other # https://github.com/hyprwm/Hyprland/pull/3550 filesys (find/meson) https://git.enlightenment.org/enlightenment/efl/issues/41 edje_cc nondeterministic order # https://github.com/maros/MooseX-App/pull/71 kanku toolchain, date from perl-MooseX-App # https://github.com/apache/qpid-proton/pull/411 sort https://github.com/FFTW/fftw3/issues/337 random order https://bugzilla.opensuse.org/show_bug.cgi?id=1216293 fdo-client private keys # https://github.com/rakudo/rakudo/pull/5426 sort readdir https://github.com/rakudo/rakudo/issues/5427 unknown, toolchain # https://sourceforge.net/p/gimp-print/source/merge-requests/9/ gutenprint date # https://gitlab.com/CalcProgrammer1/OpenRGB/-/issues/3675 filesys+parallelism # https://gitlab.com/CalcProgrammer1/OpenRGB/-/merge_requests/2101 FTBFS # https://gitlab.com/CalcProgrammer1/OpenRGB/-/merge_requests/2103 corruption https://bugzilla.opensuse.org/show_bug.cgi?id=1216458 python-numpy random file names https://gitlab.com/qemu-project/SLOF/-/merge_requests/1 date https://github.com/mamedev/mame/pull/11651 order https://sourceforge.net/p/gsoap2/patches/185/ date, toolchain https://bugreports.qt.io/browse/PYSIDE-2508 python3-pyside2 order 1116036 mingw32-binutils date, toolchain 1116040 mingw64-binutils date, toolchain 1116208 erlang-retest embedded zip timestamp 1117743 python-pandas FTBFS 1117898 python-quantities date 1118130 spack cpu count 1118201 openblas cpu count => SR 1120798 1119260 xemacs-packages drop date 1119524 occt sort (not upstream) 1119553 mame order 1121011 qemu slof date+workaround parallelism-issue from sphinx

