February 2023 - openSUSE Factory - openSUSE Mailing Lists

Problem with dovecot after update to 20230202 (openssl-1_1 ???)
by Freek de Kruijf 09 Feb '23

09 Feb '23

After Tumbleweed upgrading to 20230202 dovecot starts up OK, but KMail does not connect anymore. The error messages, when attempting to connect are: 2023-02-05T14:56:56.232683+01:00 eiktum dovecot: imap-login: Error: Failed to initialize SSL server context: Can't load SSL certificate (ssl_cert setting): error:0200100D:system library:fopen:Permission denied: fopen('/etc/ssl/ openssl-1_1.cnf','rb'), error:2006D002:BIO routines:BIO_new_file:system lib, error:0E078002:configuration file routines:def_load:system lib: user=<>, rip=127.0.0.1, lip=127.0.0.1, secured, session=<Y0aeSfTzgod/AAAB> 2023-02-05T14:56:56.232822+01:00 eiktum dovecot: imap-login: Disconnected: TLS initialization failed. (no auth attempts in 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, secured, session=<Y0aeSfTzgod/AAAB> I noticed openssl-1_1 is involved, isn't it newly introduced in Tumbleweed? Filed a bug report: https://bugzilla.opensuse.org/show_bug.cgi?id=1207911 -- fr.gr. member openSUSE Freek de Kruijf

