September 2023 - openSUSE Factory - openSUSE Mailing Lists

repodata missing leap 15.6 ...
by André Verwijs 11 Sep '23

11 Sep '23

http://download.opensuse.org/debug/update/leap/15.6/non-oss/ dos not have any repodata so show up as error with refreshing repo's ....

3 2

no tumbleweed update yesterday
by Luna Jernberg 10 Sep '23

10 Sep '23

but there was one today

2 1

New Tumbleweed snapshot 20230908 released!
by Dominique Leuenberger 10 Sep '23

10 Sep '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: GraphicsMagick aaa_base (84.87+git20230329.b39efbc -> 84.87+git20230815.cab7b44) busybox-links coreutils (9.3 -> 9.4) crypto-policies drbd (9.0.30~1+git.8e9c0812 -> 9.1.16) drbd-utils (9.19.0 -> 9.25.0) grep kdump kexec-tools (2.0.26.0 -> 2.0.27) lastlog2 (1.1.0 -> 1.2.0) libei (1.0.901 -> 1.1.0) multipath-tools (0.9.5+68+suse.d1b6a1c -> 0.9.6+71+suse.f07325e) open-vm-tools (12.2.0 -> 12.3.0) pam-config (2.5 -> 2.8) perl-Bootloader (1.6 -> 1.8) python-async_timeout (4.0.2 -> 4.0.3) python-click (8.1.6 -> 8.1.7) python-lxml python-outcome python-psycopg2 (2.9.6 -> 2.9.7) python-zope.event (4.6 -> 5.0) python311 (3.11.4 -> 3.11.5) python311-core (3.11.4 -> 3.11.5) shaderc (2023.4 -> 2023.6) sssd (2.9.1 -> 2.9.2) unbound (1.17.1 -> 1.18.0) wireless-regdb (20230721 -> 20230901) === Details === ==== GraphicsMagick ==== Subpackages: libGraphicsMagick++-Q16-12 libGraphicsMagick-Q16-3 libGraphicsMagick3-config - revert to 1.3.40 [bsc#1214831] https://sourceforge.net/p/graphicsmagick/news/2023/08/because-1341-is-disca… - modified patches % GraphicsMagick-disable-insecure-coders.patch (refreshed) - deleted patches - GraphicsMagick-fix-regression-NULL-instead-of-empty-string.patch (not needed) - GraphicsMagick-name-key-return-input-file-base-name.patch (not needed) - fix regression in 1.3.41 https://sourceforge.net/p/graphicsmagick/bugs/722/ - added patches fix 17179:91afa18a6161 + GraphicsMagick-fix-regression-NULL-instead-of-empty-string.patch fix 17180:bb42cd90ce6f + GraphicsMagick-name-key-return-input-file-base-name.patch - version update to 1.3.41 Bug fixes: * Blob: Immediately reject attempts to write blobs to formats which can not support blobs. * TranslateTextEx(): An empty string argument should return an empty string rather than a NULL string. * SetImageAttribute(): Fix bounds issue when concatenating string. * JPEG: Do not set image resolution if the values provided are outside of the valid range. * Fixes for NaN when reading formats based on floating point. * HEIF: Fix reading images with rotation/transformation. * BMP: Do not decode primaries or gamma unless colorspace is LCS_CALIBRATED_RGB. Add/correct bmp_info.size "biSize" logic which decides if header chunks are present (or invalid). * MNG: Fixes for resizing using X_method 5. * GM command (convert, montage, mogrify): Many command-line parser fixes/checks for invalid command line syntax which causes unexpected behavior, or core dumps. * TopoL: Given that a writer is now provided, issues found in the reader (and writer) due to continual fuzz-testing have been fixed, as encountered. * GetImageClippingPathAttribute(): Check for and use clipping path name (ID=2999) to get the real attribute name. * ReadIPTCProfile(): Fix malformed IPTC data parsing. New Features: * TopoL: Now provides a writer. * WPG: Now provides a writer. * gm batch: Implement simple Test Anything Protocol (TAP) test counting and "ok N"/"not ok N" messaging. * TIFF: Support '-define tiff:photometric=minisblack' and '-define tiff:photometric=miniswhite' to be able to adjust the sense used when writing bilevel TIFF images. * TIFF: Require that TIFFTAG_EXTRASAMPLES be used appropriately to indicate the intention of extra channels. * utilities/tests/gen-tiff-images/genimages: Script for writing (and then reading) thousands (5568 permutations) of TIFF format variants. * EXIF and PNG: Retrieve image orientation from EXIF (if present) and store in image. * HEIF: Retrieve image orientation from EXIF and store in image. Behavior Changes: * The ability to extend existing image attribute text by calling SetImageAttribute() multiple times with the same key is now deprecated, and will soon be removed. In the mean time, the annoying message "SetImageAttribute: Extending attribute value text is deprecated!" is printed to the standard error output to help expose code which is using this feature. - modified patches % GraphicsMagick-disable-insecure-coders.patch (refreshed) - deleted patches - strlcpy-wrong-sizing.patch (upstreamed) ==== aaa_base ==== Version update (84.87+git20230329.b39efbc -> 84.87+git20230815.cab7b44) Subpackages: aaa_base-extras - Update to version 84.87+git20230815.cab7b44: * Remove broken autocompletion overrides and restore default bash behavior * Add foot to DIR_COLORS * files/u/s/sysconf_addword: avoid bashism, fix shellcheck warnings * files/u/s/smart_agetty: replace shebang with /bin/sh * files/u/s/service: avoid bashism, fix shellcheck warnings * files/u/s/refresh_initrd: make POSIX compliant * files/u/b/safe-rm: make POSIX compliant * aaa_base.post: replace shebang with /usr/sh * files/u/b/old: make POSIX compliant ==== busybox-links ==== Subpackages: busybox-bzip2 busybox-coreutils busybox-ed busybox-findutils busybox-gawk busybox-grep busybox-gzip busybox-misc busybox-psmisc busybox-sed busybox-sendmail busybox-tar busybox-which busybox-xz - Add conflict for coreutils-systemd, package got splitted ==== coreutils ==== Version update (9.3 -> 9.4) Subpackages: coreutils-lang - Update to 9.4: Bug fixes: * b2sum --check will no longer read unallocated memory when presented with malformed checksum lines. [bug introduced in coreutils-9.2] * cp --parents again succeeds when preserving mode for absolute directories. Previously it would have failed with a "No such file or directory" error. [bug introduced in coreutils-9.1] * cp --sparse=never will avoid copy-on-write (reflinking) and copy offloading, to ensure no holes present in the destination copy. [bug introduced in coreutils-9.0] * cksum again diagnoses read errors in its default CRC32 mode. [bug introduced in coreutils-9.0] * cksum --check now ensures filenames with a leading backslash character are escaped appropriately in the status output. This also applies to the standalone checksumming utilities. [bug introduced in coreutils-8.25] * dd again supports more than two multipliers for numbers. Previously numbers of the form '1024x1024x32' gave "invalid number" errors. [bug introduced in coreutils-9.1] * factor, numfmt, and tsort now diagnose read errors on the input. [This bug was present in "the beginning".] * install --strip now supports installing to files with a leading hyphen. Previously such file names would have caused the strip process to fail. [This bug was present in "the beginning".] * ls now shows symlinks specified on the command line that can't be traversed. Previously a "Too many levels of symbolic links" diagnostic was given. [This bug was present in "the beginning".] * pr --length=1 --double-space no longer enters an infinite loop. [This bug was present in "the beginning".] * tac now handles short reads on its input. Previously it may have exited erroneously, especially with large input files with no separators. [This bug was present in "the beginning".] * uptime no longer incorrectly prints "0 users" on OpenBSD, and is being built again on FreeBSD and Haiku. [bugs introduced in coreutils-9.2] * wc -l and cksum no longer crash with an "Illegal instruction" error on x86 Linux kernels that disable XSAVE YMM. This was seen on Xen VMs. [bug introduced in coreutils-9.0] Changes in behavior: * cp -v and mv -v will no longer output a message for each file skipped due to -i, or -u. Instead they only output this information with --debug. I.e., 'cp -u -v' etc. will have the same verbosity as before coreutils-9.3. * cksum -b no longer prints base64-encoded checksums. Rather that short option is reserved to better support emulation of the standalone checksum utilities with cksum. * mv dir x now complains differently if x/dir is a nonempty directory. Previously it said "mv: cannot move 'dir' to 'x/dir': Directory not empty", where it was unclear whether 'dir' or 'x/dir' was the problem. Now it says "mv: cannot overwrite 'x/dir': Directory not empty". Similarly for other renames where the destination must be the problem. [problem introduced in coreutils-6.0] - Enable systemd-logind support - Add gnulib-readutmp.patch: Fix seg.fault of who, pinky, uptime [dgo#65617] - Create -systemd flavor with binaries linked against libsystemd - Drop coreutils-invalid-ids.patch to get consistent behavior, most tools where already removed from that patch. - coreutils-misc.patch: adjust paths - coreutils-skip-some-sort-tests-on-ppc.patch: adjust paths - coreutils-test_without_valgrind.patch: adjust paths - coreutils-i18n.patch: update from Fedora ==== crypto-policies ==== Subpackages: crypto-policies-scripts - Tests: Fix pylint versioning for TW and fix the parsing of the policygenerators to account for the commented lines correctly. * Add crypto-policies-pylint.patch * Rebase crypto-policies-policygenerators.patch - FIPS: Adapt the fips-mode-setup script to use the pbl command from the perl-Bootloader package to replace grubby. Add a note for transactional systems [jsc#PED-4578]. * Rebase crypto-policies-FIPS.patch ==== drbd ==== Version update (9.0.30~1+git.8e9c0812 -> 9.1.16) Subpackages: drbd-kmp-default - Update DRBD version from 9.0.30+ to 9.1.16 (PED-6362) * 9.1.16 (api:genl2/proto:86-121/transport:18) * shorten times DRBD keeps IRQs on one CPU disabled. Could lead to connection interruption under specific conditions * fix a corner case where resync did not start after resync-pause state flapped * fix online adding of volumes/minors to an already connected resource * fix a possible split-brain situation with quorum enabled with ping-timeout set to (unusual) high value * fix a locking problem that could lead to kernel OOPS * ensure resync can continue (bitmap-based) after interruption also when it started as a full-resync first * correctly handle meta-data when forgetting diskless peers * fix a possibility of getting a split-brain although quorum enabled * correctly propagate UUIDs after resync following a resize operation. Consequence could be a full resync instead of a bitmap-based one * fix a rare race condition that can cause a drbd device to end up with WFBitMapS/Established replication states * 9.1.15 (api:genl2/proto:86-121/transport:18) * fix how flush requests are marked when submitted to the Linux IO stack on the secondary node * when establishing a connection failed with a two-pc timeout, a receiver thread deadlocked, causing drbdsetup calls to block on that resource (difficult to trigger) * fixed a NULL-ptr deref (a OOPS) caused by a rare race condition while taking a resource down * fix a possible hard kernel-lockup, can only be triggerd when a CPU-mask is configured * updated kernel compatibility to at least Linux head and also fixed a bug in the compat checks/rules that caused OOPSes of the previous drbd releases when compiled with Linux-6.2 (or on RHEL 9.2 kernel). * fix an aspect of the data-generation (UUID) handling where DRBD failed to do a resync when a diskless node in the remaining partition promotes and demotes while a diskful node is isolated * fix an aspect of the data-generation (UUID) handling where DRBD considered a node to have unrelated data; this bug was triggered by a sequence involving removing two nodes from a cluster and readding one with the "day-0" UUIDs. * do not block specific state changes (promote, demote, attach, and detach) when only some nodes add a new minor * 9.1.14 (api:genl2/proto:86-121/transport:18) * fix a race with concurrent promotion and demotion, which can lead to an unexpected "split-brain" later on * fix a specific case where promotion was allowed where it should not * fix a race condition between auto-promote and a second two-phase commit that can lead to a DRBD thread locking up in an endless loop * fix several bugs with "resync-after": - missing resync-resume when minor numbers run in opposite direction as the resync-after dependencies - a race that might lead to an OOPS in add_timer() * fix an OOPS when reading from in_flight_summary in debugfs * fix a race that might lead to an endless loop of printing "postponing start_resync" while starting a resync * fix diskless node with a diskfull with a 4KiB backend * simplify remembering two-pc parents, maybe fixing a one-time-seen bug * derive abort_local_transaction timeout from ping-timeout * 9.1.13 (api:genl2/proto:86-121/transport:18) * when calculating if a partition has quorum, take into account if the missing nodes might have quorum * fix forget-peer for diskless peers * clear the resync_again counter upon disconnect * also call the unfence handler when no resync happens * do not set bitmap bits when attaching to an up-to-date disk (late) * work on bringing the out-of-tree DRBD9 closer to DRBD in the upstream kernel; Use lru_cahche.ko from the installed kernel whenever possible * 9.1.12 (api:genl2/proto:86-121/transport:18) * fix a race that could result in connection attempts getting aborted with the message "sock_recvmsg returned -11" * rate limit messages in case the peer can not write the backing storage and it does not finish the necessary state transitions * reduced the receive timeout during connecting to the intended 5 seconds (ten times ping-ack timeout) * losing the connection at a specific point in time during establishing a connection could cause a transition to StandAlone; fixed that, so that it keeps trying to connect * fix a race that could lead to a fence-peer handler being called unexpectedly when the fencing policy is changed at the moment before promoting * 9.1.11 (api:genl2/proto:86-121/transport:18) * The change introduced with 9.1.10 created another problem that might lead to premature request completion (kernel crash); reverted that change and fix it in another way * 9.1.10 (api:genl2/proto:86-121/transport:18) * fix a regression introduced with 9.1.9; using protocol A on SMP with heavy IO can might cause kernel crash * 9.1.9 (api:genl2/proto:86-121/transport:18) * fix a mistake in the compat generation code; it broke DRBD on partitions on kernel older than linux 5.10 (this was introduced with drbd-9.1.8; not affected: logical volumes) * fix for a bug (introduced with drbd-9.0.0), that caused possible inconsistencies in the mirror when using the 'resync-after' option * fix a bug that could cause a request to get stuck after an unlucky timing with a loss of connection * close a very small timing window between connect and promote that could lead to the new-current-uuid not being transmitted to the concurrently connecting peer, which might lead to denied connections later on * fix a recently introduced OOPS when adding new volumes to a connected resource ... changelog too long, skipping 131 lines ... - bsc-1206791-09-pmem-use-fs_dax_get_by_bdev-instead-of-dax_get_by_ho.patch ==== drbd-utils ==== Version update (9.19.0 -> 9.25.0) - Update to 9.25.0 (PED-5842) * drbdsetup,v9,show: fix meta disk format for json * drbdmeta: {hex,}dump superblock * drbdmon: major rewrite * build: gcc v12 cleanups * misc: put locks into separate dir * selinux: add fowner fsetsid, they dropped a global noaudit rule * v9: Support user-defined block-size * doc,v9: improvements all over the place * drbdadm,v9: implement drbdadm role <res:peer> * drbdadm,v9: pass --verbose/--statistics to drbdsetup status * drbd{adm,meta}: add repair-md subcommand * drbdadm,v9,resync-after: fix too strict check * drbdadm,v9,floating: fixup fake uname for 9.2.x strict_names=1 * drbdadm,v9,parser: fixup globs, also rm GNU libc specific extensions * drbdadm,v9,parser: allow via outside-address for NATed peers * parser,v9: deprecate named connections * drbd-selinux: add sub package, minor packaging/spec changes * drbdadm: allow files from expanded glob to vanish * drbdadm,v9: fix potential segfault in postparse * drbdadm,v9: fix sh-ip when set on connection/path * drbdmeta: fix apply-al for bitmap sizes > 4GiB * drbd-service-shim.sh: add secondary --force * ocf: fix for dropped --peer option * drbdsetup,v9: show susupend reason in json output * drbdsetup,v9: add secondary --force * drbdsetup,v9: fix *susp_str() for events2 diff mode * drdbdadm,v9: fix sh-resource * drdbdadm,v9: rm --peer=connect_to_host * ocf: deal with situation where PM node name and actual node name do not match * notify.sh: deal with unset DRBD_PEER env variable * crm-fence-peer: fix timeout with Pacemaker 2.0.5 * drbdmeta: don't wait for confirmation if not a TTY * drbdadm,v9: Pass '--force' to certain drbdmeta commands * drbdmeta: do init in chunks; allow different methods * build: various minor fixes (udev detection, POSIX, compiler flags, allow doc building with asciidoctor,...) * drbd.ocf: fix type (relevant for certain pcs versions) * crm-fence-peer: fix timeout with Pacemaker 2.1 * v9,proxy: allow multiple sharing a proxy node * v9,drbdsetup: quote resource name in "show" * build: allow building for RHEL9.0, minor cleanups * reactor/systemd: allow proper actions (e.g., reboot) if demotion fails. - introduce new systemd service: drbd-demote-or-escalate@.service - remove v83 v84 binaries (incompatible with kmp) - drop patches which are already included in latest code: - 0001-crm-fence-peer-fix-timeout-with-Pacemaker-2.1-milli-.patch - 0002-crm-fence-peer-fix-timeout-with-Pacemaker-2.0.5-mill.patch - add upstream patch: + 0001-drbdadm-v9-do-not-segfault-when-re-configuring-proxy.patch + 0002-user-drbrdmon-add-missing-stdint.h-includes.patch + 0003-Introduce-default_types.h-header.patch - change patch name: - 0001-Disable-quorum-in-default-configuration-bsc-1032142.patch + bsc-1032142_Disable-quorum-in-default-configuration.patch - rebase patch: + pie-fix.patch + rpmlint-build-error.patch ==== grep ==== Subpackages: grep-lang - export CONFIG_SHELL=/bin/sh before running configure: results in the shell script (egrep/fgrep) to receive a /bin/sh shebang instead of requiring bash (the local shell used to build). ==== kdump ==== - update calibrate values, newly added SLE15-SP6 values ==== kexec-tools ==== Version update (2.0.26.0 -> 2.0.27) - update to 2.0.27: * ppc64: add --reuse-cmdline parameter support * kexec: make -a the default * x86: add devicetree support * ppc64: document elf-ppc64 options and --dt-no-old-root * LoongArch: kdump: set up kernel image segment * arm64: zboot support - Disable Xen support in ALP ==== lastlog2 ==== Version update (1.1.0 -> 