February 2023 - openSUSE Factory - openSUSE Mailing Lists

Yast2 broken after switch to ruby 3.2 from umbleweed snapshot 20230218
by Rainer Klier 23 Feb '23

23 Feb '23

hi, after installing ruby 3.2 from umbleweed snapshot 20230218 most yast modules are broken. for example, when trying to run "/usr/sbin/yast2 sw_single" the result is: Internal error. Please report a bug report with logs. Run save_y2logs to get complete logs. Caller: <internal:/usr/lib64/ruby/3.2.0/rubygems/core_ext/kernel_require.rb>:88:in `require' Details: Failed to load Module 'PackageSlideShow' due to: Failed to load Module 'Packages' due to: cannot load such file -- solv when trying to start the yast-partitioner, the result is: Internal error. Please report a bug report with logs. Run save_y2logs to get complete logs. Caller: <internal:/usr/lib64/ruby/3.2.0/rubygems/core_ext/kernel_require.rb>:88:in `require' Details: cannot load such file -- storage i checked https://bugzilla.opensuse.org, but didn't find any related bug entry. -- Best Regards | Freundliche Grüße | Cordialement | Cordiali Saluti | Atenciosamente | Saludos Cordiales *DI Rainer Klier* DevOps, Research & Development

14 47

New Tumbleweed snapshot 20230222 released!
by Dominique Leuenberger 23 Feb '23

23 Feb '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: emacs gnu-unifont-fonts (14.0.04 -> 15.0.01) heaptrack ibus-m17n (1.4.17 -> 1.4.19) ncurses (6.4.20230128 -> 6.4.20230218) python310 python310-core sddm xf86-video-ark (0.7.5 -> 0.7.6) === Details === ==== emacs ==== Subpackages: emacs-el emacs-eln emacs-info emacs-nox emacs-x11 etags - Add upstream commit/patches * 01a4035c.patch Fix etags local command injection vulnerability (CVE-2022-48337, bsc#1208515) * CVE-2022-48338.patch Fix ruby-mode.el local command injection vulnerability (CVE-2022-48338, bsc#1208514) * CVE-2022-48339.patch Fix htmlfontify.el command injection vulnerability (CVE-2022-48339 bsc#1208512) - Require libwebp at build time for automatically enable support for libwebp if given ==== gnu-unifont-fonts ==== Version update (14.0.04 -> 15.0.01) - Add pcf font to SRPM - Rename package * gnu-unifont-ttf-fonts -> gnu-unifont-fonts - Package otf fonts. Introduce new subpackages * gnu-unifont-otf-fonts * gnu-unifont-jp-otf-fonts - Specfile cleanup - update to version 15.0.01 ==== heaptrack ==== Subpackages: heaptrack-gui heaptrack-lang - Add upstream change: * 0001-Return-early-when-__libc_dlopen_mode-is-detected.patch - Define _filter_GLIBC_PRIVATE to fix installation on Leap ==== ibus-m17n ==== Version update (1.4.17 -> 1.4.19) update: 1.4.17 -> 1.4.19 - Added weblate translations to Sinhala - Add parrot icon emoji ==== ncurses ==== Version update (6.4.20230128 -> 6.4.20230218) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch 20230218 + configure-script improvements: + recent msys2 headers work with _DEFAULT_SOURCE; amend check + use $ac_includes_default in most cases where stdlib.h should work + use #error consistently vs "make an error" + add configure macro for gettimeofday vs inline check - Correct offsets of patch ncurses-6.4.dif - Add ncurses patch 20230211 + set dwShareMode in calls to CreateConsoleScreenBuffer() (patch by Hannes Domani). + use CreateFile with "CONIN$", "CONOUT$" rather than GetStdHandle to obtain a handle on the actual console, avoiding redirection in the MinGW/Win32 configurations (adapted from patch by LIU Hao). ==== python310 ==== Subpackages: python310-curses python310-dbm python310-tk - Add provides for readline and sqlite3 to the main Python package. ==== python310-core ==== Subpackages: libpython3_10-1_0 python310-base - Add provides for readline and sqlite3 to the main Python package. ==== sddm ==== Subpackages: sddm-branding-openSUSE - Honor /etc/nologin like login, sshd, xdm and gdm do * added: auth requisite pam_nologin.so to proper_pam.diff * see: man 5 nologin ==== xf86-video-ark ==== Version update (0.7.5 -> 0.7.6) - Update to version 0.7.6 * bringing the last decade worth of accumulated change, most importantly the ability to build against xorg-server 1.14 and newer out of the box - supersedes U_build_fix.diff

1 0

new package: bitwarden
by Bruno Pitrus 22 Feb '23

22 Feb '23

https://build.opensuse.org/package/show/devel:languages:nodejs/bitwarden https://github.com/bitwarden/clients/tree/master/apps/desktop Bitwarden is a free and open-source password management service that stores sensitive information such as website credentials in an encrypted vault. Bitwarden offers a cloud-hosted service as well as the ability to deploy the solution on-premises. {I currently only build the GUI client which has a somewhat complicated build process (it uses electron). The CLI `bw` program lives in the same repo, but seems to be a bunch of portable Node scripts, which means a packaged version is not in such high demand}

4 6

New Tumbleweed snapshot 20230221 released!
by Dominique Leuenberger 22 Feb '23

22 Feb '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: NetworkManager binutils (2.39 -> 2.40) gnome-contacts gnome-control-center lapack libpaper (2.0.4 -> 2.0.9) libpinyin (2.6.2 -> 2.8.1) lightsoff mutter (43.3 -> 43.3+2) nautilus-share openblas_openmp openblas_pthreads pidgin (2.14.10 -> 2.14.12) systemd-presets-common-SUSE traceroute (2.1.1 -> 2.1.2) yast2-packager (4.5.15 -> 4.5.16) === Details === ==== NetworkManager ==== Subpackages: NetworkManager-bluetooth NetworkManager-lang NetworkManager-pppoe NetworkManager-tui NetworkManager-wwan libnm0 typelib-1_0-NM-1_0 - Add 1539.patch: Fix constructing the IPv4 nameserver variable (boo#1208371). - Pass session_tracking=systemd and session_tracking_consolekit=false to meson, no longer build support for consolekit as session tracker. ==== binutils ==== Version update (2.39 -> 2.40) Subpackages: libctf-nobfd0 libctf0 - Pack libgprofng only for supported platforms. - Remove upstreamed patch binutils-maxpagesize.diff. - Rebase binutils-2.40-branch.diff.gz as it includes fix for PR30043. - Move libgprofng-related libraries to the proper locations (packages). - Add --without=bootstrap for skipping of bootstrap (faster testing of the package). ==== gnome-contacts ==== Subpackages: gnome-contacts-lang gnome-shell-search-provider-contacts - Drop unneeded nor used pkgconfig(clutter-gtk-1.0) BuildRequires. ==== gnome-control-center ==== Subpackages: gnome-control-center-color gnome-control-center-goa gnome-control-center-lang gnome-control-center-user-faces - Drop unneeded nor used pkgconfig(clutter-1.0) BuildRequires. ==== lapack ==== Subpackages: libblas3 libcblas3 liblapack3 - As a configurable option add tmglib code to the LAPACK librarly and enable TMG in LAPACKE as the header files provide its API (boo#1207989 & bsc#1087426). - Restore generic link for update-alternatives. This is usually set by the update-alternatives and it is '%ghost'ed but rpmlint complains. - Move update-alternatives --remove to %%postun to stop rpmlint from complaining. - Removed useless - because never executed - %%postrans scriptlets. - Added missing _%%{_arch} to update-alternative names. - rpmlint complains anyway - this time about alternative-link-missing - as it does not understand the _%%{_arch} endings: muffle with rpmlintrc. - Make arch-dependent generic names conditional. ==== libpaper ==== Version update (2.0.4 -> 2.0.9) Subpackages: libpaper-tools libpaper2 - update to 2.0.9: * Tweak the documentation of how paper sizes are set to make it easier to find and more accurate. * Removes the requirement for help2man at build time * Various fixes. ==== libpinyin ==== Version update (2.6.2 -> 2.8.1) - Update version to 2.8.1 * Fix bugs * Improve suggestion candidates * Support longer candidates ==== lightsoff ==== Subpackages: lightsoff-lang - Drop unused nor needed pkgconfig(clutter-1.0) and pkgconfig(clutter-gtk-1.0) BuildRequires. ==== mutter ==== Version update (43.3 -> 43.3+2) Subpackages: mutter-lang - Update to version 43.3+2: + wayland: Don't overwrite surface offsets. + x11: Avoid updating focus on wayland compositor (boo#1208494). ==== nautilus-share ==== Subpackages: nautilus-share-lang - Add 5.patch: Fix `'net usershare' returned error 255` (bsc#1208375). ==== openblas_openmp ==== - Make sure pre-existing (arch-independent) update-alternatives are wiped before registering new ones. Since update-alternatives has no reliable way to check if a certain 'generic name' exists, brute-force it and ignore any error (boo#1208248). - Remove totally pointless - ie. never executed - %%posttrans script. - Restore generic link for update-alternatives. This is usually set by the update-alternatives and it is '%ghost'ed but rpmlint complains. - Add rpmlintrc rules to avoid false positives from consistently guessing the update-alternatives generic name wrong. - Make arch dependent generic names conditional. ==== openblas_pthreads ==== - Make sure pre-existing (arch-independent) update-alternatives are wiped before registering new ones. Since update-alternatives has no reliable way to check if a certain 'generic name' exists, brute-force it and ignore any error (boo#1208248). - Remove totally pointless - ie. never executed - %%posttrans script. - Restore generic link for update-alternatives. This is usually set by the update-alternatives and it is '%ghost'ed but rpmlint complains. - Add rpmlintrc rules to avoid false positives from consistently guessing the update-alternatives generic name wrong. - Make arch dependent generic names conditional. ==== pidgin ==== Version update (2.14.10 -> 2.14.12) Subpackages: libpurple libpurple-client0 libpurple-lang libpurple-plugin-sametime libpurple-tcl libpurple0 - update to 2.14.12: * Remove a string from the Romanian translation that's breaks the creation of the Windows installer. * Add Markus "ivanhoe" Fischer to the Crazy Patch Writers! * Fix a crash when closing a group chat with spellchk plugin enabled. * Fix network interface detection on Windows to fix broken file transfers. * Update the about box to point people to Discourse instead of the mailing lists. ==== systemd-presets-common-SUSE ==== - Enable spice-vdagent.service and xdg-user-dirs.service by default (boo#1201728) ==== traceroute ==== Version update (2.1.1 -> 2.1.2) - update to version 2.1.2: * Fix unprivileged ICMP tracerouting with Linux kernel >= 6.1 ==== yast2-packager ==== Version update (4.5.15 -> 4.5.16) - Fixed a crash when selecting depending products (bsc#1208421) - 4.5.16

