March 2018 - openSUSE Factory - openSUSE Mailing Lists

[opensuse-factory] Leap 42.3 Build 0312 released!
by Ludwig Nussel 25 Apr '24

25 Apr '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&version=42.3&bui… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Distribution&q… When you reply to discuss some issues, make sure to change the subject. Please use the test plan at https://docs.google.com/spreadsheets/d/1AGKijKpKiJCB616-bHVoNQuhWHpQLHPWCb3… to record your testing efforts and use bugzilla to report bugs. Packages changed: biosdevname btrfsmaintenance conduit gconf2-branding-openSUSE (42.1 -> 42.3) ibus kactivitymanagerd kde-user-manager kernel-source (4.4.73 -> 4.4.74) libxml2 libzypp (16.12.0 -> 16.13.0) lightdm marble mc plasma5-integration plasma5-openSUSE postgresql (9.4 -> 9.6) python-coverage (3.7.1 -> 4.3.4) ucode-intel (20160714 -> 20170511) yast2-bootloader (3.2.22 -> 3.2.23) yast2-ntp-client (3.2.9 -> 3.2.12) === Details === ==== biosdevname ==== - Duplicate naming of SRIOV VFs by biosdevname when VPD_DCM Strings are present in VFs (bsc#1042185) * Add: biosdevname_avoid_duplicates.patch ==== btrfsmaintenance ==== - Require btrfsprogs (bsc#1047226) - update to 0.2 - updated documentation - no hardcoded paths to external utilities - fixed logger name typos for 'journal' target - defrag fixes (sysconfig, find arguments) - Removed patch: balance-typo.patch - Added patch: sysconfig-override-trim.diff - Add balance-typo.patch (bnc#986543) - version 0.1.1 - fix typo and make journal logging target work - cron refresh: remove bashism - Removed patches: * 0003-Add-COPYING-file.patch * 0011-cron-refresh-remove-debuggiong-output.patch - cron script symlinks are not created on first installation (bsc#907343) - add COPYING to package - refresh script: remove extra messages - add uninstall targets - fix refresh service - adjust sysconfig defaults - Add more package dependencies (cron, zypp-plugin) - minor bugfixes - Add supplements(btrfsprogs) - initial version 0.1 ==== conduit ==== Subpackages: conduit-lang - Use python-vobject instead of vobject per python-vobject change in 42.3. ==== gconf2-branding-openSUSE ==== Version update (42.1 -> 42.3) - do not build novell-sound-theme in the gconf2-branding-SLED build to prevent duplicated binaries in openSUSE Leap. The novell-sound-theme is taken from gconf2-branding-SLES sources on both the SLED product and the SLES WE module. bsc#1046099 - bump versions ==== ibus ==== Subpackages: ibus-branding-openSUSE-KDE ibus-gtk ibus-gtk-32bit ibus-gtk3 ibus-lang libibus-1_0-5 libibus-1_0-5-32bit python-ibus typelib-1_0-IBus-1_0 - Update ibus.spec: copy auto-start files to SOURCE directory to enable modifications before compile. - Add ibus-disable-engines-preload-in-GNOME.patch: Disable load preload-engines actions in SLE, which is unnecessary for mono IMF in SLE and may cause CJK user login failed (bsc#1036729). ==== kactivitymanagerd ==== - Recommend -lang package ==== kde-user-manager ==== - Recommend -lang package ==== kernel-source ==== Version update (4.4.73 -> 4.4.74) Subpackages: kernel-default kernel-default-devel kernel-devel kernel-docs kernel-macros kernel-syms - Delete patches.kabi/kabi-fix-for-kvm-x86-fix-singlestepping-over-syscall. No need for kABI fix yet for Leap 42.3. - commit f0a86d9 - Fix kABI breakage by KVM CVE fix (bsc#1045922). - commit c0308f6 - powerpc/perf: Fix branch event code for power9 (fate#321438, Pending SUSE Kernel Fixes). - commit e954af6 - powerpc: Fix /proc/cpuinfo revision for POWER9 DD2 (bsc#1046789). - commit 444247f - Refresh metadata patches.drivers/ibmvnic-a2-Fix-assignment-of-RX-TX-IRQ-s.patch. - commit be32be9 - drm/i915: Serialize GTT/Aperture accesses on BXT (bsc#1046821). - commit b263fef - Bluetooth: hidp: fix possible might sleep error in hidp_session_thread (bsc#1031784). - Refresh patches.suse/kgr-0008-mark-task_safe-in-some-kthreads.patch. - commit 18c6f3e - KVM: x86: fix singlestepping over syscall (CVE-2017-7518 bsc#1045922). - commit d989643 - nvme/pci: Fix stuck nvme reset (bsc#1043805). - commit 7afe4f0 - Refresh fadump patches to upstream and add metadata patches.arch/powerpc-fadump-add-reschedule-point-while-releasing-memory.patch. patches.arch/powerpc-fadump-avoid-duplicates-in-crash-memory-ranges.patch patches.arch/powerpc-fadump-avoid-holes-in-boot-memory-area-when-fadump-is-registered.patch patches.arch/powerpc-fadump-provide-a-helpful-error-message.patch - commit f0fb5c3 - blacklist.conf: Remove duplicated entries - commit cb960d2 - Remove duplicated blacklist entries and put git-commit tag to patches - commit 12a0cb2 - blacklist.conf: Remove duplicated entry. - commit 561ddb1 - ibmvnic: Fix assignment of RX/TX IRQ's (bsc#1046589). - commit 5fa38bf - blacklist.conf: blacklist 570d8e939801 we do not care about the code in Documentation all that much, do we? - commit 69d5811 - blacklist.conf: blaclist 5380e5644afb it is just not worth backporting without any explicit report where a silently truncated success would lead to a real bug. - commit fc28626 - blacklist.conf: unnecessary patch The bug triggers only upon a malformed descriptor and the comparison is so that our buffer would be too large not too small so no overflow. The device would not work, but it won't anyway. - commit 99f8a16 - Rearrange the previous patches for hpsa and smartpqi to the right position. - commit a1f1f27 - Update patches.fixes/xfs-split-default-quota-limits-by-quota-type.patch (bsc#1040941). Fix the bug nr used. - commit 115ba75 - printk: Correctly handle preemption in console_unlock() (bsc#1046434). - commit 0a3c2a4 - printk/xen: Force printk sync mode when migrating Xen guest (bsc#1043347). - commit e13596b - btrfs: disable possible cause of premature ENOSPC (bsc#1040182) - commit 8bf31da - rbd: make sure pages are freed by libceph (bsc#1045596). - rbd: drop extra rbd_img_request_get (bsc#1045596). - commit c8719f2 - dm-raid: Do not call BUG() in __rdev_sectors() (bsc#1046264). - commit 0b1aab0 - btrfs: Round down values which are written for total_bytes_size (bsc#1043912). - btrfs: Manually implement device_total_bytes getter/setter (bsc#1043912). - commit c4d2eb7 - pipe: cap initial pipe capacity according to pipe-max-size limit (bsc#1045330). - commit 4ee3ec2 - Blacklist drivers/net/ethernet/ibm/emac We do not build the