October 2023 - openSUSE Factory - openSUSE Mailing Lists

Disabling /dev/fb0 on TW
by Thomas Zimmermann 06 Jan '25

06 Jan '25

tl;dr: Disable fbdev userspace interfaces on TW Hi, the upcoming Linux kernel v6.6 will contain the option to disable fbdev userspace interfaces in the kernel configuration. [1] I intent to enable this and thereby switch off /dev/fb0 et al. The tracker bug is boo#1212947. [2] * Why? The old fbdev subsystem is an endless source of bugs. For example, we recently had an out-of-bounds access in the fbdev emulation, where userspace could write beyond the end of the framebuffer memory. [3] Fbdev is under-maintained. I've been doing improvements in recent kernel releases, but only where it benefits the DRM subsystem. Disabling fbdev userspace interfaces will also help weeding out any programs that still contain hard dependencies on them. * What changes? Enabling the new kernel option disables all fbdev userspace interfaces. These are * the device files, such as /dev/fb0 * the sys files under /sys/class/graphics/fb[0-9]+ * /proc/fb * What are the effects on userspace programs? Userspace applications run on the desktop via Wayland or X. There will be no change to them. Xorg and Wayland compositors run on DRM interfaces. A few programs run on SDL, which has no dependency on fbdev either. Any fbdev support in these mid-layer components should be disabled as well. There's one known affected program: TW's text-mode installer can use the tool fbiterm to display CJK symbols during installation. This comes from a time when some low-end systems where not able to boot graphics installation. fbiterm has been unmaintained for >15 years and is ready for retirement. But there's no good drop-in replacement. I propose to simply remove fbiterm and let the graphics installer handle CJK. * What about the framebuffer console? The kernel-provided framebuffer console does not change. The kernel will still show the regular console. Userspace interfaces in /sys/class/graphics/fbcon are still available. For questions and discussion, please comment here or in boo#1212947. Best regards Thomas [1] https://elixir.bootlin.com/linux/v6.6-rc1/source/drivers/video/fbdev/core/K… [2] https://bugzilla.opensuse.org/show_bug.cgi?id=1212947 [3] https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -- Thomas Zimmermann Graphics Driver Developer SUSE Software Solutions Germany GmbH Frankenstrasse 146, 90461 Nuernberg, Germany GF: Ivo Totev, Andrew Myers, Andrew McDonald, Boudien Moerman HRB 36809 (AG Nuernberg)

12 36

factory@ is now under moderation
by Neal Gompa 28 May '24

28 May '24

Hello all, Due to the recent continuous inappropriate behavior on the factory@ mailing list, we have taken the extraordinary action of moderating the entire mailing list. Each message being submitted will be actively reviewed for approval until the Board works through the necessary and appropriate behavior to resolve this incident. -- Neal Gompa (ID: Pharaoh_Atem)

3 2

[opensuse-factory] Leap 42.3 Build 0312 released!
by Ludwig Nussel 25 Apr '24

25 Apr '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&version=42.3&bui… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Distribution&q… When you reply to discuss some issues, make sure to change the subject. Please use the test plan at https://docs.google.com/spreadsheets/d/1AGKijKpKiJCB616-bHVoNQuhWHpQLHPWCb3… to record your testing efforts and use bugzilla to report bugs. Packages changed: biosdevname btrfsmaintenance conduit gconf2-branding-openSUSE (42.1 -> 42.3) ibus kactivitymanagerd kde-user-manager kernel-source (4.4.73 -> 4.4.74) libxml2 libzypp (16.12.0 -> 16.13.0) lightdm marble mc plasma5-integration plasma5-openSUSE postgresql (9.4 -> 9.6) python-coverage (3.7.1 -> 4.3.4) ucode-intel (20160714 -> 20170511) yast2-bootloader (3.2.22 -> 3.2.23) yast2-ntp-client (3.2.9 -> 3.2.12) === Details === ==== biosdevname ==== - Duplicate naming of SRIOV VFs by biosdevname when VPD_DCM Strings are present in VFs (bsc#1042185) * Add: biosdevname_avoid_duplicates.patch ==== btrfsmaintenance ==== - Require btrfsprogs (bsc#1047226) - update to 0.2 - updated documentation - no hardcoded paths to external utilities - fixed logger name typos for 'journal' target - defrag fixes (sysconfig, find arguments) - Removed patch: balance-typo.patch - Added patch: sysconfig-override-trim.diff - Add balance-typo.patch (bnc#986543) - version 0.1.1 - fix typo and make journal logging target work - cron refresh: remove bashism - Removed patches: * 0003-Add-COPYING-file.patch * 0011-cron-refresh-remove-debuggiong-output.patch - cron script symlinks are not created on first installation (bsc#907343) - add COPYING to package - refresh script: remove extra messages - add uninstall targets - fix refresh service - adjust sysconfig defaults - Add more package dependencies (cron, zypp-plugin) - minor bugfixes - Add supplements(btrfsprogs) - initial version 0.1 ==== conduit ==== Subpackages: conduit-lang - Use python-vobject instead of vobject per python-vobject change in 42.3. ==== gconf2-branding-openSUSE ==== Version update (42.1 -> 42.3) - do not build novell-sound-theme in the gconf2-branding-SLED build to prevent duplicated binaries in openSUSE Leap. The novell-sound-theme is taken from gconf2-branding-SLES sources on both the SLED product and the SLES WE module. bsc#1046099 - bump versions ==== ibus ==== Subpackages: ibus-branding-openSUSE-KDE ibus-gtk ibus-gtk-32bit ibus-gtk3 ibus-lang libibus-1_0-5 libibus-1_0-5-32bit python-ibus typelib-1_0-IBus-1_0 - Update ibus.spec: copy auto-start files to SOURCE directory to enable modifications before compile. - Add ibus-disable-engines-preload-in-GNOME.patch: Disable load preload-engines actions in SLE, which is unnecessary for mono IMF in SLE and may cause CJK user login failed (bsc#1036729). ==== kactivitymanagerd ==== - Recommend -lang package ==== kde-user-manager ==== - Recommend -lang package ==== kernel-source ==== Version update (4.4.73 -> 4.4.74) Subpackages: kernel-default kernel-default-devel kernel-devel kernel-docs kernel-macros kernel-syms - Delete patches.kabi/kabi-fix-for-kvm-x86-fix-singlestepping-over-syscall. No need for kABI fix yet for Leap 42.3. - commit f0a86d9 - Fix kABI breakage by KVM CVE fix (bsc#1045922). - commit c0308f6 - powerpc/perf: Fix branch event code for power9 (fate#321438, Pending SUSE Kernel Fixes). - commit e954af6 - powerpc: Fix /proc/cpuinfo revision for POWER9 DD2 (bsc#1046789). - commit 444247f - Refresh metadata patches.drivers/ibmvnic-a2-Fix-assignment-of-RX-TX-IRQ-s.patch. - commit be32be9 - drm/i915: Serialize GTT/Aperture accesses on BXT (bsc#1046821). - commit b263fef - Bluetooth: hidp: fix possible might sleep error in hidp_session_thread (bsc#1031784). - Refresh patches.suse/kgr-0008-mark-task_safe-in-some-kthreads.patch. - commit 18c6f3e - KVM: x86: fix singlestepping over syscall (CVE-2017-7518 bsc#1045922). - commit d989643 - nvme/pci: Fix stuck nvme reset (bsc#1043805). - commit 7afe4f0 - Refresh fadump patches to upstream and add metadata patches.arch/powerpc-fadump-add-reschedule-point-while-releasing-memory.patch. patches.arch/powerpc-fadump-avoid-duplicates-in-crash-memory-ranges.patch patches.arch/powerpc-fadump-avoid-holes-in-boot-memory-area-when-fadump-is-registered.patch patches.arch/powerpc-fadump-provide-a-helpful-error-message.patch - commit f0fb5c3 - blacklist.conf: Remove duplicated entries - commit cb960d2 - Remove duplicated blacklist entries and put git-commit tag to patches - commit 12a0cb2 - blacklist.conf: Remove duplicated entry. - commit 561ddb1 - ibmvnic: Fix assignment of RX/TX IRQ's (bsc#1046589). - commit 5fa38bf - blacklist.conf: blacklist 570d8e939801 we do not care about the code in Documentation all that much, do we? - commit 69d5811 - blacklist.conf: blaclist 5380e5644afb it is just not worth backporting without any explicit report where a silently truncated success would lead to a real bug. - commit fc28626 - blacklist.conf: unnecessary patch The bug triggers only upon a malformed descriptor and the comparison is so that our buffer would be too large not too small so no overflow. The device would not work, but it won't anyway. - commit 99f8a16 - Rearrange the previous patches for hpsa and smartpqi to the right position. - commit a1f1f27 - Update patches.fixes/xfs-split-default-quota-limits-by-quota-type.patch (bsc#1040941). Fix the bug nr used. - commit 115ba75 - printk: Correctly handle preemption in console_unlock() (bsc#1046434). - commit 0a3c2a4 - printk/xen: Force printk sync mode when migrating Xen guest (bsc#1043347). - commit e13596b - btrfs: disable possible cause of premature ENOSPC (bsc#1040182) - commit 8bf31da - rbd: make sure pages are freed by libceph (bsc#1045596). - rbd: drop extra rbd_img_request_get (bsc#1045596). - commit c8719f2 - dm-raid: Do not call BUG() in __rdev_sectors() (bsc#1046264). - commit 0b1aab0 - btrfs: Round down values which are written for total_bytes_size (bsc#1043912). - btrfs: Manually implement device_total_bytes getter/setter (bsc#1043912). - commit c4d2eb7 - pipe: cap initial pipe capacity according to pipe-max-size limit (bsc#1045330). - commit 4ee3ec2 - Blacklist drivers/net/ethernet/ibm/emac We do not build the driver. - commit d432b2b - blacklist.conf: this patch breaks the API It disallows some operations that are now allowed - commit 98325c2 - arm64: Update config files. (bsc#1036737) Disable XGENE_PMU. - commit 7bb0115 - Disable Xilinx network drivers (bsc#1046170). - commit 656fc83 - hwpoison, memcg: forcibly uncharge LRU pages (bnc#1046105). - commit 2b252e1 - blacklist.conf: blacklist 570d8e939801 the issue is visible only when 80df554275c2 is applied (4.7+ and not backported to our trees) - commit 47b83ce - config/x86_64: make CONFIG_SERIAL_8250_DW and *_MID built-in (bsc#1024449) - commit 2e3ca7e - Refresh patches.drivers/0477-nvme-add-hostid-token-to-fabric-options.patch. Update mainline references. - commit eee1109 - fs/exec.c: account for argv/envp pointers (bnc#1039354, CVE-2017-1000365). - commit 7418d0f - Refresh ibmvnic patch metadata patches.drivers/ibmvnic-98-ibmvnic-Correct-return-code-checking-for-ibmvnic_init-during-probe.patch. patches.drivers/ibmvnic-a0-ibmvnic-Fix-incorrectly-defined-ibmvnic_request_map_rsp-structure.patch. patches.drivers/ibmvnic-a1-ibmvnic-Fix-error-handling-when-registering-long-term-mapped-buffers.patch. - commit babc17a - Refresh metadata patches.fixes/powerpc-tm-Fix-stack-pointer-corruption-in-__tm_recheckpoint. - commit 0b5bdc6 - powerpc/ftrace: Pass the correct stack pointer for DYNAMIC_FTRACE_WITH_REGS (FATE#322421). - commit 936e653 - nvme: add hostid token to fabric options (bsc#1045293). - commit 52dffb9 - iw_cxgb4: Fix error return code in c4iw_rdev_open() (bsc#1026570). - RDMA/iw_cxgb4: Always wake up waiter in c4iw_peer_abort_intr() (bsc#1026570). - commit 2ce43b1 - clocksource/drivers/arm_arch_timer: Fix read and iounmap of incorrect variable (bsc#1045937). - commit 594f037 - Linux 4.4.74 (CVE-2017-1000364 bnc#1012382 bnc#1039348 bnc#1045340 bsc#1031717 bsc#1043231). - Delete patches.drivers/media-pvrusb2-reduce-stack-usage-pvr2_eeprom_analyze. - Delete patches.drivers/media-vb2-Fix-an-off-by-one-error-in-vb2_plane_vaddr. - Delete patches.drivers/staging-rtl8188eu-prevent-an-underflow-in-rtw_check_. - Delete patches.fixes/mm-fix-new-crash-in-unmapped_area_topdown.patch. - Delete patches.fixes/mm-larger-stack-guard-gap-between-vmas.patch. - commit 5e41880 - tty: Fix ldisc crash on reopened tty (bnc#1043488). - commit 04cca20 - tty: Destroy ldisc instance on hangup (bnc#1043488). - tty: Refactor tty_ldisc_reinit() for reuse (bnc#1043488). - tty: Use 'disc' for line discipline index name (bnc#1043488). - tty: Move tty_ldisc_kill() (bnc#1043488). - tty: Handle NULL tty->ldisc (bnc#1043488). - tty: Prepare for destroying line discipline on hangup (bnc#1043488). - tty: Reset c_line from driver's init_termios (bnc#1043488). - tty: Simplify tty_set_ldisc() exit handling (bnc#1043488). - commit c016cca - kabi: ignore fs_info parameter for tracepoints that didn't have it (bsc#1044912). - commit 24869ea ==== libxml2 ==== Subpackages: libxml2-2 libxml2-2-32bit libxml2-devel libxml2-tools - Security fix: * libxml2-CVE-2017-7376.patch [bsc#1044887, CVE-2017-7376] * Increase buffer space for port in HTTP redirect support - Security fix: * libxml2-CVE-2017-7375.patch [bsc#1044894, CVE-2017-7375] * Prevent unwanted external entity reference - Upstream patches updated and with tests: * libxml2-CVE-2017-9047.patch and libxml2-CVE-2017-9048.patch merged into libxml2-CVE-2017-9047.patch [bsc#1039066, bsc#1039661] * libxml2-CVE-2017-9049.patch and libxml2-CVE-2017-9050.patch merged into libxml2-CVE-2017-9049.patch [bsc#1039063, bsc#1039064] ==== libzypp ==== Version update (16.12.0 -> 16.13.0) - Adapt loop mounting of iso images (bsc#1038132, bsc#1033236) - Adjust zypp.conf for openSUSE Tumbleweed (bsc#1031756) - Change arch variable names conflicting with compiler macros (fixes #70) - Fix potential crash if repo has no baseurl (bnc#1043218) - version 16.13.0 (0) ==== lightdm ==== Subpackages: liblightdm-gobject-1-0 lightdm-lang - Augment patch to also resolve the target of symlink sessions for detemining the preselected option: * ignore-known-symlink-sessions.patch ==== marble ==== Subpackages: libastro1 libmarblewidget-qt5-27 marble-data marble-devel marble-doc marble-kde marble-lang - Add Fix-utm-enum-value.patch and reverse-apply it, this upstream commit causes a crash when adding bookmarks if switched to UTM view angles because the necessary handler functions for the dialog are not implemented yet (boo#1044747, kde#381872) - Add Fix-plain-map-and-political-map-showing-no-content.patch to fix the plain map and the political map being not displayed at all (kde#379297) ==== mc ==== Subpackages: mc-lang - sftp.patch: Backport upstream fixes for SFTP (boo#1004280, boo#1042797) ==== plasma5-integration ==== - Move the Recommends: %{name}-plugin-lang to the plasma5-integration-plugin sub package, otherwise the translations won't get installed as there is no main package (boo#1027925) - Actually apply the aforementioned patch (shouldn't the source validator have warned?) ==== plasma5-openSUSE ==== Subpackages: plasma5-defaults-openSUSE plasma5-theme-openSUSE plasma5-workspace-branding-openSUSE sddm-theme-openSUSE - Fix installation of the sddm theme files (boo#1047254) ==== postgresql ==== Version update (9.4 -> 9.6) Subpackages: postgresql-contrib postgresql-devel postgresql-docs postgresql-server - Bump version and defaultpackage to 9.6. - Move ~postgres/.bash_profile to postgresql-server to avoid a file conflict between the versioned server packages. - Bump version and defaultpackage to 9.4. - Bump version and defaultpackage to 9.3. - Change license string to PostgreSQL. - Make all dummy packages noarch. - Make PostgreSQL 9.2 the default. - Reduce the postgresql packages with unversioned names to dummy packages that require the respective versioned package names. ==== python-coverage ==== Version update (3.7.1 -> 4.3.4) - uninstall alternatives in %postun - update for singlespec - update to 4.3.4: - Using the --skip-covered option on an HTML report with 100% coverage would cause a ?No data to report? error, as reported in issue 549. This is now fixed; thanks, Lo�c Dachary. - If-statements can be optimized away during compilation, for example, if 0: or if __debug__:. Coverage.py had problems properly understanding these statements which existed in the source, but not in the compiled bytecode. This problem, reported in issue 522, is now fixed. - If you specified --source as a directory, then coverage.py would look for importable Python files in that directory, and could identify ones that had never been executed at all. But if you specified it as a package name, that detection wasn?t performed. Now it is, closing issue 426. Thanks to Lo�c Dachary for the fix. - If you started and stopped coverage measurement thousands of times in your process, you could crash Python with a ?Fatal Python error: deallocating None? error. This is now fixed. Thanks to Alex Groce for the bug report. - On PyPy, measuring coverage in subprocesses could produce a warning: ?Trace function changed, measurement is likely wrong: None?. This was spurious, and has been suppressed. - Previously, coverage.py couldn?t start on Jython, due to that implementation missing the multiprocessing module (issue 551). This problem has now been fixed. Also, issue 322 about not being able to invoke coverage conveniently, seems much better: jython -m coverage run myprog.py works properly. - Let?s say you ran the HTML report over and over again in the same output directory, with --skip-covered. And imagine due to your heroic test-writing efforts, a file just acheived the goal of 100% coverage. With coverage.py 4.3, the old HTML file with the less-than-100% coverage would be left behind. This file is now properly deleted. - update to Version 4.3.1 ? 2016-12-28: - Some environments couldn?t install 4.3, as described in issue 540. This is now fixed. - The check for conflicting --source and --include was too simple in a few different ways, breaking a few perfectly reasonable use cases, described in issue 541. The check has been reverted while we re-think the fix for issue 265. - update to Version 4.3 ? 2016-12-27: Special thanks to Lo�c Dachary, who took an extraordinary interest in coverage.py and contributed a number of improvements in this release. - The HTML report now supports a --skip-covered option like the other reporting commands. Thanks, Lo�c Dachary for the implementation, closing issue 433. - Subprocesses that are measured with automatic subprocess measurement used to read in any pre-existing data file. This meant data would be incorrectly carried forward from run to run. Now those files are not read, so each subprocess only writes its own data. Fixes issue 510. - Coverage.py wouldn?t execute sys.excepthook when an exception happened in your program. Now it does, thanks to Andrew Hoos. Closes issue 535. - The coverage combine command will now fail if there are no data files to combine. The combine changes in 4.2 meant that multiple combines could lose data, leaving you with an empty .coverage data file. Fixes issues issue 525, issue 412, issue 516, and probably issue 511. - The branch coverage issues described in issue 493, issue 496, and issue 502 are now fixed, thanks to Lo�c Dachary. - Options can now be read from a tox.ini file, if any. Like setup.cfg, sections are prefixed with ?coverage:?, so [run] options will be read from the [coverage:run] section of tox.ini. Implements part of issue 519. Thanks, Stephen Finucane. - Specifying both --source and --include no longer silently ignores the include setting, instead it fails with a message. Thanks, Nathan Land and Lo�c Dachary. Closes issue 265. - Coverage.py can now search .pex files for source, just as it can .zip and .egg. Thanks, Peter Ebden. - update to 4.2: - Since ``concurrency=multiprocessing`` uses subprocesses, options specified on the coverage.py command line will not be communicated down to them. Only options in the configuration file will apply to the subprocesses. Previously, the options didn't apply to the subprocesses, but there was no indication. Now it is an error to use ``--concurrency=multiprocessing`` and other run-affecting options on the command line. This prevents failures like those reported in `issue 495`_. - Filtering the HTML report is now faster, thanks to Ville Skytt�. - update to 4.0.3: - Fixed a mysterious problem that manifested in different ways: sometimes hanging the process (`issue 420`_), sometimes making database connections fail (`issue 445`_). - The XML report now has correct ``<source>`` elements when using a ``--source=`` option somewhere besides the current directory. This fixes `issue 439`_. Thanks, Arcady Ivanov. - Fixed an unusual edge case of detecting source encodings, described in `issue 443`_. - Help messages that mention the command to use now properly use the actual command name, which might be different than "coverage". Thanks to Ben Finney, this closes `issue 438`_. - add LICENSE.txt - Pre require coreutils. This package is needed for the rm call in the pre section. Subprocess failed. Error: RPM failed: /var/tmp/rpm-tmp.gONanE: line 3: rm: command not found - specfile: * updated license * updated update-alternatives * README.txt -> README.rst - update to version 4.0: (long list, see http://coverage.readthedocs.org/en/latest/changes.html) - fix rhel deps by depending on /usr/sbin/update-alternatives ==== ucode-intel ==== Version update (20160714 -> 20170511) - Update to version 20170511 - Update to version 20161104. ==== yast2-bootloader ==== Version update (3.2.22 -> 3.2.23) - AuotYaST configuration: Set StorageDevices flag disks_valid to true. So libstorage can scan valid disks and "/" partition can be found. (bnc#1043132) - 3.2.23 ==== yast2-ntp-client ==== Version update (3.2.9 -> 3.2.12) - Resrict records are written at the end but the default file and most profiles use them at the beginning, which mangles the file completely (bsc#983486). To fix it we have just changed the order of writing. - 3.2.12 - AutoYaST: Fix crash when trying to sanitize not string values, for example initial_sync. - AutoYaST: Sanitize comments by only removing blank spaces at the beginning and adding line break. This avoids augeas parse errors (bsc#1045777). - 3.2.11 - AutoYaST: Fix crash in CFA when creating a command record with some key value option is given (bsc#1045968) - 3.2.10 - AutoYaST: Comments from autoyast profile should not be sanitized to avoid entries without space between value and comment (e.g trustedkey 1# coment). This is caused by a bug in augeas adding new entries. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

2 1

[opensuse-factory] acpid requires systemd?
by Felix Miata 25 Apr '24

25 Apr '24

Can this be true? If so, why? Zypper won't let me upgrade acpid without breakage unless systemd is installed too. I have systemd locked out, as I'd rather test things I can understand in Factory, not major overhaul stuff. -- "The wise are known for their understanding, and pleasant words are persuasive." Proverbs 16:21 (New Living Translation) Team OS/2 ** Reg. Linux User #211409 ** a11y rocks! Felix Miata *** http://fm.no-ip.com/ -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-factory+help(a)opensuse.org

4 3

enabling reproducible builds in Factory and ALP
by Jan Zerebecki 15 Mar '24

15 Mar '24

Hi *, to support https://en.opensuse.org/openSUSE:Reproducible_Builds I plan to get the following project configuration for Factory and ALP enabled: Macros: %source_date_epoch_from_changelog Y %clamp_mtime_to_source_date_epoch Y %use_source_date_epoch_as_buildtime Y %_buildhost reproducible :Macros I'm still waiting to get https://github.com/openSUSE/product-builder/pull/26 merged to prevent a bug with mirrors that will otherwise happen. Afterwards a time of the build is still in the HTTP header Last-Modified when requesting the rpm file. HTTP mtime is a few seconds earlier than end time of the build (seen in OBS web UI only as start + duration). I didn't double check, but it should also be recorded in the Tumbleweed archive Bernhard keeps, which can with a bit of work be looked up by content hash or name including version of the rpm file if its not on the normal mirrors anymore. Both the build time and host can also still be seen in the build log. Comments welcome. -- Best regards, Jan Zerebecki

4 6

Proposal: amend the packaging guidelines for %fillup_only
by Dan Čermák 02 Mar '24

02 Mar '24

Hi list, our packaging guidelines for %fillup_only [1] currently do not suggest anything for the %files section for the files generated in `/etc/sysconfig/`. I would like to suggest that we start adding the newly generated file `/etc/sysconfig/$pkgname` as follows to the %files section: --8<---------------cut here---------------start------------->8--- %files %ghost %config(noreplace) %attr(0600,root,root) /etc/sysconfig/%{name} %dir /etc/sysconfig --8<---------------cut here---------------end--------------->8--- This ensures that rpm is aware of the files as configuration files. Thoughts, opinions? Cheers, Dan Footnotes: [1] https://en.opensuse.org/openSUSE:Packaging_Conventions_RPM_Macros#%fillup_o… -- Dan Čermák <dcermak(a)suse.com> Software Engineer Development tools SUSE Software Solutions Germany GmbH Frankenstr. 146 90461 Nürnberg Germany www.suse.com Geschäftsführer: Ivo Totev, Andrew McDonald, Werner Knoblich (HRB 36809, AG Nürnberg)

3 3

wine and zlib
by Joe Salmeri 22 Feb '24

22 Feb '24

I did a fresh install of TW 20230222 on a new PC. My main desktop which was installed back in 2021 has also been updated ( zypper dup ) to 20230222. I found something odd when comparing packages between the 2 machines. Both PC's have wine installed, however... On my main desktop when the original install in 2021 of wine was done it installed libz1-32bit ( as per the zypper history logs ) and it still has that installed after it was updated to 20230222. On the new PC fresh install of 20230222 when wine was installed it installed libz-ng-compat1-32bit. The libz-ng-compat1-32bit version looks like it was forked in 2021, just after my main machine was originally built so that would explain why it has libz1-32bit but shouldn't it have been updated by zypper dup ??? Is this a bug that I should report? If so, which system is wrong / which version should be used? Thanks!

5 6

Recent e2fsprogs update flag changes
by Patrick Schaaf 22 Feb '24

22 Feb '24

Hi, as I haven't found discussion by searching, I thought I bring up a gotcha I ran into today, on a host recently updated to tumbleweed 20230801 level. With a somewhat recent update to e2fsprogs, now at 1.47.0 compared to May '23 at 1.46.5, the set of mkfs flags has changed: --- /root/mke2fs.conf.20230512 2023-08-09 12:00:14.379476597 +0200 +++ /etc/mke2fs.conf 2023-06-14 19:20:22.000000000 +0200 @@ -14 +14 @@ - features = has_journal,extent,huge_file,flex_bg,metadata_csum,64bit,dir_nlink,extra_isize + features = has_journal,extent,huge_file,flex_bg,metadata_csum,metadata_csum_seed,64bit,dir_nlink,extra_isize,orphan_file For me, this resulted in an otherwise fine virtual machine with 20230512 userlevel, not booting after an "rsync copy migration" into a fresh root filesystem mkfs'ed with these new flags. Reason being that 3 months older fsck - the sytemd boot time rootfs service actually - goes "failed". I guess I'll need just use flag override options going forward, to cope with that, but thought I'd bring it to attention here at least. best regards Patrick

3 4

snapd applications not working on Tumbleweed (20230613)
by Jim Henderson 19 Jan '24

19 Jan '24

Wondering if anyone else is seeing this. I attempted to launch two apps (slack and spotify) installed with snapd, and the launch failed. Troubleshooting it, I removed all of the snaps from the system, uninstalled and reinstalled snapd, and I get the following output: --- $ snap install spotify error: cannot perform the following tasks: - Run configure hook of "spotify" snap if present (run hook "configure": ----- go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Matcha-dark-sea /snap/spotify/67/data-dir/themes/Matcha-dark-sea none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Matcha-sea /snap/spotify/67/data-dir/themes/Matcha-sea none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Materia-compact /snap/spotify/67/data-dir/themes/Materia-compact none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Materia-dark-compact /snap/spotify/67/data-dir/themes/Materia-dark-compact none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Materia-dark /snap/spotify/67/data-dir/themes/Materia-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Materia-light-compact /snap/spotify/67/data-dir/themes/Materia-light-compact none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Materia-light /snap/spotify/67/data-dir/themes/Materia-light none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Materia /snap/spotify/67/data-dir/themes/Materia none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Radiance /snap/spotify/67/data-dir/themes/Radiance none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Radiant-MATE /snap/spotify/67/data-dir/themes/Radiant-MATE none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-MATE-dark /snap/spotify/67/data-dir/themes/Yaru-MATE-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-MATE-light /snap/spotify/67/data-dir/themes/Yaru-MATE-light none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-bark-dark /snap/spotify/67/data-dir/themes/Yaru-bark-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-bark /snap/spotify/67/data-dir/themes/Yaru-bark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-blue-dark /snap/spotify/67/data-dir/themes/Yaru-blue-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-blue /snap/spotify/67/data-dir/themes/Yaru-blue none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-dark /snap/spotify/67/data-dir/themes/Yaru-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-light /snap/spotify/67/data-dir/themes/Yaru-light none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-magenta-dark /snap/spotify/67/data-dir/themes/Yaru-magenta-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-magenta /snap/spotify/67/data-dir/themes/Yaru-magenta none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-mate-dark /snap/spotify/67/data-dir/themes/Yaru-mate-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-mate /snap/spotify/67/data-dir/themes/Yaru-mate none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-olive-dark /snap/spotify/67/data-dir/themes/Yaru-olive-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-olive /snap/spotify/67/data-dir/themes/Yaru-olive none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-prussiangreen-dark /snap/spotify/67/data-dir/themes/Yaru-prussiangreen-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-prussiangreen /snap/spotify/67/data-dir/themes/Yaru-prussiangreen none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-purple-dark /snap/spotify/67/data-dir/themes/Yaru-purple-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-purple /snap/spotify/67/data-dir/themes/Yaru-purple none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-red-dark /snap/spotify/67/data-dir/themes/Yaru-red-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-red /snap/spotify/67/data-dir/themes/Yaru-red none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-sage-dark /snap/spotify/67/data-dir/themes/Yaru-sage-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-sage /snap/spotify/67/data-dir/themes/Yaru-sage none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-viridian-dark /snap/spotify/67/data-dir/themes/Yaru-viridian-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-viridian /snap/spotify/67/data-dir/themes/Yaru-viridian none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru /snap/spotify/67/data-dir/themes/Yaru none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/elementary /snap/spotify/67/data-dir/themes/elementary none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied cannot update snap namespace: cannot create writable mimic over "/usr/lib/x86_64-linux-gnu": permission denied snap-update-ns failed with code 1 -----) --- The execution of both programs prior to the reinstallation did the same thing. I did note that /usr/lib/x86_64-linux-gnu does not exist on my system. Happy to report a bug on bugzilla, but wanted to see if anyone else had noticed this. -- Jim Henderson Please keep on-topic replies on the list so everyone benefits

5 10

Is it possible for Slowroll to officially support the integrity of NVidia and VMWare modules?
by Xu Zhao 19 Dec '23

19 Dec '23

Hello all, I am a 5-years Tumbleweed user. I am also the maintainer of many Tumbeweed packages such as telegram-desktop, chezscheme, amdvlk, and yacreader. I have both AMD and NVIDIA desktops with openSUSE Tumbleweed installed. NVidia closed-source GPU driver integration has always been a pain for rolling release like Tumbleweed because: 1) kernel's API keeps changing and it often takes NVidia 1~2 weeks to follow-up the latest kernel release in their new driver version (see http://rglinuxtech.com/ ); 2) people who don't care about NVidia do not want to slow down the rolling of kernel versions For example, even today the version of nvidia-open-driver-G06-signed-kmp-default(https://build.opensuse.org/packag…, 535.113.01) is not compatible with nvidia-video-G06 (https://download.nvidia.com/opensuse/tumbleweed/x86_64/, 535.104) on Tumbleweed. I am wondering if we can attract some users to Slowroll if it only releases snapshots whose kernel version is compatible with the NVidia GPU driver? At least I will be very interested to try it out on my Nvidia desktop. Similar case should apply for VMWare kernel modules, but if it takes too much additional efforts, I think we should priortize NVidia module integrity. Best, Xu -- Xu Zhao i(a)xuzhao.net

10 16

[TESTERS WANTED] Using git to maintain packages on OBS - test run
by Dan Čermák 08 Dec '23

08 Dec '23

Dear packagers for openSUSE Tumbleweed, we have been working on a prototype that allows you to maintain your packages in git (similarly to Fedora's dist git) on src.opensuse.org instead of on OBS. Contributions to the package are then handled via pull requests on src.opensuse.org which get automatically forwarded as submitrequests on OBS. This is currently just a prototype and we are looking for testers and general feedback. So if you want to participate as a maintainer, please check the full guide here: https://opensuse.github.io/scm-staging/user_guide.html tl;dr; you'll have to convert the develpackage to use `<scmsync>` from src.opensuse.org/pool and everything else should "just work". FAQ: - Where can I report issues or provide feedback? https://github.com/openSUSE/scm-staging/issues (for bugs) or https://github.com/openSUSE/scm-staging/discussions (for general feedback) - Is this how the future of packaging in openSUSE is going to look like? Maybe, maybe not. This is currently just a test drive and its outcome will influence the way forward. - Will submitrequests to my develpackage still work? Sadly no, branching a git maintained package on OBS does not work. Please indicate in the description of your package that users should contribute on src.opensuse.org instead. - Which tools do I need? Just git, git-lfs and osc (at least version 1.2.0 is recommended for service runs to work) Looking forward to your feedback! Dan -- Dan Čermák <dcermak(a)suse.com> Software Engineer Development tools SUSE Software Solutions Germany GmbH Frankenstrasse 146 90461 Nürnberg Germany (HRB 36809, AG Nürnberg) Managing Director/Geschäftsführer: Ivo Totev, Andrew Myers, Andrew McDonald, Boudien Moerman

23 66

Migrate from update-alternatives to libalternatives
by Martin Schreiner 05 Dec '23

05 Dec '23

Hello folks, As some of you may know, there are some limitations regarding update-alternatives that prevent it from working perfectly when using transactional updates. Basically, /var isn't part of the snapshot's data. This means that all files created/manipulated during package installation in /var/lib/alternatives won't be taken into consideration when snapshots are rolled back. More information is available here: https://kubic.opensuse.org/documentation/transactional-update-guide/tu-setu… This fact could lead to broken symlinks: Suppose I install "go1.20"(snapshot A) and "go1.21" (snapshot B). I then boot from snapshot A, but "/var/lib/alternatives/go" still tells "update-alternatives" that "go1.21" would be a valid choice, since this information lives outside of the snapshot's directories, in "/var". If "update-alternatives" were to accept that choice, then "/etc/alternatives/go" would become a broken link, our last line of defence here being how carefully maintained "update-alternatives" is. So that's not a system-level design solution, but rather very application-specific. What we're planning: Replace update-alternatives with libalternatives: https://github.com/openSUSE/libalternatives This change should be done gradually on Factory, and ideally it would require no manual intervention from the users. We plan on releasing this change in batches: i.e.: all Go versions we provide on Factory would be migrated to libalternatives in a single-pass. Then another set of closely-related packages, such as the OpenJDK. Then another, so on and so forth. What we need: The goal of this thread is to establish a line of discussion around this change, which should be a gradual one on Factory. All opinions, comments, ideas and criticism are valid, and will be taken into consideration. Status: There are currently 14909 spec files on openSUSE:Factory. 964 (6.46%) of these depend on update-alternatives. Currently 52 packages use libalternatives, such as vim and nodejs-common. Basically, the cores of both MicroOS and SLE Micro are already using libalternatives. Things that seem to be clear in this particular context: 1 - libalternatives should work really well with transactional updates: As the state of alternatives kept by libalternatives is maintained in /usr/share/libalternatives/<binary>/<pref>.conf, this means that packages only need to provide a single file to provide their alternative. This file will be part of the package's regular files (declared in %files), and no state is modified by any hooks (preun, postun, prerm, postrm) during the updates. Rolling back a snapshot will revert back to a state where that alternative didn't exist (as it wasn't installed). 2 - libalternatives does not manipulate symlinks: /usr/bin/alts (the main binary for libalternatives) executes binaries directly (by calling exec()). The actually binary (for example, /usr/bin/vi) is a symlink to /usr/bin/alts, which then reads its configuration files and determines which binary to execute, based on the highest priority. 3 - libalternatives supports user overrides: non-root users can override the alternatives by creating their own local preference file in $HOME/.config/libalternatives.conf. This may be done by invoking "alts" directly, as it serves both purposes. 4 - Even if it doesn't manipulate symlinks, groups and manpages are still supported: libalternatives has a "group" directive for manipulating groups of binaries together, and it has some verifications to ensure the binaries in these groups are indeed declared in tandem with one another, essentially managing them as a collection. It also has a "man" directive for man pages, so even if it's not doing symlink manipulation, look up man pages still works. In fact, our "man" package was patched to work with libalternatives support: https://build.opensuse.org/package/view_file/Base:System/man/man-db-2.9.4-a… 5 - No RPM macros are required: This is really cool. We're basically just adding a file to %files, to use libalternatives. So no RPM macros are even required here. But we could create an RPM macro that automatically writes the preference file, so we could easily manipulate its contents inside the RPM spec. 6 - How libalternatives can actually be used So there are actually at least TWO ways to use libalternatives: we either create a symlink to /usr/bin/alts, or use libalternatives as a shared object and write a tiny wrapper program, such as this one: https://build.opensuse.org/package/view_file/devel:languages:nodejs/nodejs-… The advantage of the first method is that we don't need a special – albeit short – C program to act as a dispatcher for libalternatives's magic sauce. The advantage of the second method is that we don't need packages to depend on the "alts" package (which contains /usr/bin/alts), but only on "libalternatives1" instead (which provides /usr/lib64/libalternatives.so.1). I appreciate if you can provide any insights here, they're more than welcome. Thank you.

16 45

Sudo announcement - upcoming changes
by Otto Hollmann 27 Nov '23

27 Nov '23

Hi all, I'm happy to inform you about upcoming changes in our openSUSE implementation of sudo. The first change is splitting configuration files between /etc and /usr/etc. More information about why we are introducing this change can be found here [1]. Sudo will read configuration files in the following order: /etc/sudoers, /usr/etc/sudoers. Our distribution file will be installed in /usr/etc/sudoers. If there is no /etc/sudoers file, the command visudo will open /usr/etc/sudoers and save the result as /etc/sudoers. If /etc/sudoers file already exists, there is no change in visudo behavior - it will open and edit /etc/sudoers. Big thanks to sudo upstream and Jason Sikes for this change. The second change relates to the configuration "Defaults targetpw" SUSE traditionally ships sudo with "Defaults targetpw". That allows any user in the system to use sudo without configuration by authenticating as the target user (usually root). An alternative authentication scheme used by some Linux distributions allows users who are members of a specific group to authenticate as root by typing their own password. So far, this model required manual configuration. To make this approach easier, we are now introducing the following optional packages: * sudo-policy-wheel-auth-self * sudo-policy-sudo-auth-self * system-group-sudo If installed, users in the wheel group (first package) or sudo group (second package) will be asked for their password instead of the password of the target account when executing the sudo command. There is no change for users who are not in those special groups. sudo will continue to prompt for the target password for those users. So updating sudo is safe in any case. The third package (which will be installed as a dependency for the package sudo-policy- sudo-auth-self) creates a configuration file for systemd-sysusers, ensuring that the system group "sudo" will be created. *Please note the meaning of the wheel group is not well defined, so adding users to that group may have effects outside the scope of sudo.* In addition, those packages also install polkit policies so applications using polkit will be also allowed to authenticate in the same way. [1] https://en.opensuse.org/openSUSE:Packaging_UsrEtc Regards, Otto Hollmann

9 23

Remove dependency on /usr/bin/python3
by Daniel Garcia 22 Nov '23

22 Nov '23

Hello, As part of a Python team maintenance task we are trying to remove the dependency on /usr/bin/python3 from as many packages as possible to reduce the problems of changing the system python in the future [1]. Right now /usr/bin/python3 is a link provided by the current system python package that today is python311, in Factory. Any package that provides a python script with the shebang #!/usr/bin/python3 will have the requirement on /usr/bin/python3. There's a macro in the python-rpm-macros to fix the shebang on python scripts automatically, that can be used in the install phase, just before the fdupes call, and point to the real binary and not the link: %python3_fix_shebang This macro expands to: for f in /home/abuild/rpmbuild/BUILDROOT/%{NAME}-%{VERSION}- %{RELEASE}.x86_64/usr/bin/*; do [ -f $f ] && sed -i "1s@#!.*python.*@#!$(realpath /usr/bin/python3)@" $f done And indeed will replace the shebang to point to #!/usr/bin/python3.11. This will make the script to work correctly, even if the system python changes in the distribution, avoiding the problem of running with a different python and not finding the deps that are in /usr/lib/python3.11/site- packages. In some cases it could be okay to have the shebang #!/usr/bin/python3, if there are no external dependencies and it's something that will work with different python versions, but when possible, and as a general rule, it'll be better to fix the shebangs. If you maintain a package that provides some python script, please, consider to add this macro call. [1] https://bugzilla.opensuse.org/show_bug.cgi?id=1212476 -- Daniel García Moreno Python Packager

8 13

Announcing Agama 5
by Imobach Gonzalez Sosa 22 Nov '23

22 Nov '23

Hi all, We have just released Agama 5 which, among other things, includes: * A translated web user interface. By now, it is available in Dutch, English, Japanese, Spanish, Swedish. * A prototype of a software patterns selection. However, the important part is the discussion in the openSUSE Factory mailing list[1]. * Agama does not reuse pre-existing swap partitions. * Support to boot via PXE. As usual, you can find the full announcement in our blog[2]. Regards, Imo [1] https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… [2] https://yast.opensuse.org/blog/2023-10-25/agama5 -- Imobach González Sosa SUSE Linux LLC

2 1

What Tumbleweed patterns do we want to offer during Agama installation
by Ancor Gonzalez Sosa 21 Nov '23

21 Nov '23

We need to talk. ;-) As you may know, the YaST Team is developing an alternative installer called Agama (formerly D-Installer). https://github.com/openSUSE/agama We want the workflow in Agama to be simpler than with YaST. Even without any selection of packages to install. But quite some people expressed their desire of being able to customize the software selection while installing the operating system itself. Since we don't want to bring back complex and specific concepts like the installation roles, we decided to expose the current list of patterns so the users can decide which ones to install... knowing that would expose some organizational problems we have with patterns. Take a look at https://yast.opensuse.org/assets/images/patterns-demo.gif That's a first implementation that shows we have WAY too many patterns that are WAY too arbitrarily organized. If we want to use patterns as the main concept to allow software customization... What can we do? Organize the patterns better? Introduce some kind of flag to distinguish the patterns that make sense to offer during installation? Fix something in the way we categorize the patterns? We feel this is not an UI problem, but an structural one. We are looking forward for realistic suggestions. Meanwhile, you can play with the current list by downloading the staging version of Agama. Ie. any image called agama-live-xxx-openSUSE-yyy.iso from https://download.opensuse.org/repositories/systemsmanagement:/Agama:/Stagin… Cheers. -- Ancor González Sosa YaST Team at SUSE Software Solutions

12 23

SCSI device identification and SCSI symlink generation in sg3_utils 1.48
by Martin Wilck 09 Nov '23

09 Nov '23

With the forthcoming update of sg3_utils to v1.48 (currently in Base:System, to be submitted to Factory soon), SCSI device identification and SCSI symlink generation by udev will change. TL;DR: unreliable device identifiers will not be used by default any more, and /dev/disk/by-id symlinks for such identifiers will not be created by default, either. The policy can be changed by editing the udev rules in 00-scsi-sg3_config.rules. Please file bugs and / or notify me if you have trouble with this new identification scheme. Of course, while this is still in Base:System, we can also discuss the general approach for Factory, and the defaults to be applied. Long version: It is well known that referring to disk devices by their device node (like /dev/sda) is unreliable. In most situations, it is recommended to refer to devices by their content, i.e. using file system UUIDs or labels. Sometimes, however, the devices must be referred to by hardware properties. For this purpose, udev maintains various symlinks under /dev/disk/by-id. This post is specifically about SCSI symlinks, which have the format /dev/disk/by-id/scsi-XYZ. If you don't use dm-multipath, and don't use hardware IDs to refer to any disks or partitions anywhere, you can stop reading here. SCSI devices can be identified in different ways by the contents of SCSI VPD (Vital Product Data) pages. In PVD 83 (device identification), the following identifiers may occur (see SCSI spec SPC-6 §7.7.6 for details): a) NAA registered extended: 36... (+ 31 hex digits) b) NAA registered: 35... (+ 15 hex digits) c) NAA extended: 32... (+ 15 hex digits) d) EUI-64: 2... (+ 16 hex digits) e) SCSI name string: 8... (+ utf-8 string) f) NAA local ("L"): 33... (+ 15 hex digits) g) T10 vendor-ID ("T): 1... (+ string) h) vendor-specific ("V") 0... (+ string) Furthermore, we have i) serial number ("S"): S... (+ vendor/product/serial string) The list above is sorted roughly top-down by the reliability (uniqueness) of these identifiers. The udev rules select the most reliable available identifier from the above list to set the ID_SERIAL udev property, which is used e.g. by dm-multipath to identify SCSI devices which represent different paths to the same physical volume. Furthermore, the udev rules create /dev/disk/by-id/scsi-$ID symlinks for all identifiers from the above list that are defined for a given device. This makes sure that whatever identifier a user has chosen for referring to her disks will be available as symlink under /dev/disk/by-id. However, this has also severe disadvantages. The identifiers f)-i) are not reliable; IOW there can be multiple devices in the same system that use the same identifier, although they don't represent the same physical disk. This applies to i) in particular: Some large storage arrays use the same serial number for all LUNs they expose. Using such identifiers for multipath can cause fatal data corruption. Moreover, the creation of these symlinks during boot can slow down booting a lot, because thousands of devices may be contending for the same symlink. Lastly, not creating useless symlinks will tidy up /dev/disk/by-id and make it easier to read. Therefore sg3_utils 1.48 changes the policy for SCSI device identification. The policy can be customized in the udev rule "00-scsi- sg3_config.rules" (to change the policy, copy this file from /usr/lib/udev/rules.d to /etc/udev/rules.d first). For determining ID_SERIAL, only a)-e) above are tried. If users need to use additional identifiers from the list above, they can set the udev property .SCSI_ID_SERIAL_SRC (leading "." is intentional) to any combination of the capital letters in quotes in the list above. E.g. "ST" would mean to take g) and i) into account. To restore the previous behavior, set ENV{.SCSI_ID_SERIAL_SRC}="LTVS". The current upstream default is "T", so that g) above is still enabled. To disable all "unreliable" IDs, set it to the empty string. If udev encounters a device for which ID_SERIAL can't be assigned, it prints a warning to the journal. Symlink generation is controlled by the variable .SCSI_SYMLINK_SRC. It can also be set to any combination of "LTVS", with the same meaning of the letters as above, and controls which scsi-... symlinks udev will create under /dev/disk/by-id/, *in addition* to the symlink /dev/disk/by-id/scsi-$ID_SERIAL, which will always be created if ID_SERIAL could be determined. Again, to restore the previous behavior of the udev rules, set ENV{.SCSI_SYMLINK_SRC}="LTVS". The default is the empty string. Note 1: The symlink generation applies to both disks and partitions. Partition symlinks have a "-part$P" string appended to the name of the symlink of their parent disk. Note 2: Modern SCSI devices usually support one or more of the "reliable" identifiers a)-e) above. I expect that only very few old devices really need one of f)-i). Inform me if you find counter- examples. Note 3: ATA and USB devices have additional identifiers generated by the transport (/dev/disk/by-id/ata-* and /dev/disk/by-id/usb-*) which are unaffected by this change. These devices often don't expose proper SCSI IDs, but they actually don't need them because the ATA or USB identifiers are unique. Regards, Martin

7 27

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 31 Oct '23

31 Oct '23

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have had problems for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - sonic-pi: Fails to build Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

1 0

[Announcement] support for systemd soft-reboot
by Thorsten Kukuk 31 Oct '23

31 Oct '23

Hi, systemd v254 introduced "soft-reboot" (https://manpages.opensuse.org/systemctl),which reboots the userland, but not the kernel or hardware. This allows a quick reboot after updates of e.g. dbus, glibc or openssl. With the latest snapshot, rebootmgr and os-update support this now, too. Means, if you use os-update for automatic updating your server and an update requires a reboot, but there is no new kernel or bootloader, the reboot will be done much quicker now. transactional-upate will get support for this next. The "zypp-boot-plugin" (https://manpages.opensuse.org/zypp-boot-plugin) looks at the packages which got installed or updated and decides according a config file, if: - a hard reboot is required (e.g. after update of the bootloader - kexec is enough (if only the kernel is updated) - a soft-reboot is sufficient - no reboot is necessary at all It's in the responsibility of the application triggering the reboot which of the method it used, zypp-boot-plugin only gives a hint. Thorsten -- Thorsten Kukuk, Distinguished Engineer, Senior Architect, Future Technologies SUSE Software Solutions Germany GmbH, Frankenstraße 146, 90461 Nuernberg, Germany Managing Director: Ivo Totev, Andrew McDonald, Werner Knoblich (HRB 36809, AG Nürnberg)

1 0

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 30 Oct '23

30 Oct '23

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have had problems for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - weblate: Fails to build - yuzu: Fails to build Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

1 0

New Tumbleweed snapshot 20231029 released!
by Dominique Leuenberger 30 Oct '23

30 Oct '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: GraphicsMagick apache2-mod_php8 (8.2.11 -> 8.2.12) avahi avahi-glib2 glib2 (2.78.0 -> 2.78.1) gnome-settings-daemon gnome-software gvfs libsoup (3.4.3 -> 3.4.4) libstorage-ng (4.5.154 -> 4.5.155) mozilla-nss (3.93 -> 3.94) open-vm-tools p11-kit (0.25.0 -> 0.25.1) php8 (8.2.11 -> 8.2.12) vim (9.0.2043 -> 9.0.2078) virtualbox virtualbox-kmp xdg-desktop-portal (1.18.0 -> 1.18.1) xfconf (4.18.2 -> 4.18.1) === Details === ==== GraphicsMagick ==== Subpackages: libGraphicsMagick++-Q16-12 libGraphicsMagick-Q16-3 libGraphicsMagick3-config - Have libGraphicsMagick3-config require ghostscript-fonts-std (boo#1216604). ==== apache2-mod_php8 ==== Version update (8.2.11 -> 8.2.12) - version update to 8.2.12 * This is a bug fix release. https://www.php.net/ChangeLog-8.php#8.2.12 ==== avahi ==== Subpackages: avahi-lang libavahi-client3 libavahi-client3-32bit libavahi-common3 libavahi-common3-32bit libavahi-core7 - Add avahi-CVE-2023-38473.patch: derive alternative host name from its unescaped version (bsc#1216419 CVE-2023-38473). ==== avahi-glib2 ==== Subpackages: libavahi-glib1 libavahi-gobject0 libavahi-ui-gtk3-0 - Add avahi-CVE-2023-38473.patch: derive alternative host name from its unescaped version (bsc#1216419 CVE-2023-38473). ==== glib2 ==== Version update (2.78.0 -> 2.78.1) Subpackages: glib2-lang glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 libgthread-2_0-0 - Update to version 2.78.1: + Fix truncating files when `g_file_set_contents_full()` is called without `G_FILE_SET_CONTENTS_CONSISTENT` + Fix `-Dlibelf=disabled` on Linux + Bugs fixed: - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0 - gsubprocess-testprog.c: build error with cygwin (sys/ptrace.h: No such file or directory) - gio clears modification time in microseconds when setting with `set_modification_date_time` - Build of glib 2.78.0 ignores -Dlibelf=disabled - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o - Segfault when creating GIO GPropertyAction without properties - `g_file_set_contents_full()` doesn't truncate the file (without `G_FILE_SET_CONTENTS_CONSISTENT`) - guniprop.c: Avoid creating (temporarily) out-of-bounds pointers - Fixes for integer cast warnings when targeting CHERI - Fix test_find_program on FreeBSD - gconstructor.h: Ensure [c|d]tor prototypes are present for MSVC - Fix gutils-user-database test on macOS - Add value annotation to G_TYPE_FUNDAMENTAL_MAX - meson: Fix Windows build with PCRE2 as sibling subproject - gconstructor.h: Ensure [c|d]tor prototypes are present for MSVC - glocalfileinfo: Preserve microseconds for access/modify times - Make sure the `GTask` is freed on a graceful disconnect - Buffer needs to be aligned correctly to receive linux_dirent64. - gtestutils.h: Fix warning with -Wsign-conversion caused by g_assert_cmpint - tests: Drop unnecessary include from gsubprocess-testprog.c - wakeup: do single read when using eventfd() - wakeup: Fix g_wakeup_acknowledge if signal comes inâ - Use g_task_return in task threads - build: Fix -Dlibelf=disabled on Linux - gfileutils: Add a missing ftruncate() call when writing files + Updated translations. - Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream. ==== gnome-settings-daemon ==== Subpackages: gnome-settings-daemon-lang - Add 538816ff42f682fc4b541810ca107486abab9976.patch: smartcard: Steal error when propagating through GTask. ==== gnome-software ==== Subpackages: gnome-software-lang gnome-software-plugin-packagekit - Rebase gnome-software-disable-offline-update.patch(bsc#1216603). - Add gnome-software-plugin-opensuse-distro-upgrade.patch: plugins: add opensuse-distro-upgrade plugin(glgo#GNOME/gnome-software!1557). ==== gvfs ==== Subpackages: gvfs-backend-afc gvfs-backend-goa gvfs-backend-samba gvfs-backends gvfs-fuse gvfs-lang - Use older way than autopatch on SLE/Leap, which is not ready for the macro. - Rebase gvfs-nvvfs.patch. ==== libsoup ==== Version update (3.4.3 -> 3.4.4) Subpackages: libsoup-3_0-0 libsoup-lang typelib-1_0-Soup-3_0 - Update to version 3.4.4: + Improve HTTP/2 performance when a lot of buffering happens + Support building libnghttp2 as a subproject ==== libstorage-ng ==== Version update (4.5.154 -> 4.5.155) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#963 - extended testsuite - 4.5.155 ==== mozilla-nss ==== Version update (3.93 -> 3.94) Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs mozilla-nss-tools - update to NSS 3.94 * bmo#1853737 - Updated code and commit ID for HACL* * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with current NSS * bmo#1827303 - Softoken C_ calls should use system FIPS setting to select NSC_ or FC_ variants * bmo#1774659 - NSS needs a database tool that can dump the low level representation of the database * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp * bmo#1852179 - avoid implicit conversion for ByteString * bmo#1818766 - update rust version for acvp docker * bmo#1852011 - Moving the init function of the mpi_ints before clean-up in ec.c * bmo#1615555 - P-256 ECDH and ECDSA from HACL* * bmo#1840510 - Add ACVP test vectors to the repository * bmo#1849077 - Stop relying on std::basic_string<uint8_t> * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp - rebased patches - added nss-fips-test.patch to fix broken test ==== open-vm-tools ==== Subpackages: libvmtools0 open-vm-tools-desktop - Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token signature bypass vulnerability. - Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file descriptor hijack vulnerability + Add patch: - CVE-2023-34058.patch - CVE-2023-34059.patch ==== p11-kit ==== Version update (0.25.0 -> 0.25.1) Subpackages: libp11-kit0 libp11-kit0-32bit p11-kit-tools - Update to 0.25.1: * fix probing of C_GetInterface [#535] * p11-kit: add command to list tokens [#581] * p11-kit: add command to list mechanisms supported by a token [#576] * p11-kit: add command to generate private-public keypair on a token [#551, #582] * p11-kit: add commands to import/export certificates and public keys into/from a token [#543, #549, #568, #588] * p11-kit: add commands to list and delete objects of a token [#533, #544, #571] * p11-kit: add --login option to login into a token with object and profile management commands [#587] * p11-kit: adjust behavior of PKCS#11 profile management commands [#558, #560, #583, #591] * p11-kit: print PKCS#11 URIs in list-modules [#532] * bug and build fixes [#528 #529, #534, #537, #540, #541, #545, [#547], #550, #557, #572, #575, #579, #585, #586, #590] * test fixes [#553, #580] * Remove patch fixed upstream: - d1d4b0ac316a27c739ff91e6c4153f1154e96e5a.patch ==== php8 ==== Version update (8.2.11 -> 8.2.12) Subpackages: php8-cli php8-ctype php8-dom php8-gd php8-gettext php8-iconv php8-mbstring php8-mysql php8-openssl php8-pdo php8-sqlite php8-tokenizer php8-xmlreader php8-xmlwriter - version update to 8.2.12 * This is a bug fix release. https://www.php.net/ChangeLog-8.php#8.2.12 ==== vim ==== Version update (9.0.2043 -> 9.0.2078) Subpackages: vim-data vim-data-common xxd - Update to version 9.0.2078 * several problems with type aliases * Vim9: No support for type aliases * TextChangedI may not always trigger * Completion menu may be wrong * don't echo empty lines (#13431) * typo in quickfix.c comments * update debian related runtime files (#13423) * Vim9: no nr2str conversion in list-unpack * objdump files not recognized * [security] disallow setting env in restricted mode * possible to escape bracketed paste mode with Ctrl-C * [security] overflow in :history * clarify bracketed paste mode * missing code formatting in if_pyth.txt * xxd: coloring was disabled on Cygwin * xxd: corrupting files when reversing bit dumps * EXPAND flag set for filetype option * cannot use buffer-number for errorformat * Fix typos in several documents (#13420) * pacman hooks are detected as conf filetype * Janet files are not recognised * not able to detect xkb filetypes * *.{gn,gni} files are not recognized * small updates to the documentation for varargs * Update ftplugin - comment motions (#13412) * outstanding exceptions may be skipped * tests: avoid error when no swap files exist * Vim9: no strict type checks for funcrefs varargs * do not use hard-coded match id (#13393) * no digraph for quadruple prime * Vim9: non-consistent error messages * win32: iscygpty needs update * Add new ftplugin (#13385) * zig filetype detection test wrong * win32: using deprecated wsock32 api * Vim9: wrong error for non-existing object var * Update Zig runtime files (#13388) * Vim9: crash with deferred function call and exception * Vim9: not recognizing qualified class vars for infix ops * python: uninitialized warning * perl: warning about inconsistent dll linkage * tests: checking for swap files takes time * Vim9: exceptions confuse defered functions * allow for overriding systemd ftplugin settings (#13373) ==== virtualbox ==== - Update file "fixes_for_leap.patch" to cover API change in Leap 15.6 kernel. ==== virtualbox-kmp ==== - Update file "fixes_for_leap.patch" to cover API change in Leap 15.6 kernel. ==== xdg-desktop-portal ==== Version update (1.18.0 -> 1.18.1) Subpackages: xdg-desktop-portal-lang - Update to version 1.18.1: + Communicate better when the Background portal kills an app. + Properly quote Flatpak command in the Background portal. + Improve documentation of the "cursor_mode" propery of the ScreenCast backend D-Bus interface. + Fix ScreenCast portal removing transient restore permissions too early. This fixes screen sharing dialogs on Chromium asking for the screen multiple times. + Only send the Closed session signal to the sender. + Add Meson options to disable building with Bubblewrap, and without the Flatpak portal documentation. Disabling Bubblewrap is highly discouraged, and only meant to be used on platforms that do not currently support it. By disabling Bubblewrap, bitmap validation happens without a sandbox, which is highly insecure since image parsing is a common source of exploits. Really, just do not disable Bubblewrap please. + Improve the manpage of portals.conf. + Various spelling fixes to the Document portal. + Add a new website! We don't have a fancy domain yet, but the website can be accessed at https://flatpak.github.io/xdg-desktop-portal/ + Improve pid mapping for host system apps. This should get rid of some rare, unnecessary warnings. + Adjust documentation of Global Shortcuts portal's timestamps to millisecond granularity. + Bump minimum Meson version to 0.58. ==== xfconf ==== Version update (4.18.2 -> 4.18.1) Subpackages: libxfconf-0-3 typelib-1_0-Xfconf-0 xfconf-lang

1 0

Re-stabilizing the order of /dev/sd* devices
by Martin Wilck 30 Oct '23

30 Oct '23

The discussion on the previous thread "SCSI device identification and SCSI symlink generation in sg3_utils 1.48" [1], the openSUSE Forum [2], bugzilla [3] has revealed that with one exception, the problems that users encountered had not been caused by the sg3_utils update, but by the almost simultaneous update of the TW kernel to 6.5.4, which changed scsi_mod and sd_mod from built-in to loadable modules. In the course of this discussion, the idea came up to stabilize the ordering of sd devices by loading sd_mod before any SCSI low level drivers, using a softdep. I have implemented this now in [4]. I would be grateful for testing this package on a variety of systems. I already tried a few, and saw no issues. Currently TW only. The expected effect is that the ordering of sd devices stabilizes again (if you test this, please undo manual workarounds that you may have applied so far). On systems with only NVMe hardware (e.g. laptops with M.2 SSDs) where multipath-tools is not installed (if you aren’t using dm-multipath, you can just uninstall it with “zypper rm multipath- tools”), an additional expected effect is that the system would come up without any SCSI drivers loaded (check /proc/modules). If an USB stick or some other SCSI device is added to such a system, SCSI modules should be loaded on demand, and the stick should be mounted as usual. Feedback very welcome. I plan to submit this to factory next week. Regards, Martin [1] https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… [2] https://forums.opensuse.org/t/problem-with-disks-order-after-snapshot-20230… [3] https://bugzilla.suse.com/show_bug.cgi?id=1216070 [4] https://download.opensuse.org/repositories/home:/mwilck:/suse-module-tools/…

7 16

[opensuse-factory] reproducible builds status 2023-10
by Bernhard M. Wiedemann 30 Oct '23

30 Oct '23

Hi, This month I made some more nice patches after I went to review all remaining packages with major issues. I'm off to the rb-summit in Hamburg this week. The ghc-rpm-macros patch is still pending in the pipeline. Once that goes through, the number of packages with issues remaining could be as low as 126. https://github.com/rpm-software-management/rpm/issues/2343 still breaks bit-identical results for many packages. https://github.com/openSUSE/post-build-checks/pull/58 by Jan Zerebecki could finally allow to enable normalization of mtimes in Factory, but OTOH breaks build-compare / build-tree-pruning on OBS rebuilds of certain packages. Since my main test-build machine is on the move to Prague atm, I only ran builds over a limited set of packages with known past problems. https://rb.zq1.de/spec/glossar.txt explains the meaning of below values: total-packages: 14895 build-tried: 753 build-failed: 26 build-n-a: 1 build-succeeded: 727 build-official-failed+na: 76 build-compare-failed: 119 build-compare-succeeded: 608 bit-by-bit-identical: 280 not-bit-by-bit-identical: 446 recent SRs and patches: https://github.com/elastic/elasticsearch-py/issues/2320 FTBFS # https://github.com/kovidgoyal/kitty/pull/6685 sort, tar mtime https://github.com/libpinyin/libpinyin/issues/162 ASLR https://github.com/djcb/mu/pull/2569 date in copyright https://github.com/djcb/mu/issues/2570 unknown https://sourceforge.net/p/sbcl/mailman/sbcl-devel/thread/3ebdd95c-c498-462f… report timestamp+other # https://github.com/hyprwm/Hyprland/pull/3550 filesys (find/meson) https://git.enlightenment.org/enlightenment/efl/issues/41 edje_cc nondeterministic order # https://github.com/maros/MooseX-App/pull/71 kanku toolchain, date from perl-MooseX-App # https://github.com/apache/qpid-proton/pull/411 sort https://github.com/FFTW/fftw3/issues/337 random order https://bugzilla.opensuse.org/show_bug.cgi?id=1216293 fdo-client private keys # https://github.com/rakudo/rakudo/pull/5426 sort readdir https://github.com/rakudo/rakudo/issues/5427 unknown, toolchain # https://sourceforge.net/p/gimp-print/source/merge-requests/9/ gutenprint date # https://gitlab.com/CalcProgrammer1/OpenRGB/-/issues/3675 filesys+parallelism # https://gitlab.com/CalcProgrammer1/OpenRGB/-/merge_requests/2101 FTBFS # https://gitlab.com/CalcProgrammer1/OpenRGB/-/merge_requests/2103 corruption https://bugzilla.opensuse.org/show_bug.cgi?id=1216458 python-numpy random file names https://gitlab.com/qemu-project/SLOF/-/merge_requests/1 date https://github.com/mamedev/mame/pull/11651 order https://sourceforge.net/p/gsoap2/patches/185/ date, toolchain https://bugreports.qt.io/browse/PYSIDE-2508 python3-pyside2 order 1116036 mingw32-binutils date, toolchain 1116040 mingw64-binutils date, toolchain 1116208 erlang-retest embedded zip timestamp 1117743 python-pandas FTBFS 1117898 python-quantities date 1118130 spack cpu count 1118201 openblas cpu count => SR 1120798 1119260 xemacs-packages drop date 1119524 occt sort (not upstream) 1119553 mame order 1121011 qemu slof date+workaround parallelism-issue from sphinx

1 0

New Tumbleweed snapshot 20231028 released!
by Dominique Leuenberger 30 Oct '23

30 Oct '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: efivar grub2 gzip kernel-source (6.5.8 -> 6.5.9) libksba libstorage-ng (4.5.151 -> 4.5.154) libzypp (17.31.22 -> 17.31.23) nodejs20 open-iscsi openssl-3 (3.1.3 -> 3.1.4) openssl (3.1.3 -> 3.1.4) patterns-base suse-module-tools (16.0.36 -> 16.0.37) wtmpdb (0.9.2 -> 0.9.3) xfconf (4.18.1 -> 4.18.2) === Details === ==== efivar ==== - We donât mandoc at all after all (gh#rhboot/efivar#229 and gh#rhboot/efivar#253). ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - Fix a potential error when appending multiple keys into the synthesized initrd * Fix-the-size-calculation-for-the-synthesized-initrd.patch - Fix Xen chainloding error of no matching file path found (bsc#1216081) * grub2-efi-chainload-harder.patch - Use grub-tpm2 token to unlock keyslots to make the unsealing process more efficient and secure. * 0001-luks2-Use-grub-tpm2-token-for-TPM2-protected-volume-.patch ==== gzip ==== - Fix s390x build with 'gcc -Dalignas=_Alignas' bug#66709 ==== kernel-source ==== Version update (6.5.8 -> 6.5.9) - Linux 6.5.9 (bsc#1012628). - Bluetooth: hci_event: Ignore NULL link key (bsc#1012628). - Bluetooth: Reject connection with the device which has same BD_ADDR (bsc#1012628). - Bluetooth: Fix a refcnt underflow problem for hci_conn (bsc#1012628). - Bluetooth: vhci: Fix race when opening vhci device (bsc#1012628). - Bluetooth: hci_event: Fix coding style (bsc#1012628). - Bluetooth: avoid memcmp() out of bounds warning (bsc#1012628). - Bluetooth: hci_conn: Fix modifying handle while aborting (bsc#1012628). - ice: fix over-shifted variable (bsc#1012628). - ice: Fix safe mode when DDP is missing (bsc#1012628). - ice: reset first in crash dump kernels (bsc#1012628). - net/smc: return the right falback reason when prefix checks fail (bsc#1012628). - btrfs: fix stripe length calculation for non-zoned data chunk allocation (bsc#1012628). - nfc: nci: fix possible NULL pointer dereference in send_acknowledge() (bsc#1012628). - regmap: fix NULL deref on lookup (bsc#1012628). - KVM: x86: Mask LVTPC when handling a PMI (bsc#1012628). - x86/sev: Disable MMIO emulation from user mode (bsc#1012628). - x86/sev: Check IOBM for IOIO exceptions from user-space (bsc#1012628). - x86/sev: Check for user-space IOIO pointing to kernel space (bsc#1012628). - x86/fpu: Allow caller to constrain xfeatures when copying to uabi buffer (bsc#1012628). - KVM: x86/pmu: Truncate counter value to allowed width on write (bsc#1012628). - KVM: x86: Constrain guest-supported xfeatures only at KVM_GET_XSAVE{2} (bsc#1012628). - x86: KVM: SVM: always update the x2avic msr interception (bsc#1012628). - x86: KVM: SVM: add support for Invalid IPI Vector interception (bsc#1012628). - x86: KVM: SVM: refresh AVIC inhibition in svm_leave_nested() (bsc#1012628). - audit,io_uring: io_uring openat triggers audit reference count underflow (bsc#1012628). - tcp: check mptcp-level constraints for backlog coalescing (bsc#1012628). - mptcp: more conservative check for zero probes (bsc#1012628). - selftests: mptcp: join: no RST when rm subflow/addr (bsc#1012628). - mm: slab: Do not create kmalloc caches smaller than arch_slab_minalign() (bsc#1012628). - fs/ntfs3: Fix OOB read in ntfs_init_from_boot (bsc#1012628). - fs/ntfs3: Fix possible null-pointer dereference in hdr_find_e() (bsc#1012628). - fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea() (bsc#1012628). - fs/ntfs3: Fix shift-out-of-bounds in ntfs_fill_super (bsc#1012628). - fs/ntfs3: fix deadlock in mark_as_free_ex (bsc#1012628). - Revert "net: wwan: iosm: enable runtime pm support for 7560" (bsc#1012628). - netfilter: nft_payload: fix wrong mac header matching (bsc#1012628). - io_uring: fix crash with IORING_SETUP_NO_MMAP and invalid SQ ring address (bsc#1012628). - nvmet-tcp: Fix a possible UAF in queue intialization setup (bsc#1012628). - drm/i915: Retry gtt fault when out of fence registers (bsc#1012628). - drm/mediatek: Correctly free sg_table in gem prime vmap (bsc#1012628). - drm/nouveau/disp: fix DP capable DSM connectors (bsc#1012628). - drm/edid: add 8 bpc quirk to the BenQ GW2765 (bsc#1012628). - ALSA: hda/realtek - Fixed ASUS platform headset Mic issue (bsc#1012628). - ALSA: hda/realtek: Add quirk for ASUS ROG GU603ZV (bsc#1012628). - ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq5xxx (bsc#1012628). - ASoC: codecs: wcd938x-sdw: fix use after free on driver unbind (bsc#1012628). - ASoC: codecs: wcd938x-sdw: fix runtime PM imbalance on probe errors (bsc#1012628). - ASoC: codecs: wcd938x: drop bogus bind error handling (bsc#1012628). - ASoC: codecs: wcd938x: fix unbind tear down order (bsc#1012628). - ASoC: codecs: wcd938x: fix resource leaks on bind errors (bsc#1012628). - ASoC: codecs: wcd938x: fix regulator leaks on probe errors (bsc#1012628). - ASoC: codecs: wcd938x: fix runtime PM imbalance on remove (bsc#1012628). - qed: fix LL2 RX buffer allocation (bsc#1012628). - xfrm: fix a data-race in xfrm_lookup_with_ifid() (bsc#1012628). - xfrm6: fix inet6_dev refcount underflow problem (bsc#1012628). - xfrm: fix a data-race in xfrm_gen_index() (bsc#1012628). - xfrm: interface: use DEV_STATS_INC() (bsc#1012628). - net: xfrm: skip policies marked as dead while reinserting policies (bsc#1012628). - fprobe: Fix to ensure the number of active retprobes is not zero (bsc#1012628). - wifi: cfg80211: use system_unbound_wq for wiphy work ... changelog too long, skipping 321 lines ... - commit 06d7c82 ==== libksba ==== - Do not pull revision info from GIT when autoconf is run. This removes the -unknown suffix after the version number. * Run autoreconf for the added patch and add the build dependecies on autoconf, automake and libtool. * Add libksba-nobetasuffix.patch [bsc#1216334] ==== libstorage-ng ==== Version update (4.5.151 -> 4.5.154) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#962 - improved error reporting in SystemCmd - 4.5.154 - merge gh#openSUSE/libstorage-ng#961 - added testcase - 4.5.153 - merge gh#openSUSE/libstorage-ng#960 - make more use of new SystemCmd interface - added const - 4.5.152 - merge gh#openSUSE/libstorage-ng#959 - removed unused function - merge gh#openSUSE/libstorage-ng#958 - make more use of new SystemCmd interface - prefer make_unique over new - fixed compound action generation for removing btrfs qgroup relations ==== libzypp ==== Version update (17.31.22 -> 17.31.23) - Stop using boost version 1 timer library (fixes #489, bsc#1215294) - version 17.31.23 (22) ==== nodejs20 ==== Subpackages: npm20 - fix_ci_tests.patch: adapt for openssl 3.1.4 ==== open-iscsi ==== Subpackages: libopeniscsiusr0 - Updated to latest upstream, which includes (bsc#1210514): * several fixes to harden iscsiuio, which updates its version number to 0.7.8.8, including: - logging now uses syslog - shutdown now waits for helper threads to complete - netlink socket cleanup * some minor bug fixes, some helping builds on musl This updates open-iscsi-SUSE-latest.diff.bz2 ==== openssl-3 ==== Version update (3.1.3 -> 3.1.4) Subpackages: libopenssl3 libopenssl3-32bit - Update to 3.1.4: * Fix incorrect key and IV resizing issues when calling EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or EVP_CipherInit_ex2() with OSSL_PARAM parameters that alter the key or IV length [bsc#1216163, CVE-2023-5363]. - Performance enhancements for cryptography from OpenSSL 3.2 [jsc#PED-5086, jsc#PED-3514] * Add patches: - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch - FIPS: Add the FIPS_mode() compatibility macro and flag support. * Add patches: - openssl-Add-FIPS_mode-compatibility-macro.patch - openssl-Add-Kernel-FIPS-mode-flag-support.patch ==== openssl ==== Version update (3.1.3 -> 3.1.4) - Update to 3.1.4 ==== patterns-base ==== Subpackages: patterns-base-apparmor patterns-base-base patterns-base-basesystem patterns-base-basic_desktop patterns-base-console patterns-base-enhanced_base patterns-base-minimal_base patterns-base-selinux patterns-base-sw_management patterns-base-transactional_base patterns-base-x11 patterns-base-x11_enhanced - Do not recommend yast stuff in x11 pattern. That's what the yast patterns are for ==== suse-module-tools ==== Version update (16.0.36 -> 16.0.37) Subpackages: suse-module-tools-scriptlets * weak-modules2: ignore INITRD_MODULES (jsc#PED-1915), obtain list of modules from dracut.conf.d instead ==== wtmpdb ==== Version update (0.9.2 -> 0.9.3) Subpackages: libwtmpdb0 - Update to version 0.9.3 - wtmpdb last: don't print date in the future if there is no db entry ==== xfconf ==== Version update (4.18.1 -> 4.18.2) Subpackages: libxfconf-0-3 typelib-1_0-Xfconf-0 xfconf-lang - Update to version 4.18.2 * Cache property-not-found responses in XfconfCache * Don't reset scheduled save timer on every write * xfconf-query: Sort channel list (-l or -m alone) * docs: Fix transfer type of xfconf_list_channels() * docs: Add clarification about bindings - Use lang_package as bnc#513786 has been closed as fixed almost 8 years ago.

