January 2021 - openSUSE Factory - openSUSE Mailing Lists

New Tumbleweed snapshot 20210127 released!
by Dominique Leuenberger 28 Jan '21

28 Jan '21

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: apache2 apache2-manual apache2-prefork apache2-utils apparmor apulse hylafax+ jhead (3.00 -> 3.04) libreoffice ndctl pcsc-cyberjack (3.99.5final.SP13 -> 3.99.5final.SP14) pmdk rdma-core sudo (1.9.5p1 -> 1.9.5p2) virtualbox (6.1.16 -> 6.1.18) virtualbox-kmp (6.1.16_k5.10.9_1 -> 6.1.18_k5.10.9_1) yast2-network (4.3.38 -> 4.3.41) zbar === Details === ==== apache2 ==== - added Provides: http_daemon to fix bsc#1180132 - remove suexec2 from premissions as well - modified sources % permissions.apache2 - suexec2 was renamed to suexec in 2015 and the symlink to suexec no longer exists ==== apache2-manual ==== - added Provides: http_daemon to fix bsc#1180132 - remove suexec2 from premissions as well - modified sources % permissions.apache2 - suexec2 was renamed to suexec in 2015 and the symlink to suexec no longer exists ==== apache2-prefork ==== - added Provides: http_daemon to fix bsc#1180132 - remove suexec2 from premissions as well - modified sources % permissions.apache2 - suexec2 was renamed to suexec in 2015 and the symlink to suexec no longer exists ==== apache2-utils ==== - added Provides: http_daemon to fix bsc#1180132 - remove suexec2 from premissions as well - modified sources % permissions.apache2 - suexec2 was renamed to suexec in 2015 and the symlink to suexec no longer exists ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-docs apparmor-parser apparmor-parser-lang apparmor-profiles apparmor-utils apparmor-utils-lang pam_apparmor pam_apparmor-32bit python3-apparmor - add apache-extra-profile-include-if-exists.diff: make <apache2.d> include in apache extra profile optional to avoid problems with empty profile directory (boo#1178527) ==== apulse ==== Subpackages: apulse-32bit - Drop conditional 32bit recommends. ==== hylafax+ ==== Subpackages: hylafax+-client libfaxutil7_0_3 - Fix TW build by pretending tiff 4.2 is as good enough as 4.{0,1} ==== jhead ==== Version update (3.00 -> 3.04) - Update to version 3.04 * Apply a whole bunch of patches from Debian. * Spell check and fuzz test stuff from Debian, nothing useful to human users. * Add option to set exif date from date from another file. * Bug fixes relating to fuzz testing. * Fix bug where thumbnail replacement DID NOT WORK. * Fix bug when no orientation tag is present * Fix bug of not clearing exif information when processing images with an without exif data in one invocation. * Remove some unnecessary warnings with some types of GPS data * Remove multiple copies of the same type of section when deleting section types * Modify the patch CVE-2018-17088.patch because source code changed - Remove these patches because of including upstream code * CVE-2018-6612.patch, CVE-2016-3822.patch, CVE-2018-16554.patch ==== libreoffice ==== Subpackages: libreoffice-base libreoffice-calc libreoffice-draw libreoffice-filters-optional libreoffice-gnome libreoffice-gtk3 libreoffice-icon-themes libreoffice-impress libreoffice-l10n-cs libreoffice-l10n-da libreoffice-l10n-de libreoffice-l10n-el libreoffice-l10n-en libreoffice-l10n-en_GB libreoffice-l10n-es libreoffice-l10n-fr libreoffice-l10n-hu libreoffice-l10n-it libreoffice-l10n-ja libreoffice-l10n-pl libreoffice-l10n-pt_BR libreoffice-l10n-ru libreoffice-l10n-zh_CN libreoffice-l10n-zh_TW libreoffice-mailmerge libreoffice-math libreoffice-pyuno libreoffice-qt5 libreoffice-writer libreofficekit - Update SUSE.soc to reflect current SUSE branding, add following colors (bsc#1181122): * SUSE Mint * SUSE Midnight Blue * SUSE Waterhole Blue * SUSE Persimmon See also https://brand.suse.com/brand-system/color-palette ==== ndctl ==== - Enable aarch64 build ==== pcsc-cyberjack ==== Version update (3.99.5final.SP13 -> 3.99.5final.SP14) - removed obsolete pcsc-cyberjack-3.99.5final.SP09-gcc10.patch - update to 3.99.5 Service Pack 14 - use https://en.opensuse.org/SourceUrls - remove check for obsolete SUSE versions ==== pmdk ==== Subpackages: libpmem1 - Enable aarch64 build ==== rdma-core ==== Subpackages: libefa1 libibverbs libibverbs1 libmlx4-1 libmlx5-1 librdmacm1 - Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon is loaded at boot if enabled (bsc#1180196) ==== sudo ==== Version update (1.9.5p1 -> 1.9.5p2) Subpackages: sudo-plugin-python - Update to 1.9.5.p2 * When invoked as sudoedit, the same set of command line options are now accepted as for sudo -e. The -H and -P options are now rejected for sudoedit and sudo -e which matches the sudo 1.7 behavior. This is part of the fix for CVE-2021-3156. * Fixed a potential buffer overflow when unescaping backslashes in the command's arguments. Normally, sudo escapes special characters when running a command via a shell (sudo -s or sudo -i). However, it was also possible to run sudoedit with the -s or -i flags in which case no escaping had actually been done, making a buffer overflow possible. This fixes CVE-2021-3156. (bsc#1181090) * Fixed sudo's setprogname(3) emulation on systems that don't provide it. * Fixed a problem with the sudoers log server client where a partial write to the server could result the sudo process consuming large amounts of CPU time due to a cycle in the buffer queue. Bug #954. * Added a missing dependency on libsudo_util in libsudo_eventlog. Fixes a link error when building sudo statically. * The user's KRB5CCNAME environment variable is now preserved when performing PAM authentication. This fixes GSSAPI authentication when the user has a non-default ccache. ==== virtualbox ==== Version update (6.1.16 -> 6.1.18) Subpackages: virtualbox-guest-tools virtualbox-guest-x11 - Version update to 6.1.18 (released January 19 2021) This is a maintenance release. The following items were fixed and/or added: Nested VM: Fixed hangs when executing SMP nested-guests under certain conditions on Intel hosts (bug #19315, #19561) OCI integration: Cloud Instance parameters parsing is improved on import (bug #19156) Network: UDP checksum offloading in e1000 no longer produces zero checksums (bug #19930) Network: Fixed Host-Only Ethernet Adapter DHCP, guest os can not get IP on host resume (bug #19620) NAT: Fixed mss parameter handing (bug #15256) macOS host: Multiple optimizations for BigSur Audio: Fixed issues with audio playback after host goes to sleep (bug #18594) Documentation: Some content touch-up and table formatting fixes Linux host and guest: Support kernel version 5.10 (bug #20055) Solaris host: Fix regression breaking VGA text mode since version 6.1.0 Guest Additions: Fixed a build failure affecting CentOS 8.2-2004 and later (bug #20091) Guest Additions: Fixed a build failure affecting Linux kernels 3.2.0 through 3.2.50 (bug #20006) Guest Additions: Fixed a VM segfault on copy with shared clipboard with X11 (bug #19226) Shared Folder: Fixed error with remounting on Linux guests File "debug_mountsf.patch" is deleted - fixed upstream. File "linux-5.10-address-space-fixes.patch" is deleted - fixed upstream. File "linux-5.10-framebuffer-fixes.patch" is deleted - fixed upstream. File "linux-5.10-r0drv-memobj-fix-r0.patch" is deleted - fixed upstream. ==== virtualbox-kmp ==== Version update (6.1.16_k5.10.9_1 -> 6.1.18_k5.10.9_1) - Version update to 6.1.18 (released January 19 2021) This is a maintenance release. The following items were fixed and/or added: Nested VM: Fixed hangs when executing SMP nested-guests under certain conditions on Intel hosts (bug #19315, #19561) OCI integration: Cloud Instance parameters parsing is improved on import (bug #19156) Network: UDP checksum offloading in e1000 no longer produces zero checksums (bug #19930) Network: Fixed Host-Only Ethernet Adapter DHCP, guest os can not get IP on host resume (bug #19620) NAT: Fixed mss parameter handing (bug #15256) macOS host: Multiple optimizations for BigSur Audio: Fixed issues with audio playback after host goes to sleep (bug #18594) Documentation: Some content touch-up and table formatting fixes Linux host and guest: Support kernel version 5.10 (bug #20055) Solaris host: Fix regression breaking VGA text mode since version 6.1.0 Guest Additions: Fixed a build failure affecting CentOS 8.2-2004 and later (bug #20091) Guest Additions: Fixed a build failure affecting Linux kernels 3.2.0 through 3.2.50 (bug #20006) Guest Additions: Fixed a VM segfault on copy with shared clipboard with X11 (bug #19226) Shared Folder: Fixed error with remounting on Linux guests File "debug_mountsf.patch" is deleted - fixed upstream. File "linux-5.10-address-space-fixes.patch" is deleted - fixed upstream. File "linux-5.10-framebuffer-fixes.patch" is deleted - fixed upstream. File "linux-5.10-r0drv-memobj-fix-r0.patch" is deleted - fixed upstream. ==== yast2-network ==== Version update (4.3.38 -> 4.3.41) - Fixes some usability issues (bsc#1177834): - Disable "Edit" and "Delete" buttons when no interfaces are detected. - Disable the "Scan Network" button when the interface does not exist. - Suggest to modify the VLAN interface name when the VLAN ID is modified (bsc#1174363) - 4.3.41 - Cache the online status of s390 group devices speeding up the population of the devices overview table (bsc#1180702) - 4.3.40 - Added basic support for writing the network configuration to the NetworkManager backend (bsc#1180716) - 4.3.39 ==== zbar ==== - Apply patch0 unconditionally and fix build on Leap

1 0

openSUSE Leap 15.3: some packages inherited from SLE are (probably) not rebuildable
by Matwey V. Kornilov 28 Jan '21

