January 2021 - openSUSE Factory - openSUSE Mailing Lists

Tumbleweed - Review of the week 2021/04
by Dominique Leuenberger / DimStar 30 Jan '21

30 Jan '21

Dear Tumbleweed users and hackers, This week felt like I was fighting with OBS and openQA, and packages breaking Tumbleweed. This also shows in the number of released snapshots: ‘only’ 3. But there was a huge gap between 0121 (reviewer last week) and 0126 (first published snapshot this week). But I’m sure you all prefer longer gaps, but working snapshots. The longer the gap, the more packages are in there, so the total net change remains the same. This wee, we released 0126, 0127, and 0128. The main changes included: * Automake 1.16.3 * findutils 4.8.0 * Linux kernel 5.10.9 * libvirt 7.0.0 * Sudo 1.9.5p2 (CVE-2021-3156) Plenty of submissions are being tested in the Staging projects – almost all of them are filled. The main upcoming changes will be: * Mozilla Firefox 85.0 * Linux kernel 5.10.11 * util-linux 2.36.1 * Rust 1.49.0 * More work on python-rpm-macros, used for multiple python flavors (aka python singlespec) * This will come together with python 3.8.7 * Postfix: change the default database format to lmdb, migrating away from BerkeleyDB (3rd attempt, previous two were reverted) * Bison 3.7.5 * Firewalld 0.9.3 * Pulseaudio 14.2 * Bind 9.16.11: changed protection of/against “named” from chroot jail to systemd protection. This obsoletes subpackage named-chrootenv. * KDE Plasma 5.21: currently 5.20.90 being tested * openssl 1.1.1i, based on centralized crypto-policies package Cheers, Dominique

2 1

[factory][TW] bad OSS package Mesa-dri-nouveau-20.3.3-271.2?
by Felix Miata 30 Jan '21

30 Jan '21

I just upgraded an old 10de:03d0 graphics/TW installation to 20210128, one I try to keep unnecessary software off of. In this case, unneeded is (only some of) *nouveau* applicable to Xorg. Apparently required for X to function with the upstream default modesetting DDX is the $SUBJECT package. It comes from OSS repo with MIT license. Without it installed, Xorg.0.log reports (EE) modeset(0): glamor initialization failed, Xorg presents only a black screen and exit, and Xorg.0.log contains no (EE) lines subsequent, for a total of two lines containing (EE). My question is why zypper demands I answer a license question yes if I wish to upgrade the subject package, in same manner as for xf86-video-nouveau? I perceive nothing at https://mit-license.org/ to suggest any such ack. Are there other Mesa packages requiring license ack? I've never seen one before. Is this worth a bug report? -- Evolution as taught in public schools, like religion, is based on faith, not on science. Team OS/2 ** Reg. Linux User #211409 ** a11y rocks! Felix Miata *** http://fm.no-ip.com/

3 2

How do I remove this w/o rebooting or reformatting (.gvfs)
by L A Walsh 30 Jan '21

30 Jan '21

Ishtar:# rm -r 2015-04-26 rm: cannot remove '2015-04-26/root/.gvfs': Operation not permitted Can't delete, unmount, rename, lsof+fuser both come up empty. Any ideas on how to remove these things? Thanks!

