November 2022 - openSUSE Factory - openSUSE Mailing Lists

Tumbleweed - Review of the week 2022/45
by Dominique Leuenberger / DimStar 11 Nov '22

11 Nov '22

Dear Tumbleweed users and hackers, This week (the last weekend) has been a bit of a challenge for many of our users, due to an ill-prepared sudo config change. It was attempted to closer align how sudo works on other distros (using user’s password instead of root’s) but the configuration was far from complete and made nobody able to sudo anymore (su still worked, luckily). A heartfelt apology if you were hit by that. The change was reverted on Monday (through the update channel) to get you back to the usual config asap. But of course, the week was not defined by that one incident. Tumbleweed has been rolling on steadily with daily snapshots (1104…1110). The main changes delivered during this week were: * KDE Gear 22.08.3 * Qt 5.15.7 (broke Deepin/qt5platform-plugins, I submitted a fix for that to the devel project) * Libvirt 8.9.0 * SQLite 3.93.4 * cmake 3.24.2 * PostgreSQL 15.0 (final release, out of RC) * Mozilla Firefox 106.0.5 * Linux kernel 6.0.7 * GNU Make 4.4 * git 2.38.1 * gnome-shell & mutter 43.1 * Mesa 22.2.3 * KDE Plasma 5.26.3 * gnutls 3.7.8 * systemd 251.8 Quite the list that accumulated there over just one week. And of course, these are just the major changes.OBS reports for the last week: During this period 902 commits were added to packages in this project. Out of those commits, 714 were version updates The staging projects are currently testing these updates: * icu 72.1 (nodejs fixes were submitted, needs retesting) * icewm 3.2.0 * Linux kernel 6.0.8 * Python (all versions): Fixes for CVE-2022-45061 * postgresql10, 11, 12, 13, 14, and 15 – all bump to their latest minor version * rubygem-rspec 3.12.0: YaST is in the progress of catching up with the needed changes * FFmpeg-5 as default (ffmpeg-4 will stay around, and spec files can pin to it) Cheers, Dominique

