March 2023 - openSUSE Factory - openSUSE Mailing Lists

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 11 Mar '23

11 Mar '23

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have had problems for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - collectd: Uninstallable: nothing provides libupsclient.so.4 needed by collectd-plugin-nut-5.12.0.130.g2f3c12e.i586 - python-gwpy: Unresolvable Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

3 2

New Tumbleweed snapshot 20230309 released!
by Dominique Leuenberger 10 Mar '23

10 Mar '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: brotli dav1d gstreamer-plugins-rs libiscsi (1.19.0+git.20221112 -> 1.19.0+git.20230208) libksieve libmfx libyui (4.4.9 -> 4.5.0) libyui-ncurses (4.4.9 -> 4.5.0) libyui-ncurses-pkg (4.4.9 -> 4.5.0) libyui-qt (4.4.9 -> 4.5.0) libyui-qt-graph (4.4.9 -> 4.5.0) libyui-qt-pkg (4.4.9 -> 4.5.0) lz4 mariadb mariadb-connector-c (3.3.3 -> 3.3.4) openjpeg2 pentobi (21.0 -> 23.0) pimcommon rubygem-rack (3.0.4.1 -> 3.0.4.2) timezone timezone-java vim (9.0.1386 -> 9.0.1392) === Details === ==== brotli ==== Subpackages: libbrotlicommon1 libbrotlicommon1-32bit libbrotlidec1 libbrotlidec1-32bit libbrotlienc1 - Build AVX2 enabled hwcaps library for x86_64-v3 ==== dav1d ==== - Revert last change. This is now handled in xxhash. ==== gstreamer-plugins-rs ==== - Increase constraints so it doesn't fail to build for lack of disk space. ==== libiscsi ==== Version update (1.19.0+git.20221112 -> 1.19.0+git.20230208) - Update to version 1.19.0+git.20230208: * iser: Remove unnecessary 'return;' * pdu: Remove temporary variables from functions * connect: Add check after malloc allocation * aros_compat: Add check after malloc allocation - Build AVX2 enabled hwcaps library for x86_64-v3 ==== libksieve ==== Subpackages: libksieve-lang libksieve5 - Add patch to fix accidentially using the password as username (kde#437858, kde#467034, boo#1209050): * 0001-Fix-467034-libksieve-src-kmanagesieve-session.cpp-as.patch ==== libmfx ==== - Add upstream gcc13-fix.patch patch. ==== libyui ==== Version update (4.4.9 -> 4.5.0) - Bump version to 4.5.0 (bsc#1208913) ==== libyui-ncurses ==== Version update (4.4.9 -> 4.5.0) - Bump version to 4.5.0 (bsc#1208913) ==== libyui-ncurses-pkg ==== Version update (4.4.9 -> 4.5.0) - Bump version to 4.5.0 (bsc#1208913) ==== libyui-qt ==== Version update (4.4.9 -> 4.5.0) - Bump version to 4.5.0 (bsc#1208913) ==== libyui-qt-graph ==== Version update (4.4.9 -> 4.5.0) - Bump version to 4.5.0 (bsc#1208913) ==== libyui-qt-pkg ==== Version update (4.4.9 -> 4.5.0) - Bump version to 4.5.0 (bsc#1208913) ==== lz4 ==== Subpackages: liblz4-1 liblz4-1-32bit - Build AVX2 enabled hwcaps library for x86_64-v3 ==== mariadb ==== Subpackages: libmariadbd19 mariadb-client mariadb-errormessages - Cherry-pick upstream changes (gcc13-fix.patch) for GCC 13. ==== mariadb-connector-c ==== Version update (3.3.3 -> 3.3.4) - update to 3.3.4: https://mariadb.com/kb/en/mariadb-connector-c-3-3-4-release-notes/ ==== openjpeg2 ==== - Build AVX2 enabled hwcaps library for x86_64-v3 ==== pentobi ==== Version update (21.0 -> 23.0) - ExclusiveArch because of pkgconfig(Qt6WebView) availability. - Update to version 23.0 * Use native file dialogs on Linux to make loading and saving of games work with flatpak. [#] This adds a run-time dependency on package [#] qml6-module-qtquick-dialogs (on Debian). * Prefix MIME config and icons with io.sourceforge.pentobi, such that registering Pentobi as an app for its game files works with flatpak. * Removed option to disable animations. * Removed menu item Open Clipboard. * Require C++ compiler with C++20 support. * Minimum required Qt version is now 6.4 * Removed custom CMake module to find path of Docbook XSL and let the local XML catalog do the mapping between URL and path. * Don't initialize move number dialog with current move but show it as placeholder text. - Update to version 22.0 * Fixed game analysis hanging on some platforms. * Don't use custom menu implementation, which caused problems in dark mode on Android and KDE 5. As a consequence, shortcuts are no longer shown on the menu but documented in the Pentobi manual. * Made navigation links in help viewer part of the scrollable page to avoid a bug in Qt that made the text sometimes disappear if a navigation link was pressed with a scrolled page. * Help window shortcuts stopped working after mouse click with Qt 6.4. - Update to version 21.1 * Fixed game analysis hanging on some platforms. * Don't use custom menu implementation, which caused problems in dark mode on Android and KDE 5. As a consequence, shortcuts are no longer shown on the menu but documented in the Pentobi manual. * Made navigation links in help viewer part of the scrollable page to avoid a bug in Qt that made the text sometimes disappear if a navigation link was pressed with a scrolled page. * Help window shortcuts stopped working after mouse click with Qt 6.4. ==== pimcommon ==== Subpackages: libKF5PimCommon5 libKF5PimCommonAkonadi5 libKF5PimCommonAutoCorrection5 pimcommon-lang - Require libKF5PimCommonAutoCorrection5 in the -devel package ==== rubygem-rack ==== Version update (3.0.4.1 -> 3.0.4.2) - version update to 3.0.4.2 * rack.input is now optional, and if missing, will raise an error. Use this to fail on multipart parsing a request without an input body. (#2018, @ioquatix) * Introduce module Rack::BadRequest which is included in multipart and query parser errors. (#2019, @ioquatix) * MIME type for JavaScript files (.js) changed from application/javascript to text/javascript (1bd0f15) * fixes CVE-2023-27530 [bsc#1209095] ==== timezone ==== - Add gcc13-fix.patch upsteam patch for GCC 13 compiler. ==== timezone-java ==== - Add gcc13-fix.patch upsteam patch for GCC 13 compiler. ==== vim ==== Version update (9.0.1386 -> 9.0.1392) Subpackages: vim-data vim-data-common - Updated to version 9.0.1392, fixes the following problems - fixes CVE-2023-1264 * Options test fails with some window width. * Scrollbar test sporadically fails. * Amiga: not all builds use gethostname(). * Amiga: a couple of include files are included twice. * FOR_ALL_ macros are defined in an unexpected file. * "clear" macros are not always used. * Using NULL pointer with nested :open command.