5 7

New Tumbleweed snapshot 20230208 released!
by Dominique Leuenberger 09 Feb '23

09 Feb '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ImageMagick (7.1.0.60 -> 7.1.0.61) SDL2 (2.26.2 -> 2.26.3) ceph (16.2.9.539+gea74dd900cd -> 16.2.11.58+g38d6afd3b78) fetchmail (6.4.35 -> 6.4.36) grub2 hwdata (0.366 -> 0.367) java-11-openjdk (11.0.17.0 -> 11.0.18.0) libstorage-ng (4.5.69 -> 4.5.71) ncurses (6.4.20230121 -> 6.4.20230128) ovmf texinfo (7.0.1 -> 7.0.2) webkit2gtk3-soup2 (2.38.3 -> 2.38.4) xorg-x11-server (21.1.6 -> 21.1.7) xwayland (22.1.7 -> 22.1.8) === Details === ==== ImageMagick ==== Version update (7.1.0.60 -> 7.1.0.61) Subpackages: ImageMagick-config-7-SUSE ImageMagick-extra libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - version update to 7.1.0.61 * https://github.com/ImageMagick/Website/blob/main/ChangeLog.md ==== SDL2 ==== Version update (2.26.2 -> 2.26.3) - Update to release 2.26.3 * Fixed infinite loop shutting down WGI controllers * Fixed centering the D-pad on some Xbox controllers ==== ceph ==== Version update (16.2.9.539+gea74dd900cd -> 16.2.11.58+g38d6afd3b78) Subpackages: librados2 librbd1 - Update to 16.2.11-58-g38d6afd3b78: + test/CMakeLists.txt: move 'APPEND rgw_libs Boost::filesystem' to top level - Update to 16.2.11-57-g9be7fb44a33: + ceph.spec.in: Replace %usrmerged macro with regular version check - checkin.sh: default to ses7p branch - Update to 16.2.11-56-gc067055f8f5: + (bsc#1199183) osd, tools, kv: non-aggressive, on-line trimming of accumulated dups + (bsc#1200262) ceph-volume: fix fast device alloc size on mulitple device + (bsc#1200501) cephadm: update monitoring container images + (bsc#1200978) mgr/dashboard: prevent alert redirect + (bsc#1201797) mgr/volumes: Add subvolumegroup resize cmd + (bsc#1201837) mgr/volumes: Fix subvolume discover during upgrade (CVE-2022-0670) + (bsc#1201976) monitoring/ceph-mixin: add RGW host to label info + (bsc#1202077) mgr/dashboard: enable addition of custom Prometheus alerts + (bsc#1203375) python-common: Add 'KB' to supported suffixes in SizeMatcher + (bsc#1204430) ceph-crash: drop privleges to run as "ceph" user, rather than root (CVE-2022-3650) + (bsc#1205025) rgw: Guard against malformed bucket URLs (CVE-2022-3854) + (bsc#1205436) mgr/dashboard: fix rgw connect when using ssl ==== fetchmail ==== Version update (6.4.35 -> 6.4.36) Subpackages: fetchmailconf - Update to 6.4.36: * TRANSLATIONS: language translations were updated: - cs, es, fr, ja, pl, ro, sq, sv ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - Fix nvmf boot device setup (bsc#1207811) * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch - Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064) * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch - Fix GCC 13 build failure (bsc#1201089) * 0002-AUDIT-0-http-boot-tracker-bug.patch ==== hwdata ==== Version update (0.366 -> 0.367) - update to 0.367: * Update pci, usb and vendor ids ==== java-11-openjdk ==== Version update (11.0.17.0 -> 11.0.18.0) Subpackages: java-11-openjdk-headless - Upgrade to upstream tag jdk-11.0.18+10 (January 2023 CPU) * CVEs + CVE-2023-21835, bsc#1207246 + CVE-2023-21843, bsc#1207248 * Security fixes + JDK-8286070: Improve UTF8 representation + JDK-8286496: Improve Thread labels + JDK-8287411: Enhance DTLS performance + JDK-8288516: Enhance font creation + JDK-8289350: Better media supports + JDK-8293554: Enhanced DH Key Exchanges + JDK-8293598: Enhance InetAddress address handling + JDK-8293717: Objective view of ObjectView + JDK-8293734: Improve BMP image handling + JDK-8293742: Better Banking of Sounds + JDK-8295687: Better BMP bounds * Other changes + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException + JDK-6782021: It is not possible to read local computer certificates with the SunMSCAPI provider + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/ScreenInsetsTest.java fails in Windows + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/ /OnScreenRenderingResizeTest.java fails + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/ /DropTargetEnterExitTest/MissedDragExitTest.java failed + JDK-8029633: Raw inner class constructor ref should not perform diamond inference + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/ /MissingDragExitEventTest.java fails + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/ /RepaintTest.java fails + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/ /RobotWheelTest.java fails + JDK-8159599: [TEST_BUG] java/awt/Modal/ /ModalInternalFrameTest/ModalInternalFrameTest.java + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/ /MultiresolutionIconTest.java + JDK-8172269: When checking the default behaviour for a scroll tab layout and checking the 'opaque' checkbox, the area behind tabs is not red. + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java failed with timeout + JDK-8193942: Regression automated test '/open/test/jdk/javax/ /swing/JFrame/8175301/ScaledFrameBackgroundTest.java' fails + JDK-8194126: Regression automated Test '/open/test/jdk/javax/ /swing/JColorChooser/Test7194184.java' fails + JDK-8198343: Test java/awt/print/PrinterJob/ /TestPgfmtSetMPA.java may fail w/o printer + JDK-8199290: [TESTBUG] sun.hotspot.WhiteBox$WhiteBoxPermission is not copied + JDK-8202836: [macosx] test java/awt/Graphics/TextAAHintsTest.java fails + JDK-8206125: [windows] cannot pass relative path to - -with-boot-jdk + JDK-8210047: some pages contain content outside of landmark region + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips testing for non-corner-case values + JDK-8212096: javax/net/ssl/ServerName/ /SSLEngineExplorerMatchedSNI.java failed intermittently due to SSLException: Tag mismatch + JDK-8213239: Configure cannot handle command overrides with arguments + JDK-8215571: jdb does not include jdk.* in the default class filter + JDK-8217032: Check pandoc capabilities in configure + JDK-8222091: Javadoc does not handle package annotations correctly on package-info.java + JDK-8222251: preflow visitor is not visiting lambda expressions + JDK-8226236: win32: gc/metaspace/ /TestCapacityUntilGCWrapAround.java fails + JDK-8227179: Test for new gc+metaspace=info output format + JDK-8227651: Tests fail with SSLProtocolException: Input record too big + JDK-8228672: [TESTBUG] gc/metaspace/TestSizeTransitions.java fails on 32-bit platforms + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on macOs + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java fails on macos + JDK-8233565: [TESTBUG] NullModalityDialogTest.java fails on MacOS + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on macos + JDK-8239708: Split basics.m4 into basic.m4 and util.m4 + JDK-8240281: Remove failing assertion code when selecting first memory state in SuperWord::co_locate_pack + JDK-8242468: VS2019 build missing vcruntime140_1.dll + JDK-8243565: some gc tests use 'test.java.opts' and not 'test.vm.opts' + JDK-8243568: serviceability/logging/TestLogRotation.java uses 'test.java.opts' and not 'test.vm.opts' + JDK-8244010: Simplify usages of ProcessTools.createJavaProcessBuilder in our tests + JDK-8244557: test/jdk/javax/swing/JTabbedPane/ ... changelog too long, skipping 300 lines ... backport ==== libstorage-ng ==== Version update (4.5.69 -> 4.5.71) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - Translated using Weblate (Chinese (Taiwan) (zh_TW)) (bsc#1149754) - 4.5.71 - Translated using Weblate (Chinese (China) (zh_CN)) (bsc#1149754) - 4.5.70 - Translated using Weblate (Italian) (bsc#1149754) ==== ncurses ==== Version update (6.4.20230121 -> 6.4.20230128) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch 20230128 + document XF, kxIN and kxOUT -TD + add note on sun/wscons/cmdtool/shelltool -TD + modify configure script check for pkg-config library directory to take into account an older version 0.15.0 which used PKG_CONFIG_PATH but not PKG_CONFIG_LIBDIR - Correct offsets of patches * ncurses-5.9-ibm327x.dif * ncurses-6.4.dif ==== ovmf ==== Subpackages: qemu-ovmf-x86_64 - Add fix-aarch64.patch: this fixes https://bugzilla.suse.com/show_bug.cgi?id=1207095 ==== texinfo ==== Version update (7.0.1 -> 7.0.2) Subpackages: info info-lang - texinfo 7.0.2: * texi2any: do not distribute architecture-dependent files * info: further fix of recoding of UTF-8 files to ASCII * install-info: build fixes ==== webkit2gtk3-soup2 ==== Version update (2.38.3 -> 2.38.4) Subpackages: WebKit2GTK-4.0-lang libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 webkit2gtk-4_0-injected-bundles - Update to version 2.38.4 (boo#1207997): + Improve GStreamer multimedia playback across the board with improved codec selection logic, better handling of latency, and improving frame discard to avoid audio/video desynchronizationg, among other fixes. + Disable HLS media playback by default, which makes web sites use MSE instead. If needed WEBKIT_GST_ENABLE_HLS_SUPPORT=1 can be set in the environment to enable it back. + Disable threaded rendering in GTK4 builds by default, as it was causing crashes. + Fix MediaSession API not showing artwork images. + Fix MediaSession MPRIS usage when running inside a Flatpak sandbox. + Fix input element controls to correctly scale when applying a zoom factor different than the default. + Fix leakage of Web processes in certain situations. + Fix the injected bundle not being found when running inside a sandbox. + Fix the build with ENABLE_INTROSPECTION when cross-compiling. + FIx the build with ENABLE_WEBGL disabled. + Fix the build with GStreamer-based WebRTC enabled. + Fix the build with USE_GTK4 enabled. + Fix several crashes and rendering issues. + Security fixes: CVE-2023-23517, CVE-2023-23518, CVE-2023-42826. ==== xorg-x11-server ==== Version update (21.1.6 -> 21.1.7) Subpackages: xorg-x11-server-Xvfb xorg-x11-server-extra - Update to version xorg-server-21.1.7: * This release contains the fix for CVE-2023-0494 in today's security advisory: https://lists.x.org/archives/xorg-announce/2023-February/003320.html It also fixes a second possible OOB access during EnqueueEvent and a crasher caused by ResourceClientBits not correctly honouring the MaxClients value in the configuration file. - supersedes U_Xi-fix-potential-use-after-free-in-DeepCopyPointerCl.patch, U_xorg-server-oob-read-enqueue-event.patch - U_Xi-fix-potential-use-after-free-in-DeepCopyPointerCl.patch * DeepCopyPointerClasses use-after-free (CVE-2023-0494, ZDI-CAN-19596, bsc#1207783) ==== xwayland ==== Version update (22.1.7 -> 22.1.8) - Update to version 22.1.8 * This release contains the fix for CVE-2023-0494 in today's security advisory: https://lists.x.org/archives/xorg-announce/2023-February/003320.html * It also fixes a second possible OOB access during EnqueueEvent. - supersedes U_Xi-fix-potential-use-after-free-in-DeepCopyPointerCl.patch - improved summary and description - added requires to xkeyboard-config - added recommends to xorg-x11-fonts-core - removed unused 'package' section - U_Xi-fix-potential-use-after-free-in-DeepCopyPointerCl.patch * DeepCopyPointerClasses use-after-free (CVE-2023-0494, ZDI-CAN-19596, bsc#1207783)

