October 2023 - openSUSE Factory - openSUSE Mailing Lists

Disk auto-unlocking with TPM 2.0
by Gary Lin 10 Oct '23

10 Oct '23

Hi, I'm pleased to introduce a new feature for openSUSE Tumbleweed: disk auto-unlocking with TPM 2.0. In short, it boots the encrypted root without asking for a passphrase. This feature is already integrated into Agama on ALP and we plan to merge it into yast-installation (*1). For now, if you're interested, just type a few commands to enable it. The hard requirements are LUKS2 partition(s), UEFI with Secure Boot enabled, and, of course, TPM 2.0. LUKS2 support in yast-installation is still experimental and needs a few extra steps. You could also choose to convert the existing LUKS1 partition to a LUKS2 one. The LUKS2 setup is addressed in the following link: https://en.opensuse.org/SDB:Encrypted_root_file_system#Setup_LUKS2_partitio… First of all, please update all packages, especially shim and grub2. The key package is fde-tools. Currently, there is a minor issue that the TCTI for native devices may not be installed, and the fix is on the way(*2). So, please install fde-tools along with libtss2-tcti-device0 for the time being. # zypper in fde-tools libtss2-tcti-device0 After installing fde-tools, you can test the TPM 2.0 support with # fdectl tpm-present If there is no error, it's time to seal a new random key for your root partition: # fdectl regenerate-key This command will request the passphrase of the root partition to enroll a new random key, seal the random key with TPM, and then update the grub configuration. Next, reboot your system. If everything is setup correctly, the system will boot without showing the passphrase prompt. One thing to be noted is that after a boot component upgrade, such as shim, grub2, or UEFI firmware, the signature in the sealed key may become invalid, and then you have to run the following command to update the signature. # fdectl tpm-authorize We are still working on a solution to update the signature automatically after shim and grub2 update to reduce such hassles. By default, 'fdectl' only manages the keyslots of the root partition. To extend the keyslot management to other partitions such as swap, please check https://en.opensuse.org/SDB:Encrypted_root_file_system#Additional_steps_for… A complete document is available here: https://en.opensuse.org/SDB:Encrypted_root_file_system#Unattended_boot_with… In case you encounter any issue, feel free to file a bug and assign it to bootloader-maintainers(a)suse.de Cheers, Gary Lin (*1) https://github.com/yast/yast-installation/issues/1088 (*2) https://build.opensuse.org/request/show/1100949

17 32

Leap not more useful for WebServer with php
by Walddys Emmanuel Dorrejo Céspedes 09 Oct '23

09 Oct '23

Leap is stuck with PHP 8.0 version, when most devs and project have move to php8.1/8.2, i was hoping that php8.1 at least this version reach leap 15.5, but didn't reached the main repo. sad.

6 6

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 09 Oct '23

09 Oct '23

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have had problems for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - python-barbicanclient: Fails to build - python-influxdb: Fails to build - python-oslo.messaging: Fails to build - python-osprofiler: Fails to build - python-pandas: Uninstallable: nothing provides python310-Bottleneck >= 1.3.4 needed by python310-pandas-all-2.1.0.noarch - python-statsmodels: Fails to build Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

3 2

New Tumbleweed snapshot 20231006 released!
by Dominique Leuenberger 07 Oct '23

07 Oct '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ImageMagick (7.1.1.18 -> 7.1.1.19) bluez chmlib filesystem grub2 gucharmap (15.0.4 -> 15.1.1) libXrandr (1.5.3 -> 1.5.4) libetebase parted python-argcomplete (3.1.1 -> 3.1.2) python-cryptography (41.0.3 -> 41.0.4) python-dnspython python-urllib3 (2.0.4 -> 2.0.6) sg3_utils (1.48~20221101+1.142dace -> 1.48+1.889c3e3) shadow (4.14.0 -> 4.14.1) systemd === Details === ==== ImageMagick ==== Version update (7.1.1.18 -> 7.1.1.19) Subpackages: ImageMagick-config-7-SUSE ImageMagick-extra libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - version update to 7.1.1.19 * https://github.com/ImageMagick/Website/blob/main/ChangeLog.md * fixes CVE-2023-5341 [bsc#1215939] ==== bluez ==== Subpackages: bluez-auto-enable-devices bluez-cups libbluetooth3 - Moved btmgmt to main rpm of bluez. (jsc#PED-6216) ==== chmlib ==== - drop chmlib-0.39.diff - superseded by chmlib-0001-Patch-to-fix-integer-types-problem-by-Goswin-von-Bre.patch - add chmlib-0001-Patch-to-fix-integer-types-problem-by-Goswin-von-Bre.patch, chmlib-0002-Fix-for-extract_chmLib-confusing-empty-files-with-di.patch, chm_http-port-shortopt.patch, chm_http-bind-localhost.patch, chm_http-output-server-address.patch, chmlib-c99.patch: restrict access to localhost to somewhat reduce reach ==== filesystem ==== - Add /run/lock (boo#1212926) - Remove /var/spool/mail (boo#1179574) - Remove obsolete home dir check. The filesystem package is not meant to contain home directories of random system users anymore - Create ghost symlinks also in pretrans, needed to get /var/run as link right away ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - Add patch to fix reading files from btrfs with "implicit" holes: * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch - Update the TPM 2.0 patches to support more RSA and ECC algorithms * 0002-tpm2-Add-TPM-Software-Stack-TSS.patch * 0003-protectors-Add-TPM2-Key-Protector.patch * 0005-util-grub-protect-Add-new-tool.patch - Remove build require for gcc-32bit, target platform didn't rely on libgcc function shipped with compiler but rather using functions supplied in grub directly. - Add BuildIgnore to break cycle with the branding package ==== gucharmap ==== Version update (15.0.4 -> 15.1.1) Subpackages: gucharmap-lang libgucharmap_2_90-7 - Update to version 15.1.1: + DOAP: Remove defunct mailing list; add Discourse + unicode: Update to version 15.1.0 + unicode: i18n update for 15.1.0 + metainfo: Add launchable info + Updated translations. - Update source service to current standard. ==== libXrandr ==== Version update (1.5.3 -> 1.5.4) - Update to version 1.5.4 This release fixes a bug where an invalid pointer (a pointer to the middle of a buffer returned from malloc() instead of to the beginning of the buffer) could be passed to free() when cleaning up after an out-of-bounds output is found in the response from the X server to XRRGetMonitors(). ==== libetebase ==== - Adjust license according to legaldb review quite some dual licensing from tests and vendor/vendor/* ==== parted ==== Subpackages: libparted-fs-resize0 libparted2 parted-lang - updated fatresize to version 0.2 which includes a man-page removed patches: - fatresize-fix-getting-dev-name.patch ==== python-argcomplete ==== Version update (3.1.1 -> 3.1.2) - update to 3.1.2: * Ensure Python 3.12+ compatibility in check_console_script ==== python-cryptography ==== Version update (41.0.3 -> 41.0.4) - update to 41.0.4: * ~~~~~~~~~~~~~~~~~~~ * Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.1.3. * .. _v41-0-3: ==== python-dnspython ==== - Don't use curio. ==== python-urllib3 ==== Version update (2.0.4 -> 2.0.6) - update to 2.0.6 (bsc#1215968, CVE-2023-43804): * Added the Cookie header to the list of headers to strip from requests when redirecting to a different host. As before, different headers can be set via Retry.remove_headers_on_redirect - 2.0.5: * Allowed pyOpenSSL third-party module without any deprecation warning. #3126 * Fixed default blocksize of HTTPConnection classes to match high-level classes. Previously was 8KiB, now 16KiB. #3066 ==== sg3_utils ==== Version update (1.48~20221101+1.142dace -> 1.48+1.889c3e3) Subpackages: libsgutils2-1_48-2 - udev rules: allow kernel command line overrides with "udev.scsi_id_serial_src=LTVS" and "udev.scsi_symlink_src=LTVS" Try these boot parameters if your system fails to detect SCSI devices after update to sg3_utils 1.48. - dracut.conf: add 00-scsi-sg3_config.rules (jsc#PED-6226) - spec file: * fix build dependencies for regenerate_initrd_posttrans (bsc#1215772) * add missing rules file - Update to version 1.48 * udev rules: new, configurable scheme for creating symlinks for SCSI devices (jsc#PED-6226) See description of ".SCSI_ID_SERIAL_SRC" /usr/lib/udev/55-scsi-sg3_id.rules and .SCSI_SYMLINK_SRC in /usr/lib/udev/58-scsi_symlink.rules * decoding utilities: add -j/--json[=JO] and --js-file=JFN options * sg_sat_datetime: new tool to access date/time on ATA devices using a SAT layer * sg_z_act_query: new tool for sending zone activate/query commands * sg_rem_rest_elem: new tool for removing or restoring elements * sg_write_attr: support for SPC "Write Attirbute" command (for tapes) * sg_ses: swap meaning of -H and -HH, add json support, use e.g. "0:2" for range indicator * sg_rtpg: fix response truncation * sg_decode_sense: add --nodecode option * sg_logs: fix --list and -lll options * sg_modes: improve handling of ZBC disks * sg_inq: add version descriptors from SPC6r08, add --quiet option * sg_vpd: add --sinq_inraw=RFN option * sg_turs: add --timeout= and --ascq= options * sg_requests: add --timeout= option * sg_sat_read_gplog: add --smart and --ppt options * sgp_dd and sgm_dd: add --progress option * sg_dd: add support for accessing NVMe devices via passthrough * Bug fixes and minor fixes - _service: simplify version processing, as we have a clean upstream version again ==== shadow ==== Version update (4.14.0 -> 4.14.1) Subpackages: libsubid4 login_defs - Update to 4.14.1: Build system: Merge libshadow and libmisc into a single libshadow. This fixes problems in the linker, which were reported at least in Gentoo. #791 - Add Alejandro Colomar (new stable branch maintainer) to shadow.keyring ==== systemd ==== Subpackages: libsystemd0 libsystemd0-32bit libudev1 systemd-32bit systemd-container systemd-coredump systemd-lang udev - rpmlintrc: allow systemd-network and systemd-container sub-packages to ship shared libs. These are actually NSS plugins and are not really subject to shlib policy. - Drop 5000-core-manager-run-generators-directly-when-we-are-in-.patch Since dracut-059+suse.447.g9d1fc722, this workaround is not needed anymore.