1 0

Removal of /run/utmp and /var/log/wtmp
by Thorsten Kukuk 28 Oct '23

28 Oct '23

Hi, I wrote already about Y2038 and the problems with utmp and wtmp. Since we have already solutions active for some weeks, we will now do the next steps: We replaced /var/log/wtmp with wtmpdb some months ago. /usr/bin/last does not use /var/log/wtmp anymore since quite some time, too. So the next logical step will be, that we don't create /var/log/wtmp anymore. Existing files will not be deleted and many tools will still write into it, but new installations will not create it anymore. After this, we have to find the applications, which don't use the glibc interface and try to manage this file at their own. They could still create that file. The majority of known applications are using logind meanwhile instead of /run/utmp. The bug reports are all fixed meanwhile, so we will go the next step: disabling /run/utmp. A systemd with disabled utmp support will be submitted most likely next week, and then we will see how long it takes to get it through the stagings. There are still some open SRs which the package maintainers ignores since several weeks. This should not affect anybody, but if yes, please complain to the responsible package maintainers. If you know about an important application still reading (not writing) /run/utmp, please speak up now. Thanks, Thorsten -- Thorsten Kukuk, Distinguished Engineer, Senior Architect, Future Technologies SUSE Software Solutions Germany GmbH, Frankenstraße 146, 90461 Nuernberg, Germany Managing Director: Ivo Totev, Andrew McDonald, Werner Knoblich (HRB 36809, AG Nürnberg)

8 17

Directory for user drop-ins wrongly named in Tumbleweed snapshot 20231026!
by Manfred Hollstein 28 Oct '23

28 Oct '23

Hi there, please keep in mind to rename the directory /etc/systemd/user.confd.d to /etc/systemd/user.conf.d! Otherwise systemd won't use your drop-ins to define your overrides for the user session. # sudo mv /etc/systemd/user.confd.d /etc/systemd/user.conf.d HTH, cheers. l8er manfred

1 1

New Tumbleweed snapshot 20231026 released!
by Dominique Leuenberger 28 Oct '23

28 Oct '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: chromaprint clamav (0.103.9 -> 0.103.11) fftw3 gpgme (1.22.0 -> 1.23.0) gpgmeqt (1.22.0 -> 1.23.0) kdump (1.9.6 -> 1.9.7) libp11 llvm17 (17.0.2 -> 17.0.3) net-snmp openssl-1_1 policycoreutils postgresql postgresql16 python-M2Crypto (0.39.0 -> 0.40.0) python-httpcore (0.17.3 -> 0.18.0) python-httpx (0.24.1 -> 0.25.0) python-psutil python-pycairo (1.24.0 -> 1.25.1) qemu (8.1.0 -> 8.1.2) qt6-base rsyslog systemd systemd-default-settings (0.7 -> 0.8) vlan vlc (3.0.18 -> 3.0.19) webkit2gtk3 webkit2gtk3-soup2 xfce4-session yast2-country (5.0.1 -> 5.0.2) === Details === ==== chromaprint ==== - Drop unused libtag-devel BuildRequires. - Use cmake_build macro. ==== clamav ==== Version update (0.103.9 -> 0.103.11) Subpackages: libclamav9 libfreshclam2 - Update to 0.103.11 * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.12. * Windows: libjson-c 0.17 compatibility fix. with ssize_t type definition. * Windows: Update build system to use OpenSSL 3 and PThreads-Win32 v3. - Update to 0.103.10 * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.10. ==== fftw3 ==== - Disable HPC flavors on %ix86 - Drop support for obsolete openmpi[123] - Prepare support for openmpi5 ==== gpgme ==== Version update (1.22.0 -> 1.23.0) Subpackages: libgpgme11 libgpgmepp6 - Update to 1.23.0: * Support GPGME_ENCRYPT_ALWAYS_TRUST also for S/MIME. [T6559] * New keylist mode GPGME_KEYLIST_MODE_WITH_V5FPR. [T6705] * New key capability flags has_*. [T6748] * gpgme-tool: Support use of Windows HANDLE. [T6634] * qt: Support refreshing keys via WKD. [T6672] * qt: Handle cancel in changeexpiryjob. [T6754] * Remove patches fixed upstream: - gpgme-qt-tests-Fix-build-in-source-directory.patch - gpgme-build-Suggest-out-of-source-build.patch ==== gpgmeqt ==== Version update (1.22.0 -> 1.23.0) - Update to 1.23.0: * Support GPGME_ENCRYPT_ALWAYS_TRUST also for S/MIME. [T6559] * New keylist mode GPGME_KEYLIST_MODE_WITH_V5FPR. [T6705] * New key capability flags has_*. [T6748] * gpgme-tool: Support use of Windows HANDLE. [T6634] * qt: Support refreshing keys via WKD. [T6672] * qt: Handle cancel in changeexpiryjob. [T6754] * Remove patches fixed upstream: - gpgme-qt-tests-Fix-build-in-source-directory.patch - gpgme-build-Suggest-out-of-source-build.patch ==== kdump ==== Version update (1.9.6 -> 1.9.7) - upgrade to version 1.9.7 * prevent dracut emergency shell * s390: consolidate low-level network configuration with zdev * s390: Explicitly request zFCP devices ==== libp11 ==== - Replace openssl-ibmpkcs11 with openssl-engine-libp11 (jsc#PED-3327) Add Obsoletes: openssl-ibmpkcs11 <= 1.0.1 and Provides: openssl-ibmpkcs11 = 1.0.1 ==== llvm17 ==== Version update (17.0.2 -> 17.0.3) - Update to version 17.0.3. * This release contains bug-fixes for the LLVM 17.0.0 release. This release is API and ABI compatible with 17.0.0. - Rebase llvm-do-not-install-static-libraries.patch. - Disable zstd support for now regardless of whether libzstd-devel is installed. (boo#1216121) - Limit number of LTO threads on 32-bit architectures to prevent out-of-memory during linking. ==== net-snmp ==== Subpackages: libsnmp40 perl-SNMP snmp-mibs - net-snmp-5.9.4-systemd-no-utmp.patch: prefer systemd-logind over utmp to count number of logged in users, utmp is not reliable for this and has a Y2038 problem (jsc#PED-3144) ==== openssl-1_1 ==== Subpackages: libopenssl1_1 - Performance enhancements for cryptography from OpenSSL 3.x [jsc#PED-5086, jsc#PED-3514] * Add patches: - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch ==== policycoreutils ==== Subpackages: policycoreutils-lang policycoreutils-python-utils python3-policycoreutils - Add reproducible-build.patch to make the output of "sepolicy manpage" deterministic (bsc#1216452) ==== postgresql ==== Subpackages: postgresql-contrib postgresql-server - Interlock version and release of all noarch packages except for the postgresql-docs. ==== postgresql16 ==== Subpackages: libpq5 postgresql16-contrib postgresql16-server - boo#1216022: Call install-alternatives from the devel subpackage as well, otherwise the symlink for ecpg might be missing. ==== python-M2Crypto ==== Version update (0.39.0 -> 0.40.0) - Update to 0.40.0: - OK, SO NOT THIS RELEASE, BUT IN THE NEXT RELEASE PYTHON2 WILL TRULY GO! - BREAKING CHANGES: - There are no SWIG generated files (src/SWIG/_m2crytpo_wrap.c) included anymore, so swig must be installed, no exceptions! Also, for compatibility with Python 3.12+, swig 4.0+ is required. - All support for asyncore has been removed, as it has been removed in Python 3.12 as well (which means also removal of contrib/dispatcher.py, M2Crypto/SSL/ssl_dispatcher.py, ZServerSSL). - All use of distutils (including the bundled ones in setuptools) has been removed, so `setup.py clean` is no more. - Excessively complicated and error-prone __init__py has been cleaned and `import M2Crypto` doesnât include everything anymore. Imports should specified as for example with `from M2Crypto import foo`. - ASN1_Time handling has been mostly rewritten and it almost works even on Windows. - All tests in Gitlab CI (with exceptions of some skipped tests especially on Windows) are now green, tests of Python 2.7 on CentOS 7 have been included. - Introduce m2.err_clear_error() - Make X509_verify_cert() accessible as m2.x509_verify_cert - Add 32bit_ASN1_Time.patch to quench errors on 32bit archs. ==== python-httpcore ==== Version update (0.17.3 -> 0.18.0) - Update to 0.18.0: - Add support for HTTPS proxies. - Handle sni_hostname extension with SOCKS proxy. - Change the type of Extensions from Mapping[Str, Any] to MutableMapping[Str, Any]. - Handle HTTP/1.1 half-closed connections gracefully. - Drop Python 3.7 support. - Update httpcore-allow-deprecationwarnings-test.patch - Skip failing tests test_ssl_request and test_extra_info (gh#encode/httpcore!832) ==== python-httpx ==== Version update (0.24.1 -> 0.25.0) - Update to 0.25.0: - Drop support for Python 3.7. - Support HTTPS proxies. - Change the type of Extensions from Mapping[Str, Any] to MutableMapping[Str, Any]. - Add socket_options argument to httpx.HTTPTransport and httpx.AsyncHTTPTransport classes. - The Response.raise_for_status() method now returns the response instance. For example: data = httpx.get('...').raise_for_status().json(). - Return 500 error response instead of exceptions when raise_app_exceptions=False is set on ASGITransport. - Ensure all WSGITransport environs have a SERVER_PROTOCOL. - Always encode forward slashes as %2F in query parameters - Use Mozilla documentation instead of httpstatuses.com for HTTP error reference - Requires higher version of httpcore. ==== python-psutil ==== - Rebase logind_y2038.patch based on the reviewed code ==== python-pycairo ==== Version update (1.24.0 -> 1.25.1) - update to 1.25.1: * fix a crash in pypy3.10 * Fix the build with CPython 3.13.0a1 - introduced from 1.25.0: * update to cairo 1.18.0 (for windows only) * new apis: - Status.SVG_FONT_ERROR - FontOptions.get_color_mode(), FontOptions.set_color_mode(), ColorMode - FontOptions.set_color_palette(), FontOptions.get_color_palette(), COLOR_PALETTE_DEFAULT - FontOptions.set_custom_palette_color(), FontOptions.get_custom_palette_color() - TAG_CONTENT, TAG_CONTENT_REF - Pattern.get_dither(), Pattern.set_dither(), Dither ==== qemu ==== Version update (8.1.0 -> 8.1.2) Subpackages: qemu-accel-tcg-x86 qemu-audio-spice qemu-block-curl qemu-block-nfs qemu-block-rbd qemu-chardev-spice qemu-guest-agent qemu-hw-display-qxl qemu-hw-display-virtio-gpu qemu-hw-display-virtio-gpu-pci qemu-hw-display-virtio-vga qemu-hw-usb-host qemu-hw-usb-redirect qemu-hw-usb-smartcard qemu-img qemu-ipxe qemu-ksm qemu-lang qemu-microvm qemu-pr-helper qemu-seabios qemu-tools qemu-ui-curses qemu-ui-gtk qemu-ui-opengl qemu-ui-spice-app qemu-ui-spice-core qemu-vgabios qemu-x86 - [openSUSE] supportconfig: Adapt plugin to modern supportconfig - [openSUSE] Add -p1 to autosetup in spec files * So patches can be applied easily (might be useful for development) - Update to version 8.1.2: This fixes the following upstream issues: * https://gitlab.com/qemu-project/qemu/-/issues/1826 * https://gitlab.com/qemu-project/qemu/-/issues/1834 * https://gitlab.com/qemu-project/qemu/-/issues/1846 It also contains a fix for: * CVE-2023-42467 As well as several upstream backports (list available at: https://lore.kernel.org/qemu-devel/24dfb1c2-dc40-4841-893d-5d530638b684@tls…) - Update to version 8.1.1: Upstream backports and bugfixes, among which: * tpm: fix crash when FD >= 1024 and unnecessary errors due to EINTR (Marc-Andr303251 Lureau) * meson: Fix targetos match for illumos and Solaris. (Jonathan Perkin) * s390x/ap: fix missing subsystem reset registration (Janosch Frank) * ui: fix crash when there are no active_console (Marc-Andr303251 Lureau) * virtio-gpu/win32: set the destroy function on load (Marc-Andr303251 Lureau) * target/riscv: Allocate itrigger timers only once (Akihiko Odaki) * target/riscv/pmp.c: respect mseccfg.RLB for pmpaddrX changes (Leon Schuermann) * target/riscv: fix satp_mode_finalize() when satp_mode.supported = 0 (Daniel Henrique Barboza) * hw/riscv: virt: Fix riscv,pmu DT node path (Conor Dooley) * [...] * target/arm: Fix 64-bit SSRA (Richard Henderson) * target/arm: Fix SME ST1Q (Richard Henderson) * accel/kvm: Specify default IPA size for arm64 (Akihiko Odaki) * kvm: Introduce kvm_arch_get_default_type hook (Akihiko Odaki) * include/hw/virtio/virtio-gpu: Fix virtio-gpu with blob on big endian hosts (Thomas Huth) * target/s390x: Check reserved bits of VFMIN/VFMAX's M5 (Ilya Leoshkevich) * target/s390x: Fix VSTL with a large length (Ilya Leoshkevich) * target/s390x: Use a 16-bit immediate in VREP (Ilya Leoshkevich) * target/s390x: Fix the "ignored match" case in VSTRS (Ilya Leoshkevich) Full list available at: * https://lore.kernel.org/qemu-devel/d0d2ac8f-313a-c937-dc3a-88e45fce933c@tls… - Fix (bsc#1215486): * [openSUSE][RPM] spec: enable the Pipewire audio backend (bsc#1215486) - (Properly) fix: bsc#1213210 * linux-user/elfload: Enable vxe2 on s390x - Fix: bsc#1215677 * optionrom: Remove build-id section ==== qt6-base ==== Subpackages: libQt6Core6 libQt6DBus6 libQt6Gui6 libQt6Network6 libQt6OpenGL6 libQt6Sql6 libQt6Test6 libQt6Widgets6 qt6-network-tls qt6-platformtheme-gtk3 - Add upstream change: * 0001-xkb-fix-build-with-libxkbcommon-1.6.0-and-later.patch ==== rsyslog ==== - trigger daemon restart after modules packages have been updated (bsc#1214996) ==== systemd ==== Subpackages: libsystemd0 libsystemd0-32bit libudev1 systemd-32bit systemd-boot systemd-container systemd-coredump systemd-lang udev - Import commit b53f364c264cd598d4210b64285a55d362b47b89 b53f364c26 test: install af_packet kernel module on openSUSE 86b7521a3c shared/wall: use logind if build without utmp support 65aac5858f errno-util: allow ERRNO_IS_* to accept types wider than int 8f93b89db4 basic/errno-util: add wrappers which only accept negative errno 1b815b3e76 Introduce RET_GATHER and use it in src/shared/ - Drop 0001-conf-parser-introduce-early-drop-ins.patch The usage of drop-ins is now the official way for configuring systemd and its various daemons on Factory/ALP. See: https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… - Ship the main configuration files in /usr/lib/ Besides the fact that shipping files in /etc is not recommended anymore, this change will hopefully encourage users to customize the defaults via the mean of drop-ins hence removing the risk of conflicts with downstream customization. In contrary, shipping empty directories *.conf.d/ in /etc is not a concern and should suggest users to create drop-ins (bsc#1207056). - systemd.spec: add files.portable and files.journal-remote - Don't include entries listed in kbd-model-map.xkb-generated (provided by kbd package) in kbd-model-map anymore. Yast, the only user of these entries, directly parses kbd-model-map.xkb-generated now (bsc#1211104). - tmpfiles-suse.conf: drop entries for /run/lock and /var/log/wtmp /run/lock is now defined by filesystem package and wtmp has been replaced by wtmpdb on TW. ==== systemd-default-settings ==== Version update (0.7 -> 0.8) Subpackages: systemd-default-settings-branding-SLE systemd-default-settings-branding-openSUSE - The usage of drop-ins is now the official way for configuring systemd and its various daemons on Factory/ALP. Hence the early drop-ins SUSE specific "feature" has been abandoned. - Import 0.8 f34372f User priority '26' for SLE-Micro c8b6f0a Revert "Convert more drop-ins into early ones" ==== vlan ==== - Drop url for sources, they are no longer valid. ==== vlc ==== Version update (3.0.18 -> 3.0.19) Subpackages: libvlc5 libvlccore9 vlc-codec-gstreamer vlc-lang vlc-noX vlc-qt vlc-vdpau - Update to version 3.0.19 - Remove 104-playback-bar.patch, as it's no longer needed. + Core: - Fix next-frame freezing in most scenarios + Demux: - Support RIFF INFO tags for Wav files - Fix AVI files with flipped RAW video planes - Fix duration on short and small Ogg/Opus files - Fix some HLS/TS streams with ID3 prefix - Fix some HLS playlist refresh drift - Fix for GoPro MAX spatial metadata - Improve FFmpeg-muxed MP4 chapters handling - Improve playback for QNap-produced AVI files - Improve playback of some old RealVideo files - Fix duration probing on some MP4 with missing information + Decoders: - Multiple fixes on AAC handling - Activate hardware decoding of AV1 on Windows (DxVA) - Improve AV1 HDR support with software decoding - Fix some AV1 GBRP streams, AV1 super-resolution streams and monochrome ones - Fix black screen on poorly edited MP4 files on Android Mediacodec - Fix rawvid video in NV12 - Fix several issues on Windows hardware decoding (including "too large resolution in DxVA") - Improve crunchyroll-produced SSA rendering + Video Output: - Super Resolution scaling with nVidia and Intel GPUs - Fix for an issue when cropping on Direct3D9 - Multiple fixes for hardware decoding on D3D11 and OpenGL interop - Fix an issue when playing -90Â°rotated video - Fix subtitles rendering blur on recent macOS + Input: - Improve SMB compatibility with Windows 11 hosts + Contribs: - Update of fluidlite, fixing some MIDI rendering on Windows - Update of zlib to 1.2.13 (CVE-2022-37434) - Update of FFmpeg, vpx (CVE-2023-5217), ebml, dav1d, libass + Misc: - Improve muxing timestamps in a few formats (reset to 0) - Fix some rendering issues on Linux with the fullscreen controller - Fix GOOM visualization - Fixes for Youtube playback - Fix some MPRIS inconsistencies that broke some OS widgets on Linux - Implement MPRIS TrackList signals - Fix opening files in read-only mode - Fix password search using the Kwallet backend - Fix some crashes on macOS when switching application - Fix 5.1/7.1 output on macOS and tvOS - Fix several crashes and bugs in the macOS preferences panel - Improvements on the threading of the MMDevice audio output on Windows - Fix a potential security issue on the uninstaller DLLs - Fix memory leaks when using the media_list_player libVLC APIs + Translations: - Update of most translations - New translations to Esperanto, Interlingue, Lao, Macedonian, Burmese, Odia, Samoan and Swahili ==== webkit2gtk3 ==== Subpackages: WebKitGTK-4.1-lang libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles - Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider of EglDestroyImage Found" (boo#1216483). ==== webkit2gtk3-soup2 ==== Subpackages: WebKitGTK-4.0-lang libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 webkit2gtk-4_0-injected-bundles - Add webkit2gtk3-create-destroy-egl-image.patch: fix "No provider of EglDestroyImage Found" (boo#1216483). ==== xfce4-session ==== Subpackages: xfce4-session-lang - Added xfce-portals.conf file. XDP 0.18.0 requires desktop and other environments to have their own portals.conf drop in file and this is a workaround until a better fix lands (boo#1215641) - Added xdg-current-desktop-xfce.desktop to autostart to ensure variable XDG_CURRENT_DESKTOP variable is properly exposed to systemd (boo#1215641) - Relax requirement of branding package version to prevent xfce4-branding-openSUSE breaking on Leap due to repos being out of sync (boo#1216470) ==== yast2-country ==== Version update (5.0.1 -> 5.0.2) Subpackages: yast2-country-data - BuildRequire kbd to fix the build (bsc#1211104) - 5.0.2

1 0

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 27 Oct '23

27 Oct '23

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have had problems for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - pocl: Unresolvable Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

1 0

A new package software-o-o-launcher (just a desktop shortcut for software-o-o)
by Lubos Kocman 27 Oct '23

27 Oct '23

Hello openSUSE! I had an action item to come up with a quick desktop launcher for software.opensuse.org. I did go minimal with simple-xdg open and a custom icon as per advice of DimStar. The launcher is called software-o-o-launcher. I'd like to propose to have it pre-installed on every new desktop installation. It was initially submitted to X11:Utilities (next to opensuse-welcome, which server similar purpose). https://build.opensuse.org/request/show/1120637 software-o-o launcher (see the screenshot link above) shows up after typing "software" in your desktop of choice. Which is what I hope will raise awareness of software-o-o. Screenshot: https://ibb.co/b1c2qZs Let me tell you the story behind the "effort". A user wants to install a software which is not available in distribution. User is not aware of our lovely software.opensuse.org portal nor OBS. The first natural reaction is to start asking on a local forum "How do I install x.y.z in openSUSE". This happened to me recently, package was in a devel project in OBS. I pointed user to the portal, done. We don't really have any pointers to the service from within the distribution. I hope that this will "improve" the situation and will contribute to the better first-time user experience. We can work out better icon or title later. I'm super unhappy about the length of the title restriction displayed in GNOME. The best "meaningful" text to be displayed was "Additional soft..." rest was shortened by GNOME. ps. Scope of this change is to create a launcher and build awareness of the service for new users. If you have particular request/bug against sofware-o-o as a service, please open reuqest in https://github.com/openSUSE/software-o-o/issues Cheers! Best regards Lubos Kocman openSUSE Leap Release Manager

10 19

Tumbleweed - Review of the week 2023/43
by Dominique Leuenberger 27 Oct '23

27 Oct '23

Dear Tumbleweed users and hackers, Another week fully loaded with Tumbleweed snapshot comes to an end. This week, we have delivered five snapshots (with a new one already in openQA). The five snapshots (1019, 1020, 1022, 1023, and 1025) brought you those changes: * KDE Frameworks 5.111.0 * KDE Plasma 5.27.9 * Samba 4.19.2 * SQLite 3.43.2 * Apache 2.4.58 * Linux kernel 6.5.8 * Pipewire 0.3.83 * Virtualbox 7.0.12 * zlib 1.3 * Redis 7.2.2 * Meson 1.2.3 And, as after the snapshot is before the snapshot, the subsequent things are already lined up and getting ready to reach you. The most intriguing things there are: * Qemu 8.1.2 * VLC 3.0.19 * LLVM 17.0.3 * systemd: Ship the main configuration files in /usr/lib/; this change will hopefully encourage users to customize the defaults via drop-ins, hence removing the risk of conflicts with downstream customization. * Boost 1.83.0 * Linux kernel 6.5.9 * openSSL 3.1.4 * PHP 8.2.12 * binutils 2.41 * moving to dbus-broker cheers, Dominique

1 0

New package submission for Factory: sysctl-logger
by Shung-Hsi Yu 27 Oct '23

27 Oct '23

Hi, I'd like to submit a new package from network to Factory. The package is sysctl-logger, it's a rather small and simple sysctl monitoring tool based on BPF that logs each changes of sysctl setting to the systemd journal. An example of the logs emitted by sysctl-logger can be seen below, where the process name, PID, as well as the sysctl name and value are all recorded. Begin monitoring sysctl_logger changes. systemd-sysctl[510] changed kernel/hung_task_timeout_secs from 480 to 0 systemd-sysctl[510] changed kernel/msgmax from 8192 to 65536 systemd-sysctl[510] changed kernel/msgmnb from 16384 to 65536 haveged[502] changed kernel/random/write_wakeup_threshold from 1024 to 1024 wickedd[745] changed net/ipv4/conf/eth0/arp_notify from 0 to 1 Hope other would find this useful :) Thanks, Shung-Hsi

1 0

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 26 Oct '23

26 Oct '23

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have had problems for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - python-sgqlc: Fails to build - python-sorl-thumbnail: Fails to build - python-sphinx_mdinclude: Fails to build Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

1 0

New Tumbleweed snapshot 20231025 released!
by Dominique Leuenberger 26 Oct '23

26 Oct '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: aaa_base (84.87+git20230815.cab7b44 -> 84.87+git20231023.f347d36) bluedevil5 (5.27.8 -> 5.27.9) breeze (5.27.8 -> 5.27.9) breeze-gtk (5.27.8 -> 5.27.9) discover (5.27.8 -> 5.27.9) drkonqi5 (5.27.8 -> 5.27.9) eog (45.0 -> 45.1) fde-tools (0.7.0 -> 0.7.1) firewalld (2.0.0 -> 2.0.1) git glib2 gnome-control-center (45.0+34 -> 45.1) gnome-maps (45.0 -> 45.1) gnome-shell gnome-terminal (3.50.0 -> 3.50.1) gnome-user-docs (45.0 -> 45.1) icewm iptables kaccounts-providers kactivitymanagerd (5.27.8 -> 5.27.9) kcm_flatpak (5.27.8 -> 5.27.9) kcm_sddm (5.27.8 -> 5.27.9) kde-cli-tools5 (5.27.8 -> 5.27.9) kde-gtk-config5 (5.27.8 -> 5.27.9) kernel-firmware (20231006 -> 20231019) kgamma5 (5.27.8 -> 5.27.9) khotkeys5 (5.27.8 -> 5.27.9) kinfocenter5 (5.27.8 -> 5.27.9) kmenuedit5 (5.27.8 -> 5.27.9) kpipewire (5.27.8 -> 5.27.9) kscreen5 (5.27.8 -> 5.27.9) kscreenlocker (5.27.8 -> 5.27.9) ksshaskpass5 (5.27.8 -> 5.27.9) kwayland-integration (5.27.8 -> 5.27.9) kwin5 (5.27.8 -> 5.27.9) kwrited5 (5.27.8 -> 5.27.9) layer-shell-qt (5.27.8 -> 5.27.9) libkdecoration2 (5.27.8 -> 5.27.9) libkscreen2 (5.27.8 -> 5.27.9) libksysguard5 (5.27.8 -> 5.27.9) libmysofa (1.3.1 -> 1.3.2) libnma libphonenumber (8.13.15 -> 8.13.23) libshumate (1.1.0 -> 1.1.1) libstorage-ng (4.5.149 -> 4.5.151) milou5 (5.27.8 -> 5.27.9) multipath-tools (0.9.6+71+suse.f07325e -> 0.9.6+115+suse.07776fb) nautilus (45.0 -> 45.1) net-snmp (5.9.3 -> 5.9.4) nodejs20 open-vm-tools openssh oxygen5-sounds (5.27.8 -> 5.27.9) pam_kwallet (5.27.8 -> 5.27.9) patterns-fonts plasma-browser-integration (5.27.8 -> 5.27.9) plasma-nm5 (5.27.8 -> 5.27.9) plasma5-addons (5.27.8 -> 5.27.9) plasma5-desktop (5.27.8 -> 5.27.9) plasma5-disks (5.27.8 -> 5.27.9) plasma5-integration (5.27.8 -> 5.27.9) plasma5-openSUSE plasma5-pa (5.27.8 -> 5.27.9) plasma5-systemmonitor (5.27.8 -> 5.27.9) plasma5-thunderbolt (5.27.8 -> 5.27.9) plasma5-workspace (5.27.8 -> 5.27.9) polkit-kde-agent-5 (5.27.8 -> 5.27.9) powerdevil5 (5.27.8 -> 5.27.9) psmisc python-argcomplete python-redis (4.5.5 -> 5.0.1) redis (7.0.12 -> 7.2.2) sdbootutil (1+git20231005.890f70c -> 1+git20231023.873adb9) systemsettings5 (5.27.8 -> 5.27.9) vte (0.74.0 -> 0.74.1) xdg-desktop-portal-gtk (1.14.1 -> 1.15.1) xdg-desktop-portal-kde (5.27.8 -> 5.27.9) xfce4-notifyd xorg-x11-server (21.1.8 -> 21.1.9) xwayland (23.2.1 -> 23.2.2) yast2 (5.0.1 -> 5.0.2) yast2-x11 (5.0.1 -> 5.0.2) zeromq (4.3.4 -> 4.3.5) zlib (1.2.13 -> 1.3) === Details === ==== aaa_base ==== Version update (84.87+git20230815.cab7b44 -> 84.87+git20231023.f347d36) Subpackages: aaa_base-extras - Update to version 84.87+git20231023.f347d36: * Remove %ghost lastlog entry, lastlog is long gone * Remove shaky safe-rm and safe-rmdir helpers (bsc#1159103) ==== bluedevil5 ==== Version update (5.27.8 -> 5.27.9) Subpackages: bluedevil5-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 ==== breeze ==== Version update (5.27.8 -> 5.27.9) Subpackages: breeze5-cursors breeze5-decoration breeze5-style breeze5-style-lang libbreezecommon5-5 - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 ==== breeze-gtk ==== Version update (5.27.8 -> 5.27.9) Subpackages: gtk2-metatheme-breeze gtk3-metatheme-breeze gtk4-metatheme-breeze metatheme-breeze-common - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 ==== discover ==== Version update (5.27.8 -> 5.27.9) Subpackages: discover-backend-flatpak discover-backend-fwupd discover-backend-packagekit discover-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - Changes since 5.27.8: * Fix network cache size for first run * packagekit: attach timer to stream rather than backend * packagekit: hold stream in a qpointer (kde#467888,kde#465711,kde#473921) * Only preload a couple of screens worth of comments (kde#474944) * flatpak: make FlatpakTransactionThread a qrunnable instead (kde#474231) ==== drkonqi5 ==== Version update (5.27.8 -> 5.27.9) Subpackages: drkonqi5-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - Changes since 5.27.8: * Fix malloc-delete mismatch ==== eog ==== Version update (45.0 -> 45.1) Subpackages: eog-lang - Update to version 45.1: + Fix statusbar image position incorrect. + Updated translations. ==== fde-tools ==== Version update (0.7.0 -> 0.7.1) - Update to version 0.7.1 + add-secondary-key: remove the generation of the secondary password + add-secondary-key: remove the inclusion of 'add-secondary-password' + luks: list all underlying LUKS device + Introduce FDE_DEVS to list all LUKS devices - Drop upstreamd patch + fde-tools-remove-redundant-2nd-pw-creation.patch ==== firewalld ==== Version update (2.0.0 -> 2.0.1) Subpackages: firewalld-bash-completion firewalld-lang python3-firewall - update to 2.0.1: * fix(cli): all --list-all-zones output identical (d30bc61) * fix(cli): properly show default zone attribute (ea8d9a8) * fix(cli): properly show active attribute for zones and policies (b202403) * fix(cli): --get-active-zones should include the default zone (dae9112) * fix(nftables): always flush main table on start (cd20981) * fix(runtimeToPermanent): deepcopy settings before mangling (9c53639) * docs: fix reference to lockdown-whitelist.xml in SYNOPSIS section (1c77205) * fix(firewall-config): escape markup stored in bindings store (c876fd0) * fix(tests): avoid deprecated assertRaisesRegexp for assertRaisesRegex (2935119) * fix(icmp): fix check_icmpv6_name() to use correct IPv6 names (af3c35b) * fix(ipset): fix configuring IP range for ipsets with nftables (6a050ec) * fix(ipset): fix configuring "timeout","maxelem" values for ipsets with nftables (7d3340c) * fix(core): fix exception while parsing invalid "tcp-mss-clamp" in policy (ff61209) * docs(policy): fix wrong documentation of in man firewalld.policy (21026d9) - removed following patch: [- fix_list_all_zones_output.patch] ==== git ==== Subpackages: git-core git-email git-web perl-Git - Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501). - gitweb.cgi AppArmor profile - make the profile a named profile - add local/ include to make custom additions easier ==== glib2 ==== Subpackages: glib2-lang glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 libgthread-2_0-0 - Use sed call to replace gio-querymodules with gio-querymodules-64 in gio-2.0.pc where appropiate. - Require /usr/bin/dbus-daemon by the devel package: GDBusTest launches an own dbus-daemon with a separate environment, so that test code does not have to rely on the session bus. Ensure consumers of GDBusTest have the needed dep present. - Change the dbus-launch Requires to %{_bindir}/dbus-launch: be flexible about potential future package layout changes. ==== gnome-control-center ==== Version update (45.0+34 -> 45.1) Subpackages: gnome-control-center-color gnome-control-center-goa gnome-control-center-lang gnome-control-center-user-faces - Update to version 45.1: + About: Add more types of processor support + Accessibility: Make Cursor Size dialog close on Escape key + Keyboard: Allow closing Shortcuts dialog with Escape key + Mouse: - Fix linked style of primary mouse button in RTL languages - Avoid making videos blurry + Network: - Fix editing connections without a device - Revert "Disable DNS entry if automatic DNS option is enabled" ==== gnome-maps ==== Version update (45.0 -> 45.1) Subpackages: gnome-maps-lang - Update to version 45.1: + Add more validation of transit plugin parameters + Fix showing missing nearby POIs when browsing in some cases + Set lower timeout when downloading service file + Fix searching for recent routes + Updated translations. ==== gnome-shell ==== Subpackages: gnome-extensions gnome-shell-calendar gnome-shell-lang - Rebase patches for SLE-15-SP6 (bsc#1216072): + Rebase endSession-dialog-update-time-label-every-sec.patch + Rebase gnome-shell-disable-ibus-when-not-installed.patch + Rebase gnome-shell-domain.patch + Rebase gnome-shell-exit-crash-workaround.patch + Rebase gnome-shell-fate324570-Make-GDM-background-image-configurable.patch + Rebase gnome-shell-gdm-login-applet.patch + Rebase gnome-shell-jsc#SLE-16051-Input-method-recommendation.patch + Rebase gnome-shell-jscSLE9267-Remove-sessionList-of-endSessionDialog.patch + Rebase gnome-shell-screen-disappear.patch + Remove aboutMenu.js ==== gnome-terminal ==== Version update (3.50.0 -> 3.50.1) Subpackages: gnome-shell-search-provider-gnome-terminal gnome-terminal-lang nautilus-extension-terminal - Update to version 3.50.1: * util: check flatpak for alternate terminals * prefs: Get the headerbar pref * build: Bump vte req version ==== gnome-user-docs ==== Version update (45.0 -> 45.1) - Update to version 45.1: + Updates to GNOME Help. + Updated translations. ==== icewm ==== Subpackages: icewm-config-upstream icewm-default icewm-lang icewm-lite - Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer needed nor used (in our case, we use the new default Imlib2). - Add explicit pkgconfig(gdk-pixbuf-2.0) BuildRequires: Needed to build {_bindir}/icewm-menu-fdo. ==== iptables ==== Subpackages: libip4tc2 libip6tc2 libxtables12 xtables-plugins - The presence of nftables does not mandate that iptables use backend-nft [bsc#1206383]. ==== kaccounts-providers ==== Subpackages: kaccounts-providers-lang - Only require signon-plugin-oauth2 when QtWebEngine is an option: signon-plugin-oauth2 depends on signon-ui, which in turn dependson QtWebEngine. ==== kactivitymanagerd ==== Version update (5.27.8 -> 5.27.9) Subpackages: kactivitymanagerd-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - Changes since 5.27.8: * Avoid race condition on startup (kde#422682) ==== kcm_flatpak ==== Version update (5.27.8 -> 5.27.9) Subpackages: kcm_flatpak-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 ==== kcm_sddm ==== Version update (5.27.8 -> 5.27.9) Subpackages: kcm_sddm-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - Changes since 5.27.8: * Add missing KService dependency ==== kde-cli-tools5 ==== Version update (5.27.8 -> 5.27.9) Subpackages: kde-cli-tools5-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - Changes since 5.27.8: * kcmshell: focus on content area by default ==== kde-gtk-config5 ==== Version update (5.27.8 -> 5.27.9) Subpackages: kde-gtk-config5-gtk3 - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - Changes since 5.27.8: * kded/config_editor: make it compile with GLib < 2.74 * kded/config_editor: add a timer to reduce duplicate setting sync ==== kernel-firmware ==== Version update (20231006 -> 20231019) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update to version 20231019 (git commit d983107a2dfa): * Fix the robot email script * linux-firmware: Update AMD cpu microcode * Add support for sending emails while processing a PR/patch * amdgpu: update SMU 13.0.0 firmware * linux-firmware: add Amlogic bluetooth firmware * Add a script for a robot to open up pull requests * i915: Add GuC v70.13.1 for DG2, TGL, ADL-P and MTL * iwlwifi: add a missing FW from core80-39 release * amdgpu: update raven firmware from 5.7 branch * amdgpu: update SDMA 5.2.7 firmware from 5.7 branch * amdgpu: update PSP 13.0.8 firmware from 5.7 branch * amdgpu: update GC 10.3.7 firmware from 5.7 branch * amdgpu: update DCN 3.1.6 firmware from 5.7 branch * amdgpu: update SDMA 5.2.6 firmware from 5.7 branch * amdgpu: update PSP 13.0.5 firmware from 5.7 branch * amdgpu: update GC 10.3.6 firmware from 5.7 branch * amdgpu: update VCN 4.0.0 firmware from 5.7 branch * amdgpu: update SMU 13.0.0 firmware from 5.7 branch * amdgpu: update SDMA 6.0.0 firmware from 5.7 branch * amdgpu: update PSP 13.0.0 firmware from 5.7 branch * amdgpu: update GC 11.0.0 firmware from 5.7 branch * amdgpu: update vega20 firmware from 5.7 branch * amdgpu: update beige goby firmware from 5.7 branch * amdgpu: update vega12 firmware from 5.7 branch * amdgpu: update vega10 firmware from 5.7 branch * amdgpu: update dimgrey cavefish firmware from 5.7 branch * amdgpu: update picasso firmware from 5.7 branch * amdgpu: update navy flounder firmware from 5.7 branch * amdgpu: update vangogh firmware from 5.7 branch * amdgpu: update green sardine firmware from 5.7 branch * amdgpu: update sienna cichlid firmware from 5.7 branch * amdgpu: update PSP 13.0.11 firmware from 5.7 branch * amdgpu: update GC 11.0.4 firmware from 5.7 branch * amdgpu: update SDMA 6.0.1 firmware from 5.7 branch * amdgpu: update PSP 13.0.4 firmware from 5.7 branch * amdgpu: update GC 11.0.1 firmware from 5.7 branch * amdgpu: update navi14 firmware from 5.7 branch * amdgpu: update renoir firmware from 5.7 branch * amdgpu: update navi12 firmware from 5.7 branch * amdgpu: update VCN 4.0.4 firmware from 5.7 branch * amdgpu: update SMU 13.0.7 firmware from 5.7 branch * amdgpu: update SDMA 6.0.2 firmware from 5.7 branch * amdgpu: update PSP 13.0.7 firmware from 5.7 branch * amdgpu: update GC 11.0.2 firmware from 5.7 branch * amdgpu: update yellow carp firmware from 5.7 branch * amdgpu: update navi10 firmware from 5.7 branch * amdgpu: update raven2 firmware from 5.7 branch * amdgpu: update SMU 13.0.10 firmware from 5.7 branch * amdgpu: update PSP 13.0.10 firmware from 5.7 branch * amdgpu: update GC 11.0.3 firmware from 5.7 branch * amdgpu: update aldebaran firmware from 5.7 branch ==== kgamma5 ==== Version update (5.27.8 -> 5.27.9) Subpackages: kgamma5-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 ==== khotkeys5 ==== Version update (5.27.8 -> 5.27.9) Subpackages: khotkeys5-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 ==== kinfocenter5 ==== Version update (5.27.8 -> 5.27.9) Subpackages: kinfocenter5-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - Changes since 5.27.8: * find KF5Auth ==== kmenuedit5 ==== Version update (5.27.8 -> 5.27.9) Subpackages: kmenuedit5-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - Changes since 5.27.8: * Better construct command line (kde#474758) ==== kpipewire ==== Version update (5.27.8 -> 5.27.9) Subpackages: kpipewire-imports libKPipeWire5 libKPipeWire5-lang libKPipeWireDmaBuf5 libKPipeWireRecord5 - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 ==== kscreen5 ==== Version update (5.27.8 -> 5.27.9) Subpackages: kscreen5-lang kscreen5-plasmoid - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - Changes since 5.27.8: * Only modify `Coordinate Transformation Matrix` (kde#474110) * Drop unused KIconThemes dependency ==== kscreenlocker ==== Version update (5.27.8 -> 5.27.9) Subpackages: kscreenlocker-lang libKScreenLocker5 - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - Changes since 5.27.8: * greeter: disable qml disk cache (kde#471952) ==== ksshaskpass5 ==== Version update (5.27.8 -> 5.27.9) Subpackages: ksshaskpass5-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 ==== kwayland-integration ==== Version update (5.27.8 -> 5.27.9) - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 ==== kwin5 ==== Version update (5.27.8 -> 5.27.9) Subpackages: kwin5-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - Changes since 5.27.8: * platformsupport/scenes/opengl: don't release egl resources from the thread (kde#466174) * kcms/screenedges: Fix listing of effects * Fix misgenerated QHoverEvent * Add QKeySequence to VirtualDesktopManager::addAction overload (kde#475748) * kcms/screenedges: Fix buttons overlap on a too narrow vertical screen (kde#475579) * kcms/screenedges: Slightly refactor monitor size calculation * kcms/screenedges: Remove commented out dead code * Use itemChange instead of a connect to windowChanged * plugins/slide: add special case for instant animations (kde#472901) * plugins/screencast: Remove "frame dropped" log messages * fix segfault in EglGbmBackend::textureForOutput * Drop unused kitemviews dependency * Add missing QtNetwork dependency * plugins/qpa: implement platform accessibility (kde#472643) * backends/drm: check activePending instead of active for when applying a new gamma ramp is allowed (kde#471562) ==== kwrited5 ==== Version update (5.27.8 -> 5.27.9) - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 ==== layer-shell-qt ==== Version update (5.27.8 -> 5.27.9) - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 ==== libkdecoration2 ==== Version update (5.27.8 -> 5.27.9) Subpackages: libkdecorations2-5 libkdecorations2-5-lang libkdecorations2private10 - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 ==== libkscreen2 ==== Version update (5.27.8 -> 5.27.9) Subpackages: libKF5Screen8 libKF5Screen8-lang libKF5ScreenDpms8 libkscreen2-plugin - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 ==== libksysguard5 ==== Version update (5.27.8 -> 5.27.9) Subpackages: ksysguardsystemstats-data libKSysGuardSystemStats1 libksysguard5-imports libksysguard5-lang libksysguard5-plugins - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 ==== libmysofa ==== Version update (1.3.1 -> 1.3.2) - Update to 1.3.2: * allow slightly more dense HRTFs * allow all kinds of room types * target exporting * bug fix in memory reader * enable big endian support - Drop 0001-fix-big-endian-convertion-of-double-value.patch - Add Install-header-when-only-building-shared-lib.patch See https://github.com/hoene/libmysofa/issues/210 ==== libnma ==== Subpackages: libnma-glib-schema libnma-gtk4-0 libnma-lang libnma0 typelib-1_0-NMA4-1_0 - Drop pkgconfig(gck-1) and pkgconfig(gcr-3) BuildRequires: No longer needed, we build with gck-2 and gcr-4. ==== libphonenumber ==== Version update (8.13.15 -> 8.13.23) - Update to version 8.13.28: * Updated phone metadata, carrier data, geocoding data, short number metadata for a number of region and calling codes - drop 0001-Build-with-C-17.patch now upstream ==== libshumate ==== Version update (1.1.0 -> 1.1.1) Subpackages: libshumate-1_0-1 libshumate-lang typelib-1_0-Shumate-1_0 - Update to version 1.1.1: + Fix null reference map source, avoid critical log message when setting a null map source with shumate_viewport_set_reference_map_source(). ==== libstorage-ng ==== Version update (4.5.149 -> 4.5.151) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#957 - extended testsuite - 4.5.151 - merge gh#openSUSE/libstorage-ng#956 - improved error handling in SystemCmd - 4.5.150 ==== milou5 ==== Version update (5.27.8 -> 5.27.9) Subpackages: milou5-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 ==== multipath-tools ==== Version update (0.9.6+71+suse.f07325e -> 0.9.6+115+suse.07776fb) Subpackages: kpartx libmpath0 - Update to version 0.9.6+115+suse.07776fb * multipathd: Added support to handle FPIN-Li events for FC-NVMe - Update to version 0.9.6+110+suse.5dfdf35: * The options "bindings_file", "prkeys_file", and "wwids_file", which have been deprecated since multipath-tools 0.8.8, aren't supported any more. The paths to these files are now hard-coded to "bindings", "prkeys" and "wwids" under /etc/multipath. * Strictly avoid assigning map aliases that are already taken (bsc#1213265) * Improve handling of user-friendly names * avoid "multipath -d" (dry-run) changing SCSI timeouts in sysfs (bsc#1213809) - spec file: * adapt prefix values to upstream changes * fix compilation flags for "make check" * pass EXTRAVERSION to build ==== nautilus ==== Version update (45.0 -> 45.1) Subpackages: gnome-shell-search-provider-nautilus libnautilus-extension4 nautilus-lang - Update to version 45.1: + Don't crash when opening Properties from admin://* + Don't crash on unmount + Stop jumping to top when using the Menu key + Properly reorder bookmarks by drag and drop + Re-add search results when switching view mode + Fix compilation on 32-bit musl - Fix various leaks and warnings + Updated translations. - Update to version 45.0+12: + gtk/placessidebar: Use list box for coordinates translation. + list-base: Stop jumping to top on Menu key. + Updated translations. - Switch to source service, explicit commit from the stable branch. ==== net-snmp ==== Version update (5.9.3 -> 5.9.4) Subpackages: libsnmp40 perl-SNMP snmp-mibs - Update to net-snmp-5.9.4 (bsc#1214364). add (rename): * net-snmp-5.9.4-add-lustre-fs-support.patch * net-snmp-5.9.4-fix-create-v3-user-outfile.patch * net-snmp-5.9.4-fixed-python2-bindings.patch * net-snmp-5.9.4-fix-Makefile.PL.patch * net-snmp-5.9.4-modern-rpm-api.patch * net-snmp-5.9.4-net-snmp-config-headercheck.patch * net-snmp-5.9.4-perl-tk-warning.patch * net-snmp-5.9.4-pie.patch * net-snmp-5.9.4-snmpstatus-suppress-output.patch * net-snmp-5.9.4-socket-path.patch * net-snmp-5.9.4-subagent-set-response.patch * net-snmp-5.9.4-suse-systemd-service-files.patch * net-snmp-5.9.4-testing-empty-arptable.patch delete (now part of v5.9.4): * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch * net-snmp-5.9.3-grep.patch delete (rename): * net-snmp-5.9.1-add-lustre-fs-support.patch * net-snmp-5.9.2-fix-create-v3-user-outfile.patch * net-snmp-5.9.3-fixed-python2-bindings.patch * net-snmp-5.9.1-fix-Makefile.PL.patch * net-snmp-5.9.1-modern-rpm-api.patch * net-snmp-5.9.1-net-snmp-config-headercheck.patch * net-snmp-5.9.1-perl-tk-warning.patch * net-snmp-5.9.2-pie.patch * net-snmp-5.9.1-snmpstatus-suppress-output.patch * net-snmp-5.9.1-socket-path.patch * net-snmp-5.9.1-subagent-set-response.patch * net-snmp-5.9.1-suse-systemd-service-files.patch * net-snmp-5.9.1-testing-empty-arptable.patch - Removing legacy MIBs used by Velocity Software (jira#PED-6416). delete: * net-snmp-5.9.1-velocity-mib.patch - Re-add support for hostname netgroups that was removed accidentally and previously added with FATE#316305 (bsc#1207697). '@hostgroup' can be specified for multiple hosts add: * net-snmp-5.9.4-add-netgroups-functionality.patch - Hardening systemd services setting "ProtectHome=true" caused home directory size and allocation to be listed incorrectly (bsc#1206044). add (rename): * net-snmp-5.9.4-harden_snmpd.service.patch * net-snmp-5.9.4-harden_snmptrapd.service.patch delete (rename): * net-snmp-5.9.1-harden_snmpd.service.patch * net-snmp-5.9.1-harden_snmptrapd.service.patch ==== nodejs20 ==== Subpackages: npm20 - Add nodejs20-zlib-1.3.patch: Support zlib version with only major.minor versions, like zlib 1.3. ==== open-vm-tools ==== Subpackages: libvmtools0 open-vm-tools-desktop - Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer needed, nor used (since 12.3.0 release). ==== openssh ==== Subpackages: openssh-clients openssh-common openssh-server - Add cb4ed12f.patch: Fix build using zlib 1.3. The check expected a version in the form a.b.c[.d], which no longer matches 1.3. ==== oxygen5-sounds ==== Version update (5.27.8 -> 5.27.9) - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 ==== pam_kwallet ==== Version update (5.27.8 -> 5.27.9) Subpackages: pam_kwallet-32bit pam_kwallet-common - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 ==== patterns-fonts ==== Subpackages: patterns-fonts-fonts patterns-fonts-fonts_opt - Require fonts so the pattern also works when Recommends are turned off - Don't pull in Type 1 ghostscript-fonts-* and texlive-lm-fonts by default (boo#1216494) ==== plasma-browser-integration ==== Version update (5.27.8 -> 5.27.9) Subpackages: plasma-browser-integration-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - Changes since 5.27.8: * Add missing KService dependency ==== plasma-nm5 ==== Version update (5.27.8 -> 5.27.9) Subpackages: plasma-nm5-lang plasma-nm5-openconnect plasma-nm5-openvpn plasma-nm5-pptp plasma-nm5-vpnc - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - Changes since 5.27.8: * Revert "Don't force active dialogs right after showing" * [libreswan] should save even when group name is empty. ==== plasma5-addons ==== Version update (5.27.8 -> 5.27.9) Subpackages: plasma5-addons-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 ==== plasma5-desktop ==== Version update (5.27.8 -> 5.27.9) Subpackages: plasma5-desktop-emojier plasma5-desktop-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - Changes since 5.27.8: * Don't add recursively every file copied to desktop * kcm/recentFiles: making it compatible with kconfigwidgets:v5.102.0 ==== plasma5-disks ==== Version update (5.27.8 -> 5.27.9) Subpackages: plasma5-disks-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 ==== plasma5-integration ==== Version update (5.27.8 -> 5.27.9) Subpackages: plasma5-integration-plugin plasma5-integration-plugin-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - Changes since 5.27.8: * Force WindowCloseButtonHint for toplevel dialogs (kde#464193) ==== plasma5-openSUSE ==== Subpackages: plasma5-defaults-openSUSE plasma5-theme-openSUSE plasma5-workspace-branding-openSUSE sddm-theme-openSUSE - Update to 5.27.9 ==== plasma5-pa ==== Version update (5.27.8 -> 5.27.9) Subpackages: plasma5-pa-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - Changes since 5.27.8: * applet: refresh slider value when `to` changes on startup (kde#472245) * Use context object with KConfigWatcher signal ==== plasma5-systemmonitor ==== Version update (5.27.8 -> 5.27.9) Subpackages: plasma5-systemmonitor-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 ==== plasma5-thunderbolt ==== Version update (5.27.8 -> 5.27.9) Subpackages: plasma5-thunderbolt-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 ==== plasma5-workspace ==== Version update (5.27.8 -> 5.27.9) Subpackages: gmenudbusmenuproxy plasma5-session plasma5-session-wayland plasma5-workspace-lang plasma5-workspace-libs xembedsniproxy - Add patch to fix the logout applet: * 0001-applets-lock_logout-use-PlasmaCore.IconItem.patch - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - Changes since 5.27.8: * Do not consider icon changes excess notification creation * lockscreen: handle user switching also on nopassword page (kde#458951) * applets/lock_logout: add a11y properties and restore tooltip * runners/recentdocuments: Fix results being discarded when casing is different (kde#474782) * [plasmacalendarintegration] Fix selected regions are randomly reset to default (kde#472483) * libtaskmanager: test waylandtasksmodel ==== polkit-kde-agent-5 ==== Version update (5.27.8 -> 5.27.9) Subpackages: polkit-kde-agent-5-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 ==== powerdevil5 ==== Version update (5.27.8 -> 5.27.9) Subpackages: powerdevil5-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - Changes since 5.27.8: * Provide a default action in Suspend session config (kde#475866) ==== psmisc ==== Subpackages: psmisc-lang - Fix version at configure time as there was no .tarball-version ==== python-argcomplete ==== - add setuptools_scm for proper version detection ==== python-redis ==== Version update (4.5.5 -> 5.0.1) - Add pytest.ini source needed to run tests - Remove/disable broken tests because of suse environment - drop tox.ini. seems it does no longer exist in 5.0.1 - add support to easily disable the testsuite at build time - update to 5.0.1 - ð New Features - Provide aclose() / close() for classes requiring lifetime management (#2898) - Add support for ModuleCommands in cluster (#2951) - Add support for multiple values in RPUSHX (#2949) - Add Redis.from_pool() class method, for explicitly owning and closing a ConnectionPool (#2913) - ð Bug Fixes - Fixing monitor parsing for messages containing specific substrings (#2950) - Cluster determine slot command name need to be upper (#2919) - Support timeout = 0 in search query (#2934) - Fix async sentinel: add push_request keyword argument to read_response (#2922) - Fix protocol checking for search commands (#2923) - Fix: SentinelManagedConnection.read_response() got an unexpected keyword argument 'push_request' (#2894) - Fix: automatically close connection pool for async Sentinel (#2900) - Save a reference to created async tasks, to avoid tasks potentially disappearing (#2816) - Avoid reference cycling by the garbage collector during response reading (#2932) - ð§° Maintenance - Type hint improvements (#2952) - Replace clear_connect_callbacks with _deregister_connect_callback (#2955) - Async fixes, remove del and other things (#2870) - Add pagination, sorting and grouping examples to search json example (#2890) - Remove process-id checks from asyncio. Asyncio and fork() does not mix. (#2911) - Fix resource usage and cleanup Mocks in the unit tests (#2936) - Remove mentions of tox (#2929) - Add 7.2 to supported Redis versions (#2896) - Fix resource warnings in unit tests (#2899) - Fix typo in redis-stream-example.ipynb (#2918) - Deprecate RedisGraph (#2927) - Fix redis 7.2.0 tests (#2902) - Fix test_scorer (search) (#2920) - changes from 5.0.0 - What's new? - Triggers and Functions support Triggers and Functions allow you to execute server-side functions triggered when key values are modified or created in Redis, a stream entry arrival, or explicitly calling them. Simply put, you can replace Lua scripts with easy-to-develop JavaScript or TypeScript code. Move your business logic closer to the data to ensure a lower latency, and forget about updating dependent key values manually in your code. Try it for yourself with Quick start - Full Redis 7.2 and RESP3 support - Python 3.7 End-of-Life - Python 3.7 has reached its end-of-life (EOL) as of June 2023. This means that starting from this date, Python 3.7 will no longer receive any updates, including security patches, bug fixes, or improvements. If you continue to use Python 3.7 post-EOL, you may expose your projects and systems to potential security vulnerabilities. We ended its support in this version and strongly recommend migrating to Python 3.10. - ð Bug Fixes - Fix timeout retrying on pipeline execution (#2812) - Fix socket garbage collection (#2859) - ð§° Maintenance - Updating client license to clear, MIT (#2884) - Add py.typed in accordance with PEP-561 (#2738) - Dependabot label change (#2880) - Fix type hints in SearchCommands (#2817) - Add sync modules (except search) tests to cluster CI (#2850) - Fix a duplicate word in CONTRIBUTING.md (#2848) - Fixing doc builds (#2869) - Change cluster docker to edge and enable debug command (#2853) - changes from 4.6.0 - ð§ª Experimental Features - Support JSON.MERGE command (#2761) - Support JSON.MSET command (#2766) - ð New Features - Extract abstract async connection class (#2734) - Add support for WAITAOF (#2760) - Introduce OutOfMemoryError exception for Redis write command rejections due to OOM errors (#2778) - Add WITHSCORE argument to ZRANK (#2758) - ð Bug Fixes - Fix dead weakref in sentinel connection causing ReferenceError (#2767) (#2771) - Fix Key Error in parse_xinfo_stream (#2788) - Remove unnecessary __del__ handlers (#2755) - Added support for missing argument to SentinelManagedConnection.read_response() (#2756) - ð§° Maintenance - Fix type hint for retry_on_error in async cluster (#2804) - Clean up documents and fix some redirects (#2801) - Add unit tests for the connect method of all Redis connection classes (#2631) - Docstring formatting fix (#2796) ==== redis ==== Version update (7.0.12 -> 7.2.2) - redis 7.2.2: * (CVE-2023-45145) The wrong order of listen(2) and chmod(2) calls creates a race condition that can be used by another process to bypass desired Unix socket permissions on startup, bsc#1216376 * WAITAOF could timeout in the absence of write traffic in case a new AOF is created and an AOF rewrite can't immediately start * Fix crash when running rebalance command in a mixed cluster of 7.0 and 7.2 nodes * Fix the return type of the slot number in cluster shards to integer, which makes it consistent with past behavior * Fix CLUSTER commands are called from modules or scripts to return TLS info appropriately redis-cli, fix crash on reconnect when in SUBSCRIBE mode * Fix overflow calculation for next timer event - redis 7.2.1: * (CVE-2023-41053) Redis does not correctly identify keys accessed by SORT_RO and, as a result, may grant users executing this command access to keys that are not explicitly authorized by the ACL configuration. (bsc#1215094) * Fix crashes when joining a node to an existing 7.0 Redis Cluster * Correct request_policy and response_policy command tips on for some admin / configuration commands - Refresh redis.hashes - redis 7.2.0 - Bug Fixes - redis-cli in cluster mode handles unknown-endpoint (#12273) - Update request / response policy hints for a few commands (#12417) - Ensure that the function load timeout is disabled during loading from RDB/AOF and on replicas. (#12451) - Fix false success and a memory leak for ACL selector with bad parenthesis combination (#12452) - Fix the assertion when script timeout occurs after it signaled a blocked client (#12459) - Fixes for issues in previous releases of Redis 7.2 - Update MONITOR client's memory correctly for INFO and client-eviction (#12420) - The response of cluster nodes was unnecessarily adding an extra comma when no hostname was present. (#12411) - refreshed redis-conf.patch: - switch to autosetup now that we switched the last patch to patch level 1 ==== sdbootutil ==== Version update (1+git20231005.890f70c -> 1+git20231023.873adb9) Subpackages: sdbootutil-rpm-scriptlets sdbootutil-snapper - Update to version 1+git20231023.873adb9: * Use correct image name on aarch64 ==== systemsettings5 ==== Version update (5.27.8 -> 5.27.9) Subpackages: systemsettings5-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 ==== vte ==== Version update (0.74.0 -> 0.74.1) Subpackages: libvte-2_91-0 typelib-1_0-Vte-2_91 vte-lang - Update to version 0.74.1: * ci: Only upload docs for tags * widget: VteTerminalSpawnAsyncCallback's error is nullable * Updated translations. - Drop f1a547f1dfebd8860021b6b727fa5d5717e9f143.patch: fixed upstream. ==== xdg-desktop-portal-gtk ==== Version update (1.14.1 -> 1.15.1) Subpackages: xdg-desktop-portal-gtk-lang - Update to version 1.15.1: + Fix build of feature-gated portals. - Update to version 1.15.0: + Switch to the Meson build system, and drop Autotools + Drop most use of private GNOME API; the following portal interfaces have been removed: - org.freedesktop.impl.portal.Screenshot - org.freedesktop.impl.portal.ScreenCast - org.freedesktop.impl.portal.RemoteDesktop - org.freedesktop.impl.portal.Background + Do not add duplicate notifications + Expose the org.gnome.desktop.calendar settings + Fix type for org.gnome.desktop.background.picture-uri setting + Support current_folder in org.freedesktop.impl.portal.FileChooser + Update list of translatable files + Updated translations. - Add meson BuildRequires and macros following upstreams port. ==== xdg-desktop-portal-kde ==== Version update (5.27.8 -> 5.27.9) Subpackages: xdg-desktop-portal-kde-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - Changes since 5.27.8: * remote desktop: Close streams on session exit * data/kde-portals.conf: Fallback to GTK portals for Settings (kde#474746) * Add missing KF5Service find_package call - Drop patches, now upstream: * 0001-kde_portals.patch ==== xfce4-notifyd ==== Subpackages: xfce4-notifyd-lang - Add xfce4-notifyd-relax-x11-version.patch, see boo#1216516 - Add minimum version expected for package xdg-dev-tools. - fix all packaging warnings ==== xorg-x11-server ==== Version update (21.1.8 -> 21.1.9) Subpackages: xorg-x11-server-Xvfb xorg-x11-server-extra - Update to version 21.1.9 * This release contains fixes for CVE-2023-5367, CVE-2023-5380 and CVE-2023-5574 as reported in today's security advisory: https://lists.x.org/archives/xorg-announce/2023-October/003430.html - adjusted u_Use-better-fallbacks-to-generate-cookies-if-arc4rand.patch ==== xwayland ==== Version update (23.2.1 -> 23.2.2) - Update to version 23.2.2 * This release contains the fix for CVE-2023-5367 and CVE-2023-5574 in today's security advisory: https://lists.x.org/archives/xorg-announce/2023-October/003430.html Xwayland does not support multiple protocol screens (Zaphod) and is thus not affected by CVE-2023-5380. * Additionally, there is a change in the default behaviour of Xwayland: Since version 23.2.0 Xwayland (via liboeffis) automatically tries to connect to the XDG Desktop Portal's RemoteDesktop interface to obtain the EI socket. That socket is used to send XTest events to the compositor. * However, the connection to the session-wide Portal is unsuitable when Xwayland is running in a nested compositor. Xwayland cannot tell whether it's running on a nested compositor and to keep backwards compatibility with Xwayland prior to 23.2.0, Xwayland must now be started with "-enable-ei-portal" to connect to the portal. * Compositors (who typically spawn Xwayland rootless) must now pass this option to get the same behaviour as 23.2.x. * Finally, Xwayland now uses libbsd-overlay instead of libbsd. ==== yast2 ==== Version update (5.0.1 -> 5.0.2) Subpackages: yast2-logs - Fix firewalld zones reader adapting it to the new firewall-cmd - -list-all-zones output format (bsc#1216534) - 5.0.2 ==== yast2-x11 ==== Version update (5.0.1 -> 5.0.2) - Prevent testX from hanging in second stage if no supported WM can be started (bsc#1216297) - 5.0.2 ==== zeromq ==== Version update (4.3.4 -> 4.3.5) Subpackages: libzmq5 zeromq-tools - update to 4.3.5: * Relicensing from LGPL-3.0+ (with custom exceptions) to MPL-2.0 is now complete. libzmq is now distributed under the Mozilla Public License 2.0. Relicensing grants have been collected from all relevant authors, and some functionality has been clean-room reimplemented where that was not possible. In layman terms, the new license provides the same rights and obligations as before. Source files are now tagged using the SPDX license identifier format. Details of the relicensing process can be seen at: #2376 Relicensing grants have been archived at: https://github.com/rlenferink/libzmq-relicense A special thanks to everybody who helped with this long and difficult task, with the process, the reimplementations, the collections and everything else. * New DRAFT (see NEWS for 4.2.0) socket options: ZMQ_BUSY_POLL will set the SO_BUSY_POLL socket option on the underlying sockets, if it is supported. ZMQ_HICCUP_MSG will send a message when the peer has been disconnected. ZMQ_XSUB_VERBOSE_UNSUBSCRIBE will configure a socket to pass all unsubscription messages, including duplicated ones. ZMQ_TOPICS_COUNT will return the number of subscribed topics on a PUB/SUB socket. ZMQ_NORM_MODE, ZMQ_NORM_UNICAST_NACK, ZMQ_NORM_BUFFER_SIZE, ZMQ_NORM_SEGMENT_SIZE, ZMQ_NORM_BLOCK_SIZE, ZMQ_NORM_NUM_PARITY, ZMQ_NORM_NUM_AUTOPARITY and ZMQ_NORM_PUSH to control various aspect of NORM sockets. See doc/zmq_setsockopt.txt and doc/zmq_getsockopt.txt for details. * New DRAFT (see NEWS for 4.2.0) zmq_ppoll APIs was added that differs from zmq_poll in the same way that ppoll differs from poll. See doc/zmq_ppoll.txt for details. * Various bug fixes and performance improvements. - qemu-user.patch: upstreamed, removed ==== zlib ==== Version update (1.2.13 -> 1.3) Subpackages: libminizip1 libz1 libz1-32bit - Update to 1.3: * Building using K&R (pre-ANSI) function definitions is no longer supported. * Fixed a bug in deflateBound() for level 0 and memLevel 9. * Fixed a bug when gzungetc() is used immediately after gzopen(). * Fixed a bug when using gzflush() with a very small buffer. * Fixed a crash when gzsetparams() is attempted for a transparent write. * Fixed test/example.c to work with FORCE_STORED. * Fixed minizip to allow it to open an empty zip file. * Fixed reading disk number start on zip64 files in minizip. * Fixed a logic error in minizip argument processing. - Added patches: * zlib-1.3-IBM-Z-hw-accelerated-deflate-s390x.patch - Refreshed patches: * zlib-1.2.12-add-optimized-slide_hash-for-power.patch * zlib-1.2.12-add-vectorized-longest_match-for-power.patch * zlib-1.2.12-adler32-vector-optimizations-for-power.patch * zlib-1.2.13-optimized-s390.patch * zlib-format.patch * zlib-no-version-check.patch - Removed patches: * bsc1210593.patch * zlib-1.2.13-fix-bug-deflateBound.patch * zlib-1.2.12-s390-vectorize-crc32.patch * zlib-1.2.13-IBM-Z-hw-accelerated-deflate-s390x.patch * zlib-1.2.12-add-optimized-slide_hash-for-power.patch * zlib-1.2.12-fix-invalid-memory-access-on-ppc-and-ppc64.patch * zlib-1.2.12-add-vectorized-longest_match-for-power.patch * zlib-1.2.12-adler32-vector-optimizations-for-power.patch - Fix CVE-2023-45853, integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_6, bsc#1216378 * CVE-2023-45853.patch

1 0

Recent signal desktop issues white / black / blue screens, --disable-gpu helps
by Markus Feilner 26 Oct '23

26 Oct '23

Hi there, maybe posting this here helps someone (and if it's for debugging only...) Running Tumbleweed on several Ryzen machines, I have recently experienced strange behaviour by signal-desktop. It seems like all versions I tried, via opi, had the same or similar behaviour: After starting signal-desktop via desktop icon or from shell with "signal-desktop" resulted in an empty window, some all white, some all blue, some all black. Not usable, though the notifications kept coming in. I seem to have fixed this behaviour by adding the flag --disable-gpu to the command line. I found this info here: https://support.signal.org/hc/en-us/articles/4803210551706-Troubleshooting-… -- Best Regards - Mit freundlichen Grüßen, Markus Feilner, Feilner IT - 20 years of open services - Sustainable Open Source Strategy, Networking, Politics, Journalism Knowledge Management, Rubber Ducks, Trainings, Workshops, Documentation https://www.feilner-it.net, 93059 Regensburg Wöhrdstr. 10, +49 170 302 7092 (+Signal) https://mastodon.cloud/@mfeilner https://mastodon.social/@FeilnerIT PGP: 40A3C306F96133067C11CFD9A958A906268C9F0A http://www.feilner-it.net/files/MFpub.asc Xing: http://www.xing.com/profile/Markus_Feilner LinkedIn: https://www.linkedin.com/in/markusfeilner @mfeilner: Mastodon, Matrix, Jabber, ...

