August 2022 - openSUSE Factory - openSUSE Mailing Lists

New Tumbleweed snapshot 20220813 released!
by Dominique Leuenberger 14 Aug '22

14 Aug '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: binutils (2.38 -> 2.39) grep ibus-table-chinese ibus-table-others util-linux === Details === ==== binutils ==== Version update (2.38 -> 2.39) Subpackages: libctf-nobfd0 libctf0 - Rebase binutils-2.39-branch.diff.gz that contains fix for PR29451. - Add binutils-2.39-branch.diff.gz. - Explicitly enable --enable-warn-execstack=yes and --enable-warn-rwx-segments=yes. - Add gprofng subpackage. - Update to binutils 2.39: * The ELF linker will now generate a warning message if the stack is made executable. Similarly it will warn if the output binary contains a segment with all three of the read, write and execute permission bits set. These warnings are intended to help developers identify programs which might be vulnerable to attack via these executable memory regions. The warnings are enabled by default but can be disabled via a command line option. It is also possible to build a linker with the warnings disabled, should that be necessary. * The ELF linker now supports a --package-metadata option that allows embedding a JSON payload in accordance to the Package Metadata specification. * In linker scripts it is now possible to use TYPE=<type> in an output section description to set the section type value. * The objdump program now supports coloured/colored syntax highlighting of its disassembler output for some architectures. (Currently: AVR, RiscV, s390, x86, x86_64). * The nm program now supports a --no-weak/-W option to make it ignore weak symbols. * The readelf and objdump programs now support a -wE option to prevent them from attempting to access debuginfod servers when following links. * The objcopy program's --weaken, --weaken-symbol, and - -weaken-symbols options now works with unique symbols as well. - Rebase binutils-compat-old-behaviour.diff, binutils-revert-hlasm-insns.diff, binutils-revert-plt32-in-branches.diff and remove binutils-2.38-branch.diff.gz. - For now use --disable-gprofng. - Includes fixes for these CVEs: bnc#1142579 aka CVE-2019-1010204 aka PR23765 ==== grep ==== Subpackages: grep-lang - Skip more gnulib tests in qemu build ==== ibus-table-chinese ==== Subpackages: ibus-table-chinese-array ibus-table-chinese-cangjie ibus-table-chinese-cantonese ibus-table-chinese-easy ibus-table-chinese-erbi ibus-table-chinese-jyutping ibus-table-chinese-quick ibus-table-chinese-scj ibus-table-chinese-stroke5 ibus-table-chinese-wu ibus-table-chinese-wubi-haifeng ibus-table-chinese-wubi-jidian ibus-table-chinese-yong feat: use _service files to automate fetching sources ==== ibus-table-others ==== Subpackages: ibus-table-rustrad ibus-table-translit feat: use _service files to automate fetching sources ==== util-linux ==== Subpackages: libblkid1-32bit libmount1-32bit libuuid1-32bit - Use %_pam_vendordir

1 0

Mails shunned due to a mailman 3 bug
by Jacob Michalskie 14 Aug '22

14 Aug '22

Hi! A few weeks back, when the MicroOS mailing list was created, the owner of that mailing list notified us that no mails were being delivered or archived by mailman. Through that we have discovered that there's a bug in mailman 3 that allows for a subscription to be registered without an attached email in the database, which leads to an entire mailing list to have all the received mails shunned and never sent out to the mailing list or archived. Over the past few days, the same thing happened to the Factory mailing list. While it's a simple fix for us to clean out the records with null association [1], what it means for the subscribers of this list is that all the mails sent out since the bug occurred are gone from our point of view, and will have to be resent if they haven't reached the mailing list. Sorry for the inconvenience. LCP [Jake] https://lcp.world/ [1] `delete from member where address_id IS NULL;`

8 13

New Tumbleweed snapshot 20220812 released!
by Dominique Leuenberger 13 Aug '22

13 Aug '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: aaa_base (84.87+git20220518.dc83f4e -> 84.87+git20220727.43b9e53) automake clutter-gst gdk-pixbuf (2.42.8 -> 2.42.9) grub2 man ncurses (6.3.20220716 -> 6.3.20220806) python-pbr (5.8.1 -> 5.9.0) rubygem-public_suffix (4.0.7 -> 5.0.0) === Details === ==== aaa_base ==== Version update (84.87+git20220518.dc83f4e -> 84.87+git20220727.43b9e53) Subpackages: aaa_base-extras - Update to version 84.87+git20220727.43b9e53: * Use HOSTTYPE in MACHTYPE * Move suse to VENDOR * Use /var/mail for MAIL ==== automake ==== - switch to python3 testing for testsuite, we no longer care about python 2.x testresults ==== clutter-gst ==== Subpackages: gstreamer-plugin-cluttergst3 libclutter-gst-3_0-0 - Add 0001-video-sink-Remove-RGBx-BGRx-support.patch: video-sink: Remove RGBx/BGRx support. The rgb24 renderer uses the wrong pixel stride and the rgb32 renderer assumes alpha is meaningful. We can use neither. Fixes: https://gitlab.gnome.org/GNOME/cheese/-/issues/51 - Update Supplements to current standard. ==== gdk-pixbuf ==== Version update (2.42.8 -> 2.42.9) Subpackages: gdk-pixbuf-lang gdk-pixbuf-query-loaders gdk-pixbuf-query-loaders-32bit gdk-pixbuf-thumbnailer libgdk_pixbuf-2_0-0 libgdk_pixbuf-2_0-0-32bit typelib-1_0-GdkPixbuf-2_0 - Update to version 2.42.9: + Fix the check for maximum value of LZW initial code size. + Use CMake for dependencies on Windows/MSVC. + Add option for building tests. + Move man pages to reStructuredText. + Disable relocation when built as a static libary on Windows. + Update wrap file for libjpeg-turbo. + Limit the memory size when loading image data. - Add docutils and pkgconfig(gi-docgen) BuildRequires: New dependencies. ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - Add tpm, tpm2, luks2 and gcry_sha512 to default grub.efi (bsc#1197625) - Make grub-tpm.efi a symlink to grub.efi * grub2.spec - Log error when tpm event log is full and continue * 0001-tpm-Log-EFI_VOLUME_FULL-and-continue.patch - Patch superseded * 0001-tpm-Pass-unknown-error-as-non-fatal-but-debug-print-.patch - Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch * 0010-protectors-Add-key-protectors-framework.patch * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch * 0012-protectors-Add-TPM2-Key-Protector.patch * 0013-cryptodisk-Support-key-protectors.patch * 0014-util-grub-protect-Add-new-tool.patch - Fix no disk unlocking happen (bsc#1196668) * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch - Fix build error * fix-tpm2-build.patch ==== man ==== - Add patch gnulib-ppc64le.patch * Support ppc64le float128 transition - Drop usage of update-alternatives as mandoc does not use it (nor libalternative) - switch source url to https ==== ncurses ==== Version update (6.3.20220716 -> 6.3.20220806) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch 20220806 + amend end_of_stream() to allow for input files without a final newline. + check for non-textfiles to tic. - Add ncurses patch 20220729 + fixes to build with dietlibc: + add configure check for fpathconf (report by Georg Lehner). + add configure check for math sine/cosine, needed in test/tclock, and eliminate pow() from test/hanoi (report by Georg Lehner). + use wcsnlen as an alternative to wmemchr if it is not found (adapted from patch by Georg Lehner). + trim out some unwanted linker options from ncurses*config and .pc files seen in Fedora 36+. - Port patch ncurses-6.3.dif ==== python-pbr ==== Version update (5.8.1 -> 5.9.0) - update to 5.9.0: * Future-proofing pyproject.toml * Use importlib-metadata for runtime package version lookups * Drop wheel from pyproject.toml examples * Changed minversion in tox to 3.18.0 ==== rubygem-public_suffix ==== Version update (4.0.7 -> 5.0.0) updated to version 5.0.0 see installed CHANGELOG.md [#]# 5.0.0 [#]## Changed - Minimum Ruby version is 2.6 - Updated definitions.

1 0

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 12 Aug '22

12 Aug '22

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have had problems for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - cyrus-imapd: Uninstallable: nothing provides perl(:MODULE_COMPAT_5.34.1) needed by perl-Cyrus-IMAP-2.4.22.i586 - frozen-bubble: Unresolvable - gmusicbrowser: Uninstallable: nothing provides perl(:MODULE_COMPAT_5.34.1) needed by gmusicbrowser-1.1.16.noarch - perl-Gnome2-Wnck: Unresolvable - perl-Gtk2-AppIndicator: Unresolvable - perl-Gtk2-ImageView: Unresolvable Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

1 0

New Tumbleweed snapshot 20220811 released!
by Dominique Leuenberger 12 Aug '22

12 Aug '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MozillaFirefox (103.0.1 -> 103.0.2) dar (2.7.6 -> 2.7.7) efivar gnome-chess (42.0 -> 42.1) gnome-desktop (42.3 -> 42.4) icewm (2.9.7 -> 2.9.8) iproute2 (5.18 -> 5.19) libnftnl (1.2.2 -> 1.2.3) llvm14 mailutils (3.14 -> 3.15) openSUSE-build-key portmidi publicsuffix (20220518 -> 20220805) sdl12_compat sord tracker (3.3.2 -> 3.3.3) ucode-intel (20220510 -> 20220809) vim (9.0.0135 -> 9.0.0181) xfce4-power-manager === Details === ==== MozillaFirefox ==== Version update (103.0.1 -> 103.0.2) Subpackages: MozillaFirefox-translations-common - Mozilla Firefox 103.0.2 * Fixed menu shortcuts for users of the JAWS screen reader * Fixed an occasional non-overridable certificate error when accessing device configuration pages - The --disable-elf-hack option only exists on ARM and X86 ==== dar ==== Version update (2.7.6 -> 2.7.7) Subpackages: dar-doc dar-lang libdar64-6000 - update to 2.7.7: * added support for sequential reading more of sliced backup, to accommodate tape support used with slices (at the opposite of dar_split) * fixing few typos in doc * making libdar more tolerant when calls to fadvise fail ==== efivar ==== - Add efivar-bsc1202209-fix-glibc-2.36-build.patch to fix the build error against glibc 2.36 (bsc#1202209) ==== gnome-chess ==== Version update (42.0 -> 42.1) Subpackages: gnome-chess-lang - Update to version 42.1: + Use pango to render clock text, fixing broken ratio and LTR characters. + Updated translations. ==== gnome-desktop ==== Version update (42.3 -> 42.4) Subpackages: gnome-desktop-lang gnome-version libgnome-desktop-3-19 libgnome-desktop-3_0-common libgnome-desktop-4-1 typelib-1_0-GnomeDesktop-3_0 typelib-1_0-GnomeDesktop-4_0 - Update to version 42.4: + No changes, version bump only. ==== icewm ==== Version update (2.9.7 -> 2.9.8) Subpackages: icewm-config-upstream icewm-default icewm-lang icewm-lite - update to 2.9.8: * Omit trailing dot in CPU temperature and add centigrade symbol for issue * If there is no WM active, then a restart will start icewm. * Don't create ~/.icewm, unless required to save a file. * When showing the desktop, also minimize a focused fullscreen window. * Remove unused setTitle from YMsgBox. * Add support for COMPOUND_TEXT title names and for non-ascii characters in * WM_NAME strings for issue #26. * upport COMPOUND_TEXT title names and non-ascii characters in WM_NAME * strings in icesh. Limit window dimensions to 32732 in icesh. * Prevent warnings. * Let TaskBarShowAllWindows influence TaskBarTaskGrouping for issue #560. * Improve truncation of titles for TaskBarTaskGrouping in issue #658. * Do without pair array. * Update the grouping menu when tasks are added or removed. * Don't convert XA_STRING names to current locale for issue #26. * Update grouping menu when removing a task. * Restore 2.5.0 container handling of button presses for issue #649. * Don't convert XA_STRING in icesh. * Make TaskBarGraphHeight themable for issue #659. * Restore prettyClock as false. * Preserve errno in testOnce. * Clarify which preferences are themable in icewm-preferences(5). ==== iproute2 ==== Version update (5.18 -> 5.19) - update to 5.19: * ip/iplink_virt_wifi: add support for virt_wifi * Update kernel headers * libnetlink: Add filtering to rtnl_statsdump_req_filter() * ipstats: Add a "set" command * ipstats: Add a group "link" * libbpf: Use bpf_object__load instead of bpf_object__load_xattr * uapi: change name for zerocopy sendfile in tls * bridge: vxlan device vnifilter support * f_flower: Add num of vlans parameter ==== libnftnl ==== Version update (1.2.2 -> 1.2.3) - Update to release 1.2.3 * This release includes a compile time bugfix with clang and - D_FORTIFY_SOURCE=2. ==== llvm14 ==== Subpackages: clang-tools clang14 clang14-doc libLLVM14 libc++-devel libc++1 libc++abi-devel libc++abi1 libclang-cpp14 libclang13 llvm14-gold - Add WebAssembly support for all architectures. - Add llvm-glibc-2-36.patch in order to address boo#1202215. ==== mailutils ==== Version update (3.14 -> 3.15) - update to 3.15: * mbox format: don't count terminating empty line as part of the message * Improve performance of the Sieve fileinto action * Improve efficiency of operations on flat mailboxes in append mode * Bugfixes in quoted-printable and fromrd filters * Various fixes in mbox and dotmail format libraries * Fix compilation with flex version 2.6.1 ==== openSUSE-build-key ==== - add gpg-pubkey-29b700a4-62b07e22.asc (bsc#1199184) ==== portmidi ==== - Disable RPATH in the .spec ==== publicsuffix ==== Version update (20220518 -> 20220805) - Update to version 20220805: * Updates to NIXI `.in` subspace in ICANN section of PSL (#1588) * util: gTLD data autopull updates for 2022-07-28T15:14:54 UTC (#1592) * util: gTLD data autopull updates for 2022-07-03T15:13:52 UTC (#1587) * Add messerli.app (#1535) * Add iservschule.de, schulplattform.de, update IServ GmbH contact information (#1580) * Add `lolipopmc.jp` (#1555) * Add ibxos.it and iliadboxos.it domains (#1549) * Simplify the instance and endpoint domains using wildcard syntax (#1584) * util: gTLD data autopull updates for 2022-06-14T15:15:19 UTC (#1581) * doc (.in): update ref uri to registry policies (#1577) * util: gTLD data autopull updates for 2022-06-02T15:16:31 UTC (#1579) ==== sdl12_compat ==== - Add 0001-Use-SDL_PIXELFORMAT_RGB888-for-24-bit-surfaces.patch to rectify BGR order in older schismtracker. ==== sord ==== - add gpg validation of release ==== tracker ==== Version update (3.3.2 -> 3.3.3) Subpackages: libtracker-sparql-3_0-0 tracker-data-files tracker-lang typelib-1_0-Tracker-3_0 - Update to version 3.3.3: + Prepare D-Bus endpoint for cursor streams. ==== ucode-intel ==== Version update (20220510 -> 20220809) - Updated to Intel CPU Microcode 20220809 release. (bsc#1201727) - CVE-2022-21233: Security updates for [INTEL-SA-00657](https://www.intel.com/content/www/us/en/security-center/adv…. - Update for functional issues. Refer to [IntelÂ® XeonÂ® Processor Scalable Family Specification +Update](https://www.intel.com/content/www/us/en/processors/xeon/scalable/xeon-scalable-spec-update.html?wapkw=processor+specification+update) for details. - Updated Platforms: | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | SKX-SP | B1 | 06-55-03/97 | 0100015d | 0100015e | Xeon Scalable | SKX-SP | H0/M0/U0 | 06-55-04/b7 | 02006d05 | 02006e05 | Xeon Scalable | SKX-D | M1 | 06-55-04/b7 | 02006d05 | 02006e05 | Xeon D-21xx | ICX-SP | D0 | 06-6a-06/87 | 0d000363 | 0d000375 | Xeon Scalable Gen3 | GLK | B0 | 06-7a-01/01 | 0000003a | 0000003c | Pentium Silver N/J5xxx, Celeron N/J4xxx | GLK-R | R0 | 06-7a-08/01 | 0000001e | 00000020 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120 | ICL-U/Y | D1 | 06-7e-05/80 | 000000b0 | 000000b2 | Core Gen10 Mobile | TGL-R | C0 | 06-8c-02/c2 | 00000026 | 00000028 | Core Gen11 Mobile | TGL-H | R0 | 06-8d-01/c2 | 0000003e | 00000040 | Core Gen11 Mobile | RKL-S | B0 | 06-a7-01/02 | 00000053 | 00000054 | Core Gen11 | ADL | C0 | 06-97-02/03 | 0000001f | 00000022 | Core Gen12 | ADL | C0 | 06-97-05/03 | 0000001f | 00000022 | Core Gen12 | ADL | L0 | 06-9a-03/80 | 0000041c | 00000421 | Core Gen12 | ADL | L0 | 06-9a-04/80 | 0000041c | 00000421 | Core Gen12 | ADL | C0 | 06-bf-02/03 | 0000001f | 00000022 | Core Gen12 | ADL | C0 | 06-bf-05/03 | 0000001f | 00000022 | Core Gen12 ==== vim ==== Version update (9.0.0135 -> 9.0.0181) Subpackages: gvim vim-data vim-data-common - Updated to version 9.0.0181, fixes the following problems * Comment about tabpage line above the wrong code. * After CTRL-Left-mouse click a mouse scroll also has CTRL. * Debugger test may fail when $CWD is very long. * Not enough characters accepted for 'spellfile'. * Truncating virtual text after a line not implemented. Cursor positioning wrong with Newline in the text. * execute() does not use the "legacy" command modifier. * "delmenu" does not remove autocmmands. Running menu test function alone fails. * Crash when adding and removing virtual text. (Ben Jackson) * Cursor positioned after virtual text in empty line. * Text property cannot override 'cursorline' highlight. * Substitute that joins lines drops text properties. * Missing part of change for "override" flag. * Cursor positioned wrong after two text properties with virtual text and "below" alignment. (Tim Pope) * A "below" aligned text property gets 'showbreak' displayed. * Test for fuzzy completion fails sometimes. * Error for using #{ in an expression is a bit confusing. * A "below" aligned text property does not work with 'nowrap'. * Warning for unused argument in small build. * No fold and sign column for virtual text with "below" align and 'nowrap'. * Text properties wrong after splitting a line. * Text properties with "right" and "after" alignment displayed wrong with 'nowrap'. * Giving E1170 only in an expression is confusing. * 'showbreak' displayed below truncated "after" text prop. * With 'nowrap' "below" property not displayed correctly. * Cannot build with small features. * Some diff mode tests fail. * Warning for uninitialized variable. (Tony Mechelynck) * Text property "below" gets indent if 'breakindent' is set. (Tim Pope) * Text property not adjusted for text inserted with "p". * Using freed memory with put command. * Looking up a text property type by ID is slow. * When using text properties the line text length is computed twice. * Checking for text properties could be a bit more efficient. * Cursor positioned wrong with two virtual text properties close together. (Ben Jackson) * Insufficient testing for line2byte() with text properties. * Various minor code formatting issues. * Quickfix line highlight is overruled by 'cursorline'. * Trying to allocate zero bytes. * Assert fails only on MS-Windows. * No error for using "#{ comment" in a compiled function. * Spell checking for capital not working with trailing space. * Checking character options is duplicated and incomplete. * Cursor position wrong with 'virtualedit' and mouse click after end of the line. (Hermann Mayer) * Cursor position wrong with virtual text before Tab. * Cursor position wrong with wrapping virtual text in empty line. * Stray logfile appears when running tests. ==== xfce4-power-manager ==== Subpackages: xfce4-power-manager-lang xfce4-power-manager-plugin - Add requirement to pkexec for brightness control (boo#1202125)

1 0

Tumbleweed - Review of the week 2022/32
by Dominique Leuenberger / DimStar 12 Aug '22

12 Aug '22

Dear Tumbleweed users and hackers, We reach the end of a week crowded with snapshots. We published 7 snapshots in total since my last review (0804…0810). The number of failed packages is quite high currently in Factory, so I’d like to ask everybody to help out on that front (https://tinyurl.com/ysy4nnnz) The major updates delivered this week are: * Mesa 22.1.4 * Mozilla Firefox 103.0.1 * AppArmor 3.0.6 * gdb 12.1 * Linux kernel 5.18.15 & 5.19.0 * libvirt 8.6.0 * nvme-cli 2.1.1 * Poppler 22.08.0 * KDE Plasma 5.24.4 * Samba 4.16.4 * Plymouth 22.02.122 * RPM 4.17.1, with some significant rework on the spec, i.e previously bundled things like debugedit and python-rpm-packaging are split out) * Virt-Manager 4.1.0 * Postfix 3.7.2 * GNOME 42.4 (mostly complete, gnome-shell, mutter, and gnome-desktop missing) In the staging area, the following updates are being prepared and worked on: * glibc 2.36 * Linux kernel 5.19.1 * Binutils 2.39 * Shadow 4.12 * wxWidgets 3.2.0: breaks build of wxPython * fmt 9.0: breaks ceph and zxing-cpp Cheers, Dominique

