June 2016

[opensuse-factory] acpid requires systemd?
by Felix Miata 25 Apr '24

25 Apr '24

Can this be true? If so, why? Zypper won't let me upgrade acpid without breakage unless systemd is installed too. I have systemd locked out, as I'd rather test things I can understand in Factory, not major overhaul stuff. -- "The wise are known for their understanding, and pleasant words are persuasive." Proverbs 16:21 (New Living Translation) Team OS/2 ** Reg. Linux User #211409 ** a11y rocks! Felix Miata *** http://fm.no-ip.com/ -- To unsubscribe, e-mail: opensuse-factory+… [View More]

4 3

[opensuse-factory] receiving files via bluetooth fails
by Olaf Hering 24 Sep '17

24 Sep '17

Some months ago it was possible to receive files via bluetooth with TW. But since some weeks that fails for me. I waited for GNOME 3.20 and the new bluez in the hope it will fix itself, but the failure remains: Apr 05 18:01:28 probook obexd[3042]: CONNECT(0x0), (null)(0xffffffff) Apr 05 18:01:28 probook obexd[3042]: CONNECT(0x0), (null)(0x0) Apr 05 18:01:32 probook obexd[3042]: PUT(0x2), (null)(0xffffffff) Apr 05 18:01:32 probook obexd[3042]: open(/home/olaf/.cache/obexd/GSIBFY): No such file … [View More]or directory (2) Apr 05 18:01:32 probook obexd[3042]: PUT(0x2), NOT_FOUND(0x44) Apr 05 18:01:32 probook obexd[3042]: DISCONNECT(0x1), (null)(0xffffffff) Apr 05 18:01:32 probook obexd[3042]: DISCONNECT(0x1), SUCCESS(0x20) Apr 05 18:01:32 probook bluetoothd[1520]: Unable to get io data for Object Push: getpeername: Transport endpoint is not connected (107) Apr 05 18:01:32 probook obexd[3042]: disconnected: Transport got disconnected Apr 05 18:02:42 probook obexd[3042]: CONNECT(0x0), (null)(0xffffffff) Apr 05 18:02:42 probook obexd[3042]: CONNECT(0x0), (null)(0x0) Apr 05 18:02:42 probook obexd[3042]: PUT(0x2), (null)(0xffffffff) Apr 05 18:02:42 probook obexd[3042]: open(/home/olaf/.cache/obexd/1OLQFY): Operation not permitted (1) Apr 05 18:02:42 probook obexd[3042]: PUT(0x2), FORBIDDEN(0x43) Apr 05 18:02:42 probook obexd[3042]: DISCONNECT(0x1), (null)(0xffffffff) Apr 05 18:02:42 probook obexd[3042]: DISCONNECT(0x1), SUCCESS(0x20) Apr 05 18:02:42 probook bluetoothd[1520]: Unable to get io data for Object Push: getpeername: Transport endpoint is not connected (107) Apr 05 18:02:42 probook obexd[3042]: disconnected: Transport got disconnected First I tried to remove /home/olaf/.cache/obexd, but nothing seems to feel responsible to create this dir as seen with the first error. Then I created it with mkdir -m07777, and that just gives the EPERM error as before. strace shows that it gets some "forbidden" from dbus. Is receiving files working for anyone else? Also the rfkill thing does not work reliable. NetworkManager finds the device according to syslog, but the GNOME bluetooth thing finds nothing. Something softblocks it: root@probook:~ # hciconfig -a hci0 reset Can't init device hci0: Operation not possible due to RF-kill (132) root@probook:~ # rfkill list all 0: hp-wifi: Wireless LAN Soft blocked: no Hard blocked: yes 1: hp-bluetooth: Bluetooth Soft blocked: no Hard blocked: no 2: phy0: Wireless LAN Soft blocked: no Hard blocked: no 4: hci0: Bluetooth Soft blocked: yes Hard blocked: no Need to run 'rfkill unblock 4' manually to get it going. Once that it done its appearently possible to use the UMTS, and sending a file works as well. Olaf -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org [View Less]

4 5

[opensuse-factory] add pam_faillock for factory, 42.2, SLES 12 SP2
by Jason Newton 01 Feb '17

01 Feb '17

I'd consider adding it as an update, too, to 42.1 and SP1, at least in aux repositories - preferably to updates :-). I've spoken with the author of pam_faillock and I believe it to be superior to pam_tally2, particularly concerning handling of screensaver handling. pam_faillock is part of the recommended RHEL configuration for secured computers and holding out for pam_tally2 also presents a nasty non-uniformity for nearly the same functionality (although, weaker). I've asked the author, … [View More]

3 7

[opensuse-factory] How can calibre be allowed access through YaST firewall?
by Chan Ju Ping 24 Sep '16