1 0

New Tumbleweed snapshot 20221110 released!
by Dominique Leuenberger 11 Nov '22

11 Nov '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: alsa-oss alsa-plugins autotrace bluedevil5 (5.26.2 -> 5.26.3.1) breeze (5.26.2 -> 5.26.3.1) breeze-gtk (5.26.2 -> 5.26.3) discover (5.26.2 -> 5.26.3) drkonqi5 (5.26.2 -> 5.26.3) emacs fontconfig (2.14.0 -> 2.14.1) gnome-terminal (3.46.3 -> 3.46.4) gnutls (3.7.7 -> 3.7.8) gpgme gpgmeqt hwinfo java-11-openjdk javapackages-tools kactivitymanagerd (5.26.2 -> 5.26.3) kcm_sddm (5.26.2 -> 5.26.3) kde-cli-tools5 (5.26.2 -> 5.26.3) kde-gtk-config5 (5.26.2 -> 5.26.3) kgamma5 (5.26.2 -> 5.26.3) khotkeys5 (5.26.2 -> 5.26.3) kinfocenter5 (5.26.2 -> 5.26.3) kmenuedit5 (5.26.2 -> 5.26.3) kpipewire (5.26.2 -> 5.26.3) kscreen5 (5.26.2 -> 5.26.3) kscreenlocker (5.26.2 -> 5.26.3) ksshaskpass5 (5.26.2 -> 5.26.3) ksystemstats5 (5.26.2 -> 5.26.3) kwayland-integration (5.26.2 -> 5.26.3) kwin5 (5.26.2.1 -> 5.26.3) kwrited5 (5.26.2 -> 5.26.3) layer-shell-qt (5.26.2 -> 5.26.3) libkdecoration2 (5.26.2 -> 5.26.3) libkscreen2 (5.26.2 -> 5.26.3) libksysguard5 (5.26.2 -> 5.26.3) libspectre (0.2.10 -> 0.2.11) libstorage-ng (4.5.48 -> 4.5.50) libyui (4.4.4 -> 4.4.6) libyui-ncurses (4.4.4 -> 4.4.6) libyui-ncurses-pkg (4.4.4 -> 4.4.6) libyui-qt (4.4.4 -> 4.4.6) libyui-qt-graph (4.4.4 -> 4.4.6) libyui-qt-pkg (4.4.4 -> 4.4.6) mdadm (4.1 -> 4.2) milou5 (5.26.2 -> 5.26.3) oxygen5-sounds (5.26.2 -> 5.26.3.1) perl-HTTP-Message (6.41 -> 6.44) plasma-browser-integration (5.26.2 -> 5.26.3) plasma-nm5 (5.26.2 -> 5.26.3) plasma5-addons (5.26.2 -> 5.26.3) plasma5-desktop (5.26.2 -> 5.26.3) plasma5-disks (5.26.2 -> 5.26.3) plasma5-integration (5.26.2 -> 5.26.3) plasma5-openSUSE plasma5-pa (5.26.2 -> 5.26.3) plasma5-systemmonitor (5.26.2 -> 5.26.3) plasma5-thunderbolt (5.26.2 -> 5.26.3) plasma5-workspace (5.26.2 -> 5.26.3) polkit polkit-kde-agent-5 (5.26.2 -> 5.26.3) powerdevil5 (5.26.2 -> 5.26.3) python-Jinja2 (3.0.3 -> 3.1.2) python-gssapi (1.8.1 -> 1.8.2) python-pexpect python-psutil (5.9.3 -> 5.9.4) qemu rebootmgr (1.3.1 -> 2.0) systemd (251.7 -> 251.8) systemsettings5 (5.26.2 -> 5.26.3) vmaf xdg-desktop-portal-kde (5.26.2 -> 5.26.3) === Details === ==== alsa-oss ==== Subpackages: alsa-oss-32bit - Add tarball signature and keyring ==== alsa-plugins ==== Subpackages: alsa-plugins-pulse alsa-plugins-pulse-32bit alsa-plugins-speexrate alsa-plugins-upmix - Add keyring ==== autotrace ==== Subpackages: libautotrace3 - Added CVE-2022-32323.patch * [bsc#1201529, CVE-2022-32323] * Fixes Heap overflow in ReadImage() ==== bluedevil5 ==== Version update (5.26.2 -> 5.26.3.1) Subpackages: bluedevil5-lang - Update to 5.26.3.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.3 - No code changes since 5.26.2 ==== breeze ==== Version update (5.26.2 -> 5.26.3.1) Subpackages: breeze5-cursors breeze5-decoration breeze5-style breeze5-style-lang libbreezecommon5-5 - Update to 5.26.3.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.3 - No code changes since 5.26.2 ==== breeze-gtk ==== Version update (5.26.2 -> 5.26.3) Subpackages: gtk2-metatheme-breeze gtk3-metatheme-breeze metatheme-breeze-common - Update to 5.26.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.3 - No code changes since 5.26.2 ==== discover ==== Version update (5.26.2 -> 5.26.3) Subpackages: discover-backend-flatpak discover-backend-fwupd discover-backend-packagekit discover-lang - Update to 5.26.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.3 - Changes since 5.26.2: * Remove top margin caused by empty header on UpdatesPage * Notifier: Fix notification logic * pk/?: Fix problem when using faulty URL ==== drkonqi5 ==== Version update (5.26.2 -> 5.26.3) Subpackages: drkonqi5-lang - Update to 5.26.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.3 - No code changes since 5.26.2 ==== emacs ==== Subpackages: emacs-el emacs-eln emacs-info emacs-nox emacs-x11 etags - Add workaround for boo#1205109, that is started with sudo there is maybe no active user session for root hence no dbus ==== fontconfig ==== Version update (2.14.0 -> 2.14.1) Subpackages: fontconfig-lang libfontconfig1 libfontconfig1-32bit - update to 2.14.1: * Bump the cache version to 8 in doc/fontconfig-user.sgm * Enable 10-sub-pixel-rgb.conf by default * build fixes and translation updates * Avoid misuse of ctype ==== gnome-terminal ==== Version update (3.46.3 -> 3.46.4) Subpackages: gnome-shell-search-provider-gnome-terminal gnome-terminal-lang nautilus-extension-terminal - Update to version 3.46.4: * all: backport: Implement xdg-terminal-exec support. * docs: - Fix some wrong info in README. - Fix some typos in README. * Updated translations. - Add f06e6e5.patch: util: Fix interpretation of TryExec desktop entry key. - Add appstream-glib and desktop-file-utils BuildRequires and a check section with meson_test macro, validate appdata and desktop files and run tests during build. ==== gnutls ==== Version update (3.7.7 -> 3.7.8) Subpackages: libgnutls-dane0 libgnutls30 libgnutls30-32bit libgnutls30-hmac - Verify only the libgnutls library HMAC [bsc#1199881] * Do not use the brp-50-generate-fips-hmac script as this is now calculated with the internal fipshmac tool. * Add gnutls-verify-library-HMAC.patch - Temporarily revert the jitterentropy patches in s390 and s390x architectures until a fix is provided [bsc#1204937] - Disable flaky test that fails in s390x architecture: * Add gnutls-disable-flaky-test-dtls-resume.patch - Consolidate the FIPS hmac files [bsc#1203245] * Use the gnutls fipshmac tool instead of the brp-check-suse and rename it to reflect on the library version. * Remove not needed gnutls-FIPS-Run-CFB8-without-offset.patch - Add a gnutls.rpmlintrc file to remove a hidden-file-or-dir false positive for the FIPS hmac calculation. - Update to 3.7.8: * libgnutls: In FIPS140 mode, RSA signature verification is an approved operation if the key has modulus with known sizes (1024, 1280, 1536, and 1792 bits), in addition to any modulus sizes larger than 2048 bits, according to SP800-131A rev2. * libgnutls: gnutls_session_channel_binding performs additional checks when GNUTLS_CB_TLS_EXPORTER is requested. According to RFC9622 4.2, the "tls-exporter" channel binding is only usable when the handshake is bound to a unique master secret (i.e., either TLS 1.3 or extended master secret extension is negotiated). Otherwise the function now returns error. * libgnutls: usage of the following functions, which are designed to loosen restrictions imposed by allowlisting mode of configuration, has been additionally restricted. Invoking them is now only allowed if system-wide TLS priority string has not been initialized yet: - gnutls_digest_set_secure - gnutls_sign_set_secure - gnutls_sign_set_secure_for_certs - gnutls_protocol_set_enabled * Delete gnutls-3.6.6-set_guile_site_dir.patch and use the - -with-guile-extension-dir configure option to properly handle the guile extension directory. * Rebase gnutls-Make-XTS-key-check-failure-not-fatal.patch * Update gnutls.keyring * Add a build depencency on gtk-doc required by autoreconf - FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146] * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch - FIPS: Make XTS key check failure not fatal [bsc#1203779] * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch ==== gpgme ==== Subpackages: libgpgme11 libgpgmepp6 - Add gpgme-suse-nobetasuffix.patch * remove "-unknown" suffix from version string * boo#1205197 ==== gpgmeqt ==== - Add gpgme-suse-nobetasuffix.patch * remove "-unknown" suffix from version string * boo#1205197 ==== hwinfo ==== - Implement shared library packaging guideline. - Modernize specfile. ==== java-11-openjdk ==== Subpackages: java-11-openjdk-headless - Fix jconsole.desktop icon ==== javapackages-tools ==== Subpackages: javapackages-filesystem - Reflect the removal of gradle from repositories ==== kactivitymanagerd ==== Version update (5.26.2 -> 5.26.3) Subpackages: kactivitymanagerd-lang - Update to 5.26.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.3 - No code changes since 5.26.2 ==== kcm_sddm ==== Version update (5.26.2 -> 5.26.3) Subpackages: kcm_sddm-lang - Update to 5.26.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.3 - No code changes since 5.26.2 ==== kde-cli-tools5 ==== Version update (5.26.2 -> 5.26.3) Subpackages: kde-cli-tools5-lang - Update to 5.26.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.3 - No code changes since 5.26.2 ==== kde-gtk-config5 ==== Version update (5.26.2 -> 5.26.3) Subpackages: kde-gtk-config5-gtk3 - Update to 5.26.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.3 - No code changes since 5.26.2 ==== kgamma5 ==== Version update (5.26.2 -> 5.26.3) Subpackages: kgamma5-lang - Update to 5.26.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.3 - No code changes since 5.26.2 ==== khotkeys5 ==== Version update (5.26.2 -> 5.26.3) Subpackages: khotkeys5-lang - Update to 5.26.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.3 - No code changes since 5.26.2 ==== kinfocenter5 ==== Version update (5.26.2 -> 5.26.3) Subpackages: kinfocenter5-lang - Update to 5.26.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.3 - No code changes since 5.26.2 ==== kmenuedit5 ==== Version update (5.26.2 -> 5.26.3) Subpackages: kmenuedit5-lang - Update to 5.26.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.3 - No code changes since 5.26.2 ==== kpipewire ==== Version update (5.26.2 -> 5.26.3) Subpackages: kpipewire-imports libKPipeWire5 libKPipeWire5-lang libKPipeWireRecord5 - Update to 5.26.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.3 - No code changes since 5.26.2 ==== kscreen5 ==== Version update (5.26.2 -> 5.26.3) Subpackages: kscreen5-lang kscreen5-plasmoid - Update to 5.26.