September 2020 - openSUSE Factory - openSUSE Mailing Lists

[opensuse-factory] New Tumbleweed snapshot 20200902 released!
by Dominique Leuenberger 04 Sep '20

04 Sep '20

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MozillaFirefox (79.0 -> 80.0) ark autoyast2 (4.3.35 -> 4.3.43) ceph (15.2.4.89+g583fe198f6 -> 16.0.0.4862+g8ac6038555) corosync dracut (050+suse.67.g28be2f36 -> 050+suse.75.g266a76d9) fetchmail gstreamer-plugins-base intel-vaapi-driver libdrm libglvnd libmfx libmysofa (1.0 -> 1.1) libqmi (1.24.14 -> 1.26.4) libstorage-ng (4.3.39 -> 4.3.40) libteam (1.29 -> 1.31) libva libva-gl libyui-ncurses (2.56.1 -> 2.56.2) libzypp (17.24.1 -> 17.24.2) mlterm (3.8.9 -> 3.9.0) mozilla-nspr (4.26 -> 4.27) mozilla-nss (3.54 -> 3.55) mozjs68 open-vm-tools (11.1.0 -> 11.1.5) openvpn perl-HTML-Parser (3.72 -> 3.75) procps python-sip (4.19.19 -> 4.19.24) python3-qt5 (5.13.2 -> 5.15.0) qemu syslogd tracker (2.3.4 -> 2.3.5) tracker-miners (2.3.3 -> 2.3.4) xfce4-notifyd (0.6.1 -> 0.6.2) xorg-x11-server (1.20.8+0 -> 1.20.9) yast2 (4.3.19 -> 4.3.24) yast2-network (4.3.15 -> 4.3.17) yast2-online-update-configuration (4.3.1 -> 4.3.2) yast2-pkg-bindings (4.2.9 -> 4.3.0) yast2-services-manager (4.3.4 -> 4.3.5) yast2-storage-ng (4.3.14 -> 4.3.15) zypper (1.14.37 -> 1.14.38) === Details === ==== MozillaFirefox ==== Version update (79.0 -> 80.0) Subpackages: MozillaFirefox-translations-common - Mozilla Firefox 80.0 MFSA 2020-36 (bsc#1175686) * CVE-2020-15663 (bmo#1643199) Downgrade attack on the Mozilla Maintenance Service could have resulted in escalation of privilege * CVE-2020-15664 (bmo#1658214) Attacker-induced prompt for extension installation * CVE-2020-12401 (bmo#1631573) Timing-attack on ECDSA signature generation * CVE-2020-6829 (bmo#1631583) P-384 and P-521 vulnerable to an electro-magnetic side channel attack on signature generation * CVE-2020-12400 (bmo#1623116) P-384 and P-521 vulnerable to a side channel attack on modular inversion * CVE-2020-15665 (bmo#1651636) Address bar not reset when choosing to stay on a page after the beforeunload dialog is shown * CVE-2020-15666 (bmo#1450853) MediaError message property leaks cross-origin response status * CVE-2020-15667 (bmo#1653371) Heap overflow when processing an update file * CVE-2020-15668 (bmo#1651520) Data Race when reading certificate information * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626, bmo#1656957) Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2 - requires * NSPR 4.27 * NSS 3.55 - added mozilla-system-nspr.patch (bmo#1661096) - exclude ga-IE locale as it's failing to build - rollback parallelize locale build because it breaks bookmarks (boo#1167976) - preserve original default bookmark file during langpack build (boo#1167976) - add some ccache output during build - Use new memoryperjob _constraints instead of %limit_build macro. - use ccache for build - replace versioned RPM deps with requires_ge - parallelize locale build - Change *.appdata.xml location to latest AppStream standard ==== ark ==== Subpackages: ark-lang libkerfuffle20 - Add patch to prevent path traversal (boo#1175857, CVE-2020-24654): * 0001-Pass-the-ARCHIVE_EXTRACT_SECURE_SYMLINKS-flag-to-lib.patch ==== autoyast2 ==== Version update (4.3.35 -> 4.3.43) Subpackages: autoyast2-installation - Recognize installed_product and installed_product_version as legal elements of rules.xml files (boo#1176089). - 4.3.43 - Add to erb templates more helpers (bsc#1175735) - Use <script> elements instead of <listentry> when exporting the <postpartitioning-scripts> section (related to bsc#1175714). - Saving log files of postpartitioning-scripts (bsc#1145269) (schubi(a)suse.de). - 4.3.42 - Fix the AutoYaST storage UI (related to bsc#1175680). - 4.3.41 - Unify profile element paths (bsc#1175680). - 4.3.40 - bnc#1174133 - do not crash with internal error when the profile contains corrupted signature_handling option - 4.3.39 - Add ability to use erb template as dynamic autoyast profile (bsc#1175735) - 4.3.38 - Speed up finding the "autoyast()" supplements by filtering packages directly on the lilbzypp level (bsc#1175317, related to bsc#1146494) - 4.3.37 - Reporting an error if an corrupted AY configuration file has been read (bsc#160975). - 4.3.36 ==== ceph ==== Version update (15.2.4.89+g583fe198f6 -> 16.0.0.4862+g8ac6038555) Subpackages: librados2 librbd1 - Update to 16.0.0-4862-g8ac6038555: + rebase on tip of upstream "master" branch, SHA1 46c912978aa6a0b0f67094a27933c7bea829e6c9 - checkin.sh: build only one frontend language (English) by default, to speed up tarball generation - Update to 15.2.4-822-g24d833526b + rebase on tip of upstream "octopus" branch, SHA1 0887d548597b9d2381de42c1cc8a5c01d264ae8b - Update to 15.2.4.557+g4ac763f0b3 + rebase on tip of upstream "octopus" branch, SHA1 96411838ef6fef9a5285ca4d5c0708e6a599632e - Update to 15.2.4-511-g40953bf9d6 + rebase on tip of upstream "octopus" branch, SHA1 f3b8bc0d11ca4f8167615007645759e905b1ada5 - Update to 15.2.4-465-g5e8d9ae6bd + rebase on tip of upstream "octopus" branch, SHA1 213e2c803b4f68c9f0b33119c64638a6813d2692 - Update to 15.2.4-381-g734ae877b4: + rebase on tip of upstream "octopus" branch, SHA1 d0da4070a19a55ebe9c55904d6da2ad38833aae0 - Update to 15.2.4-342-g6987dec446: + cmake: add empty RPATH to ceph-diff-sorted - Update to 15.2.4-337-g55cec95eaf: + rebase on tip of upstream "octopus" branch, SHA1 405556b2629d8274dea2e14ee017c70a7dfb24a1 + Monitoring: Use downstream container images ==== corosync ==== Subpackages: libcfg6 libcmap4 libcorosync_common4 libcpg4 libquorum5 - Stop mangling libexecdir: it's not needed at all. ==== dracut ==== Version update (050+suse.67.g28be2f36 -> 050+suse.75.g266a76d9) - Update to version 050+suse.75.g266a76d9: * net-lib.sh: support infiniband network mac addresses (bsc#996146) * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494) * 95nfs: use ip_params_for_remote_addr() (bsc#1167494) * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494) - Update to version 050+suse.71.g390f4d72: * 01fips: modprobe failures during manual module loading is not fatal (bsc#1169997) * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828) * 95iscsi: fix ipv6 target discovery (bsc#1172807) * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807) ==== fetchmail ==== Subpackages: fetchmailconf - De-hardcode /usr/lib path for launch executable (bsc#1174075) - Spec file cleanups ==== gstreamer-plugins-base ==== Subpackages: gstreamer-plugins-base-lang libgstallocators-1_0-0 libgstapp-1_0-0 libgstaudio-1_0-0 libgstfft-1_0-0 libgstgl-1_0-0 libgstpbutils-1_0-0 libgstriff-1_0-0 libgstrtp-1_0-0 libgstrtsp-1_0-0 libgstsdp-1_0-0 libgsttag-1_0-0 libgstvideo-1_0-0 typelib-1_0-GstAudio-1_0 typelib-1_0-GstPbutils-1_0 typelib-1_0-GstTag-1_0 typelib-1_0-GstVideo-1_0 - Do not recommend PackageKit-gstreamer-plugin: that package already supplements the combination of gstreamer-plugins-base and packagekit. ==== intel-vaapi-driver ==== - version 2.4.1 needed for jira#SLE/SLE-12712 ==== libdrm ==== Subpackages: libdrm-devel libdrm2 libdrm_amdgpu1 libdrm_intel1 libdrm_nouveau2 libdrm_radeon1 - version 2.4.102 needed for jira#SLE/SLE-12880, jira#SLE/SLE-12882 ==== libglvnd ==== Subpackages: libglvnd-32bit - version 1.3.2 needed for jira#SLE/SLE-12880, jira#SLE/SLE-12882 ==== libmfx ==== - version 20.2.1 needed for jira#SLE/SLE-12712 ==== libmysofa ==== Version update (1.0 -> 1.1) - update to 1.1: * Support the change of the reference implementation to version 1.1.1 * Fixing the problem of left / right confusion common in many old SOFA files * Support many more HDF features which are used in recent implementations of netcdf ==== libqmi ==== Version update (1.24.14 -> 1.26.4) Subpackages: libqmi-glib5 libqmi-tools - update to 1.26.4: * Added new message collections support, so that users can select which messages to include in the built library during configure with the - -enable-collection option. Three predefined sets are given: * * minimal: the bare minimum messages required to control connectivity. * * basic: all messages and indications that ModemManager requires. * * full: all supported messages and indications. Users can install custom collections under data/ and reference them in the same way as the predefined sets. E.g. installing a new data/qmi-collection-custom.json set can be enabled during configure with - -enable-collection=custom. * Added new GObject Introspection support in the library * Implemented new QRTR backend support, disabled by default. This new backend allows to perform QMI operations on systems with the Qualcomm IPC router * Added 5GNR radio access technology support, with new enum values in both the DMS and NAS services. * New services: * * New 'GMS' (Telit General Modem Service) service, for now just implementing basic test get/set value commands. * * New 'DSD' (Data System Determination) service, implementing methods to get and set default bearer APN settings. * New request/response/indications: * * dms: implement "Get MAC Address" request/response. * * dms: renamed "Dell Get Firmware Version" to "Foxconn Get Firmware Version" as the command applies not only to the