January 2023 - openSUSE Factory - openSUSE Mailing Lists

openSUSE Release Engineering meeting 25.01.2023
by Lubos Kocman 26 Jan '23

26 Jan '23

All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting Meeting is hosted here https://meet.opensuse.org/ReleaseEngineeringMeeting ## Attendees rbrown, DimStar, lkocman, dirk, wengel, DocB, ddemaio **THE MEETING ON 1ST of FEBRUARY WILL BE SKIPPED DUE TO HACKWEEK** https://hackweek.opensuse.org/ ## Leap Code submission deadline for SLES 15 SP5 Beta4 is today (Jan 25th) at 15:00. Leap Builds were stuck on https://bugzilla.opensuse.org/show_bug.cgi?id=1207395 and previously https://bugzilla.suse.com/show_bug.cgi?id=1206718 Due to this we were not able to produce a decent build that would give us good idea about quality. I'm bit worried that the actual beta release might be delayed. Cisco openh264 setup is finialized on our side https://news.opensuse.org/2023/01/24/opensuse-simplifies-codec-install/ ## openSUSE Tumbleweed openSUSE:Factory build fail stats: 217 failed 16 unresolvable (last week: 21 / 24) https://tinyurl.com/ysy4nnnz * Staging:H Ruby 3.2 made some progress, only 3 more yast build fails (y2-config-management, y2-packager, y2-storage-ng) * Staging:L has a few failures collected: * boost: breaks libreoffice (incl. libetonyek) * gpg2: breaks gpgme * ant and xmlgraphics-common: breaking ant-antlr and xmlgraphics- fop * Staging:M test to also build python311 modules * Staging:N openssl-3-as-default testing: almost ready! All build fails have been fixed (or are in the queue) * Staging:O: preparation work to identify the minimal list of 'i586' builds to enable in openSUSE:Factory to allow wine/steam to build/install (currently 992 packages, and counting; big part of it is for rpmlint and such things) * Staging:Gcc7: early experiments to set GCC 13 as distro compiler * openSUSE:Factory has switched to a 4k RSA key * https://news.opensuse.org/2023/01/23/new-4096-bit-signing-key/ * osc build (with chroot) complains about missing keys (we did not do a full rebuild, osc gets the 4k project key, RPMs are signed with the 2k key. workaround: use osc build --vm-type=kvm (setup oscrc to have sufficient ram and disk size; I use 2GB of RAM and 10GB disk for most cases) i586 carve-out from Factory => Migration (manual so far) is possible for users. The first 'zypper dup' after changing the repo could include a bunch of 'package downgrades' as the rebuild counters are not synced across projects. Automatic migration of users (by means of openSUSE-release) will happen by end of January (giving the braves ones time to test and report issues before we mass-switch) ## Richard (MicroOS) Desktop-GNOME: The Road to Release: transactional-update-notifier is in Factory! WIP making it configured by default Working on a "mod-check" tool to report the following to users List of installed (1st party) packages, with comparisions to both an upstream pristine list and previous snapshots Automatically reset official packages to that upstream pristine list, or previous snapshots Any 3rd party packages and their origin Any known unsupported configurations/alterations and offer remedies if possible mod-check doesn't really 'check' as much as planned at the moment, instead going way further and effectively reinstalling MicroOS Desktop (GNOME) in place, making that new snapshot the new boot target. This will be awesome for any user who wants to 'freshen' up an otherwise heavily altered MicroOS Desktop, or when major Tumbleweed/MicroOS changes occur that otherwise cant be easily modeled in patterns. It also potentially could be a method of migrating non-transactional systems to a transactional one. Heavy testing/development underway..and possibly a rename if mod-check doesn't start actually -checking stuff soon. Bugs still WIP osinfo-db still doesn't recognise MicroOS as a seperate distribution - debates with upstream ongoing Working on YaST-less installation media with FDE by default ## Max Leap Micro 5.4 * The project has been bootstrapped * The missing bits ** Tweak Leap specific patches ** Enable pkglistgen lkocman: is on it Leap 15.5 * The fixed kernel for bsc#1206718 has got merged to SLE15-SP5(just yesterday) * Build stats in Backports(x86_64): 8 unresolvables, 59 fails(last week: 8 unresolvables, 54 fails) ## Guillaume - Arm Tumbleweed: * Blocked due to a broken binutils patch for armv7. Will be unblocked by https://build.opensuse.org/request/show/1060656 * WiFi works again on RPi3/4 (and other systems): https://bugzilla.suse.com/show_bug.cgi?id=1206697 * Pointer Authentication issue, seen in zypper has been fixed: https://bugzilla.suse.com/show_bug.cgi?id=1206684 * NVIDIA: tester with aarch64 server and NVIDIA card wanted - Proprietary drivers are now available for aarch64 (only G06): https://download.nvidia.com/opensuse/tumbleweed/ - New opengpu driver also available in OBS: https://build.opensuse.org/project/monitor/X11:Drivers:Video lkocman to check on who is the aarch64 + nvidia effort blocked on. I recall that there was a chosen point of contact. Leap: * 15.5 aarch64: covered by Leap section above * 15.5 armv7: no blocker ALP: * No aarch64 specific issues WSL: * Works with x86 emulator since appx installer is x86-64, but this is not really an issue since arm64 Win11 includes x86 emulator by default. Steps documented on the wiki to install the appx from download.o.o: https://en.opensuse.org/openSUSE:WSL#With_Appx_from_openSUSE_download_server ## Sarah - s390x Tumbleweed * kdump is fixed (with calibrate.conf by SLE because of blocked builds for s390x) -> Tumbleweed is rolling again Leap: * tests are failing because of timeout (my next ToDo) * qore updated Question: What should we do with packages buildable only on s390x and not on x86? Example: https://build.opensuse.org/package/show/home:AdaLovelace:branches:server:da… lkocman: I'd start with a bug against the package, then let's agree on next steps with maintainer. Please use bug against openSUSE.org choose 3rd party package. Can be used for anything that is from OBS. ## Doug * articles * 4096 bit RSA signing key published (thx to mmeissner) * openh264 article published * openSUSE Community booth at CLT2023 lkocman: Do we have some sort of list/calendar with events where openSUSE is usually present? * GSoC * Updating GSoC wiki pages * New projects being added * Additional admins added * Application nearly complete. * Need to complete "How many potential mentors have agreed to mentor this year?" * Workshop to finalize projects & application scheduled for on Feb. 7 (deadline at 18:00 UTC) * oSC23 * Waiting on contract signature (in legal review) * 13 registered, 9 submissions * FOSDEM * Booth in Building/Hall H (we have traditionally be in Building/Hall K) * Bus has 29 sign ups * Passangers to be briefed on bus departure location * Contact ddemaio if you're in Nuremberg and want to take the bus to FOSDEM. Space may be limited. * FLOSS Weekly * Test call on 26.01 * Podcast scheduled for Feb. 8 ## Dirk * Initial x86_64-v3 glibc hwcaps package has landed in Factory (libxmlb - visible in GNOME repositories openqa runs) * Determine list of extra shared libraries to enable (likely all compression and media decoding libraries (libpng, jpeg and so on) * Helped with OpenSSL 3.x switch and Python 3.11 modules enablement * Starting to draft https://en.opensuse.org/openSUSE:OpenSUSE_Tumbleweed_Maintainer_Policy (draft, will be announced on the mailing list when ~ ready) DimStar: ~150 python modules are currently failing with 3.11, a lot of fallout is expected. (enabling 3.11 will roughly double those numbers judging from the current devel project state) * Continued work on SUSE:ALP:RISCV * force published 15.4 and 15.5 for armv7 builds, openqa builds have been triggered it appears it is set to do post-release testing? * qemu/libseccomp 15.5 failure still in investigation Biggest speedup can be observed by switching zlib to zlib-ng, so looked into fixing the build failures caused by switching to zlibo-ng- compat ## Wolfgang (Package Hub), Scott Bahling Discussion about moving ipxe package to SLE and release ipxe-bootimgs for x86_64 and aarch64 to HPC-Module (SLE-15-SP5). Needs to be accepted by Michal Svec. If that is the case ipxe will be removed from openSUSE:Backports:SLE-15-SP5 and subpackage ipxe-bootimgs for ppc64le and s390x will be released via subpackages repository. Need to sync with Max regarding the package list for subpackages repository for SLE-15-SP5 when he is back from vacation. 15 SP5 Package HUB channel is set up. Stefan did initial testing and looks good. Some packages are still missing, this is on agenda for today and next week. The workshop regarding Package HUB equivalent for ALP Lubos will schedule a call with wolfgang and Scott to ensure that they're in loop for the High Level requirements document. https://en.opensuse.org/openSUSE:ALP/Workgroups/Community/Workshops/Consumi… Package Hub for SLE-15-SP5 product definition added and SCC is currently picking it up so it will be ready for testing with the beta of SLE-15-SP5 ## Maintenance team (Marcus or Maurizio (m4u)) Fixed a long standing issue with gnome-music that was blocking openqa for a long time. 15.4 is working 5.3 is working 15.5 setup TBD (Mid-to-End February would be preferred). Nothing worrysome, preannoucement for 15.3 EOL was sent to mainling list End of December 2022. There were three chromium updates in single week. lkocman: 15.3 EOL could lead to stopping our physical Source DVD effort, as it seems we will not produce. As this was the last release which you could still get on a physical media. Configuration setup problem for Maintenance of Leap 15.4 maintenance updates / openQA Marcus regarding Leap 15.4 Image respin - package set will change, we do need to refresh the packagelist * Lubos to talk to Jan Stehlik, we can't put all on Marcuses shoulder. https://etherpad.opensuse.org/p/ReleaseEngineering-20221110-maintenance-dis… Confirmation that QA/QA-maint team will oversee the setup (issues) Lubos: I was asked to provide requirements for the QA team. Mostly for the GA/current release but also for the update. Lubos will make wiki with requirements (something like maintenance plan perhaps). Marcus will review it. * Leap Micro 5.3 maint setup done ffmpeg - (still unsolved) possible file conflict on the next update, no idea how to avoid vendor switching at the moment. Removing the patch on the openSUSE side (that might contain security fixes) or releasing update on the packman side could fix the issue. Lubos to give Marcus some working contact for the team. ## Adrian - OBS After changing the signing key of Factory without rebuilding the distribution "osc build" using chroot builds run into the problem that gpg verification of the rpm's failed. To tell osc to use also the old gpg key we introduced a temporary openSUSE:Tumbleweed:OldKey project. We will remove this project again after full rebuild of Factory. This should work for all arches. Users get additional question if they want to trust the additional project once. This solves the issue for people who build against openSUSE:Tumbleweed/standard or openSUSE:Factory/snapshot. It does not solve it when building against openSUSE:Factory/standard directly (not the default in OBS). Dirk: Recommended solution is to use the kvm build (add `build-type = kvm` to your ~/.oscrc) Adrian: Agreed that we should aim for switching the osc default here (also wanted by security team). Still some issues to solve to make it more convinient. ## Project maintainer work flow Status * Base policy to be developed Background on topic found at https://etherpad.opensuse.org/p/ReleaseEngineering-20221221 For me it comes down to a matter of communication. A note like 'thx for your SR, I think we should adapt the following ' or ' we are reviewing your SR, and quite stuck with work...' could already change a lot. Silence for more then 4 week is clearly a perfect way to annoy contributors. And the question should be asked if those unresponsive maintainers are still willing to maintain their projects. Or they may even not be active anymore, another discussion we are having