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.3 - No code changes since 5.26.2 ==== kscreenlocker ==== Version update (5.26.2 -> 5.26.3) Subpackages: kscreenlocker-lang libKScreenLocker5 - Update to 5.26.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.3 - No code changes since 5.26.2 ==== ksshaskpass5 ==== Version update (5.26.2 -> 5.26.3) Subpackages: ksshaskpass5-lang - Update to 5.26.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.3 - No code changes since 5.26.2 ==== ksystemstats5 ==== Version update (5.26.2 -> 5.26.3) Subpackages: ksystemstats5-lang - Update to 5.26.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.3 - No code changes since 5.26.2 ==== kwayland-integration ==== Version update (5.26.2 -> 5.26.3) - Update to 5.26.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.3 - No code changes since 5.26.2 ==== kwin5 ==== Version update (5.26.2.1 -> 5.26.3) Subpackages: kwin5-lang - Update to 5.26.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.3 - Changes since 5.26.2.1: * wayland: Prevent matching dnd actions after drop * Screencast: Fix inverted screencast on OpenGLES and memfd * screencasting: Make sure we are reporting properly scaled damage values * plugins/screencast: centralize format querying into the RenderBackend (kde#460563) * backends/drm: fix format sorting * Fix blur/contrast for X11 window if Xwayland is not scaled. (kde#461021) * [effects/windowview] Don't allow setting non-global shortcuts * [effects/overview] Don't allow setting non-global shortcuts * backends/drm: fix common mode generation * nightcolormanager: Emit timing change only when they have actually changed * x11: Don't force QT_NO_GLIB=1 (kde#460980) * x11: Don't force QT_QPA_PLATFORM=xcb * x11window: revert more from 3a28c02f (kde#461032) - Drop patches, now upstream: * 0001-x11window-revert-more-from-3a28c02f.patch ==== kwrited5 ==== Version update (5.26.2 -> 5.26.3) - Update to 5.26.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.3 - No code changes since 5.26.2 ==== layer-shell-qt ==== Version update (5.26.2 -> 5.26.3) - Update to 5.26.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.3 - No code changes since 5.26.2 ==== libkdecoration2 ==== Version update (5.26.2 -> 5.26.3) Subpackages: libkdecorations2-5 libkdecorations2-5-lang libkdecorations2private9 - Update to 5.26.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.3 - No code changes since 5.26.2 ==== libkscreen2 ==== Version update (5.26.2 -> 5.26.3) Subpackages: libKF5Screen7 libKF5Screen7-lang libkscreen2-plugin - Update to 5.26.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.3 - No code changes since 5.26.2 ==== libksysguard5 ==== Version update (5.26.2 -> 5.26.3) Subpackages: ksysguardsystemstats-data libKSysGuardSystemStats1 libksysguard5-imports libksysguard5-lang libksysguard5-plugins - Update to 5.26.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.3 - No code changes since 5.26.2 ==== libspectre ==== Version update (0.2.10 -> 0.2.11) - update to 0.2.11: * Avoid possible crash when loading a document ==== libstorage-ng ==== Version update (4.5.48 -> 4.5.50) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#903 - fixed typo - 4.5.50 - merge gh#openSUSE/libstorage-ng#902 - ignore chunk size for RAID1 (bsc#1205172) - 4.5.49 ==== libyui ==== Version update (4.4.4 -> 4.4.6) - Prevent antisocial focus grabbing in pkg list (bsc#1204429) - 4.4.6 - Fixed build failure with gcc 13 (gh#libyui/libyui/#80) - Killed YCP zombies in log output and comments - 4.4.5 ==== libyui-ncurses ==== Version update (4.4.4 -> 4.4.6) - Prevent antisocial focus grabbing in pkg list (bsc#1204429) - 4.4.6 - Fixed build failure with gcc 13 (gh#libyui/libyui/#80) - Killed YCP zombies in log output and comments - 4.4.5 ==== libyui-ncurses-pkg ==== Version update (4.4.4 -> 4.4.6) - Prevent antisocial focus grabbing in pkg list (bsc#1204429) - 4.4.6 - Fixed build failure with gcc 13 (gh#libyui/libyui/#80) - Killed YCP zombies in log output and comments - 4.4.5 ==== libyui-qt ==== Version update (4.4.4 -> 4.4.6) - Prevent antisocial focus grabbing in pkg list (bsc#1204429) - 4.4.6 - Fixed build failure with gcc 13 (gh#libyui/libyui/#80) - Killed YCP zombies in log output and comments - 4.4.5 ==== libyui-qt-graph ==== Version update (4.4.4 -> 4.4.6) - Prevent antisocial focus grabbing in pkg list (bsc#1204429) - 4.4.6 - Fixed build failure with gcc 13 (gh#libyui/libyui/#80) - Killed YCP zombies in log output and comments - 4.4.5 ==== libyui-qt-pkg ==== Version update (4.4.4 -> 4.4.6) - Prevent antisocial focus grabbing in pkg list (bsc#1204429) - 4.4.6 - Fixed build failure with gcc 13 (gh#libyui/libyui/#80) - Killed YCP zombies in log output and comments - 4.4.5 ==== mdadm ==== Version update (4.1 -> 4.2) - Update mdadm package to latest mdadm since mdadm-4.2 (jsc#PED-1009) * Only patches directly change runtime programs included, - Unify error message. 0001-Unify-error-message.patch - mdadm: Fix double free 0002-mdadm-Fix-double-free.patch - Grow_reshape: Add r0 grow size error message and update 0003-Grow_reshape-Add-r0-grow-size-error-message-and-upda.patch - udev: adapt rules to systemd v247 0004-udev-adapt-rules-to-systemd-v247.patch - Replace error prone signal() with sigaction() 0005-Replace-error-prone-signal-with-sigaction.patch - mdadm: Respect config file location in man 0006-mdadm-Respect-config-file-location-in-man.patch - mdadm: Update ReadMe 0007-mdadm-Update-ReadMe.patch - mdadm: Update config man regarding default files and 0008-mdadm-Update-config-man-regarding-default-files-and-.patch - mdadm: Update config manual 0009-mdadm-Update-config-manual.patch - Create, Build: use default_layout() 0010-Create-Build-use-default_layout.patch - mdadm: add map_num_s() 0011-mdadm-add-map_num_s.patch - mdmon: Stop parsing duplicate options 0012-mdmon-Stop-parsing-duplicate-options.patch - Grow: block -n on external volumes. 0013-Grow-block-n-on-external-volumes.patch - Incremental: Fix possible memory and resource leaks 0014-Incremental-Fix-possible-memory-and-resource-leaks.patch - Mdmonitor: Fix segfault 0015-Mdmonitor-Fix-segfault.patch - Mdmonitor: Improve logging method 0016-Mdmonitor-Improve-logging-method.patch - Fix possible NULL ptr dereferences and memory leaks 0017-Fix-possible-NULL-ptr-dereferences-and-memory-leaks.patch - imsm: Remove possibility for get_imsm_dev to return 0018-imsm-Remove-possibility-for-get_imsm_dev-to-return-N.patch - Revert "mdadm: fix coredump of mdadm --monitor -r" 0019-Revert-mdadm-fix-coredump-of-mdadm-monitor-r.patch - util: replace ioctl use with function 0020-util-replace-ioctl-use-with-function.patch - mdadm/super1: restore commit 45a87c2f31335 to fix 0021-mdadm-super1-restore-commit-45a87c2f31335-to-fix-clu.patch - imsm: introduce get_disk_slot_in_dev() 0022-imsm-introduce-get_disk_slot_in_dev.patch - imsm: use same slot across container 0023-imsm-use-same-slot-across-container.patch - imsm: block changing slots during creation 0024-imsm-block-changing-slots-during-creation.patch - mdadm: block update=ppl for non raid456 levels 0025-mdadm-block-update-ppl-for-non-raid456-levels.patch - mdadm: Fix array size mismatch after grow 0026-mdadm-Fix-array-size-mismatch-after-grow.patch - mdadm: Remove dead code in imsm_fix_size_mismatch 0027-mdadm-Remove-dead-code-in-imsm_fix_size_mismatch.patch - Monitor: use devname as char array instead of pointer 0028-Monitor-use-devname-as-char-array-instead-of-pointer.patch - Monitor: use snprintf to fill device name 0029-Monitor-use-snprintf-to-fill-device-name.patch - Makefile: Don't build static build with everything and 0030-Makefile-Don-t-build-static-build-with-everything-an.patch - DDF: Cleanup validate_geometry_ddf_container() 0031-DDF-Cleanup-validate_geometry_ddf_container.patch - DDF: Fix NULL pointer dereference in 0032-DDF-Fix-NULL-pointer-dereference-in-validate_geometr.patch - mdadm/Grow: Fix use after close bug by closing after 0033-mdadm-Grow-Fix-use-after-close-bug-by-closing-after-.patch - monitor: Avoid segfault when calling NULL 0034-monitor-Avoid-segfault-when-calling-NULL-get_bad_blo.patch - mdadm: Fix mdadm -r remove option regression 0035-mdadm-Fix-mdadm-r-remove-option-regression.patch - mdadm: Fix optional --write-behind parameter 0036-mdadm-Fix-optional-write-behind-parameter.patch - mdadm: Replace obsolete usleep with nanosleep 0037-mdadm-Replace-obsolete-usleep-with-nanosleep.patch - mdadm: remove symlink option 0038-mdadm-remove-symlink-option.patch - mdadm: move data_offset to struct shape 0039-mdadm-move-data_offset-to-struct-shape.patch - mdadm: Don't open md device for CREATE and ASSEMBLE 0040-mdadm-Don-t-open-md-device-for-CREATE-and-ASSEMBLE.patch - Grow: Split Grow_reshape into helper function 0041-Grow-Split-Grow_reshape-into-helper-function.patch - Assemble: check if device is container before 0042-Assemble-check-if-device-is-container-before-schedul.patch - super1: report truncated device 0043-super1-report-truncated-device.patch - mdadm: Correct typos, punctuation and grammar in man 0044-mdadm-Correct-typos-punctuation-and-grammar-in-man.patch - Manage: Block unsafe member failing 0045-Manage-Block-unsafe-member-failing.patch - Monitor: Fix statelist memory leaks 0046-Monitor-Fix-statelist-memory-leaks.patch - mdadm: added support for Intel Alderlake RST on VMD 0047-mdadm-added-support-for-Intel-Alderlake-RST-on-VMD-p.patch - mdadm: Add Documentation entries to systemd services 0048-mdadm-Add-Documentation-entries-to-systemd-services.patch ... changelog too long, skipping 172 lines ... - 0121-imsm-support-for-third-Sata-controller.patch ==== milou5 ==== Version update (5.26.2 -> 5.26.3) Subpackages: milou5-lang - Update to 5.26.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.3 - No code changes since 5.26.2 ==== oxygen5-sounds ==== Version update (5.26.2 -> 5.26.3.1) - Update to 5.26.3.