December 2016 - openSUSE Factory - openSUSE Mailing Lists

[opensuse-factory] tumbleweed knode 64bit not available
by nicholas cunliffe 05 Dec '16

05 Dec '16

for tumbleweed only 32bit version 4.8.2 is available for leap 42.1 64bit version 4.14.10 is available -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

2 1

Re: [opensuse-factory] No Login after update in Tumbleweed
by Cneugeb＠web.de 05 Dec '16

05 Dec '16

On Mon, 2016-12-05 at 13:30 Dominique Leuenberger / DimStar wrote: > On Mon, 2016-12-05 at 13:06 +0100, Cneugeb(a)web.de wrote: >> Hello, after my last update I have no grafical login. A shell starts that is refreshed very fast. I can not login because the shell refreshes before I can enter login an password. Does anyone knows how to fix it? > That sounds like your graphical interface fails to actually launch (paired with a bug in gdm that does tries to respawn it to eagerly) Boot your system to single user mode (simply add '3' to the kernel command line, that still works) and extract the logs. Likely there was a kernel update in the mix for you and you need to re- install your binary graphics driver Cheers, Dominique Ok, that solved the problem. Tank you Dominique Cheers, Christian -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

1 0

[opensuse-factory] No Login after update in Tumbleweed
by Cneugeb＠web.de 05 Dec '16

05 Dec '16

Hello, after my last update I have no grafical login. A shell starts that is refreshed very fast. I can not login because the shell refreshes before I can enter login an password. Does anyone knows how to fix it? -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

2 1

[opensuse-factory] New Tumbleweed snapshot 20161203 released!
by Dominique Leuenberger 05 Dec '16

05 Dec '16

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… When you reply to report some issues, make sure to change the subject. It is not helpful to keep the release announcement subject in a thread while discussing a specific problem. Packages changed: MozillaFirefox (50.0 -> 50.0.2) autoyast2 (3.2.3 -> 3.2.4) binutils cmake (3.7.0 -> 3.7.1) doxygen emacs (24.5 -> 25.1) fcitx-qt5 (1.0.5 -> 1.0.6) file libyui-ncurses-pkg (2.48.2 -> 2.48.3) libyui-qt-pkg (2.45.11 -> 2.45.12) llvm3_8 open-vm-tools (10.0.7 -> 10.1.0) perl-Date-Manip (6.56 -> 6.57) virtualbox yast2 (3.2.6 -> 3.2.7) yast2-bootloader (3.2.10 -> 3.2.11) yast2-country (3.2.2 -> 3.2.3) yast2-network (3.2.11 -> 3.2.15) yast2-packager (3.2.9 -> 3.2.10) yast2-users (3.2.4 -> 3.2.6) === Details === ==== MozillaFirefox ==== Version update (50.0 -> 50.0.2) Subpackages: MozillaFirefox-translations-common - update to Firefox 50.0.2 * Firefox crashes with 3rd party Chinese IME when using IME text (50.0.1) security fixes (in 50.0.1): (boo#1012807) * MFSA 2016-91 CVE-2016-9078: data: URL can inherit wrong origin after an HTTP redirect (bmo#1317641) security fixes (in 50.0.2) (boo#1012964) * MFSA 2016-92 CVE-2016-9079: Use-after-free in SVG Animation (bmo#1321066) ==== autoyast2 ==== Version update (3.2.3 -> 3.2.4) Subpackages: autoyast2-installation - Fix building on s390x (bsc#1011489) - 3.2.4 ==== binutils ==== Subpackages: binutils-devel - Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch from upstream to fix an assembler problem with clang on ARM. Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648 - Update binutils-2.27-branch.diff to include recent fixes from the branch. - Add binutils-2.27-fix-section-order.diff to restore monotonically increasing section offsets. - Remove qemu workaround from spec file, since qemu 2.5.0rc0 the length of the argument list is no longer limited to 128 kByte. ==== cmake ==== Version update (3.7.0 -> 3.7.1) - update to CMake 3.7.1 * FindBISON: Do not rebuild every time when not VERBOSE * libarchive: Add headers to adapt between OpenSSL 1.1 and older versions * libarchive: Add support for building with OpenSSL 1.1 * server-mode: Prevent possible crash when watching directories * server-mode: Reset GlobalGenerator before configure full changelog: https://blog.kitware.com/cmake-3-7-1-available-for-download/ ==== doxygen ==== - Fix: Add missing jquery.js, dynsections.js & optional svgpan.js to QCH file [bsc#1011331] + doxygen-fix-QCH-files.patch ==== emacs ==== Version update (24.5 -> 25.1) Subpackages: emacs-info emacs-nox emacs-x11 etags - Avoid address space randomization during emacs build - Check for active Execution Shield as this breaks emacs - Diable experimental cairo support as it cause trouble with spacemacs as well as with the w3 mode - Update to emacs version 25.1 * Next major release * Xwidgets: a new feature for embedding native widgets inside Emacs buffers. * Emacs can now load shared/dynamic libraries (modules). * Network security (TLS/SSL certificate validity and the like) * 'C-h l' now also lists the commands that were run. * New option 'switch-to-buffer-in-dedicated-window' * The option 'even-window-heights' has been renamed to 'even-window-sizes' * 'terpri' gets an optional arg ENSURE to conditionally output a newline. * 'insert-register' now leaves point after the inserted text * The new variable 'term-file-aliases' replaces some files from lisp/term. * New variable 'system-configuration-features', listing some of the main features that Emacs was compiled with. * A password is now hidden also when typed in batch mode. * The Emacs pseudo-random number generator can be securely seeded. * New input methods: 'tamil-dvorak', 'programmer-dvorak' and 'probhat'. * 'M-x' suggests shorthands and ignores obsolete commands for completion. * Changes in undo * New command 'comment-line' bound to 'C-x C-;'. * New and improved facilities for inserting Unicode characters * New minor mode 'global-eldoc-mode' is enabled by default. * Emacs now uses "bracketed paste mode" on text terminals that support it. * Emacs now supports the latest version of the UBA. * You can access 'mouse-buffer-menu' ('C-down-mouse-1') using 'C-f10'. * New buffer-local 'electric-pair-local-mode'. * New variable 'fast-but-imprecise-scrolling' inhibits fontification during full screen scrolling operations. * New documentation command 'describe-symbol'. * New function 'custom-prompt-customize-unsaved-options' checks for unsaved customizations and prompts user to customize (if found). * The old 'C-x w' bindings in 'hi-lock-mode' are officially deprecated * New function 'bookmark-set-no-overwrite' bound to 'C-x r M'. * Many other details, see /usr/share/emacs/25.1/etc/NEWS - Patch emacs-24.4.dif renamed to emacs-25.1.dif - Patches removed as now upstream or fixed otherwise debbugs16737.patch emacs-24-0010-ELF-unexec-Correct-section-header-index.patch emacs-24-0011-ELF-unexec-Tidy-code.patch emacs-24-0012-ELF-unexec-Merge-Alpha-and-MIPS-COFF-debug-handling.patch emacs-24-0013-ELF-unexec-Symbol-table-patching.patch emacs-24-0014-ELF-unexec-_OBJC_-symbols-in-bss-sections.patch emacs-24-0015-ELF-unexec-R_-_NONE-relocs.patch emacs-24-0016-ELF-unexec-Drive-from-PT_LOAD-header-rather-than-sec.patch emacs-24-0017-ELF-unexec-Don-t-insert-a-new-section.patch emacs-24-0018-src-unexelf.c-NEW_PROGRAM_H-Remove-unused-macro-Bug-.patch emacs-24-0019-ELF-unexec-align-section-header.patch emacs-24-fix-missing-gtk-icons.patch emacs-24.4-bzr118021.patch emacs24-primarysel2.patch gmalloc.patch - Patches forwarded to 25.1 emacs-24.1-ps-mule.patch emacs-24.3-asian-print.patch emacs-24.3-iconic.patch emacs-24.3-x11r7.patch emacs-24.4-flyspell.patch emacs-24.4-glibc.patch emacs-24.4-nonvoid.patch emacs-24.4-ps-bdf.patch emacs-24.4-xim.patch ==== fcitx-qt5 ==== Version update (1.0.5 -> 1.0.6) - update version 1.0.6 * [qt5]fix inconsistency between qstring and ucs4 string when handle surrounding * [qt5]fromUcs4 expect a null terminated string by default, give it a size * [qt5]use new connection syntax * [qt5]use more nullptr * [qt5]remove usage of QPointer in icdata * [qt5]don't crash if window->screen() is null ==== file ==== Subpackages: file-devel file-magic libmagic1 libmagic1-32bit - Modify patch file-5.29.dif that is replace colon with dot in offset (boo#1012779) ==== libyui-ncurses-pkg ==== Version update (2.48.2 -> 2.48.3) - Made menu hotkey unique for QA (bsc#1012604) - 2.48.3 ==== libyui-qt-pkg ==== Version update (2.45.11 -> 2.45.12) - Sort pkg list case-insensitively (bsc#1012294) - 2.45.12 ==== llvm3_8 ==== Subpackages: libLLVM3_8 libLLVM3_8-32bit - Disable building of libc++ and python-clang. These are provided by llvm 3.9 now. - Supplement emacs & vim instead of require them. ==== open-vm-tools ==== Version update (10.0.7 -> 10.1.0) Subpackages: libvmtools0 open-vm-tools-desktop - Remove building KMP modules. No longer needed or wanted for current releases. User space tool vmhgfs-fuse has replaced the need for vmhgfs kernel module. - Updated to 10.1.0 stable release (boo#1011057) + vmware-namespace-cmd command line utility. + gtk3 support + Common Agent Framework (CAF) + guest authentication with xmlsec1 + FreeBSD support + sub-command to push updated network information to the host on demand + udev rules for configuring SCSI timeouts in the guest + fixes for Ubuntu 16.10 + Fix for quiesced snapshot failure leaving guest file system quiesced + Fix for CVE-2015-5191 (bsc#1007600) - Dropped upstream patches included (or not necessary) in 10.1.0: + vmw-bitmask-gcc6.patch + no-unused-const.patch + enable-gcc46+.patch - Add udev rule to increase VMware virtual disk timeout values (bsc#994598) [99-vmware-scsi-udev.rules] ==== perl-Date-Manip ==== Version update (6.56 -> 6.57) - updated to 6.57 see /usr/share/doc/packages/perl-Date-Manip/Changes ==== virtualbox ==== Subpackages: virtualbox-guest-kmp-default virtualbox-guest-tools virtualbox-guest-x11 - Add patch file "vbox_hidpi_support.patch" to add support for HiDPI in the management frontend. (This does not fix rendering in guest windows) ==== yast2 ==== Version update (3.2.6 -> 3.2.7) - Enhanced PackagesProposal API to handle required and optional resolvables separately (bsc#885496) - 3.2.7 ==== yast2-bootloader ==== Version update (3.2.10 -> 3.2.11) - Recommends syslinux as it is often used by generic_mbr, but it is not hard requirement (bsc#1004229) - 3.2.11 ==== yast2-country ==== Version update (3.2.2 -> 3.2.3) Subpackages: yast2-country-data - Keyboard: Chinese and Taiwanese are using US keyboard layout for a default. That's why e.g. Chinese will be shown for keyboard settings although US will be taken. So we have to set the connection manually (like we have already for DK an DE). (bnc#1009914) - 3.2.3 ==== yast2-network ==== Version update (3.2.11 -> 3.2.15) - Linuxrc does not export some variables anymore and handles the configuration of network directly, for that reason, some methods or reponsibilities of InstallInfConvertor class are not needed being removed. - bnc#1012764 - made rpm architecture independent (noarch) - 3.2.15 - bnc#1012581 - do not crash with internal error stating undefined method when switching to "Hostname / DNS" tab when the system contains incorrect configuration of DHCLIENT_SET_HOSTNAME - 3.2.14 - bnc#1009931 - update item's overview with freshly edited values - 3.2.13 - bsc#984890 - new implementation of setting hostname via DHCP. User is allowed to set hostname via particular interface or set a reasonable default value for all interfaces. - bsc#1007172 (kanderssen(a)suse.com) - When an interface is enslaved in a bond the udev rule is modified using the bus_id instead of the mac address but some multiport cards could use the same bus_id. In such cases also the dev_port is needed. Taking this in account the dev_port will be added always when a udev rule based on bus_id is written. - 3.2.12 ==== yast2-packager ==== Version update (3.2.9 -> 3.2.10) - Mark the selected default patterns as optional so the user can change them without blocking the installation later (fixes openQA tests) (related to bsc#885496) - 3.2.10 ==== yast2-users ==== Version update (3.2.4 -> 3.2.6) - Set the focus to the first password field to keep the same behavior as before the last change. (for FATE#321754) - 3.2.6 - prepare reusable widget for setting root password (needed for FATE#321754) - 3.2.5 -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

