June 2023 - openSUSE Factory - openSUSE Mailing Lists

factory@ is now under moderation
by Neal Gompa 28 May '24

28 May '24

Hello all, Due to the recent continuous inappropriate behavior on the factory@ mailing list, we have taken the extraordinary action of moderating the entire mailing list. Each message being submitted will be actively reviewed for approval until the Board works through the necessary and appropriate behavior to resolve this incident. -- Neal Gompa (ID: Pharaoh_Atem)

3 2

[opensuse-factory] Leap 42.3 Build 0312 released!
by Ludwig Nussel 25 Apr '24

25 Apr '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&version=42.3&bui… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Distribution&q… When you reply to discuss some issues, make sure to change the subject. Please use the test plan at https://docs.google.com/spreadsheets/d/1AGKijKpKiJCB616-bHVoNQuhWHpQLHPWCb3… to record your testing efforts and use bugzilla to report bugs. Packages changed: biosdevname btrfsmaintenance conduit gconf2-branding-openSUSE (42.1 -> 42.3) ibus kactivitymanagerd kde-user-manager kernel-source (4.4.73 -> 4.4.74) libxml2 libzypp (16.12.0 -> 16.13.0) lightdm marble mc plasma5-integration plasma5-openSUSE postgresql (9.4 -> 9.6) python-coverage (3.7.1 -> 4.3.4) ucode-intel (20160714 -> 20170511) yast2-bootloader (3.2.22 -> 3.2.23) yast2-ntp-client (3.2.9 -> 3.2.12) === Details === ==== biosdevname ==== - Duplicate naming of SRIOV VFs by biosdevname when VPD_DCM Strings are present in VFs (bsc#1042185) * Add: biosdevname_avoid_duplicates.patch ==== btrfsmaintenance ==== - Require btrfsprogs (bsc#1047226) - update to 0.2 - updated documentation - no hardcoded paths to external utilities - fixed logger name typos for 'journal' target - defrag fixes (sysconfig, find arguments) - Removed patch: balance-typo.patch - Added patch: sysconfig-override-trim.diff - Add balance-typo.patch (bnc#986543) - version 0.1.1 - fix typo and make journal logging target work - cron refresh: remove bashism - Removed patches: * 0003-Add-COPYING-file.patch * 0011-cron-refresh-remove-debuggiong-output.patch - cron script symlinks are not created on first installation (bsc#907343) - add COPYING to package - refresh script: remove extra messages - add uninstall targets - fix refresh service - adjust sysconfig defaults - Add more package dependencies (cron, zypp-plugin) - minor bugfixes - Add supplements(btrfsprogs) - initial version 0.1 ==== conduit ==== Subpackages: conduit-lang - Use python-vobject instead of vobject per python-vobject change in 42.3. ==== gconf2-branding-openSUSE ==== Version update (42.1 -> 42.3) - do not build novell-sound-theme in the gconf2-branding-SLED build to prevent duplicated binaries in openSUSE Leap. The novell-sound-theme is taken from gconf2-branding-SLES sources on both the SLED product and the SLES WE module. bsc#1046099 - bump versions ==== ibus ==== Subpackages: ibus-branding-openSUSE-KDE ibus-gtk ibus-gtk-32bit ibus-gtk3 ibus-lang libibus-1_0-5 libibus-1_0-5-32bit python-ibus typelib-1_0-IBus-1_0 - Update ibus.spec: copy auto-start files to SOURCE directory to enable modifications before compile. - Add ibus-disable-engines-preload-in-GNOME.patch: Disable load preload-engines actions in SLE, which is unnecessary for mono IMF in SLE and may cause CJK user login failed (bsc#1036729). ==== kactivitymanagerd ==== - Recommend -lang package ==== kde-user-manager ==== - Recommend -lang package ==== kernel-source ==== Version update (4.4.73 -> 4.4.74) Subpackages: kernel-default kernel-default-devel kernel-devel kernel-docs kernel-macros kernel-syms - Delete patches.kabi/kabi-fix-for-kvm-x86-fix-singlestepping-over-syscall. No need for kABI fix yet for Leap 42.3. - commit f0a86d9 - Fix kABI breakage by KVM CVE fix (bsc#1045922). - commit c0308f6 - powerpc/perf: Fix branch event code for power9 (fate#321438, Pending SUSE Kernel Fixes). - commit e954af6 - powerpc: Fix /proc/cpuinfo revision for POWER9 DD2 (bsc#1046789). - commit 444247f - Refresh metadata patches.drivers/ibmvnic-a2-Fix-assignment-of-RX-TX-IRQ-s.patch. - commit be32be9 - drm/i915: Serialize GTT/Aperture accesses on BXT (bsc#1046821). - commit b263fef - Bluetooth: hidp: fix possible might sleep error in hidp_session_thread (bsc#1031784). - Refresh patches.suse/kgr-0008-mark-task_safe-in-some-kthreads.patch. - commit 18c6f3e - KVM: x86: fix singlestepping over syscall (CVE-2017-7518 bsc#1045922). - commit d989643 - nvme/pci: Fix stuck nvme reset (bsc#1043805). - commit 7afe4f0 - Refresh fadump patches to upstream and add metadata patches.arch/powerpc-fadump-add-reschedule-point-while-releasing-memory.patch. patches.arch/powerpc-fadump-avoid-duplicates-in-crash-memory-ranges.patch patches.arch/powerpc-fadump-avoid-holes-in-boot-memory-area-when-fadump-is-registered.patch patches.arch/powerpc-fadump-provide-a-helpful-error-message.patch - commit f0fb5c3 - blacklist.conf: Remove duplicated entries - commit cb960d2 - Remove duplicated blacklist entries and put git-commit tag to patches - commit 12a0cb2 - blacklist.conf: Remove duplicated entry. - commit 561ddb1 - ibmvnic: Fix assignment of RX/TX IRQ's (bsc#1046589). - commit 5fa38bf - blacklist.conf: blacklist 570d8e939801 we do not care about the code in Documentation all that much, do we? - commit 69d5811 - blacklist.conf: blaclist 5380e5644afb it is just not worth backporting without any explicit report where a silently truncated success would lead to a real bug. - commit fc28626 - blacklist.conf: unnecessary patch The bug triggers only upon a malformed descriptor and the comparison is so that our buffer would be too large not too small so no overflow. The device would not work, but it won't anyway. - commit 99f8a16 - Rearrange the previous patches for hpsa and smartpqi to the right position. - commit a1f1f27 - Update patches.fixes/xfs-split-default-quota-limits-by-quota-type.patch (bsc#1040941). Fix the bug nr used. - commit 115ba75 - printk: Correctly handle preemption in console_unlock() (bsc#1046434). - commit 0a3c2a4 - printk/xen: Force printk sync mode when migrating Xen guest (bsc#1043347). - commit e13596b - btrfs: disable possible cause of premature ENOSPC (bsc#1040182) - commit 8bf31da - rbd: make sure pages are freed by libceph (bsc#1045596). - rbd: drop extra rbd_img_request_get (bsc#1045596). - commit c8719f2 - dm-raid: Do not call BUG() in __rdev_sectors() (bsc#1046264). - commit 0b1aab0 - btrfs: Round down values which are written for total_bytes_size (bsc#1043912). - btrfs: Manually implement device_total_bytes getter/setter (bsc#1043912). - commit c4d2eb7 - pipe: cap initial pipe capacity according to pipe-max-size limit (bsc#1045330). - commit 4ee3ec2 - Blacklist drivers/net/ethernet/ibm/emac We do not build the driver. - commit d432b2b - blacklist.conf: this patch breaks the API It disallows some operations that are now allowed - commit 98325c2 - arm64: Update config files. (bsc#1036737) Disable XGENE_PMU. - commit 7bb0115 - Disable Xilinx network drivers (bsc#1046170). - commit 656fc83 - hwpoison, memcg: forcibly uncharge LRU pages (bnc#1046105). - commit 2b252e1 - blacklist.conf: blacklist 570d8e939801 the issue is visible only when 80df554275c2 is applied (4.7+ and not backported to our trees) - commit 47b83ce - config/x86_64: make CONFIG_SERIAL_8250_DW and *_MID built-in (bsc#1024449) - commit 2e3ca7e - Refresh patches.drivers/0477-nvme-add-hostid-token-to-fabric-options.patch. Update mainline references. - commit eee1109 - fs/exec.c: account for argv/envp pointers (bnc#1039354, CVE-2017-1000365). - commit 7418d0f - Refresh ibmvnic patch metadata patches.drivers/ibmvnic-98-ibmvnic-Correct-return-code-checking-for-ibmvnic_init-during-probe.patch. patches.drivers/ibmvnic-a0-ibmvnic-Fix-incorrectly-defined-ibmvnic_request_map_rsp-structure.patch. patches.drivers/ibmvnic-a1-ibmvnic-Fix-error-handling-when-registering-long-term-mapped-buffers.patch. - commit babc17a - Refresh metadata patches.fixes/powerpc-tm-Fix-stack-pointer-corruption-in-__tm_recheckpoint. - commit 0b5bdc6 - powerpc/ftrace: Pass the correct stack pointer for DYNAMIC_FTRACE_WITH_REGS (FATE#322421). - commit 936e653 - nvme: add hostid token to fabric options (bsc#1045293). - commit 52dffb9 - iw_cxgb4: Fix error return code in c4iw_rdev_open() (bsc#1026570). - RDMA/iw_cxgb4: Always wake up waiter in c4iw_peer_abort_intr() (bsc#1026570). - commit 2ce43b1 - clocksource/drivers/arm_arch_timer: Fix read and iounmap of incorrect variable (bsc#1045937). - commit 594f037 - Linux 4.4.74 (CVE-2017-1000364 bnc#1012382 bnc#1039348 bnc#1045340 bsc#1031717 bsc#1043231). - Delete patches.drivers/media-pvrusb2-reduce-stack-usage-pvr2_eeprom_analyze. - Delete patches.drivers/media-vb2-Fix-an-off-by-one-error-in-vb2_plane_vaddr. - Delete patches.drivers/staging-rtl8188eu-prevent-an-underflow-in-rtw_check_. - Delete patches.fixes/mm-fix-new-crash-in-unmapped_area_topdown.patch. - Delete patches.fixes/mm-larger-stack-guard-gap-between-vmas.patch. - commit 5e41880 - tty: Fix ldisc crash on reopened tty (bnc#1043488). - commit 04cca20 - tty: Destroy ldisc instance on hangup (bnc#1043488). - tty: Refactor tty_ldisc_reinit() for reuse (bnc#1043488). - tty: Use 'disc' for line discipline index name (bnc#1043488). - tty: Move tty_ldisc_kill() (bnc#1043488). - tty: Handle NULL tty->ldisc (bnc#1043488). - tty: Prepare for destroying line discipline on hangup (bnc#1043488). - tty: Reset c_line from driver's init_termios (bnc#1043488). - tty: Simplify tty_set_ldisc() exit handling (bnc#1043488). - commit c016cca - kabi: ignore fs_info parameter for tracepoints that didn't have it (bsc#1044912). - commit 24869ea ==== libxml2 ==== Subpackages: libxml2-2 libxml2-2-32bit libxml2-devel libxml2-tools - Security fix: * libxml2-CVE-2017-7376.patch [bsc#1044887, CVE-2017-7376] * Increase buffer space for port in HTTP redirect support - Security fix: * libxml2-CVE-2017-7375.patch [bsc#1044894, CVE-2017-7375] * Prevent unwanted external entity reference - Upstream patches updated and with tests: * libxml2-CVE-2017-9047.patch and libxml2-CVE-2017-9048.patch merged into libxml2-CVE-2017-9047.patch [bsc#1039066, bsc#1039661] * libxml2-CVE-2017-9049.patch and libxml2-CVE-2017-9050.patch merged into libxml2-CVE-2017-9049.patch [bsc#1039063, bsc#1039064] ==== libzypp ==== Version update (16.12.0 -> 16.13.0) - Adapt loop mounting of iso images (bsc#1038132, bsc#1033236) - Adjust zypp.conf for openSUSE Tumbleweed (bsc#1031756) - Change arch variable names conflicting with compiler macros (fixes #70) - Fix potential crash if repo has no baseurl (bnc#1043218) - version 16.13.0 (0) ==== lightdm ==== Subpackages: liblightdm-gobject-1-0 lightdm-lang - Augment patch to also resolve the target of symlink sessions for detemining the preselected option: * ignore-known-symlink-sessions.patch ==== marble ==== Subpackages: libastro1 libmarblewidget-qt5-27 marble-data marble-devel marble-doc marble-kde marble-lang - Add Fix-utm-enum-value.patch and reverse-apply it, this upstream commit causes a crash when adding bookmarks if switched to UTM view angles because the necessary handler functions for the dialog are not implemented yet (boo#1044747, kde#381872) - Add Fix-plain-map-and-political-map-showing-no-content.patch to fix the plain map and the political map being not displayed at all (kde#379297) ==== mc ==== Subpackages: mc-lang - sftp.patch: Backport upstream fixes for SFTP (boo#1004280, boo#1042797) ==== plasma5-integration ==== - Move the Recommends: %{name}-plugin-lang to the plasma5-integration-plugin sub package, otherwise the translations won't get installed as there is no main package (boo#1027925) - Actually apply the aforementioned patch (shouldn't the source validator have warned?) ==== plasma5-openSUSE ==== Subpackages: plasma5-defaults-openSUSE plasma5-theme-openSUSE plasma5-workspace-branding-openSUSE sddm-theme-openSUSE - Fix installation of the sddm theme files (boo#1047254) ==== postgresql ==== Version update (9.4 -> 9.6) Subpackages: postgresql-contrib postgresql-devel postgresql-docs postgresql-server - Bump version and defaultpackage to 9.6. - Move ~postgres/.bash_profile to postgresql-server to avoid a file conflict between the versioned server packages. - Bump version and defaultpackage to 9.4. - Bump version and defaultpackage to 9.3. - Change license string to PostgreSQL. - Make all dummy packages noarch. - Make PostgreSQL 9.2 the default. - Reduce the postgresql packages with unversioned names to dummy packages that require the respective versioned package names. ==== python-coverage ==== Version update (3.7.1 -> 4.3.4) - uninstall alternatives in %postun - update for singlespec - update to 4.3.4: - Using the --skip-covered option on an HTML report with 100% coverage would cause a ?No data to report? error, as reported in issue 549. This is now fixed; thanks, Lo�c Dachary. - If-statements can be optimized away during compilation, for example, if 0: or if __debug__:. Coverage.py had problems properly understanding these statements which existed in the source, but not in the compiled bytecode. This problem, reported in issue 522, is now fixed. - If you specified --source as a directory, then coverage.py would look for importable Python files in that directory, and could identify ones that had never been executed at all. But if you specified it as a package name, that detection wasn?t performed. Now it is, closing issue 426. Thanks to Lo�c Dachary for the fix. - If you started and stopped coverage measurement thousands of times in your process, you could crash Python with a ?Fatal Python error: deallocating None? error. This is now fixed. Thanks to Alex Groce for the bug report. - On PyPy, measuring coverage in subprocesses could produce a warning: ?Trace function changed, measurement is likely wrong: None?. This was spurious, and has been suppressed. - Previously, coverage.py couldn?t start on Jython, due to that implementation missing the multiprocessing module (issue 551). This problem has now been fixed. Also, issue 322 about not being able to invoke coverage conveniently, seems much better: jython -m coverage run myprog.py works properly. - Let?s say you ran the HTML report over and over again in the same output directory, with --skip-covered. And imagine due to your heroic test-writing efforts, a file just acheived the goal of 100% coverage. With coverage.py 4.3, the old HTML file with the less-than-100% coverage would be left behind. This file is now properly deleted. - update to Version 4.3.1 ? 2016-12-28: - Some environments couldn?t install 4.3, as described in issue 540. This is now fixed. - The check for conflicting --source and --include was too simple in a few different ways, breaking a few perfectly reasonable use cases, described in issue 541. The check has been reverted while we re-think the fix for issue 265. - update to Version 4.3 ? 2016-12-27: Special thanks to Lo�c Dachary, who took an extraordinary interest in coverage.py and contributed a number of improvements in this release. - The HTML report now supports a --skip-covered option like the other reporting commands. Thanks, Lo�c Dachary for the implementation, closing issue 433. - Subprocesses that are measured with automatic subprocess measurement used to read in any pre-existing data file. This meant data would be incorrectly carried forward from run to run. Now those files are not read, so each subprocess only writes its own data. Fixes issue 510. - Coverage.py wouldn?t execute sys.excepthook when an exception happened in your program. Now it does, thanks to Andrew Hoos. Closes issue 535. - The coverage combine command will now fail if there are no data files to combine. The combine changes in 4.2 meant that multiple combines could lose data, leaving you with an empty .coverage data file. Fixes issues issue 525, issue 412, issue 516, and probably issue 511. - The branch coverage issues described in issue 493, issue 496, and issue 502 are now fixed, thanks to Lo�c Dachary. - Options can now be read from a tox.ini file, if any. Like setup.cfg, sections are prefixed with ?coverage:?, so [run] options will be read from the [coverage:run] section of tox.ini. Implements part of issue 519. Thanks, Stephen Finucane. - Specifying both --source and --include no longer silently ignores the include setting, instead it fails with a message. Thanks, Nathan Land and Lo�c Dachary. Closes issue 265. - Coverage.py can now search .pex files for source, just as it can .zip and .egg. Thanks, Peter Ebden. - update to 4.2: - Since ``concurrency=multiprocessing`` uses subprocesses, options specified on the coverage.py command line will not be communicated down to them. Only options in the configuration file will apply to the subprocesses. Previously, the options didn't apply to the subprocesses, but there was no indication. Now it is an error to use ``--concurrency=multiprocessing`` and other run-affecting options on the command line. This prevents failures like those reported in `issue 495`_. - Filtering the HTML report is now faster, thanks to Ville Skytt�. - update to 4.0.3: - Fixed a mysterious problem that manifested in different ways: sometimes hanging the process (`issue 420`_), sometimes making database connections fail (`issue 445`_). - The XML report now has correct ``<source>`` elements when using a ``--source=`` option somewhere besides the current directory. This fixes `issue 439`_. Thanks, Arcady Ivanov. - Fixed an unusual edge case of detecting source encodings, described in `issue 443`_. - Help messages that mention the command to use now properly use the actual command name, which might be different than "coverage". Thanks to Ben Finney, this closes `issue 438`_. - add LICENSE.txt - Pre require coreutils. This package is needed for the rm call in the pre section. Subprocess failed. Error: RPM failed: /var/tmp/rpm-tmp.gONanE: line 3: rm: command not found - specfile: * updated license * updated update-alternatives * README.txt -> README.rst - update to version 4.0: (long list, see http://coverage.readthedocs.org/en/latest/changes.html) - fix rhel deps by depending on /usr/sbin/update-alternatives ==== ucode-intel ==== Version update (20160714 -> 20170511) - Update to version 20170511 - Update to version 20161104. ==== yast2-bootloader ==== Version update (3.2.22 -> 3.2.23) - AuotYaST configuration: Set StorageDevices flag disks_valid to true. So libstorage can scan valid disks and "/" partition can be found. (bnc#1043132) - 3.2.23 ==== yast2-ntp-client ==== Version update (3.2.9 -> 3.2.12) - Resrict records are written at the end but the default file and most profiles use them at the beginning, which mangles the file completely (bsc#983486). To fix it we have just changed the order of writing. - 3.2.12 - AutoYaST: Fix crash when trying to sanitize not string values, for example initial_sync. - AutoYaST: Sanitize comments by only removing blank spaces at the beginning and adding line break. This avoids augeas parse errors (bsc#1045777). - 3.2.11 - AutoYaST: Fix crash in CFA when creating a command record with some key value option is given (bsc#1045968) - 3.2.10 - AutoYaST: Comments from autoyast profile should not be sanitized to avoid entries without space between value and comment (e.g trustedkey 1# coment). This is caused by a bug in augeas adding new entries. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

2 1

[opensuse-factory] acpid requires systemd?
by Felix Miata 25 Apr '24

25 Apr '24

Can this be true? If so, why? Zypper won't let me upgrade acpid without breakage unless systemd is installed too. I have systemd locked out, as I'd rather test things I can understand in Factory, not major overhaul stuff. -- "The wise are known for their understanding, and pleasant words are persuasive." Proverbs 16:21 (New Living Translation) Team OS/2 ** Reg. Linux User #211409 ** a11y rocks! Felix Miata *** http://fm.no-ip.com/ -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-factory+help(a)opensuse.org

4 3

wine and zlib
by Joe Salmeri 22 Feb '24

22 Feb '24

I did a fresh install of TW 20230222 on a new PC. My main desktop which was installed back in 2021 has also been updated ( zypper dup ) to 20230222. I found something odd when comparing packages between the 2 machines. Both PC's have wine installed, however... On my main desktop when the original install in 2021 of wine was done it installed libz1-32bit ( as per the zypper history logs ) and it still has that installed after it was updated to 20230222. On the new PC fresh install of 20230222 when wine was installed it installed libz-ng-compat1-32bit. The libz-ng-compat1-32bit version looks like it was forked in 2021, just after my main machine was originally built so that would explain why it has libz1-32bit but shouldn't it have been updated by zypper dup ??? Is this a bug that I should report? If so, which system is wrong / which version should be used? Thanks!

5 6

snapd applications not working on Tumbleweed (20230613)
by Jim Henderson 19 Jan '24

19 Jan '24

Wondering if anyone else is seeing this. I attempted to launch two apps (slack and spotify) installed with snapd, and the launch failed. Troubleshooting it, I removed all of the snaps from the system, uninstalled and reinstalled snapd, and I get the following output: --- $ snap install spotify error: cannot perform the following tasks: - Run configure hook of "spotify" snap if present (run hook "configure": ----- go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Matcha-dark-sea /snap/spotify/67/data-dir/themes/Matcha-dark-sea none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Matcha-sea /snap/spotify/67/data-dir/themes/Matcha-sea none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Materia-compact /snap/spotify/67/data-dir/themes/Materia-compact none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Materia-dark-compact /snap/spotify/67/data-dir/themes/Materia-dark-compact none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Materia-dark /snap/spotify/67/data-dir/themes/Materia-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Materia-light-compact /snap/spotify/67/data-dir/themes/Materia-light-compact none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Materia-light /snap/spotify/67/data-dir/themes/Materia-light none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Materia /snap/spotify/67/data-dir/themes/Materia none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Radiance /snap/spotify/67/data-dir/themes/Radiance none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Radiant-MATE /snap/spotify/67/data-dir/themes/Radiant-MATE none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-MATE-dark /snap/spotify/67/data-dir/themes/Yaru-MATE-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-MATE-light /snap/spotify/67/data-dir/themes/Yaru-MATE-light none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-bark-dark /snap/spotify/67/data-dir/themes/Yaru-bark-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-bark /snap/spotify/67/data-dir/themes/Yaru-bark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-blue-dark /snap/spotify/67/data-dir/themes/Yaru-blue-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-blue /snap/spotify/67/data-dir/themes/Yaru-blue none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-dark /snap/spotify/67/data-dir/themes/Yaru-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-light /snap/spotify/67/data-dir/themes/Yaru-light none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-magenta-dark /snap/spotify/67/data-dir/themes/Yaru-magenta-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-magenta /snap/spotify/67/data-dir/themes/Yaru-magenta none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-mate-dark /snap/spotify/67/data-dir/themes/Yaru-mate-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-mate /snap/spotify/67/data-dir/themes/Yaru-mate none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-olive-dark /snap/spotify/67/data-dir/themes/Yaru-olive-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-olive /snap/spotify/67/data-dir/themes/Yaru-olive none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-prussiangreen-dark /snap/spotify/67/data-dir/themes/Yaru-prussiangreen-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-prussiangreen /snap/spotify/67/data-dir/themes/Yaru-prussiangreen none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-purple-dark /snap/spotify/67/data-dir/themes/Yaru-purple-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-purple /snap/spotify/67/data-dir/themes/Yaru-purple none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-red-dark /snap/spotify/67/data-dir/themes/Yaru-red-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-red /snap/spotify/67/data-dir/themes/Yaru-red none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-sage-dark /snap/spotify/67/data-dir/themes/Yaru-sage-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-sage /snap/spotify/67/data-dir/themes/Yaru-sage none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-viridian-dark /snap/spotify/67/data-dir/themes/Yaru-viridian-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-viridian /snap/spotify/67/data-dir/themes/Yaru-viridian none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru /snap/spotify/67/data-dir/themes/Yaru none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/elementary /snap/spotify/67/data-dir/themes/elementary none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied cannot update snap namespace: cannot create writable mimic over "/usr/lib/x86_64-linux-gnu": permission denied snap-update-ns failed with code 1 -----) --- The execution of both programs prior to the reinstallation did the same thing. I did note that /usr/lib/x86_64-linux-gnu does not exist on my system. Happy to report a bug on bugzilla, but wanted to see if anyone else had noticed this. -- Jim Henderson Please keep on-topic replies on the list so everyone benefits

5 10

Leap not more useful for WebServer with php
by Walddys Emmanuel Dorrejo Céspedes 09 Oct '23

09 Oct '23

Leap is stuck with PHP 8.0 version, when most devs and project have move to php8.1/8.2, i was hoping that php8.1 at least this version reach leap 15.5, but didn't reached the main repo. sad.

6 6

Changes to dbus packaging (Some Attention maybe required).
by Simon Lees 04 Oct '23

04 Oct '23

Hi All, For Tumbleweed and ALP we plan to follow Red Hat / Fedora / Debian and move from dbus-daemon to dbus-broker as it has a number of advantages and is what upstream is now focusing on. While one of the goals here is to provide the same user experience there will be a couple of changes that will likely require adjustments in a few packages. 1. tools such as dbus-send and dbus-uuid will no longer be installed by default on all systems (we have many use cases that will simply no longer need them and this follows other distro's). Currently the package dbus-1-tools exists and is required by dbus-1 but that will change maybe to a recommends so if you know your package needs one of these tools you can add the Requires there now, otherwise I plan to go through and look at debian and fedora to try and find any packages that need this requires before it becomes optional for dbus. 2. The symlink from /etc/machine-id to /var/lib/dbus/machine-id will no longer be present on all machines and software should be adapted to use /etc/machine-id from systemd rather then the dbus copy. Again this has already happened for Debian and Fedora so hopefully many upstreams have already adapted to this. I'll outline the plan / timeline below. 1. Currently - dbus-broker has been in the distro for quite some time and the dbus-1 package has already been split up and we are at the point of asking people nicely to start testing (instructions below), myself and at least several other people have already been testing this without issues. 2. In 2-3 weeks if I don't hear of any issues we will update the systemd presets to enable dbus-broker rather then dbus-daemon. 3. Unless someone indicates they really want to keep maintaining dbus-daemon and have good reasons for doing so I will make dbus-daemon uninstallable. 4. Once we have done the work to ensure that as many packages that use dbus-send and other tools require the tools package we will drop the requires for dbus-tools from the dbus package. Instead it will probably move to being a Recommends in one of the patterns so it still ends up on most users machines. Switching to dbus-broker: Run the following as root zypper in dbus-broker systemctl disable dbus systemctl enable dbus-broker systemctl --global disable dbus systemctl --global enable dbus-broker https://www.mail-archive.com/debian-policy@lists.debian.org/msg35437.html https://fedoraproject.org/wiki/Changes/DbusBrokerAsTheDefaultDbusImplementa… -- Simon Lees (Simotek) http://simotek.net Emergency Update Team keybase.io/simotek SUSE Linux Adelaide Australia, UTC+10:30 GPG Fingerprint: 5B87 DB9D 88DC F606 E489 CEC5 0922 C246 02F0 014B

4 6

Off topic: Can't log in to Bugzilla
by Mark Rubin 23 Sep '23

23 Sep '23

I believe I have a login at https://bugzilla.opensuse.org/ with the same username and password that I use here and at https://forums.opensuse.org/. It works at both those sites, and used to work at Bugzilla although the last time I used it there was several years ago. Bugzilla seems to know me, but when I try to log in using "openSUSE_IDP Log In" (the only choice) it rejects me, before asking for username/password/etc, with "There is already an account with the login name <my email address>". I did a password reset, and got a token in my email which it accepted back along with a new password, which then brought me to a page ending with my info and "Your profile is up to date". But I can't continue to the site from there, and trying to log in again restarts the same "already an account" loop. If anyone has any suggestions, or a way to contact the Bugzilla administrators to plead my case, I'd appreciate it. I have some new information to post there regarding my thread here, plus another new/verifiable bug to report. It's very frustrating to be trying to contribute (in some small way) to openSUSE only to get blocked by things like this.

7 16

RFC: turn off ppc32 and ppc64 big endian builds on openSUSE:Factory:PowerPC
by Dirk Müller 14 Sep '23

14 Sep '23

Hi all, recently I was made aware that openSUSE:Factory:PowerPC is quite a large distribution as it is building for ppc 32bit, ppc64 big endian and ppc64 little endian. in OpenQA as far as I know we are only testing the ppc64 little endian builds. Given the upcoming data center move and the lack of testing, are there any concerns about turning off the builds for ppc 32bit and ppc64 big endian? It would reduce build power needs as well as disk storage /publishing bandwidth which is shared with other distributions and architectures and becomes a problem because of PowerPC being exceptionally large. Thanks a lot in advance for any insight you can provide, Greetings, Dirk

10 26

Packages in OBS not configured for Factory
by Roger Oberholtzer 28 Aug '23

28 Aug '23

I have a newbie question about the decision about what targets a package in OBS are built for. I mean about the logic behind the choice of which to enable. I quite often find that packages are enabled for only 15.2, or only Tumblwweed. But it is quite common that the packages are not enabled for all current openSUSE/SUSE releases. For exampl (not a complaints against this ptroject! I just happen to be following the status of the tensorflow2 and it took me here as a unresolvable package): https://build.opensuse.org/package/show/devel%3Alanguages%3Apython/python-g… Why would a project in devel:languages:python not have Factory enabled? I know that in user's own builds, them might unfortunately do this. But in a place like devel:languages:python, I would have thought the all current openSUSE/SUSE targets would generally be enabled. If it is a 'I don't have time' thing, then I'm okay with that. No problem. I am curious if it is something else that I have just not cottoned on to. -- Roger Oberholtzer

6 14

New package submission for Factory: xdp-tools
by Shung-Hsi Yu 25 Jul '23

25 Jul '23

Hi, I'd like to submit a new package from network to Factory. The package is xdp-tools, which consists of utilities, helper library, and example programs for use with eXpress Data Path (XDP). XDP is a high performance and user-programmable network data path in the Linux kernel, supported since Linux Kernel v4.8. It allows bypassing the kernel's networking stack for performance, but still preserve the possibility of failing back to the network stack if needed; while the user-programmable part are done with eBPF programs. xdp-tools packaged itself provides a few utilities that are powered by XDP under the hood: - xdpdump: a tcpdump-like tool that captures packet - xdp-filter: packet filtering utility with drop rates up to tens of millions of packets per second per core - xdp-trafficgen: network traffic generator that can generate millions of packets per second per core - xdp-loader: simple loader for XDP program with support for attaching multiple XDP program to the same interface - xdp-monitor: monitors and display various XDP related statistics and events - xdp-bench: XDP benchmarking tool It also comes with a helper library libxdp that does the heavy lifting and libxdp-devel that provides the programming interface for those who needs finer control. This is a bit of a late addition. When libbpf (which is in Factory) remove its support for AF_XDP in 2021, the features are moved in libxdp[1]; so in an ideal world xdp-tools should have already been added back then. But better later then never :) Shung-Hsi 1: https://github.com/libbpf/libbpf/wiki/Libbpf:-the-road-to-v1.0#xskch-is-mov…

3 3

Build of kernel with `make binrpm-pkg` fails
by Mark Rubin 20 Jul '23

20 Jul '23

(Yes, I seem to be spamming this list. If it's any excuse, please know that I spend 24/48/more hours trying to solve each problem on my own before asking for help here.) I'm trying to build the current openSUSE kernel. This isn't something I want to be spending time on, but for the reasons why, see https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… I've done the following: ``` $ git clone https://github.com/openSUSE/kernel $ cp -p /boot/config-6.3.9-1.g0df701d-default .config $ make olddefconfig $ make menuconfig ``` The last ("menuconfig") is required to make some changes to fix: ``` make[2]: *** No rule to make target '.kernel_signing_key.pem', needed by 'certs/signing_key.x509'. Stop. make[2]: *** Waiting for unfinished jobs.... CERT certs/x509_certificate_list make[1]: *** [scripts/Makefile.build:495: certs] Error 2 make[1]: *** Waiting for unfinished jobs.... ... make: *** [Makefile:2041: .] Error 2 ``` Finding the magic settings to fix that wasn't easy, but no matter. Continuing: ``` $ make binrpm-pkg ... depmod: ERROR: could not open directory /usr/local/home/mark/rpmbuild/BUILDROOT/kernel-6.4.0_rc7_1.g0df701d_default+-1.x86_64/usr/lib/modules/99.98.6.4.0-rc7-1.g0df701d-default+: No such file or directory depmod: FATAL: could not search modules: No such file or directory make[2]: *** [Makefile:1971: modules_install] Error 1 error: Bad exit status from /var/tmp/rpm-tmp.UXaZfI (%install) ... RPM build errors: Bad exit status from /var/tmp/rpm-tmp.UXaZfI (%install) make[1]: *** [scripts/Makefile.package:91: binrpm-pkg] Error 1 make: *** [Makefile:1672: binrpm-pkg] Error 2 ``` Much investigation reveals that `rpmbuild`, invoked from "scripts/Makefile.package" via the "binrpm-pkg" target ... ``` binrpm-pkg: $(MAKE) -f $(srctree)/Makefile $(CONFIG_SHELL) $(MKSPEC) prebuilt > $(objtree)/binkernel.spec +rpmbuild $(RPMOPTS) --define "_builddir $(objtree)" --target \ $(UTS_MACHINE)-linux -bb $(objtree)/binkernel.spec ``` ... is creating a "/var/tmp/rpm-tmp.<some-tempname-hash>" file which is later executed. That script creates many directories, but not the missing one in the error message above. I've tried to hack in some workarounds, but all fail. It doesn't do any good to edit the /var/tmp/rmp-tmp.<hash> file because a new one is created on the next run of `make binrpm-pkg`. Likewise, creating the missing directory doesn't help because the script first cleans up the previous run with `rm -rf /usr/local/home/mark/rpmbuild/BUILDROOT/..." before recreating that whole directory tree, and that wipes out the hack-in subdirectory. So ... the questions (for anyone who has experience building kernels and would be willing to offer help): - Is there any reason why the "binrpm" target doesn't work or shouldn't be used? It seems (and is documented online) to be a better alternative to `make install` because it can't break the running system (it can be done as a non-root user and the resulting RPM later installed). - Is this a bug either in `rpmbuild` or the makefile's invocation of it? - Is doing `make rpm-pkg` (which is advertised to make two RPMs, one binary and one source) necessary instead? I've tried, and it errors with yet more problems which I'm trying to address, but predict that once it makes the source RPM it will break on the binary (the only thing I really want) with the same failure I'm already seeing. - Is doing `make module_install` followed by `make install` what everyone uses, and I'm going down some untested and unsupported path? As always, thanks for any advice or suggestions (including, I suppose, "If you don't know how to build the kernel you shouldn't be doing it.")

6 7

Please reboot after upgrading to SDDM 0.20 (Snapshot 20230630+)
by Fabian Vogt 14 Jul '23

14 Jul '23

Hi, in SDDM 0.20, the protocol between the greeter and the daemon changed a bit, which means the greeter from 0.20 will not start properly if the daemon from 0.19 is still running. It's not possible to restart the daemon automatically during/after the upgrade, as this would stop all sessions. The result is that directly after upgrading to sddm 0.20, performing a logout will end up in a black screen. So instead of logging out, just select reboot or shut down directly. If you by accident end up at the black screen, press Ctrl-Alt-F1 to switch to a console and press Ctrl-Alt-Del to trigger a reboot. Or log in as root and run "rcxdm restart; exit" to restart the daemon. Cheers, Fabian

4 6

The lockdown function be enabled in master branch of openSUSE kernel
by joeyli 12 Jul '23

12 Jul '23

Hi folks, After testing NVIDIA kmp with lockdown kernel, the lockdown function be enabled in master branch of openSUSE Tumbleweed kernel again. (SLE and Leap kernels are already enabled) The following patches are unmartked: patches.suse/0001-security-lockdown-expose-a-hook-to-lock-the-kernel-down.patch patches.suse/0002-efi-Add-an-EFI_SECURE_BOOT-flag-to-indicate-secure-boot-mode.patch patches.suse/0003-efi-Lock-down-the-kernel-if-booted-in-secure-boot-mode.patch patches.suse/0004-efi-Lock-down-the-kernel-at-the-integrity-level-if-b.patch patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch The following config be enabled. It will load MOK (machine owner key) to kernel keyring: CONFIG_IMA_ARCH_POLICY=y CONFIG_IMA_SECURE_AND_OR_TRUSTED_BOOT=y The following downstream config be enabled on x86_64 and aarch64. It will connect lockdown function with secure boot option in EFI firmware: CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT=y Kernel will set to integrity lockdown mode when secure boot be enabled: linux/security.h enum lockdown_reason { LOCKDOWN_NONE, LOCKDOWN_MODULE_SIGNATURE, // kernel module verification LOCKDOWN_DEV_MEM, LOCKDOWN_EFI_TEST, LOCKDOWN_KEXEC, LOCKDOWN_HIBERNATION, LOCKDOWN_PCI_ACCESS, LOCKDOWN_IOPORT, LOCKDOWN_MSR, LOCKDOWN_ACPI_TABLES, LOCKDOWN_DEVICE_TREE, LOCKDOWN_PCMCIA_CIS, LOCKDOWN_TIOCSSERIAL, LOCKDOWN_MODULE_PARAMETERS, LOCKDOWN_MMIOTRACE, LOCKDOWN_DEBUGFS, // restricted debugfs LOCKDOWN_XMON_WR, LOCKDOWN_BPF_WRITE_USER, // BPF write LOCKDOWN_DBG_WRITE_KERNEL, LOCKDOWN_RTAS_ERROR_INJECTION, LOCKDOWN_INTEGRITY_MAX, // integrity mode LOCKDOWN_KCORE, LOCKDOWN_KPROBES, LOCKDOWN_BPF_READ_KERNEL, // BPF read LOCKDOWN_DBG_READ_KERNEL, LOCKDOWN_PERF, LOCKDOWN_TRACEFS, LOCKDOWN_XMON_RW, LOCKDOWN_XFRM_SECRET, LOCKDOWN_CONFIDENTIALITY_MAX, // confidentiality mode }; As you see, the kernel module verification will be enabled. So please sign your self-built kernel module. You can reference this section in openSUSE UEFI wiki page: https://en.opensuse.org/openSUSE:UEFI#Signing_kernel_module_for_verification Please enroll your key to MOK by mokutil. If you didn't use shim, e.g. systemd-boot/dracut solution. I have created a bug bsc#1211224. Currently we do not support it with secure boot. Let's discuss it in bsc#1211224. Regards Joey Lee

13 54

[IMPORTANT] Switching from wtmp to wtmpdb
by Thorsten Kukuk 09 Jul '23

09 Jul '23

Hi, as already told ;), wtmp has a Y2038 problem which the glibc developers don't plan to fix, but instead they want deprecate that API. (For background see https://www.thkukuk.de/blog/Y2038_glibc_wtmp_64bit/) On openSUSE Tumbleweed/MicroOS/... we introduced meanwhile wtmpdb, which solves the Y2038 problem and some others, too. "wtmpdb last" should work already today and show you similar output compared with "last" itself. The next and final step will be, making "last" a link to "wtmpdb last" and rename the old last to "last.legacy". There are currently no plans to disable writing of wtmp entries completly, I expect that this will come most likely together with utmp. So the applications reading wtmp directly (currently I'm only aware of accounts-daemon, maybe samba, haven't analyzed that code yet) should continue to work. The other 99% of applications accessing wtmp do only create new entries, this should cause no issues. But: due to a one year old bug in systemd-presets-common-SUSE, the service files didn't got always enabled. IMPORTANT: please check that the wtmpdb-update-boot.service and wtmpdb-rotate.timer are enabled, if not, please enable them: systemctl enable --now wtmpdb-update-boot.service systemctl enable wtmpdb-rotate.timer This is only necessary if you did updates, not for systems which got fresh installed this week. Thanks, Thorsten -- Thorsten Kukuk, Distinguished Engineer, Senior Architect, Future Technologies SUSE Software Solutions Germany GmbH, Frankenstraße 146, 90461 Nuernberg, Germany Managing Director: Ivo Totev, Andrew Myers, Andrew McDonald, Martje Boudien Moerman (HRB 36809, AG Nürnberg)

14 32

install updates on reboot when needed
by Daniele Granata 06 Jul '23

06 Jul '23

Dears, in recent months make a zypper dup cause some problems to my system, logout from kde broken, session that will not close properly keeping open sw like Chromium or DBeaver, all resolved with a hard power off. May I ask some sort of option in zypper dup to apply the file installation only before the next boot? Thank you -- Daniele

7 19

When are upstream kernel commits merged into Tumbleweed?
by Mark Rubin 02 Jul '23

02 Jul '23

The nouveau driver has had a serious, longstanding bug that seemingly only exhibits itself with the 6.3 and onward kernels, and only with older Nvidia chipsets. For details, see https://forums.opensuse.org/t/older-laptop-tumbleweed-nvidia-and-nouveau-dr… and https://gitlab.freedesktop.org/drm/nouveau/-/issues/213. After several weeks of hard work by developers at Freedesktop and RedHat (it was a very difficult bug to track down) a fix was accepted at https://github.com/torvalds/linux/commit/c8a5d5ea3ba6a18958f8d76430e4cd68ee… and is in both https://github.com/torvalds/linux/blob/master/drivers/gpu/drm/nouveau/nouve… and https://github.com/openSUSE/kernel/blob/master/drivers/gpu/drm/nouveau/nouv… But the change has not yet been merged into the kernel-source-6.3.7-1.2.noarch package's /usr/src/linux-6.3.7-1/drivers/gpu/drm/nouveau/nouveau_drm.c file, nor (as evidenced by the kernel fault still happening at boot) in 20230620's vmlinuz-6.3.7-1-default kernel. Should I expect that it will be included in an upcoming Tumbleweed snapshot/repo/ISO in the near future? If not, how can I advocate that it should be? There are already several related Bugzillas (1212553, 1211217, 1211568, 1211216, 1209197), none of which seem to be aware of the root cause nor this newly-released fix. Note that although the bug currently only triggers with specific, older Nvidia GPUs and "has never caused problems before", the previous code is undeniably wrong and the patch should be applied regardless. And once again, it has been accepted into the mainstream kernel sources. Thanks for any insights into the Tumbleweed release process, and on how to proceed.

