August 2023 - openSUSE Factory - openSUSE Mailing Lists

Re: [RFC] Switching to drop-in files (systemd)
by Patrick Schaaf 14 Aug '23

14 Aug '23

You wrote: > Does not look like journalctl can do it. I know that my override is working because it is for the max retention of the journal and the older logs are purged according to my schedule. Try this: systemd-analyze cat-config /etc/systemd/journald.conf best regards Patrick

2 1

New Tumbleweed snapshot 20230813 released!
by Dominique Leuenberger 14 Aug '23

14 Aug '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: gdbm python-pexpect python-pyzmq (25.0.2 -> 25.1.1) rpm telepathy-logger === Details === ==== gdbm ==== Subpackages: gdbm-lang libgdbm6 libgdbm_compat4 - Fix bsc#1209583, gdbm_load and gdbm_dump receive a SEGFAULT if run without arguments bsc1209583.patch ==== python-pexpect ==== - Fix failing test when no alias in bash is defined * add fix-fail-no-alias.patch ==== python-pyzmq ==== Version update (25.0.2 -> 25.1.1) - update to version 25.1.1: * Changes: + Allow Cython 0.29.35 to build Python 3.12 wheels (no longer require Cython 3) * Bugs fixed: + Fix builds on Solaris by including generated platform.hpp + Cleanup futures in Socket.poll() that are cancelled and never return + Fix builds with -j when numpy is present in the build env - update to version 25.1.0: * Enhancements: + Include address in error message when bind/connect fail. * Packaging changes: + Fix inclusion of some test files in source distributions. + Add Cython as a build-time dependency in build-system.requires metadata, following current recommendations of the Cython maintainers. We still ship generated Cython sources in source distributions, so it is not a strict dependency for packagers using --no-build-isolation, but pip will install Cython as part of building pyzmq from source. This makes it more likely that past pyzmq releases will install on future Python releases, which often require an update to Cython but not pyzmq itself. For Python 3.12, Cython >=3.0.0b3 is required. ==== rpm ==== Subpackages: librpmbuild9 - add remove-awk-dependency.patch to be able to drop awk dependency from containers ==== telepathy-logger ==== Subpackages: libtelepathy-logger3 typelib-1_0-TelepathyLogger-0_2 - Split the gsettings schema to a separate package + The telepathy-logger library has an hard dependency on the schema, and if it's missing (before this change it has been part of the telepathy-logger daemon) it will cause the loading application to crash. + The library does now require the schema package - Drop dangling %glib2_gsettings_schema_requires macro.

