August 2023 - openSUSE Factory - openSUSE Mailing Lists

New Tumbleweed snapshot 20230803 released!
by Dominique Leuenberger 04 Aug '23

04 Aug '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: emacs (28.2 -> 29.1) kernel-firmware (20230724 -> 20230731) liblangtag (0.6.3 -> 0.6.4) libpaper (2.1.0 -> 2.1.1) python-click (8.1.3 -> 8.1.6) python-passlib srt (1.5.1 -> 1.5.2) system-config-printer === Details === ==== emacs ==== Version update (28.2 -> 29.1) Subpackages: emacs-el emacs-eln emacs-info emacs-nox emacs-x11 etags - Update to GNU Emacs version 29.1 * Official tree-sitter support * EGlot, the Language Server Client * Use-package a declarative configuration tool finally in * Better long line support * Native SQLite Support * Changing the init directory You can now instruct Emacs to read its initialization from another directory from the command line. - Use natively compiled lisp files only for GTK variant as every binary has its own hash keys for the eln location as well as for the eln native compiled lisp files - Port rmailgen.el and .gnu-emacs to 29.1 - Remove the old patches now upstream * 01a4035c.patch * 3c1693d0.patch * CVE-2022-48338.patch * CVE-2022-48339.patch * d3209119.patch * d48bb487.patch - Port and rename patch emacs-28.1.dif which is now emacs-29.1.dif - Port the patches * emacs-24.1-ps-mule.patch * emacs-24.3-iconic.patch * emacs-24.3-x11r7.patch * emacs-24.4-glibc.patch * emacs-24.4-nonvoid.patch * emacs-24.4-ps-bdf.patch * emacs-25.1-custom-fonts.patch * emacs-25.2-ImageMagick7.patch * emacs-26.1-xft4x11.patch * emacs-27.1-Xauthority4server.patch * emacs-27.1-pdftex.patch * pdump.patch - Re-enable ImageMagick usage ==== kernel-firmware ==== Version update (20230724 -> 20230731) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update to version 20230731 (git commit 253cc179d849): * amdgpu: Update DMCUB for DCN314 & Yellow Carp * ice: add LAG-supporting DDP package * i915: Update MTL DMC to v2.13 * i915: Update ADLP DMC to v2.20 * cirrus: Add CS35L41 firmware for Dell Oasis Models * copy-firmware: Fix linking directories when using compression * copy-firmware: Fix test: unexpected operator * qcom: sc8280xp: LENOVO: remove directory sym link * qcom: sc8280xp: LENOVO: Remove execute bits ==== liblangtag ==== Version update (0.6.3 -> 0.6.4) - Fix check-tag test failled [0001-ro-MD-ro-to-get-make-check-to-succeed.patch] - Version update to 0.6.4 Replace the word of 'master' to 'primary' trivial update Stop shipping ChangeLog Fix build issue for docs ==== libpaper ==== Version update (2.1.0 -> 2.1.1) Subpackages: libpaper-tools libpaper2 - Update to 2.1.1: * This release fixes the -N flag of paperconf. ==== python-click ==== Version update (8.1.3 -> 8.1.6) - Update to 8.1.6 * Replace all typing.Dict occurrences to typing.MutableMapping for parameter hints. #2255 * Improve type hinting for decorators and give all generic types parameters. * Fix return value and type signature of shell_completion.add_completion_class function. #2421 * Bash version detection doesnât fail on Windows. #2461 * Completion works if there is a dot (.) in the program name. #2166 * Improve type annotations for pyright type checker. #2268 * Improve responsiveness of click.clear(). #2284 * Improve command name detection when using Shiv or PEX. #2332 * Avoid showing empty lines if command help text is empty. #2368 * ZSH completion script works when loaded from fpath. #2344. * EOFError and KeyboardInterrupt tracebacks are not suppressed when standalone_mode is disabled. #2380 * @group.command does not fail if the group was created with a custom command_class. #2416 * multiple=True is allowed for flag options again and does not require setting default=(). #2246, #2292, #2295 * Make the decorators returned by @argument() and @option() reusable when the cls parameter is used. #2294 * Donât fail when writing filenames to streams with strict errors. Replace invalid bytes with the replacement character (ï¿½). #2395 * Remove unnecessary attempt to detect MSYS2 environment. #2355 * Remove outdated and unnecessary detection of App Engine environment. #2554 * echo() does not fail when no streams are attached, such as with pythonw on Windows. #2415 * Argument with expose_value=False do not cause completion to fail. #2336 * Fix an issue with type hints for @click.command(), @click.option(), and other decorators. Introduce typing tests. #2558 * Fix an issue with type hints for @click.group(). #2558 - Drop fix-tests.patch ==== python-passlib ==== - Add patch no-pkg_resources.patch: * Stop using pkg_resources. - Switch to pyproject macros. ==== srt ==== Version update (1.5.1 -> 1.5.2) - Update to 1.5.2: * API - 41c4b1f Fixed #ifdef ENABLE_AEAD_API_PREVIEW (#2603). - b3a21e1 SRT version raised to 1.5.2. - c0d9fcd Restored resetlogfa(..) in udt.h. Reverting #2558, although udt.h is not the official SRT API. - 87de405 Added ENABLE_AEAD_API_PREVIEW build option to enable AEAD API. - 60d1237 Crypto mode 'auto' implemented for listener (#2574). - 27e7d8d Socket Options: do not allow AES GCM if TSBPD is disabled. - 3e4561e Add GCM to the SRT API. * Core Functionality - 3cefede Correct remaining endianness issues - 30e7ccd Minor fix of variable shadowing. - 6fcff6d Fixed various compiler warnings on various platforms (#2679). - 59cde53 Fixed FEC Emergency resize crash (#2717). - 2fcd3d4 Fix crypto mode auto for listener sender (#2711). - b010763 Fixed typos in MBedTLS where it referred to GnuTLS (#2699). - a991767 Fix peer filter config being rejected because of endianness - 1cffd2f Added rejection handshake sent to the peer in rendezvous mode (#2667). - f57ba89 Added missing thread watchdog ticks in 3 thread loop (#2669). - e8d0533 Fixed old ENABLE_AEAD_PREVIEW. - 599c1fb Reworked the CRcvBuffer::dropMessage(..) function (#2661). - 7948772 Removed duplicate lines (#2660). - 3ffc93f Fixed CRcvBuffer::dropMessage (#2657). - e9a3955 Fixed guard for rcv-rexmit fields (#1859). - 22e97f8 Fixed warnings and removed redundant includes (#2658). - c83c31b Reduce frequency of the decryption failure log (#2602). - 21b55a2 Disabled warnings various platforms and fixed C++20 Windows build (#2411). - 65bef37 Set CLOSING state when closing a socket (#2643). - 02cba9e Drop undecrypted packet based on sequence number (#2654). - 6d774dd Fixed invalid ASSERT checking outdated object in haicrypt (#2652). - 8db35de Refaxed and fixed multiplexer reusage (#2608). - 6c92a13 Fix crash when enable heavy log and socket id less than 10 (#2619). - 64dedef CodeQL: operation requires 22 bytes. - 0c583f8 CodeQL warning: checking NULL after new. - b8962b4 Fixed PKTINFO case that was failing for IPv4+IPv6 bound sockets (#2630). - a42a39f Fixed wrong null-safety condition check in haicrypt (#2616). - 30f6f6b Removed extra redundant condition checks (#2615). - 5f02310 Fix negative id when wrap around - f533716 Fixed reject reason by a caller if connection is UNSECURE (#2622). - 04e8dbc Fixed default reject reason for a listener callback (#2605). - 0b9d583 AEAD: don't break a connection on decrypt failure. - 6db28dc RCV Buffer Refax: added some utils and simplifications (#2522). - 5889a2c AES-GCM payload length check (#2591). - 45232ad Allow fileCC in group mode - 98b1b00 Added extraction of IP_PKTINFO when reading (#456). - de9fc45 Fix CRcvBuffer last position in getTimespan_ms (#2579). - 38b4211 Remove use variable length array (#2279). - 78dd987 Fixed missing DROPREQ for LOSSREPORT that partially predates ACK (#2498). - 4090b25 Reject caller to caller connection (#2562). - 0a835ea Refax: moved removal of one seq from fresh loss list to a separate function (#2521). - 19af5d1 Obtain ConnectionLock while sending crypto keys. - 3d517cf Fixed a warning: member referenced before initialized (#2433). - fc82eac Refax: remove usage of LOGF/HLOGF (#2566). - 637d439 Refax: removed m_iRcvLastSkipAck and its dependencies (#2546). - 6c52f2d Pass std::string by const ref where possible. - 6d62096 Applied clang-format on md5.cpp and md5.h. - 2c48cba MD5: Removed null pointer subtraction (may have undefined behavior). - ae39052 Fixed rendezvous connection in the Non Blocking Mode (#2548). - 0138898 Fixed cloning the RX crypto context (AEAD) - be1ccf5 Moved KM refresh in packUniqueData() (#2541). - f864cec Fixed TARGET_OS_MAC not defined. Wrong include order. - 432f2d8 fix CSndBuffer parameter incorrect in AES GCM mode - cbfa812 Refax/postfix: further fixes after last refax changes (#2528) - e082f30 Fixed validation of input parameters in srt_connect (#2520). - 932e5bd Cleanup of bonding conditionals and unused code (#2525). - f477b51 Fixed connected peer address recording (#2526) - b76c8b2 Fixed CRcvBuffer::getAvailSize() may jump around. (#2490) - 71c3e40 Refax: safety improvements for RCV loss list and closing state (#2517) - 491e6e8 Extract RCV buffer insertion handling to a separate function (#2500). - 258a858 Refax: added size cache to the group container (#2510). - 2fd1363 Refax: improve logging and code readability around specific logging (#2511). - f7a024a Refax: removed the synconmsg property and its handling in the group (#2509) - 53735e1 Don't consider tool old ACK as IPE, it' may caused by network. - d26bbf7 Fixed a false alarm: ACK ERROR...(diff -1) - 0f6e7c7 Fixed the inconsistency between getFirstLostSeq() and ackDataUpTo() (#2488) - ea86302 Reduced calls to steady_clock::now() from two to one. - 8e9958a Reject if SRT_MAGIC_CODE is not set in the HS induction response. - 8e67aa7 Tune logs of group members adding and removing. - c01c646 Fixed AES-GCM support check. ==== system-config-printer ==== Subpackages: python3-cupshelpers system-config-printer-applet system-config-printer-common system-config-printer-common-lang system-config-printer-dbus-service udev-configure-printer - Explicitly use --with-cups-serverbin-dir to find SERVERBIN when cups.pc is not provided by older cups (boo#1213883).