1 0

Re: TW slow to process zypper dup??
by Fritz Hudnut 10 Mar '23

10 Mar '23

> > I hope this does not sound insulting but I think that you are out of > scope for this mailing list. I believe that you would be better served > posting to the openSUSE user forums - see https://forums.opensuse.org > > Cheers, > > --- > Pablo Sanchez - Blueoak Database Engineering @Pablo: Thanks for the concern. I wasn't posting to this list looking for help. The forum guys are very good at what they do, but, they don't make the decisions about what packages are going into TW, the decisions that break stuff, the decisions that make weekly upgrades take 1.5 hours of machine time to run through, etc. Those decisions appear to be made here, hence my post(s). I have been running TW for roughly 8 or 9 years. When I first started using it, it was a "rolling" distribution, a few packages were upgraded every week . . . nothing broke, the system took care of itself very well--and it wasn't important to have actual command line skills to run it. Now, in the last 1.5 to 2 years TW has become "very high maintenance" and more like Debian Sid (I have a Sid install running to compare) . . . rather than being a "rolling" show it is a "high maintenance unstable" show, with large weekly package upgrades . . . that then often break the system in some way. That clearly was a "decision" that I am asking the "why" of; because it seems like SUSE has all kinds of other channels to run "unstable" packages through to use for "unstable" purposes. I recall from my Mint days that he offers a few packages, "stable" and "rolling" . . . why is that openSUSE now has "stable" and "Sid" as the only two choices for download?? TW is now like a "gamer" distro . . . who knows which package will break your system, take a chance homie, click "y" and see what happens kind of a distro. Thanks for the bandwidth. F

2 1

openSUSE Leap 15.5 Windows Subsystem for Linux
by Andreas Artz 10 Mar '23

10 Mar '23

Hey folks! I am interested in testing out openSUSE Leap 15.5 on WSL. Is there a way to get the image in order to help out? Best Andi

3 4

Re: TW slow to process zypper dup??
by Fritz Hudnut 09 Mar '23

09 Mar '23

> > On this last /dup/, did you run it within a Bourne compatible shell as > follows? > > > --8-<---8-<---8-<---8-<---8-<---8-<---8-<---8-<-- > > export ZYPP_MEDIANETWORK=1 > export ZYPP_SINGLE_RPMTRANS=1 > zypper dup -l > > --8-<---8-<---8-<---8-<---8-<---8-<---8-<---8-<-- > > Please note that /zypper dup/ will run a /refresh/ when needed. > > Also, I'm not sure if your email client is doing it but it keeps adding > my name to the Subject (and I keep removing it. :) You might want to > investigate why it's doing it. > > Cheers, > > --- @Pablo: So the list enforcer already came after me with the cat o' 9 tails about the subject line name thing. I'm in digest mode so when I reply I have to copy/paste the subject line, which I was copying the whole line to "flag" the participants in the convo. And, hopefully this email is once again in plain text . . . multiple infractions in only a few posts. Since I'm an underposter I got to slack a lackin on the minutiae . . . . So, back on topic, running the zypper dup in Gecko rolling was informative, I was previously waiting for that to go through before I posted back, but it kept going and getting bogged down . . . so very similar to the TW experience. I think in this case the Gecko is running in an HDD compared to TW in an SSD. Gecko ran "343 packages" with some 6.2 kernel updates and "broadcom" updates in 1.39 hours; so more than 2x the packages, but in not radically different time to wend through them all. Once again, the ref and download was done in a couple of mins and the first 151 packages were ripped through in roughly ten mins, but then it showed down on several of the kernel upgrade packages. Where it really bogged was around #330 which is where possibly an nvidia-gfxG05 package was installing and there was literally a 15 - 20 min time period where many lines of "depmod: ERROR- ("nvidia" package names) no such file or directory" were listed and then the cursor was just blinking until much later it moved to #131 . . . with many, many "dracut" lines until finally returning to the # . . . . There were recent problems in Leap & TW installing an nvidia G06 package that caused problems with "X"??? In today's Gecko upgrade it seems like the "failure to revive from suspend" problem has once again returned--likely relating to an nvidia issue, or a kernel issue. In answer to your "bourne shell" question, do you mean a TTY shell?? I'm usually "in a hurry" and I do my system maintenance in the morning before going to work . . . in a GUI console. I didn't quite understand your suggested commands, thinking that was for some script to run the dup, but now I'm figuring that is to simply make a copy of the dup process??? My **expectation** this morning was that Gecko was going to rip through the package installation process, similar to the relatively fast Leap times . . . but that didn't happen. I have an Nvidia 780 card, but I run "default" video driver, which I previously thought there was "nothing proprietary used" . . . but it seems like even running "default" that some nvidia packages are used . . . but . . . then "not used" or "not found" with time spent "looking"?? The "broadcom-wl" package also seemed to use 5 minutes to run through. Seems to use up a lot of time . . . and that might be the same case in TW?? I'll have to check that when I get back to TW / and boot it up. Might be a few days before I get back to TW, other stuff going on. F

3 2

Re: 6.2.1 will have lockdown patches
by Robert Kaiser 09 Mar '23

09 Mar '23

[inadvertently did not send my reply to the list, so trying to get it in again with this] Jiri Slaby schrieb: > On 09. 03. 23, 12:32, Robert Kaiser wrote: >> Jiri Slaby schrieb: >>> Last but not least, I do not recommend anyone with out of tree >>> modules to run TW. >> >> So, you mean, anybody who wants to use NVidia graphics fully should >> not use TW? Doesn't sound like a good solution to me, esp. as >> nowadays, the proprietary driver mostly works fine even on kernel >> updates (when a new major version comes out, there sometimes are >> breakages but those usually get fixed pretty quickly). And with 6.2.1 >> I "just" needed to disable secureboot in the UEFI - not ideal, but it >> works for those of us who can just do that. > > Did you intentionally remove the next sentence: > I mean those users not having good enough knowledge how to fix things. > ? > > Reading the above, you belong to the category. > >> That said, could there be two kernels available for choice, one with >> lockdown, one without, and for TW the one without would be default >> (while on SLE or even Leap or it successor the locked down one would >> be default)? > > No, as per Microsoft requirements. > Hrm, that's a bummer. Being able to chose if you lock down your system or not would IMHO be great but if they don't allow that user choice, that's really sad. Cheers, KaiRo