1 0

New Tumbleweed snapshot 20230812 released!
by Dominique Leuenberger 13 Aug '23

13 Aug '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: GraphicsMagick MozillaFirefox (115.0.3 -> 116.0.2) NetworkManager (1.42.8 -> 1.44.0) amavisd-new bluez (5.66 -> 5.68) catfish (4.16.4 -> 4.18.0) dcraw dracut (059+suse.488.g81715832 -> 059+suse.491.g87f19c22) glibc (2.37 -> 2.38) gspell (1.12.1 -> 1.12.2) java-11-openjdk libcloudproviders (0.3.1 -> 0.3.2) libgweather4 (4.2.0 -> 4.3.2) liborcus opensuse-welcome (0.1.9+git.0.66be0d8 -> 0.1.9+git.35.4b9444a) perl-Image-ExifTool (12.64 -> 12.65) signon (8.60 -> 8.61) systemd (253.7 -> 253.8) === Details === ==== GraphicsMagick ==== Subpackages: libGraphicsMagick++-Q16-12 libGraphicsMagick-Q16-3 libGraphicsMagick3-config - add strlcpy-wrong-sizing.patch: fix incorrect usages of strlcpy and strlcat detected by glibc 2.38's fortify ==== MozillaFirefox ==== Version update (115.0.3 -> 116.0.2) Subpackages: MozillaFirefox-translations-common - Mozilla Firefox 116.0.2 * fixes for other platforms - Fix OOM when linking on 32-bit - Mozilla Firefox 116.0.1 * fixes for other platforms - ship vaapitest binary for supported archs - re-enable ppc64le - ship v4l2test binary for supported archs - drop obsolete mozilla-bmo1775202.patch - Mozilla Firefox 116.0 * https://www.mozilla.org/en-US/firefox/116.0/releasenotes/ MFSA 2023-29 (bsc#1213746) * CVE-2023-4045 (bmo#1833876) Offscreen Canvas could have bypassed cross-origin restrictions * CVE-2023-4046 (bmo#1837686) Incorrect value used during WASM compilation * CVE-2023-4047 (bmo#1839073) Potential permissions request bypass via clickjacking * CVE-2023-4048 (bmo#1841368) Crash in DOMParser due to out-of-memory conditions * CVE-2023-4049 (bmo#1842658) Fix potential race conditions when releasing platform objects * CVE-2023-4050 (bmo#1843038) Stack buffer overflow in StorageManager * CVE-2023-4051 (bmo#1821884) Full screen notification obscured by file open dialog * CVE-2023-4052 (bmo#1824420) File deletion and privilege escalation through Firefox uninstaller * CVE-2023-4053 (bmo#1839079) Full screen notification obscured by external program * CVE-2023-4054 (bmo#1840777) Lack of warning when opening appref-ms files * CVE-2023-4055 (bmo#1782561) Cookie jar overflow caused unexpected cookie jar state * CVE-2023-4056 (bmo#1820587, bmo#1824634, bmo#1839235, bmo#1842325, bmo#1843847) Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14 * CVE-2023-4057 (bmo#1841682) Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, and Thunderbird 115.1 * CVE-2023-4058 (bmo#1819160, bmo#1828024) Memory safety bugs fixed in Firefox 116 - require NSS 3.91 - remove obsolete mozilla-fix-top-level-asm.patch - re-enable LTO ==== NetworkManager ==== Version update (1.42.8 -> 1.44.0) Subpackages: NetworkManager-bluetooth NetworkManager-lang NetworkManager-pppoe NetworkManager-tui NetworkManager-wwan libnm0 typelib-1_0-NM-1_0 - Update to version 1.44.0: + Introduce a new "link" setting that holds properties related to the kernel link such as "tx-queue-length", "gso-max-size", "gso-max-segments", "gro-max-size". + Support sending a DHCPv6 prefix delegation hint via the "ipv6.dhcp-pd-hint" connection property. + Support new bond options: "arp_missed_max", "lacp_active", "ns_ip6_target". + Add new "initial-eps-bearer-configure" and "initial-eps-bearer-apn" properties in the GSM setting. + Setting "connection.stable-id=default${CONNECTION}" changed behavior to be identical to the built-in default value when the stable-id is not set. + Add a "[keyfile].rename" option to NetworkManager.conf to force renaming profiles on disk when their name changes. + The ifcfg-rh plugin is deprecated; it will only receive bugfixes and no new features. A warning is emitted the log when a connection in ifcfg-rh format is found. + To automatically migrate existing ifcfg-rh connections to the keyfile format, a new configuration option "main.migrate-ifcfg-rh" is provided. Migration is disabled by default, but the default value can be changed at build time via "--with-config-migrate-ifcfg-rh-default=yes". + When configuring hostnames in non-public TLD (like "example.local"), use the TLD as default search domain instead of the full hostname. + Always apply DNS options from the [global-dns] configuration section + The NetworkManager daemon now acquires the D-Bus name only after populating the D-Bus tree. This can add a delay during startup but it is required to avoid race conditions with other services depending on NM. + Add a "version-id" argument to the Update2() D-Bus call to guard against concurrent modifications of profiles. + Don't use tentative IPv6 addresses to resolve the system hostname via DNS. + Track the number of autoconnect retries left for each device and connection. Previously it was tracked only per connection and this lead to unexpected behaviors in case of multiconnect profiles. + Set VLAN filtering options on bridge via netlink instead of sysfs. + nm-cloud-setup now supports IMDSv2 on Amazon EC2. + nmtui now allows to enable or disable Wi-Fi and WWAN radios. + Honor ignore-carrier=no for bond/bridge/team devices. + Add version mismatch warning when running nmcli commands. - Rebase patches with quilt. ==== amavisd-new ==== Subpackages: amavisd-new-docs - Package failed to rebuild on Perl version changes due to missing %{perl_requires} ==== bluez ==== Version update (5.66 -> 5.68) Subpackages: bluez-auto-enable-devices bluez-cups bluez-zsh-completion libbluetooth3 - 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch be removed by Timo Jyrinki when updating to 5.68. I saw some reasons: - Upstream didn't take this patch: https://www.spinics.net/lists/linux-bluetooth/msg40136.html - Fedora also marked this patch in bluez.spec since bluez-5.68-2.fc39 https://src.fedoraproject.org/rpms/bluez/blob/2b133d795f4f823c8b22ef5a07569… We didn't put any bug number of this patch when it be introduced to bluez.spec since Nov 23, 2021. So, let's remove this patch unless upstream or Fedora add it back. - update to 5.68 * Fix issue with A2DP and handling of Transport.Acquire. * Fix issue with BAP and initiating QoS and Enable procedures. * Fix issue with BAP and detaching streams when PAC is removed. * Fix issue with BAP and reading all instances of PAC. * Fix issue with BAP and not being able to reconfigure. * Fix issue with BAP and transport configuration changes. * Fix issue with BAP and handling unexpected disconnect. * Fix issue with GATT and not removing pending services. * Fix issue with GATT and client ready handling. * Fix issue with handling fallback to transient hostname. * Add support for SecureConnections configuration option. * Add support for Mesh Remove Provisioning. * Add support for Mesh Private Beacons. - Remove patches that are not needed with the new upstream. ==== catfish ==== Version update (4.16.4 -> 4.18.0) Subpackages: catfish-lang - Update to version 4.18.0 * Filters: Add Archives, Other, update Apps * Use Gio to open files, fix "no default app" issue * Add symlink emblem to thumbnails in thumbnail mode * config: Prefer plocate over mlocate if available * window: Avoid IndexError on right click when selection is empty * Create shared filetype lists for searching and filtering * Ensure site-packages directory is prepended to sys.path * Fix double border between sidebar and results area * window: Fix and refactor new_column() * window: Fix markup warnings in thumbnail view * Fix GtkBuilder warnings * Revert "Suppress the various GTK warnings GtkBuilder outputs" * Fix crash and translations when install prefix != /usr * Update `.gitignore` * Remove generated file po/catfish.pot * Performance improvements (fix #79) * Translation Updates - Refresh 0001-Force-disable-Zeitgeist-support.patch - Remove _service file ==== dcraw ==== Subpackages: dcraw-lang - add dcraw-glibc-2.38.patch to fix prototype clash on memmem with glibc 2.38+ ==== dracut ==== Version update (059+suse.488.g81715832 -> 059+suse.491.g87f19c22) - Update to version 059+suse.491.g87f19c22: * fix(dracut-install): protect against broken links pointing to themselves * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081) ==== glibc ==== Version update (2.37 -> 2.38) Subpackages: glibc-32bit glibc-devel glibc-extra glibc-lang glibc-locale glibc-locale-base nscd - Update to glibc 2.38 * When C2X features are enabled and the base argument is 0 or 2, the following functions support binary integers prefixed by 0b or 0B as input * PRIb*, PRIB* and SCNb* macros from C2X have been added to <inttypes.h>. * printf-family functions now support the wN format length modifiers for arguments of type intN_t, int_leastN_t, uintN_t or uint_leastN_t and the wfN format length modifiers for arguments of type int_fastN_t or uint_fastN_t, as specified in draft ISO C2X * A new tunable, glibc.pthread.stack_hugetlb, can be used to disable Transparent Huge Pages (THP) in stack allocation at pthread_create * Vector math library libmvec support has been added to AArch64 * The strlcpy and strlcat functions have been added * CVE-2023-25139: When the printf family of functions is called with a format specifier that uses an <apostrophe> (enable grouping) and a minimum width specifier, the resulting output could be larger than reasonably expected by a caller that computed a tight bound on the buffer size - Enable build with _FORTIFY_SOURCE - glibc-2.3.90-langpackdir.diff: avoid reference to __strcpy_chk - iconv-error-verbosity.patch: iconv: restore verbosity with unrecognized encoding names (BZ #30694) - printf-grouping.patch, strftime-time64.patch, getlogin-no-loginuid.patch, fix-locking-in-_IO_cleanup.patch, gshadow-erange-rhandling.patch, system-sigchld-block.patch, gmon-buffer-alloc.patch, check-pf-cancel-handler.patch, powerpc64-fcntl-lock.patch, realloc-limit-chunk-reuse.patch, dl-find-object-return.patch; Removed ==== gspell ==== Version update (1.12.1 -> 1.12.2) Subpackages: gspell-lang libgspell-1-2 typelib-1_0-Gspell-1 - Update to version 1.12.2: + Small code maintenance: don't use g_slice_*(). ==== java-11-openjdk ==== Subpackages: java-11-openjdk-headless - Added patch: * reproducible-javadoc-timestamp.patch + use SOURCE_DATE_EPOCH in javadoc and make the javadoc generation more reproducible ==== libcloudproviders ==== Version update (0.3.1 -> 0.3.2) - Update to version 0.3.2: + No upstream changes provided. ==== libgweather4 ==== Version update (4.2.0 -> 4.3.2) Subpackages: gweather4-data libgweather-4-0 libgweather4-lang typelib-1_0-GWeather-4_0 - Update to version 4.3.2: + Fix fallback metric unit detection logic + Documentation fixes + Performance improvements for nearest location lookups + Location database changes + Updated translations. ==== liborcus ==== - Removed patches: * liborcus-filesystem.patch * liborcus-tests.patch + reworked in order to send them upstream - Added patches: * 0001-Possibility-to-build-against-a-host-of-filesystem-im.patch * 0003-Allow-running-tests-with-python-3.4.patch * 0002-Allow-using-older-boost-filesystem.patch + split into chunks per topic so that upsteam can decide what to do ==== opensuse-welcome ==== Version update (0.1.9+git.0.66be0d8 -> 0.1.9+git.35.4b9444a) - Update to version 0.1.9+git.35.4b9444a: * panellayouter: use QTemporaryFile for applyLayout() (bsc#1213708, CVE-2023-32184). * Translation updates. ==== perl-Image-ExifTool ==== Version update (12.64 -> 12.65) Subpackages: exiftool perl-File-RandomAccess - Update to 12.65: * Added a new QuickTime Keys tag * Added a new CanonModelID * Added a new Canon LensType * Added number in brackets to converted Samsung MCCData value * Decode a number of new Sony tags * Decode a few new FlashPix tags (github #217) * Improved decoding of Nikon Z9 firmware 4.0 tags * Improved parsing of PDF:Keywords to support semicolon-separated lists * Enhanced -api option to show list of available options if no argument is provided * Lowered priority of IFD1 tags in ARW images so IFD0/SubIFD take precedence * Changed QuickTime tag names for atID (AlbumTitleID to ArtistID) and plID (PlayListID to AlbumID) (github issue #216), and added cmID (ComposerID) * Changed Apple:MediaGroupUUID tag name back to ContentIdentifier * Patched the -d option to handle the %s format code internally when writing (avoids problems due to inconsistent behaviour of this format code in the strptime function on different systems) * Patched patch of version 12.32 to restore ability to read from named pipes * Fixed bug which could cause a hang when processing a corrupt BigTIFF image * Fixed document number for auxiliary image metadata in HEIC files * Fixed misspelt Apple tag name * API Changes: + Added AvailableOptions method ==== signon ==== Version update (8.60 -> 8.61) Subpackages: libsignon-qt5-1 signon-plugins signond signond-libs - Update to 8.61 * Port away from QHash::unite * Don't emit QObject::destroyed() within Identity::destroy() * Build: remove unnecessary qmake options * Don't use -fno-rtti * Run test script with Busybox compatible mktemp * Fix typos in logs * Tests: add missing parameter to mkdir command * Fix deprecation warning * signond: register the adaptors in SignonDaemonAdaptor * signond: get appId of peer in SignonIdentityAdapter * signond: add Error class * signond: add ErrorAdaptor class * signond: use ErrorAdaptor in SignonSessionCore * signond: reduce usage of D-Bus in SignonIdentity class * signond: introduce PeerContext class * signond: reduce D-Bus usage in SignonAuthSession * signond: register the adaptors, not the object itself * signond: destroy adapter when Identity gets unregistered * Fix Unicode $HOME dir - Drop patch, merged upstream: * 0001-Don-t-use-fno-rtti.patch - Drop the unneeded baselibs.conf ==== systemd ==== Version update (253.7 -> 253.8) Subpackages: libsystemd0 libsystemd0-32bit libudev1 systemd-32bit systemd-container systemd-coredump systemd-lang udev - Import commit fcdb2dd2c921db3c6b7c28465dbda314f4469d17 (merge of v253.8) For a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/2dac0aff9ced1eca0cd11c24e264b33…

