November 2023 - openSUSE Factory - openSUSE Mailing Lists

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 05 Nov '23

05 Nov '23

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have had problems for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - python-digitalocean: Fails to build - python-moto: Fails to build - python-requests-cache: Fails to build Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

1 0

New Tumbleweed snapshot 20231103 released!
by Dominique Leuenberger 04 Nov '23

04 Nov '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: SDL2 (2.28.4 -> 2.28.5) glslang libvirt (9.8.0 -> 9.9.0) python-libvirt-python (9.8.0 -> 9.9.0) python-mailman (3.3.8 -> 3.3.9) qt6-base rubygem-addressable (2.8.4 -> 2.8.5) shaderc sssd xfconf (4.18.1 -> 4.18.3) yast2-storage-ng (5.0.3 -> 5.0.4) === Details === ==== SDL2 ==== Version update (2.28.4 -> 2.28.5) - Update to release 2.28.5 * Added support for the HP HyperX Clutch Gladiate controller * Fixed a crash if a controller is disconnected while SDL is opening it * Fixed a crash on Linux if XInput2 isn't available at runtime ==== glslang ==== - Fix include dirs for headers of SPIRV and StandAlone. According to the setting in %{_libdir}/cmake/glslang/glslang-targets.cmake, headers of SPIRV and StandAlone should be installed in %{_includedir}/External ==== libvirt ==== Version update (9.8.0 -> 9.9.0) Subpackages: libvirt-client libvirt-daemon-common libvirt-daemon-config-network libvirt-daemon-driver-interface libvirt-daemon-driver-libxl libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-lock libvirt-daemon-log libvirt-daemon-plugin-lockd libvirt-daemon-proxy libvirt-daemon-qemu libvirt-daemon-xen libvirt-libs - Update to libvirt 9.9.0 - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432 - Many incremental improvements and bug fixes, see https://libvirt.org/news.html#v9-9-0-2023-11-01 ==== python-libvirt-python ==== Version update (9.8.0 -> 9.9.0) - Update to 9.9.0 - Add all new APIs and constants in libvirt 9.9.0 - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432 ==== python-mailman ==== Version update (3.3.8 -> 3.3.9) - Require authheaders >= 0.15.2 - Update to version 3.3.9 * See https://gitlab.com/mailman/mailman/-/blob/v3.3.9/src/mailman/docs/NEWS.rst or the file NEWS.rst in this package - Removed mailman-fix-importlib-resources.patch ==== qt6-base ==== Subpackages: libQt6Core6 libQt6DBus6 libQt6Gui6 libQt6Network6 libQt6OpenGL6 libQt6Sql6 libQt6Test6 libQt6Widgets6 qt6-network-tls qt6-platformtheme-gtk3 - Add upstream changes: * 0001-xcb-replace-a-warning-with-debug-info-in-qxcbconnect.patch (QTBUG-117820) * 0001-a11y-fix-race-condition-on-atspi-startup-on-Wayland.patch - Turn FEATURE_forkfd_pidfd off until QTBUG-117954 gets fixed ==== rubygem-addressable ==== Version update (2.8.4 -> 2.8.5) - # Addressable 2.8.5 - Fix thread safety issue with encoding tables ([#515]) - Define URI::NONE as a module to avoid serialization issues ([#509]) - Fix YAML serialization ([#508]) [#508]: https://github.com/sporkmonger/addressable/pull/508 [#509]: https://github.com/sporkmonger/addressable/pull/509 [#515]: https://github.com/sporkmonger/addressable/pull/515 ==== shaderc ==== - Adjust for glslang-nonstd-devel switching paths ==== sssd ==== Subpackages: libsss_certmap0 libsss_idmap0 libsss_nss_idmap0 sssd-krb5-common sssd-ldap - Offer the sssd.conf template as %doc (for examples, do actually see the "Examples" section of the sssd.conf(5) manpage) ==== xfconf ==== Version update (4.18.1 -> 4.18.3) Subpackages: libxfconf-0-3 typelib-1_0-Xfconf-0 xfconf-lang - Fix usage of %%lang_package - Update to version 4.18.3 * cache: Fix overwritten error * cache: Fix uncached value - Fixes boo#1216682 - Update to version 4.18.2 * Cache property-not-found responses in XfconfCache * Don't reset scheduled save timer on every write * xfconf-query: Sort channel list (-l or -m alone) * docs: Fix transfer type of xfconf_list_channels() * docs: Add clarification about bindings - Use lang_package as bnc#513786 has been closed as fixed almost 8 years ago. ==== yast2-storage-ng ==== Version update (5.0.3 -> 5.0.4) - Encryption method TpmFde to be used by Agama (and later by YaST) for setting up LUKS2 devices that are unlocked during boot using a TPM chip (gh#yast/yast-storage-ng#1088, related to bsc#1210512) - 5.0.4