8 17

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 30 Jun '23

30 Jun '23

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have had problems for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - monero: Fails to build - monero-gui: Fails to build - python-efl: Fails to build - spek: Fails to build Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

1 0

Tumbleweed - Review of the week 2023/26
by Dominique Leuenberger 30 Jun '23

30 Jun '23

Dear Tumbleweed users and hackers, We have just finished week 26, meaning half of the year is over. This week was a ‘super fast’ one for Tumbleweed: in the 7 days since the last review we published 9 snapshots. Go figure! The 9 snapshots covered this week are 0621…0629. The most relevant changes that were delivered during this week were: * Mozilla Firefox 114.0.2 * KDE Plasma 5.27.6 * IceWM 3.4.0 * Node.JS 20.3.1 * AppArmor 3.1.6 * PHP 8.2.7 * Mesa 23.1.3 * Linux kernel 6.3.9 * util-linux 2.39 * firewalls 2.0.0 * strace 6.4 * transactional-update 4.3.0 As you come to expect, staging projects are filled up and the following few things are being worked on and tested: * Protobuf 22 * linux-glibc-devel 6.4.0 * Linux kernel 6.4: kernel lockdown enabled, see the announcement[0] * exiv2 0.28.0 * wine 8.11: this was part of a single snapshot (0627) last week, but was quickly reverted in 0628 as there were issues[1] starting apps. The problem could be identified and fixed. * Python 3.12.0b3 Cheers, Dominique [0] https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… [1] https://bugzilla.opensuse.org/show_bug.cgi?id=1212823

1 0

New Tumbleweed snapshot 20230629 released!
by Dominique Leuenberger 30 Jun '23

30 Jun '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: SDL2 (2.26.5 -> 2.28.0) irqbalance (1.9.2 -> 1.9.2.24.git+184c950) libburn (1.5.4 -> 1.5.6) libdb-4_8 libisofs (1.5.4 -> 1.5.6) libjcat (0.1.13 -> 0.1.14) libjpeg-turbo libzip (1.9.2 -> 1.10.0) openexr (3.1.8 -> 3.1.9) openssl-1_1 openssl-3 openssl perl-Bootloader (1.4 -> 1.5) policycoreutils sddm (0.19.0 -> 0.20.0) systemd transactional-update (4.2.1 -> 4.3.0) === Details === ==== SDL2 ==== Version update (2.26.5 -> 2.28.0) - Update to release 2.28 * Added SDL_HasWindowSurface() and SDL_DestroyWindowSurface() to switch between the window surface and rendering APIs. * Added a display event SDL_DISPLAYEVENT_MOVED which is sent when the primary monitor changes or displays change position relative to each other. * Added the hint SDL_HINT_ENABLE_SCREEN_KEYBOARD to control whether the on-screen keyboard should be shown when text input is active. - Delete 0001-Cleanup-add-brace-6545.patch, 0002-Update-for-SDL3-coding-style-6717.patch, 0003-Clang-Tidy-fixes-6725.patch (inapplicable), 0004-evdev_kbd-Use-current-keymap.patch (merged). ==== irqbalance ==== Version update (1.9.2 -> 1.9.2.24.git+184c950) Subpackages: irqbalance-ui - Resurrect _service file and old git patch no versioning A _service A _servicedata A irqbalance.obsinfo - Update to version 1.9.2.24.git+184c950: * procinterrupts: fix initialisation of regex_t struct * Fix it so we actually stop when we hit an interrupt condition * Fix signedness of error handling * Revert "Fix CPU number condition in service file" * Issue 259: select NL_SKIP / NL_STOP based on error * fix CPU number condition in service file - Already included upstream: D irqbalance-systemd-netlink.patch ==== libburn ==== Version update (1.5.4 -> 1.5.6) - Update to 1.5.6 - Upstream changes: * Bug fix: Overburning with cdrskin option -force ended by a libburn error * New API call burn_write_opts_set_bdr_obs_exempt() * New cdrskin option --bdr_obs_exempt * Officially enabled overburning with burn_write_opts_set_force(,1) ==== libdb-4_8 ==== Subpackages: db48-utils - Fix incomplete license tag. [bsc#1099695] ==== libisofs ==== Version update (1.5.4 -> 1.5.6) - update to 1.5.6: * Bug fix: iso_write_opts_set_part_like_isohybrid() did not cause a MBR partition table if the partitions are data files in the ISO rather than appended * Bug fix: The lseek methods of IsoFileSource for local filesystem and loaded ISO returned libisofs error codes as positive off_t numbers * Bug fix: Freshly cloned data files from imported image were not marked as imported. * Bug fix: Size of further CE area was calculated wrong if its CE entry ended exactly at a block boundary * New iso_write_opts_set_system_area() option bits 16: GPT "Legacy BIOS bootable" and 17: GPT writable * New API calls iso_assess_written_features(), iso_read_image_feature_named(), iso_read_image_features_text() * Allowed lseekable device files with iso_tree_add_new_cut_out_node(). * Proof-of-concept by Ivan Shmakov. * New API call iso_write_opts_set_max_ce_entries() ==== libjcat ==== Version update (0.1.13 -> 0.1.14) - update to 0.1.14: * Fix header includes (Daisuke Fujimura) * Fix prefix of LIBJCAT_CHECK_VERSION (Richard Hughes) * Use project_source_root to fix building as a subproject ==== libjpeg-turbo ==== Subpackages: libjpeg8 libturbojpeg0 - merge two spec files into one ==== libzip ==== Version update (1.9.2 -> 1.10.0) - version update to 1.10.0 * Make support for layered sources public. * Add `zip_source_zip_file` and `zip_source_zip_file_create`, deprecate `zip_source_zip` and `zip_source_zip_create`. * Allow reading changed file data. * Fix handling of files of size 4294967295. * `zipmerge`: copy extra fields. * `zipmerge`: add option to keep files uncompressed. * Switch test framework to use nihtest instead of Perl. * Fix reading/writing compressed data with buffers > 4GiB. * Restore support for torrentzip. * Add warnings when using deprecated functions. * Allow keeping files for empty archives. * Support mbedTLS>=3.3.0. * Support OpenSSL 3. * Use ISO C secure library functions, if available. ==== openexr ==== Version update (3.1.8 -> 3.1.9) Subpackages: libIex-3_1-30 libIlmThread-3_1-30 libOpenEXR-3_1-30 - version update to 3.1.9 * Patch release that addresses miscelleneous build and doc issues, as well as: . OSS-fuzz 59382 Heap-buffer-overflow in internal_huf_decompress ==== openssl-1_1 ==== Subpackages: libopenssl1_1 - Improve cross-package provides/conflicts [boo#1210313] * Add Provides/Conflicts: ssl-devel * Remove explicit conflicts with other devel-libraries ==== openssl-3 ==== Subpackages: libopenssl3 libopenssl3-32bit - Improve cross-package provides/conflicts [boo#1210313] * Add Provides/Conflicts: ssl-devel * Remove explicit conflicts with other devel-libraries * Remove Provides: openssl(cli) - it's managed by meta package ==== openssl ==== - Improve cross-package provides/conflicts [boo#1210313] * Add Conflicts: openssl(cli) for mutual exclusion between openssl, openssl-1_0_0 and libressl. ==== perl-Bootloader ==== Version update (1.4 -> 1.5) - merge gh#openSUSE/perl-bootloader#153 - check whether grub2-install supports --suse-force-signed option - 1.5 ==== policycoreutils ==== Subpackages: policycoreutils-lang policycoreutils-python-utils python3-policycoreutils - Recommend setools-console as these cli tools compliment policycoreutils for analysis and debugging of policy issues - Add requires for policycoreutils-devel for selinux-policy-devel as policycoreutils-devel requires this - Adjust python requirement for newer SLES versions - Add Leap compatibility symlinks between /usr/sbin and /sbin (bsc#1210482) - Refresh GPG keyring ==== sddm ==== Version update (0.19.0 -> 0.20.0) Subpackages: sddm-branding-openSUSE - Add patch to fix parsing some session .desktop files: * 0001-Session-Parse-.desktop-files-manually-again.patch - Update to 0.20.0: + Initial Qt6 support (Will break themes which rely on Qt 5) + **Experimental** support for running the greeter with Wayland + Enable HiDPI scaling by default + Support for running X11 display server without root privileges + Greeter: Support setting environment variables + Allow additional env vars to be defined in session files (#1370) + Make accountsservice data directory overridable via CMake + Add support for X11 cursor size configuration + Search XDG Base Directories for session files + Display information and errors from PAM in the greeter (#1486) * Remove the Passwd backend, make PAM mandatory * Bump minimum CMake version to 3.4 * Introduce SDDM_INITIAL_VT as the TTY to reach out to * Set XCURSOR_SIZE in XorgDisplayServer::start * Make it possible to start ConsoleKit D-Bus service during SDDM startup * pam: Do not use tally2 if faillock is present * Bump to Qt 5.15, port away from deprecated APIs * remove `-logfile` arg that causes server to fail - Set RUNTIME_DIR to /run/sddm when using systemd to follow FHS 3.0 - Use avatars in FacesDir first and if not found search other locations - Switch to using libxau with `FamilyWild` (#1230) - New interface to access config values from themes (#1097) - Session names are translated now (#1645) - Many more bugfixes - Important change: SDDM now uses the first free VT, it no longer prefers tty7 (the InitialVT option in 00-general.conf has no effect anymore) - Remove patches, now upstream: * 0001-Use-PAM-s-username.patch * 0001-Add-fish-etc-profile-and-HOME-.profile-sourcing-1331.patch * 0004-Retry-starting-the-display-server.patch * 0001-disable-automatic-portal-launching.patch * 0001-Remove-suffix-for-Wayland-session.patch * 0001-Redesign-Xauth-handling.patch * 0002-Use-QTemporaryFile-with-xauth_XXXXXX-ih-XAuth.patch * 0001-Process-all-available-auth-messages-in-a-loop.patch * 0001-Avoid-starting-a-new-session-on-exit.patch - Remove files, now upstream: * sddm-tmpfiles.conf * system-user-sddm.conf - Rebased patches: * 0001-Redesign-Xauth-handling.patch * 0001-Write-the-daemon-s-PID-to-a-file-on-startup.patch * 0001-Set-XAUTHLOCALHOSTNAME-in-sessions.patch * 0001-Read-the-DISPLAYMANAGER_AUTOLOGIN-value-from-sysconf.patch * sddm-service-handle-plymouth.patch * 0003-Leave-duplicate-symlinks-out-of-the-SessionModel.patch - Drop patches, not applicable anymore: * 0001-Systemd-service-unit-Use-tty7-by-default.patch - Add 11-kwin_wayland.conf to use kwin_wayland as wayland compositor ==== systemd ==== Subpackages: libsystemd0 libsystemd0-32bit libudev1 systemd-32bit systemd-container systemd-coredump systemd-lang udev - Change the group owner of /run/lock from "lock" to "root" (bsc#1212674) This allows to drop the dependency "Requires: group(lock)" that was introduced previously to make sure that the "lock" group will be kept around. This dependency introduced a dependency cycle. - file-triggers: fix a typo that sneaked in the script dealing with tmpfiles (bsc#1212733) ==== transactional-update ==== Version update (4.2.1 -> 4.3.0) Subpackages: dracut-transactional-update libtukit4 transactional-update-zypp-config tukit tukitd - Version 4.3.0 - Replace custom tu-rebuild-kdump-initrd with call to mkdumprd [gh#openSUSE/transactional-update#107]. - Add support for libmount 2.39. The behaviour change was not intended and will be changed in 2.39.1 (see [gh#util-linux/util-linux#2326], but it was easy to fix it anyway. - Honor LIBMOUNT_DEBUG variable for additional output.

1 0

python-aiobotocore removed?
by Adrian Glaubitz 30 Jun '23

30 Jun '23

Hello! I just wanted to update python-aiobotocore in d:l:p:aws but noticed the package is no longer there. I can't seem to find any hint on why the package was removed and I'm a bit surprised since it has still some reverse dependencies such as python- s3fs. Anyone knows? Adrian

4 6

Feedback
by Leandro Almeida 30 Jun '23

30 Jun '23

Opensuse Tumbleweed Kde Plasma, Wayland Laptop intel Hello, in steam games, the fps are low when connected to AC power. But when using this BAT battery, the fps go up and the game is more fluid. I use tpl linrunner, in tlp.conf settings it has cpu governor in performance for ac and bat, but prioritizing performance in Ac and economy in Bat in the other parameters. When the cpu governor is in schedutil for both ac and bat, the system tends to completely freeze at random times. Maybe the tlp is in conflict with some system energy manager, or the kernel, bios 🤔. After formatting the pc, and using without touching anything, just as it comes, the system flows well. But after enabling tlp, using the sysctl command that shows in tlp-stat -v, and configuring tlp.conf, removing the quotes to enable custom options , with maximum performance in energy and etc, and restarting the system, the system has these constant brakes 🤔🤔 . In games also erasing the screen and turning off the joystick after a while, 🤔🤔 Thank you very much in advance 👍😅

1 0

[opensuse-factory] reproducible builds status 2023-06
by Bernhard M. Wiedemann 30 Jun '23

30 Jun '23

Hi, This month, I did some more patches again. Even found a toolchain patch for python310. python3 still has some issues left around .pyc file reproducibility. javadoc and xmvn are still problematic. ghc has a regression fix pending (parallelism). doxygen has some filesystem ordering issue. and more esoteric things like octave, racket. These big classes hide much of the remaining individual issues. I skipped reports for 2 months but you can find result uploads in https://rb.zq1.de/compare.factory-20230502/ and https://rb.zq1.de/compare.factory-20230602/ Here are the autogenerated bits: last month's status: https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… Last months' reproducible builds project updates (including my work): https://reproducible-builds.org/reports/2023-05/ I uploaded https://rb.zq1.de/compare.factory-20230630/ today https://rb.zq1.de/spec/glossar.txt explains the meaning of below values: total-packages: 14743 (-1) build-tried: 14709 (+19) build-failed: 70 (+22) build-n-a: 181 (-21) build-succeeded: 14461 (+21) build-official-failed+na: 73 (-94) build-compare-failed: 462 (-21) build-compare-succeeded: 13999 (+42) verify-failed: 859 (+461) verified-semi-reproducible: 13286 (+644) bit-by-bit-identical: 13888 (+124) not-bit-by-bit-identical: 572 (-101) not-bit-by-bit-identicalcheck: 573 (-103) https://rb.zq1.de/compare.factory-20230630/graph.png shows the change over time https://rb.zq1.de/compare.factory-20230630/unreproduciblerings.txt lists very unreproducible core packages (bootstrap+DVD) Of the badly unreproducible packages, 5 were in ring0 66 were in ring1 That makes it 71/3316 => 2.14 % which is below the overall average of 462/14461 => 3.19 % 572/14461 => 3.96 % of packages are not perfectly reproducible package notes: ==> ./bcachefs-tools/.rb.notes <== => https://github.com/koverstreet/bcachefs-tools/pull/145 filesys sort find/cc link order ==> ./cockpit-machines/.rb.notes <== => https://github.com/cockpit-project/cockpit/pull/18994 gzip mtime /usr/share/cockpit/machines/index.css.gz ==> ./fasterxml-oss-parent/.rb.notes <== mvn toolchain random UUID ==> ./gr-funcube/.rb.notes <== filesys toolchain doxygen-1.9.6 /usr/share/doc/packages/gr-funcube/xml/index.xml ==> ./gtk2hs-buildtools/.rb.notes <== ghc toolchain parallelism ==> ./gutenprint/.rb.notes <== => https://sourceforge.net/p/gimp-print/source/merge-requests/2/ date+time +++ new//usr/lib64/gutenprint/5.3/config.summary 2023-04-22 00:00:00.000000000 +0000 ==> ./helix/.rb.notes <== rust: parallelism into machine code? +++ new /usr/lib64/helix/hx (disasm) ==> ./hledger-interest/.rb.notes <== ghc toolchain? --- old /usr/bin/hledger-interest (objdump) ==> ./intel-graphics-compiler/.rb.notes <== ASLR order issues in /home/abuild/rpmbuild/BUILD/build/install_manifest.txt ==> ./jackson-parent/.rb.notes <== java maven xmvn random uuid ==> ./kubernetes1.26/.rb.notes <== random go tmp build path ==> ./kubernetes1.27/.rb.notes <== go random tmp dir +++ new /usr/bin/kubelet1.27 (objdump) ==> ./kxml/.rb.notes <== java maven random UUID, javadoc +++ new//usr/share/maven-metadata/kxml.xml 2019-05-03 12:00:00.000000000 +0000 ==> ./loki/.rb.notes <== .note.go.buildid ==> ./mage/.rb.notes <== => https://github.com/magefile/mage/pull/474 date+time ; golang from .goreleaser.yml: ldflags: -s -w -X github.com/magefile/mage/mage.timestamp={{.Date}} -X github.com/magefile/mage/mage.commitHash={{.Commit}} -X github.com/magefile/mage/mage.gitTag={{.Version}} ==> ./mumble/.rb.notes <== #=> https://github.com/mumble-voip/mumble/pull/6147 filesys (python listdir) in /home/abuild/rpmbuild/BUILD/mumble-1.5.517/build/src/mumble/mumble_client_object_lib_autogen/IZWCZGADZF/qrc_mumble_flags.cpp 2023-06-09 05:38:14.144000000 +0000 ==> ./nyxt/.rb.notes <== nyxt binary varies by pid=2536 dir=/home/abuild/rpmbuild/BUILD/nyxt-3.2.1/ exec="/usr/bin/sbcl" ["sbcl" "--dynamic-space-size" "3072" "--no-userinit" "--non-interactive" "--eval" "(require \"asdf\")" "--eval" "(when (string= \"true\" \"true\") (setf asdf:*default-source-registries* (list (quote asdf/source-registry:environment-source-registry))) (asdf:clear-configuration) (asdf:load-asd \"/home/abuild/rpmbuild/BUILD/nyxt-3.2.1//libraries/nasdf/nasdf.asd\") (asdf:load-asd \"/home/abuild/rpmbuild/BUILD/nyxt-3.2.1//nyxt.asd\") (asdf:load-system :nyxt/submodules))" "--eval" "(asdf:load-asd \"/home/abuild/rpmbuild/BUILD/nyxt-3.2.1//libraries/nasdf/nasdf.asd\")" "--eval" "(asdf:load-asd \"/home/abuild/rpmbuild/BUILD/nyxt-3.2.1//nyxt.asd\")" "--eval" "(format t \"~&; NASDF ~a: ~a~&\" (asdf:component-version (asdf:find-system :nasdf)) (nth-value 2 (asdf:locate-system :nasdf)))" "--eval" "(when (find-package :ql) (funcall (read-from-string \"ql:quickload\") :cffi))" "--eval" "(when (and (find-package :cffi) (uiop:getenv \"GUIX_ENVIRONMENT\")) (pushnew (pathname (format nil \"~a/lib/\" (uiop:getenv \"GUIX_ENVIRONMENT\"))) (symbol-value (read-from-string \"cffi:*foreign-library-directories*\" )) :test (quote equal)))" "--eval" "(asdf:load-system :nyxt/gi-gtk-application)" "--eval" "(asdf:make :nyxt/install)" "--eval" "(uiop:quit)"] - started ==> ./osgi-service-jdbc/.rb.notes <== java pom date+time ==> ./pcr-oracle/.rb.notes <== => https://github.com/okirch/pcr-oracle/pull/29 date (shell) in /usr/share/man/man8/pcr-oracle.8.gz ==> ./photoqt/.rb.notes <== Qt qrc mtimes /home/abuild/rpmbuild/BUILD/photoqt-1.7/build/qrc_lang.cpp ==> ./pijul/.rb.notes <== rust zstd filesys order vendor-issue ==> ./python-azure-mgmt-datashare/.rb.notes <== python310 toolchain pyc opt-1 ASLR from dir=/home/abuild/rpmbuild/BUILD/azure-mgmt-datashare-1.0.0 exec="/usr/bin/python3.10", ["/usr/bin/python3.10", "setup.py", "install", "-O1", "--skip-build", "--force", "--root", "/home/abuild/rpmbuild/BUILDROOT/python-azure-mgmt-datashare-1.0.0.0-0.x86_64", "--prefix", "/usr"] - started ==> ./python-nss/.rb.notes <== => SR 1094593 Drop sphinx .doctrees /usr/share/doc/packages/python-nss-doc/html/.doctrees/environment.pickle ==> ./shadowsocks-rust/.rb.notes <== => https://github.com/AlephAlpha/build-time/pull/5 toolchain date+time +++ new /usr/bin/sslocal (objdump) ==> ./sonatype-plugins-parent/.rb.notes <== java xmvn random uuid ==> ./tvm/.rb.notes <== python .pyc ASLR /usr/lib64/python3.10/site-packages/tvm/exec/__pycache__/popen_worker.cpython-310.opt-1.pyc ==> ./warpinator/.rb.notes <== => https://github.com/linuxmint/warpinator/pull/178 date +++ new//usr/share/metainfo/org.x.Warpinator.appdata.xml 2023-04-28 00:00:00.000000000 +0000

1 0

Feedback
by Leandro Almeida 30 Jun '23

30 Jun '23

Hi, leaving feedback and suggestion. Feedback 1 - I formatted the PC again yesterday, with the latest online installer on the website, Tumbleweed 20230628. During the process, the installer stopped the internet and came back several times, both on WiFi and on the wired with RJ45. I used the wire to format. During use, there are times that the distribution has flaws in the use of the internet as well. 2 - 4k60fps, 8k60fps, av1, vp9 etc, are crashing on youtube. The pc supports it, on windows 11 runs 4k well👍 3 - In the terminal, with the tlp-stat -v command, it shows that there is a driver missing for the host bridge, system peripheral, and ISA bridge. Also the touchpad disable button is not working on linux. The battery is not recharged when it is above 90%. I believe it is because of the acpi bios error, acpi not found, sgx disable on bios and x509 error that always shows at the beginning of the boot. Although everything is up to date and with sgx enabled in the bios. 😅 4 - in the settings of the dolphin file manager, sending usage comments did not appear. In system settings, option to configure system updates did not appear, options to configure offline manual update etc. Suggestion 1 - Greater hardware acceleration support. Louder audio volume. Free up all onboard video memory, on my pc it reaches 8GB according to the manufacturer's website. I upgraded the ram memory to the maximum supported 👍😃😃 2 - If possible, optimize for steam to go better, with more proton support, steam play etc. I play games: Mudrunner (proton), Fishing planet (linux native). I also have Burnout paradise remastered, but I haven't been able to play it yet, it needs more support too. To open Ea play and game well. 👍😅 3 - Make Kde plasma smoother with wayland, because it has low fps, 😅 4 - Option to configure the dead zone of the joystick in the system settings. For the greatest possible accuracy, and integrate well with the steam settings. 5 - Optimize the distribution speed when the pc has an ssd. Generate lower temperature on pc 👍😅 Secure boot, encryption and other security parameters enabled, since formatting. Swap with same size as ram. Tlp linerunner activated, with priority to maximum performance in AC. I use headphones from LG too. Generic usb joystick too. Lenovo Ideapad 330-15IGM 81FN kde plasma wayland Intel Celeron N4000 (2) 1.10GHz Max 2.60GHz Intel uhd 600 i915 geminilake glk2 Crucial 8GB Ram SSD 256GB Ceamere Abnt2 numerical keyboard PtBr UTF8 1366x768p 60Hz Does not have cooler Thanks, 👍👍😅

1 0

Problem with update of gcompris
by Freek de Kruijf 29 Jun '23

29 Jun '23

Already a few days, when doing a "zypper dup" on Tumbleweed I get the following messages. Problem: the installed gcompris-qt-voices-3.2~20230329-1.1.noarch requires 'gcompris-qt = 3.2', but this requirement cannot be provided deleted providers: gcompris-qt-3.2-1.2.x86_64 Solution 1: Following actions will be done: keep obsolete gcompris-qt-3.2-1.2.x86_64 keep obsolete gcompris-qt-activities-3.2-1.2.noarch Solution 2: deinstallation of gcompris-qt-voices-3.2~20230329-1.1.noarch Solution 3: break gcompris-qt-voices-3.2~20230329-1.1.noarch by ignoring some of its dependencies -- fr.gr. member openSUSE Freek de Kruijf

2 1

New Tumbleweed snapshot 20230628 released!
by Dominique Leuenberger 29 Jun '23

29 Jun '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: python311 python311-core === Details === ==== python311 ==== Subpackages: python311-curses python311-dbm - Remove obsolete_python_versioned macro again. This mechanism has no business to be in Python 3.11, because we have abolished with it whole interpreter+setuptools+pip product. Python 3.11 should not be replaced by later versions anymore. ==== python311-core ==== Subpackages: libpython3_11-1_0 python311-base - Remove obsolete_python_versioned macro again. This mechanism has no business to be in Python 3.11, because we have abolished with it whole interpreter+setuptools+pip product. Python 3.11 should not be replaced by later versions anymore.

1 0

ANNOUNCE: cleanup in progress on OBS SUSE:ALP projects
by Frederic Crozat 29 Jun '23

29 Jun '23

Hi all, Following Richard presentation yesterday on "openSUSE response to SUSE:ALP" (you can watch it on https://www.youtube.com/watch?v=-y2ewBG62J4 with Q&A captured https://etherpad.opensuse.org/p/weeklymeeting20230627 ), I'm preparing a long awaited cleanup on SUSE:ALP project on OBS: * SUSE:ALP parent project will be purged: all packages in SUSE:ALP parent project will be removed. This project was no longer used since we switch to the new project setup for ALP March prototype. It will stay as parent project. Staging projects for SUSE:ALP main project have been removed and Rings projects will be removed too. * SUSE:ALP:PowerPC, SUSE:ALP:zSystems, SUSE:ALP:RISCV: those per-arch projects following SUSE:ALP will be dropped too. PowerPC and zSystems have been merged into the main codestream. We are still looking where to build RISCV port in a way which would not slow product development for other architectures. * SUSE:ALP:ToTest / SUSE:ALP:PUBLISH will be removed too. It contains the December prototype, we'll see if we want to keep it somewhere or just drop it. * For bootstrapping a codestream, we have SUSE:ALP:Workbench. Initial version was done on OBS in SUSE:ALP:Workbench but is no longer used. SUSE:ALP:Workbench:1.0 contains a mirror of the SUSE internal built version (following all SUSE policies and certification for codestream). SUSE:ALP:Workbench content will be purged, only SUSE:ALP:Workbench:1.0 will be kept. Note that SUSE:ALP:Workbench:1.0 is a frozen copy of Factory, it won't be changing. * Codestreams will be stored in SUSE:ALP:Source. ** For March prototype, we had source cherry-picked from Factory packages (95% and a few others with not-yet merged into Factory) stored in SUSE:ALP:Source:Standard:0.1. Build packages happened in SUSE:ALP:Source:Standard:Core:0.1. This project will be kept for now as reference. ** We had 2 "Products" prototypes in March, Micro ( SUSE:ALP:Products:Micro:0.1) and BedRock (SUSE:ALP:Products:Bedrock:0.1). Installer was also built as a product in SUSE:ALP:Products:Installer:0.8. ** Please note BedRock will no longer be developed. We will focus on developing Granite instead ** From now on, we are building SUSE ALP codestream on SUSE Internal Build Service (following SUSE certifications). Build is mirrored on OBS at SUSE:ALP:Source:Standard:Core:1.0:Build. Source code is available at https://src.suse.de/products/SUSE_ALP_Standard (OBS doesn't allow yet to browse scmsync git in its webUI). We'll try to keep you updated if there are other changes. -- Frederic CROZAT Enterprise Linux OS and Containers Architect SUSE

3 4

New Tumbleweed snapshot 20230627 released!
by Dominique Leuenberger 28 Jun '23

28 Jun '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: SVT-AV1 (1.4.1 -> 1.6.0) acpica (20221020 -> 20230331) ceph ffmpeg-4 flac (1.4.2 -> 1.4.3) gegl (0.4.44 -> 0.4.46) kdump (1.0.3 -> 1.9.2) libHX (4.12 -> 4.13) libnettle lockdev lvm2 lvm2-device-mapper mozjs102 (102.11.0 -> 102.12.0) perl-Bootloader (1.2 -> 1.4) pipewire (0.3.71 -> 0.3.72) publicsuffix (20230613 -> 20230616) python-Twisted python-cryptography (40.0.2 -> 41.0.1) python-qt5 python-service_identity (21.1.0 -> 23.1.0) rtkit rubygem-asciidoctor (2.0.18 -> 2.0.20) snapper (0.10.4 -> 0.10.5) strace (6.3 -> 6.4) yast2-kdump (4.6.0 -> 4.6.1) zlib-ng-compat === Details === ==== SVT-AV1 ==== Version update (1.4.1 -> 1.6.0) - Enable build on riscv64 - Update to release 1.6.0 * Improved the tradeoffs for the random access mode across presets M1-M13: * Speeding up the higher quality presets by 30-40% * Improving the BD-rate by 1-4% for the faster presets * Improved the tradeoffs for the low delay mode for both screen content and non-screen content encoding modes * Added a toggle to remove the legacy one-frame buffer at the input of the pipeline allowing the low delay mode to operate at sub-frame processing latencies * Added a new API allowing the user to specify quantization offsets for a region of interest per frame ==== acpica ==== Version update (20221020 -> 20230331) - Update to version 20230331 * Add C Flexible Array support. * Add support for 64 bit LoongArch compilation. * Add first batch of RISC-V related definitions. * hwvalid: Drop port I/O validation. * iASL: Added full macro support in the preprocessor. * Add support for AMD Secure Processor Table (ASPT) version 1. * Add support for Arm's MPAM ACPI table version 2. * ACPI 6.5: MADT: add support for trace buffer extension in GICC. * Headers: Delete bogus NodeArray array of pointers from AEST table. ==== ceph ==== Subpackages: librados2 librbd1 - Remove _constraints file, add README-constraints.txt and pre_checkin.env ==== ffmpeg-4 ==== Subpackages: libavcodec58_134 libavformat58_76 libavutil56_70 libpostproc55_9 libswresample3_9 libswscale5_9 - Add 0001-avcodec-libsvtav1-remove-compressed_ten_bit_format-a.patch ==== flac ==== Version update (1.4.2 -> 1.4.3) Subpackages: libFLAC++10 libFLAC12 - Update to version 1.4.3: + General * All PowerPC-specific code has been removed, as it turned out those improvements didn't actually improve anything * Large improvements in encoder speed for all presets. The largest change is for the fastest presets and for 24-bit and 32-bit inputs. * Small improvement in decoder speed for BMI2-capable CPUs * Various documentation fixes and cleanups * Various fixes * Fix building on Universal Windows Platform + flac * A lot of small fixes for bugs found by fuzzing * Various improvements to the --keep-foreign-metadata and - -keep-foreign-metadata-if-present options on decoding + The output format (WAV/AIFF/RF64 etc.) is now automatically selected based on what kind of foreign metadata is stored + Decoded file is checked afterwards, to see whether stored foreign format data agrees with FLAC audio properties + AIFF-C sowt data can now be restored * Add --force-legacy-wave-format option, to decode to WAV with WAVEFORMATPCM where WAVE_FORMAT_EXTENSIBLE would be more appropriate * Add --force-aiff-c-none-format and --force-aiff-c-sowt-format to decode to AIFF-C * The storage of WAVEFORMATEXTENSIBLE_CHANNEL_MASK is no longer restricted to known channel orderings * Throw an error when WAV or AIFF files are over 4GiB in length and the --ignore-chunk-sizes option is not set * Warn on testing files when ID3v2 tags are found * Warn when data trails the audio data of a WAV/AIFF/RF64/W64 file * Fix output file not being deleted after error on Windows * Removal of the --sector--align option + metaflac * A lot of small fixes for bugs found by fuzzing * Added options --append and --data-format, which makes it possible to copy metadata blocks from one FLAC file to another * Added option --remove-all-tags-except * Added option --show-all-tags + libFLAC * No longer write seektables to Ogg, even when specifically asked for. Seektables in Ogg are not defined * Add functions FLAC__metadata_object_set_raw and FLAC__metadata_object_get_raw to convert between blob and FLAC__StreamMetadata + Build system * Autoconf (configure): The option --enable-64-bit-words is now on by default * CMake: The option ENABLE_64_BIT_WORDS is now on by default + Testing/validation * Fuzzers were added for the flac and metaflac command line tools * Fuzzer coverage was improved - Changed source to github link since it wasn't released in the xiph page. ==== gegl ==== Version update (0.4.44 -> 0.4.46) Subpackages: gegl-0_4 gegl-0_4-lang libgegl-0_4-0 - Update to version 0.4.46: + Operations: - local-threshold: new operation that does neighborhood aware and optionallyantialiased thresholding of an image. - chamfer: new operation in workshop that useis distance-transform and emboss or LinuxBeaverâs research into modeling different bevels with combinations of blurs. - ff-load,ff-save: clean up of deprecated API, builds with ffmpeg-6.0 but ff-save hasnât been made to work with this release of ffmpeg yet. + Updated vendored libraries: - ctx and libnsgif have been updated from upstream. + Build: - Depend on meson 0.55.0 - Various cleanups including re-enabling of deprecation warnings. - make ctx be an internal library. ==== kdump ==== Version update (1.0.3 -> 1.9.2) - upgrade to version 1.9.2 * adapt kdumptool to work with YaST * wait for SMTP server to become reachable - upgrade to version 1.9.1 * reimplement e-mail notifications - upgrade to version 1.9 * complete rewrite of kdump-save and parts of initrd generation * mounts are now entirely handled by dracut * deprecated: split dumps (saving to more than one targets at once) * deprecated: KDUMPTOOL_FLAGS option removed; original XENALLDOMAINS is now the default, disable with MAKEDUMPFILE_OPTIONS=-X * deprecated: notification e-mails * deprecated: copying of the kernel image (KDUMP_COPY_KERNEL) * FTP and SFTP are now handled by lftp, added to the spec file as Recommends: * SSH and SFTP now support passwords provided in the URL * fixed KDUMP_SSH_HOST_KEY, now needs to include the key type * new KDUMP_DUMPFORMAT=raw, will save an unmodified /proc/vmcore * the output directory name is now YYYY-MM-DD-HH-MM, i.e. the separator between HH and MM changed * unified default KDUMP_SAVEDIR across config, code and man to /var/crash * ping is now used to detect network is up; disable with KDUMP_NET_TIMEOUT=0 * all the yes/no options changed to true/false; yes/no/1/0 still accepted * put the kdump initrd in /var/lib/kdump/initrd * use default kernel symlink (/boot/vmlinuz) instead of kernel autodetection * KDUMP_KERNELVER can specify an absolute path to a kernel image * improved mkdumprd detection of changed settings * removed all of kdumptool except the calibrate subcommand * cleaned up dependencies (ssh now only Recommended) ==== libHX ==== Version update (4.12 -> 4.13) - Update to release 4.13 * io: do not fail HX_mkdir when a component is a symlink to a directory * xml_helper: fix infinite recursion in xml_getnsprop ==== libnettle ==== Subpackages: libhogweed6 libhogweed6-32bit libnettle8 libnettle8-32bit - Add the architecture specific READMEs as provided by upstream. ==== lockdev ==== Subpackages: liblockdev1 - lock group is created by system-group-hardware - use sysusers mechanism to create lock group and tmpfiles for /{var/,}run (boo#1078466) - add lockdev-debug.diff ==== lvm2 ==== Subpackages: liblvm2cmd2_03 - multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613) - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch ==== lvm2-device-mapper ==== Subpackages: device-mapper libdevmapper-event1_03 libdevmapper1_03 - multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613) - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch ==== mozjs102 ==== Version update (102.11.0 -> 102.12.0) - Update to version 102.12.0: + Various security fixes. + CVE-2023-34414: Click-jacking certificate exceptions through rendering lag. ==== perl-Bootloader ==== Version update (1.2 -> 1.4) - merge gh#openSUSE/perl-bootloader#151 - default-settings: support non-x86 architectures - add man pages for all commands - 1.4 - merge gh#openSUSE/perl-bootloader#149 - use signed grub EFI binary when updating grub in default EFI location (bsc#1210799) - 1.3 ==== pipewire ==== Version update (0.3.71 -> 0.3.72) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-jack pipewire-lang pipewire-libjack-0_3 pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Update to version 0.3.72: * Highlights - Fix a critical bug that would refuse to update the samplerate or buffersize in JACK clients. - A new module-netjack2-driver and module-netjack2-manager were added that are compatible with NETJACK2. This allows PipeWire to become a NETJACK2 manager or a driver between JACK2 or PipeWire servers. - Support was added for firewire devices with FFADO. This is untested for now and MIDI is not implemented yet. - The node scheduling was optimized some more. External drivers are now as efficient as in-server ones. This should improve performance of various drivers such as bluetooth and JACK based drivers. - Many, many bug fixes and a ton of improvements. * PipeWire - pw-filter can now be used to write sinks and sources. - The node activation for drivers was changed. The driver now does not need to go to the server to start the processing cycle. This makes out-of-server drivers as efficient as in-server drivers. - Don't try to use drivers with 0 priority as fallback drivers. This avoids making the screencast driver a driver for audio. - Improve xrun count reporting in pw-top and the profiler. Now each node has their own xrun counter updated when it fails to complete processing during the cycle. - pw-filter now also has support for TRIGGER. - A potential fd leak was found when fds were send to a zombie client. - Fix a bug where monitor or capture streams were logged twice in the profiler. - Remove stream hooks safely. - A bug in serialization of container properties was fixed. This could result in truncated property values. - The PIPEWIRE_AUTOCONNECT environment variable now always overrides the autoconnect settings of streams. - Node, port and link destroy now avoids some useless work. - Port will now try to renegotiate a new format when idle. * Modules - The module-sap now is more compatible with AES67. - A new FFADO driver module was added. This is completely untested because of lack of hardware. Please test and report issues. - A new NETJACK2 driver and a NETJACK2 manager module were added. These should be drop in replacements for the JACK2 parts. - The RAOP discover module now tries harder to only list devices once. - The zeroconf discover module now tries harder to only list devices once. - The RAOP sink module now handles latency better and is compatible with some more devices. - The loopback and filter-chain modules now always dequeue the last input buffer to avoid stuttering in some cases. - The SPA node factory module can now also export nodes. This is used to export the PTP clock from the AES67 config file. - A bug in module-jack-tunnel was fixed that would cause stuttering and corrupted output in some cases. - The resampler is now disabled in module-loopback and filter-chain when the samplerate is set to follow the graph rate. - The way the mixer peer is sent to clients was improved. It is now also possible to let a remote node know about mixer port removes, which can avoid memory leaks and some code simplifications. * SPA - Monitor ports now report latency correctly. - The ALSA plugin now uses htimestamp to get a more accurate ringbuffer position to estimate the clock skew. - The channelmixer now has min/max-volume settings to limit or fix the volume. - The ALSA plugin can now control the playback and capture rate of USB gadgets. This can avoid resampling and instead use the USB feedback to control the rate. - The ALSA output to multiple devices has been improved, some lockups are avoided when the device ringbuffer is full. - The compress-offload sink has improved negotiation. * pulse-server - Only try to use GSettings when the schema exists. - @DEFAULT_SOURCE@, @DEFAULT_SINK@ and @DEFAULT_MONITOR@ are now correctly handled as targets in playback and capture streams. - 2 new quirks are added to disable volume updates on sinks/sources. - The virtual-sink and virtual-source modules were added. These are really example modules but actually also work and are useful on PulseAudio so implement them as well. - Fix initial stream volumes. * Bluetooth - Only register A2DP or BAP when we have codecs. - Include codec into the media.name * JACK - Fix a critical bug that would refuse to update the samplerate or buffersize. - Improve updates of samplerate/buffersize, delay the updates until the client is activated. - Use the new mix-info updates to simplify the mixer setup and peer detection. * GStreamer ... changelog too long, skipping 5 lines ... the ld.so.conf.d file). ==== publicsuffix ==== Version update (20230613 -> 20230616) - Update to version 20230616: * Add 63 geographical domains for .vn ccTLD (#1776) * util: gTLD data autopull updates for 2023-06-16T15:12:40 UTC (#1778) * util: gTLD data autopull updates for 2023-06-14T15:13:06 UTC (#1777) ==== python-Twisted ==== Subpackages: python311-Twisted python311-Twisted-tls - add regenerate-cert-to-work-with-latest-service-identity.patch remove-pynacl-optional-dependency.patch: backports from main git to fix tests with newer dependency versions ==== python-cryptography ==== Version update (40.0.2 -> 41.0.1) - update to 41.0.1 (bsc#1212568): * Temporarily allow invalid ECDSA signature algorithm parameters in X.509 certificates, which are generated by older versions of Java. * Allow null bytes in pass phrases when serializing private keys. * **BACKWARDS INCOMPATIBLE:** Support for OpenSSL less than 1.1.1d has been removed. Users on older version of OpenSSL will need to upgrade. * **BACKWARDS INCOMPATIBLE:** Support for Python 3.6 has been removed. * **BACKWARDS INCOMPATIBLE:** Dropped support for LibreSSL < 3.6. * Updated the minimum supported Rust version (MSRV) to 1.56.0, from 1.48.0. * Added support for the :class:`~cryptography.x509.OCSPAcceptableResponses` OCSP extension. * Added support for the :class:`~cryptography.x509.MSCertificateTemplate` proprietary Microsoft certificate extension. * Implemented support for equality checks on all asymmetric public key types. * Added support for ``aes256-gcm(a)openssh.com`` encrypted keys in :func:`~cryptography.hazmat.primitives.serialization.load_ssh _private_key`. * Added support for obtaining X.509 certificate signature algorithm parameters (including PSS) ==== python-qt5 ==== - Fix shell stubs of pyuic5 pylupdate5 pyrcc5 in order to run the correct interpreter ==== python-service_identity ==== Version update (21.1.0 -> 23.1.0) - Update to 23.1.0 * Removed - All Python versions up to and including 3.7 have been dropped. - Support for commonName in certificates has been dropped. It has been deprecated since 2017 and isn't supported by any major browser. - The oldest supported pyOpenSSL version (when using the pyopenssl backend) is now 17.0.0. When using such an old pyOpenSSL version, you have to pin cryptography yourself to ensure compatibility between them. Please check out contraints/oldest-pyopenssl.txt to verify what we are testing against. * Deprecated - If you've used service_identity.(cryptography|pyopenssl).extract_ids(), please switch to the new names extract_patterns(). #56 * Added - service_identity.(cryptography|pyopenssl).extract_patterns() are now public APIs (FKA extract_ids()). You can use them to extract the patterns from a certificate without verifying anything. #55 - service-identity is now fully typed. #57 ==== rtkit ==== - rtkit-daemon: Don't log debug messages by default (bsc#1206745). Added patch(es): * rtkit-silent-debug-messages-by-default.patch ==== rubygem-asciidoctor ==== Version update (2.0.18 -> 2.0.20) - update to 2.0.20 Bug Fixes:: * Update `release-version` attribute in READMEs and man page during release * Rebuild man page during release === Details {url-repo}/releases/tag/v2.0.20[git tag] | {url-repo}/compare/v2.0.19\...v2.0.20[full diff] // end::compact[] == 2.0.19 (2023-05-17) - @mojavelinux Improvements:: * Return empty string instead of nil if raw or verbatim block has no lines * Don't uppercase monospace span in section title in manpage output (#4402) * Simplify processing of implicit link (i.e., autolink) by separating implicit and explicit match * Generate partintro block consistently (#4450) * Add Kiswahili translation for built-in labels (PR #4454) (*@bkmgit*) Compliance:: * Fix call order so use of an include file with invalid encoding continues to raise error when using Ruby >= 3.2.0 * Fix test assertion for fallback Rouge stylesheet to be compatible with Rouge 4.1 (#4406) (*@tmzullinger*) * Support `notitle` option on section as alternative to `untitled` to hide title (#4437) * Add support for Haml 6 to template converter (#4429) Bug Fixes:: * Process constrained inline passthrough inside monospace span (#4458) * Catalog inline ref defined using anchor macro even when resolved reftext is empty * Use while loop rather than recursion to locate next line to process; prevents stack limit error (#4368) * Avoid matching numeric character references when searching for # in xref target (#4393) * Use correct selector to collapse margin on first and last child of sidebar * Don't allow target of include directive to start with a space (to distinguish it from a dlist item) or to end with a space * Manify alt text of block image in manpage output (#4401) * Adjust font size of term in horizontal dlist to match font size of term in regular dlist * Implicitly attach nested list that starts with block attribute lines to dlist entry (#4268) * Don't swallow square brackets when processing escaped URL macro * Treat `uri:classloader:` as an absolute path prefix when running on JRuby (#3929) * Apply reftext substitutions to value of `mantitle` attribute in DocBook output (#4448) * Enclose `<reftext>` tag in `<article>` tag in DocBook output for man page (#4452) * Correctly handle compat role on monospace and constrained passthrough when box attrlist or formatted text is escaped ==== snapper ==== Version update (0.10.4 -> 0.10.5) Subpackages: libsnapper7 snapper-zypp-plugin - improved responsiveness of snapperd when a btrfs quota rescan is running (see bsc#1211459) - update qgroup in config info in snapperd when running setup-quota - improved waiting for btrfs quota rescan (see bsc #1211459) ==== strace ==== Version update (6.3 -> 6.4) - Update to strace 6.4 * Implemented decoding of IFLA_BRPORT_NEIGH_VLAN_SUPPRESS netlink attribute. * Implemented decoding of IP_PROTOCOL type control messages and socket option. * Updated lists of BPF_*, IP_*, KVM_*, MDBA_*, PACKET_*, PR_*, PTRACE_*, UFFD_*, and V4L2_PIX_FMT_* constants. * Updated lists of ioctl commands from Linux 6.4. * Turn --seccomp-bpf off when --syscall-limit option is specified. * Fixed --trace-fds filtering support of syscalls taking file descriptor arguments that do not normally have a path associated with them. ==== yast2-kdump ==== Version update (4.6.0 -> 4.6.1) - adapt for version kdump versions 1.9+ (bsc#1212646) - call mkdumprd directly, not through tu-rebuild-kdump-initrd - update initrd even in non-fadump case - remove KDUMP_COPY_KERNEL and KDUMPTOOL_FLAGS options - update default config values according to kdump defaults - unify config boolean variables to "true" or "false" - support the snappy, zstd and raw dump formats - 4.6.1 ==== zlib-ng-compat ==== - Add patch to fix boo#1212735: * 1526.patch

1 0

ALP Architecture Meeting Video and Notes
by ddemaio 28 Jun '23

28 Jun '23

Hi all, Yesterday's ALP Architecture meeting touched on several aspects for the project/community to consider in the next few weeks. Please video the "There's a mountain to climb: openSUSE's response to SUSE ALP" presentation at https://youtu.be/-y2ewBG62J4 and find the notes for the Q&A session at https://etherpad.opensuse.org/p/weeklymeeting20230627 We are looking for help as more people are need to build openSUSE's next generational distribution. Please watch the video to gain some insight for this transition. Check out the following matrix channel: https://chat.opensuse.org/#/room/#alp:opensuse.org | https://matrix.to/#/#alp:opensuse.org v/r Doug

2 1

openSUSE Release Engineering meeting 28.07.2023
by Lubos Kocman 28 Jun '23

28 Jun '23

All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting The meeting is hosted here https://meet.opensuse.org/ReleaseEngineeringMeeting ## Attendees bittin,rbrown,lkocman,GuillaumeG,DimStar,anag, maxlin, dirk, ddemaio, wengel ## Leap Vacation for next two weeks starting by tomorrow. June 29th - July 14th Leap 15.5 release retrospective - processed data is now available. Everybody is welcome to help me with creating action items, or even better take action items https://en.opensuse.org/Portal:15.5/Retrospective I'd like to request Leap 15.6 setup from autobuild and also create tasks in progress-o-o. Marco mentioned that he'd work on 15 SP6 setup yesterday. ## openSUSE Tumbleweed openSUSE:Factory build fail stats: 73 failed 11 unresolvable (last week: 112 failed, 14 unresolvable) https://tinyurl.com/ysy4nnnz * kernel 6.4 (with lockdown enabled) is in staging to find first issues; likely introduction to TW will only happen with 6.4.1 * protobuf 22.5 is staged; most things fixed, Last failures are on open-vm-tools and libzypp, both ignoring .pc files information to properly build; protobuf21 compat package is being introduced * libxml2 2.11.x blocked, as it breaks things like perl-XML-LibXML, * fmt 10 blocked, as it breaks ceph * systemd moving from scriptlets-per-package to file triggers is in progress, some minor glitches have been found in staging; maintainers are investigating the issues Ana: issue with libzypp https://bugzilla.suse.com/show_bug.cgi?id=1212798 ## Richard (Aeon) Will be on vacation till July 24th - No major Aeon progress expected during this time ## Richard (ALP Architecture) Will be on vacation till July 24th ALP-based-Leap-replacement kickoff meeting happened and was recorded https://youtu.be/hLWvC1c7Fms https://etherpad.opensuse.org/p/weeklymeeting20230627 (some Q&A were captured there) Key points - There will be a Leap 15.6 - There will be a SUSE ALP "Micro" (name to change) coming 2024 - There will be a SUSE ALP "SLES Successor" (name to be defined) coming 2025 - There will be 1:1 copies of the above contributed by SUSE into openSUSE - Therefore some community needs (especially for enterprise server OSs) will likely be well handled automatically, but Leap had much broader use cases. The door is wide open for the community to address that and there is no critical rush - LOTS of open questions as to HOW the community may wish to address that - Probably one of the biggest issues is needing a lot more direct-to- the-codebase contributors, particually packagers and maintainers Please join the Matrix channel and get involved discussing the possible solutions ## Max Leap 15.6 * Wait for the 15 SP6 project to be setup in IBS and OBS lkocman: Confirmed with Rado and Marco that we have to wait. Dirk: did you also request Arm setup for 15.6? lkocman: we're blocked on SLES 15 SP6 setup missing atm. ## Guillaume - Arm Tumbleweed: * Rolling * kernel 6.4 (in staging atm) will support Lenovo X13s out of the box * shim currently not signed by Microsoft for aarch64 (Tumbleweed only, Leap is fine). It has been sent upstream for review, so it is progressing - https://bugzilla.suse.com/show_bug.cgi?id=1211297 Leap: * 15.5: port for armv7: containers are currently not building/created. Dirk mentioned that driver in 15.4 was the k3s team. ALP: * shim not signed by MS (at least for aarch64, not sure for x86_64) - jsc#ARM-100 WSL: * Works with x86 emulator since appx installer is x86-64, but this is not really an issue since arm64 Win11 includes x86 emulator by default. Team is ok to publish it on Microsoft store anyway, but this would require some testing in openQA which is currently not possible (due to technical issues and MS licensing issues) https://progress.opensuse.org/issues/126083. Steps documented on the wiki to install the appx from download.o.o: https://en.opensuse.org/openSUSE:WSL#With_Appx_from_openSUSE_download_server ## Sarah - s390x not attending because of presentation @ FAU Tumbleweed * building again * new test suite autoyast_zvm available Leap: * working * waitingSubmissisions with fixes for gtkd and gnu-cobol: https://build.opensuse.org/request/show/1072852 https://build.opensuse.org/request/show/1078385 * Sarah gave 1 talk at DevConf.cz * openSUSE zSystems is accepted with a workshop at the Open Source Day by the Grace Hopper Celebration * The SUSE/openSUSE zSystems BBQ meeting will be 7th July 2023. * The bi-weeky openSUSE zSystems meeting will switch from 18:00 to 19:00. ## Doug * Sent packages to Bulgaria & Greece lkocman: Thank you Doug! * Connected Akademy w/openSUSE representitives * Ordered marketing material * Uploading ALP video from 27.06 meeting with intro/outro * openSUSE Conference * 2022 videos complete * 2023 videos not started yet * openSUSE.Asia Summit * Setup TSP * Setting up payment for organizers * Community meeting * First ALP meeting * Second meeting will be cut 30 minutes short in order to attend the EL Collaboration Meeting * Looking at OBS & openQA classes for bootstrap.academy - https://lists.opensuse.org/archives/list/project@lists.opensuse.org/thread/… Wolfgang: OBS team has some of this in their todo list (creating videos about how to use OBS) lkocman: Dan Cermak created some tutorials in the past. They should be in the openSUSE youtube channel. * Will not be here next week. At Bavarian IT Solution Days 2023 Static * Still need future storage location * AI topics (static) ## Dirk Still working on the CDN/Fastly contract Would data from retrospective help you? We got some unavailability complains. Working on protobuf update and a few other Factory updates ## Wolfgang (Package Hub), Scott Bahling no news ## Maintenance team (Marcus or Maurizio (m4u)) Not available libzypp update in 15.5 was fixed by releasing missing dependency. libzypp issue that can be properly addressed only with respin of DVD. See section above for more details. openQA is stuck due to a regression - https://bugzilla.suse.com/show_bug.cgi?id=1211459 snapper update in queue for a next few days notifications about outdated packages, Marcus is using sql data dump from repology. DimStar: Aaah that's where they are coming from Dirk: there should be http restful API Marcus: seems like they were using just RabbitMQ. I'll look into the api. Leap Micro 5.4 maint-setup is active. Leap 15.5 setup is done, SLE export channel is still being refreshed occasionaly. 15.5 GA is currently scheduled for the 7th of June Key rotation: Migration with changed 4k key. Current autoimport solution is not ideal. Marcus will work on update of the opensuse-build-key https://en.opensuse.org/SDB:System_upgrade#0._New_4096_bit_RSA_signing_key openSUSE:Leap:15.5 is done, Backports are bit more challenging because of SLES. Wolfgang: we're injecting the key. Marcus we probably want to do only Backports 15 SP5 for now. Backports 15SP5 key change, we have labs next week, so nobody would even notice a full rebuild :-) Wolfgang: do we add or replace key completely? The key will be kept on users Marcus was aiming for replacing the key, it would appear as added on existing systems. Marcus is working also on the SLES side, the update of package with the new key was released last week, it's just not activated yet, but it will be already trusted by Leap 15.5 systems. Leap 15.4 is working Leap Micro 5.3 is working Leap Micro 5.4 testing is now passing as well Leap 16.0 - we should revisit the update/sle repo as the current setup not exactly mirror friendly. Solutions could be dropping not so popular architectures or split repositories per architecture. securebootkey for SLES was rotated, it should be autotrusted and not noticeable. This will be in QU3, QU2 is already done. lkocman: 15.3 EOL could lead to stopping our physical Source DVD effort, as it seems we will not produce. As this was the last release which you could still get on a physical media. Lkocman: anything against decomissioning it? Not a single valid request since I've joined SUSE. We did receive only requests for binary install media which are not subject to ^. We do not plan to offer this for any new releases. ## Adrian - OBS Happy to be around.