1 0

[opensuse-factory] TW 20161201 radeon won't load for AGP rv250 FireGL
by Felix Miata 04 Dec '16

04 Dec '16

EE lines from log: [ 298.172] Current Operating System: Linux a-865 4.2.3-1-pae #1 SMP PREEMPT Mon Oct 12 11:32:29 UTC 2015 (202286f) i686 (WW) warning, (EE) error, (NI) not implemented, (??) unknown. [ 298.182] (EE) Failed to load module "fglrx" (module does not exist, 0) [ 298.197] (EE) open /dev/dri/card0: No such file or directory [ 298.197] (EE) open /dev/dri/card0: No such file or directory [ 298.198] (EE) open /dev/fb0: No such file or directory [ 298.198] (EE) open /dev/fb0: No such file or directory [ 298.198] (EE) Screen 0 deleted because of no matching config section. [ 298.198] (EE) Screen 0 deleted because of no matching config section. [ 298.198] (EE) Screen 0 deleted because of no matching config section. [ 310.160] (EE) AIGLX: reverting to software rendering Full log: http://fm.no-ip.com/Tmp/Linux/Xorg/xorg.0.log-rv250-firegl-vesa1280x1024 Can anyone explain why? 1-radeon isn't working 2-why /dev/dri/card0 is missing 3-why /dev/fb0 is missing -- "The wise are known for their understanding, and pleasant words are persuasive." Proverbs 16:21 (New Living Translation) Team OS/2 ** Reg. Linux User #211409 ** a11y rocks! Felix Miata *** http://fm.no-ip.com/ -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

3 7

[opensuse-factory] Leap 42.2 - plasmashell freezing
by mh＠mike.franken.de 04 Dec '16

04 Dec '16

Hi *, on one of my machines (Lenovo T420 notebook) I have a problem with plasmashell freezing often when a notification is shown. The notification frame shows up, but no content and then the complete desktop freezes. Killing and restarting plasmashell cures the problem for a short time - til one of the the next notifications wants to display something. It doesn't happen for all notifications, though. Using tools like notify-send the problem can not be reproduced, but notifications stemming from plasma-nm and plasma-workspace itself (like the one for a removed plasmoid) always lead to the freeze. The system originally was openSuSE Leap 42.2, but because of the problem I upgraded step by step to - the latest kernel from the kernel stable repo, - the latest X server plus everyting from the X11:Xorg repo - and the latest plasma workspace including everything from the KDE:Framework5 repo. The problem remained unchanged, though. A few more facts: - The X server is xf86-video-intel. - Switching off the compositor doesn't help either. - Everything worked with Leap 42.1 - No according entry in the journal or .xsession-errors* can be found. - And a curiosity: After removing .config/plasmarc and restarting plasmashell the problem vanishes for a few hours or even a day, before it comes back. - Logging off or restarting the machine doesn't help in case the problems exists at that time. In found a few bug reports for plasma freezes, but none of them seems to fit exactly. Is this a known problem? Can I debug it and if so, how? TIA. Bye. Michael. -- Michael Hirmke -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

9 16

[opensuse-factory] New Tumbleweed snapshot 20161202 released!
by Dominique Leuenberger 04 Dec '16

