April 2024 - openSUSE Factory - openSUSE Mailing Lists

[opensuse-factory] reproducible builds status 2024-04
by Bernhard M. Wiedemann 30 Apr '24

30 Apr '24

Hi, This month, I got confirmation that NLnet will sponsor my project https://en.opensuse.org/openSUSE:Reproducible_openSUSE to create an openSUSE-based distribution that consists of only bit-reproducible packages. In previous r-b-summits, one common question was "How can a user know if a package builds reproducibly?" and here the answer is simple: if it is in the repo, it must be reproducible. And there are tools to rebuild and check. Another good answer would be http://ismypackagereproducibleyet.org/?pkg=perl This will need patches for some long-standing issues in emacs, llvm/rust and more. In other news: We reached 13400 packages where I could verify binaries as bit-identical in rebuilds. This leaves less than 2000 remaining. Some of these have not been rebuilt with the new rpm version yet and some have minor issues such as .jar files with updated mtimes. Here are the autogenerated bits: last month's status: https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… Last months' reproducible builds project updates (including my work): https://reproducible-builds.org/reports/2024-03/ I uploaded https://rb.zq1.de/compare.factory-20240430/ today https://rb.zq1.de/spec/glossar.txt explains the meaning of below values: total-packages: 15456 (+56) build-tried: 15401 (+57) build-failed: 59 (+20) build-n-a: 198 (-14) build-succeeded: 15144 (+51) build-official-failed+na: 85 (-48) build-compare-failed: 150 (-11) build-compare-succeeded: 14994 (+62) verify-failed: 290 (-28) verified-semi-reproducible: 14658 (+3184) verified-bit-identical: 13406 (+12394) bit-by-bit-identical: 14429 (+87) not-bit-by-bit-identical: 724 (-21) not-bit-by-bit-identicalcheck: 715 (-36) https://rb.zq1.de/compare.factory-20240430/graph.png shows the change over time https://rb.zq1.de/compare.factory-20240430/unreproduciblerings.txt lists very unreproducible core packages (bootstrap+DVD) Of the badly unreproducible packages, 5 were in ring0 30 were in ring1 That makes it 35/4043 => 0.87 % which is below the overall average of 150/15144 => 0.99 % 724/15144 => 4.78 % of packages are not perfectly reproducible package notes: ==> ./apache-chainsaw/.rb.notes <== javadoc, minor jar ==> ./armagetron/.rb.notes <== #=> https://gitlab.com/armagetronad/armagetronad/-/merge_requests/162 date ==> ./arpack-ng/.rb.notes <== FTBFS-j1 ==> ./binutils/.rb.notes <== PGO from --enable-pgo-build=lto no problem? ==> ./caddy/.rb.notes <== => SR 1163784 FTBFS-nocheck ==> ./coredns/.rb.notes <== FTBFS-j1 parallelism ==> ./dlib/.rb.notes <== +++ /var/tmp/build-root.10b/.mount/home/abuild/rpmbuild/BUILD/dlib-19.24.4/build/temp.linux-x86_64-cpython-311/CMakeCache.txt 2040-05-22 11:23:02.039999995 +0200 @@ -474,7 +474,7 @@ ==> ./eclipse-ecf/.rb.notes <== FTBFS ?random? ==> ./fakeroot/.rb.notes <== FTBFS [ 48s] FAIL t.tar (exit status: 1) ==> ./fractal/.rb.notes <== minor build-id diff ==> ./geany/.rb.notes <== #=> SR 1169977 toolchain random = https://github.com/geany/geany/pull/3785 ==> ./ghc-timerep/.rb.notes <== parallelism ==> ./gitui/.rb.notes <== => https://github.com/extrawurst/gitui/pull/2202 date not `date` ==> ./go1.13/.rb.notes <== #=> SR 1168496 parallelism ==> ./go1.14/.rb.notes <== #=> SR 1167936 parallelism parallelism ; can -trimpath help? ==> ./go1.15/.rb.notes <== #=> SR 1168495 parallelism go buildid ==> ./gromacs/.rb.notes <== -j1 failed and other? -M openmpi ==> ./java-21-openjdk/.rb.notes <== = https://bugzilla.opensuse.org/show_bug.cgi?id=1221224 java-21-openjdk parallelism +?ASLR? becomes reproducible with oscbuildextrapkg=--extra-pkgs=reproducible-faketools-j1 rbk ==> ./java-22-openjdk/.rb.notes <== becomes reproducible with oscbuildextrapkg=--extra-pkgs=reproducible-faketools-j1 rbk ==> ./libical/.rb.notes <== FTBFS-j4 ==> ./libraw/.rb.notes <== date+ASLR+random? bogus? ==> ./libressl/.rb.notes <== found range 1872949611 -> 1872951536 ==> ./librsvg/.rb.notes <== FTBFS-cpu osc build --vm-type=kvm --clean --noservice --build-opt=--vm-custom-opt="-cpu qemu64" standard ==> ./lua-lmod/.rb.notes <== => https://github.com/TACC/Lmod/pull/702 date+time from `date` /usr/share/lmod/8.7.37/libexec/Version.lua differs (ASCII text) ==> ./mbedtls-2/.rb.notes <== FTBFS-SSL 2027-06-23 found range 1813749955 -> 1813751879 ==> ./metis/.rb.notes <== => SR 1164284 %check issue ==> ./musique/.rb.notes <== => SR 1163266 date -DEFINES = -DAPP_VERSION=1.12 -DAPP_NAME=Musique -DAPP_UNIX_NAME=musique -DBUILD_YEAR=2024 -DQT_NO_DEBUG_OUTPUT -DQT_USE_QSTRINGBUILDER -DHTTP -DMEDIA_MPV -DMEDIA_AUDIOONLY -DQAPPLICATION_CLASS=QApplication -DAPP_LINUX -DDATADIR=\"/usr/share\" -DPKGDATADIR=\"/usr/share/musique\" -DQT_NO_EXCEPTIONS -DQT_NO_DEBUG -DQT_WIDGETS_LIB -DQT_GUI_LIB -DQT_QML_LIB -DQT_NETWORK_LIB -DQT_SQL_LIB -DQT_DBUS_LIB -DQT_QMLINTEGRATION_LIB -DQT_CORE_LIB ==> ./nautilus/.rb.notes <== date from data/org.gnome.Nautilus.metainfo.xml.in.in: <release version="@release-version@" date="@build-date@"/> ==> ./nebula/.rb.notes <== = https://github.com/slackhq/nebula/issues/1124 FTBFS-2027-11-11 SSL osc build --no-service --vm-type=kvm --build-opt=--vm-custom-opt=-rtc\ base=2027-11-12T00:00:00 standard ==> ./nfdump/.rb.notes <== => SR 1163778 ==> ./ollama/.rb.notes <== #=> SR 1168020 (on top of prior 1.28 update that did not make it to Factory) #=> https://github.com/ollama/ollama/pull/2836 gzip ==> ./openssl-3/.rb.notes <== = https://bugzilla.opensuse.org/show_bug.cgi?id=1223336 random debugsource FTBFS-2035-07-02 ==> ./openssl_tpm2_engine/.rb.notes <== FTBFS ==> ./openttd/.rb.notes <== ASLR into build-id ==> ./pandoc-cli/.rb.notes <== = ghc toolchain parallelism https://gitlab.haskell.org/ghc/ghc/-/issues/12935 ==> ./perl-Verilog-Perl/.rb.notes <== FTBFS-j4 dependency error ==> ./perl/.rb.notes <== embeds build machine kernel version => must build in KVM ==> ./php-memcache/.rb.notes <== FTBFS-2038-01-05 