4 3

New Tumbleweed snapshot 20230308 released!
by Dominique Leuenberger 09 Mar '23

09 Mar '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MozillaFirefox cabextract (1.10 -> 1.11) elfutils-debuginfod exempi (2.6.2 -> 2.6.3) geoclue2 (2.6.0 -> 2.7.0) gptfdisk grep (3.8 -> 3.9) hwdata (0.367 -> 0.368) iproute2 (6.1 -> 6.2) libopenraw (0.3.1 -> 0.3.4) liborcus libplacebo libsndfile (1.1.0 -> 1.2.0) libtpms (0.9.5 -> 0.9.6) libvirt (9.0.0 -> 9.1.0) polkit-default-privs (1550+20230303.7726e9f -> 1550+20230307.7f42172) poppler (23.02.0 -> 23.03.0) poppler-qt5 (23.02.0 -> 23.03.0) python-anyio python-libvirt-python (9.0.0 -> 9.1.0) python-pytz (2022.7 -> 2022.7.1) re2 (20230201 -> 20230301) rubygem-actionpack-7.0 (7.0.4 -> 7.0.4.1) rubygem-actionview-7.0 (7.0.4 -> 7.0.4.1) rubygem-activemodel-7.0 (7.0.4 -> 7.0.4.1) rubygem-activerecord-7.0 (7.0.4 -> 7.0.4.1) rubygem-activesupport-7.0 (7.0.4 -> 7.0.4.1) rubygem-loofah (2.19.0 -> 2.19.1) rubygem-rails-html-sanitizer (1.4.3 -> 1.5.0) rubygem-yast-rake (0.2.47 -> 0.2.48) smartmontools swtpm (0.7.3 -> 0.8.0) virtualbox virtualbox-kmp wireless-regdb (20221205 -> 20230213) xterm (378 -> 379) yast2-auth-client (4.6.0 -> 4.6.1) yast2-auth-server (4.6.0 -> 4.6.1) yast2-nfs-client (4.5.1 -> 4.6.1) === Details === ==== MozillaFirefox ==== Subpackages: MozillaFirefox-translations-common - Limit memory use on riscv64 ==== cabextract ==== Version update (1.10 -> 1.11) - update to 1.11: * Fixed bug in creating directories given in archives, e.g. extracting file ==== elfutils-debuginfod ==== Subpackages: debuginfod-profile libdebuginfod1 - Fix file listing for 15.x builds. ==== exempi ==== Version update (2.6.2 -> 2.6.3) - update to 2.6.3: * Fix null to int assignement error. ==== geoclue2 ==== Version update (2.6.0 -> 2.7.0) Subpackages: system-user-srvGeoClue typelib-1_0-Geoclue-2_0 - Update to version 2.7.0: + Multiple config files named *.conf are now read from the config directory at @sysconfdir@/geoclue/conf.d. + HTTP requests are now made via libsoup3.0 instead of libsoup2.4. + A static location can now be set in @sysconfdir@/geolocation for immobile systems. + Web source requests are now submitted with combined WiFi and 3GPP tower data. + Web source now checks connectivity in a way that allows location and submission servers running on localhost. + Web source submissions are now made using /v2/geosubmit API. + Web source cell tower submissions now have the correct radio type. + Web source requests now submit the BSS age property. + Web source submissions now contain the location speed. + Web source cache now respects WiFi signal tolerance strictly. + NMEA source now supports both '\n' and '\r' NMEA delimiters. + NMEA source can now be made the Web source submit source. + ModemManager now use signaled calls to get cached location information to avoid performing explicit modem query. + Location description now contains information about its source. + GSettings backend no longer complains about being run from a read-only filesystem. + Many small improvements and fixes, some memory safety related. - Drop 129.patch: Fixed upstream. ==== gptfdisk ==== - Add gptfdisk-fix-null-pointer-dereference.patch: Fix NULL pointer dereference in pervious patch, poptGetArg can return NULL so we should not pass it to strdup directly (bsc#1208877). ==== grep ==== Version update (3.8 -> 3.9) Subpackages: grep-lang - Update to grep 3.9 * With -P, some non-ASCII UTF8 characters were not recognized as word-constituent due to our omission of the PCRE2_UCP flag. * When given multiple patterns the last of which has a back-reference, grep no longer sometimes mistakenly matches lines in some cases ==== hwdata ==== Version update (0.367 -> 0.368) - update to 0.368: * Update pci, usb and vendor ids ==== iproute2 ==== Version update (6.1 -> 6.2) Subpackages: iproute2-bash-completion - Update to release 6.2 * f_flower: Introduce L2TPv3 support * bridge: fdb: Add support for locked FDB entries * bridge: link: Add MAC Authentication Bypass (MAB) support * ip: Support --json on `ip neigh get` * tc: Add JSON output to tc-class ==== libopenraw ==== Version update (0.3.1 -> 0.3.4) Subpackages: gdk-pixbuf-loader-libopenraw libopenraw9 - Update to version 0.3.4: * Added Canon R8 and R50. * Added Panasonic G95D* and S5M2. * Added Canon 200D Mk II*, EOS R6 MKII*, EOS R7* and EOS R10*. * Added DJI Mini 3 Pro / FC-3582 (DNG). * Added Fujifilm X-H2*, X-H2S*, X-T5*, S6000fd*, SL1000* and HS50EXR*. * Added Hasselblad L2D-20c / DJI Mavic 3 Cine (DNG). * Added Olympus C5060WZ*, SP570UZ* and E-P7*. * Added OM Systems OM-5*. * Added Panasonic FZ38*, FZ300*, FZ70, FZ72*, G6*, G70*, G81*, G90*, GM1S*, GX7 Mk3*, GX85*, LF1*, TZ71*, TZ81*, TZ90*, TZ96*, TZ101*, ZS40*/TZ60*/TZ61*. * Added Sony 7RM5*. * Added Leica D-LUX 6*. * Added Nikon Z 30*. * Added Epson RD-1X*. * Added Leica DIGILUX3*. * Added Nikon D1H*, D7500*, D850* and P7800*. * Added Olympus E30*, E420*, E450*, E520*, E600* and E-P5*. * Added Pentax K2000* and K-m* (PEF). * Ensure that RawFile::init() is never called twice. This would cause crashes if it was called concurrently. * Properly detect compressed data for Panasonic. * Fix the linkage of the mp4parse library with libtool. * Fixed the demo/ccfa to output properly the byte stream. * Fixed BitIterator code to peek past the number of bits for Olympus decoding. * Fixed decompression of packed Olympus ORF files. * Fixed over reported size of Panasonic compressed Raw data. ==== liborcus ==== - Add include fix gcc13-fix.patch for GCC 13 compiler. ==== libplacebo ==== - Correct BR from python3-jinja2 to python3-Jinja2, fixes dependency resolving on older distro ==== libsndfile ==== Version update (1.1.0 -> 1.2.0) - update to 1.2.0: * Searching for LAME dependency with CMake build system (issue #821). * CMake build from Autotools tarball (issue #816). * Build on UWP platform (issue #824). * Fix signed integer overflow (issue #785). * Skipping large wav chunks on stdin (PR #819). ==== libtpms ==== Version update (0.9.5 -> 0.9.6) - Update to 0.9.6: * CVE-2023-1018: tpm2: Fixed out of bounds read in CryptParameterDecryption (bsc#1206023) * CVE-2023-1017: tpm2: Fixed out of bounds write in CryptParameterDecryption (bsc#1206022) ==== libvirt ==== Version update (9.0.0 -> 9.1.0) Subpackages: libvirt-client libvirt-daemon-config-network libvirt-daemon-driver-interface libvirt-daemon-driver-libxl libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-qemu libvirt-daemon-xen libvirt-libs - Apparmor: Add support for SUSE edk2 firmware paths 4959490e-support-SUSE-edk2-firmware-paths.patch boo#1208567 - Update to libvirt 9.1.0 - Many incremental improvements and bug fixes, see https://libvirt.org/news.html#v9-1-0-2023-03-01 - spec: Remove obsolete Groups tag - spec: Integrate upstream spec file changes that split the libvirt-daemon package, allowing more modular, customized installations - spec: New subpackages libvirt-daemon-common, libvirt-daemon-lock, libvirt-daemon-log, libvirt-daemon-proxy, and libvirt-daemon-plugin-lockd - spec: Renamed subpackage libvirt-lock-sanlock to libvirt-daemon-plugin-sanlock - Dropped patches: ef482951-apparmor-Allow-umount-dev.patch, d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch, c3f16cea-qemu-cleanup-label-on-umount-failure.patch, 697c16e3-qemu_process-better-debug-message.patch, 5155ab4b-qemu_namespace-nested-mounts-when-umount.patch ==== polkit-default-privs ==== Version update (1550+20230303.7726e9f -> 1550+20230307.7f42172) - Update to version 1550+20230307.7f42172: * Whitelist kde-inotify-survey (bsc#1208689) ==== poppler ==== Version update (23.02.0 -> 23.03.0) Subpackages: libpoppler-cpp0 libpoppler-glib8 libpoppler126 poppler-tools - update to 23.03.0: core: * PngWriter: Fix potential uninitialized memory use ==== poppler-qt5 ==== Version update (23.02.0 -> 23.03.0) - update to 23.03.0: core: * PngWriter: Fix potential uninitialized memory use ==== python-anyio ==== - Add patc support-trio-0.22.patch: * Support trio >= 0.22 just enough for asyncclick. ==== python-libvirt-python ==== Version update (9.0.0 -> 9.1.0) - Update to 9.1.0 - Add all new APIs and constants in libvirt 9.1.0 ==== python-pytz ==== Version update (2022.7 -> 2022.7.1) - update to 2022.7.1: * fixes to documentation formatting ==== re2 ==== Version update (20230201 -> 20230301) - update to 2023-03-01: * changes for other platforms ==== rubygem-actionpack-7.0 ==== Version update (7.0.4 -> 7.0.4.1) - Update to version 7.0.4.1 see installed CHANGELOG.md fix CVE-2023-22795 (bsc#1207451) fix CVE-2023-22792 (bsc#1207455) [#]# Rails 7.0.4.1 (January 17, 2023) ## * Fix sec issue with _url_host_allowed? Disallow certain strings from `_url_host_allowed?