1 0

2 15.5 NET non-installations today
by Felix Miata 22 Feb '23

22 Feb '23

Twice today I started NET installs on a Core2 Duo. Both aborted at various times after package installation had been moving along. The first was evidently a kernel failure of some sort because of blinking LEDs and self-rebooting. The second I added nomce to the kernel cmdline. It simply put up the little red text window reporting non-descript failure. That one I tried to restart via the text window, but before reaching YaST it rebooted itself. It has a few dozen existing installations, some of which I boot via nomce, but not including 15.4 or TW, which seem to work just fine without it. These are the tails from /var/log/history and /var/log/YaST2/y2start.log, the only logs left behind: Stage [call]: Check selected medium... Stage [call]: ======================== |-- Wished medium is: QT |-- Selected medium is: QT |-- X-Server is ready: 4168 Stage [call]: HiDPI Check... Stage [call]: ============== |-- Monitor size: DVI-I-1 connected primary 1440x900+0+0 (normal left inverted right x axis y axis) 473mm x 296mm |-- Monitor width px: 1440 |-- Monitor width mm: 473 |-- Monitor DPI is too low (72), using 96 dpi |-- Monitor DPI: 96 |-- Reference DPI: 144 |-- No Qt scaling needed. Stage [call]: ================ Stage [call]: Starting YaST... Stage [call]: ================ |-- Allow big memory allocation: overcommit_memory=1 |-- MODULE_NAME: installation |-- MODE_FLAGS: |-- MODULE_ARGS: --arg initial |-- MODE: qt |-- UI_ARGS: --noborder --auto-fonts --fullscreen |-- QT_IM_MODULE: xim Stage [call]: =============== Stage [call]: YaST terminated Stage [call]: =============== |-- Y2_EXIT_CODE: 139 |-- Reset memory allocation: overcommit_memory=0 |-- Copy first level log file to installed system # Updating /etc/sysconfig/security ... # 2023-02-21 22:14:49|install|permissions|20201225-150400.5.16.1|x86_64||openSUSE-Leap-15.5-1|ceca321de3ebba21d847518683347bd696f2b4fb21d1f2a3960cf2c6d8d84a60| 2023-02-21 22:14:51|install|p7zip|16.02-150200.14.9.2|x86_64||openSUSE-Leap-15.5-1|89f29154f0ef91314ea20db33bc5df069ad2db6485005a3bceaeb371e04c2daf| 2023-02-21 22:14:55|install|p7zip-full|16.02-150200.14.9.2|x86_64||openSUSE-Leap-15.5-1|3f94e66eed2944527661e41e7d5ddda5eba13bc4339ea60bb72761241e290221| 2023-02-21 22:14:56|install|openssh-common|8.4p1-150300.3.15.4|x86_64||openSUSE-Leap-15.5-1|867321a6f70affee94a99e4450748f3acb53f780216c17ce25697ba8f00432ea| 2023-02-21 22:14:58|install|openslp|2.0.0-6.15.1|x86_64||openSUSE-Leap-15.5-1|66d5e2f54e0a2e3b33dad33773dc44d876e7cc26e4c5ebee9c91b4045eae2639| 2023-02-21 22:15:01|install|netcfg|11.6-3.3.1|noarch||openSUSE-Leap-15.5-1|4bde1360f3e5cf4d52093fd5e1c4a7540c19ca207ec422ff421c204d684c2bc0| 2023-02-21 22:15:03|install|mkfontdir|1.0.7-1.20|x86_64||openSUSE-Leap-15.5-1|57dedf705b21928fc8082bf9fe50bccc189a135b386b287e5fcb458844927b0c| 2023-02-21 22:15:05|install|lsb-release|3.1-1.16|noarch||openSUSE-Leap-15.5-1|533c28598f238ec65a086a92bf5f60c67131f998ba563ea1c9ce79560ed6f3c5| 2023-02-21 22:15:07|install|login_defs|4.8.1-150400.10.3.1|noarch||openSUSE-Leap-15.5-1|b8b9ea73c16e92e9c10452a961c60e7ac6ea71e6c9740a0129a56731200badea| 2023-02-21 22:15:08|install|libzck1|1.1.16-150400.3.2.1|x86_64||openSUSE-Leap-15.5-1|dcb38dff1d58edb52132604e299c164d792e954a0f741a4c76496584c899e887| 2023-02-21 22:15:10|install|libssh4|0.9.6-150400.1.5|x86_64||openSUSE-Leap-15.5-1|666acf7449538fc23ce8868e1138a60414d1e86bcc03dc53e9896ed7ab465e4a| 2023-02-21 22:15:12|install|libssh2-1|1.9.0-4.13.1|x86_64||openSUSE-Leap-15.5-1|5c32d7976025a63d8bb75e300b68d043afe997599a1d6bcf3d83ee63df1ebc88| 2023-02-21 22:15:15|install|libsqlcipher-3_39_2-0|4.5.2-bp155.1.4|x86_64||openSUSE-Leap-15.5-1|8a4c2b7b69e228a4e5e26f65cdc95533c4158af71b1aca40bb282be68fd5af72| 2023-02-21 22:15:17|install|libldap-2_4-2|2.4.46-150200.14.11.2|x86_64||openSUSE-Leap-15.5-1|fd72b530ddbfd9c94b1afd44d1db652e4b877df377622a43dc806586b4787555| 2023-02-21 22:15:19|install|libkmod2|29-4.15.1|x86_64||openSUSE-Leap-15.5-1|5694988a5dfe112903ee7fb058bae1aa20ebb7fd58b9e3a003e4f7ed79e4cc3d| 2023-02-21 22:15:21|install|libfido2-udev|1.5.0-1.30|noarch||openSUSE-Leap-15.5-1|7e0307466257918706853f4e15d7177a9f07c1df468cc2fe3a2816cd2aacac84| 2023-02-21 22:15:24|install|libevent-2_1-8|2.1.8-2.23|x86_64||openSUSE-Leap-15.5-1|8619b29ef4c31647da70d761624947da2389857beb1fd0eae64adb56025537b3| 2023-02-21 22:15:26|install|libdevmapper1_03|2.03.16_1.02.185-150500.5.2|x86_64||openSUSE-Leap-15.5-1|9d9ce62064ee2ced0e99c57fe30fbf2a5b27d7939dc31523b7ea3efbc2e83bd1| 2023-02-21 22:15:28|install|libcrack2|2.9.7-11.6.1|x86_64||openSUSE-Leap-15.5-1|4e86663d2ebb1479e73e7d4e6aa2338976e328b10ccf1cb1716e6f579b76d1bb| 2023-02-21 22:15:29|install|cracklib|2.9.7-11.6.1|x86_64||openSUSE-Leap-15.5-1|e9a2f8df054725649045dc14ae9e6f8d4a168f2e475aaad1853b42e873a9364d| 2023-02-21 22:15:31|install|keyutils|1.6.3-5.6.1|x86_64||openSUSE-Leap-15.5-1|9ed7a5df977fe2629311b32c0586b289c146c6da662b80cf9ddbc0c492b87aa4| 2023-02-21 22:15:33|install|iproute2|5.14-150400.1.8|x86_64||openSUSE-Leap-15.5-1|e35ff177ccab4b51e2aafd9851d9357e4c6ad996c0d90280b90bd18488e7789d| 2023-02-21 22:15:35|install|initviocons|0.5-1.27|x86_64||openSUSE-Leap-15.5-1|dff8f95343b4f62de9f05631802c90e0f4e4d624b103fc804cb3b46068994056| y2start.log head: Stage [1]: YaST2 startup level (1)... Stage [1]: ========================== |-- declare -x BrokenModules="floppy" |-- declare -x Cmdline="net.ifnames=0 ipv6.disable=1 noresume video=1440x900 3 vga=791 nomce" |-- declare -x EFI="0" |-- declare -x EGL_LOG_LEVEL="fatal" |-- declare -x ESCDELAY="10" |-- declare -x HOME="/" |-- declare -x Hostname="hp945" |-- declare -x InitrdID="2023-02-17.da82ca54" |-- declare -x InitrdModules="zram loop scsi_mod scsi_dh_alua scsi_dh_emc scsi_dh_rdac thermal libata libahci ahci cdrom sr_mod crc64 crc64-rocksoft t10-pi sd_mod iscsi_boot_sysfs st sg" |-- declare -x Insecure="0" |-- declare -x InstsysID="2023-02-17.da82ca54" /root/inst-sys didn't happen. # inxi -CMm Machine: Type: Desktop System: HP-Pavilion product: RX900AA-ABA a6010n v: N/A serial: CNX71002LP Mobo: ASUSTek model: LEONITE v: 5.00 serial: MS1C71S40800293 BIOS: Phoenix v: 5.10 date: 01/30/2007 Memory: RAM: total: 2.94 GiB used: 278 MiB (9.2%) Array-1: capacity: 4 GiB slots: 4 EC: None Device-1: A0 type: DDR2 size: 1024 MiB speed: 1334 MT/s (667 MHz) Device-2: A1 type: DDR2 size: 512 MiB speed: 1334 MT/s (667 MHz) Device-3: A2 type: DDR2 size: 1024 MiB speed: 1334 MT/s (667 MHz) Device-4: A3 type: DDR2 size: 512 MiB speed: 1334 MT/s (667 MHz) CPU: Info: dual core model: Intel Core2 6600 bits: 64 type: MCP cache: L2: 4 MiB Speed (MHz): avg: 1600 min/max: 1600/2400 cores: 1: 1600 2: 1600 Memtest86+ has yet to produce any errors when I've run it. Each installation attempt was Generic Desktop with detailed selection and expert using existing partitions. How can I start with a possibility to determine what problem has occurred if/when it fails again? -- Evolution as taught in public schools is, like religion, based on faith, not based on science. Team OS/2 ** Reg. Linux User #211409 ** a11y rocks! Felix Miata

4 4

Re: openSUSE Factory Digest, Vol 168, Issue 3
by Fritz Hudnut 21 Feb '23

21 Feb '23

> ---------- Forwarded message ---------- > From: Larry Len Rainey <llrainey15(a)gmail.com> > To: openSUSE Factory - Mailing List <opensuse-factory(a)opensuse.org>, > OpenSUSE Support <support(a)lists.opensuse.org> > Cc: > Bcc: > Date: Tue, 21 Feb 2023 09:22:17 -0600 > Subject: 15.5 Beta Full disappointment > > The Alpha version of 15.5 had MATE desktop as a choice. MATE is no longer > offer nor is Cinnamon in 15.5. Some say MATE is stale - I say it is Mature, > Stable, and relative bug free - what you want for a stable computer > environment. > > Yes, MATE still is in Tumbleweed, but many of those retired people I > support do not have enough internet to support zypper dup that Tumbleweed > requires way too often. They could not do windows 7, 8, 10 and 11. XP was > the last Windows they were comfortable with. Some still use Windows XP and > the mail app that they used with Windows 95. > > I dropped Windows in the XP days - Centos was the 1st Full time Linux and > I had VirtualBox working with an Windows XP guest on a 4 core computer with > 4mb of ram. I had not completely wean myself off Windows as I had not found > Linux apps to replace my Windows apps. > > Many of us do not care for KDE or Gnome. The other choice LXDE does not > provide all the options needed. > > Looks like 15.4 is the last OpenSUSE version I will be supporting. > > Mint Linux offers MATE as a standard desktop. That will probably be the > winner as it has a long term version. > > Over the next year I will be converting 145 OpenSUSE 15.4 running MATE to > Mint Linux unless you can convince me that MATE is coming. > > Larry Rainey - Unix since 1973, Linux since Mandrake was offered on CD in > 1998. > > @Larry R: I also like MATE quite a bit, I have it as the DE for a few of my distros . . . and I have a Leap 15.5 Alpha>Beta install running. Don't have time to check, but usually any DE can be added into any system . . . via YaSt or possibly just "sudo zypper in mate" ????? If that isn't something you want to mess with, my Leap 15.5 system is running XFCE, which I just picked for the variety. But going back to the early '00's in PPC linux I usually had Xubuntu XFCE and Lubuntu LXDE as the systems most reliable and using the least resources. XFCE is a good choice if MATE can't work in Leap 15.5. Other option, Gecko stable . . . she offers just about every single DE you could imagine for her system . . . Gecko is like ubuntu, a stack on openSUSE . . . works out of the box, etc. Lastly, for the MATE purist is now ubuntu-MATE . . . a bonded system of ubuntu with built-in MATE . . . well supported. I used to have that as an install because I like the simplicity of MATE so much, but ubuntu doesn't play well with others in grub, so, for a single system on a machine, it's fine. If you want a few other non-Debian systems then it messes with UUID numbers. F

1 0

Please improve release notes in the future
by Daniel Noga 21 Feb '23

21 Feb '23

I read announcement https://news.opensuse.org/2023/02/21/leap-reaches-beta-phase/ and it contains two unfortunate misinformations. First, it is not clear, that Plasma missed beta release and will be included a few weeks later. There are already reddit questions what is wrong. Second, "Linux Kernel 5.14.21 will remain the same as that of Leap 15.4.", which is I guess is not true, because every minor release in past contained a lot of driver backports from newer kernels. In the next announcement it will be better to promote info, that number of 5.14.21 does not mean "old kernel", but that it contains graphics (sound, wifi?) drivers of new kernel x.x.x

1 0

Bluetooth issues (ongoing)
by Markus Feilner 21 Feb '23

21 Feb '23

Hi, On my Acer Travelmate connected to a Dell Dock, Bluetooth isn't working after boot. I need to call rfkill and do a bluetooth service restart, then it works flawlessly. This is after a fresh boot: mfeilner@maldacena:~> bluetoothctl Agent registered [bluetooth]# list Controller F4:B3:01:49:51:46 maldacena.feilner-it.net [default] [bluetooth]# devices Device 0C:A6:94:D1:77:5D Büro Regensburg (...) [bluetooth]# connect 0C:A6:94:D1:77:5D Attempting to connect to 0C:A6:94:D1:77:5D [bluetooth]# power on Changing power on succeeded [bluetooth]# connect 0C:A6:94:D1:77:5D Attempting to connect to 0C:A6:94:D1:77:5D Failed to connect: org.bluez.Error.InProgress br-connection-busy [bluetooth]# power off Failed to set power off: org.bluez.Error.Busy Failed to connect: org.bluez.Error.Failed br-connection-unknown Failed to set power off: org.bluez.Error.Failed [bluetooth]# power off Failed to set power off: org.bluez.Error.Failed [bluetooth]# exit mfeilner@maldacena:~> The "connect" commands fail, and after calling them, "power off" will also fail. (Yes, pairing has been successful) I have a solution, but I would love to know the root of the problem and help others, maybe. Here's my little script that fixes it: #!/bin/bash sudo rfkill unblock bluetooth sudo service bluetooth restart sleep 3s bluetoothctl power on After that, Bluetooth works as expected. The script only needs to be called once after boot - I automated that as a start script. I have no idea what goes wrong upon initialization of bluetooth on boot, but only if I call rfkill and restart the service, bluetooth connection to my stereo can be established. I have seen this behaviour also on my media center, the start script fixed it there, too. Any ideas? How can I help? In the meantime, I check the usual pages for a bug related to this. It's been like this for months... -- Best Regards - Mit freundlichen Grüßen, Markus Feilner, Feilner IT - 20 years of open services - Sustainable Open Source Strategy, Networking, Politics, Journalism Knowledge Management, Rubber Ducks, Trainings, Workshops, Documentation https://www.feilner-it.net, 93059 Regensburg Wöhrdstr. 10, +49 170 302 7092 (+Signal) https://mastodon.cloud/@mfeilner https://mastodon.social/@FeilnerIT PGP: 40A3C306F96133067C11CFD9A958A906268C9F0A http://www.feilner-it.net/files/MFpub.asc Xing: http://www.xing.com/profile/Markus_Feilner LinkedIn: https://www.linkedin.com/in/markusfeilner @mfeilner: Mastodon, Matrix, Jabber, ...