found range 2146272623 -> 2146274548 ==> ./postfish/.rb.notes <== => SR 1168486 = https://github.com/FFTW/fftw3/issues/337 toolchain fftw3 postfish-wisdomrc random order ==> ./postgresql14/.rb.notes <== FTBFS found range good=1713439043 bad=1713440967 ==> ./postgresql15/.rb.notes <== FTBFS-? not only -j1 ==> ./pspp/.rb.notes <== parallelism issue = https://bugzilla.opensuse.org/show_bug.cgi?id=1221321 FTBFS-nocheck ==> ./python-Scrapy/.rb.notes <== FTBFS-j1 ==> ./python-WSME/.rb.notes <== FTBFS [ 18s] =========================== short test summary info ============================ ==> ./python-ZEO/.rb.notes <== FTBFS-j1 + date found range 2147460804 -> 2147462729 ==> ./python-billiard/.rb.notes <== FTBFS-j1 ==> ./python-cPyparsing/.rb.notes <== .note.gnu.build-id varies ==> ./python-django-request/.rb.notes <== FTBFS-2037? found range 2198695595 -> 2198697519 ==> ./python-gpstime/.rb.notes <== FTBFS-2024-12-28 found range 1735343872 -> 1735345797 ==> ./python-khal/.rb.notes <== = https://github.com/pimutils/khal/issues/1343 FTBFS-2028-03-12 + 2037-05-04 => https://github.com/pimutils/khal/pull/1185 flaky FTBFS ==> ./python-osprofiler/.rb.notes <== FTBFS ==> ./python-paho-mqtt/.rb.notes <== FTBFS-j1 + SSL expired found range 1783313692 -> 1783315617 ==> ./python-paramiko/.rb.notes <== FTBFS-j1 python .pyc ASLR ==> ./python-pony/.rb.notes <== FTBFS-j1 ==> ./python-pytest-httpbin/.rb.notes <== FTBFS-j1 FTBFS-2038 SSL ==> ./python-python-datamatrix/.rb.notes <== FTBFS osc build --vm-type=kvm --clean --noservice standard ==> ./python-python-for-android/.rb.notes <== FTBFS-j1 ==> ./python-python-stdnum/.rb.notes <== = https://github.com/arthurdejong/python-stdnum/issues/431 FTBFS-2039 found range 2202507502 -> 2202509426 ==> ./python-sherpa/.rb.notes <== FTBFS-j1 FTBFS-date?random? found range 1745398457 -> 1745400596 ==> ./python-spyder-notebook/.rb.notes <== FTBFS /var/tmp/rpm-tmp.xbK78N: line 85: 2912 Segmentation fault PYTHONPATH=${PYTHONPATH:+$PYTHONPATH:}/home/abuild/rpmbuild/BUILDROOT/python-spyder-notebook-0.5.1-0.x86_64/usr/lib/python3.11/site-packages PYTHONDONTWRITEBYTECODE=1 pytest-3.11 --ignore=_build.python3 -v ==> ./python-urlextract/.rb.notes <== => SR 1161342 extra file from %check +/usr/lib/python3.9/site-packages/urlextract/data/tlds-alpha-by-domain.txt.lock 0 (none) 100644 root root 0 4294967295 ==> ./python-websockets/.rb.notes <== FTBFS-j1 ==> ./rmw/.rb.notes <== = https://github.com/theimpossibleastronaut/rmw/issues/439 FTBFS-2038 found range 2147482293 -> 2147484218 ==> ./sequoia-sq/.rb.notes <== FTBFS-2026-10-05 --build-opt=--vm-custom-opt=-rtc base=2040-01-25T00:00:00 failed ==> ./tor/.rb.notes <== FTBFS-2037-04-20 found range good=2123823843 bad=2123825767 (2037-04-20T07:36:07) ==> ./ugrep/.rb.notes <== => https://bugzilla.suse.com/show_bug.cgi?id=1222752 CPU ==> ./xorg-x11-fonts/.rb.notes <== toolchain fonttosfnt, -M=converted = https://bugzilla.opensuse.org/show_bug.cgi?id=1173396 ASLR : x*3 uninit bytes 'checksum adjustment'