04 Dec '16

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… When you reply to report some issues, make sure to change the subject. It is not helpful to keep the release announcement subject in a thread while discussing a specific problem. Packages changed: Mesa (13.0.1 -> 13.0.2) amarok ffmpeg (3.2 -> 3.2.1) git (2.10.2 -> 2.11.0) irqbalance ispell k3b libteam (1.22 -> 1.26) libuv (1.10.0 -> 1.10.1) libvorbis lxpanel obs-service-tar_scm (0.6.1.1473925745.c5264bb -> 0.7.0.1480000004.4027270) openSUSE-build-key perl-Class-Inspector (1.28 -> 1.31) postfix python-simplejson (3.6.5 -> 3.8.2) python3-setuptools (28.8.0 -> 29.0.1) python3-smbc (1.0.15.5 -> 1.0.15.6) spice-vdagent (0.16.0 -> 0.17.0) subversion (1.9.4 -> 1.9.5) tcsh (6.19.00 -> 6.20.00) texlive-specs-m (2016.111.svn40218 -> 2016.112.svn40218) texlive-specs-n (2016.111.2.004svn28119 -> 2016.112.2.004svn28119) tiff (4.0.6 -> 4.0.7) w3m (0.5.3 -> 0.5.3.git20161120) xf86-video-chips xf86-video-glint xf86-video-mga xf86-video-savage xf86-video-siliconmotion xf86-video-sisusb xf86-video-tdfx xf86-video-trident === Details === ==== Mesa ==== Version update (13.0.1 -> 13.0.2) Subpackages: Mesa-32bit Mesa-dri-devel Mesa-dri-nouveau Mesa-libEGL-devel Mesa-libEGL1 Mesa-libEGL1-32bit Mesa-libGL-devel Mesa-libGL1 Mesa-libGL1-32bit Mesa-libGLESv2-2 Mesa-libglapi0 Mesa-libglapi0-32bit Mesa-libva libOSMesa9 libOSMesa9-32bit libgbm1 libgbm1-32bit libvdpau_nouveau libvdpau_r300 libvdpau_r600 libvdpau_radeonsi libvulkan_intel libwayland-egl1 libxatracker2 - update to 13.0.2 * fdo#97321 Query INFO_LOG_LENGTH for empty info log should return 0 * fdo#97420 "#version 0" crashes glsl_compiler * i965: Add some APL and KBL SKU strings * i965: Reorder PCI ID list to match release order * i965/glk: Add basic Geminilake support * wsi: fix VK_INCOMPLETE for vkGetSwapchainImagesKHR * ac/nir/llvm: fix channel in texture gather lowering code. * vulkan/wsi/x11: handle timeouts properly in next image acquire (v1.1) * vulkan/wsi: store present mode in swapchain base class * vulkan/wsi/x11: add support for IMMEDIATE present mode * vulkan/wsi/x11: Fix behavior of vkGetPhysicalDeviceSurfaceFormatsKHR * vulkan/wsi/x11: Fix behavior of vkGetPhysicalDeviceSurfacePresentModesKHR * cherry-ignore: add reverted LLVM_LIBDIR patch * anv: fix enumeration of properties * vc4: Don't abort when a shader compile fails. * vc4: Clamp the shadow comparison value. * vc4: Fix register class handling of DDX/DDY arguments. * util/disk_cache: close a previously opened handle in disk_cache_put (v2) * anv: Fix unintentional integer overflow in anv_CreateDmaBufImageINTEL * anv/format: handle unsupported formats properly * glcpp: Handle '#version 0' and other invalid values * glsl: Parse 0 as a preprocessor INTCONSTANT * anv/gen8: Stall when needed in Cmd(Set|Reset)Event * anv/wsi: Set the fence to signaled in AcquireNextImageKHR * anv: Rework fences * vulkan/wsi/wayland: Include pthread.h * vulkan/wsi/wayland: Clean up some error handling paths * vulkan/wsi: Report the correct min/maxImageCount * i965/gs: Allow primitive id to be a system value * anv: Handle null in all destructors * anv/fence: Handle ANV_FENCE_CREATE_SIGNALED_BIT * nir/spirv: Fix handling of gl_PrimitiveId * anv/blorp: Ignore clears for attachments first used as resolve destinations * anv: Implement a depth stall restriction on gen7 * anv/cmd_buffer: Handle running out of binding tables in compute shaders * anv/cmd_buffer: Emit a CS stall before setting a CS pipeline * vulkan/wsi/x11: Implement FIFO mode. * isl: Fix height calculation in isl_msaa_interleaved_scale_px_to_sa * i965/hsw: Set integer mode in sampling state for stencil texturing * intel: Set min_ds_entries on Broxton. * i965: Fix compute shader crash. * mesa: Drop PATH_MAX usage. * i965: Fix GS push inputs with enhanced layouts. * vulkan/wsi: Add a thread-safe queue implementation * anv: fix multi level clears with VK_REMAINING_MIP_LEVELS * gbm: request correct version of the DRI2_FENCE extension * radeonsi: store group_size_variable in struct si_compute * glsl/lower_output_reads: fix geometry shader output handling with conditional emit * Fix races during _mesa_HashWalk(). * mesa: fix empty program log length - baselibs.conf: enabled build of 32bit Mesa-dri-nouveau package, e.g. required for Steam (bnc#1011156) ==== amarok ==== - Expand macro kde4_runtime_requires only when its available to fix quilt setup ==== ffmpeg ==== Version update (3.2 -> 3.2.1) Subpackages: libavcodec57 libavformat57 libavutil55 libswresample2 libswscale4 - Update to version 3.2.1: * avcodec/aac_adtstoasc_bsf: validate and forward extradata if the stream is already ASC * libopusdec: default to stereo for invalid number of channels * sbgdec: prevent NULL pointer access * rmdec: validate block alignment * smacker: limit recursion depth of smacker_decode_bigtree * mxfdec: fix NULL pointer dereference in mxf_read_packet_old * ffmdec: validate codec parameters * avformat/mpeg: Adjust vid probe threshold to correct mis-detection * avcodec/avpacket: fix leak on realloc in av_packet_add_side_data() * avformat/apngenc: use the stream parameters extradata if available * ffprobe: fix crash in case -of is specified with an empty string * exr: fix out-of-bounds read * libschroedingerdec: fix leaking of framewithpts * filmstripdec: correctly check image dimensions * icodec: fix leaking pkt on error * dvbsubdec: fix division by zero in compute_default_clut * escape124: reject codebook size 0 * mpegts: prevent division by zero * matroskadec: fix NULL pointer dereference in webm_dash_manifest_read_header * mxfdec: fix NULL pointer dereference * avcodec/mpeg4videodec: Workaround interlaced mpeg4 edge MC bug * avcodec/mpegvideo: Fix edge emu buffer overlap with interlaced mpeg4 * avcodec/ituh263dec: Avoid spending a long time in slice sync * avcodec: Check side data size before use * avformat/flvdec: Fix regression losing streams ==== git ==== Version update (2.10.2 -> 2.11.0) Subpackages: git-core git-cvs git-daemon git-email git-gui git-svn git-web gitk - git 2.11.0: * backward compatibility: + empty string (matching everything) used as pathspec now triggers a warning + historical argument order "git merge <msg> HEAD <commit>..." is deprecated + default abbreviation length of 7 now scales by repo size * updates + new version of git-gui + many new command line and configuration options + many workflow and output improvements * dropped upstreamed patches: + git-setup-i18n-fix.patch + git-tclIndex.patch ==== irqbalance ==== - Set-fd-limit.patch: Increase limit on file descriptors (bsc#998399) (fate#321645) ==== ispell ==== Subpackages: ispell-american ispell-british - Extend patch boo966124.dif for bug boo#1010330 ==== k3b ==== - Obsolete k3b-codecs, the additional codecs are part of the main package now - Restore conditionals for lame and libmad - Expand macro kde4_runtime_requires only when its available to fix quilt setup ==== libteam ==== Version update (1.22 -> 1.26) - Update to new upstream release 1.26 * dbus: don't do <deny send_interface="..." /> in template dbus s. f. * teamd: do correct l3/l4 tx hashing with vlans * teamd: lacp: use original hwaddr as source address in lacpdus * libteam: fix TEAM_OPTION_TYPE_BOOL type for big-endian architectures * teamd: handle vlan 0 packets * misc: fix an out-of-bound write with zero-length hardware address * teamd: fix the issue that network blocks when issuing `systemctl stop teamd` * teamd: lacp: Do not unselect port if it changes state to "expired" ==== libuv ==== Version update (1.10.0 -> 1.10.1) - Update to 1.10.1 * win: fix anonymous union syntax * unix: use uv__is_closing everywhere * win: add missing break statement * doc: fix wrong man page link for uv_fs_lstat() * win, tty: handle empty buffer in uv_tty_write_bufs * doc: add cjihrig alternative GPG ID * Revert "win,tty: add support for ANSI codes in win10 v1511" - Add signature and keyring for GPG source verification ==== libvorbis ==== Subpackages: libvorbis-devel libvorbis0 libvorbis0-32bit libvorbisenc2 libvorbisenc2-32bit libvorbisfile3 libvorbisfile3-32bit - Added 32bit libvorbis-devel in baselibs.conf ==== lxpanel ==== Subpackages: liblxpanel0 lxpanel-lang - Reword description. ==== obs-service-tar_scm ==== Version update (0.6.1.1473925745.c5264bb -> 0.7.0.1480000004.4027270) - Update to version 0.7.0.1480000004.4027270: * fixed pip8 problems * keep checkout while running with osc - Update to version 0.7.0.1478249268.e162c66: * prevent key errors when $HOME is not set - Update to version 0.7.0.1477858520.51a62fb: * added locking for cachedir in jailed mode * removed setup_tracking_branches and '--dissociate' * inital version of TarSCM classes * scm_object generation moved to singletask * FETCH_UPSTREAM_COMMANDS into classes * moved update_cache_* to classes * moved detect_version into classes and refactored calls of get_timestamp_* * moved get_timestamp functions into scm classes * git_ref_exists -> TarSCM.git._ref_exists * fetch_upstream_git_submodules -> fetch_submodules to get rid of exceptions for git * just moved some functions for better overview * refactor of detect_changes into classes * url as attribute of TarSCM.scm * run_cmd and safe_run moved into class helpers * combine os.path.join statement * refactoring fetch_upstream to be part of TarSCM.scm * new classes for archives * common method 'get_current_commit' to get rid of execption for git * refactored detect_changes to get rid of changesgenerate exception * get_repocachedir -> TarSCM.scm * revision, repodir and repocachedir as attribute for TarSCM.<scm> * new class TarSCM.cli to make testing easier * testing script name more reliable * fixed arguments for singletask in case of snapcraft * refactored snapcraft code + first tests for snapcraft * added testcase for snapcraft finalize * split classes into serveral files * more testing for TarSCM.tasks * clone_dir/repodir/arch_dir(tar_dir) now attributes of scm objects * test case for save_run * major refactor of git cache handling * consolidation of archive.obscpio and archive.tar parameters * next test cases * sytnax fix for "tar" service * fixed tests for tar * unset CACHEDIRECTORY env variable in unit tests * update atime/mtime of repocachedir if already exists - Update to version 0.7.0.1474270818.3e05f80: * - Update to version 0.7.0.1477567374.d44d677: * use '--dissociate' for git if package-meta is set * added locking for cachedir in jailed mode * removed setup_tracking_branches and '--dissociate' * inital version of TarSCM classes * scm_object generation moved to singletask * FETCH_UPSTREAM_COMMANDS into classes * moved update_cache_* to classes * moved detect_version into classes and refactored calls of get_timestamp_* * moved get_timestamp functions into scm classes * git_ref_exists -> TarSCM.git._ref_exists * fetch_upstream_git_submodules -> fetch_submodules to get rid of exceptions for git * just moved some functions for better overview * refactor of detect_changes into classes * url as attribute of TarSCM.scm * run_cmd and safe_run moved into class helpers * combine os.path.join statement * refactoring fetch_upstream to be part of TarSCM.scm * new classes for archives * common method 'get_current_commit' to get rid of execption for git * refactored detect_changes to get rid of changesgenerate exception * get_repocachedir -> TarSCM.scm * revision, repodir and repocachedir as attribute for TarSCM.