October 2023 - openSUSE Factory - openSUSE Mailing Lists

Tumbleweed - Review of the weeks 2023/39 & 40
by Dominique Leuenberger 06 Oct '23

06 Oct '23

Dear Tumbleweed users and hackers, My punishment for taking Fridays off is having to write a weekly review that spans again over two weeks. I know, many of you rely on those reviews to know what is coming their way and doing this only bi-weekly is definitively now what I am striving for. After all, you deserve to be informed about the things happening in Tumbleweed. During the last two weeks, we have published 9 snapshots (0921, 0922, 0925, 0926, 0927, 0929, 1001, 1003, and 1005 – with the latest one being still being hot – and important in plus. The most relevant changes in these snapshots are: * Linux kernel 6.5.4 * Poppler 23.09.0 * dbus 1.14.10 * Node.JS 20.7.0 * XWayland 23.2.1 * UDisks 2.10.0 * LibreOffice 7.6.1.2 * Mesa 23.1.8, 23.2.0, and 23.2.1 * GPG 2.4.0 * Mozilla Firefox 118.0.1 * GStreamer 1.22.6 * openSSL 3.1.3 * systemd 254.5 * glibc CVE-2023-4911, aka Looney Tunables * Samba 4.19.0 The glibc fix is part of Snapshot 1005, but due to its importance and reach was already published in the Tumbleweed update channel yesterday evening. The staging projects are currently testing these changes: * binutils 2.41 * Linux kernel 6.5.6 * Shadow 4.14.1 * zypper 1.14.65 / libzypp 17.31.21: changes around transfiletrigger handlers; openQA seems not yet happy with the result * LibreOffice 7.6.2 Cheers, Dominique