24 Sep '16

Unlike rsync, or KDE Connect, there is no option to automatically allow the Calibre ebook manager to open ports so external devices can connect to it. So far, my solution has been to disable the firewall before connecting my device to Calibre via the Calibre Companion app on Android. For those unfamiliar with the process, Calibre Companion can sync ebooks from the desktop's library to the Android device's library, thus eliminating the need for wires and further organization of books. If … [View More]

3 8

[opensuse-factory] Gstreamer*0.10* for sale!
by Bjørn Lie 07 Sep '16

07 Sep '16

More than 3 years ago upstream said enough is enough and pulled the plug on gst-0_10 branch, and ever since then we the gnome-maintainers have been carrying around the abandoned packages, both because we care and at the time of upstreams kill-off point we had a lot of packages depending on them. Since then we have quietly been porting the ones we care about or dropping them from Tumbleweed. We have however now reached a point where we can not in good conscious say that we care for gst-0_10 at … [View More]all anymore, and would as a result offer up maintainership of said packages for those that still depend on them / want them to stay in Tumbleweed. Currently osc whatdependson openSUSE:Factory gstreamer-0_10 standard x86_64 gives this list [see end of email] of depending packages. If you as a maintainer are affected, please consider stepping up and requesting maintainer via obs or email. The above said, maintenance burden is not very high currently, so don't fear taking responsibility, it mainly consists of tweaking packages to ensure their continued build. As a maintainer though I'd prefer that we could drop gst-0_10 from TW all the way, but acknowledge that this is not currently possible, but if everyone who have packages still depend on gst-0_10* do a real push to port or drop packages still dependent we could perhaps take the easy route out and just drop gstreamer-0_10. //Bjørn - on behalf of openSUSE GNOME maintainers. LIST: osc whatdependson openSUSE:Factory gstreamer-0_10 standard x86_64 gstreamer-0_10 : aegisub audacity boinc-client codelite e17 e_dbus echievements elementary elemines emotion-generic-players enlightenment eperiodique epymc erlang espeakedit etrophy evas-generic-loaders filezilla fityk flamerobin freqtweak gcompris gnuplot gnuradio gstreamer-0_10-plugin-crystalhd gstreamer-0_10-plugins-bad gstreamer-0_10-plugins-base gstreamer-0_10-plugins-gl gstreamer-0_10-plugins-good gstreamer-0_10-plugins-ugly hugin ignuit kde3-amarok kde3-kaffeine kdemultimedia3 kicad lekha libucil mathgl meson moodbar morituri perl-Alien-wxWidgets perl-Wx pgadmin3 plplot poedit presage psi+-plugins-psimediaplugin python-efl python-gstreamer-0_10 python-matplotlib python-wxWidgets python-wxWidgets-3_0 rage sffview shellementary terminology tintii urbanlightscape usbprog wammu wxGTK3-3_0 wxMaxima wxWidgets wxWidgets-3_0 wxWidgets-ansi wxWidgets-wxcontainer wxWidgets-wxcontainer24c wxhexeditor xchm xfce4-mixer xfce4-volumed xylib -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org [View Less]

8 11

[opensuse-factory] Transitioning to GCC 6
by Richard Biener 25 Jul '16

25 Jul '16

You may have noticed that GCC 6 packages appeared in Factory (but gcc used for building packages still points to GCC 5). Somewhen in January I set up openSUSE:Factory:Staging:Gcc6 where GCC 6 is used to build packages. The status of that is that it depends on the glibc update pending in Staging:B and it still requires fixing a few packages, mostly -Werror related. There was a point in time where openQA was green for x86_64 (and Minimal-X). Once Staging:B has been accepted I'll formally … [View More]

9 21

[opensuse-factory] Unable to boot from latest Tumbleweed-iso
by Jogchum Reitsma 22 Jul '16

22 Jul '16

-- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

3 2

[opensuse-factory] NVMe based laptop?
by Greg Freemyer 08 Jul '16

08 Jul '16

Hoping to get access to a laptop with a NVMe / M.2 storage subsystem later today. (a Alienware laptop purchased in March or April). Note NVMe is not sata/scsi based. It's a different data bus. Does anyone know what device it should create? /dev/sda is for devices under the overarching SCSI driver including those handled by libata. I don't know if NVMe is layered under the SCSI driver or not? I'll try the latest Tumbleweed boot media with it via attaching an external DVD. Is this tech … [View More]

5 16

[opensuse-factory] New Tumbleweed snapshot 20160613 released!
by Dominique Leuenberger 06 Jul '16