1 0

New Tumbleweed snapshot 20230124 released!
by Dominique Leuenberger 25 Jan '23

25 Jan '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: apache2 (2.4.54 -> 2.4.55) apache2-manual (2.4.54 -> 2.4.55) apache2-prefork (2.4.54 -> 2.4.55) apache2-utils (2.4.54 -> 2.4.55) dracut (057+suse.353.g6dab83eb -> 059+suse.358.g8ecd6e83) ffmpeg-4 ffmpeg-5 gdm gdm-branding-openSUSE gedit (44.1 -> 44.2) glib2 (2.74.4 -> 2.74.5) gnome-desktop (43 -> 43.1) gpgme gpgmeqt kpipewire libraw (0.21.0 -> 0.21.1) live555 (2022.12.01 -> 2023.01.19) microos-tools (2.17 -> 2.18) nautilus (43.1 -> 43.2) python-numpy soundtouch (2.3.1 -> 2.3.2) sudo (1.9.12p1 -> 1.9.12p2) transactional-update (4.1.0 -> 4.1.2) urlview vim (9.0.1188 -> 9.0.1234) vte yast2-network (4.5.12 -> 4.5.14) yast2-trans (84.87.20230116.80083546af -> 84.87.20230123.08c503a922) === Details === ==== apache2 ==== Version update (2.4.54 -> 2.4.55) - Update to 2.4.55: * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to 2.4.55 allows a backend to trigger HTTP response splitting (cve.mitre.org) Prior to Apache HTTP Server 2.4.55, a malicious backend can cause the response headers to be truncated early, resulting in some headers being incorporated into the response body. If the later headers have any security purpose, they will not be interpreted by the client. Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer) * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp Possible request smuggling (cve.mitre.org) Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions. Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec at Qi'anxin Group * ) SECURITY: CVE-2006-20001: mod_dav out of bounds read, or write of zero byte (cve.mitre.org) A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool (heap) memory location beyond the header value sent. This could cause the process to crash. This issue affects Apache HTTP Server 2.4.54 and earlier. * ) mod_dav: Open the lock database read-only when possible. PR 36636 [Wilson Felipe <wfelipe gmail.com>, manu] * ) mod_proxy_http2: apply the standard httpd content type handling to responses from the backend, as other proxy modules do. Fixes PR 66391. Thanks to JÃ©rÃ´me Billiras for providing the patch. [Stefan Eissing] * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981 [Basant Kumar Kukreja <basant.kukreja sun.com>, Alejandro Alvarez <alejandro.alvarez.ayllon cern.ch>] * ) mod_proxy_hcheck: Honor worker timeout settings. [Yann Ylavic] * ) mod_http2: version 2.0.10 of the module, synchronizing changes with the gitgub version. This is a partial rewrite of how connections and streams are handled. - an APR pollset and pipes (where supported) are used to monitor the main connection and react to IO for request/response handling. This replaces the stuttered timed waits of earlier versions. - H2SerializeHeaders directive still exists, but has no longer an effect. - Clients that seemingly misbehave still get less resources allocated, but ongoing requests are no longer disrupted. - Fixed an issue since 1.15.24 that "Server" headers in proxied requests were overwritten instead of preserved. [PR by @daum3ns] - A regression in v1.15.24 was fixed that could lead to httpd child processes not being terminated on a graceful reload or when reaching MaxConnectionsPerChild. When unprocessed h2 requests were queued at the time, these could stall. See #212. - Improved information displayed in 'server-status' for H2 connections when Extended Status is enabled. Now one can see the last request that IO operations happened on and transferred IO stats are updated as well. - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection send a GOAWAY frame much too early on new connections, leading to invalid protocol state and a client failing the request. See PR65731 at <https://bz.apache.org/bugzilla/show_bug.cgi?id=65731>. The module now initializes the HTTP/2 protocol correctly and allows the client to submit one request before the shutdown via a GOAWAY frame is being announced. - :scheme pseudo-header values, not matching the connection scheme, are forwarded via absolute uris to the http protocol processing to preserve semantics of the request. Checks on combinations of pseudo-headers values/absence have been added as described in RFC 7540. Fixes #230. - A bug that prevented trailers (e.g. HEADER frame at the end) to be generated in certain cases was fixed. See #233 where it prevented gRPC responses to be properly generated. - Request and response header values are automatically stripped of leading and trialing space/tab characters. This is equivalent behaviour to what Apache httpd's http/1.1 parser does. The checks for this in nghttp2 v1.50.0+ are disabled. - Extensive testing in production done by Alessandro Bianchi (@alexskynet) on the v2.0.x versions for stability. Many thanks! * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when request ':authority' is known. Improved test case that did not catch that the previous 'fix' was incorrect. * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski] * ) mod_proxy: The AH03408 warning for a forcibly closed backend connection is now logged at INFO level. [Yann Ylavic] * ) mod_ssl: When dumping the configuration, the existence of certificate/key files is no longer tested. [Joe Orton] * ) mod_authn_core: Add expression support to AuthName and AuthType. [Graham Leggett] * ) mod_ssl: when a proxy connection had handled a request using SSL, an error was logged when "SSLProxyEngine" was only configured in the location/proxy section and not the overall server. The connection continued to work, the error log was in error. Fixed PR66190. [Stefan Eissing] * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302. [Alessandro Cavaliere <alessandro.cavalier7 unibo.it>] * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300. [Alessandro Cavaliere <alessandro.cavalier7 unibo.it>] * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing] * ) mod_md: a new directive `MDStoreLocks` can be used on cluster setups with a shared file system for `MDStoreDir` to order activation of renewed certificates when several cluster nodes are ... changelog too long, skipping 12 lines ... PR 66313. [Emmanuel Dreyfus] ==== apache2-manual ==== Version update (2.4.54 -> 2.4.55) - Update to 2.4.55: * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to 2.4.55 allows a backend to trigger HTTP response splitting (cve.mitre.org) Prior to Apache HTTP Server 2.4.55, a malicious backend can cause the response headers to be truncated early, resulting in some headers being incorporated into the response body. If the later headers have any security purpose, they will not be interpreted by the client. Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer) * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp Possible request smuggling (cve.mitre.org) Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions. Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec at Qi'anxin Group * ) SECURITY: CVE-2006-20001: mod_dav out of bounds read, or write of zero byte (cve.mitre.org) A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool (heap) memory location beyond the header value sent. This could cause the process to crash. This issue affects Apache HTTP Server 2.4.54 and earlier. * ) mod_dav: Open the lock database read-only when possible. PR 36636 [Wilson Felipe <wfelipe gmail.com>, manu] * ) mod_proxy_http2: apply the standard httpd content type handling to responses from the backend, as other proxy modules do. Fixes PR 66391. Thanks to JÃ©rÃ´me Billiras for providing the patch. [Stefan Eissing] * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981 [Basant Kumar Kukreja <basant.kukreja sun.com>, Alejandro Alvarez <alejandro.alvarez.ayllon cern.ch>] * ) mod_proxy_hcheck: Honor worker timeout settings. [Yann Ylavic] * ) mod_http2: version 2.0.10 of the module, synchronizing changes with the gitgub version. This is a partial rewrite of how connections and streams are handled. - an APR pollset and pipes (where supported) are used to monitor the main connection and react to IO for request/response handling. This replaces the stuttered timed waits of earlier versions. - H2SerializeHeaders directive still exists, but has no longer an effect. - Clients that seemingly misbehave still get less resources allocated, but ongoing requests are no longer disrupted. - Fixed an issue since 1.15.24 that "Server" headers in proxied requests were overwritten instead of preserved. [PR by @daum3ns] - A regression in v1.15.24 was fixed that could lead to httpd child processes not being terminated on a graceful reload or when reaching MaxConnectionsPerChild. When unprocessed h2 requests were queued at the time, these could stall. See #212. - Improved information displayed in 'server-status' for H2 connections when Extended Status is enabled. Now one can see the last request that IO operations happened on and transferred IO stats are updated as well. - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection send a GOAWAY frame much too early on new connections, leading to invalid protocol state and a client failing the request. See PR65731 at <https://bz.apache.org/bugzilla/show_bug.cgi?id=65731>. The module now initializes the HTTP/2 protocol correctly and allows the client to submit one request before the shutdown via a GOAWAY frame is being announced. - :scheme pseudo-header values, not matching the connection scheme, are forwarded via absolute uris to the http protocol processing to preserve semantics of the request. Checks on combinations of pseudo-headers values/absence have been added as described in RFC 7540. Fixes #230. - A bug that prevented trailers (e.g. HEADER frame at the end) to be generated in certain cases was fixed. See #233 where it prevented gRPC responses to be properly generated. - Request and response header values are automatically stripped of leading and trialing space/tab characters. This is equivalent behaviour to what Apache httpd's http/1.1 parser does. The checks for this in nghttp2 v1.50.0+ are disabled. - Extensive testing in production done by Alessandro Bianchi (@alexskynet) on the v2.0.x versions for stability. Many thanks! * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when request ':authority' is known. Improved test case that did not catch that the previous 'fix' was incorrect. * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski] * ) mod_proxy: The AH03408 warning for a forcibly closed backend connection is now logged at INFO level. [Yann Ylavic] * ) mod_ssl: When dumping the configuration, the existence of certificate/key files is no longer tested. [Joe Orton] * ) mod_authn_core: Add expression support to AuthName and AuthType. [Graham Leggett] * ) mod_ssl: when a proxy connection had handled a request using SSL, an error was logged when "SSLProxyEngine" was only configured in the location/proxy section and not the overall server. The connection continued to work, the error log was in error. Fixed PR66190. [Stefan Eissing] * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302. [Alessandro Cavaliere <alessandro.cavalier7 unibo.it>] * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300. [Alessandro Cavaliere <alessandro.cavalier7 unibo.it>] * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing] * ) mod_md: a new directive `MDStoreLocks` can be used on cluster setups with a shared file system for `MDStoreDir` to order activation of renewed certificates when several cluster nodes are ... changelog too long, skipping 12 lines ... PR 66313. [Emmanuel Dreyfus] ==== apache2-prefork ==== Version update (2.4.54 -> 2.4.55) - Update to 2.4.55: * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to 2.4.55 allows a backend to trigger HTTP response splitting (cve.mitre.org) Prior to Apache HTTP Server 2.4.55, a malicious backend can cause the response headers to be truncated early, resulting in some headers being incorporated into the response body. If the later headers have any security purpose, they will not be interpreted by the client. Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer) * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp Possible request smuggling (cve.mitre.org) Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions. Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec at Qi'anxin Group * ) SECURITY: CVE-2006-20001: mod_dav out of bounds read, or write of zero byte (cve.mitre.org) A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool (heap) memory location beyond the header value sent. This could cause the process to crash. This issue affects Apache HTTP Server 2.4.54 and earlier. * ) mod_dav: Open the lock database read-only when possible. PR 36636 [Wilson Felipe <wfelipe gmail.com>, manu] * ) mod_proxy_http2: apply the standard httpd content type handling to responses from the backend, as other proxy modules do. Fixes PR 66391. Thanks to JÃ©rÃ´me Billiras for providing the patch. [Stefan Eissing] * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981 [Basant Kumar Kukreja <basant.kukreja sun.com>, Alejandro Alvarez <alejandro.alvarez.ayllon cern.ch>] * ) mod_proxy_hcheck: Honor worker timeout settings. [Yann Ylavic] * ) mod_http2: version 2.0.10 of the module, synchronizing changes with the gitgub version. This is a partial rewrite of how connections and streams are handled. - an APR pollset and pipes (where supported) are used to monitor the main connection and react to IO for request/response handling. This replaces the stuttered timed waits of earlier versions. - H2SerializeHeaders directive still exists, but has no longer an effect. - Clients that seemingly misbehave still get less resources allocated, but ongoing requests are no longer disrupted. - Fixed an issue since 1.15.24 that "Server" headers in proxied requests were overwritten instead of preserved. [PR by @daum3ns] - A regression in v1.15.24 was fixed that could lead to httpd child processes not being terminated on a graceful reload or when reaching MaxConnectionsPerChild. When unprocessed h2 requests were queued at the time, these could stall. See #212. - Improved information displayed in 'server-status' for H2 connections when Extended Status is enabled. Now one can see the last request that IO operations happened on and transferred IO stats are updated as well. - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection send a GOAWAY frame much too early on new connections, leading to invalid protocol state and a client failing the request. See PR65731 at <https://bz.apache.org/bugzilla/show_bug.cgi?id=65731>. The module now initializes the HTTP/2 protocol correctly and allows the client to submit one request before the shutdown via a GOAWAY frame is being announced. - :scheme pseudo-header values, not matching the connection scheme, are forwarded via absolute uris to the http protocol processing to preserve semantics of the request. Checks on combinations of pseudo-headers values/absence have been added as described in RFC 7540. Fixes #230. - A bug that prevented trailers (e.g. HEADER frame at the end) to be generated in certain cases was fixed. See #233 where it prevented gRPC responses to be properly generated. - Request and response header values are automatically stripped of leading and trialing space/tab characters. This is equivalent behaviour to what Apache httpd's http/1.1 parser does. The checks for this in nghttp2 v1.50.0+ are disabled. - Extensive testing in production done by Alessandro Bianchi (@alexskynet) on the v2.0.x versions for stability. Many thanks! * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when request ':authority' is known. Improved test case that did not catch that the previous 'fix' was incorrect. * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski] * ) mod_proxy: The AH03408 warning for a forcibly closed backend connection is now logged at INFO level. [Yann Ylavic] * ) mod_ssl: When dumping the configuration, the existence of certificate/key files is no longer tested. [Joe Orton] * ) mod_authn_core: Add expression support to AuthName and AuthType. [Graham Leggett] * ) mod_ssl: when a proxy connection had handled a request using SSL, an error was logged when "SSLProxyEngine" was only configured in the location/proxy section and not the overall server. The connection continued to work, the error log was in error. Fixed PR66190. [Stefan Eissing] * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302. [Alessandro Cavaliere <alessandro.cavalier7 unibo.it>] * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300. [Alessandro Cavaliere <alessandro.cavalier7 unibo.it>] * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing] * ) mod_md: a new directive `MDStoreLocks` can be used on cluster setups with a shared file system for `MDStoreDir` to order activation of renewed certificates when several cluster nodes are ... changelog too long, skipping 12 lines ... PR 66313. [Emmanuel Dreyfus] ==== apache2-utils ==== Version update (2.4.54 -> 2.4.55) - Update to 2.4.55: * ) SECURITY: CVE-2022-37436: Apache HTTP Server: mod_proxy prior to 2.4.55 allows a backend to trigger HTTP response splitting (cve.mitre.org) Prior to Apache HTTP Server 2.4.55, a malicious backend can cause the response headers to be truncated early, resulting in some headers being incorporated into the response body. If the later headers have any security purpose, they will not be interpreted by the client. Credits: Dimas Fariski Setyawan Putra (@nyxsorcerer) * ) SECURITY: CVE-2022-36760: Apache HTTP Server: mod_proxy_ajp Possible request smuggling (cve.mitre.org) Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions. Credits: ZeddYu_Lu from Qi'anxin Research Institute of Legendsec at Qi'anxin Group * ) SECURITY: CVE-2006-20001: mod_dav out of bounds read, or write of zero byte (cve.mitre.org) A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool (heap) memory location beyond the header value sent. This could cause the process to crash. This issue affects Apache HTTP Server 2.4.54 and earlier. * ) mod_dav: Open the lock database read-only when possible. PR 36636 [Wilson Felipe <wfelipe gmail.com>, manu] * ) mod_proxy_http2: apply the standard httpd content type handling to responses from the backend, as other proxy modules do. Fixes PR 66391. Thanks to JÃ©rÃ´me Billiras for providing the patch. [Stefan Eissing] * ) mod_dav: mod_dav overrides dav_fs response on PUT failure. PR 35981 [Basant Kumar Kukreja <basant.kukreja sun.com>, Alejandro Alvarez <alejandro.alvarez.ayllon cern.ch>] * ) mod_proxy_hcheck: Honor worker timeout settings. [Yann Ylavic] * ) mod_http2: version 2.0.10 of the module, synchronizing changes with the gitgub version. This is a partial rewrite of how connections and streams are handled. - an APR pollset and pipes (where supported) are used to monitor the main connection and react to IO for request/response handling. This replaces the stuttered timed waits of earlier versions. - H2SerializeHeaders directive still exists, but has no longer an effect. - Clients that seemingly misbehave still get less resources allocated, but ongoing requests are no longer disrupted. - Fixed an issue since 1.15.24 that "Server" headers in proxied requests were overwritten instead of preserved. [PR by @daum3ns] - A regression in v1.15.24 was fixed that could lead to httpd child processes not being terminated on a graceful reload or when reaching MaxConnectionsPerChild. When unprocessed h2 requests were queued at the time, these could stall. See #212. - Improved information displayed in 'server-status' for H2 connections when Extended Status is enabled. Now one can see the last request that IO operations happened on and transferred IO stats are updated as well. - When reaching server limits, such as MaxRequestsPerChild, the HTTP/2 connection send a GOAWAY frame much too early on new connections, leading to invalid protocol state and a client failing the request. See PR65731 at <https://bz.apache.org/bugzilla/show_bug.cgi?id=65731>. The module now initializes the HTTP/2 protocol correctly and allows the client to submit one request before the shutdown via a GOAWAY frame is being announced. - :scheme pseudo-header values, not matching the connection scheme, are forwarded via absolute uris to the http protocol processing to preserve semantics of the request. Checks on combinations of pseudo-headers values/absence have been added as described in RFC 7540. Fixes #230. - A bug that prevented trailers (e.g. HEADER frame at the end) to be generated in certain cases was fixed. See #233 where it prevented gRPC responses to be properly generated. - Request and response header values are automatically stripped of leading and trialing space/tab characters. This is equivalent behaviour to what Apache httpd's http/1.1 parser does. The checks for this in nghttp2 v1.50.0+ are disabled. - Extensive testing in production done by Alessandro Bianchi (@alexskynet) on the v2.0.x versions for stability. Many thanks! * ) mod_proxy_http2: fixed #235 by no longer forwarding 'Host:' header when request ':authority' is known. Improved test case that did not catch that the previous 'fix' was incorrect. * ) mod_proxy_hcheck: hcmethod now allows for HTTP/1.1 requests using GET11, HEAD11 and/or OPTIONS11. [Jim Jagielski] * ) mod_proxy: The AH03408 warning for a forcibly closed backend connection is now logged at INFO level. [Yann Ylavic] * ) mod_ssl: When dumping the configuration, the existence of certificate/key files is no longer tested. [Joe Orton] * ) mod_authn_core: Add expression support to AuthName and AuthType. [Graham Leggett] * ) mod_ssl: when a proxy connection had handled a request using SSL, an error was logged when "SSLProxyEngine" was only configured in the location/proxy section and not the overall server. The connection continued to work, the error log was in error. Fixed PR66190. [Stefan Eissing] * ) mod_proxy_hcheck: Re-enable workers in standard ERROR state. PR 66302. [Alessandro Cavaliere <alessandro.cavalier7 unibo.it>] * ) mod_proxy_hcheck: Detect AJP/CPING support correctly. PR 66300. [Alessandro Cavaliere <alessandro.cavalier7 unibo.it>] * ) mod_http2: Export mod_http2.h as public header. [Stefan Eissing] * ) mod_md: a new directive `MDStoreLocks` can be used on cluster setups with a shared file system for `MDStoreDir` to order activation of renewed certificates when several cluster nodes are ... changelog too long, skipping 12 lines ... PR 66313. [Emmanuel Dreyfus] ==== dracut ==== Version update (057+suse.353.g6dab83eb -> 059+suse.358.g8ecd6e83) Subpackages: dracut-mkinitrd-deprecated - Update to version 059+suse.358.g8ecd6e83: See https://github.com/dracutdevs/dracut/releases/tag/058 for details (059 just adds missing entries in NEWS.md). Additional changes: * chore(suse): add execute permission to all scripts * chore(suse): update spec - Update to version 057+suse.355.g1b722fda: * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439) ==== ffmpeg-4 ==== Subpackages: libavcodec58_134 libavformat58_76 libavutil56_70 libpostproc55_9 libswresample3_9 libswscale5_9 - Add ffmpeg-CVE-2022-3341.patch: Backport from upstream to fix null pointer dereference in decode_main_header() in libavformat/nutdec.c (bsc#1206778). ==== ffmpeg-5 ==== Subpackages: libavcodec59 libavdevice59 libavfilter8 libavformat59 libavutil57 libpostproc56 libswresample4 libswscale6 - Provide a ffmpeg-5-mini-devel build recipe to help split anticipated build cycles. - Reenable SDL2 for ffmpeg-5.spec. ffplay and -vf sdl should be back. [boo#1206505] ==== gdm ==== Subpackages: gdm-lang gdm-schema gdmflexiserver libgdm1 typelib-1_0-Gdm-1_0 - Update gdm-disable-gnome-initial-setup.patch: Refactoring to disable it on SLE runtime, so with the same executable it is still possible to run on Leap (jsc#PED-1719). ==== gdm-branding-openSUSE ==== - Bring back gnome-initial-setup for Leap 15.5 while keep it disabled on SLE 15 SP5 (jsc#PED-1719). ==== gedit ==== Version update (44.1 -> 44.2) Subpackages: gedit-lang python3-gedit - Update to version 44.2: + File Browser plugin: bug fix. + Updated translations. ==== glib2 ==== Version update (2.74.4 -> 2.74.5) Subpackages: glib2-lang glib2-tools libgio-2_0-0 libgio-2_0-0-32bit libglib-2_0-0 libglib-2_0-0-32bit libgmodule-2_0-0 libgmodule-2_0-0-32bit libgobject-2_0-0 libgobject-2_0-0-32bit libgthread-2_0-0 libgthread-2_0-0-32bit - Update to version 2.74.5: + Bugs fixed: glgo#GNOME/GLib#2843, glgo#GNOME/GLib#2881, glgo#GNOME/GLib#2883, glgo#GNOME/GLib!3165, glgo#GNOME/GLib!3166, glgo#GNOME/GLib!3182, glgo#GNOME/GLib!3197, glgo#GNOME/GLib!3204, glgo#GNOME/GLib!3214. + Updated translations. - Drop 1539540.patch: Fixed upstream. ==== gnome-desktop ==== Version update (43 -> 43.1) Subpackages: gnome-desktop-lang libgnome-desktop-3-20 libgnome-desktop-3_0-common libgnome-desktop-4-2 typelib-1_0-GnomeDesktop-3_0 typelib-1_0-GnomeDesktop-4_0 - Update to version 43.1: + Fix gnome_parse_locale returning NULL for the C locale + Use more sensible default keyboard for es_US + Delete failed thumbnail if successfully savings thumbnail + Skip territory if no translation available + Updated translations. ==== gpgme ==== Subpackages: libgpgme11 libgpgmepp6 - Update upstream keyring: https://gnupg.org/signature_key.asc - add python311.patch to build language bindings for python 3.11 ==== gpgmeqt ==== - Update upstream keyring: https://gnupg.org/signature_key.asc - add python311.patch to build language bindings for python 3.11 ==== kpipewire ==== Subpackages: kpipewire-imports libKPipeWire5 libKPipeWire5-lang libKPipeWireRecord5 - Require pipewire-devel for the -devel package ==== libraw ==== Version update (0.21.0 -> 0.21.1) - update to 0.21.1: * fixed typo in panasonic metadata parser * Multiple fixes inspired by oss-fuzz project * Phase One/Leaf IIQ-S v2 support * Canon CR3 filmrolls * Canon CRM (movie) files * Tiled bit-packed (and 16-bit unpacked) DNGs * (non-standard) Deflate-compressed integer DNG files are allowed * Canon EOS R3, R7 and R10 * Fujifilm X-H2S, X-T30 II * OM System OM-1 * Leica M11 * Sony A7-IV (ILCE-7M4) * DJI Mavic 3 * Nikon Z9: standard compression formats only ==== live555 ==== Version update (2022.12.01 -> 2023.01.19) Subpackages: libUsageEnvironment3 libgroupsock30 libliveMedia107 - update to 2023.01.19: - By default, we no longer compile "groupsock/NetAddress.cpp" for Windows to use "gethostbyname()", because of a report that this breaks IPv6 name resolution. - update to 2023.01.11: * Updated the "BasicTaskScheduler"/"DelayQueue" implementation to make the 'token counter' a field of the task scheduler object, rather than having it be a static variable. This avoids potential problems if an application uses more than one thread (with each thread having its own task scheduler). ==== microos-tools ==== Version update (2.17 -> 2.18) - Update to version 2.18: - Add TMPDIR to tukit binddirs for Salt - 98selinux-microos: Add chroot as dependency - Fix spelling error in warning ==== nautilus ==== Version update (43.1 -> 43.2) Subpackages: gnome-shell-search-provider-nautilus libnautilus-extension4 nautilus-lang - Update to version 43.2: + Regressions addressed: - Launch search from shell correctly - Make nautilus-autorun-software work again - Restore 2-dimensional navigation from sushi - Resolve stuttering scrolling - Reintroduce 64px icon size for grid view - Show full filename again in grid, using tooltips + Other bugfixes: - Avoid a many crashes - Stop showing ï¿½ in the type on Properties - Show rename error dialogs again - Handle X11-only drag-and-drop quirks - Allow autorun.sh without executable bit - Improve selection-setting - Restrict DND actions over drag source - Focus replaces files - Improve keyboard focus navigation on the new views - Stop blocking on the tracker connection - Don't add missing emblems + Updated translations. ==== python-numpy ==== - Slightly reformat the specfile condition blocks: The %python_subpackages generator misses " %if" lines with a preceding whitespace. Relevant for d:l:p:backports not having libalternatives. ==== soundtouch ==== Version update (2.3.1 -> 2.3.2) - update to 2.3.2: * autotools improvements ==== sudo ==== Version update (1.9.12p1 -> 1.9.12p2) Subpackages: sudo-plugin-python - Update to 1.9.12p2: * Fixes bsc#1207082 * Changes in 1.9.12p2: Fixed a compilation error on Linux/aarch64. GitHub issue #197. Fixed a potential crash introduced in the fix GitHub issue #134. If a userâs sudoers entry did not have any RunAs userâs set, running sudo -U otheruser -l would dereference a NULL pointer. Fixed a bug introduced in sudo 1.9.12 that could prevent sudo from creating a I/O files when the iolog_file sudoers setting contains six or more Xs. Fixed a compilation issue on AIX with the native compiler. GitHub issue #231. Fixed CVE-2023-22809, a flaw in sudoâs -e option (aka sudoedit) that could allow a malicious user with sudoedit privileges to edit arbitrary files. For more information, see Sudoedit can edit arbitrary files. ==== transactional-update ==== Version update (4.1.0 -> 4.1.2) Subpackages: dracut-transactional-update libtukit4 transactional-update-zypp-config tukit tukitd - Version 4.1.2 - Don't try to mount user mounts if they don't exist [boo#1207366] - Version 4.1.1 - Mount user specific binddirs last: Prevously the internal mounts would potentially overwrite user bind mounts [boo#1205011] - selinux: Relabel shadowed /var files during update to make sure they don't interfere with the update [boo#1205937] - Clean up /var/lib/overlay more aggressively [boo#1206947] - tukit: Merge /etc overlay into parent if --discard is used together with --continue - previously the files were incorrectly always merged with the currently running system - status: do not execute the status command if experimental - Don't delete created mount point dirs any more - Small code optimizations ==== urlview ==== - Update to latest URL ==== vim ==== Version update (9.0.1188 -> 9.0.1234) Subpackages: gvim vim-data vim-data-common - Updated to version 9.0.1234, fixes the following problems * Return value of type() for class and object unclear. * Invalid memory access with folding and using "L". * Some Bazel files are not recognized. * No error when class function argument shadows a member. * Cannot map <Esc> when using the Kitty key protocol. * Compiler warning for comparing pointer with int. * Restoring KeyTyped when building statusline not tested. * Code is indented more than necessary. * Dump file missing from patch. * Abstract class not supported yet. * Crash when using kitty and using a mapping with <Esc>. * AppVeyor builds with an old Python version. * Assignment with operator doesn't work in object method. * Crash when iterating over list of objects. * Return type of values() is always list<any>. * Expression compiled the wrong way after using an object. * Crash when handling class that extends another class with more than one object members. * Testing with Python on AppVeyor does not work properly. * Error when object type is expected but getting "any". * Code is indented more than necessary. * Getting interface member does not always work. * Compiler complains about declaration after label. * Storing value in interface member does not always work. * Cannot read back what setcellwidths() has done. * Adding a line below the last one does not expand fold. * File left behind after running tests. * Using isalpha() adds dependency on current locale. * Coverity warns for ignoring return value. * Using an object member in a closure doesn't work. * Completion includes functions that don't work. * Handling of FORTIFY_SOURCE flags doesn't match Fedora usage. * Termcap/terminfo entries do not indicate where modifiers might appear. * Code is indented more than necessary. * Cannot use setcellwidths() below 0x100. * Cannot call a :def function with a number for a float argument. * Reading past the end of a line when formatting text. ==== vte ==== Subpackages: libvte-2_91-0 typelib-1_0-Vte-2_91 vte-lang - Add ddb2c8a.patch: widget: Use correct end row for getting the selected text. The range is end-exclusive, so use end_row() instead of last_row(). Fixes glgo#GNOME/vte#2584 ==== yast2-network ==== Version update (4.5.12 -> 4.5.14) - Fix the return of packages needed by the selected backend when running an autoinstallation (bsc#1207221) - 4.5.14 - Fixed dirname evaluation when creating the directory for the configuration files to be copied to the target system (bsc#1206723, bsc#1207382) - 4.5.13 ==== yast2-trans ==== Version update (84.87.20230116.80083546af -> 84.87.20230123.08c503a922) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20230123.08c503a922: * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese) * Translated using Weblate (Portuguese)