1 0

New Tumbleweed snapshot 20220810 released!
by Dominique Leuenberger 11 Aug '22

11 Aug '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ModemManager (1.18.6 -> 1.18.10) PackageKit bash-completion eog (42.2 -> 42.3) evolution (3.44.3 -> 3.44.4) evolution-data-server (3.44.3 -> 3.44.4) evolution-ews (3.44.3 -> 3.44.4) geocode-glib (3.26.3 -> 3.26.4) geocode-glib-soup2 (3.26.3 -> 3.26.4) gjs (1.72.1 -> 1.72.2) glib-networking (2.72.1 -> 2.72.2) gnome-software (42.3 -> 42.4) gpg2 gtk-vnc (1.3.0 -> 1.3.1) harfbuzz (4.4.1 -> 5.1.0) hdparm hplip (3.22.4 -> 3.22.6) hwinfo (22.0 -> 22.1) kernel-source (5.18.15 -> 5.19.0) kscreenlocker libadwaita (1.1.3 -> 1.1.4) libbluray (1.3.1 -> 1.3.2) manpages-l10n (4.14.0 -> 4.15.0) mobile-broadband-provider-info (20220511 -> 20220725) mutt (2.2.6 -> 2.2.7) permissions (1599_20220309 -> 1599_20220713) postfix (3.6.6 -> 3.7.2) python-loguru (0.5.3 -> 0.6.0) python-pip python-pytest (7.1.1 -> 7.1.2) python310 (3.10.5 -> 3.10.6) python310-core (3.10.5 -> 3.10.6) tracker-miners usbredir (0.12.0 -> 0.13.0) webkit2gtk3 (2.36.5 -> 2.36.6) webkit2gtk3-soup2 (2.36.5 -> 2.36.6) wireplumber xdg-desktop-portal (1.14.5 -> 1.14.6) === Details === ==== ModemManager ==== Version update (1.18.6 -> 1.18.10) Subpackages: ModemManager-bash-completion ModemManager-lang libmm-glib0 - Update to version 1.18.10: + Build: Require libqmi 1.30.8. + FCC unlock: Updated SDX55 unlock script to handle the new method introduced in the latest firmware releases. + Modem interface: - Set signal quality to 0% on shutdown. - Set signal quality as recent on init. + MBIM: - Fix task completion when peeking device fails. - Fix several GError double-frees. + mmcli: Don't print signal quality until modem is enabled. + Plugins: foxconn: remove carrier mapping table for T99W175. + Several other minor improvements and fixes. - Changes from version 1.18.8: + A new connection status dispatcher setup is provided, where users can provide custom scripts that will be called on bearer connect/disconnect events. This dispatcher will make the netifd integration in openwrt work much better, as we'll be able to report network-initiated disconnections cleanly to netifd. There are no default connection status dispatcher scripts installed, but it's suggested distributions make sure the following directories exist: - ${sysconfdir}/ModemManager/connection.d/ - ${libdir}/ModemManager/connection.d/ + API: Add missing Simple interface definitions in ModemManager-names.h. + Build: - meson: . fix daemon enums dependencies. . fix port enums includes. . fix 'export_packages' in GIR setup. . fix simtech plugin module name. - systemd: don't run ModemManager in containers. + Core: - serial: ensure the port object is valid after BUFFER_FULL handling. - netlink: . use unaligned netlink attribute length. . only change IFF_UP flag. - bearer: match unknown auth to chap in loose comparisons. - charsets: return error if UTF-8 validation fails. - fcc-unlock: make scripts POSIX shell compatible. - modem-helpers: . consider minimum ID when choosing best profile. . fix reading <Act> given in COPS=? responses. - sms: prevent crash if date is out of range. - profile-manager: fix copy-paste error on tags for quarks. + QMI: - Ignore slot status indications until initial status is known. - Return error when loading capabilities if none is found. + MBIM: - Default initial EPS bearer's auth to chap when unknown. - Update default error when network error is out of range. + mmcli: Fix key length when printing list of items. + Plugins: - linktop: new port type hints. - cinterion: add support for PLSx3w modems. - huawei: disable +CPOL based features in Huawei E226. + Several other minor improvements and fixes. ==== PackageKit ==== Subpackages: PackageKit-backend-zypp PackageKit-gstreamer-plugin PackageKit-gtk3-module PackageKit-lang libpackagekit-glib2-18 typelib-1_0-PackageKitGlib-1_0 - Modified PackageKit.spec: bump libzypp dependency version to 17.31.0. - Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid statuReset() on locked packages (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895). - Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp: Disable upgrade-system support in SLE (gh#PackageKit/PackageKit/commit/0fcd820c2). - Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch: zypp: restore pool status after simulating an update (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895). - Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build the pool before calling is_tumbleweed() (gh#PackageKit/PackageKit/commit/146890153). - Add PackageKit-zypp-update-libzypp-dependency-version.patch: zypp: update libzypp dependency version (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895). ==== bash-completion ==== - Add patch fix-curl-help-completion-bsc1200791.patch (bsc#1200791) * List all options for `curl --<TAB>` ==== eog ==== Version update (42.2 -> 42.3) Subpackages: eog-lang - Update to version 42.3: + Window previews in shell overview are missing the title. + Updated translations. ==== evolution ==== Version update (3.44.3 -> 3.44.4) Subpackages: evolution-lang evolution-plugin-spamassassin - Update to version 3.44.4: + Change when symbolic icons are forced in the application. + Bugs fixed: - Missing divider lines and paddings under GNOME. - EColorSchemeWatcher: Verify chosen dark variant theme name exists. - ECompEditor: Reminders list is too small. - Calendar: The default reminder not always added. ==== evolution-data-server ==== Version update (3.44.3 -> 3.44.4) Subpackages: evolution-data-server-lang libcamel-1_2-63 libebackend-1_2-10 libebook-1_2-20 libebook-contacts-1_2-3 libecal-2_0-1 libedata-book-1_2-26 libedata-cal-2_0-1 libedataserver-1_2-26 libedataserverui-1_2-3 - Update to version 3.44.4: + ESoupAuthBearer: Check for token expiration in e_soup_auth_bearer_is_authenticated(). + ESoupSession: Avoid downgrade of Bearer (OAuth2) auth for authentication. + Check for non-zero value passed to g_flags_get_first_value(). + alarm-notify: Use themed icon instead of file icon for notifications. + Bugs fixed: IMAPx: Unsubscribed folder always removed from the UI. ==== evolution-ews ==== Version update (3.44.3 -> 3.44.4) Subpackages: evolution-ews-lang - Update to version 3.44.4: + Bugs fixed: Calendar: Fix occurrence index counter. ==== geocode-glib ==== Version update (3.26.3 -> 3.26.4) - Update to version 3.26.4: + This release includes a fix to a test data file not being installed, and a bug fix for a bug in the libsoup3 port. ==== geocode-glib-soup2 ==== Version update (3.26.3 -> 3.26.4) Subpackages: libgeocode-glib0 typelib-1_0-GeocodeGlib-1_0 - Update to version 3.26.4: + This release includes a fix to a test data file not being installed, and a bug fix for a bug in the libsoup3 port. ==== gjs ==== Version update (1.72.1 -> 1.72.2) Subpackages: libgjs0 typelib-1_0-GjsPrivate-1_0 - Update to version 1.72.2: + Various fixes ported from the development branch. + Closed bugs and merge requests: - gi/arg-cache.cpp: Fix building on Visual Studio. - doc: Reflect support for constructor with GObject. ==== glib-networking ==== Version update (2.72.1 -> 2.72.2) Subpackages: glib-networking-lang - Update to version 2.72.2: + Drop environment proxy resolver to lowest priority. ==== gnome-software ==== Version update (42.3 -> 42.4) Subpackages: gnome-software-lang - Update to version 42.4: + Fix update detail text, when it contains markup. + Updated translations. ==== gpg2 ==== Subpackages: dirmngr gpg2-lang - Fix YubiKey 5 Nano support (boo#1202201), add gnupg-2.3.7-scd-openpgp-Fix-workaround-for-Yubikey-heuristics.patch ==== gtk-vnc ==== Version update (1.3.0 -> 1.3.1) Subpackages: gtk-vnc-lang libgtk-vnc-2_0-0 libgvnc-1_0-0 typelib-1_0-GVnc-1_0 typelib-1_0-GtkVnc-2_0 - Update to version 1.3.1: + Fix invalid use of subprojects with meson. + Support ZRLE encoding for zero size alpha cursors. + Add 'check' arg to meson run_command(). ==== harfbuzz ==== Version update (4.4.1 -> 5.1.0) Subpackages: libharfbuzz-gobject0 libharfbuzz-icu0 libharfbuzz-subset0 libharfbuzz0 libharfbuzz0-32bit typelib-1_0-HarfBuzz-0_0 - harfbuzz 5.1.0: + More extensive buffer tracing messages + Fix hb-ft regression in bitmap fonts rendering + Support extension promotion of lookups in hb-subset-repacker + A new HB_GLYPH_FLAG_SAFE_TO_INSERT_TATWEEL for scripts that use elongation (e.g. Arabic) to signify where it is safe to insert tatweel glyph without interrupting shaping + Add --safe-to-insert-tatweel to hb-shape tool - add harfbuzz-5.1.0-repacker-fix-signedness-of-char-in-tests.patch from upstream to fix ARM and PPC builds - harfbuzz 5.0.1, including changes from 5.0.0: + Improve for fonts with more than 65535 glyphs + Support version 2 of âavarâ table + Improve support for some Arabic, Hebrew fonts + Support for specific script tags to be retained in the subsetter, and add â--layout-scriptsâ option to âhb-subsetâ tool + Improved handling of command line options + Improve support for multiple tables and font features, and font feature specific bug fixes ==== hdparm ==== - add avoid-linux-includes.patch (bsc#1202212) ==== hplip ==== Version update (3.22.4 -> 3.22.6) Subpackages: hplip-hpijs hplip-sane - Update to 3.22.6 Added support for following new Distro's: * Mx Linux 21.1 * Ubuntu 22.04 * Fedora 36 Added support for the following new Printers: * HP Color LaserJet Managed MFP E785dn * HP Color LaserJet Managed MFP E78523dn * HP Color LaserJet Managed MFP E78528dn * HP Color LaserJet Managed MFP E786dn * HP Color LaserJet Managed MFP E786 Core Printer * HP Color LaserJet Managed MFP E78625dn * HP Color LaserJet Managed FlowMFP E786z * HP Color LaserJet Managed Flow MFP E78625z * HP Color LaserJet Managed MFP E78630dn * HP Color LaserJet Managed Flow MFP E78630z * HP Color LaserJet Managed MFP E78635dn * HP Color LaserJet Managed Flow MFP E78635z * HP LaserJet Managed MFP E731dn * HP LaserJet Managed MFP E731 Core Printer * HP LaserJet Managed MFP E73130dn * HP LaserJet Managed Flow MFP E731z * HP LaserJet Managed Flow MFP E73130z * HP LaserJet Managed MFP E73135dn * HP LaserJet Managed Flow MFP E73135z * HP LaserJet Managed MFP E73140dn * HP LaserJet Managed Flow MFP E73140z * HP Color LaserJet Managed MFP E877dn * HP Color LaserJet Managed MFP E877 Core Printer * HP Color LaserJet Managed MFP E87740dn * HP Color LaserJet Managed Flow MFP E877z * HP Color LaserJet Managed Flow MFP E87740z * HP Color LaserJet Managed MFP E87750dn * HP Color LaserJet Managed Flow MFP E87750z * HP Color LaserJet Managed MFP E87760dn * HP Color LaserJet Managed Flow MFP E87760z * HP Color LaserJet Managed MFP E87770dn * HP Color LaserJet Managed Flow MFP E87770z * HP LaserJet Managed MFP E826dn * HP LaserJet Managed MFP E826 Core Printer * HP LaserJet Managed MFP E82650dn * HP LaserJet Managed Flow MFP E826z * HP LaserJet Managed Flow MFP E82650z * HP LaserJet Managed MFP E82660dn * HP LaserJet Managed Flow MFP E82660z * HP LaserJet Managed MFP E82670dn * HP LaserJet Managed Flow MFP E82670z * HP LaserJet Managed MFP E730dn * HP LaserJet Managed MFP E73025dn * HP LaserJet Managed MFP E73030dn * HP LaserJet Pro MFP 3101fdwe * HP LaserJet Pro MFP 3101fdw * HP LaserJet Pro MFP 3102fdwe * HP LaserJet Pro MFP 3102fdw * HP LaserJet Pro MFP 3103fdw * HP LaserJet Pro MFP 3104fdw * HP LaserJet Pro MFP 3101fdne * HP LaserJet Pro MFP 3101fdn * HP LaserJet Pro MFP 3102fdne * HP LaserJet Pro MFP 3102fdn * HP LaserJet Pro MFP 3103fdn * HP LaserJet Pro MFP 3104fdn * HP LaserJet Pro 3001dwe * HP LaserJet Pro 3001dw * HP LaserJet Pro 3002dwe * HP LaserJet Pro 3002dw * HP LaserJet Pro 3003dw * HP LaserJet Pro 3004dw * HP LaserJet Pro 3001dne * HP LaserJet Pro 3001dn * HP LaserJet Pro 3002dne * HP LaserJet Pro 3002dn * HP LaserJet Pro 3003dn * HP LaserJet Pro 3004dn ==== hwinfo ==== Version update (22.0 -> 22.1) - merge gh#openSUSE/hwinfo#117 - glibc 2.36+ includes fsconfig itself, make linux/fs.h inclusion conditional (bsc#1202213) - 22.1 ==== kernel-source ==== Version update (5.18.15 -> 5.19.0) - Update config files -- set SECURITY_SELINUX_CHECKREQPROT_VALUE=0 (bsc#1202280) - commit 6a791bc - Revert "zram: remove double compression logic" (bsc#1202203). - commit 9739fe2 - tools bpftool: Don't display disassembler-four-args feature test (bsc#1202195). - tools bpftool: Fix compilation error with new binutils (bsc#1202195). - tools bpf_jit_disasm: Don't display disassembler-four-args feature test (bsc#1202195). - tools bpf_jit_disasm: Fix compilation error with new binutils (bsc#1202195). - tools perf: Fix compilation error with new binutils (bsc#1202195). - tools include: add dis-asm-compat.h to handle version differences (bsc#1202195). - tools build: Don't display disassembler-four-args feature test (bsc#1202195). - tools build: Add feature test for init_disassemble_info API changes (bsc#1202195). - commit fa8853d - series.conf: remove blank line from sorted section It causes troubles when adding multiple patches -- the current ones are duplicated then. - commit 309e362 - Update patches.suse/Revert-Revert-tcp-change-pingpong-threshold-to-3.patch (bsc#1202188). Add a reference and refresh. - commit 5ea3c65 - Revert "Revert "tcp: change pingpong threshold to 3"" (eventlet tests fix). - commit 8268096 - series.conf: cleanup - update upstream references and resort: - patches.suse/0001-drm-Always-warn-if-user-defined-modes-are-not-suppor.patch - patches.suse/0001-drm-client-Don-t-add-new-command-line-mode.patch - patches.suse/0001-drm-client-Look-for-command-line-modes-first.patch - update upstream references and move into sorted section: - patches.suse/ath9k-fix-use-after-free-in-ath9k_hif_usb_rx_cb.patch - commit 35466a9 - Update config files (bsc#1184924). +RANDOM_TRUST_BOOTLOADER on arm This is set on all other platforms in Tumbleweed, and only on ARM in Leap. The ARM platform is unique in that it can have random source defined in EFI firmware as well as device tree, and we don't test this configuration in Factory because of the inverted config situation betwween Tumbleweed and Leap. - commit 1275841 - Fix parsing of rpm/macros.kernel-source on SLE12 (bsc#1201019). - commit 9816878 - Update to 5.19 final - refresh configs - commit e9f89c9 ==== kscreenlocker ==== Subpackages: kscreenlocker-lang libKScreenLocker5 - Use %_pam_vendordir ==== libadwaita ==== Version update (1.1.3 -> 1.1.4) Subpackages: libadwaita-1-0 libadwaita-lang typelib-1_0-Adw-1 - Update to version 1.1.4: + AdwAvatar: Fix draw_to_texture() with rectangular avatars. + AdwTabBar: Fix squished or clipped text with gtk-hint-font-metrics=0. + AdwShadowHelper: Fix warnings when drawing vertical shadow. + AdwSwipeTracker: - Fix swipe speed on GTK 4.7.x. - Fix criticals with GTK 4.7.x. ==== libbluray ==== Version update (1.3.1 -> 1.3.2) - update to 1.3.2: - Fix build/run failure after Oracle Java CPU for April 2022 - drop patch libbluray-April2022CPU.patch (upstream) ==== manpages-l10n ==== Version update (4.14.0 -> 4.15.0) Subpackages: man-pages-cs man-pages-da man-pages-de man-pages-el man-pages-es man-pages-fr man-pages-hu man-pages-it man-pages-pl man-pages-pt_BR - Remove ethers.5 German translation already provided by net-tools (https://salsa.debian.org/manpages-l10n-team/manpages-l10n/-/issues/8). - Update to version 4.15.0: Updated many translations. ==== mobile-broadband-provider-info ==== Version update (20220511 -> 20220725) - Update to version 20220725: * release: bump version to 20220725 * bsnlnet: Add username and password * xk: add Ipko service provider * nl: correct Simple internet provider * fr: add Simplus data/mms settings ==== mutt ==== Version update (2.2.6 -> 2.2.7) Subpackages: mutt-doc mutt-lang - update to 2.2.7: * This is a bug-fix release, fixing a $edit_headers bug on MacOS, along with a few other small bugs. It also tightens the $query_command parser to accept a single tab between fields, and changes $pager to accept a %s expando. ==== permissions ==== Version update (1599_20220309 -> 1599_20220713) Subpackages: chkstat permissions-config - Fix dependency from permissions-zypp-plugin to permissions. - Avoid different Versions for subpackages to fix build-compare seeing the src rpm as equal. It replaces VERSION-RELEASE but that will fail if subpackages use a different Version - Update to version 20220713: * postfix: add postlog setgid for maildrop binary (bsc#1201385) * libexec migration: KDE utilities now properly place their helpers * pccardctl: installation path has finally changed to /usr/sbin ==== postfix ==== Version update (3.6.6 -> 3.7.2) - use correct source signature file (gpg2) - update to 3.7.2 https://de.postfix.org/ftpmirror/official/postfix-3.7.2.RELEASE_NOTES - rebase patches * pointer_to_literals.patch * postfix-linux45.patch * postfix-main.cf.patch * postfix-master.cf.patch * postfix-no-md5.patch * postfix-ssl-release-buffers.patch * postfix-vda-v14-3.0.3.patch * set-default-db-type.patch - build against libpcre2 ==== python-loguru ==== Version update (0.5.3 -> 0.6.0) - Update to 0.6.0 * Remove internal use of pickle.loads() considered as a security vulnerability referenced as CVE-2022-0329 (#563). * Modify coroutine sink to make it discard log messages when loop=None and no event loop is running (due to internally using asyncio.get_running_loop() in place of asyncio.get_event_loop()). * Remove the possibility to add a coroutine sink with enqueue=True if loop=None and no event loop is running. * Change default encoding of file sink to be utf8 instead of locale.getpreferredencoding() (#339). * Prevent non-ascii characters to be escaped while logging JSON message with serialize=True (#575, thanks @ponponon). * Fix flake8 errors and improve code readability (#353, thanks @AndrewYakimets). - Drop merged patches: * loguru-exception-formatting-py39.patch * pytest-6.2-excepthooks.patch - Add loguru-fix-repr-tests.patch * Fix "repr()" tests failing on Python 3.11 and Python 3.10.6 * https://github.com/Delgan/loguru/commit/4fe21f66 ==== python-pip ==== - skip subversion tests, not that relevant to pull in dozens of dependencies into small bootstrap - Add distutils-reproducible-compile.patch to make installed files ordered correctly and thus builds reproducible again (port of the fix for bpo#29708 and gh#python/cpython#8057). ==== python-pytest ==== Version update (7.1.1 -> 7.1.2) - Update to 7.1.2 * #9726: An unnecessary numpy import inside pytest.approx{.interpreted-text role="func"} was removed. * #9820: Fix comparison of dataclasses with InitVar. * #9869: Increase stacklevel for the NODE_CTOR_FSPATH_ARG deprecation to point to the user's code, not pytest. * #9871: Fix a bizarre (and fortunately rare) bug where the [temp_path]{.title-ref} fixture could raise an internal error while attempting to get the current user's username. ==== python310 ==== Version update (3.10.5 -> 3.10.6) Subpackages: python310-curses python310-dbm python310-tk - Update to 3.10.6: - gh-87389: http.server: Fix an open redirection vulnerability in the HTTP server when an URI path starts with //. Vulnerability discovered, and initial fix proposed, by Hamza Avvan. - gh-92888: Fix memoryview use after free when accessing the backing buffer in certain cases. - gh-95355: _PyPegen_Parser_New now properly detects token memory allocation errors. Patch by Honglin Zhu. - gh-94938: Fix error detection in some builtin functions when keyword argument name is an instance of a str subclass with overloaded __eq__ and __hash__. Previously it could cause SystemError or other undesired behavior. - gh-94949: ast.parse() will no longer parse parenthesized context managers when passed feature_version less than (3, 9). Patch by Shantanu Jain. - gh-94947: ast.parse() will no longer parse assignment expressions when passed feature_version less than (3, 8). Patch by Shantanu Jain. - gh-94869: Fix the column offsets for some expressions in multi-line f-strings ast nodes. Patch by Pablo Galindo. - gh-91153: Fix an issue where a bytearray item assignment could crash if itâs resized by the new valueâs __index__() method. - gh-94329: Compile and run code with unpacking of extremely large sequences (1000s of elements). Such code failed to compile. It now compiles and runs correctly. - gh-94360: Fixed a tokenizer crash when reading encoded files with syntax errors from stdin with non utf-8 encoded text. Patch by Pablo Galindo - gh-94192: Fix error for dictionary literals with invalid expression as value. - gh-93964: Strengthened compiler overflow checks to prevent crashes when compiling very large source files. - gh-93671: Fix some exponential backtrace case happening with deeply nested sequence patterns in match statements. Patch by Pablo Galindo - gh-93021: Fix the __text_signature__ for __get__() methods implemented in C. Patch by Jelle Zijlstra. - gh-92930: Fixed a crash in _pickle.c from mutating collections during __reduce__ or persistent_id. - gh-92914: Always round the allocated size for lists up to the nearest even number. - gh-92858: Improve error message for some suites with syntax error before â:â - gh-95339: Update bundled pip to 22.2.1. - gh-95045: Fix GC crash when deallocating _lsprof.Profiler by untracking it before calling any callbacks. Patch by Kumar Aditya. - gh-95087: Fix IndexError in parsing invalid date in the email module. - gh-95199: Upgrade bundled setuptools to 63.2.0. - gh-95194: Upgrade bundled pip to 22.2. - gh-93899: Fix check for existence of os.EFD_CLOEXEC, os.EFD_NONBLOCK and os.EFD_SEMAPHORE flags on older kernel versions where these flags are not present. Patch by Kumar Aditya. - gh-95166: Fix concurrent.futures.Executor.map() to cancel the currently waiting on future on an error - e.g. TimeoutError or KeyboardInterrupt. - gh-93157: Fix fileinput module didnât support errors option when inplace is true. - gh-94821: Fix binding of unix socket to empty address on Linux to use an available address from the abstract namespace, instead of â0â. - gh-94736: Fix crash when deallocating an instance of a subclass of _multiprocessing.SemLock. Patch by Kumar Aditya. - gh-94637: SSLContext.set_default_verify_paths() now releases the GIL around SSL_CTX_set_default_verify_paths call. The function call performs I/O and CPU intensive work. - gh-94510: Re-entrant calls to sys.setprofile() and sys.settrace() now raise RuntimeError. Patch by Pablo Galindo. - gh-92336: Fix bug where linecache.getline() fails on bad files with UnicodeDecodeError or SyntaxError. It now returns an empty string as per the documentation. - gh-89988: Fix memory leak in pickle.Pickler when looking up dispatch_table. Patch by Kumar Aditya. - gh-94254: Fixed types of struct module to be immutable. Patch by Kumar Aditya. - gh-94245: Fix pickling and copying of typing.Tuple[()]. - gh-94207: Made _struct.Struct GC-tracked in order to fix a reference leak in the _struct module. - gh-94101: Manual instantiation of ssl.SSLSession objects is no longer allowed as it lead to misconfigured instances that crashed the interpreter when attributes where accessed on them. - gh-84753: inspect.iscoroutinefunction(), inspect.isgeneratorfunction(), and inspect.isasyncgenfunction() now properly return True for duck-typed function-like objects like instances of unittest.mock.AsyncMock. - This makes inspect.iscoroutinefunction() consistent with the behavior of asyncio.iscoroutinefunction(). Patch by Mehdi ABAAKOUK. - gh-83499: Fix double closing of file description in tempfile. - gh-79512: Fixed names and __module__ value of weakref classes ReferenceType, ProxyType, CallableProxyType. It makes them pickleable. ... changelog too long, skipping 98 lines ... - skip-test_pyobject_freed_is_freed.patch ==== python310-core ==== Version update (3.10.5 -> 3.10.6) Subpackages: libpython3_10-1_0 python310-base - Update to 3.10.6: - gh-87389: http.server: Fix an open redirection vulnerability in the HTTP server when an URI path starts with //. Vulnerability discovered, and initial fix proposed, by Hamza Avvan. - gh-92888: Fix memoryview use after free when accessing the backing buffer in certain cases. - gh-95355: _PyPegen_Parser_New now properly detects token memory allocation errors. Patch by Honglin Zhu. - gh-94938: Fix error detection in some builtin functions when keyword argument name is an instance of a str subclass with overloaded __eq__ and __hash__. Previously it could cause SystemError or other undesired behavior. - gh-94949: ast.parse() will no longer parse parenthesized context managers when passed feature_version less than (3, 9). Patch by Shantanu Jain. - gh-94947: ast.parse() will no longer parse assignment expressions when passed feature_version less than (3, 8). Patch by Shantanu Jain. - gh-94869: Fix the column offsets for some expressions in multi-line f-strings ast nodes. Patch by Pablo Galindo. - gh-91153: Fix an issue where a bytearray item assignment could crash if itâs resized by the new valueâs __index__() method. - gh-94329: Compile and run code with unpacking of extremely large sequences (1000s of elements). Such code failed to compile. It now compiles and runs correctly. - gh-94360: Fixed a tokenizer crash when reading encoded files with syntax errors from stdin with non utf-8 encoded text. Patch by Pablo Galindo - gh-94192: Fix error for dictionary literals with invalid expression as value. - gh-93964: Strengthened compiler overflow checks to prevent crashes when compiling very large source files. - gh-93671: Fix some exponential backtrace case happening with deeply nested sequence patterns in match statements. Patch by Pablo Galindo - gh-93021: Fix the __text_signature__ for __get__() methods implemented in C. Patch by Jelle Zijlstra. - gh-92930: Fixed a crash in _pickle.c from mutating collections during __reduce__ or persistent_id. - gh-92914: Always round the allocated size for lists up to the nearest even number. - gh-92858: Improve error message for some suites with syntax error before â:â - gh-95339: Update bundled pip to 22.2.1. - gh-95045: Fix GC crash when deallocating _lsprof.Profiler by untracking it before calling any callbacks. Patch by Kumar Aditya. - gh-95087: Fix IndexError in parsing invalid date in the email module. - gh-95199: Upgrade bundled setuptools to 63.2.0. - gh-95194: Upgrade bundled pip to 22.2. - gh-93899: Fix check for existence of os.EFD_CLOEXEC, os.EFD_NONBLOCK and os.EFD_SEMAPHORE flags on older kernel versions where these flags are not present. Patch by Kumar Aditya. - gh-95166: Fix concurrent.futures.Executor.map() to cancel the currently waiting on future on an error - e.g. TimeoutError or KeyboardInterrupt. - gh-93157: Fix fileinput module didnât support errors option when inplace is true. - gh-94821: Fix binding of unix socket to empty address on Linux to use an available address from the abstract namespace, instead of â0â. - gh-94736: Fix crash when deallocating an instance of a subclass of _multiprocessing.SemLock. Patch by Kumar Aditya. - gh-94637: SSLContext.set_default_verify_paths() now releases the GIL around SSL_CTX_set_default_verify_paths call. The function call performs I/O and CPU intensive work. - gh-94510: Re-entrant calls to sys.setprofile() and sys.settrace() now raise RuntimeError. Patch by Pablo Galindo. - gh-92336: Fix bug where linecache.getline() fails on bad files with UnicodeDecodeError or SyntaxError. It now returns an empty string as per the documentation. - gh-89988: Fix memory leak in pickle.Pickler when looking up dispatch_table. Patch by Kumar Aditya. - gh-94254: Fixed types of struct module to be immutable. Patch by Kumar Aditya. - gh-94245: Fix pickling and copying of typing.Tuple[()]. - gh-94207: Made _struct.Struct GC-tracked in order to fix a reference leak in the _struct module. - gh-94101: Manual instantiation of ssl.SSLSession objects is no longer allowed as it lead to misconfigured instances that crashed the interpreter when attributes where accessed on them. - gh-84753: inspect.iscoroutinefunction(), inspect.isgeneratorfunction(), and inspect.isasyncgenfunction() now properly return True for duck-typed function-like objects like instances of unittest.mock.AsyncMock. - This makes inspect.iscoroutinefunction() consistent with the behavior of asyncio.iscoroutinefunction(). Patch by Mehdi ABAAKOUK. - gh-83499: Fix double closing of file description in tempfile. - gh-79512: Fixed names and __module__ value of weakref classes ReferenceType, ProxyType, CallableProxyType. It makes them pickleable. ... changelog too long, skipping 98 lines ... - skip-test_pyobject_freed_is_freed.patch ==== tracker-miners ==== Subpackages: tracker-miner-files tracker-miners-lang - Add 401.patch: Specify graphs in "tracker3 search" queries; resolves tracker search listing files multiple times (boo#1200403 glgo#GNOME/tracker-miners#229). ==== usbredir ==== Version update (0.12.0 -> 0.13.0) Subpackages: libusbredirhost1 libusbredirparser1 - Update to version 0.13.0: + Fix regression on unserialize data + Removes usbredirserver + Improved header length checks when unserialising data + Fix usage of command line argument in usbredirect + Fix small memory leak on usbredirect - Drop 9426fdb1.patch and dffc41c3.patch: fixed upstream. - Drop 0001-Use-D_FORTIFY_SOURCE-instead-of-Wp-D_FORTIFY_SOURCE.patch: fixed upstream. - Add keyring to validate source signature. ==== webkit2gtk3 ==== Version update (2.36.5 -> 2.36.6) Subpackages: WebKit2GTK-4.1-lang libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles - Update to version 2.36.6 + Fix handling of touchpad scrolling on GTK4 builds + Fix WebKitGTK not allowing to be used from non-main threads (boo#1202169) + Fix several crashes and rendering issues ==== webkit2gtk3-soup2 ==== Version update (2.36.5 -> 2.36.6) Subpackages: WebKit2GTK-4.0-lang libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 typelib-1_0-JavaScriptCore-4_0 typelib-1_0-WebKit2-4_0 webkit2gtk-4_0-injected-bundles - Update to version 2.36.6 + Fix handling of touchpad scrolling on GTK4 builds + Fix WebKitGTK not allowing to be used from non-main threads (boo#1202169) + Fix several crashes and rendering issues ==== wireplumber ==== Subpackages: libwireplumber-0_4-0 wireplumber-audio wireplumber-lang - Add 398.patch -- policy-node: fix potential rescan loop to prevent high cpu usage (glfo#pipewire/wireplumber#152); patch taken from upstream merge request. ==== xdg-desktop-portal ==== Version update (1.14.5 -> 1.14.6) Subpackages: xdg-desktop-portal-lang - Update to version 1.14.6: + realtime: - Remap thread ids. - Use correct types.