1.2.0) Subpackages: liblastlog2-1 - Version 1.2.0 - show_lastlogin: Don't read if no database - Fix -flto for clang - Documentation fixes ==== libei ==== Version update (1.0.901 -> 1.1.0) - Update to release 1.1 * Correct documentation for ei_touch_(get|set)_user_data ==== multipath-tools ==== Version update (0.9.5+68+suse.d1b6a1c -> 0.9.6+71+suse.f07325e) Subpackages: kpartx libmpath0 - Update to version 0.9.6+71+suse.f07325e: * avoid changing SCSI timeouts in "multipath -d" (bsc#1213809) - Update to version 0.9.6+70+suse.63925e8: Upstream feature additions and bug fixes: * ignore nvme devices by default if nvme native multipath is enabled * add "group_by_tpg" path_grouping_policy * add config options "detect_pgpolicy" and "detect_pgpolicy_use_tpg" * libmultipath: add ALUA tpg path wildcard "%A" * make prioritizer timeouts consistent with checker timeouts * fix dev_loss_tmo even if not set in configuration (bsc#1212440) * libmultipath: fix max_sectors_kb on adding path * fix warnings reported by udevadm verify ==== open-vm-tools ==== Version update (12.2.0 -> 12.3.0) Subpackages: libvmtools0 open-vm-tools-desktop - Update to 12.3.0 (build 22234872) (boo#1214850) - There are no new features in the open-vm-tools 12.3.0 release. This is primarily a maintenance release that addresses a few critical problems, including: - This release integrates CVE-2023-20900 without the need for a patch. For more information on this vulnerability and its impact on VMware products, see https://www.vmware.com/security/advisories/VMSA-2023-0019.html. - A tools.conf configuration setting is available to temporaily direct Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior of ignoring file systems already frozen. - Building of the VMware Guest Authentication Service (VGAuth) using "xml-security-c" and "xerces-c" is being deprecated. - A number of Coverity reported issues have been addressed. - A number of GitHub issues and pull requests have been handled. Please see the Resolves Issues section of the Release Notes. - For issues resolved in this release, see the Resolved Issues section of the Release Notes. - For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0 - Release Notes are available at https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md - The granular changes that have gone into the 12.3.0 release are in the ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/Ch… - Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests - jsc-PED-1344 - reinable building containerinfo plugin for SLES 15 SP4. - Drop patch now contained in 12.3.0: + 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch + 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch + 2023-20867-Remove-some-dead-code.patch + CVE-20230-20900.patch ==== pam-config ==== Version update (2.5 -> 2.8) - Update to version 2.8 - Replace aad module with himmelblau - Update to version 2.7 - Add support for aad module - Update to version 2.6 - Remove pam_cracklib from config even if no successor is installed - Run update in %posttrans after all other PAM modules got installed/removed - Both are required for [bsc#1214885] ==== perl-Bootloader ==== Version update (1.6 -> 1.8) - merge gh#openSUSE/perl-bootloader#158 - skip warning about unsupported options when in compat mode - 1.8 - merge gh#openSUSE/perl-bootloader#156 - bootloader_entry script can have an optional 'force-default' argument (bsc#1215064) - 1.7 ==== python-async_timeout ==== Version update (4.0.2 -> 4.0.3) - update to 4.0.3: * Fixed compatibility with asyncio.timeout() on Python 3.11+. * Added support for Python 3.11. * Dropped support for Python 3.6. ==== python-click ==== Version update (8.1.6 -> 8.1.7) - update to 8.1.7: * Fix issue with regex flags in shell completion. * Bash version detection issues a warning instead of an error. * Fix issue with completion script for Fish shell. ==== python-lxml ==== - skip html5lib tests - cyclic dependency with html5lib tests - remove python 2.x from testing ==== python-outcome ==== - drop outdated depndendy on async_generator (see https://github.com/python-trio/outcome/issues/12) ==== python-psycopg2 ==== Version update (2.9.6 -> 2.9.7) - update to 2.9.7: * Fix propagation of exceptions raised during module initialization * Fix building when pg_config returns an empty string ==== python-zope.event ==== Version update (4.6 -> 5.0) - update to 5.0: * Drop support for Python 2.7, 3.5, 3.6. ==== python311 ==== Version update (3.11.4 -> 3.11.5) Subpackages: python311-curses python311-dbm - Update to 3.11.5 (bsc#1214692): - Security - gh-108310: Fixed an issue where instances of ssl.SSLSocket were vulnerable to a bypass of the TLS handshake and included protections (like certificate verification) and treating sent unencrypted data as if it were post-handshake TLS encrypted data. Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by Gregory P. Smith. - Core and Builtins - gh-104432: Fix potential unaligned memory access on C APIs involving returned sequences of char * pointers within the grp and socket modules. These were revealed using a - fsaniziter=alignment build on ARM macOS. Patch by Christopher Chavez. - gh-77377: Ensure that multiprocessing synchronization objects created in a fork context are not sent to a different process created in a spawn context. This changes a segfault into an actionable RuntimeError in the parent process. - gh-106092: Fix a segmentation fault caused by a use-after-free bug in frame_dealloc when the trashcan delays the deallocation of a PyFrameObject. - gh-106719: No longer suppress arbitrary errors in the __annotations__ getter and setter in the type and module types. - gh-106723: Propagate frozen_modules to multiprocessing spawned process interpreters. - gh-105979: Fix crash in _imp.get_frozen_object() due to improper exception handling. - gh-105840: Fix possible crashes when specializing function calls with too many __defaults__. - gh-105588: Fix an issue that could result in crashes when compiling malformed ast nodes. - gh-105375: Fix bugs in the builtins module where exceptions could end up being overwritten. - gh-105375: Fix bug in the compiler where an exception could end up being overwritten. - gh-105375: Improve error handling in PyUnicode_BuildEncodingMap() where an exception could end up being overwritten. - gh-105235: Prevent out-of-bounds memory access during mmap.find() calls. - gh-101006: Improve error handling when read marshal data. - Library - gh-105736: Harmonized the pure Python version of OrderedDict with the C version. Now, both versions set up their internal state in __new__. Formerly, the pure Python version did the set up in __init__. - gh-107963: Fix multiprocessing.set_forkserver_preload() to check the given list of modules names. Patch by Dong-hee Na. - gh-106242: Fixes os.path.normpath() to handle embedded null characters without truncating the path. - gh-107845: tarfile.data_filter() now takes the location of symlinks into account when determining their target, so it will no longer reject some valid tarballs with LinkOutsideDestinationError. - gh-107715: Fix doctest.DocTestFinder.find() in presence of class names with special characters. Patch by Gertjan van Zwieten. - gh-100814: Passing a callable object as an option value to a Tkinter image now raises the expected TclError instead of an AttributeError. - gh-106684: Close asyncio.StreamWriter when it is not closed by application leading to memory leaks. Patch by Kumar Aditya. - gh-107077: Seems that in some conditions, OpenSSL will return SSL_ERROR_SYSCALL instead of SSL_ERROR_SSL when a certification verification has failed, but the error parameters will still contain ERR_LIB_SSL and SSL_R_CERTIFICATE_VERIFY_FAILED. We are now detecting this situation and raising the appropiate ssl.SSLCertVerificationError. Patch by Pablo Galindo - gh-107396: tarfiles; Fixed use before assignment of self.exception for gzip decompression - gh-62519: Make gettext.pgettext() search plural definitions when translation is not found. - gh-83006: Document behavior of shutil.disk_usage() for non-mounted filesystems on Unix. - gh-106186: Do not report MultipartInvariantViolationDefect defect when the email.parser.Parser class is used to parse emails with headersonly=True. - gh-106831: Fix potential missing NULL check of d2i_SSL_SESSION result in _ssl.c. - gh-106774: Update the bundled copy of pip to version 23.2.1. - gh-106752: Fixed several bug in zipfile.Path in name/suffix/suffixes/stem operations when no filename is present and the Path is not at the root of the zipfile. - gh-106602: Add __copy__ and __deepcopy__ in enum - gh-106530: Revert a change to colorsys.rgb_to_hls() that caused division by zero for certain almost-white inputs. Patch by Terry Jan Reedy. - gh-106052: re module: fix the matching of possessive quantifiers in the case of a subpattern containing backtracking. - gh-106510: Improve debug output for atomic groups in regular expressions. - gh-105497: Fix flag mask inversion when unnamed flags exist. - gh-90876: Prevent multiprocessing.spawn from failing to import in environments where sys.executable is None. This regressed in 3.11 with the addition of support for path-like objects in multiprocessing. - gh-106350: Detect possible memory allocation failure in the libtommath function mp_init() used by the _tkinter module. - gh-102541: Make pydoc.doc catch bad module ImportError when output stream is not None. ... changelog too long, skipping 124 lines ... data: *consumed was not set. ==== python311-core ==== Version update (3.11.4 -> 3.11.5) Subpackages: libpython3_11-1_0 python311-base - Update to 3.11.5 (bsc#1214692): - Security - gh-108310: Fixed an issue where instances of ssl.SSLSocket were vulnerable to a bypass of the TLS handshake and included protections (like certificate verification) and treating sent unencrypted data as if it were post-handshake TLS encrypted data. Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by Gregory P. Smith. - Core and Builtins - gh-104432: Fix potential unaligned memory access on C APIs involving returned sequences of char * pointers within the grp and socket modules. These were revealed using a - fsaniziter=alignment build on ARM macOS. Patch by Christopher Chavez. - gh-77377: Ensure that multiprocessing synchronization objects created in a fork context are not sent to a different process created in a spawn context. This changes a segfault into an actionable RuntimeError in the parent process. - gh-106092: Fix a segmentation fault caused by a use-after-free bug in frame_dealloc when the trashcan delays the deallocation of a PyFrameObject. - gh-106719: No longer suppress arbitrary errors in the __annotations__ getter and setter in the type and module types. - gh-106723: Propagate frozen_modules to multiprocessing spawned process interpreters. - gh-105979: Fix crash in _imp.get_frozen_object() due to improper exception handling. - gh-105840: Fix possible crashes when specializing function calls with too many __defaults__. - gh-105588: Fix an issue that could result in crashes when compiling malformed ast nodes. - gh-105375: Fix bugs in the builtins module where exceptions could end up being overwritten. - gh-105375: Fix bug in the compiler where an exception could end up being overwritten. - gh-105375: Improve error handling in PyUnicode_BuildEncodingMap() where an exception could end up being overwritten. - gh-105235: Prevent out-of-bounds memory access during mmap.find() calls. - gh-101006: Improve error handling when read marshal data. - Library - gh-105736: Harmonized the pure Python version of OrderedDict with the C version. Now, both versions set up their internal state in __new__. Formerly, the pure Python version did the set up in __init__. - gh-107963: Fix multiprocessing.set_forkserver_preload() to check the given list of modules names. Patch by Dong-hee Na. - gh-106242: Fixes os.path.normpath() to handle embedded null characters without truncating the path. - gh-107845: tarfile.data_filter() now takes the location of symlinks into account when determining their target, so it will no longer reject some valid tarballs with LinkOutsideDestinationError. - gh-107715: Fix doctest.DocTestFinder.find() in presence of class names with special characters. Patch by Gertjan van Zwieten. - gh-100814: Passing a callable object as an option value to a Tkinter image now raises the expected TclError instead of an AttributeError. - gh-106684: Close asyncio.StreamWriter when it is not closed by application leading to memory leaks. Patch by Kumar Aditya. - gh-107077: Seems that in some conditions, OpenSSL will return SSL_ERROR_SYSCALL instead of SSL_ERROR_SSL when a certification verification has failed, but the error parameters will still contain ERR_LIB_SSL and SSL_R_CERTIFICATE_VERIFY_FAILED. We are now detecting this situation and raising the appropiate ssl.SSLCertVerificationError. Patch by Pablo Galindo - gh-107396: tarfiles; Fixed use before assignment of self.exception for gzip decompression - gh-62519: Make gettext.pgettext() search plural definitions when translation is not found. - gh-83006: Document behavior of shutil.disk_usage() for non-mounted filesystems on Unix. - gh-106186: Do not report MultipartInvariantViolationDefect defect when the email.parser.Parser class is used to parse emails with headersonly=True. - gh-106831: Fix potential missing NULL check of d2i_SSL_SESSION result in _ssl.c. - gh-106774: Update the bundled copy of pip to version 23.2.1. - gh-106752: Fixed several bug in zipfile.Path in name/suffix/suffixes/stem operations when no filename is present and the Path is not at the root of the zipfile. - gh-106602: Add __copy__ and __deepcopy__ in enum - gh-106530: Revert a change to colorsys.rgb_to_hls() that caused division by zero for certain almost-white inputs. Patch by Terry Jan Reedy. - gh-106052: re module: fix the matching of possessive quantifiers in the case of a subpattern containing backtracking. - gh-106510: Improve debug output for atomic groups in regular expressions. - gh-105497: Fix flag mask inversion when unnamed flags exist. - gh-90876: Prevent multiprocessing.spawn from failing to import in environments where sys.executable is None. This regressed in 3.11 with the addition of support for path-like objects in multiprocessing. - gh-106350: Detect possible memory allocation failure in the libtommath function mp_init() used by the _tkinter module. - gh-102541: Make pydoc.doc catch bad module ImportError when output stream is not None. ... changelog too long, skipping 124 lines ... data: *consumed was not set. ==== shaderc ==== Version update (2023.4 -> 2023.6) - Update to release 2023.6 * Build system updates only ==== sssd ==== Version update (2.9.1 -> 2.9.2) Subpackages: libsss_certmap0 libsss_idmap0 libsss_nss_idmap0 sssd-krb5-common sssd-ldap - Update to release 2.9.2 * sssctl cert-show and cert-show cert-eval-rule can now be run as non-root user. * New option local_auth_policy is added to control which offline authentication methods will be enabled by SSSD. ==== unbound ==== Version update (1.17.1 -> 1.18.0) Subpackages: libunbound8 unbound-anchor - Update to 1.18.0: * Features: - Ðdd a metric about the maximum number of collisions in lrushah. - Set max-udp-size default to 1232. This is the same default value as the default value for edns-buffer-size. It restricts client edns buffer size choices, and makes unbound behave similar to other DNS resolvers. - Add harden-unknown-additional option. It removes unknown records from the authority section and additional section. - Added new static zone type block_a to suppress all A queries for specific zones. - [FR] Ability to use Redis unix sockets. - [FR] Ability to set the Redis password. - Features/dropqueuedpackets, with sock-queue-timeout option that drops packets that have been in the socket queue for too long. Added statistics num.queries_timed_out and query.queue_time_us.max that track the socket queue timeouts. - 'eqvinox' Lamparter: NAT64 support. - [FR] Use kernel timestamps for dnstap. - Add cachedb hit stat. Introduces 'num.query.cachedb' as a new statistical counter. - Add SVCB dohpath support. - Add validation EDEs to queries where the CD bit is set. - Add prefetch support for subnet cache entries. - Add EDE (RFC8914) caching. - Add support for EDE caching in cachedb and subnetcache. - Downstream DNS Server Cookies a la RFC7873 and RFC9018. Create server cookies for clients that send client cookies. This needs to be explicitly turned on in the config file with: `answer-cookie: yes`. * Bug Fixes - Response change to NODATA for some ANY queries since 1.12. - Fix not following cleared RD flags potentially enables amplification DDoS attacks. - Set default for harden-unknown-additional to no. So that it does not hamper future protocol developments. - Fix to ignore entirely empty responses, and try at another authority. This turns completely empty responses, a type of noerror/nodata into a servfail, but they do not conform to RFC2308, and the retry can fetch improved content. - Allow TTL refresh of expired error responses. - Fix: Unexpected behavior with client-subnet-always-forward and serve-expired - Fix unbound-dnstap-socket test program to reply the finish frame over a TLS connection correctly. - Fix: reserved identifier violation - Fix: Unencrypted query is sent when forward-tls-upstream: yes is used without tls-cert-bundle - Extra consistency check to make sure that when TLS is requested, either we set up a TLS connection or we return an error. - Fix: NXDOMAIN instead of NOERROR rcode when asked for existing CNAME record. - Fix: Bad interaction with 0 TTL records and serve-expired - Fix RPZ IP responses with trigger rpz-drop on cache entries. - Fix RPZ removal of client-ip, nsip, nsdname triggers from IXFR. - Fix dereference of NULL variable warning in mesh_do_callback. - Fix ip_ratelimit test to work with dig that enables DNS cookies. - Fix for iter_dec_attempts that could cause a hang, part of capsforid and qname minimisation, depending on the settings. - Fix uninitialized memory passed in padding bytes of cmsg to sendmsg. - Fix stat_values test to work with dig that enables DNS cookies. - unbound.service: Main process exited, code=killed, status=11/SEGV. Fixes cachedb configuration handling. - Fix: processQueryResponse() THROWAWAY should be mindful of fail_reply. ==== wireless-regdb ==== Version update (20230721 -> 20230901) - Update to version 20230901: * wireless-regdb: update regulatory database based on preceding changes * wireless-regdb: Update regulatory rules for Australia (AU) for June 2023

