October 2020 - openSUSE Factory - openSUSE Mailing Lists

[opensuse-factory] Tumbleweed - Review of the week 2020/42
by Dominique Leuenberger / DimStar 16 Oct '20

16 Oct '20

Dear Tumbleweed users and hackers, This week, the openSUSE/LibreOffice conference has started, but Tumbleweed did not let itself be stopped by that. During this week, we have seen 5 snapshots being published (1008, 1009, 1011, 1012, and 1014). The most relevant changes included: * Mozilla Firefox 81.0.1 * Linux kernel 5.8.14 * LibreOffice 7.0.2rc2 * GNOME 3.36.7 * KDE Applications 20.08.2 * KDE Frameworks 5.75.0 * KDE Plasma 5.20.0 This is mostly as announced last week about the upcoming things. This leaves us currently with these major changes left in planning/staging: * GNOME 3.38.1 (mozjs78 has since been improved, but is not yet available in Tumbleweed) * Mesa 20.2 (The transparency issues seem to be fixed in combination with Plasma 5.20.0, so it’s shaping up well) * openssl 1.1.1h (neon (gh#notroj/neon#38 issue still valid, but the maintainer debugged and accepted the test failures) * openssl 3.0 (long-term; no progress in the last few weeks) * RPM 4.16: steady progress made with package fixes. * nasm 2.15.4: breaks dav1d, firefox, and thunderbird (which both ship embedded dav1d) * libmicrohttpd 0.9.71: breaks pcp and libyui * jsoncpp 1.9.4: breaks libyui Cheers, Dominique

1 0

[opensuse-factory] Tumbleweed snapshot 20201014 - kstart5 no longer runs desktop files
by mh＠mike.franken.de 16 Oct '20

16 Oct '20

Hi *, just installed Tumbleweed snapshot 20201014 and now kstart5 no longer runs desktop files: /usr/bin/kstart5 --application $HOME/Desktop/Xconsolen.desktop or /usr/bin/kstart5 --application ~/Desktop/Xconsolen.desktop or /usr/bin/kstart5 --application /home/<me>/Desktop/Xconsolen.desktop always gives No such service "" Same commands with the deprecated "--service" option instead of "-- application" gives "Could not find service ''." Using a double click on the according desktop icon works as expected. Is this intended? TIA. Bye. Michael. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

1 0

[opensuse-factory] openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 15 Oct '20

15 Oct '20

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have been failing to build for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - python-vdirsyncer Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

1 0

[opensuse-factory] Re: [opensuse-project] Confirming list of stakeholders for the openSUSE Leap 15.2.1 mini interlock on 19th October
by Lubos Kocman 15 Oct '20

15 Oct '20

The date has changed from 19th October to 20th October due to unavailablity of some of the stakeholders. This particular document will be used for the signoff. https://en.opensuse.org/Portal:Jump/Leap15.2.1:GoNogo On Thu, 2020-10-15 at 11:25 +0200, Lubos Kocman wrote: > Hello Christian, > > that's a fair point. And I agree that Leap 15.2.1 would be basically > respin of 15.2 + Updates with more SUSE LLC signed binaries. > > We do run tests for releases up to 42.3 however our main focus is on > 15.2 -> 15.2.1. > > Lubos > > On Wed, 2020-10-14 at 17:42 +0200, Christian Boltz wrote: > > Hello, > > > > Am Dienstag, 13. Oktober 2020, 11:27:22 CEST schrieb Lubos Kocman: > > > What exactly are we signing off: > > > agreed items listed at > > > https://etherpad.opensuse.org/p/ClosingTheLeapGap-20200924-interlock-discus… > > > > Looks mostly good, with one exception: > > > > Migration of Leap 15.2 to Leap 15.2.1. Not necessarily the > > older > > releases. Our docs say you need to migrate from release to > > release > > and follow the n+1 migration scenario (do not skip any release > > in > > between). > > > > I know that 15.2.1 is technically a separate release, but for users > > it > > will probably look like a "respin of 15.2 including all > > maintenance > > updates". Of course there are changes "under the hood" (like using > > the > > SLE binary RPMs), but that's not too user-visible or -relevant. > > > > Therefore I'd like to see official support for updates from 15.1 > > to > > 15.2.1 (skipping 15.2) and also (next year) from 15.2 to 15.3 > > (skipping > > 15.2.1). > > > > On the positive side, our upgrades rarely break, so hopefully this > > request will only mean a bit of paperwork ;-) > > > > > > Regards, > > > > Christian Boltz > > -- > > > [Factory] is also expected to have new features and behaviours, > > > which will surprise people, > > Oooow, I like surprises - as long as they frighten the crap out of > > me > > and make me soil my panties :-) . > > [> Carlos E. R. and Basil Chupin in opensuse-factory] -- Best regards Luboš Kocman Release Manager openSUSE Leap SUSE Software Solutions Germany GmbH Maxfeldstr. 5 90409 Nuremberg Germany (HRB 36809, AG Nürnberg) Managing Director: Felix Imendörffer

1 0

[opensuse-factory] Inconsistency when using osc ls
by John Paul Adrian Glaubitz 15 Oct '20