Dell-branded variant, but also to the generic Foxconn-branded models. The old APIs are kept available but flagged as deprecated. * * loc: implement "Set NMEA Types" request/response. * * loc: implement "Get NMEA Types" request/response. * * uim: implement "Switch Slot" request/response. * * uim: implement "Get Slot Status" request/response. * * uim: implement "Slot Status" indication. * * voice: implement "Indication Register" request/response. * * voice: implement "Originate USSD" request/response. * * voice: implement "Answer USSD" request/response. * * voice: implement "Cancel USSD" request/response. * * voice: implement "Release USSD" request/response. * * voice: implement "USSD" indication. * * voice: implement "Originate USSD No Wait" request/response. * * voice: implement "Originate USSD No Wait" indication. * New TLVs supported in existing messages: * * nas: added 'Extended List' and 'Bandwidth List' in "Get RF Band Information". * * wda: added 'Endpoint Info' in "Get Data Format". ==== libstorage-ng ==== Version update (4.3.39 -> 4.3.40) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#767 - removed some unnecessary null pointer checks - 4.3.40 ==== libteam ==== Version update (1.29 -> 1.31) - update to 1.31: * teamd: fix build error in expansion of macro teamd_log_dbgx * teamd/lacp: fix segfault due to NULL pointer dereference * teamd: fix possible race in master ifname callback * Fix ifinfo_link_with_port race condition with newlink * Skip setting the same hwaddr to a lag port if not needed * teamd/lacp: silence ignore none LACP frames ==== libva ==== Subpackages: libva-drm2 libva-x11-2 libva2 - version 2.8.0 needed for jira#SLE/SLE-12712 ==== libva-gl ==== Subpackages: libva-glx2 libva-wayland2 - version 2.8.0 needed for jira#SLE/SLE-12712 - update to 2.8.0: * trace: enable return value trace for successful function call * trace: divide va_TraceEndPicture to two seperate function * trace: add support for VAProfileHEVCSccMain444_10 * fix:Fixes file descriptor leak * add fourcc code for P012 format * travis: Add a test that code files don't have the exec bit set * Remove the execute bit from all source code files * meson: Allow for libdir and includedir to be absolute paths * trace: Fix format string warnings * fix:Fix clang warning (reading garbage) * add definition to enforce both reflist not empty * trace: List correct field names in va_TraceVAPictureParameterBufferHEVC * change the return value to be UNIMPLEMENTED when the function pointer is NULL * remove check of vaPutSurface implementation * Add new slice structure flag for CAPS reporting * VA/X11: VAAPI driver mapping for iris DRI driver * VA/X11: enable driver candidate selection for DRI2 * Add SCC flags to enable/disable features * fix: Fix HDR10 MaxCLL and MaxFALL documentation * Add VAProfileHEVCSccMain444_10 for HEVC * change the compatible list to be dynamic one * trace:Convert VAProfileAV1Profile0 VAProfileAV1Profile1 to string ==== libyui-ncurses ==== Version update (2.56.1 -> 2.56.2) - Fix changing a single cell in a sorted table (bsc#1165388, bsc#1174615) - 2.56.2 ==== libzypp ==== Version update (17.24.1 -> 17.24.2) - VendorAttr: Const-correct API and let Target provide its settings (bsc#1174918) - Support buildnr with commit hash in purge-kernels (bsc#1175342) This adds special behaviour for when a kernel version has the rebuild counter before the kernel commit hash. - Improve Italian traslation of the "breaking dependencies" message (bsc#1173529) - Make sure reading from lsof does not block forever (bsc#1174240) - Just collect details for the signatures found (fixes #229) - version 17.24.2 (22) ==== mlterm ==== Version update (3.8.9 -> 3.9.0) Subpackages: mlterm-canna mlterm-ibus mlterm-scim mlterm-wnn - version update to 3.9.0 * Support CSI>4;1m. * Support uniscribe for libotl on win32. * Support SCP by Shift+DnD on HaikuOS. * Support xdg-shell on wayland. * Support DEC Technical character set. * Support input of unicode characters on mlterm-fb. * Support ormode of Sixel Graphics. * Update unicode property table (generated from UnicodeData.txt and EastAsianWidth.txt) to version 12.1.0. * Mlconfig configures files in ~/.mlterm directly if it starts without options or with --file option. * Change DA1 response. \x1b[?63;1;2;3;4;7;29c -> \x1b[?63;1;2;3;4;6;7;15;18;22;29c * geometry / -g option works on HaikuOS. * Add vte 0.60 API symbols to libvte compatible library. * Merge patches: https://sourceforge.net/p/mlterm/bugs/78/ https://sourceforge.net/p/mlterm/patches/25/attachment/typos.diff * Bug fixes: Fix a bug which disabled to change the value of "logsize" option from "0" to "unlimited". Fix segfault when "snapshot" command of OSC 5379 is executed. Fix mouse tracking position if "use_ot_layout = true". Fix segfault when mlterm-sdl2 starts with -im=uim option. Fix a bug which makes mlterm-sdl2 on win32 stop starting mlconfig. Fix compiling error on HaikuOS + gcc-x86. Fix http://twitter.com/hamano/status/1177087752208183296 Fix a bug which disabled clipping of DECDHL in cairo. (Enbugged at 3.8.6) - deleted patches - mlterm-cast.patch (upstreamed) ==== mozilla-nspr ==== Version update (4.26 -> 4.27) - update to version 4.27 * the macOS platform code for shared library loading was changed to support macOS 11. If the absolute path parameter given to PR_LoadLibrary begins with either /System/ or /usr/lib/ then no test is performed if the library exists at a file. * An include statement for a Windows system library header was added ==== mozilla-nss ==== Version update (3.54 -> 3.55) Subpackages: libfreebl3 libfreebl3-hmac libsoftokn3 libsoftokn3-hmac mozilla-nss-certs mozilla-nss-tools - update to NSS 3.55 Notable changes * P384 and P521 elliptic curve implementations are replaced with verifiable implementations from Fiat-Crypto [0] and ECCKiila [1]. * PK11_FindCertInSlot is added. With this function, a given slot can be queried with a DER-Encoded certificate, providing performance and usability improvements over other mechanisms. (bmo#1649633) * DTLS 1.3 implementation is updated to draft-38. (bmo#1647752) Relevant Bugfixes * bmo#1631583 (CVE-2020-6829, CVE-2020-12400) - Replace P384 and P521 with new, verifiable implementations from Fiat-Crypto and ECCKiila. * bmo#1649487 - Move overzealous assertion in VFY_EndWithSignature. * bmo#1631573 (CVE-2020-12401) - Remove unnecessary scalar padding. * bmo#1636771 (CVE-2020-12403) - Explicitly disable multi-part ChaCha20 (which was not functioning correctly) and more strictly enforce tag length. * bmo#1649648 - Don't memcpy zero bytes (sanitizer fix). * bmo#1649316 - Don't memcpy zero bytes (sanitizer fix). * bmo#1649322 - Don't memcpy zero bytes (sanitizer fix). * bmo#1653202 - Fix initialization bug in blapitest when compiled with NSS_DISABLE_DEPRECATED_SEED. * bmo#1646594 - Fix AVX2 detection in makefile builds. * bmo#1649633 - Add PK11_FindCertInSlot to search a given slot for a DER-encoded certificate. * bmo#1651520 - Fix slotLock race in NSC_GetTokenInfo. * bmo#1647752 - Update DTLS 1.3 implementation to draft-38. * bmo#1649190 - Run cipher, sdr, and ocsp tests under standard test cycle in CI. * bmo#1649226 - Add Wycheproof ECDSA tests. * bmo#1637222 - Consistently enforce IV requirements for DES and 3DES. * bmo#1067214 - Enforce minimum PKCS#1 v1.5 padding length in RSA_CheckSignRecover. * bmo#1646324 - Advertise PKCS#1 schemes for certificates in the signature_algorithms extension. ==== mozjs68 ==== - reset memoryperjob for PowerPC avoid dispatcher to not find worker and still use %limit_build macro for them. ==== open-vm-tools ==== Version update (11.1.0 -> 11.1.5) Subpackages: libvmtools0 open-vm-tools-desktop - Update to 11.1.5 (build 16724464) (boo#1175573) + This source release rolls up the SDMP fixes release post 11.1.0. + Fix serveral Coverity reported issues. + Address github issues: https://github.com/vmware/open-vm-tools/issues/451 https://github.com/vmware/open-vm-tools/issues/429 https://github.com/vmware/open-vm-tools/issues/428 - Drop unnecessary patch: - gcc10-warning.patch - sdmp-get-version.patch - sdmp-netstat-to-ss.patch - sdmp-warnings.patch ==== openvpn ==== - Modernize openvpn.service * /var/run has been obsoleted since a long time. * on reload, send HUP signal directly rather than relying on killproc to look for the main process. - Explicitly requires sysvinit-tools as some of the tools shipped by this package are used in various places regardless of whether openvpn is built for systemd or non systemd systems. For the context: sysvinit-tools was pulled in by systemd since 2014 but it's no longer the case so better to be safe than sorry. ==== perl-HTML-Parser ==== Version update (3.72 -> 3.75) - updated to 3.75 see /usr/share/doc/packages/perl-HTML-Parser/Changes - updated to 3.73 see /usr/share/doc/packages/perl-HTML-Parser/Changes ==== procps ==== Subpackages: libprocps8 - Enable pidof by default ==== python-sip ==== Version update (4.19.19 -> 4.19.24) Subpackages: python-sip-common python3-sip - Update to 4.19.24 * Added support for Python v3.9. * %InstanceCode is now used to provide the default result of virtual handlers that return a class or mapped type by value. * 'android_abi' can now be used in a configuration file when building the sip module using qmake. This is required when using Qt v5.14 or later on Android. - all intermediate versions are tagged "minor bug-fix release" - refresh disable-strip.diff ==== python3-qt5 ==== Version update (5.13.2 -> 5.15.0) - Update update-timeline.patch - Update to 5.15.0 * Added support for Qt v5.15.0. * Added the QtQuick3D module. * Added a callStaticMethod() overload to QAndroidJniObject that takes a QJsonDocument as the method argument and returns another QJsonDocument. * Added the missing QMultimedia control classes. * pyuic5 now supports QUndoView. - v5.14.2 3rd April 2020 * Added the missing QTextCodec.convertFromUnicode(). * Added the OpenGL ES bindings. * Added QFlags.