28 Jan '21

Hi, I've just faced an interesting issue. As anybody knows, openSUSE Leap 15.3 partially inherits ready binary packages from SUSE Linux Enterprise, and partially has its own packages building from sources at OBS. This bundle is called openSUSE Leap 15.3 distro, and both binary rpms and source rpms ( http://download.opensuse.org/source/distribution/leap/15.3/ is empty now, but I suppose something eventually will appear here) are provided to end users. Lots was discussed about it. Now, let me please introduce the following simple experiment. Create an empty OBS subproject and assign openSUSE:Leap:15.3/standard as a repo to it. Then link e2fsprogs package from openSUSE:Leap:15.3 to your new empty home subproject: osc linkpac openSUSE:Leap:15.3 e2fsprogs home:matwey:x In other words, let's just rebuild e2fsprogs from Leap 15.3 against Leap 15.3. There is a little sense to do this because we expect that the result will be the same. So, wait for rebuilding and... see the error. I left a link to my version of the log: https://build.opensuse.org/build/home:matwey:x/openSUSE_Leap_15.3/x86_64/e2… [ 52s] autoreconf: configure.ac: AM_GNU_GETTEXT is used, but not AM_GNU_GETTEXT_VERSION [ 52s] ERROR: Use of AM_GNU_GETTEXT without [external] argument is no longer supported. [ 52s] configure.ac:857: warning: AM_INTL_SUBDIR is m4_require'd but not m4_defun'd [ 52s] aclocal.m4:69: AM_GNU_GETTEXT is expanded from... [ 52s] configure.ac:857: the top level [ 53s] configure:6517: error: possibly undefined macro: AM_INTL_SUBDIR [ 53s] If this token and others are legitimate, please use m4_pattern_allow. [ 53s] See the Autoconf documentation. [ 53s] autoreconf: /usr/bin/autoconf failed with exit status: 1 [ 53s] error: Bad exit status from /var/tmp/rpm-tmp.eU0KwE (%build) So, now we have a binary package (e2fsprogs) and sources for it, and we cannot rebuild the binary from the sources. The reason is that gettext 0.20 is currently supplied by openSUSE:Leap:15.3, but at some point in the SLE's past it was 0.19. And I bet that e2fsprogs was built against gettext 0.19 when the AM_GNU_GETTEXT macro worked without an error. But it came from SLE and we don't have the build logs (or have we?) However, the only we can see as a Leap 15.3 is a 'snapshot' of packages. So I expect the same behaviour when some end user will obtain the srpm for e2fsprogs and will try to rebuild it on his/her own box. Unfortunately, I don't know if e2fsprogs is a single one such case. This kind of inconsistency has a negative impact on having ports for non-SLE architectures (like armv7l), complicates end-user impact on debugging and modifying(?) stuff, and smells not quite well when we are talking about 'open source principles'. So, my question is how to avoid such issues and eventually have self-consistent Leap 15.3. -- With best regards, Matwey V. Kornilov

13 23

New package iosevka-fonts
by Lukas Kucharczyk 28 Jan '21

28 Jan '21

Hello, I have submitted a new fonts package called iosevka-fonts. It's a very comprehensive open source font that I would like to see included in the distro by default. I am not very experienced with packaging so there's probably a lot of room for improvement. Let me know if that's the case. GitHub repo: https://github.com/be5invis/Iosevka Submit request: https://build.opensuse.org/request/show/867404 Best regards -- Lukas Kucharczyk — Technical Writer, SUSE Linux s.r.o. Corso II, Křižíkova 148/34, 186-00 Praha 8 — Karlín, Czech Republic Email: lukas.kucharczyk(a)suse.com - Office telephone: +420 284 084 000

1 0

CVE-2021-3156 (sudo) vs Leap 15.1
by Sebastian M. Ernst 27 Jan '21

27 Jan '21

Hi all, quick question: I know Leap 15.1 has basically reached EOL, but CVE-2021-3156 looks IMHO severe enough to justify fixing it still. Is this currently being considered by the community / SUSE (or has it been done and I simply overlooked it)? I just ran the last / latest updates against a 15.1 system and it appears to be still vulnerable. I can built packages with the fix myself if needed, but an official update for this one could make a massive difference. I can only guess how many people are still behind (like me ...) with updating to 15.2. Thanks, Sebastian

5 7

New package mlxbf-bootclt for Tumbleweed and openSUSE:Leap:15.3
by Matthias Brugger 27 Jan '21

27 Jan '21

Hi all, I've submitted a new package to Tumbleweed called 'mlxbf-bootctl'. It is a commandline tool to flash new boot firmware (UEFI + ATF) to Mellanox/Nvidia BlueField smart NICs and data processing units [1]. It's only build against aarch64 because it only works when executed on the smart NIC controller, which are all based on aarch64 SoCs. The SR can be find here: https://build.opensuse.org/request/show/866799 Apart I also send a SR to include the tool in openSUSE:Leap:15.3. The corresponding SR can be found here: https://build.opensuse.org/request/show/866800 Regards, Matthias [1] https://www.nvidia.com/en-us/networking/products/data-processing-unit/

1 1

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 26 Jan '21

26 Jan '21

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have been failing to build for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - rubygem-manpages - rubygem-ruby-shadow - rubygem-yard Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

2 1

Support for newer version of hplip?
by Freek de Kruijf 26 Jan '21

26 Jan '21

I did purchase the HP Desktop 2720, an all-in-one printer/scanner/copier, for which I found a solution for a proper printer driver. However I was unable to install the driver for the scanner. This one is present in the newest version of hplip, however I was unable to build that package for openSUSE. Is it possible to have this newer version supported in openSUSE? I mainly do my work in Tumbleweed. -- fr.gr. member openSUSE Freek de Kruijf

6 6

New package raspberrypi-rpiboot for openSUSE:Leap:15.3
by Matthias Brugger 26 Jan '21

26 Jan '21

Hi all, I've submitted a new package to Leap 15.3 called 'raspberrypi-rpiboot'. It is already part of Tumbleweed [1]. It is a commandline tool to be able to flash Raspberry Pi compute modules. It's tested on CM3, CM3+ and CM4. The SR can be found here: https://build.opensuse.org/request/show/866801 Regards, Matthias [1] https://build.opensuse.org/package/show/openSUSE:Factory/raspberrypi-rpiboot

1 0

YaST: highlights of development sprint 116
by Ancor Gonzalez Sosa 25 Jan '21

25 Jan '21

2021 is here with a lot of interesting news, and YaST development is not an exception. During the first sprint of the year we have worked on: - Writing NetworkManager configuration during system installation - Refining the mechanism to reuse existing EFI partitions - Using better names to reference devices in the boot loader - Improving AutoYaST behavior when no product has been specified - Updating the roles offered by yast2-vm - Many more small improvements here and there Check the whole report at: https://yast.opensuse.org/blog/2021-01-25/sprint-116 Cheers. -- Ancor González Sosa YaST Team at SUSE Linux GmbH

1 0

Package submissions for Leap 15.3
by Axel Braun 25 Jan '21

25 Jan '21

Hi, what is the status of package submissions to Leap 15.3 (openSUSE:Backports:SLE-15-SP3) ? I see some SR in the queue for nearly 3 weeks now. Any reason why they are building, but are not accepted? Thanks Axel

2 3

bind-chrootenv no longer supported
by Josef Möllers 25 Jan '21

25 Jan '21

With the release of bind 9.16.11 we will no longer distribute the bind-chrootenv subpackage but will instead use systemd's restrictions to keep bind at bay. The (main) bind package will obsolete bind-chrootenv. Josef

1 0

Problem debugging Calibre
by Bengt Gördén 25 Jan '21

25 Jan '21

I've got problems converting ebooks since 17th januari. Haven't installed anything special except a package I'm working on in OBS, which works. I've zypper duped and still got problems. I've uninstalled my package (studio-controls) still problem converting. But now to my debugging problem. Debugging with "coredump debug ...." gives this at the end. Anyone knows how to remedy that? warning: File "/usr/lib/debug/usr/lib64/python3.8/site-packages/PyQt5/../../../../../.dwz/python-qt5-5.15.2-2.2.x86_64" has a different build-id, file skipped could not find '.gnu_debugaltlink' file for /usr/lib/debug/usr/lib64/python3.8/site-packages/PyQt5/QtCore.abi3.so-5.15.2-2.2.x86_64.debug warning: File "/usr/lib/debug/usr/lib64/python3.8/site-packages/PyQt5/../../../../../.dwz/python-qt5-5.15.2-2.2.x86_64" has a different build-id, file skipped could not find '.gnu_debugaltlink' file for /usr/lib/debug/usr/lib64/python3.8/site-packages/PyQt5/QtGui.abi3.so-5.15.2-2.2.x86_64.debug Installed debug packages: https://paste.opensuse.org/9484186 Packages that the above warnings is installed from Information for package python38-qt5-debuginfo: ----------------------------------------------- Repository : openSUSE-Tumbleweed-Debug Name : python38-qt5-debuginfo Version : 5.15.2-2.2 Arch : x86_64 Vendor : openSUSE Installed Size : 63.0 MiB Installed : Yes Status : up-to-date Source package : python-qt5-5.15.2-2.2.src Summary : Debug information for package python38-qt5 Description : This package provides debug information for package python38-qt5. Debug information is useful when developing applications that use this package or when debugging this package. Information for package python38-qt5: ------------------------------------- Repository : openSUSE-Tumbleweed-Oss Name : python38-qt5 Version : 5.15.2-2.2 Arch : x86_64 Vendor : openSUSE Installed Size : 24.2 MiB Installed : Yes Status : up-to-date Source package : python-qt5-5.15.2-2.2.src Summary : Python bindings for Qt 5 Description : PyQt is a set of Python bindings for the Qt framework. -- /bengan

1 0

Add ipfs-desktop to standard repo or at least experimental one
by ROUBACH Philippe 25 Jan '21

25 Jan '21

Hello It would be very appreciated if you could add a package for installing easily ipfs-desktop. See https://ipfs.io https://github.com/ipfs-shipyard/ipfs-desktop Thanks -- Philippe ROUBACH

2 1

Tumbleweed - Review of the week 2021/03
by Dominique Leuenberger / DimStar 24 Jan '21

24 Jan '21

Dear Tumbleweed users and hackers, Shame on me for giving you the information about the changes in Tumbleweed during this week only now, but at least technically this is still the review of Week 03. Since the last weekly review, there have been 6 snapshots published (0114, 0115, 0118, 0119, 0120, and 0121). The main changes this week include: * Linux kernel 5.10.7 * GNOME 3.38.3 * Mozilla Tunderbird 78.6.1 * Mesa 20.3.3 * openSSH 8.4p1 * Tcl/Tk 8.6.11 * Bash 5.1.4 * PHP 8 was added * Wine 6.0 * Multiple versions of python 3 parallel installable. Besides all python-FOO packages being built for python 3.8, they are now also built for python 3.6 (where they make sense and are buildable). The packages are named python36-FOO and python38-FOO. As Python 3.8 is currently the default python 3 interpreter in Tumbleweed, all python38-FOO packages provide/obsolete the python3-FOO symbol, in order to facilitate the migration to the new naming scheme. The future changes that are currently being planned, worked on and being tested include: * Postfix: change the default database format to lmdb, migrating away from BerkleyDB. * icu 68.1: breaks a few things like PostgreSQL. Staging:I * Rust 1.49: breaks librsvg * Automake 1.16.3 * Autoconf 2.70: breaks quite a few packages. The list of failures has been noted on the current SR; no active staging left for it (no progress in the last days/weeks on it) * Migrate to LUA 5.4 as main lua interpreter, mainly relevant in context of RPM and thus the distro bootstrap Cheers, Dominique

