January 2024 - openSUSE Factory - openSUSE Mailing Lists

openSUSE Release Engineering meeting 31.01.2024
by Lubos Kocman 31 Jan '24

31 Jan '24

How to join the meeting? https://calendar.opensuse.org/teams/release/events/opensuse_release_enginee… All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting ## Attendees lkocman, DimStar, GuillaumeG, ana, Max, DocB, Douglas ## Leap New Leap 15.6 with Gnome 45 was published yesterday https://openqa.opensuse.org/tests/overview?distri=opensuse&version=15.6&bui… We should start working on the Beta announcement to capture all interesting SP6 updates etc. We could use https://code.opensuse.org/leap/features/issues as an input Reminder that we have check in deadline for Leap 15.6 beta on 21st February (corresponds with SLES 15 SP6 Public Beta check in deadline) https://en.opensuse.org/openSUSE:Roadmap#Schedule_for_openSUSE_Leap_15.6 ALP Marble 6.0 was synced to OBS, I'll be working on the initial setup. https://build.opensuse.org/project/subprojects/openSUSE:Leap:Micro:6.0 de-branding in-progress In person discussion with Granite PM, on Thursday Data driven decision for migration (re-use binaries vs rebuild sources etc). PM is not keen on keeping identical packages with buildroot-only SLES/ALP packages. Desktop component awareness in ALP GnuHealth 4.4 - tracking of sr against SLES python311* https://etherpad.opensuse.org/p/gnuhealth Agama team - Scanning Leap 16 Roadmap, since they're aligning with Granite/SLATE ## openSUSE Tumbleweed (ana) openSUSE:Factory build fail stats: 65 failed 5 unresolvable (last week 76 failed, 11 unresolvable) https://tinyurl.com/ysy4nnnz Many changes going on, some of the very most relevant updates: * Linux Kernel enabled multibuild * ruby 3.3 is now the default * Update openssl 3 (still 3.1.4), many CVE fixed. * GPG2 2.4.4 * Mesa 23.3.4 * MozillaFirefox 122.0 * podman 4.9.0 lkocman: we just updated podman in SLES 15 SP6, I think we should consider 4.9.0 too * Rust 1.75 * systemtap 5.0 Updates waiting / work still in progress: * RPM 4.19.1, planning to accept it today. Packages not included in rings will need updates, see https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… Dirk: do we plan a full rebuild after the RPM acceptance? I would like to have a full rebuild after python312 enablement. We should not have rpm + gcc + python312 all in a single rebuild. If the rebuild happens this week I'd be happy * Additional Python 3.12 and setuptools modules in Staging:K, blocked by RPM 4.19.1 * GCC 14 (only for runtime libraries) * Kubernetes 1.29 * QEMU 8.2.0, ovmf build to stall against this version * libxml 2.12.1 (lots of work to do), libzypp and some packages got fixed, on hold * dbus-broker as default dbus session manager, now everything builds, two openQA checks failing. * c-ares: after nodejs updates, there is an issues with a new package cycle * cmake, macro changes (DOCDIR MANDIR INFODIR) make a few packages FBTFS ## Richard (Aeon+botmaster) Not available ## Bernhard (Slowroll) * kernel-longterm expected around March * first openQA test WIP * next major version bump expected in 2-3 weeks (mid February) * Vacation 2024-02-05 to 09 ## Max Leap 15.6 - build stats in Backports: 52(was 59) faild, 67 unresolvable(was 63) * Build597.1 has been published * The remaining qt5/qt6 applications got merged for adapt to the Qt5 5.15.12 and Qt6 6.6.1 from SLE15 * Merged many python application update or deleterequests, but still, most of unresolvables were python applications, and still has many were pending in staging * The tweak of skippkg-finder and 000package-groups works, the noarch ones has been selected to ftp-tree instead of the arch-dependent ones(with an unmatched version number) * Vacation: Feb. 7-14 ## Guillaume - Arm * Tumbleweed: - Rolling - WIP: Still some packages built without PAC/BTI, two main reasons: * assembler files without PAC/BTI (usually reported upstream, e.g. openssl, gnutls, etc) * Packages built without distro flags (usually fixed in spec file) - rpmlint: https://rpmlint.opensuse.org/ * we noticed that rpmlint does not check anymore for packages built without distro %{optflags}. We should add it back. https://bugzilla.opensuse.org/show_bug.cgi?id=1217840 - WIP to get Tumbleweed to run on Lenovo X13s: * Audio: kernel config fix lost on last update. Fixed in next kernel update. * Main pieces in place. Latest status available at https://en.opensuse.org/HCL:ThinkpadX13s * Leap 15.6/Backports SP6: - No update * WSL: x86_64 is fetched from Microsoft Strore for Tumbleweed image instead of arm64. See https://bugzilla.opensuse.org/show_bug.cgi?id=1219372 lkocman: Ah thank you. I'll share that with team. Contents of the image are x86_64. Possible workaround would be a second application e.g. Leap 15 aarch64, Tumbleweed aarch64 etc ... ## Sarah - s390x Not available ## Doug * FOSDEM * All set for travel. Mobile #s exchanged * Items organized * At GNU Health Booth on Saturday & distro devroom on Sunday * Telegram group for everyone on the bus (and others from SUSE might join): https://t.me/+ZnUyy8AcJABlM2Vk Adrian: if this would be a public channel non-telegram users could access it via webbrowser. * GSoC * Application now open. Deadline Feb. 6 at 18:00 UTC * Planning Community-Summit at SUSECON * Details not confirmed yet * Working with organizers on availability of room and structure lkocman: The interesting part for us is definitely the size of the SUSECon. Last year 600 people on a physical one. Previously 1000 on virtual. * openSUSE Conference * 22 Registrations, 18 Submissions, 10 Hours * Contract signed and returned to Z-Bau * Article about visa and TSP deadline released * The Geeko Foundation is taking over TSP * Wiki updated * Waiting on donation Static * oSC24 dates June 27 to 29 reserved (Thursday - Saturday) * Open 4 Business June 26 between 2 - 6 p.m. at Franken Campus * AI topics (static) ## Dirk - various python 3.12 fallout preparations - tried to split egrep/fgrep from "grep" into a separate subpackage, reducing fallout - drop overlays over python311 on Backports SP6 is in progress Dirk: it would help if we could have all the drops in a single staging as they have common build failure root causes. ## Wolfgang (Package Hub), Scott Bahling Not available ## Maintenance team (Marcus or Maurizio (m4u)) QAM scheduled 15.6 Beta openQA setup for the next sprint, so it should be ready in mid-February according to the plan. ## Adrian - OBS The new composer/product builder discussion was covered in Max's section. Heads up: a first SR related to the composer is on the way. This is done to setup new products. ## Simon (Leap Replacement/Linarite) Not available ## Open Floor Context was that the last request took a month to be processed. Research seems to show that only a portion of people know how to process them. openSUSE membership process - should not document connect.o.o anymore in https://en.opensuse.org/openSUSE:Membership_officials

