openSUSE Factory December 2022

factory@lists.opensuse.org

89 participants
71 discussions

New Tumbleweed snapshot 20221225 released!
by Dominique Leuenberger 26 Dec '22

26 Dec '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: alsa-plugins ell (0.54 -> 0.55) exo (4.16.4 -> 4.18.0) gstreamer (1.20.4 -> 1.20.5) gstreamer-plugins-bad (1.20.4 -> 1.20.5) gstreamer-plugins-base (1.20.4 -> 1.20.5) gstreamer-plugins-good (1.20.4 -> 1.20.5) gstreamer-plugins-libav (1.20.4 -> 1.20.5) gstreamer-plugins-ugly (1.20.4 -> 1.20.5) opencc (1.1.4 -> 1.1.6) pam-full-src permissions (1599_20220912 -> 1599_20221220) python-httpcore (0.15.0 -> 0.16.3) samba (4.17.3+git.283.2157972742b -> 4.17.4+git.300.305b22bfce) spamassassin (3.4.6 -> 4.0.0) tcl thunar (4.16.11 -> 4.18.1) thunar-volman (4.16.0 -> 4.18.0) tumbler (4.16.1 -> 4.18.0) xfce4-panel (4.16.5 -> 4.18.0) xfconf (4.16.0 -> 4.18.0) xfdesktop (4.16.1 -> 4.18.0) xfwm4 (4.16.1 -> 4.18.0) === Details === ==== alsa-plugins ==== Subpackages: alsa-plugins-pulse alsa-plugins-pulse-32bit alsa-plugins-speexrate alsa-plugins-upmix - Replace pkgconfig(libavresample) with pkgconfig(libswresample) BuildRequires as rate-lav was ported to use the latter. ==== ell ==== Version update (0.54 -> 0.55) - update to 0.55: * Fix issue with DHCP and blocked unicast requests. ==== exo ==== Version update (4.16.4 -> 4.18.0) Subpackages: exo-data exo-lang exo-tools libexo-2-0 - Update to version 4.18.0 * Bump requirements for Xfce 4.18 * Translation Updates ==== gstreamer ==== Version update (1.20.4 -> 1.20.5) Subpackages: gstreamer-lang gstreamer-utils libgstreamer-1_0-0 typelib-1_0-Gst-1_0 - update to 1.20.5: + This release only contains bugfixes and it should be safe to upgrade from 1.20.x. + systemclock waiting fixes for certain 32-bit platforms/libcs + alphacombine: robustness improvements for corner case scenarios + avfvideosrc: Report latency when doing screen capture + d3d11videosink: various thread-safety and stability fixes + decklink: fix performance issue when HDMI signal has been lost for a long time + flacparse: Fix handling of headers advertising 32 bits per sample + mpegts: Handle when iconv doesn't support ISO 6937 (e.g. musl libc) + opengl: fix automatic dispmanx detection for rpi4 and fix usage of eglCreate/DestroyImage + opusdec: Various channel-related fixes + textrender: event handling fixes, esp. for GAP event + subparse: Fix non-closed tag handling + videoscale: fix handling of unknown buffer metas + videosink: reverse playback handling fixes + qtmux: Prefill mode fixes, especially for raw audio + multiudpsink: allow binding to IPv6 address + rtspsrc: - Fix usage of IPv6 connections in SETUP - Only EOS on timeout if all streams are timed out/EOS + splitmuxsrc: fix playback stall if there are unlinked pads + v4l2: Fix SIGSEGV on state change during format changes + wavparse robustness fixes + Fix static linking on macOS (opengl, vulkan) + gstreamer-vaapi: fix headless build against mesa >= 22.3.0 + GStreamer Editing Services library: Fix build with tools disabled + webrtc example/demo fixes + unit test fixes for aesdec and rtpjitterbuffer + Cerbero: Fix ios cross-compile with cmake on M1; some recipe updates and other build fixes + Miscellaneous bug fixes, memory leak fixes, and other stability and reliability improvements + Performance improvements + Changes in gstreamer base package: - allocator: Copy allocator name in gst_allocator_register() - concat: Properly propagate EOS seqnum - fakesrc: avoid time overflow with datarate - Fix build of 1.20 branch with Meson 0.64.1 for those who have hotdoc installed on their system. - gst-inspect: Don't leak list - meson: fix check for pthread_setname_np() - miniobject: support higher refcount values - pads: Fix non-serialized sticky event push, e.g. instant change rate events - padtemplate: Fix annotations - systemclock: Use futex_time64 syscall on x32 and other platforms that always... - -Wimplicit-function-declaration in pthread_setname_np check (missing GNUSOURCE) ==== gstreamer-plugins-bad ==== Version update (1.20.4 -> 1.20.5) Subpackages: gstreamer-plugins-bad-lang libgstadaptivedemux-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstphotography-1_0-0 libgstplay-1_0-0 libgstplayer-1_0-0 libgstsctp-1_0-0 libgsturidownloader-1_0-0 libgstva-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 - Update to version 1.20.5: + aesdec: - Fix padding removal for per-buffer-padding=FALSE - Fix test failing in gst-plugins-bad + alphacombine: Add missing query handler for gaps + avfdeviceprovider: do not leak the properties + avfvideosrc: Report latency when doing screen capture + d3d11screencapturesrc: Specify PAR 1/1 to template caps + d3d11videosink: - Fixing focus lost on desktop layout change - Call ShowWindow() from window thread - Fix deadlock when parent window is busy - Always clear back buffer on resize + decklink: reset calculation of time_mapping to fix clipping HDMI video + directshow: Fix build error with glib 2.75 and newer + dvbsubenc: - Forward GAP events as-is if we wouldn't produce an end packet - Write Display Definition Segment if a non-default width/height is used + h265decoder: Do not abort when failed to prepare ref pic set + h264parser: Fix a typo in pred_weight_table parsing. + mediafoundation, d3d11: Fix memory leak and make leak tracer happy + mpegts: - Handle when iconv doesn't support ISO 6937 (e.g. musl libc) - Check continuity counter on section streams + mpegtsdemux: Always clear packetizer on DISCONT push mode + srt: various fixes - improve stats and error handling + rtmp2: Improve error messages + rtmp2sink: Correctly return GST_FLOW_ERROR on error + vulkan: Fix static linking on macOS + webrtcbin: also add rtcp-fb ccm fir for video mlines by default + webrtc/nice: fix small leak of split strings ==== gstreamer-plugins-base ==== Version update (1.20.4 -> 1.20.5) Subpackages: gstreamer-plugins-base-lang libgstallocators-1_0-0 libgstapp-1_0-0 libgstaudio-1_0-0 