1 0

new package hyfetch for Factory
by Bailey Kasin 09 Sep '23

09 Sep '23

Hello, hyfetch is a system info script forked from neofetch to add new features and fixes, with the main feature being the addition of customizable pride flag coloration to the OS logo. The project page is here: https://github.com/hykilpikonna/hyfetch And on OBS here: https://build.opensuse.org/package/show/utilities/hyfetch It has been accepted into utilities, and I am about to open a request to Factory to hopefully have it included, and am open to additional feedback. Bailey Kasin

4 5

Where can I find an in OBS generated rpm from a branched package?
by Freek de Kruijf 08 Sep '23

08 Sep '23

When I look in my personal page in OBS (build.opensuse.org) and check the page with the branched and updated package I see for different architectures success in generating the rpm, but I can't find the packages on download.opensuse.org. Where should I look? -- fr.gr. member openSUSE Freek de Kruijf

4 6

New Tumbleweed snapshot 20230906 released!
by Dominique Leuenberger 07 Sep '23

07 Sep '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: alsa (1.2.9 -> 1.2.10) alsa-ucm-conf (1.2.9 -> 1.2.10) alsa-utils (1.2.9 -> 1.2.10) at-spi2-core (2.48.3 -> 2.48.4) bluez (5.68 -> 5.69) elfutils-debuginfod glib2 (2.76.4 -> 2.76.5) gnome-shell (44.3 -> 44.4) grub2 javapackages-tools (6.1.0 -> 6.2.0) konsole libadwaita (1.3.4 -> 1.3.5) libei (1.0.0 -> 1.0.901) libgphoto2 (2.5.30 -> 2.5.31) libstorage-ng (4.5.136 -> 4.5.139) lsb-release man manpages-l10n (4.19.0 -> 4.20.0) mozilla-nss (3.92 -> 3.93) mozjs102 (102.14.0 -> 102.15.0) mutter (44.3 -> 44.4) nodejs20 (20.5.1 -> 20.6.0) open-isns perl-URI (5.19 -> 5.210.0) pigz (2.7 -> 2.8) python-chardet (5.1.0 -> 5.2.0) python-setuptools (67.8.0 -> 68.1.2) qpdf (11.5.0 -> 11.6.0) rdma-core suse-module-tools (16.0.34 -> 16.0.35) vsftpd webkit2gtk3 webkit2gtk3-soup2 yast2-trans (84.87.20230818.ea489402e5 -> 84.87.20230901.be24cb382f) zvbi (0.2.41 -> 0.2.42) zypper (1.14.62 -> 1.14.64) === Details === ==== alsa ==== Version update (1.2.9 -> 1.2.10) Subpackages: libasound2 libatopology2 - Update to version 1.2.10: * MIDI 2.0 feature support * build fixes for various platforms * various documentation fixes * misc topology fixes * ucm fixes and cleanups For details, see: https://www.alsa-project.org/wiki/Changes_v1.2.9_v1.2.10#alsa-lib - Took upstream fix for possible build errors: 0001-control.h-Fix-ump-header-file-detection.patch ==== alsa-ucm-conf ==== Version update (1.2.9 -> 1.2.10) - Update to version 1.2.10: * updates / fixes for various devices: mtk-rt5650, usb-audio, tegra es8316, sof-essx8336, pinephone, Steinberg UR44C, AMD ACP RPL, ACP63, sof-hda-dsp, etc For details, see: https://www.alsa-project.org/wiki/Changes_v1.2.9_v1.2.10#alsa-ucm-conf - Upstream regression fix: 0001-SplitPCM-Device-argument-may-not-be-set.patch ==== alsa-utils ==== Version update (1.2.9 -> 1.2.10) - Update to alsa-utils 1.2.10: * MIDI 2.0 / UMP support for sequencer programs * nhlt: add nhlt-dmic-info utility * Build fixes and cleanups * speaker-test: allow large buffer and period time setup - up to 100 seconds * various topology fixes For details, see: https://www.alsa-project.org/wiki/Changes_v1.2.9_v1.2.10#alsa-utils - Fix the builds with old gcc: 0001-axfer-use-ATTRIBUTE_UNUSED-instead-remove-argument-n.patch 0002-amidi-use-ATTRIBUTE_UNUSED-instead-remove-argument-n.patch 0003-alsaloop-use-ATTRIBUTE_UNUSED-instead-remove-argumen.patch 0004-bat-use-ATTRIBUTE_UNUSED-instead-remove-argument-nam.patch 0005-seq-use-ATTRIBUTE_UNUSED-instead-remove-argument-nam.patch 0006-alsaucm-use-ATTRIBUTE_UNUSED-instead-remove-argument.patch 0007-topology-use-ATTRIBUTE_UNUSED-instead-remove-argumen.patch ==== at-spi2-core ==== Version update (2.48.3 -> 2.48.4) Subpackages: at-spi2-core-lang libatk-1_0-0 libatk-bridge-2_0-0 libatspi0 typelib-1_0-Atk-1_0 typelib-1_0-Atspi-2_0 - Update to version 2.48.4: + Add atspi_get_version() to return the runtime version of the AT-SPI library. + collection: - Fix match testing for attributes. - Avoid locking up if an object has a very large child count. + Fix possible NULL pointer dereference when deregistering an event listener. + Various fixes for the new key grabbing API. ==== bluez ==== Version update (5.68 -> 5.69) Subpackages: bluez-auto-enable-devices bluez-cups bluez-zsh-completion libbluetooth3 - update to 5.69 * Fix issue with BAP enabling state correctly when resuming. * Fix issue with detaching source ASEs only after Stop Ready. * Fix issue with handling VCP audio location and descriptor. * Fix issue with generating IRK for adapter with privacy enabled. * Add support for BAP broadcast sink. - Add three new man pages ==== elfutils-debuginfod ==== Subpackages: debuginfod-client debuginfod-profile libdebuginfod1 - Conditionalize config(debuginfod-profile) Requires tag in the debuginfod-client sub-package, with the help of the %sle_version macro, so only Tumbleweed (currently the only distro supported by debuginfod.opensuse.org) sets it. ==== glib2 ==== Version update (2.76.4 -> 2.76.5) Subpackages: glib2-lang glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 libgthread-2_0-0 - Update to version 2.76.5: + Bugs fixed: - Possible SEGV (null pointer deref) in distribute_method_call(). - Possible SEGV (null pointer deref) in _g_resource_file_new(). - Backport !3529 âgmenuexporter: synchronization in org_gtk_Menus_get_interface.â to glib-2-76. - Backport !3547 âglib/gfileutils.c: use 64 bits for value in get_tmp_file()â to glib-2-76. - Backport !3554 âgresourcefile: Fix crash if called with a badly escaped URIâ to glib-2-76. - Backport !3555 âgkeyfile: Fix overwriting of GErrorâ to glib-2-76. - Backport !3539 âgdbusmessage: Validate required headers have the right typeâ to glib-2-76. ==== gnome-shell ==== Version update (44.3 -> 44.4) Subpackages: gnome-extensions gnome-shell-calendar gnome-shell-lang - Update to version 44.4: + Fix accessibility of quick settings sliders. + Allow notification dismissal with backspace. + Misc. bug fixes and cleanups. + Updated translations. ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - grub2-mkconfig-riscv64.patch: Handle riscv64 in mkconfig ==== javapackages-tools ==== Version update (6.1.0 -> 6.2.0) Subpackages: javapackages-filesystem - Upgrade to upstream version 6.2.0 * Ãntegrate our changes from javapackages-6.1.0-maven-depmap.patch - Removed patch: * javapackages-6.1.0-maven-depmap.patch + upstreamed - Added patch: * 0001-Make-the-alias-generation-reproducible.patch + separate patch for our reproducible changes that was not part of the integrated pull request ==== konsole ==== Subpackages: konsole-part konsole-part-lang konsole-zsh-completion - Add upstream crash fix (kde#473043) * 0001-Fix-crashes-in-testTerminalInterface.patch ==== libadwaita ==== Version update (1.3.4 -> 1.3.5) Subpackages: libadwaita-1-0 libadwaita-lang typelib-1_0-Adw-1 - Update to version 1.3.5: + Set the correct gettext domain on all widgets. + AdwExpanderRow: Accessibility fixes. + AdwStyleManager: Fix over-releasing a string on macOS. + Demo: Correctly dismiss the last toast in the dialogs demo. + Stylesheet: - Fix menubutton.card corners. - Fix button.card focus ring transition. - Avoid background overdraw in GtkColumnView. + Updated translations. ==== libei ==== Version update (1.0.0 -> 1.0.901) - Update to release 1.0.901 (1.1.0~rc1) * ei_device_get_region_at() and its libeis equivalent was added as a helper to obtain a device's region at a given point. * ei_region_get_mapping_id() returns the mapping id previously set by the EIS implementation via eis_region_set_mapping_id(). This mapping id can be used to identify external resources that have a relationship with this region. This is a protocol addition and bumps the ei_device protocol to version 2. ==== libgphoto2 ==== Version update (2.5.30 -> 2.5.31) Subpackages: libgphoto2-6 libgphoto2-6-lang libgphoto2_port12 - updated to 2.5.31 release ptp2: * do better event queueing during capture (makes capture faster, avoids losing events) * Canon EOS: OLC logic rewritten to be table driven, more debugging of the content, config "testolc" to generate debugoutput. Supports more cameras better. * Canon EOS: various bugfixes * Sony Alpha: Added config options: focusarea, liveviewsettingeffect * Olympus: Enabled OM-1 capture * Battery Level: also support ENUM style battery reporting for Canon * Nikon 1: S1 also does not support everything * Sony Alpha: small changes in config setters * merged some improvements from NorthOfYou fork for Canon EOS, Nikon and Sony * New ids: - Canon EOS 850D, R7, R10, R5 C, R6m2 - Fuji X-H2, X-T5 - GOPRO HERO 11 BLACK, 11 BLACK mini - new ids also imported from libmtp - Nikon Z30, Z8 - OMSYSTEM OM-1 - Pentax KP (PTP mode) - Ricoh GR IIIx - Sigma fp L - Sony A7S III, ILCE-1, ILME-FX3, 7RM5 aka A7-RV, digigr8: * fixed init to not switch to webcam mode pentax: * Added Pentax KP general: * disable log formatting when we are not logging (speeds up large downloads, as we are not hex dumping the whole data and immediately discard the result) * libltdl usage now thread-safe. (some other library pieces are not threadsafe yet) * some time_t 32bit vs 64bit fixes * some cleanups and warning fixes translations: * updated swedish, spanish * added georgian, friulian - libgphoto2-enable-vusb-ptp.patch: upstream ==== libstorage-ng ==== Version update (4.5.136 -> 4.5.139) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#946 - improved json parse functions to handle string and integer - 4.5.139 - merge gh#openSUSE/libstorage-ng#945 - fixed parsing of lsscsi version for older lsscsi versions (bsc#1214814) - 4.5.138 - merge gh#openSUSE/libstorage-ng#944 - add awk to GitHub action for Tumbleweed - 4.5.137 ==== lsb-release ==== - add 797e459ecaa482bf8e7bfe02cf5f1cea367ba9e9.patch to fix bashisms ==== man ==== - Fix the content in patch file man-propose-online.patch ==== manpages-l10n ==== Version update (4.19.0 -> 4.20.0) Subpackages: man-pages-cs man-pages-da man-pages-de man-pages-el man-pages-es man-pages-fr man-pages-hu man-pages-it man-pages-pl man-pages-pt_BR man-pages-ru - Update to version 4.20.0: Updated and added many translations. - Rebase broken links patch: * Remove manpages-l10n-4.16.0-fix-links.patch. * Add manpages-l10n-4.20.0-fix-links.patch. - Update macros: * Switch from Leap 15.5 to Leap 15.6. * Switch from Fedora 38 to Fedora 39. ==== mozilla-nss ==== Version update (3.92 -> 3.93) Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs mozilla-nss-tools - Update to NSS 3.93: + bmo#1849471 - Update zlib in NSS to 1.3. + bmo#1848183 - softoken: iterate hashUpdate calls for long inputs. + bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980). - Rebase nss-fips-pct-pubkeys.patch. ==== mozjs102 ==== Version update (102.14.0 -> 102.15.0) - Update to version 102.15.0: + Various security fixes and other quality improvements. + CVE-2023-4573: Memory corruption in IPC CanvasTranslator + CVE-2023-4574: Memory corruption in IPC ColorPickerShownCallback + CVE-2023-4575: Memory corruption in IPC FilePickerShownCallback + CVE-2023-4576: Integer Overflow in RecordedSourceSurfaceCreation + CVE-2023-4581: XLL file extensions were downloadable without warnings + CVE-2023-4584: Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2 ==== mutter ==== Version update (44.3 -> 44.4) Subpackages: mutter-lang - Update to version 44.4: + Fix xwayland-allow-byte-swapped-clients setting. + Fix restoring focus when leaving the overview. + Fix touch move operations on subsurfaces. + Fix flickering when DRI driver isn't available. + Fix unexpected cursor changes over non-resizable windows. + Fix restoring maximized state of SSD windows. + Fix window focus unexpectedly moving to secondary monitor when changing workspaces. + Fixed crash. + Misc. bug fixes and cleanups. + Updated translations. ==== nodejs20 ==== Version update (20.5.1 -> 20.6.0) Subpackages: npm20 - Update to 20.6.0: * add support for .env files to configure envrionment variables * import.meta.resolve unflagged * deps: npm updated to 9.8.1 - nodejs.keyring: updated to include current upstream releasers ==== open-isns ==== - Disable SLP by default for Factory and ALP (bsc#1214884) ==== perl-URI ==== Version update (5.19 -> 5.210.0) - updated to 5.21 see /usr/share/doc/packages/perl-URI/Changes 5.21 2023-08-23 16:02:14Z - Fix version declarations in icap.pm and icaps.pm (GH#131) (Olaf Alders) 5.20 2023-08-23 14:13:23Z - Remove Shebang and Taint from all tests. - Fix t/query.t to get rid of a warning about join() on array with undef - Add icap and icaps URIs (GH#130) (david-dick) ==== pigz ==== Version update (2.7 -> 2.8) - version update to 2.8 - Fixed a version bug when compiling with the just-released zlib 1.3 - Will save a modification time only for regular files (just like gzip since 1.10) - Will write all available uncompressed data on an error, for