June 2022 - openSUSE Factory - openSUSE Mailing Lists

XR project in OBS
by Sasi Olin 15 Jun '22

15 Jun '22

Hi, With some really cool hardware and software coming out in the XR (Virtual and Augmented Reality) space, I was working on adapting some of the existing packages in the home projects of various people and building some of my own, to be able to try out monado and xrdesktop with my headset and controllers. I would like to have this work published in some project on OBS, for single point of contributions and, for some packages, inclusion in Factory in the future. Something like gnome-shell-xrdesktop sounds unlikely to be accepted, since it's a patch on top of the existing gnome-shell, but we should be just fine including monado and kwin-effect-xrdesktop in Factory to make using headsets on the openSUSE distros' desktop a little bit easier. I would say hardware:xr sounds like the best place for it, but I don't think it particularly matters what it ends up being called. Would it be possible to create a project like that? LCP [Sasi] https://lcp.world/

2 3

openSUSE Release Engineering meeting 15.06.2022
by Lubos Kocman 15 Jun '22

15 Jun '22

All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting Meeting is hosted here https://meet.opensuse.org/ReleaseEngineeringMeeting ## Attendees bittin, DimStar, guillaumeg, lkocman, sysrich, DocB, dirk, maxlin, Marcus, Rado ## SUSE IT - Rado | Martin POC (something lkocman played on in train from OSCcon feel free to contribute) https://build.opensuse.org/project/show/home:mpiala:suse-it-infra Richard has working firstboot for MicroOS Desktop with gnome-initial- setup: https://download.opensuse.org/repositories/home:/RBrownSUSE:/microos:/selfi… https://hackweek.opensuse.org/21/projects/opensuse-build-supported-by-suse-… Requirements: full disk encryption lkocman's todo: working first-boot Official project by autobuild https://build.opensuse.org/project/show/isv:SUSE:suse-it-infra Shall we consider yast2-firstboot. Richard: the system facing stuff works well in yast2-firsboot, but the desktop part not so much (language for GNOME). SUMA demo - at the moment, there are two major issues in SUMA. okta integration and availability for public internet. (upstream https://github.com/uyuni-project/) https://www.suse.com/products/suse-manager/ Rado: Management of devices need to be integated with OKTA. In case SUSE IT will not find any other solution, SUMA and feature integration sounds like a way to go. ## Leap 15.4 retro spective is open at survey.opensuse.org docs are finally published (Lukas now knows how to fully do it! Previously dependent on Frank being around) Leap 15.5: Maybe we could reactivate openSUSE:Leap:15.5 to collect updates on top of SLE (application/Desktops/etc)? Let's think about this. Marcus did some work on the SLE Micro update channel for Leap Micro Marcus: http://download.opensuse.org/update/leap-micro/5.2/sle/ new repo fed with SLE Micro updates Have to update https://en.opensuse.org/Portal:LeapMicro/Lifecycle ALP CWG meeting yesterday, lots of action items (POC for openQA-o-o) https://etherpad.opensuse.org/p/weeklymeeting20220614 Leap Micro related - ignite{,-stage}.opensuse.org requested in https://progress.opensuse.org/issues/111452 Agremeent from conference to build container in OBS and deploy it as a container (cboltz, bernhard agreed) el rancho SUSE's Linux Learnig Club next week !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!! HEADS UP openSUSE ALP channel on discord/matrix/irc/telegram !!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! Link please! #alp:opensuse.org #opensuse-alp @ irc.libera.chat Not found on Matrix... ## openSUSE Tumbleweed openSUSE:Factory build fail stats: N/A failed, N/A unresolvable (last week: 383/12) https://tinyurl.com/ysy4nnnz * KDE Gear 22.04.2 and KDE Plasma 5.25 have been released into Tumbleweed during the last week, Frameworks 5.95.0 is in Staging * Switch for python 3.10 as main interpreter has been executed: Snapshot 0614 got the package and project config changes. Build in progress. As the python interpreter is so deeply nested, rebuild strategy was changed from 'local' (only build package which was checked in) to 'direct' (rebuild things with changed build deps). This will result in a quite large update (almost as bug as a full gcc12 rebuild, also due to FORTIFY_SOURCE=3 now being used in all packages, which we did not trigger a full rebuild for) * SELinux 3.4 is in Staging:C - breaks a few image builds using kiwi; not clear yet if kiwi or SELinux is at fault GPG Key to sign packages/repos is planned to be updated to be a 4096/RSA key (implementation schedule pending) Tracker bug : https://bugzilla.suse.com/show_bug.cgi?id=1199184 ## Richard (MicroOS) Winding down the Kubic project. kubic.opensuse.org has been removed/archived, domain still used by Tumbleweed/MicroOS kubeadm packages for version upgrades MicroOS/Kubic patterns partially tidied up, completion WIP Kubernetes 1.24 still in holding while the kubic winddown fallout and tidying up is done, 1.24.1 will be expected when it's submitted Resurrecting my MicroOS btrfs send/resc research project to see if it's now more viable as a transactional image update than Thorsten Kukuk's TIU experiment MicroOS Desktop abandoning use of packagekit/pkcon/tukit installation methods due to lack of maintenance/bug fixes, expect an update to revert to using transactional-update by default. Tumbleweed will be getting SLE-BCI-like containers. Dirk: Are we changing the name? Richard: I haven't figured out the tagging convention yet. Dirk: The name should distinguish, not only the registry, but also the organizational part and the name. Richard: Yes but..if the bci language containers (eg nodejs, golang, etc) are equal/better than the old non-bci language containers, we might as well harmonise on doing everything the bci way in an opensuse/ container namespace rather than making a seperate bci/ namespace. Technically we could do it (we have a kubic/ one seperate from the opensuse/ one) but that doesn't mean it's a good idea. Dirk: what about a tumbleweed/ namespace/naming convention? Richard: All official openSUSE container efforts are using only tumbleweed bases, with the exception of the Leap container which we dont use as a base for anything, dont advertise, and would delete if we had anyone willing to do the extra work to delete it...but as we dont, it'll stay around until the end of Leap after 15.5 Richard: so based on this discussion, I assume everything will end up in the official registry.opensuse.org/opensuse/ namespace, unless we find a reason to not lkocman: Jose L. works on PoC for openqa.opensuse.org testing for ALP will be based on the current MicroOS test suite. I believe that expectation is that contributions would be backported to "upstream" by default. That was not always the case for SLE -> Leap etc. ## Max * Preparing some improvements for the next release. Filing tickets for the openSUSE-release-process github repo * Locked Leap and Backports project * Raspberry Pi USB Boot problems * We could track it as a known issue in RN (Otherwise it's already listed in Raspberry PI HCL section on wiki) * Candidate for 15.4 QU1 respin is ^ as well as the wlan0 issue https://bugzilla.suse.com/show_bug.cgi?id=1186677 ## Guillaume - Arm Tumbleweed: Same as last week * llvm9 has been dropped from Factory, but ghc-bootstrap still requires it for aarch64 and armv6/7: https://bugzilla.opensuse.org/show_bug.cgi?id=1199897 * Last Kubic DVD iso built is still available at http://download.opensuse.org/ports/aarch64/tumbleweed/iso/ lkocman: Do we need to change something at get-o-o regarding kubic? Dimstar: Richard was busy :-) So nothing to do Leap 15.4: * armv7: Same as last week * Enlightenment package not built before the lock of the project (was still failing in rpmlint check due to a missing whitelist). maybe provide it via update channel? https://bugzilla.opensuse.org/show_bug.cgi?id=1194047 Has to be already a maintenance update. Leap Micro 5.2: No Updates this week * Default-SelfInstall: still some issues in openQA: https://progress.opensuse.org/issues/110845 (works locally) openQA: WIP to add aio (and maybe cache) option(s) to qemu backend to try to enhance performances, similar to what Dirk enabled on OBS workers ## Sarah - s390 Not Available All maven issues related to s390x are fixed. A new OpenJDK 17 is available for testing. If all is ok, then we can make it as a default. s390-tools are updated. Tumbleweed: * Is rolling openSUSE Leap 15.4: * no issues We had a nice team meeting at the conference (incl. a Power guy for an IBM technology meeting). :) ## Doug * Leap * sent gift to beta testers who sent email * recording in the press articles * TSP * No progress * Events * OSCAL oSC22 starts saturday * Applied for booth at FrOSCon * GNU Health conf sponsorship * Being asked by Z-Bau if we plan to have oSC next year & what time * GSoC * Projects started * First evaluations due July 29 at 18:00 UTC * Expected to publish a call for communications and marketing team increase * Working with emily on WG update lkocman: Doug I really appreciate all of these post (micro?) posts post GA on facebook, linkedin. I think it really helps with ensuring people know about the 15.4 GA, in case they missed the article. Good job! ## Dirk * was on vacation, poked on the missing ceph submission to enable python 3.10 switch, no other big news to share. * TODO tmux update to 3.3 broke yast2-ruby-bindings again, will look at it ## Wolfgang (Package Hub), Scott Bahling SLE 12 SP5 PH request to add supervisor https://bugzilla.suse.com/show_bug.cgi?id=1200415 Scott: lack of policy checking into Backports submission https://bugzilla.suse.com/show_bug.cgi?id=1199841 Document the process for 15.5 and also ALP (once related). Max: compared to the Leap before CtLG, orgin manager(formerly leaper) replacement is missing opensuse-reviews are still happening for Leap 15.4 top level project (but this project lacks other staging reviews) Backports has most of reviews implemented, but is missing the opensuse- reviews involved via origin-manager or leaper. Dominique: please do not just enable opensuse-reviewer for all of the reviews, it's pretty much just me. We need to find resources first. Scott: the original idea was let's just inherit from Factory, we assume that it's already there. If it happens to deviate from factory, then backport-reviewers would have a look. Perhaps we need to document and "follow the policy" even more. Max: this is problematic as we're receveing a lot of Leap and/or Backports specific fixes. Looking into a issue where mirror admins reported growing size of Leap / Backports. Adrian and Wolfgang are looking into that. Adrian: addition of mirroring of SP4:GA, for some days some architectures were behind and we've had doubled amount of noarch packages. It's expected behavior. Project will be frozen soon. Marcus: Did we do version updates for 15.4 from Factory. We did that in around Alpha phase. Marcus: some of the SP3:Updates were not picked up by Package HUB - SP4. Dirk: I also noticed some overriden versions from SP3. Lubos will check with Wolfgang on this one. Marcus did not see the usual review requests. Max we will need to either revive factory source checker or leaper checker ## Maintenance team (Marina or Marcus, Maurizio (m4u)) Leap Micro 5.2 update channel was mentioned above. No integration tests in place. The only concern is about rpm dependency issues. lkocman will look into product rebuild asap. 15.4 Update openQA was setup this week Staff is moving as usual. Stuff? or is the staff physically moving to new SUSE building? ;-) - Marcus: 15.4 is set up channel wise, updates will go in testing occasionaly, if you need more ping me, no openqa setup yet lkocman: could you please help me with cleanup of maintenance tasks in https://progress.opensuse.org/projects/opensuse-leap-15-4/issues/gantt lkocman: will contact Jan Stehlik. Santi (PO for the topic) mentioned he'll work on it. lkocman: messaged Jan Jan confirmed with me that they're on it. lkocman: (still pending) will open a release notes entry for a change Security Advisory identification TODO Marcus: could you give me example of old and new values? - Marina and Maurizio: SLE-PackageHub overlaps (https://github.com/openSUSE/openSUSE-release-process/issues/71) work in progress following the initial list of overlapping packages (https://progress.opensuse.org/issues/106610#note-3). More incidents are under QA. Work is going on and under control (and tracked internally as jsc#MSC-303). Already released: (AH PERFECT!) SUSE:Maintenance:22929:265929 (babl libbabl-0_1-0 typelib-1_0-Babl-0_1) SUSE:Maintenance:23000:266006 (MozillaThunderbird enigmail) SUSE:Maintenance:23009:266004 (freerdp freerdp-devel freerdp-proxy libfreerdp2 libgsm) -> libgsm1 was missing in PH making freerdp not installable SUSE:Maintenance:22928:266007 (argyllcms csync libcsync0 libcsync- plugin-sftp libcsync-plugin-smb) SUSE:Maintenance:23015:267052 (gfbgraph-devel libgfbgraph-0_2-0 typelib-1_0-GFBGraph-0_2 librest gcr) -> librest, gcr and libgoa are needed too for making gfbgraph installable SUSE:Maintenance:23334:268316 (gutenprint gutenprint-devel) SUSE:Maintenance:23486:268867 (hp-drive-guard, upower) --> needs libupower-glib3 SUSE:Maintenance:23487:268897 (liba52-0 liba52-devel) SUSE:Maintenance:23506:268899 (libdvdread4 libdvdread-devel) Lubos will ping m4u about updating the list (m4u: the list gets updated on jsc#MSC-303, let me know if you cannot access, I will update it later today and ping Lubos when done) Lubos will check updates in jira Meet product security at the openSUSE Conference. There are about 3 talks on the maintenance and security topics. Come and say Hello! DimStar: there is currently a pending crypto / gnutls related submission. ## Adrian - OBS No update

1 0

Help in recreating Virtualization/virtualbox
by Larry Finger 15 Jun '22

15 Jun '22

Somehow, I had enough privilege to delete the project, but not enough to recreate it from openSUSE:Factory/virtualbox. I would appreciate some help. Larry

3 2

Switch to Python 3.10
by Joe Salmeri 15 Jun '22

15 Jun '22

Dne 08. 04. 22 v 22:56 Matěj Cepl napsal(a): > Dne 08. 04. 22 v 22:14 Dominique Leuenberger / DimStar napsal(a): >> Haven't seen or heard anything from the python maintainers on that >> topic for a while now (also no active staging in place; presumably they >> are working on the devel project space first). Last I know there were >> some low-lever blockers. Not sure if those are fixed by now. >> >> Matej: do you know anything specific there? Any ETA? >> The most problematic packages python-distributed and python-dask are in Factory, so we >> may decide on MOnday to go ahead with switching to python310. >> Best, >> Matěj The last message on the switch to python310 was back on 04/09/2022 which indicated that the switch might happen on Monday which would have been 04/11. It has been a month since then and I have not seen any update or mention of it. Is there an update on the switch to python310 or an estimated ETA ? Thanks!

