openSUSE Factory May 2023

factory@lists.opensuse.org

108 participants
69 discussions

Build 20230505 Kernel LockDown
by Joe Salmeri 10 May '23

10 May '23

I just updated from 20230413 to 20230505 and after rebooting vmware kernel modules ( after recompiling for kernel 6.3.1-1 ) would not load. modprobe: ERROR: could not insert 'vmmon': Key was rejected by service modprobe: ERROR: could not insert 'vmnet': Key was rejected by service I have not see an announcement regarding kernel lockdown being enabled again, but those messages seem to indicate it was. Where should I be looking for that kind of announcement ? From my notes when kernel lockdown was previously enabled I had: cat /sys/kernel/security/lockdown but from the return value it does not appear to be locked down ??? [none] integrity confidentiality How to check if secondary mok keys are allowed zcat /proc/config.gz | grep CONFIG_IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY but from that return value it also appears that the kernel does not have support for user signed keys # CONFIG_IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY is not set Since the mobprobe error seems to indicate that the modules could not be loaded because they were not signed, I went ahead Verified secure boot is enabled via mokutil --sb-state which confirms "SecureBoot enabled" Compiled the vmware modules ( just to double check that there were not compile issues ) Generated a signing key Signed both modules modutil --import *.der file reboot Perform MOK Management / Enroll MOK / Enroll the key I added reboot mokutil --list-enrolled now shows my key is enrolled systemctl start vmware now starts the vmware service and vmware is working. So it definitely appears that kernel lockdown was enabled ( how did I miss that announcement ??? ) but why do both of these seem to indicate that it is not ??? cat /sys/kernel/security/lockdown zcat /proc/config.gz | grep CONFIG_IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY What's different this time when it was enabled ??? -- Regards, Joe

4 9

New Tumbleweed snapshot 20230508 released!
by Dominique Leuenberger 09 May '23

09 May '23

1 0

openSUSE ALP: Use the forums to Call for Volunteers?
by Fritz Hudnut 08 May '23

08 May '23

>> Hence my view that the only way forward is really finding a core group > willing to architect and get building this new distro from the ground > up, rather than just assuming we can continue as we used to in the past. > -- > Richard Brown > Distributions Architect et al: Not sure how many folks are both on this list and on the forums, I personally haven't checked this out to see; but there are a lot of very smart folks who are posting assistance on the forums that might be a valuable pool of help. Like in all things in life, if you ask people, "Will you volunteer for a lot of work for no compensation," very few respond. But, if a problem is posted on the forums, people are apparently willing to help out with "solving the puzzle" of it. Or, has a post been made with the proposal for the new ALPine distro and asking for experienced insight into it??? Possibly a slightly larger group could be found?? F AKA "Team Towel Guy" . . . go team, have a clean towel . . . .

2 1

/boot/grub2/x86_64-efi subvolume
by Joe Salmeri 08 May '23

08 May '23

On a default TW installation, /boot/grub2/x86_64-efi is a subvolume. This documentation talks about the default subvolumes. https://en.opensuse.org/SDB:BTRFS I also found this link which describes how to replicate the subvolume layout that TW uses https://rootco.de/2018-01-19-opensuse-btrfs-subvolumes/ I am trying to replicate that subvolume layout with several other linux distros which I need to use but after installation and on first boot it errors because it cannot find 'normal.mod' because for some reason the /boot/grub2/x86-64 subvolume is not mounted. It's not a configuration issue because if I boot a live DVD and mount snapshot 1 and chroot into it and do mount -a then /boot/grub2/x86-64 is mounted properly. If I switch /boot/grub2/x86_64-efi from a subvolume to a folder in snapshot 1, then the distros boot fine. Apparently others have tried to replicate the TW subvolume layout with other distros and ran into the same issue. Here's one such discussion where someone was trying to use the TW subvolume layout with Endeavour OS and ran into the issue with /boot/grub2/x86_64-efi being a subvolume. https://forum.endeavouros.com/t/cannot-boot-the-system-after-installation-c… If you scroll down to the FREEDOM user post you will see where they describe how they are trying to use the subvolume layout like TW uses. Does TW have some special patch or hook with grub that allows it to mount the /boot/grub2/x86_64-efi subvolume or is there something configuration wise that TW is doing which allows this that seems to be missing from other distros? How does TW get that subvolume mounted during boot ? Thanks! -- Regards, Joe

