May 2021 - openSUSE Factory - openSUSE Mailing Lists

openSUSE Release Engineering Meeting 26.05.2021
by Lubos Kocman 27 May '21

27 May '21

All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting Meeting is hosted here https://meet.opensuse.org/ReleaseEngineeringMeeting ## Participants bittin, guillaumeg, dimstar, wengel, sarah, gp, lkocman, rbrown, maxlin, sbahling ## Leap 160.3 is the Leap 15.3 GM * Next steps get image renamed and signed Unlike in 15.2 we will publish the image to ftp-prod iso directory as agreed in 15.2 retro https://en.opensuse.org/Portal:15.2/Retrospective#.28In-.29Visibility_of_GM… ## openSUSE Tumbleweed * UsrMerge is now part of Factory; snapshot 0525 will be the first one to contain the switch. Factory is currently bootstrapping with this change (all ports) * GCC 11 is the new default compiler starting with 0525; as UsrMerge and GCC both trigger rebuilds for us, we combined them into one snapshot The above changes will take a bit, which will result in a lower snapshot count this week ## Richard (Kubic/TW MicroOS) Go 1.16 as default now released! Recent k8s CVE's handled and fixes released. Important fixes to Kubernetes 1.21 on the way, but blocked by the major TW work at the moment. People with cluster communication issues should look at [boo#1186125] for workarounds. https://microos.opensuse.org, https://kubic.opensuse.org and https://bugs.opensuse.org updated to include Bug Reporting links for MicroOS and Kubic. https://microos.opensuse.org updated with blog. Please contribute articles to https://github.com/kubic-project/blog to be published on both microos.opensuse.org and kubic.opensuse.org. Experiments started on a MicroOS build optimised for Rancher use cases. Experimenting with casync as an image delivery method. MicroOS Desktop (GNOME) Beta has been released, some pattern tuning identified before it can be considered production ready. Improvements to firstboot wizard otw to make it more resiliant to complex network arrangements. Talks about MicroOS Desktop (GNOME) and Rancher-optimised Kubic submitted to oSC ## Max * https://bugzilla.opensuse.org/show_bug.cgi?id=1184326 missing libzypp/zypper support lkocman: Michael Andres is on it, we might also need to supply ReleaseNotes entry (I have a WIP RN entry for this) * post-release work will start soon * cleanup of noarch binaries needed on pontifex ## Guillaume - Arm Tumbleweed: * Full rebuild due to gcc11/UsrMerge update. It will take a while to settle down. Leap 15.3: * aarch64: * Still not able to build locally (osc build --vm-type=kvm) for aarch64 with a Tumbleweed host. https://bugzilla.opensuse.org/show_bug.cgi?id=1183653 * Armv7: * Latest snapshot complains in YaST installer because it is unable to find base products to install. https://bugzilla.opensuse.org/show_bug.cgi?id=1183795#c15 (armv7 Leap and TW are affected)(still work in progress) Regarding the issue above: freezing of Leap:15.3, Step and Arm. We could freeze Step project, and have a subproject that contains only the fix for yast2-installer, which would be the actual difference. As Adrian mentioned it's basically additional workarounds. More AArch64 hardware for OBS have been ordered. They will support 32- bit but only for user-space, so no 32-bit kernel in qemu which needs some updates/tests in OBS. (OBS team is on it already). ETA: ~2 weeks. WSL: Stalled: WIP to have WSL on aarch64 on https://build.opensuse.org/project/show/home:Guillaume_G:WSL The goal is to have WSL-DistroLauncher package built for aarch64. Help welcomed. Doing more integration testing for WSL with kiwibuilds ## Sarah - s390x Tumbleweed: * LLVM bug with different jit data layout has prevented Postgres installations. Workaround is integrated. https://bugzilla.suse.com/show_bug.cgi?id=1185952 -> waiting for next successful build * Many new unresolvable package builds because of Python The s390x-Port has been invited as a Featured Project with 1 Day Mentoring to the Open Source Day and Grace Hopper Celebration. Presentation about openSUSE on the Mainframe accepted for oSC lkocman: Congrats! * Planning of openSUSE Kubic topics incl. containers as next additional steps ## Doug * openSUSE Leap 15.3 * GM & media kit sent to stakeholders/journalists (please hold on the final iso) it's still only on ftp-stage * Release party article out * would benefit from an update of Jitsi version * Asia Summit article published * Freenode * FrontRunner (best timing) * openSUSE Leap 15.3 Beta T-Shirts Progressing * openSUSE Conference (June 18 - 19) * Next Meeting (every Tuesday at 18:00 UTC on meet.o.o. & discord) * Scheduled published - https://events.opensuse.org/conferences/oSVC21/schedule * Registrations 134 * Speakers sent an email about schedule, sent token for https://opensuse.venueless.events * Attendees will be sent tokens soon * Perhaps related to your section Doug: me and Dominique were invited to https://distroleaders.club Anybody else from the Release Team wants to be in? Yes please, Richard ack! * Early feature call for 15.4 (Deadline for SLE is 25th of June). Doug we have to publish such announcement this week. ## Dirk Not available Filesystem directory permission hardening + fallout openSUSE Leap 15.3/step related installation failures are now recorded in https://build.opensuse.org/package/show/home:repo-checker/rebuilds Started to analyze a come of failures Focus on armv6/v7 build failure fixes on Tumbleweed (nodejs, various pandoc) Frontrunner Fallout is now 225 failures (149 failures last week), to be analyzed and fixed. (x86_64 only) Dirk: I'd really appreciate some help to get this down to a manageable number such as 20 or so. ## Gerald Having "fun" around Freenode. Any concerns moving to Libera.Chat? lkocman: +1 from my side to move to Libera Sent a request to register openSUSE as a project on Libera.Chat (so that we have control over our namespaces). Now sending a note to project@ and factory@ about a plan to move and, given how things have been unfolding the last 24 hours, expect for things to move faster even than expected yesterday. Any concerns with such a move? [None in this audience.] ## Wolfgang (Package Hub), Scott Bahling - x86_64: 2 failed packages left (mailman and tensorflow2:hpc) tensorflow2:hpc failing is sporadically I believe - s390x/ppc64le/aarch64 still some failed and unresolvables - checking on missing packages in Backports/Leap that where in Leap 15.2 (might be an issue for migration) - ~275 packages missing in subpackages module (which results in missing dependency for some packages) We will have to most likely defer these to maint update (talking about the main backports and leap project) Max: let's freeze Backports now and let's handle mailman and tensorflow in maint update Wolfgang needs to save the package state with the freeze. Adrian: Let's propose to freeze Backports project with RC not GM. https://github.com/openSUSE/openSUSE-release-process/issues/65 ## Adrian - CtLG or openSUSE Step Fixed misconfiguration of Leap sync OBS->ftp-stage zypper patch is expected to be working at this point of time Lubos will test this this week (especially for SLE updates repo, rest required no change) ftp-publishing for armv7/ports, could be set up today. Guillaume and Dirk agree to release the build. However we want to wait for announcement until we have a working ARMv7 build. Discussions about OpenSUSE 15.2 Leap (Boothole 2 Respin). Lubos: let's use respin as part of the subproject name. Lubos to create subproject, and will update the existing mailing list thread. This needs to be ready with first maint. update for Leap (origin SLE updates). Lubos will sync with Maintenance on this. Otherwise deadline would be something like week prior GA (scheduled for 2nd of June)