` to avoid a redirect to malicious sites. [CVE-2023-22797] * Avoid regex backtracking on If-None-Match header [CVE-2023-22795] * Use string#split instead of regex for domain parts [CVE-2023-22792] ==== rubygem-actionview-7.0 ==== Version update (7.0.4 -> 7.0.4.1) updated to version 7.0.4.1 see installed CHANGELOG.md [#]# Rails 7.0.4.1 (January 17, 2023) ## * No changes. ==== rubygem-activemodel-7.0 ==== Version update (7.0.4 -> 7.0.4.1) updated to version 7.0.4.1 see installed CHANGELOG.md [#]# Rails 7.0.4.1 (January 17, 2023) ## * No changes. ==== rubygem-activerecord-7.0 ==== Version update (7.0.4 -> 7.0.4.1) - updated to version 7.0.4.1 see installed CHANGELOG.md fix CVE-2022-44566 (bsc#1207450) [#]# Rails 7.0.4.1 (January 17, 2023) ## * Make sanitize_as_sql_comment more strict Though this method was likely never meant to take user input, it was attempting sanitization. That sanitization could be bypassed with carefully crafted input. This commit makes the sanitization more robust by replacing any occurrances of "/*" or "*/" with "/ *" or "* /". It also performs a first pass to remove one surrounding comment to avoid compatibility issues for users relying on the existing removal. This also clarifies in the documentation of annotate that it should not be provided user input. [CVE-2023-22794] * Added integer width check to PostgreSQL::Quoting Given a value outside the range for a 64bit signed integer type PostgreSQL will treat the column type as numeric. Comparing integer values against numeric values can result in a slow sequential scan. This behavior is configurable via ActiveRecord::Base.raise_int_wider_than_64bit which defaults to true. [CVE-2022-44566] ==== rubygem-activesupport-7.0 ==== Version update (7.0.4 -> 7.0.4.1) - update to version 7.0.4.1 see installed CHANGELOG.md fix CVE-2023-22796 (bsc#1207454) [#]# Rails 7.0.4.1 (January 17, 2023) ## * Avoid regex backtracking in Inflector.underscore [CVE-2023-22796] ==== rubygem-loofah ==== Version update (2.19.0 -> 2.19.1) - udpated to version 2.19.1 [#]# 2.19.1 / 2022-12-13 [#]## SecurityAddress * Address CVE-2022-23514, inefficient regular expression complexity. See GHSA-486f-hjj9-9vhh for more information. * Address CVE-2022-23515, improper neutralization of data URIs. See GHSA-228g-948r-83gx for more information. * Address CVE-2022-23516, uncontrolled recursion. See GHSA-3x8r-x6xp-q4vm for more information. ==== rubygem-rails-html-sanitizer ==== Version update (1.4.3 -> 1.5.0) - updated to version 1.5.0 * SafeListSanitizer, PermitScrubber, and TargetScrubber now all support pruning of unsafe tags. By default, unsafe tags are still stripped, but this behavior can be changed to prune the elementand its children from the document by passing prune: true to any of these classes' constructors. @seyerian [#]# 1.4.4 / 2022-12-13 * Address inefficient regular expression complexity with certain configurations of Rails::Html::Sanitizer. Fixes CVE-2022-23517. See GHSA-5x79-w82f-gw8w for more information. _Mike Dalessio_ * Address improper sanitization of data URIs. Fixes CVE-2022-23518 and #135. See GHSA-mcvf-2q2m-x72m for more information. _Mike Dalessio_ * Address possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer. Fixes CVE-2022-23520. See GHSA-rrfc-7g8p-99q8 for more information. _Mike Dalessio_ * Address possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer. Fixes CVE-2022-23519. See GHSA-9h9g-93gc-623h for more information. _Mike Dalessio_ ==== rubygem-yast-rake ==== Version update (0.2.47 -> 0.2.48) - Allow overriding the submit target using YAST_SUBMIT also when the target is set in the Rakefile (related to bsc#1208913) - Removed support for the yast-rake-ci gem, it is not used anymore - 0.2.48 ==== smartmontools ==== - fix smartctl crash for an NVMe on big endian systems [bsc#1208905] - added patches fix https://www.smartmontools.org/changeset/5448 + smartmontools-smartctl-NVMe-big-endian.patch ==== swtpm ==== Version update (0.7.3 -> 0.8.0) Subpackages: swtpm-selinux - Drop trousers requirement - Update to version 0.8.0: * swtpm: + Implement release-lock-outgoing parameter for --migration option + Introduce --migration option and 'incoming' parameter + Implement terminate parameter for ctrl channel loss + Add a chroot option + Introduce disable-auto-shutdown flag for --flags option + If necessary send TPM2_Shutdown() before TPMLIB_Terminate() + Add some more recent syscalls to seccomp profile + Disable OpenSSL FIPS mode to avoid libtpms failures + Avoid locking directory multiple times + Remove support for pre-v0.1 state files without header + Use uint64_t in tlv_data_append() to avoid integer overflows + Use uint64_t to avoid integer wrap-around when adding a uint32_t + Do not chdir(/) when using --daemon + Check header size indicator against expected size (CVE-2022-23645 bsc#1196240) + Fixes for gcc 12.2.1 -fanalyzer * build-sys: + Fix configure script to support _FORTIFY_SOURCE=3 + Define __USE_LINUX_IOCTL_DEFS in header file (Cygwin) * swtpm-localca: + Re-implement variable resolution for swtpm-localca.conf + Test for available issuercert before creating CA * swtpm_setup: + Configure swtpm to log to stdout/err if needed (glib >=2.74) * tests: + Use ${WORKDIR} in config files to test env. var replacement + Patch IBM TSS2 test suite for OpenSSL 3.x * build-sys: + Add probing for -fstack-protector ==== virtualbox ==== - Added file "fixes_for_kernel_6.3.patch" to handle API change. - File "fixes_for_gcc13.patch" updated for additional changes in GCC 13 boo#1207468 ==== virtualbox-kmp ==== - Added file "fixes_for_kernel_6.3.patch" to handle API change. - File "fixes_for_gcc13.patch" updated for additional changes in GCC 13 boo#1207468 ==== wireless-regdb ==== Version update (20221205 -> 20230213) - Update to version 20230213: * wireless-regdb: update regulatory database based on preceding changes * wireless-regdb: Update regulatory info for Russia (RU) on 5GHz ==== xterm ==== Version update (378 -> 379) Subpackages: xterm-bin xterm-resize - update to 379: * improve text-cursor (patch by Jan Engelhardt): + allow selecting CURSOR_BAR mode from command- line/Xresources. + draw cursor using filled rectangle instead of rectangle outline to permit thicker underlines/bars. + scale up cursor relative to font size. * improve readline modes (Fedora #2166860): + document readline modes + change the feature to configure by default + replace hard-coded SS3 for cursor movement with current mode + replace hard-coded erase/lnext characters with current values * improve status-line (report by Thomas Wolff): + RIS turns off status-line + Right-margin (DECLRMM and DECSLRM) limits the length of text written/updated in the status-line. + Most controls which affect the whole screen are ignored while updating the status-line. * modify configure check for tgetent to allow for some special cases of ncurses configuration * reduce timeout, improve warning message if resize is run on a terminal which is not VT100-compatible. * reduce compiler warnings in configure script. - drop xterm-enable_libtinfo.patch (obsolete) ==== yast2-auth-client ==== Version update (4.6.0 -> 4.6.1) - Stop using File.exists? which no longer works in Ruby 3.2 (bsc#1206419) - 4.6.1 ==== yast2-auth-server ==== Version update (4.6.0 -> 4.6.1) - Stop using File.exists? which no longer works in Ruby 3.2 (bsc#1206419) - 4.6.1 ==== yast2-nfs-client ==== Version update (4.5.1 -> 4.6.1) - Fixed unit test to not read the values from the current system (bsc#1209007) - 4.6.1 - Bump version to 4.6.0 (bsc#1208913)