1 0

help needed with portmidi
by Cor Blom 10 Aug '22

10 Aug '22

Hi, Portmidi gives rpmlint errors that include rpath warnings. I have read the documentation [1] on this test, but the only option I see is to disable this test or do something with chrpath. These seem like last resort solutions. Maybe someone who understands the code better can find a better solution to solve this? It can also use a more able maintainer than me. I've only kept it alive because of musescore, but lately it has seen some big updates again. Thanks, Cor [1] https://en.opensuse.org/openSUSE:Packaging_checks

6 9

New Tumbleweed snapshot 20220809 released!
by Dominique Leuenberger 10 Aug '22

10 Aug '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: apparmor btrfsprogs clamav (0.103.6 -> 0.103.7) freerdp (2.7.0 -> 2.8.0) fwupd (1.7.7 -> 1.7.9) gnome-remote-desktop (42.3 -> 42.4) inn (2.6.4 -> 2.6.5) kernel-firmware (20220714 -> 20220804) libapparmor libqt5-qtwebengine librubberband (1.8.2 -> 3.0.0) libwebp (1.2.3 -> 1.2.4) mlterm mosh (1.3.2+20211210 -> 1.4.0.rc1) mozjs91 (91.11.0 -> 91.12.0) polkit read-only-root-fs (1.0+git20220801.cbb90bc -> 1.0+git20220808.cd59f4f) remmina rubygem-debase-ruby_core_source (0.10.14 -> 0.10.16) rubygem-diffy (3.4.0 -> 3.4.2) rubygem-down (5.3.0 -> 5.3.1) rubygem-dry-configurable (0.14.0 -> 0.15.0) rubygem-dry-container (0.9.0 -> 0.10.1) rubygem-dry-core (0.7.1 -> 0.8.1) rubygem-dry-inflector (0.2.1 -> 0.3.0) rubygem-faraday (2.3.0 -> 2.4.0) rubygem-faraday-net_http (2.0.3 -> 2.1.0) rubygem-flog (4.6.4 -> 4.6.6) rubygem-fluentd (1.14.5 -> 1.15.1) rubygem-gettext (3.4.2 -> 3.4.3) rubygem-hoe (3.23.1 -> 3.24.0) rubygem-http (5.0.4 -> 5.1.0) rubygem-http-cookie (1.0.4 -> 1.0.5) rubygem-importmap-rails (1.0.3 -> 1.1.5) rubygem-js-routes (2.2.3 -> 2.2.4) rubygem-json-jwt (1.13.0 -> 1.14.0) rubygem-json-schema (2.8.1 -> 3.0.0) rubygem-json_pure (2.6.1 -> 2.6.2) rubygem-jwt (2.3.0 -> 2.4.1) rubygem-liquid (5.3.0 -> 5.4.0) rubygem-mixlib-config (3.0.9 -> 3.0.27) rubygem-msgpack (1.5.3 -> 1.5.4) rubygem-mustermann (1.1.1 -> 3.0.0) rubygem-mustermann-grape (1.0.1 -> 1.0.2) rubygem-net-ldap (0.17.0 -> 0.17.1) rubygem-omniauth-oauth2 (1.7.2 -> 1.8.0) rubygem-paint (2.2.1 -> 2.3.0) rubygem-path_expander (1.1.0 -> 1.1.1) rubygem-pg (1.3.5 -> 1.4.2) rubygem-rack-oauth2 (1.19.0 -> 1.21.2) rubygem-rack-protection (2.2.0 -> 2.2.2) rubygem-rice (4.0.3 -> 4.0.4) rubygem-rouge (3.29.0 -> 3.30.0) rubygem-rubocop (1.31.2 -> 1.33.0) rubygem-rubocop-ast (1.18.0 -> 1.19.1) rubygem-sdoc (2.3.2 -> 2.4.0) rubygem-serverengine (2.2.5 -> 2.3.0) rubygem-sqlite3 (1.4.2 -> 1.4.4) rubygem-stimulus-rails (1.0.4 -> 1.1.0) rubygem-tilt (2.0.10 -> 2.0.11) rubygem-tomlrb (2.0.1 -> 2.0.3) rubygem-turbo-rails (1.0.1 -> 1.1.1) rubygem-tzinfo-1.2 (1.2.9 -> 1.2.10) rubygem-tzinfo (2.0.4 -> 2.0.5) rubygem-validate_url (1.0.13 -> 1.0.15) shaderc transactional-update (4.0.0~rc4 -> 4.0.0) vlc yast2-trans (84.87.20220730.27a80cdf03 -> 84.87.20220807.4697ae62b4) === Details === ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-docs apparmor-parser apparmor-parser-lang apparmor-profiles apparmor-utils apparmor-utils-lang pam_apparmor pam_apparmor-32bit python3-apparmor - add dnsmasq.diff: missing r permissions for dnsmasq//libvirt-leaseshelper (boo#1202161) ==== btrfsprogs ==== Subpackages: btrfsprogs-udev-rules libbtrfs0 - Remove reiserfs conversion from releases after SLE/Leap 15.X in preparation to remove the reiserfs package. ==== clamav ==== Version update (0.103.6 -> 0.103.7) Subpackages: libclamav9 libfreshclam2 - Update to 0.103.7 - Zip parser: tolerate 2-byte overlap in file entries - Fix bug with logical signature Intermediates feature - Update to UnRAR v6.1.7 - Patch UnRAR: allow skipping files in solid archives - Patch UnRAR: limit dict winsize to 1GB ==== freerdp ==== Version update (2.7.0 -> 2.8.0) Subpackages: libfreerdp2-2 libwinpr2-2 - Ugraded to freerdp 2.8.0 * Backported API to get peer accepted channel option flags * Backported API to get peer accepted channel names * Backported Stream_CheckAndLogRequiredLength * Backported #7954: Add server side handling for [MS-RDPET] * Backported #8010: Add server side handling for [MS-RDPECAM] * Backported #8041: Remove ALAW/ULAW codecs from linux backends (unreliable) * Backported #8051: Relieve CLIPRDR filename restriction when connecting to non-MS Windows servers * Backported #8048: TLS version control * Backported #7987: Add a new command line arg to enforce tls1.2 - Fixed issues: * Fixed #7837: Prevent out of bound reads for FFMPEG * Backported #7859 and #7861: Unwind support for backtrace generation * Backported #7440: wlfreerdp appid * Backported #7832: RAIL window restore * Backported #7833: Refactored WinPR thread locking * Backported #7893: Mac rdpsnd memory leak fixes * Backported #7895: Mac audin memory leak fixes * Backported #7898: Automatic android versioning * Backported #7916: GFX 10.7 capability support * Backported #7949: Server RDPSND API improvements * Backported #7957: Server DVC API improvements * Backported #7760: Fixed osMinorType values * Backported #8013: Add missing osMajorType values * Backported #8076: Fix wrong usage of subband diffing flag (tile artifact fix) ==== fwupd ==== Version update (1.7.7 -> 1.7.9) Subpackages: fwupd-bash-completion fwupd-lang libfwupd2 libfwupdplugin5 typelib-1_0-Fwupd-2_0 - Update to version 1.7.9 (boo#1201311): + Do not generate a capsule header for the FMP GUID. + Do not use CoD even when advertized on non-aarch64 platforms. + Fix a critical warning when parsing an invalid PHAT record. + Fix a regression for devices using the Atmel FLIP Bootloader. + Fix parsing SMBIOS data. + Set the device ID on the FwupdRequest. + Use the correct protocol member when converting to JSON. + Wait for the system76-launch device to re-enumerate if unlocked and reset. - Changes from version 1.7.8: + Add the bootloader VID/PID used for the first batch of ColorHug devices. + Also check for os-release in SYSCONFDIR. + Export the version lowest raw value correctly. + Fix a Wacom timeout when parsing very corrupt firmware. + Fix Genesys device enumeration failure by not claiming the interface. + Hardcode the Redfish filedata name to firmware.bin. + Install D-Bus introspection data even if introspection is disabled. + Only set the flashrom BIOS size if not already quirked. + Read the SynapticsMST firmware size in a more safe way. + Restart the BMC after installing BCM updates. ==== gnome-remote-desktop ==== Version update (42.3 -> 42.4) Subpackages: gnome-remote-desktop-lang - Update to version 42.4: + ctl: - Do not crash, when deleting non-existent credentials - Fix error messages + rdp: Don't dereference NULL pointer when parent dir cannot be found + rdp-gfx-surface: Delete GFX surface before clearing its members + rdp-graphics-pipeline: Extend comment with documentation reference + rdp/nw-auto: Disallow unqueued bandwidth measure stops + rdp/rdpgfx: Only clear unacked frames when surface has frame controller + session-rdp: - Do not crash, when credentials are not set - Stop leaking session sources when session creation fails - Stop leaking the event queue, when session creation fails + session-vnc: Do not crash, when password is not set + settings: Do not set error twice when secret_password_lookup_sync fails + tests/egl: Replace tautologies with actual modifier checks ==== inn ==== Version update (2.6.4 -> 2.6.5) - Update to version 2.6.5: * A new step in INN development has been achieved with the migration of the INN project to GitHub. * An up-to-date nocem.ctl file is provided with this release. You should manually update your nocem.ctl file with the new information recorded about NoCeM issuers, and make sure the right PGP keys are present on your system. * Up-to-date control.ctl and moderators files are provided with this release. You should manually update them (notably for the fido7.* hierarchy). * Added a stricter validation of article numbers given in NNTP commands so that numbers superior to 2^31 are correctly considered invalid. Thanks to Richard Kettlewell for the patch. * Added a check in rc.news for the existence of the *pathrun* directory. INN won't start until this directory is writable. Previously, it bailed out quickly after starting, without clear logs about why it failed. * Fixed parallel builds using "make -j". Thanks to Richard Kettlewell for the path. * nnrpd now properly gathers timer statistics when a compression layer is active. * nnrpd now properly discards data received from a news client after a timeout when a TLS layer is active. It previously tried to read incoming data before closing the socket, leading to decoding errors from an underlying compression or SASL layer. * innfeed and ovdb_stat now generate status reports in valid HTML syntax. * Fixed a bug in the buffindexed overview that prevented it from working on several systems, amongst them FreeBSD. Unsupported, and useless, permission bits were given to semaphores. * Fixed the detection of library paths at configure time: multilib directories (lib32 or lib64) are now also used if they exist, even it the system does not use multilib. It will notably fix the detection of the OpenSSL 3.0.0 library. * The *tlscertfile* parameter in inn.conf now permits the use of a complete certificate chain, instead of necessarily having to use * tlscafile* for additional certificates. * Added support for the new OpenSSL 3.0.0 API, which deprecated a few functions. * The inn.conf default value for *tlsprotocols* no longer contains TLS versions 1.0 and 1.1, which have been deprecated by RFC 8996. * A new inn.conf parameter has been added to tune the length of the queue of pending connections to innd, nnrpd and the "ovdb" overview storage method: the *maxlisten* parameter now permits configuring their listen backlog, whose previously hard-coded values were 128 for nnrpd and 25 for the others, which was not high enough for some uses. The default value is now 128 for all of them, and configurable in inn.conf. Thanks to Kevin Bowling for the patch. * The name of seven man pages for routines built in libinn(3) are now prefixed with libinn_ so as not to consume namespace and conflict with other packages (notably, the list(3) and uwildmat(3) man pages are now named libinn_list(3) and libinn_uwildmat(3)). * Other minor bug fixes and documentation improvements, notably a revised installation checklist and a section summarizing the most used configuration at the beginning of a few complex man pages. - delete inn-2.6.4.diff patch - add inn-2.6.5.diff patch instead ==== kernel-firmware ==== Version update (20220714 -> 20220804) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network ucode-amd - Update to version 20220804 (git commit e6185d5197fd): * linux-firmware: Update firmware file for Intel Bluetooth 9462 * linux-firmware: Update firmware file for Intel Bluetooth 9462 * linux-firmware: Update firmware file for Intel Bluetooth 9560 * linux-firmware: Update firmware file for Intel Bluetooth 9560 * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth AX211 * linux-firmware: Update firmware file for Intel Bluetooth AX211 * linux-firmware: Update firmware file for Intel Bluetooth AX210 * linux-firmware: Update firmware file for Intel Bluetooth AX200 * linux-firmware: Update firmware file for Intel Bluetooth AX201 * Mellanox: Add new mlxsw_spectrum firmware xx.2010.3020 * linux-firmware: Add firmware for Cirrus CS35L41 * i915: Add GuC v70.4.1 for DG2 * i915: Add DMC v2.07 for DG2 * amdgpu partially revert "amdgpu: update beige goby to release 22.20" * mediatek: Update mt8183/mt8192/mt8195 SCP firmware * amdgpu: update renoir to release 22.20 * amdgpu: update beige goby to release 22.20 * amdgpu: update yellow carp to release 22.20 * amdgpu: update dimgrey cavefish to release 22.20 * amdgpu: update vega20 to release 22.20 * amdgpu: update vega12 to release 22.20 * amdgpu: update raven to release 22.20 * amdgpu: update navy flounder to release 22.20 * amdgpu: update vega10 to release 22.20 * amdgpu: update sienna cichlid to release 22.20 * amdgpu: update navi14 to release 22.20 * amdgpu: update green sardine to release 22.20 * amdgpu: update vangogh to release 22.20 * amdgpu: update navi12 to release 22.20 * amdgpu: update navi10 to release 22.20 * amdgpu: update picasso to release 22.20 * amdgpu: update aldebaran to release 22.20 * amdgpu: update psp 13.0.8 TA firmware * WHENCE: Fix the dangling symlinks fix - Revert the previous rtw88/rtw8822c_fw.bin change due to regression on HP Pavilion 15 (bsc#1202152) - Update alias from 5.19 ==== libapparmor ==== Subpackages: libapparmor1 libapparmor1-32bit - add dnsmasq.diff: missing r permissions for dnsmasq//libvirt-leaseshelper (boo#1202161) ==== libqt5-qtwebengine ==== - Stop using 'pkgconfig(xxx)' BuildRequires for FFmpeg dependencies. They will point to FFmpeg-5 soon. ==== librubberband ==== Version update (1.8.2 -> 3.0.0) - Update to version 3.0.0 * Introduces a new engine * Various other changes - Add rubberband-lv2 package - Drop obsoleted patch: rubberband-mk.patch ==== libwebp ==== Version update (1.2.3 -> 1.2.4) Subpackages: libwebp7 libwebpdemux2 libwebpmux3 - update to 1.2.4: This is a binary compatible release. * restore CMake libwebpmux target name for compatibility with 1.2.2 (#575) * fix lossless crunch mode encoding with WEBP_REDUCE_SIZE (chromium: #1345547, #1345595, #1345772, #1345804) ==== mlterm ==== Subpackages: mlterm-ibus mlterm-scim mlterm-wnn - Drop canna support: canna has not been maintained for a long time and sec issues are not being addressed (bsc#1199280). ==== mosh ==== Version update (1.3.2+20211210 -> 1.4.0.rc1) - Update to version 1.4.0.rc1: * Bump release candidate to 1.4.0-rc1 * Actually evaluate the github actions contains() expression for prerelease * Fetch forcibly while fetching tags * Tag mosh 1.4.0 Release Candidate * Audit and fix up format strings * Switch macOS multi-arch to x86_64+arm64 * Add -Wno-unused-parameter * Remove obsolete Travis CI configuration * Add macOS release steps to Github Actions * Add release action on Linux ==== mozjs91 ==== Version update (91.11.0 -> 91.12.0) - Update to version 91.12.0: + Various stability, functionality, and security fixes. ==== polkit ==== Subpackages: libpolkit-agent-1-0 libpolkit-gobject-1-0 pkexec typelib-1_0-Polkit-1_0 - Use %_pam_vendordir ==== read-only-root-fs ==== Version update (1.0+git20220801.cbb90bc -> 1.0+git20220808.cd59f4f) - Update to version 1.0+git20220808.cd59f4f: * Fix writableagain.conf - Update to version 1.0+git20220805.4a3d850: * Work around read-only state of subvolumes in a different way ==== remmina ==== Subpackages: remmina-lang remmina-plugin-rdp remmina-plugin-secret remmina-plugin-vnc - Set CMAKE_SKIP_RPATH to avoid writing bogus RUNPATH to binaries and modules - Spec cleanup ==== rubygem-debase-ruby_core_source ==== Version update (0.10.14 -> 0.10.16) updated to version 0.10.16 see installed CHANGELOG.md [#]# [0.10.16](https://github.com/ruby-debug/debase-ruby_core_source/compare/v0.1… * ruby-2.5.4-p155 added * updated `required_ruby_version` to require ruby 2.0 * ruby-1.9.3 removed [#]# [0.10.15](https://github.com/ruby-debug/debase-ruby_core_source/compare/v0.1… * ruby-3.2.0-preview1 added [#]# [0.10.14](https://github.com/ruby-debug/debase-ruby_core_source/compare/v0.1… * ruby-3.1-0-p0 added * ruby-3.1.0-preview1 removed [#]# [0.10.13](https://github.com/ruby-debug/debase-ruby_core_source/compare/v0.1… * ruby-3.1.0-preview1 added [#]# [0.10.12](https://github.com/ruby-debug/debase-ruby_core_source/compare/v0.1… * ruby-3.0.0-p0 added * ruby-3.0.0-preview1 removed [#]# [0.10.11](https://github.com/ruby-debug/debase-ruby_core_source/compare/v0.1… * ruby-3.0.0-preview1 added ==== rubygem-diffy ==== Version update (3.4.0 -> 3.4.2) updated to version 3.4.2 see installed CHANGELOG == 3.4.2 == Silence warning from unused variable when using `ruby -w`. Thanks @sambostock! == 3.4.1 == Prevent remote code execution from user controlled diff file paths. This issue was only present in Windows platforms. Thanks @tehryanx for reporting and testing the fix! == 3.4.0 == Remove space between U diff option and context number. Thanks @tomas! Add option to ignore CRLF diffs in HTML comparisons. Thanks @ptyagi16! ==== rubygem-down ==== Version update (5.3.0 -> 5.3.1) updated to version 5.3.1 see installed CHANGELOG.md [#]# 5.3.1 (2022-03-25) * Correctly split cookie headers on `;` instead of `,` when forwarding them on redirects (@ermolaev) ==== rubygem-dry-configurable ==== Version update (0.14.0 -> 0.15.0) updated to version 0.15.0 see installed CHANGELOG.md [#]# 0.15.0 2022-04-21 [#]## Changed - The `finalize!` method (as class or instance method, depending on whether you extend or include `Dry::Configurable` respectively) now accepts a boolean `freeze_values:` argument, which if true, will recursively freeze all config values in addition to the `config` itself. (#105 by @ojab) ```ruby class MyConfigurable include Dry::Configurable setting :db, default: "postgre" end my_obj = MyConfigurable.new my_obj.finalize!(freeze_values: true) my_obj.config.db << "sql" # Will raise FrozenError ``` - `Dry::Configurable::Config#update` will set hashes as values for non-nested settings (#131 by @ojab) ```ruby class MyConfigurable extend Dry::Configurable setting :sslcert, constructor: ->(v) { v&.values_at(:pem, :pass)&.join } end MyConfigurable.config.update(sslcert: {pem: "cert", pass: "qwerty"}) MyConfigurable.config.sslcert # => "certqwerty" ``` - `Dry::Configurable::Config#update` will accept any values implicitly convertible to hash via `#to_hash` (#133 by @timriley) [Compare v0.14.0...v0.15.0](https://github.com/dry-rb/dry-configurable/compare/v0.14… ==== rubygem-dry-container ==== Version update (0.9.0 -> 0.10.1) updated to version 0.10.1 see installed CHANGELOG.md [#]# 0.10.1 2022-07-29 [#]## Changed - Make `DidYouMean` integration optional (via #86) (@jbourassa) [Compare v0.10.0...v0.10.1](https://github.com/dry-rb/dry-container/compare/v0.10.0.… [#]# 0.10.0 2022-07-10 â ï¸ Notice that dry-container no longer depends on dry-configurable. If you happen to rely on the advanced configurable functionality, add dry-configurable as a dependency and require it **before** requiring dry-container. [#]## Added - Accept block given to `#merge` (via #83) (@timriley) [#]## Changed - [BREAKING] Replace dep on dry-configurable with a simple `Configuration` mod (see #84 for more details) (@solnic) - Raise KeyError for missing key, with DidYouMean integration (via #82) (@cllns) - Wrap FrozenError, to state that the container itself is frozen (see #74) (@cllns) [Compare v0.9.0...v0.10.0](https://github.com/dry-rb/dry-container/compare/v0.9.0...… ==== rubygem-dry-core ==== Version update (0.7.1 -> 0.8.1) updated to version 0.8.1 see installed CHANGELOG.md [#]# 0.8.0 [#]## Added - `Dry::Core::BasicObject` ported from hanami-utils (@jodosha) [#]## Changed - [BREAKING] [descendants tracker] switch to using `Class#subclasses` on Ruby 3.1+. This changes the order of returned subclasses (immediate subclasses now go first) (@flash-gordon) [Compare v0.7.1...v0.8.0](https://github.com/dry-rb/dry-core/compare/v0.7.1...master) ==== rubygem-dry-inflector ==== Version update (0.2.1 -> 0.3.0) updated to version 0.3.0 see installed CHANGELOG.md ==== rubygem-faraday ==== Version update (2.3.0 -> 2.4.0) updated to version 2.4.0 see installed CHANGELOG.md ==== rubygem-faraday-net_http ==== Version update (2.0.3 -> 2.1.0) updated to version 2.1.0 no changelog found ==== rubygem-flog ==== Version update (4.6.4 -> 4.6.6) updated to version 4.6.6 see installed History.rdoc === 4.6.6 / 2022-07-03 * 1 minor enhancement: * Added support for to_proc w/ hash(?!?). (t-kinoshita) * 2 bug fixes: * Removed to_proc_normal (eg &:sym/call) as benchmarks are much better. * ruby3: Fixed anonymous block pass. (prtngn) === 4.6.5 / 2022-04-09 * 1 minor enhancement: * Changed :iter scoring from branch to block_call (same score). * 1 bug fix: * Fixed support for ruby 3 (only affected block_pass / to_proc_normal). ==== rubygem-fluentd ==== Version update (1.14.5 -> 1.15.1) updated to version 1.15.1 see installed CHANGELOG.md ==== rubygem-gettext ==== Version update (3.4.2 -> 3.4.3) updated to version 3.4.3 see installed news.md [#]# 3.4.3: 2022-05-20 {#version-3-4-3} [#]## Improvements * Added support for Erubi to parse `.erb` [GitHub#91][Patch by MichaÃ«l Hoste] [#]## Thanks * MichaÃ«l Hoste ==== rubygem-hoe ==== Version update (3.23.1 -> 3.24.0) updated to version 3.24.0 see installed History.rdoc === 3.24.0 / 2022-06-20 * 3 minor enhancements: * Add bindir and homepage accessor methods. (dsisnero) * Don't auto-intuit values if they're already set. (dsisnero) * Use bindir to determine executables. (dsisnero) ==== rubygem-http ==== Version update (5.0.4 -> 5.1.0) updated to version 5.1.0 see installed CHANGES.md [#]# 5.1.0 (2022-06-17) * Drop ruby-2.5 support. * [#715](https://github.com/httprb/http/pull/715) Set default encoding to UTF-8 for `application/json`. ([@drwl]) * [#712](https://github.com/httprb/http/pull/712) Recognize cookies set by redirect. ([@tkellogg]) * [#707](https://github.com/httprb/http/pull/707) Distinguish connection timeouts. ([@YuLeven]) ==== rubygem-http-cookie ==== Version update (1.0.4 -> 1.0.5) updated to version 1.0.5 see installed CHANGELOG.md ==== rubygem-importmap-rails ==== Version update (1.0.3 -> 1.1.5) updated to version 1.1.5 no changelog found ==== rubygem-js-routes ==== Version update (2.2.3 -> 2.2.4) updated to version 2.2.4 see installed CHANGELOG.md [#]# v2.2.5 * Fix middleware generator [#300](https://github.com/railsware/js-routes/issues/300) * Support `params` special parameter ==== rubygem-json-jwt ==== Version update (1.13.0 -> 1.14.0) updated to version 1.14.0 no changelog found ==== rubygem-json-schema ==== Version update (2.8.1 -> 3.0.0) updated to version 3.0.0 no changelog found ==== rubygem-json_pure ==== Version update (2.6.1 -> 2.6.2) updated to version 2.6.2 see installed CHANGES.md ==== rubygem-jwt ==== Version update (2.3.0 -> 2.4.1) updated to version 2.4.1 see installed CHANGELOG.md [#]# [v2.4.1](https://github.com/jwt/ruby-jwt/tree/v2.4.1) (2022-06-07) ==== rubygem-liquid ==== Version update (5.3.0 -> 5.4.0) updated to version 5.4.0 see installed History.md [#]# 5.4.0 2022-07-29 [#]## Breaking Changes * Drop support for end-of-life Ruby versions (2.5 and 2.6) (#1578) [Andy Waite] [#]## Features * Allow `#` to be used as an inline comment tag (#1498) [CP Clermont] [#]## Fixes * `PartialCache` now shares snippet cache with subcontexts by default (#1553) [Chris AtLee] * Hash registers no longer leak into subcontexts as static registers (#1564) [Chris AtLee] * Fix `ParseTreeVisitor` for `with` variable expressions in `Render` tag (#1596) [CP Clermont] [#]## Changed * Liquid::Context#registers now always returns a Liquid::Registers object, though supports the most used Hash functions for compatibility (#1553) ==== rubygem-mixlib-config ==== Version update (3.0.9 -> 3.0.27) updated to version 3.0.27 no changelog found ==== rubygem-msgpack ==== Version update (1.5.3 -> 1.5.4) updated to version 1.5.4 see installed ChangeLog 2022-07-25 * Fix a segfault when deserializing empty symbol (`:""`). * Improve compilation flags to not strip debug symbols. ==== rubygem-mustermann ==== Version update (1.1.1 -> 3.0.0) updated to version 3.0.0 no changelog found ==== rubygem-mustermann-grape ==== Version update (1.0.1 -> 1.0.2) updated to version 1.0.2 no changelog found ==== rubygem-net-ldap ==== Version update (0.17.0 -> 0.17.1) updated to version 0.17.1 see installed History.rdoc === Net::LDAP 0.17.1 * Fixed shebang of bash #385 * Omit some tests for now until we update our CA cert #386 * Add Ruby 3.0 support #388 * Add TruffleRuby 21.0.0 to CI #389 * Correct a typo in an error message #391 * Enable bundler caching for travis #390 * Fix circular require while loading lib/net/ldap/entry.rb and lib/net/ldap/dataset.rb #392 * Handle nil value in GetbyteForSSLSocket::getbyte #306 ==== rubygem-omniauth-oauth2 ==== Version update (1.7.2 -> 1.8.0) updated to version 1.8.0 no changelog found ==== rubygem-paint ==== Version update (2.2.1 -> 2.3.0) updated to version 2.3.0 see installed CHANGELOG.md [#]## 2.3.0 [#]### Paint.%() now returns different escape sequences! * Fix #30: Color/effect nesting restores the parent level correctly. More verbose ASCII escape sequences are generated to ensure this. [#]### Other Fixes * Fix #31: Make paint work with frozen strings enabled * Also make paint library itself frozen * Fix #29: Update dev dependencies ==== rubygem-path_expander ==== Version update (1.1.0 -> 1.1.1) updated to version 1.1.1 see installed History.rdoc === 1.1.1 / 2022-07-03 * 1 bug fix: * Process plain '-' as a file, not an option. ==== rubygem-pg ==== Version update (1.3.5 -> 1.4.2) updated to version 1.4.2 see installed History.rdoc == v1.4.2 [2022-07-27] Lars Kanis <lars(a)greiz-reinsdorf.de> Bugfixes: - Properly handle empty host parameter when connecting. #471 - Update Windows fat binary gem to OpenSSL-1.1.1q. == v1.4.1 [2022-06-24] Lars Kanis <lars(a)greiz-reinsdorf.de> Bugfixes: - Fix another ruby-2.7 keyword warning. #465 - Allow PG::Error to be created without arguments. #466 == v1.4.0 [2022-06-20] Lars Kanis <lars(a)greiz-reinsdorf.de> Added: - Add PG::Connection#hostaddr, present since PostgreSQL-12. #453 - Add PG::Connection.conninfo_parse to wrap PQconninfoParse. #453 Bugfixes: - Try IPv6 and IPv4 addresses, if DNS resolves to both. #452 - Re-add block-call semantics to PG::Connection.new accidently removed in pg-1.3.0. #454 - Handle client error after all data consumed in #copy_data for output. #455 - Avoid spurious keyword argument warning on Ruby 2.7. #456 - Change connection setup to respect connect_timeout parameter. #459 - Fix indefinite hang in case of connection error on Windows #458 - Set connection attribute of PG::Error in various places where it was missing. #461 - Fix transaction leak on early break/return. #463 - Update Windows fat binary gem to OpenSSL-1.1.1o and PostgreSQL-14.4. Enhancements: - Don't flush at each put_copy_data call, but flush at get_result. #462 ==== rubygem-rack-oauth2 ==== Version update (1.19.0 -> 1.21.2) updated to version 1.21.2 no changelog found ==== rubygem-rack-protection ==== Version update (2.2.0 -> 2.2.2) updated to version 2.2.2 no changelog found ==== rubygem-rice ==== Version update (4.0.3 -> 4.0.4) updated to version 4.0.4 see installed CHANGELOG.md ==== rubygem-rouge ==== Version update (3.29.0 -> 3.30.0) updated to version 3.30.0 no changelog found ==== rubygem-rubocop ==== Version update (1.31.2 -> 1.33.0) updated to version 1.33.0 no changelog found ==== rubygem-rubocop-ast ==== Version update (1.18.0 -> 1.19.1) updated to version 1.19.1 no changelog found ==== rubygem-sdoc ==== Version update (2.3.2 -> 2.4.0) updated to version 2.4.0 see installed CHANGELOG.md 2.4.0 ===== * #187 Allow setting CSS based version badge [@p8](https://github.com/p8) ==== rubygem-serverengine ==== Version update (2.2.5 -> 2.3.0) updated to version 2.3.0 see installed Changelog 2022-06-13 version 2.3.0 * Add restart_worker_interval option to prevent workers restart immediately after kill * Reopen log file when rotation done by external tool is detected * Fix unexpected behavior of start_worker_delay option * Remove windows-pr dependency * Fix a potential crash that command_sender_pipe of ProcessManager::Monitor raises error on shutdown * Allow to load serverengine/socket_manager without servernegine/utils * Fix unstable tests ==== rubygem-sqlite3 ==== Version update (1.4.2 -> 1.4.4) updated to version 1.4.4 see installed CHANGELOG.rdoc ==== rubygem-stimulus-rails ==== Version update (1.0.4 -> 1.1.0) updated to version 1.1.0 no changelog found ==== rubygem-tilt ==== Version update (2.0.10 -> 2.0.11) updated to version 2.0.11 no changelog found ==== rubygem-tomlrb ==== Version update (2.0.1 -> 2.0.3) updated to version 2.0.3 no changelog found ==== rubygem-turbo-rails ==== Version update (1.0.1 -> 1.1.1) updated to version 1.1.1 no changelog found ==== rubygem-tzinfo-1.2 ==== Version update (1.2.9 -> 1.2.10) updated to version 1.2.10 see installed CHANGES.md Version 1.2.10 - 19-Jul-2022 - --------------------------- * Fixed a relative path traversal bug that could cause arbitrary files to be loaded with require when used with RubyDataSource. Please refer to https://github.com/tzinfo/tzinfo/security/advisories/GHSA-5cm2-9h8c-rvfx for details. CVE-2022-31163. * Ignore the SECURITY file from Arch Linux's tzdata package. #134. ==== rubygem-tzinfo ==== Version update (2.0.4 -> 2.0.5) updated to version 2.0.5 see installed CHANGES.md [#]# Version 2.0.5 - 19-Jul-2022 * Changed `DateTime` results to always use the proleptic Gregorian calendar. This affects `DateTime` results prior to 1582-10-15 and any arithmetic performed on the results that would produce a secondary result prior to 1582-10-15. * Added support for eager loading all the time zone and country data by calling either `TZInfo::DataSource#eager_load!` or `TZInfo.eager_load!`. Compatible with Ruby On Rails' `eager_load_namespaces`. #129. * Ignore the SECURITY file from Arch Linux's tzdata package. #134. ==== rubygem-validate_url ==== Version update (1.0.13 -> 1.0.15) updated to version 1.0.15 no changelog found ==== shaderc ==== - Remove old python(2)-xml build dependency - build requires python3 ==== transactional-update ==== Version update (4.0.0~rc4 -> 4.0.0) Subpackages: dracut-transactional-update libtukit4 transactional-update-zypp-config tukit tukitd - Version 4.0.0 - Last minute interface change: Changed "List" method of Snapshot D-Bus interface to return a map of properties instead of a comma separated list of strings; this will allow retrieving the snapshot properties even if they contain a comma in their value [boo#1202147] - Remove "Snapshot.hpp" as a public API for now - all public functionality is part of SnapshotManager.hpp - Add header file documentation for SnapshotManager.hpp - Add method to delete snapshot [gh#openSUSE/transactional-update#52] - Allow setting description of snapshot [gh#openSUSE/transactional-update#55] - create_dirs_from_rpmdb: set SELinux file context of missing directories [gh#openSUSE/transactional-update#84], [bsc#1197242] - Fix broken logrotate due to typo in config file [gh#openSUSE/transactional-update#87] - create_dirs_from_rpmdb: Fix handling return code of create_dirs() [gh#openSUSE/transactional-update#86] - Fix broken "shell" prompt after selfupdate - Add documented D-Bus interface definition files - Add tukit_sm_get_current and tukit_sm_get_default to C interface - Fixed typos ==== vlc ==== Subpackages: libvlc5 libvlccore9 vlc-codec-gstreamer vlc-lang vlc-noX vlc-qt vlc-vdpau - Also limit lua interpreter to < 5.4 (boo#1200944). ==== yast2-trans ==== Version update (84.87.20220730.27a80cdf03 -> 84.87.20220807.4697ae62b4) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20220807.4697ae62b4: * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Slovak) * Translated using Weblate (Slovak) * Translated using Weblate (Slovak) * Translated using Weblate (Dutch) * Translated using Weblate (Japanese) * New POT for text domain 'fcoe-client'. * New POT for text domain 'auth-client'. * Translated using Weblate (Dutch) * Translated using Weblate (Japanese) * Translated using Weblate (Catalan) * Translated using Weblate (Japanese) * Translated using Weblate (Catalan) * New POT for text domain 'kdump'. * New POT for text domain 'authserver'.