1 0

New Tumbleweed snapshot 20230123 released!
by Dominique Leuenberger 24 Jan '23

24 Jan '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: CoreFreq (1.94.3_k6.1.7_1 -> 1.95.1_k6.1.7_1) binutils exiv2 (0.27.5 -> 0.27.6) fetchmail gnutls hidapi (0.13.0 -> 0.13.1) ibus-libzhuyin (1.10.1 -> 1.10.2) libgit2 (1.5.0 -> 1.5.1) liburing (2.2 -> 2.3) man-pages-ja (20221215 -> 20230115) miniupnpc (2.2.2 -> 2.2.4) postfix python-future (0.18.2 -> 0.18.3) python-pbr (5.11.0 -> 5.11.1) python-requests (2.28.1 -> 2.28.2) python-urllib3 (1.26.13 -> 1.26.14) rubygem-rack-2.2 (2.2.4 -> 2.2.6.2) rubygem-rack (3.0.2 -> 3.0.4.1) thunar xfce4-notifyd (0.7.1 -> 0.7.2) === Details === ==== CoreFreq ==== Version update (1.94.3_k6.1.7_1 -> 1.95.1_k6.1.7_1) - update to 1.95.1: * [Intel] RPL: voltage of Pcore, Ecore, System Agent * [Intel] RPL and ADL Chipset device IDs * [Intel] Decode the RPL IMC and improve DDR5 support * [Build] Raise `MAX_FREQ_HZ` up to 7125000000 Hertz * [Intel] Mobile {Coffee Lake, Kaby Lake} codenames * [Intel] Braswell codename detection * [AMD] SYSCFG Register * [AMD] EPYC 9654 * [AMD] Transparent SME * [AMD] DRAM Data Scrambling * [AMD] Adding "Barcelo R" and "Rembrandt R" ==== binutils ==== Subpackages: gprofng libctf-nobfd0 libctf0 - fix build on x86_64_vX platforms - Add binutils-maxpagesize.diff for a problem on old code streams, where we would generate too large binaries. - s390-pic-dso.diff: use %pB instead of %B - SLE toolchain update of binutils. Update to 2.39 from 2.37, which means obsoleting and hence removing these patches: binutils-add-efi-aarch64-1.diff, binutils-add-efi-aarch64-2.diff, binutils-add-efi-aarch64-3.diff, binutils-fix-keepdebug.diff, binutils-add-z16-name.diff. Implements [jsc#SLE-25046, jsc#PED-2029, jsc#PED-2035, jsc#PED-2033, jsc#PED-2030, jsc#PED-2038, jsc#PED-2032, jsc#PED-2034, jsc#PED-2031, jsc#SLE-25047] - This fixes these CVEs relative to 2.37: [bsc#1188374, bsc#1185597] aka (GCC) PR99935 aka CVE-2021-3648 [bsc#1193929] aka PR28694 aka CVE-2021-45078 [bsc#1194783] aka (GCC) PR98886 aka CVE-2021-46195 [bsc#1197592] aka (GCC) PR105039 aka CVE-2022-27943 [bsc#1202966] aka PR29289 aka CVE-2022-38126 [bsc#1202967] aka PR29290 aka CVE-2022-38127 [bsc#1202969] aka CVE-2021-3826 - add arm32-avoid-copyreloc.patch for PR16177 (bsc#1200962) - Add binutils-pr29482.diff for PR29482, aka CVE-2022-38533 [bsc#1202816] ==== exiv2 ==== Version update (0.27.5 -> 0.27.6) - update to 0.27.6: * Add Nikon3.WhiteBalanceBias2 * Add Nikon LensData v0802 * Add some F mount lenses * Initial support for OM System MakerNote * Add Sony ARW compression to dict * Exif start can be at any byte in payload, not word aligned * Fix exception type when writing BMFF file * Add more MIME type mappings for TIFF-based raws * Fix naming of canon EF 35-80mm * Replace assert with enforce * PNG: always strip the existing iCCP chunk * Account for header bytes for Exif and XMP boxes * Fix Integer overflow in Photoshop::setIptcIrb * Fix Integer-overflow in sumToLong * Fix out of bounds read in isValidBoxFileType() * Fix in Jp2 metadata writing & improvements in reading * Strip XMP raw packet before decoding * Add tiff tags * Add more DNG 1.6 tags * Fix bug in iterating over the elements of dateStrings * Use memmove in TiffEncoder::updateDirEntry * Treat Exif.Sony1.PreviewImage as undefined tag ==== fetchmail ==== Subpackages: fetchmailconf - disable opie support ==== gnutls ==== Subpackages: libgnutls-dane0 libgnutls30 libgnutls30-32bit libgnutls30-hmac - FIPS: Change all the 140-2 references to FIPS 140-3 in order to account for the new FIPS certification [bsc#1207346] * Add gnutls-FIPS-140-3-references.patch - FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183] * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch ==== hidapi ==== Version update (0.13.0 -> 0.13.1) - update to 0.13.1: * hidraw: fix invalid read past the UDEV buffer ==== ibus-libzhuyin ==== Version update (1.10.1 -> 1.10.2) - update to 1.10.2: * bug fixes ==== libgit2 ==== Version update (1.5.0 -> 1.5.1) - update to 1.5.1: * This is a security release to address CVE-2023-22742: when compiled using the optional, included libssh2 backend, libgit2 fails to verify SSH keys by default. boo#1207364 * When using an SSH remote with the optional, included libssh2 backend, libgit2 does not perform certificate checking by default. Prior versions of libgit2 require the caller to set the `certificate_check` field of libgit2's `git_remote_callbacks` structure - if a certificate check callback is not set, libgit2 does not perform any certificate checking. This means that by default - without configuring a certificate check callback, clients will not perform validation on the server SSH keys and may be subject to a man-in-the-middle attack. ==== liburing ==== Version update (2.2 -> 2.3) - add 0001-test-helpers-fix-socket-length-type.patch fixes tests on big endian - update to 2.3: * Support non-libc build for aarch64. * Add io_uring_{enter,enter2,register,setup} syscall functions. * Add sync cancel interface, io_uring_register_sync_cancel(). * Fix return value of io_uring_submit_and_wait_timeout() to match the man page. * Improvements to the regression tests * Add support and test case for passthrough IO * Add recv and recvmsg multishot helpers and support * Add documentation and support for IORING_SETUP_DEFER_TASKRUN * Fix potential missing kernel entry with IORING_SETUP_IOPOLL * Add support and documentation for zero-copy network transmit * Various optimizations * Many cleanups * Many man page additions and updates - drop handle-eintr.patch, test-xattr-don-t-rely-on-NUL-termination.patch: upstream ==== man-pages-ja ==== Version update (20221215 -> 20230115) - update to version 20230115 * Improved and updated manual pages ==== miniupnpc ==== Version update (2.2.2 -> 2.2.4) - update to 2.2.4: * upnpc: use of @ to replace local lan address * python module : Allow to specify the root description url * Change directory structure : include/ and src/ directories. - drop makefile-deps-fix.patch (upstream) ==== postfix ==== - Fix SELinux labeling issue caused by /usr/sbin/config.postfix (bsc#1207227). ==== python-future ==== Version update (0.18.2 -> 0.18.3) - update to 0.18.3: * Backport fix for bpo-38804 (c91d70b) * Fix bug in fix_print.py fixer (dffc579) * Fix bug in fix_raise.py fixer (3401099) * Fix newint bool in py3 (fe645ba) * Fix bug in super() with metaclasses (6e27aac) * docs: fix simple typo, reqest -> request (974eb1f) * Correct eq (c780bf5) * Pass if lint fails (2abe00d) * fix order (f96a219) * Add flake8 to image (046ff18) * Make lint.sh executable (58cc984) * Add docker push to optimize CI (01e8440) * Build System (42b3025) * Add docs build status badge to README.md (3f40bd7) * Use same docs requirements in tox (18ecc5a) * Add docs/requirements.txt (5f9893f) * Add PY37_PLUS, PY38_PLUS, and PY39_PLUS (bee0247) * fix 2.6 test, better comment (ddedcb9) * fix 2.6 test (3f1ff7e) * remove nan test (4dbded1) * include list test values (e3f1a12) * fix other python2 test issues (c051026) * fix missing subTest (f006cad) * import from old imp library on older python versions (fc84fa8) * replace fstrings with format for python 3.4,3.5 (4a687ea) * minor style/spelling fixes (8302d8c) * improve cmp function, add unittest (0d95a40) * Pin typing==3.7.4.1 for Python 3.3 compatiblity (1a48f1b) * Fix various py26 unit test failures (9ca5a14) * Add initial contributing guide with docs build instruction (e55f915) * Add docs building to tox.ini (3ee9e7f) * Support NumPy's specialized int types in builtins.round (b4b54f0) * Added r""" to the docstring to avoid warnings in python3 (5f94572) * Add subclasscheck for past.types.basestring (c9bc0ff) * Correct example in README (681e78c) * Add simple documentation (6c6e3ae) * Add pre-commit hooks (a9c6a37) * Handling of next and next by future.utils.get_next was reversed (52b0ff9) * Add a test for our fix (461d77e) * Compare headers to correct definition of str (3eaa8fd) * Add support for negative ndigits in round; additionally, fixing a bug so that it handles passing in Decimal properly (a4911b9) * Add tkFileDialog to future.movers.tkinter (f6a6549) * Sort before comparing dicts in TestChainMap (6126997) * Fix typo (4dfa099) * Fix formatting in "What's new" (1663dfa) * Fix typo (4236061) * Avoid DeprecationWarning caused by invalid escape (e4b7fa1) * Fixup broken link to external django documentation re: porting to Python 3 and unicode_literals (d87713e) * Fixed newdict checking version every time (99030ec) * Add count from 2.7 to 2.6 (1b8ef51) - drop CVE-2022-40899.patch (upstream) ==== python-pbr ==== Version update (5.11.0 -> 5.11.1) - update to 5.11.1: * Run PBR integration on Ubuntu Focal too * Remove numpy dependencies * Tie recursion calls to Dist object, not module * Update tox.ini to work with tox 4 ==== python-requests ==== Version update (2.28.1 -> 2.28.2) - update to 2.28.2: - Requests now supports charset\_normalizer 3.x. - Updated MissingSchema exception to suggest https scheme rather than http. - drop requests-allow-charset-normalizer-3.patch (upstream) ==== python-urllib3 ==== Version update (1.26.13 -> 1.26.14) - update to 1.26.14: * Fixed parsing of port 0 (zero) returning None, instead of 0. * Removed deprecated getheaders() calls in contrib module. ==== rubygem-rack-2.2 ==== Version update (2.2.4 -> 2.2.6.2) - updated to version 2.2.6.2 [CVE-2022-44570] Fix ReDoS in Rack::Utils.get_byte_ranges [CVE-2022-44571] Fix ReDoS vulnerability in multipart parser [CVE-2022-44572] Forbid control characters in attributes (also ReDoS) See installed CHANGELOG.md for more changes ==== rubygem-rack ==== Version update (3.0.2 -> 3.0.4.1) updated to version 3.0.4.1 [CVE-2022-44571] Fix ReDoS vulnerability in multipart parser [CVE-2022-44570] Fix ReDoS in Rack::Utils.get_byte_ranges [CVE-2022-44572] Forbid control characters in attributes (also ReDoS) For more detailed information see the installed CHANGELOG.md ==== thunar ==== Subpackages: libthunarx-3-0 thunar-lang - Add switch_pane_shortcut.patch Backport upstream fix for gxo#xfce/thunar#1005 - Add differentiate_zoom_levels_between_view_modes.patch Backport upstream fix for gxo#xfce/thunar#832 ==== xfce4-notifyd ==== Version update (0.7.1 -> 0.7.2) Subpackages: xfce4-notifyd-lang - Update to 0.7.2: * Fix sound proplist memleak when notification isn't shown * Improve sorting in known apps list of settings * Add extra margin in the known app settings * Fix word casing in known app settings * Add ability to exclude specific applications from log * Better, non-quadratic algo for xfce_notify_count_apps_in_log() * Plug memleak in notify_get_from_desktop_file() * Redesign the known apps panel a bit * Remove a few more GTK_CHECK_VERSION call sites * Avoid use-after-free when deleting known app * Improve algo for finding desktop file for known app name * Improve icon loading for known apps list * Don't set invalid icon name in known apps list * Translation Updates

1 0

Update on adding additional x86_64-vX subarchitecture leves via glibc hwcaps
by Dirk Müller 24 Jan '23

24 Jan '23

Hi all, just as an update before the end of the year holidays. Michael Schroeder, Fabian Vogt and myself have been finishing off all missing pieces of implementation work to be able to transparently utilize the build service to provide glibc-hwcaps overlays of shared libraries optimized for higher architecture levels than baseline. While the original intention was to implement the proposal https://en.opensuse.org/openSUSE:X86-64-Architecture-Levels#Available_optio… which is addressing an x86_64 specific need, all of the implemented pieces are reusable to also utilize on other architectures that have similar needs (can think of s390x here for example). What needs to be done as a package? By default, nothing. The x86_64-vX (I suggest targeting -v3 as it has a good balance of performance improvement and hardware compatibility over -v4 or -v2) builds will be limited to those packages that are opting into the glibc-hwcaps feature. if they opt in (which probably needs some analysis as we have seen also seen no increase or slight performance decrease), the only thing needed to do is to add one extra line to the spec file: %{?suse_build_hwcaps_libs} It only works if the package is building a shared library following the shared library policy as a subpackage and provides a `baselibs.conf` file that identifies that package by name. see https://en.opensuse.org/openSUSE:Packaging_Conventions_RPM_Macros#%{?suse_b… for details Currently this macro is undefined as it relies on a number of not-yet-upstream-accepted changes: * https://github.com/rpm-software-management/rpm/pull/2315 * https://github.com/openSUSE/obs-build/pull/904 * https://github.com/openSUSE/obs-build/pull/907 * https://github.com/openSUSE/post-build-checks/pull/54 * https://build.opensuse.org/package/rdiff/Base:System/filesystem?opackage=fi… * optional: yet undetermined way of providing the user an ability to "opt into the optimized libraries" (current suggestion is via a specific provides in the system to be provided by the patterns package, but could be also done via some zypper specific feature). Once all those changes are in, we can start implementing this in Tumbleweed, if consensus is given on the approach. Unlikely to happen still in 2022. In my testing, it appears beneficial to enable that for most of the dependencies of ImageMagick, the webbrowser dependencies and also the toolkit libraries (gtk, glib, qt etc) for improved desktop experience. In total that would be around 50 packages to submit with the additional macro, but I don't have a very scientific way of determining whether it is worth it yet. Happy to hear your input or feedback. Greetings, Dirk

3 7

New Tumbleweed snapshot 20230122 released!
by Dominique Leuenberger 23 Jan '23

23 Jan '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: Mesa Mesa-drivers MozillaFirefox (108.0.2 -> 109.0) container-selinux (2.188.0 -> 2.198.0) crash ctags ddclient fwupd git (2.39.0 -> 2.39.1) gnome-software highway (1.0.2 -> 1.0.3) icewm (3.2.2 -> 3.3.0) iptables (1.8.8 -> 1.8.9) kernel-firmware libeconf (0.5.0 -> 0.5.1) libinput (1.22.0 -> 1.22.1) libksane libreoffice (7.4.3.2 -> 7.4.4.2) libspectre (0.2.11 -> 0.2.12) libxmlb libzypp-plugin-appdata (1.0.1+git.20220816 -> 1.0.1+git.20230117) llvm15 (15.0.6 -> 15.0.7) mozilla-nss (3.85 -> 3.86) mozjs102 (102.6.0 -> 102.7.0) multipath-tools netpbm rubygem-ruby-dbus (0.18.1 -> 0.19.0) salt tcpdump (4.99.2 -> 4.99.3) thunar (4.18.2 -> 4.18.3) tpm2-0-tss translation-update xfce4-notifyd (0.6.5 -> 0.7.1) xfce4-whiskermenu-plugin (2.7.1 -> 2.7.2) xfdesktop (4.18.0 -> 4.18.1) xfsprogs (6.1.0 -> 6.1.1) yast2 (4.5.21 -> 4.5.22) yast2-network (4.5.11 -> 4.5.12) zlib (1.2.12 -> 1.2.13) === Details === ==== Mesa ==== Subpackages: Mesa-dri-devel Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - Add support for Rusticl - Mesa's new OpenCL implementation. * See https://docs.mesa3d.org/rusticl You will need to set your environment to use it * See https://docs.mesa3d.org/envvars#rusticl-environment-variables - Compile with gcc12 on Leaps: building drivers fails with: /usr/include/dxguids/dxguids.h:70:1: internal compiler error: in cxx_eval_bit_field_ref, at cp/constexpr.c:2578 - Fix some deprecation warnings * WARNING: option "false" deprecated, please use "disabled" instead. * WARNING: option "true" deprecated, please use "enabled" instead. ==== Mesa-drivers ==== Subpackages: Mesa-dri Mesa-gallium Mesa-libva libxatracker2 - Add support for Rusticl - Mesa's new OpenCL implementation. * See https://docs.mesa3d.org/rusticl You will need to set your environment to use it * See https://docs.mesa3d.org/envvars#rusticl-environment-variables - Compile with gcc12 on Leaps: building drivers fails with: /usr/include/dxguids/dxguids.h:70:1: internal compiler error: in cxx_eval_bit_field_ref, at cp/constexpr.c:2578 - Fix some deprecation warnings * WARNING: option "false" deprecated, please use "disabled" instead. * WARNING: option "true" deprecated, please use "enabled" instead. ==== MozillaFirefox ==== Version update (108.0.2 -> 109.0) Subpackages: MozillaFirefox-translations-common - Mozilla Firefox 109.0 MFSA 2023-01 (bsc#1207119) * CVE-2023-23597 (bmo#1538028) Logic bug in process allocation allowed to read arbitrary files * CVE-2023-23598 (bmo#1800425) Arbitrary file read from GTK drag and drop on Linux * CVE-2023-23599 (bmo#1777800) Malicious command could be hidden in devtools output on Windows * CVE-2023-23600 (bmo#1787034) Notification permissions persisted between Normal and Private Browsing on Android * CVE-2023-23601 (bmo#1794268) URL being dragged from cross-origin iframe into same tab triggers navigation * CVE-2023-23602 (bmo#1800890) Content Security Policy wasn't being correctly applied to WebSockets in WebWorkers * CVE-2023-23603 (bmo#1800832) Calls to <code>console.log</code> allowed bypasing Content Security Policy via format directive * CVE-2023-23604 (bmo#1802346) Creation of duplicate <code>SystemPrincipal</code> from less secure contexts * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974) Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7 * CVE-2023-23606 (bmo#1764974, bmo#1798591, bmo#1799201, bmo#1800446, bmo#1801248, bmo#1802100, bmo#1803393, bmo#1804626, bmo#1804971, bmo#1807004) Memory safety bugs fixed in Firefox 109 - requires NSS 3.86 - rebased patches ==== container-selinux ==== Version update (2.188.0 -> 2.198.0) - Update to version 2.198.0: * Fix spc_t transition rules on tmpfs_t - Changes from 2.197.0: * Add boolean containers_use_ecryptfs policy - Changes from 2.195.1: * Readd missing allow rules for container_t - Changes from 2.194.0: * Allow syslogd_t to use tmpfs files created by container runtime - Changes from 2.193.0: * Allow containers to mount tmpfs_t file systems * Label spc_t as a init initrc daemon * Allow userdomains to run containers - Changes from 2.191.0: * Create container_logwriter_t type - Changes from 2.190.1: * Support BuildKit * container.fc: Set label for kata-agent * support nerdctl - Changes from 2.190.0: * Packit: initial enablement * Allow iptables to list directories labeled as container_file_t - Changes from 2.189.0: * Dont audit searching other processes in /proc. ==== crash ==== - Added crash-trace-2021-02-08.tar.bz2 and modified project to create the crash-trace package. If installed with crash installed the extension can be used for diagnosing kernel trace data. ==== ctags ==== - CVE-2022-4515.patch: fixes arbitrary command execution via a tag file with a crafted filename (bsc#1206543, CVE-2022-4515) - Stop resetting ctags update-alternative priority back to auto. These are admin settings. - Remove u-a links in the correct scriptlet ==== ddclient ==== - Add curl as BuildRequires/Requires to be able to use the '-curl' option (eg. in DDCLIENT_OPTIONS in /etc/sysconfig/ddclient). ==== fwupd ==== Subpackages: fwupd-bash-completion fwupd-lang libfwupd2 typelib-1_0-Fwupd-2_0 - Fix error generating grub.cfg when an update is available. + uefi-capsule-Do-not-call-grub2-probe-without-argumen.patch ==== git ==== Version update (2.39.0 -> 2.39.1) Subpackages: git-core git-email git-gui git-svn git-web gitk perl-Git - git 2.39.1, fixing two security issues that could allow remote code execution when accessing specially crafted repositories: * CVE-2022-41903: log format integer overflow boo#1207033 * CVE-2022-23521: gitattributed parsing integer overflow boo#1207032 ==== gnome-software ==== Subpackages: gnome-software-lang gnome-software-plugin-packagekit - Also add download.opensuse.org-non-oss (NON-OSS repo) download.opensuse.org-oss (OSS repo), and download.opensuse.org-tumbleweed (Update repo) to software-opensuse.gschema.override, declaring them also official repositories (the names match the ones picked by the NET installer). ==== highway ==== Version update (1.0.2 -> 1.0.3) - Update to release 1.0.3 * Add RearrangeToOddPlusEven, Xor3, 8-bit CompressStore, HWY_ASSUME * Add contrib/bit_pack for 8/16-bit lanes * Update for new RVV intrinsics; faster WASM min/max and extmul/q15mul ==== icewm ==== Version update (3.2.2 -> 3.3.0) Subpackages: icewm-config-upstream icewm-default icewm-lang icewm-lite - Update to 3.3.0: * Prevent a derefence of a null-Pixel in xftColor. * Add "getClass" and "setClass" commands to icesh. * Support tabs in task grouping. * Use spaces instead of dots when printing WM_COMMAND. * When a focused window hides or rolls up, focus some other window. * When looking for a focusable window, avoid rolled up windows. * Fix for setting focus on passive motif dialogs * Fallback to rolled up windows in the second pass of getLastFocus. * Use CurrentTime when setting focus to a passive client in the timeout. * On icon not found, report dimensions. * Don't refocus a focused window in focusLastWindow. * Don't activate an active window when receiving an activation message. * Ignore duplicate map requests. * Let icesh implicitly select windows at most once. * Add support for nanosvg for issue #695. * Add preference ToolTipIcon=1 for issue #637. * Add nanosvg to .gitignore. * Remove unneeded logevent from icesh. - Remove unknown options from configure - Rebase icewm-preferences.patch - update to 3.2.3: * Only freeze the task pane layout when a button was removed, * which fixes the KeySysWorkspaceNext+Prev+Last bug. * Ensure that a task button is updated once it is mapped, * which prevents stale task button titles. * Show a big icon in the tooltip of a toolbar button and the tray. * All of the winoptions are now fully tab-aware. * More documentation about tabbing in the icewm manpage. * Document the "workspace" directory for icons on workspace buttons. * Add "loadicon" and "saveicon" commands to icesh. * Updated translations: Catalan, Dutch, Slovak, Japanese, * Portuguese + Brazil, Macedonian. ==== iptables ==== Version update (1.8.8 -> 1.8.9) Subpackages: libip4tc2 libip6tc2 libxtables12 xtables-plugins - Update to release 1.8.9 * arptables-nft: Support --exact flag * Support more chunk types in the "sctp" extension * Print `--` in ip6tables' "opt" column for consistency with iptables * More verbose error messages if iptables-nft-restore fails * Support `-p Length` with ebtables-nft, needed for 802_3 extension. ==== kernel-firmware ==== Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Correct alias list for ACPI entries (bsc#1207211) ==== libeconf ==== Version update (0.5.0 -> 0.5.1) Subpackages: libeconf0 libeconf0-32bit - Update to version 0.5.1: * Reading files in /usr/_vendor_/_example_._suffix_.d/* regardless there is a /etc/_example_._suffix_ file. (#175) ==== libinput ==== Version update (1.22.0 -> 1.22.1) Subpackages: libinput-udev libinput10 - Update to release 1.22.1: * This version includes quirks for laptops from Apple and Dell, as well as for the Glorious Model 0 mouse. It also backports a meson fix for use of libinput as subproject and a fix for libinput debug-events not flushing the output, resulting in truncated information. * Finally, the tablet touch arbitration rectangle was increased by 50mm in both directions to reduce the number of misdetected touches. - Use ldconfig_scriptlets macro for post(un) handling. ==== libksane ==== Subpackages: libKF5Sane5 libksane-lang - Add patch to avoid -devel depending on KSaneCore: * 0001-Don-t-search-for-KSane-Core-in-KF5SaneConfig.patch ==== libreoffice ==== Version update (7.4.3.2 -> 7.4.4.2) Subpackages: libreoffice-base libreoffice-calc libreoffice-draw libreoffice-filters-optional libreoffice-gnome libreoffice-gtk3 libreoffice-icon-themes libreoffice-impress libreoffice-l10n-cs libreoffice-l10n-da libreoffice-l10n-de libreoffice-l10n-el libreoffice-l10n-en libreoffice-l10n-en_GB libreoffice-l10n-es libreoffice-l10n-fr libreoffice-l10n-hu libreoffice-l10n-it libreoffice-l10n-ja libreoffice-l10n-pl libreoffice-l10n-pt_BR libreoffice-l10n-ru libreoffice-l10n-zh_CN libreoffice-l10n-zh_TW libreoffice-mailmerge libreoffice-math libreoffice-pyuno libreoffice-qt5 libreoffice-writer libreofficekit - Update to 7.4.4.2: https://wiki.documentfoundation.org/Releases/7.4.4/RC2 https://wiki.documentfoundation.org/Releases/7.4.4/RC1 - Updated bundled dependencies: * poppler-22.09.0.tar.xz -> poppler-22.12.0.tar.xz ==== libspectre ==== Version update (0.2.11 -> 0.2.12) - update to 0.2.12: * This is another bugfix only release in the libspectre's 0.2 series. * Fix exporting to PDF with newer ghostscript (Albert Astals Cid) ==== libxmlb ==== - build hwcaps optimized libraries ==== libzypp-plugin-appdata ==== Version update (1.0.1+git.20220816 -> 1.0.1+git.20230117) - Update to version 1.0.1+git.20230117: * InstallAppdata: use subprocess.run instead of os.system (CVE-2023-22643) - Update to version 1.0.1+git.20220909: * Add dist directory, for openSUSE packaging ==== llvm15 ==== Version update (15.0.6 -> 15.0.7) Subpackages: clang-tools clang15 libLLVM15 libclang-cpp15 libclang13 llvm15-gold - Update to version 15.0.7. * This release contains bug-fixes for the LLVM 15.0.0 release. This release is API and ABI compatible with 15.0.0. - Rebase llvm-do-not-install-static-libraries.patch. - Build stage 2 with -fno-plt on x86_64: since building with - Wl,-z,now the PLT stubs are basically dead code, so eliminating the indirection reduces the number of branches and improves code locality for the quite frequent cross-DSO calls. - Add llvm-workaround-superfluous-branches.patch: hints LLVM to eliminate branches until gh#llvm/llvm-project#28804 is solved. ==== mozilla-nss ==== Version update (3.85 -> 3.86) Subpackages: libfreebl3 libfreebl3-hmac libsoftokn3 libsoftokn3-hmac mozilla-nss-certs mozilla-nss-tools - update to NSS 3.86 * bmo#1803190 - conscious language removal in NSS * bmo#1794506 - Set nssckbi version number to 2.60 * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS * bmo#1797559 - Remove EC-ACC root cert from NSS * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS * bmo#1794495 - Remove Network Solutions Certificate Authority * bmo#1802331 - compress docker image artifact with zstd * bmo#1799315 - Migrate nss from AWS to GCP * bmo#1800989 - Enable static builds in the CI * bmo#1765759 - Removing SAW docker from the NSS build system * bmo#1783231 - Initialising variables in the rsa blinding code * bmo#320582 - Implementation of the double-signing of the message for ECDSA * bmo#1783231 - Adding exponent blinding for RSA. ==== mozjs102 ==== Version update (102.6.0 -> 102.7.0) - Update to version 102.7.0: + Various stability, functionality, and security fixes. + CVE-2022-46871: libusrsctp library out of date. + CVE-2023-23598: Arbitrary file read from GTK drag and drop on Linux. + CVE-2023-23599: Malicious command could be hidden in devtools output on Windows. + CVE-2023-23601: URL being dragged from cross-origin iframe into same tab triggers navigation. + CVE-2023-23602: Content Security Policy wasn't being correctly applied to WebSockets in WebWorkers. + CVE-2022-46877: Fullscreen notification bypass. + CVE-2023-23603: Calls to <code>console.log</code> allowed bypasing Content Security Policy via format directive. + CVE-2023-23605: Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7. ==== multipath-tools ==== Subpackages: kpartx libmpath0 - Fix "rpm --verify" (bsc#1207232) ==== netpbm ==== Subpackages: libnetpbm11 - Drop patch big-endian.patch, already in upstream since 10.87.00 ==== rubygem-ruby-dbus ==== Version update (0.18.1 -> 0.19.0) - 0.19.0 API: * Added a ObjectManager mix-in to implement the service-side ObjectManager interface. Bug fixes: * dbus_attr_accessor and friends validate the signature * (gh#mvidner/ruby-dbus#120). * Declare the Introspectable interface in exported * objects (gh#mvidner/ruby-dbus#99). * Do reply with an error when calling a nonexisting object with an existing path prefix (gh#mvidner/ruby-dbus#121). ==== salt ==== Subpackages: python3-salt salt-master salt-minion salt-transactional-update - Control the collection of lvm grains via config (bsc#1204939) - Added: * control-the-collection-of-lvm-grains-via-config.patch ==== tcpdump ==== Version update (4.99.2 -> 4.99.3) - update to 4.99.3: * Updated printers: PTP: Use the proper values for the control field and print un-allocated values for the message field as "Reserved" instead of "none". * Source code: smbutil.c: Replace obsolete function call (asctime) * Documentation: Reformat the installation notes (INSTALL.txt) in Markdown. Convert CONTRIBUTING to Markdown. CONTRIBUTING.md: Document the use of "protocol: " in a commit summary. Add a README file for NetBSD. Fix CMake build to set man page section numbers in tcpdump.1 ==== thunar ==== Version update (4.18.2 -> 4.18.3) Subpackages: libthunarx-3-0 thunar-lang - Update to 4.18.3: * Prevent critical when changing directory (gxo#xfce/thunar#1014) * Keep hidden toolbar hidden after Ctrl+L (gxo#xfce/thunar#1011) * Prevent jumping cursor on file deletion (gxo#xfce/thunar#910) * Prevent Critical when file counting is enabled * Properly handle resident thunar plugins (gxo#xfce/thunar#1007) * Translation Updates ==== tpm2-0-tss ==== Subpackages: libtss2-esys0 libtss2-mu0 libtss2-rc0 libtss2-sys1 libtss2-tctildr0 - add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large RC values passed to the TSS2 function could lead to memory overread or memory overread. This patch is not yet part of any upstream git tag. ==== translation-update ==== Subpackages: translation-update-cs translation-update-da translation-update-de translation-update-el translation-update-en_GB translation-update-es translation-update-fr translation-update-hu translation-update-it translation-update-ja translation-update-pl translation-update-pt translation-update-pt_BR translation-update-ru translation-update-zh_CN translation-update-zh_TW - Update translation list (add az, ms and oc). ==== xfce4-notifyd ==== Version update (0.6.5 -> 0.7.1) Subpackages: xfce4-notifyd-lang - Update to 0.7.1: * Fix incorrect usage of XDT_CHECK_OPTIONAL_PACKAGE * Properly validate markup * Update glade file to remove use of deprecated properties * Support the 'action-icons' hint * Add support for notification sounds * Clean up notification ID storage * Return replaces_id if provided * Remove xfconf prop name define duplication * Add ability to disallow certain apps to send critical notifications * Add a context menu that allows individual known application deletion * Fix a slide-out loop when the mouse pointer is in the way * Add option to hide panel button when no unread notifications * Remove more pre-GTK-3.22 guards * Bump GTK minimum to 2.22 and remove/ifdef X11-isms * Support Wayland * Don't set a nonsensical icon name * Clean up xfce_notify_window_set_icon_pixbuf() * xfce_notify_window_set_icon_pixbuf() shouldn't take ownership * Move urgency hint fetch inside check for correct type * DRY up the configuration handling * Add pref to show summary & body with gauge values * Update glade file to latest version * settings: Disable single click to mute apps (gxo#apps/xfce4-notifyd#5) * Do not treat zero expiration time as urgent * Add compile_flags.txt generation * Fix incorrect icon name for preview notification * Fix blurry icons when UI scale factor > 1 * build: Let xdt-depends.m4 macros set GLib macros * Translation Updates ==== xfce4-whiskermenu-plugin ==== Version update (2.7.1 -> 2.7.2) Subpackages: xfce4-whiskermenu-plugin-lang - Update to version 2.7.2 * Fix missing version number * Fix memory leak when adding launchers to panel * Fix skipping first treeview item when switching modes * Fix clipping when changing application icon size * Fix missing NULL checks with String class * Use Thunar for adding launchers to desktop * Translation Updates ==== xfdesktop ==== Version update (4.18.0 -> 4.18.1) Subpackages: xfdesktop-lang - Update to version 4.18.1: * Load removable volume information asynchronously * Fix apps menu not popping up when menu icons disabled * Translation Updates ==== xfsprogs ==== Version update (6.1.0 -> 6.1.1) Subpackages: libhandle1 xfsprogs-scrub - update to 6.1.1: - scrub: fix warnings/errors due to missing include - debian: Add missing pkg version to the changelog ==== yast2 ==== Version update (4.5.21 -> 4.5.22) Subpackages: yast2-logs - Replace transitional %usrmerged macro with regular version check (boo#1206798) - 4.5.22 ==== yast2-network ==== Version update (4.5.11 -> 4.5.12) - Copy only the specific backend configuration to the target system having a clean installation (bsc#1206723) - 4.5.12 ==== zlib ==== Version update (1.2.12 -> 1.2.13) Subpackages: libminizip1 libz1 zlib-devel - Update to 1.13: * Fix configure issue that discarded provided CC definition * Correct incorrect inputs provided to the CRC functions * Repair prototypes and exporting of new CRC functions * Fix inflateBack to detect invalid input with distances too far * Have infback() deliver all of the available output up to any error * Fix a bug when getting a gzip header extra field with inflate() * Fix bug in block type selection when Z_FIXED used * Tighten deflateBound bounds * Remove deleted assembler code references * Various portability and appearance improvements - Added patches: * zlib-1.2.13-IBM-Z-hw-accelerated-deflate-s390x.patch * zlib-1.2.13-fix-bug-deflateBound.patch * zlib-1.2.13-optimized-s390.patch - Refreshed patches: * zlib-1.2.12-add-optimized-slide_hash-for-power.patch * zlib-1.2.12-add-vectorized-longest_match-for-power.patch * zlib-1.2.12-s390-vectorize-crc32.patch - Removed patches: * zlib-1.2.12-fix-configure.patch * zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch * zlib-1.2.12-optimized-crc32-power8.patch * zlib-1.2.12-correct-inputs-provided-to-crc-func.patch * zlib-1.2.12-fix-CVE-2022-37434.patch * zlib-1.2.11-optimized-s390.patch