1 0

New Tumbleweed snapshot 20210121 released!
by Dominique Leuenberger 23 Jan '21

23 Jan '21

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: gstreamer-devtools (1.18.2 -> 1.18.3) gstreamer-editing-services (1.18.2 -> 1.18.3) kalgebra kreversi libkdegames libpt2 plasma5-disks plasma5-thunderbolt python-gst (1.18.2 -> 1.18.3) rubygem-Ascii85 (1.0.3 -> 1.1.0) rubygem-autoprefixer-rails (10.1.0.0 -> 10.2.0.0) rubygem-bcrypt_pbkdf (1.0.1 -> 1.1.0) rubygem-benchmark (0.1.0 -> 0.1.1) rubygem-binding_of_caller (0.8.0 -> 1.0.0) rubygem-bundler (2.1.4 -> 2.2.6) rubygem-capistrano (3.14.1 -> 3.15.0) rubygem-celluloid (0.17.4 -> 0.18.0) rubygem-concurrent-ruby (1.1.7 -> 1.1.8) rubygem-cool.io (1.6.1 -> 1.7.0) rubygem-crack (0.4.4 -> 0.4.5) rubygem-cri (2.15.10 -> 2.15.11) rubygem-debase-ruby_core_source (0.10.10 -> 0.10.12) rubygem-debug_inspector (0.0.3 -> 1.0.0) rubygem-docile (1.3.2 -> 1.3.5) rubygem-dry-configurable (0.11.6 -> 0.12.0) rubygem-dry-core (0.4.9 -> 0.5.0) rubygem-dry-logic (1.0.7 -> 1.1.0) rubygem-excon (0.76.0 -> 0.78.1) rubygem-faraday (1.0.1 -> 1.3.0) rubygem-fluentd (1.11.2 -> 1.12.0) rubygem-fog-libvirt (0.7.0 -> 0.8.0) rubygem-font-awesome-rails (4.7.0.5 -> 4.7.0.6) rubygem-gettext (3.3.5 -> 3.3.7) rubygem-gssapi (1.3.0 -> 1.3.1) rubygem-haml (5.1.2 -> 5.2.1) rubygem-hashie (3.6.0 -> 4.1.0) rubygem-hoe (3.22.2 -> 3.22.3) rubygem-i18n (1.8.5 -> 1.8.7) rubygem-js-routes (1.4.9 -> 1.4.14) rubygem-json_pure (2.3.1 -> 2.5.1) rubygem-liquid (4.0.3 -> 5.0.0) rubygem-listen (3.2.1 -> 3.4.1) rubygem-loofah (2.8.0 -> 2.9.0) rubygem-mime-types-data (3.2020.0512 -> 3.2020.1104) rubygem-minitar (0.5.4 -> 0.9) rubygem-mixlib-shellout (3.0.9 -> 3.2.2) rubygem-mocha (1.11.2 -> 1.12.0) rubygem-moneta (1.4.0 -> 1.4.1) rubygem-omniauth (1.9.1 -> 2.0.1) rubygem-omniauth-github (1.4.0 -> 2.0.0) rubygem-omniauth-google-oauth2 (0.8.0 -> 0.8.1) rubygem-omniauth-oauth2 (1.7.0 -> 1.7.1) rubygem-paint (2.2.0 -> 2.2.1) rubygem-regexp_parser (1.8.2 -> 2.0.3) rubygem-rice (2.2.0 -> 3.0.0) rubygem-rouge (3.23.0 -> 3.26.0) rubygem-ruby-progressbar (1.10.1 -> 1.11.0) rubygem-ruby2_keywords (0.0.2 -> 0.0.4) rubygem-ruby_parser (3.15.0 -> 3.15.1) rubygem-sdoc (1.1.0 -> 2.0.3) rubygem-serverengine (2.2.1 -> 2.2.2) rubygem-sexp_processor (4.15.1 -> 4.15.2) rubygem-simplecov (0.19.0 -> 0.21.2) rubygem-sshkit (1.21.0 -> 1.21.2) rubygem-strptime (0.2.4 -> 0.2.5) rubygem-tmuxinator (2.0.1 -> 2.0.2) rubygem-tomlrb (1.3.0 -> 2.0.1) rubygem-tzinfo-0 (0.3.57 -> 0.3.59) rubygem-tzinfo-1.2 (1.2.8 -> 1.2.9) rubygem-tzinfo-data (1.2020.1 -> 1.2020.6) rubygem-unicode-display_width (1.7.0 -> 2.0.0) rubygem-webpacker (4.2.2 -> 5.2.1) rubygem-websocket (1.2.8 -> 1.2.9) rubygem-winrm (2.3.4 -> 2.3.5) rubygem-winrm-elevated (1.2.2 -> 1.2.3) xapps (2.0.5 -> 2.0.6) === Details === ==== gstreamer-devtools ==== Version update (1.18.2 -> 1.18.3) Subpackages: libgstvalidate-1_0-0 typelib-1_0-GstValidate-1_0 - Update to version 1.18.3: + No changes ==== gstreamer-editing-services ==== Version update (1.18.2 -> 1.18.3) Subpackages: libges-1_0-0 typelib-1_0-GES-1_0 - Update to version 1.18.3: + launch: Ensure to add required ref to profiles from project + tests: fix meson test env setup to make sure we use the right gst-plugin-scanner ==== kalgebra ==== Subpackages: kalgebra-lang - Add compatibility with qml-autoreqprov ==== kreversi ==== Subpackages: kreversi-lang - Add compatibility with qml-autoreqprov ==== libkdegames ==== Subpackages: kdegames-carddecks-default libkdegames-lang libkf5kdegames6 - Add patch to make qmldir compatible with qml-autoreprov: * 0001-Add-missing-module-identifier-to-qmldir.patch ==== libpt2 ==== - Add ptlib-2.10.11-signed_int_overflow.patch: fix integer overflow (rh#1696458). ==== plasma5-disks ==== Subpackages: plasma5-disks-lang - Add compatibility with qml-autoreqprov ==== plasma5-thunderbolt ==== Subpackages: plasma5-thunderbolt-lang - Add compatibility with qml-autoreqprov ==== python-gst ==== Version update (1.18.2 -> 1.18.3) - Update to version 1.18.3: + No changes ==== rubygem-Ascii85 ==== Version update (1.0.3 -> 1.1.0) updated to version 1.1.0 see installed History.txt === 1.1.0 / 2020-11-11 * Make use of frozen_string_literal * Update tests to use newer minitest syntax ==== rubygem-autoprefixer-rails ==== Version update (10.1.0.0 -> 10.2.0.0) - updated to version 10.2.0.0 * Added TypeScript definitions (by Dmitry Semigradsky). * Fixed docs (by Florian Pellet). * Update Can I Use data. * Update postcss to 8.2.2 ==== rubygem-bcrypt_pbkdf ==== Version update (1.0.1 -> 1.1.0) updated to version 1.1.0 see installed CHANGELOG.md ==== rubygem-benchmark ==== Version update (0.1.0 -> 0.1.1) updated to version 0.1.1 no changelog found ==== rubygem-binding_of_caller ==== Version update (0.8.0 -> 1.0.0) updated to version 1.0.0 see installed HISTORY ==== rubygem-bundler ==== Version update (2.1.4 -> 2.2.6) updated to version 2.2.6 see installed CHANGELOG.md ==== rubygem-capistrano ==== Version update (3.14.1 -> 3.15.0) updated to version 3.15.0 see installed CHANGELOG.md ==== rubygem-celluloid ==== Version update (0.17.4 -> 0.18.0) updated to version 0.18.0 see installed CHANGES.md ==== rubygem-concurrent-ruby ==== Version update (1.1.7 -> 1.1.8) Subpackages: ruby2.7-rubygem-concurrent-ruby ruby3.0-rubygem-concurrent-ruby updated to version 1.1.8 see installed CHANGELOG.md [#]# Release v1.1.8 (20 January 2021) * (#885) Fix race condition in TVar for stale reads * (#884) RubyThreadLocalVar: Do not iterate over hash which might conflict with new pair addition ==== rubygem-cool.io ==== Version update (1.6.1 -> 1.7.0) updated to version 1.7.0 see installed CHANGES.md 1.7.0 - ---- * Fix extension build failure for ruby3 ==== rubygem-crack ==== Version update (0.4.4 -> 0.4.5) updated to version 0.4.5 no changelog found ==== rubygem-cri ==== Version update (2.15.10 -> 2.15.11) updated to version 2.15.11 see installed NEWS.md [#]# 2.15.11 Fixes: - Added support for Ruby 3.0 (#111) Changes: - Dropped support for Ruby 2.3 and 2.4 (#112) ==== rubygem-debase-ruby_core_source ==== Version update (0.10.10 -> 0.10.12) updated to version 0.10.12 see installed CHANGELOG.md ==== rubygem-debug_inspector ==== Version update (0.0.3 -> 1.0.0) updated to version 1.0.0 no changelog found ==== rubygem-docile ==== Version update (1.3.2 -> 1.3.5) updated to version 1.3.5 see installed HISTORY.md ==== rubygem-dry-configurable ==== Version update (0.11.6 -> 0.12.0) updated to version 0.12.0 see installed CHANGELOG.md ==== rubygem-dry-core ==== Version update (0.4.9 -> 0.5.0) updated to version 0.5.0 see installed CHANGELOG.md ==== rubygem-dry-logic ==== Version update (1.0.7 -> 1.1.0) updated to version 1.1.0 see installed CHANGELOG.md  [#]# 1.1.0 2020-12-26 [#]## Changed - Switched to equalizer from dry-core (@solnic) [Compare v1.0.8...v1.1.0](https://github.com/dry-rb/dry-logic/compare/v1.0.8...v1.1.… [#]# 1.0.8 2020-09-28 [#]## Fixed - Better Ruby 3 support with fixed specialization for rules of negative arity (@flash-gordon) [Compare v1.0.7...v1.0.8](https://github.com/dry-rb/dry-logic/compare/v1.0.7...v1.0.… ==== rubygem-excon ==== Version update (0.76.0 -> 0.78.1) updated to version 0.78.1 no changelog found ==== rubygem-faraday ==== Version update (1.0.1 -> 1.3.0) updated to version 1.3.0 see installed CHANGELOG.md [#]# [v1.2.0](https://github.com/lostisland/faraday/releases/tag/v1.2.0) (2020-12-23) [#]## Features * Introduces `on_request` and `on_complete` methods in `Faraday::Middleware`. (#1194, @iMacTia) [#]## Fixes * Require 'date' to avoid retry exception (#1206, @rustygeldmacher) * Fix rdebug recursion issue (#1205, @native-api) * Update call to `em_http_ssl_patch` (#1202, @kylekeesling) * `EmHttp` adapter: drop superfluous loaded? check (#1213, @olleolleolle) * Avoid 1 use of keyword hackery (#1211, @grosser) * Fix #1219 `Net::HTTP` still uses env proxy (#1221, @iMacTia) [#]## Documentation * Add comment in gemspec to explain exposure of `examples` and `spec` folders. (#1192, @iMacTia) * Adapters, how to create them (#1193, @olleolleolle) * Update documentation on using the logger (#1196, @tijmenb) * Adjust the retry documentation and spec to align with implementation (#1198, @nbeyer) [#]## Misc * Test against ruby head (#1208, @grosser) [#]# [v1.1.0](https://github.com/lostisland/faraday/releases/tag/v1.1.0) (2020-10-17) [#]## Features * Makes parameters sorting configurable (#1162 @wishdev) * Introduces `flat_encode` option for multipart adapter. (#1163 @iMacTia) * Include request info in exceptions raised by RaiseError Middleware (#1181 @SandroDamilano) [#]## Fixes * Avoid `last arg as keyword param` warning when building user middleware on Ruby 2.7 (#1153 @dgholz) * Limits net-http-persistent version to < 4.0 (#1156 @iMacTia) * Update `typhoeus` to new stable version (`1.4`) (#1159 @AlexWayfer) * Properly fix test failure with Rack 2.1+. (#1171 @voxik) [#]## Documentation * Improves documentation on how to contribute to the site by using Docker. (#1175 @iMacTia) * Remove retry_change_requests from documentation (#1185 @stim371) [#]## Misc * Link from GitHub Actions badge to CI workflow (#1141 @olleolleolle) * Return tests of `Test` adapter (#1147 @AlexWayfer) * Add 1.0 release to wording in CONTRIBUTING (#1155 @olleolleolle) * Fix linting bumping Rubocop to 0.90.0 (#1182 @iMacTia) * Drop `git ls-files` in gemspec (#1183 @utkarsh2102) * Upgrade CI to ruby/setup-ruby (#1187 @gogainda) [#]# [v1.0.1](https://github.com/lostisland/faraday/releases/tag/v1.0.1) (2020-03-29) [#]## Fixes * Use Net::HTTP#start(&block) to ensure closed TCP connections (#1117) * Fully qualify constants to be checked (#1122) * Allows `parse` method to be private/protected in response middleware (#1123) * Encode Spaces in Query Strings as '%20' Instead of '+' (#1125) * Limits rack