__index__(). - v5.14.1 6th January 2020 * This is a bug fix release. - v5.14.0 18th December 2019 * Added support for Qt v5.14.0. - Source URL moved to PyPI - refresh 0001-Use-a-noarch-wrapper-for-dbus-mainloop-integration.patch ==== qemu ==== Subpackages: qemu-arm qemu-block-curl qemu-block-dmg qemu-block-gluster qemu-block-iscsi qemu-block-nfs qemu-block-rbd qemu-block-ssh qemu-chardev-baum qemu-guest-agent qemu-hw-display-qxl qemu-hw-usb-redirect qemu-hw-usb-smartcard qemu-ipxe qemu-ksm qemu-kvm qemu-lang qemu-microvm qemu-ppc qemu-s390 qemu-seabios qemu-sgabios qemu-tools qemu-ui-curses qemu-ui-gtk qemu-ui-sdl qemu-ui-spice-app qemu-vgabios qemu-vhost-user-gpu qemu-x86 - For SLE15-SP3, note that this update to v5.1.0 is a step towards fulfilling jsc#SLE-13689, which asks for qemu v5.2.0 or higher - Fix some shell syntax in update_git.sh, esp. an issue exposed by the most recent patch added - Fix OOB access while processing USB packets (CVE-2020-14364 bsc#1175441) usb-fix-setup_len-init-CVE-2020-14364.patch - Re-sync openSUSE and SUSE SLE qemu packages. This changes file is the openSUSE one with this entry providing the intervening SLE CVE, JIRA, and bugzilla references, which are still addressed in this package, and not yet called out in this changes file. * CVE-2020-1983 CVE-2020-10761 CVE-2020-13361 CVE-2020-13362 CVE-2020-13659 CVE-2020-13800 * bsc#1167816 bsc#1170940 boo#1171712 bsc#1172383 bsc#1172384 bsc#1172386 bsc#1172495 bsc#1172710 * Patches dropped (SLE) (included in current release tarball): exec-set-map-length-to-zero-when-returni.patch i386-acpi-Remove-_HID-from-the-SMBus-ACP.patch megasas-use-unsigned-type-for-reply_queu.patch ==== syslogd ==== Subpackages: klogd syslog-service - Set permission also in file list for /etc/syslog.conf ==== tracker ==== Version update (2.3.4 -> 2.3.5) Subpackages: libtracker-common-2_0 libtracker-control-2_0-0 libtracker-miner-2_0-0 libtracker-sparql-2_0-0 tracker-lang typelib-1_0-Tracker-2_0 typelib-1_0-TrackerControl-2_0 - Update to version 2.3.5: + Add 'tracker export' subcommand to ease migration to 3.x. + Use correct signature for DBusSignalCallback. + Get the systemd user unit dir from pkg-config. + Replace sensitive terms. + Updated translations. - Drop tracker-Use-correct-signature.patch: Fixed upstream. ==== tracker-miners ==== Version update (2.3.3 -> 2.3.4) Subpackages: tracker-miner-files tracker-miners-lang - Update to version 2.3.4: + Block image/ktx files in 90-gstreamer-image-generic.rule. + Set a deadline of 30 seconds for extraction tasks. + Remove generic gstreamer-based image extraction codepath. + Several fixes to libav-based extractor. + Replace sensitive words. + Get the systemd user unit dir from pkg-config. + Updated translations. ==== xfce4-notifyd ==== Version update (0.6.1 -> 0.6.2) Subpackages: xfce4-notifyd-lang - Update to 0.6.2 * Switch to new app icon and rDNS icon name * Default to session autostart instead of DBus (gxo#apps/xfce4-notifyd#27) * Add configurable log size limit (default: 100) * Make buttons on non-1st notifications work * panel-plugin: Add option to hide "Clear log" dialog * log: properly handle iso8601 timestamps * log: Use SHA-1 data hash in icon cache paths (bxo#16825) * log: Improve performance of adding notifications (bxo#14865) * log: Refactor log keyfile element insertion into a separate function * Fix GTimeVal deprecation (bxo#16805) * Remove unused expire_timeout variable * Fix memory leaks * settings: Switch to symbolic close icon * Translation Updates ==== xorg-x11-server ==== Version update (1.20.8+0 -> 1.20.9) Subpackages: xorg-x11-server-Xvfb xorg-x11-server-extra xorg-x11-server-sdk xorg-x11-server-wayland - Update to version 1.20.9: * Fix XRecordRegisterClients() Integer underflow * Fix XkbSelectEvents() integer underflow * Fix XIChangeHierarchy() integer underflow * Correct bounds checking in XkbSetNames() * linux: Fix platform device probe for DT-based PCI * linux: Fix platform device PCI detection for complex bus topologies * linux: Make platform device probe less fragile * fix for ZDI-11426 * xfree86: add drm modes on non-GTF panels * present: Check valid region in window mode flips * xwayland: Handle NULL xwl_seat in xwl_seat_can_emulate_pointer_warp * xwayland: Propagate damage x1/y1 coordinates in xwl_present_flip * doc: Update URLs in Xserver-DTrace.xml * xwayland: Use a fixed DPI value for core protocol * xwayland: only use linux-dmabuf if format/modifier was advertised * hw/xfree86: Avoid cursor use after free * Update URL's in man pages * xwayland: Disable the MIT-SCREEN-SAVER extension when rootless * xwayland: Hold a pixmap reference in struct xwl_present_event * randr: Check rrPrivKey in RRHasScanoutPixmap() * modesetting: Fix front_bo leak at drmmode_xf86crtc_resize on XRandR rotation * xwayland: Store xwl_tablet_pad in its own private key * xwayland: Initialise values in xwlVidModeGetGamma() * xwayland: Fix crashes when there is no pointer * xwayland: Clear private on device removal * xwayland: Free all remaining events in xwl_present_cleanup * xwayland: Always use xwl_present_free_event for freeing Present events * present/wnmd: Free flip_queue entries in present_wnmd_clear_window_flip * present/wnmd: Keep pixmap pointer in present_wnmd_clear_window_flip * xwayland: import DMA-BUFs with GBM_BO_USE_RENDERING only * xwayland: Fix infinite loop at startup * modesetting: Disable pageflipping when using a swcursor * dix: do not send focus event when grab actually does not change - Drop patches fixed upstream: * U_0001-Correct-bounds-checking-in-XkbSetNames.patch * U_0002-Fix-XIChangeHierarchy-integer-underflow.patch * U_0003-Fix-XkbSelectEvents-integer-underflow.patch * U_0004-Fix-XRecordRegisterClients-Integer-underflow.patch * U_FixForZDI-11426.patch - U_0001-Correct-bounds-checking-in-XkbSetNames.patch * Correct bounds checking in XkbSetNames() [CVE-2020-14345 / ZDI 11428, boo#1174635] - U_0002-Fix-XIChangeHierarchy-integer-underflow.patch * Fix XIChangeHierarchy() integer underflow [CVE-2020-14346 / ZDI-CAN-11429, boo#1174638] - U_0003-Fix-XkbSelectEvents-integer-underflow.patch * Fix XkbSelectEvents() integer underflow [CVE-2020-14361 / ZDI-CAN 11573, boo#1174910] - U_0004-Fix-XRecordRegisterClients-Integer-underflow.patch * Fix XRecordRegisterClients() Integer underflow [CVE-2020-14362 / ZDI-CAN-11574, boo#1174913] ==== yast2 ==== Version update (4.3.19 -> 4.3.24) Subpackages: yast2-logs - Fixed accidentaly broken dependencies (related to bsc#1175317) - 4.3.24 - Yet another unit test architecture fix :-( (related to bsc#1175317) - 4.3.23 - Fix for the previous change: fixed unit test failure on non x86_64 archs (related to bsc#1175317) - 4.3.22 - Y2Packager::Resolvable.find(): improved error handling, added more unit tests (related to bsc#1175317) - 4.3.21 - Unify profile element paths (bsc#1175680). - 4.3.20 ==== yast2-network ==== Version update (4.3.15 -> 4.3.17) - Unify profile element paths (bsc#1175680). - 4.3.17 - AutoYaST: Added supplements: autoyast(host,networking,remote) into the spec file in order to install this packages if the section has been defined in the AY configuration file (bsc#1146494). - 4.3.16 ==== yast2-online-update-configuration ==== Version update (4.3.1 -> 4.3.2) - Set X-SuSE-YaST-AutoInstClient in desktop file (bsc#1175516). - 4.3.2 ==== yast2-pkg-bindings ==== Version update (4.2.9 -> 4.3.0) - Improved Pkg::Resolvables() call to allow filtering by RPM dependencies (provides, obsoletes,...) (related to bsc#1175317) - 4.3.0 ==== yast2-services-manager ==== Version update (4.3.4 -> 4.3.5) - Re-enable service table sorting (bsc#1165388, bsc#1174615). - 4.3.5 ==== yast2-storage-ng ==== Version update (4.3.14 -> 4.3.15) - Unify profile element paths (bsc#1175680). - 4.3.15 ==== zypper ==== Version update (1.14.37 -> 1.14.38) Subpackages: zypper-log zypper-needs-restarting - Directly list subcommands in 'zypper help' (bsc#1165424) - man: enhance description of the global package cache (bsc#1175592) - Remove extern C block wrapping augeas.h as it breaks the build on Arch Linux. - Point out that plaindir repos do not follow symlinks (bsc#1174561) - Fix help command for list-patches - man: Point out that plain rpm packages are not downloaded to the global package cache (bsc#1173273) - version 1.14.38 -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

