June 2021 - openSUSE Factory - openSUSE Mailing Lists

3 additional review rounds for the openSUSE Leap 15.3 retrospective
by Lubos Kocman 29 Jun '21

29 Jun '21

Hello openSUSE! The first review round of the openSUSE Leap 15.3 retrospective happened as part of the openSUSE Conference last Saturday. let's have at additional rounds, where we'll continue from where we've ended last time (marked with "<break"). Three rounds should be sufficient, based on the amount of data and our pace from the first round. Dates: June 22nd - 7-8am UTC (9-10am CEST) June 22nd - 15-16pm UTC (17-18pm CEST) June 23rd - 7-8am UTC (9-10am CEST) In all cases let's use our favorite collaboration space https://meet.opensuse.org/bar for increased outreach. Everyone is welcome to join! The idea is to screen share, read through the data, collaborate with reviewers on action items, etc, and hopefully, also categorize the issue in the way how we did that in 15.2. I'd like to make sure we process the data before the openSUSE Release Team meeting this Wednesday. Where I'd already like to provide some "summary" of what to focus on in Leap 15.4. The working document for retro review can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-Leap-15.3-retro-20200616 Best regards Lubos Kocman openSUSE Leap Release Manager

10 14

YaST: highlights of development sprint 126
by Ancor Gonzalez Sosa 28 Jun '21

28 Jun '21

As the main highlight for this sprint, the YaST team finished the first phase of the reworked management of users and groups in (Auto)YaST. Check all the details at https://yast.opensuse.org/blog/2021-06-28/sprint-126 Cheers. -- Ancor González Sosa YaST Team at SUSE Linux GmbH

1 0

[TW] Error 0ad - usr/bin/pyrogenesis: symbol lookup error: /usr/bin/pyrogenesis: undefined symbol:
by Manuel Quintero Fonseca 28 Jun '21

28 Jun '21

Hi, when running 0ad the game won't open, it shows the following error: 0ad 0.0.24b-6.8 saku@openSUSE:~> 0ad TIMER| InitVfs: 1.83662 ms Writing the mainlog at /home/saku/.config/0ad/logs/mainlog.html TIMER| CONFIG_Init: 2.05862 ms /usr/bin/pyrogenesis: symbol lookup error: /usr/bin/pyrogenesis: undefined symbol: _ZN2JS16PrepareZoneForGCEPNS_4ZoneE, version mozjs_78

2 1

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 28 Jun '21

28 Jun '21

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have been failing to build for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - anjuta-extras - armnn - bazel0.29 - bazel1.2 - bazel2.0 - golang-github-nsf-gocode - gpsbabel - kasumi - leechcraft - openmw - vapoursynth - vtk - xonotic - zypper-docker Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

4 3

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 28 Jun '21

28 Jun '21

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have been failing to build for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - Play - abiword - clFFT - cryptctl - cuneiform - elektra - fluxbox - fwbuilder - gangway - giac - golang-org-x-tools - grfcodec - gromacs - gstreamermm - hawk-apiserver - htdig - icc-examin - katacontainers-image-initrd - kurso-de-esperanto - lalpulsar - libloki - libretro-play - libvma - lnav - log4shib - mate-eiciel - mccs - meshlab - non - nut - nvidia-container-toolkit - octave-forge-geometry - odp - opae - opensaml - opensc - pfstools - prometheus-cpp - python3-espressomd - qgroundcontrol - qore-sqlite3-module - scintilla - subtitleeditor - tripwire - uhd - warzone2100 - xfs - xmltooling Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

3 2

New Tumbleweed snapshot 20210626 released!
by Dominique Leuenberger 27 Jun '21

27 Jun '21

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: clamav (0.103.2 -> 0.103.3) crash libmediawiki libqt5-qttranslations (5.15.2 -> 5.15.2+kde20) === Details === ==== clamav ==== Version update (0.103.2 -> 0.103.3) Subpackages: libclamav9 libfreshclam2 - Update to 0.103.3 * Fixed a scan performance issue when ENGINE_OPTIONS_FORCE_TO_DISK is enabled. This issue did not impacted most users but for those affected it caused every scanned file to be copied to the temp directory before the scan. * Fix ClamDScan crashes when using the --fdpass --multiscan command-line options in combination with the ClamD ExcludePath config file options. * Fixed an issue where the mirrors.dat file is owned by root when starting as root (or with sudo) and using daemon-mode. File ownership will be set to the DatabaseOwner just before FreshClam switches to run as that user. * Renamed the mirrors.dat file to freshclam.dat. * Disabled the HTTPUserAgent config option if the DatabaseMirror uses clamav.net. This will prevent users from being inadvertently blocked and will ensure that we can keep better metrics on which ClamAV versions are being used. * Moved the detection for Heuristics.PNG.CVE-2010-1205 behind the ClamScan --alert-broken-media option (ClamD AlertBrokenMedia yes) option. This type of PNG issue appears to be common enough to be an annoyance, and the CVE is old enough that no one should be vulnerable at this point. * Fix ClamSubmit failures after changes to Cloudflare "__cfduid" cookies. See: https://blog.cloudflare.com/deprecating-cfduid-cookie/ ==== crash ==== - Kernel commit 5c83511bdb9832c86be20fb86b783356e2f58062 removed pv_init_ops, and commit 054ac8ad5ebe4a69e1f0e842483821ddbe560121 removed the Xen-specific paravirt patch function. As a result, pvops Xen dumps are no longer recognized as Xen dumps, and virtual-to-physical translation fails. Use the value of xen_start_info to determine whether the kernel is running in Xen PV mode. As suggested by Juergen Gross. (bsc#1187634) + crash-xen-pvops.patch ==== libmediawiki ==== - Add Fix-compilation-error-with-Qt-5.15.patch to fix build with the latest Qt - Spec cleanup ==== libqt5-qttranslations ==== Version update (5.15.2 -> 5.15.2+kde20) - Switch to KDE's maintenance branch - Update to version 5.15.2+kde20: * prune bogus comment from linguist_nl * Update pt_BR translations for 5.15 branch * Remove obsolete entries from zh_CN translations * Add initial translation for Norwegian Nynorsk * l10n: zh_TW: update translations * update chinese simplifid language for qt5.12 * Add dutch (nl) files and partial translations * Split and update Persian translations * Add pt_BR translations for 5.12 * Bump version * Bump version * Bump version * Bump version * add croatian translation * Bump version * fix translation of "discard" in italian - Add patch to reset version to 5.15.2: * 0001-Revert-Bump-version.patch

1 0

wine issue after update (window not opening correctly)
by Wolfgang Rosenauer 27 Jun '21

27 Jun '21

Hi, since a few weeks - unfortunately I don't know exactly since when or which wine version (assuming it really is caused by wine) introduced it - I have an issue with running a rather small windows application. It's the only one I'm using via wine so cannot compare to others. I'm running Tumbleweed with wine 6.11 at the moment. The application I'm using is called "winbox" and is Mikrotik's RouterOS configuration interface. It first opens a window to select the actual device to configure and that works as before but once I try to connect to a device it is supposed to open a new window which does not happen though. Since I'm rather clueless about how to debug wine and what is relevant and so on I do not have better information right now. So trying here to get some feedback what to check, how to debug if it's really the wine version. Anything I can try and so? Wolfgang

2 1

Please remove the xwayland ("Wayland") and wayland ("Full Wayland") sessions as we know them
by Adrien Glauser 27 Jun '21