1 0

New Tumbleweed snapshot 20230811 released!
by Dominique Leuenberger 12 Aug '23

12 Aug '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: liborcus libsemanage nodejs20 (20.3.1 -> 20.5.1) openSUSE-repos-Tumbleweed (20230804.41e41a9 -> 20230810.a7534f6) python-semanage python311 python311-core qtkeychain-qt5 (0.13.2 -> 0.14.1) re2c (3.0 -> 3.1) salt virtualbox virtualbox-kmp xen (4.17.1_06 -> 4.17.2_02) xz (5.4.3 -> 5.4.4) yast2-country (4.6.2 -> 4.6.3) === Details === ==== liborcus ==== - Clean up the spec file and require gcc-c++ >= 7, since that is the first version that supports C++17 - Run tests on all distributions and architectures * Allow disabling them on command line by specifying "--without tests" - Changed patch: * no-std-filesystem.patch -> liborcus-filesystem.patch + rework the patch to detect std::filesystem, std::experimental::filesystem and boost::filesystem (in that order, and use them if found) - Added patch: * liborcus-tests.patch + fix tests on all platforms + do not use C++20 features with the boost::filesystem::directory_iterator + do not assume that pathlib integrates seamlessly with open and do not use f-string formating, both being python 3.6+ features ==== libsemanage ==== Subpackages: libsemanage-conf libsemanage-migrate-store libsemanage2 - Add _multibuild to define additional spec files as additional flavors. Eliminates the need for source package links in OBS. - Add -ffat-lto-objects to CFLAGS to prevent rpmlint errors because of LTO - Enable LTO now (boo#1138812). ==== nodejs20 ==== Version update (20.3.1 -> 20.5.1) Subpackages: npm20 - Update to version 20.5.1: * (CVE-2023-32002, bsc#1214150): Policies can be bypassed via Module._load (High) * (CVE-2023-32558, bsc#1214155): process.binding() can bypass the permission model through path traversal (High) * (CVE-2023-32004, bsc#1214152): Permission model can be bypassed by specifying a path traversal sequence in a Buffer (High) * (CVE-2023-32006, bsc#1214156): Policies can be bypassed by module.constructor.createRequire (Medium) * (CVE-2023-32559, bsc#1214154): Policies can be bypassed via process.binding (Medium) * (CVE-2023-32005, bsc#1214153): fs.statfs can bypass the permission model (Low) * (CVE-2023-32003, bsc#1214151): fs.mkdtemp() and fs.mkdtempSync() can bypass the permission model (Low) - Changes in 20.5.0: * events: allow safely adding listener to abortSignal * fs: add a fast-path for readFileSync utf-8 * test_runner: add shards support - Changes in 20.4.0: * tls: add ALPNCallback server option for dynamic ALPN negotiation * adds support for ECMAScript Explicit Resource Management * adds Mock Timer support to test module For details see, https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V20.md#20… versioned.patch: refreshed ==== openSUSE-repos-Tumbleweed ==== Version update (20230804.41e41a9 -> 20230810.a7534f6) - Update to version 20230810.a7534f6: * Disable NVIDIA pkg building on LeapMicro. Fixes #34 PM confirmed that NVIDIA related deployments are expected to have all drivers/tools inside of container. * Fix incorrect with_nvidia usage ==== python-semanage ==== - Add _multibuild to define additional spec files as additional flavors. Eliminates the need for source package links in OBS. - Add -ffat-lto-objects to CFLAGS to prevent rpmlint errors because of LTO - Enable LTO now (boo#1138812). ==== python311 ==== Subpackages: python311-curses python311-dbm - restrict PEP668 to ALP/Tumbleweed - add externally_managed.in to label this build as PEP-668 managed ==== python311-core ==== Subpackages: libpython3_11-1_0 python311-base - restrict PEP668 to ALP/Tumbleweed - add externally_managed.in to label this build as PEP-668 managed ==== qtkeychain-qt5 ==== Version update (0.13.2 -> 0.14.1) Subpackages: libqt5keychain1 libqt5keychain1-lang - Update to 0.14.1: * Many build system fixes and build fixes for recent Qt 6 releases * Add QtQuick client example * Added Dutch translation * Add API to check whether a secure backend is available at all * Export QKeychain::isAvailable() to make it usable in a shared build * Protect against creating the QtKeychain::QtKeychain alias target twice - Drop patch, merged upstream: * 0001-Define-a-poper-exported-CMake-target-instead-of-intr.patch - Add missing dependency to the -devel packages ==== re2c ==== Version update (3.0 -> 3.1) - Update to 3.1: * new options --leftmost-captures option and re2c:leftmost-captures on capturing groups * new syntax (! ...) for non-capturing groups * It is also possible to flip defaults with --invert-captures option or re2c:invert_captures configuration, so that (...) is a capturing group and (! ...) is a non-capturing one * TDFA paper and removal of experimental algorithms * internal codebase , build system and CI improvements see details at https://re2c.org/releases/release_notes.html#release-3-1 ==== salt ==== Subpackages: python3-salt salt-master salt-minion salt-transactional-update - Create minion_id with reproducible mtime - Fix detection of Salt codename by "salt_version" execution module - Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844) - Fix the regression of user.present state when group is unset (bsc#1212855) - Fix zypper repositories always being reconfigured - Fix utf8 handling in 'pass' renderer and make it more robust - Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994) - Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591) - tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741) - Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517) - Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754) - Avoid conflicts with Salt dependencies versions (bsc#1211612) - Added: * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch * fix-the-regression-of-user.present-state-when-group-.patch * make-master_tops-compatible-with-salt-3000-and-older.patch * avoid-conflicts-with-dependencies-versions-bsc-12116.patch * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch * fix-regression-multiple-values-for-keyword-argument-.patch * zypper-pkgrepo-alreadyconfigured-585.patch * mark-salt-3006-as-released-586.patch * fix-some-issues-detected-in-salt-support-cli-module-.patch * define-__virtualname__-for-transactional_update-modu.patch * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch ==== virtualbox ==== - Fix build for kernel 6.5 Add file "fixes_for_6.5.patch" Reworked patches for various Leap versions: Added file "fixes_for_leap.patch" Deleted file "fixes_for_leap15.2.patch" Deleted file "fixes_for_leap15.3.patch" Deleted file "fixes_for_leap15.4.patch" Deleted file "fixes_for_leap15.5.patch" ==== virtualbox-kmp ==== - Fix build for kernel 6.5 Add file "fixes_for_6.5.patch" Reworked patches for various Leap versions: Added file "fixes_for_leap.patch" Deleted file "fixes_for_leap15.2.patch" Deleted file "fixes_for_leap15.3.patch" Deleted file "fixes_for_leap15.4.patch" Deleted file "fixes_for_leap15.5.patch" ==== xen ==== Version update (4.17.1_06 -> 4.17.2_02) Subpackages: xen-libs xen-tools xen-tools-domU - bsc#1212684 - xentop fails with long interface name 64d33a57-libxenstat-Linux-nul-terminate-string.patch - Update to Xen 4.17.2 bug fix release (bsc#1027519) xen-4.17.2-testing-src.tar.bz2 * No upstream changelog found in sources or webpage - bsc#1214082 - VUL-0: CVE-2023-20569: xen: x86/AMD: Speculative Return Stack Overflow (XSA-434) - bsc#1214083 - VUL-0: CVE-2022-40982: xen: x86/Intel: Gather Data Sampling (XSA-435) - Dropped patches contained in new tarball 64525c61-tools-libs-guest-assist-gcc13s-realloc-analyzer.patch 645dec48-AMD-IOMMU-assert-boolean-enum.patch 64639e84-amd-fix-legacy-setting-of-SSBD-on-AMD-Family-17h.patch 646b782b-PCI-pci_get_pdev-respect-segment.patch 647dfb0e-x86-missing-unlock-in-microcode_update_helper.patch 648863fc-AMD-IOMMU-Invalidate-All-check.patch 64bea1b2-x86-AMD-Zenbleed.patch - Handle potential off-by-one errors in libxc-sr-xg_sr_bitmap.patch A bit is an index in bitmap, while bits is the allocated size of the bitmap. ==== xz ==== Version update (5.4.3 -> 5.4.4) Subpackages: liblzma5 liblzma5-32bit xz-lang - Update to version 5.4.4: * liblzma and xzdec can now build against WASI SDK when threading support is disabled. xz and tests don't build yet. * documentation update * translations update ==== yast2-country ==== Version update (4.6.2 -> 4.6.3) Subpackages: yast2-country-data - Allow changing date to a later year than 2032 (bsc#1214144) - 4.6.3