1 0

openSUSE Release Engineering meeting 18.01.2023
by Lubos Kocman 23 Jan '23

23 Jan '23

All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting Meeting is hosted here https://meet.opensuse.org/ReleaseEngineeringMeeting ## Attendees DimStar,GuillaumeG, Sarah, Rbrown, lkocman, ddemaio, DocB, maxlin ## Leap Waiting for a new Leap build Leap Builds were stuck on https://bugzilla.suse.com/show_bug.cgi?id=1206718 kernel was accepted yesterday Cisco openh264 setup is finialized on our side - http://codecs.opensuse.org/ big thanks to openSUSE Heroes and Adrian for finalizing publishing Changes to https://en.opensuse.org/OpenH264 No response from cisco on my request Code submission deadline for any SLES 15 SP5 related features in a week fro now. I'm bit concerned that we'll have to shift schedule a bit given the fact that we were stack on SLES 15.5 Feature tracking at https://code.opensuse.org/leap/features/issues Legaldb issues https://github.com/openSUSE/cavil/issues/62 that seems to cause serious delays ## openSUSE Tumbleweed openSUSE:Factory build fail stats: 21 failed 24 unresolvable (last week: 22 / 4) https://tinyurl.com/ysy4nnnz * Most work for the x86-64-vN multiarch libs should be in place, RPM as one of the last missing bits should be merged this week (allowing us to co-install -vN builds based on hwcaps for specifically identified libs) * Ruby 3.2 made some progress, only 3 more yast build fails in Staging:H * Staging:L has a few failures collected: * boost: breaks libreoffice (incl. libetonyek) * gpg2: breaks gpgme * libpcap: breaks meson's test suite * Staging:N openssl-3-as-default testing * Various announcer emails are not going out: seems -Current iso files are no longer symlinks (or not followe symlinks?) DimStar noticed it on MicroOS x86_64 i586 carve-out from Factory * openSUSE:Factory:LegacyX86 is setup and builds are in a similar state as openSUSE:Factory * Bots are already up and running: ttm, pkglistgen, trigger-rebuild for rebuild=local * openQA is setup https://openqa.opensuse.org/group_overview/75 => Migration (manual so far) is possible for users. The first 'zypper dup' after changing the repo could include a bunch of 'package downgrades' as the rebuild counters are not synced across projects. Automatic migration of users (by means of openSUSE-release) will happen by end of January (giving the braves ones time to test and report issues before we mass-switch) * We plan to switch to 4096bit RSA key begin of 2023. Keys are added to the openSUSE-build-key for Leap 15.x. Marcus: the 15.3, 15.4 key was updated. 15.4 continues to rebuild. I'd like to do it for 15.5 during the development phase. Then I'd switch it for only for 15.5 and TW , but not 15.4. We need to handle transition effort for 15.4 as it will switch from 2k to 4k key. ## Richard (MicroOS) Desktop-GNOME: The Road to Release: transactional-update-notifier is in Factory! Finally! Working on a "mod-check" tool to report the following to users List of installed (1st party) packages, with comparisions to both an upstream pristine list and previous snapshots Automatically reset official packages to that upstream pristine list, or previous snapshots Any 3rd party packages and their origin Any known unsupported configurations/alterations and offer remedies if possible mod-check doesn't really 'check' as much as planned at the moment, instead going way further and effectively reinstalling MicroOS Desktop (GNOME) in place, making that new snapshot the new boot target. This will be awesome for any user who wants to 'freshen' up an otherwise heavily altered MicroOS Desktop, or when major Tumbleweed/MicroOS changes occur that otherwise cant be easily modeled in patterns. It also potentially could be a method of migrating non-transactional systems to a transactional one. Heavy testing/development underway..and possibly a rename if mod-check doesn't start actually -checking stuff soon. Bugs still WIP osinfo-db still doesn't recognise MicroOS as a seperate distribution - debates with upstream ongoing Working on YaST-less installation media with FDE by default ## Max Leap Micro 5.4 * The project has been bootstrapped * The missing bits ** Tweak Leap specific patches ** Enable pkglistgen lkocman: is on it Leap 15.5 * The fixed kernel for bsc#1206718 has got merged to SLE15-SP5(just yesterday) * Build stats in Backports(x86_64): 8 unresolvables, 59 fails(last week: 8 unresolvables, 54 fails) ## Guillaume - Arm Tumbleweed: * Rolling, but e-mail with changes for 20230116 has not been sent (See Tumbleweed section above). * WiFi is broken on RPi3/4 (and other systems) with kernel 6.1. A fix has been submitted upstream - https://bugzilla.suse.com/show_bug.cgi?id=1206697 * Pointer Authentication issue, seen in zypper. Fixed upstream, gcc13 should be updated soon in Factory - https://bugzilla.suse.com/show_bug.cgi?id=1206684 * NVIDIA: tester with aarch64 server and NVIDIA card wanted - Proprietary drivers are now available for aarch64 (only G06): https://download.nvidia.com/opensuse/tumbleweed/ - New opengpu driver also available in OBS: https://build.opensuse.org/project/monitor/X11:Drivers:Video lkocman to check on who is the aarch64 + nvidia effort blocked on. I recall that there was a chosen point of contact. Leap: * 15.5 aarch64: covered by Leap section above * 15.5 armv7 now in openQA: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=106 ALP: * No aarch64 specific issues WSL: * Works with x86 emulator since appx installer is x86-64, but this is not really an issue since arm64 Win11 includes x86 emulator by default. Steps documented on the wiki to install the appx from download.o.o: https://en.opensuse.org/openSUSE:WSL#With_Appx_from_openSUSE_download_server ## Sarah - s390x Tumbleweed * kdump is fixed (with calibrate.conf by SLE because of blocked builds for s390x) -> Tumbleweed is rolling again Leap: * tests are failing because of timeout (my next ToDo) * qore updated Question: What should we do with packages buildable only on s390x and not on x86? Example: https://build.opensuse.org/package/show/home:AdaLovelace:branches:server:da… lkocman: I'd start with a bug against the package, then let's agree on next steps with maintainer. Please use bug against openSUSE.org choose 3rd party package. Can be used for anything that is from OBS. ## Doug * Updating openSUSE wiki * Summarizing release manager info for those who can help maintain other architectures * GSoC * Closing out issues * Workshop to finalize projects & application scheduled for on Feb. 7 (deadline at 18:00 UTC) * oSC23 * PO made * Waiting on contract signature * 10 registered, 8 submissions * FOSDEM * Booth in Building/Hall H (we have traditionally be in Building/Hall K) * Bus has 29 sign ups * Article about booth location & activities published * Contact ddemaio if you're in Nuremberg and want to take the bus to FOSDEM. Space may be limited. * FLOSS Weekly podcast schedule for Feb. 8 ## Dirk Not available * Continued work on SUSE:ALP:RISCV bootstrap issues - looking into the java stack which can not be built within ALP * force published 15.4 and 15.5 for armv7 builds, openqa builds have been triggered it appears it is set to do post-release testing? * qemu/libseccomp 15.5 failure still in investigation * made a x86_64-baseline with x86_64-v3 hwcaps prototype for Tumbleweed. Seems successful, has open issue on debuginfo and auto- installation of the v3 optimized version. Performance benefit seems hard to measure. Biggest speedup can be observed by switching zlib to zlib-ng, so looked into fixing the build failures caused by switching to zlib-ng-compat ## Wolfgang (Package Hub), Scott Bahling Not available 15 SP5 Package HUB channel is set up. Stefan did initial testing and looks good. Some packages are still missing, this is on agenda for today and next week. The workshop regarding Package HUB equivalent for ALP Lubos will schedule a call with wolfgang and Scott to ensure that they're in loop for the High Level requirements document. https://en.opensuse.org/openSUSE:ALP/Workgroups/Community/Workshops/Consumi… Package Hub for SLE-15-SP5 product definition added and SCC is currently picking it up so it will be ready for testing with the beta of SLE-15-SP5 ## Maintenance team (Marcus or Maurizio (m4u)) Fixed a long standing issue with gnome-music that was blocking openqa for a long time. 15.4 is working 5.3 is working 15.5 setup TBD (Mid-to-End February would be preferred). Nothing worrysome, preannoucement for 15.3 EOL was sent to mainling list End of December 2022. There were three chromium updates in single week. Configuration setup problem for Maintenance of Leap 15.4 maintenance updates / openQA Marcus regarding Leap 15.4 Image respin - package set will change, we do need to refresh the packagelist * Lubos to talk to Jan Stehlik, we can't put all on Marcuses shoulder. https://etherpad.opensuse.org/p/ReleaseEngineering-20221110-maintenance-dis… Confirmation that QA/QA-maint team will oversee the setup (issues) Lubos: I was asked to provide requirements for the QA team. Mostly for the GA/current release but also for the update. Lubos will make wiki with requirements (something like maintenance plan perhaps). Marcus will review it. * Leap Micro 5.3 maint setup done ffmpeg - (still unsolved) possible file conflict on the next update, no idea how to avoid vendor switching at the moment. Removing the patch on the openSUSE side (that might contain security fixes) or releasing update on the packman side could fix the issue. Lubos to give Marcus some working contact for the team. ## Adrian - OBS DimStart pointed me to the fact that ftp-trees with factory ppc and s390x are not building. It seems to be caused by a smallest worked who is not large enough to handle the cache (caching of all rpms takes about a 1 TB) and it times out. New year cleanup requesting removal of repositories building against EOL distros. ## Project maintainer work flow Status * Base policy to be developed Background on topic found at https://etherpad.opensuse.org/p/ReleaseEngineering-20221221 For me it comes down to a matter of communication. A note like 'thx for your SR, I think we should adapt the following ' or ' we are reviewing your SR, and quite stuck with work...' could already change a lot. Silence for more then 4 week is clearly a perfect way to annoy contributors. And the question should be asked if those unresponsive maintainers are still willing to maintain their projects. Or they may even not be active anymore, another discussion we are having

6 5

Did VNC (x11vnc) get broken with todays tumbleweed kernel?
by Larry Len Rainey 23 Jan '23

23 Jan '23

4 3

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 23 Jan '23

23 Jan '23

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have had problems for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - rtl8812au: Uninstallable: nothing provides kernel-uname-r = 6.0.12-1-default needed by rtl8812au-kmp-default-5.13.6+git20220905.a8450b0_k6.0.12_1.x86_64 Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

2 1

How to check for package inclusion in Leap 15.5 ?
by Olav Reinert 23 Jan '23

23 Jan '23

Hi, What is the best way to check if a package is slated for inclusion in the upcoming Leap 15.5? And if it is included, which version? Specifically, I'm interested in finding out if php8-APCu is going to be included in Leap 15.5, because it's missing in Leap 15.4. Thanks, and regards, Olav Reinert

3 2

TW 20230118 / nvidia-G06 525.85.05 driver: sddm dumps core
by Mathias Homann 21 Jan '23

21 Jan '23

Hi all, I just filed https://bugzilla.opensuse.org/show_bug.cgi?id=1207314 - can anyone else confirm? Cheers MH -- Mathias Homann Mathias.Homann(a)openSUSE.org Jabber (XMPP): lemmy(a)tuxonline.tech Matrix: @mathias:eregion.de IRC: [Lemmy] on freenode and ircnet (bouncer active) keybase: https://keybase.io/lemmy gpg key fingerprint: 8029 2240 F4DD 7776 E7D2 C042 6B8E 029E 13F2 C102

3 2

New Tumbleweed snapshot 20230119 released!
by Dominique Leuenberger 20 Jan '23

20 Jan '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: adwaita-xfce-icon-theme (0.0.2+git0.ee9b710 -> 0.0.3+git0.e0f73b9) ed (1.18 -> 1.19) gcc13 (13.0.0+git197351 -> 13.0.1+git5199) kernel-source (6.1.6 -> 6.1.7) === Details === ==== adwaita-xfce-icon-theme ==== Version update (0.0.2+git0.ee9b710 -> 0.0.3+git0.e0f73b9) - Update to version 0.0.3+git0.e0f73b9: * Add properly scaled phone icon * Fix up entries in index.theme ==== ed ==== Version update (1.18 -> 1.19) - update to 1.19: * Reading a non-existent file with commands 'e' or 'E' did set the 'modified' flag, which prevented a following 'e' command from succeeding * The long name of option '-s' has been changed to '--script'. Option '-s' now only suppresses byte counts and the '!' prompt as mandated by POSIX. It no longer suppresses diagnostic messages written to stderr. * The short name '-q' has been assigned to options '--quiet' and '--silent'. Option '-q' now only suppresses diagnostic messages written to stderr. * The help message showing the line where a script error happened when ed's input is from a regular file is now printed to stdout instead of stderr because it is enabled by the 'H' command. * Ed no longer processes file names for backslash escapes. * It has been documented in the manual that address 0 is valid as a starting point for searches so that '0;/RE/' can match the regular expression RE in the first line of the buffer. * It has been documented in the manual how to achieve the effect of ex style '!' filtering with a sequence of commands. ==== gcc13 ==== Version update (13.0.0+git197351 -> 13.0.1+git5199) Subpackages: libasan8 libatomic1 libgcc_s1 libgcc_s1-32bit libgfortran5 libgomp1 libitm1 liblsan0 libobjc4 libquadmath0 libstdc++6 libstdc++6-32bit libstdc++6-locale libstdc++6-pp libstdc++6-pp-32bit libtsan2 libubsan1 - Configure external timezone database provided by the timezone package. Make libstdc++6 recommend timezone to get a fully working std::chrono. Install timezone when running the testsuite. - Remove dependence on doxygen and graphviz when building the testsuite. Those were used to build the libstdc++ API html documentation but we stopped shipping that when Java support was removed and nobody noticed. Purge traces of the built libstdc++6-gccN-doc package. - Package libhwasan_preinit.o on x86_64. - Update to GCC trunk head (r13-5199-g2f81164255bf0d) * pulls changes up to the start of Stage 4 - Change version numbering to match the commit count from the git gcc-descr alias - Add gcc13-pr107678.patch to fix unwinding on aarch64 with pointer signing. [bsc#1206684] - Don't rely on %usrmerged, set it based on standard %suse_version - Enable PRU flavour for gcc13 ==== kernel-source ==== Version update (6.1.6 -> 6.1.7) - Linux 6.1.7 (bsc#1012628). - netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits (bsc#1012628). - ALSA: control-led: use strscpy in set_led_id() (bsc#1012628). - ALSA: usb-audio: Always initialize fixed_rate in snd_usb_find_implicit_fb_sync_format() (bsc#1012628). - ALSA: hda/realtek - Turn on power early (bsc#1012628). - ALSA: hda/realtek: Enable mute/micmute LEDs on HP Spectre x360 13-aw0xxx (bsc#1012628). - KVM: x86: Do not return host topology information from KVM_GET_SUPPORTED_CPUID (bsc#1012628). - KVM: arm64: Fix S1PTW handling on RO memslots (bsc#1012628). - efi: fix userspace infinite retry read efivars after EFI runtime services page fault (bsc#1012628). - efi: tpm: Avoid READ_ONCE() for accessing the event log (bsc#1012628). - io_uring/poll: add hash if ready poll request can't complete inline (bsc#1012628). - arm64: mte: Fix double-freeing of the temporary tag storage during coredump (bsc#1012628). - arm64: mte: Avoid the racy walk of the vma list during core dump (bsc#1012628). - arm64: cmpxchg_double*: hazard against entire exchange variable (bsc#1012628). - ACPI: Fix selecting wrong ACPI fwnode for the iGPU on some Dell laptops (bsc#1012628). - net: stmmac: add aux timestamps fifo clearance wait (bsc#1012628). - perf auxtrace: Fix address filter duplicate symbol selection (bsc#1012628). - s390/kexec: fix ipl report address for kdump (bsc#1012628). - brcmfmac: Prefer DT board type over DMI board type (bsc#1012628). - ASoC: qcom: lpass-cpu: Fix fallback SD line index handling (bsc#1012628). - elfcore: Add a cprm parameter to elf_core_extra_{phdrs,data_size} (bsc#1012628). - cpufreq: amd-pstate: fix kernel hang issue while amd-pstate unregistering (bsc#1012628). - s390/cpum_sf: add READ_ONCE() semantics to compare and swap loops (bsc#1012628). - s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple() (bsc#1012628). - drm/virtio: Fix GEM handle creation UAF (bsc#1012628). - drm/amd/pm/smu13: BACO is supported when it's in BACO state (bsc#1012628). - drm: Optimize drm buddy top-down allocation method (bsc#1012628). - drm/i915/gt: Reset twice (bsc#1012628). - drm/i915: Reserve enough fence slot for i915_vma_unbind_async (bsc#1012628). - drm/i915: Fix potential context UAFs (bsc#1012628). - drm/amd: Delay removal of the firmware framebuffer (bsc#1012628). - drm/amdgpu: Fixed bug on error when unloading amdgpu (bsc#1012628). - drm/amd/pm: correct the reference clock for fan speed(rpm) calculation (bsc#1012628). - drm/amd/pm: add the missing mapping for PPT feature on SMU13.0.0 and 13.0.7 (bsc#1012628). - drm/amd/display: move remaining FPU code to dml folder (bsc#1012628). - Revert "drm/amdgpu: Revert "drm/amdgpu: getting fan speed pwm for vega10 properly"" (bsc#1012628). - cifs: Fix uninitialized memory read for smb311 posix symlink create (bsc#1012628). - cifs: fix file info setting in cifs_query_path_info() (bsc#1012628). - cifs: fix file info setting in cifs_open_file() (bsc#1012628). - cifs: do not query ifaces on smb1 mounts (bsc#1012628). - cifs: fix double free on failed kerberos auth (bsc#1012628). - io_uring/fdinfo: include locked hash table in fdinfo output (bsc#1012628). - ASoC: rt9120: Make dev PM runtime bind AsoC component PM (bsc#1012628). - ACPI: video: Allow selecting NVidia-WMI-EC or Apple GMUX backlight from the cmdline (bsc#1012628). - platform/x86: dell-privacy: Only register SW_CAMERA_LENS_COVER if present (bsc#1012628). - platform/surface: aggregator: Ignore command messages not intended for us (bsc#1012628). - platform/x86: int3472/discrete: Ensure the clk/power enable pins are in output mode (bsc#1012628). - platform/x86: thinkpad_acpi: Fix profile mode display in AMT mode (bsc#1012628). - platform/x86: asus-wmi: Don't load fan curves without fan (bsc#1012628). - platform/x86: dell-privacy: Fix SW_CAMERA_LENS_COVER reporting (bsc#1012628). - dt-bindings: msm: dsi-controller-main: Fix operating-points-v2 constraint (bsc#1012628). - drm/msm: another fix for the headless Adreno GPU (bsc#1012628). - firmware/psci: Fix MEM_PROTECT_RANGE function numbers (bsc#1012628). - firmware/psci: Don't register with debugfs if PSCI isn't available (bsc#1012628). - drm/msm/adreno: Make adreno quirks not overwrite each other (bsc#1012628). - arm64/signal: Always allocate SVE signal frames on SME only ... changelog too long, skipping 219 lines ... - commit ffddea5