1 0

openSUSE Release Engineering meeting 08.03.2023
by Lubos Kocman 09 Mar '23

09 Mar '23

All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting The meeting is hosted here https://meet.opensuse.org/ReleaseEngineeringMeeting ## Attendees RBrown, DimStar, GuillaumeG, lkocman, AdrianS, Doug, Max, wengel We tried https://meet-test.opensuse.org/ReleaseEngineeringMeeting so far it was a pleasant experience ## Leap 15.4 QU2 rc3 go/nogo was on 1st March. We do have Leap 15.4 CR DVD in the :Images subproject. Do we have a particular need to republish now? Leap 15.5 Beta testing sheet https://docs.google.com/spreadsheets/d/1AGKijKpKiJCB616-bHVoNQuhWHpQLHPWCb3… Discussion about how to build Package Hub for 15 SP6, SP7 https://etherpad.opensuse.org/p/ReleaseEngineering-20230228-Packagehub No negative feedback so far. I think we have a plan. Leap 16.0 d-installer media built https://github.com/openSUSE/openSUSE-repos/pull/24 ftp-tree is pending Putting high level requirements for Alpha. I think I could have something usable by end of this week. https://en.opensuse.org/Portal:16.0 ## openSUSE Tumbleweed openSUSE:Factory build fail stats: 173 failed 96 unresolvable (one week ago: 188 / 134) https://tinyurl.com/ysy4nnnz * Mesa 23.0 was published; some bug reports attributed gnome crashes to it https://bugzilla.opensuse.org/show_bug.cgi?id=1209005 * ffmpeg-6 appeared in staging, conflicts hard with ffmpeg 5 (same library names, overwriting the old ones) We might try to change to ffmpeg-6 by default (with ffmpeg-4 as fallback) and not offer ffmpeg-5 at all * Staging:L has a few failures collected: * podman 4.4.2: breaks in openQA https://openqa.opensuse.org/tests/3160256#step/podman_pods/52 (QA fix in progress) * Staging:O: preparation work to identify the minimal list of 'i586' builds to enable in openSUSE:Factory to allow wine/steam to build/install (currently 992 packages, and counting; big part of it is for rpmlint and such things). We will likely have to get wine into ring0 to keep this list actively managed * Staging:Gcc7: early experiments to set GCC 13 as distro compiler i586 carve-out from Factory => Automatic migration kicked off with snapshot 0201. Rolling again; the kdeplasma crash has been resolved (changes in libqt5) (https://bugzilla.opensuse.org/show_bug.cgi?id=1208188) ## Richard (MicroOS) Making an official Distrobox 'Packaging' container, to provide packagers and release managers a nice simple reproducable environment with everything you need to package stuff. Currently in testing, will be submitted today. New Kubernetes maintainer is updating/improving the k8s packages in Tumbleweed, along with a growth of additional community contributions. Working on a pair of blogposts, most likely for microos.opensuse.org 1. "MicroOwnS" - a guide, with simple-to-copy templates on how to make your own derivatives of MicroOS. Expected to publish today/tomorrow 2. "How to fork MicroOS" - building on "MicroOwnS", a more complex guide on how to make de-branded forks of MicroOS - both still WIP Desktop-GNOME: Ready for Release, but not released Technically everything is working and release quality in MicroOS GNOME. NO KNOWN BLOCKERS! \o/ - but we did fix a bunch of minor things this week Not yet formally released Tests are needed - progress made, but I got a little sidetracked this week PR/Marketing needed Desktop-KDE: Still Alpha, discussions about maybe considering it Beta, in the hands of the (lone) main maintainer. Lots of discussions on social media/reddit about MicroOS KDE but has not yet translated into an uptick in contributions or contributors. ## Max Leap 15.5 * Build423.1 has published ** An known system hang issue during textmode installation: bsc#1208266 * KDE staging passed legal review, now lets wait submissions of the dependency to be accepted in SLE * Build stats in Backports(x86_64): 2 unresolvables, 48 fails(last week: 10 unresolvables, 51 fails) * MATE desktop issue (there was a related thread on factory@) ## Guillaume - Arm Tumbleweed: * Last snapshot blocked due to broken zdup detected in openQA. Next snapshot (20230307) will fix it. * Non-OSS repo is not published for ARM whereas openSUSE:Factory:ARM:NonFree is OK - https://bugzilla.suse.com/show_bug.cgi?id=1209031 * NVIDIA: tester with aarch64 server and NVIDIA card wanted - Proprietary drivers are now available for aarch64 (only G06): https://download.nvidia.com/opensuse/tumbleweed/ - New opengpu driver also available in OBS: https://build.opensuse.org/project/monitor/X11:Drivers:Video lkocman to check on who is the aarch64 + nvidia effort blocked on. I recall that there was a chosen point of contact. Leap: * 15.5 aarch64: JeOS images rebased on latest version from Tumbleweed. * 15.5 armv7: no blocker ALP: * No aarch64 specific issues WSL: * Works with x86 emulator since appx installer is x86-64, but this is not really an issue since arm64 Win11 includes x86 emulator by default. Steps documented on the wiki to install the appx from download.o.o: https://en.opensuse.org/openSUSE:WSL#With_Appx_from_openSUSE_download_server ## Sarah - s390x Not available Tumbleweed * release is rolling Leap: * bootloader issue after network configuration in textmode -> I will analyze kernel configuration suggestions by IBM: https://bugzilla.opensuse.org/show_bug.cgi?id=1188896 lkocman: Should I share it with Virt team + Ihno? How to handle qemu/kernel bug report (handled by SUSE in the past): https://bugzilla.opensuse.org/show_bug.cgi?id=1202727 other output than on x86 for backup software restic: https://bugzilla.suse.com/show_bug.cgi?id=1208665 -> forwarded as upstream issue (with hint, how to receive a s390x vm by IBM) ## Doug * TW x86-64-v3 optimization article recieved increase attention * Note - metrics.opensuse.org fixed (thx witek & bmwiedemann) good increase * Google Summer of Code * April 27 deadline - GSoC contributor proposal rankings due from Org Admins * oSC23 * Contract signed an returned * Meeting on 30.03 * 56 registered, 26 submissions * Sent marketing items to Italy for event * TSP approval * Will not be in next week's meeting * Recieved interest in an interview about MicroOS from Steven Rosenberg ## Dirk Not available * Back from sickleave/vacation, catching up with submissions/issues * x86_64-v3 glibc pattern entered Factory. Need to announce properly and do further packages * also todo announce tumbleweed maintainer policy draft currently working on testing those in a private staging test project * x86_64-v3 enablement on some packages failed due to baselibs conflicts over -static packages which need further updates * Started ALP:RISCV builds in the new build setup Biggest speedup can be observed by switching zlib to zlib-ng, so looked into fixing the build failures caused by switching to zlibo-ng- compat ## Wolfgang (Package Hub), Scott Bahling Old packages from SP4 where synced to CDN for openSUSE:Backports:SLE- 15-SP5, this is fixed now and SP5 packages are now available One of php8 packages built in SUSE:SLE* is missing in Leap https://bugzilla.suse.com/show_bug.cgi?id=1207478 ## Maintenance team (Marcus or Maurizio (m4u)) Not available 15.5 setup is done 15.4 is working 5.3 is working leap micro 5.2 ... when EOL? Lubos? With Leap Micro 5.4 GA Typically April, we'll see based on SLE Micro GA. 15.5 setup is done (status 21.2.2023). lkocman needs to do official 15.5 Maint setup request beta in ~2 weeks lkocman: 15.3 EOL could lead to stopping our physical Source DVD effort, as it seems we will not produce. As this was the last release which you could still get on a physical media. Lkocman: anything against decomissioning it? Configuration setup problem for Maintenance of Leap 15.4 maintenance updates / openQA Marcus regarding Leap 15.4 Image respin - package set will change, we do need to refresh the packagelist * Lubos to talk to Jan Stehlik, we can't put all on Marcuses shoulder. https://etherpad.opensuse.org/p/ReleaseEngineering-20221110-maintenance-dis… Confirmation that QA/QA-maint team will oversee the setup (issues) Lubos: I was asked to provide requirements for the QA team. Mostly for the GA/current release but also for the update. Lubos will make wiki with requirements (something like maintenance plan perhaps). Marcus will review it. * Leap Micro 5.3 maint setup done ffmpeg - (still unsolved) possible file conflict on the next update, no idea how to avoid vendor switching at the moment. Removing the patch on the openSUSE side (that might contain security fixes) or releasing update on the packman side could fix the issue. Lubos to give Marcus some working contact for the team. (Was done, Olaf Hering) ## Adrian - OBS No updates today