5 5

New Tumbleweed snapshot 20210128 released!
by Dominique Leuenberger 29 Jan '21

29 Jan '21

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: arpwatch f2fs-tools kvm_stat (5.10.7 -> 5.10.9) perl-IO-Tty (1.15 -> 1.16) perl-Mojolicious (8.71 -> 8.72) python-passlib === Details === ==== arpwatch ==== - Include arp2ethers script (jsc#SLE-17224) ==== f2fs-tools ==== Subpackages: libf2fs8 - prepare usrmerge (boo#1029961) ==== kvm_stat ==== Version update (5.10.7 -> 5.10.9) - Install the systemd unit file in the proper place, so that the service can be started right away, if the user wants that, without having to copy the file in the units directory. - Integrate with logrotate, by providing a logrotate config file, as the logs can easily become very big. ==== perl-IO-Tty ==== Version update (1.15 -> 1.16) - updated to 1.16 see /usr/share/doc/packages/perl-IO-Tty/ChangeLog 1.16 2021-01-2 Todd Rinaldo <toddr(a)cpan.org> * Switch to github for issue tracker. * Switch to testsuite CI workflow. * Tidy ==== perl-Mojolicious ==== Version update (8.71 -> 8.72) - updated to 8.72 see /usr/share/doc/packages/perl-Mojolicious/Changes 8.72 2021-01-26 - Deprecated Mojo::UserAgent::local_address in favor of Mojo::UserAgent::socket_options. - Deprecated local_address option of connect method in Mojo::IOLoop::Client in favor of socket_options. - Deprecated tls_protocols option of connect method in Mojo::IOLoop::Client in favor of tls_options. - Deprecated tls_verify option of connect method in Mojo::IOLoop::Client in favor of tls_options. - Deprecated tls_protocols option of negotiate method in Mojo::IOLoop::TLS in favor of tls_options. - Deprecated tls_ciphers option of negotiate method in Mojo::IOLoop::TLS in favor of tls_options. - Deprecated tls_verify option of negotiate method in Mojo::IOLoop::TLS in favor of tls_options. - Deprecated tls_version option of negotiate method in Mojo::IOLoop::TLS in favor of tls_options. - Deprecated tls_ciphers option of listen method in Mojo::IOLoop::Server in favor of tls_options. - Deprecated tls_verify option of listen method in Mojo::IOLoop::Server in favor of tls_options. - Deprecated tls_version option of listen method in Mojo::IOLoop::Server in favor of tls_options. - Added support for trusted reverse proxies. (jberger) - Added network_contains function to Mojo::Util. (jberger) - Added trusted_proxies attribute to Mojo::Server and Mojo::Message::Request. (jberger) - Added socket_options method to Mojo::UserAgent. - Added build_server method to Mojolicious::Command::daemon and Mojolicious::Command::prefork. (jberger) - Added trusted_proxies option to Hynotoad. (jberger) - Added socket_options and tls_options options to connect method in Mojo::IOLoop::Client. - Added tls_options option to negotiate method in Mojo::IOLoop::TLS. ==== python-passlib ==== - OpenLeap is not SLE - Use _multibuild to only have the test dependencies as buildrequires of the test build. - Have optional test dependencies (Django and scrypt) that are not available in SLE only be buildrequired in TW.

1 0

[opensuse-factory] openSUSE reproducible builds status 2021-01
by Bernhard M. Wiedemann 29 Jan '21

29 Jan '21

Hi, last month's status: https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/message… Last months' reproducible builds project updates (including my work): https://reproducible-builds.org/reports/2020-12/ Several rubygem packages suffered from an issue with ruby 3.0 = https://bugzilla.opensuse.org/show_bug.cgi?id=1180528 . The fix by darix is on the way. I uploaded https://rb.zq1.de/compare.factory-20210129/ today and rbstats are: total-packages: 13929 (+88) build-tried: 13922 (+92) build-failed: 30 (-2) build-n-a: 130 (+1) build-succeeded: 13762 (+93) build-official-failed+na: 294 (+125) build-compare-failed: 436 (+13) build-compare-succeeded: 13326 (+80) verify-failed: 508 (-3) verified-semi-reproducible: 12946 (+162) bit-by-bit-identical: 13198 (+79) not-bit-by-bit-identical: 564 (+14) not-bit-by-bit-identicalcheck: 564 (+14) https://rb.zq1.de/compare.factory-20210129/graph.png shows the change over time https://rb.zq1.de/compare.factory-20210129/unreproduciblerings.txt lists very unreproducible core packages (bootstrap+DVD) Of the badly unreproducible packages, 3 were in ring0 47 were in ring1 That makes it 50/3247 => 1.54 % which is below the overall average of 436/13762 => 3.17 % 564/13762 => 4.10 % of packages are not perfectly reproducible Newly reproducible core packages: php7 https://github.com/php/php-src/pull/6564 xapian-bindings Still bad: yodl suffering from pdf toolchain timestamp issues somewhere in latex->dvips->ps2pdf Ciao Bernhard M.

