September 2021 - openSUSE Factory - openSUSE Mailing Lists

New Tumbleweed snapshot 20210922 released!
by Dominique Leuenberger 24 Sep '21

24 Sep '21

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: 389-ds (2.0.8~git0.553f26c87 -> 2.0.10~git0.21dd2802c) gstreamer-editing-services (1.18.4 -> 1.18.5) python-fsspec (2021.7.0 -> 2021.8.1) shadow (4.8.1 -> 4.9) === Details === ==== 389-ds ==== Version update (2.0.8~git0.553f26c87 -> 2.0.10~git0.21dd2802c) Subpackages: lib389 libsvrcore0 - Update to version 2.0.10~git0.21dd2802c: * Bump version to 2.0.10 * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.) * Issue 4912 - Account Policy plugin does not set the config entry DN * Issue 4863 - typoes in logconv.pl * Issue 4796 - Add support for nsslapd-state to CLI & UI * Issue 4894 - IPA failure in ipa user-del --preserve (#4907) * Issue 4912 - dsidm command crashing when account policy plugin is enabled * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks * Issue 4887 - UI - fix minor regression from camelCase fixup * Bump version to 2.0.9 * Issue 4887 - UI - Update webpack.config.js and package.json * Issue 4149 - UI - Migrate the remaining components to PF4 * Issue 4875 - CLI - Add some verbosity to installer * Issue 4884 - server crashes when dnaInterval attribute is set to zero ==== gstreamer-editing-services ==== Version update (1.18.4 -> 1.18.5) Subpackages: libges-1_0-0 typelib-1_0-GES-1_0 - Update to version 1.18.5: + xml-formatter: Fix allocation size of buffer + framepositioner: Fix runtime warning + Don't use volatile to mean atomic (fixes compiler warnings with gcc 11) ==== python-fsspec ==== Version update (2021.7.0 -> 2021.8.1) - Update to 2021.8.1 * HTTP get_file/put_file APIs now support callbacks (#731) * New HTTP put_file method for transferring data to the remote server (chunked) (#731) * Customizable HTTP client initializers (through passing get_client argument) (#731, #701) * Support for various checksum / fingerprint headers in HTTP info() (#731) * local implementation of rm_file (#736) * local speed improvements (#711) * sharing options in SMB (#706) * streaming cat/get for ftp (#700) * check for remote directory when putting (#737) * storage_option update handling (#734( * await HTTP call before checking status (#726) * ftp connect (#722) * bytes conversion of times in mapper (#721) * variable overwrite in WholeFileCache cat (#719) * http file size again (#718) * rm and create directories in ftp (#716, #703) * list of files in async put (#713) * bytes to dict in cat (#710) - Drop fsspec-pr710-bytesreturn.patch merged upstream ==== shadow ==== Version update (4.8.1 -> 4.9) Subpackages: login_defs - bsc#1190146: Fix empty subid range Add shadow-4.9-useradd-subuid.patch https://github.com/shadow-maint/shadow/pull/399 - bsc#1190145: Fix double free in gpasswd: Add shadow-4.9-sgent-free.patch upstreamed as https://github.com/shadow-maint/shadow/pull/417 - Fix shadow-login_defs-check.sh: In the last update we switched from calling make to %make_build macro. Using sed to adapt the spec file now. - libsubid-devel: add missing requires for libsubid3 - Remove README.changes-pwdutils, all distros you can upgrade from use already shadow - login.defs: Enable USERGROUPS_ENAB and CREATE_HOME to be compatible with other Linux distros and the other tools creating user accounts in use on openSUSE. Set HOME_MODE to 700 for security reasons and compatibility. [bsc#1189139] [bsc#1182850] - Update to 4.9: * Updated translations * Major salt updates * Various coverity and cleanup fixes * Consistently use 0 to disable PASS_MIN_DAYS in man * Implement NSS support for subids and a libsubid * setfcap: retain setfcap when mapping uid 0 * login.defs: include HMAC_CRYPTO_ALGO key * selinux fixes * Fix path prefix path handling * Manpage updates * Treat an empty passwd field as invalid(Haelwenn Monnier) * newxidmap: allow running under alternative gid * usermod: check that shell is executable * Add yescript support * useradd memleak fixes * useradd: use built-in settings by default * getdefs: add foreign * buffer overflow fixes * Adding run-parts style for pre and post useradd/del - Refresh: * shadow-login_defs-unused-by-pam.patch * userdel-script.patch * useradd-script.patch * chkname-regex.patch * useradd-default.patch: bbf4b79 stopped shipping default file. change group in code now. * shadow-login_defs-suse.patch * useradd-userkeleton.patch - Remove because upstreamed: * shadow-4.1.5.1-userdel-helpfix.patch * shadow-4.1.5.1-logmsg.patch - Add libsubid-build-fix.patch: See https://github.com/shadow-maint/shadow/issues/387 - Add shadow-libeconf-include.patch: See c6847011e8b656adacd9a0d2a78418cad0de34cb - Add shadow-fix-sigabrt.patch: See https://github.com/shadow-maint/shadow/issues/394 - Add shadow-passwd-handle-null.patch [bsc#1188307]: See https://github.com/shadow-maint/shadow/pull/398 - Remove %{_sysconfdir}/default/useradd: file not shipped anymore - Remove --disable-shared: Dont need it anymore See https://github.com/shadow-maint/shadow/issues/336

1 0

mirror problem - previous release already gone, link dead
by L A Walsh 23 Sep '21

23 Sep '21

If you go to http://download.opensuse.org/tumbleweed/repo/oss/repodata in your browser, then see the file: 882df121b85d85b1124d6e88478132807ab2587034b90b5e1591ceb76ab057e3-filelists.xml.gz and click on it, I got a "not found": Object not found! The requested URL was not found on this server. If you entered the URL manually please check your spelling and try again. If you think this is a server error, please contact the webmaster. Error 404 / mirror.linux-ia64.org / Apache ---- Is there some way to retrieve content from D.OS.O and not a mirror when it seems the mirrors are not so reliable? Unfortunately, I seem to be stuck on this bad mirror for the time being -- it will eventually go away, but until my mirror is updated, that file is no longer available. How useful are the history links for previous releases, if a meta file from a few days ago is already gone? There really needs to be some way for d.os.org to verify a mirror having specific content before blindly referring a user off to a dead location. Isn't this possible?

