November 2021 - openSUSE Factory - openSUSE Mailing Lists

[opensuse-factory] Leap 42.3 Build 0312 released!
by Ludwig Nussel 25 Apr '24

25 Apr '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&version=42.3&bui… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Distribution&q… When you reply to discuss some issues, make sure to change the subject. Please use the test plan at https://docs.google.com/spreadsheets/d/1AGKijKpKiJCB616-bHVoNQuhWHpQLHPWCb3… to record your testing efforts and use bugzilla to report bugs. Packages changed: biosdevname btrfsmaintenance conduit gconf2-branding-openSUSE (42.1 -> 42.3) ibus kactivitymanagerd kde-user-manager kernel-source (4.4.73 -> 4.4.74) libxml2 libzypp (16.12.0 -> 16.13.0) lightdm marble mc plasma5-integration plasma5-openSUSE postgresql (9.4 -> 9.6) python-coverage (3.7.1 -> 4.3.4) ucode-intel (20160714 -> 20170511) yast2-bootloader (3.2.22 -> 3.2.23) yast2-ntp-client (3.2.9 -> 3.2.12) === Details === ==== biosdevname ==== - Duplicate naming of SRIOV VFs by biosdevname when VPD_DCM Strings are present in VFs (bsc#1042185) * Add: biosdevname_avoid_duplicates.patch ==== btrfsmaintenance ==== - Require btrfsprogs (bsc#1047226) - update to 0.2 - updated documentation - no hardcoded paths to external utilities - fixed logger name typos for 'journal' target - defrag fixes (sysconfig, find arguments) - Removed patch: balance-typo.patch - Added patch: sysconfig-override-trim.diff - Add balance-typo.patch (bnc#986543) - version 0.1.1 - fix typo and make journal logging target work - cron refresh: remove bashism - Removed patches: * 0003-Add-COPYING-file.patch * 0011-cron-refresh-remove-debuggiong-output.patch - cron script symlinks are not created on first installation (bsc#907343) - add COPYING to package - refresh script: remove extra messages - add uninstall targets - fix refresh service - adjust sysconfig defaults - Add more package dependencies (cron, zypp-plugin) - minor bugfixes - Add supplements(btrfsprogs) - initial version 0.1 ==== conduit ==== Subpackages: conduit-lang - Use python-vobject instead of vobject per python-vobject change in 42.3. ==== gconf2-branding-openSUSE ==== Version update (42.1 -> 42.3) - do not build novell-sound-theme in the gconf2-branding-SLED build to prevent duplicated binaries in openSUSE Leap. The novell-sound-theme is taken from gconf2-branding-SLES sources on both the SLED product and the SLES WE module. bsc#1046099 - bump versions ==== ibus ==== Subpackages: ibus-branding-openSUSE-KDE ibus-gtk ibus-gtk-32bit ibus-gtk3 ibus-lang libibus-1_0-5 libibus-1_0-5-32bit python-ibus typelib-1_0-IBus-1_0 - Update ibus.spec: copy auto-start files to SOURCE directory to enable modifications before compile. - Add ibus-disable-engines-preload-in-GNOME.patch: Disable load preload-engines actions in SLE, which is unnecessary for mono IMF in SLE and may cause CJK user login failed (bsc#1036729). ==== kactivitymanagerd ==== - Recommend -lang package ==== kde-user-manager ==== - Recommend -lang package ==== kernel-source ==== Version update (4.4.73 -> 4.4.74) Subpackages: kernel-default kernel-default-devel kernel-devel kernel-docs kernel-macros kernel-syms - Delete patches.kabi/kabi-fix-for-kvm-x86-fix-singlestepping-over-syscall. No need for kABI fix yet for Leap 42.3. - commit f0a86d9 - Fix kABI breakage by KVM CVE fix (bsc#1045922). - commit c0308f6 - powerpc/perf: Fix branch event code for power9 (fate#321438, Pending SUSE Kernel Fixes). - commit e954af6 - powerpc: Fix /proc/cpuinfo revision for POWER9 DD2 (bsc#1046789). - commit 444247f - Refresh metadata patches.drivers/ibmvnic-a2-Fix-assignment-of-RX-TX-IRQ-s.patch. - commit be32be9 - drm/i915: Serialize GTT/Aperture accesses on BXT (bsc#1046821). - commit b263fef - Bluetooth: hidp: fix possible might sleep error in hidp_session_thread (bsc#1031784). - Refresh patches.suse/kgr-0008-mark-task_safe-in-some-kthreads.patch. - commit 18c6f3e - KVM: x86: fix singlestepping over syscall (CVE-2017-7518 bsc#1045922). - commit d989643 - nvme/pci: Fix stuck nvme reset (bsc#1043805). - commit 7afe4f0 - Refresh fadump patches to upstream and add metadata patches.arch/powerpc-fadump-add-reschedule-point-while-releasing-memory.patch. patches.arch/powerpc-fadump-avoid-duplicates-in-crash-memory-ranges.patch patches.arch/powerpc-fadump-avoid-holes-in-boot-memory-area-when-fadump-is-registered.patch patches.arch/powerpc-fadump-provide-a-helpful-error-message.patch - commit f0fb5c3 - blacklist.conf: Remove duplicated entries - commit cb960d2 - Remove duplicated blacklist entries and put git-commit tag to patches - commit 12a0cb2 - blacklist.conf: Remove duplicated entry. - commit 561ddb1 - ibmvnic: Fix assignment of RX/TX IRQ's (bsc#1046589). - commit 5fa38bf - blacklist.conf: blacklist 570d8e939801 we do not care about the code in Documentation all that much, do we? - commit 69d5811 - blacklist.conf: blaclist 5380e5644afb it is just not worth backporting without any explicit report where a silently truncated success would lead to a real bug. - commit fc28626 - blacklist.conf: unnecessary patch The bug triggers only upon a malformed descriptor and the comparison is so that our buffer would be too large not too small so no overflow. The device would not work, but it won't anyway. - commit 99f8a16 - Rearrange the previous patches for hpsa and smartpqi to the right position. - commit a1f1f27 - Update patches.fixes/xfs-split-default-quota-limits-by-quota-type.patch (bsc#1040941). Fix the bug nr used. - commit 115ba75 - printk: Correctly handle preemption in console_unlock() (bsc#1046434). - commit 0a3c2a4 - printk/xen: Force printk sync mode when migrating Xen guest (bsc#1043347). - commit e13596b - btrfs: disable possible cause of premature ENOSPC (bsc#1040182) - commit 8bf31da - rbd: make sure pages are freed by libceph (bsc#1045596). - rbd: drop extra rbd_img_request_get (bsc#1045596). - commit c8719f2 - dm-raid: Do not call BUG() in __rdev_sectors() (bsc#1046264). - commit 0b1aab0 - btrfs: Round down values which are written for total_bytes_size (bsc#1043912). - btrfs: Manually implement device_total_bytes getter/setter (bsc#1043912). - commit c4d2eb7 - pipe: cap initial pipe capacity according to pipe-max-size limit (bsc#1045330). - commit 4ee3ec2 - Blacklist drivers/net/ethernet/ibm/emac We do not build the driver. - commit d432b2b - blacklist.conf: this patch breaks the API It disallows some operations that are now allowed - commit 98325c2 - arm64: Update config files. (bsc#1036737) Disable XGENE_PMU. - commit 7bb0115 - Disable Xilinx network drivers (bsc#1046170). - commit 656fc83 - hwpoison, memcg: forcibly uncharge LRU pages (bnc#1046105). - commit 2b252e1 - blacklist.conf: blacklist 570d8e939801 the issue is visible only when 80df554275c2 is applied (4.7+ and not backported to our trees) - commit 47b83ce - config/x86_64: make CONFIG_SERIAL_8250_DW and *_MID built-in (bsc#1024449) - commit 2e3ca7e - Refresh patches.drivers/0477-nvme-add-hostid-token-to-fabric-options.patch. Update mainline references. - commit eee1109 - fs/exec.c: account for argv/envp pointers (bnc#1039354, CVE-2017-1000365). - commit 7418d0f - Refresh ibmvnic patch metadata patches.drivers/ibmvnic-98-ibmvnic-Correct-return-code-checking-for-ibmvnic_init-during-probe.patch. patches.drivers/ibmvnic-a0-ibmvnic-Fix-incorrectly-defined-ibmvnic_request_map_rsp-structure.patch. patches.drivers/ibmvnic-a1-ibmvnic-Fix-error-handling-when-registering-long-term-mapped-buffers.patch. - commit babc17a - Refresh metadata patches.fixes/powerpc-tm-Fix-stack-pointer-corruption-in-__tm_recheckpoint. - commit 0b5bdc6 - powerpc/ftrace: Pass the correct stack pointer for DYNAMIC_FTRACE_WITH_REGS (FATE#322421). - commit 936e653 - nvme: add hostid token to fabric options (bsc#1045293). - commit 52dffb9 - iw_cxgb4: Fix error return code in c4iw_rdev_open() (bsc#1026570). - RDMA/iw_cxgb4: Always wake up waiter in c4iw_peer_abort_intr() (bsc#1026570). - commit 2ce43b1 - clocksource/drivers/arm_arch_timer: Fix read and iounmap of incorrect variable (bsc#1045937). - commit 594f037 - Linux 4.4.74 (CVE-2017-1000364 bnc#1012382 bnc#1039348 bnc#1045340 bsc#1031717 bsc#1043231). - Delete patches.drivers/media-pvrusb2-reduce-stack-usage-pvr2_eeprom_analyze. - Delete patches.drivers/media-vb2-Fix-an-off-by-one-error-in-vb2_plane_vaddr. - Delete patches.drivers/staging-rtl8188eu-prevent-an-underflow-in-rtw_check_. - Delete patches.fixes/mm-fix-new-crash-in-unmapped_area_topdown.patch. - Delete patches.fixes/mm-larger-stack-guard-gap-between-vmas.patch. - commit 5e41880 - tty: Fix ldisc crash on reopened tty (bnc#1043488). - commit 04cca20 - tty: Destroy ldisc instance on hangup (bnc#1043488). - tty: Refactor tty_ldisc_reinit() for reuse (bnc#1043488). - tty: Use 'disc' for line discipline index name (bnc#1043488). - tty: Move tty_ldisc_kill() (bnc#1043488). - tty: Handle NULL tty->ldisc (bnc#1043488). - tty: Prepare for destroying line discipline on hangup (bnc#1043488). - tty: Reset c_line from driver's init_termios (bnc#1043488). - tty: Simplify tty_set_ldisc() exit handling (bnc#1043488). - commit c016cca - kabi: ignore fs_info parameter for tracepoints that didn't have it (bsc#1044912). - commit 24869ea ==== libxml2 ==== Subpackages: libxml2-2 libxml2-2-32bit libxml2-devel libxml2-tools - Security fix: * libxml2-CVE-2017-7376.patch [bsc#1044887, CVE-2017-7376] * Increase buffer space for port in HTTP redirect support - Security fix: * libxml2-CVE-2017-7375.patch [bsc#1044894, CVE-2017-7375] * Prevent unwanted external entity reference - Upstream patches updated and with tests: * libxml2-CVE-2017-9047.patch and libxml2-CVE-2017-9048.patch merged into libxml2-CVE-2017-9047.patch [bsc#1039066, bsc#1039661] * libxml2-CVE-2017-9049.patch and libxml2-CVE-2017-9050.patch merged into libxml2-CVE-2017-9049.patch [bsc#1039063, bsc#1039064] ==== libzypp ==== Version update (16.12.0 -> 16.13.0) - Adapt loop mounting of iso images (bsc#1038132, bsc#1033236) - Adjust zypp.conf for openSUSE Tumbleweed (bsc#1031756) - Change arch variable names conflicting with compiler macros (fixes #70) - Fix potential crash if repo has no baseurl (bnc#1043218) - version 16.13.0 (0) ==== lightdm ==== Subpackages: liblightdm-gobject-1-0 lightdm-lang - Augment patch to also resolve the target of symlink sessions for detemining the preselected option: * ignore-known-symlink-sessions.patch ==== marble ==== Subpackages: libastro1 libmarblewidget-qt5-27 marble-data marble-devel marble-doc marble-kde marble-lang - Add Fix-utm-enum-value.patch and reverse-apply it, this upstream commit causes a crash when adding bookmarks if switched to UTM view angles because the necessary handler functions for the dialog are not implemented yet (boo#1044747, kde#381872) - Add Fix-plain-map-and-political-map-showing-no-content.patch to fix the plain map and the political map being not displayed at all (kde#379297) ==== mc ==== Subpackages: mc-lang - sftp.patch: Backport upstream fixes for SFTP (boo#1004280, boo#1042797) ==== plasma5-integration ==== - Move the Recommends: %{name}-plugin-lang to the plasma5-integration-plugin sub package, otherwise the translations won't get installed as there is no main package (boo#1027925) - Actually apply the aforementioned patch (shouldn't the source validator have warned?) ==== plasma5-openSUSE ==== Subpackages: plasma5-defaults-openSUSE plasma5-theme-openSUSE plasma5-workspace-branding-openSUSE sddm-theme-openSUSE - Fix installation of the sddm theme files (boo#1047254) ==== postgresql ==== Version update (9.4 -> 9.6) Subpackages: postgresql-contrib postgresql-devel postgresql-docs postgresql-server - Bump version and defaultpackage to 9.6. - Move ~postgres/.bash_profile to postgresql-server to avoid a file conflict between the versioned server packages. - Bump version and defaultpackage to 9.4. - Bump version and defaultpackage to 9.3. - Change license string to PostgreSQL. - Make all dummy packages noarch. - Make PostgreSQL 9.2 the default. - Reduce the postgresql packages with unversioned names to dummy packages that require the respective versioned package names. ==== python-coverage ==== Version update (3.7.1 -> 4.3.4) - uninstall alternatives in %postun - update for singlespec - update to 4.3.4: - Using the --skip-covered option on an HTML report with 100% coverage would cause a ?No data to report? error, as reported in issue 549. This is now fixed; thanks, Lo�c Dachary. - If-statements can be optimized away during compilation, for example, if 0: or if __debug__:. Coverage.py had problems properly understanding these statements which existed in the source, but not in the compiled bytecode. This problem, reported in issue 522, is now fixed. - If you specified --source as a directory, then coverage.py would look for importable Python files in that directory, and could identify ones that had never been executed at all. But if you specified it as a package name, that detection wasn?t performed. Now it is, closing issue 426. Thanks to Lo�c Dachary for the fix. - If you started and stopped coverage measurement thousands of times in your process, you could crash Python with a ?Fatal Python error: deallocating None? error. This is now fixed. Thanks to Alex Groce for the bug report. - On PyPy, measuring coverage in subprocesses could produce a warning: ?Trace function changed, measurement is likely wrong: None?. This was spurious, and has been suppressed. - Previously, coverage.py couldn?t start on Jython, due to that implementation missing the multiprocessing module (issue 551). This problem has now been fixed. Also, issue 322 about not being able to invoke coverage conveniently, seems much better: jython -m coverage run myprog.py works properly. - Let?s say you ran the HTML report over and over again in the same output directory, with --skip-covered. And imagine due to your heroic test-writing efforts, a file just acheived the goal of 100% coverage. With coverage.py 4.3, the old HTML file with the less-than-100% coverage would be left behind. This file is now properly deleted. - update to Version 4.3.1 ? 2016-12-28: - Some environments couldn?t install 4.3, as described in issue 540. This is now fixed. - The check for conflicting --source and --include was too simple in a few different ways, breaking a few perfectly reasonable use cases, described in issue 541. The check has been reverted while we re-think the fix for issue 265. - update to Version 4.3 ? 2016-12-27: Special thanks to Lo�c Dachary, who took an extraordinary interest in coverage.py and contributed a number of improvements in this release. - The HTML report now supports a --skip-covered option like the other reporting commands. Thanks, Lo�c Dachary for the implementation, closing issue 433. - Subprocesses that are measured with automatic subprocess measurement used to read in any pre-existing data file. This meant data would be incorrectly carried forward from run to run. Now those files are not read, so each subprocess only writes its own data. Fixes issue 510. - Coverage.py wouldn?t execute sys.excepthook when an exception happened in your program. Now it does, thanks to Andrew Hoos. Closes issue 535. - The coverage combine command will now fail if there are no data files to combine. The combine changes in 4.2 meant that multiple combines could lose data, leaving you with an empty .coverage data file. Fixes issues issue 525, issue 412, issue 516, and probably issue 511. - The branch coverage issues described in issue 493, issue 496, and issue 502 are now fixed, thanks to Lo�c Dachary. - Options can now be read from a tox.ini file, if any. Like setup.cfg, sections are prefixed with ?coverage:?, so [run] options will be read from the [coverage:run] section of tox.ini. Implements part of issue 519. Thanks, Stephen Finucane. - Specifying both --source and --include no longer silently ignores the include setting, instead it fails with a message. Thanks, Nathan Land and Lo�c Dachary. Closes issue 265. - Coverage.py can now search .pex files for source, just as it can .zip and .egg. Thanks, Peter Ebden. - update to 4.2: - Since ``concurrency=multiprocessing`` uses subprocesses, options specified on the coverage.py command line will not be communicated down to them. Only options in the configuration file will apply to the subprocesses. Previously, the options didn't apply to the subprocesses, but there was no indication. Now it is an error to use ``--concurrency=multiprocessing`` and other run-affecting options on the command line. This prevents failures like those reported in `issue 495`_. - Filtering the HTML report is now faster, thanks to Ville Skytt�. - update to 4.0.3: - Fixed a mysterious problem that manifested in different ways: sometimes hanging the process (`issue 420`_), sometimes making database connections fail (`issue 445`_). - The XML report now has correct ``<source>`` elements when using a ``--source=`` option somewhere besides the current directory. This fixes `issue 439`_. Thanks, Arcady Ivanov. - Fixed an unusual edge case of detecting source encodings, described in `issue 443`_. - Help messages that mention the command to use now properly use the actual command name, which might be different than "coverage". Thanks to Ben Finney, this closes `issue 438`_. - add LICENSE.txt - Pre require coreutils. This package is needed for the rm call in the pre section. Subprocess failed. Error: RPM failed: /var/tmp/rpm-tmp.gONanE: line 3: rm: command not found - specfile: * updated license * updated update-alternatives * README.txt -> README.rst - update to version 4.0: (long list, see http://coverage.readthedocs.org/en/latest/changes.html) - fix rhel deps by depending on /usr/sbin/update-alternatives ==== ucode-intel ==== Version update (20160714 -> 20170511) - Update to version 20170511 - Update to version 20161104. ==== yast2-bootloader ==== Version update (3.2.22 -> 3.2.23) - AuotYaST configuration: Set StorageDevices flag disks_valid to true. So libstorage can scan valid disks and "/" partition can be found. (bnc#1043132) - 3.2.23 ==== yast2-ntp-client ==== Version update (3.2.9 -> 3.2.12) - Resrict records are written at the end but the default file and most profiles use them at the beginning, which mangles the file completely (bsc#983486). To fix it we have just changed the order of writing. - 3.2.12 - AutoYaST: Fix crash when trying to sanitize not string values, for example initial_sync. - AutoYaST: Sanitize comments by only removing blank spaces at the beginning and adding line break. This avoids augeas parse errors (bsc#1045777). - 3.2.11 - AutoYaST: Fix crash in CFA when creating a command record with some key value option is given (bsc#1045968) - 3.2.10 - AutoYaST: Comments from autoyast profile should not be sanitized to avoid entries without space between value and comment (e.g trustedkey 1# coment). This is caused by a bug in augeas adding new entries. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

2 1

[opensuse-factory] acpid requires systemd?
by Felix Miata 25 Apr '24

25 Apr '24

Can this be true? If so, why? Zypper won't let me upgrade acpid without breakage unless systemd is installed too. I have systemd locked out, as I'd rather test things I can understand in Factory, not major overhaul stuff. -- "The wise are known for their understanding, and pleasant words are persuasive." Proverbs 16:21 (New Living Translation) Team OS/2 ** Reg. Linux User #211409 ** a11y rocks! Felix Miata *** http://fm.no-ip.com/ -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-factory+help(a)opensuse.org