partial data recovery - deleted patches - pigz-2.7-NOTHREAD-tests.patch (upstreamed) ==== python-chardet ==== Version update (5.1.0 -> 5.2.0) - update to 5.2.0: * Adds support for running chardet CLI via `python -m chardet` ==== python-setuptools ==== Version update (67.8.0 -> 68.1.2) - update to 68.1.2 * Fix editable install finder handling of nested packages, by only handling 1 level of nesting and relying on importlib.machinery to find the remaining modules based on the parent package path. - add sphinx72.patch: address circular imports in sphinx 7.2+ - update to 68.1.0 * Removed code referencing bdist_wininst in install_scripts. * Promote pyproject.tomlâs [tool.setuptools] out of beta. * Automatically add files listed in Extension.depends to sdists, as long as they are contained in the project directory * Require Python 3.8 or later. * Use default encoding to create .pth files with editable_wheel. * Detects (and complain about) scripts and gui-scripts set via setup.py when pyproject.toml does not include them in dynamic. - update to 68.0.0: * Removed verification for existing ``depends.txt`` file * Remove autofixing of broken ``.egg-info`` directories containing the ``-`` character in their base name (without suffix). * Remove deprecated APIs in ``easy_install``: ``get_script_args``, ``get_script_header`` and ``get_writer``. * Removed ``egg_info.get_pkg_info_revision`` (deprecated * Removed ``setuptools.dist._get_unpatched`` (deprecated * Removed support for SVN in ``setuptools.package_index`` (deprecated since 2018). * Removed support for invalid ``pyproject.toml`` files. * Added symlink support to launcher for installed executables -- by :user:`eugene-sevostianov-sc` * Updated vendored ``packaging`` version from 23.0 to 23.1 -- by :user:`MetRonnie` * Implemented workaround for old versions of ``vswhere``, which miss the * ``-requiresAny`` parameter, such as the ones distributed together with Visual Studio 2017 < 15.6. * Changed ``DistutilsMetaFinder`` to skip ``spec_for_pip`` on Python >= 3.12. * Removed ``_distutils_hack.remove_shim`` on Python >= 3.12 (since ``distutils`` was removed from the standard library, ``DistutilsMetaFinder`` cannot be disabled on Python >= 3.12). * #3920: Add a link to deprecation warning in ``pkg_resources`` and improve ``stacklevel`` for better visibility. - drop use-tarfile-extraction_filter.patch (upstream) ==== qpdf ==== Version update (11.5.0 -> 11.6.0) - version update to 11.6.0 - Bug fixes: - Fix corner case in the ASCII85 decoder. - Properly report warnings when ``--pages`` is used and the warnings appear in other than the primary file. - Improve ``--bash-completion`` and ``--zsh-completion`` to better support paths with spaces in them. - Move detection of random number device from compile-time to runtime to improve cross compilation. - Fix bugs around attempting to copy ``/Pages`` objects with ``copyForeignObject`` (which explicitly doesn't allow this). ==== rdma-core ==== Subpackages: libefa1 libibverbs libibverbs1 libmana1 libmlx4-1 libmlx5-1 librdmacm1 rdma-ndd - Add missing-quoting.patch - Use normal GNU tar option syntax - Remove old RPM spec logic (%defattr) ==== suse-module-tools ==== Version update (16.0.34 -> 16.0.35) Subpackages: suse-module-tools-scriptlets - Update to version 16.0.35: * split off regenerate-initrd-posttrans in the kernel-scriptlets package (boo#1213459) * wm2: Update for usrmerge (boo#1214428) ==== vsftpd ==== - Use pam macros to install pam config in /usr/lib/pam.d - Adjust vsftpd.pam to include postlogin config (replace wtmp with wtmpdb for Y2038 [jsc#3144]) ==== webkit2gtk3 ==== Subpackages: WebKitGTK-4.1-lang libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles - Expand lang sub-package in spec file unconditionally to handle previous name change from WebKit2GTK-lang to WebKitGTK-lang. This change affected the automatic generated Requires tag on WebKit2GTK-%{_apiver}, then getting out of sync of what's being required and what's being provided. Now, any sub-package that was providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver} instead (boo#1214835, boo#1214640). ==== webkit2gtk3-soup2 ==== Subpackages: WebKitGTK-4.0-lang libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 webkit2gtk-4_0-injected-bundles - Expand lang sub-package in spec file unconditionally to handle previous name change from WebKit2GTK-lang to WebKitGTK-lang. This change affected the automatic generated Requires tag on WebKit2GTK-%{_apiver}, then getting out of sync of what's being required and what's being provided. Now, any sub-package that was providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver} instead (boo#1214835, boo#1214640). ==== yast2-trans ==== Version update (84.87.20230818.ea489402e5 -> 84.87.20230901.be24cb382f) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sr yast2-trans-sv yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20230901.be24cb382f: * Translated using Weblate (Slovak) * Translated using Weblate (Dutch) * Translated using Weblate (Japanese) * Translated using Weblate (Czech) * Translated using Weblate (Catalan) * New POT for text domain 'bootloader'. * Translated using Weblate (Kurdish) * Translated using Weblate (Kurdish) ==== zvbi ==== Version update (0.2.41 -> 0.2.42) - version update to 0.2.42 * Fix several compiler warnings. * Apply patch to consider ERASE_PAGE flag with single page transmissions. ==== zypper ==== Version update (1.14.62 -> 1.14.64) Subpackages: zypper-log zypper-needs-restarting - Fix name of the bash completion script (bsc#1215007) In 1.14.63 the location of the bash completion script was changed to /usr/share/bash-completion/completions/. But the patch failed to also rename the completion script. The original script name zypper.sh is not recognized at the new location. - Update notes about failing signature checks (bsc#1214395) It might be a transient issue if the server is in the midst of receiving new data. Retry after a few minutes might work. - Improve the SIGINT handler to be signal safe (bsc#1214292) This patch updates the SIGINT handling strategy to be signal safe. Meaning the signal handler will do not much more than setting a flag, which we are going to check in the normal program flow as much as possible. - version 1.14.64 - Changed location of bash completion script (bsc#1213854). This changes the location of zypper.sh bash completion script from /usr/share/bash-completion/completions/. - version 1.14.63