1 0

TW Kernel 6.1 and Multi-Gen LRU
by Joe Salmeri 09 Feb '23

09 Feb '23

Kernel 6.1 introduced Multi-Gen LRU but it does not yet appear to be enabled in TW by checking cat /sys/kernel/mm/lru_gen/enabled which returns 0x0000 Are there plans to enable this in the TW kernels? Is so is there an ETA? Is there a problem which is why it has not already been enabled ? Thanks

2 2

Drop of yast2-dns-server, yast2-dhcp-server and yast2-http-server
by josef Reidinger 08 Feb '23

08 Feb '23

Hi, I would like to announce that after many years YaST team plan to stop maintaining yast2-dns-server, yast2-dhcp-server and yast2-http-server for tumbleweed[1]. Main reason is that modules showing really its age and noone cares to even report bugs for it. It gets almost no care and just increase effort when we need to do some mass changes. All modules is old ones written in perl without proper test coverage, so any touch is very risky. And its use case is also very discutable. For http-server it is use case from 90's to get quickly setup apache with php mod. For dns server and dhcp server its home usage is no longer relevant and for servers I would say majority of users already use some versioning and deployment system like git + salt usually combined with some CI. If we overlook some non-rare use case for any of these modules please speak up, so we can reconsider it. For this reason we create delete request for these yast modules[2][3][4]. If there is still someone who finds module useful and willing to maintain it, please contact us. We can give you access to github repo and also move maintainership to you. For Leap 15.X nothing changes and module is still part of it same as for SLE15 codebase. Thanks Josef [1] https://bugzilla.suse.com/show_bug.cgi?id=1205363 [2] https://build.opensuse.org/request/show/1063901 [3] https://build.opensuse.org/request/show/1063903 [4] https://build.opensuse.org/request/show/1063904