driver. - commit d432b2b - blacklist.conf: this patch breaks the API It disallows some operations that are now allowed - commit 98325c2 - arm64: Update config files. (bsc#1036737) Disable XGENE_PMU. - commit 7bb0115 - Disable Xilinx network drivers (bsc#1046170). - commit 656fc83 - hwpoison, memcg: forcibly uncharge LRU pages (bnc#1046105). - commit 2b252e1 - blacklist.conf: blacklist 570d8e939801 the issue is visible only when 80df554275c2 is applied (4.7+ and not backported to our trees) - commit 47b83ce - config/x86_64: make CONFIG_SERIAL_8250_DW and *_MID built-in (bsc#1024449) - commit 2e3ca7e - Refresh patches.drivers/0477-nvme-add-hostid-token-to-fabric-options.patch. Update mainline references. - commit eee1109 - fs/exec.c: account for argv/envp pointers (bnc#1039354, CVE-2017-1000365). - commit 7418d0f - Refresh ibmvnic patch metadata patches.drivers/ibmvnic-98-ibmvnic-Correct-return-code-checking-for-ibmvnic_init-during-probe.patch. patches.drivers/ibmvnic-a0-ibmvnic-Fix-incorrectly-defined-ibmvnic_request_map_rsp-structure.patch. patches.drivers/ibmvnic-a1-ibmvnic-Fix-error-handling-when-registering-long-term-mapped-buffers.patch. - commit babc17a - Refresh metadata patches.fixes/powerpc-tm-Fix-stack-pointer-corruption-in-__tm_recheckpoint. - commit 0b5bdc6 - powerpc/ftrace: Pass the correct stack pointer for DYNAMIC_FTRACE_WITH_REGS (FATE#322421). - commit 936e653 - nvme: add hostid token to fabric options (bsc#1045293). - commit 52dffb9 - iw_cxgb4: Fix error return code in c4iw_rdev_open() (bsc#1026570). - RDMA/iw_cxgb4: Always wake up waiter in c4iw_peer_abort_intr() (bsc#1026570). - commit 2ce43b1 - clocksource/drivers/arm_arch_timer: Fix read and iounmap of incorrect variable (bsc#1045937). - commit 594f037 - Linux 4.4.74 (CVE-2017-1000364 bnc#1012382 bnc#1039348 bnc#1045340 bsc#1031717 bsc#1043231). - Delete patches.drivers/media-pvrusb2-reduce-stack-usage-pvr2_eeprom_analyze. - Delete patches.drivers/media-vb2-Fix-an-off-by-one-error-in-vb2_plane_vaddr. - Delete patches.drivers/staging-rtl8188eu-prevent-an-underflow-in-rtw_check_. - Delete patches.fixes/mm-fix-new-crash-in-unmapped_area_topdown.patch. - Delete patches.fixes/mm-larger-stack-guard-gap-between-vmas.patch. - commit 5e41880 - tty: Fix ldisc crash on reopened tty (bnc#1043488). - commit 04cca20 - tty: Destroy ldisc instance on hangup (bnc#1043488). - tty: Refactor tty_ldisc_reinit() for reuse (bnc#1043488). - tty: Use 'disc' for line discipline index name (bnc#1043488). - tty: Move tty_ldisc_kill() (bnc#1043488). - tty: Handle NULL tty->ldisc (bnc#1043488). - tty: Prepare for destroying line discipline on hangup (bnc#1043488). - tty: Reset c_line from driver's init_termios (bnc#1043488). - tty: Simplify tty_set_ldisc() exit handling (bnc#1043488). - commit c016cca - kabi: ignore fs_info parameter for tracepoints that didn't have it (bsc#1044912). - commit 24869ea ==== libxml2 ==== Subpackages: libxml2-2 libxml2-2-32bit libxml2-devel libxml2-tools - Security fix: * libxml2-CVE-2017-7376.patch [bsc#1044887, CVE-2017-7376] * Increase buffer space for port in HTTP redirect support - Security fix: * libxml2-CVE-2017-7375.patch [bsc#1044894, CVE-2017-7375] * Prevent unwanted external entity reference - Upstream patches updated and with tests: * libxml2-CVE-2017-9047.patch and libxml2-CVE-2017-9048.patch merged into libxml2-CVE-2017-9047.patch [bsc#1039066, bsc#1039661] * libxml2-CVE-2017-9049.patch and libxml2-CVE-2017-9050.patch merged into libxml2-CVE-2017-9049.patch [bsc#1039063, bsc#1039064] ==== libzypp ==== Version update (16.12.0 -> 16.13.0) - Adapt loop mounting of iso images (bsc#1038132, bsc#1033236) - Adjust zypp.conf for openSUSE Tumbleweed (bsc#1031756) - Change arch variable names conflicting with compiler macros (fixes #70) - Fix potential crash if repo has no baseurl (bnc#1043218) - version 16.13.0 (0) ==== lightdm ==== Subpackages: liblightdm-gobject-1-0 lightdm-lang - Augment patch to also resolve the target of symlink sessions for detemining the preselected option: * ignore-known-symlink-sessions.patch ==== marble ==== Subpackages: libastro1 libmarblewidget-qt5-27 marble-data marble-devel marble-doc marble-kde marble-lang - Add Fix-utm-enum-value.patch and reverse-apply it, this upstream commit causes a crash when adding bookmarks if switched to UTM view angles because the necessary handler functions for the dialog are not implemented yet (boo#1044747, kde#381872) - Add Fix-plain-map-and-political-map-showing-no-content.patch to fix the plain map and the political map being not displayed at all (kde#379297) ==== mc ==== Subpackages: mc-lang - sftp.patch: Backport upstream fixes for SFTP (boo#1004280, boo#1042797) ==== plasma5-integration ==== - Move the Recommends: %{name}-plugin-lang to the plasma5-integration-plugin sub package, otherwise the translations won't get installed as there is no main package (boo#1027925) - Actually apply the aforementioned patch (shouldn't the source validator have warned?) ==== plasma5-openSUSE ==== Subpackages: plasma5-defaults-openSUSE plasma5-theme-openSUSE plasma5-workspace-branding-openSUSE sddm-theme-openSUSE - Fix installation of the sddm theme files (boo#1047254) ==== postgresql ==== Version update (9.4 -> 9.6) Subpackages: postgresql-contrib postgresql-devel postgresql-docs postgresql-server - Bump version and defaultpackage to 9.6. - Move ~postgres/.bash_profile to postgresql-server to avoid a file conflict between the versioned server packages. - Bump version and defaultpackage to 9.4. - Bump version and defaultpackage to 9.3. - Change license string to PostgreSQL. - Make all dummy packages noarch. - Make PostgreSQL 9.2 the default. - Reduce the postgresql packages with unversioned names to dummy packages that require the respective versioned package names. ==== python-coverage ==== Version update (3.7.1 -> 4.3.4) - uninstall alternatives in %postun - update for singlespec - update to 4.3.4: - Using the --skip-covered option on an HTML report with 100% coverage would cause a ?No data to report? error, as reported in issue 549. This is now fixed; thanks, Lo�c Dachary. - If-statements can be optimized away during compilation, for example, if 0: or if __debug__:. Coverage.py had problems properly understanding these statements which existed in the source, but not in the compiled