August 2017 - openSUSE Factory - openSUSE Mailing Lists

[opensuse-factory] New Tumbleweed snapshot 20170822 released!
by Dominique Leuenberger 23 Aug '17

23 Aug '17

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… When you reply to report some issues, make sure to change the subject. It is not helpful to keep the release announcement subject in a thread while discussing a specific problem. Packages changed: abcde (2.7.2 -> 2.8.1) dracut fcitx-configtool kcm5-fcitx libunistring libyui-qt (2.47.2 -> 2.47.3) lz4 opal openssl-1_0_0 python-pyasn1 (0.3.1 -> 0.3.2) python-pyasn1-modules (0.0.10 -> 0.0.11) python-rpm-macros (2017.06.29.107ac7a -> 2017.08.09.32550d0) remmina xiterm === Details === ==== abcde ==== Version update (2.7.2 -> 2.8.1) - Update to version 2.8.1 * Fix silly error introduced in abcde-musicbrainz-tool when fixing bug 30. Thanks to Thomas Klausner for the bug/patch. Closes Issue 52: https://abcde.einval.com/bugzilla/show_bug.cgi?id=52 version 2.8: * Make fdkaac the default for m4a encoding. Faac can still be selected for m4a encding via ~/.abcde.conf file but best not to :). * Split user-definable mungefilename function into mungetrackname, mungeartistname, and mungealbumname, each of which default to mungefilename Thanks to Gerald Turner for the patch and enhancement request. This closes Issue 39: https://abcde.einval.com/bugzilla/show_bug.cgi?id=39 * FAQs: Clarify the exit from multi-result CDDB search. * Fix to allow multiple output formats when aac fallback is triggered. Thanks to Birk Bremer for the bug report. This closes Issue 35: https://abcde.einval.com/bugzilla/show_bug.cgi?id=35 * Fix for some erroneous error and status logging. Thanks to Christian Wasem for the bug report and fix. This closes Issue 32: https://abcde.einval.com/bugzilla/show_bug.cgi?id=32 * Add support for trying multiple CD lookup services in order. Thanks to Gabriel Rosenkoetter for the patch. Closes Issue 42: https://abcde.einval.com/bugzilla/show_bug.cgi?id=42 * Add Recommends on glyrc and imagemagick in Debian packaging. Closes Debian Bug #827626 * Fix up handling of the first few sectors when reading from a whole-CD flac file or using cdparanoia in one-track mode. Thanks to Matthias K�nig for the patch. Closes Issue 44: https://abcde.einval.com/bugzilla/show_bug.cgi?id=44 * Tweak the fix in musicbrainz for handling sketchy returned data some more. Hopefully closes Issue 30: https://abcde.einval.com/bugzilla/show_bug.cgi?id=30 * Re-enable some commented out cdparanoia/debug code in do_discid. Closes Issue 14: https://abcde.einval.com/bugzilla/show_bug.cgi?id=14 * Add "-a" to lots of grep calls in case of "binary" looking data, e.g. non-ascii text in track titles! Closes Issue 24: https://abcde.einval.com/bugzilla/show_bug.cgi?id=24 * Add "-L" to default curl options, to follow redirects if needed. Closes Issue 40: https://abcde.einval.com/bugzilla/show_bug.cgi?id=40 Thanks to Gabriel Rosenkoetter for the patch. * Switch default from "cddb" to "musicbrainz" for track lookup Closes Debian Bug #842178 ==== dracut ==== - Ensure that targets such as halt can be reached (bsc#1048698) * adds 0529-systemd-add-missing-.slice-unit.patch * adds 0530-dracut-systemd-dracut-cmdline-ask-fix-dracut-kernel-.patch * adds 0531-dracut-systemd-.service-conflict-with-shutdown-targe.patch - Do not add too many drivers all at once (bsc#1037344) * adds 0532-List-drivers-rather-than-looking-for-reverse-depende.patch - instmods: check modules.builtin in $srcmods (bsc#1048606) * adds 0533-instmods-check-modules.builtin-in-srcmods.patch - ssh-client: ensure is usable in all cases (bsc#1021846) * adds 0534-ssh-client-Include-nss_-libraries.patch - Sync initramfs after creation to ensure entigrity (bsc#1049113) * adds 0535-Sync-initramfs-after-creation.patch ==== fcitx-configtool ==== - Drop conditional libunique-devel, libunique1-devel, dbus-glib-devel and unique-devel BuildRequires: Obsolete and unused, keeping just dbus-1-glib-devel is sufficient. ==== kcm5-fcitx ==== Subpackages: kf5-kcm-fcitx kf5-kcm-fcitx-icons - Drop conditional libunique-devel and libunique1-devel BuildRequires: Obsolete and unused. ==== libunistring ==== Subpackages: libunistring2 libunistring2-32bit - try to not run tests in parallel, make check stucks randomly ==== libyui-qt ==== Version update (2.47.2 -> 2.47.3) - Removed an obsolete non-working Qt initialization hack (bsc#1053873) - 2.47.3 ==== lz4 ==== Subpackages: liblz4-1 liblz4-1-32bit liblz4-devel - Use official upstream repository; (boo#1053910) ==== opal ==== - Don't build capi4linux support on SLE15 (FATE#323348). ==== openssl-1_0_0 ==== Subpackages: libopenssl-1_0_0-devel libopenssl1_0_0 libopenssl1_0_0-32bit - Do not require openssl-1_0_0-targettype, as it will not be generated and is not needed. ==== python-pyasn1 ==== Version update (0.3.1 -> 0.3.2) Subpackages: python2-pyasn1 python3-pyasn1 - updated to upstream release 0.3.2 Revision 0.3.2, released 04-08-2017 - Fixed SequenceOf/SetOf types initialization syntax to remain backward compatible with pyasn1 0.2.* - Rectified thread safety issues by moving lazy, run-time computation into object initializer. - Fixed .isValue property to return True for empty SetOf/SequenceOf objects - Fixed GeneralizedTime/UTCTime CER/DER codecs to actually get invoked - Fixed DER/CER encoders handling optional SEQUENCE/SET fields containing nested SEQUENCE/SET with optional fields. - Fixed crash in SequenceOf/SetOf pretty printing and decoding (in some cases) - Fixed documentation markup issues. ==== python-pyasn1-modules ==== Version update (0.0.10 -> 0.0.11) - Update to upstream release 0.0.11 * Fixed typo in ASN.1 definitions at rfc2315.py ==== python-rpm-macros ==== Version update (2017.06.29.107ac7a -> 2017.08.09.32550d0) - version bump to 2017.08.09.32550d0 - use %_specfile macro to locate the spec file, this should help with factory-auto bot problems as well as issue#3 ==== remmina ==== Subpackages: remmina-lang remmina-plugin-rdp remmina-plugin-vnc remmina-plugin-xdmcp - Drop obsolete and unused pkgconfig(unique-1.0) BuildRequires. ==== xiterm ==== Subpackages: fbiterm gtkiterm libiterm1 - Prerequire group(tty) -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