1 0

New Tumbleweed snapshot 20210127 released!
by Dominique Leuenberger 28 Jan '21

28 Jan '21

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: apache2 apache2-manual apache2-prefork apache2-utils apparmor apulse hylafax+ jhead (3.00 -> 3.04) libreoffice ndctl pcsc-cyberjack (3.99.5final.SP13 -> 3.99.5final.SP14) pmdk rdma-core sudo (1.9.5p1 -> 1.9.5p2) virtualbox (6.1.16 -> 6.1.18) virtualbox-kmp (6.1.16_k5.10.9_1 -> 6.1.18_k5.10.9_1) yast2-network (4.3.38 -> 4.3.41) zbar === Details === ==== apache2 ==== - added Provides: http_daemon to fix bsc#1180132 - remove suexec2 from premissions as well - modified sources % permissions.apache2 - suexec2 was renamed to suexec in 2015 and the symlink to suexec no longer exists ==== apache2-manual ==== - added Provides: http_daemon to fix bsc#1180132 - remove suexec2 from premissions as well - modified sources % permissions.apache2 - suexec2 was renamed to suexec in 2015 and the symlink to suexec no longer exists ==== apache2-prefork ==== - added Provides: http_daemon to fix bsc#1180132 - remove suexec2 from premissions as well - modified sources % permissions.apache2 - suexec2 was renamed to suexec in 2015 and the symlink to suexec no longer exists ==== apache2-utils ==== - added Provides: http_daemon to fix bsc#1180132 - remove suexec2 from premissions as well - modified sources % permissions.apache2 - suexec2 was renamed to suexec in 2015 and the symlink to suexec no longer exists ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-docs apparmor-parser apparmor-parser-lang apparmor-profiles apparmor-utils apparmor-utils-lang pam_apparmor pam_apparmor-32bit python3-apparmor - add apache-extra-profile-include-if-exists.diff: make <apache2.d> include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527) ==== apulse ==== Subpackages: apulse-32bit - Drop conditional 32bit recommends. ==== hylafax+ ==== Subpackages: hylafax+-client libfaxutil7_0_3 - Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1} ==== jhead ==== Version update (3.00 -> 3.04) - Update to version 3.04 * Apply a whole bunch of patches from Debian. * Spell check and fuzz test stuff from Debian, nothing useful to human users. * Add option to set exif date from date from another file. * Bug fixes relating to fuzz testing. * Fix bug where thumbnail replacement DID NOT WORK. * Fix bug when no orientation tag is present * Fix bug of not clearing exif information when processing images with an without exif data in one invocation. * Remove some unnecessary warnings with some types of GPS data * Remove multiple copies of the same type of section when deleting section types * Modify the patch CVE-2018-17088.patch because source code changed - Remove these patches because of including upstream code * CVE-2018-6612.patch, CVE-2016-3822.patch, CVE-2018-16554.patch ==== libreoffice ==== Subpackages: libreoffice-base libreoffice-calc libreoffice-draw libreoffice-filters-optional libreoffice-gnome libreoffice-gtk3 libreoffice-icon-themes libreoffice-impress libreoffice-l10n-cs libreoffice-l10n-da libreoffice-l10n-de libreoffice-l10n-el libreoffice-l10n-en