1 0

Tumbleweed - Review of the week 2023/32
by Dominique Leuenberger 11 Aug '23

11 Aug '23

Dear Tumbleweed users and hackers, At least over here where I live, the last few days we had slightly less summery time and more rain – and bad weather means more work in front of the screen. The same thing likely happened to other contributors, looking at the things we passed through staging or are still there. This week has seen 7 snapshots (0804..0810). The most relevant changes during this week were: * Mesa 23.1.5 * openSSL 3.1.2 * Linux kernel 6.4.8 & 6.4.9 * Libvirt 9.6.0 * Perl 5.38 (incl all perl modules rebuilt) * GCC 13.2 * LibreOffice 7.6.0.1 & 7.6.0.2 * QEmu 8.0.4 Staging projects are currently testing these changes: * Meson 1.2.1 * Python 3.11, configured for PEP-0688 (externally managed system tree) * Node.JS 20.5.1 * glibc 2.38 * NetworkManager 1.44.0 * systemd 253.8 * Mozilla Firefox 116.x * FMT 10: breaks mariadb boo#1213219 and ceph boo#1213217; help welcome * libxml2 2.11.x * oxygen 1.9.7 – breaks wxPython build Cheers, Dominique

2 1

New Tumbleweed snapshot 20230810 released!
by Dominique Leuenberger 11 Aug '23

11 Aug '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: accountsservice kernel-firmware kernel-source (6.4.8 -> 6.4.9) libreoffice-share-linker lsb-release pentaho-libxml (1.1.3 -> 1.1.6) procmail (3.22 -> 3.24) python-certifi (2023.5.7 -> 2023.7.22) qemu (8.0.3 -> 8.0.4) tracker-miners wtmpdb (0.7.1 -> 0.8.0) zxing-cpp === Details === ==== accountsservice ==== Subpackages: accountsservice-lang libaccountsservice0 typelib-1_0-AccountsService-1_0 - Rebase as-fate318433-prevent-same-account-multi-logins.patch: (bsc#1213884). ==== kernel-firmware ==== Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569) amd-ucode-CVE-2023-20569.patch ==== kernel-source ==== Version update (6.4.8 -> 6.4.9) - Linux 6.4.9 (bsc#1012628). - Update config files. Set: * CONFIG_GDS_FORCE_MITIGATION=n * CONFIG_CPU_SRSO=y as per default. - x86: fix backwards merge of GDS/SRSO bit (bsc#1012628). - xen/netback: Fix buffer overrun triggered by unusual packet (bsc#1012628). - x86/srso: Tie SBPB bit setting to microcode patch detection (bsc#1012628). - x86/srso: Add a forgotten NOENDBR annotation (bsc#1012628). - x86/srso: Fix return thunks in generated code (bsc#1012628). - x86/srso: Add IBPB on VMEXIT (bsc#1012628). - x86/srso: Add IBPB (bsc#1012628). - x86/srso: Add SRSO_NO support (bsc#1012628). - x86/srso: Add IBPB_BRTYPE support (bsc#1012628). - x86/srso: Add a Speculative RAS Overflow mitigation (bsc#1012628 bsc#1213287 CVE-2023-20569). - x86/bugs: Increase the x86 bugs vector size to two u32s (bsc#1012628). - Documentation/x86: Fix backwards on/off logic about YMM support (bsc#1012628). - x86/xen: Fix secondary processors' FPU initialization (bsc#1012628). - x86/mem_encrypt: Unbreak the AMD_MEM_ENCRYPT=n build (bsc#1012628). - KVM: Add GDS_NO support to KVM (bsc#1012628). - x86/speculation: Add Kconfig option for GDS (bsc#1012628). - x86/speculation: Add force option to GDS mitigation (bsc#1012628). - x86/speculation: Add Gather Data Sampling mitigation (bsc#1012628 bsc#1206418 CVE-2022-40982). - x86/fpu: Move FPU initialization into arch_cpu_finalize_init() (bsc#1012628). - x86/fpu: Mark init functions __init (bsc#1012628). - x86/fpu: Remove cpuinfo argument from init functions (bsc#1012628). - x86/init: Initialize signal frame size late (bsc#1012628). - init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init() (bsc#1012628). - init: Invoke arch_cpu_finalize_init() earlier (bsc#1012628). - init: Remove check_bugs() leftovers (bsc#1012628). - um/cpu: Switch to arch_cpu_finalize_init() (bsc#1012628). - sparc/cpu: Switch to arch_cpu_finalize_init() (bsc#1012628). - sh/cpu: Switch to arch_cpu_finalize_init() (bsc#1012628). - mips/cpu: Switch to arch_cpu_finalize_init() (bsc#1012628). - m68k/cpu: Switch to arch_cpu_finalize_init() (bsc#1012628). - loongarch/cpu: Switch to arch_cpu_finalize_init() (bsc#1012628). - ia64/cpu: Switch to arch_cpu_finalize_init() (bsc#1012628). - ARM: cpu: Switch to arch_cpu_finalize_init() (bsc#1012628). - x86/cpu: Switch to arch_cpu_finalize_init() (bsc#1012628). - init: Provide arch_cpu_finalize_init() (bsc#1012628). - commit 5b9ad20 - tpm/tpm_tis: Disable interrupts for Lenovo Thinkpad E14 Gen 2 and 13s-IML (bsc#1213779). - commit c4adffc - drm/amd/display: Fix a regression on Polaris cards (bsc#1212874). - commit 9764e05 - rpm/config.sh: remove IBS repos completely The commit 21cafd1f (rpm/config.sh: switch to openSUSE.org repos for IBS) duplicated the OBS repos in openSUSE.org: space. But this is done automatically in MyBS.pm. So drop all of them instead of duplicating. - commit 294d541 - rpm/config.sh: switch to openSUSE.org repos for IBS SUSE:Factory:HEAD is currently (and often) broken. Switch to openSUSE.org: repositories. They