1 0

New Tumbleweed snapshot 20240429 released!
by Dominique Leuenberger 30 Apr '24

30 Apr '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: cpupower ffmpeg-4 openSUSE-release (20240428 -> 20240429) === Details === ==== cpupower ==== Subpackages: cpupower-bash-completion cpupower-lang libcpupower1 - Parse turbostat and intel-speed-select version from kernel sources and add them to %description ==== ffmpeg-4 ==== Subpackages: libavcodec58_134 libavformat58_76 libavutil56_70 libpostproc55_9 libswresample3_9 libswscale5_9 - Add 0001-avfilter-af_stereowiden-Check-length.patch [boo#1223437, CVE-2023-51794] ==== openSUSE-release ==== Version update (20240428 -> 20240429) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen

1 0

Tomorrow's openSUSE Release call is cancelled
by Lubos Kocman 30 Apr '24

30 Apr '24

Hello openSUSE Tomorrow's openSUSE Release call is cancelled as most countries have a public holiday. Everyone is welcome to provide an update for the past week in the etherpad https://etherpad.opensuse.org/p/ReleaseEngineering-20240501 Many thanks and enjoy the sunny weather! ps. I noticed that all release call sessions in calendar-o-o were cancelled, so that should be fixed now. -- Best regards Luboš Kocman openSUSE Leap Release Manager

1 0

Dependency issue updating to TW snapshot 20240425
by Rodney Baker 30 Apr '24

30 Apr '24

Hi all, After being away from home for a week, just ran zypper dup on my TW box running snapshot 20240416 to upgrade to 20240425. Virt-v2v is complaining about a dependency on btrfsprogs. Is this a real dependency or just a suggestion (or just wrong)? ---------------- Problem: 1: the to be installed virt-v2v-2.4.0-5.1.x86_64 requires 'btrfsprogs', but this requirement cannot be provided not installable providers: btrfsprogs-6.8-416.9.i586[Tumbleweed_Filesystems] btrfsprogs-6.8-416.9.x86_64[Tumbleweed_Filesystems] btrfsprogs-6.8-1.2.x86_64[download.opensuse.org-oss] btrfsprogs-6.8-416.9.i586[filesystems] btrfsprogs-6.8-416.9.x86_64[filesystems] Solution 1: Following actions will be done: remove lock to allow installation of btrfsprogs-6.8-416.9.i586[Tumbleweed_Filesystems] install btrfsprogs-6.8-416.9.i586 despite the inferior architecture Solution 2: Following actions will be done: remove lock to allow installation of btrfsprogs-6.8-416.9.i586[filesystems] install btrfsprogs-6.8-416.9.i586 despite the inferior architecture Solution 3: deinstallation of virt-v2v-2.4.0-3.2.x86_64 Solution 4: keep obsolete virt-v2v-2.4.0-3.2.x86_64 Solution 5: remove lock to allow installation of btrfsprogs-6.8-416.9.x86_64[filesystems] Solution 6: remove lock to allow installation of btrfsprogs-6.8-1.2.x86_64[download.opensuse.org-oss] Solution 7: remove lock to allow installation of btrfsprogs-6.8-416.9.x86_64[Tumbleweed_Filesystems] Solution 8: break virt-v2v-2.4.0-5.1.x86_64 by ignoring some of its dependencies Choose from above solutions by number or cancel [1/2/3/4/5/6/7/8/c/d/?] (c): -------------- I have no btrfs file systems on any box I manage and I have all btrfs packages blocked from installation because I don't trust it (after having more than one system rendered unbootable/unrecoverable due to snapshots taking all available disk space and having no way to recover other than reformat/reinstall). This is the first time zypper has complained about btrfsprogs being a dependency for anything on the system. For now I chose option 8 - any better solutions? -- ========================================================================================================== Rodney Baker rodney.baker(a)outlook.com.au ==========================================================================================================

4 7

Leap 15.6 RC code submission deadline + help with eliminating build fails
by Lubos Kocman 29 Apr '24