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.3 - No code changes since 5.26.2 ==== perl-HTTP-Message ==== Version update (6.41 -> 6.44) - updated to 6.44 see /usr/share/doc/packages/perl-HTTP-Message/Changes 6.44 2022-10-26 20:49:00Z - Made the Clone module a hard requirement, so we don't have to provide a fallback function for HTTP::Headers::clone(). We require at least Clone 0.46, as that release now supports Perl back to 5.8.1, just like us. (GH#184) (Neil Bowers) - Import clone from Clone rather than inheriting (GH#189) (Graham Knop) - Made the Compress::Raw::Zlib 2.062 module minimal required version. (GH#190) (Jakub 'q84fh' Skory) 6.43 2022-10-22 14:50:35Z - Remove dependency to IO::Uncompress::Bunzip2. (Michal Josef Spacek) - Remove dependency to IO::Uncompress::Gunzip. (Michal Josef Spacek) 6.42 2022-10-18 13:53:22Z - We now don't consider the Content-Location header when asked for the base URI. RFC 7231 says we shouldn't. (GH#51) (Neil Bowers) - Increased the (max) buffer size for read() when processing form data, from 2048 to 8192. This was suggested in RT#105184, as it improved performance for them. (GH#59) (Neil Bowers) ==== plasma-browser-integration ==== Version update (5.26.2 -> 5.26.3) Subpackages: plasma-browser-integration-lang - Update to 5.26.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.3 - No code changes since 5.26.2 ==== plasma-nm5 ==== Version update (5.26.2 -> 5.26.3) Subpackages: plasma-nm5-lang plasma-nm5-openconnect plasma-nm5-openvpn plasma-nm5-pptp plasma-nm5-vpnc - Update to 5.26.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.3 - Changes since 5.26.2: * L2TP: Fix detection of Libreswan 4.9 and later ==== plasma5-addons ==== Version update (5.26.2 -> 5.26.3) Subpackages: plasma5-addons-lang - Update to 5.26.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.3 - No code changes since 5.26.2 ==== plasma5-desktop ==== Version update (5.26.2 -> 5.26.3) Subpackages: plasma5-desktop-emojier plasma5-desktop-lang - Update to 5.26.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.3 - Changes since 5.26.2: * tablet: Make sure the "lock aspect ratio" stays true * tablet: Fix the reset button for the outputs view (kde#458608) * [kcms/tablet] Delete device when removed * [kcms/tablet] Fix i18n * Fix panel configuration to properly limit maximum panel size to half height ==== plasma5-disks ==== Version update (5.26.2 -> 5.26.3) Subpackages: plasma5-disks-lang - Update to 5.26.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.3 - No code changes since 5.26.2 ==== plasma5-integration ==== Version update (5.26.2 -> 5.26.3) Subpackages: plasma5-integration-plugin plasma5-integration-plugin-lang - Update to 5.26.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.3 - No code changes since 5.26.2 ==== plasma5-openSUSE ==== Subpackages: plasma5-defaults-openSUSE plasma5-theme-openSUSE plasma5-workspace-branding-openSUSE sddm-theme-openSUSE - Update to 5.26.3 ==== plasma5-pa ==== Version update (5.26.2 -> 5.26.3) Subpackages: plasma5-pa-lang - Update to 5.26.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.3 - No code changes since 5.26.2 ==== plasma5-systemmonitor ==== Version update (5.26.2 -> 5.26.3) Subpackages: plasma5-systemmonitor-lang - Update to 5.26.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.3 - No code changes since 5.26.2 ==== plasma5-thunderbolt ==== Version update (5.26.2 -> 5.26.3) Subpackages: plasma5-thunderbolt-lang - Update to 5.26.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.3 - No code changes since 5.26.2 ==== plasma5-workspace ==== Version update (5.26.2 -> 5.26.3) Subpackages: gmenudbusmenuproxy plasma5-session plasma5-session-wayland plasma5-workspace-lang plasma5-workspace-libs xembedsniproxy - Update to 5.26.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.3 - Changes since 5.26.2: * Notifications: Use String "0" for null percent * Revert apples/kicker: fix timer in triangular mouse filter (kde#461395) * runners/services: Do not parse exec of flatpaks (kde#461241) * kcms/regionandlanguage: convert ASCII unicode symbol to QChar (kde#460704) * startplasma-wayland: Don't set GDK_SCALE and GDK_DPI_SCALE (kde#443215) * runners/services: Do not match exec values of PWAs (kde#460796) * runners/servicerunner: increase match type when query exactly matches service name (kde#459516) * runners/recentdocuments: more fine-grained relevance and type assignment * runners/baloo: increase match type when query exactly matches file name * runners/locations: decrease match type when not a known existing file * wallpapers/image: always try to remove a path in `ImageBackend::removeSlidePath` (kde#461003) ==== polkit ==== Subpackages: libpolkit-agent-1-0 libpolkit-gobject-1-0 pkexec typelib-1_0-Polkit-1_0 - read actions also from /etc/polkit-1/actions (jsc#PED-1405) added polkit-actions-in-etc.patch ==== polkit-kde-agent-5 ==== Version update (5.26.2 -> 5.26.3) Subpackages: polkit-kde-agent-5-lang - Update to 5.26.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.3 - No code changes since 5.26.2 ==== powerdevil5 ==== Version update (5.26.2 -> 5.26.3) Subpackages: powerdevil5-lang - Update to 5.26.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.3 - Changes since 5.26.2: * powerprofileconfig: Use proper signal for detecting user interaction ==== python-Jinja2 ==== Version update (3.0.3 -> 3.1.2) - update to 3.1.2: * Add parameters to ``Environment.overlay`` to match ``__init__``. * Handle race condition in ``FileSystemBytecodeCache``. :issue:`1654` - specfile: * update copyright year * require python-base >= 3.7 - update to version 3.1.1: * The template filename on Windows uses the primary path separator. :issue:`1637` - changes from version 3.1.0: * Drop support for Python 3.6. :pr:`1534` * Remove previously deprecated code. :pr:`1544` + "WithExtension" and "AutoEscapeExtension" are built-in now. + "contextfilter" and "contextfunction" are replaced by "pass_context". "evalcontextfilter" and "evalcontextfunction" are replaced by "pass_eval_context". "environmentfilter" and "environmentfunction" are replaced by "pass_environment". + "Markup" and "escape" should be imported from MarkupSafe. + Compiled templates from very old Jinja versions may need to be recompiled. + Legacy resolve mode for "Context" subclasses is no longer supported. Override "resolve_or_missing" instead of "resolve". + "unicode_urlencode" is renamed to "url_quote". * Add support for native types in macros. :issue:`1510` * The "{% trans %}" tag can use "pgettext" and "npgettext" by passing a context string as the first token in the tag, like "{% trans "title" %}". :issue:`1430` * Update valid identifier characters from Python 3.6 to 3.7. :pr:`1571` * Filters and tests decorated with "@async_variant" are pickleable. :pr:`1612` * Add "items" filter. :issue:`1561` * Subscriptions ("[0]", etc.) can be used after filters, tests, and calls when the environment is in async mode. :issue:`1573` * The "groupby" filter is case-insensitive by default, matching other comparison filters. Added the "case_sensitive" parameter to control this. :issue:`1463` * Windows drive-relative path segments in template names will not result in "FileSystemLoader" and "PackageLoader" loading from drive-relative paths. :pr:`1621` ==== python-gssapi ==== Version update (1.8.1 -> 1.8.2) - Update to version to 1.8.2 * Added Python 3.11 wheel - #303 * Fix up doc link in README * Use just major version * Bump GHA actions to latest version ==== python-pexpect ==== - skip extra tests for qemu based builds ==== python-psutil ==== Version update (5.9.3 -> 5.9.4) - update to version 5.9.4: * Enhancements - 2102: use Limited API when building wheels with CPython 3.6+ on Linux, macOS and Windows. This allows to use pre-built wheels in all future versions of cPython 3. (patch by Matthieu Darbois) * Bug fixes - 2077, [Windows]: Use system-level values for virtual_memory(). (patch by Daniel Widdis) - 2156, [Linux]: compilation may fail on very old gcc compilers due to missing SPEED_UNKNOWN definition. (patch by Amir Rossert) - 2010, [macOS]: on MacOS, arm64 IFM_1000_TX and IFM_1000_T are the same value, causing a build failure. (patch by Lawrence D'Anna) ==== qemu ==== Subpackages: qemu-accel-tcg-x86 qemu-audio-spice qemu-block-curl qemu-block-nfs qemu-block-rbd qemu-chardev-spice qemu-guest-agent qemu-hw-display-qxl qemu-hw-display-virtio-gpu qemu-hw-display-virtio-gpu-pci qemu-hw-display-virtio-vga qemu-hw-usb-host qemu-hw-usb-redirect qemu-hw-usb-smartcard qemu-ipxe qemu-ksm qemu-kvm qemu-lang qemu-microvm qemu-seabios qemu-sgabios qemu-tools qemu-ui-curses qemu-ui-gtk qemu-ui-opengl qemu-ui-spice-app qemu-ui-spice-core qemu-vgabios qemu-x86 - Enable KVM support on riscv64 ==== rebootmgr ==== Version update (1.3.1 -> 2.0) - Update to version 2.0 - Remove outdated etcd code - Fix issue#10: Reboots happen at the first moment of the maintenance window ==== systemd ==== Version update (251.7 -> 251.8) Subpackages: libsystemd0 libsystemd0-32bit libudev1 libudev1-32bit systemd-32bit systemd-container systemd-lang udev - Import commit 9cdd78585069b133bebcd479f3a204057ad25d76 (merge of v251.8) For a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/c212388f7de8d22a3f7c22b19553548… ==== systemsettings5 ==== Version update (5.26.2 -> 5.26.3) Subpackages: systemsettings5-lang - Update to 5.26.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.3 - Changes since 5.26.2: * Fix kcms inside a category always being indented ==== vmaf ==== - Drop recommends on vmaf-data, the package is gone since vmaf 2.x. Build model data into the library, since `make install` does not do anything by default. [boo#1189023] ==== xdg-desktop-portal-kde ==== Version update (5.26.2 -> 5.26.3) Subpackages: xdg-desktop-portal-kde-lang - Update to 5.26.3 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.3 - No code changes since 5.26.2