are up-to-date and provide the same archs plus armv6. - commit 21cafd1 ==== libreoffice-share-linker ==== - Do not format using f-strings, since it is python 3.6+ feature and SLE12-SP5 has python 3.4 ==== lsb-release ==== - add util-linux dependency for getopt to avoid: /usr/bin/lsb_release: line 123: getopt: command not found ==== pentaho-libxml ==== Version update (1.1.3 -> 1.1.6) - Update to upstream version 1.1.6. * no structured changelog available starting from 2008 - Rebased and updated patches: * libxml-1.1.2-build.patch -> pentaho-libxml-1.1.6-build.patch * pentaho-libxml-1.1.3-sourcetarget.patch -> pentaho-libxml-1.1.6-sourcetarget.patch ==== procmail ==== Version update (3.22 -> 3.24) - Update to procmail 3.24 (New Upstream) - Don't coredump in comsat code if interrupted early - Correctly handle COMSAT=on - Once used, the 'H' and 'r' flags would never be cleared - Fix possible buffer overflow in variable-capture actions - Fix up the parsing of variable-capture actions - LMTP code assumed sizeof(long)==sizeof(int) - SHELL is now always preset to /bin/sh. USER_SHELL contains the shell from the user's passwd entry - When HOST is mismatched, reset it for the next rcfile - Always read in a new, global rcfile (/etc/procmail.conf) to allow runtime configuration of variables like DEFAULT. This rcfile cannot deliver or filter messages - Mismatched HOST in /etc/procmailrc didn't discard the message - backquote expansion in a condition disabled header concatenation for that condition - LMTP didn't correctly handle quoted localparts - Removed SIZE extension from LMTP (unsupportable semantics) - Don't coredump if unable to exec /bin/sh - Enable "+detail" processing in LMTP mode by passing the delimiter (e.g., "+") as an optional argument after -z - In LMTP mode, save the domain of the recipient in PROCMAIL_DOMAIN - Set PROCMAIL_MODE to one of "d", "m", "z", or "" to reflect the mode option it was invoked with, if any - Fixed all bugs collected by Debian and others during the past 21 years. See the git commit history for detailed descriptions. - Port patches * procmail-3.22-autoconf.dif * procmail-3.22-headerconcat.dif * procmail-3.22-ipv6.patch * procmail-3.22-mailstat.patch * procmail-3.22-owl-truncate.dif * procmail-3.22.dif * procmail-cflags.dif - Remove former Debian and SUSE patches from procmail-3.22-patches.tar.bz2 * 04 * 06 * 10 * 11 * 12 * 13 * 14 * 15 * 16 * 17 * 18 * 19 * 22 * 23 * 24 * 25 * 26 * 27 * 28 * 29 * 30 - Collect and port our patches from old procmail-3.22-patches.tar.bz2 into new procmail-3.24-patches.tar.bz2 * 01 * 02 * 03 * 05 * 07 * 08 * 09 * 20 * 21 ==== python-certifi ==== Version update (2023.5.7 -> 2023.7.22) - update to 2023.7.22: Added certs: [#] CN=Sectigo Public Server Authentication Root E46 O=Sectigo Limited [#] CN=Sectigo Public Server Authentication Root R46 O=Sectigo Limited [#] CN=SSL.com TLS RSA Root CA 2022 O=SSL Corporation [#] CN=SSL.com TLS ECC Root CA 2022 O=SSL Corporation [#] CN=Atos TrustedRoot Root CA ECC TLS 2021 O=Atos [#] CN=Atos TrustedRoot Root CA RSA TLS 2021 O=Atos Removed certs: [#] CN=Hongkong Post Root CA 1 O=Hongkong Post [#] CN=E-Tugra Certification Authority O=E-Tu\u011fra EBG Bili\u015fim Teknolojileri ve Hizmetleri A.\u015e. OU=E-Tugra Sertifikasyon Merkezi [#] CN=E-Tugra Global Root CA RSA v3 O=E-Tugra EBG A.S. OU=E-Tugra Trust Center [#] CN=E-Tugra Global Root CA ECC v3 O=E-Tugra EBG A.S. OU=E-Tugra Trust Center ==== qemu ==== Version update (8.0.3 -> 8.0.4) Subpackages: qemu-accel-tcg-x86 qemu-audio-spice qemu-block-curl qemu-block-nfs qemu-block-rbd qemu-chardev-spice qemu-guest-agent qemu-hw-display-qxl qemu-hw-display-virtio-gpu qemu-hw-display-virtio-gpu-pci qemu-hw-display-virtio-vga qemu-hw-usb-host qemu-hw-usb-redirect qemu-hw-usb-smartcard qemu-img qemu-ipxe qemu-ksm qemu-lang qemu-microvm qemu-pr-helper qemu-seabios qemu-tools qemu-ui-curses qemu-ui-gtk qemu-ui-opengl qemu-ui-spice-app qemu-ui-spice-core qemu-vgabios qemu-x86 - perl-Text-Markdown is not available in all distros and for all arch-es. Use discount instead - Patches added: * [openSUSE][spec] Use discount instead of perl-Text-Markdown - Update to version 8.0.4: * Official changelog not released on the mailing list yet * Security issues fixed: - bsc#1212850 (CVE-2023-3354) - bsc#1213001 (CVE-2023-3255) - bsc#1213925 (CVE-2023-3180) - bsc#1207205 (CVE-2023-0330) ==== tracker-miners ==== Subpackages: tracker-miner-files tracker-miners-lang -Rebase patch: tracker-miners-drop-syscalls-in-seccomp.patch. ==== wtmpdb ==== Version update (0.7.1 -> 0.8.0) Subpackages: libwtmpdb0 - Update to version 0.8.0 - wtmpdb boottime: print boot time ==== zxing-cpp ==== - Restore support for building on SLE12 - Build with gcc7-c++ or gcc-c++ >= 7 because of C++17 requirements - Added patch: * cmake.patch + allow building with cmake 3.5 on SLE12SP5