1 0

Missing global
by Larry Finger 09 Aug '22

09 Aug '22

Hi, Today when I run an 'osc build', I am getting the following error on my fully updated Tumbleweed system: [ 4s] + exec rpmbuild -ba --define '_srcdefattr (-,root,root)' --nosignature --define '_build_create_debug 1' /home/abuild/rpmbuild/SOURCES/virtualbox.spec [ 4s] rpmbuild: symbol lookup error: /lib64/librpmbuild.so.9: undefined symbol: rpmlogGetNrecsByMask Is this a transient problem or a real bug? Larry

2 2

New Tumbleweed snapshot 20220808 released!
by Dominique Leuenberger 09 Aug '22

09 Aug '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ibus-m17n (1.4.9 -> 1.4.10) libgusb python-Pygments python-httpx (0.22.0 -> 0.23.0) python-immutables (0.16 -> 0.18) python-kiwisolver (1.4.1 -> 1.4.4) python-rpm (4.17.0 -> 4.17.1) python-setuptools (58.3.0 -> 63.2.0) python310-packaging python310-pyparsing (3.0.7 -> 3.0.9) rpm (4.17.0 -> 4.17.1) virt-manager (4.0.0 -> 4.1.0) xapian-core (1.4.19 -> 1.4.20) === Details === ==== ibus-m17n ==== Version update (1.4.9 -> 1.4.10) feat: use _service files to automate fetching sources update: 1.4.9 -> 1.4.10 - Add language to longname in --xml output to make engines which have exactly the same icon distinguishable in the engine switcher - Make the icon of the current engine appear at the left of floating panel of ibus. And also show the full engine name as a tooltip on that icon Before only a generic gear wheel âï¸ was shown, the same for all engines, so one could not distinguish which engine was selected in the floating panel. - Show also the engine name in the title of the setup tool window. I.e. instead of just âPreferencesâ show something like âPreferences m17n:t:latn-postâ. - Better icon and a screenshot which can be shown in gnome-software - Improvements in m17n.appdata.xml ==== libgusb ==== - Add no-pkg-resources.patch: * Replaces pkg_resources with python-packaging * pkg_resources is provided by setuptools, but the previously transitive pull in of setuptools has been broken by gtk-doc --> python3-Pygments -/-> python3-setuptools ==== python-Pygments ==== - Add BR of wcag-contrast-ratio to enable more tests. - Removing a test file is too much a hack for me - Don't fall back to setuptools but to importlib-metadata for plugin loading. (If a package for 15.X would be build, but Pytest 7 is required for testing -- gh#pygments/pygments#2080) ==== python-httpx ==== Version update (0.22.0 -> 0.23.0) - Drop transfer-encoding-lower-case.patch The headers are lowercase again with uvicorn 0.18 - Add transfer-encoding-lower-case.patch to fix failing tests due to incorrect capitalization of the 'transfer-encoding' header (gh#encode/httpx!1735). - Update to 0.23.0 * Drop support for Python 3.6. (#2097) * Use utf-8 as the default character set, instead of falling back to charset-normalizer for auto-detection. To enable automatic character set detection, see the documentation. (#2165) * Fix URL.copy_with for some oddly formed URL cases. (#2185) * Digest authentication should use case-insensitive comparison for determining which algorithm is being used. (#2204) * Fix console markup escaping in command line client. (#1866) * When files are used in multipart upload, ensure we always seek to the start of the file. (#2065) * Ensure that iter_bytes never yields zero-length chunks. (#2068) * Preserve Authorization header for redirects that are to the same origin, but are an http-to-https upgrade. (#2074) * When responses have binary output, don't print the output to the console in the command line client. Use output like <16086 bytes of binary data> instead. (#2076) * Fix display of --proxies argument in the command line client help. (#2125) * Close responses when task cancellations occur during stream reading. (#2156) * Fix type error on accessing .request on HTTPError exceptions. (#2158) - Drop CVE-2021-41945-copy_with-data-leak.patch fixed upstream (bsc#1199002) ==== python-immutables ==== Version update (0.16 -> 0.18) - update to 0.18: * Fix iteration when tree is 7 levels deep and has collissions * Test on python 3.10 * consolidate mypy and pytest config into pyproject.toml ==== python-kiwisolver ==== Version update (1.4.1 -> 1.4.4) - update to 1.4.4: - fix timing in shared data release procedure PR #149 - revert use of nullpointer introduced in #142 Its use is not necessary anymore in 3.11.0-beta.4 and used to cause issues on some platforms (see #144 ) PR #145 - Update to 1.4.3 * add support for Python 3.11 PR #142 * do not install tests PR #143 * fix packaging for latest setuptools PR #140 - Release 1.4.2 * fix an issue with setuptools configuration PR #134 ==== python-rpm ==== Version update (4.17.0 -> 4.17.1) - update to rpm-4.17.1 ==== python-setuptools ==== Version update (58.3.0 -> 63.2.0) - update to version 63.2.0: * Changes + #3395: Included a performance optimization: setuptools.build_meta no longer tries to :func:`compile` the setup script code before :func:`exec`-ing it. * Misc + #3435: Corrected issue in macOS framework builds on Python 3.9 not installed by homebrew (pypa/distutils#158). - Remove dependency on packaging -- boo#1178257 - Enable ini2toml[lite] tests - Update to version 63.1.0 * #3430: Merge with pypa/distutils@152c13d including pypa/distutils#155 (improved compatibility for editable installs on homebrew Python 3.9), pypa/distutils#150 (better handling of runtime_library_dirs on cygwin), and pypa/distutils#151 (remove warnings for namespace packages). - v63.0.0 * #3421: Drop setuptools' support for installing an entrypoint extra requirements at load time: - the functionality has been broken since v60.8.0. - the mechanism to do so is deprecated (fetch_build_eggs). - that use case (e.g. a custom command class entrypoint) is covered by making sure the necessary build requirements are declared. Documentation changes * #3397: Fix reference for keywords to point to the Core Metadata Specification instead of PEP 314 (the live standard is kept always up-to-date and consolidates several PEPs together in a single document). - v62.6.0 * #3253: Enabled using file: for requirements in setup.cfg -- by :user:`akx` (this feature is currently considered to be in beta stage). * #3255: Enabled using file: for dependencies and optional-dependencies in pyproject.toml -- by :user:`akx` (this feature is currently considered to be in beta stage). * #3391: Updated attr: to also extract simple constants with type annotations -- by :user:`karlotness` - v62.5.0 * #3347: Changed warnings and documentation notes about experimental aspect of pyproject.toml configuration: now [project] is a fully supported configuration interface, but the [tool.setuptools] table and sub-tables are still considered to be in beta stage. * #3383: In _distutils_hack, suppress/undo the use of local distutils when select tests are imported in CPython. * #3385: Modules used to parse and evaluate configuration from pyproject.toml files are intended for internal use only and that not part of the public API. - v62.4.0 * #3256: Added setuptools.command.build command to match distutils.command.build -- by :user:`isuruf` * #3366: Merge with pypa/distutils@75ed79d including reformat using black, fix for Cygwin support (pypa/distutils#139), and improved support for cross compiling (pypa/distutils#144 and pypa/distutils#145). - v62.3.4 * #3354: Improve clarity in warning about unlisted namespace packages. - v62.3.3 * #3336: Modified test_setup_install_includes_dependencies to work with custom PYTHONPATH â- by :user:`hroncok` - v62.3.2 * #3328: Include a first line summary to some of the existing multi-line warnings. - v62.3.1 * #3320: Fixed typo which causes namespace_packages to raise an error instead of warning. - v62.3.0 * #3262: Formally added deprecation messages for namespace_packages. The methodology that uses pkg_resources and namespace_packages for creating namespaces was already discouraged by the :doc:`setuptools docs </userguide/package_discovery>` and the :doc:`Python Packaging User Guide <PyPUG:guides/packaging-namespace-packages>`, therefore this change just make the deprecation more official. Users can consider migrating to native/implicit namespaces (as introduced in PEP 420). * #3308: Relying on include_package_data to ensure sub-packages are automatically added to the build wheel distribution (as "data") is now considered a deprecated practice. This behaviour was controversial and caused inconsistencies (#3260). Instead, projects are encouraged to properly configure packages or use discovery tools. General information can be found in :doc:`userguide/package_discovery`. * #1806: Allowed recursive globs (**) in package_data. -- by :user:`nullableVoidPtr` * #3206: Fixed behaviour when both install_requires (in setup.py) and dependencies (in pyproject.toml) are specified. The configuration in pyproject.toml will take precedence over setup.py (in accordance with PEP 621). A warning was added to inform users. * #3274: Updated version of vendored pyparsing to 3.0.8 to avoid problems with upcoming deprecation in Python 3.11. * #3292: Added warning about incompatibility with old versions of importlib-metadata. - v62.2.0 * #3299: Optional metadata fields are now truly optional. Includes merge with pypa/distutils@a7cfb56 per pypa/distutils#138. ... changelog too long, skipping 413 lines ... * Drop remove-more-itertools-dependency-cycle.patch ==== python310-packaging ==== - BuildIgnore python3-packaging for primary bootstrap. - Refine build and runtime requirements for primary and non-primary builds - Split primary flavor in multibuild for possible inclusion into Ring0 - Setuptools itself does not depend on packaging anymore, only for pythondistdeps.py, That dependency will move to python-rpm-packaging soon. -- boo#1178257 - Use "setuptools" for building again. * Python 3.12 will drop the distutils fallback * Use the python-base vendored pip in a venv * Drop no-legacyversion-warning.patch - Remove nonsensical python362 flavor check. ==== python310-pyparsing ==== Version update (3.0.7 -> 3.0.9) - Split primary flavor in multibuild for possible inclusion into Ring0 - Remove hardcoded primary_python variable. - Update to version 3.0.9 * Added Unicode set BasicMultilingualPlane (may also be referenced as BMP) representing the Basic Multilingual Plane (Unicode characters up to code point 65535). Can be used to parse most language characters, but omits emojis, wingdings, etc. Raised in discussion with Dave Tapley (issue #392). * To address mypy confusion of pyparsing.Optional and typing.Optional resulting in error: "_SpecialForm" not callable message reported in issue #365, fixed the import in exceptions.py. Nice sleuthing by Iwan Aucamp and Dominic Davis-Foster, thank you! (Removed definitions of OptionalType, DictType, and IterableType and replaced them with typing.Optional, typing.Dict, and typing.Iterable throughout.) * Fixed typo in jinja2 template for railroad diagrams, thanks for the catch Nioub (issue #388). * Removed use of deprecated pkg_resources package in railroad diagramming code (issue #391). * Updated bigquery_view_parser.py example to parse examples at https://cloud.google.com/bigquery/docs/reference/legacy-sql - Release 3.0.8 * API CHANGE: modified pyproject.toml to require Python version 3.6.8 or later for pyparsing 3.x. Earlier minor versions of 3.6 fail in evaluating the version_info class (implemented using typing.NamedTuple). If you are using an earlier version of Python 3.6, you will need to use pyparsing 2.4.7. * Improved pyparsing import time by deferring regex pattern compiles. PR submitted by Anthony Sottile to fix issue #362, thanks! * Updated build to use flit, PR by MichaÅ GÃ³rny, added BUILDING.md doc and removed old Windows build scripts - nice cleanup work! * More type-hinting added for all arithmetic and logical operator methods in ParserElement. PR from Kazantcev Andrey, thank you. * Fixed infix_notation's definitions of lpar and rpar, to accept parse expressions such that they do not get suppressed in the parsed results. PR submitted by Philippe Prados, nice work. * Fixed bug in railroad diagramming with expressions containing Combine elements. Reported by Jeremy White, thanks! * Added show_groups argument to create_diagram to highlight grouped elements with an unlabeled bounding box. * Added unicode_denormalizer.py to the examples as a demonstration of how Python's interpreter will accept Unicode characters in identifiers, but normalizes them back to ASCII so that identifiers print and ð¡ð»áµ¢ðð and ððððáµ are all equivalent. * Removed imports of deprecated sre_constants module for catching exceptions when compiling regular expressions. PR submitted by Serhiy Storchaka, thank you. - Use python-base bundled pip as frontend for flit-core ==== rpm ==== Version update (4.17.0 -> 4.17.1) Subpackages: librpmbuild9 - update to rpm-4.17.1 * new bcond macro for a nicer way to define build conditionals * openPGP parser and IMA security fixes (CVE-2021-3521) * buildroot policy fixes - refreshed patches: * brp.diff - removed patches: * verbosearg.diff * ocaml-cmxs.diff * 0001-fix-minimize_writes.patch - remove obsolete RPM-HOWTO from 1999 (removed RPM-HOWTO.tar.bz2) - move debugedit to separate package (Removed debuginfo-mono.patch, debuglink.diff, debugsubpkg.diff, finddebuginfo-absolute-links.diff, finddebuginfo.diff, singlefilemode.diff, debugedit-5.0.tar.xz) - move python-rpm-packaging to separate package (Removed python-rpm-packaging.diff, python-rpm-packaging.tar.bz2) ==== virt-manager ==== Version update (4.0.0 -> 4.1.0) Subpackages: virt-install virt-manager-common - Update to 4.1.0 * Fix build with setuptools-61 (Peter Alfredsen, Miro HronÄok) * add UI and cli support for qemu-vdagent channel (Jonathon Jongsma) * cli: More --iothreads suboptions (Lin Ma) * launch_security: Use SEV-ES policy=0x07 if host supports it (Charles * Arnold) * cli: Add support for URL query with disks (Martin Kletzander) - Drop patches merged upstream: * c6107419-tests-Drop-usage-of-sgio-unfiltered.patch * 90e13549-Fix-build-with-setuptools-61+.patch * 46dc0616-setup-add-bits-for-setuptools-61.patch * 9ac94ef7-tests-Fix-another-sgio-filtered-case.patch * 34662fec-tests-Fix-with-latest-argcomplete.patch * d51541e1-Fix-UI-rename-with-firmware-efi.patch * b8a77805-domain-cpu-Clear-migratable-when-changing-to-custom-cpu.patch * 0d84bcfb-cli-Add-iothreadids-attributes-thread_pool_min-and-thread_pool_max.patch * 424283ad-launch_security-Use-SEV-ES-policy-0x07-if-host-supports-it.patch - Refresh patches * virtman-add-tooltip-to-firmware.patch - - changed surrounding imports * virtinst-set-cache-mode-unsafe-for-install.patch - - the patch changes the expected output in tests - Refresh test skips - Upstream bug fixes (bsc#1027942) c6107419-tests-Drop-usage-of-sgio-unfiltered.patch 9ac94ef7-tests-Fix-another-sgio-filtered-case.patch b8a77805-domain-cpu-Clear-migratable-when-changing-to-custom-cpu.patch 0d84bcfb-cli-Add-iothreadids-attributes-thread_pool_min-and-thread_pool_max.patch 90e13549-Fix-build-with-setuptools-61+.patch 424283ad-launch_security-Use-SEV-ES-policy-0x07-if-host-supports-it.patch - Modified virtman-add-sev-memory-support.patch - Renamed upstream patches virtman-pr381-setuptools-61.patch to 46dc0616-setup-add-bits-for-setuptools-61.patch virtman-34662fe-argcomplete.patch to 34662fec-tests-Fix-with-latest-argcomplete.patch - Add Source URL - Add upstream patch virtman-pr381-setuptools-61.patch gh#virt-manager/virt-manager#381 - Enable tests * No python package should go untested * Use multibuild so that all runtime requirements are checked * Add virtman-34662fe-argcomplete.patch ==== xapian-core ==== Version update (1.4.19 -> 1.4.20) - update to 1.4.20: * Throw DatabaseNotFoundError when the database directory doesn't exist or when it doesn't contain a Xapian database. Patch from GermÃ¡n MÃ©ndez Bravo in https://github.com/xapian/xapian/pull/258 * Improve exception message for attempting to remove an empty term (the exception type is still InvalidArgumentError). Reported by David Bremner. * Optimise when a value range is a superset of the slot bounds but the value slot frequency is not equal to the document count by replacing the lower bound with an empty string to make the bounds check very cheap. * Avoid creating a PostList tree for an empty shard. This avoids pointless work in an uncommon case, but also by handling this up front the code in PostList subclasses for query operators can assume the shard isn't empty which simplifies the code in several places. * Remove lingering handling for database backends without slot bounds since all backends have been required to support these since 1.4.11. * Fix collection frequency estimates for positional operators. This affects the weighting of positional operators in subqueries of OP_SYNONYM with weighting schemes which use the collection frequency. * xapian-check: Test decompress data in the spelling and synonym tables. We don't have structure checking for these tables, but we can at least fetch each entry and check for decompression problems. * Improve error if a block is detected as overwritten in WritableDatabase. Drop "are there multiple writers?" as it's rarely a useful question to ask since we started using fcntl() locking as it's now very hard to get multiple concurrent writers on a database. Instead suggest running xapian-check, which is probably the best next step for a user who hits this problem.