1 0

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 26 May '21

26 May '21

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have been failing to build for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - ledger - perl-RPM2 Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

1 0

New Tumbleweed snapshot 20210524 released!
by Dominique Leuenberger 26 May '21

26 May '21

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: Mesa (21.1.0 -> 21.1.1) Mesa-drivers (21.1.0 -> 21.1.1) apparmor java-11-openjdk libapparmor libepoxy (1.5.7 -> 1.5.8) libphonenumber (8.12.22 -> 8.12.23) libstorage-ng (4.4.8 -> 4.4.9) lightdm nautilus nodejs16 (16.1.0 -> 16.2.0) pango (1.48.4 -> 1.48.5) pipewire (0.3.27 -> 0.3.28) psmisc selinux-policy telepathy-mission-control (5.16.5 -> 5.16.6) virtualbox virtualbox-kmp webkit2gtk3 (2.32.0 -> 2.32.1) === Details === ==== Mesa ==== Version update (21.1.0 -> 21.1.1) Subpackages: Mesa-dri-devel Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - update to 21.1.1 * bugfix release * mostly AMD and Intel changes as usual, but also a decent amount of ARM fixes and more - Add swrast to vulkan - Enable vulkan on %{arm} and aarch64 with: swrast, amd, broadcom and freedreno ==== Mesa-drivers ==== Version update (21.1.0 -> 21.1.1) Subpackages: Mesa-dri Mesa-dri-nouveau Mesa-gallium Mesa-libva libvdpau_nouveau libvdpau_r300 libvdpau_r600 libvdpau_radeonsi libvulkan_intel libvulkan_radeon libxatracker2 - update to 21.1.1 * bugfix release * mostly AMD and Intel changes as usual, but also a decent amount of ARM fixes and more - Add swrast to vulkan - Enable vulkan on %{arm} and aarch64 with: swrast, amd, broadcom and freedreno ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-docs apparmor-parser apparmor-parser-lang apparmor-profiles apparmor-utils apparmor-utils-lang pam_apparmor pam_apparmor-32bit python3-apparmor - add abstractions-php8.diff to support PHP8 in abstractions/php (boo#1186267) ==== java-11-openjdk ==== Subpackages: java-11-openjdk-headless - Modified patch: * nss-security-provider.patch + make the NSS provider first in the list ==== libapparmor ==== Subpackages: libapparmor1 libapparmor1-32bit - add abstractions-php8.diff to support PHP8 in abstractions/php (boo#1186267) ==== libepoxy ==== Version update (1.5.7 -> 1.5.8) - Update to version 1.5.8: + Revert changes from PR #238 / #229 + Fixes regressions: #240, #252, #253 ==== libphonenumber ==== Version update (8.12.22 -> 8.12.23) - Update to version 8.12.23: * Updated phone metadata for region code(s): BF, CI, RW, SG, UG, US, UZ * Updated short number metadata for region code(s): DZ * New geocoding data for country calling code(s): 1572 (en) * Updated geocoding data for country calling code(s): 225 (en) * Updated carrier data for country calling code(s): 65 (en), 225 (en), 226 (en), 250 (en), 256 (en), 998 (en) * Updated / refreshed time zone meta data ==== libstorage-ng ==== Version update (4.4.8 -> 4.4.9) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#807 - remove double mount options (see bsc#1186298) - 4.4.9 ==== lightdm ==== Subpackages: liblightdm-gobject-1-0 lightdm-lang - Remove %ghost from /var/cache/lightdm. With SELinux enabled lightdm would otherwise not be allowed to create that directory. ==== nautilus ==== Subpackages: gnome-shell-search-provider-nautilus libnautilus-extension1 nautilus-lang - Drop baselibs.conf: there is nothing depending on the xxbit library anymore. ==== nodejs16 ==== Version update (16.1.0 -> 16.2.0) Subpackages: npm16 - New upstream version 16.2.0: * async_hooks: use new v8::Context PromiseHook API * deps: npm updated to 7.13.0 * lib: support setting process.env.TZ on windows * module: add support for URL to import.meta.resolve * process: add 'worker' event * util: add util.types.isKeyObject and util.types.isCryptoKey ==== pango ==== Version update (1.48.4 -> 1.48.5) Subpackages: libpango-1_0-0 libpango-1_0-0-32bit typelib-1_0-Pango-1_0 - Update to version 1.48.5: + Only initialize fontconfig once. + Add missing deprecation notices. + Add some missing apis to the markup docs. + Speed up Emoji classification. + Fix hangs and memory leaks. + Don't insert hyphens at word boundaries. + Handle empty lines better. + Avoid width fluctuations with