1 0

openSUSE Release Engineering meeting 09.11.2022
by Lubos Kocman 11 Nov '22

11 Nov '22

All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting Meeting is hosted here https://meet.opensuse.org/ReleaseEngineeringMeeting ## Attendees Sarah, Richard, Dominique, lubos, Axel, guillaueg, max, ddemaio ## Leap Mirror traffic complains regarding CR DVD https://progress.opensuse.org/issues/119935 Bernhard suggests to enable/disable builds once-per week via a cronjob. Any better suggestion? Dimstar: seems to be open towards job enabling / disabling all appliance builds in OBS. Always Up2date Installation DVD is now part of https://get.opensuse.org/leap Big thank sot Max and Fabian Leap Micro 5.3 - prepping for RC Marketing annoucement for RC is today 12:00 UTC ## openSUSE Tumbleweed openSUSE:Factory build fail stats: 15 failed 1 unresolvable (last week: 37 / 0) https://tinyurl.com/ysy4nnnz * TW queue kept small: currently 190 requests in the Queue... 25% of it is KDE submission from today * sudo config change caused a lot of noise; the maintainer tried to align config to 'how other distros do it' (ask for user password, not targetpw), but the config blew up completely (wheel not authorized and none of our users are wheel members, wheel does not even exist on default installs); back to the drawing board for that feature * Kernel 6.0.7 published in snapshot 1106 * Staging:G YaST is broken with new rubygem-rspec-* - https://bugzilla.opensuse.org/show_bug.cgi?id=1204871 * Staging:N: experiments with openssl-3 as default have been resumed * Staging:L lists errors for icu 72.1 (breaks nodejs1[89]), python- Flask (breaks python-httpcore), python-docutils (breaks py-sphinx_rtd_theme due to strict deps) * most cycles have been fixed (or reduced); mingw is still WIP mingw32-binutils:mingw32-cross-binutils, mingw32-cross-pkgconf mingw64-binutils:mingw64-cross-binutils, mingw64-cross-pkgconf lkocman: Confirmed with D-Installer team that the plan is still to get it to Factory aside from ALP. Parallely to the current installer. This would help collecting additional feedback and smoothen way for future migration to the next-gen installer. ## Richard (MicroOS) transactional-update-notifier being packaged Bugs under investigation/being fixed Bug 1205108 New: Redundant program for system monitoring on Gnome snapshotting /home is prevented by SELinux - https://bugzilla.opensuse.org/show_bug.cgi?id=1205151 Single-password-entry full disk encryption looks increasingly viable with the upcoming Grub submission, may become the default in MicroOS Desktop-GNOME - other investigations are ongoing for a fully vertified boot/OS variant of MicroOS, which wouldn't use encryption, but would then encrypt user/system data (eg /home, /var, etc) osinfo-db still doesn't recognise MicroOS as a seperate distribution - debates with upstream ongoing KDE MicroOS Desktop is still utterly broken, impossible to install for months now. Is likely to be dropped if contributions dont come soon. None of the above progress applies to the KDE desktop. https://bugzilla.suse.com/show_bug.cgi?id=1202852 Related jsc#PED-2447 ## Max 15.4 CR * TODO ** Need to adjust openSUSE:Leap:15.4:Images config in openqa-trigger- from-obs for adding the 15.4 CR DVD ** openqa-jobgroups also need to be adjusted in 15.4 Images jobgroup This topic will be raised on tomorrow's meeting with QA + openSUSE maintenance team tomorrow Micro 5.3 * Addressing the issue with jeos-firstboot, fixed an error in config.sh, the last build seems all set per Lubos. The last issue was https://bugzilla.suse.com/show_bug.cgi?id=1203934 15.5 * Kernel is broken in the last build - Build320.2, that resulting the medium fails to boot on some specfic environment, like dual-boot or usbboot, hopefully the last kernel update would fix it, we will know in the next build Build status: 34 build fails, 8 unresolvables(last week 45 build fails, 9 unresolvables) ## Guillaume - Arm Tumbleweed: * Rolling again (after a week off) * RPi 2/3: DRM traces with kernel 6.0 - https://bugzilla.suse.com/show_bug.cgi?id=1204315 * appx WSL image now builds in Factory:ARM (tested on a Windows-on- Arm machine). This should be part of the (x86) WSL images push. => Lubos will ask Scott B. Leap: * armv7: Enlightenment fix has been merged * appx WSL images: WIP - Image from Leap:15.5:WSL project is broken - Image for 15.4 from devel project works ALP: * SUSE:ALP: - New images should be added back to openQA, once SUSE:ALP:ToTest will be updated. D-Installer live image tested but has some bugs on aarch64. lkocman: Big thanks for that Guilluame! ## Sarah - s390 Leap: * openQA tests have been failing because log files were not uploaded. okurz has created a PR for it at the end of last week: https://progress.opensuse.org/issues/119713 Tumbleweed: * DimStar: Waiting for a fix in gnutls, which currently blocks entire snapshot (https://bugzilla.opensuse.org/show_bug.cgi?id=1204937) -> submission staged: https://build.opensuse.org/request/show/1034574 * git tests have broken the build for git on s390x, but there is no error output. It is working on Fedora (upstream hint): https://bugzilla.opensuse.org/show_bug.cgi?id=1204762 / https://lore.kernel.org/git/CAN0heSoc+jKxseyyR-=8+ATc8rdY5UyFWZPepaQsGn9m+H… -> Workaround of disabling tests is giving a succeeded result ## Doug * Publishing manpages article * Prepping Leap Micro 5.3 * Bad beer news * Talking with potential oSC23 keynote speaker (Z-Bau reserved for May 26 - 28) Lubos: openSUSE branded table cloth to be ordered. We've agreed on 4 pieces with various designs. I'd like to also investigate an option with "project-specific cloth stickers" for a generic white / black table cloth that could be provided by organizer. Prague table-cloth dimensions are 200x250 Doug's table-cloth has 200x160 ## Dirk Not available * still feeding RISCV related fixes into Factory/ALP, nothing important to share * python-kiwi 9.24.49 includes profile validation fix for riscv64 arch name, but will also change how containers are built, on its way to Factory ## Wolfgang (Package Hub), Scott Bahling Package Hub for SLE-15-SP5 product definition added and SCC is currently picking it up so it will be ready for testing with the beta of SLE-15-SP5 ## Maintenance team (Marcus or Maurizio (m4u)) Configuration setup problem for Maintenance of Leap 15.4 maintenance updates / openQA Marcus regarding Leap 15.4 Image respin - package set will change, we do need to refresh the packagelist Lubos to talk to Jan Stehlik, we can't put all on Marcuses shoulder. https://etherpad.opensuse.org/p/ReleaseEngineering-20221110-maintenance-dis… Need to setup Leap Micro 5.3 (don't have time this week) * Pending Leap Micro 5.3 maint-setup ## Adrian - OBS No updates Axel: there were some cleaning activities in OBS, to determine inactive users and related unmaintained projects. Is there anything going on? Adrian: the script checks a project or a package that has no changes for more than one year. It will create a delete request, that can be deleted. If there is no reaction there will be auto-acceptance in few days. Package can be always manually submitted back if the DR was missed. Users will not be deactivated. Adrian: User cleanup would have to be discussed with IDP team (SUSE IT). OBS is just a consumer. Lubos will create a request to suggest this action in Service desk. Adrian: if the user never logged in into OBS, that's probably a cleanup that could stay in touch. ## Open Floor suse-release provides, lubos would like to suggest adoption of it on SUSE side via Jira, otherwise this can lead to some unexpected behavior.

1 0

Re: Update from 20220908 to 20221101 Breaks SMB
by Christian Boltz 10 Nov '22

10 Nov '22

Hello, Noel, your mails didn't reach the ML, but since you had factory in the "To", I'll answer in public. Am Mittwoch, 9. November 2022, 15:24:45 CET schrieb Noel Power: > On 09/11/2022 09:41, Noel Power wrote: > > On 08/11/2022 21:13, Christian Boltz wrote: [...] > >> That said - I'm surprised why smbd wants to write the pid file of > >> samba-bgqd. Carlos, thanks for sending the logs to me. They contained only a few AppArmor-related lines, two denials (on Nov 3 8:48 CET) and a profile reload two days later (on Nov 5 18:58 CET): type=AVC msg=audit(1667461690.822:173): apparmor="DENIED" operation="open" profile="smbd" name="/proc/2524/fd/" pid=2524 comm="samba-bgqd" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 type=AVC msg=audit(1667461690.826:174): apparmor="DENIED" operation="mknod" profile="smbd" name="/run/samba/samba-bgqd.pid" pid=2524 comm="samba-bgqd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 type=AVC msg=audit(1667671097.142:9808): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="smbd" pid=19418 comm="apparmor_parser" The DENIED lines match what aa-logprof asked you. However, the strange thing is that the log lines say profile="smbd" and comm="samba-bgqd", which means the program samba-bgqd runs under the smbd profile. That's surprising because the smbd has a Px rule for it, so it should run under its own samba-bgqd profile. [I first also wondered because Leap 15.3 comes with AppArmor 2.13.6 which doesn't have any rules for samba-bgqd in the upstream profile - but that part became clear when I noticed that the samba-bgqd profile was backported and released as update for 15.3.] That leaves us with the question why samba-bgqd did run under the smbd profile, while (according to the Px rule) it should run under its own profile. Carlos, if you remove the two added rules from the smbd profile again and reload the profiles with systemctl reload apparmor - do you get similar DENIED events again? > >> @Noel: does this sound correct to you? > >> (I know that smbd starts samba-bgqd, but I'd expect - without > >> looking at any source code - that samba-bgqd writes its pid file.) > > > > offhand this seems strange to me, I know it needs read access to > > this > > file... I quickly looked at the code and don't see anything, I'll > > try > > to dig a bit deeper. > > hmm, I tried to reproduce this on latest tumbleweed (with > samba-4.17.2) but couldn't, are there any more details (bug ?) in > fact on tw I don't get any hits in audit log for samba-bgqd and it > picks up my local printer. If I could reproduce it then between > strace and log entries I'd have a better chance to try and find where > in the code this happens (can't see anything suspicious in the > source) See above - the log lines indicate that something strange is going on. Also note that it happened on 15.3, which has a few ;-) differences to Tumbleweed. Regards, Christian Boltz -- Hochleistungswebspace Das sind public-html-Verzeichnisse, die jeden Morgen zwanzig Liegestütze machen, und mit Testosteron vollgepumpt sind. [Markus Schaber]