1 0

New Tumbleweed snapshot 20230626 released!
by Dominique Leuenberger 27 Jun '23

27 Jun '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: python-mysqlclient python-numpy spandsp (3.0.0.g15 -> 3.0.0+g21) === Details === ==== python-mysqlclient ==== - Use sle15_python_module_pythons ==== python-numpy ==== - Adapt test exceptions for PPC64 etc., TestFReturnCharacter instead of TestF77ReturnCharacter, TestF90ReturnCharacter ==== spandsp ==== Version update (3.0.0.g15 -> 3.0.0+g21) - Update to snapshot 3.0.0+g21 (0d2e6ac6) * Ensure we never copy too much from pitch_overlap to the output buffer.

1 0

Leap 15.5 retrospective feedback is now seeking action items
by Lubos Kocman 27 Jun '23

27 Jun '23

Hello openSUSE! I would like to share categorized openSUSE Leap 15.5 retrospective results with all contributors, team leads, and individuals who directly or indirectly contribute to openSUSE Leap! https://en.opensuse.org/Portal:15.5/Retrospective Feel free to review relevant sections for you or your team and see if you could help to address some of the issues. I already started making action items for the obvious ones, however, It would really help me if you'd share any suggestion or ideas. Feel free to link action items to the wiki, such as links to github issues, bugs, progress-o-o, trello, jira, code-o-o feature links. I promise that I'll try to help driving "reasonable ones" to the completion. I already agreed with the review round that Leap 15.6 retrospective will have explicit "written" suggestion in the "what didn't go too well" section to open a bug and reference it in the next. I'm aware that might take away the anonymity aspect of the survey, however, as it is now it's impossible to react to some of the feedback without an effective feedback loop such as discussion in bugzilla. Let's make Leap 15.6 even a better release than 15.5 Please be aware that I'll be on vacation for next two weeks starting by Thursday. Best regards Lubos Kocman openSUSE Leap Release Manager

1 0

Reminder for today's Leap 15.5 retro review
by Lubos Kocman 27 Jun '23

27 Jun '23

Hello openSUSE! This is a friendly reminder about today's Leap 15.5 Retro review prior to Richard's ALP Architecture meeting. People interesting in both can simply stay connected as it's the same jitsi room. See you at 15:30 CEST at meet.opensuse.org/meeting https://en.opensuse.org/Portal:15.5/Retrospective (not yet fully processed, go for raw data instead, I expect to have all data processed by the time of the retro meeting). Best regards Lubos Kocman openSUSE Leap Release Manager

1 0

Vagrant box for Leap 15.5 missing?
by Johannes Kastl 27 Jun '23

27 Jun '23

Hi all, I just noticed that there is not yet a vagrant box for 15.5 available on https://app.vagrantup.com/opensuse/. Not sure if this is in process, has been delayed, was forgotten etc. Who would be the right person to ping? Or should I just create a bug report (if so, against Basesystem 15.5?)? I seem to remember that Dan was involved in providing the vagrant boxes in the past, not sure if that is still the case? Kind Regards, Johannes -- Johannes Kastl Linux Consultant & Trainer Tel.: +49 (0) 151 2372 5802 Mail: kastl(a)b1-systems.de B1 Systems GmbH Osterfeldstraße 7 / 85088 Vohburg http://www.b1-systems.de GF: Ralph Dehner Unternehmenssitz: Vohburg / AG: Ingolstadt,HRB 3537

4 7

New Tumbleweed snapshot 20230625 released!
by Dominique Leuenberger 26 Jun '23

26 Jun '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: firewalld (1.3.3 -> 2.0.0) plasma5-workspace sssd (2.9.0 -> 2.9.1) xdg-desktop-portal === Details === ==== firewalld ==== Version update (1.3.3 -> 2.0.0) Subpackages: firewalld-bash-completion firewalld-lang firewalld-zsh-completion python3-firewall - update to version 2.0.0: * This is a major release. The major version is being bumped symbolically to reflect significant changes done in commit f4d2b80 ("fix(policy): disallow zone drifting"). It does not contain any deliberate breaking changes. * Complete changelog: https://github.com/firewalld/firewalld/releases/tag/v2.0.0 ==== plasma5-workspace ==== Subpackages: gmenudbusmenuproxy plasma5-session plasma5-session-wayland plasma5-workspace-lang plasma5-workspace-libs xembedsniproxy - Mark org.kde.userfeedback.kcm as internal QML import ==== sssd ==== Version update (2.9.0 -> 2.9.1) Subpackages: libsss_certmap0 libsss_idmap0 libsss_nss_idmap0 sssd-krb5-common sssd-ldap - Update to relese 2.9.1 * A regression was fixed that prevented autofs lookups to function correctly when cache_first is set to True. * A regression where SSSD failed to properly watch for changes in ``/etc/resolv.conf`` when it was a symbolic link or was a relative path, was fixed. ==== xdg-desktop-portal ==== Subpackages: xdg-desktop-portal-lang - Add patch from upstream to avoid creating portals with non-functional backends . This was mentioned in bsc#1212037 and since I included this fix in the SP4 update that fixed the issue, I'm fixing this in Factory/SP5 too for consistentcy. * 0001-portal-impl-Only-return-found-implementation-if-it-launched.patch

1 0

Let's Encrypt?
by Lew Wolfgang 26 Jun '23

26 Jun '23

Hi Folks, I'm sure this isn't the right list for this question, but it will have to do. In downloading the Leap 15.5 ISO I noticed that the TLS cert is issued by Let's Encrypt. This is rather concerning considering all the current supply-chain security issues. Does Let's Encrypt still use a one-step domain verification process? If so, how can it really be trusted for something as important as an operating system? How can we be sure we're not downloading malware without strong domain verification of the source? Regards, Lew

10 15

RFC: turn off ppc32 and ppc64 big endian builds on openSUSE:Factory:PowerPC
by Fritz Hudnut 26 Jun '23

26 Jun '23

> > > If Debian is okay for your testing purposes, you can use the Debian > images > > I am creating on a regular basis. These always contain the latest kernel > > in Debian unstable. > > > > See: > > > >> https://cdimage.debian.org/cdimage/ports/snapshots/2023-06-18/ > > > > I would love to do the same for openSUSE, but I haven't found anyone to > help > > me with the effort. > > Would starting with your installer get me to a different place than > regular 'apd > update'/'apt upgrade'? > > Larry > > Larry: Why waste time running a new install, if you have a debian system already in place you should be able to edit the /etc/apt/sources.list file to whatever selection of repos will work with your machine. F

6 12

New Tumbleweed snapshot 20230624 released!
by Dominique Leuenberger 25 Jun '23

25 Jun '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: LibVNCServer (0.9.13 -> 0.9.14) Mesa (23.1.2 -> 23.1.3) Mesa-drivers (23.1.2 -> 23.1.3) accountsservice crda (4.14 -> 4.15) ding-libs kernel-source (6.3.7 -> 6.3.9) libpng16 (1.6.39 -> 1.6.40) netpbm (10.96.4 -> 11.2.0) rubygem-ruby-dbus (0.23.0.beta1 -> 0.23.0.beta2) selinux-policy (20230425 -> 20230622) sendmail (8.17.1 -> 8.17.2) util-linux (2.38.1 -> 2.39) util-linux-systemd (2.38.1 -> 2.39) === Details === ==== LibVNCServer ==== Version update (0.9.13 -> 0.9.14) Subpackages: libvncclient1 libvncserver1 - version update to 0.9.14 [#]# Overall changes: * Added more documentation (build system integration, repeater setup) and a legal FAQ. * Added [contribution guidelines](CONTRIBUTING.md). * Ported the TravisCI continous integration machinery to GitHub workflows. [#]# LibVNCServer/LibVNCClient: * Added [qemu extended key event]. * Fixed several potential multiplication overflows. [#]# LibVNCClient: * Fixes of several memory leaks and buffer overflows. * Added UltraVNC's MSLogonII authentication scheme. * Fixed TLS interoperability with GnuTLS servers. * Fixed detection of newer UltraVNC and TightVNC servers. * Added support for [SetDesktopSize]. * Added SSH tunneling example using libssh2. * Added some extensions to VeNCrypt in order to be compatible with a wider range of servers. [#]# LibVNCServer: * Fixes to the multi-threaded server implementation which should be a lot more sound now. * Fixed TightVNC-filetransfer file upload for 64-bit systems. * Fixes of crashes in the zlib compression. * Added support for [UTF8 clipboard data]. * Fixed visual artifacts in framebuffer on ARM platforms. * Fixed several WebSockets bugs. * Fixed the UltraVNC-style repeater example. * Added support for larger framebuffers (two 4k screens possible now). * Added support for timeouts for outbound connections (to repeaters for instance). * Fixed out-of-bounds memory access in Tight encoding. - modified patches % 0001-libvncserver-Add-API-to-add-custom-I-O-entry-points.patch (refreshed) % 0002-libvncserver-Add-channel-security-handlers.patch (refreshed) - deleted patches - 0001-libvncserver-don-t-NULL-out-internal-of-the-default-.patch (upstreamed) - 0003-libvncserver-auth-don-t-keep-security-handlers-from-.patch (upstreamed) - 0004-zlib-Clear-buffer-pointers-on-cleanup-444.patch (upstreamed) - LibVNCServer-CVE-2020-29260.patch (upstreamed) ==== Mesa ==== Version update (23.1.2 -> 23.1.3) Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libOSMesa8 libgbm1 - Update to bugfix release 23.1.3 - supersedes U_glx-Remove-pointless-GLX_INTEL_swap_event-paranoia.patch (boo#1209005) - -Dxmlconfig=enabled now also needs -Dexpat=enabled as dependancy ==== Mesa-drivers ==== Version update (23.1.2 -> 23.1.3) Subpackages: Mesa-dri Mesa-gallium Mesa-libva libxatracker2 - Update to bugfix release 23.1.3 - supersedes U_glx-Remove-pointless-GLX_INTEL_swap_event-paranoia.patch (boo#1209005) - -Dxmlconfig=enabled now also needs -Dexpat=enabled as dependancy ==== accountsservice ==== Subpackages: accountsservice-lang libaccountsservice0 typelib-1_0-AccountsService-1_0 - Add accountsservice-assume-gdm.patch: assume gdm when not being able to detect the used display manager. This is basically the same as was in place before we gained support for multiple DMs (boo#1212675). ==== crda ==== Version update (4.14 -> 4.15) - Update to crda 4.15 - Remove patches now upstream * crda-67f1e6ddbdfade357e234c9d58a30fe0a283fe60.patch * crda-f4ef2531698fb9ba006e8b31a223b3269be8bc7c.patch - Port patch crda-python3.patch ==== ding-libs ==== Subpackages: libbasicobjects0 libcollection4 libdhash1 libini_config5 libpath_utils1 libref_array1 - Update to 0.6.2: * Minor maintenance update: INI: Silent ini_argument match failures INI: Fix detection of error message - Remove patches fixed upstream * INI-Fix-detection-of-error-messages.patch * INI-Silence-ini_augment-match-failures.patch * TEST-validators_ut_check-Fix-fail-with-new-glibc.patch * INI-Remove-definiton-of-TRACE_LEVEL.patch - Use github sources ==== kernel-source ==== Version update (6.3.7 -> 6.3.9) - Linux 6.3.9 (bsc#1012628). - x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed (bsc#1012628). - cgroup: bpf: use cgroup_lock()/cgroup_unlock() wrappers (bsc#1012628). - cgroup: always put cset in cgroup_css_set_put_fork (bsc#1012628). - cgroup: fix missing cpus_read_{lock,unlock}() in cgroup_transfer_tasks() (bsc#1012628). - qcom: llcc/edac: Fix the base address used for accessing LLCC banks (bsc#1012628). - EDAC/qcom: Get rid of hardcoded register offsets (bsc#1012628). - ksmbd: validate smb request protocol id (bsc#1012628). - of: overlay: Fix missing of_node_put() in error case of init_overlay_changeset() (bsc#1012628). - power: supply: ab8500: Fix external_power_changed race (bsc#1012628). - power: supply: sc27xx: Fix external_power_changed race (bsc#1012628). - power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() + schedule() (bsc#1012628). - ARM: dts: vexpress: add missing cache properties (bsc#1012628). - arm64: dts: arm: add missing cache properties (bsc#1012628). - tools: gpio: fix debounce_period_us output of lsgpio (bsc#1012628). - selftests: gpio: gpio-sim: Fix BUG: test FAILED due to recent change (bsc#1012628). - power: supply: Ratelimit no data debug output (bsc#1012628). - PCI/DPC: Quirk PIO log size for Intel Ice Lake Root Ports (bsc#1012628). - platform/x86: asus-wmi: Ignore WMI events with codes 0x7B, 0xC0 (bsc#1012628). - regulator: Fix error checking for debugfs_create_dir (bsc#1012628). - irqchip/gic-v3: Disable pseudo NMIs on Mediatek devices w/ firmware issues (bsc#1012628). - irqchip/meson-gpio: Mark OF related data as maybe unused (bsc#1012628). - power: supply: Fix logic checking if system is running from battery (bsc#1012628). - drm: panel-orientation-quirks: Change Air's quirk to support Air Plus (bsc#1012628). - btrfs: scrub: try harder to mark RAID56 block groups read-only (bsc#1012628). - btrfs: handle memory allocation failure in btrfs_csum_one_bio (bsc#1012628). - ASoC: soc-pcm: test if a BE can be prepared (bsc#1012628). - sfc: fix devlink info error handling (bsc#1012628). - ASoC: Intel: avs: Account for UID of ACPI device (bsc#1012628). - ASoC: Intel: avs: Fix avs_path_module::instance_id size (bsc#1012628). - ASoC: Intel: avs: Add missing checks on FE startup (bsc#1012628). - parisc: Improve cache flushing for PCXL in arch_sync_dma_for_cpu() (bsc#1012628). - parisc: Flush gatt writes and adjust gatt mask in parisc_agp_mask_memory() (bsc#1012628). - erofs: use HIPRI by default if per-cpu kthreads are enabled (bsc#1012628). - MIPS: unhide PATA_PLATFORM (bsc#1012628). - MIPS: Restore Au1300 support (bsc#1012628). - MIPS: Alchemy: fix dbdma2 (bsc#1012628). - mips: Move initrd_start check after initrd address sanitisation (bsc#1012628). - ASoC: cs35l41: Fix default regmap values for some registers (bsc#1012628). - ASoC: dwc: move DMA init to snd_soc_dai_driver probe() (bsc#1012628). - xen/blkfront: Only check REQ_FUA for writes (bsc#1012628). - drm:amd:amdgpu: Fix missing buffer object unlock in failure path (bsc#1012628). - io_uring: unlock sqd->lock before sq thread release CPU (bsc#1012628). - NVMe: Add MAXIO 1602 to bogus nid list (bsc#1012628). - irqchip/gic: Correctly validate OF quirk descriptors (bsc#1012628). - wifi: cfg80211: fix locking in regulatory disconnect (bsc#1012628). - wifi: cfg80211: fix double lock bug in reg_wdev_chan_valid() (bsc#1012628). - epoll: ep_autoremove_wake_function should use list_del_init_careful (bsc#1012628). - ocfs2: fix use-after-free when unmounting read-only filesystem (bsc#1012628). - ocfs2: check new file size on fallocate call (bsc#1012628). - zswap: do not shrink if cgroup may not zswap (bsc#1012628). - mm/damon/core: fix divide error in damon_nr_accesses_to_accesses_bp() (bsc#1012628). - nios2: dts: Fix tse_mac "max-frame-size" property (bsc#1012628). - mm/uffd: fix vma operation where start addr cuts part of vma (bsc#1012628). - nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key() (bsc#1012628). - nilfs2: fix possible out-of-bounds segment allocation in resize ioctl (bsc#1012628). - nilfs2: reject devices with insufficient block count (bsc#1012628). - LoongArch: Fix debugfs_create_dir() error checking (bsc#1012628). ... changelog too long, skipping 511 lines ... - commit c0cd722 ==== libpng16 ==== Version update (1.6.39 -> 1.6.40) - Update to version 1.6.40: * Fixed the eXIf chunk multiplicity checks. * Fixed a memory leak in pCAL processing. * Corrected the validity report about tRNS inside png_get_valid(). * Fixed various build issues on *BSD, Mac and Windows. * Updated the configurations and the scripts for continuous integration. * Cleaned up the code, the build scripts, and the documentation. ==== netpbm ==== Version update (10.96.4 -> 11.2.0) Subpackages: libnetpbm11 - version update to 11.2.0 * jpegtopnm: Add -traceexif * pbmtextps: Add -asciihex, -ascii85. * pcdovtoppm: remove dependency on obsolete 'tempfile' program. * jpegtopnm: Many fixes to -dumpexif. Always broken. (-dumpexif was new in Netpbm 9.18 (September 2001)) * pamtopng: fix -chroma option: always rejected. Always broken. (pamtopng was new in Netpbm 10.70 (June 2015)). * pnmtopng: fix -rgb option: always rejected. Always broken (-rgb was new in Netpbm 10.30 (October 2005)). * build: change the way you add the separately distributed 'hpcdtoppm' code to the build. * lot of changes since last version update, see https://sourceforge.net/p/netpbm/code/HEAD/tree/advanced/doc/HISTORY - modified patches % netpbm-gcc-warnings.patch (refreshed) % netpbm-security-code.patch (refreshed) % netpbm-security-scripts.patch (refreshed) - deleted patches - netpbm-tmpfile.patch (upstreamed) - ppmforge-fix-overflow.patch (upstreamed) - signed-char.patch (upstreamed) ==== rubygem-ruby-dbus ==== Version update (0.23.0.beta1 -> 0.23.0.beta2) - 0.23.0.beta2 License: * clarified to be LGPL-2.1-or-later API: * DBus::Object#object_server replaces @service (which still works) and the short-lived @connection * ObjectServer#export will raise if the path is already taken by an object * ObjectServer#unexport now also accepts an object path * Connection#object_server can export objects even without requesting any service name (gh#mvidner/ruby-dbus#49, in beta1 already). * Add PeerConnection for connections without a bus, useful for PulseAudio. Fix listening for signals there (gh#mvidner/ruby-dbus##44). * Moved from Connection to BusConnection: #unique_name, #proxy, #service. Call send_hello in BusConnection#initialize already. Bug fixes: * Fixed a refactoring crasher bug in ProxyService#introspect (oops). * Fix crash on #unexport of /child_of_root or even / ==== selinux-policy ==== Version update (20230425 -> 20230622) Subpackages: selinux-policy-targeted - Update to version 20230622: * Allow keyutils_dns_resolver_exec_t be an entrypoint * Allow collectd_t read network state symlinks * Revert "Allow collectd_t read proc_net link files" * Allow nfsd_t to list exports_t dirs * Allow cupsd dbus chat with xdm * Allow haproxy read hardware state information * Label /dev/userfaultfd with userfaultfd_t * Allow blueman send general signals to unprivileged user domains * Allow dkim-milter domain transition to sendmail ==== sendmail ==== Version update (8.17.1 -> 8.17.2) Subpackages: libmilter1_0 - Update to pre version sendmail 8.17.2 * Make sure DANE checks (if enabled) are performed even if CACertPath or CACertFile are not set or unusable. * Note: if the code to set up TLS in the client fails, then {verify} will be set to TEMP but DANE requirements will be ignored, i.e., by default mail will be sent without STARTTLS. This can be changed via a LOCAL_TLS_SERVER ruleset. * Pass server name to clt_features ruleset instead of client name to account for limitations in macro availability described below in CONFIG section. This may break custom clt_features rulesets which expect to receive the client name as input. * Fix a regression introduced in 8.17.1: aliases file which contain continuation lines caused parsing errors. * Add an FFR (for future release) compile time option _FFR_LOG_STAGE to log the protocol stage as stage= for some errors during delivery attempts to make troubleshooting simpler. This new logging may be enabled in a future release. * When EAI is enabled, milters also got the arguments of MAIL/RCPT commands in argv[0] for xxfi_envfrom()/xxfi_envrcpt() callbacks instead of just the mail address. Problem reported by Dilyan Palauzo. * When EAI is enabled, mailq prints UTF-8 addresses as such if SMTPUTF8 was used. * When EAI is enabled, the $h macro is now in the correct format. Previously this could cause wrong values for relay= in log entries and the mailer argument vector. * When the compile time option USE_EAI is enabled, vacation could fail to respond when it should. Problem reported by Alex Hautequest. * When EAI was enabled, header truncation might not have been logged even when it happened. Problem reported by Werner Wiethege. * Handle a possible change in an upcoming release of Cyrus-SASL (2.1.28) by changing the definition of an internal flag. Patch from Dilyan Palauzo. * Avoid an assertion failure when an smtps connection is made to the server and a milter is unavailable. Problem reported by Dilyan Palauzo. * Fixed some spelling errors in documentation and comments, based on a codespell report by Jens Schleusener of fossies.org. * The result of try_tls is now logged using status= instead of reject=. * If tls_rcpt rejected the delivery of a recipient then a bogus dsn= entry might have been logged under some circumstances. * If a server replied with 421 to a RCPT command then a bogus reply= might have been logged. * When quoting the value for ${currHeader} avoid causing a syntax error (Unbalanced '"') when truncating a header value which is too long. Problem reported by Werner Wiethege. * Reduce the performance impact of a change introduced in 8.12.9: the default for MaxMimeHeaderLength was set to 2048/1024. Problem reported by Tabata Shintaro of Internet Initiative Japan Inc. * CONFIG: The default clt_features ruleset tried to access ${server_name} and ${server_addr} which are not set when the ruleset is invoked. Only the server name is available which is passed as an argument. * CONFIG: Properly quote host variable to prevent cf build breakage when a hostname contains 'dnl'. Problem reported by Maxim Shalomikhin of Kaspersky. * DEVTOOLS: Add configure.sh support for BSD's mandoc as an alternative man page formatting tool. * DOC: Document that USAGE is a possible value for {verify}. * LIBMILTER: The macros for the EOH and EOM callbacks are sent in reverse order which means accessing macros in the EOM callback got the macro for the EOH callback. Store those macros in the expected order in libmilter. Note: this does not affect sendmail because the macros for both callbacks are the same because the message is sent to libmilter after it is completely read by sendmail. Fix and problem report from David Buergin. * Portability: Make use of IN_LOOPBACK, if defined, to determine if using a loopback address. Patch from Mike Karels of FreeBSD. On Linux use gethostbyname2(3) if glibc 2.19 or newer is used to avoid potential problems with IPv6 lookups. Patch from Werner Wiethege. Add support for Darwin 21 and Darwin 22. Solaris 12 has been renamed to Solaris 11.4, hence adapt a condition for sigwait(2) taking one argument. Patch from John Beck. - Port and rename patch sendmail-8.17.1.dif which is now sendmail-8.17.2.dif ==== util-linux ==== Version update (2.38.1 -> 2.39) Subpackages: libblkid1 libfdisk1 libmount1 libsmartcols1 libuuid1 util-linux-lang - Add patch to fix regression with mount options handling (gh#util-linux/util-linux#2326): * 0001-libmount-fix-sync-options-between-context-and-fs-str.patch - Set --disable-libmount-mountfd-support, it's very broken and needs both util-linux and kernel fixes (gh#util-linux/util-linux#2287) - UTIL_LINUX_FOUND_SYSTEMD_DEPS: make grep more robust - util-linux-tty-tools: build together with systemd in preparation of util-linux 2.40 together with systemd v254 - Upgrade to version 2.39: * blkpr: New command to run persistent reservations ioctls on a device. * pipesz: New command to set or examine pipe and FIFO buffer sizes. * waitpid: New command to wait for arbitrary processes. * mount, libmount: Supports new file descriptors based mount kernel API. * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes, X-mount.{owner,group,mode}=, rootcontext=@target. * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new option --relative. * dmesg: Supports subsecond granularity for --since and --until. * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify all higher or all lower levels. * blkid, libblkid: Supports bcachefs. * fstrim: New option --types to filter out by filesystem types. * lsblk: --nvme and --virtio are new options to filter out devices. * lsblk: Improves detection of hotplug and removable status. * nsenter: New option --env for allowing environment variables inheritance. * namei: New option -Z to report SELinux contexts. * Many other new features and fixes. For complete list see https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes - Dropped upstreamed patches: * fix-lib-internal-cache-size.patch * util-linux-fix-tests-when-at-symbol-in-path.patch * util-linux-honor-noclear-when-reprint-issue.patch - Add upstream patch util-linux-fix-tests-with-64k-pagesize.patch * Fixes fadvise tests for ppc64 ==== util-linux-systemd ==== Version update (2.38.1 -> 2.39) - Add patch to fix regression with mount options handling (gh#util-linux/util-linux#2326): * 0001-libmount-fix-sync-options-between-context-and-fs-str.patch - Set --disable-libmount-mountfd-support, it's very broken and needs both util-linux and kernel fixes (gh#util-linux/util-linux#2287) - UTIL_LINUX_FOUND_SYSTEMD_DEPS: make grep more robust - util-linux-tty-tools: build together with systemd in preparation of util-linux 2.40 together with systemd v254 - Upgrade to version 2.39: * blkpr: New command to run persistent reservations ioctls on a device. * pipesz: New command to set or examine pipe and FIFO buffer sizes. * waitpid: New command to wait for arbitrary processes. * mount, libmount: Supports new file descriptors based mount kernel API. * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes, X-mount.{owner,group,mode}=, rootcontext=@target. * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new option --relative. * dmesg: Supports subsecond granularity for --since and --until. * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify all higher or all lower levels. * blkid, libblkid: Supports bcachefs. * fstrim: New option --types to filter out by filesystem types. * lsblk: --nvme and --virtio are new options to filter out devices. * lsblk: Improves detection of hotplug and removable status. * nsenter: New option --env for allowing environment variables inheritance. * namei: New option -Z to report SELinux contexts. * Many other new features and fixes. For complete list see https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes - Dropped upstreamed patches: * fix-lib-internal-cache-size.patch * util-linux-fix-tests-when-at-symbol-in-path.patch * util-linux-honor-noclear-when-reprint-issue.patch - Add upstream patch util-linux-fix-tests-with-64k-pagesize.patch * Fixes fadvise tests for ppc64

1 0

New Tumbleweed snapshot 20230623 released!
by Dominique Leuenberger 24 Jun '23

24 Jun '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: 7zip (22.01 -> 23.01) accountsservice (22.08.8 -> 23.13.9) apache2-mod_php8 (8.1.20 -> 8.2.7) apparmor (3.1.5 -> 3.1.6) audacity (3.3.2 -> 3.3.3) bind (9.18.15 -> 9.18.16) cups health-checker (1.8 -> 1.9) jhead (3.06.0.1 -> 3.08) kernel-firmware (20230531 -> 20230620) libapparmor (3.1.5 -> 3.1.6) libstorage-ng (4.5.120 -> 4.5.121) man-pages-ja (20230115 -> 20230615) mlterm (3.9.2 -> 3.9.3) php8 (8.1.20 -> 8.2.7) python-immutables systemd systemd-rpm-macros (23 -> 24) wtmpdb (0.6.0 -> 0.7.0) === Details === ==== 7zip ==== Version update (22.01 -> 23.01) - Update to version 23.01: * 7-Zip now can use new ARM64 filter for compression to 7z and xz archives. ARM64 filter can increase compression ratio for data containing executable files compiled for ARM64 (AArch64) architecture. * Default section size for BCJ2 filter was changed from 64 MiB to 240 MiB. It can increase compression ratio for executable files larger than 64 MiB. * UDF: support was improved. * cpio: support for hard links. * Some changes and optimizations in WIM creation code. * When new 7-Zip creates multivolume archive, 7-Zip keeps in open state only volumes that still can be changed. Previous versions kept all volumes in open state until the end of the archive creation. * 7-Zip now can reduce the number of simultaneously open files, when 7-Zip opens, extracts or creates multivolume archive. It allows to avoid the failures for cases with big number of volumes, bacause there is a limitation for number of open files allowed for a single program in Linux. * The bugs were fixed: * ZIP archives: if multithreaded zip compression was performed with more than one file to stdout stream (-so switch), 7-zip didn't write "data descriptor" for some files. * ext4 archives: 7-Zip couldn't correctly extract symbolic link to directory from ext4 archives. * HFS and APFS archives: 7-Zip incorrectly decoded uncompressed blocks (64 KiB) in compressed forks. * Some another bugs were fixed. - Refresh fix-compatib-with-p7zip.patch ==== accountsservice ==== Version update (22.08.8 -> 23.13.9) Subpackages: accountsservice-lang libaccountsservice0 typelib-1_0-AccountsService-1_0 - Update to version 23.13.9: + daemon: Fix boot delay + user-manager: - Add cancellable to fetch user requests - Track non-existent users - Changes from version 23.11.69: + Add lightdm autologin support + user: - Return an error when setting invalid language - Throw a warning for invalid locales - Support new LocalAccount property in cache file - Replace usermod -p with chpasswd -e + main: - Use new overridable USERDIR - Use new overridable ICONDIR - Use new overridable sysconfdir + daemon: - Add GetUsersLanguages() function - Don't crash if /etc/shadow doesn't exist + Updated translations. - Rebase patches: + accountsservice-sysconfig.patch + accountsservice-filter-suse-accounts.patch ==== apache2-mod_php8 ==== Version update (8.1.20 -> 8.2.7) - version update to 8.2.7 * Readonly classes * Disjunctive Normal Form (DNF) Types * Allow null, false, and true as stand-alone types * New "Random" extension * Constants in traits * Deprecate dynamic properties * for details, see https://www.php.net/releases/8.2/en.php https://www.php.net/manual/en/migration82.php - modified patches % php-ar-flags.patch (refreshed) % php-build-reproducible-phar.patch (refreshed) % php-date-regenerate-lexers.patch (refreshed) % php-ini.patch (refreshed) % php-systzdata-v23.patch (refreshed) ==== apparmor ==== Version update (3.1.5 -> 3.1.6) Subpackages: apparmor-abstractions apparmor-docs apparmor-parser apparmor-parser-lang apparmor-profiles apparmor-utils apparmor-utils-lang python3-apparmor - update to AppArmor 3.1.6 - fix regression in mount rules (boo#1211989) - some additions to the base and authentification abstractions - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.6 for the full upstream changelog ==== audacity ==== Version update (3.3.2 -> 3.3.3) Subpackages: audacity-lang - Update to 3.3.3 - Downgrade vst3stk to 3.7.3_build_20 as most compatible with audacity - Rework vst3sdk patches vst3sdk-3.7.3_build_20: remove vst3sdk-fix-include-cstdint-for-gcc13.patch, vst3sdk-fix-limits-include-moduleinfoparser.patch add vst3sdk-fix-std-atomic-for-gcc12.patch, vst3sdk-fix-include-cstdint.patch - Add vst-system-path.patch changes vst(3) search path to /usr/lib64 This is a hotfix release. It fixes the following bugs: * #4618 Fixed EQ not scaling properly when resizing the window. * #4743 Fixed the audio.com upload flow. ==== bind ==== Version update (9.18.15 -> 9.18.16) Subpackages: bind-doc bind-utils - Update to release 9.18.16 Security Fixes: * The overmem cleaning process has been improved, to prevent the cache from significantly exceeding the configured max-cache-size limit. (CVE-2023-2828) * A query that prioritizes stale data over lookup triggers a fetch to refresh the stale data in cache. If the fetch is aborted for exceeding the recursion quota, it was possible for named to enter an infinite callback loop and crash due to stack overflow. This has been fixed. (CVE-2023-2911) New Features: * The system test suite can now be executed with pytest (along with pytest-xdist for parallel execution). Removed Features: * TKEY mode 2 (Diffie-Hellman Exchanged Keying) is now deprecated, and will be removed in a future release. A warning will be logged when the tkey-dhkey option is used in named.conf. Bug Fixes: * BIND could get stuck on reconfiguration when a listen-on statement for HTTP is removed from the configuration. That has been fixed. * Previously, it was possible for a delegation from cache to be returned to the client after the stale-answer-client-timeout duration. This has been fixed. * BIND could allocate too big buffers when sending data via stream-based DNS transports, leading to increased memory usage. This has been fixed. * When the stale-answer-enable option was enabled and the stale-answer-client-timeout option was enabled and larger than 0, named previously allocated two slots from the clients-per-query limit for each client and failed to gradually auto-tune its value, as configured. This has been fixed. ==== cups ==== Subpackages: cups-client cups-config libcups2 libcupsimage2 - cups-2.4.2-CVE-2023-34241.patch fixes CVE-2023-34241 "use-after-free in cupsdAcceptClient()" https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25 bsc#1212230 ==== health-checker ==== Version update (1.8 -> 1.9) Subpackages: health-checker-plugins-MicroOS - Update to version 1.9 * Fix failing subvolume mount checks with certain characters in mount point [gh#openSUSE/health-checker#14]. ==== jhead ==== Version update (3.06.0.1 -> 3.08) - version update to 3.08 * Fix various "issues" people have found with fuzz testing. These can only be produced when running jhead in some memory access testing setup such as ASAN and throwing carefully crafted garbage at it, causing jhead to read some bytes past memory it malloced. no real life consequences. - deleted patches - jhead-CVE-2021-34055.patch (upstreamed) - jhead-CVE-2022-41751-1.patch (upstreamed) - jhead-CVE-2022-41751-2.patch (upstreamed) - jhead-CVE-2022-41751-3.patch (upstreamed) ==== kernel-firmware ==== Version update (20230531 -> 20230620) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update to version 20230620 (git commit 045b2136a619): * amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs * fix broken cirrus firmware symlinks * qcom: Update the microcode files for Adreno a630 GPUs. * qcom: sdm845: rename the modem firmware * qcom: sdm845: update remoteproc firmware * rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D * rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225 * amdgpu: DMCUB updates for various AMDGPU asics * linux-firmware: update firmware for MT7922 WiFi device * linux-firmware: update firmware for MT7921 WiFi device * linux-firmware: update firmware for mediatek bluetooth chip (MT7922) * linux-firmware: update firmware for mediatek bluetooth chip (MT7921) * i915: Add HuC v8.5.0 for MTL * mediatek: Update mt8195 SCP firmware to support hevc - Drop obsoleted patch for WHENCE: cirrus-WHENCE-link-fixes.patch - Update aliases ==== libapparmor ==== Version update (3.1.5 -> 3.1.6) - update to AppArmor 3.1.6 - fix regression in mount rules (boo#1211989) - some additions to the base and authentification abstractions - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.6 for the full upstream changelog ==== libstorage-ng ==== Version update (4.5.120 -> 4.5.121) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#937 - query version of lsscsi (preparation for using json output) - coding style - extended documentation - 4.5.121 ==== man-pages-ja ==== Version update (20230115 -> 20230615) - version update to 20230615 * Improved and updated manual pages ==== mlterm ==== Version update (3.9.2 -> 3.9.3) Subpackages: mlterm-common mlterm-fcitx mlterm-sdl2 - version update to 3.9.3 * mlterm-wl supports xdg-decoration. * Add --disable-compact-truecolor option to ./configure script. * Add vte 0.68 API symbols to libvte compatible library. * Add libvterm 0.2 API symbols to libvterm compatible library. * Add --sdpr / simple_scrollbar_dpr option. (https://github.com/arakiken/mlterm/issues/64) * Set "COLORTERM=truecolor" environmental variable. (https://github.com/arakiken/mlterm/issues/36) * Update unicode property table (generated from UnicodeData.txt and EastAsianWidth.txt) to version 15.0.0. * Support mosh-1.4.0. - deleted patches - CVE-2022-24130-c_sixel.c-Fix-segmentation-fault-when-the-repeat-cou.patch (upstreamed) - mlfc-Fix-crash-with-more-than-1024-font-faces-installed.patch (upstreamed) - mlterm-Fix-buffer-overflow-with-long-plugin-suffix.patch (upstreamed) - mlterm-SDL2-UI-also-needs-math-libs.patch (upstreamed) - mlterm-wayland-Detect-compiler-flags.patch (upstreamed) ==== php8 ==== Version update (8.1.20 -> 8.2.7) Subpackages: php8-cli php8-ctype php8-dom php8-gd php8-gettext php8-iconv php8-mbstring php8-mysql php8-openssl php8-pdo php8-sqlite php8-tokenizer php8-xmlreader php8-xmlwriter - version update to 8.2.7 * Readonly classes * Disjunctive Normal Form (DNF) Types * Allow null, false, and true as stand-alone types * New "Random" extension * Constants in traits * Deprecate dynamic properties * for details, see https://www.php.net/releases/8.2/en.php https://www.php.net/manual/en/migration82.php - modified patches % php-ar-flags.patch (refreshed) % php-build-reproducible-phar.patch (refreshed) % php-date-regenerate-lexers.patch (refreshed) % php-ini.patch (refreshed) % php-systzdata-v23.patch (refreshed) ==== python-immutables ==== - limit to newer python versions, older are no longer needed ==== systemd ==== Subpackages: libsystemd0 libsystemd0-32bit libudev1 systemd-32bit systemd-container systemd-coredump systemd-lang udev - Make sure to pre-install the groups systemd and udev rely on. This is needed when the tmpfiles are run at package installation time. Theoretically with only "Requires(pre): group()", rpm is allowed to drop the group at the end of the package installations hence let's keep "Requires: group()" dep. Note: this is also needed when (post)file-triggers are enabled due to the current limitation of the default libzypp transaction backend. - file-triggers: fix lua trigger priority for sysusers (bsc#1212376) A single digit in the priority used for sysusers got dropped somehow and upstream commit cd621954ed643c6ee0d869132293e26056a48826 forgot to restore it in the lua implementation. - file-triggers: skip the call to systemd-tmpfiles in chroot too. That way we ensure that packages that really need the tmpfiles in advance use the right API which is %tmpfiles_create_package. - file-triggers: to be consistent with what we already does with tmpfiles, we skip the call to systemd-sysusers and delay system user creations until the next reboot. - Temporarily add 5002-Revert-core-service-when-resetting-PID-also-reset-kn.patch until it's backported to the next stable release See https://github.com/systemd/systemd/pull/28000 ==== systemd-rpm-macros ==== Version update (23 -> 24) - Bump to version 24 - Drop %tmpfiles_create_package It can't work during transactional updates because the paths that systemd-tmpfiles usually operates on (such as /var) can't be changed. It appears that the only user of this macro doesn't really need this macro so let's drop it. - Drop %sysusers_create_inline It's deprecated and the only user of this macro is being converted to %sysusers_create_package. So drop it now before the deprecated macro attracts more users. - Unlike systemd-tmpfiles call in %tmpfiles_create_package(), systemd-sysusers must always be called by %sysusers_create_package() even on transactional systems since it's part of the macro contract. Writing to /etc is not recommended on such systems but it has to work anyways. ==== wtmpdb ==== Version update (0.6.0 -> 0.7.0) Subpackages: libwtmpdb0 - Update to version 0.7.0 - wtmpdb rotate: use sqlite3_bind_* internal - wtmpdb last: Implement -x, -d, -i and -w options

1 0

Firefox crashes at startup after update Tumbleweed
by victorhck 24 Jun '23

24 Jun '23

Hello. Today I ran a zypper dup as usual in my laptop running Tumbleweed with Plasma desktop, and when the process finished I reboot the system. After reboot, I can't no longer run firefox. It crashes at startup. If I ran firefox from a console and I get this message: ExceptionHandler::GenerateDump cloned child 3400 ExceptionHandler::SendContinueSignalToChild sent continue signal to child ExceptionHandler::WaitForContinueSignal waiting for continue signal... You can inxi info here: https://paste.opensuse.org/pastes/416b637cd3d8 How can fix this issue? Someone else has running the same issue? Kind regards -- ------------------- GPG Key: 0xcc742e8dc9b7e22a Fingerprint = 6FE2 3B1F AAC8 E5B7 63EA 88A9 CC74 2E8D C9B7 E22A Aprende a proteger la privacidad de tu correo: https://emailselfdefense.fsf.org/es/ Mi blog sobre openSUSE, GNU/Linux y software libre: https://victorhckinthefreeworld.com/ Herramientas para proteger tu privacidad https://victorhck.gitlab.io/privacytools-es/

7 7

New Tumbleweed snapshot 20230622 released!
by Dominique Leuenberger 23 Jun '23

23 Jun '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: brltty evolution icu (73.1 -> 73.2) libevdev (1.13.0 -> 1.13.1) librsvg libwebp nghttp2 (1.53.0 -> 1.54.0) nodejs20 (20.3.0 -> 20.3.1) open-vm-tools openexr (3.1.7 -> 3.1.8) python-gobject subversion tiff (4.5.0 -> 4.5.1) zlib-ng-compat (2.0.7 -> 2.1.2) === Details === ==== brltty ==== Subpackages: brltty-driver-at-spi2 brltty-driver-brlapi brltty-driver-speech-dispatcher brltty-driver-xwindow brltty-lang libbrlapi0_8 python3-brlapi system-user-brltty xbrlapi - Use conditionals for sysusers_requires to allow quilt setup - Remove workarounds for old TCL - Enable parallel build again - Don't use %tmpfiles_create_package anymore. This macro cannot work on transactional systems. However this macro was supposed to be used only when the tmpfiles stuff was needed in advance, which doesn't seem to be the case for brltty. ==== evolution ==== Subpackages: evolution-lang evolution-plugin-spamassassin - Add abdcc5af227972da8db1731f05e66a14eb4f6656.patch: fix "HTML attachment viewport is tiny" (glgo#GNOME/evolution#2400). ==== icu ==== Version update (73.1 -> 73.2) Subpackages: libicu73 libicu73-ledata - Update to release 73.2 * CLDR extends the support for âshortâ Chinese sort orders to cover some additional, required characters for Level 2. This is carried over into ICU collation. * ICU has a modified character conversion table, mapping some GB18030 characters to Unicode characters that were encoded after GB18030-2005. - Delete icu-UCHAR-uint16t.patch (merged) ==== libevdev ==== Version update (1.13.0 -> 1.13.1) Subpackages: libevdev-tools libevdev2 - update to 1.13.1: * include: sync event codes with kernel 6.2 * CI fixes ==== librsvg ==== Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2 rsvg-thumbnailer typelib-1_0-Rsvg-2_0 - Use %build_rustflags instead of the deprecated %__default_rustflags macro. Requires at least cargo-packaging 1.2.0+3 (boo#1212333). ==== libwebp ==== Subpackages: libsharpyuv0 libwebp7 libwebpdemux2 libwebpmux3 - Add libwebp-double-free.patch: Avoid a double free, upstream commit a486d800 (bsc#1210212 CVE-2023-1999). ==== nghttp2 ==== Version update (1.53.0 -> 1.54.0) - update to 1.54.0: * nghttpx: Consistent error handling and use of high-level API * h2load: Fix http3 upload stall * h2load: Use std::chrono::steady_clock for quic timestamp ==== nodejs20 ==== Version update (20.3.0 -> 20.3.1) Subpackages: npm20 - Update to version 20.3.1 (security fixes only). The following CVEs are fixed in this release: * (CVE-2023-30581, bsc#1212574): mainModule.__proto__ Bypass Experimental Policy Mechanism (High) * (CVE-2023-30584, bsc#1212575): Path Traversal Bypass in Experimental Permission Model (High) * (CVE-2023-30587, bsc#1212576): Bypass of Experimental Permission Model via Node.js Inspector (High) * (CVE-2023-30582, bsc#1212577): Inadequate Permission Model Allows Unauthorized File Watching (Medium) * (CVE-2023-30583, bsc#1212578): Bypass of Experimental Permission Model via fs.openAsBlob() (Medium) * (CVE-2023-30585, bsc#1212579): Privilege escalation via Malicious Registry Key manipulation during Node.js installer repair process (Medium) * (CVE-2023-30586, bsc#1212580): Bypass of Experimental Permission Model via Arbitrary OpenSSL Engines (Medium) * (CVE-2023-30588, bsc#1212581): Process interuption due to invalid Public Key information in x509 certificates (Medium) * (CVE-2023-30589, bsc#1212582): HTTP Request Smuggling via Empty headers separated by CR (Medium) * (CVE-2023-30590, bsc#1212583): DiffieHellman does not generate keys after setting a private key (Medium) ==== open-vm-tools ==== Subpackages: libvmtools0 open-vm-tools-desktop - Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867: open-vm-tools: Authentication Bypass vulnerability in the vgauth module + Add patch: 2023-20867-Remove-some-dead-code.patch ==== openexr ==== Version update (3.1.7 -> 3.1.8) Subpackages: libIex-3_1-30 libIlmThread-3_1-30 libOpenEXR-3_1-30 - update to 3.1.8: * Support for DWA compression in OpenEXRCore * Fix OSS-fuzz 59070 Stack-buffer-overflow in DwaCompressor_readChannelRules ==== python-gobject ==== Subpackages: python311-gobject python311-gobject-Gdk python311-gobject-cairo - Add %{?sle15_python_module_pythons}: build additional python flavors besides the 'default' when building for SLE15. ==== subversion ==== Subpackages: libsvn_auth_gnome_keyring-1-0 libsvn_auth_kwallet-1-0 subversion-bash-completion subversion-perl - Update _constraints to avoid some aarch64 workers for subversion:testsuite to avoid to hang ==== tiff ==== Version update (4.5.0 -> 4.5.1) - Update to version 4.5.1: * Definition of tags reformatted (clang-format off) for better readability of tag comments in tiff.h and tif_dirinfo.c * Do not install libtiff-4.pc when tiff-install is reset. * Add versioninfo resource files for DLL and tools compiled with Windows MSVC and MINGW. * Disable clang-formatting for tif_config.h.cmake.in and tiffconf.h.cmake.in because sensitive for CMake scripts. * CMake: make WebP component name compatible with upstream ConfigWebP.cmake * CMake: make Findliblzma with upstream CMake config file * CMake: FindDeflate.cmake: fix several errors (issue #526). * CMake: FindLERC.cmake: version string return added. * CMake: export TiffConfig.cmake and TiffConfigVersion.cmake files * CMake: fix export of INTERFACE_INCLUDE_DIRECTORIES * Hardcode HOST_FILLORDER to FILLORDER_LSB2MSB and make 'H' flag of TIFFOpen() to warn and an alias of FILLORDER_MSB2LSB. tif_lerc.c: use WORDS_BIGENDIAN instead of HOST_BIGENDIAN. * Optimize relative seeking within TIFFSetDirectory() by using the learned list of IFD offsets. * Improve internal IFD offset and directory number map handling. * Behavior of TIFFOpen() mode "r+" in the Windows implementation adjusted to that of Linux. * TIFFDirectory td_fieldsset type changed from unsigned long, which can be 32 or 64 bits, to uint32_t (fixes issue #484). * tif_ojpeg.c: checking for division by zero (fixes issue #554). * LZWDecode(): avoid crash when trying to read again from a strip whith a missing end-of-information marker (fixes issue #548). * Fixed runtime error: applying zero offset to null pointer in countInkNamesString(). * Fixing crash in TIFFUnlinkDirectory() when called with directory number zero ("TIFFUnlinkDirectory(0)") as well as fixing incorrect behaviour when unlinking the first directory. * tif_luv: check and correct for NaN data in uv_encode() (issue #530). * TIFFClose() avoid NULL pointer dereferencing (issue #515). * tif_hash_set.c: include tif_hash_set.h after tif_config.h to let a chance for GDAL symbol renaming trick. * Fax3: fix failure to decode some fax3 number_of_images and add test for Fax3 decoding issues (issue #513). * TIFFSetDirectory() and TIFFWriteDirectorySec() avoid harmless unsigned-integer-overflow (due to gdal oss-fuzz #54311 and #54343). * tif_ojpeg.c: fix issue #554 by checking for division by zero in OJPEGWriteHeaderInfo(). * LZWDecode(): avoid crash when trying to read again from a strip whith a missing end-of-information marker (issue #548). - Drop no longer needed patches: * tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch * tiff-CVE-2022-48281.patch * tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch ==== zlib-ng-compat ==== Version update (2.0.7 -> 2.1.2) - Update to version 2.1.2: * Many improvements to the CMake scripts. * Improved support for detecting memory alignment functions. * Improved support for unaligned access by letting the compiler promote code to unaligned if supported by the CPU. * Remove x86 cpu feature detection for TZCNT, safely fallback to BSF. * Enable using AVX512 intrinsics with GCC <9. * Decompression is a lot faster (56% faster measured on AVX2-capable x86-64) * Compresson is improved for Level 9, at the cost of a little performance. * Compression is improved for Level 3, by switching from deflate_fast to deflate_medium. * Levels 3 and 4 have been reconfigured to provide a better gradual tradeoff for speed/compression between levels 2 and 5. * Deflate_quick (Level 1) has been improved to default to a bigger windowsize and support changing the window size like the other levels. * Deflate_rle has been optimized with its own compare_256 implementation. * Adler32 implementation using AVX512, AVX512-VNNI, VMX. * CRC32-B implementation using VPCLMULQDQ & IBM-Z. * Slide hash implementation using VMX. * Compare256 implementations using SSE2, Neon, & POWER9. * Inflate chunk copying using SSSE3 & VSX.