1 0

New Tumbleweed snapshot 20220805 released!
by Dominique Leuenberger 09 Aug '22

09 Aug '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: NetworkManager NetworkManager-branding-openSUSE SVT-AV1 (1.0.0 -> 1.2.0) accountsservice aws-cli (1.25.37 -> 1.25.45) bind bluedevil5 (5.25.3 -> 5.25.4) breeze (5.25.3 -> 5.25.4) breeze-gtk (5.25.3 -> 5.25.4) coreutils discover (5.25.3 -> 5.25.4) drkonqi5 (5.25.3 -> 5.25.4) flatpak gdm gedit (42.1 -> 42.2) gvfs kactivitymanagerd (5.25.3 -> 5.25.4) kcm_sddm (5.25.3 -> 5.25.4) kde-cli-tools5 (5.25.3 -> 5.25.4) kde-gtk-config5 (5.25.3 -> 5.25.4) kgamma5 (5.25.3 -> 5.25.4) khotkeys5 (5.25.3 -> 5.25.4) kinfocenter5 (5.25.3 -> 5.25.4) kmenuedit5 (5.25.3 -> 5.25.4) kscreen5 (5.25.3 -> 5.25.4) kscreenlocker (5.25.3 -> 5.25.4) ksshaskpass5 (5.25.3 -> 5.25.4) ksystemstats5 (5.25.3 -> 5.25.4) kwayland-integration (5.25.3 -> 5.25.4) kwin5 (5.25.3 -> 5.25.4) kwrited5 (5.25.3 -> 5.25.4) layer-shell-qt (5.25.3 -> 5.25.4) ldb (2.5.1 -> 2.5.2) libbpf (0.8.0 -> 0.8.1) libkdecoration2 (5.25.3 -> 5.25.4) libkscreen2 (5.25.3 -> 5.25.4) libksysguard5 (5.25.3 -> 5.25.4) libnotify (0.7.12 -> 0.8.1) libostree (2021.6 -> 2022.5) libupnp (1.14.12 -> 1.14.13) milou5 (5.25.3 -> 5.25.4) nano (6.3 -> 6.4) oxygen5-sounds (5.25.3 -> 5.25.4) pcre2 plasma-browser-integration (5.25.3 -> 5.25.4) plasma-nm5 (5.25.3 -> 5.25.4) plasma5-addons (5.25.3 -> 5.25.4) plasma5-desktop (5.25.3 -> 5.25.4) plasma5-disks (5.25.3 -> 5.25.4) plasma5-integration (5.25.3 -> 5.25.4) plasma5-openSUSE plasma5-pa (5.25.3 -> 5.25.4) plasma5-systemmonitor (5.25.3 -> 5.25.4) plasma5-thunderbolt (5.25.3 -> 5.25.4) plasma5-workspace (5.25.3 -> 5.25.4) polkit-default-privs (1550+20220608.097448e -> 1550+20220727.3ce2e2f) polkit-kde-agent-5 (5.25.3 -> 5.25.4) powerdevil5 (5.25.3 -> 5.25.4) python-M2Crypto python-argparse-manpage (1.5 -> 3) python-boto3 (1.24.37 -> 1.24.45) python-botocore (1.27.37 -> 1.27.45) python-ipython python-sympy rubygem-pdf-reader (2.9.2 -> 2.10.0) rubygem-tmuxinator (3.0.2 -> 3.0.5) rubygem-xdg (6.3.3 -> 6.5.0) samba (4.16.2+git.288.4d64e4651f0 -> 4.16.4+git.297.1497eb221ed) systemsettings5 (5.25.3 -> 5.25.4) texinfo urlscan xdg-desktop-portal-kde (5.25.3 -> 5.25.4) === Details === ==== NetworkManager ==== Subpackages: NetworkManager-bluetooth NetworkManager-lang NetworkManager-pppoe NetworkManager-tui NetworkManager-wwan libnm0 typelib-1_0-NM-1_0 - Create /etc/NetworkManager/conf.d by default, allowing easy override for NetworkManager.conf file with drop-in. - Move default config file to /usr/lib/NetworkManager/NetworkManager.conf, as part of main package. - Branding upstream package is now just a config drop-in to disable conncheck. - Ensure /usr/lib/NetworkManager/conf.d is part of the package. ==== NetworkManager-branding-openSUSE ==== - Move conncheck config file out of /etc. No longer import main config file. ==== SVT-AV1 ==== Version update (1.0.0 -> 1.2.0) - Update to release 1.2.0 * TPL tradeoff optimizations for 4L pred structure * Quality-vs-cycles tradeoff improvements across all presets * Add ability to force key_frame positions through ffmpeg for CRF mode * Minimize the quality impact of fast-decode while maintaining the decoder speedup * AVX2 optimizations for low delay mode * Improve CRF preset tradeoffs for both the default and fast-decode modes * Improve the SSIM-based tradeoffs of the presets without impacting those of PSNR / VMAF * Improve CBR mode by enhancing the bit-distribution within the GOP * Added support for reference frame scaling * Added support for quantization matrices * AVX2 optimizations for low-delay mode * TPL-based VBR mode improvements * Improved Chroma RDOQ * Improve TPL QP Scaling * Add length info to ivf header * Fix support for metadata pass-through * Add ability to specify Chroma and Luma qindex offsets independently on top of CRF qp assignments ==== accountsservice ==== Subpackages: accountsservice-lang libaccountsservice0 typelib-1_0-AccountsService-1_0 - Remove BuildIgnore for rpmlint-mini. This is a violation of the security policies applying to SUSE products as it circumvents the SUSE security team's control over what enters Factory and what not. - Allow to build without vala support. - Refresh harden_accounts-daemon.service.patch to not duplicate existing entries. ==== aws-cli ==== Version update (1.25.37 -> 1.25.45) - Update to version 1.25.45 + For detailed changes see https://github.com/aws/aws-cli/blob/1.25.45/CHANGELOG.rst - Update Requires in spec file from setup.py ==== bind ==== Subpackages: bind-doc bind-utils - When enabling query_logging by un-commenting an example in bind.conf, named attempts to create a file in /var/log which fails due to missing credentials. This also applies to the "dump-file" and the "statistics-file". This is solved by having systemd-tmpfiles create a subdirectory "/var/log/named" owned by named:named and changing the file paths accordingly: /var/log/named_querylog -> /var/log/named/querylog /var/log/named_dump.db -> /var/log/named/dump.db /var/log/named.stats -> /var/log/named/stats Also, in "named.service", the ReadWritePath was changed to include "/var/log/named" rather than just "var/log". [bsc#1200685, bind.conf, vendor-files/config/named.conf, vendor-files/system/named.service] ==== bluedevil5 ==== Version update (5.25.3 -> 5.25.4) Subpackages: bluedevil5-lang - Update to 5.25.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.4 - No code changes since 5.25.3 ==== breeze ==== Version update (5.25.3 -> 5.25.4) Subpackages: breeze5-cursors breeze5-decoration breeze5-style breeze5-style-lang libbreezecommon5-5 - Update to 5.25.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.4 - Changes since 5.25.3: * kstyle: Use menuTitle font metrics for size calculation (kde#443805) ==== breeze-gtk ==== Version update (5.25.3 -> 5.25.4) Subpackages: gtk2-metatheme-breeze gtk3-metatheme-breeze metatheme-breeze-common - Update to 5.25.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.4 - No code changes since 5.25.3 ==== coreutils ==== Subpackages: coreutils-lang - add missing hostname buildrequires - refresh coreutils-i18n.patch to prevent unexpand from failing on control characters (brc#2112870) (bsc#1202029) - extend psuffix handling to be quilt(1) compatible ==== discover ==== Version update (5.25.3 -> 5.25.4) Subpackages: discover-backend-flatpak discover-backend-fwupd discover-backend-packagekit discover-lang - Update to 5.25.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.4 - Changes since 5.25.3: * Fix crash after update (kde#457278) * Do not change the sorting among resources in the default backend (kde#451667) * Sources: Give a minimum size to section headers (kde#434349) * fwupd: Make sure we don't crash trying to print an error (kde#455132) * kns: Make KNSReview aware of its possible lack of AtticaProvider (kde#457145) * AppListPage: Make sure the PlaceholderMessage doesn't get in the way (kde#457029) * appstream: Do not treat spdx operators as licenses * appstream: Treat unknown licences * kns: join into the AppStreamUtils::license party * pk: Try harder to convert non-appstream packages licences (kde#454480) * pk: Allow some error codes from offline updates (kde#443090) * snap: Do not install a categories file (kde#456889) * Do not warn anymore about missing categories * odrs: Make sure we don't fail when the application page is opened early (kde#426270) * Fix submitting usefulness ==== drkonqi5 ==== Version update (5.25.3 -> 5.25.4) Subpackages: drkonqi5-lang - Update to 5.25.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.4 - No code changes since 5.25.3 ==== flatpak ==== Subpackages: flatpak-zsh-completion libflatpak0 system-user-flatpak - variant-schema-compiler requires the Python module pyparsing ==== gdm ==== Subpackages: gdm-lang gdm-schema gdmflexiserver libgdm1 typelib-1_0-Gdm-1_0 - Fix specfile: Adapt macros %_pam_moduledir (boo#1191033). ==== gedit ==== Version update (42.1 -> 42.2) Subpackages: gedit-lang python3-gedit - Update to version 42.2: + Fix bug: text cut off at the bottom in certain situations. + Updated translations. ==== gvfs ==== Subpackages: gvfs-backend-afc gvfs-backend-samba gvfs-backends gvfs-fuse gvfs-lang - recommend pkexec in gvfs-backends. (not requires to allow customers to remove pkexec) (bsc#1202070) ==== kactivitymanagerd ==== Version update (5.25.3 -> 5.25.4) Subpackages: kactivitymanagerd-lang - Update to 5.25.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.4 - No code changes since 5.25.3 ==== kcm_sddm ==== Version update (5.25.3 -> 5.25.4) Subpackages: kcm_sddm-lang - Update to 5.25.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.4 - No code changes since 5.25.3 ==== kde-cli-tools5 ==== Version update (5.25.3 -> 5.25.4) Subpackages: kde-cli-tools5-lang - Update to 5.25.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.4 - No code changes since 5.25.3 ==== kde-gtk-config5 ==== Version update (5.25.3 -> 5.25.4) Subpackages: kde-gtk-config5-gtk3 - Update to 5.25.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.4 - No code changes since 5.25.3 ==== kgamma5 ==== Version update (5.25.3 -> 5.25.4) Subpackages: kgamma5-lang - Update to 5.25.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.4 - No code changes since 5.25.3 ==== khotkeys5 ==== Version update (5.25.3 -> 5.25.4) Subpackages: khotkeys5-lang - Update to 5.25.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.4 - No code changes since 5.25.3 ==== kinfocenter5 ==== Version update (5.25.3 -> 5.25.4) Subpackages: kinfocenter5-lang - Update to 5.25.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.4 - Changes since 5.25.3: * Add missing include on <array> ==== kmenuedit5 ==== Version update (5.25.3 -> 5.25.4) Subpackages: kmenuedit5-lang - Update to 5.25.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.4 - No code changes since 5.25.3 ==== kscreen5 ==== Version update (5.25.3 -> 5.25.4) Subpackages: kscreen5-lang kscreen5-plasmoid - Update to 5.25.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.4 - No code changes since 5.25.3 ==== kscreenlocker ==== Version update (5.25.3 -> 5.25.4) Subpackages: kscreenlocker-lang libKScreenLocker5 - Update to 5.25.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.4 - No code changes since 5.25.3 ==== ksshaskpass5 ==== Version update (5.25.3 -> 5.25.4) Subpackages: ksshaskpass5-lang - Update to 5.25.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.4 - No code changes since 5.25.3 ==== ksystemstats5 ==== Version update (5.25.3 -> 5.25.4) Subpackages: ksystemstats5-lang - Update to 5.25.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.4 - No code changes since 5.25.3 ==== kwayland-integration ==== Version update (5.25.3 -> 5.25.4) - Update to 5.25.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.4 - No code changes since 5.25.3 ==== kwin5 ==== Version update (5.25.3 -> 5.25.4) Subpackages: kwin5-lang - Update to 5.25.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.4 - Changes since 5.25.3: * Update QtQuick views at the start of the frame * xkb: Use Ctrl+Mrys+Zenkaku_Hankaku to toggle the touchpad * input: don't forward gestures used by KWin to applications (kde#455952) * effects/private: Raise currently dragged window higher than anything (kde#456936) * Fix activity swtiching through UserActions menu (kde#456873) * backends/drm: fix build * backends/drm: fix memory leak * backends/drm: explicitly initialize all fields of drmModeModeInfo * effects/colorpicker: Fix picking colors (kde#454974) * wayland/tablet_v2: Keep also the pad surface in a QPointer (kde#456817) * Support keyboard navigation between windows across desktops (kde#456068) * Make DesktopView a FocusScope * Accept keys in windowheap conditionally * activation: Be liberal about the StartupWMClass * activation: Fix activation notification of Xwayland clients (kde#455265) * activation: Simplify icon loading logic * x11: Fix shading with non-zero border (kde#450582) * backends/drm: don't crash if importing a texture fails * Swapping desktops: only swap windows on current activity. (kde#386769) * Don't use Plasma-themed icons in Present Windows (kde#455368) * TabBox: Fix loading a different switcher after one has failed (kde#445455) * backends/drm: handle broken legacy drivers better (kde#453860) * wayland/drmlease: split up DrmLeaseV1Interface::deny * wayland/drmlease: correct DrmLeaseDeviceV1Interface::setDrmMaster * drmlease: send device done event correctly ==== kwrited5 ==== Version update (5.25.3 -> 5.25.4) - Update to 5.25.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.4 - No code changes since 5.25.3 ==== layer-shell-qt ==== Version update (5.25.3 -> 5.25.4) - Update to 5.25.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.4 - No code changes since 5.25.3 ==== ldb ==== Version update (2.5.1 -> 2.5.2) Subpackages: libldb2 libldb2-32bit python3-ldb - Update to version 2.5.2; + CVE-2022-32746: Use-after-free occurring in database audit logging module; (bso#15009); (bsc#1201490); ==== libbpf ==== Version update (0.8.0 -> 0.8.1) - Update to release 0.8.1: * make shared xsk creation network namespace aware ==== libkdecoration2 ==== Version update (5.25.3 -> 5.25.4) Subpackages: libkdecorations2-5 libkdecorations2-5-lang libkdecorations2private9 - Update to 5.25.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.4 - No code changes since 5.25.3 ==== libkscreen2 ==== Version update (5.25.3 -> 5.25.4) Subpackages: libKF5Screen7 libkscreen2-plugin - Update to 5.25.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.4 - No code changes since 5.25.3 ==== libksysguard5 ==== Version update (5.25.3 -> 5.25.4) Subpackages: ksysguardsystemstats-data libKSysGuardSystemStats1 libksysguard5-imports libksysguard5-lang libksysguard5-plugins - Update to 5.25.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.4 - No code changes since 5.25.3 ==== libnotify ==== Version update (0.7.12 -> 0.8.1) Subpackages: libnotify-tools libnotify4 typelib-1_0-Notify-0_7 - Update to version 0.8.1: + Keep version of bindings at 0.7. - Changes from version 0.8.0: + Use Desktop Portal Notification when running confined (snap and flatpak). + Now the library acts like a wrapper in such scenario, with some limited. + capabilities, but this will enforce security and user control over the allowed notifications. + notify-send: Handles SIGINT gracefully, closing waiting notification. + Use NotifyClosedReason enum as closed reason return value. + Bump dependency on GLib 2.38. + Various introspection docs improvements and fixes. - Use ldconfig_scriptlets macro for post(un) handling. ==== libostree ==== Version update (2021.6 -> 2022.5) Subpackages: libostree-1-1 - update to 2022.5: + Greatly improved performance for ostree prune on large repositories + Support for in-place kargs changes + includes a fix for ed25519: Invalid out of bound reads Did not affect previous openSUSE packages [boo#1201800] - includes changes from 2022.4: + A new repository option bls-append-except-default intended to help with enabling GRUB password locking + Further fixes for s390x SE + Several API additions and fixes to the Rust bindings - includes changes from 2022.3: + GLib requirement to 2.66 + documentation for using IMA with ostree + A few static analyzer fixes + refcounting fix in OstreeRepoAutoTransaction + close longstanding conflict between ostree and per-machine SELinux policy customizations + ostree learned how to use bubblewrap to create a container targeting the pending deployment to re-build the policy if necessary - includes changes from 2022.2: + improve reliability of pulls with static deltas + new ostree prune --commit-only - includes changes from 2022.1: + add transparent support for external sub-commands on the ostree binary. Custom binaries present in PATH in the form of ostree-<subcmd> will be now used as a fallback for sub- commands that are not natively implemented. + address some static analysis warnings + The git submodule for bsdiff has been updated to latest upstream revision, picking up additional bound-checks and fixing CVE-2014-9862 boo#1201770 - enable ed25519 support with libsodium, introduced with 2020.4 - switch to upstream tarball ==== libupnp ==== Version update (1.14.12 -> 1.14.13) Subpackages: libixml11 libupnp17 - Update to release 1.14.13 * http: RecvMessage: Fix potential allocation failure ==== milou5 ==== Version update (5.25.3 -> 5.25.4) Subpackages: milou5-lang - Update to 5.25.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.4 - No code changes since 5.25.3 ==== nano ==== Version update (6.3 -> 6.4) Subpackages: nano-lang - update to 6.4: * The file browser does not crash when moving up to the root folder. * Softwrapping very long lines is done more efficiently. * Invoking the formatter does not blink the screen. ==== oxygen5-sounds ==== Version update (5.25.3 -> 5.25.4) - Update to 5.25.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.4 - No code changes since 5.25.3 ==== pcre2 ==== Subpackages: libpcre2-16-0 libpcre2-32-0 libpcre2-8-0 libpcre2-8-0-32bit - Fix the profiling call to be non-parallel again (fighting spec cleaner) ==== plasma-browser-integration ==== Version update (5.25.3 -> 5.25.4) Subpackages: plasma-browser-integration-lang - Update to 5.25.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.4 - No code changes since 5.25.3 ==== plasma-nm5 ==== Version update (5.25.3 -> 5.25.4) Subpackages: plasma-nm5-lang plasma-nm5-openconnect plasma-nm5-openvpn plasma-nm5-pptp plasma-nm5-vpnc - Update to 5.25.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.4 - No code changes since 5.25.3 ==== plasma5-addons ==== Version update (5.25.3 -> 5.25.4) Subpackages: plasma5-addons-lang - Update to 5.25.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.4 - Changes since 5.25.3: * applets/calculator: read the answer after pressing `=` * applets/calculator: move focus to the corresponding button when pressing keys * applets/colorpicker: press space to open color menu * applets/colorpicker: add name to color rectangle * applets/fuzzy-clock: add a11y properties * [applets/comic] Fix configurationRequired and busy state when deactivating the last provider * [applets/comic] Update providers list after (un)installing provider * Add missing include to array * [applets/comic] Disable most context menu actions when comic is not ready (kde#406991) * Remove clipPath portion of SVG (kde#399568) ==== plasma5-desktop ==== Version update (5.25.3 -> 5.25.4) Subpackages: plasma5-desktop-emojier plasma5-desktop-lang - Update to 5.25.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.4 - Changes since 5.25.3: * Fix mouse settings not being loaded when a mouse is connected (kde#435113) * applets/kimpanel: add accessible properties * applets/kimpanel: add keyboard navigation support * applets/kickoff: add text to allow screen reader to read button name * applets/taskmanager: use `model.display` in accessible properties * [applets/pager] Fix button group management on configuration page (kde#456525) * applets/taskmanager: press `Esc` to close group dialog * [kcms/landingpage] Strip whitespace at the beginning of a telemetry description ==== plasma5-disks ==== Version update (5.25.3 -> 5.25.4) Subpackages: plasma5-disks-lang - Update to 5.25.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.4 - No code changes since 5.25.3 ==== plasma5-integration ==== Version update (5.25.3 -> 5.25.4) Subpackages: plasma5-integration-plugin plasma5-integration-plugin-lang - Update to 5.25.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.4 - No code changes since 5.25.3 ==== plasma5-openSUSE ==== Subpackages: plasma5-defaults-openSUSE plasma5-theme-openSUSE plasma5-workspace-branding-openSUSE sddm-theme-openSUSE - Update to 5.25.4 ==== plasma5-pa ==== Version update (5.25.3 -> 5.25.4) Subpackages: plasma5-pa-lang - Update to 5.25.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.4 - Changes since 5.25.3: * VolumeMonitor: Don't set stream on source output monitor ==== plasma5-systemmonitor ==== Version update (5.25.3 -> 5.25.4) Subpackages: plasma5-systemmonitor-lang - Update to 5.25.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.4 - No code changes since 5.25.3 ==== plasma5-thunderbolt ==== Version update (5.25.3 -> 5.25.4) Subpackages: plasma5-thunderbolt-lang - Update to 5.25.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.4 - No code changes since 5.25.3 ==== plasma5-workspace ==== Version update (5.25.3 -> 5.25.4) Subpackages: gmenudbusmenuproxy plasma5-session plasma5-session-wayland plasma5-workspace-lang plasma5-workspace-libs xembedsniproxy - Update to 5.25.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.4 - Changes since 5.25.3: * wallpaper/slideshow: shouldn't display "current" item in image list (kde#457327) * Disable toplevel fixed positions on Wayland * runners/helprunner: Fix launching of plasmasearch kcm with args * [kicker/kickoff] Fix urls for search results (kde#456984) * applets/icon: fix invalid `Accessible.description` * applets/devicenotifier: improve accessible properties * applets/batterymonitor: add accessible properties to slider * [FIX] Unable to remove manually added wallpaper (kde#457019) * kcms/colors: make sure the preview uses the right colours (kde#456648) * Don't break configuration when saving layouts * [Notifications] When there is no thumbnail available, use file icon as drag pixmap * [Notifications] Ignore stopped job in job aggregator * [applet/{analog,digital}-clock] Use `onPressed: wasExpanded = ...` idiom * Fix non-functional lockscreen due to bad cherry-pick (kde#456639) - Drop patches, now upstream: * 0001-Fix-non-functional-lockscreen-due-to-bad-cherry-pick.patch ==== polkit-default-privs ==== Version update (1550+20220608.097448e -> 1550+20220727.3ce2e2f) - Update to version 1550+20220727.3ce2e2f: * iio-sensor-proxy (bsc#1201558): add claim-sensor action ==== polkit-kde-agent-5 ==== Version update (5.25.3 -> 5.25.4) Subpackages: polkit-kde-agent-5-lang - Update to 5.25.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.4 - No code changes since 5.25.3 ==== powerdevil5 ==== Version update (5.25.3 -> 5.25.4) Subpackages: powerdevil5-lang - Update to 5.25.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.4 - Changes since 5.25.3: * Update battery notifications if they remain open * When battery drains, show a notification even when AC is plugged in ==== python-M2Crypto ==== - update CVE-2020-25657-Bleichenbacher-attack.patch to actually contain the fix rather than just being empty (CVE-2020-25657, bsc#1178829) ==== python-argparse-manpage ==== Version update (1.5 -> 3) - Update to 3 * New man page format: single-commands-section * Add CLI and conf options for setting the output format * Add CLI and conf options to explicitly specify %prog value * Skip showing commands with help == SUPPRESS * Avoid rendering docs for command aliases * Print program name in upper case in header and footer * The --author CLI option has changed, and takes arbitrary string (typically 'Author Name <the(a)example.com>'), and newly can be specified multiple times. Therefore, it now replaces the '--author-email' option. The --author-email option is kept, but is just an alias to the --author option. * All CLI options can be specified also in setup.cfg * Don't render AUTHORS and DISTRIBUTION if they would contain undefined values * Remove '... was written by' from AUTHORS * Fixed the testsuite against the setuptools v60+ * Output manual pages should be built reproducibly, no matter the current size of the terminal. * Methods build_manpages, get_build_py_cmd, get_install_cmd are now provided in top-level module. * More portable opening and parsing given by python file name. * Split out options by generic argument groups, not only predefined "positional arguments", "options", and Subparsers. * Drop python3-six requirement. * Properly highligh all option argument METAVARs. - spec changes: * BuildArch set to noarch * Add build dependency on pip module ==== python-boto3 ==== Version update (1.24.37 -> 1.24.45) - Update to version 1.24.45 * api-change:``cognito-idp``: [``botocore``] Add a new exception type, ForbiddenException, that is returned when request is not allowed * api-change:``wafv2``: [``botocore``] You can now associate an AWS WAF web ACL with an Amazon Cognito user pool. - from version 1.24.44 * api-change:``license-manager-user-subscriptions``: [``botocore``] This release supports user based subscription for Microsoft Visual Studio Professional and Enterprise on EC2. * api-change:``personalize``: [``botocore``] This release adds support for incremental bulk ingestion for the Personalize CreateDatasetImportJob API. - from version 1.24.43 * api-change:``config``: [``botocore``] Documentation update for PutConfigRule and PutOrganizationConfigRule * api-change:``workspaces``: [``botocore``] This release introduces ModifySamlProperties, a new API that allows control of SAML properties associated with a WorkSpaces directory. The DescribeWorkspaceDirectories API will now additionally return SAML properties in its responses. - from version 1.24.42 * bugfix:TraceId: [``botocore``] Rollback bugfix for obeying _X_AMZN_TRACE_ID env var - from version 1.24.41 * bugfix:Config: [``botocore``] Obey _X_AMZN_TRACE_ID environment variable instead of _X_AMZ_TRACE_ID * api-change:``ec2``: [``botocore``] Documentation updates for Amazon EC2. * api-change:``fsx``: [``botocore``] Documentation updates for Amazon FSx * api-change:``shield``: [``botocore``] AWS Shield Advanced now supports filtering for ListProtections and ListProtectionGroups. - from version 1.24.40 * api-change:``ec2``: [``botocore``] Documentation updates for VM Import/Export. * api-change:``es``: [``botocore``] This release adds support for gp3 EBS (Elastic Block Store) storage. * api-change:``lookoutvision``: [``botocore``] This release introduces support for image segmentation models and updates CPU accelerator options for models hosted on edge devices. * api-change:``opensearch``: [``botocore``] This release adds support for gp3 EBS (Elastic Block Store) storage. - from version 1.24.39 * api-change:``auditmanager``: [``botocore``] This release adds an exceeded quota exception to several APIs. We added a ServiceQuotaExceededException for the following operations: CreateAssessment, CreateControl, CreateAssessmentFramework, and UpdateAssessmentStatus. * api-change:``chime``: [``botocore``] Chime VoiceConnector will now support ValidateE911Address which will allow customers to prevalidate their addresses included in their SIP invites for emergency calling * api-change:``config``: [``botocore``] This release adds ListConformancePackComplianceScores API to support the new compliance score feature, which provides a percentage of the number of compliant rule-resource combinations in a conformance pack compared to the number of total possible rule-resource combinations in the conformance pack. * api-change:``globalaccelerator``: [``botocore``] Global Accelerator now supports dual-stack accelerators, enabling support for IPv4 and IPv6 traffic. * api-change:``marketplace-catalog``: [``botocore``] The SDK for the StartChangeSet API will now automatically set and use an idempotency token in the ClientRequestToken request parameter if the customer does not provide it. * api-change:``polly``: [``botocore``] Amazon Polly adds new English and Hindi voice - Kajal. Kajal is available as Neural voice only. * api-change:``ssm``: [``botocore``] Adding doc updates for OpsCenter support in Service Setting actions. * api-change:``workspaces``: [``botocore``] Added CreateWorkspaceImage API to create a new WorkSpace image from an existing WorkSpace. - from version 1.24.38 * api-change:``appsync``: [``botocore``] Adds support for a new API to evaluate mapping templates with mock data, allowing you to remotely unit test your AppSync resolvers and functions. * api-change:``detective``: [``botocore``] Added the ability to get data source package information for the behavior graph. Graph administrators can now start (or stop) optional datasources on the behavior graph. * api-change:``guardduty``: [``botocore``] Amazon GuardDuty introduces a new Malware Protection feature that triggers malware scan on selected EC2 instance resources, after the service detects a potentially malicious activity. * api-change:``lookoutvision``: [``botocore``] This release introduces support for the automatic scaling of inference units used by Amazon Lookout for Vision models. * api-change:``macie2``: [``botocore``] This release adds support for retrieving (revealing) sample occurrences of sensitive data that Amazon Macie detects and reports in findings. * api-change:``rds``: [``botocore``] Adds support for using RDS Proxies with RDS for MariaDB databases. * api-change:``rekognition``: [``botocore``] This release introduces support for the automatic scaling of inference units used by Amazon Rekognition Custom Labels models. * api-change:``securityhub``: [``botocore``] Documentation updates for AWS Security Hub * api-change:``transfer``: [``botocore``] AWS Transfer Family now supports Applicability Statement 2 (AS2), a network protocol used for the secure and reliable transfer of critical Business-to-Business (B2B) data over the public internet using HTTP/HTTPS as the transport mechanism. - Update BuildRequires and Requires from setup.py ==== python-botocore ==== Version update (1.27.37 -> 1.27.45) - Update to 1.27.45 * api-change:``cognito-idp``: Add a new exception type, ForbiddenException, that is returned when request is not allowed * api-change:``wafv2``: You can now associate an AWS WAF web ACL with an Amazon Cognito user pool. - from version 1.27.44 * api-change:``license-manager-user-subscriptions``: This release supports user based subscription for Microsoft Visual Studio Professional and Enterprise on EC2. * api-change:``personalize``: This release adds support for incremental bulk ingestion for the Personalize CreateDatasetImportJob API. - from version 1.27.43 * api-change:``config``: Documentation update for PutConfigRule and PutOrganizationConfigRule * api-change:``workspaces``: This release introduces ModifySamlProperties, a new API that allows control of SAML properties associated with a WorkSpaces directory. The DescribeWorkspaceDirectories API will now additionally return SAML properties in its responses. - from version 1.27.42 * bugfix:TraceId: Rollback bugfix for obeying _X_AMZN_TRACE_ID env var - from version 1.27.41 * bugfix:Config: Obey _X_AMZN_TRACE_ID environment variable instead of _X_AMZ_TRACE_ID * api-change:``ec2``: Documentation updates for Amazon EC2. * api-change:``fsx``: Documentation updates for Amazon FSx * api-change:``shield``: AWS Shield Advanced now supports filtering for ListProtections and ListProtectionGroups. - from version 1.27.40 * api-change:``ec2``: Documentation updates for VM Import/Export. * api-change:``es``: This release adds support for gp3 EBS (Elastic Block Store) storage. * api-change:``lookoutvision``: This release introduces support for image segmentation models and updates CPU accelerator options for models hosted on edge devices. * api-change:``opensearch``: This release adds support for gp3 EBS (Elastic Block Store) storage. - from version 1.27.39 * api-change:``auditmanager``: This release adds an exceeded quota exception to several APIs. We added a ServiceQuotaExceededException for the following operations: CreateAssessment, CreateControl, CreateAssessmentFramework, and UpdateAssessmentStatus. * api-change:``chime``: Chime VoiceConnector will now support ValidateE911Address which will allow customers to prevalidate their addresses included in their SIP invites for emergency calling * api-change:``config``: This release adds ListConformancePackComplianceScores API to support the new compliance score feature, which provides a percentage of the number of compliant rule-resource combinations in a conformance pack compared to the number of total possible rule-resource combinations in the conformance pack. * api-change:``globalaccelerator``: Global Accelerator now supports dual-stack accelerators, enabling support for IPv4 and IPv6 traffic. * api-change:``marketplace-catalog``: The SDK for the StartChangeSet API will now automatically set and use an idempotency token in the ClientRequestToken request parameter if the customer does not provide it. * api-change:``polly``: Amazon Polly adds new English and Hindi voice - Kajal. Kajal is available as Neural voice only. * api-change:``ssm``: Adding doc updates for OpsCenter support in Service Setting actions. * api-change:``workspaces``: Added CreateWorkspaceImage API to create a new WorkSpace image from an existing WorkSpace. - from version 1.27.38 * api-change:``appsync``: Adds support for a new API to evaluate mapping templates with mock data, allowing you to remotely unit test your AppSync resolvers and functions. * api-change:``detective``: Added the ability to get data source package information for the behavior graph. Graph administrators can now start (or stop) optional datasources on the behavior graph. * api-change:``guardduty``: Amazon GuardDuty introduces a new Malware Protection feature that triggers malware scan on selected EC2 instance resources, after the service detects a potentially malicious activity. * api-change:``lookoutvision``: This release introduces support for the automatic scaling of inference units used by Amazon Lookout for Vision models. * api-change:``macie2``: This release adds support for retrieving (revealing) sample occurrences of sensitive data that Amazon Macie detects and reports in findings. * api-change:``rds``: Adds support for using RDS Proxies with RDS for MariaDB databases. * api-change:``rekognition``: This release introduces support for the automatic scaling of inference units used by Amazon Rekognition Custom Labels models. * api-change:``securityhub``: Documentation updates for AWS Security Hub * api-change:``transfer``: AWS Transfer Family now supports Applicability Statement 2 (AS2), a network protocol used for the secure and reliable transfer of critical Business-to-Business (B2B) data over the public internet using HTTP/HTTPS as the transport mechanism. ==== python-ipython ==== - Add ipython-pr13714-xxlimited.patch gh#ipython/ipython#13714 - Remove nbformat from the :test flavor. Run locally `--with localtests` for not skipping the tests. ==== python-sympy ==== - Switch off tests (they run 7h53m47s). ==== rubygem-pdf-reader ==== Version update (2.9.2 -> 2.10.0) updated to version 2.10.0 see installed CHANGELOG v2.10.0 (12th May 2022) - Various bug fixes - Expanded sorbet type annotations ==== rubygem-tmuxinator ==== Version update (3.0.2 -> 3.0.5) updated to version 3.0.5 no changelog found ==== rubygem-xdg ==== Version update (6.3.3 -> 6.5.0) updated to version 6.5.0 no changelog found ==== samba ==== Version update (4.16.2+git.288.4d64e4651f0 -> 4.16.4+git.297.1497eb221ed) Subpackages: libsamba-policy0-python3 samba-ad-dc-libs samba-client samba-client-32bit samba-client-libs samba-client-libs-32bit samba-gpupdate samba-ldb-ldap samba-libs samba-libs-python3 samba-python3 samba-winbind samba-winbind-libs samba-winbind-libs-32bit - Update to 4.16.4 * CVE-2022-2031: Samba AD users can bypass certain restrictions associated with changing passwords; (bsc#1201495); (bso#15047); * CVE-2022-32744: Samba AD users can forge password change requests for any user; (bsc#1201493); (bso#15074); * CVE-2022-32745: Samba AD users can crash the server process with an LDAP add or modify request; (bsc#1201492); (bso#15008); * CVE-2022-32746: Samba AD users can induce a use-after-free in the server process with an LDAP add or modify request; (bsc#1201490); (bso#15009); * CVE-2022-32742: Server memory information leak via SMB1; (bsc#1201496); (bso#15085); - Update to 4.16.3 * Using vfs_streams_xattr and deleting a file causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * Samba with new lorikeet-heimdal fails to build on gcc 12.1 in developer mode; (bso#15095); * Crash in streams_xattr because fsp->base_fsp->fsp_name is NULL; (bso#15105); * Crash in rpcd_classic - NULL pointer deference in mangle_is_mangled(); (bso#15118); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * Fix check for chown when processing NFSv4 ACL; (bso#15120); * The pcap background queue process should not be stopped; (bso#15082); * testparm: Fix typo in idmap rangesize check; (bso#15097); * net ads info returns LDAP server and LDAP server name as null; (bso#15106); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * CTDB child process logging does not work as expected; (bso#15090); ==== systemsettings5 ==== Version update (5.25.3 -> 5.25.4) Subpackages: systemsettings5-lang - Update to 5.25.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.4 - Changes since 5.25.3: * Fix showing translations for kinfocenter ==== texinfo ==== Subpackages: info info-lang - In case of an update of package info: do never remove existing info page from dir file (boo#1201852) - Do lua scripting only once for execute() function - Check for filetrigger lua scriplets if rpm.execute() as function call is given and used this ==== urlscan ==== - Do not remove egg info anymore as the pythonm3 interpreter does not work anymore without this information (boo#1202137) ==== xdg-desktop-portal-kde ==== Version update (5.25.3 -> 5.25.4) Subpackages: xdg-desktop-portal-kde-lang - Update to 5.25.4 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.25.4 - No code changes since 5.25.3

