- openSUSE Announce

[opensuse-announce] Tumbleweed - Review of the week (2015/18)
by Dominique Leuenberger / DimStar 02 May '15

02 May '15

Dear Tumbleweed users and hackers, In good tradition I am pleased to also give you an overview of the last week on what happened in Tumbleweed. We had 'only' two snapshots released this week (0425 & 0430). The main reason was that the update of parted to version 3.2 managed to sneak through the staging area, yet had a negative impact on the full post -integration test runs (resizing partitions while installing openSUSE side-by-side of Windows is not properly handled). So, parted 3.2 is currently taken out of Tumbleweed again - but of course scheduled to reach you later: once YaST has been adjusted to handle the changes. On the side of things that DID happen: * As discussed on the -factory mailinglist, a couple packages have been converted from GStreamer 0.10 to 1.0 (banshee, gnac) * The kernel has been updated to version 4.0 What can we expect in the upcoming period? * The KDE Team is hard at work to make Plasma 5.3 the default for openSUSE. Work is still going on, but the staging areas are looking promising already. * The switch of GCC 5 as default version is also still work in progress. This is not forgotten yet. * Progress on Ruby 2.2 seems to have stalled - there hasn't been any progress in a while now. Volunteers to step up and work on the fallouts in Staging:H are welcome [0] [0] https://build.opensuse.org/project/show/openSUSE:Factory:Staging:H -- Have a lot of fun, Dimstar / Dominique Leuenberger <dimstar(a)opensuse.org> -- To unsubscribe, e-mail: opensuse-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-announce+help(a)opensuse.org

1 0

[opensuse-announce] openSUSE 12.3 has reached end of SUSE support
by Benjamin Brunner 02 Feb '15

02 Feb '15

Hi all, with the release of flash-player on January 29th, 2015 the SUSE sponsored maintenance of openSUSE 12.3 has ended. openSUSE 12.3 is now officially discontinued and out of support by SUSE. openSUSE 12.3 was released on March 13th 2013, making it ca. 11 months of security and bugfix support. Here are some statistics of our released updates (compared to 12.2): Total updates: 909 (+160) Security: 468 (+116) Recommended: 439 (+43) Optional: 1 (0) Feature: 1 (+1) Fixed CVE-entries: 1581 (+250) Fixed Bugs (overall): 1861 (+505) A huge thanks to our awesome packagers, community and all involved people, who made the next great release possible! Your maintenance- and security-team -- Benjamin Brunner <bbrunner(a)suse.com>, SUSE MaintenanceSecurity SUSE LINUX GmbH, GF: Felix Imendörffer, Jane Smithard, Jennifer Guild, Dilip Upmanyu, Graham Norton, HRB 21284 (AG Nürnberg) -- To unsubscribe, e-mail: opensuse-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-announce+help(a)opensuse.org

2 1

[opensuse-announce] openSUSE board election 2014/2015 results
by Frederic Crozat 27 Jan '15

27 Jan '15

The openSUSE board election 2014/2015 ended last night. In this election we had 3 seats to be elected, all for a standard 2 year (24 months) term : - Robert Schweikert and Kosta Koudaras' terms were coming to expiration. - Peter Linnell's seat was up for election as he got appointed in the board as a replacement for Richard Brown. Election results: We had 148 people voting. Robert Schweikert, 101 votes (68%) Michal Hrusecky, 96 votes (65%) Kostas Koudaras, 81 votes (55%) Peter Linnell, 63 votes (43%) Craig Gardner, 60 votes (41%) Are elected to openSUSE Board, for a 2 years (24 months) term: - Robert Schweikert - Michal Hrusecky - Kostas Koudaras Thanks for all candidates who stepped up and all members who casted their votes! openSUSE 2014/2015 Election Committee (election-officials(a)opensuse.org) Frederic "fcrozat" Crozat Marcus "darix" Rueckert [1] https://connect.opensuse.org/pg/polls/read/RBrownSUSE/46342/opensuse-board-… -- To unsubscribe, e-mail: opensuse-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-announce+help(a)opensuse.org

1 0

[opensuse-announce] Upcoming update for shim requires confirmation on reboot
by Johannes Segitz 16 Jan '15

16 Jan '15

Hello, we will release a security update for shim next week that fixes three security issues, tracked in bnc#889332: - OOB read access when parsing DHCPv6 packets (remote DoS) (CVE-2014-3675). - Heap overflow when parsing IPv6 addresses provided by tftp:// DHCPv6 boot option (RCE) (CVE-2014-3676). - Memory corruption when processing user provided MOK lists (CVE-2014-3677). Because of those issues we update shim to version 0.7.318.81ee561d. This version includes a patch that requires the user to confirm a dialog once on the first boot after the update is installed. You will need to be able to confirm this dialog, which appears before the bootloader, or your system will not boot. This only affects users that are still on openSUSE 13.1 and use a secure boot setup. You can check with 'bootctl' if you're using a secure boot configuration if you're not sure. Best regards, Johannes Segitz -- GPG Key E7C81FA0 EE16 6BCE AD56 E034 BFB3 3ADD 7BF7 29D5 E7C8 1FA0 Subkey fingerprint: 250F 43F5 F7CE 6F1E 9C59 4F95 BC27 DD9D 2CC4 FD66 SUSE LINUX GmbH Maxfeldstraße 5 90409 Nürnberg, Germany GF: Felix Imendörffer, Jane Smithard, Jennifer Guild, Dilip Upmanyu, Graham Norton, HRB 21284 (AG Nürnberg)