1 0

[opensuse-factory] Closing The Leap Gap Weekly Update Meeting 04.09.2020
by Lubos Kocman 04 Sep '20

04 Sep '20

Closing the Leap Gap - Weekly Update All meeting minutes can be found here: https://etherpad.opensuse.org/p/ClosingTheLeapGap-meeting New Meeting location: https://meet2.opensuse.org/ClosingTheLeapGap (Friday 11:30 CEST) !!! PLEASE BE AWARE THAT THE SESSION WAS MOVED TO https://meet2.opensuse.org/ClosingTheLeapGap Attendees (please add yourself): lkocman, ddemaio, gp, Guillaume =================================== 1.0 Project plan: https://confluence.suse.com/display/leap/Project+plan =================================== 2.0 Schedule: https://en.opensuse.org/openSUSE:Roadmap =================================== 3.0 Priority items and blockers * Agree on scope of review/testing which is needed for changes coming via SLE sync (IBS -> OBS). https://progress.opensuse.org/issues/70951 ^ Feel free to add any ideas if you think that the current plan to trigger botmaster pipeline which then would report the "diff" wouldn't be sufficient. * Agree with Package Hub team and Release team on scope of co-operation on Backports change requests. https://progress.opensuse.org/issues/70954 ^ Let's not leave it all to just package hub crew. We are here to help! * Maintenance setup for Jump/Leap 15.2.1 https://progress.opensuse.org/issues/70957 * To agree on what can be delivered by end of October https://progress.opensuse.org/issues/70960 List of features marked as "DeveloperProgram" https://jira.suse.com/secure/Dashboard.jspa?selectPageId=34230 JUMP related work is tracked here https://progress.opensuse.org/projects/jump_152/issues Simplified Feature request for openSUSE Leap contributors https://jira.suse.com/browse/JIRA-722 =================================== 4.0 Updates from individual teams =================================== 4.1 openSUSE Leap Release Management Owner: Lubos Kocman Lubos to talk to Migration team about their resources/availability for any potent ion Migration testing from Jump to SLE 15 SP2 prior October "release". Still pending will be done next week. I received a complain for not advertising enough Jump prototype availability https://news.opensuse.org/2020/08/28/alpha-prototype-jump-is-available-tumb… * s390x still looking for openSUSE Jump / Leap rel-eng Berthold attended first rel-eng call with no commitment yet. * Currently open topic with openSUSE Board on having non-SUSE Employee as a "project maintainer". Gerald sees no reason why the Board would object (and isn't convinced this even falls into the realm of the board) and will respond to Lubos' mail. Next step would be an internal discussion with Security, Autobuild and Legal. =================================== 4.2. openSUSE Leap Release Engineering Owner: Max Lin, Guillaume, Michel Max: Re-enabled pkglistgen on botmaster after the pkglsitgen produce wrong result issue got fixed. Jump is now consuming Backports SP2:Update and all changes bellow. Scheduler is not working and Autobuild is looking for it. Jump 15.2.1 bump happened - We will keep 15.2 for services which may otherwise have issues with the 15.2.1 version. Guillaume: Still some AArch64 specific regressions from 15.2 to Jump. * VLC is missing on aarch64: https://openqa.opensuse.org/tests/1364387#step/vlc/11 ^ Backports is build only for x86_64. This was already case for gdb on aarch64. * FPC compiler is missing for aarch64, which breaks gdb (and probably more): https://progress.opensuse.org/issues/70393 => So, it needs a manual bootstrap or an update from 3.0.4 to 3.2.0 which have an auto-boostrap process, but this would imply a rebuild of lazarus package (as it seems to be touchy on fpc updates). Also keep in mind that fpc fails to build on ThunderX2 machines: https://bugzilla.opensuse.org/show_bug.cgi?id=1122855 so the build may require few manual rebuilds. ^ lkocman: for both please open issue in Jump:15.2 and assign it to Ismail/Wolfgang/Scott Michel: same missing vlc for ppc64le/x86_64 for openQA tests. lkocman to schedule a meeting with Packagehub Team early next week to talk about poo#70954 and current issues on ARM and possible ppc64le. Let's get a list of packages that have to be rebuild in Jump as they still contain branding (should not be that many). These packages should have a CtLG Feature requests in jira.suse.com. Still pending Adrian already re-published project manually but there is still some work left to have it "implemented". Still pending. Lubos: to check o the opensuse-admin issue. =================================== 4.3 SLE Release Management Owner: Alex Herzig, Stefan Weiberg Not present =================================== 4.4 Autobuild Owner: Rüdiger Oertel Adrian Schroeter Not present adrian: jump content is public now after further fixes on pontifex: http://download.opensuse.org/distribution/jump/15.2/ Changelog generation is working now. Most likely still needs some visual enhancements. Still an issue on pontifex to allow access to it. Config of Jump/Backports is been fixed. Unfortuantly triggering a problem in OBS blocking new product builds. Investigation is running atm. Update tree regeneration is still an open topic. Adrian: suggests that we should add a README file to the toplevel pontifex Jump directory, that this is an experimental project. Lubos: will write a file containing the note. =================================== 4.5 Maintenance Owner: Stephan Barth Not present. =================================== 4.6 Security Owner: Marcus Meissner Not present. =================================== 4.7 Package Hub Owner: Wolfgang Engel, Scott Bahling Not present. =================================== 4.8 Beta Program Owner: Vincent Moutoussamy Not present. - All our discussions with the stakeholders of the project can be found at https://confluence.suse.com/display/EPI/Opening+our+Bugzilla#OpeningourBugz… . - When and how can we start building JeOS images for 15.3/Jump 15.2.1? =================================== 4.9 Engineering / Product Migration Owner: Jiri Srain Not present. installation-images difference: We need to analyze and document the difference first to see whether there are options to unfork without changes to the way we build media =================================== 4.10 Engineering - Kernel Owner: Libor Pechacek Not present =================================== 4.11 Engineering - Desktop Owner: Frederic Crozat Not present =================================== 4.12 Quality Assurance Owner: Marita Werner, Heiko Not present Perhaps let's get somebody from QA migration team to act as a stakeholder. =================================== 4.13 SLE Architect Owner: Thorsten Kukuk Not present =================================== 4.14 Marketing and Community management Owner: Douglas DeMaio Alpha Prototype Jump is Available - https://bit.ly/2QzNyIa Lubos: today's (past 14:30pm) Friday catchup with Emiel and Chris, Jump will be definitely mentioned. Lubos: How to raise more attention about Jump availability. (email to opensuse-project@?) Doug will re-send the announcement. Review of the landing page for Jump before any further announcements https://en.opensuse.org/Portal:Leap:Jump https://www.reddit.com/r/openSUSE/comments/ii9jvw/opensuse_jump_distributio… generally seemed like there was a lack of "information". Consider providing a survey on https://survey.opensuse.org/ for a Beta Release of Jump to get feedback from the community. This would provide good marketing material as well. =================================== 4.15 Gerald Owner: Gerald ;-) Present, and looking forward towards seeing broader publicity around Jump soon (project@ and otherwise). NB: Smile damaged by dentist, not fierce discussions with Lubos. ;-) =================================== 4.16 Product Management Owner: Stefan Behlert Gerald reached out to PM for their take on/help with next steps in regards to Jump/Leap 15.2.1 availability.

1 0

[opensuse-factory] New Tumbleweed snapshot 20200901 released!
by Dominique Leuenberger 03 Sep '20