3 3

New package for Factory: hut
by jlk 08 Aug '22

08 Aug '22

Dear Factory list, I would like to bring a new package to factory: hut, the CLI client for the code forge sourcehut (sr.ht). The client is written in Go and as it's service development is still happening, but I would consider it in beta as most functions are available and I had only minor problems using it the last months. The original author Simon Ser, one of the people behind sourcehut, is involved in many other projects and open for communication - The two numbered releases happenend because of my request, so I am confident that problems could be resolved quickly. The current devel project is devel:tools:scm: https://build.opensuse.org/package/show/devel:tools:scm/hut The package builds without warnings and additional completions are provided. Best regards Jan-Luca

1 0

New Tumbleweed snapshot 20220807 released!
by Dominique Leuenberger 08 Aug '22

08 Aug '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: gcab (1.4 -> 1.5) hwinfo (21.82 -> 22.0) messagelib openobex perl-IO-Socket-SSL pimcommon plymouth (0.9.5~git20220719.9e72df3 -> 22.02.122+60.52b0494) python-attrs (21.4.0 -> 22.1.0) rubygem-erubi (1.10.0 -> 1.11.0) rubygem-excon (0.91.0 -> 0.92.4) rubygem-i18n (1.10.0 -> 1.12.0) rubygem-logging (2.3.0 -> 2.3.1) rubygem-net-ssh (6.2.0.rc2 -> 7.0.1) rubygem-nokogiri (1.13.6 -> 1.13.8) rubygem-parallel_tests (3.8.1 -> 3.11.1) rubygem-pkg-config (1.4.7 -> 1.4.9) === Details === ==== gcab ==== Version update (1.4 -> 1.5) Subpackages: gcab-lang libgcab-1_0-0 - Update to version 1.5: + New Features: - New gcab_file_set_bytes() API. - meson: Register the gcab executable with meson. + Bugfixes: - Fixed MSZIP compression when deflate algorithm would expand. Previous versions of gcab can produce "incorrect" archives (when a compressed block is larger than its input). They are however supported by gcab itself, and we will keep support for it for the foreseeble future. - gcab: avoid runtime warnings. - Fix coverity warnings. + Updated translations. ==== hwinfo ==== Version update (21.82 -> 22.0) - merge gh#openSUSE/hwinfo#114 - improve treatment of NVME devices (bsc#1200975) - add new NVME hardware class and support it in hwinfo - fix compiler warnings - 22.0 ==== messagelib ==== Subpackages: messagelib-lang - Add upstream changes to fix issues detected by CMake 3.24: * 0001-Add-missing-find_dependency-calls.patch * 0001-Use-WebEngineWidgets-as-WebEngine-is-not-define-in-q.patch ==== openobex ==== - Set CMAKE_SKIP_RPATH to avoid incorrect and unneeded RUNPATH in the openobex apps - Spec cleanup ==== perl-IO-Socket-SSL ==== - (bsc#1200295) follow system "PROFILE=SYSTEM" openSSL ciphers * Add perl-IO-Socket-SSL-use-system-default-cipher-list.patch ==== pimcommon ==== Subpackages: libKF5PimCommon5 libKF5PimCommonAkonadi5 pimcommon-lang - Add upstream change to fix issues detected by CMake 3.24: * 0001-Fix-pimcommon-CMake.patch ==== plymouth ==== Version update (0.9.5~git20220719.9e72df3 -> 22.02.122+60.52b0494) Subpackages: libply-splash-core5 libply-splash-graphics5 libply5 plymouth-dracut plymouth-lang plymouth-plugin-label plymouth-plugin-two-step plymouth-scripts plymouth-theme-bgrt plymouth-theme-spinner - Update to version 22.02.122+60.52b0494: src: Run through uncrustify. scripts: Diff less. scripts: Update uncrustify config. src: Drop vim: lines. ply-utils: Drop linux/fs.h include. scripts: Add -B to interdiff in check-format. - Rebase plymouth-log-on-default.patch; - Rebase plymouth-screen-twice-scale-on-160DPI-higher.patch; ==== python-attrs ==== Version update (21.4.0 -> 22.1.0) - Update to 22.1.0: * Backwards-incompatible Changes * Python 2.7 is not supported anymore. * Dealing with Python 2.7 tooling has become too difficult for a volunteer-run project. * We have supported Python 2 more than 2 years after it was officially discontinued and feel that we have paid our dues. All version up to 21.4.0 from December 2021 remain fully functional, of course. #936 * The deprecated cmp attribute of attrs.Attribute has been removed. This does not affect the cmp argument to attr.s that can be used as a shortcut to set eq and order at the same time. #939 * Changes * Instantiation of frozen slotted classes is now faster. #898 * If an eq key is defined, it is also used before hashing the attribute. #909 * Added attrs.validators.min_len(). #916 * attrs.validators.deep_iterable()'s member_validator argument now also accepts a list of validators and wraps them in an attrs.validators.and_(). #925 * Added missing type stub re-imports for attrs.converters and attrs.filters. #931 * Added missing stub for attr(s).cmp_using(). #949 * attrs.validators._in()'s ValueError is not missing the attribute, expected options, and the value it got anymore. #951 * Python 3.11 is now officially supported. #969 ==== rubygem-erubi ==== Version update (1.10.0 -> 1.11.0) updated to version 1.11.0 see installed CHANGELOG === 1.11.0 (2022-08-02) * Support :freeze_template_literals option for configuring whether to add .freeze to template literal strings (casperisfine) (#33) * Support :chain_appends option for chaining appends to the buffer variable (casperisfine, jeremyevans) (#32) * Avoid unnecessary defined? usage on Ruby 3+ when using the :ensure option (jeremyevans) ==== rubygem-excon ==== Version update (0.91.0 -> 0.92.4) updated to version 0.92.4 no changelog found ==== rubygem-i18n ==== Version update (1.10.0 -> 1.12.0) updated to version 1.12.0 no changelog found ==== rubygem-logging ==== Version update (2.3.0 -> 2.3.1) updated to version 2.3.1 see installed History.txt == 2.3.1 / 2022-05-24 Bug Fixes - logging hangs on JRuby when the stdout appender is closed [PR #237] - initialize the Logging framework when a Filter is created [PR #238] ==== rubygem-net-ssh ==== Version update (6.2.0.rc2 -> 7.0.1) updated to version 7.0.1 see installed CHANGES.txt === 6.3.0 beta1 * Support cert based host key auth, fix asterisk in known_hosts [#833] * Support kex dh-group14-sha256 [#795] * Fix StrictHostKeyChecking ssh config parameter translation [#765] ==== rubygem-nokogiri ==== Version update (1.13.6 -> 1.13.8) updated to version 1.13.8 see installed CHANGES.md ==== rubygem-parallel_tests ==== Version update (3.8.1 -> 3.11.1) updated to version 3.11.1 no changelog found ==== rubygem-pkg-config ==== Version update (1.4.7 -> 1.4.9) updated to version 1.4.9 see installed NEWS == 1.4.9 - 2022-07-31 This is a bug fix release of 1.4.8. All 1.4.8 users should be upgraded to 1.4.9. === Fixes * Fixed a regression bug in 1.4.8 that PkgConfig.have_package can't detect nonexistent package. == 1.4.8 - 2022-07-30 === Improvements * Added support for showing found package version.

1 0

New Tumbleweed snapshot 20220806 released!
by Dominique Leuenberger 07 Aug '22

07 Aug '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ibus-table (1.16.9 -> 1.16.11) iio-sensor-proxy (3.3 -> 3.4) rubygem-actioncable-7.0 (7.0.3 -> 7.0.3.1) rubygem-actionmailbox-7.0 (7.0.3 -> 7.0.3.1) rubygem-actionmailer-7.0 (7.0.3 -> 7.0.3.1) rubygem-actionpack-7.0 (7.0.3 -> 7.0.3.1) rubygem-actiontext-7.0 (7.0.3 -> 7.0.3.1) rubygem-actionview-7.0 (7.0.3 -> 7.0.3.1) rubygem-activejob-7.0 (7.0.3 -> 7.0.3.1) rubygem-activemodel-7.0 (7.0.3 -> 7.0.3.1) rubygem-activerecord-7.0 (7.0.3 -> 7.0.3.1) rubygem-activestorage-7.0 (7.0.3 -> 7.0.3.1) rubygem-activesupport-7.0 (7.0.3 -> 7.0.3.1) rubygem-airbrussh (1.4.0 -> 1.4.1) rubygem-autoprefixer-rails (10.4.2.0 -> 10.4.7.0) rubygem-bootsnap (1.12.0 -> 1.13.0) rubygem-bundler (2.3.13 -> 2.3.19) rubygem-bundler-audit (0.9.0.1 -> 0.9.1) rubygem-chef-utils (17.9.52 -> 17.10.0) rubygem-rails-7.0 (7.0.3 -> 7.0.3.1) rubygem-rails-i18n (7.0.3 -> 7.0.5) rubygem-railties-7.0 (7.0.3 -> 7.0.3.1) === Details === ==== ibus-table ==== Version update (1.16.9 -> 1.16.11) update: 1.16.10 -> 1.16.11 - Remove hashbang from chinese_variants.py and tabcreatedb.py * gh#mike-fabian/ibus-table#118 update: 1.16.9 -> 1.6.10 - Add png versions of the ibus-table.svg icon - Add (remote) icon to ibus-table.appdata.xml - Add screenshot to ibus-table.appdata.xml feat: use _service files to automate fetching sources ==== iio-sensor-proxy ==== Version update (3.3 -> 3.4) - Update to version 3.4: * Add polkit checks for whether a user is allowed to claim a sensor. * Fix the ambient light sensor readings on some systems, a regression in the fake-input-accelerometer test binary. * A number of memory leaks. - Package polkit privilege file (subject to boo#1201558); add BuildRequires: pkgconfig(polkit-gobject-1). ==== rubygem-actioncable-7.0 ==== Version update (7.0.3 -> 7.0.3.1) updated to version 7.0.3.1 see installed CHANGELOG.md [#]# Rails 7.0.3.1 (July 12, 2022) ## * No changes. ==== rubygem-actionmailbox-7.0 ==== Version update (7.0.3 -> 7.0.3.1) updated to version 7.0.3.1 see installed CHANGELOG.md [#]# Rails 7.0.3.1 (July 12, 2022) ## * No changes. ==== rubygem-actionmailer-7.0 ==== Version update (7.0.3 -> 7.0.3.1) updated to version 7.0.3.1 see installed CHANGELOG.md [#]# Rails 7.0.3.1 (July 12, 2022) ## * No changes. ==== rubygem-actionpack-7.0 ==== Version update (7.0.3 -> 7.0.3.1) updated to version 7.0.3.1 see installed CHANGELOG.md [#]# Rails 7.0.3.1 (July 12, 2022) ## * No changes. ==== rubygem-actiontext-7.0 ==== Version update (7.0.3 -> 7.0.3.1) updated to version 7.0.3.1 see installed CHANGELOG.md [#]# Rails 7.0.3.1 (July 12, 2022) ## * No changes. ==== rubygem-actionview-7.0 ==== Version update (7.0.3 -> 7.0.3.1) updated to version 7.0.3.1 see installed CHANGELOG.md [#]# Rails 7.0.3.1 (July 12, 2022) ## * No changes. ==== rubygem-activejob-7.0 ==== Version update (7.0.3 -> 7.0.3.1) updated to version 7.0.3.1 see installed CHANGELOG.md [#]# Rails 7.0.3.1 (July 12, 2022) ## * No changes. ==== rubygem-activemodel-7.0 ==== Version update (7.0.3 -> 7.0.3.1) updated to version 7.0.3.1 see installed CHANGELOG.md [#]# Rails 7.0.3.1 (July 12, 2022) ## * No changes. ==== rubygem-activerecord-7.0 ==== Version update (7.0.3 -> 7.0.3.1) updated to version 7.0.3.1 see installed CHANGELOG.md [#]# Rails 7.0.3.1 (July 12, 2022) ## * Change ActiveRecord::Coders::YAMLColumn default to safe_load This adds two new configuration options The configuration options are as follows: * `config.active_storage.use_yaml_unsafe_load` When set to true, this configuration option tells Rails to use the old "unsafe" YAML loading strategy, maintaining the existing behavior but leaving the possible escalation vulnerability in place. Setting this option to true is *not* recommended, but can aid in upgrading. * `config.active_record.yaml_column_permitted_classes` The "safe YAML" loading method does not allow all classes to be deserialized by default. This option allows you to specify classes deemed "safe" in your application. For example, if your application uses Symbol and Time in serialized data, you can add Symbol and Time to the allowed list as follows: ``` config.active_record.yaml_column_permitted_classes = [Symbol, Date, Time] ``` [CVE-2022-32224] ==== rubygem-activestorage-7.0 ==== Version update (7.0.3 -> 7.0.3.1) updated to version 7.0.3.1 see installed CHANGELOG.md [#]# Rails 7.0.3.1 (July 12, 2022) ## * No changes. ==== rubygem-activesupport-7.0 ==== Version update (7.0.3 -> 7.0.3.1) updated to version 7.0.3.1 see installed CHANGELOG.md [#]# Rails 7.0.3.1 (July 12, 2022) ## * No changes. ==== rubygem-airbrussh ==== Version update (1.4.0 -> 1.4.1) updated to version 1.4.1 see installed CHANGELOG.md ==== rubygem-autoprefixer-rails ==== Version update (10.4.2.0 -> 10.4.7.0) updated to version 10.4.7.0 see installed CHANGELOG.md [#]# 10.4.7.0 * Fixed `print-color-adjust` support in Firefox. * Fixed `print-color-adjust` support. * Fixed `NaN` in grid (by @SukkaW). ==== rubygem-bootsnap ==== Version update (1.12.0 -> 1.13.0) updated to version 1.13.0 see installed CHANGELOG.md [#] 1.13.0 * Stop decorating `Kernel.load`. This used to be very useful in development because the Rails "classic" autoloader was using `Kernel.load` in dev and `Kernel.require` in production. But Zeitwerk is now the default, and it doesn't use `Kernel.load` at all. People still using the classic autoloader might want to stick to `bootsnap 1.12`. * Add `Bootsnap.unload_cache!`. Applications can call it at the end of their boot sequence when they know no more code will be loaded to reclaim a bit of memory. ==== rubygem-bundler ==== Version update (2.3.13 -> 2.3.19) updated to version 2.3.19 see installed CHANGELOG.md [#] 2.3.19 (July 27, 2022) [#]# Enhancements: - Add `Bundler.settings[:only]` to install gems of the specified groups [#5759](https://github.com/rubygems/rubygems/pull/5759) - Add `ignore_funding_requests` config flag [#5767](https://github.com/rubygems/rubygems/pull/5767) - Prevent random crash when autoloading `Pathname` [#5769](https://github.com/rubygems/rubygems/pull/5769) - Don't corrupt lockfile when user moves a gem that's already in the lockfile to an incorrect source by mistake [#5070](https://github.com/rubygems/rubygems/pull/5070) - Reconcile error/warning message for multiple global sources with documentation [#5741](https://github.com/rubygems/rubygems/pull/5741) - Improve error message when gems cannot be found to include the source for each gem [#5729](https://github.com/rubygems/rubygems/pull/5729) [#]# Bug fixes: - Fix yet another TruffleRuby platform selection regression [#5746](https://github.com/rubygems/rubygems/pull/5746) - Show a proper error if extension dir is not writable [#5726](https://github.com/rubygems/rubygems/pull/5726) [#]# Performance: - Lazily check incomplete lockfile to improve performance [#5546](https://github.com/rubygems/rubygems/pull/5546) [#]# Documentation: - Add deprecation notice of bundle inject [#5776](https://github.com/rubygems/rubygems/pull/5776) - Add deprecation notice of `bundle viz` to man pages [#5765](https://github.com/rubygems/rubygems/pull/5765) - Update command example in `bundle exec` man page [#5754](https://github.com/rubygems/rubygems/pull/5754) - Remove bundle show from obsolete commands [#5753](https://github.com/rubygems/rubygems/pull/5753) - Improve global source(s) documentation [#5732](https://github.com/rubygems/rubygems/pull/5732) - Use https protocol for URLs for config mirror in bundler man [#5722](https://github.com/rubygems/rubygems/pull/5722) [#] 2.3.18 (July 14, 2022) [#]# Enhancements: - Extend `gem` DSL with a `force_ruby_platform` option [#4049](https://github.com/rubygems/rubygems/pull/4049) [#]# Bug fixes: - Fix misleading error if compact index cannot be copied [#5709](https://github.com/rubygems/rubygems/pull/5709) - Fix TruffleRuby no longer able to install lockfiles generated with other implementations [#5711](https://github.com/rubygems/rubygems/pull/5711) - Fix TruffleRuby no longer installing lockfiles using "ruby" platform correctly [#5694](https://github.com/rubygems/rubygems/pull/5694) - Fix crash when updating vendor cache of default gems [#5679](https://github.com/rubygems/rubygems/pull/5679) [#]# Performance: - Speed up `bundler/setup` by using the raw `Gemfile.lock` information without extra processing whenever possible [#5695](https://github.com/rubygems/rubygems/pull/5695) [#]# Documentation: - Use modern style hashes in Gemfile DSL docs [#5674](https://github.com/rubygems/rubygems/pull/5674) [#] 2.3.17 (June 29, 2022) [#]# Enhancements: - Add support for platform `:x64_mingw` to correctly lookup "x64-mingw-ucrt" [#5649](https://github.com/rubygems/rubygems/pull/5649) - Fix some errors being printed twice in `--verbose` mode [#5654](https://github.com/rubygems/rubygems/pull/5654) - Fix extension paths in generated standalone script [#5632](https://github.com/rubygems/rubygems/pull/5632) [#]# Bug fixes: - Raise if ruby platform is forced and there are no ruby variants [#5495](https://github.com/rubygems/rubygems/pull/5495) - Fix `bundle package --no-install` no longer skipping install [#5639](https://github.com/rubygems/rubygems/pull/5639) [#]# Performance: - Improve performance of `Bundler::SpecSet#for` by using hash lookup of handled deps [#5537](https://github.com/rubygems/rubygems/pull/5537) [#]# Documentation: - Fix formatting issue in `bundle add` man page [#5642](https://github.com/rubygems/rubygems/pull/5642) [#] 2.3.16 (June 15, 2022) [#]# Performance: - Improve performance of installing gems from gem server sources [#5614](https://github.com/rubygems/rubygems/pull/5614) [#] 2.3.15 (June 1, 2022) [#]# Enhancements: - Show better error when previous installation fails to be removed [#5564](https://github.com/rubygems/rubygems/pull/5564) - Show exception cause in bug report template [#5563](https://github.com/rubygems/rubygems/pull/5563) [#]# Bug fixes: - Fix `bundle remove` by invalidating cached `Bundle.definition` [#5443](https://github.com/rubygems/rubygems/pull/5443) - Fix generated standalone script when it includes default gems [#5586](https://github.com/rubygems/rubygems/pull/5586) - Skip duplicated dependency warning for gemspec dev deps [#5587](https://github.com/rubygems/rubygems/pull/5587) - Give better conflict resolution advice [#5581](https://github.com/rubygems/rubygems/pull/5581) - Fix crash when commenting out a mirror in configuration [#5576](https://github.com/rubygems/rubygems/pull/5576) - Fix crash when installing gems with symlinks [#5570](https://github.com/rubygems/rubygems/pull/5570) - Ignore `Errno::EROFS` errors when creating `bundler.lock` [#5580](https://github.com/rubygems/rubygems/pull/5580) - Ignore `Errno::EPERM` errors when creating `bundler.lock` [#5579](https://github.com/rubygems/rubygems/pull/5579) - Fix crash when printing resolution conflicts on metadata requirements [#5562](https://github.com/rubygems/rubygems/pull/5562) [#] 2.3.14 (May 18, 2022) [#]# Bug fixes: - Fix confusing inline mode install output [#5530](https://github.com/rubygems/rubygems/pull/5530) - Fix error message when locked version of a gem does not support running Ruby [#5525](https://github.com/rubygems/rubygems/pull/5525) [#]# Performance: - Improve `bundler/setup` performance again by not deduplicating intermediate results [#5533](https://github.com/rubygems/rubygems/pull/5533) [#]# Documentation: - Fix typo in documentation [#5514](https://github.com/rubygems/rubygems/pull/5514) - Update man page for `require` option in `bundle add` command [#5513](https://github.com/rubygems/rubygems/pull/5513) ==== rubygem-bundler-audit ==== Version update (0.9.0.1 -> 0.9.1) updated to version 0.9.1 see installed ChangeLog.md [#]## 0.9.1 / 2022-05-19 [#]### CLI * Improve the readability of the suggested gem versions to upgrade to (pull #331). [#]### Rake Task * Fixed a regression introduced in 0.9.0 where the `bundler:audit` rake task was not exiting with an error status code if vulnerabilities were found. Now when the `bundler-audit` command fails, the rake task will also exit with the `bundler-audit` command's error code. * If the `bundler-audit` command could not be found for some reason raise the {Bundler::Audit::Task::CommandNotFound} exception. ==== rubygem-chef-utils ==== Version update (17.9.52 -> 17.10.0) updated to version 17.10.0 no changelog found ==== rubygem-rails-7.0 ==== Version update (7.0.3 -> 7.0.3.1) updated to version 7.0.3.1 no changelog found ==== rubygem-rails-i18n ==== Version update (7.0.3 -> 7.0.5) updated to version 7.0.5 see installed CHANGELOG.md - Remove eager loading of translations during boot phase (this is now done by Rails). [#]# 7.0.3 (2022-03-01) - Revert long date formats on default "en" locale #980 ==== rubygem-railties-7.0 ==== Version update (7.0.3 -> 7.0.3.1) updated to version 7.0.3.1 see installed CHANGELOG.md [#]# Rails 7.0.3.1 (July 12, 2022) ## * No changes.