ellipsized text. + Add a utility to show text segmentation. ==== pipewire ==== Version update (0.3.27 -> 0.3.28) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-modules pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Update to 0.3.28 * Highlights - Freewheeling was implemented. This makes it possible to export projects in ardour. - A new powerful filter-chain module was added that can be used to created all kinds of filter-chains from ladspa and builtin plugins. - Many more pulseaudio modules are now implemented: module-ladspa-sink, module-ladspa-source, module-pipe-sink, module-tunnel-sink, module-tunnel-source, module-zeroconf-discover - Fix a bug where devices would not appear after logout/login. - Fix a bug where the volume was reset to 0 and devices would have no audio. - Config files are now installed in the data dir, system overrides in /etc/pipewire and $HOME are checked first. * PipeWire - Implement freewheeling for JACK clients - Add filter-chain module that can be used to construct arbitrary graphs from ladspa and builtin plugins. - Add new property to easily set algorithm params - Add module-pulse-tunnel to tunnel audio to and from a PulseAudio compatible server. - Add a avahi zeroconf discover module, create pulse-tunnel when PulseAudio devices are announced. - Config files are now installed in the data dir, system overrides in /etc/pipewire and $HOME are checked first. - Applications now have their monitor ports named with the "monitor" prefix to avoid confusion with the output ports. - LICENSE clarifications. * GStreamer - fixes to the pipewiresink plugin. * SPA plugins - Fix a bug where the volume was reset to 0 - Add events to dbus plugin. This can be used to detect dbus disconnects. * Media-session - Handle dbus disconnect. - Handle device reservation errors. * PulseAudio server - Implement module-ladspa-sink and a new PipeWire-only module-ladspa-source - Implement module-pipe-sink - Implement module-tunnel-sink and module-tunnel-source - Fix a bug with module argument parsing - Implement module-zeroconf-discover * ALSA plugin - improve error handling ==== psmisc ==== Subpackages: psmisc-lang - Do not change CAP within spec file (boo#1186258) - Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch * Fix bsc#1185208 to make private mount namespaces work as well as to distinguish NFS mounts from same remote device share. ==== selinux-policy ==== Subpackages: selinux-policy-targeted - allow systemd to watch /usr, /usr/lib, /etc, /etc/pki as we have path units that trigger on changes in those. Added fix_systemd_watch.patch - own /usr/share/selinux/packages/$SELINUXTYPE/ and /var/lib/selinux/$SELINUXTYPE/active/modules/* to allow packages to install files there ==== telepathy-mission-control ==== Version update (5.16.5 -> 5.16.6) Subpackages: libmission-control-plugins0 - Update to version 5.16.6 + Update tests to Python 3 + account: Fix property name - Drop tp-mc-fix-prop-name.patch ==== virtualbox ==== Subpackages: virtualbox-guest-tools virtualbox-guest-x11 - Disable the build of kmp vboxvideo, at least temporarily. ==== virtualbox-kmp ==== - Disable the build of kmp vboxvideo, at least temporarily. ==== webkit2gtk3 ==== Version update (2.32.0 -> 2.32.1) Subpackages: libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 libwebkit2gtk3-lang typelib-1_0-JavaScriptCore-4_0 typelib-1_0-WebKit2-4_0 webkit2gtk-4_0-injected-bundles - Update to version 2.32.1: + Support building against the Musl C library. + Support building against ICU version 69 or newer. + Improve handling of Media Capture devices. + Improve WebAudio playback. + Improve video orientation handling. + Improve seeking support for MSE playback. + Improve flush support in EME decryptors. + Fix HTTP status codes for requests done through a custom URI handler. + Fix the Bubblewrap sandbox in certain 32-bit systems. + Fix inconsistencies between the WebKitWebView.is-muted property state and values returned by webkit_web_view_is_playing_audio(). + Fix the build with ENABLE_VIDEO=OFF. + Fix wrong timestamps for long-lived cookies. + Fix UI process crash when failing to load favicons. + Fix several crashes and rendering issues. + Updated translations. - Drop webkit2gtk3-icu69.patch: fixed upstream.