1 0

tumbleweed - Review of the week 2023/03
by Dominique Leuenberger 20 Jan '23

20 Jan '23

Dear Tumbleweed users and hackers, For Tumbleweed, things are steadily rolling. Updates come in (mostly pre-tested in devel projects), are staged, pass staging (most requests pass in a day), and are then added to a snapshot. Sounds rather unspectacular. Of course, this is the optimal case, which does not work in some cases (as seen on the ‘future changes’ that have been carried over for a few weeks already). But all that does not have an impact on users’ workstations, as we simply do not deliver those aspects which are known not to be ready. With all this going on, we have again delivered 7 snapshots during the last week (0112…0118), containing the following, noteworthy changes: * File 5.44 * Mesa 22.3.3 * Salt 3005.1 * NetworkManager 1.40.10 * Fuse 3.13.0 * Pipewire 0.3.64 * KDE Frameworks 5.102.0 * Linux kernel 6.1.6 * Node.JS 19.4.0 * python Sphinx 6.1.3 * libraw 0.21 * RPM: added support for x86_64 microarchitecture. This was the last bit missing to allow packages to start shipping hardware-optimized libraries (glibc hwcaps enabled loading) In the staging areas, we are currently testing the impact of these changes: * Linux kernel 6.1.7 * Mozilla Firefox 109.0 * Mesa adding support for Rusticl (See https://docs.mesa3d.org/rusticl) * LibreOffice 7.4.4.2 * LLVM 15.0.7 * Boost 1.81.0: breaks libetonyek and LibreOffice * GnuPG 2.4: breaks gpgme:qt * Ruby 3.2 to become the default ruby version: YaST is failing * Switch to openSSL 3: Progress tracked in Staging:N * Initial tests to set GCC 13 as the system compiler The openSUSE Tumbleweed repositories are scheduled to change their signing key from the now-used 2048 RSA key to a new 4096bit RSA key. The new public key has been rolled out to the systems since snapshot 20220811, which should make the migration to the new key transparent for all regularly updated systems. Please see the extra announcement on the mailing list[1] Besides all this, please keep in mind that the repositories for i586 installations are going to change. i586 is being split out from the main repositories and handled like the other ports (arm, powerpc, s390x). Anybody can already change the repo manually and perform tests, by end of January, we will deploy code that will switch the repositories automatically. By end of March, we expect all users to have migrated their repositories and we will remove all i586 RPMs from the published repositories (-32bit.x86_64 will remain for wine/steam). More details on this can be found in this post[2] Cheers, Dominique [1] https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… [2] https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/…

1 0

Tinc vs. Systemd Hardening: Could not open /dev/net/tun: No such file or directory
by Wonko Pfux 19 Jan '23

19 Jan '23

Hi, after I updated this morning my tinc vpn setup stopped working. Journal: ... Jan 12 15:19:15 muckefuck tincd[23111]: tincd 1.0.36 starting, debug level 0 Jan 12 15:19:15 muckefuck tincd[23111]: Could not open /dev/net/tun: No such file or directory Jan 12 15:19:15 muckefuck tincd[23111]: Terminating ... After poking around a bit I found that the tinc.service file sets PrivateDevices=true as part of the Systemd hardening effort (bsc#1181400) If I set it to false tinc can access /dev/net/tun. Why is this failing only now? The tinc Package was last changed a year ago. Is it safe to set PrivateDevices=false or is there another way? cheers Wonko

2 9

New Tumbleweed snapshot 20230118 released!
by Dominique Leuenberger 19 Jan '23

19 Jan '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: arphic-ukai-fonts bitstream-vera-fonts crda diffutils (3.8 -> 3.9) freeipmi libXpm libevent librsvg libstorage-ng (4.5.63 -> 4.5.64) manpages-l10n (4.16.0 -> 4.17.0) ncurses (6.4.20230107 -> 6.4.20230114) perl pipewire python-chardet python-configobj python-httpx (0.23.0 -> 0.23.3) python310-packaging (22.0 -> 23.0) rpm yast2-storage-ng (4.5.15 -> 4.5.16) === Details === ==== arphic-ukai-fonts ==== - amend license SUSE-Arphic to SPDX's Arphic-1999 ==== bitstream-vera-fonts ==== - amend license SUSE-Bitstream-Vera to SPDX's Bitstream-Vera ==== crda ==== - Replace transitional %usrmerged macro with regular version check (boo#1206798) ==== diffutils ==== Version update (3.8 -> 3.9) Subpackages: diffutils-lang - diffutils 3.9: * fixes for other platforms ==== freeipmi ==== Subpackages: libfreeipmi17 libipmiconsole2 libipmidetect0 - Remove obsolete ExclusiveArch ==== libXpm ==== Subpackages: libXpm-devel libXpm4 - U_0001-configure-add-disable-open-zfile-instead-of-requirin.patch * needed by U_0005-Fix-CVE-2022-4883-compression-commands-depend-on-PAT.patch - U_0002-Fix-CVE-2022-46285-Infinite-loop-on-unclosed-comment.patch * libXpm: Infinite loop on unclosed comments (CVE-2022-46285, bsc#1207029) - U_0004-Fix-CVE-2022-44617-Runaway-loop-with-width-of-0-and-.patch * libXpm: Runaway loop on width of 0 and enormous height (CVE-2022-44617, bsc#1207030) - U_0005-Fix-CVE-2022-4883-compression-commands-depend-on-PAT.patch * libXpm: compression commands depend on $PATH (CVE-2022-4883, bsc#1207031) - U_regression-bug1207029_1207030_1207031.patch * regression fix for above patches - U_regression2-bug1207029_1207030_1207031.patch * second regression fix: Use gzip -d instead of gunzip ==== libevent ==== - Disable the select backend, this can be easily done by lying to configure. This is done due to: * using fd number > 1024 on an fd_set results in a runtime fortify source assertion, preventing further doom. * select will not be changed to handle fd > 1024. * this limit is unreasonable low for this century. ==== librsvg ==== Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2 rsvg-thumbnailer typelib-1_0-Rsvg-2_0 - update vendor tarball - actually run the testsuite for x86_64 (bsc#1207167) ==== libstorage-ng ==== Version update (4.5.63 -> 4.5.64) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#912 - allow both 'swap' and 'none' as path for swap in fstab - added testcase - 4.5.64 ==== manpages-l10n ==== Version update (4.16.0 -> 4.17.0) Subpackages: man-pages-cs man-pages-da man-pages-de man-pages-el man-pages-es man-pages-fr man-pages-hu man-pages-it man-pages-pl man-pages-pt_BR - Update to version 4.17.0: * Updated many translations. * Swedish is now actively maintained. * New language: Russian. ==== ncurses ==== Version update (6.4.20230107 -> 6.4.20230114) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch 20230114 + change RV to XR/xr, to avoid conflict with pre-existing usage in vim, to use RV/rv to denote DA2 and its response (discussion with Bram Moolenaar) -TD + add XF flag to xterm+focus so that termcap applications can be aware of terminals which may support focus in/out -TD + use xterm+focus in xterm-p370 and tmux -TD + improve configure-script macros vs compiler warnings. - Correct offsets of patches * ncurses-5.9-ibm327x.dif * ncurses-6.4.dif ==== perl ==== Subpackages: perl-base perl-doc - Replace usage of deprecated fgrep with grep -F. ==== pipewire ==== Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-lang pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Add patch from upstream to avoid division by 0 and other issues with invalid values (glfo#pipewire/pipewire#2953): * 0001-alsa-guard-against-some-invalid-values.patch - Add patch from upstream to fix causing an overflow resulting in choppy sound in some cases (glfo#pipewire/pipewire#2680): * 0001-spa-Fix-audioconvert-overflow-when-scaling.patch - Add patch from upstream to fix a crash on arm: * 0001-cpu-arm-Fix-incorrect-free.patch ==== python-chardet ==== - skip python 3.6 builds ==== python-configobj ==== - require setuptools ==== python-httpx ==== Version update (0.23.0 -> 0.23.3) - Update to 0.23.3 * Version 0.23.2 accidentally included stricter type checking on query parameters. This shouldn've have been included in a minor version bump, and is now reverted. (#2523, #2539) - 0.23.2 (2nd Jan, 2023) * Support digest auth nonce counting to avoid multiple auth requests. (#2463) * Multipart file uploads where the file length cannot be determine now use chunked transfer encoding, rather than loading the entire file into memory in order to determine the `Content-Length`. (#2382) * Raise `TypeError` if content is passed a dict-instance. (#2495) * Partially revert the API breaking change in 0.23.1, which removed `RawURL`. We continue to expose a `url.raw` property which is now a plain named-tuple. This API is still expected to be deprecated, but we will do so with a major version bump. (#2481) - 0.23.1 (18th Nov, 2022) * *Note**: The 0.23.1 release should have used a proper version bump, rather than a minor point release. There are API surface area changes that may affect some users. See the "Removed" section of these release notes for details. [#]## Added * Support for Python 3.11. (#2420) * Allow setting an explicit multipart boundary in `Content-Type` header. (#2278) * Allow `tuple` or `list` for multipart values, not just `list`. (#2355) * Allow `str` content for multipart upload files. (#2400) * Support connection upgrades. See https://www.encode.io/httpcore/extensions/#upgrade-requests [#]## Fixed * Don't drop empty query parameters. (#2354) [#]## Removed * Upload files *must* always be opened in binary mode. (#2400) * Drop `.read`/`.aread` from `SyncByteStream`/`AsyncByteStream`. (#2407) * Drop `RawURL`. (#2241) ==== python310-packaging ==== Version update (22.0 -> 23.0) - Update to v23.0 * Remove unused LPAREN token from tokenizer by @hrnciar in #630 * Reorganise the project layout and version management by @pradyunsg in #626 * Correctly handle non-normalised specifiers in requirements by @pradyunsg in #634 * Use stable Python 3.11 in tests by @153957 in #641 * Fix typing for specifiers.BaseSpecifier.filter() by @henryiii in #643 * Correctly handle trailing whitespace on URL requirements by @pradyunsg in #642 * refactor _generic_api to use EXT_SUFFIX by @mattip in #607 * Allow "extra" to be None in the marker environment by @pradyunsg in #650 * Fix typos by @kianmeng in #648 * Update changelog for release by @pradyunsg in #656 ==== rpm ==== Subpackages: librpmbuild9 - Replace transitional %usrmerged macro with regular version check (boo#1206798) ==== yast2-storage-ng ==== Version update (4.5.15 -> 4.5.16) - Extended regexp to identify Dell BOSS storage devices (bsc#1200975) - 4.5.16

1 0

New Tumbleweed snapshot 20230117 released!
by Dominique Leuenberger 18 Jan '23

18 Jan '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: greybird-geeko-theme kernel-source (6.1.4 -> 6.1.6) libnumbertext (1.0.10 -> 1.0.11) librevenge (0.0.4 -> 0.0.5) libva (2.16.0 -> 2.17.0) libwacom (2.4.0 -> 2.5.0) nodejs19 (19.3.0 -> 19.4.0) tracker-miners (3.4.2 -> 3.4.3) yast2-trans (84.87.20230109.3afefde4ef -> 84.87.20230116.80083546af) === Details === ==== greybird-geeko-theme ==== Subpackages: gtk2-metatheme-greybird-geeko gtk3-metatheme-greybird-geeko gtk4-metatheme-greybird-geeko metatheme-greybird-geeko-common - Make "*:link:selected" optional to work around too old gtk4 libs on Leap 15.4; add link-selected-is-optional.patch ==== kernel-source ==== Version update (6.1.4 -> 6.1.6) - Linux 6.1.6 (bsc#1012628). - ALSA: hda: cs35l41: Check runtime suspend capability at runtime_idle (bsc#1012628). - ALSA: hda - Enable headset mic on another Dell laptop with ALC3254 (bsc#1012628). - ALSA: hda: cs35l41: Don't return -EINVAL from system suspend/resume (bsc#1012628). - ALSA: hda/realtek: fix mute/micmute LEDs don't work for a HP platform (bsc#1012628). - ALSA: hda/hdmi: Add a HP device 0x8715 to force connect list (bsc#1012628). - ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (bsc#1012628). - net: sched: disallow noqueue for qdisc classes (bsc#1012628). - gcc: disable -Warray-bounds for gcc-11 too (bsc#1012628). - Update config files. - Revert "SUNRPC: Use RMW bitops in single-threaded hot paths" (bsc#1012628). - selftests/vm/pkeys: Add a regression test for setting PKRU through ptrace (bsc#1012628). - x86/fpu: Emulate XRSTOR's behavior if the xfeatures PKRU bit is not set (bsc#1012628). - x86/fpu: Allow PKRU to be (once again) written by ptrace (bsc#1012628). - x86/fpu: Add a pkru argument to copy_uabi_to_xstate() (bsc#1012628). - x86/fpu: Add a pkru argument to copy_uabi_from_kernel_to_xstate() (bsc#1012628). - x86/fpu: Take task_struct* in copy_sigframe_from_user_to_xstate() (bsc#1012628). - parisc: Align parisc MADV_XXX constants with all other architectures (bsc#1012628). - commit 573f4a9 - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (bsc#1206848). - commit e99ed0e - Linux 6.1.5 (bsc#1012628). - ARM: renumber bits related to _TIF_WORK_MASK (bsc#1012628). - btrfs: replace strncpy() with strscpy() (bsc#1012628). - cifs: fix interface count calculation during refresh (bsc#1012628). - cifs: refcount only the selected iface during interface update (bsc#1012628). - usb: dwc3: gadget: Ignore End Transfer delay on teardown (bsc#1012628). - btrfs: fix off-by-one in delalloc search during lseek (bsc#1012628). - btrfs: fix compat_ro checks against remount (bsc#1012628). - perf probe: Use dwarf_attr_integrate as generic DWARF attr accessor (bsc#1012628). - perf probe: Fix to get the DW_AT_decl_file and DW_AT_call_file as unsinged data (bsc#1012628). - phy: qcom-qmp-combo: fix broken power on (bsc#1012628). - btrfs: fix an error handling path in btrfs_defrag_leaves() (bsc#1012628). - SUNRPC: ensure the matching upcall is in-flight upon downcall (bsc#1012628). - wifi: ath9k: use proper statements in conditionals (bsc#1012628). - bpf: pull before calling skb_postpull_rcsum() (bsc#1012628). - drm/panfrost: Fix GEM handle creation ref-counting (bsc#1012628). - netfilter: nf_tables: consolidate set description (bsc#1012628). - netfilter: nf_tables: add function to create set stateful expressions (bsc#1012628). - netfilter: nf_tables: perform type checking for existing sets (bsc#1012628). - ice: xsk: do not use xdp_return_frame() on tx_buf->raw_buf (bsc#1012628). - net: vrf: determine the dst using the original ifindex for multicast (bsc#1012628). - vmxnet3: correctly report csum_level for encapsulated packet (bsc#1012628). - mptcp: fix deadlock in fastopen error path (bsc#1012628). - mptcp: fix lockdep false positive (bsc#1012628). - netfilter: nf_tables: honor set timeout and garbage collection updates (bsc#1012628). - bonding: fix lockdep splat in bond_miimon_commit() (bsc#1012628). - net: lan966x: Fix configuration of the PCS (bsc#1012628). - veth: Fix race with AF_XDP exposing old or uninitialized descriptors (bsc#1012628). - nfsd: shut down the NFSv4 state objects before the filecache (bsc#1012628). - net: hns3: add interrupts re-initialization while doing VF FLR (bsc#1012628). - net: hns3: fix miss L3E checking for rx packet (bsc#1012628). - net: hns3: fix VF promisc mode not update when mac table full (bsc#1012628). - net: sched: fix memory leak in tcindex_set_parms (bsc#1012628). - qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure (bsc#1012628). - net: dsa: mv88e6xxx: depend on PTP conditionally (bsc#1012628). - nfc: Fix potential resource leaks (bsc#1012628). - bnxt_en: Simplify bnxt_xdp_buff_init() (bsc#1012628). - bnxt_en: Fix XDP RX path (bsc#1012628). - bnxt_en: Fix first buffer size calculations for XDP multi-buffer (bsc#1012628). - bnxt_en: Fix HDS and jumbo thresholds for RX packets ... changelog too long, skipping 201 lines ... - commit 0fb77d6 ==== libnumbertext ==== Version update (1.0.10 -> 1.0.11) Subpackages: libnumbertext-1_0-0 libnumbertext-data - update to 1.0.11: * Soros.cxx/java/js/py: fix boundary inheritance of * optional function (conditional text), reported by Juanma Sanchez * and Antonio Bueno * test/*, configure.ac, Makefile.am: add C++ unit testing * Soros.cxx: fix an assert seen with in libreoffice crashtesting on * an empty string, by CaolÃ¡n McNamara * New modules: * fa.sor: new Persian (Farsi) module by Amir Hossein Maher * mul.sor: new module with note symbols for multiple languages * Module fixes and extensions: * ca.sor: revert removing conditional text * cs.sor: fix ordinals, cardinals, currencies by Stanislav HorÃ¡Äek, * with help of ZdenÄk Crhonek * da.sor: revert removing conditional text * en.sor: add extra currencies (BZF, DKK, ILS, LKR, ZMW, ZWD) for * LibreOffice locales of Number Format dialog windows * es.sor: add extra currencies (PAB, SVC, VED/VES) for LibreOffice, * revert removing conditional text * ga.sor: add currency support * hu_Hung.sor: fix regression of transliteration of parenthesized words * in LibreOffice, reported by ZoltÃ¡n ÃvÃ¡ri * ro.sor: strip first space and remove double space in currency * ru.sor: fix grammar of cents by Alex Ivanov * sl.sor: fix cardinal-masculine and cardinal-neuter, * reported by Martin Srebotnjak * uk.sor: fix grammar of cents by Alex Ivanov * LibreOffice Calc add-on: * CalcAddIn.xcu: new Russian translation by Evgeniy Kukhtinov ==== librevenge ==== Version update (0.0.4 -> 0.0.5) Subpackages: librevenge-0_0-0 librevenge-stream-0_0-0 - update to 0.0.5: * Fix a bunch of issues discovered by oss-fuzz. * Require C++11 for building. * Modernize the code a bit. * Fix assignment of RVNGString from a C String. The previous code would append to the current content instead of replacing it. * When appending a characer to an RVNGString (i.e., using the char overload of append()), don't validate the character. Some libraries use this function to construct an RVNGString from UTF-8 code points. * Drop outdated MSVC project files. * Extend API documentation a bit. * Emit viewBox attribute for SVG output to fix user unit to ensure proper scaling. * More fixes for GDB pretty printers. ==== libva ==== Version update (2.16.0 -> 2.17.0) Subpackages: libva-drm2 libva-x11-2 libva2 - update to 2.17.0: * win: Simplify signature for driver name loading * win: Rewrite driver registry query and fix some bugs/leaks/inefficiencies * win: Add missing null check after calloc * va: Update security disclaimer * dep:remove the file .cvsignore * pkgconfig: add 'with-legacy' for emgd, nvctrl and fglrx * meson: add 'with-legacy' for emgd, nvctrl and fglrx * x11: move all FGLRX code to va_fglrx.c * x11: move all NVCTRL code to va_nvctrl.c * meson: stop using deprecated meson.source_root() * meson: stop using configure_file copy=true * va: correctly include the win32 (local) headers * win: clean-up the coding style * va: dos2unix all the files * drm: remove unnecessary dri2 version/extension query * trace: annotate internal functions with DLL_HIDDEN * build/sysdeps: Remove HAVE_GNUC_VISIBILITY_ATTRIBUTE and use _GNUC_ support level attribute instead * meson: Check support for -Wl,-version-script and build link_args accordingly * meson: Set va_win32 soversion to '' and remove the install_data rename * fix: resouce check null * va_trace: Add Win32 memory types in va_TraceSurfaceAttributes * va_trace: va_TraceSurfaceAttributes should check the VASurfaceAttribMemoryType * va: Adds Win32 Node and Windows build support * va: Adds compat_win32 abstraction for Windows build and prepares va common code for windows build * pkgconfig: Add Win32 package for when WITH_WIN32 is enabled * meson: Add with_win32 option, makes libdrm non-mandatory on Win * x11: add basic DRI3 support * drm: remove VA_DRM_IsRenderNodeFd() helper * drm: add radeon drm + radeonsi mesa combo ==== libwacom ==== Version update (2.4.0 -> 2.5.0) Subpackages: libwacom-data libwacom9 - update to 2.5.0: - Cintiq Pro 27 - Intuos Pro Small refresh - Dell Chromebook 11 5190 2-in-1 - Dell Inspiron 14 7425 2-in-1 - Fujitsu U729X - update keyring ==== nodejs19 ==== Version update (19.3.0 -> 19.4.0) Subpackages: npm19 - Update to version 19.4.0: * buffer: add buffer.isUtf8 for utf8 validation * http: improved timeout defaults handling * net: add autoSelectFamily global getter and setter * os: add availableParallelism() * util: add fast path for text-decoder fatal flag - Update _constraints: * Less RAM for aarch64 and 32-bit arm * Use 'asimdrdm' cpu flag to use aarch64 workers where tests are more stable ==== tracker-miners ==== Version update (3.4.2 -> 3.4.3) Subpackages: tracker-miner-files tracker-miners-lang - Update to version 3.4.3: + Fix possible warnings in tracker-miner-fs-3 + Fixes to handle BTRFS subvolumes + Reset nie:isStoredAs/nie:interpretedAs on updated folders + Drop 'fluidsynthmidi' GStreamer module + Fix GSource leak + Updated translations. ==== yast2-trans ==== Version update (84.87.20230109.3afefde4ef -> 84.87.20230116.80083546af) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20230116.80083546af: * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Georgian) * Translated using Weblate (Georgian) * Translated using Weblate (Georgian) * Translated using Weblate (Georgian) * Translated using Weblate (Georgian) * Added translation using Weblate (Georgian) * Added translation using Weblate (Georgian) * Added translation using Weblate (Georgian) * Added translation using Weblate (Georgian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Georgian) * Translated using Weblate (Georgian) * Translated using Weblate (Georgian) * Translated using Weblate (Georgian) * Translated using Weblate (Georgian) * Translated using Weblate (Georgian) * Translated using Weblate (Georgian) * New POT for text domain 'packager'. * Translated using Weblate (Georgian) * Translated using Weblate (Macedonian) * Translated using Weblate (Georgian) * Translated using Weblate (Georgian) * Translated using Weblate (Georgian) * Translated using Weblate (Georgian) * Translated using Weblate (Georgian) * Translated using Weblate (Macedonian) * Translated using Weblate (Georgian) * Translated using Weblate (Georgian) * Translated using Weblate (Georgian) * Translated using Weblate (Georgian) * Translated using Weblate (Georgian) * Translated using Weblate (Georgian) * Translated using Weblate (Georgian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Georgian)