6 10

New Tumbleweed snapshot 20230220 released!
by Dominique Leuenberger 21 Feb '23

21 Feb '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: java-11-openjdk openssl-3 (3.0.7 -> 3.0.8) openssl (3.0.7 -> 3.0.8) parole (4.16.0 -> 4.18.0) procps4 (4.0.2 -> 4.0.3) qca-qt5 xfce4-notifyd (0.8.0 -> 0.8.1) zchunk (1.2.3 -> 1.2.4) === Details === ==== java-11-openjdk ==== Subpackages: java-11-openjdk-headless - Remove the accessibility sub-package, since it was never really working and creates another problems (bsc#1205916). It can eventually be built as standalone if needed - Removed patches: * jaw-jdk10.patch * jaw-misc.patch * jaw-nogtk.patch + not needed after the removal of the accessibility sub-package ==== openssl-3 ==== Version update (3.0.7 -> 3.0.8) Subpackages: libopenssl3 libopenssl3-32bit libopenssl3-hmac - Update to 3.0.8: * Fixed NULL dereference during PKCS7 data verification. A NULL pointer can be dereferenced when signatures are being verified on PKCS7 signed or signedAndEnveloped data. In case the hash algorithm used for the signature is known to the OpenSSL library but the implementation of the hash algorithm is not available the digest initialization will fail. There is a missing check for the return value from the initialization function which later leads to invalid usage of the digest API most likely leading to a crash. ([bsc#1207541, CVE-2023-0401]) PKCS7 data is processed by the SMIME library calls and also by the time stamp (TS) library calls. The TLS implementation in OpenSSL does not call these functions however third party applications would be affected if they call these functions to verify signatures on untrusted data. * Fixed X.400 address type confusion in X.509 GeneralName. There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but the public structure definition for GENERAL_NAME incorrectly specified the type of the x400Address field as ASN1_TYPE. This field is subsequently interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an ASN1_STRING. When CRL checking is enabled (i.e. the application sets the X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass arbitrary pointers to a memcmp call, enabling them to read memory contents or enact a denial of service. ([bsc#1207533, CVE-2023-0286]) * Fixed NULL dereference validating DSA public key. An invalid pointer dereference on read can be triggered when an application tries to check a malformed DSA public key by the EVP_PKEY_public_check() function. This will most likely lead to an application crash. This function can be called on public keys supplied from untrusted sources which could allow an attacker to cause a denial of service attack. The TLS implementation in OpenSSL does not call this function but applications might call the function if there are additional security requirements imposed by standards such as FIPS 140-3. ([bsc#1207540, CVE-2023-0217]) * Fixed Invalid pointer dereference in d2i_PKCS7 functions. An invalid pointer dereference on read can be triggered when an application tries to load malformed PKCS7 data with the d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions. The result of the dereference is an application crash which could lead to a denial of service attack. The TLS implementation in OpenSSL does not call this function however third party applications might call these functions on untrusted data. ([bsc#1207539, CVE-2023-0216]) * Fixed Use-after-free following BIO_new_NDEF. The public API function BIO_new_NDEF is a helper function used for streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the SMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by end user applications. The function receives a BIO from the caller, prepends a new BIO_f_asn1 filter BIO onto the front of it to form a BIO chain, and then returns the new head of the BIO chain to the caller. Under certain conditions, for example if a CMS recipient public key is invalid, the new filter BIO is freed and the function returns a NULL result indicating a failure. However, in this case, the BIO chain is not properly cleaned up and the BIO passed by the caller still retains internal pointers to the previously freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO then a use-after-free will occur. This will most likely result in a crash. ([bsc#1207536, CVE-2023-0215]) * Fixed Double free after calling PEM_read_bio_ex. The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data. If the function succeeds then the "name_out", "header" and "data" arguments are populated with pointers to buffers containing the relevant decoded data. The caller is responsible for freeing those buffers. It is possible to construct a PEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex() will return a failure code but will populate the header argument with a pointer to a buffer that has already been freed. If the caller also frees this buffer then a double free will occur. This will most likely lead to a crash. The functions PEM_read_bio() and PEM_read() are simple wrappers around PEM_read_bio_ex() and therefore these functions are also directly affected. These functions are also called indirectly by a number of other OpenSSL functions including PEM_X509_INFO_read_bio_ex() and SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal uses of these functions are not vulnerable because the caller does not free the header argument if PEM_read_bio_ex() returns a failure code. ([bsc#1207538, CVE-2022-4450]) * Fixed Timing Oracle in RSA Decryption. A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages for decryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5, RSA-OEAP and RSASVE. ([bsc#1207534, CVE-2022-4304]) * Fixed X.509 Name Constraints Read Buffer Overflow. A read buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. The read buffer overrun might result in a crash which could lead to a denial of service attack. In a TLS client, this can be triggered by connecting to a malicious server. In a TLS server, this can be triggered if the server requests client authentication and a malicious client connects. ([bsc#1207535, CVE-2022-4203]) * Fixed X.509 Policy Constraints Double Locking security issue. If an X.509 certificate contains a malformed policy constraint and ... changelog too long, skipping 21 lines ... 7953 AC1F BC3D C8B3 B292 393E D5E9 E43F 7DF9 EE8C (Richard Levitte) ==== openssl ==== Version update (3.0.7 -> 3.0.8) - Update to 3.0.8 ==== parole ==== Version update (4.16.0 -> 4.18.0) Subpackages: parole-lang - Update to version 4.18.0 * Update copyright year * Update bug report address * player: Prevent infinite cycle when setting volume (#119) * Update some icon names (!17) * Reduce hiding controls to 2 seconds (Fixes #80, !12) * autoconf: Some updates * Update `.gitignore` * build: Replace DATADIRNAME no longer set by xfce4-dev-tools >= 4.17.0 * build: Bump GLib minimum required to 2.38 * autoconf: Use AC_CONFIG_MACRO_DIRS (!14) * Fix memory leak when loading cover image (#98) * Fix compilation warnings (!11) * Makefile.am: INCLUDES -> AM_CPPFLAGS * autoconf: Some updates * Remove the deprecated keys from desktop file (!9) * Translation Updates ==== procps4 ==== Version update (4.0.2 -> 4.0.3) Subpackages: libproc2-0 procps4-lang - Update to procps-ng-4.0.3 * library Only changes were in copyright headers and tests * docs: Don't install English manpages twice * pgrep: Add -H match on userspace signal handler merge #165 * pgrep: make --terminal respect other criteria * ps: c flag shows command name again Debian #1026326 * ps.1: Match drs description from top.1 merge #156 * skill: Match on -p again Debian #1025915 * top: E/P-core toggle ('5' key) added to help * vmstat: Referesh memory statistics Debian #1027963 * vmstat: Fix initial si,so,bi,bo,in & cs values issue #15 Debian #668580 * vmstat: Fix conversion errors due to precision merge #75 * w: Add --pids option merge #159 * watch: Pass through beep issue #104 * watch: -r option to not re-exec on SIGWINCH merge #125 * watch: find eol with --no-linewrap merge #157 - Drop patches now upstream * linguas.patch * 82d8e3fa.patch - Port patches * procps-ng-3.3.10-errno.patch * procps-ng-3.3.10-slab.patch * procps-ng-3.3.10-xen.dif * procps-ng-3.3.11-pmap4suse.patch * procps-ng-3.3.8-ignore-scan_unevictable_pages.patch * procps-ng-3.3.8-petabytes.patch * procps-ng-3.3.8-readeof.patch * procps-ng-3.3.8-vmstat-terabyte.dif * procps-ng-3.3.9-w-notruncate.diff * procps-v3.3.3-columns.dif * procps-v3.3.3-ia64.diff * procps-v3.3.3-pwdx.patch * procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff ==== qca-qt5 ==== Subpackages: libqca-qt5-2 qca-qt5-plugins - Disable the pgp test. It fails randomly. - Remove test that openssl has decided it's wrong [boo#1208393] * Add 0001-Remove-test-that-openssl-has-decided-it-s-wrong.patch ==== xfce4-notifyd ==== Version update (0.8.0 -> 0.8.1) Subpackages: xfce4-notifyd-lang - Update to 0.8.1: * Set 1.5s timeouts for the log dbus proxy * Move log dbus server to its own object/file * Wrap queue item struct creation with a function * Improve old log migration error reporting * Delete old log file if it was empty * Clean up old log action parsing loop * Print a message if log db is busy or locked * Plug memleak when not sending log changed signal * Use GStrvBuilder instead of constructing one manually * Handle empty strings from DBus * Limit notification body to 2 lines in plugin menu * Remove old legacy support options from configure * Ensure gdbus-codegen doesn't generate too-new code * Clean up generate code and deprecate Quit method * Make all notification log access go through dbus * Drop old gtk 3.0 themes (3.20 themes are always used) * Clean up build system * Add hidden setting to restore override-redirect behavior * Remove ChangeLog make target * Markdownify and update the readme * Disconnect from GtkIconTheme::changed when plugin destroyed * Load main panel icon with _load_symbolic() variant * Restore log viewer's scrolled window shadow-type * Update icon when icon-theme changes * Fix incorrect signal handler connections in settings dialog * Translation Updates ==== zchunk ==== Version update (1.2.3 -> 1.2.4) - update to 1.2.4: * Update tests to handle zstd 1.5.4

1 0

openSUSE Leap 15.5 Beta is now available
by ddemaio 21 Feb '23

21 Feb '23

Hi all, I’m happy to announce that we are in the Leap 15.5 Beta phase! The first beta images (Build408.2) should be already synced to mirrors near you and at around 12:00 UTC the front end of get.opensuse.org switches from Alpha to Beta.The official announcement can be found at https://news.opensuse.org/2023/02/21/leap-reaches-beta-phase/ Thank you to all who contributed to this beta release and thank you in advance for testing it. Please contribute to the Beta testing effort and record it on the following document: https://docs.google.com/spreadsheets/d/1AGKijKpKiJCB616-bHVoNQuhWHpQLHPWCb3… v/r Doug

1 0

LegacyX86: port not rolling at the moment
by Dominique Leuenberger 21 Feb '23

21 Feb '23

Dear Tumbleweed LegacyX86 (i586) users - and hackers, The 32bit port has been halted for the last couple days: last published snapshot was 20230208. Starting with 0209, the snapshot has been held back as KDE/Plasma crashes on startup. There is a bug report https://bugzilla.opensuse.org/show_bug.cgi?id=1208188 that likely needs your help to make the i586-port move again. Other users of the port would surely be grateful. Cheers, Dominique