1 0

New Tumbleweed snapshot 20240129 released!
by Dominique Leuenberger 30 Jan '24

30 Jan '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: GraphicsMagick dos2unix (7.5.1 -> 7.5.2) ghostscript (9.56.1 -> 10.02.1) grub2 gstreamer-plugins-rs iso-codes (4.15.0 -> 4.16.0) libexttextcat (3.4.6 -> 3.4.7) libgcrypt nghttp2 (1.58.0 -> 1.59.0) patterns-kde python-Jinja2 python-M2Crypto python-MarkupSafe (2.1.3 -> 2.1.4) python-pycryptodome (3.19.1 -> 3.20.0) rubygem-parser (3.2.2.4 -> 3.3.0.5) rubygem-rubocop (1.59.0 -> 1.60.2) salt virtualbox virtualbox-kmp (7.0.12_k6.7.1_1 -> 7.0.12_k6.7.1_2) yast2 (5.0.4 -> 5.0.5) yast2-installation (5.0.4 -> 5.0.5) yast2-trans (84.87.20240120.54f4b9f06a -> 84.87.20240126.9c7185e3f6) zenity (4.0.0 -> 4.0.1) === Details === ==== GraphicsMagick ==== Subpackages: libGraphicsMagick++-Q16-12 libGraphicsMagick-Q16-3 libGraphicsMagick3-config - ghostscript-fonts-std: relax to recommends [bsc#1216604] ==== dos2unix ==== Version update (7.5.1 -> 7.5.2) - update to 7.5.2: * Dos2unix can print info about the line break type of the last line, or indicate there is none * Updated documentation about ASCII mode conversion ==== ghostscript ==== Version update (9.56.1 -> 10.02.1) Subpackages: ghostscript-x11 - update to 10.02.1: * Patch release to address some security bugs * This release (10.02.0) marks the final demise of the PostScript based PDF interpreter. * This 10.01.1 release removes the "-dNEWPDF=false" command line option to fall back to the deprecated, old PDF interpreter. * This 10.01.0 release removes the "-dNEWPDF=false" command line option to fall back to the deprecated, old PDF interpreter. * This release officially deprecates the old Postscript implementation of PDF, we will not be updating or maintaining that code moving forward. The option to use the old PDF implementation _**will**_ be removed in the next full release (10.01.0) * Important: This release includes the new PDF interpreter (implemented in C rather than PostScript). It is both integrated into Ghostscript (now ENABLED by default), and available as a standalone, PDF only, binary. See https://ghostscript.com/pdfi.html for more details. * This also bundles the latest zlib (1.2.12) which addresses a security issue (CVE-2018-25032) * **Important**: This release includes the new PDF interpreter (implemented in C rather than PostScript). It is both integrated into Ghostscript (now **ENABLED** by default), and available as a standalone, PDF only, binary. See https://ghostscript.com/pdfi.html for more details. - drop CVE-2023-28879.patch, CVE-2023-36664.patch, CVE-2023-38559.patch, CVE-2023-43115.patch, CVE-2023-46751.patch: upstream - drop remove-zlib-h-dependency.patch: unused ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - Remove magic number header field check on arm64 (bsc#1218783) * 0001-loader-arm64-efi-linux-Remove-magic-number-header-fi.patch ==== gstreamer-plugins-rs ==== - Increase memory to 12G for s390x builds in _constraints (bsc#1218563). ==== iso-codes ==== Version update (4.15.0 -> 4.16.0) Subpackages: iso-codes-lang - update to 4.16.0: + Updated translations + ISO 4217: New translation for Khmer (Central) + ISO 639-2: New translation for Armenian + ISO 639-5: New translation for Lithuanian ==== libexttextcat ==== Version update (3.4.6 -> 3.4.7) Subpackages: libexttextcat-2_0-0 - Update to version 3.4.7: * Add Ilocano, Saraiki ==== libgcrypt ==== Subpackages: libgcrypt20 libgcrypt20-32bit libgcrypt20-x86-64-v3 - add libgcrypt-no-deprecated-grep-alias.patch ==== nghttp2 ==== Version update (1.58.0 -> 1.59.0) - update to 1.59.0: * Update bash_completion * h2load: Fix bug that ttfb is not recorded if h3 stream has no data * h2load: Consider all h2 HEADERS when counting bytes and recording ttfb * h2load: Ignore 1xx status code * nghttpd: Free SSL_CTX on exit * nghttpx: OpenSSL needs SSL_CTX_set_recv_max_early_data * nghttpx: OpenSSL needs SSL_CTX_set_recv_max_early_data * cmake: Require OpenSSL >= 1.1.1 * Add nghttp2_select_alpn and deprecate nghttp2_select_next_protocol * nghttpx: Add --alpn-list and deprecate --npn-list * h2load: Add --alpn-list and deprecate --npn-list * Remove NPN * src: Support building with aws-lc * Avoid detecting OpenSSL 3.2 as quictls * Use nghttp3_pri_parse_priority added since nghttp3 v1.1.0 * h2load: Fix IPv6 address in :authority * h2load: Fix IPv6 address in :authority * nghttpx: Propagate stream priority from backend to frontend * nghttpx: Propagate stream priority from backend to frontend * Merge pull request #1991 from nghttp2/get-and-parse- extpri * Add API to get and parse RFC 9218 priority * nghttpx: Prefer __FILE_NAME__ if defined ==== patterns-kde ==== Subpackages: patterns-kde-kde patterns-kde-kde_edutainment patterns-kde-kde_games patterns-kde-kde_ide patterns-kde-kde_imaging patterns-kde-kde_internet patterns-kde-kde_multimedia patterns-kde-kde_office patterns-kde-kde_pim patterns-kde-kde_plasma patterns-kde-kde_utilities patterns-kde-kde_utilities_opt patterns-kde-kde_yast - Make phonon4qt5-backend a hard dep of the plasma pattern (boo#1219277) - Avoid gstreamer if not necessary - Change from phonon4qt5-backend-gstreamer to phonon4qt5-backend-vlc due to deprecation of the gstreamer backend ==== python-Jinja2 ==== - Disable broken test with latest version of MarkupSafe (2.1.4) (gh#pallets/jinja#1930, gh#pallets/markupsafe#417) ==== python-M2Crypto ==== - Disable broken tests with openssl 3.2, bsc#1217782 ==== python-MarkupSafe ==== Version update (2.1.3 -> 2.1.4) - update to 2.1.4: * Don't use regular expressions for striptags, avoiding a performance issue. :pr:`413` ==== python-pycryptodome ==== Version update (3.19.1 -> 3.20.0) - update to 3.20.0: * Added support for TurboSHAKE128 and TurboSHAKE256. * Added method Crypto.Hash.new() to generate a hash object given a hash name. * Added support for AES-GCM encryption of PBES2 and PKCS#8 containers. * Added support for SHA-2 and SHA-3 algorithms in PBKDF2 when creating PBES2 and PKCS#8 containers. * Export of RSA keys accepts the prot_params dictionary as parameter to control the number of iterations for PBKDF2 and scrypt. * C unit tests also run on non-x86 architectures. * GH#787: Fixed autodetect logic for GCC 14 in combination with LTO. ==== rubygem-parser ==== Version update (3.2.2.4 -> 3.3.0.5) - updated to version 3.3.0.5 v3.3.0.5 (2024-01-21) - -------------------- API modifications: * Bump 3.2 branch to 3.2.3 (#993) (Koichi ITO) v3.3.0.4 (2024-01-15) - -------------------- Features implemented: * Register a Ruby 3.4 parser (#991) (Jean byroot Boussier) v3.3.0.3 (2024-01-12) - -------------------- Bugs fixed: * lexer.rl: accept tabs before closing heredoc delimiter (#990) (Ilya Bylich) v3.3.0.2 (2024-01-07) - -------------------- Bugs fixed: * Fix an error when using heredoc with non-word delimiters (#987) (Koichi ITO) v3.3.0.1 (2024-01-06) - -------------------- Bugs fixed: * Supports Ruby 2.0+ runtime (#986) (Koichi ITO) v3.3.0.0 (2024-01-05) - -------------------- API modifications: * current.rb: mark 3.3 branch as stable (#984) (Ilya Bylich) * ruby33.y: extract string_dend (#969) (Ilya Bylich) * lexer.rl: treat numparams as locals (#968) (Ilya Bylich) * ruby33.y: extract words_sep (#967) (Ilya Bylich) * literal.rb: match heredoc identifier from end of line (#965) (Ilya Bylich) * ruby33.y: extract {endless_command,endless_arg} rules (#964) (Ilya Bylich) * Bump Racc to 1.7.3 (#954) (Koichi ITO) Features implemented: * ruby33.y: reject ambiguous anonymous arguments (#983) (Ilya Bylich) * ruby33.y: extract arg_splat rule. (#981) (Ilya Bylich) * builder.rb: warn `it` in a block with no ordinary params. (#980) (Ilya Bylich) * builder.rb: extract named captures only from static regexes. (#979) (Ilya Bylich) * ruby33.y: accept expr_value in sclass definition. (#978) (Ilya Bylich) * ruby33.y: extract p_in_kwarg (#977) (Ilya Bylich) * ruby33.y: extract p_assoc and p_in rules (#976) (Ilya Bylich) * ruby33.y: reject invalid gvar as symbol (#974) (Ilya Bylich) * ruby33.y: properly restore in_defined flag, extract begin_defined rule (#973) (Ilya Bylich) * builder.rb: reject multi-char gvar names starting with 0 (#972) (Ilya Bylich) * ruby33.y: allow semicolon in parenthesis at the first argument of command call (#971) (Ilya Bylich) * ruby33.y: parse qualified const with brace block as a method call (#970) (Ilya Bylich) ==== rubygem-rubocop ==== Version update (1.59.0 -> 1.60.2) - updated to version 1.60.2 [#]# 1.60.2 (2024-01-24) [#]## Bug fixes * [#12627](https://github.com/rubocop/rubocop/issues/12627): Fix a false positive for `Layout/RedundantLineBreak` when using index access call chained on multiple lines with backslash. ([@koic][]) * [#12626](https://github.com/rubocop/rubocop/pull/12626): Fix a false positive for `Style/ArgumentsForwarding` when naming a block argument `&`. ([@koic][]) * [#12635](https://github.com/rubocop/rubocop/pull/12635): Fix a false positive for `Style/HashEachMethods` when both arguments are unused. ([@earlopain][]) * [#12636](https://github.com/rubocop/rubocop/pull/12636): Fix an error for `Style/HashEachMethods` when a block with both parameters has no body. ([@earlopain][]) * [#12638](https://github.com/rubocop/rubocop/issues/12638): Fix an `Errno::ENOENT` error when using server mode. ([@koic][]) * [#12628](https://github.com/rubocop/rubocop/pull/12628): Fix a false positive for `Style/ArgumentsForwarding` when using block arg forwarding with positional arguments forwarding to within block. ([@koic][]) * [#12642](https://github.com/rubocop/rubocop/pull/12642): Fix false positives for `Style/HashEachMethods` when using array converter method. ([@koic][]) * [#12632](https://github.com/rubocop/rubocop/issues/12632): Fix an infinite loop error when `EnforcedStyle: explicit` of `Naming/BlockForwarding` with `Style/ArgumentsForwarding`. ([@koic][]) [#]# 1.60.1 (2024-01-17) [#]## Bug fixes * [#12625](https://github.com/rubocop/rubocop/pull/12625): Fix an error when server cache dir has read-only file system. ([@Strzesia][]) * [#12618](https://github.com/rubocop/rubocop/issues/12618): Fix false positives for `Style/ArgumentsForwarding` when using block argument forwarding with other arguments. ([@koic][]) * [#12614](https://github.com/rubocop/rubocop/issues/12614): Fix false positiveis for `Style/RedundantParentheses` when parentheses in control flow keyword with multiline style argument. ([@koic][]) [#]## Changes * [#12617](https://github.com/rubocop/rubocop/issues/12617): Make `Style/CollectionCompact` aware of `grep_v` with nil. ([@koic][]) [#]# 1.60.0 (2024-01-15) [#]## Bug fixes * [#12603](https://github.com/rubocop/rubocop/issues/12603): Fix an infinite loop error for `Style/MultilineTernaryOperator` when using a method call as a ternary operator condition with a line break between receiver and method. ([@koic][]) * [#12549](https://github.com/rubocop/rubocop/issues/12549): Fix a false positive for `Style/RedundantLineContinuation` when line continuations for multiline leading dot method chain with a blank line. ([@koic][]) * [#12610](https://github.com/rubocop/rubocop/pull/12610): Accept parentheses in argument calls with blocks for `Style/MethodCallWithArgsParentheses` `omit_parentheses` style. ([@gsamokovarov][]) * [#12580](https://github.com/rubocop/rubocop/pull/12580): Fix an infinite loop error for `Layout/EndAlignment` when misaligned in singleton class assignments with `EnforcedStyleAlignWith: variable`. ([@koic][]) * [#12548](https://github.com/rubocop/rubocop/issues/12548): Fix an infinite loop error for `Layout/FirstArgumentIndentation` when specifying `EnforcedStyle: with_fixed_indentation` of `Layout/ArrayAlignment`. ([@koic][]) * [#12236](https://github.com/rubocop/rubocop/issues/12236): Fix an error for `Lint/ShadowedArgument` when self assigning to a block argument in `for`. ([@koic][]) * [#12569](https://github.com/rubocop/rubocop/issues/12569): Fix an error for `Style/IdenticalConditionalBranches` when using `if`...`else` with identical leading lines that assign to `self.foo`. ([@koic][]) * [#12437](https://github.com/rubocop/rubocop/issues/12437): Fix an infinite loop error for `EnforcedStyle: omit_parentheses` of `Style/MethodCallWithArgsParentheses` with `Style/SuperWithArgsParentheses`. ([@koic][]) * [#12558](https://github.com/rubocop/rubocop/issues/12558): Fix an incorrect autocorrect for `Style/MapToHash` when using `map.to_h` without receiver. ([@koic][]) * [#12179](https://github.com/rubocop/rubocop/issues/12179): Let `--auto-gen-config` generate `Exclude` when `Max` is overridden. ([@jonas054][]) * [#12574](https://github.com/rubocop/rubocop/issues/12574): Fix bug for unrecognized style in --auto-gen-config. ([@jonas054][]) * [#12542](https://github.com/rubocop/rubocop/issues/12542): Fix false positive for `Lint/MixedRegexpCaptureTypes` when using look-ahead matcher. ([@marocchino][]) * [#12607](https://github.com/rubocop/rubocop/pull/12607): Fix a false positive for `Style/RedundantParentheses` when regexp literal attempts to match against a parenthesized condition. ([@koic][]) * [#12539](https://github.com/rubocop/rubocop/pull/12539): Fix