1 0

[opensuse-factory] New Tumbleweed snapshot 20170821 released!
by Dominique Leuenberger 22 Aug '17

22 Aug '17

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… When you reply to report some issues, make sure to change the subject. It is not helpful to keep the release announcement subject in a thread while discussing a specific problem. Packages changed: coreutils geany (1.30.1 -> 1.31) git (2.14.0 -> 2.14.1) gutenprint (5.2.11 -> 5.2.12) ilmbase krb5 libexif libfabric (1.4.2 -> 1.5.0) m17n-lib obs-service-source_validator (0.6+git20170719.d4384e5 -> 0.6+git20170811.369eb25) pam-config (0.91 -> 0.92) perl-HTTP-Cookies (6.03 -> 6.04) wine (2.14 -> 2.15) ypbind === Details === ==== coreutils ==== - Drop coreutils-ocfs2_reflinks.patch OCFS2 file system has supported file clone ioctls like btrfs, then, coreutils doesn't need this patch from the kernel v4.10-rc1 ==== geany ==== Version update (1.30.1 -> 1.31) Subpackages: geany-lang libgeany0 - Update description. - Update to version 1.31 + Bug fixes: - Update statusbar after applying indentation detection. - Fix converting color to hex for insertion in the Color Chooser dialog. + Filetypes: - Add `parfor` to the Matlab keyword list. - C: fix line continuation handling. - Add `require_relative` to the Ruby keyword list. - Update Haxe keywords. - Fix Arduino comment toggling. - Update CMake keywords. - Update C# keywords. - Update HTML keywords. + API: Fix crash when calling plugin_set_key_group() more than once. + Updated translations. - Refresh spec-file, run spec-cleaner. ==== git ==== Version update (2.14.0 -> 2.14.1) Subpackages: git-core git-cvs git-daemon git-email git-gui git-svn git-web gitk - git 2.14.1 (bsc#1052481): * Security fix for CVE-2017-1000117: A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL can result in any program that exists on the victim's machine being executed. Such a URL could be placed in the .gitmodules file of a malicious project, and an unsuspecting victim could be tricked into running "git clone --recurse-submodules" to trigger the vulnerability. * A "ssh://..." URL can result in a "ssh" command line with a hostname that begins with a dash "-", which would cause the "ssh" command to instead (mis)treat it as an option. This is now prevented by forbidding such a hostname (which should not impact any real-world usage). * Similarly, when GIT_PROXY_COMMAND is configured, the command is run with host and port that are parsed out from "ssh://..." URL; a poorly written GIT_PROXY_COMMAND could be tricked into treating a string that begins with a dash "-" as an option. This is now prevented by forbidding such a hostname and port number (again, which should not impact any real-world usage). * In the same spirit, a repository name that begins with a dash "-" is also forbidden now. ==== gutenprint ==== Version update (5.2.11 -> 5.2.12) - Drop default configure options that do not need to be overriden - Drop again static libraries that are forbidden by default - Switch check to proper check phase to allow --no-check override - Pass disable-silent-rules to see all the compile options for brp parsers - Switch to full URL for sources to have autodownload/tarball verification working - Make sure the tests are forced on during configure phase - Drop initial rm in install phase as we by default have empty dir courtesy of OBS - Remove libtool archives as they are not supposed to be shipped on today packages - Have libgutenprint.a and libgutenprintui2.a in the gutenprint-devel sub-packege. - Version upgrade to 5.2.12: For major changes in this release (compared to 5.2.11) see the next entry dated "Tue Sep 20 15:09:34 CEST 2016". For details see the NEWS file. - Version upgrade to 5.2.11pre12.2 which is the second pre-release of Gutenprint 5.2.12. Major changes in this release (compared to 5.2.11): * The Ghostscript IJS driver and Foomatic data generator have been removed. CUPS is ubiquitous on Linux/UNIX systems, and the Ghostscript IJS driver and Foomatic data are not needed with CUPS. * Added support for some dye sublimation printers. * Improved support (and bugfixes) for several dye sublimation printers. * Backend now reports media status via standard CUPS marker attributes some particular dye sublimation printers. * Added support for some Epson inkjet printers. * Added support for most Datamax-O'Neil DPL printers. For details see the NEWS file. ==== ilmbase ==== Subpackages: ilmbase-devel libHalf12 libIex-2_2-12 libIexMath-2_2-12 libIlmThread-2_2-12 libImath-2_2-12 - Fix RPM groups. Diversify summaries. - Drop useless --with-pic, this is only for static libs. - simplify check section in specfile and remove hack for gcc45 - add patches from debian to allow testsuite to pass - testBox.patch allow fuzzy comparison of floats, doubles - testBoxAlgo.patch allow fuzzy match of b12 == b2 ==== krb5 ==== Subpackages: krb5-32bit krb5-client krb5-devel - Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf in order to improve client security in handling service principle names. (bsc#1054028) - Prevent kadmind.service startup failure caused by absence of LDAP service. (bsc#903543) ==== libexif ==== Subpackages: libexif-devel libexif12 libexif12-32bit - add a libexif-devel-biarch for building with -m32 ==== libfabric ==== Version update (1.4.2 -> 1.5.0) - Update to v1.5.0 * Authorization keys Authorization keys, commonly referred to as job keys, are used to isolate processes from communicating with other processes for security purposes. * Multicast support Datagram endpoints can now support multicast communication. * (Experimental) socket-like endpoint types New FI_SOCK_STREAM and FI_SOCK_DGRAM endpoint types are introduced. These endpoint types target support of cloud and enterprise based middleware and applications. * Tagged atomic support Atomic operations can now target tagged receive buffers, in addition to RMA buffers. * (Experimental) deferred work queues Deferred work queues are enhanced triggerred operations. They target support for collective-based operations. * New mode bits: FI_RESTRICTED_COMP and FI_NOTIFY_FLAGS_ONLY These mode bits support optimized completion processing to minimize software overhead. * Multi-threaded error reporting Reading CQ and EQ errors now allow the application to provide the error buffer, eliminating the need for the application to synchronize between multiple threads when handling errors. * FI_SOURCE_ERR capability This feature allows the provider to validate and report the source address for any received messages. * FI_ADDR_STR string based addressing Applications can now request and use addresses provided using a standardized string format. This makes it easier to pass full addressing data through a command line, or handle address exchange through text files. * Communication scope capabilities: FI_LOCAL_COMM and FI_REMOTE_COMM Used to indicate if an application requires communication with peers on the same node and/or remote nodes. * New memory registration modes The FI_BASIC_MR and FI_SCALABLE_MR memory registration modes have been replaced by more refined registration mode bits. This allows applications to make better use of provider hardware capabilities when dealing with registered memory regions. * New mode bit: FI_CONTEXT2 Some providers need more than the size provided by the FI_CONTEXT mode bit setting. To accomodate such providers, an FI_CONTEXT2 mode bit was added. This mode bit doubles the amount of context space that an application allocates on behalf of the provider. * PSM provider notes * Improve the name server functionality and move to the utility code * Handle updated mr_mode definitions * Add support of 32 and 64 bit atomic values * PSM2 provider notes * Add option to adjust the locking level * Improve the name server functionality and move to the utility code * Add support for string address format * Add an environment vaiable for message inject size * Handle FI_DISCARD in tagged receive functions * Handle updated mr_mode definitions * Add support for scalable endpoint * Add support of 32 and 64 bit atomic values * Add FI_SOURCE_ERR to the supported caps * Improve the method of checking device existence * Sockets provider notes * Updated and enhanced atomic operation support. * Add support for experimental deferred work queue operations. * Fixed counter signaling when used with wait sets. * Improved support on Windows. * Cleaned up event reporting for destroyed endpoints. * Fixed several possible crash scenarios. * Fixed handling socket disconnect events which could hang the provider. * UDP provider notes * Add support for multicast data transfers * Verbs provider notes * Fix an issue where if the user requests higher values for tx, rx context sizes than default it wasn't honored. * Introduce env variables for setting default tx, rx context sizes and iov limits. * Report correct completion ordering supported by MSG endpoints. - Fix rpmbuild warnings - libfabric-devel requires libfabric1, not libfabric - Fix baselibs.conf ==== m17n-lib ==== - Fix RPM groups. - Drop ispell dependency wrt fate#323578 rh dropped the same subpkg in 2011 - Cleanup the dependencies to not pull in full x11 suite and depend only on the required libs - Build with --as-needed - Format with spec-cleaner ==== obs-service-source_validator ==== Version update (0.6+git20170719.d4384e5 -> 0.6+git20170811.369eb25) - Update to version 0.6+git20170811.369eb25: * ignore expand errors with macro scripts - Update to version 0.6+git20170809.6818366: * Ignore not referenced appimage.yml file * Don't use rpmbuild to extract sources, patches etc. from a spec (bnc#938556 CVE-2017-9274) ==== pam-config ==== Version update (0.91 -> 0.92) - Update to version 0.92 - add pam_kwallet5 support - move pam_systemd before pam_krb5 [bsc#1014995] - obsoletes gcc7-Add-break-to-a-case-label.patch ==== perl-HTTP-Cookies ==== Version update (6.03 -> 6.04) - updated to 6.04 see /usr/share/doc/packages/perl-HTTP-Cookies/Changes 6.04 2017-08-03 15:05:22Z - Fix package version numbers ==== wine ==== Version update (2.14 -> 2.15) Subpackages: wine-32bit - Update to 2.15 development snapshot - Support for AES encryption. - Improved Bezier support in Direct2D. - Chunked transfer improvements in WinInet. - Various bug fixes. - updated winetricks ==== ypbind ==== - Adjust list of to be installed docu files -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