1 0

New Tumbleweed snapshot 20221109 released!
by Dominique Leuenberger 10 Nov '22

10 Nov '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: Mesa (22.2.2 -> 22.2.3) Mesa-drivers (22.2.2 -> 22.2.3) elfutils (0.187 -> 0.188) elfutils-debuginfod (0.187 -> 0.188) grub2 highway libbpf libzypp (17.31.4 -> 17.31.5) mobile-broadband-provider-info (20220725 -> 20221107) ncurses (6.3.20221001 -> 6.3.20221105) perl-HTML-Parser (3.79 -> 3.80) perl-Image-ExifTool (12.45 -> 12.50) perl-URI (5.16 -> 5.17) python-Babel (2.10.3 -> 2.11.0) python-M2Crypto python-cssselect (1.1.0 -> 1.2.0) shadow vlc webkit2gtk3 (2.38.1 -> 2.38.2) webkit2gtk3-soup2 (2.38.1 -> 2.38.2) zypper (1.14.57 -> 1.14.58) === Details === ==== Mesa ==== Version update (22.2.2 -> 22.2.3) Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - third bugfix release * some regressions in CI worked out * a bit of everything, and nothing too crazy - supersedes u_0001-gallivm-Fix-LLVM-optimization-with-the-new-pass-mana.patch - supersedes u_nouveau-corrupted-colors-boo1203949.patch - get rid of Mesa-libVulkan-devel(-32bit) package, which is no longer needed at all by providing/obsoleting it by libvulkan_intel ==== Mesa-drivers ==== Version update (22.2.2 -> 22.2.3) Subpackages: Mesa-dri Mesa-gallium Mesa-libva libxatracker2 - third bugfix release * some regressions in CI worked out * a bit of everything, and nothing too crazy - supersedes u_0001-gallivm-Fix-LLVM-optimization-with-the-new-pass-mana.patch - supersedes u_nouveau-corrupted-colors-boo1203949.patch - get rid of Mesa-libVulkan-devel(-32bit) package, which is no longer needed at all by providing/obsoleting it by libvulkan_intel ==== elfutils ==== Version update (0.187 -> 0.188) Subpackages: elfutils-lang libasm1 libdw1 libelf1 - Update to version 0.188: * readelf: Add -D, --use-dynamic option. * debuginfod-client: Add $DEBUGINFOD_HEADERS_FILE setting to supply outgoing debuginfod_find_section. * debuginfod: Add --disable-source-scan option. * libdwfl: Add new function dwfl_get_debuginfod_client. Add new function dwfl_frame_reg. Add new function dwfl_report_offline_memory. - Remove upstreamed patches: * 0001-libelf-Sync-elf.h-from-glibc.patch * 0002-backends-Handle-new-RISC-V-specific-definitions.patch * 0003-elflint-Allow-zero-p_memsz-for-PT_RISCV_ATTRIBUTES.patch * 0004-readelf-Handle-SHT_RISCV_ATTRIBUTES-like-SHT_GNU_ATT.patch * PR29474-debuginfod.patch * config-Move-the-2-dev-null-inside-the-sh-c-quotes-fo.patch * support-nullglob-in-profile.-.in-files.patch ==== elfutils-debuginfod ==== Version update (0.187 -> 0.188) Subpackages: debuginfod-profile libdebuginfod1 - Update to version 0.188: * readelf: Add -D, --use-dynamic option. * debuginfod-client: Add $DEBUGINFOD_HEADERS_FILE setting to supply outgoing debuginfod_find_section. * debuginfod: Add --disable-source-scan option. * libdwfl: Add new function dwfl_get_debuginfod_client. Add new function dwfl_frame_reg. Add new function dwfl_report_offline_memory. - Remove upstreamed patches: * 0001-libelf-Sync-elf.h-from-glibc.patch * 0002-backends-Handle-new-RISC-V-specific-definitions.patch * 0003-elflint-Allow-zero-p_memsz-for-PT_RISCV_ATTRIBUTES.patch * 0004-readelf-Handle-SHT_RISCV_ATTRIBUTES-like-SHT_GNU_ATT.patch * PR29474-debuginfod.patch * config-Move-the-2-dev-null-inside-the-sh-c-quotes-fo.patch * support-nullglob-in-profile.-.in-files.patch ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - NVMeoFC support on grub (jsc#PED-996) * 0001-ieee1275-add-support-for-NVMeoFC.patch * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch * 0004-ofpath-controller-name-update.patch - TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265) * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch - Measure the kernel on POWER10 and extend TPM PCRs (PED-1990) * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch - Fix efi pcr snapshot related funtion is defined but not used on powerpc platform. * safe_tpm_pcr_snapshot.patch - Include loopback into signed grub2 image (jsc#PED-2150) - Fix firmware oops after disk decrypting failure (bsc#1204037) * 0009-Add-crypttab_entry-to-obviate-the-need-to-input-pass.patch - Add patch to fix kernel relocation error in low memory * 0001-linux-fix-efi_relocate_kernel-failure.patch - Add safety measure to pcr snapshot by checking platform and tpm status * safe_tpm_pcr_snapshot.patch - Fix installation failure due to unavailable nvram device on ppc64le (bsc#1201361) * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch - Add patches to dynamically allocate additional memory regions for EFI systems (bsc#1202438) * 0001-mm-Allow-dynamically-requesting-additional-memory-re.patch * 0002-kern-efi-mm-Always-request-a-fixed-number-of-pages-o.patch * 0003-kern-efi-mm-Extract-function-to-add-memory-regions.patch * 0004-kern-efi-mm-Pass-up-errors-from-add_memory_regions.patch * 0005-kern-efi-mm-Implement-runtime-addition-of-pages.patch - Enlarge the default heap size and defer the disk cache invalidation (bsc#1202438) * 0001-kern-efi-mm-Enlarge-the-default-heap-size.patch * 0002-mm-Defer-the-disk-cache-invalidation.patch - Add patches for ALP FDE support * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch * 0004-normal-menu-Don-t-show-Booting-s-msg-when-auto-booti.patch * 0005-EFI-suppress-the-Welcome-to-GRUB-message-in-EFI-buil.patch * 0006-EFI-console-Do-not-set-colorstate-until-the-first-te.patch * 0007-EFI-console-Do-not-set-cursor-until-the-first-text-o.patch * 0008-linuxefi-Use-common-grub_initrd_load.patch * 0009-Add-crypttab_entry-to-obviate-the-need-to-input-pass.patch * 0010-templates-import-etc-crypttab-to-grub.cfg.patch * grub-read-pcr.patch * efi-set-variable-with-attrs.patch * tpm-record-pcrs.patch * tpm-protector-dont-measure-sealed-key.patch * tpm-protector-export-secret-key.patch * grub-install-record-pcrs.patch * grub-unseal-debug.patch - Fix out of memory error cannot be prevented via disabling tpm (bsc#1202438) * 0001-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch - Fix tpm error stop tumbleweed from booting (bsc#1202374) * 0001-tpm-Pass-unknown-error-as-non-fatal-but-debug-print-.patch - Patch Removed * 0001-tpm-Log-EFI_VOLUME_FULL-and-continue.patch - Add tpm, tpm2, luks2 and gcry_sha512 to default grub.efi (bsc#1197625) - Make grub-tpm.efi a symlink to grub.efi * grub2.spec - Log error when tpm event log is full and continue * 0001-tpm-Log-EFI_VOLUME_FULL-and-continue.patch - Patch superseded * 0001-tpm-Pass-unknown-error-as-non-fatal-but-debug-print-.patch - Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch * 0010-protectors-Add-key-protectors-framework.patch * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch * 0012-protectors-Add-TPM2-Key-Protector.patch * 0013-cryptodisk-Support-key-protectors.patch * 0014-util-grub-protect-Add-new-tool.patch - Fix no disk unlocking happen (bsc#1196668) * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch - Fix build error * fix-tpm2-build.patch ==== highway ==== - Have armv7 build succeed again. ==== libbpf ==== - Fix out-of-bound heap write (boo#1194248 boo#1194249 CVE-2021-45940 CVE-2021-45941) + libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch - Fix use-after-free in btf_dump_name_dups (boo#1204391 CVE-2022-3534) + libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch - Fix memory leak in parse_usdt_arg() (boo#1204393 CVE-2022-3533) + libbpf-Fix-memory-leak-in-parse_usdt_arg.patch - Fix null pointer dereference in find_prog_by_sec_insn() (boo#1204502 CVE-2022-3606) + libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch ==== libzypp ==== Version update (17.31.4 -> 17.31.5) - Create '.no_auto_prune' in the package cache dir to prevent auto cleanup of orphaned repositories (bsc#1204956) - properly reset range requests (bsc#1204548) - version 17.31.5 (22) ==== mobile-broadband-provider-info ==== Version update (20220725 -> 20221107) - Update to version 20221107: * build: - Fix regex in make check - reject and whitespace in XML via unit test - use $(SP_XML_DB) in Makefile.am * de: telekom: give names to plan entries * dtd: allow "mms-internet-hipri" and "mms-internet-hipri-fota" types * fr: include voice mail and balance check for Free Mobile * in: add Airtel Kerala network-id * ui: collapse Orange and T-Mobile into EE, fix APNs * us: add support for Ting USA VVM * us: update AT&T APNs and APN usages ==== ncurses ==== Version update (6.3.20221001 -> 6.3.20221105) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch 20221105 + regenerate configure scripts with autoconf 2.52.20221009 + modify "--with-manpage-format" to support bzip2 and xz compression (prompted by discussion with Sam James). + modify make-tar.sh scripts to make timestamps more predictable. - Add ncurses patch 20221029 + improve curs_slk.3x discussion of extensions and portability (report by Bill Gray). - Add ncurses patch 20221023 + change man_db.renames to template, to handle ncurses*-config script with the extra-suffix configure option. - Add ncurses patch 20221015 + fix another memory-leak in tic. + update install-sh script from autoconf, to fix install problem for Ada95 with Arch; as noted in https://lists.gnu.org/archive/html/automake/2018-09/msg00005.html there are unaddressed issues. + update CF_XOPEN_SOURCE, adding GNU libc suffixes for abi64, abin32, x32 (report by Sven Joachim): + correct ifdef's for _nc_set_read_thread() (patch by Mikhail Korolev, cf: 20220813). - Add ncurses patch 20221008 + correct a switch-statement case in configure script to allow for test builds with ABI=7. + modify misc/gen-pkgconfig.in to allow for the case where the library directory does not yet exist, since this is processed before doing an install (report by Michal Liszcz). ==== perl-HTML-Parser ==== Version update (3.79 -> 3.80) - updated to 3.80 see /usr/share/doc/packages/perl-HTML-Parser/Changes 3.80 2022-11-01 * Fix compatibility with ancient perl by avoiding index in test (GH#33) (Graham Knop) ==== perl-Image-ExifTool ==== Version update (12.45 -> 12.50) Subpackages: exiftool perl-File-RandomAccess - Update to 12.50: * Added a new XMP-GCreations tag * Added a few new Sony lenses (thanks Jos Roost) * Added new SonyModelID and Olympus CameraType values (thanks LibRaw and Herb) * Added a couple of new XMP tags (thanks Jose Oliver-Didier) * Added a new Nikon Z lens (thanks LibRaw) * Added a new Canon LensType and CanonModelID (thanks Norbert Wasser and LibRaw) * Added some new Pentax lenses (thanks LibRaw) * Added experimental support for timed GPS in TS videos from Jomise T860S-GM dashcam (more samples are needed for this to be finalized) * Decode information written in "skip" atom of 70mai Pro Plus+ MP4 videos * Decode timed accelerometer data from Kenwood dashcam MP4 videos * Decode a few new Nikon Z9 tags (thanks Stefan Grussen) * Decode ColorData for some newer Canon models (thanks LibRaw) * Decode a number of new tags for the Sony ILCE-7RM5 (thanks Jos Roost) * Updated IPTC XMP tags to correspond with new Photo Metadata 2022.1 standard * Extract JPEG previews from FujiFilm HIF images * Changed -if option so multiple -if options are evaluated at the lowest specified -fast level * Changed MIMEType for ICO and CUR files * Enhanced -fast2 so it stops processing QuickTime files at mdat atom * Enhanced -listx output so -f also indicates the ID of the parent structure for Flattened tags * Improved conversion of IPTC date-only and time-only tags to allow formatting with the -d option * Improved Canon and Nikon TimeZone tags to accept a wider variety of input formats when writing * Disabled extraction of Nikon Z9 MenuSettings for firmware 3.0 until they can be properly decoded (thanks Warren Hatch) * Fixed decoding of AF points for some newer Nikon models * Fixed inconsistent year and time zone for Kenwood dashcam timed GPS in MP4 videos ==== perl-URI ==== Version update (5.16 -> 5.17) - updated to 5.17 see /usr/share/doc/packages/perl-URI/Changes 5.17 2022-11-02 17:03:48Z - Updated RFC references in the pod documentation for URI::file (GH#117) (HÃ¥kon Hgland) - Fix SIP URI encoder/decoder (GH#118) (ryankereliuk) ==== python-Babel ==== Version update (2.10.3 -> 2.11.0) - Update to 2.11.0 Upcoming deprecation * This version, Babel 2.11, is the last version of Babel to support Python 3.6. Babel 2.12 will require Python 3.7 or newer. Improvements * Support for hex escapes in JavaScript string literals :gh:`877` - Przemyslaw Wegrzyn * Add support for formatting decimals in compact form :gh:`909` - Jonah Lawrence * Adapt parse_date to handle ISO dates in ASCII format :gh:`842` - Eric L. * Use ast instead of eval for Python string extraction :gh:`915` - Aarni Koskela * This also enables extraction from static f-strings. F-strings with expressions are silently ignored (but won't raise an error as they used to). Infrastructure * Tests: Use regular asserts and pytest.raises() :gh:`875` â Aarni Koskela * Wheels are now built in GitHub Actions :gh:`888` â Aarni Koskela * Small improvements to the CLDR downloader script :gh:`894` â Aarni Koskela * Remove antiquated __nonzero__ methods :gh:`896` - Nikita Sobolev * Remove superfluous __unicode__ declarations :gh:`905` - Lukas Juhrich * Mark package compatible with Python 3.11 :gh:`913` - Aarni Koskela * Quiesce pytest warnings :gh:`916` - Aarni Koskela Bugfixes * Use email.Message for pofile header parsing instead of the deprecated cgi.parse_header function. :gh:`876` â Aarni Koskela * Remove determining time zone via systemsetup on macOS :gh:`914` - Aarni Koskela Documentation * Update Python versions in documentation :gh:`898` - Raphael Nestler * Align BSD-3 license with OSI template :gh:`912` - Lukas Kahwe Smith ==== python-M2Crypto ==== - add openssl-stop-parsing-header.patch (bsc#1205042) - add m2crypto-0.38-ossl3-tests.patch ==== python-cssselect ==== Version update (1.1.0 -> 1.2.0) - Update to 1.2.0 * Drop support for Python 2.7, 3.4-3.6, add support for Python 3.7-3.11. * Add type annotations (PEP 484 and PEP 561). * More features from the CSS Selectors Level 4: * The ``:is()`` pseudo-class. * The ``:where()`` pseudo-class. * The ``:has()`` pseudo-class, with some limitations. * Fix parsing ``:scope`` after a comma. * Add parentheses to fix condition precedence in some cases. * Private API changes related to the removal of the Python 2 support: * Remove ``_unicode`` and ``_unichr`` aliases from ``csselect.parser``. * Remove ``_basestring`` and ``_unicode`` aliases from ``csselect.xpath``. * Deprecate ``csselect.xpath._unicode_safe_getattr()`` and change it to just call ``getattr()``. * Include tests in the PyPI tarball. * Many CI additions and improvements. * Improve the test coverage. ==== shadow ==== Subpackages: libsubid4 login_defs - Add shadow-copytree-usermod-fifo.patch: Fix regression that prevented `usermod -m` to work when their home directory contained at least one fifo See https://github.com/shadow-maint/shadow/pull/565 ==== vlc ==== Subpackages: libvlc5 libvlccore9 vlc-codec-gstreamer vlc-lang vlc-noX vlc-qt vlc-vdpau - Limit to ffmpeg 4: we're also linking opencv3 which does not use ffmpeg 5. ==== webkit2gtk3 ==== Version update (2.38.1 -> 2.38.2) Subpackages: WebKit2GTK-4.1-lang libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles - Update to version 2.38.2 (boo#1205120 boo#1205123 boo#1205124): + Fix scrolling issues in some sites having fixed background. + Fix prolonged buffering during progressive live playback. + Fix the build with accessibility disabled. + Fix several crashes and rendering issues. + Security fixes: CVE-2022-42799, CVE-2022-42823, CVE-2022-42824. ==== webkit2gtk3-soup2 ==== Version update (2.38.1 -> 2.38.2) Subpackages: WebKit2GTK-4.0-lang libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 webkit2gtk-4_0-injected-bundles - Update to version 2.38.2 (boo#1205120 boo#1205123 boo#1205124): + Fix scrolling issues in some sites having fixed background. + Fix prolonged buffering during progressive live playback. + Fix the build with accessibility disabled. + Fix several crashes and rendering issues. + Security fixes: CVE-2022-42799, CVE-2022-42823, CVE-2022-42824. ==== zypper ==== Version update (1.14.57 -> 1.14.58) Subpackages: zypper-log zypper-needs-restarting - Update man page and explain '.no_auto_prune' (bsc#1204956) - Allow to (re)add a service with the same URL (bsc#1203715) - Explain outdatedness of repos (fixes #463) - BuildRequires: libzypp-devel >= 17.31.5 - version 1.14.58