1 0

Introducing New Maintainer for VirtualBox
by Larry Finger 06 Aug '22

06 Aug '22

Hello, Following my recent E-mail regarding my successor as the openSUSE maintainer of VirtualBox, Larry Len Rainey volunteered, at least as a trainee. He is a young man (only 70!). We worked together to get version 6.1.36 released, and I expect we will soon need to work through the kernel API changes associated with 6.2.0. Kernel 5.19.0 was a rare release that did not change any APIs used by VirtualBox. I hope you give the other Larry the support and respect that you have given me. Larry

4 4

Add my mail
by Тимур Кашапов 06 Aug '22

06 Aug '22

5 6

Future of reiserfs in Tumbleweed (and beyond)
by Jeff Mahoney 06 Aug '22

06 Aug '22

Hi folks - When we introduced reiserfs in SUSE products over 20 years ago, it was a cutting edge file system that brought the protection of journaling to Linux for the first time. In 2006, I proposed moving away from it in openSUSE as the default file system, citing a small and shrinking developer community. These days, while I am technically the maintainer of the reiserfs userspace project upstream. Practically, it's abandoned and I haven't touched it in over 5 years. The kernel implementation gets attention only when updating a common subsystem requires it. It has none of the resiliency features that we've come to expect from modern file systems, and that includes the ability to craft file system images that could result in system crash or possibly compromise. It's time to let reiserfs go from openSUSE entirely. So, I propose: - Removing the reiserfs package from Tumbleweed immediately (and fixing any fallout caused by removing libreiserfscore), - Disable the kernel implementation immediately. I recognize that there may be people out there with disks containing reiserfs file systems. If these are in active use, I would seriously encourage migrating to something actively maintained. If these are sitting on a shelf for archival purposes, GRUB ships with a fuse frontend for all of its file system drivers, including reiserfs. It's not fast but it's enough for data access. -Jeff -- Jeff Mahoney Director, SUSE Labs Data & Performance

6 8

New Tumbleweed snapshot 20220804 released!
by Dominique Leuenberger 05 Aug '22

05 Aug '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: Mesa (22.1.3 -> 22.1.4) Mesa-drivers (22.1.3 -> 22.1.4) MozillaFirefox (102.0.1 -> 103.0.1) apparmor (3.0.5 -> 3.0.6) bind firewalld gcal gdb (11.1 -> 12.1) gnome-settings-daemon gnutls (3.7.6 -> 3.7.7) iso-codes (4.10.0 -> 4.11.0) kernel-source (5.18.12 -> 5.18.15) libapparmor (3.0.5 -> 3.0.6) libavif libblockdev (2.26 -> 2.27) libgcrypt libnvme (1.1~rc0 -> 1.1) libvirt (8.5.0 -> 8.6.0) mokutil (0.5.0 -> 0.6.0) mpg123 (1.30.1 -> 1.30.2) nvme-cli (2.1~rc0 -> 2.1.1) oath-toolkit opencc (1.1.3 -> 1.1.4) polkit poppler (22.07.0 -> 22.08.0) poppler-qt5 (22.07.0 -> 22.08.0) python-Genshi (0.7.5 -> 0.7.7) python-cffi (1.15.0 -> 1.15.1) python-cryptography (37.0.2 -> 37.0.4) python-gobject (3.42.1 -> 3.42.2) python-hatchling (1.4.1 -> 1.6.0) python-httpcore (0.14.7 -> 0.15.0) python-importlib-metadata (4.11.4 -> 4.12.0) python-kiwi (9.24.41 -> 9.24.45) python-libvirt-python (8.5.0 -> 8.6.0) python-numexpr python-psutil python-pycairo python-scipy python-urllib3 (1.26.9 -> 1.26.11) python-wcwidth read-only-root-fs (1.0+git20200730.1243fd0 -> 1.0+git20220801.cbb90bc) rsync unbound (1.16.1 -> 1.16.2) util-linux util-linux-systemd vim (9.0.0073 -> 9.0.0135) xdg-utils (1.1.3+20201113 -> 1.1.3+20210805) === Details === ==== Mesa ==== Version update (22.1.3 -> 22.1.4) Subpackages: Mesa-dri-devel Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - update to 22.1.4: * anv: disable non uniform indexing of UBOs * anv: use the right helper to invalidate memory * intel/fs: ray query fix for global address * isl: add new helper for format component compatibility * radeonsi: fix random PS wave size * r300: Keep rc_rename_regs() from overflowing * aco/ra: update register file when updating phi definition * radv: Fix vkCmdCopyQueryResults -> vkCmdResetPool hazard ==== Mesa-drivers ==== Version update (22.1.3 -> 22.1.4) Subpackages: Mesa-dri Mesa-gallium Mesa-libva libxatracker2 - update to 22.1.4: * anv: disable non uniform indexing of UBOs * anv: use the right helper to invalidate memory * intel/fs: ray query fix for global address * isl: add new helper for format component compatibility * radeonsi: fix random PS wave size * r300: Keep rc_rename_regs() from overflowing * aco/ra: update register file when updating phi definition * radv: Fix vkCmdCopyQueryResults -> vkCmdResetPool hazard ==== MozillaFirefox ==== Version update (102.0.1 -> 103.0.1) Subpackages: MozillaFirefox-translations-common - Mozilla Firefox 103.0.1 * Enabled hardware acceleration on newer AMD cards. * Fixed a crash on Firefox shutdown caused by a bug in the audio manager - Mozilla Firefox 103.0 https://www.mozilla.org/en-US/firefox/103.0/releasenotes MFSA 2022-28 (bsc#1201758) * CVE-2022-36319 (bmo#1737722) Mouse Position spoofing with CSS transforms * CVE-2022-36317 (bmo#1759951) Long URL would hang Firefox for Android * CVE-2022-36318 (bmo#1771774) Directory indexes for bundled resources reflected URL parameters * CVE-2022-36314 (bmo#1773894) Opening local <code>.lnk</code> files could cause unexpected network loads * CVE-2022-36315 (bmo#1762520) Preload Cache Bypasses Subresource Integrity * CVE-2022-36316 (bmo#1768583) Performance API leaked whether a cross-site resource is redirecting * CVE-2022-36320 (bmo#1759794, bmo#1760998) Memory safety bugs fixed in Firefox 103 * CVE-2022-2505 (bmo#1769739, bmo#1772824) Memory safety bugs fixed in Firefox 103 and 102.1 - requires NSS >= 3.80 rust = 1.61 rust-cbindgen >= 0.24.3 - Move %limit_build set before mozilla config to actually set the value of %jobs to MOZ_MAKE_FLAGS to fix build on aarch64 ==== apparmor ==== Version update (3.0.5 -> 3.0.6) Subpackages: apparmor-abstractions apparmor-docs apparmor-parser apparmor-parser-lang apparmor-profiles apparmor-utils apparmor-utils-lang pam_apparmor pam_apparmor-32bit python3-apparmor - update to AppArmor 3.0.6 - fix LTO build in the parser - remove dbus deny rule in abstractions/exo-open - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.6 for the detailed upstream changelog - drop upstream patch dirtest-sort-mr900.diff ==== bind ==== Subpackages: bind-doc bind-utils - Add systemd drop-in directory for named service [bsc#1201689, bind.spec] ==== firewalld ==== Subpackages: firewalld-bash-completion firewalld-lang firewalld-zsh-completion python3-firewall - readd ipset buildrequires to reenable ipset support (bsc#1202043) - readd ebtables too, as there is no builtin support. ==== gcal ==== Subpackages: gcal-lang - use -D_FORTIFY_SOURCE=2 to fix crashes ==== gdb ==== Version update (11.1 -> 12.1) - Maintenance script qa.sh: * Add SLE-12/x86_64 to "known clean configs". * Add fail for PR29405. * Add fail for PR26915. - Patches added: * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch - Maintenance script qa.sh: * Remove PR29247 internal-error. * Add SLE-15/aarch64 to "known clean configs". - Patches added: * gdb-fix-watchpoints-triggered.patch - Maintenance script qa.sh: * Add kfails for PR25038, PR29253, and PR29423. * Remove gdb.mi/mi-var-invalidate-shlib.exp kfails. - Mention qa-local.sh, qa-remote.sh and README.qa as sources. - Maintenance script qa-local.sh: * Use have_combo consistently. - Maintenance script qa.sh: * Add kfail_aarch64. * Add PR29419/PR29409 kfails. * Update PR29247 kfails. - Patches added: * make-gdb.ada-float-bits.exp-more-generic.patch * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch - Actually apply fixup-gdb-test-bt-cfi-without-die.patch and fixup-2-gdb-rhbz1553104-s390x-arch12-test.patch. - Also remove gdb-6.5-readline-long-line-crash-test.patch from patches list in gdb.spec. - Patches added: * powerpc-add-support-for-ieee-128-bit-format.patch * powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch * gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch * powerpc-fix-for-gdb.base-eh_return.exp.patch * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch * fixup-gdb-test-bt-cfi-without-die.patch * fix-core-file-detach-crash-corefiles-29275.patch * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch * fix-for-gdb.base-solib-search.exp-test.patch - Patch removed: * gdb-6.7-ppc-clobbered-registers-O2-test.patch * gdb-6.5-readline-long-line-crash-test.patch - Patches updated: * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch * gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch - Maintenance script qa.sh: * Add PR28504 KFAILs. * Make .sum file matching less complex. * Add fedora test-case kfail. - Maintenance script qa-local.sh: * Fix incorrect path name. - Update comments in gdb.spec. - Patches added: * powerpc-update-expected-floating-point-output-for-gdb.arch-altivec-regs.exp-and-gdb.arch-vsx-regs.exp.patch - Patches updated: * gdb-testsuite-support-recording-of-getrandom.patch (add aarch64 part) - Maintenance script qa.sh: * Add i586 to known clean configs. - Patches added: * gdb-testsuite-enable-some-test-cases-for-x86_64-m32.patch * gdb-testsuite-fix-gdb.reverse-i387-env-reverse.exp-for-pie.patch * gdb-testsuite-support-recording-of-getrandom.patch - Patches updated: * gdb-record-handle-statx-system-call.patch - Maintenance script qa.sh: * Allow only two summary files, for i586. * Add i586 KFAILs. - Maintenance script qa-local.sh: * Add i586. - Maintenance script qa-local.sh: * Fix rpm pathname. - Maintenance script qa-remote.sh: * Skip stale config openSUSE_Leap_15.2. - Maintenance script qa.sh: * Drop known clean config: Leap 15.2 x86_64. - Maintenance script qa-local.sh: * Add cleanup step. * Add "build all configs without testsuite" step. * For "build all configs with testsuite" step, redirect output to log and produce PASS/FAIL line, and make sure buildroot is removed also in case of missing rpm. * Use "--clean --trust-all-projects" for osc build commands. * Drop openSUSE_Leap_15.2. - Maintenance script qa.sh: * Rename argument 6 to -local. * Add PR29247 KFAILs. * Update internal-error regexps. - New maintenance script qa-remote.sh. - Add "build all configs without testsuite" step in README.qa. - Patches added (backport from trunk): * gdb-testsuite-remove-attach-test-from-can_spawn_for_attach.patch - README.qa: * Add remote qa entry. * Update local qa entry: * Add notes entry. * Other updates to match changes in qa-local.sh. ... changelog too long, skipping 312 lines ... * Add Leap 15.4 x86_64 to know good configs. ==== gnome-settings-daemon ==== Subpackages: gnome-settings-daemon-lang - Change dependency from polkit to /usr/bin/pkexec: pkexec has been split out of polkit. Requiring the explicit capability seems better here than having to worry what package carries the binary. ==== gnutls ==== Version update (3.7.6 -> 3.7.7) Subpackages: libgnutls-dane0 libgnutls30 libgnutls30-32bit libgnutls30-hmac - Update to 3.7.7: [bsc#1202020, CVE-2022-2509] * libgnutls: Fixed double free during verification of pkcs7 signatures. CVE-2022-2509 * libgnutls: gnutls_hkdf_expand now only accepts LENGTH argument less than or equal to 255 times hash digest size, to comply with RFC 5869 2.3. * libgnutls: Length limit for TLS PSK usernames has been increased from 128 to 65535 characters * libgnutls: AES-GCM encryption function now limits plaintext length to 2^39-256 bits, according to SP800-38D 5.2.1.1. * libgnutls: New block cipher functions have been added to transparently handle padding. gnutls_cipher_encrypt3 and gnutls_cipher_decrypt3 can be used in combination of GNUTLS_CIPHER_PADDING_PKCS7 flag to automatically add/remove padding if the length of the original plaintext is not a multiple of the block size. * libgnutls: New function for manual FIPS self-testing. * API and ABI modifications: - gnutls_fips140_run_self_tests: New function - gnutls_cipher_encrypt3: New function - gnutls_cipher_decrypt3: New function - gnutls_cipher_padding_flags_t: New enum * guile: Guile 1.8 is no longer supported * guile: Session record port treats premature termination as EOF Previously, a 'gnutls-error' exception with the 'error/premature-termination' value would be thrown while reading from a session record port when the underlying session was terminated prematurely. This was inconvenient since users of the port may not be prepared to handle such an exception. Reading from the session record port now returns the end-of-file object instead of throwing an exception, just like it would for a proper session termination. * guile: Session record ports can have a 'close' procedure. The 'session-record-port' procedure now takes an optional second parameter, and a new 'set-session-record-port-close!' procedure is provided to specify a 'close' procedure for a session record port. This 'close' procedure lets users specify cleanup operations for when the port is closed, such as closing the file descriptor or port that backs the underlying session. * Rebase patches: - gnutls-3.6.6-set_guile_site_dir.patch - gnutls-FIPS-TLS_KDF_selftest.patch - gnutls-FIPS-disable-failing-tests.patch * Remove patch merged upstream: - gnutls-FIPS-PBKDF2-KAT-requirements.patch - https://gitlab.com/gnutls/gnutls/merge_requests/1561 ==== iso-codes ==== Version update (4.10.0 -> 4.11.0) Subpackages: iso-codes-lang - Update to version 4.11.0: + Update ISO 639-3 codes from SIL website. + Updated translations. ==== kernel-source ==== Version update (5.18.12 -> 5.18.15) - Linux 5.18.15 (bsc#1012628). - watch-queue: remove spurious double semicolon (bsc#1012628). - ASoC: SOF: Intel: disable IMR boot when resuming from ACPI S4 and S5 states (bsc#1012628). - ASoC: SOF: pm: add definitions for S4 and S5 states (bsc#1012628). - ASoC: SOF: pm: add explicit behavior for ACPI S1 and S2 (bsc#1012628). - watchqueue: make sure to serialize 'wqueue->defunct' properly (bsc#1012628). - x86/alternative: Report missing return thunk details (bsc#1012628). - x86/amd: Use IBPB for firmware calls (bsc#1012628). - exfat: use updated exfat_chain directly during renaming (bsc#1012628). - exfat: fix referencing wrong parent directory information after renaming (bsc#1012628). - crypto: qat - re-enable registration of algorithms (bsc#1012628). - crypto: qat - add param check for DH (bsc#1012628). - crypto: qat - add param check for RSA (bsc#1012628). - crypto: qat - remove dma_free_coherent() for DH (bsc#1012628). - crypto: qat - remove dma_free_coherent() for RSA (bsc#1012628). - crypto: qat - fix memory leak in RSA (bsc#1012628). - crypto: qat - add backlog mechanism (bsc#1012628). - crypto: qat - refactor submission logic (bsc#1012628). - crypto: qat - use pre-allocated buffers in datapath (bsc#1012628). - crypto: qat - set to zero DH parameters before free (bsc#1012628). - dlm: fix pending remove if msg allocation fails (bsc#1012628). - clk: lan966x: Fix the lan966x clock gate register address (bsc#1012628). - x86/bugs: Warn when "ibrs" mitigation is selected on Enhanced IBRS parts (bsc#1012628). - perf/x86/intel/lbr: Fix unchecked MSR access error on HSW (bsc#1012628). - sched/deadline: Fix BUG_ON condition for deboosted tasks (bsc#1012628). - bpf: Make sure mac_header was set before using it (bsc#1012628). - mm/mempolicy: fix uninit-value in mpol_rebind_policy() (bsc#1012628). - KVM: Don't null dereference ops->destroy (bsc#1012628). - spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for non DMA transfers (bsc#1012628). - KVM: selftests: Fix target thread to be migrated in rseq_test (bsc#1012628). - gpio: gpio-xilinx: Fix integer overflow (bsc#1012628). - selftests: gpio: fix include path to kernel headers for out of tree builds (bsc#1012628). - net/sched: cls_api: Fix flow action initialization (bsc#1012628). - tcp: Fix data-races around sysctl_tcp_max_reordering (bsc#1012628). - tcp: Fix a data-race around sysctl_tcp_abort_on_overflow (bsc#1012628). - tcp: Fix a data-race around sysctl_tcp_rfc1337 (bsc#1012628). - tcp: Fix a data-race around sysctl_tcp_stdurg (bsc#1012628). - tcp: Fix a data-race around sysctl_tcp_retrans_collapse (bsc#1012628). - tcp: Fix data-races around sysctl_tcp_slow_start_after_idle (bsc#1012628). - tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts (bsc#1012628). - tcp: Fix data-races around sysctl_tcp_recovery (bsc#1012628). - tcp: Fix a data-race around sysctl_tcp_early_retrans (bsc#1012628). - tcp: Fix data-races around sysctl knobs related to SYN option (bsc#1012628). - udp: Fix a data-race around sysctl_udp_l3mdev_accept (bsc#1012628). - ip: Fix data-races around sysctl_ip_prot_sock (bsc#1012628). - ipv4: Fix data-races around sysctl_fib_multipath_hash_fields (bsc#1012628). - ipv4: Fix data-races around sysctl_fib_multipath_hash_policy (bsc#1012628). - ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh (bsc#1012628). - can: rcar_canfd: Add missing of_node_put() in rcar_canfd_probe() (bsc#1012628). - drm/imx/dcss: Add missing of_node_put() in fail path (bsc#1012628). - drm/panel-edp: Fix variable typo when saving hpd absent delay from DT (bsc#1012628). - amt: do not use amt->nr_tunnels outside of lock (bsc#1012628). - amt: drop unexpected multicast data (bsc#1012628). - amt: drop unexpected query message (bsc#1012628). - amt: drop unexpected advertisement message (bsc#1012628). - amt: add missing regeneration nonce logic in request logic (bsc#1012628). - amt: use READ_ONCE() in amt module (bsc#1012628). - amt: remove unnecessary locks (bsc#1012628). - amt: use workqueue for gateway side message handling (bsc#1012628). - net: dsa: vitesse-vsc73xx: silent spi_device_id warnings (bsc#1012628). - net: dsa: sja1105: silent spi_device_id warnings (bsc#1012628). - be2net: Fix buffer overflow in be_get_module_eeprom (bsc#1012628). ... changelog too long, skipping 599 lines ... - commit fcd7336 ==== libapparmor ==== Version update (3.0.5 -> 3.0.6) Subpackages: libapparmor1 libapparmor1-32bit - update to AppArmor 3.0.6 - fix LTO build in the parser - remove dbus deny rule in abstractions/exo-open - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.6 for the detailed upstream changelog - drop upstream patch dirtest-sort-mr900.diff ==== libavif ==== - Enable libyuv on TW ==== libblockdev ==== Version update (2.26 -> 2.27) Subpackages: libbd_btrfs2 libbd_crypto2 libbd_fs2 libbd_loop2 libbd_lvm2 libbd_mdraid2 libbd_part2 libbd_swap2 libbd_utils2 libblockdev2 - Update to version 2.27: + Fix for s390x: Remove double fclose in bd_s390_dasd_online + fs: Return BD_FS_ERROR_UNKNOWN_FS on mounting unknown filesystem + overrides: Fix translating exceptions in ErrorProxy + vdo_stats: Default to 100 % savings for invalid savings values + lvm-dbus: Add support for changing compression and deduplication + lvm: - Fix reading statistics for VDO pools with VDO 8 - Do not set global config to and empty string - Do not include duplicate entries in bd_lvm_lvs output - Use correct integer type in for comparison + crypto: Remove useless comparison in progress report in luks_format ==== libgcrypt ==== Subpackages: libgcrypt20 libgcrypt20-32bit libgcrypt20-hmac - Fix reproducible build problems: - Do not use %release in binaries (but use SOURCE_DATE_EPOCH) - Fix date call messed up by spec-cleaner ==== libnvme ==== Version update (1.1~rc0 -> 1.1) - Update to version 1.1: * Regenerate all documentation * json: fixup dhchap_ctrl_key definitions * fabrics: Fix build_options() return values * fabrics: sanitize dump-config output * Fix poll.h includes * build: Drop -nostdinc for LibreSSL header checks * ioctl: Honor rae in nvme_get_nsid_log * build: Add support to build against LibreSSL * rpmbuild: Enable 'make rpm' to build rpm pkgs #408 * mi: unify MI Get Log Page function with ioctl API * python: add missing ctrl attrs to Python bindings * mi-mctp: Add timeout support to MCTP transport * mi: Add maximum More Processing Required limit API * mi: Add endpoint get/set timeout API ==== libvirt ==== Version update (8.5.0 -> 8.6.0) Subpackages: libvirt-client libvirt-daemon libvirt-daemon-config-network libvirt-daemon-driver-interface libvirt-daemon-driver-libxl libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-qemu libvirt-daemon-xen libvirt-libs - Update to libvirt 8.6.0 - Many incremental improvements and bug fixes, see https://libvirt.org/news.html#v8-6-0-2022-08-01 - spec: Don't redefine libexecdir boo#1201565 ==== mokutil ==== Version update (0.5.0 -> 0.6.0) - Update to 0.6.0 + 6c98907 SBAT revocation update support + 0276891 mokutil: Add trust_mok_keys and untrust_mok_keys + 57bc385 mokutil: enable setting fallback verbosity and noreboot mode + b15e7c4 util: add the missing stdio.h - Drop mokutil-fix-missing-header.patch (upstream) ==== mpg123 ==== Version update (1.30.1 -> 1.30.2) Subpackages: libmpg123-0 mpg123-openal - Update to version 1.30.2 * Only use EWOULDBLOCK if the macro is defined. ==== nvme-cli ==== Version update (2.1~rc0 -> 2.1.1) Subpackages: nvme-cli-bash-completion nvme-cli-zsh-completion - Update to version 2.1.1: * build: Update version to v2.1.1 * build: Extend release script to support micro version releases * build: Add minimum build requirement on libnvme * wrapper: Add weak nvme_init_copy_range_f1 symbol * build: Update version before regenerating docs * build: Update release version rules - Update to version v2.1: * nvme: Do not print error message in collect_effects_log helper * fabrics: Remove dhchap-ctrl-secret from discover/connect-all * nvme-print: sanitize the get-feature async event config output * nvme: Set default rae value for nvme_get_nsid_log users * fabrics: Avoid nvme_scan_ctrl when disconnecting * print: Fix nvme_id_uuid_list ==== oath-toolkit ==== - Use %_pam_moduledir instead of hardcoding %{_lib}/security - Define macro _pam_moduledir if not set to fix builds for Leap and SLE ==== opencc ==== Version update (1.1.3 -> 1.1.4) Subpackages: libopencc1_1 opencc-data - update to 1.1.4: * Add python 3.10 support * remove support for python < 3.7 and node 10.x * small bugfixes - add fix-soversion.patch for fixing the leftover .so version tag ==== polkit ==== Subpackages: libpolkit-agent-1-0 libpolkit-gobject-1-0 typelib-1_0-Polkit-1_0 - add split-provides for polkit:/usr/bin/pkexec. (bsc#1202070) ==== poppler ==== Version update (22.07.0 -> 22.08.0) Subpackages: libpoppler-cpp0 libpoppler-glib8 poppler-tools - update to 22.08.0: * Fix rendering text on some forms * CairoOutputDev: Support Type3 charprocs having Resources * Fix crashes on malformed files ==== poppler-qt5 ==== Version update (22.07.0 -> 22.08.0) - update to 22.08.0: * Fix rendering text on some forms * CairoOutputDev: Support Type3 charprocs having Resources * Fix crashes on malformed files ==== python-Genshi ==== Version update (0.7.5 -> 0.7.7) - Update to 0.7.7: * Declared setuptools as the build backend (#65) * Fixed deprecation warnings caused by escape sequences in regex pattern strings (#63) - Changes from 0.7.6: * Added support for Python 3.10 and 3.11 (#54, #56, #58) * Replaced assertEquals with assertEqual. assertEquals was deprecated in Python 3.2. (#42) * Removed used of element.getchildren() which has been removed from the Python standard library elementtree in Python 3.9. (#57) * Added support for Python 3.10 by using CodeType.replace in `build_code_chunk` to make code object updates more robust against changes in CodeType. (#49) * Moved tests and releases workflows to GitHub Actions (#61, #51) * Fixed reference leak in Markup.join C implementation. (#47) * Sort directives only by directive index. Previously they were sorted by the class, namespace and arguments of the directives. This was acceptable in Python 2, but is a bug in Python 3 since some the arguments may not be comparable. (#44) * Add support for msgctxt to i18n. (#13) * Implemented skipping of empty attributes during translation to match the behaviour during translation extraction (i.e. don't try to translate empty strings that are not extracted). (#38) * Ported setuptools options to declarative config in setup.cfg. (#40) * Removed used of deprecated setuptools Feature in setup.py. (#39) - Removed patches, already in upstream: * Genshi-pr39-fix-setuptools-extension.patch * Genshi-pr49-fix-python310-tests.patch ==== python-cffi ==== Version update (1.15.0 -> 1.15.1) - update to 1.15.1: * If you call ffi.embedding_api() but donât write any extern âPythonâ function there, then the resulting C code would fail an assert. Fixed. * Updated Windows/arm64 embedded libffi static lib to v3.4.2, and scripted to ease future updates (thanks Niyas Sait!) ==== python-cryptography ==== Version update (37.0.2 -> 37.0.4) - update to 37.0.4: * updated wheels to b ecompiled against openssl 3.0.5 ==== python-gobject ==== Version update (3.42.1 -> 3.42.2) Subpackages: python310-gobject python310-gobject-Gdk python310-gobject-cairo - Update to version 3.42.2: + Error out instead of crashing when marshaling unsupported fundamental types in some cases. + Add a workaround for a PyPy 3.9+ bug when threads are used. + Fix crashes when marshaling zero terminated arrays for certain item types. + Fix a crash/refcounting error in case marshaling a hash table fails. + Make the test suite pass again with PyPy. + tests: support running tests with (MSVC) CPython 3.8+ on Windows. + interface: Fix leak when overriding GInterfaceInfo. + setup.py: look up pycairo headers without importing the module (helps with building on Windows and MSVC CPython 3.8+). - Work around vendored distutils in setuptools >= 60 incorrectly installing pkgconfig files into the wrong libdir ==== python-hatchling ==== Version update (1.4.1 -> 1.6.0) - update to version 1.6.0: * Changed: + When no build targets are specified on the command line, now default to sdist and wheel targets rather than what happens to be defined in config + The code version source now only supports files with known extensions + Global build hooks now run before target-specific build hooks to better match expected behavior * Added: + The code version source now supports loading extension modules + Add search-paths option for the code version source * Fixed: + Fix removing sources using an empty string value in the mapping + The strict-naming option now also applies to the metadata directory of wheel targets - update to version 1.5.0: * Added: + Support the final draft of PEP 639 + Add strict-naming option for sdist and wheel targets * Fixed: Project names are now stored in sdist and wheel target core metadata exactly as defined in pyproject.toml without normalization to allow control of how PyPI displays them - require python 3.7 as minimum version to match upstream requirement ==== python-httpcore ==== Version update (0.14.7 -> 0.15.0) - Update to 0.15.0 * Drop Python 3.6 support (#535) * Ensure HTTP proxy CONNECT requests include timeout configuration. (#506) * Switch to explicit typing.Optional for type hints (#513) * For trio map OSError exceptions to ConnectError (#543) - Fix forgotten test package dep drops -- gh#encode/httpcore#473 ==== python-importlib-metadata ==== Version update (4.11.4 -> 4.12.0) - update to 4.12.0: * py-93259: Now raise ``ValueError`` when ``None`` or an empty string are passed to ``Distribution.from_name`` (and other callers). ==== python-kiwi ==== Version update (9.24.41 -> 9.24.45) - Bump version: 9.24.44 â 9.24.45 - Umount device before cloning In case a clone should be created from a partition we need to make sure to umount the device after sync and prior cloning. Otherwise the clone operation is not safe because the rsynced data might still be in memory and not synced out to the block device. - Fixed custom disk start sector setup The attribute disk_start_sector allows to specify a custom start sector for the first partition of the disk. On GPT tables everything works nicely, on DOS tables the used tools fdisk/sfdisk are not able to manage the start/end values of subsequent partitions if the first partition doesn't start with the tooling default. This patch allows to set the start sector after the partition table has been created - Fixed CentOS-8 repo setup - Bump version: 9.24.43 â 9.24.44 - Make sure to rebuild rpm database For rpm based distributions make sure to call rpm --rebuilddb unconditionally prior using rpm with the chroot. This Fixes #2165 - github: Refresh issue template to cover more operating scenarios KIWI is often used for cross-distribution image builds, so we should ask for that information when appropriate. Additionally, clarify "OBS" as "Open Build Service" to disambiguate. Finally, add a line about Koji since Koji can run kiwi to build images now. - Fixed unit tests - Forcefully disable versionlock plugin in DNF [ INFO ]: 09:39:08 | Uninstalling system packages (chroot) [ INFO ]: 09:39:08 | Using package manager backend: dnf [ INFO ]: 09:39:08 | --> package: linux-firmware [ INFO ]: 09:39:08 | Uninstall system packages (chroot) [ DEBUG ]: 09:39:08 | EXEC: [chroot /tmp/myimage8/build/image-root dnf --config /kiwi_v708wllp -y --releasever=8 autoremove linux-firmware] [ INFO ]: Processing: [########################################] 100% [ ERROR ]: 09:39:08 | KiwiPackagesDeletePhaseFailed: System package deletion failed: Package deletion failed: Error: Locklist not set The versionlock plugin does not bring any benefit anyways as we completely override plugin configs. Also refactor configparser related stuff a bit. Signed-off-by: Igor Raits <igor.raits(a)gmail.com> - Support squashfs in custom partitions When using squashfs in a custom partitions setup like the following: <partitions> <partition ... filesystem="squashfs"/> </partitions> The build fails because the filesystem needs to be created using the create_on_file() API and not the create_on_device() API. In addition the size estimation is bogus when using squashfs and cannot be pre-calculated because we only know how much space the filesystem really needs after mksquashfs as worked on the data and the compression. Thus this commit also relaxes the required size check in case of squashfs. Last but not least a squashfs filesystem does not provide label or UUID and can only be referenced by the PARTUUID it gets dumped on or by the native unix device node. As the unix node is a loop during build time of the image and meaningless this commit also forces by-partuuid mapping in fstab when mounting the squashfs based device. - Fixed use of CommandCapabilities The class allows to check for data produced on stdout and stderr. However, programs reporting data on stderr usually fails with an exit code != 0. If the command is not called with raise_on_error=False it will never be possible to catch information from stderr. As we don't know if programs returns a failed exit code even on their e.g --usage message we should always pass the no raise option to make this more useful - Fix volume mount path and adapt unit tests Signed-off-by: David Cassany <dcassany(a)suse.com> - Handle older versions of setfiles correctly In older versions of setfiles we need a two pass setup First set the policy, second apply the security context. This commit checks in the usage message of setfiles which invocation syntax is required - Bump version: 9.24.42 â 9.24.43 - Fixed error handling for setfiles policy lookup Errors from os.scandir were not catched. In addition the path to run scandir was not properly created - Mount /sys also for disks.sh /sys is needed to be able to run dracut in disks.sh - Fix btrfs volume mounting If the second argument of os.path.join is an absolute directory, the result would be that directory. The intention is to produce a subdirectory of the mountpoint though. So pass a relative path. Without the fix, kiwi would try to e.g mount the /var subvolume of the image over the /var of the host, screwing everthing up of course :-) - Prefer file based syscall in kexec when possible Use file based syscall in kexec if available. This is needed to support boot on an secure boot enabled system and is in general more reliable to boot into the system on real hardware platforms - Bump version: 9.24.41 â 9.24.42 ==== python-libvirt-python ==== Version update (8.5.0 -> 8.6.0) - Update to 8.6.0 - Add all new APIs and constants in libvirt 8.6.0 ==== python-numexpr ==== - Fix requirements ==== python-psutil ==== - Fix tests: setuptools changed the builddir library path and does not find the module from it. Use the installed platlib instead and exclude psutil.tests only later. - Refresh skip-obs.patch ==== python-pycairo ==== - Work around vendored distutils in setuptools >= 60 incorrectly installing pkgconfig files into the wrong libdir - Deduplicate files in python_sitearch ==== python-scipy ==== - Keep lowercase egg-info despite setuptools 60+ ==== python-urllib3 ==== Version update (1.26.9 -> 1.26.11) - update to 1.26.11 * Fix OverflowError when TLS is used on some Python versions - update to 1.26.10: * Removed support for Python 3.5 * Fixed an issue where a ``ProxyError`` recommending configuring the proxy as HTTP instead of HTTPS could appear even when an HTTPS proxy wasn't configured. - refresh remove_mock.patch with extra mock usages ==== python-wcwidth ==== - Add patch remove-pkg_resources.patch: * Use importlib.metadata rather than pkg_resources. - Since importlib.metadata is not as a stickler as pkg_resources is, remove multibuild. ==== read-only-root-fs ==== Version update (1.0+git20200730.1243fd0 -> 1.0+git20220801.cbb90bc) - Update to version 1.0+git20220801.cbb90bc: * Add another workaround for read-only subvolumes (boo#1202000) * Correctly declare mount-overlay.sh as Bash file - Update source service URL ==== rsync ==== - Security fix: [bsc#1201840, CVE-2022-29154] * arbitrary file write vulnerability via do_server_recv function * Added patch rsync-rsync-CVE-2022-29154.patch ==== unbound ==== Version update (1.16.1 -> 1.16.2) Subpackages: libunbound8 unbound-anchor - update to 1.16.2 (boo#1202031 boo#1202033) * Features - Merge #718: Introduce infra-cache-max-rtt option to config max retransmit timeout. * Bug Fixes - Fix the novel ghost domain issues CVE-2022-30698 and CVE-2022-30699. - Fix bug introduced in 'improve val_sigcrypt.c::algo_needs_missing for one loop pass'. - Merge PR #668 from Cristian RodrÃguez: Set IP_BIND_ADDRESS_NO_PORT on outbound tcp sockets. - Fix verbose EDE error printout. - Fix dname count in sldns parse type descriptor for SVCB and HTTPS. - For windows crosscompile, fix setting the IPV6_MTU socket option equivalent (IPV6_USER_MTU); allows cross compiling with latest cross-compiler versions. - Merge PR 714: Avoid treat normal hosts as unresponsive servers. And fixup the lock code. - iana portlist update. - Update documentation for 'outbound-msg-retry:'. - Tests for ghost domain fixes. ==== util-linux ==== Subpackages: libblkid1 libblkid1-32bit libfdisk1 libmount1 libmount1-32bit libsmartcols1 libuuid1 libuuid1-32bit util-linux-lang - exclude bash-completion stuff for programs that are in util-linux-systemd from util-linux for real. ==== util-linux-systemd ==== - exclude bash-completion stuff for programs that are in util-linux-systemd from util-linux for real. ==== vim ==== Version update (9.0.0073 -> 9.0.0135) Subpackages: gvim vim-data vim-data-common - Updated to version 9.0.0135, fixes the following problems * Coverity warns for double free. * Some compilers warn for using an uninitialized variable. (Tony Mechelynck) * No test for what patch 8.1.1424 fixes. * When switching window in autocmd the restored cursor position may be wrong. * Star register is changed when deleting and both "unnamed" and "unnamedplus" are in 'clipboard'. * Error in autoload script not reported for 'foldexpr'. * Compiler warning for size_t to int conversion. * Command line completion of user command may have duplicates. (Dani Dickstein) * Cannot interrupt global command from command line. * ModeChanged event not triggered when leaving the cmdline window. * Using "terraform" filetype for .tfvars file is bad. * ":write" fails after ":file name" and then ":edit". * Tabline is not redrawn when entering command line. * MS-Windows: CTRL-[ on Belgian keyboard does not work like Esc. * Pattern for detecting bitbake files is not sufficient. * Fuzzy argument completion doesn't work for shell commands. * No error when assigning bool to a string option with setwinvar(). * Duplicate error number. * Plugins cannot change v:completed_item. * Sway config files are recognized as i3config. * Cursor restored unexpected with nested autocommand. * Conditions are always true. * Flag "new_value_alloced" is always true. * Long quickfix line is truncated for :clist. * missing include file in timer_create configure check. * Scrollback can be wrong after redrawing the command line. * Get hit-enter prompt for system() when '!' is in 'guioptions'. * Invalid memory access in diff mode with "dp" and undo. * Reading past end of line with insert mode completion. * If running configure with cached results -lrt may be missing. * Illegal memory access when pattern starts with illegal byte. * Illegal byte regexp test doesn't fail when fix is reversed. * Condition always has the same value. * Configure check for timer_create may give wrong error. * Writing over the end of a buffer on stack when making list of spell suggestions. * Help tag generation picks up words in code examples. * "nocombine" is missing from synIDattr(). * has() is not strict about parsing the patch version. * The command line takes up space even when not used. * When 'cmdheight' is zero pressing ':' may scroll a window. * Virtual text not displayed if 'signcolumn' is "yes". * Text of removed textprop with text is not freed. * No test for what patch 9.0.0155 fixes. * Tiny chance that creating a backup file fails. * Cannot put virtual text after or below a line. * Breakindent test fails. * Cannot build with small features. * Code has more indent than needed. * Cursor positioned wrong with virtual text after the line. * Expanding file names fails in directory with more than 255 entries. * Unused variable. * Coverity complains about possible double free. * Compiler warning for int/size_t usage. * Cursor position wrong when inserting around virtual text. * Virtual text with Tab is not displayed correctly. * Multi-byte characters in virtual text not handled correctly. * Virtual text after line moves to joined line. (Yegappan Lakshmanan) * No test for text property with column zero. ==== xdg-utils ==== Version update (1.1.3+20201113 -> 1.1.3+20210805) - Update to version 1.1.3+20210805: * xdg-email fails on kde with desktop files #187 - switch to obs_scm