1 0

[opensuse-factory] mutt or neomutt in Leap 42.3? "throw me a frickin bone"
by Daniel Morris 22 Aug '17

22 Aug '17

Descending down the rabbit hole to work out why my email has seemed (a lot) quieter than usual, I've realised that most new mail in (procmail filtered) mailboxes detection in mutt has suddenly stopped working. It coincides with last week's update of my primary machine from Leap 42.2 to 42.3, which shows mutt at 1.8.2. After checking version numbers through zypper then resorting to the manual, and noticed the status bar said NeoMutt, but the RPM says "normal" mutt. The manual documents numerous new things, like the "sidebar" feature, and 'mutt -v' reports "NeoMutt 20170421 (1.8.2)", so it really seems that 42.2->42.3 took mutt-1.5.24->neomutt-20170421(1.8.2). (And I've just found the changelog sent to the factory list confirming the change of upstream sources) Is there a way to make this a bit clearer to users? Daniel -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

1 0

[opensuse-factory] TW: Dosemu
by ellanios82 22 Aug '17

22 Aug '17

TW : just my impression , after sunday zypper dup , dosemu running slower regards -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

1 0

[opensuse-factory] Where to submit package updates
by Tristan Miller 22 Aug '17

22 Aug '17

Dear all, Certain packages I use from the "official release" repositories of openSUSE 42.3 and Tumbleweed are out of date. Some of these packages are also found (in the same version) in additional repositories such as "Archiving" or "multimedia:apps". Until now, when I want to revise a package so that it's using the latest upstream version, I've been branching it on OBS, making the necessary updates in my own project space, and then submitting it to the appropriate "additional" repository. Will these updates eventually make it into the "official release" repositories, or do I need to manually submit them to the "official release" repositories? I'm not really sure of the workflow here -- I'm not a SUSE employee but just an external volunteer. Regards, Tristan -- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Tristan Miller Free Software developer, ferret herder, logologist https://logological.org/ =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

3 2

[opensuse-factory] New Tumbleweed snapshot 20170819 released!
by Dominique Leuenberger 21 Aug '17