06 Jul '16

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Packages changed: bluez cmake dhcp dracut evolution (3.20.2 -> 3.20.3) evolution-data-server (3.20.2 -> 3.20.3) evolution-ews (3.20.2 -> 3.20.3)… [View More] grub2 hwinfo (21.26 -> 21.27) libarchive (3.1.2 -> 3.2.0) libcares2 (1.10.0 -> 1.11.0) libgphoto2 libjpeg-turbo (1.4.2 -> 1.5.0) libjpeg62-turbo (62.1.0 -> 62.2.0) libsolv (0.6.21 -> 0.6.22) nghttp2 (1.10.0 -> 1.11.1) ntp (4.2.8p6 -> 4.2.8p8) patterns-openSUSE pciutils-ids (20160511 -> 20160607) plasma5-workspace rpcbind samba (4.4.2 -> 4.4.4) v4l-utils (1.8.1 -> 1.10.0) virtualbox wget (1.17.1 -> 1.18) wicked (0.6.35 -> 0.6.36) xdg-utils (20151219 -> 20160520) xf86-input-vmmouse xf86-video-qxl yast2-add-on (3.1.14 -> 3.1.15) yast2-installation (3.1.191 -> 3.1.193) yast2-network (3.1.152 -> 3.1.154) yast2-nis-client (3.1.12 -> 3.1.13) yast2-nis-server (3.1.3 -> 3.1.4) yast2-ntp-client (3.1.23 -> 3.1.25) yast2-packager (3.1.100 -> 3.1.102) yast2-printer (3.1.4 -> 3.1.6) yast2-sound (3.1.9 -> 3.1.10) yast2-sysconfig (3.1.3 -> 3.1.4) yast2-tftp-server (3.1.2 -> 3.1.3) yast2-transfer (3.1.2 -> 3.1.3) yast2-tune (3.1.7 -> 3.1.8) yast2-users (3.1.51 -> 3.1.52) === Details === ==== bluez ==== Subpackages: bluez-cups bluez-devel libbluetooth3 - Don't require systemd-devel but systemd-rpm-macros (bsc#983167) Bluez simply needs to know where the systemd default paths are, at build time. For that there's no need to build-require systemd or systemd-devel (and pull all theirs dependencies). Instead build-require systemd-rpm-macros, which has much less dependencies. ==== cmake ==== - Add libarchive-version.patch to fix version detecting for libarchive 3.2 ==== dhcp ==== Subpackages: dhcp-client dhcp-doc dhcp-relay dhcp-server - Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts. /sbin/arping is a symlink to /usr/sbin/arping in order to ease the transition for the /usr merge. Newest releases of iputils may only install utilities in /usr/* so this dependency will no longer be valid. Moreover, we replace the '/sbin/arping' dependency with 'iputils'. ==== dracut ==== - FCOE fix bsc#982588 * Add 0212-fcoe_reorder_init_path.patch - Port missing SLES patches * Add 0197-95iscsi-Do-not-require-network-for-qla4xxx-flash-ses.patch * Add 0198-95iscsi-set-rd.iscsi.firmware-for-qla4xxx-sessions.patch * Remove 0194-95iscsi-Do-not-require-network-for-qla4xxx-flash-ses.patch * Remove 0195-95iscsi-set-rd.iscsi.firmware-for-qla4xxx-sessions.patch - Rewrite patch: * Add 0302-Revert-90multipath-add-hostonly-multipath.conf-in-ca.patch * Remove 0001-multipath_revert_mpathconf_binary_use.patch - Update 0403-95lunmask-Add-module-to-handle-LUN-masking.patch to match upstream kernel submission (FATE#319786) - Add IFS restoring where it has been lost due to mainline merging (bsc#977117) * Add 0500-Reset-IFS-variable.patch - Make sure to install collect binary (bsc#976466) * Add: 0188-95dasd_rules-Install-collect-udev-helper-binary.patch - Remove version from requires on subpackage - Add a split provide because of the package split for SLE12 SP1 to SP2 upgrade - Forward port of latest SLES patches (fate#320499) Add: * 0001-multipath_revert_mpathconf_binary_use.patch (fate#320499) * 0170-iscsi-skip-ibft-invalid-dhcp.patch (bsc#953361) * 0160-s390-update_active_devices_initrd.patch (bsc#939101) * 0161-95zfcp_rules-simplified-rd.zfcp-commandline-for-NPIV.patch (bsc#964456) * 0190-replace-iscsistart-with-systemd-service-files.patch (fate#319024) * 0191-static_network_setup_return_zero.patch (bsc#919179) * 0192-iscsi_set_boot_protocol_from_ifcfg.patch (bsc#919179) * 0193-95iscsi-Set-number-of-login-retries.patch (bsc#951003) * 0196-ibft-wait-for-session-on-all-paths.patch (bsc#951003) * 0403-95lunmask-Add-module-to-handle-LUN-masking.patch (FATE#319786) Added, but still commented in spec file (still needs adjusting): - Fixup booting from qla4xxx (bsc#951003) * 0194-95iscsi-Do-not-require-network-for-qla4xxx-flash-ses.patch * 0195-95iscsi-set-rd.iscsi.firmware-for-qla4xxx-sessions.patch ==== evolution ==== Version update (3.20.2 -> 3.20.3) Subpackages: evolution-plugin-bogofilter