February 2023 - openSUSE Factory - openSUSE Mailing Lists

Re: kjournald - package not find at Tumbleweed Repos
by Emanuel Castelo 18 Feb '23

18 Feb '23

1 0

New Tumbleweed snapshot 20230217 released!
by Dominique Leuenberger 18 Feb '23

18 Feb '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: apache2-mod_php8 (8.1.15 -> 8.1.16) bind (9.18.11 -> 9.18.12) gnome-desktop (43.1 -> 43.2) gstreamer-plugins-bad inkscape (1.2.1 -> 1.2.2) jhead ovmf perl-Mail-DKIM (1.20220520 -> 1.20230212) php8 (8.1.15 -> 8.1.16) poppler (23.01.0 -> 23.02.0) poppler-qt5 (23.01.0 -> 23.02.0) postfix samba (4.17.4+git.314.7b07e3c51a6 -> 4.17.5+git.320.c38ca0f84a) sudo (1.9.12p2 -> 1.9.13) tigervnc (1.12.0 -> 1.13.0) tpm2-0-tss (3.2.0 -> 4.0.1) webkit2gtk3 (2.38.4 -> 2.38.5) webkit2gtk3-soup2 (2.38.4 -> 2.38.5) yast2-packager (4.5.14 -> 4.5.15) === Details === ==== apache2-mod_php8 ==== Version update (8.1.15 -> 8.1.16) - version update to 8.1.16 * This is a security release that addresses CVE-2023-0567, CVE-2023-0568, and CVE-2023-0662. * https://www.php.net/ChangeLog-8.php#8.1.16 ==== bind ==== Version update (9.18.11 -> 9.18.12) Subpackages: bind-doc bind-utils - Update to release 9.18.12 Removed Features: * Specifying a port when configuring source addresses (i.e., as an argument to query-source, query-source-v6, transfer-source, transfer-source-v6, notify-source, notify-source-v6, parental-source, or parental-source-v6, or in the source or source-v6 arguments to primaries, parental-agents, also-notify, or catalog-zones) has been deprecated. In addition, the use-v4-udp-ports, use-v6-udp-ports, avoid-v4-udp-ports, and avoid-v6-udp-ports options have also been deprecated. Warnings are now logged when any of these options are encountered in named.conf. In a future release, they will be made nonfunctional. Bug Fixes: * A constant stream of zone additions and deletions via rndc reconfig could cause increased memory consumption due to delayed cleaning of view memory. This has been fixed. * The speed of the message digest algorithms (MD5, SHA-1, SHA-2), and of NSEC3 hashing, has been improved. * Pointing parental-agents to a resolver did not work because the RD bit was not set on DS requests. This has been fixed. * Building BIND 9 failed when the --enable-dnsrps switch for ./configure was used. This has been fixed. - Updated keyring and signature ==== gnome-desktop ==== Version update (43.1 -> 43.2) Subpackages: gnome-desktop-lang libgnome-desktop-3-20 libgnome-desktop-3_0-common libgnome-desktop-4-2 typelib-1_0-GnomeDesktop-3_0 typelib-1_0-GnomeDesktop-4_0 - Update to version 43.2: + Fix idle monitor watch leak. + Updated translations. ==== gstreamer-plugins-bad ==== Subpackages: gstreamer-plugins-bad-lang libgstadaptivedemux-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstcuda-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstphotography-1_0-0 libgstplay-1_0-0 libgstplayer-1_0-0 libgstsctp-1_0-0 libgsturidownloader-1_0-0 libgstva-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 libgstwebrtcnice-1_0-0 - Remove sys/decklink since that contains a non-standard license and disable the decklink plugin ==== inkscape ==== Version update (1.2.1 -> 1.2.2) Subpackages: inkscape-extensions-extra inkscape-extensions-gimp inkscape-lang - Update to version 1.2.2: + 4 crash fixes, over 25 bug fixes, 5 fixes for extension bugs and 13 improved user interface translations + 2f3101417.patch merged upstream + See the full release notes for Inkscape 1.2.2 at https://media.inkscape.org/media/doc/release_notes/1.2.2/Inkscape_1.2.2.html ==== jhead ==== - Remove hunk that enables -fsanitize=address (bsc#1208386), note it's already removed in the upstream project: https://github.com/Matthias-Wandel/jhead/commit/34f61c3f1408e6b00f6f65dd3d7… ==== ovmf ==== Subpackages: qemu-ovmf-x86_64 - Add ovmf-Revert-OvmfPkg-OvmfXen-Set-PcdFSBClock.patch to revert 71cdb91f313380152d7bf38cfeebe76f5b2d39ac patch (bsc#1205613) - 71cdb91f313380152d7bf38cfeebe76f5b2d39ac OvmfPkg/OvmfXen: Set PcdFSBClock - We are waiting better upsteam patch, revert the issue patch first. Then PcdFSBClock will back to fixed variable. - Reference: https://edk2.groups.io/g/devel/topic/94891128#96077 https://bugzilla.tianocore.org/show_bug.cgi?id=4340 ==== perl-Mail-DKIM ==== Version update (1.20220520 -> 1.20230212) - updated to 1.20230212 see /usr/share/doc/packages/perl-Mail-DKIM/Changes 1.20230212 2023-02-12 UTC + Fix typo in ARC signer example code. Thanks to @dev-aaront-org ==== php8 ==== Version update (8.1.15 -> 8.1.16) Subpackages: php8-cli php8-ctype php8-dom php8-gd php8-gettext php8-iconv php8-mbstring php8-mysql php8-openssl php8-pdo php8-sqlite php8-tokenizer php8-xmlreader php8-xmlwriter - version update to 8.1.16 * This is a security release that addresses CVE-2023-0567, CVE-2023-0568, and CVE-2023-0662. * https://www.php.net/ChangeLog-8.php#8.1.16 ==== poppler ==== Version