3 3

New Tumbleweed snapshot 20220613 released!
by Dominique Leuenberger 15 Jun '22

15 Jun '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: apache2 (2.4.53 -> 2.4.54) apache2-manual (2.4.53 -> 2.4.54) apache2-mod_php7 (7.4.29 -> 7.4.30) apache2-prefork (2.4.53 -> 2.4.54) apache2-utils (2.4.53 -> 2.4.54) bluedevil5 (5.24.5 -> 5.25.0) breeze (5.24.5 -> 5.25.0) breeze-gtk (5.24.5 -> 5.25.0) discover (5.24.5 -> 5.25.0) drkonqi5 (5.24.5 -> 5.25.0) glibmm2_4 (2.66.2 -> 2.66.4) gnome-bluetooth (42.0 -> 42.1) inxi (3.3.16 -> 3.3.17) kactivitymanagerd (5.24.5 -> 5.25.0) kcm_sddm (5.24.5 -> 5.25.0) kde-cli-tools5 (5.24.5 -> 5.25.0) kde-gtk-config5 (5.24.5 -> 5.25.0) kgamma5 (5.24.5 -> 5.25.0) khotkeys5 (5.24.5 -> 5.25.0) kinfocenter5 (5.24.5 -> 5.25.0) kmenuedit5 (5.24.5 -> 5.25.0) kscreen5 (5.24.5 -> 5.25.0) kscreenlocker (5.24.5 -> 5.25.0) ksshaskpass5 (5.24.5 -> 5.25.0) ksystemstats5 (5.24.5 -> 5.25.0) kwayland-integration (5.24.5 -> 5.25.0) kwin5 (5.24.5 -> 5.25.0) kwrited5 (5.24.5 -> 5.25.0) layer-shell-qt (5.24.5 -> 5.25.0) libkdecoration2 (5.24.5 -> 5.25.0) libkscreen2 (5.24.5 -> 5.25.0) libksysguard5 (5.24.5 -> 5.25.0) milou5 (5.24.5 -> 5.25.0) oxygen5-sounds (5.24.5 -> 5.25.0) php7 (7.4.29 -> 7.4.30) plasma-browser-integration (5.24.5 -> 5.25.0) plasma-nm5 (5.24.5 -> 5.25.0) plasma5-addons (5.24.5 -> 5.25.0) plasma5-desktop (5.24.5 -> 5.25.0) plasma5-disks (5.24.5 -> 5.25.0) plasma5-integration (5.24.5 -> 5.25.0) plasma5-openSUSE (84.87~git20220116T220745~fffd234 -> 84.87~git20220602T134713~22403ba) plasma5-pa (5.24.5 -> 5.25.0) plasma5-systemmonitor (5.24.5 -> 5.25.0) plasma5-thunderbolt (5.24.5 -> 5.25.0) plasma5-workspace (5.24.5 -> 5.25.0) polkit-kde-agent-5 (5.24.5 -> 5.25.0) powerdevil5 (5.24.5 -> 5.25.0) python python-MarkupSafe python-base systemsettings5 (5.24.5 -> 5.25.0) xdg-desktop-portal-kde (5.24.5 -> 5.25.0) === Details === ==== apache2 ==== Version update (2.4.53 -> 2.4.54) - update httpd-framework to svn revision 1898917 - version update to 2.4.54 Changes with Apache 2.4.54 * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism (cve.mitre.org) Apache HTTP Server 2.4.53 and earlier may not send the X-Forwarded-* headers to the origin server based on client side Connection header hop-by-hop mechanism. This may be used to bypass IP based authentication on the origin server/application. Credits: The Apache HTTP Server project would like to thank Gaetan Ferry (Synacktiv) for reporting this issue * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with websockets (cve.mitre.org) Apache HTTP Server 2.4.53 and earlier may return lengths to applications calling r:wsread() that point past the end of the storage allocated for the buffer. Credits: The Apache HTTP Server project would like to thank Ronald Crane (Zippenhop LLC) for reporting this issue * ) SECURITY: CVE-2022-30522: mod_sed denial of service (cve.mitre.org) If Apache HTTP Server 2.4.53 is configured to do transformations with mod_sed in contexts where the input to mod_sed may be very large, mod_sed may make excessively large memory allocations and trigger an abort. Credits: This issue was found by Brian Moussalli from the JFrog Security Research team * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua r:parsebody (cve.mitre.org) In Apache HTTP Server 2.4.53 and earlier, a malicious request to a lua script that calls r:parsebody(0) may cause a denial of service due to no default limit on possible input size. Credits: The Apache HTTP Server project would like to thank Ronald Crane (Zippenhop LLC) for reporting this issue * ) SECURITY: CVE-2022-28615: Read beyond bounds in ap_strcmp_match() (cve.mitre.org) Apache HTTP Server 2.4.53 and earlier may crash or disclose information due to a read beyond bounds in ap_strcmp_match() when provided with an extremely large input buffer. While no code distributed with the server can be coerced into such a call, third-party modules or lua scripts that use ap_strcmp_match() may hypothetically be affected. Credits: The Apache HTTP Server project would like to thank Ronald Crane (Zippenhop LLC) for reporting this issue * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite() (cve.mitre.org) The ap_rwrite() function in Apache HTTP Server 2.4.53 and earlier may read unintended memory if an attacker can cause the server to reflect very large input using ap_rwrite() or ap_rputs(), such as with mod_luas r:puts() function. Credits: The Apache HTTP Server project would like to thank Ronald Crane (Zippenhop LLC) for reporting this issue * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi (cve.mitre.org) Apache HTTP Server 2.4.53 and earlier on Windows may read beyond bounds when configured to process requests with the mod_isapi module. Credits: The Apache HTTP Server project would like to thank Ronald Crane (Zippenhop LLC) for reporting this issue * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request smuggling (cve.mitre.org) Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.53 and prior versions. Credits: Ricter Z @ 360 Noah Lab * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0. PR 66063. [Petr Sumbera <petr.sumbera oracle.com>, Yann Ylavic] * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue. PR 65666. [Yann Ylavic] * ) mod_md: a bug was fixed that caused very large MDomains with the combined DNS names exceeding ~7k to fail, as request bodies would contain partially wrong data from uninitialized memory. This would have appeared as failure in signing-up/renewing such configurations. [Stefan Eissing, Ronald Crane (Zippenhop LLC)] * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue. PR 65666. [Yann Ylavic] * ) MPM event: Restart children processes killed before idle maintenance. PR 65769. [Yann Ylavic, Ruediger Pluem] * ) ab: Allow for TLSv1.3 when the SSL library supports it. [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic] * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce transmission delays. PR 66019. [Yann Ylavic] * ) MPM event: Fix accounting of active/total processes on ungraceful restart, PR 66004 (follow up to PR 65626 from 2.4.52). [Yann Ylavic] * ) core: make ap_escape_quotes() work correctly on strings with more than MAX_INT/2 characters, counting quotes double. Credit to <generalbugs(a)zippenhop.com> for finding this. [Stefan Eissing] * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of an ACME CA. This gives a failover for renewals when several consecutive attempts to get a certificate failed. A new directive was added: `MDRetryDelay` sets the delay of retries. A new directive was added: `MDRetryFailover` sets the number of errored attempts before an alternate CA is selected for certificate renewals. [Stefan Eissing] * ) mod_http2: remove unused and insecure code. Fixes PR66037. Thanks to Ronald Crane (Zippenhop LLC) for reporting this. [Stefan Eissing] * ) mod_proxy: Add backend port to log messages to ease identification of involved service. [Rainer Jung] * ) mod_http2: removing unscheduling of ongoing tasks when connection shows potential abuse by a client. This proved counter-productive and the abuse detection can false flag requests using server-side-events. Fixes <https://github.com/icing/mod_h2/issues/231>. [Stefan Eissing] * ) mod_md: Implement full auto status ("key: value" type status output). Especially not only status summary counts for certificates and OCSP stapling but also lists. Auto status format is similar to what was used for mod_proxy_balancer. [Rainer Jung] * ) mod_md: fixed a bug leading to failed transfers for OCSP stapling information when more than 6 certificates needed updates in the same run. [Stefan Eissing] * ) mod_proxy: Set a status code of 502 in case the backend just closed the connection in reply to our forwarded request. [Ruediger Pluem] * ) mod_md: a possible NULL pointer deref was fixed in the JSON code for persisting time periods (start+end). Fixes #282 on mod_md's github. Thanks to @marcstern for finding this. [Stefan Eissing] * ) mod_heartmonitor: Set the documented default value "10" for HeartbeatMaxServers instead of "0". With "0" no shared memory slotmem was initialized. [Rainer Jung] * ) mod_md: added support for managing certificates via a local tailscale daemon for users of that secure networking. This gives trusted certificates for tailscale assigned domain names in the *.ts.net space. [Stefan Eissing] - modified patches % apache-test-application-xml-type.patch (refreshed) % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed) % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed) ==== apache2-manual ==== Version update (2.4.53 -> 2.4.54) - update httpd-framework to svn revision 1898917 - version update to 2.4.54 Changes with Apache 2.4.54 * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism (cve.mitre.org) Apache HTTP Server 2.4.53 and earlier may not send the X-Forwarded-* headers to the origin server based on client side Connection header hop-by-hop mechanism. This may be used to bypass IP based authentication on the origin server/application. Credits: The Apache HTTP Server project would like to thank Gaetan Ferry (Synacktiv) for reporting this issue * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with websockets (cve.mitre.org) Apache HTTP Server 2.4.53 and earlier may return lengths to applications calling r:wsread() that point past the end of the storage allocated for the buffer. Credits: The Apache HTTP Server project would like to thank Ronald Crane (Zippenhop LLC) for reporting this issue * ) SECURITY: CVE-2022-30522: mod_sed denial of service (cve.mitre.org) If Apache HTTP Server 2.4.53 is configured to do transformations with mod_sed in contexts where the input to mod_sed may be very large, mod_sed may make excessively large memory allocations and trigger an abort. Credits: This issue was found by Brian Moussalli from the JFrog Security Research team * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua r:parsebody (cve.mitre.org) In Apache HTTP Server 2.4.53 and earlier, a malicious request to a lua script that calls r:parsebody(0) may cause a denial of service due to no default limit on possible input size. Credits: The Apache HTTP Server project would like to thank Ronald Crane (Zippenhop LLC) for reporting this issue * ) SECURITY: CVE-2022-28615: Read beyond bounds in ap_strcmp_match() (cve.mitre.org) Apache HTTP Server 2.4.53 and earlier may crash or disclose information due to a read beyond bounds in ap_strcmp_match() when provided with an extremely large input buffer. While no code distributed with the server can be coerced into such a call, third-party modules or lua scripts that use ap_strcmp_match() may hypothetically be affected. Credits: The Apache HTTP Server project would like to thank Ronald Crane (Zippenhop LLC) for reporting this issue * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite() (cve.mitre.org) The ap_rwrite() function in Apache HTTP Server 2.4.53 and earlier may read unintended memory if an attacker can cause the server to reflect very large input using ap_rwrite() or ap_rputs(), such as with mod_luas r:puts() function. Credits: The Apache HTTP Server project would like to thank Ronald Crane (Zippenhop LLC) for reporting this issue * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi (cve.mitre.org) Apache HTTP Server 2.4.53 and earlier on Windows may read beyond bounds when configured to process requests with the mod_isapi module. Credits: The Apache HTTP Server project would like to thank Ronald Crane (Zippenhop LLC) for reporting this issue * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request smuggling (cve.mitre.org) Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.53 and prior versions. Credits: Ricter Z @ 360 Noah Lab * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0. PR 66063. [Petr Sumbera <petr.sumbera oracle.com>, Yann Ylavic] * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue. PR 65666. [Yann Ylavic] * ) mod_md: a bug was fixed that caused very large MDomains with the combined DNS names exceeding ~7k to fail, as request bodies would contain partially wrong data from uninitialized memory. This would have appeared as failure in signing-up/renewing such configurations. [Stefan Eissing, Ronald Crane (Zippenhop LLC)] * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue. PR 65666. [Yann Ylavic] * ) MPM event: Restart children processes killed before idle maintenance. PR 65769. [Yann Ylavic, Ruediger Pluem] * ) ab: Allow for TLSv1.3 when the SSL library supports it. [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic] * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce transmission delays. PR 66019. [Yann Ylavic] * ) MPM event: Fix accounting of active/total processes on ungraceful restart, PR 66004 (follow up to PR 65626 from 2.4.52). [Yann Ylavic] * ) core: make ap_escape_quotes() work correctly on strings with more than MAX_INT/2 characters, counting quotes double. Credit to <generalbugs(a)zippenhop.com> for finding this. [Stefan Eissing] * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of an ACME CA. This gives a failover for renewals when several consecutive attempts to get a certificate failed. A new directive was added: `MDRetryDelay` sets the delay of retries. A new directive was added: `MDRetryFailover` sets the number of errored attempts before an alternate CA is selected for certificate renewals. [Stefan Eissing] * ) mod_http2: remove unused and insecure code. Fixes PR66037. Thanks to Ronald Crane (Zippenhop LLC) for reporting this. [Stefan Eissing] * ) mod_proxy: Add backend port to log messages to ease identification of involved service. [Rainer Jung] * ) mod_http2: removing unscheduling of ongoing tasks when connection shows potential abuse by a client. This proved counter-productive and the abuse detection can false flag requests using server-side-events. Fixes <https://github.com/icing/mod_h2/issues/231>. [Stefan Eissing] * ) mod_md: Implement full auto status ("key: value" type status output). Especially not only status summary counts for certificates and OCSP stapling but also lists. Auto status format is similar to what was used for mod_proxy_balancer. [Rainer Jung] * ) mod_md: fixed a bug leading to failed transfers for OCSP stapling information when more than 6 certificates needed updates in the same run. [Stefan Eissing] * ) mod_proxy: Set a status code of 502 in case the backend just closed the connection in reply to our forwarded request. [Ruediger Pluem] * ) mod_md: a possible NULL pointer deref was fixed in the JSON code for persisting time periods (start+end). Fixes #282 on mod_md's github. Thanks to @marcstern for finding this. [Stefan Eissing] * ) mod_heartmonitor: Set the documented default value "10" for HeartbeatMaxServers instead of "0". With "0" no shared memory slotmem was initialized. [Rainer Jung] * ) mod_md: added support for managing certificates via a local tailscale daemon for users of that secure networking. This gives trusted certificates for tailscale assigned domain names in the *.ts.net space. [Stefan Eissing] - modified patches % apache-test-application-xml-type.patch (refreshed) % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed) % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed) ==== apache2-mod_php7 ==== Version update (7.4.29 -> 7.4.30) - version update to 7.4.30 * This is a security release. https://www.php.net/ChangeLog-7.php#7.4.30 ==== apache2-prefork ==== Version update (2.4.53 -> 2.4.54) - update httpd-framework to svn revision 1898917 - version update to 2.4.54 Changes with Apache 2.4.54 * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism (cve.mitre.org) Apache HTTP Server 2.4.53 and earlier may not send the X-Forwarded-* headers to the origin server based on client side Connection header hop-by-hop mechanism. This may be used to bypass IP based authentication on the origin server/application. Credits: The Apache HTTP Server project would like to thank Gaetan Ferry (Synacktiv) for reporting this issue * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with websockets (cve.mitre.org) Apache HTTP Server 2.4.53 and earlier may return lengths to applications calling r:wsread() that point past the end of the storage allocated for the buffer. Credits: The Apache HTTP Server project would like to thank Ronald Crane (Zippenhop LLC) for reporting this issue * ) SECURITY: CVE-2022-30522: mod_sed denial of service (cve.mitre.org) If Apache HTTP Server 2.4.53 is configured to do transformations with mod_sed in contexts where the input to mod_sed may be very large, mod_sed may make excessively large memory allocations and trigger an abort. Credits: This issue was found by Brian Moussalli from the JFrog Security Research team * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua r:parsebody (cve.mitre.org) In Apache HTTP Server 2.4.53 and earlier, a malicious request to a lua script that calls r:parsebody(0) may cause a denial of service due to no default limit on possible input size. Credits: The Apache HTTP Server project would like to thank Ronald Crane (Zippenhop LLC) for reporting this issue * ) SECURITY: CVE-2022-28615: Read beyond bounds in ap_strcmp_match() (cve.mitre.org) Apache HTTP Server 2.4.53 and earlier may crash or disclose information due to a read beyond bounds in ap_strcmp_match() when provided with an extremely large input buffer. While no code distributed with the server can be coerced into such a call, third-party modules or lua scripts that use ap_strcmp_match() may hypothetically be affected. Credits: The Apache HTTP Server project would like to thank Ronald Crane (Zippenhop LLC) for reporting this issue * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite() (cve.mitre.org) The ap_rwrite() function in Apache HTTP Server 2.4.53 and earlier may read unintended memory if an attacker can cause the server to reflect very large input using ap_rwrite() or ap_rputs(), such as with mod_luas r:puts() function. Credits: The Apache HTTP Server project would like to thank Ronald Crane (Zippenhop LLC) for reporting this issue * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi (cve.mitre.org) Apache HTTP Server 2.4.53 and earlier on Windows may read beyond bounds when configured to process requests with the mod_isapi module. Credits: The Apache HTTP Server project would like to thank Ronald Crane (Zippenhop LLC) for reporting this issue * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request smuggling (cve.mitre.org) Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.53 and prior versions. Credits: Ricter Z @ 360 Noah Lab * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0. PR 66063. [Petr Sumbera <petr.sumbera oracle.com>, Yann Ylavic] * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue. PR 65666. [Yann Ylavic] * ) mod_md: a bug was fixed that caused very large MDomains with the combined DNS names exceeding ~7k to fail, as request bodies would contain partially wrong data from uninitialized memory. This would have appeared as failure in signing-up/renewing such configurations. [Stefan Eissing, Ronald Crane (Zippenhop LLC)] * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue. PR 65666. [Yann Ylavic] * ) MPM event: Restart children processes killed before idle maintenance. PR 65769. [Yann Ylavic, Ruediger Pluem] * ) ab: Allow for TLSv1.3 when the SSL library supports it. [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic] * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce transmission delays. PR 66019. [Yann Ylavic] * ) MPM event: Fix accounting of active/total processes on ungraceful restart, PR 66004 (follow up to PR 65626 from 2.4.52). [Yann Ylavic] * ) core: make ap_escape_quotes() work correctly on strings with more than MAX_INT/2 characters, counting quotes double. Credit to <generalbugs(a)zippenhop.com> for finding this. [Stefan Eissing] * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of an ACME CA. This gives a failover for renewals when several consecutive attempts to get a certificate failed. A new directive was added: `MDRetryDelay` sets the delay of retries. A new directive was added: `MDRetryFailover` sets the number of errored attempts before an alternate CA is selected for certificate renewals. [Stefan Eissing] * ) mod_http2: remove unused and insecure code. Fixes PR66037. Thanks to Ronald Crane (Zippenhop LLC) for reporting this. [Stefan Eissing] * ) mod_proxy: Add backend port to log messages to ease identification of involved service. [Rainer Jung] * ) mod_http2: removing unscheduling of ongoing tasks when connection shows potential abuse by a client. This proved counter-productive and the abuse detection can false flag requests using server-side-events. Fixes <https://github.com/icing/mod_h2/issues/231>. [Stefan Eissing] * ) mod_md: Implement full auto status ("key: value" type status output). Especially not only status summary counts for certificates and OCSP stapling but also lists. Auto status format is similar to what was used for mod_proxy_balancer. [Rainer Jung] * ) mod_md: fixed a bug leading to failed transfers for OCSP stapling information when more than 6 certificates needed updates in the same run. [Stefan Eissing] * ) mod_proxy: Set a status code of 502 in case the backend just closed the connection in reply to our forwarded request. [Ruediger Pluem] * ) mod_md: a possible NULL pointer deref was fixed in the JSON code for persisting time periods (start+end). Fixes #282 on mod_md's github. Thanks to @marcstern for finding this. [Stefan Eissing] * ) mod_heartmonitor: Set the documented default value "10" for HeartbeatMaxServers instead of "0". With "0" no shared memory slotmem was initialized. [Rainer Jung] * ) mod_md: added support for managing certificates via a local tailscale daemon for users of that secure networking. This gives trusted certificates for tailscale assigned domain names in the *.ts.net space. [Stefan Eissing] - modified patches % apache-test-application-xml-type.patch (refreshed) % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed) % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed) ==== apache2-utils ==== Version update (2.4.53 -> 2.4.54) - update httpd-framework to svn revision 1898917 - version update to 2.4.54 Changes with Apache 2.4.54 * ) SECURITY: CVE-2022-31813: mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism (cve.mitre.org) Apache HTTP Server 2.4.53 and earlier may not send the X-Forwarded-* headers to the origin server based on client side Connection header hop-by-hop mechanism. This may be used to bypass IP based authentication on the origin server/application. Credits: The Apache HTTP Server project would like to thank Gaetan Ferry (Synacktiv) for reporting this issue * ) SECURITY: CVE-2022-30556: Information Disclosure in mod_lua with websockets (cve.mitre.org) Apache HTTP Server 2.4.53 and earlier may return lengths to applications calling r:wsread() that point past the end of the storage allocated for the buffer. Credits: The Apache HTTP Server project would like to thank Ronald Crane (Zippenhop LLC) for reporting this issue * ) SECURITY: CVE-2022-30522: mod_sed denial of service (cve.mitre.org) If Apache HTTP Server 2.4.53 is configured to do transformations with mod_sed in contexts where the input to mod_sed may be very large, mod_sed may make excessively large memory allocations and trigger an abort. Credits: This issue was found by Brian Moussalli from the JFrog Security Research team * ) SECURITY: CVE-2022-29404: Denial of service in mod_lua r:parsebody (cve.mitre.org) In Apache HTTP Server 2.4.53 and earlier, a malicious request to a lua script that calls r:parsebody(0) may cause a denial of service due to no default limit on possible input size. Credits: The Apache HTTP Server project would like to thank Ronald Crane (Zippenhop LLC) for reporting this issue * ) SECURITY: CVE-2022-28615: Read beyond bounds in ap_strcmp_match() (cve.mitre.org) Apache HTTP Server 2.4.53 and earlier may crash or disclose information due to a read beyond bounds in ap_strcmp_match() when provided with an extremely large input buffer. While no code distributed with the server can be coerced into such a call, third-party modules or lua scripts that use ap_strcmp_match() may hypothetically be affected. Credits: The Apache HTTP Server project would like to thank Ronald Crane (Zippenhop LLC) for reporting this issue * ) SECURITY: CVE-2022-28614: read beyond bounds via ap_rwrite() (cve.mitre.org) The ap_rwrite() function in Apache HTTP Server 2.4.53 and earlier may read unintended memory if an attacker can cause the server to reflect very large input using ap_rwrite() or ap_rputs(), such as with mod_luas r:puts() function. Credits: The Apache HTTP Server project would like to thank Ronald Crane (Zippenhop LLC) for reporting this issue * ) SECURITY: CVE-2022-28330: read beyond bounds in mod_isapi (cve.mitre.org) Apache HTTP Server 2.4.53 and earlier on Windows may read beyond bounds when configured to process requests with the mod_isapi module. Credits: The Apache HTTP Server project would like to thank Ronald Crane (Zippenhop LLC) for reporting this issue * ) SECURITY: CVE-2022-26377: mod_proxy_ajp: Possible request smuggling (cve.mitre.org) Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.53 and prior versions. Credits: Ricter Z @ 360 Noah Lab * ) mod_ssl: SSLFIPS compatible with OpenSSL 3.0. PR 66063. [Petr Sumbera <petr.sumbera oracle.com>, Yann Ylavic] * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue. PR 65666. [Yann Ylavic] * ) mod_md: a bug was fixed that caused very large MDomains with the combined DNS names exceeding ~7k to fail, as request bodies would contain partially wrong data from uninitialized memory. This would have appeared as failure in signing-up/renewing such configurations. [Stefan Eissing, Ronald Crane (Zippenhop LLC)] * ) mod_proxy_http: Avoid 417 responses for non forwardable 100-continue. PR 65666. [Yann Ylavic] * ) MPM event: Restart children processes killed before idle maintenance. PR 65769. [Yann Ylavic, Ruediger Pluem] * ) ab: Allow for TLSv1.3 when the SSL library supports it. [abhilash1232 gmail.com, xiaolongx.jiang intel.com, Yann Ylavic] * ) core: Disable TCP_NOPUSH optimization on OSX since it might introduce transmission delays. PR 66019. [Yann Ylavic] * ) MPM event: Fix accounting of active/total processes on ungraceful restart, PR 66004 (follow up to PR 65626 from 2.4.52). [Yann Ylavic] * ) core: make ap_escape_quotes() work correctly on strings with more than MAX_INT/2 characters, counting quotes double. Credit to <generalbugs(a)zippenhop.com> for finding this. [Stefan Eissing] * ) mod_md: the `MDCertificateAuthority` directive can take more than one URL/name of an ACME CA. This gives a failover for renewals when several consecutive attempts to get a certificate failed. A new directive was added: `MDRetryDelay` sets the delay of retries. A new directive was added: `MDRetryFailover` sets the number of errored attempts before an alternate CA is selected for certificate renewals. [Stefan Eissing] * ) mod_http2: remove unused and insecure code. Fixes PR66037. Thanks to Ronald Crane (Zippenhop LLC) for reporting this. [Stefan Eissing] * ) mod_proxy: Add backend port to log messages to ease identification of involved service. [Rainer Jung] * ) mod_http2: removing unscheduling of ongoing tasks when connection shows potential abuse by a client. This proved counter-productive and the abuse detection can false flag requests using server-side-events. Fixes <https://github.com/icing/mod_h2/issues/231>. [Stefan Eissing] * ) mod_md: Implement full auto status ("key: value" type status output). Especially not only status summary counts for certificates and OCSP stapling but also lists. Auto status format is similar to what was used for mod_proxy_balancer. [Rainer Jung] * ) mod_md: fixed a bug leading to failed transfers for OCSP stapling information when more than 6 certificates needed updates in the same run. [Stefan Eissing] * ) mod_proxy: Set a status code of 502 in case the backend just closed the connection in reply to our forwarded request. [Ruediger Pluem] * ) mod_md: a possible NULL pointer deref was fixed in the JSON code for persisting time periods (start+end). Fixes #282 on mod_md's github. Thanks to @marcstern for finding this. [Stefan Eissing] * ) mod_heartmonitor: Set the documented default value "10" for HeartbeatMaxServers instead of "0". With "0" no shared memory slotmem was initialized. [Rainer Jung] * ) mod_md: added support for managing certificates via a local tailscale daemon for users of that secure networking. This gives trusted certificates for tailscale assigned domain names in the *.ts.net space. [Stefan Eissing] - modified patches % apache-test-application-xml-type.patch (refreshed) % apache-test-turn-off-variables-in-ssl-var-lookup.patch (refreshed) % apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch (refreshed) ==== bluedevil5 ==== Version update (5.24.5 -> 5.25.0) Subpackages: bluedevil5-lang - Update to 5.25.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.0 - Changes since 5.24.90: * Use appropriate jobs to lauch helpers * Fix single instance window activation on Wayland - Update to 5.24.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.90 - Changes since 5.24.5: * DeviceItem: Port to contextualActionsModel * applet: Make placeholder text consistent with what's in the KCM * KCM: Add icons to PlaceholderMessage instances * applet: put PlaceholderMessage in a Loader to save a bit of memory * applet: give PlaceholderMessage an icon * applet: use common property to get list emptiness status * Add qt6 CI support * It's enabled in qt6 * Port to PlasmaExtras version of Highlight * [wizard] Don't set minimum size * install plugins in kf<version> * kded/devicemonitor: Check BlueDevilDaemon exists when calling login1PrepareForSleep (kde#450195) * Make it compile against qt6 * Remove unused Exec entry * applet: set contentWidth properly * applet: remove unnecessary delegate width override * [applet] Fix undefined property access * [applet] Add a bit of small spacing on the left of the checkbox * [applet] Replace == equality with strict === equality in JavaScript * Fix "Enable bluetooth" button * Remove redundant saveState call * applet: Toggle Bluetooth status on middle-click (kde#427816) ==== breeze ==== Version update (5.24.5 -> 5.25.0) Subpackages: breeze5-cursors breeze5-decoration breeze5-style breeze5-style-lang libbreezecommon5-5 - Update to 5.25.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.0 - Changes since 5.24.90: * kstyle: fix qqc2 desktop style sliders in RtL (kde#430101) * Fix mixup of PM_ToolBarItemMargin & PM_ToolBarFrameWidth - Update to 5.24.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.90 - Too many changes to list here ==== breeze-gtk ==== Version update (5.24.5 -> 5.25.0) Subpackages: gtk2-metatheme-breeze gtk3-metatheme-breeze metatheme-breeze-common - Update to 5.25.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.0 - Changes since 5.24.90: * GTK3,4: Make checkbox colors a pixel-perfect copy of QStyle * assets: Make checkmark a pixel-perfect copy of qstyle - Update to 5.24.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.90 - Too many changes to list here ==== discover ==== Version update (5.24.5 -> 5.25.0) Subpackages: discover-backend-flatpak discover-backend-fwupd discover-backend-packagekit discover-lang - Update to 5.25.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.0 - Changes since 5.24.90: * PackageKit backend: fix searching for appstream id's without .desktop suffix * Clean up Kirigami.Heading code a bit * ApplicationPage: standardize on whitespace between sections * flatpak notifier: Be more precise about when notifying about updates * flatpak notifier: Do not set up twice the system installation * notifier: Pass a token when we are starting from a notification - Update to 5.24.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.90 - Too many changes to list here ==== drkonqi5 ==== Version update (5.24.5 -> 5.25.0) Subpackages: drkonqi5-lang - Update to 5.25.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.0 - Changes since 5.24.90: * remove wrong visibility toggle (kde#454927) * allow navigating back to the mainpage (kde#453989) * DeveloperPage: do not automatically hide Save and Copy actions * DeveloperPage: Remove extra padding on the backtrace - Update to 5.24.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.90 - Too many changes to list here ==== glibmm2_4 ==== Version update (2.66.2 -> 2.66.4) Subpackages: libgiomm-2_4-1 libglibmm-2_4-1 - Update to version 2.66.4: + Glib: ustring_Iterator: Don't declare copy constructor =default. The fix in the 2.66.3 release broke ABI. (Kjell Ahlstedt) Issue #98 (Scotty Trees) ==== gnome-bluetooth ==== Version update (42.0 -> 42.1) Subpackages: gnome-bluetooth-lang libgnome-bluetooth-3_0-13 libgnome-bluetooth-ui-3_0-13 typelib-1_0-GnomeBluetooth-3_0 - Update to version 42.1: + Fix the display of devices with '&' in their names. + Updated translations. ==== inxi ==== Version update (3.3.16 -> 3.3.17) - - Updated to version 3.3.17: * /usr/share/doc/packages/inxi/inxi.changelog. ==== kactivitymanagerd ==== Version update (5.24.5 -> 5.25.0) Subpackages: kactivitymanagerd-lang - Update to 5.25.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.0 - No code changes since 5.24.90 - Update to 5.24.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.90 - Changes since 5.24.5: * Remove dependency on Boost.Container * Add unistd.h include for sleep() * Fix XML parser porting regression * Add Qt6 CI * Don't advertise debug stream operator publicly if we don't export it * Port to KApplicationTrader * Port to QXmlStreamReader * Fix some compile errors against qt6 * Fix DBus service name registration ==== kcm_sddm ==== Version update (5.24.5 -> 5.25.0) Subpackages: kcm_sddm-lang - Update to 5.25.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.0 - Changes since 5.24.90: * Fix broken connect in NewStuff.Action QML component usage (kde#454884) * Clear cache when syncing (kde#440957) * Re-enable apply button on save failure (kde#429348) * Avoid empty error box (kde#413032) - Update to 5.24.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.90 - Changes since 5.24.5: * Make the Halt and Reboot Commands' text fields editable * Add Qt6 CI support * Add support for new kauth includes * Allow to build against qt6 ==== kde-cli-tools5 ==== Version update (5.24.5 -> 5.25.0) Subpackages: kde-cli-tools5-lang - Update to 5.25.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.0 - No code changes since 5.24.90 - Update to 5.24.