1 0

Tumbleweed - Review of the weeks 2023/30 & 31
by Dominique Leuenberger 04 Aug '23

04 Aug '23

Dear Tumbleweed users and hackers, As so often during the vacation season, I take some Fridays off and am punished for it by having to do reviews spanning more than one week. The same thing happened this time, so you had to wait an extra week again to find out what happened in Tumbleweed. A total of 10 snapshots have been published since my last review (0719, 0724, 0727..0731, 0801, 0802, and 0803). Between 0719 and 0724, there was a more significant gap due to SUSE moving some infrastructure between data centers. The most relevant changes delivered during the last two weeks include: * Qemu 8.0.3 * systemd 253.7 * Linux kernel 6.4.4 & 6.4.6 * openSSH 9.3p2 * PHP 8.2.8 * Mesa 23.1.4 * cURL 8.2.0 & 8.2.1 * GStreamer 1.22.5 * Samba 4.18.5 * Mozilla Firefox 115.0.3 * KDE Plasma 5.27.7 * Inkscape 1.3 Staging projects are well used, and we have the following changes in the queue for testing: * glibc 2.38 * Mesa 23.1.5 * Mozilla Firefox 116 (fails to build on i586, aarch64, armv7l – inclusion blocked) * Linux kernel 6.4.8 * Perl 5.38.0 * Python Sphinx 7.1.x Cheers, Dominique

1 0

Ideas requested about surrounding information on a new improved version of the mail module of YaST2
by Freek de Kruijf 03 Aug '23

03 Aug '23

I designed an improved version of /usr/sbin/config.postfix. The improvements are: 1. support for SPF checking on incoming email in port 25 of postfix 2. support for DKIM checking on incoming email 3. support for complying to DMARC settings of the sender of an email For legitimate email these all should succeed, but it should keep illegitimate email either preventing coming in or give a high score as spam. However it only generates a private and public key to sign outgoing email with the DKIM-key. It also generates self-signed certificates for the postfix server and if you select dovecot as the authentication service, to submit messages from everywhere to outgoing destinations, also for dovecot as the IMAP server. It is all meant for users who want to have these servers for simple environments, like your home or small business, but with all the protection these systems can offer withou much knowledge about how to configure this. Parameters needed for this generation will be asked for in the mail module of YaST2, which need yet to be finished. A bash script for this is available, but publishing it might not be done. All in all it does not explain and put the SPF, DKIM and DMARC TXT records in the DNS, nor does it enter AAAA and/or A records in the Domain Name Server of your domain. The ideas, which are asked for, are about the best way to support what is needed to put in a proper way in the DNS to support your outgoing email. -- fr.gr. member openSUSE Freek de Kruijf