1 0

New Tumbleweed snapshot 20230219 released!
by Dominique Leuenberger 20 Feb '23

20 Feb '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: audit (3.0.6 -> 3.0.9) audit-secondary (3.0.6 -> 3.0.9) elfutils elfutils-debuginfod freeipmi (1.6.9 -> 1.6.10) fuse3 (3.13.1 -> 3.14.0) permissions (1599_20221220 -> 1599_20230217) psmisc python-kiwi (9.24.55 -> 9.24.57) python-reportlab python-zope.event (4.5.0 -> 4.6) python310-pyparsing shadow tree (2.0.4 -> 2.1.0) vim xen === Details === ==== audit ==== Version update (3.0.6 -> 3.0.9) Subpackages: libaudit1 libaudit1-32bit libauparse0 - Enable build for ARM (32-bit) - Update to version 3.0.9: * In auditd, release the async flush lock on stop * Don't allow auditd to log directly into /var/log when log_group is non-zero * Cleanup krb5 memory leaks on error paths * Update auditd.cron to use auditctl --signal * In auparse, if too many fields, realloc array bigger (Paul Wolneykien) * In auparse, special case kernel module name interpretation * If overflow_action is ignore, don't treat as an error (3.0.8) * Add gcc function attributes for access and allocation * Add some more man pages (MIZUTA Takeshi) * In auditd, change the reinitializing of the plugin queue * Fix path normalization in auparse (Sergio Correia) * In libaudit, handle ECONNREFUSED for network uid/gid lookups (Enzo Matsumiya) * In audisp-remote, fix hang with disk_low_action=suspend (Enzo Matsumiya) * Drop ProtectHome from auditd.service as it interferes with rules (3.0.7) * Add support for the OPENAT2 record type (Richard Guy Briggs) * In auditd, close the logging file descriptor when logging is suspended * Update the capabilities lookup table to match 5.16 kernel * Improve interpretation of renamat & faccessat family of syscalls * Update syscall table for the 5.16 kernel * Reduce dependency from initscripts to initscripts-service - Refresh patches (context adjusment): * audit-allow-manual-stop.patch * audit-ausearch-do-not-require-tclass.patch * audit-no-gss.patch * enable-stop-rules.patch * fix-hardened-service.patch * harden_auditd.service.patch - Remove patches (fixed by version update): * libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch * audisp-remote-fix-hang-with-disk_low_action-suspend-.patch ==== audit-secondary ==== Version update (3.0.6 -> 3.0.9) Subpackages: audit python3-audit system-group-audit - Replace transitional %usrmerged macro with regular version check (boo#1206798) - Enable build for ARM (32-bit) - Update to version 3.0.9: * In auditd, release the async flush lock on stop * Don't allow auditd to log directly into /var/log when log_group is non-zero * Cleanup krb5 memory leaks on error paths * Update auditd.cron to use auditctl --signal * In auparse, if too many fields, realloc array bigger (Paul Wolneykien) * In auparse, special case kernel module name interpretation * If overflow_action is ignore, don't treat as an error (3.0.8) * Add gcc function attributes for access and allocation * Add some more man pages (MIZUTA Takeshi) * In auditd, change the reinitializing of the plugin queue * Fix path normalization in auparse (Sergio Correia) * In libaudit, handle ECONNREFUSED for network uid/gid lookups (Enzo Matsumiya) * In audisp-remote, fix hang with disk_low_action=suspend (Enzo Matsumiya) * Drop ProtectHome from auditd.service as it interferes with rules (3.0.7) * Add support for the OPENAT2 record type (Richard Guy Briggs) * In auditd, close the logging file descriptor when logging is suspended * Update the capabilities lookup table to match 5.16 kernel * Improve interpretation of renamat & faccessat family of syscalls * Update syscall table for the 5.16 kernel * Reduce dependency from initscripts to initscripts-service - Refresh patches (context adjusment): * audit-allow-manual-stop.patch * audit-ausearch-do-not-require-tclass.patch * audit-no-gss.patch * enable-stop-rules.patch * fix-hardened-service.patch * harden_auditd.service.patch - Remove patches (fixed by version update): * libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch * audisp-remote-fix-hang-with-disk_low_action-suspend-.patch ==== elfutils ==== Subpackages: elfutils-lang libasm1 libdw1 libelf1 - Fix build with libcurl version 7.88.0 for various deprecated constants. Add patches: * elfutils-0.188-CURLOPT_PROTOCOLS_STR.patch * elfutils-0.188-CURL_AT_LEAST_VERSION.patch * elfutils-0.188-deprecated-CURLINFO.patch - Add support-DW_TAG_unspecified_type.patch that fixes PR30047. ==== elfutils-debuginfod ==== Subpackages: debuginfod-profile libdebuginfod1 - Fix build with libcurl version 7.88.0 for various deprecated constants. Add patches: * elfutils-0.188-CURLOPT_PROTOCOLS_STR.patch * elfutils-0.188-CURL_AT_LEAST_VERSION.patch * elfutils-0.188-deprecated-CURLINFO.patch - Add support-DW_TAG_unspecified_type.patch that fixes PR30047. ==== freeipmi ==== Version update (1.6.9 -> 1.6.10) Subpackages: libfreeipmi17 libipmiconsole2 libipmidetect0 - freeipmi 1.6.10 * Support IPv6 Lan configuration in ipmi-config IPv6 configuration is supported in the new Lan6_Conf section - add upstream signing key and source signature ==== fuse3 ==== Version update (3.13.1 -> 3.14.0) Subpackages: libfuse3-3 - Update to release 3.14 * Split config.h into private and public config - Delete 0001-Split-config.h-into-private-and-public-config.patch (merged). ==== permissions ==== Version update (1599_20221220 -> 1599_20230217) Subpackages: chkstat permissions-config - Update to version 20230217: * shadow: newgidmap,newuidmap: use capabilities (bsc#1208309) * profiles: whitelist kismet capabilities (bsc#1200954) (#171) ==== psmisc ==== Subpackages: psmisc-lang - allow to switch off Apparmor support via bcond ==== python-kiwi ==== Version update (9.24.55 -> 9.24.57) - Bump version: 9.24.56 â 9.24.57 - Allow squashfscompression for plain squashfs The schematron rule to limit the squashfscompression attribute to certain image types did not allow it for a plain squashfs filesystem build. This commit fixes that limitation. This Fixes #2241 - Use rsync defaults to sync the initrd root-tree This commits makes use of rsync default options to sync the root-tree of the boot image for custom initrds. Fixes bsc#1207128 where it was noted hardlinks were not preserved inside the initrd. Signed-off-by: David Cassany <dcassany(a)suse.com> - Fixed wrong test assertions Former versions of pytest did ignore invalid assertions. Now they are reported as an error and show the mistakes of the past - Added 90-brd.conf for test-image-disk-ramdisk By default the brd ramdisk module is no longer added to the initrd. For ramdisk deployments this is required though. This Fixes #2230 - Delete CentOS v7 build tests CentOS v7 is EOL for kiwi image build tests - Allow to specify fixed size for the root partition So far the last partition (typically root) in the partition table takes all the rest space of the partition table in the image file. At deployment/boot time users had several options to let that partition grow to a custom size. However, during build time of the image it was not possible to specify a specific fixed size for the root partition as we don't wanted to produce gaps of unpartitioned space in the image file. It has turned out that there is hardware available which requires a partition to be an exact multiple of some blocksize. As kiwi supports size constraints for all other partitions but not for root this commit now allows for it. The oem-systemsize element is now also taken into account at build time of the image if the oem-resize which would do that at deployment/boot time is switched off like the following example shows: ```xml <oemconfig>  <oem-systemsize>2048</oem-systemsize> <oem-resize>false</oem-resize> </oemconfig> ``` This Fixes #2203 - Delete ppc:fedora from testing report - Remove Fedora PPC build test from index The integration test unfortunately never got tested anywhere is outdated and I have no PPC hardware here to run any tests. Let's add a real test if there is demand for it - Added kiwi-settings for Fedora arm build tests - Allow fat16/fat32 as filesystem in partitions The partitions element allows to specify the filesystem for the individual partition. In the schema fat16 and fat32 were missing - Stick with tox v3.28.0 for unit testing tox >= 3.0.15 together with virtualenv >= 20.17.1 raises strange incompatibilities and prevents the unit test run because tox calls virtualenv in a wrong way leading to strange error messages like: - -- usage: virtualenv ... virtualenv: error: argument dest: destination '{check,devel,packagedoc,doc,doc_gh_pages,doc_suse,doc_man,scripts,}: /home/runner/work/kiwi/kiwi/.tox/3\n/home/runner/work/kiwi/kiwi/.tox/3.8' must not contain the path separator (:) as this would break the activation scripts - -- All this doesn't make sense to me at all and worked without any issues before. - Bump version: 9.24.55 â 9.24.56 - Fix gh-pages publish ==== python-reportlab ==== - pick the primary interpreter for doc generation even if it is not "python3" ==== python-zope.event ==== Version update (4.5.0 -> 4.6) - update to 4.6: * Port documentation to Python 3. * Add support for Python 3.10, 3.11. ==== python310-pyparsing ==== - do primary/all split only for tumbleweed (similar to flit-core) ==== shadow ==== Subpackages: libsubid4 login_defs - Update shadow-fix-print-login-timeout.patch - Reorder source files and patches - Remove scripts that claim to be config but are in /usr (boo#1191578) * userdel-script.patch * useradd-script.patch * useradd.local * userdel-post.local * userdel-pre.local ==== tree ==== Version update (2.0.4 -> 2.1.0) - tree 2.1.0: * Add support for --info and --gitignore for the --fromfile option. (Suggested by Piotr Andruszkow) * Add options --infofile and --gitfile to load .info and .gitignore files explicitly. Each implies --info or --gitignore respectively. * Add NULL guard for json_printinfo() and xml_printinfo() (and fix ftype printing for XML) (Kenta Arai) * Fix getcharset() to not return a getenv() pointer (fix for ENV34-C issue.) (Kenta Arai) * Another attempt at fixing extraneous /'s in HTML URLs/output. (Sebastian Rose) * Fixed XML output (Dave Rice) * Remove the (very outdated) French version of the manpage. Look to localization projects such as Debian's 'manpages-l10n' for localized translations. (hmartink) * Add support for the NO_COLOR environment variable (https://no-color.org/) Equivalent to the -n option (can be still be overridden with -C). (Timm Fitschen) * Removed many C99isms to enable compiling on C90 compilers with fewer warnings. (Sith Wijesinghe and Matthew Sessions) It should not be necessary to avoid using a standard that is old enough to drink, furthermore it is all but impossible to remove the remaining warnings and have modern features like compound literals. In the meantime I've added - std=c11 to the default CFLAGS for Linux and will likely not worry about C90 compatibility going forward unless there is some other reason for it. * Added a helper function for long command line arguments to clean up option processing (and fixes the processing for a few of the options such as - -timefmt= (Ð½Ð°Ð±?).) * Added --hintro and --houtro options to select files to use as the HTML intro and outro. Use /dev/null or an empty file to eliminate them entirely. This should make it much easier to create your own custom CSS or embed one or more trees into a web page. * Defer printing the version until the character set is known so we can use the linedraw copyright symbol. * Revert change to the error code to not return an error (code 2) when attempting to list a non-directory that actually exists. Tree will still return an error when attempting to list a non-existing directory/file. * Added option --fflinks which will process symbolic link information from a file generated with 'tree -if --noreport' when using --fromfile. (Suggested by Chentao Credungtao) * Updated the totals reporting code to also include in the total the file or directory that is being listed. This should make a correct report when doing something like 'tree *'. ==== vim ==== Subpackages: vim-data vim-data-common - Add patch vim-fix-sh-syntax.patch which fixes broken sh syntax. ==== xen ==== Subpackages: xen-libs xen-tools xen-tools-domU - bsc#1208286 - VUL-0: CVE-2022-27672: xen: Cross-Thread Return Address Predictions (XSA-426) 63ebca9c-x86-spec-ctrl-Mitigate-Cross-Thread-Return-Address-Predictions.patch

1 0

obs-build standalone dist auto detection broken with Leap 15.3+
by Mihai Moldovan 20 Feb '23