1 0

New Tumbleweed snapshot 20231005 released!
by Dominique Leuenberger 06 Oct '23

06 Oct '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: AppStream Mesa (23.2.0 -> 23.2.1) Mesa-drivers (23.2.0 -> 23.2.1) chrony e2fsprogs fde-tools fprintd gdm geoclue2 (2.7.0 -> 2.7.1) gigolo (0.5.2 -> 0.5.3) glibc icewm (3.4.0 -> 3.4.3) javapackages-tools ldb (2.7.2 -> 2.8.0) libX11 (1.8.6 -> 1.8.7) libXpm (3.5.16 -> 3.5.17) libev libnvme libselinux libsemanage libvirt (9.7.0 -> 9.8.0) mpg123 (1.32.2 -> 1.32.3) netcfg nvme-cli python-SQLAlchemy (2.0.19 -> 2.0.21) python-greenlet (3.0.0~rc3 -> 3.0.0) python-libvirt-python (9.7.0 -> 9.8.0) python-psutil python-reportlab (3.6.13 -> 4.0.5) rubygem-nokogiri rubygem-ruby-dbus (0.23.0.beta2 -> 0.23.1) samba (4.18.6+git.320.cfda27bacb -> 4.19.0+git.306.19d2e214c58) selinux-policy srt (1.5.2 -> 1.5.3) talloc (2.4.0 -> 2.4.1) tdb (1.4.8 -> 1.4.9) tevent (0.14.1 -> 0.15.0) vsftpd xdg-desktop-portal xfce4-notifyd (0.8.2 -> 0.9.2) xfce4-panel (4.18.4 -> 4.18.5) xfce4-pulseaudio-plugin (0.4.7 -> 0.4.8) xfce4-taskmanager (1.5.5 -> 1.5.6) xscreensaver (6.06 -> 6.07) xterm (384 -> 385) === Details === ==== AppStream ==== Subpackages: AppStream-lang libAppStreamQt2 libappstream4 - Enable vala support when building in SLE-15 SP6 - Fix condition in files section for the case where vala support is disabled, where some files are being generated but were not included ==== Mesa ==== Version update (23.2.0 -> 23.2.1) Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libOSMesa8 libgbm1 - Update to Mesa 23.2.1 * Mesa 23.2.1 is a new development release. People who are concerned with stability and reliability should stick with a previous release or wait for Mesa 23.2.2. * Mesa 23.2.1 is an unusual first stable release due to the accidentl tagging of 23.2.0 durring the rc cycle. * Mesa 23.2.1 implements the OpenGL 4.6 API, but the version reported by glGetString(GL_VERSION) or glGetIntegerv(GL_MAJOR_VERSION) / glGetIntegerv(GL_MINOR_VERSION) depends on the particular driver being used. Some drivers don't support all the features required in OpenGL 4.6. OpenGL 4.6 is **only** available if requested at context creation. Compatibility contexts may report a lower version depending on each driver. * Mesa 23.2.1 implements the Vulkan 1.3 API, but the version reported by the apiVersion property of the VkPhysicalDeviceProperties struct depends on the particular driver being used. * More details in: - -> https://gitlab.freedesktop.org/mesa/mesa/-/blob/23.2/docs/relnotes/23.2.1.r… ==== Mesa-drivers ==== Version update (23.2.0 -> 23.2.1) Subpackages: Mesa-dri Mesa-gallium Mesa-libva libxatracker2 - Update to Mesa 23.2.1 * Mesa 23.2.1 is a new development release. People who are concerned with stability and reliability should stick with a previous release or wait for Mesa 23.2.2. * Mesa 23.2.1 is an unusual first stable release due to the accidentl tagging of 23.2.0 durring the rc cycle. * Mesa 23.2.1 implements the OpenGL 4.6 API, but the version reported by glGetString(GL_VERSION) or glGetIntegerv(GL_MAJOR_VERSION) / glGetIntegerv(GL_MINOR_VERSION) depends on the particular driver being used. Some drivers don't support all the features required in OpenGL 4.6. OpenGL 4.6 is **only** available if requested at context creation. Compatibility contexts may report a lower version depending on each driver. * Mesa 23.2.1 implements the Vulkan 1.3 API, but the version reported by the apiVersion property of the VkPhysicalDeviceProperties struct depends on the particular driver being used. * More details in: - -> https://gitlab.freedesktop.org/mesa/mesa/-/blob/23.2/docs/relnotes/23.2.1.r… ==== chrony ==== Subpackages: chrony-pool-openSUSE - Use make quickcheck instead of make check to avoid >1h build times and failures due to timeouts. This was the default before 3.2 but it changed to make tests more reliable. Here a seed is already set to get deterministic execution. ==== e2fsprogs ==== Subpackages: e2fsprogs-scrub libcom_err2 libcom_err2-32bit libext2fs2 - Update specfile to make sure regenerate_initrd_post macro is defined ==== fde-tools ==== - Add fde-tools-remove-redundant-2nd-pw-creation.patch to remove the creation of the secondary password in 'add-secondary-key' ==== fprintd ==== Subpackages: fprintd-lang fprintd-pam - add all supported USB devices as Supplements ==== gdm ==== Subpackages: gdm-lang gdm-schema gdmflexiserver libgdm1 typelib-1_0-Gdm-1_0 - Explicitly buildrequire /usr/bin/dbus-run-session: the dbus package is being restructured to be usable with dbus-broker and so far we just relied on implicit dependencies bringing this in. Meson checks for it, so it is correct to BR it though. ==== geoclue2 ==== Version update (2.7.0 -> 2.7.1) Subpackages: system-user-srvGeoClue typelib-1_0-Geoclue-2_0 - Update to version 2.7.1: + Add 'age' field to MLS locate queries + Location updates now always have an accuracy value + Improvements to NMEA parsing: - Parse NMEA timestamps with sub-second accuracy - Add default accuracy to NMEA RMC locations - Ignore locations from GGA and RMC sentences if the GNSS fix is not valid + Prioritize GNSS sources with a recent fix over other sources, preventing location jumps + Install D-Bus policy in /usr/share, not /etc + Upgrade GLib / Gio dependency to version 2.68.0 + Correct gi annotations in GClueSimple + Various small fixes - Use ldconfig_scriptlets macro for post(un) handling. ==== gigolo ==== Version update (0.5.2 -> 0.5.3) Subpackages: gigolo-lang - Update to version 0.5.3 * Update copyright year and urls * Replace remaining stock icons * Replace (some) deprecated stock icons * Fix double free * Fix compiler warning -Wmaybe-uninitialized * Disable systray icon outside X11 * Detect DE using XDG_CURRENT_DESKTOP (Fixes #19) * Add icons at missing sizes, clean up SVG metadata * build: Use XDT_CHECK_PACKAGE * build: Fix autotools warnings * Update `.gitignore` * Rename "SSH" to "SSH / SFTP" * Fix intltool lock file issue during make distcheck * Update TODO * Refresh Glade file, drop unused tab labels (fixes #13) * move the logic setting GtkSpin port value to setup_for_type() * Use new icon in window titlebar * Fix compilation warnings * autoconf: Some updates * Only show an error dialog if the host field is visible/required * Remove capitalization from icon name * Update GenericName (#2) * Fix comment style. * Remove GSourceFunc casts * Update Makefile.am * Add gigolo.ui to POTFILES.in (Issue #6) * Added new icons following new style and reverse DNS format. * Add new README.md and update AM_INIT_AUTOMAKE * Add basic GitLab pipeline * Bug #16717: Move from exo-csource to xdt-csource * Translation Updates ==== glibc ==== Subpackages: glibc-32bit glibc-devel glibc-extra glibc-lang glibc-locale glibc-locale-base nscd - setxid-propagate-glibc-tunables.patch: Propagate GLIBC_TUNABLES in setxid binaries - tunables-string-parsing.patch: tunables: Terminate if end of input is reached (CVE-2023-4911, bsc#1215501) ==== icewm ==== Version update (3.4.0 -> 3.4.3) Subpackages: icewm-config-upstream icewm-default icewm-lang icewm-lite - Update to version 3.4.3: * New preference "TaskBarShowWindowTitles" for icon-only task buttons. * New winoption "doNotManage" to workaround bugs in picom for plank. * When a battery has no data about full charge, use the capacity. * When cascading windows, include the border size in the displacement. * Let icewmbg interpret command-line file arguments relative to $PWD. * Add a -f,--fork option to icewmbg to detach it from the terminal. * Fix the Window List Menu for #144. * Fix restoring from fullscreen with F11 in chromium for #141. * Support tabs in the Window List Menu. * Control the terminal in icewm-menu-fdo by option or environment. * Let icewm-menu-fdo use a list of default terminals to choose from. - Drop unknown config options: * --enable-guievents * --enable-antialiasing * --enable-gradients * --enable-shaped-decorations ==== javapackages-tools ==== Subpackages: javapackages-filesystem - Added patches: * 0005-Interpolate-properties-also-in-the-current-artifact.patch + interpolate variables also in current artifactId, groupId and version * 0006-Test-variable-expansion-in-artifactId.patch + test previous changes * 0007-Test-that-we-don-t-bomb-on-relativePath.patch + test gracious handling of empty <relativePath/> in parent reference of a pom file ==== ldb ==== Version update (2.7.2 -> 2.8.0) Subpackages: libldb2 libldb2-32bit python3-ldb - Update to 2.8.0 * CVE-2023-0614 Not-secret but access controlled LDAP attributes can be discovered (bug 15270) * pyldb: Raise an exception if ldb_dn_get_parent() fails * Implement ldap_whoami in pyldb and add the RFC4532 LDB_EXTENDED_WHOAMI_OID definition * Documentation and spelling fixes * Add ldb_val -> bool,uint64,int64 parsing functions * Split out ldb_val_as_dn() helper function * add LDB_CHANGETYPE_MODRDN support to ldb_ldif_to_pyobject() * add LDB_CHANGETYPE_DELETE support to ldb_ldif_to_pyobject() * let ldb_ldif_parse_modrdn() handle names without 'rdn_name=' prefix * Don't create error string if there is no error * Avoid allocation and memcpy() for every wildcard match candidate * Make ldb_msg_remove_attr O(n) * pyldb: Throw error on invalid controls * pyldb: remove py2 ifdefs * Call tevent_set_max_debug_level(TEVENT_DEBUG_TRACE) ==== libX11 ==== Version update (1.8.6 -> 1.8.7) Subpackages: libX11-6 libX11-data libX11-xcb1 - update to 1.8.7 This release contains fixes for the issues reported in security advisory here: https://lists.x.org/archives/xorg-announce/2023-October/003424.html * fixes CVE-2023-43785 libX11: out-of-bounds memory access in _XkbReadKeySyms() (boo#1215683) * fixes CVE-2023-43786 libX11: stack exhaustion from infinite recursion in PutSubImage() (boo#1215684) * fixes CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to a heap overflow (boo#1215685) along with: * Fail XOpenDisplay() if server-provided default visual is invalid (!233) * Bring XKB docs in line with actual implementation (!231, !228) * Xutil.h: declare XEmptyRegion() and XEqualRegion() as Bool (!225) * Assorted updates to en_US.UTF-8 compose keys (!213, !214, !215, !216, !217, !219, !220, !222, !223, !226, !227, !229) ==== libXpm ==== Version update (3.5.16 -> 3.5.17) - Update to 3.5.17 * This release contains fixes for the libXpm issues reported in security advisory here: https://lists.x.org/archives/xorg-announce/2023-October/003424.html * fixes CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer() (boo#1215686) * fixes CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap (boo#1215687) ==== libev ==== - run signify only on Factory ==== libnvme ==== Subpackages: libnvme-mi1 libnvme1 - Enable tests during build - Set git version tag - Drop unused make dependency - Drop unencessary minimum version depedency on meson. - Re-enable libdbus feature. Upstream defaults changed. ==== libselinux ==== Subpackages: libselinux1 libselinux1-32bit selinux-tools - Repair initrd libselinux check in selinux-ready ==== libsemanage ==== Subpackages: libsemanage-conf libsemanage-migrate-store libsemanage2 - Remove build counter syncing for real ==== libvirt ==== Version update (9.7.0 -> 9.8.0) Subpackages: libvirt-client libvirt-daemon-common libvirt-daemon-config-network libvirt-daemon-driver-interface libvirt-daemon-driver-libxl libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-lock libvirt-daemon-log libvirt-daemon-plugin-lockd libvirt-daemon-proxy libvirt-daemon-qemu libvirt-daemon-xen libvirt-libs - Update to libvirt 9.8.0 (jsc#PED-3279) - bsc#1215708 - Many incremental improvements and bug fixes, see https://libvirt.org/news.html#v9-8-0-2023-10-02 ==== mpg123 ==== Version update (1.32.2 -> 1.32.3) Subpackages: libmpg123-0 mpg123-openal - Update to version 1.32.3 * libmpg123, libsyn123: always ifdef LFS_LARGEFILE_64 (not just if) * libsyn123: re-introduce _32 wrappers in addition to suffix-less ones (regression from 1.31, bug 363) ==== netcfg ==== - Remove ftpusers, none of our ftp servers uses that anymore - Remove defaultdomain, NIS got dropped - Remove hosts.equiv and hosts.lpd, the tools using them got dropped long ago. ==== nvme-cli ==== Subpackages: nvme-cli-bash-completion - Enable test during build - Drop minimum version meson dependency - Add asciidoc dependency - Build documentation when requested ==== python-SQLAlchemy ==== Version update (2.0.19 -> 2.0.21) - Update to 2.0.21: * Changes from 2.0.21: https://docs.sqlalchemy.org/en/20/changelog/changelog_20.html#change-2.0.21 * Changes from 2.0.20: https://docs.sqlalchemy.org/en/20/changelog/changelog_20.html#change-2.0.20 - Remove .gitignore files from source tree, removes all rpmlint warnings. ==== python-greenlet ==== Version update (3.0.0~rc3 -> 3.0.0) - Update to 3.0.0: * No changes from 3.0rc3 aside from the version number. - Ignore some slow and flaky tests ==== python-libvirt-python ==== Version update (9.7.0 -> 9.8.0) - Update to 9.8.0 - Add all new APIs and constants in libvirt 9.8.0 - jsc#PED-3279 ==== python-psutil ==== - Require /usr/bin/who only for suse_version > 1500: 15.X does not provide it, but has it in coreutils. - PEP517 - Clean up specfile from obsolete python2 stuff ==== python-reportlab ==== Version update (3.6.13 -> 4.0.5) - drop reportlab-missing-includes.patch - add importlib.patch to fix support for python3.12 - update to 4.0.5: * add in test for alpha composite colour * Added an SvgPath class; as used in github.com/deeplook/svglib * Added a simple log axis ticklabeller class * Allow for strokeWidth in LineSwatch * update extension alias' * allow BalancedColumns to work in a container flowable (ie with no frame) * allow custom styles for inrowsplitStaart & inrowsplitend * setup.py test --failfast works * allow running all tests without renderPM support * AR made some changes to allow running without renderPM support * AR merged accessibility branch and released 4.0.0 * initial support for rml ul ol dl tagging * added support for an ol/ul/dl caption paragraph * implement a safer toColor with rl_config.toColorCanUse option and rl_extended_literal_eval * added _ExpandedCellTupleEx for more tagging support ==== rubygem-nokogiri ==== - Buildrequire openssl gem to fix building with Ruby 3.0 ==== rubygem-ruby-dbus ==== Version update (0.23.0.beta2 -> 0.23.1) - 0.23.1 API: * Add DBus::Object.dbus_reader_attr_accessor to declare a common use case with a single call (gh#mvidner/ruby-dbus#140). * BusConnection#request_name defaults to the simple use case: single owner without queuing, failing fast; documented the complex use cases. ==== samba ==== Version update (4.18.6+git.320.cfda27bacb -> 4.19.0+git.306.19d2e214c58) Subpackages: libsamba-policy0-python3 samba-ad-dc-libs samba-client samba-client-32bit samba-client-libs samba-client-libs-32bit samba-gpupdate samba-ldb-ldap samba-libs samba-libs-python3 samba-python3 samba-winbind samba-winbind-libs samba-winbind-libs-32bit - Update to 4.19.0 * File doesn't show when user doesn't have permission if aio_pthread is loaded; (bso#15453). * ctdb_killtcp fails to work with --enable-pcap and libpcap â¥ 1.9.1; (bso#15451). * Logging to stdout/stderr with DEBUG_SYSLOG_FORMAT_ALWAYS can log to syslog; (bso#15460). * âsamba-tool domain level raiseâ fails unless given a URL; (bso#15458). * reply_sesssetup_and_X() can dereference uninitialized tmp pointer; (bso#15420). * missing return in reply_exit_done(); (bso#15430). * TREE_CONNECT without SETUP causes smbd to use uninitialized pointer; (bso#15432). * Avoid infinite loop in initial user sync with Azure AD Connect when synchronising a large Samba AD domain; (bso#15401). * Samba replication logs show (null) DN; (bso#15407). * 2-3min delays at reconnect with smb2_validate_sequence_number: bad message_id 2; (bso#15346). * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed; (bso#15446). * CID 1539212 causes real issue when output contains only newlines; (bso#15438). * KDC encodes INT64 claims incorrectly; (bso#15452). * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449). * Windows client join fails if a second container CN=System exists somewhere; (bso#9959). * regression DFS not working with widelinks = true; (bso#15435). * Heimdal fails to build on 32-bit FreeBSD; (bso#15443). * samba-tool ntacl get segfault if aio_pthread appended; (bso#15441). ==== selinux-policy ==== Subpackages: selinux-policy-targeted - Use /var/adm/update-scripts in macros.selinux-policy. The rpm state directory doesn't exist on SUSE systems (bsc#1213593) - Modified update.sh to require first parameter "full" to also update container-selinux. For maintenance updates you usually don't want it to be updated ==== srt ==== Version update (1.5.2 -> 1.5.3) - version update to 1.5.3 * New Features - PR #2714: Added maximum BW limit for retransmissions. See SRTO_MAXREXMITBW. * Important Bug Fixes - PR #2632: Use overlapped WSASendTo to avoid UDP sending losses. - PR #2766: Fixed spurious group read-ready epoll events. - PR #2772: Fixed RCV buffer initialization in Rendezvous. â ï¸ - PR #2757: Fix memory leak on queuing connection initialization packets. - PR #2745: Fix hang up on not enough space in the RCV buffer. - PR #2740: Fix possible tsbpd() deadlock with processCtrlShutdown(). - PR #2692: Rejection not undertaken in rendezvous after KMX failure. - PR #2774: Fix rendezvous connection mode when processing resulted in ACCEPT it was still sending rejection. - PR #2778: Drop unencrypted packets in AES-GCM mode. * Build - PR #2779, #2780: Fix the build for targets without IP_ADD_SOURCE_MEMBERSHIP. - PR #2784: Added missing public header files in Windows binary installer. * Unit Tests - PR #2681: Added custom main with transparent parameters. * Documentation - PR #2765: Updated the explicit information for binding to IPv6 wildcard. - PR #2785: Fixed API doc: SRT_INVALID_SOCK * https://github.com/Haivision/srt/releases/tag/v1.5.3 ==== talloc ==== Version update (2.4.0 -> 2.4.1) Subpackages: libtalloc2 libtalloc2-32bit python3-talloc - Update to 2.4.1 * Remove remaining, but broken python2 support * Spelling fixes * Remove unneeded va_copy() ==== tdb ==== Version update (1.4.8 -> 1.4.9) Subpackages: libtdb1 libtdb1-32bit python3-tdb - Update to 1.4.9 * Remove remaining, but broken python2 support * Spelling fixes * python: Safely clear structure members ==== tevent ==== Version update (0.14.1 -> 0.15.0) Subpackages: libtevent0 libtevent0-32bit python3-tevent - Update to version 0.15.0 * remove py2 ifdefs * python: Safely clear structure members * the tevent_thread_call_depth API is updated in order to allow better tracing. * add tevent_set_max_debug_level() only and don't pass TEVENT_DEBUG_TRACE to tevent_debug() callbacks by default. * Spelling fixes * Make use of epoll_create1() for epoll backend * Optimize overhead in the epoll backend ==== vsftpd ==== - Add vsftpd.ftpusers, the netcfg one is not maintained, outdated and will be removed. - vsftpd.pam: use own copy of ftpusers. ==== xdg-desktop-portal ==== Subpackages: xdg-desktop-portal-lang - Support building with meson 0.61.x used by SLE, where .pc files in dataonly packages are installed to %_libdir unlike in meson >= 0.62.0 where the default was changed to %_datadir. ==== xfce4-notifyd ==== Version update (0.8.2 -> 0.9.2) Subpackages: xfce4-notifyd-lang - Update to 0.9.2: * (Hopefully) actually fix settings migration code * (Hopefully) fix enum setting migration code - Add --enable-systemd when calling configure - Update to 0.9.1: * Make the XDG autostart file attempt a systemd start first * Only include the SystemdService= line if systemd support is enabled * Clean up some conditionals in configure.ac * Go back to installing the XDG autostart file by default * Allow installing systemd service file even if systemd is not installed - Update to 0.9.0: * Add missing sanity check * I18n: Update po/LINGUAS list * wayland: put windows on overlay layer, not top * Set window theme before placing window * Set initial window position before realizing windows * Avoid storing NULL app IDs in the app ID count hashtable * Simplify dbus/systemd service dir logic in configure.ac * Fix typos in README * Install D-Bus and systemd files under $prefix by default * Fix distcheck when run as non-root * Use pkg-config to find default systemd user unit directory * Change default systemd user path from /lib/... to /usr/lib/... * Change options for installing startup files * Add positioning options top-center and bottom-center * Simplify notification placement code * Stop using GtkCornerType; migrate setting to enum nick * Move log level settings from int to enum nick string * Move datetime format setting from int to enum nick string * Have a single entry point for setting migrations * Fix incorrect enum value for apps log level * Use registered enum types for config->enum mapping * Move enums to common, use glib-mkenums * Use new XDT feature macros * Don't log duplicate entries when updating an existing notification * Clean up logic in notify_notify() * Correctly update critical notifications while in DnD mode * Fix incorrect casts in GTree foreach functions * Remove expire/fade timeout source removal hacks * Missed a spot to reset fade/slide * Allow slideout when no fadeout * Only start fade timeout if no existing handle * Only start expiration timeout if no existing handle * Ensure timeout sources are removed in _window_dispose() * Move log dbus signal emissions to XfceNotifyDaemonLog * Remove expire and fade sources before emitting closed signal * Emit NotificationClosed when not showing notification * Consolidate the window movement code * Add option to show notifications on all monitors * Migrate the primary-monitor setting to a string-based enum * Translation Updates ==== xfce4-panel ==== Version update (4.18.4 -> 4.18.5) Subpackages: libxfce4panel-2_0-4 xfce4-panel-lang xfce4-panel-restore-defaults - Update to version 4.18.5 * pager: Do not adapt upper value of spin button in viewport mode * pager: Update workspace layout also on window manager change * pager: Fix aspect ratio for viewport (V2) * actions: Fix memory leak * pager: Delay GdkScreen signal handlers * panel: Do not scale background image when UI scale > 1 * popup-command: Do not block autohide when popped up at pointer * Fix memory leaks when using gtk_css_provider_new() * panel: Clear item list before repopulating item dialog * panel: Remove autosave timer for plugins * wrapper: Really ensure we don't call gtk_main_quit() twice * panel: Block autohide when the panel has input focus * clock: Fix sync timeout for seconds display * clock: Implement ConsoleKit sleep monitor * Add/Sharpen icons at 48-128px * Adjust 32px icon margins, new separator icon * Sharpen icons at 16px and 32px * Increase margins for 24px icons * Make 24px icons sharper * icons: Fix wrong exported sizes * Translation Updates ==== xfce4-pulseaudio-plugin ==== Version update (0.4.7 -> 0.4.8) Subpackages: xfce4-pulseaudio-plugin-lang - Update to version 0.4.8 * MPRIS: Use D-Bus name for identifying players * Fix possible context menu crash with MPRIS playlist * Add option to make mic icon persistent * Check for mic widget visibility * Preserve channel balance when changing sink/source volume * MPRIS: Add option to send multimedia keys to all players * MPRIS: Fix default controlled player by multimedia keys * Remove dead code * Translation Updates ==== xfce4-taskmanager ==== Version update (1.5.5 -> 1.5.6) Subpackages: xfce4-taskmanager-lang - Update to version 1.5.6 * Update copyright year * Rounded legend icons * Reopen process window maximized when closed maximized * Properly finalize global objects in main * Add missing include * Fix more memory leaks * Fix memory leak * Fix CSS related deprecation warnings * Ignore GtkStatusIcon related deprecations * Make libx11 optional, guard x11 code paths * Change type so that memory values are correct (Fixes #65) * settings-dialog: Fix untranslated label * Add icons at missing sizes, clean up SVG metadata * Add minimal support for Wayland * Fix graph drop off on the right side * Change graph peak variable to double * Remove timeout before exiting main loop * build: Add GLib requirement * Do not treat missing swap as error on OpenBSD and NetBSD * Fix process filter crash caused by the use of an uninitialized variable * Translation Updates ==== xscreensaver ==== Version update (6.06 -> 6.07) Subpackages: xscreensaver-data xscreensaver-data-extra xscreensaver-lang - update to 6.07: * New hacks, droste, skulloop, papercube and cubocteversion * xscreensaver-settings was sometimes turning off the DPMS checkbox * Log pid of caller of deactivate command, to give a hint about who is preventing the screen from blanking * Updates to sphereeversion. * Added some new map sources to mapscroller. * Various other minor bug fixes. - leave a nice notice for a very angry upstream developer in xscreensaver-disable-upgrade-nagging-message.patch - drop xscreensaver-bsc1204744.patch, included upstream ==== xterm ==== Version update (384 -> 385) Subpackages: xterm-bin xterm-resize - update to 385: * fixes for ReGIS (report by Ben Wong). + correct conversion from HLS to RGB + improve font-caching performance. * update tables in wcwidth.c based on Unicode 15.1.0 * improve fastScroll resource: + suppress screen-refreshes for carriage-returns + add -jf option to simplify use of this resource. + add a control sequence for enabling/disabling the resource. + enable this feature by default * extend title-stack feature to allow an additional parameter to directly access the stack, like the XTPUSHCOLORS and XTPOPCOLORS feature. * correct size and position of box shown for double-cell character which happens to be missing from the bitmap font (report by Peter Fabinski). * improved configure script: + add pattern for uClibc-ng to CF_XOPEN_SOURCE (report/patch by Waldemar Brodkorb). + add configure options --with-utmp-path and --with-wtmp-path to override configure script's check for utmp/wtmp pathnames which are shown in the manual (Debian #1042767). + CF_XOPEN_SOURCE provides for defining _DEFAULT_SOURCE for MinGW32 and MinGW64. + sed expression used to report gcc version now works with MinGW * ensure that line-attributes are reset after drawing missing character (report by Christian Weisgerber). * update config.guess, config.sub - rebased all patches

1 0

Re: [TESTERS WANTED] Using git to maintain packages on OBS - test run
by Adrian Glaubitz 06 Oct '23

06 Oct '23

On Fri, 2023-10-06 at 12:07 +0200, Dirk Müller wrote: > On Freitag, 6. Oktober 2023 11:17:36 CEST Adrian Glaubitz wrote: > > Hi Adrian, > > > > Yes, Dirk had to disable account creation as spammers found src.o.o > > OK. Could you create an account for me please? > > Can you try logging in again? Done. Still waiting for the confirmation mail.