1 0

Subject: Re: 20230809 wrong permissions error and unsure how to report the problem
by Patrick Schaaf 11 Aug '23

11 Aug '23

>>> 1. the package updates and the permissions get set to 0750 (because >>> these are the permissions inside the rpm) >>> 2. the scripts checks, complains that its wrong and corrects it >>> 3. repeat >> >> Right, that's how it works, since ever. > > And that won't change, really. > > System administrators can *choose and change* the permission strictness > level of their installation, which can either be more strict or more > lenient compared to the file permissions in an RPM package Speaking purely hypothetically... fixing this properly, could be done from inside rpm. It'd need to read the configured permission policy "database" up-front, and on the fly, and modify the packaged permissions in case they are overridden by the policy, before actually setting them. The way things are, there **is** a very short window in time where permissions (from view of what the system administrator desires), will be **wrong**, during the update. And the messages shown, as annoying as they are, point that out. best regards Patrick

1 0

New Tumbleweed snapshot 20230809 released!
by Dominique Leuenberger 10 Aug '23

10 Aug '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: fixmath fuse3 (3.15.1 -> 3.16.1) gcc13 (13.1.1+git7597 -> 13.2.1+git7683) gnome-settings-daemon gnome-terminal (3.48.1 -> 3.48.2) gtk4 (4.10.4 -> 4.10.5) libadwaita (1.3.3 -> 1.3.4) libreoffice (7.6.0.1 -> 7.6.0.2) libselinux libstorage-ng (4.5.135 -> 4.5.136) osinfo-db (20230518 -> 20230719) pam pam-full-src perl-Convert-ASN1 (0.33 -> 0.340.0) python-importlib-resources (5.12.0 -> 6.0.1) unixODBC (2.3.11 -> 2.3.12) upower (1.90.1 -> 1.90.2) xmlsec1 yast2-packager (4.6.1 -> 4.6.2) === Details === ==== fixmath ==== - Build with g++ >= 7 in order to be able to use C++17 features - Added patch: * cmake-tests-old-cmake.patch + allow building with cmake >= 3.5 + conditionally applied on SLE12-SP5 whose cmake is old ==== fuse3 ==== Version update (3.15.1 -> 3.16.1) Subpackages: libfuse3-3 - Update to release 3.16.1 * Readdir kernel cache can be enabled from high-level API. ==== gcc13 ==== Version update (13.1.1+git7597 -> 13.2.1+git7683) Subpackages: cpp13 gcc13-locale libasan8 libatomic1 libgcc_s1 libgccjit0 libgfortran5 libgomp1 libhwasan0 libitm1 liblsan0 libobjc4 libquadmath0 libstdc++6 libstdc++6-devel-gcc13 libstdc++6-locale libstdc++6-pp libtsan2 libubsan1 - Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683 * Includes GCC 13.2 release * Includes patch to fix broken testcase in libbacktrace, fixing build problems on SLES 12 - gdcflags.patch: Use substituted GDCFLAGS - Filter out -Werror=return-type from D compile flags ==== gnome-settings-daemon ==== Subpackages: gnome-settings-daemon-lang - Do not use %autopatch to build on SLE where rpm version is not ready for the macro. - Drop patch gnome-settings-daemon-bnc873545-hide-warnings.patch: the relevant color management has been moved to mutter. ==== gnome-terminal ==== Version update (3.48.1 -> 3.48.2) Subpackages: gnome-shell-search-provider-gnome-terminal gnome-terminal-lang nautilus-extension-terminal - Update to version 3.48.2: + build: Bump vte req version. + Updated translations. ==== gtk4 ==== Version update (4.10.4 -> 4.10.5) Subpackages: gtk4-lang gtk4-schema gtk4-tools libgtk-4-1 typelib-1_0-Gtk-4_0 - Update to version 4.10.5: + Fix ordering problems with filter model signals + Avoid lingering resize cursors + Fix alignment issues on sparc + Fix a problem with CSS corner values + Updated translations. ==== libadwaita ==== Version update (1.3.3 -> 1.3.4) Subpackages: libadwaita-1-0 libadwaita-lang typelib-1_0-Adw-1 - Update to version 1.3.4: + AdwAboutWindow: Fix :translator-credits property + AdwComboRow: Fix accessible role on the dropdown arrow + AdwEntryRow: Fix accessibility + AdwLeaflet: Fix back/forward mouse button handling + AdwTabBar: Fix accessibility + AdwTabThumbnail: - Fix duplicate thumbnail during transitions - Fix the transition curve + AdwViewSwitcher: Set correct accessible role for icons + AdwWindowTitle: Fix initial title visibility + Stylesheet: - Fix .card buttons within .osd - Fix single-item menu height ==== libreoffice ==== Version update (7.6.0.1 -> 7.6.0.2) Subpackages: libreoffice-base libreoffice-calc libreoffice-draw libreoffice-filters-optional libreoffice-gnome libreoffice-gtk3 libreoffice-icon-themes libreoffice-impress libreoffice-l10n-cs libreoffice-l10n-da libreoffice-l10n-de libreoffice-l10n-el libreoffice-l10n-en libreoffice-l10n-en_GB libreoffice-l10n-es libreoffice-l10n-fr libreoffice-l10n-hu libreoffice-l10n-it libreoffice-l10n-ja libreoffice-l10n-pl libreoffice-l10n-pt_BR libreoffice-l10n-ru libreoffice-l10n-zh_CN libreoffice-l10n-zh_TW libreoffice-mailmerge libreoffice-math libreoffice-pyuno libreoffice-qt5 libreoffice-writer libreofficekit - Update to 7.6.0.2: https://wiki.documentfoundation.org/ReleaseNotes/7.6 https://wiki.documentfoundation.org/Releases/7.6.0/RC1 - Update bundled dependencies: * boost_1_80_0.tar.xz - > boost_1_82_0.tar.xz * curl-8.0.1.tar.xz -> curl-8.1.2.tar.xz * icu4c-72_1-data.zip -> icu4c-73_2-data.zip * icu4c-72_1-src.tgz -> icu4c-73_2-src.tgz * libassuan-2.5.5.tar.bz2 -> libassuan-2.5.6.tar.bz2 * poppler-22.12.0.tar.xz -> poppler-23.06.0.tar.xz * poppler-data-0.4.11.tar.gz -> poppler-data-0.4.12.tar.gz - New bundled dependencies: * graphite2-minimal-1.3.14.tgz * harfbuzz-8.0.0.tar.xz + needed for SLE12-SP2, where harfbuzz is really old - Removed patches: * atklistener-32bit-type-mismatch.patch + integrated upstream * fix_harfbuzz_on_sle12_sp5.patch + not needed, since SLE12-SP5 uses now the bundled harfbuzz - Added patch: * python34-no-f-strings.patch + Applied on SLE12-SP5 + Do not format using F-strings, since it is python 3.6+ feature and SLE12-SP5 has python 3.4 - Refreshed patch: * 0002-Revert-Require-HarfBuzz-5.1.0.patch ==== libselinux ==== Subpackages: libselinux1 libselinux1-32bit selinux-tools - Do not BuildRequire swig and ruby-devel in the main build phase: those are only needed for the bindings. - (bsc#1212618) Divide libselinux and libselinux-bindings again. libselinux itself is in Ring0 so it has to have absolutely minimal dependencies, so it is better to separate libselinux-bindings into a separate pacakge. - Fix python packaging by setting the name to a fixed value - Remove separate libselinux-bindings SPEC file (bsc#1212618). - Add explicit BuildRequires for python3-pip and python3-wheel on 15.5, currently the macros don't do the right thing - allow building this with different python versions, to make this usable for the new sle15 macro (using python3.11) - Add python-wheel build dependency to build correctly with latest python-pip version. ==== libstorage-ng ==== Version update (4.5.135 -> 4.5.136) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - Translated using Weblate (Indonesian) (bsc#1149754) - 4.5.136 ==== osinfo-db ==== Version update (20230518 -> 20230719) - Update to database version 20230719 osinfo-db-20230719.tar.xz - Add support for SLE 15-SP6 add-sle15sp6-support.patch - Add support for SLE Micro 5.5 add-slem5.5-support.patch - Drop patches contained in new tarball add-opensuse-leap-15.5-support.patch add-sle15sp5-support.patch add-slem5.3-support.patch add-slem5.4-support.patch ==== pam ==== Subpackages: pam-32bit - pam_access backports from upstream: - pam_access-doc-IPv6-link-local.patch: Document only partial supported IPv6 link local addresses - pam_access-hostname-debug.patch: Don't print error if we cannot resolve a hostname, does not need to be a hostname - pam_shells-fix-econf-memory-leak.patch: Free econf keys variable - disable-examples.patch: Don't build examples ==== pam-full-src ==== - pam_access backports from upstream: - pam_access-doc-IPv6-link-local.patch: Document only partial supported IPv6 link local addresses - pam_access-hostname-debug.patch: Don't print error if we cannot resolve a hostname, does not need to be a hostname - pam_shells-fix-econf-memory-leak.patch: Free econf keys variable - disable-examples.patch: Don't build examples ==== perl-Convert-ASN1 ==== Version update (0.33 -> 0.340.0) - updated to 0.34 see /usr/share/doc/packages/perl-Convert-ASN1/ChangeLog 0.34 -- Mon Aug 07 19:46:22 ADT 2023 Bug Fixes Thanks to chrisridd and fschlich for these bug fixes * Fixes: #47 2nd - Debug output using print instead of printf * Fixes #47 Debug output using print instead of printf * ASN1.pod: fix minor typo ==== python-importlib-resources ==== Version update (5.12.0 -> 6.0.1) - update to 6.0.1: * Bugfixes * Restored Apache license. (#285) * Deprecations and Removals * Removed legacy functions deprecated in 5.3. (#80) * Features * Require Python 3.8 or later ==== unixODBC ==== Version update (2.3.11 -> 2.3.12) - Update to 2.3.12: * Makefile.am: Do not install config.h #108 * DriverManager/drivermanager.h: fix build without threads #112 * DriverManager/_info.c: Get locale encoding on Windows. #115 * Fixed Connection String #127 * Allow diagnostics to be retrieved on SQL_NO_DATA #137 * Avoid implicit function declarations, for C99 compatibility #138 * Remove self-reference #140 * isql.1: Add information about handling passwords containing semicolons #126 - Remove unixODBC-gccwarnings.patch, unixODBC-2.3.6-declarations.patch: Changes have been done in https://github.com/lurcher/unixODBC/pull/138 - Update unixODC-etc-location.patch ==== upower ==== Version update (1.90.1 -> 1.90.2) Subpackages: libupower-glib3 typelib-1_0-UpowerGlib-1_0 upower-lang - update to 1.90.2: * Note that this is the last release of UPower with lid handling. OS components that rely on the lid status should get it from logind instead. * Fix wireless devices not disappearing from Settings when disconnected * Require a newer libgudev to avoid bugs related to newline stripping when reading sysfs attributes * Add installed-tests files for use with gnome-desktop-testing * Fix integration test to work with system installed upower binary and under jhbuild - add skip-tests-install.patch to skip installation of test-only assets ==== xmlsec1 ==== Subpackages: libxmlsec1-1 libxmlsec1-nss1 libxmlsec1-openssl1 - Added patch: * xmlsec1-ui_null.patch + fix build with older versions of openssl that don't have UI_null() method ==== yast2-packager ==== Version update (4.6.1 -> 4.6.2) - Move loading the Pkg module to fix a failing unit test (bsc#1214069) - 4.6.2