4 3

New Tumbleweed snapshot 20201203 released!
by Dominique Leuenberger 26 Aug '22

26 Aug '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: 389-ds (1.4.4.8~git0.bf454ad07 -> 2.0.1~git0.b557f5daa) Mesa Mesa-drivers NetworkManager alsa-ucm-conf audit-secondary bcm43xx-firmware bluedevil5 (5.20.3 -> 5.20.4) breeze (5.20.3 -> 5.20.4) breeze-gtk (5.20.3 -> 5.20.4) busybox-links crda (3.18 -> 4.14) discover (5.20.3 -> 5.20.4) drkonqi5 (5.20.3 -> 5.20.4) elfutils (0.181 -> 0.182) epiphany (3.38.1 -> 3.38.2) fcitx (4.2.9.7 -> 4.2.9.8) ffmpeg-4 gdb (9.2 -> 10.1) greybird-geeko-theme (3.22.11+git1.968e3b5 -> 3.22.11+git2.751e0f3) javapackages-tools kactivitymanagerd (5.20.3 -> 5.20.4) kcm_sddm (5.20.3 -> 5.20.4) kde-cli-tools5 (5.20.3 -> 5.20.4) kde-gtk-config5 (5.20.3 -> 5.20.4) kexec-tools kgamma5 (5.20.3 -> 5.20.4) khotkeys5 (5.20.3 -> 5.20.4) kinfocenter5 (5.20.3 -> 5.20.4) kmenuedit5 (5.20.3 -> 5.20.4) kscreen5 (5.20.3 -> 5.20.4) kscreenlocker (5.20.3 -> 5.20.4) ksshaskpass5 (5.20.3 -> 5.20.4) ksysguard5 (5.20.3 -> 5.20.4) kwayland-integration (5.20.3 -> 5.20.4) kwayland-server (5.20.3 -> 5.20.4) kwin5 (5.20.3 -> 5.20.4) kwrited5 (5.20.3 -> 5.20.4) libass (0.14.0 -> 0.15.0) libcacard (2.7.0 -> 2.8.0) libgit2 libinput (1.16.3 -> 1.16.4) libkdecoration2 (5.20.3 -> 5.20.4) libkscreen2 (5.20.3 -> 5.20.4) libksysguard5 (5.20.3 -> 5.20.4) libqt5-qtwayland libva (2.9.0 -> 2.9.1) milou5 (5.20.3 -> 5.20.4) mozjs78 (78.4.0 -> 78.5.0) open-iscsi ovmf (202008 -> 202011) oxygen5 (5.20.3 -> 5.20.4) pam (1.5.0 -> 1.5.1) perl-Date-Manip (6.82 -> 6.83) perl-File-Listing (6.11 -> 6.14) plasma-browser-integration (5.20.3 -> 5.20.4) plasma-nm5 (5.20.3 -> 5.20.4) plasma5-addons (5.20.3 -> 5.20.4) plasma5-desktop (5.20.3 -> 5.20.4) plasma5-integration (5.20.3 -> 5.20.4) plasma5-openSUSE plasma5-pa (5.20.3 -> 5.20.4) plasma5-workspace (5.20.3 -> 5.20.4) plymouth polkit-kde-agent-5 (5.20.3 -> 5.20.4) powerdevil5 (5.20.3 -> 5.20.4) pulseaudio (13.0 -> 14.0) python-numpy python-psutil (5.7.2 -> 5.7.3) python-pycryptodome (3.9.8 -> 3.9.9) python-pytz (2020.1 -> 2020.4) python-requests (2.24.0 -> 2.25.0) qemu rsyslog sed speech-dispatcher (0.9.1 -> 0.10.2) syslogd systemd systemd-default-settings systemsettings5 (5.20.3 -> 5.20.4) tslib (1.16 -> 1.22) wireless-regdb (20200429 -> 20201120) xdg-desktop-portal-kde (5.20.3 -> 5.20.4) xorg-x11-server yast2 (4.3.44 -> 4.3.45) yast2-kdump (4.3.2 -> 4.3.3) === Details === ==== 389-ds ==== Version update (1.4.4.8~git0.bf454ad07 -> 2.0.1~git0.b557f5daa) Subpackages: lib389 libsvrcore0 - Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed - Perl has been completly removed in 2.0.0, enable-perl removed and lib389 is the default. Perl tools have not been included in SUSE since 1.4.1.x - Update to version 2.0.1~git0.b557f5daa: * Bump version to 2.0.1 * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X * Issue 4391 - DSE config modify does not call be_postop (#4394) * Issue 4218 - Verify the new wtime and optime access log keywords (#4397) * Issue 4176 - CL trimming causes high CPU * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399) * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408) * Bump version to 2.0.0 * Bump version to 1.4.5.0 ==== Mesa ==== Subpackages: Mesa-dri-devel Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - require llvm-devel *without* any explicit version number for factory/TW to imply 'distro default llvm version', which we usually bump up when a new stable llvm comes out - use llvm11 on factory/TW and sle15-sp3/Leap 15.3 - enabled build of radeonsi DRI and VDPAU driver on aarch64 (boo#1179376) ==== Mesa-drivers ==== Subpackages: Mesa-dri Mesa-dri-nouveau Mesa-gallium Mesa-libva libvdpau_nouveau libvdpau_r300 libvdpau_r600 libvdpau_radeonsi libvulkan_intel libvulkan_radeon libxatracker2 - require llvm-devel *without* any explicit version number for factory/TW to imply 'distro default llvm version', which we usually bump up when a new stable llvm comes out - use llvm11 on factory/TW and sle15-sp3/Leap 15.3 - enabled build of radeonsi DRI and VDPAU driver on aarch64 (boo#1179376) ==== NetworkManager ==== Subpackages: NetworkManager-lang libnm0 typelib-1_0-NM-1_0 - Provide service(network) and sysvinit(network) to be an alternative to wicked-service ==== alsa-ucm-conf ==== - Backport upstream fixes for HD-audio and soundwire HDMI: 0001-fix-the-ucm2-codecs-hda-hdmi.conf-use.patch 0002-codecs-hda-hdmi.conf-add-DisplayPort-to-the-device-d.patch 0003-sof-soundwire-use-the-codecs-hda-hdmi.conf-macro.patch - Revert the workaround for the missing HD-audio init ==== audit-secondary ==== Subpackages: audit python3-audit - prepare usrmerge (boo#1029961) ==== bcm43xx-firmware ==== - Introduce firmware file for RPi Compute Module 4 - Update BCM4345C0.hcd - Update brcmfmac43456-sdio.clm_blob - Introduce firmware files for RPi400: * brcmfmac43456-sdio.bin * brcmfmac43456-sdio.clm_blob * brcmfmac43456-sdio.txt ==== bluedevil5 ==== Version update (5.20.3 -> 5.20.4) Subpackages: bluedevil5-lang - Update to 5.20.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.4 - No code changes since 5.20.3 ==== breeze ==== Version update (5.20.3 -> 5.20.4) Subpackages: breeze5-cursors breeze5-decoration breeze5-style breeze5-style-lang breeze5-wallpapers libbreezecommon5-5 - Update to 5.20.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.4 - Changes since 5.20.3: * Notify on color scheme changes (kde#428771) ==== breeze-gtk ==== Version update (5.20.3 -> 5.20.4) Subpackages: gtk2-metatheme-breeze gtk3-metatheme-breeze metatheme-breeze-common - Update to 5.20.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.4 - No code changes since 5.20.3 ==== busybox-links ==== Subpackages: busybox-coreutils busybox-findutils busybox-gawk busybox-grep busybox-gzip busybox-patch busybox-psmisc busybox-sed busybox-sendmail busybox-tar busybox-xz - Add conflicts: bridge-utils to busybox-iproute2: both packages provide /usr/sbin/brctl. ==== crda ==== Version update (3.18 -> 4.14) - Correct upstream URL and upstream release URL - Add patch crda-default.patch as well as template file crda.default for /usr/etc/default/crda to support WLAN USB dongles as well as mostly raspberry WLAN drivers not knowing about kernel builtin support for WLAN regular country domains (boo#1179308) - prepare usrmerge (boo#1029961) - update to 4.14 and update home URL to use the github project - fix keys defined but not used error - add patch from upstream crda-67f1e6ddbdfade357e234c9d58a30fe0a283fe60.patch - add URLs to README - add patch from upstream crda-f4ef2531698fb9ba006e8b31a223b3269be8bc7c.patch - add legacy note to README - ## CRDA is no longer needed as of kernel v4.15 ==== discover ==== Version update (5.20.3 -> 5.20.4) Subpackages: discover-backend-flatpak discover-backend-fwupd discover-backend-packagekit discover-lang - Update to 5.20.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.4 - Changes since 5.20.3: * Fix incorrect usage of units on ApplicationDelegate * Fix sidebar header/toolbar sizing and height * Display title in application page * pk: Set the Daemon locale at start * Fix installation of local packages (kde#428125) ==== drkonqi5 ==== Version update (5.20.3 -> 5.20.4) Subpackages: drkonqi5-lang - Update to 5.20.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.4 - No code changes since 5.20.3 ==== elfutils ==== Version update (0.181 -> 0.182) Subpackages: elfutils-lang libasm1 libdw1 libelf1 - Mention elfutils-rpmlintrc as a Source. - Add rpmlintrc for libdebuginfod1-dummy.s390x: E: shlib-policy-name-error (Badness: 10000) libdebuginfod1 which is expected as libdebuginfod1 and it's dummy library do share equal soname. - Update to version 0.182: backends: Support for tilegx has been removed. config: New /etc/profile.d files to provide default $DEBUGINFOD_URLS. debuginfod: More efficient package traversal, tolerate various errors during scanning, grooming progress is more visible and interruptible, more prometheus metrics. debuginfod-client: Now supports compressed (kernel) ELF images. libdwfl: Add ZSTD compression support. - Creatu dummy subpackages that can be used for build of packages that are in bootstrap cycle. - Add Provides for real packages. ==== epiphany ==== Version update (3.38.1 -> 3.38.2) Subpackages: epiphany-lang gnome-shell-search-provider-epiphany - Update to version 3.38.2: + Fix pinned tabs reordering themselves. + Avoid crash during Storage Access API permission requests. + Reduce size of Storage Access API permission request info bar. + Fix fullscreen reveal animation. + Fix crash when Safe Browsing database is corrupted. + History dialog title should be translatable. ==== fcitx ==== Version update (4.2.9.7 -> 4.2.9.8) Subpackages: fcitx-branding-openSUSE fcitx-gtk2 fcitx-gtk3 fcitx-pinyin fcitx-table fcitx-table-cn-wubi fcitx-table-cn-wubi-pinyin libfcitx-4_2_9 - update version 4.2.9.8 * fix issue with appindicator on gnome-shell * Relicense the im module to BSD to allow Proprietary software for bundling it. This was already done for the Qt5 counter part, but never done for Qt4 version. This is mainly to allow WPS to reuse our up-to-date im module to support fcitx 5 * Slightly change to the tray menu to remove some redudant entries - Move the startup snippet to /usr/etc/X11/xim.d for TW ==== ffmpeg-4 ==== Subpackages: libavcodec58_91 libavdevice58_10 libavfilter7_85 libavformat58_45 libavresample4_0 libavutil56_51 libpostproc55_7 libswresample3_7 libswscale5_7 - Add ffmpeg_altivec_yuv2rgb_novsx.patch for ppc64 (BE) as per https://trac.ffmpeg.org/ticket/8750 https://bugzilla.opensuse.org/show_bug.cgi?id=1179332 ==== gdb ==== Version update (9.2 -> 10.1) - Mention fedora patch fixups added: * fixup-3-gdb-archer-vla-tests.patch - Mention patch to be upstreamed added: * gdb-fix-selftest-fails-with-gdb-build-with-O2-flto.patch - Fedora patch fixups update: * fixup-2-gdb-rhbz1156192-recursive-dlopen-test.patch - Fedora patch fixups added: * fixup-gdb-test-ivy-bridge.patch - Add xz to BuildRequires for testsuite flavour. - Add note on mpfr-devel for SLE-11. - Backport from master: * gdb-testsuite-fix-failure-in-gdb-base-step-over-no-symbols-exp.patch - Patch to be upstreamed: * gdb-testsuite-fix-control-flow-in-gdb-reverse-insn-reverse-exp.patch - Patch updated: * gdb-testsuite-gdb-tui-new-layout-exp-partly-require-tcl86.patch - Patch updated: * gdb-testsuite-gdb-tui-new-layout-exp-partly-require-tcl86.patch - Patch to be upstreamed: * gdb-testsuite-gdb-base-morestack-exp-no-clang.patch * gdb-testsuite-handle-sigill-in-gdb-reverse-insn-reverse-exp.patch * gdb-testsuite-fix-gdb-reverse-insn-reverse-x86-c-for-m32.patch * gdb-testsuite-gdb-tui-new-layout-exp-partly-require-tcl86.patch * gdb-tui-enable-work-around-libncurses-segfault.patch - Backport from master dropped: * gdb-testsuite-fix-unbalanced-braces-in-gdb-tui-new-layout-exp.patch - Fedora patch fixups updated: * fixup-2-gdb-archer-vla-tests.patch - Fedora patch fixups added: * fixup-2-gdb-rhbz1156192-recursive-dlopen-test.patch - Testsuite patch: * gdb-testsuite-disable-selftests-for-factory.patch - Backport from master: * gdb-symtab-read-cu-base-address-for-enqueued-cu.patch * gdb-symtab-use-early-continue-in-find_pc_sect_compunit.patch * gdb-fix-section-matching-in-find_pc_sect_compunit.patch * gdb-symtab-fix-language-of-frame-without-debug-info.patch - Patch to be upstreamed: * gdb-symtab-set-default-dwarf-max-cache-age-1000.patch - BuildRequire curl for debuginfod test-case. - Patch to be upstreamed: * gdb-don-t-return-non-existing-path-in-debuginfod-source-query.patch * gdb-fix-assert-in-process-event-stop-test.patch * gdb-fix-filename-in-not-in-executable-format-error.patch * gdb-handle-no-upper-bound-in-value-subscript.patch * gdb-fortran-handle-dw-at-string-length-with-loclistptr.patch - Testsuite patch: * gdb-testsuite-fix-gdb-server-ext-run-exp-for-obs.patch - Fedora patch fixups added: * fixup-gdb-rhbz1156192-recursive-dlopen-test.patch - Fedora patch fixups updated: * fixup-gdb-btrobust.patch * fixup-2-gdb-archer-vla-tests.patch - Add missing patch command for: * gdb-fortran-fix-print-dynamic-array.patch - Fix patch application on SLE-11: * gdb-testsuite-detect-gdb-prompt-after-monitor-exit.patch - Disable xz-devel and binutils-gold for SLE-10. - More enabling of gdbserver for riscv64. - Backport from master: * gdb-testsuite-fix-unbalanced-braces-in-gdb-tui-new-layout-exp.patch * gdb-testsuite-catch-condition-evaluation-errors-in-gdb-assert.patch * gdb-testsuite-detect-gdb-prompt-after-monitor-exit.patch * gdb-testsuite-fix-gdb-dlang-watch-loc-exp-on-ppc64.patch - Patch to be upstreamed: * gdb-fortran-fix-print-dynamic-array.patch - Enable gdbserver for riscv64. - Restrict BuildRequires libdebuginfod to Factory and supporting archs. - Rebase to 10.1 release (as in fedora 33 @ 6c8ccd6). * Debuginfod support. * Multi-target debugging support. * Multithreaded symbol loading enabled by default. * New command set exec-file-mismatch. * New command tui new-layout. * Alias command can now specify default args for an alias. - Update libipt to v2.0.2. - Fedora-specific patches dropped: * gdb-6.8-bz466901-backtrace-full-prelinked.patch - Broken/obsolete fedora patches dropped: * gdb-bz533176-fortran-omp-step.patch * gdb-6.5-BEA-testsuite.patch * gdb-6.7-charsign-test.patch - Obsoleted fedora patches dropped: * gdb-6.3-attach-see-vdso-test.patch * gdb-6.3-inferior-notification-20050721.patch * gdb-6.5-gcore-buffer-limit-test.patch * gdb-6.5-missed-trap-on-step-test.patch * gdb-rhbz1818011-bfd-gcc10-error.patch - Fedora patches updated: * gdb-6.3-gstack-20050411.patch * gdb-6.3-test-self-20050110.patch * gdb-6.5-bz185337-resolve-tls-without-debuginfo-v2.patch * gdb-6.5-bz218379-solib-trampoline-lookup-lock-fix.patch * gdb-6.6-buildid-locate-core-as-arg.patch * gdb-6.6-buildid-locate-rpm-librpm-workaround.patch * gdb-6.6-buildid-locate-rpm-scl.patch * gdb-6.6-buildid-locate-rpm.patch * gdb-6.6-buildid-locate-solib-missing-ids.patch * gdb-6.6-buildid-locate.patch * gdb-6.7-testsuite-stable-results.patch * gdb-6.8-quit-never-aborts.patch * gdb-archer-pie-addons-keep-disabled.patch * gdb-archer-pie-addons.patch * gdb-archer-vla-tests.patch * gdb-attach-fail-reasons-5of5.patch * gdb-bz1219747-attach-kills.patch * gdb-bz533176-fortran-omp-step.patch * gdb-container-rh-pkg.patch * gdb-fedora-libncursesw.patch * gdb-gnat-dwarf-crash-3of3.patch * gdb-jit-reader-multilib.patch * gdb-linux_perf-bundle.patch * gdb-moribund-utrace-workaround.patch * gdb-runtest-pie-override.patch * gdb-vla-intel-fix-print-char-array.patch * gdb-vla-intel-fortran-strides.patch * gdb-vla-intel-fortran-vla-strings.patch * gdb-vla-intel-stringbt-fix.patch * gdb-vla-intel-tests.patch - Fedora patches added: * gdb-config.patch - Obsoleted patched dropped: * gdb-testsuite-avoid-pagination-in-attach-32.exp.patch * gdb-fix-toplevel-types-with-fdebug-types-section.patch * gdb-fix-range-loop-index-in-find_method.patch * gdb-fix-python3.9-related-runtime-problems.patch * gdb-fix-unused-function-error.patch * gdb-fix-the-thread-pool.c-compilation.patch * gdb-aarch64-fix-erroneous-use-of-spu-architecture-bfd.patch * gdb-fix-debug-agent-odr-bool-int.patch * gdbserver-fix-build-with-make-3.81.patch * gdb-threads-fix-hang-in-stop_all_threads-after-killing-inferior.patch - Fedora patch fixups added: * fixup-gdb-6.3-test-pie-20050107.patch * fixup-gdb-6.5-sharedlibrary-path.patch * fixup-gdb-6.6-buildid-locate.patch * fixup-gdb-6.8-bz442765-threaded-exec-test.patch * fixup-gdb-archer-vla-tests.patch * fixup-gdb-base-gnu-ifunc-strstr-workaround-exp.patch * fixup-gdb-btrobust.patch * fixup-gdb-bz634108-solib_address.patch * fixup-gdb-dts-rhel6-python-compat.patch * fixup-gdb-gnat-dwarf-crash-3of3.patch * fixup-gdb-vla-intel-fortran-vla-strings.patch * fixup-gdb-vla-intel-tests.patch * fixup-gdb-6.3-threaded-watchpoints2-20050225.patch - Patches renamed: * gdb-testsuite-fix-perror-in-gdb.opt-fortran-string.exp.patch to fixup-2-gdb-archer-vla-tests.patch - Patches updated: * gdb-testsuite-ada-pie.patch - Backport from master: * gdb-testsuite-prevent-pagination-in-gdb-internalflags.patch ==== greybird-geeko-theme ==== Version update (3.22.11+git1.968e3b5 -> 3.22.11+git2.751e0f3) Subpackages: gtk2-metatheme-greybird-geeko gtk3-metatheme-greybird-geeko metatheme-greybird-geeko-common - Update to version 3.22.11+git2.751e0f3: * Rebase parts of the %linked code ==== javapackages-tools ==== Subpackages: javapackages-filesystem - Fix typo in spec file sitearch -> sitelib ==== kactivitymanagerd ==== Version update (5.20.3 -> 5.20.4) Subpackages: kactivitymanagerd-lang - Update to 5.20.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.4 - No code changes since 5.20.3 ==== kcm_sddm ==== Version update (5.20.3 -> 5.20.4) Subpackages: kcm_sddm-lang - Update to 5.20.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.4 - No code changes since 5.20.3 ==== kde-cli-tools5 ==== Version update (5.20.3 -> 5.20.4) Subpackages: kde-cli-tools5-lang - Update to 5.20.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.4 - No code changes since 5.20.3 ==== kde-gtk-config5 ==== Version update (5.20.3 -> 5.20.4) Subpackages: kde-gtk-config5-gtk3 - Update to 5.20.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.4 - No code changes since 5.20.3 ==== kexec-tools ==== - prepare usrmerge (boo#1029961) ==== kgamma5 ==== Version update (5.20.3 -> 5.20.4) Subpackages: kgamma5-lang - Update to 5.20.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.4 - No code changes since 5.20.3 ==== khotkeys5 ==== Version update (5.20.3 -> 5.20.4) Subpackages: khotkeys5-lang - Update to 5.20.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.4 - No code changes since 5.20.3 ==== kinfocenter5 ==== Version update (5.20.3 -> 5.20.4) Subpackages: kinfocenter5-lang - Update to 5.20.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.4 - Changes since 5.20.3: * weight main categories properly (kde#429153) ==== kmenuedit5 ==== Version update (5.20.3 -> 5.20.4) Subpackages: kmenuedit5-lang - Update to 5.20.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.4 - No code changes since 5.20.3 ==== kscreen5 ==== Version update (5.20.3 -> 5.20.4) Subpackages: kscreen5-lang kscreen5-plasmoid - Update to 5.20.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.4 - No code changes since 5.20.3 ==== kscreenlocker ==== Version update (5.20.3 -> 5.20.4) Subpackages: kscreenlocker-lang libKScreenLocker5 - Update to 5.20.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.4 - Changes since 5.20.3: * Use QuickControls 2 StackView (kde#429290) * actually replace wallaper pages ==== ksshaskpass5 ==== Version update (5.20.3 -> 5.20.4) Subpackages: ksshaskpass5-lang - Update to 5.20.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.4 - No code changes since 5.20.3 ==== ksysguard5 ==== Version update (5.20.3 -> 5.20.4) Subpackages: ksysguard5-lang - Update to 5.20.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.4 - No code changes since 5.20.3 ==== kwayland-integration ==== Version update (5.20.3 -> 5.20.4) - Update to 5.20.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.4 - No code changes since 5.20.3 ==== kwayland-server ==== Version update (5.20.3 -> 5.20.4) - Update to 5.20.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.4 - No code changes since 5.20.3 ==== kwin5 ==== Version update (5.20.3 -> 5.20.4) Subpackages: kwin5-lang - Update to 5.20.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.4 - Changes since 5.20.3: * xwl: No need to delete the source immediately * xwl: No need to create createX11Source twice consecutively * xwl: Do not refresh the x11 Clipboard while fetching (kde#424754) * xwl: Include errors and warnings * screencating: query for dmabuf availability before we start streaming * wayland: Fix clipped thumbnails of client-side decorated apps (kde#428595) * Fixed Toggle Night Color global shortcut, which used i18n in object name, leading to erratic behavior e.g. when system locale or translations changed. (kde#428024) * Set setMoveResize(true) after stopping fullscreen and quick tiling (kde#427848) * screencasting: don't crash if the cursor is too big for our buffer * fix: magiclamp effect wrong direction. * kcm/decorations: Fix border size updating for thumbnails ==== kwrited5 ==== Version update (5.20.3 -> 5.20.4) - Update to 5.20.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.4 - No code changes since 5.20.3 ==== libass ==== Version update (0.14.0 -> 0.15.0) - Update to version 0.15.0 * Fix backwards/VSFilter-incompatible font sizes with FreeType 2.10+ * Improve speed via better caching * Require HarfBuzz unconditionally to ensure good shaping for complex scripts * ass_set_use_margins(true) now simply places text on the whole screen instead of attempting to tie it to video positioning (set by the margin values) and failing in various ways when margins are used to implement pan & scan in a video player * Add ass_track_set_feature() & catch-all ASS_FEATURE_INCOMPATIBLE_EXTENSIONS * Add ASS_FEATURE_BIDI_BRACKETS to enable Unicode 6.3+ bracket matching when applying the Unicode Bidirectional Algorithm (incompatible with VSFilter; requires libass built with FriBidi 1.0+) * Fix stack overflow on deeply nested \t tags * Fix positioning of events with leading line breaks * Fix small but nonzero \bord becoming \bord0 (regression in 0.14.0) * Measure BorderStyle=4 box padding from glyph border, not from glyph fill * Scale everything from script resolution if storage size is not set (including borders and shadows regardless of ScaledBorderAndShadow) * Fix the default aspect ratio calculation when neither ass_set_pixel_aspect() nor ass_set_aspect_ratio() is called * Multiple fixes for karaoke override tags * Handle memory allocation failures better: avoid some crashes and produce images closer to truth * Avoid some integer overflows * Add internal infrastructure for regression testing * Improve VSFilter compatibility: + Treat invalid nested \t tags like VSFilter + Make \t(T,T,...) at time exactly T use the post-transition values + Make lines stack more like they do in VSFilter + Default ScaledBorderAndShadow to 0 (like VSFilter), except for subtitles that were produced by old FFmpeg/Libav + Make shadow positioning with 3D transforms match VSFilter's + Cut out glyphs from border & shadow in all the same cases as VSFilter + Match VSFilter on animated color tags with negative acceleration + Fix parsing of some files that VSFilter accepts but libass didn't by ignoring leading whitespace in each line of an ASS file or CodecPrivate + Improve font selection with CoreText + Stop faux-bolding fonts that are too bold to get faux bold in VSFilter + Ignore leading/trailing spaces when calculating height of nonblank lines + Match VSFilter on \fade with large alpha value arguments + Stop splitting bitmaps on font substitution + Multiple fixes for Banner and Scroll effects + Multiple fixes for karaoke override tags ==== libcacard ==== Version update (2.7.0 -> 2.8.0) - Update to v2.8.0. Changes include: * Improve project documentation * Bump minimal glib version to 2.32 and remove old compatibility functions * Introduce meson build system in addition to existing autotools * Create and run fuzzer drivers to improve stability * Introduce a new API vcard_emul_finalize() to clean up allocated resources * Remove key caching to avoid issues with some PKCS #11 modules * Prevent logging critical errors on unknown instruction - Remove empty libcacard package, and also drop the rpm provided symbol qemu-tools:/usr/bin/vscclient, both assumed unused by now ==== libgit2 ==== - require library required by pkg-config file ==== libinput ==== Version update (1.16.3 -> 1.16.4) Subpackages: libinput-udev libinput10 - Update to release 1.16.4 * Fix the termination of the readlink result * udev: update rules to handle bind/unbind events ==== libkdecoration2 ==== Version update (5.20.3 -> 5.20.4) Subpackages: libkdecorations2-5 libkdecorations2-5-lang libkdecorations2private7 - Update to 5.20.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.4 - No code changes since 5.20.3 ==== libkscreen2 ==== Version update (5.20.3 -> 5.20.4) Subpackages: libKF5Screen7 libkscreen2-plugin - Update to 5.20.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.4 - Changes since 5.20.3: * Fix build with newer Qt ==== libksysguard5 ==== Version update (5.20.3 -> 5.20.4) Subpackages: libksysguard5-helper libksysguard5-imports libksysguard5-lang - Update to 5.20.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.4 - Changes since 5.20.3: * Do not insert non existing columns * Write entries if face config changes (kde#429155,kde#429167,kde#429367) * Delete compactRepresentation when switching faces (kde#424599) ==== libqt5-qtwayland ==== Subpackages: libQt5WaylandClient5 libQt5WaylandCompositor5 - Add upstream patch to fix a regression: * 0001-Scanner-Avoid-accessing-dangling-pointers-in-destroy.patch ==== libva ==== Version update (2.9.0 -> 2.9.1) Subpackages: libva-drm2 libva-x11-2 libva2 - update to 2.9.1: * fix version mismatch between meson and autotools ==== milou5 ==== Version update (5.20.3 -> 5.20.4) Subpackages: milou5-lang - Update to 5.20.