20 Feb '23

Hi I'm probably one of three users worldwide that use obs-build as a standalone solution and out of these three the only one that is actually using the distribution auto-detection feature.[0] I'll have to give a bit context for that. If you use obs-build standalone (i.e., without any obs-server integration) and do not pass the --dist parameter, it will try to auto-detect the distribution in expanddeps[1] using some magic in Build.pm[2] by inspecting the DISTRIBUTION RPM tag of the "rpm" package (yes, literally the binary "rpm" package that is falling out of the "rpm" source package). This makes sense, since the "rpm" package is a prime-time member of any distribution release and we know that it will always be there (unless SUSE decides to switch to a different low-level package manager). This method has been working fine for decades. I've had to tune the code slightly in 2016 to get Leap support[3], but generally it has been smooth sailing. Starting with Leap 15.3 (and partially the testing version of Leap 15.2, which was used as a testing ground for Leap 15.3), which copies binaries directly from SLE, this method now breaks: $ rpm -q --queryformat '%{NAME}-%{VERSION}-%{RELEASE}: %{DISTRIBUTION}\n' *.rpm rpm-4.14.1-29.46 [Leap 15.4]: SUSE Linux Enterprise 15 rpm-4.14.1-lp152.17.5 [Leap 15.2]: openSUSE Leap 15.2 rpm-4.14.3-150300.46.1 [Leap 15.3]: SUSE Linux Enterprise 15 (I manually amended the nvr output with the repository I fetched the package from for this post.) "SUSE Linux Enterprise 15" will be automatically mapped to sles15sp2 or sles15 depending on rpm's dependency upon libgcrypt - neither of which is suitable to detect Leap versions and it certainly wouldn't detect Leap 15.3 or 15.4 in any case. The other issue is that, if rpm was really copied from SLE 15 SP2 verbatim[4], the distribution RPM tag used in SLE is omitting any service pack information, so it's impossible to determine the actual operating system version based on that. Hacks, such as looking at the dependencies and figuring out what service pack it's coming from via newly introduced dependencies only work the first time around, i.e., to distinguish between sle15 and sle15sp2, but not between, e.g., sle15 and sle15sp1 or sle15sp2 and sle15sp3. Fixing these two issues is really easy, but requires the introduction of two new policies: 1.) Always rebuild the "rpm" package for Leap - don't just copy it from SLE. While I understand that rebuilds are costly, especially if the sources and dependencies are unchanged, I'm only asking to make an exception for the core package that will be used in auto-detection - "rpm". All other packages can happily be copied from SLE. 2.) For SLE itself, the distribution RPM tag should also include service pack information, and the "rpm" package likewise always be rebuild for any new service pack release - no matter whether the source or direct dependencies actually changed. Is this something that could be done? It's too late for Leap 15.3 now (and by extension sle15sp3), since it's already EOL, but it's not too late to fix Leap 15.4 and higher (also sle15sp4+). Best regards, Mihai [0] The numbers are completely made up, but sound believable. [1] https://github.com/openSUSE/obs-build/blob/eaf56f9af8e4bf4c4cf61560ce245403… [2] https://github.com/openSUSE/obs-build/blob/eaf56f9af8e4bf4c4cf61560ce245403… [3] https://github.com/openSUSE/obs-build/commit/66328f9e93716fb2c24eeebe5057a4… [4] I haven't downloaded the actual SLE media to cross-check this assumption, but I bet that the distribution tag would be the same for the rpm package on the actual SLE installation media/repository.

3 4

New Tumbleweed snapshot 20230218 released!
by Dominique Leuenberger 20 Feb '23

20 Feb '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ruby (3.1 -> 3.2) ruby-common === Details === ==== ruby ==== Version update (3.1 -> 3.2) - switch the default ruby to 3.2 ==== ruby-common ==== - do not rely on file dependencies for getopt

1 0

kjournald - package not find at Tumbleweed Repos
by Ulf 19 Feb '23

19 Feb '23

Hi, I read an interesting news about kjournald which should nicely show the journald entries and makes it easy especially for newcomers to analyze errors. Only available in German: https://linuxnews.de/2023/02/17/kjournald-journal-grafisch-aufbereitet/ Is it possible to integrate it in tumbleweed main repo? https://github.com/KDE/kjournald Can't find it via Discover in my repos, as well not on flathub or opi. $ opi kjournald No package found. Ulf

2 2

Re: kjournald - package not find at Tumbleweed Repos
by Emanuel Castelo 18 Feb '23