1 0

New Tumbleweed snapshot 20231102 released!
by Dominique Leuenberger 03 Nov '23

03 Nov '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: avahi avahi-glib2 certmonger ell (0.58 -> 0.59) fde-tools (0.7.1 -> 0.7.2) gjs gnome-control-center gnome-shell (45.0 -> 45.1) gnome-shell-extensions (45.0 -> 45.1) gpg2 kdump (1.9.7 -> 1.9.8) kio-fuse ksystemstats5 (5.27.8 -> 5.27.9) libHX (4.15 -> 4.16) libostree (2023.6 -> 2023.7) libxml2 (2.10.4 -> 2.11.5) libxml2-python (2.10.4 -> 2.11.5) mutter (45.0+45 -> 45.1) nbdkit (1.36.0 -> 1.36.1) okular patterns-base pipewire (0.3.83 -> 0.3.84) postgresql16 publicsuffix (20230930 -> 20231028) python-authheaders (0.14.1 -> 0.15.3) python-httpx raptor (2.0.15 -> 2.0.16) redland rubygem-actioncable-7.0 (7.0.5.1 -> 7.0.8) rubygem-actionmailer-7.0 (7.0.5.1 -> 7.0.8) rubygem-actionpack-7.0 (7.0.5.1 -> 7.0.8) rubygem-actionview-7.0 (7.0.5.1 -> 7.0.8) rubygem-activejob-7.0 (7.0.5.1 -> 7.0.8) rubygem-activemodel-7.0 (7.0.5.1 -> 7.0.8) rubygem-activesupport-7.0 (7.0.5.1 -> 7.0.8) rubygem-bcrypt (3.1.18 -> 3.1.19) rubygem-ruby-dbus samba (4.19.2+git.322.7e9201cef5 -> 4.19.2+git.324.fa0b54b91b) sdbootutil (1+git20231023.873adb9 -> 1+git20231026.f43c33c) systemd tracker-miners (3.6.1 -> 3.6.2) util-linux util-linux-systemd yast2 (5.0.2 -> 5.0.3) yast2-installation (5.0.1 -> 5.0.2) yast2-update (5.0.0 -> 5.0.1) === Details === ==== avahi ==== Subpackages: avahi-lang libavahi-client3 libavahi-client3-32bit libavahi-common3 libavahi-common3-32bit libavahi-core7 - Add avahi-CVE-2023-38470.patch: Ensure each label is at least one byte long (bsc#1215947, CVE-2023-38470). ==== avahi-glib2 ==== Subpackages: libavahi-glib1 libavahi-gobject0 libavahi-ui-gtk3-0 - Add avahi-CVE-2023-38470.patch: Ensure each label is at least one byte long (bsc#1215947, CVE-2023-38470). ==== certmonger ==== - dbus-daemon is now split out into a separate package. ==== ell ==== Version update (0.58 -> 0.59) - Update to release 0.59 * Add l_safe_ato* functions to the exported symbol list. ==== fde-tools ==== Version update (0.7.1 -> 0.7.2) - Update to version 0.7.2 + Add help output for the command tpm-authorize + Improve the multi-devices support ==== gjs ==== Subpackages: libgjs0 typelib-1_0-GjsPrivate-1_0 - Add 3cae384aaf15dec6653b1a5400032c2c2e5dc34c.patch: module: Canonicalize import specifier before inserting it in registry. - Explicitly BuildRequire /usr/bin/dbus-run-session: needed by the test suite. ==== gnome-control-center ==== Subpackages: gnome-control-center-color gnome-control-center-goa gnome-control-center-lang gnome-control-center-user-faces - Rebase gnome-control-center-disable-error-message-for-NM.patch, gnome-control-center-info-never-use-gnome-software.patch, gnome-control-center-more-power-button-actions.patch and gnome-control-center-bring-back-firewall-zone.patch(bsc#1216601). ==== gnome-shell ==== Version update (45.0 -> 45.1) Subpackages: gnome-extensions gnome-shell-calendar gnome-shell-lang - Update to version 45.1: + Fix scroll handling on sliders + overview: Handle unredirection as part of the state transition + Handle DESKTOP windows during workspace animations + Fix unexpected focus changes with multi-window apps + Improve recording indicator in light style + Fix calendar popup shrinking on date changes + Fixed crashes + Misc. bug fixes and cleanups + Updated translations. - Update to version 45.0+20: + workspaceAnimation: Handle DESKTOP windows + st/scroll-view: Use clutter_actor_get_effect() to get fade effect + overview: Handle unredirection in OverviewShown state machine + status/system: Use Intl to format battery percentage + slider: - Ignore left/right scroll directions - Fix check for emulated scroll events + Updated translations. - Add gnome-shell_nb_fix_trans.patch: Fix typo in translation breaking gnome-shell calendar overview. ==== gnome-shell-extensions ==== Version update (45.0 -> 45.1) Subpackages: gnome-shell-classic gnome-shell-extensions-common gnome-shell-extensions-common-lang - Update to version 45.1: + workspace-indicator: Fix initial preview visibility + screenshot-window-sizer: Fix cycling between sizes backwards + Misc. bug fixes and cleanups + Updated translations. ==== gpg2 ==== Subpackages: dirmngr gpg2-lang - Fix the build in SLE and Leap by adding an exclude in the files section for the dirmngr's systemd user units. [jsc#PED-7093] ==== kdump ==== Version update (1.9.7 -> 1.9.8) - upgrade to version 1.9.8 * drop obsolete dependency on systemd-sysvinit (bsc#1216745) ==== kio-fuse ==== - dbus-run-session now needs to be explicitly required for the test suite. ==== ksystemstats5 ==== Version update (5.27.8 -> 5.27.9) Subpackages: ksystemstats5-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 - dbus-1 no longer provides dbus-run-session, so BuildRequire it explicitly ==== libHX ==== Version update (4.15 -> 4.16) - Update to release 4.16 * Add HX_strtoull_nsec to parse time period and emit nanoseconds * doc: specify return value and semantics for HXio_fullread, HXio_fullwrite, HX_sendfile ==== libostree ==== Version update (2023.6 -> 2023.7) Subpackages: libostree-1-1 - Update to version 2023.7: + support for a "transient etc" + HTTP layer now retries requests by default + a longstanding bug was fixed where ostree would still try to fetch "loose" objects even when we were doing a delta pull + Fix variety of clang-analyzer fixes (some false positives, some real memory leaks, etc) ==== libxml2 ==== Version update (2.10.4 -> 2.11.5) Subpackages: libxml2-2 libxml2-tools - Add python312.patch to make it compatible with python 3.12 https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/226 - Use pyproject_wheel and pyproject_install macros instead of python_build, python_install ==== libxml2-python ==== Version update (2.10.4 -> 2.11.5) - Add python312.patch to make it compatible with python 3.12 https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/226 - Use pyproject_wheel and pyproject_install macros instead of python_build, python_install ==== mutter ==== Version update (45.0+45 -> 45.1) Subpackages: mutter-lang - Update to version 45.1: + Fix filtering keybinding events in presence of grabs + Fix direct scanout support when using integer scaling + Fix capitalization of some keys when caps lock is on + Fix vsync regression + Fix visibility of software cursors when using direct scanout + Fix artifacts at the bottom of some surfaces + Discard monitor configs with fractional scale when unusable + Apply track point settings + xwayland: Enable XDG portal only when not nested + Inhibit real-time scheduling when mode setting + Don't delay frame updates after idle period + Fix running Xwayland in