evolution-plugin-pst-import evolution-plugin-spamassassin - Update to version 3.20.3: + Fix some issues found by Coverity Scan, cppcheck and clang. + Explicitly center attachment bar expander vertically. + Avoid NULL dereference in mail-send-recv.c:free_send_data() function. + EHTMLEditorActions: Paste Quotation action is always active. + EHTMLEditorImageDialog: Border and alignment are not set properly. + EHTMLEditorView: Background image from page is removed when saving draft. + Bugs fixed: bgo#766540, bgo#766713. + Updated translations. ==== evolution-data-server ==== Version update (3.20.2 -> 3.20.3) Subpackages: evolution-data-server-devel libcamel-1_2-57 libebackend-1_2-10 libebook-1_2-16 libebook-contacts-1_2-2 libecal-1_2-19 libedata-book-1_2-25 libedata-cal-1_2-28 libedataserver-1_2-21 libedataserverui-1_2-1 typelib-1_0-EBook-1_2 typelib-1_0-EBookContacts-1_2 typelib-1_0-EDataServer-1_2 - Update to version 3.20.3: + [IMAPx]: 'STARTTLS not supported' error ignored. + Fix some issues found by Coverity Scan, cppcheck and clang. + e-webdav-discover-widget: Show all supported types for the source in the table. + Fix two memory leaks. + Bugs fixed: bgo#740627, bgo#766747, bgo#767056, bgo#767134. + Updated translations. - Update to GNOME 3.20.2 Fate#318572 ==== evolution-ews ==== Version update (3.20.2 -> 3.20.3) Subpackages: evolution-ews-lang libeews-1_2-0 libewsutils0 - Update to version 3.20.3: + Fix some issues found by Coverity Scan. + Initialize connection variable to NULL in camel_ews_folder_get_message(). + Bugs fixed: bgo#766021, bgo#767030. ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - update grub2-once with patch from Bj�rn Voigt - skip comments in /etc/sysconfig/bootloader (boo#963610) ==== hwinfo ==== Version update (21.26 -> 21.27) Subpackages: hwinfo-devel - add aliases with '-' for options with '_' (bsc#983004) - clarify hwinfo usage in man page and help text (bsc#982332) - 21.27 ==== libarchive ==== Version update (3.1.2 -> 3.2.0) Subpackages: bsdtar libarchive-devel libarchive13 - 4GB _constraints for ppc64le only, it would break other archs - update to version 3.2.0 * Fixes CVE-2016-1541 * changes are only documented in git history * updated openssl patch * new bsdcat utility - removed obsolete patches for: * CVE-2013-0211.patch * directory-traversal-fix.patch * libarchive-xattr.patch - add _constraints memory 4096MB to avoid ppc64le build failure ==== libcares2 ==== Version update (1.10.0 -> 1.11.0) - update to 1.11.0: * Allow multiple -s options to the ahost command * api: Expose the ares_library_initialized() function * api: Add ares_set_sortlist(3) entrypoint * api: Add entrypoints to allow use of per-server ports * api: introduce `ares_parse_txt_reply_ext` * api: Add ares_set_socket_configure_callback() * Add -t u option to ahost * collection of bug fixes ==== libgphoto2 ==== Subpackages: libgphoto2-6 libgphoto2-6-32bit libgphoto2-devel - require: udev in the library package for the hwdb refresher bsc#982339 - libgphoto2-newjpeg.patch: jpeg_mem_src gets a const buffer now in new libjpeg-turbo. ==== libjpeg-turbo ==== Version update (1.4.2 -> 1.5.0) Subpackages: libjpeg8 libjpeg8-32bit libturbojpeg0 - Update to version 1.5.0 + Fixed an issue whereby a malformed motion-JPEG frame could cause the "fast path" of libjpeg-turbo's Huffman decoder to read from uninitialized memory. + Added libjpeg-turbo version and build information to the global string table of the libjpeg and TurboJPEG API libraries. + Fixed a couple of issues in the PPM reader that would cause buffer overruns in cjpeg if one of the values in a binary PPM/PGM input file exceeded the maximum value defined in the file's header. libjpeg-turbo 1.4.2 already included a similar fix for ASCII PPM/PGM files. Note that these issues were not security bugs, since they were confined to the cjpeg program and did not affect any of the libjpeg-turbo libraries. + Fixed an issue whereby attempting to decompress a JPEG file with a corrupt header using the tjDecompressToYUV2() function would cause the function to abort without returning an error and, under certain