1 0

sddm stays black after recent TW update
by Adrian Glaubitz 07 Oct '23

07 Oct '23

Hello! After rebooting my Tumbleweed machine after one of the recent updates, sddm just shows a black screen with just the mouse pointer showing. I have not been able to pinpoint the cause of this but maybe someone else has and can help me save some time. Any ideas? Adrian

3 8

Tumbleweed - Review of the weeks 2023/39 & 40
by Dominique Leuenberger 06 Oct '23

06 Oct '23

Dear Tumbleweed users and hackers, My punishment for taking Fridays off is having to write a weekly review that spans again over two weeks. I know, many of you rely on those reviews to know what is coming their way and doing this only bi-weekly is definitively now what I am striving for. After all, you deserve to be informed about the things happening in Tumbleweed. During the last two weeks, we have published 9 snapshots (0921, 0922, 0925, 0926, 0927, 0929, 1001, 1003, and 1005 – with the latest one being still being hot – and important in plus. The most relevant changes in these snapshots are: * Linux kernel 6.5.4 * Poppler 23.09.0 * dbus 1.14.10 * Node.JS 20.7.0 * XWayland 23.2.1 * UDisks 2.10.0 * LibreOffice 7.6.1.2 * Mesa 23.1.8, 23.2.0, and 23.2.1 * GPG 2.4.0 * Mozilla Firefox 118.0.1 * GStreamer 1.22.6 * openSSL 3.1.3 * systemd 254.5 * glibc CVE-2023-4911, aka Looney Tunables * Samba 4.19.0 The glibc fix is part of Snapshot 1005, but due to its importance and reach was already published in the Tumbleweed update channel yesterday evening. The staging projects are currently testing these changes: * binutils 2.41 * Linux kernel 6.5.6 * Shadow 4.14.1 * zypper 1.14.65 / libzypp 17.31.21: changes around transfiletrigger handlers; openQA seems not yet happy with the result * LibreOffice 7.6.2 Cheers, Dominique