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.90 - Changes since 5.24.5: * Disable more deprecated fallback code paths * Wrap deprecated API usage KCMShell in deprecation wrappers * Qt::AA_UseHighDpiPixmaps is enabled by default in qt6 * Remaining bits to build with Qt6 * Remove ktraderclient for 6 * Port from KMimeTypeTrader to KParts::PartLoader * Start to adapt build system for building against qt6 * kioclient: improve the format of the usage/help message * plasma-open-settings: Support passing args as the path of the URL * Remove explicit QuickSettings init method call * plasma-open-settings: systemsettings5 is now systemsettings * [keditfiletype] Set proper name in desktop file * Convert KCM desktop file to JSON * kcmshell: List KCMs that are queried without KServiceTypeTrader (kde#448396) ==== kde-gtk-config5 ==== Version update (5.24.5 -> 5.25.0) Subpackages: kde-gtk-config5-gtk3 - Update to 5.25.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.0 - No code changes since 5.24.90 - Update to 5.24.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.90 - Changes since 5.24.5: * Prepare build system for building against qt6 * Port deprecated method * Use the right data type for globalAnimationEntryValue * Use Header palette if exists ==== kgamma5 ==== Version update (5.24.5 -> 5.25.0) Subpackages: kgamma5-lang - Update to 5.25.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.0 - No code changes since 5.24.90 - Update to 5.24.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.90 - Changes since 5.24.5: * Add qt6 CI support * Allow to build against qt6 ==== khotkeys5 ==== Version update (5.24.5 -> 5.25.0) Subpackages: khotkeys5-lang - Update to 5.25.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.0 - No code changes since 5.24.90 - Update to 5.24.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.90 - Changes since 5.24.5: * docbook: Update settings.png * Only show KCM when on X11 ==== kinfocenter5 ==== Version update (5.24.5 -> 5.25.0) Subpackages: kinfocenter5-lang - Update to 5.25.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.0 - Changes since 5.24.90: * redirect stderr to stdout (kde#454197) - Fix 0002-Look-for-binaries-in-Mesa-demos-path-as-well.patch (boo#1199975) - Update to 5.24.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.90 - Changes since 5.24.5: * Fix about distro KCM not being able to be pinned * Fix: Iterate with std::as_const, to avoid copying vector * Finishing touches for the Qt6 build * Use non-deprecated KAuth includes * modules/about-distro: use standard inner margins for page * modules/about-distro: simplify spacing before "open in Info Center" button * modules/about-distro: remove bottom padding from page (kde#452437) * Explicitly set parent app for energyinfo KCM * Add some DMI data to about-distro * Hide filter bar when showing an error message * Display more informative and actionable error messages * Use not deprecated ECMFindQmlModule * Fix install against qt6 * Also horizontally center the error messages in their pages * new module firmware security * Allow to build against qt6 * fix up help paths (kde#450918) * about-distro: remove unnecessary spacers above sections * Search in /usr/local/sbin:/usr/sbin:/sbin as fallback (kde#449792) * Add plasma-systemmonitor as the dependency of kinfocenter * Don't use deprecated variable * Drop unnecessary KIconThemes dependency - Refresh 0002-Look-for-binaries-in-Mesa-demos-path-as-well.patch ==== kmenuedit5 ==== Version update (5.24.5 -> 5.25.0) Subpackages: kmenuedit5-lang - Update to 5.25.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.0 - No code changes since 5.24.90 - Update to 5.24.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.90 - Changes since 5.24.5: * Raise window when activating instance * Add Qt6 CI support * Make compile against qt6 * Fix some qt6 compile error * Adapt build system for building against qt6 * Make it appear in launchers and app stores * Set SingleMainWindow=true * Kdelibs4ConfigMigrator will be removed in qt6 ==== kscreen5 ==== Version update (5.24.5 -> 5.25.0) Subpackages: kscreen5-lang kscreen5-plasmoid - Update to 5.25.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.0 - Changes since 5.24.90: * kcm: Make screen area use full width * kcm: Don't force width of screens area * X11: fix kded xcb resource leak (kde#453280) - Update to 5.24.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.90 - Changes since 5.24.5: * plasmoid: Copy InhibitionHint from battery applet * plasmoid: Fix leftMargin expression and delete dummy invisible CheckBox * plasmoid: Port to PlasmaComponents3 * plasmoid: Port away from theme context property to PlasmaCore.Theme fonts * plasmoid: Pass down screenLayouts model explicitly through a property * plasmoid: Fix JavaScript code style * plasmoid: Port away from plasmoid context property to attached Plasmoid * plasmoid: Port away from unit context property to PlasmaCore.Units * OSD: Don't wrap current index around when holding left/right key * Add test checking when we connect an external monitor while the device is rotated * Fix connecting external monitors when a monitor is rotated * readability: construct qbytearray directly instead of going through qstring * kcm: fix choosing the refresh rate * kcm: fix refresh rate list not being updated (kde#453392) * Prefer more common aspect ratios over correct math (kde#443764) * KCM: Explain what overscan and rgb range do (kde#442549) * kcm: hide the whole "Primary" RowLayout with only one screen * kcm: fixup 1b9b190d1f00e6287e7afc3d9b493d3aa04d1f85 (bad indentation) * KCM: Explain what being the Primary screen means * KCM: Center Orientation label when there's no automatic options * kcm: port checkboxes and radio buttons to use onToggled signal handlers * kcm: use correct left spacing for intended checkbox * kcm: Use KConfigXt to manage global scale * kcm: Use qmlRegisterAnonymousType * X11: align touchscreen to internal display (kde#415683) * KCM: fix crash when editing disabled display output's refresh rate (kde#450265) * [kcm] Only enable revert action when revert sheet is open (kde#449931) * Ensure to emit ResolutionRole dataChanged signals (kde#448855) * Use more generic name for panel connectors ==== kscreenlocker ==== Version update (5.24.5 -> 5.25.0) Subpackages: kscreenlocker-lang libKScreenLocker5 - Update to 5.25.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.0 - Changes since 5.24.90: * Handle fallback packages when checking for screenlocker API version * Wait for screenlocker UI to call close * Remove old non-compliant Ctrl+Alt+L shortcut that interferes with apps (kde#454397) - Update to 5.24.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.90 - Changes since 5.24.5: * Disable logind integration for kwin's unit tests * Add fallback to the absolute path to kscreenlocker_greet (kde#452817) * Guard double authenticate calls * Fix two minor Qt6 build regressions * Cleanup kcheckpass * Plasma 5.25 brings breaking API changes to the lockscreen * Port screen geometry change handling away from QDesktopWidget * Don't recommend current session * Port away from deprecated KDeclarative API * kcm: Fix the load of wallpaper kcms (kde#452757) * Port away from KWayland::Server * Remove uneeded default args for plugin constructors * Port away from using KAboutData with KCMs * Install KCM in new namespaces * De-duplicate json metadata of KPackages * Remove explicit QuickSettings init method call * Use PACKAGE_PREFIX_DIR before any find_dependency() calls * Make the CMake config file work in a Qt6 build as well * Adapt build system to also support Qt6 * Port from KDeclarative::ConfigPropertyMap to KConfigPropertyMap * Adapt to Layer Shell Qt API change * Add form factors to embedded json metadata * Port to KLibexec ==== ksshaskpass5 ==== Version update (5.24.5 -> 5.25.0) Subpackages: ksshaskpass5-lang - Update to 5.25.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.0 - No code changes since 5.24.90 - Update to 5.24.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.90 - Changes since 5.24.5: * Don't pretend we have a parent window for opening the wallet * Adapt build system for building against qt6 (still missing porting * It compile file without deprecated methods ==== ksystemstats5 ==== Version update (5.24.5 -> 5.25.0) Subpackages: ksystemstats5-lang - Update to 5.25.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.0 - No code changes since 5.24.90 - Update to 5.24.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.90 - Changes since 5.24.5: * Add more network sensor * Add a window system sensor (kde#452461) * cmake: Make sure we also search for dbus interfaces in DESTDIR * Remove duplicate header between header cpp file * Add Qt6 CI * Allow to compile against qt6 * CPU Plugin: Prevent integer overflow of total usage (kde#448626) * Set proper initial values for many SensorProperties (kde#446414) * disks: Properly initialize read/write counters (kde#448494) ==== kwayland-integration ==== Version update (5.24.5 -> 5.25.0) - Update to 5.25.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.0 - Changes since 5.24.90: * Remove KGuiAddons dependency - Update to 5.24.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.90 - Changes since 5.24.5: * Ensure that xdgActivationTokenArrived is not emitted directly from requestXdgActivationToken * Finalize the Qt6/KF6 port and add Qt6 CI * Remove modifierkeyinfo plugin * Adapt build system for building against qt6 * Prevent double deletion of shmpools (kde#443706) ==== kwin5 ==== Version update (5.24.5 -> 5.25.0) Subpackages: kwin5-lang - Update to 5.25.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.0 - Too many changes to list here - Update to 5.24.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.90 - Too many changes to list here - Refresh 0001-Export-consistent-hostname-as-XAUTHLOCALHOSTNAME.patch ==== kwrited5 ==== Version update (5.24.5 -> 5.25.0) - Update to 5.25.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.0 - No code changes since 5.24.90 - Update to 5.24.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.90 - Changes since 5.24.5: * Install in kf<version> * Add CI qt6 support * Make it compile against qt6 ==== layer-shell-qt ==== Version update (5.24.5 -> 5.25.0) - Update to 5.25.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.0 - Changes since 5.24.90: * Mark required deps as required (kde#454912) - Update to 5.24.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.90 - Changes since 5.24.5: * Minor api doc improvement for api.kde.org * Build with Qt6 * Add desiredScreen property to LayerShellQt::Window ==== libkdecoration2 ==== Version update (5.24.5 -> 5.25.0) Subpackages: libkdecorations2-5 libkdecorations2-5-lang libkdecorations2private9 - Update to 5.25.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.0 - No code changes since 5.24.90 - Update to 5.24.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.90 - Changes since 5.24.5: * Add RtL support (kde#432390) * Hide tooltip when pressing button * decoration:add blurregion property * Add KF6 build support and CI ==== libkscreen2 ==== Version update (5.24.5 -> 5.25.0) Subpackages: libKF5Screen7 libkscreen2-plugin - Update to 5.25.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.0 - Changes since 5.24.90: * Remove CI dependency on kwayland-server as that is no longer a thing. - Update to 5.24.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.90 - Changes since 5.24.5: * Use const'ref * Delete proxy for PrimaryOutput wayland interface in destructor (kde#451847) * Adapt recent DPMS changes to also build with Qt6 * [doctor] Port dpms handling to QtWaylandScanner * Adapt build system to also support Qt6 * backends/kwayland: Use output name to guess output type * Update required PlasmaWaylandProtocols version ==== libksysguard5 ==== Version update (5.24.5 -> 5.25.0) Subpackages: ksysguardsystemstats-data libKSysGuardSystemStats1 libksysguard5-imports libksysguard5-lang - Update to 5.25.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.0 - No code changes since 5.24.90 - Recommend the plugins package (boo#1199851) - Update to 5.24.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.90 - Too many changes to list here ==== milou5 ==== Version update (5.24.5 -> 5.25.0) Subpackages: milou5-lang - Update to 5.25.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.0 - Changes since 5.24.90: * ResultDelegate: Fix height binding loop on multiline (kde#454507) - Update to 5.24.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.90 - Changes since 5.24.5: * Remove duplicate header between header cpp file * MAke compile without deprecated method * Show all headers in qtc6 * Make compile against qt6 on CI * Adapt to build against qt6 * Remove douplicate timeout logic in RunnerResultsModel * Avoid sorting old results based on new query input string ==== oxygen5-sounds ==== Version update (5.24.5 -> 5.25.0) - Update to 5.25.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.0 - No code changes since 5.24.90 - Update to 5.24.90 - New package containing the now-split oxygen-sounds ==== php7 ==== Version update (7.4.29 -> 7.4.30) Subpackages: php7-cli php7-ctype php7-dom php7-gd php7-gettext php7-iconv php7-json php7-mbstring php7-mysql php7-openssl php7-pdo php7-sqlite php7-tokenizer php7-xmlreader php7-xmlwriter - version update to 7.4.30 * This is a security release. https://www.php.net/ChangeLog-7.php#7.4.30 ==== plasma-browser-integration ==== Version update (5.24.5 -> 5.25.0) Subpackages: plasma-browser-integration-lang - Update to 5.25.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.0 - No code changes since 5.24.90 - Update to 5.24.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.90 - Changes since 5.24.5: * It's enabled by default in qt6 * Add Qt5 Linux CI * Final touches to compile with Qt6 * Show headers in qtc6 * ignore build dir * Prepare build system for building against qt6 * Use HTTPS for link to KDE homepage * Fix typo in author's email * Use WeakSet to avoid memory leak * [Tabs Runner] Only list tabs from "normal" windows ==== plasma-nm5 ==== Version update (5.24.5 -> 5.25.0) Subpackages: plasma-nm5-lang plasma-nm5-openconnect plasma-nm5-openvpn plasma-nm5-pptp plasma-nm5-vpnc - Update to 5.25.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.0 - Changes since 5.24.90: * Add xdg activation support to captive portal notification - Update to 5.24.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.90 - Too many changes to list here ==== plasma5-addons ==== Version update (5.24.5 -> 5.25.0) Subpackages: plasma5-addons-lang - Update to 5.25.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.0 - Changes since 5.24.90: * [applets/konsoleprofiles] Fix invalid property error * wallpapers/potd: update accent color on image changed * Explicitly list relevant lunar phase events (kde#454801) * applets/dict: focus on input field on expanded - Update to 5.24.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.90 - Too many changes to list here - Needs newer GCC on Leap ==== plasma5-desktop ==== Version update (5.24.5 -> 5.25.0) Subpackages: plasma5-desktop-emojier plasma5-desktop-lang - Update to 5.25.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.0 - Changes since 5.24.90: * desktoppackage: use `dominant` color instead of `highlight` color * containments: add an application icon to the dragged location (kde#454581) * Drop hack after porting back to lastSpacer * containments/panel: fix Layout binding in `appletContainerComponent` (kde#454095,kde#454517) * Change default keyboard switching shortcut to Meta+Alt+K * desktoppackage: don't focus on panel when pressing applet shortcuts (kde#453166) * Fix icon applet positioning (kde#454105) * Fix applet background becoming opaque when no window is maximized (kde#454175) * kcms/ksplash: Fix 'None' entry not appearing last in the grid view (kde#451422) - Update to 5.24.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.90 - Too many changes to list here ==== plasma5-disks ==== Version update (5.24.5 -> 5.25.0) Subpackages: plasma5-disks-lang - Update to 5.25.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.0 - No code changes since 5.24.90 - Update to 5.24.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.90 - Changes since 5.24.5: * Use new kauth includes * compile fine without deprecated methods * Use new reuse-lint ci support * Add CI qt6 support * Make if compile against qt6 ==== plasma5-integration ==== Version update (5.24.5 -> 5.25.0) Subpackages: plasma5-integration-plugin plasma5-integration-plugin-lang - Update to 5.25.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.0 - Changes since 5.24.90: * QDbusMenuBar: properly handle app-wide menubars - Update to 5.24.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.90 - Changes since 5.24.5: * Remove duplicate header between header cpp file * Update unit test to reflect code changes * Fix qt6 cmake support * Port QX11Info * Adapt build system for building against qt6 * Initialise globals on startup (kde#452060) * WaylandIntegration: Install event filter * Unshadow variable * Exclude the kwin process when checking if we are in wayland * Use QWaylandClientExtension for wayland code * Initial support for building against Qt6 * const'ify variables * [KDEPlatformFileDialog] Don't do stat if baseUrl didn't change * It compiles file without deprecated methods * Move import QtQuickSettings into platformtheme * Gracefully handle invalid color scheme setting (kde#449613) * Avoid creating plasma APIs for non-toplevels ==== plasma5-openSUSE ==== Version update (84.87~git20220116T220745~fffd234 -> 84.87~git20220602T134713~22403ba) Subpackages: plasma5-defaults-openSUSE plasma5-theme-openSUSE plasma5-workspace-branding-openSUSE sddm-theme-openSUSE - Update to 5.25.0 - Update to version 84.87~git20220602T134713~22403ba: * Set ColorScheme=BreezeClassic in /etc/xdg/kdeglobals as well - Update to 5.24.90 ==== plasma5-pa ==== Version update (5.24.5 -> 5.25.0) Subpackages: plasma5-pa-lang - Update to 5.25.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.0 - No code changes since 5.24.90 - Update to 5.24.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.90 - Changes since 5.24.5: * Modernize code * applet: Add fallback icons in device view and stream view * Initalise member variable * Remove duplicate header between header cpp file * SpeakerTest: Fix subwoofer test (kde#445523) * We need kf5.90 for building against qt6 * Add Qt6 CI * applet: Fix logic to show virtual devices * gconf is long gone, always use gsettings * Add unmute message in both KCM and applet tooltip * [CI] Require passing unit tests * Speaker Test: Show playback errors in the UI * Applet: Hide virtual devices by default * Make compile against qt6 * [kcm] Update device combobox when current device changes externally * Make distinction between audio level and audio meter clear ==== plasma5-systemmonitor ==== Version update (5.24.5 -> 5.25.0) Subpackages: plasma5-systemmonitor-lang - Update to 5.25.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.0 - No code changes since 5.24.90 - Update to 5.24.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.90 - Changes since 5.24.5: * Fix activating running instance on Wayland * Set loadType to onstart for history page * Add a page option to allow preloading a page (kde#440402) * REmove duplicate header between header/file * Remove explicit QuickSettings init method call * Add CI support * It's enabled by default in qt6 * Fix compile against qt6 * Allow to build against qt6 * Do not use Control as container for config UI elements * Set "noMargins" to true for Applications and Processes pages (kde#447146) * Mark as single window app ==== plasma5-thunderbolt ==== Version update (5.24.5 -> 5.25.0) Subpackages: plasma5-thunderbolt-lang - Update to 5.25.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.0 - No code changes since 5.24.90 - Update to 5.24.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.90 - Changes since 5.24.5: * Add CI qt6 support * Make it compiles against qt6 ==== plasma5-workspace ==== Version update (5.24.5 -> 5.25.0) Subpackages: gmenudbusmenuproxy plasma5-session plasma5-session-wayland plasma5-workspace-lang plasma5-workspace-libs xembedsniproxy - Add patch to fix a multiscreen bug when PLASMA_USE_QT_SCALING=1 (kde#450443, https://invent.kde.org/plasma/plasma-workspace/-/merge_requests/1781) * 0001-shell-refresh-geometries-of-all-DesktopView-and-Pane.patch - Update to 5.25.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.0 - Too many changes to list here - Drop patches, now upstream: * 0001-startkde-Reload-systemd-on-Plasma-start.patch - Add patch to fix opensuse-welcome autostart disabling: * 0001-startkde-Reload-systemd-on-Plasma-start.patch - Update to 5.24.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.90 - Too many changes to list here - Drop patches, now upstream: * 0001-applets-appmenu-fix-top-level-menu-text-coloration.patch * 0001-kcms-desktoptheme-find-metadata.json-when-loading-Th.patch ==== polkit-kde-agent-5 ==== Version update (5.24.5 -> 5.25.0) Subpackages: polkit-kde-agent-5-lang - Update to 5.25.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.0 - No code changes since 5.24.90 - Update to 5.24.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.90 - Changes since 5.24.5: * Add Qt6 CI support * Make compile against qt6 ==== powerdevil5 ==== Version update (5.24.5 -> 5.25.0) Subpackages: powerdevil5-lang - Update to 5.25.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.0 - No code changes since 5.24.90 - Update to 5.24.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.90 - Changes since 5.24.5: * daemon/actions: remove unused variable * Remove unused KRun code * Use non-deprecated KAuth includes * Deduce pair types automatically * Remove unused includes * Adapt to QtX11Extras being gone in Qt6 * Use version-less install dir variables * Port away from QStringRef * Fix Commit 761fc8a4 * Add percentage display next to the brightness and keyboard backlight sliders in KCM (kde#440314) * Adapt build system for building against qt6 (need kscreen not ported yet) * Write brightness to all raw devices (kde#399646) * Fix signature in qt6 * Use new kauth includes * Improved backlight devices selection (kde#399646) * Support hardware with only one charging threshold, not both (kde#449997) * Use not deprecated SYSTEMD_USER_UNIT_INSTALL_DIR ==== python ==== - Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the command injection in the mailcap module. - Filter out executable-stack error that is triggered for i586 target. - Update bundled pip wheel to the latest SLE version patched against bsc#1186819 (CVE-2021-3572). - Recover again proper value of %python2_package_prefix (bsc#1175619). - BuildRequire rpm-build-python: The provider to inject python(abi) has been moved there. rpm-build pulls rpm-build-python automatically in when building anything against python3-base, but this implies that the initial build of python3-base does not trigger the automatic installation. - Older SLE versions should use old OpenSSL. - Add CVE-2022-0391-urllib_parse-newline-parsing.patch (bsc#1195396, CVE-2022-0391, bpo#43882) sanitizing URLs containing ASCII newline and tabs in urlparse. - Add CVE-2021-4189-ftplib-trust-PASV-resp.patch (bsc#1194146, bpo#43285, CVE-2021-4189, gh#python/cpython#24838) make ftplib not trust the PASV response. - build against openssl 1.1.x (incompatible with openssl 3.0x) for now. - on sle12, python2 modules will still be called python-xxxx until EOL, for newer SLE versions they will be python2-xxxx - BuildRequire rpm-build-python: The provider to inject python(abi) has been moved there. rpm-build pulls rpm-build-python automatically in when building anything against python3-base, but this implies that the initial build of python3-base does not trigger the automatic installation. - Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091 (CVE-2019-20907, bpo#39017) avoiding possible infinite loop in specifically crafted tarball. Add recursion.tar as a testing tarball for the patch. - Provide the newest setuptools wheel (bsc#1176262, CVE-2019-20916) in their correct form (bsc#1180686). - Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211 (CVE-2020-26116, bpo#39603) no longer allowing special characters in the method parameter of HTTPConnection.putrequest in httplib, stopping injection of headers. Such characters now raise ValueError. - Renamed patch for assigned CVE: * bpo44022-fix-http-client-infinite-line-reading-after-a-HTTP-100-Continue.patch -> CVE-2021-3737-fix-HTTP-client-infinite-line-reading-after-a-HTTP-100-Continue.patch (boo#1189241, CVE-2021-3737) - Renamed patch for assigned CVE: * bpo43075-fix-ReDoS-in-request.patch -> CVE-2021-3733-fix-ReDoS-in-request.patch (boo#1189287, CVE-2021-3733) - Fix python-doc build (bpo#35293): * sphinx-update-removed-function.patch - Update documentation formatting for Sphinx 3.0 (bpo#40204). - Add bpo43075-fix-ReDoS-in-request.patch which fixes ReDoS in request (bpo#43075, boo#1189287). - Add missing security announcement to bpo44022-fix-http-client-infinite-line-reading-after-a-HTTP-100-Continue.patch. - Add bpo44022-fix-http-client-infinite-line-reading-after-a-HTTP-100-Continue.patch which fixes http client infinite line reading (DoS) after a http 100 (bpo#44022, boo#1189241). - Modify Lib/ensurepip/__init__.py to contain the same version numbers as are in reality the ones in the bundled wheels (bsc#1187668). - Add CVE-2021-23336-only-amp-as-query-sep.patch which forbids use of semicolon as a query string separator (bpo#42967, bsc#1182379, CVE-2021-23336). - Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution. - (bsc#1180125) We really don't Require python-rpm-macros package. Unnecessary dependency. - Add patch configure_PYTHON_FOR_REGEN.patch which makes configure.ac to consider the correct version of PYTHON_FO_REGEN (bsc#1078326). - Use python3-Sphinx on anything more recent than SLE-15 (inclusive). - Update to 2.7.18, final release of Python 2. Ever.: - Newline characters have been escaped when performing uu encoding to prevent them from overflowing into to content section of the encoded file. This prevents malicious or accidental modification of data during the decoding process. - Fixes a ReDoS vulnerability in `http.cookiejar`. Patch by Ben Caller. - Fixed line numbers and column offsets for AST nodes for calls without arguments in decorators. - bsc#1155094 (CVE-2019-18348) Disallow control characters in hostnames in http.client. Such potentially malicious header injection URLs now cause a InvalidURL to be raised. - Fix urllib.urlretrieve failing on subsequent ftp transfers from the same host. - Fix problems identified by GCC's -Wstringop-truncation warning. - AddRefActCtx() was needlessly being checked for failure in PC/dl_nt.c. - Prevent failure of test_relative_path in test_py_compile on macOS Catalina. - Fixed possible leak in `PyArg_Parse` and similar functions for format units "es#" and "et#" when the macro `PY_SSIZE_T_CLEAN` is not defined. - Remove upstreamed patches: - CVE-2019-18348-CRLF_injection_via_host_part.patch - python-2.7.14-CVE-2017-1000158.patch - CVE-2018-14647_XML_SetHashSalt-in_elementtree.patch - CVE-2018-1061-DOS-via-regexp-difflib.patch - CVE-2019-10160-netloc-port-regression.patch - CVE-2019-16056-email-parse-addr.patch - Add CVE-2019-9674-zip-bomb.patch to improve documentation warning about dangers of zip-bombs and other security problems with zipfile library. (bsc#1162825 CVE-2019-9674) - Change to Requires: libpython%{so_version} == %{version}-%{release} to python-base to keep both packages always synchronized (add %{so_version}) (bsc#1162224). - Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug "Python urrlib allowed an HTTP server to conduct Regular Expression Denial of Service (ReDoS)" (bsc#1162367) - Provide python-testsuite from devel subkg to ease py2->py3 dependencies - Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch off tests coliding with the combination of modern Python and ancient OpenSSL on SLE-12. - libnsl is required only on more recent SLEs and openSUSE, older glibc supported NIS on its own. - Add provides in gdbm subpackage to provide dbm symbols. This allows us to use %%{python_module dbm} as a dependency and have it properly resolved for both python2 and python3 - Drop appstream-glib BuildRequires and no longer call appstream-util validate-relax: eliminate a build cycle between as-glib and python. The only thing would would gain by calling as-uril is catching if upstream breaks the appdata.xml file in a future release. Considering py2 is dying, chances for a new release, let alone one breaking the xml file, are slim. - Unify packages among openSUSE:Factory and SLE versions. (bsc#1159035) ; add missing records to this changelog. - Add idle.desktop and idle.appdata.xml to provide IDLE in menus (bsc#1153830) - Add python2_split_startup Provide to make it possible to conflict older packages by shared-python-startup. - Move /etc/pythonstart script to shared-python-startup package. - Add bpo-36576-skip_tests_for_OpenSSL-111.patch (originally from bpo#36576) skipping tests failing with OpenSSL 1.1.1. Fixes bsc#1149792 - Add adapted-from-F00251-change-user-install-location.patch fixing pip/distutils to install into /usr/local. - Update to 2.7.17: - a bug fix release in the Python 2.7.x series. It is expected to be the penultimate release for Python 2.7. - Removed patches included upstream: - CVE-2018-20852-cookie-domain-check.patch - CVE-2019-16935-xmlrpc-doc-server_title.patch - CVE-2019-9636-netloc-no-decompose-characters.patch - CVE-2019-9947-no-ctrl-char-http.patch - CVE-2019-9948-avoid_local-file.patch - python-2.7.14-CVE-2018-1000030-1.patch - python-2.7.14-CVE-2018-1000030-2.patch - Renamed remove-static-libpython.diff and python-bsddb6.diff to remove-static-libpython.patch and python-bsddb6.patch to unify filenames. - Add CVE-2019-16935-xmlrpc-doc-server_title.patch fixing bsc#1153238 (aka CVE-2019-16935) fixing a reflected XSS in python/Lib/DocXMLRPCServer.py - Add bpo36302-sort-module-sources.patch (boo#1041090) - Add CVE-2019-16056-email-parse-addr.patch fixing the email module wrongly parses email addresses [bsc#1149955, CVE-2019-16056] - boo#1141853 (CVE-2018-20852) add CVE-2018-20852-cookie-domain-check.patch fixing http.cookiejar.DefaultPolicy.domain_return_ok which did not correctly validate the domain: it could be tricked into sending cookies to the wrong server. - Skip test_urllib2_localnet that randomly fails in OBS - bsc#1138459: add CVE-2019-10160-netloc-port-regression.patch which fixes regression introduced by the previous patch. (CVE-2019-10160) Upstream gh#python/cpython#13812 - Set _lto_cflags to nil as it will prevent to propage LTO for Python modules that are built in a separate package. - bsc#1130840 (CVE-2019-9947): add CVE-2019-9947-no-ctrl-char-http.patch Address the issue by disallowing URL paths with embedded whitespace or control characters through into the underlying http client request. Such potentially malicious header injection URLs now cause a ValueError to be raised. - bsc#1130847 (CVE-2019-9948) add CVE-2019-9948-avoid_local-file.patch removing unnecessary (and potentially harmful) URL scheme local-file://. - bsc#1129346: add CVE-2019-9636-netloc-no-decompose-characters.patch Characters in the netloc attribute that decompose under NFKC normalization (as used by the IDNA encoding) into any of ``/``, ``?``, ``#``, ``@``, or ``:`` will raise a ValueError. If the URL is decomposed before parsing, or is not a Unicode string, no error will be raised (CVE-2019-9636). Upstream commits e37ef41 and 507bd8c. - (bsc#1111793) Update to 2.7.16: * bugfix-only release: complete list of changes on https://github.com/python/cpython/blob/2.7/Misc/NEWS.d/2.7.16rc1.rst * Removed openssl-111.patch and CVE-2018-1000802-shutil_use_subprocess_no_spawn.patch which are fully included in the tarball. * Updated patches to apply cleanly: CVE-2019-5010-null-defer-x509-cert-DOS.patch bpo36160-init-sysconfig_vars.patch do-not-use-non-ascii-in-test_ssl.patch openssl-111-middlebox-compat.patch openssl-111-ssl_options.patch python-2.5.1-sqlite.patch python-2.6-gettext-plurals.patch python-2.7-dirs.patch python-2.7.2-fix_date_time_compiler.patch python-2.7.4-canonicalize2.patch python-2.7.5-multilib.patch python-2.7.9-ssl_ca_path.patch python-bsddb6.diff remove-static-libpython.patch * Update python-2.7.5-multilib.patch to pass with new platlib regime. - bsc#1109847 (CVE-2018-14647): add CVE-2018-14647_XML_SetHashSalt-in_elementtree.patch fixing bpo-34623. - bsc#1073748: add bpo-29347-dereferencing-undefined-pointers.patch PyWeakref_NewProxy(a)Objects/weakrefobject.c creates new isntance of PyWeakReference struct and does not intialize wr_prev and wr_next of new isntance. These pointers can have garbage and point to random memory locations. Python should not crash while destroying the isntance created in the same interpreter function. As per my understanding, both wr_prev and wr_next of PyWeakReference instance should be initialized to NULL to avoid segfault. - bsc#1122191: add CVE-2019-5010-null-defer-x509-cert-DOS.patch fixing bpo-35746 (CVE-2019-5010). An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.7.2. A specially crafted X509 certificate can cause a NULL pointer dereference, resulting in a denial of service. An attacker can initiate or accept TLS connections using crafted certificates to trigger this vulnerability. ==== python-MarkupSafe ==== - Require python 3.6. There is no need to require a newer version and this way it builds on openSUSE Leap >= 15.3 ==== python-base ==== Subpackages: libpython2_7-1_0 python-xml - Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the command injection in the mailcap module. ==== systemsettings5 ==== Version update (5.24.5 -> 5.25.0) Subpackages: systemsettings5-lang - Update to 5.25.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.0 - Changes since 5.24.90: * systemsettingsrunner: Fix all matches having the same id * IconView: Remove duplicated tooltips (kde#409327) - Update to 5.24.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.90 - Too many changes to list here ==== xdg-desktop-portal-kde ==== Version update (5.24.5 -> 5.25.0) Subpackages: xdg-desktop-portal-kde-lang - Update to 5.25.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.0 - Changes since 5.24.90: * [filechooser] Make sure outgoing URIs are encoded (kde#454850) * [screenshot] Encode result URI * UserInfo: Fix initialization error * screencast: Include valid windows in the list of streams to stream * screencast: When we stop a stream, do it actively * screencast: When closing a session, only close the streams from that session * screencast: Do not provide every running stream * screencast: Keep persisting if the user chose to persist (kde#454128) * Add FreeBSD CI * don't supply excess argument - Update to 5.24.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.24.90 - Too many changes to list here