1 0

New Tumbleweed snapshot 20230207 released!
by Dominique Leuenberger 08 Feb '23

08 Feb '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: Mesa Mesa-drivers apparmor cabextract (1.9.1 -> 1.10) dnsmasq (2.88 -> 2.89) gstreamer-plugins-bad harfbuzz kernel-firmware (20230110 -> 20230125) kernel-source (6.1.8 -> 6.1.10) libapparmor libjxl (0.8.0 -> 0.8.1) libopenmpt (0.6.7 -> 0.6.8) libp11 libreoffice libxml2 libxml2-python lmdb nfs-utils patterns-media pulseaudio re2 (20221201 -> 20230201) setools (4.4.0 -> 4.4.1) snapper sssd thunar-plugin-media-tags (0.3.0 -> 0.4.0) transmission webkit2gtk3 (2.38.3 -> 2.38.4) xf86-video-vmware (13.3.0+12 -> 13.4.0) xkeyboard-config (2.37 -> 2.38) yast2-schema-default (4.5.7 -> 4.5.9) yast2-trans (84.87.20230130.b344a57eef -> 84.87.20230202.68f7d5c2e4) === Details === ==== Mesa ==== Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - Don't enable rusticl without opencl ==== Mesa-drivers ==== Subpackages: Mesa-dri Mesa-gallium Mesa-libva libxatracker2 - Don't enable rusticl without opencl ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-docs apparmor-parser apparmor-parser-lang apparmor-profiles apparmor-utils apparmor-utils-lang python3-apparmor - add abstractions-openssl-1_1.diff: allow to read /etc/ssl/openssl-1_1.cnf in abstractions/openssl (boo#1207911) ==== cabextract ==== Version update (1.9.1 -> 1.10) - Update to version 1.10 * Multiple -F filters can be given. cabextract will extract files matching any of the filters. * cabextract now overwrites symlinks by default. This is to be consistent with other archive tools. Use the new -k option for the old behaviour of keeping symlinks. This does not affect symlinks in the -d dirpath option. * New -n option to never overwrite files. * New -i option to interactively prompt if you want to overwrite files. ==== dnsmasq ==== Version update (2.88 -> 2.89) - update to 2.89: * Fix bug introduced in 2.88 (commit fe91134b) which can result in corruption of the DNS cache internal data structures and logging of "cache internal error". This has only been seen in one place in the wild, and it took considerable effort to even generate a test case to reproduce it, but there's no way to be sure it won't strike, and the effect is to break the cache badly. Installations with DNSSEC enabled are more likely to see the problem, but not running DNSSEC does not guarantee that it won't happen. Thanks to Timo van Roermund for reporting the bug and for his great efforts in chasing it down. - remove no longer needed rpmlintrc filters ==== gstreamer-plugins-bad ==== Subpackages: gstreamer-plugins-bad-lang libgstadaptivedemux-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstcuda-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstphotography-1_0-0 libgstplay-1_0-0 libgstplayer-1_0-0 libgstsctp-1_0-0 libgsturidownloader-1_0-0 libgstva-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 libgstwebrtcnice-1_0-0 - Enable zxing again, now that the updated version have landed. ==== harfbuzz ==== Subpackages: libharfbuzz-gobject0 libharfbuzz-icu0 libharfbuzz-subset0 libharfbuzz0 libharfbuzz0-32bit typelib-1_0-HarfBuzz-0_0 - Add harfbuzz-CVE-2023-25193.patch: limit how far we skip when looking back (boo#1207922 CVE-2023-25193). ==== kernel-firmware ==== Version update (20230110 -> 20230125) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update to version 20230125 (git commit 5c11a3742947): (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171) * amdgpu: Add VCN 4.0.2 firmware * amdgpu: Add PSP 13.0.4 firmware * amdgpu: Add SDMA 6.0.1 fimware * amdgpu: Add GC 11.0.1 firmware * amdgpu: Add DCN 3.1.4 firmware * iwlwifi: remove old intermediate 5.15+ firmwares * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares * iwlwifi: remove old unsupported older than 4.14 LTS * linux-firmware: update firmware for MT7921 WiFi device * linux-firmware: update firmware for mediatek bluetooth chip (MT7921) * amdgpu: update vangogh firmware * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth AX211 * linux-firmware: Update firmware file for Intel Bluetooth AX211 * linux-firmware: Update firmware file for Intel Bluetooth AX210 * linux-firmware: Update firmware file for Intel Bluetooth AX200 * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth 9560 * linux-firmware: Update firmware file for Intel Bluetooth 9260 * brcm: add configuration files for CyberTan WC121 * qcom: add firmware files for Adreno A200 * rtw89: 8852c: update fw to v0.27.56.10 * QCA: Add Bluetooth firmware for QCA2066 ==== kernel-source ==== Version update (6.1.8 -> 6.1.10) - Linux 6.1.10 (bsc#1012628). - net: mctp: purge receive queues on sk destruction (bsc#1012628). - rust: print: avoid evaluating arguments in `pr_*` macros in `unsafe` blocks (bsc#1012628). - net: fix NULL pointer in skb_segment_list (bsc#1012628). - gpiolib-acpi: Don't set GPIOs for wakeup in S3 mode (bsc#1012628). - gpiolib: acpi: Add a ignore wakeup quirk for Clevo NL5xRU (bsc#1012628). - nvme-apple: only reset the controller when RTKit is running (bsc#1012628). - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (bsc#1012628). - gpiolib: acpi: Allow ignoring wake capability on pins that aren't in _AEI (bsc#1012628). - dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init (bsc#1012628). - HID: playstation: sanity check DualSense calibration data (bsc#1012628). - HID: uclogic: Add support for XP-PEN Deco 01 V2 (bsc#1012628). - s390: workaround invalid gcc-11 out of bounds read warning (bsc#1012628). - block: fix hctx checks for batch allocation (bsc#1012628). - ACPI: video: Add backlight=native DMI quirk for Acer Aspire 4810T (bsc#1012628). - LoongArch: Get frame info in unwind_start() when regs is not available (bsc#1012628). - blk-cgroup: fix missing pd_online_fn() while activating policy (bsc#1012628). - erofs: clean up parsing of fscache related options (bsc#1012628). - kselftest: Fix error message for unconfigured LLVM builds (bsc#1012628). - ARM: omap1: fix building gpio15xx (bsc#1012628). - arm64: dts: msm8994-angler: fix the memory map (bsc#1012628). - mac80211: Fix MLO address translation for multiple bss case (bsc#1012628). - erofs/zmap.c: Fix incorrect offset calculation (bsc#1012628). - bpf: Skip task with pid=1 in send_signal_common() (bsc#1012628). - firmware: arm_scmi: Clear stale xfer->hdr.status (bsc#1012628). - arm64: dts: imx8mq-thor96: fix no-mmc property for SDHCI (bsc#1012628). - arm64: dts: freescale: Fix pca954x i2c-mux node names (bsc#1012628). - ARM: dts: vf610: Fix pca9548 i2c-mux node names (bsc#1012628). - ARM: dts: imx: Fix pca9547 i2c-mux node name (bsc#1012628). - commit 2a0570b - Linux 6.1.9 (bsc#1012628). - memory: tegra: Remove clients SID override programming (bsc#1012628). - memory: atmel-sdramc: Fix missing clk_disable_unprepare in atmel_ramc_probe() (bsc#1012628). - memory: mvebu-devbus: Fix missing clk_disable_unprepare in mvebu_devbus_probe() (bsc#1012628). - arm64: dts: qcom: sc8280xp: fix primary USB-DP PHY reset (bsc#1012628). - dmaengine: qcom: gpi: Set link_rx bit on GO TRE for rx operation (bsc#1012628). - dmaengine: ti: k3-udma: Do conditional decrement of UDMA_CHAN_RT_PEER_BCNT_REG (bsc#1012628). - soc: imx: imx8mp-blk-ctrl: enable global pixclk with HDMI_TX_PHY PD (bsc#1012628). - arm64: dts: imx8mp-phycore-som: Remove invalid PMIC property (bsc#1012628). - ARM: dts: imx6ul-pico-dwarf: Use 'clock-frequency' (bsc#1012628). - ARM: dts: imx7d-pico: Use 'clock-frequency' (bsc#1012628). - ARM: dts: imx6qdl-gw560x: Remove incorrect 'uart-has-rtscts' (bsc#1012628). - arm64: dts: verdin-imx8mm: fix dahlia audio playback (bsc#1012628). - arm64: dts: imx8mm-beacon: Fix ecspi2 pinmux (bsc#1012628). - arm64: dts: verdin-imx8mm: fix dev board audio playback (bsc#1012628). - arm64: dts: imx93-11x11-evk: correct clock and strobe pad setting (bsc#1012628). - ARM: imx: add missing of_node_put() (bsc#1012628). - soc: imx: imx8mp-blk-ctrl: don't set power device name (bsc#1012628). - arm64: dts: imx8mp: Fix missing GPC Interrupt (bsc#1012628). - arm64: dts: imx8mp: Fix power-domain typo (bsc#1012628). - arm64: dts: imx8mp-evk: pcie0-refclk cosmetic cleanup (bsc#1012628). - HID: intel_ish-hid: Add check for ishtp_dma_tx_map (bsc#1012628). - arm64: dts: imx8mm-venice-gw7901: fix USB2 controller OC polarity (bsc#1012628). - soc: imx8m: Fix incorrect check for of_clk_get_by_name() (bsc#1012628). - reset: ti-sci: honor TI_SCI_PROTOCOL setting when not COMPILE_TEST (bsc#1012628). - reset: uniphier-glue: Fix possible null-ptr-deref (bsc#1012628). - EDAC/highbank: Fix memory leak in highbank_mc_probe() (bsc#1012628). - firmware: arm_scmi: Harden shared memory access in fetch_response (bsc#1012628). - firmware: arm_scmi: Harden shared memory access in fetch_notification (bsc#1012628). - firmware: arm_scmi: Fix virtio channels cleanup on shutdown ... changelog too long, skipping 467 lines ... - commit e426c74 ==== libapparmor ==== - add abstractions-openssl-1_1.diff: allow to read /etc/ssl/openssl-1_1.cnf in abstractions/openssl (boo#1207911) ==== libjxl ==== Version update (0.8.0 -> 0.8.1) - Update to release 0.8.1 * Allow fast-lossless for 16-bit float input * Fix OOB read in exif.h ==== libopenmpt ==== Version update (0.6.7 -> 0.6.8) - update to 0.6.8: * [Bug] DSYM: Loading DSYM files got broken in 0.6.7. * When seeking around in a module, the tempo was sometimes incorrectly limited to 255 BPM * Initial instrument cutoff was broken for OPL instruments in libopenmnpt 0.6.7 * mpg123: Update to v1.31.2 ==== libp11 ==== - Fix build against openSSL 3. ==== libreoffice ==== Subpackages: libreoffice-base libreoffice-calc libreoffice-draw libreoffice-filters-optional libreoffice-gnome libreoffice-gtk3 libreoffice-icon-themes libreoffice-impress libreoffice-l10n-cs libreoffice-l10n-da libreoffice-l10n-de libreoffice-l10n-el libreoffice-l10n-en libreoffice-l10n-en_GB libreoffice-l10n-es libreoffice-l10n-fr libreoffice-l10n-hu libreoffice-l10n-it libreoffice-l10n-ja libreoffice-l10n-pl libreoffice-l10n-pt_BR libreoffice-l10n-ru libreoffice-l10n-zh_CN libreoffice-l10n-zh_TW libreoffice-mailmerge libreoffice-math libreoffice-pyuno libreoffice-qt5 libreoffice-writer libreofficekit - Update _constraints to match current requirements - riscv64-support.patch: Add backport of riscv64 support - No gold on riscv64 ==== libxml2 ==== Subpackages: libxml2-2 libxml2-2-32bit libxml2-tools - remove zlib-devel, pkgconfig(zlib) is sufficient ==== libxml2-python ==== - remove zlib-devel, pkgconfig(zlib) is sufficient ==== lmdb ==== - update to 0.9.29: * lmdump is not creating lock files ==== nfs-utils ==== Subpackages: libnfsidmap1 nfs-client nfs-kernel-server - Rename all drop-in options.conf files as 10-options.conf This makes it easier for other packages to over-ride with a drop-in with a later sequence number. resource-agents does this. (bsc#1207843) ==== patterns-media ==== Subpackages: patterns-media-rest_cd_core patterns-media-rest_dvd - rest_core_dvd: added recommends to packages for nVidia's openGPU driver * nvidia-open-driver-G06-signed-kmp-default * kernel-firmware-nvidia-gsp-G06 ==== pulseaudio ==== Subpackages: libpulse-mainloop-glib0 libpulse0 pulseaudio-bash-completion pulseaudio-gdm-hooks pulseaudio-lang pulseaudio-module-bluetooth pulseaudio-module-gsettings pulseaudio-module-x11 pulseaudio-module-zeroconf pulseaudio-setup pulseaudio-utils pulseaudio-zsh-completion system-user-pulse - Move dbus-1 system.d file to /usr (bsc#1207584) ==== re2 ==== Version update (20221201 -> 20230201) - update to 2023-02-01: * improved support for ICU - build with ICU ==== setools ==== Version update (4.4.0 -> 4.4.1) - Update to version 4.4.1: * Replace deprecated NetworkX function use in information flow and domain transition analysis. This function was removed in NetworkX 3.0. * Fix bug in apol copy and cut functions when copying from a tree view. * Fix bug with extended permission set construction when a range includes 0x0. * Add sesearch -Sp option for permission subset match. * Fix error in man page description for sesearch -ep option. * Improve output stability in constraint, common, class, role, and user queries. * Updated permission map. * Fix bug in sechecker parsing of multiline values. * Other code cleanups not visible to users. ==== snapper ==== Subpackages: libsnapper6 snapper-zypp-plugin - fix use of does_subvolume_exist() (bsc#1207901) - suppress debug logging in zypp-plugin per default - enable SELinux on Fedora and RHEL (gh#openSUSE/snapper#772) - Use libbtrfsutil implementation for BtrfsUtil::get_subvolume - Add build support for libbtrfsutil - Use libbtrfsutil implementation for the following methods: - check if a subvolume exists - create subvolume, snapshot - subvolume read-only check - delete subvolume - set/get default subvolume - filesystem sync ==== sssd ==== Subpackages: libsss_certmap0 libsss_idmap0 libsss_nss_idmap0 sssd-32bit sssd-krb5-common sssd-ldap - Move dbus-1 system.d file to /usr (bsc#1207586) ==== thunar-plugin-media-tags ==== Version update (0.3.0 -> 0.4.0) Subpackages: thunar-plugin-media-tags-lang - Update to version 0.4.0 * build: Add GLib requirement * build: Fix autotools warnings * Replace libexo with libxfce4util * Replace ExoBinding with GBinding * Fix compilation warnings * Adds new README.md and updates * AM_INIT_AUTOMAKE macro with foreign option * A couple of autotools improvements * Translation Updates ==== transmission ==== Subpackages: transmission-common transmission-gtk transmission-gtk-lang - Apply downstream patch from Gentoo to fix a crash with openSSL 3 (boo#1207914): * transmission-3.00-openssl-3.patch ==== webkit2gtk3 ==== Version update (2.38.3 -> 2.38.4) Subpackages: WebKit2GTK-4.1-lang libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles - Update to version 2.38.4: + Improve GStreamer multimedia playback across the board with improved codec selection logic, better handling of latency, and improving frame discard to avoid audio/video desynchronizationg, among other fixes. + Disable HLS media playback by default, which makes web sites use MSE instead. If needed WEBKIT_GST_ENABLE_HLS_SUPPORT=1 can be set in the environment to enable it back. + Disable threaded rendering in GTK4 builds by default, as it was causing crashes. + Fix MediaSession API not showing artwork images. + Fix MediaSession MPRIS usage when running inside a Flatpak sandbox. + Fix input element controls to correctly scale when applying a zoom factor different than the default. + Fix leakage of Web processes in certain situations. + Fix the injected bundle not being found when running inside a sandbox. + Fix the build with ENABLE_INTROSPECTION when cross-compiling. + FIx the build with ENABLE_WEBGL disabled. + Fix the build with GStreamer-based WebRTC enabled. + Fix the build with USE_GTK4 enabled. + Fix several crashes and rendering issues. ==== xf86-video-vmware ==== Version update (13.3.0+12 -> 13.4.0) - Update to version 13.4.0 - supersedes u_Fix-build-gcc-12.patch - switched back to tarball from git checkout via source service ==== xkeyboard-config ==== Version update (2.37 -> 2.38) Subpackages: xkeyboard-config-lang - Update to version 2.38 * Add Russian layout with typographic symbols * Update symbols/ru * symbols/us: uncomment the nine keys in the international Dvorak layout * symbols/bg: reduce the "enhanced" layout to an include + three overrides * symbols/epo: reshuffle a comment, and drop unneeded key types * replace some Unicode codes with their corresponding symbol name * symbols/no: add missing symbols to Sami layout, and remove duplicates * symbols/no: add non-dead grave and such to Sami layout, and reshuffle * Add apple:jp_oadg109a and apple:jp_pc106 variants * Added Gujarati KaGaPa layout (guj-kagapa) * Update base.xml * rules: add option 'swap_ralt_rctl' * prerelease push, for translations * Handy script for publishing * Making ru(typo) more consistent with existing variants * Prerelease translation sync * fix rx-51 third level modifier * Add Latvia Modern Cyrillic keyboard layout * add colemak_dh_ortho * Add `trademark` to level4 of us-intl layout * dv-intl: add placeholder chars to lvl3+, bind LSGT ==== yast2-schema-default ==== Version update (4.5.7 -> 4.5.9) - drop yast2-dhcp-server and yast2-http-server schema from TW as it also depends on yast2-dns-server (bsc#1205363) - 4.5.9 - drop yast2-dns-server schema from TW (bsc#1205363) - 4.5.8 ==== yast2-trans ==== Version update (84.87.20230130.b344a57eef -> 84.87.20230202.68f7d5c2e4) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20230202.68f7d5c2e4: * Translated using Weblate (Czech) * Translated using Weblate (Czech) * Translated using Weblate (Czech) * Translated using Weblate (Czech) * Translated using Weblate (Georgian) * Translated using Weblate (Portuguese) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Slovak) * Translated using Weblate (Dutch) * Translated using Weblate (Catalan) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Japanese) * New POT for text domain 'samba-client'. * Translated using Weblate (Georgian)