29 Apr '24

Hello openSUSE! SLES 15 SP6 has *today at 15:00 a code drop deadline for Public RC therefore the same applies for Leap 15.6. To my understanding SLES currently accepts only P1 and SHIP STOPPERS and defers rest to maintenance updates. We still have a little bit more flexibility on the Leap side, but we'd like to avoid late changes and focus on bug fixes. If there is some feature that arrives late please let us know in https://code.opensuse.org/leap/features so we can evaluate it for inclusion. Leap 15.6 has some remaining build failures after the last rebuild that we need to eliminate or drop packages. **Any help on these build failures would be greatly appreciated**. Packages without any binary results will be dropped shortly unless fixed in a timely manner. https://bugzilla.opensuse.org/buglist.cgi?cmdtype=dorem&remaction=run&named… transmission fails to build on Leap 15.6 - due to unpackaged news/news* thunar-plugin-vcs fails to build on Leap 15.6 sway fails to build on Leap 15.6 - error: enumeration value spotifyd fails to build on Leap 15.6 - the parameter type `T` may not live long enough rsvndump fails to build on Leap 15.6 - missing subversion libraries python-gear fails to build on Leap 15.6 - ssl.SSLError: [SSL: EE_KEY_TOO_SMALL] power-profiles-daemon fails to build on Leap 15.6 - fail in test_dytc_performance_driver parsec fails to build on Leap 15.6 - lstdc++: No such file or directory openssl_tpm2_engine fails to build on Leap 15.6 - FAIL ../check_enhanced_auth.sh nsjail fails to build on Leap 15.6 error: variable or field 'LogHandler' declared void manpages-l10n fails to build on Leap 15.6 due to a filelist conflict with SLES lxc fails to build on Leap 15.6 [m[Kpassing argument 4 of '[01m[Kmount_setattr[m[K' from incompatible pointer type [[01;31m[K-Werror=incompatible-pointer-types[m[K] kanidm fails to build on Leap 15.6 - unused imports: `AccessTokenRequest`, `AccessTokenResponse`, `CodeChallengeMethod`, `ErrorResponse` git-interactive-rebase-tool fails to build on Leap 15.6 fsvs fails to build on Leap 15.6 - Sorry, can't find subversion. erlang-rebar-testsuite failst to build on Leap 15.6 21:55:41 Nor Nanuk Krinner cvise fails to build on Leap 15.6 - no member named 'getField' cura-engine-lulzbot fails to build on Leap 15.6 21:48:32 Nor Adrian Schröter criterion fails to build on Leap 15.6 - ImportError: cannot import name 'builder' bmap-tools fails to build on Leap 15.6 21:41:11 Nor David Sterba slib fails to build on Leap 15.6 - build failed in %post [0] https://en.opensuse.org/openSUSE:Roadmap#Schedule_for_openSUSE_Leap_15.6 -- Best regards Luboš Kocman openSUSE Leap Release Manager

5 7

New Tumbleweed snapshot 20240428 released!
by Dominique Leuenberger 29 Apr '24

29 Apr '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: cppcheck (2.13.4 -> 2.14.0) ibus-libzhuyin (1.10.2 -> 1.10.3) publicsuffix (20240410 -> 20240419) === Details === ==== cppcheck ==== Version update (2.13.4 -> 2.14.0) - update to 2.14.0 * New checks: - eraseIteratorOutOfBounds: warns when erase() is called on an iterator that is out of bounds - returnByReference: warns when a large class member is returned by value from a getter function ==== ibus-libzhuyin ==== Version update (1.10.2 -> 1.10.3) - Update to version 1.10.3 * configure.ac (AM_GNU_GETTEXT_VERSION): Bump to 0.21 * Fix processKeyEvent methods * Update libzhuyin.appdata.xml ==== publicsuffix ==== Version update (20240410 -> 20240419) - Update to version 20240419: * add qnap entries to existing section (`myqnapcloud.cn` , `mycloudnas.com`, `mynascloud.com`) (#1837) * Update public_suffix_list.dat (#1966) * drop old domains (#1960) * Jouwweb public suffixes (#1935) * Add `us.kg` (#1755) * Replacement for PR #1741 (#1962) * Add `rt.ht` (#1860) * Add cloudscale.ch domains (#1589)