1 0

New Tumbleweed snapshot 20231005 released!
by Dominique Leuenberger 06 Oct '23

06 Oct '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: AppStream Mesa (23.2.0 -> 23.2.1) Mesa-drivers (23.2.0 -> 23.2.1) chrony e2fsprogs fde-tools fprintd gdm geoclue2 (2.7.0 -> 2.7.1) gigolo (0.5.2 -> 0.5.3) glibc icewm (3.4.0 -> 3.4.3) javapackages-tools ldb (2.7.2 -> 2.8.0) libX11 (1.8.6 -> 1.8.7) libXpm (3.5.16 -> 3.5.17) libev libnvme libselinux libsemanage libvirt (9.7.0 -> 9.8.0) mpg123 (1.32.2 -> 1.32.3) netcfg nvme-cli python-SQLAlchemy (2.0.19 -> 2.0.21) python-greenlet (3.0.0~rc3 -> 3.0.0) python-libvirt-python (9.7.0 -> 9.8.0) python-psutil python-reportlab (3.6.13 -> 4.0.5) rubygem-nokogiri rubygem-ruby-dbus (0.23.0.beta2 -> 0.23.1) samba (4.18.6+git.320.cfda27bacb -> 4.19.0+git.306.19d2e214c58) selinux-policy srt (1.5.2 -> 1.5.3) talloc (2.4.0 -> 2.4.1) tdb (1.4.8 -> 1.4.9) tevent (0.14.1 -> 0.15.0) vsftpd xdg-desktop-portal xfce4-notifyd (0.8.2 -> 0.9.2) xfce4-panel (4.18.4 -> 4.18.5) xfce4-pulseaudio-plugin (0.4.7 -> 0.4.8) xfce4-taskmanager (1.5.5 -> 1.5.6) xscreensaver (6.06 -> 6.07) xterm (384 -> 385) === Details === ==== AppStream ==== Subpackages: AppStream-lang libAppStreamQt2 libappstream4 - Enable vala support when building in SLE-15 SP6 - Fix condition in files section for the case where vala support is disabled, where some files are being generated but were not included ==== Mesa ==== Version update (23.2.0 -> 23.2.1) Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libOSMesa8 libgbm1 - Update to Mesa 23.2.1 * Mesa 23.2.1 is a new development release. People who are concerned with stability and reliability should stick with a previous release or wait for Mesa 23.2.2. * Mesa 23.2.1 is an unusual first stable release due to the accidentl tagging of 23.2.0 durring the rc cycle. * Mesa 23.2.1 implements the OpenGL 4.6 API, but the version reported by glGetString(GL_VERSION) or glGetIntegerv(GL_MAJOR_VERSION) / glGetIntegerv(GL_MINOR_VERSION) depends on the particular driver being used. Some drivers don't support all the features required in OpenGL 4.6. OpenGL 4.6 is **only** available if requested at context creation. Compatibility contexts may report a lower version depending on each driver. * Mesa 23.2.1 implements the Vulkan 1.3 API, but the version reported by the apiVersion property of the VkPhysicalDeviceProperties struct depends on the particular driver being used. * More details in: - -> https://gitlab.freedesktop.org/mesa/mesa/-/blob/23.2/docs/relnotes/23.2.1.r… ==== Mesa-drivers ==== Version update (23.2.0 -> 23.2.1) Subpackages: Mesa-dri Mesa-gallium Mesa-libva libxatracker2 - Update to Mesa 23.2.1 * Mesa 23.2.1 is a new development release. People who are concerned with stability and reliability should stick with a previous release or wait for Mesa 23.2.2. * Mesa 23.2.1 is an unusual first stable release due to the accidentl tagging of 23.2.0 durring the rc cycle. * Mesa 23.2.1 implements the OpenGL 4.6 API, but the version reported by glGetString(GL_VERSION) or glGetIntegerv(GL_MAJOR_VERSION) / glGetIntegerv(GL_MINOR_VERSION) depends on the particular driver being used. Some drivers don't support all the features required in OpenGL 4.6. OpenGL 4.6 is **only** available if requested at context creation. Compatibility contexts may report a lower version depending on each driver. * Mesa 23.2.1 implements the Vulkan 1.3 API, but the version reported by the apiVersion property of the VkPhysicalDeviceProperties struct depends on the particular driver being used. * More details in: - -> https://gitlab.freedesktop.org/mesa/mesa/-/blob/23.2/docs/relnotes/23.2.1.r… ==== chrony ==== Subpackages: chrony-pool-openSUSE - Use make quickcheck instead of make check to avoid >1h build times and failures due to timeouts. This was the default before 3.2 but it changed to make tests more reliable. Here a seed is already set to get deterministic execution. ==== e2fsprogs ==== Subpackages: e2fsprogs-scrub libcom_err2 libcom_err2-32bit libext2fs2 - Update specfile to make sure regenerate_initrd_post macro is defined ==== fde-tools ==== - Add fde-tools-remove-redundant-2nd-pw-creation.patch to remove the creation of the secondary password in 'add-secondary-key' ==== fprintd ==== Subpackages: fprintd-lang fprintd-pam - add all supported USB devices as Supplements ==== gdm ==== Subpackages: gdm-lang gdm-schema gdmflexiserver libgdm1 typelib-1_0-Gdm-1_0 - Explicitly buildrequire /usr/bin/dbus-run-session: the dbus package is being restructured to be usable with dbus-broker and so far we just relied on implicit dependencies bringing this in. Meson checks for it, so it is correct to BR it though. ==== geoclue2 ==== Version update (2.7.0 -> 2.7.1) Subpackages: system-user-srvGeoClue typelib-1_0-Geoclue-2_0 - Update to version 2.7.1: + Add 'age' field to MLS locate queries + Location updates now always have an accuracy value + Improvements to NMEA parsing: - Parse NMEA timestamps with sub-second accuracy - Add default accuracy to NMEA RMC locations - Ignore locations from GGA and RMC sentences if the GNSS fix is not valid + Prioritize GNSS sources with a recent fix over other sources, preventing location jumps + Install D-Bus policy in /usr/share, not /etc + Upgrade GLib / Gio dependency to version 2.68.0 + Correct gi annotations in GClueSimple + Various small fixes - Use ldconfig_scriptlets macro for post(un) handling. ==== gigolo ==== Version update (0.5.2 -> 0.5.3) Subpackages: gigolo-lang - Update to version 0.5.3 * Update copyright year and urls * Replace remaining stock icons * Replace (some) deprecated stock icons * Fix double free * Fix compiler warning -Wmaybe-uninitialized * Disable systray icon outside X11 * Detect DE using XDG_CURRENT_DESKTOP (Fixes #19) * Add icons at missing sizes, clean up SVG metadata * build: Use XDT_CHECK_PACKAGE * build: Fix autotools warnings * Update `.gitignore` * Rename "SSH" to "SSH / SFTP" * Fix intltool lock file issue during make distcheck * Update TODO * Refresh Glade file, drop unused tab labels (fixes #13) * move the logic setting GtkSpin port value to setup_for_type() * Use new icon in window titlebar * Fix compilation warnings * autoconf: Some updates * Only show an error dialog if the host field is visible/required * Remove capitalization from icon name * Update GenericName (#2) * Fix comment style. * Remove GSourceFunc casts * Update Makefile.am * Add gigolo.ui to POTFILES.in (Issue #6) * Added new icons following new style and reverse DNS format. * Add new README.md and update AM_INIT_AUTOMAKE * Add basic GitLab pipeline * Bug #16717: Move from exo-csource to xdt-csource * Translation Updates ==== glibc ==== Subpackages: glibc-32bit glibc-devel glibc-extra glibc-lang glibc-locale glibc-locale-base nscd - setxid-propagate-glibc-tunables.patch: Propagate GLIBC_TUNABLES in setxid binaries - tunables-string-parsing.patch: tunables: Terminate if end of input is reached (CVE-2023-4911, bsc#1215501) ==== icewm ==== Version update (3.4.0 -> 3.4.3) Subpackages: icewm-config-upstream icewm-default icewm-lang icewm-lite - Update to version 3.4.3: * New preference "TaskBarShowWindowTitles" for icon-only task buttons. * New winoption "doNotManage" to workaround bugs in picom for plank. * When a battery has no data about full charge, use the capacity. * When cascading windows, include the border size in the displacement. * Let icewmbg interpret command-line file arguments relative to $PWD. * Add a -f,--fork option to icewmbg to detach it from the terminal. * Fix the Window List Menu for #144. * Fix restoring from fullscreen with F11 in chromium for #141. * Support tabs in the Window List Menu. * Control the terminal in icewm-menu-fdo by option or environment. * Let icewm-menu-fdo use a list of default terminals to choose from. - Drop unknown config options: * --enable-guievents * --enable-antialiasing * --enable-gradients * --enable-shaped-decorations ==== javapackages-tools ==== Subpackages: javapackages-filesystem - Added patches: * 0005-Interpolate-properties-also-in-the-current-artifact.patch + interpolate variables also in current artifactId, groupId and version * 0006-Test-variable-expansion-in-artifactId.patch + test previous changes * 0007-Test-that-we-don-t-bomb-on-relativePath.patch + test gracious handling of empty <relativePath/> in parent reference of a pom file ==== ldb ==== Version update (2.7.2 -> 2.8.0) Subpackages: libldb2 libldb2-32bit python3-ldb - Update to 2.8.0 * CVE-2023-0614 Not-secret but access controlled LDAP attributes can be discovered (bug 15270) * pyldb: Raise an exception if ldb_dn_get_parent() fails * Implement ldap_whoami in pyldb and add the RFC4532 LDB_EXTENDED_WHOAMI_OID definition * Documentation and spelling fixes * Add ldb_val -> bool,uint64,int64 