2 1

TW and NVIDIA proprietary drivers
by Kays 25 May '21

25 May '21

Hello everyone, I am quite new to the opensuse community, I hope this is the right place to talk about this issue. Please let me know if it is not! Since the beginning of last year when I switched to opensuse TW (from Debian testing/unstable) I repeatedly ran into issues with the NVIDIA proprietary drivers (that I was absolutely not used to coming from Debian) and I wanted to ask how to deal with these issues (fortunately apart from that TW has so far always been rock-solid!). For me (and many others) the problems started with kernel 5.9 that broke CUDA. At that time I was quite new to openuse and rolling distros and therefore I made a couple of mistakes that wasted a lot of time. In particular I did not know how to get back to an older kernel or driver version. For some reason I noticed the problem only way after the introduction of 5.9 and – I don't quite remember that part – either I didn't have any pre-5.9 kernel present on the system anymore or for some reason the older kernel had another issue. Anyway I was stuck with 5.9 and couldn't get CUDA to work that I depended on (also why is CUDA not included in the TW repos?). One thing that – as far as I'm aware – complicated things further is the fact that for some reason after a driver or kernel up- or downgrade the kernel modules of the NVIDIA driver were not correctly built for all of the installed kernels. Maybe there is also some misunderstanding on my side about how this works, but with my limited experience on opensuse I always ran into some problem (like version mismatch) when booting into an older kernel. Fortunately after a very long time of trying to figure out how to get out of this mess that I got myself into, finally the 5.9-compatible driver was released (but there also was some confusion about from which version on the fix was actually included) and I could check off that box, thinking that this was a once-in-a-lifetime problem due to a breaking change in the kernel that would most likely not reappear in the nearer future (also because I learned some tricks like how to use snapper and tumbleweed-cli and felt safe about potential future issues – great!). Unfortunately I was wrong about this being a one-time thing. Now with kernel 5.12 and NVIDIA 460.80 I have a new issue, NVenc is completely broken. And again I only noticed the issue when it was too late (my bad). As far as I am aware the NVIDIA 460.80 driver was released on May 16 and my last snapper snapshot is from May 17 if I don't want to rollback to November 2020. I am not entirely sure if the kernel or the driver broke NVenc, but it doesn't matter because with kernels I have a similar story: I have only 2 versions of 5.12 installed and an old 5.8 version that for some reason will not boot. Seems like I'm stuck with a broken combination again. End of rant/problem description. Of course I know that some measures that I could have taken very easily, like checking for malfunction immediately after the updates, would have saved me a lot of trouble. I will definitely be more careful in the future. However I would still like to hear your thoughts about how to better deal with this issue. What are the best practices when dealing with new driver and kernel versions? And when the system is already borked, what to do? Snapper has saved me a couple of times already, but aren't there any other solutions? In particular, I think it should be possible to install an older kernel from the TW repo history, but can I also do this for the NVIDIA driver? I'm not aware of any older version of the driver present in the repos. For me as a newcomes this really is a bit of a mess... Thank you in advance for your thoughts and help! Joe