1 0

btrfs - space_cache v1 or v2 ?
by Joe Salmeri 23 Jun '23

23 Jun '23

There seems to be conflicting documentation regarding btrfs space_cache v1 and v2 as to which is really the default. man 5 btrfs says: **space_cache, space_cache=<version>, nospace_cache (nospace_cachesince: 3.2, space_cache=v1and space_cache=v2since 4.5, *default: **space_cache=v1**) * There are two implementations of the free space cache. The original one, referred to as v1, is the safe default. The v1space cache can be disabled at mount time with nospace_cachewithout clearing. * If a version is not explicitly specified, the default implementation will be chosen, which is **v1**. ** * https://btrfs.readthedocs.io/en/latest/Administration.html says: (/nospace_cache/since: 3.2,/space_cache=v1/and/space_cache=v2/since 4.5, *default:****/space_cache=v2/**)* There are two implementations of the free space cache. *The original one, referred to as****/v1/**, used to be a safe default but has been superseded by****/v2/**.* The/v1/space cache can be disabled at mount time with/nospace_cache/without clearing. * If a version is not explicitly specified, the default implementation will be chosen, which is****/v2/**.* Does anyone know which documentation is correct ? I would have expected the man pages to be correct, however, it would appear to me they are outdated and the btrfs.readthedocs .io is probably more current. My TW installation is from before v2 existed, did all the zypper dups I've done since TW installation update my btrfs root to v2 or is this something we need to manually do? If it needs to be done, it looks like it is fairly easy to do for a non-root fs, via clearing and remounting, but is there any docs for the root fs ? Has anybody with older TW installs switched or did you just stay with v1 ? It seems like it matters most for large many TB fs and may not matter for smaller fs ( like say 500 GB ). -- Regards, Joe

3 8

RFC: turn off ppc32 and ppc64 big endian builds on openSUSE:Factory:PowerPC
by Fritz Hudnut 23 Jun '23

23 Jun '23

> > Hi Thomas! > > On Fri, 2023-06-23 at 09:52 +0200, Thomas Zimmermann via openSUSE Factory > wrote: > > I use ppc64 and ppc64le for testing various DRM drivers. The ppc64 > > variant is mostly interesting for its big-endian feature. > > > > I wasn't aware of the ppc32 build. Do you have a link to the installer > > ISO? I'm interested in trying it. > > If Debian is okay for your testing purposes, you can use the Debian images > I am creating on a regular basis. These always contain the latest kernel > in Debian unstable. > > See: > > > https://cdimage.debian.org/cdimage/ports/snapshots/2023-06-18/ > > I would love to do the same for openSUSE, but I haven't found anyone to > help > me with the effort. > > Adrian > > > > > > There hasn't been an installer medium for ppc32 for like ever... only > > ppc64 and ppc64le; IIRC, ppc32 is 'only' enabled to provide multi-arch > > support (aka -32bit packages) to ppc64. > > > > All published artefacts for ppc64/ppc64le (and the ppc32 rpms) are at > > http://download.opensuse.org/ports/ppc/tumbleweed > > > > Cheers, > > Dominique > > > > PS: and the ppc64 installer does not work since a long time and nobody > > cared sufficiently to get this in shape: > > https://bugzilla.opensuse.org/show_bug.cgi?id=1205401 > > bug boils down to 'installation-images' not being buildable due to > > multiple deps being broken > > I have an older install that I kept up-tp-date from time to time. So I > didn't notice. > > > > > Until like 3 weeks ago, we wasted openQA cycles on it: > > > https://openqa.opensuse.org/tests/overview?distri=microos&distri=opensuse&v… > > Given your's and Adrian's answers, I think I can live without ppc32 and > ppc64. > > et al: PPC linux has been the bastard child of linux for many years, back in '07 roughly was when I was looking for something to keep my PPC machines running, but the project was more or less abandoned over time . . . . I still have an iBook 32 bit that runs I think I got it to lubuntu 18.04??? I might have known about the Debian option, but back around '12 I dropped out of Debian due to the unfriendly forum behaviors . . . . Now I have two 64 bit Debian installs on my '12 Mac Pro, both run fine, Sid and Bookworm. I would check into running a Debian install on the iBook, except for the 946MB of RAM that it came with . . . not enough RAM to do anything on the 'Net . . . . Sayonara to PPC32 bit services. : - 0 F

1 0

Tumbleweed - Review of the week 2023/25
by Dominique Leuenberger 23 Jun '23

23 Jun '23

Dear Tumbleweed users and hackers, Finally back on the weekly review cycle – are we taking bets on how long I can keep it up (summertime is ‘terrible’ – it motivates too much to take Fridays off). Anyway, even without me there, you are used to Tumbleweed rolling. Lately, all the excellent work on Staging Is being performed by Ana. During this week, we managed to publish again 6 snapshots (the 7th was in QA, but took slightly longer to test than the next one needed to build). The 6 snapshots (0614, 0616, 0617, 0619, 0620, and 0620) brought you those changes: * Python 3.11 has been set as the default Python interpreter * libzypp: fix for stricter http/2 RFC 9113 server implementations: trim custom headers * Qt 5.15.10 * PHP 8.1.20 * LibreOffice 7.5.4.2 * poppler 23.06.0 * LLVM 16.0.6 * node.JS 20.3.0 * Mozilla Firefox 114.0.2 * KDE Plasma 5.27.6 Integration tests are currently being performed on these planned changes: * Linux kernel 6.3.9 * Protobuf 22.5: please help to sort out the failures in Staging:K * util-linux 2.39 * Mesa 23.1.3 * PHP 8.2.7: Nextcloud was updated to 26.0.3, which claims to support PHP 8.2 Cheers, Dominique

1 0

Anyone willing to maintain ckb-next ?
by Luigi Baldoni 23 Jun '23

23 Jun '23

Hello, not using hardware/ckb-next myself and not able to test its functionality since I don't own any compatible hardware.

1 0

Re: No X after today's TW snapshot
by j.reitsma＠hccnet.nl 23 Jun '23

23 Jun '23

Knurpht-openSUSE schreef op 23-06-2023 00:48: > Op vrijdag 23 juni 2023 00:38:21 CEST schreef j.reitsma--- via openSUSE > Factory: >> Root fs is btrs, so maybe go to an older snapshot? Never done that, >> seems a bit complicated from what I read on documentatie of snapper... > sudo snapper list > produces a list of snapshots. Pick the snapshot number (####) from > before the > dup. Then do > sudo snapper rollback #### > Reboot and that's done Hmm, that's indeed a lot simpler than I though to have read, thanks. Funny thing is there seems to be a snapshot gap: there are no snapshots between 1429 (of March 29) and 1452 (the 'pre' of first snapshot yesterday). Rollled back 1439, and (after a few reboots) I have a functionaliteit system again. Thanks! Back to zypper dup now, hope there's a usable nvidia set now. Regards, Jogchum .

1 0

Packages changed: MozillaFirefox (114.0.1 -> 114.0.2)
by Fritz Hudnut 23 Jun '23

23 Jun '23

Your package management system installs applications from rpms provided by > openSUSE mirrors. Such installations depend on system provided libraries, > and show > up in application menus automatically. They default to the application's > automatic > updating being totally disabled, impossible to enable, so that the package > management system can do its job. > > Mozilla provides archived self-contained (static) binaries to extract into > /home, > /opt or /usr/local. Usually it's up to you to determine how to facilitate > starting > them. They do not appear in the distro's package managment database. Most > default > to automatically updating under the covers so that you don't even know if > or when > updating happens, except by checking what is the currently installed > version. > -- > Evolution as taught in public schools is, like religion, > based on faith, not based on science. > > Team OS/2 ** Reg. Linux User #211409 ** a11y rocks! > > Felix Miata > Felix M: Thanks for the reply . . . not sure if I saw your name on the bugzilla #1212101 thread, but last week Firefox update caused it to crash on launch . . . and it seemed like it was figured out, just checking to see if the fix had made it into the regular zyppering. Folks were downloading from the Mozilla site to get the fix installed, etc. > > > I think it's pretty clear as you can see from the line > > "do not enable LTO as it caused crashes now (boo#1212101)" > > that the known crash from boo#1212101 has been fixed. > > There are other crash fixes from upstream in 114.0.2 apparently but > those are something different. > > Wolfgang > Wolfgang: OK, thanks for the confirmation on the availability of the fixed FF in zypper dup, as the line you mentioned, "do not enable LTO as it caused crashes now (boo#1212101)" seems to indicate "caution in the LTO enablement arena" rather than, "this is now fixed." But, glad to hear that it is ready for prime time again . . . except for the other upstream crashing. F F

1 0

No X after today's TW snapshot
by j.reitsma＠hccnet.nl 22 Jun '23

22 Jun '23

(Just sent it with a wrong se der address) Hi, Running zypper dup - no-vendor-change one of the problems zypper detected was a missing nvidia rpm from the TW repo. I decided to go for the optioneel to get it from nvidia's repo, but that appears not to be a wise decision: I have no X anymore. Kernel is 6.3.7-1-default. rpm -qa | grep nvidia gives nvidia-glG05-525.85.12-1.x86_64 (plus some other version 525 packages) kernel-firmware-nvidia-20230531-1.1.noarch What can I do to get X back? Root fs is btrs, so maybe go to an older snapshot? Never done that, seems a bit complicated from what I read on documentatie of snapper... OR deleting the current nvidia rpm's and restart zypper dup after refreshing? Any help appreciated! Regards, Jogchum

2 1

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 22 Jun '23

22 Jun '23

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have had problems for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - obs-service-tar_scm: Unresolvable Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

1 0

Packages changed: MozillaFirefox (114.0.1 -> 114.0.2)
by Fritz Hudnut 22 Jun '23

22 Jun '23

> > MozillaFirefox (114.0.1 -> 114.0.2) > > > > ==== MozillaFirefox ==== > Version update (114.0.1 -> 114.0.2) > Subpackages: MozillaFirefox-translations-common > > - Mozilla Firefox 114.0.2: > * Several crash fixes > * Web Extensions: Fixes for 114 regressions in Native Messaging > support > - do not enable LTO as it caused crashes now (boo#1212101) > > > For those of us residing in the great unwashed end user realm . . . does this now mean that running a dup in TW or Gecko rolling will now provide the fixed Firefox?? Or we still would have to download the rpm from mozilla and install it?? I skipped the 1556 package upgrade for TW on Monday, as there was a "firefox" listed in the to be upgraded, but tomorrow will be rotating back to the Gecko rolling edition that did blunder into the "instant crash" problem . . . . Hoping and praying that I can blithely zypper it back into full function?? I have been scanning the bug report, and seeing the "LTO" problem, but, being unwashed I don't know what that is or if it applies, etc. F

3 2

New Tumbleweed snapshot 20230621 released!
by Dominique Leuenberger 22 Jun '23

22 Jun '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MozillaFirefox (114.0.1 -> 114.0.2) bluedevil5 (5.27.5 -> 5.27.6) breeze (5.27.5 -> 5.27.6) breeze-gtk (5.27.5 -> 5.27.6) dialog discover (5.27.5 -> 5.27.6) double-conversion (3.2.1 -> 3.3.0) dracut (059+suse.375.gafb362e4 -> 059+suse.447.g9d1fc722) drkonqi5 (5.27.5 -> 5.27.6) evince (44.1 -> 44.2) icewm (3.3.5 -> 3.4.0) kactivitymanagerd (5.27.5 -> 5.27.6) kcm_flatpak (5.27.5 -> 5.27.6) kcm_sddm (5.27.5 -> 5.27.6) kde-cli-tools5 (5.27.5 -> 5.27.6) kde-gtk-config5 (5.27.5 -> 5.27.6) kgamma5 (5.27.5 -> 5.27.6) khotkeys5 (5.27.5 -> 5.27.6) kinfocenter5 (5.27.5 -> 5.27.6) kio kmenuedit5 (5.27.5 -> 5.27.6) kmod kpipewire (5.27.5 -> 5.27.6) kscreen5 (5.27.5 -> 5.27.6) kscreenlocker (5.27.5 -> 5.27.6) ksshaskpass5 (5.27.5 -> 5.27.6) ksystemstats5 (5.27.5 -> 5.27.6) kwayland-integration (5.27.5 -> 5.27.6) kwin5 (5.27.5 -> 5.27.6) kwrited5 (5.27.5 -> 5.27.6) layer-shell-qt (5.27.5 -> 5.27.6) libassuan (2.5.5 -> 2.5.6) libkdecoration2 (5.27.5 -> 5.27.6) libksba (1.6.3 -> 1.6.4) libkscreen2 (5.27.5 -> 5.27.6) libksysguard5 (5.27.5 -> 5.27.6) libmd (1.0.4 -> 1.1.0) libqb (2.0.6+20220323.758044b -> 2.0.7+20230607.06c8641) libssh2_org (1.10.0 -> 1.11.0) milou5 (5.27.5 -> 5.27.6) nautilus ncurses (6.4.20230615 -> 6.4.20230617) open-iscsi oxygen5-sounds (5.27.5 -> 5.27.6) pam_kwallet (5.27.5 -> 5.27.6) plasma-browser-integration (5.27.5 -> 5.27.6) plasma-nm5 (5.27.5 -> 5.27.6) plasma5-addons (5.27.5 -> 5.27.6) plasma5-desktop (5.27.5 -> 5.27.6) plasma5-disks (5.27.5 -> 5.27.6) plasma5-integration (5.27.5 -> 5.27.6) plasma5-openSUSE plasma5-pa (5.27.5 -> 5.27.6) plasma5-systemmonitor (5.27.5 -> 5.27.6) plasma5-thunderbolt (5.27.5 -> 5.27.6) plasma5-workspace (5.27.5 -> 5.27.6) polkit-kde-agent-5 (5.27.5 -> 5.27.6) powerdevil5 (5.27.5 -> 5.27.6) python-MarkupSafe (2.1.2 -> 2.1.3) python-SQLAlchemy (2.0.15 -> 2.0.16) python-pyOpenSSL (23.1.1 -> 23.2.0) rubygem-packaging_rake_tasks (1.5.3 -> 1.5.4) systemsettings5 (5.27.5 -> 5.27.6) texlive virt-v2v (2.0.7 -> 2.2.0) xdg-desktop-portal-kde (5.27.5 -> 5.27.6) yast2-installation (4.6.3 -> 4.6.4) yast2-network (4.6.3 -> 4.6.4) zbar === Details === ==== MozillaFirefox ==== Version update (114.0.1 -> 114.0.2) Subpackages: MozillaFirefox-translations-common - Mozilla Firefox 114.0.2: * Several crash fixes * Web Extensions: Fixes for 114 regressions in Native Messaging support - do not enable LTO as it caused crashes now (boo#1212101) ==== bluedevil5 ==== Version update (5.27.5 -> 5.27.6) Subpackages: bluedevil5-lang - Update to 5.27.6 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.6 - No code changes since 5.27.5 ==== breeze ==== Version update (5.27.5 -> 5.27.6) Subpackages: breeze5-cursors breeze5-decoration breeze5-style breeze5-style-lang libbreezecommon5-5 - Update to 5.27.6 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.6 - No code changes since 5.27.5 ==== breeze-gtk ==== Version update (5.27.5 -> 5.27.6) Subpackages: gtk2-metatheme-breeze gtk3-metatheme-breeze gtk4-metatheme-breeze metatheme-breeze-common - Update to 5.27.6 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.6 - Changes since 5.27.5: * gtk3: revert button padding hack ==== dialog ==== Subpackages: dialog-lang libdialog15 - Update to version 1.3-20230209: + install ".pc" files in the test-packages. + add pkg-config ".pc" file, for use with the development library. + change shared-library configuration in test-packages to use the ABI version in the library filename to match its SONAME. + add sample scripts to test-packages, using new makefile rule "install-examples". + corrected cdialog*.install helper scripts in test-package for Debian + change ftp URLs in test-packages to https + updated configure script, e.g., for compiler-warning fixes. + updated fur.po, zh_TW.po from http://translationproject.org/latest/dialog/ + modify slackware.rc to match dialog's output from "make check" using this configuration file (FreeBSD #267777). + fix shellcheck warnings in helper-scripts for building/installing. + updated configure script, e.g., for compiler-warning fixes. + updated hu.po from http://translationproject.org/latest/dialog/ + update config.guess, config.sub, install-sh + initialize color-settings before --create-rc option is processed. + add "use_scrollbar" setting in rc-file to use in whiptail.rc + improve manual page discussion of "--" token. + updated configure macro for math-library functions. + updated ca.po from http://translationproject.org/latest/dialog/ + update config.guess + fix links in manpages (FreeBSD #264660). + document the built-in key bindings which are not part of widgets. + updated da.po fa.po is.po, added ka.po from http://translationproject.org/latest/dialog/ + update config.sub + adjust fallback bindings for backspace/delete to match the curses library's sense of backspace (Arch #74379). + amend limit-checks to make --max-input work for sizes greater than 2048 (Debian #1004874). + corrected limit-checks in checklist.c, menubox.c, and treeview.c when resizing while the data is scrolled (Debian #1004868). + improve logic for updating form-height after screen-resizing. + move most of the non-API definitions from dialog.h to dlg_internals.h + updated configure macros. + update config.guess, config.sub + updated es.po, tr.po from http://translationproject.org/latest/dialog/ + update test-package for Debian to use debhelper. + adjust character-offset in editbox.c in case it is past the end of the string after trimming (Debian #1003185). + updated ro.po from http://translationproject.org/latest/dialog/ + fix some inconsistent #if vs #ifdef. + correct off-by-one limit for month when validating parameters of the calendar widget (patch by "viverna", Debian #1000720). + modify dlg_yes_labels to not switch to ok/cancel labels if the extra button is used (report by Ð¡ÑÑÐ¸Ð¶Ð°Ðº ÐÐ½Ð´ÑÐµÐ¹). + move leak-checking definitions from dialog.h to dlg_internals.h + use mktemp utility rather than tempfile for temporary filename in the sample scripts (patch by Ville SkyttÃ¤). + updated id.po, lt.po from http://translationproject.org/latest/dialog/ + update config.guess, config.sub + directly include stddef.h for systems which need it for offsetof(). + modify gauge's handle_input function to use the file pointer in the object in preference to the global dialog_state. + correct height-computation for fselect and timebox, broken by fixes for auto-layout (Debian #990043, cf: 2019/11/10). + improve configure --with-no-leaks option + amend adjustment to inputbox height so the autosized dimensions match older versions (report by Werner Fink, cf: 2021/01/17). + improve configure checks, to reduce warnings during those checks + updated fr.po from http://translationproject.org/latest/dialog/ + update config.guess, config.sub - Update keyring with latest key of Thomas E. Dickey ==== discover ==== Version update (5.27.5 -> 5.27.6) Subpackages: discover-backend-flatpak discover-backend-fwupd discover-backend-packagekit discover-lang - Update to 5.27.6 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.6 - Changes since 5.27.5: * rpmostree: Simplify filter (kde#470372) * Add math.max back * Fix broken checkbox pixel alignment (kde#471067) * FlatpakBackend: Update appstream cache before initializing * ApplicationPage: make heading/short description text selectable (kde#470297) * appdata: remove duplicate entry * flatpak: Make sure we are refreshing the appstream metadata * pk: Actually start the launch job (kde#466709) * fwupd: don't refresh directory-type remotes on setup ==== double-conversion ==== Version update (3.2.1 -> 3.3.0) - update to 3.3.0: * Fix some compile warnings in Visual Studio * Set permissions for github workflows * Add flags to control trailing decimal and zero in exponent form when input has one significant digit ==== dracut ==== Version update (059+suse.375.gafb362e4 -> 059+suse.447.g9d1fc722) - Update to version 059+suse.447.g9d1fc722: This a is backport of the most important fixes and features from the upstream master branch, while the release date of version 060 is still undefined. Features: * chore(shfmt): update to pass with shfmt v3.5.1 * feat(dracut-init.sh): do not print by default if an udev rule is skipped * feat(lsinitrd): notify user on missing compressor * feat(dracut): use log level indicator in console output * feat(kernel-modules): driver support for macbook keyboards * feat(dracut-init.sh): specify if a module cannot be found or cannot be installed Fixes: * fix(multipath): explicitly check if `hostonly_cmdline` is `yes` * fix(systemd-timedated): correct typo in override path * fix(systemd-resolved): correct typo in override path * fix(systemd-networkd): correct typos in override paths * fix(dracut-init.sh): correct check in `is_qemu_virtualized` function * fix(Makefile): execute command -v instead of which * fix(network-legacy): typo * fix(network,dbus): improve dependency checking * fix(systemd-pcrphase): only include systemd-pcrphase-initrd.service * fix(systemd-tmpfiles): do not include systemd-tmpfiles-clean.timer * fix(systemd-journald): do not include systemd-journal-flush.service * fix(systemd): do not include systemd-random-seed.service * fix(kernel-modules): add interconnect drivers * fix(dracut-lib.sh): remove successful finished initqueue scripts * fix(udev-rules): remove firmware.rules * fix(dracut.sh): silence the output of hardlinking files by default * fix(virtiofs): add virtio_pci kernel module to virtiofs * fix(dracut-systemd): rootfs-generator cannot write outside of generator dir * fix(dracut-systemd): check and create generator dir outside of inner function * fix(dracut-systemd): do not hardcode the systemd generator directory * fix(dracut-functions): avoid calling grep with PCRE (-P) * fix(dracut-initramfs-restore.sh): handle /etc/machine-id empty or uninitialized * fix(lsinitrd.sh): handle /etc/machine-id empty or uninitialized * fix(dracut.sh): handle /etc/machine-id empty or uninitialized * fix(systemd-networkd): add missing conf files and services * fix(dracut-functions.sh): convert mmcblk to the real kernel module name * fix(multipath): remove dependency on multipathd.socket * fix(99base): adjust to allow mksh as initrd shell * fix(base): do not quote $CLINE in the `set` command * fix(systemd-ac-power): correct systemd-ac-power binary path * fix(dracut.sh): use dynamically uefi's sections offset * fix(lvmthinpool-monitor): activate lvm thin pool before extend its size * fix(dmsquash-live): restore compatibility with earlier releases * fix(dracut.sh): kmoddir does not handle trailing / * fix(udev-rules): remove old eudev specific rule * fix(udev-rules): remove old redhat specific rule * fix(udev-rules): remove old edd_id extra rules * fix(udev-rules): remove old debian specific rules * fix(kernel-modules): add UFS drivers * fix(kernel-modules): use modalias info in get_dev_module() * fix(crypt): add missing libraries * revert(network-manager): avoid restarting NetworkManager * fix(dracut.sh): handle sbsign errors for UEFI builds * fix(dracut.sh): handle out of space error for UEFI builds * fix(network): IPv6: don't wait for RA for static IPv6 assignments * fix(network-legacy): always include af_packet * fix(network): don't assume prefix length 64 by default * fix(iscsi): prefix syntax for static iBFT IPv6 addresses * fix(iscsi): install 8021q module unconditionally * fix(plymouth): remove /etc/system-release dependency * fix(network-manager): add "After" dependency on dbus.service * fix(fido2): libfido2.so depends on libz.so * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" * fix: make iso-scan trigger udev events * fix(install): do not undef _FILE_OFFSET_BITS * fix(dracut.sh): --sysroot option broken if global variables not set in conf * fix(lsinitrd.sh): handle filenames with special characters * fix(dracut-systemd): remove unused argument * fix(dracut-init.sh): correct typo in comment * fix(dracut.sh): correct --help and --version exit codes * fix(crypt-gpg): do not use always --card-status * fix(dmsquash-live): live:/dev/* * fix(load_fstype): avoid false positive searchs * fix: shellcheck 0.8.0 ==== drkonqi5 ==== Version update (5.27.5 -> 5.27.6) Subpackages: drkonqi5-lang - Update to 5.27.6 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.6 - No code changes since 5.27.5 ==== evince ==== Version update (44.1 -> 44.2) Subpackages: evince-lang evince-plugin-comicsdocument evince-plugin-djvudocument evince-plugin-dvidocument evince-plugin-pdfdocument evince-plugin-tiffdocument evince-plugin-xpsdocument libevdocument3-4 libevview3-3 typelib-1_0-EvinceDocument-3_0 typelib-1_0-EvinceView-3_0 - Update to version 44.2: + data: Fix years on 44.x releases + shell: - Fix crash when instantiating .ui template - Fix restoring close button after fullscreen + Updated translations. ==== icewm ==== Version update (3.3.5 -> 3.4.0) Subpackages: icewm-config-upstream icewm-default icewm-lang icewm-lite - Update to version 3.4.0: * Features: - Support keybindings to shifted keys for issue #134. - Support keybindings to literal Latin-1 characters. - Support all UTF-8 code points in keybindings. * Fixes: - Fix for a map request from an unmanaged client for bbidulock/icewm#734. - When the keyboard layout changes, reparse the key bindings. * Changes: - Update the manpage for "icewm-keys". - Updated translations. ==== kactivitymanagerd ==== Version update (5.27.5 -> 5.27.6) Subpackages: kactivitymanagerd-lang - Update to 5.27.6 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.6 - No code changes since 5.27.5 ==== kcm_flatpak ==== Version update (5.27.5 -> 5.27.6) Subpackages: kcm_flatpak-lang - Update to 5.27.6 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.6 - Changes since 5.27.5: * Add KItemModels to dependencies * FlatpakPermissionModel: Merge defaults from a list of overrides (kde#466997) * FlatpakReference: Port metadata and overrides to a list of files ==== kcm_sddm ==== Version update (5.27.5 -> 5.27.6) Subpackages: kcm_sddm-lang - Update to 5.27.6 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.6 - Changes since 5.27.5: * Fix showing error messages (kde#471040) ==== kde-cli-tools5 ==== Version update (5.27.5 -> 5.27.6) Subpackages: kde-cli-tools5-lang - Update to 5.27.6 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.6 - Changes since 5.27.5: * kinfo: Use kcmshell5 with Plasma *5* - Drop patches, now upstream: * 0001-kinfo-Use-kcmshell5-with-Plasma-5.patch ==== kde-gtk-config5 ==== Version update (5.27.5 -> 5.27.6) Subpackages: kde-gtk-config5-gtk3 - Update to 5.27.6 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.6 - Changes since 5.27.5: * gsettings: use `const char*` directly * kded: update `scaling-factor` when setting global scale ==== kgamma5 ==== Version update (5.27.5 -> 5.27.6) Subpackages: kgamma5-lang - Update to 5.27.6 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.6 - No code changes since 5.27.5 ==== khotkeys5 ==== Version update (5.27.5 -> 5.27.6) Subpackages: khotkeys5-lang - Update to 5.27.6 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.6 - No code changes since 5.27.5 ==== kinfocenter5 ==== Version update (5.27.5 -> 5.27.6) Subpackages: kinfocenter5-lang - Update to 5.27.6 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.6 - No code changes since 5.27.5 ==== kio ==== Subpackages: kio-core kio-lang - Add patch to fix crash on thumbnail generation (kde#470845): * 0001-previewjob-Check-whether-thumbRootDevice-is-valid-be.patch ==== kmenuedit5 ==== Version update (5.27.5 -> 5.27.6) Subpackages: kmenuedit5-lang - Update to 5.27.6 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.6 - No code changes since 5.27.5 ==== kmod ==== Subpackages: kmod-bash-completion libkmod2 - On usrmerged system move kernel modules into /usr as well (boo#1211796) * usr-lib-modules.patch * testsuite-Move-setup-rootfs-logic-from-Makefile-to-s.patch - Refresh usr-lib-modprobe.patch - Refresh no-stylesheet-download.patch ==== kpipewire ==== Version update (5.27.5 -> 5.27.6) Subpackages: kpipewire-imports libKPipeWire5 libKPipeWire5-lang libKPipeWireDmaBuf5 libKPipeWireRecord5 - Update to 5.27.6 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.6 - No code changes since 5.27.5 ==== kscreen5 ==== Version update (5.27.5 -> 5.27.6) Subpackages: kscreen5-lang kscreen5-plasmoid - Update to 5.27.6 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.6 - Changes since 5.27.5: * Add boundaries to resolution text (kde#460397) ==== kscreenlocker ==== Version update (5.27.5 -> 5.27.6) Subpackages: kscreenlocker-lang libKScreenLocker5 - Update to 5.27.6 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.6 - No code changes since 5.27.5 ==== ksshaskpass5 ==== Version update (5.27.5 -> 5.27.6) Subpackages: ksshaskpass5-lang - Update to 5.27.6 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.6 - No code changes since 5.27.5 ==== ksystemstats5 ==== Version update (5.27.5 -> 5.27.6) Subpackages: ksystemstats5-lang - Update to 5.27.6 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.6 - No code changes since 5.27.5 ==== kwayland-integration ==== Version update (5.27.5 -> 5.27.6) - Update to 5.27.6 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.6 - No code changes since 5.27.5 ==== kwin5 ==== Version update (5.27.5 -> 5.27.6) Subpackages: kwin5-lang - Update to 5.27.6 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.6 - Changes since 5.27.5: * xwayland: Remove cursor definition (kde#442839,kde#459468) * screencast: Discard pending buffer and fence if stream state changes * screen edge: Emit cleanup signals if needed on teardown (kde#403354) * effects/magiclamp: Make it look good with hidden panels * XdgPopupWindow: Allow position to be set by Plasma (kde#463272) * plugins/qpa: initialize buffer in backingstore (kde#437062) * tiles: Adjust padding between windows (kde#469720) * Refine order of previous/next screens in Workspace::findOutput (kde#467996) * effects/magiclamp: Improve code readability * effects/magiclamp: Make it look good with floating panels (kde#361121,kde#466177) * effects/magiclamp: Improve animation direction heuristic (kde#463581) * Revert "wayland: Avoid pointer warp if constraint region is invalid" (kde#469555) * xcbutils: fix nativeFloor (kde#459373) - Drop patches, now upstream: * 0001-xcbutils-fix-nativeFloor.patch * revert-avoid-pointer-warp.patch ==== kwrited5 ==== Version update (5.27.5 -> 5.27.6) - Update to 5.27.6 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.6 - No code changes since 5.27.5 ==== layer-shell-qt ==== Version update (5.27.5 -> 5.27.6) - Update to 5.27.6 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.6 - No code changes since 5.27.5 ==== libassuan ==== Version update (2.5.5 -> 2.5.6) - Update to 2.5.6: * Fix logging of confidential data. [rA0fc31770fa] * Fix memory wiping. [T5977] * Fix macOS build problem. [T5440,T5610] * Upgrade autoconf stuff. * Release-info: https://dev.gnupg.org/T6542 ==== libkdecoration2 ==== Version update (5.27.5 -> 5.27.6) Subpackages: libkdecorations2-5 libkdecorations2-5-lang libkdecorations2private10 - Update to 5.27.6 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.6 - No code changes since 5.27.5 ==== libksba ==== Version update (1.6.3 -> 1.6.4) - Update to 1.6.4: * Correctly detect CMS write errors. [rK9ced7706f2] * Release-info: https://dev.gnupg.org/T6543 ==== libkscreen2 ==== Version update (5.27.5 -> 5.27.6) Subpackages: libKF5Screen8 libKF5Screen8-lang libKF5ScreenDpms8 libkscreen2-plugin - Update to 5.27.6 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.6 - Changes since 5.27.5: * dpms: Don't crash if trying to interact with the fake screen (kde#470484) * Fix the wrong argument in usage example * XRandR: Avoid a null pointer dereference in crtcChanged() ==== libksysguard5 ==== Version update (5.27.5 -> 5.27.6) Subpackages: ksysguardsystemstats-data libKSysGuardSystemStats1 libksysguard5-imports libksysguard5-lang libksysguard5-plugins - Update to 5.27.6 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.6 - No code changes since 5.27.5 ==== libmd ==== Version update (1.0.4 -> 1.1.0) - Update to version 1.1.0: * man: Add new libmd(7) man page * doc: Move mailing list reference to the end * build: Fix version script linker support detection * build: Switch to debian:latest Docker image * build: Fix configure.ac indentation * build: Require automake 1.11 * build: Do not use strong aliases on macOS * On Darwin use assembler to support symbol aliases * build: Rename libmd_alias() to libmd_strong_alias() * Remove unused <assert.h> * Sync MD2 changes from NetBSD * Sync MD4 changes from OpenBSD * Sync MD5 changes from OpenBSD * Sync RMD160 changes from OpenBSD * Sync SHA1 changes from OpenBSD * Sync SHA2 changes from OpenBSD * test: Add a new test_eq() helper function * test: Add cases for SHA224 and SHA512-256 * build: Terminate lists in variables with Â«# EOLÂ» ==== libqb ==== Version update (2.0.6+20220323.758044b -> 2.0.7+20230607.06c8641) - Update to version 2.0.7+20230607.06c8641 (v2.0.7): - blackbox: fix potential overlow/memory corruption (gh#ClusterLabs/libqb#486) - tests: allow -j to work (gh#ClusterLabs/libqb#485) - strlcpy: avoid compiler warning from strncpy (gh#ClusterLabs/libqb#473) - timer: Move state check to before time check (gh#ClusterLabs/libqb#479) - ipc: Retry receiving credentials if the the message is short (gh#ClusterLabs/libqb#476, rh#2111711) - lib: Fix some small bugs spotted by newest covscan (gh#ClusterLabs/libqb#471) - doxygen2man: Fix function parameter alignment (gh#ClusterLabs/libqb#468) ==== libssh2_org ==== Version update (1.10.0 -> 1.11.0) - Update to 1.11.0: * Enhancements and bugfixes - Adds support for encrypt-then-mac (ETM) MACs - Adds support for AES-GCM crypto protocols - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys - Adds support for RSA certificate authentication - Adds FIDO support with *_sk() functions - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends - Adds Agent Forwarding and libssh2_agent_sign() - Adds support for Channel Signal message libssh2_channel_signal_ex() - Adds support to get the user auth banner message libssh2_userauth_banner() - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519, AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex() - Adds wolfSSL support to CMake file - Adds mbedTLS 3.x support - Adds LibreSSL 3.5 support - Adds support for CMake "unity" builds - Adds CMake support for building shared and static libs in a single pass - Adds symbol hiding support to CMake - Adds support for libssh2.rc for all build tools - Adds .zip, .tar.xz and .tar.bz2 release tarballs - Enables ed25519 key support for LibreSSL 3.7.0 or higher - Improves OpenSSL 1.1 and 3 compatibility - Now requires OpenSSL 1.0.2 or newer - Now requires CMake 3.1 or newer - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs - SFTP: No longer has a packet limit when reading a directory - SFTP: now parses attribute extensions if they exist - SFTP: no longer will busy loop if SFTP fails to initialize - SFTP: now clear various errors as expected - SFTP: no longer skips files if the line buffer is too small - SCP: add option to not quote paths - SCP: Enables 64-bit offset support unconditionally - Now skips leading \r and \n characters in banner_receive() - Enables secure memory zeroing with all build tools on all platforms - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive - Speed up base64 encoding by 7x - Assert if there is an attempt to write a value that is too large - WinCNG: fix memory leak in _libssh2_dh_secret() - Added protection against possible null pointer dereferences - Agent now handles overly large comment lengths - Now ensure KEX replies don't include extra bytes - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER - Fixed possible buffer overflow in keyboard interactive code path - Fixed overlapping memcpy() - Fixed Windows UWP builds - Fixed DLL import name - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows - Support for building with gcc versions older than 8 - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files - Restores ANSI C89 compliance - Enabled new compiler warnings and fixed/silenced them - Improved error messages - Now uses CIFuzz - Numerous minor code improvements - Improvements to CI builds - Improvements to unit tests - Improvements to doc files - Improvements to example files - Removed "old gex" build option - Removed no-encryption/no-mac builds - Removed support for NetWare and Watcom wmake build files * Rebase libssh2-ocloexec.patch ==== milou5 ==== Version update (5.27.5 -> 5.27.6) Subpackages: milou5-lang - Update to 5.27.6 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.6 - No code changes since 5.27.5 ==== nautilus ==== Subpackages: gnome-shell-search-provider-nautilus libnautilus-extension4 nautilus-lang - Add 3a931f61.patch patch to fix crash when closing tabs right after clicking. ==== ncurses ==== Version update (6.4.20230615 -> 6.4.20230617) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch 20230617 + markup manpages with revision information (prompted by discussion with Bjarni Ingi Gislason). ==== open-iscsi ==== Subpackages: libopeniscsiusr0 - Fix iscsiuio build version by updating iscsiuio/meson.build and RPM SPEC file (bsc#1210514), updating open-iscsi-SUSE-latest.diff.bz2 ==== oxygen5-sounds ==== Version update (5.27.5 -> 5.27.6) - Update to 5.27.6 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.6 - No code changes since 5.27.5 ==== pam_kwallet ==== Version update (5.27.5 -> 5.27.6) Subpackages: pam_kwallet-32bit pam_kwallet-common - Update to 5.27.6 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.6 - No code changes since 5.27.5 ==== plasma-browser-integration ==== Version update (5.27.5 -> 5.27.6) Subpackages: plasma-browser-integration-lang - Update to 5.27.6 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.6 - No code changes since 5.27.5 ==== plasma-nm5 ==== Version update (5.27.5 -> 5.27.6) Subpackages: plasma-nm5-lang plasma-nm5-openconnect plasma-nm5-openvpn plasma-nm5-pptp plasma-nm5-vpnc - Update to 5.27.6 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.6 - No code changes since 5.27.5 ==== plasma5-addons ==== Version update (5.27.5 -> 5.27.6) Subpackages: plasma5-addons-lang - Update to 5.27.6 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.6 - Changes since 5.27.5: * Color Picker: Round color values before formatting them * alternatecalendar: set dayLabel for Qt calendar providers (kde#470034) ==== plasma5-desktop ==== Version update (5.27.5 -> 5.27.6) Subpackages: plasma5-desktop-emojier plasma5-desktop-lang - Update to 5.27.6 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.6 - Changes since 5.27.5: * Panel: mitigate plasmashell high CPU usage when moving windows * Desktop: set accentColor binding enabled condition * applets/kickoff: consider `devicePixelRatio` in `minimumGridRowCount` * applets/kimpanel: address QStringLiteral data duplication * applets/taskmanager: subscribe to windowViewAvailableChanged signal (kde#469731) * knetattach: don't store username in WebDAV URL * applets/taskmanager: avoid updating dragSource when active is false (kde#466675) ==== plasma5-disks ==== Version update (5.27.5 -> 5.27.6) Subpackages: plasma5-disks-lang - Update to 5.27.6 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.6 - No code changes since 5.27.5 ==== plasma5-integration ==== Version update (5.27.5 -> 5.27.6) Subpackages: plasma5-integration-plugin plasma5-integration-plugin-lang - Update to 5.27.6 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.6 - No code changes since 5.27.5 ==== plasma5-openSUSE ==== Subpackages: plasma5-defaults-openSUSE plasma5-theme-openSUSE plasma5-workspace-branding-openSUSE sddm-theme-openSUSE - Update to 5.27.6 ==== plasma5-pa ==== Version update (5.27.5 -> 5.27.6) Subpackages: plasma5-pa-lang - Update to 5.27.6 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.6 - Changes since 5.27.5: * applet: Fix crash when opening context menu with no contents (kde#470847) ==== plasma5-systemmonitor ==== Version update (5.27.5 -> 5.27.6) Subpackages: plasma5-systemmonitor-lang - Update to 5.27.6 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.6 - Changes since 5.27.5: * Fix layout of Add New Page dialog with wordy languages (kde#470726) ==== plasma5-thunderbolt ==== Version update (5.27.5 -> 5.27.6) Subpackages: plasma5-thunderbolt-lang - Update to 5.27.6 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.6 - Changes since 5.27.5: * Fix UI with huge window sizes (kde#461102) ==== plasma5-workspace ==== Version update (5.27.5 -> 5.27.6) Subpackages: gmenudbusmenuproxy plasma5-session plasma5-session-wayland plasma5-workspace-lang plasma5-workspace-libs xembedsniproxy - Update to 5.27.6 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.6 - Changes since 5.27.5: * applets/kicker: fix test error in testrunnermodel * kcms/krdb: Set X root window cursor * shell: make accent color optional, and enable accent color after slot connection (kde#470280) * libtaskmanager: fix copy leftover in document * runners/calculator: implement thread-safety in QalculateEngine::evaluate (kde#470219) * applets/batterymonitor: Fix wrong tooltip when plugged in but discharging (kde#470632) * applets/mediacontroller: add busy indicator for remote images * Widgetexplorer: Properly handle translations for applet categories (kde#460523) * wallpapers/image: resize svg wallpaper to requested size (kde#469294) * Klipper config: set UI state when loading the same way as when editing * holidaysevents: reload event data when config changes (kde#437654) * runners/services: Do not match categories for short queries (kde#469769) * components/calendar: reset label under Gregorian date when plugin list changes * components/calendar: use QHash::contains instead of QHash::count * applets/digital-clock: show today's sublabel in tooltip if there is one * applets/systemtray: fix highlight being on top of first column items (kde#456180) * applets/digital-clock: Fix localization for TimeZoneModel (kde#469196) * applets/digital-clock: Allow event titles to be wrapped * Export a new helper function that read Xft.dpi value * libtaskmanager: Fix appmenu caching (kde#422786) ==== polkit-kde-agent-5 ==== Version update (5.27.5 -> 5.27.6) Subpackages: polkit-kde-agent-5-lang - Update to 5.27.6 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.6 - No code changes since 5.27.5 ==== powerdevil5 ==== Version update (5.27.5 -> 5.27.6) Subpackages: powerdevil5-lang - Update to 5.27.6 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.6 - Changes since 5.27.5: * Fix ddcutil for laptop user (kde#469895) * Take property update frequency into account for smoothed remaining time * Delay Solid::Battery instatiation until actually required * Avoid repeated Solid::Battery instantiations on charge level change ==== python-MarkupSafe ==== Version update (2.1.2 -> 2.1.3) - update to 2.1.3: * Implement ``format_map``, ``casefold``, ``removeprefix``, and ``removesuffix`` methods. * Fix static typing for basic ``str`` methods on ``Markup``. * Use ``Self`` for annotating return types. :pr:`379` ==== python-SQLAlchemy ==== Version update (2.0.15 -> 2.0.16) - update to 2.0.16: * Python 3.12 support * Fixed regression in the 2.0 series where the default value of validates.include_backrefs got changed to False for the validates() function * Unified the custom PostgreSQL operator definitions * Added support for PostgreSQL 10 NULLS NOT DISTINCT feature of unique indexes and unique constraints * Use proper precedence on PostgreSQL specific operators, such as @> * see https://docs.sqlalchemy.org/en/20/changelog/changelog_20.html#change-2.0.16 ==== python-pyOpenSSL ==== Version update (23.1.1 -> 23.2.0) - update to 23.2.0: * Removed ``X509StoreFlags.NOTIFY_POLICY``. * ``cryptography`` maximum version has been increased to 41.0.x. * Invalid versions are now rejected in ``OpenSSL.crypto.X509Req.set_version``. * Added ``X509VerificationCodes`` to ``OpenSSL.SSL``. ==== rubygem-packaging_rake_tasks ==== Version update (1.5.3 -> 1.5.4) - Fixed crash in "build_dependencies:*" rake tasks when processing some spec files (related to bsc#1211319) - 1.5.4 ==== systemsettings5 ==== Version update (5.27.5 -> 5.27.6) Subpackages: systemsettings5-lang - Update to 5.27.6 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.6 - Changes since 5.27.5: * Improve keyboard navigation in sidebar ==== texlive ==== Subpackages: libkpathsea6 libsynctex2 - Skip obsolete suse_version 1230 as well as superfluous defattr in file sections of spec files - Update rpmlintrc filters ==== virt-v2v ==== Version update (2.0.7 -> 2.2.0) Subpackages: virt-v2v-bash-completion - Update to virt-v2v 2.2.0 * New virt-v2v-inspector(1) tool. This tool can be used before conversion to collect facts about the source guest, such as number of disks, and to estimate the disk space required after conversion. * Add support for NVMe devices and SATA hard disks when importing from VMware VMX files (Laszlo Ersek). * Add support for importing to KubeVirt using the new experimental -o kubevirt mode. * Windows 11 guests are now supported. * Rocky Linux guest support has been added (Andrey Drobyshev). * The -o json mode was removed. It was intended to be used with KubeVirt but was never actually used there. Use -o kubevirt instead. * Numerous bug fixes and build changes ==== xdg-desktop-portal-kde ==== Version update (5.27.5 -> 5.27.6) Subpackages: xdg-desktop-portal-kde-lang - Update to 5.27.6 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.6 - Changes since 5.27.5: * return correct user info (kde#469697) ==== yast2-installation ==== Version update (4.6.3 -> 4.6.4) - Don't always enable sshd and open the ssh port (bsc#1211764) - 4.6.4 ==== yast2-network ==== Version update (4.6.3 -> 4.6.4) - bsc#1211431 - Do not crash installation when storing vlan configuration into NetworkManager - 4.6.4 ==== zbar ==== - Modernise spec file - Split lang subpackage

1 0

Call for Leap 15.6 Early feature requests
by Lubos Kocman 22 Jun '23

22 Jun '23

Hello openSUSE! Now that we have Leap 15.6 *confirmed it is time to collect ideas in https://code.opensuse.org/leap/features/issues This call is for those who know that update of their favorite package(s) in Leap 15.6 will depend on a update of a SLES package. We're also interested in tracking higher level or more complex requests/ideas that will require some co-ordination and or could use some more visibility as the list is also input for Release Annoucement etc. SLES Release Management would like to have all "early" features for SLES 15 SP6 requsted by 21st of July, which is in a bit more than month from now. We can of course request SLES 15 SP6 features even after the deadline, but they could be potentially treated as late features which comes with extra process overhead. Leap itself isn't as strict, and we basically accept new packages / features until the code submission *deadline for Leap 15.6 Beta, which is end of February 2023. Leap 15.6 Features that we already know will land late, due to their own schedule should ideally be tracked in code- o-o as well. As usual I'm reviewing incoming requests together with Neal on Mondays 15:00 CEST at https://meet.opensuse.org/meeting Happy Hacking! [0]https://news.opensuse.org/2023/06/06/leap-15.6-annoucement/ [1]https://en.opensuse.org/openSUSE:Roadmap#Schedule_for_openSUSE_Leap_15.6 Lubos Kocman openSUSE Leap Release Manager

2 2

Call for Leap 15.6 Early feature requests
by Fritz Hudnut 22 Jun '23

22 Jun '23

> From: Lubos Kocman <lubos.kocman(a)suse.com> > Leap itself isn't as strict, and we basically accept new packages / > features until the code submission *deadline for Leap 15.6 Beta, which > is end of February 2023. Leap 15.6 et al: This is good news on the continuation of the Leap line . . . personally I don't have any need for added features to 15.5, but a few of questions remain. Assuming the "end of February 2023" actually means "2024"??? So that means those of us with a Leap 15.5 distro could be upgrading to 15.6 Alpha sometime late in '23 or early in '24?? And then, very critical question . . . to "up, or to dup . . . that is the question????" : - ))) F

3 2

Raw data from Leap 15.5 retrospective + two review rounds
by Lubos Kocman 22 Jun '23

22 Jun '23

Hello team, I've uploaded ods with a raw dump from LimeSurvey into https://en.opensuse.org/Portal:15.5/Retrospective I would like to start processing the results 1 hour prior (that means 8pm-9pm CEST) to today's weekly community meeting slot. Details at https://etherpad.opensuse.org/p/weeklymeeting I expect to continue the next week again on Tuesday, again 1 hour before the weekly meeting at (means 15:30-16:30 CEST). I'll be doing screen sharing on https://meet.opensuse.org/meeting and will be categorizing output from the ods into categories on the previously mentioned wiki page and start to create action items. Everybody is welcome to join and help to create action items, go through the raw data on his own, or simply re-read the page later once the data is categorized. Thank you all for participating in the survey! Lubos Kocman openSUSE Leap Release Manager

1 0

Snapshot 20230614 updates most of the packages?
by Andrei Borzenkov 22 Jun '23

22 Jun '23

Apparently there was full rebuild; any reason for this? The update was from 20230613, so it was not lack of intermediate updates.