15 Oct '20

Hi! I am currently preparing a large maintenance update for SLE-12/15 and ran into a problem with "osc ls" which has inconsistent output depending on how the command is invoked. I'm using "osc ls" to assemble a list of all Azure packages in the SLE maintenance update and also use "osc ls $PROJECT $PACKAGE" to verify whether an individual package is present in a certain project. To my surprise, I noticed that "osc ls $PROJECT" is not listing all packages that can be found with "osc ls $PROJECT $PACKAGE" which is most likely a result of the latter showing inherited packages while the former does not. Example: "osc ls $PROJECT | grep $PACKAGE" does not show a particular package: glaubitz@suse-laptop:~> osc ls openSUSE:Leap:15.2:Update |grep pidgin glaubitz@suse-laptop:~> "osc ls $PROJECT $PACKAGE" lists that package: glaubitz@suse-laptop:~> osc ls openSUSE:Leap:15.2:Update pidgin pidgin-2.13.0.tar.bz2 pidgin-2.13.0.tar.bz2.asc pidgin-Leaky-deprecation-clean-ups.patch pidgin-enable-sni-gnutls.patch pidgin-fix-perl-build.patch pidgin-ncurses-6.0-accessors.patch pidgin-nonblock-common.patch pidgin-nonblock-gwim.patch pidgin-prefs.xml pidgin-use-default-alsa.patch pidgin.changes pidgin.keyring pidgin.spec glaubitz@suse-laptop:~> Any idea how I can make "osc ls $PROJECT $PACKAGE" to be consistent with "osc ls $PROJECT" and not list inherited packages? Thanks, Adrian -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

3 3

[opensuse-factory] Integrated amd gpu framebuffer issue with the latest TW
by josef Reidinger 15 Oct '20

15 Oct '20

Hi, this is just heads up that if you have amd integrated card, then amd gpu drm frame buffer stuck during a boot[1]. You recognize it by seeing message "fb0: switching to amdgpudrmfb from EFI VGA." as last one before black screen. Booting older kernel does not help, using nomodeset as workaround yes. Leap 15.2 is not affected. Josef -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

1 1

[opensuse-factory] SystemD core dumps since 202010* snapshots
by Bjoern Voigt 15 Oct '20

15 Oct '20

Since my last snapshot upgrade with "zypper dup" I have the problem, that Systemd gets a core dump after "systemctl" calls. This my command line: zypper ref; zypper dup; a2dismod mod_php7; systemctl disable sendmail; systemctl stop sendmail; The core dump looks like this: Oct 15 09:21:59 mybox sendmail[18383]: NOQUEUE: SYSERR(root): opendaemonsocket: daemon MTA: cannot bind: Address already in use Oct 15 09:21:59 mybox sendmail[18383]: daemon MTA: problem creating SMTP socket Oct 15 09:21:59 mybox sendmail[18383]: NOQUEUE: SYSERR(root): opendaemonsocket: daemon MTA: server SMTP socket wedged: exiting Oct 15 09:21:59 mybox rsyslogd[1031]: action 'action-38-builtin:ompipe' suspended (module 'builtin:ompipe'), next retry is Thu Oct 15 09:22:29 2> Oct 15 09:22:01 mybox systemd[1]: Reloading. Oct 15 09:22:01 mybox systemd[1]: Assertion 'hashmap_isempty(m->jobs)' failed at src/core/manager.c:1335, function manager_clear_jobs_and_units(> Oct 15 09:22:01 mybox systemd-coredump[19861]: Due to PID 1 having crashed coredump collection will now be turned off. Oct 15 09:22:01 mybox systemd[1]: Caught <ABRT>, dumped core as pid 19860. Oct 15 09:22:01 mybox systemd[1]: Freezing execution. Oct 15 09:22:01 mybox systemd-coredump[19861]: Process 19860 (systemd) of user 0 dumped core. Stack trace of thread 19860: #0 0x00007f21bbbbb917 kill (libc.so.6 + 0x3d917) #1 0x0000558644b3acdf n/a (systemd + 0x3dcdf) #2 0x00007f21bbbbb6c0 __restore_rt (libc.so.6 + 0x3d6c0) #3 0x00007f21bbbbb641 raise (libc.so.6 + 0x3d641) #4 0x00007f21bbba4538 abort (libc.so.6 + 0x26538) #5 0x00007f21bbef75be n/a (libsystemd-shared-246.so + 0x635be) #6 0x0000558644b7e8b8 n/a (systemd + 0x818b8) #7 0x0000558644b39dba n/a (systemd + 0x3cdba) #8 0x00007f21bbba5e0a __libc_start_main (libc.so.6 + 0x27e0a) #9 0x0000558644b3a86a n/a (systemd + 0x3d86a) I am unsure which snapshot caused this problem. I skipped some snapshots because of the keyboard layout problem (#1177545). Currently I have snapshot 20201012. Anyone else with this problem? Greetings, Björn -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

2 1

[opensuse-factory] openSUSE Release Engineering Meeting 14.10.2020
by Lubos Kocman 14 Oct '20