8 14

Leap 15.3 - one grub.efi for two architectures in /EFI/BOOT repository directory?
by Andrei Borzenkov 25 May '21

25 May '21

The http://download.opensuse.org/distribution/leap/15.3/repo/oss/EFI/BOOT/ contains bootx64.efi and bootaa64.efi so looks bootable on both architectures - but there is only one grub.efi and it is aarch64, not x86_64. TW does not have this problem because x86_64 and aarch64 are published separately. Leap 15.2 did not have this issue because no aarch64 was provided. It may cause issues for anyone who automates building bootable image from repository. So far /EFI/BOOT was expected to actually boot. Looks like grub.efi needs to be per-architecture as well ... of course it means new shim ... And also there could be other conflicting files I am not aware of.

2 1

They are a Openshot maintainer?
by Juan Erbes 24 May '21

24 May '21

A month ago after the last update of Tumbleweed I could not start openshot-qt anymore, getting the error: File "/usr/lib/python3.8/site-packages/openshot_qt/windows/views/timeline_webview.py", line 42, in <module> from PyQt5.QtWebKitWidgets import QWebView ModuleNotFoundError: No module named 'PyQt5.QtWebKitWidgets' In this topic "Could not start openshot-qt", Christophe Giboudeaux said: Looks like it won't. QtWebkit support was dropped from python-qt5. openshot wasn't in the list when we checked all pyQt5 users however. Upstream supports qtwebengine but they didn't make a release since ages. Later Ben Greiner created the package: https://download.opensuse.org/repositories/home:/bnavigator:/pyqt:/webkit/F… With this package I could start Openshot, but ALL EXPORTED VIDEOS in any format and settings HAS NO SOUND. I see that the latest Openshot builded has about 1 year: https://build.opensuse.org/package/show/multimedia:apps/openshot-qt?expand=0 Regards, Juan -- USA LINUX OPENSUSE QUE ES SOFTWARE LIBRE, NO NECESITAS PIRATEAR NADA Y NI TE VAS A PREOCUPAR MAS POR LOS VIRUS Y SPYWARES: http://www.opensuse.org/es/ Puedes visitar mi blog en: http://jerbes.blogspot.com.ar/

1 0

Re: TW and NVIDIA proprietary drivers
by Michael Hamilton 24 May '21

24 May '21

On Monday 24 May 2021, Joe Kays wrote: > Dear Michael, > > thank you for your reply, I totally did not know about the keeppackages option! > It sounds like a great way to keep older NVIDIA driver versions as a backup. Does it survive a zypper clean (-a)? > > I already knew the multikernel option, and that's how I managed to keep the 5.8 kernel, but unfortunately for some reason it won't boot anymore, that's kind of weird. I think installing an older kernels from the TW package history (http://download.opensuse.org/history/) is the way to go in this case. > > So, all in all I think the problem could be easily solved with these 3 options: keeping old packages from the NVIDIA repo, setting up multikernel in the zypper config, and downgrading via package history in case multikernel somehow messes up. > > Now the only open question for me is: How do I fix the current situation, where I don't have a cached version of the NVIDIA driver? Unfortunately it seems there is no such version history for the NVIDIA repository. Is there still some way to get my hands on an older version (preferably without having to do the installation 'the hard way')? > > Thanks a lot! > Joe > I haven't used it, but google reveals: https://www.nvidia.com/en-us/drivers/unix/linux-amd64-display-archive/ I guess they could be installed "the hard way". Michael