1 0

New Tumbleweed snapshot 20231028 released!
by Dominique Leuenberger 30 Oct '23

30 Oct '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: efivar grub2 gzip kernel-source (6.5.8 -> 6.5.9) libksba libstorage-ng (4.5.151 -> 4.5.154) libzypp (17.31.22 -> 17.31.23) nodejs20 open-iscsi openssl-3 (3.1.3 -> 3.1.4) openssl (3.1.3 -> 3.1.4) patterns-base suse-module-tools (16.0.36 -> 16.0.37) wtmpdb (0.9.2 -> 0.9.3) xfconf (4.18.1 -> 4.18.2) === Details === ==== efivar ==== - We donât mandoc at all after all (gh#rhboot/efivar#229 and gh#rhboot/efivar#253). ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - Fix a potential error when appending multiple keys into the synthesized initrd * Fix-the-size-calculation-for-the-synthesized-initrd.patch - Fix Xen chainloding error of no matching file path found (bsc#1216081) * grub2-efi-chainload-harder.patch - Use grub-tpm2 token to unlock keyslots to make the unsealing process more efficient and secure. * 0001-luks2-Use-grub-tpm2-token-for-TPM2-protected-volume-.patch ==== gzip ==== - Fix s390x build with 'gcc -Dalignas=_Alignas' bug#66709 ==== kernel-source ==== Version update (6.5.8 -> 6.5.9) - Linux 6.5.9 (bsc#1012628). - Bluetooth: hci_event: Ignore NULL link key (bsc#1012628). - Bluetooth: Reject connection with the device which has same BD_ADDR (bsc#1012628). - Bluetooth: Fix a refcnt underflow problem for hci_conn (bsc#1012628). - Bluetooth: vhci: Fix race when opening vhci device (bsc#1012628). - Bluetooth: hci_event: Fix coding style (bsc#1012628). - Bluetooth: avoid memcmp() out of bounds warning (bsc#1012628). - Bluetooth: hci_conn: Fix modifying handle while aborting (bsc#1012628). - ice: fix over-shifted variable (bsc#1012628). - ice: Fix safe mode when DDP is missing (bsc#1012628). - ice: reset first in crash dump kernels (bsc#1012628). - net/smc: return the right falback reason when prefix checks fail (bsc#1012628). - btrfs: fix stripe length calculation for non-zoned data chunk allocation (bsc#1012628). - nfc: nci: fix possible NULL pointer dereference in send_acknowledge() (bsc#1012628). - regmap: fix NULL deref on lookup (bsc#1012628). - KVM: x86: Mask LVTPC when handling a PMI (bsc#1012628). - x86/sev: Disable MMIO emulation from user mode (bsc#1012628). - x86/sev: Check IOBM for IOIO exceptions from user-space (bsc#1012628). - x86/sev: Check for user-space IOIO pointing to kernel space (bsc#1012628). - x86/fpu: Allow caller to constrain xfeatures when copying to uabi buffer (bsc#1012628). - KVM: x86/pmu: Truncate counter value to allowed width on write (bsc#1012628). - KVM: x86: Constrain guest-supported xfeatures only at KVM_GET_XSAVE{2} (bsc#1012628). - x86: KVM: SVM: always update the x2avic msr interception (bsc#1012628). - x86: KVM: SVM: add support for Invalid IPI Vector interception (bsc#1012628). - x86: KVM: SVM: refresh AVIC inhibition in svm_leave_nested() (bsc#1012628). - audit,io_uring: io_uring openat triggers audit reference count underflow (bsc#1012628). - tcp: check mptcp-level constraints for backlog coalescing (bsc#1012628). - mptcp: more conservative check for zero probes (bsc#1012628). - selftests: mptcp: join: no RST when rm subflow/addr (bsc#1012628). - mm: slab: Do not create kmalloc caches smaller than arch_slab_minalign() (bsc#1012628). - fs/ntfs3: Fix OOB read in ntfs_init_from_boot (bsc#1012628). - fs/ntfs3: Fix possible null-pointer dereference in hdr_find_e() (bsc#1012628). - fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea() (bsc#1012628). - fs/ntfs3: Fix shift-out-of-bounds in ntfs_fill_super (bsc#1012628). - fs/ntfs3: fix deadlock in mark_as_free_ex (bsc#1012628). - Revert "net: wwan: iosm: enable runtime pm support for 7560" (bsc#1012628). - netfilter: nft_payload: fix wrong mac header matching (bsc#1012628). - io_uring: fix crash with IORING_SETUP_NO_MMAP and invalid SQ ring address (bsc#1012628). - nvmet-tcp: Fix a possible UAF in queue intialization setup (bsc#1012628). - drm/i915: Retry gtt fault when out of fence registers (bsc#1012628). - drm/mediatek: Correctly free sg_table in gem prime vmap (bsc#1012628). - drm/nouveau/disp: fix DP capable DSM connectors (bsc#1012628). - drm/edid: add 8 bpc quirk to the BenQ GW2765 (bsc#1012628). - ALSA: hda/realtek - Fixed ASUS platform headset Mic issue (bsc#1012628). - ALSA: hda/realtek: Add quirk for ASUS ROG GU603ZV (bsc#1012628). - ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq5xxx (bsc#1012628). - ASoC: codecs: wcd938x-sdw: fix use after free on driver unbind (bsc#1012628). - ASoC: codecs: wcd938x-sdw: fix runtime PM imbalance on probe errors (bsc#1012628). - ASoC: codecs: wcd938x: drop bogus bind error handling (bsc#1012628). - ASoC: codecs: wcd938x: fix unbind tear down order (bsc#1012628). - ASoC: codecs: wcd938x: fix resource leaks on bind errors (bsc#1012628). - ASoC: codecs: wcd938x: fix regulator leaks on probe errors (bsc#1012628). - ASoC: codecs: wcd938x: fix runtime PM imbalance on remove (bsc#1012628). - qed: fix LL2 RX buffer allocation (bsc#1012628). - xfrm: fix a data-race in xfrm_lookup_with_ifid() (bsc#1012628). - xfrm6: fix inet6_dev refcount underflow problem (bsc#1012628). - xfrm: fix a data-race in xfrm_gen_index() (bsc#1012628). - xfrm: interface: use DEV_STATS_INC() (bsc#1012628). - net: xfrm: skip policies marked as dead while reinserting policies (bsc#1012628). - fprobe: Fix to ensure the number of active retprobes is not zero (bsc#1012628). - wifi: cfg80211: use system_unbound_wq for wiphy work ... changelog too long, skipping 321 lines ... - commit 06d7c82 ==== libksba ==== - Do not pull revision info from GIT when autoconf is run. This removes the -unknown suffix after the version number. * Run autoreconf for the added patch and add the build dependecies on autoconf, automake and libtool. * Add libksba-nobetasuffix.patch [bsc#1216334] ==== libstorage-ng ==== Version update (4.5.151 -> 4.5.154) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#962 - improved error reporting in SystemCmd - 4.5.154 - merge gh#openSUSE/libstorage-ng#961 - added testcase - 4.5.153 - merge gh#openSUSE/libstorage-ng#960 - make more use of new SystemCmd interface - added const - 4.5.152 - merge gh#openSUSE/libstorage-ng#959 - removed unused function - merge gh#openSUSE/libstorage-ng#958 - make more use of new SystemCmd interface - prefer make_unique over new - fixed compound action generation for removing btrfs qgroup relations ==== libzypp ==== Version update (17.31.22 -> 17.31.23) - Stop using boost version 1 timer library (fixes #489, bsc#1215294) - version 17.31.23 (22) ==== nodejs20 ==== Subpackages: npm20 - fix_ci_tests.patch: adapt for openssl 3.1.4 ==== open-iscsi ==== Subpackages: libopeniscsiusr0 - Updated to latest upstream, which includes (bsc#1210514): * several fixes to harden iscsiuio, which updates its version number to 0.7.8.8, including: - logging now uses syslog - shutdown now waits for helper threads to complete - netlink socket cleanup * some minor bug fixes, some helping builds on musl This updates open-iscsi-SUSE-latest.diff.bz2 ==== openssl-3 ==== Version update (3.1.3 -> 3.1.4) Subpackages: libopenssl3 libopenssl3-32bit - Update to 3.1.4: * Fix incorrect key and IV resizing issues when calling EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or EVP_CipherInit_ex2() with OSSL_PARAM parameters that alter the key or IV length [bsc#1216163, CVE-2023-5363]. - Performance enhancements for cryptography from OpenSSL 3.2 [jsc#PED-5086, jsc#PED-3514] * Add patches: - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch - FIPS: Add the FIPS_mode() compatibility macro and flag support. * Add patches: - openssl-Add-FIPS_mode-compatibility-macro.patch - openssl-Add-Kernel-FIPS-mode-flag-support.patch ==== openssl ==== Version update (3.1.3 -> 3.1.4) - Update to 3.1.4 ==== patterns-base ==== Subpackages: patterns-base-apparmor patterns-base-base patterns-base-basesystem patterns-base-basic_desktop patterns-base-console patterns-base-enhanced_base patterns-base-minimal_base patterns-base-selinux patterns-base-sw_management patterns-base-transactional_base patterns-base-x11 patterns-base-x11_enhanced - Do not recommend yast stuff in x11 pattern. That's what the yast patterns are for ==== suse-module-tools ==== Version update (16.0.36 -> 16.0.37) Subpackages: suse-module-tools-scriptlets * weak-modules2: ignore INITRD_MODULES (jsc#PED-1915), obtain list of modules from dracut.conf.d instead ==== wtmpdb ==== Version update (0.9.2 -> 0.9.3) Subpackages: libwtmpdb0 - Update to version 0.9.3 - wtmpdb last: don't print date in the future if there is no db entry ==== xfconf ==== Version update (4.18.1 -> 4.18.2) Subpackages: libxfconf-0-3 typelib-1_0-Xfconf-0 xfconf-lang - Update to version 4.18.2 * Cache property-not-found responses in XfconfCache * Don't reset scheduled save timer on every write * xfconf-query: Sort channel list (-l or -m alone) * docs: Fix transfer type of xfconf_list_channels() * docs: Add clarification about bindings - Use lang_package as bnc#513786 has been closed as fixed almost 8 years ago.