27 Jun '21

Dear all, Over the past months I've run into multiple bugs on both "wayland sessions" shipped by default by Tumbleweed (Leap uses the same settings so it's in the same boat as far as I can tell) which I was never running into on two other Linux distributions (i.e. NixOS and Fedora). This caught my attention and after back and forth discussions with Plasma developers and members of the oS community, this conclusion has become inescapable: most of these bugs are not just facilitated, but outright *caused* by certain settings that the package maintainer(s) of the Plasma desktop have decided to apply, against the recommendations of the Plasma developers. If like me a couple of days ago you aren't familiar with this topic, the issue revolves around two environmental variables which our Plasma packagers have decided to override: - GDK_BACKEND: our xwayland session (displayed as "Plasma Wayland" in SDDM) is built with a patch overriding its value to "xcb", while our wayland session (displayed as "Plasma Full Wayland in SDDM) overrides it to "wayland" - QT_QPA_PLATFORM: overriden to "xcb;wayland" and "wayland;xcb" in the two sessions respectively. Both variables are read at runtime to control the choice of a display client by GTK and Qt apps, as their name suggests. In this instance our xwayland session forces GTK apps to use an X11 client, whereas our wayland ("Full Wayland") session forces them to use a Wayland client. As for Qt apps, xwayland forces them to use an X11 client -- with a fallback on a wayland client -- while wayland ("Full Wayland") does things vice-versa -- forces them to use a wayland client, with a fallback on X11. Now for the issue: roughly put, the issue is that the decision to override these values corners users in an impossible dilemma. To appreciate the dilemma, we can consider two widely used sets of applications: a. recent, well-maintained Qt/GKT native applications installed from official .RPM packages (typically: Kate, Konsole, Kwin); and b. flatpak-ed, apps using either slightly outdated GTK libraries or based on the Electron stack (~ most of the flatpaks) If the user picks xwayland, several apps in (a) will run into issues. The reason is that KDE developers, in the course of migrating their code base to the wayland compositing protocol, have made substantial efforts to make these applications play nice with a wayland client, and pushing these applications in the reverse direction is likely to introduce regressions, to escape test coverage and make it very, very difficult for the end user to get troubleshooting and support from KDE. While if the user picks wayland ("Full Wayland"), the (a)-applications will run fine but the (b)-applications will be very buggy, and most of them will just refuse to launch. And by the way it's very easy for you to test both horns of the dilemma. That's simply a cherry-picked example, but it's not difficult to come up with more: try making a custom, rectangular capture using Spectacle in xwayland (this will fail because the program was built with the idea that it would output to wayland, not X11); or try launching something like the OBS Studio flatpak in wayland ("Full Wayland"). Until yesterday I thought that the solution to this pain was to use a different choice of values for GDK_BACKEND and QT_QPA_PLATFORM, setting them for example to "xcb" and "wayland;xcb", building on the assumption that Qt apps need wayland and that Gtk apps are compatible with X11. But in fact we don't *need* at all to find any particular combination of values, because as other members of the community pointed out, both Gtk and Qt apps are perfectly able to find their way to their preferred display client. So the best course of action is simply to not force any particular value down their throat, which as far as I know boils down to simply removing the xwayland and wayland ("Full wayland") sessions, replacing them with a session in line with upstream, which does not bake these values into their plasma desktop builds. To me the situation can be summarized by: we're altering the plasma desktop from upstream, sending to library and application developers a message that is more or less "we don't care what you guys think your programs should display to, because we at oS know better". This message would be tolerable if it secured the best for our users, but as I've tried to suggest, that's not the case. Not only are our users going to have a flawed perception of the Plasma desktop, because it behaves too rogue to express the intent of upstream, but we are making it unnecessarily difficult for our users to get decent troubleshooting, because no other distribution does it our way. That means a much smaller user pool to draw from when troubleshooting our users, and requires that our users remember to warn people at bugs triage that they're using a *special plasma config*. I've reached out yesterday to Fabian Vogt -- one of the maintainers of our plasma desktop package -- on these matters, and so far he has been helpful and open-minded. I certainly don't want to arm-wrestle him over this mailing list. Instead I am trying to fulfill his demand for more user feedback. Best, Adrien