2 1

New Tumbleweed snapshot 20210522 released!
by Dominique Leuenberger 24 May '21

24 May '21

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: black-hole-solver (1.8.0 -> 1.10.1) dpdk (19.11.4_k5.12.4_1 -> 19.11.8_k5.12.4_1) === Details === ==== black-hole-solver ==== Version update (1.8.0 -> 1.10.1) - Update to version 1.10.1: * Add "--show-max-num-played-cards" flag, inspired by https://politaire.com/article/blackhole.html - Add fix-pkgconfig-libdir.patch to fix path of library dir in pkgconfig file. ==== dpdk ==== Version update (19.11.4_k5.12.4_1 -> 19.11.8_k5.12.4_1) - Update LTS version to maintenance release 19.11.8 * vhost/crypto: fix data length check (CVE-2020-14374) * vhost/crypto: fix incorrect descriptor deduction (CVE-2020-14378) * vhost/crypto: fix incorrect write back source * vhost/crypto: fix missed request check for copy mode (CVE-2020-14376 CVE-2020-14377) * vhost/crypto: fix pool allocation * vhost/crypto: fix possible TOCTOU attack (CVE-2020-14375) * Changes from 19.11.6: https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id14 * Changes from 19.11.7: https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id18 - Drop security patches, fixed with 19.11.5 * 0001-vhost-crypto-fix-pool-allocation.patch * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch * 0004-vhost-crypto-fix-incorrect-write-back-source.patch * 0005-vhost-crypto-fix-data-length-check.patch * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch - Drop 0001-kni-fix-build-with-Linux-5.9.patch, fixed with 19.11.6 - Updated 0001-SLE15-SP3-compatibility-patch-for-kni.patch