parsing functions * Split out ldb_val_as_dn() helper function * add LDB_CHANGETYPE_MODRDN support to ldb_ldif_to_pyobject() * add LDB_CHANGETYPE_DELETE support to ldb_ldif_to_pyobject() * let ldb_ldif_parse_modrdn() handle names without 'rdn_name=' prefix * Don't create error string if there is no error * Avoid allocation and memcpy() for every wildcard match candidate * Make ldb_msg_remove_attr O(n) * pyldb: Throw error on invalid controls * pyldb: remove py2 ifdefs * Call tevent_set_max_debug_level(TEVENT_DEBUG_TRACE) ==== libX11 ==== Version update (1.8.6 -> 1.8.7) Subpackages: libX11-6 libX11-data libX11-xcb1 - update to 1.8.7 This release contains fixes for the issues reported in security advisory here: https://lists.x.org/archives/xorg-announce/2023-October/003424.html * fixes CVE-2023-43785 libX11: out-of-bounds memory access in _XkbReadKeySyms() (boo#1215683) * fixes CVE-2023-43786 libX11: stack exhaustion from infinite recursion in PutSubImage() (boo#1215684) * fixes CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to a heap overflow (boo#1215685) along with: * Fail XOpenDisplay() if server-provided default visual is invalid (!233) * Bring XKB docs in line with actual implementation (!231, !228) * Xutil.h: declare XEmptyRegion() and XEqualRegion() as Bool (!225) * Assorted updates to en_US.UTF-8 compose keys (!213, !214, !215, !216, !217, !219, !220, !222, !223, !226, !227, !229) ==== libXpm ==== Version update (3.5.16 -> 3.5.17) - Update to 3.5.17 * This release contains fixes for the libXpm issues reported in security advisory here: https://lists.x.org/archives/xorg-announce/2023-October/003424.html * fixes CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer() (boo#1215686) * fixes CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap (boo#1215687) ==== libev ==== - run signify only on Factory ==== libnvme ==== Subpackages: libnvme-mi1 libnvme1 - Enable tests during build - Set git version tag - Drop unused make dependency - Drop unencessary minimum version depedency on meson. - Re-enable libdbus feature. Upstream defaults changed. ==== libselinux ==== Subpackages: libselinux1 libselinux1-32bit selinux-tools - Repair initrd libselinux check in selinux-ready ==== libsemanage ==== Subpackages: libsemanage-conf libsemanage-migrate-store libsemanage2 - Remove build counter syncing for real ==== libvirt ==== Version update (9.7.0 -> 9.8.0) Subpackages: libvirt-client libvirt-daemon-common libvirt-daemon-config-network libvirt-daemon-driver-interface libvirt-daemon-driver-libxl libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-lock libvirt-daemon-log libvirt-daemon-plugin-lockd libvirt-daemon-proxy libvirt-daemon-qemu libvirt-daemon-xen libvirt-libs - Update to libvirt 9.8.0 (jsc#PED-3279) - bsc#1215708 - Many incremental improvements and bug fixes, see https://libvirt.org/news.html#v9-8-0-2023-10-02 ==== mpg123 ==== Version update (1.32.2 -> 1.32.3) Subpackages: libmpg123-0 mpg123-openal - Update to version 1.32.3 * libmpg123, libsyn123: always ifdef LFS_LARGEFILE_64 (not just if) * libsyn123: re-introduce _32 wrappers in addition to suffix-less ones (regression from 1.31, bug 363) ==== netcfg ==== - Remove ftpusers, none of our ftp servers uses that anymore - Remove defaultdomain, NIS got dropped - Remove hosts.equiv and hosts.lpd, the tools using them got dropped long ago. ==== nvme-cli ==== Subpackages: nvme-cli-bash-completion - Enable test during build - Drop minimum version meson dependency - Add asciidoc dependency - Build documentation when requested ==== python-SQLAlchemy ==== Version update (2.0.19 -> 2.0.21) - Update to 2.0.21: * Changes from 2.0.21: https://docs.sqlalchemy.org/en/20/changelog/changelog_20.html#change-2.0.21 * Changes from 2.0.20: https://docs.sqlalchemy.org/en/20/changelog/changelog_20.html#change-2.0.20 - Remove .gitignore files from source tree, removes all rpmlint warnings. ==== python-greenlet ==== Version update (3.0.0~rc3 -> 3.0.0) - Update to 3.0.0: * No changes from 3.0rc3 aside from the version number. - Ignore some slow and flaky tests ==== python-libvirt-python ==== Version update (9.7.0 -> 9.8.0) - Update to 9.8.0 - Add all new APIs and constants in libvirt 9.8.0 - jsc#PED-3279 ==== python-psutil ==== - Require /usr/bin/who only for suse_version > 1500: 15.X does not provide it, but has it in coreutils. - PEP517 - Clean up specfile from obsolete python2 stuff ==== python-reportlab ==== Version update (3.6.13 -> 4.0.5) - drop reportlab-missing-includes.patch - add importlib.patch to fix support for python3.12 - update to 4.0.5: * add in test for alpha composite colour * Added an SvgPath class; as used in github.com/deeplook/svglib * Added a simple log axis ticklabeller class * Allow for strokeWidth in LineSwatch * update extension alias' * allow BalancedColumns to work in a container flowable (ie with no frame) * allow custom styles for inrowsplitStaart & inrowsplitend * setup.py test --failfast works * allow running all tests without renderPM support * AR made some changes to allow running without renderPM support * AR merged accessibility branch and released 4.0.0 * initial support for rml ul ol dl tagging * added support for an ol/ul/dl caption paragraph * implement a safer toColor with rl_config.toColorCanUse option and rl_extended_literal_eval * added _ExpandedCellTupleEx for more tagging support ==== rubygem-nokogiri ==== - Buildrequire openssl gem to fix building with Ruby 3.0 ==== rubygem-ruby-dbus ==== Version update (0.23.0.beta2 -> 0.23.1) - 0.23.1 API: * Add DBus::Object.dbus_reader_attr_accessor to declare a common use case with a single call (gh#mvidner/ruby-dbus#140). * BusConnection#request_name defaults to the simple use case: single owner without queuing, failing fast; documented the complex use cases. ==== samba ==== Version update (4.18.6+git.320.cfda27bacb -> 4.19.0+git.306.19d2e214c58) Subpackages: libsamba-policy0-python3 samba-ad-dc-libs samba-client samba-client-32bit samba-client-libs samba-client-libs-32bit samba-gpupdate samba-ldb-ldap samba-libs samba-libs-python3 samba-python3 samba-winbind samba-winbind-libs samba-winbind-libs-32bit - Update to 4.19.0 * File doesn't show when user doesn't have permission if aio_pthread is loaded; (bso#15453). * ctdb_killtcp fails to work with --enable-pcap and libpcap â¥ 1.9.1; (bso#15451). * Logging to stdout/stderr with DEBUG_SYSLOG_FORMAT_ALWAYS can log to syslog; (bso#15460). * âsamba-tool domain level raiseâ fails unless given a URL; (bso#15458). * reply_sesssetup_and_X() can dereference uninitialized tmp pointer; (bso#15420). * missing return in reply_exit_done(); (bso#15430). * TREE_CONNECT without SETUP causes smbd to use uninitialized pointer; (bso#15432). * Avoid infinite loop in initial user sync with Azure AD Connect when synchronising a large Samba AD domain; (bso#15401). * Samba replication logs show (null) DN; (bso#15407). * 2-3min delays at reconnect with smb2_validate_sequence_number: bad message_id 2; (bso#15346). * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed; (bso#15446). * CID 1539212 causes real issue when output contains only newlines; (bso#15438). * KDC encodes INT64 claims incorrectly; (bso#15452). * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449). * Windows client join fails if a second container CN=System exists somewhere; (bso#9959). * regression DFS not working with widelinks = true; (bso#15435). * Heimdal fails to build on 32-bit FreeBSD; (bso#15443). * samba-tool ntacl get segfault if aio_pthread appended; (bso#15441). ==== selinux-policy ==== Subpackages: selinux-policy-targeted - Use /var/adm/update-scripts in macros.selinux-policy. The rpm state directory doesn't exist on SUSE systems (bsc#1213593) - Modified update.sh to require first parameter "full" to also update container-selinux. For maintenance updates you usually don't want it to be updated ==== srt ==== Version update (1.5.2 -> 1.5.3) - version update to 1.5.3 * New Features - PR #2714: Added maximum BW limit for retransmissions. See SRTO_MAXREXMITBW. * Important Bug Fixes - PR #2632: Use overlapped WSASendTo to avoid UDP sending losses. - PR #2766: Fixed spurious group read-ready epoll events. - PR #2772: Fixed RCV buffer initialization in Rendezvous. â ï¸ - PR #2757: Fix memory leak on queuing connection initialization packets. - PR #2745: Fix hang up on not enough space in the RCV buffer. - PR #2740: Fix possible tsbpd() deadlock with processCtrlShutdown(). - PR #2692: Rejection not undertaken in rendezvous after KMX failure. - PR #2774: Fix rendezvous connection mode when processing resulted in ACCEPT it was still sending rejection. - PR #2778: Drop unencrypted packets in AES-GCM mode. * Build - PR #2779, #2780: Fix the build for targets without IP_ADD_SOURCE_MEMBERSHIP. - PR #2784: Added missing public header files in Windows binary installer. * Unit Tests - PR #2681: Added custom main with transparent parameters. * Documentation - PR #2765: Updated the explicit information for binding to IPv6 wildcard. - PR #2785: Fixed API doc: SRT_INVALID_SOCK * https://github.com/Haivision/srt/releases/tag/v1.5.3 ==== talloc ==== Version update (2.4.0 -> 2.4.1) Subpackages: libtalloc2 libtalloc2-32bit python3-talloc - Update to 2.4.1 * Remove remaining, but broken python2 support * Spelling fixes * Remove unneeded va_copy() ==== tdb ==== Version update (1.4.8 -> 1.4.9) Subpackages: libtdb1 libtdb1-32bit python3-tdb - Update to 1.4.9 * Remove remaining, but broken python2 support * Spelling fixes * python: Safely clear structure members ==== tevent ==== Version update (0.14.1 -> 0.15.0) Subpackages: libtevent0 libtevent0-32bit python3-tevent - Update to version 0.15.0 * remove py2 ifdefs * python: Safely clear structure members * the tevent_thread_call_depth API is updated in order to allow better tracing. * add tevent_set_max_debug_level() only and don't pass TEVENT_DEBUG_TRACE to tevent_debug() callbacks by default. * Spelling fixes * Make use of epoll_create1() for epoll backend * Optimize overhead in the epoll backend ==== vsftpd ==== - Add vsftpd.ftpusers, the netcfg one is not maintained, outdated and will be removed. - vsftpd.pam: use own copy of ftpusers. ==== xdg-desktop-portal ==== Subpackages: xdg-desktop-portal-lang - Support building with meson 0.61.x used by SLE, where .pc files in dataonly packages are installed to %_libdir unlike in meson >= 0.62.0 where the default was changed to %_datadir. ==== xfce4-notifyd ==== Version update (0.8.2 -> 0.9.2) Subpackages: xfce4-notifyd-lang - Update to 0.9.2: * (Hopefully) actually fix settings migration code * (Hopefully) fix enum setting migration code - Add --enable-systemd when calling configure - Update to 0.9.1: * Make the XDG autostart file attempt a systemd start first * Only include the SystemdService= line if systemd support is enabled * Clean up some conditionals in configure.ac * Go back to installing the XDG autostart file by default * Allow installing systemd service file even if systemd is not installed - Update to 0.9.0: * Add missing sanity check * I18n: Update po/LINGUAS list * wayland: put windows on overlay layer, not top * Set window theme before placing window * Set initial window position before realizing windows * Avoid storing NULL app IDs in the app ID count hashtable * Simplify dbus/systemd service dir logic in configure.ac * Fix typos in README * Install D-Bus and systemd files under $prefix by default * Fix distcheck when run as non-root * Use pkg-config to find default systemd user unit directory * Change default systemd user path from /lib/... to /usr/lib/... * Change options for installing startup files * Add positioning options top-center and bottom-center * Simplify notification placement code * Stop using GtkCornerType; migrate setting to enum nick * Move log level settings from int to enum nick string * Move datetime format setting from int to enum nick string * Have a single entry point for setting migrations * Fix incorrect enum value for apps log level * Use registered enum types for config->enum mapping * Move enums to common, use glib-mkenums * Use new XDT feature macros * Don't log duplicate entries when updating an existing notification * Clean up logic in notify_notify() * Correctly update critical notifications while in DnD mode * Fix incorrect casts in GTree foreach functions * Remove expire/fade timeout source removal hacks * Missed a spot to reset fade/slide * Allow slideout when no fadeout * Only start fade timeout if no existing handle * Only start expiration timeout if no existing handle * Ensure timeout sources are removed in _window_dispose() * Move log dbus signal emissions to XfceNotifyDaemonLog * Remove expire and fade sources before emitting closed signal * Emit NotificationClosed when not showing notification * Consolidate the window movement code * Add option to show notifications on all monitors * Migrate the primary-monitor setting to a string-based enum * Translation Updates ==== xfce4-panel ==== Version update (4.18.4 -> 4.18.5) Subpackages: libxfce4panel-2_0-4 xfce4-panel-lang xfce4-panel-restore-defaults - Update to version 4.18.5 * pager: Do not adapt upper value of spin button in viewport mode * pager: Update workspace layout also on window manager change * pager: Fix aspect ratio for viewport (V2) * actions: Fix memory leak * pager: Delay GdkScreen signal handlers * panel: Do not scale background image when UI scale > 1 * popup-command: Do not block autohide when popped up at pointer * Fix memory leaks when using gtk_css_provider_new() * panel: Clear item list before repopulating item dialog * panel: Remove autosave timer for plugins * wrapper: Really ensure we don't call gtk_main_quit() twice * panel: Block autohide when the panel has input focus * clock: Fix sync timeout for seconds display * clock: Implement ConsoleKit sleep monitor * Add/Sharpen icons at 48-128px * Adjust 32px icon margins, new separator icon * Sharpen icons at 16px and 32px * Increase margins for 24px icons * Make 24px icons sharper * icons: Fix wrong exported sizes * Translation Updates ==== xfce4-pulseaudio-plugin ==== Version update (0.4.7 -> 0.4.8) Subpackages: xfce4-pulseaudio-plugin-lang - Update to version 0.4.8 * MPRIS: Use D-Bus name for identifying players * Fix possible context menu crash with MPRIS playlist * Add option to make mic icon persistent * Check for mic widget visibility * Preserve channel balance when changing sink/source volume * MPRIS: Add option to send multimedia keys to all players * MPRIS: Fix default controlled player by multimedia keys * Remove dead code * Translation Updates ==== xfce4-taskmanager ==== Version update (1.5.5 -> 1.5.6) Subpackages: xfce4-taskmanager-lang - Update to version 1.5.6 * Update copyright year * Rounded legend icons * Reopen process window maximized when closed maximized * Properly finalize global objects in main * Add missing include * Fix more memory leaks * Fix memory leak * Fix CSS related deprecation warnings * Ignore GtkStatusIcon related deprecations * Make libx11 optional, guard x11 code paths * Change type so that memory values are correct (Fixes #65) * settings-dialog: Fix untranslated label * Add icons at missing sizes, clean up SVG metadata * Add minimal support for Wayland * Fix graph drop off on the right side * Change graph peak variable to double * Remove timeout before exiting main loop * build: Add GLib requirement * Do not treat missing swap as error on OpenBSD and NetBSD * Fix process filter crash caused by the use of an uninitialized variable * Translation Updates ==== xscreensaver ==== Version update (6.06 -> 6.07) Subpackages: xscreensaver-data xscreensaver-data-extra xscreensaver-lang - update to 6.07: * New hacks, droste, skulloop, papercube and cubocteversion * xscreensaver-settings was sometimes turning off the DPMS checkbox * Log pid of caller of deactivate command, to give a hint about who is preventing the screen from blanking * Updates to sphereeversion. * Added some new map sources to mapscroller. * Various other minor bug fixes. - leave a nice notice for a very angry upstream developer in xscreensaver-disable-upgrade-nagging-message.patch - drop xscreensaver-bsc1204744.patch, included upstream ==== xterm ==== Version update (384 -> 385) Subpackages: xterm-bin xterm-resize - update to 385: * fixes for ReGIS (report by Ben Wong). + correct conversion from HLS to RGB + improve font-caching performance. * update tables in wcwidth.c based on Unicode 15.1.0 * improve fastScroll resource: + suppress screen-refreshes for carriage-returns + add -jf option to simplify use of this resource. + add a control sequence for enabling/disabling the resource. + enable this feature by default * extend title-stack feature to allow an additional parameter to directly access the stack, like the XTPUSHCOLORS and XTPOPCOLORS feature. * correct size and position of box shown for double-cell character which happens to be missing from the bitmap font (report by Peter Fabinski). * improved configure script: + add pattern for uClibc-ng to CF_XOPEN_SOURCE (report/patch by Waldemar Brodkorb). + add configure options --with-utmp-path and --with-wtmp-path to override configure script's check for utmp/wtmp pathnames which are shown in the manual (Debian #1042767). + CF_XOPEN_SOURCE provides for defining _DEFAULT_SOURCE for MinGW32 and MinGW64. + sed expression used to report gcc version now works with MinGW * ensure that line-attributes are reset after drawing missing character (report by Christian Weisgerber). * update config.guess, config.sub - rebased all patches