false positives for `Lint/LiteralAssignmentInCondition` when a collection literal contains non-literal elements. ([@koic][]) * [#12571](https://github.com/rubocop/rubocop/issues/12571): Fix false positives for `Naming/BlockForwarding` when using explicit block forwarding in block method. ([@koic][]) * [#12537](https://github.com/rubocop/rubocop/issues/12537): Fix false positives for `Style/RedundantParentheses` when `AllowInMultilineConditions: true` of `Style/ParenthesesAroundCondition`. ([@koic][]) * [#12578](https://github.com/rubocop/rubocop/pull/12578): Fix false positives for `Style/ArgumentsForwarding` when rest arguments forwarding to a method in block. ([@koic][]) * [#12540](https://github.com/rubocop/rubocop/issues/12540): Fix false positives for `Style/HashEachMethods` when rest block argument of `Enumerable#each` method is used. ([@koic][]) * [#12529](https://github.com/rubocop/rubocop/issues/12529): Fix false positives for `Style/ParenthesesAroundCondition`. ([@koic][]) * [#12556](https://github.com/rubocop/rubocop/issues/12556): Fix false positives for `Style/RedundantParentheses` when parentheses are used around a semantic operator in expressions within assignments. ([@koic][]) * [#12541](https://github.com/rubocop/rubocop/pull/12541): Fix false negative in `Style/ArgumentsForwarding` when a block is forwarded but other args aren't. ([@dvandersluis][]) * [#12581](https://github.com/rubocop/rubocop/pull/12581): Handle trailing line continuation in `Layout/LineContinuationLeadingSpace`. ([@eugeneius][]) * [#12601](https://github.com/rubocop/rubocop/issues/12601): Make `Style/EachForSimpleLoop` accept block with no parameters. ([@koic][]) [#]## Changes * [#12535](https://github.com/rubocop/rubocop/pull/12535): Allow --autocorrect with --display-only-fail-level-offenses. ([@naveg][]) * [#12572](https://github.com/rubocop/rubocop/pull/12572): Follow a Ruby 3.3 warning for `Security/Open` when `open` with a literal string starting with a pipe. ([@koic][]) * [#12453](https://github.com/rubocop/rubocop/issues/12453): Make `Style/RedundantEach` aware of safe navigation operator. ([@koic][]) * [#12233](https://github.com/rubocop/rubocop/issues/12233): Make `Style/SlicingWithRange` aware of redundant and beginless range. ([@koic][]) * [#12388](https://github.com/rubocop/rubocop/pull/12388): Reject additional 'expanded' `EnforcedStyle` options when `--no-auto-gen-enforced-style` is given. ([@kpost][]) * [#12593](https://github.com/rubocop/rubocop/pull/12593): Require Parser 3.3.0.2 or higher. ([@koic][]) ==== salt ==== Subpackages: python3-salt salt-master salt-minion salt-transactional-update - Provide user(salt)/group(salt) capabilities for RPM 4.19 - Prevent exceptions with fileserver.update when called via state (bsc#1218482) - Added: * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch - Improve pip target override condition with VENV_PIP_TARGET environment variable (bsc#1216850) - Fixed KeyError in logs when running a state that fails - Added: * improve-pip-target-override-condition-with-venv_pip_.patch * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch - Ensure that pillar refresh loads beacons from pillar without restart - Fix the aptpkg.py unit test failure - Prefer unittest.mock to python-mock in test suite - Added: * update-__pillar__-during-pillar_refresh.patch * fix-the-aptpkg.py-unit-test-failure.patch * prefer-unittest.mock-for-python-versions-that-are-su.patch - Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649) - Added: * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch - Revert changes to set Salt configured user early in the stack (bsc#1216284) - Added: * revert-make-sure-configured-user-is-properly-set-by-.patch - Align behavior of some modules when using salt-call via symlink (bsc#1215963) - Fix gitfs "__env__" and improve cache cleaning (bsc#1193948) - Added: * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch - Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157) - Added: * fix-cve-2023-34049-bsc-1215157.patch - Allow all primitive grain types for autosign_grains (bsc#1214477) - Added: * allow-all-primitive-grain-types-for-autosign_grains-.patch - Fix optimization_order opt to prevent testsuite fails - Improve salt.utils.json.find_json to avoid fails with transactional salt salt-ssh managed clients (bsc#1213293) - Use salt-call from salt bundle with transactional_update - Only call native_str on curl_debug message in tornado when needed - Implement the calling for batch async from the salt CLI - Added: * implement-the-calling-for-batch-async-from-the-salt-.patch * improve-salt.utils.json.find_json-bsc-1213293.patch * only-call-native_str-on-curl_debug-message-in-tornad.patch * use-salt-call-from-salt-bundle-with-transactional_up.patch * fix-optimization_order-opt-to-prevent-test-fails.patch - Fix calculation of SLS context vars when trailing dots on targetted sls/state (bsc#1213518) - Added: * fix-calculation-of-sls-context-vars-when-trailing-do.patch ==== virtualbox ==== - Fix extpack updater to allow PUEL version 11 - Package UnattendedTemplates into main package - Install UnattendedTemplates for unattended installing. ==== virtualbox-kmp ==== Version update (7.0.12_k6.7.1_1 -> 7.0.12_k6.7.1_2) - Fix extpack updater to allow PUEL version 11 - Package UnattendedTemplates into main package - Install UnattendedTemplates for unattended installing. ==== yast2 ==== Version update (5.0.4 -> 5.0.5) Subpackages: yast2-logs - Added s390 z/VM check to YaST::Arch (bsc#1210525). - 5.0.5 ==== yast2-installation ==== Version update (5.0.4 -> 5.0.5) - In zVM or KVM installations the cio_ignore kernel argument will be written only if given (bsc#1210525). - 5.0.5 ==== yast2-trans ==== Version update (84.87.20240120.54f4b9f06a -> 84.87.20240126.9c7185e3f6) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20240126.9c7185e3f6: * New POT for text domain 'installation'. * New POT for text domain 'base'. * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * New POT for text domain 'sap-installation-wizard'. ==== zenity ==== Version update (4.0.0 -> 4.0.1) Subpackages: zenity-lang - Update to version 4.0.1 + Changes and fixes since 4.0.0: - Bump webkit2gtk requirement in README - about: The licence is LGPL2.1+, not GPL - entry: Calculate number of --entry-text's properly (#75) - test: Add entry test in response to issue #75 - question: fix option --default-cancel - calendar: Fix off-by-one in day - test: Add test for --calendar - Updated translations.