7 13

New Tumbleweed snapshot 20210921 released!
by Dominique Leuenberger 23 Sep '21

23 Sep '21

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: LibVNCServer alpine (2.24 -> 2.25) apache2 (2.4.48 -> 2.4.49) apache2-manual (2.4.48 -> 2.4.49) apache2-prefork (2.4.48 -> 2.4.49) apache2-utils (2.4.48 -> 2.4.49) cppcheck cryptsetup (2.4.0 -> 2.4.1) e2fsprogs (1.46.3 -> 1.46.4) eog-plugins epiphany fetchmail glabels gnome-maps (40.4 -> 40.5) gnome-packagekit gstreamer-devtools (1.18.3 -> 1.18.5) libXi (1.7.10 -> 1.8) libcontainers-common libtirpc libzypp (17.28.3 -> 17.28.4) perl-Bootloader (0.935 -> 0.936) pidgin-sipe pipewire (0.3.35 -> 0.3.36) pitivi plasma5-workspace python-gst (1.18.4 -> 1.18.5) python-kiwi (9.23.54 -> 9.23.56) rygel samba (4.14.6+git.168.6a9fc8a1ddd -> 4.14.6+git.182.2205d5224e3) transactional-update (3.5.4 -> 3.5.5) xfce4-whiskermenu-plugin (2.5.3 -> 2.6.0) xkeyboard-config xorgproto (2021.4 -> 2021.5) === Details === ==== LibVNCServer ==== Subpackages: libvncclient1 libvncserver1 - purposedly adding just this changelog entry - previous version updates fixed also: * CVE-2020-14398 [bsc#1173880] -- improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c * CVE-2017-18922 [bsc#1173477] -- preauth buffer overwrite * CVE-2018-20748 [bsc#1123823] -- libvnc contains multiple heap out-of-bounds writes * CVE-2020-25708 [bsc#1178682] -- libvncserver/rfbserver.c has a divide by zero which could result in DoS * CVE-2018-21247 [bsc#1173874] -- uninitialized memory contents are vulnerable to Information leak * CVE-2018-20750 [bsc#1123832] -- heap out-of-bounds write vulnerability in libvncserver/rfbserver.c * CVE-2020-14397 [bsc#1173700] -- NULL pointer dereference in libvncserver/rfbregion.c * CVE-2019-20839 [bsc#1173875] -- buffer overflow in ConnectClientToUnixSock() * CVE-2020-14401 [bsc#1173694] -- potential integer overflows in libvncserver/scale.c * CVE-2020-14400 [bsc#1173691] -- Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c. * CVE-2019-20840 [bsc#1173876] -- unaligned accesses in hybiReadAndDecode can lead to denial of service * CVE-2020-14399 [bsc#1173743] -- Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c. * CVE-2020-14402 [bsc#1173701] -- out-of-bounds access via encodings. * CVE-2020-14403 [bsc#1173701] * CVE-2020-14404 [bsc#1173701] ==== alpine ==== Version update (2.24 -> 2.25) Subpackages: pico - Update to release 2.25 * New configuration variable VAR_ssl-ciphers that allows users to list the ciphers to use when connecting to a SSL server. * New hidden feature FEAT_enable-delete-before-writing to add support for terminals that need lines to be deleted before being written. * Always follow ?suppress-asterisks-in-password-prompt? setting in the various password prompts. * Fixed a memory corruption when alpine searches for a string that is an incomplete utf8 string in a local folder. * Fixed: When forwarding a message, replacing an attachment might make Alpine re-attach the original attachment. ==== apache2 ==== Version update (2.4.48 -> 2.4.49) - version update to 2.4.49 * ) core/mod_proxy/mod_ssl: Adding `outgoing` flag to conn_rec, indicating a connection is initiated by the server to somewhere, in contrast to incoming connections from clients. Adding 'ap_ssl_bind_outgoing()` function that marks a connection as outgoing and is used by mod_proxy instead of the previous optional function `ssl_engine_set`. This enables other SSL module to secure proxy connections. The optional functions `ssl_engine_set`, `ssl_engine_disable` and `ssl_proxy_enable` are now provided by the core to have backward compatibility with non-httpd modules that might use them. mod_ssl itself no longer registers these functions, but keeps them in its header for backward compatibility. The core provided optional function wrap any registered function like it was done for `ssl_is_ssl`. [Stefan Eissing] * ) mod_ssl: Support logging private key material for use with wireshark via log file given by SSLKEYLOGFILE environment variable. Requires OpenSSL 1.1.1. PR 63391. [Joe Orton] * ) mod_proxy: Do not canonicalize the proxied URL when both "nocanon" and "ProxyPassInterpolateEnv On" are configured. PR 65549. [Joel Self <joelself gmail.com>] * ) mpm_event: Fix children processes possibly not stopped on graceful restart. PR 63169. [Joel Self <joelself gmail.com>] * ) mod_proxy: Fix a potential infinite loop when tunneling Upgrade(d) protocols from mod_proxy_http, and a timeout triggering falsely when using mod_proxy_wstunnel, mod_proxy_connect or mod_proxy_http with upgrade= setting. PRs 65521 and 65519. [Yann Ylavic] * ) mod_unique_id: Reduce the time window where duplicates may be generated PR 65159 [Christophe Jaillet] * ) mpm_prefork: Block signals for child_init hooks to prevent potential threads created from there to catch MPM's signals. [Ruediger Pluem, Yann Ylavic] * ) Revert "mod_unique_id: Fix potential duplicated ID generation under heavy load. PR 65159" added in 2.4.47. This causes issue on Windows. [Christophe Jaillet] * ) mod_proxy_uwsgi: Fix PATH_INFO setting for generic worker. [Yann Ylavic] * ) mod_md: Certificate/keys pairs are verified as matching before a renewal is accepted as successful or a staged renewal is replacing the existing certificates. This avoid potential mess ups in the md store file system to render the active certificates non-working. [@mkauf] * ) mod_proxy: Faster unix socket path parsing in the "proxy:" URL. [Yann Ylavic] * ) mod_ssl: tighten the handling of ALPN for outgoing (proxy) connections. If ALPN protocols are provided and sent to the remote server, the received protocol selected is inspected and checked for a match. Without match, the peer handshake fails. An exception is the proposal of "http/1.1" where it is accepted if the remote server did not answer ALPN with a selected protocol. This accomodates for hosts that do not observe/support ALPN and speak http/1.x be default. * ) mod_proxy: Fix possible reuse/merging of Proxy(Pass)Match worker instances with others when their URLs contain a '$' substitution. PR 65419 + 65429. [Yann Ylavic] * ) mod_dav: Add method_precondition hook. WebDAV extensions define conditions that must exist before a WebDAV method can be executed. This hook allows a WebDAV extension to verify these preconditions. [Graham Leggett] * ) Add hooks deliver_report and gather_reports to mod_dav.h. Allows other modules apart from versioning implementations to handle the REPORT method. [Graham Leggett] * ) Add dav_get_provider(), dav_open_lockdb(), dav_close_lockdb() and dav_get_resource() to mod_dav.h. [Graham Leggett] * ) core: fix ap_escape_quotes substitution logic. [Eric Covener] * ) Easy patches: synch 2.4.x and trunk - mod_auth_basic: Use ap_cstr_casecmp instead of strcasecmp. - mod_ldap: log and abort locking errors. - mod_ldap: style fix for r1831165 - mod_ldap: build break fix for r1831165 - mod_deflate: Avoid hard-coded "%ld" format strings in mod_deflate's logging statements - mod_deflate: Use apr_uint64_t instead of uint64_t (follow up to r1849590) - mod_forensic: Follow up to r1856490: missing one mod_log_forensic test_char_table case. - mod_rewrite: Save a few cycles. - mod_request: Fix a comment (missing '_' in 'keep_body') and some style issues - core: remove extra whitespace in HTTP_NOT_IMPLEMENTED [Christophe Jaillet] * ) core/mpm: add hook 'child_stopping` that gets called when the MPM is stopping a child process. The additional `graceful` parameter allows registered hooks to free resources early during a graceful shutdown. [Yann Ylavic, Stefan Eissing] * ) mod_proxy: Fix icomplete initialization of BalancerMember(s) from the balancer-manager, which can lead to a crash. [Yann Ylavic] * ) mpm_event: Fix graceful stop/restart of children processes if connections are in lingering close for too long. [Yann Ylavic] * ) mod_md: fixed a potential null pointer dereference if ACME/OCSP server returned 2xx responses without content type. Reported by chuangwen. [chuangwen, Stefan Eissing] * ) mod_md: - Domain names in `<MDomain ...