1 0

Something not available in fresh 15.4 install but is there from 43 migrations.
by Larry Len Rainey 09 Nov '22

09 Nov '22

5 6

Re: Something not available in fresh 15.4 install but is there from 43 migrations.
by Carlos E. R. 09 Nov '22

09 Nov '22

On 2022-11-09 18:45, Larry Len Rainey wrote: > I tried that - Jan gave me the correct answer > > VM1:~ # ssh llrb > Password: > Last login: Wed Nov 9 11:39:09 2022 from 192.168.20.241 > Have a lot of fun... > LLRB:~ # rpm -qf /usr/include/X11/font/font.h > error: file /usr/include/X11/font/font.h: No such file or directory > LLRB:~ # exit Then that is not the correct path to the file. You have first to find the file. -- Cheers / Saludos, Carlos E. R. (from 15.3 x86_64 at Telcontar)

1 0

New Tumbleweed snapshot 20221108 released!
by Dominique Leuenberger 09 Nov '22

09 Nov '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: Mesa Mesa-drivers bind (9.18.7 -> 9.18.8) dnsmasq (2.86 -> 2.87) drbd-utils gedit (43.alpha -> 43.1) git (2.38.0 -> 2.38.1) glib-networking gnome-packagekit (3.32.0 -> 43.0) gnome-shell (43.0 -> 43.1) gnome-shell-extensions (43.0 -> 43.1) gtksourceview4 (4.8.3 -> 4.8.4) irqbalance (1.9.1 -> 1.9.2) libmfx libpaper (1.2.2 -> 2.0.3) libsoup (3.2.1 -> 3.2.2) lvm2 lvm2-device-mapper mutter (43.0 -> 43.1) nodejs19 (19.0.0 -> 19.0.1) openexr perl-Clone (0.45 -> 0.46) perl-Mojolicious (9.27 -> 9.28) python-argparse-manpage (3 -> 4) python-filetype (1.0.10 -> 1.2.0) texlive texlive-specs-n (2022.195.2.005svn61719 -> 2022.196.2.005svn61719) virt-manager vym (2.8.41 -> 2.8.43) === Details === ==== Mesa ==== Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - Release 22.2.2 covers bugfixes for bsc#1197045,bsc#1197046,bsc#1200965,bsc#1202850 ==== Mesa-drivers ==== Subpackages: Mesa-dri Mesa-gallium Mesa-libva libxatracker2 - Release 22.2.2 covers bugfixes for bsc#1197045,bsc#1197046,bsc#1200965,bsc#1202850 ==== bind ==== Version update (9.18.7 -> 9.18.8) Subpackages: bind-doc bind-utils - Update to bind release 9.18.8 New Features: * Support for parsing and validating the dohpath service parameter in SVCB records was added. * named now logs the supported cryptographic algorithms during startup and in the output of named -V. * The recursion not available and query (cache) '...' denied log messages were extended to include the name of the ACL that caused a given query to be denied. Bug Fixes: * An assertion failure was fixed in named that was caused by aborting the statistics channel connection while sending statistics data to the client. * Changing just the TSIG key names for primaries in catalog zonesâ member zones was not effective. This has been fixed. Known Issues: * Upgrading from BIND 9.16.32, 9.18.6, or any older version may require a manual configuration change. The following configurations are affected: - type primary zones configured with dnssec-policy but without either allow-update or update-policy, - type secondary zones configured with dnssec-policy. In these cases please add inline-signing yes; to the individual zone configuration(s). Without applying this change, named will fail to start. For more details, see https://kb.isc.org/docs/dnssec-policy-requires-dynamic-dns-or-inline-signing * BIND 9.18 does not support dynamic update forwarding (see allow-update-forwarding) in conjuction with zone transfers over TLS (XoT). This obsoletes the following patch: * fix_documentation-Sphinx.patch ==== dnsmasq ==== Version update (2.86 -> 2.87) - update to 2.87 (bsc#1197872, CVE-2022-0934): * Allow arbitrary prefix lengths in --rev-server and - -domain=....,local * Replace --address=/#/..... functionality which got missed in the 2.86 domain search rewrite. * Add --nftset option, like --ipset but for the newer nftables. * Add --filter-A and --filter-AAAA options, to remove IPv4 or IPv6 addresses from DNS answers. * Fix crash doing netbooting when --port is set to zero to disable the DNS server. Thanks to Drexl Johannes for the bug report. * Generalise --dhcp-relay. Sending via broadcast/multicast is now supported for both IPv4 and IPv6 and the configuration syntax made easier (but backwards compatible). * Add snooping of IPv6 prefix-delegations to the DHCP-relay system. * Finesse parsing of --dhcp-remoteid and --dhcp-subscrid. To be treated as hex, the pattern must consist of only hex digits AND contain at least one ':'. Thanks to Bengt-Erik Sandstrom who tripped over a pattern consisting of a decimal number which was interpreted surprisingly. * Include client address in TFTP file-not-found error reports. Thanks to Stefan Rink for the initial patch, which has been re-worked by me (srk). All bugs mine. * Note in manpage the change in behaviour of -address. This behaviour actually changed in v2.86, but was undocumented there. From 2.86 on, (eg) --address=/example.com/1.2.3.4 ONLY applies to A queries. All other types of query will be sent upstream. Pre 2.86, that would catch the whole example.com domain and queries for other types would get a local NODATA answer. The pre-2.86 behaviour is still available, by configuring --address=/example.com/1.2.3.4 --local=/example.com/ * Fix problem with binding DHCP sockets to an individual interface. Despite the fact that the system call tales the interface _name_ as a parameter, it actually, binds the socket to interface _index_. Deleting the interface and creating a new one with the same name leaves the socket bound to the old index. (Creating new sockets always allocates a fresh index, they are not reused). We now take this behaviour into account and keep up with changing indexes. * Add --conf-script configuration option. * Enhance --domain to accept, for instance, - -domain=net2.thekelleys.org.uk,eth2 so that hosts get a domain which relects the interface they are attached to in a way which doesn't require hard-coding addresses. Thanks to Sten Spans for the idea. * Fix write-after-free error in DHCPv6 server code. CVE-2022-0934 refers. * Add the ability to specify destination port in DHCP-relay mode. This change also removes a previous bug where --dhcp-alternate-port would affect the port used to relay _to_ as well as the port being listened on. The new feature allows configuration to provide bug-for-bug compatibility, if required. Thanks to Damian Kaczkowski for the feature suggestion. * Bound the value of UDP packet size in the EDNS0 header of forwarded queries to the configured or default value of edns-packet-max. There's no point letting a client set a larger value if we're unable to return the answer. Thanks to Bertie Taylor for pointing out the problem and supplying the patch. - drop dnsmasq-CVE-2022-0934.patch, dnsmasq-resolv-conf.patch (upstream) ==== drbd-utils ==== - bsc#1204276 remove crm-fence-peer.sh for drbd8 to avoid confusion with v9 ==== gedit ==== Version update (43.alpha -> 43.1) Subpackages: gedit-lang python3-gedit - Update to version 43.1: + Be able to build with Meson >= 0.61 + AppData fix + Add some BuildStream element files in build-aux/buildstream/ - Add api_ver define and set it to 3.38 - Update to version 43.0: + Come back to the source code of gedit 40.0 and continue again from there. It is based on the Tepl and Amtk libraries. The single Open button is again split in two with a drop-down menu for recent files. + Workaround for bug: text cut off at the bottom in certain situations. + Change app name from "Text Editor" back to "gedit". + AppData: some updates, take a new screenshot. + Remove gitlab-ci. + Remove outdated build-aux/osx/ directory (several MB). + Flatpak: generate JSON manifest from YAML manifest. + File browser plugin: more robust check if Nautilus GSettings can be used, even if the key doesn't exist anymore. + Rework the I/O error info bars. + Handle application/x-zerosize mimetype. + Small code maintenance. + Documentation updates. + Updated translations. - Rebase gedit-desktop.patch with quilt. - Add pkgconfig(amtk-5) and pkgconfig(tepl-6) BuildRequires: New dependencies. ==== git ==== Version update (2.38.0 -> 2.38.1) Subpackages: git-core git-email git-gui git-svn git-web gitk perl-Git - disable tests on s390x (check-chainlint) - update to 2.38.1 (bsc#1204455, CVE-2022-39253, bsc#1204456, CVE-2022-39260): * CVE-2022-39253: When relying on the `--local` clone optimization, Git dereferences symbolic links in the source repository before creating hardlinks (or copies) of the dereferenced link in the destination repository. This can lead to surprising behavior where arbitrary files are present in a repository's `$GIT_DIR` when cloning from a malicious repository. Git will no longer dereference symbolic links via the `--local` clone mechanism, and will instead refuse to clone repositories that have symbolic links present in the `$GIT_DIR/objects` directory. Additionally, the value of `protocol.file.allow` is changed to be "user" by default. * CVE-2022-39260: An overly-long command string given to `git shell` can result in overflow in `split_cmdline()`, leading to arbitrary heap writes and remote code execution when `git shell` is exposed and the directory `$HOME/git-shell-commands` exists. `git shell` is taught to refuse interactive commands that are longer than 4MiB in size. `split_cmdline()` is hardened to reject inputs larger than 2GiB. ==== glib-networking ==== Subpackages: glib-networking-lang - Fix build with gnutls 3.7.8: * tests: skip tls-exporter test for TLS 1.2 * https://gitlab.gnome.org/GNOME/glib-networking/-/issues/201 * Add glib-networking-gnutls-tls-exporter-tls12.patch ==== gnome-packagekit ==== Version update (3.32.0 -> 43.0) Subpackages: gnome-packagekit-lang - Update to version 43.0: + Add icon for critical updates. + Fix smallscreen support. + Add back logout support. + Automatically remove unused dependencies by default. - Add explicit pkgconfig(gio-2.0) BuildRequires, as meson checks for it. - Drop desktop-file-utils and gnome-menus-devel BuildRequires, no longer needed. - Drop patches fixed upstream: + gnome-packagekit-displaysize.patch + gnome-packagekit-bring-back-logout-support.patch + gnome-packagekit-define-HAVE_SYSTEMD.patch + gnome-packagekit-drop-NEWEST-on-get-updates.patch - Rebase patches with quilt. ==== gnome-shell ==== Version update (43.0 -> 43.1) Subpackages: gnome-extensions gnome-shell-calendar gnome-shell-lang - Update to version 43.1: + Fix default keyboard layout during initial setup. + Show Bluetooth switch in more cases. + Include origin in sound device switcher. + Fix remembering inhibit-shortcut permission for multiple apps. + Forward TERMINAL input purpose to ibus. + Fix style glitches. + Fix tracking of newly installed apps. + Fix space key getting stuck in on-screen keyboard. + Fix showing passwords as on-screen keyboard suggestions. + Fix network portal regression. + Fix possible freeze during initialization. + Misc. bug fixes and cleanups. + Updated translations. ==== gnome-shell-extensions ==== Version update (43.0 -> 43.1) Subpackages: gnome-shell-classic gnome-shell-extensions-common gnome-shell-extensions-common-lang - Update to version 43.1: + Fixed crash. + Misc. bug fixes and cleanups. + Updated translations. ==== gtksourceview4 ==== Version update (4.8.3 -> 4.8.4) Subpackages: gtksourceview4-lang libgtksourceview-4-0 typelib-1_0-GtkSource-4 - Update to version 4.8.4: + Style updates to kate, classic, tango. + Language updates to vala, python3, c, cuda, latex. + Add unit tests for language specs. + Updated translations. ==== irqbalance ==== Version update (1.9.1 -> 1.9.2) Subpackages: irqbalance-ui - update to 1.9.2: * avoid coredump on build_one_dev_entry() * avoid double free on deinit_thermal() * change the log level in thermal.c * fix a minor typo - drop Avoid-double-free-on-deinit_thermal.patch, uninitialized.patch: (upstream) ==== libmfx ==== - needed for jira#PED-1174 (Video decoding/encoding support (VA-API, ...) for Intel GPUs is outside of Mesa) ==== libpaper ==== Version update (1.2.2 -> 2.0.3) Subpackages: libpaper-tools - Update to 2.0.3: * avoid error in paperconfig * paperinit: fix a space leak in case of error parsing paperspecs * paper.c: make unit_list const char *, to fix a warning * paper.c: fix a trivial leak * fix segfault when HOME is unset (thanks, Werner Fink) * fix a segfault in systempapername() (fix from Werner Fink, thanks!) * hardwire papersize configuration filename to âpapersizeâ - Remove upstreamed libpaper-foul.patch ==== libsoup ==== Version update (3.2.1 -> 3.2.2) Subpackages: libsoup-3_0-0 libsoup-lang typelib-1_0-Soup-3_0 - Update to version 3.2.2: + Various HTTP/2 Fixes: - Fix `content-sniffed` not being emitted for resources without content. - Fix leak of SoupServerConnection when stolen. - Enable tests on 32-bit again, fixed upstream. ==== lvm2 ==== Subpackages: liblvm2cmd2_03 - killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216) - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch ==== lvm2-device-mapper ==== Subpackages: device-mapper libdevmapper-event1_03 libdevmapper1_03 libdevmapper1_03-32bit - killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216) - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch ==== mutter ==== Version update (43.0 -> 43.1) Subpackages: mutter-lang - Update to version 43.1: + Add quirk to work around issue with Mali GPUs. + Notify changes to night-light support over D-Bus. + Fix always-on-top windows unexpectedly taking focus. + Fix accidental direct scanout. + Disable client modifiers with amdgpu driver. + Cancel pointer gesture on wl_pointer.leave. + Add black padding to fixed-size wayland fullscreen windows. + Stop sending frame callbacks to minimized clients. + Fix scrolling in clients with no hi-res scroll support in RDP. + Fix skipped low-res scroll events with some high-res mice. + Throttle interactive move and resize updates. + wayland-keyboard: Send pressed keys on enter. + Fix some X11 windows getting unredirected erroneously. + Fix Flatpak applications bypassing X11 permission. + Fix always visible cursor in virtual streams. + Fixed crashes. + Misc. bug fixes and cleanups. + Updated translations. - Drop b81429ac.patch: Fixed upstream. ==== nodejs19 ==== Version update (19.0.0 -> 19.0.1) Subpackages: npm19 - Fix migration to openssl-3 (bsc#1205042) - Update to version 19.0.1: * inspector: DNS rebinding in --inspect via invalid octal IP (bsc#1205119, CVE-2022-43548) ==== openexr ==== Subpackages: libIex-3_1-30 libIlmThread-3_1-30 libOpenEXR-3_1-30 - Add _constraints: 6000 MiB memory ==== perl-Clone ==== Version update (0.45 -> 0.46) - updated to 0.46 see /usr/share/doc/packages/perl-Clone/Changes 0.46 2022-10-18 20:23:00 garu - fix backwards compatibility with older perls (haarg) - bump MANIFEST to include extra tests ==== perl-Mojolicious ==== Version update (9.27 -> 9.28) - updated to 9.28 see /usr/share/doc/packages/perl-Mojolicious/Changes 9.28 2022-09-12 - Fixed a bug where async/await use could result in unhandled promise warnings. (batman) ==== python-argparse-manpage ==== Version update (3 -> 4) - Update to v4 News in v4 The manual page generator logic is now separated from the 'build_manpages' module (which provides setup.py integration helpers). Therefore the argparse-manpage doesn't necessarily have to depend on setuptools. Projects that want to integrate using 'setup.py' should though place a new "extra" named 'argparse-manpage[setuptools]' into their set of build requirements in project.toml file. The old 'build_manpage' command (!= 'build_manpages') is now more isolated from the rest of the code, likely never loaded. the Manpage class API was changed in v3 so it required an additional constructor 'data' argument. This change was reverted, and the only argument is again the ArgumentParser object. The 'version' and 'description' options were fixed. New options 'manual_section' and 'manual_title' were added. The manual page now automatically generates a current date in headers. Several groff escaping issues were fixed. ==== python-filetype ==== Version update (1.0.10 -> 1.2.0) - Update to 1.2.0 * Merge pull request #147 from sayanarijit/fix-146 * Add tests for m4a * Try matching audio before video * Merge pull request #145 from RSabet/master * update README to include avif * added image filetype avif * Update __init__.py * Merge pull request #141 from ferstar/master * test: remove unused imported(F401) * refactor: duck-typing reading magic string and try to restore the reader position if possible * test: fix E275 missing whitespace after keyword * test: Use tox pipeline instead of pytest * test: ignore E501 error for flake8 check * fix: CLI params parser * Merge pull request #137 from ferstar/master * fix: guess ".docx" func and add another doc file test case * fix: guess ".doc" func and add another doc file test case * test: skip benchmark test in tox config * fix: restore reader position after retrieving signature bytes * Merge pull request #136 from ferstar/master * test: no need to skip zstd test case * Merge pull request #135 from ferstar/master * fix: regression for file-like obj file type detection * Merge pull request #134 from babenek/actions * Merge pull request #129 from ferstar/master - Update to 1.1.0 * Merge branch 'master' into master * Merge pull request #133 from magbyr/master * Merge pull request #131 from babenek/master * CI workflow in github actions * Changed to if statements in matching method * Changed return method because of coverage calculation problems * Apply suggestions from code review * README changes * Linter changes * Added document filetypes for doc, docx, odt, xls, xlsx, ods, ppt, pptx and odp. Added tests and sample documents for document filetypes * Fix undocumented exception * style: Simplify binary to integer method * feat: add zstd skippable frames support * test: fix the tox config and missing test sample files * test: fix the zst test sample file * fix(readme): rst syntax wtf - Update to 1.0.13 * feat(history): update changes - Update to 1.0.12 * Merge pull request #127 from ferstar/master * Merge pull request #123 from levrik/patch-1 * Merge pull request #126 from babenek/master * docs: add zstd type * fix: remove unnecessary duck-typing try * feat: add zst(d) type * chore: fix lint errors * test: fix memoryview test cases * BugFix for uncaught exceptions * Support PDF with BOM - Update to 1.0.11 * chore(version): bump patch * chore(version): bump patch * refactor(apng) * refactor(apng) * Merge pull request #120 from CatKasha/apng * fix typo * add APNG support (part 3) * add APNG support (part 2) * add APNG support (part 1) * chore(history): version notes * Merge branch 'master' of https://github.com/h2non/filetype.py * feat: version bump * Merge pull request #118 from smasty/woff-flavors-support * fix(font): minimum length check (woff) * Update __init__.py * Update setup.py * Merge pull request #109 from fraang/master * Add support for more WOFF/WOFF2 flavors * Merge pull request #114 from andersk/m4a * fix(base): remove property decorator * Use correct audio/mp4 type for m4a. ==== texlive ==== Subpackages: libkpathsea6 libsynctex2 - Make it build even ol ppc64le ==== texlive-specs-n ==== Version update (2022.195.2.005svn61719 -> 2022.196.2.005svn61719) - The boldtensors styles should require the bbold fonts - Use https for urls - Update mltex to latest version 4.2svn63213 as upstream has now removed all .dvi, .pdf, and .tex files from doc tree due to the used Creative Commons Attribution-NonCommercial-ShareAlike license ==== virt-manager ==== Subpackages: virt-install virt-manager-common - Refresh test skips - Drop the very old "Obsoletes: python-virtinst <= 0.600.4" virt-manager.spec - Upstream bug fixes (bsc#1027942) 11a887ec-cli-disk-Add-driver.metadata_cache-options.patch 7295ebfb-tests-cli-Fix-test-output-after-previous-commit.patch 58f5e36d-fsdetails-Fix-an-error-with-source.socket-of-virtiofs.patch c22a876e-tests-Add-a-compat-check-for-linux2020-in-amd-sev-test-case.patch fbdf0516-cli-cpu-Add-maxphysaddr.mode-bits-options.patch b0d05167-cloner-Sync-uuid-and-sysinfo-system-uuid.patch 999ccb85-virt-install-unattended-and-cloud-init-conflict.patch ==== vym ==== Version update (2.8.41 -> 2.8.43) - Update to upstream Version 2.8.43 - Bugfix for setting URL after retrieving data from Jira