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.4 - No code changes since 5.20.3 ==== mozjs78 ==== Version update (78.4.0 -> 78.5.0) - Update to version 78.5.0esr. ==== open-iscsi ==== Subpackages: iscsiuio libopeniscsiusr0_2_0 - Updatged to latest upstream, including: * iscsiadm: Optimize the the verification of mode paramters * iscsid: Poll timeout value to 1 minute for iscsid * iscsiadm: fix host stats mode coredump * iscsid: fix logging level when starting and shutting down daemon * Updated iscsiadm man page. * Fix memory leak in sysfs_get_str * libopeniscsiusr: Compare with max int instead of max long - Systemd unit files should not depend on network.target (bsc#1179440), updating: * open-iscsi-SUSE-latest.diff.bz2 ==== ovmf ==== Version update (202008 -> 202011) Subpackages: qemu-ovmf-x86_64 qemu-uefi-aarch64 - Update to edk2-stable202011 * MdeModulePkg/VariablePolicyLib: Fix runtime panic in ValidateSetVariable() * CryptoPkg: BaseCryptLib: Fix buffer double free in CryptPkcs7VerifyEku * Revert "SecurityPkg: Add RPMC Index to the RpmcLib" * MdeModulePkg/LzmaCustomDecompressLib: catch 4GB+ uncompressed buffer sizes * MdeModulePkg/Core/Dxe: limit FwVol encapsulation section recursion * MdeModulePkg/Core/Dxe: assert SectionInstance invariant in FindChildNode() * SecurityPkg: Add RPMC Index to the RpmcLib * BaseTools: Resolve index out of range errors. * UefiCpuPkg/PiSmmCpuDxeSmm: Reflect page table depth with page table address * UefiCpuPkg/PiSmmCpuDxeSmm: Correct the Cr3 typo * CryptoPkg: Make the MD5 disable as default for security * NetworkPkg/Defines: Make iSCSI disable as default * OvmfPkg/OvmfXen.dsc: Enable MD5 while enable iSCSI * OvmfPkg/OvmfPkgX64.dsc: Enable MD5 while enable iSCSI * OvmfPkg/OvmfPkgIa32X64.dsc: Enable MD5 while enable iSCSI * OvmfPkg/OvmfPkgIa32.dsc: Enable MD5 while enable iSCSI * ArmVirtPkg/ArmVirtQemuKernel.dsc: Enable MD5 while enable iSCSI * ArmVirtPkg/ArmVirtQemu.dsc: Enable MD5 while enable iSCSI * NetworkPkg: Enable MD5 while enable iSCSI * CryptoPkg/dsc: Enable MD5 when CRYPTO_SERVICES enable MD5 * SecurityPkg/Hash2DxeCrypto: Remove SHA1 support * SecurityPkg/Hash2DxeCrypto: Remove MD5 support * MdeModulePkg: Drop VarLock from RuntimeDxe variable driver * MdeModulePkg: Change TCG MOR variables to use VariablePolicy * SecurityPkg: Allow VariablePolicy state to delete authenticated variables * MdeModulePkg: Allow VariablePolicy state to delete protected variables * MdeModulePkg: Connect VariablePolicy business logic to VariableServices * ArmVirtPkg: Add VariablePolicy engine to ArmVirtPkg platform * OvmfPkg: Add VariablePolicy engine to OvmfPkg platform * BaseTools: Fix BrotliCompress tool issue * MdePkg/BaseRngLibDxe: Add DXE_RUNTIME_DRIVER class to RngLib * MdeModulePkg DisplayEngineDxe: Correct the local variable name. * MdeModulePkg/AtaAtapiPassThru: Trace ATA packets * MdeModulePkg/AtaAtapiPassThru: Restart failed packets * MdeModulePkg/AtaAtapiPassThru: Add SATA error recovery flow * MdeModulePkg/AtaAtapiPassThru: Check IS to check for command completion * MdeModulePkg/DriverSampleDxe: Add HII sample options * MdeModulePkg/Library: Revise HiiLib to check REST_STYLE * BaseTools/VfrCompile: VFR compiler supports REST_STYLE in HII option * MdePkg: Add GUID for REST Style Formset * UefiCpuPkg/MpInitLib: For SEV-ES guest, set stack based on processor number * UefiCpuPkg, OvmfPkg: Disable interrupts when using the GHCB * OvmfPkg/QemuFlashFvbServicesRuntimeDxe: Fix erase blocks for SEV-ES * OvmfPkg/QemuFlashFvbServicesRuntimeDxe: Set the SwScratch valid bit * UefiCpuPkg/MpInitLib: Set the SW exit fields when performing VMGEXIT * OvmfPkg/VmgExitLib: Set the SwScratch valid bit for MMIO events * OvmfPkg/VmgExitLib: Set the SwScratch valid bit for IOIO events * OvmfPkg/VmgExitLib: Set the SW exit fields when performing VMGEXIT * OvmfPkg/VmgExitLib: Implement new VmgExitLib interfaces * UefiCpuPkg/VmgExitLib: Add interfaces to set/read GHCB ValidBitmap bits * MdePkg: Clean up GHCB field offsets and save area * BaseTools: Limit command line length. * BaseTools: Update report map file format * BaseTools: Add image type into generate map file * BaseTools: Incremental build issue for included ASI file's deletion. * MdeModulePkg/Core/Dxe: log memory base and length, after lib ctors again * BaseTools: Fix BaseTools nmake cleanall hang issue * ShellPkg:Fix bug in FileBuffer.c * BaseTools: Enable Module Scope Structure Pcd * MdeModulePkg/Gcd: Check memory allocation when initializing memory * BaseTools: Remove the dependency on the build intermediate file * DynamicTablesPkg: Add SSDT CMN-600 Table generator * MdePkg: Definitions for Extended Interrupt Flags * BaseTools: Update the FV Space Information to display decimal and Hex * MdePkg/Include: Definitions of EFI REST JSON Structure Protocol * MdeModulePkg/XhciDxe: Retry device slot init on failure * MdeModulePkg/AcpiTableDxe: use pool allocation for RSDP if possible * MdeModulePkg/AcpiTableDxe: use pool allocation for RSDT/XSDT if possible * MdeModulePkg/AcpiTableDxe: use pool allocations when possible * MdePkg: Fix SmBios.h PROCESSOR_CHARACTERISTIC_FLAGS to be UINT16 * MdePkg: Update SmBios.h to add SMBIOS 3.4.0 ARM64 SoC ID field * ShellPkg: Add ARM64 SoC ID to Processor Characteristics in smbiosview * ShellPkg: Fix smbiosview string definition name for "boot from CD" * ShellPkg: Fix a couple of typos in smbiosview * MdeModulePkg/Core: Support standalone MM in FV2 protocol GetNextFile(). * MdePkg/SystemResourceTable.h: Add vendor range values * MdePkg/Include: Fix wrong spelling in http11.h * BaseTools/Ecc: Fix ECC check MetaFile Copyright information issue * MdeModulePkg/XhciDxe: Error handle for USB slot initialization failure * ArmPkg/ArmMmuLib: Explicitly cast function pointer argument * ArmPkg/ArmMmuLib: Explicitly cast UINT32 data conversions * DynamicTablesPkg: SsdtSerialPortFixupLib fix ECC errors * DynamicTablesPkg: AmlEncoding change debug macro * DynamicTablesPkg: AmlLib\AmlDbgPrint fix ECC error * DynamicTablesPkg: AmlLib fix ECC errors * DynamicTablesPkg: AcpiSratLibArm fix ECC error * DynamicTablesPkg: SsdtSerialPortLibArm fix ECC error * DynamicTablesPkg: Fix order of assert checks * CryptoPkg/BaseCryptLib: fix NULL dereference (CVE-2019-14584) (bsc#1177789) * Revert "MdeModulePkg/PartitionDxe: Fix the incorrect LBA size in child ..." * UefiCpuPkg/MpInitLib: Reduce reset vector memory pressure * SecurityPkg/Tcg2PhysicalPresenceLib: Fix incorrect TCG VER comparision * CryptoPkg: BaseCryptLib: Add unit tests (Host and Shell based) * ArmVirtPkg: Add kvmtool to package dictionary * ArmVirtPkg: Package dependency for MC146818 RTC * ArmVirtPkg: Support for kvmtool virtual platform * ArmVirtPkg: Add Kvmtool Platform Pei Lib * ArmVirtPkg: 16550 UART Platform hook library * ArmVirtPkg: GUID Hob for 16550 UART base address * MdeModulePkg: Fix constructor invocation ordering * ArmVirtPkg: Add Kvmtool NOR flash lib * ArmVirtPkg: kvmtool platform memory map * ArmVirtPkg: Add kvmtool platform driver * ArmPlatformPkg: Dynamic flash variable base * ArmVirtPkg: Add Kvmtool RTC Fdt Client Library * PcAtChipsetPkg: Add MMIO Support to RTC driver * MdePkg/Include: Add HTTP definitions * BaseMemoryLibSse2: Take advantage of write combining buffers * RedfishPkg/Include: PCD definitions of Host Interface EFI device path * MdePkg/Include: Definitions of EFI REST EX Protocol * ShellPkg/SmbiosView: Add DDR5 support * MdePkg/BaseLib: Fix invalid memory access in AArch64 SetJump/LongJump * BaseTools: Add EDKII_DSC_PLATFORM_GUID MACRO * MdeModulePkg: Remove code wrapped by DISABLE_NEW_DEPRECATED_INTERFACES * MdePkg: Remove code wrapped by DISABLE_NEW_DEPRECATED_INTERFACES * BaseTools Build_Rule: Add the missing ASM16_FLAGS for ASM16 source file * BaseTools: Move C tool flags before the common flags * BaseTools: Copy PACKED definition from MdePkg Base.h * MdeModulePkg/Core/Dxe: expose SP and CRYPTO capabilities in UEFI memmap * MdePkg/UefiSpec: separate page access bitmask from SP and CRYPTO caps * MdePkg: SMBIOS 3.4.0 Update "adding DDR5 definitions". * NetworkPkg: Fix possible infinite loop in HTTP msg body parser * NetworkPkg/HttpDxe: TlsChildHandle is not cleared when reset * NetworkPkg: Add RngLib entry to .dsc file. * MdeModulePkg/HiiDatabase: Do not modify CONST string * OvmfPkg: enable HttpDynamicCommand * ArmVirtPkg: enable HttpDynamiCommand * ShellPkg/DynamicCommand: add HttpDynamicCommand * CryptoPkg/BaseCryptLib: add crypto algorithms needed by variable protection * BaseTools: Add RISCV64 binding * MdeModulePkg/XhciDxe: Fix Broken Timeouts * BaseTools: Set section alignment as zero if its type is Auto * BaseTools: Remove CanSkip calling for incremental build * BaseTools: Normalize case of pathname when evaluating Macros. * BaseTools: Clean the ffs folder before generating files in it * BaseTools: Add included files to deps_target file. * OvmfPkg/README: HTTPS Boot: describe host-side TLS cipher suites forwarding * MdeModulePkg/NonDiscoverablePciDeviceDxe: Add NULL pointer check * CryptoPkg: OpensslLib: Use RngLib to generate entropy in rand_pool * ArmVirtPkg: Add RngLib based on TimerLib for CryptoPkg * OvmfPkg: Add RngLib based on TimerLib for Crypto * MdePkg: BaseRngLibDxe: Add RngLib that uses RngDxe * MdePkg: TimerRngLib: Added RngLib that uses TimerLib * MdePkg: Correct EFI_BLOCK_IO_PROTOCOL_REVISION3 value * OvmfPkg: drop redundant VendorID check in VirtioMmioDeviceLib * MdePkg: PciExpressLib support variable size MMCONF * UefiPayloadPkg: Store the size of the MMCONF window * SecurityPkg/PeiTpmMeasurementLib: remove gEfiTpmDeviceSelectedGuid * BaseTools: update IASL extdep to more modern version * UefiCpuPkg/RegisterCpuFeaturesLib: Support MpServices2 only case. * BaseTools: Sort the Pcd set when generating the VPD binary * SecurityPkg/DxeImageVerificationLib: Disable SHA1 base on MACRO - Refresh ovmf-add-exclude-shell-flag.patch - Drop upstreamed ovmf-jscSLE-16075-SEV-ES-fixes.patch - Cosmetic changes in the spec file suggested by spec-cleaner ==== oxygen5 ==== Version update (5.20.3 -> 5.20.4) - Update to 5.20.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.4 - No code changes since 5.20.3 ==== pam ==== Version update (1.5.0 -> 1.5.1) Subpackages: pam-32bit pam-doc - Update to 1.5.1 - pam_unix: fixed CVE-2020-27780 - authentication bypass when a user doesn't exist and root password is blank [bsc#1179166] - pam_faillock: added nodelay option to not set pam_fail_delay - pam_wheel: use pam_modutil_user_in_group to check for the group membership with getgrouplist where it is available ==== perl-Date-Manip ==== Version update (6.82 -> 6.83) - updated to 6.83 see /usr/share/doc/packages/perl-Date-Manip/Changes 6.83 2020-12-01 - Time zone fixes No new zoneinfo data so no release on 2020-09-01. Newest zoneinfo data (tzdata 2020d). Requested by Shawn Carroll (GitHub #32) ==== perl-File-Listing ==== Version update (6.11 -> 6.14) - updated to 6.14 see /usr/share/doc/packages/perl-File-Listing/Changes 6.14 2020-11-30 05:48:07 -0700 - Production version identical to 6.12_01 6.12_01 2020-11-27 16:13:15 -0700 - Handle default apache indexes (gh#20) - Ignore certain known navigation links in apache indexes (gh#20) - Support Win32 OpenSSH listing (gh#21 simon04++) ==== plasma-browser-integration ==== Version update (5.20.3 -> 5.20.4) Subpackages: plasma-browser-integration-lang - Update to 5.20.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.4 - No code changes since 5.20.3 ==== plasma-nm5 ==== Version update (5.20.3 -> 5.20.4) Subpackages: plasma-nm5-lang plasma-nm5-openconnect plasma-nm5-openvpn plasma-nm5-pptp plasma-nm5-vpnc - Update to 5.20.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.4 - No code changes since 5.20.3 ==== plasma5-addons ==== Version update (5.20.3 -> 5.20.4) Subpackages: plasma5-addons-lang - Update to 5.20.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.4 - No code changes since 5.20.3 ==== plasma5-desktop ==== Version update (5.20.3 -> 5.20.4) Subpackages: plasma5-desktop-emojier plasma5-desktop-lang - Update to 5.20.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.4 - Changes since 5.20.3: * Remove cmake checks for breeze decoration * There is no Q_FALLTHROUGH in qml or js (kde#429574) * Fix translation extraction (kde#429466) * [kcms/users]: Fix 429313 (kde#429313) * Use plasma theme icons in kickoff leave view * Don't use visible property in procedural code to determine state (kde#408116) * [panel] Fix dragging panel to resize for top and right panels (kde#429063) ==== plasma5-integration ==== Version update (5.20.3 -> 5.20.4) Subpackages: plasma5-integration-plugin plasma5-integration-plugin-lang - Update to 5.20.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.4 - No code changes since 5.20.3 ==== plasma5-openSUSE ==== Subpackages: plasma5-defaults-openSUSE plasma5-theme-openSUSE plasma5-workspace-branding-openSUSE sddm-theme-openSUSE - Update to 5.20.4 ==== plasma5-pa ==== Version update (5.20.3 -> 5.20.4) Subpackages: plasma5-pa-lang - Update to 5.20.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.4 - Changes since 5.20.3: * Remove count property from PulseObjectFilterModel (kde#427978) ==== plasma5-workspace ==== Version update (5.20.3 -> 5.20.4) Subpackages: gmenudbusmenuproxy plasma5-session plasma5-session-wayland plasma5-workspace-lang plasma5-workspace-libs xembedsniproxy - Update to 5.20.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.4 - Changes since 5.20.3: * Fix Environment Canada weather domain. * Fix build with newer Qt * fix: Font files, kfontview and thumbnailer crash on Wayland (kde#401031) * Readd searching for breeze decoration (kde#429298) * [Notifications] Check pause button when job is paused * The cursor previews are in a layout * Revert "Use new simpler way to disable session management in services" * [Tab switcher] Fix binding loop that spams the log (kde#410984) ==== plymouth ==== Subpackages: libply-boot-client5 libply-splash-core5 libply-splash-graphics5 libply5 plymouth-dracut plymouth-plugin-label plymouth-plugin-two-step plymouth-scripts plymouth-theme-bgrt plymouth-theme-spinner - Add plymouth-disable-fedora-logo.patch: Disable the image link which point to the fedora logo. this modification will also avoid the failure report from build checker. ==== polkit-kde-agent-5 ==== Version update (5.20.3 -> 5.20.4) Subpackages: polkit-kde-agent-5-lang - Update to 5.20.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.4 - No code changes since 5.20.3 ==== powerdevil5 ==== Version update (5.20.3 -> 5.20.4) Subpackages: powerdevil5-lang - Update to 5.20.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.4 - No code changes since 5.20.3 ==== pulseaudio ==== Version update (13.0 -> 14.0) Subpackages: libpulse-mainloop-glib0 libpulse0 pulseaudio-bash-completion pulseaudio-gdm-hooks pulseaudio-lang pulseaudio-module-bluetooth pulseaudio-module-gsettings pulseaudio-module-x11 pulseaudio-module-zeroconf pulseaudio-utils pulseaudio-zsh-completion - Update to pulseaudio 14.0: see details in: https://www.freedesktop.org/wiki/Software/PulseAudio/Notes/14.0/ - Build with --enable-stream-restore-clear-old-devices: This is a bit destructive option, it will clear the old PA routing once when upgraded prior to 14.0, but it's required for GNOME (see the release notes above). It should be a one-off action, and hopefully wouldn't bother too much. - Drop obsoleted patches: 0001-alsa-mixer-path-test-Hide-unused-functions-when-buil.patch 0002-alsa-mixer-recognize-the-Speaker-Jack-control.patch 0003-alsa-mixer-add-support-for-SteelSeries-Arctis-Pro-20.patch 0004-alsa-mixer-Add-support-for-SteelSeries-Arctis-5-2019.patch 0005-alsa-mixer-add-support-for-LucidSound-LS31-and-creat.patch 0006-alsa-ucm-use-ucm2-name-for-the-direct-card-index-ope.patch 0007-alsa-ucm-add-mixer-IDs-to-ucm_items.patch 0008-alsa-mixer-handle-the-index-for-ALSA-mixer-element-i.patch 0009-alsa-mixer-improve-alsa_id_decode-function.patch 0010-alsa-ucm-Support-Playback-CaptureVolume.patch 0011-alsa-ucm-Fix-volume-control-based-on-review.patch 0012-alsa-ucm-use-the-correct-mixer-identifiers-as-first.patch 0013-alsa-ucm-add-support-for-master-volume.patch 0014-alsa-ucm-split-correctly-JackHWMute-device-names.patch 0015-alsa-ucm-fix-parsing-for-JackControl.patch 0016-alsa-ucm-add-comments-to-ucm_get_mixer_id.patch 0017-alsa-ucm-validate-access-to-PA_DEVICE_PORT_DATA.patch 0018-alsa-Skip-resume-PCM-if-hardware-doesn-t-support-it.patch 0019-alsa-ucm-parse-correctly-the-device-values.patch 0020-alsa-ucm-do-not-try-to-use-UCM-device-name-as-jack-n.patch 0021-alsa-util-do-not-try-to-guess-the-mixer-name-from-th.patch 0022-alsa-ucm-add-control-and-mixer-device-items.patch 0023-alsa-ucm-get-the-mixer-names-from-ucm-don-t-guess.patch 0024-alsa-ucm-use-the-proper-mixer-name-for-ucm-pcm-sink-.patch 0025-alsa-mixer-handle-interface-type-CARD-PCM-for-mixer-.patch 0026-alsa-mixer-Add-the-ability-to-pass-the-intended-role.patch 0027-alsa-mixer-Set-the-intended-role-of-Steelseries-Arct.patch 0028-alsa-rewrite-mixer-open-close-cache-mixer-accesses-i.patch 0029-alsa-ucm-add-support-for-HDMI-ELD.patch 0030-alsa-mixer-do-the-quick-card-number-lookup-to-save-m.patch 0031-alsa-mixer-improve-check-for-the-empty-path-set-for-.patch 0032-alsa-ucm-allow-to-set-profile-priority-from-UCM-valu.patch 0033-alsa-Document-that-mixer-elements-can-be-identified-.patch 0034-alsa-ucm-correct-the-channel-default-logic-stereo.patch 0035-alsa-ucm-do-not-assign-JackHWMute-when-JackControl-i.patch 0036-ucm-Don-t-log-errors-during-normal-operation.patch 0037-alsa-handle-unavailbale-HW-volume-in-UCM.patch 0038-alsa-ucm-use-the-right-profile-name.patch 0039-ucm-fix-the-port-ucm-device-activation-on-boot.patch 0040-alsa-sink-source-fix-the-mixer-initialization.patch ==== python-numpy ==== - Support multiple python3 flavors gh#openSUSE/python-rpm-macros#66 * Fix pytest call expansion * Fix f2py entry point ==== python-psutil ==== Version update (5.7.2 -> 5.7.3) - update to 5.7.3: - 809_: [FreeBSD] add support for `Process.rlimit()`. - 893_: [BSD] add support for `Process.environ()` (patch by Armin Gruner) - 1830_: [UNIX] `net_if_stats()`'s `isup` also checks whether the NIC is running (meaning Wi-Fi or ethernet cable is connected). - 1837_: [Linux] improved battery detection and charge "secsleft" calculation - 1620_: [Linux] physical cpu_count() result is incorrect on systems with more than one CPU socket. - 1738_: [macOS] Process.exe() may raise FileNotFoundError if process is still alive but the exe file which launched it got deleted. - 1791_: [macOS] fix missing include for getpagesize(). - 1823_: [Windows] Process.open_files() may cause a segfault due to a NULL pointer. - 1838_: [Linux] sensors_battery(): if `percent` can be determined but not the remaining values, still return a result instead of None. - skip-obs.patch, skip_failing_tests.patch: rediff ==== python-pycryptodome ==== Version update (3.9.8 -> 3.9.9) - update to 3.9.9: * GH#435: Fixed Crypto.Util.number.size for negative numbers ==== python-pytz ==== Version update (2020.1 -> 2020.4) - update to 2020.4: * update to IANA 2020d timezone release ==== python-requests ==== Version update (2.24.0 -> 2.25.0) - update to 2.25.0: * Added support for NETRC environment variable. (#5643) * Requests now supports urllib3 v1.26. * Requests v2.25.x will be the last release series with support for Python 3.5. - refreshed requests-no-hardcoded-version.patch ==== qemu ==== Subpackages: qemu-arm qemu-block-curl qemu-block-dmg qemu-block-gluster qemu-block-iscsi qemu-block-nfs qemu-block-rbd qemu-block-ssh qemu-chardev-baum qemu-guest-agent qemu-hw-display-qxl qemu-hw-usb-redirect qemu-hw-usb-smartcard qemu-ipxe qemu-ksm qemu-kvm qemu-lang qemu-microvm qemu-ppc qemu-s390 qemu-seabios qemu-sgabios qemu-skiboot qemu-tools qemu-ui-curses qemu-ui-gtk qemu-ui-spice-app qemu-vgabios qemu-vhost-user-gpu qemu-x86 - Be more careful about what directives are used for qemu-testsuite - Fix some spec file 'Requires' statements to be accurate to the new model of relying on system-user-qemu and system-group-kvm to provide the needed users and groups - Added io_uring support. ==== rsyslog ==== - prepare usrmerge (boo#1029961) ==== sed ==== Subpackages: sed-lang - prepare usrmerge (boo#1029961) ==== speech-dispatcher ==== Version update (0.9.1 -> 0.10.2) Subpackages: libspeechd2 python3-speechd speech-dispatcher-configure speech-dispatcher-module-espeak - Update to version 0.10.2: - generic: Add support for sound icons - Add French, Norwegian Bokmål, Portuguese, Brazilian Portuguese, and Russian translations. - Add voxin module variant. - Factorize espeak module with espeak-ng module. - Make ibmtts and voxin use the common queue helpers. - Fix python bindings against python 3.9. - Reference the golang bindings. - Add spd_get_client_id. - Make key, char and sound_icon commands return message id. - Expose modulebindir in speech-dispatcher.pc. - Remove generic modules for synths that have a non-generic module. - Changes from 0.10.1 - Add punctuation level "most". - Rework thread synchronization. - Move espeak/espeak-ng audio queuing to shared file, rework it. - Make baratinoo use this audio queueing, enable marks, and support - responsiveness parameter. - Add support for Baratinoo engine 8.6 - Show mark progression in spd-say. - Add --character option to spd-say. - Put country/region in language instead of variant. - pico, generic: fix setting voice by language. - generic: Add fallback voices for generic languages. - symbols: Add support for SSML. - symbols: Add SymbolPreprocFile directive to load several symbol files. - symbols: Replace DefaultSymbolsPreproc directive with SymbolsPreproc directive - to have more fine-grained control over server preprocessing. - symbols: Import emojis and unicode font variants support from NVDA and Unicode - CLDR and UnicodeData. - symbols: Import some symbols from Orca. - symbols: Add rules to drop gender-neutral forms. - symbols: Add support for group references. - Disable Mary-TTS module by default. - Replace AudioPulseServer option with AudioPulseDevice. - Fix default pulse latency to 10ms to avoid pulseaudio distorted output. - Made client isolation stronger for Snap/Flatpak support. - Changes since 0.10.0-rc4: - Update CLDR to version 37 and font variants to last version. - spd-say: Fix synthesizing percent - handle _pulse_open() errors in reconnect - Changes since 0.10.0: - Fix including dic files - Change source url to official url on github. ==== syslogd ==== Subpackages: klogd syslog-service - prepare usrmerge (boo#1029961) - replace broken rcsyslog script with rcsyslogd link ==== systemd ==== Subpackages: libsystemd0 libsystemd0-32bit libudev-devel libudev1 libudev1-32bit systemd-32bit systemd-container systemd-doc systemd-lang systemd-logger systemd-sysvinit udev - Import commit f6104ea5f554233e34b94ffd92da8332c3bd7d8f 617aed9236 scope: on unified, make sure to unwatch all PIDs once they've been moved to the cgroup scope - Don't post-require systemd-default-settings-branding anymore This is actually not needed now that the branding package issues a PID1 reloading every times it's being updated. - Import commit 49caf8e37aba04841e5493ccc25e7edab462d95b f8f7286527 units: restore sysfs conditions in sys-fs-fuse-connections.mount and sys-kernel-config.mount e9c7158dc7 units: wait until some fs modules are entirely loaded before mounting their corresponding filesystem (bsc#1178631) ac7ddc4201 Revert "units: skip modprobe@.service if the unit appears to be already loaded" 17310a1d19 core: serialize u->pids until the processes have been moved to the scope cgroup (bsc#1174436) 1416965614 meson: add option to skip installing to $sysconfdir f71a1ef5d0 systemctl: give a nice hint about org.freedesktop.LogControl1 when applicable 20a3f9fd95 systemctl: immediately reject invalid log levels 9f67d2e57b systemctl: merge log_target(), log_level(), service_log_setting() ddf7cf4872 systemctl: add service-log-{level,target} verbs 026d7d156d systemctl: list unit introspection verbs first, modification second - systemd-default-settings is needed by %post scriptlet - Revert the change that dropped %{release} from the package version constraints used in Requires: The release number is actually relevant since it can be increased when some patches, which might touch multiple sub-packages of systemd, are added/modified. However the %{release} is still no more used in conflicts. ==== systemd-default-settings ==== Subpackages: systemd-default-settings-branding-SLE systemd-default-settings-branding-openSUSE - Fix typo introduced by the previous change (bsc#1179183) ==== systemsettings5 ==== Version update (5.20.3 -> 5.20.4) Subpackages: systemsettings5-lang - Update to 5.20.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.4 - Changes since 5.20.3: * Also load category when opening startup module in icon mode (kde#429306) ==== tslib ==== Version update (1.16 -> 1.22) - update to 1.22: * fix ts_uinput build on 32 bit arch on newer kernels * ts_uinput: fix building on FreeBSD * various fixes for cmake builds * improved documentation for systemd * new filter plugin: module evthres * ts_calibrate: close framebuffer after validation. add timeout option -s for it * support for screen-rotation in ts_calibrate and linear module * add experimental module_raw input_evdev that needs libevdev * new ts_calibrate --min_interval option to avoid inaccurate calibration * add ts_calibrate --validate functionality to verify the calibration * add ts_conf_get() and ts_conf_set() API ==== wireless-regdb ==== Version update (20200429 -> 20201120) - Update to version 20201120: * wireless-regdb: update regulatory database based on preceding changes * wireless-regdb: Update regulatory rules for Kazakhstan (KZ) * wireless-regdb: update 5.8 GHz regulatory rule for GB * wireless-regdb: Update regulatory rules for Pakistan (PK) on 5GHz * wireless-regdb: Update regulatory rules for Croatia (HR) * wireless-regdb: restore channel 12 & 13 limitation in the US * wireless-regdb: update regulatory rules for Egypt (EG) ==== xdg-desktop-portal-kde ==== Version update (5.20.3 -> 5.20.4) Subpackages: xdg-desktop-portal-kde-lang - Update to 5.20.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma-5.20.4 - No code changes since 5.20.3 ==== xorg-x11-server ==== Subpackages: xorg-x11-server-Xvfb xorg-x11-server-extra xorg-x11-server-sdk xorg-x11-server-wayland - U_Check-SetMap-request-length-carefully.patch * XkbSetMap Out-Of-Bounds Access: Insufficient checks on the lengths of the XkbSetMap request can lead to out of bounds memory accesses in the X server. (ZDI-CAN 11572, CVE-2020-14360, bsc#1174908) - U_Fix-XkbSetDeviceInfo-and-SetDeviceIndicators-heap-ov.patch * XkbSetDeviceInfo Heap-based Buffer Overflow: Insufficient checks on input of the XkbSetDeviceInfo request can lead to a buffer overflow on the head in the X server. (ZDI-CAN 11389, CVE-2020-25712, bsc#1177596) ==== yast2 ==== Version update (4.3.44 -> 4.3.45) Subpackages: yast2-logs - Yast::Arch add support to know if code is running in a PV Xen guest (related to bsc#952253, bsc#1172742, and bsc#1179197). - 4.3.45 ==== yast2-kdump ==== Version update (4.3.2 -> 4.3.3) - Do not show a warning when running in a HVM Xen guest (bsc#1179197). - 4.3.3