4 4

Issues with 15.4 and Firefox video - is Packman broken?
by Larry Len Rainey 14 Jun '22

14 Jun '22

4 4

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 14 Jun '22

14 Jun '22

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have had problems for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - python-social-auth-core: Unresolvable Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

2 1

Weird rpmlint failure with osc build and %{_datadir}
by Michael Pujos 14 Jun '22

14 Jun '22

Hi, I'm building a package locally with osc build. My package installs a directory in /usr/share (and all the files it contains, recursively), specified like this in the %files section: %files ... %{_datadir}/%{name} For some reason I cannot comprehend, rpmlint complains that /usr/share is not own by a package, and fails the build: [ 51s] blargh.rpm: directories not owned by a package: [ 51s] - /usr/share /usr/share is a system folder I believed owned by the system, so why is it complaining ? I tried adding %dir %{_datadir}, but this does not fix it and should not be necessary. Is rpmlint acting up ?

1 1

Re: Community Meeting/ALP WG: Week 24
by Luna Jernberg 14 Jun '22

14 Jun '22

Will miss the meetings this week as they collides with other things, but will join the Releng meeting tomorrow morning On Mon, Jun 13, 2022 at 11:30 AM ddemaio <ddemaio(a)suse.de> wrote: > The ALP WG will take place tomorrow at 14:30 UTC > > The Community Meeting is on Thursday at 19:00 UTC. > > Both meeting will be in https://meet.opensuse.org/meeting > > You can read the notes from last week's at > https://etherpad.opensuse.org/p/weeklymeeting20220609 > > You can view the meeting notes from the ALP WG and other notes at > https://etherpad.opensuse.org/p/weeklymeeting. > > v/r > Doug >