libreoffice-l10n-en_GB libreoffice-l10n-es libreoffice-l10n-fr libreoffice-l10n-hu libreoffice-l10n-it libreoffice-l10n-ja libreoffice-l10n-pl libreoffice-l10n-pt_BR libreoffice-l10n-ru libreoffice-l10n-zh_CN libreoffice-l10n-zh_TW libreoffice-mailmerge libreoffice-math libreoffice-pyuno libreoffice-qt5 libreoffice-writer libreofficekit - Update SUSE.soc to reflect current SUSE branding, add following colors (bsc#1181122): * SUSE Mint * SUSE Midnight Blue * SUSE Waterhole Blue * SUSE Persimmon See also https://brand.suse.com/brand-system/color-palette ==== ndctl ==== - Enable aarch64 build ==== pcsc-cyberjack ==== Version update (3.99.5final.SP13 -> 3.99.5final.SP14) - removed obsolete pcsc-cyberjack-3.99.5final.SP09-gcc10.patch - update to 3.99.5 Service Pack 14 - use https://en.opensuse.org/SourceUrls - remove check for obsolete SUSE versions ==== pmdk ==== Subpackages: libpmem1 - Enable aarch64 build ==== rdma-core ==== Subpackages: libefa1 libibverbs libibverbs1 libmlx4-1 libmlx5-1 librdmacm1 - Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon is loaded at boot if enabled (bsc#1180196) ==== sudo ==== Version update (1.9.5p1 -> 1.9.5p2) Subpackages: sudo-plugin-python - Update to 1.9.5.p2 * When invoked as sudoedit, the same set of command line options are now accepted as for sudo -e. The -H and -P options are now rejected for sudoedit and sudo -e which matches the sudo 1.7 behavior. This is part of the fix for CVE-2021-3156. * Fixed a potential buffer overflow when unescaping backslashes in the command's arguments. Normally, sudo escapes special characters when running a command via a shell (sudo -s or sudo -i). However, it was also possible to run sudoedit with the -s or -i flags in which case no escaping had actually been done, making a buffer overflow possible. This fixes CVE-2021-3156. (bsc#1181090) * Fixed sudo's setprogname(3) emulation on systems that don't provide it. * Fixed a problem with the sudoers log server client where a partial write to the server could result the sudo process consuming large amounts of CPU time due to a cycle in the buffer queue. Bug #954. * Added a missing dependency on libsudo_util in libsudo_eventlog. Fixes a link error when building sudo statically. * The user's KRB5CCNAME environment variable is now preserved when performing PAM authentication. This fixes GSSAPI authentication when the user has a non-default ccache. ==== virtualbox ==== Version update (6.1.16 -> 6.1.18) Subpackages: virtualbox-guest-tools virtualbox-guest-x11 - Version update to 6.1.18 (released January 19 2021) This is a maintenance release. The following items were fixed and/or added: Nested VM: Fixed hangs when executing SMP nested-guests under certain conditions on Intel hosts (bug #19315, #19561) OCI integration: Cloud Instance parameters parsing is improved on import (bug #19156) Network: UDP checksum offloading in e1000 no longer produces zero checksums (bug #19930) Network: Fixed Host-Only Ethernet Adapter DHCP, guest os can not get IP on host resume (bug #19620) NAT: Fixed mss parameter handing (bug #15256) macOS host: Multiple optimizations