18 Feb '23

1 0

New Tumbleweed snapshot 20230217 released!
by Dominique Leuenberger 18 Feb '23

18 Feb '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: apache2-mod_php8 (8.1.15 -> 8.1.16) bind (9.18.11 -> 9.18.12) gnome-desktop (43.1 -> 43.2) gstreamer-plugins-bad inkscape (1.2.1 -> 1.2.2) jhead ovmf perl-Mail-DKIM (1.20220520 -> 1.20230212) php8 (8.1.15 -> 8.1.16) poppler (23.01.0 -> 23.02.0) poppler-qt5 (23.01.0 -> 23.02.0) postfix samba (4.17.4+git.314.7b07e3c51a6 -> 4.17.5+git.320.c38ca0f84a) sudo (1.9.12p2 -> 1.9.13) tigervnc (1.12.0 -> 1.13.0) tpm2-0-tss (3.2.0 -> 4.0.1) webkit2gtk3 (2.38.4 -> 2.38.5) webkit2gtk3-soup2 (2.38.4 -> 2.38.5) yast2-packager (4.5.14 -> 4.5.15) === Details === ==== apache2-mod_php8 ==== Version update (8.1.15 -> 8.1.16) - version update to 8.1.16 * This is a security release that addresses CVE-2023-0567, CVE-2023-0568, and CVE-2023-0662. * https://www.php.net/ChangeLog-8.php#8.1.16 ==== bind ==== Version update (9.18.11 -> 9.18.12) Subpackages: bind-doc bind-utils - Update to release 9.18.12 Removed Features: * Specifying a port when configuring source addresses (i.e., as an argument to query-source, query-source-v6, transfer-source, transfer-source-v6, notify-source, notify-source-v6, parental-source, or parental-source-v6, or in the source or source-v6 arguments to primaries, parental-agents, also-notify, or catalog-zones) has been deprecated. In addition, the use-v4-udp-ports, use-v6-udp-ports, avoid-v4-udp-ports, and avoid-v6-udp-ports options have also been deprecated. Warnings are now logged when any of these options are encountered in named.conf. In a future release, they will be made nonfunctional. Bug Fixes: * A constant stream of zone additions and deletions via rndc reconfig could cause increased memory consumption due to delayed cleaning of view memory. This has been fixed. * The speed of the message digest algorithms (MD5, SHA-1, SHA-2), and of NSEC3 hashing, has been improved. * Pointing parental-agents to a resolver did not work because the RD bit was not set on DS requests. This has been fixed. * Building BIND 9 failed when the --enable-dnsrps switch for ./configure was used. This has been fixed. - Updated keyring and signature ==== gnome-desktop ==== Version update (43.1 -> 43.2) Subpackages: gnome-desktop-lang libgnome-desktop-3-20 libgnome-desktop-3_0-common libgnome-desktop-4-2 typelib-1_0-GnomeDesktop-3_0 typelib-1_0-GnomeDesktop-4_0 - Update to version 43.2: + Fix idle monitor watch leak. + Updated translations. ==== gstreamer-plugins-bad ==== Subpackages: gstreamer-plugins-bad-lang libgstadaptivedemux-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstcuda-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstphotography-1_0-0 libgstplay-1_0-0 libgstplayer-1_0-0 libgstsctp-1_0-0 libgsturidownloader-1_0-0 libgstva-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 libgstwebrtcnice-1_0-0 - Remove sys/decklink since that contains a non-standard license and disable the decklink plugin ==== inkscape ==== Version update (1.2.1 -> 1.2.2) Subpackages: inkscape-extensions-extra inkscape-extensions-gimp inkscape-lang - Update to version 1.2.2: + 4 crash fixes, over 25 bug fixes, 5 fixes for extension bugs and 13 improved user interface translations + 2f3101417.patch merged upstream + See the full release notes for Inkscape 1.2.2 at https://media.inkscape.org/media/doc/release_notes/1.2.2/Inkscape_1.2.2.html ==== jhead ==== - Remove hunk that enables -fsanitize=address (bsc#1208386), note it's already removed in the upstream project: https://github.com/Matthias-Wandel/jhead/commit/34f61c3f1408e6b00f6f65dd3d7… ==== ovmf ==== Subpackages: qemu-ovmf-x86_64 - Add ovmf-Revert-OvmfPkg-OvmfXen-Set-PcdFSBClock.patch to revert 71cdb91f313380152d7bf38cfeebe76f5b2d39ac patch (bsc#1205613) - 71cdb91f313380152d7bf38cfeebe76f5b2d39ac OvmfPkg/OvmfXen: Set PcdFSBClock - We are waiting better upsteam patch, revert the issue patch first. Then PcdFSBClock will back to fixed variable. - Reference: https://edk2.groups.io/g/devel/topic/94891128#96077 https://bugzilla.tianocore.org/show_bug.cgi?id=4340 ==== perl-Mail-DKIM ==== Version update (1.20220520 -> 1.20230212) - updated to 1.20230212 see /usr/share/doc/packages/perl-Mail-DKIM/Changes 1.20230212 2023-02-12 UTC + Fix typo in ARC signer example code. Thanks to @dev-aaront-org ==== php8 ==== Version update (8.1.15 -> 8.1.16) Subpackages: php8-cli php8-ctype php8-dom php8-gd php8-gettext php8-iconv php8-mbstring php8-mysql php8-openssl php8-pdo php8-sqlite php8-tokenizer php8-xmlreader php8-xmlwriter - version update to 8.1.16 * This is a security release that addresses CVE-2023-0567, CVE-2023-0568, and CVE-2023-0662. * https://www.php.net/ChangeLog-8.php#8.1.16 ==== poppler ==== Version update (23.01.0 -> 23.02.0) Subpackages: libpoppler-cpp0 libpoppler-glib8 libpoppler126 poppler-tools - Update to version 23.02.0: + core: * CairoOutputDev: . Fix rendering of color type 3 fonts . Add handling matte entry * Fix segfault on wrong nssdir * Fix "NSS could not shutdown" + utils: pdfsig: Point out supports PKCS#11 URIs as nickname ==== poppler-qt5 ==== Version update (23.01.0 -> 23.02.0) - Update to version 23.02.0: + core: * CairoOutputDev: . Fix rendering of color type 3 fonts . Add handling matte entry * Fix segfault on wrong nssdir * Fix "NSS could not shutdown" + utils: pdfsig: Point out supports PKCS#11 URIs as nickname ==== postfix ==== - SELinux: postfix denied to access /var/spool/postfix/pid/master.pid (bsc#1207177) Apply proposed changes in postfix.service - remove patch included into the source: harden_postfix.service.patch ==== samba ==== Version update (4.17.4+git.314.7b07e3c51a6 -> 4.17.5+git.320.c38ca0f84a) Subpackages: libsamba-policy0-python3 samba-ad-dc-libs samba-ad-dc-libs-32bit samba-client samba-client-32bit samba-client-libs samba-client-libs-32bit samba-gpupdate samba-ldb-ldap samba-libs samba-libs-32bit samba-libs-python3 samba-python3 samba-winbind samba-winbind-libs samba-winbind-libs-32bit - Update to 4.17.5 * smbc_getxattr() return value is incorrect; (bso#14808); * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not handled correctly; (bso#15172); * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210); * samba-tool gpo listall fails IPv6 only - finddcs() fails to find DC when there is only an AAAA record for the DC in DNS; (bso#15226); * smbd crashes if an FSCTL request is done on a stream handle; (bso#15236); * DFS links don't work anymore on Mac clients since 4.17; (bso#15277); * vfs_virusfilter segfault on access, directory edgecase (accessing NULL value); (bso#15283); * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5) based SChannel on NETLOGON (additional changes); (bso#15240); * %U for include directive doesn't work for share listing (netshareenum); (bso#15243); * Shares missing from netshareenum response in samba 4.17.4; (bso#15266); * ctdb: use-after-free in run_proc; (bso#15269); * irpc_destructor may crash during shutdown; (bso#15280); * auth3_generate_session_info_pac leaks wbcAuthUserInfo; (bso#15286); * smbclient segfaults with use after free on an optimized build; (bso#15268); * smbstatus leaking files in msg.sock and msg.lock; (bso#15282); * Leak in wbcCtxPingDc2; (bso#15164); * Access based share enum does not work in Samba 4.16+; (bso#15265); * Crash during share enumeration; (bso#15267); * rep_listxattr on FreeBSD does not properly check for reads off end of returned buffer; (bso#15271); * Avoid relying on C89 features in a few places; (bso#15281); - named crashes on DLZ zone update; (bso#14030); (bsc#1206996); - Drop libnsl build requirement; (bsc#1208220); ==== sudo ==== Version update (1.9.12p2 -> 1.9.13) Subpackages: sudo-plugin-python - Update to 1.9.13: * Changes in 1.9.13: Fixed a bug running relative commands via sudo when log_subcmds is enabled. GitHub issue #194. Fixed a signal handling bug when running sudo commands in a shell script. Signals were not being forwarded to the command when the sudo process was not run in its own process group. Fixed a bug in the cvtsudoers LDIF parsing when the file ends without a newline and a backslash is the last character of the file. Fixed a potential use-after-free bug with cvtsudoers filtering. GitHub issue #198. Added a reminder to the default lecture that the password will not echo. This line is only displayed when the pwfeedback option is disabled. GitHub issue #195. Fixed potential memory leaks in error paths. GitHub issue #199. GitHub issue #202. Fixed potential NULL dereferences on memory allocation failure. GitHub issue #204. GitHub issue #211. Sudo now uses C23-style attributes in function prototypes instead of gcc-style attributes if supported. Added a new list pseudo-command in sudoers to allow a user to list another userâs privileges. Previously, only root or a user with the ability to run any command as either root or the target user on the current host could use the -U option. This also includes a fix to the log entry when a user lacks permission to run sudo -U otheruser -l command. Previously, the logs would indicate that the user tried to run the actual command, now the log entry includes the list operation. JSON logging now escapes control characters if they happen to appear in the command or environment. New Albanian translation from translationproject.org. Regular expressions in sudoers or logsrvd.conf may no longer contain consecutive repetition operators. This is implementation- specific behavior according to POSIX, but some implementations will allocate excessive amounts of memory. This mainly affects the fuzzers. Sudo now builds AIX-style shared libraries and dynamic shared objects by default instead of svr4-style. This means that the default sudo plugins are now .a (archive) files that contain a .so shared object file instead of bare .so files. This was done to improve compatibility with the AIX Freeware ecosystem, specifically, the AIX Freeware build of OpenSSL. Sudo will still load svr4-style .so plugins and if a .so file is requested, either via sudo.conf or the sudoers file, and only the .a file is present, sudo will convert the path from plugin.so to plugin.a(plugin.so) when loading it. This ensures compatibility with existing configurations. To restore the old, pre-1.9.13 behavior, run configure using the âwith-aix-soname=svr4 option. Sudo no longer checks the ownership and mode of the plugins that it loads. Plugins are configured via either the sudo.conf or sudoers file which are trusted configuration files. These checks suffered from time-of-check vs. time-of-use race conditions and complicate loading plugins that are not simple paths. Ownership and mode checks are still performed when loading the sudo.conf and sudoers files, which do not suffer from race conditions. The sudo.conf developer_mode setting is no longer used. Control characters in sudo log messages and sudoreplay -l output are now escaped in octal format. Space characters in the command path are also escaped. Command line arguments that contain spaces are surrounded by single quotes and any literal single quote or backslash characters are escaped with a backslash. This makes it possible to distinguish multiple command line arguments from a single argument that contains spaces. Improved support for DragonFly BSD which uses a different struct procinfo than either FreeBSD or 4.4BSD. Fixed a compilation error on Linux arm systems running older kernels that may not define EM_ARM in linux/elf-em.h. GitHub issue #232. Fixed a compilation error when LDFLAGS contains -Wl,âno-undefined. Sudo will now link using -Wl,âno-undefined by default if possible. GitHub issue #234. Fixed a bug executing a command with a very long argument vector when log_subcmds or intercept is enabled on a system where intercept_type is set to trace. GitHub issue #194. When sudo is configured to run a command in a pseudo-terminal but the standard input is not connected to a terminal, the command will now be run as a background process. This works around a problem running sudo commands in the background from a shell script where changing the terminal to raw mode could interfere with the interactive shell that ran the script. GitHub issue #237. A missing include file in sudoers is no longer a fatal error unless the error_recovery plugin argument has been set to false. ==== tigervnc ==== Version update (1.12.0 -> 1.13.0) Subpackages: libXvnc1 xorg-x11-Xvnc xorg-x11-Xvnc-module - A little cleanup of specfile - Update to tigervnc 1.13.0 * The servers and native viewer now support RealVNC's RSA-AES authentication methods and encryption * The native viewer is now translated to Romanian and Georgian * The native viewer now (optionally) supports PiKVM's H.264 encoding * The display settings for the native viewer have been overhauled to make them easier to understand * The native viewer now supports adding exceptions for expired certificates * Resolved an issue where full-screen mode didn't work in the native viewer on macOS 13 * Lock key synchronization has been re-enabled in the native viewer after being accidentally disabled in 1.11.0 * Xvnc/libvnc.so can now be built with Xorg 1.21 * x0vncserver is a bit better at handling differing server and client keyboard layout * x0vncserver now correctly handles zaphod mode - Removed patches (no longer needed): * tigervnc-newfbsize.patch (https://github.com/TigerVNC/tigervnc/pull/13) * n_utilize-system-crypto-policies.patch (https://github.com/TigerVNC/tigervnc/pull/1262) * xserver211.patch & u_tigervnc-211.patch (https://github.com/TigerVNC/tigervnc/pull/1383) - Refreshed patches: * n_tigervnc-date-time.patch * n_vncserver.patch * u_change-button-layout-in-ServerDialog.patch ==== tpm2-0-tss ==== Version update (3.2.0 -> 4.0.1) Subpackages: libtss2-esys0 libtss2-mu0 libtss2-rc0 libtss2-sys1 libtss2-tctildr0 - Drop 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch as was already merged upstream - Update to 4.0.1 + Fixed: * A buffer overflow in tss2-rc as CVE-2023-22745. - Update to 4.0.0 + Fixed: * tcti-ldr: Use heap instead of stack when tcti initialize * Fix usage of NULL pointer if Esys_TR_SetAuth is calles with ESYS_TR_NONE. * Conditionally check user/group manipulation commands. * Store VERSION into the release tarball. * When using DESTDIR for make einstall, do not invoke systemd-sysusers and systemd-tmpfiles. * esys_iutil: fix possible NPD. * Tss2_Sys_Flushcontext: flushHandle was encoded as a handleArea handle and not as parameter one, this affected the contents of cpHash. * esys: fix allow usage of HMAC sessions for Esys_TR_FromTPMPublic. * fapi: fix usage of policy_nv with a TPM nv index. * linking tcti for libtpms against tss2-tctildr. It should be linked against tss2-mu. * build: Remove erroneous trailing comma in linker option. Bug [#2391]. * fapi: fix encoding of complex tpm2bs in authorize nv, duplication select and policy template policies. Now the complex and TPMT or TPMS representations can be used. Bug #2383 * The error message for unsupported FAPI curves was in hex without a leading 0x, make it integer output to clarify. * Documentation that had various scalar out pointers as "callee allocated". * test: build with opaque FILE structure like in musl libc. * Transient endorsement keys were not recreated according to the EK credential profile. * Evict control for a persistent EK failed during provisioning if an auth value for the storage hierarchy was set. * The authorization of the storage hierarchy is now added. Fixes FAPI: Provisioning error if an auth value is needed for the storage hierarchy #2438. * Usage of a second profile in a path was not possible because the default profile was always used. * The setting of an empty auth value for Fapi_Provision was fixed. * JSON encoding of a structure TPMS_POLICYAUTHORIZATION used the field keyPEMhashAlg instead of hashAlg as defined in "TCG TSS 2.0 JSON Data Types and Policy Language Specification". Rename to hashAlg but preserve support for reading keyPEMhashAlg for backwards compatibility. * fapi: PolicySecret did not work with keys as secret object. * Esys_PCR_SetAuthValue: remembers the auth like other SetAutg ESAPI functions. * tests: esys-pcr-auth-value.int moved to destructive tests. * FAPI: Fix double free if keystore is corrupted. * Marshaling of TPMU_CAPABILITIES data, only field intelPttProperty was broken before.a * Spec deviation in Fapi_GetDescription caused description to be NULL when it should be empty string. This is API breaking but considered a bug since it deviated from the FAPI spec. * FAPI: undefined reference to curl_url_strerror when using curl less than 7.80.0. * FAPI: Fixed support for EK templates in NV inidices per the spec, see #2518 for details. * FAPI: fix NPD in ifapi_curl logging. * FAPI: Improve documentation fapi-profile * FAPI: Fix CURL HTTP handling. * FAPI: Return FAPI_RC_IO_ERROR if a policy does not exist in keystore. + Added: * TPM version 1.59 support. * ci: ubuntu-22.04 added. * mbedTLS 3.0 is supported by ESAPI. * Add CreationHash to JSON output for usage between applications not using the FAPI keystore, like command line tools. * Reduced code size for SAPI. * Support for Runtime Switchable ESAPI Crypto Backend via Esys_SetCryptoCallbacks. * Testing for TCG EK Credential Profile TPM 2.0, Version 2.4 Rev. 3, 2021 for the low and high address range of EK templates. * tss2-rc: Tss2_RC_DecodeInfo function for parsing TSS2_RC into the various bit fields. * FAPI support for P_ECC384 profile. * tss2-rc: Tss2_RC_DecodeInfoError: Function to get a human readable error from a TSS2_RC_INFO returned by Tss2_RC_DecodeInfo * tcti: Generic SPI driver, implementors only need to connect to acquire/release, transmit/receive, and sleep/timeout functions. * FAPI: Add event logging for Firmware and IMA Events. See #2170 for details. * FAPI: Fix Fapi_ChangeAuth updates on hierarchy objects not being reflected across profiles. * FAPI: Allow keyedhash keys in PolicySigned. * ESAPI: Support sha512 for mbedtls crypto backend. * TPM2B_MAX_CAP_BUFFER and mu routines * vendor field to TPMU_CAPABILTIIES * FAPI: support for PolicyTemplate + Changed * libmu soname from 0:0:0 to 0:1:0. * tss2-sys soname from 1:0:0 to 1:1:0 * tss2-esys: from 0:0:0 to 0:1:0 ... changelog too long, skipping 6 lines ... * Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Unmarshal ==== webkit2gtk3 ==== Version update (2.38.4 -> 2.38.5) Subpackages: WebKit2GTK-4.1-lang libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles - Update to version 2.38.5 (boo#1208328): + Fix large memory allocation when uploading content. + Fix scrolling after a history navigation with PSON enabled. + Always update the active uri of WebKitFrame. + Fix the build on Ubuntu 20.04. + Fix several crashes and rendering issues. + Security fixes: CVE-2023-23529. ==== webkit2gtk3-soup2 ==== Version update (2.38.4 -> 2.38.5) Subpackages: WebKit2GTK-4.0-lang libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 webkit2gtk-4_0-injected-bundles - Update to version 2.38.5 (boo#1208328): + Fix large memory allocation when uploading content. + Fix scrolling after a history navigation with PSON enabled. + Always update the active uri of WebKitFrame. + Fix the build on Ubuntu 20.04. + Fix several crashes and rendering issues. + Security fixes: CVE-2023-23529. ==== yast2-packager ==== Version update (4.5.14 -> 4.5.15) - Ruby 3.2: Change a test to treat dir:///foo equal to dir:/foo (bsc#1207239) - 4.5.15