circumstances, corrupt the stack. This only occurred if tjDecompressToYUV2() was called prior to calling tjDecompressHeader3(), or if the return value from tjDecompressHeader3() was ignored (both cases represent incorrect usage of the TurboJPEG API.) + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(), and jpeg_mem_dest() functions in the libjpeg API will now throw an error if a source/destination manager has already been assigned to the compress or decompress object by a different function or by the calling program. ==== libjpeg62-turbo ==== Version update (62.1.0 -> 62.2.0) Subpackages: libjpeg62 libjpeg62-devel - Update to version 1.5.0 + Fixed an issue whereby a malformed motion-JPEG frame could cause the "fast path" of libjpeg-turbo's Huffman decoder to read from uninitialized memory. + Added libjpeg-turbo version and build information to the global string table of the libjpeg and TurboJPEG API libraries. + Fixed a couple of issues in the PPM reader that would cause buffer overruns in cjpeg if one of the values in a binary PPM/PGM input file exceeded the maximum value defined in the file's header. libjpeg-turbo 1.4.2 already included a similar fix for ASCII PPM/PGM files. Note that these issues were not security bugs, since they were confined to the cjpeg program and did not affect any of the libjpeg-turbo libraries. + Fixed an issue whereby attempting to decompress a JPEG file with a corrupt header using the tjDecompressToYUV2() function would cause the function to abort without returning an error and, under certain circumstances, corrupt the stack. This only occurred if tjDecompressToYUV2() was called prior to calling tjDecompressHeader3(), or if the return value from tjDecompressHeader3() was ignored (both cases represent incorrect usage of the TurboJPEG API.) + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(), and jpeg_mem_dest() functions in the libjpeg API will now throw an error if a source/destination manager has already been assigned to the compress or decompress object by a different function or by the calling program. ==== libsolv ==== Version update (0.6.21 -> 0.6.22) Subpackages: libsolv-devel libsolv-tools perl-solv python-solv - fix bug in ignoreinst logic [bnc#983141] ==== nghttp2 ==== Version update (1.10.0 -> 1.11.1) - Update to 1.11.1 * lib: Add nghttp2_hd_inflate_hd2() and deprecate nghttp2_hd_inflate_hd() * lib: Avoid 0-length DATA if NGHTTP2_DATA_FLAG_NO_END_STREAM is set * lib: Fix bug that PING flags are ignored in nghttp2_submit_ping * integration: Workaround runtime error: cgo argument has Go pointer to Go pointer * nghttp: Eliminate zero length DATA frame at the end if possible * nghttpd: Set content-length in status response * nghttpx: Add sni keyword to --backend option * nghttpx: Allow mixed protocol and TLS settings among backends under same pattern * nghttpx: Don't add 0-length DATA when response HEADERS bears END_STREAM flag * nghttpx: Don't add chunked encoded response body for HEAD request * nghttpx: Don't use CN if we have dNSName or iPAddress field * nghttpx: Just call execv instead of execve to pass environ * nghttpx: Make SETTINGS timeout value configurable * nghttpx: Save PID file after it is ready to accept connections * nghttpx: Treat backend failure if SETTINGS is not received within timeout * nghttpx: Wait for SETTINGS ACK to make sure that backend h2 server is alive ==== ntp ==== Version update (4.2.8p6 -> 4.2.8p8) Subpackages: ntp-doc - Keep the parent process alive until the daemon has finished initialisation, to make sure that the PID file exists when the parent returns (ntp-daemonize.patch). - Update to 4.2.8p8 (bsc#982056): * CVE-2016-4953, bsc#982065: Bad authentication demobilizes ephemeral associations. * CVE-2016-4954, bsc#982066: Processing spoofed server packets. * CVE-2016-4955, bsc#982067: Autokey association reset. * CVE-2016-4956, bsc#982068: Broadcast interleave. * CVE-2016-4957, bsc#982064: CRYPTO_NAK crash. - Change the process name of the forking DNS worker process to avoid the impression that ntpd is started twice. (bsc#979302, ntp-processname.patch). - Don't ignore SIGCHILD because