1 0

Thunderbird 115
by Joe Salmeri 07 Sep '23

07 Sep '23

Is there a reason that Thunderbird 115 is being held back ? Version 115.0.1 was released on 07/20/2023 which was almost a month ago Version 115.1.0 was released on 08/01/2023 Version 115.1.1 was released on 08/15/2023 If I look at openSUSE build the builds are disabled https://build.opensuse.org/package/show/mozilla/thunderbird115 Is there an ETA as to when it will be published ? Thanks -- Regards, Joe

13 27

New Tumbleweed snapshot 20230904 released!
by Dominique Leuenberger 06 Sep '23

06 Sep '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: libxml2 libxml2-python === Details === ==== libxml2 ==== Subpackages: libxml2-2 libxml2-tools - Security fix: CVE-2023-39615 (bsc#1214768) * crafted xml can cause global buffer overflow * Added file libxml2-CVE-2023-39615.patch ==== libxml2-python ==== - Security fix: CVE-2023-39615 (bsc#1214768) * crafted xml can cause global buffer overflow * Added file libxml2-CVE-2023-39615.patch

1 0

freeimage maintainership up from grab
by Dominique Leuenberger 06 Sep '23

06 Sep '23

Hi packagers and contributors. I was made aware of an issue around the package freeimage https://build.opensuse.org/package/show/openSUSE:Factory/freeimage which has the devel project set to https://build.opensuse.org/package/show/graphics/freeimage Unfortunately, we have no set package maintainer/bugowner on this package and even looking into the changes file it seems close to impossible to identify anybody really caring for this. Is there anybody that feels responsible for this package? Most likely, the best chance is with anybody actually consuming the library: > zypper se -t srcpackage --requires freeimage S | Name | Summary | Type --+---------------------+---------------------------------------------------------+----------- | allegro | A game programming library | srcpackage | deepin-image-editor | Libraries of Deepin Image editor | srcpackage | deepin-image-viewer | Deepin Image Viewer | srcpackage | imv | Image viewer for X11/Wayland | srcpackage | ogre | Object-Oriented Graphics Rendering Engine | srcpackage | photoqt | A Qt-based image viewer | srcpackage | python-scikit-image | Collection of algorithms for image processing in Python | srcpackage | slade | An editor for DOOM maps and WAD/PK3 archives | srcpackage There is currently a few pending bugreports / CVE reports that should need to be addressed for this package. Please let me know if you're using this package and are willing to be its maintainer. Cheers, Dominique

3 2

15.6 environment mixing Plasma session with KDE3 bits
by Felix Miata 06 Sep '23

06 Sep '23

On Rocket Lake desktop PC I just did a zypper dup from 15.5 to 15.6. In Plasma I have KDM3 and Konsole3 installed instead of SDDM and Konsole5, but running Plasma session. Normally on initial Konsole3 open is a bash session, but this one is opening /bin/sh instead, where bash history, bash completion and aliases don't work. This can be worked around using the bash command, but the problem is when I select to open a MC tab, it gets opened in sh instead of bash, which makes MC severely crippled. I can open a linux console instead, which runs bash, but it gets the colors backwards. Running any GUI, I want black foreground, black as black gets, on white or virtual white background so I can see without eyestrain. It doesn't help with the MC session problem anyway. In Konsole configuration, "execute" was already /usr/bin/bash, so I have no idea where this "sh" session behavior is coming from. /usr/bin/sh is just a link back to /usr/bin/bash. Anyway, are others seeing behavior like this? Is this something gone wrong in 15.6? I've already run across this before, but was too busy to deal with it at the time, and then forgot where it happened. I do have 3 other 15.6s, all zypper upgrades from 15.5. # ps -A ... 1402 ? 00:00:00 kworker/u24:2-i915 1412 tty7 00:00:01 Xorg 1413 ? 00:00:00 kworker/5:1-mm_percpu_wq 1437 ? 00:00:00 kdm 1458 ? 00:00:00 startplasma-x11 1471 ? 00:00:00 kworker/0:0-events 1519 ? 00:00:00 gpg-agent 1554 ? 00:00:00 kded5 1555 ? 00:00:00 ksmserver 1556 ? 00:00:01 kwin_x11 1565 ? 00:00:00 kglobalaccel5 1579 ? 00:00:01 plasmashell 1609 ? 00:00:00 kactivitymanage 1610 ? 00:00:00 gmenudbusmenupr 1611 ? 00:00:00 polkit-kde-auth 1612 ? 00:00:00 org_kde_powerde 1613 ? 00:00:00 xembedsniproxy 1656 ? 00:00:00 kaccess 1660 ? 00:00:00 kscreen_backend 1690 ? 00:00:00 kioslave5 1718 ? 00:00:01 krunner 1782 ? 00:00:00 konsole 1784 ? 00:00:00 kdeinit 1787 ? 00:00:00 dcopserver 1789 ? 00:00:00 klauncher 1791 ? 00:00:00 kded 1797 pts/0 00:00:00 sh # Konsole tab 1 1798 pts/0 00:00:00 bash 1828 pts/1 00:00:00 mc # Konsole tab 2 1831 ? 00:00:00 kworker/10:0-mm_percpu_wq 1837 pts/0 00:00:00 ps # ps -A | grep sh 186 ? 00:00:00 zswap-shrink 710 ? 00:00:00 sshd 1579 ? 00:00:10 plasmashell 1797 pts/0 00:00:00 sh 1798 pts/0 00:00:00 bash # ls -l /usr/bin/sh /usr/bin/bash -rwxr-xr-x 1 root root 1012656 May 7 2022 /usr/bin/bash lrwxrwxrwx 1 root root 4 May 7 2022 /usr/bin/sh -> bash # -- Evolution as taught in public schools is, like religion, based on faith, not based on science. Team OS/2 ** Reg. Linux User #211409 ** a11y rocks! Felix Miata

1 0