03 Sep '20

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ImageMagick (7.0.10.27 -> 7.0.10.28) apache2 busybox editorconfig-core-c emacs freecell-solver (5.24.0 -> 6.0.1) heaptrack inkscape libblockdev (2.22 -> 2.24) libdatrie (0.2.10 -> 0.2.12) libetonyek libisoburn (1.5.0 -> 1.5.2) libodfgen (0.1.6 -> 0.1.7) librdkafka (1.3.0 -> 1.5.0) libspectre (0.2.8 -> 0.2.9) multipath-tools (0.8.4+43+suse.908383f -> 0.8.4+183+suse.1817ce2) openldap2 (2.4.51 -> 2.4.52) perl-libwww-perl (6.46 -> 6.47) python-jedi qalculate (3.12.0 -> 3.12.1) rubygem-ast (2.4.0 -> 2.4.1) snapper (0.8.12 -> 0.8.13) sudo suitesparse virtualbox (6.1.12 -> 6.1.13) virtualbox-kmp (6.1.12_k5.8.4_1 -> 6.1.13_k5.8.4_1) webrtc-audio-processing (0.3 -> 0.3.1) xapian-core (1.4.15 -> 1.4.17) yast2-trans (84.87.20200814.909b1a4158 -> 84.87.20200829.ec23685593) === Details === ==== ImageMagick ==== Version update (7.0.10.27 -> 7.0.10.28) Subpackages: ImageMagick-config-7-SUSE ImageMagick-extra libMagick++-7_Q16HDRI4 libMagickCore-7_Q16HDRI7 libMagickWand-7_Q16HDRI7 - added patches fix inkscape commandline [bsc#1174272] + ImageMagick-inkscape-commandilne.patch - fix bsc#1106272 - added patches fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e3… + ImageMagick-set-correct-colorspace.patch - version update to 7.0.10.28 * Distorted clip path after -extent (reference https://github.com/ImageMagick/ImageMagick/issues/2414). * Paths in Photoshop EPS files are corrupted on conversion (reference https://github.com/ImageMagick/ImageMagick/issues/2413). ==== apache2 ==== Subpackages: apache2-doc apache2-example-pages apache2-prefork apache2-utils - gensslcert: add -a argument to override default SAN value - Provide mod_ssl to keep compatibility with other distributions. Now obsoletes mod_ssl < %{version} instead of mod_ssl < 2.8.16. ==== busybox ==== Subpackages: busybox-static - Set CONFIG_FIRST_SYSTEM_ID to 101 as we use 100 already as fixed ID for a system account. - Require group "nogroup" (used by adduser) ==== editorconfig-core-c ==== - Add patch to fix crash when parsing certain files (boo#1175824): * 0001-fix-prevent-buffer-overflow-74.patch ==== emacs ==== Subpackages: emacs-info emacs-nox emacs-x11 etags - Be sure that /usr/share/emacs/site-lisp/site-start.d/ is in the load path as otherwise we might catch some not seen errors - Correct paths for emacs manual page on the fly - Add patch pdump.patch from Andreas Schwab as it allows to rename the executable name in emacs.sh - Correct manual page of emacs, that is remove ``local/`` - Make sure that the emacs spawned by the emacs script does use its default pdumper image file - Avoid warning about permissions on /var/lib/games - Disable patch emacs-24.4-glibc.patch to see if this fix boo#1175487 - Require git at build time as used by rebuilding byte compiled lisp files - Load pcase and easy-mmode at dump time from emacs-lisp path ==== freecell-solver ==== Version update (5.24.0 -> 6.0.1) Subpackages: freecell-solver-presets libfreecell-solver0 - Update to 6.0.1 * Fix a minor bug where the initial position could be traversed twice. * Add the +FCS_HARD_CODE_STATE_DEPTH_FIELD+ compile time option. * Code cleanups. ==== heaptrack ==== Subpackages: heaptrack-gui heaptrack-lang - Fix the plugins installation directory. ==== inkscape ==== Subpackages: inkscape-extensions-extra inkscape-extensions-gimp inkscape-lang - Enable again LTO. It should work now. - Add inkscape-include-atomic.patch: Fix build with Boost 1.74, where we can no longer rely on boost bringing the atomic header into the game. ==== libblockdev ==== Version update (2.22 -> 2.24) Subpackages: libbd_btrfs2 libbd_crypto2 libbd_fs2 libbd_loop2 libbd_mdraid2 libbd_part2 libbd_swap2 libbd_utils2 libblockdev2 - udpate to 2.24: * VDO plugin has been deprecated in this release (functionality replaced by LVM VDO) * support for creating and managing LVM VDO volumes added * support for unlocking of BitLocker-compatible format BITLK added * new functions for (un)freezing filesystems added * test suite can now be run against installed version of libblockdev ==== libdatrie ==== Version update (0.2.10 -> 0.2.12) Subpackages: libdatrie1 libdatrie1-32bit - update to 0.2.12: - More C90 (ANSI C) compliance. - Prevent some compiling conflicts with other sources. - Fix miscellaneous compiler warnings. - Prevent trimming on extremely long dictionary path names. - Detect iconv() error more correctly in trietool. - Clarify package description that search time is O(m), where m is key length, not O(1), while still claiming that it's independent of database size. - Fix trie_state_get_data() on a prefix key. - Fix reported segfault on full-range alpha map. ==== libetonyek ==== - add 0001-add-missing-include-for-std-for_each.patch to fix build issue with newer boost ==== libisoburn ==== Version update (1.5.0 -> 1.5.2) Subpackages: libisoburn1 xorriso - update to 1.5.2: * Bug fix: -disk_pattern on -add ./ -- mistook "./" for the root directory * Bug fix: -disk_pattern on -add "" -- yielded SIGSEGV * Bug fix: -osirrox "concat_split_on" worked only together with -split_size larger than 0. Thanks William Willems. * New API calls isoburn_igopt_set_part_type_guid(), isoburn_igopt_get_part_type_guid(), isoburn_igopt_set_iso_type_guid(), isoburn_igopt_get_iso_type_guid() * Enabled GPT type GUIDs with -append_partition, - boot_image any iso_mbr_part_type=, and -as mkisofs -iso_mbr_part_type * Made libisoburn and GNU xorriso ready for building out-of-source. Thanks Ross Burton. ==== libodfgen ==== Version update (0.1.6 -> 0.1.7) - update to 0.1.7: + switch to C++-11 + fuzzing: correct many problem + support more text's style attributes + add support for named's graphic style + ods/odt: try to retrieve some MathML equations + support more attributes, + allow external file reference + do not create invalid file if there is more than 26*26 columns - Other improvements and fixes. ==== librdkafka ==== Version update (1.3.0 -> 1.5.0) - Update library v1.3.0 -> 1.5.0 * Improved broker connection error reporting with more useful information and hints on the cause of the problem. * Consumer: Propagate errors when subscribing to unavailable topics (#1540) * Producer: Add `batch.size` producer configuration property (#638) * Add `topic.metadata.propagation.max.ms` to allow newly manually created topics to be propagated throughout the cluster before reporting them as non-existent. This fixes race issues where CreateTopics() is quickly followed by produce(). * Prefer least idle connection for periodic metadata refreshes, et.al., to allow truly idle connections to time out and to avoid load-balancer-killed idle connection errors (#2845) * Added `rd_kafka_event_debug_contexts()` to get the debug contexts for a debug log line (by @wolfchimneyrock). * Added Test scenarios which define the cluster configuration. * Added MinGW-w64 builds (@ed-alertedh, #2553) * `./configure --enable-XYZ` now requires the XYZ check to pass, and `--disable-XYZ` disables the feature altogether (@benesch) * Added `rd_kafka_produceva()` which takes an array of produce arguments for situations where the existing `rd_kafka_producev()` va-arg approach can't be used. * Added `rd_kafka_message_broker_id()` to see the broker that a message was produced or fetched from, or an error was associated with. * Added RTT/delay simulation to mock brokers. * Subscribing to non-existent and unauthorized topics will now propagate errors `RD_KAFKA_RESP_ERR_UNKNOWN_TOPIC_OR_PART` and `RD_KAFKA_RESP_ERR_TOPIC_AUTHORIZATION_FAILED` to the application through the standard consumer error (the err field in the message object). * Consumer will no longer trigger auto creation of topics, `allow.auto.create.topics=true` may be used to re-enable the old deprecated functionality. * The default consumer pre-fetch queue threshold `queued.max.messages.kbytes` has been decreased from 1GB to 64MB to avoid excessive network usage for low and medium throughput consumer applications. High throughput consumer applications may need to manually set this property to a higher value. * The default consumer Fetch wait time has been increased from 100ms to 500ms to avoid excessive network usage for low throughput topics. * If OpenSSL is linked statically, or `ssl.ca.location=probe` is configured, librdkafka will probe known CA certificate paths and automatically use the first one found. This should alleviate the need to configure `ssl.ca.location` when the statically linked OpenSSL's OPENSSLDIR differs from the system's CA certificate path. * The heuristics for handling Apache Kafka < 0.10 brokers has been removed to improve connection error handling for modern Kafka versions. Users on Brokers 0.9.x or older should already be configuring `api.version.request=false` and `broker.version.fallback=...` so there should be no functional change. * The default producer batch accumulation time, `linger.ms`, has been changed from 0.5ms to 5ms to improve batch sizes and throughput while reducing the per-message protocol overhead. Applications that require lower produce latency than 5ms will need to manually set `linger.ms` to a lower value. * librdkafka's build tooling now requires Python 3.x (python3 interpreter). - Update install location of doc/license files ==== libspectre ==== Version update (0.2.8 -> 0.2.9) - update to 0.2.9: * Fixed lots of crashes, memory leaks with malformed documents (Albert Astals Cid, Randy) * Ghostscript 9.24 is now required (Christian Persch) * Hide internal symbols (Christian Persch) * Added "(libspectre)" to the error messages to be clear where the messages come from (Caolán McNamara) * Fixed clang warnings (Albert Astals Cid) - fix-bsc975503.diff: refresh ==== multipath-tools ==== Version update (0.8.4+43+suse.908383f -> 0.8.4+183+suse.1817ce2) Subpackages: kpartx libmpath0 - Update to version 0.8.4+183+suse.1817ce2: Added reviewed upstream fix for multipath crash * multipath: get_dm_mpvec: discard broken maps - Update to version 0.8.4+180+suse.50a2698: * Fix memory access / leak issues found with valgrind - Update to version 0.8.4+170+suse.801341f: * libmultipath: tests: fix bitfield tests * Spec file: disable LTO for %check (bsc#1133122) - Update to version 0.8.4+167+suse.70bef90: Pull in reviewed upstream changes - Bug fixes * libmultipath: add consistency check for alias settings (bsc#1172429) * libmultipath: select_action(): don't drop map if alias clashes (bsc#1172429) * libmultipath: refuse reloading an existing map with different WWID (bsc#1172429) * libmultipath: select_action(): force udev reload for uninitialized maps (bsc#1172157) * multipathd: uev_trigger(): handle incomplete ADD events (bsc#1172157) * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064) * libmultipath: add device to hwtable.c (bsc#1174026) - New features * multipath: add -D option to skip multipathd delegation * multipath: delegate flushing maps to multipathd * multipathd: add "del maps" multipathd command - Other changes * cleanup disassemble_map() code path * multipath-tools: introduce INIT_REMOVED state * logging improvements * fix "multipathd show devices" * libmultipath: remove uevent listener failback * libmultipath: create bitfield abstraction * libmultipath: count pending paths as active on loads * kpartx: handle alternate bsd disklabel location - Lots of minor fixes and cleanups - Spec file: use %service_del_postun_without_restart macro ==== openldap2 ==== Version update (2.4.51 -> 2.4.52) Subpackages: libldap-2_4-2 