libgstfft-1_0-0 libgstgl-1_0-0 libgstpbutils-1_0-0 libgstriff-1_0-0 libgstrtp-1_0-0 libgstrtsp-1_0-0 libgstsdp-1_0-0 libgsttag-1_0-0 libgstvideo-1_0-0 typelib-1_0-GstAudio-1_0 typelib-1_0-GstPbutils-1_0 typelib-1_0-GstTag-1_0 typelib-1_0-GstVideo-1_0 - Update to version 1.20.5: + audioconvert, audioresample, audiofilter: fix divide by 0 for input buffer without caps + cdparanoia: Ignore compiler warning coming from the cdparanoia header + oggdemux, parsebin: More leak fixes + opengl: - Fix automatic dispmanx detection for rpi4 - Fix usage of eglCreate/DestroyImage - Fix static linking on macOS + Bump core requirement in 1.20 branch to 1.20.4 + oggdemux: Don't leak incoming EOS event + opusdec: Various channel-related fixes + subparse: Fix non-closed tag handling. + textrender: - Don't blindly forward all events and don't blindly forward all events - Negotiate caps on a GAP event if none were negotiated yet + timeoverlay: fix pad leak + videodecoder: Only post latency message if it changed + videoscale: buffer meta handling fixes (NULL-terminate array of valid meta tags) + videosink: Don't return unknown end-time from get_times() ==== gstreamer-plugins-good ==== Version update (1.20.4 -> 1.20.5) Subpackages: gstreamer-plugins-good-extra gstreamer-plugins-good-gtk gstreamer-plugins-good-jack gstreamer-plugins-good-lang gstreamer-plugins-good-qtqml - Update to version 1.20.5: + flacparse: Fix handling of headers advertising 32bps + multiudpsink: allow binding to IPv6 address + oss4: Fix debug category initialization + qt5: - Deactivate context if fill_info fails - Initialize GError properly in gst_qt_get_gl_wrapcontext() + qtdemux: - Check return value from gst_structure_get in PIFF box - Use unsigned int types to store result of QT_UINT32 - Prefill mode fixes + rtpjitterbuffer tests: Cast drop-messages-interval type properly (fixing it on 32-bit architectures) + rtspsrc: - Don't replace 404 errors with "no auth protocol found" - Fix seek event leaks - Fix usage of IPv6 connections in SETUP - Only EOS on timeout if all streams are timed out/EOS + splitmuxsrc: don't queue data on unlinked pads + v4l2: Fix SIGSEGV on 'change state' during 'format change' + v4l2videodec: Fix activation of internal pool + wavparse: - Avoid occasional crash due to referencing freed buffer. - Fix crash that occurs in push mode when header chunks are corrupted in certain ways. ==== gstreamer-plugins-libav ==== Version update (1.20.4 -> 1.20.5) - Update to version 1.20.5: + avdec_h265: Fix endless renegotiation with alternate interlacing + avviddec: Avoid flushing on framerate changes ==== gstreamer-plugins-ugly ==== Version update (1.20.4 -> 1.20.5) Subpackages: gstreamer-plugins-ugly-lang - Update to version 1.20.5: + No changes, version bump only. ==== opencc ==== Version update (1.1.4 -> 1.1.6) Subpackages: libopencc1_1 opencc-data - update to 1.1.6: * FTBFS for MacOS w/ Python 3.11 * Support Python 3.11 * Automatically name SO files * Add support for Apple silicon build tag * other minor fixes ==== pam-full-src ==== - Also obsolete pam_unix-32bit to have clean upgrade path. - Merge pam_unix back into pam, seperate package not needed anymore - Update pam-git.diff to current upstream - pam_env: Use vendor specific pam_env.conf and environment as fallback - pam_shells: Use the vendor directory obsoletes pam_env_econf.patch - Refresh docbook5.patch ==== permissions ==== Version update (1599_20220912 -> 1599_20221220) Subpackages: chkstat permissions-config - Update to version 20221220: * profiles: remove outdated kdesud, apptainer entries ==== python-httpcore ==== Version update (0.15.0 -> 0.16.3) - Update to 0.16.3 * Allow ws and wss schemes. Allows us to properly support websocket upgrade connections. (#625) * Forwarding HTTP proxies use a connection-per-remote-host. Required by some proxy implementations. (#637) * Don't raise RuntimeError when closing a connection pool with active connections. Removes some error cases when cancellations are used. (#631) * Lazy import anyio, so that it's no longer a hard dependancy, and isn't imported if unused. (#639) - Add httpcore-allow-deprecationwarnings-test.patch gh#encode/httpcore#511, gh#agronholm/anyio#470 - update to 0.16.2: * Revert 'Fix async cancellation behaviour', which introduced race conditions * Raise RuntimeError if attempting to us UNIX domain sockets on Windows * Fix HTTP/1.1 interim informational responses, such as "100 Continue" * Support HTTP/1.1 informational responses. * Fix async cancellation behaviour. * Support h11 0.14 ==== samba ==== Version update (4.17.3+git.283.2157972742b -> 4.17.4+git.300.305b22bfce) Subpackages: libsamba-policy0-python3 samba-ad-dc-libs samba-ad-dc-libs-32bit samba-client samba-client-32bit samba-client-libs samba-client-libs-32bit samba-gpupdate samba-ldb-ldap samba-libs samba-libs-32bit samba-libs-python3 samba-python3 samba-winbind samba-winbind-libs samba-winbind-libs-32bit - Update to 4.17.4 * CVE-2022-44640 Upstream Heimdal free of user-controlled pointer in FAST; (bsc#14929); * CVE-2021-20251 Bad password count not incremented atomically; (bsc#14611); * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability; (bsc#15203); * CVE-2022-37966 rc4-hmac Kerberos session keys issued to modern servers; (bso#15237); * CVE-2022-37967 Kerberos constrained delegation ticket forgery possible against Samba AD DC; (bso#15231); * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided; (bso#15240); * pam_winbind uses time_t and pointers assuming they are of the same size; (bso#15224); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); * filter-subunit is inefficient with large numbers of knownfails; (bso#15258); * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories; (bso#15252); * The KDC logic arround msDs-supportedEncryptionTypes differs from Windows; (bso#13135); * libnet: change_password() doesn't work with dcerpc_samr_ChangePasswordUser4(); (bso#15206); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); * Memory