1 0

New Tumbleweed snapshot 20220612 released!
by Dominique Leuenberger 13 Jun '22

13 Jun '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: akonadi-calendar (22.04.1 -> 22.04.2) akonadi-calendar-tools (22.04.1 -> 22.04.2) akonadi-contact (22.04.1 -> 22.04.2) akonadi-import-wizard (22.04.1 -> 22.04.2) akonadi-mime (22.04.1 -> 22.04.2) akonadi-notes (22.04.1 -> 22.04.2) akonadi-search (22.04.1 -> 22.04.2) akonadi-server (22.04.1 -> 22.04.2) akregator (22.04.1 -> 22.04.2) analitza (22.04.1 -> 22.04.2) ark (22.04.1 -> 22.04.2) baloo5-widgets (22.04.1 -> 22.04.2) blinken (22.04.1 -> 22.04.2) bovo (22.04.1 -> 22.04.2) calendarsupport (22.04.1 -> 22.04.2) cervisia (22.04.1 -> 22.04.2) dbus-1 dolphin (22.04.1 -> 22.04.2) dragonplayer (22.04.1 -> 22.04.2) eventviews (22.04.1 -> 22.04.2) ffmpegthumbs (22.04.1 -> 22.04.2) glibc grantleetheme (22.04.1 -> 22.04.2) guestfs-tools (1.48.1 -> 1.48.2) gwenview5 (22.04.1 -> 22.04.2) incidenceeditor (22.04.1 -> 22.04.2) irssi (1.2.3 -> 1.4.1) juk (22.04.1 -> 22.04.2) k3b (22.04.1 -> 22.04.2) kaccounts-integration (22.04.1 -> 22.04.2) kaccounts-providers (22.04.1 -> 22.04.2) kaddressbook (22.04.1 -> 22.04.2) kalgebra (22.04.1 -> 22.04.2) kamera (22.04.1 -> 22.04.2) kanagram (22.04.1 -> 22.04.2) kapptemplate (22.04.1 -> 22.04.2) kate (22.04.1 -> 22.04.2) katomic (22.04.1 -> 22.04.2) kblackbox (22.04.1 -> 22.04.2) kblocks (22.04.1 -> 22.04.2) kbounce (22.04.1 -> 22.04.2) kbreakout (22.04.1 -> 22.04.2) kbruch (22.04.1 -> 22.04.2) kcachegrind (22.04.1 -> 22.04.2) kcalc (22.04.1 -> 22.04.2) kcalutils (22.04.1 -> 22.04.2) kcharselect (22.04.1 -> 22.04.2) kcolorchooser (22.04.1 -> 22.04.2) kcron (22.04.1 -> 22.04.2) kde-print-manager (22.04.1 -> 22.04.2) kdeconnect-kde (22.04.1 -> 22.04.2) kdeedu-data (22.04.1 -> 22.04.2) kdegraphics-thumbnailers (22.04.1 -> 22.04.2) kdenetwork-filesharing (22.04.1 -> 22.04.2) kdepim-addons (22.04.1 -> 22.04.2) kdepim-runtime (22.04.1 -> 22.04.2) kdevelop5 (22.04.1 -> 22.04.2) kdf (22.04.1 -> 22.04.2) kdialog (22.04.1 -> 22.04.2) kdiamond (22.04.1 -> 22.04.2) kgeography (22.04.1 -> 22.04.2) kget (22.04.1 -> 22.04.2) kgoldrunner (22.04.1 -> 22.04.2) khangman (22.04.1 -> 22.04.2) khelpcenter5 (22.04.1 -> 22.04.2) kidentitymanagement (22.04.1 -> 22.04.2) kig (22.04.1 -> 22.04.2) kimap (22.04.1 -> 22.04.2) kio-extras5 (22.04.1 -> 22.04.2) kio_audiocd (22.04.1 -> 22.04.2) kipi-plugins (22.04.1 -> 22.04.2) kiriki (22.04.1 -> 22.04.2) kiten (22.04.1 -> 22.04.2) kitinerary (22.04.1 -> 22.04.2) kjumpingcube (22.04.1 -> 22.04.2) kldap (22.04.1 -> 22.04.2) kleopatra (22.04.1 -> 22.04.2) klines (22.04.1 -> 22.04.2) kmag (22.04.1 -> 22.04.2) kmahjongg (22.04.1 -> 22.04.2) kmail (22.04.1 -> 22.04.2) kmail-account-wizard (22.04.1 -> 22.04.2) kmailtransport (22.04.1 -> 22.04.2) kmbox (22.04.1 -> 22.04.2) kmime (22.04.1 -> 22.04.2) kmines (22.04.1 -> 22.04.2) kmousetool (22.04.1 -> 22.04.2) kmouth (22.04.1 -> 22.04.2) kmplot (22.04.1 -> 22.04.2) knavalbattle (22.04.1 -> 22.04.2) knetwalk (22.04.1 -> 22.04.2) knotes (22.04.1 -> 22.04.2) kolf (22.04.1 -> 22.04.2) kollision (22.04.1 -> 22.04.2) kolourpaint (22.04.1 -> 22.04.2) kompare (22.04.1 -> 22.04.2) konquest (22.04.1 -> 22.04.2) konsole (22.04.1 -> 22.04.2) kontact (22.04.1 -> 22.04.2) kontactinterface (22.04.1 -> 22.04.2) konversation (22.04.1 -> 22.04.2) kopete (22.04.1 -> 22.04.2) korganizer (22.04.1 -> 22.04.2) kpat (22.04.1 -> 22.04.2) kpimtextedit (22.04.1 -> 22.04.2) kpkpass (22.04.1 -> 22.04.2) kqtquickcharts (22.04.1 -> 22.04.2) kreversi (22.04.1 -> 22.04.2) kruler (22.04.1 -> 22.04.2) kshisen (22.04.1 -> 22.04.2) ksirk (22.04.1 -> 22.04.2) ksmtp (22.04.1 -> 22.04.2) kspaceduel (22.04.1 -> 22.04.2) ksquares (22.04.1 -> 22.04.2) ksudoku (22.04.1 -> 22.04.2) ksystemlog (22.04.1 -> 22.04.2) kteatime (22.04.1 -> 22.04.2) ktimer (22.04.1 -> 22.04.2) ktnef (22.04.1 -> 22.04.2) ktouch (22.04.1 -> 22.04.2) kturtle (22.04.1 -> 22.04.2) kubrick (22.04.1 -> 22.04.2) kwalletmanager5 (22.04.1 -> 22.04.2) kwordquiz (22.04.1 -> 22.04.2) libgravatar (22.04.1 -> 22.04.2) libkcddb (22.04.1 -> 22.04.2) libkcompactdisc (22.04.1 -> 22.04.2) libkdcraw (22.04.1 -> 22.04.2) libkdegames (22.04.1 -> 22.04.2) libkdepim (22.04.1 -> 22.04.2) libkeduvocdocument (22.04.1 -> 22.04.2) libkexiv2 (22.04.1 -> 22.04.2) libkgapi (22.04.1 -> 22.04.2) libkipi (22.04.1 -> 22.04.2) libkleo (22.04.1 -> 22.04.2) libkmahjongg (22.04.1 -> 22.04.2) libkomparediff2 (22.04.1 -> 22.04.2) libksane (22.04.1 -> 22.04.2) libksieve (22.04.1 -> 22.04.2) libktorrent (22.04.1 -> 22.04.2) lokalize (22.04.1 -> 22.04.2) lskat (22.04.1 -> 22.04.2) mailcommon (22.04.1 -> 22.04.2) mailimporter (22.04.1 -> 22.04.2) mbox-importer (22.04.1 -> 22.04.2) messagelib (22.04.1 -> 22.04.2) mobipocket (22.04.1 -> 22.04.2) okteta (0.26.8 -> 0.26.9) okular (22.04.1 -> 22.04.2) parley (22.04.1 -> 22.04.2) pim-data-exporter (22.04.1 -> 22.04.2) pim-sieve-editor (22.04.1 -> 22.04.2) pimcommon (22.04.1 -> 22.04.2) rsibreak (0.12.14 -> 0.12.15) rubygem-bundler (2.3.12 -> 2.3.13) sdl12_compat (1.2.15 -> 1.2.52) signon-kwallet-extension (22.04.1 -> 22.04.2) skanlite (22.04.1 -> 22.04.2) spectacle (22.04.1 -> 22.04.2) step (22.04.1 -> 22.04.2) sweeper (22.04.1 -> 22.04.2) timezone umbrello (22.04.1 -> 22.04.2) yakuake (22.04.1 -> 22.04.2) === Details === ==== akonadi-calendar ==== Version update (22.04.1 -> 22.04.2) Subpackages: akonadi-calendar-lang akonadi-plugin-calendar kalendarac libKF5AkonadiCalendar5 - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== akonadi-calendar-tools ==== Version update (22.04.1 -> 22.04.2) Subpackages: akonadi-calendar-tools-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== akonadi-contact ==== Version update (22.04.1 -> 22.04.2) Subpackages: akonadi-contact-lang akonadi-plugin-contacts libKF5AkonadiContact5 libKF5ContactEditor5 - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== akonadi-import-wizard ==== Version update (22.04.1 -> 22.04.2) Subpackages: akonadi-import-wizard-lang libKPimImportWizard5 - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== akonadi-mime ==== Version update (22.04.1 -> 22.04.2) Subpackages: akonadi-mime-lang akonadi-plugin-mime libKF5AkonadiMime5 - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== akonadi-notes ==== Version update (22.04.1 -> 22.04.2) Subpackages: akonadi-notes-lang libKF5AkonadiNotes5 - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== akonadi-search ==== Version update (22.04.1 -> 22.04.2) Subpackages: akonadi-search-lang libKF5AkonadiSearch5 - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== akonadi-server ==== Version update (22.04.1 -> 22.04.2) Subpackages: akonadi-server-lang libKF5AkonadiAgentBase5 libKF5AkonadiCore5 libKF5AkonadiPrivate5 libKF5AkonadiWidgets5 libKF5AkonadiXml5 - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== akregator ==== Version update (22.04.1 -> 22.04.2) Subpackages: akregator-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== analitza ==== Version update (22.04.1 -> 22.04.2) Subpackages: analitza-lang libAnalitza8 - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== ark ==== Version update (22.04.1 -> 22.04.2) Subpackages: ark-lang libkerfuffle22 - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ - Drop patches, now upstream: * 0001-remove-l-flag-to-7z-a.patch * 0001-Support-7zip-as-well-as-p7zip.patch ==== baloo5-widgets ==== Version update (22.04.1 -> 22.04.2) Subpackages: baloo5-widgets-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== blinken ==== Version update (22.04.1 -> 22.04.2) Subpackages: blinken-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== bovo ==== Version update (22.04.1 -> 22.04.2) Subpackages: bovo-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== calendarsupport ==== Version update (22.04.1 -> 22.04.2) Subpackages: calendarsupport-lang libKF5CalendarSupport5 - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== cervisia ==== Version update (22.04.1 -> 22.04.2) Subpackages: cervisia-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== dbus-1 ==== Subpackages: libdbus-1-3 libdbus-1-3-32bit - version provides - add split provides - remove unused/obsolete pre_checkin.sh - The great dbus package split of 22, in preperation for replacing dbus-daemon with dbus-broker currently there is no functional difference that will change later, this follows a similar setup to RedHat and Debian. * dbus-daemon is now in its own separate package * Create a dbus-1-common package with all the files and config that are shared between the dbus-daemon and dbus-broker implementations. * Create a dbus-1-tools package with the tools eventually we will likely want to move to only recommending this package Redhat and Debian have both already gone down this path. ==== dolphin ==== Version update (22.04.1 -> 22.04.2) Subpackages: dolphin-part dolphin-part-lang libdolphinvcs5 - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== dragonplayer ==== Version update (22.04.1 -> 22.04.2) Subpackages: dragonplayer-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== eventviews ==== Version update (22.04.1 -> 22.04.2) Subpackages: eventviews-lang libKF5EventViews5 - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== ffmpegthumbs ==== Version update (22.04.1 -> 22.04.2) - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== glibc ==== Subpackages: glibc-32bit glibc-devel glibc-extra glibc-lang glibc-locale glibc-locale-base nscd - Set SUSE_ZNOW=0 - strncpy-power9-vsx.patch: powerpc: Fix VSX register number on __strncpy_power9 (BZ #29197) - nptl-cleanup-async-restore.patch: nptl: Fix __libc_cleanup_pop_restore asynchronous restore (bsc#1200093, BZ #29214) ==== grantleetheme ==== Version update (22.04.1 -> 22.04.2) Subpackages: grantleetheme-lang libKF5GrantleeTheme5 - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== guestfs-tools ==== Version update (1.48.1 -> 1.48.2) - Update to version 1.48.2 * This is a bug fix release ==== gwenview5 ==== Version update (22.04.1 -> 22.04.2) Subpackages: gwenview5-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== incidenceeditor ==== Version update (22.04.1 -> 22.04.2) Subpackages: incidenceeditor-lang libKF5IncidenceEditor5 - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== irssi ==== Version update (1.2.3 -> 1.4.1) - drop irssi.conf, upstream does not install it anymore - drop SOCKS support and related patch irssi-0.8.16_missing_prototype_warnings.patch, was not working - drop irssi-1.2.3-add-libera.patch, upstream - drop irssi-rpmlintrc, did not match - drop botti, not supported by upstream - update to 1.4.1 ! Note: botti no longer compiles; get in touch if you use it * Format the output of /QUOTE HELP (#1371, an#82). By Val Lorentz. Add /SHELP as default alias (an#83) + GLib log message filter: /SET glib_log_domains (an#50, an#59). By Andrej Kacian + An option to clear the cutbuffer: /SET empty_kill_clears_cutbuffer (an#58). By Mikael Magnusson + Scriptable pastebin (an#60, an#88) + Configurable actlist separator: /SET actlist_separator (#1364, an#61) - Fix window left/right not skipping visible windows (an#57). By Mikael Magnusson - Fix wrong printf-format on OpenBSD (an#66, an#68). Reported by Aaron Bieber - Fix erroneous output produced by autoload_modules (an#72) - Fix scroll_page_count setting with `.' (#1365, an#76) - Fix memory leak in /IGNORE (#1373, an#84). Found by Jookia - Misc fixes (an#45, an#67, an#70, #1368, an#77) - CHANTYPES take precedence over (missing) STATUSMSG in /join (#1358, an#54) - Fix crash in Perl's $view->set_bookmark (freebsd#254237, an#56) - Minor help fixes (an#51, an#52) - Fix regression where own channel status was forgotten after /UPGRADE (#1357, an#53) * /SET resolve_reverse_lookup setting was removed (#1034, [#1135]) * Irssi will try to connect on IPv4 if IPv6 connection failed (#1146). By Shivaram Lingamneni * The display system now renders formats on the fly (#1079, [#1188], #1191, #1192, #1204, #1205, #1209, #1349, #1355, an#13, an#14, an#28, an#29, an#36, an#37, an#49) This major change will break scripts that try to modify printed text during "print text" signal (#1189). They need to be ported to modify the text during "print format" instead. It also breaks the usage of using /FORMAT to add different colours to a line. Such usage needs to be ported to using $expando variables instead. Affected scripts include format_identify.pl, friends_peder.pl, nickcolor.pl, nm.pl, people.pl The "gui print text finished" and "gui print text after finished" signals gained a TEXT_DEST_REC *parameter in the process. A new "gui render line text" signal is available to change the rendering of a line * made the $Z expando (time) dynamic (#1087, #1207, #1208) This change breaks the usage of /SET timestamp_format to supply a custom displayed time stamp. Affected scripts include binary_time.pl * /HILIGHT -priority now affects which hilight rule gets applied (#1228, #1232) * The NAMES list is now hidden by default if there are more than 18 users on the channel (an#7) To revert to the previous behaviour /SET show_names_on_join_limit -1 * -tls_verify is now enabled by default (#1170, an#18, #1309, an#23, #1343, #1351) This may cause an ugly display of notls_verify in the output of /SERVER LIST, even on plain-text connection, on old configs. Kindly remove the "tls_verify = "no";" entries from your config file manually. * Irssi will now attempt STARTTLS if advertised (#1170, #1312, an#19) Use -disallow_starttls if you absolutely do not want this In order to check for a STARTTLS advertisement, Irssi will now wait for a response (even an error) to CAP LS 302. If your bouncer/server does not want to communicate before receiving USER/PASS at all, use -nocap to disable the CAP check. * Channel sync requests (WHO, MODE) are now sent "later" than user commands. This should improve responsiveness to user commands in the autojoin phase (an#26, an#32, an#33) * Irssi is now using full paths in #include directives and consequently does not add all directories to the include path anymore (#1040) * The Build System was ported to Meson (#1064, #1065, #1068, [#1071], #1072, #1073, #1074, #1075, #1084, #1085, #1118, #1166, [#1223], #1224, #1245, #1313, #1314, an#31) * Scriptassist was changed to use a YAML database (#1163) It will tell you when you need to update your setting * /BIND shows all partial matches (#1155) * Cleanup of unused functions (#1017, #1132, #1145, #1182, [#1246], #1264) Functions removed: NET_CALLBACK NET_HOST_CALLBACK RESOLVED_NAME_REC net_gethostbyaddr_nonblock net_connect_nonblock [ SIMPLE_THREAD_REC, simple_init, simple_readpipe ] hash_save_key Functions deprecated: dec2octal g_timeval_cmp get_timeval_diff Function names corrected: g_input -> i_input g_istr -> i_istr g_io_channel -> i_io_channel g_hash_free_value -> i_hash_free_value remove g_free_true gslist -> i_slist glog_func -> i_log_func glist -> i_list If multi-version compatibility is desired, module authors can find an example of backwards compatible code in cdidier/irssi-xmpp#55 + Add MSGLEVEL_HIDDEN to Perl (#1044) + Add $view->set_hidden_level and $view->remove_lines_by_level to Perl (#1026) + Add a /SET scrollback_max_age setting (#1022). By Heikki Orsila + Add /SET actlist_prefer_window_name (#1025) + Add -window option to /CAT (#1023, #1159) + Add an option to list specific sections with /SET -section lookandfeel (#1048) + Add support for IRCv3 CAP LS 302 (#1091) + Add a new "print noformat" signal that goes together with "print format" (#1088, #1192) + Add support for IRCv3 extended-join. /SET show_extended_join to enable (#1097, #1107, #1124) There are two new /FORMATs, join_extended and join_extended_account, that theme writers need to take into account if desired. + Add support for IRCv3 setname (#1093, #1104, #1254, GL#33) + Add support for IRCv3 account-notify (#1100, #1098, GL#33, [#1105], #1131). Credit to oss-fuzz /SET show_account_notify to enable + Add support for IRCv3 invite-notify (#1094) + Add support for receiving IRCv3 message-tags (#576, #1090) + Add support for sending IRCv3 message-tags (#1092, an#34) + Enable the znc.in/self-message CAP by default (#1123) + Add support for IRCv3 away-notify. /SET away_notify_public to enable (#1099, GL#33, #1105) + Add support for IRCv3 chghost (#1096, GL#33, #1105) For servers with broken chghost implementation that fill the status window with host changed messages, one may add "quote cap req -chghost" to the -autosendcmd or, if the host change messages are entirely undesired, "/format -delete host_changed" + Add support for IRCv3 server-time. /SET show_server_time to enable (#1108) + Add support for logging IRCv3 server-time. /SET log_server_time to disable (#1318, an#16) + Add IRCv3 features to signals.txt (#1111) In particular, "message join" now takes 2 additional arguments, script and module authors must beware of this change. + Show the unignore time in /IGNORE output (#1158, #1161) + Add /SET quit_on_hup to make the behaviour of SIGHUP configurable (#828, #1169). By Pinguin1234 + Support numeric 489 as ERR_SECUREONLYCHAN (#1193, #1196). By Michael Hansen + Improve support for building Irssi in Termux-Android with Meson (#1199) + Add usermode key to Irssi::Irc::Chatnet in Perl (#1288). By Jessica Sophie Porter + Add format_string_expand and format_string_unexpand functions to Perl (#1286) + Add ...->format_create_dest(...)->printformat("format", args...) and ...->printformat_module("module", "format", args...) methods to Perl (#1284) You can avoid any CORE::GLOBAL::caller hacks using the printformat_module method, especially sind that hack was not safe during signal emissions + Add tracking of user accounts in the channel nicklist using WHOX on join (#1250) + Add auto-loading of the Perl and otr module from /SET autoload_modules (#1295) + Add /IGNORE ... NOHILIGHT to ignore some hilights (#1260) + Do not beep on hidden lines with /SET beep_msg_level ... -HIDDEN (#1259) + Added /CS, /MS, /NS, and /OS aliases to the default config (#1316). By Mathis Beer + Allow -tls_ca{file,path} '' to unset an argument (#730, [#1060], an#30) + Add a "server outgoing modify" signal to intercept outgoing messages (#1148, #1151, an#15, an#43). Original by JustAnotherArchivist - remove some hard-coded 510 byte assumptions (#1086) - Several fixes for error checks in SSL (#944, #1037, #943, [#1036]). Reported by Chi Li - Wrong variable tested in mask_match (#902, #1035) - Fix bug where irssi-proxy with `?'-port would not reconnect (#1041) - Allow shrinking of /SET rawlog_lines (#957, #1020). By Marcus "Teschi" Prinz - Fix /WINDOW BALANCE warning (#1054) - fix overflow when first command history entry expires (#1070) - begin modularising IRC module (#1067, #1112, #1113) - fix some memory leaks in /DCC RESUME and settings_add (#1077). By Zero King - fix cut-off text with theme_indent module and /SET indent_always OFF (#1078) - fix the cap_queue order (#1095) - add reference counted strings (#1089) - Fix irc_op_public messages not triggering hilights (#354, [#891], #1129). By Dan Collins - Fix /IGNORE not setting the right level in irc_op_public messages (#1280). Credit to oss-fuzz - Fix GTimeVal deprecation (#1141, #1144, #1145, #1350, an#44) If multi-version compatibility is desired, module authors can find an example of backwards compatible code in cdidier/irssi-xmpp#53 - Fix /IGNORE ... MODES NO_ACT not working (#1164) - Deprecated -ssl* options are hidden from tab completion (#1171) - Make /SET actlist_sort a choice type (#1198) - Fix crash from self-unloading script (#1206). By Thomas Stagner - Fix crash during Perl signal emission (#1233, #1234) - Fix a case where empty lines or comments inside channels or servers in the config would confuse Irssi (#1062, #1242, [#1243]) - Fix reported freezing in DCC GET on slow disks (#159, #1271) - Fix message-tags parsing (#1274, #1275). Credit to oss-fuzz - Fail redirects when receiving numeric 263 (RPL_TRYAGAIN) in response to /WHO (#1283) - Some updates to .gitignore (#1302). By Rene Kita - Fix build on operating systems with X/Open Curses, version 2 (#1305, #1308). By Nia Alarie (Regression introduced with [#1290], alternative fix for Irssi 1.2.3 no-term.h.patch) - Fix otr module not using g_strndup, e.g. on Solaris 10 (#1315). By Claes Nästén - Fix cursor getting stuck for auto completions that changes case (#1176, #1322, an#8). By ffrogman - Restore operation of tag/* in /SET activity_hide_targets (#1337, an#11) nb. the ::all syntax was working in Irssi 1.1 and 1.2 (and continues to work) - Fix /SERVER ADD -matrix -network my_matrix_network (an#12). By Andrej Kacian - Fix /SERVER ADD creating duplicated entries in the config file (#1317, an#22, an#41) - Fix critical when SASL user is set and SASL password is empty (#1325, an#21) - Misc fixes (#1106, #1141, #1272, #1297, an#35) - Fuzz fixes (#1116, #1117, #1119, #1125, #1126, an#20) - Build system fixes (#1101, #1102, #1069, #1140, #1181, #1253) - Sync docs and scripts (an#39) - Text and Help updates - add -tls_* options to manual (#1029, #1030). By Jacob V. Rasmussen - missing targets in /MSG (#1032) - wrong parameter in /ECHO (#1024) - Spelling in OTR (#1047). By David Gall - Clarify statusbar priority (#1049). By Marius Gedminas - Document get_irssi_dir in Perl (#1051, #1052). By Alex Shafer - typo in /HILIGHT help (#1081). By DFrostByte - improved clarity of your_nick_owned (#1138). By Mike Quin - Update some URLs to https (#1163) - Add documentation for escaping some characters (#1329, [#1330], an#9). By Guntbert Reiter - Fix some typos (#1336, an#10). By Francis Mteo - Document $abiversion and parse_special (an#38). By bw1 - Infrastructure updates: - Support for Github Actions (#1039, #1103, #1160, #1212, [#1231], #1252, #1261, an#40) - Run clang-format on pull requests (#1172, #1173, #1184, [#1230], #1247, #1287) - Run abidiff on pull requests (#1179, #1195) - Test CI-Fuzz (#1279, #1304, an#17) ==== juk ==== Version update (22.04.1 -> 22.04.2) Subpackages: juk-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== k3b ==== Version update (22.04.1 -> 22.04.2) Subpackages: k3b-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kaccounts-integration ==== Version update (22.04.1 -> 22.04.2) Subpackages: kaccounts-integration-lang libkaccounts2 - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kaccounts-providers ==== Version update (22.04.1 -> 22.04.2) Subpackages: kaccounts-providers-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kaddressbook ==== Version update (22.04.1 -> 22.04.2) Subpackages: kaddressbook-doc kaddressbook-lang libKPimAddressbookImportExport5 - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kalgebra ==== Version update (22.04.1 -> 22.04.2) Subpackages: kalgebra-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kamera ==== Version update (22.04.1 -> 22.04.2) Subpackages: kamera-lang kio_kamera - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kanagram ==== Version update (22.04.1 -> 22.04.2) Subpackages: kanagram-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kapptemplate ==== Version update (22.04.1 -> 22.04.2) Subpackages: kapptemplate-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kate ==== Version update (22.04.1 -> 22.04.2) Subpackages: kate-lang kate-plugins - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== katomic ==== Version update (22.04.1 -> 22.04.2) Subpackages: katomic-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kblackbox ==== Version update (22.04.1 -> 22.04.2) Subpackages: kblackbox-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kblocks ==== Version update (22.04.1 -> 22.04.2) Subpackages: kblocks-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kbounce ==== Version update (22.04.1 -> 22.04.2) Subpackages: kbounce-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kbreakout ==== Version update (22.04.1 -> 22.04.2) Subpackages: kbreakout-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kbruch ==== Version update (22.04.1 -> 22.04.2) Subpackages: kbruch-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kcachegrind ==== Version update (22.04.1 -> 22.04.2) Subpackages: kcachegrind-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kcalc ==== Version update (22.04.1 -> 22.04.2) Subpackages: kcalc-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kcalutils ==== Version update (22.04.1 -> 22.04.2) Subpackages: kcalutils-lang libKF5CalendarUtils5 - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kcharselect ==== Version update (22.04.1 -> 22.04.2) Subpackages: kcharselect-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kcolorchooser ==== Version update (22.04.1 -> 22.04.2) Subpackages: kcolorchooser-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kcron ==== Version update (22.04.1 -> 22.04.2) Subpackages: kcron-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kde-print-manager ==== Version update (22.04.1 -> 22.04.2) Subpackages: kde-print-manager-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kdeconnect-kde ==== Version update (22.04.1 -> 22.04.2) Subpackages: kdeconnect-kde-lang kdeconnect-kde-zsh-completion - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kdeedu-data ==== Version update (22.04.1 -> 22.04.2) - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kdegraphics-thumbnailers ==== Version update (22.04.1 -> 22.04.2) - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kdenetwork-filesharing ==== Version update (22.04.1 -> 22.04.2) Subpackages: kdenetwork-filesharing-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kdepim-addons ==== Version update (22.04.1 -> 22.04.2) Subpackages: kdepim-addons-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kdepim-runtime ==== Version update (22.04.1 -> 22.04.2) Subpackages: kdepim-runtime-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kdevelop5 ==== Version update (22.04.1 -> 22.04.2) Subpackages: kdevelop5-lang kdevplatform kdevplatform-lang libkdevplatform58 - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kdf ==== Version update (22.04.1 -> 22.04.2) Subpackages: kdf-lang kwikdisk - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kdialog ==== Version update (22.04.1 -> 22.04.2) Subpackages: kdialog-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kdiamond ==== Version update (22.04.1 -> 22.04.2) Subpackages: kdiamond-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kgeography ==== Version update (22.04.1 -> 22.04.2) Subpackages: kgeography-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kget ==== Version update (22.04.1 -> 22.04.2) Subpackages: kget-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kgoldrunner ==== Version update (22.04.1 -> 22.04.2) Subpackages: kgoldrunner-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== khangman ==== Version update (22.04.1 -> 22.04.2) Subpackages: khangman-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== khelpcenter5 ==== Version update (22.04.1 -> 22.04.2) Subpackages: khelpcenter5-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kidentitymanagement ==== Version update (22.04.1 -> 22.04.2) Subpackages: kidentitymanagement-lang libKF5IdentityManagement5 libKF5IdentityManagementWidgets5 - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kig ==== Version update (22.04.1 -> 22.04.2) Subpackages: kig-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kimap ==== Version update (22.04.1 -> 22.04.2) Subpackages: kimap-lang libKF5IMAP5 - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kio-extras5 ==== Version update (22.04.1 -> 22.04.2) Subpackages: kio-extras5-lang libkioarchive5 - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kio_audiocd ==== Version update (22.04.1 -> 22.04.2) Subpackages: kio_audiocd-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kipi-plugins ==== Version update (22.04.1 -> 22.04.2) Subpackages: kipi-plugins-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kiriki ==== Version update (22.04.1 -> 22.04.2) Subpackages: kiriki-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kiten ==== Version update (22.04.1 -> 22.04.2) Subpackages: fonts-KanjiStrokeOrders kiten-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kitinerary ==== Version update (22.04.1 -> 22.04.2) Subpackages: libKPimItinerary5 libKPimItinerary5-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kjumpingcube ==== Version update (22.04.1 -> 22.04.2) Subpackages: kjumpingcube-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kldap ==== Version update (22.04.1 -> 22.04.2) Subpackages: kldap-lang libKF5Ldap5 - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kleopatra ==== Version update (22.04.1 -> 22.04.2) Subpackages: kleopatra-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== klines ==== Version update (22.04.1 -> 22.04.2) Subpackages: klines-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kmag ==== Version update (22.04.1 -> 22.04.2) Subpackages: kmag-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kmahjongg ==== Version update (22.04.1 -> 22.04.2) Subpackages: kmahjongg-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kmail ==== Version update (22.04.1 -> 22.04.2) Subpackages: kmail-application-icons kmail-lang ktnef - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kmail-account-wizard ==== Version update (22.04.1 -> 22.04.2) Subpackages: kmail-account-wizard-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kmailtransport ==== Version update (22.04.1 -> 22.04.2) Subpackages: kmailtransport-lang libKF5MailTransport5 libKF5MailTransportAkonadi5 - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kmbox ==== Version update (22.04.1 -> 22.04.2) - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kmime ==== Version update (22.04.1 -> 22.04.2) Subpackages: kmime-lang libKF5Mime5 - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kmines ==== Version update (22.04.1 -> 22.04.2) Subpackages: kmines-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kmousetool ==== Version update (22.04.1 -> 22.04.2) Subpackages: kmousetool-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kmouth ==== Version update (22.04.1 -> 22.04.2) Subpackages: kmouth-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kmplot ==== Version update (22.04.1 -> 22.04.2) Subpackages: kmplot-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== knavalbattle ==== Version update (22.04.1 -> 22.04.2) Subpackages: knavalbattle-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== knetwalk ==== Version update (22.04.1 -> 22.04.2) Subpackages: knetwalk-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== knotes ==== Version update (22.04.1 -> 22.04.2) Subpackages: knotes-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kolf ==== Version update (22.04.1 -> 22.04.2) Subpackages: kolf-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kollision ==== Version update (22.04.1 -> 22.04.2) Subpackages: kollision-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kolourpaint ==== Version update (22.04.1 -> 22.04.2) Subpackages: kolourpaint-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kompare ==== Version update (22.04.1 -> 22.04.2) Subpackages: kompare-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== konquest ==== Version update (22.04.1 -> 22.04.2) Subpackages: konquest-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== konsole ==== Version update (22.04.1 -> 22.04.2) Subpackages: konsole-part konsole-part-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kontact ==== Version update (22.04.1 -> 22.04.2) Subpackages: kontact-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kontactinterface ==== Version update (22.04.1 -> 22.04.2) Subpackages: kontactinterface-lang libKF5KontactInterface5 - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== konversation ==== Version update (22.04.1 -> 22.04.2) Subpackages: konversation-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kopete ==== Version update (22.04.1 -> 22.04.2) Subpackages: kopete-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== korganizer ==== Version update (22.04.1 -> 22.04.2) Subpackages: korganizer-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kpat ==== Version update (22.04.1 -> 22.04.2) Subpackages: kpat-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kpimtextedit ==== Version update (22.04.1 -> 22.04.2) Subpackages: kpimtextedit-lang libKF5PimTextEdit5 - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kpkpass ==== Version update (22.04.1 -> 22.04.2) - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kqtquickcharts ==== Version update (22.04.1 -> 22.04.2) - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kreversi ==== Version update (22.04.1 -> 22.04.2) Subpackages: kreversi-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kruler ==== Version update (22.04.1 -> 22.04.2) Subpackages: kruler-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kshisen ==== Version update (22.04.1 -> 22.04.2) Subpackages: kshisen-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== ksirk ==== Version update (22.04.1 -> 22.04.2) Subpackages: ksirk-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== ksmtp ==== Version update (22.04.1 -> 22.04.2) Subpackages: ksmtp-lang libKPimSMTP5 - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kspaceduel ==== Version update (22.04.1 -> 22.04.2) Subpackages: kspaceduel-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== ksquares ==== Version update (22.04.1 -> 22.04.2) Subpackages: ksquares-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== ksudoku ==== Version update (22.04.1 -> 22.04.2) Subpackages: ksudoku-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== ksystemlog ==== Version update (22.04.1 -> 22.04.2) Subpackages: ksystemlog-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kteatime ==== Version update (22.04.1 -> 22.04.2) Subpackages: kteatime-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== ktimer ==== Version update (22.04.1 -> 22.04.2) Subpackages: ktimer-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== ktnef ==== Version update (22.04.1 -> 22.04.2) Subpackages: ktnef-lang libKF5Tnef5 - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== ktouch ==== Version update (22.04.1 -> 22.04.2) Subpackages: ktouch-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kturtle ==== Version update (22.04.1 -> 22.04.2) Subpackages: kturtle-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kubrick ==== Version update (22.04.1 -> 22.04.2) Subpackages: kubrick-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kwalletmanager5 ==== Version update (22.04.1 -> 22.04.2) Subpackages: kwalletmanager5-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== kwordquiz ==== Version update (22.04.1 -> 22.04.2) Subpackages: kwordquiz-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== libgravatar ==== Version update (22.04.1 -> 22.04.2) Subpackages: libKF5Gravatar5 libgravatar-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== libkcddb ==== Version update (22.04.1 -> 22.04.2) Subpackages: libKF5Cddb5 libkcddb-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== libkcompactdisc ==== Version update (22.04.1 -> 22.04.2) Subpackages: libKF5CompactDisc5 libkcompactdisc-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== libkdcraw ==== Version update (22.04.1 -> 22.04.2) - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== libkdegames ==== Version update (22.04.1 -> 22.04.2) Subpackages: kdegames-carddecks-default libKF5KDEGames7 libkdegames-lang libkdegames-qt5-imports - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== libkdepim ==== Version update (22.04.1 -> 22.04.2) Subpackages: libKF5Libkdepim5 libkdepim-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== libkeduvocdocument ==== Version update (22.04.1 -> 22.04.2) Subpackages: libKEduVocDocument5 libkeduvocdocument-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== libkexiv2 ==== Version update (22.04.1 -> 22.04.2) - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== libkgapi ==== Version update (22.04.1 -> 22.04.2) Subpackages: libKPimGAPICalendar5 libKPimGAPIContacts5 libKPimGAPICore5 libKPimGAPITasks5 libkgapi-lang sasl2-kdexoauth2 - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== libkipi ==== Version update (22.04.1 -> 22.04.2) Subpackages: libKF5Kipi32_0_0 libkipi-data - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== libkleo ==== Version update (22.04.1 -> 22.04.2) Subpackages: libKF5Libkleo5 libkleo-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== libkmahjongg ==== Version update (22.04.1 -> 22.04.2) Subpackages: libKF5KMahjongglib5 libkmahjongg-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== libkomparediff2 ==== Version update (22.04.1 -> 22.04.2) Subpackages: libkomparediff2-5 libkomparediff2-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== libksane ==== Version update (22.04.1 -> 22.04.2) Subpackages: libKF5Sane5 libksane-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== libksieve ==== Version update (22.04.1 -> 22.04.2) Subpackages: libksieve-lang libksieve5 - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== libktorrent ==== Version update (22.04.1 -> 22.04.2) Subpackages: libKF5Torrent6 libktorrent-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== lokalize ==== Version update (22.04.1 -> 22.04.2) Subpackages: lokalize-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== lskat ==== Version update (22.04.1 -> 22.04.2) Subpackages: lskat-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== mailcommon ==== Version update (22.04.1 -> 22.04.2) Subpackages: libKF5MailCommon5 mailcommon-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== mailimporter ==== Version update (22.04.1 -> 22.04.2) Subpackages: libKF5MailImporter5 libKF5MailImporterAkonadi5 mailimporter-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== mbox-importer ==== Version update (22.04.1 -> 22.04.2) Subpackages: mbox-importer-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== messagelib ==== Version update (22.04.1 -> 22.04.2) Subpackages: messagelib-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== mobipocket ==== Version update (22.04.1 -> 22.04.2) - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== okteta ==== Version update (0.26.8 -> 0.26.9) Subpackages: libKasten4 libOkteta3 libkasten-lang libokteta-lang okteta-data okteta-lang - Update to 0.26.9 * Fixed: multiple issues in Structures tool + wrong warnings about unknown tag name "enumDef" in <data> + missing cleaning of any existing string data on reading zero-bytes string (kde#396057) + bad condition for string maxBytes value meaning empty string (kde#396057) + missing update of tree view after committing a change (kde#337653) + wrong offset for view markup of string characters + reading data from wrong offset on changes with a locked offset + missing combobox editor for enumerations with defined values (kde#337652) * Improved: multiple things in Structures tool + new context menu to copy data & display string to the clipboard (kde#314798) + additional action for before-mentioned context menu to select the bytes * Improved: control elements in tool views all have margins to the border and follow general QToolBar button style * Improved: translations ==== okular ==== Version update (22.04.1 -> 22.04.2) Subpackages: okular-lang okular-spectre - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== parley ==== Version update (22.04.1 -> 22.04.2) Subpackages: parley-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== pim-data-exporter ==== Version update (22.04.1 -> 22.04.2) Subpackages: pim-data-exporter-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== pim-sieve-editor ==== Version update (22.04.1 -> 22.04.2) Subpackages: pim-sieve-editor-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== pimcommon ==== Version update (22.04.1 -> 22.04.2) Subpackages: libKF5PimCommon5 libKF5PimCommonAkonadi5 pimcommon-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== rsibreak ==== Version update (0.12.14 -> 0.12.15) Subpackages: rsibreak-lang - Update to 0.12.15: * Add option to suppress breaks while fullscreen windows are visible * Potentially fix tooltip rendering on XFCE * Make it possible to disable tiny breaks * Configuration dialog: Don't reset timers when pressing "OK" if no changes happened * Translation improvements * Convert license headers to SPDX * Internal code improvements - Add signature file and keyring ==== rubygem-bundler ==== Version update (2.3.12 -> 2.3.13) - updated to version 2.3.13 see installed CHANGELOG.md - Bug fixes: - Fix missing required rubygems version when using old APIs [#5496](https://github.com/rubygems/rubygems/pull/5496) - Fix crash when gem used twice in Gemfile under different platforms [#5187](https://github.com/rubygems/rubygems/pull/5187) - Performance: - Speed up `bundler/setup` time [#5503](https://github.com/rubygems/rubygems/pull/5503) ==== sdl12_compat ==== Version update (1.2.15 -> 1.2.52) - Add baselibs.conf - Add 0001-SDL_GetWMInfo-work-like-1.2-when-SDL_SetVideoMode-ha.patch to unbreak use with schismtracker. - Add 0001-Set-pixels-in-SDL_CreateYUVOverlay-Fix-164.patch to unbreak use with MPlayer. - Hot enable sdl12-compat to be the SDL1 replacement [boo#1198182] - Initial package (v1.2.52) for build.opensuse.org ==== signon-kwallet-extension ==== Version update (22.04.1 -> 22.04.2) - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== skanlite ==== Version update (22.04.1 -> 22.04.2) Subpackages: skanlite-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== spectacle ==== Version update (22.04.1 -> 22.04.2) Subpackages: spectacle-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== step ==== Version update (22.04.1 -> 22.04.2) Subpackages: step-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== sweeper ==== Version update (22.04.1 -> 22.04.2) Subpackages: sweeper-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== timezone ==== - switch to _multibuild - refresh keyring, enable keyring validation ==== umbrello ==== Version update (22.04.1 -> 22.04.2) Subpackages: umbrello-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/ ==== yakuake ==== Version update (22.04.1 -> 22.04.2) Subpackages: yakuake-lang - Update to 22.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.04.2/

1 0

New Tumbleweed snapshot 20220611 released!
by Dominique Leuenberger 12 Jun '22

12 Jun '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: libqt5-qtwebengine (5.15.9 -> 5.15.10) nfs-utils openvpn (2.5.6 -> 2.5.7) python-gobject python-importlib-metadata (4.11.3 -> 4.11.4) udisks2 yast2-network (4.5.2 -> 4.5.3) === Details === ==== libqt5-qtwebengine ==== Version update (5.15.9 -> 5.15.10) - Update to version 5.15.10: * Fix top level build with no widget * Fix read-after-free on EGL extensions * Update Chromium * Add workaround for unstable gn on macOS in ci * Pass archiver to gn build * Fix navigation to non-local URLs * Add support for universal builds for qtwebengine and qtpdf * Enable Apple Silicon support * Fix cross compilation x86_64->arm64 on mac * Bump version to 5.15.10 * CustomDialogs: Make custom input fields readable in dark mode * CookieBrowser: Make alternating rows readable in dark mode * Update Chromium: * Bump V8_PATCH_LEVEL * Fix clang set-but-unused-variable warning * Fix mac toolchain python linker script call * Fix missing dependency for gpu sources * Fix python calls * Fix undefined symbol for universal link * Quick fix for regression in service workers by reverting backports * [Backport] CVE-2022-0797: Out of bounds memory access in Mojo * [Backport] CVE-2022-1125 * [Backport] CVE-2022-1138: Inappropriate implementation in Web Cursor. * [Backport] CVE-2022-1305: Use after free in storage * [Backport] CVE-2022-1310: Use after free in regular expressions * [Backport] CVE-2022-1314: Type Confusion in V8 * [Backport] CVE-2022-1493: Use after free in Dev Tools * [Backport] On arm64 hosts, set host_cpu to 'arm64', not 'arm' * [Backport] Security Bug 1296876 * [Backport] Security bug 1269999 * [Backport] Security bug 1280852 * [Backport] Security bug 1292905 * [Backport] Security bug 1304659 * [Backport] Security bug 1306507 ==== nfs-utils ==== Subpackages: libnfsidmap1 nfs-client nfs-kernel-server - 0001-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch Ensure sysctl setting work (bsc#1199856) - 0002-Update-autoconfig-files-to-work-with-v2.71.patch - 0003-autoconf-change-tirpc-to-check-for-a-file-not-for-an.patch Update for latest autoconf ==== openvpn ==== Version update (2.5.6 -> 2.5.7) - update to 2.5.7: * Limited OpenSSL 3.0 support * print OpenSSL error stack if decoding PKCS12 file fails * fix omission of cipher-negotiation.rst in tarballs * fix errno handling on Windows (Windows has different classes of error codes, GetLastError() and C runtime errno, these should now be handled correctly) * fix PATH_MAX build failure in auth-pam.c * fix t_net.sh self-test leaving around stale "ovpn-dummy0" interface * fix overlong path names, leading to missing pkcs11-helper patch in tarball ==== python-gobject ==== Subpackages: python38-gobject python38-gobject-Gdk python38-gobject-cairo - Add dependency on python-cairo to python-gobject-cairo: The introspection wrapper needs the actual pycairo underneath (boo#1179584). ==== python-importlib-metadata ==== Version update (4.11.3 -> 4.11.4) - update to 4.11.4: * #379: In ``PathDistribution._name_from_stem``, avoid including parts of the extension in the result. * #381: In ``PathDistribution._normalized_name``, ensure names loaded from the stem of the filename are also normalized, ensuring duplicate entry points by packages varying only by non-normalized name are hidden. ==== udisks2 ==== Subpackages: libudisks2-0 libudisks2-0_btrfs udisks2-lang - Added hardening to systemd service(s) (bsc#1181400). Added patch(es): * harden_udisks2-zram-setup@.service.patch * harden_udisks2.service.patch ==== yast2-network ==== Version update (4.5.2 -> 4.5.3) - Allow more than 6 domains in resolver search list (bsc#1200155). - 4.5.3