headless setup with nvidia driver + wayland: Send keyboard modifiers after the enter event + Fixed crashes + Misc. bug fixes and cleanups + Updated translations. - Update to version 45.0+61: + backend: - Introduce helpers for turning from/to clutter/evdev buttons - Use helper to translate from/to clutter/evdev button codes + clutter/frame-clock: - Simplify next_presentation_time_us calculation - Start next update ASAP after idle period + cogl/onscreen: Add missing error untrap calls + input-capture: - Check barriers don't extend into nonexisting monitors - Fix off-by-one for barrier validation + renderer/native: - Add a new has_addfb2 property - Send modifiers even without AddFb2 + screen-cast/stream-src: - Assert that dmabuf handle lookup succeeds - Calculate stride after adding handle to hash table + tests/clutter/event-delivery: Avoid race with stage update + tests/clutter/frame-clock*: Use clutter_frame_get_target_presentation_time + wayland/dma-buf: Advertise INVALID modifier without AddFb2 + wayland: Send keyboard modifiers after the enter event + input-capture: Add more barrier tests, mostly for invalid barriers ==== nbdkit ==== Version update (1.36.0 -> 1.36.1) Subpackages: nbdkit-basic-filters nbdkit-basic-plugins nbdkit-curl-plugin nbdkit-nbd-plugin nbdkit-python-plugin nbdkit-server nbdkit-ssh-plugin nbdkit-vddk-plugin - Update to version 1.36.1: * Version 1.36.1. * python: Document nbdkit.disconnect(force) helper function * python: List helper functions in alphabetical order * python: Clarify possible handle values returned by open() method * tests: Fix incorrect comment in tests * docs: Remove references to -U - when it is implicit ==== okular ==== Subpackages: okular-lang - Rework patch that informs the user about missing postscript support and how to install it. Replace patch: * 0001-Inform-users-about-the-okular-spectre-package-in-the.patch with * 0001-Inform-users-about-the-okular-spectre-package.patch ==== patterns-base ==== Subpackages: patterns-base-apparmor patterns-base-base patterns-base-basesystem patterns-base-basic_desktop patterns-base-console patterns-base-enhanced_base patterns-base-minimal_base patterns-base-selinux patterns-base-sw_management patterns-base-transactional_base patterns-base-x11 patterns-base-x11_enhanced - Do not recommend nscd anymore. NIS is being phased out and modern technologies like sssd are not compatible with it anyway. ==== pipewire ==== Version update (0.3.83 -> 0.3.84) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-jack pipewire-lang pipewire-libjack-0_3 pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Update to version 0.3.84 (1.0RC4): * Highlights - Fix a regression with openal because the queued buffers in the stream were not reported correctly. - Fix a bug in port busy counters that could cause random silent links. - Fix a regression in echo-cancel because it was not reporting its streams as ASYNC. - Fix a JACK regression where not all ports were enumerated in all cases. - Many more fixes and improvements. * PipeWire - pw_stream now reports the queued buffers more accurately. This fixes a regression when using openal. (#3592) - The port busy counters were not updated correctly in some cases. This could lead to negotiation errors and silent links. (#3547) - Ignore latency maximum when forcing rate/quantum. (#3613) - Nodes can now be added to multiple groups and link-groups. (#3612) * Modules - The filter-chain now also handles notify port dependencies correctly. (#3596) - Filter-chain has support for new linear, clamp, recip, exp, log, mult, sine builtin plugins. - The echo-cancel module now correctly reports its playback and capture streams as ASYNC to avoid running out of buffers. (#3593) - It is now possible to specify an array of remote names to connect to with the native protocol. - module-rtp-sap and module-rtp-sink now try to bind to the specified interface. * SPA - The alsa plugin now removes the runtime properties such as period-num, period-size and max-latency when suspended. (#3613) * Bluetooth - BAP Locations/Context is now set on endpoints as required by new bluez. - Improve selection of BAP leader. * JACK - Add a jack_set_sample_rate() extension function. - Make sure we get the info of all nodes/ports before completing the jack_client_open() operation so that we can enumerate the ports correctly in all cases. (#3618) * GStreamer - Fix types of metadata in pipewiresink. - Also copy metadata in buffers in all cases. - Fix size allocation in bufferpool for compressed formats. - Don't stop streaming thread when unlinked. (#3620) * ALSA - The ALSA plugin now handles NULL values from mmap_areas. (#3600) - Disable the WebRTC-based echo canceller in big endian architectures since webrtc-audio-processing is not available there. ==== postgresql16 ==== Subpackages: libpq5 postgresql16-contrib postgresql16-server - boo#1216734: Revert the last change and make the devel package independend of all other subpackages except for the libs. ==== publicsuffix ==== Version update (20230930 -> 20231028) - Update to version 20231028: * util: gTLD data autopull updates for 2023-10-28 * AWS Submissions to the Public Suffix List - Q3 2023 * Add <4-8>.azurestaticapps.net DNS suffix ==== python-authheaders ==== Version update (0.14.1 -> 0.15.3) - Update to version 0.15.3 * https://github.com/ValiMail/authentication-headers/blob/0.15.3/CHANGES or the CHANGES file included in this package ==== python-httpx ==== - Add upstream newer-httpcore.patch * it only allows httpcore 1.0.0 in the pyproject.toml, no code changes ==== raptor ==== Version update (2.0.15 -> 2.0.16) - Add support for libxml 2.11.0+ * Added patch raptor-libxml2-2.11-support.patch - update to 2.0.16: * long list of accumulated bug, security and portability fixes * see https://librdf.org/raptor/RELEASE.html#rel2_0_16 - drop 0001-Calcualte-max-nspace-declarations-correctly-for-XML-.patch.1: obsolete/upstream - ubsan.patch: refresh ==== redland ==== - Fix tests against latest raptor by cleaning up parser in each iteration. * Added patch redland-fix-tests.patch ==== rubygem-actioncable-7.0 ==== Version update (7.0.5.1 -> 7.0.8) - ## Rails 7.0.8 (September 09, 2023) ## * No changes. [#]# Rails 7.0.7.2 (August 22, 2023) ## * No changes. [#]# Rails 7.0.7.1 (August 22, 2023) ## * No changes. [#]# Rails 7.0.7 (August 09, 2023) ## * No changes. [#]# Rails 7.0.6 (June 29, 2023) ## * Fix Action Cable Redis configuration with sentinels. * Dmitriy Ivliev* ==== rubygem-actionmailer-7.0 ==== Version update (7.0.5.1 -> 7.0.8) - ## Rails 7.0.8 (September 09, 2023) ## * No changes. [#]# Rails 7.0.7.2 (August 22, 2023) ## * No changes. [#]# Rails 7.0.7.1 (August 22, 2023) ## * No changes. [#]# Rails 7.0.7 (August 09, 2023) ## * No changes. [#]# Rails 7.0.6 (June 29, 2023) ## * No changes. ==== rubygem-actionpack-7.0 ==== Version update (7.0.5.1 -> 7.0.8) - ## Rails 7.0.8 (September 09, 2023) ## * Fix `HostAuthorization` potentially displaying the value of the X_FORWARDED_HOST header when the HTTP_HOST header is being blocked. * Hartley McGuire*, *Daniel Schlosser* [#]# Rails 7.0.7.2 (August 22, 2023) ## * No changes. [#]# Rails 7.0.7.1 (August 22, 2023) ## * No changes. [#]# Rails 7.0.7 (August 09, 2023) ## * No changes. [#]# Rails 7.0.6 (June 29, 2023) ## * No changes. ==== rubygem-actionview-7.0 ==== Version update (7.0.5.1 -> 7.0.8) - ## Rails 7.0.8 (September 09, 2023) ## * Fix `form_for` missing the hidden `_method` input for models with a namespaced route. * Hartley McGuire* * Fix `render collection: @records, cache: true` inside `jbuilder` templates The previous fix that shipped in `7.0.7` assumed template fragments are always strings, this isn't true with `jbuilder`. * Jean Boussier* [#]# Rails 7.0.7.2 (August 22, 2023) ## * No changes. [#]# Rails 7.0.7.1 (August 22, 2023) ## * No changes. [#]# Rails 7.0.7 (August 09, 2023) ## * Fix `render collection: @records, cache: true` to cache fragments as bare strings Previously it would incorrectly cache them as Action View buffers. * Jean Boussier* * Don't double-encode nested `field_id` and `field_name` index values Pass `index: @options` as a default keyword argument to `field_id` and `field_name` view helper methods. * Sean Doyle* [#]# Rails 7.0.6 (June 29, 2023) ## * No changes. ==== rubygem-activejob-7.0 ==== Version update (7.0.5.1 -> 7.0.8) - ## Rails 7.0.8 (September 09, 2023) ## * Fix Active Job log message to correctly report a job failed to enqueue when the adapter raises an `ActiveJob::EnqueueError`. * Ben Sheldon* [#]# Rails 7.0.7.2 (August 22, 2023) ## * No changes. [#]# Rails 7.0.7.1 (August 22, 2023) ## * No changes. [#]# Rails 7.0.7 (August 09, 2023) ## * No changes. [#]# Rails 7.0.6 (June 29, 2023) ## * Fix error Active Job passed class with `permitted?`. * Alex Baldwin* ==== rubygem-activemodel-7.0 ==== Version update (7.0.5.1 -> 7.0.8) - ## Rails 7.0.8 (September 09, 2023) ## * No changes. [#]# Rails 7.0.7.2 (August 22, 2023) ## * No changes. [#]# Rails 7.0.7.1 (August 22, 2023) ## * No changes. [#]# Rails 7.0.7 (August 09, 2023) ## * Error.full_message now strips ":base" from the message. * zzak* * Add a load hook for `ActiveModel::Model` (named `active_model`) to match the load hook for `ActiveRecord::Base` and allow for overriding aspects of the `ActiveModel::Model` class. [#]# Rails 7.0.6 (June 29, 2023) ## * No changes. ==== rubygem-activesupport-7.0 ==== Version update (7.0.5.1 -> 7.0.8) - ## Rails 7.0.8 (September 09, 2023) ## * Fix `TimeWithZone` still using deprecated `#to_s` when `ENV` or `config` to disable it are set. * Hartley McGuire* * Fix CacheStore#write_multi when using a distributed Redis cache with a connection pool. Fixes [#48938](https://github.com/rails/rails/issues/48938). * Jonathan del Strother* [#]# Rails 7.0.7.2 (August 22, 2023) ## * No changes. [#]# Rails 7.0.7.1 (August 22, 2023) ## * Use a temporary file for storing unencrypted files while editing [CVE-2023-38037] [#]# Rails 7.0.7 (August 09, 2023) ## * Fix `Cache::NullStore` with local caching for repeated reads. * fatkodima* * Fix `to_s` with no arguments not respecting custom `:default` formats * Hartley McGuire* * Fix `ActiveSupport::Inflector.humanize(nil)` raising ``NoMethodError: undefined method `end_with?' for nil:NilClass``. * James Robinson* * Fix `Enumerable#sum` for `Enumerator#lazy`. * fatkodima*, *Matthew Draper*, *Jonathan Hefner* * Improve error message when EventedFileUpdateChecker is used without a compatible version of the Listen gem * Hartley McGuire* [#]# Rails 7.0.6 (June 29, 2023) ## * Fix `EncryptedConfiguration` returning incorrect values for some `Hash` methods * Hartley McGuire* * Fix arguments being destructed `Enumerable#many?` with block. * Andrew Novoselac* * Fix humanize for strings ending with id. * fatkodima* ==== rubygem-bcrypt ==== Version update (3.1.18 -> 3.1.19) - 3.1.19 June 22 2023 - Deprecate passing the third argument to `BCrypt::Engine.hash_secret` [GH #207 by @sergey-alekseev] - Add GC guards so the C compiler won't optimize out references [GH #270] ==== rubygem-ruby-dbus ==== - Testsuite requires dbus-daemon and dbus-send which are now separate packages ==== samba ==== Version update (4.19.2+git.322.7e9201cef5 -> 4.19.2+git.324.fa0b54b91b) Subpackages: libsamba-policy0-python3 samba-ad-dc-libs samba-client samba-client-32bit samba-client-libs samba-client-libs-32bit samba-gpupdate samba-ldb-ldap samba-libs samba-libs-python3 samba-python3 samba-winbind samba-winbind-libs samba-winbind-libs-32bit - packaging: samba-tool domain provision requires python3-Markdown; (bsc#1216519). ==== sdbootutil ==== Version update (1+git20231023.873adb9 -> 1+git20231026.f43c33c) Subpackages: sdbootutil-rpm-scriptlets sdbootutil-snapper - Update to version 1+git20231026.f43c33c: * Fix generating initrd for random snapshots ==== systemd ==== Subpackages: libsystemd0 libsystemd0-32bit libudev1 systemd-32bit systemd-boot systemd-container systemd-coredump systemd-lang udev - Disable utmp support The announcement can be found at: https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… The user visible consequence of it is that /run/utmp file is no more created. systemd itself doesn't depend on utmp anymore since "shared/wall: use logind if build without utmp support" has been backported. ==== tracker-miners ==== Version update (3.6.1 -> 3.6.2) Subpackages: tracker-miner-files tracker-miners-lang - Update to version 3.6.2: + Improvements to the seccomp jail, and fixes for spurious SIGSYS positives. + Use GDateTime to handle dates. + Updated translations. ==== util-linux ==== Subpackages: libblkid1 libfdisk1 libmount1 libsmartcols1 libuuid1 util-linux-lang - Add patch: * setterm-resize-uninit-flags.patch ==== util-linux-systemd ==== - Add patch: * setterm-resize-uninit-flags.patch ==== yast2 ==== Version update (5.0.2 -> 5.0.3) Subpackages: yast2-logs - Added Repository#refresh method (related to bsc#1215884) - 5.0.3 ==== yast2-installation ==== Version update (5.0.1 -> 5.0.2) - Refresh repositories with changed URL and reload them again to activate the changes (related to bsc#1215884) - 5.0.2 ==== yast2-update ==== Version update (5.0.0 -> 5.0.1) - Drop the previously used repositories when going back to the partition selection at upgrade, this ensures the repositories are correctly reinitialized later (bsc#1215884) - 5.0.1