1 0

New Tumbleweed snapshot 20230116 released!
by Dominique Leuenberger 17 Jan '23

17 Jan '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: attica-qt5 (5.101.0 -> 5.102.0) baloo5 (5.101.0 -> 5.102.0) bluez-qt (5.101.0 -> 5.102.0) breeze5-icons (5.101.0 -> 5.102.0) frameworkintegration (5.101.0 -> 5.102.0) kactivities-stats (5.101.0 -> 5.102.0) kactivities5 (5.101.0 -> 5.102.0) karchive (5.101.0 -> 5.102.0) kauth (5.101.0 -> 5.102.0) kbookmarks (5.101.0 -> 5.102.0) kcalendarcore (5.101.0 -> 5.102.0) kcmutils (5.101.0 -> 5.102.0) kcodecs (5.101.0 -> 5.102.0) kcompletion (5.101.0 -> 5.102.0) kconfig (5.101.0 -> 5.102.0) kconfigwidgets (5.101.0 -> 5.102.0) kcontacts (5.101.0 -> 5.102.0) kcoreaddons (5.101.0 -> 5.102.0) kcrash (5.101.0 -> 5.102.0) kdav (5.101.0 -> 5.102.0) kdbusaddons (5.101.0 -> 5.102.0) kdeclarative (5.101.0 -> 5.102.0) kded (5.101.0 -> 5.102.0) kdelibs4support (5.101.0 -> 5.102.0) kdesu (5.101.0 -> 5.102.0) kdnssd-framework (5.101.0 -> 5.102.0) kdoctools (5.101.0 -> 5.102.0) kemoticons (5.101.0 -> 5.102.0) kfilemetadata5 (5.101.0 -> 5.102.0) kglobalaccel (5.101.0 -> 5.102.0) kguiaddons (5.101.0 -> 5.102.0) kholidays (5.101.0 -> 5.102.0) khtml (5.101.0 -> 5.102.0) ki18n (5.101.0 -> 5.102.0) kiconthemes (5.101.0 -> 5.102.0) kidletime (5.101.0 -> 5.102.0) kimageformats (5.101.0 -> 5.102.0) kinit (5.101.0 -> 5.102.0) kio (5.101.0 -> 5.102.0) kirigami2 (5.101.0 -> 5.102.0) kitemmodels (5.101.0 -> 5.102.0) kitemviews (5.101.0 -> 5.102.0) kjobwidgets (5.101.0 -> 5.102.0) kjs (5.101.0 -> 5.102.0) knewstuff (5.101.0 -> 5.102.0) knotifications (5.101.0 -> 5.102.0) knotifyconfig (5.101.0 -> 5.102.0) kpackage (5.101.0 -> 5.102.0) kparts (5.101.0 -> 5.102.0) kpeople5 (5.101.0 -> 5.102.0) kplotting (5.101.0 -> 5.102.0) kpty (5.101.0 -> 5.102.0) kquickcharts (5.101.0 -> 5.102.0) kross (5.101.0 -> 5.102.0) krunner (5.101.0 -> 5.102.0) kservice (5.101.0 -> 5.102.0) ktexteditor (5.101.0 -> 5.102.0) ktextwidgets (5.101.0 -> 5.102.0) kunitconversion (5.101.0 -> 5.102.0) kwallet (5.101.0 -> 5.102.0) kwayland (5.101.0 -> 5.102.0) kwidgetsaddons (5.101.0 -> 5.102.0) kwindowsystem (5.101.0 -> 5.102.0) kxmlgui (5.101.0 -> 5.102.0) libKF5ModemManagerQt (5.101.0 -> 5.102.0) libKF5NetworkManagerQt (5.101.0 -> 5.102.0) mpg123 (1.31.1 -> 1.31.2) okteta (0.26.9 -> 0.26.10) perl-Image-ExifTool (12.52 -> 12.54) plasma-framework (5.101.0 -> 5.102.0) prison-qt5 (5.101.0 -> 5.102.0) purpose (5.101.0 -> 5.102.0) qqc2-desktop-style (5.101.0 -> 5.102.0) solid (5.101.0 -> 5.102.0) sonnet (5.101.0 -> 5.102.0) syndication (5.101.0 -> 5.102.0) syntax-highlighting (5.101.0 -> 5.102.0) threadweaver (5.101.0 -> 5.102.0) === Details === ==== attica-qt5 ==== Version update (5.101.0 -> 5.102.0) Subpackages: libKF5Attica5 - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - No code change since 5.101.0 ==== baloo5 ==== Version update (5.101.0 -> 5.102.0) Subpackages: baloo5-file baloo5-file-lang baloo5-imports baloo5-kioslaves baloo5-kioslaves-lang baloo5-tools baloo5-tools-lang libKF5Baloo5 libKF5BalooEngine5 libKF5BalooEngine5-lang - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - No code change since 5.101.0 ==== bluez-qt ==== Version update (5.101.0 -> 5.102.0) Subpackages: bluez-qt-imports bluez-qt-udev libKF5BluezQt6 - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - No code change since 5.101.0 ==== breeze5-icons ==== Version update (5.101.0 -> 5.102.0) - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * Revert "Add SimpleScreenRecorder icon" (kde#462905) * Add some links for symbolic icons * Don't generate BINARY_ICONS_RESOURCE by default with Qt >= 6 ==== frameworkintegration ==== Version update (5.101.0 -> 5.102.0) Subpackages: frameworkintegration-plugin libKF5Style5 - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - No code change since 5.101.0 ==== kactivities-stats ==== Version update (5.101.0 -> 5.102.0) - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - No code change since 5.101.0 ==== kactivities5 ==== Version update (5.101.0 -> 5.102.0) Subpackages: kactivities5-imports libKF5Activities5 - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * Disable tests that require X11 on non X11 platforms ==== karchive ==== Version update (5.101.0 -> 5.102.0) Subpackages: libKF5Archive5 libKF5Archive5-lang - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - No code change since 5.101.0 ==== kauth ==== Version update (5.101.0 -> 5.102.0) Subpackages: libKF5Auth5 libKF5Auth5-lang libKF5AuthCore5 - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * Fix polkit package name in CMake config (kde#463402) ==== kbookmarks ==== Version update (5.101.0 -> 5.102.0) Subpackages: libKF5Bookmarks5 libKF5Bookmarks5-lang - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - No code change since 5.101.0 ==== kcalendarcore ==== Version update (5.101.0 -> 5.102.0) - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - No code change since 5.101.0 ==== kcmutils ==== Version update (5.101.0 -> 5.102.0) Subpackages: kcmutils-imports libKF5KCMUtils5 libKF5KCMUtils5-lang libKF5KCMUtilsCore5 - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * Remove unused KPluginInfo includes ==== kcodecs ==== Version update (5.101.0 -> 5.102.0) Subpackages: libKF5Codecs5 libKF5Codecs5-lang - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * Add missing license header * Port away from own deprecated API ==== kcompletion ==== Version update (5.101.0 -> 5.102.0) Subpackages: libKF5Completion5 libKF5Completion5-lang - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - No code change since 5.101.0 ==== kconfig ==== Version update (5.101.0 -> 5.102.0) Subpackages: kconf_update5 libKF5ConfigCore5 libKF5ConfigCore5-lang libKF5ConfigGui5 libKF5ConfigQml5 - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * fix safety issue of multiple threads use KConfig in the same process ==== kconfigwidgets ==== Version update (5.101.0 -> 5.102.0) Subpackages: libKF5ConfigWidgets5 libKF5ConfigWidgets5-lang - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * .kde-ci.yml: enable static CI builds * [kcommandbar] Save last used items in state config * [kcodecaction] Deprecate KEncodingProper-based API - Drop patch, now upstream: * 0001-Copy-kf5_entry.desktop-to-their-respective-locale.patch ==== kcontacts ==== Version update (5.101.0 -> 5.102.0) Subpackages: kcontacts-lang libKF5Contacts5 - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * Make test failures fatal on Linux and FreeBSD CI * Fix bug 395683 Entry for security-aware messengers (kde#395683) ==== kcoreaddons ==== Version update (5.101.0 -> 5.102.0) Subpackages: kcoreaddons-lang libKF5CoreAddons5 - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * Config.cmake.in: workaround Inotify static issue * Better Pluralize 'n minutes ago' (kde#462261) * Fix portal urls cache on X11 (kde#460314) ==== kcrash ==== Version update (5.101.0 -> 5.102.0) - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * Remove dead code for startup id handling ==== kdav ==== Version update (5.101.0 -> 5.102.0) Subpackages: kdav-lang libKF5DAV5 - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - No code change since 5.101.0 ==== kdbusaddons ==== Version update (5.101.0 -> 5.102.0) Subpackages: kdbusaddons-tools libKF5DBusAddons5 libKF5DBusAddons5-lang - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - No code change since 5.101.0 ==== kdeclarative ==== Version update (5.101.0 -> 5.102.0) Subpackages: kdeclarative-components libKF5CalendarEvents5 libKF5Declarative5 libKF5Declarative5-lang libKF5QuickAddons5 - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * draganddrop replace QList::first() with constFirst() * calendarevents: add new alternate date ready signal and deprecate the old one * Support modifierOnlyAllowed in KeySequenceItem ==== kded ==== Version update (5.101.0 -> 5.102.0) - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - No code change since 5.101.0 ==== kdelibs4support ==== Version update (5.101.0 -> 5.102.0) Subpackages: kdelibs4support-lang libKF5KDELibs4Support5 - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - No code change since 5.101.0 ==== kdesu ==== Version update (5.101.0 -> 5.102.0) Subpackages: libKF5Su5 libKF5Su5-lang - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - No code change since 5.101.0 ==== kdnssd-framework ==== Version update (5.101.0 -> 5.102.0) Subpackages: libKF5DNSSD5 libKF5DNSSD5-lang - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - No code change since 5.101.0 ==== kdoctools ==== Version update (5.101.0 -> 5.102.0) Subpackages: kdoctools-lang libKF5DocTools5 - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * Adding myself to the contributor list ==== kemoticons ==== Version update (5.101.0 -> 5.102.0) - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - No code change since 5.101.0 ==== kfilemetadata5 ==== Version update (5.101.0 -> 5.102.0) Subpackages: kfilemetadata5-lang - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * odfextractor: Add support for Open Document Graphics ==== kglobalaccel ==== Version update (5.101.0 -> 5.102.0) Subpackages: kglobalaccel5 libKF5GlobalAccel5 libKF5GlobalAccel5-lang libKF5GlobalAccelPrivate5 - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * Don't install kglobalacceld5 service file for KF6 * Deprecate activateGlobalShortcutContext and shortcut contexts in general ==== kguiaddons ==== Version update (5.101.0 -> 5.102.0) Subpackages: libKF5GuiAddons5 - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * waylandclipboard: Be a bit smarter about when to use the QGuiApplication::clipboard (kde#462979) * Perform some initialization in initialization list * Fix test on Windows * KeySequenceRecorder: Allow modifier-only shortcuts * KColorSchemeWatcherWin: Fix checking for dark mode * Correct descriptions for CMake options WITH_WAYLAND and WITH_X11 * waylandclipboard: Update QClipboard when gaining focus (kde#442521) ==== kholidays ==== Version update (5.101.0 -> 5.102.0) Subpackages: libKF5Holidays5 libKF5Holidays5-lang - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * holidays/plan2/holiday_us_en-us - fix Junetenth date * Fix German "BuÃ- und Bettag" holiday is wrong (SN,BY) (kde#461835) * Add holidays for Malaysia (kde#462867) * cmake: Use ECMQmlModule for declarative plugin * qcalendarsystem condition 'months<0' is always true ==== khtml ==== Version update (5.101.0 -> 5.102.0) Subpackages: libKF5KHtml5 libKF5KHtml5-lang - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * fix clang build: error: invalid operands to binary expression ==== ki18n ==== Version update (5.101.0 -> 5.102.0) Subpackages: libKF5I18n5 libKF5I18n5-lang - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * tests: Fix build on Qt6 ==== kiconthemes ==== Version update (5.101.0 -> 5.102.0) Subpackages: libKF5IconThemes5 libKF5IconThemes5-lang - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * .kde-ci.yml: enable static CI builds ==== kidletime ==== Version update (5.101.0 -> 5.102.0) - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * Guard destruction usage ==== kimageformats ==== Version update (5.101.0 -> 5.102.0) - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * raw: tweak seek implementation * heif: fix error handling * heif: rewrite plugin to use only libheif C API ==== kinit ==== Version update (5.101.0 -> 5.102.0) Subpackages: kinit-lang - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * Fix Windows build ==== kio ==== Version update (5.101.0 -> 5.102.0) Subpackages: kio-core kio-lang - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * Restore old behavior for KFileFilterCombo::setFilter * [kprocessrunner] Don't specify which desktop the app should be launched on * Fix crash when dealing with user notification dialog * [WidgetsAskUserActionHandler] Add fallbacks for dialog parent windows (kde#463124) * [jobuidelegate] Set window when creating delegate * Fix KFileFilterComboTest * kdiroperator: fix full file path not being stripped (kde#459900) * Fix integer overflow for large files in AccessManager (kde#452972) * Pre-select "Delete" in Delete Confirmation Dialog (kde#462845) * Make link against KWindowSystem private * [KOpenWithDialog] Save search history in state config * file_unix: Fix check for hidden NTFS files * Use new nomenclature with socket name; use ".socket" suffix * Port away from deprecated KService::property overload * [previewjob] Deprecate overlayIconSize and overlayIconAlpha * Replace KIO::SlaveConfig with KIO::WorkerConfig * Remove unused includes * [kpropertiesdialog] Remove UI to set DBus startup type * when inside a sandbox use different openwith behavior * Don't install service desktop files for KCMs in KF6 * Don't install KonqPopupMenu service type file for KF6 * Fix typo * Port away from deprecated KWindowSystem API * webdav docs: remove broken link ==== kirigami2 ==== Version update (5.101.0 -> 5.102.0) Subpackages: kirigami2-lang libKF5Kirigami2-5 - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Too many changes since 5.101.0, only listing bugfixes: * Calculate CategorizedSettings's width by using word width instead of length (kde#462698) * Fix getting tablet mode on application startup (kde#462187) * templates/OverlayDrawer minor bugfixes (kde#462602) * FormLayout: remove excessive spacing above unlabeled separators (kde#462300) * Allow closing drawers on non-touch devices (kde#454119) * icon: proceed itemChange in QQuickItem (kde#462630) ==== kitemmodels ==== Version update (5.101.0 -> 5.102.0) Subpackages: kitemmodels-imports libKF5ItemModels5 - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * KSelectionModel: Fix build with QPrivateSignal changes ==== kitemviews ==== Version update (5.101.0 -> 5.102.0) Subpackages: libKF5ItemViews5 libKF5ItemViews5-lang - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - No code change since 5.101.0 ==== kjobwidgets ==== Version update (5.101.0 -> 5.102.0) Subpackages: libKF5JobWidgets5 libKF5JobWidgets5-lang - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - No code change since 5.101.0 ==== kjs ==== Version update (5.101.0 -> 5.102.0) Subpackages: libKF5JS5 libKF5JSApi5 - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - No code change since 5.101.0 ==== knewstuff ==== Version update (5.101.0 -> 5.102.0) Subpackages: knewstuff-imports libKF5NewStuff5 libKF5NewStuff5-lang libKF5NewStuffCore5 libKF5NewStuffWidgets5 - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * Port away from deprecated KService::property overload * core: Don't make URL installation a false question * KNSCore::Question: Include the entry in the question ==== knotifications ==== Version update (5.101.0 -> 5.102.0) Subpackages: libKF5Notifications5 libKF5Notifications5-lang - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * doc: Tell which is the default value of status and category * Add libdbusmenu-qt to .kde-ci.yml ==== knotifyconfig ==== Version update (5.101.0 -> 5.102.0) Subpackages: libKF5NotifyConfig5 libKF5NotifyConfig5-lang - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * Fix signal after edit TTS_select ==== kpackage ==== Version update (5.101.0 -> 5.102.0) Subpackages: kpackage-lang - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - No code change since 5.101.0 ==== kparts ==== Version update (5.101.0 -> 5.102.0) Subpackages: libKF5Parts5 libKF5Parts5-lang - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * ReadOnlyPart: don't emit urlChanged() from destructor ==== kpeople5 ==== Version update (5.101.0 -> 5.102.0) Subpackages: kpeople5-lang - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - No code change since 5.101.0 ==== kplotting ==== Version update (5.101.0 -> 5.102.0) - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - No code change since 5.101.0 ==== kpty ==== Version update (5.101.0 -> 5.102.0) Subpackages: libKF5Pty5 libKF5Pty5-lang - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - No code change since 5.101.0 ==== kquickcharts ==== Version update (5.101.0 -> 5.102.0) - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - No code change since 5.101.0 ==== kross ==== Version update (5.101.0 -> 5.102.0) Subpackages: kross-lang - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - No code change since 5.101.0 ==== krunner ==== Version update (5.101.0 -> 5.102.0) - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * AbstractRunnerTest: Provider better error message if plugin could not be found * AbstractRunnerTest: Use QFileInfo::completeBaseName rather than QFileInfo::baseName ==== kservice ==== Version update (5.101.0 -> 5.102.0) Subpackages: kservice-lang - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * Allow accessing custom properties of KServiceActions * Replace QVariant::Type with QMetaType::Type * Deprecate KService::dbusStartupType ==== ktexteditor ==== Version update (5.101.0 -> 5.102.0) Subpackages: ktexteditor-lang - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * Add missing include * Fix crash on undo after reload (kde#462793) * Fix 1 space indent wrongly detected * Update the cursor and anchor to sync with the visual but not scroll for selectAll * Implement invokeAction and commit preedit when click outside the preedit. * Add missing KWindowSystem dependency * Fix 1 space indent not detected * Made suggested changes * Added New Script Sort Uniq * do some limited lookahead * ensure we emit the changes signal if needed * ensure proper range cleanup * do full update of the border * fix hl logic again * remove no longer used doHighlight params * remove flagFoldingStartIndentation * remove markedAsFoldingStartIndentation * avoid use of markedAsFoldingStart * start to compute indentation based folding on demand * Accept event when clearing multicursors * Add Dart and Go to katemoderc ==== ktextwidgets ==== Version update (5.101.0 -> 5.102.0) Subpackages: libKF5TextWidgets5 libKF5TextWidgets5-lang - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * Adapt KRichTextEditTest to Qt 6.4 ==== kunitconversion ==== Version update (5.101.0 -> 5.102.0) Subpackages: libKF5UnitConversion5 libKF5UnitConversion5-lang - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * Adapt to HRK being replaced by EUR ==== kwallet ==== Version update (5.101.0 -> 5.102.0) Subpackages: kwallet-tools kwallet-tools-lang kwalletd5 kwalletd5-lang libKF5Wallet5 libkwalletbackend5-5 - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * kwallet replace "DCOP" with "D-Bus" * Add qca to .kde-ci.yml * Don't install kwalletd5 service file for KF6 ==== kwayland ==== Version update (5.101.0 -> 5.102.0) - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * Make sure that HAVE_MEMFD is defined to 0 if not found ==== kwidgetsaddons ==== Version update (5.101.0 -> 5.102.0) Subpackages: libKF5WidgetsAddons5 libKF5WidgetsAddons5-lang - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * Make Full Screen action use consistent text and icon (kde#240854) * Restore ABI compatibility broken in 29bb6d ==== kwindowsystem ==== Version update (5.101.0 -> 5.102.0) Subpackages: libKF5WindowSystem5 libKF5WindowSystem5-lang - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * Merge two KWINDOWSYSTEM_HAVE_X11 sections into one * Fix KStartupInfo::appStarted() * Deprecate KStartupInfo::startupId() * Deprecate KStartupInfo::silenceStartup * Add a formatting commit to blame ignore list * KWindowSystemPluginWrapper doesn't need a virtual dtor * Make KX11Extras::icon behave like KWindowSytem::icon (kde#462739) ==== kxmlgui ==== Version update (5.101.0 -> 5.102.0) Subpackages: libKF5XmlGui5 libKF5XmlGui5-lang - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * Decrease minimum height of inactive list widget (kde#461580) ==== libKF5ModemManagerQt ==== Version update (5.101.0 -> 5.102.0) - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * modempropertiestest Value stored to 'found' is never read * Lookup country code during initialization ==== libKF5NetworkManagerQt ==== Version update (5.101.0 -> 5.102.0) - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * Explicitly look for Qt::DBus in the CMake config file ==== mpg123 ==== Version update (1.31.1 -> 1.31.2) Subpackages: libmpg123-0 mpg123-openal - Update to version 1.31.2 * Fix build --with-network=internal only (configure logic error, bug 348). ==== okteta ==== Version update (0.26.9 -> 0.26.10) Subpackages: libKasten4 libOkteta3 libkasten-lang libokteta-lang okteta-data okteta-lang - Update to 0.26.10 * Improved: translations * Improved: Skip bookmark on current position for next/previous navigation - cleanup spec file ==== perl-Image-ExifTool ==== Version update (12.52 -> 12.54) Subpackages: exiftool perl-File-RandomAccess - Update to 12.54: - Increased precision of Sony FocusDistance2 conversion - Decode a number of new Apple tags (thanks Frank Rupprecht) - Fixed bug writing QuickTime-format files which have a zero-sized mdat (ie. media data extends to end of file) which would cause an incorrect mdat size to be written - Added support for a number of new XMP tags written by ACR 15.1 - Added a new Nikon LensID - Decode timed GPS from Lamax S9 dual dashcam MOV videos - Decode a number of new Nikon tags (thanks Warren Hatch) - Decode a couple of new Canon tags (thanks John Moyer) - Decode FujiFilm BWMagentaGreen tag - Enable block-write of EXIF to JXL files - Accept values of "now" and "Z" when writing EXIF OffsetTime tags - Changed priority of XMP when reading/writing HEIC files so that it is no longer preferred as with other QuickTime-based formats - Changed family 1 group name of Canon DR4 tags from CanonVRD to CanonDR4 to allow newer tags to be differentiated from older ones. The family 0 group name for both remains CanonVRD - Patched to recognize JXL EXIF box with non-zero header length - Patched to avoid runtime error when writing a PDF with an Info dictionary which was stored incorrectly as a direct object - Fixed problem writing EXIF to JXL images where a new EXIF box was created even if one previously existed ==== plasma-framework ==== Version update (5.101.0 -> 5.102.0) Subpackages: libKF5Plasma5 plasma-framework-components plasma-framework-lang - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * Dialog: Only center panel popup if it still would cover two thirds of its panel widget (kde#462930) * containmentinterface: add function to open context menu * ExpandableListItem: load custom content when item is expanded * PC3/ActionTextField: Specify focus reason for shortcut activation * Use StandardKey.Find instead of "CTRL+F" * ActionTextField: add property type for focusSequence * ActionTextField: show native shortcut text in tooltip * ActionTextField: fix StandardKey not working * Dialog: Add default case to a switch to make clangd happier * Dialog: Use one std::optional instead of two boolean flags * Mark transient applets in config (kde#417114) ==== prison-qt5 ==== Version update (5.101.0 -> 5.102.0) Subpackages: libKF5Prison5 prison-qt5-imports - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * Add support for ZXing 2.0 * Add zxing-cpp to .kde-ci.yml ==== purpose ==== Version update (5.101.0 -> 5.102.0) Subpackages: libKF5Purpose5 libKF5PurposeWidgets5 purpose-lang - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * menudemo fix clazy-detaching-temporary ==== qqc2-desktop-style ==== Version update (5.101.0 -> 5.102.0) - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * kquickstyleitem fix clazy warning clazy-qstring-arg * CheckBox/RadioButton/Switch: update implicit sizing code * CheckBox/RadioButton/Switch: center align indicators when no content * CheckBox/RadioButton/Switch: align indicators with 1st text line * Button/ToolButton: allow menu arrows to be added by Accessible.role ==== solid ==== Version update (5.101.0 -> 5.102.0) Subpackages: libKF5Solid5 libKF5Solid5-lang solid-imports solid-tools - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * Remove unused variable 'vendor' * Perform some initializations in initialization list * Convert uint to enum before passing to switch ==== sonnet ==== Version update (5.101.0 -> 5.102.0) Subpackages: libKF5SonnetCore5 libKF5SonnetCore5-lang libKF5SonnetUi5 sonnet-imports - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * Change underscores to spaces in Esperanto trigrams * Add Esperanto trigram data file * SpellCheckDecorator: manage the d-pointer with a std::unique_ptr * SpellCheckDecorator: remove eventfilter in destructor ==== syndication ==== Version update (5.101.0 -> 5.102.0) - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - No code change since 5.101.0 ==== syntax-highlighting ==== Version update (5.101.0 -> 5.102.0) Subpackages: libKF5SyntaxHighlighting5 libKF5SyntaxHighlighting5-lang syntax-highlighting-imports - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - Changes since 5.101.0: * Resolve conflict on .ex file extension * Markdown: remove dynamic rules that are not needed * Julia: merge hundreds of rules into a single regex ; fix adjoint operator ; includes ##Comments * avoid temporary constructions of Definition in AbstractHighlighter::highlightLine * GCode: numbers are optional with parameters (kde#462969) * cmake: Use ECMQmlModule for qtquick plugin * update version and references * Add MapCSS highlighting * Update test files for Nim codeblock in markdown * Add testcase to markdown file for Nim code blocks * Markdown: Use nim highlighting in nim blocks * Add testcase for "\" * Nim: Small syntax fixes * Add new keywords: `get` and `set` ==== threadweaver ==== Version update (5.101.0 -> 5.102.0) - Update to 5.102.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.102.0 - No code change since 5.101.0