2 2

Package fstrcmp is gone from TW 20231003 - on purpose?
by Manfred Hollstein 05 Oct '23

05 Oct '23

Hi there, it looks like the last Tumbleweed snapshot 20231003 removed package fstrcmp, i.e. libfstrcmp0 here; fwiw, openSUSE:Factory also doesn't contain it anymore. This package is still needed by Kodi which now shows one orphaned package. Was the removal on purpose? In that case we would have to start building it for Tumbleweed on Packman. TIA, cheers. l8er manfred

3 8

New Tumbleweed snapshot 20231003 released!
by Dominique Leuenberger 05 Oct '23

05 Oct '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: GraphicsMagick (1.3.40 -> 1.3.42) Mesa (23.1.8 -> 23.2.0) Mesa-drivers (23.1.8 -> 23.2.0) SDL2 (2.28.3 -> 2.28.4) container-selinux (2.215.0 -> 2.222.0) crypto-policies (20230614.5f3458e -> 20230920.570ea89) dLeyna (0.8.2 -> 0.8.3) glib2 gnome-remote-desktop (45.rc -> 45.0) grub2 gtk4 (4.12.2 -> 4.12.3) kbd (2.6.2 -> 2.6.3) kdepim-runtime libblockdev (3.0.2 -> 3.0.3) libdecor (0.1.1 -> 0.2.0) libsigc++2 (2.12.0 -> 2.12.1) libsigc++3 (3.2.0 -> 3.6.0) libwebp mozjs115 (115.2.1 -> 115.3.1) python-argparse-manpage (4.3 -> 4.5) qalculate (4.8.0 -> 4.8.1) qpdf (11.6.0 -> 11.6.1) qt6-base (6.5.2 -> 6.5.3) qt6-declarative (6.5.2 -> 6.5.3) qt6-imageformats (6.5.2 -> 6.5.3) qt6-translations (6.5.2 -> 6.5.3) qt6-wayland (6.5.2 -> 6.5.3) screen (4.9.0 -> 4.9.1) shadow systemd (254.3 -> 254.5) tracker-miners (3.6.0 -> 3.6.1) webkit2gtk3 (2.42.0 -> 2.42.1) webkit2gtk3-soup2 (2.42.0 -> 2.42.1) xdg-dbus-proxy (0.1.4 -> 0.1.5) yast2-trans (84.87.20230922.91d997adab -> 84.87.20230930.5f9e01162a) === Details === ==== GraphicsMagick ==== Version update (1.3.40 -> 1.3.42) Subpackages: libGraphicsMagick++-Q16-12 libGraphicsMagick-Q16-3 libGraphicsMagick3-config - version update to 1.3.42 Bug fixes: * TIFF: Default the alpha channel to type EXTRASAMPLE_UNASSALPHA(2). * BMP: Many fixes for reading esoteric BMP sub-formats. * TranslateTextEx(): Revert change so now a NULL pointer is returned when given an empty string. Some algorithms (e.g. montage) were depending on this!. * PAM: Fix reading comments. * PNG: Added Add missing module aliases "PNG00", "PNG48", "PNG64", so it is again possible to request these subformats directly. * TIFF: For common formats with the required number of channels, but one is an 'unspecified' channel, promote unspecified alpha to unassociated alpha so that the alpha channel is not ignored. * "Magick" command line emulation: Eliminate duplicate utility name output in error messages New Features: * BMP: Added the ability to read and write BMP using JPEG compression. Use '-define bmp:allow-jpeg' to allow use of JPEG compression. * BMP: Added support for BI_ALPHABITFIELDS compression * BMP: Added support for reading BMP with PNG compression. - modified patches % GraphicsMagick-disable-insecure-coders.patch (refreshed) - deleted patches - strlcpy-wrong-sizing.patch (upstreamed) ==== Mesa ==== Version update (23.1.8 -> 23.2.0) Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libOSMesa8 libgbm1 - Update to Mesa 23.2.0-rc4 - -> https://lists.freedesktop.org/archives/mesa-announce/2023-September/000731.… - supersedes U_llvmpipe-only-include-old-Transform-includes-when-ne.patch - disabled u_fix-build-on-ppc64le.patch (no longer needed?) - adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch ==== Mesa-drivers ==== Version update (23.1.8 -> 23.2.0) Subpackages: Mesa-dri Mesa-gallium Mesa-libva libxatracker2 - Update to Mesa 23.2.0-rc4 - -> https://lists.freedesktop.org/archives/mesa-announce/2023-September/000731.… - supersedes U_llvmpipe-only-include-old-Transform-includes-when-ne.patch - disabled u_fix-build-on-ppc64le.patch (no longer needed?) - adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch ==== SDL2 ==== Version update (2.28.3 -> 2.28.4) - Update to release 2.28.4 * Enable clipping for zero sized rectangles in the SDL renderer * Notify X11 clipboard managers when the clipboard changes * Fixed sensor timestamps for third-party PS5 controllers * Added detection for Logitech and Simagic racing wheels ==== container-selinux ==== Version update (2.215.0 -> 2.222.0) - Update to version 2.222: * Allow containers to read/write inherited dri devices - Update to version 2.221: * Allow containers to shutdown sockets inherited from container runtimes * Allow spc_t to use execmod libraries on container file systems * Add boolean to allow containers to read all cert files * More MLS Policy allow rules * Allow container runtimes using pasta bind icmp_socket to port_t * Fix spc_t transitions from container_runtime_domain ==== crypto-policies ==== Version update (20230614.5f3458e -> 20230920.570ea89) Subpackages: crypto-policies-scripts - nss: Skip the NSS policy check if the mozilla-nss-tools package is not installed. This avoids adding more dependencies in ring0. * Add crypto-policies-nss.patch [bsc#1211301] - Update to version 20230920.570ea89: * fips-mode-setup: more thorough --disable, still unsupported * FIPS:OSPP: tighten beyond reason for OSPP 4.3 * krb5: sort enctypes mac-first, cipher-second, prioritize SHA-2 ones * openssl: implement relaxing EMS in FIPS (NO-ENFORCE-EMS) * gnutls: prepare for tls-session-hash option coming * nss: prepare for TLS-REQUIRE-EMS option coming * NO-ENFORCE-EMS: add subpolicy * FIPS: set __ems = ENFORCE * cryptopolicies: add enums and __ems tri-state * docs: replace `FIPS 140-2` with just `FIPS 140` * .gitlab-ci: remove forcing OPENSSH_MIN_RSA_SIZE * cryptopolicies: add comments on dunder options * nss: retire NSS_OLD and replace with NSS_LAX 3.80 check * BSI: start a BSI TR 02102 policy [jsc#PED-4933] * Rebase patches: - crypto-policies-policygenerators.patch - crypto-policies-revert-rh-allow-sha1-signatures.patch - crypto-policies-FIPS.patch - Conditionally recommend the crypto-policies-scripts package when python is not installed in the system [bsc#1215201] ==== dLeyna ==== Version update (0.8.2 -> 0.8.3) - Update to version 0.8.3: + Build: Fix compatibility with Meson 1.2 + Renderer: Fix locale initialization + Server: - Fix locate initialization - Fix uninitialized variable warning - Properly handle optional actions - Fix browse not working properly - Drop 61d24fdc.patch: Fixed upstream. - Change compression of tarball in service and spec to zst from xz. ==== glib2 ==== Subpackages: glib2-lang glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 libgthread-2_0-0 - Fix NetworkManager crashing repeatedly with glib 2.78.0; (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch ==== gnome-remote-desktop ==== Version update (45.rc -> 45.0) Subpackages: gnome-remote-desktop-lang - Update to version 45.0: + vnc: Also include DRM format modifiers when resizing PipeWire stream. + rdp: Also include DRM format modifiers when resizing PipeWire stream. + Updated translations. - Change compression of tarball in service and spec to zst from xz. - Drop dbus-1-daemon Requires, only needed for tests, and we are not building them currently. ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - Only build with fde-tpm-helper-rpm-macros for the architectures supporting the newer UEFI and TPM 2.0. * Also correct the location of %fde_tpm_update_requires - Fix a boot delay regression in PowerPC PXE boot (bsc#1201300) * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch - Add the new BuildRequires for EFI builds for the better FDE support: fde-tpm-helper-rpm-macros + Also add the the macros to %post and %posttrans - Correct the type of allocated EFI pages for ARM64 kernel (bsc#1215151) * arm64-Use-proper-memory-type-for-kernel-allocation.patch ==== gtk4 ==== Version update (4.12.2 -> 4.12.3) Subpackages: gtk4-lang gtk4-schema gtk4-tools libgtk-4-1 typelib-1_0-Gtk-4_0 - Update to version 4.12.3: + GtkWindow: Don't assume titlebars are GtkHeaderBar + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos + printing: Fix some issues with the portal implementation + GSK: - Some optimizations in the GL renderer - Fix memory leaks in the Broadway renderer + demos: Fix a crash in gtk4-demo + Updated translations. ==== kbd ==== Version update (2.6.2 -> 2.6.3) Subpackages: kbd-legacy - Update to version 2.6.3: - libkfont: * Don't look for fonts in the current directory. - showkey: * Add parameter to allow to change timeout. - po: * Update po files. ==== kdepim-runtime ==== Subpackages: kdepim-runtime-lang - Add libetebase-devel to BuildRequires to enable the etesync resource for factory builds ==== libblockdev ==== Version update (3.0.2 -> 3.0.3) Subpackages: libbd_btrfs3 libbd_crypto3 libbd_fs3 libbd_loop3 libbd_lvm3 libbd_mdraid3 libbd_nvme3 libbd_part3 libbd_swap3 libbd_utils3 libblockdev3 - Update to version 3.0.3: * Always use "--fs ignore" with lvresize * nvme: - Use interim buffer for nvme_get_log_sanitize() - Generate HostID when missing * tests: - Specificy required versions when importing GLib and BlockDev introspection - Minor NVMe HostNQN fixes - Replace deprecated unittest assert calls * fs: - Fix leaking directories with temporary mounts - Fix memory leak * crypto: Correctly convert passphrases from Python to C ==== libdecor ==== Version update (0.1.1 -> 0.2.0) Subpackages: libdecor-0-0 - Update to version 0.2.0: * Various bug and leak fixes. * New gtk plugin. - Update URL and source to new home. - Add pkgconfig(gtk-3.0) BuildRequires, new dependency. - Use ldconfig_scriptlets macro for post(un) handling. ==== libsigc++2 ==== Version update (2.12.0 -> 2.12.1) - Update to version 2.12.1: + Documentation: - slot, signal: Describe the slot<void(int)> syntax more - connection: Improve the class documentation - Improve Visual Studio build documentation - Remove AUTHORS and add general information to README.md + Build: - Meson: . Don't copy files with configure_file() . Fix the evaluation of is_git_build on Windows - Visual Studio: Support static builds - Use ldconfig_scriptlets macro for post(un) handling. - Update URL to new home. ==== libsigc++3 ==== Version update (3.2.0 -> 3.6.0) - Update to version 3.6.0: + sigc++config.h.*: Update and clean up a bit for Visual Studio + scoped_connection: New wrapper to auto-disconnect a slot + signal: Add connect_first() + Documentation: - connection: Improve the class documentation - Improve Visual Studio build documentation - Remove AUTHORS and add general information to README.md - manual: Add paragraph about new scoped_connection + Tests: Add test_scoped_connection + Build: - Meson: . Don't copy files with configure_file() . Fix the evaluation of is_git_build on Windows . Don't require the 'dot' command to build the documentation - CMake: Prevent multiple target declaration for uninstall - Visual Studio: Support static builds - Use autosetup macro. - Update to version 3.4.0: + Add track_object(), deprecate track_obj() + Add trackable_signal_with_accumulator and trackable_signal + Examples, tests: - examples/member_method: Make on_print() non-virtual - test_accumulated.cc: clang++ requires another 'template' - test_limit_reference.cc: Don't use auto where a slot is required + Documentation: signal::make_slot(): Note that signal does not derive from trackable + Build: - Meson, MSVC: Compensate for the lack of msvc_recommended_pragmas.h - Fix build with -Dbuild-deprecated-api=false - Meson: . Avoid configuration warnings . Detect if we build from a git subtree . Simplify lookup of python command . Add build_tests option - Use ldconfig_scriptlets macro for post(un) handling. - Update URL to new home. ==== libwebp ==== Subpackages: libsharpyuv0 libwebp7 libwebpdecoder3 libwebpdemux2 libwebpmux3 - Add 0001-Fix-invalid-incremental-decoding-check.patch A fuzzing finding fixed in the SLE/Leap updates ==== mozjs115 ==== Version update (115.2.1 -> 115.3.1) - Update to version 115.3.1: + Security fix: CVE-2023-5217: Heap buffer overflow in libvpx. - Changes from version 115.3.0: + Various security fixes and other quality improvements. + CVE-2023-5168: Out-of-bounds write in FilterNodeD2D1 + CVE-2023-5169: Out-of-bounds write in PathOps + CVE-2023-5171: Use-after-free in Ion Compiler + CVE-2023-5174: Double-free in process spawning on Windows + CVE-2023-5176: Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3 ==== python-argparse-manpage ==== Version update (4.3 -> 4.5) - update to 4.5: * We newly provide build_manpages.build_py and build_manpages.install command classes that are re-usable from pyproject.toml. No need to provide setup.py because of argparse-manpage. * The prog= specifier (in setup.py/setup.cfg/pyproject.toml) is now better handled so it doesn't conflict with ArgumentParser(prog=..). ==== qalculate ==== Version update (4.8.0 -> 4.8.1) Subpackages: libqalculate22 qalculate-data - version update to 4.8.1 * Fix besselj() and bessely() * Fix display of matrices and vectors with complex number form other than rectangular (default) * Fix conflict between decibel units (e.g. "0dB") and duodecimal 0dâ¦ syntax (now requires at least two digits) * Fixes for title options in plot() function * Add additional buttons and button menus to general keypad (Qt) * Add option to show all functions, units, and variables in tool button menus (Qt) * Add recently used objects to functions, units, and variables menus (Qt) * Add option to bypass dialog for functions in menu (Qt) * Add option, in context menu, to display text for tool buttons (Qt) * Open functions, units, and variables tool button menus using long-press or right-click (in addition to arrow button), and add keyboard shortcuts (Qt) * Use keypad tool button menu as context menu and show keypad type in title bar of keypad (Qt) * Auto-update number bases above programming keypad when entering simple integers, even if calculate-as-you-type is deactivated (GTK) ==== qpdf ==== Version update (11.6.0 -> 11.6.1) - version update to 11.6.1 * Bug fixes: - Fix a logic error introduced in 11.6.0 in the fix to copyForeignObject. The bug could result in some pages not being copied. ==== qt6-base ==== Version update (6.5.2 -> 6.5.3) Subpackages: libQt6Core6 libQt6DBus6 libQt6Gui6 libQt6Network6 libQt6OpenGL6 libQt6Sql6 libQt6Test6 libQt6Widgets6 qt6-network-tls qt6-platformtheme-gtk3 - Update to 6.5.3 * https://www.qt.io/blog/qt-6.5.3-released - Drop patch, merged upstream: * CVE-2023-38197-qtbase-6.5.diff - Enable the experimental native painting feature to improve remote desktop performances (boo#1214915) exporting QT_XCB_NATIVE_PAINTING is required to use the feature. ==== qt6-declarative ==== Version update (6.5.2 -> 6.5.3) Subpackages: libQt6LabsAnimation6 libQt6LabsFolderListModel6 libQt6LabsQmlModels6 libQt6LabsSettings6 libQt6LabsSharedImage6 libQt6LabsWavefrontMesh6 libQt6Qml6 libQt6QmlCore6 libQt6QmlLocalStorage6 libQt6QmlModels6 libQt6QmlWorkerScript6 libQt6QmlXmlListModel6 libQt6Quick6 libQt6QuickControls2-6 libQt6QuickControls2Impl6 libQt6QuickDialogs2-6 libQt6QuickDialogs2QuickImpl6 libQt6QuickDialogs2Utils6 libQt6QuickEffects6 libQt6QuickLayouts6 libQt6QuickParticles6 libQt6QuickShapes6 libQt6QuickTemplates2-6 libQt6QuickTest6 qt6-declarative-imports - Update to 6.5.3 * https://www.qt.io/blog/qt-6.5.3-released ==== qt6-imageformats ==== Version update (6.5.2 -> 6.5.3) - Update to 6.5.3 * https://www.qt.io/blog/qt-6.5.3-released ==== qt6-translations ==== Version update (6.5.2 -> 6.5.3) - Update to 6.5.3 * https://www.qt.io/blog/qt-6.5.3-released ==== qt6-wayland ==== Version update (6.5.2 -> 6.5.3) Subpackages: libQt6WaylandClient6 libQt6WaylandCompositor6 libQt6WaylandEglClientHwIntegration6 libQt6WaylandEglCompositorHwIntegration6 libQt6WlShellIntegration6 - Update to 6.5.3 * https://www.qt.io/blog/qt-6.5.3-released ==== screen ==== Version update (4.9.0 -> 4.9.1) - update to 4.9.1 (bsc#1210272, CVE-2023-24626): * Support stop/parity bits on serial port * Add needed system headers in checks and return values for implicit function declarations * Avoid zombies after shell exit * Missed signal sending permission check on failed query messages (CVE-2023-24626) * manpage fixes * source code fixes during cleanup * UTF-8 encoding can emit invalid UTF-8 sequences * for out of range unicode values ==== shadow ==== Subpackages: libsubid4 login_defs - Add shadow-4.14.0-selinux-labels.patch: Set proper SELinux labels for new homedirs. See gh/shadow-maint/shadow#812. ==== systemd ==== Version update (254.3 -> 254.5) Subpackages: libsystemd0 libsystemd0-32bit libudev1 systemd-32bit systemd-container systemd-coredump systemd-lang udev - Import commit 9674bb256205e6c643feadbcccfd1ee8feeee684 (merge of v254.5) For a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/6ed5b11298005e07509832881a0c5ff… - Make sure to call %sysusers_create only when transfiletrigger is disabled. - systemd.spec: switch to %ldconfig_scriptlets - systemd.spec: add `%tmpfiles_create systemd-resolve` It's only needed by SLE distros since systemd packages rely on transtriggerfiles in Factory. - Import commit 6ed5b11298005e07509832881a0c5ff1a80bf225 (merge of v254.4) For a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/b6b4e5a8a82d1f13f265a4ef170f2d1… ==== tracker-miners ==== Version update (3.6.0 -> 3.6.1) Subpackages: tracker-miner-files tracker-miners-lang - Update to version 3.6.1: + Avoid the special thread in tracker-extract-3, and extend the seccomp jail to the full process. + Updated translations. - Add a tracker_basever define, and set it to 3.6. We have a hard Requires on what tracker version is needed and it is currently set at the same or newer version, change this to tracker_basever (tracker-miners have never been at a higher patch version before). ==== webkit2gtk3 ==== Version update (2.42.0 -> 2.42.1) Subpackages: WebKitGTK-4.1-lang libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles - Update to version 2.42.1: + Fix enable-html5-database setting to properly enable/disable IndexedDB API. + Fix the build with GBM disabled. + Fix several crashes and rendering issues. - switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow switching to a different libicu*-devel (jsc#PED-6193) ==== webkit2gtk3-soup2 ==== Version update (2.42.0 -> 2.42.1) Subpackages: WebKitGTK-4.0-lang libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 webkit2gtk-4_0-injected-bundles - Update to version 2.42.1: + Fix enable-html5-database setting to properly enable/disable IndexedDB API. + Fix the build with GBM disabled. + Fix several crashes and rendering issues. - switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow switching to a different libicu*-devel (jsc#PED-6193) ==== xdg-dbus-proxy ==== Version update (0.1.4 -> 0.1.5) - Update to version 0.1.5: + Fix handling of object paths > 255 bytes + Print better errors when message parsing fails + Optionally install tests for "as-installed" testing ==== yast2-trans ==== Version update (84.87.20230922.91d997adab -> 84.87.20230930.5f9e01162a) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sr yast2-trans-sv yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20230930.5f9e01162a: * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Spanish) * Translated using Weblate (Spanish) * Translated using Weblate (Spanish) * Translated using Weblate (Spanish) * New POT for text domain 'storage'.