1 0

netcfg installation broken on preinstallimage used by Factory
by Adam Majer 07 Feb '23

07 Feb '23

Hi all, openSUSE:Factory is using preinstallimage for package builds. Unfortunately, the generated /etc/hosts in these preinstalled images breaks installation of netcfg and thus has broken IPv6 support since generated /etc/hosts lacks entries for IPv6 localhost entries. [ 1s] init_buildsystem --configdir /var/run/obs/worker/3/build/configs --cachedir /var/cache/build --prepare --clean --rpmlist /var/cache/obs/worker/root_3/.build.rpmlist /var/cache/obs/w orker/root_3/.build-srcdir/nodejs18.spec build ... [ 2s] unpacking preinstall image openSUSE:Factory/standard/preinstallimage-base [70a9776c8fd3bdbf526d4ea20271ed4c] [ 6s] [ 6s] copying packages... ... [ 18s] [158/179] cumulate netcfg-11.6-9.12 ... [ 18s] netcfg-11.6-9.12 ######################################## [ 18s] warning: /etc/hosts created as /etc/hosts.rpmnew I brought this issue up https://github.com/openSUSE/open-build-service/issues/13104 but apparently it belongs on Factory ML. Is there something that can be done on Factory side, like removing the generated /etc/hosts or installing netcfg? - Adam

1 0

Why Blacklist nouveau?
by tponline＠e.mail.de 07 Feb '23

07 Feb '23

Hello, after update thumbleweed to kernel 6.1.8 X won't start I'm looking for the reason and find out that the kernel module 'nouveau' was not loaded, after "modprobe nouveau" X starts as expected. I found a new file: '/lib/modprobe.d/50-nvidia-default.conf' with "blacklist nouveau" in first line. Rename this file to *.bak and after reboot X starts normally. regards tp