<scm> * new class TarSCM.cli to make testing easier * testing script name more reliable * fixed arguments for singletask in case of snapcraft * refactored snapcraft code + first tests for snapcraft * added testcase for snapcraft finalize * split classes into serveral files * more testing for TarSCM.tasks * clone_dir/repodir/arch_dir(tar_dir) now attributes of scm objects * test case for save_run * major refactor of git cache handling * consolidation of archive.obscpio and archive.tar parameters * next test cases * sytnax fix for "tar" service - Update to version 0.7.0.1476904507.e88eed1: * fixed arguments for singletask in case of snapcraft * refactored snapcraft code + first tests for snapcraft * added testcase for snapcraft finalize * split classes into serveral files * more testing for TarSCM.tasks * clone_dir/repodir/arch_dir(tar_dir) now attributes of scm objects * test case for save_run * major refactor of git cache handling * consolidation of archive.obscpio and archive.tar parameters * next test cases ==== openSUSE-build-key ==== - modify dumpsigs to deal with fingerprint lines in gpg output ==== perl-Class-Inspector ==== Version update (1.28 -> 1.31) - updated to 1.31 see /usr/share/doc/packages/perl-Class-Inspector/Changes 1.31 2016-11-25 09:33:47 -0500 - Migrated from Module::Install to Dist::Zilla and ExtUtils::MakeMaker - Fixed meta for repository which was pointing to the wrong URL - updated to 1.30 see /usr/share/doc/packages/perl-Class-Inspector/Changes 1.30 23 Nov 2016 - Moving to prod release 1.29_02 23 Nov 2016 - Update metadata to point to github repository. Plus some other minor dist meta tweaks. - Note: planning on doing a migration from Module::Install to ExtUtils::MakeMaker shortly AFTER the next production release. 1.29_01 22 Nov 2016 - Fix Makefile.PL to work with Perls without '.' in @INC - Fix for the installed method when used with a PAR archive (rt#42846) - Minor documentation fixes (grammar, spelling: rt#74481, rt#85356) ==== postfix ==== Subpackages: postfix-doc - improve config.postfix * improve SASL stuff * add POSTFIX_SMTP_AUTH_SERVICE=(cyrus|dovecot) - improve config.postfix * improve with MySQL stuff - update vda patch to latest available * remove postfix-vda-v13-3.10.0.patch * add postfix-vda-v14-3.0.3.patch - rebase patches (and to be p0) * pointer_to_literals.patch * postfix-main.cf.patch * postfix-master.cf.patch * postfix-no-md5.patch * postfix-ssl-release-buffers.patch - add /etc/postfix/ssl as default DIR for SSL stuff * cacerts -> ../../ssl/certs/ * certs/ - revert POSTFIX_SSL_PATH from '/etc/ssl' to '/etc/postfix/ssl' - improve config.postfix * revert smtpd_tls_CApath to POSTFIX_SSL_PATH/cacerts which is a symlink to /etc/ssl/certs Without reverting, 'gen_CA' would create files which would then be on the previous defined 'sslpath(/etc/ssl)/certs' (smtpd_tls_CApath) Cert reqs would be placed in 'sslpath(/etc/ssl)/certs/postfixreq.pem' which is not a good idea. * mkchroot: sync '/etc/postfix/ssl' to chroot * improve PCONF for smtp{,d}_tls_{cert,key}_file, adding/removing from main.cf, show warning if enabled and file is missing ==== python-simplejson ==== Version update (3.6.5 -> 3.8.2) - update to 3.8.2: * Fix implicit cast compiler warning in _speedups.c * simplejson is now available as wheels for OS X and Windows thanks to Travis-CI and AppVeyor respectively! Many thanks to @aebrahim for getting this party started. * Fix issue with iterable_as_array and indent option * Fix typo in keyword argument name introduced in 3.8.0 * New iterable_as_array encoder option to perform lazy serialization of any iterable objects, without having to convert to tuple or list. * Fix typo introduced in 3.7.0 (behavior should be indistinguishable) https://github.com/simplejson/simplejson/commit/e18cc09b688ea1f3305c27616fd… * Do not cache Decimal class in encoder, only reference the decimal module. This may make reload work in more common scenarios. * Fix compilation with MSVC https://github.com/simplejson/simplejson/pull/119 * simplejson no longer trusts custom str/repr methods for int, long, float subclasses. These instances are now formatted as if they were exact instances of those types. https://github.com/simplejson/simplejson/issues/118 ==== python3-setuptools ==== Version update (28.8.0 -> 29.0.1) - update to version 29.0.1: * #861: Re-release of v29.0.1 with the executable script launchers bundled. Now, launchers are included by default and users that want to disable this behavior must set the environment variable 'SETUPTOOLS_INSTALL_WINDOWS_SPECIFIC_FILES' to a false value like "false" or "0". - update to version 29.0.0: * #841: Drop special exception for packages invoking win32com during the build/install process. See Distribute #118 for history. ==== python3-smbc ==== Version update (1.0.15.5 -> 1.0.15.6) - update to version 1.0.15.6: (no changelog available) ==== spice-vdagent ==== Version update (0.16.0 -> 0.17.0) - Add pkgconfig(glib-2.0) BuildRequires: Explicit dependency. - Handle spice-vdagentd.target in pre/post/preun/postun. - Handle spice-vdagentd.conf in post via tmpfiles_create macro. - Update to 0.17.0 * Denies file-transfer in locked sessions * Denies file-transfer in login screen * Bump glib version to 2.28 * Set exit code to 1 instead of 0 when virtio device cannot be opened * Fix double-free on uinput->screen_info (rhbz#1262635) * Code improvement over unix domain client server support (udcs) * Fix build compatiblity with different libsystemd versions (fdo#94209) - obsoleted patches removed: 8c465007-vdagentd-fixes-small-leak.patch f97751fa-revert-uinput-fix-small-leak-of-screen_info.patch - package: add explicit buildrequires for pkgconfig(dbus-1) ==== subversion ==== Version update (1.9.4 -> 1.9.5) Subpackages: libsvn_auth_gnome_keyring-1-0 libsvn_auth_kwallet-1-0 subversion-bash-completion subversion-devel subversion-perl subversion-python subversion-server subversion-tools - Version update to 1.9.5: * bsc#1011552 CVE-2016-8734 Unrestricted XML entity expansion in mod_dontdothat and Subversion clients using http(s):// - Client-side bugfixes: * fix accessing non-existent paths during reintegrate merge (r1766699 et al) * fix handling of newly secured subdirectories in working copy (r1724448) * info: remove trailing whitespace in --show-item=revision (issue #4660) * fix recording wrong revisions for tree conflicts (r1734106) * gpg-agent: improve discovery of gpg-agent sockets (r1766327) * gpg-agent: fix file descriptor leak (r1766323) * resolve: fix --accept=mine-full for binary files (issue #4647) * merge: fix possible crash (issue #4652) * resolve: fix possible crash (r1748514) * fix potential crash in Win32 crash reporter (r1663253 et al) - Server-side bugfixes: * fsfs: fix "offset too large" error during pack (issue #4657) * svnserve: enable hook script environments (r1769152) * fsfs: fix possible data reconstruction error (issue #4658) * fix source of spurious 'incoming edit' tree conflicts (r1770108) * fsfs: improve caching for large directories (r1721285) * fsfs: fix crash when encountering all-zero checksums (r1759686) * fsfs: fix potential source of repository corruptions (r1756266) * mod_dav_svn: fix excessive memory usage with mod_headers/mod_deflate (issue #3084) * mod_dav_svn: reduce memory usage during GET requests (r1757529 et al) * fsfs: fix unexpected "database is locked" errors (r1741096 et al) * fsfs: fix opening old repositories without db/format files (r1720015) - Client-side and server-side bugfixes: * fix possible crash when reading invalid configuration files (r1715777) - Bindings bugfixes: * swig-pl: do not corrupt "{DATE}" revision variable (r1767768) * javahl: fix temporary accepting SSL server certificates (r1764851) * swig-pl: fix possible stack corruption (r1683266, r1683267) - Drop no longer needed patch: * subversion-1.8.11-swig-py-comment-3.patch ==== tcsh ==== Version update (6.19.00 -> 6.20.00) Subpackages: tcsh-lang - Add patch tcsh-6.20-rmstar.patch from mailing list to restore the correct behaviour of `rm *' if rmstar is set - Update to tcsh bug fix version V6.20.00 - 20161124 * Don't resize the screen if it did not change size. * restore file description when cleaning up after eval: repeat 99 time * PR/572: Fix $SHLVL issue when exec'ing subshells. * PR/403: Fix backquote expansion for multi-byte character sets. * Fix drawing issu with multi-line prompt (Kensuke Iwahashi/David Kaspar) * always send prusage to stdout. * PR/526: Fix double \\ printing from previous fix in history expansion. * Android updates from Corinna Vinschen * PR/526: Quote backslashes properly so they can be preserved in `` expansions * Fix memory leak for paraml * Add notempty and ask values for the noclobber setting (Martin Tournoij) * more correct $wordchars for vimode (Luke Mewburn) * expose VImode in $vimode (Luke Mewburn) * display what the compiled in editor is in bindkey -d (Luke Mewburn) * run-fg-editor improvements and documentation (Luke Mewburn) * Fix parsing of 'if (cond)then' (Fridolin Pokorny) * PR/437: Fix handling of invalid unicode characters. * PR/451: Fix error messages containing %c to be always '%c' - Rename patch tcsh-6.18.03.dif which becomes tcsh-6.20.00.dif now - Drop patch union-wait.patch as now upstream - Modify patches tcsh-6.15.00-pipe.dif tcsh-6.17.06-dspmbyte.dif tcsh-6.18.03-colorls.dif tcsh-6.18.03-history-file-locking.patch tcsh-6.19.00-history-file-locking-order.patch - Add patch tcsh-6.19.00-history-file-locking-order.patch Make a copy of the file descriptor of the history file to be able not only to lock but also unlock this file (bsc#992577) ==== texlive-specs-m ==== Version update (2016.111.svn40218 -> 2016.112.svn40218) - Fix language code: pt-br --> pt_BR and es-ve --> es_VE ==== texlive-specs-n ==== Version update (2016.111.2.004svn28119 -> 2016.112.2.004svn28119) - Fix language code: pt-br --> pt_BR and es-ve --> es_VE ==== tiff ==== Version update (4.0.6 -> 4.0.7) Subpackages: libtiff-devel libtiff5 libtiff5-32bit - Upgrade to upstream release 4.0.7 * libtiff/tif_aux.c + Fix crash in TIFFVGetFieldDefaulted() when requesting Predictor tag and that the zip/lzw codec is not configured. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2591 * libtiff/tif_compress.c + Make TIFFNoDecode() return 0 to indicate an error and make upper level read routines treat it accordingly. (linked to the test case of http://bugzilla.maptools.org/show_bug.cgi?id=2517) * libtiff/tif_dir.c + Discard values of SMinSampleValue and SMaxSampleValue when they have been read and the value of SamplesPerPixel is changed afterwards (like when reading a OJPEG compressed image with a missing SamplesPerPixel tag, and whose photometric is RGB or YCbCr, forcing SamplesPerPixel being 3). Otherwise when rewriting the directory (for example with tiffset, we will expect 3 values whereas the array had been allocated with just one), thus causing a out of bound read access. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2500 (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658, bsc#974840) * libtiff/tif_dirread.c + In TIFFFetchNormalTag(), do not dereference NULL pointer when values of tags with TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII access are 0-byte arrays. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2593 (regression introduced by previous fix done on 2016-11-11 for CVE-2016-9297, bsc#1010161). Assigned as CVE-2016-9448, bsc#1011103 + In TIFFFetchNormalTag(), make sure that values of tags with TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII access are null terminated, to avoid potential read outside buffer in _TIFFPrintField(). Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2590 (CVE-2016-9297, bsc#1010161) + Initialize doubledata at line 3693 to NULL to please MSVC 2013 + Prevent reading ColorMap or TransferFunction if BitsPerPixel > 24, so as to avoid huge memory allocation and file read attempts + Reject images with OJPEG compression that have no TileOffsets/StripOffsets tag, when OJPEG compression is disabled. Prevent null pointer dereference in TIFFReadRawStrip1() and other functions that expect td_stripbytecount to be non NULL. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2585 + When compiled with DEFER_STRILE_LOAD, fix regression, when reading a one-strip file without a StripByteCounts tag. + Workaround false positive warning of Clang Static Analyzer about null pointer dereference in TIFFCheckDirOffset(). * libtiff/tif_dirwrite.c + Avoid null pointer dereference on td_stripoffset when writing directory, if FIELD_STRIPOFFSETS was artificially set for a hack case in OJPEG case. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2500 (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658, bsc#974840) + Fix truncation to 32 bit of file offsets in TIFFLinkDirectory() and TIFFWriteDirectorySec() when aligning directory offsets on an even offset (affects BigTIFF). * libtiff/tif_dumpmode.c + DumpModeEncode() should return 0 in case of failure so that the above mentionned functions detect the error. * libtiff/tif_fax3.c + remove dead assignment in Fax3PutEOLgdal(). * libtiff/tif_fax3.h + make Param member of TIFFFaxTabEnt structure a uint16 to reduce size of the binary. * libtiff/tif_getimage.c + Fix out-of-bound reads in TIFFRGBAImage interface in case of unsupported values of SamplesPerPixel/ExtraSamples for LogLUV/CIELab. Add explicit call to TIFFRGBAImageOK() in TIFFRGBAImageBegin(). Fix CVE-2015-8665 and CVE-2015-8683. + Fix some benign warnings which appear in 64-bit compilation under Microsoft Visual Studio of the form "Arithmetic overflow: 32-bit value is shifted, then cast to 64-bit value. Results might not be an expected value." + TIFFRGBAImageOK: Reject attempts to read floating point images. * libtiff/tif_luv.c + Fix potential out-of-bound writes in decode functions in non debug builds by replacing assert()s by regular if checks (http://bugzilla.maptools.org/show_bug.cgi?id=2522) Fix potential out-of-bound reads in case of short input data. + Validate that for COMPRESSION_SGILOG and PHOTOMETRIC_LOGL, there is only one sample per pixel. Avoid potential invalid memory write on corrupted/unexpected images when using the TIFFRGBAImageBegin() interface * libtiff/tif_next.c + Fix potential out-of-bound write in NeXTDecode() (http://bugzilla.maptools.org/show_bug.cgi?id=2508) * libtiff/tif_pixarlog.c + Avoid zlib error messages to pass a NULL string to %s formatter, which is undefined behaviour in sprintf(). + Fix out-of-bounds write vulnerabilities in heap allocated buffers. Reported as MSVR 35094. + Fix potential buffer write overrun in PixarLogDecode() on corrupted/unexpected images (CVE-2016-5875, bsc#987351) + Fix write buffer overflow in PixarLogEncode if more input samples are provided than expected by PixarLogSetupEncode. Idea based on libtiff-CVE-2016-3990.patch from libtiff-4.0.3-25.el7_2.src.rpm, but with different and simpler check. (http://bugzilla.maptools.org/show_bug.cgi?id=2544, bsc#975069) * libtiff/tif_predict.c + PredictorSetup: Enforce bits-per-sample requirements of floating point predictor (3). Fixes CVE-2016-3622 "Divide By Zero in the tiff2rgba tool." (bsc#974449) * libtiff/tif_predict.h, libtiff/tif_predict.c + Replace assertions by runtime checks to avoid assertions in debug mode, or buffer overflows in release mode. Can happen when dealing with unusual tile size like YCbCr with subsampling. Reported as MSVR 35105. * libtiff/tif_read.c + Fix out-of-bounds read on memory-mapped files in TIFFReadRawStrip1() and TIFFReadRawTile1() when stripoffset is beyond tmsize_t max value + Make TIFFReadEncodedStrip() and TIFFReadEncodedTile() directly use user provided buffer when no compression (and other conditions) to save a memcpy(). * libtiff/tif_strip.c + Make TIFFNumberOfStrips() return the td->td_nstrips value when it is non-zero, instead of recomputing it. This is needed in TIFF_STRIPCHOP mode where td_nstrips is modified. Fixes a read outsize of array in tiffsplit (or other utilities using TIFFNumberOfStrips()). Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2587 (CVE-2016-9273, bsc#1010163) * libtiff/tif_write.c + Fix issue in error code path of TIFFFlushData1() that didn't reset the tif_rawcc and tif_rawcp members. I'm not completely sure if that could happen in practice outside of the odd behaviour of t2p_seekproc() of tiff2pdf). The report points that a better fix could be to check the return value of TIFFFlushData1() in places where it isn't done currently, but it seems this patch is enough. Reported as MSVR 35095. + Make TIFFWriteEncodedStrip() and TIFFWriteEncodedTile() directly use user provided buffer when no compression to save a memcpy(). + TIFFWriteEncodedStrip() and TIFFWriteEncodedTile() should return -1 in case of failure of tif_encodestrip() as documented * tools/fax2tiff.c + Fix segfault when specifying -r without argument. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2572 * tools/Makefile.am + The libtiff tools bmp2tiff, gif2tiff, ras2tiff, sgi2tiff, sgisv, and ycbcr are completely removed from the distribution. The libtiff tools rgb2ycbcr and thumbnail are only built in the build tree for testing. Old files are put in new 'archive' subdirectory of the source repository, but not in distribution archives. These changes are made in order to lessen the maintenance burden. * tools/rgb2ycbcr.c + Validate values of -v and -h parameters to avoid potential divide by zero. Fixes CVE-2016-3623, bsc#974618 (http://bugzilla.maptools.org/show_bug.cgi?id=2569) * tools/tiff2bw.c + Fix weight computation that could result of color value overflow (no security implication). Fix http://bugzilla.maptools.org/show_bug.cgi?id=2550. * tools/tiff2pdf.c + Avoid undefined behaviour related to overlapping of source and destination buffer in memcpy() call in t2p_sample_rgbaa_to_rgb() Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2577 + Fix out-of-bounds write vulnerabilities in heap allocate buffer in t2p_process_jpeg_strip(). Reported as MSVR 35098. + Fix potential integer overflows on 32 bit builds in t2p_read_tiff_size() Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2576 + Fix read -largely- outsize of buffer in t2p_readwrite_pdf_image_tile(), causing crash, when reading a JPEG compressed image with TIFFTAG_JPEGTABLES length being one. Reported as MSVR 35101. CVE-2016-9453, bsc#1011107 + Fix write buffer overflow of 2 bytes on JPEG compressed images. Reported as TALOS-CAN-0187, CVE-2016-5652, bsc#1007280. Also prevents writing 2 extra uninitialized bytes to the file stream. * tools/tiff2rgba.c + Fix integer overflow in size of allocated buffer, when -b mode is enabled, that could result in out-of-bounds write. Based initially on patch tiff-CVE-2016-3945.patch from libtiff-4.0.3-25.el7_2.src.rpm, with correction for invalid tests that rejected valid files. (http://bugzilla.maptools.org/show_bug.cgi?id=2545, bsc#974614) * tools/tiffcp.c + Fix out-of-bounds write on tiled images with odd tile width vs image width. Reported as MSVR 35103. + Fix read of undefined variable in case of missing required tags. Found on test case of MSVR 35100. * tools/tiffcrop.c + Avoid access outside of stack allocated array on a tiled separate TIFF with more than 8 samples per pixel. (CVE-2016-5321, CVE-2016-5323, http://bugzilla.maptools.org/show_bug.cgi?id=2558, http://bugzilla.maptools.org/show_bug.cgi?id=2559, bsc#984813, bsc#984815) + Fix memory leak in (recent) error code path. Fixes Coverity 1394415. + Fix multiple uint32 overflows in writeBufferToSeparateStrips(), writeBufferToContigTiles() and writeBufferToSeparateTiles() that could cause heap buffer overflows. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2592 + Fix out-of-bound read of up to 3 bytes in readContigTilesIntoBuffer(). Reported as MSVR 35092. + Fix out-of-bounds write in loadImage(). From patch libtiff-CVE-2016-3991.patch from libtiff-4.0.3-25.el7_2.src.rpm (http://bugzilla.maptools.org/show_bug.cgi?id=2543, bsc#975070) + Fix read of undefined buffer in readContigStripsIntoBuffer() due to uint16 overflow. Reported as MSVR 35100. + Fix various out-of-bounds write vulnerabilities in heap or stack allocated buffers. Reported as MSVR 35093, MSVR 35096 and MSVR 35097. + readContigTilesIntoBuffer: Fix signed/unsigned comparison warning. * tools/tiffdump.c + Fix a few misaligned 64-bit reads warned by -fsanitize + ReadDirectory: Remove uint32 cast to_TIFFmalloc() argument which resulted in Coverity report. Added more mutiplication overflow checks * tools/tiffinfo.c + Fix out-of-bound read on some tiled images. (http://bugzilla.maptools.org/show_bug.cgi?id=2517) + TIFFReadContigTileData: Fix signed/unsigned comparison warning. + TIFFReadSeparateTileData: Fix signed/unsigned comparison warning. - Removed patches: * tiff-4.0.4-uninitialized_mem_NeXTDecode.patch * tiff-4.0.6-CVE-2015-8782.patch * tiff-4.0.6-CVE-2016-3186.patch * tiff-4.0.6-CVE-2016-3623.patch * tiff-4.0.6-CVE-2016-3945.patch * tiff-4.0.6-CVE-2016-3990.patch * tiff-4.0.6-CVE-2016-3991.patch * tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch * tiff-4.0.6-libtiff-tif_luv.c-validate-that-for-COMPRESSION_SGIL.patch * tiff-4.0.6-libtiff-tif_pixarlog.c-fix-potential-buffer-write-ov.patch * tiff-4.0.6-libtiff-tif_read.c-make-TIFFReadEncodedStrip-and.patch * tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch - Fixed in the upsteam release - Changed patch: * tiff-4.0.6-CVE-2015-7554.patch -> tiff-4.0.7-CVE-2015-7554.patch - Rediffed to the changed context ==== w3m ==== Version update (0.5.3 -> 0.5.3.git20161120) - update to debian git version (bsc#1011293) addressed security issues: CVE-2016-9621: w3m: global-buffer-overflow write (bsc#1012020) CVE-2016-9622: w3m: null deref (bsc#1012021) CVE-2016-9623: w3m: null deref (bsc#1012022) CVE-2016-9624: w3m: near-null deref (bsc#1012023) CVE-2016-9625: w3m: stack overflow (bsc#1012024) CVE-2016-9626: w3m: stack overflow (bsc#1012025) CVE-2016-9627: w3m: heap overflow read + deref (bsc#1012026) CVE-2016-9628: w3m: null deref (bsc#1012027) CVE-2016-9629: w3m: null deref (bsc#1012028) CVE-2016-9630: w3m: global-buffer-overflow read (bsc#1012029) CVE-2016-9631: w3m: null deref (bsc#1012030) CVE-2016-9632: w3m: global-buffer-overflow read (bsc#1012031) CVE-2016-9633: w3m: OOM (bsc#1012032) CVE-2016-9434: w3m: null deref (bsc#1011283) CVE-2016-9435: w3m: use uninit value (bsc#1011284) CVE-2016-9436: w3m: use uninit value (bsc#1011285) CVE-2016-9437: w3m: write to rodata (bsc#1011286) CVE-2016-9438: w3m: null deref (bsc#1011287) CVE-2016-9439: w3m: stack overflow (bsc#1011288) CVE-2016-9440: w3m: near-null deref (bsc#1011289) CVE-2016-9441: w3m: near-null deref (bsc#1011290) CVE-2016-9442: w3m: potential heap buffer corruption (bsc#1011291) CVE-2016-9443: w3m: null deref (bsc#1011292) dropped patches: w3m-fix-build-with-imlib2-1.4.6.patch w3m-scheme.patch w3mman-formatting.patch w3m-parallel-make.patch w3m-gc7.diff w3m-openssl.patch w3m-closedir.patch w3m-fh-def.patch w3m-ssl-verify.patch w3m-parsetagx-crash.patch w3m-tempdir-override.patch w3m-0.5.1-no-ASCII-equivalents-by-default.patch w3m-uninitialized.patch w3m-inline-image.patch w3m-0.4.1-textarea-segfault.dif ported patches: w3m-disable-cookie-special-domain-check.patch to 0001-allow-to-configure-the-accept-option-for-bad-cookies.patch w3m-0.4.1-session-mgmt.dif to 0001-implements-simple-session-management.patch w3m-history-crossdev.patch to 0001-handle-EXDEV-during-history-file-rename.patch w3mman-formatting.patch to 0001-w3mman-don-t-show-invalid-characters-bsc-950800.patch ==== xf86-video-chips ==== - U_Adapt-Block-WakeupHandler-signature-for-ABI-23.patch * Adapt Block/WakeupHandler signature for ABI 23 ==== xf86-video-glint ==== - U_Adapt-Block-WakeupHandler-signature-for-ABI-23.patch * Adapt Block/WakeupHandler signature for ABI 23 ==== xf86-video-mga ==== - U_Adapt-Block-WakeupHandler-signature-for-ABI-23.patch * Adapt Block/WakeupHandler signature for ABI 23 ==== xf86-video-savage ==== - U_Adapt-Block-WakeupHandler-signature-for-ABI-23.patch * Adapt Block/WakeupHandler signature for ABI 23 ==== xf86-video-siliconmotion ==== - U_Adapt-Block-WakeupHandler-signature-for-ABI-23.patch * Adapt Block/WakeupHandler signature for ABI 23 ==== xf86-video-sisusb ==== - u_Adapt-Block-WakeupHandler-signature-for-ABI-23.patch * Adapt Block/WakeupHandler signature for ABI 23 ==== xf86-video-tdfx ==== - U_Adapt-Block-WakeupHandler-signature-for-ABI-23.patch * Adapt Block/WakeupHandler signature for ABI 23 ==== xf86-video-trident ==== - U_Adapt-Block-WakeupHandler-signature-for-ABI-23.patch * Adapt Block/WakeupHandler signature for ABI 23 -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