libldap-2_4-2-32bit libldap-data openldap2-client - updated to 2.4.52 OpenLDAP 2.4.52 (2020/08/28) Added libldap LDAP_OPT_X_TLS_REQUIRE_SAN option (ITS#9318) Added libldap OpenSSL support for multiple EECDH curves (ITS#9054) Added slapd OpenSSL support for multiple EECDH curves (ITS#9054) Fixed librewrite malloc/free corruption (ITS#9249) Fixed libldap hang when using UDP and server down (ITS#9328) Fixed slapd syncrepl rare deadlock due to network issues (ITS#9324) Fixed slapd syncrepl regression that could trigger an assert (ITS#9329) Fixed slapd-mdb index error with collapsed range (ITS#9135) - Switch from shadow to sysusers to generate ldap account - Remove if's for code older than SLE12 (Even SLE12 builds no longer) - Remove 12 years old sasl2 migration code ==== perl-libwww-perl ==== Version update (6.46 -> 6.47) - updated to 6.47 see /usr/share/doc/packages/perl-libwww-perl/Changes 6.47 2020-08-18 15:27:27Z - Only add cookies from the jar if there aren't cookies in the request (GH#347) (Doug Bell and Olaf Alders) ==== python-jedi ==== - Exclude pytest 6 gh#davidhalter/jedi#1660 ==== qalculate ==== Version update (3.12.0 -> 3.12.1) Subpackages: libqalculate21 qalculate-data - Update to 3.12.1: * Fix BTC, BYN, and BYR exchange rates * Fix exchange rates update time * Fix parsing of negative power in function arguments without parenthesis * Add arcsin, arccos, arsinh, arcosh, etc. as names for inverse trigonometric and hyperbolic functions * Interpret sin^-1, cos^-1, etc. as inverse functions (arcsin, arccos, etc.) * Add deftorad() and totient() functions ==== rubygem-ast ==== Version update (2.4.0 -> 2.4.1) - New upstream release 2.4.1 * Only ship the necessary library files in the gem artifact * bump rake * Removed unused dependencies from gemspec. * Fixed AST::Node#updated to always return a copy. (#25) ==== snapper ==== Version update (0.8.12 -> 0.8.13) Subpackages: libsnapper5 snapper-zypp-plugin - activate snapperd using systemd service - fix LVM setup for volume groups and logical volumes with one character long names (gh#openSUSE/snapper#465) - improved error messages for wrong command line options and arguments (bsc#1150156) - call fsync after writing snapshot info file (bsc#1078336) - version 0.8.13 ==== sudo ==== Subpackages: sudo-plugin-python - This rpm packages decides about the permissions of /etc/sudoers.d ==== suitesparse ==== Subpackages: libamd2 libcamd2 libccolamd2 libcholmod3 libcolamd2 libsuitesparseconfig5 libumfpack5 - Update to SuiteSparse 5.8.1 * SLIP_LU v1.0.2: resolved issue #51: build error with clang 10 * GraphBLAS v3.3.3: bug fix (GraphBLAS issue #13) * SLIP_LU v1.0.1 added: for solving Ax=b exactly. Requires the GNU GMP and MPRF libraries. * GraphBLAS v3.3.1: see the GraphBLAS/Doc/Changlog * replaced UFget with ssget: affects nearly all packages: UMFPACK, KLU, CHOLMOD, CXSparse/CSparse, etc, but their version numbers are left unchanged since it affects the MATLAB tests only, not the compiled libraries. * ssget v2.2.0: better URL redirects * updates to SuiteSparse build system - Call %limit_build macro in spec to avoid oom build failure for ppc64le and aarch64 - Add _constraints with default 5GB min physicalmemory and 7GB for ppc64/ppc64le ==== virtualbox ==== Version update (6.1.12 -> 6.1.13) Subpackages: virtualbox-guest-tools virtualbox-guest-x11 - Pseudo version bump to 6.1.13, which is NOT an Oracle release. Update VB sources to run under kernel 5.8.0+ with no modifications to the kernel. These sources are derived from r85883 of the Oracle svn repository. For operations with USB{2,3}, the extension pack for revision 140056 must be installed. Once Oracle releases 6.1.14, then the extension pack and VB itself will have the same revision number. File "fixes_for_5.8.patch" is removed as that part was fixed upstream. Fixes boo#1175201. - Modify fixes_for_5.9.patch. - Fix build for kernel 5.9. File "fixes_for_5.9.patch" is added. - Delete temporary USBpassthru test patch. - Apply Oracle changes for kernel 5.8. ==== virtualbox-kmp ==== Version update (6.1.12_k5.8.4_1 -> 6.1.13_k5.8.4_1) - Pseudo version bump to 6.1.13, which is NOT an Oracle release. Update VB sources to run under kernel 5.8.0+ with no modifications to the kernel. These sources are derived from r85883 of the Oracle svn repository. For operations with USB{2,3}, the extension pack for revision 140056 must be installed. Once Oracle releases 6.1.14, then the extension pack and VB itself will have the same revision number. File "fixes_for_5.8.patch" is removed as that part was fixed upstream. Fixes boo#1175201. - Modify fixes_for_5.9.patch. - Fix build for kernel 5.9. File "fixes_for_5.9.patch" is added. - Delete temporary USBpassthru test patch. - Apply Oracle changes for kernel 5.8. ==== webrtc-audio-processing ==== Version update (0.3 -> 0.3.1) - update to 0.3.1: * doc: file invalid reference to pulseaudio mailing list * various build system fixes - spec-cleaner run ==== xapian-core ==== Version update (1.4.15 -> 1.4.17) - Update to 1.4.17: + API: * Database::get_average_length(): Add this as an alias for Database::get_avlen(). In git master we've added this as a preferred new name - adding it to 1.4.x too will make it easier for users to update to using this. * Database::get_spelling_suggestion(): Optimise edit distance initialisation loop to significantly reduce the cost of a typical edit distance calculation. * Fix query expansion on sharded databases. The mechanism for passing in which shard a TermList is from wasn't hooked up and as a result we'd always think it's from the first shard, meaning the statistics would be wrong and that our suggested terms may not have been as good as they should be in this situation. * Enquire::get_eset(): Use string::compare() to avoid 1/3 of the string compares on average. + documentation: * Update doxygen HTML headers and footers to resolve issues with some interactive features of the API docs not working. Reported by Enrico Zini. * Stop specifying obsolete doxygen settings PERL_PATH and MSCGEN_PATH. * Clarify API docs for MSet::get_termfreq() to make it clear that this considers all documents in the database, not only those that matched the searched (it would sometimes be useful to be able to report the number of occurrences of a term in the matched documents, but it's not something we currently keep track of). Reported by Tadeusz So?nierz and Peter Salomonsen. - update to 1.4.16: * MSet::snippet(): The snippet now includes trailing punctuation which carries meaning or gives useful context. See https://github.com/xapian/xapian/pull/180, reported by Robert Stepanek. * MSet::snippet(): Fix segfault generating snippet from default-constructed MSet. This probably isn't something you'd typically do, but it shouldn't crash. Found during extended testing of #803 (which only affected git master) which was reported by Robert Stepanek. * Remove trailing full stop from exception messages. We conventionally don't include one, but a few cases didn't follow that convention. testsuite: * Replace direct use of ftime() which gives deprecation warnings with recent mingw. Reported by srinivasyadav22. matcher: * Fix segfault in rare cases in the query optimiser. We keep a pointer to the most recent posting list to use as a hint for opening the next posting list, but the existing mechanism to take ownership of this hint had a flaw. We now invalidate the hint in situations where it might be indirectly deleted which is safe, but somewhat conservative. * Improve the optimisation of an always-matching OP_VALUE_GE to also take effect when the value slot's lower bound is equal to the limit of the OP_VALUE_GE. Patch from boda sadalla. glass backend: * Report the correct errno value if commit() fails. We were potentially reporting ENOENT from an unlink() call cleaning up a temporary file prior to throwing the exception instead. documentation: * Fix missing menus in API documentation. Newer doxygen generates .js files which we also need to distribute and install. Reported by sec^nd on #xapian. * Note OP_FILTER ignored subquery bug fixed in 1.4.15 as present in 1.4.14 and older. portability: * Use our own autoconf cache variable namespace (xo_cv_ prefix instead of ac_cv_) to avoid colliding with standard autoconf macro use if config.site or a shared config.cache is used. The former case caused a build failure for the OpenBSD port with 1.4.15, reported by Lucas R. * Use clock_gettime() and nanosleep() under modern mingw as these allow higher precision than what we previously used. ==== yast2-trans ==== Version update (84.87.20200814.909b1a4158 -> 84.87.20200829.ec23685593) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20200829.ec23685593: * New POT for text domain 'cluster'. * New POT for text domain 'vpn'. * New POT for text domain 'users'. * New POT for text domain 'update'. * New POT for text domain 'tune'. * New POT for text domain 'tftp-server'. * New POT for text domain 'sysconfig'. * New POT for text domain 'support'. * New POT for text domain 'sudo'. * New POT for text domain 'storage'. * New POT for text domain 'squid'. * New POT for text domain 'sound'. * New POT for text domain 'snapper'. * New POT for text domain 'slp-server'. * New POT for text domain 'services-manager'. * New POT for text domain 'security'. * New POT for text domain 'scanner'. * New POT for text domain 'samba-server'. * New POT for text domain 'samba-client'. * New POT for text domain 's390'. * New POT for text domain 'rmt'. * New POT for text domain 'registration'. * New POT for text domain 'rear'. * New POT for text domain 'proxy'. * New POT for text domain 'printer'. * New POT for text domain 'pam'. * New POT for text domain 'packager'. * New POT for text domain 'online-update-configuration'. * New POT for text domain 'online-update'. * New POT for text domain 'oneclickinstall'. * New POT for text domain 'ntp-client'. * New POT for text domain 'nis_server'. * New POT for text domain 'nis'. * New POT for text domain 'nfs_server'. * New POT for text domain 'nfs'. * New POT for text domain 'network'. * New POT for text domain 'migration'. * New POT for text domain 'mail'. * New POT for text domain 'ldap-client'. * New POT for text domain 'ldap'. * New POT for text domain 'kdump'. * New POT for text domain 'journalctl'. * New POT for text domain 'journal'. * New POT for text domain 'isns'. * New POT for text domain 'iscsi-lio-server'. * New POT for text domain 'iscsi-client'. * New POT for text domain 'instserver'. * New POT for text domain 'installation'. * New POT for text domain 'http-server'. * New POT for text domain 'ftp-server'. * New POT for text domain 'firewall'. * New POT for text domain 'fcoe-client'. * New POT for text domain 'drbd'. * New POT for text domain 'docker'. * New POT for text domain 'dns-server'. * New POT for text domain 'dhcp-server'. * New POT for text domain 'crowbar'. * New POT for text domain 'country'. * New POT for text domain 'configuration_management'. * New POT for text domain 'cluster'. * New POT for text domain 'cio'. * New POT for text domain 'caasp'. * New POT for text domain 'bootloader'. * New POT for text domain 'base'. * New POT for text domain 'autoinst'. * New POT for text domain 'authserver'. * New POT for text domain 'auth-client'. * New POT for text domain 'audit-laf'. * New POT for text domain 'apparmor'. * New POT for text domain 'add-on'. * New POT for text domain 'pkg-bindings'. * New POT for text domain 'autoinst'. * New POT for text domain 'autoinst'.