6 14

[opensuse-factory] Can we assume that /bin/sh is bash?
by Martin Wilck 21 Mar '22

21 Mar '22

Hi Jan, all, I'd like to carry our OBS dicussion to a wider audience (https://build.opensuse.org/request/show/672510). The question is whether we can assume that "/bin/sh" links to bash, in particular whether rpm scriptlets without explicit -p interpreter can be assumed to interpreted by bash. I'm aware that, in principle, /bin/sh is supposed to be the Bourne shell on Unix systems. But as a matter of fact, on current openSUSE, it is not. Unless it's tampered with, /bin/sh is a symlink to /bin/bash. bash is not started in full POSIX mode if invoked as /bin/sh, and even if it's in POSIX mode, it supports some extensions over the POSIX shell spec (e.g. the [[ ]] construct), which makes it behave differently than another shell not supporting [[ ]] would (*). Problably there are more differences, I can't claim to know them all. Here are some arguments why I think it'd be reasonable to assume that /bin/sh is bash on openSUSE: 1. patterns-base-minimal_base depends on bash, and the /bin/sh symlink is a non-configurable part of the "bash" package. 2. we could handle /bin/sh via /etc/alternatives, but we don't. 3. our Wiki suggests testing failing scriplets using "bash -xv" (https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets) 4. /bin/sh has pointed to bash for a long time (not sure how long exactly). FTR, Fedora basically guarantees (sh == bash) for the purpose of rpm scriptlets (https://fedoraproject.org/wiki/Packaging:Scriptlets). So Fedora <-> openSUSE portability may also be an issue to consider. If we can't assume that /bin/sh is bash, what else can we assume? I recall from earlier work that writing really 100% compatible shell code for all kinds of environments is really hard. E.g., "[" isn't 100% portable either, even though it's part of the POSIX "test" standard (http://pubs.opengroup.org/onlinepubs/9699919799/utilities/test.html). We should have clear rules which syntax expressions can be used in rpm scriptlets, and which can't. IMO we should define one of the various existing shells as a reference by saying "if it's supported by this shell, it's valid scriptlet code". That'd be easier (especially for testing compliance) than referring to a spec. That reference shell doesn't have to be bash, of course. Thanks Martin (*) For example: # ln -s /usr/bin/echo '/usr/bin/[[' # ls -l /bin/sh lrwxrwxrwx 1 root root 4 Feb 8 10:38 /bin/sh -> bash # /bin/sh --posix -c '[[ 2 = 1 ]] && echo yes' # dash -c '[[ 2 = 1 ]] && echo yes' 2 -eq 1 ]] yes -- Dr. Martin Wilck <mwilck(a)suse.com>, Tel. +49 (0)911 74053 2107 SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard, Graham Norton HRB 21284 (AG Nürnberg) -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

25 147

New Tumbleweed snapshot 20210325 released!
by Dominique Leuenberger 19 Mar '22

19 Mar '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: PackageKit checkpolicy (3.1 -> 3.2) cppcheck (2.3 -> 2.4.1) cups e2fsprogs (1.46.1 -> 1.46.2) elfutils elfutils-debuginfod emacs-w3m (1.4.632 -> 1.4.632+396+g051dba16) enchant (2.2.8 -> 2.2.15) evolution-data-server evolution-ews ffmpeg-4 (4.3.1 -> 4.3.2) gnome-shell java-11-openjdk kernel-firmware (20210208 -> 20210315) libnettle (3.7.1 -> 3.7.2) libnice (0.1.17 -> 0.1.18) libselinux (3.1 -> 3.2) libselinux-bindings (3.1 -> 3.2) libsemanage (3.1 -> 3.2) libtpms (0.7.4 -> 0.7.7) libvirt links (2.21 -> 2.22) man-pages (5.10 -> 5.11) mc (4.8.25 -> 4.8.26) openblas_pthreads (0.3.13 -> 0.3.14) p7zip perl-Net-HTTP (6.20 -> 6.21) policycoreutils (3.1 -> 3.2) python-semanage (3.1 -> 3.2) redis rng-tools (6.11 -> 6.12) rubygem-bootsnap (1.7.2 -> 1.7.3) rubygem-rspec-rails (5.0.0 -> 5.0.1) setools (4.3.0 -> 4.4.0) snapper (0.8.15 -> 0.8.16) spirv-tools taglib (1.11.2~git20190725.79bc9ccf -> 1.12) thunar (4.16.5 -> 4.16.6) === Details === ==== PackageKit ==== Subpackages: PackageKit-backend-zypp PackageKit-gstreamer-plugin PackageKit-gtk3-module PackageKit-lang libpackagekit-glib2-18 typelib-1_0-PackageKitGlib-1_0 - Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction size sanity check (gh#hughsie/PackageKit/commit#ac5c8660) ==== checkpolicy ==== Version update (3.1 -> 3.2) - Update to version 3.2 * Fix a memleak and an integer overflow ==== cppcheck ==== Version update (2.3 -> 2.4.1) - update to 2.4.1: * fix for windows installer, no other changes - update to 2.4: * Detect one definition rule violations * MISRA improvements * ImportProject fixes * Various bug hunting improvements * Fixes when importing AST from clang ==== cups ==== Subpackages: cups-client cups-config libcups2 libcups2-32bit libcupsimage2 - fix-negotiate-authentication-between-CGIs-and-scheduler.patch fixes web UI Kerberos authentication (bsc#1175960) - Remove code comments from expanded scriptlets to reduce size ==== e2fsprogs ==== Version update (1.46.1 -> 1.46.2) Subpackages: e2fsprogs-scrub libcom_err2 libcom_err2-32bit libext2fs2 - e2fsprogs 1.46.2: * tune2fs -c now takes "random" argument * Add support for the FS_NOCOMP_FL flag to chattr and lsattr * Fix warnings when resizing small file systems to a super-large * Fix the debugfs rdump and ls commands so they will work correctly for uid's and gid's => 65536 * Fix the debugfs write and symlink commands so they support targets which contain a pathname * Fix Direct I/O support on block devices where the logical block size is greater 1k * Fix debugfs's logdump so it works on file systems whose block size is greater than 8k * Fix a crash when there is error while e2fsck is trying to open the file system, and e2fsck calls ext2fs_mmp_stop() before MMP has been initialized * Improved error checking in the fast commit replay code in e2fsck * Fix various compiler and Coverity warnings * Update the Spanish translation from the translation project ==== elfutils ==== Subpackages: elfutils-lang libasm1 libdw1 libelf1 - Add disable-run-readelf-self-test.patch in order to disable a failing test-case with GCC 11 (PR27367). ==== elfutils-debuginfod ==== - Enable https://debuginfod.opensuse.org/ debuginfod server by default now. - Add disable-run-readelf-self-test.patch in order to disable a failing test-case with GCC 11 (PR27367). ==== emacs-w3m ==== Version update (1.4.632 -> 1.4.632+396+g051dba16) - Update to version 1.4.632+396+g051dba16: * Don't show a backstage while performing `text-scale-adjust' * Make text-scale-adjust work * Fix it again * shimbun.el (shimbun-xml-parse-buffer): Fix typo * ChangeLog: fix date entries * * shimbun.el (shimbun-xml-parse-buffer): Work around malformed xml * Update copyright years * Docfix so not to be wider than 80 chars * Bugfix 'w3m-previous-image doesn't work' ([emacs-w3m:13747]) * Fix typo in ChangeLog ==== enchant ==== Version update (2.2.8 -> 2.2.15) Subpackages: enchant-2-backend-hunspell enchant-data libenchant-2-2 - Update to version 2.2.15: + Specify that nuspell >= 4.1.0 is required. + Fix some space leaks in the tests. + The nuspell backend is updated for newer versions. + Make the enchant program output its version to standard output, not standard error. This may help some programs that use this output. + Fix a bug in the Voikko and Zemberek back-ends that could cause spell checking and suggestion to fail. + Make enchant silently ignore -B flag, for better Emacs compatibility. + Make enchant_broker_list_dicts sort the tags, so that enchant-lsmod?s output is sorted. + Minor build system improvement: don?t use -D_FORTIFY_SOURCE, which can cause problems on Windows, and should be configured by the compiler vendor if desired. + Fix Hunspell backend to treat apostrophes as Hunspell does: if either straight or curly apostrophe is a word character, allow both. + Fix a couple of space leaks in the Nuspell back end. - Drop Fix_back-ends_that_want_a_NUL-terminated_string.patch: fixed upstream. ==== evolution-data-server ==== Subpackages: evolution-data-server-lang libcamel-1_2-62 libebackend-1_2-10 libebook-1_2-20 libebook-contacts-1_2-3 libecal-2_0-1 libedata-book-1_2-26 libedata-cal-2_0-1 libedataserver-1_2-25 libedataserverui-1_2-2 - Add evolution-data-server-boo1182882.patch: fix buffer overrun when parsing base64 data (boo#1182882). ==== evolution-ews ==== Subpackages: evolution-ews-lang - Add evolution-ews-boo1182882.patch: fix buffer overrun when parsing base64 data (boo#1182882). ==== ffmpeg-4 ==== Version update (4.3.1 -> 4.3.2) Subpackages: libavcodec58_91 libavdevice58_10 libavfilter7_85 libavformat58_45 libavresample4_0 libavutil56_51 libpostproc55_7 libswresample3_7 libswscale5_7 - update to 4.3.2: * lots of oss-fuzz reported overflow fixes, see included ChangeLog - drop ffmpeg.git-ba3e771a42c29ee02c34e7769cfc1b2dbc5c760a.patch 0001-lavf-srt-fix-build-fail-when-used-the-libsrt-1.4.1.patch 0001-avformat-vividas-improve-extradata-packing-checks-in.patch: upstream ==== gnome-shell ==== Subpackages: gnome-shell-calendar gnome-shell-lang - Disable gnome-shell-jsc#SLE-16051-Input-method-recommendation.patch: Clears existing keyboard on gnome-shell restart (boo#1183823). - Update gnome-shell-jsc#SLE-16051-Input-method-recommendation.patch: Modify the Japanese input engine load order which will more fit for our community(bnc#1183475); ==== java-11-openjdk ==== Subpackages: java-11-openjdk-headless - Added patches: * system-crypto-policy.patch + Let OpenJDK use system crypto policies unless explicitely told not to * nss-security-provider.patch + Add the NSS security provider with configuration in generated nss.cfg file * keytool-default-rsa.patch + Make keytool generate RSA keys by default, since only the LEGACY system crypto policy allows DSA ==== kernel-firmware ==== Version update (20210208 -> 20210315) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network ucode-amd - Update to version 20210315 (git commit 3568f962908c): * linux-firmware: Update firmware file for Intel Bluetooth AX210 * linux-firmware: Update firmware file for Intel Bluetooth AX200 * linux-firmware: Update firmware file for Intel Bluetooth AX201 * rtw88: 8822c: Update normal firmware to v9.9.6 * iwlwifi: add new FWs from core59-66 release * iwlwifi: update 9000-family firmwares * iwlwifi: update 7265D firmware * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2406 * linux-firmware: add frimware for mediatek bluetooth chip (MT7921) * rtw89: 8852a: add firmware v0.9.12.2 * WHENCE: add missing symlink for BananaPi M3 * Add symlink for BananaPi M2 to brcmfmac43430-sdio config * brcm: Fix Raspberry Pi 4B NVRAM file * silabs: add new firmware for WF200 * amdgpu: add initial firmware for green sardine * rtw88: RTL8822C: Update normal firmware to v9.9.5 - Drop obsoleted patch: Revert-brcm-rpi4-boardflags3-bit.patch - Update topics and aliases ==== libnettle ==== Version update (3.7.1 -> 3.7.2) Subpackages: libhogweed6 libhogweed6-32bit libnettle8 libnettle8-32bit - GNU Nettle 3.7.2: * fix a bug in ECDSA signature verification that could lead to a denial of service attack (via an assertion failure) or possibly incorrect results (boo#1183835) * fix a few related problems where scalars are required to be canonically reduced modulo the ECC group order, but in fact may be slightly larger ==== libnice ==== Version update (0.1.17 -> 0.1.18) Subpackages: gstreamer-libnice libnice10 - Update descriptions to be closer to the other GNOME packages. - Update to 0.1.18: * Remove the autotools build system, now only meson is available * Accept receiving messages in multiple steps over TCP * Accept duplicated ports as last option instead of spinning forever * Use sendmmsg if possible to send multiple packets in one call * Fail gathering if no port is available * Hide the implementation of NiceCandidate, this hides some parts that were previously visible * Enable TURN server connects where both TCP and UDP use the same port number * Don't count rejected STUN messages as keepalive packets * On Windows, the improvements and fixes - use crypto library instead of CryptGenRandom() which is deprecated - use GetBestInterfaceEx() for UWP compatibility - fix the listing of interfaces to use the correct APIs - implement ignoring interfaces * Add buildrquires: gobject-introspection-devel and meson * The move from autoFOO to meson ==== libselinux ==== Version update (3.1 -> 3.2) Subpackages: libselinux1 libselinux1-32bit selinux-tools - Switch to pcre2: + Replace pcre-devel BuildRequires with pkgconfig(libpcre2-8) + Pass USE_PCRE2=y to make. + Replace pkgconfig(libpcre) Requires in -devel static with pkgconfig(libpcre2-8). - Update to version 3.2: * Use mmap()'ed kernel status page instead of netlink by default. See "KERNEL STATUS PAGE" section in avc_init(3) for more details. * New log callback levels for enforcing and policy load notices - SELINUX_POLICYLOAD, SELINUX_SETENFORCE * Changed userspace AVC setenforce and policy load messages to audit format. ==== libselinux-bindings ==== Version update (3.1 -> 3.2) - Switch to pcre2: + Replace pcre-devel BuildRequires with pkgconfig(libpcre2-8) + Pass USE_PCRE2=y to make. - Update to version 3.2: * Use mmap()'ed kernel status page instead of netlink by default. See "KERNEL STATUS PAGE" section in avc_init(3) for more details. * New log callback levels for enforcing and policy load notices - SELINUX_POLICYLOAD, SELINUX_SETENFORCE * Changed userspace AVC setenforce and policy load messages to audit format. ==== libsemanage ==== Version update (3.1 -> 3.2) - Link to correct so version - Minor spec file cleanups - Move configuration file to separate libsemanage-conf package to allow for parallel installation in future versions - Update to version 3.2 * dropped old and deprecated symbols and functions libsemanage version was bumped to libsemanage.so.2 * libsemanage tries to sync data to prevent empty files in SELinux module store ==== libtpms ==== Version update (0.7.4 -> 0.7.7) - Update to version 0.7.7 * CryptSym: fix AES output IV (bsc#1183729, CVE-2021-3446) * tpm2: Fix public key context save due to ANY_OBJECT_Marshal usage * tpm2: Address some Coverity issues (false positives) * tpm1.2: Backported ASAN/UBSAN related fixes * tpm2: Return properly sized array for b parameter for NIST P521 (HLK) * tpm2: Addressed issues detected by UBSAN * tpm2: Addressed issues detected by cppcheck (false positives) ==== libvirt ==== Subpackages: libvirt-bash-completion libvirt-client libvirt-daemon libvirt-daemon-driver-interface libvirt-daemon-driver-libxl libvirt-daemon-driver-lxc libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-lxc libvirt-daemon-qemu libvirt-daemon-xen libvirt-libs - spec: Fix exec-restart of virtlockd and virtlogd on package upgrade bsc#1183411 - spec: Move netcat-openbsd requirement from the libs to the daemon subpackage. It is only needed by the daemon and introduces an unneeded dependency for users of libvirt-libs. ==== links ==== Version update (2.21 -> 2.22) - update to 2.22: * Save and restore the terminal using xterm escape codes * Save and restore the console using "cons.saver" from Midnight Commander * Support UTF-8 frames * Fixed a bug in displaying non-printable characters ==== man-pages ==== Version update (5.10 -> 5.11) - version update to 5.11 http://linux-man-pages.blogspot.com/2021/03/man-pages-511-is-released.html - modified patches % man-pages-tty_ioctl.patch (refreshed) ==== mc ==== Version update (4.8.25 -> 4.8.26) Subpackages: mc-lang - Midnight Commander 4.8.26: * Support file names of any length * Implement persistent command line buffer for subshell (bash >= 4, zsh and fish are supported) * Implement shadows of dialog windows and menus * Allow running clipboard commands if DISPLAY is not set * Add support of "alacritty", "tmux", and "tmux-256color" terminals * VFS: Support wim archive format (using wimtools) * VFS: Support pak archive format (using unar) * Editor: Add Swift syntax highlighting * Various bug fixes ==== openblas_pthreads ==== Version update (0.3.13 -> 0.3.14) - Update openblas-ppc64be_up2_p8.patch trimed by previous sr (still need changes in Makefile.system) - Update to version 0.3.14 common: * Fixed a race condition on thread shutdown in non-OpenMP builds * Fixed custom BUFFERSIZE option getting ignored in gmake builds * Fixed CMAKE compilation of the TRMM kernels for GENERIC platforms * Added CBLAS interfaces for CROTG, ZROTG, CSROT and ZDROT * Improved performance of OMATCOPY_RT across all platforms * Changed perl scripts to use env instead of a hardcoded /usr/bin/perl * Fixed potential misreading of the GCC compiler version in the build scripts * Fixed convergence problems in LAPACK complex GGEV/GGES (Reference-LAPACK #477) * Reduced the stacksize requirements for running the LAPACK testsuite (Reference-LAPACK #335) RISC V: * Fixed compilation on RISCV (missing entry in getarch) POWER: * Fixed compilation for DYNAMIC_ARCH with clang and with older gcc versions * Added support for compilation on FreeBSD/ppc64le * Added optimized POWER10 kernels for SSCAL, DSCAL, CSCAL, ZSCAL * Added optimized POWER10 kernels for SROT, DROT, CDOT, SASUM, DASUM * Improved SSWAP, DSWAP, CSWAP, ZSWAP performance on POWER10 * Improved SCOPY and CCOPY performance on POWER10 * Improved SGEMM and DGEMM performance on POWER10 * Added support for compilation with the NVIDIA HPC compiler x86_64: * Added an optimized bfloat16 GEMM kernel for Cooperlake * Added CPUID autodetection for Intel Rocket Lake and Tiger Lake cpus * Improved the performance of SASUM,DASUM,SROT,DROT on AMD Ryzen cpus * Added support for compilation with the NAG Fortran compiler * Fixed recognition of the AMD AOCC compiler * Fixed compilation for DYNAMIC_ARCH with clang on Windows * Added support for running the BLAS/CBLAS tests on Windows * Fixed signatures of the tls callback functions for Windows x64 * Fixed various issues with fma intrinsics support handling ARM: * Support compilation for embedded Cortex M4 targets via a new option EMBEDDED ARM64: * Fixed the THUNDERX2T99 and NEOVERSEN1 DNRM2/ZNRM2 kernels for inputs with Inf * Added support for the DYNAMIC_LIST option * Added support for compilation with the NVIDIA HPC compiler * Added support for compiling with the NAG Fortran compiler - Remove 0001-Require-gcc-11-for-builtin_cpu_is-power10.patch 0002-patch-to-support-power10-in-builtin_cpu_is-was-backp.patch Upstream fixed in a different way. ==== p7zip ==== Subpackages: p7zip-full - Add patch from Debian to fix build with GCC 11 (boo#1181880) * 0001-Fix-g-warning.patch ==== perl-Net-HTTP ==== Version update (6.20 -> 6.21) - updated to 6.21 see /usr/share/doc/packages/perl-Net-HTTP/Changes 6.21 2021-03-18 21:56:42Z - Accept PeerAddr of 0. (GH#72) (trwyant) ==== policycoreutils ==== Version update (3.1 -> 3.2) Subpackages: policycoreutils-lang python3-policycoreutils - Update to version 3.2 * Tools using sepolgen, e.g. audit2allow, print extended permissions in hexadecimal * sepolgen sorts extended rules like normal ones * `setfiles` doesn't abort on labeling errors - Refreshed get_os_version.patch ==== python-semanage ==== Version update (3.1 -> 3.2) - Minor spec file cleanups - Update to version 3.2 * dropped old and deprecated symbols and functions libsemanage version was bumped to libsemanage.so.2 * libsemanage tries to sync data to prevent empty files in SELinux module store ==== redis ==== - replaced /var/run with /run for all PID file paths ==== rng-tools ==== Version update (6.11 -> 6.12) - update to 6.12: * Fix compiler warning over log message format * Fix some typos in force-reseed documentation in rngd man page * Improve --list option so that we properly capture entropy sources that are available and configured on at build time, but failed initalization at run time (due to lack of hw, or some other error, etc) * Drop the use of libsysfs - we only used it to access a single file, and we can do so with a simple open/read/close. Given the lack of maintenance of libsysfs, we can save lots of effort by dropping this lib ==== rubygem-bootsnap ==== Version update (1.7.2 -> 1.7.3) Subpackages: ruby2.7-rubygem-bootsnap ruby3.0-rubygem-bootsnap - updated to version 1.7.3 * Disable YAML precompilation when encountering YAML tags. (#351) ==== rubygem-rspec-rails ==== Version update (5.0.0 -> 5.0.1) - updated to version 5.0.1 [Full Changelog](https://github.com/rspec/rspec-rails/compare/v5.0.0...v5.0.1) Bug Fixes: * Limit multibyte example descriptions when used in system tests for #method_name which ends up as screenshot names etc. (@y-yagi, #2405, #2487) ==== setools ==== Version update (4.3.0 -> 4.4.0) - Update to the version 4.4.0: * Added support for old Boolean name substitution in seinfo and sesearch. * Added sechecker tool which is a configuration file driven analysis tool. ==== snapper ==== Version update (0.8.15 -> 0.8.16) Subpackages: libsnapper5 snapper-zypp-plugin - fixed creating root config (root prefix handling) (gh#openSUSE/snapper#627) ==== spirv-tools ==== - Add -Wno-error ==== taglib ==== Version update (1.11.2~git20190725.79bc9ccf -> 1.12) Subpackages: libtag1 libtag_c0 - Add missing zlib dependency in devel package - reference download url of tarball - Update to version 1.12: * Added support for WinRT. * Added support for Linux on POWER. * Added support for classical music tags of iTunes 12.5. * Added support for file descriptor to FileStream. * Added support for 'cmID', 'purl', 'egid' MP4 atoms. * Added support for 'GRP1' ID3v2 frame. * Added support for extensible WAV subformat. * Enabled FileRef to detect file types based on the stream content. * Dropped support for Windows 9x and NT 4.0 or older. * Check for mandatory header objects in ASF files. * More tolerant handling of RIFF padding, WAV files, broken MPEG streams. * Improved calculation of Ogg, Opus, Speex, WAV, MP4 bitrates. * Improved Windows compatibility by storing FLAC picture after comments. * Fixed numerical genres in ID3v2.3.0 'TCON' frames. * Fixed consistency of API removing MP4 items when empty values are set. * Fixed consistency of API preferring COMM frames with no description. * Fixed OOB read on invalid Ogg FLAC files (CVE-2018-11439). * Fixed handling of empty MPEG files. * Fixed parsing MP4 mdhd timescale. * Fixed reading MP4 atoms with zero length. * Fixed reading FLAC files with zero-sized seektables. * Fixed handling of lowercase field names in Vorbis Comments. * Fixed handling of 'rate' atoms in MP4 files. * Fixed handling of invalid UTF-8 sequences. * Fixed possible file corruptions when saving Ogg files. * Fixed handling of non-audio blocks, sampling rates, DSD audio in WavPack files. * TableOfContentsFrame::toString() improved. * UserTextIdentificationFrame::toString() improved. * Marked FileRef::create() deprecated. * Marked MPEG::File::save() with boolean parameters deprecated, provide overloads with enum parameters. * Several smaller bug fixes and performance improvements. - Remove obsolete patches: * taglib-versionbump.patch * 0001-Changed-libdir-includedir-variables-to-change-based-.patch ==== thunar ==== Version update (4.16.5 -> 4.16.6) Subpackages: libthunarx-3-0 thunar-lang - Update to version 4.16.6 * Reload current directory before selecting new files (gxo#xfce/thunar#524) * tree-view: Hide menu-item "properties" for unmounted devices * Removed 'the root folder has no parent' dialog box * Revamp documentation to modernize/uniformize accross components * Remove watches on shortcuts (gxo#xfce/thunar#513, gxo#xfce/thunar#47) * Translation Updates