1 0

[opensuse-factory] friend needs to put out bounty for bugfix
by Felix Miata 03 Dec '16

03 Dec '16

He can't see much, so needs https://bugzilla.opensuse.org/show_bug.cgi?id=981271 fixed. How does one go about finding someone to pay to fix a bug? -- "The wise are known for their understanding, and pleasant words are persuasive." Proverbs 16:21 (New Living Translation) Team OS/2 ** Reg. Linux User #211409 ** a11y rocks! Felix Miata *** http://fm.no-ip.com/ -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

1 0

[opensuse-factory] build.opensuse.org maintenance on sunday and monday
by Adrian Schröter 03 Dec '16

03 Dec '16

Hi, we reached again new load levels on OBS and need to split again our main backend servers. This will happen on coming sunday and will most likely continue on monday. What will be affected exactly? * build.opensuse.org will stay and reachable * all content on download.opensuse.org will stay * source changes, requests will remain work * schedulers for main projects will get stopped. => new builds will not start, except for home:* and openSUSE staging projects. The builds will get triggered automatically when we boot the schedulers again. * projects outside of openSUSE and home namespace may show an old build state for some time until the final sync has finished. * home:* and openSUSE Staging projects will remain to work all the time, including building and publishing. The reward will be more IO throughput later one, which means faster scheduling and publishing :) -- Adrian Schroeter email: adrian(a)suse.de SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard, Graham Norton, HRB 21284 (AG Nürnberg) Maxfeldstraße 5 90409 Nürnberg Germany -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

2 1

[opensuse-factory] New Tumbleweed snapshot 20161201 released!
by Dominique Leuenberger 03 Dec '16

03 Dec '16

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… When you reply to report some issues, make sure to change the subject. It is not helpful to keep the release announcement subject in a thread while discussing a specific problem. Packages changed: calligra dhcp dracut hplip (3.16.8 -> 3.16.10) kchmviewer kdbg kdevelop4 kdevelop4-plugins kdevplatform4 kernel-firmware (20161005 -> 20161121) kernel-source (4.8.10 -> 4.8.11) kradio libkolabxml (1.1.2 -> 1.1.6) libqmi (1.16.0 -> 1.16.2) libyui (3.2.8 -> 3.2.9) p11-kit perl-Text-Unidecode (1.27 -> 1.30) pesign-obs-integration rp-pppoe vala (0.34.2 -> 0.34.3) yast2-ntp-client (3.2.0 -> 3.2.1) yast2-packager (3.2.7 -> 3.2.9) === Details === ==== calligra ==== Subpackages: calligra-extras-dolphin calligra-extras-okular calligra-stage calligra-words-common - Expand macro kde4_runtime_requires only when its available to fix quilt setup ==== dhcp ==== Subpackages: dhcp-client dhcp-doc dhcp-relay dhcp-server - Add config file for registering dhcp server in slp (bsc#992072) ==== dracut ==== - Remove 0314-run-rpcbind.patch again, was solved by another change in rpcbind ==== hplip ==== Version update (3.16.8 -> 3.16.10) Subpackages: hplip-hpijs hplip-sane - Fixed SLES12 SP2 build problem in %files section for /usr/lib/udev/rules.d - Version upgrade to 3.16.10: * Added Support for the Following New Printers: - HP officejetPro7740 wide Format All in one - HP Office jet 6950 All-in-One printer - HP ScanJet Pro 3000 s3 Sheet-feed Scanner - HP ScanJet Enterprise Flow 5000 s4 Sheet-feed Scanner - HP Scanjet Entrprise Flow 7000 s3 sheetfeed Scanner - HP Color LaserJet Pro MFP M277c6 * Notes to follow: - For scanjets scan using command "hp-scan --adf --size=size_name" - "hp-scan --help" for all size_name - Version upgrade to 3.16.9: * Added Support for the Following New Printers: - HP OfficeJet Pro 8732M All-in-One Printer - HP OfficeJet 8702 All-in-One Printer - HP OfficeJet 6960 All-in-One Printer - HP PageWide 377dw Multifunction Printer - HP PageWide 352dw Printer - HP PageWide Managed Color MFP E58650 series - HP PageWide Managed Color E55650 series ==== kchmviewer ==== - Expand macro kde4_runtime_requires only when its available to fix quilt setup ==== kdbg ==== Subpackages: kdbg-doc kdbg-lang - Expand macro kde4_runtime_requires only when its available to fix quilt setup ==== kdevelop4 ==== Subpackages: kdevelop4-devel kdevelop4-lang kdevelop4-plugin-cppsupport - Expand macro kde4_runtime_requires only when its available to fix quilt setup ==== kdevelop4-plugins ==== - Expand macro kde4_runtime_requires only when its available to fix quilt setup ==== kdevplatform4 ==== Subpackages: kdevplatform4-lang libkdevplatform8 - Expand macro kde4_runtime_requires only when its available to fix quilt setup ==== kernel-firmware ==== Version update (20161005 -> 20161121) Subpackages: ucode-amd - Update to version 20161121: * mediatek: update MT8173 VPU firmware for idle state * amdgpu: add new smc firmware for newer tonga and iceland chips * linux-firmware: rockchip: update dptx firmware to v3.1 * rockchip/dptx: update WHENCE to version 3.1 ==== kernel-source ==== Version update (4.8.10 -> 4.8.11) Subpackages: kernel-default kernel-default-devel kernel-devel kernel-docs kernel-macros kernel-syms - Linux 4.8.11 (: :). - commit 8e531aa - ASoC: intel: Fix crash at suspend/resume without card registration (bsc#1010690). - commit b60c8fd - Revert "ACPI: Execute _PTS before system reboot" (bsc#101220). - commit 95e516a - xc2028: Fix use-after-free bug properly (CVE-2016-7913 bsc#1010478). - commit 534ac6c - Update patches.kernel.org/patch-4.8.7-8 references (add CVE-2016-9555 bsc#1011685). - commit d81bac1 ==== kradio ==== - Expand macro kde4_runtime_requires only when its available to fix quilt setup ==== libkolabxml ==== Version update (1.1.2 -> 1.1.6) - disable parallel build to hopefully fix random build failures - New upstream release 1.1.6 + The created date is optional - New upstream release 1.1.5 + Support audio alarms without an attachment - New upstream release 1.1.4 + The tests require valid created dates - New upstream release 1.1.3 + The "created" property must be a UTC date-time ==== libqmi ==== Version update (1.16.0 -> 1.16.2) Subpackages: libqmi-glib5 libqmi-tools - Update to version 1.16.2: + DMS: flagged several methods as available since DMS 1.1. + NAS: Fix RX/TX mixup in 'Get LTE Cphy CA Info'. + qmi-proxy: - Fix segfault when trying to use already disposed clients. - Fix segfault when trying to use already disposed transactions. - Plug several memleaks in error conditions. + qmicli: Added support for IP type in --wds-start-network. + build: fix checking for libmbim. ==== libyui ==== Version update (3.2.8 -> 3.2.9) - implement shortcut conflicts resolver for menu buttons (bsc#940817) - 3.2.9 ==== p11-kit ==== Subpackages: libp11-kit0 libp11-kit0-32bit p11-kit-32bit p11-kit-devel p11-kit-tools - 32-bit compatibility fixes: * Add PKCS11 module to p11-kit-32bit (bsc#996047#c39) * Add p11-kit-nss-trust-32bit NSS module * Fix potential bi-arch issue with private binaries (fdo#98817, p11-kit-biarch.patch) ==== perl-Text-Unidecode ==== Version update (1.27 -> 1.30) - updated to 1.30 see /usr/share/doc/packages/perl-Text-Unidecode/ChangeLog ==== pesign-obs-integration ==== - Copy over any *.log files from the first build (bsc#1012422) ==== rp-pppoe ==== - Fix patches and script for version 3.12. - dropped logger-path.diff - Add net-tools support. net-tools-deprecated is no longer required. ==== vala ==== Version update (0.34.2 -> 0.34.3) Subpackages: libvala-0_34-0 - Update to version 0.34.3: + Bug fixes and binding updates. ==== yast2-ntp-client ==== Version update (3.2.0 -> 3.2.1) - Remove warning message from a wrong widget definition (bsc#1012185) - 3.2.1 ==== yast2-packager ==== Version update (3.2.7 -> 3.2.9) - Revert the last change, as it is more tricky to get the correct behavior. For more details see the discussion in (bsc#966466). - 3.2.9 - Always show summary mode when clicking on details in software proposal (bsc#966466) - 3.2.8 -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