1 0

Removal of /run/utmp and /var/log/wtmp
by Thorsten Kukuk 28 Oct '23

28 Oct '23

Hi, I wrote already about Y2038 and the problems with utmp and wtmp. Since we have already solutions active for some weeks, we will now do the next steps: We replaced /var/log/wtmp with wtmpdb some months ago. /usr/bin/last does not use /var/log/wtmp anymore since quite some time, too. So the next logical step will be, that we don't create /var/log/wtmp anymore. Existing files will not be deleted and many tools will still write into it, but new installations will not create it anymore. After this, we have to find the applications, which don't use the glibc interface and try to manage this file at their own. They could still create that file. The majority of known applications are using logind meanwhile instead of /run/utmp. The bug reports are all fixed meanwhile, so we will go the next step: disabling /run/utmp. A systemd with disabled utmp support will be submitted most likely next week, and then we will see how long it takes to get it through the stagings. There are still some open SRs which the package maintainers ignores since several weeks. This should not affect anybody, but if yes, please complain to the responsible package maintainers. If you know about an important application still reading (not writing) /run/utmp, please speak up now. Thanks, Thorsten -- Thorsten Kukuk, Distinguished Engineer, Senior Architect, Future Technologies SUSE Software Solutions Germany GmbH, Frankenstraße 146, 90461 Nuernberg, Germany Managing Director: Ivo Totev, Andrew McDonald, Werner Knoblich (HRB 36809, AG Nürnberg)