1 0

Re: NFS Server mount issues since some days
by Ulf 30 Jan '24

30 Jan '24

Thanks Bernhard and Jose :-) can be the case, that Jose is right with his link to the resume and that nfs-client.target is stopped. Anyhow I don't use them, I will check it next time if my <mountpoint>.mount can be restarted at the client. At least the <mountpoint>.automount fails. About the Kernal I was looking as well Bernhard. Thanks for hint. I was thinking if the new scheduler have an impact as well. Ulf Am Dienstag, 30. Januar 2024, 10:02:25 CET schrieb Jose Iván Lopez: > Hi! > > I am not sure if it is related, but there is an open bug for NFS automount > after resuming the system, see > https://bugzilla.suse.com/show_bug.cgi?id=1217176. > > > On Tue, Jan 30, 2024 at 8:11 AM Bernhard M. Wiedemann via openSUSE Factory < > factory(a)lists.opensuse.org> wrote: > > On 29/01/2024 20.19, Ulf via openSUSE Factory wrote: > > > Since some days, my Tumbleweed with running NFS-server, blocks from time > > > > to > > > > > time the possibility to login. At systemctrl status and journalctl, I > > > > can't > > > > > find any hint. The login request will be displayed but the NFS-client > > > > timed > > > > > out. > > > > > > Can't find a update of NFS or bind in the last days. > > > > > > Any idea how to debug this issue? > > > > Kernel 6.7.1 came to Factory 3 days ago, so you could try to boot into a > > 6.6.x kernel to see if that helps. > > > > If it was already uninstalled, you can find it at > > > > https://download.opensuse.org/update/slowroll/repo/oss/x86_64/kernel-defau > > lt-6.6.11-1.1.x86_64.rpm

1 0

Re: NFS Server mount issues since some days
by Jose Iván Lopez 30 Jan '24

30 Jan '24

Hi! I am not sure if it is related, but there is an open bug for NFS automount after resuming the system, see https://bugzilla.suse.com/show_bug.cgi?id=1217176. On Tue, Jan 30, 2024 at 9:02 AM Jose Iván Lopez <jlopez(a)suse.com> wrote: > Hi! > > I am not sure if it is related, but there is an open bug for NFS automount > after resuming the system, see > https://bugzilla.suse.com/show_bug.cgi?id=1217176. > > > On Tue, Jan 30, 2024 at 8:11 AM Bernhard M. Wiedemann via openSUSE Factory > <factory(a)lists.opensuse.org> wrote: > >> >> >> On 29/01/2024 20.19, Ulf via openSUSE Factory wrote: >> > Since some days, my Tumbleweed with running NFS-server, blocks from >> time to >> > time the possibility to login. At systemctrl status and journalctl, I >> can't >> > find any hint. The login request will be displayed but the NFS-client >> timed >> > out. >> > >> > Can't find a update of NFS or bind in the last days. >> > >> > Any idea how to debug this issue? >> >> Kernel 6.7.1 came to Factory 3 days ago, so you could try to boot into a >> 6.6.x kernel to see if that helps. >> >> If it was already uninstalled, you can find it at >> >> https://download.opensuse.org/update/slowroll/repo/oss/x86_64/kernel-defaul… >> > > > -- > José Iván López González > System Management Team at SUSE LINUX GmbH > IRC: jilopez at libera > -- José Iván López González System Management Team at SUSE LINUX GmbH IRC: jilopez at libera

1 0

NFS Server mount issues since some days
by Ulf 30 Jan '24

30 Jan '24

Hello together, Since some days, my Tumbleweed with running NFS-server, blocks from time to time the possibility to login. At systemctrl status and journalctl, I can't find any hint. The login request will be displayed but the NFS-client timed out. Can't find a update of NFS or bind in the last days. Any idea how to debug this issue? Ulf