1 0

New Tumbleweed snapshot 20230802 released!
by Dominique Leuenberger 03 Aug '23

03 Aug '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: bluedevil5 (5.27.6 -> 5.27.7) breeze (5.27.6 -> 5.27.7) breeze-gtk (5.27.6 -> 5.27.7) discover (5.27.6 -> 5.27.7) drkonqi5 (5.27.6 -> 5.27.7) ffmpeg-6 file (5.44 -> 5.45) inkscape (1.2.2 -> 1.3) kactivitymanagerd (5.27.6 -> 5.27.7) kcm_flatpak (5.27.6 -> 5.27.7) kcm_sddm (5.27.6 -> 5.27.7) kde-cli-tools5 (5.27.6 -> 5.27.7) kde-gtk-config5 (5.27.6 -> 5.27.7) kgamma5 (5.27.6 -> 5.27.7) khotkeys5 (5.27.6 -> 5.27.7) kinfocenter5 (5.27.6 -> 5.27.7) kirigami-addons (0.9.0 -> 0.10.0) kmenuedit5 (5.27.6 -> 5.27.7) kpipewire (5.27.6 -> 5.27.7) kscreen5 (5.27.6 -> 5.27.7) kscreenlocker (5.27.6 -> 5.27.7) ksshaskpass5 (5.27.6 -> 5.27.7) ksystemstats5 (5.27.6 -> 5.27.7) kwayland-integration (5.27.6 -> 5.27.7) kwin5 (5.27.6 -> 5.27.7) kwrited5 (5.27.6 -> 5.27.7) layer-shell-qt (5.27.6 -> 5.27.7) libkdecoration2 (5.27.6 -> 5.27.7) libkscreen2 (5.27.6 -> 5.27.7) libksysguard5 (5.27.6 -> 5.27.7) libopenraw (0.3.4 -> 0.3.7) libplacebo5 libstorage-ng (4.5.127 -> 4.5.133) libuv (1.44.2 -> 1.46.0) milou5 (5.27.6 -> 5.27.7) mozilla-nss (3.90 -> 3.91) openssl-1_1 (1.1.1u -> 1.1.1v) oxygen5-sounds (5.27.6 -> 5.27.7) pam_kwallet (5.27.6 -> 5.27.7) patterns-kde (20230403 -> 20230801) plasma-browser-integration (5.27.6 -> 5.27.7) plasma-nm5 (5.27.6 -> 5.27.7) plasma5-addons (5.27.6 -> 5.27.7) plasma5-desktop (5.27.6 -> 5.27.7) plasma5-disks (5.27.6 -> 5.27.7) plasma5-integration (5.27.6 -> 5.27.7) plasma5-openSUSE plasma5-pa (5.27.6 -> 5.27.7) plasma5-systemmonitor (5.27.6 -> 5.27.7) plasma5-thunderbolt (5.27.6 -> 5.27.7) plasma5-workspace (5.27.6 -> 5.27.7) polkit-kde-agent-5 (5.27.6 -> 5.27.7) powerdevil5 (5.27.6 -> 5.27.7) python-pexpect systemsettings5 (5.27.6 -> 5.27.7) virt-manager xdg-desktop-portal-kde (5.27.6 -> 5.27.7) === Details === ==== bluedevil5 ==== Version update (5.27.6 -> 5.27.7) Subpackages: bluedevil5-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== breeze ==== Version update (5.27.6 -> 5.27.7) Subpackages: breeze5-cursors breeze5-decoration breeze5-style breeze5-style-lang libbreezecommon5-5 - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== breeze-gtk ==== Version update (5.27.6 -> 5.27.7) Subpackages: gtk2-metatheme-breeze gtk3-metatheme-breeze gtk4-metatheme-breeze metatheme-breeze-common - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== discover ==== Version update (5.27.6 -> 5.27.7) Subpackages: discover-backend-flatpak discover-backend-fwupd discover-backend-packagekit discover-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - Changes since 5.27.6: * rpm-ostree: Improve search and filter logic (kde#468162) * Fix SteamOS dbus path ==== drkonqi5 ==== Version update (5.27.6 -> 5.27.7) Subpackages: drkonqi5-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - Changes since 5.27.6: * coredump-gui: don't delete qprocess in a slot that connects to it ==== ffmpeg-6 ==== Subpackages: libavcodec60 libavdevice60 libavfilter9 libavformat60 libavutil58 libpostproc57 libswresample4 libswscale7 - Bump required libplacebo version to v6.292.0 or newer for TW - Temporarily demote deprecation errors to deprecation warnings for vf_libplacebo - Add upstream patches to fix build with libplacebo v6: * 0001-avfilter-vf_libplacebo-remove-deprecated-field.diff ==== file ==== Version update (5.44 -> 5.45) Subpackages: file-magic libmagic1 - Add patch file-5.45-type_t.dif * Partly upstream check of type_t is wide on 32bit systems * Extend (auto)configure to enable wide type_t type if possible - On 32bit systems define _TIME_BITS=64 to make it build - Update to 5.45: * PR/465: psrok1: Avoid muslc asctime_r crash * add SIMH tape format support * bump the max size of the elf section notes to be read to 128K and make it configurable * PR/415: Fix decompression with program returning empty * PR/408: fix -p with seccomp * PR/412: fix MinGW compilation - Remove upstream patch dc71304b.patch - Modify patches * file-5.17-option.dif * file-5.19-biorad.dif * file-5.19-zip2.0.dif * file-5.22-elf.dif * file-secure_getenv.patch - Port and rename patch file-5.44.dif now file-5.45.dif ==== inkscape ==== Version update (1.2.2 -> 1.3) Subpackages: inkscape-extensions-extra inkscape-extensions-fig inkscape-extensions-gimp inkscape-lang - Update to version 1.3: + Shape Builder Tool for building up shapes on canvas + Font Collections + Pattern Editor + Document Resources Dialog + Improved performance thanks to fully asynchronous, multithreaded rendering + LPE dialog redesigned + Improved On-Canvas Pattern Editing + Better PDF import + Page margins & bleed + Return of Search, opacity & blend modes in Layers & Objects dialog and of an optional persistent snap bar + Syntax highlighting in XML Editor + See the full release notes https://inkscape.org/doc/release_notes/1.3/Inkscape_1.3.html - Drop patch 0001-Fix-build-with-GCC13.patch, fixed upstream ==== kactivitymanagerd ==== Version update (5.27.6 -> 5.27.7) Subpackages: kactivitymanagerd-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== kcm_flatpak ==== Version update (5.27.6 -> 5.27.7) Subpackages: kcm_flatpak-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== kcm_sddm ==== Version update (5.27.6 -> 5.27.7) Subpackages: kcm_sddm-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - Changes since 5.27.6: * Fix loading theme.conf.user (kde#436272) * Fix multi-line strings in QML file ==== kde-cli-tools5 ==== Version update (5.27.6 -> 5.27.7) Subpackages: kde-cli-tools5-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== kde-gtk-config5 ==== Version update (5.27.6 -> 5.27.7) Subpackages: kde-gtk-config5-gtk3 - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== kgamma5 ==== Version update (5.27.6 -> 5.27.7) Subpackages: kgamma5-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== khotkeys5 ==== Version update (5.27.6 -> 5.27.7) Subpackages: khotkeys5-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== kinfocenter5 ==== Version update (5.27.6 -> 5.27.7) Subpackages: kinfocenter5-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== kirigami-addons ==== Version update (0.9.0 -> 0.10.0) Subpackages: kirigami-addons-lang - Update to 0.10.0. No changelog. ==== kmenuedit5 ==== Version update (5.27.6 -> 5.27.7) Subpackages: kmenuedit5-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== kpipewire ==== Version update (5.27.6 -> 5.27.7) Subpackages: kpipewire-imports libKPipeWire5 libKPipeWire5-lang libKPipeWireDmaBuf5 libKPipeWireRecord5 - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - Changes since 5.27.6: * PipeWireSourceItem: proceed itemChange in QQuickItem ==== kscreen5 ==== Version update (5.27.6 -> 5.27.7) Subpackages: kscreen5-lang kscreen5-plasmoid - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== kscreenlocker ==== Version update (5.27.6 -> 5.27.7) Subpackages: kscreenlocker-lang libKScreenLocker5 - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== ksshaskpass5 ==== Version update (5.27.6 -> 5.27.7) Subpackages: ksshaskpass5-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== ksystemstats5 ==== Version update (5.27.6 -> 5.27.7) Subpackages: ksystemstats5-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - Changes since 5.27.6: * gpu/nvidia: Discover data fields based on headers (kde#470474) ==== kwayland-integration ==== Version update (5.27.6 -> 5.27.7) - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== kwin5 ==== Version update (5.27.6 -> 5.27.7) Subpackages: kwin5-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - Changes since 5.27.6: * Add closed window checks in restacking requests * Add closed window checks in some window activation code paths * x11: Sync frame extents in X11 native pixels (kde#471132) * backends/drm: handle mismatching stride with CPU copying (kde#471517) * scene: Pad damage if scale factor is fractional * locale1: fix use-after-free in xkb_keymap creation * effects: Make OpenGL context current before deleting framebuffer (kde#444665,kde#471139) * plugins/backgroundcontrast,blur: ensure the effect is only applied behind the window (kde#469625) * input: don't crash if the internal handle is nullptr (kde#471285) ==== kwrited5 ==== Version update (5.27.6 -> 5.27.7) - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== layer-shell-qt ==== Version update (5.27.6 -> 5.27.7) - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== libkdecoration2 ==== Version update (5.27.6 -> 5.27.7) Subpackages: libkdecorations2-5 libkdecorations2-5-lang libkdecorations2private10 - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== libkscreen2 ==== Version update (5.27.6 -> 5.27.7) Subpackages: libKF5Screen8 libKF5Screen8-lang libKF5ScreenDpms8 libkscreen2-plugin - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - Changes since 5.27.6: * make sure kscreen-doctor exits when using --dpms * Guard the deprecated Output::setPrimary (kde#471195) ==== libksysguard5 ==== Version update (5.27.6 -> 5.27.7) Subpackages: ksysguardsystemstats-data libKSysGuardSystemStats1 libksysguard5-imports libksysguard5-lang libksysguard5-plugins - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - Changes since 5.27.6: * Fix typo ==== libopenraw ==== Version update (0.3.4 -> 0.3.7) Subpackages: gdk-pixbuf-loader-libopenraw libopenraw9 - Update to version 0.3.7 and remove incorporated patch: 03f8270d6bb255ca6618505e83169ab9d95ccef1.patch - Fix build using %prep from Gentoo and autoconf - Upstream changes: * Bug fixes: Fix a crash when rendering Leica M Monochron DNG files. Preserve the raw data photometric interpretation when decompressing raw data. Properly decode uncompressed big endian 16 bit raw data from Pentax PEF. Issue #2. Including PENTAX *ist DS. #2 Added missing MPL-2.0 license to tarball. #15 Fix build issue with Rust 1.70. Fix offline Rust build from tarball. Fix a missing include with gcc 13. Issue #12. * New features: The Rust crates are vendored for the tarball. Note: resulting tarball is bigger. * Camera support: [ a * denote that static WB coefficients have been included, unless DNG ] Added Leica M11 Monochrom, Q3. [ a * denote that static WB coefficients have been included, unless DNG ] Added coefficients for Canon R8* and R50*. Added coefficients for Panasonic S5M2*. Added Panasonic GF8*. Added Sony ZV-E1*, ILME-FX30*. * Other: Updated Exif tags. ==== libplacebo5 ==== - Fix libplacebo5-devel and plplay5 conflict with libplacebo-devel and plplay, respectively ==== libstorage-ng ==== Version update (4.5.127 -> 4.5.133) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - Translated using Weblate (Czech) (bsc#1149754) - 4.5.133 - Translated using Weblate (Japanese) (bsc#1149754) - 4.5.132 - Translated using Weblate (Slovak) (bsc#1149754) - 4.5.131 - Translated using Weblate (Dutch) (bsc#1149754) - 4.5.130 - merge gh#openSUSE/libstorage-ng#943 - updated pot and po files - 4.5.129 - merge gh#openSUSE/libstorage-ng#942 - support no-automount partition flag - fixed include guard - 4.5.128 ==== libuv ==== Version update (1.44.2 -> 1.46.0) - Switched keyring from Jameson Nash (vtjnash) to Santiago Gimeno (santigimeno) - Update to 1.46.0: * Add some more iouring backend fs ops * work around io_uring IORING_OP_CLOSE bug - Updates in version 1.45.0: * introduce io_uring support * give thread pool threads an 8 MB stack * change execution order of timers ==== milou5 ==== Version update (5.27.6 -> 5.27.7) Subpackages: milou5-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== mozilla-nss ==== Version update (3.90 -> 3.91) Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs mozilla-nss-tools - update to NSS 3.91 * bmo#1837431 - Implementation of the HW support check for ADX instruction * bmo#1836925 - Removing the support of Curve25519 * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData * bmo#1839327 - Adding args to enable-legacy-db build * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit default trust flags" * bmo#1837617 - Initialize flags in slot structures * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow * bmo#1829112 - Followup Fixes * bmo#1784253 - avoid processing unexpected inputs by checking for m_exptmod base sign * bmo#1826652 - add a limit check on order_k to avoid infinite loop * bmo#1834851 - Update HACL* to commit 5f6051d2 * bmo#1753026 - add SHA3 to cryptohi and softoken * bmo#1753026 - HACL SHA3 * bmo#1836781 - Disabling ASM C25519 for A but X86_64 - removed upstreamed patch nss-fix-bmo1836925.patch ==== openssl-1_1 ==== Version update (1.1.1u -> 1.1.1v) Subpackages: libopenssl1_1 - Update to 1.1.1v: * Fix excessive time spent checking DH q parameter value (bsc#1213853, CVE-2023-3817). The function DH_check() performs various checks on DH parameters. After fixing CVE-2023-3446 it was discovered that a large q parameter value can also trigger an overly long computation during some of these checks. A correct q value, if present, cannot be larger than the modulus p parameter, thus it is unnecessary to perform these checks if q is larger than p. If DH_check() is called with such q parameter value, DH_CHECK_INVALID_Q_VALUE return flag is set and the computationally intensive checks are skipped. * Fix DH_check() excessive time with over sized modulus (bsc#1213487, CVE-2023-3446). The function DH_check() performs various checks on DH parameters. One of those checks confirms that the modulus ("p" parameter) is not too large. Trying to use a very large modulus is slow and OpenSSL will not normally use a modulus which is over 10,000 bits in length. However the DH_check() function checks numerous aspects