1 0

New build counter sync (bcnsynctag) mechanic for Factory
by Adrian Schröter 10 Aug '23

10 Aug '23

Hi, short version: New mechanic will be used, I will submit updates for the critical packages to factory, no one needs to do anything on their own. Longer version: While debugging an issue with too many rebuilds we noticed that we need a more flexible way to set the bcntsynctag. This tag is so far set in OBS package meta for a few packages to enforce the same build numbers in otherwise independend builds. Eg. due to _multibuild or local links. (check osc meta pkg openSUSE:Factory glibc for an example). Since this information belongs actually to the sources and not to the package meta, we introduced a new additional mechanic. This will also solve the issue when working in git projects using pbuild or OBS. For spec files this can be done via #!BcntSyncTag: $TAG syntax 1). The advantage is that it can be done only for selected multibuild flavors, architectures or other conditions. As long the package meta defines the bcntsynctag this has no effect though. But the goal is to get rid of it. You may want to check a real life example: # osc ldiff home:adrianSuSE:branches:Base:System glibc Index: glibc.changes =================================================================== --- glibc.changes (revision 7fb767958d0f7a75bb7cf9f8a6648dc3) +++ glibc.changes (revision 0dcf7cbdf7fbe3fc9d58f0c1b31a50fa) @@ -1,4 +1,11 @@ ------------------------------------------------------------------- +Thu Aug 10 08:20:26 UTC 2023 - Adrian Schröter <adrian(a)suse.de> + +- Enforce the name build counter (release number) between x86_64 and i686 build + Other flavors are allowed to divert to avoid triggering a new + bootstrap rebuild + +------------------------------------------------------------------- Wed Aug 2 10:50:32 UTC 2023 - Andreas Schwab <schwab(a)suse.de> - Update to glibc 2.38 Index: glibc.spec =================================================================== --- glibc.spec (revision 7fb767958d0f7a75bb7cf9f8a6648dc3) +++ glibc.spec (revision 0dcf7cbdf7fbe3fc9d58f0c1b31a50fa) @@ -232,6 +232,8 @@ %if "%flavor" == "i686" ExclusiveArch: i586 i686 BuildArch: i686 +# Enforce the name build counter (release number) between x86_64 and i686 build +#!BcntSyncTag: glibc %endif ### 1) Documentation for the different package formats will appear here when the cloud job picks it up: https://open-build-service.org/help/manuals/obs-user-guide/cha.obs.package_… -- Adrian Schroeter <adrian(a)suse.de> Build Infrastructure Project Manager SUSE Software Solutions Germany GmbH, Frankenstraße 146, 90461 Nürnberg, Germany (HRB 36809, AG Nürnberg) Geschäftsführer: Ivo Totev

1 0

Firefox/i586 needs help: FF 116 fails to build
by Dominique Leuenberger 09 Aug '23

09 Aug '23

Dear TW hackers, Firefox 116 has just been sent for inclusion into Tumbleweed - with a note that it fails to build on i586. Looking into the devel prj, the picture looks even worse, as aarch64 and armv7l are also failing to build. https://build.opensuse.org/package/show/mozilla:Factory/MozillaFirefox Can you all please help out the maintainer to get the failing archs building too? (i586 is mandatory in Staging - and I still hope to get aarch64 and ppc64le on that level too one day) Cheers, Dominique

9 13