2 1

New Tumbleweed snapshot 20240126 released!
by Dominique Leuenberger 28 Jan '24

28 Jan '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: Mesa (23.3.3 -> 23.3.4) Mesa-drivers (23.3.3 -> 23.3.4) MozillaFirefox (121.0.1 -> 122.0) btrfsprogs (6.6.2 -> 6.7) corosync gcc13 (13.2.1+git8205 -> 13.2.1+git8250) gpg2 (2.4.3 -> 2.4.4) inih (57 -> 58) kernel-source libmaxminddb (1.8.0 -> 1.9.1) libqmi libsolv (0.7.27 -> 0.7.28) libvirt man perl-Bootloader (1.10 -> 1.11) postfix (3.8.4 -> 3.8.5) publicsuffix (20240107 -> 20240123) python-lxml spice-gtk tiff transactional-update virt-manager webkit2gtk3 webkit2gtk3-soup2 yast2-installation (5.0.3 -> 5.0.4) zbar === Details === ==== Mesa ==== Version update (23.3.3 -> 23.3.4) Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libOSMesa8 libgbm1 - Update to bugfix release 23.3.4 - -> https://docs.mesa3d.org/relnotes/23.3.4.html ==== Mesa-drivers ==== Version update (23.3.3 -> 23.3.4) Subpackages: Mesa-dri Mesa-gallium Mesa-libva libxatracker2 - Update to bugfix release 23.3.4 - -> https://docs.mesa3d.org/relnotes/23.3.4.html ==== MozillaFirefox ==== Version update (121.0.1 -> 122.0) Subpackages: MozillaFirefox-translations-common - Mozilla Firefox 122.0 https://www.mozilla.org/en-US/firefox/122.0/releasenotes/ MFSA 2024-01 (bsc#1218955) * CVE-2024-0741 (bmo#1864587) Out of bounds write in ANGLE * CVE-2024-0742 (bmo#1867152) Failure to update user input timestamp * CVE-2024-0743 (bmo#1867408) Crash in NSS TLS method * CVE-2024-0744 (bmo#1871089) Wild pointer dereference in JavaScript * CVE-2024-0745 (bmo#1871838) Stack buffer overflow in WebAudio * CVE-2024-0746 (bmo#1660223) Crash when listing printers on Linux * CVE-2024-0747 (bmo#1764343) Bypass of Content Security Policy when directive unsafe-inline was set * CVE-2024-0748 (bmo#1783504) Compromised content process could modify document URI * CVE-2024-0749 (bmo#1813463) Phishing site popup could show local origin in address bar * CVE-2024-0750 (bmo#1863083) Potential permissions request bypass via clickjacking * CVE-2024-0751 (bmo#1865689) Privilege escalation through devtools * CVE-2024-0752 (bmo#1866840) Use-after-free could occur when applying update on macOS * CVE-2024-0753 (bmo#1870262) HSTS policy on subdomain could bypass policy of upper domain * CVE-2024-0754 (bmo#1871605) Crash when using some WASM files in devtools * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701) Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7 - requires NSS 3.96.1 - rebased patches ==== btrfsprogs ==== Version update (6.6.2 -> 6.7) Subpackages: btrfsprogs-bash-completion btrfsprogs-udev-rules libbtrfs0 libbtrfsutil1 - update to 6.7 * mkfs: make 4k sectorsize default, recommended minimum kernel for that is 6.1 and requires subpage support on architectures with page size > 4k * subvolume create: return correct error code when a target already exists * tree-checker: dump tree block on error (btrfs-convert, ...) * scrub limit: fix reporting of a limit set while there's none * fi usage: fix reporting of unallocated data or raid56 profile without root privs due to lack of that information * convert: * align data block group lengths to 64K * fix conversion of a large filesystem when there are partial inode items present due to caching * other: * build fixes * updated documentation * new and updated tests - update to 6.6.3 * subvol create: accept multiple arguments * subvol delete: print the subvolume id in the output * subvol sync: check if the filesystems is still writeable so it does not wait indefinitely * device delete: add a timeout and warning when deleting multiple devices * scrub status: report limit if set in sysfs/../scrub_speed_max * scrub limit: new command to show or set the per-device scrub limits * scrub start: report the limit if set * build: * fix CPU feature detection on aarch64 * support Botan and OpenSSL (3.2+) as crypto backends * other: * documentation updates, RTD config update * new and updated tests * CI updates ==== corosync ==== Subpackages: libcfg6 libcmap4 libcorosync_common4 libcpg4 libquorum5 - Provide user(coroqnetd) and group(coroqnetd) in the -qnetd package: user and group are generated by the pre script. ==== gcc13 ==== Version update (13.2.1+git8205 -> 13.2.1+git8250) Subpackages: cpp13 gcc13-locale libasan8 libatomic1 libgcc_s1 libgcc_s1-32bit libgccjit0 libgfortran5 libgomp1 libhwasan0 libitm1 liblsan0 libobjc4 libquadmath0 libstdc++6 libstdc++6-32bit libstdc++6-locale libstdc++6-pp libstdc++6-pp-32bit libtsan2 libubsan1 - Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250 * Includes fix for building TVM. [boo#1218492] - Add cross-X-newlib-devel requires to newlib cross compilers. [boo#1219031] - Package m2rte.so plugin in the gcc13-m2 sub-package rather than in gcc13-devel. [boo#1210959] - Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs are linked against libstdc++6. ==== gpg2 ==== Version update (2.4.3 -> 2.4.4) Subpackages: dirmngr gpg2-lang - Update to 2.4.4: [bsc#1219191] * gpg: Do not keep an unprotected smartcard backup key on disk. See https://gnupg.org/blog/20240125-smartcard-backup-key.html for a security advisory. [T6944] * gpg: Allow to specify seconds since Epoch beyond 2038 on 32-bit platforms. [T6736] * gpg: Fix expiration time when Creation-Date is specified. [T5252] * gpg: Add support for Subkey-Expire-Date. [rG96b69c1866] * gpg: Add option --with-v5-fingerprint. [T6705] * gpg: Add sub-option ignore-attributes to --import-options. * gpg: Add --list-filter properties sig_expires/sig_expires_d. * gpg: Fix validity of re-imported keys. [T6399] * gpg: Report BEGIN_ status before examining the input. [T6481] * gpg: Don't try to compress a read-only keybox. [T6811] * gpg: Choose key from inserted card over a non-inserted card. [T6831] * gpg: Allow to create revocations even with non-compliant algos. [T6929] * gpg: Fix regression in the Revoker keyword of the parameter file. [T6923] * gpg: Improve error message for expired default keys. [T4704] * gpgsm: Add --always-trust feature. [T6559] * gpgsm: Support ECC certificates in de-vs mode. [T6802] * gpgsm: Major rewrite of the PKCS#12 parser. [T6536] * gpgsm: No not show the pkcs#12 passphrase in debug output. [T6654] * keyboxd: Timeout on failure to get the database lock. [T6838] * agent: Update the key stubs only if really modified. [T6829] * scd: Add support for certain Starcos 3.2 cards. [rG5304c9b080] * scd: Add support for CardOS 5.4 cards. [rG812f988059] * scd: Add support for D-Trust 4.1/4.4 cards. [rG0b85a9ac09] * scd: Add support for Smartcafe Expert 7.0 cards. [T6919] * scd: Add a length check for a new PIN. [T6843] * tpm: Fix keytotpm handling in the agent. [rG9909f622f6] * tpm: Fixes for the TPM test suite. [T6052] * dirmngr: New option --ignore-crl-extensions. [T6545] * dirmngr: Support config value "none" to disable the default keyserver. [T6708] * dirmngr: Fix handling of the HTTP Content-Length. [rGa5e33618f4] * gpgconf: Add commands --lock and --unlock. [rG93b5ba38dc] * gpgconf: Add keyword socketdir to gpgconf.ctl. [rG239c1fdc28] * gpgconf: Adjust the -X command for the new VERSION file format. [T6918] * wkd: Use export-clean for gpg-wks-client's --mirror and --create commands. [rG2c7f7a5a278c] * wkd: Make --add-revocs the default in gpg-wks-client. New option - -no-add-revocs. [rG10c937ee68] * Remove duplicated backslashes when setting the homedir. [T6833] * Ignore attempts to remove the /dev/null device. [T6556] * Improve advisory file lock retry strategy. [T3380] * Release-info: https://dev.gnupg.org/T6578 * Remove patch upstream: - gnupg-Report-BEGIN_-status-before-examining-the-input.patch ==== inih ==== Version update (57 -> 58) - Update to version 58 * Add ini_ prefix even to static names so inih can be used as an [#]include. ==== kernel-source ==== - rpm/constraints.in: add static multibuild packages Commit 841012b049a5 (rpm/mkspec: use kernel-source: prefix for constraints on multibuild) added "kernel-source:" prefix to the dynamically generated kernels. But there are also static ones like kernel-docs. Those fail to build as the constraints are still not applied. So add the prefix also to the static ones. Note kernel-docs-rt is given kernel-source-rt prefix. I am not sure it will ever be multibuilt... - commit c2e0681 - Revert "Limit kernel-source build to architectures for which the kernel binary" This reverts commit 08a9e44c00758b5f3f3b641830ab6affff041132. The fix for bsc#1108281 directly causes bsc#1218768, revert. - commit 2943b8a - mkspec: Include constraints for both multibuild and plain package always There is no need to check for multibuild flag, the constraints can be always generated for both cases. - commit 308ea09 - rpm/mkspec: use kernel-source: prefix for constraints on multibuild Otherwise the constraints are not applied with multibuild enabled. - commit 841012b - rpm/kernel-source.rpmlintrc: add action-ebpf Upstream commit a79d8ba734bd (selftests: tc-testing: remove buildebpf plugin) added this precompiled binary blob. Adapt rpmlintrc for kernel-source. - commit b5ccb33 - scripts/tar-up.sh: don't add spurious entry from kernel-sources.changes.old The previous change added the manual entry from kernel-sources.change.old to old_changelog.txt unnecessarily. Let's fix it. - commit fb033e8 - rpm/kernel-docs.spec.in: fix build with 6.8 Since upstream commit f061c9f7d058 (Documentation: Document each netlink family), the build needs python yaml. - commit 6a7ece3 - futex: Prevent the reuse of stale pi_state (bsc#1218841). Update upstream status (Queued in subsystem maintainer repository). - commit a3ee207 - Refresh patches.rpmify/media-solo6x10-replace-max-a-min-b-c-by-clamp-b-a-c.patch. Update usptream status. - commit 589bdfa - Update config files, enable CONFIG_IMA_DISABLE_HTABLE in all archs for Tumbleweed as SLE15-SP6 kernel does (bsc#1218400). - commit 020caa6 ==== libmaxminddb ==== Version update (1.8.0 -> 1.9.1) - libmaxminddb 1.9.1: * On very large databases, the calculation to determine the search tree size could overflow. This was fixed and several additional guards against overflows were added * build system tweaks ==== libqmi ==== Subpackages: libqmi-glib5 libqmi-tools - Add patch: * 0001-message-fix-16bit-service-on-big-endian.patch - Fixes 16-bit service indications on big endian architectures. Cherry-picked from upstream qmi-1-34 branch ==== libsolv ==== Version update (0.7.27 -> 0.7.28) Subpackages: libsolv-tools ruby-solv - build for multiple python versions [jsc#PED-6218] - bump version to 0.7.28 ==== libvirt ==== Subpackages: libvirt-client libvirt-daemon-common libvirt-daemon-config-network libvirt-daemon-driver-interface libvirt-daemon-driver-libxl libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-lock libvirt-daemon-log libvirt-daemon-plugin-lockd libvirt-daemon-qemu libvirt-daemon-xen libvirt-libs - Replace temporary build fix with upstream equivalent bsc#1218823 ==== man ==== - Skip posttrans dependency on systemd to support container without systemd (boo#1215538) - Use %(trans)filetriggerin and %(trans)filetriggerpostun to get an uptodate man database for installed manual pages ==== perl-Bootloader ==== Version update (1.10 -> 1.11) - merge gh#openSUSE/perl-bootloader#162 - handle script exit codes properly (bsc#1218847) - 1.11 ==== postfix ==== Version update (3.8.4 -> 3.8.5) - update to 3.8.5 * Security: this release improves support to defend against an email spoofing attack (SMTP smuggling) on recipients at a Postfix server. For background, see https://www.postfix.org/smtp-smuggling.html. ==== publicsuffix ==== Version update (20240107 -> 20240123) - Update to version 20240123: * util: gTLD data autopull updates for 2024-01-23T15:14:10 UTC (#1921) ==== python-lxml ==== - Fix build error for Leap. Use build and test as descriped on upstream. ==== spice-gtk ==== Subpackages: libspice-client-glib-2_0-8 libspice-client-glib-helper libspice-client-gtk-3_0-5 typelib-1_0-SpiceClientGlib-2_0 typelib-1_0-SpiceClientGtk-3_0 - Use libphotodav-3.0 on SLE/Leap 15.6+ (boo#1219083). ==== tiff ==== - security update: * CVE-2023-52356 [bsc#1219213] Fix segfault in TIFFReadRGBATileExt() + tiff-CVE-2023-52356.patch ==== transactional-update ==== Subpackages: dracut-transactional-update libtukit4 transactional-update-zypp-config tukit tukitd - Use "up" instead of "dup" by default on ALP [bsc#1218861] ==== virt-manager ==== Subpackages: virt-install virt-manager-common - Upstream bug fixes (bsc#1027942) (jsc#PED-6305) 058-uri-Mock-domcaps-returning-NO_SUPPORT.patch 059-tests-cli-Adjust-hotplug-test-for-latest-libvirt.patch 060-Fix-some-pylint.patch 061-tests-ui-make-newvm-test-start-less-flakey.patch 062-tests-ui-make-creatnet-test-start-less-flakey.patch - Cleanup now working or non-existant %check tests ==== webkit2gtk3 ==== Subpackages: WebKitGTK-4.1-lang libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles - Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue (bsc#1219113 CVE-2024-23222). ==== webkit2gtk3-soup2 ==== Subpackages: WebKitGTK-4.0-lang libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 webkit2gtk-4_0-injected-bundles - Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue (bsc#1219113 CVE-2024-23222). ==== yast2-installation ==== Version update (5.0.3 -> 5.0.4) - Keep cio_ignore kernel argument when present in the parmfile or use the cio_ignore -k output if not and write it always even in zVM and KVM (bsc#1210525). - 5.0.4 ==== zbar ==== - Fix building for Leap