of the key or parameters that have been supplied. Some of those checks use the supplied modulus value even if it has already been found to be too large. A new limit has been added to DH_check of 32,768 bits. Supplying a key/parameters with a modulus over this size will simply cause DH_check() to fail. * Update openssl.keyring with the OTC members that sign releases * Rebase openssl-1_1-openssl-config.patch * Remove security patches fixed upstream: - openssl-CVE-2023-3446.patch - openssl-CVE-2023-3446-test.patch - Dont pass zero length input to EVP_Cipher because assembler optimized AES cannot handle zero size. [bsc#1213517] * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch ==== oxygen5-sounds ==== Version update (5.27.6 -> 5.27.7) - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== pam_kwallet ==== Version update (5.27.6 -> 5.27.7) Subpackages: pam_kwallet-32bit pam_kwallet-common - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== patterns-kde ==== Version update (20230403 -> 20230801) Subpackages: patterns-kde-kde patterns-kde-kde_edutainment patterns-kde-kde_games patterns-kde-kde_ide patterns-kde-kde_imaging patterns-kde-kde_internet patterns-kde-kde_multimedia patterns-kde-kde_office patterns-kde-kde_pim patterns-kde-kde_plasma patterns-kde-kde_utilities patterns-kde-kde_utilities_opt patterns-kde-kde_yast - Drop the telepathy pattern. The telepathy modules are now officially unmaintained upstream and won't be released anymore. ==== plasma-browser-integration ==== Version update (5.27.6 -> 5.27.7) Subpackages: plasma-browser-integration-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== plasma-nm5 ==== Version update (5.27.6 -> 5.27.7) Subpackages: plasma-nm5-lang plasma-nm5-openconnect plasma-nm5-openvpn plasma-nm5-pptp plasma-nm5-vpnc - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - Changes since 5.27.6: * Avoid double delete of TabWidget ==== plasma5-addons ==== Version update (5.27.6 -> 5.27.7) Subpackages: plasma5-addons-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - Changes since 5.27.6: * wallpapers/potd: use https in apodprovider ==== plasma5-desktop ==== Version update (5.27.6 -> 5.27.7) Subpackages: plasma5-desktop-emojier plasma5-desktop-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - Changes since 5.27.6: * applets/kickoff: add blocker to prevent focus change in search view (kde#466192) * Kickoff: Fix grid view key nav in mirrored layout * Update Unicode data for emojier to 15.0 * applets/taskmanager: use hardcoded value * applets/taskmanager: make PauseAnimation wait longer (kde#470135) * desktoppackage: activate panel on "Activate Panel Widget" shortcut pressed (kde#455398) * kaccess: Use kcfg files of kcm * kcms/access: Match kcfg default values to old defaults/kaccess ==== plasma5-disks ==== Version update (5.27.6 -> 5.27.7) Subpackages: plasma5-disks-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== plasma5-integration ==== Version update (5.27.6 -> 5.27.7) Subpackages: plasma5-integration-plugin plasma5-integration-plugin-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== plasma5-openSUSE ==== Subpackages: plasma5-defaults-openSUSE plasma5-theme-openSUSE plasma5-workspace-branding-openSUSE sddm-theme-openSUSE - Update to 5.27.7 ==== plasma5-pa ==== Version update (5.27.6 -> 5.27.7) Subpackages: plasma5-pa-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - Changes since 5.27.6: * Put volume change logic centrally in VolumeSlider * Make setGenericVolume keep balance between channels (kde#435840) ==== plasma5-systemmonitor ==== Version update (5.27.6 -> 5.27.7) Subpackages: plasma5-systemmonitor-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== plasma5-thunderbolt ==== Version update (5.27.6 -> 5.27.7) Subpackages: plasma5-thunderbolt-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== plasma5-workspace ==== Version update (5.27.6 -> 5.27.7) Subpackages: gmenudbusmenuproxy plasma5-session plasma5-session-wayland plasma5-workspace-lang plasma5-workspace-libs xembedsniproxy - Add patch to fix line wrapping of "100 %" in OSDs (kde#469576): * 0001-OSD-Fix-size-calculation-for-progress-value.patch - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - Changes since 5.27.6: * libtaskmanager: fix unable to change order of launchers (kde#472812) * Reorder removals to ensure launcher url is deallocated after last use * Fix crash in LauncherTasksModel::Private::requestRemoveLauncherFromActivities (kde#472378) * libtaskmanager: skip empty appId when matching '*.appId.desktop' (kde#472576,kde#428559) * Do not write empty path to desktop file (kde#433304) * Fix crash in TasksModel::move (kde#472524) * kcm/region_language: fix enum order (kde#472108) * kcms/region_language: Read from $LANGUAGE in options model * kcms/region_language: Improve isSupportedLanguage detection * kcms/region_language: Chop off the UTF-8 codepoint again * kcms/region_language: Check if the language setting is default as well * kcms/region_language: Simplify the language settings read * kcms/region_language: Read the LANGUAGE environment variable for the default language value * TriangleMouseFilter: remove unnecessary return * TriangleMouseFilter: make `resendHoverEvents` actually work * TriangleMouseFilter: fix incorrect handling of hover events and inactive state (kde#467426) * TriangularMouseFilter: Filter event everytime when there was no movement at all * Improve responsiveness of triangular filter * shell: move `forceActiveFocus` to `PanelView` * applets/mediacontroller: use PauseAnimation to delay showing busy indicator * applets/mediacontroller: remove duplicate opacity animation * applets/notifications: add workaround for QTBUG-100392 (kde#468180) * Notifications: Also try X-SnapInstanceName for desktop file resolution * libtaskmanager: fix a potential leak ==== polkit-kde-agent-5 ==== Version update (5.27.6 -> 5.27.7) Subpackages: polkit-kde-agent-5-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== powerdevil5 ==== Version update (5.27.6 -> 5.27.7) Subpackages: powerdevil5-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6 ==== python-pexpect ==== - Clean up the SPEC file ==== systemsettings5 ==== Version update (5.27.6 -> 5.27.7) Subpackages: systemsettings5-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - Changes since 5.27.6: * Properly show the custom header widget when started with non-QML KCMs ==== virt-manager ==== Subpackages: virt-install virt-manager-common - bsc#1213790 - Application tab in virt-manager is collapsed, therefore I can't read anything virtman-fix-inspection-apps-window.patch ==== xdg-desktop-portal-kde ==== Version update (5.27.6 -> 5.27.7) Subpackages: xdg-desktop-portal-kde-lang - Update to 5.27.7 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.7 - No code changes since 5.27.6