14 Oct '20

All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting ## Participants dleuenberger, lkocman,guillaume_g, rbrown, mlin, dirk, ddemaio !!! Please be aware that this meeting will be already hosted on!!! https://meet2.opensuse.org/ReleaseEngineeringMeeting ## Leap Last Community features review was cancelled due to a training https://en.opensuse.org/Portal:Leap/SLEFeatureRequests Working on slides for OSLO 2020. Leap next and Why should be companies interested in Leap next. Issues with migration https://bugzilla.suse.com/show_bug.cgi?id=1177506 The mini-interlock for Leap 15.2.1 happens on Monday 19th October after the OSLO conference. https://lists.opensuse.org/opensuse-project/2020-10/msg00009.html ## openSUSE Tumbleweed * The DNS issues on openQA seems to be fixed: ariel references an internal DNS Server, and name resolution, incld domains providing dnssec, seems to work * Kernel 5.9 is being delayed by the kernel folks, giving nvidia some chance to catch up (the last two months were apparently not enough) - main issue: license * GNOME 3.38.1 is ready in GNOME:Next; we still miss a maintainer- commitment on mozjs78 (and working packages) ## Richard (Kubic/TW MicroOS) Cockpit will be added to MicroOS as a default installed service *WIP* Kubernetes 1.19.2 certification pending Working on container tests Experimenting with KIND (Kubernetes In Docker) , replacing the Docker/Ubuntu Images with CRI-O/Kubic ones. Two MicroOS Desktop talks at openSUSE Conference, various improvements to the GNOME flavour otw to Factory (printing support, better out of the box icons) ## Max * Finished renaming of Jump -> Leap. Wait for migration and zypper dup test success to work in order to verify the change goes well * Look into systemd-networkd issue on Jump, leave my thoughts on boo#1176088 * Look into wrong repo be added to the system for migration, bsc#1177506 * We need a empty update/jump/15.2/non-oss for now, can someone doing that? :ToTest publishing happens it was just triggered manually by Adrian. We do publish from :ToTest to staging. Publish ftp-prod is blocked on admin(a)opensuse.org request. Lubos and Max to check on this topic. There is a ticket Adrian re-published Jump manually due to work regarding release- compare/obsgendiff release-compare is on codestreams 12 and 15 but still build issues for codestream 11 ## Guillaume - Arm OBS: * obs-arm-4 is still offline (broken nvme) Tumbleweed: * Pointer Authentication and Branch Target Identification (BTI) targeting October for aarch64 user-space: - New problem discovered (due to glibc 2.32?): https://bugzilla.opensuse.org/show_bug.cgi?id=1177629 Jump: * VLC is still missing on aarch64 and ppc64le , but an update has been released in Leap:15.2:Update so, PackageHub/Backports can pick it up - https://bugzilla.suse.com/show_bug.cgi?id=1175972 openQA: - Main openqa worker upgraded to Leap 15.2, but we have big performance problems WSL: WIP to have WSL on aarch64 on https://build.opensuse.org/project/show/home:Guillaume_G:WSL The goal is to have WSL-DistroLauncher package built for aarch64. 32-bit ARMv7: Lubos to talk to PM. Meanwhile Guillaume will drive the planning effort. ## Michel No available until end of October. ppc64 (BE) TW publishing blocked by core dump at install https://bugzilla.opensuse.org/show_bug.cgi?id=1176793 Will be in vacation next week for all October. ## ddemaio * openSUSE + LibreOffice Conference * Conference starts Oct. 15 * Had people testing system on Oct. 13 * Please test ASAP * Telegram Channel for conference - https://bit.ly/2GicEK8 ## Dirk No update TODO: Finalize Tier1 Policy and start Tumbleweed Subsection ## Gerald || Marina Not present ## Tom Not present ## Wolfgang (Package Hub and s390x) Not present ## Ludwig Not present Leap 15.2 MicroOS is temporarily paused. ## Adrian - Jump Update trees have almost 0 size now after the rebase. What's still missing is the updateinfo (information for zypper up -p) What's still missing in the submit request mirroring is the communication back from SLE submission. Clarification https://bugzilla.suse.com/show_bug.cgi?id=1177506 Pool repo is needed for getting the updates for running the jump installation, for migration it's not needed. For jump installation SCC should not influence repositories. But during migration you're basically switching away from Jump and this needs to be replaced by supported product channels. This repository is needed only for update of installation. Why does SCC read this information at all. These respos should not be used after migration at all. Max: when I enable publishing to :ToTest project. Which publish script should we used in what moment. For appliances we can avoid scripts, but for product we need the script. Script should be running when you enable publishing. * SLE Update trees issue with almost 3x the size of the current ftp- tree - Adrian proposes to use SLE :Update snapshot as a baseline for Jump builds. This will significantly reduce the ftp update tree size. Lubos will send an email to confirm that we agree with the proposal. * SLE Update tree is about to get pushed to ftp server * We may have delays in next weeks due to other priorities N��r��y隊Z)z{.��r�+�맲��r��z�^�ˬz��N�(�֜��^� ޭ隊Z)z{.��r�+��0��Ǩ�

1 0

[opensuse-factory] New Tumbleweed snapshot 20201007 released!
by Dominique Leuenberger 14 Oct '20