1 0

Re: sddm stays black after recent TW update
by Ianseeks 05 Oct '23

05 Oct '23

>Hello! > >After rebooting my Tumbleweed machine after one of the recent updates, sddm >just shows a black screen with just the mouse pointer showing. > >I have not been able to pinpoint the cause of this but maybe someone else has >and can help me save some time. > >Any ideas? This might not be the same situation. I had a similar problem with 6.5 kernel and I thought it had hung. After some research it turned out to be timeout situation with ata3 during boot up. I then left it until the timeout sorted itself out and it eventually came to SDDM. See bug: 1215328 I will now only boot with 6.4 kernel until the problem gets sorted >Adrian opensuse:tumbleweed:20231001 Qt: 5.15.10 KDE Frameworks: 5.110.0 - KDE Plasma: 5.27.8 - kwin 5.27.8 kmail2 5.24.1 (23.08.1) - akonadiserver 5.24.1 (23.08.1) - Kernel: 6.4.12-1- default - kernel-firmware-radeon 20230829

1 0

Changes to dbus packaging (Some Attention maybe required).
by Simon Lees 04 Oct '23

04 Oct '23

Hi All, For Tumbleweed and ALP we plan to follow Red Hat / Fedora / Debian and move from dbus-daemon to dbus-broker as it has a number of advantages and is what upstream is now focusing on. While one of the goals here is to provide the same user experience there will be a couple of changes that will likely require adjustments in a few packages. 1. tools such as dbus-send and dbus-uuid will no longer be installed by default on all systems (we have many use cases that will simply no longer need them and this follows other distro's). Currently the package dbus-1-tools exists and is required by dbus-1 but that will change maybe to a recommends so if you know your package needs one of these tools you can add the Requires there now, otherwise I plan to go through and look at debian and fedora to try and find any packages that need this requires before it becomes optional for dbus. 2. The symlink from /etc/machine-id to /var/lib/dbus/machine-id will no longer be present on all machines and software should be adapted to use /etc/machine-id from systemd rather then the dbus copy. Again this has already happened for Debian and Fedora so hopefully many upstreams have already adapted to this. I'll outline the plan / timeline below. 1. Currently - dbus-broker has been in the distro for quite some time and the dbus-1 package has already been split up and we are at the point of asking people nicely to start testing (instructions below), myself and at least several other people have already been testing this without issues. 2. In 2-3 weeks if I don't hear of any issues we will update the systemd presets to enable dbus-broker rather then dbus-daemon. 3. Unless someone indicates they really want to keep maintaining dbus-daemon and have good reasons for doing so I will make dbus-daemon uninstallable. 4. Once we have done the work to ensure that as many packages that use dbus-send and other tools require the tools package we will drop the requires for dbus-tools from the dbus package. Instead it will probably move to being a Recommends in one of the patterns so it still ends up on most users machines. Switching to dbus-broker: Run the following as root zypper in dbus-broker systemctl disable dbus systemctl enable dbus-broker systemctl --global disable dbus systemctl --global enable dbus-broker https://www.mail-archive.com/debian-policy@lists.debian.org/msg35437.html https://fedoraproject.org/wiki/Changes/DbusBrokerAsTheDefaultDbusImplementa… -- Simon Lees (Simotek) http://simotek.net Emergency Update Team keybase.io/simotek SUSE Linux Adelaide Australia, UTC+10:30 GPG Fingerprint: 5B87 DB9D 88DC F606 E489 CEC5 0922 C246 02F0 014B

4 6

Glibc Dynamic Loader Hit By A Nasty Local Privilege Escalation Vulnerability
by Adam Mizerski 04 Oct '23

04 Oct '23

Quoting from https://www.phoronix.com/news/Glibc-LD-Nasty-Root-Bug > A nasty vulnerability has been made public today concerning Glibc's > dynamic loader that can lead to full root privileges being obtained by > local users. This affects Linux distributions of the past two years > with the likes of Ubuntu 22.04 LTS, 23.04, Fedora 38, and others > vulnerable to this local privilege escalation issue.

2 1

Re: TW snapshot 20230901: grub2-2.12 not really ready?
by Patrick Schaaf 04 Oct '23

04 Oct '23

Hi folks, following up on previous thread, just want to share a personal observation. On one of my private little servers, I updated to snapshot 20231001 today (been a while that I updated before). That brought in grub 2.12~rc1, and the update resulted in an unbootable system, as reported before by others, dropping me to the grub rescue prompt. I could fix the situation by (network) rescue booting + re-running grub2-install on /dev/sda + /dev/sdb. Most likely cause (guessing), is my peculiar drive setup - just sharing for information, I'm not complaining that it didn't work magically! * two SSDs /dev/sda + /dev/sdb * gpt partitioning * the usual grub BIOS partition on both drives * rest of the drive a second partition * these large partitions, run as software RAID1 * and on top of that, LVM with a logical root volume and no separate boot Again, not complaining, just want to share info + maybe help someone who runs into something similar. best regards Patrick

1 0

Re: Trial to use a CDN for download.opensuse.org
by Jan Engelhardt 03 Oct '23

03 Oct '23

A slow mirror I could live with, but... an unreachable one ううん. This does not actually look like cdn is really used in this particular instance. # wget http://cdn.opensuse.org/debug/tumbleweed/repo/oss/x86_64/libvmime-debugsour… -c --2023-09-30 17:19:37-- http://cdn.opensuse.org/debug/tumbleweed/repo/oss/x86_64/libvmime-debugsour… Resolving cdn.opensuse.org (cdn.opensuse.org) 151.101.109.91, 2a04:4e42:1a::347 Connecting to cdn.opensuse.org (cdn.opensuse.org)|151.101.109.91|:80... connected. HTTP request sent, awaiting response... 302 Found Location: http://mirrorcache-jp.opensuse.org/debug/tumbleweed/repo/oss/x86_64/libvmim… [following] --2023-09-30 17:19:37-- http://mirrorcache-jp.opensuse.org/debug/tumbleweed/repo/oss/x86_64/libvmim… Resolving mirrorcache-jp.opensuse.org (mirrorcache-jp.opensuse.org) 139.162.108.149, 2400:8902::f03c:93ff:fec8:af18 Connecting to mirrorcache-jp.opensuse.org (mirrorcache-jp.opensuse.org)|139.162.108.149|:80... connected. HTTP request sent, awaiting response... 302 Found Location: http://mirror-jp.firstyear.id.au/debug/tumbleweed/repo/oss/x86_64/libvmime-… [following] --2023-09-30 17:19:38-- http://mirror-jp.firstyear.id.au/debug/tumbleweed/repo/oss/x86_64/libvmime-… Resolving mirror-jp.firstyear.id.au (mirror-jp.firstyear.id.au)... 139.162.108.7, 2400:8902::f03c:93ff:fec8:afa1 Connecting to mirror-jp.firstyear.id.au (mirror-jp.firstyear.id.au)|139.162.108.7|:80... ^C 17:20 f3:~ $ ping mirror-jp.firstyear.id.au PING mirror-jp.firstyear.id.au (139.162.108.7) 56(84) bytes of data. ^C --- mirror-jp.firstyear.id.au ping statistics --- 3 packets transmitted, 0 received, 100% packet loss, time 2027ms

2 3

Mesa 23.1.7 32-bit libraries missing in updates repo on Slowroll
by kocelfc＠tutanota.com 03 Oct '23

03 Oct '23

Is there an issue somewhere which can be tracked?