21 Aug '17

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… When you reply to report some issues, make sure to change the subject. It is not helpful to keep the release announcement subject in a thread while discussing a specific problem. Packages changed: Mesa accountsservice bijiben (3.24.0 -> 3.24.1) clutter-gtk (1.8.2 -> 1.8.4) enchant evolution (3.24.4 -> 3.24.5) evolution-data-server (3.24.4 -> 3.24.5) evolution-ews (3.24.4 -> 3.24.5) file-roller fuse gdk-pixbuf (2.36.7 -> 2.36.8) gedit (3.22.0 -> 3.22.1) geocode-glib (3.23.90 -> 3.24.0) gnome-online-accounts (3.24.1 -> 3.24.2) gnome-online-miners (3.22.0 -> 3.24.0) gnome-settings-daemon graphene gtk3 (3.22.17 -> 3.22.18) kernel-source (4.12.7 -> 4.12.8) libglvnd libmediaart (1.9.1 -> 1.9.4) libofa libostree (2017.8 -> 2017.9) libsoup (2.58.1 -> 2.58.2) link-grammar mutter nut pango (1.40.7 -> 1.40.9) perl-Class-Inspector (1.31 -> 1.32) perl-DBD-mysql perl-Net-Server (2.008 -> 2.009) perl-Specio (0.38 -> 0.39) perl-XML-XPath (1.41 -> 1.42) s2tc sendmail sni-qt texlive-specs-n (2017.131.2.004svn28119 -> 2017.132.2.004svn28119) tracker (1.12.1 -> 1.12.2) tracker-extras (1.12.1 -> 1.12.2) transmission upower (0.99.4 -> 0.99.5) webkitgtk whois === Details === ==== Mesa ==== Subpackages: Mesa-dri-devel Mesa-dri-nouveau Mesa-libEGL-devel Mesa-libEGL1 Mesa-libGL-devel Mesa-libGL1 Mesa-libglapi0 Mesa-libglapi0-32bit Mesa-libva libOSMesa8 libOSMesa8-32bit libgbm1 libvdpau_nouveau libvdpau_r300 libvdpau_r600 libvdpau_radeonsi libvulkan_radeon libwayland-egl1 libxatracker2 - Replace uses of arch directive with targettype within a package declaration to resolve incorrect dependencies placed on -32bit packages. - Removed n_glesv2.pc-Add-lGL-for-libglvnd-builds-boo-1052776.patch * The issue was in libglvnd which is fixed now. (boo#1052776) ==== accountsservice ==== Subpackages: libaccountsservice0 typelib-1_0-AccountsService-1_0 - Update specfile to build as-fate318433-prevent-same-account-multi-logins.patch on SLE15. ==== bijiben ==== Version update (3.24.0 -> 3.24.1) Subpackages: gnome-shell-search-provider-bijiben - Update to version 3.24.1: + Added support for glib 2.53.4. + Fixed transparent window issue when no notes are displayed. + Added support for glib 2.53.2. + Fixed memory leak when saving a note. + Fixed memory leak when deleting note in local provider. + Fixed application state stuck in trash view. + Fixed 64 bits format for text output. + Fixed application cash when some dates are null. + Added missing break in a case statement. + Removed warning about .Trash folder missing. + Updated translations. - Drop upstream fixed patches: + bijiben-fix-missing-break-in-case-statement.patch. + bijiben-fix-i586-longint.patch. + bijiben-remove-warning-about-Trash-folder.patch. + bijiben-memo-provider-crash-opening-memo.patch. ==== clutter-gtk ==== Version update (1.8.2 -> 1.8.4) Subpackages: libclutter-gtk-1_0-0 typelib-1_0-GtkClutter-1_0 - Update to version 1.8.4: + Add Meson build, in parallel with Autotools. + Fix cruft in the Autotools build. + Fix a snafu in the name of the getter for the GtkClutterEmbed:use-layout-size property; the ABI is preserved. + Bugs fixed: bgo#783431. ==== enchant ==== Subpackages: enchant-devel libenchant1 - aspell to be removed from factory [bsc#1052949] ==== evolution ==== Version update (3.24.4 -> 3.24.5) Subpackages: evolution-plugin-bogofilter evolution-plugin-pst-import evolution-plugin-spamassassin - Update to version 3.24.5: + Workaround broken GPG encrypted messages from Exchange and GroupWise servers. + Reply-To header value lost on Draft message reopen. + Set shadow for Aliases scrolled window in mail account Properties. + Bugs fixed: bgo#785031, bgo#785127, bgo#785188, bgo#785233, bgo#785412, bgo#777086, bgo#785717, bgo#785800. + Updated translations. ==== evolution-data-server ==== Version update (3.24.4 -> 3.24.5) Subpackages: libcamel-1_2-60 libebackend-1_2-10 libebook-1_2-19 libebook-contacts-1_2-2 libecal-1_2-19 libedata-book-1_2-25 libedata-cal-1_2-28 libedataserver-1_2-22 libedataserverui-1_2-1 - Update to version 3.24.5: + Workaround issue with badRequest/invalid format for Google address book. + Deadlock on exit under e-categories.c:finalize_categories(). + [Vala] Fix a warning with a virtual method being the same name as another method. + Bugs fixed: bgo#785136, bgo#785188, bgo#785212, bgo#785393. + Updated translations. ==== evolution-ews ==== Version update (3.24.4 -> 3.24.5) Subpackages: evolution-ews-lang - Update to version 3.24.5: + Bugs fixed: bgo#785188. + Updated translations. ==== file-roller ==== - Recommands unar instead of unrar, it does the same job but is under a free license. ==== fuse ==== Subpackages: libfuse2 - Ensure trusted group is available on Tumbleweed. ==== gdk-pixbuf ==== Version update (2.36.7 -> 2.36.8) Subpackages: gdk-pixbuf-devel gdk-pixbuf-query-loaders gdk-pixbuf-query-loaders-32bit gdk-pixbuf-thumbnailer libgdk_pixbuf-2_0-0 libgdk_pixbuf-2_0-0-32bit typelib-1_0-GdkPixbuf-2_0 - Update to version 2.36.8: + jpeg: restore grayscale image support (bgo#785171). + bmp: Tighten image dimension checks (bgo#776694). + ico: Fixo icon quality sorting (bgo#785447). + Various other leak and overflow fixes (bgo#765094, bgo#783538, bgo#778204). + Add some assertion to help static analysis (bgo#778943). + Remove support for building on various obsolete platforms. + Updated translations. ==== gedit ==== Version update (3.22.0 -> 3.22.1) Subpackages: python3-gedit - Update to version 3.22.1: + Misc bugfixes. + Updated translations. - Drop gedit-fix-font-scaling.patch: Fixed upstream. ==== geocode-glib ==== Version update (3.23.90 -> 3.24.0) Subpackages: libgeocode-glib0 typelib-1_0-GeocodeGlib-1_0 - Update to version 3.24.0: + Stable bump only. ==== gnome-online-accounts ==== Version update (3.24.1 -> 3.24.2) Subpackages: libgoa-1_0-0 libgoa-backend-1_0-1 typelib-1_0-Goa-1_0 - Update to version 3.24.2: + backend: Use constructor to setup gettext (bgo#760440). + facebook: Make it work with Graph API > 2.3 (bgo#785726). + Updated translations. ==== gnome-online-miners ==== Version update (3.22.0 -> 3.24.0) - Update to version 3.24.0: + Adopt the nfo:EBook extensions from Documents. ==== gnome-settings-daemon ==== - run autoreconf if running update-translations and add the missing buildrequires - dont apply gnome-settings-daemon-revert-libinput-mandatory.patch on sle15 ==== graphene ==== - on i586, disable sse2 for the moment, otherwise the package fails in the testsuite on the "box" test ==== gtk3 ==== Version update (3.22.17 -> 3.22.18) Subpackages: gtk3-data gtk3-immodule-amharic gtk3-immodule-inuktitut gtk3-immodule-thai gtk3-immodule-vietnamese gtk3-immodule-xim gtk3-tools libgtk-3-0 typelib-1_0-Gtk-3_0 - Update to version 3.22.18: + Support entering emoji by name, using Ctrl-Shift-E. + Wayland: - Add support for the shortcut inhibitor protocol. - Support Wacome tablet wheel scrolling. + Bugs fixed: bgo#771959, bgo#776903, bgo#776909, bgo#777333, bgo#777515, bgo#778188, bgo#780938, bgo#781246, bgo#782870, bgo#783343, bgo#783649, bgo#783716, bgo#783906, bgo#784624, bgo#785255, bgo#785375, bgo#785423, bgo#785672. + Updated translations. ==== kernel-source ==== Version update (4.12.7 -> 4.12.8) Subpackages: kernel-default kernel-default-devel kernel-devel kernel-docs kernel-macros kernel-syms - Linux 4.12.8 (bnc#1012628). - commit 4d7933a - ALSA: usb-audio: Apply sample rate quirk to Sennheiser headset (bsc#1052580). - commit a8251af ==== libglvnd ==== Subpackages: libglvnd-32bit libglvnd-devel - U_Fix-typo-in-LIBRARY_FEATURE_NAMES.patch * Fix typo that caused gles 3.1 and 3.2 symbols to be missing in the generated libraries. (bnc#1052776) ==== libmediaart ==== Version update (1.9.1 -> 1.9.4) Subpackages: libmediaart-2_0-0 typelib-1_0-MediaArt-2_0 - Update to version 1.9.4: + Brown paper bag release, export some missing methods that went unintentionally hidden. - Changes from version 1.9.3: + Brown paper bag release, fixes soname on meson builds and missing includes on autotools. - Changes from version 1.9.2: + extract: Remove Nokia album art downloader support. + build: - Improve dependency tracker for marshallers sources. - Remove duplicate introspection comment for media_art_error_quark(). - Add meson build instructions. - Drop upstream fixed patches: + libmediaart-remove-nokia-albumart.patch. + libmediaart-build-marshall-files-fixes.patch. + libmediaart-remove-duplicate-introspection.patch. - Drop libtool BuildRequires and stop passsing autoreconf, no longer needed as there are no more patches. - Add libmediaart-remove-nokia-albumart.patch: Remove Nokia album art downloader support (bgo#767959). - Add libmediaart-build-marshall-files-fixes.patch: Improve dependency tracking for marshallers sources and add an explicit dependency on marshal files. - Add libmediaart-remove-duplicate-introspection.patch: Remove duplicate introspection comment for media_art_error_quark(). - Add libtool BuildRequires and pass autoreconf as one of the patches touches the buildsystem. ==== libofa ==== - Cleanup with spec-cleaner a bit ==== libostree ==== Version update (2017.8 -> 2017.9) Subpackages: libostree-1-1 - Update to version 2017.9: + A notable new feature in this release is that the pull machinery now interprets two new metadata keys: ostree.ref-binding and ostree.collection-binding. This allows closing a longstanding class of "sidegrade" attacks that Florian Weimer identified when performing a security audit of libostree years ago (bgo#724873). There was a more recent discussion on this topic on the list: https://mail.gnome.org/archives/ostree-list/2017-May/msg00013.html + For the ostree-as-host case, this only matters if you offer multiple refs. For flatpak, it's more important as a MITM attacker could actually switch applications; that's why flatpak implemented this a while ago as xa.ref. + I'll note here that it's recommended for content providers to make use of ostree's support for tls-ca-path to implement TLS CA pinning, which protects all metadata and content in a strong fashion; in this scenario the GPG signatures act as a secondary layer of defense and make offline verification easier (for e.g. mirroring). + Otherwise, there's some performance enhancements for local pulls, and a variety of bugfixes. ==== libsoup ==== Version update (2.58.1 -> 2.58.2) Subpackages: libsoup-2_4-1 typelib-1_0-Soup-2_4 - Update to version 2.58.2 (CVE-2017-2885): + Fixed a chunked decoding buffer overrun that could be exploited against either clients or servers (bgo#785774, CVE-2017-2885). ==== link-grammar ==== - link against hunspell instead of aspell [bsc#1052958] ==== mutter ==== Subpackages: libmutter-0-0 mutter-data - libinput is needed also without wayland, so buildrequire it unconditionally ==== nut ==== Subpackages: libupsclient1 nut-cgi - Add use-pkg-config-gdlib.diff to fix a build failure due to the configure scripts using gdlib-config (which is deprecated) to obtain the CFLAGS/LDFLAGS/LIBS to use when building with gd. With the patch, nut now uses pkg-config which returns the right values ==== pango ==== Version update (1.40.7 -> 1.40.9) Subpackages: libpango-1_0-0 libpango-1_0-0-32bit pango-devel typelib-1_0-Pango-1_0 - Update to version 1.40.9: + Build and dist fixes. + Fix build on Windows with MSVC (bgo#783274). - Update to version 1.40.8: + Support emoji sequences in boundary determination. + Choose emoji font for color emoji. ==== perl-Class-Inspector ==== Version update (1.31 -> 1.32) - updated to 1.32 see /usr/share/doc/packages/perl-Class-Inspector/Changes 1.32 2017-08-08 14:12:42 -0400 - The installed method now supports @INC hooks of any type (coderef was supported as of 1.29, now arrayrefs and objects are supported) - Detect probably broken Perl on Cygwin in Makefile.PL (see gh#5) ==== perl-DBD-mysql ==== - Add patch to fix CVE-2017-10788 bsc#1047095 * Denial of service or possibly RCE through use-after-free * perl-DBD-mysql-4.043-CVE-2017-10788.patch ==== perl-Net-Server ==== Version update (2.008 -> 2.009) - updated to 2.009 see /usr/share/doc/packages/perl-Net-Server/Changes 2.009 Aug 09 2017 - Several long awaited fixes - Log when a child exits abnormally. RT #86815 - Added delete-child hook - Add cleanup_dead_child_hook to PreFork server - Removed stray warn - Use File::Temp instead of POSIX::tmpnam - UNIX read_until to allow for SSL under unix sockets ==== perl-Specio ==== Version update (0.38 -> 0.39) - updated to 0.39 see /usr/share/doc/packages/perl-Specio/Changes 0.39 2017-08-02 - Many bug fixes and improves to the types created by {any,object}_{can,does,isa}_type. In some cases, an invalid value could cause an exception in type check itself. In other cases, a value which failed a type check would cause an exception when generating a message describing the failure. These cases have all been fixed. - The messages describing a failure for all of these types have been improved. - You can now create anonymous *_does and *_isa types using the exports from Specio::Declare. ==== perl-XML-XPath ==== Version update (1.41 -> 1.42) - updated to 1.42 see /usr/share/doc/packages/perl-XML-XPath/Changes 1.42 2017-07-30 MANWAR - Fixed GitHub issue #5 (abstract is undef in meta files). Thanks @y. ==== s2tc ==== Subpackages: s2tc-32bit - Replace unconditional Recommends for the 32bit variant with a supplements in baselibs.conf to not unnecessarily pull in 32bit libs ==== sendmail ==== - Add libnsl-devel build requires for glibc obsoleting libnsl ==== sni-qt ==== - Add Supplements: packageand(plasma5-workspace:libqt4) to main package and baselibs.conf ==== texlive-specs-n ==== Version update (2017.131.2.004svn28119 -> 2017.132.2.004svn28119) - Avoid shell for dealing with perl shebangs (boo#1053707) - Increase version of algorithm2e.sty to fix boo#1051054 ... mention added patch "algorithm2e_umlauts.dif" ==== tracker ==== Version update (1.12.1 -> 1.12.2) Subpackages: libtracker-common-1_0 libtracker-control-1_0-0 libtracker-miner-1_0-0 libtracker-sparql-1_0-0 tracker-miner-files typelib-1_0-Tracker-1_0 typelib-1_0-TrackerControl-1_0 - Update to version 1.12.2: + Sqlite 3.20 introduced incompatible changes in the way FTS5 can be extended, compile/runtime checks were added to adapt to the new safer way if Sqlite >= 3.20.0 is found. + Fix TrackerDBInterface being reused with no FTS set up. ==== tracker-extras ==== Version update (1.12.1 -> 1.12.2) Subpackages: nautilus-extension-tracker-tags tracker-gui - Update to version 1.12.2: + Sqlite 3.20 introduced incompatible changes in the way FTS5 can be extended, compile/runtime checks were added to adapt to the new safer way if Sqlite >= 3.20.0 is found. + Fix TrackerDBInterface being reused with no FTS set up. ==== transmission ==== Subpackages: transmission-common transmission-gtk - boo#1052817 - Edit transmission-qt.desktop to handle magnet links (x-scheme-handler/magnet). ==== upower ==== Version update (0.99.4 -> 0.99.5) Subpackages: libupower-glib3 typelib-1_0-UpowerGlib-1_0 - Update to version 0.99.5: + New Features: - Add a more complete self test for HID++ devices. - Add BatteryLevel property for devices with a finite number of power levels. - Add support for pausing and resuming of the daemon poll. - Get a serial number for device batteries. - Refresh devices after waking up from sleep. + Bugfixes: - Add proper error and cancellable handling to UpClient constructor. - Do not spin in a loop when /proc/timer_stats cannot be written. - Exit early from up-tool when connecting to upower fails. - Expand the integration-tests to run in more environments. - Fix reading and writing the keyboard brightness level. - Fix -Wformat-y2k compilation errors. - Lower initial power usage when iDevice isn't accessible. - Simplify string checks in upower-glib. - Drop upower-fix-get-critical-crash.patch: Fixed upstream. ==== webkitgtk ==== Subpackages: libjavascriptcoregtk-1_0-0 libwebkitgtk-1_0-0 libwebkitgtk2-lang - Disable DWZ in webkitgtk3-debuginfo (bnc#1044848) ==== whois ==== - drop whois-5.2.15-fix-CIDR-with-libidn2.patch, no longer required with libidn2 >= 2.0.3 -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