3 2

openSUSE Release Engineering meeting 25.10.2023
by Lubos Kocman 25 Oct '23

25 Oct '23

All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting The meeting is hosted here https://meet.opensuse.org/ReleaseEngineeringMeeting ## Attendees bittin, DimStar, Sarah, ana, lkocman, ddemaio, wengel, Gerald ## Leap New Leap 15.6 build just arrived to openQA. A lot of failures in regards to bootloader / fs-probing https://bugzilla.opensuse.org/show_bug.cgi?id=1216563 Potential Radeon RX7000 series issue with updated kernel in 15 SP5/15.5 https://news.opensuse.org/2023/10/13/leap-155-amdgpu-rx7000-freeze/ RX7000 users please postpone the kernel update until the issue is clarified. In this relation enablement of PyTorch on 7900XTX is a teaser (raised with SLE team) https://www.tomshardware.com/news/amd-enables-rocm-and-pytorch-on-radeon-rx… lkocman: Electron web for software-o-o comming. (raised on last week's community weekly meeting). Still on todo, agreed to do a xdg-open launcher Hackweek reminder 6-10 November https://hackweek.opensuse.org (beautiful GOT theme) https://www.linkedin.com/posts/thomasdigiacomo_suses-23rd-hack-week-is-comi… openSUSE Booth at openALT (Brno, CZ) 11-12th November. Three talks, openSUSE CDN (many thanks to Bernhard for inputs), Leap 16.0?, Leap Micro 5.5 Dolomite and Marble will have parallel availability, we still plan to support Leap Micro 5.5 until October 2024. Let's revisit what "container hosts" we plan to make available to community. ## openSUSE Tumbleweed (ana) openSUSE:Factory build fail stats: 49 failed 33 unresolvable (last week: 53 failed, 21 unresolvable) https://tinyurl.com/ysy4nnnz Most relevant updates this week: * GNOME 45.1 * KDE Frameworks 5.111.0 * Linux Kernel 6.5.8 * yast2 and modules 5.0.x * redis 7.2.2 Updates waiting in staging: * binutils 2.41 * KDE Plasma 5.27.9 * zlib 1.3 * HPC stack: Dropping openmpi1, openmpi2, openmpi3 ## Richard (Aeon) Not available ## Bernhard (Slowroll) Not available ## Max Not available ## Guillaume - Arm Not available ## Sarah - s390x * Tumbleweed * SUSE is replacing the mainframe and we will receive some more build nodes -> building is already improved, but it does not come to new Tumbleweed releases gzip: s390x bug already fixed upstream, but gcc option required for successful build for current version https://build.opensuse.org/request/show/1119912?notification_id=43810841 ## Doug * Will announce logo contest for the following logos: * openSUSE * Tumbleweed * Leap * Slowroll * Kalpa - details - https://en.opensuse.org/Logocontest * Use cases survey ends Oct. 31 - 2069 complete * openSUSE.Asia Summit had about 100 attendees * Starting TSP payments * Shipped marketing material for two events * Collaboritng with Fedora for Creative Freedom Summit * Using openSUSE's Jitsi instance (fully remote event) * Update at community meeting about upgrading version * Open CFPs * SCALE (Deadline Nov. 1) https://www.socallinuxexpo.org/scale/21x/cfp * FOSS Backstage * Creative Freedom Summit (Deadline Nov. 24) https://creativefreedomsummit.com/call-for-papers-2024-creative-freedom-sum… * Previous years videos - https://peertube.linuxrocks.online/c/creativefreedom/videos Static * oSC24 dates June 27 to 29 reserved (Thursday - Saturday) * FOSDEM Bus * AI topics (static) * Nothing new ## Dirk Not available * usual bunch of factory package updates, supporting python 3.12 enablement ## Wolfgang (Package Hub), Scott Bahling - receiving reports of missing dependencies (for SP5), generating a full list which are missing Wolfgang: regarding build power, I managed to get workers running, but they're still crashing / rebooting. All workers in OBS/IBS are investigated, both are running at different kernel version. task for lkocman: The problem statement (SLES/SLED expectations) ## Maintenance team (Marcus or Maurizio (m4u)) No issues. Internal request to add php8.1 to Package HUB. Regarding AMD issue, kernel update is scheduled for a second Tuesday of the month. ## Adrian - OBS Not available ## Simon (Leap Replacement/Linarite) Not available ## Open Floor - Next Wednesday is November 1st, a holiday in many places, should we cancel the meeting? Monday not Wednesday then? Seems like we'll have multiple attendeds who will be online. So not cancelling. RPM 4.19? Lubos, you want to fill in this with some context from yesterday's meeting? jsc#PED-7197 - openned against ALP From Dan Cermak: It would be beneficial to have RPM 4.19 in the ALP code stream. RPM 4.19 has a big breaking change for us: it ships its own sysusers provides & requires generator that conflicts with our version provided by sysuser-tools that was originally written by Thorsten Kukuk. This means that shipping rpm 4.19 also requires us to revisit all packages that use the sysusers generators. Imho we should implement this change ASAP in ALP as long as the code stream is still young and we can have potentially breaking changes. The longer we delay it, the harder it will become to implement.

1 0

Jetporch finding its way to openSUSE
by Johannes Kastl 25 Oct '23

25 Oct '23

Dear all, Michael deHaan, the original creator of Ansible, has a new project called Jetporch. ---snip--- Jetporch - the Jet Enterprise Professional Orchestrator Jetporch (aka Jet) is a general-purpose, community-driven IT automation platform for configuration management, deployment, orchestration, patching, and arbitrary task execution workflows. ---/snip--- It is written in Rust and still in early early alpha phase. Nevertheless I wanted to try it out, so I started packaging it: > https://build.opensuse.org/project/show/systemsmanagement:Jetporch As written before, early alpha and "Tech Preview 1". So be warned. Nevertheless, if you want to give it a spin, feel free to test it and report back. I will follow the upstream development and include things as soon as they are available (I noticed that upstream now has examples, which I will include in the package). Kind Regards, Johannes -- Johannes Kastl Linux Consultant & Trainer Tel.: +49 (0) 151 2372 5802 Mail: kastl(a)b1-systems.de B1 Systems GmbH Osterfeldstraße 7 / 85088 Vohburg http://www.b1-systems.de GF: Ralph Dehner Unternehmenssitz: Vohburg / AG: Ingolstadt,HRB 3537

1 0

New Tumbleweed snapshot 20231023 released!
by Dominique Leuenberger 24 Oct '23

24 Oct '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: evolution (3.50.0 -> 3.50.1) evolution-data-server (3.50.0 -> 3.50.1) evolution-ews (3.50.0 -> 3.50.1) gnome-software (45.0 -> 45.1) gnome-sudoku (45.1 -> 45.2) gnu-unifont-fonts (15.1.01 -> 15.1.03) gvfs (1.52.0 -> 1.52.1) harfbuzz (8.2.1 -> 8.2.2) kdenetwork-filesharing python-gssapi (1.8.2 -> 1.8.3) rubygem-agama (4 -> 5) shaderc (2023.6 -> 2023.7) virtualbox (7.0.10 -> 7.0.12) virtualbox-kmp (7.0.10_k6.5.8_1 -> 7.0.12_k6.5.8_1) === Details === ==== evolution ==== Version update (3.50.0 -> 3.50.1) Subpackages: evolution-lang evolution-plugin-spamassassin - Update to version 3.50.1: + flatpak: Add missing comma in the manifests + Bugs fixed: - Mail: Correct conversion of UTF-16 encoded text files - ConfigLookup: Default to STARTTLS for LDAP from SRV records - EWebView: Enable spell checking for editable fields - Make SRV config lookup records lower priority than the others - Calendar: "Work Week" column separator light in dark theme - OpenPGP: "Always sign/encrypt" doesn't always work - Update default calendar colors + Updated translations. ==== evolution-data-server ==== Version update (3.50.0 -> 3.50.1) Subpackages: evolution-data-server-lang libcamel-1_2-64 libebackend-1_2-11 libebook-1_2-21 libebook-contacts-1_2-4 libecal-2_0-2 libedata-book-1_2-27 libedata-cal-2_0-2 libedataserver-1_2-27 libedataserverui-1_2-4 - Update to version 3.50.1: + Bugs fixed: - Update default calendar colors - Mail: Correct conversion of UTF-16 encoded text files + Updated translations. ==== evolution-ews ==== Version update (3.50.0 -> 3.50.1) Subpackages: evolution-ews-lang - Update to version 3.50.1: + Bugs Fixed: - Search in online GAL when OAB is misconfigured - Text from .error file not translated in the GUI - Fix scope for OAuth2 v2 being hard-coded to O365 + Updated translations. ==== gnome-software ==== Version update (45.0 -> 45.1) Subpackages: gnome-software-lang gnome-software-plugin-packagekit - Update to version 45.1: + Various styling fixes + Report PackageKit GPG-related errors in the GUI + Flatpak permission checks improvements + Optimize loading of the details page + Updated translations. ==== gnome-sudoku ==== Version update (45.1 -> 45.2) Subpackages: gnome-sudoku-lang - Update to version 45.2: + Fix Ctrl+N not setting earmarks + Fix warning about failure to solve puzzle when loading games with an incorrect value ==== gnu-unifont-fonts ==== Version update (15.1.01 -> 15.1.03) - update to 15.1.03: * Additions and extensions to multiple CJK Unified Ideographs Extension glyps, and Plane 0 Wen Quan Yi range ==== gvfs ==== Version update (1.52.0 -> 1.52.1) Subpackages: gvfs-backend-afc gvfs-backend-goa gvfs-backend-samba gvfs-backends gvfs-fuse gvfs-lang - Update to version 1.52.1: + client: Prevent returning invalid mount cache entries. + dav: Fix authentication issues when DNS-SD URIs are used. + nfs: Fix IPv6 URI handling. + Updated translations. ==== harfbuzz ==== Version update (8.2.1 -> 8.2.2) Subpackages: libharfbuzz-gobject0 libharfbuzz-icu0 libharfbuzz-subset0 libharfbuzz0 typelib-1_0-HarfBuzz-0_0 - Update to version 8.2.2: + Fix regression from 8.1.0 in shaping fonts with duplicate feature tags. + Fix regression from 8.2.0 in parsing CSS-style feature strings. + Variable fonts instanciation now handles more tables. + Various CMake build improvements. + Various fixes to build without errors with gcc 4.9.2. ==== kdenetwork-filesharing ==== Subpackages: kdenetwork-filesharing-lang - Fix non-working "Share" properties page in dolphin due to incorrect group check (kde#475946, boo#1215374), add 0001-Remove-wrong-group-check-from-group-manager.patch ==== python-gssapi ==== Version update (1.8.2 -> 1.8.3) - Update to 1.8.3: - Added Python 3.12 wheel - Fix Cython 3 compatibility - Remove upstreamed patch d9200d1018ac916b30433da23898c8c5fbde0f28.patch ==== rubygem-agama ==== Version update (4 -> 5) - Version 5 - Do not reuse pre-existing swap partitions in the storage proposal (gh#openSUSE/agama#806) - Extended Software service to allow configuring selected patterns (gh#openSUSE/agama#792) - Add indication to btrfs volumes if it is transactional (gh#openSUSE/agama#789) - Adapted storage settings for ALP Dolomite (gh#openSUSE/agama#782) - Fix D-Bus type for SystemVGDevices and restore system VG devices from previous settings (gh#openSUSE/agama#763). ==== shaderc ==== Version update (2023.6 -> 2023.7) - Update to release 2023.7 * Adapt a test to different error message from SPIRV-Tools ==== virtualbox ==== Version update (7.0.10 -> 7.0.12) - Restored changes entry accidentally deleted. - Version bump to VirtualBox 7.0.12 (released October 17 2023 by Oracle) Fixes the following: CVE-2023-22098 (boo#1216363) CVE-2023-22099 (boo#1216364) CVE-2023-22100 (boo#1216365) Patch file "fixes_for_6.5.patch" removed - fixed upstream. This is a maintenance release. The following items were fixed and/or added: VMM: Fixed using a debugger inside the guest under certain circumstances (bugs #21413 and #21546) VMM: Fixed detection of VT-x being used by other hypervisors (bug #21867) VMM: Introduced additional improvements in Split Lock Detection feature of recent Intel CPUs on Linux hosts (bug #20180) GUI: Fixed issue when the nested hardware virtualization setting was not displayed in the VM details panel (bug #21707) GUI: Introduced NLS update for Croatian, Indonesian, Italian, Japanese, Korean, Dutch and Turkish languages as well as added general look-and-feel improvements Devices: Fixed black screen in Windows guests with multiple guest screens when 3D is disabled (7.0.10 regression) Devices: Fixed PCI device identifiers for the VirtIO network interface (bug #21516) Devices: Fixed VLAN support for the VirtIO network interface (bug #21778) Devices: Fixed loading saved states when a TPM is configured (7.0.10 regression, bug #21773) Networking: Fixed memory leaks in the VBoxIntNetSwitch process on macOS (bug #21752) Networking: Fixed TCP connections with IP addresses ending on .2 when the NAT network attachment is used (bug #21513) VRDP: Added general improvements VBoxManage: Added improvements for "list usbfilters" command Unattended: Added kick start file support for Oracle Linux 8 and Oracle Linux 9. Main: Added more Linux OS subtypes Host Services: Fixed Guest Properties service crash under rare circumstance Linux Host and Guest: Fixed few "field-spanning write" kernel warnings (bugs #21410 and #21862) Linux Guest Additions: Added more fixes for RHEL 8.9 and 9.3 kernel Linux Guest Additions: Added more fixes for kernel 6.4 Linux Guest Additions: Added initial support for OpenSUSE 15.5 kernel Linux Guest Additions: Added initial support for kernels 6.5 and 6.6 Linux Guest Additions: Added version reporting for "rcvboxadd status-kernel" and "rcvboxadd status-user" commands BIOS: Restored support for ISA SCSI HBAs in the BIOS (bug #21736) ==== virtualbox-kmp ==== Version update (7.0.10_k6.5.8_1 -> 7.0.12_k6.5.8_1) - Restored changes entry accidentally deleted. - Version bump to VirtualBox 7.0.12 (released October 17 2023 by Oracle) Fixes the following: CVE-2023-22098 (boo#1216363) CVE-2023-22099 (boo#1216364) CVE-2023-22100 (boo#1216365) Patch file "fixes_for_6.5.patch" removed - fixed upstream. This is a maintenance release. The following items were fixed and/or added: VMM: Fixed using a debugger inside the guest under certain circumstances (bugs #21413 and #21546) VMM: Fixed detection of VT-x being used by other hypervisors (bug #21867) VMM: Introduced additional improvements in Split Lock Detection feature of recent Intel CPUs on Linux hosts (bug #20180) GUI: Fixed issue when the nested hardware virtualization setting was not displayed in the VM details panel (bug #21707) GUI: Introduced NLS update for Croatian, Indonesian, Italian, Japanese, Korean, Dutch and Turkish languages as well as added general look-and-feel improvements Devices: Fixed black screen in Windows guests with multiple guest screens when 3D is disabled (7.0.10 regression) Devices: Fixed PCI device identifiers for the VirtIO network interface (bug #21516) Devices: Fixed VLAN support for the VirtIO network interface (bug #21778) Devices: Fixed loading saved states when a TPM is configured (7.0.10 regression, bug #21773) Networking: Fixed memory leaks in the VBoxIntNetSwitch process on macOS (bug #21752) Networking: Fixed TCP connections with IP addresses ending on .2 when the NAT network attachment is used (bug #21513) VRDP: Added general improvements VBoxManage: Added improvements for "list usbfilters" command Unattended: Added kick start file support for Oracle Linux 8 and Oracle Linux 9. Main: Added more Linux OS subtypes Host Services: Fixed Guest Properties service crash under rare circumstance Linux Host and Guest: Fixed few "field-spanning write" kernel warnings (bugs #21410 and #21862) Linux Guest Additions: Added more fixes for RHEL 8.9 and 9.3 kernel Linux Guest Additions: Added more fixes for kernel 6.4 Linux Guest Additions: Added initial support for OpenSUSE 15.5 kernel Linux Guest Additions: Added initial support for kernels 6.5 and 6.6 Linux Guest Additions: Added version reporting for "rcvboxadd status-kernel" and "rcvboxadd status-user" commands BIOS: Restored support for ISA SCSI HBAs in the BIOS (bug #21736)

1 0

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 23 Oct '23

23 Oct '23

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have had problems for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - python-pyface: Fails to build Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

1 0

New Tumbleweed snapshot 20231022 released!
by Dominique Leuenberger 23 Oct '23

23 Oct '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: NetworkManager-applet apache2 (2.4.57 -> 2.4.58) apache2-manual (2.4.57 -> 2.4.58) apache2-prefork (2.4.57 -> 2.4.58) apache2-utils (2.4.57 -> 2.4.58) ceph (16.2.13.66+g54799ee0666 -> 16.2.14.66+g7aa6ce9419f) chromaprint dracut (059+suse.501.gc44a365d -> 059+suse.503.g41e99e72) freerdp (2.11.0 -> 2.11.2) kernel-source (6.5.6 -> 6.5.8) libdrm (2.4.116 -> 2.4.117) libstorage-ng (4.5.143 -> 4.5.149) pipewire (0.3.82 -> 0.3.83) xcb-util-cursor (0.1.4 -> 0.1.5) xfce4-terminal (1.1.0 -> 1.1.1) yast2-storage-ng (5.0.1 -> 5.0.3) === Details === ==== NetworkManager-applet ==== Subpackages: NetworkManager-connection-editor NetworkManager-connection-editor-lang - Support build environments like SLE 15 SP5 and Leap 15.5 which had %{_distconfdir) not defined yet. ==== apache2 ==== Version update (2.4.57 -> 2.4.58) - Update to 2.4.58: * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream memory not reclaimed right away on RST (cve.mitre.org) When a HTTP/2 stream was reset (RST frame) by a client, there was a time window were the request's memory resources were not reclaimed immediately. Instead, de-allocation was deferred to connection close. A client could send new requests and resets, keeping the connection busy and open and causing the memory footprint to keep on growing. On connection close, all resources were reclaimed, but the process might run out of memory before that. This was found by the reporter during testing of CVE-2023-44487 (HTTP/2 Rapid Reset Exploit) with their own test client. During "normal" HTTP/2 use, the probability to hit this bug is very low. The kept memory would not become noticeable before the connection closes or times out. Users are recommended to upgrade to version 2.4.58, which fixes the issue. Credits: Will Dormann of Vul Labs * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with initial windows size 0 (cve.mitre.org) An attacker, opening a HTTP/2 connection with an initial window size of 0, was able to block handling of that connection indefinitely in Apache HTTP Server. This could be used to exhaust worker resources in the server, similar to the well known "slow loris" attack pattern. This has been fixed in version 2.4.58, so that such connection are terminated properly after the configured connection timeout. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.57. Users are recommended to upgrade to version 2.4.58, which fixes the issue. Credits: Prof. Sven Dietrich (City University of New York) * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read (cve.mitre.org) Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57. Credits: David Shoon (github/davidshoon) * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126: SSL routines::unexpected eof while reading" when using OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if available. [Rainer Jung] * ) mod_http2: improved early cleanup of streams. [Stefan Eissing] * ) mod_proxy_http2: improved error handling on connection errors while response is already underway. [Stefan Eissing] * ) mod_http2: fixed a bug that could lead to a crash in main connection output handling. This occured only when the last request on a HTTP/2 connection had been processed and the session decided to shut down. This could lead to an attempt to send a final GOAWAY while the previous write was still in progress. See PR 66646. [Stefan Eissing] * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value. Fixes PR66752. [Stefan Eissing] * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as described in RFC 8441. A new directive 'H2WebSockets on|off' has been added. The feature is by default not enabled. As also discussed in the manual, this feature should work for setups using "ProxyPass backend-url upgrade=websocket" without further changes. Special server modules for WebSockets will have to be adapted, most likely, as the handling if IO events is different with HTTP/2. HTTP/2 WebSockets are supported on platforms with native pipes. This excludes Windows. [Stefan Eissing] * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA]. in OCSP stapling. PR 66672. [Frank Meier <frank.meier ergon.ch>, covener] * ) mod_http2: fixed a bug in flushing pending data on an already closed connection that could lead to a busy loop, preventing the HTTP/2 session to close down successfully. Fixed PR 66624. [Stefan Eissing] * ) mod_http2: v2.0.15 with the following fixes and improvements - New directive 'H2EarlyHint name value' to add headers to a response, picked up already when a "103 Early Hints" response is sent. 'name' and 'value' must comply to the HTTP field restrictions. This directive can be repeated several times and header fields of the same names add. Sending a 'Link' header with 'preload' relation will also cause a HTTP/2 PUSH if enabled and supported by the client. - Fixed an issue where requests were not logged and accounted in a timely fashion when the connection returns to "keepalive" handling, e.g. when the request served was the last outstanding one. This led to late appearance in access logs with wrong duration times reported. - Accurately report the bytes sent for a request in the '%O' Log format. This addresses #203, a long outstanding issue where mod_h2 has reported numbers over-eagerly from internal buffering and not what has actually been placed on the connection. The numbers are now the same with and without H2CopyFiles enabled. [Stefan Eissing] * ) mod_proxy_http2: fix retry handling to not leak temporary errors. On detecting that that an existing connection was shutdown by the other side, a 503 response leaked even though the request was retried on a fresh connection. [Stefan Eissing] * ) mod_rewrite: Add server directory to include path as mod_rewrite requires test_char.h. PR 66571 [Valeria Petrov <valeria.petrov(a)spinetix.com>] * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling of HTTP/2 requests in a forward proxy configuration. ... changelog too long, skipping 85 lines ... for async MPMs. PR 63300. [Rainer Jung] ==== apache2-manual ==== Version update (2.4.57 -> 2.4.58) - Update to 2.4.58: * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream memory not reclaimed right away on RST (cve.mitre.org) When a HTTP/2 stream was reset (RST frame) by a client, there was a time window were the request's memory resources were not reclaimed immediately. Instead, de-allocation was deferred to connection close. A client could send new requests and resets, keeping the connection busy and open and causing the memory footprint to keep on growing. On connection close, all resources were reclaimed, but the process might run out of memory before that. This was found by the reporter during testing of CVE-2023-44487 (HTTP/2 Rapid Reset Exploit) with their own test client. During "normal" HTTP/2 use, the probability to hit this bug is very low. The kept memory would not become noticeable before the connection closes or times out. Users are recommended to upgrade to version 2.4.58, which fixes the issue. Credits: Will Dormann of Vul Labs * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with initial windows size 0 (cve.mitre.org) An attacker, opening a HTTP/2 connection with an initial window size of 0, was able to block handling of that connection indefinitely in Apache HTTP Server. This could be used to exhaust worker resources in the server, similar to the well known "slow loris" attack pattern. This has been fixed in version 2.4.58, so that such connection are terminated properly after the configured connection timeout. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.57. Users are recommended to upgrade to version 2.4.58, which fixes the issue. Credits: Prof. Sven Dietrich (City University of New York) * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read (cve.mitre.org) Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57. Credits: David Shoon (github/davidshoon) * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126: SSL routines::unexpected eof while reading" when using OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if available. [Rainer Jung] * ) mod_http2: improved early cleanup of streams. [Stefan Eissing] * ) mod_proxy_http2: improved error handling on connection errors while response is already underway. [Stefan Eissing] * ) mod_http2: fixed a bug that could lead to a crash in main connection output handling. This occured only when the last request on a HTTP/2 connection had been processed and the session decided to shut down. This could lead to an attempt to send a final GOAWAY while the previous write was still in progress. See PR 66646. [Stefan Eissing] * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value. Fixes PR66752. [Stefan Eissing] * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as described in RFC 8441. A new directive 'H2WebSockets on|off' has been added. The feature is by default not enabled. As also discussed in the manual, this feature should work for setups using "ProxyPass backend-url upgrade=websocket" without further changes. Special server modules for WebSockets will have to be adapted, most likely, as the handling if IO events is different with HTTP/2. HTTP/2 WebSockets are supported on platforms with native pipes. This excludes Windows. [Stefan Eissing] * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA]. in OCSP stapling. PR 66672. [Frank Meier <frank.meier ergon.ch>, covener] * ) mod_http2: fixed a bug in flushing pending data on an already closed connection that could lead to a busy loop, preventing the HTTP/2 session to close down successfully. Fixed PR 66624. [Stefan Eissing] * ) mod_http2: v2.0.15 with the following fixes and improvements - New directive 'H2EarlyHint name value' to add headers to a response, picked up already when a "103 Early Hints" response is sent. 'name' and 'value' must comply to the HTTP field restrictions. This directive can be repeated several times and header fields of the same names add. Sending a 'Link' header with 'preload' relation will also cause a HTTP/2 PUSH if enabled and supported by the client. - Fixed an issue where requests were not logged and accounted in a timely fashion when the connection returns to "keepalive" handling, e.g. when the request served was the last outstanding one. This led to late appearance in access logs with wrong duration times reported. - Accurately report the bytes sent for a request in the '%O' Log format. This addresses #203, a long outstanding issue where mod_h2 has reported numbers over-eagerly from internal buffering and not what has actually been placed on the connection. The numbers are now the same with and without H2CopyFiles enabled. [Stefan Eissing] * ) mod_proxy_http2: fix retry handling to not leak temporary errors. On detecting that that an existing connection was shutdown by the other side, a 503 response leaked even though the request was retried on a fresh connection. [Stefan Eissing] * ) mod_rewrite: Add server directory to include path as mod_rewrite requires test_char.h. PR 66571 [Valeria Petrov <valeria.petrov(a)spinetix.com>] * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling of HTTP/2 requests in a forward proxy configuration. ... changelog too long, skipping 85 lines ... for async MPMs. PR 63300. [Rainer Jung] ==== apache2-prefork ==== Version update (2.4.57 -> 2.4.58) - Update to 2.4.58: * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream memory not reclaimed right away on RST (cve.mitre.org) When a HTTP/2 stream was reset (RST frame) by a client, there was a time window were the request's memory resources were not reclaimed immediately. Instead, de-allocation was deferred to connection close. A client could send new requests and resets, keeping the connection busy and open and causing the memory footprint to keep on growing. On connection close, all resources were reclaimed, but the process might run out of memory before that. This was found by the reporter during testing of CVE-2023-44487 (HTTP/2 Rapid Reset Exploit) with their own test client. During "normal" HTTP/2 use, the probability to hit this bug is very low. The kept memory would not become noticeable before the connection closes or times out. Users are recommended to upgrade to version 2.4.58, which fixes the issue. Credits: Will Dormann of Vul Labs * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with initial windows size 0 (cve.mitre.org) An attacker, opening a HTTP/2 connection with an initial window size of 0, was able to block handling of that connection indefinitely in Apache HTTP Server. This could be used to exhaust worker resources in the server, similar to the well known "slow loris" attack pattern. This has been fixed in version 2.4.58, so that such connection are terminated properly after the configured connection timeout. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.57. Users are recommended to upgrade to version 2.4.58, which fixes the issue. Credits: Prof. Sven Dietrich (City University of New York) * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read (cve.mitre.org) Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57. Credits: David Shoon (github/davidshoon) * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126: SSL routines::unexpected eof while reading" when using OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if available. [Rainer Jung] * ) mod_http2: improved early cleanup of streams. [Stefan Eissing] * ) mod_proxy_http2: improved error handling on connection errors while response is already underway. [Stefan Eissing] * ) mod_http2: fixed a bug that could lead to a crash in main connection output handling. This occured only when the last request on a HTTP/2 connection had been processed and the session decided to shut down. This could lead to an attempt to send a final GOAWAY while the previous write was still in progress. See PR 66646. [Stefan Eissing] * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value. Fixes PR66752. [Stefan Eissing] * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as described in RFC 8441. A new directive 'H2WebSockets on|off' has been added. The feature is by default not enabled. As also discussed in the manual, this feature should work for setups using "ProxyPass backend-url upgrade=websocket" without further changes. Special server modules for WebSockets will have to be adapted, most likely, as the handling if IO events is different with HTTP/2. HTTP/2 WebSockets are supported on platforms with native pipes. This excludes Windows. [Stefan Eissing] * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA]. in OCSP stapling. PR 66672. [Frank Meier <frank.meier ergon.ch>, covener] * ) mod_http2: fixed a bug in flushing pending data on an already closed connection that could lead to a busy loop, preventing the HTTP/2 session to close down successfully. Fixed PR 66624. [Stefan Eissing] * ) mod_http2: v2.0.15 with the following fixes and improvements - New directive 'H2EarlyHint name value' to add headers to a response, picked up already when a "103 Early Hints" response is sent. 'name' and 'value' must comply to the HTTP field restrictions. This directive can be repeated several times and header fields of the same names add. Sending a 'Link' header with 'preload' relation will also cause a HTTP/2 PUSH if enabled and supported by the client. - Fixed an issue where requests were not logged and accounted in a timely fashion when the connection returns to "keepalive" handling, e.g. when the request served was the last outstanding one. This led to late appearance in access logs with wrong duration times reported. - Accurately report the bytes sent for a request in the '%O' Log format. This addresses #203, a long outstanding issue where mod_h2 has reported numbers over-eagerly from internal buffering and not what has actually been placed on the connection. The numbers are now the same with and without H2CopyFiles enabled. [Stefan Eissing] * ) mod_proxy_http2: fix retry handling to not leak temporary errors. On detecting that that an existing connection was shutdown by the other side, a 503 response leaked even though the request was retried on a fresh connection. [Stefan Eissing] * ) mod_rewrite: Add server directory to include path as mod_rewrite requires test_char.h. PR 66571 [Valeria Petrov <valeria.petrov(a)spinetix.com>] * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling of HTTP/2 requests in a forward proxy configuration. ... changelog too long, skipping 85 lines ... for async MPMs. PR 63300. [Rainer Jung] ==== apache2-utils ==== Version update (2.4.57 -> 2.4.58) - Update to 2.4.58: * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream memory not reclaimed right away on RST (cve.mitre.org) When a HTTP/2 stream was reset (RST frame) by a client, there was a time window were the request's memory resources were not reclaimed immediately. Instead, de-allocation was deferred to connection close. A client could send new requests and resets, keeping the connection busy and open and causing the memory footprint to keep on growing. On connection close, all resources were reclaimed, but the process might run out of memory before that. This was found by the reporter during testing of CVE-2023-44487 (HTTP/2 Rapid Reset Exploit) with their own test client. During "normal" HTTP/2 use, the probability to hit this bug is very low. The kept memory would not become noticeable before the connection closes or times out. Users are recommended to upgrade to version 2.4.58, which fixes the issue. Credits: Will Dormann of Vul Labs * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with initial windows size 0 (cve.mitre.org) An attacker, opening a HTTP/2 connection with an initial window size of 0, was able to block handling of that connection indefinitely in Apache HTTP Server. This could be used to exhaust worker resources in the server, similar to the well known "slow loris" attack pattern. This has been fixed in version 2.4.58, so that such connection are terminated properly after the configured connection timeout. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.57. Users are recommended to upgrade to version 2.4.58, which fixes the issue. Credits: Prof. Sven Dietrich (City University of New York) * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read (cve.mitre.org) Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57. Credits: David Shoon (github/davidshoon) * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126: SSL routines::unexpected eof while reading" when using OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if available. [Rainer Jung] * ) mod_http2: improved early cleanup of streams. [Stefan Eissing] * ) mod_proxy_http2: improved error handling on connection errors while response is already underway. [Stefan Eissing] * ) mod_http2: fixed a bug that could lead to a crash in main connection output handling. This occured only when the last request on a HTTP/2 connection had been processed and the session decided to shut down. This could lead to an attempt to send a final GOAWAY while the previous write was still in progress. See PR 66646. [Stefan Eissing] * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value. Fixes PR66752. [Stefan Eissing] * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as described in RFC 8441. A new directive 'H2WebSockets on|off' has been added. The feature is by default not enabled. As also discussed in the manual, this feature should work for setups using "ProxyPass backend-url upgrade=websocket" without further changes. Special server modules for WebSockets will have to be adapted, most likely, as the handling if IO events is different with HTTP/2. HTTP/2 WebSockets are supported on platforms with native pipes. This excludes Windows. [Stefan Eissing] * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA]. in OCSP stapling. PR 66672. [Frank Meier <frank.meier ergon.ch>, covener] * ) mod_http2: fixed a bug in flushing pending data on an already closed connection that could lead to a busy loop, preventing the HTTP/2 session to close down successfully. Fixed PR 66624. [Stefan Eissing] * ) mod_http2: v2.0.15 with the following fixes and improvements - New directive 'H2EarlyHint name value' to add headers to a response, picked up already when a "103 Early Hints" response is sent. 'name' and 'value' must comply to the HTTP field restrictions. This directive can be repeated several times and header fields of the same names add. Sending a 'Link' header with 'preload' relation will also cause a HTTP/2 PUSH if enabled and supported by the client. - Fixed an issue where requests were not logged and accounted in a timely fashion when the connection returns to "keepalive" handling, e.g. when the request served was the last outstanding one. This led to late appearance in access logs with wrong duration times reported. - Accurately report the bytes sent for a request in the '%O' Log format. This addresses #203, a long outstanding issue where mod_h2 has reported numbers over-eagerly from internal buffering and not what has actually been placed on the connection. The numbers are now the same with and without H2CopyFiles enabled. [Stefan Eissing] * ) mod_proxy_http2: fix retry handling to not leak temporary errors. On detecting that that an existing connection was shutdown by the other side, a 503 response leaked even though the request was retried on a fresh connection. [Stefan Eissing] * ) mod_rewrite: Add server directory to include path as mod_rewrite requires test_char.h. PR 66571 [Valeria Petrov <valeria.petrov(a)spinetix.com>] * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling of HTTP/2 requests in a forward proxy configuration. ... changelog too long, skipping 85 lines ... for async MPMs. PR 63300. [Rainer Jung] ==== ceph ==== Version update (16.2.13.66+g54799ee0666 -> 16.2.14.66+g7aa6ce9419f) Subpackages: librados2 librbd1 - Update to 16.2.14-66-g7aa6ce9419f: + (bsc#1207765) rgw/rados: check_quota() uses real bucket owner + (bsc#1212559) pacific: os/bluestore: cumulative bluefs backport This notably includes: * os/bluestore: BlueFS fine grain locking * os/bluestore/bluefs: Fix improper vselector tracking in _flush_special() * os/bluestore: enable 4K allocation unit for BlueFS * os/bluestore/bluefs: Fix sync compactionA + (bsc#1213217) ceph.spec.in: Require fmt-devel < 10 + ceph.spec.in: enable build on riscv64 for openSUSE Factory + ceph.spec.in: Require Cython >= 0.29 but < 3 + cephadm: update to the latest container images: * registry.suse.com/ses/7.1/ceph/prometheus-server:2.37.6 * registry.suse.com/ses/7.1/ceph/prometheus-node-exporter:1.5.0 * registry.suse.com/ses/7.1/ceph/grafana:8.5.22 * registry.suse.com/ses/7.1/ceph/haproxy:2.0.31 - Drop ceph-test.changes (no longer necessary since using _multibuild) ==== chromaprint ==== - Drop fftw3-devel BuildRequires and Requires, pass DFFT_LIB=avfft to cmake, use the already present ffmpeg lib. - Use ldconfig_scriptlets for post(un) handling. ==== dracut ==== Version update (059+suse.501.gc44a365d -> 059+suse.503.g41e99e72) - Update to version 059+suse.503.g41e99e72: * fix(dracut.spec): do not require libgcrypt20-hmac for dracut-fips (bsc#1216059) ==== freerdp ==== Version update (2.11.0 -> 2.11.2) Subpackages: libfreerdp2-2 libwinpr2-2 - Update to 2.11.2 * Backported #9356: Fix issues with order updates * Backported #9378: backported wArrayList (optional) copy on insert * Backported #9360: backported certificate algorithm detection ==== kernel-source ==== Version update (6.5.6 -> 6.5.8) - Linux 6.5.8 (bsc#1012628). - net: stmmac: remove unneeded stmmac_poll_controller (bsc#1012628). - RDMA/cxgb4: Check skb value for failure to allocate (bsc#1012628). - perf/arm-cmn: Fix the unhandled overflow status of counter 4 to 7 (bsc#1012628). - platform/x86: think-lmi: Fix reference leak (bsc#1012628). - drm/i915: Register engines early to avoid type confusion (bsc#1012628). - cpuidle, ACPI: Evaluate LPI arch_flags for broadcast timer (bsc#1012628). - drm/amdgpu: Fix a memory leak (bsc#1012628). - platform/x86: hp-wmi:: Mark driver struct with __refdata to prevent section mismatch warning (bsc#1012628). - media: dt-bindings: imx7-csi: Make power-domains not required for imx8mq (bsc#1012628). - drm/amd/display: implement pipe type definition and adding accessors (bsc#1012628). - drm/amd/display: apply edge-case DISPCLK WDIVIDER changes to master OTG pipes only (bsc#1012628). - scsi: Do not rescan devices with a suspended queue (bsc#1012628). - ata: pata_parport: fix pata_parport_devchk (bsc#1012628). - ata: pata_parport: implement set_devctl (bsc#1012628). - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (bsc#1012628). - quota: Fix slow quotaoff (bsc#1012628). - dm crypt: Fix reqsize in crypt_iv_eboiv_gen (bsc#1012628). - ASoC: amd: yc: Fix non-functional mic on Lenovo 82YM (bsc#1012628). - ASoC: hdmi-codec: Fix broken channel map reporting (bsc#1012628). - ata: libata-scsi: Disable scsi device manage_system_start_stop (bsc#1012628). - net: prevent address rewrite in kernel_bind() (bsc#1012628). - arm64: dts: qcom: sm8150: extend the size of the PDC resource (bsc#1012628). - dt-bindings: interrupt-controller: renesas,rzg2l-irqc: Update description for '#interrupt-cells' property (bsc#1012628). - irqchip: renesas-rzg2l: Fix logic to clear TINT interrupt source (bsc#1012628). - KEYS: trusted: Remove redundant static calls usage (bsc#1012628). - ALSA: usb-audio: Fix microphone sound on Opencomm2 Headset (bsc#1012628). - ALSA: usb-audio: Fix microphone sound on Nexigo webcam (bsc#1012628). - ALSA: hda: cs35l41: Cleanup and fix double free in firmware request (bsc#1012628). - ALSA: hda/realtek: Change model for Intel RVP board (bsc#1012628). - ASoC: SOF: amd: fix for firmware reload failure after playback (bsc#1012628). - ASoC: simple-card-utils: fixup simple_util_startup() error handling (bsc#1012628). - ASoC: Intel: soc-acpi: fix Dell SKU 0B34 (bsc#1012628). - ASoC: Intel: soc-acpi: Add entry for HDMI_In capture support in MTL match table (bsc#1012628). - ASoC: fsl_sai: Don't disable bitclock for i.MX8MP (bsc#1012628). - ASoC: Intel: sof_sdw: add support for SKU 0B14 (bsc#1012628). - ASoC: Intel: soc-acpi: Add entry for sof_es8336 in MTL match table (bsc#1012628). - ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable mute LED (bsc#1012628). - ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360 15-eu0xxx (bsc#1012628). - ALSA: hda/realtek - ALC287 I2S speaker platform support (bsc#1012628). - ALSA: hda/realtek - ALC287 merge RTK codec with CS CS35L41 AMP (bsc#1012628). - pinctrl: nuvoton: wpcm450: fix out of bounds write (bsc#1012628). - pinctrl: starfive: jh7110: Fix failure to set irq after CONFIG_PM is enabled (bsc#1012628). - drm/msm/dp: do not reinitialize phy unless retry during link training (bsc#1012628). - drm/msm/dsi: skip the wait for video mode done if not applicable (bsc#1012628). - drm/msm/dsi: fix irq_of_parse_and_map() error checking (bsc#1012628). - drm/msm/dpu: change _dpu_plane_calc_bw() to use u64 to avoid overflow (bsc#1012628). - drm/msm/dp: Add newlines to debug printks (bsc#1012628). - drm/msm/dpu: fail dpu_plane_atomic_check() based on mdp clk limits (bsc#1012628). - phy: lynx-28g: cancel the CDR check work item on the remove path (bsc#1012628). - phy: lynx-28g: lock PHY while performing CDR lock workaround (bsc#1012628). - phy: lynx-28g: serialize concurrent phy_set_mode_ext() calls to shared registers (bsc#1012628). - net: dsa: qca8k: fix regmap bulk read/write methods on big endian systems (bsc#1012628). - net: dsa: qca8k: fix potential MDIO bus conflict when accessing internal PHYs via management frames (bsc#1012628). - can: isotp: isotp_sendmsg(): fix TX state detection and wait behavior (bsc#1012628). - can: sun4i_can: Only show Kconfig if ARCH_SUNXI is set ... changelog too long, skipping 501 lines ... - commit 3169a10 ==== libdrm ==== Version update (2.4.116 -> 2.4.117) Subpackages: libdrm2 libdrm_amdgpu1 libdrm_intel1 libdrm_nouveau2 libdrm_radeon1 - Update to 2.4.117 * modetest: print modifiers in hex as well * modetest: custom mode support * meson: fix intel requirements * meson: Use feature.require() and feature.allowed() * meson: replace deprecated program.path -> program.full_path * modetest: avoid erroring if there's no gamma legacy support * amdgpu: Fix pointer/integer mismatch warning * amdgpu: Use PRI?64 to format uint64_t * util: add NV24 and NV42 frame buffer formats * util: add pattern support for DRM_FORMAT_NV{24,42} * modetest: add support for DRM_FORMAT_NV{24,42} * util: fix grey in YUV SMPTE patterns * modetest: fix mode_vrefresh() for interlace/dblscan/vscan * util: remove unused definitions of RED, GREEN, and BLUE * amdgpu: add marketing names from amd-5.4.6 (22.40.6) * amdgpu: add marketing names from amd-5.5.1 (23.10.1) * amdgpu: add marketing names from PRO Edition 23.Q3 W7000 * amdgpu: add marketing names from Adrenalin 23.7.2 * amdgpu: add marketing names from Adrenalin 23.9.1 * modetest: document why no blob is created for linear gamma LUT * modetest: allocate and commit atomic request around set_property() * modetest: permit -r and -s to work together * modetest: allow using -r and -P * modetest: add support for writeback connector * amdgpu: amdgpu_drm.h for new GPUVM fault ioctl * amdgpu: add support for querying VM faults information * xf86drm: mark DRM_MAX_MINOR as deprecated * ci: bump FreeBSD to 13.2 ==== libstorage-ng ==== Version update (4.5.143 -> 4.5.149) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#955 - use _exit if exec fails - 4.5.149 - merge gh#openSUSE/libstorage-ng#954 - allow to disallow remove actions on some devices - improved tests - removed unneeded include statements - make more use of new SystemCmd interface - increase minor library version - 4.5.148 - merge gh#openSUSE/libstorage-ng#953 - support RAID level LINEAR (bsc#1215022) - 4.5.147 - merge gh#openSUSE/libstorage-ng#952 - extended testsuite - 4.5.146 - merge gh#openSUSE/libstorage-ng#951 - allow SystemCmd to take a vector with command arguments - fixed typo - added integration tests - 4.5.145 - merge gh#openSUSE/libstorage-ng#950 - allow to disable use of key file in commit - added note - 4.5.144 ==== pipewire ==== Version update (0.3.82 -> 0.3.83) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-jack pipewire-lang pipewire-libjack-0_3 pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Update to version 0.3.83: * Highlights - A quantum change regression was fixed. - Use a 2 socket server now for the manager and the applications with (when wireplumber is updated) different permissions. - Reduce memory usage a little in audioconvert and use fewer buffers. - Some JACK deadlocks were fixed. - More bugfixes and improvements. * PipeWire - Fix quantum change regression. - Use a 2 socket server by default. One for the session-manager and one for applications. - Fix a potential use-after-free in node and device cleanup. * modules - Some hardcoded buffer size limits were removed. - Fix ASYNC flag on combined-streams. - Add support for on-demand combined-streams using metadata. * SPA - alsa-udev will now ignore PCMs with the ACP_IGNORE udev environment variable. - The audioadapter now uses at least 2 buffers when the follower is async. - The number of buffers used by plugins was tweaked a little. Most plugins now only ask 1 buffer. - Memory usage in audioconvert was reduced. - Fix some unaligned reads and writes and undefined left shifts reported by ASAN. - Rework vulkan dependency checking. - Don't try to link ALSA devices when prepare fails. This fixes some crashes. - Fix a stall when the allowed codecs are changed in ALSA. - Improve ALSA rate control for sources to avoid xruns. - Try to fix IEC958 TrueHD and DTS playback. * Bluetooth - Improve fallback SCO mtu when the kernel doesn't tell us. * JACK - The fixed buffer size limit was removed. - Add an option to make input buffers writable (default true). - A potential deadlock was fixed when applications lock the process function. - Use a separate thread to dispatch notifications to avoid deadlocks. - Potentially fix silent export in ardour in some cases. ==== xcb-util-cursor ==== Version update (0.1.4 -> 0.1.5) - Update to version 0.1.5 * This release sets the close-on-exec flag when opening files on platforms that support O_CLOEXEC, and resyncs the _XcursorThemeInherits code with libXcursor, including a fix for an off-by-one error in memory allocation that triggered errors from AddressSanitizer. ==== xfce4-terminal ==== Version update (1.1.0 -> 1.1.1) Subpackages: xfce4-terminal-lang - Update to version 1.1.1 * build: Simplify and clarify X11/Wayland distinction * Fix xfce_titled_dialog_create_action_area() deprecation * build: Define our own windowing macro instead of extending GDK's * wayland: Fix drop-down keep-above for non-prefs dialogs * wayland: Fix drop-down terminal keep-above * wayland: Fix window activation * wayland: Fix drop-down terminal positioning (Fixes #141) * wayland: Fix new window size * Replace XDT_CHECK_LIBX11 and use HAVE_LIBX11 when appropriate * Use the same windowing environment test everywhere * Fix build when X11 is disabled * drop-down: Make settings easier to understand * drop-down: Fix allocation warnings * Apply 7 suggestion(s) to 2 file(s) * Save and restore terminal window workspace in X11 session * doc: Remove reference to terminalrc * app: Put GtkSettings:gtk-menu-bar-accel overwrite back in place * Translation Updates ==== yast2-storage-ng ==== Version update (5.0.1 -> 5.0.3) - GuidedProposal: new internal setting to control how existing swap partitions are reused. Relevant for Agama and related to bsc#1175535 and bsc#1215639. - 5.0.3 - New MdLevel value for linear RAIDs (bsc#1215022) - 5.0.2

1 0

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 23 Oct '23

23 Oct '23

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have had problems for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - hylafax+: Fails to build Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

2 1

Snapshot 20231020, problem with librav1e0
by Oliver Schwabedissen 22 Oct '23

22 Oct '23

Hello, this is probably a consequence of the problem with tumbleweed-cli. When trying to install snapshot 20231020 zypper wants to downgrade librav1e0and then asks me to insert a cd... The following package is going to be downgraded: librav1e0 1package to downgrade. Overall download size: 929.7 KiB. Already cached: 0 B. After the operation, 108.0 KiB will be freed. Continue? [y/n/v/...? shows all options] (y): Retrieving: librav1e0-0.6.4+0-1.3.x86_64 (openSUSE-20230917-0) (1/1), 929.7 KiB Failed to mount cd:/?devices=/dev/disk/by-id/wwn-0x5001480000000000 on /var/tmp/AP_0xRJd0ky: Mounting media failed ( dmesg(1) may have more information after failed mount system call. Please insert medium [openSUSE-20230917-0] #1 and type 'y' to continue or 'n' to cancel the operation. [yes/no] (no): For the moment I have locked librav1e0. I tried to remove the package and then reinstall it, but removing the package would result in the removal of KDE :-(. The following 3 patterns are going to be REMOVED: kde 20230801-1.1 kde_imaging 20230801-1.1 kde_plasma 20230801-1.1 189packages to remove. After the operation, 1.8 GiB will be freed. I found that I have two versions of librav1e: Name : librav1e0 Version : 0.6.4+0 Release : 1.4 Architecture: x86_64 Install Date: Wed Oct 11 17:53:07 2023 Group : System/Libraries Size : 3145285 License : BSD-2-Clause Signature : RSA/SHA512, Mon Oct 9 11:02:22 2023, Key ID 35a2f86e29b700a4 Source RPM : rav1e-0.6.4+0-1.4.src.rpm Build Date : Mon Oct 9 10:57:08 2023 Build Host : i04-ch1d Packager : https://bugs.opensuse.org Vendor : openSUSE URL : https://github.com/xiph/rav1e Summary : AV1 encoder library And, installed today: Name : librav1e0_6 Version : 0.6.6 Release : 1.1 Architecture: x86_64 Install Date: Sun Oct 22 09:55:46 2023 Group : System/Libraries Size : 3362373 License : BSD-2-Clause AND ISC Signature : RSA/SHA512, Sat Oct 21 00:23:09 2023, Key ID 35a2f86e29b700a4 Source RPM : rav1e-0.6.6-1.1.src.rpm Build Date : Sat Oct 21 00:20:17 2023 Build Host : i01-ch1d Packager : https://bugs.opensuse.org Vendor : openSUSE URL : https://github.com/xiph/rav1e Summary : AV1 encoder library Any idea of how to fix this? Regards, Oliver -- PGP Public Key available at https://pgp.mit.edu/ Key fingerprint = 3264 280C 05B1 572F 3F0B 42B8 1E7B 2D9D 063B D507

2 2

New Tumbleweed snapshot 20231020 released!
by Dominique Leuenberger 21 Oct '23

21 Oct '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: glibc gpg2 kcalendarcore libgcrypt libgpg-error libheif (1.16.2 -> 1.17.1) libqt5-qtbase (5.15.11+kde134 -> 5.15.11+kde138) libsndfile (1.2.0 -> 1.2.2) libxkbcommon (1.5.0 -> 1.6.0) man (2.11.2 -> 2.12.0) nftables (1.0.8 -> 1.0.9) openssl-3 perl-CryptX (0.078 -> 0.80.0) python-typing_extensions (4.7.1 -> 4.8.0) sdbootutil (1+git20230817.2a3cd34 -> 1+git20231005.890f70c) sg3_utils (1.48+1.889c3e3 -> 1.48+3.b642f6a) sqlite3 (3.42.0 -> 3.43.2) vorbis-tools yast2 (4.6.2 -> 5.0.1) yast2-add-on (4.6.1 -> 5.0.0) yast2-alternatives (4.6.0 -> 5.0.0) yast2-auth-client (4.6.1 -> 5.0.0) yast2-auth-server (4.6.2 -> 5.0.0) yast2-configuration-management (4.6.0 -> 5.0.0) yast2-control-center (4.6.1 -> 5.0.0) yast2-core (4.6.0 -> 5.0.0) yast2-firewall (4.6.0 -> 5.0.0) yast2-firstboot (4.6.1 -> 5.0.0) yast2-ftp-server (4.6.0 -> 5.0.0) yast2-hardware-detection (4.6.0 -> 5.0.0) yast2-iscsi-client (4.6.0 -> 5.0.1) yast2-journal (4.6.0 -> 5.0.0) yast2-kdump (4.6.1 -> 5.0.0) yast2-ldap (4.6.0 -> 5.0.0) yast2-mail (4.6.0 -> 5.0.0) yast2-metapackage-handler (4.6.0 -> 5.0.0) yast2-multipath (4.6.0 -> 5.0.0) yast2-network (4.6.5 -> 5.0.0) yast2-nfs-client (4.6.1 -> 5.0.0) yast2-nfs-server (4.6.0 -> 5.0.0) yast2-ntp-client (4.6.0 -> 5.0.0) yast2-online-update (4.6.1 -> 5.0.0) yast2-packager (4.6.2 -> 5.0.1) yast2-pam (4.6.0 -> 5.0.0) yast2-perl-bindings (4.6.0 -> 5.0.0) yast2-pkg-bindings (4.6.2 -> 5.0.2) yast2-printer (4.6.0 -> 5.0.0) yast2-proxy (4.6.0 -> 5.0.0) yast2-ruby-bindings (4.6.2 -> 5.0.0) yast2-samba-client (4.6.1 -> 5.0.0) yast2-samba-server (4.6.0 -> 5.0.0) yast2-scanner (4.6.0 -> 5.0.0) yast2-security (4.6.0 -> 5.0.0) yast2-services-manager (4.6.1 -> 5.0.0) yast2-slp (4.6.0 -> 5.0.0) yast2-snapper (4.6.1 -> 5.0.0) yast2-squid (4.6.0 -> 5.0.0) yast2-sysconfig (4.6.0 -> 5.0.0) yast2-tftp-server (4.6.0 -> 5.0.0) yast2-theme (4.6.0 -> 5.0.1) yast2-transfer (4.6.0 -> 5.0.0) yast2-tune (4.6.0 -> 5.0.0) yast2-update (4.6.1 -> 5.0.0) yast2-vm (4.6.1 -> 5.0.0) yast2-xml (4.6.0 -> 5.0.0) yast2-ycp-ui-bindings (4.6.0 -> 5.0.0) === Details === ==== glibc ==== Subpackages: glibc-32bit glibc-devel glibc-extra glibc-lang glibc-locale glibc-locale-base nscd - dtors-reverse-ctor-order.patch: Remove, has been reverted - Avoid use of SSE in i586 build - Add systemd also to gshadow lookups (jsc#PED-5188) - For SLE continue to use nsswitch.conf without systemd ==== gpg2 ==== Subpackages: dirmngr gpg2-lang - Do not pull revision info from GIT when autoconf is run. This removes the -unknown suffix after the version number. * Add gnupg-nobetasuffix.patch [bsc#1216334] ==== kcalendarcore ==== - Add upstream change (kde#421400, boo#1171450): * 0001-ICalFormat-don-t-shift-all-day-invite-dates-to-UTC.patch ==== libgcrypt ==== Subpackages: libgcrypt20 libgcrypt20-32bit - Do not pull revision info from GIT when autoconf is run. This removes the -unknown suffix after the version number. * Add libgcrypt-nobetasuffix.patch [bsc#1216334] ==== libgpg-error ==== Subpackages: libgpg-error0 libgpg-error0-32bit - Do not pull revision info from GIT when autoconf is run. This removes the -unknown suffix after the version number. * Add libgpg-error-nobetasuffix.patch [bsc#1216334] ==== libheif ==== Version update (1.16.2 -> 1.17.1) Subpackages: gdk-pixbuf-loader-libheif libheif-rav1e libheif-svtenc libheif1 - update to 1.17.1: * fix issue of loading images with premultiplied alpha channel * correctly set compatible_version for macOS dylib builds * fix loading HDR PNGs, but encoding them as 8-bit SDR * fix saving AVIF with alpha using the SVT-AV1 encoder - cmake-presets version 3 requires cmake >= 3.21 - update to 1.17.0: * Kvazaar encoder (HEIC) as alternative to x265 * ffmpeg decoder (HEIC) decoding with potential hardware decoder support * jpegdec / jpegenc codecs for JPEG in HEIF * j2kdec, j2kenc codecs for JPEG-2000 in HEIF (still experimental) * added support for region masks * added support for alpha channels in images decoded with JS/WASM * heif-enc and heif-convert can be called with only input filenames, input and output filename, or with -o option. This makes the use of the two command more consistent. * added 4:2:2 <-> 4:4:4 color conversion with bilinear upscaling / average filtering * heif_context_get_image_handle() can now also access non-top-level images * add script to build Android libraries for all platforms * known bugs have been fixed ==== libqt5-qtbase ==== Version update (5.15.11+kde134 -> 5.15.11+kde138) Subpackages: libQt5Concurrent5 libQt5Core5 libQt5DBus5 libQt5Gui5 libQt5Network5 libQt5OpenGL5 libQt5PrintSupport5 libQt5Sql5 libQt5Sql5-mysql libQt5Sql5-sqlite libQt5Test5 libQt5Widgets5 libQt5Xml5 libqt5-qtbase-platformtheme-gtk3 - Update to version 5.15.11+kde138: * QLibraryPrivate: Actually merge load hints * QPluginLoader: report the right load hints * xkb: fix build with libxkbcommon 1.6.0 and later * a11y atspi: Map ButtonMenu role to AT-SPI equivalent ==== libsndfile ==== Version update (1.2.0 -> 1.2.2) - Update to 1.2.1: * Various bug fixes (issue #908, #907, #934, #950, #930) - Update to 1.2.2: * Fixed invalid regex in src/create_symbols_file.py * Fixed passing null pointer to printf %s in tests - Fix signed integers overflows in au_read_header() (bsc#121345, CVE-2022-33065): libsndfile-CVE-2022-33065.patch ==== libxkbcommon ==== Version update (1.5.0 -> 1.6.0) Subpackages: libxkbcommon-x11-0 libxkbcommon0 libxkbregistry0 - Update to release 1.6.0 * Remove keysyms: XKB_KEY_dead_lowline, XKB_KEY_dead_aboveverticalline, XKB_KEY_dead_belowverticalline, XKB_KEY_dead_longsolidusoverlay * Add Compose iterator API to iterate the entries in a compose table. * Structured log messages with a message registry. There is an ongoing work to assign unique identifiers to log messages and add a corresponding error index documentation page. * Add a new warning for numeric keysyms references in XKB files: the preferred keysym reference form is its name or its Unicode value, if relevant. * Add the upper bound `XKB_KEYSYM_MAX` to check valid keysyms. * Add a warning when loading a keymap using RMLVO with no layout but with the variant set. * Add support for ``modifier_map None { â¦ }``. This feature is missing compared to the X11 implementation. It allows to reset the modifier map of a key. ==== man ==== Version update (2.11.2 -> 2.12.0) - Update to 2.12.0: * Fix some manual page portability issues with groff 1.23.0. * Fix test failures when a working `iconv` is not available. * Ensure that timestamps read from the database can go past the year 2038, even on systems where this is not the default. * Fix `manpath` not parsing `PATH` entries with trailing slash correctly for guessing `MANPATH` entries. * More accurately document the behaviour of passing file names as arguments to `man` without the `-l`/`--local-file` option. * Avoid duplicate cleanup of old cat pages by both `man-db.service` and `systemd-tmpfiles-clean.service`. Improvements: * Update system call lists in `seccomp` sandbox from `systemd`. * Upgrade to Gnulib `stable-202307`. * Work around the Firebuild accelerator in `seccomp` sandbox: if this is in use then we need to allow some socket-related system calls. * `man -K` now deduplicates search results that point to the same page. * Warn if `mandb` drops to `--user-db` mode due to running as the wrong user. * Change section title recommendations in `man(1)` to mention `STANDARDS` rather than `CONFORMING TO`, in line with `man-pages(7)`. * Add a `STANDARDS` section to `man(1)` itself. * Document that `man -K` may suffer from false negatives as well as false positives. * Take advantage of newer `groff` facilities to implement `man - -no-hyphenation` and `man --no-justification`, if available. * `man -f` and `man -k` now pass any `-r`/`--regex` or `-w`/`--wildcard` options on to `whatis` and `apropos` respectively. * Always pass a line length to `nroff`, even if we believe that it matches the default. * Allow disabling `groff` warnings via `man --warnings`, by prefixing a warning name with `!`. - Drop man-db-groff-1.23.0-warnings.patch - Refresh man-db-2.9.4.patch ==== nftables ==== Version update (1.0.8 -> 1.0.9) Subpackages: libnftables1 - Update to release 1.0.9 * Custom conntrack timeouts can use time specification with units other than seconds. * Allow combination of dnat with numgen. * Allow for using constants as key in dynamic sets. * Support for matching on the target address of a IPv6 neighbour solicitation/advertisement. * Restore bitwise operations in combination with maps, e.g. jump to chain depending on bitwise operation on packet mark. * Fix crash with log prefix longer that 127 bytes. - Drop merged 0001-Revert-py-replace-distutils-with-setuptools.patch ==== openssl-3 ==== Subpackages: libopenssl3 libopenssl3-32bit - As of openssl 3.1.3, the devel package installs at least 5200 manpage files and is the owner of the most files in the man3 directory (in second place after lapack-man); move these manpages off to the -doc subpackage to reduce the walltime to install just openssl-3-devel (because there is also an invocation of mandb that runs at some point). ==== perl-CryptX ==== Version update (0.078 -> 0.80.0) - updated to 0.080 see /usr/share/doc/packages/perl-CryptX/Changes 0.080 2023-10-04 - fix #95 AES-NI troubles on MS Windows (gcc compiler) - fix #96 Tests failure with Math::BigInt >= 1.999840 - Enabled AES-NI for platforms with gcc/clang/llvm 0.079 2023-10-01 - fix #92 update libtomcrypt - bundled libtomcrypt update branch:develop (commit:1e629e6f 2023-06-22) ==== python-typing_extensions ==== Version update (4.7.1 -> 4.8.0) - Update to 4.8.0: - Add typing_extensions.Doc, as proposed by PEP 727 - Drop support for Python 3.7 (including PyPy-3.7) - Fix bug where get_original_bases() would return incorrect results when called on a concrete subclass of a generic class - Fix bug where ParamSpec(default=...) would raise a TypeError on Python versions <3.11 ==== sdbootutil ==== Version update (1+git20230817.2a3cd34 -> 1+git20231005.890f70c) Subpackages: sdbootutil-rpm-scriptlets sdbootutil-snapper - Add changes from gh#openSUSE/sdbootutil#21: * sdbootutil.spec: Add missing efibootmgr dependency * sdbootutil.spec: Make sdbootutil-snapper a hard dependency - Update to version 1+git20231005.890f70c: * Add --no-reuse-initrd option * Refactor boot descriptive entries * feat: more descriptive bootmenu entries * Remove stray set -x * speed up snapper list * Fix misleading comment * Fix helptext ==== sg3_utils ==== Version update (1.48+1.889c3e3 -> 1.48+3.b642f6a) Subpackages: libsgutils2-1_48-2 - rescan-scsi-bus.sh: remove /tmp/rescan-scsi-mpath-info.txt (gh#doug-gilbert/sg3_utils#44) - rescan_scsi_bus.sh: fix multipath issue when called with -s and without -u (bsc#1215720, bsc#1216355) ==== sqlite3 ==== Version update (3.42.0 -> 3.43.2) Subpackages: libsqlite3-0 sqlite3-tcl - sqlite3-rtree-i686.patch: temporary build fix for 32-bit x86. - Update to: 3.43.2: * Fix a couple of obscure UAF errors and an obscure memory leak. * Omit the use of the sprintf() function from the standard library in the CLI, as this now generates warnings on some platforms. * Avoid conversion of a double into unsigned long long integer, as some platforms do not do such conversions correctly. - Update to: 3.43.1 * Fix a regression in the way that the sum(), avg(), and total() aggregate functions handle infinities. * Fix a bug in the json_array_length() function that occurs when the argument comes directly from json_remove(). * Fix the omit-unused-subquery-columns optimization (introduced in in version 3.42.0) so that it works correctly if the subquery is a compound where one arm is DISTINCT and the other is not. - Update to 3.43.0: * Add support for Contentless-Delete FTS5 Indexes. This is a variety of FTS5 full-text search index that omits storing the content that is being indexed while also allowing records to be deleted. * Enhancements to the date and time functions: + Added new time shift modifiers of the form Â±YYYY-MM-DD HH:MM:SS.SSS. + Added the timediff() SQL function. * Added the octet_length(X) SQL function. * Added the sqlite3_stmt_explain() API. * Query planner enhancements: + Generalize the LEFT JOIN strength reduction optimization so that it works for RIGHT and FULL JOINs as well. Rename it to OUTER JOIN strength reduction. + Enhance the theorem prover in the OUTER JOIN strength reduction optimization so that it returns fewer false-negatives. * Enhancements to the decimal extension: + New function decimal_pow2(N) returns the N-th power of 2 for integer N between -20000 and +20000. + New function decimal_exp(X) works like decimal(X) except that it returns the result in exponential notation - with a "e+NN" at the end. + If X is a floating-point value, then the decimal(X) function now does a full expansion of that value into its exact decimal equivalent. * Performance enhancements to JSON processing results in a 2x performance improvement for some kinds of processing on large JSON strings. * The VFS for unix now assumes that the nanosleep() system call is available unless compiled with -DHAVE_NANOSLEEP=0. ==== vorbis-tools ==== Subpackages: vorbis-tools-lang - Fix buffer overflow vulnerability during the conversion of wav files to ogg files (bsc#1215942, CVE-2023-43361): vorbis-tools-CVE-2023-43361.patch ==== yast2 ==== Version update (4.6.2 -> 5.0.1) Subpackages: yast2-logs - Fix case-insensitive finding of LICENSE.*.TXT (bsc#1215698) - 5.0.1 - 5.0.0 (bsc#1185510) ==== yast2-add-on ==== Version update (4.6.1 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-alternatives ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-auth-client ==== Version update (4.6.1 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-auth-server ==== Version update (4.6.2 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-configuration-management ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-control-center ==== Version update (4.6.1 -> 5.0.0) Subpackages: yast2-control-center-qt - 5.0.0 (bsc#1185510) ==== yast2-core ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-firewall ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-firstboot ==== Version update (4.6.1 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-ftp-server ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-hardware-detection ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-iscsi-client ==== Version update (4.6.0 -> 5.0.1) - Add support packages on demand (bsc#1214273) - 5.0.1 - 5.0.0 (bsc#1185510) ==== yast2-journal ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-kdump ==== Version update (4.6.1 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-ldap ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-mail ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-metapackage-handler ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-multipath ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-network ==== Version update (4.6.5 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-nfs-client ==== Version update (4.6.1 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-nfs-server ==== Version update (4.6.0 -> 5.0.0) Subpackages: yast2-nfs-common - 5.0.0 (bsc#1185510) ==== yast2-ntp-client ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-online-update ==== Version update (4.6.1 -> 5.0.0) Subpackages: yast2-online-update-frontend - 5.0.0 (bsc#1185510) ==== yast2-packager ==== Version update (4.6.2 -> 5.0.1) - Properly save the repo file when changing URL of a repository from a service (bsc#1214135) - Also display a warning when changing URL of a service repository, the change might be lost after the service is refreshed - 5.0.1 - 5.0.0 (bsc#1185510) ==== yast2-pam ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-perl-bindings ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-pkg-bindings ==== Version update (4.6.2 -> 5.0.2) - Pkg.SourceEditSet() - Allow setting the repository service name (related to bsc#1214135) - 5.0.2 - Fixed crash in the Pkg.Commit() function when passing "exclude_docs" or "no_signature" options (bsc#1215238) - 5.0.1 - 5.0.0 (bsc#1185510) ==== yast2-printer ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-proxy ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-ruby-bindings ==== Version update (4.6.2 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-samba-client ==== Version update (4.6.1 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-samba-server ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-scanner ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-security ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-services-manager ==== Version update (4.6.1 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-slp ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-snapper ==== Version update (4.6.1 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-squid ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-sysconfig ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-tftp-server ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-theme ==== Version update (4.6.0 -> 5.0.1) Subpackages: yast2-theme-breeze - Dropped unmaintained "gulp-stylelint" internal development dependency - Manually updated the internal development dependencies to the latest NPM packages - The stylesheets have been rebuilt with the new dependencies - Updated README.md - 5.0.1 - 5.0.0 (bsc#1185510) ==== yast2-transfer ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-tune ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-update ==== Version update (4.6.1 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-vm ==== Version update (4.6.1 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-xml ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-ycp-ui-bindings ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510)