update (23.01.0 -> 23.02.0) Subpackages: libpoppler-cpp0 libpoppler-glib8 libpoppler126 poppler-tools - Update to version 23.02.0: + core: * CairoOutputDev: . Fix rendering of color type 3 fonts . Add handling matte entry * Fix segfault on wrong nssdir * Fix "NSS could not shutdown" + utils: pdfsig: Point out supports PKCS#11 URIs as nickname ==== poppler-qt5 ==== Version update (23.01.0 -> 23.02.0) - Update to version 23.02.0: + core: * CairoOutputDev: . Fix rendering of color type 3 fonts . Add handling matte entry * Fix segfault on wrong nssdir * Fix "NSS could not shutdown" + utils: pdfsig: Point out supports PKCS#11 URIs as nickname ==== postfix ==== - SELinux: postfix denied to access /var/spool/postfix/pid/master.pid (bsc#1207177) Apply proposed changes in postfix.service - remove patch included into the source: harden_postfix.service.patch ==== samba ==== Version update (4.17.4+git.314.7b07e3c51a6 -> 4.17.5+git.320.c38ca0f84a) Subpackages: libsamba-policy0-python3 samba-ad-dc-libs samba-ad-dc-libs-32bit samba-client samba-client-32bit samba-client-libs samba-client-libs-32bit samba-gpupdate samba-ldb-ldap samba-libs samba-libs-32bit samba-libs-python3 samba-python3 samba-winbind samba-winbind-libs samba-winbind-libs-32bit - Update to 4.17.5 * smbc_getxattr() return value is incorrect; (bso#14808); * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not handled correctly; (bso#15172); * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210); * samba-tool gpo listall fails IPv6 only - finddcs() fails to find DC when there is only an AAAA record for the DC in DNS; (bso#15226); * smbd crashes if an FSCTL request is done on a stream handle; (bso#15236); * DFS links don't work anymore on Mac clients since 4.17; (bso#15277); * vfs_virusfilter segfault on access, directory edgecase (accessing NULL value); (bso#15283); * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5) based SChannel on NETLOGON (additional changes); (bso#15240); * %U for include directive doesn't work for share listing (netshareenum); (bso#15243); * Shares missing from netshareenum response in samba 4.17.4; (bso#15266); * ctdb: use-after-free in run_proc; (bso#15269); * irpc_destructor may crash during shutdown; (bso#15280); * auth3_generate_session_info_pac leaks wbcAuthUserInfo; (bso#15286); * smbclient segfaults with use after free on an optimized build; (bso#15268); * smbstatus leaking files in msg.sock and msg.lock; (bso#15282); * Leak in wbcCtxPingDc2; (bso#15164); * Access based share enum does not work in Samba 4.16+; (bso#15265); * Crash during share enumeration; (bso#15267); * rep_listxattr on FreeBSD does not properly check for reads off end of returned buffer; (bso#15271); * Avoid relying on C89 features in a few places; (bso#15281); - named crashes on DLZ zone update; (bso#14030); (bsc#1206996); - Drop libnsl build requirement; (bsc#1208220); ==== sudo ==== Version update (1.9.12p2 -> 1.9.13) Subpackages: sudo-plugin-python - Update to 1.9.13: * Changes in 1.9.13: Fixed a bug running relative commands via sudo when log_subcmds is enabled. GitHub issue #194. Fixed a signal handling bug when running sudo commands in a shell script. Signals were not being forwarded to the command when the sudo process was not run in its own process group. Fixed a bug in the cvtsudoers LDIF parsing when the file ends without a newline and a backslash is the last character of the file. Fixed a potential use-after-free bug with cvtsudoers filtering. GitHub issue #198. Added a reminder to the default lecture that the password will not echo. This line is only displayed when the pwfeedback option is disabled. GitHub issue #195. Fixed potential memory leaks in error paths. GitHub issue #199. GitHub issue #202. Fixed potential NULL dereferences on memory allocation failure. GitHub issue #204. GitHub issue #211. Sudo now uses C23-style attributes in function prototypes instead of gcc-style attributes if supported. Added a new list pseudo-command in sudoers to allow a user to list another userâs privileges. Previously, only root or a user with the ability to run any command as either root or the target user on the current host could use the -U option. This also includes a fix to the log entry when a user lacks permission to run sudo -U otheruser -l command. Previously, the logs would indicate that the user tried to run the actual command, now the log entry includes the list operation. JSON logging now escapes control characters if they happen to appear in the command or environment. New Albanian translation from translationproject.org. Regular expressions in sudoers or logsrvd.conf may no longer contain consecutive repetition operators. This is implementation- specific behavior according to POSIX, but some implementations will allocate excessive amounts of memory. This mainly affects the fuzzers. Sudo now builds AIX-style shared libraries and dynamic shared