10 11

No sound after TW 06/02/23 morning updates
by Luiz Alberto Saba 07 Feb '23

07 Feb '23

Hi After today's updates of TW, the sound icon is crossed and a message says that no in/out device is found. re-run dracut, reboot and still the same. ts040:~ # lspci 00:00.0 Host bridge: Intel Corporation Device 4c43 (rev 01) 00:02.0 VGA compatible controller: Intel Corporation RocketLake-S GT1 [UHD Graphics 750] (rev 04) 00:06.0 PCI bridge: Intel Corporation Device 4c09 (rev 01) 00:14.0 USB controller: Intel Corporation Tiger Lake-H USB 3.2 Gen 2x1 xHCI Host Controller (rev 11) 00:14.2 RAM memory: Intel Corporation Tiger Lake-H Shared SRAM (rev 11) 00:14.3 Network controller: Intel Corporation Tiger Lake PCH CNVi WiFi (rev 11) 00:15.0 Serial bus controller: Intel Corporation Tiger Lake-H Serial IO I2C Controller #0 (rev 11) 00:15.1 Serial bus controller: Intel Corporation Tiger Lake-H Serial IO I2C Controller #1 (rev 11) 00:16.0 Communication controller: Intel Corporation Tiger Lake-H Management Engine Interface (rev 11) 00:17.0 SATA controller: Intel Corporation Device 43d2 (rev 11) 00:1b.0 PCI bridge: Intel Corporation Device 43c0 (rev 11) 00:1c.0 PCI bridge: Intel Corporation Device 43b8 (rev 11) 00:1c.7 PCI bridge: Intel Corporation Device 43bf (rev 11) 00:1d.0 PCI bridge: Intel Corporation Tiger Lake-H PCI Express Root Port #9 (rev 11) 00:1f.0 ISA bridge: Intel Corporation Device 4385 (rev 11) 00:1f.3 Audio device: Intel Corporation Tiger Lake-H HD Audio Controller (rev 11) 00:1f.4 SMBus: Intel Corporation Tiger Lake-H SMBus Controller (rev 11) 00:1f.5 Serial bus controller: Intel Corporation Tiger Lake-H SPI Controller (rev 11) 01:00.0 Non-Volatile memory controller: Samsung Electronics Co Ltd NVMe SSD Controller SM981/PM981/PM983 02:00.0 Non-Volatile memory controller: Samsung Electronics Co Ltd NVMe SSD Controller 980 04:00.0 Ethernet controller: Intel Corporation Ethernet Controller I225-V (rev 03) 05:00.0 Non-Volatile memory controller: Samsung Electronics Co Ltd NVMe SSD Controller 980 ts040:~ # insmod snd_hda_intel insmod: ERROR: could not load module snd_hda_intel: No such file or directory ts040:~ # find /* -name snd_hda_intel find: ‘/run/user/1000/gvfs’: Permission denied find: ‘/run/user/1000/doc’: Permission denied /sys/kernel/btf/snd_hda_intel /sys/kernel/debug/printk/index/snd_hda_intel /sys/bus/pci/drivers/snd_hda_intel /sys/module/snd_hda_intel /sys/module/snd_hda_codec/holders/snd_hda_intel /sys/module/snd_intel_dspcfg/holders/snd_hda_intel /sys/module/snd_pcm/holders/snd_hda_intel /sys/module/snd/holders/snd_hda_intel /sys/module/snd_hda_core/holders/snd_hda_intel ts040:~ # lsmod Module Size Used by binfmt_misc 28672 1 rfcomm 90112 4 ccm 20480 6 cmac 16384 3 algif_hash 16384 1 algif_skcipher 16384 1 af_alg 36864 6 algif_hash,algif_skcipher vboxnetadp 28672 0 vboxnetflt 32768 0 pktcdvd 61440 0 snd_seq_dummy 16384 0 snd_seq_oss 57344 0 snd_seq_midi_event 16384 1 snd_seq_oss af_packet 61440 12 snd_seq 98304 5 snd_seq_oss,snd_seq_midi_event,snd_seq_dummy sr_mod 28672 0 cdrom 77824 2 pktcdvd,sr_mod snd_pcm_oss 65536 0 vboxdrv 606208 2 vboxnetadp,vboxnetflt qrtr 53248 4 snd_mixer_oss 28672 1 snd_pcm_oss bnep 28672 2 joydev 28672 0 btusb 65536 0 btrtl 28672 1 btusb btbcm 24576 1 btusb btintel 45056 1 btusb btmtk 16384 1 btusb bluetooth 925696 36 btrtl,btmtk,btintel,btbcm,bnep,btusb,rfcomm uvcvideo 163840 0 videobuf2_vmalloc 20480 1 uvcvideo videobuf2_memops 20480 1 videobuf2_vmalloc videobuf2_v4l2 40960 1 uvcvideo snd_usb_audio 397312 0 videobuf2_common 90112 4 videobuf2_vmalloc,videobuf2_v4l2,uvcvideo,videobuf2_memops hid_generic 16384 0 videodev 323584 3 videobuf2_v4l2,uvcvideo,videobuf2_common snd_usbmidi_lib 45056 1 snd_usb_audio snd_rawmidi 49152 1 snd_usbmidi_lib snd_seq_device 16384 3 snd_seq,snd_seq_oss,snd_rawmidi mc 81920 5 videodev,snd_usb_audio,videobuf2_v4l2,uvcvideo,videobuf2_common usbhid 73728 0 ecdh_generic 16384 2 bluetooth intel_rapl_msr 20480 0 iTCO_wdt 16384 0 intel_pmc_bxt 16384 1 iTCO_wdt mei_hdcp 24576 0 mei_pxp 20480 0 ee1004 20480 0 iTCO_vendor_support 16384 1 iTCO_wdt spi_nor 118784 0 mtd 94208 3 spi_nor snd_hda_codec_hdmi 86016 1 snd_sof_pci_intel_tgl 16384 0 snd_sof_intel_hda_common 221184 1 snd_sof_pci_intel_tgl soundwire_intel 57344 1 snd_sof_intel_hda_common soundwire_generic_allocation 16384 1 soundwire_intel soundwire_cadence 45056 1 soundwire_intel snd_sof_intel_hda 20480 1 snd_sof_intel_hda_common snd_sof_pci 24576 2 snd_sof_intel_hda_common,snd_sof_pci_intel_tgl snd_sof_xtensa_dsp 20480 1 snd_sof_intel_hda_common snd_sof 339968 2 snd_sof_pci,snd_sof_intel_hda_common iwlmvm 524288 0 snd_sof_utils 20480 1 snd_sof snd_soc_hdac_hda 28672 1 snd_sof_intel_hda_common snd_hda_codec_realtek 172032 1 snd_hda_ext_core 40960 2 snd_sof_intel_hda_common,snd_soc_hdac_hda snd_soc_acpi_intel_match 73728 2 snd_sof_intel_hda_common,snd_sof_pci_intel_tgl intel_rapl_common 32768 1 intel_rapl_msr snd_soc_acpi 16384 2 snd_soc_acpi_intel_match,snd_sof_intel_hda_common snd_hda_codec_generic 98304 1 snd_hda_codec_realtek soundwire_bus 126976 3 soundwire_intel,soundwire_generic_allocation,soundwire_cadence mac80211 1302528 1 iwlmvm snd_soc_core 389120 4 soundwire_intel,snd_sof,snd_sof_intel_hda_common,snd_soc_hdac_hda snd_compress 32768 1 snd_soc_core snd_pcm_dmaengine 16384 1 snd_soc_core snd_hda_intel 61440 0 snd_intel_dspcfg 36864 3 snd_hda_intel,snd_sof,snd_sof_intel_hda_common snd_intel_sdw_acpi 20480 2 snd_sof_intel_hda_common,snd_intel_dspcfg libarc4 16384 1 mac80211 snd_hda_codec 192512 6 snd_hda_codec_generic,snd_hda_codec_hdmi,snd_hda_intel,snd_hda_codec_realtek,snd_soc_hdac_hda,snd_sof_intel_hda asus_nb_wmi 28672 0 eeepc_wmi 16384 0 iwlwifi 417792 1 iwlmvm snd_hda_core 122880 9 snd_hda_codec_generic,snd_hda_codec_hdmi,snd_hda_intel,snd_hda_ext_core,snd_hda_codec,snd_hda_codec_realtek,snd_sof_intel_hda_common,snd_soc_hdac_hda,snd_sof_intel_hda asus_wmi 69632 2 asus_nb_wmi,eeepc_wmi snd_hwdep 16384 2 snd_usb_audio,snd_hda_codec nls_iso8859_1 16384 1 x86_pkg_temp_thermal 20480 0 snd_pcm 184320 13 snd_hda_codec_hdmi,snd_hda_intel,snd_usb_audio,snd_hda_codec,soundwire_intel,snd_sof,snd_sof_intel_hda_common,snd_compress,snd_pcm_oss,snd_soc_core,snd_sof_utils,snd_hda_core,snd_pcm_dmaengine nls_cp437 20480 1 intel_powerclamp 20480 0 uas 32768 0 battery 28672 1 asus_wmi xfs 1966080 1 coretemp 20480 0 pcspkr 16384 0 snd_timer 49152 2 snd_seq,snd_pcm vfat 24576 1 ledtrig_audio 16384 2 snd_hda_codec_generic,asus_wmi usb_storage 86016 1 uas fat 94208 1 vfat cfg80211 1118208 3 iwlmvm,iwlwifi,mac80211 sparse_keymap 16384 1 asus_wmi efi_pstore 16384 0 platform_profile 16384 1 asus_wmi wmi_bmof 16384 0 snd 131072 19 snd_hda_codec_generic,snd_seq,snd_seq_device,snd_hda_codec_hdmi,snd_hwdep,snd_seq_oss,snd_hda_intel,snd_usb_audio,snd_usbmidi_lib,snd_hda_codec,snd_hda_codec_realtek,snd_sof,snd_timer,snd_compress,snd_pcm_oss,snd_soc_core,snd_pcm,snd_rawmidi,snd_mixer_oss igc 163840 0 i2c_i801 45056 0 soundcore 16384 1 snd spi_intel_pci 16384 0 mei_me 57344 2 spi_intel 32768 1 spi_intel_pci i2c_smbus 20480 1 i2c_i801 intel_lpss_pci 28672 0 mei 172032 5 mei_hdcp,mei_pxp,mei_me intel_lpss 16384 1 intel_lpss_pci rfkill 40960 11 iwlmvm,asus_wmi,bluetooth,cfg80211 idma64 20480 0 thermal 32768 0 fan 20480 0 tiny_power_button 16384 0 button 24576 0 intel_pmc_core 53248 0 acpi_pad 184320 0 acpi_tad 20480 0 fuse 172032 9 configfs 57344 1 dmi_sysfs 20480 0 ip_tables 36864 0 x_tables 61440 1 ip_tables i915 3436544 46 crct10dif_pclmul 16384 1 crc32_pclmul 16384 0 polyval_clmulni 16384 0 polyval_generic 16384 1 polyval_clmulni gf128mul 16384 1 polyval_generic ghash_clmulni_intel 16384 0 xhci_pci 24576 0 sha512_ssse3 49152 1 xhci_pci_renesas 24576 1 xhci_pci drm_buddy 20480 1 i915 xhci_hcd 348160 1 xhci_pci drm_display_helper 221184 1 i915 nvme 61440 4 aesni_intel 393216 8 cec 86016 2 drm_display_helper,i915 usbcore 380928 9 xhci_hcd,snd_usb_audio,usbhid,snd_usbmidi_lib,usb_storage,uvcvideo,btusb,xhci_pci,uas crypto_simd 16384 1 aesni_intel cryptd 28672 3 crypto_simd,ghash_clmulni_intel rc_core 69632 1 cec nvme_core 172032 7 nvme ttm 94208 1 i915 video 69632 2 asus_wmi,i915 wmi 45056 3 video,asus_wmi,wmi_bmof pinctrl_tigerlake 32768 0 btrfs 1966080 2 blake2b_generic 20480 0 libcrc32c 16384 2 btrfs,xfs crc32c_intel 24576 3 xor 24576 1 btrfs raid6_pq 122880 1 btrfs sg 49152 0 dm_multipath 45056 0 dm_mod 196608 1 dm_multipath scsi_dh_rdac 16384 0 scsi_dh_emc 16384 0 scsi_dh_alua 20480 0 ledtrig_timer 16384 0 msr 16384 0 efivarfs 24576 1 Any ideas? Thanks Luiz Alberto Saba