1 0

tumbleweed-cli stopped working
by Oliver Schwabedissen 21 Oct '23

21 Oct '23

Hello, I noticed that tumbleweed-cli stopped working between snapshots 20231017 and 20231018. Has something been changed? tumbleweed status gives me: tumbleweed status latest : target : 20231017 installed: 20231017 tumbleweed switch gives an error: tumbleweed switch Unable to determine latest version (likely due to network connection issue) zypper dup works, it installs updates from packman, but not from Tumbleweed repository, as 20231017 is still the latest snapshot. Repository 'Haupt-Repository (NON-OSS) (20231017)' is up to date. Repository 'Haupt-Repository (OSS) (20231017)' is up to date. Regards, Oliver -- PGP Public Key available at https://pgp.mit.edu/ Key fingerprint = 3264 280C 05B1 572F 3F0B 42B8 1E7B 2D9D 063B D507

3 4

New Tumbleweed snapshot 20231019 released!
by Dominique Leuenberger 20 Oct '23

20 Oct '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: AppStream attica-qt5 (5.110.0 -> 5.111.0) baloo5 (5.110.0 -> 5.111.0) bluez-qt (5.110.0 -> 5.111.0) breeze5-icons (5.110.0 -> 5.111.0) emacs frameworkintegration (5.110.0 -> 5.111.0) iptables (1.8.9 -> 1.8.10) java-11-openjdk (11.0.20.1 -> 11.0.21.0) kactivities-stats (5.110.0 -> 5.111.0) kactivities5 (5.110.0 -> 5.111.0) karchive (5.110.0 -> 5.111.0) kauth (5.110.0 -> 5.111.0) kbookmarks (5.110.0 -> 5.111.0) kcalendarcore (5.110.0 -> 5.111.0) kcmutils (5.110.0 -> 5.111.0) kcodecs (5.110.0 -> 5.111.0) kcompletion (5.110.0 -> 5.111.0) kconfig (5.110.0 -> 5.111.0) kconfigwidgets (5.110.0 -> 5.111.0) kcontacts (5.110.0 -> 5.111.0) kcoreaddons (5.110.0 -> 5.111.0) kcrash (5.110.0 -> 5.111.0) kdav (5.110.0 -> 5.111.0) kdbusaddons (5.110.0 -> 5.111.0) kdeclarative (5.110.0 -> 5.111.0) kded (5.110.0 -> 5.111.0) kdelibs4support (5.110.0 -> 5.111.0) kdesu (5.110.0 -> 5.111.0) kdnssd-framework (5.110.0 -> 5.111.0) kdoctools (5.110.0 -> 5.111.0) kfilemetadata5 (5.110.0 -> 5.111.0) kglobalaccel (5.110.0 -> 5.111.0) kguiaddons (5.110.0 -> 5.111.0) kholidays (5.110.0 -> 5.111.0) khtml (5.110.0 -> 5.111.0) ki18n (5.110.0 -> 5.111.0) kiconthemes (5.110.0 -> 5.111.0) kidletime (5.110.0 -> 5.111.0) kimageformats (5.110.0 -> 5.111.0) kinit (5.110.0 -> 5.111.0) kio (5.110.0 -> 5.111.0) kirigami2 (5.110.0 -> 5.111.0) kitemmodels (5.110.0 -> 5.111.0) kitemviews (5.110.0 -> 5.111.0) kjobwidgets (5.110.0 -> 5.111.0) kjs (5.110.0 -> 5.111.0) knewstuff (5.110.0 -> 5.111.0) knotifications (5.110.0 -> 5.111.0) knotifyconfig (5.110.0 -> 5.111.0) kpackage (5.110.0 -> 5.111.0) kparts (5.110.0 -> 5.111.0) kpeople5 (5.110.0 -> 5.111.0) kplotting (5.110.0 -> 5.111.0) kpty (5.110.0 -> 5.111.0) kquickcharts (5.110.0 -> 5.111.0) kross (5.110.0 -> 5.111.0) krunner (5.110.0 -> 5.111.0) kservice (5.110.0 -> 5.111.0) ktexteditor (5.110.0 -> 5.111.0) ktextwidgets (5.110.0 -> 5.111.0) kunitconversion (5.110.0 -> 5.111.0) kwallet (5.110.0 -> 5.111.0) kwayland (5.110.0 -> 5.111.0) kwidgetsaddons (5.110.0 -> 5.111.0) kwindowsystem (5.110.0 -> 5.111.0) kxmlgui (5.110.0 -> 5.111.0) lastlog2 libKF5ModemManagerQt (5.110.0 -> 5.111.0) libKF5NetworkManagerQt (5.110.0 -> 5.111.0) libnvme (1.6 -> 1.6+5.g68c6ffb) libplacebo (6.338.0 -> 6.338.1) libvirt oniguruma (6.9.8 -> 6.9.9) patterns-media plasma-framework (5.110.0 -> 5.111.0) prison-qt5 (5.110.0 -> 5.111.0) purpose (5.110.0 -> 5.111.0) python-urllib3 (2.0.6 -> 2.0.7) qqc2-desktop-style (5.110.0 -> 5.111.0) samba (4.19.1+git.312.c912b3d2ef6 -> 4.19.2+git.322.7e9201cef5) solid (5.110.0 -> 5.111.0) sonnet (5.110.0 -> 5.111.0) swtpm syndication (5.110.0 -> 5.111.0) syntax-highlighting (5.110.0 -> 5.111.0) threadweaver (5.110.0 -> 5.111.0) virglrenderer (0.9.1 -> 1.0.0) wsdd xf86-video-intel yast2-apparmor (4.6.2 -> 5.0.0) yast2-drbd (4.6.1 -> 5.0.0) yast2-sudo (4.6.1 -> 5.0.0) yast2-vpn (4.6.1 -> 5.0.0) === Details === ==== AppStream ==== Subpackages: AppStream-lang libAppStreamQt2 libappstream4 - Fix the documentation being put in the devel subpackage while the doc subpackage was empty. I think the doc %files section was probably removed inadvertently since it wasn't mentioned in the changelog and the doc subpackage declaration was left around. - Moved the appstreamcli-compose man page to the same package as the binary. - Make AppStream-compose-devel explicitly require libappstream-compose0 to stop rpmlint from reporting an error. ==== attica-qt5 ==== Version update (5.110.0 -> 5.111.0) Subpackages: libKF5Attica5 - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== baloo5 ==== Version update (5.110.0 -> 5.111.0) Subpackages: baloo5-file baloo5-file-lang baloo5-imports baloo5-kioslaves baloo5-kioslaves-lang baloo5-tools baloo5-tools-lang libKF5Baloo5 libKF5BalooEngine5 libKF5BalooEngine5-lang - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - Changes since 5.110.0: * Use the FSID as the device identifier where possible (kde#402154) ==== bluez-qt ==== Version update (5.110.0 -> 5.111.0) Subpackages: bluez-qt-imports bluez-qt-udev libKF5BluezQt6 - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== breeze5-icons ==== Version update (5.110.0 -> 5.111.0) - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== emacs ==== Subpackages: emacs-el emacs-eln emacs-info emacs-nox emacs-x11 etags - Only recommend at-spi2-core - Don't install gsettings schemas twice ==== frameworkintegration ==== Version update (5.110.0 -> 5.111.0) Subpackages: frameworkintegration-plugin libKF5Style5 - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== iptables ==== Version update (1.8.9 -> 1.8.10) Subpackages: libip4tc2 libip6tc2 libxtables12 xtables-plugins - Update to release 1.8.10 * xtables-translate: support rule insert with index * broute table support in ebtables-nft * nft-variants' debug output (pass multiple ``-v`` flags) now contains sets if present * Add mld-listener type names to icmp6 match - Use nftables backend by default when nftables is installed, bsc#1206383 ==== java-11-openjdk ==== Version update (11.0.20.1 -> 11.0.21.0) Subpackages: java-11-openjdk-headless - Configure with --with-native-debug-symbols=internal to enable generation of debuginfo packages - Upgrade to upstrem tag jdk-11.0.21+9 (October 2023 CPU) * Security fixes: + JDK-8242330: Arrays should be cloned in several JAAS Callback classes + JDK-8284910: Buffer clean in PasswordCallback + JDK-8286503: Enhance security classes + JDK-8296581: Better system proxy support + JDK-8297856: Improve handling of Bidi characters + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS connections + JDK-8305815: Update Libpng to 1.6.39 + JDK-8306881: Update FreeType to 2.13.0 * Other fixes: + JDK-6176679: Application freezes when copying an animated gif image to the system clipboard + JDK-8023980: JCE doesn't provide any class to handle RSA private key in PKCS#1 + JDK-8155246: Throw error if default java.security file is missing + JDK-8158880: test/java/time/tck/java/time/format/ /TCKDateTimeFormatterBuilder.java fail with zh_CN locale + JDK-8168261: Use server cipher suites preference by default + JDK-8181383: com/sun/jdi/OptionTest.java fails intermittently with bind failed: Address already in use + JDK-8201516: DebugNonSafepoints generates incorrect information + JDK-8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE" + JDK-8211343: nsk_jvmti_parseoptions should handle multiple suboptions + JDK-8212045: Add back the tests that were removed from HashesTest.java and AddExportsTest.java + JDK-8216059: nsk_jvmti_parseoptions still has dependency on tilde separator + JDK-8217237: HttpClient does not deal well with multi-valued WWW-Authenticate challenge headers + JDK-8217395: Update langtools shell tests to use ${EXE_SUFFIX} + JDK-8217612: (CL)HSDB cannot show some JVM flags + JDK-8217850: CompressedClassSpaceSizeInJmapHeap fails after JDK-8217612 + JDK-8218471: generate-unsafe-access-tests.sh does not correctly invoke build.tools.spp.Spp + JDK-8219628: [TESTBUG] javadoc/doclet/InheritDocForUserTags fails with -othervm + JDK-8220410: sun/security/tools/jarsigner/warnings/ /NoTimestampTest.java failed with missing expected output + JDK-8221372: Test vmTestbase/nsk/jvmti/GetThreadState/ /thrstat001/TestDescription.java times out + JDK-8222323: ChildAlwaysOnTopTest.java fails with "RuntimeException: Failed to unset alwaysOnTop" + JDK-8223573: Replace wildcard address with loopback or local host in tests - part 4 + JDK-8223714: HTTPSetAuthenticatorTest could be made more resilient + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java sometimes detect threads+1 connections + JDK-8223856: Replace wildcard address with loopback or local host in tests - part 8 + JDK-8224617: (fs) java/nio/file/FileStore/Basic.java found filesystem twice + JDK-8224729: Cleanups in sun/security/provider/certpath/ldap/ /LDAPCertStoreImpl.java + JDK-8224768: Test ActalisCA.java fails + JDK-8225012: sanity/client/SwingSet/src/ToolTipDemoTest.java fails on Windows + JDK-8226221: Update PKCS11 tests to use NSS 3.46 libs + JDK-8228341: SignTwice.java fails intermittently on Windows + JDK-8228403: SignTwice.java failed with java.io.FileNotFoundException: File name too long + JDK-8229147: Linux os::create_thread() overcounts guardpage size with newer glibc (>=2.27) + JDK-8229333: java/io/File/SetLastModified.java timed out + JDK-8229338: clean up test/jdk/java/util/RandomAccess/Basic.java + JDK-8229348: java/net/DatagramSocket/ /UnreferencedDatagramSockets.java fails intermittently + JDK-8229481: sun/net/www/protocol/https/ /ChunkedOutputStream.java failed with a SSLException + JDK-8229912: [TESTBUG] java/net/Socks/SocksIPv6Test fails without IPv6 + JDK-8230132: java/net/NetworkInterface/ /NetworkInterfaceRetrievalTests.java to skip Teredo Tunneling Pseudo-Interface + JDK-8231037: java/net/InetAddress/ptr/Lookup.java fails intermittently due to reverse lookup failed + JDK-8231357: sun/security/pkcs11/Cipher/TestKATForGCM.java fails on SLES11 using mozilla-nss-3.14 + JDK-8231516: network QuickAckTest.java failed due to "SocketException: maximum number of DatagramSockets reached" + JDK-8232101: (sctp) Add minimal sanity tests for SCTP + JDK-8232195: Enable BigInteger tests: DivisionOverflow, SymmetricRangeTests and StringConstructorOverflow + JDK-8232840: java/math/BigInteger/largeMemory/ /SymmetricRangeTests.java fails due to "OutOfMemoryError: Requested array size exceeds VM limit" + JDK-8232922: Add java/math/BigInteger/largeMemory/ /SymmetricRangeTests.java to ProblemList-Xcomp ... changelog too long, skipping 246 lines ... - Compiler flags to realign stack on ix86 (bsc#1214790) ==== kactivities-stats ==== Version update (5.110.0 -> 5.111.0) - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== kactivities5 ==== Version update (5.110.0 -> 5.111.0) Subpackages: kactivities5-imports libKF5Activities5 - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== karchive ==== Version update (5.110.0 -> 5.111.0) Subpackages: libKF5Archive5 libKF5Archive5-lang - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== kauth ==== Version update (5.110.0 -> 5.111.0) Subpackages: libKF5Auth5 libKF5Auth5-lang libKF5AuthCore5 - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== kbookmarks ==== Version update (5.110.0 -> 5.111.0) Subpackages: libKF5Bookmarks5 libKF5Bookmarks5-lang - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== kcalendarcore ==== Version update (5.110.0 -> 5.111.0) - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== kcmutils ==== Version update (5.110.0 -> 5.111.0) Subpackages: kcmutils-imports libKF5KCMUtils5 libKF5KCMUtils5-lang libKF5KCMUtilsCore5 - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== kcodecs ==== Version update (5.110.0 -> 5.111.0) Subpackages: libKF5Codecs5 libKF5Codecs5-lang - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== kcompletion ==== Version update (5.110.0 -> 5.111.0) Subpackages: libKF5Completion5 libKF5Completion5-lang - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== kconfig ==== Version update (5.110.0 -> 5.111.0) Subpackages: kconf_update5 libKF5ConfigCore5 libKF5ConfigCore5-lang libKF5ConfigGui5 libKF5ConfigQml5 - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== kconfigwidgets ==== Version update (5.110.0 -> 5.111.0) Subpackages: libKF5ConfigWidgets5 libKF5ConfigWidgets5-lang - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== kcontacts ==== Version update (5.110.0 -> 5.111.0) Subpackages: kcontacts-lang libKF5Contacts5 - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== kcoreaddons ==== Version update (5.110.0 -> 5.111.0) Subpackages: kcoreaddons-lang libKF5CoreAddons5 - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - Changes since 5.110.0: * Unset bug address for implicitly created KAboutData (kde#473517) ==== kcrash ==== Version update (5.110.0 -> 5.111.0) - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== kdav ==== Version update (5.110.0 -> 5.111.0) Subpackages: kdav-lang libKF5DAV5 - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== kdbusaddons ==== Version update (5.110.0 -> 5.111.0) Subpackages: kdbusaddons-tools libKF5DBusAddons5 libKF5DBusAddons5-lang - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== kdeclarative ==== Version update (5.110.0 -> 5.111.0) Subpackages: kdeclarative-components libKF5CalendarEvents5 libKF5Declarative5 libKF5Declarative5-lang libKF5QuickAddons5 - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== kded ==== Version update (5.110.0 -> 5.111.0) - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== kdelibs4support ==== Version update (5.110.0 -> 5.111.0) Subpackages: kdelibs4support-lang libKF5KDELibs4Support5 - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== kdesu ==== Version update (5.110.0 -> 5.111.0) Subpackages: libKF5Su5 libKF5Su5-lang - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== kdnssd-framework ==== Version update (5.110.0 -> 5.111.0) Subpackages: libKF5DNSSD5 libKF5DNSSD5-lang - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== kdoctools ==== Version update (5.110.0 -> 5.111.0) Subpackages: kdoctools-lang libKF5DocTools5 - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== kfilemetadata5 ==== Version update (5.110.0 -> 5.111.0) Subpackages: kfilemetadata5-lang - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== kglobalaccel ==== Version update (5.110.0 -> 5.111.0) Subpackages: kglobalaccel5 libKF5GlobalAccel5 libKF5GlobalAccel5-lang libKF5GlobalAccelPrivate5 - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== kguiaddons ==== Version update (5.110.0 -> 5.111.0) Subpackages: libKF5GuiAddons5 - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - Changes since 5.110.0: * mark geo-scheme-handler as non-gui executable on macOS/Windows ==== kholidays ==== Version update (5.110.0 -> 5.111.0) Subpackages: libKF5Holidays5 libKF5Holidays5-lang - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== khtml ==== Version update (5.110.0 -> 5.111.0) Subpackages: libKF5KHtml5 libKF5KHtml5-lang - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== ki18n ==== Version update (5.110.0 -> 5.111.0) Subpackages: libKF5I18n5 libKF5I18n5-lang - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== kiconthemes ==== Version update (5.110.0 -> 5.111.0) Subpackages: libKF5IconThemes5 libKF5IconThemes5-lang - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== kidletime ==== Version update (5.110.0 -> 5.111.0) - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== kimageformats ==== Version update (5.110.0 -> 5.111.0) - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - Changes since 5.110.0: * avif: support repetition count * raw: fix multi image load * hdr: fix oss-fuzz issue 62197 * hdr: fix crash (oss-fuzz) * xcf: fix crash (oss-fuzz issue 62075) * xcf: fix oss-fuzz issue ==== kinit ==== Version update (5.110.0 -> 5.111.0) Subpackages: kinit-lang - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== kio ==== Version update (5.110.0 -> 5.111.0) Subpackages: kio-core kio-lang - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - Changes since 5.110.0: * dbusactivationrunner: only activate well-formed services (kde#475266) * DBusActivationRunner: fix object path according to spec * Undeprecate KCoreDirLister::setMimeExcludeFilter * Fix incomplete error strings in MimeTypeFinderJob * Don't crash if KMountPoint gives nothing back while checking for CIFS (kde#474451) * trashimpl: optimize TrashSizeCache::calculateSize * trash: Optimize trashimpl::adaptTrashSize * [kfilewidget] Fixing saving to files with quotes (kde#426728) * KPropertiesDialog: Force PlainText on size label - Drop patch, merged upstream: * 0001-Don-t-crash-if-KMountPoint-gives-nothing-back-while-.patch ==== kirigami2 ==== Version update (5.110.0 -> 5.111.0) Subpackages: kirigami2-lang libKF5Kirigami2-5 - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - Changes since 5.110.0: * AboutPage: Allow overriding donateUrl by aliasing it from AboutItem (kde#474864) ==== kitemmodels ==== Version update (5.110.0 -> 5.111.0) Subpackages: kitemmodels-imports libKF5ItemModels5 - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== kitemviews ==== Version update (5.110.0 -> 5.111.0) Subpackages: libKF5ItemViews5 libKF5ItemViews5-lang - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== kjobwidgets ==== Version update (5.110.0 -> 5.111.0) Subpackages: libKF5JobWidgets5 libKF5JobWidgets5-lang - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== kjs ==== Version update (5.110.0 -> 5.111.0) - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== knewstuff ==== Version update (5.110.0 -> 5.111.0) Subpackages: knewstuff-imports libKF5NewStuff5 libKF5NewStuff5-lang libKF5NewStuffCore5 libKF5NewStuffWidgets5 - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== knotifications ==== Version update (5.110.0 -> 5.111.0) Subpackages: libKF5Notifications5 libKF5Notifications5-lang - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== knotifyconfig ==== Version update (5.110.0 -> 5.111.0) Subpackages: libKF5NotifyConfig5 libKF5NotifyConfig5-lang - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== kpackage ==== Version update (5.110.0 -> 5.111.0) Subpackages: kpackage-lang - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== kparts ==== Version update (5.110.0 -> 5.111.0) Subpackages: libKF5Parts5 libKF5Parts5-lang - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== kpeople5 ==== Version update (5.110.0 -> 5.111.0) Subpackages: kpeople5-lang - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== kplotting ==== Version update (5.110.0 -> 5.111.0) - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== kpty ==== Version update (5.110.0 -> 5.111.0) Subpackages: libKF5Pty5 libKF5Pty5-lang - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== kquickcharts ==== Version update (5.110.0 -> 5.111.0) - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== kross ==== Version update (5.110.0 -> 5.111.0) Subpackages: kross-lang - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== krunner ==== Version update (5.110.0 -> 5.111.0) - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - Changes since 5.110.0: * runnerpython: Fix install script paths to desktop files ==== kservice ==== Version update (5.110.0 -> 5.111.0) Subpackages: kservice-lang - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - Changes since 5.110.0: * KService: allow .desktop files without an Exec line (kde#430157) ==== ktexteditor ==== Version update (5.110.0 -> 5.111.0) Subpackages: ktexteditor-lang - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== ktextwidgets ==== Version update (5.110.0 -> 5.111.0) Subpackages: libKF5TextWidgets5 libKF5TextWidgets5-lang - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== kunitconversion ==== Version update (5.110.0 -> 5.111.0) Subpackages: libKF5UnitConversion5 libKF5UnitConversion5-lang - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== kwallet ==== Version update (5.110.0 -> 5.111.0) Subpackages: kwallet-tools kwallet-tools-lang kwalletd5 kwalletd5-lang libKF5Wallet5 libkwalletbackend5-5 - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== kwayland ==== Version update (5.110.0 -> 5.111.0) - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== kwidgetsaddons ==== Version update (5.110.0 -> 5.111.0) Subpackages: libKF5WidgetsAddons5 libKF5WidgetsAddons5-lang - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - Changes since 5.110.0: * Amend unit test to check propagation of options to date picker * Remove "No date" option from date picker popup used by date combo box * Set the modes on the date picker * Fix file rating being unreadable in certain themes (kde#339863) ==== kwindowsystem ==== Version update (5.110.0 -> 5.111.0) Subpackages: libKF5WindowSystem5 libKF5WindowSystem5-lang - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - Changes since 5.110.0: * Explain in deprecation message that logical coordinates must be used in KF6 ==== kxmlgui ==== Version update (5.110.0 -> 5.111.0) Subpackages: libKF5XmlGui5 libKF5XmlGui5-lang - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== lastlog2 ==== Subpackages: liblastlog2-1 - Fix lastlog.8 .so reference ==== libKF5ModemManagerQt ==== Version update (5.110.0 -> 5.111.0) - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== libKF5NetworkManagerQt ==== Version update (5.110.0 -> 5.111.0) - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== libnvme ==== Version update (1.6 -> 1.6+5.g68c6ffb) Subpackages: libnvme-mi1 libnvme1 - Update to version 1.6+5.g68c6ffb: * avoid stack corruption by unaligned DMA to user space buffers (bsc#1216344, gh#linux-nvme/libnvme#727) ==== libplacebo ==== Version update (6.338.0 -> 6.338.1) - Update libplacebo to version 6.338.1. See details in: https://code.videolan.org/videolan/libplacebo/-/tags/v6.338.1 ==== libvirt ==== Subpackages: libvirt-client libvirt-daemon-common libvirt-daemon-config-network libvirt-daemon-driver-interface libvirt-daemon-driver-libxl libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-lock libvirt-daemon-log libvirt-daemon-plugin-lockd libvirt-daemon-proxy libvirt-daemon-qemu libvirt-daemon-xen libvirt-libs - supportconfig: Adapt plugin to modern supportconfig - spec: Disable use of libnbd/nbdkit bsc#1216274 ==== oniguruma ==== Version update (6.9.8 -> 6.9.9) - Update to 6.9.9 - Update Unicode version 15.1.0 - NEW API: ONIG_OPTION_MATCH_WHOLE_STRING - Fixed: (?I) option was not enabled for character classes (Issue [#264]). - Changed specification to check for incorrect POSIX bracket (Issue #253). - Changed [[:punct:]] in Unicode encodings to be compatible with POSIX definition. (Issue #268) - Fixed: ONIG_OPTION_FIND_LONGEST behavior ==== patterns-media ==== - Require kernel-firmware-all instead of kernel-firmware (kernel-firmware-all provides/obsoletes kernel-firmware). ==== plasma-framework ==== Version update (5.110.0 -> 5.111.0) Subpackages: libKF5Plasma5 plasma-framework-components plasma-framework-desktoptheme plasma-framework-lang - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== prison-qt5 ==== Version update (5.110.0 -> 5.111.0) Subpackages: libKF5Prison5 prison-qt5-imports - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== purpose ==== Version update (5.110.0 -> 5.111.0) Subpackages: libKF5Purpose5 libKF5PurposeWidgets5 purpose-lang - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== python-urllib3 ==== Version update (2.0.6 -> 2.0.7) - update to 2.0.7 (bsc#1216377, CVE-2023-45803): * Made body stripped from HTTP requests changing the request method to GET after HTTP 303 "See Other" redirect responses. ==== qqc2-desktop-style ==== Version update (5.110.0 -> 5.111.0) - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== samba ==== Version update (4.19.1+git.312.c912b3d2ef6 -> 4.19.2+git.322.7e9201cef5) Subpackages: libsamba-policy0-python3 samba-ad-dc-libs samba-client samba-client-32bit samba-client-libs samba-client-libs-32bit samba-gpupdate samba-ldb-ldap samba-libs samba-libs-python3 samba-python3 samba-winbind samba-winbind-libs samba-winbind-libs-32bit - Update to 4.19.2 * Use-after-free in aio_del_req_from_fsp during smbd shutdown after failed IPC FSCTL_PIPE_TRANSCEIVE; (bso#15423). * clidfs.c do_connect() missing a "return" after a cli_shutdown() call; (bso#15426). * macOS mdfind returns only 50 results; (bso#15463). * GETREALFILENAME_CACHE can modify incoming new filename with previous cache entry value; (bso#15481). * libnss_winbind causes memory corruption since samba-4.18, impacts sendmail, zabbix, potentially more; (bso#15464). * ctdbd: setproctitle not initialized messages flooding logs; (bso#15479). * CVE-2023-5568 Heap buffer overflow with freshness tokens in the Heimdal KDC in Samba 4.19; (bso#15491). * The heimdal KDC doesn't detect s4u2self correctly when fast is in use; (bso#15477). - packaging: Remove /etc/slp.reg.d from samba spec file; (bsc#1216160) - use systemd-logind rather than utmp for y2038 safety; (bsc#1216159). ==== solid ==== Version update (5.110.0 -> 5.111.0) Subpackages: libKF5Solid5 libKF5Solid5-lang solid-imports solid-tools - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== sonnet ==== Version update (5.110.0 -> 5.111.0) Subpackages: libKF5SonnetCore5 libKF5SonnetCore5-lang libKF5SonnetUi5 sonnet-imports - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== swtpm ==== Subpackages: swtpm-selinux - Add missing requires for certtool ==== syndication ==== Version update (5.110.0 -> 5.111.0) - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== syntax-highlighting ==== Version update (5.110.0 -> 5.111.0) Subpackages: libKF5SyntaxHighlighting5 libKF5SyntaxHighlighting5-lang syntax-highlighting-imports - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - Changes since 5.110.0: * Set mode for more config file endings (kde#475078) * Highlight MapCSS numeric and string condition values * textproto syntax: Support multipart strings. * textproto syntax: Add test case for octal escape sequences. * textproto syntax: Support some types of comments. * textproto syntax: Allow empty strings. * textproto syntax: Allow commas between fields. * Add TextProto syntax (protocol buffer Text Format Language). ==== threadweaver ==== Version update (5.110.0 -> 5.111.0) - Update to 5.111.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.111.0 - No code change since 5.110.0 ==== virglrenderer ==== Version update (0.9.1 -> 1.0.0) - Update to version 1.0.0: + Switch to Venus protocol version 1.0.0 + Drop experimental tag from Venus configuration flag and update API. + Support passing fences from guest to host for waiting and inter-context fence sharing/syncing. - Drop virglrenderer-CVE-2022-0175.patch and virglrenderer-CVE-2022-0135.patch: fixed upstream. ==== wsdd ==== - Leap 15.6 has no python 3.10 anymore, use 3.11 instead ==== xf86-video-intel ==== - renamed n_Mesa-i965-crocus.patch to n_Mesa-i965-crocus-iris.patch - n_Mesa-i965-crocus-iris.patch * use "iris" instead of "crocus" for anything newer than Haswell - n_Mesa-i965-crocus.patch * Mesa's DRI driver is now called "crocus" (previously "i965"); fixes hardware OpenGL support when still using "intel" X driver instead of "modesetting" one ... ==== yast2-apparmor ==== Version update (4.6.2 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-drbd ==== Version update (4.6.1 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-sudo ==== Version update (4.6.1 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-vpn ==== Version update (4.6.1 -> 5.0.0) - 5.0.0 (bsc#1185510)

1 0

Tumbleweed - Review of the week 2023/42
by Dominique Leuenberger 20 Oct '23

20 Oct '23

Dear Tumbleweed users and hackers, Week 42 has been a busy one for Tumbleweed. A total of 6 snapshots have been released (1012, 1013, 1015, 1016, 1017, and 1018). Quite a few interesting discussions are also happening on the factory mailing list (e.g. Agama as the future installer, how to interact with patterns, and such). But let’s look first at the updates you received during the last week: * KDE Gear 23.08.2 * cURL 8.4.0 * Zypper 1.14.66 * Freetpe 2.13.2 * Pipewire 0.3.81 * Qt 6.6.0 * Samba 4.19.1 * Node.JS 20.8.1 Looking into the future, we know of these things being worked on at the moment (mainly due to pending submit requests that we have in staging right now): * KDE Frameworks 5.111.0 * Samba 4.19.2 * Linux kernel 6.5.8 * Binutils 2.41 * moving to dbus-broker * Removal of /run/utmp and /var/log/wtmp (See mailing list thread[0] Cheers, Dominique [0] https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/…

1 0

Missing lib in update python311-PyQt6-6.5.2-1.2.x86_64 requires 'libQt6Core.so.6(Qt_6.5.3_PRIVATE_API)(64bit)'
by Larry Len Rainey 19 Oct '23

19 Oct '23

4 4

New Tumbleweed snapshot 20231018 released!
by Dominique Leuenberger 19 Oct '23

19 Oct '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: grub2 kmod (30 -> 31) python-pexpect python-pytz (2023.3 -> 2023.3.post1) vim (9.0.1894 -> 9.0.2043) === Details === ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - Fix detection of encrypted disk's uuid in powerpc to cope with logical disks when signed image installation is specified (bsc#1216075) * 0003-grub-install-support-prep-environment-block.patch - grub2.spec: Add support to unlocking multiple encrypted disks in signed grub.elf image for logical disks ==== kmod ==== Version update (30 -> 31) Subpackages: kmod-bash-completion libkmod2 - Fix tests * refresh configure-Detect-openssl-sm3-support.patch * refresh kmod-Add-pkgconfig-file-with-kmod-compile-time-confi.patch * refresh usr-lib-modules.patch - Update to release 31 * Allow passing a path to modprobe so the module is loaded from anywhere from the filesystem. * Use in-kernel decompression if available. * depmod learned a `-o <dir>` option to allow using a separate output directory. - Delete depmod-Introduce-outdir-option.patch, testsuite-Handle-different-sysconfdir.patch, testsuite-depmod-use-defines-for-the-rootfs-lib_modu.patch, 0001-testsuite-repair-read-of-uninitialized-memory.patch, testsuite-Move-setup-rootfs-logic-from-Makefile-to-s.patch ==== python-pexpect ==== - add 742.patch, gh#pexpect/pexpect#742 This makes it compatible with python3.12 gh#pexpect/pexpect#736#issuecomment-1427273882 ==== python-pytz ==== Version update (2023.3 -> 2023.3.post1) - Update to 2023.3.post1 * Replace deprecated datetime.utcfromtimestamp() * Resurrect Python 2.7 tests * Add support for Python 3.12 - Drop pytz-%{version}.tar.gz.asc and python-pytz.keyring * PyPI hides the .asc files and wants to drop the support * related: https://github.com/certbot/certbot/issues/9707 ==== vim ==== Version update (9.0.1894 -> 9.0.2043) Subpackages: vim-data vim-data-common xxd - Update to version 9.0.2043 * Vim9: issue with funcref assignmentand varargs * Test_cq_zero_exmode fails without channel feature * trim(): hard to use default mask * include syntax script for json5 (#13356) * trim(): hard to use default mask * completion shows current word after completion restart * Vim9: object method funcref not cleaned up after use * A few remaining cmdline completion issues with C-E/Y * if_python: rework python3.12 build dependency * [security] use-after-free with wildmenu * don't try to copy SMACK attribute, when none exist * gcc overflow-warning for f_resolve * Fix more typos (#13354) * cannot get mouse click pos for tab or virt text * correct <PageUp>/<PageDown> behavior in 'wildmenu' (#13336) * TextChangedI may be triggered by non-insert mode change * no max callback recursion limit * Vim9: no support for partials using call() * confusing build dependencies * Vim9: no support for bitwise operators in lambda funcs * win32: python3 dll loading can be improved * no cmdline completion for ++opt args * no filetype detection for Debian sources * need more tests for :cq * getmousepos() returns wrong index for TAB char * Coverity complains about change in charset * Update Serbian messages translation (#13324) * Update ftplugin (#13327) * Vim9: islocked() needs more work * Improve command-line completion docs (#13331) * Vim9: no support for funcrefs * complete_info() returns wrong index * linebreak applies for leading whitespace * Vim9: assignment operators don't work for class vars * Vim9: does not handle islocked() from a method correctly * confusing ifdefs in if_<lang>.c * Unicode tables outdated * Vim9: error message can be more accurate * INI files not detected * [security] use-after-free from buf_contents_changed() * cmdline-completion for comma-separated options wrong * test: undofile left behind * Vim9: covariant parameter types allowed * Vim9: need more tests * partially revert patch v9.0.1997 * Missing test file * xxd: compilation warning * make command name for &iskeywordprg more unique (#13297) * Vim9: need cleanup of class related interface code * updated translation of xxd manpage * Vim9: segfault with islocked() * Vim9: use-after-free in deep call stack * Update ftplugin (#13213) * Vim9: some error messages can be improved * xxd: cannot reverse a bit dump * Some unused code in move.c and string.c * remove E1520 tag (#13289) * Cannot build with python312 * Update vim9class help (#13292) * Invalid memory access with empty 'foldexpr' * inconsistent feature description * warning about unused function definition * [security] segfault in exmode * no cmdline completion for setting the font * strange error number * diff (`df`) may open the wrong window (#13275) * Update `.netrwbook` immediately on bookmark change (#13276) * revert permission changes for xxd manpages again (#13277) * Vim9: double error message given * Vim9: potential use-after-free for class members * win32: font-size calculation can be improved * Update Serbian messages translation (#13282) * Vim9: accepting type-annotations * Correct filetype detection pattern and style (#13284) * scrolling inactive window not possible with cursorbind * error when trying to :bd unloaded buffer * vim9: clean up from v9.0.1955 * not being able to scroll up in diff mode * win32: issues with stable python ABI * No filetype detection for just files * Vim9: object members can change type * update translation of xxd manpage * update xxd manpage and mention $NO_COLOR env * fix two typos in `vim9.txt` and `options.txt` (#13258) * remove E1507 help tag, which is no longer used (#13254) * style: space before tab in optionstr.c * xattr: permission-denied errors on write * Update Russian message translation to Vim 9.0.1968 (#13239) * add missing error numbers in the help. (#13241) * mention how to disable folding in diff mode (#13242) * vim9: using contra-variant type-checks * Clean up cmdline option completion code * win32: missing '**' expansion test * macOS: FEAT_SOUND guard too restrictive * win32: high-dpi support can be improved * [security] buffer-overflow in trunc_string() * cmdline completion should consider key option * xattr errors not translated ... changelog too long, skipping 96 lines ... *

1 0

telegram-desktop segfaults after QT6 update
by Stratos Zolotas 18 Oct '23

18 Oct '23

Hello, After the latest update (I think the one that introduced QT6), telegram-desktop segfaults and refuses to start. When I launched it from console I get the following message: ** (telegram-desktop:10539): WARNING **: 11:53:50.643: Unable to load patched fonts with Qt workarounds, expect font issues. QPainter::begin: Paint device returned engine == 0, type: 2 QWidget::render: Cannot render with an inactive painter qt.svg: Error while inflating gzip file: SVG format check failed Segmentation fault (core dumped) And in dmesg I can see this: telegram-deskto[5052]: segfault at 0 ip 00007f72f0962d22 sp 00007f72d0bfc6c0 error 4 in libQt6Svg.so.6.6.0[7f72f094a000 +3a000] likely on CPU 3 (core 4, socket 0) Should I open a bug report for it or there is any workaround? Regards, Stratos.

3 8

New Tumbleweed snapshot 20231017 released!
by Dominique Leuenberger 18 Oct '23

18 Oct '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: gnome-sudoku (45.0 -> 45.1) gpg2 ncurses (6.4.20230909 -> 6.4.20231007) nghttp2 (1.55.1 -> 1.57.0) nodejs20 (20.8.0 -> 20.8.1) rubygem-rubocop (1.57.0 -> 1.57.1) rubygem-unicode-display_width (2.4.2 -> 2.5.0) xterm (385 -> 387) === Details === ==== gnome-sudoku ==== Version update (45.0 -> 45.1) Subpackages: gnome-sudoku-lang - Update to version 45.1: + Fix right click not opening earmark popover. + Updated translations. ==== gpg2 ==== Subpackages: dirmngr gpg2-lang - Fix Emacs EasyPG behavior when parsing output: * gpg: Report BEGIN_* status before examining the input. * Upstream task: https://dev.gnupg.org/T6481 * Add gnupg-Report-BEGIN_-status-before-examining-the-input.patch ==== ncurses ==== Version update (6.4.20230909 -> 6.4.20231007) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch 20231007 + improve loop-limit for get_position(). + improve manual description of immedok (Debian #1053603). + fix a few formatting issues with manpages (Debian #1053123). + improve formatting/style of manpages (patches by Branden Robinson). - Add ncurses patch 20231001 + modify setupterm to provide for using ANSI cursor-position report (in user6/user7 terminfo capabilities) to obtain screensize if neither environment variables or ioctl is used. The ncurses test-program with options "-E -T" demonstrates this feature. + improve error messages in tic (patch by Branden Robinson). + improve formatting/style of manpages (patches by Branden Robinson). + modify test/clip_printw.c to optionally test non-wrapped updates. + fix reallocation loop for vsnprintf() in _nc_sprintf_string() by copying the va_list variable (patch by Ian Abbott). - Add ncurses patch 20230923 + improve formatting of manpages (patches by Branden Robinson). + amend change to delscreen() to limit the windows which it creates to just those associated with the screen (report by Frederic Boiteux, cf: 20220813). - Add ncurses patch 20230918 + new tarball/errata (report by Sven Joachim). - Add ncurses patch 20230917 + improve formatting of manpages (integrated patches by Branden Robinson). + correct limit for name-length in write_entry.c (report/testcase by Luna Saphie Mittelbach). + limit delays to 30 seconds, i.e., padding delays in terminfo, as well as napms() and delay_output() functions. + improve a few pointer-checks. + improve parsing in _nc_msec_cost, allowing a single decimal point. ==== nghttp2 ==== Version update (1.55.1 -> 1.57.0) - version update to 1.57.0 [bsc#1216174] 1.57.0 * Fixes CVE-2023-44487 * Bump ngtcp2 by @tatsuhiro-t in #1944 * Add dependabot to update actions by @tatsuhiro-t in #1946 * Bump golang.org/x/net to v0.15.0 by @tatsuhiro-t in #1950 * Bump actions/setup-go from 3 to 4 by @dependabot in #1948 * Bump actions/checkout from 3 to 4 by @dependabot in #1949 * Bump actions/upload-artifact from 1 to 3 by @dependabot in #1947 * docker: Bump base image to debian 12 by @tatsuhiro-t in #1951 * nghttpx: Header field name must be lowercase by @tatsuhiro-t in #1953 * Bump quictls by @tatsuhiro-t in #1945 * Apps fix by @tatsuhiro-t in #1957 * nghttpx: Fix bug that --single-process does not work by @tatsuhiro-t in #1958 * Fix clang-format by @tatsuhiro-t in #1959 * Rework session management by @tatsuhiro-t in #1961 1.56.0 * doc: Bump boringssl by @tatsuhiro-t in #1928 * Fix memory leak by @tatsuhiro-t in #1930 * Return void by @tatsuhiro-t in #1931 * nghttpx: Rework sending and receiving ECN bits by @tatsuhiro-t in #1934 * CMSG_DATA does not necessarily return an aligned pointer by @tatsuhiro-t in #1935 * Bump quictls by @tatsuhiro-t in #1937 * Bump ngtcp2 and its dependencies by @tatsuhiro-t in #1939 * nghttpx: Simplify std::unique_ptr get and release by @tatsuhiro-t in #1940 * Bump llhttp to 926c982942eb53a13f01c1e9e6b19bd3b196e7dd by @tatsuhiro-t in #1941 * Bump libbpf to v1.2.2 by @tatsuhiro-t in #1942 * Update Dockerfile by @tatsuhiro-t in #1943 ==== nodejs20 ==== Version update (20.8.0 -> 20.8.1) Subpackages: npm20 - Security fixes relase 20.8.1 * (CVE-2023-44487, bsc#1216190): nghttp2 Security Release * (CVE-2023-45143, bsc#1216205): undici Security Release * (CVE-2023-39332, bsc#1216271): Path traversal through path stored in Uint8Array * (CVE-2023-39331, bsc#1216270): Permission model improperly protects against path traversal * (CVE-2023-38552, bsc#1216272): Integrity checks according to policies can be circumvented * (CVE-2023-39333, bsc#1216273): Code injection via WebAssembly export names - fix_ci_tests.patch: refreshed ==== rubygem-rubocop ==== Version update (1.57.0 -> 1.57.1) - updated to version 1.57.1 [#]# 1.57.1 (2023-10-13) [#]## Bug fixes * [#12271](https://github.com/rubocop/rubocop/issues/12271): Fix a false positive for `Lint/RedundantSafeNavigation` when using snake case constant receiver. ([@koic][]) * [#12265](https://github.com/rubocop/rubocop/issues/12265): Fix an error for `Layout/MultilineMethodCallIndentation` when usingarithmetic operation with block inside a grouped expression. ([@koic][]) * [#12177](https://github.com/rubocop/rubocop/pull/12177): Fix an incorrect autocorrect for `Style/RedundantException`. ([@ydah][]) * [#12261](https://github.com/rubocop/rubocop/issues/12261): Fix an infinite loop for `Layout/MultilineMethodCallIndentation` when multiline method chain with a block argument and method chain. ([@ydah][]) * [#12263](https://github.com/rubocop/rubocop/issues/12263): Fix false positives for `Style/RedundantDoubleSplatHashBraces` when method call for no hash braced double splat receiver. ([@koic][]) * [#12262](https://github.com/rubocop/rubocop/pull/12262): Fix an incorrect autocorrect for `Style/RedundantDoubleSplatHashBraces` when using double splat hash braces with `merge` method call twice. ([@koic][]) ==== rubygem-unicode-display_width ==== Version update (2.4.2 -> 2.5.0) - updated to version 2.5.0 [#]# 2.5.0 - Unicode 15.1 ==== xterm ==== Version update (385 -> 387) Subpackages: xterm-bin xterm-resize - update 387: * add DECRQUPSS and DECAUPSS * add DECRQDE * correct indexing expression in title-stack - includes changes from 386: * improve references in ctlseqs.ms * make the maximum amount of memory used for buffering DCS and OSC strings configurable with maxStringParse resource * improve performance of ReGIS when initializing the largest fontsize * fix regression in SIXEL colors * fix typo in --with-wtmp

1 0

osc vc no longer adding email address to changes file
by Adrian Glaubitz 18 Oct '23

18 Oct '23

Hello! Has anyone noticed that "osc vc" is no longer adding the email address when creating a new changelog entry? I noticed that because the source validator complains about the changelog entries being out of order. Adrian

3 3

New Tumbleweed snapshot 20231016 released!
by Dominique Leuenberger 17 Oct '23

17 Oct '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: Mesa Mesa-drivers gnome-photos (44.0 -> 44.0+23) gnome-user-share (43.0 -> 43.0+11) libgee libgusb (0.3.10 -> 0.4.7) m17n-lib (1.8.0 -> 1.8.4) mutter (45.0 -> 45.0+45) nfs-utils python-qt5 (5.15.9 -> 5.15.10) python-qt5-sip (12.12.2 -> 12.13.0) python-setuptools shared-mime-info (2.2 -> 2.3) zchunk (1.3.1 -> 1.3.2) === Details === ==== Mesa ==== Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libOSMesa8 libgbm1 - Add U_radeonsi-prefix-function-with-si_-to-prevent-name-co.patch Fix https://gitlab.freedesktop.org/mesa/mesa/-/issues/9889 ==== Mesa-drivers ==== Subpackages: Mesa-dri Mesa-gallium Mesa-libva libxatracker2 - Add U_radeonsi-prefix-function-with-si_-to-prevent-name-co.patch Fix https://gitlab.freedesktop.org/mesa/mesa/-/issues/9889 ==== gnome-photos ==== Version update (44.0 -> 44.0+23) Subpackages: gnome-photos-lang gnome-shell-search-provider-gnome-photos - Update to version 44.0+23: * photos-embed: Add mnemonics * app: - Set inactivity timeout for search provider - Defer gegl initialization to window creation * photos-utils: Ensure more types are registered * Updated translations. - Switch to git checkout via source service, explicit commit. - Update URL. - Build sub-package gnome-shell-search-provider-gnome-photos as noarch. ==== gnome-user-share ==== Version update (43.0 -> 43.0+11) Subpackages: gnome-user-share-lang - Update to version 43.0+11: * DOAP: Fix 'bug-database' value to point to GNOME GitLab Issues * Updated translations. - Update URL to new home. ==== libgee ==== - Add upstream patches: + b33a6627f4fc96938b6015e05849867c472160a8.patch: Add more missing generic type arguments. + 2f0bbe8987e5eb1390b23ac531c971b202c2ef77.patch: Implementations of "G List.get()" should use non-nullable return as defined. ==== libgusb ==== Version update (0.3.10 -> 0.4.7) - Update to version 0.4.7: + Add new API to get the HID descriptor data + Add calling convention to libusb callback functions - Changes from version 0.4.6: + Add JSON compatibility helpers for old json-glib versions + Fix emulation of devices using out-of-order BulkTransfer replies + Use project_source_root to fix building as a subproject - Changes from version 0.4.5: + Add new API to better detect emulated replug + Do not emit spurious ::device-removed events when emulating + Record zero-sized device events + Reset the in-order event index when clearing the event array + Save the libusb error if libusb_submit_transfer() fails - Changes from version 0.4.4: + Add new API to make emulation easier to use + Emit remove devices with matching tags when loading contexts + Fix a critical warning when finalizing devices without endpoints + Reduce the debugging level when emulating firmware - Changes from version 0.4.3: + Export g_usb_device_has_tag() + Work around a libusb issue which causes devices to appear twice - Add pkgconfig(gi-docgen) and pkgconfig(json-glib-1.0) BuildRequires: New dependencies. - Drop gtk-doc BuildRequires: No longer needed, nor used after the port upstream. - Pass tests=false to meson setup, do not build or install any tests at this time. - Use ldconfig_scriptlets macro for post(un) handling. ==== m17n-lib ==== Version update (1.8.0 -> 1.8.4) - update to 1.8.4: This release is just for bug fixing. * Fix âtypedef in m17n-core.h causing error when compiling with C++ codeâ - Remove RPM groups - Change URL to new upstream site. - Examples are now in UTF-8 encoding so change iconv part accordingly ==== mutter ==== Version update (45.0 -> 45.0+45) Subpackages: mutter-lang - Update to version 45.0+45: + kms/impl-device/atomic: - Fix blob size - Fix stack overflow + kms/impl-device: Inhibit real-time scheduling when mode setting + monitor-manager/native: Update assignments on empty-config too + renderer/native: - Clear old pending mode sets when unsetting all modes - Fold mode unsetting into renamed unset_modes() + tests/dbusmock-templates/rtkit: Add MakeThreadHighPriority + tests/kms/render: Add test for setting empty config + thread: - Allow turning off rt scheduling for running thread - For consistency, s/real_time/realtime/ + Updated translations. ==== nfs-utils ==== Subpackages: libnfsidmap1 nfs-client nfs-kernel-server - 0001-export-fix-handling-of-error-from-match_fsid.patch Errors from match_fsid() shouldn't be fatal. (bsc#1214540) ==== python-qt5 ==== Version update (5.15.9 -> 5.15.10) - Update to 5.15.10 * Added the missing QEvent.Type.NativeGesture member (Qt v5.2 and later). * Added the missing QEvent.Type.EnterEditFocus and QEvent.Type.LeaveEditFocus members. * PyQt5-sip v12.13 is now required for Python v3.12 support. * Bug fixes. ==== python-qt5-sip ==== Version update (12.12.2 -> 12.13.0) - Update to 12.13.0 * Added sipPyTypeDictRef() to the v12 and v13 ABIs. sipPyTypeDict() is now deprecated and must not be used with Python v3.12 and later. * Classes will automatically support being iterated over if they implement '__getitem__()' or 'operator[]' and have a method annotated with '__len__'. * Bug fixes. ==== python-setuptools ==== - Do not ship bundled exes ==== shared-mime-info ==== Version update (2.2 -> 2.3) Subpackages: shared-mime-info-lang - Update to version 2.3: * Add DOS/Windows batch file type * Add Gerber and Excellon drill files * Add JPEG XR mime type * Add Modrinth modpack * Add OpenVPN profile * Add Portable Font Resource application/font-tdpfr. * Add TAK audio mime type * Add application/vnd.microsoft.windows.thumbnail-cache * Add application/vnd.ms-officetheme * Add application/x-bzip for bzip2's deprecated predecessor bzip * Add application/x-bzip3 * Add application/x-fishscript and application/x-nuscript * Add application/x-ms-pdb * Add application/x-zpaq * Add definition and test file for StuffIt X archives. * Add image/apng * Add mime type for Typst files * Add mimetype application/x-lmdb * Add mimetype for Blueprint source code * Add mimetype for CBOR * Add mimetype for Devicetree source code * Add mimetype for ERIS link files * Add mimetype for Flattened Devicetree (binary) * Add mimetype for Quite OK Image Format (QOI) * Add perf data file type * Add subclass information for .ppt and .xls * Add support for newer AAXC Audible Audiobook format * Add text/julia for Julia source code * Add text/x-nim and text/x-nimscript * Add todo.txt mime type * Add two new languages * Avoid meson errors when 'build-tools' is set to false * Bump magic priority for application/ovf * CI: Use dnf5 instead of dnf * Change descriptions to say LibreOffice rather than OpenOffice * Don't install man page on Windows * Fix description for audio/x-xi * Give application/x-raw-floppy-disk-image the floppy media icon * Give generic optical disk images the optical media icon * Identify .pdb files without a signature match as application/vnd.palm * Improve matching for message/rfc822 * Lengthen image/png magic * Make application/pgp-* not inherit from text/plain * Make application/vnd.squashfs a subclass of application/vnd.efi.img * Make update-mime-database compatible with MSVC (by porting it to C++) * Prefer application/java-archive to application/x-java-archive * Prefer application/vnd.efi.img over application/x-raw-disk-image * Prefer application/vnd.efi.iso over application/x-cd-image * Prefer audio/vnd.wave over audio/x-wav * Prefer video/vnd.avi over video/x-msvideo * Remove "##" magic for matlab files * Rename application/x-bzip to application/x-bzip2 * Revert "use Title Case for mime type description" * Update application/sieve. * Updated to latest xdgmime * add tiled map editor map and tileset files * application/javascript: Rename to text/javascript * application/vnd.dart: use IANA registered type * application/vnd.dbf: use IANA registered type * application/yaml: use IANA registered type * audio/x-wav: Add missing sub-class relationship with application/x-riff * buildsystem - add options for building tests and translations * ci: Use ci-templates to build image * ci: Use detached pipelines * icons for 3d model formats * spec: Clarify that namespaceURI can be empty * text/markdown: add x-office-document generic-icon * text/vnd.familysearch.gedcom: use IANA registered type * use Sentence case for mime type descriptions * use Title Case for mime type description * video/vnd.youtube.yt: add magic * video/vnd.youtube.yt: use IANA registered type - Add generic c++_compiler BuildRequires: shared-mime-info now depends on a c++ compiler. ==== zchunk ==== Version update (1.3.1 -> 1.3.2) - update to 1.3.2: * Handle overflow errors in malformed zchunk files

1 0

xwayland crashing for more than 2 months now
by Miguel Rozsas 17 Oct '23

17 Oct '23

Hi there, KDE on Wayland is unusable in my AMD based desktop for more than 12 month. I am sure it is something related to AMD (CPU or GPU) since my intel laptop is running KDE/Wayland without problems. Also, I do not experience any problems in a X11 session. That is I am doing in the last 2 months: using the X11. I can't say how it behaves on gnome/wayland. Currently I am at 20231012. It has to do with chrome that crash after a few minutes of usage. When it does, it crashes the graphical stack somehow, since I had to close and start a new login session to use it again. I can trigger an immediate crash just by running opera-103.0.4928.16-1.1.x86_64 or brave-browser-1.59.117-1.x86_64. I suppose here it is not the place to get the problem fixed, so what is the proper channel/forum/bugzilla to address this problem as it involves gpu amd, a third part app (chrome/brave/opera) and kde ? Oct 14 09:57:50 mastodon kwin_wayland_wrapper[1841]: (EE) 0: /usr/bin/Xwayland (0x55c2603c5000+0x16d30e) [0x55c26053230e] Oct 14 09:57:50 mastodon kwin_wayland_wrapper[1841]: (EE) 1: /usr/bin/Xwayland (0x55c2603c5000+0x16d410) [0x55c260532410] Oct 14 09:57:50 mastodon kwin_wayland_wrapper[1841]: (EE) 3: /usr/bin/Xwayland (0x55c2603c5000+0x4c699) [0x55c260411699] Oct 14 09:57:50 mastodon kwin_wayland_wrapper[1841]: (EE) 4: /usr/bin/Xwayland (0x55c2603c5000+0x4cd5c) [0x55c260411d5c] Oct 14 09:57:50 mastodon kwin_wayland_wrapper[1841]: (EE) 5: /usr/bin/Xwayland (0x55c2603c5000+0x16f2d5) [0x55c2605342d5] Oct 14 09:57:50 mastodon kwin_wayland_wrapper[1841]: (EE) 6: /usr/bin/Xwayland (0x55c2603c5000+0xadc38) [0x55c260472c38] Oct 14 09:57:50 mastodon kwin_wayland_wrapper[1841]: (EE) 7: /usr/bin/Xwayland (0x55c2603c5000+0x36b6f) [0x55c2603fbb6f] Oct 14 09:57:50 mastodon kwin_wayland_wrapper[1841]: (EE) 10: /usr/bin/Xwayland (0x55c2603c5000+0x38335) [0x55c2603fd335] Oct 14 09:57:50 mastodon systemd-coredump[4659]: Process 1841 (Xwayland) of user 1000 dumped core. #3 0x000055c2605345fc n/a (Xwayland + 0x16f5fc) #4 0x000055c26053d2ec n/a (Xwayland + 0x1782ec) #5 0x000055c26053246a n/a (Xwayland + 0x16d46a) #7 0x000055c260411699 n/a (Xwayland + 0x4c699) #8 0x000055c260411d5c n/a (Xwayland + 0x4cd5c) #9 0x000055c2605342d5 n/a (Xwayland + 0x16f2d5) #10 0x000055c260472c38 n/a (Xwayland + 0xadc38) #11 0x000055c2603fbb6f n/a (Xwayland + 0x36b6f) #14 0x000055c2603fd335 n/a (Xwayland + 0x38335) Oct 14 09:57:50 mastodon kwin_wayland[1756]: kwin_xwl: Xwayland process crashed

3 3

New Tumbleweed snapshot 20231015 released!
by Dominique Leuenberger 17 Oct '23

17 Oct '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ImageMagick ark libblockdev (3.0.3 -> 3.0.4) patterns-gnome python-cffi (1.15.1 -> 1.16.0) yelp === Details === ==== ImageMagick ==== Subpackages: ImageMagick-config-7-SUSE ImageMagick-extra libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - added patches fix https://github.com/ImageMagick/ImageMagick/commit/3c727503c6ae449160dc92cf6… + ImageMagick-correct-time-to-live.patch ==== ark ==== Subpackages: ark-lang libkerfuffle23 - Add patch to fix bzip2 support with shared-mime-info >= 2.3: * 0001-Fix-support-for-bzip2-format-with-shared-mime-info-2.patch - Drop patch, not necessary since Leap 15.2: * 0001-Support-building-against-libarchive-3.3.2-again.patch ==== libblockdev ==== Version update (3.0.3 -> 3.0.4) Subpackages: libbd_btrfs3 libbd_crypto3 libbd_fs3 libbd_loop3 libbd_lvm3 libbd_mdraid3 libbd_nvme3 libbd_part3 libbd_swap3 libbd_utils3 libblockdev3 - Update to 3.0.4: * plugins: use g_autofree for free'ing g_char's * plugins: btrfs: use g_autofree where possible for g_free * fs: correct btrfs set label description * nvme: Rework memory allocation for device ioctls * spec: Obsolete vdo plugin packages * spec: Move obsoleted devel subpackages to libblockdev-devel * ci: Bump actions/checkout from v3 to v4 * part: Do not open disk read-write for read only operations * fs: Disable progress for ntfsresize * packit: Add configuration for downstream builds * logging: Default to DEBUG log level if compiled with --enable-debug * Use log function when calling a plugin function that is not loaded * lvm-dbus: Replace g_critical calls with bd_utils_log_format * tests: Fail early when recompilation fails in library_test ==== patterns-gnome ==== Subpackages: patterns-gnome-gnome patterns-gnome-gnome_basic patterns-gnome-gnome_basis patterns-gnome-gnome_basis_opt patterns-gnome-gnome_games patterns-gnome-gnome_imaging patterns-gnome-gnome_internet patterns-gnome-gnome_multimedia patterns-gnome-gnome_office patterns-gnome-gnome_utilities patterns-gnome-gnome_x11 patterns-gnome-gnome_yast patterns-gnome-sw_management_gnome - Drop mousetweaks as a recommended package, it has not been needed for assistive technologies in a long time. ==== python-cffi ==== Version update (1.15.1 -> 1.16.0) - Upgrade to 1.16.0: - Add support for Python 3.12. With the removal of distutils from Python 3.12, projects using CFFI features that depend on distutils at runtime must add a dependency on setuptools to function under Python 3.12+. CFFI does not declare a runtime setuptools requirement to avoid an unnecessary dependency for projects that do not require it. - Drop support for end-of-life Python versions (2.7, 3.6, 3.7). - Move project source under src/; a more standard layout that also enables CI to more easily catch packaging errors. - Move project home to python-cffi/cffi on GitHub. - Add support for PEP517 builds; setuptools is now a required build dependency. - Declare python_requires metadata for Python 3.8+. This allows unsupported Pythons to continue using previously released sdists and wheels. - Add missing calls to PyObject_GC_UnTrack to avoid ResourceWarning 15c4b71 - Remove upstreamed patch 8a3c2c816d789639b49d3ae867213393ed7abdff.patch - Clean up the SPEC file ==== yelp ==== Subpackages: libyelp0 yelp-lang - Add upstream bug fixes: + dd69a1df8e660cf6cf27e44a6bba02934fc00b48.patch: Fix compile error with ./autogen.sh --enable-debug=yes + 855cae4a336f7676f093579c9a6b2d9fae7a1f80.patch: Support search box for man pages - Add gtk-doc, libtool and pkgconfig(appstream-glib) BuildRequires and call NOCONFIGURE=1 ./autogen.sh, bootstrap the build, as the above patches touches the buildsystem.