leak in snprintf replacement functions; (bso#15230); * RODC doesn't reset badPwdCount reliable via an RWDC (CVE-2021-20251 regression); (bso#15253); * Prevent EBADF errors with vfs_glusterfs; (bso#15198); * %U for include directive doesn't work for share listing (netshareenum); (bso#15243); * Stack smashing in net offlinejoin requestodj; (bso#15257); * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue; (bso#15197); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); - Remove deprecated if-{down,up} scripts; (bsc#1206444); - Adjust the systemd drop-in file for named service; (bsc#1201689); * Paths are additive so do not repeat paths from named.service * Prefix the samba DLZ directory with "-" to ignore this path if it does not exists - Migration PAM settings to /usr/etc: Saving user changed configuration files in /etc and restoring them while an RPM update. ==== spamassassin ==== Version update (3.4.6 -> 4.0.0) Subpackages: perl-Mail-SpamAssassin spamassassin-spamc - Add BuildRequires Text::Diff that was accidentally removed from original submission - Update known warnings % spamassassin-rpmlintrc - Update to spamassissin 4.0.0: * Notable internal changes: - Meta rules no longer use priority values, they are evaluated dynamically when the rules they depend on are finished - DNS and other asynchronous lookups like DCC or Razor2 plugins are now launched when priority -100 is reached. This allows short circuiting at lower priority without sending unneeded DNS queries - New internal Mail::SpamAssassin::GeoDB module supporting RelayCountry and URILocalBL plugins provides a unified interface to Geographic IP modules. These include: MaxMind::DB::Reader (GeoIP2) Geo::IP IP::Country::DB_File IP::Country::Fast. * New plugins: - Mail::SpamAssassin::Plugin::ExtractText - Mail::SpamAssassin::Plugin::DMARC - Mail::SpamAssassin::Plugin::DecodeShortURLs * HashCash module has been removed completely * Full detailed changelog: https://svn.apache.org/repos/asf/spamassassin/trunk/Changes - Update to iXhash2 4.00: * Minimum required version: SpamAssassin 4.0.0 - Update to spampd 2.61: * Performance and diagnostic improvements, quicker startups, and a lot of documentation updates. * Add support for configuration files (examples included in /misc folder and in POD). * Add optional "scalable mode" using Net::Server::PreFork module (16-year TODO!). More info in POD. * Add --logfile option to control logging destination(s) (syslog, stderr, and/or file/device). * Add --logident, --logfacility options for syslog. * Add multiple levels of help, including full "man" output with optional HTML formatting. * Add --show <thing> argument for printing default option values and other debug. * Fix SpamAssassin debug logging with versions 3.1+ (output was going to stderr/wrong syslog/null). * Fix for IPv6 addresses being used on --host and --relayhost options (was not possible due to ":<port>" check). * SIGHUP will now reload SpamAssassin and SpamPD configuration files (and all module code), still with graceful child process shutdown. * Use SpamAssassin::Logger module (with SA 3.1+) for all logging. * Log to stderr by default if running non-daemonized * Child processes are now renamed to "spampd child" to distinguish them from the parent in task lists. * Now requires Net::Server v0.89+ (though latest 2.009 is recommended). * The --auto-whitelist option is no longer allowed with SpamAssassin v3+. * Improve --debug option, adding ability to specify SpamAssassin (v3.1+) debug areas (aka channels/facilities). * All boolean options can take 0/1 argument and be negated with "no-" prefix. * The --children (-c) option is now more formally named - -max-servers (-mxs), but still accepted. * IO::Socket::UNIX and ::IP are only required if actually needed for --relaysocket / --relayhost options. ==== tcl ==== - bsc#1206623, tcl-string-compare.patch: Fix a bug in string comparison on big endian that made test string-2.20.1 fail. ==== thunar ==== Version update (4.16.11 -> 4.18.1) Subpackages: libthunarx-3-0 thunar-lang - Update to version 4.18.1 * Fix several thumbnailing issues * 'replace' option fixed for copy with '*.partial~' (gxo#xfce/thunar#974) * Preserve trusted state when launchers are copied * Don't reset zoom-level for directory specific settings (gxo#xfce/thunar#970) * Prevent build failure for NixOS (gxo#xfce/thunar#972) * Prevent location bar crash (gxo#xfce/thunar#968) * Translation Updates - Update to version 4.18.0: New features: (see https://alexxcons.github.io/blogpost_8.html) - List View - Image Preview - Undo and Redo - File Highlight - Customizable Toolbar - Split View - Statusbar - Recursive Search - Recently used files shown in the side pane - New Bookmark Menu - Trash directory with easy access to `Empty Trash' and `Restore' functionality - Improvements to the Default Applications management - Custom Actions can be arranged in cascading submenus - Preferences dialogs got streamlined Bug fixes: * Dont reset zoom-level for directory specific settings (gxo#xfce/thunar#970) * Prevent build failure for NixOS (gxo#xfce/thunar#972) * Prevent location bar crash (gxo#xfce/thunar#968) * build: Let xdt-depends.m4 macros set GLib macros * Translate the string "Search: " (gxo#xfce/thunar#953) * Fix typo in tooltip - Bump build requirements for 4.18.0 - Remove _service stuff ==== thunar-volman ==== Version update (4.16.0 -> 4.18.0) Subpackages: thunar-volman-lang - Update to version 4.18.0: * Bump build requirements for Xfce 4.18.0 - Update to 4.17.1: * bump copyright year * Drop subtitle from settings dialog - Update to 4.17.0: * autoconf: Use AC_CONFIG_MACRO_DIRS * build: Fix intltool lock file problem during make distcheck * Update COPYING * Fix compilation warnings * automake: Enable subdir-objects * autoconf: Some updates * Update `.gitignore` * Replace ExoBinding with GBinding * Remove GSourceFunc casts (!5) * Translation Updates: Arabic, Belarusian, Catalan, Croatian, Czech, Estonian, Galician, Greek, Hebrew, Hindi, Norwegian BokmÃ¥l, Occitan (post 1500), Romanian, Russian, Spanish, Turkish ==== tumbler ==== Version update (4.16.1 -> 4.18.0) Subpackages: libtumbler-1-0 tumbler-folder-thumbnailer tumbler-lang tumbler-webp-thumbnailer - Update to version 4.18.0 * Bump requirements for Xfce 4.18 * Performance improvements for the pixbuf-thumbnailer and the scheduler * Implement multiple overwrite options for the desktop-thumbnailer * Add support for the thumbnail sizes x-large and xx-large, which are very useful for high resolution displays * Tumbler and Thunar now support shared thumbnail repositories, like described in the freedesktop.org thumbnail specification. This feature can be used to produce thumbnails for a folder in advance, directly located near the pictures. Like that, the thumbnails don't need to be re-generated for each individual user. * tumbler.rc: Fix typo in explanatory comment * For the full list of changes from the 4.17 development branch see the packaged NEWS file. - Restore RAW tumbnailer as issue with libopenraw 0.3 should be fixed ==== xfce4-panel ==== Version update (4.16.5 -> 4.18.0) Subpackages: libxfce4panel-2_0-4 xfce4-panel-lang xfce4-panel-restore-defaults - Update to version 4.18.0 * Bump requirements for Xfce 4.18 * Translation Updates ==== xfconf ==== Version update (4.16.0 -> 4.18.0) Subpackages: libxfconf-0-3 typelib-1_0-Xfconf-0 xfconf-lang - Update to version 4.18.0 * Bump requirements for Xfce 4.18 * xfconf: Prevent Use-After-Free in GClosureNotify ==== xfdesktop ==== Version update (4.16.1 -> 4.18.0) Subpackages: xfdesktop-lang - Rebase xfdesktop-default-background-image.patch for Xfce 4.18 - Add *.svg wallpapers to the file list - Update to version 4.18.0 * Bump requirements for Xfce 4.18 * Add wallpapers of Xfce 4.18 wallpaper contest * Delete" menu entry in the context menu can now be hidden. * On pressing 'rearrange desktop icons', the user is asked for confirmation * Translation Updates * For the complete list of changes from the development branch 4.17 please see the packaged NEWS file - Removed unused _service file ==== xfwm4 ==== Version update (4.16.1 -> 4.18.0) Subpackages: xfwm4-lang - Update version to 4.18.0 * Bump requirements for Xfce 4.18 * Added functionality to move window to another monitor * Added radio buttons and checkboxes to window menu * bump copyright to 2022 * Change dialog help and close button icons * cleanup: Don't use parenthesis when returning constants * client: Do not hide transients for group if above * client: Fix * client: Get the GdkDisplay from ScreenInfo * client: Handle removal of GTK_FRAME_EXTENTS * client: Move getSizeExcludingMargins() * client: No need to always reconfigure on monitor change * client: Preserve saved position on monitor change * client: Toggle from partial maximization to unmaximize * client: Update workarea only for windows with struts * client.c: fix a little typo * client.h: move STRUTS_SIZE to hints.h * common: xfwm_get_monitor_geometry() report fail via return code, fix potential NULL * compositor: Add support for adaptive vsync with GLX * compositor: Add throttled repaint * compositor: Clear root backing pixmap before use * compositor: Damage window when adding the opaque region * compositor: Disable GLX on mutli-screen (Zaphod) * compositor: Disable GLX vblank with virgl * compositor: Do not clear timeout on retry * compositor: Do not set deprecated compositor selection * compositor: fix ifdef * compositor: fix printf format strings * compositor: Fix repaint timeout * configure.ac.in: configure option to enable poswin * configure.ac.in: drop obsolete check for libSM * configure.ac.in: drop unused HAVE_CYGWIN conditional * configure.ac.in: fix obsolete AC_HEADER_STDC / obsolete checks * configure.ac.in: replace obsolete AC_HELP_STRING * display: check for XResQueryClientIds to enable XRes extension. * drop obsolete and unsupported KDE systray protocol * Drop subtitle and use symbolic close icon * Drop subtitle from workspace settings dialog * Fix build warnings * Fix intltool lock file bug in make distcheck * focus: Check for user focus for when passing focus * focus: Fix focus being lost on workspace switch * gitignore: add files generated by distcheck * icons: Check XGetGeometry() appropriate return value * icons: Gracefully handle non-existent icons * Make workspace setting workable with other window managers * Makefile.am: remove stale intltool-merge lockfile * menu: Small code cleanup * Merge branch 'drsudo/xfwm4-layerRadioBox' * netwm: Do not use _NET_WM_PING in multi-screen * netwm: Fix clientValidateNetStrut() * netwm.c: simplify and optimize struts array * placement: Add new function to compute the max space available * placement: Auto-maximize windows with both width and height * placement: clientMaxSpace() drop unused variable * placement: Compute struts using output scale * placement: Factorize max space computation * placement: Fix the initial position * placement: Ignore struts from windows on other monitors * placement: Remove the "same monitor" param * placement: Restack fullscreen window when necessary * placement: Small cleanup * placement: Use a GdkRectangle instead of multiple coords * placement: Windows on different screens cannot overlap * Post release tag bump * poswin: Fix location with client-side decorations * Remove redundant code * Replace stock icons * screen: Add a new API to get the screen max space * settings-dialogs: Remove ENABLE_NLS ifdefs * settings: Enable either windows wrap or tiling * settings: Fix untranslatable string * stacking: Above goes on top of fullscreen * startup-notification: Fix timeout computation * startup-notification: Reduce timeout to 10 seconds * Translation Updates * ui_style: drop unused getUIPangoContext() * updated NEWS * Use symbolic icons * wireframe: add window class hint to wireframes * workspace: Update maximized on struts change * xfce-wm-menu.png: Fix the 22x22 icon size