1 0

New Tumbleweed snapshot 20230216 released!
by Dominique Leuenberger 17 Feb '23

17 Feb '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: clamav (0.103.7 -> 0.103.8) dav1d (1.0.0 -> 1.1.0) git (2.39.1 -> 2.39.2) gnutls (3.7.8 -> 3.7.9) grub2 gstreamer-plugins-rs (0.9.8+git20230124.d9e9468 -> 0.10.1+git20230213.9cd68ff) kernel-source (6.1.10 -> 6.1.12) mozilla-nss (3.86 -> 3.87) mozjs102 (102.7.0 -> 102.8.0) plasma5-openSUSE tcl thunar util-linux util-linux-systemd === Details === ==== clamav ==== Version update (0.103.7 -> 0.103.8) Subpackages: libclamav9 libfreshclam2 - Update to 0.103.8 * CVE-2023-20032: Fixed a possible remote code execution vulnerability in the HFS+ file parser. Issue affects versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier. (bsc#1208363) * CVE-2023-20052: Fixed a possible remote information leak vulnerability in the DMG file parser. Issue affects versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier. (bsc#1208365) * Update vendored libmspack library to version 0.11alpha. - Package huge .html documentation in a separate subpackage. ==== dav1d ==== Version update (1.0.0 -> 1.1.0) - Update to version 1.1.0 * New function dav1d_get_frame_delay to query the decoder frame delay * Numerous fixes for strict conformity to the specs and samples * NEON and AVX-512 misc fixes and improvements * Partial AVX2 12bpc transform implementations * AVX-512 high bit-depth cdef_filter, loopfilter, itx * NEON z1/z3 optimization for 8bpc * SSSE3 z1 optimization for 8bpc ==== git ==== Version update (2.39.1 -> 2.39.2) Subpackages: git-core git-email git-gui git-svn git-web gitk perl-Git - git 2.39.2: * CVE-2023-22490: Using a specially-crafted repository, Git can be tricked into using its local clone optimization even when using a non-local transport boo#1208027 * CVE-2023-23946: a path outside the working tree can be overwritten as the user who is running "git apply" boo#1208028 ==== gnutls ==== Version update (3.7.8 -> 3.7.9) Subpackages: libgnutls-dane0 libgnutls30 libgnutls30-hmac - Update to 3.7.9: [bsc#1208143, CVE-2023-0361] * libgnutls: Fix a Bleichenbacher oracle in the TLS RSA key exchange. [GNUTLS-SA-2020-07-14, CVSS: medium][CVE-2023-0361] * Rebase gnutls-FIPS-140-3-references.patch ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - Refresh 0003-tpm2-resend-the-command-on-TPM_RC_RETRY.patch to handle the TPM2 responseCode correctly. ==== gstreamer-plugins-rs ==== Version update (0.9.8+git20230124.d9e9468 -> 0.10.1+git20230213.9cd68ff) - Add BuildRequires: zstd so it build in SLE/Leap now that the sources are compressed with zstd - Update to version 0.10.1+git20230213.9cd68ff: * rtpav1pay: Fix calculation of Leb128 size size to work correctly with streams from certain encoders. - Changes from version 0.10.0: * Fixed: - audiornnoise: Use correct value range for the samples - awss3sink: Treat stopping without EOS as an error for multipart upload - awss3hlssink: . Fix the name of the hlssink child element . Fix deadlock on EOS - dav1d: Various fixes to improve performance, to handle decoding errors more gracefully and to make sure all frames are output in the end - fmp4mux: Various fixes to fragment splitting behaviour, output formatting and header generation - gtk4: Various stability and rendering fixes - meson: Various fixes and improvements to the meson-based build system - ndi: provide non-Linux/macOS UNIX fallback for the soname - ndisrc: Use default channel mask for audio output to allow >2 channels to work better - rav1e: Correctly enable threading support - rtpav1: Various fixes to the payloader and depayloader to handle streams more correctly and to handle errors more cleanly - rtpav1depay: Set caps on the source pad - spotify: fix "start a runtime from within a runtime" with static link - textahead: fix previous buffers - textwrap: Don't panic on empty buffers - tttocea608: Don't fail if a GAP event contains no duration - webrtchttp: whipsink: construct TURN URL correctly - webrtcsink: fix panic on pre-bwe request error - whipsink: . Send ICE candidates together with the offer . Various cleanups and minor fixes * Added: - audiornnoise: Add voice detection threshold property - awss3hlssink: Add stats property - awss3sink: Add properties to set Content-Type and Content-Disposition - fmp4mux: . Add 'offset-to-zero' property . Add support for CMAF-style chunking, e.g. low-latency / LL HLS and DASH - fmp4mux/mp4mux: . Add support for muxing Opus, VP8, VP9 and AV1 streams . Make media/track timescales configurable - gtk4: Support for rendering GL textures on X11/EGL, X11/GLX, Wayland and macOS - hlssink3: Allow generating i-frame-only playlist - livesync: New element that alllows maintaining a contiguous live stream without gaps from a potentially unstable source. - mp4mux: New non-fragmented MP4 muxer element - spotifyaudiosrc: Support configurable bitrate - textahead: add settings to display previous buffers - threadshare: Introduce new ts-audiotestsrc - webrtcsink: Support nvv4l2vp9enc - whepsource: Add a WebRTC WHEP source element * Changed: - audiofx: Derive from AudioFilter where possible - dav1ddec: Lower rank to primary to allow usage of hardware decoders with higher ranks - fmp4mux: Only push fragment_offset if write-mfra is true to reduce memory usage - webrtcsink: . Make the turn-server property a turn-servers list . Move from async-std to tokio ==== kernel-source ==== Version update (6.1.10 -> 6.1.12) - Linux 6.1.12 (bsc#1012628). - Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions (bsc#1012628). - KVM: x86: Mitigate the cross-thread return address predictions bug (bsc#1012628). - x86/speculation: Identify processors vulnerable to SMT RSB predictions (bsc#1012628). - drm/i915: Fix VBT DSI DVO port handling (bsc#1012628). - drm/i915: Initialize the obj flags for shmem objects (bsc#1012628). - drm/i915: Move fd_install after last use of fence (bsc#1012628). - drm/amd/display: fix cursor offset on rotation 180 (bsc#1012628). - drm/amd/display: properly handling AGP aperture in vm setup (bsc#1012628). - drm/amdgpu/smu: skip pptable init under sriov (bsc#1012628). - drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini (bsc#1012628). - drm/amd/pm: bump SMU 13.0.7 driver_if header version (bsc#1012628). - drm/amdgpu: Add unique_id support for GC 11.0.1/2 (bsc#1012628). - drm/amd/pm: bump SMU 13.0.0 driver_if header version (bsc#1012628). - arm64: efi: Force the use of SetVirtualAddressMap() on eMAG and Altra Max machines (bsc#1012628). - Fix page corruption caused by racy check in __free_pages (bsc#1012628). - arm64: dts: meson-axg: Make mmc host controller interrupts level-sensitive (bsc#1012628). - arm64: dts: meson-g12-common: Make mmc host controller interrupts level-sensitive (bsc#1012628). - arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive (bsc#1012628). - rtmutex: Ensure that the top waiter is always woken up (bsc#1012628). - tracing: Fix TASK_COMM_LEN in trace event format file (bsc#1012628). - drm/amdgpu: Use the TGID for trace_amdgpu_vm_update_ptes (bsc#1012628). - powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch (bsc#1012628). - riscv: kprobe: Fixup misaligned load text (bsc#1012628). - riscv: Fixup race condition on PG_dcache_clean in flush_icache_pte (bsc#1012628). - nvdimm: Support sizeof(struct page) > MAX_STRUCT_PAGE_SIZE (bsc#1012628). - ceph: flush cap releases when the session is flushed (bsc#1012628). - drm/amd/pm: add SMU 13.0.7 missing GetPptLimit message mapping (bsc#1012628). - pinctrl: qcom: sm8450-lpass-lpi: correct swr_rx_data group (bsc#1012628). - clk: ingenic: jz4760: Update M/N/OD calculation algorithm (bsc#1012628). - cxl/region: Fix passthrough-decoder detection (bsc#1012628). - cxl/region: Fix null pointer dereference for resetting decoder (bsc#1012628). - usb: typec: altmodes/displayport: Fix probe pin assign check (bsc#1012628). - usb: core: add quirk for Alcor Link AK9563 smartcard reader (bsc#1012628). - btrfs: free device in btrfs_close_devices for a single device filesystem (bsc#1012628). - btrfs: simplify update of last_dir_index_offset when logging a directory (bsc#1012628). - selftests: mptcp: stop tests earlier (bsc#1012628). - selftests: mptcp: allow more slack for slow test-case (bsc#1012628). - mptcp: be careful on subflow status propagation on errors (bsc#1012628). - mptcp: do not wait for bare sockets' timeout (bsc#1012628). - net: USB: Fix wrong-direction WARNING in plusb.c (bsc#1012628). - cifs: Fix use-after-free in rdata->read_into_pages() (bsc#1012628). - pinctrl: intel: Restore the pins that used to be in Direct IRQ mode (bsc#1012628). - pinctrl: aspeed: Revert "Force to disable the function's signal" (bsc#1012628). - spi: dw: Fix wrong FIFO level setting for long xfers (bsc#1012628). - pinctrl: single: fix potential NULL dereference (bsc#1012628). - pinctrl: aspeed: Fix confusing types in return value (bsc#1012628). - pinctrl: mediatek: Fix the drive register definition of some Pins (bsc#1012628). - clk: microchip: mpfs-ccc: Use devm_kasprintf() for allocating formatted strings (bsc#1012628). - ASoC: topology: Return -ENOMEM on memory allocation failure (bsc#1012628). - ASoC: fsl_sai: fix getting version from VERID (bsc#1012628). - ASoC: tas5805m: add missing page switch (bsc#1012628). - ASoC: tas5805m: rework to avoid scheduling while atomic (bsc#1012628). - arm64: dts: mediatek: mt8195: Fix vdosys* compatible strings (bsc#1012628). - riscv: stacktrace: Fix missing the first frame (bsc#1012628). - ALSA: pci: lx6464es: fix a debug loop (bsc#1012628). - arm64: dts: rockchip: set sdmmc0 speed to sd-uhs-sdr50 on rock-3a (bsc#1012628). ... changelog too long, skipping 478 lines ... - commit 82ff25b ==== mozilla-nss ==== Version update (3.86 -> 3.87) Subpackages: libfreebl3 libfreebl3-hmac libsoftokn3 libsoftokn3-hmac mozilla-nss-certs mozilla-nss-tools - update to NSS 3.87 * bmo#1803226 - NULL password encoding incorrect * bmo#1804071 - Fix rng stub signature for fuzzing builds * bmo#1803595 - Updating the compiler parsing for build * bmo#1749030 - Modification of supported compilers * bmo#1774654 - tstclnt crashes when accessing gnutls server without a user cert in the database. * bmo#1751707 - Add configuration option to enable source-based coverage sanitizer * bmo#1751705 - Update ECCKiila generated files. * bmo#1730353 - Add support for the LoongArch 64-bit architecture * bmo#1798823 - add checks for zero-length RSA modulus to avoid memory errors and failed assertions later * bmo#1798823 - Additional zero-length RSA modulus checks - add man-pages to the tools package (boo#1208242) ==== mozjs102 ==== Version update (102.7.0 -> 102.8.0) - Update to version 102.8.0: + Various security fixes. + CVE-2023-25728: Content security policy leak in violation reports using iframes. + CVE-2023-25730: Screen hijack via browser fullscreen mode. + CVE-2023-25743: Fullscreen notification not shown in Firefox Focus. + CVE-2023-0767: Arbitrary memory write via PKCS 12 in NSS. + CVE-2023-25735: Potential use-after-free from compartment mismatch in SpiderMonkey. + CVE-2023-25737: Invalid downcast in SVGUtils::SetupStrokeGeometry. + CVE-2023-25738: Printing on Windows could potentially crash Firefox with some device drivers. + CVE-2023-25739: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext. + CVE-2023-25729: Extensions could have opened external schemes without user knowledge. + CVE-2023-25732: Out of bounds memory write from EncodeInputStream. + CVE-2023-25734: Opening local .url files could cause unexpected network loads. + CVE-2023-25742: Web Crypto ImportKey crashes tab. + CVE-2023-25744: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8. + CVE-2023-25746: Memory safety bugs fixed in Firefox ESR 102.8. ==== plasma5-openSUSE ==== Subpackages: plasma5-defaults-openSUSE plasma5-theme-openSUSE plasma5-workspace-branding-openSUSE sddm-theme-openSUSE - Require distribution-logos-openSUSE-icons ==== tcl ==== - bsc#1203982, tcl-interp-limit-time.patch: Fix a y2k38 problem in [interp limit -time] . ==== thunar ==== Subpackages: libthunarx-3-0 thunar-lang - Explicitly require the newer libpcre2 instead of libpcre; this fixes boo#1208260 ==== util-linux ==== Subpackages: libblkid1 libblkid1-32bit libfdisk1 libmount1 libmount1-32bit libsmartcols1 libuuid1 libuuid1-32bit util-linux-lang - Remove requires for adjtimex, which and time: this where wrongly implemented split provides we don't need anymore. - Remove pam_lastlog, not Y2038 safe, will be removed upstream. Additional tools update the files themself. - Readd hwclock.8 manual page. - Move permissions pre-require to correct package. - Remove install_info_prereq, we have no info pages. - clean up spec file, tag all the %if-endif to make it easy to read the file and try to simplify a bit the if-endif logic grouping by core, systemd and python. ==== util-linux-systemd ==== - Remove requires for adjtimex, which and time: this where wrongly implemented split provides we don't need anymore. - Remove pam_lastlog, not Y2038 safe, will be removed upstream. Additional tools update the files themself. - Readd hwclock.8 manual page. - Move permissions pre-require to correct package. - Remove install_info_prereq, we have no info pages. - clean up spec file, tag all the %if-endif to make it easy to read the file and try to simplify a bit the if-endif logic grouping by core, systemd and python.