1 0

[opensuse-factory] Tumbleweed snapshot repositories prototype
by Jimmy Berry 03 Dec '16

03 Dec '16

About a month ago I sent out a proposal titled "Tumbleweed snapshot repositories" [1]. Since then I spent some time building a basic prototype that could use some interested folks to play around with it. For those not interested in reading my updates on the implementation and considerations the following are the relevant links. - https://github.com/boombatower/tumbleweed-cli/wiki/Installation-and-usage - https://github.com/boombatower/tumbleweed-cli - https://github.com/boombatower/tumbleweed-snapshot As of the time of this writing there are only two snapshots available. - 20161201 - 20161129 The snapshot script is set to automatically check for the publishing of a new snapshot and should create them automatically. Some open items from the proposal which have been decided in prototype are: - directory structure: placement of snapshot identifier in URL - location for code: modify OBS / kiwi, etc. - mirror load: concerns about extra size and load on mirrors The snapshot identifier is placed at the root level of the URL for a number of reasons. 1) does not require several URL patterns 2) works for all repo types 3) easily provides an entirely separate file tree for separate mirror network For example: /tumbleweed/repo/oss/ Becomes: /20161129/tumbleweed/repo/oss/ Given the different structures of the main openSUSE Tumbleweed product repo vs a home/devel repo structure this avoid unnecessary complications. /repositories/home:/boombatower:/snapshot/openSUSE_Tumbleweed/ Becomes: /20161129/repositories/home:/boombatower:/snapshot/openSUSE_Tumbleweed/ Instead of: /repositories/home:/boombatower:/snapshot/openSUSE_Tumbleweed/20161129/ /repositories/home:/boombatower:/snapshot/openSUSE_Tumbleweed_snapshot/ 20161129/ This structure also pairs well with the code strategy since it ended up making sense to keep the code out of the existing publishing workflows. As such the code does not have the context to understand the directory structure and it does not need to with this method. Since the snapshots are essentially backups of the published repositories it really does not make sense to mix into existing workflows. Additionally, in order to save space and implement the symlink strategy the script needs to compare the current snapshot against a previous snapshot which really does not fit in publishing workflow. As mentioned, there are concerns about mirror load in terms of the extra space required to store the snapshots. Given a separate and complete directory tree is available it can be sync'd using a completely separate rysnc module or similar. A stub is provided for the current snapshot which redirects to the standard mirror infrastructure to avoid serving the files directly. Once the snapshot is no longer current it automatically falls back to serving the snapshotted files. This approach achieves the design goals while utilizing the existing infrastructure. For example: - 20161201 is released and redirects to standard mirrors - 20161202 is released and redirects to standard mirrors - 20161201 serves snapshotted content The end user URLs can thus always include the snapshot identifier without suffering from reduced performance (aside from the redirect). The script looks at the openSUSE:Factory/snapshot repo for updates to the _product:openSUSE-release package [2]. Once detected the sync'd repo tree is snapshotted (against previous snapshot) and the new snapshot is redirect to the standard mirrors. By using this as the trigger the snapshot is triggered before the rsync tree is updated so the snapshot contains the newest published packages before the new snapshot was published. This strategy also works for devel/home repos which may begin rebuilding as a result of the new snapshot or updates from maintainers. The rsync tree is continually sync'd inbetween snapshotting to ensure the latest versions are available when the snapshot is triggered. Obviously, this process could run on the same infrastructure as OBS to avoid the need to sync the tree. Having the trigger work completely outside of OBS itself means that third-party repositories can also be snapshotted without those parties having to set things up. The Tumbleweed update repository is not snapshotted since it is intended to override snapshot packages. Obviously, in rare instances this could cause issues just as it can in normal operation. The update repo could be snapshotted and simply not utilized by default but available in the case users had issues and needed to utilize it. The secondary goal of "locking" the repository or indicating when a repo is in flux is not currently achieved for the latest repo, but obviously works naturally for the snapshot repos. Based on some of the ideas in the proposal and additional thinking I have done on the subject it seems achievable, but focusing on the basic snapshot functionality first seems prudent. A sidenote, the tumbleweed/iso/ directory is currently snapshotted as it can be handy to have older installation media for the times when they break. Given the limited resources of the server hosting the prototype I may disable it since it adds a couple tens of GB to each snapshot. For those interesting in experimenting inside a controlled environment I'd recommend a docker container. The official opensuse:tumbleweed images is infrequently updated and as such will typically require a sizable update to get into the neighborhood of recent snapshots. Alternatively, my boombatower/opensuse:tumbleweed is rebuilt once weekly and as such should provide a recent starting point. docker run -it boombatower/opensuse:tumbleweed /bin/bash Add --rm if you would like it to automatically disappear after exiting. I will be updating one of my machines using this prototype and should notice issues, but feel free to file issues on the github repos or respond to mail. [1] https://lists.opensuse.org/opensuse-factory/2016-10/msg00591.html [2] https://build.opensuse.org/package/binaries/openSUSE:Factory/ _product:openSUSE-release?repository=snapshot Have fun! -- Jimmy

1 0

[opensuse-factory] openSUSE Tumbleweed – Review of the Week 2016/48
by Dominique Leuenberger / DimStar 02 Dec '16

02 Dec '16

Dear Tumbleweed users and hackers, After releasing daily snapshots without interruption for 17 days, Tumbleweed did slow down a bit during the last week. As already mentioned in my last review, 1124 had been canceled due to an issue with sddm installing strange branding configurations. And later on, we ‘broke’ our own staging setup and needed to bootstrap a few of them, making the throughput much lower than we were used to. So, we ended up with 3 snapshots since my last review: 1125, 1128 and 1129. The snapshots contained these interesting updates: * KDE Plasma 5.8.4 * A couple X.org driver updates, in preparation for X 1.19 * SDDM 0.14.0 * LightDM 1.21.1 So, even if we got less snapshots, we just make them bigger – to ensure you get your frequent dose of updates. And those things are in the pipeline: * X.Org 1.19 – pending on virtualbox fix * All the nice things the YaST Team promised * Hunspell 1.5 – waiting for KDE Frameworks 5.29 Note that the next snapshots might again be a bit slower due to the OBS scheduler reconfiguration that was announced by Adrian [0] Cheers, Dominique [0] https://lists.opensuse.org/opensuse-factory/2016-12/msg00017.html

1 0

[opensuse-factory] [42.2] systemd-journal-remote|upload|gatewad?
by Mikhail Kasimov 02 Dec '16

02 Dec '16

Hello! Are the packages systemd-journal-remote|upload|gatewad accessable in systemd 228 for Leap 42.2? Can't see them on software.opensuse.org and in repo-s... Thank you! -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

2 2

[opensuse-factory] YaST: highlights of development sprint 28
by Ancor Gonzalez Sosa 02 Dec '16

02 Dec '16

November is over, so it is another Scrum sprint for the YaST team. Check the highlights at https://lizards.opensuse.org/?p=12141 Enjoy -- Ancor González Sosa YaST Team at SUSE Linux GmbH -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

1 0

[opensuse-factory] Tumbleweed does not halt
by Michael Ströder 02 Dec '16

02 Dec '16

HI! On one laptop (of half a dozen) I've configured with Tumbleweed the system is hanging during shutdown, some process is massively accessing the hard-disk. Any hint where to search for this issue? Ciao, Michael.