1 0

new package: yast-in-container
by josef Reidinger 05 Aug '22

05 Aug '22

Hi, let me introduce new package that is send to factory called yast-in-container. As name said it is about running YaST tool in container. The main advantage is for system that tries to be minimal and used only as workload runner. This way if YaST is needed it can be run as container and then again removed without messing any dependencies. The package itself is just shell script that run container and depends only on podman or docker. Project page is at https://github.com/yast/yast-in-container Thanks Josef

1 0

Tumbleweed - Review of the weeks 2022/29-31
by Dominique Leuenberger / DimStar 05 Aug '22

05 Aug '22

Dear Tumbleweed users and hackers, I was in the fortunate situation of enjoying two weeks of offline time. Took a little bit of effort, but I did manage to not start my computer a single time (ok, I cheated, checked emails, and staging progress on the phone browser). During this time, Richard has been taking good care of Tumbleweed – with the limitations that were put upon him, like reduced OBS worker powers and the like. In any case, I still do want to give you an overview of what changed in Tumbleweed during those three weeks. There was a total of 8 snapshots released (0718, 0719, 0725, 0728, 0729, 0731, 0801, 0802). A few of those snapshots have only been published, but no announcement emails were sent out, as there were also some mailman issues on the factory mailing list. Those snapshot accumulated the following changes: * Linux kernel 5.18.11 * Pipewire 0.3.55 & 0.3.56 * nvme-cli 2.1~rc0 * XOrg X11 SFFmpeg21.1.4 * ffmpeg 5.1 * qemu 7.0 * AppArmor 3.0.5 * Poppler 22.07.0 * polkit: split out pkexec into seperate package to make system hardening easier (to avoid installing it jsc#PED-132 jsc#PED-148). The next snapshot being tested is currently 0804, which mostly looks good with some ‘weird’ things around transactional servers. This snapshot and the current state of staging projects promise to deliver these items soon (for any random value of time to fit into ‘soon’): * Mesa 22.1.4 * Mozilla Firefox 103.0.1 * AppArmor 3.0.6 * gdb 12.1 * Linux kernel 5.18.15, followed by 5.19 * libvirt 8.6.0 * nvme-cli 2.1.1 (out of RC phase) * KDE Plasma 5.25.4 * Samba 4.16.4 * Postfix 3.7.2 * RPM 4.17.1, with some major rework on the spec, i.e previously bundled things like debugedit and python-rpm-packaging are split out) * python-setuptools 63.2.0 * Python 3.10.6 * CMake 3.24.0 Cheers, Dominique

2 1

Location for Gnome script to be run at login
by Larry Finger 05 Aug '22

05 Aug '22

Hi, I have run into a problem using VirtualBox with Wayland-based guests. The script that enables clipboard sharing and screen resizing under X11 uses a system service script; however for Wayland graphics, the appropriate commands cannot be run until the user logs in. I do not know how to create a user-based service, nor do I know where to place a script so that it will be run for every user that logs in. Any help will be appreciated. Larry

4 5

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 04 Aug '22

04 Aug '22

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have had problems for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - radare2-iaito: Uninstallable: nothing provides libr_anal.so.5.5.4 needed by radare2-iaito-5.3.1.i586 Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

1 0

Re: x86_64 architecture level requirements, x86-64-v2 for openSUSE Factory
by Dan Čermák 04 Aug '22

04 Aug '22

Simon Lees <sflees(a)suse.de> writes: > On 8/1/22 18:17, Dan Čermák wrote: >> Simon Lees <sflees(a)suse.de> writes: >> >>> On 7/28/22 23:40, Marius Kittler wrote: >>>> Am Donnerstag, 28. Juli 2022, 15:30:15 CEST schrieb Neal Gompa: >>>>> To the best of my knowledge, no community distribution has elected to >>>>> move to a higher level yet. It has been brought up a few times in >>>>> Fedora and Arch, but as far as I know, the change hasn't happened yet >>>>> in a way that eliminates x86_64-v1 in these distributions. >>>> >>>> When I've been following-up Arch Linux correctly, they've decided to provide >>>> x86_64-v3 packages *in addition* to their existing x86_64 packages (which will >>>> remain unaffected for now). The option to make x86_64-v2 the new baseline >>>> (replacing existing x86_64 packages) was also on the table but they decided >>>> against it because x86_64-v2 would bring almost no benefit, at least not enough >>>> to justify the hardware requirement. (Note that providing x86_64-v3 packages >>>> has not been carried out yet. It looks like they want to focus on their build >>>> automation first. Not a concern for openSUSE, though.) >>>> >>>> I suppose this decision makes most sense. No users on old hardware will be >>>> negatively affected and users with newer hardware can switch to x86_64-v3 >>>> packages. >>> >>> The simplest way of achieving this, that would on the other hand use the >>> most build resources would be to add a new arch "x86_64-v3" which would >>> leave people with a choice. Whether we have the spare build power for >>> this would be the main question. >> >> I think this is the best way forward: rebuild a performance critical >> subset of the packages for x86_64 v3 or v2 and leave the rest at >> v1. Unfortunately this requires support for sub-architectures in rpm, >> which is afaik not yet implemented (and iirc upstream was hesitant to >> add support for that). > > Yeah I think what your suggestion makes most sense if its technically > doable, although that also involves figuring out which packages would > benefit most. My suggestion would get around that by using a rather > blunt instrument approach in rebuilding everything so in the same way we > have a "armv6l" and "armv7l" we have "x86_64" and "x86_64_v3" or > alternatively "x86_64_legacy". In this approach we end up building > everything twice hence being rather blunt, and either we then encourage > most users to move to the "x86_64_v3" repos or we make it very clear > that x86_64 is moving to v3 and users with insufficient hardware need to > move to the "x86_64_legacy" repos, we could even possibly look at > putting a warning in zypper to not allow incompatible systems to upgrade > once we switch to v3. But as I said in my previous email this approach > would require obs having the build power. If ALP ends up going to V3 we > could also use this approach to build community editions with V1. Yes this is certainly an option, but this nearly double the load on our x86_64 workers for a marginal benefit for the majority of the packages. And another issue: it will double the storage requirements for the mirrors as well. Cheers, Dan -- Dan Čermák <dcermak(a)suse.com> Software Engineer Development tools SUSE Software Solutions Germany GmbH Frankenstrasse 146 90461 Nürnberg Germany (HRB 36809, AG Nürnberg) Managing Director/Geschäftsführer: Ivo Totev, Andrew Myers, Andrew McDonald, Boudien Moerman

1 0

[opensuse-factory] reproducible builds status 2022-07
by Bernhard M. Wiedemann 04 Aug '22

04 Aug '22

Hi, I had another rather uneventful month with a decent number of bugreports and patches. There is a list of new package notes at the end... last month's status: https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… Last months' reproducible builds project updates (including my work): https://reproducible-builds.org/reports/2022-05/ https://reproducible-builds.org/reports/2022-06/ I uploaded https://rb.zq1.de/compare.factory-20220731/ today https://rb.zq1.de/spec/glossar.txt explains the meaning of below values: total-packages: 14469 (+45) build-tried: 14458 (+46) build-failed: 26 (-3) build-n-a: 179 (+7) build-succeeded: 14253 (+42) build-official-failed+na: 121 (-21) build-compare-failed: 527 (+7) build-compare-succeeded: 13726 (+35) verify-failed: 375 (-4) verified-semi-reproducible: 11285 (+5) bit-by-bit-identical: 13472 (+40) not-bit-by-bit-identical: 783 (+4) not-bit-by-bit-identicalcheck: 781 (+2) https://rb.zq1.de/compare.factory-20220731/graph.png shows the change over time https://rb.zq1.de/compare.factory-20220731/unreproduciblerings.txt lists very unreproducible core packages (bootstrap+DVD) Of the badly unreproducible packages, 4 were in ring0 67 were in ring1 That makes it 71/3316 => 2.14 % which is below the overall average of 527/14253 => 3.70 % 783/14253 => 5.49 % of packages are not perfectly reproducible ==> ./gsequencer/.rb.notes <== toolchain fop date+time from PAGESIZE="letter" fop -c fop-letter.xml -fo ./developers-book-letter.fo -pdf ./pdf/developer-manual-letter.pdf ==> ./python-azure-cognitiveservices-search-imagesearch/.rb.notes <== python310 .pyc ASLR ==> ./wasi-libc/.rb.notes <== => https://github.com/WebAssembly/wasi-libc/pull/313 readdir .a files ; minor ==> ./python-joblib/.rb.notes <== = https://github.com/joblib/joblib/issues/758 FTBFS-j1 python .pyc ASLR+readdir ==> ./python-yq/.rb.notes <== FTBFS 20220707 emailed package maintainer ==> ./jackson-dataformat-xml/.rb.notes <== date+time, xmvn random uuid, javadoc, other ==> ./jackson-dataformats-text/.rb.notes <== date+time, xmvn random uuid, javadoc, other ==> ./jflex-maven-plugin/.rb.notes <== xmvn random uuid, javadoc ==> ./jnacl/.rb.notes <== xmvn random uuid, javadoc, other ==> ./kubernetes1.24/.rb.notes <== = https://github.com/kubernetes/kubernetes/issues/110928 random tmpdir unknown/random ==> ./lightcouch/.rb.notes <== xmvn random uuid, javadoc ==> ./syft/.rb.notes <== go1.18 parallelism build-id ==> ./influxdb/.rb.notes <== go 1.18 parallelism ==> ./librsb/.rb.notes <== #= https://bugzilla.opensuse.org/show_bug.cgi?id=1198822 compile-time CPU-detection ==> ./openssl-1_0_0/.rb.notes <== = https://bugzilla.opensuse.org/show_bug.cgi?id=1201627 FTBFS 2023-05-26 ? https://github.com/openssl/openssl/pull/4639 date ==> ./javaparser/.rb.notes <== = https://github.com/javaparser/javaparser/issues/3650 date+time ; java maven/xmvn random uuid ==> ./replacer/.rb.notes <== java maven jar javadoc html ; date copyright year ==> ./jc/.rb.notes <== python .pyc toolchain - low entropy +++ new /usr/lib/python3.10/site-packages/jc/parsers/__pycache__/time.cpython-310.pyc (hex) ==> ./jsonrpc-glib/.rb.notes <== = https://gitlab.gnome.org/GNOME/jsonrpc-glib/-/issues/2 FTBFS-j1 osc build --vm-type=kvm -j1 --clean --noservice standard ==> ./python311/.rb.notes <== PGO + pyc ASLR + other ==> ./univocity-parsers/.rb.notes <== date|readdir ; strip-nd javadoc ==> ./pipewire/.rb.notes <== = https://bugzilla.opensuse.org/show_bug.cgi?id=1201579 toolchain filesys via doxygen-1.9.3 ==> ./python-datashader/.rb.notes <== python310 .pyc ASLR ==> ./sundials/.rb.notes <== FTBFS-j1 osc build -M mvapich2 --vm-type=kvm -j1 --clean --noservice standard ==> ./python-PyCBC/.rb.notes <== python .pyc ASLR/readdir ==> ./ocaml-camlp-streams/.rb.notes <== parallelism ==> ./casacore/.rb.notes <== #=> SR 990086 CPU /usr/lib64/mpi/gcc/openmpi1/lib64/libcasa_tables.so.7 differs in assembler output ==> ./solanum/.rb.notes <== #=> https://github.com/solanum-ircd/solanum/pull/337 race? ==> ./libayatana-appindicator/.rb.notes <== mono dll toolchain ==> ./azure-cli/.rb.notes <== python .pyc ASLR toolchain ==> ./deno/.rb.notes <== rust toolchain? binary ==> ./jeromq/.rb.notes <== date+time, xmvn random uuid, javadoc ==> ./zabbix/.rb.notes <== minor jar ==> ./libzypp/.rb.notes <== = https://bugzilla.opensuse.org/show_bug.cgi?id=1201579 toolchain readdir doxygen in libzypp.doxytag ?toolchain ASLR doxygen doc navtree.js ==> ./acarsdec/.rb.notes <== #=> SR 990082 CPU from march=native ==> ./lsof/.rb.notes <== #=>https://github.com/lsof-org/lsof/pull/217 #= https://bugzilla.opensuse.org/show_bug.cgi?id=1199709 hostname ==> ./sysstat/.rb.notes <== #=> https://github.com/sysstat/sysstat/pull/330 FTBFS-j1 #= https://github.com/sysstat/sysstat/issues/329 FTBFS-j1 ==> ./solaar/.rb.notes <== python310 pyc ASLR ==> ./python-pyglet/.rb.notes <== python .pyc ASLR/readdir ==> ./buzztrax/.rb.notes <== = https://github.com/Buzztrax/buzztrax/issues/89 parallelism | gtk-doc toolchain #=> https://github.com/Buzztrax/buzztrax/pull/88 date ==> ./nim/.rb.notes <== = https://bugzilla.opensuse.org/show_bug.cgi?id=1201371 FTBFS-j1 osc build --vm-type=kvm -j1 --clean --noservice standard ==> ./python-pyquil/.rb.notes <== = https://bugzilla.opensuse.org/show_bug.cgi?id=1201567 FTBFS ==> ./python-brotlicffi/.rb.notes <== = https://bugzilla.opensuse.org/show_bug.cgi?id=1201127 python sort readdir,toolchain ==> ./slurm/.rb.notes <== => SR 990637 LTO+tar ==> ./rust-keylime/.rb.notes <== rust/LLVM issue rust1.61 | libLLVM14-14.0.6 Ciao Bernhard M.

1 0

Additional maintainers wanted: LXQt
by Michael Vetter 04 Aug '22

04 Aug '22

Hi, Since 2015 I'm maintaining LXQt. In recent months I see that it became harder for me to do this properly due to other obligations and I would like to get some help with it. In case someone is interested in co-maintaining, or taking over completely, please send a request to https://build.opensuse.org/project/show/X11:LXQt or send me a mail :-) All help is appreciated. Feel free to contact me for any questions. Best, Michael

1 0

Break the summer holiday silence
by Dominique Leuenberger / DimStar 04 Aug '22

04 Aug '22

Hi all, This is mainly a 'test mail' to confirm that the Factory mailing list actually still works :) It is awfully quiet here at the moment - and as not even TW snapshot announcement mails arrive, this is more than scary. so we will try to use this mail to confirm that thins are at least woring generally. Sorry for the noise. Cheers, Dominique

1 0

New Tumbleweed snapshot 20220802 released!
by Dominique Leuenberger 04 Aug '22

04 Aug '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: mxml (3.3 -> 3.3.1) pipewire tiff webkit2gtk3 (2.36.4 -> 2.36.5) webkit2gtk3-soup2 (2.36.4 -> 2.36.5) yast2-trans (84.87.20220729.608d4643aa -> 84.87.20220730.27a80cdf03) zlib-ng-compat === Details === ==== mxml ==== Version update (3.3 -> 3.3.1) - update to 3.3.1: * Fixed POSIX thread cleanup bugs ==== pipewire ==== Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-lang pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Recommend pipewire-alsa (instead of alsa-plugins-pulse) from pipewire-pulseaudio (boo#1201409) ==== tiff ==== Subpackages: libtiff5 libtiff5-32bit - security update: * CVE-2022-34526 [bsc#1202026] + tiff-CVE-2022-34526.patch ==== webkit2gtk3 ==== Version update (2.36.4 -> 2.36.5) Subpackages: WebKit2GTK-4.1-lang libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles - Update to version 2.36.5 (boo#1201980): + Add support for PAC proxy in the WebDriver implementation. + Fix video playback when loaded through custom URIs, this fixes video playback in the Yelp documentation browser. - Fix WebKitWebView::context-menu when using GTK4. - Fix LTO builds with GCC. - Fix several crashes and rendering issues. + Security fixes: CVE-2022-32792, CVE-2022-32816. - Drop webkit2gtk3-fix-build.patch: fixed upstream. ==== webkit2gtk3-soup2 ==== Version update (2.36.4 -> 2.36.5) Subpackages: WebKit2GTK-4.0-lang libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 typelib-1_0-JavaScriptCore-4_0 typelib-1_0-WebKit2-4_0 webkit2gtk-4_0-injected-bundles - Update to version 2.36.5 (boo#1201980): + Add support for PAC proxy in the WebDriver implementation. + Fix video playback when loaded through custom URIs, this fixes video playback in the Yelp documentation browser. - Fix WebKitWebView::context-menu when using GTK4. - Fix LTO builds with GCC. - Fix several crashes and rendering issues. + Security fixes: CVE-2022-32792, CVE-2022-32816. - Drop webkit2gtk3-fix-build.patch: fixed upstream. ==== yast2-trans ==== Version update (84.87.20220729.608d4643aa -> 84.87.20220730.27a80cdf03) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20220730.27a80cdf03: * Translated using Weblate (Slovak) ==== zlib-ng-compat ==== Subpackages: libz-ng-compat1 zlib-ng-compat-devel - Add baselibs.conf

1 0