1 0

Auto-unlock of encrypted root using TPM in grub2 allows trivial access to filesystem
by Andrei Borzenkov 26 Dec '22

26 Dec '22

grub2 in Tumbleweed includes patches to unlock LUKS container using TPM measurements. It is advertised as fully supported by ALP: https://documentation.suse.com/alp/all/single-html/alp/index.html#alp-post-… --><-- If the D-Installer detects a TPM 2.0 chip and UEFI Secure Boot, it will create a secondary LUKS key. On the first boot, ALP will use the TPM to protect this key and configure the GRUB 2 boot loader to automatically unwrap the key. --><-- The problem is, due to the fact that kernel command line is in encrypted grub.cfg it cannot be included in measurements used to unlock LUKS container where grub.cfg is located. And grub2 will pass unsealed key to initrd so kernel will also automatically unlock root. Which provides for trivial bypass by booting with init=/bin/sh This auto-unlock really can be used only of modification of kernel command line is prohibited, i.e. either grub.cfg is password protected or grub does not forward key to kernel and instead systemd-cryptenroll is used with at least PCR 9 that measures current kernel command line and so prevents this bypass.

2 1

New Tumbleweed snapshot 20221224 released!
by Dominique Leuenberger 25 Dec '22

25 Dec '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: audacity bind (9.18.9 -> 9.18.10) ca-certificates-mozilla (2.56 -> 2.60) cronie dconf ffmpeg-4 glib2 (2.74.3 -> 2.74.4) gnome-control-center gtk4 (4.8.2 -> 4.8.3) iproute2 (6.0 -> 6.1) libgarcon (4.16.1 -> 4.18.0) libgit2 nftables (1.0.5 -> 1.0.6) open-iscsi pipewire ristretto (0.12.3 -> 0.12.4) sssd vulkan-loader (1.3.231.0 -> 1.3.236.0) vulkan-tools (1.3.231 -> 1.3.236.0) webkit2gtk3 (2.38.2 -> 2.38.3) webkit2gtk3-soup2 (2.38.2 -> 2.38.3) wicked (0.6.70 -> 0.6.71) xfce4-power-manager (4.16.0 -> 4.18.0) xfce4-screenshooter (1.10.0 -> 1.10.1) xfce4-session (4.16.0 -> 4.18.0) xfce4-settings (4.18.0 -> 4.18.1) xfce4-taskmanager (1.5.4 -> 1.5.5) zbar zlib-ng-compat === Details === ==== audacity ==== Subpackages: audacity-lang - Replace pkgconfig(gtk+-2.0) with pkgconfig(gtk+-3.0) BuildRequires, audacity have moved to gtk-3 several versions ago. ==== bind ==== Version update (9.18.9 -> 9.18.10) Subpackages: bind-doc bind-utils - Update to release 9.18.10 Feature Changes: * To reduce unnecessary memory consumption in the cache, NXDOMAIN records are no longer retained past the normal negative cache TTL, even if stale-cache-enable is set to yes. * The auto-dnssec option has been deprecated and will be removed in a future BIND 9.19.x release. Please migrate to dnssec-policy. * The coresize, datasize, files, and stacksize options have been deprecated. The limits these options set should be enforced externally, either by manual configuration (e.g. using ulimit) or via the process supervisor (e.g. systemd). * Setting alternate local addresses for inbound zone transfers has been deprecated. The relevant options (alt-transfer-source, alt-transfer-source-v6, and use-alt-transfer-source) will be removed in a future BIND 9.19.x release. * The number of HTTP headers allowed in requests sent to namedâs statistics channel has been increased from 10 to 100, to accommodate some browsers that send more than 10 headers by default. Bug Fixes: * named could crash due to an assertion failure when an HTTP connection to the statistics channel was closed prematurely (due to a connection error, shutdown, etc.). * When a catalog zone was removed from the configuration, in some cases a dangling pointer could cause the named process to crash. * When a zone was deleted from a server, a key management object related to that zone was inadvertently kept in memory and only released upon shutdown. This could lead to constantly increasing memory use on servers with a high rate of changes affecting the set of zones being served. * TLS configuration for primary servers was not applied for zones that were members of a catalog zone. * In certain cases, named waited for the resolution of outstanding recursive queries to finish before shutting down. * host and nslookup command-line options setting the custom TCP/UDP port to use were ignored for ANY queries (which are sent over TCP). * The zone <name>/<class>: final reference detached log message was moved from the INFO log level to the DEBUG(1) log level to prevent the named-checkzone tool from superfluously logging this message in non-debug mode. ==== ca-certificates-mozilla ==== Version update (2.56 -> 2.60) - Updated to 2.60 state of Mozilla SSL root CAs (bsc#1206622) Removed CAs: - Global Chambersign Root - EC-ACC - Network Solutions Certificate Authority - Staat der Nederlanden EV Root CA - SwissSign Platinum CA - G2 Added CAs: - DIGITALSIGN GLOBAL ROOT ECDSA CA - DIGITALSIGN GLOBAL ROOT RSA CA - Security Communication ECC RootCA1 - Security Communication RootCA3 Changed trust: - TrustCor certificates only trusted up to Nov 30 (bsc#1206212) - Removed CAs (bsc#1206212) as most code does not handle "valid before nov 30 2022" and it is not clear how many certs were issued for SSL middleware by TrustCor: - TrustCor RootCert CA-1 - TrustCor RootCert CA-2 - TrustCor ECA-1 Patch: remove-trustcor.patch ==== cronie ==== Subpackages: cron - Use %_pam_vendordir ==== dconf ==== Subpackages: gsettings-backend-dconf libdconf1 - Drop baselibs.conf: there is no known consumer of the -32bit package. ==== ffmpeg-4 ==== Subpackages: libavcodec58_134 libavformat58_76 libavutil56_70 libpostproc55_9 libswresample3_9 libswscale5_9 - Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix null pointer dereference in vp3_decode_frame() (bsc#1206442). ==== glib2 ==== Version update (2.74.3 -> 2.74.4) Subpackages: glib2-lang glib2-tools libgio-2_0-0 libgio-2_0-0-32bit libglib-2_0-0 libglib-2_0-0-32bit libgmodule-2_0-0 libgmodule-2_0-0-32bit libgobject-2_0-0 libgobject-2_0-0-32bit libgthread-2_0-0 