1 0

Tumbleweed - Review of the week 2023/44
by Dominique Leuenberger 03 Nov '23

03 Nov '23

Dear Tumbleweed users and hackers, Week 44 is over – and with it, about 83% of the year 2023. What does that mean for Tumbleweed? Not really much, as it just keeps rolling from snapshot to snapshot. And during this week, you have received 6 of those (1026, 1028, 1029, 1030, 1031, and 1101). 1027 had been discarded due to crashes identified in XFCE (xfconf 4.18.2 – which was reverted to 4.18.1 for 1028) The six delivered snapshots brought you the following updates: * LLVM 17.0.3 * Qemu 8.1.2 * VLC 3.0.19 * Boost 1.83.0 * systemd: Ship the main configuration files in /usr/lib/; this change will hopefully encourage users to customize the defaults via drop-ins instead of changing the main config files * Linux kernel 6.5.9 * openSSL 3.1.4 * PHP 8.2.12 * Mozilla Firefox 119.0 * shadow 4.14.2 * strace & linux-glibc-devel 6.6: getting ready for Kernel 6.6 * Poppler 23.10.0 As usual, a new snapshot is already in QA, and more changes are piling up. These things have been staged by now: * gnome-shell/mutter 45.1 * libxml2 2.11.5 (you remember, we already had that a while back in the list. This time it is happening) * xfconf 4.18.3 * libvirt 9.9.0 * fwupd 1.9.7 * binutils 2.41: libqt5-qtwebengine runs OOM when linking on i586 * Linux kernel 6.6 Cheers, Dominique