3 10

Source service mode restrictions
by Jim Fehlig 08 May '23

08 May '23

Hello, I recently moved maintenance of one of my packages to a more git-centric workflow. In doing so I changed the source service mode from manual to trylocal (or another mode that allows server-side runs). All was good until I tried to submit the package to Factory https://build.opensuse.org/request/show/1077094 The request was declined because "Services are only allowed if their mode is one of localonly, disabled, buildtime, manual". Is it possible to remove this restriction, or include modes that support server-side runs? Are server-side modes not permitted because the sources could change after filing the request? I suppose there's another reason since the same could happen even with the permitted modes. Thanks! Jim

3 5

New Tumbleweed snapshot 20230507 released!
by Dominique Leuenberger 08 May '23

08 May '23

1 0

New Tumbleweed snapshot 20230506 released!
by Dominique Leuenberger 07 May '23

07 May '23

1 0

zypper dup: "Failed to cache repo" on some repos for hours now
by Berthold Höllmann 07 May '23

07 May '23

Hello, I get ,---- | > sudo zypper dup | Building repository 'Python Modules (openSUSE_Tumbleweed)' cache ..........................................................................................................................................................................................................................[error] | Error building the cache: | [devel_languages_python|https://download.opensuse.org/repositories/devel:/la…] Failed to cache repo (1). | History: | - 'repo2solv' '-o' '/var/cache/zypp/solv/devel_languages_python/solv' '-X' '/var/cache/zypp/raw/devel_languages_python' | /var/cache/zypp/raw/devel_languages_python/repodata/b35f2fdbf447e8fac7168594351f680a792ce59c6d70e28d05499fd5cda0dab054ea880b595f41c41b5bab80c428ae11ad3f98c07d3ab864f05a556b5f4832aa-primary.xml.gz: repo_rpmmd: internal error: Huge input lookup | at line 195352:3 | Command exited with status 1. | | Warning: Skipping repository 'Python Modules (openSUSE_Tumbleweed)' because of the above error. | Building repository 'A project for basic libraries shared among multiple projects (openSUSE_Factory)' cache ...............................................................................................................................................................................[error] | Error building the cache: | [devel_libraries_c_c++|https://download.opensuse.org/repositories/devel:/lib…] Failed to cache repo (1). | History: | - 'repo2solv' '-o' '/var/cache/zypp/solv/devel_libraries_c_c++/solv' '-X' '/var/cache/zypp/raw/devel_libraries_c_c++' | /var/cache/zypp/raw/devel_libraries_c_c++/repodata/5dceca0f1fc2af5c6a493d512e2614aa4fc764e4d91cf61881f784434f81c4b5564f9c5c45fa7d8392bf8d2fd837f67ef0e6bcd52b2f83224b641939b5bcfef2-primary.xml.gz: repo_rpmmd: internal error: Huge input lookup | at line 192834:40 | Command exited with status 1. | | Warning: Skipping repository 'A project for basic libraries shared among multiple projects (openSUSE_Factory)' because of the above error. | Building repository 'Haupt-Repository (DEBUG)' cache ......................................................................................................................................................................................................................................[error] | Error building the cache: | [download.opensuse.org-oss|http://download.opensuse.org/debug/tumbleweed/rep…] Failed to cache repo (1). | History: | - 'repo2solv' '-o' '/var/cache/zypp/solv/download.opensuse.org-oss/solv' '-X' '/var/cache/zypp/raw/download.opensuse.org-oss' | /var/cache/zypp/raw/download.opensuse.org-oss/repodata/8ada28971622afb1c42a0b1e69d4fb450d949a545082323c56b850ad3a0e2eb9787705679e1b3a12f44d3dbc8e0d4940455756fc30083b2ecb04fb0c82579d9b-primary.xml.gz: repo_rpmmd: internal error: Huge input lookup | at line 169491:5 | Command exited with status 1. | | Warning: Skipping repository 'Haupt-Repository (DEBUG)' because of the above error. | Building repository 'Haupt-Repository (Quellen)' cache ....................................................................................................................................................................................................................................