7 9

Call for testers: zypp tech preview
by Benjamin Zeller 29 Jan '22

29 Jan '22

In the last months the zypp team worked on the basics for speeding up and modernizing the zypper/libzypp codebase. Some of those projects are now available to Tumbleweed and can be enabled and tested. Please keep in mind that those changes currently are tech previews, so zypper might crash or even break your system. New RPM transaction backend for zypper: Traditionally zypper executes rpm separately for each operation in a transaction. This requires some hacks and workarounds and is not fully compatible to running all operations in one single transaction. It is also a lot slower for big transactions ( like dup with many packages ). Therefore we have implemented a new backend that runs all operations in a single big transaction via librpm. It can be enabled by setting: ZYPP_SINGLE_RPMTRANS=1 in zyppers environment. Issues/Changes with ZYPP_SINGLE_RPMTRANS=1 zypper ... : - Changes how file conflicts work, since they are now executed by librpm we are not able to generate a callback to ask the user if the error should be ignored. In the presence of file conflicts, the transaction will report an error and will not execute unless --replacefiles is also used. - Currently there is also a issue that could potentially break your system in very specific preconditions. We put in a safety net that will protect you on Tumbleweed, however it still remains a issue for all systems that are PREUsrMerge and use the single transaction mode to apply the update. For example if you are on Leap and want to upgrade to Tumbleweed. This is the bug in question: https://bugzilla.suse.com/show_bug.cgi?id=1189788 - Breaks Yast / PackageKit softwaremanager if enabled system wide: Due to changes in the reporting , especially new reports, this would break the Yast software manager and Packagekit, so if you use one of the two technologies enable this feature explicitly per command: `env ZYPP_SINGLE_RPMTRANS=1 zypper dup`. New zypper HTTP backend: Another project we have been working on is parallelizing downloads, for this a new async downloader backend was implemented. While it currently won't have massive impact on performance due to the frontend code not requesting files asynchronously, it will do some additional mirror rating and as soon as we update the frontend code will bring more benefits. This can be enabled via setting the env var: ZYPP_MEDIANETWORK=1 If you find any bugs or issues please let us know. Preferably via: https://bugzilla.opensuse.org/ Product: openSUSE Tumbleweed Component: libzypp (or zypper if available) And please attach the /var/log/zypper.log to the bugreport. -- Benjamin Zeller<bzeller(a)suse.de> Systems Programmer SUSE Software Solutions Germany GmbH, Maxfeldstr. 5, 90409 Nuremberg, Germany Tel: +49-911-74053-0; Fax: +49-911-7417755;https://www.suse.com/ (HRB 36809, AG Nürnberg) Managing Director: Felix Imendörffer

6 14

Leap 15.3 some apps take 30 seconds to load on some machines and not on others.
by Larry Len Rainey 28 Dec '21

28 Dec '21

5 9

[factory] 15.4 alpha
by Felix Miata 24 Dec '21

24 Dec '21

https://en.opensuse.org/openSUSE:Roadmap seems to suggest 15.4 alpha should be on the mirrors somewhere, but I don't see it on https://mirrors.opensuse.org/ and I'm having no luck finding it elsewhere. I tried to do an update from 15.3 with zypper, but it can't find any mirrors either. What's the 15.4 alpha availability status/forecast? -- Evolution as taught in public schools is, like religion, based on faith, not based on science. Team OS/2 ** Reg. Linux User #211409 ** a11y rocks! Felix Miata

6 7

newlib in cross arm compilers missing nano
by Alin Marin Elena 22 Dec '21

22 Dec '21

How newlib in cross compilers is built at the moment is missing libg_nano and libc_nano. possible other bits too. this is cross-arm-none-newlib-devel this has a consequence not being able to build qmk for example/ also symling to /usr/bin/arm-suse-linux-gnueabi-size seems to miss. this is in cross-arm-binutils Regards, Alin Without Questions there are no Answers! ______________________________________________________________________ Dr. Alin Marin ELENA http://alin.elena.space/ ______________________________________________________________________

3 26

LUKS2 encryption and TPM2 and FIDO authentication
by Benjamin Brunner 22 Dec '21

22 Dec '21

Hi all, we had a look on how to move from LUKS v1 to LUKS v2 and also how to add functionality for alternative authentication mechanisms like TPM2 chips and FIDO devices during the boot process. While there is no Installer support yet and also no final decision on how it will be implemented in detail, we already wanted to share the current status and document what is achievable manually. For all interested and curious who would like to have a look or want to directly test it, Antonio Feijoo <antonio.feijoo(a)suse.com> prepared some step by step guides at https://en.opensuse.org/SDB:LUKS2,_TPM2_and_FIDO2. The documentation should work on Tumbleweed and later on openSUSE Leap 15.4. We would really appreciate any feedback, thoughts, or reports in case you encounter any issues. Last but not least, a huge thanks to all involved for the feedback and support! Regards and thanks Benni -- Benjamin Brunner Engineering Manager System Boot and Init SUSE Software Solutions Germany GmbH Maxfeldstr. 5 90409 Nürnberg Germany HRB 36809, AG Nürnberg Geschäftsführer: Ivo Totev

7 15

useradd - adjust defaults to other tools and distributions?
by Thorsten Kukuk 14 Dec '21

14 Dec '21

Hi, After the discussion the last days about creating users and the defaults used for it, I looked at our defaults and where we deriviate from upstream, other Linux distributions and other tools we use already today. We change explicit: USERGROUPS_ENAB from "yes" to "no". All other tools we provide and other distros do create usergroups by default, so I suggest to change it back to "USERGROUPS_ENAB yes". CREATE_HOME from "yes" to "no". I did never understand why we disabled this. All other tools we provide and other distros create the home directory by default. I would suggest to change that back to "yes". FORCE_SHADOW from "yes" to "no". I also don't understand this change. We should revert that change, so we don't need the hacks in other places to split passwd later during installation. If we enforce the shadow usage later, why not from the beginning? HOME_MODE not set We should set "HOME_MODE 0700" as other distros do. Any comments? Thorsten -- Thorsten Kukuk, Distinguished Engineer, Senior Architect SLES & MicroOS SUSE Software Solutions Germany GmbH, Maxfeldstr. 5, 90409 Nuernberg, Germany Managing Director: Felix Imendoerffer (HRB 36809, AG Nürnberg)

16 28

Review of Software donation process/checklist
by Lubos Kocman 08 Dec '21

08 Dec '21

Hello openSUSE! I worked on a simple checklist that represents step necessary to donate software under the openSUSE project wings. The usecase is e.g. donation of software from github.com/SUSE under /openSUSE wings. Or any other future software donation. I've already asked Release team for initial feedback, and now I'd like to ask factory@ as well. https://en.opensuse.org/Donation:Software Any feedback is welcome. You might as well use the discussion tab feature in Wiki to submit your proposals/snippets. Let's keep it simple. Let's work on it till next Thursday 1st of Dec, incorporate suggested changes and make it official. Thank you -- Best regards Lubos Kocman openSUSE Leap Release Manager

1 1

Java factory is missing for Leap 15.3
by Daniel Noga 05 Dec '21

05 Dec '21

Java factory is missing for Leap 15.3. Is it known issue? It is useful for Java programing on my Leap 15.3 as I use multiple new Javas which are not present in main repositories.