1 0

[opensuse-announce] openSUSE Board election for 2014/2015 : you can vote now
by Frederic Crozat 13 Jan '15

13 Jan '15

Hi all, The openSUSE board election just started! Please go to: https://connect.opensuse.org/pg/polls/read/RBrownSUSE/46342/opensuse-board-… and cast your vote for this election. All openSUSE members[1] are eligible to vote. The board consist of one appointed chairperson and 5 elected members who may serve up to 2 consecutive terms on the board. In this election we will have 3 seats to be elected, all for a standard 2 year (24 months) term : - Robert Schweikert and Kosta Koudaras' terms are coming to expiration. - Peter Linnell's seat is up for election as he got appointed in the board as a replacement for Richard Brown. All of them would be allowed to stand up for candidacy again, as it was their first term in the board. Each openSUSE member has THREE VOTES they can use for this election ! The candidates running for an openSUSE board seat are (by alphabetical order): - Craig Gardner (*) - Kostas Koudaras - Michal Hrusecky - Peter Linnell (*) - Robert Schweikert (*) Candidates marked with a (*) are SUSE employees. Note that no single organization or company can control more than 40 percent of the electable board seats (more than 2 seats). For this election, this means that at max two SUSE employees can be elected. Rules for the election process are available at http://en.opensuse.org/openSUSE:Board_election_rules . The election period ends at January 26th 2015 (23:00 UTC). All candidates have put their agenda on the wiki[2], linked as "Platform" after the candidates' name. If you have any questions, please contact the election officials (election-officials(a)opensuse.org). [1] http://en.opensuse.org/Members [2] http://en.opensuse.org/openSUSE:Board_election openSUSE 2014/2015 Election Committee Frederic "fcrozat" Crozat Marcus "darix" Rueckert -- To unsubscribe, e-mail: opensuse-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-announce+help(a)opensuse.org

1 0

[opensuse-announce] New GPG key for SUSE Security
by Marcus Meissner 13 Jan '15

13 Jan '15

Hi folks, We have created a new security(a)suse.de GPG key which obsoletes our old one. It is also attached to this e-mail. Fingerprint of the new key: pub 4096R/317CD502 2014-10-02 Key fingerprint = E502 243D F6B7 E939 EA1B 4A0E 58FC 58B1 317C D502 uid [ unknown] SUSE Security Team <security(a)suse.de> sub 4096R/0DE80E03 2014-10-02 This key can be used to send us encrypted emails and we will use it to sign security specific documents and emails. We will not use this key for code (RPM/Repository) signing. Please use this new key from now onwards. Ciao, Marcus

1 0

[opensuse-announce] Advance discontinuation notice for openSUSE 12.3
by Marcus Meissner 05 Dec '14

05 Dec '14

Dear opensuse-(security-)announce subscribers and openSUSE users, The openSUSE maintenance team announces that the openSUSE maintenance Team will stop releasing updates for openSUSE 12.3 soon. Having provided bug and security fixes for the last two releases and two months, we will stop releasing updates after Jan 4th 2015. This announcement holds true for openSUSE 12.3 only. As usual, the openSUSE project will continue to provide updated packages for the following releases: openSUSE 13.1 openSUSE 13.2 for the next two openSUSE releases plus a two months overlap period. As the schedule of the next releases is not clear, we currently cannot estimate the EOL dates. These will be around 18 - 24 months after release. Please note that the maintenance cycles of SUSE Linux Enterprise products and products based on the SUSE Linux Enterprise Server operating system are not affected by this announcement and have longer life cycles. Our openSUSE lifetimes are tracked on http://en.opensuse.org/Lifetime . If you have any questions regarding this announcement, please do not hesitate to contact the openSUSE maintenance team at <maintenance(a)opensuse.org>.

1 0

[opensuse-announce] openSUSE 13.2: green light to freedom!
by Henne Vogelsang 04 Nov '14