2 1

why does zypper marks a package "obsolete" even with higher version number ...
by André Verwijs 03 Oct '23

03 Oct '23

at the bottom, why does zypper marks a package "obsolete" even with higher version number ... true: "epson-inkjet-printer-escpr-1.8.0-1.x86_64¨ is installed manually (downloaded package) how does zypper deal with package version numbers?? verwijs-leap:~ # zypper dup Repository 'Insync Fedora 27' is up to date. Retrieving repository '.NET/Mono based Software (openSUSE_Tumbleweed)' metadata ...................................[done] Building repository '.NET/Mono based Software (openSUSE_Tumbleweed)' cache ........................................[done] Repository 'MySQL 8.0 Community Server' is up to date. Repository 'MySQL 8.0 Community Server Debug' is up to date. Repository 'MySQL Connectors Community' is up to date. Repository 'MySQL Connectors Community Debug' is up to date. Repository 'MySQL Tools Community' is up to date. Repository 'MySQL Tools Community Debug' is up to date. Repository 'MySQL Tools Community preview' is up to date. Retrieving repository 'The Mono Project (openSUSE_Factory)' metadata ..............................................[done] Building repository 'The Mono Project (openSUSE_Factory)' cache ...................................................[done] Repository 'nVidia Graphics Drivers Tumbleweed' is up to date. Repository 'MariaDB 11.2 (sles 12)' is up to date. Repository 'MariaDB 11.2 (sles 15)' is up to date. Repository 'openSUSE-Leap-15.6-1' is up to date. Repository 'repo-non-oss (15.6)' is up to date. Repository 'repo-openh264 (15.6)' is up to date. Repository 'repo-oss (15.6)' is up to date. Repository 'update-backports (15.6)' is up to date. Repository 'update-backports-debug (15.6)' is up to date. Repository 'update-non-oss (15.6)' is up to date. Repository 'update-oss (15.6)' is up to date. Repository 'update-sle (15.6)' is up to date. Repository 'update-sle-debug (15.6)' is up to date. Repository 'packages-microsoft-com-prod' is up to date. Repository 'Update repository with updates for openSUSE Leap debuginfo packages from openSUSE Backports' is up to date. Repository 'Update repository of openSUSE Backports' is up to date. Repository 'Update repository with debuginfo for updates from SUSE Linux Enterprise 15' is up to date. Repository 'Update repository with updates from SUSE Linux Enterprise 15' is up to date. All repositories have been refreshed. Refreshing service 'openSUSE'. Loading repository data... Warning: Repository 'update-backports (15.6)' metadata expired since 2023-09-29 11:08:32 CEST. Warning: Repository 'update-backports-debug (15.6)' metadata expired since 2023-09-29 11:08:33 CEST. Warning: Repository 'update-non-oss (15.6)' metadata expired since 2023-09-21 14:47:58 CEST. Warning: Repository 'Update repository with updates for openSUSE Leap debuginfo packages from openSUSE Backports' metadata expired since 2023-09-29 11:08:33 CEST. Warning: Repository 'Update repository of openSUSE Backports' metadata expired since 2023-09-29 11:08:32 CEST. Warning:Repository metadata expired: Check if 'autorefresh' is turned on (zypper lr), otherwise manualy refresh the repository (zypper ref). If this does not solve the issue, it could be that you are using a broken mirror or the server has actually discontinued to support the repository. Reading installed packages... Warning: You are about to do a distribution upgrade with all enabled repositories. Make sure these repositories are compatible before you continue. See 'man zypper' for more information about this command. Computing distribution upgrade... Problem: problem with the installed epson-inkjet-printer-escpr-1.8.0-1.x86_64 Solution 1: install epson-inkjet-printer-escpr-1.7.22-bp156.2.2.x86_64 from vendor openSUSE replacing epson-inkjet-printer-escpr-1.8.0-1.x86_64 from vendor Seiko Epson Corporation Solution 2: keep obsolete epson-inkjet-printer-escpr-1.8.0-1.x86_64 Choose from above solutions by number or cancel [1/2/c/d/?] (c):

4 3

RE: why does zypper marks a package "obsolete" even with higher version number ...
by André Verwijs 03 Oct '23

03 Oct '23

oops..!! forgot to share system information: Operating System: openSUSE Leap 15.6 KDE Plasma Version: 5.27.4 KDE Frameworks Version: 5.103.0 Qt Version: 5.15.8 Kernel Version: 5.14.21-150500.55.19-default (64-bit) Graphics Platform: X11 Processors: 2 × Intel® Core™2 CPU 6700 @ 2.66GHz Memory: 5.7 GiB of RAM Graphics Processor: GeForce GT 610/PCIe/SSE2

1 0

Mesa 23.1.7 32-bit libraries missing in updates repo on Slowroll
by Kostadin Shishmanov 03 Oct '23

03 Oct '23

When I try to install steam on slowroll, for some reason Mesa-32bit-23.1.7 is missing from the "updates" repo and instead zypper asks me to downgrade Mesa to 23.1.5 in order to go through, which makes KDE use llvmpipe. Can someone figure out why the 32bit libraries of mesa 23.1.7 are missing from updates?

2 1

slowroll ignoring packages in updates repo
by Felix Miata 03 Oct '23

03 Oct '23

3 4

[opensuse-factory] Slowroll version bump 20231001
by Bernhard M. Wiedemann 03 Oct '23

03 Oct '23

Hi, the last (and first) Slowroll base snapshot from Tumbleweed was 20230822 The next one should be 20231001 if it passes openQA. Why? We need to catch up with major version bumps to not diverge too much from Tumbleweed. E.g. there are no kernel updates anymore in the 6.4.x series and we do not even have the latest 6.4.16 from upstream but .12 there. https://www.zq1.de/~bernhard/linux/opensuse/slowroll/slowroll-vs-tumbleweed… illustrates the concept of these bumps So far we have 1156 pkg updates not released 1423 pkg updates released So we did not stand still either and usually got the most important (security) fixes 1-2 days after Tumbleweed. I guess, with more elaborate event-based coding and smaller staging projects, we could get that down to a few hours. Ciao Bernhard M.

2 3

Overview of SUSE/OpenSUSE variants?
by Michael Hamilton 03 Oct '23

03 Oct '23

One for the suggestion box: The recent news around Slowroll and the future of Leap has resulted in some curiosity from myself and others concerning how all these OpenSUSE variants relate. The following forum posts include a few attempts to diagram the relationships, as well as a jump off to a phoronix discussion: https://forums.opensuse.org/t/relationships-between-suse-opensuse-distros/1… Would it be appropriate to place some kind of outline, either text or diagram, up front somewhere like the wiki? Michael