3 2

New Tumbleweed snapshot 20211129 released!
by Dominique Leuenberger 30 Nov '21

30 Nov '21

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: gnome-shell iso-codes (4.7.0 -> 4.8.0) kernel-source (5.15.3 -> 5.15.5) libreoffice (7.2.3.1 -> 7.2.3.2) libsoup (3.0.2 -> 3.0.3) libsoup2 (2.74.1 -> 2.74.2) libwpe (1.10.1 -> 1.12.0) python-distro python-pbr (5.6.0 -> 5.7.0) python-psycopg2 (2.9.1 -> 2.9.2) python-requests-toolbelt ristretto (0.11.0 -> 0.12.1) subversion transmission wpebackend-fdo (1.10.0 -> 1.12.0) z3 (4.8.12 -> 4.8.13) === Details === ==== gnome-shell ==== Subpackages: gnome-extensions gnome-shell-calendar gnome-shell-lang - Revert last change, turns out this is what breaks locking in Budgie desktop ==== iso-codes ==== Version update (4.7.0 -> 4.8.0) Subpackages: iso-codes-lang - update to 4.8.0: * ISO 3166-1: Add flag emoji to countries. Thanks to Pander for the suggestion. Fixes #19 * ISO 639-5: New translation for Chinese (Simplified) * ISO 3166-2: Major update of data. Thanks to the script of Kevin Kaiser, which enables the download of ISO pages and parses the data. Fixes #15, #16, #27 * Rename ChangeLog.md to CHANGELOG.md and follow the suggestions from [Keep a Changelog](https://keepachangelog.com/en/1.0.0/) * Move all CHANGELOG entries from versions before 4.0 to an archive file (CHANGELOG-PRE-4.0.md) in order to reduce the massive size of this CHANGELOG. * Translation updates for ISO 3166-1 * Translation updates for ISO 3166-2 * Translation updates for ISO 639-2 * Translation updates for ISO 639-3 * Translation updates for ISO 639-5 * Translation updates for ISO 15924 ==== kernel-source ==== Version update (5.15.3 -> 5.15.5) Subpackages: kernel-default kernel-docs - Linux 5.15.5 (bsc#1012628). - arm64: zynqmp: Do not duplicate flash partition label property (bsc#1012628). - arm64: zynqmp: Fix serial compatible string (bsc#1012628). - clk: sunxi-ng: Unregister clocks/resets when unbinding (bsc#1012628). - ARM: dts: sunxi: Fix OPPs node name (bsc#1012628). - arm64: dts: allwinner: h5: Fix GPU thermal zone node name (bsc#1012628). - arm64: dts: allwinner: a100: Fix thermal zone node name (bsc#1012628). - staging: wfx: ensure IRQ is ready before enabling it (bsc#1012628). - ARM: dts: BCM5301X: Fix nodes names (bsc#1012628). - ARM: dts: BCM5301X: Fix MDIO mux binding (bsc#1012628). - ARM: dts: NSP: Fix mpcore, mmc node names (bsc#1012628). - arm64: dts: broadcom: bcm4908: Move reboot syscon out of bus (bsc#1012628). - scsi: pm80xx: Fix memory leak during rmmod (bsc#1012628). - scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq() (bsc#1012628). - ASoC: mediatek: mt8195: Add missing of_node_put() (bsc#1012628). - arm64: dts: hisilicon: fix arm,sp805 compatible string (bsc#1012628). - RDMA/bnxt_re: Check if the vlan is valid before reporting (bsc#1012628). - bus: ti-sysc: Add quirk handling for reinit on context lost (bsc#1012628). - bus: ti-sysc: Use context lost quirk for otg (bsc#1012628). - usb: musb: tusb6010: check return value after calling platform_get_resource() (bsc#1012628). - usb: typec: tipd: Remove WARN_ON in tps6598x_block_read (bsc#1012628). - ARM: dts: ux500: Skomer regulator fixes (bsc#1012628). - staging: rtl8723bs: remove possible deadlock when disconnect (v2) (bsc#1012628). - staging: rtl8723bs: remove a second possible deadlock (bsc#1012628). - staging: rtl8723bs: remove a third possible deadlock (bsc#1012628). - ARM: BCM53016: Specify switch ports for Meraki MR32 (bsc#1012628). - arm64: dts: qcom: msm8998: Fix CPU/L2 idle state latency and residency (bsc#1012628). - arm64: dts: qcom: ipq6018: Fix qcom,controlled-remotely property (bsc#1012628). - arm64: dts: qcom: ipq8074: Fix qcom,controlled-remotely property (bsc#1012628). - arm64: dts: qcom: sdm845: Fix qcom,controlled-remotely property (bsc#1012628). - arm64: dts: freescale: fix arm,sp805 compatible string (bsc#1012628). - arm64: dts: ls1012a: Add serial alias for ls1012a-rdb (bsc#1012628). - RDMA/rxe: Separate HW and SW l/rkeys (bsc#1012628). - ASoC: SOF: Intel: hda-dai: fix potential locking issue (bsc#1012628). - scsi: core: Fix scsi_mode_sense() buffer length handling (bsc#1012628). - ALSA: usb-audio: disable implicit feedback sync for Behringer UFX1204 and UFX1604 (bsc#1012628). - clk: imx: imx6ul: Move csi_sel mux to correct base register (bsc#1012628). - ASoC: es8316: Use IRQF_NO_AUTOEN when requesting the IRQ (bsc#1012628). - ASoC: rt5651: Use IRQF_NO_AUTOEN when requesting the IRQ (bsc#1012628). - ASoC: nau8824: Add DMI quirk mechanism for active-high jack-detect (bsc#1012628). - scsi: advansys: Fix kernel pointer leak (bsc#1012628). - scsi: smartpqi: Add controller handshake during kdump (bsc#1012628). - arm64: dts: imx8mm-kontron: Fix reset delays for ethernet PHY (bsc#1012628). - ALSA: intel-dsp-config: add quirk for APL/GLK/TGL devices based on ES8336 codec (bsc#1012628). - ASoC: Intel: soc-acpi: add missing quirk for TGL SDCA single amp (bsc#1012628). - ASoC: Intel: sof_sdw: add missing quirk for Dell SKU 0A45 (bsc#1012628). - firmware_loader: fix pre-allocated buf built-in firmware use (bsc#1012628). - HID: multitouch: disable sticky fingers for UPERFECT Y (bsc#1012628). - ALSA: usb-audio: Add support for the Pioneer DJM 750MK2 Mixer/Soundcard (bsc#1012628). - ARM: dts: omap: fix gpmc,mux-add-data type (bsc#1012628). - usb: host: ohci-tmio: check return value after calling platform_get_resource() (bsc#1012628). - ASoC: rt5682: fix a little pop while playback (bsc#1012628). - ARM: dts: ls1021a: move thermal-zones node out of soc/ (bsc#1012628). - ARM: dts: ls1021a-tsn: use generic "jedec,spi-nor" compatible for flash (bsc#1012628). - ALSA: ISA: not for M68K (bsc#1012628). - iommu/vt-d: Do not falsely log intel_iommu is unsupported kernel option (bsc#1012628). - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (bsc#1012628). - MIPS: sni: Fix the build (bsc#1012628). - scsi: scsi_debug: Fix out-of-bound read in resp_readcap16() (bsc#1012628). - scsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs() (bsc#1012628). - scsi: target: Fix ordered tag handling (bsc#1012628). - scsi: target: Fix alua_tg_pt_gps_count tracking (bsc#1012628). - iio: imu: st_lsm6dsx: Avoid potential array overflow in st_lsm6dsx_set_odr() (bsc#1012628). - RDMA/core: Use kvzalloc when allocating the struct ib_port (bsc#1012628). - scsi: lpfc: Fix use-after-free in lpfc_unreg_rpi() routine (bsc#1012628). - scsi: lpfc: Fix link down processing to address NULL pointer dereference (bsc#1012628). - scsi: lpfc: Allow fabric node recovery if recovery is in progress before devloss (bsc#1012628). - memory: tegra20-emc: Add runtime dependency on devfreq governor module (bsc#1012628). - powerpc/5200: dts: fix memory node unit name (bsc#1012628). - ARM: dts: qcom: fix memory and mdio nodes naming for RB3011 (bsc#1012628). - arm64: dts: qcom: Fix node name of rpm-msg-ram device nodes (bsc#1012628). - ALSA: gus: fix null pointer dereference on pointer block (bsc#1012628). - ALSA: usb-audio: fix null pointer dereference on pointer cs_desc (bsc#1012628). - clk: at91: sama7g5: remove prescaler part of master clock (bsc#1012628). - iommu/dart: Initialize DART_STREAMS_ENABLE (bsc#1012628). - powerpc/dcr: Use cmplwi instead of 3-argument cmpli (bsc#1012628). - powerpc/8xx: Fix Oops with STRICT_KERNEL_RWX without DEBUG_RODATA_TEST (bsc#1012628). - sh: check return code of request_irq (bsc#1012628). - maple: fix wrong return value of maple_bus_init() (bsc#1012628). - f2fs: fix up f2fs_lookup tracepoints (bsc#1012628). - f2fs: fix to use WHINT_MODE (bsc#1012628). - f2fs: fix wrong condition to trigger background checkpoint correctly (bsc#1012628). - sh: fix kconfig unmet dependency warning for FRAME_POINTER (bsc#1012628). - sh: math-emu: drop unused functions (bsc#1012628). - sh: define __BIG_ENDIAN for math-emu (bsc#1012628). - f2fs: compress: disallow disabling compress on non-empty compressed file (bsc#1012628). - f2fs: fix incorrect return value in f2fs_sanity_check_ckpt() (bsc#1012628). - clk: ingenic: Fix bugs with divided dividers (bsc#1012628). - clk/ast2600: Fix soc revision for AHB (bsc#1012628). - clk: qcom: gcc-msm8996: Drop (again) gcc_aggre1_pnoc_ahb_clk (bsc#1012628). - KVM: arm64: Fix host stage-2 finalization (bsc#1012628). - mips: BCM63XX: ensure that CPU_SUPPORTS_32BIT_KERNEL is set (bsc#1012628). - MIPS: boot/compressed/: add __bswapdi2() to target for ZSTD decompression (bsc#1012628). - sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain() (bsc#1012628). - sched/fair: Prevent dead task groups from regaining cfs_rq's (bsc#1012628). - perf/x86/vlbr: Add c->flags to vlbr event constraints (bsc#1012628). - blkcg: Remove extra blkcg_bio_issue_init (bsc#1012628). - tracing/histogram: Do not copy the fixed-size char array field over the field size (bsc#1012628). - perf bpf: Avoid memory leak from perf_env__insert_btf() (bsc#1012628). - perf bench futex: Fix memory leak of perf_cpu_map__new() (bsc#1012628). - perf tests: Remove bash construct from record+zstd_comp_decomp.sh (bsc#1012628). - drm/nouveau: hdmigv100.c: fix corrupted HDMI Vendor InfoFrame (bsc#1012628). - bpf: Fix inner map state pruning regression (bsc#1012628). - samples/bpf: Fix summary per-sec stats in xdp_sample_user (bsc#1012628). - net/ipa: ipa_resource: Fix wrong for loop range (bsc#1012628). - tcp: Fix uninitialized access in skb frags array for Rx 0cp (bsc#1012628). - tracing: Add length protection to histogram string copies (bsc#1012628). - nl80211: fix radio statistics in survey dump (bsc#1012628). - mac80211: fix monitor_sdata RCU/locking assertions (bsc#1012628). - net: ipa: HOLB register sometimes must be written twice (bsc#1012628). - net: ipa: disable HOLB drop when updating timer (bsc#1012628). - selftests: gpio: fix gpio compiling error (bsc#1012628). - net: bnx2x: fix variable dereferenced before check (bsc#1012628). - bnxt_en: reject indirect blk offload when hw-tc-offload is off (bsc#1012628). - tipc: only accept encrypted MSG_CRYPTO msgs (bsc#1012628). - sock: fix /proc/net/sockstat underflow in sk_clone_lock() (bsc#1012628). - net/smc: Make sure the link_id is unique (bsc#1012628). - NFSD: Fix exposure in nfsd4_decode_bitmap() (bsc#1012628). - iavf: Fix return of set the new channel count (bsc#1012628). - iavf: check for null in iavf_fix_features (bsc#1012628). - iavf: free q_vectors before queues in iavf_disable_vf (bsc#1012628). - iavf: don't clear a lock we don't hold (bsc#1012628). - iavf: Fix failure to exit out from last all-multicast mode (bsc#1012628). - iavf: prevent accidental free of filter structure (bsc#1012628). - iavf: validate pointers (bsc#1012628). - iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset (bsc#1012628). - iavf: Fix for setting queues to 0 (bsc#1012628). - iavf: Restore VLAN filters after link down (bsc#1012628). - bpf: Fix toctou on read-only map's constant scalar tracking (bsc#1012628). - MIPS: generic/yamon-dt: fix uninitialized variable error (bsc#1012628). - mips: bcm63xx: add support for clk_get_parent() (bsc#1012628). - mips: lantiq: add support for clk_get_parent() (bsc#1012628). - gpio: rockchip: needs GENERIC_IRQ_CHIP to fix build errors (bsc#1012628). - platform/x86: hp_accel: Fix an error handling path in 'lis3lv02d_probe()' (bsc#1012628). - platform/x86: think-lmi: Abort probe on analyze failure (bsc#1012628). - udp: Validate checksum in udp_read_sock() (bsc#1012628). - btrfs: make 1-bit bit-fields of scrub_page unsigned int (bsc#1012628). - RDMA/core: Set send and receive CQ before forwarding to the driver (bsc#1012628). - net/mlx5e: kTLS, Fix crash in RX resync flow (bsc#1012628). - net/mlx5e: Wait for concurrent flow deletion during neigh/fib events (bsc#1012628). - net/mlx5: E-Switch, Fix resetting of encap mode when entering switchdev (bsc#1012628). - net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove() (bsc#1012628). - net/mlx5: Update error handler for UCTX and UMEM (bsc#1012628). - net/mlx5: E-Switch, rebuild lag only when needed (bsc#1012628). - net/mlx5e: CT, Fix multiple allocations and memleak of mod acts (bsc#1012628). - net/mlx5: Lag, update tracker when state change event received (bsc#1012628). - net/mlx5: E-Switch, return error if encap isn't supported (bsc#1012628). - scsi: ufs: core: Improve SCSI abort handling (bsc#1012628). - scsi: core: sysfs: Fix hang when device state is set via sysfs (bsc#1012628). - scsi: ufs: core: Fix task management completion timeout race (bsc#1012628). - scsi: ufs: core: Fix another task management completion race (bsc#1012628). - net: mvmdio: fix compilation warning (bsc#1012628). - net: sched: act_mirred: drop dst for the direction from egress to ingress (bsc#1012628). - net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove (bsc#1012628). - net: virtio_net_hdr_to_skb: count transport header in UFO (bsc#1012628). - i40e: Fix correct max_pkt_size on VF RX queue (bsc#1012628). - i40e: Fix NULL ptr dereference on VSI filter sync (bsc#1012628). - i40e: Fix changing previously set num_queue_pairs for PFs (bsc#1012628). - i40e: Fix ping is lost after configuring ADq on VF (bsc#1012628). - RDMA/mlx4: Do not fail the registration on port stats (bsc#1012628). - i40e: Fix warning message and call stack during rmmod i40e driver (bsc#1012628). - i40e: Fix creation of first queue by omitting it if is not power of two (bsc#1012628). - i40e: Fix display error code in dmesg (bsc#1012628). - NFC: reorganize the functions in nci_request (bsc#1012628). - NFC: reorder the logic in nfc_{un,}register_device (bsc#1012628). - NFC: add NCI_UNREG flag to eliminate the race (bsc#1012628). - e100: fix device suspend/resume (bsc#1012628). - ptp: ocp: Fix a couple NULL vs IS_ERR() checks (bsc#1012628). - tools build: Fix removal of feature-sync-compare-and-swap feature detection (bsc#1012628). - riscv: fix building external modules (bsc#1012628). - KVM: PPC: Book3S HV: Use GLOBAL_TOC for kvmppc_h_set_dabr/xdabr() (bsc#1012628). - powerpc: clean vdso32 and vdso64 directories (bsc#1012628). - powerpc/pseries: rename numa_dist_table to form2_distances (bsc#1012628). - powerpc/pseries: Fix numa FORM2 parsing fallback code (bsc#1012628). - pinctrl: qcom: sdm845: Enable dual edge errata (bsc#1012628). - pinctrl: qcom: sm8350: Correct UFS and SDC offsets (bsc#1012628). - perf/x86/intel/uncore: Fix filter_tid mask for CHA events on Skylake Server (bsc#1012628). - perf/x86/intel/uncore: Fix IIO event constraints for Skylake Server (bsc#1012628). - perf/x86/intel/uncore: Fix IIO event constraints for Snowridge (bsc#1012628). - s390/kexec: fix return code handling (bsc#1012628). - blk-cgroup: fix missing put device in error path from blkg_conf_pref() (bsc#1012628). - dmaengine: remove debugfs #ifdef (bsc#1012628). - tun: fix bonding active backup with arp monitoring (bsc#1012628). - Revert "mark pstore-blk as broken" (bsc#1012628). - pstore/blk: Use "%lu" to format unsigned long (bsc#1012628). - hexagon: export raw I/O routines for modules (bsc#1012628). - hexagon: clean up timer-regs.h (bsc#1012628). - tipc: check for null after calling kmemdup (bsc#1012628). - ipc: WARN if trying to remove ipc object which is absent (bsc#1012628). - shm: extend forced shm destroy to support objects from several IPC nses (bsc#1012628). - mm: kmemleak: slob: respect SLAB_NOLEAKTRACE flag (bsc#1012628). - hugetlb, userfaultfd: fix reservation restore on userfaultfd error (bsc#1012628). - kmap_local: don't assume kmap PTEs are linear arrays in memory (bsc#1012628). - mm/damon/dbgfs: use '__GFP_NOWARN' for user-specified size buffer allocation (bsc#1012628). - mm/damon/dbgfs: fix missed use of damon_dbgfs_lock (bsc#1012628). - x86/boot: Pull up cmdline preparation and early param parsing (bsc#1012628). - x86/sgx: Fix free page accounting (bsc#1012628). - x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails (bsc#1012628). - KVM: x86: Assume a 64-bit hypercall for guests with protected state (bsc#1012628). - KVM: x86: Fix uninitialized eoi_exit_bitmap usage in vcpu_load_eoi_exitmap() (bsc#1012628). - KVM: x86/mmu: include EFER.LMA in extended mmu role (bsc#1012628). - KVM: x86/xen: Fix get_attr of KVM_XEN_ATTR_TYPE_SHARED_INFO (bsc#1012628). - powerpc/signal32: Fix sigset_t copy (bsc#1012628). - powerpc/xive: Change IRQ domain to a tree domain (bsc#1012628). - powerpc/8xx: Fix pinned TLBs with CONFIG_STRICT_KERNEL_RWX (bsc#1012628). - Revert "drm/i915/tgl/dsi: Gate the ddi clocks after pll mapping" (bsc#1012628). - Revert "parisc: Reduce sigreturn trampoline to 3 instructions" (bsc#1012628). - ata: libata: improve ata_read_log_page() error message (bsc#1012628). - ata: libata: add missing ata_identify_page_supported() calls (bsc#1012628). - scsi: qla2xxx: Fix mailbox direction flags in qla2xxx_get_adapter_id() (bsc#1012628). - pinctrl: ralink: include 'ralink_regs.h' in 'pinctrl-mt7620.c' (bsc#1012628). - s390/setup: avoid reserving memory above identity mapping (bsc#1012628). - s390/boot: simplify and fix kernel memory layout setup (bsc#1012628). - s390/vdso: filter out -mstack-guard and -mstack-size (bsc#1012628). - s390/kexec: fix memory leak of ipl report buffer (bsc#1012628). - s390/dump: fix copying to user-space of swapped kdump oldmem (bsc#1012628). - block: Check ADMIN before NICE for IOPRIO_CLASS_RT (bsc#1012628). - fbdev: Prevent probing generic drivers if a FB is already registered (bsc#1012628). - KVM: SEV: Disallow COPY_ENC_CONTEXT_FROM if target has created vCPUs (bsc#1012628). - KVM: nVMX: don't use vcpu->arch.efer when checking host state on nested state load (bsc#1012628). - drm/cma-helper: Release non-coherent memory with dma_free_noncoherent() (bsc#1012628). - printk: restore flushing of NMI buffers on remote CPUs after NMI backtraces (bsc#1012628). - udf: Fix crash after seekdir (bsc#1012628). - spi: fix use-after-free of the add_lock mutex (bsc#1012628). - net: stmmac: socfpga: add runtime suspend/resume callback for stratix10 platform (bsc#1012628). - Drivers: hv: balloon: Use VMBUS_RING_SIZE() wrapper for dm_ring_size (bsc#1012628). - btrfs: fix memory ordering between normal and ordered work functions (bsc#1012628). - fs: handle circular mappings correctly (bsc#1012628). - net: stmmac: Fix signed/unsigned wreckage (bsc#1012628). - parisc/sticon: fix reverse colors (bsc#1012628). - cfg80211: call cfg80211_stop_ap when switch from P2P_GO type (bsc#1012628). - mac80211: fix radiotap header generation (bsc#1012628). - mac80211: drop check for DONT_REORDER in __ieee80211_select_queue (bsc#1012628). - drm/amd/display: Update swizzle mode enums (bsc#1012628). - drm/amd/display: Limit max DSC target bpp for specific monitors (bsc#1012628). - drm/i915/guc: Fix outstanding G2H accounting (bsc#1012628). - drm/i915/guc: Don't enable scheduling on a banned context, guc_id invalid, not registered (bsc#1012628). - drm/i915/guc: Workaround reset G2H is received after schedule done G2H (bsc#1012628). - drm/i915/guc: Don't drop ce->guc_active.lock when unwinding context (bsc#1012628). - drm/i915/guc: Unwind context requests in reverse order (bsc#1012628). - drm/udl: fix control-message timeout (bsc#1012628). - drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap (bsc#1012628). - drm/nouveau: Add a dedicated mutex for the clients list (bsc#1012628). - drm/nouveau: use drm_dev_unplug() during device removal (bsc#1012628). - drm/nouveau: clean up all clients on device removal (bsc#1012628). - drm/i915/dp: Ensure sink rate values are always valid (bsc#1012628). - drm/i915/dp: Ensure max link params are always valid (bsc#1012628). - drm/i915: Fix type1 DVI DP dual mode adapter heuristic for modern platforms (bsc#1012628). - drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga and dvi connectors (bsc#1012628). - drm/amd/pm: avoid duplicate powergate/ungate setting (bsc#1012628). - signal: Implement force_fatal_sig (bsc#1012628). - exit/syscall_user_dispatch: Send ordinary signals on failure (bsc#1012628). - signal/powerpc: On swapcontext failure force SIGSEGV (bsc#1012628). - signal/s390: Use force_sigsegv in default_trap_handler (bsc#1012628). - signal/sparc32: Exit with a fatal signal when try_to_clear_window_buffer fails (bsc#1012628). - signal/sparc32: In setup_rt_frame and setup_fram use force_fatal_sig (bsc#1012628). - signal/vm86_32: Properly send SIGSEGV when the vm86 state cannot be saved (bsc#1012628). - signal/x86: In emulate_vsyscall force a signal instead of calling do_exit (bsc#1012628). - signal: Replace force_sigsegv(SIGSEGV) with force_fatal_sig(SIGSEGV) (bsc#1012628). - signal: Don't always set SA_IMMUTABLE for forced signals (bsc#1012628). - signal: Replace force_fatal_sig with force_exit_sig when in doubt (bsc#1012628). - hugetlbfs: flush TLBs correctly after huge_pmd_unshare (bsc#1012628). - RDMA/netlink: Add __maybe_unused to static inline in C file (bsc#1012628). - bpf: Forbid bpf_ktime_get_coarse_ns and bpf_timer_* in tracing progs (bsc#1012628). - selinux: fix NULL-pointer dereference when hashtab allocation fails (bsc#1012628). - ASoC: DAPM: Cover regression by kctl change notification fix (bsc#1012628). - ASoC: rsnd: fixup DMAEngine API (bsc#1012628). - usb: max-3421: Use driver data instead of maintaining a list of bound devices (bsc#1012628). - ice: Fix VF true promiscuous mode (bsc#1012628). - ice: Delete always true check of PF pointer (bsc#1012628). - fs: export an inode_update_time helper (bsc#1012628). - btrfs: update device path inode time instead of bd_inode (bsc#1012628). - net: add and use skb_unclone_keeptruesize() helper (bsc#1012628). - x86/Kconfig: Fix an unused variable error in dell-smm-hwmon (bsc#1012628). - ALSA: hda: hdac_ext_stream: fix potential locking issues (bsc#1012628). - ALSA: hda: hdac_stream: fix potential locking issue in snd_hdac_stream_assign() (bsc#1012628). - Update config files. - commit 83fc974 - Linux 5.15.4 (bsc#1012628). - string: uninline memcpy_and_pad (bsc#1012628). - Revert "drm: fb_helper: improve CONFIG_FB dependency" (bsc#1012628). - Revert "drm: fb_helper: fix CONFIG_FB dependency" (bsc#1012628). - btrfs: introduce btrfs_is_data_reloc_root (bsc#1012628). - btrfs: zoned: add a dedicated data relocation block group (bsc#1012628). - btrfs: zoned: only allow one process to add pages to a relocation inode (bsc#1012628). - btrfs: zoned: use regular writes for relocation (bsc#1012628). - btrfs: check for relocation inodes on zoned btrfs in should_nocow (bsc#1012628). - btrfs: zoned: allow preallocation for relocation inodes (bsc#1012628). - fortify: Explicitly disable Clang support (bsc#1012628). - block: Add a helper to validate the block size (bsc#1012628). - loop: Use blk_validate_block_size() to validate block size (bsc#1012628). - Bluetooth: btusb: Add support for TP-Link UB500 Adapter (bsc#1012628). - parisc/entry: fix trace test in syscall exit path (bsc#1012628). - PCI/MSI: Deal with devices lying about their MSI mask capability (bsc#1012628). - PCI: Add MSI masking quirk for Nvidia ION AHCI (bsc#1012628). - perf/core: Avoid put_page() when GUP fails (bsc#1012628). - thermal: Fix NULL pointer dereferences in of_thermal_ functions (bsc#1012628). - Revert "ACPI: scan: Release PM resources blocked by unused objects" (bsc#1012628). - Update config files. - commit f51b3ce ==== libreoffice ==== Version update (7.2.3.1 -> 7.2.3.2) Subpackages: libreoffice-base libreoffice-calc libreoffice-draw libreoffice-filters-optional libreoffice-gnome libreoffice-gtk3 libreoffice-icon-themes libreoffice-impress libreoffice-l10n-cs libreoffice-l10n-da libreoffice-l10n-de libreoffice-l10n-el libreoffice-l10n-en libreoffice-l10n-en_GB libreoffice-l10n-es libreoffice-l10n-fr libreoffice-l10n-hu libreoffice-l10n-it libreoffice-l10n-ja libreoffice-l10n-pl libreoffice-l10n-pt_BR libreoffice-l10n-ru libreoffice-l10n-zh_CN libreoffice-l10n-zh_TW libreoffice-mailmerge libreoffice-math libreoffice-pyuno libreoffice-qt5 libreoffice-writer libreofficekit - Update to 7.2.3.2 ==== libsoup ==== Version update (3.0.2 -> 3.0.3) Subpackages: libsoup-3_0-0 libsoup-lang typelib-1_0-Soup-3_0 - Update to version 3.0.3: + Fix various HTTP/2 issues. + Error when libsoup2 has been loaded before libsoup3. + Fix memory leak when using TLS. ==== libsoup2 ==== Version update (2.74.1 -> 2.74.2) Subpackages: libsoup-2_4-1 libsoup2-lang typelib-1_0-Soup-2_4 - Update to version 2.74.2: + Error when libsoup3 is already loaded before libsoup2. ==== libwpe ==== Version update (1.10.1 -> 1.12.0) - Update to version 1.12.0: + New API to handle requests initiated by web content to (un)fullscreen web views. ==== python-distro ==== - Tests: Set locale to UTF-8 to fix tests on Leap 15.3. ==== python-pbr ==== Version update (5.6.0 -> 5.7.0) - update to 5.7.0: * Add a PEP517 interface * PBR package testing improvements * Run python3.9 test jobs * Correct comment for 'D1\_D2\_SETUP\_ARGS' ==== python-psycopg2 ==== Version update (2.9.1 -> 2.9.2) - update to 2.9.2: * Raise `ValueError` for dates >= Y10k (:ticket:`#1307`). * `~psycopg2.errorcodes` map and `~psycopg2.errors` classes updated to PostgreSQL 14. * Add preliminary support for Python 3.11 (:tickets:`#1376, #1386`). * Wheel package compiled against OpenSSL 1.1.1l and PostgreSQL 14.1 ==== python-requests-toolbelt ==== - Regenerate test_certs.p12 due to the upstream certificate expiring ==== ristretto ==== Version update (0.11.0 -> 0.12.1) Subpackages: ristretto-lang - update to 0.12.1: * GLib >= 2.44.0 * Optimize sorting by content type * Load images asynchronously (gxo#apps/ristretto#16, gxo#apps/ristretto#29, gxo#apps/ristretto#32, gxo#apps/ristretto!34) * Increase image loading buffer size (gxo#apps/ristretto!34) * Allow to display all files in the open dialog (gxo#apps/ristretto!33) * Rework the file opening procedure (gxo#apps/ristretto!33) * Fix a memory leak when closing the window directly * Refactoring: Clarify thumbnailer queue management * Thumbnailer: Do not empty an unprocessed file list * Update window title on image deletion or insertion * Perform content*based filtering wherever necessary * Set device scale for animated images * Properly recognize SVG compressed image files * Use the generic pixbuf loader for RAW image files * Fix pointer behavior in fullscreen mode * Icon bar: Properly highlight item under the cursor * Icon bar: Center on the active item for any size change * Fix regression: Exif orientation is not respected (gxo#apps/ristretto#69) * Do not try to load images whose pixbuf is not available (gxo#apps/ristretto!34) * Fix memory management of image loading objects (gxo#apps/ristretto!34) * Use URIs instead of filenames in the `.desktop` file (gxo#apps/ristretto#49) * Directory loading: Allow to load a directory via the cli * Flatpak: Access remote locations with GVfs * Directory loading: Fix improper use of GFileEnumerator APIs (gxo#apps/ristretto#68) * Translation Updates: - Update to version 0.12.0 * Allow to choose the default scale (gxo#apps/ristretto!29) * Keep the scale in memory for each loaded image (gxo#apps/ristretto#7, gxo#apps/ristretto#17, gxo#apps/ristretto!28) * Toggle fullscreen mode by double clicking on the image * Optimize directory loading (gxo#apps/ristretto#20, gxo#apps/ristretto#22, gxo#apps/ristretto#32, gxo#apps/ristretto#37, gxo#apps/ristretto!31) * Optimize image viewer redraw: Disable overlay scrolling (gxo#apps/ristretto#64) * Optimize image viewer redraw: Reuse source surface (gxo#apps/ristretto#64, gxo#apps/ristretto!26) * Avoid using Cairo Xlib backend to create surfaces (gxo#apps/ristretto#60, gxo#apps/ristretto#61, gxo#apps/ristretto#62, gxo#apps/ristretto!25) * Optimize image viewer redraw: Animation (gxo#apps/ristretto#64) * Optimize image viewer redraw: Background color (gxo#apps/ristretto#64) * Optimize image viewer redraw: Clock (gxo#apps/ristretto#64) * Optimize image viewer redraw: Selection box (gxo#apps/ristretto#64) * Don't redraw the main window when it loses focus (gxo#apps/ristretto#64) * Remove the shadow of the toolbar buttons (gxo#apps/ristretto#51, gxo#apps/ristretto#64) * Hide thumbnail scrollbar when unused (gxo#apps/ristretto!24) * Use the same background for the image and the thumbnails (gxo#apps/ristretto#36, gxo#apps/ristretto!23) * Drop preferences-desktop-default-applications icon * Flatpak build (gxo#apps/ristretto!32) * Refactoring: Use only one file filter for the app * Refactoring: Icon bar adjustments * Cleanup: `icon_bar.c` * Cleanup: Pass orientation directly from file to viewer * Code refactoring: Image viewer adjustments, scale and drawing (gxo#apps/ristretto!27) * Use integers for the image rendering rectangle * Code cleanup: Build sanitation, obsolete code removal, spacing, normalization (gxo#apps/ristretto!22) * Transfer contents from dispose() to finalize() * Add debugging macros * Protect asynchronous jobs from an application exit * Fix position of the active item in the icon bar when vertical (gxo#apps/ristretto#34) * Take into account the device scale (gxo#apps/ristretto#47, gxo#apps/ristretto!30) * Properly load images via drag and drop (gxo#apps/ristretto#67) * Delay GdkPixbufLoader "closed" signal handler * Use the same scale factor to zoom via action and scrolling * Fix a lack of centering when zooming via the menu action * Fix some memory leak (several commits of this kind) * Fix file creation monitoring * Try to display the image on `GDK_PIXBUF_ERROR_CORRUPT_IMAGE` (gxo#apps/ristretto#39) * Always set adjustment upper bounds greater than page sizes (gxo#apps/ristretto#35) * Scaling/zoom corrections (gxo#apps/ristretto#30, gxo#apps/ristretto!8) * Fix animated GIF display * Automate and sanitize memory management of sources (gxo#apps/ristretto#65) * Fix `rstto_icon_bar_rows_reordered()` (gxo#apps/ristretto#48) * Chain up to parent in dispose() and finalize() * Translation Updates ==== subversion ==== Subpackages: libsvn_auth_gnome_keyring-1-0 libsvn_auth_kwallet-1-0 subversion-bash-completion subversion-perl subversion-server subversion-tools - Added hardening to systemd service(s) (bsc#1181400). Modified: * svnserve.service ==== transmission ==== Subpackages: transmission-common transmission-gtk transmission-gtk-lang - Added hardening to systemd service(s) (bsc#1181400). Added patch(es): * harden_transmission-daemon.service.patch ==== wpebackend-fdo ==== Version update (1.10.0 -> 1.12.0) - Update to version 1.12.0: + Added API to obtain the wl_resource for SHM exported buffers. + Added unstable DMA-BUF pool API for buffer management. + Fixed UI process getting stuck when navigating across different security origins. + Fixed invalid usage of Wayland client connections in the nested compositor which caused crashes in some situations. + Made it easier to override where Meson looks for wayland-scanner during cross-compilation, using a native machine file. ==== z3 ==== Version update (4.8.12 -> 4.8.13) - update to 4.8.13: The release integrates various bug fixes and tuning.

1 0

Outdated packaging desktop menu categories wiki page
by Vojtěch Zeisek 30 Nov '21

30 Nov '21

Hello, <https://en.opensuse.org/openSUSE:Packaging_desktop_menu_categories#Science> clearly lists category Biology, but <https://build.opensuse.org/package/ live_build_log/home:vojtaeus/bandage/openSUSE_Leap_15.2/x86_64> says WARNING: Category "Biology" is unknown \! WARNING: it is ignored, until you registered a Category at opensuse-packaging(a)opensuse.org . I wonder if this is reason for packaging failure of <https://build.opensuse.org/package/show/home:vojtaeus/bandage> and <https://build.opensuse.org/package/show/home:vojtaeus/seaview> (well, it has also another problem...) OK, "rpm --eval %suse_update_desktop_file" points to /usr/lib/rpm/ suse_update_desktop_file.sh and this to /usr/lib/rpm/map-desktop-category.sh There I see "#Education and Science Menu:" and among there Biology. OK, so should I use "Categories=Education and Science;Biology;" in the desktop file? "Categories=Science;Biology;" seems wrong, but when I tried "Categories=Education and Science;Biology;" it also failed, so I don't know how, which form is correct... Could perhaps someone update the wiki page...? Sincerely, V. -- Vojtěch Zeisek https://trapa.cz/ Komunita openSUSE GNU/Linuxu Community of the openSUSE GNU/Linux https://www.opensuse.org/

1 0

New Tumbleweed snapshot 20211128 released!
by Dominique Leuenberger 29 Nov '21

29 Nov '21

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: autoyast2 (4.4.22 -> 4.4.23) ibmtss kdump libdrm (2.4.107 -> 2.4.109) libjpeg-turbo (2.1.1 -> 2.1.2) openvpn (2.5.3 -> 2.5.4) policycoreutils python-fastparquet (0.7.1 -> 0.7.2) python-packaging (21.2 -> 21.3) ruby2.7 (2.7.4 -> 2.7.5) ruby3.0 (3.0.2 -> 3.0.3) smartmontools wsdd (0.6.4 -> 0.7.0) yast2-bootloader (4.4.8 -> 4.4.9) yast2-installation (4.4.22 -> 4.4.23) === Details === ==== autoyast2 ==== Version update (4.4.22 -> 4.4.23) Subpackages: autoyast2-installation - During autoupgrade merge the selected product workflow in order to execute 2nd stage modules (bsc#1192437) - 4.4.23 ==== ibmtss ==== Subpackages: ibmtss-base libibmtss1 - Fix certificate list, run all tests. ==== kdump ==== - kdump-Store-kdump-initrd-in-kernel-image-path.patch: Fix kdumprd location for usrmerge kernels (boo#1190920). ==== libdrm ==== Version update (2.4.107 -> 2.4.109) Subpackages: libdrm-devel libdrm2 libdrm_amdgpu1 libdrm_intel1 libdrm_nouveau2 libdrm_radeon1 - update to 2.4.109: * amdgpu: add new function to get fd * radeon: remove duplicate struct declaration * xf86drm: fix compiler warnings * ci fixes - update to 2.4.108: * amdgpu: add amdgpu_stress utility v2 * amdgpu: add marketing names from 21.30 * amdgpu: add new marketing name * amdgpu: Make marketing names consistent * amdgpu: use drmCloseBufferHandle * build: bump version to 2.4.108 * drm_fourcc: sync drm_fourcc with latest drm-next kernel * etnaviv: use drmCloseBufferHandle * exynos: use drmCloseBufferHandle * Fix -Werror=format build errors on FreeBSD * freedreno: use drmCloseBufferHandle * headers: drm: Sync with drm-next * intel: Do not assert on unknown chips in drm_intel_decode_context_alloc * intel: Drop legacy execbuffer support * intel: sync ADL-S PCI IDs with kernel * intel: Sync pci ids * intel: use drmCloseBufferHandle * man: refer to drmCloseBufferHandle instead of DRM_IOCTL_GEM_CLOSE * meson: Build libdrm.so as an unversioned lib on Android. * meson: Don't build libkms for Android. * nouveau: print bo address in the GPU/CPU vm and its size * nouveau: use drmCloseBufferHandle * omap: use drmCloseBufferHandle * radeon: use drmCloseBufferHandle * tegra: use drmCloseBufferHandle * test/amdgpu: Bob to Alice copy should be TMZ in secure bounce test * tests/amdgpu: Fix TMZ secure bounce test * xf86drm: add GEM_CLOSE ioctl wrapper * xf86drm: add iterator API for DRM/KMS IN_FORMATS blobs * xf86drm: fix mem leak in drm_usb_dev_path() * xf86drmMode: make drm_property_type_is arg const * xf86drmMode: simplify drm_property_type_is * xf86drmMode: switch to standard inline qualifier * xf86drm: Update drmGetFormatModifierNameFromArm to handle AFRC ==== libjpeg-turbo ==== Version update (2.1.1 -> 2.1.2) Subpackages: libjpeg8 libjpeg8-32bit libturbojpeg0 - update to 2.1.2: * Fixed a regression introduced by 2.1 beta1[13] that caused the remaining GAS implementations of AArch64 (Arm 64-bit) Neon SIMD functions (which are used by default with GCC for performance reasons) to be placed in the `.rodata` section rather than in the `.text` section. This caused the GNU linker to automatically place the `.rodata` section in an executable segment, which prevented libjpeg-turbo from working properly with other linkers and also represented a potential security risk. * Fixed an issue whereby the `tjTransform()` function incorrectly computed the MCU block size for 4:4:4 JPEG images with non-unary sampling factors and thus unduly rejected some cropping regions, even though those regions aligned with 8x8 MCU block boundaries. * Fixed a regression introduced by 2.1 beta1[13] that caused the build system to enable the Arm Neon SIMD extensions when targetting Armv6 and other legacy architectures that do not support Neon instructions. * libjpeg-turbo now performs run-time detection of AltiVec instructions on FreeBSD/PowerPC systems if AltiVec instructions are not enabled at compile time. This allows both AltiVec-equipped and non-AltiVec-equipped CPUs to be supported using the same build of libjpeg-turbo. * cjpeg now accepts a `-strict` argument similar to that of djpeg and jpegtran, which causes the compressor to abort if an LZW-compressed GIF input image contains incomplete or corrupt image data. ==== openvpn ==== Version update (2.5.3 -> 2.5.4) - update to 2.5.4: * fix prompting for password on windows console if stderr redirection is in use - this breaks 2.5.x on Win11/ARM, and might also break on Win11/adm64 when released. * fix setting MAC address on TAP adapters (--lladdr) to use sitnl (was overlooked, and still used "ifconfig" calls) * various improvements for man page building (rst2man/rst2html etc) * minor bugfix with IN6_IS_ADDR_UNSPECIFIED() use (breaks build on at least one platform strictly checking this) * fix minor memory leak under certain conditions in add_route() and add_route_ipv6() * documentation improvements * copyright updates where needed * better error reporting when win32 console access fails ==== policycoreutils ==== Subpackages: policycoreutils-lang policycoreutils-python-utils python3-policycoreutils - finish UsrMerge (bsc#1191089) - Add run_init.pamd.patch to adjust to SUSE pam setup. Removed run_init_use_pam_keyinit.patch and included it in the new patch (bsc#1190098) ==== python-fastparquet ==== Version update (0.7.1 -> 0.7.2) - update to version 0.7.2: * Ability to remove row-groups in-place for multifile datasets * Accept pandas nullable Float type * allow empty strings and fix min/max when there is no data * make writing statistics optional * row selection in to_pandas() ==== python-packaging ==== Version update (21.2 -> 21.3) - update to 21.3: * Add a pp3-none-any tag (gh#pypa/packaging#311) * Replace the blank pyparsing 3 exclusion with a 3.0.5 exclusion (gh#pypa/packaging#481), (gh#pypa/packaging#486) * Fix a spelling mistake (gh#pypa/packaging#479) ==== ruby2.7 ==== Version update (2.7.4 -> 2.7.5) Subpackages: libruby2_7-2_7 - update to 2.7.5 (boo#1193081 boo#1193080 boo#1193035) https://www.ruby-lang.org/en/news/2021/11/24/ruby-2-7-5-released/ - CVE-2021-41817: Regular Expression Denial of Service Vulnerability of Date Parsing Methods - CVE-2021-41816: Buffer Overrun in CGI.escape_html - CVE-2021-41819: Cookie Prefix Spoofing in CGI::Cookie.parse ==== ruby3.0 ==== Version update (3.0.2 -> 3.0.3) Subpackages: libruby3_0-3_0 - update to 3.0.3 (boo#1193081 boo#1193080 boo#1193035) https://www.ruby-lang.org/en/news/2021/11/24/ruby-3-0-3-released/ - CVE-2021-41817: Regular Expression Denial of Service Vulnerability of Date Parsing Methods - CVE-2021-41816: Buffer Overrun in CGI.escape_html - CVE-2021-41819: Cookie Prefix Spoofing in CGI::Cookie.parse ==== smartmontools ==== - Added hardening to systemd service(s) (bsc#1181400). Added patch(es): * harden_smartd.service.patch Modified: * smartd_generate_opts.service ==== wsdd ==== Version update (0.6.4 -> 0.7.0) - Update sources - Version 0.7.0 * Using the server interface it is now possible to start and stop the host functionality (discoverable device) without terminating and restarting the daemon. * Support multiple IP addresses in 'hello' messages from other hosts (#89) * Support interfaces with IPv6-only configuration (#94) * Re-enable 'probe' command of API (#116) * Removed code marked as deprecated starting with Python 3.10. * The example systemd unit file now uses DynamicUser instead of the unsafe nobody:nobody combination. It also employs the rundir as chroot directory. * Code changed to use asyncio instead of selector-based * The server interface does not close connections after each command anymore. * For the 'list' command of the server interface, the list of discovered devices is terminated with a line containing only a single dot ('.') * Log device discovery only once per address and interface - Some systemd hardening ==== yast2-bootloader ==== Version update (4.4.8 -> 4.4.9) - bnc#1193016 - fixed crash due to missing require - 4.4.9 ==== yast2-installation ==== Version update (4.4.22 -> 4.4.23) - Remove no longer used extra warning about destructive actions before starting the installation process (related to bsc#1057437). - 4.4.23