19 53

New Tumbleweed snapshot 20210625 released!
by Dominique Leuenberger 26 Jun '21

26 Jun '21

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ImageMagick (7.0.11.13 -> 7.1.0.0) Mesa (21.1.2 -> 21.1.3) Mesa-drivers (21.1.2 -> 21.1.3) MozillaFirefox (89.0 -> 89.0.2) audit (2.8.5 -> 3.0.2) audit-secondary (2.8.5 -> 3.0.2) bind (9.16.16 -> 9.16.18) dracut (053+suse.93.g039ac07d -> 055+suse.106.g760b0c69) ell (0.40 -> 0.41) exiv2 (0.27.3 -> 0.27.4) flatpak (1.11.1 -> 1.11.2) gdb hplip (3.20.11 -> 3.21.4) k3b less (586 -> 590) libalternatives (1.0 -> 1.1) libconfig (1.7.2 -> 1.7.3) libfastjson libimagequant (2.14.1 -> 2.15.1) librdkafka (1.6.1 -> 1.7.0) libstorage-ng (4.4.14 -> 4.4.15) libtheora libvirt libzip (1.7.3 -> 1.8.0) live555 (2020.10.16 -> 2021.05.22) man (2.8.4 -> 2.9.4) man-pages (5.11 -> 5.12) mtools (4.0.27 -> 4.0.31) ncurses (6.2.20210515 -> 6.2.20210612) nodejs-common nodejs16 (16.3.0 -> 16.4.0) openssh osinfo-db (20210215 -> 20210621) patterns-base perl-libwww-perl (6.54 -> 6.55) pipewire (0.3.30 -> 0.3.30+55) pngquant (2.13.1 -> 2.15.1) polkit-qt5-1 (0.113.0 -> 0.114.0) publicsuffix (20210519 -> 20210615) python-qt5-sip qca-qt5 rubygem-backport (1.1.2 -> 1.2.0) rubygem-bindata (2.4.8 -> 2.4.10) rubygem-cool.io (1.7.0 -> 1.7.1) rubygem-css_parser (1.7.1 -> 1.9.0) rubygem-fog-core (2.2.3 -> 2.2.4) rubygem-formatador (0.2.5 -> 0.3.0) rubygem-pdf-reader (2.4.2 -> 2.5.0) rubygem-prawn-svg (0.31.0 -> 0.32.0) rubygem-rubocop (1.15.0 -> 1.17.0) rubygem-serverengine (2.2.2 -> 2.2.4) rubygem-tmuxinator (2.0.3 -> 3.0.1) rubygem-tzinfo-data (1.2020.6 -> 1.2021.1) rubygem-yard (0.9.25 -> 0.9.26) tigervnc totem (3.38.0 -> 3.38.1) virt-manager vlc (3.0.13 -> 3.0.16) xf86-input-libinput (1.0.1 -> 1.1.0) yast2-firewall (4.4.0 -> 4.4.1) yast2-storage-ng (4.4.0 -> 4.4.6) yast2-trans (84.87.20210612.ff10a453ed -> 84.87.20210620.b9c691b1c1) === Details === ==== ImageMagick ==== Version update (7.0.11.13 -> 7.1.0.0) Subpackages: ImageMagick-config-7-SUSE ImageMagick-extra libMagick++-7_Q16HDRI5 - version update to 7.1.0.0 [bsc#1187501] * SVG no longer hangs when handling class in <defs> (reference https://github.com/ImageMagick/ImageMagick/issues/3818) * Bump minor version (reference https://github.com/ImageMagick/ImageMagick/issues/3768) * Raise exception for invalid compose:args geometry (reference https://github.com/ImageMagick/ImageMagick/issues/3765) * Added support for reading and writing 16-bit jxl images. - modified sources % baselibs.conf ==== Mesa ==== Version update (21.1.2 -> 21.1.3) Subpackages: Mesa-dri-devel Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more details on https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/4… - update to 21.1.3 * third bugfix * mostly AMD fixes ==== Mesa-drivers ==== Version update (21.1.2 -> 21.1.3) Subpackages: Mesa-dri Mesa-gallium Mesa-libva libvdpau_r300 libvdpau_r600 libvdpau_radeonsi libvulkan_intel libvulkan_radeon libxatracker2 - no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more details on https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/4… - update to 21.1.3 * third bugfix * mostly AMD fixes ==== MozillaFirefox ==== Version update (89.0 -> 89.0.2) Subpackages: MozillaFirefox-translations-common - Mozilla Firefox 89.0.2 (boo#1187648): * Fix occasional hangs with Software WebRender on Linux (bmo#1708224) - Mozilla Firefox 89.0.1 (boo#1187475): * Updated translations, including full Spanish (Mexico) localization and other improvements (bmo#1714946) * Fix various font related regressions (bmo#1694174) * Linux: Fix performance and stability regressions with WebRender (bmo#1715895, bmo#1715902) * Enterprise: Fix for the `DisableDeveloperTools` policy not having effect anymore (bmo#1715777) * Linux: Fix broken scrollbars on some GTK themes (bmo#1714103) * Various stability fixes ==== audit ==== Version update (2.8.5 -> 3.0.2) Subpackages: libaudit1 libaudit1-32bit libauparse0 - Adjust audit.spec and audit-secondary.spec to support new version - Include fix for libev * add libev-werror.patch - Update to version 3.0.2 - In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen) - Optionally interpret auid in auditctl -l - Update some syscall argument interpretations - In auditd, do not allow spaces in the hostname name format - Big documentation cleanup (MIZUTA Takeshi) - Update syscall table to the 5.12 kernel - Update the auparse normalizer for new event types - Fix compiler warnings in ids subsystem - Block a couple signals from flush & reconfigure threads - In auditd, don't wait on flush thread when exiting - Output error message if the path of input files are too long ausearch/report Included fixes from 3.0.1 - Update syscall table to the 5.11 kernel - Add new --eoe-timeout option to ausearch and aureport (Burn Alting) - Only enable periodic timers when listening on the network - Upgrade libev to 4.33 - Add auparse_new_buffer function to auparse library - Use the select libev backend unless aggregating events - Add sudoers to some base audit rules - Update the auparse normalizer for some new syscalls and event types Included fixes from 3.0 - Generate checkpoint file even when no results are returned (Burn Alting) - Fix log file creation when file logging is disabled entirely (Vlad Glagolev) - Convert auparse_test to run with python3 (Tomá? Chvátal) - Drop support for prelude - Adjust backlog_wait_time in rules to the kernel default (#1482848) - Remove ids key syntax checking of rules in auditctl - Use SIGCONT to dump auditd internal state (#1504251) - Fix parsing of virtual timestamp fields in ausearch_expression (#1515903) - Fix parsing of uid & success for ausearch - Add support for not equal operator in audit by executable (Ondrej Mosnacek) - Hide lru symbols in auparse - Add systemd process protections - Fix aureport summary time range reporting - Allow unlimited retries on startup for remote logging - Add queue_depth to remote logging stats and increase default queue_depth size - Fix segfault on shutdown - Merge auditd and audispd code - Close on execute init_pipe fd (#1587995) - Breakout audisp syslog plugin to be standalone program - Create a common internal library to reduce code - Move all audispd config files under /etc/audit/ - Move audispd.conf settings into auditd.conf - Add queue depth statistics to internal state dump report - Add network statistics to internal state dump report - SIGUSR now also restarts queue processing if its suspended - Update lookup tables for the 4.18 kernel - Add auparse_normalizer support for SOFTWARE_UPDATE event - Add 30-ospp-v42.rules to meet new Common Criteria requirements - Deprecate enable_krb and replace with transport config opt for remote logging - Mark netlabel events as simple events so that get processed quicker - When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833) - In aureport, fix segfault in file report - Add auparse_normalizer support for labeled networking events - Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194) - In ausearch/auparse, event aging is off by a second - In ausearch/auparse, correct event ordering to process oldest first - Migrate auparse python test to python3 - auparse_reset was not clearing everything it should - Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events - In ausearch/report, lightly parse selinux portion of USER_AVC events - Add bpf syscall command argument interpretation to auparse - In ausearch/report, limit record size when malformed - Port af_unix plugin to libev - In auditd, fix extract_type function for network originating events - In auditd, calculate right size and location for network originating events - Make legacy script wait for auditd to terminate (#1643567) - Treat all network originating events as VER2 so dispatcher doesn't format it - If an event has a node name make it VER2 so dispatcher doesnt format it - In audisp-remote do an initial connection attempt (#1625156) - In auditd, allow expression of space left as a percentage (#1650670) - On PPC64LE systems, only allow 64 bit rules (#1462178) - Make some parts of auditd state report optional based on config - Update to libev-4.25 - Fix ausearch when checkpointing a single file (Burn Alting) - Fix scripting in 31-privileged.rules wrt filecap (#1662516) - In ausearch, do not checkpt if stdin is input source - In libev, remove __cold__ attribute for functions to allow proper hardening - Add tests to configure.ac for openldap support - Make systemd support files use /run rather than /var/run (Christian Hesse) - Fix minor memory leak in auditd kerberos credentials code - Allow exclude and user filter by executable name (Ondrej Mosnacek) - Fix auditd regression where keep_logs is limited by rotate_logs 2 file test - In ausearch/report fix --end to use midnight time instead of now (#1671338) - Add substitue functions for strndupa & rawmemchr - Fix memleak in auparse caused by corrected event ordering - Fix legacy reload script to reload audit rules when daemon is reloaded - Support for unescaping in trusted messages (Dmitry Voronin) - In auditd, use standard template for DEAMON events (Richard Guy Briggs) - In aureport, fix segfault for malformed USER_CMD events - Add exe field to audit_log_user_command in libaudit - In auditctl support filter on socket address families (Richard Guy Briggs) - Deprecate support for Alpha & IA64 processors - If space_left_action is rotate, allow it every time (#1718444) - In auparse, drop standalone EOE events - Add milliseconds column for ausearch extra time csv format - Fix aureport first event reporting when no start given - In audisp-remote, add new config item for startup connection errors - Remove dependency on chkconfig - Install rules to /usr/share/audit/sample-rules/ - Split up ospp rules to make SCAP scanning easier (#1746018) - In audisp-syslog, support interpreting records (#1497279) - Audit USER events now sends msg as name value pair - Add support for AUDIT_BPF event - Auditd should not process AUDIT_REPLACE events - Update syscall tables to the 5.5 kernel - Improve personality interpretation by using PERS_MASK - Speedup ausearch/report parsing RAW logging format by caching uid/name lookup - Change auparse python bindings to shared object (Issue #121) - Add error messages for watch permissions - If audit rules file doesn't exist log error message instead of info message - Revise error message for unmatched options in auditctl - In audisp-remote, fixup remote endpoint disappearin in ascii format - Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander) - In auditctl, add support for sending a signal to auditd - Remove audit-fno-common.patch: fixed in upstream - Remove audit-python3.patch: fixed in upstream ==== audit-secondary ==== Version update (2.8.5 -> 3.0.2) Subpackages: audit python3-audit system-group-audit - Adjust audit.spec and audit-secondary.spec to support new version - Include fix for libev * add libev-werror.patch - Update to version 3.0.2 - In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen) - Optionally interpret auid in auditctl -l - Update some syscall argument interpretations - In auditd, do not allow spaces in the hostname name format - Big documentation cleanup (MIZUTA Takeshi) - Update syscall table to the 5.12 kernel - Update the auparse normalizer for new event types - Fix compiler warnings in ids subsystem - Block a couple signals from flush & reconfigure threads - In auditd, don't wait on flush thread when exiting - Output error message if the path of input files are too long ausearch/report Included fixes from 3.0.1 - Update syscall table to the 5.11 kernel - Add new --eoe-timeout option to ausearch and aureport (Burn Alting) - Only enable periodic timers when listening on the network - Upgrade libev to 4.33 - Add auparse_new_buffer function to auparse library - Use the select libev backend unless aggregating events - Add sudoers to some base audit rules - Update the auparse normalizer for some new syscalls and event types Included fixes from 3.0 - Generate checkpoint file even when no results are returned (Burn Alting) - Fix log file creation when file logging is disabled entirely (Vlad Glagolev) - Convert auparse_test to run with python3 (Tomá? Chvátal) - Drop support for prelude - Adjust backlog_wait_time in rules to the kernel default (#1482848) - Remove ids key syntax checking of rules in auditctl - Use SIGCONT to dump auditd internal state (#1504251) - Fix parsing of virtual timestamp fields in ausearch_expression (#1515903) - Fix parsing of uid & success for ausearch - Add support for not equal operator in audit by executable (Ondrej Mosnacek) - Hide lru symbols in auparse - Add systemd process protections - Fix aureport summary time range reporting - Allow unlimited retries on startup for remote logging - Add queue_depth to remote logging stats and increase default queue_depth size - Fix segfault on shutdown - Merge auditd and audispd code - Close on execute init_pipe fd (#1587995) - Breakout audisp syslog plugin to be standalone program - Create a common internal library to reduce code - Move all audispd config files under /etc/audit/ - Move audispd.conf settings into auditd.conf - Add queue depth statistics to internal state dump report - Add network statistics to internal state dump report - SIGUSR now also restarts queue processing if its suspended - Update lookup tables for the 4.18 kernel - Add auparse_normalizer support for SOFTWARE_UPDATE event - Add 30-ospp-v42.rules to meet new Common Criteria requirements - Deprecate enable_krb and replace with transport config opt for remote logging - Mark netlabel events as simple events so that get processed quicker - When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833) - In aureport, fix segfault in file report - Add auparse_normalizer support for labeled networking events - Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194) - In ausearch/auparse, event aging is off by a second - In ausearch/auparse, correct event ordering to process oldest first - Migrate auparse python test to python3 - auparse_reset was not clearing everything it should - Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events - In ausearch/report, lightly parse selinux portion of USER_AVC events - Add bpf syscall command argument interpretation to auparse - In ausearch/report, limit record size when malformed - Port af_unix plugin to libev - In auditd, fix extract_type function for network originating events - In auditd, calculate right size and location for network originating events - Make legacy script wait for auditd to terminate (#1643567) - Treat all network originating events as VER2 so dispatcher doesn't format it - If an event has a node name make it VER2 so dispatcher doesnt format it - In audisp-remote do an initial connection attempt (#1625156) - In auditd, allow expression of space left as a percentage (#1650670) - On PPC64LE systems, only allow 64 bit rules (#1462178) - Make some parts of auditd state report optional based on config - Update to libev-4.25 - Fix ausearch when checkpointing a single file (Burn Alting) - Fix scripting in 31-privileged.rules wrt filecap (#1662516) - In ausearch, do not checkpt if stdin is input source - In libev, remove __cold__ attribute for functions to allow proper hardening - Add tests to configure.ac for openldap support - Make systemd support files use /run rather than /var/run (Christian Hesse) - Fix minor memory leak in auditd kerberos credentials code - Allow exclude and user filter by executable name (Ondrej Mosnacek) - Fix auditd regression where keep_logs is limited by rotate_logs 2 file test - In ausearch/report fix --end to use midnight time instead of now (#1671338) - Add substitue functions for strndupa & rawmemchr - Fix memleak in auparse caused by corrected event ordering - Fix legacy reload script to reload audit rules when daemon is reloaded - Support for unescaping in trusted messages (Dmitry Voronin) - In auditd, use standard template for DEAMON events (Richard Guy Briggs) - In aureport, fix segfault for malformed USER_CMD events - Add exe field to audit_log_user_command in libaudit - In auditctl support filter on socket address families (Richard Guy Briggs) - Deprecate support for Alpha & IA64 processors - If space_left_action is rotate, allow it every time (#1718444) - In auparse, drop standalone EOE events - Add milliseconds column for ausearch extra time csv format - Fix aureport first event reporting when no start given - In audisp-remote, add new config item for startup connection errors - Remove dependency on chkconfig - Install rules to /usr/share/audit/sample-rules/ - Split up ospp rules to make SCAP scanning easier (#1746018) - In audisp-syslog, support interpreting records (#1497279) - Audit USER events now sends msg as name value pair - Add support for AUDIT_BPF event - Auditd should not process AUDIT_REPLACE events - Update syscall tables to the 5.5 kernel - Improve personality interpretation by using PERS_MASK - Speedup ausearch/report parsing RAW logging format by caching uid/name lookup - Change auparse python bindings to shared object (Issue #121) - Add error messages for watch permissions - If audit rules file doesn't exist log error message instead of info message - Revise error message for unmatched options in auditctl - In audisp-remote, fixup remote endpoint disappearin in ascii format - Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander) - In auditctl, add support for sending a signal to auditd - Removes audit-fno-common.patch: fixed in upstream - Removes audit-python3.patch: fixed in upstream ==== bind ==== Version update (9.16.16 -> 9.16.18) Subpackages: bind-doc bind-utils python3-bind - Upgrade to 9.16.18 * The configuration-checking code failed to account for the inheritance rules of the "key-directory" option. * When preparing DNS responses, named could replace the letters 'W' (uppercase) and 'w' (lowercase) with '\000'. This has been fixed. [bind-9.16.18.tar.xz, bind-9.16.18.tar.xz.sha512.asc] - Upgrade to 9.16.17 Major changes (bug fixes): * A copy-and-paste error caused the IP_DONTFRAG socket option to be enabled instead of disabled. This has been fixed. * The calculation of the estimated IXFR transaction size in dns_journal_iter_init() was invalid. * Fix a race condition in reading and writing key files for zones using KASP and configured in multiple views. * Zones which are configured in multiple views with different values set for "dnssec-policy" and with identical values set for "key-directory" are now detected and treated as a configuration error. * Address a potential memory leak in dst_key_fromnamedfile(). * Check that the first and last SOA record of an AXFR are consistent. * Improvements related to network manager/task manager integration [bind-9.16.17.tar.xz, bind-9.16.17.tar.xz.sha512.asc] ==== dracut ==== Version update (053+suse.93.g039ac07d -> 055+suse.106.g760b0c69) - Update to version 055+suse.106.g760b0c69: * chore(suse): add Conflicts for old suse-module-tools to specfile (bsc#1187115) - Update to version 055+suse.104.g9d45c1df: * feat(suse-initrd): add INITRD_MODULES from /etc/sysconfig/kernel, too * fix(suse-initrd): call dracut_instmods with hostonly= * fix(suse-initrd): use $kernel rather than $(uname -r) - Update to version 055+suse.100.ga2700279: * fix(suse-initrd): remove references to INITRD_MODULES (bsc#1187115) * chore(suse): erase conditional for usrmerge from specfile * chore(suse): fix specfile for usrmerge - Update to version 055+suse.97.gb98506b2: * docs: update NEWS.md and AUTHORS * fix(fs-lib): install fsck utilities * fix(integrity): require ALLOW_METADATA_WRITES to come from EVM config file * fix(install): configure logging earlier * fix(warpclock): minor cleanups * fix(dash): minor cleanups * fix(mksh): minor cleanups * feat(install): add default value for --firmwaredirs * fix(dracut-functions): get_maj_min without get_maj_min_cache_file set * fix(dracut): pipe hardlink output to `dinfo` * fix(install): sane default --kerneldir * fix(bash): minor cleanups * fix(squash): don't mount the mount points if already mounted * ci: add shfmt to Fedora containers * fix(base): add missing `str_replace` to `dracut-dev-lib.sh` * feat(dracut.sh): detect running in a container * fix(base): split out `dracut-dev-lib.sh` * fix(dracut-util): print error message with trailing newline * fix(packit): downstream has renamed the master branch to main - Update to version 054+suse.96.gb5aa64d2: * fix(suse-initrd) fix list of modprobe.d directories - Update to version 054+suse.95.gd5820102: * chore(suse) update spec Important change on mkinitrd: mkinitrd is now in its own subpackage "dracut-mkinit-deprecated", which requires dracut. If you need mkinitrd, require "mkinitrd". However note that in the long run, mkinit will go away. It is preferred to call dracut directly. - Update to version 054+suse.94.g1648453e: * chore(suse): re-add SUSE mkinitrd - Update to version 054+suse.93.gd393f006: With this release dracut has undergone a major overhaul. A lot of systemd related modules have been added. The integration test suite has finally ironed out the flaky behaviour due to the parallel device probing of the kernel, which bit sometimes in the non-kvm github CI. So, if you see any /dev/sda in a setup script with more than two hard drives, chances are, that the script works on the wrong disk. Same goes for network interfaces. This release is also fully shellcheck'ed with ShellCheck-0.7.2 and indented with shfmt and astyle. The dracut project builds test containers every day for: opensuse/tumbleweed-dnf:latest archlinux:latest fedora:rawhide fedora:latest fedora:33 These containers can easily be used to run the integration tests locally without root permissions via podman. We hope this serves as a blueprint for your distribution's CI process. More information can be found in docs/HACKING.md. Bug Fixes make testsuite pass on OpenSuse and Arch (8b2afb08) cope with distributions with /usr/etc files (3ad3b3a4) deprecate gummiboot (5c94cf41) set vimrc and emacs indention according to .editorconfig (9012f399) correctly handle kernel parameters (501d82f7) remove dracut.pc on make clean (d643156d) honor KVERSION environment in the Makefile (d8a454a5) always use mkdir -p (9cf7b1c5) dracut.sh: prevent symbolic links containing // (de0c0872) adding missing globalvars for udev (f35d479d) sysctl global variables (3ca9aa1d) add global vars for modules-load (ec4539c6) omission is an addition to other omissions in conf files (96c31333) harden dracut against GZIP environment variable (d8e47e20) add a missing tmpfilesconfdir global variable (8849dd8d) include modules.builtin.alias in the initramfs (7f633747) install all depmod relevant configuration files (50a01dd4) add modules.builtin.modinfo to the initramfs (87c4c178) search for btrfs devices from actual mount poiont (3fdc734a) dracut-functions.sh: implement a cache for get_maj_min (c3bb9d18) word splitting issue for sed in get_ucode_file (122657b2) dracut-logger.sh: double dash trigger unknown logger warnings during run (4fbccde5) dracut-install: handle $LIB in ldd output parsing (d1a36d3d) handle builtin modules (2536a9ea) base: suppress calls to getarg in build phase (6feaaabc) source hooks without exec (8059bcb2) wait_for_dev quote shell variables (b800edd6) adding crc32c for ext3 (61f45643) crypt: install all crypto modules in the generic initrd (10f9e569) include cryptsetups tmpfile (a4cc1964) crypt-gpg: cope with different scdaemon location (44fd1c13) dbus-broker: enable the service (df1e5f06) dbus-daemon: only error out in install() (ae4fbb3d) dracut-systemd: don't refuse root=tmpfs when systemd is used (a96900a8) examples: remove the examples directory and reference to it (b37c90c8) fips: add dh and ecdh ciphers (543b8014) remove old udev version requirements (be30d987) i18n: skip if data is missing (651fe01e) img-lib: ignored null byte in input (85eb9680) integrity: properly set up EVM when using an x509 cert (4bdd7eb2) iscsi: replace sed call with bash internals (66b920c6) add iscsid.service requirements (bb6770f1) only rely on socket activiation (0eb87d78) kernel-modules: optionally add /usr/lib/modules.d to initramfs (92e6a8f8) add watchdog drivers for generic initrd (3a60c036) mdraid: remove dependency statements (86b75634) memstrack: correct dependencies (c2ecc4d1) multipath: stop multipath before udev db cleanup (3c244c7c) revise multipathd-stop (7b8c78ff) nbd: assume nbd version >= 3.8 (6209edeb) remove old udev version requirements (fd15dbad) make nbd work again with systemd (77906443) network: use wicked unit instead of find_binary (57eefcf7) user variable for sdnetworkd instead of path (4982e16d) correct regression in iface_has_carrier (36af0518) network-legacy: add missing options to dhclient.conf (abfd547a) silence getargs (60a34d8b) network-manager: cope with distributions not using libexec (22d6863e) set timeout via command line option (8a51ee1f) run after dracut-cmdline (4d03404f) create /run directories (49b61496) use /run/NetworkManager/initrd/neednet in initqueue (6a37c6f6) only run NetworkManager if rd.neednet=1 (ac0e8f7d) nm-run.service: don't kill forked processes (1f21fac6) no default deps for nm-run.service (ba4bcf5f) nm-lib.sh does not require bash (3402142e) squash: post install should be the last step before stripping (8c8aecdc) systemd: include all nss libraries (b3bbf5fb) include hosts and nsswitch.conf in hostonly mode (5912f4fb) remove old systemd version requirements (fc53987b) systemd-hostnamed: extra quote (2aa65234) systemd-modules: remove dependency on systemd meta module (afef4557) systemd-modules-load: misc repairs (782ac8f1) systemd-networkd: make systemd-networkd a proper network provider (ea779750, closes #737) systemd-resolved: remove nss libraries (12bef83c) systemd-sysctl: sysctl global variables (02acedd0) systemd-sysusers: misc fixes and cleanup (7359ba8a) systemd-udev: use global vars instead of fixed path (fd883a58) systemd-udevd: add udev id program files (562cb77b) systemd-verity: incorrect reference to cryptsetup target (ba92d1fc) re-naming module to veritysetup (0267f3c3) tpm2-tss: add tpm2 requirement (8f99fada) udev-rules: remove sourcing of network link files (69f4e7cd) add btrfs udev rules by default (567c4557) url-lib: fix passing args (5f6be515) zipl: don't depend on grub2 (6b499ec1) Performance disable initrd compression when squash module is enabled (7c0bc0b2) Features support ZSTD-compressed kernel modules (ce9af251) also restore the initramfs from /lib/modules (33e27fab) extend Makefile indent target (e0a0fa61) customize .editorconfig according to shfmt (1f621aba) squash module follow --compress option (5d05ffbd) bluetooth: implement bluetooth support in initrd (64ee2a53) btrfs: add 64-btrfs-dm.rules rules (d4caa86a) mkinitrd: remove mkinitrd (43df4ee2) nbd: support ipv6 link local nbds (b12f8188) network-manager: run as daemon with D-Bus (112f03f9) qemu: include the virtio_mem kernel module (f3dcb606) skipcpio: speed up and harden skipcpio (63033495) squash: use busybox for early setup if available (90f269f6) install and depmod modules seperately (5a18b24a) systemd-ac-power: introducing the systemd-ac-power module (e7407230) systemd-hostnamed: introducing the systemd-hostnamed module (bf273e3e) systemd-initrd: add initrd-usr-fs.target (5eb73610) systemd-journald: introducing the systemd-journald module (3697891b) systemd-ldconfig: introducing the systemd-ldconfig module (563c434e) systemd-network-management: introducing systemd-network-management module (e942d86c) systemd-resolved: introducing the systemd-resolved module (b7d3caef) systemd-rfkill: introducing the systemd-rfkill module (21536544) systemd-sysext: introducing the systemd-sysext module (fc88af54) systemd-timedated: introducing the systemd-timedated module (1c41cc90) systemd-timesyncd: introducing the systemd-timesyncd module (2257d545) systemd-tmpfiles: introducing the systemd-tmpfiles module (2b61be32) systemd-udevd: introducing the systemd-udevd module (3534789c) systemd-verity: introducing the systemd-verity module (3d4dea58) tpm2-tss: introducing the tpm2-tss module (8743b073) ==== ell ==== Version update (0.40 -> 0.41) - Update to release 0.41 * Fix issue with endianness of DHCP packets. * Fix issue with lease handling of the DHCP server. ==== exiv2 ==== Version update (0.27.3 -> 0.27.4) - enable bmff format - disable docs for now: - graphviz was failing for a long time when trying to render the pngs as graphviz-gd was missing - even after adding this it still fails with missing fonts - Update to 0.27.4: - Support for bmff files (HEIC, HEIF, AVIF, CR3, JXL/bmff) - Bash test scripts rewritten in python - DNG 1.6 and Exif 2.32 support - Bug and Security fixes - Updated build and test environments - Localisation support on Crowdin - Revised documentation - Other improvements - drop 1271.patch: included in update ==== flatpak ==== Version update (1.11.1 -> 1.11.2) Subpackages: libflatpak0 system-user-flatpak - Update to version 1.11.2: + Bug fixes: - Fix logic error when migrating AppStream XML - Improve error-checking - Fix various memory and file descriptor leaks, in particular with flatpak-spawn --env=... - Fix fd confusion in flatpak-spawn --env=... --forward-fd=..., which caused "Steam Linux Runtime" containers to fail to start - Avoid a crash when looking up summary for a ref without an arch - Improve handling of refs belonging to more than one architecture, e.g. for cross-compilation - Don't abort uninstall if deploy metadata is missing - Don't fail transaction if searching for dependencies fails in one remote - Fix test failure when running tests as root - Improve error message for 'sudo flatpak run' + Internal changes: - Improve printf format string validation - Improve test coverage - Reduce risk of accidentally hard-coding x86 in the tests ==== gdb ==== - gdb-support-dw-lle-start-end.patch: Support DW_LLE_start_end (bsc#1187044) ==== hplip ==== Version update (3.20.11 -> 3.21.4) Subpackages: hplip-hpijs hplip-sane - Update to 3.21.4 Added support for the following new printers: * HP Envy 6400 series - Update to 3.21.2 Add support for the following printers: * HP LaserJet Enterprise M406dn * HP LaserJet Enterprise M407dn * HP LaserJet Enterprise MFP M430f * HP LaserJet Enterprise MFP M431f * HP LaserJet Managed E40040dn * HP LaserJet Managed MFP E42540f * HP Color LaserJet Enterprise M455dn * HP Color LaserJet Managed E45028dn * HP Color LaserJet Enterprise MFP M480f * HP Color LaserJet Managed MFP E47528f * HP PageWide XL 3920 MFP * HP PageWide XL 4200 Printer * HP PageWide XL 4200 Multifunction Printer * HP PageWide XL 4700 Printer * HP PageWide XL 4700 Multifunction Printer * HP PageWide XL 5200 Printer * HP PageWide XL 5200 Multifunction Printer * HP PageWide XL 8200 Printer * HP Laserjet M207d * HP Laserjet M208d * HP Laserjet M209d * HP Laserjet M210d * HP Laserjet M212d * HP Lasejet M211d * HP Laserjet M209dw * HP Laserjet M209dwe * HP Laserjet M210dw * HP Laserjet M210dwe * HP Laserjet M212dw * HP LaserJet M212dwe * HP Laserjet M208dw * HP Laserjet M207dw * HP Laserjet M211dw * HP LaserJet MFP M234dw * HP LaserJet MFP M234dwe * HP LaserJet MFP M233d * HP LaserJet MFP M232d * HP LaserJet MFP M235d * HP LaserJet MFP M237d * HP LaserJet MFP M236d * HP LaserJet MFP M232dw * HP LaserJet MFP M232dwc * HP LaserJet MFP M233dw * HP LaserJet MFP M236dw * HP LaserJet MFP M235dw * HP LaserJet MFP M235dwe * HP LaserJet MFP M237dwe * HP LaserJet MFP M237dw * HP LaserJet MFP M232sdn * HP LaserJet MFP M233sdn * HP LaserJet MFP M236sdn * HP LaserJet MFP M234sdn * HP LaserJet MFP M234sdne * HP LaserJet MFP M235sdn * HP LaserJet MFP M235sdne * HP LaserJet MFP M237sdne * HP LaserJet MFP M237sdn * HP LaserJet MFP M232sdw * HP LaserJet MFP M233sdw * HP LaserJet MFP M236sdw * HP LaserJet MFP M234sdw * HP LaserJet MFP M234sdwe * HP LaserJet MFP M235sdw * HP LaserJet MFP M235sdwe * HP LaserJet MFP M237sdwe * HP LaserJet MFP M237sdw - Spec file: * Adapted patch hplip-remove-imageprocessor.diff * Disabled image processor build with the configure option - -disable-imageProcessor-build * Remove executable bit in %{_datadir}/hplip/ * Ignore duplicate files in hplip-rpmlintrc ("__init__.