[error] | Error building the cache: | [download.opensuse.org-oss_1|http://download.opensuse.org/source/tumbleweed/…] Failed to cache repo (1). | History: | - 'repo2solv' '-o' '/var/cache/zypp/solv/download.opensuse.org-oss_1/solv' '-X' '/var/cache/zypp/raw/download.opensuse.org-oss_1' | /var/cache/zypp/raw/download.opensuse.org-oss_1/repodata/f0f1d20e63df0c6cab39ed1ded1a597933ef69e2025bc833d636a892e37a28a63d478f249307765f4c4842decf0725b64052f79de623be6e5c083c4c5d9f1f62-primary.xml.gz: repo_rpmmd: internal error: Huge input lookup | at line 201674:7 | Command exited with status 1. | | Warning: Skipping repository 'Haupt-Repository (Quellen)' because of the above error. | Building repository 'openSUSE Games (openSUSE_Tumbleweed)' cache ..........................................................................................................................................................................................................................[error] | Error building the cache: | [games|https://download.opensuse.org/repositories/games/openSUSE_Tumbleweed/] Failed to cache repo (1). | History: | - 'repo2solv' '-o' '/var/cache/zypp/solv/games/solv' '-X' '/var/cache/zypp/raw/games' | /var/cache/zypp/raw/games/repodata/45971120ee9a1cfb974b8a7f6feba75c9a5291996a78401cb673726ca5dbbd09eca9e9cc9317b46e930dc811a0594ecb0b10dce303dcacdce1da87922c7afbed-primary.xml.gz: repo_rpmmd: internal error: Huge input lookup | at line 192076:9 | Command exited with status 1. | | Warning: Skipping repository 'openSUSE Games (openSUSE_Tumbleweed)' because of the above error. | Building repository 'Packman repository (openSUSE_Tumbleweed)' cache ......................................................................................................................................................................................................................[error] | Error building the cache: | [packman.inode.at-openSUSE_Tumbleweed|https://ftp.fau.de/packman/suse/openSUSE_Tumbleweed/] Failed to cache repo (1). | History: | - 'repo2solv' '-o' '/var/cache/zypp/solv/packman.inode.at-openSUSE_Tumbleweed/solv' '-X' '/var/cache/zypp/raw/packman.inode.at-openSUSE_Tumbleweed' | /var/cache/zypp/raw/packman.inode.at-openSUSE_Tumbleweed/repodata/primary.xml.gz: repo_rpmmd: internal error: Huge input lookup | at line 191246:7 | Command exited with status 1. | | Warning: Skipping repository 'Packman repository (openSUSE_Tumbleweed)' because of the above error. | Building repository 'Software for Scientists and Engineers (openSUSE_Tumbleweed)' cache ...................................................................................................................................................................................................[error] | Error building the cache: | [science|https://download.opensuse.org/repositories/science/openSUSE_Tumblew…] Failed to cache repo (1). | History: | - 'repo2solv' '-o' '/var/cache/zypp/solv/science/solv' '-X' '/var/cache/zypp/raw/science' | /var/cache/zypp/raw/science/repodata/c4fc6241c7c7235ff0d47c9aaa828344671269eb100083e7abee387e66d7dd7a8069a155c925f85d55adb1661d732a0c8b69850e807eaf7e7c80716cf79d1ec2-primary.xml.gz: repo_rpmmd: internal error: Huge input lookup | at line 177630:39 | Command exited with status 1. | | Warning: Skipping repository 'Software for Scientists and Engineers (openSUSE_Tumbleweed)' because of the above error. | Some of the repositories have not been refreshed because of an error. | Loading repository data... | Reading installed packages... | Warning: You are about to do a distribution upgrade with all enabled repositories. Make sure these repositories are compatible before you continue. See 'man zypper' for more information about this command. | Computing distribution upgrade... `---- for some hours now. Is there anything that can be done on my side, or is this a problem on the server side. I already deleted all of /var/cache/zypp/raw/, most of the repo information downloaded successfully, but I still get the errors above. Kind regards Berthold