1 0

Looking for maintainer of community AI/ML packages for Leap
by Lubos Kocman 29 Nov '21

29 Nov '21

Hello openSUSE we have a request to drop community maintained AI/ML packages in openSUSE Leap 15.4 Beta (February timeframe) unless there is a maintainer who's willing to maintain them. If you're interested please respond in the ticket* which has some additional information. I will send next email two weeks before the Beta code submission deadline* (Feb 16 2022). [0] https://code.opensuse.org/leap/features/issue/35 [1] https://en.opensuse.org/openSUSE:Roadmap Thank you

1 0

New Tumbleweed snapshot 20211127 released!
by Dominique Leuenberger 28 Nov '21

28 Nov '21

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: blueberry (1.4.4 -> 1.4.5) cups fprintd (1.90.9 -> 1.94.1) seahorse-sharing === Details === ==== blueberry ==== Version update (1.4.4 -> 1.4.5) Subpackages: blueberry-lang - Update to version 1.4.5: * Add Turn bluetooth on/off option in tray menu. * blueberry-tray.py: Remove menu positioning code. * blueberry-tray.py: Silence a runtime warning. * rfkillMagic: Rewrite safechild in shell script to reduce memory usage. * Added build & install steps to readme file. * l10n: Update POT. - Restore Group. ==== cups ==== Subpackages: cups-client cups-config libcups2 libcups2-32bit libcupsimage2 - Provide /usr/share/cups/ppdc/ in the "cups" main package to avoid that "lpinfo -m" results in /var/log/cups/error_log things like "ppdc: Unable to find include file font.defs" or "ppdc: Unable to find include file hp.h" and then "Bad driver information file /usr/share/cups/drv/sample.drv" (bsc#1186843) - When cupsd creates directories with specific owner group and permissions (usually owner is 'root' and group matches "configure --with-cups-group=lp") specify same owner group and permissions in the RPM spec file to ensure those directories are installed by RPM with the right settings because if those directories were installed by RPM with different settings then cupsd would use them as is and not adjust its specific owner group and permissions which could lead to privilege escalation from 'lp' user to 'root' via symlink attacks e.g. if owner is falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161) - upstream_pull_174.patch is https://github.com/OpenPrinting/cups/pull/174 "Use 60s timeout for read_thread, revert read limits" to fix printing with older USB printers - New upstream URL https://openprinting.github.io/cups - Disable testsuite for now via "bcond_with testsuite" until https://github.com/OpenPrinting/cups/issues/155 is fixed - Add "testsuite" conditional that disables anything within %check - fix-negotiate-authentication-between-CGIs-and-scheduler.patch fixes web UI Kerberos authentication (bsc#1175960) - Upstream changed to https://github.com/OpenPrinting/cups - Added %check section to specfile that executes the old 'make check' and the new (see 2.3.3op1) 'make test' - Version upgrade to 2.3.3op2: * Security: Fixed a buffer (read) overflow in the ippReadIO function (CVE-2020-10001) * Clarified the documentation for the "Listen" directive * Fixed duplicate ColorModel entries for AirPrint printers * Fixed directory/permission defaults for Debian kfreebsd-based systems * Fixed crash bug in ppdOpen * Fixed regression in snprintf emulation function * The scheduler's systemd service file now waits for the nslcd service to start * The libusb-based USB backend now uses a simpler read timer implementation to avoid a regression in a previous change * The PPD caching code now only tracks the APPrinterIconPath value on macOS * Fixed segfault in help.cgi when searching in man pages * Root certificates were incorrectly stored in "~/.cups/ssl". * Version upgrade to 2.3.3op1: * The automated test suite can now be activated using make test for consistency with other projects and CI environments - the old make check continues to work as well, and the previous test server behavior can be accessed by running make testserver. * ippeveprinter now supports multiple icons and strings files. * ippeveprinter now uses the system's FQDN with Avahi. * ippeveprinter now supports Get-Printer-Attributes on "/". * ippeveprinter now uses a deterministic "printer-uuid" value. * ippeveprinter now uses system sounds on macOS for Identify-Printer. * Updated ippfind to look for files in "~/Desktop" on Windows. * Updated ippfind to honor SKIP-XXX directives with PAUSE. * Updated IPP Everywhere support to work around printers that only advertise color raster support but really also support grayscale * ipptool now supports DNS-SD URIs like ipps://My%20Printer._ipps._tcp.local * The scheduler now allows root backends to have world read permissions but not world execute permissions * Failures to bind IPv6 listener sockets no longer cause errors if IPv6 is disabled on the host * The SNMP backend now supports the HP and Ricoh vendor MIBs * The scheduler no longer includes a timestamp in files it writes * The systemd service names are now "cups.service" and "cups-lpd.service" * The scheduler no longer adds the local hostname to the ServerAlias list * Added LogFileGroup directive in "cups-files.conf" to control the group owner of log files * Added --with-max-log-size configure option * Added --enable-sync-on-close configure option * Added --with-error-policy configure option * IPP Everywhere PPDs could have an "unknown" default InputSlot * The httpAddrListen function now uses a listen backlog of 128. * Added USB quirks * Fixed IPP Everywhere v1.1 conformance issues in ippeveprinter. * Fixed DNS-SD name collision support in ippeveprinter. * Fixed compiler and code analyzer warnings. * Fixed TLS support on Windows. * Fixed ippfind sub-type searches with Avahi. * Fixed the default hostname used by ippeveprinter on macOS. * Fixed resolution of local IPP-USB printers with Avahi. * Fixed coverity issues * Fixed httpAddrConnect issues * Fixed web interface device URI issue * Fixed lp/lpr "printer/class not found" error reporting * Fixed xinetd support for LPD clients * Fixed libtool build issue * Fixed a memory leak in the scheduler * Fixed a potential integer overflow in the PPD hashing code * Fixed output-bin and print-quality handling issues * Fixed PPD options getting mapped to odd IPP values like "tray---4" * Fixed remote access to the cupsd.conf and log files * Fixed the automated test suite when running in certain build/CI environments * Fixed a logging regression caused by a previous change for Apple issue #5604 * Fixed fax phone number handling with GNOME * Fixed potential rounding error in rastertopwg filter * Fixed the "uri-security-supported" value from the scheduler * Fixed IPP backend crash bug with "printer-alert" values * Removed old Solaris inetconv(1m) reference in cups-lpd man page * Fixed default options that incorrectly use the "custom" prefix * Fixed a memory leak when resolving DNS-SD URIs * Fixed systemd status reporting by adopting the notify interface * Fixed crash in rastertopwg * Fixed cupsManualCopies values in IPP Everywhere PPDs - Removed let-cupsd-start-after-network.patch as it is no longer required - Removed CVE-2020-10001.patch as a fix as been merged upstream - Removed section of specfile responsible for renaming "org.cups.cups*" systemd files to cups*, due to upstream renaming these files - Remove code comments from expanded scriptlets to reduce size cf. https://build.opensuse.org/request/show/879976 - CVE-2020-10001.patch fixes CVE-2020-10001 (bsc#1180520) access to uninitialized buffer in ipp.c - Version upgrade to 2.3.3: * CVE-2020-3898: The 'ppdOpen' function did not handle invalid UI constraint. 'ppdcSource::get_resolution' function did not handle invalid resolution strings. * CVE-2019-8842: The 'ippReadIO' function may under-read an extension field. * Fixed WARNING_OPTIONS support for GCC 9.x Changes in CUPS 2.3.2: Localization updates Changes in CUPS 2.3.1: * CVE-2019-2228: The 'ippSetValuetag' function did not validate the default language value. * Fixed a crash bug in the web interface. * The PPD cache code now looks up page sizes using their dimensions. * PPD files containing "custom" option keywords did not work. * Added a workaround for the scheduler's systemd support. * Added a DigestOptions directive for the 'client.conf' file to control whether MD5-based Digest authentication is allowed. * Fixed a bug in the handling of printer resource files. * The libusb-based USB backend now reports an error when the distribution permissions are wrong. * Added paint can labels to Dymo driver. * The 'ippeveprinter' program now supports authentication. * The 'ippeveprinter' program now advertises DNS-SD services on the correct interfaces, and provides a way to turn them off. * The '--with-dbusdir' option was ignored by the configure script. * Sandboxed applications were not able to get the default printer. * Log file access controls were not preserved by 'cupsctl'. * Default printers set with 'lpoptions' did not work in all cases. * Fixed an error in the jobs web interface template. * Fixed an off-by-one error in 'ippEnumString'. * Fixed some new compiler warnings. * Fixed a few issues with the Apple Raster support. * The IPP backend did not detect all cases where a job should be retried using a raster format. * Fixed spelling of "fold-accordion". * Fixed the default common name for TLS certificates used by 'ippeveprinter'. * Fixed the option names used for IPP Everywhere finishing options. * Added support for the second roll of the DYMO Twin/DUO label printers. Changes in CUPS v2.3.0: * CVE-2019-8696 and CVE-2019-8675: Fixed SNMP buffer overflows. * Added a GPL2/LGPL2 exception to the new CUPS license terms. * Fixed a bug in the scheduler job cleanup code. * Fixed builds when there is no TLS library. * "make" failed with GZIP options. * Fixed potential excess logging from the scheduler when removing job files. * Fixed a NULL pointer dereference bug in 'httpGetSubField2'. * Added FIPS-140 workarounds for GNU TLS. * The scheduler no longer provides a default value for the description. * The scheduler now logs jobs held for authentication using the error level so it is clear what happened. * The 'lpadmin' command did not always update the PPD file for changes to the 'cupsIPPSupplies' and 'cupsSNMPSupplies' keywords. * The scheduler now uses both the group's membership list as well as the various OS-specific membership functions to determine whether a user belongs to a named group. * Added USB quirks rule for HP LaserJet 1015. * Fixed some PPD parser issues. * The IPP parser no longer allows invalid member attributes in collections. * The configure script now treats the "wheel" group as a potential system group. * Fixed IPP buffer overflow. * Fixed memory disclosure issue in the scheduler. * Fixed DoS issues in the scheduler. * Fixed an issue with unsupported "sides" values in the IPP backend. * The scheduler would restart continuously when idle and printers were not shared. * Fixed an issue with 'EXPECT !name WITH-VALUE ...' tests. * Fixed a command ordering issue in the Zebra ZPL driver. * Fixed a memory leak in 'ppdOpen'. Changes in CUPS v2.3rc1: * The 'cups-config' script no longer adds extra libraries when linking against shared libraries. * The supplied example print documents have been optimized for size. * The 'cupsctl' command now prevents setting "cups-files.conf" directives. * The "forbidden" message in the web interface is now explained. * The footer in the web interface covered some content on small displays. * The libusb-based USB backend now enforces read limits, improving print speed in many cases. * The 'ippeveprinter' command now looks for print commands in the "command" subdirectory. * The 'ipptool' command now supports '$date-current' and '$date-start' variables to insert the current and starting date and time values, as well as ISO-8601 relative time values such as "PT30S" for 30 seconds in the future. Changes in CUPS v2.3b8 * Media size matching now uses a tolerance of 0.5mm. * The lpadmin command would hang with a bad PPD file. * Fixed a potential crash bug in cups-driverd. * Fixed a performance regression with large PPDs. * Fixed a memory reallocation bug in HTTP header value expansion. * Timed out job submission now yields an error. * Restored minimal support for the 'Emulators' keyword in PPD files to allow old Samsung printer drivers to continue to work. * The scheduler did not encode octetString values like "job-password" correctly for the print filters. * The 'cupsCheckDestSupported' function did not check octetString values correctly. * Added support for 'UserAgentTokens' directive in "client.conf". * Updated the systemd service file for cupsd. * The 'ippValidateAttribute' function did not catch all instances of invalid UTF-8 strings. * Fixed an issue with the self-signed certificates generated by GNU TLS. * Fixed a potential memory leak when reading at the end of a file. * Fixed potential unaligned accesses in the string pool. * Fixed a potential memory leak when loading a PPD file. * Added a USB quirks rule for the Lexmark E120n. * Updated the USB quirks rule for Zebra label printers. * The lpadmin command, web interface, and scheduler all queried an IPP Everywhere printer differently, resulting in different PPDs for the same printer. * The web interface no longer provides access to the log files. * Non-Kerberized printing to Windows via IPP was broken. * The scheduler no longer stops a printer if an error occurs when a job is canceled or aborted. * Added a USB quirks rule for the DYMO 450 Turbo. * Added a USB quirks rule for Xerox printers. * The scheduler's self-signed certificate did not include all of the alternate names for the server when using GNU TLS. * Fixed some PPD caching and IPP Everywhere PPD accounting/password bugs. * Fixed 'PreserveJobHistory' bug with time values. * The scheduler no longer advertises the HTTP methods it supports. * The scheduler did not always idle exit as quickly as it could. * Added a new 'ippeveprinter' command based on the old ippserver sample code. Changes in CUPS v2.3b7 * Running ppdmerge with the same input and output filenames did not work as advertised. * Rebase let-cupsd-start-after-network.patch and cups-config-libs.patch. * Drop issue5509-fix-utf-8-validation-issue.patch and issue5453.patch: fixed upstream. - make cups-devel pull in cups-rpm-helper to fix printer driver provides (boo#1172407) - Fixes for %_libexecdir changing to /usr/libexec - Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118) Fixes https://github.com/apple/cups/issues/5509 - Remove libcupscgi1, libcupsmime1, libcupsppdc1 from baselibs.conf - Version upgrade to 2.3b6: This is the sixth beta of the CUPS 2.3 series which adopts the new CUPS license, adds support for IPP presets and finishing templates, and fixes a number of bugs and "polish" issues. For details see https://github.com/apple/cups/releases or the CHANGES.md file. Backward incompatible changes: * The cupsaddsmb program has been removed (Issue #5449) * The cupstestdsc program has been removed (Issue #5450) * The cupscgi, cupsmime, and cupsppdc support libraries are no longer installed as shared libraries. Changes include: * CVE-2018-4700: Linux session cookies used a predictable random number seed. * The lpoptions command now works with IPP Everywhere printers that have not yet been added as local queues (Issue #5045) * The lpadmin command would create a non-working printer in some error cases (Issue #5305) * The scheduler would crash if an empty AccessLog directive was specified (Issue #5309) * The scheduler did not idle-exit on some Linux distributions (Issue #5319) * Fixed a regression in the changes to ippValidateAttribute (Issue #5322, Issue #5330) * Fixed a crash bug in the Epson dot matrix driver (Issue #5323) * Automatic debug logging of job errors did not work with systemd (Issue #5337) * The web interface did not list the IPP Everywhere "driver" (Issue #5338) * The scheduler did not report all of the supported job options and values (Issue #5340) * The IPP Everywhere "driver" now properly supports face-up printers (Issue #5345) * Fixed some typos in the label printer drivers (Issue #5350) * Setting the Community name to the empty string in snmp.conf now disables SNMP supply level monitoring by all the standard network backends (Issue #5354) * Multi-file jobs could get stuck if the backend failed (Issue #5359, Issue #5413) * The IPP Everywhere "driver" no longer does local filtering when printing to a shared CUPS printer (Issue #5361) * The lpadmin command now correctly reports IPP errors when configuring an IPP Everywhere printer (Issue #5370) * Fixed some memory leaks discovered by Coverity (Issue #5375) * The PPD compiler incorrectly terminated JCL options (Issue #5379) * The cupstestppd utility did not generate errors for missing/mismatched CloseUI/JCLCloseUI keywords (Issue #5381) * The scheduler now reports the actual location of the log file (Issue #5398) * The generated PPD files for IPP Everywhere printers did not contain the cupsManualCopies keyword (Issue #5433) * Kerberos credentials might be truncated (Issue #5435) * The handling of MaxJobTime 0 did not match the documentation (Issue #5438) * Fixed a bug adding a queue with the -E option (Issue #5440) * The scheduler did not validate that required initial request attributes were in the operation group (rdar://41098178) * Fixed an issue with HTTP Digest authentication (rdar://41709086) * The scheduler could crash when job history was purged (rdar://42198057) * Fixed a crash bug when mapping PPD duplex options to IPP attributes (rdar://46183976) * Fixed a memory leak for some IPP (extension) syntaxes. * The snmp backend is now deprecated. - issue5453.patch fixes https://github.com/apple/cups/issues/5453 - Version upgrade to 2.3b5: This is the fifth beta of the CUPS 2.3 series which adopts the new CUPS license, adds support for IPP presets and finishing templates, and fixes a number of bugs and "polish" issues. For details see https://github.com/apple/cups/releases or the CHANGES.md file. Changes include: * The ipptool program no longer checks for duplicate attributes when running in list or CSV mode (Issue #5278) * The cupsCreateJob, cupsPrintFile2, and cupsPrintFiles2 APIs did not use the supplied HTTP connection (Issue #5288) * Fixed another crash in the scheduler when adding an IPP Everywhere printer (Issue #5290) * Added a workaround for certain web browsers that do not support multiple authentication schemes in a single response header (Issue #5289) * Fixed policy limits containing the All operation (Issue #5296) * The scheduler was always restarted after idle-exit with systemd (Issue #5297) * The mailto notifier did not wait for the welcome message (Issue #5312) * Fixed a parsing bug in the pstops filter (Issue #5321) * The scheduler allowed environment variables to be specified in the cupsd.conf file (rdar://37836779, rdar://37836995, rdar://37837252, rdar://37837581) * Fax queues did not support pause (p) or wait-for-dialtone (w) characters (rdar://39212256) * The scheduler did not validate notify-recipient-uri values properly (rdar://40068936) * The IPP parser allowed invalid group tags (rdar://40442124) * Fixed a parsing bug in the new authentication code. - issue5296_fix_policy_limits_using_All.patch is obsolete because it is fixed upstream (see "Issue #5296" above) - Add patch let-cupsd-start-after-network.patch Let cuspd start after possible network connection (boo#1111351) This let cupsd also stop before a used network connection goes down, hence the cusp does not lock due waiting on remote printers. - Fix warning message upon update (boo#1050845): Remove template service cups-lpd@ from service_* macro in scriptlets. - issue5296_fix_policy_limits_using_All.patch fixes https://github.com/apple/cups/issues/5296 by only the actually relevant part of https://github.com/apple/cups/commit/0873f681e43c04972b3d6bc90bdbdedb29e6e9… (follow-up of boo#936309 and bsc#577936 starting at comment 13) - Version upgrade to 2.3b4: This is the fourth beta of the CUPS 2.3 series. For details see https://github.com/apple/cups/releases or the CHANGES.md file. Changes include: * Additional security fixes for: bsc#1061066 DBUS library aborts caller process in _dbus_check_is_valid_utf8 (in particular that aborts cupsd) and bsc#1087018 CVE-2017-18248: cups: The add_job function in scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is enabled, can be crashed by remote attackers by sending print jobs with an invalid username, related to a D-Bus notification which are the CUPS upstream issues https://github.com/apple/cups/issues/5143 Remote DoS attack against cupsd via invalid username and malicious D-Bus library and https://github.com/apple/cups/issues/5186 squash non-UTF-8 strings into ASCII on plain IPP level and https://github.com/apple/cups/issues/5229 persistently substitute invalid job attributes with default values - not only in add_job see also bsc#1087072 dbus-1: Disable assertions to prevent un-expected DDoS attacks * NOTICE: Raw print queues are now deprecated (Issue #5269) so that now there is a warning message when you add or modify a queue to use the "raw driver" but raw printing will continue to work through CUPS 2.3.x, cf. https://lists.cups.org/pipermail/cups/2018-March/074060.html * Kerberized printing to another CUPS server did not work correctly (Issue #5233) * The scheduler now supports using temporary print queues for older IPP/1.1 print queues like those shared by CUPS 1.3 and earlier (Issue #5241) * Systemd did not restart cupsd when configuration changes were made that required a restart (Issue #5263) * Fixed an Avahi crash bug in the scheduler (Issue #5268) * TLS connections now properly timeout (rdar://34938533) * Removed support for the '-D_PPD_DEPRECATED=""' developer cheat - the PPD API should no longer be used. * Removed support for '-D_IPP_PRIVATE_STRUCTURES=1' developer cheat - the IPP accessor functions should be used instead. * The symlink rastertodymo -> rastertolabel in /usr/lib/cups/filter is no longer provided. - Removed fix_filter_Makefile.patch because since CUPS 2.3b4 it is fixed in the upstream code via https://github.com/apple/cups/issues/5247 more precisely via https://github.com/apple/cups/commit/ab89234de2d9bf36bb59f2aa4873d98e95ca4d… - Version upgrade to 2.3b3: This is the third beta of the CUPS 2.3 series. For details see https://github.com/apple/cups/releases Changes include: * More fixes for printing to old CUPS servers (Issue #5211) * Additional changes for the scheduler to substitute default values for invalid job attributes when running in "relaxed conformance" mode (Issue #5229 - a follow-up of issues #5186 and #5143) A detailed list of changes can be found in the CHANGES.md file. - fix_filter_Makefile.patch fixes https://github.com/apple/cups/issues/5247 - Version upgrade to 2.3b2: This is the second beta of the CUPS 2.3 series. For details see https://github.com/apple/cups/releases Changes include: * Printing to old CUPS servers has been fixed (Issue #5211) A detailed list of changes can be found in the CHANGES.md file. ==== fprintd ==== Version update (1.90.9 -> 1.94.1) Subpackages: fprintd-lang fprintd-pam fprintd-pam-32bit - Update to version 1.94.1 * Highlights: + Fix systemd unit so that udev hotplug events are processed + Report back the selected finger if there is only one + Change PolicyKit strings for clarity + Various fixes to the testsuite + Plenty of translation updates - Changes from 1.94.0 * Highlights: + Implement suspend/resume handling. + This requires writing "power/persist" and "power/wakeup" in sysfs. + Support libfprint overheat protections + Delete host prints when device prints disappeared + pam: Immediately return success information + Plenty of updated translations thanks to move to Fedora Weblate + Fix possible race when retrieving session information + Fix possible race when a client disconnects + GLib 2.56 compatibility fixes - Changes from 1.92.0 * Highlights: + fprintd now prevents the same finger to be enrolled twice + Support clearing storage of match-on-chip devices + pam: Cancel authentication on SIGINT (e.g. ctrl+c with sudo) + pam: Always return PAM_AUTHINFO_UNAVAIL for devices without prints + Expose finger status on DBus + Add method to delete only a specific print of a user + Improved error reporting for deletion + Wait for finger removal before cancelling operations + Prefer older prints when garbage collecting + Major improvements to test coverage - Remove README.SUSE because rh#1693356 and upstream classified it as not a problem ==== seahorse-sharing ==== Subpackages: seahorse-sharing-lang - - Add 2.3 to the list of accepted GPG versions.