8 17

Directory for user drop-ins wrongly named in Tumbleweed snapshot 20231026!
by Manfred Hollstein 28 Oct '23

28 Oct '23

Hi there, please keep in mind to rename the directory /etc/systemd/user.confd.d to /etc/systemd/user.conf.d! Otherwise systemd won't use your drop-ins to define your overrides for the user session. # sudo mv /etc/systemd/user.confd.d /etc/systemd/user.conf.d HTH, cheers. l8er manfred

1 1

New Tumbleweed snapshot 20231026 released!
by Dominique Leuenberger 28 Oct '23

28 Oct '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: chromaprint clamav (0.103.9 -> 0.103.11) fftw3 gpgme (1.22.0 -> 1.23.0) gpgmeqt (1.22.0 -> 1.23.0) kdump (1.9.6 -> 1.9.7) libp11 llvm17 (17.0.2 -> 17.0.3) net-snmp openssl-1_1 policycoreutils postgresql postgresql16 python-M2Crypto (0.39.0 -> 0.40.0) python-httpcore (0.17.3 -> 0.18.0) python-httpx (0.24.1 -> 0.25.0) python-psutil python-pycairo (1.24.0 -> 1.25.1) qemu (8.1.0 -> 8.1.2) qt6-base rsyslog systemd systemd-default-settings (0.7 -> 0.8) vlan vlc (3.0.18 -> 3.0.19) webkit2gtk3 webkit2gtk3-soup2 xfce4-session yast2-country (5.0.1 -> 5.0.2) === Details === ==== chromaprint ==== - Drop unused libtag-devel BuildRequires. - Use cmake_build macro. ==== clamav ==== Version update (0.103.9 -> 0.103.11) Subpackages: libclamav9 libfreshclam2 - Update to 0.103.11 * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.12. * Windows: libjson-c 0.17 compatibility fix. with ssize_t type definition. * Windows: Update build system to use OpenSSL 3 and PThreads-Win32 v3. - Update to 0.103.10 * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.10. ==== fftw3 ==== - Disable HPC flavors on %ix86 - Drop support for obsolete openmpi[123] - Prepare support for openmpi5 ==== gpgme ==== Version update (1.22.0 -> 1.23.0) Subpackages: libgpgme11 libgpgmepp6 - Update to 1.23.0: * Support GPGME_ENCRYPT_ALWAYS_TRUST also for S/MIME. [T6559] * New keylist mode GPGME_KEYLIST_MODE_WITH_V5FPR. [T6705] * New key capability flags has_*. [T6748] * gpgme-tool: Support use of Windows HANDLE. [T6634] * qt: Support refreshing keys via WKD. [T6672] * qt: Handle cancel in changeexpiryjob. [T6754] * Remove patches fixed upstream: - gpgme-qt-tests-Fix-build-in-source-directory.patch - gpgme-build-Suggest-out-of-source-build.patch ==== gpgmeqt ==== Version update (1.22.0 -> 1.23.0) - Update to 1.23.0: * Support GPGME_ENCRYPT_ALWAYS_TRUST also for S/MIME. [T6559] * New keylist mode GPGME_KEYLIST_MODE_WITH_V5FPR. [T6705] * New key capability flags has_*. [T6748] * gpgme-tool: Support use of Windows HANDLE. [T6634] * qt: Support refreshing keys via WKD. [T6672] * qt: Handle cancel in changeexpiryjob. [T6754] * Remove patches fixed upstream: - gpgme-qt-tests-Fix-build-in-source-directory.patch - gpgme-build-Suggest-out-of-source-build.patch ==== kdump ==== Version update (1.9.6 -> 1.9.7) - upgrade to version 1.9.7 * prevent dracut emergency shell * s390: consolidate low-level network configuration with zdev * s390: Explicitly request zFCP devices ==== libp11 ==== - Replace openssl-ibmpkcs11 with openssl-engine-libp11 (jsc#PED-3327) Add Obsoletes: openssl-ibmpkcs11 <= 1.0.1 and Provides: openssl-ibmpkcs11 = 1.0.1 ==== llvm17 ==== Version update (17.0.2 -> 17.0.3) - Update to version 17.0.3. * This release contains bug-fixes for the LLVM 17.0.0 release. This release is API and ABI compatible with 17.0.0. - Rebase llvm-do-not-install-static-libraries.patch. - Disable zstd support for now regardless of whether libzstd-devel is installed. (boo#1216121) - Limit number of LTO threads on 32-bit architectures to prevent out-of-memory during linking. ==== net-snmp ==== Subpackages: libsnmp40 perl-SNMP snmp-mibs - net-snmp-5.9.4-systemd-no-utmp.patch: prefer systemd-logind over utmp to count number of logged in users, utmp is not reliable for this and has a Y2038 problem (jsc#PED-3144) ==== openssl-1_1 ==== Subpackages: libopenssl1_1 - Performance enhancements for cryptography from OpenSSL 3.x [jsc#PED-5086, jsc#PED-3514] * Add patches: - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch ==== policycoreutils ==== Subpackages: policycoreutils-lang policycoreutils-python-utils python3-policycoreutils - Add reproducible-build.patch to make the output of "sepolicy manpage" deterministic (bsc#1216452) ==== postgresql ==== Subpackages: postgresql-contrib postgresql-server - Interlock version and release of all noarch packages except for the postgresql-docs. ==== postgresql16 ==== Subpackages: libpq5 postgresql16-contrib postgresql16-server - boo#1216022: Call install-alternatives from the devel subpackage as well, otherwise the symlink for ecpg might be missing. ==== python-M2Crypto ==== Version update (0.39.0 -> 0.40.0) - Update to 0.40.0: - OK, SO NOT THIS RELEASE, BUT IN THE NEXT RELEASE PYTHON2 WILL TRULY GO! - BREAKING CHANGES: - There are no SWIG generated files (src/SWIG/_m2crytpo_wrap.c) included anymore, so swig must be installed, no exceptions! Also, for compatibility with Python 3.12+, swig 4.0+ is required. - All support for asyncore has been removed, as it has been removed in Python 3.12 as well (which means also removal of contrib/dispatcher.py, M2Crypto/SSL/ssl_dispatcher.py, ZServerSSL). - All use of distutils (including the bundled ones in setuptools) has been removed, so `setup.py clean` is no more. - Excessively complicated and error-prone __init__py has been cleaned and `import M2Crypto` doesnât include everything anymore. Imports should specified as for example with `from M2Crypto import foo`. - ASN1_Time handling has been mostly rewritten and it almost works even on Windows. - All tests in