it breaks wait() (boo#981422, ntp-sigchld.patch). - ntp-wait does not accept fractional seconds, so use 1 instead of 0.2 in ntp-wait.service (boo#979981). - Separate the creation of ntp.keys and key #1 in it to avoid problems when upgrading installations that have the file, but no key #1, which is needed e.g. by "rcntp addserver". - Fix the TZ offset output of sntp during DST. (bsc#951559, ntp-sntp-dst.patch) - Add /var/db/ntp-kod (bsc#916617). - Add ntp-ENOBUFS.patch to limit a warning that might happen quite a lot on loaded systems (bsc#956773). - Don't wait for 11 minutes to restart ntpd when it has died (boo#894031). - Update to 4.2.8p7 (bsc#977446): * CVE-2016-1547, bsc#977459: Validate crypto-NAKs, AKA: CRYPTO-NAK DoS. * CVE-2016-1548, bsc#977461: Interleave-pivot * CVE-2016-1549, bsc#977451: Sybil vulnerability: ephemeral association attack. * CVE-2016-1550, bsc#977464: Improve NTP security against buffer comparison timing attacks. * CVE-2016-1551, bsc#977450: Refclock impersonation vulnerability * CVE-2016-2516, bsc#977452: Duplicate IPs on unconfig directives will cause an assertion botch in ntpd. * CVE-2016-2517, bsc#977455: remote configuration trustedkey/ requestkey/controlkey values are not properly validated. * CVE-2016-2518, bsc#977457: Crafted addpeer with hmode > 7 causes array wraparound with MATCH_ASSOC. * CVE-2016-2519, bsc#977458: ctl_getitem() return value not always checked. * integrate ntp-fork.patch * Improve the fixes for: CVE-2015-7704, CVE-2015-7705, CVE-2015-7974 - Restrict the parser in the startup script to the first occurrance of "keys" and "controlkey" in ntp.conf (boo#957226). - Depend on pps-tools-devel to provide timepps.h header to enable Linux PPSAPI support to make GPS devices usefull. (boo#977563) ==== patterns-openSUSE ==== Subpackages: patterns-openSUSE-apparmor patterns-openSUSE-apparmor_opt patterns-openSUSE-base patterns-openSUSE-books patterns-openSUSE-console patterns-openSUSE-devel_C_C++ patterns-openSUSE-devel_basis patterns-openSUSE-devel_gnome patterns-openSUSE-devel_ide patterns-openSUSE-devel_java patterns-openSUSE-devel_kde patterns-openSUSE-devel_kde_frameworks patterns-openSUSE-devel_kernel patterns-openSUSE-devel_osc_build patterns-openSUSE-devel_perl patterns-openSUSE-devel_python patterns-openSUSE-devel_qt4 patterns-openSUSE-devel_qt5 patterns-openSUSE-devel_rpm_build patterns-openSUSE-devel_ruby patterns-openSUSE-devel_web patterns-openSUSE-dhcp_dns_server patterns-openSUSE-directory_server patterns-openSUSE-enhanced_base patterns-openSUSE-enhanced_base_opt patterns-openSUSE-file_server patterns-openSUSE-fonts patterns-openSUSE-fonts_opt patterns-openSUSE-games patterns-openSUSE-gateway_server patterns-openSUSE-gnome patterns-openSUSE-gnome_admin patterns-openSUSE-gnome_basis patterns -openSUSE-gnome_basis_opt patterns-openSUSE-gnome_games patterns-openSUSE-gnome_ide patterns-openSUSE-gnome_imaging patterns-openSUSE-gnome_imaging_opt patterns-openSUSE-gnome_internet patterns-openSUSE-gnome_laptop patterns-openSUSE-gnome_multimedia patterns-openSUSE-gnome_multimedia_opt patterns-openSUSE-gnome_office patterns-openSUSE-gnome_office_opt patterns-openSUSE-gnome_utilities patterns-openSUSE-gnome_yast patterns-openSUSE-imaging patterns-openSUSE-imaging_opt patterns-openSUSE-kde patterns-openSUSE-kde_edutainment patterns-openSUSE-kde_games patterns-openSUSE-kde_ide patterns-openSUSE-kde_imaging patterns-openSUSE-kde_internet patterns-openSUSE-kde_multimedia patterns-openSUSE-kde_office patterns-openSUSE-kde_plasma patterns-openSUSE-kde_telepathy patterns-openSUSE-kde_utilities patterns-openSUSE-kde_utilities_opt patterns-openSUSE-kde_yast patterns-openSUSE-kvm_server patterns-openSUSE-lamp_server patterns-openSUSE-laptop patterns-openSUSE-lxde patterns-openSUSE-lxde_lap top patterns-openSUSE-lxde_office patterns-openSUSE-mail_server patterns-openSUSE-minimal_base patterns-openSUSE-minimal_base-conflicts patterns-openSUSE-misc_server patterns-openSUSE-multimedia patterns-openSUSE-multimedia_opt patterns-openSUSE-network_admin patterns-openSUSE-non_oss patterns-openSUSE-non_oss_opt patterns-openSUSE-office