1 0

Update Oddity
by Robin Klitscher 17 Oct '23

17 Oct '23

Operating System: openSUSE Tumbleweed 20231010 KDE Plasma Version: 5.27.8 KDE Frameworks Version: 5.110.0 Qt Version: 5.15.11 Kernel Version: 6.5.6-1-default (64-bit) Graphics Platform: Wayland Graphics Processor: NVIDIA GeForce GTX 1650/PCIe/SSE2 nvidia driver series G06-535.113.01-14.1.x86_64 For regular Tumbleweed updates I use <sudo zypper dup>, but for several weeks now when the update includes a new kernel (and/or new nvidia drivers - I think), the installation part of the process returns a profusion of lines flashing by too fast to read but typically like this (sorry about the line wrap): /usr/src/kernel-modules/nvidia-535.113.01-default/nvidia.o: warning: objtool: _nv042750rm+0x4f: 'naked' return found in RETHUNK build By my count from the zypp history log, the recent update to 20231010 produced more than 9,500 such lines. The updates are successful as far as I can see, but this behaviour is new and I’ve no idea what it means, or even if it matters, still less whether it needs fixing – or how to do that. Clues, anyone? Please bear in mind that I’m a simple user, not an expert. -- Robin K Wellington "Harbour City" New Zealand

2 2

New Tumbleweed snapshot 20231013 released!
by Dominique Leuenberger 15 Oct '23

15 Oct '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: freetype2 (2.13.1 -> 2.13.2) grub2 gtk3 libgcrypt libnvme libyui (4.6.0 -> 4.6.1) libyui-ncurses (4.6.0 -> 4.6.1) libyui-ncurses-pkg (4.6.0 -> 4.6.1) libyui-qt (4.6.0 -> 4.6.1) libyui-qt-graph (4.6.0 -> 4.6.1) libyui-qt-pkg (4.6.0 -> 4.6.1) microos-tools (2.21+git0 -> 2.21+git5) nvme-cli perl-CGI (4.57 -> 4.590.0) pipewire (0.3.80 -> 0.3.81) python-sniffio python-urllib3 qt6-base (6.5.3 -> 6.6.0) qt6-declarative (6.5.3 -> 6.6.0) qt6-imageformats (6.5.3 -> 6.6.0) qt6-translations (6.5.3 -> 6.6.0) qt6-wayland (6.5.3 -> 6.6.0) samba (4.19.0+git.306.19d2e214c58 -> 4.19.1+git.312.c912b3d2ef6) selinux-policy (20230728 -> 20231012) udisks2 wireplumber (0.4.14 -> 0.4.15) === Details === ==== freetype2 ==== Version update (2.13.1 -> 2.13.2) - Update to version 2.13.2: - Better support for CFF2 variation fonts. - TrueType interpreter version 38 (also known as 'Infinality') has been removed. - Improved OpenVMS support. ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - Fix CVE-2023-4692 (bsc#1215935) - Fix CVE-2023-4693 (bsc#1215936) * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch * 0006-fs-ntfs-Make-code-more-readable.patch - Bump upstream SBAT generation to 4 ==== gtk3 ==== Subpackages: gtk3-data gtk3-immodule-amharic gtk3-immodule-inuktitut gtk3-immodule-thai gtk3-immodule-tigrigna gtk3-immodule-vietnamese gtk3-immodule-xim gtk3-lang gtk3-schema gtk3-tools libgtk-3-0 typelib-1_0-Gtk-3_0 - Revert RPM ternary operations on SLE where rpm version is not ready. ==== libgcrypt ==== Subpackages: libgcrypt20 libgcrypt20-32bit - POWER: performance enhancements for cryptography [jsc#PED-5088] * Optimize Chacha20 and Poly1305 for PPC P10 LE: [T6006] - Chacha20/poly1305: Optimized chacha20/poly1305 for P10 operation [rC88fe7ac33eb4] - ppc: enable P10 assembly with ENABLE_FORCE_SOFT_HWFEATURES on arch-3.00 [rC2c5e5ab6843d] * Add patches: - libgcrypt-Chacha20-poly1305-Optimized-chacha20-poly1305.patch - libgcrypt-ppc-enable-P10-assembly-with-ENABLE_FORCE_SOF.patch ==== libnvme ==== Subpackages: libnvme-mi1 libnvme1 - Add missing jsc# tracking references to changelog ==== libyui ==== Version update (4.6.0 -> 4.6.1) - Qt Pkg: Show patterns order column if environment variable Y2_SHOW_PATTERNS_ORDER is set - Qt Pkg: Show invisible patterns if environment variable SHOW_INVISIBLE_PATTERNS is set - Qt Pkg: Fixed pattern categories order: Use first, not last pattern (bsc#1216093) https://github.com/libyui/libyui/pull/107 - 4.6.1 ==== libyui-ncurses ==== Version update (4.6.0 -> 4.6.1) - Qt Pkg: Show patterns order column if environment variable Y2_SHOW_PATTERNS_ORDER is set - Qt Pkg: Show invisible patterns if environment variable SHOW_INVISIBLE_PATTERNS is set - Qt Pkg: Fixed pattern categories order: Use first, not last pattern (bsc#1216093) https://github.com/libyui/libyui/pull/107 - 4.6.1 ==== libyui-ncurses-pkg ==== Version update (4.6.0 -> 4.6.1) - Qt Pkg: Show patterns order column if environment variable Y2_SHOW_PATTERNS_ORDER is set - Qt Pkg: Show invisible patterns if environment variable SHOW_INVISIBLE_PATTERNS is set - Qt Pkg: Fixed pattern categories order: Use first, not last pattern (bsc#1216093) https://github.com/libyui/libyui/pull/107 - 4.6.1 ==== libyui-qt ==== Version update (4.6.0 -> 4.6.1) - Qt Pkg: Show patterns order column if environment variable Y2_SHOW_PATTERNS_ORDER is set - Qt Pkg: Show invisible patterns if environment variable SHOW_INVISIBLE_PATTERNS is set - Qt Pkg: Fixed pattern categories order: Use first, not last pattern (bsc#1216093) https://github.com/libyui/libyui/pull/107 - 4.6.1 ==== libyui-qt-graph ==== Version update (4.6.0 -> 4.6.1) - Qt Pkg: Show patterns order column if environment variable Y2_SHOW_PATTERNS_ORDER is set - Qt Pkg: Show invisible patterns if environment variable SHOW_INVISIBLE_PATTERNS is set - Qt Pkg: Fixed pattern categories order: Use first, not last pattern (bsc#1216093) https://github.com/libyui/libyui/pull/107 - 4.6.1 ==== libyui-qt-pkg ==== Version update (4.6.0 -> 4.6.1) - Qt Pkg: Show patterns order column if environment variable Y2_SHOW_PATTERNS_ORDER is set - Qt Pkg: Show invisible patterns if environment variable SHOW_INVISIBLE_PATTERNS is set - Qt Pkg: Fixed pattern categories order: Use first, not last pattern (bsc#1216093) https://github.com/libyui/libyui/pull/107 - 4.6.1 ==== microos-tools ==== Version update (2.21+git0 -> 2.21+git5) - Update to version 2.21+git5: * 98selinux-microos: Set mount propagation properly * 98selinux-microos: Convert tabs to spaces * 98selinux-microos: Don't include setenforce unnecessarily * Add spec file * systemd-proxy-env: fix typos in setup-systemd-proxy-env - Use the .spec file from the repo ==== nvme-cli ==== Subpackages: nvme-cli-bash-completion - Add missing jsc# and bsc# tracking entries in change log. ==== perl-CGI ==== Version update (4.57 -> 4.590.0) - updated to 4.59 see /usr/share/doc/packages/perl-CGI/Changes 4.59 2023-10-02 [ FIX ] - Bring VERSION values inline 4.58 2023-10-02 [ FIX ] - Update cookie expires date format (GH #258 , thanks to robbiebow) ==== pipewire ==== Version update (0.3.80 -> 0.3.81) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-jack pipewire-lang pipewire-libjack-0_3 pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Add patches from upstream that fix pro-audio not producing any sound in 0.3.81: * 0001-alsa-add-api.alsa.auto-link-option.patch * 0002-acp-fix-compilation.patch * 0003-acp-only-join-and-link-when-1-capture-and-1-playback.patch * 0004-acp-only-disable-tsched-when-linking.patch - Add patch from upstream that fixes issues when PCM is stopped, which includes fixing sound in qemu: * 0001-alsa-dont-check-early-wakeup-when-PCM-stopped.patch - Pipewire now requires vulkan 1.3, so we have to disable vulkan support if this requirement is not fulfilled in order to build correctly in Leap. - Update to version 0.3.81: * Highlights - jackdbus support is now enabled by default. - IRQ based scheduling in ALSA was improved and enabled by default for Pro-Audio profile. It will also link the pcms together to get lower latency. This now matches what JACK does and gives equal latency to PipeWire for Pro-Audio profiles. - Support both old and new versions of webrtc-audio-processing to make the transition easier. - Forced quantum changes by nodes or metadata will now also force a suspend and resume of the graph, like the rate changes to make sure all nodes adapt to the new quantum. This is important for Pro-Audio nodes that need to reconfigure the hardware to a new period in IRQ-based scheduling. - Fix a regression in regex parsing. - Many bugfixes and improvements. * PipeWire - jackdbus is by default enabled now. The idea is that when jackdbus is installed, the real libjack.so is in the path and we can become a real JACK client. - Forces quantum changes by nodes or metadata will now also force a suspend and resume in the graph, like the rate changes to make sure all nodes adapt to the new quantum. This is important for Pro-Audio nodes that need to reconfigure the hardware to a new period. - The stream now has an EARLY_PROCESS option that can be used to implement custom buffer fill levels. - Fix a regression in regex parsing. - Fix a bug in position reporting in the driver node. - Destroying a link will now recalculate the graph correctly. - Fix the rate comparison for finding the best rate in the graph. - Use malloc_trim() when available to release memory. * Tools - pw-cat now supports DFF DSD files. - pw-cli avoid some NULL derefs in some cases. * Modules - The RAOP sink has seen some cleanups and improvements. It will now ask for feedback every 2 seconds to keep some devices alive. - A bug in filter-chain was fixed where it would fail to apply the gain when when mixing just one source. - The filter-chain can now pass the stream volume to a control in the filter-chain graph. - Improve volume handling in RAOP sink. * Pulse-server - Some cleanup in the pending_stream handling. - Fix a regression in the event emission code where it failed to emit a changed event when a node was linked. - Lower the realtime priority of pulseaudio clients. - Set pulse.module.id on the echo-cancel streams. * SPA - Support both old and new versions of webrtc-audio-processing to make the transition easier. - The ALSA driver now does the synch of all followers directly from the wakeup event. This results in more stable rate matching. - IRQ based scheduling in ALSA was improved and enabled by default for Pro-Audio profile. It will also link the pcms together to get lower latency. This now matches what JACK does and gives equal latency to PipeWire for Pro-Audio profiles. - GNU/Hurd support was added. - Some improvements to passthrough handling. * Bluetooth - Improvements to the codec handling when PipeWire is used as Audio Gateway. - Adapt to new Bluez API for BAP devices. * JACK - When the jack library is set in the default library path, avoid using LD_LIBRARY_PATH because this can cause confusion. - Handle clearing the latency on a port. - jack_property now always manages to actually change the metadata because it waits for a roundtrip before exiting. ==== python-sniffio ==== - Clean up the SPEC file ==== python-urllib3 ==== - Update Buildrequires to upstream list. ==== qt6-base ==== Version update (6.5.3 -> 6.6.0) Subpackages: libQt6Core6 libQt6DBus6 libQt6Gui6 libQt6Network6 libQt6OpenGL6 libQt6Sql6 libQt6Test6 libQt6Widgets6 qt6-network-tls qt6-platformtheme-gtk3 - Update to 6.6.0 * https://www.qt.io/blog/qt-6.6-released - Add patch to fix creation of -debuginfo packages for qmake builds: * 0001-Don-t-strip-binaries-when-building-with-qmake.patch ==== qt6-declarative ==== Version update (6.5.3 -> 6.6.0) Subpackages: libQt6LabsAnimation6 libQt6LabsFolderListModel6 libQt6LabsQmlModels6 libQt6LabsSettings6 libQt6LabsSharedImage6 libQt6LabsWavefrontMesh6 libQt6Qml6 libQt6QmlCore6 libQt6QmlLocalStorage6 libQt6QmlModels6 libQt6QmlWorkerScript6 libQt6QmlXmlListModel6 libQt6Quick6 libQt6QuickControls2-6 libQt6QuickControls2Impl6 libQt6QuickDialogs2-6 libQt6QuickDialogs2QuickImpl6 libQt6QuickDialogs2Utils6 libQt6QuickEffects6 libQt6QuickLayouts6 libQt6QuickParticles6 libQt6QuickShapes6 libQt6QuickTemplates2-6 libQt6QuickTest6 qt6-declarative-imports - Update to 6.6.0 * https://www.qt.io/blog/qt-6.6-released ==== qt6-imageformats ==== Version update (6.5.3 -> 6.6.0) - Update to 6.6.0 * https://www.qt.io/blog/qt-6.6-released ==== qt6-translations ==== Version update (6.5.3 -> 6.6.0) - Update to 6.6.0 * https://www.qt.io/blog/qt-6.6-released ==== qt6-wayland ==== Version update (6.5.3 -> 6.6.0) Subpackages: libQt6WaylandClient6 libQt6WaylandCompositor6 libQt6WaylandEglClientHwIntegration6 libQt6WaylandEglCompositorHwIntegration6 libQt6WlShellIntegration6 - Update to 6.6.0 * https://www.qt.io/blog/qt-6.6-released ==== samba ==== Version update (4.19.0+git.306.19d2e214c58 -> 4.19.1+git.312.c912b3d2ef6) Subpackages: libsamba-policy0-python3 samba-ad-dc-libs samba-client samba-client-32bit samba-client-libs samba-client-libs-32bit samba-gpupdate samba-ldb-ldap samba-libs samba-libs-python3 samba-python3 samba-winbind samba-winbind-libs samba-winbind-libs-32bit - CVE-2023-4091: samba: Client can truncate file with read-only permissions; (bsc#1215904); (bso#15439). - CVE-2023-42669: samba: rpcecho, enabled and running in AD DC, allows blocking sleep on request; (bso#1215905); (bso#15474). - CVE-2023-42670: samba: The procedure number is out of range when starting Active Directory Users and Computers; (bsc#1215906); (bso#15473). - CVE-2023-3961: samba: Unsanitized client pipe name passed to local_np_connect(); (bsc#1215907); (bso#15422). - CVE-2023-4154: samba: dirsync allows SYSTEM access with only "GUID_DRS_GET_CHANGES" right, not "GUID_DRS_GET_ALL_CHANGES; (bsc#1215908); (bso#15424). ==== selinux-policy ==== Version update (20230728 -> 20231012) Subpackages: selinux-policy-targeted - Update to version 20231012: * Allow sssd_t watch permission to net_conf_t dirs (bsc#1216052) * Revert fix for bsc#1205770 since it causes a regression for bsc#1214887 ==== udisks2 ==== Subpackages: libudisks2-0 libudisks2-0_btrfs udisks2-bash-completion udisks2-lang - fix mount failure on ntfs formatted usb disks (bsc#1216055) * add: 0001-doc-Clarify-the-Filesystem.Size-property-presence.patch 0001-tests-Mark-UDF-fstab-filesystem-tests-as-unstable.patch 0001-udiskslinuxfilesystem-Refactor-internal-whitelists.patch 0001-tests-Add-offline-and-online-filesystem-grow-tests.patch 0001-udiskslinuxfilesystem-Force-native-tools-for-mounted.patch ==== wireplumber ==== Version update (0.4.14 -> 0.4.15) Subpackages: libwireplumber-0_4-0 wireplumber-audio wireplumber-lang - Update to version 0.4.15: * Additions: - A new "DSP policy" module has been added; its purpose is to automatically load a filter-chain when a certain hardware device is present, so that audio always goes through this software DSP before reaching the device. This is mainly to support Apple M1/M2 devices, which require a software DSP to be always present - WpImplModule now supports loading module arguments directly from a SPA-JSON config file; this is mainly to support DSP configuration for Apple M1/M2 and will likely be reworked for 0.5 - Added support for automatically combining Bluetooth LE Audio device sets (e.g. pairs of earbuds) (!500) - Added command line options in wpctl to display device/node names and nicknames instead of descriptions - Added zsh completions file for wpctl - The device profile selection policy now respects the device.profile property if it is set on the device; this is useful to hand-pick a profile based on static configuration rules (alsa_monitor.rules) * Changes/Fixes: - Linking policy now sends an error to the client before destroying the node, if it determines that the node cannot be linked to any target; this fixes error reporting on the client side - Fixed a crash in suspend-node that could happen when destroying virtual sinks that were loaded from another process such as pw-loopback - Virtual machine default period size has been bumped to 1024 - Updated bluez5 default configuration, using bluez5.roles instead of bluez5.headset-roles now (!498) - Disabled Bluetooth autoconnect by default (!514) - Removed RestrictNamespaces option from the systemd services in order to allow libcamera to load sandboxed IPA modules - Fixed a JSON encoding bug with empty strings - Lua code can now parse strings without quotes from SPA-JSON - Added some missing \since annotations and made them show up in the generated gobject-introspection file, to help bindings generators - Add zsh-completion subpackage

1 0

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 14 Oct '23

14 Oct '23

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have had problems for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - pgadmin4: Fails to build - trurl: Fails to build Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

1 0

New Tumbleweed snapshot 20231012 released!
by Dominique Leuenberger 14 Oct '23

14 Oct '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ImageMagick (7.1.1.19 -> 7.1.1.20) akonadi-calendar (23.08.1 -> 23.08.2) akonadi-calendar-tools (23.08.1 -> 23.08.2) akonadi-contact (23.08.1 -> 23.08.2) akonadi-import-wizard (23.08.1 -> 23.08.2) akonadi-mime (23.08.1 -> 23.08.2) akonadi-notes (23.08.1 -> 23.08.2) akonadi-search (23.08.1 -> 23.08.2) akonadi-server (23.08.1 -> 23.08.2) akregator (23.08.1 -> 23.08.2) analitza (23.08.1 -> 23.08.2) ark (23.08.1 -> 23.08.2) baloo5-widgets (23.08.1 -> 23.08.2) blinken (23.08.1 -> 23.08.2) calendarsupport (23.08.1 -> 23.08.2) curl (8.3.0 -> 8.4.0) dolphin (23.08.1 -> 23.08.2) emacs eventviews (23.08.1 -> 23.08.2) ffmpegthumbs (23.08.1 -> 23.08.2) filelight (23.08.1 -> 23.08.2) gnome-control-center gnome-shell grantleetheme (23.08.1 -> 23.08.2) gwenview5 (23.08.1 -> 23.08.2) incidenceeditor (23.08.1 -> 23.08.2) kaccounts-integration (23.08.1 -> 23.08.2) kaccounts-providers (23.08.1 -> 23.08.2) kaddressbook (23.08.1 -> 23.08.2) kalgebra (23.08.1 -> 23.08.2) kamera (23.08.1 -> 23.08.2) kanagram (23.08.1 -> 23.08.2) kapptemplate (23.08.1 -> 23.08.2) kate (23.08.1 -> 23.08.2) kbruch (23.08.1 -> 23.08.2) kcachegrind (23.08.1 -> 23.08.2) kcalc (23.08.1 -> 23.08.2) kcalutils (23.08.1 -> 23.08.2) kcharselect (23.08.1 -> 23.08.2) kcolorchooser (23.08.1 -> 23.08.2) kde-print-manager (23.08.1 -> 23.08.2) kdeconnect-kde (23.08.1 -> 23.08.2) kdeedu-data (23.08.1 -> 23.08.2) kdegraphics-thumbnailers (23.08.1 -> 23.08.2) kdenetwork-filesharing (23.08.1 -> 23.08.2) kdepim-addons (23.08.1 -> 23.08.2) kdepim-runtime (23.08.1 -> 23.08.2) kdialog (23.08.1 -> 23.08.2) kernel-firmware (20230829 -> 20231006) kgeography (23.08.1 -> 23.08.2) khangman (23.08.1 -> 23.08.2) khelpcenter5 (23.08.1 -> 23.08.2) kidentitymanagement (23.08.1 -> 23.08.2) kig (23.08.1 -> 23.08.2) kimap (23.08.1 -> 23.08.2) kio-extras5 (23.08.1 -> 23.08.2) kio_audiocd (23.08.1 -> 23.08.2) kipi-plugins (23.08.1 -> 23.08.2) kiten (23.08.1 -> 23.08.2) kitinerary (23.08.1 -> 23.08.2) kldap (23.08.1 -> 23.08.2) kleopatra (23.08.1 -> 23.08.2) kmag (23.08.1 -> 23.08.2) kmahjongg (23.08.1 -> 23.08.2) kmail (23.08.1 -> 23.08.2) kmail-account-wizard (23.08.1 -> 23.08.2) kmailtransport (23.08.1 -> 23.08.2) kmbox (23.08.1 -> 23.08.2) kmime (23.08.1 -> 23.08.2) kmines (23.08.1 -> 23.08.2) kmousetool (23.08.1 -> 23.08.2) kmplot (23.08.1 -> 23.08.2) knotes (23.08.1 -> 23.08.2) kompare (23.08.1 -> 23.08.2) konsole (23.08.1 -> 23.08.2) kontact (23.08.1 -> 23.08.2) kontactinterface (23.08.1 -> 23.08.2) konversation (23.08.1 -> 23.08.2) korganizer (23.08.1 -> 23.08.2) kpat (23.08.1 -> 23.08.2) kpimtextedit (23.08.1 -> 23.08.2) kpkpass (23.08.1 -> 23.08.2) kqtquickcharts (23.08.1 -> 23.08.2) kreversi (23.08.1 -> 23.08.2) ksanecore (23.08.1 -> 23.08.2) ksmtp (23.08.1 -> 23.08.2) ksudoku (23.08.1 -> 23.08.2) ktnef (23.08.1 -> 23.08.2) ktouch (23.08.1 -> 23.08.2) kwalletmanager5 (23.08.1 -> 23.08.2) kwordquiz (23.08.1 -> 23.08.2) libev libgexiv2 libglvnd (1.6.0 -> 1.7.0) libgravatar (23.08.1 -> 23.08.2) libkcddb (23.08.1 -> 23.08.2) libkcompactdisc (23.08.1 -> 23.08.2) libkdcraw (23.08.1 -> 23.08.2) libkdegames (23.08.1 -> 23.08.2) libkdepim (23.08.1 -> 23.08.2) libkeduvocdocument (23.08.1 -> 23.08.2) libkexiv2 (23.08.1 -> 23.08.2) libkgapi (23.08.1 -> 23.08.2) libkipi (23.08.1 -> 23.08.2) libkleo (23.08.1 -> 23.08.2) libkmahjongg (23.08.1 -> 23.08.2) libkomparediff2 (23.08.1 -> 23.08.2) libksane (23.08.1 -> 23.08.2) libksieve (23.08.1 -> 23.08.2) libtirpc (1.3.3 -> 1.3.4) libzypp (17.31.20 -> 17.31.22) lokalize (23.08.1 -> 23.08.2) mailcommon (23.08.1 -> 23.08.2) mailimporter (23.08.1 -> 23.08.2) malcontent (0.10.4 -> 0.11.1) mbox-importer (23.08.1 -> 23.08.2) messagelib (23.08.1 -> 23.08.2) mobipocket (23.08.1 -> 23.08.2) mutter okular (23.08.1 -> 23.08.2) parley (23.08.1 -> 23.08.2) pim-data-exporter (23.08.1 -> 23.08.2) pim-sieve-editor (23.08.1 -> 23.08.2) pimcommon (23.08.1 -> 23.08.2) python-pycurl rubygem-parser (3.2.2.3 -> 3.2.2.4) rubygem-rubocop (1.56.3 -> 1.57.0) signon-kwallet-extension (23.08.1 -> 23.08.2) skanlite (23.08.1 -> 23.08.2) spectacle (23.08.1 -> 23.08.2) step (23.08.1 -> 23.08.2) umbrello (23.08.1 -> 23.08.2) xscreensaver (6.07 -> 6.08) yast2-country (4.6.3 -> 5.0.1) yast2-x11 (4.6.0 -> 5.0.1) zypper (1.14.64 -> 1.14.66) === Details === ==== ImageMagick ==== Version update (7.1.1.19 -> 7.1.1.20) Subpackages: ImageMagick-config-7-SUSE ImageMagick-extra libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - version update to 7.1.1.20 * https://github.com/ImageMagick/Website/blob/main/ChangeLog.md ==== akonadi-calendar ==== Version update (23.08.1 -> 23.08.2) Subpackages: akonadi-plugin-calendar kalendarac libKPim5AkonadiCalendar5 libKPim5AkonadiCalendar5-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== akonadi-calendar-tools ==== Version update (23.08.1 -> 23.08.2) Subpackages: akonadi-calendar-tools-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== akonadi-contact ==== Version update (23.08.1 -> 23.08.2) Subpackages: akonadi-contact-lang akonadi-plugin-contacts libKPim5AkonadiContact5 libKPim5ContactEditor5 - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== akonadi-import-wizard ==== Version update (23.08.1 -> 23.08.2) Subpackages: akonadi-import-wizard-lang libKPim5ImportWizard5 - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== akonadi-mime ==== Version update (23.08.1 -> 23.08.2) Subpackages: akonadi-plugin-mime libKPim5AkonadiMime5 libKPim5AkonadiMime5-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== akonadi-notes ==== Version update (23.08.1 -> 23.08.2) Subpackages: libKPim5AkonadiNotes5 libKPim5AkonadiNotes5-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== akonadi-search ==== Version update (23.08.1 -> 23.08.2) Subpackages: akonadi-search-lang libKPim5AkonadiSearch5 - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - Changes since 23.08.1: * Update Rust dependencies (kde#474526) * Move convertion from html to text out-of-process (kde#474747) ==== akonadi-server ==== Version update (23.08.1 -> 23.08.2) Subpackages: akonadi-server-lang libKPim5AkonadiAgentBase5 libKPim5AkonadiCore5 libKPim5AkonadiPrivate5 libKPim5AkonadiWidgets5 libKPim5AkonadiXml5 - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== akregator ==== Version update (23.08.1 -> 23.08.2) Subpackages: akregator-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== analitza ==== Version update (23.08.1 -> 23.08.2) Subpackages: analitza-lang libAnalitza8 - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== ark ==== Version update (23.08.1 -> 23.08.2) Subpackages: ark-lang libkerfuffle23 - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - Changes since 23.08.1: * snapcraft: put rar in list. * snapcraft: rar in amd64 only. * snapcraft: set qt plugin path in build and runtime env. * snapcraft: Initial add file * Drop unused ItemModels dependency * Add missing KWindowSystem dependency ==== baloo5-widgets ==== Version update (23.08.1 -> 23.08.2) Subpackages: baloo5-widgets-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== blinken ==== Version update (23.08.1 -> 23.08.2) Subpackages: blinken-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== calendarsupport ==== Version update (23.08.1 -> 23.08.2) Subpackages: libKPim5CalendarSupport5 libKPim5CalendarSupport5-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== curl ==== Version update (8.3.0 -> 8.4.0) Subpackages: libcurl4 - Update to 8.4.0: * Security fixes: - SOCKS5 heap buffer overflow [bsc#1215888, CVE-2023-38545] - cookie injection with none file [bsc#1215889, CVE-2023-38546] * Changes: - curl: add support for the IPFS protocols via HTTP gateway - curl_multi_get_handles: get easy handles from a multi handle - mingw: delete support for legacy mingw.org toolchain * Bugfixes: - base64: also build for curl - cf-socket: simulate slow/blocked receives in debug - configure: check for the capath by default - connect: expire the timeout when trying next - connect: only start the happy eyeballs timer when needed - cookie: do not store the expire or max-age strings - cookie: remove unnecessary struct fields - cookie: set ->running in cookie_init even if data is NULL - create-dirs.d: clarify it also uses --output-dirs - http2: refused stream handling for retry - http: h1/h2 proxy unification - http: use per-request counter to check too large headers - idn: if idn2_check_version returns NULL, return error - lib: enable hmac for digest as well - lib: let the max filesize option stop too big transfers too - lib: move handling of 'data->req.writer_stack' into Curl_client_write() - lib: provide and use Curl_hexencode - lib: use wrapper for curl_mime_data fseek callback - libssh2: fix error message on failed pubkey-from-file - libssh: cap SFTP packet size sent - MQTT: improve receive of ACKs - multi: do CURLM_CALL_MULTI_PERFORM at two more places - multi: round the timeout up to prevent early wakeups - openssl: improve ssl shutdown handling - openssl: use X509_ALGOR_get0 instead of reaching into X509_ALGOR - pytest: exclude test_03_goaway in CI runs due to timing dependency - quic: set ciphers/curves the same way regular TLS does - quiche: fix build error with --with-ca-fallback - socks: return error if hostname too long for remote resolve - tftpd: always use curl's own tftp.h - tool_getparam: accept variable expansion on file names too - upload-file.d: describe the file name slash/backslash handling - url: fall back to http/https proxy env-variable if ws/wss not set - url: fix netrc info message - wolfssh: do cleanup in Curl_ssh_cleanup - wolfssl: allow capath with CURLOPT_CAINFO_BLOB - wolfssl: if CURLOPT_CAINFO_BLOB is set, ignore the CA files - wolfssl: ignore errors in CA path * Rebase libcurl-ocloexec.patch ==== dolphin ==== Version update (23.08.1 -> 23.08.2) Subpackages: dolphin-part dolphin-part-lang libdolphinvcs5 - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== emacs ==== Subpackages: emacs-el emacs-eln emacs-info emacs-nox emacs-x11 etags - For the at-spi bus the package at-spi2-core is required - Move eln prune code from ~/.gnu-emacs to site-start - Avoid warnings about eln files as well as prune older eln files - Add packaging macros for Emacs packages - Add site-lisp directory for dynamic modules ==== eventviews ==== Version update (23.08.1 -> 23.08.2) Subpackages: libKPim5EventViews5 libKPim5EventViews5-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== ffmpegthumbs ==== Version update (23.08.1 -> 23.08.2) - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - Changes since 23.08.1: * Drop unused KI18n header/dependency ==== filelight ==== Version update (23.08.1 -> 23.08.2) Subpackages: filelight-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - Changes since 23.08.1: * Revert "Fix ignore path support. Fix crash when we load root path" * tests: cripple freebsd testing ==== gnome-control-center ==== Subpackages: gnome-control-center-color gnome-control-center-goa gnome-control-center-lang gnome-control-center-user-faces - Add gnome-control-center-network-fix-nmce-popup.patch: network-connection-editor: Close the editor when nm-connection-editor exits(bsc#1208193 glgo#GNOME/gnome-control-center!1956). ==== gnome-shell ==== Subpackages: gnome-extensions gnome-shell-calendar gnome-shell-lang - Add gnome-shell-add-linkoption-dl.patch on SLE and Leap: the -ldl option to build gnome-shell main programme is needed because an upstream fix. This option needs explicitly given on current SLE build environment. See: https://gitlab.gnome.org/GNOME/gnome-shell/-/commit/65cde18786e2bea8ffe3331… ==== grantleetheme ==== Version update (23.08.1 -> 23.08.2) Subpackages: grantleetheme-lang libKPim5GrantleeTheme5 - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== gwenview5 ==== Version update (23.08.1 -> 23.08.2) Subpackages: gwenview5-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== incidenceeditor ==== Version update (23.08.1 -> 23.08.2) Subpackages: libKPim5IncidenceEditor5 libKPim5IncidenceEditor5-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kaccounts-integration ==== Version update (23.08.1 -> 23.08.2) Subpackages: kaccounts-integration-lang libkaccounts2 - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kaccounts-providers ==== Version update (23.08.1 -> 23.08.2) Subpackages: kaccounts-providers-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kaddressbook ==== Version update (23.08.1 -> 23.08.2) Subpackages: kaddressbook-doc kaddressbook-lang libKPim5AddressbookImportExport5 - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kalgebra ==== Version update (23.08.1 -> 23.08.2) Subpackages: kalgebra-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kamera ==== Version update (23.08.1 -> 23.08.2) Subpackages: kamera-lang kio_kamera - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kanagram ==== Version update (23.08.1 -> 23.08.2) Subpackages: kanagram-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kapptemplate ==== Version update (23.08.1 -> 23.08.2) Subpackages: kapptemplate-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kate ==== Version update (23.08.1 -> 23.08.2) Subpackages: kate-lang kate-plugins - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - Changes since 23.08.1: * ensure we don't crash if no item is selected (kde#475379) * Fix prettier.resolveConfig.sync is not a function (kde#474722) * Explicitly call QCoreApplication::exit() ==== kbruch ==== Version update (23.08.1 -> 23.08.2) Subpackages: kbruch-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kcachegrind ==== Version update (23.08.1 -> 23.08.2) Subpackages: kcachegrind-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kcalc ==== Version update (23.08.1 -> 23.08.2) Subpackages: kcalc-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kcalutils ==== Version update (23.08.1 -> 23.08.2) Subpackages: kcalutils-lang libKPim5CalendarUtils5 - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kcharselect ==== Version update (23.08.1 -> 23.08.2) Subpackages: kcharselect-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kcolorchooser ==== Version update (23.08.1 -> 23.08.2) Subpackages: kcolorchooser-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kde-print-manager ==== Version update (23.08.1 -> 23.08.2) Subpackages: kde-print-manager-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kdeconnect-kde ==== Version update (23.08.1 -> 23.08.2) Subpackages: kdeconnect-kde-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - Changes since 23.08.1: * Iterate KFilePlacesModel instead of using closestItem to remove SFTP entries (kde#461872) * Remove "Open on connected device via KDE Connect" (kde#472697) ==== kdeedu-data ==== Version update (23.08.1 -> 23.08.2) - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kdegraphics-thumbnailers ==== Version update (23.08.1 -> 23.08.2) - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kdenetwork-filesharing ==== Version update (23.08.1 -> 23.08.2) Subpackages: kdenetwork-filesharing-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kdepim-addons ==== Version update (23.08.1 -> 23.08.2) Subpackages: kdepim-addons-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kdepim-runtime ==== Version update (23.08.1 -> 23.08.2) Subpackages: kdepim-runtime-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - Changes since 23.08.1: * Fix reading DAV provider properties * Fix kpimtextedit dependency * Actually start job to read secret key (kde#470820) * Revert "Revert "Fix race condition when building"" * Revert "Revert "Use config plugin instead of out of process config dialog"" * Fix signal/slot - Drop patches, merged upstream: * 0001-Revert-Revert-Use-config-plugin-instead-of-out-of-pr.patch * 0002-Revert-Revert-Fix-race-condition-when-building.patch * 0003-Actually-start-job-to-read-secret-key.patch ==== kdialog ==== Version update (23.08.1 -> 23.08.2) Subpackages: kdialog-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kernel-firmware ==== Version update (20230829 -> 20231006) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Add Provides to sub-packages from kernel-firmware (bsc#1214789); this will work around the potential conflicts of compressed vs uncompressed installations - Update to version 20231006 (git commit 389575a8a177) (jsc#PED-6130, jsc#PED-6081): * WHENCE: add symlink for BananaPi M64 * linux-firmware: Add firmware file for Intel Bluetooth AX211 * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth AX211 * linux-firmware: Update firmware file for Intel Bluetooth AX211 * linux-firmware: Update firmware file for Intel Bluetooth AX210 * linux-firmware: Update firmware file for Intel Bluetooth 9560 * linux-firmware: Update firmware file for Intel Bluetooth 9260 * Build debian and fedora images * Add new Makefile target to build a deb and rpm package * i915: Update MTL DMC to v2.17 * iwlwifi: add FWs for new GL and MA device types with multiple RF modules * amd_pmf: Add initial PMF TA for Smart PC Solution Builder * linux-firmware: Update FW files for MRVL PCIE 8997 chipsets * rtl_bt: Update RTL8851B BT USB firmware to 0x048A_D230 * iwlwifi: add new FWs from core81-65 release * iwlwifi: update cc/Qu/QuZ firmwares for core81-65 release - Drop fdupes to avoid missing files for split packages (bsc#1215464) - Add conflicts to each split subpk against uncompressed raw package; the contents may conflict and the compressed files won't be effective unless the raw files get removed - Update aliases - Update to version 20230918 (commit f48da6da5507): * Run merge request pipelines for pre-commit. * linux-firmware: amd-ucode: Add note on fam19h warnings * i915: update MTL HuC to version 8.5.4 * amdgpu: update DMCUB to 0.0.183.0 for various AMDGPU ASICs - Update to version 20230907 (git commit c801b3b807d2): * Turn off textwidth check * linux-firmware: add link to sc8280xp audioreach firmware * qcom: sm8250: add RB5 sensors DSP firmware * qcom: Update vpu-1.0 firmware * qcom: sm8250: update DSP firmware * qcom: add firmware for the onboard WiFi on qcm2290 / qrb4210 * qcom: add venus firmware files for v6.0 * qcom: add firmware for QRB4210 platforms * qcom: add firmware for QCM2290 platforms * qcom: add GPU firmware for QCM2290 / QRB2210 * ath10k/WCN3990: move wlanmdsp to qcom/sdm845 * WHENCE: Don't compress qcom json files * WHENCE: amd-ucode: Use new RawFile keyword * check_whence: Recognize RawFile keyword * Only run ci-fairy on merge requests * Capture artifacts from `make dist` to save at release time. * Add new toplevel 'make dist' target. * Create symlinks for all firmware that is duplicate using rdfind * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00605 * Add shellcheck pre-commit target * Fix carl9170fw shell scripts for shellcheck errors * Add a rule for automatic tagging releases by pipeline schedule * Add gitlab ci for calling pre-commit and ci-fairy * Add Dockerfile used to build CI image * Rewrite README in markdown * Wire up pre-commit to `make check` * Add pre-commit hooks and codespell template * check_whence: reformat using python black - Drop obsoleted amd-ucode-rawfile.patch - Fix make-files.sh to handle RawFile tag correctly - Update aliases from 6.6-rc1 ==== kgeography ==== Version update (23.08.1 -> 23.08.2) Subpackages: kgeography-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== khangman ==== Version update (23.08.1 -> 23.08.2) Subpackages: khangman-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== khelpcenter5 ==== Version update (23.08.1 -> 23.08.2) Subpackages: khelpcenter5-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kidentitymanagement ==== Version update (23.08.1 -> 23.08.2) Subpackages: kidentitymanagement-lang libKPim5IdentityManagement5 libKPim5IdentityManagementWidgets5 - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kig ==== Version update (23.08.1 -> 23.08.2) Subpackages: kig-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kimap ==== Version update (23.08.1 -> 23.08.2) Subpackages: libKPim5IMAP5 libKPim5IMAP5-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kio-extras5 ==== Version update (23.08.1 -> 23.08.2) Subpackages: kio-extras5-lang libkioarchive5 - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - Changes since 23.08.1: * thumbnail Jpegcreator: skip exif thumbnail when too small (kde#466658) ==== kio_audiocd ==== Version update (23.08.1 -> 23.08.2) Subpackages: kio_audiocd-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kipi-plugins ==== Version update (23.08.1 -> 23.08.2) Subpackages: kipi-plugins-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kiten ==== Version update (23.08.1 -> 23.08.2) Subpackages: fonts-KanjiStrokeOrders kiten-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kitinerary ==== Version update (23.08.1 -> 23.08.2) Subpackages: libKPim5Itinerary5 libKPim5Itinerary5-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - Changes since 23.08.1: * Fix several copy/paste errors in SortUtil::hasStart/EndTime() * Add bookingkit PDF extractor script * Handle departure/arrival/duration triples in generic extraction as well * Update clang-tidy settings to something more reasonable * Make the Amadeus PDF timestamp workaround a bit less specific * Correctly compare times with and without timezones when merging * Fix parsing newer UK railway PDF tickets * Deal with an alternative way to mark non-reservation RSP-6 tickets * Fix parsing GWR iCal attachments for multi-leg train trips * Manually merge international Renfe results * Unify reservation/ticket number extraction for Renfe/Ouigo ES barcodes * Move Renfe barcode documentation to the wiki * Add a workaround for fixing broken UIC 918.3 payloads in Renfe tickets * Sanity-check the RCT2 traveler name * Handle one more data format in RCT2 tickets * Try barcode decoding both on transformed and untranformed source images * Remove some excessive debug output * Extract un-styled Pretix PDF tickets * Extract multi-leg Renfe tickets correctly * Make train number matching slightly less strict * Merge the two ÃBB UIC 918.3 extractor scripts * Extract multi-leg ÃBB PDF tickets * Fix online import of unidirectional SNCF bookings (kde#474197) ==== kldap ==== Version update (23.08.1 -> 23.08.2) Subpackages: kldap-lang libKPim5Ldap5 - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kleopatra ==== Version update (23.08.1 -> 23.08.2) Subpackages: kleopatra-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kmag ==== Version update (23.08.1 -> 23.08.2) Subpackages: kmag-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kmahjongg ==== Version update (23.08.1 -> 23.08.2) Subpackages: kmahjongg-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kmail ==== Version update (23.08.1 -> 23.08.2) Subpackages: kmail-application-icons kmail-lang ktnef - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kmail-account-wizard ==== Version update (23.08.1 -> 23.08.2) Subpackages: kmail-account-wizard-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kmailtransport ==== Version update (23.08.1 -> 23.08.2) Subpackages: kmailtransport-lang libKPim5MailTransport5 - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kmbox ==== Version update (23.08.1 -> 23.08.2) - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kmime ==== Version update (23.08.1 -> 23.08.2) Subpackages: libKPim5Mime5 libKPim5Mime5-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - Changes since 23.08.1: * Allow to parse specific Date. So we reduce the number of ==== kmines ==== Version update (23.08.1 -> 23.08.2) Subpackages: kmines-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kmousetool ==== Version update (23.08.1 -> 23.08.2) Subpackages: kmousetool-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kmplot ==== Version update (23.08.1 -> 23.08.2) Subpackages: kmplot-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== knotes ==== Version update (23.08.1 -> 23.08.2) Subpackages: knotes-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kompare ==== Version update (23.08.1 -> 23.08.2) Subpackages: kompare-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== konsole ==== Version update (23.08.1 -> 23.08.2) Subpackages: konsole-part konsole-part-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kontact ==== Version update (23.08.1 -> 23.08.2) Subpackages: kontact-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kontactinterface ==== Version update (23.08.1 -> 23.08.2) Subpackages: libKPim5KontactInterface5 libKPim5KontactInterface5-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== konversation ==== Version update (23.08.1 -> 23.08.2) Subpackages: konversation-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== korganizer ==== Version update (23.08.1 -> 23.08.2) Subpackages: korganizer-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kpat ==== Version update (23.08.1 -> 23.08.2) Subpackages: kpat-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - Changes since 23.08.1: * Add missing QtXml dependency ==== kpimtextedit ==== Version update (23.08.1 -> 23.08.2) Subpackages: libKPim5TextEdit5 libKPim5TextEdit5-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kpkpass ==== Version update (23.08.1 -> 23.08.2) - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kqtquickcharts ==== Version update (23.08.1 -> 23.08.2) - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kreversi ==== Version update (23.08.1 -> 23.08.2) Subpackages: kreversi-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - Changes since 23.08.1: * Fix missing "icon" image provider for QML popup messages * Add missing JobWidgets dependency ==== ksanecore ==== Version update (23.08.1 -> 23.08.2) Subpackages: ksanecore-lang libKSaneCore1 - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== ksmtp ==== Version update (23.08.1 -> 23.08.2) Subpackages: libKPim5SMTP5 libKPim5SMTP5-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== ksudoku ==== Version update (23.08.1 -> 23.08.2) Subpackages: ksudoku-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== ktnef ==== Version update (23.08.1 -> 23.08.2) Subpackages: libKPim5Tnef5 libKPim5Tnef5-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== ktouch ==== Version update (23.08.1 -> 23.08.2) Subpackages: ktouch-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kwalletmanager5 ==== Version update (23.08.1 -> 23.08.2) Subpackages: kwalletmanager5-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - Changes since 23.08.1: * Fix configure module name for Qt5 as well ==== kwordquiz ==== Version update (23.08.1 -> 23.08.2) Subpackages: kwordquiz-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== libev ==== - changed comment in sig file - modified sources % libev-4.33.tar.gz.sig ==== libgexiv2 ==== - Package sub-package python3-gexiv2 as noarch. ==== libglvnd ==== Version update (1.6.0 -> 1.7.0) - Update to 1.7.0: * meson.build: error out on unsupported OSes * Update bin/symbols-check.py from mesa/mesa@9d42e31b * EGL/libeglcurrent: fix crash on library unload * HGL: add Haiku libGL.so implementation based on EGL * symbols-check: Add Haiku platform symbols * tests/egl: Fix LIBRARY_PATH on Haiku ==== libgravatar ==== Version update (23.08.1 -> 23.08.2) Subpackages: libKPim5Gravatar5 libKPim5Gravatar5-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== libkcddb ==== Version update (23.08.1 -> 23.08.2) Subpackages: libKF5Cddb5 libkcddb-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== libkcompactdisc ==== Version update (23.08.1 -> 23.08.2) Subpackages: libKF5CompactDisc5 libkcompactdisc-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== libkdcraw ==== Version update (23.08.1 -> 23.08.2) - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== libkdegames ==== Version update (23.08.1 -> 23.08.2) Subpackages: kdegames-carddecks-default libKF5KDEGames7 libkdegames-lang libkdegames-qt5-imports - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - Changes since 23.08.1: * Fix memory leakage in destructors of KGameIOPrivate subclasses * Fix memory leakage of networking messages ==== libkdepim ==== Version update (23.08.1 -> 23.08.2) Subpackages: libKPim5Libkdepim5 libkdepim-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== libkeduvocdocument ==== Version update (23.08.1 -> 23.08.2) Subpackages: libKEduVocDocument5 libkeduvocdocument-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== libkexiv2 ==== Version update (23.08.1 -> 23.08.2) - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== libkgapi ==== Version update (23.08.1 -> 23.08.2) Subpackages: libKPim5GAPICalendar5 libKPim5GAPICore5 libKPim5GAPIPeople5 libKPim5GAPITasks5 libkgapi-lang sasl2-kdexoauth2 - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== libkipi ==== Version update (23.08.1 -> 23.08.2) Subpackages: libKF5Kipi32_0_0 libkipi-data - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== libkleo ==== Version update (23.08.1 -> 23.08.2) Subpackages: libKPim5libkleo5 libkleo-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== libkmahjongg ==== Version update (23.08.1 -> 23.08.2) Subpackages: libKF5KMahjongglib5 libkmahjongg-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - Changes since 23.08.1: * Drop hardcoded non-zero margin & spacing from selector UIs * Do not leak tileset objects from tileset selector widget destructor ==== libkomparediff2 ==== Version update (23.08.1 -> 23.08.2) Subpackages: libkomparediff2-5 libkomparediff2-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== libksane ==== Version update (23.08.1 -> 23.08.2) Subpackages: libKF5Sane5 libksane-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== libksieve ==== Version update (23.08.1 -> 23.08.2) Subpackages: libksieve-lang libksieve5 - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== libtirpc ==== Version update (1.3.3 -> 1.3.4) Subpackages: libtirpc-netconfig libtirpc3 - update to 1.3.4 (bsc#1199467) * binddynport.c honor ip_local_reserved_ports * gss-api: expose gss major/minor error in authgss_refresh() * rpcb_clnt.c: Eliminate double frees in delete_cache() * rpcb_clnt.c: memory leak in destroy_addr * portmapper: allow TCP-only portmapper * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep * clnt_raw.c: fix a possible null pointer dereference * bindresvport.c: fix a potential resource leakage ==== libzypp ==== Version update (17.31.20 -> 17.31.22) - Preliminary disable 'rpm --runposttrans' usage for chrooted systems (bsc#1216091) This limits the %transfiletrigger(postun|in) support in the default installer iff --root is used (as described in bug 1041742). The chrooted execution of the scripts in 'rpm - -runposttrans' broke in rpm-4.18. It's expected to be fixed in rpm-4.19. Then we'll enable the feature again. - fix comment typo on zypp.conf (boo#1215979) - version 17.31.22 (22) - Attempt to delay %transfiletrigger(postun|in) execution if rpm supports it (bsc#1041742) Decide during installation whether rpm is capable of delayed %posttrans %transfiletrigger(postun|in) execution or whether we can just handle the packages %posttrans. On TW a delayed %transfiletrigger handling is possible since rpm-4.17. - Make sure the old target is deleted before a new one is created (bsc#1203760) - version 17.31.21 (22) ==== lokalize ==== Version update (23.08.1 -> 23.08.2) Subpackages: lokalize-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== mailcommon ==== Version update (23.08.1 -> 23.08.2) Subpackages: libKPim5MailCommon5 mailcommon-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== mailimporter ==== Version update (23.08.1 -> 23.08.2) Subpackages: libKPim5MailImporter5 libKPim5MailImporterAkonadi5 mailimporter-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== malcontent ==== Version update (0.10.4 -> 0.11.1) Subpackages: libmalcontent-0-0 malcontent-control malcontent-lang typelib-1_0-Malcontent-0 - Update to version 0.11.1: + Bugs fixed: build: Switch to Mesonâs gnome.post_install function + Updated translations. - Changes from version 0.11.0: + libmalcontent-ui, and the malcontent-control application, now use libappstream rather than appstream-glib. + libmalcontent-ui, and the malcontent-control application, now use GTK 4 and libadwaita rather than GTK+ 3. + As a result of these changes, the pkg-config name has been bumped to libmalcontent-ui-1, and the gobject-introspection name to MalcontentUi-1. + Improve keyboard navigation of the malcontent-control application. + Updated translations. - Drop pkgconfig(gtk+-3.0) BuildRequires, and add desktop-file-utils, pkgconfig(gtk4) and pkgconfig(libadwaita-1) following upstream changes. - Rename libmalcontent-ui-0-0, typelib-1_0-MalcontentUi-0 and typelib-1_0-MalcontentUi-0 to libmalcontent-ui-1-1, typelib-1_0-MalcontentUi-1 and typelib-1_0-MalcontentUi-1 following upstream soname changes. ==== mbox-importer ==== Version update (23.08.1 -> 23.08.2) Subpackages: mbox-importer-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== messagelib ==== Version update (23.08.1 -> 23.08.2) Subpackages: messagelib-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - Changes since 23.08.1: * Fix crash when switching signed/encrypted emails very fast (kde#463083) ==== mobipocket ==== Version update (23.08.1 -> 23.08.2) - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== mutter ==== Subpackages: mutter-lang - Drop mutter-crash-meta_context_terminate.patch: Closed upstream via https://gitlab.gnome.org/GNOME/mutter/-/merge_requests/2609 ==== okular ==== Version update (23.08.1 -> 23.08.2) Subpackages: okular-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - Changes since 23.08.1: * markdown: Fix rendering with discount3 (kde#475198) * CI: fix which clang tidy we want ==== parley ==== Version update (23.08.1 -> 23.08.2) Subpackages: parley-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== pim-data-exporter ==== Version update (23.08.1 -> 23.08.2) Subpackages: pim-data-exporter-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== pim-sieve-editor ==== Version update (23.08.1 -> 23.08.2) Subpackages: pim-sieve-editor-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== pimcommon ==== Version update (23.08.1 -> 23.08.2) Subpackages: libKPim5PimCommon5 libKPim5PimCommonAkonadi5 - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== python-pycurl ==== - Skip test_multi_socket_select (gh#pycurl/pycurl#819), test_multi_socket_action (gh#pycurl/pycurl#729), and test_request_with_verifypeer (gh#pycurl/pycurl#822). ==== rubygem-parser ==== Version update (3.2.2.3 -> 3.2.2.4) - updated to version 3.2.2.4 v3.2.2.4 (2023-10-04) - -------------------- API modifications: * bump Racc to 1.7.1 (#930) (Koichi ITO) Bugs fixed: * Fix an error for flip-flop with beginless or endless ranges (#946) (Koichi ITO) ==== rubygem-rubocop ==== Version update (1.56.3 -> 1.57.0) - updated to version 1.57.0 [#]# 1.57.0 (2023-10-11) [#]## New features * [#12227](https://github.com/rubocop/rubocop/pull/12227): Add new `Style/SingleLineDoEndBlock` cop. ([@koic][]) * [#12246](https://github.com/rubocop/rubocop/pull/12246): Make `Lint/RedundantSafeNavigation` aware of constant receiver. ([@koic][]) * [#12257](https://github.com/rubocop/rubocop/issues/12257): Make `Style/RedundantDoubleSplatHashBraces` aware of `merge` methods. ([@koic][]) [#]## Bug fixes * [#12244](https://github.com/rubocop/rubocop/issues/12244): Fix a false negative for `Lint/Debugger` when using debugger method inside block. ([@koic][]) * [#12231](https://github.com/rubocop/rubocop/issues/12231): Fix a false negative for `Metrics/ModuleLength` when defining a singleton class in a module. ([@koic][]) * [#12249](https://github.com/rubocop/rubocop/issues/12249): Fix a false positive `Style/IdenticalConditionalBranches` when `if`..`else` with identical leading lines and assign to condition value. ([@koic][]) * [#12253](https://github.com/rubocop/rubocop/pull/12253): Fix `Lint/LiteralInInterpolation` to accept an empty string literal interpolated in words literal. ([@knu][]) * [#12198](https://github.com/rubocop/rubocop/issues/12198): Fix an error for flip-flop with beginless or endless ranges. ([@koic][]) * [#12259](https://github.com/rubocop/rubocop/issues/12259): Fix an error for `Lint/MixedCaseRange` when using nested character class in regexp. ([@koic][]) * [#12237](https://github.com/rubocop/rubocop/issues/12237): Fix an error for `Style/NestedTernaryOperator` when a ternary operator has a nested ternary operator within an `if`. ([@koic][]) * [#12228](https://github.com/rubocop/rubocop/pull/12228): Fix false negatives for `Style/MultilineBlockChain` when using multiline block chain with safe navigation operator. ([@koic][]) * [#12247](https://github.com/rubocop/rubocop/pull/12247): Fix false negatives for `Style/RedundantParentheses` when using logical or comparison expressions with redundant parentheses. ([@koic][]) * [#12226](https://github.com/rubocop/rubocop/issues/12226): Fix false positives for `Layout/MultilineMethodCallIndentation` when aligning methods in multiline block chain. ([@koic][]) * [#12076](https://github.com/rubocop/rubocop/issues/12076): Fixed an issue where the top-level cache folder was named differently during two consecutive rubocop runs. ([@K-S-A][]) [#]## Changes * [#12235](https://github.com/rubocop/rubocop/pull/12235): Enable auto parallel inspection when config file is specified. ([@aboutNisblee][]) * [#12234](https://github.com/rubocop/rubocop/pull/12234): Enhance `Style/FormatString`'s autocorrection when using known conversion methods whose return value is not an array. ([@koic][]) * [#12128](https://github.com/rubocop/rubocop/issues/12128): Make `Style/GuardClause` aware of `define_method`. ([@koic][]) * [#12126](https://github.com/rubocop/rubocop/pull/12126): Make `Style/RedundantFilterChain` aware of `select.present?` when `ActiveSupportExtensionsEnabled` config is `true`. ([@koic][]) * [#12250](https://github.com/rubocop/rubocop/pull/12250): Mark `Lint/RedundantRequireStatement` as unsafe autocorrect. ([@koic][]) * [#12097](https://github.com/rubocop/rubocop/issues/12097): Mark unsafe autocorrect for `Style/ClassEqualityComparison`. ([@koic][]) * [#12210](https://github.com/rubocop/rubocop/issues/12210): Mark `Style/RedundantFilterChain` as unsafe autocorrect. ([@koic][]) [#]# 1.56.4 (2023-09-28) [#]## Bug fixes * [#12221](https://github.com/rubocop/rubocop/issues/12221): Fix a false positive for `Layout/EmptyLineAfterGuardClause` when using `return` before guard condition with heredoc. ([@koic][]) * [#12213](https://github.com/rubocop/rubocop/issues/12213): Fix a false positive for `Lint/OrderedMagicComments` when comment text `# encoding: ISO-8859-1` is embedded within example code as source code comment. ([@koic][]) * [#12205](https://github.com/rubocop/rubocop/issues/12205): Fix an error for `Style/OperatorMethodCall` when using `foo bar./ baz`. ([@koic][]) * [#12208](https://github.com/rubocop/rubocop/issues/12208): Fix an incorrect autocorrect for the `--disable-uncorrectable` command line option when registering an offense is outside a percent array. ([@koic][]) * [#12203](https://github.com/rubocop/rubocop/pull/12203): Fix an incorrect autocorrect for `Lint/SafeNavigationChain` when using safe navigation with comparison operator as an expression of logical operator or comparison operator's operand. ([@koic][]) * [#12206](https://github.com/rubocop/rubocop/pull/12206): Fix an incorrect autocorrect for `Style/OperatorMethodCall` when using `foo./bar`. ([@koic][]) * [#12202](https://github.com/rubocop/rubocop/pull/12202): Fix an incorrect autocorrect for `Style/RedundantConditional` when unless/else with boolean results. ([@ydah][]) * [#12199](https://github.com/rubocop/rubocop/issues/12199): Fix false negatives for `Layout/MultilineMethodCallIndentation` when using safe navigation operator. ([@koic][]) [#]## Changes * [#12197](https://github.com/rubocop/rubocop/pull/12197): Make `Style/CollectionMethods` aware of `collect_concat`. ([@koic][]) ==== signon-kwallet-extension ==== Version update (23.08.1 -> 23.08.2) - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== skanlite ==== Version update (23.08.1 -> 23.08.2) Subpackages: skanlite-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== spectacle ==== Version update (23.08.1 -> 23.08.2) Subpackages: spectacle-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== step ==== Version update (23.08.1 -> 23.08.2) Subpackages: step-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== umbrello ==== Version update (23.08.1 -> 23.08.2) Subpackages: umbrello-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - Changes since 23.08.1: * Fix 'ERD lost foreign keys when loaded again' (kde#468728) * Fix umbrello not starting from KDE applications menu (kde#474587) * testumlroledialog: Fix crash (kde#474694) * Fixed display errors in the dialogs for searching objects and exporting images (kde#474539) ==== xscreensaver ==== Version update (6.07 -> 6.08) Subpackages: xscreensaver-data xscreensaver-data-extra xscreensaver-lang - update to 6.08: * fixes for other platforms ==== yast2-country ==== Version update (4.6.3 -> 5.0.1) Subpackages: yast2-country-data - use also kbd-model-map.xkb-generated (bsc#1211104) - sort the selection box of keyboard layouts alphabetically - 5.0.1 - 5.0.0 (#bsc1185510) ==== yast2-x11 ==== Version update (4.6.0 -> 5.0.1) - xkbctrl: use also kbd-model-map.xkb-generated (bsc#1211104) - 5.0.1 - 5.0.0 (#bsc1185510) ==== zypper ==== Version update (1.14.64 -> 1.14.66) Subpackages: zypper-log zypper-needs-restarting - Return 104 also if info suggests near matches (fixes #504) - Rephrase upgrade message for openSUSE Tumbleweed (bsc#1212422) - Fix typo (fixes #484) - version 1.14.66 - Fix some typos and spelling errors found by Lintian (fixes #501) - Prefer unaliased `grep` to avoid unexpected/wrong completions. (#503) - commit: Insert a headline to separate output of different rpm scripts (bsc#1041742) - Fix typo in changes file. - version 1.14.65

1 0

With Intuos4 not working with GNOME 45
by Jim Henderson 14 Oct '23

14 Oct '23

I opened a bug on b.o.o (https://bugzilla.opensuse.org/show_bug.cgi? id=1215631) on this, but am struggling to provide more information that would help resolve the issue. I have been using an Intuos4 tablet for years with openSUSE, and the update to GNOME 45 has rendered it mostly inoperable, both with the mouse and the pen. I'm on Tumbleweed. As described in the bug, mouse clicks are occasionally recognized in the UI (enough that I can get a bluetooth mouse working), but in both GNOME and non-GNOME applications, I sometimes can get a mouse click to be recognized by hitting the super key a couple of times (to bring up 'activities' and then close it again). Testing with xev shows the mouse button events are not being received by the X server. This worked just fine in GNOME 44. I'm at a loss as to what to look at to provide information that would be useful for getting this fixed. Anyone have any ideas that I haven't already described in the bug? -- Jim Henderson Please keep on-topic replies on the list so everyone benefits

2 8

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 13 Oct '23

13 Oct '23

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have had problems for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - deepin-api: Fails to build - galene: Fails to build - neovim: Fails to build - udp2raw-tunnel: Fails to build Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

2 1

Not receiving Factory list emails
by Joe Salmeri 13 Oct '23

13 Oct '23

For the last 3 days I have not received any of the Factory emails. I checked my subscription information and it says I'm subscribed and everything looks ok. Anybody else seeing this ? -- Regards, Joe

4 6

Certificate of IDP login server invalid
by Manfred Schwarb 13 Oct '23

13 Oct '23

Hi, when trying to log into bugzilla.opensuse.org resp. bugzilla.suse.com, one is redirected to idp-saml.suse.com which has an expired certificate. It expired 10.10.23, 09:36:24 MESZ Are people aware of this expiration? Where to report? Thanks, Manfred

3 2

Tumbleweed - Review of the week 2023/41
by Dominique Leuenberger 13 Oct '23

13 Oct '23

Dear Tumbleweed users and hackers, This week, we have published four snapshots; number 5 is in the process of syncing to the download infrastructure, but it seems to be taking slightly longer than it would. The four snapshots (1006, 1008, 1010, and 1011) brought you those changes: * NetworkManager 1.44.2 * Shadow 4.14.1 * Linux kernel 6.5.6 * Qt 5.15.11 * LibreOffice 7.6.2.1 * LLVM 17.0.2 * Node.JS 20.8.0 * gpg 2.4.3 * libcue 2.3.0 (CVE-2023-43641) Snapshot 1012 is currently syncing out and will contain cURL 8.4.0, which is fixing CVE-2023-3854 Other than that, you can expect these changes in the next few snapshots (depending on QA results of course): * KDE Gear 23.08.2 * zypper 1.14.66 * Freetype 2.13.2 * binutils 2.41: all flavors of rust fail to build * moving to dbus-broker Cheers, Dominique