1 0

[opensuse-factory] after zypper dup today : Repository for google-chrome
by ellanios82 20 Aug '17

20 Aug '17

after zypper dup today : - continue to get this warning : : " The file repomd.xml (https://dl.google.com/linux/rpm/stable/x86_ is digitally signed with the following unknown GnuPG key: ID: 1397BC53640DB551. This means that a trust relationship to the creator of the file cannot be established. Using the file may put the integrity of your system at risk. - this is with new libzypp ......... furthermore , after zypper dup today , the CLI version of yast looks untidy & characters out-of-sorts? ......... regards -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

3 2

Re: [opensuse-factory] Update Julia in Factory
by Ronan Chagas 19 Aug '17

19 Aug '17

Hi Tobias, > Em 19 de ago de 2017, à(s) 17:20, Tobias Klausmann <tobias.johannes.klausmann(a)mni.thm.de> escreveu: > > BuildRequires: pkgconfig(libgit2) > > This effectively pulls in libgit2-devel which pulls libgit2-version, > right now libgit2-26. > > It may cause some overhead (hopefully not too many additional packages > are pulled in), yet Julia will build with all coming libgit2 versions, > as long as the interface stays the same. > Thanks for the tip. However, I wanted to avoid forcing the user to install libgit2-devel packages, which can bring many additional, unwanted packages. To circumvent this, with help of fvgot in IRC channel, I did the following: %define libgit2_ver %(rpm -qa | grep -E "^libgit2-[0-9]" | head -n1 | cut -d'-' -f2) … Requires: libgit2-%{libgit2_ver} This should fix the problem with libgit2 once for all. Thanks, Ronan-- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

1 0

[opensuse-factory] What the heck is buildservice "lamb64 failed"?
by David C. Rankin 19 Aug '17

19 Aug '17

New build service error on package that built fine 5 days ago: [ 42s] gtkwrite-0.1.6-5.1.x86_64.rpm: directories not owned by a package: [ 42s] - /usr/share/gtkwrite [ 42s] - /usr/share/gtkwrite/img [ 42s] [ 42s] lamb67 failed "build gtkwrite.spec" at Wed Aug 16 05:09:18 UTC 2017. [ 42s] [ 42s] ### VM INTERACTION START ### [ 45s] [ 36.694037] reboot: Power down [ 45s] ### VM INTERACTION END ### [ 45s] [ 45s] lamb67 failed "build gtkwrite.spec" at Wed Aug 16 05:09:21 UTC 2017. [ 45s] What is lamb67? (it should be fed to the wolves...) -- David C. Rankin, J.D.,P.E. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

10 15

[opensuse-factory] New Tumbleweed snapshot 20170817 released!
by Dominique Leuenberger 19 Aug '17