>` can now appear in quoted form. - Fixed a failure in ACME challenge selection that aborted further searches when the tls-alpn-01 method did not seem to be suitable. - Changed the tls-alpn-01 setup to only become unsuitable when none of the dns names showed support for a configured 'Protocols ... acme-tls/1'. This allows use of tls-alpn-01 for dns names that are not mapped to a VirtualHost. * ) Add CPING to health check logic. [Jean-Frederic Clere] * ) core: Split ap_create_request() from ap_read_request(). [Graham Leggett] * ) core, h2: common ap_parse_request_line() and ap_check_request_header() code. [Yann Ylavic] * ) core: Add StrictHostCheck to allow unconfigured hostnames to be rejected. [Eric Covener] * ) htcacheclean: Improve help messages. [Christophe Jaillet] - modified patches % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed) - modified sources % apache2.keyring ==== apache2-manual ==== Version update (2.4.48 -> 2.4.49) - version update to 2.4.49 * ) core/mod_proxy/mod_ssl: Adding `outgoing` flag to conn_rec, indicating a connection is initiated by the server to somewhere, in contrast to incoming connections from clients. Adding 'ap_ssl_bind_outgoing()` function that marks a connection as outgoing and is used by mod_proxy instead of the previous optional function `ssl_engine_set`. This enables other SSL module to secure proxy connections. The optional functions `ssl_engine_set`, `ssl_engine_disable` and `ssl_proxy_enable` are now provided by the core to have backward compatibility with non-httpd modules that might use them. mod_ssl itself no longer registers these functions, but keeps them in its header for backward compatibility. The core provided optional function wrap any registered function like it was done for `ssl_is_ssl`. [Stefan Eissing] * ) mod_ssl: Support logging private key material for use with wireshark via log file given by SSLKEYLOGFILE environment variable. Requires OpenSSL 1.1.1. PR 63391. [Joe Orton] * ) mod_proxy: Do not canonicalize the proxied URL when both "nocanon" and "ProxyPassInterpolateEnv On" are configured. PR 65549. [Joel Self <joelself gmail.com>] * ) mpm_event: Fix children processes possibly not stopped on graceful restart. PR 63169. [Joel Self <joelself gmail.com>] * ) mod_proxy: Fix a potential infinite loop when tunneling Upgrade(d) protocols from mod_proxy_http, and a timeout triggering falsely when using mod_proxy_wstunnel, mod_proxy_connect or mod_proxy_http with upgrade= setting. PRs 65521 and 65519. [Yann Ylavic] * ) mod_unique_id: Reduce the time window where duplicates may be generated PR 65159 [Christophe Jaillet] * ) mpm_prefork: Block signals for child_init hooks to prevent potential threads created from there to catch MPM's signals. [Ruediger Pluem, Yann Ylavic] * ) Revert "mod_unique_id: Fix potential duplicated ID generation under heavy load. PR 65159" added in 2.4.47. This causes issue on Windows. [Christophe Jaillet] * ) mod_proxy_uwsgi: Fix PATH_INFO setting for generic worker. [Yann Ylavic] * ) mod_md: Certificate/keys pairs are verified as matching before a renewal is accepted as successful or a staged renewal is replacing the existing certificates. This avoid potential mess ups in the md store file system to render the active certificates non-working. [@mkauf] * ) mod_proxy: Faster unix socket path parsing in the "proxy:" URL. [Yann Ylavic] * ) mod_ssl: tighten the handling of ALPN for outgoing (proxy) connections. If ALPN protocols are provided and sent to the remote server, the received protocol selected is inspected and checked for a match. Without match, the peer handshake fails. An exception is the proposal of "http/1.1" where it is accepted if the remote server did not answer ALPN with a selected protocol. This accomodates for hosts that do not observe/support ALPN and speak http/1.x be default. * ) mod_proxy: Fix possible reuse/merging of Proxy(Pass)Match worker instances with others when their URLs contain a '$' substitution. PR 65419 + 65429. [Yann Ylavic] * ) mod_dav: Add method_precondition hook. WebDAV extensions define conditions that must exist before a WebDAV method can be executed. This hook allows a WebDAV extension to verify these preconditions. [Graham Leggett] * ) Add hooks deliver_report and gather_reports to mod_dav.h. Allows other modules apart from versioning implementations to handle the REPORT method. [Graham Leggett] * ) Add dav_get_provider(), dav_open_lockdb(), dav_close_lockdb() and dav_get_resource() to mod_dav.h. [Graham Leggett] * ) core: fix ap_escape_quotes substitution logic. [Eric Covener] * ) Easy patches: synch 2.4.x and trunk - mod_auth_basic: Use ap_cstr_casecmp instead of strcasecmp. - mod_ldap: log and abort locking errors. - mod_ldap: style fix for r1831165 - mod_ldap: build break fix for r1831165 - mod_deflate: Avoid hard-coded "%ld" format strings in mod_deflate's logging statements - mod_deflate: Use apr_uint64_t instead of uint64_t (follow up to r1849590) - mod_forensic: Follow up to r1856490: missing one mod_log_forensic test_char_table case. - mod_rewrite: Save a few cycles. - mod_request: Fix a comment (missing '_' in 'keep_body') and some style issues - core: remove extra whitespace in HTTP_NOT_IMPLEMENTED [Christophe Jaillet] * ) core/mpm: add hook 'child_stopping` that gets called when the MPM is stopping a child process. The additional `graceful` parameter allows registered hooks to free resources early during a graceful shutdown. [Yann Ylavic, Stefan Eissing] * ) mod_proxy: Fix icomplete initialization of BalancerMember(s) from the balancer-manager, which can lead to a crash. [Yann Ylavic] * ) mpm_event: Fix graceful stop/restart of children processes if connections are in lingering close for too long. [Yann Ylavic] * ) mod_md: fixed a potential null pointer dereference if ACME/OCSP server returned 2xx responses without content type. Reported by chuangwen. [chuangwen, Stefan Eissing] * ) mod_md: - Domain names in `<MDomain ...