1 0

New Tumbleweed snapshot 20231001 released!
by Dominique Leuenberger 02 Oct '23

02 Oct '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ImageMagick (7.1.1.17 -> 7.1.1.18) apache2-mod_php8 (8.2.10 -> 8.2.11) emacs libnbd (1.14.1 -> 1.18.0) libnvme (1.4 -> 1.6) nbdkit (1.32.2 -> 1.36.0) nvme-cli (2.4 -> 2.6) pam-config (2.8 -> 2.9) php8 (8.2.10 -> 8.2.11) poppler poppler-qt5 rubygem-mini_portile2 (2.8.0 -> 2.8.4) suse-module-tools (16.0.35 -> 16.0.36) xdg-desktop-portal-kde xdg-utils (1.1.3+20230831 -> 1.2.0~beta1+20230929) === Details === ==== ImageMagick ==== Version update (7.1.1.17 -> 7.1.1.18) Subpackages: ImageMagick-config-7-SUSE ImageMagick-extra libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - version update to 7.1.1.18 * upstream changelog: https://github.com/ImageMagick/Website/blob/main/ChangeLog.md ==== apache2-mod_php8 ==== Version update (8.2.10 -> 8.2.11) - version update to 8.2.11 * This is a bug fix release. * https://www.php.net/ChangeLog-8.php#8.2.11 ==== emacs ==== Subpackages: emacs-el emacs-eln emacs-info emacs-nox emacs-x11 etags - For GNUS: Use message-user-fqdn instead of gnus-local-organization - Now with changed pdump.patch patch from bjorn.bidar(a)thaodan.de - Build also wayland gtk based binary - Support wayland binary by checking for XDG_SESSION_TYPE - Provide eln native shared binaries for all emacs program binaries - Pass libdir to configure so native Emacs lisp files are installed correctly on 64bit systems ==== libnbd ==== Version update (1.14.1 -> 1.18.0) - Update to version 1.18.0: * CVE-2023-5215 (bsc#1215799) * docs: Add link to nbd_get_size announcement in release notes * docs: Add URL to list post on nbd_get_size security * docs: Update release notes for nbd_get_size backport to 1.16.5 * docs: Finalize release notes for release tomorrow * dump: Add more examples of running subprocesses from nbddump * info: Tolerate missing size * block_status: Fix assertion on bad 64-bit block status reply * block_status: Fix assertion with large server size * api: Sanitize sizes larger than INT64_MAX ==== libnvme ==== Version update (1.4 -> 1.6) Subpackages: libnvme-mi1 libnvme1 - Update to version 1.6: * docs: Fix Read-the-Docs configuration (deprecated config param) * mi-mctp: Fix free() in error path of mi_open_mctp * types: Use NVME_SET for status type mask to get status value * types: Define FLBAS MASK and SHIFT to use NVME_GET * types: Support Phy Rx Eye Opening Measurement Log * log: Add nvme root global variable to set for default output * types: Add support for the OAQD ID controller field * test: use non deprecated API * test: add tests for Get/Set Features functions * ioctl: implement nvme_set_features_lba_range() * ioctl: pass NSID in Get/Set Features commands that use it * ioctl: fix swapped parameters in nvme_set_features_host_id() * ioctl: export nvme_{g,s}et_features_iocs_profile() * ioctl: pass ENDGID in nvme_get_features_endurance_event_cfg() * ioctl: don't set SAVE bit on unsaveable features * ioctl: avoid sending uninitialized timestamp * ioctl: pass data for Get/Set Features commands * ioctl: set correct bits in Set Features commands * ioctl: correct feature IDs in Get/Set Features commands * tree: Add 2 new public functions to lookup existing controllers * ioctl: Add debugging feature to show command outputs * Fix incorrect article 'an' as 'a' to use for a description * linux: Added functions to enable faster telemetry data retrieval. Moved telemetry data area support detection into separate function. Added possibility to modify data transfer chunk size. Enable telemetry extraction up to specified data area. Removed some printf() and perror(). * test: account for discovery log page entry stripping * fabrics: unconditionally strip discovery entry strings * fabrics: only look for spaces in strchomp() * tree: Use early return instead of else statements * test: fix lookup test case * test: make all function static * test: add tests for new tcp controller matching algorithm * tree: Improve TCP controller matching algorithm * util: Add functions to parse the system's interfaces * types: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP * mi: remove nsid from nvme_mi_admin_identify_secondary_ctrl_list() * test: add tests for nvme_ctrl_get_src_addr() * tree: Add nvme_ctrl_get_src_addr() to get the controller's src_addr * util: Split _nvme_ipaddrs_eq() from nvme_ipaddrs_eq() * test: add tests for Identify functions * ioctl: use available Identify helper functions * test: pass a large enough buffer to nvme_identify_ns_descs() * ioctl: remove nsid from nvme_identify_secondary_ctrl_list() * meson: Don't hard-code path to "internal/config.h" * fabrics: Do not pass disable_sqflow if not supported * fabrics: Read the supported options lazy * test: add discovery log page tests * test: add infra for mocking passthru ioctls * tree: fix segfault in nvme_scan_subsystem() * src/nvme/tree.c: make __nvme_scan_subsystem() returning bool * doc: fix minor mistake in README.md about dependencies * nvme-tree: avoid warning in 'list-subsys' * tree: Add getter for subsystem iopolicy * fabrics: Consider also all hosts settings for context match * tree: Scan all subsystems * doc: Fixing compile instruction in README * mi: allow non-4-byte-aligned responses * mi-mctp: use a linear response buffer * mi: implement length and offset alignment checks in admin_xfer() * tree: Don't open nvme devices until it's absolutely required * tree: missing closedir() causes fd leak for "/sys/bus/pci/slots" * mi: don't return from mi_mctp_submit with a tag held * util: Provide empty nvme_ipaddrs_eq for static builds * fabrics: Relax match on well known disc ctrl lookup * tree: Ignore NULL address pointer for phy slot lookup * fabrics: Filter discovery ctrls out during application context check * util: Add ignored error code * json: Use memory block allocated by realloc() instead printbuf * util: Use HAVE_NETDB instead of HAVE_LIBNSS * tree: Add PCI physical slot number for controller * tree: Use nvme_ipaddrs_eq() to compare IP addresses * fabrics: Add EADDRNOTAVAIL error mapping * fabrics: filter out subsystems with non-matching application string * libnvme: add 'application' setting to nvme_root * libnvme: add 'application' setting to the subsystem * test: Add more code coverage for nvme_ipaddrs_eq() * util: rename ipaddrs_eq() to nvme_ipaddrs_eq() and make public. * util: Add ipaddrs_eq() to check whether two IP addresses are equal * test: Add unit test for ctrl lookups * ioctl: fix RAE bit on last Get Log Page command * fabrics: check genctr after getting discovery entries * fabrics: handle /dev/nvme-fabrics read failure * fabrics: fix potential invalid memory access in __nvmf_supported_option() * Python: Fix crash during garbage collection * python/swig: Check swig version to determine whether -py3 is needed * python/swig: Wrap swig-sensitive struct inside #ifwdef SWIG * mi: Add nvme_mi_ctrl_id to retrieve controller ID * Python: Suppress swig warnings about unnamed struct * examples: fix incorrect controller status in MI info output * ioctl: Explicitly initialize all members of struct nvme_ns_mgmt_args * Python: make NBFT data more pythonic * ioctl: io management send, receive args fix * python: Update test data * NBFT: Remove documentation from nbft.c since it's also in nbft.h * Python: Add NBFT support * nbft: Doc typo - Use nvme_nbft_free() instead of nbft_free() * nbft: Parse the {HOSTID,HOSTNQN}_CONFIGURED flags * nbft: Fix nbft_ssns_flags endianness test * nbft: Add a simple unit test * doc: Update README ... changelog too long, skipping 12 lines ... * tree: Fix argument check in nvme_bytes_to_lba ==== nbdkit ==== Version update (1.32.2 -> 1.36.0) Subpackages: nbdkit-basic-filters nbdkit-basic-plugins nbdkit-curl-plugin nbdkit-nbd-plugin nbdkit-python-plugin nbdkit-server nbdkit-ssh-plugin nbdkit-vddk-plugin - Update to version 1.36.0: * Version 1.36.0. * evil: Fix typo in man page * tests: Rename test-curl-options.sh and add more tests * docs: Finalize release notes for release tomorrow * curl: Use new curl_multi_get_handles API to simplify code * curl: Store pointer from curl easy handle to our struct curl_handle * README: Recommend new syntax for ASAN_OPTIONS * fuzzing/README: Remove advice to set ASAN_OPTIONS * docs: Small tweaks to the release notes * docs: Add outline release notes for forthcoming nbdkit 1.36 * tests: Add some consistency checks of the tests themselves * tests/test-evil-cosmic.sh: Use requires_nbdcopy * tests/test-nozero.sh: Test uses nbdsh -u but does not declare requirement * tests: Fix a couple more tests that are missing requires_run * docs: Expand Network Block Device (for NBD) in title ==== nvme-cli ==== Version update (2.4 -> 2.6) Subpackages: nvme-cli-bash-completion - Update to version 2.6: * nvme: allocate payload buffer in create-ns command * nvme-print-stdout: Add CAP.CPS and CAP.NSSS human readable outputs * nvme: Add output-format default option instead of argconfig json option * nvme: fw-download offset only describes FW offset, not file offset * unit: add locale number test * util: handle utf-8 thousend separators correctly * nvme: Change to use NVME_ARGS verbose default option from OPT_ARGS * fabrics: Fix NVMF_ARGS macro to use parameter n correctly * nvme: Add verbose default option to show command debug output * util: Fix to set argconfig output format json option correctly * util: Split argconfig output format json function to set and get * nvme: Spport Phy Rx Eye Opening Measurement Log * nvme: Introduce nvme_realloc function * nvme: Fix for fdpa reserved field printing * completion: add 'version' and 'help' to list * udev-rule: apply round-robin iopolicy on i/o subsystems alone * nvme: Add support for the OAQD ID controller field * plugins/solidigm: use static log macro to calc bitmask * plugins/ocp: Rename FW activation history command * nvme: auto free nvme_dev resource * nvme: allocate aligned payloads for all nvme commands * nvme: introduce alloc helper with alignment support * util: add cleanup function for generic memory allocations * nvme: append huge to nvme_{alloc|free} function * nvme: fw_download use nvme_alloc only * fabrics: Removing duplicate code and moving to libnvme * nvme-print: omit size of protection information * tree: Modify label name close_fd to close_dev * fabrics: For TCP/RDMA, compare IP addresses with nvme_ipaddrs_eq() * fabrics: lookup_discovery_ctrl() must look under host and not root * nvme: Do not map status to errno codes * completions: Add bash completion for DSSD Power state feature(FID: C7h) * Documentation: Add document for DSSD Power state feature(FID: C7h) * plugins/ocp: Add DSSD Power state feature(FID: C7h) * avoid casting pointer arguments to argconfig functions * nvme-print: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP * nvme-print: Fix endurance_log whitespace changes * nvme: Fix retrieval of telemetry log up to specified data area. * nvme: Update list secondary command * wdc: Add support for SN861 drive * util: Set errno to 0 before strtol/stroul call * nvme: Revert passthru and submit_io to print status to stderr from stdout * plugins/zns: Fix offset in report zones * nvme-rpmb: Fix nvme_show_id_ctrl_rpmbs() definition error * fabrics: Use corresponding hostid when hostnqn is generated * json: fix seg. fault converting NULL to JSON string * nvme-cli: fix extended metadata size calculation * nvme-print: Show subsystem iopolicy * nvme-print-stdout: Do not show non reachable ns in namespace topology * nvme-print: Fix show-topolocy for ctrls * doc: Fix typo in documentation * nvme-print-stdout: fix storage tag size label * nvme-print-stdout: List only ctrls which are part of ns * nvme-print-stdout: Support subsys reachable from several hosts * ccan: Add htable, strset and dependencies * ccan: Remove unused documentation * nvme-print: Split max power flags * nvme-print: fix counter while looping through uuid_list * fabrics: only look for matching ctrl on same host * README: Correct hugetlbfs spelling error * util: Delete unused CFG_BOOL argconfig type as duplicated with CFG_FLAG * util: Set LC_ALL=C as default if -H option is not used * nvme: Add support for create-ns command endg-id option parameter * nvme-print: fix argument order for show functions * plugins/solidigm: Added Marketing Name Log support for Solidigm. * nvme-print: Remove left overs from refactoring * nvme-print: Move num argument parsing into callbacks * nvme-print: Fix typo in callback definition * scripts: Make release script project neutral * scripts: Update update-docs.sh scripts * scripts: Execute the scripts from toplevel directory * scripts: Move helper scripts to a central place * docs: Update file modes * doc: Add information on --context * nvmf-autoconnect: Annotate the context to autoconnect * fabrics: Add support for volatile configuration * plugins/solidigm: Formated log page directory table consistently with "nvme list" format. * plugins/solidigm: Added Identify controller VU extensions parsing. * nvme-print-json: Print PCI pysical slot number for controller * nvme-print-stdout: Print PCI physical slot number for controller * libnvme.wrap: Bump to 42ac453 * plugins/nbft: Use common code to parse print flags * fabrics: Do not print device on connect per default * fabrics: Revert 'fabrics: prevent 'nvme connect' to well-known discovery NQN' * nvme-print: fix wrong list-subsys output when ns are attached to different ctrls * plugins/micron: Correct NULL pointer checking error * plugins/innogrit: Add vendor command get-eventlog and get-cdump * nvme: Use correct data buffer size * nvme: Fix quoted string split across lines to use quoted newline * plugins/zns: Fix zns.c linux kernel check patch errors and warnings * plugins/ymtc: Fix ymtc-nvme.c linux kernel check patch warning * plugins/ymtc: Fix ymtc-nvme.c space indentation to tab indentation * plugins/virtium: Fix virtium-nvme.c linux kernel check patch errors and warnings * plugins/transcend: Fix transcend-nvme.c linux kernel check patch errors and warnings * plugins/solidigm: Fix linux kernel check patch errors and warnings * plugins/shannon: Fix shannon-nvme.c linux kernel check patch errors and warnings * plugins/seagate: Fix seagate-nvme.c linux kernel check patch warnings * plugins/scaleflux: Fix sfx-nvme.c linux kernel check patch errors and warnings ... changelog too long, skipping 111 lines ... - Fix install path for nvme-regress script ==== pam-config ==== Version update (2.8 -> 2.9) - Update to version 2.9 - Add support for kanidm ==== php8 ==== Version update (8.2.10 -> 8.2.11) Subpackages: php8-cli php8-ctype php8-dom php8-gd php8-gettext php8-iconv php8-mbstring php8-mysql php8-openssl php8-pdo php8-sqlite php8-tokenizer php8-xmlreader php8-xmlwriter - version update to 8.2.11 * This is a bug fix release. * https://www.php.net/ChangeLog-8.php#8.2.11 ==== poppler ==== Subpackages: libpoppler-cpp0 libpoppler-glib8 libpoppler131 poppler-tools - build with gpgmepp for signing documents (bsc#1215632) ==== poppler-qt5 ==== - build with gpgmepp for signing documents (bsc#1215632) ==== rubygem-mini_portile2 ==== Version update (2.8.0 -> 2.8.4) - updated to version 2.8.4 Various fixes to build system ==== suse-module-tools ==== Version update (16.0.35 -> 16.0.36) Subpackages: suse-module-tools-scriptlets - Update to version 16.0.36 * blacklist RNDIS modules (bsc#1205767, jsc#PED-5731) * modprobe.d: Blacklist cls_tcindex module (bsc#1210335, CVE-2023-1829) ==== xdg-desktop-portal-kde ==== Subpackages: xdg-desktop-portal-kde-lang - Add: 0001-kde_portals.patch (kde#474746) * Add a fallback to the GTK portal for settings. This makes sure that GTK apps always get valid fonts and related settings. ==== xdg-utils ==== Version update (1.1.3+20230831 -> 1.2.0~beta1+20230929) - Update to version 1.2.0-beta1+20230929: * Set Version to 1.2.0-beta1 * Update Changes and Release Notes * fix(xdg-open): handle spaces in .desktop file path * Quote Browser variable to avod unintentional code execution * Add missing result gathering * Enhance LXQt Desktop Enviromment support * xdg-terminal: don't run 'kreadconfig' if KDE_SESSION_VERSION is >= 5 - Drop the following fix, now actually included upstream * xdg-terminal-don-t-run-kreadconfig-if-KDE_SESSION_VE.patch - The following entries may have been missed in previous changelog versions * all: shellcheck fixes; make xdg-mime DASH-compatible * xdg-email: do not run BROWSER if xdg-open failed * Ensure POSIX-compliant shell scripting to support DASH * all: spelling fixes * Fix set_url_scheme_handler_gnome3 to not associate text/html handler * xdg-screensaver: fix the freedesktop screensaver * xdg-screensaver: implement support for "gnome3" DE * xdg-screensaver: better error detection for freedesktop 'status' command * xdg-desktop-menu: Drop obsolete GNOME support * xdg-open: support WSL (FDO#108975) * xdg-su: support deepin * xdg-mime: If mimeapps.list is a symlink, retain the symlink (#7) * xdg-open: fix search_desktop_file's logic * xdg-open: handle local hostname in `file:` URLs * xdg-desk-menu: Check if defaults file exists during installation * xdg-su: Remove quotes for lxqt-sudo cmd arg * xdg-open: handle opening files when DE=flatpak

1 0

Linphone is broken on TW
by Bernd Ritter 02 Oct '23

02 Oct '23

Hi everyone, I needed to install a soft phone today and I chose "Linphone" for that. Apparantly it seems to be broken on TW 20230929 (and the release before) due to some unresolved symbols: linphone: symbol lookup error: linphone: undefined symbol: _ZN8linphone7Account13isPhoneNumberERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE Isn't this something that should have been found by automated testing? All the best, Bernd

4 3

Slowroll: minimum Leap version required for upgrade?
by Luca Beltrame 02 Oct '23

02 Oct '23

Hello, I'm asking here since the wiki only mentions a generic "Leap". Given this is not (yet?) openQA tested, what is the minimum Leap version "supported" (quotes intended) to make the jump to Slowroll? I'm pondering whether to upgrade an older server running 15.3 or see if I should start fresh. Depending on the answers I'll update the wiki if need be. -- Luca Beltrame GPG key ID: A29D259B

2 1

Re: Login issues after recent Tumbleweed update
by Adrian Glaubitz 01 Oct '23

01 Oct '23

Hi! On Thu, 2023-09-28 at 22:17 -0400, xtexchooser(a)duck.com wrote: > I got the same problem. > I found that the stack canary protector (stack smashing detector) is aborting > udisksd from time to time. > And plasmashell could not start udisks2 because of this, so the desktop could > not start up. > > I ran `snapper undochange` to revert the last dist-update, then ran `zypper al > udisks2` to lock udisks2. > After another dist-update, I logged into plasma desktop successfully. > Now the version is `cpe:/o:opensuse:tumbleweed:20230926`. > > There are two issues may be useful: > - <https://github.com/storaged-project/udisks/issues/1152> > - <https://github.com/storaged-project/udisks/issues/1193> > It seems that libblockdev-3.0.3 will fix this problem? Downgrading udisks2 fixed the problem for me! Thanks for the pointer! Adrian

1 0

Slowroll kernel signing key changed to openSUSE:ALP?
by Andrei Borzenkov 01 Oct '23

01 Oct '23

warning: kernel-default-6.4.12-1.13.x86_64.rpm: Header V3 RSA/SHA256 Signature, key ID 1cbb508c: NOKEY /etc/uefi /etc/uefi/certs /etc/uefi/certs/FFF96EF6.crt bor@bor-Latitude-E5450:~/tmp$ rpm -qlp kernel-default-6.4.11-1.1.x86_64.rpm | grep /etc/ warning: kernel-default-6.4.11-1.1.x86_64.rpm: Header V3 RSA/SHA512 Signature, key ID 29b700a4: NOKEY /etc/uefi /etc/uefi/certs /etc/uefi/certs/1F673297.crt bor@bor-Latitude-E5450:~/tmp$ It is expected for the future? I tried to understand how packages actually get into slowroll, but failed. If someone could provide an overview how it works I would certainly appreciate it.

2 4

Puzzling rootless docker issue on TW
by Jim Henderson 01 Oct '23

01 Oct '23

I've been attempting to help a user in the forums[1] with an issue running Docker rootless - he's running into an issue with being able to pull images resulting in the following error: Error response from daemon: Get "https://registry-1.docker.io/v2/": dial tcp: lookup registry-1.docker.io on 10.0.2.3:53: read udp 10.0.2.100:48971->10.0.2.3:53: i/o timeout He also opened a discussion in the Docker forums (who referred him to our forums), and I've been chatting with the guy (Ákos) who was helping him over there in that thread[2]. The puzzling thing for me is that I can't duplicate the issue. I've tried on GNOME and KDE both, and I just cannot reproduce the problem. In troubleshooting the issue together with Ákos, we seem to have isolated the issue to something in the slirp4netns network that's used in that configuration - but nobody involved has customized that setup at all - yet it fails for both of them and doesn't fail for me. The issue *seems* to be that the DNS server set up in that network (10.0.2.3) is not responsive for either of them - but it is for me. Wondering if anyone here has any ideas about what else to look at beyond what we already have in these two threads. I'm completely out of ideas. Jim [1] https://forums.opensuse.org/t/rootless-docker-i-o-timeout-with-docker- pull/169468/12 [2] https://forums.docker.com/t/rootless-docker-i-o-timeout-with-docker- pull/137848 -- Jim Henderson Please keep on-topic replies on the list so everyone benefits

4 11

[opensuse-factory] reproducible builds status 2023-09
by Bernhard M. Wiedemann 01 Oct '23