1 0

New Tumbleweed snapshot 20231101 released!
by Dominique Leuenberger 03 Nov '23

03 Nov '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: dracut (059+suse.503.g41e99e72 -> 059+suse.511.g0bdb16ac) erofs-utils (1.7 -> 1.7.1) gnome-text-editor (45.0 -> 45.1) gpgme (1.23.0 -> 1.23.1) gpgmeqt (1.23.0 -> 1.23.1) grub2 hxtools (20230411 -> 20231101) libnbd (1.18.0 -> 1.18.1) open-vm-tools (12.3.0 -> 12.3.5) poppler (23.09.0 -> 23.10.0) poppler-qt5 (23.09.0 -> 23.10.0) rubygem-rubocop (1.57.1 -> 1.57.2) selinux-policy (20231012 -> 20231030) sssd wireplumber yast2-trans (84.87.20231004.bd479b5f2d -> 84.87.20231027.a9c9df2125) === Details === ==== dracut ==== Version update (059+suse.503.g41e99e72 -> 059+suse.511.g0bdb16ac) - Update to version 059+suse.511.g0bdb16ac: * fix(pkcs11): delete trailing dot on libcryptsetup-token-systemd-pkcs11.so * fix(systemd-repart): correct undefined $libdir * fix(dracut-systemd): use `DRACUT_VERSION` instead of `VERSION` * fix(dracut.sh): abort if Bash is in POSIX mode * fix(dracut-initramfs-restore.sh): do not set selinux labels if disabled * fix(network): correct network device naming (bsc#1192986) ==== erofs-utils ==== Version update (1.7 -> 1.7.1) - Update to release 1.7.1 * erofs-utils: fix reference leak in function ``erofs_mkfs_build_tree_from_path`` ==== gnome-text-editor ==== Version update (45.0 -> 45.1) Subpackages: gnome-text-editor-lang - Update to version 45.1: + Use proper etag when comparing document for changes after a Save As operation occurs. + Fix row styling in preferences. + Fix memory leak of GtkNativeDialog. + Updated translations. ==== gpgme ==== Version update (1.23.0 -> 1.23.1) Subpackages: libgpgme11 libgpgmepp6 - update to 1.23.1: * fixes for other platforms ==== gpgmeqt ==== Version update (1.23.0 -> 1.23.1) - update to 1.23.1: * fixes for other platforms ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253) * 0001-kern-ieee1275-init-Restrict-high-memory-in-presence-.patch ==== hxtools ==== Version update (20230411 -> 20231101) Subpackages: fd0ssh ofl - Update to release 20231101 * qtar: add .zst suffix support * sadmin: delete utmp_register * dircolors: reinstate upstream color for BLK/CHR * spec-beautifier: apply transformation logic to preamble as well * spec-beautifier: eliminate BuildRoot/Package/Distribution/Vendor lines * spec-beautifier: delete massaging of BuildRequire lists ==== libnbd ==== Version update (1.18.0 -> 1.18.1) - Update to version 1.18.1: * Version 1.18.1. * rust: Use string_starts_with instead of String.starts_with * rust: Build the examples * rust: Write a custom translator from POD to rustdoc * rust: Add overview documentation * rust: Annotate 'endif' with corresponding label * utils: Slightly simplify human_size() * docs: Assign CVE-2023-5215 to nbd_get_size negative result issue ==== open-vm-tools ==== Version update (12.3.0 -> 12.3.5) Subpackages: libvmtools0 open-vm-tools-desktop - Update to 12.3.5 (build 22544099) (boo#1216670) - There are no new features in the open-vm-tools 12.3.5 release. This is primarily a maintenance release that addresses a few critical problems, including: - This release resolves CVE-2023-34058. For more information on this vulnerability and its impact on VMware products, see https://www.vmware.com/security/advisories/VMSA-2023-0024.html. - This release resolves CVE-2023-34059 which only affects open-vm-tools. For more information on this vulnerability, please see the Resolved Issues section of the Release Notes. - A GitHub issue has been handled. Please see the Resolved Issues section of the Release Notes. - An update to the deployPkg plugin to coordinate with recent releases of cloud-init for improvement for guest VM customization. - For issues resolved in this release, see the Resolved Issues <https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#…> section of the Release Notes. - For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5 - Release Notes are available at https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md - The granular changes that have gone into the 12.3.5 release are in the ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/Ch… - Drop patch now contained in 12.3.5: - CVE-2023-34058.patch - CVE-2023-34059.patch ==== poppler ==== Version update (23.09.0 -> 23.10.0) Subpackages: libpoppler-cpp0 libpoppler-glib8 poppler-tools - Add patch to let it build with the heavily patched tiff 4.0.9 we have in SLE 15: * reduce-libtiff-required-version.patch - version update to 23.10.0 core: * cairo: update type 3 fonts for cairo 1.18 api * Fix crash on malformed files build system: * Make a few more dependencies soft-mandatory * Add more supported gnupg releases * Check if linker supports version scripts - modified patches % reduce-boost-required-version.patch (refreshed) ==== poppler-qt5 ==== Version update (23.09.0 -> 23.10.0) - Add patch to let it build with the heavily patched tiff 4.0.9 we have in SLE 15: * reduce-libtiff-required-version.patch - version update to 23.10.0 core: * cairo: update type 3 fonts for cairo 1.18 api * Fix crash on malformed files build system: * Make a few more dependencies soft-mandatory * Add more supported gnupg releases * Check if linker supports version scripts - modified patches % reduce-boost-required-version.patch (refreshed) ==== rubygem-rubocop ==== Version update (1.57.1 -> 1.57.2) - updated to version 1.57.2 [#]# 1.57.2 (2023-10-26) [#]## Bug fixes * [#12274](https://github.com/rubocop/rubocop/issues/12274): Fix a false positive for `Lint/Void` when `each`'s receiver is an object of `Enumerator` to which `filter` has been applied. ([@koic][]) * [#12291](https://github.com/rubocop/rubocop/issues/12291): Fix a false positive for `Metrics/ClassLength` when a class with a singleton class definition. ([@koic][]) * [#12293](https://github.com/rubocop/rubocop/issues/12293): Fix a false positive for `Style/RedundantDoubleSplatHashBraces` when using double splat hash braces with `merge` and method chain. ([@koic][]) * [#12298](https://github.com/rubocop/rubocop/issues/12298): Fix a false positive for `Style/RedundantParentheses` when using a parenthesized hash literal as the first argument in a method call without parentheses. ([@koic][]) * [#12283](https://github.com/rubocop/rubocop/pull/12283): Fix an error for `Style/SingleLineDoEndBlock` when using single line `do`...`end` with no body. ([@koic][]) * [#12312](https://github.com/rubocop/rubocop/issues/12312): Fix an incorrect autocorrect for `Style/HashSyntax` when braced hash key and value are the same and it is used in `if`...`else`. ([@koic][]) * [#12307](https://github.com/rubocop/rubocop/issues/12307): Fix an infinite loop error for `Layout/EndAlignment` when `EnforcedStyleAlignWith: variable` and using a conditional statement in a method argument on the same line and `end` with method call is not aligned. ([@koic][]) * [#11652](https://github.com/rubocop/rubocop/issues/11652): Make `--auto-gen-config` generate `inherit_from` correctly inside ERB `if`. ([@jonas054][]) * [#12310](https://github.com/rubocop/rubocop/issues/12310): Drop `base64` gem from runtime dependency. ([@koic][]) * [#12300](https://github.com/rubocop/rubocop/issues/12300): Fix an error for `Style/IdenticalConditionalBranches` when `if`...