1 0

New Tumbleweed snapshot 20231011 released!
by Dominique Leuenberger 13 Oct '23

13 Oct '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ModemManager abseil-cpp (20230802.0 -> 20230802.1) alsa c-ares (1.19.1 -> 1.20.1) calligra desktop-file-utils (0.26 -> 0.27) erofs-utils (1.6 -> 1.7) fuse3 (3.16.1 -> 3.16.2) gpg2 (2.4.0 -> 2.4.3) libcue (2.2.1 -> 2.3.0) libnvme libva (2.19.0 -> 2.20.0) libva-gl (2.19.0 -> 2.20.0) libxmlb (0.3.13 -> 0.3.14) nvme-cli orca (45.0 -> 45.1) patterns-gnome publicsuffix (20230826 -> 20230930) python-apipkg (3.0.1 -> 3.0.2) qpdf (11.6.1 -> 11.6.2) xkeyboard-config (2.39 -> 2.40) yast2-trans (84.87.20230930.5f9e01162a -> 84.87.20231004.bd479b5f2d) === Details === ==== ModemManager ==== Subpackages: ModemManager-bash-completion ModemManager-lang libmm-glib0 - Add explicit /usr/bin/dbus-daemon BuildRequires: Needed for tests. ==== abseil-cpp ==== Version update (20230802.0 -> 20230802.1) - update to 20230802.1: * Add StdcppWaiter to the end of the list of waiter implementations ==== alsa ==== Subpackages: libasound2 libatopology2 - Fix symbol version: 0005-seq-Fix-typos-in-symbol-version-definitions.patch ==== c-ares ==== Version update (1.19.1 -> 1.20.1) - Update to version 1.20.1 * Remove bin/acountry from built tools as nerd.dk is gone * Default per-query timeout has been reduced to 2s with a 3x retry count * rand: add support for getrandom() Bug fixes: * TCP back to back queries were broken * Ensure queries for ares_getaddrinfo() are not requeued during destruction * ares_getaddrinfo() should not retry other address classes if one address class has already been returned * Avoid production ill-formed result when qualifying a name with the root domain * Fix missing prefix for CMake generated libcares.pc * DNS server ports can now be read from system configuration instead of defaulting to port 53, aka openBSD resolv.conf format * Replace usages of sprintf with snprintf ==== calligra ==== - Replace freetype-devel BuildRequires with freetype2: this is actually what is needed, but as fontconfig happened to pull it in already, things happened to work. Freetype 1 is not needed here. ==== desktop-file-utils ==== Version update (0.26 -> 0.27) - Update to version 0.27: * common + Remove Autotools support. + Minor updates to project documentation. + Add pledge(2) support to remaining utilities + Add --version support to utilities. * desktop-file-validate + Support desktop spec version 1.5. + Add LXQt to categories. + Use DDE category for Deepin desktop. + Add Endless to list of desktop IDs. + Fix field code escaping in messages. * desktop-entry-mode.el + Highlight action groups when ID includes hyphens. - Drop patches (upstreamed): * 0001-validate-support-SingleMainWindow-key-from-1.5.patch * 0002-validate-Support-version-1.5.patch - Refresh desktop-file-utils-suse-keys.patch ==== erofs-utils ==== Version update (1.6 -> 1.7) - Update to version 1.7: * support arbitrary valid block sizes in addition to page size * (mkfs.erofs) arrange on-disk meta with Breadth-First Traversal instead * support long xattr name prefixes * support UUID functionality without libuuid * (mkfs.erofs, experimental) add DEFLATE algorithm support * (mkfs.erofs, experimental) support building images directly from tarballs * (dump.erofs) print more superblock fields * (mkfs.erofs, experimental) introduce preliminary rebuild mode * various bugfixes and cleanups (CVE-2023-33551, CVE-2023-33552) - Switch service to mode=manual, as 'disabled' is deprecated. ==== fuse3 ==== Version update (3.16.1 -> 3.16.2) Subpackages: libfuse3-3 - Update to release 3.16.2 * Various minor bugfixes and improvements. ==== gpg2 ==== Version update (2.4.0 -> 2.4.3) Subpackages: dirmngr gpg2-lang - Install the internal executables in the /usr/libexec dir instead of /usr/lib64. These files are keyboxd, scdaemon, gpg-auth gpg-check-pattern, gpg-pair-tool, gpg-preset-passphrase, gpg-protect-tool, gpg-wks-client, dirmngr_ldap and tpm2daemon. - Provide the systemd-user files since they have been removed upstream since version 2.4.1. [bsc#1201564] * Add gpg2-systemd-user.tar.xz ==== libcue ==== Version update (2.2.1 -> 2.3.0) - Update to release 2.3.0 * EOF check [CVE-2023-43641] - Drop 0001-Check-that-the-array-index-isn-t-negative.-This-fixe.patch - Add 0001-Check-that-the-array-index-isn-t-negative.-This-fixe.patch [CVE-2023-43641] ==== libnvme ==== Subpackages: libnvme-mi1 libnvme1 - Use glob for python3-libnvme file listening. Workaround pycache_only problems for SLE/Leap builds. - Drop usused libuuid dependency ==== libva ==== Version update (2.19.0 -> 2.20.0) Subpackages: libva-drm2 libva-wayland2 libva-x11-2 libva2 - Update to version 2.20.0: * av1: Revise offsets comments for av1 encode * drm: - Limit the array size to avoid out of range - Remove no longer used helpers * jpeg: add support for crop and partial decode * trace: - Add trace for vaExportSurfaceHandle - Unlock mutex before return - Fix minor issue about printf data type and value range * va/backend: - Annotate vafool as deprecated - Document the vaGetDriver* APIs * va/x11/va_fglrx: Remove some dead code * va/x11/va_nvctrl: Remove some dead code * va: - Add new VADecodeErrorType to indicate the reset happended in the driver - Add vendor string on va_TraceInitialize - Added Q416 fourcc (three-plane 16-bit YUV 4:4:4) - Drop no longer applicable vaGetDriverNames check - Fix:don't leak driver names, when override is set - Fix:set driver number to be zero if vaGetDriverNames failed - Optimize code of getting driver name for all protocols/os (wayland,x11,drm,win32,android) - Remove legacy code paths - Remove unreachable "DRIVER BUG" * win32: - Only print win32 driver messages in DEBUG builds - Remove duplicate adapter_luid entry * x11/dri2: limit the array handling to avoid out of range access * x11: - Allow disabling DRI3 via LIBVA_DRI3_DISABLE env var - Implement vaGetDriverNames - Remove legacy code paths - Refresh propagate-dpy.patch with quilt. ==== libva-gl ==== Version update (2.19.0 -> 2.20.0) - Update to version 2.20.0: * av1: Revise offsets comments for av1 encode * drm: - Limit the array size to avoid out of range - Remove no longer used helpers * jpeg: add support for crop and partial decode * trace: - Add trace for vaExportSurfaceHandle - Unlock mutex before return - Fix minor issue about printf data type and value range * va/backend: - Annotate vafool as deprecated - Document the vaGetDriver* APIs * va/x11/va_fglrx: Remove some dead code * va/x11/va_nvctrl: Remove some dead code * va: - Add new VADecodeErrorType to indicate the reset happended in the driver - Add vendor string on va_TraceInitialize - Added Q416 fourcc (three-plane 16-bit YUV 4:4:4) - Drop no longer applicable vaGetDriverNames check - Fix:don't leak driver names, when override is set - Fix:set driver number to be zero if vaGetDriverNames failed - Optimize code of getting driver name for all protocols/os (wayland,x11,drm,win32,android) - Remove legacy code paths - Remove unreachable "DRIVER BUG" * win32: - Only print win32 driver messages in DEBUG builds - Remove duplicate adapter_luid entry * x11/dri2: limit the array handling to avoid out of range access * x11: - Allow disabling DRI3 via LIBVA_DRI3_DISABLE env var - Implement vaGetDriverNames - Remove legacy code paths - Refresh propagate-dpy.patch with quilt. ==== libxmlb ==== Version update (0.3.13 -> 0.3.14) - baselibs.conf: don't build libxmlb2-32bit; baselibs.conf was added for the x86-64-v3 flavor; the -32bit was an unintended side effect. - Update to 0.3.14 * Fix comparing indexed text with integer values - Enable libstemmer-devel BuildRequires and pass stemmer=true to meson setup, libstemmer now available in Tumbleweed. - Use ldconfig_scriptlets macro for post(un) handling. ==== nvme-cli ==== Subpackages: nvme-cli-bash-completion - Use fixed timestamps for documentation allowing reproducable builds - Announce nvmeof-boot-support support via Provides - Filter rpmlint warnings for systemd-service-without-service_ macros - Add missing service files for NBFT feature * add 0001-fabrics-autoconnect-add-service-unit-for-connecting-.patch * add 0002-fabrics-add-udev-rule-to-avoid-renaming-nbft-interfa.patch ==== orca ==== Version update (45.0 -> 45.1) Subpackages: orca-lang - Update to version 45.1: + Web: - Fix regression in bookmark support. - Fix bug causing Orca to present some custom widgets as an image. + General: - Fix bug causing Orca to ignore objects that are valid because they had been defunct/invalid before. - Fix bug causing rewind and fast-forward in SayAll to fail. - Fix chattiness issue in mate-panel. - Only examine descriptions by default in isSameObject for Gtk apps for performance reasons. - Use AXObject.is_dead instead of the script utility for performance reasons. - Revert "Don't let brlapi crash us". This change was a workaround put in place to give distros enough time to get the fixed brltty, but it had a slight performance impact if braille was enabled but not being used. - Stop using deprecated Gtk API in the accessible actions menu. + Updated translations. ==== patterns-gnome ==== Subpackages: patterns-gnome-gnome patterns-gnome-gnome_basic patterns-gnome-gnome_basis patterns-gnome-gnome_basis_opt patterns-gnome-gnome_games patterns-gnome-gnome_imaging patterns-gnome-gnome_internet patterns-gnome-gnome_multimedia patterns-gnome-gnome_office patterns-gnome-gnome_utilities patterns-gnome-gnome_x11 patterns-gnome-gnome_yast patterns-gnome-sw_management_gnome - Disable (temp?) gnome-notes while we wait for upstream to fix the now 6 months old bug with it crashing in its search-provider. See https://gitlab.gnome.org/GNOME/gnome-notes/-/issues/196 and https://bugzilla.opensuse.org/show_bug.cgi?id=1210322 ==== publicsuffix ==== Version update (20230826 -> 20230930) - Update to version 20230930: * util: gTLD data autopull updates for 2023-09-30T15:11:25 UTC * Update .fr list, move some subspaces to PRIVATE section listing of smallregistry.net * Remove k12.de.us * Add wix.run ==== python-apipkg ==== Version update (3.0.1 -> 3.0.2) - update to 3.0.2: * Fix import path to make it vendoring-friendly * remove py reference from tests - switch to gh tarball to get tests again ==== qpdf ==== Version update (11.6.1 -> 11.6.2) - version update to 11.6.2: * Bug fix: when piping stream data, don't call finish on failure if the failure was caused by a previous call to finish. ==== xkeyboard-config ==== Version update (2.39 -> 2.40) Subpackages: xkeyboard-config-lang - Update to version 2.40 * mostly updated translation * a few bugfixes ==== yast2-trans ==== Version update (84.87.20230930.5f9e01162a -> 84.87.20231004.bd479b5f2d) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sr yast2-trans-sv yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20231004.bd479b5f2d: * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (German) * Translated using Weblate (German) * Translated using Weblate (German) * Translated using Weblate (Indonesian) * Translated using Weblate (Indonesian) * Translated using Weblate (Indonesian) * Translated using Weblate (Catalan) * Translated using Weblate (Catalan)

1 0

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 12 Oct '23

12 Oct '23

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have had problems for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - python-limnoria: Fails to build - python-nagiosplugin: Fails to build Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

1 0

Re: sddm stays black after recent TW update
by Adrian Glaubitz 12 Oct '23

12 Oct '23

Hi! On Thu, 2023-10-05 at 13:53 -0400, Eric Schwarzenbach wrote: > On 10/5/23 03:53, Adrian Glaubitz via openSUSE Factory wrote: > > Hello! > > > > After rebooting my Tumbleweed machine after one of the recent updates, sddm just shows a black screen with just the mouse pointer showing. > > > > I have not been able to pinpoint the cause of this but maybe someone else has and can help me save some time. > > Do you by any chance use nvidia and suse-prime? No and since the issue could be worked around by switching to lightdm, I don't think it's related to the graphics stack. Adrian

8 17

New Tumbleweed snapshot 20231010 released!
by Dominique Leuenberger 11 Oct '23

11 Oct '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: NetworkManager-applet (1.32.0 -> 1.34.0) frei0r-plugins (1.8.0 -> 2.3.1) gnome-characters hplip (3.23.5 -> 3.23.8) libvpx (1.13.0 -> 1.13.1) luajit opensc rubygem-parser (3.1.3.0 -> 3.2.2.3) rubygem-rubocop (1.39.0 -> 1.56.3) rubygem-rubocop-ast (1.24.0 -> 1.29.0) rubygem-unicode-display_width (2.3.0 -> 2.4.2) sshfs (3.7.4 -> 3.7.4a) xfce4-clipman-plugin (1.6.4 -> 1.6.5) zxing-cpp (2.0.0 -> 2.1.0) === Details === ==== NetworkManager-applet ==== Version update (1.32.0 -> 1.34.0) Subpackages: NetworkManager-connection-editor - Update to version 1.34.0: + Fix crash when importing WireGuard connections. + Fix ineffective "Don't show message again" button in notifications. + Drop build dependency on gudev. + Add setting to suppress broadband unlock prompt. + Replace occurrences of "master", "slave" and "blacklist". + Updated translations. - Drop long disabled polkit-devel BuildRequires, patch it was needed for is dropped. - Drop pkgconfig(gudev-1.0) BuildRequires: No longer needed following upstream changes. - Rebase feature-app-indicator-desktop-file.patch with quilt. - Pass sysconfdir=%{_distconfdir} to meson setup, move to UsrEtc. - Pass b_lto=true to meson setup, use link time optimization. - Add fdupes BuildRequires and macro, remove duplicate files. - Move translations to NetworkManager-connection-editor-lang, replace the NetworkManager-connection-editor Recommends with a hard Requires. Also add Obsoletes and Provides to ease updates. The reason for moving the translations are as follows: One can install NetworkManager-connection-editor without needing NetworkManager-applet, so in order to make the translations for NetworkManager-connection-editor installable without pulling the dependencies of NetworkManager-applet. ==== frei0r-plugins ==== Version update (1.8.0 -> 2.3.1) - Update to 2.3.1 (boo#1216050) Check https://github.com/dyne/frei0r/releases for the full list of changes. Changes since 2.3.0: * New kaleid0sc0pe filter * Prevent compiler warnings in select0r * Do not check for NULL before calling free() * Fix some broken links and typos in README.md * Minor fixes to water filter ==== gnome-characters ==== Subpackages: gnome-characters-lang gnome-shell-search-provider-gnome-characters - Add explicit /usr/bin/gjs-console requires: /usr/bin/gnome-characters is a symlink and is thus not inspected by RPM for its hashbang (boo#1216028). ==== hplip ==== Version update (3.23.5 -> 3.23.8) Subpackages: hplip-hpijs hplip-sane hplip-udev-rules - Update to hplip 3.23.8 - Support for new printers: * HP Color LaserJet Pro MFP 4301fdne * HP Color LaserJet Pro MFP 4301fdwe * HP Color LaserJet Pro MFP 4301cdwe * HP Color LaserJet Pro MFP 4301cfdne * HP Color LaserJet Pro MFP 4301cfdwe * HP Color LaserJet Pro MFP 4302dwe * HP Color LaserJet Pro MFP 4302fdne * HP Color LaserJet Pro MFP 4302fdwe * HP Color LaserJet Pro MFP 4302cdwe * HP Color LaserJet Pro MFP 4302fdn * HP Color LaserJet Pro MFP 4302fdw * HP Color LaserJet Pro MFP 4303dw * HP Color LaserJet Pro MFP 4303fdn * HP Color LaserJet Pro MFP 4303fdw * HP Color LaserJet Pro MFP 4303cdw * HP Color LaserJet Pro MFP 4303cfdn * HP Color LaserJet Pro MFP 4303cfdw * HP Color LaserJet Pro 4201dne * HP Color LaserJet Pro 4201dwe * HP Color LaserJet Pro 4201cdne * HP Color LaserJet Pro 4201cdwe * HP Color LaserJet Pro 4202dne * HP Color LaserJet Pro 4202dwe * HP Color LaserJet Pro 4202dn * HP Color LaserJet Pro 4202dw * HP Color LaserJet Pro 4203dn * HP Color LaserJet Pro 4203dw * HP Color LaserJet Pro 4203cdn * HP Color LaserJet Pro 4203cdw * HP DeskJet 2800 All-in-One Printer series * HP DeskJet 2800e All-in-One Printer series * HP DeskJet Ink Advantage 2800 All-in-One Printer series * HP DeskJet 4200 All-in-One Printer series * HP DeskJet 4200e All-in-One Printer series * HP DeskJet Ink Advantage 4200 All-in-One Printer series * HP DeskJet Ink Advantage Ultra 4900 All-in-One Printer series ==== libvpx ==== Version update (1.13.0 -> 1.13.1) - Update to version 1.13.1: + Bug fixes: Fix to a crash related to VP9 encoding. https://crbug.com/1486441 (CVE-2023-5217) - Drop CVE-2023-5217.patch: Fixed upstream. ==== luajit ==== - Adjust luajit-lua-versioned.patch to have correct LUA_LJDIR (bsc#1215592). ==== opensc ==== - Security Fix: [CVE-2023-40661, bsc#1215761] * opensc: multiple memory issues with pkcs15-init (enrollment tool) * Add patches: - opensc-CVE-2023-40661-1of12.patch - opensc-CVE-2023-40661-2of12.patch - opensc-CVE-2023-40661-3of12.patch - opensc-CVE-2023-40661-4of12.patch - opensc-CVE-2023-40661-5of12.patch - opensc-CVE-2023-40661-6of12.patch - opensc-CVE-2023-40661-7of12.patch - opensc-CVE-2023-40661-8of12.patch - opensc-CVE-2023-40661-9of12.patch - opensc-CVE-2023-40661-10of12.patch - opensc-CVE-2023-40661-11of12.patch - opensc-CVE-2023-40661-12of12.patch - Security Fix: [CVE-2023-4535, bsc#1215763] * Add patches: - opensc-CVE-2023-4535.patch - opensc-NULL_pointer_fix.patch - Security Fix: [CVE-2023-40660, bsc#1215762] * opensc: PIN bypass when card tracks its own login state * Add patches: - opensc-CVE-2023-40660-1of2.patch - opensc-CVE-2023-40660-2of2.patch ==== rubygem-parser ==== Version update (3.1.3.0 -> 3.2.2.3) - updated to version 3.2.2.3 v3.2.2.3 (2023-06-08) - -------------------- API modifications: * Add Racc to runtime dependencies (#929) (Koichi ITO) v3.2.2.2 (2023-06-08) - -------------------- API modifications: * bump racc to 1.7.0 (#928) (Ilya Bylich) v3.2.2.0 (2023-04-01) - -------------------- API modifications: * Bump maintenance branches to 3.2.2, 3.1.4, 3.0.6, and 2.7.8 (#920) (Koichi ITO) v3.2.1.1 (2023-03-08) - -------------------- API modifications: * bump racc to 1.6.2 (#916) (Ilya Bylich) * backport tests for mixed usage of anonymous kwarg/kwrestarg and forwarded-arguments (#915) (Ilya Bylich) * add tests for kwopt+kwrest arguments and forwarded_kwrestarg. (#913) (Ilya Bylich) Bugs fixed: * builders/default: allow forwarded_kwrestarg with additional kwargs (#912) (Owen Stephens) v3.2.1.0 (2023-02-09) - -------------------- API modifications: * Bump maintenance branches to 3.2.1 (#908) (Koichi ITO) * lexer.rl: extract strings lexing to lexer-strings.rl (#905) (Ilya Bylich) Features implemented: * Ruby 3.3 support (#904) (Ole Friis Ãstergaard) v3.2.0.0 (2023-01-03) - -------------------- API modifications: * lexer.rl: extract `extend_string_escaped` to a separate method (#893) (Ilya Bylich) * bump Racc to 1.6.1 (#890) (Koichi ITO) Features implemented: * lexer.rl: use Ragel -F0 on non-CRuby (#894) (Benoit Daloze) * ruby32.y: Allow optional newlines before closing parenthesis (#892) (Koichi ITO) Bugs fixed: * ruby32.y: fix a parse error when using forwarded argument with restarg (#889) (Koichi ITO) ==== rubygem-rubocop ==== Version update (1.39.0 -> 1.56.3) - updated to version 1.56.3 [#]# 1.56.3 (2023-09-11) [#]## Bug fixes * [#12151](https://github.com/rubocop/rubocop/issues/12151): Make `Layout/EmptyLineAfterGuardClause` allow `:nocov:` directive after guard clause. ([@koic][]) * [#12195](https://github.com/rubocop/rubocop/issues/12195): Fix a false negative for `Layout/SpaceAfterNot` when a newline is present after `!`. ([@ymap][]) * [#12192](https://github.com/rubocop/rubocop/issues/12192): Fix a false positive for `Layout/RedundantLineBreak` when using quoted symbols with a single newline. ([@ymap][]) * [#12190](https://github.com/rubocop/rubocop/issues/12190): Fix a false positive for `Layout/SpaceAroundOperators` when aligning operators vertically. ([@koic][]) * [#12171](https://github.com/rubocop/rubocop/issues/12171): Fix a false positive for `Style/ArrayIntersect` when using block argument for `Enumerable#any?`. ([@koic][]) * [#12172](https://github.com/rubocop/rubocop/issues/12172): Fix a false positive for `Style/EmptyCaseCondition` when using `return`, `break`, `next` or method call before empty case condition. ([@koic][]) * [#12162](https://github.com/rubocop/rubocop/issues/12162): Fix an error for `Bundler/DuplicatedGroup` when there's a duplicate set of groups and the `group` value contains a splat. ([@koic][]) * [#12182](https://github.com/rubocop/rubocop/issues/12182): Fix an error for `Lint/UselessAssignment` when variables are assigned using chained assignment and remain unreferenced. ([@koic][]) * [#12181](https://github.com/rubocop/rubocop/issues/12181): Fix an incorrect autocorrect for `Lint/UselessAssignment` when variables are assigned with sequential assignment using the comma operator and unreferenced. ([@koic][]) * [#12187](https://github.com/rubocop/rubocop/issues/12187): Fix an incorrect autocorrect for `Style/SoleNestedConditional` when comment is in an empty nested `if` body. ([@ymap][]) * [#12183](https://github.com/rubocop/rubocop/pull/12183): Fix an incorrect autocorrect for `Style/MultilineTernaryOperator` when returning a multiline ternary operator expression with safe navigation method call. ([@koic][]) * [#12168](https://github.com/rubocop/rubocop/issues/12168): Fix bug in `Style/ArgumentsForwarding` when there are repeated send nodes. ([@owst][]) * [#12185](https://github.com/rubocop/rubocop/pull/12185): Set target version for `Layout/HeredocIndentation`. ([@tagliala][]) - updated to version 1.56.2 [#]# 1.56.2 (2023-08-29) [#]## Bug fixes * [#12138](https://github.com/rubocop/rubocop/issues/12138): Fix a false positive for `Layout/LineContinuationLeadingSpace` when a backslash is part of a multiline string literal. ([@ymap][]) * [#12155](https://github.com/rubocop/rubocop/pull/12155): Fix false positive for `Layout/RedundantLineBreak` when using a modified singleton method definition. ([@koic][]) * [#12143](https://github.com/rubocop/rubocop/issues/12143): Fix a false positive for `Lint/ToEnumArguments` when using anonymous keyword arguments forwarding. ([@koic][]) * [#12148](https://github.com/rubocop/rubocop/pull/12148): Fix an incorrect autocorrect for `Lint/NonAtomicFileOperation` when using `FileUtils.remove_dir`, `FileUtils.remove_entry`, or `FileUtils.remove_entry_secure`. ([@koic][]) * [#12141](https://github.com/rubocop/rubocop/issues/12141): Fix false positive for `Style/ArgumentsForwarding` when method def includes additional kwargs. ([@owst][]) * [#12154](https://github.com/rubocop/rubocop/issues/12154): Fix incorrect `diagnosticProvider` value of LSP. ([@koic][]) [#]# 1.56.1 (2023-08-21) [#]## Bug fixes * [#12136](https://github.com/rubocop/rubocop/pull/12136): Fix a false negative for `Layout/LeadingCommentSpace` when using `#+` or `#-` as they are not RDoc comments. ([@koic][]) * [#12113](https://github.com/rubocop/rubocop/issues/12113): Fix a false positive for `Bundler/DuplicatedGroup` when groups are duplicated but `source`, `git`, `platforms`, or `path` values are different. ([@koic][]) * [#12134](https://github.com/rubocop/rubocop/issues/12134): Fix a false positive for `Style/MethodCallWithArgsParentheses` when parentheses are used in one-line `in` pattern matching. ([@koic][]) * [#12111](https://github.com/rubocop/rubocop/issues/12111): Fix an error for `Bundler/DuplicatedGroup` group declaration has keyword option. ([@koic][]) * [#12109](https://github.com/rubocop/rubocop/issues/12109): Fix an error for `Style/ArgumentsForwarding` cop when forwarding kwargs/block arg and an additional arg. ([@ydah][]) * [#12117](https://github.com/rubocop/rubocop/issues/12117): Fix a false positive for `Style/ArgumentsForwarding` cop when not always forwarding block. ([@owst][]) * [#12115](https://github.com/rubocop/rubocop/pull/12115): Fix an error for `Style/Lambda` when using numbered parameter with a multiline `->` call. ([@koic][]) * [#12124](https://github.com/rubocop/rubocop/issues/12124): Fix false positives for `Style/RedundantParentheses` when parentheses in `super` or `yield` call with multiline style argument. ([@koic][]) * [#12120](https://github.com/rubocop/rubocop/pull/12120): Fix false positives for `Style/SymbolArray` when `%i` array containing unescaped `[`, `]`, `(`, or `)`. ([@koic][]) * [#12133](https://github.com/rubocop/rubocop/pull/12133): Fix `Style/RedundantSelfAssignmentBranch` to handle heredocs. ([@r7kamura][]) * [#12105](https://github.com/rubocop/rubocop/issues/12105): Fix target ruby `Gem::Requirement` matcher and version parsing to support multiple version constraints. ([@ItsEcholot][]) [#]# 1.56.0 (2023-08-09) [#]## New features * [#12074](https://github.com/rubocop/rubocop/pull/12074): Add new `Bundler/DuplicatedGroup` cop. ([@OwlKing][]) * [#12078](https://github.com/rubocop/rubocop/pull/12078): Make LSP server support `rubocop.formatAutocorrectsAll` execute command. ([@koic][]) [#]## Bug fixes * [#12106](https://github.com/rubocop/rubocop/issues/12106): Fix a false negative for `Style/RedundantReturn` when returning value with guard clause and `return` is used. ([@koic][]) * [#12095](https://github.com/rubocop/rubocop/pull/12095): Fix a false positive for `Style/Alias` when `EncforcedStyle: prefer_alias` and using `alias` with interpolated symbol argument. ([@koic][]) * [#12098](https://github.com/rubocop/rubocop/pull/12098): Fix a false positive for `Style/ClassEqualityComparison` when comparing interpolated string class name for equality. ([@koic][]) * [#12102](https://github.com/rubocop/rubocop/pull/12102): Fix an error for `Style/LambdaCall` when using nested lambda call `x.().()`. ([@koic][]) * [#12099](https://github.com/rubocop/rubocop/pull/12099): Fix an incorrect autocorrect for `Style/Alias` when `EncforcedStyle: prefer_alias_method` and using `alias` with interpolated symbol argument. ([@koic][]) * [#12085](https://github.com/rubocop/rubocop/issues/12085): Fix an error for `Lint/SuppressedException` when `AllowNil: true` is set and endless method definition is used. ([@koic][]) * [#12087](https://github.com/rubocop/rubocop/issues/12087): Fix false positives for `Style/ArgumentsForwarding` with additional args/kwargs in def/send nodes. ([@owst][]) * [#12071](https://github.com/rubocop/rubocop/issues/12071): Fix `Style/SymbolArray` false positives when using square brackets or interpolation in a symbol literal in a percent style array. ([@jasondoc3][]) * [#12061](https://github.com/rubocop/rubocop/issues/12061): Support regex in StringLiteralsInInterpolation. ([@jonas054][]) * [#12091](https://github.com/rubocop/rubocop/pull/12091): With `--fail-level A` ignore non-correctable offenses at :info severity. ([@naveg][]) [#]## Changes * [#12094](https://github.com/rubocop/rubocop/pull/12094): Add `base64` gem to runtime dependency to suppress Ruby 3.3's warning. ([@koic][]) [#]# 1.55.1 (2023-07-31) [#]## Bug fixes * [#12068](https://github.com/rubocop/rubocop/pull/12068): Fix a false positive for `Style/ReturnNilInPredicateMethodDefinition` when the last method argument in method definition is `nil`. ([@koic][]) * [#12082](https://github.com/rubocop/rubocop/issues/12082): Fix an error for `Lint/UselessAssignment` when a variable is assigned and unreferenced in `for` with multiple variables. ([@koic][]) * [#12079](https://github.com/rubocop/rubocop/issues/12079): Fix an error for `Style/MixinGrouping` when mixin method has no arguments. ([@koic][]) * [#11637](https://github.com/rubocop/rubocop/pull/11637): Correct Rubocop for `private_class_method` method documentation. ([@bigzed][]) * [#12070](https://github.com/rubocop/rubocop/pull/12070): Fix false positive in `Style/ArgumentsForwarding` when receiver forwards args/kwargs. ([@owst][]) [#]# 1.55.0 (2023-07-25) [#]## New features * [#11794](https://github.com/rubocop/rubocop/pull/11794): Add support to `Style/ArgumentsForwarding` for anonymous arg/kwarg forwarding in Ruby 3.2. ([@owst][]) * [#12044](https://github.com/rubocop/rubocop/issues/12044): Make LSP server support `layoutMode` option to run layout cops. ([@koic][]) * [#12056](https://github.com/rubocop/rubocop/pull/12056): Make LSP server support `lintMode` option to run lint cops. ([@koic][]) * [#12046](https://github.com/rubocop/rubocop/issues/12046): Make `ReturnNilInPredicateMethodDefinition` aware of `nil` at the end of predicate method definition. ([@koic][]) [#]## Bug fixes * [#12055](https://github.com/rubocop/rubocop/pull/12055): Allow parentheses in single-line match patterns when using the `omit_parentheses` style of `Style/MethodCallWithArgsParentheses`. ([@gsamokovarov][]) * [#12050](https://github.com/rubocop/rubocop/pull/12050): Fix a false positive for `Layout/RedundantLineBreak` when inspecting the `%` form string `%\n\n`. ([@koic][]) * [#12063](https://github.com/rubocop/rubocop/pull/12063): Fix `Style/CombinableLoops` when one of the loops is empty. ([@fatkodima][]) * [#12059](https://github.com/rubocop/rubocop/issues/12059): Fix a false negative for `Style/StringLiteralsInInterpolation` for symbols with interpolation. ([@fatkodima][]) * [#11834](https://github.com/rubocop/rubocop/issues/11834): Fix false positive for when variable in inside conditional branch in nested node. ([@alexeyschepin][]) * [#11802](https://github.com/rubocop/rubocop/issues/11802): Improve handling of `[]` and `()` with percent symbol arrays. ([@jasondoc3][]) * [#12052](https://github.com/rubocop/rubocop/issues/12052): Fix "Subfolders can't include glob special characters". ([@meric426][], [@loveo][]) * [#12062](https://github.com/rubocop/rubocop/pull/12062): Fix `LoadError` when loading RuboCop from a symlinked location on Windows. ([@p0deje][]) [#]## Changes * [#12064](https://github.com/rubocop/rubocop/pull/12064): Make `Style/RedundantArgument` aware of `exit` and `exit!`. ([@koic][]) * [#12015](https://github.com/rubocop/rubocop/issues/12015): Mark `Style/HashConversion` as unsafe autocorrection. ([@koic][]) [#]# 1.54.2 (2023-07-13) [#]## Bug fixes * [#12043](https://github.com/rubocop/rubocop/pull/12043): Fix a false negative for `Layout/ExtraSpacing` when some characters are vertically aligned. ([@koic][]) * [#12040](https://github.com/rubocop/rubocop/pull/12040): Fix a false positive for `Layout/TrailingEmptyLines` to prevent the following incorrect autocorrection when inspecting the `%` form string `%\n\n`. ([@koic][]) * [#1867](https://github.com/rubocop/rubocop/issues/1867): Fix an error when `AllCops:Exclude` is empty in .rubocop.yml. ([@koic][]) * [#12034](https://github.com/rubocop/rubocop/issues/12034): Fix invalid byte sequence in UTF-8 error when using an invalid encoding string. ([@koic][]) * [#12038](https://github.com/rubocop/rubocop/pull/12038): Output the "server restarting" message to stderr. ([@knu][]) [#]# 1.54.1 (2023-07-04) [#]## Bug fixes * [#12024](https://github.com/rubocop/rubocop/issues/12024): Fix a false positive for `Lint/RedundantRegexpQuantifiers` when interpolation is used in a regexp literal. ([@koic][]) * [#12020](https://github.com/rubocop/rubocop/issues/12020): This PR fixes an infinite loop error for `Layout/SpaceAfterComma` with `Layout/SpaceBeforeSemicolon` when autocorrection conflicts. ([@koic][]) * [#12014](https://github.com/rubocop/rubocop/pull/12014): Fix an error for `Lint/UselessAssignment` when part of a multiple assignment is enclosed in parentheses. ([@koic][]) * [#12011](https://github.com/rubocop/rubocop/pull/12011): Fix an error for `Metrics/MethodLength` when using a heredoc in a block without block arguments. ([@koic][]) * [#12010](https://github.com/rubocop/rubocop/pull/12010): Fix false negatives for `Style/RedundantRegexpArgument` when using safe navigation operator. ([@koic][]) [#]# 1.54.0 (2023-07-01) [#]## New features * [#12000](https://github.com/rubocop/rubocop/pull/12000): Support safe or unsafe autocorrect config for LSP. ([@koic][]) [#]## Bug fixes * [#12005](https://github.com/rubocop/rubocop/issues/12005): Fix a false negative for `Lint/Debugger` when using debugger method inside lambda. ([@koic][]) ... changelog too long, skipping 421 lines ... * [#11116](https://github.com/rubocop/rubocop/issues/11116): Handle ternaries in `Style/SafeNavigation`. ([@fatkodima][]) ==== rubygem-rubocop-ast ==== Version update (1.24.0 -> 1.29.0) - updated to version 1.29.0 [#]# 1.29.0 (2023-06-01) * [#262](https://github.com/rubocop/rubocop-ast/pull/267): Introduce RuboCop::Ast::MethodDispatchNode#selector. ([@gsamokovarov][]) [#]# 1.28.1 (2023-05-01) [#]## Bug fixes * [#262](https://github.com/rubocop/rubocop-ast/pull/262): Fix an error when parsing non UTF-8 frozen string. ([@koic][]) [#]# 1.28.0 (2023-03-24) [#]## New features * [#259](https://github.com/rubocop/rubocop-ast/pull/259): Add `forwarded_kwrestarg` node to `AST::Builder`. ([@koic][]) [#]# 1.27.0 (2023-02-27) [#]## New features * [#229](https://github.com/rubocop/rubocop-ast/pull/229): Add `source_range` method to `NodePattern`. ([@koic][]) [#]# 1.26.0 (2023-02-11) [#]## New features * [#255](https://github.com/rubocop/rubocop-ast/pull/255): Make `Node#class_constructor?` aware of Ruby 3.2's `Data.define`. ([@koic][]) * [#255](https://github.com/rubocop/rubocop-ast/pull/255): Make `Node#class_construcor?` aware of Ruby 2.7's numbered parameters. ([@koic][]) [#]# 1.25.0 (2023-02-11) [#]## New features * [#256](https://github.com/rubocop-hq/rubocop-ast/pull/256): Support `Parser::Ruby33` for Ruby 3.3 parser (experimental). ([@koic][]) ==== rubygem-unicode-display_width ==== Version update (2.3.0 -> 2.4.2) - updated to version 2.4.2 [#]# 2.4.2 More performance improvements: - Optimize lookup of first 4096 codepoints - Avoid overwrite lookup if no overwrites are set [#]# 2.4.1 - Improve general performance! - Further improve performance for ASCII strings [#]# 2.4.0 - Improve performance for ASCII-only strings, by @fatkodima - Require Ruby 2.4 ==== sshfs ==== Version update (3.7.4 -> 3.7.4a) - Update to 3.7.4a: - Reverting PR #1 from user-reported bug bsc#1215574. ==== xfce4-clipman-plugin ==== Version update (1.6.4 -> 1.6.5) Subpackages: xfce4-clipman-plugin-lang - Update to version 1.6.5 * wayland: Hide skip-action-on-key-down setting * wayland: Hide persistent-primary-clipboard setting * Add set-text action to plugin app to allow D-Bus calls * Add Wayland impl for clipboard-manager * Make clipboard manager an interface and add X11 impl * Rename x11-clipboard-manager to clipboard-manager * Move paste_on_activate() to common * Make X11 dependencies optional and guard X11 code paths * cleanup: Remove unused project files * cleanup: Remove useless variable assignment * tests: Add missing include * history-dialog: Fix memory leak * ui: Mark 2 strings translatable * history-dialog: Keep paste-on-activate in sync with the settings (V2) * settings: Fix tooltip text * status-icon: Enable tooltip * status-icon: Add missing sanity check * popup-clipman: Replace deprecated gdk_keyboard_grab() * Replace deprecated gtk_menu_popup() when possible * collector: Do not restore default clipboard if not really empty * menu: Fix translated string * Update URLs * Translation Updates - Add xfce4-clipman-plugin-relax-x11-version.patch ==== zxing-cpp ==== Version update (2.0.0 -> 2.1.0) - Update to 2.1.0: * Considerable performance improvements in linear symbol detection (up to 2x speedup in select use cases of ReadBarcodes) * QRCode: major improvement in detection of high version symbols (see e.g. here) * DMDetector: reduce runtime overhead of c++-20 builds * Refactor Python wrapper so the sdist includes the core library code * wasm wrapper: add function to reader to scan multiple barcode * Added a C wrapper * Python: improve error reporting * DMDetector: fix potential dead-lock * DMDecoder: support 144x144 symbols in legacy and compliant variants - Remove the %check section since we are not building the tests.

1 0

Programs within system-configuration autostart (at boot) do not start...
by Andre Verwijs 11 Oct '23

11 Oct '23

SYSTEM INFORMATION ~~~~~~~~~~~~~~~~~~~~~~~~~ Operating System: openSUSE Leap 15.6 KDE Plasma Version: 5.27.4 KDE Frameworks Version: 5.103.0 Qt Version: 5.15.8 Kernel Version: 5.14.21-150500.55.22-default (64-bit) Graphics Platform: X11 Processors: 2 × Intel® Core™2 CPU 6700 @ 2.66GHz Memory: 5.7 GiB of RAM Graphics Processor: GeForce GT 610/PCIe/SSE2 --- Programs within system-configuration autostart (at boot) do not start. with permisiion does it need to run? Screenshots: <a href='https://postimg.cc/ykzjx5mB' target='_blank'><img src='https://i.postimg.cc/ykzjx5mB/autostart-20231011-122754.png' border='0' alt='autostart-1'/>Autostart-1</a> <a href='https://postimg.cc/4m56d34b' target='_blank'><img src='https://i.postimg.cc/4m56d34b/autostart-20231011-122755.png' border='0' alt='autostart-20231011-122755'/>Autostart-2</a>

1 1

openSUSE Release Engineering meeting 11.10.2023
by Lubos Kocman 11 Oct '23

11 Oct '23

All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting The meeting is hosted here https://meet.opensuse.org/ReleaseEngineeringMeeting ## Attendees lkocman, DimStar, guillaumeg, ddemaio, Sarah,maxlin, ana, bmwiedemann, dirk ## Leap Leap Micro 5.5 GA is tomorrow. I have a draft utilizing my three last "tutorials" of the release article. Legal will look into IPRQ approval today. Some pending work on get.opensuse.org towards Leap Micro. The current Leap 15.6 535.1 build suffers from kernel broken usb. Next build is blocked on s390x product builds, mass rebuild of Backports after snapshot update finished at night. Max: in addition, I did intentionally disable s390x builds in openSUSE:Leap:15.6 and openSUSE:Backports:SLE-15-SP6 project until we get a new snapshot. lkocman: From what I've heard there will be further reduction of build power on s390x. Sarah mentioned already last week that we'll have less resources for s390x. See Sarah's section for opportunity to get more s390x resources from Accenture. Target date is January/February 2024. Feature evaluation https://code.opensuse.org/leap/features/issues - no new requests, no pending SRs to mirror Fixes for openSUSE quizzes for openSUSE Booths https://github.com/openSUSE/artwork/tree/master/flyers/opensuse_quiz lkocman: Electron web for software-o-o comming. (raised on yesterday's community weekly meeting). ## openSUSE Tumbleweed (ana) openSUSE:Factory build fail stats: 53 failed 5 unresolvable (last week: 70 failed, 14 unresolvable) https://tinyurl.com/ysy4nnnz Some more small issues with openQA test machines but got solved quickly but still impacted a bit snapshots timings. Most relevant change this week: security updates for glibc (CVE-2023- 4911: Looney Tunables) and Linux 6.5.6 Updates waiting in staging (no changes from last week): * boost 1.83.0 (waiting for fixes to make libzypp buildable) * new libzypp/zypper stack - (boo#1216091) * fmt 10 blocked on mariadb (doesn't build on i586) ## Richard (Aeon) Not available lkocman: to reach out to him before sending minutes live Staging J stuff was accepted, so we have the skeleton of Aeon inside Factory, YAY! Adding meat to the bones systemd-boot experiments have so far proven very interesting, and worthy of spending a little more time on rather than rushing the grub2/kiwi-self-install based image out as 'the way' unfortunately though, systemd-boot images break kiwi-self-install, which forces my hand to find a more robust installation method for the Aeon images looking at eos-installer/gnome-os-installer which seems to do exactly what I want may also be the route to sorting out the systemd-homed problem as a live image with that installer could have homed on the live image, create the user there, and migrate it to the Aeon system after the image. - That might however make the firstboot wizard redundant.... investigations ongoing lkocman: Do we have any data on how many people are using e.g. dualboot / custom partitioning? The Foreign OS_PROBING (or whatever the variable is) was disabled by default in Leap 15.5 for quite some time (accidentally I suppose). rbrown: Don't know and for Aeon don't care - dualboot/custom partitioning will not be supported by Aeon; folk who want that are better served by Tumbleweed where the installation and userspace tooling is around to consider it, and all the problems it causes :) ## Bernhard (Slowroll) Bernhard continued scripting https://en.opensuse.org/openSUSE:Slowroll Dominique: use branch instead of copypac then you'll not have issues with release counters ; done unfortunately, osc branch -r $rev does not keep checkin-counters TODO list: https://etherpad.opensuse.org/p/slowroll-todo openQA, frozen project link, etc Slowly moving forward Voting for the new name, so far we have a lot of proposals. Voting is done: name remains Slowroll Starting with one flavor, more to come. lkocman: Slowroll logo discussion on openSUSE Marketing / telegram / matrix channel. ## Max Just came back from vacation. No update. ## Guillaume - Arm Tumbleweed: * U-Boot update broke on RPi4 - https://bugzilla.opensuse.org/show_bug.cgi?id=1216036 but TW should be rolling again with next snapshot (20231010+) * WIP to get Tumbleweed to run on Lenovo X13s: => Required kernel modules added to the installation images => Grub2 fix merged: https://build.opensuse.org/request/show/1112520 => Still some issues with USB and kernel 6.5.x (which may be fixed in future kernel 6.6) * shim currently not signed by Microsoft for aarch64 (Tumbleweed only, Leap is fine). Stalled - https://bugzilla.suse.com/show_bug.cgi?id=1211297 Lubos to ping Moussa regarding raising this issue on the weekly Microsoft call. Raised to Moussa, he confirmed that he'll raise it with Microsoft, no update since the last week. Leap: * No update ALP: * shim not signed by MS (at least for aarch64, not sure for x86_64) - jsc#ARM-100 The last update was that Moussa wanted to get back to me last week, he asked for "more time". WSL: * Works with x86 emulator since appx installer is x86-64, but this is not really an issue since arm64 Win11 includes x86 emulator by default. Team is ok to publish it on Microsoft store anyway, but this would require some testing in openQA which is now possible [0] (WSL1 and WSL2) thanks to Fabian https://progress.opensuse.org/issues/126083. Steps documented on the wiki to install the appx from download.o.o: https://en.opensuse.org/openSUSE:WSL#With_Appx_from_openSUSE_download_server lkocman: I will inform WSL team [0]: https://openqa.opensuse.org/tests/overview?distri=opensuse&version=Tumblewe… ## Sarah - s390x * Tumbleweed * Can not be built because the foundation kernel can not run our builds completely -> issue forwarded to IBM by SUSE (issue exists since the data center switch - single change was a firmware update) * Situation at the moment: builds are breaking away with "no route to host" at the end * Other news about the mainframe: * The mainframe ressoures will be reduced for SUSE/openSUSE by IBM -> 1 expanded system intead of 2 systems * Max we're looking for a second machine to help with s390x product building issues on Leap. Sarah: Good argument to receive additional mainframe resources: Kubernetes project issue to remove s390x for ingress-nginx on github.com/kubernetes/ingress-nginx/issues/10498 because of missing test/build environment -> SUSE is sponsoring 390x for Kubernetes in OBS. That should be an argument to receive additional mainframe resources. -> All build worker for s390x are down :( lkocman: The new mainframe That would be a nice blog story on news-o-o. ## Doug * Aeon/Kalpa workshop lkocman: we should produce some stickers for these. As of now we don't have any more MicroOS ones. Leap Micro ones are gone too. Would be super useful to have them at workshops. * Sent stickers for GSoC event * Use cases survey has. over 1k responses Ends Oct. 31 * openSUSE.Asia Summit * Registrations 44, Submissions 31 * Discussing another TSP request * Will move items to tempoary new storage * Requested Bus for FOSDEM lkocman: I will ask about an option to have a bus from PRG. (The distance creates is so that a bus driver would not be able to drive in one day) * Open CFPs * SCALE * FOSS Backstage * Published HackWeek article * BlueSky social media added with os-tweet recovery address * Some wiki updates Static * oSC24 dates June 27 to 29 reserved (Thursday - Saturday) * AI topics (static) * Nothing new ## Dirk * usual bunch of factory package updates, supporting python 3.12 enablement ## Wolfgang (Package Hub), Scott Bahling ## Maintenance team (Marcus or Maurizio (m4u)) lkocman: Leap Micro 5.5 GA tomorrow, are we ready? LeapMicro 5.3 EOL after release. ## Adrian - OBS Not available ## Simon (Leap Replacement/Linarite) Not available ## Open Floor

1 0

New Tumbleweed snapshot 20231008 released!
by Dominique Leuenberger 10 Oct '23

10 Oct '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: NetworkManager (1.44.0 -> 1.44.2) SDL2 bolt (0.9.5 -> 0.9.6) crypto-policies dLeyna gnome-control-center (45.0 -> 45.0+34) groff groff-full ibus ibus_gtk4 kernel-source (6.5.4 -> 6.5.6) libdmapsharing (3.9.12 -> 3.9.13) libqt5-qtbase (5.15.10+kde129 -> 5.15.11+kde134) libqt5-qtconnectivity (5.15.10+kde4 -> 5.15.11+kde6) libqt5-qtdeclarative (5.15.10+kde26 -> 5.15.11+kde30) libqt5-qtgraphicaleffects (5.15.10+kde0 -> 5.15.11+kde0) libqt5-qtimageformats (5.15.10+kde9 -> 5.15.11+kde12) libqt5-qtlocation (5.15.10+kde4 -> 5.15.11+kde4) libqt5-qtmultimedia (5.15.10+kde3 -> 5.15.11+kde2) libqt5-qtnetworkauth (5.15.10+kde0 -> 5.15.11+kde0) libqt5-qtquickcontrols (5.15.10+kde0 -> 5.15.11+kde0) libqt5-qtquickcontrols2 (5.15.10+kde6 -> 5.15.11+kde5) libqt5-qtscript (5.15.14 -> 5.15.15) libqt5-qtsensors (5.15.10+kde0 -> 5.15.11+kde0) libqt5-qtserialport (5.15.10+kde0 -> 5.15.11+kde0) libqt5-qtspeech (5.15.10+kde1 -> 5.15.11+kde1) libqt5-qtsvg (5.15.10+kde8 -> 5.15.11+kde6) libqt5-qttools (5.15.10+kde3 -> 5.15.11+kde3) libqt5-qttranslations (5.15.10+kde0 -> 5.15.11+kde0) libqt5-qtvirtualkeyboard (5.15.10+kde0 -> 5.15.11+kde0) libqt5-qtwayland (5.15.10+kde51 -> 5.15.11+kde59) libqt5-qtwebchannel (5.15.10+kde3 -> 5.15.11+kde3) libqt5-qtwebsockets (5.15.10+kde2 -> 5.15.11+kde2) libqt5-qtwebview (5.15.10+kde0 -> 5.15.11+kde0) libqt5-qtx11extras (5.15.10+kde0 -> 5.15.11+kde0) libqt5-qtxmlpatterns (5.15.10+kde0 -> 5.15.11+kde0) libreoffice (7.6.1.2 -> 7.6.2.1) libsepol llvm17 (17.0.1 -> 17.0.2) makedumpfile nodejs20 (20.7.0 -> 20.8.0) openssl-1_1 perl policycoreutils polkit-default-privs (1550+20230920.74aeded -> 1550+20231006.28f05f1) vte === Details === ==== NetworkManager ==== Version update (1.44.0 -> 1.44.2) Subpackages: NetworkManager-bluetooth NetworkManager-lang NetworkManager-pppoe NetworkManager-tui NetworkManager-wwan libnm0 typelib-1_0-NM-1_0 - Update to version 1.44.2: + Better log IPv4 Address Conflict Detection (ACD) conflicts + Remove the upper limit of 65535 for PIDs read from the PID file + Allow missing default gateway with oFono + Honor the CLICOLOR_FORCE environment variable + Fix generating connection with IPv6 method disabled vs ignored + Fix possible segmentation fault when doing a checkpoint rollback + Documentation improvements - Switch to source services, use explicit released tag. ==== SDL2 ==== - Enable direct PipeWire support ==== bolt ==== Version update (0.9.5 -> 0.9.6) - update to 0.9.5: * Compiler warnings and log messages for the domain not found were fixed. ==== crypto-policies ==== Subpackages: crypto-policies-scripts - Remove dependency on /usr/bin/python3, making scripts to depends on the real python3 binary, not the link. bsc#1212476 ==== dLeyna ==== - Remove executable bit from download_sync_controller.py. Fix rpmlint warning. ==== gnome-control-center ==== Version update (45.0 -> 45.0+34) Subpackages: gnome-control-center-color gnome-control-center-goa gnome-control-center-lang gnome-control-center-user-faces - Update to version 45.0+34: + network: fix editing connections without a device (boo#1215651) + mouse: Fix linked style of primary mouse button in RTL + privacy: Fix crash in the firmware security page + data: - Fix label string - Add missing wireguard-peer.ui to POTFILES.in - Mark translatable strings yes + info-overview: Add more types of processor support + Updated translations. - Switch to git checkout from stable branch, use explicit commit. ==== groff ==== - Define ext_man="%{?ext_man}%{!?ext_man:.gz}" shell variable in the install directive, and replace "%{?ext_man}" with "${ext_man:-}" to fix groff-gf.7.gz file ending up uncompressed (despite the name) due to the use of %{?ext_man} in the mv/ln TARGET parameter used for the preparation of Alternatives. Also define a simple shell contruct which identifies whether the manpage file is compressed. If not, it unsets the $ext_man variable, then ajdusting the mv/ln calls. That's all necessary because even though ext_man macro is defined, it doesn't mean the file has the extension (which dependes whether the build script compresses it). ==== groff-full ==== Subpackages: gxditview - Define ext_man="%{?ext_man}%{!?ext_man:.gz}" shell variable in the install directive, and replace "%{?ext_man}" with "${ext_man:-}" to fix groff-gf.7.gz file ending up uncompressed (despite the name) due to the use of %{?ext_man} in the mv/ln TARGET parameter used for the preparation of Alternatives. Also define a simple shell contruct which identifies whether the manpage file is compressed. If not, it unsets the $ext_man variable, then ajdusting the mv/ln calls. That's all necessary because even though ext_man macro is defined, it doesn't mean the file has the extension (which dependes whether the build script compresses it). ==== ibus ==== Subpackages: ibus-dict-emoji ibus-gtk ibus-gtk3 ibus-lang libibus-1_0-5 typelib-1_0-IBus-1_0 - macros.ibus: * set %ibus_table_index_post() to %nil. it'll trigger ibus-table-createdb to create_indexes() for the existing db. but according to upstream, create_indexes() is now a dummy function, and it didn't bring any performance improvements before. and on rpmlint side, it will modify the final filelist. ==== ibus_gtk4 ==== - macros.ibus: * set %ibus_table_index_post() to %nil. it'll trigger ibus-table-createdb to create_indexes() for the existing db. but according to upstream, create_indexes() is now a dummy function, and it didn't bring any performance improvements before. and on rpmlint side, it will modify the final filelist. ==== kernel-source ==== Version update (6.5.4 -> 6.5.6) - Linux 6.5.6 (bsc#1012628). - NFS: Fix error handling for O_DIRECT write scheduling (bsc#1012628). - NFS: Fix O_DIRECT locking issues (bsc#1012628). - NFS: More O_DIRECT accounting fixes for error paths (bsc#1012628). - NFS: Use the correct commit info in nfs_join_page_group() (bsc#1012628). - NFS: More fixes for nfs_direct_write_reschedule_io() (bsc#1012628). - NFS/pNFS: Report EINVAL errors from connect() to the server (bsc#1012628). - SUNRPC: Mark the cred for revalidation if the server rejects it (bsc#1012628). - NFSv4.1: use EXCHGID4_FLAG_USE_PNFS_DS for DS server (bsc#1012628). - NFSv4.1: fix pnfs MDS=DS session trunking (bsc#1012628). - media: v4l: Use correct dependency for camera sensor drivers (bsc#1012628). - media: via: Use correct dependency for camera sensor drivers (bsc#1012628). - gfs2: Fix another freeze/thaw hang (bsc#1012628). - netfs: Only call folio_start_fscache() one time for each folio (bsc#1012628). - btrfs: improve error message after failure to add delayed dir index item (bsc#1012628). - btrfs: remove BUG() after failure to insert delayed dir index item (bsc#1012628). - ext4: replace the traditional ternary conditional operator with with max()/min() (bsc#1012628). - ext4: move setting of trimmed bit into ext4_try_to_trim_range() (bsc#1012628). - ext4: do not let fstrim block system suspend (bsc#1012628). - netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention (bsc#1012628). - netfilter: nft_set_pipapo: call nft_trans_gc_queue_sync() in catchall GC (bsc#1012628). - netfilter: nft_set_pipapo: stop GC iteration if GC transaction allocation fails (bsc#1012628). - netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration (bsc#1012628). - netfilter: nf_tables: fix memleak when more than 255 elements expired (bsc#1012628). - netfilter: nf_tables: disallow rule removal from chain binding (bsc#1012628). - ASoC: meson: spdifin: start hw on dai probe (bsc#1012628). - netfilter: nf_tables: disallow element removal on anonymous sets (bsc#1012628). - bpf: Avoid deadlock when using queue and stack maps from NMI (bsc#1012628). - bpf: Avoid dummy bpf_offload_netdev in __bpf_prog_dev_bound_init (bsc#1012628). - ALSA: docs: Fix a typo of midi2_ump_probe option for snd-usb-audio (bsc#1012628). - ALSA: seq: Avoid delivery of events for disabled UMP groups (bsc#1012628). - ASoC: rt5640: Revert "Fix sleep in atomic context" (bsc#1012628). - ASoC: rt5640: Fix sleep in atomic context (bsc#1012628). - ASoC: rt5640: fix typos (bsc#1012628). - ASoC: rt5640: Do not disable/enable IRQ twice on suspend/resume (bsc#1012628). - ASoC: rt5640: Enable the IRQ on resume after configuring jack-detect (bsc#1012628). - ASoC: rt5640: Fix IRQ not being free-ed for HDA jack detect mode (bsc#1012628). - bpf: Fix a erroneous check after snprintf() (bsc#1012628). - selftests/bpf: fix unpriv_disabled check in test_verifier (bsc#1012628). - ALSA: hda/realtek: Splitting the UX3402 into two separate models (bsc#1012628). - netfilter: conntrack: fix extension size table (bsc#1012628). - netfilter: nf_tables: Fix entries val in rule reset audit log (bsc#1012628). - Compiler Attributes: counted_by: Adjust name and identifier expansion (bsc#1012628). - uapi: stddef.h: Fix header guard location (bsc#1012628). - uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++ (bsc#1012628). - memblock tests: Fix compilation errors (bsc#1012628). - ASoC: SOF: ipc4-topology: fix wrong sizeof argument (bsc#1012628). - net: microchip: sparx5: Fix memory leak for vcap_api_rule_add_keyvalue_test() (bsc#1012628). - net: microchip: sparx5: Fix memory leak for vcap_api_rule_add_actionvalue_test() (bsc#1012628). - net: microchip: sparx5: Fix possible memory leak in vcap_api_encode_rule_test() (bsc#1012628). - net: microchip: sparx5: Fix possible memory leaks in test_vcap_xn_rule_creator() (bsc#1012628). - net: microchip: sparx5: Fix possible memory leaks in vcap_api_kunit (bsc#1012628). - selftests: tls: swap the TX and RX sockets in some tests (bsc#1012628). - net/core: Fix ETH_P_1588 flow dissector (bsc#1012628). - ALSA: seq: ump: Fix -Wformat-truncation warning (bsc#1012628). - ASoC: hdaudio.c: Add missing check for devm_kstrdup (bsc#1012628). - ASoC: imx-audmix: Fix return error with devm_clk_get() (bsc#1012628). ... changelog too long, skipping 859 lines ... - commit f926df3 ==== libdmapsharing ==== Version update (3.9.12 -> 3.9.13) - Update to version 3.9.13: + doc/Makefile.am: add human-written XML files to EXTRA_DIST + Fix Vala tests + Use g-ir-scanner output as input to vapigen + configure.ac: Don't force CFLAGS=-O2 + Make use of pedansee-conf-gobject ==== libqt5-qtbase ==== Version update (5.15.10+kde129 -> 5.15.11+kde134) Subpackages: libQt5Concurrent5 libQt5Core5 libQt5DBus5 libQt5Gui5 libQt5Network5 libQt5OpenGL5 libQt5PrintSupport5 libQt5Sql5 libQt5Sql5-mysql libQt5Sql5-sqlite libQt5Test5 libQt5Widgets5 libQt5Xml5 libqt5-qtbase-platformtheme-gtk3 - Enable the experimental native painting feature to improve remote desktop performances (boo#1214915) exporting QT_XCB_NATIVE_PAINTING is required to use the feature. - Update to version 5.15.11+kde134, rebased upstream: * Revert "Windows QPA: Add support to UiaRaiseNotificationEvent()" * FileChooser portal: Make sure filter.name is not empty * QPersistentModelIndex: fix UB (op< on unrelated pointers) * Avoid crash when keysymToQtKey(keysym, Qt::ControlModifier) is called * a11y atspi: translate coords for GetOffsetAtPoint the right way * a11y atspi: Take dialog into account as top-level window * a11y atspi: Fix incorrect use of x instead of y position * macOS: Handle asynchronous deminiaturizing of windows * QTranslator: generalize a UNIX-only path * iOS, input panel: be more careful before enabling QIOSKeyboardListener * Android: Fix flickering on window resize and show keyboard * Android A11Y: Check for active surface before calling into native code * xcb: Delete touch points without target windows * Blacklist 1 tests in tst_QDBusConnection on ubuntu-20.04 * Fix CMake builds without ANDROID_SDK * Blacklist 2 tests in tst_Http2 on ubuntu-20.04 * Blacklist 1 tests in tst_QSqlQuery on macos * Defer creating the special shaders in the texture blitter * tst_QSslSocket::serverCipherPreferencies - fix for OpenSSL v3 * QTemporaryFile: document rename() differences from QFile * Doc: 3rd party: Fix reference to FreeType LICENSE.txt * Update bundled libjpeg-turbo to version 2.1.4 * tst_QSsSocket: fix verifyClientCertificate with OpenSSL 3 * tst_QSslSocket: regenerate certificate used for setLocalCertificateChain * tst_QSslSocket::protocolServerSide - make it work with OpenSSL v3 * tst_QSslSocket::oldErrorsOnSocketReuse - make it work with OpenSSL v3 * Update zconf.h prefixes to match zlib v1.2.12 update * xcb: fix D&D in same xembed client * xcb: use global coordinates for position of D&D for xembed client * Doc: Update QMetaType::metaObject() descriptions * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 22.04 * BLACKLIST tst_qfont for Ubuntu 22.04 * BLACKLIST tst_QMenuBar::check_menuPosition for Ubuntu 22.04 * tst_QDtls::verifyClientCertficiate - update certs for OpenSSL v3 * QSslCertificate::toText(): add a file to compare against * Fix the spelling of the word "combination" * tst_QSslCertificate::pkcs12 - skip the test if OpenSSL version >= 3 * Android A11Y: Fix TalkBack scrolling behavior * Android A11Y: Notify android about scroll events * QCocoaDrag: don't add pasteboard items with non-absolute URLs * QDirPrivate: pass input QList by cref * tst_qbytearray: remove qCompress_data for QT_NO_COMPRESS * QDeviceDiscoveryUDev: use NSDMI * QAuthenticator: Fix crash when using NTLM / Negotiate * Provide a native interface instance in minimal platform plugin * Android: document the supported clipboard mimetypes * Windows: Account for not finding child windows when calling ChildWindowFromPointEx * iOS: Send touch events asynchronously to avoid deadlocking UIKit event loop * Disable bitcode for iOS * macOS: Ignore deprecation for ReleaseIconRef * BLACKLIST tst_QApplication::sendEventsOnProcessEvents for Ubuntu 22.04 * Convert Latin1 to UTF-16 before passing to ICU API * Doc: Remove repetition of word in text * eglfs: Fix screen cloning when atomic is enabled * Fix printing of dpr>1 images on Windows * QHttp: Fix handling of redirect loaded from cache * Doc: Fix return type of QLEInteger/QBEInteger post-in/decrement ops * qmake: Fix installation of separate debug info for plugins * iOS: ensure we close inputpanel after clearing focusobject * Convert Latin1 to UTF-16 before passing to ICU API * qputenv: defend against non-NUL-terminated QByteArray values * QFontSubset: remove unused glyphName() overload * Statically assert that the __mips_dsp code is only active on 32-bit * QGtk3Theme: Ensure gtk uses the same windowing system as Qt * tst_QFocusFrame: fix -Wparantheses * Sync Vulkan device features between QVulkanWindow and QRhi * SQLite: Update SQLite to v3.39.2 * Update freetype to 2.12.1 * corelib: Fix typos in documentation * QAtomicInteger docs: mention bool and char8_t as 8-bit types * qgraphicsitem_cast: replace 0 with nullptr * Doc: Hide weak overload template magic from documentation * Revert "QDateTime: fix adjusted datetime handling" * Fix select handles disappears issues * tst_QSslKey: prepare for the migration to OpenSSL v3 * tst_qnetworkreply: replace server.pem/key pair * Disable unit testing setting up QTcpServer on special Apple interfaces * qmake/msbuild: Turn off "use full paths in diagnostics" by default * qmake/msbuild: Support all /DEBUG:xxx linker options * qmake/msbuild: Support all /LTCG:xxx options * Android A11Y: Add content change type to content change event * Enabler for fractional scaling of text in Qt Quick * macOS: Override logical DPI to 72 * Add QDom internalSubset implementation * Fix tst_AndroidAssets, broken by recent changes on assets load speed * Android: Improve loading speed of individual assets * Darwin: Replace deprecated symbol kIOMasterPortDefault with equivalent * macOS: Remove code for handling logical DPI changes * Fix an incorrect invocation of llvm-readobj * macOS: Ignore deprecation for kOnSystemDisk icon domain * Copy only files that belongs to QML module * Android: fix wrong position of cursor handle and editpopup menu in split screen * Doc: Document QML_IMPORTS_PATH and QMLPATHS * Add the missing RCC_DIR to '.qrc' paths when generating deployment settings * Android: Fix the offset of the EditPopupMenu ... changelog too long, skipping 28 lines ... * Don't use a deprecated function if built/linked with OpenSSL v3 ==== libqt5-qtconnectivity ==== Version update (5.15.10+kde4 -> 5.15.11+kde6) Subpackages: libQt5Bluetooth5 libQt5Bluetooth5-imports libQt5Nfc5 libQt5Nfc5-imports libqt5-qtconnectivity-tools - Update to version 5.15.11+kde6, rebased upstream: * Fix bluetooth service discovery not finishing on Android * Add a timeout guard for Android BT device discovery not starting * Repair tst_QBluetoothDeviceDiscoveryAgent unit test on Android - Update to version 5.15.10+kde6: * Fix translation context of QBluetoothUuid::WeightScaleFeature * QBluetoothUuid: remove default case labels and fix the fallout ==== libqt5-qtdeclarative ==== Version update (5.15.10+kde26 -> 5.15.11+kde30) - Update to version 5.15.11+kde30, rebased upstream: * Flickable: prevent fixup() from being called while dragging * Adjust baselineOffset correctly when fontSizeMode == HorizontalFit * QQmlVMEMetaObjectEndpoint: ensure property cache before accessing it * Text: Re-layout the text when a alignment is set and the height grows * Blacklist 1 tests in tst_qquickflickable on macos * Fix fractional scaling of text in Qt Quick * qqmlprivate.h: make static constexpr members c++11 compliant * V4: Account for the guard pages when allocating stack space * Blacklist 1 tests in tst_QQuickLoader on ubuntu-20.04 * Flickable: let changing contentItem pos also affect the drag starting pos * Blacklist 1 tests in tst_QParallelAnimationGroupJob on macos * StackLayout: Do not set size of children to (-1, -1) * V4: Mark InternalClass parents when running GC * A11Y: Send Scrolling Events when Flickable moves * doc: Add missing PointerHandler.CanTakeOverFromItems enum value * Qml: Don't crash on nested group properties with aliases * QV4::CompiledData: fix GCC 12 -Werror=uninitialized errors * QQuickText/Edit: fix C++20 -Wdeprecated-enum-enum-conversion warnings * Android: Fix crash on tap handler with a S-Pen * masm: fix -Wdeprecated-enum-enum-conversion * Add listing of the components and scripts that belongs to the qml module * QML: Port QV4::CompiledData::RegExp to new special integer bitfield * QML: Port QV4::CompiledData::JSClassMember to new special integer bitfield * QML: Port QV4::CompiledData::Object to new special integer bitfield * QML: Port icutils::Node to new special integer bitfield * QML: Port QV4::CompiledData::Lookup to new special integer bitfield * QML: Port QV4::CompiledData::Binding to new special integer bitfield * QML: Port QV4::CompiledData::Property to new special integer bitfield * QML: Port QV4::CompiledData::Alias to new special integer bitfield * QML: Port QV4::CompiledData::ParameterType to new special integer bitfield * QML: Port QV4::CompiledData::Location to new special integer bitfield * Fix Qt build with Python being in path with spaces * Quick test lib: Account for DPR when grabbing sub-image * qqw: Invalidate and reinitialize the scenegraph correctly * Fix rendernode example wrt stacking * Stop using the same buffer for vertex and index data * Fix race condition on QQmlEnginePrivate::qml_debugging_enabled * qqmlimport.cpp: remove unused qreadwritelock.h * QQmlDebug: reliably print the debugger warning * QQmlListCompositor: suppress GCC 12 -Warray-bounds warnings * Doc: QQuickTextInput: Mark all readonly properties as such * MouseArea: don't override preventStealing on mouse release * MultiPointTouchArea: remap touchpoint positions when filtering - Commits dropped by the rebase: * Revert "Fix missing glyphs when using NativeRendering" * Fix missing glyphs when using NativeRendering - Update to version 5.15.10+kde31: * QML: Make notify list thread safe * QtQml: Clean up QQmlData ctor * QRecyclePool: fix potential UB * QQmlJs::MemoryPool: fix potential UB (pointer overflow) * JIT: Add missing {STORE|LOAD}_ACC() to CreateCallContext - Drop patches, now upstream: * 0001-JIT-Add-missing-STORE-LOAD-_ACC-to-CreateCallContext.patch ==== libqt5-qtgraphicaleffects ==== Version update (5.15.10+kde0 -> 5.15.11+kde0) - Update to version 5.15.11+kde0, rebased upstream: * No code changes ==== libqt5-qtimageformats ==== Version update (5.15.10+kde9 -> 5.15.11+kde12) - Update to version 5.15.11+kde12, rebased upstream: * Add finding from oss-fuzz to tst_qicns - Update to version 5.15.10+kde18: * Update bundled libtiff to version 4.6.0 * Update bundled libtiff to version 4.5.1 * Update bundled libtiff to version 4.5.0 * Fix bundled libtiff compilation lzw warning and reading failure * Update bundled libtiff to version 4.4.0 * Update bundled libwebp to version 1.3.2 * Update bundled libwebp to version 1.3.1 * Update bundled libwebp to version 1.3.0 * Update bundled libwebp to version 1.2.4 ==== libqt5-qtlocation ==== Version update (5.15.10+kde4 -> 5.15.11+kde4) Subpackages: libQt5Location5 libQt5Positioning5 libQt5PositioningQuick5 - Update to version 5.15.11+kde4, rebased upstream: * Revert "Make location-labs-plugin depend on features.opengl" * Add check to getSatInfoFromNmea to avoid undefined behavior * Fix undefined behavior in qlocationutils_readGsa() * Use std::remove_if + QVector::erase to remove child pipes * PositionSource: do not query lastKnownPosition if the source is inactive * Android: fix crash on exit when QGeoAreaMonitorPolling is used - Add patch to fix build of the Qt.labs.location QML plugin: * 0001-Fix-build-of-Qt.labs.location-QML-plugin.patch - Update to version 5.15.10+kde5: * Update mapbox-gl-native ==== libqt5-qtmultimedia ==== Version update (5.15.10+kde3 -> 5.15.11+kde2) - Update to version 5.15.11+kde2, rebased upstream: * QAudioHelpers: fix C++20 -Werror,-Wdeprecated-enum-float-conversion * Android: Align emit sequence * QNX: fix KHR image handling * Fix compile error on videonode plugin ==== libqt5-qtnetworkauth ==== Version update (5.15.10+kde0 -> 5.15.11+kde0) - Update to version 5.15.11+kde0, rebased upstream: * No code changes ==== libqt5-qtquickcontrols ==== Version update (5.15.10+kde0 -> 5.15.11+kde0) - Update to version 5.15.11+kde0, rebased upstream: * Blacklist Tests_StackLayout::test_addAndRemoveItems * Blacklist Windows on Tests_StackLayout::test_addAndRemoveItems * Blacklist 1 tests in qtquickcontrols on macos * Blacklist 1 tests in qtquickcontrols on ubuntu-20.04 ==== libqt5-qtquickcontrols2 ==== Version update (5.15.10+kde6 -> 5.15.11+kde5) Subpackages: libQt5QuickControls2-5 libQt5QuickTemplates2-5 - Update to version 5.15.11+kde5, rebased upstream: * Take over touch grab after initial delayed mouse press from Flickable * Doc: Fix link to Scrollbar size property ==== libqt5-qtscript ==== Version update (5.15.14 -> 5.15.15) - Update to version 5.15.15: * Bump version to 5.15.15 ==== libqt5-qtsensors ==== Version update (5.15.10+kde0 -> 5.15.11+kde0) Subpackages: libQt5Sensors5 libQt5Sensors5-imports - Update to version 5.15.11+kde0, rebased upstream: * No code changes ==== libqt5-qtserialport ==== Version update (5.15.10+kde0 -> 5.15.11+kde0) - Update to version 5.15.11+kde0, rebased upstream: * Update LGPL license header * Windows: guard against closing the connection while processing incoming data * Windows: fix soft memory leak in synchronous mode * Revert "QSerialPort: Port to alertable I/O functions on Windows" * Revert "Emit _q_notify only if there's no notification pending" * Revert "Revert "Emit _q_notify only if there's no notification pending"" * Revert "Avoid possible symbol clashes on static builds on Windows" ==== libqt5-qtspeech ==== Version update (5.15.10+kde1 -> 5.15.11+kde1) Subpackages: libQt5TextToSpeech5 libqt5-qtspeech-plugin-speechd - Update to version 5.15.11+kde1, rebased upstream: * No code changes ==== libqt5-qtsvg ==== Version update (5.15.10+kde8 -> 5.15.11+kde6) - Update to version 5.15.11+kde6, rebased upstream: * No code changes ==== libqt5-qttools ==== Version update (5.15.10+kde3 -> 5.15.11+kde3) Subpackages: libQt5Designer5 libQt5Help5 libqt5-qdbus libqt5-qtpaths - Update to version 5.15.11+kde3, rebased upstream: * qtattributionsscanner: Support multiple license files * macdeployqt: Ignore repeated references to binary when parsing otool -L * Build QtDesigner plugins in all configurations * lupdate: Allow multiple specifiers after method signature ==== libqt5-qttranslations ==== Version update (5.15.10+kde0 -> 5.15.11+kde0) - Update to version 5.15.11+kde0, rebased upstream: * No code changes ==== libqt5-qtvirtualkeyboard ==== Version update (5.15.10+kde0 -> 5.15.11+kde0) Subpackages: libQt5HunspellInputMethod5 libQt5VirtualKeyboard5 libqt5-qtvirtualkeyboard-hunspell - Update to version 5.15.11+kde0, rebased upstream: * Remove platform-dependent codes for XCB ==== libqt5-qtwayland ==== Version update (5.15.10+kde51 -> 5.15.11+kde59) Subpackages: libQt5WaylandClient5 libQt5WaylandCompositor5 - Update to version 5.15.11+kde59, rebased upstream: * Client: Avoid locking resizing in QWaylandShmBackingStore * Client: Remove some surface commits * tests: Fix tst_xdgshell::minMaxSize() * Client: Commit the initial surface state explicitly * Remove unused variables * QtWaylandCompositor: includemocs * QtWaylandClient: includemocs * QtWaylandEglClientHwIntegrationPrivate: includemocs * QtWaylandTextureSharing: includemocs * QWaylandXdgShellIntegrationPlugin: includemocs * QtWlShellIntegrationPrivate: includemocs * Add missing QT_{BEGIN,END}_NAMESPACE - Update to version 5.15.10+kde58: * Client: Fix the mouse being stuck in pressed state after DnD * client: Fix infinite recursion with text-input-v2 * Client: Fix buffer damage * Replace scale with devicePixelRatio for non-integer scaling * Convert cursor bitmap to supported format * client: Fix crash on dnd updates after client facing drag ends * Destroy frame queue before display ==== libqt5-qtwebchannel ==== Version update (5.15.10+kde3 -> 5.15.11+kde3) Subpackages: libQt5WebChannel5 libQt5WebChannel5-imports - Update to version 5.15.11+kde3, rebased upstream: * No code changes ==== libqt5-qtwebsockets ==== Version update (5.15.10+kde2 -> 5.15.11+kde2) Subpackages: libQt5WebSockets5 libQt5WebSockets5-imports - Update to version 5.15.11+kde2, rebased upstream: * No code changes ==== libqt5-qtwebview ==== Version update (5.15.10+kde0 -> 5.15.11+kde0) Subpackages: libQt5WebView5 libQt5WebView5-imports - Update to version 5.15.11+kde0, rebased upstream: * Android: Make is possible to change setAllowFileAccess() ==== libqt5-qtx11extras ==== Version update (5.15.10+kde0 -> 5.15.11+kde0) - Update to version 5.15.11+kde0, rebased upstream: * No code changes ==== libqt5-qtxmlpatterns ==== Version update (5.15.10+kde0 -> 5.15.11+kde0) Subpackages: libQt5XmlPatterns5 libqt5-qtxmlpatterns-imports - Update to version 5.15.11+kde0, rebased upstream: * Fix compilation with the recent qtbase ==== libreoffice ==== Version update (7.6.1.2 -> 7.6.2.1) Subpackages: libreoffice-base libreoffice-calc libreoffice-draw libreoffice-filters-optional libreoffice-gnome libreoffice-gtk3 libreoffice-icon-themes libreoffice-impress libreoffice-l10n-cs libreoffice-l10n-da libreoffice-l10n-de libreoffice-l10n-el libreoffice-l10n-en libreoffice-l10n-en_GB libreoffice-l10n-es libreoffice-l10n-fr libreoffice-l10n-hu libreoffice-l10n-it libreoffice-l10n-ja libreoffice-l10n-pl libreoffice-l10n-pt_BR libreoffice-l10n-ru libreoffice-l10n-zh_CN libreoffice-l10n-zh_TW libreoffice-mailmerge libreoffice-math libreoffice-pyuno libreoffice-qt5 libreoffice-writer libreofficekit - Update to 7.6.2.1: https://wiki.documentfoundation.org/Releases/7.6.2/RC1 ==== libsepol ==== - Enable LTO now (boo#1138813). ==== llvm17 ==== Version update (17.0.1 -> 17.0.2) - Update to version 17.0.2. * This release contains bug-fixes for the LLVM 17.0.0 release. This release is API and ABI compatible with 17.0.0. - Rebase llvm-do-not-install-static-libraries.patch. ==== makedumpfile ==== - Add Support-struct-module_memory-on-Linux-6.4-and-.patch (jsc#PED-4593) - Add ppc64-do-page-traversal-if-vmemmap_list-not-po.patch (bsc#1215364) - Re-enable eppic on systems with old enough libeppic ==== nodejs20 ==== Version update (20.7.0 -> 20.8.0) Subpackages: npm20 - Update to 20.8.0: * Stream performance improvements * Rework of memory management in vm APIs with the importModuleDynamically option * test_runner: + accept testOnly in run + add junit reporter - fix_ci_tests.patch: refreshed ==== openssl-1_1 ==== Subpackages: libopenssl1_1 - Displays "fips" in the version string (bsc#1215215) * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch ==== perl ==== Subpackages: perl-base perl-doc - Use 64-bit integers on all platforms ==== policycoreutils ==== Subpackages: policycoreutils-lang policycoreutils-python-utils python3-policycoreutils - Move dbus configuration file to /usr/share instead of /etc - Add policycoreutils-rpmlintrc to suppress spurious rpmlint warnings - Fix newrole debuginfo broken by mistaken 'noarch' - Add GUI and DBUS subpackages * Remove files now provided in upstream tarballs: - Drop system-config-selinux.png - Drop system-config-selinux.desktop - Drop system-config-selinux.pam - Drop system-config-selinux.console - Drop selinux-polgengui.desktop - Drop selinux-polgengui.console - Refactor spec file * Remove empty sandbox package definition ==== polkit-default-privs ==== Version update (1550+20230920.74aeded -> 1550+20231006.28f05f1) - Update to version 1550+20231006.28f05f1: * Whitelist policycoreutils-dbus actions (bsc#1213435) ==== vte ==== Subpackages: libvte-2_91-0 typelib-1_0-Vte-2_91 vte-lang - Add f1a547f1dfebd8860021b6b727fa5d5717e9f143.patch: widget: VteTerminalSpawnAsyncCallback's error is nullable. Fixes: https://gitlab.gnome.org/GNOME/vte/-/issues/2647