14 Oct '20

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: alsa-plugins alsa-utils bison (3.6.4 -> 3.7.2) checkpolicy (3.0 -> 3.1) gettext-runtime (0.20.2 -> 0.21) glibc (2.31 -> 2.32) ibus (1.5.22 -> 1.5.23) krename (5.0.0 -> 5.0.1) libqt5-qtwebkit libselinux (3.0 -> 3.1) libselinux-bindings (3.0 -> 3.1) libsemanage (3.0 -> 3.1) libsepol (3.0 -> 3.1) lightdm linux-glibc-devel (5.7 -> 5.8) mozilla-nss ncurses (6.2.20200711 -> 6.2.20200912) policycoreutils (3.0 -> 3.1) python-semanage (3.0 -> 3.1) sysvinit (2.96 -> 2.97) tcpd x11-tools xdm xinit xmodmap xorg-x11-server zsh === Details === ==== alsa-plugins ==== Subpackages: alsa-plugins-pulse alsa-plugins-pulse-32bit alsa-plugins-speexrate alsa-plugins-upmix - Placeholder for SLE15-SP3 sync: jsc#SLE-11987 no functional changes at all ==== alsa-utils ==== - Conditionally add buildreq alsa-topology-devel to fix build errors ==== bison ==== Version update (3.6.4 -> 3.7.2) Subpackages: bison-lang - GNU bison 3.7.2: * fix all known Bison CVEs relating to the bison-the-program itself, not the generated code. * concurrent build issues * Push parsers always use YYMALLOC/YYFREE * Fix unlikely crashes found by fuzzing - GNU bison 3.7.1: * YYPRINT macro is deprecated * --graph will generate a *.gv file by default * Add Counterexample Generation feature * Add File prefix mapping feature * Various bug fixes and behavior changes ==== checkpolicy ==== Version update (3.0 -> 3.1) - Update to version 3.1 * checkpolicy treats invalid characters as an error - might break rare use cases (intentionally) * Drop extern_te_assert_t.patch, is upstream ==== gettext-runtime ==== Version update (0.20.2 -> 0.21) Subpackages: gettext-tools libtextstyle0 - Add multiple new features (bsc#1165138) - Add patches: * 0001-msgcat-Add-feature-to-use-the-newest-po-file.patch * 0002-msgcat-Merge-headers-when-use-first.patch - Reintroduce utoreconf call - Update to 0.21: * Programming languages support: - Shell: o xgettext now recognizes and ignores 'env' invocations and environment variable assignments in front of commands. - Java: o xgettext now recognizes format strings in the Formatter syntax. They are marked as 'java-printf-format' in POT and PO files. o xgettext now recognizes text blocks as string literals. - JavaScript: xgettext parses JSX expressions more reliably. - Ruby: o xgettext now supports Ruby. o 'msgfmt -c' now verifies the syntax of translations of Ruby format strings. * Improvements for translators: - When msgfmt writes a MO file, it now does so in such a way that processes that are currently using an older copy of the MO file will not crash. * Libtextstyle: - Added support for emitting hyperlinks. - New API for doing formatted output. - The example programs support the NO_COLOR environment variable. ==== glibc ==== Version update (2.31 -> 2.32) Subpackages: glibc-32bit glibc-devel glibc-extra glibc-lang glibc-locale glibc-locale-base nscd - Keep nsswitch.conf in /etc for SLES15 - syslog-locking.patch: Correct locking and cancellation cleanup in syslog functions (bsc#1172085, BZ #26100) - ifunc-fma4.patch: x86-64: Fix FMA4 detection in ifunc (BZ #26534) - Update to glibc 2.32 * Unicode 13.0.0 Support * New locale added: ckb_IQ * The GNU C Library now loads audit modules listed in the DT_AUDIT and DT_DEPAUDIT dynamic section entries of the main executable * powerpc64le supports IEEE128 long double libm/libc redirects when using the -mabi=ieeelongdouble to compile C code on supported GCC toolchains * To help detect buffer overflows and other out-of-bounds accesses several APIs have been annotated with GCC 'access' attribute * On Linux, functions the pthread_attr_setsigmask_np and pthread_attr_getsigmask_np have been added * The GNU C Library now provides the header file <sys/single_threaded.h> which declares the variable __libc_single_threaded * The functions sigabbrev_np and sigdescr_np have been added * The functions strerrorname_np and strerrordesc_np have been added * AArch64 now supports standard branch protection security hardening in glibc when it is built with a GCC that is configured with - -enable-standard-branch-protection (or if -mbranch-protection=standard flag is passed when building both GCC target libraries and glibc, in either case a custom GCC is needed) * The deprecated <sys/sysctl.h> header and the sysctl function have been removed * The sstk function is no longer available to newly linked binaries * The legacy signal handling functions siginterrupt, sigpause, sighold, sigrelse, sigignore and sigset, and the sigmask macro have been deprecated * ldconfig now defaults to the new format for ld.so.cache * The deprecated arrays sys_siglist, _sys_siglist, and sys_sigabbrev are no longer available to newly linked binaries, and their declarations have been removed from <string.h> * The deprecated symbols sys_errlist, _sys_errlist, sys_nerr, and _sys_nerr are no longer available to newly linked binaries, and their declarations have been removed from from <stdio.h> * Both strerror and strerror_l now share the same internal buffer in the calling thread, meaning that the returned string pointer may be invalided or contents might be overwritten on subsequent calls in the same