1 0

(Leap 15.4) KMP key auto enrollment?
by Andrei Borzenkov 11 Jun '22

11 Jun '22

KMP signature key is provided as /etc/uefi/certs/BDD31A9E-kmp.crt, but apparently nothing enrolls this key automatically. It is missing after update to Leap 15.4: bor@10:~> mokutil --list-enrolled | grep 'SHA1 Finger' SHA1 Fingerprint: bc:a4:e3:8e:d1:84:2b:c8:6f:f7:6d:4d:a7:49:51:f1:62:88:59:f8 SHA1 Fingerprint: 4a:aa:0b:54:67:76:1e:cf:c0:0a:42:32:b1:7a:b4:8b:3e:09:a3:bf bor@10:~> And there is no enrollment request after installation of KMP: bor@10:~> sudo zypper in bbswitch-kmp-default ... bor@10:~> mokutil --list-new bor@10:~> Looking at kernel-scriptlets, certificate is handled by inkpm-script, but (at least, this KMP) calls kmp-script. Is it a bug, missing feature or what? KMP was built for 15.4: bor@10:~> zypper se -s bbswitch-kmp-default Loading repository data... Reading installed packages... S | Name | Type | Version | Arch | Repository ---+----------------------+---------+------------------------------------+--------+---------------- i+ | bbswitch-kmp-default | package | 0.8_k5.14.21_150400.22-lp154.1.187 | x86_64 | Main Repository bor@10:~>

3 3

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 10 Jun '22

10 Jun '22

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have had problems for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - newlib: Unresolvable Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

1 0

New Tumbleweed snapshot 20220609 released!
by Dominique Leuenberger 10 Jun '22

10 Jun '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: NetworkManager-applet (1.26.0 -> 1.28.0) colord-gtk (0.2.0+8 -> 0.3.0) fprintd gnome-desktop (42.1 -> 42.2) gnome-settings-daemon (42.1 -> 42.2) gtk4 (4.6.5 -> 4.7.0) kernel-firmware (20220516 -> 20220607) libadwaita (1.1.1 -> 1.1.2) libayatana-appindicator (0.5.90 -> 0.5.91) libmediaart (1.9.5 -> 1.9.6) ncurses (6.3.20220529 -> 6.3.20220604) openssl (1.1.1n -> 1.1.1o) openssl-1_1 (1.1.1n -> 1.1.1o) python-lxml (4.8.0 -> 4.9.0) tracker (3.3.0 -> 3.3.1) tracker-miners (3.3.0 -> 3.3.1) usbredir virtualbox virtualbox-kmp yast2-add-on (4.5.0 -> 4.5.1) yast2-online-update (4.5.0 -> 4.5.1) === Details === ==== NetworkManager-applet ==== Version update (1.26.0 -> 1.28.0) Subpackages: NetworkManager-applet-lang NetworkManager-connection-editor - Update to version 1.28.0: + Use correct font size for headings in order to make lives of HiDPI a little less miserable. + Updated translations. ==== colord-gtk ==== Version update (0.2.0+8 -> 0.3.0) - Update to stable release 0.3.0 + Stable release + Sync spec file with downstream - Use source signature ==== fprintd ==== Subpackages: fprintd-lang fprintd-pam fprintd-pam-32bit - Do not recommend lang package: the lang package has smarter supplements in place. ==== gnome-desktop ==== Version update (42.1 -> 42.2) Subpackages: gnome-desktop-lang gnome-version libgnome-desktop-3-19 libgnome-desktop-3_0-common libgnome-desktop-4-1 typelib-1_0-GnomeDesktop-3_0 typelib-1_0-GnomeDesktop-4_0 - Update to version 42.2: + Don't try to use bubblewrap inside snaps. ==== gnome-settings-daemon ==== Version update (42.1 -> 42.2) Subpackages: gnome-settings-daemon-lang - Update to version 42.2: + Drop direct uses of GSlice. + A11y-settings: Enable toolkit-accessibility when using the magnifier. + Xsettings: - Simplify fetching string for an enum value. - Remove direct mapping from gtk-im-module to Gtk/IMModule. + Updated translations. ==== gtk4 ==== Version update (4.6.5 -> 4.7.0) Subpackages: gtk4-lang gtk4-schema gtk4-tools libgtk-4-1 typelib-1_0-Gtk-4_0 - Update to version 4.7.0: + GtkTextView: Reduce overdraws. + GtkViewport: Default scroll-to-focus to TRUE. + GtkText: Stop blinking when we lose focus. + GtkSearchEntry: Make search delay configurable. + GtkPopoverMenu: Fix RTL positioning of buttons. + GtkLabel: Fix focus keynav with links + GtkFileChooser: - Prevent undesirable completion popups. - Fix a corner case in save mode. - Keep the portal filechooser alive long enough. + GtkCheckButton: Allow setting a custom child. + GtkEditableLabel: Make the :editing property writable. + GtkColumnView: Various optimizations to improve scrolling performance. + GtkTreeStore: Allow populating tree stores from ui files. + GtkBoxLayout: Avoid infinite loops. + CSS: Optimize reordering within the same parent. + Emoji: - Update to CLDR v40 / Unicode 14. - Add more locales. + Input: - Add scroll unit handling. - Handle display changes in GtkIMMultiContext. - Always populate GDK_AXIS_X/Y in event history. - Don't crash for large compose tables. + Accessibility: Fix a crash at start when orca is running. + Theme: - Refresh icons. - Fix selection in vertical spin buttons. - Fix selection in editable labels. + gdk: - Optimize pixel format conversions. - Use EGL_KHR_swap_buffers_with_damage for NVidia. + gsk: - Handle large viewports. - Prepare texture libraries for glyphy rendering. - Don't leak big glyphs in the glyph cache. - Align offscreen rendering with th pixel grid. - Check for half-float support before using it. + Updated translations. ==== kernel-firmware ==== Version update (20220516 -> 20220607) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network ucode-amd - Update to version 20220607 (git commit 02c69863c885): * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB8_0634 * Makefile: replace mkdir by install * iwlwifi: remove old unsupported 3160/7260/7265/8000/8265 firmware * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.9 * WHENCE: ath11k: move regdb.bin before board-2.bin * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00157 * ath10k: QCA9888 hw2.0: update board-2.bin * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00157 * ath10k: QCA4019 hw1.0: update board-2.bin * ath10k: WCN3990 hw1.0: add board-2.bin - Update aliases from 5.19-rc1 - Minor adjustment of spec template and makespec.sh to align with the latest TW format ==== libadwaita ==== Version update (1.1.1 -> 1.1.2) Subpackages: libadwaita-1-0 libadwaita-lang typelib-1_0-Adw-1 - Update to version 1.1.2: + AdwLeaflet: Fix child sizing with fold-threshold-policy=natural. + AdwStyleManager: Correctly handle removing a GdkDisplay. + AdwSwipeTracker: - Fix a memory leak. - Fix high contrast setting name when using a portal. + AdwTabBar: Fix middle click when inside GtkWindowHandle. + Stylesheet: - Fix action row title and subtitle inside GtkHeaderBar. - Fix progressbar.osd overriding text color. - Ensure active states consistently work with touchscreens. - Fix GtkDropDown visual glitch when pressed on touchscreen. + Updated translations. ==== libayatana-appindicator ==== Version update (0.5.90 -> 0.5.91) Subpackages: libayatana-appindicator3-1 typelib-1_0-AyatanaAppIndicator3-0_1 - Update to version 0.5.91 (changes since 0.5.90): * src/appindicator.c: Clean up all g_signal_emit and g_signal_new calls so that they correspond with each other. * src/appindicator.c: Fix path NULL check in status_icon_change(). * Clean up compilation flags. * tests/run-xvfb.sh: Allow sourcing run-xvfb.sh with /bin/sh. * Use /bin/sh for running tests. * src/ayatana-appindicator-0.1.pc.in. Fix for use with CMake. * Fix build with musl libc. ==== libmediaart ==== Version update (1.9.5 -> 1.9.6) Subpackages: libmediaart-2_0-0 typelib-1_0-MediaArt-2_0 - Update to version 1.9.6: + build: Add introspection/vapi/tests options. + build: Use library() to optionally build a static library. ==== ncurses ==== Version update (6.3.20220529 -> 6.3.20220604) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch +20220604 + add note on portable memory-leak checking in man/curs_memleaks.3x + remove u6-u9 from teken-2018 -TD + set "xterm-new" to "xterm-p370", add "xterm-p371" -TD ==== openssl ==== Version update (1.1.1n -> 1.1.1o) - Update to 1.1.1o release ==== openssl-1_1 ==== Version update (1.1.1n -> 1.1.1o) Subpackages: libopenssl1_1 libopenssl1_1-32bit libopenssl1_1-hmac - Update to 1.1.1o: [CVE-2022-1292, bsc#1199166] * Fixed a bug in the c_rehash script which was not properly sanitising shell metacharacters to prevent command injection. * Rebased openssl-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch * Rebased openssl-s390x-assembly-pack-add-support-for-pcc-and-kma-inst.patch - Added openssl-update_expired_certificates.patch * Openssl failed tests because of expired certificates. * bsc#1185637 * Sourced from https://github.com/openssl/openssl/pull/18446/commits ==== python-lxml ==== Version update (4.8.0 -> 4.9.0) - update to 4.9.0: * The mixin inheritance order in ``lxml.html`` was corrected. * Built with Cython 0.29.30 to adapt to changes in Python 3.11 and 3.12. ==== tracker ==== Version update (3.3.0 -> 3.3.1) Subpackages: libtracker-sparql-3_0-0 tracker-data-files tracker-lang typelib-1_0-Tracker-3_0 - Update to version 3.3.1: + Fixed blank nodes to return the correct identifier in certain queries. + Fixes to FTS consistency after updates. + Fixes to HTTP module linking. + Fix handling of STRING_LITERAL_LONG1/2 terminals. + Fix handling of negated property paths. + Use .so suffix for modules on all platforms. + Added code examples in JS/Python. + Developer documentation improvements. ==== tracker-miners ==== Version update (3.3.0 -> 3.3.1) Subpackages: tracker-miner-files tracker-miners-lang - Update to version 3.3.1: + Properly fallback to inotify monitors on fanotify failures. + Fixes to handling of files being atomically replaced. + Fixes to handling of IPTC data embedded in TIFFs. + Improvements to "tracker3 status" output and redirection handling. ==== usbredir ==== Subpackages: libusbredirhost1 libusbredirparser1 - Add upstream backported patches: + 9426fdb1.patch: Check header length unserialising data. + dffc41c3.patch: usbredirect: fix leak on bad input. ==== virtualbox ==== Subpackages: virtualbox-guest-tools virtualbox-guest-x11 - Explicitly BuildRequire pkgconfig(glx) and pkgconfig(glu): This happened to be pulled in by SDL-devel, but with the switch to sdl12-compat, this no longer happens. Virtualbox explicitly checks for them though, so it is our own responsibility to have those deps in place. ==== virtualbox-kmp ==== - Explicitly BuildRequire pkgconfig(glx) and pkgconfig(glu): This happened to be pulled in by SDL-devel, but with the switch to sdl12-compat, this no longer happens. Virtualbox explicitly checks for them though, so it is our own responsibility to have those deps in place. ==== yast2-add-on ==== Version update (4.5.0 -> 4.5.1) - Support managing system in a chroot (bsc#1199840) - 4.5.1 ==== yast2-online-update ==== Version update (4.5.0 -> 4.5.1) Subpackages: yast2-online-update-frontend - Support managing system in a chroot (bsc#1199840) - 4.5.1

1 0

Re: Why all the fear?
by Lukáš Krejza 10 Jun '22

10 Jun '22

Dne čtvrtek 2. června 2022 21:13:37 CEST, iob napsal(a): <snip> > pretty much same here. snapper is enabled for example. Never had a > serious problem and never used those fancy stuff. it was not always > perfect and with some configuration here and there, i consider TW > stable for a rolling distro. > > But in the other side, i think it is very easy to mess up or break the > system. Usually with some repo that you found online or someone > recommended etc. > > IMO one of the reasons for the fear comes from the lack of good/working > documentation and tutorial. > Yeah, that is why i mentioned documentation as one of the three most important parts that should be mentioned on the openSUSE web page here: [1]. But i guess nobody cares or noticed that, since the thread got massively off-topic. [1]: https://lists.opensuse.org/archives/list/project@lists.opensuse.org/ message/V76ABRHJ6AYC5S4UW5CE4TLQYUNZZRUW/ Regards, Gryffus

1 0

New Tumbleweed snapshot 20220525 released!
by Dominique Leuenberger 10 Jun '22

10 Jun '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: NetworkManager evince (42.2 -> 42.3) gimp gnome-keyring (40.0 -> 42.1) libstorage-ng (4.5.11 -> 4.5.14) mobile-broadband-provider-info (20220315 -> 20220511) nagios (4.4.6 -> 4.4.7) opensuse-welcome polkit-default-privs (1550+20220404.7b4bea2 -> 1550+20220524.0345bd9) python-base python-cryptography (36.0.2 -> 37.0.2) remmina (1.4.25 -> 1.4.26) seahorse (41.0 -> 42.0) xmlcharent yast2 (4.5.3 -> 4.5.4) yast2-installation (4.5.1 -> 4.5.2) yast2-ruby-bindings (4.5.0 -> 4.5.1) yast2-storage-ng (4.5.5 -> 4.5.6) zsh (5.8.1 -> 5.9) === Details === ==== NetworkManager ==== Subpackages: NetworkManager-bluetooth NetworkManager-lang NetworkManager-pppoe NetworkManager-tui NetworkManager-wwan libnm0 typelib-1_0-NM-1_0 - Fold NetworkManager-wifi back into the main package: The dep chain is not really different and it causes too many problems for users having that split. Not worth the pain (boo#1199710, boo#1199706). - As a consequence, also drop the recommends fro the main package to -wifi. ==== evince ==== Version update (42.2 -> 42.3) Subpackages: evince-lang evince-plugin-comicsdocument evince-plugin-djvudocument evince-plugin-dvidocument evince-plugin-pdfdocument evince-plugin-tiffdocument evince-plugin-xpsdocument libevdocument3-4 libevview3-3 nautilus-evince typelib-1_0-EvinceDocument-3_0 typelib-1_0-EvinceView-3_0 - Update to version 42.3: + Shell: Disconnect signal handler to prevent invalid read. + Updated translations. ==== gimp ==== Subpackages: gimp-plugin-aa gimp-plugins-python libgimp-2_0-0 libgimpui-2_0-0 - Do not recommend lang package: the lang package has smarter supplements in place. ==== gnome-keyring ==== Version update (40.0 -> 42.1) Subpackages: gnome-keyring-32bit gnome-keyring-lang gnome-keyring-pam gnome-keyring-pam-32bit libgck-modules-gnome-keyring - Update to version 42.1: + daemon: Add files to EXTRA_DIST to fix distcheck. - Changes from version 42.0: + secret-portal: Properly check the default keyring. + Build fixes. + ssh-agent: Fix crash by uninitialized GMutex. + fix looping off the end of the operations array. + readme: Mention libsecret instead of deprecated libgnome-keyring. + daemon: Make it systemd-activatable through the control socket. + Updated translations. - Add pkgcondfig(systemd) and pkgconfig(libsystemd) BuildRequires: new dependencies. ==== libstorage-ng ==== Version update (4.5.11 -> 4.5.14) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#879 - added include for gcc13 (gh#openSUSE/libstorage-ng#878) - 4.5.14 - merge gh#openSUSE/libstorage-ng#877 - use new parted type command instead of SUSE-specific type-id - extended documentation - 4.5.13 - merge gh#openSUSE/libstorage-ng#876 - added support for BitLocker using cryptsetup - extended LuksInfo class - fixed probing partition name - added testcase - updated integration tests - coding style - updated parser for 'cryptsetup status' - 4.5.12 ==== mobile-broadband-provider-info ==== Version update (20220315 -> 20220511) - Update to version 20220511: * us: update verizon MCCMNC * us: Verizon Wirleess had been awarded 301 012 * us: Verizon Wireless MMS settings * us: declare AT&T MCC MNC * at: declare lyca mobile MMS config * al: add AMC internet APN config * af: add MMS settings for AWCC * ad: add andorra telecom MMS settings * za: mtn mms * za: cell-c MMS setting * es: Add Euskaltel MMS settings * il: youphone mms (same APN for data and mms) * il: cellcom balance test * il: Rami Levi MMS settings * serviceproviders: fix indentation * il: Partner (previously known as Orange) MMS config ==== nagios ==== Version update (4.4.6 -> 4.4.7) Subpackages: nagios-www - 4.4.7 - 2022-04-14 FIXES * Fixed checkboxes in jsonquery.html (#778) (Rfferrao87) * Added SSL support for version update check (Sebastian Wolf) * Note: NEB modules using the priority/scheduling queues in libnagios may need to update headers due to symbol conflicts with OpenSSL. * Fixed XSS in homepage when displaying update check results (Sebastian Wolf) * Fixed allocation error in getcgi.c (#820) (Ariadne Conill) * Fixed Error: NULL variable for lines of spaces in resource.cfg (#814) (Ralf Herrmann) * Fixed crash when handling large check output (#825, #828) (Kilvador) * Update packaging instructions for RPM/EPEL (#850) (T.J. Yang) * Include packaging instructions for DEB (#842) (Catfriend1) * Fixed CGI object processing when names end in \ (#819) (Sebastian Wolf) * $SERVICEPROBLEMID$ now accessible when notifications are sent (#688) (Sebastian Wolf) ==== opensuse-welcome ==== - Do not recommend lang package: the lang package has smarter supplements in place. ==== polkit-default-privs ==== Version update (1550+20220404.7b4bea2 -> 1550+20220524.0345bd9) - Update to version 1550+20220524.0345bd9: * Add kinfocenter5 whitelisting (bsc#1199735). * gconf: cleanup rules used by dropped gconf2 package ==== python-base ==== Subpackages: libpython2_7-1_0 python-xml - Filter out executable-stack error that is triggered for i586 target. ==== python-cryptography ==== Version update (36.0.2 -> 37.0.2) - update to 37.0.2: * Fixed an issue where parsing an encrypted private key with the public loader functions would hang waiting for console input on OpenSSL 3.0.x rather than raising an error. * Restored some legacy symbols for older ``pyOpenSSL`` users. These will be removed again in the future, so ``pyOpenSSL`` users should still upgrade to the latest version of that package when they upgrade ``cryptography``. * Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.0.2. * **BACKWARDS INCOMPATIBLE:** Dropped support for LibreSSL 2.9.x and 3.0.x. The new minimum LibreSSL version is 3.1+. * **BACKWARDS INCOMPATIBLE:** Removed ``signer`` and ``verifier`` methods from the public key and private key classes. These methods were originally deprecated in version 2.0, but had an extended deprecation timeline due to usage. Any remaining users should transition to ``sign`` and ``verify``. * Deprecated OpenSSL 1.1.0 support. OpenSSL 1.1.0 is no longer supported by the OpenSSL project. The next release of ``cryptography`` will be the last to support compiling with OpenSSL 1.1.0. * Deprecated Python 3.6 support. Python 3.6 is no longer supported by the Python core team. Support for Python 3.6 will be removed in a future ``cryptography`` release. * Deprecated the current minimum supported Rust version (MSRV) of 1.41.0. In the next release we will raise MSRV to 1.48.0. Users with the latest ``pip`` will typically get a wheel and not need Rust installed, but check :doc:`/installation` for documentation on installing a newer ``rustc`` if required. * Deprecated :class:`~cryptography.hazmat.primitives.ciphers.algorithms.CAST5`, :class:`~cryptography.hazmat.primitives.ciphers.algorithms.SEED`, :class:`~cryptography.hazmat.primitives.ciphers.algorithms.IDEA`, and :class:`~cryptography.hazmat.primitives.ciphers.algorithms.Blowfish` because they are legacy algorithms with extremely low usage. These will be removed in a future version of ``cryptography``. * Added limited support for distinguished names containing a bit string. * We now ship ``universal2`` wheels on macOS, which contain both ``arm64`` and ``x86_64`` architectures. Users on macOS should upgrade to the latest ``pip`` to ensure they can use this wheel, although we will continue to ship ``x86_64`` specific wheels for now to ease the transition. * This will be the final release for which we ship ``manylinux2010`` wheels. Going forward the minimum supported ``manylinux`` ABI for our wheels will be ``manylinux2014``. The vast majority of users will continue to receive ``manylinux`` wheels provided they have an up to date ``pip``. For PyPy wheels this release already requires ``manylinux2014`` for compatibility with binaries distributed by upstream. * Added support for multiple :class:`~cryptography.x509.ocsp.OCSPSingleResponse` in a :class:`~cryptography.x509.ocsp.OCSPResponse`. * Restored support for signing certificates and other structures in :doc:`/x509/index` with SHA3 hash algorithms. * :class:`~cryptography.hazmat.primitives.ciphers.algorithms.TripleDES` is disabled in FIPS mode. * Added support for serialization of PKCS#12 CA friendly names/aliases in :func:`~cryptography.hazmat.primitives.serialization.pkcs12.serialize_key_and_certificates` * Added support for 12-15 byte (96 to 120 bit) nonces to :class:`~cryptography.hazmat.primitives.ciphers.aead.AESOCB3`. This class previously supported only 12 byte (96 bit). * Added support for :class:`~cryptography.hazmat.primitives.ciphers.aead.AESSIV` when using OpenSSL 3.0.0+. * Added support for serializing PKCS7 structures from a list of certificates with :class:`~cryptography.hazmat.primitives.serialization.pkcs7.serialize_certificates`. * Added support for parsing :rfc:`4514` strings with :meth:`~cryptography.x509.Name.from_rfc4514_string`. * Added :attr:`~cryptography.hazmat.primitives.asymmetric.padding.PSS.AUTO` to :class:`~cryptography.hazmat.primitives.asymmetric.padding.PSS`. This can be used to verify a signature where the salt length is not already known. * Added :attr:`~cryptography.hazmat.primitives.asymmetric.padding.PSS.DIGEST_LENGTH` to :class:`~cryptography.hazmat.primitives.asymmetric.padding.PSS`. This constant will set the salt length to the same length as the ``PSS`` hash algorithm. * Added support for loading RSA-PSS key types with :func:`~cryptography.hazmat.primitives.serialization.load_pem_private_key` and :func:`~cryptography.hazmat.primitives.serialization.load_der_private_key`. This functionality is limited to OpenSSL 1.1.1e+ and loads the key as a normal RSA private key, discarding the PSS constraint information. ==== remmina ==== Version update (1.4.25 -> 1.4.26) Subpackages: remmina-lang remmina-plugin-rdp remmina-plugin-secret remmina-plugin-vnc - Do not recommend lang package: the lang package has smarter supplements in place. - Updated to remmina version 1.4.26 - Major improvements: * A Python plugin/API (you can write Remmina plugins in Python now!!!) * X11 Forward for the SSH plugin @marco.fortina * Kiosk improvements and new command lines options - Other changes: * Fix trial for 2577: Closing a VNC connection makes Remmina close all other... * Handle after-auth connection errors in VNC properly * Using Remmina from command-line for kiosked servers * Manual page refactoring fixes #2056 (closed) * Add mutex to protect RDP clipboard->srv_data. Fixes #2666 (closed) * Add '--no-tray-icon' command-line option * Make FreeRDPs TLS Security Level setting accessible in the advanced settings view * Disable grabs for SSH and SFTP, #closes #2728 (closed) * Cannot disable shared folder * Use PyInitializeEx in order to skip signal handler registration * Ignore add new connection button in kiosk mode * WWW plugin refactoring ==== seahorse ==== Version update (41.0 -> 42.0) Subpackages: gnome-shell-search-provider-seahorse seahorse-lang - Update to version 42.0: + pgp: Fix GPG version check. + desktop: Add pgp,gpg to the description. + search-provider: Don't escape result description as markup. + gkr: Network label fixes. + ssh: Fix CPU Usage Spike When Calling ssh-keygen. + desktop: Add supported mime types to .desktop file> + desktop: Mark application as adaptive. + metainfo: Align app name with .desktop name. + ui: Opt-in to color scheme user preference> + Updated translations. ==== xmlcharent ==== - Handle update case as well (boo#1199754) ==== yast2 ==== Version update (4.5.3 -> 4.5.4) Subpackages: yast2-logs - Added experimental infrastructure for managing system in a chroot (bsc#1199840) - 4.5.4 ==== yast2-installation ==== Version update (4.5.1 -> 4.5.2) - AutoYaST Second Stage: Added a missing dependency to the service to prevent getty-autogeneration listen on 5901 port (bsc#1199746) - 4.5.2 ==== yast2-ruby-bindings ==== Version update (4.5.0 -> 4.5.1) - Added experimental infrastructure for managing system in a chroot (bsc#1199840) - 4.5.1 ==== yast2-storage-ng ==== Version update (4.5.5 -> 4.5.6) - Fixed failing unit test: Added translatable message for new libstorage enum type for bitlocker (bsc#1199832) - 4.5.6 ==== zsh ==== Version update (5.8.1 -> 5.9) - update to 5.9: zsh 5.9 is dedicated to the memory of Sven Guckes, who was, amongst other things, a long-time zsh advocate. For more information, see: https://linuxnews.de/2022/02/sven-guckes-verstorben/ https://groups.google.com/g/vim_announce/c/MJBKVd-xrEE/m/joVNaDgAAgAJ When unsetting a hash element, the string enclosed in square brackets is interpreted literally after any normal command-line-argument expansions. Thus unset "hash[$key]" first expands $key as usual for a double-quoted string, and then interprets that result as the exact hash element to unset. This differs from previous versions of the shell, which would also remove a leading backslash for an unusual subset of characters in the expansion of $key. Note this also means, for example, that now unset 'hash[ab]cd]' unsets the element with key "ab]cd" rather than silently doing nothing. The function command learnt a -T option to declare a function and enable tracing for it simultaneously. The option SHORT_REPEAT was added to enable the short syntax of SHORT_LOOPS for the repeat command only. It is disabled by default. The _arguments function now supports NUL-delimiting optargs in the opt_args array via the -0 option. Developers of completion functions should find this easier to handle reliably than the default colon-delimiting behaviour. The zsh/system module's `zsystem flock` command learnt an -i option to set the wait interval used with -t. Additionally, -t now supports fractional seconds. The option CLOBBER_EMPTY was added to enable the overwrite behaviour of CLOBBER for empty files only. It is disabled by default. A (-) expansion flag was added. It works like (n) but correctly sorts negative numbers. The (*) expansion flag enables EXTENDED_GLOB for pattern matching. For example, ${(*)sample/(#b)*(pat)*/${match[1]}} uses backreferences even if EXTENDED_GLOB is not otherwise set. However, this does not descend into nested exapansions, and doubling as (**) does not disable EXTENDED_GLOB. The compinit function learnt a -w option to explain why compdump runs. When run without the -i or -u options and compaudit discovers security issues, answering "y" to the "Ignore insecure ..." prompt removes the insecure elements (like the -i option) where previously it ignored the result (thus formerly like the -u option). Further, removing those elements includes dropping directories from the $fpath array. The zsh/datetime module's strftime builtin learnt an -n option to omit the trailing newline when printing a formatted time. The XTRACE option is now disabled while running user-defined completion widgets. This corresponds to long-standing behavior of other user ZLE widgets. Use the _complete_debug widget to capture XTRACE output, or use "functions -T" to enable tracing of specific completion functions. The fc builtin learnt an -s option which is a POSIX equivalent to the `fc -e-` method of re-executing a command without invoking an editor. The option CASE_PATHS was added to control how NO_CASE_GLOB behaves. NO_CASE_GLOB + NO_CASE_PATHS is equivalent to the current NO_CASE_GLOB behaviour. NO_CASE_GLOB + CASE_PATHS treats only path components that contain globbing characters as case-insensitive; this behaviour may yield more predictable results on case-sensitive file systems. NO_CASE_PATHS is the default. With the new TYPESET_TO_UNSET option set, "typeset foo" leaves foo unset, in contrast to the default behavior which assigns foo="". Any parameter attributes such as numeric type, sorting, and padding are retained until the parameter is explicitly unset or a conflicting value is assigned. This is similar to default behavior of bash and ksh. This option is disabled by default. The compadd builtin's -D option can now be specified more than once. The zsh/zutil module's zformat builtin learnt an -F option which behaves like -f except that ternary expressions check for existence instead of doing math evaluation. The conventional syntax used to indicate units, ranges, and default values in completion descriptions (e.g. `timeout (seconds) (0-60) [20]`) is now recognised by the completion system itself. These components are parsed out of the description and can be individually styled. A _numbers helper function has been added to help function authors offer rich completion for these values. The log builtin, WATCH parameter, et al., have been broken out into a separate module, zsh/watch. The module is enabled by default. The zsh/watch module's WATCHFMT parameter now supports colours via the %F and %K escapes. The STTY parameter can now be set to an empty string before running a command to automatically restore terminal settings after the command finishes. The "jobs" command and "$jobstates" and related parameters can report on parent shell jobs even in subshells. This is a snapshot of the parent state, frozen at the point the subshell started. However, if a subshell starts its own background jobs, the parent state is discarded in order to report on those new jobs. - drop ncurses-fix.patch: upstream