objects by default instead of svr4-style. This means that the default sudo plugins are now .a (archive) files that contain a .so shared object file instead of bare .so files. This was done to improve compatibility with the AIX Freeware ecosystem, specifically, the AIX Freeware build of OpenSSL. Sudo will still load svr4-style .so plugins and if a .so file is requested, either via sudo.conf or the sudoers file, and only the .a file is present, sudo will convert the path from plugin.so to plugin.a(plugin.so) when loading it. This ensures compatibility with existing configurations. To restore the old, pre-1.9.13 behavior, run configure using the âwith-aix-soname=svr4 option. Sudo no longer checks the ownership and mode of the plugins that it loads. Plugins are configured via either the sudo.conf or sudoers file which are trusted configuration files. These checks suffered from time-of-check vs. time-of-use race conditions and complicate loading plugins that are not simple paths. Ownership and mode checks are still performed when loading the sudo.conf and sudoers files, which do not suffer from race conditions. The sudo.conf developer_mode setting is no longer used. Control characters in sudo log messages and sudoreplay -l output are now escaped in octal format. Space characters in the command path are also escaped. Command line arguments that contain spaces are surrounded by single quotes and any literal single quote or backslash characters are escaped with a backslash. This makes it possible to distinguish multiple command line arguments from a single argument that contains spaces. Improved support for DragonFly BSD which uses a different struct procinfo than either FreeBSD or 4.4BSD. Fixed a compilation error on Linux arm systems running older kernels that may not define EM_ARM in linux/elf-em.h. GitHub issue #232. Fixed a compilation error when LDFLAGS contains -Wl,âno-undefined. Sudo will now link using -Wl,âno-undefined by default if possible. GitHub issue #234. Fixed a bug executing a command with a very long argument vector when log_subcmds or intercept is enabled on a system where intercept_type is set to trace. GitHub issue #194. When sudo is configured to run a command in a pseudo-terminal but the standard input is not connected to a terminal, the command will now be run as a background process. This works around a problem running sudo commands in the background from a shell script where changing the terminal to raw mode could interfere with the interactive shell that ran the script. GitHub issue #237. A missing include file in sudoers is no longer a fatal error unless the error_recovery plugin argument has been set to false. ==== tigervnc ==== Version update (1.12.0 -> 1.13.0) Subpackages: libXvnc1 xorg-x11-Xvnc xorg-x11-Xvnc-module - A little cleanup of specfile - Update to tigervnc 1.13.0 * The servers and native viewer now support RealVNC's RSA-AES authentication methods and encryption * The native viewer is now translated to Romanian and Georgian * The native viewer now (optionally) supports PiKVM's H.264 encoding * The display settings for the native viewer have been overhauled to make them easier to understand * The native viewer now supports adding exceptions for expired certificates * Resolved an issue where full-screen mode didn't work in the native viewer on macOS 13 * Lock key synchronization has been re-enabled in the native viewer after being accidentally disabled in 1.11.0 * Xvnc/libvnc.so can now be built with Xorg 1.21 * x0vncserver is a bit better at handling differing server and client keyboard layout * x0vncserver now correctly handles zaphod mode - Removed patches (no longer needed): * tigervnc-newfbsize.patch (https://github.com/TigerVNC/tigervnc/pull/13) * n_utilize-system-crypto-policies.patch (https://github.com/TigerVNC/tigervnc/pull/1262) * xserver211.patch & u_tigervnc-211.patch (https://github.com/TigerVNC/tigervnc/pull/1383) - Refreshed patches: * n_tigervnc-date-time.patch * n_vncserver.patch * u_change-button-layout-in-ServerDialog.patch ==== tpm2-0-tss ==== Version update (3.2.0 -> 4.0.1) Subpackages: libtss2-esys0 libtss2-mu0 libtss2-rc0 libtss2-sys1 libtss2-tctildr0 - Drop 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch as was already merged upstream - Update to 4.0.1 + Fixed: * A buffer overflow in tss2-rc as CVE-2023-22745. - Update to 4.0.0 + Fixed: * tcti-ldr: Use heap instead of stack when tcti initialize * Fix usage of NULL pointer if Esys_TR_SetAuth is calles with ESYS_TR_NONE. * Conditionally check user/group manipulation commands. * Store VERSION into the release tarball. * When using DESTDIR for make einstall, do not invoke systemd-sysusers and systemd-tmpfiles. * esys_iutil: fix possible NPD. * Tss2_Sys_Flushcontext: flushHandle was encoded as a handleArea handle and not as parameter one, this affected the contents of cpHash. * esys: fix allow usage of HMAC