1 0

Re: Disk auto-unlocking with TPM 2.0
by Thiago Macieira 03 Aug '23

03 Aug '23

Gary Lin wrote: > Next, reboot your system. If everything is setup correctly, the system will > boot without showing the passphrase prompt. Hello Gary Thank you for this. I am planning to test the functionality, but I am slightly wary of doing so because only my main laptop has TPM2. My back-up one, which is where I usually do tests and also keep as a hot-standby of TW, does not. I may not do this at all because I don't want to have two different configurations. So, what are the failure modes here? Assuming the set up didn't corrupt the grub configuration files, what happens if the TPM2 unlocking fails to work? Will I be simply prompted to enter my boot password like I do today? Is this also what happens if grub2 or shim change? On the technical side, how does the initrd image get checked? Grub, the kernel and the shim are stored unencrypted, but they are signed so they can be verified. The initrd image is also unencrypted and since it is created during zypper dup (half a dozen times), it can't be signed with SUSE's key. Will dracut/mkinitrd now use the TPM2 to sign/seal it? Finally, does this re-enable hibernation? I Understand from upstream developers that hibernation gets disabled because they couldn't otherwise verify that the hibernation image wasn't tampered with by the user. That is, the hibernation image contains a valid state for the current kernel, but that state is not what a securely-booted kernel wrote. If it does enable hibernation, do I understand correctly that such hibernation will still be disabled if the TPM boot fails and I have to type the password? If it's not enabled, do you have a timeline for when that will be supported? PS: would be nice to have a toggle for re-enabling hibernation even without TPM2, such my old laptop or with the current set ups. In order to attack the system as described above, one needs to know the swap password. AFAIU, the functionality exists to prevent the user from attacking the system, but that is only possible if the root filesystem and kernel are also dm-verity and thus unmodifiable by the admin. -- Thiago Macieira - thiago (AT) macieira.info - thiago (AT) kde.org Software Architect - Intel DCAI Cloud Engineering

4 7

New Tumbleweed snapshot 20230801 released!
by Dominique Leuenberger 02 Aug '23

02 Aug '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: iio-sensor-proxy (3.4 -> 3.5) rsync rubygem-rack-2.2 (2.2.7 -> 2.2.8) yast2-trans (84.87.20230720.09601d9b28 -> 84.87.20230729.64eca7e0a1) === Details === ==== iio-sensor-proxy ==== Version update (3.4 -> 3.5) - Update to version 3.5: * Fix sensor hotplugging * Fix some sensors not working when they were assigned a sampling frequency they did not support. * Add more tests. * Correct the location of the D-Bus policy file. ==== rsync ==== - Add support directory to %docdir. Includes some upstream provided scripts such as rrsync. (bsc#1212198) ==== rubygem-rack-2.2 ==== Version update (2.2.7 -> 2.2.8) - update to version 2.2.8 * Limit file extension length of multipart tempfiles (https://github.com/rack/rack/pull/2069) * Fix inefficient assert pattern in Rack::Lint (https://github.com/rack/rack/pull/2101) ==== yast2-trans ==== Version update (84.87.20230720.09601d9b28 -> 84.87.20230729.64eca7e0a1) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sr yast2-trans-sv yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20230729.64eca7e0a1: * Translated using Weblate (Kurdish) * Translated using Weblate (Czech)