>` can now appear in quoted form. - Fixed a failure in ACME challenge selection that aborted further searches when the tls-alpn-01 method did not seem to be suitable. - Changed the tls-alpn-01 setup to only become unsuitable when none of the dns names showed support for a configured 'Protocols ... acme-tls/1'. This allows use of tls-alpn-01 for dns names that are not mapped to a VirtualHost. * ) Add CPING to health check logic. [Jean-Frederic Clere] * ) core: Split ap_create_request() from ap_read_request(). [Graham Leggett] * ) core, h2: common ap_parse_request_line() and ap_check_request_header() code. [Yann Ylavic] * ) core: Add StrictHostCheck to allow unconfigured hostnames to be rejected. [Eric Covener] * ) htcacheclean: Improve help messages. [Christophe Jaillet] - modified patches % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed) - modified sources % apache2.keyring ==== apache2-prefork ==== Version update (2.4.48 -> 2.4.49) - version update to 2.4.49 * ) core/mod_proxy/mod_ssl: Adding `outgoing` flag to conn_rec, indicating a connection is initiated by the server to somewhere, in contrast to incoming connections from clients. Adding 'ap_ssl_bind_outgoing()` function that marks a connection as outgoing and is used by mod_proxy instead of the previous optional function `ssl_engine_set`. This enables other SSL module to secure proxy connections. The optional functions `ssl_engine_set`, `ssl_engine_disable` and `ssl_proxy_enable` are now provided by the core to have backward compatibility with non-httpd modules that might use them. mod_ssl itself no longer registers these functions, but keeps them in its header for backward compatibility. The core provided optional function wrap any registered function like it was done for `ssl_is_ssl`. [Stefan Eissing] * ) mod_ssl: Support logging private key material for use with wireshark via log file given by SSLKEYLOGFILE environment variable. Requires OpenSSL 1.1.1. PR 63391. [Joe Orton] * ) mod_proxy: Do not canonicalize the proxied URL when both "nocanon" and "ProxyPassInterpolateEnv On" are configured. PR 65549. [Joel Self <joelself gmail.com>] * ) mpm_event: Fix children processes possibly not stopped on graceful restart. PR 63169. [Joel Self <joelself gmail.com>] * ) mod_proxy: Fix a potential infinite loop when tunneling Upgrade(d) protocols from mod_proxy_http, and a timeout triggering falsely when using mod_proxy_wstunnel, mod_proxy_connect or mod_proxy_http with upgrade= setting. PRs 65521 and 65519. [Yann Ylavic] * ) mod_unique_id: Reduce the time window where duplicates may be generated PR 65159 [Christophe Jaillet] * ) mpm_prefork: Block signals for child_init hooks to prevent potential threads created from there to catch MPM's signals. [Ruediger Pluem, Yann Ylavic] * ) Revert "mod_unique_id: Fix potential duplicated ID generation under heavy load. PR 65159" added in 2.4.47. This causes issue on Windows. [Christophe Jaillet] * ) mod_proxy_uwsgi: Fix PATH_INFO setting for generic worker. [Yann Ylavic] * ) mod_md: Certificate/keys pairs are verified as matching before a renewal is accepted as successful or a staged renewal is replacing the existing certificates. This avoid potential mess ups in the md store file system to render the active certificates non-working. [@mkauf] * ) mod_proxy: Faster unix socket path parsing in the "proxy:" URL. [Yann Ylavic] * ) mod_ssl: tighten the handling of ALPN for outgoing (proxy) connections. If ALPN protocols are provided and sent to the remote server, the received protocol selected is inspected and checked for a match. Without match, the peer handshake fails. An exception is the proposal of "http/1.1" where it is accepted if the remote server did not answer ALPN with a selected protocol. This accomodates for hosts that do not observe/support ALPN and speak http/1.x be default. * ) mod_proxy: Fix possible reuse/merging of Proxy(Pass)Match worker instances with others when their URLs contain a '$' substitution. PR 65419 + 65429. [Yann Ylavic] * ) mod_dav: Add method_precondition hook. WebDAV extensions define conditions that must exist before a WebDAV method can be executed. This hook allows a WebDAV extension to verify these preconditions. [Graham Leggett] * ) Add hooks deliver_report and gather_reports to mod_dav.h. Allows other modules apart from versioning implementations to handle the REPORT method. [Graham Leggett] * ) Add dav_get_provider(), dav_open_lockdb(), dav_close_lockdb() and dav_get_resource() to mod_dav.h. [Graham Leggett] * ) core: fix ap_escape_quotes substitution logic. [Eric Covener] * ) Easy patches: synch 2.4.x and trunk - mod_auth_basic: Use ap_cstr_casecmp instead of strcasecmp. - mod_ldap: log and abort locking errors. - mod_ldap: style fix for r1831165 - mod_ldap: build break fix for r1831165 - mod_deflate: Avoid hard-coded "%ld" format strings in mod_deflate's logging statements - mod_deflate: Use apr_uint64_t instead of uint64_t (follow up to r1849590) - mod_forensic: Follow up to r1856490: missing one mod_log_forensic test_char_table case. - mod_rewrite: Save a few cycles. - mod_request: Fix a comment (missing '_' in 'keep_body') and some style issues - core: remove extra whitespace in HTTP_NOT_IMPLEMENTED [Christophe Jaillet] * ) core/mpm: add hook 'child_stopping` that gets called when the MPM is stopping a child process. The additional `graceful` parameter allows registered hooks to free resources early during a graceful shutdown. [Yann Ylavic, Stefan Eissing] * ) mod_proxy: Fix icomplete initialization of BalancerMember(s) from the balancer-manager, which can lead to a crash. [Yann Ylavic] * ) mpm_event: Fix graceful stop/restart of children processes if connections are in lingering close for too long. [Yann Ylavic] * ) mod_md: fixed a potential null pointer dereference if ACME/OCSP server returned 2xx responses without content type. Reported by chuangwen. [chuangwen, Stefan Eissing] * ) mod_md: - Domain names in `<MDomain ...>` can now appear in quoted form. - Fixed a failure in ACME challenge selection that aborted further searches when the tls-alpn-01 method did not seem to be suitable. - Changed the tls-alpn-01 setup to only become unsuitable when none of the dns names showed support for a configured 'Protocols ... acme-tls/1'. This allows use of tls-alpn-01 for dns names that are not mapped to a VirtualHost. * ) Add CPING to health check logic. [Jean-Frederic Clere] * ) core: Split ap_create_request() from ap_read_request(). [Graham Leggett] * ) core, h2: common ap_parse_request_line() and ap_check_request_header() code. [Yann Ylavic] * ) core: Add StrictHostCheck to allow unconfigured hostnames to be rejected. [Eric Covener] * ) htcacheclean: Improve help messages. [Christophe Jaillet] - modified patches % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed) - modified sources % apache2.keyring ==== apache2-utils ==== Version update (2.4.48 -> 2.4.49) - version update to 2.4.49 * ) core/mod_proxy/mod_ssl: Adding `outgoing` flag to conn_rec, indicating a connection is initiated by the server to somewhere, in contrast to incoming connections from clients. Adding 'ap_ssl_bind_outgoing()` function that marks a connection as outgoing and is used by mod_proxy instead of the previous optional function `ssl_engine_set`. This enables other SSL module to secure proxy connections. The optional functions `ssl_engine_set`, `ssl_engine_disable` and `ssl_proxy_enable` are now provided by the core to have backward compatibility with non-httpd modules that might use them. mod_ssl itself no longer registers these functions, but keeps them in its header for backward compatibility. The core provided optional function wrap any registered function like it was done for `ssl_is_ssl`. [Stefan Eissing] * ) mod_ssl: Support logging private key material for use with wireshark via log file given by SSLKEYLOGFILE environment variable. Requires OpenSSL 1.1.1. PR 63391. [Joe Orton] * ) mod_proxy: Do not canonicalize the proxied URL when both "nocanon" and "ProxyPassInterpolateEnv On" are configured. PR 65549. [Joel Self <joelself gmail.com>] * ) mpm_event: Fix children processes possibly not stopped on graceful restart. PR 63169. [Joel Self <joelself gmail.com>] * ) mod_proxy: Fix a potential infinite loop when tunneling Upgrade(d) protocols from mod_proxy_http, and a timeout triggering falsely when using mod_proxy_wstunnel, mod_proxy_connect or mod_proxy_http with upgrade= setting. PRs 65521 and 65519. [Yann Ylavic] * ) mod_unique_id: Reduce the time window where duplicates may be generated PR 65159 [Christophe Jaillet] * ) mpm_prefork: Block signals for child_init hooks to prevent