4 4

Tumbleweed - Review of the week 2022/23
by Dominique Leuenberger / DimStar 10 Jun '22

10 Jun '22

Dear Tumbleweed users and hackers, Another week is over and many people had the pleasure to meet in person at the openSUSE conference ’22 this year. I hear it was a great event, with lots of fun. Exactly, what the openSUSE community stands for. And as usual, the same openSUSE community also works without interruption on the rolling release: openSUSE Tumbleweed. In this week, we have seen daily snapshots (0602…0608). The main changes included in these snapshots include: * Bind 9.18.3 * Poppler 22.06.0 * libdrm 2.4.111: libkms has been removed * Linux kernel 5.18.1 & 5.18.2 * Mozilla Firefox 101.0 * Mesa 22.1.1 * Wine 7.10 Looking at the current staging projects and the release schedule of some upstream, next week promises to be interesting. We are currently working on: * openssl 1.1.1o * KDE Plasma 5.25.0 * KDE Gear 22.04.2 * Systemd 251.2 * SELinux 3.4 * Python 3.10 as the default interpreter: all build fails should be addressed and first, preliminary openQA results looked good. Almost there! * krb5 1.20.0: breaks samba * Sphinx 5: breaks qemu Cheers, Dominique

1 0

Can't upgrade to kernel 5.18.1
by Michal Vyskocil 09 Jun '22

09 Jun '22

Hi, I have a weird dependency problem when trying to upgrade the system, where kernel-default-base conflicts with kernel-default. I use distro kernels only. sudo zypper dup --no-allow-vendor-change Problem: the to be installed kernel-default-base-5.18.1-1.1.24.16.x86_64 conflicts with 'kernel-default = 5.18.1-1' provided by the to be installed kernel-default-5.18.1-1.1.x86_64 Solution 1: deinstallation of kernel-default-5.17.9-1.1.x86_64 Solution 2: deinstallation of kernel-default-base-5.17.7-1.1.24.14.x86_64 Solution 3: keep obsolete kernel-default-5.17.9-1.1.x86_64 Solution 4: keep obsolete kernel-default-base-5.17.7-1.1.24.14.x86_64 Any hints on how to resolve this? Bye Michal

4 7

New Tumbleweed snapshot 20220608 released!
by Dominique Leuenberger 09 Jun '22

09 Jun '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ImageMagick (7.1.0.35 -> 7.1.0.37) cppcheck (2.7.5 -> 2.8) hylafax+ iso-codes (4.9.0 -> 4.10.0) kdump (1.0.2+git12.g1a68ca5 -> 1.0.2+git13.ge715180) kernel-source (5.18.1 -> 5.18.2) kexec-tools (2.0.22 -> 2.0.24) libnftnl (1.2.1 -> 1.2.2) makedumpfile (1.7.0 -> 1.7.1) nftables (1.0.2 -> 1.0.4) snapper === Details === ==== ImageMagick ==== Version update (7.1.0.35 -> 7.1.0.37) Subpackages: ImageMagick-config-7-SUSE ImageMagick-extra libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - update version to 7.1.0.37 * Support Unicode MP4 filenames * set pass when webp:target-size or webp:target-psnr are set to fix #4931 * Corrected rotation angle for right-top and left-bottom in auto-orient. see the upstream changelog: https://github.com/ImageMagick/Website/blob/main/ChangeLog.md - version update to 7.1.0.36 see the upstream changelog: https://github.com/ImageMagick/Website/blob/main/ChangeLog.md ==== cppcheck ==== Version update (2.7.5 -> 2.8) - update to 2.8: * Lifetime analysis can now track lifetime across user-defined constructors when they are inline and using member initializer list. * SymbolDatabase can now deduce iterator types from how they are specified in the library files. * ValueFlow can evaluate class member functions that return known values. * Improve duplicateValueTenary to not warn when used as an lvalue or when one branch has side effects * Fix variableScope to not warn when variables are used in lambda functions * Fix unassignedVariable warnings when using structured bindings * Fix redundantInitialization warning when variable is used in a lambda * Fix variableScope warnings when using if/while init-statement * Improve lifetime analysis when returning variadic template expressions * Detect more statements with constStatement * Detect variableScope for more types * Improvements to unreadVariable * Detect more instances of C style casts * Warn if the return value of new is discarded * The pre-ValueFlow uninitialized checker now uses a different ID as legacyUninitvar * Extended library format to exclude specific function argument values ==== hylafax+ ==== Subpackages: hylafax+-client libfaxutil7_0_5 - Project and download links switched to https libtiff44.diff added for tiff 4.x compatibility ==== iso-codes ==== Version update (4.9.0 -> 4.10.0) Subpackages: iso-codes-lang - update to 4.10.0: * Update ISO 639-2 codes to include Montenegrin (cnr) added in 2017. * Update ISO 4217. Fixes #24 * ISO 639-3: New translation for Friulian * ISO 639-5: New translations for Esperanto, Hindi, Russian * ISO 4217: New translation for Esperanto * Translation updates for ISO 3166-1 * Translation updates for ISO 3166-2 * Translation updates for ISO 3166-3 * Translation updates for ISO 639-2 * Translation updates for ISO 639-3 * Translation updates for ISO 639-5 * Translation updates for ISO 4217 * Translation updates for ISO 15924 * ISO 3166-2: Add parent codes for GB. Fixes #36 * ISO 3166-2: Fix subdivision names for Finland. Fixes #37 ==== kdump ==== Version update (1.0.2+git12.g1a68ca5 -> 1.0.2+git13.ge715180) - kdumptool calibrate: add more margin to reservation calculations (bsc#1196728) ==== kernel-source ==== Version update (5.18.1 -> 5.18.2) - Update config files (only run_oldconfig.sh). - commit 695cfee - Linux 5.18.2 (bsc#1012628). - netfilter: nf_tables: disallow non-stateful expression in sets earlier (bsc#1012628). - i2c: ismt: prevent memory corruption in ismt_access() (bsc#1012628). - assoc_array: Fix BUG_ON during garbage collect (bsc#1012628). - pipe: make poll_usage boolean and annotate its access (bsc#1012628). - pipe: Fix missing lock in pipe_resize_ring() (bsc#1012628). - net: ipa: compute proper aggregation limit (bsc#1012628). - drm/i915: Fix -Wstringop-overflow warning in call to intel_read_wm_latency() (bsc#1012628). - exfat: check if cluster num is valid (bsc#1012628). - netfilter: nft_limit: Clone packet limits' cost value (bsc#1012628). - netfilter: nf_tables: sanitize nft_set_desc_concat_parse() (bsc#1012628). - netfilter: nf_tables: hold mutex on netns pre_exit path (bsc#1012628). - netfilter: nf_tables: double hook unregistration in netns path (bsc#1012628). - netfilter: conntrack: re-fetch conntrack after insertion (bsc#1012628). - KVM: PPC: Book3S HV: fix incorrect NULL check on list iterator (bsc#1012628). - x86/fpu: KVM: Set the base guest FPU uABI size to sizeof(struct kvm_xsave) (bsc#1012628). - x86/kvm: Alloc dummy async #PF token outside of raw spinlock (bsc#1012628). - x86, kvm: use correct GFP flags for preemption disabled (bsc#1012628). - x86/uaccess: Implement macros for CMPXCHG on user addresses (bsc#1012628). - KVM: x86: Use __try_cmpxchg_user() to update guest PTE A/D bits (bsc#1012628). - KVM: x86: Use __try_cmpxchg_user() to emulate atomic accesses (bsc#1012628). - KVM: x86: fix typo in __try_cmpxchg_user causing non-atomicness (bsc#1012628). - KVM: x86: avoid loading a vCPU after .vm_destroy was called (bsc#1012628). - KVM: x86: Fix the intel_pt PMI handling wrongly considered from guest (bsc#1012628). - KVM: x86: Drop WARNs that assert a triple fault never "escapes" from L2 (bsc#1012628). - KVM: x86/mmu: Don't rebuild page when the page is synced and no tlb flushing is required (bsc#1012628). - KVM: SVM: Use kzalloc for sev ioctl interfaces to prevent kernel data leak (bsc#1012628). - crypto: caam - fix i.MX6SX entropy delay value (bsc#1012628). - crypto: ecrdsa - Fix incorrect use of vli_cmp (bsc#1012628). - crypto: qat - rework the VF2PF interrupt handling logic (bsc#1012628). - zsmalloc: fix races between asynchronous zspage free and page migration (bsc#1012628). - tools/memory-model/README: Update klitmus7 compat table (bsc#1012628). - ALSA: usb-audio: Workaround for clock setup on TEAC devices (bsc#1012628). - ALSA: usb-audio: Add missing ep_idx in fixed EP quirks (bsc#1012628). - ALSA: usb-audio: Configure sync endpoints before data (bsc#1012628). - Bluetooth: hci_qca: Use del_timer_sync() before freeing (bsc#1012628). - ARM: dts: s5pv210: Correct interrupt name for bluetooth in Aries (bsc#1012628). - dm integrity: fix error code in dm_integrity_ctr() (bsc#1012628). - dm crypt: make printing of the key constant-time (bsc#1012628). - dm stats: add cond_resched when looping over entries (bsc#1012628). - dm verity: set DM_TARGET_IMMUTABLE feature flag (bsc#1012628). - raid5: introduce MD_BROKEN (bsc#1012628). - fs/ntfs3: validate BOOT sectors_per_clusters (bsc#1012628). - HID: multitouch: Add support for Google Whiskers Touchpad (bsc#1012628). - HID: multitouch: add quirks to enable Lenovo X12 trackpoint (bsc#1012628). - x86/sgx: Disconnect backing page references from dirty status (bsc#1012628). - x86/sgx: Mark PCMD page as dirty when modifying contents (bsc#1012628). - x86/sgx: Obtain backing storage page with enclave mutex held (bsc#1012628). - x86/sgx: Fix race between reclaimer and page fault handler (bsc#1012628). - x86/sgx: Ensure no data in PCMD page after truncate (bsc#1012628). - media: i2c: imx412: Fix reset GPIO polarity (bsc#1012628). - media: i2c: imx412: Fix power_off ordering (bsc#1012628). - tpm: Fix buffer access in tpm2_get_tpm_pt() (bsc#1012628). - tpm: ibmvtpm: Correct the return value in tpm_ibmvtpm_probe() (bsc#1012628). - docs: submitting-patches: Fix crossref to 'The canonical patch format' (bsc#1012628). - NFS: Memory allocation failures are not server fatal errors (bsc#1012628). - NFSD: Fix possible sleep during nfsd4_release_lockowner() (bsc#1012628). - bpf: Fill new bpf_prog_pack with illegal instructions (bsc#1012628). - bpf: Fix potential array overflow in bpf_trampoline_get_progs() (bsc#1012628). - bpf: Fix combination of jit blinding and pointers to bpf subprogs (bsc#1012628). - bpf: Enlarge offset check value to INT_MAX in bpf_skb_{load,store}_bytes (bsc#1012628). - bpf: Fix usage of trace RCU in local storage (bsc#1012628). - bpf: Fix excessive memory allocation in stack_map_alloc() (bsc#1012628). - bpf: Reject writes for PTR_TO_MAP_KEY in check_helper_mem_access (bsc#1012628). - bpf: Check PTR_TO_MEM | MEM_RDONLY in check_helper_mem_access (bsc#1012628). - bpf: Do write access check for kfunc and global func (bsc#1012628). - ALSA: usb-audio: Optimize TEAC clock quirk (bsc#1012628). - commit b7b9d3b - Remove mistakenly enabled CONFIG_JBD2_DEBUG. - commit 7534680 - iommu/amd: Increase timeout waiting for GA log enablement (bsc#1199052). - commit dfccb72 - iommu/amd: Increase timeout waiting for GA log enablement (bsc#1199052). - commit 0578d76 - KVM: x86: avoid calling x86 emulator without a decoded instruction (CVE-2022-1852 bsc#1199875). - commit b4b07c8 - KVM: x86: avoid calling x86 emulator without a decoded instruction (CVE-2022-1852 bsc#1199875). - commit 01a406d ==== kexec-tools ==== Version update (2.0.22 -> 2.0.24) - update to 2.0.24: * arm64: fix static data relocations in machine_apply_elf_rel() * kexec/elf: assign one to align if sh_addralign equals zero * arm64/crashdump-arm64: explicit type conversion to suppress compiler warning * arm64/kexec-arm64: add support for R_AARCH64_MOVW_UABS_G* rela * arm64/kexec-arm64: use enum to organize the reloc type * arm64/kexec-arm64: add support for R_AARCH64_LDST128_ABS_LO12_NC rela * kexec-tools: fix leak FILE pointer. * purgatory: do not enable vectorization automatically for purgatory compiling * kexec-tools: Determine if the image is lzma commpressed * util_lib/elf_info: harden parsing of printk buffer * github: run apt-get update before installing packages * kexec-xen: Allow xen_kexec_exec() to return in case of Live Update * kexec-tools: print error if kexec_file_load fails * kexec-tools: mips: Concatenate --reuse-cmdline and --append * kexec-tools: mips: Add some debug info * arm64: fix PAGE_OFFSET calc for flipped mm * arm64: read VA_BITS from kcore for 52-bits VA kernel * arm64/crashdump: unify routine to get page_offset * arm64: make phys_offset signed * s390: add support for --reuse-cmdline * use slurp_proc_file() in get_command_line() * add slurp_proc_file() * s390: use KEXEC_ALL_OPTIONS * s390: add variable command line size * arm64: support more than one crash kernel regions * s390: handle R_390_PLT32DBL reloc entries in machine_apply_elf_rel() * arm64/crashdump: deduce paddr of _text based on kernel code size - drop kexec-tools-print-error-if-kexec_file_load-fails.patch, kexec-tools-remove-duplicate-ramdisk-definition.patch (upstream) - add homepage url - add gpg validation ==== libnftnl ==== Version update (1.2.1 -> 1.2.2) - Update to release 1.2.2 * exthdr: tcp option reset support ==== makedumpfile ==== Version update (1.7.0 -> 1.7.1) - Update to 1.7.1: * support for kernel up to 5.17 * sadump: remove variable length array * print error when reading with unsupported compression - Drop upstreamed makedumpfile-sadump-kaslr-fix-kaslr_offset-calculation.patch ==== nftables ==== Version update (1.0.2 -> 1.0.4) Subpackages: libnftables1 python3-nftables - Update to release 1.0.4 * Fixed a segfault in -o/--optimize with unsupported statements. * Bogus datatype mismatch error report in sets was fixed. - Update to release 1.0.3 * Support for wildcard interface name matching with sets * Support for runtime auto-merge of set elements. * Enhancements for the ruleset optimization -o/--optimize option which allows to coalesce several NAT rules into map. * Support for raw expressions in concatenations. * Support for integer type protocol header fields in concatenations. * Allow to reset TCP options (requires Linux kernel >= 5.18) - Drop 0001-build-add-missing-AM_CPPFLAGS-to-examples.patch ==== snapper ==== Subpackages: libsnapper6 snapper-zypp-plugin - added generic plugin support (gh#openSUSE/snapper#727)

1 0

Clipboard cut/paste partially broken in build 20220519
by Joe Salmeri 08 Jun '22

08 Jun '22

Clipboard cut/paste was partially broken in build 20220519 ( updated from build 20220422 ) where it worked without any problems. The problem specifically occurs between WINE apps and native apps. Cut/Paste between native apps like Kate and LibreOffice Write works fine in both directions. Cut/Paste between 2 WINE apps like 2 instances of Notepad also works fine. Cut/Paste between a Native app and a WINE app does NOT work. Examples: Kate cut and paste to Notepad does NOT work LibreOffice Writer cut and paste to Notepad does NOT work Cut/Paste between a WINE app and a Native app works fine. Examples: Notepad cut and paste to Kate works fine Notepad cut and paste to LibreOffice Writer works fine NOTE: I used Notepad as the WINE app in my examples because it is install when WINE was installed but the WINE app does NOT have to be Notepad. The problem actually also occurs with all the other WINE apps which I have installed when the cut was done in a native app.

3 5

New Tumbleweed snapshot 20220607 released!
by Dominique Leuenberger 08 Jun '22

08 Jun '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: Mesa Mesa-drivers alsa alsa-ucm-conf gstreamer-plugins-bad javapackages-tools libdrm (2.4.110 -> 2.4.111) libfprint (1.94.3 -> 1.94.4) mariadb-connector-c mutt (2.2.3 -> 2.2.5) python-Twisted python-traitlets (5.1.1 -> 5.2.2) === Details === ==== Mesa ==== Subpackages: Mesa-dri-devel Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - removed libkms BuildRequires, since it has been dropped from libdrm ==== Mesa-drivers ==== Subpackages: Mesa-dri Mesa-gallium Mesa-libva libxatracker2 - removed libkms BuildRequires, since it has been dropped from libdrm ==== alsa ==== Subpackages: libasound2 libasound2-32bit libatopology2 - Backport upstream fixes for 32bit inode and ELD parsing: 0001-conf-Use-ino64_t-to-save-and-compare-inode-numbers.patch 0002-control-eld-fix-the-decoding-for-older-hw.patch ==== alsa-ucm-conf ==== - Backport upstream fixes for Steinberg UR44: 0001-Steinberg-UR44-fix-the-Line2-channel-mapping.patch 0002-Steinberg-UR44-fix-the-Line2-channel-mapping-2nd.patch 0003-Steinberg-UR44-fix-the-direction-for-steinberg_ur44_.patch ==== gstreamer-plugins-bad ==== Subpackages: gstreamer-plugins-bad-lang libgstadaptivedemux-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstphotography-1_0-0 libgstplay-1_0-0 libgstplayer-1_0-0 libgstsctp-1_0-0 libgsturidownloader-1_0-0 libgstva-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 - removed libkms BuildRequires, since it has been dropped from libdrm ==== javapackages-tools ==== Subpackages: javapackages-filesystem - Fix wrong conditioning of the python-six require. ==== libdrm ==== Version update (2.4.110 -> 2.4.111) Subpackages: libdrm-devel libdrm2 libdrm_amdgpu1 libdrm_intel1 libdrm_nouveau2 libdrm_radeon1 - update to 2.4.111 * bugfixes * drops libkms - added tegra-* tools on aarch64 to spefile ==== libfprint ==== Version update (1.94.3 -> 1.94.4) - update to 1.94.4: * synaptics: New PIDs 0x0168, 0x015f * elan: New PID 0x0c4b * elanspi: New PID 0x241f * synaptics: Minor fix to interrupt transfer resubmission * Avoid sysfs writes if value is already expected * Improvements to the testing setup * Fixes to the internal critical section API ==== mariadb-connector-c ==== - Add pkgconfig compatibility symlink for mysqlclient ==== mutt ==== Version update (2.2.3 -> 2.2.5) Subpackages: mutt-doc mutt-lang - update to 2.2.5: * fixing two issues with libgsasl authentication. * fixing some regressions with Maildir/mh mailbox path normalization that were added in 2.2.0. Please see the UPDATING file for more details. ==== python-Twisted ==== - Stop removing test directories, it also removes a public module. (bsc#1198852, bsc#1198854, bsc#1198855) ==== python-traitlets ==== Version update (5.1.1 -> 5.2.2) - Update to 5.2.2 * Make all explicit and validate in test by @blink1073 in #737 * Fix KeyError in Application.get_default_logging_config by @tonyroberts in #724 - Release 5.2.1 * Switch to hatch backend by @blink1073 in #728 * logging: don't attempt to close handlers unless they have been opened by @oliver-sanders in #727 - Release 5.2.0 * Add mypy support by @blink1073 in #705 * Disambiguate the use of the term value in the example. by @metaperl in #694 * Correct spelling and grammar errors. by @metaperl in #695 * DOC: Add log example by @Carreau in #693 * Put description of signature_has_traits after the header for it. by @metaperl in #711 * Application: add logging_config trait by @oliver-sanders in [#698] * [DOC] Give explicit list of private symbols for 5.0 by @vidartf in #692 * Add pre-commit and run auto-formatters by @blink1073 in #699 * Fix downstream test by @blink1073 in #701 * Add docs on pre-commit and use manual hooks where appropriate by @blink1073 in #700 * Set up flake8 by @blink1073 in #703 * Typing: tell mypy we have type, update all. by @Carreau in #713 * Improve CI by @blink1073 in #706 * Fix typing errors by @blink1073 in #718 * Use flit build backend by @blink1073 in #720 * Add Changelog Entry for 5.2.0 by @blink1073 in #717 - Add traitlets-pr739-fixversion.patch -- gh#ipython/traitlets#739