sessions for Esys_TR_FromTPMPublic. * fapi: fix usage of policy_nv with a TPM nv index. * linking tcti for libtpms against tss2-tctildr. It should be linked against tss2-mu. * build: Remove erroneous trailing comma in linker option. Bug [#2391]. * fapi: fix encoding of complex tpm2bs in authorize nv, duplication select and policy template policies. Now the complex and TPMT or TPMS representations can be used. Bug #2383 * The error message for unsupported FAPI curves was in hex without a leading 0x, make it integer output to clarify. * Documentation that had various scalar out pointers as "callee allocated". * test: build with opaque FILE structure like in musl libc. * Transient endorsement keys were not recreated according to the EK credential profile. * Evict control for a persistent EK failed during provisioning if an auth value for the storage hierarchy was set. * The authorization of the storage hierarchy is now added. Fixes FAPI: Provisioning error if an auth value is needed for the storage hierarchy #2438. * Usage of a second profile in a path was not possible because the default profile was always used. * The setting of an empty auth value for Fapi_Provision was fixed. * JSON encoding of a structure TPMS_POLICYAUTHORIZATION used the field keyPEMhashAlg instead of hashAlg as defined in "TCG TSS 2.0 JSON Data Types and Policy Language Specification". Rename to hashAlg but preserve support for reading keyPEMhashAlg for backwards compatibility. * fapi: PolicySecret did not work with keys as secret object. * Esys_PCR_SetAuthValue: remembers the auth like other SetAutg ESAPI functions. * tests: esys-pcr-auth-value.int moved to destructive tests. * FAPI: Fix double free if keystore is corrupted. * Marshaling of TPMU_CAPABILITIES data, only field intelPttProperty was broken before.a * Spec deviation in Fapi_GetDescription caused description to be NULL when it should be empty string. This is API breaking but considered a bug since it deviated from the FAPI spec. * FAPI: undefined reference to curl_url_strerror when using curl less than 7.80.0. * FAPI: Fixed support for EK templates in NV inidices per the spec, see #2518 for details. * FAPI: fix NPD in ifapi_curl logging. * FAPI: Improve documentation fapi-profile * FAPI: Fix CURL HTTP handling. * FAPI: Return FAPI_RC_IO_ERROR if a policy does not exist in keystore. + Added: * TPM version 1.59 support. * ci: ubuntu-22.04 added. * mbedTLS 3.0 is supported by ESAPI. * Add CreationHash to JSON output for usage between applications not using the FAPI keystore, like command line tools. * Reduced code size for SAPI. * Support for Runtime Switchable ESAPI Crypto Backend via Esys_SetCryptoCallbacks. * Testing for TCG EK Credential Profile TPM 2.0, Version 2.4 Rev. 3, 2021 for the low and high address range of EK templates. * tss2-rc: Tss2_RC_DecodeInfo function for parsing TSS2_RC into the various bit fields. * FAPI support for P_ECC384 profile. * tss2-rc: Tss2_RC_DecodeInfoError: Function to get a human readable error from a TSS2_RC_INFO returned by Tss2_RC_DecodeInfo * tcti: Generic SPI driver, implementors only need to connect to acquire/release, transmit/receive, and sleep/timeout functions. * FAPI: Add event logging for Firmware and IMA Events. See #2170 for details. * FAPI: Fix Fapi_ChangeAuth updates on hierarchy objects not being reflected across profiles. * FAPI: Allow keyedhash keys in PolicySigned. * ESAPI: Support sha512 for mbedtls crypto backend. * TPM2B_MAX_CAP_BUFFER and mu routines * vendor field to TPMU_CAPABILTIIES * FAPI: support for PolicyTemplate + Changed * libmu soname from 0:0:0 to 0:1:0. * tss2-sys soname from 1:0:0 to 1:1:0 * tss2-esys: from 0:0:0 to 0:1:0 ... changelog too long, skipping 6 lines ... * Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Unmarshal ==== webkit2gtk3 ==== Version update (2.38.4 -> 2.38.5) Subpackages: WebKit2GTK-4.1-lang libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles - Update to version 2.38.5 (boo#1208328): + Fix large memory allocation when uploading content. + Fix scrolling after a history navigation with PSON enabled. + Always update the active uri of WebKitFrame. + Fix the build on Ubuntu 20.04. + Fix several crashes and rendering issues. + Security fixes: CVE-2023-23529. ==== webkit2gtk3-soup2 ==== Version update (2.38.4 -> 2.38.5) Subpackages: WebKit2GTK-4.0-lang libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 webkit2gtk-4_0-injected-bundles - Update to version 2.38.5 (boo#1208328): + Fix large memory allocation when uploading content. + Fix scrolling after a history navigation with PSON enabled. + Always update the active uri of WebKitFrame. + Fix the build on Ubuntu 20.04. + Fix several crashes and rendering issues. + Security fixes: CVE-2023-23529. ==== yast2-packager ==== Version update (4.5.14 -> 4.5.15) - Ruby 3.2: Change a test to treat dir:///foo equal to dir:/foo (bsc#1207239) - 4.5.15