potential threads created from there to catch MPM's signals. [Ruediger Pluem, Yann Ylavic] * ) Revert "mod_unique_id: Fix potential duplicated ID generation under heavy load. PR 65159" added in 2.4.47. This causes issue on Windows. [Christophe Jaillet] * ) mod_proxy_uwsgi: Fix PATH_INFO setting for generic worker. [Yann Ylavic] * ) mod_md: Certificate/keys pairs are verified as matching before a renewal is accepted as successful or a staged renewal is replacing the existing certificates. This avoid potential mess ups in the md store file system to render the active certificates non-working. [@mkauf] * ) mod_proxy: Faster unix socket path parsing in the "proxy:" URL. [Yann Ylavic] * ) mod_ssl: tighten the handling of ALPN for outgoing (proxy) connections. If ALPN protocols are provided and sent to the remote server, the received protocol selected is inspected and checked for a match. Without match, the peer handshake fails. An exception is the proposal of "http/1.1" where it is accepted if the remote server did not answer ALPN with a selected protocol. This accomodates for hosts that do not observe/support ALPN and speak http/1.x be default. * ) mod_proxy: Fix possible reuse/merging of Proxy(Pass)Match worker instances with others when their URLs contain a '$' substitution. PR 65419 + 65429. [Yann Ylavic] * ) mod_dav: Add method_precondition hook. WebDAV extensions define conditions that must exist before a WebDAV method can be executed. This hook allows a WebDAV extension to verify these preconditions. [Graham Leggett] * ) Add hooks deliver_report and gather_reports to mod_dav.h. Allows other modules apart from versioning implementations to handle the REPORT method. [Graham Leggett] * ) Add dav_get_provider(), dav_open_lockdb(), dav_close_lockdb() and dav_get_resource() to mod_dav.h. [Graham Leggett] * ) core: fix ap_escape_quotes substitution logic. [Eric Covener] * ) Easy patches: synch 2.4.x and trunk - mod_auth_basic: Use ap_cstr_casecmp instead of strcasecmp. - mod_ldap: log and abort locking errors. - mod_ldap: style fix for r1831165 - mod_ldap: build break fix for r1831165 - mod_deflate: Avoid hard-coded "%ld" format strings in mod_deflate's logging statements - mod_deflate: Use apr_uint64_t instead of uint64_t (follow up to r1849590) - mod_forensic: Follow up to r1856490: missing one mod_log_forensic test_char_table case. - mod_rewrite: Save a few cycles. - mod_request: Fix a comment (missing '_' in 'keep_body') and some style issues - core: remove extra whitespace in HTTP_NOT_IMPLEMENTED [Christophe Jaillet] * ) core/mpm: add hook 'child_stopping` that gets called when the MPM is stopping a child process. The additional `graceful` parameter allows registered hooks to free resources early during a graceful shutdown. [Yann Ylavic, Stefan Eissing] * ) mod_proxy: Fix icomplete initialization of BalancerMember(s) from the balancer-manager, which can lead to a crash. [Yann Ylavic] * ) mpm_event: Fix graceful stop/restart of children processes if connections are in lingering close for too long. [Yann Ylavic] * ) mod_md: fixed a potential null pointer dereference if ACME/OCSP server returned 2xx responses without content type. Reported by chuangwen. [chuangwen, Stefan Eissing] * ) mod_md: - Domain names in `<MDomain ...>` can now appear in quoted form. - Fixed a failure in ACME challenge selection that aborted further searches when the tls-alpn-01 method did not seem to be suitable. - Changed the tls-alpn-01 setup to only become unsuitable when none of the dns names showed support for a configured 'Protocols ... acme-tls/1'. This allows use of tls-alpn-01 for dns names that are not mapped to a VirtualHost. * ) Add CPING to health check logic. [Jean-Frederic Clere] * ) core: Split ap_create_request() from ap_read_request(). [Graham Leggett] * ) core, h2: common ap_parse_request_line() and ap_check_request_header() code. [Yann Ylavic] * ) core: Add StrictHostCheck to allow unconfigured hostnames to be rejected. [Eric Covener] * ) htcacheclean: Improve help messages. [Christophe Jaillet] - modified patches % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed) - modified sources % apache2.keyring ==== cppcheck ==== - Add glibc 2.34 build fix: * 0001-Fix-compilation-with-recent-glibc-where-SIGSTKSZ-is-.patch ==== cryptsetup ==== Version update (2.4.0 -> 2.4.1) Subpackages: cryptsetup-lang libcryptsetup12 libcryptsetup12-32bit libcryptsetup12-hmac - cryptsetup 2.4.1 * Fix compilation for libc implementations without dlvsym(). * Fix compilation and tests on systems with non-standard libraries * Try to workaround some issues on systems without udev support. * Fixes for OpenSSL3 crypto backend (including FIPS mode). * Print error message when assigning a token to an inactive keyslot. * Fix offset bug in LUKS2 encryption code if --offset option was used. * Do not allow LUKS2 decryption for devices with data offset. * Fix LUKS1 cryptsetup repair command for some specific problems. ==== e2fsprogs ==== Version update (1.46.3 -> 1.46.4) Subpackages: e2fsprogs-scrub libcom_err2 libcom_err2-32bit libext2fs2 - Update to 1.46.4: * Default to 256-byte inodes for all filesystems, not only larger ones * Bigalloc is considered supported now for small cluster sizes * E2fsck and e2image fixes for quota feature * Fix mke2fs creation of filesystem into non-existent file - libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer libreadline.so.8 to dlopen path (bsc#1189453) - Added hardening to systemd service(s) (bsc#1181400). Added patch(es): * harden_e2scrub@.service.patch * harden_e2scrub_all.service.patch * harden_e2scrub_fail@.service.patch * harden_e2scrub_reap.service.patch ==== eog-plugins ==== Subpackages: eog-plugins-lang - Remove obsolete translation-update-upstream support (jsc#SLE-21105). ==== epiphany ==== Subpackages: epiphany-lang gnome-shell-search-provider-epiphany - Remove obsolete translation-update-upstream support (jsc#SLE-21105). ==== fetchmail ==== Subpackages: fetchmailconf - Added hardening to systemd service(s) (bsc#1181400). Modified: * fetchmail.service ==== glabels ==== Subpackages: glabels-lang - Remove obsolete translation-update-upstream support (jsc#SLE-21105). ==== gnome-maps ==== Version update (40.4 -> 40.5) Subpackages: gnome-maps-lang - Update to version 40.5: + Updated translations. ==== gnome-packagekit ==== Subpackages: gnome-packagekit-lang - Add gnome-packagekit-drop-NEWEST-on-get-updates.patch: Don't use PK_FILTER_ENUM_NEWEST filter when getting updates (glgo#GNOME/gnome-packagekit!3, bsc#1190330). ==== gstreamer-devtools ==== Version update (1.18.3 -> 1.18.5) Subpackages: libgstvalidate-1_0-0 typelib-1_0-GstValidate-1_0 - Update to version 1.18.5: + scenario: Fix EOS handling in seek_forward.scenario + validate-utils: Only modify structure fields that really need updates + Don't use volatile to mean atomic (fixes compiler warnings with gcc 11) - Changes from version 1.18.4: + No changes ==== libXi ==== Version update (1.7.10 -> 1.8) Subpackages: libXi6 libXi6-32bit - Update to version 1.8 * This release of libXi marks the support of XI 2.4 touchpad gesture events official. This feature is the only difference between libXi 1.8 and the latest release in the 1.7.x series (1.7.10). ==== libcontainers-common ==== - Comment out ostree_repo if it's blank [boo#1189893] - Comment out ostree_repo [boo#1189893] ==== libtirpc ==== Subpackages: libtirpc-netconfig libtirpc3 libtirpc3-32bit - Backport DoS vulnerability fix 0001-Fix-DoS-vulnerability-in-libtirpc.patch - Replace %setup with %autosetup ==== libzypp ==== Version update (17.28.3 -> 17.28.4) - Make sure to keep states alives while transitioning (bsc#1190199) - May set techpreview variables for testing in /etc/zypp/zypp.conf. If environment variables are unhandy one may enable the desired techpreview in zypp.conf as well: [main] techpreview.ZYPP_SINGLE_RPMTRANS=1 techpreview.ZYPP_MEDIANETWORK=1 - version 17.28.4 (22) ==== perl-Bootloader ==== Version update (0.935 -> 0.936) - merge gh#openSUSE/perl-bootloader#136 - report error if config file could not be updated (bsc#1188768) - 0.936 ==== pidgin-sipe ==== Subpackages: libpurple-plugin-sipe libpurple-plugin-sipe-lang pidgin-plugin-sipe - Remove obsolete translation-update-upstream support (jsc#SLE-21105). ==== pipewire ==== Version update (0.3.35 -> 0.3.36) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-lang pipewire-media-session pipewire-modules pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Add patches from upstream to fix an "use-after-free" error and to set the version number correctly: * 0001-media-session-dont-use-after-free-if-linking-node-removed.patch * 0002-update-version-number-as-well.patch - Update to version 0.3.36: * Highlights - A quick update with mostly only bugfixes and small improvements. - Capture and playback is now avoided on unavailable devices. This should fix some issues where an unusable microphone was selected by default. - MIDI output should not stop randomly now. - The GStreamer elements are much improved, cheese should work a lot better now. - Virtual sinks and sources should now always show up immediately. - JACK processing is now delayed until buffersize and samplerate are emited. This should improve stability of many JACK apps. - JACK transport sync is now implemented correctly so that preroll in bitwig works. * PipeWire - The module dir environment variable can now contain multiple paths. - Documentation now contains dot graphs of dependencies. (#1585) - config min/max/default quantum values are now scaled with the samplerate. - A potential crash was fixed where destroyed memory was still used by a node. This could cause crashes in cheese. * pipewire-media-session - Only allow passthrough for passthrough formats (S/PDIF) for now. (#1587) - Improve bluetooth profile autoswitch. - Don't try to route audio to nodes with unavailable routes. * ALSA - Pass the right AES bits to the alsa device when opening an S/PDIF stream. - Fix a bug in the MIDI bridge port management logic. When a port was added and immediately removed, output would stop. * GStreamer - The GStreamer source now handles the flushing state correctly. - All blocking operations now have a 30 seconds timeout, to avoid infinite locks. * Plugins - V4l2 Device formats and controls are now passed on the node, just like with audio devices. - audioconvert now also exposes the softMute property. * JACK - Improve stability when changing buffer size and sample rate dynamically by pausing the processing until the application has handled the callback. - Improve handling of timebase master. When the master was moved to another driver, it did not attempt to become a new timebase master on the new driver. (#1589) - Implement transport sync to make preroll in bitwig work. (#1589) * pulse-server - Fix an issue where virtual sinks/sources would not show up immediately. (#1588) ==== pitivi ==== Subpackages: pitivi-lang - Remove obsolete translation-update-upstream support (jsc#SLE-21105). ==== plasma5-workspace ==== Subpackages: gmenudbusmenuproxy plasma5-session plasma5-session-wayland plasma5-workspace-lang plasma5-workspace-libs xembedsniproxy - Add upstream patch to fix a bug that would result in power management remaining inhibited even after un-inhibiting it in the UI: * Call-UnInhibit-with-correct-signature-in-powermanagement-dataengine.patch ==== python-gst ==== Version update (1.18.4 -> 1.18.5) - Update to version 1.18.5: + No changes ==== python-kiwi ==== Version update (9.23.54 -> 9.23.56) - Bump version: 9.23.55 ? 9.23.56 - Only wipe bundle dir when required The given result bundle dir must only be wiped if the request to turn the result files into an rpm was given. Only in this case the given bundle dir must start empty - Fixed uninstall handling via dnf, microdnf, zypper The above package managers supports uninstall instructions like 'iwl*'. In kiwi there was code checking via rpm if the packages given to uninstall actually exists. That code does not work if the given package to uninstall is an instruction that matches a pattern. Therefore if we use the uninstall section in the kiwi image description, just pass the provided information to the package manager and don't try to be clever in kiwi itself. - Allow to set --logfile for result namespace Setting a logfile for e.g 'kiwi-ng result bundle ...' is useful and should be possible - Bump version: 9.23.54 ? 9.23.55 - Added support for building rpm package from bundle With the new option --package-as-rpm it is possible to call the kiwi result bundler such that the image build results gets packaged into an rpm. I think this is a handy feature to transport image builds via repositories - Fixed MicroOS integration test With ignition/combustion in place it's not allowed to use tmp as a subvolume ==== rygel ==== Subpackages: librygel-core-2_6-2 librygel-server-2_6-2 - Remove obsolete translation-update-upstream support (jsc#SLE-21105). ==== samba ==== Version update (4.14.6+git.168.6a9fc8a1ddd -> 4.14.6+git.182.2205d5224e3) Subpackages: libdcerpc-binding0 libdcerpc-binding0-32bit libdcerpc0 libdcerpc0-32bit libndr-krb5pac0 libndr-krb5pac0-32bit libndr-nbt0 libndr-nbt0-32bit libndr-standard0 libndr-standard0-32bit libndr1 libndr1-32bit libnetapi0 libnetapi0-32bit libsamba-credentials1 libsamba-credentials1-32bit libsamba-errors0 libsamba-errors0-32bit libsamba-hostconfig0 libsamba-hostconfig0-32bit libsamba-passdb0 libsamba-passdb0-32bit libsamba-policy0-python3 libsamba-util0 libsamba-util0-32bit libsamdb0 libsamdb0-32bit libsmbclient0 libsmbconf0 libsmbconf0-32bit libsmbldap2 libsmbldap2-32bit libtevent-util0 libtevent-util0-32bit libwbclient0 libwbclient0-32bit samba-client samba-client-32bit samba-doc samba-libs samba-libs-32bit samba-libs-python3 samba-python3 samba-winbind samba-winbind-32bit - Add Certificate Auto Enrollment Policy; (jsc#SLE-18457). ==== transactional-update ==== Version update (3.5.4 -> 3.5.5) Subpackages: dracut-transactional-update libtukit0 transactional-update-zypp-config tukit - Version 3.5.5 - t-u: Use tukit for SUSEConnect call [bsc#1190574] Correctly registers repositories ==== xfce4-whiskermenu-plugin ==== Version update (2.5.3 -> 2.6.0) Subpackages: xfce4-whiskermenu-plugin-lang - Update to version 2.6.0 * Fix unable to resize with metacity. (gxo#panel-plugins/xfce4-whiskermenu-plugin#56) * Fix invalid desktop files when hiding applications. (gxo#panel-plugins/xfce4-whiskermenu-plugin#53) * Fix not showing focused launcher when searching. (gxo#panel-plugins/xfce4-whiskermenu-plugin#45) * Add option to disable sorting categories. (gxo#panel-plugins/xfce4-whiskermenu-plugin#42) * Translation updates ==== xkeyboard-config ==== Subpackages: xkeyboard-config-lang - Remove obsolete translation-update-upstream support (jsc#SLE-21105). ==== xorgproto ==== Version update (2021.4 -> 2021.5) - xorgproto 2021.5 * This release introduces the version 2.4 of the X Input protocol. It contains the addition of the concept of touchpad gestures. Touchpad gesture is an interaction of two or more fingers that can be interpreted as a swipe or a pinch.