2 5

Security Posture of ALP/LEAP?
by Lew Wolfgang 06 Feb '23

06 Feb '23

Hi Folks, It may be too soon to ask about this, but I'll do it anyway. How will security posture enforcement and monitoring be done with ALP? Specifically, will Nessus-style security posture scanning be supported? How about SELinux? Also, what about end-point security systems, such as McAfee (now Trellix) Host Based Security System (HBSS) support. Trellix does not yet support Leap 14.4, which is actually a good thing, because HBSS is a horrible rootkit mess that introduces non-deterministic behavior and poor performance into a normal Linux environment. Regards, Lew

3 3

New Tumbleweed snapshot 20230205 released!
by Dominique Leuenberger 06 Feb '23

06 Feb '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: libstorage-ng (4.5.68 -> 4.5.69) mlocate python-dnspython (2.2.1 -> 2.3.0) python-importlib-resources smartmontools === Details === ==== libstorage-ng ==== Version update (4.5.68 -> 4.5.69) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - Translated using Weblate (Georgian) (bsc#1149754) - 4.5.69 ==== mlocate ==== Subpackages: mlocate-lang - Remove ProtectKernelModules from systemd unit as it makes files inaccessible that are then not visible for locate (bsc#1207884) ==== python-dnspython ==== Version update (2.2.1 -> 2.3.0) - Update to version 2.3.0 * The get_soa() method has been added to dns.zone.Zone. * The minimum TLS version is now 1.2. * EDNS padding is now supported. Messages with EDNS enabled and with a non-zero pad option will be automatically padded appropriately when converted to wire format. * dns.zone.from_text() and dns.zone.from_file() now have an allow_directives parameter to allow finer control over how directives in zonefiles are processed. * A preliminary implementation of DNS-over-QUIC has been added, and will be available if the aioquic library is present. See dns.query.quic(), dns.asyncquery.quic(), and examples/doq.py for more info. This API is subject to change in future releases For asynchronous I/O, both asyncio and Trio are supported, but Curio is not. * DNSSEC signing support has been added to the dns.dnssec module, along with a number of functions to help generate DS, CDS, and CDNSKEY RRsets. * Curio asynchronous I/O support is deprecated as of this release and will be removed in a future release. * The resolver objectâs nameserver field is planned to become a property in dnspython 2.4. Writing to this field other than by direct assignment is deprecated, and so is depending on the mutability and form of the iterable returned when it is read. ==== python-importlib-resources ==== - Remove obsolete cache compilation for tests * fixes d:l:p:backports 15.4_py39 build failure. - Avoid building for not supported Python <= 3.6 ==== smartmontools ==== - Catch another invalid state in %post: DRIVEDB_H_RELEASE_SAVED might end up empty

1 0