1 0

openSUSE Release Engineering meeting 08.06.2022
by Lubos Kocman 08 Jun '22

08 Jun '22

All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting Meeting is hosted here https://meet.opensuse.org/ReleaseEngineeringMeeting ## Attendees DimStar, ddemaio, DocB, guillaumeg, rbrown, Sarah, lkocman, Rado, Peter, maxlin, dirk, gp, meissner ## SUSE IT - Rado | Martin isv:SUSE:suse-it-infra Setup home:mpiala:suse-it-infra * Rado | fix of OBS login SUMA demo - at the moment, there are two major issues in SUMA. okta integration and availability for public internet. Rado: Management of devices need to be integated with OKTA. In case SUSE IT will not find any other solution, SUMA and feature integration sounds like a way to go. ## Leap 15.4 GA is today at 12:00 UTC GM Images are live on ftp-prod. Wed June 8th 12:00 UTC will be marketing annoucement and deadline for infra readiness. Leap Micro async updates to the current image: Update post meeting: we do have an approval to have a public repo with SLE Micro updates. So we won't have to constatly rebuild product images/repositories as suggested in https://en.opensuse.org/Portal:LeapMicro/Lifecycle Leap Micro related - ignite{,-stage}.opensuse.org requested in https://progress.opensuse.org/issues/111452 Agremeent from conference to build container in OBS and deploy it as a container (cboltz, bernhard agreed) SUSE will host 5 El Rancho SUSE students for a summer job with SUSE support. They will be in Provo Utah for a one-week onboarding June 20 - 24. The agreement is to have a talk about how to get engaged in openSUSE. The expectation is something like a 20' talk and 10' for questions (we'll have to jump-start an inclusive conversation, of that I'm sure). Contact person is Leopoldo M. Since we've already had a group of students on our call, I think we can iterate on that (invite people), introduce perhaps edu(a)lists.opensuse.org, and show them easy ways how to start contributing. Is somebody from the community interested in the mentorship of students? If so let us know. This could be mentorship on projects/thesis, field trips, or virtual discussions with parents to ensure support. Feel free to share your preferred contact with Leopoldo.Macias@suse Internal URL for SUSE employees https://forms.office.com/Pages/ResponsePage.aspx?id=9nqh91wcNkqqi_W-JHqkutS… Data from MirrorCache could be available next week (would help hotstuff list generation) Donating HW for full mirror on a particular university in Brazil, would help us to start a good relationship. lkocman will talk to Vojtech. ## openSUSE Tumbleweed openSUSE:Factory build fail stats: 383 failed, 12 unresolvable (last week: 395/10) https://tinyurl.com/ysy4nnnz * Kernel 5.18 was published as part of Snapshot 0602; I have not seen weird issues (but a few reports that older issues have been fixed) * GNOME 42.2 was part of Snapshot 0601 (gnome-desktop was released late by upstream - so control-center still identifies as 42.1) * SELinux 3.4 is in Staging:C - breaks a few image builds using kiwi; not clear yet if kiwi or SELinux is at fault * Switch for python 3.10 as main interpreter is work in progress, Staging:A is shaping up. Ceph is the last blocker where we have no fix queued up GPG Key to sign packages/repos is planned to be updated to be a 4096/RSA key (implementation schedule pending) Tracker bug : https://bugzilla.suse.com/show_bug.cgi?id=1199184 ## Richard (Kubic/MicroOS) Winding down the Kubic project. kubic.opensuse.org to be wound down and repurposed for kubeadm config only MicroOS/Kubic patterns partially tidied up, completion WIP Kubernetes 1.24 still in holding while the kubic winddown fallout and tidying up is done MicroOS Desktop abandoning use of packagekit/pkcon/tukit installation methods due to lack of maintenance/bug fixes, expect an update to revert to using transactional-update by default. +1 to make this clearer ## Max * GM preparation work * Disabling of tools * Disabling of project build * Did set the needed attributes on Leap and Backports project after code freeze * Raspberry Pi USB Boot problems * We could track it as a known issue in RN (Otherwise it's already listed in Raspberry PI HCL section on wiki) * Candidate for 15.4 QU1 respin is ^ as well as the wlan0 issue https://bugzilla.suse.com/show_bug.cgi?id=1186677 ## Guillaume - Arm Tumbleweed: * llvm9 has been dropped from Factory, but ghc-bootstrap still requires it for aarch64 and armv6/7: https://bugzilla.opensuse.org/show_bug.cgi?id=1199897 * Last Kubic DVD iso built is still available at http://download.opensuse.org/ports/aarch64/tumbleweed/iso/ lkocman: Do we need to change something at get-o-o regarding kubic? Dimstar: Richard was busy :-) So nothing to do * installation-images fail to build. Should be fixed with: https://github.com/openSUSE/installation-images/pull/599 * kernel-* packages were in a rebuild loop, without traces in job history in OBS. This prevented snapshots to finish. Dirk restarted obs- arm-7 which was faulty. 20220607 should reach openQA later today. Leap 15.4: * armv7: * Enlightenment package not built before the lock of the project (was still failing in rpmlint check due to a missing whitelist). maybe provide it via update channel? https://bugzilla.opensuse.org/show_bug.cgi?id=1194047 Leap Micro 5.2: No Updates this week * Default-SelfInstall: still some issues in openQA: https://progress.opensuse.org/issues/110845 (works locally) ## Sarah - s390 We do not have access continuously to s390x bug reports on openQA: https://bugzilla.suse.com/show_bug.cgi?id=1178761 (fixed) All maven issues related to s390x are fixed. A new OpenJDK 17 is available for testing. If all is ok, then we can make it as a default. s390-tools are updated. Tumbleweed: * Is rolling openSUSE Leap 15.4: * no issues We had a nice team meeting at the conference (incl. a Power guy for an IBM technology meeting). :) ## Doug * Looking into infra options for Brazil * Leap * release today * Release party?? /bar as long as possible + skribbl.io * TSP * Running into difficulties with solution * oSC22 * videos are starting to be published * Need to manage a few admin tasks * OSCAL oSC22 * Will do meetup with Fedora * Schedule complete * GSoC * Projects start June 13 I'm getting asks for videos from recent SUSE's open house cz. lkocman will talk to organisers. I'll connect the dots and see what can be done. ## Dirk * io_uring support finally enabled in OBS (and IBS) for many workers, all architectures (also s390x) . ppc64le is broken. at least 30% better i/o performance on the many-build-jobs hosts, and far fewer load peaks * more fixes from gcc 12 fallout * prepared the python 3.10 fix to installation images together with snwint * submitted ~ 50 package updates. tmux update to 3.3 broke yast2-ruby- bindings again, will look at it ## Wolfgang (Package Hub), Scott Bahling Scott: lack of policy checking into Backports submission https://bugzilla.suse.com/show_bug.cgi?id=1199841 Document the process for 15.5 and also ALP (once related). Max: compared to the Leap before CtLG, orgin manager(formerly leaper) replacement is missing opensuse-reviews are still happening for Leap 15.4 top level project (but this project lacks other staging reviews) Backports has most of reviews implemented, but is missing the opensuse- reviews involved via origin-manager or leaper. Dominique: please do not just enable opensuse-reviewer for all of the reviews, it's pretty much just me. We need to find resources first. Scott: the original idea was let's just inherit from Factory, we assume that it's already there. If it happens to deviate from factory, then backport-reviewers would have a look. Perhaps we need to document and "follow the policy" even more. Max: this is problematic as we're receveing a lot of Leap and/or Backports specific fixes. Looking into a issue where mirror admins reported growing size of Leap / Backports. Adrian and Wolfgang are looking into that. Adrian: addition of mirroring of SP4:GA, for some days some architectures were behind and we've had doubled amount of noarch packages. It's expected behavior. Project will be frozen soon. Marcus: Did we do version updates for 15.4 from Factory. We did that in around Alpha phase. Marcus: some of the SP3:Updates were not picked up by Package HUB - SP4. Dirk: I also noticed some overriden versions from SP3. Lubos will check with Wolfgang on this one. Marcus did not see the usual review requests. Max we will need to either revive factory source checker or leaper checker ## Maintenance team (Marina or Marcus, Maurizio (m4u)) Not available 15.4 Update openQA was setup this week Staff is moving as usual. Stuff? or is the staff physically moving to new SUSE building? ;-) - Marcus: 15.4 is set up channel wise, updates will go in testing occasionaly, if you need more ping me, no openqa setup yet lkocman: could you please help me with cleanup of maintenance tasks in https://progress.opensuse.org/projects/opensuse-leap-15-4/issues/gantt lkocman: will contact Jan Stehlik. Santi (PO for the topic) mentioned he'll work on it. lkocman: messaged Jan Jan confirmed with me that they're on it. lkocman: (still pending) will open a release notes entry for a change Security Advisory identification TODO Marcus: could you give me example of old and new values? - Marina and Maurizio: SLE-PackageHub overlaps (https://github.com/openSUSE/openSUSE-release-process/issues/71) work in progress following the initial list of overlapping packages (https://progress.opensuse.org/issues/106610#note-3). More incidents are under QA. Work is going on and under control (and tracked internally as jsc#MSC-303). Already released: (AH PERFECT!) SUSE:Maintenance:22929:265929 (babl libbabl-0_1-0 typelib-1_0-Babl-0_1) SUSE:Maintenance:23000:266006 (MozillaThunderbird enigmail) SUSE:Maintenance:23009:266004 (freerdp freerdp-devel freerdp-proxy libfreerdp2 libgsm) -> libgsm1 was missing in PH making freerdp not installable SUSE:Maintenance:22928:266007 (argyllcms csync libcsync0 libcsync- plugin-sftp libcsync-plugin-smb) SUSE:Maintenance:23015:267052 (gfbgraph-devel libgfbgraph-0_2-0 typelib-1_0-GFBGraph-0_2 librest gcr) -> librest, gcr and libgoa are needed too for making gfbgraph installable SUSE:Maintenance:23334:268316 (gutenprint gutenprint-devel) SUSE:Maintenance:23486:268867 (hp-drive-guard, upower) --> needs libupower-glib3 SUSE:Maintenance:23487:268897 (liba52-0 liba52-devel) SUSE:Maintenance:23506:268899 (libdvdread4 libdvdread-devel) Lubos will ping m4u about updating the list (m4u: the list gets updated on jsc#MSC-303, let me know if you cannot access, I will update it later today and ping Lubos when done) Lubos will check updates in jira Meet product security at the openSUSE Conference. There are about 3 talks on the maintenance and security topics. Come and say Hello! DimStar: there is currently a pending crypto / gnutls related submission. ## Adrian - OBS No update

1 0

NVIDIA opengpu driver: (open)SUSE packages available ...
by Stefan Dirsch 07 Jun '22

07 Jun '22

Hi Just to let you know. I've written a small blog about the packages I've created for nVidia's opengpu driver and how to give them a try. https://sndirsch.github.io/nvidia/2022/06/07/nvidia-opengpu.html Thanks, Stefan Public Key available ------------------------------------------------------ Stefan Dirsch (Res. & Dev.) SUSE Software Solutions Germany GmbH Tel: 0911-740 53 0 Maxfeldstraße 5 FAX: 0911-740 53 479 D-90409 Nürnberg http://www.suse.de Germany ---------------------------------------------------------------- (HRB 36809, AG Nürnberg) Geschäftsführer: Ivo Totev ----------------------------------------------------------------

1 0

Leap 15.4 is Gold!
by Lubos Kocman 07 Jun '22

07 Jun '22

Hello openSUSE! openSUSE Leap 15.4 has an official GM Candidate. At this point we will not take any further translations. Build 243.2 finished two days ago, which means according to the roadmap. *Just like SLES, we don't do GMC 2!* So this build is also our Gold Master. I fully expect to release Build243.2 next week on Wednesday as Leap 15.4 GA. It would be technically possible to release it this week, but many of us will travel to the openSUSE conference and technical support could not be guaranteed. It's just not worth the risk. I'm aware of some boot-stack bugs/RFEs on Arm. Namely USB boot on RPI, and eMMC boot. These will be delivered in QU1. Big thanks to Max and Wolfgang, Guillaume, and the rest of the openSUSE Release team as well to all contributors for making this happen! I hope that I'll be seeing many of you in person at the conference! Happy Hacking! Lubos Kocman on behalf of openSUSE Release team

2 2

New Tumbleweed snapshot 20220606 released!
by Dominique Leuenberger 07 Jun '22

07 Jun '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: bind (9.18.2 -> 9.18.3) ceph (16.2.7.654+gd5a90ff46f0 -> 16.2.9.58+ge2e5cb80063) iproute2 (5.17 -> 5.18) lua54 openjpeg2 (2.4.0 -> 2.5.0) opensuse-welcome (0.1.8+git.44.7923e16 -> 0.1.8+git.46.64e51ec) poppler (22.05.0 -> 22.06.0) poppler-qt5 (22.05.0 -> 22.06.0) python-Babel (2.9.1 -> 2.10.1) python-alembic (1.7.7 -> 1.8.0) python-click (8.0.4 -> 8.1.3) python-ipython (8.2.0 -> 8.4.0) python-prettytable (3.2.0 -> 3.3.0) python-scrypt (0.8.19 -> 0.8.20) === Details === ==== bind ==== Version update (9.18.2 -> 9.18.3) Subpackages: bind-doc bind-utils - Upgrade to 9.18.3: Bugs fixed: * Fix a crash in DNS-over-HTTPS (DoH) code caused by premature TLS stream socket object deletion. * RPZ NSIP and NSDNAME rule processing didn't handle stub and static-stub zones at or above the query name. This has now been addressed. * Fixed a deadlock that could occur if an rndc connection arrived during the shutdown of network interfaces. * Refactor the fctx_done() function to set fctx to NULL after detaching, so that reference counting errors will be easier to avoid. * udp_recv() in dispatch could trigger an INSIST when the callback's result indicated success but the response was canceled in the meantime. * Work around a jemalloc quirk which could trigger an out-of-memory condition in named over time. * If there was a pending negative cache DS entry, validations depending upon it could fail. * dig returned a 0 exit status on UDP connection failure. * Fix an assertion failure when using dig with +nssearch and +tcp options by starting the next query in the send_done() callback (like in the UDP mode) instead of doing that recursively in start_tcp(). Also ensure that queries interrupted while connecting are detached properly. * Don't remove CDS/CDNSKEY DELETE records on zone sign when using 'auto-dnssec maintain;'. This obsoletes the following patch: bind-define-local-instances-of-FALLTHROUGH-and-UNREACHABLE.patch [CVE-2022-1183, bsc#1199619] - An assertion failure can be triggered if a TLS connection to a configured http TLS listener with a defined endpoint is destroyed too early. [CVE-2022-1183, bsc#1199619, CVE-2022-1183.patch] ==== ceph ==== Version update (16.2.7.654+gd5a90ff46f0 -> 16.2.9.58+ge2e5cb80063) Subpackages: librados2 librbd1 - Update to ceph-16.2.9-58-ge2e5cb80063: + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths - Update to 16.2.9.50-g7d9f12156fb: + (jsc#SES-2515) High-availability NFS export + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit - Update to 16.2.7-969-g6195a460d89 ==== iproute2 ==== Version update (5.17 -> 5.18) - update to 5.18: This is the release of iproute2 corresponding to the 5.18 kernel. There are not many new features in this release. * The build issues with libbpf should be fixed now. * Building with clang is now supported. * There are still some warnings with gcc-12 that will need to be fixed in the upstream kernel headers. ==== lua54 ==== - Added more numbered patches from upstream: * luabugs3.patch * luabugs4.patch * luabugs5.patch ==== openjpeg2 ==== Version update (2.4.0 -> 2.5.0) - update to 2.5.0: * Encoder: add support for generation of TLM markers * Decoder: add support for high throughput (HTJ2K) decoding * Decoder: add support for partial bitstream decoding * Bug fixes (including security fixes) ==== opensuse-welcome ==== Version update (0.1.8+git.44.7923e16 -> 0.1.8+git.46.64e51ec) - Update to version 0.1.8+git.46.64e51ec: + Updated translations (Catalan, Russian, Swedish, Ukrainian). - Add back -lang recommends to the main package: the -lang package does not follow the standard method of installing translations to /usr/share/locale, but installs everything to /usr/share/opensuse-welcome. As such, the automatic supplements do not trigger as intended. A opensuse-welcome-lang.inc is being generated to make the recommends still smarter, based on selected locales in zypp. ==== poppler ==== Version update (22.05.0 -> 22.06.0) Subpackages: libpoppler-cpp0 libpoppler-glib8 poppler-tools - update to 22.06.0: core: * Forms: Fix crash in forms with their own DR * Refactor CairoFontEngine caching * CairoOutputDev: preserve text color when drawing type 3 glyphs * Windows: font code simplification * Minor code improvements * pdfattach: Assume filename is utf8 encoded * pdftohtml: Fix type 3 font size calculation - drop poppler-cairo_font_face_t-incorrect-cacheing.patch (upstream) ==== poppler-qt5 ==== Version update (22.05.0 -> 22.06.0) - update to 22.06.0: core: * Forms: Fix crash in forms with their own DR * Refactor CairoFontEngine caching * CairoOutputDev: preserve text color when drawing type 3 glyphs * Windows: font code simplification * Minor code improvements * pdfattach: Assume filename is utf8 encoded * pdftohtml: Fix type 3 font size calculation - drop poppler-cairo_font_face_t-incorrect-cacheing.patch (upstream) ==== python-Babel ==== Version update (2.9.1 -> 2.10.1) - update to 2.10.1: * Messages: Fix ``distutils`` import. Regressed in :gh:`843`. * The ``get_next_timezone_transition likely as soon as Babel 2.11. * CLDR: Upgrade to CLDR 41.0. * The ``c`` and ``e`` plural form operands introduced in CLDR 40 are parsed * Non-nominative forms of units are currently ignored. * Messages: Implement ``--init-missing`` option for ``pybabel update`` * Messages: For ``extract``, you can now replace the built-in ``.*`` / ``_*`` ignored directory patterns with ones of your own. * Messages: Add ``--check`` to verify if catalogs are up-to-date * Messages: Add ``--header-comment`` to override default header comment * Dates: ``parse_time`` now supports 12-hour clock, and is better at parsing partial times. * Dates: ``parse_date`` and ``parse_time`` now raise ``ParseError``, a subclass of ``ValueError``, in certain cases. * Dates: ``parse_date`` and ``parse_time`` now accept the ``format`` parameter. * The internal ``babel/_compat.py`` module is no more * Python 3.10 is officially supported * There's now a friendly GitHub issue template. * Don't use the deprecated format_number function internally or in tests * Add GitHub URL for PyPi * Python 3.12 compatibility: Prefer setuptools imports to distutils imports * Python 3.11 compatibility: Add deprecations to l*gettext variants * CI: Babel is now tested with PyPy 3.7. * Date formatting: Allow using ``other`` as fallback form * Locales: ``Locale.parse * A typo in the plural format for Maltese is fixed. * Messages: Catalog date parsing is now timezone independent. * Messages: Fix duplicate locations when writing without lineno * Messages: Fix missing trailing semicolon in plural form headers * CLI: Fix output of ``--list-locales`` to not be a bytes repr * Documentation is now correctly built again, and up to date ==== python-alembic ==== Version update (1.7.7 -> 1.8.0) - update to version 1.8.0: * changed + [changed] [installation] Alembic 1.8 now supports Python 3.7 and above. References: #1025 + [changed] [environment] The ?Pylons? environment template has been removed as of Alembic 1.8. This template was based on the very old pre-Pyramid Pylons web framework which has been long superseded by Pyramid. References: #987 * feature + [feature] [typing] PEP 484 typing annotations have been added to the env.py and revision template files within migration templates. Pull request by Nikita Sobolev. References: #764 * usecase + [usecase] [operations] The op.drop_table() operation directive will now trigger the before_drop() and after_drop() DDL event hooks at the table level, which is similar to how the before_create() and after_create() hooks are triggered by the op.create_table() directive. Note that as op.drop_table() accepts only a table name and optional schema name, the Table object received by the event will not have any information within it other than the table name and schema name. References: #1037 + [usecase] [commands] Added new token epoch to the file_template option, which will populate the integer epoch as determined by int(create_date.timestamp()). Pull request courtesy Caio Carvalho. References: #1027 * bug + [bug] [revisioning] Fixed issue where a downgrade using a relative revision would fail in case of multiple branches with a single effectively head due to interdependencies between revisions. References: #1026 + [bug] [batch] Fixed issue in batch mode where CREATE INDEX would not use a new column name in the case of a column rename. References: #1034 ==== python-click ==== Version update (8.0.4 -> 8.1.3) - specfile * require python >= 3.7 - update to version 8.1.3: * Use verbose form of "typing.Callable" for "@command" and "@group". :issue:`2255` * Show error when attempting to create an option with "multiple=True, is_flag=True". Use "count" instead. :issue:`2246` - changes from version 8.1.2: * Fix error message for readable path check that was mixed up with the executable check. :pr:`2236` * Restore parameter order for "Path", placing the "executable" parameter at the end. It is recommended to use keyword arguments instead of positional arguments. :issue:`2235` - changes from version 8.1.1: * Fix an issue with decorator typing that caused type checking to report that a command was not callable. :issue:`2227` - changes from version 8.1.0: * Drop support for Python 3.6. :pr:`2129` * Remove previously deprecated code. :pr:`2130` + "Group.resultcallback" is renamed to "result_callback". + "autocompletion" parameter to "Command" is renamed to "shell_complete". + "get_terminal_size" is removed, use "shutil.get_terminal_size" instead. + "get_os_args" is removed, use "sys.argv[1:]" instead. * Rely on :pep:`538` and :pep:`540` to handle selecting UTF-8 encoding instead of ASCII. Click's locale encoding detection is removed. :issue:`2198` * Single options boolean flags with "show_default=True" only show the default if it is "True". :issue:`1971` * The "command" and "group" decorators can be applied with or without parentheses. :issue:`1359` * The "Path" type can check whether the target is executable. :issue:`1961` * "Command.show_default" overrides "Context.show_default", instead of the other way around. :issue:`1963` * Parameter decorators and "@group" handles "cls=None" the same as not passing "cls". "@option" handles "help=None" the same as not passing "help". :issue:`#1959` * A flag option with "required=True" requires that the flag is passed instead of choosing the implicit default value. :issue:`1978` * Indentation in help text passed to "Option" and "Command" is cleaned the same as using the "@option" and "@command" decorators does. A command's "epilog" and "short_help" are also processed. :issue:`1985` * Store unprocessed "Command.help", "epilog" and "short_help" strings. Processing is only done when formatting help text for output. :issue:`2149` * Allow empty str input for "prompt()" when "confirmation_prompt=True" and "default=""". :issue:`2157` * Windows glob pattern expansion doesn't fail if a value is an invalid pattern. :issue:`2195` * It's possible to pass a list of "params" to "@command". Any params defined with decorators are appended to the passed params. :issue:`2131`. * "@command" decorator is annotated as returning the correct type if a "cls" argument is used. :issue:`2211` * A "Group" with "invoke_without_command=True" and "chain=False" will invoke its result callback with the group function's return value. :issue:`2124` * "to_info_dict" will not fail if a "ParamType" doesn't define a "name". :issue:`2168` * Shell completion prioritizes option values with option prefixes over new options. :issue:`2040` * Options that get an environment variable value using "autoenvvar_prefix" treat an empty value as "None", consistent with a direct "envvar". :issue:`2146` ==== python-ipython ==== Version update (8.2.0 -> 8.4.0) - update to version 8.4.0: * fix uncaught BdbQuit exceptions on ipdb exit :ghpull:`13668` * typo fix in documentation: :ghpull:`13682` - changes from version 8.3.0: * :ghpull:`13625`, using ?, ??, *? will not call set_next_input as most frontend allow proper multiline editing and it was causing issues for many users of multi-cell frontends. This has been backported to 7.33 * :ghpull:`13600`, pre_run_*-hooks will now have a cell_id attribute on the info object when frontend provide it. This has been backported to 7.33 * :ghpull:`13624`, fixed End key being broken after accepting an auto-suggestion. * :ghpull:`13657` fix issue where history from different sessions would be mixed. ==== python-prettytable ==== Version update (3.2.0 -> 3.3.0) - update to 3.3.0: * Support Python 3.11 * Add flag to preserve internal borders when border=False * Alignment timing fix (#179) @myheroyuki ==== python-scrypt ==== Version update (0.8.19 -> 0.8.20) - update to 0.8.20: * Fix #8 by adding missing gettimeofday.c to MANIFEST.in

1 0