1 0

New Tumbleweed snapshot 20210521 released!
by Dominique Leuenberger 23 May '21

23 May '21

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: QGnomePlatform (0.6.1 -> 0.7.1) adwaita-qt alpine blueberry (1.3.9 -> 1.4.2) branding-openSUSE desktop-translations (84.87.20200630.124e7a8c -> 84.87.20210517.b9a41955) gtk4-branding-openSUSE hexchat json-c kimageformats llvm12 patterns-base permissions (1550_20210125 -> 1550_20210518) polkit-default-privs (1550+20210503.88baaca -> 1550+20210517.56da22d) postgresql13 python-atpublic (2.1.1 -> 2.3) rubygem-marcel (1.0.1 -> 0.3.3) schily signon-plugin-oauth2 (0.24 -> 0.25) swtpm xfce4-screenshooter (1.9.8 -> 1.9.9) zchunk (1.1.11 -> 1.1.14) zstd (1.4.9 -> 1.5.0) === Details === ==== QGnomePlatform ==== Version update (0.6.1 -> 0.7.1) - Update to version 0.7.1: + Fixed wrong color palette with Qt 5.15 + Fixed issue when font configuration was not parsed properly + Use xdg-desktop-portal for opening files + Prioritize Adwaita dark variant for all themes containing "-dark" suffix + Use FileChooser portal only when possible + Take QT_STYLE_OVERRIDE into account when considering dark variant + Fixed memory leaks - Add fix-qt5-x11-config.patch, linking fails because of missing x11 link time dependency of gtk3 - Drop QGnomePlatform-qt-5.15.patch: Upstream fixed ==== adwaita-qt ==== Subpackages: adwaita-qt5 libadwaitaqt1 - Add baselibs.conf: create libadwaitaqt1-32bit as needed by QGNomePlatform. ==== alpine ==== Subpackages: pico - Set system mail directory to /var/mail ==== blueberry ==== Version update (1.3.9 -> 1.4.2) Subpackages: blueberry-lang - Update to 1.4.2 * l10n: Update translations * l10n: Update files * Don't use /usr/bin/env to call python3 ==== branding-openSUSE ==== Subpackages: grub2-branding-openSUSE libreoffice-branding-openSUSE plymouth-branding-openSUSE systemd-icon-branding-openSUSE wallpaper-branding-openSUSE yast2-qt-branding-openSUSE - Enable grub2-branding on riscv64 ==== desktop-translations ==== Version update (84.87.20200630.124e7a8c -> 84.87.20210517.b9a41955) - Update to version 84.87.20210517.b9a41955: * Translated using Weblate (French) * Translated using Weblate (Lithuanian) * Translated using Weblate (French) * Translated using Weblate (Chinese (China) (zh_CN)) * Translated using Weblate (Turkish) * Translated using Weblate (Slovak) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Japanese) * Translated using Weblate (Kabyle) * Translated using Weblate (Japanese) * Translated using Weblate (Slovak) * Translated using Weblate (Hindi) * Translated using Weblate (Hindi) * Translated using Weblate (Slovak) * Translated using Weblate (Chinese (China) (zh_CN)) * Translated using Weblate (Hindi) * Translated using Weblate (Hindi) * Translated using Weblate (Turkish) * Translated using Weblate (Catalan) * Translated using Weblate (French) * Translated using Weblate (French) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Slovak) * Translated using Weblate (Finnish) * Translated using Weblate (Finnish) * Translated using Weblate (Indonesian) * Translated using Weblate (Slovak) * Translated using Weblate (Italian) * Translated using Weblate (Turkish) * Translated using Weblate (Dutch) * Translated using Weblate (Slovak) * Translated using Weblate (Catalan) * Translated using Weblate (Japanese) * Translated using Weblate (Chinese (China)) * Translated using Weblate (German) * Translated using Weblate (German) * Translated using Weblate (French) * Translated using Weblate (Finnish) * Translated using Weblate (Croatian) * Translated using Weblate (Chinese (Taiwan)) * Translated using Weblate (Chinese (Taiwan)) * Translated using Weblate (Chinese (Taiwan)) * Translated using Weblate (Chinese (Taiwan)) * Translated using Weblate (Chinese (China)) * Translated using Weblate (German) * Update strings from Leap 15.2. * Translated using Weblate (German) * Translated using Weblate (Chinese (China)) * Translated using Weblate (German) * Translated using Weblate (Russian) * Translated using Weblate (Russian) * Translated using Weblate (Finnish) * Translated using Weblate (Russian) * Translated using Weblate (German) * Translated using Weblate (Slovak) * Translated using Weblate (Finnish) * Translated using Weblate (Finnish) * Translated using Weblate (Finnish) * Translated using Weblate (Chinese (China)) * Translated using Weblate (Finnish) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Central Atlas Tamazight) * Added translation using Weblate (Central Atlas Tamazight) * Translated using Weblate (Chinese (China)) * Translated using Weblate (Chinese (China)) * Translated using Weblate (Italian) * Translated using Weblate (Greek) * Translated using Weblate (Finnish) * Translated using Weblate (Finnish) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (German) * Translated using Weblate (German) * Translated using Weblate (German) * Translated using Weblate (German) * Translated using Weblate (French) * Translated using Weblate (Finnish) * Translated using Weblate (Chinese (China)) * Translated using Weblate (Chinese (China)) * Translated using Weblate (Chinese (China)) * Translated using Weblate (Catalan) * Translated using Weblate (Portuguese (Brazil)) ==== gtk4-branding-openSUSE ==== - Remove gtk-fallback-icon-theme from gtk4-branding-settings.ini: key no longer exists in gtk 4. ==== hexchat ==== Subpackages: hexchat-lang - Add Libera.Chat to the channel list * feature-add-libera-chat.patch ==== json-c ==== Subpackages: libjson-c5 libjson-c5-32bit - Add -std=gnu99 to fix build with some gcc versions ==== kimageformats ==== Subpackages: kimageformats-eps - Enable HEIF plugin also