1 0

Provide corepack in nodejs-common?
by xtexchooser＠duck.com 27 Jan '24

27 Jan '24

nodejs added corepack feature in v16.9.0, v14.19.0. [1] Now, corepack has to be installed by running "zypper in corepack21". May we provide corepack by adding it to nodejs-common? * [1] <https://nodejs.org/api/corepack.html> -- -- xtex Sat Jan 27 05:15:08 PM CST 2024

1 0

New Tumbleweed snapshot 20240125 released!
by Dominique Leuenberger 26 Jan '24

26 Jan '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: 389-ds (2.4.0~git113.84a845c -> 2.4.0~git126.5936946) 7zip ceph grub2 gstreamer-plugins-bad ibus-libpinyin lftp libstorage-ng (4.5.175 -> 4.5.176) mlocate mozilla-nss (3.95 -> 3.96.1) mutter nvidia-open-driver-G06-signed openssl-1_1 ruby (3.2 -> 3.3) thin-provisioning-tools (1.0.9 -> 1.0.10) yast2 (5.0.3 -> 5.0.4) yast2-bootloader (5.0.2 -> 5.0.4) === Details === ==== 389-ds ==== Version update (2.4.0~git113.84a845c -> 2.4.0~git126.5936946) Subpackages: lib389 libsvrcore0 - Update to version 2.4.0~git126.5936946: * Issue 6028 - vlv index keys inconsistencies (#6031) * Issue 5989 - RFE support of inChain Matching Rule (#5990) * Issue 6022 - lmdb inconsistency between vlv index and vlv cache names (#6026) * Issue 6015 - Fix typo remeber (#6014) * Issue 6016 - Pin upload/download artifacts action to v3 * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007) * Issue 4673 - Update Rust crates * Issue 6004 - idletimeout may be ignored (#6005) * Issue 5954 - Disable Transparent Huge Pages * Issue 5997 - test_inactivty_and_expiration CI testcase is wrong (#5999) * Issue 5993 - Fix several race condition around CI tests (#5996) * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994) * Bump openssl from 0.10.55 to 0.10.60 in /src (#5995) ==== 7zip ==== - Fix build on SLE-15-SP6 * fix-avx-sle.patch ==== ceph ==== Subpackages: librados2 librbd1 - Advertised user/groups that are generated by the pre scripts: * package cephadm generates user/group cephadm * package ceph-common generates user/group ceph ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - Reinstate the verification for a non-zero total entry count to skip unmapped data blocks (bsc#1218864) * 0001-fs-xfs-always-verify-the-total-number-of-entries-is-.patch - Removed temporary fix as reverting it will cause a different XFS parser bug * 0001-Revert-fs-xfs-Fix-XFS-directory-extent-parsing.patch ==== gstreamer-plugins-bad ==== Subpackages: gstreamer-plugins-bad-lang libgstadaptivedemux-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstcuda-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstphotography-1_0-0 libgstplay-1_0-0 libgstplayer-1_0-0 libgstsctp-1_0-0 libgsttranscoder-1_0-0 libgsturidownloader-1_0-0 libgstva-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 libgstwebrtcnice-1_0-0 - Disable zxing in Leap15 * Leap 15 can not provide zxing >= 1.4.0, zxing is inherited from SLE15 but SLE15 do provide zxing version 1.2.0 only, Factory do have zxing-cpp 2.0.0 however it's not an API compatible version. ==== ibus-libpinyin ==== ==== lftp ==== - Apply "0001-lftp_ssl-deinitialize-the-lftp_ssl_openssl_instance.patch" to fix a crash that ocurred when lftp is run on s390x with an IBM crypto card installed. The issue has been reported to upstream at https://github.com/lavv17/lftp/issues/716. [bsc#1213984] ==== libstorage-ng ==== Version update (4.5.175 -> 4.5.176) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - Translated using Weblate (Swedish) (bsc#1149754) - 4.5.176 ==== mlocate ==== Subpackages: mlocate-lang - Remove the post-install scriptlet introduced earlier. It turns out that "chmod" call opened a security vulnerability that allowed users with write access to /var/lib/mlocate to obtain read/write access to arbitrary files on the system, possibly facilitating privilege escalation to root. [bsc#1218896, CVE-2023-32190] ==== mozilla-nss ==== Version update (3.95 -> 3.96.1) Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs mozilla-nss-tools - update to NSS 3.96.1 * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups) * bmo#1867408 - add a defensive check for large ssl_DefSend return values * bmo#1869378 - Add dependency to the taskcluster script for Darwin * bmo#1869378 - Upgrade version of the MacOS worker for the CI ==== mutter ==== Subpackages: mutter-lang - Rebase mutter-disable-cvt-s390x.patch for mutter 45.x. ==== nvidia-open-driver-G06-signed ==== - splitted up 61-nvidia-$flavor.conf to 59-nvidia-$flavor.conf and 61-nvidia-$flavor.conf, because 'install' line cannot be overwritten with higher config number ... - mistakenly moved dracut config file from 60-nvidia-%1.conf to 61-nvidia-%1.conf --> reverted! - switched from 60-nvidia-$flavor.conf to 61-nvidia-$flavor.conf in modprobe.d to resolve conflict with older package, which can be installed in parallel ==== openssl-1_1 ==== Subpackages: libopenssl1_1 - Because OpenSSL 1.1.1 is no longer default, let's rename engine directories to contain version of OpenSSL and let unversioned for the default OpenSSL. [bsc#1194187, bsc#1207472, bsc#1218933] * /etc/ssl/engines.d -> /etc/ssl/engines1_1.d * /etc/ssl/engdef.d -> /etc/ssl/engdef1_1.d * Update patches: - openssl-1_1-ossl-sli-002-ran-make-update.patch - openssl-1_1-use-include-directive.patch ==== ruby ==== Version update (3.2 -> 3.3) - switch the default ruby to 3.3 ==== thin-provisioning-tools ==== Version update (1.0.9 -> 1.0.10) - Update to version 1.0.10: * Bump version to 1.0.10 * [build] Update dependencies * [all] Fix clippy lints and typos * [space_map] Allow non-zero values in unused index block entries * [thin_repair] Fix child keys checking on the node with a zero key * [thin_check] Tweak the logs to avoid confusion with node errors * [thin_check] Support overriding the details tree root * [tests] Update expected help text for _pack and _unpack * [all] Fix clippy lints on optional targets * [build] Simplify the pre-commit hooks by checking all the targets at once * [thin_metadata_unpack] Allow long format for input and output * [space map] Fix incorrect index_entry.nr_free while expansion * thin_metadata_pack: Allow long format for input and output ==== yast2 ==== Version update (5.0.3 -> 5.0.4) Subpackages: yast2-logs - Reading Kernel Params: Use kernel cmdline when install.inf is not available (bsc#1216408) - 5.0.4 ==== yast2-bootloader ==== Version update (5.0.2 -> 5.0.4) - Persist s390 cio_ignore kernel argument always when given (bsc#1210525). - 5.0.4 - Do not try finding undefined bootloader name to avoid error in logs (bsc#1218700) - 5.0.3

1 0

New package ktls-utils for Factory
by Daniel Wagner 26 Jan '24

26 Jan '24

Hi, We (kernel-storage team) would like to add ktls-utils to Factory. In-kernel TLS consumers need a mechanism to perform TLS handshakes on a connected socket to negotiate TLS session parameters that can then be programmed into the kernel's TLS record protocol engine. This package of software provides a TLS handshake user agent that listens for kernel requests and then materializes a user space socket endpoint on which to perform these handshakes. The resulting negotiated session parameters are passed back to the kernel via standard kTLS socket options. Thus this daemon enables the TLS over nvme-tcp feature. The feeder project is here https://build.opensuse.org/package/show/network:utilities/ktls-utils Thanks, Daniel

2 1

New package for factory: python-taskgroup
by absolutely.vivid＠fastmail.org 26 Jan '24

26 Jan '24

Hi, I've created a new package in devel:languages:python that I would like to introduce to Factory. https://build.opensuse.org/package/show/devel:languages:python/python-taskg… Taskgroup (https://pypi.org/project/taskgroup/) is a python module that backports the asyncio.TaskGroup API from Python 3.11 to earlier versions of Python 3. It's a relatively small module, but it's useful for asyncio-based Python applications that wish to support Python 3.8-3.10 while still being able to use the newer asyncio features. An example is hypercorn (https://pypi.org/project/hypercorn/) which can't be packaged until taskgroup is packaged. Since taskgroup is a backport of a standard library API, I expect it to be easy to maintain. It looks feature complete and I don't think there will be any future breaking changes to worry about. I'm planning on reaching out to the upstream maintainer on pushing a new release to Pypi. There's been a bit of work done in the source repository since the last release, and I would like to make those changes available in this package. This is my first package, and I welcome all feedback! I want to make this package as good as it can be, and I'd like to incorporate any suggestions or feedback anyone might have :) Vivid

5 5