to v2.0.x (#1127) * Adapter Registry reads also use mutex (#1136) [#]## Documentation * Retry middleware documentation fix (#1109) * Docs(retry): precise usage of retry-after (#1111) * README: Link the logo to the website (#1112) * Website: add search bar (#1116) * Fix request/response mix-up in docs text (#1132) ==== rubygem-fluentd ==== Version update (1.11.2 -> 1.12.0) updated to version 1.12.0 see installed CHANGELOG.md [#] v1.12 [#]# Release v1.12.0 - 2020/01/05 [#]## New feature * in_tail: Add `follow_inode` to support log rotation with wild card https://github.com/fluent/fluentd/pull/2992 * in_tail: Handle linux capability https://github.com/fluent/fluentd/pull/3155 https://github.com/fluent/fluentd/pull/3162 * windows: Add win32 events alternative to unix signals https://github.com/fluent/fluentd/pull/3131 [#]## Enhancement * buffer: Enable metadata comparison optimization on all platform https://github.com/fluent/fluentd/pull/3095 * fluent-plugin-config-formatter: Handle `service_discovery` type https://github.com/fluent/fluentd/pull/3178 * in_http: Add `add_query_params` parameter to add query params to event record https://github.com/fluent/fluentd/pull/3197 * inject: Support `unixtime_micros` and `unixtime_nanos` in `time_type` https://github.com/fluent/fluentd/pull/3220 * Refactoring code https://github.com/fluent/fluentd/pull/3167 https://github.com/fluent/fluentd/pull/3170 https://github.com/fluent/fluentd/pull/3180 https://github.com/fluent/fluentd/pull/3196 https://github.com/fluent/fluentd/pull/3213 https://github.com/fluent/fluentd/pull/3222 [#]## Bug fix * output: Prevent retry.step from being called too many times in a short time https://github.com/fluent/fluentd/pull/3203 ==== rubygem-fog-libvirt ==== Version update (0.7.0 -> 0.8.0) updated to version 0.8.0 no changelog found ==== rubygem-font-awesome-rails ==== Version update (4.7.0.5 -> 4.7.0.6) updated to version 4.7.0.6 no changelog found ==== rubygem-gettext ==== Version update (3.3.5 -> 3.3.7) updated to version 3.3.7 see installed news.md [#]# 3.3.7: 2021-01-18 {#version-3-3-7} [#]## Improvements * msgmerge: Added `--no-report-warning` option. [GitHub#81][Reported by Akim Demaille] [#]## Thanks * Akim Demaille - update to 3.3.6 see installed news.md [#]## Improvements * erb: Added support for `-%>`. [GitHub#77][Reported by lremes] * Removed ChangeLog. [GitHub#76][Reported by Will Stephenson] * Don't assume `RbConfig::CONFIG["datadir"]` is available. For example, TruffleRuby doesn't provide it. [#]## Thanks * lremes * Will Stephenson ==== rubygem-gssapi ==== Version update (1.3.0 -> 1.3.1) updated to version 1.3.1 see installed Changelog.md ==== rubygem-haml ==== Version update (5.1.2 -> 5.2.1) updated to version 5.2.1 see installed CHANGELOG.md [#]# 5.2.1 Released on November 30, 2020 ([diff](https://github.com/haml/haml/compare/v5.2.0...v5.2.1)) * Add in improved "multiline" support for attributes [#1043](https://github.com/haml/haml/issues/1043) [#]# 5.2 Released on September 28, 2020 ([diff](https://github.com/haml/haml/compare/v5.1.2...v5.2.0)) * Fix crash in the attribute optimizer when `#inspect` is overridden in TrueClass / FalseClass [#972](https://github.com/haml/haml/issues/972) * Do not HTML-escape templates that are declared to be plaintext [#1014](https://github.com/haml/haml/issues/1014) (Thanks [@cesarizu](https://github.com/cesarizu)) * Class names are no longer ordered alphabetically, and now follow a new specification as laid out in REFERENCE [#306](https://github.com/haml/haml/issues/306) ==== rubygem-hashie ==== Version update (3.6.0 -> 4.1.0) - updated to version 4.1.0 see installed CHANGELOG.md [#]# [4.1.0] - 2020-02-01 [4.1.0]: https://github.com/hashie/hashie/compare/v4.0.0...v4.1.0 [#]## Added * [#499](https://github.com/hashie/hashie/pull/499): Add `Hashie::Extensions::Mash::PermissiveRespondTo` to make specific subclasses of Mash fully respond to messages for use with `SimpleDelegator` - [@michaelherold](https://github.com/michaelherold). [#]## Fixed * [#467](https://github.com/intridea/hashie/pull/467): Fixed `DeepMerge#deep_merge` mutating nested values within the receiver - [@michaelherold](https://github.com/michaelherold). * [#505](https://github.com/hashie/hashie/pull/505): Ensure that `Hashie::Array`s are not deconverted within `Hashie::Mash`es to make `Mash#dig` work properly - [@michaelherold](https://github.com/michaelherold). * [#507](https://github.com/hashie/hashie/pull/507): Suppress `Psych.safe_load` arg warn when using Psych 3.1.0+ - [@koic](https://github.com/koic). * [#508](https://github.com/hashie/hashie/pull/508): Fixed `Mash.load` no longer uses Rails-only `#except` - [@bobbymcwho](https://github.com/bobbymcwho). * [#508](https://github.com/hashie/hashie/pull/508): Fixed `Hashie::Extensions::DeepMerge` `#deep_merge` not correctly dup'ing sub-hashes if active_support hash extensions were not present - [@bobbymcwho](https://github.com/bobbymcwho). * [#500](https://github.com/hashie/hashie/pull/500): Do not warn when setting Mash keys that look like underbang, bang, and query methods - [@michaelherold](https://github.com/michaelherold). * [#510](https://github.com/hashie/hashie/pull/510): Ensure that `Hashie::Mash#compact` is only defined on Ruby version >= 2.4.0 - [@bobbymcwho](https://github.com/bobbymcwho). * [#511](https://github.com/hashie/hashie/pull/511): Suppress keyword arguments warning for Ruby 2.7.0 - [@koic](https://github.com/koic). * [#512](https://github.com/hashie/hashie/pull/512): Suppress an integer unification warning for using Ruby 2.4.0+ - [@koic](https://github.com/koic). * [#513](https://github.com/hashie/hashie/pull/513): Suppress a Ruby's warning when using Ruby 2.6.0+ - [@koic](https://github.com/koic). [#]## Miscellaneous * [#981](https://github.com/hashie/hashie/pull/981): Exclude tests from the gem release to reduce installation size and improve installation speed - [@michaelherold](https://github.com/michaelherold). * Your contribution here. [#]# [4.0.0] - 2019-10-30 [4.0.0]: https://github.com/hashie/hashie/compare/v3.6.0...v4.0.0 [#]## Added * [#323](https://github.com/hashie/hashie/pull/323): Added `Hashie::Extensions::Mash::DefineAccessors` - [@marshall-lee](https://github.com/marshall-lee). * [#474](https://github.com/hashie/hashie/pull/474): Expose `YAML#safe_load` options in `Mash#load` - [@riouruma](https://github.com/riouruma), [@dblock](https://github.com/dblock). * [#478](https://github.com/hashie/hashie/pull/478): Added optional array parameter to `Hashie::Mash.disable_warnings` - [@bobbymcwho](https://github.com/bobbymcwho). * [#481](https://github.com/hashie/hashie/pull/481): Ruby 2.6 - Support `Hash#merge` and `#merge!` called with multiple Hashes/Mashes - [@bobbymcwho](https://github.com/bobbymcwho). * [#488](https://github.com/hashie/hashie/pull/488): Added ability to create an anonymous `Hashie::Mash` subclass with key conflict errors silenced using `Hashie::Mash.quiet.new` - [@bobbymcwho](https://github.com/bobbymcwho). [#]## Changed * [#481](https://github.com/hashie/hashie/pull/481): Implement non-destructive standard Hash methods - [@bobbymcwho](https://github.com/bobbymcwho). [#]## Fixed * [#459](https://github.com/hashie/hashie/pull/459): Fixed a regression in `Mash.load` that disallowed aliases - [@arekt](https://github.com/arekt) and [@michaelherold](https://github.com/michaelherold). * [#465](https://github.com/hashie/hashie/pull/465): Fixed `deep_update` to call any readers when a key exists - [@laertispappas](https://github.com/laertispappas). * [#479](https://github.com/hashie/hashie/pull/479): Fixed an issue with `Hash#except` not returning a `Mash` in Rails 6 - [@bobbymcwho](https://github.com/bobbymcwho). * [#489](https://github.com/hashie/hashie/pull/489): Updated the documentation to exlain the behavior of `Mash` and keyword arguments - [@Bhacaz](https://github.com/Bhacaz). [#]## Miscellaneous * [#465](https://github.com/hashie/hashie/pull/465): Clean up our RuboCop configuration and fix the outstanding line length violations. This involved some minor refactoring on `Hashie::Extensions::Coercion`, `Hashie::Extensions::Dash::IndifferentAccess`, `Hashie::Extensions::DeepLocate`, `Hashie::Extensions::Mash::SafeAssignment`, and `Hashie::Hash`, but none that were detectable via the test suite - [@michaelherold](https://github.com/michaelherold). * [#482](https://github.com/hashie/hashie/pull/482): Update Travis configs to make jruby builds run on trusty dist. - [@BobbyMcWho](https://github.com/BobbyMcWho). ==== rubygem-hoe ==== Version update (3.22.2 -> 3.22.3) updated to version 3.22.3 see installed History.rdoc === 3.22.3 / 2021-01-10 * 1 bug fix: * Bumped ruby version to include < 4 (trunk). ==== rubygem-i18n ==== Version update (1.8.5 -> 1.8.7) Subpackages: ruby2.7-rubygem-i18n ruby3.0-rubygem-i18n - updated to version 1.8.7 * Fixed a regression with fallback logic: see issues #547, #546 and #542. ==== rubygem-js-routes ==== Version update (1.4.9 -> 1.4.14) updated to version 1.4.14 see installed CHANGELOG.md [#]# v1.4.14 * Fix compatibility with UMD modules #237 [Comment](https://github.com/railsware/js-routes/issues/237#issuecomment-752… [#]# v1.4.13 * Improve compatibility with node environment #269. * Change default file location configuration to Webpacker if both Webpacker and Sprockets are loaded [#]# v1.4.11 * Use app/javascript/routes.js as a default file location if app/javascript directory exists * Add `default` export for better experience when used as es6 module [#]# v1.4.10 * Require engine only when sprockets is loaded #257. ==== rubygem-json_pure ==== Version update (2.3.1 -> 2.5.1) updated to version 2.5.1 see installed CHANGES.md [#]# 2020-12-22 (2.5.1) * Restore the compatibility for constants of JSON class. [#]# 2020-12-22 (2.5.0) * Ready to Ractor-safe at Ruby 3.0. [#]# 2020-12-17 (2.4.1) * Restore version.rb with 2.4.1 [#]# 2020-12-15 (2.4.0) * Implement a freeze: parser option #447 * Fix an issue with generate_pretty and empty objects in the Ruby and Java implementations #449 * Fix JSON.load_file doc #448 * Fix pure parser with unclosed arrays / objects #425 * bundle the LICENSE file in the gem #444 * Add an option to escape forward slash character #405 * RDoc for JSON #439 #446 #442 #434 #433 #430 ==== rubygem-liquid ==== Version update (4.0.3 -> 5.0.0) updated to version 5.0.0 see installed History.md [#]# 5.0.0 / 2021-01-06 [#]## Features * Add new `{% render %}` tag (#1122) [Samuel Doiron] * Add support for `as` in `{% render %}` and `{% include %}` (#1181) [Mike Angell] * Add `{% liquid %}` and `{% echo %}` tags (#1086) [Justin Li] * Add [usage tracking](README.md#usage-tracking) [Mike Angell] * Add `Tag.disable_tags` for disabling tags that prepend `Tag::Disableable` at render time (#1162, #1274, #1275) [Mike Angell] * Support using a profiler for multiple renders (#1365, #1366) [Dylan Thacker-Smith] [#]## Fixes * Fix catastrophic backtracking in `RANGES_REGEX` regular expression (#1357) [Dylan Thacker-Smith] * Make sure the for tag's limit and offset are integers (#1094) [David Cornu] * Invokable methods for enumerable reject include (#1151) [Thierry Joyal] * Allow `default` filter to handle `false` as value (#1144) [Mike Angell] * Fix render length resource limit so it doesn't multiply nested output (#1285) [Dylan Thacker-Smith] * Fix duplication of text in raw tags (#1304) [Peter Zhu] * Fix strict parsing of find variable with a name expression (#1317) [Dylan Thacker-Smith] * Use monotonic time to measure durations in Liquid::Profiler (#1362) [Dylan Thacker-Smith] [#]## Breaking Changes * Require Ruby >= 2.5 (#1131, #1310) [Mike Angell, Dylan Thacker-Smith] * Remove support for taint checking (#1268) [Dylan Thacker-Smith] * Split Strainer class into StrainerFactory and StrainerTemplate (#1208) [Thierry Joyal] * Remove handling of a nil context in the Strainer class (#1218) [Thierry Joyal] * Handle `BlockBody#blank?` at parse time (#1287) [Dylan Thacker-Smith] * Pass the tag markup and tokenizer to `Document#unknown_tag` (#1290) [Dylan Thacker-Smith] * And several internal changes [#]## Performance Improvements * Reduce allocations (#1073, #1091, #1115, #1099, #1117, #1141, #1322, #1341) [Richard Monette, Florian Weingarten, Ashwin Maroli] * Improve resources limits performance (#1093, #1323) [Florian Weingarten, Dylan Thacker-Smith] ==== rubygem-listen ==== Version update (3.2.1 -> 3.4.1) updated to version 3.4.1 see installed CHANGELOG.md - updated to version 3.3.3 see installed CHANGELOG.md ==== rubygem-loofah ==== Version update (2.8.0 -> 2.9.0) Subpackages: ruby2.7-rubygem-loofah ruby3.0-rubygem-loofah - updated to version 2.9.0 * Handle CSS functions in a CSS shorthand property (like `background`). [[#199](https://github.com/flavorjones/loofah/issues/199), [#200](https://github.com/flavorjones/loofah/issues/200)] ==== rubygem-mime-types-data ==== Version update (3.2020.0512 -> 3.2020.1104) updated to version 3.2020.1104 see installed History.md ==== rubygem-minitar ==== Version update (0.5.4 -> 0.9) - updated to version 0.9 see installed History.md [#]# 0.9 / 2019-09-04 * jtappa added the ability to skip fsync with a new option to Minitar.unpack and Minitar::Input#extract_entry. Provide `:fsync => false` as the last parameter to enable. Merged from a modified version of PR [#37][]. - updated to version 0.8 see installed History.md [#]# 0.8 / 2019-01-05 * inkstak resolved an issue introduced in the fix for [#31][] by allowing spaces to be considered valid characters in strict octal handling. Octal conversion ignores leading spaces. Merged from a slightly modified version of PR [#35][]. * dearblue contributed PR [#32][] providing an explicit call to #bytesize for strings that include multibyte characters. The PR has been modified to be compatible with older versions of Ruby and extend tests. * Akinori MUSHA (knu) contributed PR [#36][] that treats certain badly encoded regular files (with names ending in `/`) as if they were directories on decode. - updated to version 0.7 see installed History.md [#]# 0.7 / 2018-02-19 * Fixed issue [#28][] with a modified version of PR [#29][] covering the security policy and position for Minitar. Thanks so much to ooooooo\_q for the report and an initial patch. Additional information was added as [#30][]. * dearblue contributed PR [#33][] providing a fix for Minitar::Reader when the IO-like object does not have a `#pos` method. * Kevin McDermott contributed PR [#34][] so that an InvalidTarStream is raised if the tar header is not valid, preventing incorrect streaming of files from a non-tarfile. This is a minor breaking change, so the version has been bumped accordingly. * Kazuyoshi Kato contributed PR [#26][] providing support for the GNU tar long filename extension. * Addressed a potential DOS with negative size fields in tar headers ([#31][]). This has been handled in two ways: the size field in a tar header is interpreted as a strict octal value and the Minitar reader will raise an InvalidTarStream if the size ends up being negative anyway. - Remove bsc_1021740.patch for CVE-2016-10173 This vulneribility has been fixed by upstream with v0.6.1: https://github.com/halostatue/minitar/commit/30e62689b614938dc96b4f2cb8e033… - updated to version 0.6.1 ChangeLog removed upstream ==== rubygem-mixlib-shellout ==== Version update (3.0.9 -> 3.2.2) updated to version 3.2.2 no changelog found updated to version 3.1.6 no changelog found ==== rubygem-mocha ==== Version update (1.11.2 -> 1.12.0) updated to version 1.12.0 no changelog found ==== rubygem-moneta ==== Version update (1.4.0 -> 1.4.1) updated to version 1.4.1 see installed CHANGES 1.4.1 * Adapters::Mongo - deprecate :db option, document :database option (#194) * Adapters::Mongo - add retries to increment operation ==== rubygem-omniauth ==== Version update (1.9.1 -> 2.0.1) updated to version 2.0.1 no changelog found ==== rubygem-omniauth-github ==== Version update (1.4.0 -> 2.0.0) updated to version 2.0.0 no changelog found ==== rubygem-omniauth-google-oauth2 ==== Version update (0.8.0 -> 0.8.1) updated to version 0.8.1 see installed CHANGELOG.md [#]# 0.8.1 - 2020-12-12 [#]## Added - Support reading the access token from a json request body. [#]## Deprecated - Nothing. [#]## Removed - No longer verify the iat claim for JWT. [#]## Fixed - A few minor issues with .rubocop.yml. ==== rubygem-omniauth-oauth2 ==== Version update (1.7.0 -> 1.7.1) updated to version 1.7.1 no changelog found ==== rubygem-paint ==== Version update (2.2.0 -> 2.2.1) updated to version 2.2.1 see installed CHANGELOG.md [#]## 2.2.1 * Explicitly set mac's Terminal.app to 256 colors only, fixes #28 ==== rubygem-regexp_parser ==== Version update (1.8.2 -> 2.0.3) updated to version 2.0.3 see installed CHANGELOG.md [#]# [2.0.3] - 2020-12-28 - [Janosch Müller](mailto:janosch84@gmail.com) [#]## Fixed - fixed error when scanning some unlikely and redundant but valid charset patterns - e.g. `/[[.a-b.]]/`, `/[[=e=]]/`, - fixed ancestry of some error classes related to syntax version lookup - `NotImplementedError`, `InvalidVersionNameError`, `UnknownSyntaxNameError` - they now correctly inherit from `Regexp::Syntax::SyntaxError` instead of Rubys `::SyntaxError` [#]# [2.0.2] - 2020-12-25 - [Janosch Müller](mailto:janosch84@gmail.com) [#]## Fixed - fixed `FrozenError` when calling `#to_s` on a frozen `Group::Passive` * thanks to [Daniel Gollahon](https://github.com/dgollahon) [#]# [2.0.1] - 2020-12-20 - [Janosch Müller](mailto:janosch84@gmail.com) [#]## Fixed - fixed error when scanning some group names * this affected names containing hyphens, digits or multibyte chars, e.g. `/(?<a1>a)/` * thanks to [Daniel Gollahon](https://github.com/dgollahon) for the report - fixed error when scanning hex escapes with just one hex digit * e.g. `/\x0A/` was scanned correctly, but the equivalent `/\xA/` was not * thanks to [Daniel Gollahon](https://github.com/dgollahon) for the report [#]# [2.0.0] - 2020-11-25 - [Janosch Müller](mailto:janosch84@gmail.com) [#]## Changed - some methods that used to return byte-based indices now return char-based indices * the returned values have only changed for Regexps that contain multibyte chars * this is only a breaking change if you used such methods directly AND relied on them pointing to bytes * affected methods: * `Regexp::Token` `#length`, `#offset`, `#te`, `#ts` * `Regexp::Expression::Base` `#full_length`, `#offset`, `#starts_at`, `#te`, `#ts` * thanks to [Akinori MUSHA](https://github.com/knu) for the report - removed some deprecated methods/signatures * these are rarely used and have been showing deprecation warnings for a long time * `Regexp::Expression::Subexpression.new` with 3 arguments * `Regexp::Expression::Root.new` without a token argument * `Regexp::Expression.parsed` [#]## Added - `Regexp::Expression::Base#base_length` * returns the character count of an expression body, ignoring any quantifier - pragmatic, experimental support for chained quantifiers * e.g.: `/^a{10}{4,6}$/` matches exactly 40, 50 or 60 `a`s * successive quantifiers used to be silently dropped by the parser * they are now wrapped with passive groups as if they were written `(?:a{10}){4,6}` * thanks to [calfeld](https://github.com/calfeld) for reporting this a while back [#]## Fixed - incorrect encoding output for non-ascii comments * this led to a crash when calling `#to_s` on parse results containing such comments * thanks to [Michael Glass](https://github.com/michaelglass) for the report - some crashes when scanning contrived patterns such as `'\?'