bytecode. This problem, reported in issue 522, is now fixed. - If you specified --source as a directory, then coverage.py would look for importable Python files in that directory, and could identify ones that had never been executed at all. But if you specified it as a package name, that detection wasn?t performed. Now it is, closing issue 426. Thanks to Lo�c Dachary for the fix. - If you started and stopped coverage measurement thousands of times in your process, you could crash Python with a ?Fatal Python error: deallocating None? error. This is now fixed. Thanks to Alex Groce for the bug report. - On PyPy, measuring coverage in subprocesses could produce a warning: ?Trace function changed, measurement is likely wrong: None?. This was spurious, and has been suppressed. - Previously, coverage.py couldn?t start on Jython, due to that implementation missing the multiprocessing module (issue 551). This problem has now been fixed. Also, issue 322 about not being able to invoke coverage conveniently, seems much better: jython -m coverage run myprog.py works properly. - Let?s say you ran the HTML report over and over again in the same output directory, with --skip-covered. And imagine due to your heroic test-writing efforts, a file just acheived the goal of 100% coverage. With coverage.py 4.3, the old HTML file with the less-than-100% coverage would be left behind. This file is now properly deleted. - update to Version 4.3.1 ? 2016-12-28: - Some environments couldn?t install 4.3, as described in issue 540. This is now fixed. - The check for conflicting --source and --include was too simple in a few different ways, breaking a few perfectly reasonable use cases, described in issue 541. The check has been reverted while we re-think the fix for issue 265. - update to Version 4.3 ? 2016-12-27: Special thanks to Lo�c Dachary, who took an extraordinary interest in coverage.py and contributed a number of improvements in this release. - The HTML report now supports a --skip-covered option like the other reporting commands. Thanks, Lo�c Dachary for the implementation, closing issue 433. - Subprocesses that are measured with automatic subprocess measurement used to read in any pre-existing data file. This meant data would be incorrectly carried forward from run to run. Now those files are not read, so each subprocess only writes its own data. Fixes issue 510. - Coverage.py wouldn?t execute sys.excepthook when an exception happened in your program. Now it does, thanks to Andrew Hoos. Closes issue 535. - The coverage combine command will now fail if there are no data files to combine. The combine changes in 4.2 meant that multiple combines could lose data, leaving you with an empty .coverage data file. Fixes issues issue 525, issue 412, issue 516, and probably issue 511. - The branch coverage issues described in issue 493, issue 496, and issue 502 are now fixed, thanks to Lo�c Dachary. - Options can now be read from a tox.ini file, if any. Like setup.cfg, sections are prefixed with ?coverage:?, so [run] options will be read from the [coverage:run] section of tox.ini. Implements part of issue 519. Thanks, Stephen Finucane. - Specifying both --source and --include no longer silently ignores the include setting, instead it fails with a message. Thanks, Nathan Land and Lo�c Dachary. Closes issue 265. - Coverage.py can now search .pex files for source, just as it can .zip and .egg. Thanks, Peter Ebden. - update to 4.2: - Since ``concurrency=multiprocessing`` uses subprocesses, options specified on the coverage.py command line will not be communicated down to them. Only options in the configuration file will apply to the subprocesses. Previously, the options didn't apply to the subprocesses, but there was no indication. Now it is an error to use ``--concurrency=multiprocessing`` and other run-affecting options on the command line. This prevents failures like those reported in `issue 495`_. - Filtering the HTML report is now faster, thanks to Ville Skytt�. - update to 4.0.3: - Fixed a mysterious problem that manifested in different ways: sometimes hanging the process (`issue 420`_), sometimes making database connections fail (`issue 445`_). - The XML report now has correct ``<source>`` elements when using a ``--source=`` option somewhere besides the current directory. This fixes `issue 439`_. Thanks, Arcady Ivanov. - Fixed an unusual edge case of detecting source encodings, described in `issue 443`_. - Help messages that mention the command to use now properly use the actual command name, which might be different than "coverage". Thanks to Ben Finney, this closes `issue 438`_. - add LICENSE.txt - Pre require coreutils. This package is needed for the rm call in the pre section. Subprocess failed. Error: RPM failed: /var/tmp/rpm-tmp.gONanE: line 3: rm: command not found - specfile: * updated license * updated update-alternatives * README.txt -> README.rst - update to version 4.0: (long list, see http://coverage.readthedocs.org/en/latest/changes.html) - fix rhel deps by depending on /usr/sbin/update-alternatives ==== ucode-intel ==== Version update (20160714 -> 20170511) - Update to version 20170511 - Update to version 20161104. ==== yast2-bootloader ==== Version update (3.2.22 -> 3.2.23) - AuotYaST configuration: Set StorageDevices flag disks_valid to true. So libstorage can scan valid disks and "/" partition can be found. (bnc#1043132) - 3.2.23 ==== yast2-ntp-client ==== Version update (3.2.9 -> 3.2.12) - Resrict records are written at the end but the default file and most profiles use them at the beginning, which mangles the file completely (bsc#983486). To fix it we have just changed the order of writing. - 3.2.12 - AutoYaST: Fix crash when trying to sanitize not string values, for example initial_sync. - AutoYaST: Sanitize comments by only removing blank spaces at the beginning and adding line break. This avoids augeas parse errors (bsc#1045777). - 3.2.11 - AutoYaST: Fix crash in CFA when creating a command record with some key value option is given (bsc#1045968) - 3.2.10 - AutoYaST: Comments from autoyast profile should not be sanitized to avoid entries without space between value and comment (e.g trustedkey 1# coment). This is caused by a bug in augeas adding new entries. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