on Leap 15.3 now ==== llvm12 ==== Subpackages: clang-tools clang12 clang12-doc libLLVM12 libLTO12 libc++-devel libc++1 libc++abi-devel libc++abi1 libclang12 - Set memory limits for DWZ to 4x. ==== patterns-base ==== Subpackages: patterns-base-apparmor patterns-base-base patterns-base-basesystem patterns-base-basic_desktop patterns-base-console patterns-base-documentation patterns-base-enhanced_base patterns-base-minimal_base patterns-base-selinux patterns-base-sw_management patterns-base-transactional_base patterns-base-x11 patterns-base-x11_enhanced - Some enhanced_base cleanup * alsa-plugins will be pulled in by alsa if needed * cronie is not needed in favor of systemd timers * The cups server is not needed in general * postfix used to be required by cron but not anymore today * cyrus-sasl will be pulled in by others if needed * openslp will be pulled in by rsync so far * translation-update is for build systems only * udev is pulled in by systemd if needed * perl-TermReadLine-Gnu ??? ==== permissions ==== Version update (1550_20210125 -> 1550_20210518) Subpackages: chkstat permissions-config - Update to version 20210518: * whitelist please (bsc#1183669) - Update to version 20210518: * Fix enlightenment paths for 32-bit architectures ==== polkit-default-privs ==== Version update (1550+20210503.88baaca -> 1550+20210517.56da22d) - Update to version 1550+20210517.56da22d: * Add systemd homed (boo#1185285) ==== postgresql13 ==== Subpackages: libpq5 postgresql13-contrib postgresql13-docs postgresql13-llvmjit postgresql13-server - bsc#1185952: llvm12 breaks PostgreSQL 11 and 12 on s390x. Use llvm11 as a workaround. ==== python-atpublic ==== Version update (2.1.1 -> 2.3) - version update to 2.3 2.3 (2021-04-13) ================ * Do type hinting the right way. (GL#10) 2.2 (2021-04-13) ================ * ``public()`` and ``private()`` can't be correctly type annotated, so the type hints on these two functions have been removed. The ``ModuleAware`` was also removed. (GL#10) * Added a ``py.typed`` file to satisfy type checkers. (GL#9) * Fixed a documentation cross-reference bug. ==== rubygem-marcel ==== Version update (1.0.1 -> 0.3.3) - updated to version 0.3.3 (boo#1108633) * Shush Ruby interpreter warnings (#6) * Exclude test files from published gem to shrink it from 7.5 MB to 7.5 KB (#11) - initialize package [#] v0.3.2 * Emit the vnd/ms-powerpoint content type for *.ppt files. (#3) [#] v0.3.1 * Support Ruby 2.2 for Rails compatibility. ==== schily ==== Subpackages: cdda2wav cdrecord libcdrdeflt1_0 libdeflt1_0 libedc_ecc1_0 libedc_ecc_dec1_0 libfile1_0 libfind4_0 libparanoia1_0 librmt1_0 librscg1_0 libscg1_0 libscgcmd1_0 libschily2_0 mkisofs readcd spax star - Update to release 2021.05.19 * Bourne Shell: The "ERR" trap is now also triggered in case that the error is of type "command not found" or "cannot execute". * Bourne Shell: the fc(1) builtin now handles "fc -l -0" the same way as ksh does and refers to the current command. Before, only "fc -l -1" did work to select the previous command. ==== signon-plugin-oauth2 ==== Version update (0.24 -> 0.25) - Update to version 0.25 * OAuth2: try using specialized hostname first, use "Host" as fallback only * OAuth1: add UserAgent parameter * OAuth2: pass token query in request body * OAuth2: always try normal authentication if refresh token fails * OAuth2: let the client read all extra info from the response * Plugin: implement also new AuthPluginInterface2 ==== swtpm ==== - swtpm_cert: rename deprecated libtasn1 types. * https://github.com/stefanberger/swtpm/pull/443 * Add swtpm-rename_deprecated_libtasn1_types.patch ==== xfce4-screenshooter ==== Version update (1.9.8 -> 1.9.9) Subpackages: xfce4-screenshooter-lang xfce4-screenshooter-plugin - Update to version 1.9.9 * Add link to Imgur ToS (gxo#apps/xfce4-screenshooter#54) * Add notice about imgur (gxo#apps/xfce4-screenshooter#53) * Add launchable tag to appdata.xml * Update help message for --save option * Add combobox with file extensions (gxo#apps/xfce4-screenshooter#6) * Add option to capture window border or not (gxo#apps/xfce4-screenshooter#4) * Preserve last used extension * Save screenshots according to the extension (gxo#apps/xfce4-screenshooter#6) * Avoid save dialog loop if action was specified from CLI (gxo#apps/xfce4-screenshooter#41) * Respect windows scaling (gxo#apps/xfce4-screenshoote!18) * Fix compilation warnings * Add version check for pango * Correctly calculate dimensions of size window (gxo#apps/xfce4-screenshooter#37) * Add option to disable Imgur upload (gxo#apps/xfce4-screenshooter#20) * Translation Updates ==== zchunk ==== Version update (1.1.11 -> 1.1.14) - Update to version 1.1.14 * Final fixes for zstd 1.5 support - Update to version 1.1.12 * Update testsuite for zstd 1.5 ==== zstd ==== Version update (1.4.9 -> 1.5.0) Subpackages: libzstd1 libzstd1-32bit - Update to version 1.5.0 * https://github.com/facebook/zstd/releases/tag/v1.5.0 * Improved Middle-Level Compression Speed * Improved High-Level Compression Ratio * Faster Decompression Speed * Dynamic Library Supports Multithreading by Default - Drop zstd-1.4.9-Avoid-SIGBUS-on-armv6.patch, merged upstream - Add zstd-1.4.9-Avoid-SIGBUS-on-armv6.patch to fix crashes when running armv6 userspace on armv8 64-bit kernels

1 0

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 22 May '21

22 May '21

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have been failing to build for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - casarest - ogre - python-cbor2 - python-google-cloud-storage - python-spyder-notebook Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

1 0