8 14

openSUSE Release Engineering meeting 21.07.2023
by Lubos Kocman 21 Jun '23

21 Jun '23

All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting The meeting is hosted here https://meet.opensuse.org/ReleaseEngineeringMeeting ## Attendees Guillaume, DimStar, lkocman, wengel, anag, docb, maxlin, dirk ## Leap Leap 15.5 retrospective closes today at midnight. So far we have 359 responses in total https://survey.opensuse.org/ until 21st of June (so far 221 responses in total was 760 previous release). NVIDIA repo issues https://bugzilla.opensuse.org/show_bug.cgi?id=1212189 libzypp fix on the way ^ This should be candidate for a next respin for image. Marked as resolved fixed. Cleanup of Leap 15.X features in https://code.opensuse.org/leap/features/issues We are down at 28 features openned. There are a few that I think we won't be ever able to close, unless the direction of SUSE's development changes. Example: full office365 integration :-) Cfp is open for related conferences in Czechia: Linux Days https://www.linuxdays.cz/2023/ * I'd prefer to show a demo there something like Leap Micro / Pihole or NextCloud deployment To show people the concept and easiness of deployment (under 5-10 minutes in VM from scratch on my WS) * openALT https://www.openalt.cz/2023/ * submitted same talk as I had on oSC "openSUSE Leap 16.0?" * lkocman asked for an option openSUSE booth via email Devconf - I'd like to get some "invoice for deposit" from local coffee company so we can partially sponsor the event via OSCC budget. Heads up! Richard's architecture call focusing on leap-next next week on Tuesday 16:30 CEST at meet.opensuse.org/meeting ## openSUSE Tumbleweed openSUSE:Factory build fail stats: 112 (89 python-*) failed 14 unresolvable (last week: 19 failed, 7 unresolvable) https://tinyurl.com/ysy4nnnz * python 3.11 is now the default python interpreter. This resulted in a larger-than-usual rebuild of the snapshot python 3.10 is not 'obsoleted' on the system and as a result, python310-* packages are not auto-removed from installations. * protobuf 22.5 is staged; most things fixed, Last failures are on open-vm-tools and libzypp, both ignoring .pc files information to properly build * libxml2 2.11.x blocked, as it breaks things like perl-XML-LibXML, * fmt 10 blocked, as it breaks ceph Ana: stagings are full! ;-) ## Richard (Aeon) @SUSECon No news this week, status from last week (below) still applies MicroOS Desktop (GNOME) has been renamed openSUSE Aeon https://aeondesktop.org Product already being bootstrapped in OBS, using it as a pathfinder for the ALP Build Design (see below) Prototypical image being built, challenges with things like repo layout will likely be best handled by the repos-via-rpms already pioneered by Leap Richard has been hands on with Agama, has identified a few things that need addressing before Aeon could use it happily..may use it anyway https://github.com/openSUSE/agama/issues/602 https://github.com/openSUSE/agama/issues/601 Experimenting with ALP-like encrypted images with FDE and TPM unlock using kiwi Self-Installer. May be the 'one true way' of installing Aeon in the future, has far less options, isn't as pretty as Agama, but does the job we want it done the way we want it done. Much of this is dependant on ALP stuff getting into Factory which is WIP ## Richard (ALP Architecture) @SUSECon Prelimary ALP Build Design documented https://en.opensuse.org/openSUSE:ALP/BuildDesign ALP Architecture team is being bootstrapped https://en.opensuse.org/openSUSE:ALP/ArchitectureTeam Team will plan, design, experiment with ideas for future ALP-based openSUSE distros Kick Off Meeting on 27th June 1430UTC at https://meet.opensuse.org/meeting ## Max Leap 15.6 * Wait for the 15 SP6 project to be setup in IBS and OBS lkocman: Confirmed with Rado and Marco that we have to wait. Dirk: did you also request Arm setup for 15.6? lkocman: we're blocked on SLES 15 SP6 setup missing atm. ## Guillaume - Arm Tumbleweed: * Snapshot 20230613 was not released because of a (packaging) bug with Mesa - https://bugzilla.opensuse.org/show_bug.cgi?id=1212433 * Snapshot 20230619 looks good so far and should be released later today with the fixes for Mesa [0] and plasmashell (actually Qt) [1] and also with python 3.11 as default interperter * shim currently not signed by Microsoft for aarch64 (Tumbleweed only, Leap is fine). It has been sent upstream for review, so it is progressing - https://bugzilla.suse.com/show_bug.cgi?id=1211297 [0]: https://bugzilla.opensuse.org/show_bug.cgi?id=1212433 [1]: https://bugzilla.opensuse.org/show_bug.cgi?id=1211628 Leap: * No update ALP: * shim not signed by MS (at least for aarch64, not sure for x86_64) - jsc#ARM-100 WSL: * Works with x86 emulator since appx installer is x86-64, but this is not really an issue since arm64 Win11 includes x86 emulator by default. Team is ok to publish it on Microsoft store anyway, but this would require some testing in openQA which is currently not possible (due to technical issues and MS licensing issues) https://progress.opensuse.org/issues/126083. Steps documented on the wiki to install the appx from download.o.o: https://en.opensuse.org/openSUSE:WSL#With_Appx_from_openSUSE_download_server ## Sarah - s390x Not available Tumbleweed * blocked by Mesa:drivers build failure https://bugzilla.opensuse.org/show_bug.cgi?id=1212339 Leap: * working * waitingSubmissisions with fixes for gtkd and gnu-cobol: https://build.opensuse.org/request/show/1072852 https://build.opensuse.org/request/show/1078385 Sarah gave 2 talks at the openSUSE Conference The SUSE/openSUSE zSystems BBQ meeting will be 7th July 2023. The bi-weeky openSUSE zSystems meeting will switch from 18:00 to 19:00. ## Doug @SUSECon * Merged a few PRs * Preparing for SUSECON * metrics.o.o. Leap 15.4 * Updating news coverage of Leap 15.5 release * Community meeting * Beginning June 27, Meeting 1 (Tuesdays) will be dedicated for ALP *** listed above * openSUSE.Asia Summit * CfP * Discussing openSUSE booth @Albania (via Dimitar) with Doug * openSUSE Conference * videos are expected to be released at the end of June * Fedora flock CfP is open - https://cfp.fedoraproject.org/login - TSP equivalent is available Static * Still need future storage location * AI topics (static) *LFNW 2023 https://sessionize.com/lfnw2023 Dan Cermak already submitted ALP related talk + few others ## Dirk Still working on the CDN/Fastly contract Working on protobuf update and a few other Factory updates Dirk: cprotobuf requires it (in discussion regarding rejection of protobuf sr) Need to submit more x86-64-v3 enablement ## Wolfgang (Package Hub), Scott Bahling no news ## Maintenance team (Marcus or Maurizio (m4u)) libzypp update in 15.5 was fixed by releasing missing dependency. libzypp issue that can be properly addressed only with respin of DVD. See section above for more details. openQA is stuck due to a regression - https://bugzilla.suse.com/show_bug.cgi?id=1211459 snapper update in queue for a next few days notifications about outdated packages, Marcus is using sql data dump from repology. DimStar: Aaah that's where they are coming from Dirk: there should be http restful API Marcus: seems like they were using just RabbitMQ. I'll look into the api. Leap Micro 5.4 maint-setup is active. Leap 15.5 setup is done, SLE export channel is still being refreshed occasionaly. 15.5 GA is currently scheduled for the 7th of June Key rotation: Migration with changed 4k key. Current autoimport solution is not ideal. Marcus will work on update of the opensuse-build-key https://en.opensuse.org/SDB:System_upgrade#0._New_4096_bit_RSA_signing_key openSUSE:Leap:15.5 is done, Backports are bit more challenging because of SLES. Wolfgang: we're injecting the key. Marcus we probably want to do only Backports 15 SP5 for now. Backports 15SP5 key change, we have labs next week, so nobody would even notice a full rebuild :-) Wolfgang: do we add or replace key completely? The key will be kept on users Marcus was aiming for replacing the key, it would appear as added on existing systems. Marcus is working also on the SLES side, the update of package with the new key was released last week, it's just not activated yet, but it will be already trusted by Leap 15.5 systems. Leap 15.4 is working Leap Micro 5.3 is working Leap Micro 5.4 testing is now passing as well Leap 16.0 - we should revisit the update/sle repo as the current setup not exactly mirror friendly. Solutions could be dropping not so popular architectures or split repositories per architecture. securebootkey for SLES was rotated, it should be autotrusted and not noticeable. This will be in QU3, QU2 is already done. lkocman: 15.3 EOL could lead to stopping our physical Source DVD effort, as it seems we will not produce. As this was the last release which you could still get on a physical media. Lkocman: anything against decomissioning it? Not a single valid request since I've joined SUSE. We did receive only requests for binary install media which are not subject to ^. We do not plan to offer this for any new releases. ## Adrian - OBS Not available OBS build power is back to normal after fixing misconfiguration which kept workers busy. ## Heroes Planning move of download-o-o to Prague along with OBS. Kristyna Streitova would like to setup a new "updated" weblate instance in Prague office. I told her to reach out to heroes, so there is no wasted effort on migrating the old instance. ## Open Floor DimStar is experimenting with CDN at home: CDN timeouts, (fixed after 5 minutes of retry)

1 1

openSUSE Leap 15.5 Release retrospective survey is open
by Lubos Kocman 21 Jun '23

21 Jun '23

Hello openSUSE! openSUSE Leap 15.5 was released earlier this week and the openSUSE release team would like to hear from you about your experience with openSUSE Leap 15.5. Did anything go particularly well, or perhaps did we miss something? Did you have trouble downloading, installing, or contributing to Leap 15.5? Did you like the overall communication? Simply head to https://survey.opensuse.org/ and tell us. More details and how to participate in Leap 15.5 recognition efforts at https://news.opensuse.org/2023/06/09/leap-15.5-release-retrospective/ Thank you very much in advance Lubos Kocman on behalf of openSUSE Release team

1 2

New Tumbleweed snapshot 20230620 released!
by Dominique Leuenberger 21 Jun '23

21 Jun '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ell (0.56 -> 0.57) freeipmi (1.6.10 -> 1.6.11) gjs (1.76.1 -> 1.76.2) gnome-video-effects (0.5.0 -> 0.6.0) imlib2 libgepub (0.7.0 -> 0.7.1) libzypp (17.31.13 -> 17.31.14) mozc (2.28.4715.102 -> 2.29.5111.102) systemd-presets-common-SUSE vsftpd wicked (0.6.72 -> 0.6.73) yast2-trans (84.87.20230602.240a95214f -> 84.87.20230619.113a4fdc71) zypper (1.14.60 -> 1.14.61) === Details === ==== ell ==== Version update (0.56 -> 0.57) - update to 0.57: * Fix issue with handling Generic Netlink cancel requests. ==== freeipmi ==== Version update (1.6.10 -> 1.6.11) Subpackages: libfreeipmi17 libipmiconsole2 libipmidetect0 - freeipmi 1.6.11 * Fix double free corner case in ipmiseld. * Support ISO 8601 date inputs to date range options in ipmi-sel. * Support Xilinx OEM FRU records. * Fix corner case in libipmimonitoring, support sensor if units is "RPM per minute", but just return "RPM" as the units. * Fix portability compilation on cygwin. * Fix typo in fiid template field that could lead to packet interpretation errors. ==== gjs ==== Version update (1.76.1 -> 1.76.2) Subpackages: libgjs0 typelib-1_0-GjsPrivate-1_0 - Update to version 1.76.2: + Various fixes ported from the development branch. + Closed bugs and merge requests: - GJS freezes, program stops responding, error states Gtk4 EventController GestureClick returns incorrect state- Gdk.ModifierType on mouse button press in X11 - Caller allocated boxed types or structs are not fully released - Gjs console leaks invalid option errors ==== gnome-video-effects ==== Version update (0.5.0 -> 0.6.0) - Update to version 0.6.0: + Fix flip effect with recent gstreamer. + Add new scanlines effect using frei0r. + Various meson build fixes. + Updated translations. - Drop gnome-video-effects-meson-pkgconfig-fix.patch: Fixed upstream. ==== imlib2 ==== Subpackages: imlib2-loaders libImlib2-1 - Changelog update only - integer overflow (with resultant invalid memory allocations and out-of-bounds reads) via an icon with many colors in its color map was fixed in 1.7.0 (bsc#1171472, CVE-2020-12761) ==== libgepub ==== Version update (0.7.0 -> 0.7.1) - Update to version 0.7.1: + doc: Fix Crash in gepub_doc_new(). ==== libzypp ==== Version update (17.31.13 -> 17.31.14) - build: honor libproxy.pc's includedir (bsc#1212222) - Curl: trim all custom headers (bsc#1212187) HTTP/2 RFC 9113 forbids fields ending with a space. So we make sure all custom headers are trimmed. This also includes headers returned by URL-Resolver plugins. - version 17.31.14 (22) ==== mozc ==== Version update (2.28.4715.102 -> 2.29.5111.102) Subpackages: fcitx-mozc ibus-mozc ibus-mozc-candidate-window mozc-gui-tools - Upstream update to 2.29.5111.102 * Fix overlay of mozc-candidate-style in mozc.el * Enable the candidate window to show on a secondary and later display * Update dictionaries * Introduce MOZC_IBUS_CANDIDATE_WINDOW to disable mozc_renderer * Support Emoji 15.0 * Support ImeOn/ImeOff keys * Update absel-cpp and protobuf * Remove add-missing-include.patch - Merged by upstream - Update fcitx-mozc * Refresh fcitx-mozc-bazel-build.patch - Update zip code dictionaries * Refresh add-sha256sum-for-zipcode-archives.patch ==== systemd-presets-common-SUSE ==== - Fix another case of systemctl being called with an empty argument. This if a preemptive fix for a similar issue to bsc#1212496. - Don't call systemctl list-unit-files with an empty argument, this will break enabling of system unit files [bsc#1212496] ==== vsftpd ==== - Apply "0001-Fix-default-value-of-strict_ssl_read_eof-in-man-page.patch" to fix the documentation of the strict_ssl_read_eof option. The documentation says option would be disabled by default, but it is in fact enabled. [bsc#1200075] ==== wicked ==== Version update (0.6.72 -> 0.6.73) Subpackages: wicked-service - update to version 0.6.73 (see also ChangeLog file): - spec: cleanup artefacts removing systemv scripts and hooks (not used on any released version) and fix rpmlint warnings - arp: allow verify/notify counter and interval configuration - arp: handle ENOBUFS sending errors (bsc#1203300) - extensions: improve environment variable handling - firmware: refactor firmware extension definition to unify its format with system-updater and dbus-service extensions. - firmware: improve enable, disable and revert cli command; see wicked-firmware(8) manual page. - code cleanup: fix memory leaks, add array/list utils - wireless: Ignore not applicable WIRELESS_EAP_AUTH suse ifcfg variable within an within EAP-TLS network (bsc#1211026) - cleanup /var/run leftovers in extension scripts (bsc#1194557) - json: output formatting improvements, unicode support via iconv - removed patches included in the source archive: [- 0001-bond-workaround-6.1-enslave-regression-boo-1206674.patch, - 0002-extensions-nbft-add-post-up-script.bsc-1211647.patch] - extensions/nbft: add post-up script (bsc#1211647) In multipath scenarios, not all NBFT interfaces and respective connections may have been brought up during initramfs processing. If wicked brings up some NBFT interfaces after switching to the root file system, run a post-up script to initiate the NVMe connections. [+ 0002-extensions-nbft-add-post-up-script.bsc-1211647.patch] ==== yast2-trans ==== Version update (84.87.20230602.240a95214f -> 84.87.20230619.113a4fdc71) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sr yast2-trans-sv yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20230619.113a4fdc71: * Translated using Weblate (Kurdish) * Translated using Weblate (Indonesian) * Translated using Weblate (Indonesian) * Translated using Weblate (Indonesian) * Translated using Weblate (Kurdish) * Translated using Weblate (Kurdish) * Translated using Weblate (Kurdish) * Translated using Weblate (Kurdish) * Translated using Weblate (Arabic) * Translated using Weblate (Kurdish) * Translated using Weblate (Italian) * New POT for text domain 'users'. * New POT for text domain 's390'. * New POT for text domain 'storage'. * New POT for text domain 'apparmor'. ==== zypper ==== Version update (1.14.60 -> 1.14.61) Subpackages: zypper-log zypper-needs-restarting - targetos: Add an error note if XPath:/product/register/target is not defined in /etc/products.d/baseproduct (bsc#1211261) - targetos: Update help and man page (bsc#1211261) - version 1.14.61

1 0

New Tumbleweed snapshot 20230619 released!
by Dominique Leuenberger 20 Jun '23

20 Jun '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: AppStream (0.16.1 -> 0.16.2) Mesa Mesa-drivers gstreamer-plugins-good open-iscsi openpgm rubygem-pundit (2.2.0 -> 2.3.0) tree (2.1.0 -> 2.1.1) === Details === ==== AppStream ==== Version update (0.16.1 -> 0.16.2) Subpackages: AppStream-lang libAppStreamQt2 libappstream4 - Update to 0.16.2: Features: * Add API for asking whether the pool is empty * Add DDE to known desktop-environment list * validator: Check if Release Description is inside description tag * Make AppStream use BCP47 for locale in XML data Bugfixes: * Add missing standard::is-hidden attribute to file search enumerator * spdx: Accept brackets in spdx license expression check * introspection: Bring back AS_FORMAT_STYLE_COLLECTION into its enum * compose: Fix crash in asc_l10n_search_translations_qt() * compose: Set lower-cased CID for synthesized components again * Don't crash when non-YAML documents are read as YAML Miscellaneous: * sanitizers: Allow null-dereference check again - Drop patch, merged upstream: * bfa8fa6ac4ef645368a93384a6c16ac551a40922.patch - Add upstream change: * 0001-Do-not-override-default-priority-when-parsing-multip.patch ==== Mesa ==== Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libOSMesa8 libgbm1 - use -Dxlib-lease=enabled also for -drivers build - Fix of bsc#1212345 * After update to 23.1.1 this change affected our build split: https://gitlab.freedesktop.org/mesa/mesa/-/commit/2630f4b310f534c830250be44… ==== Mesa-drivers ==== Subpackages: Mesa-dri Mesa-gallium Mesa-libva libxatracker2 - use -Dxlib-lease=enabled also for -drivers build - Fix of bsc#1212345 * After update to 23.1.1 this change affected our build split: https://gitlab.freedesktop.org/mesa/mesa/-/commit/2630f4b310f534c830250be44… ==== gstreamer-plugins-good ==== Subpackages: gstreamer-plugins-good-extra gstreamer-plugins-good-gtk gstreamer-plugins-good-jack gstreamer-plugins-good-lang gstreamer-plugins-good-qtqml - Add patch to fix bug with data url scheme. * adaptivedemux2-uri-data.patch. ==== open-iscsi ==== Subpackages: libopeniscsiusr0 - Upgrade to upstream version 2.1.9 with tag "2.1.9-suse" (bsc#1210514), replacing open-iscsi-2.1.8-suse.tar.bz2 with open-iscsi-2.1.9-suse.tar.bz2, and resetting open-iscsi-SUSE-latest.diff.bz2. A summary rom the ChangeLog file: * Fix discoveryd compiler warning * Sync iscsi_if.h with kernel * Handle old DB records correctly * Make IQN configuration for iscsi-iname * remove OFFLOAD_BOOT_SUPPORTED, which is always true * Use UUID for IPC, not "root" * do not support SHA3 for libressl * build meson cleanups, including changing default DB home * Updated README about NOPs * Remove "BindTo" in systemd service file * Some iscsiuio fixes, including licensing and memory leaks (bsc#1210514) * Small netlink fixes * Fix OOM adjustment * Some error recovery fixes * Some spelling fixes ==== openpgm ==== - Add Mark-pgm_family_string-as-inline.patch to fix building packages that include the PGM headers without using pgm_family_string() by marking it 'inline' to avoid unused-function warnings. Sent upstream: https://github.com/steve-o/openpgm/pull/74 ==== rubygem-pundit ==== Version update (2.2.0 -> 2.3.0) - updated to version 2.3.0 * add support for rubocop-rspec syntax extensions ==== tree ==== Version update (2.1.0 -> 2.1.1) - tree 2.1.1: * Various spelling corrections. * Fix issue where following links while doing JSON output would lead to incorrect JSON output. (simonpmind) * Fix issue where .info patterns relative to the .info file that did not use a wildcard for matching the prefix were not matching files properly. (German Lashevich) * Added support for making trees from tab indented files (--fromtabfile) (gitlab @AvidSeeker), also cleaned up some other issues in the fromfile code. * Fix buffer overflow in listdir() when file names are allowed to be longer than 256 characters (like when using fromfile.) (Javier Jaramago FernÃ¡ndez) * If when attempting to open a .gitignore or .info file from a top level directory and failing, recursively check the parents for such a file. This stops when successful at opening such a file. This behavior might in the future be modified to open all such files in all parents to until root is reached. (Damien Bezborodov) Note that this requires the use of realpath() which I think may be an issue for some OSes. * Fix issue where tree would never descend (-l) a symbolic link when a full tree is gathered (--du/matchdirs/prune) (gitlab @6ramr)

1 0

Firefox crashes on latest "dup" in TW
by Fritz Hudnut 20 Jun '23

20 Jun '23

> Firefox 114.0.1 works fine for me with current TW20230613, but others > experience crashes at startup: > https://bugzilla.opensuse.org/show_bug.cgi?id=1212101 > > Regards, > Frank > > > > ---------- Forwarded message ---------- > From: victorhck <victorhck(a)mailbox.org> > To: factory(a)lists.opensuse.org > Cc: > Bcc: > Date: Fri, 16 Jun 2023 21:16:07 +0200 > Subject: Re: Firefox crashes on latest "dup" in TW > El 16/6/23 a las 20:35, Fritz Hudnut escribió: > > Folks: > > > > Was it on this list that somebody posted that their firefox crashed > > after recent update?? I think it was . . . well the behavior > > duplicated in my Gecko rolling edition of TW this am. Tried rebooting > > and tried shutting down and back into FF, but still get the error > > crash report . . . "report this crash to the authorities" and so > > forth. > > > > Over in Debian Bookworm right now, prior to updating, and FF is working fine. > > > > F > > Yes, I posted here and added some info in bugzilla report. > > A workaround is to download the tar.bgz firefox from the official page, > extract the file and launch firefox from than folder. You will have > firefox with your config, your addons, etc... > > Hope the fix come soon!! :) Victor: Yes, let's us "hope and pray" that a fix comes soon . . . . Fortunately I have other options, tomorrow, back in Debian and I'll see if upgrading pulls in a new FF and how that fares, and then Sunday on to Lubuntu Mantic . . . and Monday into straight TW . . . so we'll see how the dup goes with that one, and maybe by next Friday when I'm back to the broken down FF partition it will be fixed?? If not, then I might look at the manual DL . . . ?? F > Following up . . . I'm running Pop!_OS on a Sys76 laptop and I ran an > apt full-upgrade yesterday and I saw a number of "firefox" packages > that were upgraded . . . . Typing this in FF, so that might mean > "problem is exclusive to OpenSUSE iterations"??? > > F

5 5

Tumbleweed snapshot 20230616 broke kvm
by Oliver Schwabedissen 20 Jun '23

20 Jun '23

Hello, has anyone also experienced issues with kvm after updating from snapshot 20230614 to 20230616? I was able to start virt-manager this morning but it could not connect to the VMs. 20230616 installed libvirt-* 9.4.0-3.1. After going back to 20230614 (libvirt-* 9.4.0-2.2), I saw my VMs again and was able to start them again. virt-manager.log shows no error messages. I could not analyze the problem further yet, because I need KVM for my home office work and I had to get back to work. -- PGP Public Key available at https://pgp.mit.edu/ Key fingerprint = 3264 280C 05B1 572F 3F0B 42B8 1E7B 2D9D 063B D507

4 7

Firefox crashes on latest "dup" in TW
by Fritz Hudnut 20 Jun '23

20 Jun '23

> ---------- Forwarded message ---------- > From: Larry Finger <Larry.Finger(a)lwfinger.net> > To: factory(a)lists.opensuse.org > Cc: > Bcc: > Date: Mon, 19 Jun 2023 15:11:56 -0500 > Subject: Re: Firefox crashes on latest "dup" in TW > On 6/19/23 13:44, Constant Brouerius van Nidek wrote: > > Hope that the fix comes soon. Totaly unexpected for Tumbleweed having an > > unsolved problem for so long. > > Please do not top post. > > You need to ask yourself what is unique to your system. I have 3 TW systems that > run Firefox perfectly with the latest updates. They are an AMD FX-8320E > Eight-Core Processor, an Intel 4th generation mobile i7 *i7-4700M), and an 8th > generation Intel i7-8700T. None of them are particularly new. > > In particular, you should check if you have an Intel CPU from generation 11 or > higher. These have the IBT feature that is not properly handled for all > applications. It seems unlikely that this is the problem for Firefox, but if > your CPU fits the criterion, then try booting the system with "ibt=off" added to > the GRUB startup line. There may be some other "feature" of these CPUs that is > not handled in the "lockdown" kernels. > > Larry et al: From reading the bug report posts it seems like "they" might be closer to getting it fixed . . . haven't messed with it in my Gecko rolling edition . . . but it does seem like an issue with older cpu's that aren't supporting "AVX"??? I think my machine is Nehalem and that has the problem, "Alder Lake" and newer?? are OK . . . ?? Or download directly from Firefox tar and install it, but then something is needed for the user profile?? A tad bit "messy" F

1 0

New Tumbleweed snapshot 20230617 released!
by Dominique Leuenberger 19 Jun '23

19 Jun '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: codec2 (1.1.0 -> 1.1.1) cryptsetup firewalld (1.3.2 -> 1.3.3) fwupd (1.8.12 -> 1.8.16) gdb (12.1 -> 13.2) libX11 libjxl (0.8.1 -> 0.8.2) librsvg libstorage-ng (4.5.118 -> 4.5.120) llvm16 (16.0.5 -> 16.0.6) mcelog (181 -> 194) ncurses (6.4.20230520 -> 6.4.20230615) nodejs-common (5.1 -> 6.0) nodejs20 (20.2.0 -> 20.3.0) openvpn (2.6.4 -> 2.6.5) osinfo-db (20230308 -> 20230518) publicsuffix (20230607 -> 20230613) time vim (9.0.1572 -> 9.0.1632) virt-manager virtualbox virtualbox-kmp yast2-bootloader (4.6.1 -> 4.6.2) === Details === ==== codec2 ==== Version update (1.1.0 -> 1.1.1) - Update to version 1.1.1 * Minor release to support clean freedv-gui builds ==== cryptsetup ==== Subpackages: cryptsetup-doc cryptsetup-lang libcryptsetup12 - Enable running the regression test suite. - Force a regeneration of the man pages from AsciiDoc. - Add LUKS1 and LUKS2 On-Disk Format Specification pdfs to doc. - FIPS: Remove not needed libcryptsetup12-hmac package that contains the HMAC checksums for integrity checking for FIPS. [bsc#1185116] * Remove the cryptsetup-rpmlintrc file. * Remove not needed fipscheck dependency. ==== firewalld ==== Version update (1.3.2 -> 1.3.3) Subpackages: firewalld-bash-completion firewalld-lang firewalld-zsh-completion python3-firewall - update to 1.3.3: * fix(reload): restore policy for old backend if it changed (de85849) * fix(io): rich: tcp mss: handle value=None (8016f10) * fix(firewall-config): rich: set destination address (f6641a9) * fix(policy): mixed IP families in ingress/egress (69ed4d6) ==== fwupd ==== Version update (1.8.12 -> 1.8.16) Subpackages: fwupd-bash-completion fwupd-lang libfwupd2 typelib-1_0-Fwupd-2_0 - Update to version 1.8.16: + Auto-detect the OEM BCM57xx PCI cards with double the available EEPROM + Beep the console when waiting for user input + Do not assume a file descriptor of zero is invalid + Fix high memory usage when writing a carefully crafted EFI filesystem + Ignore refresh on a non-download remote to fix old versions of KDE + Limit the maximum number of file objects in the EFI filesystem + Only add the supported DFU attributes as private flags + Show devices with problems in fwupdmgr get-upgrades + Update official Intel GPU product names - Changes from version 1.8.15: + Add the latest dbx fixups for BlackLotus + Allow fwupd-refresh.timer trigger once per hour + Fix a crash when converting HFSTS1 values + Fix the version detection for SteelSeries Bluetooth mode + Invalidate the XMLb cache when installing new fwupd versions + Trigger the passive flow for usb4 from dell-dock + New hardware support: More Logitech Unifying receivers, Nordic MCUboot and nRF52 Desktop Keyboard - Changes from version 1.8.14: + Fix possible crash when getting UEFI report metadata + Fix 'fwupdmgr install FILE GUID' - Changes from version 1.8.13: + New features: - Add pcap converter which allows emulating devices from a Wireshark dump - Add the ability to dump TPM firmware for future use - Optionally retain firmware in a backup remote - Record the ESP type in the firmware report sent to the LVFS + Bugs fixed: - Accept application/octet-stream for archives when the mime database is missing - Add the latest dbx version version fixups as Microsoft removed another entry - Assume DFU appIDLE if GetStatus is not implemented - Do not require signatures for local or directory remotes - Do not use pandoc to build the man pages - Enhance Qubes functionality to use JCat - Fix a CCGX 'usbfs: process did not claim interface 1 before use' warning - Fix a compile warning when using a new libqmi version - Fix a critical warning when parsing an empty kernel cmdline - Fix a synaptics-cape regression where the firmware pauses for INTR - Fix the defines for HFSTS6 enforcement policy - Fix the i2c name properly for ElanTP hardware - Fix the name of the MTD Intel SPI controller - Set the release remote when installing archives - Use the powerd power type information to better set AC levels + New hardware: - Framework Audio Card - Lenovo ThinkPad TBT3-TR Gen 2 - Wacom Intuos BT S Gen 3 - Update options passed to meson following upstream changes. ==== gdb ==== Version update (12.1 -> 13.2) - Patches added (master backports): * pass-const-frame_info_ptr-reference-for-skip_-langua.patch - Maintenance script qa.sh: * Add PR30543 kfail. * Remove PR29793 kfail. - Patches added (master backports): * fix-pr30369-regression-on-aarch64-arm-pr30506.patch * gdb-tdep-aarch64-fix-frame-address-of-last-insn.patch * gdb-testsuite-fix-breakpoint-regexp-in-gdb.ada-out_o.patch * gdb-testsuite-relax-breakpoint-count-check-in-gdb.py.patch * gdb-testsuite-fix-buffer-overflow-in-gdb.base-signed.patch * gdb-testsuite-require-syscall-time-in-gdb.reverse-ti.patch * gdb-testsuite-handle-missing-gdc-in-gdb.dlang-dlang-.patch * gdb-testsuite-add-basic-lmap-for-tcl-8.6.patch * gdb-testsuite-fix-gdb.rust-watch.exp-on-ppc64le.patch * gdb-testsuite-fix-gdb.python-py-breakpoint.exp-timeo.patch * powerpc-fix-for-gdb.reverse-finish-precsave.exp-and-.patch * powerpc-regression-fix-for-reverse-finish-command.patch * gdb-testsuite-don-t-use-string-cat-in-gdb.dwarf2-dw2.patch * move-step_until-procedure.patch - Patches added (gdb-patches backport): * gdb-testsuite-add-have_host_locale.patch - Patches added (fedora patch fixups): * fixup-gdb-6.3-gstack-20050411.patch * fixup-gdb-6.3-attach-see-vdso-test.patch * fixup-gdb-lineno-makeup-test.patch * fixup-gdb-rhbz1261564-aarch64-hw-watchpoint-test.pat.patch - Patches dropped: * gdb-ppc-power7-test.patch * gdb-rhbz1156192-recursive-dlopen-test.patch * gdb-6.3-bz140532-ppc-unwinding-test.patch - Maintenance script qa.sh: * Add PR30540, PR30537, PR30021 and PR30542 KFAILs. * Add gdb.base/gcore-excessive-memory.exp internal error. * Update gdb.base/inline-frame-cycle-unwind.exp KFAIL comment. - Patches added (master backports): * aarch64-avoid-initializers-for-vlas.patch - Rebase to 13.2 release (fedora 38 @ fc4e284) * Replace gdb-12.1.tar.bz2 with gdb-13.2.tar.bz2. - Patches dropped: * add-elfcompress_zstd.patch * binutils-gdb-support-zstd-compressed-debug-section.patch * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch * fix-core-file-detach-crash-corefiles-29275.patch * fix-for-gdb.base-solib-search.exp-test.patch * fix-gdb-build-elf-support-check-lzstd.patch * fixup-gdb-rhbz1325795-framefilters-test.patch * gdb-6.3-focus-cmd-prev-test.patch * gdb-6.3-inheritancetest-20050726.patch * gdb-6.3-test-dtorfix-20050121.patch * gdb-6.3-test-movedir-20050125.patch * gdb-6.3-threaded-watchpoints2-20050225.patch * gdb-6.6-buildid-locate-rpm-scl.patch * gdb-6.6-bz230000-power6-disassembly-test.patch * gdb-add-gdb-syscalls-makefile.patch * gdb-add-support-for-readline-8.2.patch * gdb-bz601887-dwarf4-rh-test.patch * gdb-disable-commit-resumed-in-target_kill.patch * gdb-fix-assert-in-handle_jit_event.patch * gdb-fix-assert-when-quitting-gdb-while-a-thread-is-stepping.patch * gdb-fix-for-gdb.base-eof-exit.exp-test-failures.patch * gdb-fix-selftest-fails-with-gdb-build-with-O2-flto.patch * gdb-fortran-frame-string.patch * gdb-handle-pending-c-after-rl_callback_read_char.patch * gdb-improved-eof-handling-when-using-readline-7.patch * gdb-physname-pr11734-test.patch * gdb-physname-pr12273-test.patch * gdb-record-handle-statx-system-call.patch * gdb-rhbz1325795-framefilters-test.patch * gdb-rhbz1398387-tab-crash-test.patch * gdb-runtest-pie-override.patch * gdb-symtab-fix-handling-of-dw_tag_unspecified_type.patch * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch * gdb-tdep-handle-pipe2-syscall-for-amd64.patch * gdb-tdep-support-catch-syscall-pipe2-for-i386.patch * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch * gdb-test-expr-cumulative-archer.patch * gdb-testsuite-add-kfail-in-gdb.threads-fork-plus-threads.exp.patch * gdb-testsuite-add-new-gdb_attach-to-check-attach-command.patch * gdb-testsuite-address-test-failures-in-gdb.mi-mi-multi-commands.exp.patch * gdb-testsuite-detect-change-instead-of-init-in-gdb.mi-mi-var-block.exp.patch * gdb-testsuite-enable-some-test-cases-for-x86_64-m32.patch * gdb-testsuite-fix-fail-in-gdb.threads-fork-and-threads.exp.patch * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch * gdb-testsuite-fix-gdb.base-break-idempotent.exp-on-ppc.patch * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch * gdb-testsuite-fix-gdb.base-infoline-reloc-main-from-.patch * gdb-testsuite-fix-gdb.base-nested-subp-2-3-.exp-with.patch * gdb-testsuite-fix-gdb.dwarf2-dw2-dir-file-name.exp-w.patch * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch * gdb-testsuite-fix-gdb.dwarf2-dw2-unspecified-type-foo.c-with-m32.patch * gdb-testsuite-fix-gdb.mi-mi-sym-info.exp-on-opensuse-tumbleweed.patch * gdb-testsuite-fix-gdb.opt-clobbered-registers-o2.exp-with-gcc-12.patch * gdb-testsuite-fix-gdb.reverse-i387-env-reverse.exp-for-pie.patch * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch * gdb-testsuite-fix-have_mpx-test.patch * gdb-testsuite-fix-occasional-failure-in-gdb.mi-mi-multi-commands.exp.patch ... changelog too long, skipping 60 lines ... * Use -$arch as argument to qa.sh. ==== libX11 ==== Subpackages: libX11-6 libX11-data libX11-xcb1 - U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138) ==== libjxl ==== Version update (0.8.1 -> 0.8.2) - Update to release 0.8.2 * Fix an integer underflow bug in patch decoding. ==== librsvg ==== Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2 rsvg-thumbnailer typelib-1_0-Rsvg-2_0 - Use %__default_rustflags instead of the deprecated %__rustflags macro. Requires at least cargo-packaging 1.2.0+2 (boo#1212333). ==== libstorage-ng ==== Version update (4.5.118 -> 4.5.120) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#936 - use correct error callback when nvme-cli is missing during probing - 4.5.120 - merge gh#openSUSE/libstorage-ng#935 - added functions to convert BcacheType and CacheMode to string - added pool name for bcaches - check range in is_usable_as_partitionable() - 4.5.119 ==== llvm16 ==== Version update (16.0.5 -> 16.0.6) Subpackages: clang-tools clang16 libLLVM16 libclang-cpp16 libclang13 llvm16-gold - Update to version 16.0.6. * This release contains bug-fixes for the LLVM 16.0.0 release. This release is API and ABI compatible with 16.0.0. - Rebase llvm-do-not-install-static-libraries.patch. - Make python3-clang noarch again and fix conflicts/provides to point to %python3_sitelib instead of %python3_sitearch. ==== mcelog ==== Version update (181 -> 194) - Update to version 194 (jsc#PED-4218): * client.c: fix build w/ musl libc * mcelog: New model number for Arrowlake * mcelog: Don't overwrite model number when lookup fails * mcelog: Add Graniterapids, Grandridge and Sierraforest * mcelog: New model number for Lunarlake * mcelog: Add Emerald Rapids * mcelog: Add decode support for Sapphire Rapids * Update PFA_test_howto * mcelog: Add support for Meteor Lake - Includes following SLE 15 SP5 jira features: * jsc#PED-671 mcelog: Update to latest release * jsc#PED-686 [CPU Features] Update mcelog support for ADL-N * jsc#PED-638 [CPU Features] Update mcelog support for MTL-P - Update to version 189: * mcelog: Add another Raptor Lake CPU model * Fix generation of cputype files * mcelog: Add missing model numbers for Broadwell and Raptorlake * mcelog: Makefile: Only touch cputype.h if needed to create it * Makefile: add install-nodoc target * Use env as the shebang target * Add missing dependencies for cputype include files * mcelog: Reverse sens of check to call resolveaddr() * mcelog: Reverse the sense of the check to set memory_error_support * mcelog: Drop CASE_INTEL define * mcelog: Generate cpu_choices[] from table * mcelog: Generate the cputype_name[] array from the table * mcelog: Add CPU model numbers to table and generate switch function * mcelog: Generate CPU_* enums from a table * mcelog: Add two more Alderlake model numbers * mcelog: Reduce default threshold for corrected error page offline * Make genconfig use python3 * mcelog: Add support for Raptorlake * Fix warnings in sysfs.c * mcelog: Change "DDR4" string to "DDR" for i10nm platforms * Fix logrotate syntax * remove outdated mcelog.conf.5 manual file * add furture print function for Python2 * fix python errors in genconfig.py * fix the buf not freed in read_field * mcelog: Print warning for locked down kernel * mcelog: Handle sysfs files without length - Had to adopt to latest CPU identification model mainline patch: b54ee05056a76e mcelog: Drop CASE_INTEL define and friends A add_new_amd_cpu_defines D add-defines.patch M Start-consolidating-AMD-specific-stuff.patch M add-f10h-support.patch M add-f11h-support.patch M add-f12h-support.patch M add-f14h-support.patch M add-f15h-support.patch M add-f16h-support.patch M email.patch M fix_setgroups_missing_call.patch ==== ncurses ==== Version update (6.4.20230520 -> 6.4.20230615) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch 20230615 + modify _nc_read_file_entry() to show relevant filename in warnings. + improve checks in convert_string() for corrupt terminfo entry (report and test-case by Gregory James Duck). - Add ncurses patch 20230610 + improve manpages discussing file descriptors in low-level functions. + modify flushinp to use file descriptors in SCREEN, rather than from TERMINAL, and check if they are for a terminal, like SVr4. + modify mcprint to use file descriptor in SCREEN, for consistency. + add xterm+focus to foot+base (patch by Daniel Ekloef). + correct definition of Charable() for non-wide ncurses library (report and test-case by Zbigniew Baniewski). - Add ncurses patch 20230603 + add configure option --with-strip-program, to override program chosen by the install program for stripping executables (prompted by discussion with Aapo Rantalainen). + fix typo in INSTALL (report/patch by Aapo Rantalainen). + improve error-checks for isEILSEQ() + increase MB_CUR_MAX to 16, matching glibc's MB_LEN_MAX. + corrected mouse mask in test/testcurs.c + improve thread lock in lib_trace.c - Correct offsets of patch ncurses-6.4.dif - Add ncurses patch 20230527 + fixes for compiler warnings/cppcheck. ==== nodejs-common ==== Version update (5.1 -> 6.0) - Rework default versions and include specifics for ALP - Default version for SLE-12 is set to be 16 - no further updates expected since W&S module is not supported in LTSS ==== nodejs20 ==== Version update (20.2.0 -> 20.3.0) Subpackages: npm20 - Update to version 20.3.0: * deps: upgrade to libuv 1.45.0, including significant performance improvements to file system operations on Linux * module: change default resolver to not throw on unknown scheme * stream: deprecate asIndexedPairs - versioned.patch, fix_ci_tests.patch: refreshed - openssl3_1-adapt_tests.patch: upstreamed and removed For details see, https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V20.md#20… ==== openvpn ==== Version update (2.6.4 -> 2.6.5) - update to 2.6.5: * apctl (windows): generate driver-specific names (if using tapctl to create additional tap/wintun/dco devices, and not using - -name) (Github #337) * interactive service (windows): do not force target desktop for openvpn.exe - this has no impact for normal use, but enables running of OpenVPN in a scripted way when no user is logged on (for example, via task scheduler) (Github OpenVPN/openvpn-gui#626) * fix use-after-free with EVP_CIPHER_free * fix building with MSVC from release tarball (missing version.m4.in) * dco-win: repair use of --dev-node to select specific DCO drivers (Github #336) * fix missing malloc() return check in dco_freebsd.c * windows: correctly handle unicode names for "exit event" * fix memleak in client-connect example plugin * fix fortify build problem in keying-material-exporter-demo plugin * fix memleak in dco_linux.c/dco_get_peer_stats_multi() - this will leak a small amount of memory every 15s on DCO enabled servers, leading to noticeable memory waste for long-running processes. * dco_linux.c: properly close dco version file (fd leak) ==== osinfo-db ==== Version update (20230308 -> 20230518) - Update to database version 20230518 osinfo-db-20230518.tar.xz ==== publicsuffix ==== Version update (20230607 -> 20230613) - Update to version 20230613: * Add `{id,io,ai}.vn` for .vn ccTLD in ICANN Section (#1771) * util: gTLD data autopull updates for 2023-06-10T15:11:56 UTC (#1774) ==== time ==== - Add patch disable-time-max-rss-test.patch to disable time max rss test, broken because a kernel issue (bsc#1211092) ==== vim ==== Version update (9.0.1572 -> 9.0.1632) Subpackages: vim-data vim-data-common xxd - Updated to version 9.0.1632, fixes the following problems * Error messages are not translated. * Error for function name has wrong line number. * "file N of M" message is not translated. * Users may not know what to do with an internal error. * SpellCap highlight not always updated when needed. * Some error messages are not translated. * CI: indent test hangs on FreeBSD. * Translation does not work for plural argument. * :stopinsert may not work in a popup close handler. (Ben Jackson) * Get E304 when using 'cryptmethod' "xchacha20v2". (Steve Mynott) * Not all meson files are recognized. * Weird use of static variables for spell checking. * Checking translations gives an error for using two messages with ngettext() that differ in "%" items. * Corn config files are not recognized. * Incsearch not triggered when pasting clipboard register on the command line. * Filetype test contains too many special characters. * Filetype test has trailing white space. * Some "gomod" files are not recognized. * Not all timer tests are marked as flaky. * MS-Windows: assert error when compiled with debug mode. * Some internal error messages are translated. * Line pointer becomes invalid when using spell checking. * :registers command does not work in sandbox. * Cursor ends up below the window after a put. * screenchar(), screenchars() and screenstring() do not work properly when 'encoding' is set to a double-byte encoding. * Cursor not adjusted when near top or bottom of window and 'splitkeep' is not "cursor". * screenpos() does not take w_skipcol into account. * Filetype detection fails for *.conf file without comments. (Dmitrii Tcyganok) * Stray character is visible if 'smoothscroll' marker is displayed on top of a double-wide character. * Display wrong when scrolling multiple lines with 'smoothscroll' set. * Errors from the codestyle test are a bit confusing. * Crash when calling method on super in child constructor. (Israel Chauca Fuentes) * Using freed memory when 'foldcolumn' is set. * screenpos() returns wrong row with diff filler lines. * update_topline() is called twice. * Crash when an object indirectly references itself. * Display is wrong when 'smoothscroll' is set and scrolling multiple lines. * v:maxcol can be changed in a :for loop. * "skipcol" not reset when using multi-byte characters. * Some make output gets picked up by 'errorformat'. * strlen() called too often for :spellrepall. * URL shortcut files are not recognized. * Quickfix text field is truncated. * charidx() and utf16idx() result is not consistent with byteidx(). * Trace32 files are not recognized. * The focus gained/lost escape sequences cause trouble for a terminal where Vim does not expect them. * Nix files are not recognized from the hashbang line. * FILETYPE_FILE is defined to the same value multiple times. Same for a few similar macros. * Filetype name t32 is a bit obscure. * The program to filetype translation is not exported. * Crash when calling object constructor from legacy script. (Israel Chauca Fuentes) * "super" is not considered a reserved name. * Visual area not shown when using 'showbreak' and start of line is not visible. (Jaehwang Jung) * No generic mechanism to test syntax plugins. * Syntax tests fail on FreeBSD. * Having utf16idx() rounding up is inconvenient. * "make clean" at the toplevel fails. * Passing a wrong variable type to an option gives multiple errors. * Not all cabal config files are recognized. ==== virt-manager ==== Subpackages: virt-install virt-manager-common - bsc#1212195 - libvirtd crashes when virt-manager connects virt-manager qemu:///system on a fresh installation tumbleweed virtman-check-for-libvirt-modular-daemons.patch - Changes to osinfo-db cause some virt-manager tests to fail. virtman-fix-osinfo-tests.patch ==== virtualbox ==== - Turn build of VBoxSDL back on Files "fix_sdl_build.patch" and "fixes_for_leap15.4.patch" are added. This update addresses boo#1211941. ==== virtualbox-kmp ==== - Turn build of VBoxSDL back on Files "fix_sdl_build.patch" and "fixes_for_leap15.4.patch" are added. This update addresses boo#1211941. ==== yast2-bootloader ==== Version update (4.6.1 -> 4.6.2) - Persist zfcp.allow_lun_scan kernel option for s390 arch (needed for gh#openSUSE/agama#626). - 4.6.2