libgthread-2_0-0-32bit - Update to version 2.74.4: + Fix missing input validation in `GDBusMenuModel`. + Various GVariant security fixes when handling untrusted data. + Bugs fixed: glgo#GNOME/GLib#861, glgo#GNOME/GLib#2121, glgo#GNOME/GLib#2540, glgo#GNOME/GLib#2794, glgo#GNOME/GLib#2797, glgo#GNOME/GLib#2835, glgo#GNOME/GLib#2839, glgo#GNOME/GLib#2840, glgo#GNOME/GLib#2841, glgo#GNOME/GLib#2852, glgo#GNOME/GLib!3114, glgo#GNOME/GLib!3126, glgo#GNOME/GLib!3134, glgo#GNOME/GLib!3138, glgo#GNOME/GLib!3153, glgo#GNOME/GLib!3161, glgo#GNOME/GLib!3164. + Updated translations. - Add 1539540.patch: gthread-posix: need to #include <errno.h>. ==== gnome-control-center ==== Subpackages: gnome-control-center-color gnome-control-center-goa gnome-control-center-lang gnome-control-center-user-faces - Modify gnome-control-center-disable-error-message-for-NM.patch: fix wifi panel(bsc#1206233). - Rebase gnome-control-center-disable-error-message-for-NM.patch. - Add gnome-control-center-network-use-AdwStatusPage.patch: network-panel: Use AdwStatusPage to show NetworkManager error. This is needed by the above rebased patch (glgo#GNOME/gnome-control-center/commit/2b3de01124). - Add gnome-control-center-fix-ws-sea-pass-toggle.patch: Fix crash when user clicking password visibility toggle in Security page when method is WPA3 Personal (glgo#GNOME/gnome-control-center!1520). ==== gtk4 ==== Version update (4.8.2 -> 4.8.3) Subpackages: gtk4-lang gtk4-schema gtk4-tools libgtk-4-1 typelib-1_0-Gtk-4_0 - Update to version 4.8.3: + GtkText: - Claim gestures more selectively. - Prevent unexpected notify::direction emissions. + Accessibility: Remember if we don't find the a11y bus. + DND: Prefer file:// urls over other protocols. + GtkMountOperation: Work on Wayland. + GtkListView: Cancel rubberband if not handling drag. + Wayland: Fix button masks. + Windows: Fix resizes with native decorations. + X11: Fix some ordering problems with surface destruction. + Updated translations. ==== iproute2 ==== Version update (6.0 -> 6.1) Subpackages: iproute2-bash-completion - update to 6.1: * man: ss.8: fix a typo * testsuite: fix build failure * genl: remove unused vars in Makefile * json: do not escape single quotes * ip-monitor: Do not error out when RTNLGRP_STATS is not available * ip-link: man: Document existence of netns argument in add command * macsec: add Extended Packet Number support * macsec: add user manual description for extended packet number feature * ip: xfrm: support "external" (`collect_md`) mode in xfrm interfaces * ip: xfrm: support adding xfrm metadata as lwtunnel info in routes * ip: add NLM_F_ECHO support * libnetlink: add offset for nl_dump_ext_ack_done * tc/tc_monitor: print netlink extack message * rtnetlink: add new function rtnl_echo_talk() * ip: fix return value for rtnl_talk failures * iplink_bridge: Add no_linklocal_learn option support * devlink: use dl_no_arg instead of checking dl_argc == 0 * devlink: remove dl_argv_parse_put * mnlg: remove unnused mnlg_socket structure * utils: extract CTRL_ATTR_MAXATTR and save it * devlink: expose nested devlink for a line card object * devlink: load port-ifname map on demand * devlink: fix parallel flash notifications processing * devlink: move use_iec into struct dl * devlink: fix typo in variable name in ifname_map_cb() * devlink: load ifname map on demand from ifname_map_rev_lookup() as well * dcb: unblock mnl_socket_recvfrom if not message received * libnetlink: Fix memory leak in __rtnl_talk_iov() * tc_util: Fix no error return when large parent id used * tc_util: Change datatype for maj to avoid overflow issue * ss: man: add missing entries for MPTCP * ss: man: add missing entries for TIPC * ss: usage: add missing parameters * ss: re-add TIPC query support * devlink: Fix setting parent for 'rate add' * link: display 'allmulti' counter * seg6: add support for flavors in SRv6 End* behaviors * tc: ct: Fix invalid pointer dereference * uapi: update from 6.1 pre rc1 * u32: fix json formatting of flowid * tc_stab: remove dead code * uapi: update for in.h and ip.h * remove #if 0 code * tc: add json support to size table * tc: put size table options in json object * tc/basic: fix json output filter * iplink: support JSON in MPLS output * tc: print errors on stderr * ip: print mpls errors on stderr * tc: make prefix const * man: add missing tc class show * iplink_can: add missing `]' of the bitrate, dbitrate and termination arrays * ip link: add sub-command to view and change DSA conduit interface ==== libgarcon ==== Version update (4.16.1 -> 4.18.0) Subpackages: libgarcon-1-0 libgarcon-data libgarcon-lang - Update to version 4.18.0 * Bump requirements for Xfce 4.18 * Translation Updates: ==== libgit2 ==== - Drop baselibs.conf: there is no known consumer of the -32bit package. ==== nftables ==== Version update (1.0.5 -> 1.0.6) Subpackages: libnftables1 python3-nftables - Update to release 1.0.6 * Fix bytecode generation for concatenation of intervals where selectors use different byteorder datatypes, e.g. IPv4 (network byte order). * Fix match of uncommon protocol matches with raw expressions * Unbreak insertion of rules with intervals ("sport { 3478-3497, 16384-16387 }") ==== open-iscsi ==== Subpackages: libopeniscsiusr0 - Update iscsid.service so it starts iscsid.socket, if needed (bsc#1206132). ==== pipewire ==== Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-lang pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Add patch from upstream to remember last routing after a reboot (glfo#pipewire/pipewire#2893): * 0001-alsa-dont-set--1-as-node.target.patch ==== ristretto ==== Version update (0.12.3 -> 0.12.4) Subpackages: ristretto-lang - Update to version 0.12.4 * Bump requirements for Xfce 4.18 * Appearance Changes: - thumbnailer: Increase thumbnail sizes (#81) * Code Refactoring: - build: Let xdt-depends.m4 macros set GLib macros - flatpak: Update D-Bus permissions after changing