1 0

New Tumbleweed snapshot 20230216 released!
by Dominique Leuenberger 17 Feb '23

17 Feb '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: clamav (0.103.7 -> 0.103.8) dav1d (1.0.0 -> 1.1.0) git (2.39.1 -> 2.39.2) gnutls (3.7.8 -> 3.7.9) grub2 gstreamer-plugins-rs (0.9.8+git20230124.d9e9468 -> 0.10.1+git20230213.9cd68ff) kernel-source (6.1.10 -> 6.1.12) mozilla-nss (3.86 -> 3.87) mozjs102 (102.7.0 -> 102.8.0) plasma5-openSUSE tcl thunar util-linux util-linux-systemd === Details === ==== clamav ==== Version update (0.103.7 -> 0.103.8) Subpackages: libclamav9 libfreshclam2 - Update to 0.103.8 * CVE-2023-20032: Fixed a possible remote code execution vulnerability in the HFS+ file parser. Issue affects versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier. (bsc#1208363) * CVE-2023-20052: Fixed a possible remote information leak vulnerability in the DMG file parser. Issue affects versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier. (bsc#1208365) * Update vendored libmspack library to version 0.11alpha. - Package huge .html documentation in a separate subpackage. ==== dav1d ==== Version update (1.0.0 -> 1.1.0) - Update to version 1.1.0 * New function dav1d_get_frame_delay to query the decoder frame delay * Numerous fixes for strict conformity to the specs and samples * NEON and AVX-512 misc fixes and improvements * Partial AVX2 12bpc transform implementations * AVX-512 high bit-depth cdef_filter, loopfilter, itx * NEON z1/z3 optimization for 8bpc * SSSE3 z1 optimization for 8bpc ==== git ==== Version update (2.39.1 -> 2.39.2) Subpackages: git-core git-email git-gui git-svn git-web gitk perl-Git - git 2.39.2: * CVE-2023-22490: Using a specially-crafted repository, Git can be tricked into using its local clone optimization even when using a non-local transport boo#1208027 * CVE-2023-23946: a path outside the working tree can be overwritten as the user who is running "git apply" boo#1208028 ==== gnutls ==== Version update (3.7.8 -> 3.7.9) Subpackages: libgnutls-dane0 libgnutls30 libgnutls30-hmac - Update to 3.7.9: [bsc#1208143, CVE-2023-0361] * libgnutls: Fix a Bleichenbacher oracle in the TLS RSA key exchange. [GNUTLS-SA-2020-07-14, CVSS: medium][CVE-2023-0361] * Rebase gnutls-FIPS-140-3-references.patch ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - Refresh 0003-tpm2-resend-the-command-on-TPM_RC_RETRY.patch to handle the TPM2 responseCode correctly. ==== gstreamer-plugins-rs ==== Version update (0.9.8+git20230124.d9e9468 -> 0.10.1+git20230213.9cd68ff) - Add BuildRequires: zstd so it build in SLE/Leap now that the sources are compressed with zstd - Update to version 0.10.1+git20230213.9cd68ff: * rtpav1pay: Fix calculation of Leb128 size size to work correctly with streams from certain encoders. - Changes from version 0.10.0: * Fixed: - audiornnoise: Use correct value range for the samples - awss3sink: Treat stopping without EOS as an error for multipart upload - awss3hlssink: . Fix the name of the hlssink child element . Fix deadlock on EOS - dav1d: Various fixes to improve performance, to handle decoding errors more gracefully and to make sure all frames are output in the end - fmp4mux: Various fixes to fragment splitting behaviour, output formatting and header generation - gtk4: Various stability and rendering fixes - meson: Various fixes and improvements to the meson-based build system - ndi: provide non-Linux/macOS UNIX fallback for the soname - ndisrc: Use default channel mask for audio output to allow >2 channels to work better - rav1e: Correctly enable threading support - rtpav1: Various fixes to the payloader and depayloader to handle streams more correctly and to handle errors more cleanly - rtpav1depay: Set caps on the source pad - spotify: fix "start a runtime from within a runtime" with static link - textahead: fix previous buffers - textwrap: Don't panic on empty buffers - tttocea608: Don't fail if a GAP event contains no duration - webrtchttp: whipsink: construct TURN URL correctly - webrtcsink: fix panic on pre-bwe request error - whipsink: . Send ICE candidates together with the offer . Various cleanups and minor fixes * Added: - audiornnoise: Add voice detection threshold property - awss3hlssink: Add stats property - awss3sink: Add properties to set Content-Type and Content-Disposition - fmp4mux: . Add 'offset-to-zero' property . Add support for CMAF-style chunking, e.g. low-latency / LL HLS and DASH - fmp4mux/mp4mux: . Add support for muxing Opus, VP8, VP9 and AV1 streams . Make media/track timescales configurable - gtk4: Support for rendering GL textures on X11/EGL, X11/GLX, Wayland and macOS - hlssink3: Allow generating i-frame-only playlist - livesync: New element that alllows maintaining a contiguous live stream without gaps from a potentially unstable source. - mp4mux: New non-fragmented MP4 muxer element - spotifyaudiosrc: Support configurable bitrate - textahead: add settings to display previous buffers - threadshare: Introduce new ts-audiotestsrc - webrtcsink: Support nvv4l2vp9enc - whepsource: Add a WebRTC WHEP source element * Changed: - audiofx: Derive from AudioFilter where possible - dav1ddec: Lower rank to primary to allow usage of hardware decoders with higher ranks - fmp4mux: Only push fragment_offset if write-mfra is true to reduce memory usage - webrtcsink: . Make the turn-server property a turn-servers list . Move from async-std to tokio ==== kernel-source ==== Version update (6.1.10 -> 6.1.12) - Linux 6.1.12 (bsc#1012628). - Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions (bsc#1012628). - KVM: x86: Mitigate the cross-thread return address predictions bug (bsc#1012628). - x86/speculation: Identify processors vulnerable to SMT RSB predictions (bsc#1012628). - drm/i915: Fix VBT DSI DVO port handling (bsc#1012628). - drm/i915: Initialize the obj flags for shmem objects (bsc#1012628). - drm/i915: Move fd_install after last use of fence (bsc#1012628). - drm/amd/display: fix cursor offset on rotation 180 (bsc#1012628). - drm/amd/display: properly handling AGP aperture in vm setup (bsc#1012628). - drm/amdgpu/smu: skip pptable init under sriov (bsc#1012628). - drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini (bsc#1012628). - drm/amd/pm: bump SMU 13.0.7 driver_if header version (bsc#1012628). - drm/amdgpu: Add unique_id support for GC 11.0.1/2 (bsc#1012628). - drm/amd/pm: bump SMU 13.0.0 driver_if header version (bsc#1012628). - arm64: efi: Force the use of SetVirtualAddressMap() on eMAG and Altra Max machines (bsc#1012628). - Fix page corruption caused by racy check in __free_pages (bsc#1012628). - arm64: dts: meson-axg: Make mmc host controller interrupts level-sensitive (bsc#1012628). - arm64: dts: meson-g12-common: Make mmc host controller interrupts level-sensitive (bsc#1012628). - arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive (bsc#1012628). - rtmutex: Ensure that the top waiter is always woken up (bsc#1012628). - tracing: Fix TASK_COMM_LEN in trace event format file (bsc#1012628). - drm/amdgpu: Use the TGID for trace_amdgpu_vm_update_ptes (bsc#1012628). - powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch (bsc#1012628). - riscv: kprobe: Fixup misaligned load text (bsc#1012628). - riscv: Fixup race condition on PG_dcache_clean in flush_icache_pte (bsc#1012628). - nvdimm: Support sizeof(struct page) > MAX_STRUCT_PAGE_SIZE (bsc#1012628). - ceph: flush cap releases when the session is flushed (bsc#1012628). - drm/amd/pm: add SMU 13.0.7 missing GetPptLimit message mapping (bsc#1012628). - pinctrl: qcom: sm8450-lpass-lpi: correct swr_rx_data group (bsc#1012628). - clk: ingenic: jz4760: Update M/N/OD calculation algorithm (bsc#1012628). - cxl/region: Fix passthrough-decoder detection (bsc#1012628). - cxl/region: Fix null pointer dereference for resetting decoder (bsc#1012628). - usb: typec: altmodes/displayport: Fix probe pin assign check (bsc#1012628). - usb: core: add quirk for Alcor Link AK9563 smartcard reader (bsc#1012628). - btrfs: free device in btrfs_close_devices for a single device filesystem (bsc#1012628). - btrfs: simplify update of last_dir_index_offset when logging a directory (bsc#1012628). - selftests: mptcp: stop tests earlier (bsc#1012628). - selftests: mptcp: allow more slack for slow test-case (bsc#1012628). - mptcp: be careful on subflow status propagation on errors (bsc#1012628). - mptcp: do not wait for bare sockets' timeout (bsc#1012628). - net: USB: Fix wrong-direction WARNING in plusb.c (bsc#1012628). - cifs: Fix use-after-free in rdata->read_into_pages() (bsc#1012628). - pinctrl: intel: Restore the pins that used to be in Direct IRQ mode (bsc#1012628). - pinctrl: aspeed: Revert "Force to disable the function's signal" (bsc#1012628). - spi: dw: Fix wrong FIFO level setting for long xfers (bsc#1012628). - pinctrl: single: fix potential NULL dereference (bsc#1012628). - pinctrl: aspeed: Fix confusing types in return value (bsc#1012628). - pinctrl: mediatek: Fix the drive register definition of some Pins (bsc#1012628). - clk: microchip: mpfs-ccc: Use devm_kasprintf() for allocating formatted strings (bsc#1012628). - ASoC: topology: Return -ENOMEM on memory allocation failure (bsc#1012628). - ASoC: fsl_sai: fix getting version from VERID (bsc#1012628). - ASoC: tas5805m: add missing page switch (bsc#1012628). - ASoC: tas5805m: rework to avoid scheduling while atomic (bsc#1012628). - arm64: dts: mediatek: mt8195: Fix vdosys* compatible strings (bsc#1012628). - riscv: stacktrace: Fix missing the first frame (bsc#1012628). - ALSA: pci: lx6464es: fix a debug loop (bsc#1012628). - arm64: dts: rockchip: set sdmmc0 speed to sd-uhs-sdr50 on rock-3a (bsc#1012628). ... changelog too long, skipping 478 lines ... - commit 82ff25b ==== mozilla-nss ==== Version update (3.86 -> 3.87) Subpackages: libfreebl3 libfreebl3-hmac libsoftokn3 libsoftokn3-hmac mozilla-nss-certs mozilla-nss-tools - update to NSS 3.87 * bmo#1803226 - NULL password encoding incorrect * bmo#1804071 - Fix rng stub signature for fuzzing builds * bmo#1803595 - Updating the compiler parsing for build * bmo#1749030 - Modification of supported compilers * bmo#1774654 - tstclnt crashes when accessing gnutls server without a user cert in the database. * bmo#1751707 - Add configuration option to enable source-based coverage sanitizer * bmo#1751705 - Update ECCKiila generated files. * bmo#1730353 - Add support for the LoongArch 64-bit architecture * bmo#1798823 - add checks for zero-length RSA modulus to avoid memory errors and failed assertions later * bmo#1798823 - Additional zero-length RSA modulus checks - add man-pages to the tools package (boo#1208242) ==== mozjs102 ==== Version update (102.7.0 -> 102.8.0) - Update to version 102.8.0: + Various security fixes. + CVE-2023-25728: Content security policy leak in violation reports using iframes. + CVE-2023-25730: Screen hijack via browser fullscreen mode. + CVE-2023-25743: Fullscreen notification not shown in Firefox Focus. + CVE-2023-0767: Arbitrary memory write via PKCS 12 in NSS. + CVE-2023-25735: Potential use-after-free from compartment mismatch in SpiderMonkey. + CVE-2023-25737: Invalid downcast in SVGUtils::SetupStrokeGeometry. + CVE-2023-25738: Printing on Windows could potentially crash Firefox with some device drivers. + CVE-2023-25739: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext. + CVE-2023-25729: Extensions could have opened external schemes without user knowledge. + CVE-2023-25732: Out of bounds memory write from EncodeInputStream. + CVE-2023-25734: Opening local .url files could cause unexpected network loads. + CVE-2023-25742: Web Crypto ImportKey crashes tab. + CVE-2023-25744: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8. + CVE-2023-25746: Memory safety bugs fixed in Firefox ESR 102.8. ==== plasma5-openSUSE ==== Subpackages: plasma5-defaults-openSUSE plasma5-theme-openSUSE plasma5-workspace-branding-openSUSE sddm-theme-openSUSE - Require distribution-logos-openSUSE-icons ==== tcl ==== - bsc#1203982, tcl-interp-limit-time.patch: Fix a y2k38 problem in [interp limit -time] . ==== thunar ==== Subpackages: libthunarx-3-0 thunar-lang - Explicitly require the newer libpcre2 instead of libpcre; this fixes boo#1208260 ==== util-linux ==== Subpackages: libblkid1 libblkid1-32bit libfdisk1 libmount1 libmount1-32bit libsmartcols1 libuuid1 libuuid1-32bit util-linux-lang - Remove requires for adjtimex, which and time: this where wrongly implemented split provides we don't need anymore. - Remove pam_lastlog, not Y2038 safe, will be removed upstream. Additional tools update the files themself. - Readd hwclock.8 manual page. - Move permissions pre-require to correct package. - Remove install_info_prereq, we have no info pages. - clean up spec file, tag all the %if-endif to make it easy to read the file and try to simplify a bit the if-endif logic grouping by core, systemd and python. ==== util-linux-systemd ==== - Remove requires for adjtimex, which and time: this where wrongly implemented split provides we don't need anymore. - Remove pam_lastlog, not Y2038 safe, will be removed upstream. Additional tools update the files themself. - Readd hwclock.8 manual page. - Move permissions pre-require to correct package. - Remove install_info_prereq, we have no info pages. - clean up spec file, tag all the %if-endif to make it easy to read the file and try to simplify a bit the if-endif logic grouping by core, systemd and python.