1 0

Testers wanted: replace utmp with logind
by Thorsten Kukuk 19 Jun '23

19 Jun '23

Hi, if you don't know what the problems with utmp in the current form are, here again my blog with background informations: https://www.thkukuk.de/blog/Y2038_glibc_utmp_64bit/ To make this clear again: this is about _utmp_ only, not wtmp or lastlog and related tools. We don't need systemd for wtmp or lastlog, we have already solutions in Factory for this. systemd v254 will contain all required APIs and currently I'm working with several upstream projects on the necessary changes. Some other Linux distributions are meanwhile helping with this. For the big main tools, PRs are either in discussion or already accepted, but at minimum I have working patches. Now I need some people who are willing to test this on openSUSE Tumbleweed or MicroOS! I'm running meanwhile several machines with this, but I strongly advise against using this on production machines. I have a repository with, where I modified the applications to query logind instead reading /run/utmp: - systemd (utmp disabled, backports from git added) - coreutils - util-linux - procps - pam - openssh - monitoring-plugins - net-snmp How to install them: zypper ar -f https://download.opensuse.org/repositories/home:/kukuk:/no-utmp/openSUSE_Tu… no-utmp zypper dup -r no-utmp --allow-vendor-change reboot Afterwards, there should be no /run/utmp anymore. If an application still creates this file and writes into it, it does not use the glibc API and we have to fix that. I'm especially interested in your experience with who, w, uptime and from people, who use check_users from monitoring-plugins or read the number of users with net-snmp. And I'm also interested which or your favorite tools don't support this yet and I have to look at next. I know there is still a longer list of tools reading /run/utmp, but many of them only count the number of logged in users, so they should be easy to adjust. But we need to find them. And I know there is a huge list of packages trying to write utmp entries, but if they use the glibc API it's no problem, glibc blocks this if there is no utmp file. If you wonder if the number of users shown does not match the output of the old utmp file: we really only show users who did login, no longer all the additional users using xterm instead of e.g. gnome-terminal. Thanks, Thorsten -- Thorsten Kukuk, Distinguished Engineer, Senior Architect, Future Technologies SUSE Software Solutions Germany GmbH, Frankenstraße 146, 90461 Nuernberg, Germany Managing Director: Ivo Totev, Andrew Myers, Andrew McDonald, Martje Boudien Moerman (HRB 36809, AG Nürnberg)

2 3

New Tumbleweed snapshot 20230616 released!
by Dominique Leuenberger 17 Jun '23

17 Jun '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: apache2-mod_php8 (8.1.19 -> 8.1.20) libqt5-qtbase (5.15.9+kde154 -> 5.15.10+kde129) libqt5-qtconnectivity (5.15.9+kde5 -> 5.15.10+kde4) libqt5-qtdeclarative (5.15.9+kde26 -> 5.15.10+kde26) libqt5-qtgraphicaleffects (5.15.9+kde0 -> 5.15.10+kde0) libqt5-qtimageformats (5.15.9+kde9 -> 5.15.10+kde9) libqt5-qtlocation (5.15.9+kde5 -> 5.15.10+kde4) libqt5-qtmultimedia (5.15.9+kde3 -> 5.15.10+kde3) libqt5-qtnetworkauth (5.15.9+kde0 -> 5.15.10+kde0) libqt5-qtquickcontrols (5.15.9+kde0 -> 5.15.10+kde0) libqt5-qtquickcontrols2 (5.15.9+kde5 -> 5.15.10+kde6) libqt5-qtscript (5.15.12 -> 5.15.14) libqt5-qtsensors (5.15.9+kde0 -> 5.15.10+kde0) libqt5-qtserialport (5.15.9+kde0 -> 5.15.10+kde0) libqt5-qtspeech (5.15.9+kde1 -> 5.15.10+kde1) libqt5-qtsvg (5.15.9+kde8 -> 5.15.10+kde8) libqt5-qttools (5.15.9+kde1 -> 5.15.10+kde3) libqt5-qttranslations (5.15.9+kde0 -> 5.15.10+kde0) libqt5-qtvirtualkeyboard (5.15.9+kde0 -> 5.15.10+kde0) libqt5-qtwayland (5.15.9+kde55 -> 5.15.10+kde51) libqt5-qtwebchannel (5.15.9+kde3 -> 5.15.10+kde3) libqt5-qtwebsockets (5.15.9+kde2 -> 5.15.10+kde2) libqt5-qtwebview (5.15.9+kde0 -> 5.15.10+kde0) libqt5-qtx11extras (5.15.9+kde0 -> 5.15.10+kde0) libqt5-qtxmlpatterns (5.15.9+kde0 -> 5.15.10+kde0) libreoffice (7.5.4.1 -> 7.5.4.2) libvirt php8 (8.1.19 -> 8.1.20) poppler (23.05.0 -> 23.06.0) poppler-qt5 (23.05.0 -> 23.06.0) remmina (1.4.30 -> 1.4.31) systemd systemd-rpm-macros (22 -> 23) === Details === ==== apache2-mod_php8 ==== Version update (8.1.19 -> 8.1.20) - version update to 8.1.20 * This is a security release. * https://www.php.net/ChangeLog-8.php#8.1.20 - force to repack tarball after update https://github.com/php/php-src/issues/11300 - session.save_path set to /var/lib/php8/sessions in mod_php8.conf and www.conf php-fpm pool example - modified sources % mod_php8.conf - added sources + repack.sh + php-unicode-allow-redistribution.patch ==== libqt5-qtbase ==== Version update (5.15.9+kde154 -> 5.15.10+kde129) Subpackages: libQt5Concurrent5 libQt5Core5 libQt5DBus5 libQt5Gui5 libQt5Network5 libQt5OpenGL5 libQt5PrintSupport5 libQt5Sql5 libQt5Sql5-mysql libQt5Sql5-sqlite libQt5Test5 libQt5Widgets5 libQt5Xml5 libqt5-qtbase-platformtheme-gtk3 - Update to version 5.15.10+kde129, rebased upstream: * Ssl: Copy the on-demand cert loading bool from default config * Schannel: Reject certificate not signed by a configured CA certificate (boo#1211994, CVE-2023-34410) * qnetworkreplyfileimpl_p.h: fix header guard name * Revert "Draw the cursor considering the descent is 0" * Use pkgconfig in order to find libproxy configuration * Upgrade PCRE2 to 10.40 * Android A11Y: handle LocationChanged event only for focused element * Port binary JSON to new special integer bitfields * INTEGRITY: enable C99 globally * QObject: mark two error reporting functions COLD * Endian: Provide special integer bitfield unions * Android: set useLegacyPackaging to true in build.gradle * QWidgetTextControl: port to new-style connects (faster) * Sync qxmlstream.g with qxmlstreamparser_p.h [1/2]: switched lines * tst_QNetworkReply try stabilize autoDeleteReplies tests * Remove duplicated include for <limits> * Fix recursion crash when calling setStyleSheet with `qproperty-styleSheet` * qwindowsxpstyle: Fix typos in documentation * Correct prefix reported for end element in QXmlStreamReader * Android A11Y: Add supported role infos to A11yNodeInfo * Fix handling of DateTime values in QSettings * Fix off-by-one for "typically" lowest value INT_MIN * xml: Fix typos in documentation * QWindowsWindow: Fix typo in documentation * includemocs (updated script) * widgets: Fix typos in documentation * cocoa: Fix typo in debug messages * Only scroll QMenu when there is a valid active action * QTimer: Add note in documentation * Fix QListView assert when the last row is moved in IconMode * QFileDialog: Fix adding default suffix when file path contains dot * QLineEdit: account for the placeholderText when computing lineRect * QFileDialog::saveFileContent crashes on accept * QCompleter: QCompleter unexpectedly changes QLineEdit text * Fix build error on iOS with the configure option -qtnamespace * Draw the cursor considering the descent is 0 * Remove pure-virtual-signals.h include from tst_moc.cpp * plugins: image formats - fix odr violation * dbus: Fix typos * qwindowsdialoghelpers: Fix typo in documentation * QTableView: Document the customizations applied to QHeaderView * Unicodetools: compile * eglfs_x11: Fix running flag linkage * qcompilerdetection.h: add Q_CC_{GNU,MSVC,CLANG}_ONLY macros * Fix CMake warning about "missing closing ' quote" * Fix alignment of next/prev links in offline style * QtDBus: includemocs * Image Plugins: includemocs(-ish) * QtGui: includemocs * QXcbNativeInterface: remove unused field m_sysTraySelectionAtom * Windows QPA: Fix slowdown with large table/tree views with accessibility * Macstyle: fix the text color on the disabled button * QMacStyle: fix tool buttons (in checked mode) * QTeamCityLogger: fix .arg() placeholder injection * QAbstractTestLogger: disable copying * Fix errorMessageFromComError() * QtNetwork: includemocs * AppleUnifiedLogger: Remove manually managed os_log_t cache * examples: add WindowStaysOnBottomHint into preview text * QSharedPointer: Use matching new/delete * QIbusPlatformInputContextPlugin: includemocs * QGtk3ThemePlugin: includemocs * QTuioTouchPlugin: includemocs * QtWidgets: includemocs v2022 * QMYSQLDriverPlugin: includemocs * QtDeviceDiscoverySupportPrivate: includemocs * QLinuxFbIntegrationPlugin: includemocs * QtPrintSupport: includemocs * QSQLiteDriverPlugin: includemocs * QtFbSupportPrivate: includemocs * QXdgDesktopPortalThemePlugin: includemocs * QtTest: includemocs * QComposePlatformInputContextPlugin: includemocs * QtSql: includemocs * QVncIntegrationPlugin: includemocs * Fix backingstore fractional DPR glitches for widgets in child windows * Include <limits> where std::numeric_limits is used * QtInputSupportPrivate: includemocs * Document the default value of QSFPM::sortOrder() * Better document how to enable sorting in QSPFM * Correct documentation of INI format's loss of type information * Android: add missing properties in AndroidManifest.xml * Fix assertion failure when parsing a doubly-invalid date-time text * Windows QPA: Correct mistake when calculating minmaxinfo * Android: replace ndk.dir with android.ndkVersion in build.gradle * Android: remove the old copy of gradle.properties after reading it * CMake Android Support: Fix signing of APKs * Android: fix A11Y object description * macOS: Fix warning about comparing different types in QCocoaScreen::isOnline * Fix qmake build on FreeBSD * Update documentation of enum Qt::DockWidgetArea * xcb: recreate xcb window under some conditions * objc_namespace: Add support for universal binaries * objc_namespace: Fix misspelled argument for silencing output * objc_namespace: Update parsing logic to account for otool changes * Blacklist passwordAuth for Ubuntu 20.04 * Android: wrap QAndroidInputContext's m_focusObject in a QPointer * Fix compilation with GCC 12 (and on Fedora 35 and newer) ... changelog too long, skipping 23 lines ... * Fix developer build ==== libqt5-qtconnectivity ==== Version update (5.15.9+kde5 -> 5.15.10+kde4) Subpackages: libQt5Bluetooth5 libQt5Bluetooth5-imports libQt5Nfc5 libQt5Nfc5-imports libqt5-qtconnectivity-tools - Update to version 5.15.10+kde4, rebased upstream: * Update LGPL license header * Replace deprecated bluetooth disable/enable methods on Android * includemocs * QLeAdvertizerBluez: add missing Q_OBJECT macro * Rename qleadvertiser_p.h â qleadvertiser_bluez_p.h * QtConnectivity: replace qSwap with std::swap/member-swap where possible * Fix crash when service discovery agent (SDA) is stopped on Android * QLowEnergyControllerPrivateAndroid: remove unused forward declaration * Improve Android-12 bluetooth permission error reporting * Update BT LE peripheral role OS support documentation * Introduce Android 12 / SDK 31+ bluetooth permissions * tst_qbluetoothservicediscovery: make auto-test less evil * Remove QBluetoothSocket::connected double-emit on macOS * Fix Android bluetooth server assert when disposed of quickly ==== libqt5-qtdeclarative ==== Version update (5.15.9+kde26 -> 5.15.10+kde26) - Update to version 5.15.10+kde26, rebased upstream: * Fix tst_QQuickText::fontSizeMode * (manual) includemocs * Text: don't fall back to full-width layout if availableWidth == 0 * MPTA: don't allow more than one touchpoint to react to mouse * QML/JS: Reject yield expression not directly in generator functions * Modify m_compareRegister bitfield * Add a TU for QQmlDebugServer * QmlModels: includemocs * Add a TU for QQmlProfilerEventReceiver * Quick: includemocs * QSGRhiShaderEffectNode: remove unused m_rc member * QQmlPreviewServiceFactoryPlugin: includemocs * Qml: includemocs * QuickTest: includemocs * PinchArea: ignore ZoomNativeGesture and RotateNativeGesture if told to * Docs: Document textInput.acceptableInput as read only * QQmlTableModelColumn: remove unused field mIndex * MouseArea: don't get stuck in doubleClick if handler caused ungrab * Avoid -Wclass-memaccess warning * QmlDebugPrivate: includemocs * QmlModels: includemocs * QQmlInspectorServiceFactoryPlugin: includemocs * QQmlDebuggerServiceFactoryPlugin: includemocs * QQmlProfilerServiceFactoryPlugin: includemocs * QQmlNativeDebugServiceFactoryPlugin: includemocs * QuickShapesPrivate: includemocs * QtPacketProtocolPrivate: includemocs * QDebugMessageServiceFactoryPlugin: includemocs * QQuickProfilerAdapterFactoryPlugin: includemocs * Build fixes for GCC 11 * doc: Fix inherited property docs in HoverHandler * tst_qqmllistcompositor: fix -Wdeprecated-enum-enum-conversion * Set depth mask correctly for clear * Doc: Improve cursorPosition description in TextInput and TextEdit docs * Fix blacklisting string for Ubuntu 20.04 in qquickmultipointtoucharea * V4 ArrayIterator: Protect retrieved value from GC * QML: Protect against EAGAIN when calling madvise on linux * QQuickLoader: Check for QQmlEngine before using it ==== libqt5-qtgraphicaleffects ==== Version update (5.15.9+kde0 -> 5.15.10+kde0) - Update to version 5.15.10+kde0, rebased upstream: * No code changes ==== libqt5-qtimageformats ==== Version update (5.15.9+kde9 -> 5.15.10+kde9) - Update to version 5.15.10+kde9, rebased upstream: * No code changes ==== libqt5-qtlocation ==== Version update (5.15.9+kde5 -> 5.15.10+kde4) Subpackages: libQt5Location5 libQt5Positioning5 libQt5PositioningQuick5 - Update to version 5.15.10+kde4, rebased upstream: * Make location-labs-plugin depend on features.opengl - Commits dropped by the rebase: * Fix build of Qt.labs.location QML plugin ==== libqt5-qtmultimedia ==== Version update (5.15.9+kde3 -> 5.15.10+kde3) - Update to version 5.15.10+kde3, rebased upstream: * Fix chunk sizing in QPulseAudioSink * Initialize m_material to nullptr ==== libqt5-qtnetworkauth ==== Version update (5.15.9+kde0 -> 5.15.10+kde0) - Update to version 5.15.10+kde0, rebased upstream: * No code changes ==== libqt5-qtquickcontrols ==== Version update (5.15.9+kde0 -> 5.15.10+kde0) - Update to version 5.15.10+kde0, rebased upstream: * No code changes ==== libqt5-qtquickcontrols2 ==== Version update (5.15.9+kde5 -> 5.15.10+kde6) Subpackages: libQt5QuickControls2-5 libQt5QuickTemplates2-5 - Update to version 5.15.10+kde6, rebased upstream: * Accessibility: respect value in attached Accessible in controls * TextArea: make clip node wider to accommodate cursor when right-aligned * DialogButtonBox: fix buttons going outside box on size change * Control in pressDelay Flickable: detect touch release near press pos * Reset provider's texture if QQuickNiniPatchImage's source is invalid * FileDialog: do not add default suffix when content scheme is used ==== libqt5-qtscript ==== Version update (5.15.12 -> 5.15.14) - Update to version 5.15.14: * Bump version to 5.15.14 * BumpÂ versionÂ toÂ 5.15.13 ==== libqt5-qtsensors ==== Version update (5.15.9+kde0 -> 5.15.10+kde0) Subpackages: libQt5Sensors5 libQt5Sensors5-imports - Update to version 5.15.10+kde0, rebased upstream: * No code changes ==== libqt5-qtserialport ==== Version update (5.15.9+kde0 -> 5.15.10+kde0) - Update to version 5.15.10+kde0, rebased upstream: * No code changes ==== libqt5-qtspeech ==== Version update (5.15.9+kde1 -> 5.15.10+kde1) Subpackages: libQt5TextToSpeech5 libqt5-qtspeech-plugin-speechd - Update to version 5.15.10+kde1, rebased upstream: * No code changes ==== libqt5-qtsvg ==== Version update (5.15.9+kde8 -> 5.15.10+kde8) - Update to version 5.15.10+kde8, rebased upstream: * No code changes ==== libqt5-qttools ==== Version update (5.15.9+kde1 -> 5.15.10+kde3) Subpackages: libQt5Designer5 libQt5Help5 libqt5-qdbus libqt5-qtpaths - Update to version 5.15.10+kde3, rebased upstream: * CMake: Fix qt5_create_translation for same-named .ts files * Drop superfluous network dependency from assistant/{help,qhelpgenerator}.pro * qdoc: Do not split module names in different tags * qdoc: Do not generate tags from titles anymore * Skip endonym in linguist settings list when not available * lrelease-pro: Take EXTRA_TRANSLATIONS into account ==== libqt5-qttranslations ==== Version update (5.15.9+kde0 -> 5.15.10+kde0) - Update to version 5.15.10+kde0, rebased upstream: * No code changes ==== libqt5-qtvirtualkeyboard ==== Version update (5.15.9+kde0 -> 5.15.10+kde0) Subpackages: libQt5HunspellInputMethod5 libQt5VirtualKeyboard5 libqt5-qtvirtualkeyboard-hunspell - Update to version 5.15.10+kde0, rebased upstream: * No code changes ==== libqt5-qtwayland ==== Version update (5.15.9+kde55 -> 5.15.10+kde51) Subpackages: libQt5WaylandClient5 libQt5WaylandCompositor5 - Update to version 5.15.10+kde51, rebased upstream: * Fix compilation with GCC 12 - Commits dropped by the rebase: * Revert "Client: Ensure that wl_surface lives as long as qtquick render thread needs it" * Client: Ensure that wl_surface lives as long as qtquick render thread needs it * Build fixes for GCC 11 ==== libqt5-qtwebchannel ==== Version update (5.15.9+kde3 -> 5.15.10+kde3) Subpackages: libQt5WebChannel5 libQt5WebChannel5-imports - Update to version 5.15.10+kde3, rebased upstream: * No code changes ==== libqt5-qtwebsockets ==== Version update (5.15.9+kde2 -> 5.15.10+kde2) Subpackages: libQt5WebSockets5 libQt5WebSockets5-imports - Update to version 5.15.10+kde2, rebased upstream: * No code changes ==== libqt5-qtwebview ==== Version update (5.15.9+kde0 -> 5.15.10+kde0) Subpackages: libQt5WebView5 libQt5WebView5-imports - Update to version 5.15.10+kde0, rebased upstream: * No code changes ==== libqt5-qtx11extras ==== Version update (5.15.9+kde0 -> 5.15.10+kde0) - Update to version 5.15.10+kde0, rebased upstream: * No code changes ==== libqt5-qtxmlpatterns ==== Version update (5.15.9+kde0 -> 5.15.10+kde0) Subpackages: libQt5XmlPatterns5 libqt5-qtxmlpatterns-imports - Update to version 5.15.10+kde0, rebased upstream: * Avoid extra copy in a ranged loop ==== libreoffice ==== Version update (7.5.4.1 -> 7.5.4.2) Subpackages: libreoffice-base libreoffice-calc libreoffice-draw libreoffice-filters-optional libreoffice-gnome libreoffice-gtk3 libreoffice-icon-themes libreoffice-impress libreoffice-l10n-cs libreoffice-l10n-da libreoffice-l10n-de libreoffice-l10n-el libreoffice-l10n-en libreoffice-l10n-en_GB libreoffice-l10n-es libreoffice-l10n-fr libreoffice-l10n-hu libreoffice-l10n-it libreoffice-l10n-ja libreoffice-l10n-pl libreoffice-l10n-pt_BR libreoffice-l10n-ru libreoffice-l10n-zh_CN libreoffice-l10n-zh_TW libreoffice-mailmerge libreoffice-math libreoffice-pyuno libreoffice-qt5 libreoffice-writer libreofficekit - Update to 7.5.4.2: https://wiki.documentfoundation.org/Releases/7.5.4/RC2 - Build on all available architectures ==== libvirt ==== Subpackages: libvirt-client libvirt-daemon-common libvirt-daemon-config-network libvirt-daemon-driver-interface libvirt-daemon-driver-libxl libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-lock libvirt-daemon-log libvirt-daemon-plugin-lockd libvirt-daemon-proxy libvirt-daemon-qemu libvirt-daemon-xen libvirt-libs - spec: Don't move apparmor profiles to modular daemon subpackages ==== php8 ==== Version update (8.1.19 -> 8.1.20) Subpackages: php8-cli php8-ctype php8-dom php8-gd php8-gettext php8-iconv php8-mbstring php8-mysql php8-openssl php8-pdo php8-sqlite php8-tokenizer php8-xmlreader php8-xmlwriter - version update to 8.1.20 * This is a security release. * https://www.php.net/ChangeLog-8.php#8.1.20 - force to repack tarball after update https://github.com/php/php-src/issues/11300 - session.save_path set to /var/lib/php8/sessions in mod_php8.conf and www.conf php-fpm pool example - modified sources % mod_php8.conf - added sources + repack.sh + php-unicode-allow-redistribution.patch ==== poppler ==== Version update (23.05.0 -> 23.06.0) Subpackages: libpoppler-cpp0 libpoppler-glib8 poppler-tools - update to 23.06.0 (bsc#1212255): * CairoOutputDev: Fix crash when doing type3 rendering * Fix crash with unknown signature hashing algorithms * Add gpgme backend for signature handling * FontInfo: Make it return proper information about font substitution * FontInfo: Try harder to get Type 3 font name * Store embedded fonts widths table in a more effective manner * Skip font lookup for nonprintable characters * Fix crash on malformed files * Add API to allow selecting signature backend (nss or gpgme) * Convert embedded files to bytearray a bit smarter ==== poppler-qt5 ==== Version update (23.05.0 -> 23.06.0) - update to 23.06.0 (bsc#1212255): * CairoOutputDev: Fix crash when doing type3 rendering * Fix crash with unknown signature hashing algorithms * Add gpgme backend for signature handling * FontInfo: Make it return proper information about font substitution * FontInfo: Try harder to get Type 3 font name * Store embedded fonts widths table in a more effective manner * Skip font lookup for nonprintable characters * Fix crash on malformed files * Add API to allow selecting signature backend (nss or gpgme) * Convert embedded files to bytearray a bit smarter ==== remmina ==== Version update (1.4.30 -> 1.4.31) Subpackages: remmina-lang remmina-plugin-rdp remmina-plugin-secret remmina-plugin-vnc - Update to remmina version 1.4.31: * [REM-2874] muli password changer search now matches partial strings !2480 * Fix segfault in VNC when using domain socket !2481 * Switched pylist Append to SetItem !2482 * Template texts updated !2484 * Add menu option to delete multiple profiles at the same time !2483 * add 1080p as a default resolution to remmina_pref.c !2486 * Remove character limit on password length !2489 * Create better postats.html !2488 * Redesign santahat.png & add santahat.svg !2492 * Edit preferences UI !2491 * Change the icon of the new connection button !2493 * Modify the checkbox of the appearance-tab !2494 * Add valign to the switch of the debugging window !2495 * plugins/rdp: Ensure output redirection configuration applies to both dynamic and static rdpsnd !2498 ==== systemd ==== Subpackages: libsystemd0 libsystemd0-32bit libudev1 systemd-32bit systemd-container systemd-coredump systemd-lang udev - Make sure to skip the call to systemd-tmpfile in the file-triggers when running on transaction systems ==== systemd-rpm-macros ==== Version update (22 -> 23) - Bump to version 23 - Restore the check that prevents systemd-tmpfiles to run during transactional updates The check has been mistakenly dropped during the switch to file-triggers.

1 0

Replace Python 3.10 with 3.11 modules
by Georg Pfuetzenreuter 17 Jun '23

17 Jun '23

Hi, with my last Tumbleweed upgrade Python 3.11 and some base modules were installed and the python3 alternative changed its default to python3.11, causing some scripts using #!/usr/bin/python3 to not work because the needed python311- modules are not yet installed. Is there an easy way to replace all my python310- modules with the python311- equivalents? Cheers, Georg

2 1

New Tumbleweed snapshot 20230614 released!
by Dominique Leuenberger 16 Jun '23

16 Jun '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: dbus-1 (1.14.6 -> 1.14.8) gjs (1.76.0 -> 1.76.1) gvfs kbd libadwaita (1.3.2 -> 1.3.3) libmysofa liburing (2.3 -> 2.4) okteta (0.26.10 -> 0.26.11) perl-Net-DNS (1.38 -> 1.39) rubygem-addressable (2.8.1 -> 2.8.4) systemd-presets-common-SUSE wget wtmpdb (0.5.0 -> 0.6.0) xterm (380 -> 382) yast2-users (4.6.1 -> 4.6.2) zenity (3.92.0 -> 3.99.0) === Details === ==== dbus-1 ==== Version update (1.14.6 -> 1.14.8) Subpackages: dbus-1-common dbus-1-daemon dbus-1-tools libdbus-1-3 libdbus-1-3-32bit - update to 1.14.8 (bsc#1212126, CVE-2023-34969): * Denial-of-service fixes: * Fix an assertion failure in dbus-daemon when a privileged Monitoring connection (dbus-monitor, busctl monitor, gdbus monitor or similar) is active, and a message from the bus driver cannot be delivered to a client connection due to <deny> rules or outgoing message quota. This is a denial of service if triggered maliciously by a local attacker. * Fix compilation on compilers not supporting __FUNCTION__ * Fix some memory leaks on out-of-memory conditions * Fix syntax of a code sample in dbus-api-design ==== gjs ==== Version update (1.76.0 -> 1.76.1) Subpackages: libgjs0 typelib-1_0-GjsPrivate-1_0 - Update to version 1.76.1: + Various fixes ported from the development branch. + Closed bugs and merge requests: - gnome-shell crashes on exit in js::gc::Cell::storeBuffer - Memory leak with GError - GVariant return values leaked - GBytes's are leaked when passed as-is to a function - Transformated GValues are leaking temporary instances - GHash value infos are leaked - "flat" arrays of GObject's are leaked - Gjs console leaks invalid option errors - gjs can't print null - Enable tests during build again. ==== gvfs ==== Subpackages: gvfs-backend-afc gvfs-backend-goa gvfs-backend-samba gvfs-backends gvfs-fuse gvfs-lang - Add upstream fixes from the stable branch: + fc2669f63c5def1528dda2e7833db5774aa08e22.patch: mtp: Emit delete event on device when disconnected + 85bfb701fc95abeaa8a8ca3d9059378a9490f738.patch: smb: Allow renaming a file to the same name with a different case ==== kbd ==== Subpackages: kbd-legacy - Remove additional vfonts, they are freeware, not opensource (bsc#1210678). - Adjust license tag, pinephone keymap is under GPL-3.0-or-later. - Rename 'arabic' keyboard console layout into 'ara' and drop 'korean' symlink (bsc#1210702) ==== libadwaita ==== Version update (1.3.2 -> 1.3.3) Subpackages: libadwaita-1-0 libadwaita-lang typelib-1_0-Adw-1 - Update to version 1.3.3: + Fix doc include path + AdwCarousel: Fix scrolling to a recently inserted item + AdwEntryRow: Fix accessibility + AdwPreferencesWindow: Fix markup handling when searching + AdwStyleManager: Fix get_for_display() annotation + AdwTabBar/AdwTabOverview: Fix dropping data onto tabs/thumbnails + Updated translations. ==== libmysofa ==== - Add 0001-fix-big-endian-convertion-of-double-value.patch: backport bigendian fixes from upstream git. ==== liburing ==== Version update (2.3 -> 2.4) - Update to 2.4: * Add io_uring_{major,minor,check}_version() functions. * Add IO_URING_{MAJOR,MINOR,CHECK}_VERSION() macros. * FFI support (for non-C/C++ languages integration). * Add io_uring_prep_msg_ring_cqe_flags() function. * Deprecate --nolibc configure option. * CONFIG_NOLIBC is always enabled on x86-64, x86, and aarch64. * Add support for IORING_REGISTER_USE_REGISTERED_RING and use if available. * Add io_uring_close_ring_fd() function. * Add io_uring_prep_msg_ring_fd_alloc function. * Add io_uring_free_buf_ring() and io_uring_setup_buf_ring() functions. * Ensure that io_uring_prep_accept_direct(), io_uring_prep_openat_direct(), io_uring_prep_openat2_direct(), io_uring_prep_msg_ring_fd(), and io_uring_prep_socket_direct() factor in being called with IORING_FILE_INDEX_ALLOC for allocating a direct descriptor. * Add io_uring_prep_sendto() function. - Add liburing-ffi2 package for corresponding FFI library, given that dependents will normally require either that or the base library (not both). - Drop upstream patches: * 0001-Do-not-always-expect-multishot-recv-to-stop-posting-.patch * 0001-test-file-verify.t-Don-t-run-over-mlock-limit-when-r.patch * 0001-test-helpers-fix-socket-length-type.patch ==== okteta ==== Version update (0.26.10 -> 0.26.11) Subpackages: libKasten4 libOkteta3 libkasten-lang libokteta-lang okteta-data - Update to 0.26.11: * Improved: translations * Improved: Search tool: store used settings in the config * Improved: Replace tool: store used settings in the config * Improved: Select range tool: store used settings in the config * Improved: Goto tool: store used settings in the config * Improved: Pattern generator: store also used input encoding in the config * Improved: Statistics tool: add option to copy data to clipboard * Improved: Statistics tool: use consistent formatting for percent column * Improved: Structures tool: enable context menu for array and string elements * Improved: Structures tool: show tooltip for array & string elements * Fixed: Search tool: prevent crash on backward search with empty array * Fixed: Search tool: enhance/fix search behaviour with existing selection * Fixed: Search tool: don't reset stored search direction on first dialog show * Fixed: Replace tool: prevent crash on backward search with empty array * Fixed: Replace tool: enhance/fix search behaviour with existing selection * Fixed: Structures tool: fix parsing 3 and 4 byte UTF-8 sequences * Fixed: Structures tool: fix outdated error indices for UTF-8 string decoding * Fixed: unit tests accidentally shared working directories (kde#467541) * Changed: Select range tool: move "Relative to end" field next to end input * Changed: Search tool: disable automagic for "In selection" checkbox (kde#441925) * Changed: Replace tool: disable automagic for "In selection" checkbox (kde#441925) ==== perl-Net-DNS ==== Version update (1.38 -> 1.39) - updated to 1.39 see /usr/share/doc/packages/perl-Net-DNS/Changes ==== rubygem-addressable ==== Version update (2.8.1 -> 2.8.4) - updated to version 2.8.4 * Restore Addressable::IDNA.unicode_normalize_kc as a deprecated method - updated to version 2.8.3 * Fix template expand level 2 hash support for non-string objects - updated to version 2.8.2 * Improve cache hits and JIT friendliness * Improve code style and test coverage * Ensure reset of deferred validation * Resolve normalization differences between IDNA::Native and IDNA::Pure * Remove redundant colon in Addressable::URI::CharacterClasses::AUTHORITY ==== systemd-presets-common-SUSE ==== - Add wtmpdb-update-boot.service and wtmpdb-rotate.timer to enable wtmpdb as Y2038 safe wtmp replacement ==== wget ==== Subpackages: wget-lang - Update wget-libproxy.patch: ensure to properly use libproxy cflags from pkg-config. Fixes build against libproxy 0.5. ==== wtmpdb ==== Version update (0.5.0 -> 0.6.0) Subpackages: libwtmpdb0 - Update to version 0.6.0 - wtmpdb rotate: move old log entries into wtmpdb_<yyyymmdd>.db ==== xterm ==== Version update (380 -> 382) Subpackages: xterm-bin xterm-resize - update to 382: * amend change to CursorBack> in patch 380, allowing the result to be on the hidden right-half of double-cell characters * amend xtermDrawString, fixing regression with - -disable-wide-chars configuration from patch #380 * corrected pathname for run-tic.sh, for full install in an out-of-tree build * fix a regression in wide bitmap fonts versus check for missing glyphs ==== yast2-users ==== Version update (4.6.1 -> 4.6.2) - Write the users when using AutoYaST on an installed system (bsc#1211753). - Move Ruby classes in Yast::Users (SSHAuthorizedKeysFile and SSHAuthorizedKeyring) to the Y2Users module to remove duplication Yast::Users Perl module. - 4.6.2 ==== zenity ==== Version update (3.92.0 -> 3.99.0) Subpackages: zenity-lang - Update to version 3.99.0: + option: Add various non-fatal deprecation warnings that were previously missing, and fix a misleading deprecation message for `--window-icon` + main: Add G_APPLICATION_FLAGS_NON_UNIQUE to GApplication flags + progress: Cleanup unnecessary static objects and remove spurious builder unref + util: - Remove fatal assert on exit if window invalid GtkWindow - Ignore superfluous quit requests - Remove superfluous GtkWindow cast check + data: Manpage generation changes; don't automatically generate the manpage from help2man for now (this will preferably be reinstated post-4.0 once the issues are worked out) + a11y: Label the widgets in a forms UI properly + Updated translations.