4 11

[opensuse-factory] rpmlint noise showing up in OBS
by Peter Linnell 02 Dec '16

02 Dec '16

Hi there, Since today, I have noticed every review I have had going to into Factory has the following: /etc/magic, 3: Warning: using regular magic file `/usr/share/misc/magic' /usr/share/misc/magic, 16488: Warning: missing ')' in indirect offset /etc/magic, 3: Warning: using regular magic file `/usr/share/misc/magic' /usr/share/misc/magic, 16488: Warning: missing ')' in indirect offset /etc/magic, 3: Warning: using regular magic file `/usr/share/misc/magic' /usr/share/misc/magic, 16488: Warning: missing ')' in indirect offset I have no idea what causes this, but it seems to have come from a recent change somewhere. Thanks, Peter -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

2 1

[opensuse-factory] TW: systemd v228.16, dbus access problems
by mab 02 Dec '16

02 Dec '16

Hello, My system works fine with systemd-228-15.2. After upgrading to 228-16 (with systemd-sysvinit udev) the journal contains entries like: cron[16200]: pam_systemd(crond:session): Failed to connect to system bus: No such file or directory dbus[1257]: [system] Failed to activate service 'org.freedesktop.systemd1': timed out sddm-helper[16255]: pam_systemd(sddm:session): Failed to connect to system bus: No such file or directory A reboot results in several failed services (avahi, bluetooth, ModemManager, login-systemd, NetworkManager) , as far as I can see due to dbus access failure. Other programs, e.g. gpg (failed IPC call), are affected, too. systemd-logind[1254]: Failed to connect to system bus: No such file or directory dbus[1257]: [system] Failed to activate service 'org.freedesktop.PolicyKit1': timed outdbus[1257]: [system] Failed to activate service 'org.freedesktop.systemd1': timed out dbus[1257]: [system] Failed to activate service 'org.freedesktop.hostname1': timed out dbus[1257]: [system] Failed to activate service 'org.freedesktop.nm_dispatcher': timed out How to analyze that? Greetings mab KDE-Plasma-Version: 5.8.4 KDE-Frameworks-Version: 5.28.0 Qt-Version: 5.7.0 Kernel-Version: 4.8.10-1-default -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

1 1

[opensuse-factory] jing error on simple xml from CMS
by Normand 02 Dec '16

02 Dec '16

Hello there, I am trying to use autoyast for the first time, so reading autoyast doc (1) I generated an autoyastmno xml using autoyast CMS (2) not doing any changes in UI, only saving with default parameters. xmllint is not reporting any error, but jing is reporting errors detailed in (3) If I ignore the errors about missing jar, there are still "text not allowed" error. Does it worse a bug ? or is it a user error ? (1) https://doc.opensuse.org/projects/autoyast/#Autoinstallation.collectInfo (2) sudo /sbin/yast2 autoyast (3) === $jing /usr/share/YaST2/schema/autoyast/rng/profile.rng /var/lib/autoinstall/repository/autoyastmno /usr/bin/build-classpath: Could not find saxon6 Java extension for this JVM /usr/bin/build-classpath: error: Some specified jars were not found /var/lib/autoinstall/repository/autoyastmno:54:34: error: found attribute "config:type", but no attributes allowed here /var/lib/autoinstall/repository/autoyastmno:54:39: error: text not allowed here; expected the element end-tag or element "ask-list", "cio_ignore", "minimal-configuration", "mode", "mouse", "proposals", "self_update_url", "semi-automatic", "signature-handling", "storage" or "wait" === -- Michel Normand -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

1 0

[opensuse-factory] New Tumbleweed snapshot 20161129 released!
by Dominique Leuenberger 01 Dec '16

01 Dec '16

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… When you reply to report some issues, make sure to change the subject. It is not helpful to keep the release announcement subject in a thread while discussing a specific problem. Packages changed: acpid branding-openSUSE installation-images-openSUSE (14.278 -> 14.279) kde-branding-openSUSE lightdm (1.20.0 -> 1.21.1) nghttp2 (1.15.0 -> 1.16.1) openvpn p7zip perl-DBD-mysql (4.040 -> 4.041) systemd xfce4-vala xfdesktop (4.12.2 -> 4.12.3) === Details === ==== acpid ==== - Remove ExclusiveArch. At least some ARM boards emulate ACPI events with their power button driver. At worst the daemon will be superfluous on some systems. (bsc#1012325) ==== branding-openSUSE ==== Subpackages: gfxboot-branding-openSUSE grub2-branding-openSUSE plymouth-branding-openSUSE wallpaper-branding-openSUSE xfce4-splash-branding-openSUSE - enable grub2-branding-openSUSE also for %%arm ==== installation-images-openSUSE ==== Version update (14.278 -> 14.279) - removed local alias - 14.279 ==== kde-branding-openSUSE ==== Subpackages: kdelibs4-branding-openSUSE ksplash-qml-branding-openSUSE ksplashx-branding-openSUSE - Change version back to 13.3 ==== lightdm ==== Version update (1.20.0 -> 1.21.1) Subpackages: liblightdm-gobject-1-0 lightdm-lang - Update to version 1.21.1 (changes since 1.20.0): * Add liblightdm functions for getting OS release information and the message of the day. * Warn if we find unknown keys in configuration. * Fix .profile errors not showing in .xsession-errors log. * Remove a duplicate Qt property in liblightdm. * Fix and improve liblightdm API documentation. * Minor GIR annotation fixes. * Fix greeters crashing with unknown configuration keys (regression from 1.12.0) * Add an API verison to the greeter-daemon protocol for future enhancements. * More regression tests. ==== nghttp2 ==== Version update (1.15.0 -> 1.16.1) - Update to version 1.16.1: * lib: Prevent undefined behavior in decode_length * nghttpx: Fix bug which may crash nghttpx if non-final response is forwarded from origin server to HTTP/1.1 client - Changes for version 1.16.0: * lib: Add nghttp2_set_debug_vprintf_callback to take advantage of DEBUGF statements in when building DEBUGBUILD. * Update .clang-format for clang-format-3.9 * build: Make it possible to include nghttp2/CMakeLists.txt in another project using add_subdirectory. * third-party: Update http-parser to feae95a3a69f111bc1897b9048d9acbc290992f9 * asio: Fix crash when end() is called outside nghttp2 callback * nghttpx: Add --backend-connect-timeout option * nghttpx: Add TLS signed_certificate_timestamp extension support * nghttpx: Add --ecdh-curves option to specify list of named curves * h2load: Add --header-table-size and --encoder-header-table-size options ==== openvpn ==== - Require iproute2 explicitly. openvpn uses /bin/ip from iproute2, so it should be installed ==== p7zip ==== - Add CVE-2016-9296.patch to fix a null pointer dereference problem (CVE-2016-9296) ==== perl-DBD-mysql ==== Version update (4.040 -> 4.041) - updated to 4.041 see /usr/share/doc/packages/perl-DBD-mysql/Changes 2016-11-28 Patrick Galbraith, Michiel Beijen, DBI/DBD community (4.041) * Fix use-after-free for repeated fetchrow_arrayref calls when mysql_server_prepare=1 Function dbd_st_fetch() via Renew() can reallocate output buffer for mysql_stmt_fetch() call. But it does not update pointer to that buffer in imp_sth->stmt structure initialized by mysql_stmt_bind_result() function. That leads to use-after-free in any mysql function which access imp_sth->stmt structure (e.g. mysql_stmt_fetch()). This patch fix this problem and properly updates pointer in imp_sth->stmt structure after Renew() call. This is a medium level security issue to which the Debian security team assigned identifier CVE-2016-1251. Discovered and fixed by Pali Roh�r. * auto_reconnect now also matches CR_SERVER_LOST, previously this only matched CR_SERVER_GONE. Fixes http://bugs.mysql.com/bug.php?id=27613 Fix suggested by Wouter de Jong. * Fix compilation fixes (Pali Roh�r). ==== systemd ==== Subpackages: libsystemd0 libsystemd0-32bit libudev-devel libudev1 libudev1-32bit systemd-32bit systemd-bash-completion systemd-logger systemd-sysvinit udev - libudev-devel 32bit is needed for building 32bit wine now. ==== xfce4-vala ==== - fix build on Leap 42.2 (vala version 0.32) ==== xfdesktop ==== Version update (4.12.2 -> 4.12.3) Subpackages: xfdesktop-lang - update to version 4.12.3 - rotate wallpaper images if they contain rotation information - Settings: Fix loading of wallpaper previews - fix setting of wallpaper if monitor name contains whitespace - translation updates -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

1 0

[opensuse-factory] Upgrade Leap
by A. den Oudsten 01 Dec '16

01 Dec '16

Upgrading to 42.2 ran fine until retrieving 1301/2206 I was invited to insert the medium [openSUSE-42.2-0] After that I got the message File ´ ./suse/x86_64/libply-boot-client2-0.9.0-6.1x86_64.rpm´ not found on medium ´dvd:///´ Check of the DVD gave ´./suse/x86_64/libply-boot-client4-0.9.2-2.2x86_64.rpm´ How do I solve that difference? T.i.a. André den Oudsten -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

2 2

[opensuse-factory] python3 for SLE12 SP2
by Axel Braun 01 Dec '16

01 Dec '16

Morning all, quick question to the maintainers of devel:languages:python3 - when will you add SLE12 SP2 as build target? Thanks Axel -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

4 3