1 0

Packages constantly upgraded on Tumbleweed
by Khelben Blackstaff 23 Sep '21

23 Sep '21

Greetings. In the last 6-7 snapshots, i noticed some packages being constantly "upgraded" without appearing in the changelog. There are packages like that many times because some library they are depending on was upgraded and so they had to be recompiled or something like that. It doesn't seem to be the case this time though. There are quite a few packages but i mainly noticed it due to wine-mono which in my mind doesn't depend on libraries and doesn't need to be recompiled. I also did a check with zypper / rpm and it seems to only depend on wine. % cd /var/cache/zypp/packages/non-oss/noarch % ls -al wine-mono-6.3.0-1.* -rw-r--r-- 1 root root 64502590 Aug 4 10:32 wine-mono-6.3.0-1.1.noarch.rpm -rw-r--r-- 1 root root 64502587 Sep 5 08:33 wine-mono-6.3.0-1.2.noarch.rpm -rw-r--r-- 1 root root 64502573 Sep 9 08:42 wine-mono-6.3.0-1.4.noarch.rpm -rw-r--r-- 1 root root 64502582 Sep 10 08:52 wine-mono-6.3.0-1.5.noarch.rpm -rw-r--r-- 1 root root 64502589 Sep 12 13:25 wine-mono-6.3.0-1.6.noarch.rpm -rw-r--r-- 1 root root 64502588 Sep 14 16:33 wine-mono-6.3.0-1.7.noarch.rpm -rw-r--r-- 1 root root 64502584 Sep 15 09:08 wine-mono-6.3.0-1.8.noarch.rpm Here are the packages i have in my cache. As you see, it got upgraded pretty much on every snapshot. I am not saying this as a criticism. I am just asking out of curiosity. I have a relative understanding of how factory and tumbleweed snapshots work but there are some things like this that i haven't fully understood. Thank you for your time.

4 3

Test
by Michael Pujos 23 Sep '21

23 Sep '21

Test, because I'm getting "550 5.7.1 Spam identified (9.0/5.0)" errors. Please disregard if it reaches the list.