1 0

leap 15.5 submissions, package drop
by Peter Czanik 17 Jan '23

17 Jan '23

Hi, When submitting to Factory, my syslog-ng updates usually get accepted on the day of submission. Now submitted syslog-ng 4.0 to Leap 15.5 and a day later only a couple of automated tests happened. According to https://en.opensuse.org/openSUSE:Roadmap#Schedule_for_openSUSE_Leap_15.5 the beta is near. Will it be accepted on time? Reading the release schedule also reminded me about libevtlog: "Deadline for any package removals from Leap." It is in SLE 15 SP5 backports (https://build.opensuse.org/package/view_file/openSUSE:Backports:SLE-15-SP5/…), but should be dropped. This package was developed originally as an independent library by syslog-ng developers, but only syslog-ng used it. So, a couple of years ago it was merged into syslog-ng. Syslog-ng is using the merged version. How can libevtlog be dropped from Leap 15.5? And as a related question: can it also be dropped from Base:System? https://build.opensuse.org/package/users/Base:System/libevtlog Or someone is maintaining an older syslog-ng version which still requires it? Peter

2 1

New Tumbleweed snapshot 20230115 released!
by Dominique Leuenberger 16 Jan '23

16 Jan '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: fillup pciutils perl-Bootloader (0.940 -> 0.941) python-Pygments (2.13.0 -> 2.14.0) rsyslog shadow sysconfig === Details === ==== fillup ==== - Replace transitional %usrmerged macro with regular version check (boo#1206798) ==== pciutils ==== Subpackages: libpci3 - Replace transitional %usrmerged macro with regular version check (boo#1206798) ==== perl-Bootloader ==== Version update (0.940 -> 0.941) - merge gh#openSUSE/perl-bootloader#141 - systemd-boot: easier initial setup - 0.941 ==== python-Pygments ==== Version update (2.13.0 -> 2.14.0) - update to 2.14.0: * Added lexers: + Arturo (#2259) + GAP session (#2211) + Fift (#2249) + func (#2232) + Jsonnet (#2239) + Minecraft schema (#2276) + MIPS (#2228) + Phix (#2222) + Portugol (#2300) + TL-b (#2247) + World of Warcraft TOC format (#2244, #2245) + Wren (#2271) * Updated lexers: + Abap: Update keywords (#2281) + Alloy: Update for Alloy 6 (#1963) + C family (C, C++ and many others): - Fix an issue where a chunk would be wrongly recognized as a function definition due to braces in comments (#2210) - Improve parantheses handling for function definitions (#2207, #2208) + C#: Fix number and operator recognition (#2256, #2257) + CSound: Updated builtins (#2268) + F#: Add .fsx file extension (#2282) + gas (GNU assembler): recognize braces as punctuation (#2230) + HTTP: Add CONNECT keyword (#2242) + Inform 6: Fix lexing of properties and doubles (#2214) + INI: Allow comments that are not their own line (#2217, #2161) + Java properties: Fix issue with whitespace-delimited keys, support comments starting with ! and escapes, no longer support undocumented ; and // comments (#2241) + LilyPond: Improve heuristics, add \maxima duration (#2283) + LLVM: Add opaque pointer type (#2269) + Macaulay2: Update keywords (#2305) + Minecraft-related lexers (SNB and Minecraft function) moved to pygments.lexers.minecraft (#2276) + Nim: General improvements (#1970) + Nix: Fix single quotes inside indented strings (#2289) + Objective J: Fix catastrophic backtracking (#2225) + NASM: Add support for SSE/AVX/AVX-512 registers as well as 'rel' and 'abs' address operators (#2212) + Powershell: - Add local: keyword (#2254) - Allow continuations without markers (#2262, #2263) + Solidity: Add boolean operators (#2292) + Spice: Add enum keyword and fix a bug regarding binary, hexadecimal and octal number tokens (#2227) + YAML: Accept colons in key names (#2277) * Fix make mapfiles when Pygments is not installed in editable mode (#2223) * Support more filetypes and compression types in autopygmentize (#2219) * Merge consecutive tokens in Autohotkey, Clay (#2248) * Add .nasm as a recognized file type for NASM (#2280) * Add *Spec.hs as a recognized file type for HSpec (#2308) * Add *.pyi (for typing stub files) as a recognized file type for Python (#2331) * The HTML lexer no longer emits empty spans for whitespace (#2304) * Fix IRCFormatter inserting linenumbers incorrectly (#2270) - set minimum python version to 3.6: increased upstream -- gh#pygments/pygments#2059 - remove lxml BuildRequires: dropped upstream -- gh#pygments/pygments#2301 - remove skip_python2: python >= 3.6 is already required - drop python_module macro definition: provided by python-rpm-macros ==== rsyslog ==== - Replace transitional %usrmerged macro with regular version check (boo#1206798) ==== shadow ==== Subpackages: libsubid4 login_defs - Add shadow-fix-print-login-timeout.patch: Fix printing full login timeout message See gh/shadow-maint/shadow#621 ==== sysconfig ==== Subpackages: sysconfig-netconfig - Replace transitional %usrmerged macro with regular version check (boo#1206798)

1 0

New Tumbleweed snapshot 20230114 released!
by Dominique Leuenberger 15 Jan '23

15 Jan '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: AppStream (0.15.5 -> 0.15.6) NetworkManager (1.40.8 -> 1.40.10) container-selinux filesystem flatpak fuse3 (3.12.0 -> 3.13.0) groff groff-full gtksourceview5 (5.6.1 -> 5.6.2) kernel-firmware (20221216 -> 20230110) libnma (1.10.4 -> 1.10.6) libstorage-ng (4.5.62 -> 4.5.63) libxfce4ui (4.18.0 -> 4.18.1) libxfce4util (4.18.0 -> 4.18.1) ndctl (74 -> 75) pipewire (0.3.63 -> 0.3.64) poppler poppler-qt5 python-cryptography python-qt5-sip selinux-policy util-linux util-linux-systemd vim (9.0.1107 -> 9.0.1188) w3m yast2-country (4.5.3 -> 4.5.5) yast2-packager (4.5.10 -> 4.5.11) === Details === ==== AppStream ==== Version update (0.15.5 -> 0.15.6) Subpackages: AppStream-lang libAppStreamQt2 libappstream4 - Update to version 0.15.6: * Features: + qt: Add API for ContentRating descriptions and ratingIds + Add some coccinelle semantic patches for common style issues + compose: Allow building without SVG support (for bootstrap only) + validator: - Check for nodes that are text nodes even though they shouldn't be - Extend validation for custom tag - Improve Screenshot validation * Specification: + docs: Fix typos in <extends> documentation * Bugfixes: + validator: - internat: Don't allow bandwidth_mbitps when value is offline-only - Fix timestamp validation - Allow release descriptions to start with punctuation + compose: - Only add no-metainfo tag if component isn't already ignored - Show better error in AscImage if compose was build without rsvg + Add a hack to clarify proper PtrArray element ownership for language bindings + qt: - Port away from deprecated QDateTime API - Deprecate Component::requires - Fix warning - Fix stringListToCharArray and Pool::componentsByCategories - Port away from deprecated foreach + as-review: - Add a typedef for property enums - Install properties at once rather than individually - Specify G_PARAM_STATIC_STRINGS for properties - Emit GObject::notify on property value changes - Add missing property for as_review_{get,set}_priority() + ascli: fix NULL pointer dereference * Miscellaneous: + docs: Split releases specification into its own section + style: Make code easier to read by using helper macros in all places + Make some compiler warnings fatal unconditionally - Add patch to support meson 0.59 which is the only version available in SLE 15 SP5: * support-meson0.59.patch - Don't use %ldconfig_scriptlets. Leap 15.3 doesn't understand it. ==== NetworkManager ==== Version update (1.40.8 -> 1.40.10) Subpackages: NetworkManager-bluetooth NetworkManager-lang NetworkManager-pppoe NetworkManager-tui NetworkManager-wwan libnm0 typelib-1_0-NM-1_0 - Update to version 1.40.10: + Fix the evaluation of the autoconnect retries. + nm-cloud-setup now preserves addresses added externally. + Ensure that dnsmasq is stopped after changing the dns backend and restarting the service. + Fix honoring an explicit DHCPv6 DUID with dhclient. + Other various fixes. ==== container-selinux ==== - Rename spc_timedated.patch to spc.patch - Update spc.patch to allow privileged containers to use localectl (bsc#1207077) - Add spc_timedated.patch to allow privileged containers to use timedatectl (bsc#1207054) ==== filesystem ==== - Revert "Remove /etc/sysconfig/network hierachy" for now (bsc#1206723). - Add languages that contain a lot of translations. For years we output statistics on how many translations are removed, but it wasn't collected so far. So adding languages with >50k translated messages (bsc#1134757) - Fixup previous change: X86_64 is not yet known to RPM, thus we need to make sure to explicitly include x86_64. - add subdirectories for x86_64 hwcaps - Remove unused /etc/sysconfig/scripts - Remove /etc/sysconfig/network hierachy, not used by default anymore ==== flatpak ==== Subpackages: flatpak-remote-flathub flatpak-zsh-completion libflatpak0 system-user-flatpak - Fix the "Requires" version of bubblewrap to be the same as "BuildRequires" (>= 0.5.0). - Use a macro to define the versions required of bubblewrap, ostree and xdg_dbus_proxy to avoid having the same issue in the future again. ==== fuse3 ==== Version update (3.12.0 -> 3.13.0) Subpackages: libfuse3-3 - Update to release 3.13 * There is a new low-level API function fuse_session_custom_io that allows to implement a daemon with a custom io. This can be used to create a daemon that can process incoming FUSE requests to other destinations than /dev/fuse. * A deadlock when resolving paths in the high-level API has been fixed. ==== groff ==== - set doc-default-operating-system and doc-volume-operating-system to SUSE [bsc#1185613c#5], $PRETTY_NAME cannot be used build time ==== groff-full ==== Subpackages: gxditview - set doc-default-operating-system and doc-volume-operating-system to SUSE [bsc#1185613c#5], $PRETTY_NAME cannot be used build time ==== gtksourceview5 ==== Version update (5.6.1 -> 5.6.2) Subpackages: gtksourceview5-lang libgtksourceview-5-0 typelib-1_0-GtkSource-5 - Update to version 5.6.2: + Add styling for 'def:note' to Adwaita and Adwaita-dark + Adwaita-dark.xml: soften match color a bit + Adwaita.xml: - add def:statement - soften search highlight + Docs: Fix RegexError reference + completion: - add note about what when is_trigger can activate - fix typo in documentation + completionlistbox: lock listmodel items during snapshot + completionprovider: fix documentation for get_priority() + docs: add note about library initialization + glsl.lang: set no-spell-check on default context + kate: use italic for def:emphasis + listsnapshot: - add snapshotting listmodel - allow mismatched hold()/release() + llvm.lang: Add missing 'sge' keyword + map: defer adjustment changes to next frame + regex: Fix incorrect bitflag operations + snippets: fix GtkSourceView:enable-snippets use without completion + testsuite/regex: walk subject as utf8 unless G_REGEX_RAW + testsuite: use G_REGEX_RAW with invalid UTF-8 + vim: implement rudimentary search through previous commands ==== kernel-firmware ==== Version update (20221216 -> 20230110) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update to version 20230110 (git commit a1ad1d5b5062): * amdgpu: add VCN4.0.4 firmware from amd-5.4 * amdgpu: add SMU13.0.7 firmware from amd-5.4 * amdgpu: add SDMA6.0.2 firmware from amd-5.4 * amdgpu: add PSP13.0.7 firmware from amd-5.4 * amdgpu: add GC11.0.2 firmware from amd-5.4 * amdgpu: add DCN3.2.1 firmware from amd-5.4 * amdgpu: update VCN4.0.0 firmware from amd-5.4 * amdgpu: update SMU13.0.0 firmware from amd-5.4 * amdgpu: update SDMA6.0.0 firmware from amd-5.4 * amdgpu: update PSP13.0.0 firmware from amd-5.4 * amdgpu: update GC11.0.0 firmware from amd-5.4 * iwlwifi: add new FWs from core76-35 release * iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release * iwlwifi: add new FWs from core75-47 release * iwlwifi: update 9000-family firmwares to core75-47 * amdgpu: update renoir DMCUB firmware * amdgpu: Update renoir PSP firmware * amdgpu: update copyright date for LICENSE.amdgpu * linux-firmware: update firmware for MT7921 WiFi device * linux-firmware: update firmware for MT7922 WiFi device * linux-firmware: update firmware for mediatek bluetooth chip (MT7921) * linux-firmware: update firmware for mediatek bluetooth chip (MT7922) * cxgb4: Update firmware to revision 1.27.1.0 * qca: Update firmware files for BT chip WCN6750 ==== libnma ==== Version update (1.10.4 -> 1.10.6) Subpackages: libnma-glib-schema libnma-gtk4-0 libnma-lang libnma0 typelib-1_0-NMA-1_0 - Update to version 1.10.6: + Fix the path and translation domains of GSchema files. + Removed strings that don't match our conscious language standards from the translation files. + Added autoptr support. + Fix translations of country and territory names in the mobile broadband dialog. + Honor explicitly set APN if provider was not present in the mobile broadband dialog. + Make sure Kosovar operators are ordered properly in the mobile broadband dialog. - Drop libnma-schema-without-path.patch: Fixed upstream. - Package libnma-glib-schema sub-package as noarch. ==== libstorage-ng ==== Version update (4.5.62 -> 4.5.63) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#911 - avoid using existing mount paths in testsuite - coding style - 4.5.63 ==== libxfce4ui ==== Version update (4.18.0 -> 4.18.1) Subpackages: libxfce4kbd-private-3-0 libxfce4ui-2-0 libxfce4ui-lang libxfce4ui-tools typelib-1_0-Libxfce4ui-2_0 - Update to version 4.18.1 * Enable line wrapping in the XfceFileNameInput widget (gxo#xfce/libxfce4ui#60) * xfce4-about: Removed excess square brackets * Revert "XfceShortcutsGrabber: Detect auto-repeat key press" * Translation Updates - Removed unused _service file ==== libxfce4util ==== Version update (4.18.0 -> 4.18.1) Subpackages: libxfce4util-lang libxfce4util7 typelib-1_0-Libxfce4util-1_0 - Update to version 4.18.1 * Handle remaining escape sequences * Fix desktop entry value escaping - Remove unused _service file ==== ndctl ==== Version update (74 -> 75) - Update to version 75 (jsc#PED-1080): * CXL fixes and improvements * Add master-passphrase removal support * some oob memory access fixes ==== pipewire ==== Version update (0.3.63 -> 0.3.64) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-lang pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Update to version 0.3.64: * Highlights - Clear old buffer memory on ports to fix some SIGBUS errors. - It is now possible to assign custom port names to the ports from an adapter. This feature is helpful to those who use a multichannel interface with long-term connections. This way they can label each port with its designation, such as an instrument name or anything else to be displayed in a patchbay or DAW. - Fix some issues with node suspend and quantum and rate calculations. - Fix some regressions in pulse-tunnel and RTP-source adaptive resampling that could cause synchronization problems. - UCM devices now also have a Pro Audio profile. - NODE_TARGET (with the object.id) is now deprecated, use TARGET_OBJECT (with the object.serial, which is not reused and can avoid races). * PipeWire - Clear all peer input port buffers when suspending. This fixes some SIGBUS errors when some plugins were using old memory. (#2914) - Fix a case where nodes that were not supposed to be suspended, were kept suspended on a rate change. (#2929) - Fix an error in the quantum and rate calculations that could cause nodes to run with wrong quantum and rates when multiple rates were allowed. (#2925) * Tools - pw-dump will now sort dictionaries to make it easier to compare different outputs. - Improve output of pw-reserve. - pw-loopback uses TARGET_OBJECT so you will need to use the serial id (or better the name) as the target instead of the object id. * modules - The filter-chain modules has seen some cleanups, refactoring and optimizations in the various DSP functions. - The ROC module now supports setting a custom samplerate. - ROC 0.2.X is now required. - The pulse tunnel and RTP source were not updating the rate field correctly which could cause synchronization problems. (#2891) - The filter-chain now supports an arbitrary number of control properties. (#2933) - It is now possible to assign custom port names to the ports from an adapter with the PW_KEY_NODE_CHANNELNAMES. - Support was added for capture and playback props in echo-cancel. (#2939) * SPA - The ACP code now has an option to set the probe samplerate. (#1599) - UCM devices now also have a Pro Audio profile. - Filtering of Step ranges is now implemented. * Pulse-Server - The channel-map is now set correctly on the echo-cancel module. - source_master and sink_master are now correctly handled in module echo-cancel. - Fix a regression in DRAIN where resuming after a DRAIN would fail. This caused problems for espeak. (#2928) - TARGET_OBJECT is now used to make it possible to use the indexes as a target. - ladspa-source and remap-source can now also link to monitors. * ALSA - The ALSA plugin now handles the target.object correctly when set to -1. (#2893) * V4L2 - The v4l2 replacement library now also follows symlinks. - Support for getting and setting controls was added. - Support for G_PARM was added. - The environment variable PIPEWIRE_V4L2_TARGET can be used to force an application onto a specific camera. * Bluetooth - Fix compilation without ldac_abr. - Fix a missing brace in CIND reply. This could cause some devices to fail. - Fix configuration of the initial latency. * GStreamer - The device provider now supports setting an fd so that it can connect to PipeWire sessions from the portal. - DMABuf support was re-enabled in gstpipewiresrc. - Rebase reduce-meson-dependency.patch. - Remove patches from upstream * 0001-pulse-server-add-channel-map-in-echo-cancel-module.patch * 0003-bluez5-backend-native-fix-missing-brace-in-CIND-reply.patch * 0001-alsa-dont-set--1-as-node.target.patch * 0001-modules-fix-rate-update.patch * 0001-alsa-fix-memory-leak-of-properties.patch * 0001-module-rt-fix-warning-when-xdg-desktop-portal-isnt-running.patch * 0001-midifile-error-won-invalid-track-size.patch * 0001-impl-node-move-2-state-variables-to-private.patch * 0001-context-rename-a-method.patch * 0002-impl-node-restore-running-state-after-reconfigure.patch * 0001-context-keep-per-node-quantum-and-rate-settings.patch * 0001-fix-use_buffers-checks.patch * 0001-pulse-server-clear-the-drained-state-correctly.patch - Add several patches from upstream to fix several issues (glfo#pipewire/pipewire#2925, glfo#pipewire/pipewire#2928, glfo#pipewire/pipewire#2929): * 0001-module-rt-fix-warning-when-xdg-desktop-portal-isnt-running.patch ... changelog too long, skipping 11 lines ... ffmpeg=disabled to meson. ==== poppler ==== Subpackages: libpoppler-cpp0 libpoppler-glib8 libpoppler126 poppler-tools - Add patch to reduce the boost dependencies (which isn't really needed) so we can build poppler 23.01.0 in SLE-15-SP4/SP5: * reduce-boost-required-version.patch ==== poppler-qt5 ==== - Add patch to reduce the boost dependencies (which isn't really needed) so we can build poppler 23.01.0 in SLE-15-SP4/SP5: * reduce-boost-required-version.patch ==== python-cryptography ==== - adjust patch remove_python_3_6_deprecation_warning.patch to version 39.0.0 ==== python-qt5-sip ==== - Add patch to revert the drop of support for python 3.6: * support-python3.6.patch ==== selinux-policy ==== Subpackages: selinux-policy-targeted - Update fix_container.patch to allow privileged containers to use localectl (bsc#1207077) - Add fix_container.patch to allow privileged containers to use timedatectl (bsc#1207054) ==== util-linux ==== Subpackages: libblkid1 libblkid1-32bit libfdisk1 libmount1 libmount1-32bit libsmartcols1 libuuid-devel libuuid1 libuuid1-32bit util-linux-lang - Replace usage of deprecated fgrep with grep -F. ==== util-linux-systemd ==== - Replace usage of deprecated fgrep with grep -F. ==== vim ==== Version update (9.0.1107 -> 9.0.1188) Subpackages: gvim vim-data vim-data-common - Updated to version 9.0.1188, fixes the following problems - refreshed vim-7.4-highlight_fstab.patch * Float constant not recognized as float. * Type error when using "any" type and adding a number to a float. * Leaking allocated type. * Termcap entries for RGB colors are not set automatically. * test_mswin_event() can hang. * Users cannot easily try out a PR. * CI does not use the latest Python version. * Code is indented more than needed. * Compiler may complain about an unused function. * Terminfo entries for bracketed paste are not used. * Sporadic test failures when using a terminal window. * Type of arguments not checked when calling a partial. * Tex filetype detection not sufficiently tested. * Cursor positioning and display problems with 'smoothscroll' and using "zt", "zb" or "zz". * Class member access is not fully tested yet. * Class function not implemented yet. * Virtual text at a column position is truncated at the window edge. (Yegappan Lakshmanan) * Memory leak when using class functions. * Bracketed paste can be enabled when pasted text is not recognized. * No error if function argument shadows class member. * Build failure. * Sporadic Test_range() failure. * Unexpected output when autoloading a script for an interactive operation. * Build failure without the +eval feature. * Code is indented more than needed. * Error message names do not match the items. * Comparing objects uses identity instead of equality. * Missing function argument. * Memory leak when getting class member type from expr. * Some conditions are always false. * Crash when expecting varargs but it is something else. * Cannot create a new object in a compiled function. * Cannot call an object method in a compiled function. * 'cursorcolumn' and 'colorcolumn' wrong after concealing and wrapping line. * Crash and/or memory leak when redefining function after error. * Invalid memory access with bad 'statusline' value. * Reading beyond text. * Invalid memory access with recursive substitute expression. * Cannot access a class member in a compiled function. * Cmdline test fails in the GUI. * Class members may be garbage collected. * :interface is not implemented yet. * Build failure. * Class "implements" argument not implemented. * Build error with some compilers. * Coverity warns for dead code. * Cannot use a class as a type. * Tests fail because of a different error message. * "implements" only handles one interface name. * Code is indented more than necessary. * Extends argument for class not implemented yet. * ASAN error for ufunc_T allocated with wrong size. * Coverity warns for using strcpy(). * Configure does not handle all FORTIFY_SOURCE variants. * Compiler warning for implicit size_t/int conversion. * Evaluating string expression advances function line. * Tests using IPv6 sometimes fail. * Code is indented more than necessary. * EditorConfig files do not have their own filetype. * Code to enable/disable mouse is not from terminfo/termcap. * Some key+modifier tests fail on some AppVeyor images. * Screen is not redrawn after using setcellwidths(). * When 'selection' is "exclusive" then "1v" is one char short. * Compiler warning for unused variable on non-Unix systems. * Smali files are not recognized. * The set_ref_in_item() function is too long. * smithy files are not recognized. * A child class cannot override functions from a base class. * Not all errors around inheritance are tested. * Compiler warnings without the +job feature. * Class inheritance and typing insufficiently tested. * go checksum files are not recognized. ==== w3m ==== - CVE-2022-38223 Out-of-bounds write in checkType located in etc.c (bsc#1202684) - add: 0002-Fix-m17n-backspace-handling-causes-out-of-bounds-wri.patch 0001-Fix-warning-for-unused-variable-without-USE_M17N.patch ==== yast2-country ==== Version update (4.5.3 -> 4.5.5) Subpackages: yast2-country-data - Always read local timezone database (bsc#1207000). - 4.5.5 - Stop using File.exists? which no longer works in Ruby 3.2 (bsc#1206419) - 4.5.4 ==== yast2-packager ==== Version update (4.5.10 -> 4.5.11) - Media check fixes in containerized environment - Start browsing the ISO files from the /host directory to show the host files (bsc#1206834) - Fixed file readability check to correctly use the specified ISO file - 4.5.11