2 1

Re: TW slow to process zypper dup?? (Pablo Sanchez)
by Fritz Hudnut 09 Mar '23

09 Mar '23

---------- Forwarded message ---------- > From: Pablo Sanchez <pablo(a)blueoakdb.com> > To: factory(a)lists.opensuse.org > Cc: > Bcc: > Date: Tue, 7 Mar 2023 17:27:57 -0500 > Subject: Re: TW slow to process zypper dup?? (Pablo Sanchez) > On 2023-03-07 17:21, Fritz Hudnut wrote: > > > > [ trimmed ] > > But, I boot a different system every day and it's about busy-ness, so > > I don't want to cut some script process off while it's running . . . > > so I just manually run the zypper . . . as root, in screen -L . . . . > > > > I essentially do the same thing with each of my other systems > > "update/upgrade" often using sudo . . . . I'm not digging down into > > the process and messing around with it. It is essentially box stock, > > run by zypper . . . . > > Hey Fritz, > > Assuming a Bourne compatible shell, you could do the following: > > --8-<---8-<---8-<---8-<---8-<---8-<---8-<---8-<-- > > export ZYPP_MEDIANETWORK=1 > > export ZYPP_SINGLE_RPMTRANS=1 > > zypper dup -l > > --8-<---8-<---8-<---8-<---8-<---8-<---8-<---8-<-- > > Cheers! > > --- > Pablo Sanchez - Blueoak Database Engineering > > @Pablo: OK, thanks for the continuing hints . . . problem is that those commands or scripts add to the list of tasks needed to execute to run a basic ref/dup procedure . . . . Today happens to be Leap 15.5 day . . . in #screen -L #zypper ref && zypper dup -l showed 289 packages to upgrade or process, including a kernel upgrade to 5.14 . . . ten minutes later the cursor was back. Same machine, possibly same drive or even an HDD compared to the SSD that TW is in . . . . TW took 1.5 hours to process less packages???? F