file manager method - flatpak: Updates from Flathub - Remove duplicated RsttoMainWindow:device-scale property * Bug Fixes: - use-thunar-properties: Add & improve comments (!37) - thumbnailer: Add a warning if D-Bus proxy creation failed - Allow Xfconf initialization to fail (#19) - thumbnailer: Add missing sanity checks - Use a better-known bus name and object path for D-Bus proxy (#95, !36) - Properly update iterator when browsing a list containing invalid files (#94) - thumbnailer: Remove invalid files after processing thumbnail queue (#94) * Translation Updates ==== sssd ==== Subpackages: libsss_certmap0 libsss_idmap0 libsss_nss_idmap0 sssd-32bit sssd-krb5-common sssd-ldap - Take systemd units off the restart list that have RefuseManualStart=yes [boo#1206592] - Add symvers.patch [boo#1206592] ==== vulkan-loader ==== Version update (1.3.231.0 -> 1.3.236.0) - Update to release SDK-1.3.236.0 * Fix cases where OOM was handled wrong * Null check vk_icdGetPhysicalDeviceProcAddr ==== vulkan-tools ==== Version update (1.3.231 -> 1.3.236.0) - Update to release SDK-1.3.236.0 * vulkaninfo: Add Driver Version handling - Delete 0001-cubepp-Fix-presentKHR-assert.patch (merged) ==== webkit2gtk3 ==== Version update (2.38.2 -> 2.38.3) Subpackages: WebKit2GTK-4.1-lang libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles - Update to version 2.38.3 (boo#1206474): + Fix runtime critical warnings from media player. + Fix network process crash when fetching website data on ephemeral session. + Fix the build with Ruby 3.2. + Fix several crashes and rendering issues. + Security fixes: CVE-2022-42856. - Drop b7ac5d0c.patch: fixed upstream. ==== webkit2gtk3-soup2 ==== Version update (2.38.2 -> 2.38.3) Subpackages: WebKit2GTK-4.0-lang libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 webkit2gtk-4_0-injected-bundles - Update to version 2.38.3 (boo#1206474): + Fix runtime critical warnings from media player. + Fix network process crash when fetching website data on ephemeral session. + Fix the build with Ruby 3.2. + Fix several crashes and rendering issues. + Security fixes: CVE-2022-42856. - Drop b7ac5d0c.patch: fixed upstream. ==== wicked ==== Version update (0.6.70 -> 0.6.71) Subpackages: wicked-service - version 0.6.71 - dhcp: enable raw-ip support for wwan-qmi interfaces (jsc#PED-90) - schema: fix the ip rule to-selector to handle network prefixes ==== xfce4-power-manager ==== Version update (4.16.0 -> 4.18.0) Subpackages: xfce4-power-manager-lang xfce4-power-manager-plugin - Update to version 4.18.0 * Bump requirements for Xfce 4.18 * Translation Updates - Remove inhibit_dpms.patch - Update to version 4.17.1 * Bump copyright year to 2022 * Do not include `config.h` in headers * autoconf: Use AC_CONFIG_MACRO_DIRS - Update to version 4.17.0 * Allocate dynamic memory to `what` so that it can be `g_free`d later * Connect to polkit signal via GDBusProxy generic signal * Do not log a warning about expected behavior * Fix compilation warnings * Fix icon name in autostart launcher * Fix intltool lock file bug in make distcheck * Fix memory corruption due to incorrect g_ptr_array usage * Fix memory leak and make `while` more efficient * Fix missing-prototypes * Fix va_args usage in get_device_icon_name * Free `eggalarm` after its last use * Increase sleep timeout to 6hrs (gxo#xfce/xfce4-settings#80) * Inhibit DPMS when getting power inhibit request. * Lower minimum inactivity to 5 minutes * Remove GSourceFunc casts * Remove a floating reference * Revert "Lower minimum inactivity to 5 minutes" * Translation Updates * automake: Enable subdir-objects * backlight: always update notification * panel-plugin: Switch percentage and time * remove unused variable show_presentation_indicator * settings: Revert type hint change ==== xfce4-screenshooter ==== Version update (1.10.0 -> 1.10.1) Subpackages: xfce4-screenshooter-lang xfce4-screenshooter-plugin - Update to version 1.10.1: * Fixes capture of screenshots after first time (gxo#apps/xfce4-screenshoter#89) * libsoup: Migrate to 3.0 (gxo#apps/xfce4-screenshoter#88) * Fix typo in NEWS file * Translation Updates ==== xfce4-session ==== Version update (4.16.0 -> 4.18.0) Subpackages: xfce4-session-lang - Update to version 4.18.0 * Bump requirements for Xfce 4.18 * Translation Updates - Remove add-light-locker-support-git.patch and add-light-locker-support.patch - Update to version 4.17.2 * logout-dialog: New Xfconf property "ShowSave" (!29) * bump copyright year to 2022 - Update to version 4.17.1 * Translation Updates - Update to version 4.17.0 * settings: Revert type hint change * Check getgrgid(3) return value to avoid crash * build: Fix intltool lock file problem during make distcheck * Remove pre-defined lockers * Refresh list of screensavers (#17) * Do not mind output of screensaver, if successful * Run custom command in a separate shell * Avoid extra pause by redirecting stdin * Update COPYING * Increase switch user timeout (!25) * xflock4: Apply initial delay before running a screensaver/locker (#29) * xflock4: Update copyrights * xflock4: make the script executable * Add labels to inline toolbar buttons * Use correct icon for Close button * Translation Updates ==== xfce4-settings ==== Version update (4.18.0 -> 4.18.1) Subpackages: xfce4-settings-color xfce4-settings-lang - Update to version 4.18.1 * xfsettingsd: Make CSD (client side decorations) for dialogs opt-in * Translation Updates ==== xfce4-taskmanager ==== Version update (1.5.4 -> 1.5.5) Subpackages: xfce4-taskmanager-lang - Update to version 1.5.5 * Bump requirements for Xfce 4.18 * Stick process view at the top in the absence of user action * Get rid of GtkHeaderBar * Translation Updates ==== zbar ==== - ImageMagick instead of GraphicsMagick ==== zlib-ng-compat ==== Subpackages: libz-ng-compat1 libz-ng-compat1-32bit - add 0001-Add-one-extra-byte-to-return-value-of-compressBound-.patch fixes a data corruption regression in 2.0.6