2 1

[opensuse-factory] acpid requires systemd?
by Felix Miata 25 Apr '24

25 Apr '24

Can this be true? If so, why? Zypper won't let me upgrade acpid without breakage unless systemd is installed too. I have systemd locked out, as I'd rather test things I can understand in Factory, not major overhaul stuff. -- "The wise are known for their understanding, and pleasant words are persuasive." Proverbs 16:21 (New Living Translation) Team OS/2 ** Reg. Linux User #211409 ** a11y rocks! Felix Miata *** http://fm.no-ip.com/ -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-factory+help(a)opensuse.org

4 3

[opensuse-factory] Too many packages to process
by Vojtěch Zeisek 12 Mar '21

12 Mar '21

I'm not sure, if this is bug or feature... After few days, update applet (TW, KDE) says there are 6843 new updates (TeX, R, ... ;-). When I click to "Install updates" error "Too many packages to process (6843/5200)" appears. Zypper handles it well. Is it worth of bug report? To b.o.o? Yours, V. -- Vojtěch Zeisek Komunita openSUSE GNU/Linuxu Community of the openSUSE GNU/Linux https://www.opensuse.org/ https://trapa.cz/

8 10

[opensuse-factory] [Tumbleweed] krdc stopped working
by Achim Gratz 17 Aug '18

17 Aug '18

Unfortunately I can't say when exactly this happened, but while I was updating a Win7 laptop today I tried to log into it via krdc and that no longer works. At first I thought it was related to the new firewalld, but apparently there's some problem with Xcb? Mar 14 19:48:40 Gertrud kwin_x11[2209]: QXcbConnection: XCB error: 3 (BadWindow), sequence: 50790, resource id: 56623169, major code: 19 (DeleteProperty), minor code: 0 Mar 14 19:48:40 Gertrud kwin_x11[2209]: QXcbConnection: XCB error: 3 (BadWindow), sequence: 50800, resource id: 56623169, major code: 19 (DeleteProperty), minor code: 0 Mar 14 19:48:40 Gertrud kwin_x11[2209]: QXcbConnection: XCB error: 3 (BadWindow), sequence: 50801, resource id: 56623169, major code: 18 (ChangeProperty), minor code: 0 Mar 14 19:48:40 Gertrud kwin_x11[2209]: QXcbConnection: XCB error: 3 (BadWindow), sequence: 50802, resource id: 56623169, major code: 19 (DeleteProperty), minor code: 0 Mar 14 19:48:40 Gertrud kwin_x11[2209]: QXcbConnection: XCB error: 3 (BadWindow), sequence: 50803, resource id: 56623169, major code: 19 (DeleteProperty), minor code: 0 Mar 14 19:48:40 Gertrud kwin_x11[2209]: QXcbConnection: XCB error: 3 (BadWindow), sequence: 50804, resource id: 56623169, major code: 19 (DeleteProperty), minor code: 0 Mar 14 19:48:40 Gertrud kwin_x11[2209]: QXcbConnection: XCB error: 3 (BadWindow), sequence: 50805, resource id: 56623169, major code: 7 (ReparentWindow), minor code: 0 Mar 14 19:48:40 Gertrud kwin_x11[2209]: QXcbConnection: XCB error: 3 (BadWindow), sequence: 50806, resource id: 56623169, major code: 6 (ChangeSaveSet), minor code: 0 Mar 14 19:48:40 Gertrud kwin_x11[2209]: QXcbConnection: XCB error: 3 (BadWindow), sequence: 50807, resource id: 56623169, major code: 2 (ChangeWindowAttributes), minor code: 0 Mar 14 19:48:40 Gertrud kwin_x11[2209]: QXcbConnection: XCB error: 3 (BadWindow), sequence: 50808, resource id: 56623169, major code: 10 (UnmapWindow), minor code: 0 Regards, Achim. -- +<[Q+ Matrix-12 WAVE#46+305 Neuron microQkb Andromeda XTk Blofeld]>+ DIY Stuff: http://Synth.Stromeko.net/DIY.html -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