1 0

[opensuse-factory] Unable to boot after upgrading to 20200824
by Viktor Sævarsson 03 Sep '20

03 Sep '20

Hi all! I have a tumbleweed transactional server that is unable to boot after automatically updating to snapshot 20200824. The error seems to occur during volume mounting. Related logs: etc.mount: Directory /etc to mount over is not empty, mounting anyway overlayfs: failed to resolve '/sysroot/var/lib/overlay/395/etc': -2 ignored apparmor.service errors etc.mount: Mount process exited, code=exited, status=32/n/a etc.mount: Failed with result 'exit-code'. Failed to mount /etc. bunch of dependency errors and related mounting errors This warning occurs towards the start of the boot but I'm not sure that it is related: "sysroot-var.mount: Directory /sysroot/var to mount over is not empty, mounting anyway." Regards -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

3 9

[opensuse-factory] Proposal to remove libqt5-prioritise-gtk2-platformtheme.patch in libqt5-qtbase repository
by Xu Zhao 03 Sep '20

03 Sep '20

Greetings everyone, I am the maintainer of server:messaging/telegram-desktop. I am sending this email to propose removing the libqt5-prioritise-gtk2-platformtheme.patch in the libqt5-qtbase repository. The link to the patch is https://build.opensuse.org/package/view_file/KDE:Qt:5.15/libqt5-qtbase/libq…. The patch is used for prioritising gtk2 platform plugin in a Qt app, such that the Qt app integrates better with the outside GTK world. There is also a gtk3 platform plugin, but it just not working as good as the gtk2 one and it seems Qt doesn't have plan to fix it (https://bugreports.qt.io/browse/QTBUG-72506). I am proposing to obsolete this patch for the following reasons: First, this patch creates big problem in packaging and running Telegram Desktop on openSUSE GTK-based desktop environments, including GNOME, XFCE, and Cinammon. Basically, Telegram doesn't provide many features when using GTK2 platform plugin, such as system-native notifications, dark mode, and causing clipboard issues (https://github.com/telegramdesktop/tdesktop/blob/6635d03818c90f62cfddb516ac…). Because only openSUSE has this Qt patch, this problem doesn't exist on any other distribution. Second, all mainstream GTK-based desktop environments have migrated to GTK3. It doesn't make sense to keep prioritising the gtk2 platform plugin. Third, I think the problem mentioned in QTBUG-72506 could be fixed by letting the QGtk3Theme find the correct GTK3 theme in src/plugins/platformthemes/gtk3/qgtk3theme.cpp, which should be the right way to do things. Possible solutions: 1. Don't touch libqt5-qtbase and workaround only in telegram-desktop. This is the current solution. Currently we are using hacks to let Telegram run on qgtk2 platform plugin, which is unstable and could break anytime. 2. Remove libqt5-prioritise-gtk2-platformtheme.patch and don't do anything else. Telegram will be happy, but some Qt applications on GTK3 environments will not be able to correctly themed because of QTBUG-72506. I am not sure about this tho since I am a KDE user. 3. Remove libqt5-prioritise-gtk2-platformtheme.patch and patch GTK3 platform plugin instead I believe this is the right way to go, but it could break other things I am not aware of. Please let me know what you guys think. Thank you very much. Regards, Xu -- Xu Zhao i(a)xuzhao.net -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

3 3

[opensuse-factory] IPv6 with NetworkManger broken?
by Arjen de Korte 02 Sep '20

02 Sep '20

NetworkManager 1.26.2-1.2 (Tumbleweed) I just noticed that IPv6 (WiFi) seems to be broken when using NetworkManager for network configuration. IPv6 in the LAN seems to be unaffected, but WAN traffic is completely broken. All is well when using wicked however, so I suspect a change in NetworkMananger broke it recently (it has worked in the past). Anyone else noticed problems with this? NetworkManager: # ip -6 route show dev wlp2s0 2001:xxxx:xxxx:xxxx::/64 via fe80::7eff:4dff:fea9:7368 proto ra metric 600 pref medium fe80::/64 proto kernel metric 600 pref medium default via fe80::7eff:4dff:fea9:7368 proto ra metric 600 pref medium wicked: # ip -6 route show dev wlp2s0 2001:xxxx:xxxx:xxxx::/64 proto kernel metric 256 expires 6976sec pref medium fe80::/64 proto kernel metric 256 pref medium default via fe80::7eff:4dff:fea9:7368 proto ra metric 1024 expires 1576sec mtu 1472 hoplimit 255 pref medium -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

5 16

[opensuse-factory] New Tumbleweed snapshot 20200831 released!
by Dominique Leuenberger 02 Sep '20

02 Sep '20

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: bind (9.16.5 -> 9.16.6) festival libverto (0.2.6 -> 0.3.1) permissions (1550_20200811 -> 1550_20200826) suse-module-tools (15.3.3 -> 15.3.4) systemd xdm xfce4-screensaver zlib === Details === ==== bind ==== Version update (9.16.5 -> 9.16.6) Subpackages: bind-chrootenv bind-doc bind-utils libbind9-1600 libdns1605 libirs1601 libisccc1600 libisccfg1600 python3-bind - Require /sbin/start_daemon: both init scripts, the one used in systemd context as well as legacy sysv, make use of start_daemon. - Upgrade to version 9.16.6 Fixes five vilnerabilities: 5481. [security] "update-policy" rules of type "subdomain" were incorrectly treated as "zonesub" rules, which allowed keys used in "subdomain" rules to update names outside of the specified subdomains. The problem was fixed by making sure "subdomain" rules are again processed as described in the ARM. (CVE-2020-8624) [GL #2055] 5480. [security] When BIND 9 was compiled with native PKCS#11 support, it was possible to trigger an assertion failure in code determining the number of bits in the PKCS#11 RSA public key with a specially crafted packet. (CVE-2020-8623) [GL #2037] 5479. [security] named could crash in certain query resolution scenarios where QNAME minimization and forwarding were both enabled. (CVE-2020-8621) [GL #1997] 5478. [security] It was possible to trigger an assertion failure by sending a specially crafted large TCP DNS message. (CVE-2020-8620) [GL #1996] 5476. [security] It was possible to trigger an assertion failure when verifying the response to a TSIG-signed request. (CVE-2020-8622) [GL #2028] For the less severe bugs fixed, see the CHANGES file. [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621, CVE-2020-8620, CVE-2020-8622] ==== festival ==== - Removed unnecessary and unexpected "_link". - Updated .spec file according to the Tumbleweed's change (%{_libexecdir} was changed from /usr/lib to /usr/libexec). ==== libverto ==== Version update (0.2.6 -> 0.3.1) Subpackages: libverto1 libverto1-32bit - update to 0.3.1: * Fix rare leak of DSO in module_load * Turn off -Wcast-function-type * Work around libev not being c89-compliant * Minor release bumps for verto_cleanup() * Leak fixes * Enforce strict c89 compliance for portability * Many warning fixes * Fix memleak in libverto:vfree * Update mutex usage to improve debugging * Add verto_cleanup() to free loaded_modules * Make C99 requirement explicit ==== permissions ==== Version update (1550_20200811 -> 1550_20200826) Subpackages: chkstat permissions-config permissions-doc - Update to version 20200826: * mtr-packet: stop requiring dialout group * etc/permissions: fix mtr permission * list_permissions: improve output format * list_permissions: support globbing in --path argument * list_permissions: implement simplifications suggested in PR#92 * list_permissions: new tool for better path configuration overview ==== suse-module-tools ==== Version update (15.3.3 -> 15.3.4) - Update to version 15.3.4: * spec: rework dependencies ==== systemd ==== Subpackages: libsystemd0 libsystemd0-32bit libudev-devel libudev1 libudev1-32bit systemd-32bit systemd-container systemd-doc systemd-lang systemd-logger systemd-sysvinit udev - Adjust %pre and %post for the restoration of upstream tmp.mount (boo#1175779) - Import commit a4e393eecb9dbe140a6c7d57419c291d786155cf d8e3bd4e22 Revert "core: don't send SIGKILL to user@.service immediatly during shutdown" - Drop requirement on 'sysvinit-tools' It was used to workaround bug #886599 by explicitly calling vhangup(8) from getty@.service so when this service was stopped a virtually hangup on the specified terminal when were stopped to give the shell a few seconds to save its history. But this workaround was dropped since it had no effect (SLE12-GM was released with it but was still suffering from the bug) and was replaced by commit e9db43d5910717a108, which was released from v226 and backported to SLE12/SLE12-SP1. ==== xdm ==== Subpackages: xdm-xsession - Require /sbin/startproc: with systemd no longer pulling in sysvinit-tools. we are responsible for our own deps. /sbin/pidof and /sbin/startproc both were presented by sysvinit-tools. but the sole presence of the /sbin/pidof dep is not sufficient, as this can be provided by various packages (e.g. busybox-sysvinit-tools, which then does not provide startproc). Spelling the deps out ensures that we get the right package set installed. - Drop insserv-compat dependency when display-manager.service is used insserv-compat is going to be dropped soon or later on systems with systemd as init system. It was only needed by /usr/lib/X11/display-manager script that uses rc_status to pretty print the status of a command. Since this script is intended to be used by display-manager.service and not called directly by users and systemd has already its own mechanism to report status, the use of rc_status doesn't seem to be useful. The exit failure status for each command has been preserved. - Drop commands in /usr/lib/X11/display-manager that are never used by systemd Assuming that this script is only called from display-manager.service unit, some commands of the scripts are either never used or redundant with systemd functionalities. More specifically, there's no need to redefine a "stop" command as this is one basic command that systemd implements already. Also convert "reload" to make use of $MAINPID exported by systemd which should be slighly more reliable and hence stop relying on killproc that might be removed in the future. - Replace /var/run with /run as /var/run is obsolete since quite some time now. ==== xfce4-screensaver ==== - Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075) ==== zlib ==== Subpackages: libminizip1 libz1 libz1-32bit zlib-devel - Add patch to fix compression level switching bsc#1175811 bsc#1175830 bsc#1175831 * zlib-compression-switching.patch - Set -DDFLTCC_LEVEL_MASK=0x7e on s390/s390x jsc#13776 -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