1 0

openSUSE Release Engineering meeting 02.08.2023
by Lubos Kocman 02 Aug '23

02 Aug '23

All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting The meeting is hosted here https://meet.opensuse.org/ReleaseEngineeringMeeting ## Attendees DimStar,Guillaume_G, Eugenio, Sarah, RBrown, Lubos, Max Special Guest: Eugenio regarding xcdchk replacement ## Eugenio (xcdchk replacement in SLE) xcdchk is a tool that looks at the RPMs in built installation medias in order to gather infos and differences between two (or more) builds. Although it has been decided to keep using it for SLE15-SP6, a question arose on whether to switch to something like openSUSE's factory- package-news in future. So I would like to ask about known limitations (like support for retrieving differences between past builds) and if you would be open to contributions from the SLE side to perhaps make the output more in line with the current xcdchk. Might be a fun hackweek project :) dimstar: we could add second parameter to diff against different BASE version and a target should be easy. lkocman: side-note dmach wrote a very nice "compose-diff" tool working based on productmd/json metadata. OBS team has obsgendiff. Somebody already has to scan builds and upload data to repology, I think that working with single json/yaml rather, than keep on scanning the tree would make it easeier for everyone. Dimstar: I think that the current script takes the metadata from DVD. Dirk: I don't see that current xcdchk does not scan trees. lkocman: Perhaps other extensions have media too. DimStar: obsgendiff was disabled as it delayed builds by at least 30minutes on all arches. Max: I believe that it was in the end enabled only on Leap. Dirk: xcdchk does not mask email addresses while factory-news does. Perhaps we need an option for that too. ## Leap The next hackweek will take place in the week of 6th November. All reported feature requests against 15.6 were processed. https://code.opensuse.org/leap/features Filed several tasks regarding remaining setup of 15.6 (for QA, IT, autobuild, etc). So we give team enough heads up to e.g. plan for the openqa/maint setup around Beta timeframe, especially with all the work on ALP. openSUSE-repos https://news.opensuse.org/2023/07/31/try-out-cdn-with-opensuse-repos/ was published Big thanks to Michael Andres and Dirk for the review I'd like to integrate nvidia repo with it, but I'm not sure if there is an good way to handle transition correctly. But then nobody so far complained about manual revert for the old-style repos https://github.com/openSUSE/openSUSE-repos/issues/28 Aside from that Dirk and Andrii suggested to go http by default. There was some pushback from Darix etc. Dirk: It is an intermediate problem. There is only a very few mirrors left which are http-only. There are some mirrors that are ipv6 only. Dirk the end goal is that we should switch to https. Dirk: The adoption went quite up thanks to the effort (currently ~ 10k hits/minute) LeapMicro 5.5 built setup basically done, everything is building. changes were synced from SLEM5.5 Alpha2 A little change is needed to use the 15 SP5 install-images without further changes https://github.com/openSUSE/installation-images/pull/651 Need to work on the QA setup and later get-o-o ## openSUSE Tumbleweed openSUSE:Factory build fail stats: 67 failed 0 unresolvable (last week: 87 failed, 5 unresolvable) https://tinyurl.com/ysy4nnnz * kernel 6.4.6 (with ZenBleed fix) was part of snapshot 0727 * KDE Plasma 5.27.7 in Staging * libxml2 2.11.x blocked, as it breaks things like perl-XML-LibXML, * fmt 10 blocked, as it breaks mariadb boo#1213219, ceph boo#1213217 Max: Trouble with the new product-builder update. Adrian announced change, however, there were still some issues as expected. Bug reports were opened https://bugzilla.opensuse.org/show_bug.cgi?id=1213893. ppc64 has issue with qemu/aggregate. Check was disabled in product- builder everywhere so we can get a new snapshot. duplicate packagelist: https://paste.opensuse.org/pastes/406636eb2b3a particular issue with noarch binary: THE package in Factory:NonFree has different noarch version binary package in i586/x86_64 buil Dimstar: the situation with qemu got a lot more complex. We do import binaries etc. Dirk: I would really not recommend to disable it, it will cause issues with mirrors. Is this issue only with TW or Leap too? Max: it's only on TW. Dirk: Is chromium the only thing that we need to fix before re-enabling the flag? Dirk: the issue is only with noarch packages that have the same release number. Max: if you disable the release check it will ignore only the lower version ones. ## Richard (Aeon) Richard's been needing to focus on SUSE ALP topics more than Aeon Really wants to get Aeon's own media out soon, likely to throw it into openSUSE:Factory as openSUSE:ALP will need more time Researching using systemd-homed which would likely be ideal for Aeon, but gnome-initial-setup will need some patches CSL Concept as documented here is likely to be incorporated going forward https://en.opensuse.org/Portal:Aeon/DevelopmentThoughts Discussions with possioble new Aeon security maintainer to basically augment the SUSE Security team so Aeon can diverge in limited areas (eg more Desktop-friendly SELinux booleans) lkocman: we have some features for home-only encryption. systemd-homed would be a big help in that direction. https://code.opensuse.org/leap/features/issue/113 ## Richard (ALP Architecture) ALP-Leap-Replacement meeting minutes - https://etherpad.opensuse.org/p/weeklymeeting20230725 Planning on releasing the poll discussed last week shortly ## Max * Re-enabled all archs build, but s390x build power is quite low * Merged more package update from 15.5:Update and Backports:SLE-15- SP5:Update I believe 15-SP6 is still not open for SRs. Or at least it was mentioned on Monday's standup. ## Guillaume - Arm Tumbleweed: * Rolling * gcc13 bug leading to build failure of highway (and maybe more) - A fix is available in master branch of GCC and need to be backported to GCC13 - https://bugzilla.opensuse.org/show_bug.cgi?id=1213647 * shim currently not signed by Microsoft for aarch64 (Tumbleweed only, Leap is fine). It has been sent upstream for review, so it is progressing - https://bugzilla.suse.com/show_bug.cgi?id=1211297 Leap: * 15.5 aarch64: kernel oops seen on openQA aarch64 workers - https://bugzilla.opensuse.org/show_bug.cgi?id=1213620 * 15.5: port for armv7: containers are currently not building/created. Dirk mentioned that driver in 15.4 was the k3s team. ALP: * shim not signed by MS (at least for aarch64, not sure for x86_64) - jsc#ARM-100 WSL: * Works with x86 emulator since appx installer is x86-64, but this is not really an issue since arm64 Win11 includes x86 emulator by default. Team is ok to publish it on Microsoft store anyway, but this would require some testing in openQA which is currently not possible (due to technical issues and MS licensing issues) https://progress.opensuse.org/issues/126083. Steps documented on the wiki to install the appx from download.o.o: https://en.opensuse.org/openSUSE:WSL#With_Appx_from_openSUSE_download_server Note: I will miss all next meetings in August. See you in September. ## Sarah - s390x Tumbleweed * running Leap: * running Enablement topics: * MPI is enabled for LLVM (IBMer has forgotten his enablement stuff on the PC) * package calc is running on s390x * package adios2 has required an additional build dependency for libffi-devel * waitingSubmissisions with fixes for gtkd and gnu-cobol: https://build.opensuse.org/request/show/1098832 (SR edited and waiting for approval again) https://bugzilla.opensuse.org/show_bug.cgi?id=1209438 Information about builds: * less build nodes available because of data center migration -> longer waiting time for successful builds ## Doug Not available * Sponsorship of LinuxFest NorthWest from previous pre-covid sponsorship carries forward this year * Contact ddemaio if plan to attend or want to run a booth * https://linuxfestnorthwest.org/ * openSUSE Conference 2023 videos complete * Thank you c3voc & openSUSE Video Team * Scheduling video posts on social media * Project Clarity * Establishing a clear understanding of projects within the openSUSE Project umbrella and how new project will be identified, verified to be part of the openSUSE Project * Board will be taking this on (Rancher and Uyuni/SUSE Manager) was discussed in the board meeting earlier this week) * openSUSE.Asia Summit * Registrations 4, Submissions 5 * Talks can be onsite or virtual (recorded). * Deadline is August 20. * Submit your proposal at https://events.opensuse.org/ * openALT / Fall 2023 (invoice based) sponsorship approved by Anicka (10k CZK) - Dirk reminded us about OSCC still having some budget available * Trying to troubleshoot one TSP payments * Community meeting * Worked on project clarity & enhancing info on https://en.opensuse.org/openSUSE:How_to_contribute_to_Factory * EL Collaboration Meeting changed to once a month. Next is August 31 * GSoC * Mid-term evaluations complete with 100% Friday, July 14, by 18:00 UTC * openSUSE Boxes * Two companies are thinking about restarting with Start-Up Booklet * Stakeholders informed * Need to schedule followup meeting w/netitwork Static * Still need future storage location * AI topics (static) * Scraping of info & how it might affect costs is being dicussed by board * Dirk: There is a OSCC meetup today touching the topic * Board looking into using AI to help with possible moderation *** ddemaio will be unavailable for this meeting until the August 9 meeting starting next week ## Dirk Further troubleshooting and tuning of CDN configuration. Currently enabled in NA, SA and Africa. ## Wolfgang (Package Hub), Scott Bahling Not available Project openSUSE:Backpors:SLE-15-SP6 created in OBS (currently build disabled because of AC issues in SRV1, more build workers will be added latest tomorrow) Creating release package for SP6 (SUSE:Backports:SLE-15-SP6) today in IBS ## Maintenance team (Marcus or Maurizio (m4u)) Not available No big news Firefox needs updates of dependencies before it can be updated to the current version (Security fixes) libzypp update in 15.5 was fixed by releasing missing dependency. libzypp issue that can be properly addressed only with respin of DVD. See section above for more details. openQA is OK currently. (snapper was fixed) Some 15.5 updates from between freeze and GA need to be released, WIP for Marcus Key rotation: Migration with changed 4k key. Current autoimport solution is not ideal. Marcus will work on update of the opensuse-build-key https://en.opensuse.org/SDB:System_upgrade#0._New_4096_bit_RSA_signing_key Marcus is working also on the SLES side, the update of package with the new key was released last week, it's just not activated yet, but it will be already trusted by Leap 15.5 systems. Leap 15.4 is working Leap Micro 5.3 is working Leap Micro 5.4 testing is now passing as well Leap 16.0 - we should revisit the update/sle repo as the current setup not exactly mirror friendly. Solutions could be dropping not so popular architectures or split repositories per architecture. lkocman: 15.3 EOL could lead to stopping our physical Source DVD effort, as it seems we will not produce. As this was the last release which you could still get on a physical media. Lkocman: anything against decomissioning it? Not a single valid request since I've joined SUSE. We did receive only requests for binary install media which are not subject to ^. We do not plan to offer this for any new releases. ## Adrian - OBS OBS build power is back to normal after fixing misconfiguration which kept workers busy. Servers for OBS is moving to new datacenters until the end of the month of July AC problems in Nüremberg with openQA servers ## Open Floor