1 0

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 24 Dec '22

24 Dec '22

1 0

New Tumbleweed snapshot 20221223 released!
by Dominique Leuenberger 24 Dec '22

24 Dec '22

1 0

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 23 Dec '22

23 Dec '22

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have had problems for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - netsniff-ng: Fails to build - opengreedy: Fails to build - openwsman: Fails to build - python-Nuitka: Fails to build - python-khal: Fails to build - python-napalm-arubaos-switch: Fails to build - python-napalm-asa: Fails to build - python-napalm-digineo-procurve: Fails to build - python-napalm-procurve: Fails to build - python-os-api-ref: Fails to build - python-xmlsec: Fails to build - python-yt: Fails to build - reuse: Fails to build - sbcl: Fails to build - trace-cmd: Fails to build Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

3 2

libcamera-base missing
by Constant Brouerius van Nidek 23 Dec '22

23 Dec '22

On the last two updates I got the unvolendet update with the following info: File './x86_64/libcamera-base0_0_1-0.0.1-35.23.x86_64.rpm' not found on medium 'https://download.opensuse.org/repositories/home:/plater/Tumbleweed/' Cannot get the update done and would like to know how to handle this problem. Telling the program to ignore the command it ends the whole update just there

2 1

Tumbleweed - Review of the week 2022/51
by Dominique Leuenberger / DimStar 23 Dec '22

23 Dec '22

Dear Tumbleweed users and hackers, The winter holiday period is upon us, and the number of requests submitted to Factory is getting lower (I even managed to have an empty review queue for a couple of minutes yesterday). But small snapshots never stopped Tumbleweed – and it kept on rolling, again with 7 snapshots released during this week (1216…1222) The most relevant changes included are: * Pipewire 0.3.63 * sqlite3: CVE-2022-46908: relying on –safe for execution of untrusted CLI scripts * systems: CVE-2022-4415 * XFCE 4.18 (update in progress, not the entire stack is there yet, please be patient) * Node.JS 19.3.0 * Mozilla Firefox 108.0.1 * NetworkManager 1.40.8 * Linux kernel 6.1.0 * Bash 5.2.15 As a lot of people are already enjoying some time off, a few resources are missing to fix the fallout in the staging projects, which means the list stays, to a large degree, the same as last week: * Util-linux 2.38.0 (Snapshot 1223+) * Boost 1.81.0: breaks libetonyek and LibreOffice * Ruby 3.2 (currently RC) is being tested to become the default ruby version (switch would happen when ruby 3.2 sees a final release) * Switch to openSSL 3: tracked in Staging:N, main failures are nodejs18, nodejs19, OpenSSH, mariadb * Python pytest 7.2.0 Cheers, Dominique

1 0

New Tumbleweed snapshot 20221222 released!
by Dominique Leuenberger 23 Dec '22

23 Dec '22

1 0

New Tumbleweed snapshot 20221221 released!
by Dominique Leuenberger 22 Dec '22

22 Dec '22

1 0

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

openSUSE Factory December 2022