1 0

New package rubygem-language_server-protocol for Factory
by Mykola Krachkovsky 10 Oct '23

10 Oct '23

Hi, I'm trying to introduce new package `rubygem-language_server-protocol` for Factory as it needed for newer `rubygem-rubocop` versions to support LSP functionality in rubocop [1]. Devel project package [2] already accepted, thank you. [1] https://docs.rubocop.org/rubocop/usage/lsp.html [2] https://build.opensuse.org/package/show/devel:languages:ruby:extensions/ rubygem-language_server-protocol -- Kind regards, Mykola Krachkovsky -- Найкращі побажання, Микола Крачковський

1 0

Disk auto-unlocking with TPM 2.0
by Gary Lin 10 Oct '23

10 Oct '23

Hi, I'm pleased to introduce a new feature for openSUSE Tumbleweed: disk auto-unlocking with TPM 2.0. In short, it boots the encrypted root without asking for a passphrase. This feature is already integrated into Agama on ALP and we plan to merge it into yast-installation (*1). For now, if you're interested, just type a few commands to enable it. The hard requirements are LUKS2 partition(s), UEFI with Secure Boot enabled, and, of course, TPM 2.0. LUKS2 support in yast-installation is still experimental and needs a few extra steps. You could also choose to convert the existing LUKS1 partition to a LUKS2 one. The LUKS2 setup is addressed in the following link: https://en.opensuse.org/SDB:Encrypted_root_file_system#Setup_LUKS2_partitio… First of all, please update all packages, especially shim and grub2. The key package is fde-tools. Currently, there is a minor issue that the TCTI for native devices may not be installed, and the fix is on the way(*2). So, please install fde-tools along with libtss2-tcti-device0 for the time being. # zypper in fde-tools libtss2-tcti-device0 After installing fde-tools, you can test the TPM 2.0 support with # fdectl tpm-present If there is no error, it's time to seal a new random key for your root partition: # fdectl regenerate-key This command will request the passphrase of the root partition to enroll a new random key, seal the random key with TPM, and then update the grub configuration. Next, reboot your system. If everything is setup correctly, the system will boot without showing the passphrase prompt. One thing to be noted is that after a boot component upgrade, such as shim, grub2, or UEFI firmware, the signature in the sealed key may become invalid, and then you have to run the following command to update the signature. # fdectl tpm-authorize We are still working on a solution to update the signature automatically after shim and grub2 update to reduce such hassles. By default, 'fdectl' only manages the keyslots of the root partition. To extend the keyslot management to other partitions such as swap, please check https://en.opensuse.org/SDB:Encrypted_root_file_system#Additional_steps_for… A complete document is available here: https://en.opensuse.org/SDB:Encrypted_root_file_system#Unattended_boot_with… In case you encounter any issue, feel free to file a bug and assign it to bootloader-maintainers(a)suse.de Cheers, Gary Lin (*1) https://github.com/yast/yast-installation/issues/1088 (*2) https://build.opensuse.org/request/show/1100949

17 32

Leap not more useful for WebServer with php
by Walddys Emmanuel Dorrejo Céspedes 09 Oct '23

09 Oct '23

Leap is stuck with PHP 8.0 version, when most devs and project have move to php8.1/8.2, i was hoping that php8.1 at least this version reach leap 15.5, but didn't reached the main repo. sad.

6 6

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 09 Oct '23

09 Oct '23

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have had problems for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - python-barbicanclient: Fails to build - python-influxdb: Fails to build - python-oslo.messaging: Fails to build - python-osprofiler: Fails to build - python-pandas: Uninstallable: nothing provides python310-Bottleneck >= 1.3.4 needed by python310-pandas-all-2.1.0.noarch - python-statsmodels: Fails to build Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

3 2

New Tumbleweed snapshot 20231006 released!
by Dominique Leuenberger 07 Oct '23

07 Oct '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ImageMagick (7.1.1.18 -> 7.1.1.19) bluez chmlib filesystem grub2 gucharmap (15.0.4 -> 15.1.1) libXrandr (1.5.3 -> 1.5.4) libetebase parted python-argcomplete (3.1.1 -> 3.1.2) python-cryptography (41.0.3 -> 41.0.4) python-dnspython python-urllib3 (2.0.4 -> 2.0.6) sg3_utils (1.48~20221101+1.142dace -> 1.48+1.889c3e3) shadow (4.14.0 -> 4.14.1) systemd === Details === ==== ImageMagick ==== Version update (7.1.1.18 -> 7.1.1.19) Subpackages: ImageMagick-config-7-SUSE ImageMagick-extra libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - version update to 7.1.1.19 * https://github.com/ImageMagick/Website/blob/main/ChangeLog.md * fixes CVE-2023-5341 [bsc#1215939] ==== bluez ==== Subpackages: bluez-auto-enable-devices bluez-cups libbluetooth3 - Moved btmgmt to main rpm of bluez. (jsc#PED-6216) ==== chmlib ==== - drop chmlib-0.39.diff - superseded by chmlib-0001-Patch-to-fix-integer-types-problem-by-Goswin-von-Bre.patch - add chmlib-0001-Patch-to-fix-integer-types-problem-by-Goswin-von-Bre.patch, chmlib-0002-Fix-for-extract_chmLib-confusing-empty-files-with-di.patch, chm_http-port-shortopt.patch, chm_http-bind-localhost.patch, chm_http-output-server-address.patch, chmlib-c99.patch: restrict access to localhost to somewhat reduce reach ==== filesystem ==== - Add /run/lock (boo#1212926) - Remove /var/spool/mail (boo#1179574) - Remove obsolete home dir check. The filesystem package is not meant to contain home directories of random system users anymore - Create ghost symlinks also in pretrans, needed to get /var/run as link right away ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - Add patch to fix reading files from btrfs with "implicit" holes: * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch - Update the TPM 2.0 patches to support more RSA and ECC algorithms * 0002-tpm2-Add-TPM-Software-Stack-TSS.patch * 0003-protectors-Add-TPM2-Key-Protector.patch * 0005-util-grub-protect-Add-new-tool.patch - Remove build require for gcc-32bit, target platform didn't rely on libgcc function shipped with compiler but rather using functions supplied in grub directly. - Add BuildIgnore to break cycle with the branding package ==== gucharmap ==== Version update (15.0.4 -> 15.1.1) Subpackages: gucharmap-lang libgucharmap_2_90-7 - Update to version 15.1.1: + DOAP: Remove defunct mailing list; add Discourse + unicode: Update to version 15.1.0 + unicode: i18n update for 15.1.0 + metainfo: Add launchable info + Updated translations. - Update source service to current standard. ==== libXrandr ==== Version update (1.5.3 -> 1.5.4) - Update to version 1.5.4 This release fixes a bug where an invalid pointer (a pointer to the middle of a buffer returned from malloc() instead of to the beginning of the buffer) could be passed to free() when cleaning up after an out-of-bounds output is found in the response from the X server to XRRGetMonitors(). ==== libetebase ==== - Adjust license according to legaldb review quite some dual licensing from tests and vendor/vendor/* ==== parted ==== Subpackages: libparted-fs-resize0 libparted2 parted-lang - updated fatresize to version 0.2 which includes a man-page removed patches: - fatresize-fix-getting-dev-name.patch ==== python-argcomplete ==== Version update (3.1.1 -> 3.1.2) - update to 3.1.2: * Ensure Python 3.12+ compatibility in check_console_script ==== python-cryptography ==== Version update (41.0.3 -> 41.0.4) - update to 41.0.4: * ~~~~~~~~~~~~~~~~~~~ * Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.1.3. * .. _v41-0-3: ==== python-dnspython ==== - Don't use curio. ==== python-urllib3 ==== Version update (2.0.4 -> 2.0.6) - update to 2.0.6 (bsc#1215968, CVE-2023-43804): * Added the Cookie header to the list of headers to strip from requests when redirecting to a different host. As before, different headers can be set via Retry.remove_headers_on_redirect - 2.0.5: * Allowed pyOpenSSL third-party module without any deprecation warning. #3126 * Fixed default blocksize of HTTPConnection classes to match high-level classes. Previously was 8KiB, now 16KiB. #3066 ==== sg3_utils ==== Version update (1.48~20221101+1.142dace -> 1.48+1.889c3e3) Subpackages: libsgutils2-1_48-2 - udev rules: allow kernel command line overrides with "udev.scsi_id_serial_src=LTVS" and "udev.scsi_symlink_src=LTVS" Try these boot parameters if your system fails to detect SCSI devices after update to sg3_utils 1.48. - dracut.conf: add 00-scsi-sg3_config.rules (jsc#PED-6226) - spec file: * fix build dependencies for regenerate_initrd_posttrans (bsc#1215772) * add missing rules file - Update to version 1.48 * udev rules: new, configurable scheme for creating symlinks for SCSI devices (jsc#PED-6226) See description of ".SCSI_ID_SERIAL_SRC" /usr/lib/udev/55-scsi-sg3_id.rules and .SCSI_SYMLINK_SRC in /usr/lib/udev/58-scsi_symlink.rules * decoding utilities: add -j/--json[=JO] and --js-file=JFN options * sg_sat_datetime: new tool to access date/time on ATA devices using a SAT layer * sg_z_act_query: new tool for sending zone activate/query commands * sg_rem_rest_elem: new tool for removing or restoring elements * sg_write_attr: support for SPC "Write Attirbute" command (for tapes) * sg_ses: swap meaning of -H and -HH, add json support, use e.g. "0:2" for range indicator * sg_rtpg: fix response truncation * sg_decode_sense: add --nodecode option * sg_logs: fix --list and -lll options * sg_modes: improve handling of ZBC disks * sg_inq: add version descriptors from SPC6r08, add --quiet option * sg_vpd: add --sinq_inraw=RFN option * sg_turs: add --timeout= and --ascq= options * sg_requests: add --timeout= option * sg_sat_read_gplog: add --smart and --ppt options * sgp_dd and sgm_dd: add --progress option * sg_dd: add support for accessing NVMe devices via passthrough * Bug fixes and minor fixes - _service: simplify version processing, as we have a clean upstream version again ==== shadow ==== Version update (4.14.0 -> 4.14.1) Subpackages: libsubid4 login_defs - Update to 4.14.1: Build system: Merge libshadow and libmisc into a single libshadow. This fixes problems in the linker, which were reported at least in Gentoo. #791 - Add Alejandro Colomar (new stable branch maintainer) to shadow.keyring ==== systemd ==== Subpackages: libsystemd0 libsystemd0-32bit libudev1 systemd-32bit systemd-container systemd-coredump systemd-lang udev - rpmlintrc: allow systemd-network and systemd-container sub-packages to ship shared libs. These are actually NSS plugins and are not really subject to shlib policy. - Drop 5000-core-manager-run-generators-directly-when-we-are-in-.patch Since dracut-059+suse.447.g9d1fc722, this workaround is not needed anymore.

1 0

sddm stays black after recent TW update
by Adrian Glaubitz 07 Oct '23

07 Oct '23

Hello! After rebooting my Tumbleweed machine after one of the recent updates, sddm just shows a black screen with just the mouse pointer showing. I have not been able to pinpoint the cause of this but maybe someone else has and can help me save some time. Any ideas? Adrian

3 8

Tumbleweed - Review of the weeks 2023/39 & 40
by Dominique Leuenberger 06 Oct '23

06 Oct '23

Dear Tumbleweed users and hackers, My punishment for taking Fridays off is having to write a weekly review that spans again over two weeks. I know, many of you rely on those reviews to know what is coming their way and doing this only bi-weekly is definitively now what I am striving for. After all, you deserve to be informed about the things happening in Tumbleweed. During the last two weeks, we have published 9 snapshots (0921, 0922, 0925, 0926, 0927, 0929, 1001, 1003, and 1005 – with the latest one being still being hot – and important in plus. The most relevant changes in these snapshots are: * Linux kernel 6.5.4 * Poppler 23.09.0 * dbus 1.14.10 * Node.JS 20.7.0 * XWayland 23.2.1 * UDisks 2.10.0 * LibreOffice 7.6.1.2 * Mesa 23.1.8, 23.2.0, and 23.2.1 * GPG 2.4.0 * Mozilla Firefox 118.0.1 * GStreamer 1.22.6 * openSSL 3.1.3 * systemd 254.5 * glibc CVE-2023-4911, aka Looney Tunables * Samba 4.19.0 The glibc fix is part of Snapshot 1005, but due to its importance and reach was already published in the Tumbleweed update channel yesterday evening. The staging projects are currently testing these changes: * binutils 2.41 * Linux kernel 6.5.6 * Shadow 4.14.1 * zypper 1.14.65 / libzypp 17.31.21: changes around transfiletrigger handlers; openQA seems not yet happy with the result * LibreOffice 7.6.2 Cheers, Dominique

1 0

New Tumbleweed snapshot 20231005 released!
by Dominique Leuenberger 06 Oct '23

06 Oct '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: AppStream Mesa (23.2.0 -> 23.2.1) Mesa-drivers (23.2.0 -> 23.2.1) chrony e2fsprogs fde-tools fprintd gdm geoclue2 (2.7.0 -> 2.7.1) gigolo (0.5.2 -> 0.5.3) glibc icewm (3.4.0 -> 3.4.3) javapackages-tools ldb (2.7.2 -> 2.8.0) libX11 (1.8.6 -> 1.8.7) libXpm (3.5.16 -> 3.5.17) libev libnvme libselinux libsemanage libvirt (9.7.0 -> 9.8.0) mpg123 (1.32.2 -> 1.32.3) netcfg nvme-cli python-SQLAlchemy (2.0.19 -> 2.0.21) python-greenlet (3.0.0~rc3 -> 3.0.0) python-libvirt-python (9.7.0 -> 9.8.0) python-psutil python-reportlab (3.6.13 -> 4.0.5) rubygem-nokogiri rubygem-ruby-dbus (0.23.0.beta2 -> 0.23.1) samba (4.18.6+git.320.cfda27bacb -> 4.19.0+git.306.19d2e214c58) selinux-policy srt (1.5.2 -> 1.5.3) talloc (2.4.0 -> 2.4.1) tdb (1.4.8 -> 1.4.9) tevent (0.14.1 -> 0.15.0) vsftpd xdg-desktop-portal xfce4-notifyd (0.8.2 -> 0.9.2) xfce4-panel (4.18.4 -> 4.18.5) xfce4-pulseaudio-plugin (0.4.7 -> 0.4.8) xfce4-taskmanager (1.5.5 -> 1.5.6) xscreensaver (6.06 -> 6.07) xterm (384 -> 385) === Details === ==== AppStream ==== Subpackages: AppStream-lang libAppStreamQt2 libappstream4 - Enable vala support when building in SLE-15 SP6 - Fix condition in files section for the case where vala support is disabled, where some files are being generated but were not included ==== Mesa ==== Version update (23.2.0 -> 23.2.1) Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libOSMesa8 libgbm1 - Update to Mesa 23.2.1 * Mesa 23.2.1 is a new development release. People who are concerned with stability and reliability should stick with a previous release or wait for Mesa 23.2.2. * Mesa 23.2.1 is an unusual first stable release due to the accidentl tagging of 23.2.0 durring the rc cycle. * Mesa 23.2.1 implements the OpenGL 4.6 API, but the version reported by glGetString(GL_VERSION) or glGetIntegerv(GL_MAJOR_VERSION) / glGetIntegerv(GL_MINOR_VERSION) depends on the particular driver being used. Some drivers don't support all the features required in OpenGL 4.6. OpenGL 4.6 is **only** available if requested at context creation. Compatibility contexts may report a lower version depending on each driver. * Mesa 23.2.1 implements the Vulkan 1.3 API, but the version reported by the apiVersion property of the VkPhysicalDeviceProperties struct depends on the particular driver being used. * More details in: - -> https://gitlab.freedesktop.org/mesa/mesa/-/blob/23.2/docs/relnotes/23.2.1.r… ==== Mesa-drivers ==== Version update (23.2.0 -> 23.2.1) Subpackages: Mesa-dri Mesa-gallium Mesa-libva libxatracker2 - Update to Mesa 23.2.1 * Mesa 23.2.1 is a new development release. People who are concerned with stability and reliability should stick with a previous release or wait for Mesa 23.2.2. * Mesa 23.2.1 is an unusual first stable release due to the accidentl tagging of 23.2.0 durring the rc cycle. * Mesa 23.2.1 implements the OpenGL 4.6 API, but the version reported by glGetString(GL_VERSION) or glGetIntegerv(GL_MAJOR_VERSION) / glGetIntegerv(GL_MINOR_VERSION) depends on the particular driver being used. Some drivers don't support all the features required in OpenGL 4.6. OpenGL 4.6 is **only** available if requested at context creation. Compatibility contexts may report a lower version depending on each driver. * Mesa 23.2.1 implements the Vulkan 1.3 API, but the version reported by the apiVersion property of the VkPhysicalDeviceProperties struct depends on the particular driver being used. * More details in: - -> https://gitlab.freedesktop.org/mesa/mesa/-/blob/23.2/docs/relnotes/23.2.1.r… ==== chrony ==== Subpackages: chrony-pool-openSUSE - Use make quickcheck instead of make check to avoid >1h build times and failures due to timeouts. This was the default before 3.2 but it changed to make tests more reliable. Here a seed is already set to get deterministic execution. ==== e2fsprogs ==== Subpackages: e2fsprogs-scrub libcom_err2 libcom_err2-32bit libext2fs2 - Update specfile to make sure regenerate_initrd_post macro is defined ==== fde-tools ==== - Add fde-tools-remove-redundant-2nd-pw-creation.patch to remove the creation of the secondary password in 'add-secondary-key' ==== fprintd ==== Subpackages: fprintd-lang fprintd-pam - add all supported USB devices as Supplements ==== gdm ==== Subpackages: gdm-lang gdm-schema gdmflexiserver libgdm1 typelib-1_0-Gdm-1_0 - Explicitly buildrequire /usr/bin/dbus-run-session: the dbus package is being restructured to be usable with dbus-broker and so far we just relied on implicit dependencies bringing this in. Meson checks for it, so it is correct to BR it though. ==== geoclue2 ==== Version update (2.7.0 -> 2.7.1) Subpackages: system-user-srvGeoClue typelib-1_0-Geoclue-2_0 - Update to version 2.7.1: + Add 'age' field to MLS locate queries + Location updates now always have an accuracy value + Improvements to NMEA parsing: - Parse NMEA timestamps with sub-second accuracy - Add default accuracy to NMEA RMC locations - Ignore locations from GGA and RMC sentences if the GNSS fix is not valid + Prioritize GNSS sources with a recent fix over other sources, preventing location jumps + Install D-Bus policy in /usr/share, not /etc + Upgrade GLib / Gio dependency to version 2.68.0 + Correct gi annotations in GClueSimple + Various small fixes - Use ldconfig_scriptlets macro for post(un) handling. ==== gigolo ==== Version update (0.5.2 -> 0.5.3) Subpackages: gigolo-lang - Update to version 0.5.3 * Update copyright year and urls * Replace remaining stock icons * Replace (some) deprecated stock icons * Fix double free * Fix compiler warning -Wmaybe-uninitialized * Disable systray icon outside X11 * Detect DE using XDG_CURRENT_DESKTOP (Fixes #19) * Add icons at missing sizes, clean up SVG metadata * build: Use XDT_CHECK_PACKAGE * build: Fix autotools warnings * Update `.gitignore` * Rename "SSH" to "SSH / SFTP" * Fix intltool lock file issue during make distcheck * Update TODO * Refresh Glade file, drop unused tab labels (fixes #13) * move the logic setting GtkSpin port value to setup_for_type() * Use new icon in window titlebar * Fix compilation warnings * autoconf: Some updates * Only show an error dialog if the host field is visible/required * Remove capitalization from icon name * Update GenericName (#2) * Fix comment style. * Remove GSourceFunc casts * Update Makefile.am * Add gigolo.ui to POTFILES.in (Issue #6) * Added new icons following new style and reverse DNS format. * Add new README.md and update AM_INIT_AUTOMAKE * Add basic GitLab pipeline * Bug #16717: Move from exo-csource to xdt-csource * Translation Updates ==== glibc ==== Subpackages: glibc-32bit glibc-devel glibc-extra glibc-lang glibc-locale glibc-locale-base nscd - setxid-propagate-glibc-tunables.patch: Propagate GLIBC_TUNABLES in setxid binaries - tunables-string-parsing.patch: tunables: Terminate if end of input is reached (CVE-2023-4911, bsc#1215501) ==== icewm ==== Version update (3.4.0 -> 3.4.3) Subpackages: icewm-config-upstream icewm-default icewm-lang icewm-lite - Update to version 3.4.3: * New preference "TaskBarShowWindowTitles" for icon-only task buttons. * New winoption "doNotManage" to workaround bugs in picom for plank. * When a battery has no data about full charge, use the capacity. * When cascading windows, include the border size in the displacement. * Let icewmbg interpret command-line file arguments relative to $PWD. * Add a -f,--fork option to icewmbg to detach it from the terminal. * Fix the Window List Menu for #144. * Fix restoring from fullscreen with F11 in chromium for #141. * Support tabs in the Window List Menu. * Control the terminal in icewm-menu-fdo by option or environment. * Let icewm-menu-fdo use a list of default terminals to choose from. - Drop unknown config options: * --enable-guievents * --enable-antialiasing * --enable-gradients * --enable-shaped-decorations ==== javapackages-tools ==== Subpackages: javapackages-filesystem - Added patches: * 0005-Interpolate-properties-also-in-the-current-artifact.patch + interpolate variables also in current artifactId, groupId and version * 0006-Test-variable-expansion-in-artifactId.patch + test previous changes * 0007-Test-that-we-don-t-bomb-on-relativePath.patch + test gracious handling of empty <relativePath/> in parent reference of a pom file ==== ldb ==== Version update (2.7.2 -> 2.8.0) Subpackages: libldb2 libldb2-32bit python3-ldb - Update to 2.8.0 * CVE-2023-0614 Not-secret but access controlled LDAP attributes can be discovered (bug 15270) * pyldb: Raise an exception if ldb_dn_get_parent() fails * Implement ldap_whoami in pyldb and add the RFC4532 LDB_EXTENDED_WHOAMI_OID definition * Documentation and spelling fixes * Add ldb_val -> bool,uint64,int64 parsing functions * Split out ldb_val_as_dn() helper function * add LDB_CHANGETYPE_MODRDN support to ldb_ldif_to_pyobject() * add LDB_CHANGETYPE_DELETE support to ldb_ldif_to_pyobject() * let ldb_ldif_parse_modrdn() handle names without 'rdn_name=' prefix * Don't create error string if there is no error * Avoid allocation and memcpy() for every wildcard match candidate * Make ldb_msg_remove_attr O(n) * pyldb: Throw error on invalid controls * pyldb: remove py2 ifdefs * Call tevent_set_max_debug_level(TEVENT_DEBUG_TRACE) ==== libX11 ==== Version update (1.8.6 -> 1.8.7) Subpackages: libX11-6 libX11-data libX11-xcb1 - update to 1.8.7 This release contains fixes for the issues reported in security advisory here: https://lists.x.org/archives/xorg-announce/2023-October/003424.html * fixes CVE-2023-43785 libX11: out-of-bounds memory access in _XkbReadKeySyms() (boo#1215683) * fixes CVE-2023-43786 libX11: stack exhaustion from infinite recursion in PutSubImage() (boo#1215684) * fixes CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to a heap overflow (boo#1215685) along with: * Fail XOpenDisplay() if server-provided default visual is invalid (!233) * Bring XKB docs in line with actual implementation (!231, !228) * Xutil.h: declare XEmptyRegion() and XEqualRegion() as Bool (!225) * Assorted updates to en_US.UTF-8 compose keys (!213, !214, !215, !216, !217, !219, !220, !222, !223, !226, !227, !229) ==== libXpm ==== Version update (3.5.16 -> 3.5.17) - Update to 3.5.17 * This release contains fixes for the libXpm issues reported in security advisory here: https://lists.x.org/archives/xorg-announce/2023-October/003424.html * fixes CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer() (boo#1215686) * fixes CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap (boo#1215687) ==== libev ==== - run signify only on Factory ==== libnvme ==== Subpackages: libnvme-mi1 libnvme1 - Enable tests during build - Set git version tag - Drop unused make dependency - Drop unencessary minimum version depedency on meson. - Re-enable libdbus feature. Upstream defaults changed. ==== libselinux ==== Subpackages: libselinux1 libselinux1-32bit selinux-tools - Repair initrd libselinux check in selinux-ready ==== libsemanage ==== Subpackages: libsemanage-conf libsemanage-migrate-store libsemanage2 - Remove build counter syncing for real ==== libvirt ==== Version update (9.7.0 -> 9.8.0) Subpackages: libvirt-client libvirt-daemon-common libvirt-daemon-config-network libvirt-daemon-driver-interface libvirt-daemon-driver-libxl libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-lock libvirt-daemon-log libvirt-daemon-plugin-lockd libvirt-daemon-proxy libvirt-daemon-qemu libvirt-daemon-xen libvirt-libs - Update to libvirt 9.8.0 (jsc#PED-3279) - bsc#1215708 - Many incremental improvements and bug fixes, see https://libvirt.org/news.html#v9-8-0-2023-10-02 ==== mpg123 ==== Version update (1.32.2 -> 1.32.3) Subpackages: libmpg123-0 mpg123-openal - Update to version 1.32.3 * libmpg123, libsyn123: always ifdef LFS_LARGEFILE_64 (not just if) * libsyn123: re-introduce _32 wrappers in addition to suffix-less ones (regression from 1.31, bug 363) ==== netcfg ==== - Remove ftpusers, none of our ftp servers uses that anymore - Remove defaultdomain, NIS got dropped - Remove hosts.equiv and hosts.lpd, the tools using them got dropped long ago. ==== nvme-cli ==== Subpackages: nvme-cli-bash-completion - Enable test during build - Drop minimum version meson dependency - Add asciidoc dependency - Build documentation when requested ==== python-SQLAlchemy ==== Version update (2.0.19 -> 2.0.21) - Update to 2.0.21: * Changes from 2.0.21: https://docs.sqlalchemy.org/en/20/changelog/changelog_20.html#change-2.0.21 * Changes from 2.0.20: https://docs.sqlalchemy.org/en/20/changelog/changelog_20.html#change-2.0.20 - Remove .gitignore files from source tree, removes all rpmlint warnings. ==== python-greenlet ==== Version update (3.0.0~rc3 -> 3.0.0) - Update to 3.0.0: * No changes from 3.0rc3 aside from the version number. - Ignore some slow and flaky tests ==== python-libvirt-python ==== Version update (9.7.0 -> 9.8.0) - Update to 9.8.0 - Add all new APIs and constants in libvirt 9.8.0 - jsc#PED-3279 ==== python-psutil ==== - Require /usr/bin/who only for suse_version > 1500: 15.X does not provide it, but has it in coreutils. - PEP517 - Clean up specfile from obsolete python2 stuff ==== python-reportlab ==== Version update (3.6.13 -> 4.0.5) - drop reportlab-missing-includes.patch - add importlib.patch to fix support for python3.12 - update to 4.0.5: * add in test for alpha composite colour * Added an SvgPath class; as used in github.com/deeplook/svglib * Added a simple log axis ticklabeller class * Allow for strokeWidth in LineSwatch * update extension alias' * allow BalancedColumns to work in a container flowable (ie with no frame) * allow custom styles for inrowsplitStaart & inrowsplitend * setup.py test --failfast works * allow running all tests without renderPM support * AR made some changes to allow running without renderPM support * AR merged accessibility branch and released 4.0.0 * initial support for rml ul ol dl tagging * added support for an ol/ul/dl caption paragraph * implement a safer toColor with rl_config.toColorCanUse option and rl_extended_literal_eval * added _ExpandedCellTupleEx for more tagging support ==== rubygem-nokogiri ==== - Buildrequire openssl gem to fix building with Ruby 3.0 ==== rubygem-ruby-dbus ==== Version update (0.23.0.beta2 -> 0.23.1) - 0.23.1 API: * Add DBus::Object.dbus_reader_attr_accessor to declare a common use case with a single call (gh#mvidner/ruby-dbus#140). * BusConnection#request_name defaults to the simple use case: single owner without queuing, failing fast; documented the complex use cases. ==== samba ==== Version update (4.18.6+git.320.cfda27bacb -> 4.19.0+git.306.19d2e214c58) Subpackages: libsamba-policy0-python3 samba-ad-dc-libs samba-client samba-client-32bit samba-client-libs samba-client-libs-32bit samba-gpupdate samba-ldb-ldap samba-libs samba-libs-python3 samba-python3 samba-winbind samba-winbind-libs samba-winbind-libs-32bit - Update to 4.19.0 * File doesn't show when user doesn't have permission if aio_pthread is loaded; (bso#15453). * ctdb_killtcp fails to work with --enable-pcap and libpcap â¥ 1.9.1; (bso#15451). * Logging to stdout/stderr with DEBUG_SYSLOG_FORMAT_ALWAYS can log to syslog; (bso#15460). * âsamba-tool domain level raiseâ fails unless given a URL; (bso#15458). * reply_sesssetup_and_X() can dereference uninitialized tmp pointer; (bso#15420). * missing return in reply_exit_done(); (bso#15430). * TREE_CONNECT without SETUP causes smbd to use uninitialized pointer; (bso#15432). * Avoid infinite loop in initial user sync with Azure AD Connect when synchronising a large Samba AD domain; (bso#15401). * Samba replication logs show (null) DN; (bso#15407). * 2-3min delays at reconnect with smb2_validate_sequence_number: bad message_id 2; (bso#15346). * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed; (bso#15446). * CID 1539212 causes real issue when output contains only newlines; (bso#15438). * KDC encodes INT64 claims incorrectly; (bso#15452). * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449). * Windows client join fails if a second container CN=System exists somewhere; (bso#9959). * regression DFS not working with widelinks = true; (bso#15435). * Heimdal fails to build on 32-bit FreeBSD; (bso#15443). * samba-tool ntacl get segfault if aio_pthread appended; (bso#15441). ==== selinux-policy ==== Subpackages: selinux-policy-targeted - Use /var/adm/update-scripts in macros.selinux-policy. The rpm state directory doesn't exist on SUSE systems (bsc#1213593) - Modified update.sh to require first parameter "full" to also update container-selinux. For maintenance updates you usually don't want it to be updated ==== srt ==== Version update (1.5.2 -> 1.5.3) - version update to 1.5.3 * New Features - PR #2714: Added maximum BW limit for retransmissions. See SRTO_MAXREXMITBW. * Important Bug Fixes - PR #2632: Use overlapped WSASendTo to avoid UDP sending losses. - PR #2766: Fixed spurious group read-ready epoll events. - PR #2772: Fixed RCV buffer initialization in Rendezvous. â ï¸ - PR #2757: Fix memory leak on queuing connection initialization packets. - PR #2745: Fix hang up on not enough space in the RCV buffer. - PR #2740: Fix possible tsbpd() deadlock with processCtrlShutdown(). - PR #2692: Rejection not undertaken in rendezvous after KMX failure. - PR #2774: Fix rendezvous connection mode when processing resulted in ACCEPT it was still sending rejection. - PR #2778: Drop unencrypted packets in AES-GCM mode. * Build - PR #2779, #2780: Fix the build for targets without IP_ADD_SOURCE_MEMBERSHIP. - PR #2784: Added missing public header files in Windows binary installer. * Unit Tests - PR #2681: Added custom main with transparent parameters. * Documentation - PR #2765: Updated the explicit information for binding to IPv6 wildcard. - PR #2785: Fixed API doc: SRT_INVALID_SOCK * https://github.com/Haivision/srt/releases/tag/v1.5.3 ==== talloc ==== Version update (2.4.0 -> 2.4.1) Subpackages: libtalloc2 libtalloc2-32bit python3-talloc - Update to 2.4.1 * Remove remaining, but broken python2 support * Spelling fixes * Remove unneeded va_copy() ==== tdb ==== Version update (1.4.8 -> 1.4.9) Subpackages: libtdb1 libtdb1-32bit python3-tdb - Update to 1.4.9 * Remove remaining, but broken python2 support * Spelling fixes * python: Safely clear structure members ==== tevent ==== Version update (0.14.1 -> 0.15.0) Subpackages: libtevent0 libtevent0-32bit python3-tevent - Update to version 0.15.0 * remove py2 ifdefs * python: Safely clear structure members * the tevent_thread_call_depth API is updated in order to allow better tracing. * add tevent_set_max_debug_level() only and don't pass TEVENT_DEBUG_TRACE to tevent_debug() callbacks by default. * Spelling fixes * Make use of epoll_create1() for epoll backend * Optimize overhead in the epoll backend ==== vsftpd ==== - Add vsftpd.ftpusers, the netcfg one is not maintained, outdated and will be removed. - vsftpd.pam: use own copy of ftpusers. ==== xdg-desktop-portal ==== Subpackages: xdg-desktop-portal-lang - Support building with meson 0.61.x used by SLE, where .pc files in dataonly packages are installed to %_libdir unlike in meson >= 0.62.0 where the default was changed to %_datadir. ==== xfce4-notifyd ==== Version update (0.8.2 -> 0.9.2) Subpackages: xfce4-notifyd-lang - Update to 0.9.2: * (Hopefully) actually fix settings migration code * (Hopefully) fix enum setting migration code - Add --enable-systemd when calling configure - Update to 0.9.1: * Make the XDG autostart file attempt a systemd start first * Only include the SystemdService= line if systemd support is enabled * Clean up some conditionals in configure.ac * Go back to installing the XDG autostart file by default * Allow installing systemd service file even if systemd is not installed - Update to 0.9.0: * Add missing sanity check * I18n: Update po/LINGUAS list * wayland: put windows on overlay layer, not top * Set window theme before placing window * Set initial window position before realizing windows * Avoid storing NULL app IDs in the app ID count hashtable * Simplify dbus/systemd service dir logic in configure.ac * Fix typos in README * Install D-Bus and systemd files under $prefix by default * Fix distcheck when run as non-root * Use pkg-config to find default systemd user unit directory * Change default systemd user path from /lib/... to /usr/lib/... * Change options for installing startup files * Add positioning options top-center and bottom-center * Simplify notification placement code * Stop using GtkCornerType; migrate setting to enum nick * Move log level settings from int to enum nick string * Move datetime format setting from int to enum nick string * Have a single entry point for setting migrations * Fix incorrect enum value for apps log level * Use registered enum types for config->enum mapping * Move enums to common, use glib-mkenums * Use new XDT feature macros * Don't log duplicate entries when updating an existing notification * Clean up logic in notify_notify() * Correctly update critical notifications while in DnD mode * Fix incorrect casts in GTree foreach functions * Remove expire/fade timeout source removal hacks * Missed a spot to reset fade/slide * Allow slideout when no fadeout * Only start fade timeout if no existing handle * Only start expiration timeout if no existing handle * Ensure timeout sources are removed in _window_dispose() * Move log dbus signal emissions to XfceNotifyDaemonLog * Remove expire and fade sources before emitting closed signal * Emit NotificationClosed when not showing notification * Consolidate the window movement code * Add option to show notifications on all monitors * Migrate the primary-monitor setting to a string-based enum * Translation Updates ==== xfce4-panel ==== Version update (4.18.4 -> 4.18.5) Subpackages: libxfce4panel-2_0-4 xfce4-panel-lang xfce4-panel-restore-defaults - Update to version 4.18.5 * pager: Do not adapt upper value of spin button in viewport mode * pager: Update workspace layout also on window manager change * pager: Fix aspect ratio for viewport (V2) * actions: Fix memory leak * pager: Delay GdkScreen signal handlers * panel: Do not scale background image when UI scale > 1 * popup-command: Do not block autohide when popped up at pointer * Fix memory leaks when using gtk_css_provider_new() * panel: Clear item list before repopulating item dialog * panel: Remove autosave timer for plugins * wrapper: Really ensure we don't call gtk_main_quit() twice * panel: Block autohide when the panel has input focus * clock: Fix sync timeout for seconds display * clock: Implement ConsoleKit sleep monitor * Add/Sharpen icons at 48-128px * Adjust 32px icon margins, new separator icon * Sharpen icons at 16px and 32px * Increase margins for 24px icons * Make 24px icons sharper * icons: Fix wrong exported sizes * Translation Updates ==== xfce4-pulseaudio-plugin ==== Version update (0.4.7 -> 0.4.8) Subpackages: xfce4-pulseaudio-plugin-lang - Update to version 0.4.8 * MPRIS: Use D-Bus name for identifying players * Fix possible context menu crash with MPRIS playlist * Add option to make mic icon persistent * Check for mic widget visibility * Preserve channel balance when changing sink/source volume * MPRIS: Add option to send multimedia keys to all players * MPRIS: Fix default controlled player by multimedia keys * Remove dead code * Translation Updates ==== xfce4-taskmanager ==== Version update (1.5.5 -> 1.5.6) Subpackages: xfce4-taskmanager-lang - Update to version 1.5.6 * Update copyright year * Rounded legend icons * Reopen process window maximized when closed maximized * Properly finalize global objects in main * Add missing include * Fix more memory leaks * Fix memory leak * Fix CSS related deprecation warnings * Ignore GtkStatusIcon related deprecations * Make libx11 optional, guard x11 code paths * Change type so that memory values are correct (Fixes #65) * settings-dialog: Fix untranslated label * Add icons at missing sizes, clean up SVG metadata * Add minimal support for Wayland * Fix graph drop off on the right side * Change graph peak variable to double * Remove timeout before exiting main loop * build: Add GLib requirement * Do not treat missing swap as error on OpenBSD and NetBSD * Fix process filter crash caused by the use of an uninitialized variable * Translation Updates ==== xscreensaver ==== Version update (6.06 -> 6.07) Subpackages: xscreensaver-data xscreensaver-data-extra xscreensaver-lang - update to 6.07: * New hacks, droste, skulloop, papercube and cubocteversion * xscreensaver-settings was sometimes turning off the DPMS checkbox * Log pid of caller of deactivate command, to give a hint about who is preventing the screen from blanking * Updates to sphereeversion. * Added some new map sources to mapscroller. * Various other minor bug fixes. - leave a nice notice for a very angry upstream developer in xscreensaver-disable-upgrade-nagging-message.patch - drop xscreensaver-bsc1204744.patch, included upstream ==== xterm ==== Version update (384 -> 385) Subpackages: xterm-bin xterm-resize - update to 385: * fixes for ReGIS (report by Ben Wong). + correct conversion from HLS to RGB + improve font-caching performance. * update tables in wcwidth.c based on Unicode 15.1.0 * improve fastScroll resource: + suppress screen-refreshes for carriage-returns + add -jf option to simplify use of this resource. + add a control sequence for enabling/disabling the resource. + enable this feature by default * extend title-stack feature to allow an additional parameter to directly access the stack, like the XTPUSHCOLORS and XTPOPCOLORS feature. * correct size and position of box shown for double-cell character which happens to be missing from the bitmap font (report by Peter Fabinski). * improved configure script: + add pattern for uClibc-ng to CF_XOPEN_SOURCE (report/patch by Waldemar Brodkorb). + add configure options --with-utmp-path and --with-wtmp-path to override configure script's check for utmp/wtmp pathnames which are shown in the manual (Debian #1042767). + CF_XOPEN_SOURCE provides for defining _DEFAULT_SOURCE for MinGW32 and MinGW64. + sed expression used to report gcc version now works with MinGW * ensure that line-attributes are reset after drawing missing character (report by Christian Weisgerber). * update config.guess, config.sub - rebased all patches

1 0

Re: [TESTERS WANTED] Using git to maintain packages on OBS - test run
by Adrian Glaubitz 06 Oct '23

06 Oct '23

On Fri, 2023-10-06 at 12:07 +0200, Dirk Müller wrote: > On Freitag, 6. Oktober 2023 11:17:36 CEST Adrian Glaubitz wrote: > > Hi Adrian, > > > > Yes, Dirk had to disable account creation as spammers found src.o.o > > OK. Could you create an account for me please? > > Can you try logging in again? Done. Still waiting for the confirmation mail.

2 2

Package fstrcmp is gone from TW 20231003 - on purpose?
by Manfred Hollstein 05 Oct '23

05 Oct '23

Hi there, it looks like the last Tumbleweed snapshot 20231003 removed package fstrcmp, i.e. libfstrcmp0 here; fwiw, openSUSE:Factory also doesn't contain it anymore. This package is still needed by Kodi which now shows one orphaned package. Was the removal on purpose? In that case we would have to start building it for Tumbleweed on Packman. TIA, cheers. l8er manfred

3 8

New Tumbleweed snapshot 20231003 released!
by Dominique Leuenberger 05 Oct '23

05 Oct '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: GraphicsMagick (1.3.40 -> 1.3.42) Mesa (23.1.8 -> 23.2.0) Mesa-drivers (23.1.8 -> 23.2.0) SDL2 (2.28.3 -> 2.28.4) container-selinux (2.215.0 -> 2.222.0) crypto-policies (20230614.5f3458e -> 20230920.570ea89) dLeyna (0.8.2 -> 0.8.3) glib2 gnome-remote-desktop (45.rc -> 45.0) grub2 gtk4 (4.12.2 -> 4.12.3) kbd (2.6.2 -> 2.6.3) kdepim-runtime libblockdev (3.0.2 -> 3.0.3) libdecor (0.1.1 -> 0.2.0) libsigc++2 (2.12.0 -> 2.12.1) libsigc++3 (3.2.0 -> 3.6.0) libwebp mozjs115 (115.2.1 -> 115.3.1) python-argparse-manpage (4.3 -> 4.5) qalculate (4.8.0 -> 4.8.1) qpdf (11.6.0 -> 11.6.1) qt6-base (6.5.2 -> 6.5.3) qt6-declarative (6.5.2 -> 6.5.3) qt6-imageformats (6.5.2 -> 6.5.3) qt6-translations (6.5.2 -> 6.5.3) qt6-wayland (6.5.2 -> 6.5.3) screen (4.9.0 -> 4.9.1) shadow systemd (254.3 -> 254.5) tracker-miners (3.6.0 -> 3.6.1) webkit2gtk3 (2.42.0 -> 2.42.1) webkit2gtk3-soup2 (2.42.0 -> 2.42.1) xdg-dbus-proxy (0.1.4 -> 0.1.5) yast2-trans (84.87.20230922.91d997adab -> 84.87.20230930.5f9e01162a) === Details === ==== GraphicsMagick ==== Version update (1.3.40 -> 1.3.42) Subpackages: libGraphicsMagick++-Q16-12 libGraphicsMagick-Q16-3 libGraphicsMagick3-config - version update to 1.3.42 Bug fixes: * TIFF: Default the alpha channel to type EXTRASAMPLE_UNASSALPHA(2). * BMP: Many fixes for reading esoteric BMP sub-formats. * TranslateTextEx(): Revert change so now a NULL pointer is returned when given an empty string. Some algorithms (e.g. montage) were depending on this!. * PAM: Fix reading comments. * PNG: Added Add missing module aliases "PNG00", "PNG48", "PNG64", so it is again possible to request these subformats directly. * TIFF: For common formats with the required number of channels, but one is an 'unspecified' channel, promote unspecified alpha to unassociated alpha so that the alpha channel is not ignored. * "Magick" command line emulation: Eliminate duplicate utility name output in error messages New Features: * BMP: Added the ability to read and write BMP using JPEG compression. Use '-define bmp:allow-jpeg' to allow use of JPEG compression. * BMP: Added support for BI_ALPHABITFIELDS compression * BMP: Added support for reading BMP with PNG compression. - modified patches % GraphicsMagick-disable-insecure-coders.patch (refreshed) - deleted patches - strlcpy-wrong-sizing.patch (upstreamed) ==== Mesa ==== Version update (23.1.8 -> 23.2.0) Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libOSMesa8 libgbm1 - Update to Mesa 23.2.0-rc4 - -> https://lists.freedesktop.org/archives/mesa-announce/2023-September/000731.… - supersedes U_llvmpipe-only-include-old-Transform-includes-when-ne.patch - disabled u_fix-build-on-ppc64le.patch (no longer needed?) - adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch ==== Mesa-drivers ==== Version update (23.1.8 -> 23.2.0) Subpackages: Mesa-dri Mesa-gallium Mesa-libva libxatracker2 - Update to Mesa 23.2.0-rc4 - -> https://lists.freedesktop.org/archives/mesa-announce/2023-September/000731.… - supersedes U_llvmpipe-only-include-old-Transform-includes-when-ne.patch - disabled u_fix-build-on-ppc64le.patch (no longer needed?) - adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch ==== SDL2 ==== Version update (2.28.3 -> 2.28.4) - Update to release 2.28.4 * Enable clipping for zero sized rectangles in the SDL renderer * Notify X11 clipboard managers when the clipboard changes * Fixed sensor timestamps for third-party PS5 controllers * Added detection for Logitech and Simagic racing wheels ==== container-selinux ==== Version update (2.215.0 -> 2.222.0) - Update to version 2.222: * Allow containers to read/write inherited dri devices - Update to version 2.221: * Allow containers to shutdown sockets inherited from container runtimes * Allow spc_t to use execmod libraries on container file systems * Add boolean to allow containers to read all cert files * More MLS Policy allow rules * Allow container runtimes using pasta bind icmp_socket to port_t * Fix spc_t transitions from container_runtime_domain ==== crypto-policies ==== Version update (20230614.5f3458e -> 20230920.570ea89) Subpackages: crypto-policies-scripts - nss: Skip the NSS policy check if the mozilla-nss-tools package is not installed. This avoids adding more dependencies in ring0. * Add crypto-policies-nss.patch [bsc#1211301] - Update to version 20230920.570ea89: * fips-mode-setup: more thorough --disable, still unsupported * FIPS:OSPP: tighten beyond reason for OSPP 4.3 * krb5: sort enctypes mac-first, cipher-second, prioritize SHA-2 ones * openssl: implement relaxing EMS in FIPS (NO-ENFORCE-EMS) * gnutls: prepare for tls-session-hash option coming * nss: prepare for TLS-REQUIRE-EMS option coming * NO-ENFORCE-EMS: add subpolicy * FIPS: set __ems = ENFORCE * cryptopolicies: add enums and __ems tri-state * docs: replace `FIPS 140-2` with just `FIPS 140` * .gitlab-ci: remove forcing OPENSSH_MIN_RSA_SIZE * cryptopolicies: add comments on dunder options * nss: retire NSS_OLD and replace with NSS_LAX 3.80 check * BSI: start a BSI TR 02102 policy [jsc#PED-4933] * Rebase patches: - crypto-policies-policygenerators.patch - crypto-policies-revert-rh-allow-sha1-signatures.patch - crypto-policies-FIPS.patch - Conditionally recommend the crypto-policies-scripts package when python is not installed in the system [bsc#1215201] ==== dLeyna ==== Version update (0.8.2 -> 0.8.3) - Update to version 0.8.3: + Build: Fix compatibility with Meson 1.2 + Renderer: Fix locale initialization + Server: - Fix locate initialization - Fix uninitialized variable warning - Properly handle optional actions - Fix browse not working properly - Drop 61d24fdc.patch: Fixed upstream. - Change compression of tarball in service and spec to zst from xz. ==== glib2 ==== Subpackages: glib2-lang glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 libgthread-2_0-0 - Fix NetworkManager crashing repeatedly with glib 2.78.0; (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch ==== gnome-remote-desktop ==== Version update (45.rc -> 45.0) Subpackages: gnome-remote-desktop-lang - Update to version 45.0: + vnc: Also include DRM format modifiers when resizing PipeWire stream. + rdp: Also include DRM format modifiers when resizing PipeWire stream. + Updated translations. - Change compression of tarball in service and spec to zst from xz. - Drop dbus-1-daemon Requires, only needed for tests, and we are not building them currently. ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - Only build with fde-tpm-helper-rpm-macros for the architectures supporting the newer UEFI and TPM 2.0. * Also correct the location of %fde_tpm_update_requires - Fix a boot delay regression in PowerPC PXE boot (bsc#1201300) * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch - Add the new BuildRequires for EFI builds for the better FDE support: fde-tpm-helper-rpm-macros + Also add the the macros to %post and %posttrans - Correct the type of allocated EFI pages for ARM64 kernel (bsc#1215151) * arm64-Use-proper-memory-type-for-kernel-allocation.patch ==== gtk4 ==== Version update (4.12.2 -> 4.12.3) Subpackages: gtk4-lang gtk4-schema gtk4-tools libgtk-4-1 typelib-1_0-Gtk-4_0 - Update to version 4.12.3: + GtkWindow: Don't assume titlebars are GtkHeaderBar + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos + printing: Fix some issues with the portal implementation + GSK: - Some optimizations in the GL renderer - Fix memory leaks in the Broadway renderer + demos: Fix a crash in gtk4-demo + Updated translations. ==== kbd ==== Version update (2.6.2 -> 2.6.3) Subpackages: kbd-legacy - Update to version 2.6.3: - libkfont: * Don't look for fonts in the current directory. - showkey: * Add parameter to allow to change timeout. - po: * Update po files. ==== kdepim-runtime ==== Subpackages: kdepim-runtime-lang - Add libetebase-devel to BuildRequires to enable the etesync resource for factory builds ==== libblockdev ==== Version update (3.0.2 -> 3.0.3) Subpackages: libbd_btrfs3 libbd_crypto3 libbd_fs3 libbd_loop3 libbd_lvm3 libbd_mdraid3 libbd_nvme3 libbd_part3 libbd_swap3 libbd_utils3 libblockdev3 - Update to version 3.0.3: * Always use "--fs ignore" with lvresize * nvme: - Use interim buffer for nvme_get_log_sanitize() - Generate HostID when missing * tests: - Specificy required versions when importing GLib and BlockDev introspection - Minor NVMe HostNQN fixes - Replace deprecated unittest assert calls * fs: - Fix leaking directories with temporary mounts - Fix memory leak * crypto: Correctly convert passphrases from Python to C ==== libdecor ==== Version update (0.1.1 -> 0.2.0) Subpackages: libdecor-0-0 - Update to version 0.2.0: * Various bug and leak fixes. * New gtk plugin. - Update URL and source to new home. - Add pkgconfig(gtk-3.0) BuildRequires, new dependency. - Use ldconfig_scriptlets macro for post(un) handling. ==== libsigc++2 ==== Version update (2.12.0 -> 2.12.1) - Update to version 2.12.1: + Documentation: - slot, signal: Describe the slot<void(int)> syntax more - connection: Improve the class documentation - Improve Visual Studio build documentation - Remove AUTHORS and add general information to README.md + Build: - Meson: . Don't copy files with configure_file() . Fix the evaluation of is_git_build on Windows - Visual Studio: Support static builds - Use ldconfig_scriptlets macro for post(un) handling. - Update URL to new home. ==== libsigc++3 ==== Version update (3.2.0 -> 3.6.0) - Update to version 3.6.0: + sigc++config.h.*: Update and clean up a bit for Visual Studio + scoped_connection: New wrapper to auto-disconnect a slot + signal: Add connect_first() + Documentation: - connection: Improve the class documentation - Improve Visual Studio build documentation - Remove AUTHORS and add general information to README.md - manual: Add paragraph about new scoped_connection + Tests: Add test_scoped_connection + Build: - Meson: . Don't copy files with configure_file() . Fix the evaluation of is_git_build on Windows . Don't require the 'dot' command to build the documentation - CMake: Prevent multiple target declaration for uninstall - Visual Studio: Support static builds - Use autosetup macro. - Update to version 3.4.0: + Add track_object(), deprecate track_obj() + Add trackable_signal_with_accumulator and trackable_signal + Examples, tests: - examples/member_method: Make on_print() non-virtual - test_accumulated.cc: clang++ requires another 'template' - test_limit_reference.cc: Don't use auto where a slot is required + Documentation: signal::make_slot(): Note that signal does not derive from trackable + Build: - Meson, MSVC: Compensate for the lack of msvc_recommended_pragmas.h - Fix build with -Dbuild-deprecated-api=false - Meson: . Avoid configuration warnings . Detect if we build from a git subtree . Simplify lookup of python command . Add build_tests option - Use ldconfig_scriptlets macro for post(un) handling. - Update URL to new home. ==== libwebp ==== Subpackages: libsharpyuv0 libwebp7 libwebpdecoder3 libwebpdemux2 libwebpmux3 - Add 0001-Fix-invalid-incremental-decoding-check.patch A fuzzing finding fixed in the SLE/Leap updates ==== mozjs115 ==== Version update (115.2.1 -> 115.3.1) - Update to version 115.3.1: + Security fix: CVE-2023-5217: Heap buffer overflow in libvpx. - Changes from version 115.3.0: + Various security fixes and other quality improvements. + CVE-2023-5168: Out-of-bounds write in FilterNodeD2D1 + CVE-2023-5169: Out-of-bounds write in PathOps + CVE-2023-5171: Use-after-free in Ion Compiler + CVE-2023-5174: Double-free in process spawning on Windows + CVE-2023-5176: Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3 ==== python-argparse-manpage ==== Version update (4.3 -> 4.5) - update to 4.5: * We newly provide build_manpages.build_py and build_manpages.install command classes that are re-usable from pyproject.toml. No need to provide setup.py because of argparse-manpage. * The prog= specifier (in setup.py/setup.cfg/pyproject.toml) is now better handled so it doesn't conflict with ArgumentParser(prog=..). ==== qalculate ==== Version update (4.8.0 -> 4.8.1) Subpackages: libqalculate22 qalculate-data - version update to 4.8.1 * Fix besselj() and bessely() * Fix display of matrices and vectors with complex number form other than rectangular (default) * Fix conflict between decibel units (e.g. "0dB") and duodecimal 0dâ¦ syntax (now requires at least two digits) * Fixes for title options in plot() function * Add additional buttons and button menus to general keypad (Qt) * Add option to show all functions, units, and variables in tool button menus (Qt) * Add recently used objects to functions, units, and variables menus (Qt) * Add option to bypass dialog for functions in menu (Qt) * Add option, in context menu, to display text for tool buttons (Qt) * Open functions, units, and variables tool button menus using long-press or right-click (in addition to arrow button), and add keyboard shortcuts (Qt) * Use keypad tool button menu as context menu and show keypad type in title bar of keypad (Qt) * Auto-update number bases above programming keypad when entering simple integers, even if calculate-as-you-type is deactivated (GTK) ==== qpdf ==== Version update (11.6.0 -> 11.6.1) - version update to 11.6.1 * Bug fixes: - Fix a logic error introduced in 11.6.0 in the fix to copyForeignObject. The bug could result in some pages not being copied. ==== qt6-base ==== Version update (6.5.2 -> 6.5.3) Subpackages: libQt6Core6 libQt6DBus6 libQt6Gui6 libQt6Network6 libQt6OpenGL6 libQt6Sql6 libQt6Test6 libQt6Widgets6 qt6-network-tls qt6-platformtheme-gtk3 - Update to 6.5.3 * https://www.qt.io/blog/qt-6.5.3-released - Drop patch, merged upstream: * CVE-2023-38197-qtbase-6.5.diff - Enable the experimental native painting feature to improve remote desktop performances (boo#1214915) exporting QT_XCB_NATIVE_PAINTING is required to use the feature. ==== qt6-declarative ==== Version update (6.5.2 -> 6.5.3) Subpackages: libQt6LabsAnimation6 libQt6LabsFolderListModel6 libQt6LabsQmlModels6 libQt6LabsSettings6 libQt6LabsSharedImage6 libQt6LabsWavefrontMesh6 libQt6Qml6 libQt6QmlCore6 libQt6QmlLocalStorage6 libQt6QmlModels6 libQt6QmlWorkerScript6 libQt6QmlXmlListModel6 libQt6Quick6 libQt6QuickControls2-6 libQt6QuickControls2Impl6 libQt6QuickDialogs2-6 libQt6QuickDialogs2QuickImpl6 libQt6QuickDialogs2Utils6 libQt6QuickEffects6 libQt6QuickLayouts6 libQt6QuickParticles6 libQt6QuickShapes6 libQt6QuickTemplates2-6 libQt6QuickTest6 qt6-declarative-imports - Update to 6.5.3 * https://www.qt.io/blog/qt-6.5.3-released ==== qt6-imageformats ==== Version update (6.5.2 -> 6.5.3) - Update to 6.5.3 * https://www.qt.io/blog/qt-6.5.3-released ==== qt6-translations ==== Version update (6.5.2 -> 6.5.3) - Update to 6.5.3 * https://www.qt.io/blog/qt-6.5.3-released ==== qt6-wayland ==== Version update (6.5.2 -> 6.5.3) Subpackages: libQt6WaylandClient6 libQt6WaylandCompositor6 libQt6WaylandEglClientHwIntegration6 libQt6WaylandEglCompositorHwIntegration6 libQt6WlShellIntegration6 - Update to 6.5.3 * https://www.qt.io/blog/qt-6.5.3-released ==== screen ==== Version update (4.9.0 -> 4.9.1) - update to 4.9.1 (bsc#1210272, CVE-2023-24626): * Support stop/parity bits on serial port * Add needed system headers in checks and return values for implicit function declarations * Avoid zombies after shell exit * Missed signal sending permission check on failed query messages (CVE-2023-24626) * manpage fixes * source code fixes during cleanup * UTF-8 encoding can emit invalid UTF-8 sequences * for out of range unicode values ==== shadow ==== Subpackages: libsubid4 login_defs - Add shadow-4.14.0-selinux-labels.patch: Set proper SELinux labels for new homedirs. See gh/shadow-maint/shadow#812. ==== systemd ==== Version update (254.3 -> 254.5) Subpackages: libsystemd0 libsystemd0-32bit libudev1 systemd-32bit systemd-container systemd-coredump systemd-lang udev - Import commit 9674bb256205e6c643feadbcccfd1ee8feeee684 (merge of v254.5) For a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/6ed5b11298005e07509832881a0c5ff… - Make sure to call %sysusers_create only when transfiletrigger is disabled. - systemd.spec: switch to %ldconfig_scriptlets - systemd.spec: add `%tmpfiles_create systemd-resolve` It's only needed by SLE distros since systemd packages rely on transtriggerfiles in Factory. - Import commit 6ed5b11298005e07509832881a0c5ff1a80bf225 (merge of v254.4) For a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/b6b4e5a8a82d1f13f265a4ef170f2d1… ==== tracker-miners ==== Version update (3.6.0 -> 3.6.1) Subpackages: tracker-miner-files tracker-miners-lang - Update to version 3.6.1: + Avoid the special thread in tracker-extract-3, and extend the seccomp jail to the full process. + Updated translations. - Add a tracker_basever define, and set it to 3.6. We have a hard Requires on what tracker version is needed and it is currently set at the same or newer version, change this to tracker_basever (tracker-miners have never been at a higher patch version before). ==== webkit2gtk3 ==== Version update (2.42.0 -> 2.42.1) Subpackages: WebKitGTK-4.1-lang libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles - Update to version 2.42.1: + Fix enable-html5-database setting to properly enable/disable IndexedDB API. + Fix the build with GBM disabled. + Fix several crashes and rendering issues. - switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow switching to a different libicu*-devel (jsc#PED-6193) ==== webkit2gtk3-soup2 ==== Version update (2.42.0 -> 2.42.1) Subpackages: WebKitGTK-4.0-lang libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 webkit2gtk-4_0-injected-bundles - Update to version 2.42.1: + Fix enable-html5-database setting to properly enable/disable IndexedDB API. + Fix the build with GBM disabled. + Fix several crashes and rendering issues. - switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow switching to a different libicu*-devel (jsc#PED-6193) ==== xdg-dbus-proxy ==== Version update (0.1.4 -> 0.1.5) - Update to version 0.1.5: + Fix handling of object paths > 255 bytes + Print better errors when message parsing fails + Optionally install tests for "as-installed" testing ==== yast2-trans ==== Version update (84.87.20230922.91d997adab -> 84.87.20230930.5f9e01162a) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sr yast2-trans-sv yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20230930.5f9e01162a: * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Spanish) * Translated using Weblate (Spanish) * Translated using Weblate (Spanish) * Translated using Weblate (Spanish) * New POT for text domain 'storage'.