01 Oct '23

Hi, This month we got many nice patches for Maven/Java-related packages from Fridrich Strba. The ghc-macros patch is still pending in the pipeline, but once that goes through, the number of packages with issues remaining could be as low as 150. Here is the full list: asymptote bash bibletime boost calibre clisp colord crash dbus-sharp2 deepin-desktop-schemas dmd dxvk eclipse efl emacs enlightenment-theme-dark enlightenment-theme-openSUSE enlightenment-theme-openSUSE-ice enlightenment-theme-openSUSE-neon enlightenment-theme-openSUSE-oliveleaf erlang erlang-retest fcitx5-zhuyin fcitx-libpinyin fdo-client gegl gfan gnome-keyring-sharp gnu-cobol go1.13 groovy18 grub2 gsequencer gstreamer-plugins-rs gtk-sharp2 guake gutenprint hevea hub ibus-libzhuyin icedtea-web installation-images java-11-openj9 java-1_8_0-openjdk kanku kdevelop5-plugin-php keepass kitty ksh kubernetes1.24 kubernetes1.25 kubernetes1.26 kubernetes1.27 ldc libcamera libkolabxml libpinyin librcc LiE lilypond lout mage maildir-utils mathgl mingw32-binutils mingw32-gcc mingw32-gmp mingw32-mpc mingw32-mpfr mingw32-pkgconf mingw32-winpthreads mingw32-zlib mingw64-binutils mingw64-gcc mingw64-gmp mingw64-mpc mingw64-mpfr mingw64-pkgconf mingw64-winpthreads mingw64-zlib mono-addins mono-core mozilla-nss nunit ocaml-camlp-streams ooRexx opae openblas ovmf pijul postfish pspp python310 python311 python38 python39 python-iminuit python-numpy python-rdflib python-scikit-image python-scikit-learn qt6-webengine qt-creator rabbitmq-server racket rage-encryption rakudo rash R-base release-notes-openSUSE Rivet rpm-config-SUSE sad sbcl scap-security-guide scheme48 sdcc selinux-policy siproxd smlnj spotifyd tigervnc tiny update-test-trivial wine wrk WSL-DistroLauncher xemacs xemacs-packages and a number of packages with build failures in 2039 or with -j1: gasket-driver gstreamer-plugins-rs icinga2 java-1_8_0-openj9 memcached python310 python311 python38 python39 python-bson python-compileall2 sonic-pi swipl tycho xindy Meanwhile, https://build.opensuse.org/projects/openSUSE:ALP:Experimental:Slowroll/prjc… has all the settings required for bit-reproducible verifiable builds, however there is still an issue with rpm = https://build.opensuse.org/request/show/1112212 that causes variations for many. mls promised a version update that should include that patch. Since my main test-build machine is on the move to Prague atm, I only ran builds over a limited set of packages with known problems. total-packages: 14858 build-tried: 678 build-failed: 25 build-n-a: 4 build-succeeded: 648 build-official-failed+na: 73 build-compare-failed: 130 build-compare-succeeded: 518 verify-failed: 1 verified-semi-reproducible: 1 verified-bit-identical: 0 bit-by-bit-identical: 248 not-bit-by-bit-identical: 401 not-bit-by-bit-identicalcheck: 400 > cat ./seamonkey/.rb.notes => SR 1114150 seamonkey date > cat ./grub2/.rb.notes ?date ; other order? --- old /usr/share/grub2/x86_64-xen/grub.xen (objdump) +++ new /usr/share/grub2/x86_64-xen/grub.xen (objdump) @@ -4896,7 +4896,7 @@ 01319f 00000000 30303030 36303000 30303031 ....0000600.0001 0131af 37353000 30303031 37353000 30303030 750.0001750.0000 0131bf 30303033 34353000 31343530 35353135 0003450.14505515 - 0131cf 34373600 30303135 30333120 30000000 476.0015031 0... + 0131cf 36323600 30303135 30323620 30000000 626.0015026 0... 0131df 00000000 00000000 00000000 00000000 ................ 0131ef 00000000 00000000 00000000 00000000 ................ recent SRs and patches: 1110543 linuxsampler benchmarking 1111485 antlr3 date 1112212 rpm embeds too many build details 1114150 seamonkey date #https://github.com/brndnmtthws/conky/pull/1619 date+order #https://pmbs.links2linux.de/request/show/5828 compat-libgcrypt date #https://pmbs.links2linux.de/request/show/5829 libdvd-audio parallelism #https://pmbs.links2linux.de/request/show/5834 gmerlin-avdecoder CPU #https://pmbs.links2linux.de/request/show/5835 gmerlin-effectv CPU #https://pmbs.links2linux.de/request/show/5836 gmerlin-encoders CPU #https://pmbs.links2linux.de/request/show/5832 ocp strcpy/CPU #https://github.com/lsp-plugins/lsp-plugins-shared/pull/5 date/copyright-year https://github.com/openSUSE/build-compare/issues/65 tycho, meta #https://code.opensuse.org/package/helix/blob/feee6e9d8f1ad5b2396a4bed7917eb6536ae4d57/f/0001-fix-ub-in-diff-gutter.patch ASLR-related non-determinism https://github.com/intel/intel-graphics-compiler/issues/302 ASLR