for BigSur Audio: Fixed issues with audio playback after host goes to sleep (bug #18594) Documentation: Some content touch-up and table formatting fixes Linux host and guest: Support kernel version 5.10 (bug #20055) Solaris host: Fix regression breaking VGA text mode since version 6.1.0 Guest Additions: Fixed a build failure affecting CentOS 8.2-2004 and later (bug #20091) Guest Additions: Fixed a build failure affecting Linux kernels 3.2.0 through 3.2.50 (bug #20006) Guest Additions: Fixed a VM segfault on copy with shared clipboard with X11 (bug #19226) Shared Folder: Fixed error with remounting on Linux guests File "debug_mountsf.patch" is deleted - fixed upstream. File "linux-5.10-address-space-fixes.patch" is deleted - fixed upstream. File "linux-5.10-framebuffer-fixes.patch" is deleted - fixed upstream. File "linux-5.10-r0drv-memobj-fix-r0.patch" is deleted - fixed upstream. ==== virtualbox-kmp ==== Version update (6.1.16_k5.10.9_1 -> 6.1.18_k5.10.9_1) - Version update to 6.1.18 (released January 19 2021) This is a maintenance release. The following items were fixed and/or added: Nested VM: Fixed hangs when executing SMP nested-guests under certain conditions on Intel hosts (bug #19315, #19561) OCI integration: Cloud Instance parameters parsing is improved on import (bug #19156) Network: UDP checksum offloading in e1000 no longer produces zero checksums (bug #19930) Network: Fixed Host-Only Ethernet Adapter DHCP, guest os can not get IP on host resume (bug #19620) NAT: Fixed mss parameter handing (bug #15256) macOS host: Multiple optimizations for BigSur Audio: Fixed issues with audio playback after host goes to sleep (bug #18594) Documentation: Some content touch-up and table formatting fixes Linux host and guest: Support kernel version 5.10 (bug #20055) Solaris host: Fix regression breaking VGA text mode since version 6.1.0 Guest Additions: Fixed a build failure affecting CentOS 8.2-2004 and later (bug #20091) Guest Additions: Fixed a build failure affecting Linux kernels 3.2.0 through 3.2.50 (bug #20006) Guest Additions: Fixed a VM segfault on copy with shared clipboard with X11 (bug #19226) Shared Folder: Fixed error with remounting on Linux guests File "debug_mountsf.patch" is deleted - fixed upstream. File "linux-5.10-address-space-fixes.patch" is deleted - fixed upstream. File "linux-5.10-framebuffer-fixes.patch" is deleted - fixed upstream. File "linux-5.10-r0drv-memobj-fix-r0.patch" is deleted - fixed upstream. ==== yast2-network ==== Version update (4.3.38 -> 4.3.41) - Fixes some usability issues (bsc#1177834): - Disable "Edit" and "Delete" buttons when no interfaces are detected. - Disable the "Scan Network" button when the interface does not exist. - Suggest to modify the VLAN interface name when the VLAN ID is modified (bsc#1174363) - 4.3.41 - Cache the online status of s390 group devices speeding up the population of the devices overview table (bsc#1180702) - 4.3.40 - Added basic support for writing the network configuration to the NetworkManager backend (bsc#1180716) - 4.3.39 ==== zbar ==== - Apply patch0 unconditionally and fix build on Leap