3 4

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 23 Sep '21

23 Sep '21

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have been failing to build for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - python-papermill Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

3 2

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 22 Sep '21

22 Sep '21

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have been failing to build for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - openmw Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

1 0

openSUSE Release Engineering Meeting 22.09.2021
by Lubos Kocman 22 Sep '21

22 Sep '21

All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting Meeting is hosted here https://meet.opensuse.org/ReleaseEngineeringMeeting ## Participants dleuenberger,guillaumeg, lkocman, Sarah, Richard ## Leap * https://bugzilla.suse.com/show_bug.cgi?id=1187214 (sle_version is no longer part of rpm-config-suse) Approached cisco with guidance on offering OpenH264 to Leap users created a support case with Cisco Licensing department Working on SUSE's Open Source Policy reworking into a new SUSE Policy format. We intend to keep it public, even when this is no longer explicitly required by Open Chain Framework. 15.3 Quarterly update setup, Meeting with Autobuild on Friday No update last meeting with autobuild was declined. Let's wait for Max to get back. (The feature for single-password entry for full-disk encryption is getting an extra attention). ## openSUSE Tumbleweed * glibc 2.34 has been merged in snapshot 20210917, full rebuld of Tumbleweed triggered. Initial tests revealed a problem with docker (see announcement mail on Factory mailing list) * GNOME 41 released upstream, GNOME:Next is fully up-to-date already, push to Factory to happen soon™ Marcus: William Brown is trying to submit new rust. I did sent him some hints. What is status of it? DimStar: it's currently in staging, so far most look okay. Marcus: the setup is bit weird compared to gcc or so. DimStar: we have to align that it falls under the same category as gcc, boost. DimStar: it's on my todo list in case that bot would reject it. ## Richard (Kubic/TW MicroOS) k8s 1.22.2 and related earlier version CVE fixes have been checked in, but are blocked by the lack of TW snapshots podman updates and improvements to libcontainer-common also checked in, but also blocked pushing upstream to more consistantly use /usr for configs DimStar: you've mentioned certifcication for k8s. How much time do you have left? rbrown: 2 weeks? ## Max On vacation * GNOME update from SLE15 SP4 resulting several package build fails/unresolvables in Backports, looking into these issues * Started working on a simple package updater for Backports project * The latest snapshot has several new failing tests appeared after SLE updates included ** opensuse-welcome didn't display on GNOME bsc#1190288 ** gimp crash bsc#1190287 - gimp is SLE package ** lightdm fails to start bsc#1190289 * Fowarded all pending *new package* submissions in Leap:15.4 to Backports:SLE-15-SP4 * Started to working on 15.3 Respin https://github.com/openSUSE/openSUSE-release-process/issues/104 lkocman: we've agreed with Adrian that we'll have to educate maintainers over the time. We don't have an easy solution in time. * https://etherpad.opensuse.org/p/15.3_respin_proposal_maxlin (details about the setup) Max we would need a snapshot-repo of standard repository in openSUSE:Leap:15.3:Update and openSUSE:Backports:SLE-15-SP3, eg. standard-leap-15.3 * Somewhat https://doc.opensuse.org/release-notes/x86_64/openSUSE/Leap/15.3/release.no… is missing, switch to Tumbleweed's release-notes.rpm for the time being in Leap's medium, otherwise the shortcut setup in installer will be changed then broke openQA testing lkocman: I'll check on this with docs team, also for 15.4 gnome update fallback <bittin>: GNOME 40 is in Stable and GNOME 41 is in Beta at the moment ## Guillaume - Arm Tumbleweed: * Blocked atm: - Boot hangs on Raspberry Pi 3 and 2: https://bugzilla.opensuse.org/show_bug.cgi?id=1190469 a fix for the kernel is on the way: https://build.opensuse.org/request/show/920271 Leap 15.4: * Kernel 5.14 now builds for armv7 in devel project but has not been submitted to Leap/SLE yet. WSL: Stalled: WIP to have WSL on aarch64 on https://build.opensuse.org/project/show/home:Guillaume_G:WSL todo: lkocman to write a blog post how We have a WSL feature for 15 SP4 to have all SUSE/openSUSE images installed from outside of the store "adopt the new behavior". Therefore we wouldn't have to build the WSL-DistroLauncher image any more. ## Sarah - s390x * openQA issue resolved with a containerized solution * openSUSE Tumbleweed tests are failing because a LLVM issue (race condition) in the build of PostgreSQL11: https://bugzilla.opensuse.org/show_bug.cgi?id=1190740 ## Doug On vacation * Survey Rust closes in 3 weeks - https://survey.opensuse.org/ * Swag being sent out to GSoC mentors and students * Brazil openSUSE Community looking to do event on kernel development * Freewear invoice for oVSC21 T-Shirts expceted next week * Survey for packagers and maintainers expected to be ready by Sept. 20 * software.o.o proposal progressing * benalia sent report on release party in Algeria - https://photos.app.goo.gl/Ai8zHZycJEXyCkM78 * is planning another event in October ## Dirk Not available ## Gerald Not available ## Wolfgang (Package Hub), Scott Bahling Not available ## Maintenance team (Marina or Marcus) Quite a backlog, since the source review was not working. Release of a big chromium update. Display status of SLES updates to community ( https://code.opensuse.org/leap/features/issue/30). Marina: had a first call with Lubos for clarifying the use case and what is needed from the existing SUSE Maintenance tools (SMELT) - embargoed and customer info can't be shared - limit some user info from logs due to GDPR concerns - the search function in SMELT can be one entry point for searching for the status of an update - for the detailed view of a maintenance incident the Planned Release Date and the Release Date are helpful info to provide. Some more investigations/refinements are needed. lkocman: Our usecase is: Maintainer is waiting for certain update (perhaps originally submitted by him) to get released in SLE. Anything that can help him understand remaining ~eta for releasing of the package would be in scope. lkocman: Neal was raising his concern about Public (after embargo was lifted) CVEs for packages where he might be involved in as a community maintainer. As in our initial discussion security updates were out of scope. Marcus: non-embargoed security updates could be displayed Please fork yast2-theme in Leap 15.4, marcus prepared an update for yast2-theme in 15.3 Update, to be released today if possible. https://bugzilla.suse.com/show_bug.cgi?id=1190478 ## Adrian - CtLG or openSUSE Step No update, happy to be around

1 0

and again: no bugowner.
by Mathias Homann 20 Sep '21

20 Sep '21

Hi, the whole devel:languages:python has **no** bugowner set. Can't file bugs. Can someone please set factory-maintainers as bugowner (unless there's a more suitable one)? Cheers MH -- Mathias Homann Mathias.Homann(a)openSUSE.org telegram: https://telegram.me/lemmy98 irc: [lemmy] on freenode and ircnet obs: lemmy04 gpg key fingerprint: 8029 2240 F4DD 7776 E7D2 C042 6B8E 029E 13F2 C102

8 12

Re: mirror problem - previous release already gone, link dead
by Carlos E. R. 20 Sep '21

20 Sep '21

On 20/09/2021 17.52, L A Walsh wrote: > On 2021/09/20 05:31, Carlos E. R. wrote: >> Use boombatower instead. >> >> Amazingly, there is no boombatower wiki page. But there is >> >> http://boombatower.com/ > > What's a boombatower?... > looks like a hosting service? > It is not... It is a method of installing TW with snapshots. You install a certain snapshot of TW and it doesn't change till you use a certain command to update to another snapshot (it changes the repo URL each time, I think). Depending on where in the history line you are, you can access package for a month. [1] https://lists.opensuse.org/opensuse-factory/2017-11/msg00591.html was the official announcement, read it. And the continuation: <https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/…> -- Cheers / Saludos, Carlos E. R. (from oS Leap 15.2 x86_64 (Minas Tirith))

1 0