Gitlab CI (with exceptions of some skipped tests especially on Windows) are now green, tests of Python 2.7 on CentOS 7 have been included. - Introduce m2.err_clear_error() - Make X509_verify_cert() accessible as m2.x509_verify_cert - Add 32bit_ASN1_Time.patch to quench errors on 32bit archs. ==== python-httpcore ==== Version update (0.17.3 -> 0.18.0) - Update to 0.18.0: - Add support for HTTPS proxies. - Handle sni_hostname extension with SOCKS proxy. - Change the type of Extensions from Mapping[Str, Any] to MutableMapping[Str, Any]. - Handle HTTP/1.1 half-closed connections gracefully. - Drop Python 3.7 support. - Update httpcore-allow-deprecationwarnings-test.patch - Skip failing tests test_ssl_request and test_extra_info (gh#encode/httpcore!832) ==== python-httpx ==== Version update (0.24.1 -> 0.25.0) - Update to 0.25.0: - Drop support for Python 3.7. - Support HTTPS proxies. - Change the type of Extensions from Mapping[Str, Any] to MutableMapping[Str, Any]. - Add socket_options argument to httpx.HTTPTransport and httpx.AsyncHTTPTransport classes. - The Response.raise_for_status() method now returns the response instance. For example: data = httpx.get('...').raise_for_status().json(). - Return 500 error response instead of exceptions when raise_app_exceptions=False is set on ASGITransport. - Ensure all WSGITransport environs have a SERVER_PROTOCOL. - Always encode forward slashes as %2F in query parameters - Use Mozilla documentation instead of httpstatuses.com for HTTP error reference - Requires higher version of httpcore. ==== python-psutil ==== - Rebase logind_y2038.patch based on the reviewed code ==== python-pycairo ==== Version update (1.24.0 -> 1.25.1) - update to 1.25.1: * fix a crash in pypy3.10 * Fix the build with CPython 3.13.0a1 - introduced from 1.25.0: * update to cairo 1.18.0 (for windows only) * new apis: - Status.SVG_FONT_ERROR - FontOptions.get_color_mode(), FontOptions.set_color_mode(), ColorMode - FontOptions.set_color_palette(), FontOptions.get_color_palette(), COLOR_PALETTE_DEFAULT - FontOptions.set_custom_palette_color(), FontOptions.get_custom_palette_color() - TAG_CONTENT, TAG_CONTENT_REF - Pattern.get_dither(), Pattern.set_dither(), Dither ==== qemu ==== Version update (8.1.0 -> 8.1.2) Subpackages: qemu-accel-tcg-x86 qemu-audio-spice qemu-block-curl qemu-block-nfs qemu-block-rbd qemu-chardev-spice qemu-guest-agent qemu-hw-display-qxl qemu-hw-display-virtio-gpu qemu-hw-display-virtio-gpu-pci qemu-hw-display-virtio-vga qemu-hw-usb-host qemu-hw-usb-redirect qemu-hw-usb-smartcard qemu-img qemu-ipxe qemu-ksm qemu-lang qemu-microvm qemu-pr-helper qemu-seabios qemu-tools qemu-ui-curses qemu-ui-gtk qemu-ui-opengl qemu-ui-spice-app qemu-ui-spice-core qemu-vgabios qemu-x86 - [openSUSE] supportconfig: Adapt plugin to modern supportconfig - [openSUSE] Add -p1 to autosetup in spec files * So patches can be applied easily (might be useful for development) - Update to version 8.1.2: This fixes the following upstream issues: * https://gitlab.com/qemu-project/qemu/-/issues/1826 * https://gitlab.com/qemu-project/qemu/-/issues/1834 * https://gitlab.com/qemu-project/qemu/-/issues/1846 It also contains a fix for: * CVE-2023-42467 As well as several upstream backports (list available at: https://lore.kernel.org/qemu-devel/24dfb1c2-dc40-4841-893d-5d530638b684@tls…) - Update to version 8.1.1: Upstream backports and bugfixes, among which: * tpm: fix crash when FD >= 1024 and unnecessary errors due to EINTR (Marc-Andr303251 Lureau) * meson: Fix targetos match for illumos and Solaris. (Jonathan Perkin) * s390x/ap: fix missing subsystem reset registration (Janosch Frank) * ui: fix crash when there are no active_console (Marc-Andr303251 Lureau) * virtio-gpu/win32: set the destroy function on load (Marc-Andr303251 Lureau) * target/riscv: Allocate itrigger timers only once (Akihiko Odaki) * target/riscv/pmp.c: respect mseccfg.RLB for pmpaddrX changes (Leon Schuermann) * target/riscv: fix satp_mode_finalize() when satp_mode.supported = 0 (Daniel Henrique Barboza) * hw/riscv: virt: Fix riscv,pmu DT node path (Conor Dooley) * [...] * target/arm: Fix 64-bit SSRA (Richard Henderson) * target/arm: Fix SME ST1Q (Richard Henderson) * accel/kvm: Specify default IPA size for arm64 (Akihiko Odaki) * kvm: Introduce kvm_arch_get_default_type hook (Akihiko Odaki) * include/hw/virtio/virtio-gpu: Fix virtio-gpu with blob on big endian hosts (Thomas Huth) * target/s390x: Check reserved bits of VFMIN/VFMAX's M5 (Ilya Leoshkevich) * target/s390x: Fix VSTL with a large length (Ilya Leoshkevich) * target/s390x: Use a 16-bit immediate in VREP (Ilya Leoshkevich) * target/s390x: Fix the "ignored match" case in VSTRS (Ilya Leoshkevich) Full list available at: * https://lore.kernel.org/qemu-devel/d0d2ac8f-313a-c937-dc3a-88e45fce933c@tls… - Fix (bsc#1215486): * [openSUSE][RPM] spec: enable the Pipewire audio backend (bsc#1215486) - (Properly) fix: bsc#1213210 * linux-user/elfload: Enable vxe2 on s390x - Fix: bsc#1215677 * optionrom: Remove build-id section ==== qt6-base ==== Subpackages: libQt6Core6 libQt6DBus6 libQt6Gui6 libQt6Network6 libQt6OpenGL6 libQt6Sql6 libQt6Test6 libQt6Widgets6 qt6-network-tls qt6-platformtheme-gtk3 - Add upstream change: * 0001-xkb-fix-build-with-libxkbcommon-1.6.0-and-later.patch ==== rsyslog ==== - trigger daemon restart after modules packages have been updated (bsc#1214996) ==== systemd ==== Subpackages: libsystemd0 libsystemd0-32bit libudev1 systemd-32bit systemd-boot systemd-container systemd-coredump systemd-lang udev - Import commit b53f364c264cd598d4210b64285a55d362b47b89 b53f364c26 test: install af_packet