04 Nov '14

Dear contributors, friends and fans openSUSE 13.2 is out! After one year of continuous improvement in the tools and procedures and many hours of developing, packaging, testing and fixing issues a new stable release is here, providing the best that Free and Open Source has to offer with our special green touch: stable, innovative and fun! This is the first release after the change in the openSUSE development mode, with a much shorter stabilization phase thanks to the extensive testing done in a daily basis in the rolling distribution used now as a base for openSUSE stable releases. The perfect balance between innovation and stability with the great level of freedom of choice that openSUSE users are used to. openSUSE 13.2 is ################ Innovative ---------- Built around the most innovative technologies Linux has to offer: Snapper to take the most from snapshots capability of the powerful Btrfs filesystem offered as default option, Wicked to bring light to network configuration, Dracut to ensure shorter boot times… For users asking for even more innovation Plasma 5.1, the next generation workspace by KDE, is also available as a technical preview. Polished -------- This version presents the first step to adopt the new openSUSE design guidelines system-wide. The graphical revamp is noticeable everywhere: the installer, the bootloader, the boot sequence and all of the (seven!) supported desktops (KDE, GNOME, Xfce, LXDE, Enlightenment 19, Mate and Awesome). Even the experimental Plasma 5.1 is adapted to the overall experience. Easy ---- The new openSUSE 13.2 installer comes with several changes targeted to make the installation process easier and more welcoming to new users. Those changes include a new and more straightforward installation work flow, better and smarter automatic proposals, less cluttered configuration options and a brand new layout for the user interface. In addition, several tools are included to easy the administration of any system like the Profile Management Tools for AppArmor or the YaST module for Snapper, just to name a few. "With a vastly improved and streamlined installation process, and all the latest technologies from across the open source ecosystem, openSUSE 13.2 is a perfect choice for people who want an operating system that’s modern, stable, and gets the work done." said Richard Brown, Chairman of openSUSE board. Read the full news article for all the details! https://news.opensuse.org/2014/11/04/opensuse-13-2-green-light-to-freedom/ and remember to have a lot of fun... -- To unsubscribe, e-mail: opensuse-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-announce+help(a)opensuse.org

1 0

[opensuse-announce] Tumbleweed, Factory rolling releases to merge
by Richard Brown 24 Oct '14

24 Oct '14

With the release of openSUSE 13.2 in November, two of openSUSE’s open-source projects, the ‘Tumbleweed’ and ‘Factory’ rolling releases will be merging, and offered as a single openSUSE rolling release under the name ‘Tumbleweed’ Factory will remain the name of the development process where openSUSE’s new developments are integrated, with the tested, user-ready rolling release assuming the name Tumbleweed from Nov. 4. “With the release of openSUSE 13.2 due in November, we realised this was a perfect opportunity to merge our two openSUSE rolling-releases together so users of Tumbleweed can benefit from the developments to our Factory development process over the last few years,” said Richard Brown, Chairman of openSUSE board. “The combined feedback and contributions from our combined Tumbleweed and Factory users should help keep openSUSE rolling forward even faster, while offering our users the latest and greatest applications on a stable rolling release.” Technical details for existing Factory and Tumbleweed users will be published closer to Nov. 4 to explain what steps need to be carried out to smoothly migrate to the new ‘combined’ Tumbleweed rolling release. “The changes to the Factory release model have changed it from being an unstable development codebase into the type of rolling release I set out to create when starting openSUSE Tumbleweed,” said Greg Kroah-Hartman, Linux Kernel Developer and creator of openSUSE Tumbleweed. “I’m very happy to see these two rolling releases coming together under the name Tumbleweed, and am looking forward to watching how it develops in the future.” Establishing Factory as the clear ‘development project’ for the ‘ready-to-use’ Tumbleweed rolling release clarifies Factory’s role as a development codebase for openSUSE software, alongside Tumbleweed as user-ready distribution with rolling, tested updates, Brown said. -- Richard Brown openSUSE Chairman -- To unsubscribe, e-mail: opensuse-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-announce+help(a)opensuse.org

1 0

[opensuse-announce] openSUSE 11.4 has reached end of Evergreen support
by Wolfgang Rosenauer 27 Sep '14

27 Sep '14

Hi, as you probably know our initial commitment to support 11.4 within Evergreen was until July 2014. http://en.opensuse.org/openSUSE:Evergreen While I was hoping that we can keep 11.4 alive for some time longer this is currently not possible from what I would call the "core team" which is Stefan and myself. We are too busy nowadays to be able to scan and patch every issue we get aware of. Thanks to you all who contributed to the success of Evergreen/11.4! The important message is: openSUSE 11.4 Evergreen is not actively maintained anymore! So if you can, we recommend to switch to openSUSE 13.1 as soon as possible which is still planned to be an Evergreen release. Some more details below: The repository already got and will most likely get more updates from package maintainers who care about 11.4 and/or their packages though. You noticed that with recent releases of patches for the bash and NSS issues already, BUT this is _no_ guarantee that every security issue will be fixed. We will accept contributions from anyone though and I will try to take care about "my" packages. Some numbers from 11.4 Evergreen (as far as I was able to get them easily): Evergreen lifetime: 21 months 11.4 overall lifetime (incl. Evergreen): 41 months / 3 years 5 months Evergreen lifetime numbers (w/o official maintenance period): Released update source packages: 804 Unique touched source packages: 177 rough number of patches (based on incident counter): 320 Let me also quote Marcus' numbers from official maintenance lifetime: Total updates: 723 Security: 416 Recommended: 306 Optional: 1 Thanks, Wolfgang -- To unsubscribe, e-mail: opensuse-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-announce+help(a)opensuse.org

1 0