1 0

New Laptop
by Leandro Almeida 02 Aug '23

02 Aug '23

Hello, I wanted to ask openSUSE to add the drivers of my new laptop in the distribution, to get full performance, last longer battery etc I also wanted to suggest to OpenSUSE, to add better general support in hardware acceleration, audio, GPU, av1, vp9, avc, etc Also OpenSUSE adds by default vm.max_map_count 2147483642 (MAX_INT – 5), for proton steam play vulkan to flow better, games with huge maps to flow better, fps increase etc. And better Steam support from snap packages, official steam too 👍👍😄 Lenovo IdeaPad 3 15ITL6 Intel Core i3 1115g4 (4) 4100GHz Intel Tiger Lake-LP GT2 (UHD Graphics G4) 1920x1080p 60Hz KDE Plasma Wayland PTBR UTF8 ABNT2 with numeric keypad OpenSUSE Tumbleweed 👍👍😄

8 11

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 02 Aug '23

02 Aug '23

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have had problems for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - nomacs: Uninstallable: nothing provides libexiv2.so.27()(64bit) needed by nomacs-3.16.224.x86_64 - pix: Uninstallable: nothing provides libexiv2.so.27()(64bit) needed by pix-2.8.0.x86_64 - python-exiv2: Uninstallable: nothing provides libexiv2.so.27()(64bit) needed by python310-exiv2-0.11.0.x86_64 - ufraw: Uninstallable: nothing provides libexiv2.so.27()(64bit) needed by gimp-ufraw-0.22.x86_64 Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

2 1

New Tumbleweed snapshot 20230731 released!
by Dominique Leuenberger 01 Aug '23

01 Aug '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: util-linux (2.39 -> 2.39.1) util-linux-systemd (2.39 -> 2.39.1) vala-panel-appmenu === Details === ==== util-linux ==== Version update (2.39 -> 2.39.1) Subpackages: libblkid1 libfdisk1 libmount1 libsmartcols1 libuuid1 util-linux-lang - Re-add 0001-Revert-libblkid-try-LUKS2-first-when-probing.patch because the patch is not in 2.39.1 - Upgrade to version 2.39.1 (bsc#1213328) Various bug fixes including problem with parsing mount options. - Dropped upstreamed patches: 0001-Revert-libblkid-try-LUKS2-first-when-probing.patch 0001-libmount-fix-sync-options-between-context-and-fs-str.patch util-linux-fix-tests-with-64k-pagesize.patch ==== util-linux-systemd ==== Version update (2.39 -> 2.39.1) - Re-add 0001-Revert-libblkid-try-LUKS2-first-when-probing.patch because the patch is not in 2.39.1 - Upgrade to version 2.39.1 (bsc#1213328) Various bug fixes including problem with parsing mount options. - Dropped upstreamed patches: 0001-Revert-libblkid-try-LUKS2-first-when-probing.patch 0001-libmount-fix-sync-options-between-context-and-fs-str.patch util-linux-fix-tests-with-64k-pagesize.patch ==== vala-panel-appmenu ==== Subpackages: appmenu-gtk-module-common appmenu-gtk2-module appmenu-gtk3-module libappmenu-gtk2-parser0 libappmenu-gtk3-parser0 - Fix systemd_user_post macro use. - Spec clean-up.

1 0