4 3

New Tumbleweed snapshot 20230307 released!
by Dominique Leuenberger 08 Mar '23

08 Mar '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: apache2-mod_php8 checkpolicy (3.4 -> 3.5) cppcheck (2.10 -> 2.10.2) ethtool graphviz grub2 gtk4 (4.8.3 -> 4.10.0) harfbuzz (7.0.1 -> 7.1.0) icu krb5 lib2geom libadwaita (1.2.2 -> 1.2.3) libhandy (1.8.1 -> 1.8.2) libpaper (2.0.9 -> 2.0.10) libselinux (3.4 -> 3.5) libselinux-bindings (3.4 -> 3.5) libsemanage (3.4 -> 3.5) libsepol (3.4 -> 3.5) mariadb (10.10.3 -> 10.11.2) openexr patterns-fonts php8 policycoreutils (3.4 -> 3.5) postfix (3.7.3 -> 3.7.4) python-base python-semanage (3.4 -> 3.5) restorecond (3.4 -> 3.5) selinux-policy systemd (252.6 -> 252.7) vim (9.0.1367 -> 9.0.1386) xscreensaver yast2 (4.6.0 -> 4.6.1) yast2-sudo (4.6.0 -> 4.6.1) yast2-trans (84.87.20230211.83e08d8766 -> 84.87.20230306.ba31ff5670) === Details === ==== apache2-mod_php8 ==== - add "/usr/share/php" to include_path - allow to specify load order of extensions in %{php_sysconf}/conf.d [bsc#1205162] ==== checkpolicy ==== Version update (3.4 -> 3.5) - Update to version 3.5 * error out if required permission would exceed limit * Improve error message for type bounds - Added additional developer key (Jason Zaman) ==== cppcheck ==== Version update (2.10 -> 2.10.2) - update to 2.10.2: * GUI: Set proper title for compliance report dialog * GUI: Generate compliance report * Tokenizer: tweaked simplification of function pointers ==== ethtool ==== - Split bash-completion to separate sub-package ==== graphviz ==== Subpackages: libcdt5 libcgraph6 libgvc6 libpathplan4 - Fix RPM conditionals for PHP, elif does not work on Leap 15.x - Remove unused ghostscript_any BuildRequires for qt5 and main flavors ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - Fix riscv64 error for relocation 0x13 is not implemented yet * 0001-RISC-V-Handle-R_RISCV_CALL_PLT-reloc.patch ==== gtk4 ==== Version update (4.8.3 -> 4.10.0) Subpackages: gtk4-lang gtk4-schema gtk4-tools libgtk-4-1 typelib-1_0-Gtk-4_0 - Update to version 4.10.0: + GtkTextView: Document hanging indentation + GtkListView: Fix a size allocation problem + GtkFileChooser: - Fix paned behavior - Fix a crash + GtkText: Fix various problems with undo + Accessibility: - Make some getters transfer-full - Allow setting accessible parents and siblings - Add a role for toggle buttons - Miscellaneous property fixes and improvements + gtk: Improve the handling resize-during-size-allocate + gdk: - Introduce GdkTextureDownloader and use it - Make gdk_texture_get_format public + gsk: - Make mask nodes more versatile - Improve the GL implementation for texture scale nodes + X11: Fix key handling during DND + Tools: - gtk-builder-tool: Try harder to handle templates - gtk-builder-tool: Prefer properties over <child> + Updated translations. - Update to version 4.9.4: + Printing: - Add a CPDB backend - Drop the lpr backend + GtkFileDialog: Robustness fixes + GtkScaleButton: Add an 'active' property + GtkSearchEntry: Add placeholder text + Fix conflicting type names between gtk and gio + Gsk: - Settable filtering for scaled textures - Add mask nodes - Some robustness and crash fixes + Wayland: Handle dispatch failing in more places + Deprecations: GtkVolumeButton + Updated translations. - Changes from version 4.9.3: + Add GtkUriLauncher, as replacement for gtk_show_uri + Add GdkMonitor::description + Fix problems with tooltip sizing + Deprecations: - GtkStatusbar - GtkAssistant - GtkLockButton - gtk_gesture_set_sequence_state + GtkColumnView: Only create widgets for visible columns + GtkFileDialog: Drop shortcut folders API + GtkCalendar: Make marked days work again + GtkSwitch: Make state and active independently settable + GtkFileChooser: - Fix a crash with DND - Fix excessively wide sidebar - Make context menus work again + Accessibility: - Make GtkAccessible public, so it can be implemented outside GTK - Support accessible implementation for editables + CSS: Fix randomly stopping CSS animations + GL: - Fix synchronization with GStreamer - Fix problems with 3rd party GL in the same thread + Wayland: Fix startup notification with xdg_activation + Broadway: Implement modal windows + macOS: Make DND work + Build: - Require graphene 1.10 - Require gobject-introspection 1.72 + Updated translations. - Update to version 4.9.2: + GtkFileChooserWidget: Add a grid view. + GtkText, GtkTextView: - Fix activation of the on-screen keyboard. - Prevent unexpected text direction changes. + GtkCenterBox: Add properties for children. + GtkTreeExpander: Add a hide-expander property. + GtkStringList: Add a construct-only strings property. + GtkBuilder: Support parsing Pango attributes in string form. + GtkGestureStylus: Add a stylus-only property. + GtkFileLauncher: New async-style api to replace gtk_show_uri. + GtkColorDialog, GtkFontDialog, GtkFileDialog, GtkAlertDialog: - APIs have seen some tweaks - Prefer portals when available - Fixes for cancellation + Add GDK_DEBUG=no-portals + Improve file DND with remote files + GtkInfoBar has been deprecated + gtk_widget_show/hide have been deprecated + gtk_show_uri has been deprecated + Wayland: - Fix button mask handling - Fix problems with cursor size on hi-dpi screens - Support newer versions of some protocols - Fix handling of surrounding text in input methods - Changes from version 4.9.1: + GtkTreeView, GtkIconView, GtkComboBox and auxiliary classes have been deprecated. ... changelog too long, skipping 20 lines ... + Increase the memory limit for the jpeg loader to 1G. ==== harfbuzz ==== Version update (7.0.1 -> 7.1.0) Subpackages: libharfbuzz-gobject0 libharfbuzz-icu0 libharfbuzz-subset0 libharfbuzz0 libharfbuzz0-32bit typelib-1_0-HarfBuzz-0_0 - Update to version 7.1.0: + New experimental API that uses font variations to expand or shrink the text to a given advance + Various build and bug fixes. + New API: hb_font_set_variation(). ==== icu ==== Subpackages: libicu72 libicu72-ledata - Use -fexcess-precision=fast as GCC 13 will default to -fexcess-precision=standard for C++. ==== krb5 ==== Subpackages: krb5-32bit krb5-client - Update 0007-SELinux-integration.patch for SELinux 3.5; (bsc#1208887); ==== lib2geom ==== - Use -fexcess-precision=fast as GCC 13 changes the default for C++ compiler and without the change some tests fail on i586. More info can be seen here: https://gcc.gnu.org/gcc-13/porting_to.html#excess-precision ==== libadwaita ==== Version update (1.2.2 -> 1.2.3) Subpackages: libadwaita-1-0 libadwaita-lang typelib-1_0-Adw-1 - Update to version 1.2.3: + AdwEntryRow: Fix :disabled styles. + AdwExpanderRow: Expose expanded state for a11y. + Memory leak fixes. ==== libhandy ==== Version update (1.8.1 -> 1.8.2) Subpackages: libhandy-1-0 libhandy-lang typelib-1_0-Handy-1_0 - Update to version 1.8.2: + Demo: - Correctly use GtkSwitch - Fix a GLib deprecation + Docs: Fix dependency names + HdyTabView: - Fix set_menu_model() input check - Fix a typo in docs + HdySwipeable: Fix get_swipe_area() fallback + Memory leak fixes + Updated translations. ==== libpaper ==== Version update (2.0.9 -> 2.0.10) Subpackages: libpaper-tools libpaper2 - Update to 2.0.10: * minor build fix. ==== libselinux ==== Version update (3.4 -> 3.5) Subpackages: libselinux1 libselinux1-32bit selinux-tools - Update to version 3.5: * check for truncations * avoid newline in avc message * bail out on path truncations * add getpidprevcon to gather the previous context before the last exec of a given process * Workaround for heap overhead of pcre * fix memory leaks