1 0

What is pulling in *-lang packages?
by Stefan Seyfried 29 Apr '24

29 Apr '24

Hi all, I recently installed a new laptop with Tumbleweed instead of my old habit of just moving over the installed disk. Now I'm facing some issues that were not present before in my old installation. One of these issues is that something wants to pull in addiditonal -lang packages that I do not want: mixi:~ # zypper -v dup --no-recommends [...] The following 8 NEW packages are going to be installed: cpupower-lang 6.8.6-7.9 file-roller-lang 44.1-1.1 gcr-lang 4.3.0-1.1 gnome-online-accounts-lang 3.50.1-1.1 gtk3-lang 3.24.41-2.1 icewm-lang 3.4.5-3.1 pipewire-lang 1.0.4-3.1 xz-lang 5.6.1.revertto5.4-3.1 As you can see, I already added "--no-recommends" as every experienced user obviously always does, but the *-lang are still added. I can run "zypper al '*-lang'" to avoid this, but then it will never update the installed lang-packages, which is also not what I want. (I do not want translations for any command line tools and graphical stuff that has to be installed but I never actually use, but I do want translations for selected applications) The lock not breaking the update does show that these lang packages are only recommended and not required. But then why does "--no-recommends" not stop them from being installed? Best regards, -- Stefan Seyfried "For a successful technology, reality must take precedence over public relations, for nature cannot be fooled." -- Richard Feynman

12 30

New Tumbleweed snapshot 20240427 released!
by Dominique Leuenberger 29 Apr '24

29 Apr '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: openSUSE-release (20240426 -> 20240427) pcre2 === Details === ==== openSUSE-release ==== Version update (20240426 -> 20240427) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== pcre2 ==== Subpackages: libpcre2-16-0 libpcre2-32-0 libpcre2-8-0 libpcre2-8-0-32bit

1 0

Re: Tumbleweed suddenly wants to become MicroOS or Slowroll
by Andrei Borzenkov 29 Apr '24

29 Apr '24

On 28.04.2024 17:38, Andrei Borzenkov wrote: > I do not quite understand the zypper logic here but it looks like zypper > will install all matching packages. Yep. bor@tw:~> sudo zypper inr Loading repository data... Reading installed packages... Resolving package dependencies... The following 2 NEW packages are going to be installed: bar foo bor@tw:~> rpm -q --supplements -p ./repo/foo-1-1.noarch.rpm modalias(pci:v00001AF4*) bor@tw:~> rpm -q --supplements -p ./repo/bar-1-1.noarch.rpm modalias(pci:v00001AF4*) bor@tw:~>