6 13

[opensuse-factory] Trying Leap 15.0: Where is XFCE?
by Carlos E. R. 31 May '18

31 May '18

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hi, I just attempted to test Leap 15.0 in my laptop, and I don't see the XFCE pattern. I had to abort. Has XFCE been removed? Is there some trick? I used openSUSE-Leap-15.0-DVD-x86_64-Build128.1-Media.iso No internet. - -- Cheers Carlos E. R. (from 42.2 x86_64 "Malachite" at Telcontar) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iF4EAREIAAYFAlqF2h0ACgkQja8UbcUWM1z8IwEAjoaPmiCdcp9/KThlfGp6IRYe KYPvhgzaCbpYzLhlHNAA/0T714drgIvRZm4wERVwd0J0Rjb3SAew2e93AFII1Yob =EJke -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

27 108

[opensuse-factory] rpmlint-checks: I: polkit-untracked-privilege will become an error
by Matthias Gerstner 13 Apr '18

13 Apr '18

Hello, the SUSE security team recently decided to turn the rpmlint check "polkit-untracked-privilege" into an error. Currently this is only an informational message. If you get messages like these in your package: gvfs-backends.x86_64: I: polkit-untracked-privilege org.gtk.vfs.file-operations (no:no:auth_admin_keep) then they will become an error with 10.000 extra badness in the future, as is the case with other polkit related errors. This affects all packages in openSUSE:Factory. The rationale behind that is that even though these polkit rules seem harmless (only locally logged in users with admin privileges can acquire the polkit privilege), they can expose security issues. This is because the correct enforcement of the polkit policy is depending on the individual package's polkit adaption. Therefore such packages must go through a review process with the security team. You can trigger this process by opening a bug against security-team(a)suse.de and adding an AUDIT prefix to the bug summary. For more about this please refer to this wiki page: https://en.opensuse.org/openSUSE:Package_security_guidelines We don't expect many packages to be affected by this. If you have any questions please reach out to us. Thank you Matthias -- Matthias Gerstner <matthias.gerstner(a)suse.de> Dipl.-Wirtsch.-Inf. (FH), Security Engineer https://www.suse.com/security Telefon: +49 911 740 53 290 GPG Key ID: 0x14C405C971923553 SUSE Linux GmbH GF: Felix Imendörffer, Jane Smithard, Graham Norton HRB 21284 (AG Nuernberg)

2 3

[opensuse-factory] Leap 15.0: problem with DRM patches
by Michael Ströder 06 Apr '18

06 Apr '18

HI! On an old laptop running Tumbleweed there were crashes in DRM module making all things only working *very* slow. There have been postings here and some tickets quite a while ago but issues were never resolved. With Leap 15 until kernel 4.12.14-lp150.5 everything worked smoothly on Leap 15 and using XFCE. With the DRM patches installed with 4.12.14-lp150.6 same problems now appear in Leap 15. Can I disable this new DRM stuff with a kernel switch at boot time? I'd still like to Hardware: Fujitsu Siemens Lifebook E8310 35: PCI 02.1: 0380 Display controller [Created at pci.378] Unique ID: ruGf.CRronklu1ZA SysFS ID: /devices/pci0000:00/0000:00:02.1 SysFS BusID: 0000:00:02.1 Hardware Class: graphics card Model: "Intel Mobile GM965/GL960 Integrated Graphics Controller (secondary)" Vendor: pci 0x8086 "Intel Corporation" Device: pci 0x2a03 "Mobile GM965/GL960 Integrated Graphics Controller (secondary)" SubVendor: pci 0x10cf "Fujitsu Limited." SubDevice: pci 0x13f5 Revision: 0x03 Memory Range: 0xfe100000-0xfe1fffff (rw,non-prefetchable) Module Alias: "pci:v00008086d00002A03sv000010CFsd000013F5bc03sc80i00" Config Status: cfg=new, avail=yes, need=no, active=unknown Ciao, Michael. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

3 5

[opensuse-factory] Tumbleweed - Review of the week 2018/13
by Dominique Leuenberger / DimStar 04 Apr '18