`else` with identical leading lines and using index assign. ([@koic][]) * [#12286](https://github.com/rubocop/rubocop/issues/12286): Fix false positives for `Style/RedundantDoubleSplatHashBraces` when using double splat with a hash literal enclosed in parenthesized ternary operator. ([@koic][]) * [#12279](https://github.com/rubocop/rubocop/issues/12279): Fix false positives for `Lint/EmptyConditionalBody` when missing 2nd `if` body with a comment. ([@koic][]) * [#12275](https://github.com/rubocop/rubocop/issues/12275): Fix a false positive for `Style/RedundantDoubleSplatHashBraces` when using double splat within block argument containing a hash literal in an array literal. ([@koic][]) * [#12284](https://github.com/rubocop/rubocop/issues/12284): Fix false positives for `Style/SingleArgumentDig` when using some anonymous argument syntax. ([@koic][]) * [#12301](https://github.com/rubocop/rubocop/issues/12301): Make `Style/RedundantFilterChain` aware of safe navigation operator. ([@koic][]) ==== selinux-policy ==== Version update (20231012 -> 20231030) Subpackages: selinux-policy-targeted - Update to version 20231030: * Allow system_mail_t manage exim spool files and dirs * Dontaudit keepalived setattr on keepalived_unconfined_script_exec_t * Label /run/pcsd.socket with cluster_var_run_t * ci: Run cockpit tests in PRs * Add map_read map_write to kernel_prog_run_bpf * Allow systemd-fstab-generator read all symlinks * Allow systemd-fstab-generator the dac_override capability * Allow rpcbind read network sysctls * Support using systemd containers * Allow sysadm_t to connect to iscsid using a unix domain stream socket * Add policy for coreos installer * Add policy for nvme-stas * Confine systemd fstab,sysv,rc-local * Label /etc/aliases.lmdb with etc_aliases_t * Create policy for afterburn * Make new virt drivers permissive * Split virt policy, introduce virt_supplementary module * Allow apcupsd cgi scripts read /sys * Allow kernel_t to manage and relabel all files * Add missing optional_policy() to files_relabel_all_files() * Allow named and ndc use the io_uring api * Deprecate common_anon_inode_perms usage * Improve default file context(None) of /var/lib/authselect/backups * Allow udev_t to search all directories with a filesystem type * Implement proper anon_inode support * Allow targetd write to the syslog pid sock_file * Add ipa_pki_retrieve_key_exec() interface * Allow kdumpctl_t to list all directories with a filesystem type * Allow udev additional permissions * Allow udev load kernel module * Allow sysadm_t to mmap modules_object_t files * Add the unconfined_read_files() and unconfined_list_dirs() interfaces * Set default file context of HOME_DIR/tmp/.* to <<none>> * Allow kernel_generic_helper_t to execute mount(1) * Allow sssd send SIGKILL to passkey_child running in ipa_otpd_t * Allow systemd-localed create Xserver config dirs * Allow sssd read symlinks in /etc/sssd * Label /dev/gnss[0-9] with gnss_device_t * Allow systemd-sleep read/write efivarfs variables * ci: Fix version number of packit generated srpms * Dontaudit rhsmcertd write memory device * Allow ssh_agent_type create a sockfile in /run/user/USERID * Set default file context of /var/lib/authselect/backups to <<none>> * Allow prosody read network sysctls * Allow cupsd_t to use bpf capability * Allow sssd domain transition on passkey_child execution conditionally * Allow login_userdomain watch lnk_files in /usr * Allow login_userdomain watch video4linux devices * Change systemd-network-generator transition to include class file * Revert "Change file transition for systemd-network-generator" * Allow nm-dispatcher winbind plugin read/write samba var files * Allow systemd-networkd write to cgroup files * Allow kdump create and use its memfd: objects * Allow fedora-third-party get generic filesystem attributes * Allow sssd use usb devices conditionally * Update policy for qatlib * Allow ssh_agent_type manage generic cache home files * Change file transition for systemd-network-generator * Additional support for gnome-initial-setup * Update gnome-initial-setup policy for geoclue * Allow openconnect vpn open vhost net device * Allow cifs.upcall to connect to SSSD also through the /var/run socket * Grant cifs.upcall more required capabilities * Allow xenstored map xenfs files * Update policy for fdo * Allow keepalived watch var_run dirs * Allow svirt to rw /dev/udmabuf * Allow qatlib to modify hardware state information. * Allow key.dns_resolve connect to avahi over a unix stream socket * Allow key.dns_resolve create and use unix datagram socket * Use quay.io as the container image source for CI * ci: Move srpm/rpm build to packit * .copr: Avoid subshell and changing directory * Allow gpsd, oddjob and oddjob_mkhomedir_t write user_tty_device_t chr_file * Label /usr/libexec/openssh/ssh-pkcs11-helper with ssh_agent_exec_t * Make insights_client_t an unconfined domain * Allow insights-client manage user temporary files * Allow insights-client create all rpm logs with a correct label * Allow insights-client manage generic logs * Allow cloud_init create dhclient var files and init_t manage net_conf_t * Allow insights-client read and write cluster tmpfs files * Allow ipsec read nsfs files * Make tuned work with mls policy * Remove nsplugin_role from mozilla.if * allow mon_procd_t self:cap_userns sys_ptrace * Allow pdns name_bind and name_connect all ports * Set the MLS range of fsdaemon_t to s0 - mls_systemhigh * ci: Move to actions/checkout@v3 version * .copr: Replace chown call with standard workflow safe.directory setting * .copr: Enable `set -u` for robustness * .copr: Simplify root directory variable * Allow rhsmcertd dbus chat with policykit * Allow polkitd execute pkla-check-authorization with nnp transition * Allow user_u and staff_u get attributes of non-security dirs * Allow unconfined user filetrans chrome_sandbox_home_t * Allow svnserve execute postdrop with a transition * Do not make postfix_postdrop_t type an MTA executable file * Allow samba-dcerpc service manage samba tmp files ... changelog too long, skipping 64 lines ... * Allow sendmail manage its runtime files ==== sssd ==== Subpackages: libsss_certmap0 libsss_idmap0 libsss_nss_idmap0 sssd-krb5-common sssd-ldap - Update dependencies to require the same subpackages version and release - Fix /usr/etc migration fragment in wrong "%pre kcm" instead of "%pre" - Move sss_analyze to sssd-tools package - Default config is unworkable, just stop installing it altogether [boo#1216739] ==== wireplumber ==== Subpackages: libwireplumber-0_4-0 wireplumber-audio wireplumber-lang - Add patch from upstream that fixes too many matches for property interest: * 0001-object-manager-reduce-the-amount-of-globals-that-initially.patch - Add patch from upstream that fixes an odd failure of a test after applying the previous patch: * 0002-object-manager-use-an-idle-callback-to-expose-tmp-globals.patch - Add patch from upstream that adds ability to hide parent nodes, which is useful to prevent hardware misuse or damage by poorly behaved/configured clients: * 0001-policy-dsp-add-ability-to-hide-parent-nodes.patch ==== yast2-trans ==== Version update (84.87.20231004.bd479b5f2d -> 84.87.20231027.a9c9df2125) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sr yast2-trans-sv yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20231027.a9c9df2125: * Translated using Weblate (Galician) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Italian) * Translated using Weblate (Catalan) * Translated using Weblate (Czech) * Translated using Weblate (Czech) * Translated using Weblate (Slovak) * Translated using Weblate (Slovak) * Translated using Weblate (Dutch) * Translated using Weblate (Japanese) * New POT for text domain 'storage'. * New POT for text domain 'country'. * Translated using Weblate (Dutch) * Translated using Weblate (Catalan) * Translated using Weblate (Japanese) * Translated using Weblate (French) * New POT for text domain 'qt-pkg'.