6 10

New Tumbleweed snapshot 20230505 released!
by Dominique Leuenberger 06 May '23

06 May '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ImageMagick (7.1.1.6 -> 7.1.1.8) ca-certificates-mozilla cyrus-sasl gettext-runtime iproute2 (6.2 -> 6.3) kmod krb5 less (632 -> 633) libXi (1.8 -> 1.8.1) libcddb libfastjson (0.99.9 -> 1.2304.0) libjpeg-turbo libreoffice (7.5.2.2 -> 7.5.3.1) libwebp (1.2.4 -> 1.3.0) mc newt postfix python-ply qca-qt5 (2.3.5 -> 2.3.6) qtkeychain-qt5 talloc tevent virtualbox (7.0.6 -> 7.0.8) virtualbox-kmp (7.0.6_k6.3.1_1 -> 7.0.8_k6.3.1_1) wxWidgets-3_0 zenity (3.91.0 -> 3.92.0) === Details === ==== ImageMagick ==== Version update (7.1.1.6 -> 7.1.1.8) Subpackages: ImageMagick-config-7-SUSE ImageMagick-extra libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - version update to 7.1.1.8 - https://github.com/ImageMagick/Website/blob/main/ChangeLog.md#711-8---2023-… ==== ca-certificates-mozilla ==== - Add _multibuild to define 2nd spec file as additional flavor. Eliminates the need for source package links in OBS. ==== cyrus-sasl ==== Subpackages: cyrus-sasl-crammd5 cyrus-sasl-digestmd5 cyrus-sasl-gssapi cyrus-sasl-plain libsasl2-3 libsasl2-3-32bit - Add _multibuild to define 2nd spec file as additional flavor. Eliminates the need for source package links in OBS. ==== gettext-runtime ==== Subpackages: libtextstyle0 - Add _multibuild to define additional spec files as additional flavors. Eliminates the need for source package links in OBS. ==== iproute2 ==== Version update (6.2 -> 6.3) Subpackages: iproute2-bash-completion - Update to release 6.3: * New release of iproute2 corresponding to the 6.3 kernel. No large feature improvements only incremental improvements to the bridge mdb support, mostly just bug fixes. - Rebase patches. ==== kmod ==== Subpackages: kmod-bash-completion libkmod2 - Add _multibuild to define 2nd spec file as additional flavor. Eliminates the need for source package links in OBS. ==== krb5 ==== Subpackages: krb5-32bit krb5-client - Add _multibuild to define additional spec files as additional flavors. Eliminates the need for source package links in OBS. ==== less ==== Version update (632 -> 633) - Update to 633 * This release fixes a build problem found in less-632 on systems which have termcap.h in a subdirectory (ncurses/termcap.h or ncursesw/termcap.h). There is no functional difference between less-632 and less-633 ==== libXi ==== Version update (1.8 -> 1.8.1) - Update to version 1.8.1 * Fix spelling/wording issues * gitlab CI: enable commit & merge request checks * gitlab CI: enable gitlab's builtin static analysis * XInput_find_display: Don't dereference NULL dpyinfo * configure: Use LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL * Initialize a few stack vars to zero ==== libcddb ==== - Transform into a proper _multibuild package: the spec is already prepared and uses a few variables to distinguish flavors. ==== libfastjson ==== Version update (0.99.9 -> 1.2304.0) - update to 1.2304.0: * CVE-2020-12762: integer overflow and out-of-bounds write via large JSON file (boo#1171479) ==== libjpeg-turbo ==== Subpackages: libjpeg8 libturbojpeg0 - Add _multibuild to define 2nd spec file as additional flavor. Eliminates the need for source package links in OBS. ==== libreoffice ==== Version update (7.5.2.2 -> 7.5.3.1) Subpackages: libreoffice-base libreoffice-calc libreoffice-draw libreoffice-filters-optional libreoffice-gnome libreoffice-gtk3 libreoffice-icon-themes libreoffice-impress libreoffice-l10n-cs libreoffice-l10n-da