04 Apr '18

Dear Tumbleweed users and hackers, Looking at the snapshots (and the non-released snapshots) one could believe we entered spring break already. There have been only 3 snapshots released this week, a few more tested and discarded, for different reasons. The released snapshots were 0320, 0324 and 0326 and brought you these updates: * Mozilla Firefox 59.0 * KDE applications 17.12.3 * KDE Frameworks 5.44.0 * Postfix 3.3.0 * PostgreSQL 10.3 * Linux kernel 4.15.11 & 4.15.13 * libtirpc1.0.3: special note here: there were changes in how ports are being assigned, which impacts NIS servers, or rather communication with them. See linux-nfs.org[0] and RedHat Bug[1] for more information. The future snapshots will bring these updates/changes: * Mesa 18.0 final * KDE Plasma 5.12.4 * LibreOffice 6.0.3.1 * Kubic will switch to a multi-step installation process * Samba4.8 * Kernel config change: support signed modules; loading modules with none/invalid signatures will be possible, but result in warnings. * Automake 1.16: as usual, a bunch of builds will fail, mostly for patching the build system and then relying on an implicit automake call, which only works as long as the automake version did not change. * vpnc and networkmanager-vpnc will be removed from the distro: openvpn supports those use cases now. * LLVM 6.0 * cmake 3.11.0 Cheers, Dominique [0] https://bugzilla.linux-nfs.org/show_bug.cgi?id=320 (invalid cert) [1] https://bugzilla.redhat.com/show_bug.cgi?id=1560736