1 0

Tumbleweed - Review of the week 2023/07
by Dominique Leuenberger 17 Feb '23

17 Feb '23

Dear Tumbleweed users and hackers, Week 7 of the year – 7 days have passed since the last review, BUT we only released 6 snapshots since then. The reason is only timing though: the 7th snapshot is still in QA and, looking at the current results, is likely to be published later today. So no need to be worried. This review will cover snapshots 0210…0215. The most exciting changes delivered during this week were: * Mesa 22.3.5 * PostgreSQL 15.2 * XFCE 4.18.2 * Node.JS 19.6.0 * KDE Frameworks 5.103.0 * KDE P,lasma 5.27.0 * NetworkManager 1.42.0 * gnome-shell & mutter 43.3 * Rust 1.67.1 Most of the stagings we currently have are longer-living and seem to take some more effort. Everybody is invited to help push them forward. The most relevant changes that are currently staged include: * openSSL 3.0.8 in Staging:A (regression detected) * Binutils 2.40 in Staging:B – causes a few builds to fail * Switch to Ruby 3.2 in Staging:H – YaST as the main consumer is almost ready. Almost! * Python 3.11 module enablement in Staging:M – Builds look good so far, 1 build cycle introduced * Gcc 13 as distro compiler in Staging:Gcc7 * In Staging:L we just collect random things breaking other stuff, like e.g: - gpg2 2.4.0 – breaks gpgme:qt - Podman 4.4.1: fails the openQA tests * Samba 4.17.5 * cURL 7.88.0 As a reminder for the curious ones: the Staging dashboard can be found at https://build.opensuse.org/staging_workflows/openSUSE:Factory (requires login to the open build service) Cheers, Dominique

1 0

Tumbleweed update: libopenssl-3-devel = 3.0.7 missing?
by Mailings 17 Feb '23

17 Feb '23

Hi folks I was about to "zypper dup" from Tumbleweed 20221119 to 20230214 and got the following output: --------------------------- Problem: das zu installierende libopenssl-devel-3.0.7-1.1.noarch erfordert 'libopenssl-3-devel = 3.0.7', aber diese Anforderung kann nicht bereitgestellt werden Nicht installierbare Anbieter: libopenssl-3-devel-3.0.7-3.1.i586[https-download.opensuse.org-030d62a3] libopenssl-3-devel-3.0.7-3.1.x86_64[https-download.opensuse.org-030d62a3] libopenssl-3-devel-3.0.7-3.1.i586[https-download.opensuse.org-cbd627cc] libopenssl-3-devel-3.0.7-3.1.x86_64[https-download.opensuse.org-cbd627cc] libopenssl-3-devel-3.0.7-3.1.i586[repo-oss] libopenssl-3-devel-3.0.7-3.1.x86_64[repo-oss] Lösung 1: Folgende Aktionen werden ausgeführt: veraltetes libopenssl-1_1-devel-1.1.1s-1.1.x86_64 beibehalten veraltetes libopenssl1_1-1.1.1s-1.1.x86_64 beibehalten veraltetes libopenssl-devel-1.1.1s-1.1.noarch beibehalten veraltetes openssl-1.1.1s-1.1.noarch beibehalten veraltetes openssl-1_1-1.1.1s-1.1.x86_64 beibehalten Lösung 2: Folgende Aktionen werden ausgeführt: veraltetes libopenssl1_1-1.1.1s-1.1.x86_64 beibehalten veraltetes openssl-1.1.1s-1.1.noarch beibehalten veraltetes openssl-1_1-1.1.1s-1.1.x86_64 beibehalten veraltetes libopenssl-1_1-devel-1.1.1s-1.1.x86_64 beibehalten veraltetes libopenssl-devel-1.1.1s-1.1.noarch beibehalten Lösung 3: Folgende Aktionen werden ausgeführt: veraltetes libopenssl1_1-1.1.1s-1.1.x86_64 beibehalten veraltetes openssl-1.1.1s-1.1.noarch beibehalten veraltetes openssl-1_1-1.1.1s-1.1.x86_64 beibehalten Lösung 4: Deinstallation von libopenssl-1_1-devel-1.1.1s-1.1.x86_64 Lösung 5: Deinstallation von libopenssl-devel-1.1.1s-1.1.noarch Lösung 6: libopenssl-devel-3.0.7-1.1.noarch durch Ignorieren einiger Abhängigkeiten brechen -------------- I'm not compiling stuff so probably I could go for option 4 which run through w/o further inconsistencies but I wonder what made this issue pop up now after more than 2 years of updates without any issues? Assuming devel rpms are not installed by default is there a way of figuring out "who" brought that package in initially? br Juergen

5 4

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 16 Feb '23

16 Feb '23

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have had problems for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - glucat: Fails to build - janus-gateway: Fails to build - lalframe: Fails to build - lalmetaio: Fails to build - lalsimulation: Fails to build - newsboat: Fails to build - powerman: Fails to build - python-acoular: Fails to build - python-arviz: Fails to build - python-asyncclick: Fails to build - python-devpi-client: Fails to build - python-devpi-common: Fails to build - python-devpi-server: Fails to build - python-efilter: Fails to build - python-flake8-pyi: Fails to build - python-geomdl: Fails to build - python-holoviews: Fails to build - python-http-ece: Fails to build - python-intake: Fails to build - python-ipydatawidgets: Fails to build - python-mizani: Fails to build - python-openwrt-luci-rpc: Fails to build - python-oslo.policy: Fails to build - python-oslo.versionedobjects: Fails to build - python-physt: Fails to build - python-pyUSID: Fails to build - python-pydata-sphinx-theme: Fails to build - python-pypipegraph: Fails to build - python-pyreadstat: Fails to build - python-pyssim: Fails to build - python-pytest-flake8: Fails to build - python-pytools: Fails to build - python-quantum-blackbird: Fails to build - python-sphinxcontrib-autoprogram: Fails to build - python-tables: Fails to build - python-thewalrus: Fails to build - weblate: Fails to build - yara: Fails to build Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

1 0

Fwd: TW 20230131 - breaks xrdp because of pam changes
by Raphael Bertoche 16 Feb '23

16 Feb '23

Hi there, I had this issue and the cause was that /etc/pam.d/xrdp-sesman was gone. I found an old one from a backup and after putting it back in place the issue was solved Hope it helps. Raphael Bertoche