libreoffice-l10n-de libreoffice-l10n-el libreoffice-l10n-en libreoffice-l10n-en_GB libreoffice-l10n-es libreoffice-l10n-fr libreoffice-l10n-hu libreoffice-l10n-it libreoffice-l10n-ja libreoffice-l10n-pl libreoffice-l10n-pt_BR libreoffice-l10n-ru libreoffice-l10n-zh_CN libreoffice-l10n-zh_TW libreoffice-mailmerge libreoffice-math libreoffice-pyuno libreoffice-qt5 libreoffice-writer libreofficekit - Update to 7.5.3.1 https://wiki.documentfoundation.org/Releases/7.5.3/RC1 ==== libwebp ==== Version update (1.2.4 -> 1.3.0) Subpackages: libwebp7 libwebpdemux2 libwebpmux3 - update baselibs.conf for the new libsharpyuv - update to 1.3.0 This is a binary compatible release. * add libsharpyuv, which exposes -sharp_yuv/config.use_sharp_yuv functionality to other libraries; libwebp now depends on this library * major updates to the container and lossless bitstream docs (#448, #546, [#551]) * miscellaneous warning, bug & build fixes (#576, #583, #584) ==== mc ==== Subpackages: mc-lang - Replace xorg-x11-devel by pkgconfig(...) ==== newt ==== - Add _multibuild to define 2nd spec file as additional flavor. Eliminates the need for source package links in OBS. ==== postfix ==== - Add _multibuild to define 2nd spec file as additional flavor. Eliminates the need for source package links in OBS. ==== python-ply ==== - Move documentation into main package for SLE15 ==== qca-qt5 ==== Version update (2.3.5 -> 2.3.6) Subpackages: libqca-qt5-2 qca-qt5-plugins - Update to 2.3.6. No changelog. - Drop patches, merged upstream: * 0001-Remove-test-that-openssl-has-decided-it-s-wrong.patch * 0001-hashunittest-run-sha384longtest-only-for-providers-t.patch ==== qtkeychain-qt5 ==== Subpackages: libqt5keychain1 libqt5keychain1-lang - Add _multibuild to define 2nd spec file as additional flavor. Eliminates the need for source package links in OBS. ==== talloc ==== Subpackages: libtalloc2 libtalloc2-32bit python3-talloc - Add _multibuild to define 2nd spec file as additional flavor. Eliminates the need for source package links in OBS. ==== tevent ==== Subpackages: libtevent0 libtevent0-32bit python3-tevent - Add _multibuild to define 2nd spec file as additional flavor. Eliminates the need for source package links in OBS. ==== virtualbox ==== Version update (7.0.6 -> 7.0.8) - VirtualBox 7.0.8 (released April 18 2023) This is a maintenance release. The following items were fixed and/or added: VMM: Introduced general improvements in nested visualization area GUI: Brought back Restore current snapshot checkbox of Close VM dialog (bugs #21189, #21491) GUI: Fixes and validation for VM settings USB filters editor, filter port value is now properly saved/restored GUI: Fixes for VM name and OS type embedded editors of Details pane GUI: Cloud related wizards should now propose enabled profiles before disabled Oracle VM VirtualBox Extension Pack: Fixed shipping the cryptographic support module for full VM encryption E1000: Fixed possible guru meditation when changing network attachments (bug #21488) virtio-net: Follow up fixes for FreeBSD 12.3 and pfSense 2.6.0 (bug #21201) 3D: Fixed various graphics issues with Windows 7 guests (bugs #21129, #21196, #21208, #21521) Main/UefiVariableStore: Added API to add signatures to the MOK list (Machine Owner Key) VBoxManage: Introduced modifynvram enrollmok sub-command to enroll Machine Owner Key into NVRAM, so Linux guest kernel can pick it up in order to verify signature of modules signed with this key Guest Control/Main: Fixed deleting files via built-in toolbox Linux host: Added possibility to