kernel module on openSUSE 86b7521a3c shared/wall: use logind if build without utmp support 65aac5858f errno-util: allow ERRNO_IS_* to accept types wider than int 8f93b89db4 basic/errno-util: add wrappers which only accept negative errno 1b815b3e76 Introduce RET_GATHER and use it in src/shared/ - Drop 0001-conf-parser-introduce-early-drop-ins.patch The usage of drop-ins is now the official way for configuring systemd and its various daemons on Factory/ALP. See: https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… - Ship the main configuration files in /usr/lib/ Besides the fact that shipping files in /etc is not recommended anymore, this change will hopefully encourage users to customize the defaults via the mean of drop-ins hence removing the risk of conflicts with downstream customization. In contrary, shipping empty directories *.conf.d/ in /etc is not a concern and should suggest users to create drop-ins (bsc#1207056). - systemd.spec: add files.portable and files.journal-remote - Don't include entries listed in kbd-model-map.xkb-generated (provided by kbd package) in kbd-model-map anymore. Yast, the only user of these entries, directly parses kbd-model-map.xkb-generated now (bsc#1211104). - tmpfiles-suse.conf: drop entries for /run/lock and /var/log/wtmp /run/lock is now defined by filesystem package and wtmp has been replaced by wtmpdb on TW. ==== systemd-default-settings ==== Version update (0.7 -> 0.8) Subpackages: systemd-default-settings-branding-SLE systemd-default-settings-branding-openSUSE - The usage of drop-ins is now the official way for configuring systemd and its various daemons on Factory/ALP. Hence the early drop-ins SUSE specific "feature" has been abandoned. - Import 0.8 f34372f User priority '26' for SLE-Micro c8b6f0a Revert "Convert more drop-ins into early ones" ==== vlan ==== - Drop url for sources, they are no longer valid. ==== vlc ==== Version update (3.0.18 -> 3.0.19) Subpackages: libvlc5 libvlccore9 vlc-codec-gstreamer vlc-lang vlc-noX vlc-qt vlc-vdpau - Update to version 3.0.19 - Remove 104-playback-bar.patch, as it's no longer needed. + Core: - Fix next-frame freezing in most scenarios + Demux: - Support RIFF INFO tags for Wav files - Fix AVI files with flipped RAW video planes - Fix duration on short and small Ogg/Opus files - Fix some HLS/TS streams with ID3 prefix - Fix some HLS playlist refresh drift - Fix for GoPro MAX spatial metadata - Improve FFmpeg-muxed MP4 chapters handling - Improve playback for QNap-produced AVI files - Improve playback of some old RealVideo files - Fix duration probing on some MP4 with missing information + Decoders: - Multiple fixes on AAC handling - Activate hardware decoding of AV1 on Windows (DxVA) - Improve AV1 HDR support with software decoding - Fix some AV1 GBRP streams, AV1 super-resolution streams and monochrome ones - Fix black screen on poorly edited MP4 files on Android Mediacodec - Fix rawvid video in NV12 - Fix several issues on Windows hardware decoding (including "too large resolution in DxVA") - Improve crunchyroll-produced SSA rendering + Video Output: - Super Resolution scaling with nVidia and Intel GPUs - Fix for an issue when cropping on Direct3D9 - Multiple fixes for hardware decoding on D3D11 and OpenGL interop - Fix an issue when playing -90Â°rotated video - Fix subtitles rendering blur on recent macOS + Input: - Improve SMB compatibility with Windows 11 hosts + Contribs: - Update of fluidlite, fixing some MIDI rendering on Windows - Update of zlib to 1.2.13 (CVE-2022-37434) - Update of FFmpeg, vpx (CVE-2023-5217), ebml, dav1d, libass + Misc: - Improve muxing timestamps in a few formats (reset to 0) - Fix some rendering issues on Linux with the fullscreen controller - Fix GOOM visualization - Fixes for Youtube playback - Fix some MPRIS inconsistencies that broke some OS widgets on Linux - Implement MPRIS TrackList signals - Fix opening files in read-only mode - Fix password search using the Kwallet backend - Fix some crashes on macOS when switching application - Fix 5.1/7.1 output on macOS and tvOS - Fix several crashes and bugs in the macOS preferences panel - Improvements on the threading of the MMDevice audio output on Windows - Fix a potential security issue on the uninstaller DLLs - Fix memory leaks when using the media_list_player libVLC APIs + Translations: - Update of most translations - New translations to Esperanto, Interlingue, Lao, Macedonian, Burmese, Odia, Samoan and Swahili ==== webkit2gtk3 ==== Subpackages: WebKitGTK-4.1-lang libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles - Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider of EglDestroyImage Found" (boo#1216483). ==== webkit2gtk3-soup2 ==== Subpackages: WebKitGTK-4.0-lang libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 webkit2gtk-4_0-injected-bundles - Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider of EglDestroyImage Found" (boo#1216483). ==== xfce4-session ==== Subpackages: xfce4-session-lang - Added xfce-portals.conf file. XDP 0.18.0 requires desktop and other environments to have their own portals.conf drop in file and this is a workaround until a better fix lands (boo#1215641) - Added xdg-current-desktop-xfce.desktop to autostart to ensure variable XDG_CURRENT_DESKTOP variable is properly exposed to systemd (boo#1215641) - Relax requirement of branding package version to prevent xfce4-branding-openSUSE breaking on Leap due to repos being out of sync (boo#1216470) ==== yast2-country ==== Version update (5.0.1 -> 5.0.2) Subpackages: yast2-country-data - BuildRequire kbd to fix the build (bsc#1211104) - 5.0.2