11 34

[opensuse-factory] Leap 15.0 Build 183.1 released!
by Ludwig Nussel 04 Apr '18

04 Apr '18

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&version=15.0&bui… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Distribution&q… When you reply to discuss some issues, make sure to change the subject. Please use the test plan at https://docs.google.com/spreadsheets/d/1AGKijKpKiJCB616-bHVoNQuhWHpQLHPWCb3… to record your testing efforts and use bugzilla to report bugs. Packages changed: LibVNCServer Mesa Mesa-drivers augeas (1.9.0 -> 1.10.1) btrfsmaintenance (0.4 -> 0.4.1) colord (1.4.1 -> 1.4.2) digikam (5.8.0 -> 5.9.0) empathy (3.25.90 -> 3.12.14) gnome-dictionary graphite2 java-11-openjdk (11.0.0.0~4 -> 11.0.0.0~5) libgcrypt libgit2 (0.26.0 -> 0.26.3) libidn libnettle libnss_usrfiles libqt5-qtmultimedia libqt5-qtwebkit mozc nautilus-sendto re2 (20180201 -> 20180301) transmission (2.92 -> 2.93) unar unixODBC (2.3.4 -> 2.3.6) vinagre === Details === ==== LibVNCServer ==== - security update * CVE-2018-7225 [bsc#1081493] + LibVNCServer-CVE-2018-7225.patch ==== Mesa ==== Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 libwayland-egl1 - Update to 18.0.0-rc5 * The fifth and final release candidate for Mesa 18.0.0. Modulo serious regressions, it is anticipated that it will become Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT - supersedes u_glsl-linker-error.patch - no longer try to use non-existing python3-mako as BuildRequires on Leap 42.3 - u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch * Fixes laggy mouse in Wayland. (fdo#104926) ==== Mesa-drivers ==== Subpackages: Mesa-dri Mesa-dri-nouveau Mesa-gallium Mesa-libva libvdpau_nouveau libvdpau_r300 libvdpau_r600 libvdpau_radeonsi libvulkan_intel libvulkan_radeon libxatracker2 - Update to 18.0.0-rc5 * The fifth and final release candidate for Mesa 18.0.0. Modulo serious regressions, it is anticipated that it will become Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT - supersedes u_glsl-linker-error.patch - no longer try to use non-existing python3-mako as BuildRequires on Leap 42.3 - u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch * Fixes laggy mouse in Wayland. (fdo#104926) ==== augeas ==== Version update (1.9.0 -> 1.10.1) Subpackages: augeas-lenses libaugeas0 - update to 1.10.1: General changes/additions New CLI utility 'augmatch' to print the tree for a file and select some of its contents New command 'count' in augtool New function 'not(bool) -> bool' for path expressions The path expression 'label[. = "value"]' can now be written more concisely as 'label["value"]' API changes libfa has now a function fa_json to export an FA as a JSON file, and fa_state_* functions that make it possible to iterate over the FA's states and transitions. (Pedro Valero Mejia) Add functions aug_ns_label, aug_ns_value, aug_ns_count, and aug_ns_path to get the label (with index), the value, the number of nodes, and the fully qualified path for nodes stored in a nodeset in a variable efficiently Lens changes/additions Grubenv: new lens to process /boot/grub/grubenv (omgold) Httpd: also read files from /etc/httpd/conf.modules.d/*.conf (Tomas Meszaros) (Issue #537) Nsswitch: allow comments at the end of a line (Philip Hahn) (Issue #517) Ntp: accept 'ntpsigndsocket' statement (Philip Hahn) (Issue #516) Properties: accept empty comments with DOS line endings (Issue #161) Rancid: new lens for RANCiD router databases (Matt Dainty) Resolv: accept empty comments with DOS line endings (Issue #161) Systemd: also process /etc/systemd/logind.conf (Pat Riehecky) YAML: process a document that is just a sequence (John Vandenberg) - drop chrpath dependency, the offending dump binary is no longer shipped - Use %license (boo#1082318) ==== btrfsmaintenance ==== Version update (0.4 -> 0.4.1) - update to version 0.4.1 - defrag plugin: python2 and 3 compatibility - defrag plugin: target extent size lowered to 32MiB (#43) - shell compatibility fixes - systemd unit type fixes - Removed patch: python3-support-bsc1070322.diff (upstream) - Add missing btrfsmaintenance-refresh.path [bsc#1084871] - Use %license [bsc#1082318] ==== colord ==== Version update (1.4.1 -> 1.4.2) Subpackages: colord-color-profiles colord-lang libcolord2 libcolorhug2 - Update to version 1.4.2: + New Features: - Add cd_icc_set_created. - Add --enable-timestamps option for CREATED header. + Bugfixes: - Avoid buffer overflow when reading profile_id. - Fix the detection of duplicate EDIDs. - Make udev hwdb optional by using pnp.ids as fallback. - Raise _XOPEN_SOURCE to 700 to enable C99 on FreeBSD. - Refactor build directory selection. - Set cd-create-profile date to SOURCE_DATE_EPOCH. - Pass new option enable-udev-rules=true to meson. - Modernize spec-file by calling spec-cleaner ==== digikam ==== Version update (5.8.0 -> 5.9.0) Subpackages: digikam-doc digikam-lang kipi-plugins kipi-plugins-lang libdigikamcore5 showfoto - Update to 5.9.0: * https://www.digikam.org/news/2018-03-25-5.9.0_release_announcement/ - New features (from NEWS): General : Libraw updated to last 0.18.8. - 45 bugs fixed - Drop upstream patches: * fix-font-size-in-tooltips.patch * digikam-5.8.0.fix-db-migration-0001.patch * digikam-5.8.0.fix-db-migration-0002.patch * digikam-5.8.0.fix-db-migration-0003.patch * digikam-5.8.0.fix-db-migration-0004.patch * update-internal-libraw-to-last-stable-0.18.7.patch * update-internal-libraw-to-last-0.18.8.patch - Drop fix-italian-docs-with-older-kdoctools.patch, Leap 42.2 is no longer supported - Don't try to delete libkvkontakte translations, they are no longer installed (kde#369517) - Also don't try to delete *.a files and locale/x-test, no longer necessary ==== empathy ==== Version update (3.25.90 -> 3.12.14) Subpackages: empathy-lang telepathy-mission-control-plugin-goa - Unconditionally enable translation-update-upstream: on Tumbleweed, this results in a NOP and for Leap in SLE paid translations being used (boo#1086036). - Revert to version 3.12.14. ==== gnome-dictionary ==== Subpackages: gnome-dictionary-lang - Unconditionally enable translation-update-upstream: on Tumbleweed, this results in a NOP and for Leap in SLE paid translations being used (boo#1086036). ==== graphite2 ==== - Use python3 everywhere - Drop fonttools test dep as it pulls TON of py3 packages ==== java-11-openjdk ==== Version update (11.0.0.0~4 -> 11.0.0.0~5) Subpackages: java-11-openjdk-headless - Update to upstream tag jdk-11+5 * Fixes: + S8160767: [TEST_BUG] java/awt/Frame/MaximizedToIconified/MaximizedToIconified.java + S8182684: Further clarify InputStream#available() + S8183554: Add constructors with Charset parameter for FileReader and FileWriter + S8187635: On Windows Swing changes keyboard layout on a window activation + S8188240: Reflection Proxy should skip static methods + S8189230: JDK method: java.lang.Integer.numberOfLeadingZeros(int) can be optimized + S8190347: [TESTBUG] Test javax/swing/JWindow/ /ShapedAndTranslucentWindows/TranslucentJComboBox.java fails + S8190767: if JFrame is maximized on OS X, all new JFrames will be maximized by default + S8193017: Import freetype sources into OpenJDK source tree + S8193584: (testbug) TestSocketFactory fails intermittently with ConcurrentModificationException + S8194767: Regression automated Test 'javax/swing/JEditorPane/6917744/bug6917744.java' fails + S8194943: Regression automated test 'open/test/jdk/javax/ /swing/JInternalFrame/8020708/bug8020708.java' fails + S8195738: scroll poistion in ScrollPane is reset after calling validate() + S8196435: Regression automated Test 'java/awt/Mouse/ /GetMousePositionTest/GetMousePositionWithOverlay.java' fails + S8196748: tools/jar tests need to tolerate unrelated