2 1

New Tumbleweed snapshot 20240426 released!
by Dominique Leuenberger 28 Apr '24

28 Apr '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MozillaFirefox (124.0.2 -> 125.0.2) dracut (059+suse.563.g4900899a -> 059+suse.581.g19b7c06c) ffmpeg-4 ffmpeg-6 google-noto-coloremoji-fonts (20230315 -> 20240424) libupnp (1.14.18 -> 1.14.19) openSUSE-release (20240425 -> 20240426) pcsc-lite (2.0.3 -> 2.1.0) sqlite3 (3.45.2 -> 3.45.3) systemd-presets-branding-Aeon thin-provisioning-tools tracker (3.7.1 -> 3.7.2) tracker-miners (3.7.1 -> 3.7.2) yast2-storage-ng (5.0.12 -> 5.0.13) === Details === ==== MozillaFirefox ==== Version update (124.0.2 -> 125.0.2) Subpackages: MozillaFirefox-translations-common - Mozilla Firefox 125.0.2 * The 125.0 and 125.0.1 releases were skipped due to problems with a feature that proactively blocked downloads from potentially untrustworthy URLs * New: Firefox now supports the AV1 codec for Encrypted Media Extensions (EME), enabling higher-quality playback from video streaming providers * New: The Firefox PDF viewer now supports text highlighting. * New: Firefox View now displays pinned tabs in the Open tabs section. Tab indicators have also been added to Open tabs, so users can do things like see which tabs are playing media and quickly mute or unmute across windows. Indicators were also added for bookmarks, tabs with notifications, and more! their addresses upon submitting an address form, allowing Firefox to autofill stored address information in the future. * New: The URL Paste Suggestion feature provides a convenient way for users to quickly visit URLs copied to the clipboard in the address bar of Firefox. When the clipboard contains a URL and the URL bar is focused, an autocomplete result appears automatically. Activating the clipboard suggestion will navigate the user to the URL with 1 click. * New: Users of tab-specific Container add-ons can now search in the Address Bar for tabs that are open in different containers. Special thanks to volunteer contributor atararx for kicking off the work on this feature! * New: Firefox now provides an option to enable Web Proxy Auto- Discovery (WPAD) while configured to use system proxy settings. * Changed: In a group of radio buttons where no option is selected, the tab key now only reaches the first option rather than cycling through all available options. The arrow keys navigate between options as they do when there is a selected option. This makes keyboard navigation more efficient and consistent * HTML5: Firefox now supports the `popover` global attribute used for designating an element as a popover element. The element won't be rendered until it is made visible, after which it will appear on top of other page content. * HTML5: WebAssembly multi-memory is now enabled by default. Wasm multi-memory allows wasm modules to use and import multiple independent linear memories. This enables more efficient interoperability between modules and provides better polyfills for upcoming wasm standards, such as the component model. * HTML5: Added support for Unicode Text Segmentation to JavaScript. * HTML5: Added support for `contextlost` and `contextrestored` events on HTMLCanvasElement and OffscreenCanvas to allow user code to recover from context loss with hardware accelerated 2d canvas. * HTML5: Firefox now supports the `navigator.clipboard.readText()` web API. A paste context menu will appear for the user to confirm when attempting to read clipboard data not provided by the same-origin page. * HTML5: Added support for the `content-box` and `stroke-box` keywords of the `transform-box` CSS property. * HTML5: The `align-content` property now works in block layout, allowing block direction alignment without needing a flex or grid container. * HTML5: Support for `SVGAElement.text` was removed in favor of the more widely-implemented `SVGAElement.textContent` method. * Developer: Following several requests, we have reintroduced the option to disable the Pause Debugger Overlay (`devtools.debugger.features.overlay`). This overlay appears over the page content when the debugger pauses JavaScript execution. In certain scenarios, the overlay can be intrusive, making it challenging to interact with the page, for instance, evaluating shades of color underneath. * Developer: We've added a new drop-down menu button at the bottom of the source view in the Debugger panel, specifically designed for Source Map related actions. Users can now easily disable or enable Source Maps support, open the Source Map file in a new tab, switch between the original source and the generated bundle, toggle the "open original source by default" option, and view the Source Map status such as errors, loading status, etc. MFSA 2024-18 (bsc#1221327) * CVE-2024-3852 (bmo#1883542) GetBoundName in the JIT returned the wrong object * CVE-2024-3853 (bmo#1884427) Use-after-free if garbage collection runs during realm initialization * CVE-2024-3854 (bmo#1884552) Out-of-bounds-read after mis-optimized switch statement * CVE-2024-3855 (bmo#1885828) Incorrect JIT optimization of MSubstr leads to out-of-bounds reads * CVE-2024-3856 (bmo#1885829) Use-after-free in WASM garbage collection * CVE-2024-3857 (bmo#1886683) Incorrect JITting of arguments led to use-after-free during garbage collection * CVE-2024-3858 (bmo#1888892) Corrupt pointer dereference in js::CheckTracedThing<js::Shape> * CVE-2024-3859 (bmo#1874489) Integer-overflow led to out-of-bounds-read in the OpenType sanitizer * CVE-2024-3860 (bmo#1881417) Crash when tracing empty shape lists * CVE-2024-3861 (bmo#1883158) Potential use-after-free due to AlignedBuffer self-move ... changelog too long, skipping 16 lines ... - add mozilla-libproxy-fix.patch to fix with-libproxy build variant ==== dracut ==== Version update (059+suse.563.g4900899a -> 059+suse.581.g19b7c06c) - Update to version 059+suse.581.g19b7c06c: * fix(dracut): move hooks directory from /usr/lib to /var/lib (bsc#1218068) * feat(tpm2-tss): add tpm2.target and systemd-tpm2-generator * fix(systemd): explicitly install some libs that will not be statically included * fix(dracut-lib): only remove initqueue/finished scripts, not the hook dir * fix(dracut-util): avoid memory leak * fix(dracut-install): memory leak in two `hashmap_put` calls if key exists * fix(dracut-install): release memory allocated for regular expressions * fix(dracut-install): memory leak in `--modalias` option * refactor(dracut-install): strerror(errno) -> %m * perf(dracut-install): don't strdup() environment block * perf(dracut-install): don't reallocate {src,dst}path in hmac_install() * perf(dracut-install): don't strdup() excessively for dracut_install() * perf(dracut-install): stat() w/unused buf -> access(F_OK) in dracut-install * perf(dracut-install): multiple single-character strstr()s -> strpbrk() ==== ffmpeg-4 ==== Subpackages: libavcodec58_134 libavformat58_76 libavutil56_70 libpostproc55_9 libswresample3_9 libswscale5_9 - Add ffmpeg-CVE-2023-51793.patch: Backporting 0ecc1f0e from upstream, Fix odd height handling. (CVE-2023-51793 bsc#1223272) - Add ffmpeg-CVE-2023-49502.patch: Backporting 737ede40 from upstream, account for chroma sub-sampling in min size calculation. (CVE-2023-49502 bsc#1223235) - Address boo#1223304/CVE-2023-51798: add patch 0001-avfilter-vf_minterpolate-Check-pts-before-division.patch ==== ffmpeg-6 ==== Subpackages: libavcodec60 libavfilter9 libavformat60 libavutil58 libpostproc57 libswresample4 libswscale7 - Add ffmpeg-CVE-2023-50008.patch: Backporting 5f87a68c from upstream, Fix memory leaks. (CVE-2023-50008 bsc#1223254) - Add ffmpeg-CVE-2023-50007.patch: Backporting b1942734 from upstream, Fix crash with EOF handling. (CVE-2023-50007 bsc#1223253) ==== google-noto-coloremoji-fonts ==== Version update (20230315 -> 20240424) - Update to v2.042 * Unicode 15.1 update ==== libupnp ==== Version update (1.14.18 -> 1.14.19) Subpackages: libixml11 libupnp17 - Update to release 1.14.19 * Fix some memory allocations in the "TvDevice" example ==== openSUSE-release ==== Version update (20240425 -> 20240426) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== pcsc-lite ==== Version update (2.0.3 -> 2.1.0) Subpackages: libpcsclite1 - Update the spec for building with version 2.1.0 - version 2.1.0 * LIBPCSCLITE_DELEGATE is used to redirect to another libpcsclite library * setup_spy.sh displays the LIBPCSCLITE_DELEGATE value to use for spying * provides libfake.c as a sample source code * Some other minor improvements- ==== sqlite3 ==== Version update (3.45.2 -> 3.45.3) Subpackages: libsqlite3-0 libsqlite3-0-x86-64-v3 sqlite3-tcl - Update to release 3.45.3: * Fix a long-standing bug (going back to version 3.24.0) that might (rarely) cause the "old.*" values of an UPDATE trigger to be incorrect if that trigger fires in response to an UPSERT. * Reduce the scope of the NOT NULL strength reduction optimization that was added as item 8e in version 3.35.0. The optimization was being attempted in some contexts where it did not work, resulting in incorrect query results. - Add SQLITE_STRICT_SUBTYPE=1 as recommended by upstream. ==== systemd-presets-branding-Aeon ==== - Remove redundant services formerly from MicroOS - Remove sshd from presets (we're a desktop OS) ==== thin-provisioning-tools ==== - Update vendored dependencies ==== tracker ==== Version update (3.7.1 -> 3.7.2) Subpackages: libtracker-sparql-3_0-0 tracker-data-files tracker-lang typelib-1_0-Tracker-3_0 - Update to version 3.7.2: + Fix runtime issue introduced by SQLite 3.45.3. + Fix possible inconsistency in the handling of DELETE WHERE queries. + Updated translations. ==== tracker-miners ==== Version update (3.7.1 -> 3.7.2) Subpackages: tracker-miner-files tracker-miners-lang - Update to version 3.7.2: + Fixes to data deletion after removing an indexed folder from configuration. + Fixed glib/inotify based monitors to not follow symlinks in some circumstances. + Added a build-time option for fanotify. + Fix build with musl libc. + Updated translations. ==== yast2-storage-ng ==== Version update (5.0.12 -> 5.0.13) - GuidedProposal: refine the :bigger_resize SpaceMaker strategy (gh#openSUSE/agama#1164). - Fixed a bug related to the calculation of partitions required for booting when RAID is involved. - 5.0.13

1 0