1 0

gpg key expire in 14days, opensuse backports, metadata
by cagsm 28 Nov '21

28 Nov '21

hi list, just now on 15.3 sudo zypper ref [sudo] password for root: Retrieving repository 'Update repository of openSUSE Backports' metadata ----[\] The gpg key signing file 'repomd.xml' will expire in 14 days. Repository: Update repository of openSUSE Backports Key Fingerprint: 637B 32FF 3D83 F07A 7AE1 C40A 9C21 4D40 6517 6565 Key Name: openSUSE:Backports OBS Project <openSUSE:Backports@build.ope nsuse.org> Key Algorithm: RSA 2048 Key Created: Wed 02 Oct 2019 03:17:53 PM CEST Key Expires: Fri 10 Dec 2021 02:17:53 PM CET (expires in 14 days) Rpm Name: gpg-pubkey-65176565-5d94a381 Retrieving repository 'Update repository of openSUSE Backports' metadata .[done] Building repository 'Update repository of openSUSE Backports' cache ......[done] Repository 'Non-OSS Repository' is up to date. Repository 'Main Repository' is up to date. Retrieving repository 'Update repository with updates from SUSE Linux Enterprise 15' metadata .................................................................................[done] Building repository 'Update repository with updates from SUSE Linux Enterprise 15' cache ......................................................................................[done] Repository 'Main Update Repository' is up to date. Repository 'Update Repository (Non-Oss)' is up to date. All repositories have been refreshed.

4 3

Looking for new maintainer for miller
by Luigi Baldoni 28 Nov '21

28 Nov '21

The upcoming version 6 of utilities/miller has been rewritten in go and I won't be able to maintain it.

1 0

New Tumbleweed snapshot 20211126 released!
by Dominique Leuenberger 28 Nov '21

28 Nov '21

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ImageMagick (7.1.0.14 -> 7.1.0.16) MozillaFirefox (94.0.1 -> 94.0.2) apache2 apache2-manual apache2-prefork apache2-utils at audacity bison brltty ceph (16.2.6.462+g5fefbbf8888 -> 16.2.6.463+g22e7612f9ad) cups cups-filters dbus-1 dbus-1-x11 gpg2 (2.2.27 -> 2.3.3) librsvg (2.52.3 -> 2.52.4) libstorage-ng (4.4.57 -> 4.4.58) libvpx libzapojit lirc mailx ncurses (6.3.20211115 -> 6.3.20211120) protobuf-c python-PyYAML (5.4.1 -> 6.0) python-psutil python-pysmbc syslogd tgt virtualbox (6.1.28 -> 6.1.30) virtualbox-kmp (6.1.28_k5.15.3_1 -> 6.1.30_k5.15.3_1) xapps (2.2.3 -> 2.2.5) yast2-storage-ng (4.4.14 -> 4.4.15) === Details === ==== ImageMagick ==== Version update (7.1.0.14 -> 7.1.0.16) Subpackages: ImageMagick-config-7-SUSE ImageMagick-extra libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - update to 7.1.0.16: * Fixed an OpenCL build problem. * Added support for reading extra channels in a PSD file (reference * Fix alpha channel calculation of arithmetic divide compose operator. ==== MozillaFirefox ==== Version update (94.0.1 -> 94.0.2) Subpackages: MozillaFirefox-translations-common - Mozilla Firefox 94.0.2: * Update preference design for Firefox Suggest for improved clarity * Resolved general instability/crashes on Linux caused by a file descriptor leak when backgrounding tabs using WebGL (bmo#1741997) ==== apache2 ==== - httpd-framework updated to svn1894461 - added patches fix reverted logic, DirectorySlash NotFound is available in trunk only + apache-test-DirectorySlash-NotFound-logic.patch - do not consider php tests, they do not run anyway ==== apache2-manual ==== - httpd-framework updated to svn1894461 - added patches fix reverted logic, DirectorySlash NotFound is available in trunk only + apache-test-DirectorySlash-NotFound-logic.patch - do not consider php tests, they do not run anyway ==== apache2-prefork ==== - httpd-framework updated to svn1894461 - added patches fix reverted logic, DirectorySlash NotFound is available in trunk only + apache-test-DirectorySlash-NotFound-logic.patch - do not consider php tests, they do not run anyway ==== apache2-utils ==== - httpd-framework updated to svn1894461 - added patches fix reverted logic, DirectorySlash NotFound is available in trunk only + apache-test-DirectorySlash-NotFound-logic.patch - do not consider php tests, they do not run anyway ==== at ==== - Drop ProtectSystem and ProtectHome hardening. Unfortunately they're breaking at jobs (boo#1192294) ==== audacity ==== Subpackages: audacity-lang - Conflict pipewire-libjack-0_3 to prevent boo#1191585 ==== bison ==== Subpackages: bison-lang - disable tests and profiling using tests on armv6l (boo#1192737) ==== brltty ==== Subpackages: brltty-driver-at-spi2 brltty-driver-brlapi brltty-driver-speech-dispatcher brltty-driver-xwindow brltty-lang libbrlapi0_8 python3-brlapi system-user-brltty xbrlapi - Add all sysusers.d Requires ==== ceph ==== Version update (16.2.6.462+g5fefbbf8888 -> 16.2.6.463+g22e7612f9ad) Subpackages: librados2 librbd1 - Update to 16.2.6-463-g22e7612f9ad: + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links - Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of this changes file after double-checking that none of these fixes got lost in the pacific rebase: + bsc#1163764 (--container-init feature cherry-picked to octopus) + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically) + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host) + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster) + bsc#1174466 (mon: have 'mon stat' output json as well) + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator) + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work) + bsc#1174644 (cephadm: log to file) + bsc#1175120 (downstream branding) + bsc#1175161 (downstream branding) + bsc#1175169 (downstream branding) + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana) + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work") + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue) + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store()) + bsc#1176638 (ceph-volume: batch: call the right prepare method) + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana) + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True) + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation) + bsc#1177151 (python-common: do not skip unavailable devices) + bsc#1177319 (--container-init feature cherry-picked to octopus) + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster) + bsc#1177360 (cephadm: silence "Failed to evict container" log msg) + bsc#1177450 (ceph-volume: don't exit before empty report can be printed) + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse") + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files) + bsc#1177843 (CVE-2020-25660) + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails) + bsc#1177933 (cephadm: configure journald as the logdriver) + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph) + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls) + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1) + bsc#1178905 (CVE-2020-25678) + bsc#1178932 (cephadm: reference the last local image by digest) + bsc#1179016 (rpm: require smartmontools on SUSE) + bsc#1179452 (mgr/insights: Test environment requires 'six') + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue) + bsc#1179569 (cephadm: reference the last local image by digest) + bsc#1179802 (CVE-2020-27781) + bsc#1179997 (CVE-2020-27839) + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand) + bsc#1180155 (CVE-2020-27781) + bsc#1181291 (mgr/cephadm: alias rgw-nfs -> nfs) + bsc#1182766 (cephadm: fix 'inspect' and 'pull') + bsc#1183074 (CVE-2021-20288) + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600) + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS) + bsc#1184231 (cephadm: Allow to use paths in all <_devices> drivegroup sections) + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too) + bsc#1185246 (rgw: check object locks in multi-object delete) + bsc#1185619 (CVE-2021-3524) + bsc#1185619 (CVE-2021-3524) + bsc#1186020 (CVE-2021-3531) + bsc#1186021 (CVE-2021-3509) + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path) + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False") + bsc#1189173 (downstream branding) + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740) + jsc#SES-185 (SES support with cache software) + jsc#SES-704 (mgr/snap_schedule) ==== cups ==== Subpackages: cups-client cups-config libcups2 libcups2-32bit libcupsimage2 - Added hardening to systemd service(s) (bsc#1181400). Added patch(es): * harden_cups.service.patch ==== cups-filters ==== - Added hardening to systemd service(s) (bsc#1181400). Added patch(es): * harden_cups-browsed.service.patch ==== dbus-1 ==== Subpackages: libdbus-1-3 libdbus-1-3-32bit - Add CONFIG parameter to %sysusers_generate_pre - Added BuildRequires alts for libalternatives. - Fixed spec file regarding removing old update-alternatives entries. - Use libalternatives instead of update-alternatives. ==== dbus-1-x11 ==== - Added BuildRequires alts for libalternatives. - Fixed spec file regarding removing old update-alternatives entries. - Use libalternatives instead of update-alternatives. ==== gpg2 ==== Version update (2.2.27 -> 2.3.3) Subpackages: dirmngr gpg2-lang - GnuPG 2.3.3: * agent: Fix segv in GET_PASSPHRASE (regression) * dirmngr: Fix Let's Encrypt certificate chain validation * gpg: Change default and maximum AEAD chunk size to 4 MiB * gpg: Print a warning when importing a bad cv25519 secret key * gpg: Fix --list-packets for undecryptable AEAD packets * gpg: Verify backsigs for v5 keys correctly * keyboxd: Fix checksum computation for no UBID entry on disk * keyboxd: Fix "invalid object" error with cv448 keys * dirmngr: New option --ignore-cert * agent: Fix calibrate_get_time use of clock_gettime * Support a gpgconf.ctl file under Unix and use this for the regression tests - GnuPG 2.3.2: * gpg: Allow fingerprint based lookup with --locate-external-key. * gpg: Allow decryption w/o public key but with correct card inserted. * gpg: Auto import keys specified with --trusted-keys. * gpg: Do not use import-clean for LDAP keyserver imports. * gpg: Fix mailbox based search via AKL keyserver method. * gpg: Fix memory corruption with --clearsign introduced with 2.3.1. * gpg: Use a more descriptive prompt for symmetric decryption. * gpg: Improve speed of secret key listing. * gpg: Support keygrip search with traditional keyring. * gpg: Let --fetch-key return an exit code on failure. * gpg: Emit the NO_SECKEY status again for decryption. * gpgsm: Support decryption of password based encryption (pwri). * gpgsm: Support AES-GCM decryption. * gpgsm: Let --dump-cert --show-cert also print an OpenPGP fingerprint. * gpgsm: Fix finding of issuer in use-keyboxd mode. * gpgsm: New option --ldapserver as an alias for --keyserver. * agent: Use SHA-256 for SSH fingerprint by default. * agent: Fix calling handle_pincache_put. * agent: Fix importing protected secret key. * agent: Fix a regression in agent_get_shadow_info_type. * agent: Add translatable text for Caps Lock hint. * agent: New option --pinentry-formatted-passphrase. * agent: Add checkpin inquiry for pinentry. * agent: New option --check-sym-passphrase-pattern. * agent: Use the sysconfdir for a pattern file. * agent: Make QT_QPA_PLATFORMTHEME=qt5ct work for the pinentry. * dirmngr: LDAP search by a mailbox now ignores revoked keys. * dirmngr: For KS_SEARCH return the fingerprint also with LDAP. * dirmngr: Allow for non-URL specified ldap keyservers. * dirmngr: New option --ldapserver. * dirmngr: Fix regression in KS_GET for mail address pattern. * card: New option --shadow for the list command. * tests: Make sure the built keyboxd is used. * scd: Fix computing shared secrets for 512 bit curves. * scd: Fix unblock PIN by a Reset Code with KDF. * scd: Fix PC/SC removed card problem. * scd: Recover the partial match for PORTSTR for PC/SC. * scd: Make sure to release the PC/SC context. * scd: Fix zero-byte handling in ECC. * scd: Fix serial number detection for Yubikey 5. * scd: Add basic support for AET JCOP cards. * scd: Detect external interference when --pcsc-shared is in use. * scd: Fix access to the list of cards. * gpgconf: Do not list a disabled tpm2d. * gpgconf: Make runtime changes with different homedir work. * keyboxd: Fix searching for exact mail adddress. * keyboxd: Fix searching with multiple patterns. * tools: Extend gpg-check-pattern. * wkd: Fix client issue with leading or trailing spaces in user-ids. * Pass XDG_SESSION_TYPE and QT_QPA_PLATFORM envvars to Pinentry. * Change the default keyserver to keyserver.ubuntu.com. This is a temporary change due to the shutdown of the SKS keyserver pools. - GnuPG 2.3.1: * The new configuration file common.conf is now used to enable the use of the key database daemon with "use-keyboxd". Using this option in gpg.conf and gpgsm.conf is supported for a transitional period. See doc/example/common.conf for more. * gpg: Force version 5 key creation for ed448 and cv448 algorithms. * gpg: By default do not use the self-sigs-only option when importing from an LDAP keyserver. * gpg: Lookup a missing public key of the active card via LDAP. * gpgsm: New command --show-certs. * scd: Fix CCID driver for SCM SPR332/SPR532. * scd: Further improvements for PKCS#15 cards. * New configure option --with-tss to allow the selection of the TSS library. - Rebase patches: * gnupg-add_legacy_FIPS_mode_option.patch * gnupg-allow-import-of-previously-known-keys-even-without-UIDs.patch * gnupg-dont-fail-with-seahorse-agent.patch * gnupg-set_umask_before_open_outfile.patch - GnuPG 2.3.0: * A new experimental key database daemon is provided. To enable it put "use-keyboxd" into gpg.conf and gpgsm.conf. Keys are stored in a SQLite database and make key lookup much faster. * New tool gpg-card as a flexible frontend for all types of supported smartcards. * New option --chuid for gpg, gpgsm, gpgconf, gpg-card, and gpg-connect-agent. * The gpg-wks-client tool is now installed under bin; a wrapper for its old location at libexec is also installed. * tpm2d: New daemon to physically bind keys to the local machine. * gpg: Switch to ed25519/cv25519 as default public key algorithms. * gpg: Verification results now depend on the --sender option and the signer's UID subpacket. * gpg: Do not use any 64-bit block size cipher algorithm for encryption. Use AES as last resort cipher preference instead of 3DES. This can be reverted using --allow-old-cipher-algos. * gpg: Support AEAD encryption mode using OCB or EAX. * gpg: Support v5 keys and signatures. * gpg: Support curve X448 (ed448, cv448). * gpg: Allow use of group names in key listings. * gpg: New option --full-timestrings to print date and time. * gpg: New option --force-sign-key. * gpg: New option --no-auto-trust-new-key. * gpg: The legacy key discovery method PKA is no longer supported. The command --print-pka-records and the PKA related import and export options have been removed. * gpg: Support export of Ed448 Secure Shell keys. * gpgsm: Add basic ECC support. * gpgsm: Support creation of EdDSA certificates. [#4888] * agent: Allow the use of "Label:" in a key file to customize the pinentry prompt. * agent: Support ssh-agent extensions for environment variables. With a patched version of OpenSSH this avoids the need for the "updatestartuptty" kludge. * scd: Improve support for multiple card readers and tokens. * scd: Support PIV cards. * scd: Support for Rohde&Schwarz Cybersecurity cards. * scd: Support Telesec Signature Cards v2.0 * scd: Support multiple application on certain smartcard. * scd: New option --application-priority. * scd: New option --pcsc-shared; see man page for important notes. * dirmngr: Support a gpgNtds parameter in LDAP keyserver URLs. * The symcryptrun tool, a wrapper for the now obsolete external Chiasmus tool, has been removed. * Full Unicode support for the command line. - dropped legacy commands: gpg-zip ==== librsvg ==== Version update (2.52.3 -> 2.52.4) Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2 rsvg-thumbnailer typelib-1_0-Rsvg-2_0 - Disable testsuite for now, let upstream figure out the issue with harfbuzz 3.1.1. - Update to version 2.52.4: + New features: - Support the isolation property from the Compositing and Blending Level 1 specification. - Support Visual Studio 2022. + Bug fixes: - The opacity and mix-blend-mode properties were not being applied when an element has a mask. - Fix panic when an empty group has a pattern fill and filters. - Fix the tests on Windows; the still only work when Fontconfig is present. - Work around a bug in the cairo-rs bindings in the test suite, that only manifests itself in s/390x due to its calling convention. See https://github.com/gtk-rs/gtk-rs-core/issues/335 ==== libstorage-ng ==== Version update (4.4.57 -> 4.4.58) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - Translated using Weblate (Catalan) (bsc#1149754) - 4.4.58 ==== libvpx ==== - Rename libvpx-configure-add-s390.patch to libvpx-configure-add-arch.patch: add support for RISC-V ==== libzapojit ==== Subpackages: libzapojit-0_0-0 typelib-1_0-Zpj-0_0 - Add upstream patch, fixes: CVE-2021-39360: libzapojit-skydrive-Guard-against-invalid-SSL-certificates.patch: skydrive: Guard against invalid SSL certificates. ==== lirc ==== - Add pyyaml-60-compatibility.patch to make the package compatible with PyYAML 6.0+ (sht#lirc#365). ==== mailx ==== - Add patch mailx-12.5-systemd.patch to add description how to avoid bugs like bsc#1192916 -- mailx does not send mails unless run via strace or in verbose mode ==== ncurses ==== Version update (6.3.20211115 -> 6.3.20211120) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch 20211120 + add dim, ecma+strikeout to st-0.6 -TD + deallocate the tparm cache when del_curterm is called for the last allocated TERMINAL structure (report/testcase by Bram Moolenaar, cf: 20200531). + modify test-package to more closely conform to Debian multi-arch. + if the --with-pkg-config-libdir option is not given, use ${libdir}/pkgconfig as a default (prompted by discussion with Ross Burton). - Correct offsets of patch ncurses-6.3.dif ==== protobuf-c ==== - Drop no longer needed rpmlintrc. - Also add a protobuf-c =< version Obsoletes to devel sub-package. - Fold main package into devel package, as it needed its own devel-package, add a protobuf-c = version Provides to devel sub-package. ==== python-PyYAML ==== Version update (5.4.1 -> 6.0) - Add patch setuptools.patch - update to 6.0 * drop Python 2.7 * always require `Loader` arg to `yaml.load()` * fix float resolver to ignore `.` and `._` * fix representation of Enum subclasses * fix libyaml extension compiler warnings * fix ResourceWarning on leaked file descriptors * remove remaining direct distutils usage ==== python-psutil ==== - Update skip-obs.patch to also skip TestProcess.test_ionice_linux ==== python-pysmbc ==== - Remove python2 guard so we always Provide/Obsolete the old name. ==== syslogd ==== Subpackages: klogd syslog-service - Added hardening to systemd service(s) (bsc#1181400). Modified: * klog.service * klogd.service * syslogd.service ==== tgt ==== - Added hardening to systemd service(s) (bsc#1181400). Added patch(es): * harden_tgtd.service.patch Modified: * tgtd.service ==== virtualbox ==== Version update (6.1.28 -> 6.1.30) Subpackages: virtualbox-guest-tools virtualbox-guest-x11 - Version bump to 6.1.30 (released November 22 2021 by Oracle) This is a maintenance release. The following items were fixed and/or added: VMM: Fixed 6.1.28 regression preventing VMs starting when using Hyper-V mode on Windows 10 GUI: Fixed inability to complete First Run wizard after browsing for an external image GUI: Fixed crash on macOS Big Sur while browsing for an external image from First Run wizard GUI: Fixed bug on Windows with inability to save taken screenshot under a folder with native name (bug #15561) GUI: Fixed bug on X11 with drag and drop initiated on single mouse click in VM storage settings GUI: Fixed settings check on machines not supporting hardware virtualization GUI: Non critical media related errors should not cause modal pop-up error messages Host-only networking: Fixed crash parsing /etc/vbox/networks.conf DVD: Fixed drive lock handling across VM reset VBoxHeadless: Fixed crash when running on macOS Monterey (bug #20636) VBoxManage: Fixed incorrect help text for "hostonlyif" vboximg-mount: Error message if no image is specified Linux host: For all distribution specific packages (deb/rpm format) fix the packaging so that the feature for unattended installation of guest OSes works Linux host and guest: Introduced initial support for kernel 5.16 Shared Clipboard: Improved communication between guest and host when guest has no clipboard data to report Linux Guest Additions: Allow running only one VBoxDRMClient instance (bug #19373) File "fixes_for_5.14.patch" deleted - fixed upstream. File "fixes-for-5.15.patch" deleted - fixed upstream. File "fixes-for-5.16.patch" deleted - fixed upstream. ==== virtualbox-kmp ==== Version update (6.1.28_k5.15.3_1 -> 6.1.30_k5.15.3_1) - Version bump to 6.1.30 (released November 22 2021 by Oracle) This is a maintenance release. The following items were fixed and/or added: VMM: Fixed 6.1.28 regression preventing VMs starting when using Hyper-V mode on Windows 10 GUI: Fixed inability to complete First Run wizard after browsing for an external image GUI: Fixed crash on macOS Big Sur while browsing for an external image from First Run wizard GUI: Fixed bug on Windows with inability to save taken screenshot under a folder with native name (bug #15561) GUI: Fixed bug on X11 with drag and drop initiated on single mouse click in VM storage settings GUI: Fixed settings check on machines not supporting hardware virtualization GUI: Non critical media related errors should not cause modal pop-up error messages Host-only networking: Fixed crash parsing /etc/vbox/networks.conf DVD: Fixed drive lock handling across VM reset VBoxHeadless: Fixed crash when running on macOS Monterey (bug #20636) VBoxManage: Fixed incorrect help text for "hostonlyif" vboximg-mount: Error message if no image is specified Linux host: For all distribution specific packages (deb/rpm format) fix the packaging so that the feature for unattended installation of guest OSes works Linux host and guest: Introduced initial support for kernel 5.16 Shared Clipboard: Improved communication between guest and host when guest has no clipboard data to report Linux Guest Additions: Allow running only one VBoxDRMClient instance (bug #19373) File "fixes_for_5.14.patch" deleted - fixed upstream. File "fixes-for-5.15.patch" deleted - fixed upstream. File "fixes-for-5.16.patch" deleted - fixed upstream. ==== xapps ==== Version update (2.2.3 -> 2.2.5) Subpackages: libxapp1 typelib-1_0-XApp-1_0 xapps-common xapps-common-lang - Update to version 2.2.5. * xapp-favorites: Fix introspection notation for _get_favorites(). * Fix a couple of build warnings. - Updates for version 2.2.4. * meson gir: Export 'xapp' as a package * xapp-gtk3-module.c: Apply window icon override to all windows for an app. ==== yast2-storage-ng ==== Version update (4.4.14 -> 4.4.15) - Fixed typo in message about encryption (part of jsc#SLE-21308) - 4.4.15

1 0

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 27 Nov '21

27 Nov '21

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have been failing to build for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - python-solo-python Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

1 0

New Tumbleweed snapshot 20211125 released!
by Dominique Leuenberger 27 Nov '21

27 Nov '21

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: mozc pcre2 (10.38 -> 10.39) rubygem-cri === Details === ==== mozc ==== Subpackages: fcitx-mozc ibus-mozc ibus-mozc-candidate-window mozc-gui-tools - Move mozc-fcitx5.spec to a dedicated linked package (for now) - Add python3-six to BuildReq explicitly, as the implicit dependency chain was broken on TW - Add fcitx5-mozc support: fcitx5-mozc-fix.patch It could be done with multibuild once when fcitx5 landed in FACTORY, but as of now, it's built in a separate spec file. ==== pcre2 ==== Version update (10.38 -> 10.39) Subpackages: libpcre2-16-0 libpcre2-32-0 libpcre2-8-0 libpcre2-8-0-32bit - pcre2 10.39: * Fix incorrect detection of alternatives in first character search in JIT * Update to Unicode 14.0.0 ==== rubygem-cri ==== - TW is not hard set on version 1550 - comparision to 1550 should only ever by done >= 1550, as it means TW and future CODE branches thereof.

1 0

Tumbleweed - Review of the week 2021/47
by Dominique Leuenberger / DimStar 26 Nov '21

26 Nov '21

Dear Tumbleweed users and hackers, Winter has come – at least that’s what I heard some colleagues talk about these days. Luckily, for me, there is no snow out yet and Tumbleweed has sufficient grip to roll ahead without getting stuck. As such, we have published 7 snapshots this week (1118…1124). The main changes published as part of those snapshots were: * Linux kernel 5.15.2 & 5.15.3 * Mesa 21.3.0 * Node.JS 16.13.0 * Firewalld 1.0.2 * php 7.4.26 * util-linux 2.37.2 * cURL 7.80.0 * git 2.34.0 * systemd 249.7 * icu 70.1 * Rust 1.56.1 * tbb 2021.4.0 That’s quite a big bunch of what was in the stagings over the last few days/weeks. Some things are still left, and other new stuff has landed for testing: * Linux kernel 5.15.5 * Mozilla Firefox 94.0.2 * Virtualbox 6.1.30 * Poppler 21.11.0 * Automake 1.16.5: strict on not calling twice AM_AUTOMAKE_INIT in configure.ac * GCC 11: Enable the full cross compiler, cross-aarch64-gcc11 and cross-riscv64-gcc11 now provide a fully hosted C (and C++) cross compiler, not just a freestanding one * cmake 3.22.0 * Moving default php version from php7 to php8 * pipewire 0.3.40, with a move to from pipewire-media-session to wireplumber; currently failing openQA * Bash: moving away from update-alternatives to handle /bin/sh; To allow busybox to step in as ‘sh’ provider. We are switching to a package replacement model (e.g. bash-sh, busybox-sh). Those packages will install the relevant /bin/sh symlinks * openSSL 3.0: No visible progress in the staging. Main blockers so far seems to be python 3.6 and python-cryptography

1 0

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 25 Nov '21

25 Nov '21

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have been failing to build for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - python-neutronclient Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

1 0