1 0

Tumbleweed - Review of the week 2023/07
by Dominique Leuenberger 17 Feb '23

17 Feb '23

Dear Tumbleweed users and hackers, Week 7 of the year – 7 days have passed since the last review, BUT we only released 6 snapshots since then. The reason is only timing though: the 7th snapshot is still in QA and, looking at the current results, is likely to be published later today. So no need to be worried. This review will cover snapshots 0210…0215. The most exciting changes delivered during this week were: * Mesa 22.3.5 * PostgreSQL 15.2 * XFCE 4.18.2 * Node.JS 19.6.0 * KDE Frameworks 5.103.0 * KDE P,lasma 5.27.0 * NetworkManager 1.42.0 * gnome-shell & mutter 43.3 * Rust 1.67.1 Most of the stagings we currently have are longer-living and seem to take some more effort. Everybody is invited to help push them forward. The most relevant changes that are currently staged include: * openSSL 3.0.8 in Staging:A (regression detected) * Binutils 2.40 in Staging:B – causes a few builds to fail * Switch to Ruby 3.2 in Staging:H – YaST as the main consumer is almost ready. Almost! * Python 3.11 module enablement in Staging:M – Builds look good so far, 1 build cycle introduced * Gcc 13 as distro compiler in Staging:Gcc7 * In Staging:L we just collect random things breaking other stuff, like e.g: - gpg2 2.4.0 – breaks gpgme:qt - Podman 4.4.1: fails the openQA tests * Samba 4.17.5 * cURL 7.88.0 As a reminder for the curious ones: the Staging dashboard can be found at https://build.opensuse.org/staging_workflows/openSUSE:Factory (requires login to the open build service) Cheers, Dominique

1 0

Tumbleweed update: libopenssl-3-devel = 3.0.7 missing?
by Mailings 17 Feb '23

17 Feb '23

Hi folks I was about to "zypper dup" from Tumbleweed 20221119 to 20230214 and got the following output: --------------------------- Problem: das zu installierende libopenssl-devel-3.0.7-1.1.noarch erfordert 'libopenssl-3-devel = 3.0.7', aber diese Anforderung kann nicht bereitgestellt werden Nicht installierbare Anbieter: libopenssl-3-devel-3.0.7-3.1.i586[https-download.opensuse.org-030d62a3] libopenssl-3-devel-3.0.7-3.1.x86_64[https-download.opensuse.org-030d62a3] libopenssl-3-devel-3.0.7-3.1.i586[https-download.opensuse.org-cbd627cc] libopenssl-3-devel-3.0.7-3.1.x86_64[https-download.opensuse.org-cbd627cc] libopenssl-3-devel-3.0.7-3.1.i586[repo-oss] libopenssl-3-devel-3.0.7-3.1.x86_64[repo-oss] Lösung 1: Folgende Aktionen werden ausgeführt: veraltetes libopenssl-1_1-devel-1.1.1s-1.1.x86_64 beibehalten veraltetes libopenssl1_1-1.1.1s-1.1.x86_64 beibehalten veraltetes libopenssl-devel-1.1.1s-1.1.noarch beibehalten veraltetes openssl-1.1.1s-1.1.noarch beibehalten veraltetes openssl-1_1-1.1.1s-1.1.x86_64 beibehalten Lösung 2: Folgende Aktionen werden ausgeführt: veraltetes libopenssl1_1-1.1.1s-1.1.x86_64 beibehalten veraltetes openssl-1.1.1s-1.1.noarch beibehalten veraltetes openssl-1_1-1.1.1s-1.1.x86_64 beibehalten veraltetes libopenssl-1_1-devel-1.1.1s-1.1.x86_64 beibehalten veraltetes libopenssl-devel-1.1.1s-1.1.noarch beibehalten Lösung 3: Folgende Aktionen werden ausgeführt: veraltetes libopenssl1_1-1.1.1s-1.1.x86_64 beibehalten veraltetes openssl-1.1.1s-1.1.noarch beibehalten veraltetes openssl-1_1-1.1.1s-1.1.x86_64 beibehalten Lösung 4: Deinstallation von libopenssl-1_1-devel-1.1.1s-1.1.x86_64 Lösung 5: Deinstallation von libopenssl-devel-1.1.1s-1.1.noarch Lösung 6: libopenssl-devel-3.0.7-1.1.noarch durch Ignorieren einiger Abhängigkeiten brechen -------------- I'm not compiling stuff so probably I could go for option 4 which run through w/o further inconsistencies but I wonder what made this issue pop up now after more than 2 years of updates without any issues? Assuming devel rpms are not installed by default is there a way of figuring out "who" brought that package in initially? br Juergen

5 4

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 16 Feb '23

16 Feb '23

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have had problems for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - glucat: Fails to build - janus-gateway: Fails to build - lalframe: Fails to build - lalmetaio: Fails to build - lalsimulation: Fails to build - newsboat: Fails to build - powerman: Fails to build - python-acoular: Fails to build - python-arviz: Fails to build - python-asyncclick: Fails to build - python-devpi-client: Fails to build - python-devpi-common: Fails to build - python-devpi-server: Fails to build - python-efilter: Fails to build - python-flake8-pyi: Fails to build - python-geomdl: Fails to build - python-holoviews: Fails to build - python-http-ece: Fails to build - python-intake: Fails to build - python-ipydatawidgets: Fails to build - python-mizani: Fails to build - python-openwrt-luci-rpc: Fails to build - python-oslo.policy: Fails to build - python-oslo.versionedobjects: Fails to build - python-physt: Fails to build - python-pyUSID: Fails to build - python-pydata-sphinx-theme: Fails to build - python-pypipegraph: Fails to build - python-pyreadstat: Fails to build - python-pyssim: Fails to build - python-pytest-flake8: Fails to build - python-pytools: Fails to build - python-quantum-blackbird: Fails to build - python-sphinxcontrib-autoprogram: Fails to build - python-tables: Fails to build - python-thewalrus: Fails to build - weblate: Fails to build - yara: Fails to build Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

1 0

Fwd: TW 20230131 - breaks xrdp because of pam changes
by Raphael Bertoche 16 Feb '23

16 Feb '23

Hi there, I had this issue and the cause was that /etc/pam.d/xrdp-sesman was gone. I found an old one from a backup and after putting it back in place the issue was solved Hope it helps. Raphael Bertoche

5 9

New Tumbleweed snapshot 20230215 released!
by Dominique Leuenberger 16 Feb '23

16 Feb '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: GraphicsMagick (1.3.39 -> 1.3.40) gnome-shell (43.2 -> 43.3) gnome-terminal (3.46.7 -> 3.46.8) harfbuzz (6.0.0 -> 7.0.0) mutter (43.2 -> 43.3) plasma5-desktop systemd-presets-branding-MicroOS (20230130 -> 20230214) vte (0.70.2 -> 0.70.3) === Details === ==== GraphicsMagick ==== Version update (1.3.39 -> 1.3.40) Subpackages: libGraphicsMagick++-Q16-12 libGraphicsMagick-Q16-3 libGraphicsMagick3-config - version update to 1.3.40 * GetMagickGeometry(): Fix a scaling issue where dimensions could be scaled down to zero. * PCD: Handle writing image with a dimension of 1. * PNG: When writing, use lower-case raw profile identifiers (e.g. 'Raw profile type xmp') because exiftool expects that. * SUN: The sense of monochrome images was inverted. Fix scanline size calculation. * WPG: Fix 20-year old bug in WPG header reading. New Features: * JXL: Decode and log extra channel information. This information is not yet used. * PCX and DCX: Support writing uncompressed format (use -compress none for no compression). * Added IM1, IM8, and IM24 magick aliases for the Sun Raster format since those are the historically correct extensions. API Updates: * AppendImageToList() now updates the image list pointer to be the image which was just added. Use GetFirstImageInList() when the pointer to the first image in the list is needed. ==== gnome-shell ==== Version update (43.2 -> 43.3) Subpackages: gnome-extensions gnome-shell-calendar gnome-shell-lang - Update to version 43.3: + Ensure quick settings toggles align with the pixel grid + Lower OOM score of gnome-shell process + Fix incomplete device list in volume menus + Fixed crash + Plugged leak + Misc. bug fixes and cleanups + Updated translations. ==== gnome-terminal ==== Version update (3.46.7 -> 3.46.8) Subpackages: gnome-shell-search-provider-gnome-terminal gnome-terminal-lang nautilus-extension-terminal - Update to version 3.46.8: * all: Make env filtering uniform * build: Use built-in mandir option * client: - legacy: Drop debug messages - Transport XDG_ACTIVATION_TOKEN to the server * metainfo: Add launchable info * prefs: Fix default terminal check * screen: Use correct environment filter * Updated translations. ==== harfbuzz ==== Version update (6.0.0 -> 7.0.0) Subpackages: libharfbuzz-gobject0 libharfbuzz-icu0 libharfbuzz-subset0 libharfbuzz0 libharfbuzz0-32bit typelib-1_0-HarfBuzz-0_0 - Update to version 7.0.0: + New hb-paint API that is designed mainly to paint COLRv1 glyphs, but can be also used as a unified API to paint any of the glyph representations supported by HarfBuzz (B/W outlines, color layers, or color bitmaps). + New hb-cairo API for integrating with cairo graphics library. This is provided as a separate harfbuzz-cairo library. + Support for instancing CFF2 table + Support font emboldening + Support feature ranges with AAT shaping + Experimental support to cubic curves in glyf table + Various subsetter improvements + Various documentation improvements + Significantly reduced memory use during shaping + Greatly reduced memory use during subsetting CFF table + New command line utility, hb-info, for querying various font information + New hb-shape/hb-view options: --glyphs, --color-palette, - -font-bold, --font-grade, and --named-instance + Miscellaneous fixes and improvements - harfbuzz-CVE-2023-25193.patch dropped in favor of upstream consensus fix ==== mutter ==== Version update (43.2 -> 43.3) Subpackages: mutter-lang - Update to version 43.3: + Skip resize effects for tiled windows during user grabs + Disable direct scanout during drag-n-drop operations + Ignore unmapped subsurfaces in direct scanout check + Fix cursor disappearing over windows during grabs + Fix pointer constrains with subsurfaces + Make wl_output mode independent of the orientation + Improve focus handling on workspace switches + Fix cursor position in window screencasts + Do not require a physical device to update pointer visibility + Fix initialization of keyboard accessibility + Fix freeze when crossing monitors under some conditions + Don't allow window activation to break global grabs + Fixed crashes + Plugged leak + Misc. bug fixes and cleanups + Updated translations. ==== plasma5-desktop ==== Subpackages: plasma5-desktop-emojier plasma5-desktop-lang - Don't try to delete the DBus interfaces folder on s390x. There's nothing to delete on this arch. ==== systemd-presets-branding-MicroOS ==== Version update (20230130 -> 20230214) - Correct spelling of transactional-update-notifier.service in 50-default-MicroOS-user.preset - 20230214 ==== vte ==== Version update (0.70.2 -> 0.70.3) Subpackages: libvte-2_91-0 typelib-1_0-Vte-2_91 vte-lang - Update to version 0.70.3: + widget: - Ensure the ringview is updated before converting coordinates - gtk4: Translate control+key events when using multiple layouts - Use correct end row for getting the selected text - Drop ddb2c8a.patch: Fixed upstream.

1 0

Announcing D-Installer 0.7
by Imobach Gonzalez Sosa 16 Feb '23

16 Feb '23

Hi all, We have released a new version of D-Installer which, among other things, includes: * Many UI fixes and improvements, including a hamburger menu. * Validation and error reporting of the software proposal. * Browsing and downloading of YaST2 logs. * Use of our a dedicated bus apart from the system one. You can find the full announcement including all the changes in our blog: https://yast.opensuse.org/blog/2023-02-16/announcing-d-installer-0-7 Regards, Imo

1 0

Any opie users still left?
by Marcus Meissner 16 Feb '23

16 Feb '23

Hi folks, We are looking for obsolete software, and one piece is "opie". opie is one of the first ever one time password (OTP) methods, but it largely has been replaced by other MFA methods these days. Is anyone using it, or is anyone aware of users still? Ciao, Marcus

2 1