19 Aug '17

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… When you reply to report some issues, make sure to change the subject. It is not helpful to keep the release announcement subject in a thread while discussing a specific problem. Packages changed: ImageMagick (7.0.6.0 -> 7.0.6.7) dd_rescue kernel-source (4.11.8 -> 4.12.7) libzypp (16.14.0 -> 16.15.3) mercurial (4.2.2 -> 4.2.3) mozilla-nspr (4.14 -> 4.15) mozilla-nss (3.30.2 -> 3.31) p7zip python-Pillow zypper (1.13.29 -> 1.13.31) === Details === ==== ImageMagick ==== Version update (7.0.6.0 -> 7.0.6.7) Subpackages: ImageMagick-devel ImageMagick-extra perl-PerlMagick - updated to 7.0.7-7 * Improve EPS aliasing * Added a new option called 'dds:fast-mipmaps' * The mipmaps of a dds image can now be created from a list of images with - define dds:mipmaps=fromlist * Fixed numerous memory leaks * Put UTC time in the PNG tIME chunk instead of local time * Fixed numerous memory leaks * Properly set image->colorspace in the PNG decoder (previously it was setting image->gamma, but only setting image->colorspace for grayscale and gray-alpha images. * Fix improper use of NULL in the JNG decoder * Added "-define png:ignore-crc" option to PNG decoder. When you know your image has no CRC or ADLER32 errors, this can speed up decoding. It is also helpful in debugging bug reports from "fuzzers". * Off by one error for gradient coder * YUV coder no longer renders streaks * Fixed numerous memory leaks * Added experimental PNG orNT chunk, to store image->orientation. * Removed vpAg chunk write support * Fixed numerous memory leaks * Fix memory leaks when reading a malformed JNG image * Fixed numerous memory leaks * The -monochrome option no longer returns a blank canvas * coders/png.c: fixed memory leak of quantum_info * coders/png.c: fixed NULL dereference when trying to write an empty MNG * Added caNv, eXIf, and pHYs to the list of PNG chunks to be removed by the "-strip" option. * Implemented PNG eXIf chunk support * Support new -auto-threshold option. OTSU and Triangle methods are currently supported. Look for the Kapur method in the next release. * Fixed numerous memory leaks * Don't use variable float_t / double_t, bump SO * Support DNG images with libraw delegate library. * Reject PNG file that is too small (under 60 bytes) to contain a valid image. * Reject JPEG file that is too small (under 107 bytes) to contain a valid image. * Reject JNG file that is too small (under 147 bytes) to contain a valid image. * Stop a memory leak in read_user_chunk_callback() - workaround failed test + ImageMagick-relax-filter.t.patch (patch modified) on i586 with sse2 enabled, the Contrast test in filter.t fails ==== dd_rescue ==== Subpackages: dd_rescue-crypt dd_rescue-lzo - Add dd_rescue-i586-sse2.diff to fix dd_rescue compile and runtime problems when GCC defaults to SSE2 also on i586 like with SLE-15. ==== kernel-source ==== Version update (4.11.8 -> 4.12.7) Subpackages: kernel-default kernel-default-devel kernel-devel kernel-docs kernel-macros kernel-syms - Linux 4.12.7 (bnc#1012628). - commit 7dae241 - Refresh patches.fixes/netfilter-expect-fix-crash-when-putting-uninited-exp.patch. Update upstream status. - commit cdb9f49 - Linux 4.12.6 (CVE-2017-7542 CVE-2017-8831 bnc#1012628 bsc#1037994 bsc#1049882). - Delete patches.fixes/ipv6-avoid-overflow-of-offset-in-ip6_find_1stfragopt.patch. - Delete patches.fixes/media-saa7164-fix-double-fetch-PCIe-access-condition. - commit 29b7412 - [media] saa7164: fix double fetch PCIe access condition (CVE-2017-8831 bsc#1037994). - commit 4d38c27 - Linux 4.12.5 (bnc#1012628 bsc#1049483 bsc#1049599). - Delete patches.fixes/dentry-name-snapshots.patch. - Delete patches.suse/0001-md-remove-idx-from-struct-resync_pages.patch. - commit e6109ef - Update config files. Fix vanillas after the orc update. - commit 2a27bf2 - Linux 4.12.4 (bnc#1012628). - commit f2e2c0a - ipv6: avoid overflow of offset in ip6_find_1stfragopt (CVE-2017-7542 bsc#1049882). - commit 00c5961 - Refresh patches.suse/0001-md-remove-idx-from-struct-resync_pages.patch. - commit b11fd5b - objtool: Fix sibling call detection logic (bnc#1018348). - x86/kconfig: Make it easier to switch to the new ORC unwinder (bnc#1018348). - x86/kconfig: Consolidate unwinders into multiple choice selection (bnc#1018348). - Refresh - Refresh patches.suse/0001-x86-unwind-Add-the-ORC-unwinder.patch. - Refresh patches.suse/0002-dwarf-do-not-throw-away-unwind-info.patch. - Refresh patches.suse/0002-objtool-x86-Add-several-functions-and-files-to-the-o.patch. - Refresh patches.suse/0002-x86-entry-64-Initialize-the-top-of-the-IRQ-stack-bef.patch. - Refresh patches.suse/0002-x86-kconfig-Make-it-easier-to-switch-to-the-new-ORC-.patch. - Refresh patches.suse/0003-objtool-Implement-stack-validation-2.0.patch. - Refresh patches.suse/0003-x86-kconfig-Consolidate-unwinders-into-multiple-choi.patch. - Refresh patches.suse/0007-x86-entry-64-Add-unwind-hint-annotations.patch. - Refresh patches.suse/0008-x86-asm-Add-unwind-hint-annotations-to-sync_core.patch. - Update config files. Update to version from -tip. ORC is in -tip completely. So make sure we use the upstream version. - commit 34dd0f5 - Refresh patches.suse/0001-mm-kmemleak-slightly-reduce-the-size-of-some-structu.patch. - Refresh patches.suse/0002-mm-kmemleak-factor-object-reference-updating-out-of-.patch. - Refresh patches.suse/0003-mm-kmemleak-treat-vm_struct-as-alternative-reference.patch. - commit f7ebe40 - Refresh patches.suse/0001-mm-kmemleak-slightly-reduce-the-size-of-some-structu.patch. - Refresh patches.suse/0002-mm-kmemleak-factor-object-reference-updating-out-of-.patch. - Refresh patches.suse/0003-mm-kmemleak-treat-vm_struct-as-alternative-reference.patch. - commit eb41516 - Input: ALPS - Fix Alps Touchpad two finger scroll does not work on right side (bsc#1050582). - commit 93ed5e8 - md: remove 'idx' from 'struct resync_pages' (bsc#1049599). - commit 515f14e - Linux 4.12.3 (CVE-2017-7541 bnc#1012628 bsc#1049645). - Refresh patches.suse/pstore-backend-autoaction. - Delete patches.fixes/brcmfmac-fix-possible-buffer-overflow-in-brcmf_cfg80. - commit 409edbf - dentry name snapshots (bsc#1049483). - commit 76ea0ca - debug: fix WARN_ON_ONCE() for modules (bnc#1049599). - commit b1e9bab - brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (CVE-2017-7541,bsc#1049645). - commit 823a643 - rpm/kernel-binary.spec.in: find-debuginfo.sh should not touch build-id This needs rpm-4.14+ (bsc#964063). - commit f622d60 - Refresh patches.suse/0001-x86-entry-64-Refactor-IRQ-stacks-and-make-them-NMI-s.patch. - Refresh patches.suse/0002-x86-entry-64-Initialize-the-top-of-the-IRQ-stack-bef.patch. - Refresh patches.suse/0003-x86-dumpstack-fix-occasionally-missing-registers.patch. - Refresh patches.suse/0004-x86-dumpstack-fix-interrupt-and-exception-stack-boun.patch. - Refresh patches.suse/0005-objtool-add-ORC-unwind-table-generation.patch. - Refresh patches.suse/0006-objtool-x86-add-facility-for-asm-code-to-provide-unw.patch. - Refresh patches.suse/0007-x86-entry-64-add-unwind-hint-annotations.patch. - Refresh patches.suse/0008-x86-asm-add-unwind-hint-annotations-to-sync_core.patch. Update upstream information. - commit 8db850a - Delete patches.fixes/drm-i915-Fix-S4-resume-breakage. The workaround wasn't merged to upstream, and it seems becoming superfluous with the recent i915 driver, so let's drop this one. - commit f5a35ab - Delete