1 0

Firefox crashes on latest "dup" in TW
by Fritz Hudnut 16 Jun '23

16 Jun '23

Folks: Was it on this list that somebody posted that their firefox crashed after recent update?? I think it was . . . well the behavior duplicated in my Gecko rolling edition of TW this am. Tried rebooting and tried shutting down and back into FF, but still get the error crash report . . . "report this crash to the authorities" and so forth. Over in Debian Bookworm right now, prior to updating, and FF is working fine. F

3 3

leave
by Nan Lu 16 Jun '23

16 Jun '23

1 0

Tumbleweed - Review of the weeks 2023/23 & 24
by Dominique Leuenberger 16 Jun '23

16 Jun '23

Dear Tumbleweed users and hackers, Again I have to span the review over two weeks – in the region where I live we had some holiday last week and I allowed myself to stretch for a long weekend. But this had no impact on Tumbleweed: it just kept on rolling. There was some additional ‘confusion’ though as the system used to calculate the diff between snapshots has been defunct for a few days, which resulted in the announcements for snapshots 0601 – 0604 not being sent out to the mailing lists. The info was then collected in the report for 0605. This review covers the 10 snapshots 0601, 0602, 0603, 0604, 0605, 0607, 0608, 0610, 0612, and 0613. The most relevant changes in those snapshots were: * AppArmor 3.1.4 & 3.1.5 * LibreOffice 7.5.4.1 * openSSL 3.1 * GNOME 44.2 * Linux kernel 6.3.6 & 6.3.7 * openSSH 9.3p1 * KDE Gear 23.04.2 * KDE Frameworks 5.107.0 * Mozilla Firefox 114 * Mesa 23.1.2 Shortly, Tumbleweed will bring you these changes: * Python 3.11 as the default Python interpreter (moving from Python 3.10). About 100 Python packages failed to rebuild: those will still have the python3- symbol on the python310-* package until fixed. * LibreOffice 7.5.4.2 * PHP 8.1.20 * Qt 5.15.10 Cheers, Dominique

1 0

tumbleweed snapshot download. is it mandatory?
by vani jindam 16 Jun '23

16 Jun '23

I am on tumbleweed. I regularly use # zypper update. But today when i tried zypper update, it suggested zypper dup. Even i regularly do zypper up, i still need to zypper dup for every release of snapshot? Regards, jindam

25 56

Nextcloud server issues
by Ulf 16 Jun '23

16 Jun '23

Hi, after the last update on Sunday the Nextcloud server don't run anymore. # zypper in nextcloud-apache Loading repository data... Reading installed packages... Resolving package dependencies... Problem: nothing provides 'mod_php_any < 8.2.0' needed by the to be installed nextcloud-apache-25.0.6-1.1.noarch Solution 1: do not install nextcloud-apache-25.0.6-1.1.noarch Solution 2: break nextcloud-apache-25.0.6-1.1.noarch by ignoring some of its dependencies Choose from above solutions by number or cancel [1/2/c/d/?] (c): If I select 1 and 2 will result to the same issue. If I open Nextcloud there only this would be displayed in the webbrowser. This version of Nextcloud is not compatible with PHP>=8.2. You are currently running 8.2.5. Please let me know if I need to place a bug report. Ulf

5 16

Call for Leap 15.6 Early feature requests
by Fritz Hudnut 15 Jun '23

15 Jun '23

> > > > et al: > > > > This is good news on the continuation of the Leap line . . . > > personally I don't have any need for added features to 15.5, but a few > > of questions remain. Assuming the "end of February 2023" actually > > means "2024"??? So that means those of us with a Leap 15.5 distro > > could be upgrading to 15.6 Alpha sometime late in '23 or early in > > '24?? > > > > And then, very critical question . . . to "up, or to dup . . . that is > > the question????" : - ))) > > when "upgrading" rather than updating, ie: changing opensuse versions, one > always uses dup (distribution-upgrade). > > there is no question. > -- > (paka)Patrick Shanahan Plainfield, Indiana, USA @ptilopteri Patrick: Indeed . . . that was "dry humor" . . . but, much like the "to Be, or not to Be?" question that dry question was based on . . . if we can ask the question, then we "are" . . . and so we can continue to ask the question . . . . And discuss amongst ourselves . . . . The actual reason for the post was for the clarification on the Alpha/Beta schedule for 15.6 . . . i.e., when 15.5 could be . . . "dup'd" to 15.6 . . . easy-peasy?? F

1 0

New Tumbleweed snapshot 20230613 released!
by Dominique Leuenberger 14 Jun '23

14 Jun '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: fribidi (1.0.12 -> 1.0.13) kernel-source (6.3.6 -> 6.3.7) libzypp (17.31.12 -> 17.31.13) perl-Image-ExifTool (12.62 -> 12.63) xfce4-panel-profiles (1.0.13 -> 1.0.14) === Details === ==== fribidi ==== Version update (1.0.12 -> 1.0.13) Subpackages: libfribidi0 - update to 1.0.13: * Adding missing man pages to the tar release file. ==== kernel-source ==== Version update (6.3.6 -> 6.3.7) - Linux 6.3.7 (bsc#1012628). - RDMA/bnxt_re: Fix the page_size used during the MR creation (bsc#1012628). - phy: amlogic: phy-meson-g12a-mipi-dphy-analog: fix CNTL2_DIF_TX_CTL0 value (bsc#1012628). - RDMA/efa: Fix unsupported page sizes in device (bsc#1012628). - RDMA/hns: Fix timeout attr in query qp for HIP08 (bsc#1012628). - RDMA/hns: Fix base address table allocation (bsc#1012628). - RDMA/hns: Modify the value of long message loopback slice (bsc#1012628). - dmaengine: at_xdmac: fix potential Oops in at_xdmac_prep_interleaved() (bsc#1012628). - RDMA/bnxt_re: Fix a possible memory leak (bsc#1012628). - RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx (bsc#1012628). - iommu: Make IPMMU_VMSA dependencies more strict (bsc#1012628). - iommu/rockchip: Fix unwind goto issue (bsc#1012628). - iommu/amd: Don't block updates to GATag if guest mode is on (bsc#1012628). - iommu/amd: Handle GALog overflows (bsc#1012628). - iommu/amd: Fix up merge conflict resolution (bsc#1012628). - iommu/amd: Add missing domain type checks (bsc#1012628). - nfsd: make a copy of struct iattr before calling notify_change (bsc#1012628). - dmaengine: pl330: rename _start to prevent build error (bsc#1012628). - crypto: x86/aria - Use 16 byte alignment for GFNI constant vectors (bsc#1012628). - riscv: Fix unused variable warning when BUILTIN_DTB is set (bsc#1012628). - net/mlx5e: TC, Remove unused vf_tun variable (bsc#1012628). - net/mlx5e: TC, Move main flow attribute cleanup to helper func (bsc#1012628). - net/mlx5e: Extract remaining tunnel encap code to dedicated file (bsc#1012628). - net/mlx5e: Prevent encap offload when neigh update is running (bsc#1012628). - net/mlx5e: Consider internal buffers size in port buffer calculations (bsc#1012628). - net/mlx5e: Do not update SBCM when prio2buffer command is invalid (bsc#1012628). - net/mlx5: Drain health before unregistering devlink (bsc#1012628). - net/mlx5: SF, Drain health before removing device (bsc#1012628). - net/mlx5: fw_tracer, Fix event handling (bsc#1012628). - net/mlx5e: Use query_special_contexts cmd only once per mdev (bsc#1012628). - net/mlx5e: CT: Use per action stats (bsc#1012628). - net/mlx5e: TC, Remove CT action reordering (bsc#1012628). - net/mlx5: Fix post parse infra to only parse every action once (bsc#1012628). - net/mlx5e: Don't attach netdev profile while handling internal error (bsc#1012628). - net/mlx5e: Move Ethernet driver debugfs to profile init callback (bsc#1012628). - net: mellanox: mlxbf_gige: Fix skb_panic splat under memory pressure (bsc#1012628). - net: stmmac: fix call trace when stmmac_xdp_xmit() is invoked (bsc#1012628). - netrom: fix info-leak in nr_write_internal() (bsc#1012628). - af_packet: Fix data-races of pkt_sk(sk)->num (bsc#1012628). - tls: improve lockless access safety of tls_err_abort() (bsc#1012628). - amd-xgbe: fix the false linkup in xgbe_phy_status (bsc#1012628). - perf ftrace latency: Remove unnecessary "--" from --use-nsec option (bsc#1012628). - mtd: rawnand: ingenic: fix empty stub helper definitions (bsc#1012628). - efi: Bump stub image version for macOS HVF compatibility (bsc#1012628). - RDMA/irdma: Prevent QP use after free (bsc#1012628). - RDMA/irdma: Fix Local Invalidate fencing (bsc#1012628). - af_packet: do not use READ_ONCE() in packet_bind() (bsc#1012628). - tcp: deny tcp_disconnect() when threads are waiting (bsc#1012628). - tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set (bsc#1012628). - rxrpc: Truncate UTS_RELEASE for rxrpc version (bsc#1012628). - net/smc: Scan from current RMB list when no position specified (bsc#1012628). - net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK (bsc#1012628). - net/sched: sch_ingress: Only create under TC_H_INGRESS (bsc#1012628). - net/sched: sch_clsact: Only create under TC_H_CLSACT (bsc#1012628). - net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress (clsact) Qdiscs (bsc#1012628). - net/sched: Prohibit regrafting ingress or clsact Qdiscs (bsc#1012628). - net: sched: fix NULL pointer dereference in mq_attach (bsc#1012628). - net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report (bsc#1012628). - udp6: Fix race condition in udp6_sendmsg & connect (bsc#1012628). - nfsd: fix double fget() bug in __write_ports_addfd() (bsc#1012628). ... changelog too long, skipping 382 lines ... - commit 6152a50 ==== libzypp ==== Version update (17.31.12 -> 17.31.13) - curl: Trim user agent string (bsc#1212187) HTTP/2 RFC 9113 forbids fields ending with a space. Violation results in curl error: 92: HTTP/2 PROTOCOL_ERROR. - version 17.31.13 (22) ==== perl-Image-ExifTool ==== Version update (12.62 -> 12.63) Subpackages: exiftool perl-File-RandomAccess - Update to 12.63: - Added ability to read/write/create Brotli-compressed metadata in JXL images (requires IO::Compress::Brotli) - Added partial support for Exif 3.0 specification: - Added new EXIF tags - Added MPF Original Preservation Image type - Support for reading 'utf8' values (but still write only as 'string') - Added support for Adobe HDR Gain Map (hdrgm) XMP tags - Added support for reading 7z files (thanks Amir Gooran, github [#205]) (but currently this doesn't work for the Windows .exe version because I haven't been able to install Compress::Raw::Lzma for ActivePerl) - Added XMP-panorama tags - Added warning if -csv is used with -p - Added warning if trying to geotag from a UTF-16 track log - Decode ImageWidth/Height from JXL images using partial codestreams - Decode more Sony tags for some newer models (thanks Jos Roost) - Extract GainMapImage (hrgm box) from JXL files - Extract Guano information from WAV files - Enhanced ImageDataMD5 feature and renamed to ImageDataHash (with ImageDataMD5 alias for backward compatibility) - Changed RARVersion tag name to FileVersion - Fixed bug introduced in 12.46 which could cause a hang when reading a corrupted RIFF-based file - Fixed writing of Composition:GPSPosition when -n is used - API Changes: - Added ImageHashType option ==== xfce4-panel-profiles ==== Version update (1.0.13 -> 1.0.14) - Refresh Libxfce4ui.patch again to ensure we require both typelib(Libxfce4ui) *and* typelib(Libxfce4util) - Add Requires: python3-psutil - Really fix files list and permissions of installed files - Update to version 1.0.14 * Save and restore rc-files * Add keywords to .desktop file (Fixes #9) * Properly filter filenames on startup * Ensure unique profile name and consistent filename * Pass correct length to GLib.KeyFile.load_from_data() (Fixes #20) * Open panel prefs dialog also on delete-event (Fixes #42) * configure: Use shell builtins instead of sed * Add missing translatable flags * Fix translations when $prefix != /usr * Add Unity layout * Use get_user_config_dir instead of get_home_dir (Fixes #38) * Show errors before saving profile to file * Ignore corrupted desktop-files on store Ignore empty launchers on store * Set correct desktop file name for translations * Makefile.in.in: Pass arguments to tar to make build reproducible regardless of user or umask * removed extra created link in makefile(#10) * Translation Updates - Refresh Libxfce4ui.patch - Fix files list and permissions of installed files

1 0

openSUSE Release Engineering meeting 14.07.2023
by Lubos Kocman 14 Jun '23

14 Jun '23

All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting The meeting is hosted here https://meet.opensuse.org/ReleaseEngineeringMeeting ## Attendees lkocman, Guillaume, DimStar, Marcus, Richard, ddemaio, anag, wengel ## Leap FTO on Friday Leap 15.5 GA was last week. We're collecting Leap 15.5 release retrospective at https://survey.opensuse.org/ until 21st of June (so far 221 responses in total was 760 previous release). NVIDIA repo issues https://bugzilla.opensuse.org/show_bug.cgi?id=1212189 libzypp fix on the way ^ This should be candidate for a next respin for image. openh264-repo 4k key setup done last week ## openSUSE Tumbleweed openSUSE:Factory build fail stats: 19 failed 7 unresolvable https://tinyurl.com/ysy4nnnz * Preparations for python 3.11-as-default-interpreter are completed: the switch is supposed to happen during the next few days * protobuf 22.5 is staged, breaks quite a few things. The plan is to keep protobuf 21.x available in parallel, so consumers that are not easily portable can make use of this (fixes needed for libzupp, open- vm-tools) * libxml2 2.11.x blocked, as it breaks things like perl-XML-LibXML, * fmt 10 blocked, as it breaks ceph * osinfo-db breaks test suite of virt-manager (http => https changes) * kmod breaks installation-images (pending PR: https://github.com/openSUSE/installation-images/pull/647) ## Richard (Aeon) No news this week, status from last week (below) still applies MicroOS Desktop (GNOME) has been renamed openSUSE Aeon https://aeondesktop.org Product already being bootstrapped in OBS, using it as a pathfinder for the ALP Build Design (see below) Prototypical image being built, challenges with things like repo layout will likely be best handled by the repos-via-rpms already pioneered by Leap Richard has been hands on with Agama, has identified a few things that need addressing before Aeon could use it happily..may use it anyway https://github.com/openSUSE/agama/issues/602 https://github.com/openSUSE/agama/issues/601 Experimenting with ALP-like encrypted images with FDE and TPM unlock using kiwi Self-Installer. May be the 'one true way' of installing Aeon in the future, has far less options, isn't as pretty as Agama, but does the job we want it done the way we want it done. Much of this is dependant on ALP stuff getting into Factory which is WIP ## Richard (ALP Architecture) Prelimary ALP Build Design documented https://en.opensuse.org/openSUSE:ALP/BuildDesign ALP Architecture team is being bootstrapped https://en.opensuse.org/openSUSE:ALP/ArchitectureTeam Team will plan, design, experiment with ideas for future ALP-based openSUSE distros Kick Off Meeting on 27th June 1430UTC at https://meet.opensuse.org/meeting ## Max Not available Leap 15.5 * Disabled all 15.5 pipeline on botmaster * Disabled Leap, Leap-NonFree and Backports project * Set project attributes for maint update, OBS:RejectRequest and OBS:UpdateProject ## Guillaume - Arm Tumbleweed: * Snapshot 20230604 released with plasmashell bug (actually Qt bug) https://bugzilla.opensuse.org/show_bug.cgi?id=1211628 - This will be fixed in next snapshot (20230613+) * gcc12 was in a rebuild loop (due to installcheck issue) and prevented snapshots to finish to build. Dominique and Fabian have fixed the problem (Thanks a lot!), so we should get a new snapshot into openQA soon. * shim currently not signed my Microsoft for aarch64 (Tumbleweed only, Leap is fine). It has been sent upstream for review, so it is progressing - https://bugzilla.suse.com/show_bug.cgi?id=1211297 Leap: * No update ALP: * shim not signed by MS (at least for aarch64, not sure for x86_64) - jsc#ARM-100 WSL: * Works with x86 emulator since appx installer is x86-64, but this is not really an issue since arm64 Win11 includes x86 emulator by default. Team is ok to publish it on Microsoft store anyway, but this would require some testing in openQA which is currently not possible (due to technical issues and MS licensing issues) https://progress.opensuse.org/issues/126083. Steps documented on the wiki to install the appx from download.o.o: https://en.opensuse.org/openSUSE:WSL#With_Appx_from_openSUSE_download_server ## Sarah - s390x Not available Tumbleweed * blocked by Mesa:drivers build failure https://bugzilla.opensuse.org/show_bug.cgi?id=1212339 Leap: * working * waitingSubmissisions with fixes for gtkd and gnu-cobol: https://build.opensuse.org/request/show/1072852 https://build.opensuse.org/request/show/1078385 Sarah gave 2 talks at the openSUSE Conference The SUSE/openSUSE zSystems BBQ meeting will be 7th July 2023. The bi-weeky openSUSE zSystems meeting will switch from 18:00 to 19:00. ## Doug * Merged a few PRs * Preparing for SUSECON * metrics.o.o. Leap 15.4 * Updating news coverage of Leap 15.5 release * Community meeting * Beginning June 27, Meeting 1 (Tuesdays) will be dedicated for ALP *** listed above * openSUSE.Asia Summit * CfP to be announced soon * openSUSE Conference * videos are expected to be released at the end of June * Fedora flock CfP is open - https://cfp.fedoraproject.org/login - TSP equivalent is available Static * Still need future storage location * AI topics (static) *LFNW 2023 https://sessionize.com/lfnw2023 Dan Cermak already submitted ALP related talk + few others ## Dirk Not available Further poking on the CDN / Fastly contract Submitted a few dozen python package updates * also todo announce tumbleweed maintainer policy draft currently working on testing those in a private staging test project * Started ALP:RISCV:* builds in the new build setup Biggest speedup can be observed by switching zlib to zlib-ng, so looked into fixing the build failures caused by switching to zlibo-ng- compat ## Wolfgang (Package Hub), Scott Bahling We had an issue with deployment of new 4k key for Package Hub for SLE-15-SP5 which is fixed Some missing dependencies for subpackages repository slipped thru for GA, need to check with maintenance to release them as Update on FCS Leap 15.6 on roadmap implies that we'll do regular PackageHUB setup for 15 SP6. ## Maintenance team (Marcus or Maurizio (m4u)) libzypp update in 15.5 was fixed by releasing missing dependency. libzypp issue that can be properly addressed only with respin of DVD. See section above for more details. openQA is stuck due to a regression - https://bugzilla.suse.com/show_bug.cgi?id=1211459 Leap Micro 5.4 maint-setup is active. Leap 15.5 setup is done, SLE export channel is still being refreshed occasionaly. 15.5 GA is currently scheduled for the 7th of June Key rotation: Migration with changed 4k key. Current autoimport solution is not ideal. Marcus will work on update of the opensuse-build-key https://en.opensuse.org/SDB:System_upgrade#0._New_4096_bit_RSA_signing_key openSUSE:Leap:15.5 is done, Backports are bit more challenging because of SLES. Wolfgang: we're injecting the key. Marcus we probably want to do only Backports 15 SP5 for now. Backports 15SP5 key change, we have labs next week, so nobody would even notice a full rebuild :-) Wolfgang: do we add or replace key completely? The key will be kept on users Marcus was aiming for replacing the key, it would appear as added on existing systems. Marcus is working also on the SLES side, the update of package with the new key was released last week, it's just not activated yet, but it will be already trusted by Leap 15.5 systems. Leap 15.4 is working Leap Micro 5.3 is working Leap Micro 5.4 testing is now passing as well Leap 16.0 - we should revisit the update/sle repo as the current setup not exactly mirror friendly. Solutions could be dropping not so popular architectures or split repositories per architecture. securebootkey for SLES was rotated, it should be autotrusted and not noticeable. This will be in QU3, QU2 is already done. lkocman: 15.3 EOL could lead to stopping our physical Source DVD effort, as it seems we will not produce. As this was the last release which you could still get on a physical media. Lkocman: anything against decomissioning it? Not a single valid request since I've joined SUSE. We did receive only requests for binary install media which are not subject to ^. We do not plan to offer this for any new releases. ## Adrian - OBS Not available OBS build power is back to normal after fixing misconfiguration which kept workers busy. ## Open Floor

1 0

New Tumbleweed snapshot 20230612 released!
by Dominique Leuenberger 13 Jun '23

13 Jun '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: Mesa (23.0.3 -> 23.1.2) Mesa-drivers (23.0.3 -> 23.1.2) MozillaFirefox (113.0.2 -> 114.0.1) apparmor (3.1.4 -> 3.1.5) attica-qt5 (5.106.0 -> 5.107.0) baloo5 (5.106.0 -> 5.107.0) bluez-qt (5.106.0 -> 5.107.0) breeze5-icons (5.106.0 -> 5.107.0) cracklib (2.9.8 -> 2.9.11) frameworkintegration (5.106.0 -> 5.107.0) fuse3 (3.14.1 -> 3.15.0) hwdata (0.370 -> 0.371) kactivities-stats (5.106.0 -> 5.107.0) kactivities5 (5.106.0 -> 5.107.0) karchive (5.106.0 -> 5.107.0) kauth (5.106.0 -> 5.107.0) kbookmarks (5.106.0 -> 5.107.0) kcalendarcore (5.106.0 -> 5.107.0) kcmutils (5.106.0 -> 5.107.0) kcodecs (5.106.0 -> 5.107.0) kcompletion (5.106.0 -> 5.107.0) kconfig (5.106.0 -> 5.107.0) kconfigwidgets (5.106.0 -> 5.107.0) kcontacts (5.106.0 -> 5.107.0) kcoreaddons (5.106.0 -> 5.107.0) kcrash (5.106.0 -> 5.107.0) kdav (5.106.0 -> 5.107.0) kdbusaddons (5.106.0 -> 5.107.0) kdeclarative (5.106.0 -> 5.107.0) kded (5.106.0 -> 5.107.0) kdelibs4support (5.106.0 -> 5.107.0) kdesu (5.106.0 -> 5.107.0) kdnssd-framework (5.106.0 -> 5.107.0) kdoctools (5.106.0 -> 5.107.0) kfilemetadata5 (5.106.0 -> 5.107.0) kglobalaccel (5.106.0 -> 5.107.0) kguiaddons (5.106.0 -> 5.107.0) kholidays (5.106.0 -> 5.107.0) khtml (5.106.0 -> 5.107.0) ki18n (5.106.0 -> 5.107.0) kiconthemes (5.106.0 -> 5.107.0) kidletime (5.106.0 -> 5.107.0) kimageformats (5.106.0 -> 5.107.0) kinit (5.106.0 -> 5.107.0) kio (5.106.0 -> 5.107.0) kirigami2 (5.106.0 -> 5.107.0) kitemmodels (5.106.0 -> 5.107.0) kitemviews (5.106.0 -> 5.107.0) kjobwidgets (5.106.0 -> 5.107.0) kjs (5.106.0 -> 5.107.0) knewstuff (5.106.0 -> 5.107.0) knotifications (5.106.0 -> 5.107.0) knotifyconfig (5.106.0 -> 5.107.0) kpackage (5.106.0 -> 5.107.0) kparts (5.106.0 -> 5.107.0) kpeople5 (5.106.0 -> 5.107.0) kplotting (5.106.0 -> 5.107.0) kpty (5.106.0 -> 5.107.0) kquickcharts (5.106.0 -> 5.107.0) kross (5.106.0 -> 5.107.0) krunner (5.106.0 -> 5.107.0) kservice (5.106.0 -> 5.107.0) ktexteditor (5.106.0 -> 5.107.0) ktextwidgets (5.106.0 -> 5.107.0) kunitconversion (5.106.0 -> 5.107.0) kwallet (5.106.0 -> 5.107.0) kwayland (5.106.0 -> 5.107.0) kwidgetsaddons (5.106.0 -> 5.107.0) kwindowsystem (5.106.0 -> 5.107.0) kxmlgui (5.106.0 -> 5.107.0) libKF5ModemManagerQt (5.106.0 -> 5.107.0) libKF5NetworkManagerQt (5.106.0 -> 5.107.0) libapparmor (3.1.4 -> 3.1.5) libjxl libqt5-qtdeclarative (5.15.9+kde25 -> 5.15.9+kde26) libstorage-ng (4.5.116 -> 4.5.118) mozilla-nss pcsc-lite (1.9.9 -> 2.0.0) plasma-framework (5.106.0 -> 5.107.0) prison-qt5 (5.106.0 -> 5.107.0) publicsuffix (20230426 -> 20230607) purpose (5.106.0 -> 5.107.0) python-dbus-python python-gevent python-netaddr python-qt5 python-qt5-sip qqc2-desktop-style (5.106.0 -> 5.107.0) samba (4.18.1+git.298.4ccf830b2a4 -> 4.18.3+git.303.c08b73d523c) solid (5.106.0 -> 5.107.0) sonnet (5.106.0 -> 5.107.0) syndication (5.106.0 -> 5.107.0) syntax-highlighting (5.106.0 -> 5.107.0) systemd (253.4 -> 253.5) threadweaver (5.106.0 -> 5.107.0) wireless-regdb (20230503 -> 20230601) xrdb (1.2.1 -> 1.2.2) xwayland (23.1.1 -> 23.1.2) zchunk (1.3.0 -> 1.3.1) === Details === ==== Mesa ==== Version update (23.0.3 -> 23.1.2) Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libOSMesa8 libgbm1 - Update to bugfix release 23.1.2 - needed to fix build of Mesa 23.1 * Mesa-drivers: -Dshader-cache=enabled * Mesa: -Dxlib-lease=enabled * recommended for both Mesa and Mesa-drivers to avoid some scary messages when comparing fds: -Dallow-kcmp=enabled - Credits for figuring this out go to "llyyr" <llyyr.public(a)gmail.com> - gbm files are no longer needed to be removed manually for -drivers build - VDPAU support for r300 has been dropped with Mesa 23.1 - supersedes n_no-sse2-on-ix86-except-for-intel-drivers.patch - Update to bugfix release 23.1.1 - adjusted u_dep_xcb.patch - Update to 23.1.0 * new feature release * some highlights + Our OpenCL implementation Rusticl added support for AMD GPUs. + Both ANV (Intel) and RADV (AMD) got initial support for Vulkan Video decoding. + Vulkan Graphics Pipeline Libraries (GPL) are now supported in RADV. - adjusted n_stop-iris-flicker.patch - supersedes U_ReturnME.patch - meson option "-Ddri-drivers" has been removed; wasn't used any longer by us --> killed it ==== Mesa-drivers ==== Version update (23.0.3 -> 23.1.2) Subpackages: Mesa-dri Mesa-gallium Mesa-libva libxatracker2 - Update to bugfix release 23.1.2 - needed to fix build of Mesa 23.1 * Mesa-drivers: -Dshader-cache=enabled * Mesa: -Dxlib-lease=enabled * recommended for both Mesa and Mesa-drivers to avoid some scary messages when comparing fds: -Dallow-kcmp=enabled - Credits for figuring this out go to "llyyr" <llyyr.public(a)gmail.com> - gbm files are no longer needed to be removed manually for -drivers build - VDPAU support for r300 has been dropped with Mesa 23.1 - supersedes n_no-sse2-on-ix86-except-for-intel-drivers.patch - Update to bugfix release 23.1.1 - adjusted u_dep_xcb.patch - Update to 23.1.0 * new feature release * some highlights + Our OpenCL implementation Rusticl added support for AMD GPUs. + Both ANV (Intel) and RADV (AMD) got initial support for Vulkan Video decoding. + Vulkan Graphics Pipeline Libraries (GPL) are now supported in RADV. - adjusted n_stop-iris-flicker.patch - supersedes U_ReturnME.patch - meson option "-Ddri-drivers" has been removed; wasn't used any longer by us --> killed it ==== MozillaFirefox ==== Version update (113.0.2 -> 114.0.1) Subpackages: MozillaFirefox-translations-common - Mozilla Firefox 114.0.1 * Fix a startup crash (bmo#1837201, boo#1212101) - Only install vaapitest for wayland-enabled builds, where it gets built - Rebase mozilla-silence-no-return-type.patch - Rebase s390x-patches, and remove obsolete patches: mozilla-bmo1005535.patch mozilla-s390x-skia-gradient.patch - Mozilla Firefox 114.0 MFSA 2023-20 (bsc#1211922) * CVE-2023-34414 (bmo#1695986) Click-jacking certificate exceptions through rendering lag * CVE-2023-34415 (bmo#1811999) Site-isolation bypass on sites that allow open redirects to data: urls * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875, bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190, bmo#1830206, bmo#1830795, bmo#1833339) Memory safety bugs fixed in Firefox 114 and Firefox ESR 102.12 * CVE-2023-34417 (bmo#1746447, bmo#1820903, bmo#1832832) Memory safety bugs fixed in Firefox 114 * New: Added UI to manage the DNS over HTTPS exception list. (bmo#1596847) * New: Bookmarks can now be searched from the Bookmarks menu. The Bookmarks menu is accessible by adding the *Bookmarks menu* button to the toolbar. (bmo#1736937) * New: Restrict searches to your local browsing history by selecting *Search history* from the History, Library or Application menu buttons. (bmo#1736939) * New: Mac users can now capture video from their cameras in all supported native resolutions. This enables resolutions higher than 1280x720. (bmo#1806604) * New: It is now possible to reorder the extensions listed in the extensions panel. (bmo#1805924) * New: Users on macOS, Linux, and Windows 7 can now use FIDO2 / WebAuthn authenticators over USB. Some advanced features, such as fully passwordless logins, require a PIN to be set on the authenticator. (bmo#1814487) * New: Pocket Recommended content can now be seen in France, Italy, and Spain. (bmo#None) * Changed: DNS over HTTPS settings are now part of the * Privacy & Security* section of the *Settings* page and allow the user to choose from all the supported modes. (bmo#1610741) * HTML5: DOM: Added support for ES Modules on DedicatedWorker and SharedWorker * HTML5: WebTransport is now enabled by default and will be going to release with 114. As the original Explainer notes, it enables multiple use-cases that are hard or impossible to handle without it, especially for Gaming and live streaming. It covers cases that are problematic for alternative mechanisms, such as WebSockets. Built on top of HTTP3 (HTTP2 support will be coming later). The current implementation in Firefox is passing 505 out of 565 Web-Platform Tests. * HTML5: CSS: The `infinity` and `NaN` constants are now supported inside the `calc()` function. (bmo#1830759) * Developer: The *Copy as cURL* feature, available in the Network panel, has been enhanced. It now supports the - `-compressed` argument. (bmo#1776120) * Developer: The Accessibility Inspector has been improved to accurately recognize all the ARIA roles like `banner`, `main`, `navigation`, and `contentinfo`, etc. This enhancement is particularly beneficial for web developers working with ARIA roles to improve web accessibility. (bmo#1572512) * Developer: Firefox now provides support for the CSS Cascading Level 4 `supports()` syntax for `@import` rules. This allows for the importation of other stylesheets based on support- dependency. In addition, the Inspector panel now accurately displays the conditions at the top of the imported rule. - requires NSS 3.89.1 ==== apparmor ==== Version update (3.1.4 -> 3.1.5) Subpackages: apparmor-abstractions apparmor-docs apparmor-parser apparmor-parser-lang apparmor-profiles apparmor-utils apparmor-utils-lang python3-apparmor - update to AppArmor 3.1.5 - fix handling of mount rules in apparmor_parser - minor additions to abstractions/base and snap_browsers - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.5 for the full upstream changelog - remove upstreamed aa-status-fix-json-mr1046.patch - split off apparmor-enable-precompiled-cache.diff from apparmor-enable-profile-cache.diff so that the precompiled cache path doesn't get added in parser.conf for Tumbleweed builds. This prevents a warning about the non-existing directory when loading profiles. ==== attica-qt5 ==== Version update (5.106.0 -> 5.107.0) Subpackages: libKF5Attica5 - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== baloo5 ==== Version update (5.106.0 -> 5.107.0) Subpackages: baloo5-file baloo5-file-lang baloo5-imports baloo5-kioslaves baloo5-kioslaves-lang baloo5-tools baloo5-tools-lang libKF5Baloo5 libKF5BalooEngine5 libKF5BalooEngine5-lang - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - Changes since 5.106.0: * Use common helper for Property/JSON conversion * Don't install D-Bus interfaces without BUILD_INDEXER_SERVICE * Make building of the service optional, add packaging documentation * Minor fixes for DocumentUrlDB::updateUrl method * [IdTreeDB] Consolidate put/del into common set * [MetadataMoverTest] Add some more test documentation * Remove dead code paths from DocumentUrlDB::del * Cleanup some leftover stale code * Use more RAII in unit tests * port to standard C++ smart pointers where possible * Add some documentation for DocumentDB/DocumentIdDB * [balooshow] Improve display of property and plaintext terms * Move KFileMetaData documentation reference up ==== bluez-qt ==== Version update (5.106.0 -> 5.107.0) Subpackages: bluez-qt-imports bluez-qt-udev libKF5BluezQt6 - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== breeze5-icons ==== Version update (5.106.0 -> 5.107.0) - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== cracklib ==== Version update (2.9.8 -> 2.9.11) Subpackages: libcrack2 libcrack2-32bit - version update to 2.9.11 * Merge fedora patches and man pages * Fix missing files in dist tarball, other automake fixes (Leandro Nini) * Fix error handling during build of dictionary (yixiangzhike) * Fix to localization support (A. Wilcox, nekopsykose) * Fix to test utilities (Alexander Kanavin) * Translation updates from weblate * python: adjust include path for builddir by @thesamesam in #61 * Make buffer static and avoid returning stack-allocated memory by @drfiemost in #63 - modified patches % 0002-cracklib-2.9.2-visibility.patch (refreshed) ==== frameworkintegration ==== Version update (5.106.0 -> 5.107.0) Subpackages: frameworkintegration-plugin libKF5Style5 - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== fuse3 ==== Version update (3.14.1 -> 3.15.0) Subpackages: libfuse3-3 - Update to release 3.15.0 * Improved support for some less common systems (32-bit, alternative libcs) * Unsupported mount options are no longer silently accepted. * auto_unmount is now compatible with allow_other. ==== hwdata ==== Version update (0.370 -> 0.371) - update to 0.371: * Update pci, usb and vendor ids ==== kactivities-stats ==== Version update (5.106.0 -> 5.107.0) - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== kactivities5 ==== Version update (5.106.0 -> 5.107.0) Subpackages: kactivities5-imports libKF5Activities5 - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== karchive ==== Version update (5.106.0 -> 5.107.0) Subpackages: libKF5Archive5 libKF5Archive5-lang - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== kauth ==== Version update (5.106.0 -> 5.107.0) Subpackages: libKF5Auth5 libKF5Auth5-lang libKF5AuthCore5 - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== kbookmarks ==== Version update (5.106.0 -> 5.107.0) Subpackages: libKF5Bookmarks5 libKF5Bookmarks5-lang - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== kcalendarcore ==== Version update (5.106.0 -> 5.107.0) - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== kcmutils ==== Version update (5.106.0 -> 5.107.0) Subpackages: kcmutils-imports libKF5KCMUtils5 libKF5KCMUtils5-lang libKF5KCMUtilsCore5 - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== kcodecs ==== Version update (5.106.0 -> 5.107.0) Subpackages: libKF5Codecs5 libKF5Codecs5-lang - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== kcompletion ==== Version update (5.106.0 -> 5.107.0) Subpackages: libKF5Completion5 libKF5Completion5-lang - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== kconfig ==== Version update (5.106.0 -> 5.107.0) Subpackages: kconf_update5 libKF5ConfigCore5 libKF5ConfigCore5-lang libKF5ConfigGui5 libKF5ConfigQml5 - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== kconfigwidgets ==== Version update (5.106.0 -> 5.107.0) Subpackages: libKF5ConfigWidgets5 libKF5ConfigWidgets5-lang - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - Changes since 5.106.0: * KColorSchemeMenu: Remove accelerator markers from scheme name * Give KColorSchemeMenu namespace a short description * Fixup: Pass scheme name - not path - to KColorSchemeManager::indexForScheme * Split menu creating functionality out of KColorSchemeManager ==== kcontacts ==== Version update (5.106.0 -> 5.107.0) Subpackages: kcontacts-lang libKF5Contacts5 - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== kcoreaddons ==== Version update (5.106.0 -> 5.107.0) Subpackages: kcoreaddons-lang libKF5CoreAddons5 - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - Changes since 5.106.0: * use fcntl to fix macOS compile ==== kcrash ==== Version update (5.106.0 -> 5.107.0) - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== kdav ==== Version update (5.106.0 -> 5.107.0) Subpackages: kdav-lang libKF5DAV5 - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== kdbusaddons ==== Version update (5.106.0 -> 5.107.0) Subpackages: kdbusaddons-tools libKF5DBusAddons5 libKF5DBusAddons5-lang - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== kdeclarative ==== Version update (5.106.0 -> 5.107.0) Subpackages: kdeclarative-components libKF5CalendarEvents5 libKF5Declarative5 libKF5Declarative5-lang libKF5QuickAddons5 - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== kded ==== Version update (5.106.0 -> 5.107.0) - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== kdelibs4support ==== Version update (5.106.0 -> 5.107.0) Subpackages: kdelibs4support-lang libKF5KDELibs4Support5 - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - Changes since 5.106.0: * kssl: Update for LibreSSL 3.7 ==== kdesu ==== Version update (5.106.0 -> 5.107.0) Subpackages: libKF5Su5 libKF5Su5-lang - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== kdnssd-framework ==== Version update (5.106.0 -> 5.107.0) Subpackages: libKF5DNSSD5 libKF5DNSSD5-lang - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== kdoctools ==== Version update (5.106.0 -> 5.107.0) Subpackages: kdoctools-lang libKF5DocTools5 - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - Changes since 5.106.0: * Add Arabic Support ==== kfilemetadata5 ==== Version update (5.106.0 -> 5.107.0) Subpackages: kfilemetadata5-lang - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - Changes since 5.106.0: * Cleanup property name/id mapping test * Add method to export list of all Property names. * Reduce PropertyInfo construction overhead * Add benchmark for PropertyInfo instantiation * Fix build with exiv2 >= 0.28 ==== kglobalaccel ==== Version update (5.106.0 -> 5.107.0) Subpackages: kglobalaccel5 libKF5GlobalAccel5 libKF5GlobalAccel5-lang libKF5GlobalAccelPrivate5 - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== kguiaddons ==== Version update (5.106.0 -> 5.107.0) Subpackages: libKF5GuiAddons5 - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== kholidays ==== Version update (5.106.0 -> 5.107.0) Subpackages: libKF5Holidays5 libKF5Holidays5-lang - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - Changes since 5.106.0: * Significantly speed up HolidayRegion::defaultRegionCode() ==== khtml ==== Version update (5.106.0 -> 5.107.0) Subpackages: libKF5KHtml5 libKF5KHtml5-lang - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== ki18n ==== Version update (5.106.0 -> 5.107.0) Subpackages: libKF5I18n5 libKF5I18n5-lang - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== kiconthemes ==== Version update (5.106.0 -> 5.107.0) Subpackages: libKF5IconThemes5 libKF5IconThemes5-lang - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - Changes since 5.106.0: * KIconTheme: allow to also fallback to Breeze-dark when set through QPA ==== kidletime ==== Version update (5.106.0 -> 5.107.0) - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== kimageformats ==== Version update (5.106.0 -> 5.107.0) - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - Changes since 5.106.0: * pcx: multiple fixes (2) * Avoid unnecessary conversions * RGB/SGI writer: fix alpha detection and image limit size * TGA writer: fix alpha detection and performance improvements * pcx: multiple fixes * PCX: Fix reading of the extended palette (kde#463951) ==== kinit ==== Version update (5.106.0 -> 5.107.0) Subpackages: kinit-lang - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== kio ==== Version update (5.106.0 -> 5.107.0) Subpackages: kio-core kio-lang - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - Changes since 5.106.0: * Deprecate KIO::AccessManager and related classes * Enable thumbnail caching if thumbnail directory is on an encrypted volume * KdirLister: update symlink dir content on file removal (kde#469254) * Polish menu before creating platform window ==== kirigami2 ==== Version update (5.106.0 -> 5.107.0) Subpackages: kirigami2-lang libKF5Kirigami2-5 - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - Changes since 5.106.0: * ActionTextField: Disable shortcut for invisible and disabled text fields * BasicListItemTest: Guard against nullable background in ScrollView * Fix tst_basiclistitem_tooltip * Make it possible to disable BasicListItem tooltip * Fix almost all links in the KF5 Kirigami docs * Fix painting of non-symbolic icons which are fallbacks for symbolic (kde#451538) ==== kitemmodels ==== Version update (5.106.0 -> 5.107.0) Subpackages: kitemmodels-imports libKF5ItemModels5 - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - Changes since 5.106.0: * Preserve numeric sort roles as well ==== kitemviews ==== Version update (5.106.0 -> 5.107.0) Subpackages: libKF5ItemViews5 libKF5ItemViews5-lang - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== kjobwidgets ==== Version update (5.106.0 -> 5.107.0) Subpackages: libKF5JobWidgets5 libKF5JobWidgets5-lang - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== kjs ==== Version update (5.106.0 -> 5.107.0) Subpackages: libKF5JS5 libKF5JSApi5 - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== knewstuff ==== Version update (5.106.0 -> 5.107.0) Subpackages: knewstuff-imports libKF5NewStuff5 libKF5NewStuff5-lang libKF5NewStuffCore5 libKF5NewStuffWidgets5 - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - Changes since 5.106.0: * Remove KF5TextWidgets remnants ==== knotifications ==== Version update (5.106.0 -> 5.107.0) Subpackages: libKF5Notifications5 libKF5Notifications5-lang - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== knotifyconfig ==== Version update (5.106.0 -> 5.107.0) Subpackages: libKF5NotifyConfig5 libKF5NotifyConfig5-lang - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== kpackage ==== Version update (5.106.0 -> 5.107.0) Subpackages: kpackage-lang - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== kparts ==== Version update (5.106.0 -> 5.107.0) Subpackages: libKF5Parts5 libKF5Parts5-lang - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - Changes since 5.106.0: * PartLoader::createPartInstanceForMimeType(): Avoid compiler detected null pointer access ==== kpeople5 ==== Version update (5.106.0 -> 5.107.0) Subpackages: kpeople5-lang - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== kplotting ==== Version update (5.106.0 -> 5.107.0) - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== kpty ==== Version update (5.106.0 -> 5.107.0) Subpackages: libKF5Pty5 libKF5Pty5-lang - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== kquickcharts ==== Version update (5.106.0 -> 5.107.0) - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== kross ==== Version update (5.106.0 -> 5.107.0) Subpackages: kross-lang - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== krunner ==== Version update (5.106.0 -> 5.107.0) - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== kservice ==== Version update (5.106.0 -> 5.107.0) Subpackages: kservice-lang - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== ktexteditor ==== Version update (5.106.0 -> 5.107.0) Subpackages: ktexteditor-lang - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - Changes since 5.106.0: * Add missing includes * Fix incorrect lineHeight for drag pixmap (kde#468196) ==== ktextwidgets ==== Version update (5.106.0 -> 5.107.0) Subpackages: libKF5TextWidgets5 libKF5TextWidgets5-lang - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== kunitconversion ==== Version update (5.106.0 -> 5.107.0) Subpackages: libKF5UnitConversion5 libKF5UnitConversion5-lang - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== kwallet ==== Version update (5.106.0 -> 5.107.0) Subpackages: kwallet-tools kwallet-tools-lang kwalletd5 kwalletd5-lang libKF5Wallet5 libkwalletbackend5-5 - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== kwayland ==== Version update (5.106.0 -> 5.107.0) - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== kwidgetsaddons ==== Version update (5.106.0 -> 5.107.0) Subpackages: libKF5WidgetsAddons5 libKF5WidgetsAddons5-lang - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== kwindowsystem ==== Version update (5.106.0 -> 5.107.0) Subpackages: libKF5WindowSystem5 libKF5WindowSystem5-lang - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== kxmlgui ==== Version update (5.106.0 -> 5.107.0) Subpackages: libKF5XmlGui5 libKF5XmlGui5-lang - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== libKF5ModemManagerQt ==== Version update (5.106.0 -> 5.107.0) - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== libKF5NetworkManagerQt ==== Version update (5.106.0 -> 5.107.0) - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== libapparmor ==== Version update (3.1.4 -> 3.1.5) - update to AppArmor 3.1.5 - fix handling of mount rules in apparmor_parser - minor additions to abstractions/base and snap_browsers - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.5 for the full upstream changelog - remove upstreamed aa-status-fix-json-mr1046.patch - split off apparmor-enable-precompiled-cache.diff from apparmor-enable-profile-cache.diff so that the precompiled cache path doesn't get added in parser.conf for Tumbleweed builds. This prevents a warning about the non-existing directory when loading profiles. ==== libjxl ==== - Build package in correct phase - Use macros for ldconfig ==== libqt5-qtdeclarative ==== Version update (5.15.9+kde25 -> 5.15.9+kde26) - Update to version 5.15.9+kde26: * qml tool: Use QCommandLineParser::process() rather than parse() - Add patch to fix crash on aarch64 (boo#1211628, QTBUG-111935): * 0001-JIT-Add-missing-STORE-LOAD-_ACC-to-CreateCallContext.patch ==== libstorage-ng ==== Version update (4.5.116 -> 4.5.118) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#934 - handle mkfs options also for swap - 4.5.118 - Translated using Weblate (Georgian) (bsc#1149754) - 4.5.117 ==== mozilla-nss ==== Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs mozilla-nss-tools - FIPS: Merge the libfreebl3-hmac and libsoftokn3-hmac packages into the respective libraries. [bsc#1185116] ==== pcsc-lite ==== Version update (1.9.9 -> 2.0.0) Subpackages: libpcsclite1 - Version 2.0.0 * Adjust USB drivers path at run-time via environment variable PCSCLITE_HP_DROPDIR * Add '--disable-polkit' option * Reset eventCounter when a reader is removed * Add "polkit" in "pcscd -v" output if enabled * Doxygen: document SCARD_E_INVALID_VALUE for some functions * use secure_getenv(3) if available * Some other minor improvements ==== plasma-framework ==== Version update (5.106.0 -> 5.107.0) Subpackages: libKF5Plasma5 plasma-framework-components plasma-framework-lang - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== prison-qt5 ==== Version update (5.106.0 -> 5.107.0) Subpackages: libKF5Prison5 prison-qt5-imports - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - Changes since 5.106.0: * Add EAN13 support * Factor out code for interfacing with ZXing for barcode generation ==== publicsuffix ==== Version update (20230426 -> 20230607) - Update to version 20230607: * util: gTLD data autopull updates for 2023-06-07T15:13:30 UTC (#1772) * Add test workflow (#1750) * Update of gov.pl labels (#1752) ==== purpose ==== Version update (5.106.0 -> 5.107.0) Subpackages: libKF5Purpose5 libKF5PurposeWidgets5 purpose-lang - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== python-dbus-python ==== - Add %{?sle15_python_module_pythons} ==== python-gevent ==== - skip test__util.py in s390x arch ==== python-netaddr ==== - Add %{?sle15_python_module_pythons} ==== python-qt5 ==== - Add %{?sle15_python_module_pythons} ==== python-qt5-sip ==== - Add %{?sle15_python_module_pythons} ==== qqc2-desktop-style ==== Version update (5.106.0 -> 5.107.0) - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== samba ==== Version update (4.18.1+git.298.4ccf830b2a4 -> 4.18.3+git.303.c08b73d523c) Subpackages: libsamba-policy0-python3 samba-ad-dc-libs samba-ad-dc-libs-32bit samba-client samba-client-32bit samba-client-libs samba-client-libs-32bit samba-gpupdate samba-ldb-ldap samba-libs samba-libs-32bit samba-libs-python3 samba-python3 samba-winbind samba-winbind-libs samba-winbind-libs-32bit - Update to 4.18.3 * Symlinks to files can have random DOS mode information in a directory listing; (bso#15375). * vfs_fruit might cause a failing open for delete; (bso#15378). * winbind recurses into itself via rpcd_lsad; (bso#15361). * wbinfo -u fails on ad dc with >1000 users; (bso#15366). * DS ACEs might be inherited to unrelated object classes; (bso#15338). * a lot of messages: get_static_share_mode_data: get_static_share_mode_data_fn failed: NT_STATUS_NOT_FOUND; (bso#15362). * aes256 smb3 encryption algorithms are not allowed in smb3_sid_parse(); (bso#15374). * Setting veto files = /.*/ break listing directories; (bso#15360). * "samba-tool domain provision" does not run interactive mode if no arguments are given; (bso#15363). * dsgetdcname: assumes local system uses IPv4; (bso#15325). - Update to 4.18.2 * Log flood: smbd_calculate_access_mask_fsp: Access denied: message level should be lower; (bso#15302). * Floating point exception (FPE) via cli_pull_send at source3/libsmb/clireadwrite.c; (bso#15306). * test_tstream_more_tcp_user_timeout_spin fails intermittently on Rackspace GitLab runners; (bso#15328). * Reduce flapping of ridalloc test; (bso#15329). * large_ldap test is unreliable; (bso#15351). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * mdssvc may crash when initializing; (bso#15354). * large directory optimization broken for non-lcomp path elements; (bso#15313). * streams_depot fails to create streams; (bso#15357). * shadow_copy2 and streams_depot don't play well together; (bso#15358). * Flapping tests in samba_tool_drs_show_repl.py; (bso#15316). * winbindd idmap child contacts the domain controller without a need; (bso#15317). * idmap_autorid may fail to map sids of trusted domains for the first time; (bso#15318). * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings; (bso#15319). * net ads search -P doesn't work against servers in other domains; (bso#15323). * Temporary smbXsrv_tcon_global.tdb can't be parsed; (bso#15353). * Tests use depricated and removed methods like assertRegexpMatches; (bso#15343). ==== solid ==== Version update (5.106.0 -> 5.107.0) Subpackages: libKF5Solid5 libKF5Solid5-lang solid-imports solid-tools - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== sonnet ==== Version update (5.106.0 -> 5.107.0) Subpackages: libKF5SonnetCore5 libKF5SonnetCore5-lang libKF5SonnetUi5 sonnet-imports - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== syndication ==== Version update (5.106.0 -> 5.107.0) - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== syntax-highlighting ==== Version update (5.106.0 -> 5.107.0) Subpackages: libKF5SyntaxHighlighting5 libKF5SyntaxHighlighting5-lang syntax-highlighting-imports - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== systemd ==== Version update (253.4 -> 253.5) Subpackages: libsystemd0 libsystemd0-32bit libudev1 systemd-32bit systemd-container systemd-coredump systemd-lang udev - Import commit 07bb12a282b0ea378850934c4a76008b448b8bad (merge of v253.5) For a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/25aec157888f7aa9a36726962fcbbf2… - Reexecute user managers on package updates. For now we send signal to user instances to trigger their reexecution. It's asynchronous but it shouldn't cause any problem in practice and it's probably safer than triggering reexecution with "systemctl --user -M 1000@ daemon-reexec" command. The latter command creates a new PAM session behind the scene bringing with it the known issue (upstream issue #8598) with "(sd-pam)" helper process when the PAM session is being closed. ==== threadweaver ==== Version update (5.106.0 -> 5.107.0) - Update to 5.107.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.107.0 - No code change since 5.106.0 ==== wireless-regdb ==== Version update (20230503 -> 20230601) - Update to version 20230601: * wireless-regdb: Update regulatory rules for Philippines (PH) ==== xrdb ==== Version update (1.2.1 -> 1.2.2) - Updat to version 1.2.2 * gitlab CI: add a basic build test * gitlab CI: stop requiring Signed-off-by in commits * Variable scope reduction as recommended by cppcheck * Use C99 struct initialization * Rename variable 'dup' to avoid shadowing dup() function * Fallback asprintf: don't truncate output that has a \0 in string * configure: raise minimum autoconf requirement to 2.70 ==== xwayland ==== Version update (23.1.1 -> 23.1.2) - Update to version 23.1.2 * This release includes improved DMA-BUF v4 feedback support for direct scanout, relaxed CVT modes for non-standard modes, fixes for the CHERI/Morello platform and other various fixes. ==== zchunk ==== Version update (1.3.0 -> 1.3.1) - update to 1.3.1: * Fix read off-by-one bug in compressed int function * Handle read-data errors correctly * Ensure memory is freed when zrealloc is called with size 0

1 0

New issue in 15.5 Problem: nothing provides 'libsolv-tools = 0.7.24'
by Larry Len Rainey 13 Jun '23

13 Jun '23

3 2

Asking for a help with what has changed in Leap 15.5
by Lubos Kocman 12 Jun '23

12 Jun '23

subject: Asking for help with what has changed in Leap 15.5 Hello openSUSE! we'd like to ask every single one of you for help with reviewing and updating what has changed in openSUSE Leap 15.5. We have the following page which tracks relatively detailed changes in individual subsystems. https://en.opensuse.org/Features_15.5 If you could find 5 minutes of your time, and review relevant sections for your packages that would be super helpful! We're mostly looking for interesting highlights. If you don't find time before the release, please consider making changes after June 7. This page is often used by magazines who are looking for more details than we share in our release announcement. Thank you The openSUSE Release team