1 0

Re: [TESTERS WANTED] Using git to maintain packages on OBS - test run
by Adrian Glaubitz 06 Oct '23

06 Oct '23

On Fri, 2023-10-06 at 12:07 +0200, Dirk Müller wrote: > On Freitag, 6. Oktober 2023 11:17:36 CEST Adrian Glaubitz wrote: > > Hi Adrian, > > > > Yes, Dirk had to disable account creation as spammers found src.o.o > > OK. Could you create an account for me please? > > Can you try logging in again? Done. Still waiting for the confirmation mail.

2 2

Package fstrcmp is gone from TW 20231003 - on purpose?
by Manfred Hollstein 05 Oct '23

05 Oct '23

Hi there, it looks like the last Tumbleweed snapshot 20231003 removed package fstrcmp, i.e. libfstrcmp0 here; fwiw, openSUSE:Factory also doesn't contain it anymore. This package is still needed by Kodi which now shows one orphaned package. Was the removal on purpose? In that case we would have to start building it for Tumbleweed on Packman. TIA, cheers. l8er manfred

3 8

New Tumbleweed snapshot 20231003 released!
by Dominique Leuenberger 05 Oct '23

05 Oct '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: GraphicsMagick (1.3.40 -> 1.3.42) Mesa (23.1.8 -> 23.2.0) Mesa-drivers (23.1.8 -> 23.2.0) SDL2 (2.28.3 -> 2.28.4) container-selinux (2.215.0 -> 2.222.0) crypto-policies (20230614.5f3458e -> 20230920.570ea89) dLeyna (0.8.2 -> 0.8.3) glib2 gnome-remote-desktop (45.rc -> 45.0) grub2 gtk4 (4.12.2 -> 4.12.3) kbd (2.6.2 -> 2.6.3) kdepim-runtime libblockdev (3.0.2 -> 3.0.3) libdecor (0.1.1 -> 0.2.0) libsigc++2 (2.12.0 -> 2.12.1) libsigc++3 (3.2.0 -> 3.6.0) libwebp mozjs115 (115.2.1 -> 115.3.1) python-argparse-manpage (4.3 -> 4.5) qalculate (4.8.0 -> 4.8.1) qpdf (11.6.0 -> 11.6.1) qt6-base (6.5.2 -> 6.5.3) qt6-declarative (6.5.2 -> 6.5.3) qt6-imageformats (6.5.2 -> 6.5.3) qt6-translations (6.5.2 -> 6.5.3) qt6-wayland (6.5.2 -> 6.5.3) screen (4.9.0 -> 4.9.1) shadow systemd (254.3 -> 254.5) tracker-miners (3.6.0 -> 3.6.1) webkit2gtk3 (2.42.0 -> 2.42.1) webkit2gtk3-soup2 (2.42.0 -> 2.42.1) xdg-dbus-proxy (0.1.4 -> 0.1.5) yast2-trans (84.87.20230922.91d997adab -> 84.87.20230930.5f9e01162a) === Details === ==== GraphicsMagick ==== Version update (1.3.40 -> 1.3.42) Subpackages: libGraphicsMagick++-Q16-12 libGraphicsMagick-Q16-3 libGraphicsMagick3-config - version update to 1.3.42 Bug fixes: * TIFF: Default the alpha channel to type EXTRASAMPLE_UNASSALPHA(2). * BMP: Many fixes for reading esoteric BMP sub-formats. * TranslateTextEx(): Revert change so now a NULL pointer is returned when given an empty string. Some algorithms (e.g. montage) were depending on this!. * PAM: Fix reading comments. * PNG: Added Add missing module aliases "PNG00", "PNG48", "PNG64", so it is again possible to request these subformats directly. * TIFF: For common formats with the required number of channels, but one is an 'unspecified' channel, promote unspecified alpha to unassociated alpha so that the alpha channel is not ignored. * "Magick" command line emulation: Eliminate duplicate utility name output in error messages New Features: * BMP: Added the ability to read and write BMP using JPEG compression. Use '-define bmp:allow-jpeg' to allow use of JPEG compression. * BMP: Added support for BI_ALPHABITFIELDS compression * BMP: Added support for reading BMP with PNG compression. - modified patches % GraphicsMagick-disable-insecure-coders.patch (refreshed) - deleted patches - strlcpy-wrong-sizing.patch (upstreamed) ==== Mesa ==== Version update (23.1.8 -> 23.2.0) Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libOSMesa8 libgbm1 - Update to Mesa 23.2.0-rc4 - -> https://lists.freedesktop.org/archives/mesa-announce/2023-September/000731.… - supersedes U_llvmpipe-only-include-old-Transform-includes-when-ne.patch - disabled u_fix-build-on-ppc64le.patch (no longer needed?) - adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch ==== Mesa-drivers ==== Version update (23.1.8 -> 23.2.0) Subpackages: Mesa-dri Mesa-gallium Mesa-libva libxatracker2 - Update to Mesa 23.2.0-rc4 - -> https://lists.freedesktop.org/archives/mesa-announce/2023-September/000731.… - supersedes U_llvmpipe-only-include-old-Transform-includes-when-ne.patch - disabled u_fix-build-on-ppc64le.patch (no longer needed?) - adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch ==== SDL2 ==== Version update (2.28.3 -> 2.28.4) - Update to release 2.28.4 * Enable clipping for zero sized rectangles in the SDL renderer * Notify X11 clipboard managers when the clipboard changes * Fixed sensor timestamps for third-party PS5 controllers * Added detection for Logitech and Simagic racing wheels ==== container-selinux ==== Version update (2.215.0 -> 2.222.0) - Update to version 2.222: * Allow containers to read/write inherited dri devices - Update to version 2.221: * Allow containers to shutdown sockets inherited from container runtimes * Allow spc_t to use execmod libraries on container file systems * Add boolean to allow containers to read all cert files * More MLS Policy allow rules * Allow container runtimes using pasta bind icmp_socket to port_t * Fix spc_t transitions from container_runtime_domain ==== crypto-policies ==== Version update (20230614.5f3458e -> 20230920.570ea89) Subpackages: crypto-policies-scripts - nss: Skip the NSS policy check if the mozilla-nss-tools package is not installed. This avoids adding more dependencies in ring0. * Add crypto-policies-nss.patch [bsc#1211301] - Update to version 20230920.570ea89: * fips-mode-setup: more thorough --disable, still unsupported * FIPS:OSPP: tighten beyond reason for OSPP 4.3 * krb5: sort enctypes mac-first, cipher-second, prioritize SHA-2 ones * openssl: implement relaxing EMS in FIPS (NO-ENFORCE-EMS) * gnutls: prepare for tls-session-hash option coming * nss: prepare for TLS-REQUIRE-EMS option coming * NO-ENFORCE-EMS: add subpolicy * FIPS: set __ems = ENFORCE * cryptopolicies: add enums and __ems tri-state * docs: replace `FIPS 140-2` with just `FIPS 140` * .gitlab-ci: remove forcing OPENSSH_MIN_RSA_SIZE * cryptopolicies: add comments on dunder options * nss: retire NSS_OLD and replace with NSS_LAX 3.80 check * BSI: start a BSI TR 02102 policy [jsc#PED-4933] * Rebase patches: - crypto-policies-policygenerators.patch - crypto-policies-revert-rh-allow-sha1-signatures.patch - crypto-policies-FIPS.patch - Conditionally recommend the crypto-policies-scripts package when python is not installed in the system [bsc#1215201] ==== dLeyna ==== Version update (0.8.2 -> 0.8.3) - Update to version 0.8.3: + Build: Fix compatibility with Meson 1.2 + Renderer: Fix locale initialization + Server: - Fix locate initialization - Fix uninitialized variable warning - Properly handle optional actions - Fix browse not working properly - Drop 61d24fdc.patch: Fixed upstream. - Change compression of tarball in service and spec to zst from xz. ==== glib2 ==== Subpackages: glib2-lang glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 libgthread-2_0-0 - Fix NetworkManager crashing repeatedly with glib 2.78.0; (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch ==== gnome-remote-desktop ==== Version update (45.rc -> 45.0) Subpackages: gnome-remote-desktop-lang - Update to version 45.0: + vnc: Also include DRM format modifiers when resizing PipeWire stream. + rdp: Also include DRM format modifiers when resizing PipeWire stream. + Updated translations. - Change compression of tarball in service and spec to zst from xz. - Drop dbus-1-daemon Requires, only needed for tests, and we are not building them currently. ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - Only build with fde-tpm-helper-rpm-macros for the architectures supporting the newer UEFI and TPM 2.0. * Also correct the location of %fde_tpm_update_requires - Fix a boot delay regression in PowerPC PXE boot (bsc#1201300) * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch - Add the new BuildRequires for EFI builds for the better FDE support: fde-tpm-helper-rpm-macros + Also add the the macros to %post and %posttrans - Correct the type of allocated EFI pages for ARM64 kernel (bsc#1215151) * arm64-Use-proper-memory-type-for-kernel-allocation.patch ==== gtk4 ==== Version update (4.12.2 -> 4.12.3) Subpackages: gtk4-lang gtk4-schema gtk4-tools libgtk-4-1 typelib-1_0-Gtk-4_0 - Update to version 4.12.3: + GtkWindow: Don't assume titlebars are GtkHeaderBar + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos + printing: Fix some issues with the portal implementation + GSK: - Some optimizations in the GL renderer - Fix memory leaks in the Broadway renderer + demos: Fix a crash in gtk4-demo + Updated translations. ==== kbd ==== Version update (2.6.2 -> 2.6.3) Subpackages: kbd-legacy - Update to version 2.6.3: - libkfont: * Don't look for fonts in the current directory. - showkey: * Add parameter to allow to change timeout. - po: * Update po files. ==== kdepim-runtime ==== Subpackages: kdepim-runtime-lang - Add libetebase-devel to BuildRequires to enable the etesync resource for factory builds ==== libblockdev ==== Version update (3.0.2 -> 3.0.3) Subpackages: libbd_btrfs3 libbd_crypto3 libbd_fs3 libbd_loop3 libbd_lvm3 libbd_mdraid3 libbd_nvme3 libbd_part3 libbd_swap3 libbd_utils3 libblockdev3 - Update to version 3.0.3: * Always use "--fs ignore" with lvresize * nvme: - Use interim buffer for nvme_get_log_sanitize() - Generate HostID when missing * tests: - Specificy required versions when importing GLib and BlockDev introspection - Minor NVMe HostNQN fixes - Replace deprecated unittest assert calls * fs: - Fix leaking directories with temporary mounts - Fix memory leak * crypto: Correctly convert passphrases from Python to C ==== libdecor ==== Version update (0.1.1 -> 0.2.0) Subpackages: libdecor-0-0 - Update to version 0.2.0: * Various bug and leak fixes. * New gtk plugin. - Update URL and source to new home. - Add pkgconfig(gtk-3.0) BuildRequires, new dependency. - Use ldconfig_scriptlets macro for post(un) handling. ==== libsigc++2 ==== Version update (2.12.0 -> 2.12.1) - Update to version 2.12.1: + Documentation: - slot, signal: Describe the slot<void(int)> syntax more - connection: Improve the class documentation - Improve Visual Studio build documentation - Remove AUTHORS and add general information to README.md + Build: - Meson: . Don't copy files with configure_file() . Fix the evaluation of is_git_build on Windows - Visual Studio: Support static builds - Use ldconfig_scriptlets macro for post(un) handling. - Update URL to new home. ==== libsigc++3 ==== Version update (3.2.0 -> 3.6.0) - Update to version 3.6.0: + sigc++config.h.*: Update and clean up a bit for Visual Studio + scoped_connection: New wrapper to auto-disconnect a slot + signal: Add connect_first() + Documentation: - connection: Improve the class documentation - Improve Visual Studio build documentation - Remove AUTHORS and add general information to README.md - manual: Add paragraph about new scoped_connection + Tests: Add test_scoped_connection + Build: - Meson: . Don't copy files with configure_file() . Fix the evaluation of is_git_build on Windows . Don't require the 'dot' command to build the documentation - CMake: Prevent multiple target declaration for uninstall - Visual Studio: Support static builds - Use autosetup macro. - Update to version 3.4.0: + Add track_object(), deprecate track_obj() + Add trackable_signal_with_accumulator and trackable_signal + Examples, tests: - examples/member_method: Make on_print() non-virtual - test_accumulated.cc: clang++ requires another 'template' - test_limit_reference.cc: Don't use auto where a slot is required + Documentation: signal::make_slot(): Note that signal does not derive from trackable + Build: - Meson, MSVC: Compensate for the lack of msvc_recommended_pragmas.h - Fix build with -Dbuild-deprecated-api=false - Meson: . Avoid configuration warnings . Detect if we build from a git subtree . Simplify lookup of python command . Add build_tests option - Use ldconfig_scriptlets macro for post(un) handling. - Update URL to new home. ==== libwebp ==== Subpackages: libsharpyuv0 libwebp7 libwebpdecoder3 libwebpdemux2 libwebpmux3 - Add 0001-Fix-invalid-incremental-decoding-check.patch A fuzzing finding fixed in the SLE/Leap updates ==== mozjs115 ==== Version update (115.2.1 -> 115.3.1) - Update to version 115.3.1: + Security fix: CVE-2023-5217: Heap buffer overflow in libvpx. - Changes from version 115.3.0: + Various security fixes and other quality improvements. + CVE-2023-5168: Out-of-bounds write in FilterNodeD2D1 + CVE-2023-5169: Out-of-bounds write in PathOps + CVE-2023-5171: Use-after-free in Ion Compiler + CVE-2023-5174: Double-free in process spawning on Windows + CVE-2023-5176: Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3 ==== python-argparse-manpage ==== Version update (4.3 -> 4.5) - update to 4.5: * We newly provide build_manpages.build_py and build_manpages.install command classes that are re-usable from pyproject.toml. No need to provide setup.py because of argparse-manpage. * The prog= specifier (in setup.py/setup.cfg/pyproject.toml) is now better handled so it doesn't conflict with ArgumentParser(prog=..). ==== qalculate ==== Version update (4.8.0 -> 4.8.1) Subpackages: libqalculate22 qalculate-data - version update to 4.8.1 * Fix besselj() and bessely() * Fix display of matrices and vectors with complex number form other than rectangular (default) * Fix conflict between decibel units (e.g. "0dB") and duodecimal 0dâ¦ syntax (now requires at least two digits) * Fixes for title options in plot() function * Add additional buttons and button menus to general keypad (Qt) * Add option to show all functions, units, and variables in tool button menus (Qt) * Add recently used objects to functions, units, and variables menus (Qt) * Add option to bypass dialog for functions in menu (Qt) * Add option, in context menu, to display text for tool buttons (Qt) * Open functions, units, and variables tool button menus using long-press or right-click (in addition to arrow button), and add keyboard shortcuts (Qt) * Use keypad tool button menu as context menu and show keypad type in title bar of keypad (Qt) * Auto-update number bases above programming keypad when entering simple integers, even if calculate-as-you-type is deactivated (GTK) ==== qpdf ==== Version update (11.6.0 -> 11.6.1) - version update to 11.6.1 * Bug fixes: - Fix a logic error introduced in 11.6.0 in the fix to copyForeignObject. The bug could result in some pages not being copied. ==== qt6-base ==== Version update (6.5.2 -> 6.5.3) Subpackages: libQt6Core6 libQt6DBus6 libQt6Gui6 libQt6Network6 libQt6OpenGL6 libQt6Sql6 libQt6Test6 libQt6Widgets6 qt6-network-tls qt6-platformtheme-gtk3 - Update to 6.5.3 * https://www.qt.io/blog/qt-6.5.3-released - Drop patch, merged upstream: * CVE-2023-38197-qtbase-6.5.diff - Enable the experimental native painting feature to improve remote desktop performances (boo#1214915) exporting QT_XCB_NATIVE_PAINTING is required to use the feature. ==== qt6-declarative ==== Version update (6.5.2 -> 6.5.3) Subpackages: libQt6LabsAnimation6 libQt6LabsFolderListModel6 libQt6LabsQmlModels6 libQt6LabsSettings6 libQt6LabsSharedImage6 libQt6LabsWavefrontMesh6 libQt6Qml6 libQt6QmlCore6 libQt6QmlLocalStorage6 libQt6QmlModels6 libQt6QmlWorkerScript6 libQt6QmlXmlListModel6 libQt6Quick6 libQt6QuickControls2-6 libQt6QuickControls2Impl6 libQt6QuickDialogs2-6 libQt6QuickDialogs2QuickImpl6 libQt6QuickDialogs2Utils6 libQt6QuickEffects6 libQt6QuickLayouts6 libQt6QuickParticles6 libQt6QuickShapes6 libQt6QuickTemplates2-6 libQt6QuickTest6 qt6-declarative-imports - Update to 6.5.3 * https://www.qt.io/blog/qt-6.5.3-released ==== qt6-imageformats ==== Version update (6.5.2 -> 6.5.3) - Update to 6.5.3 * https://www.qt.io/blog/qt-6.5.3-released ==== qt6-translations ==== Version update (6.5.2 -> 6.5.3) - Update to 6.5.3 * https://www.qt.io/blog/qt-6.5.3-released ==== qt6-wayland ==== Version update (6.5.2 -> 6.5.3) Subpackages: libQt6WaylandClient6 libQt6WaylandCompositor6 libQt6WaylandEglClientHwIntegration6 libQt6WaylandEglCompositorHwIntegration6 libQt6WlShellIntegration6 - Update to 6.5.3 * https://www.qt.io/blog/qt-6.5.3-released ==== screen ==== Version update (4.9.0 -> 4.9.1) - update to 4.9.1 (bsc#1210272, CVE-2023-24626): * Support stop/parity bits on serial port * Add needed system headers in checks and return values for implicit function declarations * Avoid zombies after shell exit * Missed signal sending permission check on failed query messages (CVE-2023-24626) * manpage fixes * source code fixes during cleanup * UTF-8 encoding can emit invalid UTF-8 sequences * for out of range unicode values ==== shadow ==== Subpackages: libsubid4 login_defs - Add shadow-4.14.0-selinux-labels.patch: Set proper SELinux labels for new homedirs. See gh/shadow-maint/shadow#812. ==== systemd ==== Version update (254.3 -> 254.5) Subpackages: libsystemd0 libsystemd0-32bit libudev1 systemd-32bit systemd-container systemd-coredump systemd-lang udev - Import commit 9674bb256205e6c643feadbcccfd1ee8feeee684 (merge of v254.5) For a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/6ed5b11298005e07509832881a0c5ff… - Make sure to call %sysusers_create only when transfiletrigger is disabled. - systemd.spec: switch to %ldconfig_scriptlets - systemd.spec: add `%tmpfiles_create systemd-resolve` It's only needed by SLE distros since systemd packages rely on transtriggerfiles in Factory. - Import commit 6ed5b11298005e07509832881a0c5ff1a80bf225 (merge of v254.4) For a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/b6b4e5a8a82d1f13f265a4ef170f2d1… ==== tracker-miners ==== Version update (3.6.0 -> 3.6.1) Subpackages: tracker-miner-files tracker-miners-lang - Update to version 3.6.1: + Avoid the special thread in tracker-extract-3, and extend the seccomp jail to the full process. + Updated translations. - Add a tracker_basever define, and set it to 3.6. We have a hard Requires on what tracker version is needed and it is currently set at the same or newer version, change this to tracker_basever (tracker-miners have never been at a higher patch version before). ==== webkit2gtk3 ==== Version update (2.42.0 -> 2.42.1) Subpackages: WebKitGTK-4.1-lang libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles - Update to version 2.42.1: + Fix enable-html5-database setting to properly enable/disable IndexedDB API. + Fix the build with GBM disabled. + Fix several crashes and rendering issues. - switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow switching to a different libicu*-devel (jsc#PED-6193) ==== webkit2gtk3-soup2 ==== Version update (2.42.0 -> 2.42.1) Subpackages: WebKitGTK-4.0-lang libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 webkit2gtk-4_0-injected-bundles - Update to version 2.42.1: + Fix enable-html5-database setting to properly enable/disable IndexedDB API. + Fix the build with GBM disabled. + Fix several crashes and rendering issues. - switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow switching to a different libicu*-devel (jsc#PED-6193) ==== xdg-dbus-proxy ==== Version update (0.1.4 -> 0.1.5) - Update to version 0.1.5: + Fix handling of object paths > 255 bytes + Print better errors when message parsing fails + Optionally install tests for "as-installed" testing ==== yast2-trans ==== Version update (84.87.20230922.91d997adab -> 84.87.20230930.5f9e01162a) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sr yast2-trans-sv yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20230930.5f9e01162a: * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Spanish) * Translated using Weblate (Spanish) * Translated using Weblate (Spanish) * Translated using Weblate (Spanish) * New POT for text domain 'storage'.

1 0