*.pyc?") * Fixed some warnings ==== k3b ==== Subpackages: k3b-lang - Remove the musicbrainz build dependency. k3b still uses the obsolete musicbrainz 2 API. ==== less ==== Version update (586 -> 590) - update to 590: * Make less able to read lesskey source files (deprecating lesskey). * If XDG_CONFIG_HOME is set, find lesskey source file in $XDG_CONFIG_HOME/lesskey rather than $HOME/.lesskey. * If XDG_DATA_HOME is set, find and store history file in $XDG_DATA_HOME/lesshst rather than $HOME/.lesshst. * Add the --lesskey-src option. * Add the --file-size option. * With -F, if screen is resized to make file fit on one screen, don't exit. - Remove --with-pic (no static libs are ever produced). ==== libalternatives ==== Version update (1.0 -> 1.1) Subpackages: alts libalternatives1 - Update to version v1.1: * docs: Add broken manpage * tests: unit tests configs * tests: fix memory leak during tests * list_binaries: initialize pointer that is later used in free * libalts_exec_default() sets errno on not found ==== libconfig ==== Version update (1.7.2 -> 1.7.3) - Update to release 1.7.3 * Fixed a heap corruption bug in config_clear() * Added a Setting::isString() method * Renamed all remaining internal methods that lacked a "libconfig_" prefix. ==== libfastjson ==== - Remove --with-pic (no effect with --disable-static). - Drop unsubstantiated claims from descriptions. ==== libimagequant ==== Version update (2.14.1 -> 2.15.1) - update to 2.15.1: - speed and quality improvements ==== librdkafka ==== Version update (1.6.1 -> 1.7.0) - update to 1.7.0: * [KIP-360](https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=8… - Improve reliability of transactional producer. Requires Apache Kafka 2.5 or later. * OpenSSL Engine support (`ssl.engine.location`) by @adinigam and @ajbarb. * Added `connections.max.idle.ms` to automatically close idle broker connections. This feature is disabled by default unless `bootstrap.servers` contains the string `azure` in which case the default is set to <4 minutes to improve connection reliability and circumvent limitations with the Azure load balancers (see #3109 for more information). * Bumped to OpenSSL 1.1.1k in binary librdkafka artifacts. * The binary librdkafka artifacts for Alpine are now using Alpine 3.12. OpenSSL 1.1.1k. * Improved static librdkafka Windows builds using MinGW (@neptoess, #3130). * The C++ `oauthbearer_token_refresh_cb()` was missing a `Handle *` argument that has now been added. This is a breaking change but the original function signature is considered a bug. This change only affects C++ OAuth developers. * [KIP-735](https://cwiki.apache.org/confluence/display/KAFKA/KIP-735%3A+Incre… The consumer `session.timeout.ms` default was changed from 10 to 45 seconds to make consumer groups more robust and less sensitive to temporary network and cluster issues. * Statistics: `consumer_lag` is now using the `committed_offset`, while the new `consumer_lag_stored` is using `stored_offset` (offset to be committed). This is more correct than the previous `consumer_lag` which was using either `committed_offset` or `app_offset` (last message passed to application). * Bugfixes ==== libstorage-ng ==== Version update (4.4.14 -> 4.4.15) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#814 - removed unused code in SystemCmd - use reference in loop - 4.4.15 ==== libtheora ==== Subpackages: libtheora0 libtheoradec1 libtheoraenc1 - Remove completely unnecessary python BR ==== libvirt ==== Subpackages: libvirt-client libvirt-daemon libvirt-daemon-driver-interface libvirt-daemon-driver-libxl libvirt-daemon-driver-lxc libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-lxc libvirt-daemon-qemu libvirt-daemon-xen libvirt-libs - Suggest numad package instead of requiring it. numad is not required for libvirt daemon to run, it does not support the cgroup2 API and it has been superseded by the kernel NUMA balancer which is enabled by default. bsc#1184722 ==== libzip ==== Version update (1.7.3 -> 1.8.0) - libzip 1.8.0: * Add support for zstd (Zstandard) compression * Add support for lzma (ID 14) compression * Add zip_source_window_create() * Add zip_source_zip_create() variant to zip_source_zip() * Allow method specific comp_flags in zip_set_file_compression() * Allow zip_source_tell() on sources that don't support seeking and zip_ftell() on compressed data * Provide more details for consistency check errors * Improve output of zipcmp * In zipcmp, don?t ignore empty directories when comparing directory listing * Treat empty string as no password given in zip_file_set_encryption(), zip_fopen_encrypted(), and zip_set_default_password() - drop libzip-pkgconfig.patch, no longer required ==== live555 ==== Version update (2020.10.16 -> 2021.05.22) Subpackages: libBasicUsageEnvironment1 libUsageEnvironment3 - Update to 2021.05.22: lots of fixes and updates, including the security fix for CVE-2021-28899 boo#1185874 See the list in http://live555.com/liveMedia/public/changelog.txt - Change the so version of libliveMedia to 94, libgroupsock to 30 ==== man ==== Version update (2.8.4 -> 2.9.4) - Add patch man-db-2.9.4-alternitive.dif * Supporting ALSO new `alternatives` which has the same tasks as `update-alternatives` but in a simplier way. - Update to version 2.9.4: * Add support for zstd-compressed manual pages * Recognise Esperanto, Romanian, Tamil, and Ukrainian translations of the NAME section. * Fix handling of \- in the right-hand side of a NAME section. * Treat "\[en]" (etc.) as another synonym for "\-" in NAME sections, alongside the existing "\(en" (etc.). * Avoid incorrect markup in man(1) with po4a >= 0.58. * Fix manual page translation infrastructure to compare po4a versions with more than two components correctly. * Fix "man -X75-12" and "man -X100-12" to set the document font size as well as the device * Fix incompatibility of "man -X" and friends with the seccomp sandbox. * man --recode and manconv now adjust encoding declarations on the first line of their input to refer to the new encoding. * There is a new "man-recode" program. Which has an interface designed for bulk conversion and so can be much faster when used on a large number of pages. * Fix comparison of candidate manual pages to correctly handle the case where the language elements are the same and match the locale, but the territory elements differ. * If run with no arguments or only a section, man now suggests running "man man". * man now understands the <page>(<section>) form on its command line, so for example "man 'chmod(2)'" is now the same as "man 2 chmod". * manconv now guesses the input encoding based on the file name if it is not explicitly specified. * Further workarounds for ESET File Security: allow sendmsg when it is in use. * If more than one of "../man", "man", "../share/man", and "share/man" exist relative to a directory on $PATH, then all of them are now added to the automatically-determined manpath * Remove arbitrary limit on manpath size. * Fix several resource and memory leaks. * Ship a systemd timer to perform daily database maintenance. * Fix segfaults in mandb. - Drop our systemd timer in favor of upstream provided one - Drop unused mancoding - Drop upstream fixed man-db-2.6.3-section.dif - Merge man-MAN_POSIXLY_CORRECT-man1.dif into man-db-2.6.3-listall.dif as first one is only the documentation of the latter one - Seperate man-db-2.9.4-no-chown.patch from man-db-2.8.4.dif - Update man-db-2.8.4.dif, now called man-db-2.9.4.patch - Update man-db-2.6.3-man0.dif to be used inside prep section - Refresh man-db-2.7.1-security4.dif, man-db-2.7.1-zio.dif ==== man-pages ==== Version update (5.11 -> 5.12) - version update to 5.12 http://linux-man-pages.blogspot.com/2021/06/man-pages-512-released.html - deleted patches - man-pages-tty_ioctl.patch (upstreamed) ==== mtools ==== Version update (4.0.27 -> 4.0.31) - mtools 4.0.31: * Fix polarity of format_xdf command-line parameter of mformat * Improved error handling and error messages * Remove duplicate writing of backup boot sector * developer visible changes - includes changes from 4.0.30: * Fixed XDF floppy disk access * Fixed faulty behavior at end of image in mcat * Raise an error when trying to mcopy multiple source files over a single destination file (rather than directory) * fix handling of "hidden" sectors * Modernize partition support * developer visible changes - includes changes from 4.0.29 and 4.0.28: * Support remapping of data * Re-open floppy devices read-write if geometry parameters need to be changed * relax consistency checks in mpartition (partitions created by current fdisk would almost never pass these checks) ==== ncurses ==== Version update (6.2.20210515 -> 6.2.20210612) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch 20210612 + fixes for scan-build, valgrind build/testing. + update config.guess - Add ncurses patch 20210605 + add a summary of ncurses-specific preprocessor symbols to curses.h (prompted by discussion with Peter Farley, Bill Gray). - Add ncurses patch 20210522 + regenerate configure scripts with autoconf 2.52.20210509 to eliminate an unnecessary warning in config.log (report by Miroslav Lichvar). + add a note in manual page to explain ungetch vs unget_wch (prompted by discussion with Peter Farley). + add sp-funcs for erasewchar, killwchar. + modify wgetnstr, wgetn_wstr to improve compatibility with SVr4 curses in its treatment of interrupt and quit characters (prompted by report/testcase by Bill Gray) + update config.guess, config.sub - Correct offset in patch ncurses-6.2.dif ==== nodejs-common ==== - Allow building for Fedora in the OBS - Some applications do not like warnings or notices on stderr as they use it for other things. So make nodejs-common quiet unless we have a fatal error. ==== nodejs16 ==== Version update (16.3.0 -> 16.4.0) Subpackages: npm16 - Update to 16.4.0: * async_hooks: stabilize part of AsyncLocalStorage * deps: + upgrade npm to 7.18.1 + update V8 to 9.1.269.36 * dns: allow --dns-result-order to change default dns verbatim - Allow building for Fedora in the OBS ==== openssh ==== Subpackages: openssh-clients openssh-common openssh-server - Don't move user-modified ssh_config and sshd_config files to .rpmsave on upgrade. - Use pam_motd to unify motd message output [bsc#1185897] (openssh-8.4p1-pam_motd.patch) ==== osinfo-db ==== Version update (20210215 -> 20210621) - Update to database version 20210621 osinfo-db-20210621.tar.xz - Drop patches contained in new tarball SLE-add-info-about-UEFI-support.patch add-sle15sp3-support.patch add-slem50-support.patch fix-sle15sp1-volume-id-string.patch - Update to database version 20210531 osinfo-db-20210531.tar.xz - Drop add-leap15.3-support.patch - Add support for SUSE Linux Enterprise Micro. See also patch in virt-manager to enable media detection. add-slem-support.patch - Update to database version 20210312 osinfo-db-20210312.tar.xz ==== patterns-base ==== Subpackages: patterns-base-apparmor patterns-base-base patterns-base-basesystem patterns-base-basic_desktop patterns-base-console patterns-base-documentation patterns-base-enhanced_base patterns-base-minimal_base patterns-base-selinux patterns-base-sw_management patterns-base-transactional_base patterns-base-x11 patterns-base-x11_enhanced - Favor libz1 when in doubt and asked for libz.so.1. - Make the fips pattern supersede "patterns-server-enterprise-fips", take missing pieces and obsolete it - Add pattern to install necessary packages for FIPS (bsc#1183154) - Run pre_checkin.sh - Fix build for SLE ==== perl-libwww-perl ==== Version update (6.54 -> 6.55) - updated to 6.55 see /usr/share/doc/packages/perl-libwww-perl/Changes 6.55 2021-06-17 13:57:06Z - Attempt to avoid rare fails in redirect.t (GH#380) (Arne Johannessen) ==== pipewire ==== Version update (0.3.30 -> 0.3.30+55) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-modules pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - added pipewire-alsa to baselibs.conf pipewire-alsa-32bit is needed to run BIT.TRIP Runner 2 from Steam, which is a 32bit application and uses ALSA. - Move %{_udevrulesdir}/90-pipewire-alsa.rules to the main pipewire package (boo#1187108) - Update to 0.3.30+git~342ae0b64 (55 commits after 0.3.30) in order to include https://gitlab.freedesktop.org/pipewire/pipewire/-/merge_requests/748 and https://gitlab.freedesktop.org/pipewire/pipewire/-/merge_requests/749 to fix building on Leap 15.3 ==== pngquant ==== Version update (2.13.1 -> 2.15.1) - update to 2.15.0: - speed and quality improvements ==== polkit-qt5-1 ==== Version update (0.113.0 -> 0.114.0) - New upstream release 0.114.0 - Changes since 0.113.0: * Use feature_summary() * Drop PolkitQt1::version*() API declaration, never implemented * Use target_sources to directly set sources instead of helper vars * Include headers in example & test like external consumer would * Set include dirs for linking libraries during build by target interface * Generate version & config file in core build dir * Use individual export headers/macros per each library * Remove outdated template FindPolkitQt.cmake * Remove module prefix from Qt includes in public headers * Link polkit-qt-test to agent lib target, an include is used * Remove module prefix from Qt includes of non-public headers * Remove unused include * Remove unneeded/unused include_directories * Use more override * Use more nullptr * Port away from legacy LINK_PUBLIC & LINK_PRIVATE * Fully qualify slot argument * Use QStringLiteral * Convert license statements to SPDX expressions * Remove unused cmake macro files * Enable CMAKE_AUTOUIC and CMAKE_AUTORCC * Let cmake set the C++ standard * Port from Q_ENUMS to Q_ENUM * Make use of PkgConfig to find dependencies * Use Q_DECLARE_OPERATORS_FOR_FLAGS in same namespace as flags definition * Use more nullptr * API dox: reference KDE Frameworks, no longer KDE Development Platform * Support API documentation generation with kapidox * Make it compile without deprecated method - Use %cmake_build instead of %make_jobs for compiling ==== publicsuffix ==== Version update (20210519 -> 20210615) - Update to version 20210615: * Removing a private subregistry in .CL due to deprecation. (#1352) * Add ddns5.com to private section (#1353) * Add shop.brendly.rs (#1309) * add mediatech.by and mediatech.dev domains (#1333) * newgtlds.go : update Autopull - Added URL for the IANA PSL for #1325 (#1347) * Add minisite.ms (#1344) * Revert "Add multibaas.app and multibaas.com (#1233)" (#1337) * Add appudo.net (#1340) * Adding adimo.co.uk (#1343) * Add postman dev domains (#1339) * Reverting change * set default project to list modification and assign to jothan * Tickboxes and text added to help reduce self-harm requests * submitter affirm not working around 3p limits; ask DNS leaf remain * Remove github.dev from PSL (#1335) * Add novecore.site (#1331) * Add jotelulu.cloud (#1330) * Add bluebite.io (#1313) * Added onavstack.net (#1299) * Update public_suffix_list.dat (#1273) ==== python-qt5-sip ==== - Provide the PyPI name ==== qca-qt5 ==== Subpackages: libqca-qt5-2 qca-qt5-plugins - Mention soversion in %files - Require main plugins from the library (for now, boo#1187447) - Recommend optional plugins from the library ==== rubygem-backport ==== Version update (1.1.2 -> 1.2.0) updated to version 1.2.0 see installed CHANGELOG.md [#]# 1.2.0 - June 13, 2021 - Improved handling of multiple machines - Rescue StandardError instead of Exception ==== rubygem-bindata ==== Version update (2.4.8 -> 2.4.10) updated to version 2.4.10 see installed ChangeLog.rdoc == Version 2.4.10 (2021-05-18) * Improve speed of dynamic object creation. Reported by Charlie Ablett. == Version 2.4.9 (2021-04-22) * Change example from Fixnum to Integer. Thanks to Tim Chambers. * Now works with frozen string literals. Requested by Jeremy Evans. ==== rubygem-cool.io ==== Version update (1.7.0 -> 1.7.1) updated to version 1.7.1 see installed CHANGES.md 1.7.1 - ---- * Set fallback local loopback address by default for Windows environment ==== rubygem-css_parser ==== Version update (1.7.1 -> 1.9.0) updated to version 1.9.0 no changelog found ==== rubygem-fog-core ==== Version update (2.2.3 -> 2.2.4) updated to version 2.2.4 see installed changelog.md 2.2.4 04/28/2020 ========================================================== Add FOG_DEBUG in addition to DEBUG to allow avoiding namespace collisions Add github actions configuration Update succeeds helper to expected syntax for ruby 3+ ==== rubygem-formatador ==== Version update (0.2.5 -> 0.3.0) updated to version 0.3.0 see installed changelog.txt v0.3.0 06/17/21 =============== add travis badge to readme change readme to md fix markdown readme fix travis badge monkey-patch StringIO to try and fix jruby build override tty? for jruby build fix copyright statement use unicode.width instead of string.length remove unicode from requirements, use only if loaded display datum who's value is a FalseClass more colors with syntax-specific code/length limitations better code visualization in readme update readme remove broken rubinius build from CI fix length method to detect multibyte char width fix test for table with multi byte chars support multibyte characters update CI to 2.2.7, 2.3.4, and 2.4.1 drop rubyforge_project from gemspec and rakefile change github reference to https change readme.rdoc to readme.md in gemspec ==== rubygem-pdf-reader ==== Version update (2.4.2 -> 2.5.0) updated to version 2.5.0 see installed CHANGELOG v2.5.0 (6th June 2021) - bump minimum ruby version to 2.0 - Correctly handle trascoding to UTF-8 from some fonts that use a difference table [#344](https://github.com/yob/pdf-reader/pull/344/) - Fix some character spacing issues with the TJ operator [#343](https://github.com/yob/pdf-reader/pull/343) - Fix crash with some encrypted PDFs [#348](https://github.com/yob/pdf-reader/pull/348/) - Fix positions of text on some PDFs with pages rotated 90° [#350](https://github.com/yob/pdf-reader/pull/350/) ==== rubygem-prawn-svg ==== Version update (0.31.0 -> 0.32.0) updated to version 0.32.0 no changelog found ==== rubygem-rubocop ==== Version update (1.15.0 -> 1.17.0) updated to version 1.17.0 no changelog found ==== rubygem-serverengine ==== Version update (2.2.2 -> 2.2.4) updated to version 2.2.4 see installed Changelog 2021-05-24 version 2.2.4: * Ensure to get correct Win32 socket error on Ruby 3.0 2021-02-17 version 2.2.3: * Change SocketManager's port assignment strategy on Windows ==== rubygem-tmuxinator ==== Version update (2.0.3 -> 3.0.1) updated to version 3.0.1 no changelog found ==== rubygem-tzinfo-data ==== Version update (1.2020.6 -> 1.2021.1) updated to version 1.2021.1 no changelog found ==== rubygem-yard ==== Version update (0.9.25 -> 0.9.26) - New upstream release 0.9.26 - Add support for Ruby 3.0 and fix tests - Fix support for `frozen_string_literal: false` magic comments (#1363) ==== tigervnc ==== Subpackages: libXvnc1 xorg-x11-Xvnc xorg-x11-Xvnc-module - Specify RFC7919 parameters for GnuTLS versions older than 3.6.0. * Modified tigervnc-FIPS-use-RFC7919.patch * https://github.com/TigerVNC/tigervnc/pull/1273 ==== totem ==== Version update (3.38.0 -> 3.38.1) Subpackages: totem-lang totem-plugins - Update to version 3.38.1: + Fix "Undetermined" appearing in language selection menus + Make XF86Back go back up a level in library + Fix the logo not showing when there's no cover + Don't throw error when seeking past the end of an MPEG file + Remove application/ogg from the supported mime-types + Block more GStreamer plugins that can't be used for thumbnailing + Remove Flatpak definitions from distribution tarball + Updated translations. ==== virt-manager ==== Subpackages: virt-install virt-manager-common - Upstream bug fixes (bsc#1027942) d3c627f1-volumeupload-Use-1MiB-read-size.patch cf93e2db-console-fix-error-with-old-pygobject.patch 143c6bef-virtinst-fix-error-message-format-string.patch fe8722e7-createnet-Remove-some-unnecessary-max_length-annotations.patch d9b5090e-Fix-forgetting-password-from-keyring.patch ==== vlc ==== Version update (3.0.13 -> 3.0.16) Subpackages: libvlc5 libvlccore9 vlc-codec-gstreamer vlc-lang vlc-noX vlc-qt vlc-vdpau - Update to version 3.0.16: + Video Output: Fix a D3D11 crash on Windows 8/8.1. + Access: Fix RTSP server timeout handling. + Interfaces: macOS: Add touchbar support. + Misc: Multiple settings improvements. - Changes from version 3.0.15: + Core: Add Opus & Alac wave format mappings. + Access: Fix opening DVD folders with non-ascii characters. + Demux: - Fix asf regression with broadcast streams. - MP4: Fix audio drop on seek. + Video Output: - Fix seek & volume sliders overlapping with subtitles. - Fix delays when seeking with D3D11. + Text renderer: Improve freetype fonts outlining. + Misc: Fix GnuTLS support for Windows XP. - Changes from version 3.0.14: + Core: - Fix double loading of slave input. - Fix an issue causing the auto-updater not to launch the new version installer. - Add vlc-get-addr-by-ref-from-getConnectionEndpointAddress.patch: The maintainers of live555 changed connectionEndpointAddresss to getConnectionEndpointAddress, which now provides the address value by reference. - Rebase vlc-srto_tsbpddelay.patch ==== xf86-input-libinput ==== Version update (1.0.1 -> 1.1.0) - Update to version 1.1.0 * This release adds a new driver-specific option: ScrollPixelDistance. This option converts movement "pixels" from libinput into the server's "scroll unit" definition and can thus help speeding up or slowing down two-finger/edge scrolling. ==== yast2-firewall ==== Version update (4.4.0 -> 4.4.1) - Use Installation::SecuritySettings (related to jsc#PM-2620). - 4.4.1 ==== yast2-storage-ng ==== Version update (4.4.0 -> 4.4.6) - Fix the Comment entry in the desktop file so the tooltip in the control center is properly translated (bsc#1187270). - 4.4.6 - ensure mount options are not doubled (bsc#1186298) - 4.4.5 - try harder matching device names (bsc#1186268) - 4.4.4 - Make the 'Change Used Devices' menu item translatable (bsc#1185060). - 4.4.3 - only list specific files installed in common directories (metainfo, icons, fillupdir) - 4.4.2 (bsc#1186066, bsc#1184786) - Display pathnames correctly in a Right-to-Left context (bsc#1128091). - 4.4.1 ==== yast2-trans ==== Version update (84.87.20210612.ff10a453ed -> 84.87.20210620.b9c691b1c1) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20210620.b9c691b1c1: * New POT for text domain 'gtk'. * New POT for text domain 'packager'. * Translated using Weblate (Czech) * New POT for text domain 'firstboot'. * Translated using Weblate (Chinese (China) (zh_CN)) * Translated using Weblate (Finnish) * Translated using Weblate (Czech) * Translated using Weblate (Czech)