1 0

[opensuse-factory] openQA Livestream next Wednesday 11 UTC
by Dan Čermák 02 Sep '20

02 Sep '20

Hi all, I'll be live streaming another tutorial about openQA next Wednesday (August 26) over on https://www.twitch.tv/defolos. The current plan is to cover the following topics: - How to setup your own local test environment - How does running tests actually work (including job groups, test suites, etc.) and anything else that you'd like to hear. Hope to see you on Wednesday in the chat, Dan -- Dan Čermák <dcermak(a)suse.com> Software Engineer Development tools SUSE Software Solutions Germany GmbH Maxfeldstr. 5 90409 Nuremberg Germany (HRB 36809, AG Nürnberg) Managing Director: Felix Imendörffer

4 8

[opensuse-factory] New submit request workflow for Jump, publicly available builds
by Lubos Kocman 02 Sep '20

02 Sep '20

Hello openSUSE! I do have some exciting news to share! TLDR: openSUSE Jump builds will be now publicly available, jira.suse.com access for contributors in 5 weeks, OBS submissions against SLE packages will be submitted against Jump and mirrored in IBS. Any updates on request will be then synced outside (bi-directional sync). Proposed workflow received thumbs up from Maintenance and SLE Release Management. https://github.com/openSUSE/CommunitySLEFeatureRequests/blob/master/images/… First, I'd like to announce that we'll start publishing images and FTP trees for openSUSE Jump*, so people can get their hands on. Please be aware that Jump is still in Alpha quality. I expect data to be available later this week as there is still pending work on pontifex by Heroes. https://build.opensuse.org/project/show/openSUSE:Jump:15.2 Second, I've agreed on ETA of 5 weeks for the initial availability of JIRA partner access to openSUSE Contributors (JIRA-722). In this way, we can have transparent handling of feature requests, just like for any other SUSE partner. I hope that this brings some more transparency and self-service for SLE -> openSUSE feature requests. TAM for openSUSE (Lubos) will be in charge of controlling the access. We'll initially have rather a smaller pool of users (initially 10) and will grow it over time based on the popularity. Just FYI: The standard size of the pool for partners is 2, so openSUSE is being taken seriously as a partner here. Second, the proposal of the new submission model for the openSUSE Jump and it's SUSE Linux Enterprise part was accepted well by the Maintenance team and SLE Release management, therefore **I'd like to hear your opinion**. My hard requirement is that we will NOT reject submissions just because it's a submission against an SLE package. My attept to capture is here https://github.com/openSUSE/CommunitySLEFeatureRequests/blob/master/images/… (also available in drawio and png). Log story short, an openSUSE contributor would always submit code against a single project. Let's say openSUSE:Jump:15.2 for now (later Leap). Code submission would then get redirected to a proper origin (Backports, Leap, SLE). The tool for SR redirection is already in place (OBS-59). Origin options: openSUSE Backports (for the majority of Leap packages ~8k), openSUSE Leap (mostly branding packages, patterns, and SLE package forks of packages necessary to keep openSUSE Leap building ~100) SUSE Linux Enterprise (~4k packages, the core) Backports and openSUSE Leap code submissions will have pretty much the same experience as now. With the exception that you'll be able to use just one submit request target for more convenience and reusability as there will be one build used for both Package Hub and Leap. Submissions to SUSE Linux Enterprise will get more transparent. I'd really like to ask you to look at it as a good starting point. I see it as a big improvement from what we have now since you'll be now able to see behind the scenes. This all is constantly happening, you were just not able to see it before. This would be more or less a regular way to update an SLE package. 0) The contributor reports a bug or logs in to jira.suse.com and files a partner feature request for new features. JIRA request can still be created by TAM (Lubos) if there would be any problem (e.g. missing access etc). User (and other openSUSE contributors who requested JIRA access) see updates in JIRA. 1) TAM reviews feature and reject with reasoning or gives it a go and passes it for further evaluation. 1) The contributor submits code against openSUSE:Jump:15.2 (later Leap), optionally references openSUSE Partner JIRA feature (see my note on JIRA access) or a bug 2) openSUSE Release team reviews a new type of review let's refer to it as an "openSUSE Jump" review for now. 3) Approved submissions will get mirrored (OBS-63) from OBS to IBS (Internal SUSE OBS instance) with bi-directional sync on comments, updates for full transparency so the contributor can see progress on the submission by himself. 4) Submission gets processed by SLE Release Management or Maintenance team based on the origin (see my note below). At this point, it's either rejected or passed on staging for pre- integration tests. Reject reasons might be not following (not a full list) Failed code review such as skipping Factory First, mandatory 4 eyes review, etc. Change is past the code-submission deadline Missing approval on a feature, ECO or a missing issue reference Does not meet usual maintenance update criteria such as backward- incompatible update or would require a rebuild of a lot of packages Failed pre-integration testing. The reject reason would be communicated in the submission. Generally, the submission criteria would be the same as any SUSE employee. 5) openSUSE TAM (Lubos) optionally creates an ECO* to get approvals for feature requests in a late development phase or Maintenance updates. 6) Mirrored SR in IBS and Original SR (via bi-directional sync) gets accepted (or rejected). 7) The partner feature request is marked as Done or bug is marked as Resolved. Just one note on SLE Submit requests, which I believe will be a source of many conflicts. Submissions to SUSE Linux Enterprise* are a bit more tricky due to the project inheritance, as packages are coming from older SLE Service Packs, respective its ":Update" projects. That means that it won't be uncommon that the user will be submitting code against for an example openSUSE Leap 15.3 during the Early Alpha phase, however, in the end, it's going to be a submission for SUSE:SLE- 15-SP1:Update. Such submission may require additional ECO* approval or will result in a fork in the latest Service Pack of SLE. So I recommend all users to use "osc origin" to check where does the package come from, to avoid any surprises later on. And the last I'll check our wiki pages and make sure that the content is in alignment with the presented idea. https://en.opensuse.org/openSUSE:Submitting_feature_requests) https://en.opensuse.org/Portal:Leap/SLEFeatureRequests https://github.com/openSUSE/CommunitySLEFeatureRequests/ So what do you think? [0] openSUSE Jump https://en.opensuse.org/Portal:Leap:Jump [1] ECO - https://en.opensuse.org/ECO [2] The submit request will be mirrored in OBS under a different ID etc. but the state of original submission will be Accepted. [3] IBS - SUSE Internal OBS instance, that is used to build SUSE Linux Enterprise Thank you for your time

8 10

[opensuse-factory] Some missing path in $PATH when using sudo
by Marco Varlese 01 Sep '20

01 Sep '20

Hello All, I would like to share something with you which I was not aware of until this morning, and forgive me if this was known to most. The $PATH is missing /usr/local/bin and /usr/local/sbin paths; one thing I don't like about it is that there is an obvious different experience between "sudo" vs "su -". In fact, the latter does actually have the paths in the env variable. A possible workaround is to go with "sudo -i" which would preserve the user paths but may not necessarily be the user-experience we may want to give to new adopters: imagine the situation when somebody just starts playing with the OS, finding some instructions over the internet and try to execute them to see "what happens". :) So, here's the dilemma: would it make sense to add the two (missing) aforementioned paths to the sudoer's secure_path? I would welcome that as a better UX. Thanks for your consideration. Cheers, Marco -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

1 0