patterns-openSUSE-office_opt patterns-openSUSE-print_server patterns-openSUSE-remote_desktop patterns-openSUSE-rest_dvd patterns-openSUSE-sw_management patterns-openSUSE-sw_management_gnome patterns-openSUSE-sw_management_kde patterns-openSUSE-tabletpc patterns-openSUSE-technical_writing patterns-openSUSE-x11 patterns-openSUSE-x11_opt patterns-openSUSE-x11_yast patterns-openSUSE-xen_server patterns-openSUSE-xfce patterns-openSUSE-xfce_basis patterns-openSUSE-xfce_laptop patterns-openSUSE-xfce_office patterns-openSUSE-yast2_basis patterns-openSUSE-yast2_install_wf - Add LightDM to enlightenment pattern (boo#951558) - Add a note about obconf-qt in lxqt pattern. - Add qterminal recommends to lxqt pattern. - Remove comments that do not make sense - Remove pm-utils -> obsoleted by systemd - Remove tmpwatch -> now handled by systemd - Do not suggest and recommend elilo -> we have grub2 only supported - Do not recommend gfxboot -> we have grub2 ==== pciutils-ids ==== Version update (20160511 -> 20160607) - Update to 20160607 ==== plasma5-workspace ==== Subpackages: drkonqi5 plasma5-workspace-devel plasma5-workspace-libs - Add missing Requires: in branding subpackage (boo#968427) - Run fdupes to compact duplicate files ==== rpcbind ==== - Do not rely on systemd.pc to find out where systemd unit dir is located (bsc#983167) systemd.pc is part of systemd main package now. Instead of build-requiring systemd, import systemd-rpm-macros which has the %{_unitdir} definition and much less dependencies than systemd and use it when configuring rpcbind so it won't try to find the unit dir by using pkg-config. Also replace BR libsystemd-daemon by libsystemd since the former is obsolete and is replaced by the later. ==== samba ==== Version update (4.4.2 -> 4.4.4) Subpackages: libdcerpc-binding0 libdcerpc-binding0-32bit libdcerpc0 libdcerpc0-32bit libndr-krb5pac0 libndr-krb5pac0-32bit libndr-nbt0 libndr-nbt0-32bit libndr-standard0 libndr-standard0-32bit libndr0 libndr0-32bit libnetapi0 libnetapi0-32bit libsamba-credentials0 libsamba-credentials0-32bit libsamba-errors0 libsamba-errors0-32bit libsamba-hostconfig0 libsamba-hostconfig0-32bit libsamba-passdb0 libsamba-passdb0-32bit libsamba-util0 libsamba-util0-32bit libsamdb0 libsamdb0-32bit libsmbclient-devel libsmbclient0 libsmbconf0 libsmbconf0-32bit libsmbldap0 libsmbldap0-32bit libtevent-util0 libtevent-util0-32bit libwbclient0 libwbclient0-32bit samba-client samba-client-32bit samba-doc samba-libs samba-libs-32bit samba-winbind samba-winbind-32bit - Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934). - Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852). ==== v4l-utils ==== Version update (1.8.1 -> 1.10.0) Subpackages: libv4l libv4l-devel libv4l1-0 libv4l1-0-32bit libv4l2-0 libv4l2-0-32bit libv4l2rds0 libv4lconvert0 libv4lconvert0-32bit - Run over with spec-cleaner - Update to version 1.10.0: * Lots of changes: See ChangeLog for details. ==== virtualbox ==== Subpackages: virtualbox-guest-kmp-default virtualbox-guest-tools virtualbox-guest-x11 virtualbox-host-kmp-default virtualbox-qt - Add file "vbox-4.7.patch" to all builds on Kernel_HEAD_standard/x86_64 now that 4.7-rcX is released. ==== wget ==== Version update (1.17.1 -> 1.18) - GNU wget 1.18: * On server redirects to a FTP resource, use the original URL to get the local file name by default. CVE-2016-4971 (boo#984060) This introduces a backward-incompatibility for HTTP->FTP redirects and any script that relies on the old behaviour must use --trust-server-names. * Check the HSTS file is not world-writable before using it. * Parse <img srcset> attributes on a recursive download. * Fix problem with SNI server names having trailing dot(s) * New options --bind-dns-address and --dns-servers. * Convert non-ASCII URIs to the locale's codeset when creating files. Encoding of remote files and URIs is taken from - -remote-encoding, defaulting to UTF-8. The result is that non-ASCII URIs and files downloaded via HTTP/HTTPS and FTP will have names on the local filesystem that correspond to their remote names. - build with gpgme, libcares2 ==== wicked ==== Version