warnings + S8197785: javax.accessibility.AccessibleBundle will reload the ResourceBundle for every call to toDisplayString + S8198406: Test TestAATMorxFont is unstable + S8198605: Touch keyboard is shown for a non-focusable text component + S8198606: Touch keyboard does not hide, when a text component looses focus + S8198613: Test cases result in failure or timeout when run with OpenGL backend + S8198777: JList.getPreferredScrollableViewportSize(): fix mistake in doc for height calc + S8198889: Clarify the throwing of exceptions from ConstantBootstraps.invoke + S8198922: Provide instrumentation for sanity/client/SwingSet/src/ButtonDemoScreenshotTest.java + S8198989: Provide more diagnostic IAE messages + S8199009: test/jdk/java/util/Locale/SoftKeys.java fails with OutOfMemoryError + S8199022: New failures should be added to ProblemList + S8199215: Re-examine getFreePort method in test infrastructure library + S8199258: BigInteger.bitLength() should explicitly specify behavior when the value is zero + S8199329: Remove code that attempts to read bytes after connection reset reported + S8199420: Update javadoc tags in java.lang.System and related + S8199423: Create builds-infra Mach5 job + S8199428: install-file macro fails on filenames with space on Solaris + S8199443: Nashorn multithread bottleneck with "use strict" + S8199451: Create linux-aarch64 cross-compilation devkit, and fix cross-compilation + S8199453: Enable link-time generation of constructor forms + S8199462: Use Reference.reachabilityFence in direct ByteBuffer methods + S8199464: Remove remaining vestiges of Java_sun_reflect_Reflection_getCallerClass + S8199469: Disable generate-jli-classes when building interim-image + S8199470: Remove unused property file.encoding.pkg + S8199471: Enable generation of callSiteForms at link time + S8199473: Support Visual Studio BuildTools with VS2017 + S8199483: Clean up some non-standard LDFLAGS usage + S8199606: Set -lc as global LIBS on solstudio + S8199611: (se) Minor selector implementation clean-up + S8199616: Fix @module declarations in tier1 tests + S8199636: Unify naming for jaas_unix and jaas_nt + S8199639: Introduce SetupJdkLibrary and SetupJdkExecutable + S8199640: Split up BUILD_LIBKRB5 into the two, unrelated compilations it consists of + S8199647: java/util/Locale/SoftKeys.java fails with OutOfMemoryError again + S8199668: make/lib cleanup + S8199681: Remove boilerplate code from creating native jtreg tests + S8199745: JDK-8199668 introduced a build race on macosx - Modified patches: * system-pcsclite.patch * java10-improved-fonts.patch -> java11-improved-fonts.patch + Rediff to changed context ==== libgcrypt ==== Subpackages: libgcrypt20 libgcrypt20-32bit - Use %license (boo#1082318) ==== libgit2 ==== Version update (0.26.0 -> 0.26.3) - Update to 0.26.3: * Fix cloning of the libgit2 project with git clone --recursive by removing an invalid submodule from our testing data. * Fix endianness of the port in p_getaddrinfo(). * Fix handling of negative gitignore rules with wildcards. * Fix handling of case-insensitive negative gitignore rules. * Fix resolving references to a tag if the reference is stored with its fully resolved OID in the packed-refs file. * Fix checkout not treating worktree files as modified when only their mode has changed. * Fix rename detection with GIT_DIFF_FIND_RENAMES_FROM_REWRITES. * Fixes memory handling issues when reading crafted repository index files. The issues allow for possible denial of service due to allocation of large memory and out-of-bound reads. (CVE-2018-8098 bnc#1085257 CVE-2018-8099 bnc#1085256) * Updates the bundled zlib to 1.2.11. Users who build the bundled zlib are vulnerable to security issues in the prior version. - Modernize spec-file by calling spec-cleaner ==== libidn ==== - Add patch to fix bsc#1056450 CVE-2017-14062: * libidn-CVE-2017-14062.patch - Use %license (boo#1082318) ==== libnettle ==== Subpackages: libhogweed4 libnettle6 - Use %license (boo#1082318) ==== libnss_usrfiles ==== - Use %license instead of %doc [bsc#1082318] - The default nsswitch.conf has changed again back to the old values [bsc#1074515] ==== libqt5-qtmultimedia ==== - Enable openal requirement in openSUSE only * For SLE where that dependency is not available (bsc#886207) ==== libqt5-qtwebkit ==== Subpackages: libQt5WebKit5 libQt5WebKit5-imports libQt5WebKitWidgets5 - Set minimum amount of RAM in _constraints to 8 GiB for aarch64, use the default value of 6 GiB for armv7/armv6 ==== mozc ==== Subpackages: fcitx-mozc ibus-mozc ibus-mozc-candidate-window mozc-gui-tools - add excludearch for ppc/ppc64/s390/s390x as the code assumes little endian all over the place (bsc#1086763) ==== nautilus-sendto ==== Subpackages: nautilus-sendto-lang - Rewrite description and summary to be more accurate with current package features set. ==== re2 ==== Version update (20180201 -> 20180301) - update to 2018-03-01: * no longer linking against librd and libm * other developer visible changes ==== transmission ==== Version update (2.92 -> 2.93) Subpackages: transmission-common transmission-gtk transmission-gtk-lang - Remove marketing from description. - Update to version 2.93: + Mitigate dns rebind attacks against daemon CVE-2018-5702). + Fix crash on handshake if establishing DH shared secret fails. + Fix crash when switching to next tracker during announcement. + Fix potential issue during password salt extraction in OOM situation. + Workaround glib_DEFUN- and glib_REQUIRE-related configuration issue. + Fix building against OpenSSL 1.1.0+. - Drop 0001-transmission-build-against-openssl-1.1.0.patch: fixed upstream (commit id f91cf5a). - Drop 0002-Fix-coding-style-and-building-with-TR_LIGHTWEIGHT.patch: fixed upstream (commit id 8c8386a). - Drop CVE-2018-5072.patch: fixed upstream (commit id cf7173df). - Cleanup with spec-cleaner. - Use https url. - Use qmake/make_jobs macros for building qt binary. ==== unar ==== - revert changes from the last submission and move unrar_wrapper script to a separate package as it seems that openSUSE:Factory is not ready to obsolete unrar by unar yet [bsc#1083834], [fate#323896] ==== unixODBC ==== Version update (2.3.4 -> 2.3.6) - Add BuildRequires: pkgconfig since we install .pc files - Add unixODBC-rpmlintrc: devel files are in the right place - bsc#1062860: Recommend psqlODBC to stay feature complete - bsc#1082060: Update to 2.3.6: * Fix order of arguments in SQLWriteFileDSN.c, fix unwanted free() in iusql.c * Add pkg-config files - bsc#1082290 (CVE-2018-7409): Buffer overflow in unicode_to_ansi_copy() was fixed in 2.3.5 - bsc#1082484 (CVE-2018-7485): Swapped arguments in SQLWriteFileDSN() in odbcinst/SQLWriteFileDSN.c - Remove unixODBC-2.3.1-bison.patch: upstreamed - Remove unixODBC-iaddr.patch: upstreamed - Adapt unixODBC-2.3.1-declarations.patch to unixODBC-2.3.6-declarations.patch - Update unixODBC-gccwarnings.patch ==== vinagre ==== Subpackages: vinagre-lang - Add vinagre-invisible-fullscreen-toolbar.patch: Fix showing of toolbar as invisible in fullscreen mode (bgo#770484, boo#1008585); patch taken from upstream bug comment. - Only run post scripts for openSUSE < 1500; for newer versions these runs are taken care of rpm file triggers and no longer needed. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

6 8

[opensuse-factory] Nice grub/boot artwork in Tumbleweed
by Vit Pelcak 02 Apr '18

02 Apr '18

Hello. When I rebooted my system after the update, I spotted new artwork for grub/boot. I like it and I just wanted to share my appreciation. Nice job. Thank you. -- Vit Pelcak vpelcak(a)suse.cz Team Lead in QA/Maintenance SUSE LINUX, s.r.o. CORSO IIa Krizikova 148/34 186 00 Prague 8 Czech Republic

7 6