bypass kernel modules signature verification once VBOX_BYPASS_MODULES_SIGNATURE_CHECK="1" is specified in /etc/vbox/vbox.cfg, useful in case if Linux distribution does not provide necessary tools to verify kernel module signature Linux Guest Additions and host Installer: Improved detection if system is running systemd as the init process Linux Guest Additions and host drivers: Introduce initial support for kernel 6.3 Linux Guest Additions: Added possibility to bypass kernel modules signature verification once VBOX_BYPASS_MODULES_SIGNATURE_CHECK="1" is specified in /etc/virtualbox-guest-additions.conf, useful in case if Linux distribution does not provide necessary tools to verify kernel module signature Linux Guest Additions: Added experimental support for kernel modules and user services reloading in the end of installation process, thus guest system reboot after Guest Additions (7.0.8 and newer) upgrade is no longer required in general case Linux Guest Additions: Fixed vboxvideo build issue with RHEL 8.7, 9.1 and 9.2 kernels (bugs #21446 and #21450) Fixes for (boo#1210616) CVE-2023-21990 Oracle VM VirtualBox Core None No 8.2 Prior to 6.1.44, Prior to 7.0.8 CVE-2023-21987 Oracle VM VirtualBox Core None No 7.8 Prior to 6.1.44, Prior to 7.0.8 CVE-2023-22002 Oracle VM VirtualBox Core None No 6.0 Prior to 6.1.44, Prior to 7.0.8 CVE-2023-21989 Oracle VM VirtualBox Core None No 6.0 Prior to 6.1.44, Prior to 7.0.8 CVE-2023-21998 Oracle VM VirtualBox Core None No 4.6 Prior to 6.1.44, Prior to 7.0.8 CVE-2023-22000 Oracle VM VirtualBox Core None No 4.6 Prior to 6.1.44, Prior to 7.0.8 CVE-2023-22001 Oracle VM VirtualBox Core None No 4.6 Prior to 6.1.44, Prior to 7.0.8 CVE-2023-21988 Oracle VM VirtualBox Core None No 3.8 Prior to 6.1.44, Prior to 7.0.8 CVE-2023-21999 Oracle VM VirtualBox Core None No 3.6 Prior to 6.1.44, Prior to 7.0.8 CVE-2023-21991 Oracle VM VirtualBox Core None No 3.2 Prior to 6.1.44, Prior to 7.0.8 Removed file fixes_for_kernel_6.3.patch - removed upstream. Removed file fix_kmp_build.patch. Thanks to Javier de San Pedro for the simplfication of the KMP build. - Fix some memory leaks in file "fix_7.0.6_locking_problems.patch" Fix bug in /usr/bin/VirtualBox, aka "virtualbox-wrapper.sh". The wrapper failed whenever the user declined USB passthru. boo#1208941. ==== virtualbox-kmp ==== Version update (7.0.6_k6.3.1_1 -> 7.0.8_k6.3.1_1) - VirtualBox 7.0.8 (released April 18 2023) This is a maintenance release. The following items were fixed and/or added: VMM: Introduced general improvements in nested visualization area GUI: Brought back Restore current snapshot checkbox of Close VM dialog (bugs #21189, #21491) GUI: Fixes and validation for VM settings USB filters editor, filter port value is now properly saved/restored GUI: Fixes for VM name and OS type embedded editors of Details pane GUI: Cloud related wizards should now propose enabled profiles before disabled Oracle VM VirtualBox Extension Pack: Fixed shipping the cryptographic support module for full VM encryption E1000: Fixed possible guru meditation when changing network attachments (bug #21488) virtio-net: Follow up fixes for FreeBSD 12.3 and pfSense 2.6.0 (bug #21201) 3D: Fixed various graphics issues with Windows 7 guests (bugs #21129, #21196, #21208, #21521) Main/UefiVariableStore: Added API to add signatures to the MOK list (Machine Owner Key) VBoxManage: Introduced modifynvram enrollmok sub-command to enroll Machine Owner Key into NVRAM, so Linux guest kernel can pick it up in order to verify signature of modules signed