1 0

SMB1 for tumbleweed builds??
by Bryan Thoreson 08 Nov '22

08 Nov '22

I recently discovered that SMB1 is no longer supported for tumbleweed builds. I was trying to use my HP printer's scan to network folder option yesterday and discovered the printer can no longer talk to my Samba server. I grabbed a network trace and saw the printer is only talking SMB1. Looking through the samba change log I saw the update below. > Mon 26 Sep 2022 07:00:00 AM CDT > > > > Noel Power <nopower(a)suse.com> > > > > - Disable SMB1 for tumbleweed builds. > Does anyone know if there's a community build of samba that still supports SMB1? Bryan

10 17

New Tumbleweed snapshot 20221107 released!
by Dominique Leuenberger 08 Nov '22

08 Nov '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: libepoxy libfprint (1.94.5 -> 1.94.5+tod1) libva libva-gl make (4.3 -> 4.4) tigervnc xorg-x11-server xterm (373 -> 375) === Details === ==== libepoxy ==== - needed by jira#PED-1174 (Mesa needs sync with Xserver, which then needs updated libepoxy) ==== libfprint ==== Version update (1.94.5 -> 1.94.5+tod1) - Move to libfprint-tod fork: This fork allows loading of external modules (typically non-free) located in /usr/lib64/libfprint-2/tod-1/. This is neccessary for fingerprint sensors that do on-device verifaction. These non-free modules shall be included in Packman repositories. ==== libva ==== Subpackages: libva-drm2 libva-x11-2 libva2 - needed for jira#PED-1174 (Video decoding/encoding support (VA-API, ...) for Intel GPUs is outside of Mesa) ==== libva-gl ==== Subpackages: libva-glx2 libva-wayland2 - needed for jira#PED-1174 (Video decoding/encoding support (VA-API, ...) for Intel GPUs is outside of Mesa) ==== make ==== Version update (4.3 -> 4.4) Subpackages: make-lang - reset-sigpipe.patch: Reset SIGPIPE in children - Update to make 4.4 * WARNING: Future backward-incompatibility! In the NEXT release of GNU Make, pattern rules will implement the same behavior change for multiple targets as explicit grouped targets * WARNING: Backward-incompatibility! GNU Make now uses temporary files in more situations than previous releases. * WARNING: Backward-incompatibility! Previously each target in a explicit grouped target rule was considered individually: if the targets needed by the build were not out of date the recipe was not run even if other targets in the group were out of date. Now if any of the grouped targets are needed by the build, then if any of the grouped targets are out of date the recipe is run and all targets in the group are considered updated. * WARNING: Backward-incompatibility! Previously if --no-print-directory was seen anywhere in the environment or command line it would take precedence over any --print-directory. Now, the last setting of directory printing options seen will be used, so a command line such as "--no-print-directory -w" _will_ show directory entry/exits. * WARNING: Backward-incompatibility! Previously the order in which makefiles were remade was not explicitly stated, but it was (roughly) the inverse of the order in which they were processed by make. In this release, the order in which makefiles are rebuilt is the same order in which make processed them, and this is defined to be true in the GNU Make manual. * WARNING: Backward-incompatibility! Previously only simple (one-letter) options were added to the MAKEFLAGS variable that was visible while parsing makefiles. Now, all options are available in MAKEFLAGS. If you want to check MAKEFLAGS for a one-letter option, expanding "$(firstword -$(MAKEFLAGS))" is a reliable way to return the set of one-letter options which can be examined via findstring, etc. * WARNING: Backward-incompatibility! Previously makefile variables marked as export were not exported to commands started by the $(shell ...) function. Now, all exported variables are exported to $(shell ...). If this leads to recursion during expansion, then for backward-compatibility the value from the original environment is used. To detect this change search for 'shell-export' in the .FEATURES variable. * WARNING: New build requirement GNU Make utilizes facilities from GNU Gnulib: Gnulib requires certain C99 features in the C compiler and so these features are required by GNU Make: https://www.gnu.org/software/gnulib/manual/html_node/C99-features-assumed.h… The configure script should verify the compiler has these features. * New feature: The .WAIT special target If the .WAIT target appears between two prerequisites of a target, then GNU Make will wait for all of the targets to the left of .WAIT in the list to complete before starting any of the targets to the right of .WAIT. * New feature: .NOTPARALLEL accepts prerequisites If the .NOTPARALLEL special target has prerequisites then all prerequisites of those targets will be run serially (as if .WAIT was specified between each prerequisite). * New feature: The .NOTINTERMEDIATE special target .NOTINTERMEDIATE disables intermediate behavior for specific files, for all files built using a pattern, or for the entire makefile. * New feature: The $(let ...) function This function allows user-defined functions to define a set of local variables: values can be assigned to these variables from within the user-defined function and they will not impact global variable assignments. * New feature: The $(intcmp ...) function This function allows conditional evaluation controlled by a numerical comparison. * New feature: Improved support for -l / --load-average On systems that provide /proc/loadavg (Linux), GNU Make will use it to determine the number of runnable jobs and use this as the current load, avoiding the need for heuristics. * New feature: The --shuffle command line option This option reorders goals and prerequisites to simulate non-determinism that may be seen using parallel build. Shuffle mode allows a form of "fuzz testing" of parallel builds to verify that all prerequisites are correctly described in the makefile. * New feature: The --jobserver-style command line option and named pipes A new jobserver method is used on systems where mkfifo(3) is supported. * GNU Make has sometimes chosen unexpected, and sub-optimal, chains of implicit rules due to the definition of "ought to exist" in the implicit rule search algorithm, which considered any prerequisite mentioned in the makefile as "ought to exist". This algorithm has been modified to prefer prerequisites mentioned explicitly in the target being built and only if that results in no matching rule, will GNU Make consider prerequisites mentioned in other targets as "ought to exist". * GNU Make was performing secondary expansion of all targets, even targets which didn't need to be considered during the build. In this release only targets which are considered will be secondarily expanded. * If the MAKEFLAGS variable is modified in a makefile, it will be re-parsed immediately rather than after all makefiles have been read. * The -I option accepts an argument "-" (e.g., "-I-") which means "reset the list of search directories to empty". * New debug option "print" will show the recipe to be run, even when silent mode is set, and new debug option "why" will show why a target is rebuilt (which prerequisites caused the target to be considered out of date). * The existing --trace option is made equivalent to --debug=print,why * Target-specific variables can now be marked "unexport". * Exporting / unexporting target-specific variables is handled correctly, so that the attribute of the most specific variable setting is used. * Special targets like .POSIX are detected upon definition, ensuring that any change in behavior takes effect immediately, before the next line is parsed. * When the pipe-based jobserver is enabled and GNU Make decides it is invoking a non-make sub-process and closes the jobserver pipes, it will now add a new option to the MAKEFLAGS environment variable that disables the jobserver. * A long-standing issue with the directory cache has been resolved: changes made as a side-effect of some other target's recipe are now noticed as expected. - jobserver-noinherit.patch, jobserver-fifo.patch: Removed - test-driver.patch: Removed - fix-57962.patch: Removed - make-testcases_timeout.diff: Removed ==== tigervnc ==== Subpackages: libXvnc1 xorg-x11-Xvnc xorg-x11-Xvnc-module - Release 1.12.0 supersedes the following patches still used with tigervnc 1.10.1 on sle15-sp4/Leap 15.4: * U_0003-Update-Surface_X11.cxx.patch * U_Handle-pending-data-in-TLS-buffers.patch ==== xorg-x11-server ==== Subpackages: xorg-x11-server-Xvfb xorg-x11-server-extra - Release 21.1 supersedes the following patches still used with xorg-x11-server 1.20.3 on sle15-sp4/Leap 15.4: * U_0002-DRI2-Add-another-Coffeelake-PCI-ID.patch * U_0002-Fix-crash-on-XkbSetMap.patch * U_0003-Fix-crash-on-XkbSetMap.patch * U_0003-dri2-Sync-i965_pci_ids.h-from-mesa.patch * U_0004-dri2-Set-fallback-driver-names-for-Intel-and-AMD-chi.patch * U_0005-dri2-Sync-i965_pci_ids.h-from-mesa-iris_pci_ids.h.patch * U_build-glx-Lower-gl-version-to-work-with-libglvnd.patch * U_glamor-Make-pixmap-exportable-from-gbm_bo_from_pixma.patch * U_hw_do-not-include-sys-io-with-glibc.patch * U_meson-Fix-another-reference-to-gl-9.2.0.patch * U_modesetting-Fix-broken-manpage-in-autoconf-build.patch * U_present-wnmd-Fix-use-after-free-on-CRTC-removal.patch * U_present-wnmd-Relax-assertion-on-CRTC-on-abort_vblank.patch * U_xfree86-Change-displays-array-to-pointers-array-to-f.patch * U_xfree86-Fix-NULL-pointer-dereference-crash.patch * U_xkbsetdeviceinfo.patch * u_sync-pci-ids-with-Mesa-21.2.4.patch * u_xf86-Accept-devices-with-the-simpledrm-driver.patch * u_xichangehierarchy-CVE-2020-14346.patch * u_xkb-CVE-2020-14345.patch * u_xkb-CVE-2020-14360.patch ==== xterm ==== Version update (373 -> 375) Subpackages: xterm-bin xterm-resize - update to 375: * improve error-recovery when setting a bitmap font for the VT100 window, e.g., in case OSC 50 failed, restoring the most recent valid font so that a subsequent OSC 50 reports this correctly * exclude MC_XDG_OPEN from environment variables trimmed on startup * check for null pointer in isSelect() - includes changes from 374: * change default for sixelScrolling resource to better match VT330/VT340 DECSDM setting * fix some gcc and coverity warnings. * improve memory usage for OSC 52 * fix regression in xterm-373 change adding resources xftTrackMemUsage to xftMaxGlyphMemory, which did not first cache the server's resource-settings * fix regression in xterm-373 change for status-line vs alternate screen * modify configure checks for egrep/fgrep aliases to work around warning messages from GNU grep 3.8 boo#1203092

1 0