update (0.6.35 -> 0.6.36) Subpackages: libwicked-0-6 wicked-service - version 0.6.36 - ifreload: make output more informative (bsc#982952) - rules: do not fail when kernel support is missed (bsc#981887) - nanny: reapply policies on device renames (bsc#973355) - iflist: fixed macvlan/macvtap link info data parsing - auto6: apply rdnss/dnssl and wait for autoconf (bsc#902897,boo#916613) ==== xdg-utils ==== Version update (20151219 -> 20160520) - Update to 20160520 * xdg-mime: support for KDE Frameworks 5.6 * xdg-mime does not write the file it reads in a query (BR95051) * xdg-screensaver: Add cinnamon-screensaver D-Bus API support. * xdg-open: standardize output redirection style - Fix issues related to xdg-open/xdg-mime generic code paths. * common-vendor-dirs-in-desktop_to_binary.patch * xdg-mime-return-existing-desktop-files.patch ==== xf86-input-vmmouse ==== - u_conf-rename-to-70-vmmouse.conf.patch * renamed config file to give it higher prio than libinput; relevant only for older kernels; on newer kernels vmmouse driver isn't loaded at all (bnc#983702, comment#20) ==== xf86-video-qxl ==== - renamed u_xf86-video-qxl-spiceccid-build.patch to U_xf86-video-qxl-spiceccid-build.patch, since the fix is already upstream (git #ebd5ef7c18d7c361a31d530b307d36217cc68428) ==== yast2-add-on ==== Version update (3.1.14 -> 3.1.15) - Drop yast2-add-on-devel-doc package (fate#320356). - 3.1.15 ==== yast2-installation ==== Version update (3.1.191 -> 3.1.193) - Adapt AutoYaST to support import of SSH server keys/configuration (fate#319624) - 3.1.193 - Drop yast2-installation-devel-doc package (fate#320356) - 3.1.192 ==== yast2-network ==== Version update (3.1.152 -> 3.1.154) - Drop yast2-network-devel-doc package (fate#320356) - 3.1.154 - bnc#981842 - enable / disable vncmanager only when installed to avoid failures in systemd calls - 3.1.153 ==== yast2-nis-client ==== Version update (3.1.12 -> 3.1.13) - Drop yast2-nis-client-devel-doc package (fate#320356) - 3.1.13 ==== yast2-nis-server ==== Version update (3.1.3 -> 3.1.4) - Drop yast2-nis-server-devel-doc package (fate#320356) - 3.1.4 ==== yast2-ntp-client ==== Version update (3.1.23 -> 3.1.25) - Fixed Ntp Test adding a workaround to return false in case given server is not reachable (bsc#977610) - Replaced old testsuite with Rspec tests - Added rubocop and coveralls - Removed autotools - 3.1.25 - Drop yast2-ntp-client-devel-doc package (fate#320256) - 3.1.24 ==== yast2-packager ==== Version update (3.1.100 -> 3.1.102) - Drop yast2-packager-devel-doc (fate#320356) - 3.1.102 - fixed parsing of patterns in content file (bsc#980718) - 3.1.101 ==== yast2-printer ==== Version update (3.1.4 -> 3.1.6) - Drop yast2-printer-devel-doc package (fate#320356) - 3.1.6 - Remove /bin/ping dependency. All references to 'ping' have been removed in 3.1.2. This allows us to not depend to iputils anymore. - 3.1.5 ==== yast2-sound ==== Version update (3.1.9 -> 3.1.10) - Drop yast2-sound-devel-doc package (fate#320356) - 3.1.10 ==== yast2-sysconfig ==== Version update (3.1.3 -> 3.1.4) - Drop yast2-sysconfig-devel-doc package (fate#320356) - 3.1.4 ==== yast2-tftp-server ==== Version update (3.1.2 -> 3.1.3) - Stop generating autodocs (fate#320356) - 3.1.3 ==== yast2-transfer ==== Version update (3.1.2 -> 3.1.3) - Drop yast2-transfer-devel-doc package (fate#320356) - 3.1.3 ==== yast2-tune ==== Version update (3.1.7 -> 3.1.8) - Removed devel-doc package (fate#320356) - 3.1.8 ==== yast2-users ==== Version update (3.1.51 -> 3.1.52) - Removed devel-doc package (fate#320356) - 3.1.52 -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org [View Less]

2 1

[opensuse-factory] How do I suppress the flashing cursor before plymouth starts up
by Roman Bysh 06 Jul '16

06 Jul '16

Hi all, Does anyone know how to suppress the annoying flashing cursor at the top-left corner of the screen - just before plymouth starts up? I would like to submit a bug report. Is this systemd? Cheers! Roman IRC: 551368250 ============== -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

6 18

Main

Development

Information

Community

Social Media

Other

openSUSE Factory