1 0

reboot fails following completion of zypper dup from 15.2 to 15.3
by Felix Miata 26 Jun '21

26 Jun '21

# inxi -Sy System: Host: gb250 Kernel: 5.3.18-lp152.41-default x86_64 bits: 64 Desktop: KDE 3 Distro: openSUSE Leap 15.3 # systemctl reboot Failed to reboot system via logind: Unit systemd-reboot.service is not loaded properly: Invalid argument. Failed to start reboot.target: Unit systemd-reboot.service is not loaded properly: Invalid argument. See system logs and 'systemctl status reboot.target' for details. # systemctl poweroff Failed to reboot system via logind: Unit systemd-poweroff.service is not loaded properly: Invalid argument. Failed to start reboot.target: Unit systemd-poweroff.service is not loaded properly: Invalid argument. See system logs and 'systemctl status reboot.target' for details. # systemctl status reboot.target ● reboot.target - Reboot Loaded: loaded (/usr/lib/systemd/system/reboot.target; disabled; vendor preset: disabled) Active: inactive (dead) Docs: man:systemd.special(7) # systemctl status poweroff.target ● poweroff.target - Power-Off Loaded: loaded (/usr/lib/systemd/system/poweroff.target; disabled; vendor preset: disabled) Active: inactive (dead) Docs: man:systemd.special(7 This has happened on at least the past two different PCs upgraded with zypper dup from 15.2 to 15.3. What's the right way to force a reboot when this happens? Should this be reported as a reproducible bug? -- Evolution as taught in public schools is, like religion, based on faith, not based on science. Team OS/2 ** Reg. Linux User #211409 ** a11y rocks! Felix Miata

3 4