5 9

New Tumbleweed snapshot 20230215 released!
by Dominique Leuenberger 16 Feb '23

16 Feb '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: GraphicsMagick (1.3.39 -> 1.3.40) gnome-shell (43.2 -> 43.3) gnome-terminal (3.46.7 -> 3.46.8) harfbuzz (6.0.0 -> 7.0.0) mutter (43.2 -> 43.3) plasma5-desktop systemd-presets-branding-MicroOS (20230130 -> 20230214) vte (0.70.2 -> 0.70.3) === Details === ==== GraphicsMagick ==== Version update (1.3.39 -> 1.3.40) Subpackages: libGraphicsMagick++-Q16-12 libGraphicsMagick-Q16-3 libGraphicsMagick3-config - version update to 1.3.40 * GetMagickGeometry(): Fix a scaling issue where dimensions could be scaled down to zero. * PCD: Handle writing image with a dimension of 1. * PNG: When writing, use lower-case raw profile identifiers (e.g. 'Raw profile type xmp') because exiftool expects that. * SUN: The sense of monochrome images was inverted. Fix scanline size calculation. * WPG: Fix 20-year old bug in WPG header reading. New Features: * JXL: Decode and log extra channel information. This information is not yet used. * PCX and DCX: Support writing uncompressed format (use -compress none for no compression). * Added IM1, IM8, and IM24 magick aliases for the Sun Raster format since those are the historically correct extensions. API Updates: * AppendImageToList() now updates the image list pointer to be the image which was just added. Use GetFirstImageInList() when the pointer to the first image in the list is needed. ==== gnome-shell ==== Version update (43.2 -> 43.3) Subpackages: gnome-extensions gnome-shell-calendar gnome-shell-lang - Update to version 43.3: + Ensure quick settings toggles align with the pixel grid + Lower OOM score of gnome-shell process + Fix incomplete device list in volume menus + Fixed crash + Plugged leak + Misc. bug fixes and cleanups + Updated translations. ==== gnome-terminal ==== Version update (3.46.7 -> 3.46.8) Subpackages: gnome-shell-search-provider-gnome-terminal gnome-terminal-lang nautilus-extension-terminal - Update to version 3.46.8: * all: Make env filtering uniform * build: Use built-in mandir option * client: - legacy: Drop debug messages - Transport XDG_ACTIVATION_TOKEN to the server * metainfo: Add launchable info * prefs: Fix default terminal check * screen: Use correct environment filter * Updated translations. ==== harfbuzz ==== Version update (6.0.0 -> 7.0.0) Subpackages: libharfbuzz-gobject0 libharfbuzz-icu0 libharfbuzz-subset0 libharfbuzz0 libharfbuzz0-32bit typelib-1_0-HarfBuzz-0_0 - Update to version 7.0.0: + New hb-paint API that is designed mainly to paint COLRv1 glyphs, but can be also used as a unified API to paint any of the glyph representations supported by HarfBuzz (B/W outlines, color layers, or color bitmaps). + New hb-cairo API for integrating with cairo graphics library. This is provided as a separate harfbuzz-cairo library. + Support for instancing CFF2 table + Support font emboldening + Support feature ranges with AAT shaping + Experimental support to cubic curves in glyf table + Various subsetter improvements + Various documentation improvements + Significantly reduced memory use during shaping + Greatly reduced memory use during subsetting CFF table + New command line utility, hb-info, for querying various font information + New hb-shape/hb-view options: --glyphs, --color-palette, - -font-bold, --font-grade, and --named-instance + Miscellaneous fixes and improvements - harfbuzz-CVE-2023-25193.patch dropped in favor of upstream consensus fix ==== mutter ==== Version update (43.2 -> 43.3) Subpackages: mutter-lang - Update to version 43.3: + Skip resize effects for tiled windows during user grabs + Disable direct scanout during drag-n-drop operations + Ignore unmapped subsurfaces in direct scanout check + Fix cursor disappearing over windows during grabs + Fix pointer constrains with subsurfaces + Make wl_output mode independent of the orientation + Improve focus handling on workspace switches + Fix cursor position in window screencasts + Do not require a physical device to update pointer visibility + Fix initialization of keyboard accessibility + Fix freeze when crossing monitors under some conditions + Don't allow window activation to break global grabs + Fixed crashes + Plugged leak + Misc. bug fixes and cleanups + Updated translations. ==== plasma5-desktop ==== Subpackages: plasma5-desktop-emojier plasma5-desktop-lang - Don't try to delete the DBus interfaces folder on s390x. There's nothing to delete on this arch. ==== systemd-presets-branding-MicroOS ==== Version update (20230130 -> 20230214) - Correct spelling of transactional-update-notifier.service in 50-default-MicroOS-user.preset - 20230214 ==== vte ==== Version update (0.70.2 -> 0.70.3) Subpackages: libvte-2_91-0 typelib-1_0-Vte-2_91 vte-lang - Update to version 0.70.3: + widget: - Ensure the ringview is updated before converting coordinates - gtk4: Translate control+key events when using multiple layouts - Use correct end row for getting the selected text - Drop ddb2c8a.patch: Fixed upstream.

1 0

Announcing D-Installer 0.7
by Imobach Gonzalez Sosa 16 Feb '23

16 Feb '23

Hi all, We have released a new version of D-Installer which, among other things, includes: * Many UI fixes and improvements, including a hamburger menu. * Validation and error reporting of the software proposal. * Browsing and downloading of YaST2 logs. * Use of our a dedicated bus apart from the system one. You can find the full announcement including all the changes in our blog: https://yast.opensuse.org/blog/2023-02-16/announcing-d-installer-0-7 Regards, Imo

1 0

Any opie users still left?
by Marcus Meissner 16 Feb '23

16 Feb '23

Hi folks, We are looking for obsolete software, and one piece is "opie". opie is one of the first ever one time password (OTP) methods, but it largely has been replaced by other MFA methods these days. Is anyone using it, or is anyone aware of users still? Ciao, Marcus

2 1