thread or if the thread is terminated * Using weak references to libpthread functions such as pthread_create or pthread_key_create to detect the singled-threaded nature of a program is an obsolescent feature * The "files" NSS module no longer supports the "key" database (used for secure RPC) * The __morecore and __after_morecore_hook malloc hooks and the default implementation __default_morecore have been deprecated * The hesiod NSS module has been deprecated and will be removed in a future version of glibc * CVE-2016-10228: An infinite loop has been fixed in the iconv program when invoked with the -c option and when processing invalid multi-byte input sequences * CVE-2020-10029: Trigonometric functions on x86 targets suffered from stack corruption when they were passed a pseudo-zero argument * CVE-2020-1752: A use-after-free vulnerability in the glob function when expanding ~user has been fixed. * CVE-2020-6096: A signed comparison vulnerability in the ARMv7 memcpy and memmove functions has been fixed - riscv-syscall-clobber.patch, ldbl-96-rem-pio2l.patch, long-double-alias.patch: Removed ==== ibus ==== Version update (1.5.22 -> 1.5.23) Subpackages: ibus-dict-emoji ibus-gtk ibus-gtk-32bit ibus-gtk3 ibus-lang libibus-1_0-5 libibus-1_0-5-32bit typelib-1_0-IBus-1_0 - Update version to 1.5.23 * Generate simple.xml with denylist 6042974 508527d 37db75b 6879879 59b902a 568d58d 6ed34f3 5959d6f 5d67a28 394d9a8 ed7bc8d e938846 3aa670e 0d90da4 e4dd6d1 * Accept xdigits only for Unicode typing a440942 * Update emoji-parser with CLDR emoji annotation release-31-0-1 9a9f828 * Update ibusunicodegen.h with unicode-ucd 13.0.0 e10fc89 * Delete deprecated ENABLE_APPINDICATOR_ENGINE_ICON check aa3a9f0 * Fix SEGV 02105c4 f591381 * Fix some errors in ibus-desktop-testing-runner 7b0d091 8da0167 * Refactor source files 0b9d936 0ad5e9a * Fix string formats in translatable strings 7caead1 f8c468a ce865f6 * Use WAYLAND_DISPLAY on Wayland sessions to make up IBus socket name (Carlos Garnacho) 8ce2520 * Skip parsing of compose sequence with invalid keysyms (Neil Shepperd) 0da3cec * Tell Pango about the engine language in the candidate panel (Aaron Muir Hamilton) 3f098dc 79a09f1 * Fix for several error spotted by static analyzer (ntfs.hard) 00adea6 * Remove glib_check_version() in gtk immodule (Changwoo Ryu) 5765bfd * Build the Emoji dictionaries in parallel (Changwoo Ryu) 59d0de4 * Update translation - Drop 0001-Replace-the-Qt-check-for-appindicator-engine-icon-wi.patch, ibus-use-wayland-display-for-socket-name.patch, ibus-socket-name-compatibility.patch. Merged by upstream - Update ibus.spec: Drop the is_opensuse macro to eliminate the difference between SLE-15 and openSUSE-Leap (jsc#SLE-11653). - Move xim.d files to /usr/etc when available, which is currently Tumbleweed only (boo#1176431) ==== krename ==== Version update (5.0.0 -> 5.0.1) - Update to 5.0.1: * Escape/unescape filenames with special characters (kde#391291) * Close the app if the progress dialog is closed (kde#395084) * Fix building against exiv2-0.27 * Fix build with taglib and ECM >= 5.72.0 * Make icons look sharp with HiDPI (kde#418112) - Drop patches merged upstream: * 0001-Use-cmakedefine01-instead-of-macro_bool_to_01.patch * 0002-Fix-building-against-exiv2-0.27.patch * 0003-Fix-the-previous-commits-and-the-build-with-exiv2-0..patch * use-local-cmake-modules-first.patch * Close-the-app-if-the-progress-dialog-is-closed.patch - Drop lower-minimum-cmake-version.patch, Leap 42.3 is no longer supported - Refresh servicemenus-files.patch ==== libqt5-qtwebkit ==== Subpackages: libQt5WebKit5 libQt5WebKit5-imports libQt5WebKitWidgets5 - Add upstream patch qtwebkit-5.212.0_pre20200309-bison-3.7.patch in order to fix build with a recent bison. ==== libselinux ==== Version update (3.0 -> 3.1) Subpackages: libselinux1 libselinux1-32bit selinux-tools - Update to version 3.1: * selinux/flask.h, selinux/av_permissions.h and sepol/policydb/flask.h were removed. All userspace object managers should have been updated to use the dynamic class/perm mapping support. Use string_to_security_class(3) and string_to_av_perm(3) to map the class and permission names to their policy values, or selinux_set_mapping(3) to create a mapping from class and permission index values used by the application to the policy values. * Removed restrictions in libsepol and checkpolicy that required all declared initial SIDs to be assigned a context. * Support for new policy capability genfs_seclabel_symlinks * selinuxfs is mounted with noexec and nosuid * `security_compute_user()` was deprecated ==== libselinux-bindings ==== Version update (3.0 -> 3.1) - Update to version 3.1: * selinux/flask.h, selinux/av_permissions.h and sepol/policydb/flask.h were removed. All userspace object managers should have been updated to use the dynamic class/perm mapping support. Use string_to_security_class(3) and string_to_av_perm(3) to map the class and permission names to their policy values, or selinux_set_mapping(3) to create a mapping from class and permission index values used by the application to the policy values. * Removed restrictions in libsepol and checkpolicy that required all declared initial SIDs to be assigned a