patches.rpmify/drm-i915-disable-KASAN-for-handlers.patch. It was never accepted, is under discussion. But we disabled CONFIG_DRM_I915_WERROR in commit 5fc7b327348b, so we are safe anyway. - commit 09fc05f - Delete patches.rpmify/get_builtin_firmware-gcc-7.patch. This was never accepted. Instead this seems to be fixed in gcc. - commit c486b10 - netfilter: expect: fix crash when putting uninited expectation (bnc#1048935). - Delete patches.fixes/netfilter-nf_ct_expect-fix-expect-removal.patch. Replace by upstream fix (from a subsys repo). - commit abad31d - netfilter: nf_ct_expect: fix expect removal (bnc#1048935). - commit 28fe876 - Drop multiversion(kernel) from the KMP template (fate#323189) - commit 71504d8 - Linux 4.12.2 (bnc#1012628). - commit 1b6adc0 - Linux 4.12.1 (bnc#1012628). - commit 77712d8 - rpm/kernel-docs.spec.in: Fix and cleanup for 4.13 doc build (bsc#1048129) The whole DocBook stuff has been deleted. The PDF build still non-working thus the sub-packaging disabled so far. - commit c9542b9 - fs/fcntl: f_setown, avoid undefined behaviour (bnc#1006180). - fs/fcntl: f_setown, allow returning error (bnc#1006180). - commit c67ada2 - x86/entry/64: Refactor IRQ stacks and make them NMI-safe (bnc#1018348). - x86/entry/64: Initialize the top of the IRQ stack before switching stacks (bnc#1018348). - x86/dumpstack: fix occasionally missing registers (bnc#1018348). - x86/dumpstack: fix interrupt and exception stack boundary checks (bnc#1018348). Update ORC to v3. - commit dca9bfc - Refresh patches.suse/0001-objtool-Move-checking-code-to-check.c.patch. - Refresh patches.suse/0002-objtool-x86-Add-several-functions-and-files-to-the-o.patch. - Refresh patches.suse/0003-objtool-Implement-stack-validation-2.0.patch. - Refresh patches.suse/0004-objtool-Silence-warnings-for-functions-which-use-IRE.patch. Update upstream status. - commit f413050 - rpm/kernel-docs.spec.in: temporary fix for 4.12 and later There is a little DocBook in 4.12 and none in 4.13. So remove creating the link. - commit 1d6ee3e - Refresh patches.fixes/tty-handle-the-case-where-we-cannot-restore-a-line-d.patch. Update upstream status. - commit 50443d0 - Update to 4.12-final. - commit f35ee68 - objtool: Silence warnings for functions which use IRET (bnc#1018348). - Update config files. - Refresh patches.suse/0002-dwarf-do-not-throw-away-unwind-info.patch. Push the new version of unDWARF unwinder which is now called Orc. The first 4 patches were accepted to the -tip tree, so they are marked appropriatelly. - commit 48ca048 ==== libzypp ==== Version update (16.14.0 -> 16.15.3) - RepoInfo: add enum GpgCheck for convenient gpgcheck mode handling (bsc#1045735) - Fix repo/pkg checks to follow explicitly defined gpgcheck in a .repo file - version 16.15.3 (0) - Weaken fix for bsc#1038984 if 'gpgcheck=0' in libzypp-16.15.x only. This will allow some already released products to adapt to the behavioral changes introduced by fixing bsc#1038984, while systems with a default configuration (gpgcheck=1) already benefit from the fix in libzypp-16.15.x. For details see section 'Signature checking' in /etc/zypp/zypp.conf. - Fix gpg-pubkey release (creation time) computation (bsc#1036659) - update lsof blacklist (bsc#1046417) - version 16.15.2 (0) - Be sure bad packages do not stay in the cache (bsc#1045735, CVE-2017-9269) - version 16.15.1 (0) - PackageProvider: enforce a signed package if pkgGpgCheckIsMandatory - Add RpmDb::checkPackageSignature to report unsigned packages - Fix repo gpg check workflows, mainly for unsigned repos and packages (bsc#1045735, bsc#1038984, CVE-2017-7435, CVE-2017-7436, CVE-2017-9269) - version 16.15.0 (0) ==== mercurial ==== Version update (4.2.2 -> 4.2.3) Subpackages: mercurial-lang - mercurial 4.2.3: security fix updates for CVE-2017-1000115 and CVE-2017-1000116: * Mercurial's symlink auditing was incomplete prior to 4.3, and could be abused to write to files outside the repository (CVE-2017-1000115) * Mercurial was not sanitizing hostnames passed to ssh, allowing shell injection attacks by specifying a hostname starting with - oProxyCommand (CVE-2017-1000116, bsc#1052696) ==== mozilla-nspr ==== Version update (4.14 -> 4.15) - update to version 4.15 * added TCP Fast Open functionality * various correctness fixes ==== mozilla-nss ==== Version update (3.30.2 -> 3.31) Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs mozilla-nss-tools - update to NSS 3.31 New functionality * Allow certificates to be specified by RFC7512 PKCS#11 URIs. * Allow querying a certificate object for its temporary or permanent storage status in a thread safe way. New functions * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a certificate in a thread safe way. * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a certificate in a thread safe way. * PK11_FindCertFromURI - find a certificate identified by the given URI. * PK11_FindCertsFromURI - find a list of certificates identified by the given URI. * PK11_GetModuleURI - retrieve the URI of the given module. * PK11_GetTokenURI - retrieve the URI of a token based on the given slot information. * PK11URI_CreateURI - create a new PK11URI object from a set of attributes. * PK11URI_DestroyURI - destroy a PK11URI object. * PK11URI_FormatURI - format a PK11URI object to a string. * PK11URI_GetPathAttribute - retrieve a path attribute with the given name. * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name. * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object. New macros * Several new macros that start with PK11URI_PATTR_ for path attributes defined in RFC7512. * Several new macros that start with PK11URI_QATTR_ for query attributes defined in RFC7512. Notable changes * The APIs that set a TLS version range have been changed to trim the requested range to the overlap with a systemwide crypto policy, if configured. SSL_VersionRangeGetSupported can be used to query the overlap between the library's supported range of TLS versions and the systemwide policy. * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a failure if the requested version range wasn't fully allowed by the systemwide crypto policy. They have been changed to return success, if at least one TLS version overlaps between the requested range and the systemwide policy. An application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to query the TLS version range that was effectively activated. * Corrected the encoding of Domain Name Constraints extensions created by certutil. * NSS supports a clean seeding mechanism for *NIX systems now using only /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile time. * CERT_AsciiToName can handle OIDs in dotted decimal form now. - removed obsolete nss-fix-hash.patch ==== p7zip ==== - remove 7zr manpage, fixes boo#899627 ==== python-Pillow ==== - Improve TK handling. - Fix self-obsoletes - python(3)-tk does not exist on SLE ==== zypper ==== Version update (1.13.29 -> 1.13.31) Subpackages: zypper-aptitude zypper-log - Improve signature check callback messages (bsc#1045735) - man: Explain new gpgcheck options - add/modify repo: Add options to tune the GPG check settings (bsc#1045735) - BuildRequires: libzypp-devel >= 16.15.3 - version 1.13.31 - Adapt download callback to report and handle unsigned packages (bsc#1038984, CVE-2017-7436) - BuildRequires: libzypp-devel >= 16.15.0 - version 1.13.30 -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

2 1