` ==== rubygem-rice ==== Version update (2.2.0 -> 3.0.0) updated to version 3.0.0 no changelog found ==== rubygem-rouge ==== Version update (3.23.0 -> 3.26.0) updated to version 3.26.0 no changelog found ==== rubygem-ruby-progressbar ==== Version update (1.10.1 -> 1.11.0) updated to version 1.11.0 no changelog found ==== rubygem-ruby2_keywords ==== Version update (0.0.2 -> 0.0.4) updated to version 0.0.4 no changelog found ==== rubygem-ruby_parser ==== Version update (3.15.0 -> 3.15.1) updated to version 3.15.1 see installed History.rdoc === 3.15.1 / 2021-01-10 * 1 bug fix: * Bumped ruby version to include < 4 (trunk). ==== rubygem-sdoc ==== Version update (1.1.0 -> 2.0.3) updated to version 2.0.3 see installed CHANGELOG.md 2.0.3 ===== * Use @options.title for the index 2.0.2 ===== * Remove accidental rack inclusion in gemspec 2.0.1 ===== * #142 Fix arrow icons for selected panel items * #141 Always use only one metatag for keywords * #140 Use h2 instead of h1 for banner header 2.0.0 ===== * #137 Replace frames based implementation with a css * #132 Deprecate safe_level of ERB.new in Ruby 2.6 ==== rubygem-serverengine ==== Version update (2.2.1 -> 2.2.2) updated to version 2.2.2 see installed Changelog 2020-11-02 version 2.2.2: * Fix incomplete Windows support in spawn based multi worker ==== rubygem-sexp_processor ==== Version update (4.15.1 -> 4.15.2) updated to version 4.15.2 see installed History.rdoc === 4.15.2 / 2021-01-10 * 1 bug fix: * Bumped ruby version to include < 4 (trunk). ==== rubygem-simplecov ==== Version update (0.19.0 -> 0.21.2) updated to version 0.21.2 see installed CHANGELOG.md 0.21.2 (2021-01-09) ========== [#]# Bugfixes * `maximum_coverage_drop` won't fail any more if `.last_run.json` is still in the old format. Thanks [@petertellgren](https://github.com/petertellgren) * `maximum_coverage_drop` won't fail if an expectation is specified for a previous unrecorded criterion, it will just pass (there's nothing, so nothing to drop) * fixed bug in `maximum_coverage_drop` calculation that could falsely report it had dropped for minimal differences 0.21.1 (2021-01-04) ========== [#]# Bugfixes * `minimum_coverage_by_file` works again as expected (errored out before ?) 0.21.0 (2021-01-03) ========== The "Collate++" release making it more viable for big CI setups by limiting memory consumption. Also includes some nice new additions for branch coverage settings. [#]# Enhancements * Performance of `SimpleCov.collate` improved - it should both run faster and consume much less memory esp. when run with many files (memory consumption should not increase with number of files any more) * Can now define the minimum_coverage_by_file, maximum_coverage_drop and refuse_coverage_drop by branch as well as line coverage. Thanks to [@jemmaissroff](https://github.com/jemmaissroff) * Can set primary coverage to something other than line by setting `primary_coverage :branch` in SimpleCov Configuration. Thanks to [@jemmaissroff](https://github.com/jemmaissroff) [#]# Misc * reduce gem size by splitting Changelog into `Changelog.md` and a pre 0.18 `Changelog.old.md`, the latter of which is not included in the gem * The interface of `ResultMeger.merge_and_store` is changed to support the `collate` performance improvements mentioned above. It's not considered an official API, hence this is not in the breaking section. For people using it to merge results from different machines, it's recommended to migrate to [collate](https://github.com/simplecov-ruby/simplecov#merging-test-runs-unde…. 0.20.0 (2020-11-29) ========== The "JSON formatter" release. Starting now a JSON formatter is included by default in the release. This is mostly done for Code Climate reasons, you can find more details [in this issue](https://github.com/codeclimate/test-reporter/issues/413). Shipping with so much by default is sub-optimal, we know. It's the long term plan to also provide `simplecov-core` without the HTML or JSON formatters for those who don't need them/for other formatters to rely on. [#]# Enhancements * `simplecov_json_formatter` included by default ([docs](https://github.com/simplecov-ruby/simplecov#json-formatter)) this should enable the Code Climate test reporter to work again once it's updated * invalidate internal cache after switching `SimpleCov.root`, should help with some bugs 0.19.1 (2020-10-25) ========== [#]# Bugfixes * No more warnings triggered by `enable_for_subprocesses`. Thanks to [@mame](https://github.com/mame) * Avoid trying to patch `Process.fork` when it isn't available. Thanks to [@MSP-Greg](https://github.com/MSP-Greg) ==== rubygem-sshkit ==== Version update (1.21.0 -> 1.21.2) updated to version 1.21.2 see installed CHANGELOG.md ==== rubygem-strptime ==== Version update (0.2.4 -> 0.2.5) updated to version 0.2.5 no changelog found ==== rubygem-tmuxinator ==== Version update (2.0.1 -> 2.0.2) updated to version 2.0.2 no changelog found ==== rubygem-tomlrb ==== Version update (1.3.0 -> 2.0.1) updated to version 2.0.1 no changelog found ==== rubygem-tzinfo-0 ==== Version update (0.3.57 -> 0.3.59) updated to version 0.3.59 see installed CHANGES == Version 0.3.59 (tzdata v2020e) - 24-Dec-2020 * Updated to tzdata version 2020e (https://mm.icann.org/pipermail/tz-announce/2020-December/000063.html) == Version 0.3.58 (tzdata v2020d) - 8-Nov-2020 * Updated to tzdata version 2020d (https://mm.icann.org/pipermail/tz-announce/2020-October/000062.html) ==== rubygem-tzinfo-1.2 ==== Version update (1.2.8 -> 1.2.9) Subpackages: ruby2.7-rubygem-tzinfo-1.2 ruby3.0-rubygem-tzinfo-1.2 updated to version 1.2.9 see installed CHANGES.md Version 1.2.9 - 16-Dec-2020 - -------------------------- * Fixed an incorrect InvalidTimezoneIdentifier exception raised when loading a zoneinfo file that includes rules specifying an additional transition to the final defined offset (for example, Africa/Casablanca in version 2018e of the Time Zone Database). #123. ==== rubygem-tzinfo-data ==== Version update (1.2020.1 -> 1.2020.6) updated to version 1.2020.6 no changelog found ==== rubygem-unicode-display_width ==== Version update (1.7.0 -> 2.0.0) updated to version 2.0.0 see installed CHANGELOG.md [#]# 2.0.0 - Release 2.0.0 - Supports Ruby 3.0 [#]# 2.0.0.pre2 - Update 2.0 branch to Unicode 13 [#]# 2.0.0.pre1 Will be published as non-pre version on rubygems.org when Ruby 3.0 is released (December 2020) - Introduce new class-based API, which remembers your string-width configuration. See README for details. - Remove auto-loading of string extension - You can: `require "unicode/display_width/string_ext"` to continue to use the string extension - The manual opt-out `require "unicode/display_width/no_string_ext"` is not needed anymore and will issue a warning in the future - Remove (already deprecated) String#display_size and String#display_width aliases Refactorings / Internal Changes: - Freeze string literals - The Unicode::DisplayWidth now is class, instead of a module, this enables the new config-object API ==== rubygem-webpacker ==== Version update (4.2.2 -> 5.2.1) Subpackages: ruby2.7-rubygem-webpacker ruby3.0-rubygem-webpacker updated to version 5.2.1 see installed CHANGELOG.md [#]# [[5.2.1]](https://github.com/rails/webpacker/compare/v5.2.0...5.2.1) - 2020-08-17 - Revert [#1311](https://github.com/rails/webpacker/pull/1311). [#]# [[5.2.0]](https://github.com/rails/webpacker/compare/v5.1.1...5.2.0) - 2020-08-16 - Bump dependencies and fixes. See [diff](https://github.com/rails/webpacker/compare/v5.1.1...5-x-stable) for changes. - updated to version 5.1.1 see installed CHANGELOG.md [#]# [[5.1.1]](https://github.com/rails/webpacker/compare/v5.1.0...v5.1.1) - 2020-04-20 - Update [TypeScript documentation](https://github.com/rails/webpacker/blob/master/docs/typescri… and installer to use babel-loader for typescript.[(#2541](https://github.com/rails/webpacker/pull/2541) [#]# [[5.1.0]](https://github.com/rails/webpacker/compare/v5.0.1...v5.1.0) - 2020-04-19 - Remove yarn integrity check [#2518](https://github.com/rails/webpacker/pull/2518) - Switch from ts-loader to babel-loader [#2449](https://github.com/rails/webpacker/pull/2449) Please see the [TypeScript documentation](https://github.com/rails/webpacker/blob/master/docs/typescri… to upgrade existing projects to use typescript with 5.1 - Resolve multi-word snakecase WEBPACKER_DEV_SERVER env values [#2528](https://github.com/rails/webpacker/pull/2528) [#]# [[5.0.1]](https://github.com/rails/webpacker/compare/v5.0.0...v5.0.1) - 2020-03-22 - Upgrade deps and fix sass loader config options bug [#2508](https://github.com/rails/webpacker/pull/2508) [#]# [[5.0.0]](https://github.com/rails/webpacker/compare/v4.2.2...v5.0.0) - 2020-03-22 - Bump minimum node version [#2428](https://github.com/rails/webpacker/pull/2428) - Bump minimum ruby/rails version [#2415](https://github.com/rails/webpacker/pull/2415) - Add support for multiple files per entry [#2476](https://github.com/rails/webpacker/pull/2476) ```js entry: { home: ['./home.js', './home.scss'], account: ['./account.js', './account.scss'] } ``` You can now have two entry files with same names inside packs folder, `home.scss` and `home.js` And, other minor fixes, please see a list of changes [here](https://github.com/rails/webpacker/compare/v4.2.2...v5.0.0) ==== rubygem-websocket ==== Version update (1.2.8 -> 1.2.9) updated to version 1.2.9 see installed CHANGELOG.md [#]# 1.2.9 - avoid ruby -w warnings ==== rubygem-winrm ==== Version update (2.3.4 -> 2.3.5) updated to version 2.3.5 no changelog found ==== rubygem-winrm-elevated ==== Version update (1.2.2 -> 1.2.3) updated to version 1.2.3 no changelog found ==== xapps ==== Version update (2.0.5 -> 2.0.6) Subpackages: libxapp1 typelib-1_0-XApp-1_0 xapps-common xapps-common-lang - Update to version 2.0.6. * 80xapp-gtk3-module.sh: Use GTK3_MODULES instead of GTK_MODULES.