1 0

New Tumbleweed snapshot 20230929 released!
by Dominique Leuenberger 01 Oct '23

01 Oct '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MozillaFirefox (117.0.1 -> 118.0.1) argyllcms (2.3.1 -> 3.0.0) glibc gnome-music gstreamer (1.22.5 -> 1.22.6) gstreamer-plugins-bad (1.22.5 -> 1.22.6) gstreamer-plugins-base (1.22.5 -> 1.22.6) gstreamer-plugins-good (1.22.5 -> 1.22.6) gstreamer-plugins-libav (1.22.5 -> 1.22.6) gstreamer-plugins-rs (0.10.11 -> 1.22.6) gstreamer-plugins-ugly (1.22.5 -> 1.22.6) libqt5-qtbase libssh libvpx mpg123 (1.31.3 -> 1.32.2) open-vm-tools openssl-3 (3.1.2 -> 3.1.3) openssl (3.1.2 -> 3.1.3) perl-HTTP-Message (6.44 -> 6.450.0) perl-Net-DNS (1.39 -> 1.400.0) python-greenlet (2.0.2 -> 3.0.0~rc3) python-qt5-sip (12.12.1 -> 12.12.2) rubygem-agama (3.devel43 -> 4) sddm sdl12_compat (1.2.64 -> 1.2.68) smartmontools xf86-video-siliconmotion (1.7.9 -> 1.7.10) yast2-python-bindings (4.6.0 -> 5.0.1) === Details === ==== MozillaFirefox ==== Version update (117.0.1 -> 118.0.1) Subpackages: MozillaFirefox-translations-common - Mozilla Firefox 118.0.1 MFSA 2023-44 (bsc#1215814) * CVE-2023-5217 (bmo#1855550), Heap buffer overflow in libvpx - Mozilla Firefox 118.0 MFSA 2023-41 (bsc#1215575) * CVE-2023-5168 (bmo#1846683) Out-of-bounds write in FilterNodeD2D1 * CVE-2023-5169 (bmo#1846685) Out-of-bounds write in PathOps * CVE-2023-5170 (bmo#1846686) Memory leak from a privileged process * CVE-2023-5171 (bmo#1851599) Use-after-free in Ion Compiler * CVE-2023-5172 (bmo#1852218) Memory Corruption in Ion Hints * CVE-2023-5173 (bmo#1823172) Out-of-bounds write in HTTP Alternate Services * CVE-2023-5174 (bmo#1848454) Double-free in process spawning on Windows * CVE-2023-5175 (bmo#1849704) Use-after-free of ImageBitmap during process shutdown * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824, bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983, bmo#1851195) Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3 - requires NSS 3.93 - add mozilla-bmo1822730.patch - deactivated KDE integration temporarily (removed mozilla-kde.patch and firefox-kde.patch for now) ==== argyllcms ==== Version update (2.3.1 -> 3.0.0) - Update to 3.0.0: * Updated ccast/axTLS to get ChromCast working again with latest Google CC operating software. * Extensive re-write/re-factor of icclib to make it more future-proof. See https://www.argyllcms.com/doc/ChangesSummary.html for details. * Added ref/ColorCheckerPassport.ti2 and ref/ColorCheckerHalfPassport.ti2 to allow measuring ColorCheckerPassport with instrument. * Fixed bug in Munki spectro hi-res mode with some instruments. Luminance matching between normal and hi-res was sometimes quite poor. * Added ARGYLL_CREATE_DISPLAY_PROFILE_WITHOUT_CHAD environment variable. * Changed colprof -U flag to -u. Changed dispcal -J flag to -K to accommodate a potential new flag for colprof and dispcal. * Added workaround for bug in madHcNet64.dll32/64.dll which sometimes causes failure. * Added delay after USB set_config on OS X to help Spyder 3/4 on Ventura OS. * Added -Y parameter to dispwin to override automatic patch delay. * Changed i1d3 driver to cope with Rev. B "0x83" error robustly. This should fix any issues measuring low level Red only patch values on OLED displays, but with slower measurements when this occurs. * Added spotread -Y S option to save spectral sensitivity curves and added corresponding support in i1d3 driver. This allows for comparison of different instruments factory calibrations. * Added a -h scale parameter to dispread, to allow the automatic instrument calibration test patch values to be scaled down from their default 100% value. This is useful with HDR displays. * Added manifest to MSWindows executables to use UTF-8 code pages on Windows 1903 and later. This should improve non-ASCII filename and path handling. * Added a Violet colorant to the targen colorant list. * Fixed problem with OS X 64 bit backwards compatibility where it failed to locate serial instruments when the binaries are run on OS X V12 or latter machines. * Fixed bug in i1Pro3 driver where it was not returning the correct measurement conditions enum. * Fixed spotread so that ambient measure for monochrome sources doesn't error out due to bad CCT/VCT/VDT. Also change -T so that it suppresses CCT etc. if ambient mode is used. * Added hacky workaround to strange Mac M2/rosetta bug in del_i1proimp(). - Make the argyllcms-doc package noarch. ==== glibc ==== Subpackages: glibc-32bit glibc-devel glibc-extra glibc-lang glibc-locale glibc-locale-base nscd - fstat-implementation.patch: io: Do not implement fstat with fstatat - getaddrinfo-memory-leak.patch: Fix leak in getaddrinfo introduced by the fix for CVE-2023-4806 (CVE-2023-5156, bsc#1215714, BZ #30884) - getcanonname-use-after-free.patch: getaddrinfo: Fix use after free in getcanonname (CVE-2023-4806, bsc#1215281, BZ #30843) - Do not build any cross packages in SLES - no-aaaa-read-overflow.patch: Stack read overflow with large TCP responses in no-aaaa mode (CVE-2023-4527, bsc#1215280, BZ #30842) - Add systemd to passwd, group and shadow lookups (jsc#PED-5188) - ppc64-flock-fob64.patch: io: Fix record locking contants for powerpc64 with __USE_FILE_OFFSET64 (BZ #30804) - libio-io-vtables.patch: libio: Fix oversized __io_vtables - call-init-proxy-objects.patch: elf: Do not run constructors for proxy objects - dtors-reverse-ctor-order.patch: elf: Always call destructors in reverse constructor order (BZ #30785) - intl-c-utf-8-like-c-locale.patch: intl: Treat C.UTF-8 locale like C locale (BZ #16621) - glibc-disable-gettext-for-c-utf8.patch: Removed ==== gnome-music ==== Subpackages: gnome-music-lang - Explicitly create the pycache/.pyc files, not relying on the generation done by meson. Should make the package reproducible. ==== gstreamer ==== Version update (1.22.5 -> 1.22.6) Subpackages: gstreamer-lang gstreamer-utils libgstreamer-1_0-0 typelib-1_0-Gst-1_0 - Update to version 1.22.6: + Highlighted bugfixes: - Security fixes for the MXF demuxer and H.265 video parser - Fix latency regression in H.264 hardware decoder base class - androidmedia: fix HEVC codec profile registration and fix coded_data handling - decodebin3: fix switching from a raw stream to an encoded stream - gst-inspect: prettier and more correct signal and action signals printing - rtmp2: Allow NULL flash version, omitting the field, for better RTMP server compatibility - rtspsrc: better compatibility with buggy RTSP servers that don't set a clock-rate - rtpjitterbuffer: fix integer overflow that led to more packets being declared lost than have been lost - v4l2: fix video encoding regression on RPi and fix support for left and top padding - waylandsink: Crop surfaces to their display width height - cerbero: Recognise Manjaro; add Rust support for MSVC ARM64; cmake detection fixes - Various bug fixes, memory leak fixes, and other stability and reliability improvements + gstreamer: - gst-inspect: prettier and more correct signal printing, and print action signals in g_signal_emit_by_name() format - gst-launch: Disable fault signal handlers on macOS - Rebase reduce-required-meson.patch ==== gstreamer-plugins-bad ==== Version update (1.22.5 -> 1.22.6) Subpackages: gstreamer-plugins-bad-lang libgstadaptivedemux-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstcuda-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstphotography-1_0-0 libgstplay-1_0-0 libgstplayer-1_0-0 libgstsctp-1_0-0 libgsttranscoder-1_0-0 libgsturidownloader-1_0-0 libgstva-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 libgstwebrtcnice-1_0-0 - Update to version 1.22.6: + audiolatency: Forward latency query and event upstream + av1parser: Fix segmentation params update + codecparsers: Fix MPEG-1 aspect ratio table + d3d11convert: Passthrough allocation query on same caps + h264decoder: Update latency dynamically + h265parser: - Allow partially broken hvcC data - Fix possible overflow using max_sub_layers_minus1 + hlssink2: Always use forward slash separator + mdns: Fix a crash on context error + mxfdemux: Fix integer overflow causing out of bounds writes when handling invalid uncompressed video and check channels for AES3 + nvencoder: Fix negotiation error when interlace-mode is unspecified + rtmp2: Allow NULL flash version, omitting the field + rtmp2sink: fix crash if message conversion failed + transcodebin: Fixes for upstream selectable support + va: Fix in error logs functions mismatches + waylandsink: - Crop surfaces to their display width height - Fix cropping for video with non-square aspect ratio + webrtc: Fix docs for create-data-channel action signal - Rebase reduce-required-meson.patch ==== gstreamer-plugins-base ==== Version update (1.22.5 -> 1.22.6) Subpackages: gstreamer-plugins-base-lang libgstallocators-1_0-0 libgstapp-1_0-0 libgstaudio-1_0-0 libgstfft-1_0-0 libgstgl-1_0-0 libgstpbutils-1_0-0 libgstriff-1_0-0 libgstrtp-1_0-0 libgstrtsp-1_0-0 libgstsdp-1_0-0 libgsttag-1_0-0 libgstvideo-1_0-0 typelib-1_0-GstAudio-1_0 typelib-1_0-GstPbutils-1_0 typelib-1_0-GstTag-1_0 typelib-1_0-GstVideo-1_0 - Update to version 1.22.6: + audio: Make sure to stop ringbuffer on error + decodebin3: - Avoid identity, sinkpad, parsebin leakage when reset input - Ensure the slot is unlinked before linking to decoder + sdp: - Fix wrong debug log error message for missing clock-rate in caps - Parse zero clock-rate as default - Rebase reduce-required-meson.patch ==== gstreamer-plugins-good ==== Version update (1.22.5 -> 1.22.6) Subpackages: gstreamer-plugins-good-extra gstreamer-plugins-good-gtk gstreamer-plugins-good-jack gstreamer-plugins-good-lang gstreamer-plugins-good-qtqml - Update to version 1.22.6: + adaptivedemux2: fix memory leak + pulsedeviceprovider: fix incorrect usage of GST_ELEMENT_ERROR + qt: - Unbreak build with qt-egl enabled but viv_fb missing - Fix searching of qt5/qt6 tools with qmake in Meson + qtdemux: - Fix premature EOS when some files are played in push mode - Attach cbcs crypt info at the right moment + rtpjitterbuffer: Avoid integer overflow in max saveable packets calculation with negative offset + videoflip: fix concurrent access when modifying the tag list + v4l2: - allocator: Don't close foreign dmabuf - bufferpool: . Fix large encoded stream regression . Problems when checking for truncated buffer - Fix support for left and top padding + v4l2object: clear format lists if source change event is received - Rebase reduce-required-meson.patch - Add libqt5-linguist BuildRequires: New dependency. ==== gstreamer-plugins-libav ==== Version update (1.22.5 -> 1.22.6) - Update to version 1.22.6: + No changes, stable bump only. - Rebase reduce-required-meson.patch. ==== gstreamer-plugins-rs ==== Version update (0.10.11 -> 1.22.6) - Update to version 1.22.6: + fallbackswitch: locking/deadlock fixes + onvifmetadataparse: Skip metadata frames with unrepresentable UTC time + transcriberbin: Configure audioresample in front of transcriber + webrtcsink: - Propagate GstContext messages - Add support for d3d11 memory and qsvh264enc - Fix TWCC extension adding - Don't forget to setup encoders for discoveries - NVIDIA V4L2 encoders always require NVMM memory + meson: Fix handling of optional deps, and don't require Python-3.8 - Switch service to do the tag released with the other gstreamer packages. Gstreamer-plugins-rs are now released at the same time as the gstreamer main packages. - Switch compression to zst both in service and tarball produced. ==== gstreamer-plugins-ugly ==== Version update (1.22.5 -> 1.22.6) Subpackages: gstreamer-plugins-ugly-lang - Update to version 1.22.6: + No changes, stable bump only. - Rebase reduce-required-meson.patch. ==== libqt5-qtbase ==== Subpackages: libQt5Concurrent5 libQt5Core5 libQt5DBus5 libQt5Gui5 libQt5Network5 libQt5OpenGL5 libQt5PrintSupport5 libQt5Sql5 libQt5Sql5-mysql libQt5Sql5-sqlite libQt5Test5 libQt5Widgets5 libQt5Xml5 libqt5-qtbase-platformtheme-gtk3 - switch icu-devel requires to pkgconfig to allow switching libicu versions ==== libssh ==== Subpackages: libssh-config libssh4 - Enable crypto-policies support: [bsc#1211301] * Rebase libssh_client.config libssh_server.config ==== libvpx ==== - Fixing CVE-2023-5217 heap buffer overflow (boo#1215778) added CVE-2023-5217.patch ==== mpg123 ==== Version update (1.31.3 -> 1.32.2) Subpackages: libmpg123-0 mpg123-openal - Update to version 1.32.2 * libmpg123: Re-introduce _64 symbols on native 64 bit offset platforms. This was a regression since 1.31 series. Sorry, too much cleanup, not enough testing. * build: + Better O_LARGEFILE logic, avoiding redefintion. * ports/cmake: + Require C99 (bug 360, among other points, thanks to Ozkan Sezer). + Fix broken O_LARGEFILE logic (bug 360). + Typo fix and cleanup, also manual SSE switch for Android on old x86 (bug 359). - Update to version 1.32.1 * Include man pages again in tarball and install. We cannot avoid the empty man directory when disabling programs with autoconf. * Fix signal handler prototype, avoiding some justified warnings. * ports/cmake: + Include CheckTypeSize, which seems to be needed sometimes + Avoid O_LARGEFILE redefinition, logic closer to autoconf. - Update to version 1.32.0 * build + Move version handling out of configure.ac to ease other build systems. + Include "fmt123.h" instead of <fmt123.h> in main API headers to make it more likely the correct one is included (at least gcc picks the one in the same directory as the including header first). + All headers are build-independent now. + Fix build for picky linkers by avoiding definition of wrap_getcpuflags() where it is not used (spurious linker error to non-exitent getcpuflags(), bug 353). + Handle deprecation of C99 detection macro in autoconf 2.70. + No use of AC_SYS_LARGEFILE anymore for explicit handling and differing choice for the libraries and frontend programs. + Added --enable-portable and --disable-largefile to configure, removing the other largefile-related options. + Added --disable-components --enable-libmpg123 to only build libmpg123 (and likewise --enable-libout123, - -enable-libout123-modules, --enable-libsyn123) to autoconf build. CMake build has something similar with BUILD_PROGRAMS and BUILD_LIBOUT123, which leave only libmpg123 and libsyn123 if disabled). + Consistent formatting of ./configure --help with AS_HELP_STRING(). * mpg123 + Added --libversion. + Added proper A-B looping with terminal control key 'o', renamed --pauseloop to --presetloop. + Really get rid of mpg123_position() usage. (It was all lies before!) + Fix terminal progress info when seeking in stopped mode (1.31 regression). + Patch up interaction of output buffer with generic remote control, adding non-interruptible drain after P 3, and dropping buffer on QUIT. + Uppercase some generic control replies for consinstency: SILENCE, PROGRESS, MUTE, UNMUTE * libmpg123, libout123, libsyn123 + Bumped API version for version query functions. + Replaced nearly all symbol renames with explicit INT123_ prefix declarations (intsym.h close to empty now). * libout123 + Add sleep builtin output module (silent, but proper timing). * libsyn123 + Introduced SYN123_PORTABLE_API for an API without off_t and ssize_t (see NEWS.libsyn123). * libmpg123 + Internal I/O using explicit largefile support via off64_t, lseek64, fallback to plain 32 bit off_t. + Added explicit 64 bit API with 64 suffix (mpg123_tell64(), not mpg123_tell_64()). This allows full avoidance of ambiguus off_t. The API is always using 64 bit integers, regardless of internal implementation. + Introduced MPG123_PORTABLE_API for an API subset without off_t and ssize_t. + Made mpg123_seek() and friends ignore offset sign for SEEK_END (always seeking towards beginning, assuming negative offset) to make lseek()-conforming usage possible. Seeking beyond the end never made sense, so no loss of valid functionality. * Overall use of INT123_strerror(), trying to use thread-safe strerror_l() if possible. ==== open-vm-tools ==== Subpackages: libvmtools0 open-vm-tools-desktop - 15 sp4 currently uses open-vm-tools rpms from 15 sp3. As such, enable the spec file fix for bug (bsc#1205927) for 15 sp3 onwards. ==== openssl-3 ==== Version update (3.1.2 -> 3.1.3) Subpackages: libopenssl3 libopenssl3-32bit - Update to 3.1.3: * Fix POLY1305 MAC implementation corrupting XMM registers on Windows (CVE-2023-4807) ==== openssl ==== Version update (3.1.2 -> 3.1.3) - Update to 3.1.3 ==== perl-HTTP-Message ==== Version update (6.44 -> 6.450.0) - updated to 6.45 see /usr/share/doc/packages/perl-HTTP-Message/Changes 6.45 2023-09-27 14:27:31Z - Allow for file ownership conflicts with Docker and GitHub Actions (GH#193) (Olaf Alders) - Add the 'status_code' function for getting all status codes as hash (GH#194) (Dai Okabayashi) ==== perl-Net-DNS ==== Version update (1.39 -> 1.400.0) - updated to 1.40 see /usr/share/doc/packages/perl-Net-DNS/Changes ==== python-greenlet ==== Version update (2.0.2 -> 3.0.0~rc3) - update to 3.0.0~rc3: * Fix an intermittent error during process termination on some platforms (GCC/Linux/libstdc++). * Fix some potential bugs (assertion failures and memory leaks) in previously-untested error handling code. In some cases, this means that the process will execute a controlled ``abort()`` after severe trouble when previously the process might have continued for some time with a corrupt state. It is unlikely those errors occurred in practice. * Fix some assertion errors and potential bugs with re-entrant switches. * Fix a potential crash when certain compilers compile greenlet with high levels of optimization. The symptom would be that switching to a greenlet for the first time immediately crashes. * Fix a potential crash when the callable object passed to the greenlet constructor (or set as the ``greenlet.run`` attribute) has a destructor attached to it that switches. Typically, triggering this issue would require an unlikely subclass of ``greenlet.greenlet``. * Python 3.11+: Fix rare switching errors that could occur when a garbage collection was triggered during the middle of a switch, and Python-level code in ``__del__`` or weakref callbacks switched to a different greenlet and ultimately switched back to the original greenlet. This often manifested as a ``SystemError``: "switch returned NULL without an exception set." * Python 3.12: Fix walking the frame stack of suspended greenlets. Previously accessing ``glet.gr_frame.f_back`` would crash due to `changes in CPython's undocumented internal frame handling * Make the platform-specific low-level C/assembly snippets stop using the ``register`` storage class. Newer versions of standards remove this storage class, and it has been generally ignored by many compilers for some time. See `PR 347 <https://github.com/python-greenlet/greenlet/pull/347>`_ from Khem Raj. * Add initial support for Python 3.12. See `issue <https://github.com/python-greenlet/greenlet/issues/323>`_ and `PR <https://github.com/python-greenlet/greenlet/pull/327>`_; thanks go to (at least) Michael Droettboom, Andreas Motl, Thomas A Caswell, raphaelauv, Hugo van Kemenade, Mark Shannon, and Petr Viktorin. * Remove support for end-of-life Python versions, including Python 2.7, Python 3.5 and Python 3.6. * Require a compiler that supports ``noinline`` directives. See `issue 271 <https://github.com/python-greenlet/greenlet/issues/266>`_. * Require a compiler that supports C++11. ==== python-qt5-sip ==== Version update (12.12.1 -> 12.12.2) - Update to ABI version 12.12.2 * Match python-sip6-devel 6.7.10+ ==== rubygem-agama ==== Version update (3.devel43 -> 4) - Version 4 - Do not automatically probe after selecting a new product (gh#openSUSE/agama#748). - Use a single D-Bus service to expose the manager and the users settings (gh#openSUSE/agama#753, follow-up of gh#openSUSE/agama#729). - Do not crash when it is not possible to handle a product change in the manager service (related to bsc#1215197). - When selecting the product, do not perform any change if the product is still the same. - The software and the storage services do not dispatch actions during progress reporting anymore (related to bsc#1215197). - New storage proposal settings (gh#openSUSE/agama#738). - Extend the Ruby-based services logs with information about each step (gh#openSUSE/agama#732). - Raise the D-Bus service start timeout for troubleshoting purposes (related to bsc#1214737). - Adapt the locale and questions clients to use the same D-Bus service (gh#openSUSE/agama#729). - Respect UI locale in dbus services (gh#openSUSE/agama#725) - Copy the proxy configuration to the target system when needed (bsc#1212677, gh#openSUSE/agama#711). - Install the ppc64-diag package when running on ppc64le (related to bsc#1206898). - Set the manager service as busy during the startup phase (bsc#1213194). - Add proxy setup support (bsc#1212677, gh#openSUSE/agama#696). ==== sddm ==== Subpackages: sddm-branding-openSUSE - Remove unnecessary Requires(post*) - Config file changes: * No longer own sddm.conf. The migration for this conflicts with the other migration code, so: * Drop code for migrating from Current=maui (Leap <= 42.2) and the monolithic /etc/sddm.conf (Leap <= 42.3) - Add patch and drop unnecessary BuildRequirements of extra-cmake-modules and kf5-filesystem: * 0001-Drop-unnecessary-ECM-dependency-and-dead-uninstall-t.patch - Split the greeter into a subpackage and use _multibuild to build both daemon and greeter for Qt 5 and Qt 6. Add patches to allow for greeter coinstallation: * 0002-Make-sddm-greeter-for-Qt-5-and-Qt-6-coinstallable.patch * 0003-Let-themes-specify-the-used-version-of-Qt.patch - Refresh 0001-Read-the-DISPLAYMANAGER_AUTOLOGIN-value-from-sysconf.patch - Don't set CMAKE_BUILD_TYPE=Release - Make branding packages noarch - Add %check ==== sdl12_compat ==== Version update (1.2.64 -> 1.2.68) - Update to release 1.2.68 * sync dr_mp3 with mainstream * Add null check to SDL_LoadWAV_RW to avoid crashes * Add quirk entry: deactivate GL scaling for Trine (2011 Humble Bundle version) and Mark of the Ninja (HB) * Add quirk entry: set Hyperspace Delivery Boy to run in 16bpp mode * Add quirk handling: add ability to force XInitThreads before main() * Allocate the video surface object statically as a global * Add a hint to clamp the reported screen bit depth ==== smartmontools ==== - Do not quit with an error when no drives to monitor are available (bsc#990406 bsc#1167051). - Add smartd_service_dont_quit.patch - Refresh harden_smartd.service.patch - Run through spec-cleaner, use autosetup ==== xf86-video-siliconmotion ==== Version update (1.7.9 -> 1.7.10) - Update to version 1.7.10 * Update README for gitlab migration * Update configure.ac bug URL for gitlab migration * Build xz tarballs instead of bzip2 * Fix spelling/wording issues * gitlab CI: add a basic build test * gitlab CI: stop requiring Signed-off-by in commits * constify some char * declarations * Quiet -Wempty-body warning * Replace malloc()+snprintf() with Xasprintf() * Replace malloc()+memset() with calloc() * Remove "All rights reserved" from Oracle copyright notices * gitlab CI: ensure libtool is installed in build container * autogen.sh: Implement GNOME Build API * autogen.sh: use quoted string variables * autogen: add default patch prefix * configure: Drop AM_MAINTAINER_MODE * autogen.sh: use exec instead of waiting for configure to finish ==== yast2-python-bindings ==== Version update (4.6.0 -> 5.0.1) - Fix inspect.getargspec() removed in python3.11; (bsc#1215226); - 5.0.1 - 5.0.0 (#bsc1185510)

1 0