with this key Guest Control/Main: Fixed deleting files via built-in toolbox Linux host: Added possibility to bypass kernel modules signature verification once VBOX_BYPASS_MODULES_SIGNATURE_CHECK="1" is specified in /etc/vbox/vbox.cfg, useful in case if Linux distribution does not provide necessary tools to verify kernel module signature Linux Guest Additions and host Installer: Improved detection if system is running systemd as the init process Linux Guest Additions and host drivers: Introduce initial support for kernel 6.3 Linux Guest Additions: Added possibility to bypass kernel modules signature verification once VBOX_BYPASS_MODULES_SIGNATURE_CHECK="1" is specified in /etc/virtualbox-guest-additions.conf, useful in case if Linux distribution does not provide necessary tools to verify kernel module signature Linux Guest Additions: Added experimental support for kernel modules and user services reloading in the end of installation process, thus guest system reboot after Guest Additions (7.0.8 and newer) upgrade is no longer required in general case Linux Guest Additions: Fixed vboxvideo build issue with RHEL 8.7, 9.1 and 9.2 kernels (bugs #21446 and #21450) Fixes for (boo#1210616) CVE-2023-21990 Oracle VM VirtualBox Core None No 8.2 Prior to 6.1.44, Prior to 7.0.8 CVE-2023-21987 Oracle VM VirtualBox Core None No 7.8 Prior to 6.1.44, Prior to 7.0.8 CVE-2023-22002 Oracle VM VirtualBox Core None No 6.0 Prior to 6.1.44, Prior to 7.0.8 CVE-2023-21989 Oracle VM VirtualBox Core None No 6.0 Prior to 6.1.44, Prior to 7.0.8 CVE-2023-21998 Oracle VM VirtualBox Core None No 4.6 Prior to 6.1.44, Prior to 7.0.8 CVE-2023-22000 Oracle VM VirtualBox Core None No 4.6 Prior to 6.1.44, Prior to 7.0.8 CVE-2023-22001 Oracle VM VirtualBox Core None No 4.6 Prior to 6.1.44, Prior to 7.0.8 CVE-2023-21988 Oracle VM VirtualBox Core None No 3.8 Prior to 6.1.44, Prior to 7.0.8 CVE-2023-21999 Oracle VM VirtualBox Core None No 3.6 Prior to 6.1.44, Prior to 7.0.8 CVE-2023-21991 Oracle VM VirtualBox Core None No 3.2 Prior to 6.1.44, Prior to 7.0.8 Removed file fixes_for_kernel_6.3.patch - removed upstream. Removed file fix_kmp_build.patch. Thanks to Javier de San Pedro for the simplfication of the KMP build. - Fix some memory leaks in file "fix_7.0.6_locking_problems.patch" Fix bug in /usr/bin/VirtualBox, aka "virtualbox-wrapper.sh". The wrapper failed whenever the user declined USB passthru. boo#1208941. ==== wxWidgets-3_0 ==== - Add _multibuild to define 2nd spec file as additional flavor. Eliminates the need for source package links in OBS. ==== zenity ==== Version update (3.91.0 -> 3.92.0) Subpackages: zenity-lang - Update to version 3.92.0: + progress: don't update responses that aren't there + Set dialog 'heading', not 'title' for the --title option + tree: fix handling of multi-row stdin input + tree-column-view: don't steal children + Port to webkitgtk 6.0 + webkit: Fix leak by removing unnecessary ref sink + option: Add non-fatal deprecation warning for - -confirm-overwrite + help: Fix typo in Basque help translation + Updated translations.

1 0

How to send updates to Leap 15.5
by Larry Finger 05 May '23

05 May '23

Hi, The other Larry and I have finished the update of VirtualBox to v7.0.8, which has a number of CFE fixes. It has been submitted to the Virtualization project where it will be added to Tumbleweed, and to Leap 15.4 Update, but I am not sure where it should go to be included in 15.5. Please advise. Thanks, Larry

2 2

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

openSUSE Factory May 2023