1 0

New Tumbleweed snapshot 20230113 released!
by Dominique Leuenberger 15 Jan '23

15 Jan '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: Mesa (22.3.2 -> 22.3.3) Mesa-drivers (22.3.2 -> 22.3.3) gegl libqt5-qtscript (5.15.10 -> 5.15.12) pam-config qemu salt (3004 -> 3005.1) thunar (4.18.1 -> 4.18.2) vlgothic-fonts (20200720 -> 20220612) wireplumber xdg-dbus-proxy xfce4-panel (4.18.0 -> 4.18.1) xfce4-screensaver xfce4-screenshooter (1.10.1 -> 1.10.3) xtables-addons (3.22_k6.1.4_1 -> 3.23_k6.1.4_1) yast2-installation (4.5.12 -> 4.5.13) yast2-network (4.5.10 -> 4.5.11) yast2-security (4.5.4 -> 4.5.5) === Details === ==== Mesa ==== Version update (22.3.2 -> 22.3.3) Subpackages: Mesa-dri-devel Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - Update to version 22.3.3: * See https://docs.mesa3d.org/relnotes/22.3.3.html ==== Mesa-drivers ==== Version update (22.3.2 -> 22.3.3) Subpackages: Mesa-dri Mesa-gallium Mesa-libva libxatracker2 - Update to version 22.3.3: * See https://docs.mesa3d.org/relnotes/22.3.3.html ==== gegl ==== Subpackages: gegl-0_4 gegl-0_4-lang libgegl-0_4-0 - Add 133.patch: Fix build against libraw 0.21.0. ==== libqt5-qtscript ==== Version update (5.15.10 -> 5.15.12) - Update to version 5.15.12+kde0, rebased upstream: * Bump version to 5.15.12 * Bump version to 5.15.11 - Use origin/ in the _service file to work around some weirdness in obs_scm ==== pam-config ==== - Added pam-config-rpmlintrc in order to ignore the rpmlint check for /etc/pam.d/common* files. ==== qemu ==== Subpackages: qemu-accel-tcg-x86 qemu-audio-spice qemu-block-curl qemu-block-nfs qemu-block-rbd qemu-chardev-spice qemu-guest-agent qemu-hw-display-qxl qemu-hw-display-virtio-gpu qemu-hw-display-virtio-gpu-pci qemu-hw-display-virtio-vga qemu-hw-usb-host qemu-hw-usb-redirect qemu-hw-usb-smartcard qemu-ipxe qemu-ksm qemu-kvm qemu-lang qemu-microvm qemu-seabios qemu-sgabios qemu-tools qemu-ui-curses qemu-ui-gtk qemu-ui-opengl qemu-ui-spice-app qemu-ui-spice-core qemu-vgabios qemu-x86 - Fixes jsc#PED-1716 * Patches added: configure-Add-Wno-gnu-variable-sized-typ.patch s390x-pci-add-routine-to-get-host-functi.patch s390x-pci-don-t-fence-interpreted-device.patch s390x-pci-enable-adapter-event-notificat.patch s390x-pci-enable-for-load-store-interpre.patch s390x-pci-let-intercept-devices-have-sep.patch s390x-pci-reflect-proper-maxstbl-for-gro.patch Update-linux-headers-to-v6.0-rc4.patch ==== salt ==== Version update (3004 -> 3005.1) Subpackages: python3-salt salt-master salt-minion salt-transactional-update - Allow entrypoint compatibility for "importlib-metadata>=5.0.0" (bsc#1207071) - Added: * allow-entrypoint-compatibility-for-importlib-metadat.patch - Add missing patch after rebase to fix collections Mapping issues - Added: * fixes-for-python-3.10-502.patch - Prevent deadlocks in salt-ssh executions - Added: * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch - Create new salt-tests subpackage containing Salt tests - Update to Salt release version 3005.1 * See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html - Modified: * activate-all-beacons-sources-config-pillar-grains.patch * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch * add-custom-suse-capabilities-as-grains.patch * add-environment-variable-to-know-if-yum-is-invoked-f.patch * add-migrated-state-and-gpg-key-management-functions-.patch * add-publish_batch-to-clearfuncs-exposed-methods.patch * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch * add-sleep-on-exception-handling-on-minion-connection.patch * add-standalone-configuration-file-for-enabling-packa.patch * add-support-for-gpgautoimport-539.patch * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch * allow-vendor-change-option-with-zypper.patch * async-batch-implementation.patch * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch * bsc-1176024-fix-file-directory-user-and-group-owners.patch * change-the-delimeters-to-prevent-possible-tracebacks.patch * clarify-pkg.installed-pkg_verify-documentation.patch * debian-info_installed-compatibility-50453.patch * detect-module.run-syntax.patch * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch * don-t-use-shell-sbin-nologin-in-requisites.patch * drop-serial-from-event.unpack-in-cli.batch_async.patch * early-feature-support-config.patch * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch * enhance-openscap-module-add-xccdf_eval-call-386.patch * fix-bsc-1065792.patch * fix-for-suse-expanded-support-detection.patch * fix-issue-2068-test.patch * fix-missing-minion-returns-in-batch-mode-360.patch * fix-ownership-of-salt-thin-directory-when-using-the-.patch * fix-regression-with-depending-client.ssh-on-psutil-b.patch * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch * fix-salt.states.file.managed-for-follow_symlinks-tru.patch * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch * fix-state.apply-in-test-mode-with-file-state-module-.patch * fix-test_ipc-unit-tests.patch * fix-the-regression-for-yumnotify-plugin-456.patch * fix-traceback.print_exc-calls-for-test_pip_state-432.patch * fopen-workaround-bad-buffering-for-binary-mode-563.patch * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch * ignore-extend-declarations-from-excluded-sls-files.patch * ignore-non-utf8-characters-while-reading-files-with-.patch * include-aliases-in-the-fqdns-grains.patch * include-stdout-in-error-message-for-zypperpkg-559.patch * info_installed-works-without-status-attr-now.patch * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch * make-aptpkg.list_repos-compatible-on-enabled-disable.patch * make-pass-renderer-configurable-other-fixes-532.patch * make-setup.py-script-to-not-require-setuptools-9.1.patch * make-sure-saltcacheloader-use-correct-fileclient-519.patch * normalize-package-names-once-with-pkg.installed-remo.patch * pass-the-context-to-pillar-ext-modules.patch * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch * prevent-shell-injection-via-pre_flight_script_args-4.patch * read-repo-info-without-using-interpolation-bsc-11356.patch * restore-default-behaviour-of-pkg-list-return.patch * retry-if-rpm-lock-is-temporarily-unavailable-547.patch * return-the-expected-powerpc-os-arch-bsc-1117995.patch * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch * run-salt-api-as-user-salt-bsc-1064520.patch * run-salt-master-as-dedicated-salt-user.patch * save-log-to-logfile-with-docker.build.patch * set-default-target-for-pip-from-venv_pip_target-envi.patch * state.apply-don-t-check-for-cached-pillar-errors.patch * state.orchestrate_single-does-not-pass-pillar-none-4.patch * switch-firewalld-state-to-use-change_interface.patch * temporary-fix-extend-the-whitelist-of-allowed-comman.patch * update-target-fix-for-salt-ssh-to-process-targets-li.patch * use-adler32-algorithm-to-compute-string-checksums.patch * use-salt-bundle-in-dockermod.patch * x509-fixes-111.patch * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch - Removed: * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch * 3003.3-postgresql-json-support-in-pillar-423.patch * add-missing-ansible-module-functions-to-whitelist-in.patch * add-rpm_vercmp-python-library-for-version-comparison.patch * adds-explicit-type-cast-for-port.patch * backport-syndic-auth-fixes.patch * batch.py-avoid-exception-when-minion-does-not-respon.patch * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch * enhance-logging-when-inotify-beacon-is-missing-pyino.patch ... changelog too long, skipping 37 lines ... * clarify-pkg.installed-pkg_verify-documentation.patch ==== thunar ==== Version update (4.18.1 -> 4.18.2) Subpackages: libthunarx-3-0 thunar-lang - Update to version 4.18.2: * bulk renamer: Remember LastActiveMode (gxo#xfce/thunar#989) * Dont show toolbar menu for back/forward (gxo#xfce/thunar#983) * Double compact view ellipsization threshold * Few thumbnails missing after scroll (gxo#xfce/thunar#843) * Improve alignment of XfceFileNameInput * Make 'empty trash' sensitive on tab-switch (gxo#xfce/thunar#1001) * Only attach toolbar after toolbar items were set up (gxo#xfce/thunar#927) * Prevent crash after closing windows (gxo#xfce/thunar#995) * Prevent crash for copy+overwrite via DBus (gxo#xfce/thunar#1002) * Prevent rare crash when closing thunar (gxo#xfce/thunar#698) * Prevent segfault for location selector (gxo#xfce/thunar#994) * Re-add symlink target in type column (gxo#xfce/thunar#985) * Revert "Prevent focus stealing of file transfer dialog (gxo#xfce/thunar#643)" * Shrink rename dialog only in height * split-view: prevent losing open tabs (gxo#xfce/thunar#986) ==== vlgothic-fonts ==== Version update (20200720 -> 20220612) - update to 20220612: * Fix character width setting (OS/2 table) of VL-Gothic Force xAvgCharWidth of his OS/2 table by fontforge's auto-setting to a fixed value that is not expected ==== wireplumber ==== Subpackages: libwireplumber-0_4-0 wireplumber-audio wireplumber-lang - Backport the workaround from SLE/Leap for the bug in systemd scripts that didn't set the default enable state for the wireplumber user service when installing wireplumber. The bug (boo#1200485) was fixed but that's only for new installations while this workaround will fix old installations (boo#1202008). This is used to automatically fix installations of SLE 15 SP4/Leap 15.4 that were not updated during it's lifetime and upgrade directly to SP5/15.5 . - Add upstream patches to fix glfo#pipewire/pipewire#2214 and to handle better non-null terminated strings: * 0001-alsa-monitor-handle-snd_aloop-devices-better.patch * 0001-spa-json-make-sure-we-only-add-encoded-string-data.patch * 0001-m-lua-scripting-ignore-string-integer-table-keys-when-constructing-a-JSON-Array-Object.patch ==== xdg-dbus-proxy ==== - BuildRequire dbus-1 in SLE-15 where the dbus-1 package is not splitted to generate a dbus-1-daemon package. ==== xfce4-panel ==== Version update (4.18.0 -> 4.18.1) Subpackages: libxfce4panel-2_0-4 xfce4-panel-lang xfce4-panel-restore-defaults - Update to version 4.18.1 * Update copyright year * clock: Add missing sanity check * clock: Do not override custom font formats * clock: Fix sync timeout * docs: Fix version for xfce_panel_set_image_from_source() * libxfce4panel: Deprecate XfcePanelImage * tasklist: Adapt wnck default icon size when UI scale > 1 (gxo#xfce/xfce4-panel#681) * tasklist: Do not duplicate menu item activation * tasklist: Fix group button visibility * tasklist: Fix scrolling through window buttons (gxo#xfce/xfce4-panel#692) * tasklist: Fix window count positioning when UI scale > 1 * tasklist: Keep icon pixbuf around and use surface also for menu items * windowmenu: Adapt wnck default icon size when UI scale > 1 (gxo#xfce/xfce4-panel#682) * Translation Updates ==== xfce4-screensaver ==== - Migration of PAM settings to /usr/lib/pam.d. ==== xfce4-screenshooter ==== Version update (1.10.1 -> 1.10.3) Subpackages: xfce4-screenshooter-lang xfce4-screenshooter-plugin - Update to 1.10.3 * Lower minimal Xfce dependencies back to 4.16 * Remove fallback code - update to 1.10.2: * Fix capture of CSD windows * Fix active window and region capture modes * Consider scale factor while capturing screenshots with cairo * Support libsoup2 and 3 simultaneously * save dialog: show preview of selected file * Save preferences of panel plugin * Translation Updates ==== xtables-addons ==== Version update (3.22_k6.1.4_1 -> 3.23_k6.1.4_1) - Update to release 3.23 * Support for Linux 6.2 ==== yast2-installation ==== Version update (4.5.12 -> 4.5.13) - yupdate - added suport for patching containers (bsc#1207069) - 4.5.13 ==== yast2-network ==== Version update (4.5.10 -> 4.5.11) - Do not crash when the NETMASK or PREFIXLEN are invalid (bsc#1206551). - 4.5.11 ==== yast2-security ==== Version update (4.5.4 -> 4.5.5) - AutoYaST: export security policy settings (related to jsc#SLE-24764). - Always write the ssg-apply configuration if a security policy is enabled, even if the action is 'none' (related to jsc#SLE-24764). - 4.5.5

1 0

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 14 Jan '23

14 Jan '23

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have had problems for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - zabbix: Uninstallable: nothing provides php7 needed by zabbix-phpfrontend-4.0.42.i586 Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

1 0

Chromium problem
by Gerd Fleischer 14 Jan '23

14 Jan '23

Hi, since one of the latest snapshots chromium crashes after a few seconds with Oh nein, Fehler beim Anzeigen der Webseite. Fehlercode SIGILL. There seems not to be a debug-package? Right place here? Thanks. Received signal 4 ILL_ILLOPN 5628fdd3b600 #0 0x5628fddd28f2 base::debug::CollectStackTrace() #1 0x5628fdd3d896 base::debug::StackTrace::StackTrace() #2 0x5628fddd2451 base::debug::(anonymous namespace)::StackDumpSignalHandler() #3 0x7f51e52428e0 (/usr/lib64/libc.so.6+0x3d8df) #4 0x5628fdd3b600 logging::LogMessage::~LogMessage() #5 0x5628fdd3ba61 logging::LogMessage::~LogMessage() #6 0x5628ff27a71a WTF::HashMap<>::at() #7 0x5628ff27a13f WTF::AddToTextCodecMap() #8 0x5628ff28470d WTF::TextCodecICU::RegisterCodecs() #9 0x5628ff279cda WTF::AtomicCanonicalTextEncodingName() #10 0x5628ff279fa2 WTF::AtomicCanonicalTextEncodingName() #11 0x5628ff279474 WTF::TextEncoding::TextEncoding() #12 0x56290149acb5 blink::XMLHttpRequest::FinalResponseCharset() #13 0x56290149b9b5 blink::XMLHttpRequest::CreateDecoder() #14 0x56290149bc86 blink::XMLHttpRequest::DidReceiveData() #15 0x5628fcfc705f blink::Resource::NotifyDataReceived() #16 0x5628fcfc6e38 blink::Resource::AppendData() #17 0x5628fcfe7abc blink::ResourceLoader::DidReceiveData() #18 0x5628fcff6e02 blink::ResponseBodyLoader::OnStateChange() #19 0x5628fcfec044 blink::ResourceLoader::DidStartLoadingResponseBody() #20 0x5628fd00d6fe blink::WebURLLoader::Context::OnStartLoadingResponseBody() #21 0x5628fd00b630 blink::WebResourceRequestSender::OnStartLoadingResponseBody() #22 0x5628fd001813 blink::MojoURLLoaderClient::OnReceiveResponse() #23 0x5628fafed115 blink::ThrottlingURLLoader::Resume() #24 0x5628fafecf0c blink::ThrottlingURLLoader::StopDeferringForThrottle() #25 0x5628fafeef92 blink::ThrottlingURLLoader::ForwardingThrottleDelegate::Resume() #26 0x5628fd444e95 safe_browsing::RendererURLLoaderThrottle::OnCompleteCheckInternal() #27 0x5628fd4449a5 safe_browsing::RendererURLLoaderThrottle::OnCheckUrlResult() #28 0x5628fd445533 base::internal::FunctorTraits<>::Invoke<>() #29 0x5628fd44548a base::internal::Invoker<>::RunOnce() #30 0x5628fc8e4fcb safe_browsing::mojom::SafeBrowsingUrlChecker_CheckUrl_ForwardToCallback::Accept() #31 0x5628fdf37f2f mojo::InterfaceEndpointClient::HandleValidatedMessage() #32 0x5628fdf3dd30 mojo::MessageDispatcher::Accept() #33 0x5628fdf3932a mojo::InterfaceEndpointClient::HandleIncomingMessage() #34 0x5628fdf41c90 mojo::internal::MultiplexRouter::ProcessIncomingMessage() #35 0x5628fdf41578 mojo::internal::MultiplexRouter::Accept() #36 0x5628fdf3dd30 mojo::MessageDispatcher::Accept() #37 0x5628fdf3598d mojo::Connector::DispatchMessage() #38 0x5628fdf36391 mojo::Connector::ReadAllAvailableMessages() #39 0x5628f9fba242 base::internal::Invoker<>::RunOnce() #40 0x5628fdd88f8e base::TaskAnnotator::RunTaskImpl() #41 0x5628fdda0c54 base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl () #42 0x5628fdda0510 base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork() #43 0x5628fdda13c8 base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork() #44 0x5628fdd45215 base::MessagePumpDefault::Run() #45 0x5628fdda1758 base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::Run() #46 0x5628fdd6a9a4 base::RunLoop::Run() #47 0x5629035c1ca8 content::RendererMain() #48 0x5628fd878135 content::RunZygote() #49 0x5628fd878bd7 content::RunOtherNamedProcessTypeMain() #50 0x5628fd8799e1 content::ContentMainRunnerImpl::Run() #51 0x5628fd876828 content::RunContentProcess() #52 0x5628fd8770a2 content::ContentMain() #53 0x5628f9fb6778 ChromeMain #54 0x7f51e522c5b0 __libc_start_call_main #55 0x7f51e522c679 __libc_start_main_alias_2 #56 0x5628f9bc0025 _start r8: 0000000000000000 r9: 00000cb000225000 r10: 0000000000000002 r11: 0000000000000293 r12: 00000000000013aa r13: 00000000000013aa r14: 00000cb002ab3800 r15: 00007ffc29c9f688 di: 0000562903f88580 si: 00000cb001f9cc00 bp: 00007ffc29c9fe80 bx: 00007ffc29c9ee90 dx: 0000000000000100 ax: 0000000000000000 cx: 0000000000000066 sp: 00007ffc29c9ee20 ip: 00005628fdd3b600 efl: 0000000000010246 cgf: 002b000000000033 erf: 0000000000000000 trp: 0000000000000006 msk: 0000000000000000 cr2: 0000000000000000 [end of stack trace]

2 1

tumbleweed: MySQL Community - "Unable to connect to any of the specified MySQL hosts.."
by Andre Verwijs 14 Jan '23

14 Jan '23

tumbleweed users: are you still able to use mysql... ?? (community) Getting "Unable to connect to any of the specified MySQL hosts.." thanks

1 1

[opensuse-factory] man fstab -> swap
by Felix Miata 14 Jan '23

14 Jan '23

From TW's fstab man page: [quote] The second field (fs_file). This field describes the mount point (target) for the filesystem. For swap partitions, this field should be specified as `none'. [/quote] Why does YaST-installer create fstabs that put swap in second field instead of putting none there when a swap partition has been selected for mounting? -- Evolution as taught in public schools is, like religion, based on faith, not based on science. Team OS/2 ** Reg. Linux User #211409 ** a11y rocks! Felix Miata

2 1

New Tumbleweed snapshot 20230112 released!
by Dominique Leuenberger 14 Jan '23

14 Jan '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: arphic-uming-fonts file (5.43 -> 5.44) glu hack-fonts === Details === ==== arphic-uming-fonts ==== - amend license SUSE-Arphic to SPDX's Arphic1999 ==== file ==== Version update (5.43 -> 5.44) Subpackages: file-magic libmagic1 - Add patch dc71304b.patch * Handle script executable Zip archives - Use [Pp]atch0 explicit to avoid warning as python.magic build time - Modifying patches * file-5.22-elf.dif * file-5.19-printf.dif * file-5.19-zip2.0.dif * file-5.19-biorad.dif * file-secure_getenv.patch * file-5.28-btrfs-image.dif - Remove patch file-zstd.patch now upstream - Port patch file-5.42.dif and rename it to file-5.44.dif - Update to 5.44: * Handle nan's so that we don't get internal floating point exceptions when they are enabled (Vincent Mihalkovic) * PR/397: Restore the ability to process files from stdin immediately. * fixed various clustefuzz issues * Fix error detection for decompression code (Vincent Mihalkovic) * Add MAGIC_NO_COMPRESS_FORK and use it to produce a more meaningful error message if we are sandboxing. * Add built-in lzip decompression support (Michal Gorny) * Add built-in zstd decompression support (Martin Rodriguez Reboredo) ==== glu ==== - amend SUSE-SGI-FreeB-2.0 to SPDX's SGI-B-2.0 ==== hack-fonts ==== - amend SUSE-Bitstream-Vera to SPDX's Bitstream-Vera

1 0