1 0

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 27 Oct '23

27 Oct '23

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have had problems for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - pocl: Unresolvable Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

1 0

A new package software-o-o-launcher (just a desktop shortcut for software-o-o)
by Lubos Kocman 27 Oct '23

27 Oct '23

Hello openSUSE! I had an action item to come up with a quick desktop launcher for software.opensuse.org. I did go minimal with simple-xdg open and a custom icon as per advice of DimStar. The launcher is called software-o-o-launcher. I'd like to propose to have it pre-installed on every new desktop installation. It was initially submitted to X11:Utilities (next to opensuse-welcome, which server similar purpose). https://build.opensuse.org/request/show/1120637 software-o-o launcher (see the screenshot link above) shows up after typing "software" in your desktop of choice. Which is what I hope will raise awareness of software-o-o. Screenshot: https://ibb.co/b1c2qZs Let me tell you the story behind the "effort". A user wants to install a software which is not available in distribution. User is not aware of our lovely software.opensuse.org portal nor OBS. The first natural reaction is to start asking on a local forum "How do I install x.y.z in openSUSE". This happened to me recently, package was in a devel project in OBS. I pointed user to the portal, done. We don't really have any pointers to the service from within the distribution. I hope that this will "improve" the situation and will contribute to the better first-time user experience. We can work out better icon or title later. I'm super unhappy about the length of the title restriction displayed in GNOME. The best "meaningful" text to be displayed was "Additional soft..." rest was shortened by GNOME. ps. Scope of this change is to create a launcher and build awareness of the service for new users. If you have particular request/bug against sofware-o-o as a service, please open reuqest in https://github.com/openSUSE/software-o-o/issues Cheers! Best regards Lubos Kocman openSUSE Leap Release Manager

10 19

Tumbleweed - Review of the week 2023/43
by Dominique Leuenberger 27 Oct '23

27 Oct '23

Dear Tumbleweed users and hackers, Another week fully loaded with Tumbleweed snapshot comes to an end. This week, we have delivered five snapshots (with a new one already in openQA). The five snapshots (1019, 1020, 1022, 1023, and 1025) brought you those changes: * KDE Frameworks 5.111.0 * KDE Plasma 5.27.9 * Samba 4.19.2 * SQLite 3.43.2 * Apache 2.4.58 * Linux kernel 6.5.8 * Pipewire 0.3.83 * Virtualbox 7.0.12 * zlib 1.3 * Redis 7.2.2 * Meson 1.2.3 And, as after the snapshot is before the snapshot, the subsequent things are already lined up and getting ready to reach you. The most intriguing things there are: * Qemu 8.1.2 * VLC 3.0.19 * LLVM 17.0.3 * systemd: Ship the main configuration files in /usr/lib/; this change will hopefully encourage users to customize the defaults via drop-ins, hence removing the risk of conflicts with downstream customization. * Boost 1.83.0 * Linux kernel 6.5.9 * openSSL 3.1.4 * PHP 8.2.12 * binutils 2.41 * moving to dbus-broker cheers, Dominique

1 0

New package submission for Factory: sysctl-logger
by Shung-Hsi Yu 27 Oct '23

27 Oct '23

Hi, I'd like to submit a new package from network to Factory. The package is sysctl-logger, it's a rather small and simple sysctl monitoring tool based on BPF that logs each changes of sysctl setting to the systemd journal. An example of the logs emitted by sysctl-logger can be seen below, where the process name, PID, as well as the sysctl name and value are all recorded. Begin monitoring sysctl_logger changes. systemd-sysctl[510] changed kernel/hung_task_timeout_secs from 480 to 0 systemd-sysctl[510] changed kernel/msgmax from 8192 to 65536 systemd-sysctl[510] changed kernel/msgmnb from 16384 to 65536 haveged[502] changed kernel/random/write_wakeup_threshold from 1024 to 1024 wickedd[745] changed net/ipv4/conf/eth0/arp_notify from 0 to 1 Hope other would find this useful :) Thanks, Shung-Hsi

1 0