1 0

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 22 Jan '21

22 Jan '21

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have been failing to build for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - python-docker-compose Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

1 0

Intend to drop vagrant from Leap 15.3
by Dan Čermák 22 Jan '21

22 Jan '21

Hi list, I am the current maintainer of Vagrant in Factory and have submitted it to Leap 15.2 in the past. However, vagrant maintenance is eating up far too much of my time and thus I'd like to remove it from Leap 15.3, as I personally don't use Leap myself. If anyone wants to keep vagrant in Leap itself and is willing to push any required updates from Factory (that I will supply) down to Leap, please reach out to me. Otherwise I'll request vagrant's deletion before Leap 15.3 is released. Cheers, Dan -- Dan Čermák <dcermak(a)suse.com> Software Engineer Development tools SUSE Software Solutions Germany GmbH Maxfeldstr. 5 90409 Nuremberg Germany (HRB 36809, AG Nürnberg) Managing Director: Felix Imendörffer

1 0

Intend to drop rubygem-bcrypt_pbkdf from Factory
by Dan Čermák 22 Jan '21

22 Jan '21

Hi list, I have recently discovered that vagrant no longer needs the bcrypt_pbkdf gem and thus I'd like to remove it from Factory. If you want to keep this gem in Factory, please send a request to become its maintainer, otherwise it will just exist in the ruby devel project (as two packages still require it). Cheers, Dan -- Dan Čermák <dcermak(a)suse.com> Software Engineer Development tools SUSE Software Solutions Germany GmbH Maxfeldstr. 5 90409 Nuremberg Germany (HRB 36809, AG Nürnberg) Managing Director: Felix Imendörffer

1 0

Where is static freetype2 lib ?
by Michael Pujos 21 Jan '21

21 Jan '21

Hi, it looks like they should be in package freetype2-devel (its spec file has a "Provides: libfreetype6-devel-static" line), but that package has only .so, but no .a. Is there a reason to this omission, or am I missing something ?

2 2

Error in Factory
by Larry Finger 21 Jan '21

21 Jan '21

When I try to build VirtualBox against Kernel_HEAD_factory, I get the following error: Verifying integrity of cached packages using keys from openSUSE:Factory, Virtualization, Kernel error: /var/tmp/osbuild-packagecache/openSUSE:Factory/standard/x86_64/aaa_base-84.87+git20201123.4f16b16-1.1.x86_64.rpm: hdr blob(25865): BAD, read returned 0 /var/tmp/osbuild-packagecache/openSUSE:Factory/standard/x86_64/aaa_base-84.87+git20201123.4f16b16-1.1.x86_64.rpm : error reading package header There seems to be something wrong with aaa_base-84.87+git20201123.4f16b16-1.1.x86_64.rpm Thanks, Larry

2 2

devel project Apache/apache2 broken?
by Michael Ströder 21 Jan '21

21 Jan '21

HI! This looks seriously broken: https://build.opensuse.org/package/show/Apache/apache2 Files could not be expanded: could not apply patch 'project.diff' This looks normal: https://build.opensuse.org/package/show/openSUSE:Factory/apache2 Anything strange going on? Ciao, Michael.

2 1

Where is static freetype2 lib ?
by Michael Pujos 21 Jan '21

21 Jan '21

Hi, it looks like they should be in package freetype2-devel (its spec file has a "Provides: libfreetype6-devel-static" line), but that package has only .so, but no .a. Is there a reason to this omission, or am I missing something ?