1 0

20231030 firefox Tumbleweed x86_64 fails to load
by Sid Boyce 02 Nov '23

02 Nov '23

lancelot@slipstream:~> firefox& [1] 252674 lancelot@slipstream:~> XPCOMGlueLoad error for file /usr/lib64/firefox/libxul.so: /usr/lib64/firefox/libxul.so: undefined symbol: png_get_next_frame_delay_num, version PNG16_0 Couldn't load XPCOM. [1]+ Exit 255 firefox -- Sid Boyce ... Hamradio License G3VBV, Keen licensed Private Pilot Retired IBM/Amdahl Mainframes and Sun/Fujitsu Servers Tech Support Specialist Microsoft Windows Free Zone - Linux used for all Computing Tasks

2 2

CUPS issue during update to TW 20231031
by Joe Salmeri 02 Nov '23

02 Nov '23

During the update to TW 20231031 I received the following message Skipping /etc/cups/ppd/deskjet-6122.ppd: mismatched file versions (old 5.2, new 5.3); will not update without -x! Seems like the -x option is something that the installation process needs to do but isn't ? -- Regards, Joe

1 0

New Tumbleweed snapshot 20231031 released!
by Dominique Leuenberger 01 Nov '23

01 Nov '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MozillaFirefox (118.0.1 -> 119.0) glibc gnu-unifont-fonts (15.1.03 -> 15.1.04) libbluray linux-glibc-devel (6.5 -> 6.6) ncurses (6.4.20231007 -> 6.4.20231021) protobuf python-pyudev qpdf (11.6.2 -> 11.6.3) shadow (4.14.1 -> 4.14.2) strace (6.5 -> 6.6) suse-module-tools (16.0.37 -> 16.0.38) systemd thunar (4.18.7 -> 4.18.8) thunar-plugin-archive (0.5.1 -> 0.5.2) webrtc-audio-processing === Details === ==== MozillaFirefox ==== Version update (118.0.1 -> 119.0) Subpackages: MozillaFirefox-translations-common - Mozilla Firefox 119.0 https://www.mozilla.org/en-US/firefox/119.0/releasenotes MFSA 2023-45 (bsc#1216338) * CVE-2023-5721 (bmo#1830820) Queued up rendering could have allowed websites to clickjack * CVE-2023-5722 (bmo#1738426) Cross-Origin size and header leakage * CVE-2023-5723 (bmo#1802057) Invalid cookie characters could have led to unexpected errors * CVE-2023-5724 (bmo#1836705) Large WebGL draw could have led to a crash * CVE-2023-5725 (bmo#1845739) WebExtensions could open arbitrary URLs * CVE-2023-5726 (bmo#1846205) Full screen notification obscured by file open dialog on macOS * CVE-2023-5727 (bmo#1847180) Download Protections were bypassed by .msix, .msixbundle, .appx, and .appxbundle files on Windows * CVE-2023-5728 (bmo#1852729) Improper object tracking during GC in the JavaScript engine could have led to a crash. * CVE-2023-5729 (bmo#1823720) Fullscreen notification dialog could have been obscured by WebAuthn prompts * CVE-2023-5730 (bmo#1836607, bmo#1840918, bmo#1848694, bmo#1848833, bmo#1850191, bmo#1850259, bmo#1852596, bmo#1853201, bmo#1854002, bmo#1855306, bmo#1855640, bmo#1856695) Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4.1 * CVE-2023-5731 (bmo#1690111, bmo#1721904, bmo#1851803, bmo#1854068) Memory safety bugs fixed in Firefox 119 - requires NSS 3.94 - Mozilla Firefox 118.0.2 * Fix games not loading on betsoft.com (bmo#1856145) * Fix printing issues for some SVG images (bmo#1853727) * Fix CORS XHR with authentication no longer working (bmo#1855650) * Fix h264 WebRTC video not working in some contexts (bmo#1855636) * Fix Firefox Translations not working on some pages (bmo#1841656, bmo#1855307) * Stability fixes (bmo#1851991, bmo#1799326, bmo#1856637) - Activate KDE integration again, included rebased and updated patches, firefox-kde.patch and mozilla-kde.patch, (upstream removed special files handling for preferences but that has no effect since we haven't shipped obsolete kde.js for a while) (boo#1216027) ==== glibc ==== Subpackages: glibc-32bit glibc-devel glibc-extra glibc-lang glibc-locale glibc-locale-base nscd - gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243) ==== gnu-unifont-fonts ==== Version update (15.1.03 -> 15.1.04) - update to 15.1.04: * Default and Japanese versions have larger supersets of Plane 2 and Plane 3 glyphs * Updates for U+266D..U+266F and U+26BC ==== libbluray ==== - Added patch: * libbluray-java18plus.patch + allow building with JDK 18 and newer (using source/target levels 8) + fixes build with the new OpenJDK 21 LTSS ==== linux-glibc-devel ==== Version update (6.5 -> 6.6) - Update to kernel headers 6.6 ==== ncurses ==== Version update (6.4.20231007 -> 6.4.20231021) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch 20231021 + use oldxterm+sm+1006 in vte-2014 (report by Benno Schulenberg) -TD + add ansi+apparrows -TD + change defaults for configure opaque and widec options (prompted by discussion with Branden Robinson). + minor cleanup of compiler- and manpage-warnings. - Correct offsets off some hunks in patches * ncurses-5.9-ibm327x.dif * ncurses-6.4.dif - Add ncurses patch 20231016 + make the recent change to setupterm optional "--enable-check-size" (Debian #1054022). - Add ncurses patch 20231014 + improve formatting/style of manpages (patches by Branden Robinson). + updated configure script macro CF_XOPEN_SOURCE, for uClibc-ng + update config.guess, config.sub ==== protobuf ==== Subpackages: libprotobuf-lite23_4_0 libprotobuf23_4_0 - Build with source and target levels 8 * fixes build with JDK21 - Install the pom file with the new %%mvn_install_pom macro - Do not install the pom-only artifacts, since the %%mvn_install_pom macro resolves the variables at the install time ==== python-pyudev ==== - update hypothesis_settings.patch: * Extend deadline for test_child_of_parents that fails on ppc64le (bsc#1216607) ==== qpdf ==== Version update (11.6.2 -> 11.6.3) - update to 11.6.3: * Tweak linearization code to better handle files between 2 GB and 4 GB in size. Fixes #1023. * Fix data loss bug: qpdf could discard a the character after an escaped octal string consisting of less than three digits. For content, this would only happen with QDF or when normalizing content. Outside of content, it could have happened in any binary string, such as /ID, if the encoding software used octal escape strings with less than three digits. This bug was introduced between 10.6.3 and 11.0.0. ==== shadow ==== Version update (4.14.1 -> 4.14.2) Subpackages: libsubid4 login_defs - Update to 4.14.2: * libshadow: + Fix build with musl libc. + Avoid NULL dereference. + Update utmp at an initial login * useradd(8): + Set proper SELinux labels for def_usrtemplate * Manual: + Document --prefix in chage(1), chpasswd(8), and passwd(1) - Drop upstreamed shadow-4.14.0-selinux-labels.patch ==== strace ==== Version update (6.5 -> 6.6) - Update to strace 6.6 * Implemented --kill-on-exit option that instructs the tracer to set PTRACE_O_EXITKILL option to all tracee processes and not to detach them on cleanup so they will not be left running after the tracer exit. * Implemented automatic activation of --kill-on-exit option when - -seccomp-bpf is enabled and -p/--attach option is not used. * Implemented decoding of map_shadow_stack syscall. * Implemented decoding of FSCONFIG_CMD_CREATE_EXCL fsconfig command. * Implemented decoding of IFLA_BRPORT_BACKUP_NHID netlink attribute. * Implemented decoding of SECCOMP_IOCTL_NOTIF_SET_FLAGS ioctl. * Implemented decoding of UFFDIO_CONTINUE, UFFDIO_POISON, and UFFDIO_WRITEPROTECT ioctls. * Updated lists of ARCH_*, BPF_*, DEVCONF_*, IORING_*, KEXEC_*, MAP_*, NT_*, PTRACE_*, QFMT_*, SEGV_*, UFFD_*, V4L2_*, and XDP_* constants. * Updated lists of ioctl commands from Linux 6.6. - Remove haveged build requirement and usage in test suite as it is not needed anymore (jsc#PED-6184). ==== suse-module-tools ==== Version update (16.0.37 -> 16.0.38) Subpackages: suse-module-tools-scriptlets - Update to version 16.0.38: * modprobe.d: use softdep to load sd_mod and sg (boo#1216070) ==== systemd ==== Subpackages: libsystemd0 libsystemd0-32bit libudev1 systemd-32bit systemd-boot systemd-container systemd-coredump systemd-lang udev - Fix typo in /etc/systemd/user.confd.d (bsc#1216676) ==== thunar ==== Version update (4.18.7 -> 4.18.8) Subpackages: libthunarx-3-0 thunar-lang - Update to 4.18.8: * thunar-settings: Let Thunar guess the right display to use * Fix criticals about unset GIO attributes (#1063) * Support ipv6 remote URLs (#864) * Translation Updates ==== thunar-plugin-archive ==== Version update (0.5.1 -> 0.5.2) Subpackages: thunar-plugin-archive-lang - Update to version 0.5.2 * Add/fix support for bz2 and bz3 files (#20) * Add a few more compression mimetypes, sort the list. ==== webrtc-audio-processing ==== - ExcludeArch s390, s390x and ppc64 since big endian support is not implemented.

1 0

Python repo for Leap 15.5 has gone away
by Roger Oberholtzer 01 Nov '23

01 Nov '23

This repo seems to have gone away: http://download.opensuse.org/repositories/devel:/languages:/python/15.5 It was there a week or so ago. Now there is one for 15.6 instead. I'll guessing that this is a mistake? -- Roger Oberholtzer

1 0

New Tumbleweed snapshot 20231030 released!
by Dominique Leuenberger 01 Nov '23

01 Nov '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ffmpeg-4 glslang (13.0.0 -> 13.1.1) hiredis (1.1.0 -> 1.2.0) vulkan-loader (1.3.261.0 -> 1.3.268.0) vulkan-tools (1.3.261.0 -> 1.3.268.0) === Details === ==== ffmpeg-4 ==== Subpackages: libavcodec58_134 libavformat58_76 libavutil56_70 libpostproc55_9 libswresample3_9 libswscale5_9 - Add ffmpeg-glslang-cxx17.patch - Add 0001-avcodec-x86-mathops-clip-constants-used-with-shift-i.patch to resolve build failure with binutils >= 2.41. [boo#1215945] ==== glslang ==== Version update (13.0.0 -> 13.1.1) - Update to release 13.1.1 * Support GL_EXT_texture_shadow_lod, GL_NV_displacement_micromap * Add --no-link option - Drop merged 0001-Revert-CMake-Make-glslang-default-resource-limits-ST.patch ==== hiredis ==== Version update (1.1.0 -> 1.2.0) - hiredis 1.2.0: * Add sdevent adapter * Allow specifying the keepalive interval * Add RedisModule adapter * Helper for setting TCP_USER_TIMEOUT socket option * bug fixes ==== vulkan-loader ==== Version update (1.3.261.0 -> 1.3.268.0) - Update to release SDK-1.3.268.0 * Add VK_LOADER_LAYERS_ALLOW environment variable. * Add Debug extension support to test layer ==== vulkan-tools ==== Version update (1.3.261.0 -> 1.3.268.0) - Update to release SDK-1.3.268.0 * icd: Add VkSurfacePresentModeCompatibilityEXT support * icd: Add second VkCooperativeMatrixPropertiesKHR field * vulkaninfo: Support VK_EXT_surface_maintenance1 properly * icd: Add VkPhysicalDeviceDriverProperties

1 0