1 0

Re: sddm stays black after recent TW update
by Ianseeks 05 Oct '23

05 Oct '23

>Hello! > >After rebooting my Tumbleweed machine after one of the recent updates, sddm >just shows a black screen with just the mouse pointer showing. > >I have not been able to pinpoint the cause of this but maybe someone else has >and can help me save some time. > >Any ideas? This might not be the same situation. I had a similar problem with 6.5 kernel and I thought it had hung. After some research it turned out to be timeout situation with ata3 during boot up. I then left it until the timeout sorted itself out and it eventually came to SDDM. See bug: 1215328 I will now only boot with 6.4 kernel until the problem gets sorted >Adrian opensuse:tumbleweed:20231001 Qt: 5.15.10 KDE Frameworks: 5.110.0 - KDE Plasma: 5.27.8 - kwin 5.27.8 kmail2 5.24.1 (23.08.1) - akonadiserver 5.24.1 (23.08.1) - Kernel: 6.4.12-1- default - kernel-firmware-radeon 20230829

1 0

Changes to dbus packaging (Some Attention maybe required).
by Simon Lees 04 Oct '23

04 Oct '23

Hi All, For Tumbleweed and ALP we plan to follow Red Hat / Fedora / Debian and move from dbus-daemon to dbus-broker as it has a number of advantages and is what upstream is now focusing on. While one of the goals here is to provide the same user experience there will be a couple of changes that will likely require adjustments in a few packages. 1. tools such as dbus-send and dbus-uuid will no longer be installed by default on all systems (we have many use cases that will simply no longer need them and this follows other distro's). Currently the package dbus-1-tools exists and is required by dbus-1 but that will change maybe to a recommends so if you know your package needs one of these tools you can add the Requires there now, otherwise I plan to go through and look at debian and fedora to try and find any packages that need this requires before it becomes optional for dbus. 2. The symlink from /etc/machine-id to /var/lib/dbus/machine-id will no longer be present on all machines and software should be adapted to use /etc/machine-id from systemd rather then the dbus copy. Again this has already happened for Debian and Fedora so hopefully many upstreams have already adapted to this. I'll outline the plan / timeline below. 1. Currently - dbus-broker has been in the distro for quite some time and the dbus-1 package has already been split up and we are at the point of asking people nicely to start testing (instructions below), myself and at least several other people have already been testing this without issues. 2. In 2-3 weeks if I don't hear of any issues we will update the systemd presets to enable dbus-broker rather then dbus-daemon. 3. Unless someone indicates they really want to keep maintaining dbus-daemon and have good reasons for doing so I will make dbus-daemon uninstallable. 4. Once we have done the work to ensure that as many packages that use dbus-send and other tools require the tools package we will drop the requires for dbus-tools from the dbus package. Instead it will probably move to being a Recommends in one of the patterns so it still ends up on most users machines. Switching to dbus-broker: Run the following as root zypper in dbus-broker systemctl disable dbus systemctl enable dbus-broker systemctl --global disable dbus systemctl --global enable dbus-broker https://www.mail-archive.com/debian-policy@lists.debian.org/msg35437.html https://fedoraproject.org/wiki/Changes/DbusBrokerAsTheDefaultDbusImplementa… -- Simon Lees (Simotek) http://simotek.net Emergency Update Team keybase.io/simotek SUSE Linux Adelaide Australia, UTC+10:30 GPG Fingerprint: 5B87 DB9D 88DC F606 E489 CEC5 0922 C246 02F0 014B

4 6

Glibc Dynamic Loader Hit By A Nasty Local Privilege Escalation Vulnerability
by Adam Mizerski 04 Oct '23

04 Oct '23

Quoting from https://www.phoronix.com/news/Glibc-LD-Nasty-Root-Bug > A nasty vulnerability has been made public today concerning Glibc's > dynamic loader that can lead to full root privileges being obtained by > local users. This affects Linux distributions of the past two years > with the likes of Ubuntu 22.04 LTS, 23.04, Fedora 38, and others > vulnerable to this local privilege escalation issue.

2 1

Re: TW snapshot 20230901: grub2-2.12 not really ready?
by Patrick Schaaf 04 Oct '23

04 Oct '23

Hi folks, following up on previous thread, just want to share a personal observation. On one of my private little servers, I updated to snapshot 20231001 today (been a while that I updated before). That brought in grub 2.12~rc1, and the update resulted in an unbootable system, as reported before by others, dropping me to the grub rescue prompt. I could fix the situation by (network) rescue booting + re-running grub2-install on /dev/sda + /dev/sdb. Most likely cause (guessing), is my peculiar drive setup - just sharing for information, I'm not complaining that it didn't work magically! * two SSDs /dev/sda + /dev/sdb * gpt partitioning * the usual grub BIOS partition on both drives * rest of the drive a second partition * these large partitions, run as software RAID1 * and on top of that, LVM with a logical root volume and no separate boot Again, not complaining, just want to share info + maybe help someone who runs into something similar. best regards Patrick

1 0

Re: Trial to use a CDN for download.opensuse.org
by Jan Engelhardt 03 Oct '23

03 Oct '23

A slow mirror I could live with, but... an unreachable one ううん. This does not actually look like cdn is really used in this particular instance. # wget http://cdn.opensuse.org/debug/tumbleweed/repo/oss/x86_64/libvmime-debugsour… -c --2023-09-30 17:19:37-- http://cdn.opensuse.org/debug/tumbleweed/repo/oss/x86_64/libvmime-debugsour… Resolving cdn.opensuse.org (cdn.opensuse.org) 151.101.109.91, 2a04:4e42:1a::347 Connecting to cdn.opensuse.org (cdn.opensuse.org)|151.101.109.91|:80... connected. HTTP request sent, awaiting response... 302 Found Location: http://mirrorcache-jp.opensuse.org/debug/tumbleweed/repo/oss/x86_64/libvmim… [following] --2023-09-30 17:19:37-- http://mirrorcache-jp.opensuse.org/debug/tumbleweed/repo/oss/x86_64/libvmim… Resolving mirrorcache-jp.opensuse.org (mirrorcache-jp.opensuse.org) 139.162.108.149, 2400:8902::f03c:93ff:fec8:af18 Connecting to mirrorcache-jp.opensuse.org (mirrorcache-jp.opensuse.org)|139.162.108.149|:80... connected. HTTP request sent, awaiting response... 302 Found Location: http://mirror-jp.firstyear.id.au/debug/tumbleweed/repo/oss/x86_64/libvmime-… [following] --2023-09-30 17:19:38-- http://mirror-jp.firstyear.id.au/debug/tumbleweed/repo/oss/x86_64/libvmime-… Resolving mirror-jp.firstyear.id.au (mirror-jp.firstyear.id.au)... 139.162.108.7, 2400:8902::f03c:93ff:fec8:afa1 Connecting to mirror-jp.firstyear.id.au (mirror-jp.firstyear.id.au)|139.162.108.7|:80... ^C 17:20 f3:~ $ ping mirror-jp.firstyear.id.au PING mirror-jp.firstyear.id.au (139.162.108.7) 56(84) bytes of data. ^C --- mirror-jp.firstyear.id.au ping statistics --- 3 packets transmitted, 0 received, 100% packet loss, time 2027ms

2 3

Mesa 23.1.7 32-bit libraries missing in updates repo on Slowroll
by kocelfc＠tutanota.com 03 Oct '23

03 Oct '23

Is there an issue somewhere which can be tracked?

2 1

why does zypper marks a package "obsolete" even with higher version number ...
by André Verwijs 03 Oct '23

03 Oct '23

at the bottom, why does zypper marks a package "obsolete" even with higher version number ... true: "epson-inkjet-printer-escpr-1.8.0-1.x86_64¨ is installed manually (downloaded package) how does zypper deal with package version numbers?? verwijs-leap:~ # zypper dup Repository 'Insync Fedora 27' is up to date. Retrieving repository '.NET/Mono based Software (openSUSE_Tumbleweed)' metadata ...................................[done] Building repository '.NET/Mono based Software (openSUSE_Tumbleweed)' cache ........................................[done] Repository 'MySQL 8.0 Community Server' is up to date. Repository 'MySQL 8.0 Community Server Debug' is up to date. Repository 'MySQL Connectors Community' is up to date. Repository 'MySQL Connectors Community Debug' is up to date. Repository 'MySQL Tools Community' is up to date. Repository 'MySQL Tools Community Debug' is up to date. Repository 'MySQL Tools Community preview' is up to date. Retrieving repository 'The Mono Project (openSUSE_Factory)' metadata ..............................................[done] Building repository 'The Mono Project (openSUSE_Factory)' cache ...................................................[done] Repository 'nVidia Graphics Drivers Tumbleweed' is up to date. Repository 'MariaDB 11.2 (sles 12)' is up to date. Repository 'MariaDB 11.2 (sles 15)' is up to date. Repository 'openSUSE-Leap-15.6-1' is up to date. Repository 'repo-non-oss (15.6)' is up to date. Repository 'repo-openh264 (15.6)' is up to date. Repository 'repo-oss (15.6)' is up to date. Repository 'update-backports (15.6)' is up to date. Repository 'update-backports-debug (15.6)' is up to date. Repository 'update-non-oss (15.6)' is up to date. Repository 'update-oss (15.6)' is up to date. Repository 'update-sle (15.6)' is up to date. Repository 'update-sle-debug (15.6)' is up to date. Repository 'packages-microsoft-com-prod' is up to date. Repository 'Update repository with updates for openSUSE Leap debuginfo packages from openSUSE Backports' is up to date. Repository 'Update repository of openSUSE Backports' is up to date. Repository 'Update repository with debuginfo for updates from SUSE Linux Enterprise 15' is up to date. Repository 'Update repository with updates from SUSE Linux Enterprise 15' is up to date. All repositories have been refreshed. Refreshing service 'openSUSE'. Loading repository data... Warning: Repository 'update-backports (15.6)' metadata expired since 2023-09-29 11:08:32 CEST. Warning: Repository 'update-backports-debug (15.6)' metadata expired since 2023-09-29 11:08:33 CEST. Warning: Repository 'update-non-oss (15.6)' metadata expired since 2023-09-21 14:47:58 CEST. Warning: Repository 'Update repository with updates for openSUSE Leap debuginfo packages from openSUSE Backports' metadata expired since 2023-09-29 11:08:33 CEST. Warning: Repository 'Update repository of openSUSE Backports' metadata expired since 2023-09-29 11:08:32 CEST. Warning:Repository metadata expired: Check if 'autorefresh' is turned on (zypper lr), otherwise manualy refresh the repository (zypper ref). If this does not solve the issue, it could be that you are using a broken mirror or the server has actually discontinued to support the repository. Reading installed packages... Warning: You are about to do a distribution upgrade with all enabled repositories. Make sure these repositories are compatible before you continue. See 'man zypper' for more information about this command. Computing distribution upgrade... Problem: problem with the installed epson-inkjet-printer-escpr-1.8.0-1.x86_64 Solution 1: install epson-inkjet-printer-escpr-1.7.22-bp156.2.2.x86_64 from vendor openSUSE replacing epson-inkjet-printer-escpr-1.8.0-1.x86_64 from vendor Seiko Epson Corporation Solution 2: keep obsolete epson-inkjet-printer-escpr-1.8.0-1.x86_64 Choose from above solutions by number or cancel [1/2/c/d/?] (c):

4 3

RE: why does zypper marks a package "obsolete" even with higher version number ...
by André Verwijs 03 Oct '23

03 Oct '23

oops..!! forgot to share system information: Operating System: openSUSE Leap 15.6 KDE Plasma Version: 5.27.4 KDE Frameworks Version: 5.103.0 Qt Version: 5.15.8 Kernel Version: 5.14.21-150500.55.19-default (64-bit) Graphics Platform: X11 Processors: 2 × Intel® Core™2 CPU 6700 @ 2.66GHz Memory: 5.7 GiB of RAM Graphics Processor: GeForce GT 610/PCIe/SSE2

1 0

Mesa 23.1.7 32-bit libraries missing in updates repo on Slowroll
by Kostadin Shishmanov 03 Oct '23

03 Oct '23

When I try to install steam on slowroll, for some reason Mesa-32bit-23.1.7 is missing from the "updates" repo and instead zypper asks me to downgrade Mesa to 23.1.5 in order to go through, which makes KDE use llvmpipe. Can someone figure out why the 32bit libraries of mesa 23.1.7 are missing from updates?

2 1

slowroll ignoring packages in updates repo
by Felix Miata 03 Oct '23

03 Oct '23

3 4

[opensuse-factory] Slowroll version bump 20231001
by Bernhard M. Wiedemann 03 Oct '23

03 Oct '23

Hi, the last (and first) Slowroll base snapshot from Tumbleweed was 20230822 The next one should be 20231001 if it passes openQA. Why? We need to catch up with major version bumps to not diverge too much from Tumbleweed. E.g. there are no kernel updates anymore in the 6.4.x series and we do not even have the latest 6.4.16 from upstream but .12 there. https://www.zq1.de/~bernhard/linux/opensuse/slowroll/slowroll-vs-tumbleweed… illustrates the concept of these bumps So far we have 1156 pkg updates not released 1423 pkg updates released So we did not stand still either and usually got the most important (security) fixes 1-2 days after Tumbleweed. I guess, with more elaborate event-based coding and smaller staging projects, we could get that down to a few hours. Ciao Bernhard M.

2 3

Overview of SUSE/OpenSUSE variants?
by Michael Hamilton 03 Oct '23

03 Oct '23

One for the suggestion box: The recent news around Slowroll and the future of Leap has resulted in some curiosity from myself and others concerning how all these OpenSUSE variants relate. The following forum posts include a few attempts to diagram the relationships, as well as a jump off to a phoronix discussion: https://forums.opensuse.org/t/relationships-between-suse-opensuse-distros/1… Would it be appropriate to place some kind of outline, either text or diagram, up front somewhere like the wiki? Michael

1 0

New Tumbleweed snapshot 20231001 released!
by Dominique Leuenberger 02 Oct '23

02 Oct '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ImageMagick (7.1.1.17 -> 7.1.1.18) apache2-mod_php8 (8.2.10 -> 8.2.11) emacs libnbd (1.14.1 -> 1.18.0) libnvme (1.4 -> 1.6) nbdkit (1.32.2 -> 1.36.0) nvme-cli (2.4 -> 2.6) pam-config (2.8 -> 2.9) php8 (8.2.10 -> 8.2.11) poppler poppler-qt5 rubygem-mini_portile2 (2.8.0 -> 2.8.4) suse-module-tools (16.0.35 -> 16.0.36) xdg-desktop-portal-kde xdg-utils (1.1.3+20230831 -> 1.2.0~beta1+20230929) === Details === ==== ImageMagick ==== Version update (7.1.1.17 -> 7.1.1.18) Subpackages: ImageMagick-config-7-SUSE ImageMagick-extra libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - version update to 7.1.1.18 * upstream changelog: https://github.com/ImageMagick/Website/blob/main/ChangeLog.md ==== apache2-mod_php8 ==== Version update (8.2.10 -> 8.2.11) - version update to 8.2.11 * This is a bug fix release. * https://www.php.net/ChangeLog-8.php#8.2.11 ==== emacs ==== Subpackages: emacs-el emacs-eln emacs-info emacs-nox emacs-x11 etags - For GNUS: Use message-user-fqdn instead of gnus-local-organization - Now with changed pdump.patch patch from bjorn.bidar(a)thaodan.de - Build also wayland gtk based binary - Support wayland binary by checking for XDG_SESSION_TYPE - Provide eln native shared binaries for all emacs program binaries - Pass libdir to configure so native Emacs lisp files are installed correctly on 64bit systems ==== libnbd ==== Version update (1.14.1 -> 1.18.0) - Update to version 1.18.0: * CVE-2023-5215 (bsc#1215799) * docs: Add link to nbd_get_size announcement in release notes * docs: Add URL to list post on nbd_get_size security * docs: Update release notes for nbd_get_size backport to 1.16.5 * docs: Finalize release notes for release tomorrow * dump: Add more examples of running subprocesses from nbddump * info: Tolerate missing size * block_status: Fix assertion on bad 64-bit block status reply * block_status: Fix assertion with large server size * api: Sanitize sizes larger than INT64_MAX ==== libnvme ==== Version update (1.4 -> 1.6) Subpackages: libnvme-mi1 libnvme1 - Update to version 1.6: * docs: Fix Read-the-Docs configuration (deprecated config param) * mi-mctp: Fix free() in error path of mi_open_mctp * types: Use NVME_SET for status type mask to get status value * types: Define FLBAS MASK and SHIFT to use NVME_GET * types: Support Phy Rx Eye Opening Measurement Log * log: Add nvme root global variable to set for default output * types: Add support for the OAQD ID controller field * test: use non deprecated API * test: add tests for Get/Set Features functions * ioctl: implement nvme_set_features_lba_range() * ioctl: pass NSID in Get/Set Features commands that use it * ioctl: fix swapped parameters in nvme_set_features_host_id() * ioctl: export nvme_{g,s}et_features_iocs_profile() * ioctl: pass ENDGID in nvme_get_features_endurance_event_cfg() * ioctl: don't set SAVE bit on unsaveable features * ioctl: avoid sending uninitialized timestamp * ioctl: pass data for Get/Set Features commands * ioctl: set correct bits in Set Features commands * ioctl: correct feature IDs in Get/Set Features commands * tree: Add 2 new public functions to lookup existing controllers * ioctl: Add debugging feature to show command outputs * Fix incorrect article 'an' as 'a' to use for a description * linux: Added functions to enable faster telemetry data retrieval. Moved telemetry data area support detection into separate function. Added possibility to modify data transfer chunk size. Enable telemetry extraction up to specified data area. Removed some printf() and perror(). * test: account for discovery log page entry stripping * fabrics: unconditionally strip discovery entry strings * fabrics: only look for spaces in strchomp() * tree: Use early return instead of else statements * test: fix lookup test case * test: make all function static * test: add tests for new tcp controller matching algorithm * tree: Improve TCP controller matching algorithm * util: Add functions to parse the system's interfaces * types: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP * mi: remove nsid from nvme_mi_admin_identify_secondary_ctrl_list() * test: add tests for nvme_ctrl_get_src_addr() * tree: Add nvme_ctrl_get_src_addr() to get the controller's src_addr * util: Split _nvme_ipaddrs_eq() from nvme_ipaddrs_eq() * test: add tests for Identify functions * ioctl: use available Identify helper functions * test: pass a large enough buffer to nvme_identify_ns_descs() * ioctl: remove nsid from nvme_identify_secondary_ctrl_list() * meson: Don't hard-code path to "internal/config.h" * fabrics: Do not pass disable_sqflow if not supported * fabrics: Read the supported options lazy * test: add discovery log page tests * test: add infra for mocking passthru ioctls * tree: fix segfault in nvme_scan_subsystem() * src/nvme/tree.c: make __nvme_scan_subsystem() returning bool * doc: fix minor mistake in README.md about dependencies * nvme-tree: avoid warning in 'list-subsys' * tree: Add getter for subsystem iopolicy * fabrics: Consider also all hosts settings for context match * tree: Scan all subsystems * doc: Fixing compile instruction in README * mi: allow non-4-byte-aligned responses * mi-mctp: use a linear response buffer * mi: implement length and offset alignment checks in admin_xfer() * tree: Don't open nvme devices until it's absolutely required * tree: missing closedir() causes fd leak for "/sys/bus/pci/slots" * mi: don't return from mi_mctp_submit with a tag held * util: Provide empty nvme_ipaddrs_eq for static builds * fabrics: Relax match on well known disc ctrl lookup * tree: Ignore NULL address pointer for phy slot lookup * fabrics: Filter discovery ctrls out during application context check * util: Add ignored error code * json: Use memory block allocated by realloc() instead printbuf * util: Use HAVE_NETDB instead of HAVE_LIBNSS * tree: Add PCI physical slot number for controller * tree: Use nvme_ipaddrs_eq() to compare IP addresses * fabrics: Add EADDRNOTAVAIL error mapping * fabrics: filter out subsystems with non-matching application string * libnvme: add 'application' setting to nvme_root * libnvme: add 'application' setting to the subsystem * test: Add more code coverage for nvme_ipaddrs_eq() * util: rename ipaddrs_eq() to nvme_ipaddrs_eq() and make public. * util: Add ipaddrs_eq() to check whether two IP addresses are equal * test: Add unit test for ctrl lookups * ioctl: fix RAE bit on last Get Log Page command * fabrics: check genctr after getting discovery entries * fabrics: handle /dev/nvme-fabrics read failure * fabrics: fix potential invalid memory access in __nvmf_supported_option() * Python: Fix crash during garbage collection * python/swig: Check swig version to determine whether -py3 is needed * python/swig: Wrap swig-sensitive struct inside #ifwdef SWIG * mi: Add nvme_mi_ctrl_id to retrieve controller ID * Python: Suppress swig warnings about unnamed struct * examples: fix incorrect controller status in MI info output * ioctl: Explicitly initialize all members of struct nvme_ns_mgmt_args * Python: make NBFT data more pythonic * ioctl: io management send, receive args fix * python: Update test data * NBFT: Remove documentation from nbft.c since it's also in nbft.h * Python: Add NBFT support * nbft: Doc typo - Use nvme_nbft_free() instead of nbft_free() * nbft: Parse the {HOSTID,HOSTNQN}_CONFIGURED flags * nbft: Fix nbft_ssns_flags endianness test * nbft: Add a simple unit test * doc: Update README ... changelog too long, skipping 12 lines ... * tree: Fix argument check in nvme_bytes_to_lba ==== nbdkit ==== Version update (1.32.2 -> 1.36.0) Subpackages: nbdkit-basic-filters nbdkit-basic-plugins nbdkit-curl-plugin nbdkit-nbd-plugin nbdkit-python-plugin nbdkit-server nbdkit-ssh-plugin nbdkit-vddk-plugin - Update to version 1.36.0: * Version 1.36.0. * evil: Fix typo in man page * tests: Rename test-curl-options.sh and add more tests * docs: Finalize release notes for release tomorrow * curl: Use new curl_multi_get_handles API to simplify code * curl: Store pointer from curl easy handle to our struct curl_handle * README: Recommend new syntax for ASAN_OPTIONS * fuzzing/README: Remove advice to set ASAN_OPTIONS * docs: Small tweaks to the release notes * docs: Add outline release notes for forthcoming nbdkit 1.36 * tests: Add some consistency checks of the tests themselves * tests/test-evil-cosmic.sh: Use requires_nbdcopy * tests/test-nozero.sh: Test uses nbdsh -u but does not declare requirement * tests: Fix a couple more tests that are missing requires_run * docs: Expand Network Block Device (for NBD) in title ==== nvme-cli ==== Version update (2.4 -> 2.6) Subpackages: nvme-cli-bash-completion - Update to version 2.6: * nvme: allocate payload buffer in create-ns command * nvme-print-stdout: Add CAP.CPS and CAP.NSSS human readable outputs * nvme: Add output-format default option instead of argconfig json option * nvme: fw-download offset only describes FW offset, not file offset * unit: add locale number test * util: handle utf-8 thousend separators correctly * nvme: Change to use NVME_ARGS verbose default option from OPT_ARGS * fabrics: Fix NVMF_ARGS macro to use parameter n correctly * nvme: Add verbose default option to show command debug output * util: Fix to set argconfig output format json option correctly * util: Split argconfig output format json function to set and get * nvme: Spport Phy Rx Eye Opening Measurement Log * nvme: Introduce nvme_realloc function * nvme: Fix for fdpa reserved field printing * completion: add 'version' and 'help' to list * udev-rule: apply round-robin iopolicy on i/o subsystems alone * nvme: Add support for the OAQD ID controller field * plugins/solidigm: use static log macro to calc bitmask * plugins/ocp: Rename FW activation history command * nvme: auto free nvme_dev resource * nvme: allocate aligned payloads for all nvme commands * nvme: introduce alloc helper with alignment support * util: add cleanup function for generic memory allocations * nvme: append huge to nvme_{alloc|free} function * nvme: fw_download use nvme_alloc only * fabrics: Removing duplicate code and moving to libnvme * nvme-print: omit size of protection information * tree: Modify label name close_fd to close_dev * fabrics: For TCP/RDMA, compare IP addresses with nvme_ipaddrs_eq() * fabrics: lookup_discovery_ctrl() must look under host and not root * nvme: Do not map status to errno codes * completions: Add bash completion for DSSD Power state feature(FID: C7h) * Documentation: Add document for DSSD Power state feature(FID: C7h) * plugins/ocp: Add DSSD Power state feature(FID: C7h) * avoid casting pointer arguments to argconfig functions * nvme-print: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP * nvme-print: Fix endurance_log whitespace changes * nvme: Fix retrieval of telemetry log up to specified data area. * nvme: Update list secondary command * wdc: Add support for SN861 drive * util: Set errno to 0 before strtol/stroul call * nvme: Revert passthru and submit_io to print status to stderr from stdout * plugins/zns: Fix offset in report zones * nvme-rpmb: Fix nvme_show_id_ctrl_rpmbs() definition error * fabrics: Use corresponding hostid when hostnqn is generated * json: fix seg. fault converting NULL to JSON string * nvme-cli: fix extended metadata size calculation * nvme-print: Show subsystem iopolicy * nvme-print-stdout: Do not show non reachable ns in namespace topology * nvme-print: Fix show-topolocy for ctrls * doc: Fix typo in documentation * nvme-print-stdout: fix storage tag size label * nvme-print-stdout: List only ctrls which are part of ns * nvme-print-stdout: Support subsys reachable from several hosts * ccan: Add htable, strset and dependencies * ccan: Remove unused documentation * nvme-print: Split max power flags * nvme-print: fix counter while looping through uuid_list * fabrics: only look for matching ctrl on same host * README: Correct hugetlbfs spelling error * util: Delete unused CFG_BOOL argconfig type as duplicated with CFG_FLAG * util: Set LC_ALL=C as default if -H option is not used * nvme: Add support for create-ns command endg-id option parameter * nvme-print: fix argument order for show functions * plugins/solidigm: Added Marketing Name Log support for Solidigm. * nvme-print: Remove left overs from refactoring * nvme-print: Move num argument parsing into callbacks * nvme-print: Fix typo in callback definition * scripts: Make release script project neutral * scripts: Update update-docs.sh scripts * scripts: Execute the scripts from toplevel directory * scripts: Move helper scripts to a central place * docs: Update file modes * doc: Add information on --context * nvmf-autoconnect: Annotate the context to autoconnect * fabrics: Add support for volatile configuration * plugins/solidigm: Formated log page directory table consistently with "nvme list" format. * plugins/solidigm: Added Identify controller VU extensions parsing. * nvme-print-json: Print PCI pysical slot number for controller * nvme-print-stdout: Print PCI physical slot number for controller * libnvme.wrap: Bump to 42ac453 * plugins/nbft: Use common code to parse print flags * fabrics: Do not print device on connect per default * fabrics: Revert 'fabrics: prevent 'nvme connect' to well-known discovery NQN' * nvme-print: fix wrong list-subsys output when ns are attached to different ctrls * plugins/micron: Correct NULL pointer checking error * plugins/innogrit: Add vendor command get-eventlog and get-cdump * nvme: Use correct data buffer size * nvme: Fix quoted string split across lines to use quoted newline * plugins/zns: Fix zns.c linux kernel check patch errors and warnings * plugins/ymtc: Fix ymtc-nvme.c linux kernel check patch warning * plugins/ymtc: Fix ymtc-nvme.c space indentation to tab indentation * plugins/virtium: Fix virtium-nvme.c linux kernel check patch errors and warnings * plugins/transcend: Fix transcend-nvme.c linux kernel check patch errors and warnings * plugins/solidigm: Fix linux kernel check patch errors and warnings * plugins/shannon: Fix shannon-nvme.c linux kernel check patch errors and warnings * plugins/seagate: Fix seagate-nvme.c linux kernel check patch warnings * plugins/scaleflux: Fix sfx-nvme.c linux kernel check patch errors and warnings ... changelog too long, skipping 111 lines ... - Fix install path for nvme-regress script ==== pam-config ==== Version update (2.8 -> 2.9) - Update to version 2.9 - Add support for kanidm ==== php8 ==== Version update (8.2.10 -> 8.2.11) Subpackages: php8-cli php8-ctype php8-dom php8-gd php8-gettext php8-iconv php8-mbstring php8-mysql php8-openssl php8-pdo php8-sqlite php8-tokenizer php8-xmlreader php8-xmlwriter - version update to 8.2.11 * This is a bug fix release. * https://www.php.net/ChangeLog-8.php#8.2.11 ==== poppler ==== Subpackages: libpoppler-cpp0 libpoppler-glib8 libpoppler131 poppler-tools - build with gpgmepp for signing documents (bsc#1215632) ==== poppler-qt5 ==== - build with gpgmepp for signing documents (bsc#1215632) ==== rubygem-mini_portile2 ==== Version update (2.8.0 -> 2.8.4) - updated to version 2.8.4 Various fixes to build system ==== suse-module-tools ==== Version update (16.0.35 -> 16.0.36) Subpackages: suse-module-tools-scriptlets - Update to version 16.0.36 * blacklist RNDIS modules (bsc#1205767, jsc#PED-5731) * modprobe.d: Blacklist cls_tcindex module (bsc#1210335, CVE-2023-1829) ==== xdg-desktop-portal-kde ==== Subpackages: xdg-desktop-portal-kde-lang - Add: 0001-kde_portals.patch (kde#474746) * Add a fallback to the GTK portal for settings. This makes sure that GTK apps always get valid fonts and related settings. ==== xdg-utils ==== Version update (1.1.3+20230831 -> 1.2.0~beta1+20230929) - Update to version 1.2.0-beta1+20230929: * Set Version to 1.2.0-beta1 * Update Changes and Release Notes * fix(xdg-open): handle spaces in .desktop file path * Quote Browser variable to avod unintentional code execution * Add missing result gathering * Enhance LXQt Desktop Enviromment support * xdg-terminal: don't run 'kreadconfig' if KDE_SESSION_VERSION is >= 5 - Drop the following fix, now actually included upstream * xdg-terminal-don-t-run-kreadconfig-if-KDE_SESSION_VE.patch - The following entries may have been missed in previous changelog versions * all: shellcheck fixes; make xdg-mime DASH-compatible * xdg-email: do not run BROWSER if xdg-open failed * Ensure POSIX-compliant shell scripting to support DASH * all: spelling fixes * Fix set_url_scheme_handler_gnome3 to not associate text/html handler * xdg-screensaver: fix the freedesktop screensaver * xdg-screensaver: implement support for "gnome3" DE * xdg-screensaver: better error detection for freedesktop 'status' command * xdg-desktop-menu: Drop obsolete GNOME support * xdg-open: support WSL (FDO#108975) * xdg-su: support deepin * xdg-mime: If mimeapps.list is a symlink, retain the symlink (#7) * xdg-open: fix search_desktop_file's logic * xdg-open: handle local hostname in `file:` URLs * xdg-desk-menu: Check if defaults file exists during installation * xdg-su: Remove quotes for lxqt-sudo cmd arg * xdg-open: handle opening files when DE=flatpak

1 0

Linphone is broken on TW
by Bernd Ritter 02 Oct '23

02 Oct '23

Hi everyone, I needed to install a soft phone today and I chose "Linphone" for that. Apparantly it seems to be broken on TW 20230929 (and the release before) due to some unresolved symbols: linphone: symbol lookup error: linphone: undefined symbol: _ZN8linphone7Account13isPhoneNumberERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE Isn't this something that should have been found by automated testing? All the best, Bernd

4 3

Slowroll: minimum Leap version required for upgrade?
by Luca Beltrame 02 Oct '23

02 Oct '23

Hello, I'm asking here since the wiki only mentions a generic "Leap". Given this is not (yet?) openQA tested, what is the minimum Leap version "supported" (quotes intended) to make the jump to Slowroll? I'm pondering whether to upgrade an older server running 15.3 or see if I should start fresh. Depending on the answers I'll update the wiki if need be. -- Luca Beltrame GPG key ID: A29D259B

2 1

Re: Login issues after recent Tumbleweed update
by Adrian Glaubitz 01 Oct '23

01 Oct '23

Hi! On Thu, 2023-09-28 at 22:17 -0400, xtexchooser(a)duck.com wrote: > I got the same problem. > I found that the stack canary protector (stack smashing detector) is aborting > udisksd from time to time. > And plasmashell could not start udisks2 because of this, so the desktop could > not start up. > > I ran `snapper undochange` to revert the last dist-update, then ran `zypper al > udisks2` to lock udisks2. > After another dist-update, I logged into plasma desktop successfully. > Now the version is `cpe:/o:opensuse:tumbleweed:20230926`. > > There are two issues may be useful: > - <https://github.com/storaged-project/udisks/issues/1152> > - <https://github.com/storaged-project/udisks/issues/1193> > It seems that libblockdev-3.0.3 will fix this problem? Downgrading udisks2 fixed the problem for me! Thanks for the pointer! Adrian

1 0

Slowroll kernel signing key changed to openSUSE:ALP?
by Andrei Borzenkov 01 Oct '23

01 Oct '23

warning: kernel-default-6.4.12-1.13.x86_64.rpm: Header V3 RSA/SHA256 Signature, key ID 1cbb508c: NOKEY /etc/uefi /etc/uefi/certs /etc/uefi/certs/FFF96EF6.crt bor@bor-Latitude-E5450:~/tmp$ rpm -qlp kernel-default-6.4.11-1.1.x86_64.rpm | grep /etc/ warning: kernel-default-6.4.11-1.1.x86_64.rpm: Header V3 RSA/SHA512 Signature, key ID 29b700a4: NOKEY /etc/uefi /etc/uefi/certs /etc/uefi/certs/1F673297.crt bor@bor-Latitude-E5450:~/tmp$ It is expected for the future? I tried to understand how packages actually get into slowroll, but failed. If someone could provide an overview how it works I would certainly appreciate it.

2 4

Puzzling rootless docker issue on TW
by Jim Henderson 01 Oct '23

01 Oct '23

I've been attempting to help a user in the forums[1] with an issue running Docker rootless - he's running into an issue with being able to pull images resulting in the following error: Error response from daemon: Get "https://registry-1.docker.io/v2/": dial tcp: lookup registry-1.docker.io on 10.0.2.3:53: read udp 10.0.2.100:48971->10.0.2.3:53: i/o timeout He also opened a discussion in the Docker forums (who referred him to our forums), and I've been chatting with the guy (Ákos) who was helping him over there in that thread[2]. The puzzling thing for me is that I can't duplicate the issue. I've tried on GNOME and KDE both, and I just cannot reproduce the problem. In troubleshooting the issue together with Ákos, we seem to have isolated the issue to something in the slirp4netns network that's used in that configuration - but nobody involved has customized that setup at all - yet it fails for both of them and doesn't fail for me. The issue *seems* to be that the DNS server set up in that network (10.0.2.3) is not responsive for either of them - but it is for me. Wondering if anyone here has any ideas about what else to look at beyond what we already have in these two threads. I'm completely out of ideas. Jim [1] https://forums.opensuse.org/t/rootless-docker-i-o-timeout-with-docker- pull/169468/12 [2] https://forums.docker.com/t/rootless-docker-i-o-timeout-with-docker- pull/137848 -- Jim Henderson Please keep on-topic replies on the list so everyone benefits

4 11

[opensuse-factory] reproducible builds status 2023-09
by Bernhard M. Wiedemann 01 Oct '23

01 Oct '23

Hi, This month we got many nice patches for Maven/Java-related packages from Fridrich Strba. The ghc-macros patch is still pending in the pipeline, but once that goes through, the number of packages with issues remaining could be as low as 150. Here is the full list: asymptote bash bibletime boost calibre clisp colord crash dbus-sharp2 deepin-desktop-schemas dmd dxvk eclipse efl emacs enlightenment-theme-dark enlightenment-theme-openSUSE enlightenment-theme-openSUSE-ice enlightenment-theme-openSUSE-neon enlightenment-theme-openSUSE-oliveleaf erlang erlang-retest fcitx5-zhuyin fcitx-libpinyin fdo-client gegl gfan gnome-keyring-sharp gnu-cobol go1.13 groovy18 grub2 gsequencer gstreamer-plugins-rs gtk-sharp2 guake gutenprint hevea hub ibus-libzhuyin icedtea-web installation-images java-11-openj9 java-1_8_0-openjdk kanku kdevelop5-plugin-php keepass kitty ksh kubernetes1.24 kubernetes1.25 kubernetes1.26 kubernetes1.27 ldc libcamera libkolabxml libpinyin librcc LiE lilypond lout mage maildir-utils mathgl mingw32-binutils mingw32-gcc mingw32-gmp mingw32-mpc mingw32-mpfr mingw32-pkgconf mingw32-winpthreads mingw32-zlib mingw64-binutils mingw64-gcc mingw64-gmp mingw64-mpc mingw64-mpfr mingw64-pkgconf mingw64-winpthreads mingw64-zlib mono-addins mono-core mozilla-nss nunit ocaml-camlp-streams ooRexx opae openblas ovmf pijul postfish pspp python310 python311 python38 python39 python-iminuit python-numpy python-rdflib python-scikit-image python-scikit-learn qt6-webengine qt-creator rabbitmq-server racket rage-encryption rakudo rash R-base release-notes-openSUSE Rivet rpm-config-SUSE sad sbcl scap-security-guide scheme48 sdcc selinux-policy siproxd smlnj spotifyd tigervnc tiny update-test-trivial wine wrk WSL-DistroLauncher xemacs xemacs-packages and a number of packages with build failures in 2039 or with -j1: gasket-driver gstreamer-plugins-rs icinga2 java-1_8_0-openj9 memcached python310 python311 python38 python39 python-bson python-compileall2 sonic-pi swipl tycho xindy Meanwhile, https://build.opensuse.org/projects/openSUSE:ALP:Experimental:Slowroll/prjc… has all the settings required for bit-reproducible verifiable builds, however there is still an issue with rpm = https://build.opensuse.org/request/show/1112212 that causes variations for many. mls promised a version update that should include that patch. Since my main test-build machine is on the move to Prague atm, I only ran builds over a limited set of packages with known problems. total-packages: 14858 build-tried: 678 build-failed: 25 build-n-a: 4 build-succeeded: 648 build-official-failed+na: 73 build-compare-failed: 130 build-compare-succeeded: 518 verify-failed: 1 verified-semi-reproducible: 1 verified-bit-identical: 0 bit-by-bit-identical: 248 not-bit-by-bit-identical: 401 not-bit-by-bit-identicalcheck: 400 > cat ./seamonkey/.rb.notes => SR 1114150 seamonkey date > cat ./grub2/.rb.notes ?date ; other order? --- old /usr/share/grub2/x86_64-xen/grub.xen (objdump) +++ new /usr/share/grub2/x86_64-xen/grub.xen (objdump) @@ -4896,7 +4896,7 @@ 01319f 00000000 30303030 36303000 30303031 ....0000600.0001 0131af 37353000 30303031 37353000 30303030 750.0001750.0000 0131bf 30303033 34353000 31343530 35353135 0003450.14505515 - 0131cf 34373600 30303135 30333120 30000000 476.0015031 0... + 0131cf 36323600 30303135 30323620 30000000 626.0015026 0... 0131df 00000000 00000000 00000000 00000000 ................ 0131ef 00000000 00000000 00000000 00000000 ................ recent SRs and patches: 1110543 linuxsampler benchmarking 1111485 antlr3 date 1112212 rpm embeds too many build details 1114150 seamonkey date #https://github.com/brndnmtthws/conky/pull/1619 date+order #https://pmbs.links2linux.de/request/show/5828 compat-libgcrypt date #https://pmbs.links2linux.de/request/show/5829 libdvd-audio parallelism #https://pmbs.links2linux.de/request/show/5834 gmerlin-avdecoder CPU #https://pmbs.links2linux.de/request/show/5835 gmerlin-effectv CPU #https://pmbs.links2linux.de/request/show/5836 gmerlin-encoders CPU #https://pmbs.links2linux.de/request/show/5832 ocp strcpy/CPU #https://github.com/lsp-plugins/lsp-plugins-shared/pull/5 date/copyright-year https://github.com/openSUSE/build-compare/issues/65 tycho, meta #https://code.opensuse.org/package/helix/blob/feee6e9d8f1ad5b2396a4bed7917eb6536ae4d57/f/0001-fix-ub-in-diff-gutter.patch ASLR-related non-determinism https://github.com/intel/intel-graphics-compiler/issues/302 ASLR

1 0

New Tumbleweed snapshot 20230929 released!
by Dominique Leuenberger 01 Oct '23

01 Oct '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MozillaFirefox (117.0.1 -> 118.0.1) argyllcms (2.3.1 -> 3.0.0) glibc gnome-music gstreamer (1.22.5 -> 1.22.6) gstreamer-plugins-bad (1.22.5 -> 1.22.6) gstreamer-plugins-base (1.22.5 -> 1.22.6) gstreamer-plugins-good (1.22.5 -> 1.22.6) gstreamer-plugins-libav (1.22.5 -> 1.22.6) gstreamer-plugins-rs (0.10.11 -> 1.22.6) gstreamer-plugins-ugly (1.22.5 -> 1.22.6) libqt5-qtbase libssh libvpx mpg123 (1.31.3 -> 1.32.2) open-vm-tools openssl-3 (3.1.2 -> 3.1.3) openssl (3.1.2 -> 3.1.3) perl-HTTP-Message (6.44 -> 6.450.0) perl-Net-DNS (1.39 -> 1.400.0) python-greenlet (2.0.2 -> 3.0.0~rc3) python-qt5-sip (12.12.1 -> 12.12.2) rubygem-agama (3.devel43 -> 4) sddm sdl12_compat (1.2.64 -> 1.2.68) smartmontools xf86-video-siliconmotion (1.7.9 -> 1.7.10) yast2-python-bindings (4.6.0 -> 5.0.1) === Details === ==== MozillaFirefox ==== Version update (117.0.1 -> 118.0.1) Subpackages: MozillaFirefox-translations-common - Mozilla Firefox 118.0.1 MFSA 2023-44 (bsc#1215814) * CVE-2023-5217 (bmo#1855550), Heap buffer overflow in libvpx - Mozilla Firefox 118.0 MFSA 2023-41 (bsc#1215575) * CVE-2023-5168 (bmo#1846683) Out-of-bounds write in FilterNodeD2D1 * CVE-2023-5169 (bmo#1846685) Out-of-bounds write in PathOps * CVE-2023-5170 (bmo#1846686) Memory leak from a privileged process * CVE-2023-5171 (bmo#1851599) Use-after-free in Ion Compiler * CVE-2023-5172 (bmo#1852218) Memory Corruption in Ion Hints * CVE-2023-5173 (bmo#1823172) Out-of-bounds write in HTTP Alternate Services * CVE-2023-5174 (bmo#1848454) Double-free in process spawning on Windows * CVE-2023-5175 (bmo#1849704) Use-after-free of ImageBitmap during process shutdown * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824, bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983, bmo#1851195) Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3 - requires NSS 3.93 - add mozilla-bmo1822730.patch - deactivated KDE integration temporarily (removed mozilla-kde.patch and firefox-kde.patch for now) ==== argyllcms ==== Version update (2.3.1 -> 3.0.0) - Update to 3.0.0: * Updated ccast/axTLS to get ChromCast working again with latest Google CC operating software. * Extensive re-write/re-factor of icclib to make it more future-proof. See https://www.argyllcms.com/doc/ChangesSummary.html for details. * Added ref/ColorCheckerPassport.ti2 and ref/ColorCheckerHalfPassport.ti2 to allow measuring ColorCheckerPassport with instrument. * Fixed bug in Munki spectro hi-res mode with some instruments. Luminance matching between normal and hi-res was sometimes quite poor. * Added ARGYLL_CREATE_DISPLAY_PROFILE_WITHOUT_CHAD environment variable. * Changed colprof -U flag to -u. Changed dispcal -J flag to -K to accommodate a potential new flag for colprof and dispcal. * Added workaround for bug in madHcNet64.dll32/64.dll which sometimes causes failure. * Added delay after USB set_config on OS X to help Spyder 3/4 on Ventura OS. * Added -Y parameter to dispwin to override automatic patch delay. * Changed i1d3 driver to cope with Rev. B "0x83" error robustly. This should fix any issues measuring low level Red only patch values on OLED displays, but with slower measurements when this occurs. * Added spotread -Y S option to save spectral sensitivity curves and added corresponding support in i1d3 driver. This allows for comparison of different instruments factory calibrations. * Added a -h scale parameter to dispread, to allow the automatic instrument calibration test patch values to be scaled down from their default 100% value. This is useful with HDR displays. * Added manifest to MSWindows executables to use UTF-8 code pages on Windows 1903 and later. This should improve non-ASCII filename and path handling. * Added a Violet colorant to the targen colorant list. * Fixed problem with OS X 64 bit backwards compatibility where it failed to locate serial instruments when the binaries are run on OS X V12 or latter machines. * Fixed bug in i1Pro3 driver where it was not returning the correct measurement conditions enum. * Fixed spotread so that ambient measure for monochrome sources doesn't error out due to bad CCT/VCT/VDT. Also change -T so that it suppresses CCT etc. if ambient mode is used. * Added hacky workaround to strange Mac M2/rosetta bug in del_i1proimp(). - Make the argyllcms-doc package noarch. ==== glibc ==== Subpackages: glibc-32bit glibc-devel glibc-extra glibc-lang glibc-locale glibc-locale-base nscd - fstat-implementation.patch: io: Do not implement fstat with fstatat - getaddrinfo-memory-leak.patch: Fix leak in getaddrinfo introduced by the fix for CVE-2023-4806 (CVE-2023-5156, bsc#1215714, BZ #30884) - getcanonname-use-after-free.patch: getaddrinfo: Fix use after free in getcanonname (CVE-2023-4806, bsc#1215281, BZ #30843) - Do not build any cross packages in SLES - no-aaaa-read-overflow.patch: Stack read overflow with large TCP responses in no-aaaa mode (CVE-2023-4527, bsc#1215280, BZ #30842) - Add systemd to passwd, group and shadow lookups (jsc#PED-5188) - ppc64-flock-fob64.patch: io: Fix record locking contants for powerpc64 with __USE_FILE_OFFSET64 (BZ #30804) - libio-io-vtables.patch: libio: Fix oversized __io_vtables - call-init-proxy-objects.patch: elf: Do not run constructors for proxy objects - dtors-reverse-ctor-order.patch: elf: Always call destructors in reverse constructor order (BZ #30785) - intl-c-utf-8-like-c-locale.patch: intl: Treat C.UTF-8 locale like C locale (BZ #16621) - glibc-disable-gettext-for-c-utf8.patch: Removed ==== gnome-music ==== Subpackages: gnome-music-lang - Explicitly create the pycache/.pyc files, not relying on the generation done by meson. Should make the package reproducible. ==== gstreamer ==== Version update (1.22.5 -> 1.22.6) Subpackages: gstreamer-lang gstreamer-utils libgstreamer-1_0-0 typelib-1_0-Gst-1_0 - Update to version 1.22.6: + Highlighted bugfixes: - Security fixes for the MXF demuxer and H.265 video parser - Fix latency regression in H.264 hardware decoder base class - androidmedia: fix HEVC codec profile registration and fix coded_data handling - decodebin3: fix switching from a raw stream to an encoded stream - gst-inspect: prettier and more correct signal and action signals printing - rtmp2: Allow NULL flash version, omitting the field, for better RTMP server compatibility - rtspsrc: better compatibility with buggy RTSP servers that don't set a clock-rate - rtpjitterbuffer: fix integer overflow that led to more packets being declared lost than have been lost - v4l2: fix video encoding regression on RPi and fix support for left and top padding - waylandsink: Crop surfaces to their display width height - cerbero: Recognise Manjaro; add Rust support for MSVC ARM64; cmake detection fixes - Various bug fixes, memory leak fixes, and other stability and reliability improvements + gstreamer: - gst-inspect: prettier and more correct signal printing, and print action signals in g_signal_emit_by_name() format - gst-launch: Disable fault signal handlers on macOS - Rebase reduce-required-meson.patch ==== gstreamer-plugins-bad ==== Version update (1.22.5 -> 1.22.6) Subpackages: gstreamer-plugins-bad-lang libgstadaptivedemux-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstcuda-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstphotography-1_0-0 libgstplay-1_0-0 libgstplayer-1_0-0 libgstsctp-1_0-0 libgsttranscoder-1_0-0 libgsturidownloader-1_0-0 libgstva-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 libgstwebrtcnice-1_0-0 - Update to version 1.22.6: + audiolatency: Forward latency query and event upstream + av1parser: Fix segmentation params update + codecparsers: Fix MPEG-1 aspect ratio table + d3d11convert: Passthrough allocation query on same caps + h264decoder: Update latency dynamically + h265parser: - Allow partially broken hvcC data - Fix possible overflow using max_sub_layers_minus1 + hlssink2: Always use forward slash separator + mdns: Fix a crash on context error + mxfdemux: Fix integer overflow causing out of bounds writes when handling invalid uncompressed video and check channels for AES3 + nvencoder: Fix negotiation error when interlace-mode is unspecified + rtmp2: Allow NULL flash version, omitting the field + rtmp2sink: fix crash if message conversion failed + transcodebin: Fixes for upstream selectable support + va: Fix in error logs functions mismatches + waylandsink: - Crop surfaces to their display width height - Fix cropping for video with non-square aspect ratio + webrtc: Fix docs for create-data-channel action signal - Rebase reduce-required-meson.patch ==== gstreamer-plugins-base ==== Version update (1.22.5 -> 1.22.6) Subpackages: gstreamer-plugins-base-lang libgstallocators-1_0-0 libgstapp-1_0-0 libgstaudio-1_0-0 libgstfft-1_0-0 libgstgl-1_0-0 libgstpbutils-1_0-0 libgstriff-1_0-0 libgstrtp-1_0-0 libgstrtsp-1_0-0 libgstsdp-1_0-0 libgsttag-1_0-0 libgstvideo-1_0-0 typelib-1_0-GstAudio-1_0 typelib-1_0-GstPbutils-1_0 typelib-1_0-GstTag-1_0 typelib-1_0-GstVideo-1_0 - Update to version 1.22.6: + audio: Make sure to stop ringbuffer on error + decodebin3: - Avoid identity, sinkpad, parsebin leakage when reset input - Ensure the slot is unlinked before linking to decoder + sdp: - Fix wrong debug log error message for missing clock-rate in caps - Parse zero clock-rate as default - Rebase reduce-required-meson.patch ==== gstreamer-plugins-good ==== Version update (1.22.5 -> 1.22.6) Subpackages: gstreamer-plugins-good-extra gstreamer-plugins-good-gtk gstreamer-plugins-good-jack gstreamer-plugins-good-lang gstreamer-plugins-good-qtqml - Update to version 1.22.6: + adaptivedemux2: fix memory leak + pulsedeviceprovider: fix incorrect usage of GST_ELEMENT_ERROR + qt: - Unbreak build with qt-egl enabled but viv_fb missing - Fix searching of qt5/qt6 tools with qmake in Meson + qtdemux: - Fix premature EOS when some files are played in push mode - Attach cbcs crypt info at the right moment + rtpjitterbuffer: Avoid integer overflow in max saveable packets calculation with negative offset + videoflip: fix concurrent access when modifying the tag list + v4l2: - allocator: Don't close foreign dmabuf - bufferpool: . Fix large encoded stream regression . Problems when checking for truncated buffer - Fix support for left and top padding + v4l2object: clear format lists if source change event is received - Rebase reduce-required-meson.patch - Add libqt5-linguist BuildRequires: New dependency. ==== gstreamer-plugins-libav ==== Version update (1.22.5 -> 1.22.6) - Update to version 1.22.6: + No changes, stable bump only. - Rebase reduce-required-meson.patch. ==== gstreamer-plugins-rs ==== Version update (0.10.11 -> 1.22.6) - Update to version 1.22.6: + fallbackswitch: locking/deadlock fixes + onvifmetadataparse: Skip metadata frames with unrepresentable UTC time + transcriberbin: Configure audioresample in front of transcriber + webrtcsink: - Propagate GstContext messages - Add support for d3d11 memory and qsvh264enc - Fix TWCC extension adding - Don't forget to setup encoders for discoveries - NVIDIA V4L2 encoders always require NVMM memory + meson: Fix handling of optional deps, and don't require Python-3.8 - Switch service to do the tag released with the other gstreamer packages. Gstreamer-plugins-rs are now released at the same time as the gstreamer main packages. - Switch compression to zst both in service and tarball produced. ==== gstreamer-plugins-ugly ==== Version update (1.22.5 -> 1.22.6) Subpackages: gstreamer-plugins-ugly-lang - Update to version 1.22.6: + No changes, stable bump only. - Rebase reduce-required-meson.patch. ==== libqt5-qtbase ==== Subpackages: libQt5Concurrent5 libQt5Core5 libQt5DBus5 libQt5Gui5 libQt5Network5 libQt5OpenGL5 libQt5PrintSupport5 libQt5Sql5 libQt5Sql5-mysql libQt5Sql5-sqlite libQt5Test5 libQt5Widgets5 libQt5Xml5 libqt5-qtbase-platformtheme-gtk3 - switch icu-devel requires to pkgconfig to allow switching libicu versions ==== libssh ==== Subpackages: libssh-config libssh4 - Enable crypto-policies support: [bsc#1211301] * Rebase libssh_client.config libssh_server.config ==== libvpx ==== - Fixing CVE-2023-5217 heap buffer overflow (boo#1215778) added CVE-2023-5217.patch ==== mpg123 ==== Version update (1.31.3 -> 1.32.2) Subpackages: libmpg123-0 mpg123-openal - Update to version 1.32.2 * libmpg123: Re-introduce _64 symbols on native 64 bit offset platforms. This was a regression since 1.31 series. Sorry, too much cleanup, not enough testing. * build: + Better O_LARGEFILE logic, avoiding redefintion. * ports/cmake: + Require C99 (bug 360, among other points, thanks to Ozkan Sezer). + Fix broken O_LARGEFILE logic (bug 360). + Typo fix and cleanup, also manual SSE switch for Android on old x86 (bug 359). - Update to version 1.32.1 * Include man pages again in tarball and install. We cannot avoid the empty man directory when disabling programs with autoconf. * Fix signal handler prototype, avoiding some justified warnings. * ports/cmake: + Include CheckTypeSize, which seems to be needed sometimes + Avoid O_LARGEFILE redefinition, logic closer to autoconf. - Update to version 1.32.0 * build + Move version handling out of configure.ac to ease other build systems. + Include "fmt123.h" instead of <fmt123.h> in main API headers to make it more likely the correct one is included (at least gcc picks the one in the same directory as the including header first). + All headers are build-independent now. + Fix build for picky linkers by avoiding definition of wrap_getcpuflags() where it is not used (spurious linker error to non-exitent getcpuflags(), bug 353). + Handle deprecation of C99 detection macro in autoconf 2.70. + No use of AC_SYS_LARGEFILE anymore for explicit handling and differing choice for the libraries and frontend programs. + Added --enable-portable and --disable-largefile to configure, removing the other largefile-related options. + Added --disable-components --enable-libmpg123 to only build libmpg123 (and likewise --enable-libout123, - -enable-libout123-modules, --enable-libsyn123) to autoconf build. CMake build has something similar with BUILD_PROGRAMS and BUILD_LIBOUT123, which leave only libmpg123 and libsyn123 if disabled). + Consistent formatting of ./configure --help with AS_HELP_STRING(). * mpg123 + Added --libversion. + Added proper A-B looping with terminal control key 'o', renamed --pauseloop to --presetloop. + Really get rid of mpg123_position() usage. (It was all lies before!) + Fix terminal progress info when seeking in stopped mode (1.31 regression). + Patch up interaction of output buffer with generic remote control, adding non-interruptible drain after P 3, and dropping buffer on QUIT. + Uppercase some generic control replies for consinstency: SILENCE, PROGRESS, MUTE, UNMUTE * libmpg123, libout123, libsyn123 + Bumped API version for version query functions. + Replaced nearly all symbol renames with explicit INT123_ prefix declarations (intsym.h close to empty now). * libout123 + Add sleep builtin output module (silent, but proper timing). * libsyn123 + Introduced SYN123_PORTABLE_API for an API without off_t and ssize_t (see NEWS.libsyn123). * libmpg123 + Internal I/O using explicit largefile support via off64_t, lseek64, fallback to plain 32 bit off_t. + Added explicit 64 bit API with 64 suffix (mpg123_tell64(), not mpg123_tell_64()). This allows full avoidance of ambiguus off_t. The API is always using 64 bit integers, regardless of internal implementation. + Introduced MPG123_PORTABLE_API for an API subset without off_t and ssize_t. + Made mpg123_seek() and friends ignore offset sign for SEEK_END (always seeking towards beginning, assuming negative offset) to make lseek()-conforming usage possible. Seeking beyond the end never made sense, so no loss of valid functionality. * Overall use of INT123_strerror(), trying to use thread-safe strerror_l() if possible. ==== open-vm-tools ==== Subpackages: libvmtools0 open-vm-tools-desktop - 15 sp4 currently uses open-vm-tools rpms from 15 sp3. As such, enable the spec file fix for bug (bsc#1205927) for 15 sp3 onwards. ==== openssl-3 ==== Version update (3.1.2 -> 3.1.3) Subpackages: libopenssl3 libopenssl3-32bit - Update to 3.1.3: * Fix POLY1305 MAC implementation corrupting XMM registers on Windows (CVE-2023-4807) ==== openssl ==== Version update (3.1.2 -> 3.1.3) - Update to 3.1.3 ==== perl-HTTP-Message ==== Version update (6.44 -> 6.450.0) - updated to 6.45 see /usr/share/doc/packages/perl-HTTP-Message/Changes 6.45 2023-09-27 14:27:31Z - Allow for file ownership conflicts with Docker and GitHub Actions (GH#193) (Olaf Alders) - Add the 'status_code' function for getting all status codes as hash (GH#194) (Dai Okabayashi) ==== perl-Net-DNS ==== Version update (1.39 -> 1.400.0) - updated to 1.40 see /usr/share/doc/packages/perl-Net-DNS/Changes ==== python-greenlet ==== Version update (2.0.2 -> 3.0.0~rc3) - update to 3.0.0~rc3: * Fix an intermittent error during process termination on some platforms (GCC/Linux/libstdc++). * Fix some potential bugs (assertion failures and memory leaks) in previously-untested error handling code. In some cases, this means that the process will execute a controlled ``abort()`` after severe trouble when previously the process might have continued for some time with a corrupt state. It is unlikely those errors occurred in practice. * Fix some assertion errors and potential bugs with re-entrant switches. * Fix a potential crash when certain compilers compile greenlet with high levels of optimization. The symptom would be that switching to a greenlet for the first time immediately crashes. * Fix a potential crash when the callable object passed to the greenlet constructor (or set as the ``greenlet.run`` attribute) has a destructor attached to it that switches. Typically, triggering this issue would require an unlikely subclass of ``greenlet.greenlet``. * Python 3.11+: Fix rare switching errors that could occur when a garbage collection was triggered during the middle of a switch, and Python-level code in ``__del__`` or weakref callbacks switched to a different greenlet and ultimately switched back to the original greenlet. This often manifested as a ``SystemError``: "switch returned NULL without an exception set." * Python 3.12: Fix walking the frame stack of suspended greenlets. Previously accessing ``glet.gr_frame.f_back`` would crash due to `changes in CPython's undocumented internal frame handling * Make the platform-specific low-level C/assembly snippets stop using the ``register`` storage class. Newer versions of standards remove this storage class, and it has been generally ignored by many compilers for some time. See `PR 347 <https://github.com/python-greenlet/greenlet/pull/347>`_ from Khem Raj. * Add initial support for Python 3.12. See `issue <https://github.com/python-greenlet/greenlet/issues/323>`_ and `PR <https://github.com/python-greenlet/greenlet/pull/327>`_; thanks go to (at least) Michael Droettboom, Andreas Motl, Thomas A Caswell, raphaelauv, Hugo van Kemenade, Mark Shannon, and Petr Viktorin. * Remove support for end-of-life Python versions, including Python 2.7, Python 3.5 and Python 3.6. * Require a compiler that supports ``noinline`` directives. See `issue 271 <https://github.com/python-greenlet/greenlet/issues/266>`_. * Require a compiler that supports C++11. ==== python-qt5-sip ==== Version update (12.12.1 -> 12.12.2) - Update to ABI version 12.12.2 * Match python-sip6-devel 6.7.10+ ==== rubygem-agama ==== Version update (3.devel43 -> 4) - Version 4 - Do not automatically probe after selecting a new product (gh#openSUSE/agama#748). - Use a single D-Bus service to expose the manager and the users settings (gh#openSUSE/agama#753, follow-up of gh#openSUSE/agama#729). - Do not crash when it is not possible to handle a product change in the manager service (related to bsc#1215197). - When selecting the product, do not perform any change if the product is still the same. - The software and the storage services do not dispatch actions during progress reporting anymore (related to bsc#1215197). - New storage proposal settings (gh#openSUSE/agama#738). - Extend the Ruby-based services logs with information about each step (gh#openSUSE/agama#732). - Raise the D-Bus service start timeout for troubleshoting purposes (related to bsc#1214737). - Adapt the locale and questions clients to use the same D-Bus service (gh#openSUSE/agama#729). - Respect UI locale in dbus services (gh#openSUSE/agama#725) - Copy the proxy configuration to the target system when needed (bsc#1212677, gh#openSUSE/agama#711). - Install the ppc64-diag package when running on ppc64le (related to bsc#1206898). - Set the manager service as busy during the startup phase (bsc#1213194). - Add proxy setup support (bsc#1212677, gh#openSUSE/agama#696). ==== sddm ==== Subpackages: sddm-branding-openSUSE - Remove unnecessary Requires(post*) - Config file changes: * No longer own sddm.conf. The migration for this conflicts with the other migration code, so: * Drop code for migrating from Current=maui (Leap <= 42.2) and the monolithic /etc/sddm.conf (Leap <= 42.3) - Add patch and drop unnecessary BuildRequirements of extra-cmake-modules and kf5-filesystem: * 0001-Drop-unnecessary-ECM-dependency-and-dead-uninstall-t.patch - Split the greeter into a subpackage and use _multibuild to build both daemon and greeter for Qt 5 and Qt 6. Add patches to allow for greeter coinstallation: * 0002-Make-sddm-greeter-for-Qt-5-and-Qt-6-coinstallable.patch * 0003-Let-themes-specify-the-used-version-of-Qt.patch - Refresh 0001-Read-the-DISPLAYMANAGER_AUTOLOGIN-value-from-sysconf.patch - Don't set CMAKE_BUILD_TYPE=Release - Make branding packages noarch - Add %check ==== sdl12_compat ==== Version update (1.2.64 -> 1.2.68) - Update to release 1.2.68 * sync dr_mp3 with mainstream * Add null check to SDL_LoadWAV_RW to avoid crashes * Add quirk entry: deactivate GL scaling for Trine (2011 Humble Bundle version) and Mark of the Ninja (HB) * Add quirk entry: set Hyperspace Delivery Boy to run in 16bpp mode * Add quirk handling: add ability to force XInitThreads before main() * Allocate the video surface object statically as a global * Add a hint to clamp the reported screen bit depth ==== smartmontools ==== - Do not quit with an error when no drives to monitor are available (bsc#990406 bsc#1167051). - Add smartd_service_dont_quit.patch - Refresh harden_smartd.service.patch - Run through spec-cleaner, use autosetup ==== xf86-video-siliconmotion ==== Version update (1.7.9 -> 1.7.10) - Update to version 1.7.10 * Update README for gitlab migration * Update configure.ac bug URL for gitlab migration * Build xz tarballs instead of bzip2 * Fix spelling/wording issues * gitlab CI: add a basic build test * gitlab CI: stop requiring Signed-off-by in commits * constify some char * declarations * Quiet -Wempty-body warning * Replace malloc()+snprintf() with Xasprintf() * Replace malloc()+memset() with calloc() * Remove "All rights reserved" from Oracle copyright notices * gitlab CI: ensure libtool is installed in build container * autogen.sh: Implement GNOME Build API * autogen.sh: use quoted string variables * autogen: add default patch prefix * configure: Drop AM_MAINTAINER_MODE * autogen.sh: use exec instead of waiting for configure to finish ==== yast2-python-bindings ==== Version update (4.6.0 -> 5.0.1) - Fix inspect.getargspec() removed in python3.11; (bsc#1215226); - 5.0.1 - 5.0.0 (#bsc1185510)

1 0