context. * Support for new policy capability genfs_seclabel_symlinks * selinuxfs is mounted with noexec and nosuid * `security_compute_user()` was deprecated * Refreshed python3.8-compat.patch ==== libsemanage ==== Version update (3.0 -> 3.1) Subpackages: libsemanage-migrate-store libsemanage1 - Add /var/lib/selinux - Remove libsemanage-update-map-file.patch to prevent checkers from declining the submission. Keeping the snippet in the spec file in case we try to enable LTO again - Update to version 3.1 * Improved manpage * fsync final files before rename - Disabled LTO again. This breaks e.g. shadow and also other packages in security:SELinux - Fix build with LTO: [bsc#1133102] * Enable LTO (Link Time Optimization) and build with -ffat-lto-objects * Update map file to include new symbols and remove wildcards - Add libsemanage-update-map-file.patch ==== libsepol ==== Version update (3.0 -> 3.1) - Update to version 3.1 * Add support for new polcap genfs_seclabel_symlinks * Initialize the multiple_decls field of the cil db * Return error when identifier declared as both type and attribute * Write CIL default MLS rules on separate lines * Sort portcon rules consistently * Remove leftovers of cil_mem_error_handler * Drop remove_cil_mem_error_handler.patch, is included ==== lightdm ==== Subpackages: liblightdm-gobject-1-0 lightdm-lang - Fixup pam stack a bit more (boo#1176338): + Do not create hardlinks between lightdm pam files and xdm's pam files, but install explicit lightdm pam stack that @includes xdm. This has the advantage that, if an admin creates /etc/pam.d/xdm, we will follow this right away. With the hardlinks, the /usr/etc/pam.d/xdm would still be used, which might not be the expected outcome. - Follow XDM's change of moving the default pam config file to /usr/etc (boo#1176338). - Add pre/posttrans scripts to ensure user modified /etc/pam.d/lightdm* survives our move to /usr/etc (and user modification in /etc/pam.d wins over /usr/etc/pam.d). ==== linux-glibc-devel ==== Version update (5.7 -> 5.8) - Update to kernel headers 5.8 ==== mozilla-nss ==== Subpackages: libfreebl3 libfreebl3-hmac libsoftokn3 libsoftokn3-hmac mozilla-nss-certs mozilla-nss-tools - Add patch to fix build on aarch64 - boo#1176934: * nss-freebl-fix-aarch64.patch ==== ncurses ==== Version update (6.2.20200711 -> 6.2.20200912) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch 20200912 + add configure-check for systre/tre with mingw configuration, to get the library-dependencies as seen in msys2 configuration for mingw64. + build-fixes for the win32-driver configuration. + use more defensive binary mode setting for Win32 (Juergen Pfeifer). - Add ncurses patch 20200907 + fix regression in setupterm validating non-empty $TERM (report by Soren Tempel). - Add ncurses patch 20200906 + merge/adapt in-progress work by Juergen Pfeifer for new version of win32-driver. + correct description of vt330/vt340 (Ross Combs). - Add ncurses patch 20200831 + build-fix for awk-scripts modified for win32-driver (report by Werner Fink). - Drop workaround patch awk-scripts.patch as now upstream fixed - Add patch awk-scripts.patch as workaround for patch 20200829 - Add ncurses patch 20200829 + remove a redundant NCURSES_EXPORT as a build-fix for "Maarten Anonymous". + merge/adapt in-progress work by Juergen Pfeifer for new version of win32-driver. + modify configure script, moving gcc -Werror options to EXTRA_CFLAGS to avoid breaking configure-checks (adapted from ongoing work on mawk and lynx). > errate for terminfo.src (report by Florian Weimer): + correct icl6404 csr + correct ti916 cup + improve ndr9500 - Refresh patch ncurses-6.2.dif - Add ncurses patch 20200822 + improve version-number extraction in MKlib_gen.sh + make the test-package for manpages installable by adjusting the man_db.renames file. + correct an off-by-one loop-limit in convert_strings function (report by Yue Tai). + add CF_SHARED_OPTS cases for HPE NonStop systems (Randall S Becker). + modify CF_SHARED_OPTS case for NetBSD to use the same "-shared" option for the non-rpath case as for the rpath case, to allow gcc to provide suitable runtime initialization (report by Rajeev V Pillai). - Disable wgetch-events as it is deprecated and breaks build of other packages - Add ncurses patch 20200817 + reduce build-warnings by excluding ncurses-internals from deprecation warnings. + mark wgetch-events feature as deprecated. + add definition for $(LIBS) to ncurses/Makefile.in, to simplify builds using the string-hacks option. + prevent KEY_EVENT from appearing in curses.h unless the configure option --enable-wgetch-events is used (report by Werner Fink). - Add ncurses patch 20200816 + amend tic/infocmp check to allow for the respective tool's absence (report by Steve Wills, cf: 20200808). + improved some of the build-scripts with shellcheck + filter out -MT/-MD/-MTd/-MDd options in script for Visual Studio C++ (discussion with "Maarten Anonymous"). - Add ncurses patch 20200808 + improve discussion of the system's tic utility when used as part of cross-compiling (discussion with Keith Marshall). + modify configuration checks for build-time tic/infocmp to use AC_CHECK_TOOL. That can still be overridden by --with-tic-path and - -with-infocmp-path when fallbacks are used, but even if not using fallbacks, the improved check may help with cross-compiling (discussion with Keith Marshall). + other build-fixes for Ada95 with MinGW. + modify Ada95 source-generation utility to write to a file given as parameter rather than to the standard output, allowing builds with MinGW. - Add ncurses patch 20200801 + remove remaining parts of checks for ISC Unix (cf: 20121006). + add user32.lib to LDFLAGS for Visual Studio C++ configuration (discussion with "Maarten Anonymous"). + modify MKkey_defs.sh to hide ncurses' definition of KEY_EVENTS to reduce Visual Studio C++ redefinition warnings. + improve/update checks for external functions in test/configure - Add ncurses patch 20200725 + set LINK_TESTS in CF_SHARED_OPTS for msvc (patch by "Maarten Anonymous") + improved workaround for redefinition-warnings for KEY_EVENT. + improve man/term.5 section on legacy storage format (report by Florian Weimer). - Add ncurses patch 20200718 + reduce redefinition-warnings for KEY_EVENT when building with Visual Studio C++. + define NCURSES_STATIC when compiling programs to link with static libraries, to work with MinGW vs Visual Studio C++. > additional changes for building with Visual Studio C++ and msys2 (reports/patches by "Maarten Anonymous") + modify c++/Makefile.in to set the current directory while compiling the main program, so the linker can find related objects. + several changes to allow the c++/demo program to compile/link. + change an ifdef in test-directory, to use VC++ wide-character funcs. ==== policycoreutils ==== Version update (3.0 -> 3.1) Subpackages: policycoreutils-lang python3-policycoreutils - Add get_os_version.patch get_os_version is implemented in a very RH/Fedora specific way. Ensure that it returns a valid string for SUSE by changing the default. Also remove the RH specific logic when generating HTML versions of the SELinux documentation - Align more with Fedora spec file to get rid of python dependencies in the core system - create new python-utils sub-package - move some tools to devel sub-package - Cleanup dependencies - Proper default permissions for newrole (4755) - Update to version 3.1 * New `setfiles -E` option - treat conflicting specifications as errors, such as where two hardlinks for the same inode have different contexts. * `setsebool -V` reports errors from commit phase * matchpathcon related interfaces are deprecated * New `restorecon -x` option which prevents it from crossing file system * boundaries. * `sepolgen-ifgen` parses a gen_tunable statement as bool * Removed Requires for python3-ipy as the ipaddress module is used. No requires for python-ipaddress as it's assumed this is used only on recent systems * Drop chcat_join.patch, is upstream ==== python-semanage ==== Version update (3.0 -> 3.1) - Update to version 3.1 * Improved manpage * fsync final files before rename - Disabled LTO again. This breaks e.g. shadow and also other packages in security:SELinux - Fix build with LTO: [bsc#1133102] * Enable LTO (Link Time Optimization) * Update map file to include new symbols and remove wildcards - Add libsemanage-update-map-file.patch ==== sysvinit ==== Version update (2.96 -> 2.97) - Drop /bin/pidof and /sbin/pidof, including corresponding man page: let's switch to pidof as provided by procps-ng. - Update to sysvinit 2.97: * Check $(ROOT) filesystem for libcrypt instead of a hardcoded path to /usr. * Code clean-up and making sure we avoid freeing unused memory. * Added shell script which converts systemd unit files into init.d style scripts. * Allow init to load configuration data from files stored in /etc/inittab.d/ * Allow shutdown time to be specified in the format +hh:mm. This is in addition to the existing formats such as hh:mm, +m, and "now". * Fixed typos in manual pages. - Update startpar to 0.65: + Make sure startpar testsuite can find insserv executable in /usr/sbin or /sbin. + Added PREFIX variable to Makefile and testsuite to make location of startpar and insserv more flexible. - Rebase sysvinit-2.90.dif. - Drop SCVER defines: not used in any place. - Drop startpar-sysmacros.patch: fixed upstream. ==== tcpd ==== - tcp_wrappers_7.6-shared-lib.diff: Linux has STRERROR not SYS_ERRLIST [bsc#1175272] ==== x11-tools ==== - xim script: also consider files below /usr/etc/X11/xim.d (boo#1176431) - Upgrade old RPM constructs. - i18n.template: moved example for user specific LANG setting from .profile (bash package) to .i18n skeleton file (boo#1158724) - moved xim files to /usr/etc; xinit is already prepared for this (boo#1176431) ==== xdm ==== Subpackages: xdm-xsession - removed /etc/X11/xdm/Keyboard.map since it meanwhile has been replaced by /usr/share/systemd/kbd-model-map (used by YaST) - Don't create the compat symlinks in /etc on the fly, track them properly as %config - /etc/X11/xdm/scripts/11-ssh-agent * ssh-askpass now moved to /usr/libexec/ssh (boo#1175991) - moved xdm/xdm-np PAM files to /usr/etc/pam.d, since lightdm has been adjusted meanwhile - Switch to /usr/bin/pidof dependency, provided by procps-ng. - fixes in xdm-tarball.patch * /usr/lib/X11/display-manager: fixes sddm, which didn't use