on the audit2why module init * ignore invalid class name lookup - Drop restorecon_pin_file.patch, is upstream - Added additional developer key (Jason Zaman) ==== libselinux-bindings ==== Version update (3.4 -> 3.5) - Update to version 3.5: * check for truncations * avoid newline in avc message * bail out on path truncations * add getpidprevcon to gather the previous context before the last exec of a given process * Workaround for heap overhead of pcre * fix memory leaks on the audit2why module init * ignore invalid class name lookup - Drop restorecon_pin_file.patch, is upstream - Refreshed python3.8-compat.patch - Added additional developer key (Jason Zaman) ==== libsemanage ==== Version update (3.4 -> 3.5) Subpackages: libsemanage-conf libsemanage-migrate-store libsemanage2 - Update to version 3.5 * Allow user to set SYSCONFDIR * always write kernel policy when check_ext_changes is specified - Added additional developer key (Jason Zaman) ==== libsepol ==== Version update (3.4 -> 3.5) - Update to version 3.5 * Stricter policy validation * do not write empty class definitions to allow simpler round-trip tests * reject attributes in type av rules for kernel policies - Added additional developer key (Jason Zaman) ==== mariadb ==== Version update (10.10.3 -> 10.11.2) Subpackages: libmariadbd19 mariadb-client mariadb-errormessages - Update to 10.11.2: * release notes and changelog: https://mariadb.com/kb/en/changes-improvements-in-mariadb-1011/ https://mariadb.com/kb/en/mariadb-10-11-2-release-notes/ https://mariadb.com/kb/en/mariadb-10-11-2-changelog/ https://mariadb.com/kb/en/mariadb-10-11-1-release-notes/ https://mariadb.com/kb/en/mariadb-10-11-1-changelog/ https://mariadb.com/kb/en/mariadb-10-11-0-release-notes/ https://mariadb.com/kb/en/mariadb-10-11-0-changelog/ - Refresh mariadb-10.2.4-logrotate.patch ==== openexr ==== Subpackages: libIex-3_1-30 libIlmThread-3_1-30 libOpenEXR-3_1-30 - Add upstream fix gcc13-fix.patch. ==== patterns-fonts ==== Subpackages: patterns-fonts-fonts patterns-fonts-fonts_opt - Revert back to efont-unicode-bitmap-fonts from babelstone-han-fonts. The latter are apparently broken for Japanese at least. - Fix changelog entries with invalid format. ==== php8 ==== Subpackages: php8-cli php8-ctype php8-dom php8-gd php8-gettext php8-iconv php8-mbstring php8-mysql php8-openssl php8-pdo php8-sqlite php8-tokenizer php8-xmlreader php8-xmlwriter - add "/usr/share/php" to include_path - allow to specify load order of extensions in %{php_sysconf}/conf.d [bsc#1205162] ==== policycoreutils ==== Version update (3.4 -> 3.5) Subpackages: policycoreutils-lang policycoreutils-python-utils python3-policycoreutils - Update to version 3.5 * fixfiles: Unmount temporary bind mounts on SIGINT * Lots of smaller changes - Refreshed get_os_version.patch - Drop chcat_handle_missing_translations.patch, is upstream - Add additional BuildRequires for python - Added additional developer key (Jason Zaman) - Add requires for python3-distro for the devel package ==== postfix ==== Version update (3.7.3 -> 3.7.4) - update to 3.7.4 * Workaround: with OpenSSL 3 and later always turn on SSL_OP_IGNORE_UNEXPECTED_EOF, to avoid warning messages and missed opportunities for TLS session reuse. This is safe because the SMTP protocol implements application-level framing, and is therefore not affected by TLS truncation attacks. * Workaround: OpenSSL 3.x EVP_get_digestbyname() can return lazily-bound handles for digest implementations. In sufficiently hostile configurations, Postfix could mistakenly believe that a digest algorithm is available, and fail when it is not. A similar workaround may be needed for EVP_get_cipherbyname(). * Bugfix (bug introduced in Postfix 2.11): the checkok() macro in tls/tls_fprint.c evaluated its argument unconditionally; it should evaluate the argument only if there was no prior error. * Bugfix (bug introduced in Postfix 2.8): postscreen died with a segmentation violation when postscreen_dnsbl_threshold < 1. It should reject such input with a fatal error instead. * Bitrot: fixes for linker warnings from newer Darwin (MacOS) versions. * Portability: Linux 6 support. * Added missing documentation that cidr:, pcre: and regexp: tables support inline specification only in Postfix 3.7 and later. * Rebased postfix-linux45.patch ==== python-base ==== Subpackages: libpython2_7-1_0 python-xml - SLE-12 builds nis.so as well. ==== python-semanage ==== Version update (3.4 -> 3.5) - Update to version 3.5 * Allow user to set SYSCONFDIR * always write kernel policy when check_ext_changes is specified - Added additional developer key (Jason Zaman) ==== restorecond ==== Version update (3.4 -> 3.5) - Update to version 3.5 * Code improvements, no user visible changes - Added additional developer key (Jason Zaman) ==== selinux-policy ==== Subpackages: selinux-policy-targeted - Remove erroneous SUSE man page. Will not be created with the 3.5 toolchain ==== systemd ==== Version update (252.6 -> 252.7) Subpackages: libsystemd0 libsystemd0-32bit libudev1 libudev1-32bit systemd-32bit systemd-container systemd-coredump systemd-lang udev - Import commit d447802feee7752cd1756f8fa86ce2a6314ba24f (merge of v252.7) For a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/8e0a8094b8bbc442d262795b85ac57a… - Fix return non-zero value when disabling SysVinit service(bsc#1208432) ==== vim ==== Version update (9.0.1367 -> 9.0.1386) Subpackages: vim-data vim-data-common - Updated to version 9.0.1386, fixes the following problems * Divide by zero in zero-width window. * Bass files are not recognized. * Still some "else if" constructs for setting options. * Crash when using a NULL object. (Ernie Rael) * Ballooneval interferes with Insert completion. * Test for 'toolbariconsize' may fail. * Wrong text displayed when using both 'linebreak' and 'list'. * Function for setting options not used consistently. * Crash when getting member of obj of unknown class. * Accessing invalid memory with put in Visual block mode. * job_status() may return "dead" if the process parent changed. * Illegal memory access when using virtual editing. * Functions for handling options are not ordered. * CTRL-X on 2**64 subtracts two. (James McCoy) * ACCESS_ names have a conflict with on some systems. * Failing test for strptime() doesn't show returned value. * xxd: combination of little endian and cols fails. (Aapo Rantalainen) * Setting HOMEBREW_NO_AUTO_UPDATE is not needed with Homebew version 4. * g'Esc is considered an error. * Options test fails with some window width. ==== xscreensaver ==== Subpackages: xscreensaver-data xscreensaver-data-extra xscreensaver-lang - Added spec file changes to handle hard-coded PAM directories. * bsc#1204744 - Added fix for configuration reading * Added xscreensaver-bsc1204744.patch * bsc#1204744 * Patch provided by Jaroslav Jindrak ==== yast2 ==== Version update (4.6.0 -> 4.6.1) Subpackages: yast2-logs - Merged SLE-15-SP5 branch - Revert restoring DnsServerAPI.pm (bsc#1208833) - 4.6.1 ==== yast2-sudo ==== Version update (4.6.0 -> 4.6.1) - Stop using File.exists? which no longer works in Ruby 3.2 (bsc#1206419) - 4.6.1 ==== yast2-trans ==== Version update (84.87.20230211.83e08d8766 -> 84.87.20230306.ba31ff5670) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20230306.ba31ff5670: * Fixed string interpolations * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Persian) * New POT for text domain 'control'. * New POT for text domain 'security'. * New POT for text domain 'packager'. * Translated using Weblate (Czech)

1 0