1 0

openSUSE Leap 15.3: some packages inherited from SLE are (probably) not rebuildable
by Matwey V. Kornilov 28 Jan '21

28 Jan '21

Hi, I've just faced an interesting issue. As anybody knows, openSUSE Leap 15.3 partially inherits ready binary packages from SUSE Linux Enterprise, and partially has its own packages building from sources at OBS. This bundle is called openSUSE Leap 15.3 distro, and both binary rpms and source rpms ( http://download.opensuse.org/source/distribution/leap/15.3/ is empty now, but I suppose something eventually will appear here) are provided to end users. Lots was discussed about it. Now, let me please introduce the following simple experiment. Create an empty OBS subproject and assign openSUSE:Leap:15.3/standard as a repo to it. Then link e2fsprogs package from openSUSE:Leap:15.3 to your new empty home subproject: osc linkpac openSUSE:Leap:15.3 e2fsprogs home:matwey:x In other words, let's just rebuild e2fsprogs from Leap 15.3 against Leap 15.3. There is a little sense to do this because we expect that the result will be the same. So, wait for rebuilding and... see the error. I left a link to my version of the log: https://build.opensuse.org/build/home:matwey:x/openSUSE_Leap_15.3/x86_64/e2… [ 52s] autoreconf: configure.ac: AM_GNU_GETTEXT is used, but not AM_GNU_GETTEXT_VERSION [ 52s] ERROR: Use of AM_GNU_GETTEXT without [external] argument is no longer supported. [ 52s] configure.ac:857: warning: AM_INTL_SUBDIR is m4_require'd but not m4_defun'd [ 52s] aclocal.m4:69: AM_GNU_GETTEXT is expanded from... [ 52s] configure.ac:857: the top level [ 53s] configure:6517: error: possibly undefined macro: AM_INTL_SUBDIR [ 53s] If this token and others are legitimate, please use m4_pattern_allow. [ 53s] See the Autoconf documentation. [ 53s] autoreconf: /usr/bin/autoconf failed with exit status: 1 [ 53s] error: Bad exit status from /var/tmp/rpm-tmp.eU0KwE (%build) So, now we have a binary package (e2fsprogs) and sources for it, and we cannot rebuild the binary from the sources. The reason is that gettext 0.20 is currently supplied by openSUSE:Leap:15.3, but at some point in the SLE's past it was 0.19. And I bet that e2fsprogs was built against gettext 0.19 when the AM_GNU_GETTEXT macro worked without an error. But it came from SLE and we don't have the build logs (or have we?) However, the only we can see as a Leap 15.3 is a 'snapshot' of packages. So I expect the same behaviour when some end user will obtain the srpm for e2fsprogs and will try to rebuild it on his/her own box. Unfortunately, I don't know if e2fsprogs is a single one such case. This kind of inconsistency has a negative impact on having ports for non-SLE architectures (like armv7l), complicates end-user impact on debugging and modifying(?) stuff, and smells not quite well when we are talking about 'open source principles'. So, my question is how to avoid such issues and eventually have self-consistent Leap 15.3. -- With best regards, Matwey V. Kornilov

13 23

New package iosevka-fonts
by Lukas Kucharczyk 28 Jan '21

28 Jan '21

Hello, I have submitted a new fonts package called iosevka-fonts. It's a very comprehensive open source font that I would like to see included in the distro by default. I am not very experienced with packaging so there's probably a lot of room for improvement. Let me know if that's the case. GitHub repo: https://github.com/be5invis/Iosevka Submit request: https://build.opensuse.org/request/show/867404 Best regards -- Lukas Kucharczyk — Technical Writer, SUSE Linux s.r.o. Corso II, Křižíkova 148/34, 186-00 Praha 8 — Karlín, Czech Republic Email: lukas.kucharczyk(a)suse.com - Office telephone: +420 284 084 000

1 0

CVE-2021-3156 (sudo) vs Leap 15.1
by Sebastian M. Ernst 27 Jan '21

27 Jan '21

Hi all, quick question: I know Leap 15.1 has basically reached EOL, but CVE-2021-3156 looks IMHO severe enough to justify fixing it still. Is this currently being considered by the community / SUSE (or has it been done and I simply overlooked it)? I just ran the last / latest updates against a 15.1 system and it appears to be still vulnerable. I can built packages with the fix myself if needed, but an official update for this one could make a massive difference. I can only guess how many people are still behind (like me ...) with updating to 15.2. Thanks, Sebastian

5 7

New package mlxbf-bootclt for Tumbleweed and openSUSE:Leap:15.3
by Matthias Brugger 27 Jan '21

27 Jan '21

Hi all, I've submitted a new package to Tumbleweed called 'mlxbf-bootctl'. It is a commandline tool to flash new boot firmware (UEFI + ATF) to Mellanox/Nvidia BlueField smart NICs and data processing units [1]. It's only build against aarch64 because it only works when executed on the smart NIC controller, which are all based on aarch64 SoCs. The SR can be find here: https://build.opensuse.org/request/show/866799 Apart I also send a SR to include the tool in openSUSE:Leap:15.3. The corresponding SR can be found here: https://build.opensuse.org/request/show/866800 Regards, Matthias [1] https://www.nvidia.com/en-us/networking/products/data-processing-unit/

1 1