xdm_reload_files in xdm_start_proc() of /usr/lib/X11/displaymanagers/sddm (boo#1173049) - fixes in xdm-tarball.patch * symlink also $XDMDIR/xinitrc.common in /etc/X11/xinit; it is still often sourced in old ~/.xinitrc user files ... - fixes in xdm-tarball.patch * fixed include path for generic Xresources in xdm's Xresources file * fixed $XDMDIR in Xsession, so sys.xsession can be found * sys.xsession: fixed syntax error in code, which reads additional xdm scripts * display-manager: also symlink Xstartup and Xreset in /etc/X11/xdm (needed by lighdm) - specfile: * for now use again /etc/pam.d for xdm/xdm-np PAM files instead of /usr/etc/pam.d (using the latter resulted in "authentificataion failure" with lightdm) - reenabled move to /usr/etc/X11/xdm; updated xdm-tarball.patch (includes changes from xinit-UsrEtcMove.patch) [boo#1176212] - xinit-UsrEtcMove.patch * changes needed with xinitrc moving to %{_libexecdir}/xinit and xinitrc.common moving to /usr/etc/X11/xinit/ - reverted move to /usr/etc/X11/xdm for now due to boo#1176212 - updated xdm-tarball.patch * adjusted for changes in xmodmap and xinit (boo#1173049) - xdm-tarball.patch * /usr/etc changes still needed for xdm.tar.bz2; will need more changes once xmodmap and xinit files are also moved to /usr/etc (boo#1173049) - move /etc/X11/xdm --> /usr/etc/X11/xdm and /etc/pam.d -> /usr/etc/pam.d; still TODO: adjust scripts in xdm.tar.bz2 (boo#1173049) - more cleanup * no longer support sle12; adjusted xdm.tar.bz2 and applied xdm-with-update-alternative.patch to this tarball - cleanup * get rid of xdm-fallbacks.tar.bz2, which wasn't used any longer since SUSE 12.1 * no longer support systmed based OSes like SUSE < 12.1 and sle11; removed therefore also xdm-consolekit.diff * no longer support sle11 ==== xinit ==== - Properly track the compatibility symlink - simplified UsrEtcMove enable/disable logic in specfile - xinit-tarball.patch/xinit.spec * reenabled move to /usr/etc/X11/xinit * fixed remaining issues mentioned in boo#1173052, comment#6 and boo#1176212, comment#7 - reverted move to /usr/etc/X11/xinit for now (boo#1173052, comment#6) - moved xinit files to /usr/etc/X11/xinit and removed xinitrc skeleton (boo#1173052) - xinit-tarball.patch * adjust tarball contenct to /usr/etc move (boo#1173052) ==== xmodmap ==== - reenabled move to /usr/etc/X11 for Tumbleweed (boo#1173053) - reverted move to /usr/etc/X11 for now (boo#1173053, comment#3) - moved Xmodmap files to /usr/etc/X11 (boo#1173053) ==== xorg-x11-server ==== Subpackages: xorg-x11-server-Xvfb xorg-x11-server-extra xorg-x11-server-sdk xorg-x11-server-wayland - n_xorg-wrapper-anybody.patch * replace default config /etc/X11/Xwrapper, which allows anybody to use the wrapper, by a patch for the code, i.e. [#] rootonly, console, anybody allowed_users=anybody [#] yes, no, auto needs_root_rights=auto is now the default without any Xwrapper config (needs_root_rights=auto was already the default before) - u_xorg-wrapper-Xserver-Options-Whitelist-Filter.patch * replaced by improved version written by Matthias Gerstner of our security team + simplified the option parsing code a bit + changed the "ignore forbidden argument" logic into an "abort on forbidden argument" logic. This is safer and avoids surprises on the user's end that could occur if the desired command line arguments aren't effective but the Xorg server is still started. + tried to adjust to the coding style present in the file (mostly the function name) + added some logic to apply the option filtering only to non-root users when Xorg is actually started as root. This should allow for full flexibility if root calls the wrapper or if the Xorg server only runs with user privileges. - U_Fix-segfault-on-probing-a-non-PCI-platform-device-on.patch, U_Revert-linux-Fix-platform-device-PCI-detection-for-c.patch, U_Revert-linux-Fix-platform-device-probe-for-DT-based-.patch, U_Revert-linux-Make-platform-device-probe-less-fragile.patch * fix Xserver startup on Raspberry Pi 3 (boo#1176203) - n_xorg-wrapper-rename-Xorg.patch * moved Xorg to Xorg.bin and Xorg.sh to Xorg (boo#1175867) - change default for needs_root_rights to auto in Xwrapper.config (boo#1175867) - reenabled SUID wrapper for TW (boo#1175867) - u_xorg-wrapper-Xserver-Options-Whitelist-Filter.patch * Xserver option whitelist filter (boo#1175867) ==== zsh ==== - Add ncurses-fix.patch in order to fix ncurses failure. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

14 19

[opensuse-factory] [CtLG] questioning usage of qemu/SDL2 in openSUSE Leap
by Lubos Kocman 14 Oct '20

14 Oct '20

Hello team, Virtualization team for SUSE Linux Enterprise is in favor of not brining back SDL2 support for qemu as it was previously dropped in favor of GTK. This means that openSUSE jump will not have qemu-ui-sdl unless we fork and rebuild the package. Are you aware of any usecases, that would justify additional maintenance of qemu-ui-sdl in Leap so we could bring it back to the project? Please let me know by end of the week. Thank you -- Best regards Luboš Kocman Release Manager openSUSE Leap SUSE Software Solutions Germany GmbH Maxfeldstr. 5 90409 Nuremberg Germany (HRB 36809, AG Nürnberg) Managing Director: Felix Imendörffer

2 3