1 0

New Tumbleweed snapshot 20210120 released!
by Dominique Leuenberger 21 Jan '21

21 Jan '21

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: bash (5.0.18 -> 5.1.4) dnsmasq (2.82 -> 2.83) gstreamer (1.18.2 -> 1.18.3) gstreamer-plugins-bad (1.18.2 -> 1.18.3) gstreamer-plugins-base (1.18.2 -> 1.18.3) gstreamer-plugins-good (1.18.2 -> 1.18.3) gstreamer-plugins-libav (1.18.2 -> 1.18.3) gstreamer-plugins-ugly (1.18.2 -> 1.18.3) libqt5-qtbase ncurses (6.2.20201205 -> 6.2.20210109) openldap2 (2.4.56 -> 2.4.57) perl-Mojolicious (8.70 -> 8.71) perl-Net-DNS (1.28 -> 1.29) publicsuffix (20201223 -> 20210108) qemu readline (8.0 -> 8.1) rubygem-cri rubygem-delayed_job (4.1.8 -> 4.1.9) rubygem-delayed_job_active_record (4.1.4 -> 4.1.5) rubygem-pdf-core (0.8.1 -> 0.9.0) rubygem-ttfunk (1.6.2.1 -> 1.7.0) rubygem-xml-simple (1.1.5 -> 1.1.8) vlc (3.0.11.1 -> 3.0.12) vulkan-loader (1.2.162.0 -> 1.2.165) === Details === ==== bash ==== Version update (5.0.18 -> 5.1.4) Subpackages: bash-doc bash-lang - Update to final bash 5.1 * Which is mainly the last rc3 veresion - Add official patch bash51-001 There is a missing dependency on a constructed file, which can cause highly parellel builds to fail. - Add official patch bash51-002 If there are no jobs, and the `-n' and `-p' options are both supplied to `wait', bash can assign a value to the variable name specified with `-p' instead of leaving it unset. - Add official patch bash51-003 Bash does not put a command substitution process that is started to perform an expansion in a child process into the right process group where it can receive keyboard-generated signals. - Add official patch bash51-004 If a key-value compound array assignment to an associative array is supplied as an assignment statement argument to the `declare' command that declares the array, the assignment doesn't perform the correct word expansions. This patch makes key-value assignment and subscript assignment perform the same expansions when they're supplied as an argument to `declare'. - Update to bash 5.1 rc3 * The `assoc_expand_once' option now affects the evaluation of the -v primary to test and the [[ compound command. ==== dnsmasq ==== Version update (2.82 -> 2.83) - Update to 2.83: * bsc#1177077: Fixed DNSpooq vulnerabilities * Use the values of --min-port and --max-port in outgoing TCP connections to upstream DNS servers. * Fix a remote buffer overflow problem in the DNSSEC code. Any dnsmasq with DNSSEC compiled in and enabled is vulnerable to this, referenced by CVE-2020-25681, CVE-2020-25682, CVE-2020-25683 CVE-2020-25687. * Be sure to only accept UDP DNS query replies at the address from which the query was originated. This keeps as much entropy in the {query-ID, random-port} tuple as possible, to help defeat cache poisoning attacks. Refer: CVE-2020-25684. * Use the SHA-256 hash function to verify that DNS answers received are for the questions originally asked. This replaces the slightly insecure SHA-1 (when compiled with DNSSEC) or the very insecure CRC32 (otherwise). Refer: CVE-2020-25685 * Handle multiple identical near simultaneous DNS queries better. Previously, such queries would all be forwarded independently. This is, in theory, inefficent but in practise not a problem, _except_ that is means that an answer for any of the forwarded queries will be accepted and cached. An attacker can send a query multiple times, and for each repeat, another {port, ID} becomes capable of accepting the answer he is sending in the blind, to random IDs and ports. The chance of a succesful attack is therefore multiplied by the number of repeats of the query. The new behaviour detects repeated queries and merely stores the clients sending repeats so that when the first query completes, the answer can be sent to all the clients who asked. Refer: CVE-2020-25686. ==== gstreamer ==== Version update (1.18.2 -> 1.18.3) Subpackages: gstreamer-lang gstreamer-utils libgstreamer-1_0-0 typelib-1_0-Gst-1_0 - Update to version 1.18.3: + Highlighted bugfixes: - Fix ogg playback regression for ogg files that also have ID3 or APE tags - compositor: fix artefacts and invalid memory access when blending subsampled formats - Exported mini object ref/unref/copy functions for use in bindings such as gstreamer-sharp - Add support for Apple silicon (M1) to cerbero package builder - Ship RIST plugin in binary packages - Various stability, performance and reliability improvements - Memory leak fixes - Build fixes + gstreamer: - gst: Add non-inline ref/unref/copy/replace methods for various mini objects (buffer, bufferlist, caps, context, event, memory, message, promise, query, sample, taglist, uri) for use in bindings such as gstreamer-sharp. - harness: don't use GST_DEBUG_OBJECT with GstHarness which is not a GObject. ==== gstreamer-plugins-bad ==== Version update (1.18.2 -> 1.18.3) Subpackages: gstreamer-plugins-bad-lang gstreamer-transcoder libgstadaptivedemux-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstphotography-1_0-0 libgstsctp-1_0-0 libgsttranscoder-1_0-0 libgsturidownloader-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 typelib-1_0-GstTranscoder-1_0 - Update to version 1.18.3: + assrender: fix mutex handling in certain flushing/error situations + dvbsuboverlay: Add support for dynamic resolution update + dashsink: fix critical log of dynamic pipeline + d3d11shader: Fix ID3DBlob object leak + d3d11videosink: Prepare window once streaming started + decklinkaudiosrc: Fix duration of the first audio frame after each discont + intervideosrc: fix negotiation of interlaced caps + msdk: - Needn't close mfx session when failed, fixes double free / potential crash - Check GstMsdkContext instead of mfxSession instance + srt: fix locking when retrieving stats + rtmp2src: fix leaks when connection is cancelled during startup or connection fails ==== gstreamer-plugins-base ==== Version update (1.18.2 -> 1.18.3) Subpackages: gstreamer-plugins-base-lang libgstallocators-1_0-0 libgstapp-1_0-0 libgstaudio-1_0-0 libgstfft-1_0-0 libgstgl-1_0-0 libgstpbutils-1_0-0 libgstriff-1_0-0 libgstrtp-1_0-0 libgstrtsp-1_0-0 libgstsdp-1_0-0 libgsttag-1_0-0 libgstvideo-1_0-0 typelib-1_0-GstAudio-1_0 typelib-1_0-GstPbutils-1_0 typelib-1_0-GstTag-1_0 typelib-1_0-GstVideo-1_0 - Update to version 1.18.3: + audiorate: Make buffer writable before changing its metadata + compositor: fix blending of subsampled components + decodebin3: - When reconfiguring a slot make sure that the ghostpad is unlinked - Release selection lock when pushing EOS + encodebasebin: Ensure that parsers are compatible with selected encoders + tagdemux: resize and trim buffer in place to fix interaction with oggdemux + videoaggregator: Pop out old buffers on timeout + video-blend: fix blending 8-bit and 16-bit frames together + appsrc: fix signal documentation + gl: document some GL caps specifics + libvisual: workaround clang compiler warning ==== gstreamer-plugins-good ==== Version update (1.18.2 -> 1.18.3) Subpackages: gstreamer-plugins-good-extra gstreamer-plugins-good-gtk gstreamer-plugins-good-jack gstreamer-plugins-good-lang gstreamer-plugins-good-qtqml - Update to version 1.18.3: + splitmuxsink: - Avoid deadlock when releasing a pad from a running muxer - Fix bogus fragment split + v4l2object: Map correct video format for RGBA + videoflip: fix possible crash when changing video-direction/method while running ==== gstreamer-plugins-libav ==== Version update (1.18.2 -> 1.18.3) - Update to version 1.18.3: + avauddec: Drain decoder on decoding failure, fixes timestamps after decoding errors ==== gstreamer-plugins-ugly ==== Version update (1.18.2 -> 1.18.3) Subpackages: gstreamer-plugins-ugly-lang - Update to version 1.18.3: + No changes ==== libqt5-qtbase ==== Subpackages: libQt5Concurrent5 libQt5Core5 libQt5DBus5 libQt5Gui5 libQt5Network5 libQt5OpenGL5 libQt5PrintSupport5 libQt5Sql5 libQt5Sql5-mysql libQt5Sql5-sqlite libQt5Test5 libQt5Widgets5 libQt5Xml5 libqt5-qtbase-platformtheme-gtk3 - Add patch to fix infinite loop in KWin on XServer exit: * 0001-Let-QXcbConnection-getTimestamp-properly-exit-when-X.patch - Spec file cleanup, remove conditionals for Leap 42.x ==== ncurses ==== Version update (6.2.20201205 -> 6.2.20210109) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch 20210109 + fix errata in man/ncurses.3x from recent updates. + improve quoting/escaping in configure script, uses some features of autoconf 2.52.20210105 - Add ncurses patch 20210102 + update man/curs_memleaks.3x, to include <term.h> which declares exit_terminfo. + clarify man/curs_terminfo.3x, to mention why the macro setterm is defined in <curses.h>, and remove it from the list of prototypes (prompted by patch by Graeme McCutcheon). + amend man/curs_terminfo.3x, to note that <curses.h> is required for certain functions, e.g., those using chtype or attr_t for types, as well as mvcur (cf: 20201031). + use parameter-names in prototypes in curs_sp_funcs.3x, for consistency with other manpages. - Add ncurses patch 20201227 + update terminology entry to 1.8.1 -TD + fix some compiler-warnings which gcc8 reports incorrectly. - Add ncurses patch 20201219 + suppress hyphenation in generated html for manpages, to address regression in upgrade of groff 1.22.2 to 1.22.3. + fix inconsistent sort-order in see-also sections of manpages (report by Chris Bennett). - Port patch ncurses-6.2.dif - Add ncurses patch 20201212 + improve manual pages for form field-types. ==== openldap2 ==== Version update (2.4.56 -> 2.4.57) Subpackages: libldap-2_4-2 libldap-2_4-2-32bit libldap-data openldap2-client - updated to 2.4.57 OpenLDAP 2.4.57 Release (2021/01/18) Fixed ldapexop to use correct return code (ITS#9417) Fixed slapd to remove asserts in UUIDNormalize (ITS#9391) Fixed slapd to remove assert in csnValidate (ITS#9410) Fixed slapd validity checks for issuerAndThisUpdateCheck (ITS#9411, ITS#9427) Fixed slapd validity checks for serialNumberAndIssuerCheck (ITS#9404, ITS#9424) Fixed slapd AVA sort with invalid RDN (ITS#9412) Fixed slapd ldap_X509dn2bv to check for invalid BER after RDN count (ITS#9423, ITS#9425) Fixed slapd saslauthz to remove asserts in validation (ITS#9406, ITS#9407) Fixed slapd saslauthz to use slap_sl_free on normalized DN (ITS#9409) Fixed slapd saslauthz SEGV in slap_parse_user (ITS#9413) Fixed slapd modrdn memory leak (ITS#9420) Fixed slapd double-free in vrfilter (ITS#9408) Fixed slapd cancel operation to correctly terminate (ITS#9428) Fixed slapd-ldap fix binds on retry with closed connection (ITS#9400) Fixed slapo-syncprov to ignore duplicate sessionlog entries (ITS#9394) ==== perl-Mojolicious ==== Version update (8.70 -> 8.71) - updated to 8.71 see /usr/share/doc/packages/perl-Mojolicious/Changes 8.71 2021-01-17 - Added EXPERIMENTAL freeze option to reset method in Mojo::IOLoop. - Improved Mojo::IOLoop::Subprocess not to close connections after fork. ==== perl-Net-DNS ==== Version update (1.28 -> 1.29) - update to 1.29 Include test number in summary of failed non-fatal tests. Remove Net::DNS::SEC specific tests. Fix faulty test plan in t/08-recurse.t. ==== publicsuffix ==== Version update (20201223 -> 20210108) - Update to version 20210108: * Added ghost.io to PSL (#1180) * Add myshopify.com (#1179) ==== qemu ==== Subpackages: qemu-arm qemu-block-curl qemu-block-dmg qemu-block-gluster qemu-block-iscsi qemu-block-nfs qemu-block-rbd qemu-block-ssh qemu-chardev-baum qemu-chardev-spice qemu-guest-agent qemu-hw-display-qxl qemu-hw-display-virtio-gpu qemu-hw-display-virtio-gpu-pci qemu-hw-display-virtio-vga qemu-hw-usb-redirect qemu-hw-usb-smartcard qemu-ipxe qemu-ksm qemu-kvm qemu-lang qemu-microvm qemu-ppc qemu-s390x qemu-seabios qemu-sgabios qemu-skiboot qemu-tools qemu-ui-curses qemu-ui-gtk qemu-ui-opengl qemu-ui-spice-app qemu-ui-spice-core qemu-vgabios qemu-vhost-user-gpu qemu-x86 - Fix qemu-testsuite issue where white space processing gets handled differently under bash 5.1 (boo#1181054) iotests-Fix-_send_qemu_cmd-with-bash-5.1.patch - Convert qemu-kvm from a script to a symlink. Using qemu-kvm to invoke the QEMU emulator has been deprecated for some time, but is still provided. It has as it's ancient origins a version of QEMU which had KVM acceleration enabled by default, and then recently, until now, it is a shell script which execs the QEMU emulator, adding '-machine accel=kvm' to the beginning of the list of command line options passed to the emulator. This method collides with the now preferred method of specifying acceleration options by using -accel. qemu-kvm is now changed to simply be a symlink to the same QEMU binary which the prior script exec'd. This new approach takes advantage of a built-in QEMU feature where if QEMU is invoked using a program name ending in 'kvm', KVM emulation is enabled. This approach is better in that it is more compatible with any other command line option that may be added for describing acceleration. For those who have modified qemu-kvm to add additional command line options, or take other actions in the context of the script you will now need to create an alternate script "emulator" to achieve the same result. Note that it's possible there may be some very subtle behavioral difference in the switch from a script to a symlink, but given that qemu-kvm is a deprecated package, we're not going to worry about that. ==== readline ==== Version update (8.0 -> 8.1) Subpackages: libreadline8 readline-doc - Update to final readline-8.1 which is mainly rc3 - Remove obsolate patches and the signatures * readline80-001 * readline80-001.sig * readline80-002 * readline80-002.sig * readline80-003 * readline80-003.sig * readline80-004 * readline80-004.sig - Port patches * readline-5.2-conf.patch * readline-6.2-metamode.patch * readline-6.3-destdir.patch * readline-6.3-input.dif * readline-6.3-rltrace.patch * readline-7.0-screen.patch - Port and rename patch readline-8.0.dif which is now readline-8.1.dif - Update to readline-8.1-rc3 for testing * Fixed a bug that could cause point to be set beyond the end of the line buffer when aborting an incremental search. - Update to readline-8.1-rc2 for testing * Bracketed paste mode is enabled by default. There is a configure-time option (--enable-bracketed-paste-default) to set the default to on or off. * Terminals that are named "dumb" or unknown do not enable bracketed paste by default. * Ensure that disabling bracketed paste turns off highlighting the incremental search string when the search is successful. - Remove patch readline-8.1-bracketed_paste_off.patch and use the new build time configuration ==== rubygem-cri ==== - limit to ruby 2.7 on TW ==== rubygem-delayed_job ==== Version update (4.1.8 -> 4.1.9) - updated to version 4.1.9 Support for Rails 6.1 Add support for parameterized mailers via delay call (#1121) ==== rubygem-delayed_job_active_record ==== Version update (4.1.4 -> 4.1.5) - updated to version 4.1.5 no changelog found, but allows Rails 6.1 ==== rubygem-pdf-core ==== Version update (0.8.1 -> 0.9.0) updated to version 0.9.0 no changelog found ==== rubygem-ttfunk ==== Version update (1.6.2.1 -> 1.7.0) updated to version 1.7.0 see installed CHANGELOG.md [#]# 1.7.0 [#]## Changes * Allow gem installation on Ruby 3.0 Pavel Lobashov * Allow TTC files to be read from IO object Tom de Grunt ==== rubygem-xml-simple ==== Version update (1.1.5 -> 1.1.8) updated to version 1.1.8 no changelog found ==== vlc ==== Version update (3.0.11.1 -> 3.0.12) Subpackages: libvlc5 libvlccore9 vlc-codec-gstreamer vlc-lang vlc-noX vlc-qt vlc-vdpau - Update to version 3.0.12: + Access: Add new RIST access module compliant with simple profile (VSF_TR-06-1). + Access Output: Add new RIST access output module compliant with simple profile (VSF_TR-06-1). + Demux: Fixed adaptive's handling of resolution settings. + Audio output: Fix audio distortion on macOS during start of playback. + Video Output: Direct3D11: Fix some potential crashes when using video filters. + Misc: - Several fixes in the web interface, including privacy and security improvements - Update YouTube and Vocaroo scripts. + Updated translations. - Drop vlc-CVE-2020-26664.patch: fixed upstream. - Drop fix-missing-includes-with-qt-5.15.patch: fixed upstream. ==== vulkan-loader ==== Version update (1.2.162.0 -> 1.2.165) - update to 1.2.165: * loader: Properly check for elevated permissions * loader: Remove SEEK_END usage * Rename LIB_SUFFIX to VULKAN_LIB_SUFFIX * build: Update known-good files for 1.2.165 header

1 0

Build fail notification isns - Internet Storage Naming Service (for iSCSI)
by Michal Suchánek 21 Jan '21

21 Jan '21

Hello, The description says: Naming and discovery service that supports ISCSI initiators and targets. The project and the package looks unmaintained. The build break is due to isns using SysV init scripts rather than systemd service files. Does anybody care enough to provide the systemd service files? Thanks Michal

2 1

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 20 Jan '21

20 Jan '21

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have been failing to build for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - lttng-modules - rtl8812au Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

1 0