9 11

OpenSSL 3.1.1 and sddm are not compatible
by Rainer Klier 12 Jun '23

12 Jun '23

hi, when i yesterday updated openssl (amongst many other packages) from 3.0.8 to 3.1.1, from tumbleweed repo and after that rebooted i could not login any more using sddm. after hours searching i finally found that there is a sddm log file ~/.local/share/sddm/xorg-session.log in that i found the following: OpenSSL version mismatch. Built against 30000080, you have 30100010 after downgrading openssl back to 3.0.8 using packages from https://download.opensuse.org/history/ it works again. so, please be aware not to upgrade openssl to 3.1.1 -- Best Regards | Freundliche Grüße | Cordialement | Cordiali Saluti | Atenciosamente | Saludos Cordiales *DI Rainer Klier* DevOps, Research & Development

6 8

New Tumbleweed snapshot 20230610 released!
by Dominique Leuenberger 11 Jun '23

11 Jun '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: akonadi-calendar (23.04.1 -> 23.04.2) akonadi-calendar-tools (23.04.1 -> 23.04.2) akonadi-contact (23.04.1 -> 23.04.2) akonadi-import-wizard (23.04.1 -> 23.04.2) akonadi-mime (23.04.1 -> 23.04.2) akonadi-notes (23.04.1 -> 23.04.2) akonadi-search (23.04.1 -> 23.04.2) akonadi-server (23.04.1 -> 23.04.2) akregator (23.04.1 -> 23.04.2) analitza (23.04.1 -> 23.04.2) ark (23.04.1 -> 23.04.2) baloo5-widgets (23.04.1 -> 23.04.2) blinken (23.04.1 -> 23.04.2) calendarsupport (23.04.1 -> 23.04.2) dolphin (23.04.1 -> 23.04.2) eventviews (23.04.1 -> 23.04.2) ffmpegthumbs (23.04.1 -> 23.04.2) filelight (23.04.1 -> 23.04.2) grantleetheme (23.04.1 -> 23.04.2) gwenview5 (23.04.1 -> 23.04.2) ibus-libpinyin (1.15.2 -> 1.15.3) incidenceeditor (23.04.1 -> 23.04.2) kaccounts-integration (23.04.1 -> 23.04.2) kaccounts-providers (23.04.1 -> 23.04.2) kaddressbook (23.04.1 -> 23.04.2) kalgebra (23.04.1 -> 23.04.2) kamera (23.04.1 -> 23.04.2) kanagram (23.04.1 -> 23.04.2) kapptemplate (23.04.1 -> 23.04.2) kate (23.04.1 -> 23.04.2) kbruch (23.04.1 -> 23.04.2) kcachegrind (23.04.1 -> 23.04.2) kcalc (23.04.1 -> 23.04.2) kcalutils (23.04.1 -> 23.04.2) kcharselect (23.04.1 -> 23.04.2) kcolorchooser (23.04.1 -> 23.04.2) kde-print-manager (23.04.1 -> 23.04.2) kdeconnect-kde (23.04.1 -> 23.04.2) kdeedu-data (23.04.1 -> 23.04.2) kdegraphics-thumbnailers (23.04.1 -> 23.04.2) kdenetwork-filesharing (23.04.1 -> 23.04.2) kdepim-addons (23.04.1 -> 23.04.2) kdepim-runtime (23.04.1 -> 23.04.2) kdevelop5 (23.04.1 -> 23.04.2) kdialog (23.04.1 -> 23.04.2) kgeography (23.04.1 -> 23.04.2) khangman (23.04.1 -> 23.04.2) khelpcenter5 (23.04.1 -> 23.04.2) kidentitymanagement (23.04.1 -> 23.04.2) kig (23.04.1 -> 23.04.2) kimap (23.04.1 -> 23.04.2) kio-extras5 (23.04.1 -> 23.04.2) kio_audiocd (23.04.1 -> 23.04.2) kipi-plugins (23.04.1 -> 23.04.2) kiten (23.04.1 -> 23.04.2) kitinerary (23.04.1 -> 23.04.2) kldap (23.04.1 -> 23.04.2) kleopatra (23.04.1 -> 23.04.2) kmag (23.04.1 -> 23.04.2) kmahjongg (23.04.1 -> 23.04.2) kmail (23.04.1 -> 23.04.2) kmail-account-wizard (23.04.1 -> 23.04.2) kmailtransport (23.04.1 -> 23.04.2) kmbox (23.04.1 -> 23.04.2) kmime (23.04.1 -> 23.04.2) kmines (23.04.1 -> 23.04.2) kmousetool (23.04.1 -> 23.04.2) kmplot (23.04.1 -> 23.04.2) knotes (23.04.1 -> 23.04.2) kompare (23.04.1 -> 23.04.2) konsole (23.04.1 -> 23.04.2) kontact (23.04.1 -> 23.04.2) kontactinterface (23.04.1 -> 23.04.2) konversation (23.04.1 -> 23.04.2) korganizer (23.04.1 -> 23.04.2) kpat (23.04.1 -> 23.04.2) kpimtextedit (23.04.1 -> 23.04.2) kpkpass (23.04.1 -> 23.04.2) kqtquickcharts (23.04.1 -> 23.04.2) kreversi (23.04.1 -> 23.04.2) ksanecore (23.04.1 -> 23.04.2) ksmtp (23.04.1 -> 23.04.2) ksudoku (23.04.1 -> 23.04.2) ktnef (23.04.1 -> 23.04.2) ktouch (23.04.1 -> 23.04.2) kwalletmanager5 (23.04.1 -> 23.04.2) kwordquiz (23.04.1 -> 23.04.2) libgravatar (23.04.1 -> 23.04.2) libimobiledevice (1.3.0+git.20210921 -> 1.3.0+179git.20230430) libimobiledevice-glue (0~git.20210925 -> 1.0.0+git3.20230513) libkcddb (23.04.1 -> 23.04.2) libkcompactdisc (23.04.1 -> 23.04.2) libkdcraw (23.04.1 -> 23.04.2) libkdegames (23.04.1 -> 23.04.2) libkdepim (23.04.1 -> 23.04.2) libkeduvocdocument (23.04.1 -> 23.04.2) libkexiv2 (23.04.1 -> 23.04.2) libkgapi (23.04.1 -> 23.04.2) libkipi (23.04.1 -> 23.04.2) libkleo (23.04.1 -> 23.04.2) libkmahjongg (23.04.1 -> 23.04.2) libkomparediff2 (23.04.1 -> 23.04.2) libksane (23.04.1 -> 23.04.2) libksieve (23.04.1 -> 23.04.2) libselinux-bindings libvirt lokalize (23.04.1 -> 23.04.2) mailcommon (23.04.1 -> 23.04.2) mailimporter (23.04.1 -> 23.04.2) mbox-importer (23.04.1 -> 23.04.2) messagelib (23.04.1 -> 23.04.2) mobipocket (23.04.1 -> 23.04.2) mpfr okular (23.04.1 -> 23.04.2) orc (0.4.33 -> 0.4.34) parley (23.04.1 -> 23.04.2) perl (5.36.0 -> 5.36.1) pim-data-exporter (23.04.1 -> 23.04.2) pim-sieve-editor (23.04.1 -> 23.04.2) pimcommon (23.04.1 -> 23.04.2) pinentry pinentry-gui qpdf (11.3.0 -> 11.4.0) signon-kwallet-extension (23.04.1 -> 23.04.2) skanlite (23.04.1 -> 23.04.2) spectacle (23.04.1 -> 23.04.2) step (23.04.1 -> 23.04.2) umbrello (23.04.1 -> 23.04.2) wayland-utils (1.1.0 -> 1.2.0) === Details === ==== akonadi-calendar ==== Version update (23.04.1 -> 23.04.2) Subpackages: akonadi-plugin-calendar kalendarac libKPim5AkonadiCalendar5 libKPim5AkonadiCalendar5-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== akonadi-calendar-tools ==== Version update (23.04.1 -> 23.04.2) Subpackages: akonadi-calendar-tools-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== akonadi-contact ==== Version update (23.04.1 -> 23.04.2) Subpackages: akonadi-contact-lang akonadi-plugin-contacts libKPim5AkonadiContact5 libKPim5ContactEditor5 - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== akonadi-import-wizard ==== Version update (23.04.1 -> 23.04.2) Subpackages: akonadi-import-wizard-lang libKPim5ImportWizard5 - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== akonadi-mime ==== Version update (23.04.1 -> 23.04.2) Subpackages: akonadi-plugin-mime libKPim5AkonadiMime5 libKPim5AkonadiMime5-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== akonadi-notes ==== Version update (23.04.1 -> 23.04.2) Subpackages: libKPim5AkonadiNotes5 libKPim5AkonadiNotes5-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== akonadi-search ==== Version update (23.04.1 -> 23.04.2) Subpackages: akonadi-search-lang libKPim5AkonadiSearch5 - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== akonadi-server ==== Version update (23.04.1 -> 23.04.2) Subpackages: akonadi-server-lang libKPim5AkonadiAgentBase5 libKPim5AkonadiCore5 libKPim5AkonadiPrivate5 libKPim5AkonadiWidgets5 libKPim5AkonadiXml5 - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== akregator ==== Version update (23.04.1 -> 23.04.2) Subpackages: akregator-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== analitza ==== Version update (23.04.1 -> 23.04.2) Subpackages: analitza-lang libAnalitza8 - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== ark ==== Version update (23.04.1 -> 23.04.2) Subpackages: ark-lang libkerfuffle23 - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - Changes since 23.04.1: * lastPathSegment: don't strip slash if it is the only character in the path (kde#469795) ==== baloo5-widgets ==== Version update (23.04.1 -> 23.04.2) Subpackages: baloo5-widgets-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - Changes since 23.04.1: * Allow FileMetata properties on desktop and recentlyused (kde#460117) ==== blinken ==== Version update (23.04.1 -> 23.04.2) Subpackages: blinken-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== calendarsupport ==== Version update (23.04.1 -> 23.04.2) Subpackages: libKPim5CalendarSupport5 libKPim5CalendarSupport5-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== dolphin ==== Version update (23.04.1 -> 23.04.2) Subpackages: dolphin-part dolphin-part-lang dolphin-zsh-completion libdolphinvcs5 - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - Changes since 23.04.1: * Revert "Restrict attaching instances to those on the same activity or same virtual desktop" (kde#408919) ==== eventviews ==== Version update (23.04.1 -> 23.04.2) Subpackages: libKPim5EventViews5 libKPim5EventViews5-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== ffmpegthumbs ==== Version update (23.04.1 -> 23.04.2) - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== filelight ==== Version update (23.04.1 -> 23.04.2) Subpackages: filelight-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== grantleetheme ==== Version update (23.04.1 -> 23.04.2) Subpackages: grantleetheme-lang libKPim5GrantleeTheme5 - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== gwenview5 ==== Version update (23.04.1 -> 23.04.2) Subpackages: gwenview5-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - Changes since 23.04.1: * Fix build with exiv2 >= 0.28 * Fix running wrong application in 'Open with...' menu (kde#469824) ==== ibus-libpinyin ==== Version update (1.15.2 -> 1.15.3) - Update version to 1.15.3 * Fix English mode in Full Pinyin ==== incidenceeditor ==== Version update (23.04.1 -> 23.04.2) Subpackages: libKPim5IncidenceEditor5 libKPim5IncidenceEditor5-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kaccounts-integration ==== Version update (23.04.1 -> 23.04.2) Subpackages: kaccounts-integration-lang libkaccounts2 - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kaccounts-providers ==== Version update (23.04.1 -> 23.04.2) Subpackages: kaccounts-providers-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kaddressbook ==== Version update (23.04.1 -> 23.04.2) Subpackages: kaddressbook-doc kaddressbook-lang libKPim5AddressbookImportExport5 - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kalgebra ==== Version update (23.04.1 -> 23.04.2) Subpackages: kalgebra-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kamera ==== Version update (23.04.1 -> 23.04.2) Subpackages: kamera-lang kio_kamera - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kanagram ==== Version update (23.04.1 -> 23.04.2) Subpackages: kanagram-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kapptemplate ==== Version update (23.04.1 -> 23.04.2) Subpackages: kapptemplate-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kate ==== Version update (23.04.1 -> 23.04.2) Subpackages: kate-lang kate-plugins - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - Changes since 23.04.1: * Fix double drive letters on "Run Current Doc" (kde#469340) ==== kbruch ==== Version update (23.04.1 -> 23.04.2) Subpackages: kbruch-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kcachegrind ==== Version update (23.04.1 -> 23.04.2) Subpackages: kcachegrind-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kcalc ==== Version update (23.04.1 -> 23.04.2) Subpackages: kcalc-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kcalutils ==== Version update (23.04.1 -> 23.04.2) - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kcharselect ==== Version update (23.04.1 -> 23.04.2) Subpackages: kcharselect-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kcolorchooser ==== Version update (23.04.1 -> 23.04.2) Subpackages: kcolorchooser-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kde-print-manager ==== Version update (23.04.1 -> 23.04.2) Subpackages: kde-print-manager-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kdeconnect-kde ==== Version update (23.04.1 -> 23.04.2) Subpackages: kdeconnect-kde-lang kdeconnect-kde-zsh-completion - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kdeedu-data ==== Version update (23.04.1 -> 23.04.2) - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kdegraphics-thumbnailers ==== Version update (23.04.1 -> 23.04.2) - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kdenetwork-filesharing ==== Version update (23.04.1 -> 23.04.2) Subpackages: kdenetwork-filesharing-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kdepim-addons ==== Version update (23.04.1 -> 23.04.2) Subpackages: kdepim-addons-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kdepim-runtime ==== Version update (23.04.1 -> 23.04.2) Subpackages: kdepim-runtime-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - Changes since 23.04.1: * Implement retrieveItems(Item::List) for googleresource (kde#448106) ==== kdevelop5 ==== Version update (23.04.1 -> 23.04.2) Subpackages: kdevelop5-lang kdevplatform kdevplatform-lang libkdevplatform511 - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kdialog ==== Version update (23.04.1 -> 23.04.2) Subpackages: kdialog-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kgeography ==== Version update (23.04.1 -> 23.04.2) Subpackages: kgeography-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== khangman ==== Version update (23.04.1 -> 23.04.2) Subpackages: khangman-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== khelpcenter5 ==== Version update (23.04.1 -> 23.04.2) Subpackages: khelpcenter5-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kidentitymanagement ==== Version update (23.04.1 -> 23.04.2) Subpackages: kidentitymanagement-lang libKPim5IdentityManagement5 libKPim5IdentityManagementWidgets5 - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kig ==== Version update (23.04.1 -> 23.04.2) Subpackages: kig-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - Changes since 23.04.1: * Fix loading kig part (kde#469962) ==== kimap ==== Version update (23.04.1 -> 23.04.2) Subpackages: libKPim5IMAP5 libKPim5IMAP5-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kio-extras5 ==== Version update (23.04.1 -> 23.04.2) Subpackages: kio-extras5-lang libkioarchive5 - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kio_audiocd ==== Version update (23.04.1 -> 23.04.2) Subpackages: kio_audiocd-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kipi-plugins ==== Version update (23.04.1 -> 23.04.2) Subpackages: kipi-plugins-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kiten ==== Version update (23.04.1 -> 23.04.2) Subpackages: fonts-KanjiStrokeOrders kiten-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kitinerary ==== Version update (23.04.1 -> 23.04.2) Subpackages: libKPim5Itinerary5 libKPim5Itinerary5-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - Too many changes to list here. ==== kldap ==== Version update (23.04.1 -> 23.04.2) Subpackages: kldap-lang libKPim5Ldap5 - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kleopatra ==== Version update (23.04.1 -> 23.04.2) Subpackages: kleopatra-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - Changes since 23.04.1: * Set OrganizationDomain before registering the DBus service ==== kmag ==== Version update (23.04.1 -> 23.04.2) Subpackages: kmag-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kmahjongg ==== Version update (23.04.1 -> 23.04.2) Subpackages: kmahjongg-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kmail ==== Version update (23.04.1 -> 23.04.2) Subpackages: kmail-application-icons kmail-lang ktnef - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - Changes since 23.04.1: * Fix display email when we have < ... > ==== kmail-account-wizard ==== Version update (23.04.1 -> 23.04.2) Subpackages: kmail-account-wizard-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kmailtransport ==== Version update (23.04.1 -> 23.04.2) Subpackages: kmailtransport-lang libKPim5MailTransport5 libKPim5MailTransportAkonadi5 - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kmbox ==== Version update (23.04.1 -> 23.04.2) - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kmime ==== Version update (23.04.1 -> 23.04.2) Subpackages: libKPim5Mime5 libKPim5Mime5-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kmines ==== Version update (23.04.1 -> 23.04.2) Subpackages: kmines-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kmousetool ==== Version update (23.04.1 -> 23.04.2) Subpackages: kmousetool-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kmplot ==== Version update (23.04.1 -> 23.04.2) Subpackages: kmplot-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== knotes ==== Version update (23.04.1 -> 23.04.2) Subpackages: knotes-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kompare ==== Version update (23.04.1 -> 23.04.2) Subpackages: kompare-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== konsole ==== Version update (23.04.1 -> 23.04.2) Subpackages: konsole-part konsole-part-lang konsole-zsh-completion - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - Changes since 23.04.1: * Adjust selection point coords when scrollback shrinks (kde#470346) * Add tests to check fix of invalid parent in profile * Do not allow an invalid parent to be set in profiles (kde#467790) ==== kontact ==== Version update (23.04.1 -> 23.04.2) Subpackages: kontact-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kontactinterface ==== Version update (23.04.1 -> 23.04.2) Subpackages: libKPim5KontactInterface5 libKPim5KontactInterface5-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== konversation ==== Version update (23.04.1 -> 23.04.2) Subpackages: konversation-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== korganizer ==== Version update (23.04.1 -> 23.04.2) Subpackages: korganizer-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kpat ==== Version update (23.04.1 -> 23.04.2) Subpackages: kpat-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kpimtextedit ==== Version update (23.04.1 -> 23.04.2) Subpackages: libKPim5TextEdit5 libKPim5TextEdit5-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kpkpass ==== Version update (23.04.1 -> 23.04.2) - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kqtquickcharts ==== Version update (23.04.1 -> 23.04.2) - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kreversi ==== Version update (23.04.1 -> 23.04.2) Subpackages: kreversi-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== ksanecore ==== Version update (23.04.1 -> 23.04.2) Subpackages: ksanecore-lang libKSaneCore1 - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - Changes since 23.04.1: * Also call renewImage() for 8-bit Gray images (kde#469683) * Crop the image after a scan finished (kde#457097) ==== ksmtp ==== Version update (23.04.1 -> 23.04.2) Subpackages: libKPim5SMTP5 libKPim5SMTP5-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== ksudoku ==== Version update (23.04.1 -> 23.04.2) Subpackages: ksudoku-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== ktnef ==== Version update (23.04.1 -> 23.04.2) Subpackages: libKPim5Tnef5 libKPim5Tnef5-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== ktouch ==== Version update (23.04.1 -> 23.04.2) Subpackages: ktouch-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kwalletmanager5 ==== Version update (23.04.1 -> 23.04.2) Subpackages: kwalletmanager5-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== kwordquiz ==== Version update (23.04.1 -> 23.04.2) Subpackages: kwordquiz-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== libgravatar ==== Version update (23.04.1 -> 23.04.2) Subpackages: libKPim5Gravatar5 libKPim5Gravatar5-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== libimobiledevice ==== Version update (1.3.0+git.20210921 -> 1.3.0+179git.20230430) - Update to version 1.3.0+179git.20230430: * Updated to use latest libplist API changes * installation_proxy: Handle BundleIDs in instproxy_client_options_add * idevice: Fix connections to <= iOS 5 devices with OpenSSL 3 * idevicebackup2: Fix missing break in switch case statement * tools/ideviceimagemounter: Notify user of missing Developer Mode on iOS 16+ * tools: Add idevicedevmodectl tool * lockdown: Fix error parsing for older iOS versions * Support OpenSSL built without OPENSSL_ENGINE * idevicedebugserverproxy: Add support for 'qLaunchGDBServer' command of lldb * idevice: Fix OpenSSL 3.0 internal error on read timeout * tools: Fix idevicebackup2 option parsing for --password option * idevicebackup2: Fix option parsing * instproxy: Use synchronous mode when callbacks are NULL, as documented * Add new idevice_events_subscribe/unsubscribe API with context * Initial commit of working packet logger (idevicebtlogger) * ideviceinfo: Make sure all error messages go to stderr * tools: Use getopt for option parsing in all tools * idevice: Fix mistreatment of 0-byte sent cases * idevicebackup2: Allow passing backup password via environment variable * idevicedebug: Add 'kill' command to kill a (debuggable) app by bundle ID * Handle connection failures in debugserver_client_receive_response; also simplify the code * Add timeout and interrupt handling to debugserver. Fix debugserver_client_handle_response * idevicedebug: Process "Wxx" response as "exited with code xx" * idevicecrashreport: Allow filtering crash reports by filename * idevicedebugserverproxy: Allow binding to any available port * idevicedebug: Gracefully fail on invalid bundle IDs * tools: Correct misspelled directionary -> dictionary in function name * diagnostics_relay: Check for errors after sending requests to service connection * Add support for wireless pairing * tools: Print meaningful error messages when service startup fails * Add Reverse Proxy implementation ==== libimobiledevice-glue ==== Version update (0~git.20210925 -> 1.0.0+git3.20230513) - Update to version 1.0.0+git3.20230513: * Set minimum required libplist version to 2.3.0 * Remove plist-related code in favor of new libplist API * termcolors: Rename COLOR_* macros to FG_* due to conflict with ncurses * Updated README with pkg-config requirement * utils: Use libplist's plist_from_memory instead of duplicating format detection * Add support for Apple's OPACK encoding and TLV format * utils: Fix bad malloc result check in buffer_read_from_filename and test arguments for NULL ==== libkcddb ==== Version update (23.04.1 -> 23.04.2) Subpackages: libKF5Cddb5 libkcddb-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== libkcompactdisc ==== Version update (23.04.1 -> 23.04.2) Subpackages: libKF5CompactDisc5 libkcompactdisc-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== libkdcraw ==== Version update (23.04.1 -> 23.04.2) - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== libkdegames ==== Version update (23.04.1 -> 23.04.2) Subpackages: kdegames-carddecks-default libKF5KDEGames7 libkdegames-lang libkdegames-qt5-imports - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== libkdepim ==== Version update (23.04.1 -> 23.04.2) Subpackages: libKPim5Libkdepim5 libkdepim-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== libkeduvocdocument ==== Version update (23.04.1 -> 23.04.2) Subpackages: libKEduVocDocument5 libkeduvocdocument-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== libkexiv2 ==== Version update (23.04.1 -> 23.04.2) - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - Changes since 23.04.1: * Fix build with exiv2 >= 0.28 ==== libkgapi ==== Version update (23.04.1 -> 23.04.2) Subpackages: libKPim5GAPICalendar5 libKPim5GAPICore5 libKPim5GAPIPeople5 libKPim5GAPITasks5 libkgapi-lang sasl2-kdexoauth2 - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== libkipi ==== Version update (23.04.1 -> 23.04.2) Subpackages: libKF5Kipi32_0_0 libkipi-data - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== libkleo ==== Version update (23.04.1 -> 23.04.2) Subpackages: libKPim5libkleo5 libkleo-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== libkmahjongg ==== Version update (23.04.1 -> 23.04.2) Subpackages: libKF5KMahjongglib5 libkmahjongg-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== libkomparediff2 ==== Version update (23.04.1 -> 23.04.2) Subpackages: libkomparediff2-5 libkomparediff2-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== libksane ==== Version update (23.04.1 -> 23.04.2) Subpackages: libKF5Sane5 libksane-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== libksieve ==== Version update (23.04.1 -> 23.04.2) Subpackages: libksieve-lang libksieve5 - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== libselinux-bindings ==== - allow building this with different python versions, to make this usable for the new sle15 macro (using python3.11) ==== libvirt ==== Subpackages: libvirt-client libvirt-daemon-common libvirt-daemon-config-network libvirt-daemon-driver-interface libvirt-daemon-driver-libxl libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-lock libvirt-daemon-log libvirt-daemon-plugin-lockd libvirt-daemon-proxy libvirt-daemon-qemu libvirt-daemon-xen libvirt-libs - apparmor: Add support for local profile customizations spec: Replace /etc/apparmor.d/<libvirt-profile> on package upgrade bsc#1211472 - supportconfig: Modular daemon improvements ==== lokalize ==== Version update (23.04.1 -> 23.04.2) Subpackages: lokalize-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== mailcommon ==== Version update (23.04.1 -> 23.04.2) Subpackages: libKPim5MailCommon5 mailcommon-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== mailimporter ==== Version update (23.04.1 -> 23.04.2) Subpackages: libKPim5MailImporter5 libKPim5MailImporterAkonadi5 mailimporter-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== mbox-importer ==== Version update (23.04.1 -> 23.04.2) Subpackages: mbox-importer-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== messagelib ==== Version update (23.04.1 -> 23.04.2) Subpackages: messagelib-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - Changes since 23.04.1: * Use QuoteHtmlChars * Fix email comparison (some email are written "<foo(a)kde.org>" * convert quote as html otherwise we can't see info * Remove unused includes * Fix typo * Fix crash when switching signed/encrypted emails very fast (kde#463083) * Align descript message and lock icon * Debug-- * Const'ify variable. Initialize variable * Add more autotests ==== mobipocket ==== Version update (23.04.1 -> 23.04.2) - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== mpfr ==== - Update mpfr-4.2.0-cummulative.patch, adds patches fixing the following bugs * the mpfr_reldiff function, which computes |b-c|/b, is buggy on special values, e.g. on the following (b,c) values: (+Inf,+Inf) gives Â±0 instead of NaN (like NaN/Inf); (+0,+0) gives 1 instead of NaN (like 0/0); (+0,1) gives 1 instead of Inf (like 1/0). Moreover, the sign of 0 for (+Inf,+Inf) or (-Inf,-Inf) is not set, i.e. it is just the sign of the destination before the call; as a consequence, results are not even consistent. * the reuse tests are incomplete: the sign of a result zero is not checked, so that it can miss bugs (one of the mpfr_reldiff bugs mentioned above, in particular). * the general code for the power function (mpfr_pow_general internal function) has two bugs in particular cases: the first one is an incorrect computation of the error bound when there has been an intermediate underflow or overflow (in such a case, the computation is performed again with a rescaling, thus with an additional error term, but there is a bug in the computation of this term), so that the result may be rounded incorrectly (in particular, a spurious overflow is possible); the second one occurs in a corner case (destination precision 1, rounding to nearest, and where the rounded result assuming an unbounded exponent range would be 2emin-2 and the exact result is larger than this value), with the only consequence being a missing underflow exception (the underflow flag is not set). * the mpfr_compound_si function can take a huge amount of memory and time in some cases (when the argument x is a large even integer and xn is represented exactly in the target precision) and does not correctly detect overflows and underflows * MPFR can crash when a formatted output function is called with %.2147483648Rg in the format string. ==== okular ==== Version update (23.04.1 -> 23.04.2) Subpackages: okular-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - Changes since 23.04.1: * Bump c++ standard version. Poppler is about to use c++17 types in the api, so better be prepared ==== orc ==== Version update (0.4.33 -> 0.4.34) - Update to version 0.4.34 + Thread-safety improvements around orc codemem allocation/freeing + Add orc_parse_code() with more detailed error reporting + Implement Orc function lazy initialization correctly via atomic operations + orc program parser fixes and improvements + build fixes and compiler warning fixes + coverity and clang scan-build static code analysis fixes + meson: Do not always generate static library for test library + ci improvements ==== parley ==== Version update (23.04.1 -> 23.04.2) Subpackages: parley-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== perl ==== Version update (5.36.0 -> 5.36.1) Subpackages: perl-base perl-doc - update to perl 5.36.1 - maintenance release * Module::CoreList has been upgraded from version 5.20220520 to 5.20230423. * Fixed: An eval() as the last statement in a regex code block could trigger an interpreter panic * An eval EXPR referring to a lexical sub defined in grandparent scope no longer produces an assertion failures. * Writing to a magic variables associated with the selected output handle, $^, $~, $=, $- and $%, no longer crashes perl if the IO object has been cleared from the selected output handle. ==== pim-data-exporter ==== Version update (23.04.1 -> 23.04.2) Subpackages: pim-data-exporter-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== pim-sieve-editor ==== Version update (23.04.1 -> 23.04.2) Subpackages: pim-sieve-editor-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== pimcommon ==== Version update (23.04.1 -> 23.04.2) Subpackages: libKF5PimCommon5 libKF5PimCommonAkonadi5 - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== pinentry ==== - Update signature file and keyring with latest ones from download site, they were updated by another approved upstream maintainer. ==== pinentry-gui ==== Subpackages: pinentry-gnome3 pinentry-gtk2 pinentry-qt5 - Update signature file and keyring with latest ones from download site, they were updated by another approved upstream maintainer. ==== qpdf ==== Version update (11.3.0 -> 11.4.0) - version update to 11.4.0 CLI Enhancements * The --optimize-images option now optimizes images inside of form XObjects. Library Enhancements * Allow QPDFJobâs workflow to be split into a reading phase and a writing phase to allow the caller to operate on the QPDF object before it is written. This adds methods QPDFJob::createQPDF and QPDFJob::writeQPDF and corresponding C API functions qpdfjob_create_qpdf and qpdfjob_write_qpdf. * Add QPDF::newReserved as a better alternative to QPDFObjectHandle::newReserved. * If you add an uninitialized QPDFObjectHandle to an array, qpdf will throw a logic_error. It has always been invalid to do this, but before, it wouldnât have been caught until later. Bug fixes * Ignore an annotationâs appearance state when the annotation only has one appearance. This prevents qpdfâs annotation flattening logic from throwing away appearances of annotations whose annotation state is set incorrectly, as has been seen in some PDF files. ==== signon-kwallet-extension ==== Version update (23.04.1 -> 23.04.2) - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== skanlite ==== Version update (23.04.1 -> 23.04.2) Subpackages: skanlite-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== spectacle ==== Version update (23.04.1 -> 23.04.2) Subpackages: spectacle-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - Changes since 23.04.1: * Fix the capture option panel width for some languages ==== step ==== Version update (23.04.1 -> 23.04.2) Subpackages: step-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== umbrello ==== Version update (23.04.1 -> 23.04.2) Subpackages: umbrello-lang - Update to 23.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.2/ - No code change since 23.04.1 ==== wayland-utils ==== Version update (1.1.0 -> 1.2.0) - Update to release 1.2.0 * Support for the drm-lease-v1 protocol. * Improved linux_dmabuf v4 report now prints the DRM device paths. * Restored support for older versions (< 3) of linux_dmabuf. * New command line option to restrict queries to specific interfaces.

1 0

Re: tumbleweed snapshot download. is it mandatory?
by xtexchooser＠duck.com 10 Jun '23

10 Jun '23

I think yes Sent via t.me/gmailbot 2023-06-10 13:53 (GMT+00:00), vani jindam via openSUSE Factory <factory_at_lists.opensuse.org_xtexchooser(a)duck.com> said: > I am on tumbleweed. I regularly use # zypper update. > But today when i tried zypper update, it > suggested zypper dup. > Even i regularly do zypper up, i still > need to zypper dup for every release of snapshot? > Regards, > jindam >

1 0

New Tumbleweed snapshot 20230608 released!
by Dominique Leuenberger 10 Jun '23

10 Jun '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: apparmor gtk4 (4.10.3 -> 4.10.4) kdump (1.0.2+git50.g4b01402 -> 1.0.3) libapparmor libnettle (3.9 -> 3.9.1) libp11 mozilla-nss (3.89 -> 3.89.1) postfix (3.8.0 -> 3.8.1) python-scour python-setuptools (67.7.2 -> 67.8.0) spice (0.15.1 -> 0.15.2) sushi (43.0 -> 44.2) vte (0.72.1 -> 0.72.2) xmlstarlet yast2-storage-ng (4.6.10 -> 4.6.11) === Details === ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-docs apparmor-parser apparmor-parser-lang apparmor-profiles apparmor-utils apparmor-utils-lang python3-apparmor - fix aa-status --json output (aa-status-fix-json-mr1046.patch, boo#1211980#c12) ==== gtk4 ==== Version update (4.10.3 -> 4.10.4) Subpackages: gtk4-lang gtk4-schema gtk4-tools libgtk-4-1 typelib-1_0-Gtk-4_0 - Update to version 4.10.4: + GtkFileChooser: Fix some memory leaks + GtkUriLauncher: Validate the uri + GtkStack: Fix a crash + GtkGridView: Respect css border-spacing + GtkScrolledWindow: Propagate child measure size whenever possible + GtkPopoverMenu: Avoid unnecessary left padding + GtkSearchEntry: Improve size allocation for the clear icon + X11: - Avoid black flickering with xwayland window decorations - Trap XRandr errors + CSS: Various fixes to transitions + Updated translations. - Drop patches fixed upstream: + fix-gridview.patch + gtk4-correctly-refresh-after-delete.patch + 966a2350.patch ==== kdump ==== Version update (1.0.2+git50.g4b01402 -> 1.0.3) - bumped version update to v1.0.3 - Honor the KDUMP_VERBOSE setting in kdump-save - fix distro prefix for ALP - add calibrate values for ALP (copied from TW) ==== libapparmor ==== - fix aa-status --json output (aa-status-fix-json-mr1046.patch, boo#1211980#c12) ==== libnettle ==== Version update (3.9 -> 3.9.1) Subpackages: libhogweed6 libhogweed6-32bit libnettle8 libnettle8-32bit - Include the nettle library manual in HTML and PDF formats in the devel package. - update to 3.9.1: [bsc#1212112] * Fix bug in the new OCB code may be exploitable for denial of service or worse due to memory corruption ==== libp11 ==== - Add support for openSSL 3.1: + Add libp11-openssl-3.1.patch: handle openSSL 3.1 the same as 3.0 + Add libtool BuildRequires and call autoreconf: abobe patch touches the build system. + Add baselibs.conf ==== mozilla-nss ==== Version update (3.89 -> 3.89.1) Subpackages: libfreebl3 libfreebl3-hmac libsoftokn3 libsoftokn3-hmac mozilla-nss-certs mozilla-nss-tools - update to NSS 3.89.1 * bmo#1804505 - Update the technical constraints for KamuSM. * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates. ==== postfix ==== Version update (3.8.0 -> 3.8.1) - update to 3.8.1 * Optional: harden a Postfix SMTP server against remote SMTP clients that violate RFC 2920 (or 5321) command pipelining constraints. With "smtpd_forbid_unauth_pipelining = yes", the server disconnects a client immediately, after responding with "554 5.5.0 Error: SMTP protocol synchronization" and after logging "improper command pipelining" with the unexpected remote SMTP client input. This feature is disabled by default in Postfix 3.5-3.8 to avoid breaking home-grown utilities, but it is enabled by default in Postfix 3.9. A similar feature is enabled by default in the Exim SMTP server. * Optional: some OS distributions crank up TLS security to 11, and in doing so increase the number of plaintext email deliveries. This introduces basic OpenSSL configuration file support that may be used to override OS-level settings. Details are in the postconf(5) manpage under tls_config_file and tls_config_name. * Bugfix (defect introduced: Postfix 1.0): the command "postconf .. name=v1 .. name=v2 .." (multiple instances of the same parameter name) created multiple main.cf name=value entries with the same parameter name. It now logs a warning and skips the earlier name(s) and value(s). Found during code maintenance. * Bugfix (defect introduced: Postfix 3.3): the command "postconf - M name1/type1='name2 type2 ...'" died with a segmentation violation when the request matched multiple master.cf entries. The master.cf file was not damaged. Problem reported by SATOH Fumiyasu. * Bugfix (defect introduced: Postfix 2.11): the command "postconf - M name1/type1='name2 type2 ...'" could add a service definition to master.cf that conflicted with an already existing service definition. It now replaces all existing service definitions that match the service pattern 'name1/type1' or the service name and type in 'name2 type2 ...' with a single service definition 'name2 type2 ...'. Problem reported by SATOH Fumiyasu. * Bugfix (defect introduced: Postfix 3.8) the posttls-finger command could access uninitialized memory when reconnecting. This also fixes a malformed warning message when a destination contains ":service" information. Reported by Thomas Korbar. * Bugfix (defect introduced: Postfix 3.2): the MySQL client could return "not found" instead of "error" (for example, resulting in a 5XX SMTP status instead of 4XX) during the time that all MySQL server connections were turned down after error. Found during code maintenance. File: global/dict_mysql.c. This was already fixed in Postfix 3.4-3.7. ==== python-scour ==== - drop python 2 support, do not require six - added patches https://github.com/scour-project/scour/pull/306 + python-scour-no-python2.patch ==== python-setuptools ==== Version update (67.7.2 -> 67.8.0) - Update to 67.8.0: * #3128: In deprecated easy_install, reload and merge the pth file before saving. * #3915: Adequate tests to the latest changes in virtualenv for Python 3.12. ==== spice ==== Version update (0.15.1 -> 0.15.2) - Update to v0.15.2 release * This is a bug fix release with no upstream changelog ==== sushi ==== Version update (43.0 -> 44.2) Subpackages: sushi-lang - Update to version 44.2: + Fix loading certain documents in evince. + Updated translations. ==== vte ==== Version update (0.72.1 -> 0.72.2) Subpackages: libvte-2_91-0 typelib-1_0-Vte-2_91 vte-lang - Update to version 0.72.2: * emulation: Fix infinite loop on non-number OSC 104 param * widget: Don't consume right clicks on gtk4 - Drop 24547fb3.patch: Fixed upstream. ==== xmlstarlet ==== - Modernise spec file - Remove unused rpmlintrc filter ==== yast2-storage-ng ==== Version update (4.6.10 -> 4.6.11) - Prevent setting the volume label for a mounted btrfs or swap (bsc#1211337) - 4.6.11

1 0

New Tumbleweed snapshot 20230607 released!
by Dominique Leuenberger 09 Jun '23

09 Jun '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: busybox (1.36.0 -> 1.36.1) evolution (3.48.2 -> 3.48.3) evolution-data-server (3.48.2 -> 3.48.3) git (2.40.1 -> 2.41.0) gnome-shell (44.1 -> 44.2) gtk4 kernel-firmware (20230517 -> 20230531) kernel-source (6.3.4 -> 6.3.6) libXpresent libstorage-ng (4.5.115 -> 4.5.116) libzypp (17.31.11 -> 17.31.12) live555 (2023.01.19 -> 2023.05.10) llvm16 (16.0.4 -> 16.0.5) m17n-db (1.8.0 -> 1.8.2) mariadb mutter (44.1+2 -> 44.2) openssh (8.9p1 -> 9.3p1) openssh-askpass-gnome (8.9p1 -> 9.3p1) permissions (1699_20230516 -> 1699_20230602) polkit-default-privs (1550+20230517.ab68b2d -> 1550+20230606.5001571) qt6-base rubygem-ruby-dbus (0.22.1 -> 0.23.0.beta1) shim-leap suse-module-tools (16.0.30 -> 16.0.31) systemd-presets-branding-openSUSE yast2-trans (84.87.20230516.e4ba802a -> 84.87.20230602.240a95214f) === Details === ==== busybox ==== Version update (1.36.0 -> 1.36.1) Subpackages: busybox-static - update to 1.36.1: * fixes for line editing, detection of hardware sha1/sha256 support, unzip (do not create suid/sgid files unless -K), shell (printf and sleep with no args, handing of SIGINT in sleep), ed. ==== evolution ==== Version update (3.48.2 -> 3.48.3) Subpackages: evolution-lang evolution-plugin-spamassassin - Update to version 3.48.3: + Bugs fixed: - EShellSearchbar: Cannot clear search by deleting text. - Mail: . Preview content sometimes grows indefinitely. . Workaround recursion in iframe height computation. - Composer: Use 'Wrap quoted text in replies' option also for text/html parts. ==== evolution-data-server ==== Version update (3.48.2 -> 3.48.3) Subpackages: evolution-data-server-lang libcamel-1_2-64 libebackend-1_2-11 libebook-1_2-21 libebook-contacts-1_2-4 libecal-2_0-2 libedata-book-1_2-27 libedata-cal-2_0-2 libedataserver-1_2-27 libedataserverui-1_2-4 - Update to version 3.48.3: + Bug Fixed: EWebDAVSession: Claim also error nodes from propstat response. ==== git ==== Version update (2.40.1 -> 2.41.0) Subpackages: git-core git-email git-gui git-svn git-web gitk perl-Git - git 2.41.0: This update contains a number of compatible updates, improvements and extensions to multiple workflows. Some changes may break backwards compatibility: * The libsecret credential helper obsoletes direct GNOME keyring support, which was dropped (git-credential-gnome-keyring) * "git format-patch" has been taught to ignore end-user configuration ("diff.noprefix") and always use the standard prefixes, to avoid breaking the receiving end of the patch - drop sha256_clone_fix.patch ==== gnome-shell ==== Version update (44.1 -> 44.2) Subpackages: gnome-extensions gnome-shell-calendar gnome-shell-lang - Update to version 44.2: + Improve built-in screen recorder + Use user-defined names in bluetooth menu + Fix stuck authentication dialog in remote sessions + Fix glitches in calendar when using large-text option + Fix IM popup getting stuck on engine changes + Fixed crash + Misc. bug fixes and cleanups + Updated translations. ==== gtk4 ==== Subpackages: gtk4-lang gtk4-schema gtk4-tools libgtk-4-1 typelib-1_0-Gtk-4_0 - Add fix-gridview.patch: Add border-spacing where it was missed. We were computing column widths without taking border-spacing into account, making them slightly too big (glgo#GNOME/nautilus#2980). ==== kernel-firmware ==== Version update (20230517 -> 20230531) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update to version 20230531 (git commit 9d4c9a52c237): * qcom: apq8016: add Dragonboard 410c WiFi and modem firmware * cirrus: Add firmware for new Asus ROG Laptops * brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt * amdgpu: Update GC 11.0.1 and 11.0.4 * rtw89: 8851b: add firmware v0.29.41.0 * amdgpu: update yellow carp firmware for amd.5.5 release * amdgpu: update navi14 firmware for amd.5.5 release * amdgpu: update navi12 firmware for amd.5.5 release * amdgpu: update vega20 firmware for amd.5.5 release * amdgpu: update vega12 firmware for amd.5.5 release * amdgpu: update navi10 firmware for amd.5.5 release * amdgpu: update vega10 firmware for amd.5.5 release * amdgpu: update PSP 13.0.11 firmware for amd.5.5 release * amdgpu: update GC 11.0.4 firmware for amd.5.5 release * amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release * amdgpu: update PSP 13.0.4 firmware for amd.5.5 release * amdgpu: update GC 11.0.1 firmware for amd.5.5 release * amdgpu: update 13.0.8 firmware for amd.5.5 release * amdgpu: update GC 10.3.7 firmware for amd.5.5 release * amdgpu: update vangogh firmware for amd.5.5 release * amdgpu: update VCN 4.0.4 firmware for amd.5.5 release * amdgpu: update SMU 13.0.7 firmware for amd.5.5 release * amdgpu: update PSP 13.0.7 firmware for amd.5.5 release * amdgpu: update GC 11.0.2 firmware for amd.5.5 release * amdgpu: update renoir firmware for amd.5.5 release * amdgpu: update VCN 4.0.0 firmware for amd.5.5 release * amdgpu: update SMU 13.0.0 firmware for amd.5.5 release * amdgpu: update PSP 13.0.0 firmware for amd.5.5 release * amdgpu: update GC 11.0.0 firmware for amd.5.5 release * amdgpu: update green sardine firmware for amd.5.5 release * amdgpu: update beige goby firmware for amd.5.5 release * amdgpu: update dimgrey cavefish firmware for amd.5.5 release * amdgpu: update arcturus firmware for amd.5.5 release * amdgpu: update vcn 3.1.2 firmware for amd.5.5 release * amdgpu: update psp 13.0.5 firmware for amd.5.5 release * amdgpu: update GC 10.3.6 firmware for amd.5.5 release * amdgpu: update navy flounder firmware for amd.5.5 release * amdgpu: update sienna cichlid firmware for amd.5.5 release * amdgpu: update aldebaran firmware for amd.5.5 release * amdgpu: DMCUB updates for various AMDGPU asics * ice: update ice DDP comms package to 1.3.40.0 * cxgb4: Update firmware to revision 1.27.3.0 - Fix the broken symlink targets for cirrus firmware: cirrus-WHENCE-link-fixes.patch - Clean up spec template to match with the actual output ==== kernel-source ==== Version update (6.3.4 -> 6.3.6) - Linux 6.3.6 (bsc#1012628). - netfilter: ctnetlink: Support offloaded conntrack entry deletion (bsc#1012628). - cpufreq: amd-pstate: Add ->fast_switch() callback (bsc#1012628). - cpufreq: amd-pstate: Update policy->cur in amd_pstate_adjust_perf() (bsc#1012628). - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (bsc#1012628). - net: phy: mscc: enable VSC8501/2 RGMII RX clock (bsc#1012628). - cpufreq: amd-pstate: Remove fast_switch_possible flag from active driver (bsc#1012628). - vfio/type1: check pfn valid before converting to struct page (bsc#1012628). - blk-mq: fix race condition in active queue accounting (bsc#1012628). - blk-wbt: fix that wbt can't be disabled by default (bsc#1012628). - bpf, sockmap: Incorrectly handling copied_seq (bsc#1012628). - bpf, sockmap: Wake up polling after data copy (bsc#1012628). - bpf, sockmap: TCP data stall on recv before accept (bsc#1012628). - bpf, sockmap: Handle fin correctly (bsc#1012628). - bpf, sockmap: Improved check for empty queue (bsc#1012628). - bpf, sockmap: Reschedule is now done through backlog (bsc#1012628). - bpf, sockmap: Convert schedule_work into delayed_work (bsc#1012628). - bpf, sockmap: Pass skb ownership through read_skb (bsc#1012628). - gpio-f7188x: fix chip name and pin count on Nuvoton chip (bsc#1012628). - net/mlx5: E-switch, Devcom, sync devcom events and devcom comp register (bsc#1012628). - Revert "net/mlx5: Expose vnic diagnostic counters for eswitch managed vports" (bsc#1012628). - Revert "net/mlx5: Expose steering dropped packets counter" (bsc#1012628). - net/mlx5e: TC, Fix using eswitch mapping in nic mode (bsc#1012628). - drm/i915: Fix PIPEDMC disabling for a bigjoiner configuration (bsc#1012628). - drm/i915: Disable DPLLs before disconnecting the TC PHY (bsc#1012628). - drm/i915: Move shared DPLL disabling into CRTC disable hook (bsc#1012628). - ASoC: Intel: avs: Fix module lookup (bsc#1012628). - cxl/port: Fix NULL pointer access in devm_cxl_add_port() (bsc#1012628). - net: fec: add dma_wmb to ensure correct descriptor values (bsc#1012628). - tls: rx: strp: don't use GFP_KERNEL in softirq context (bsc#1012628). - tls: rx: strp: preserve decryption status of skbs when needed (bsc#1012628). - tls: rx: strp: factor out copying skb data (bsc#1012628). - tls: rx: strp: force mixed decrypted records into copy mode (bsc#1012628). - tls: rx: strp: fix determining record length in copy mode (bsc#1012628). - tls: rx: strp: set the skb->len of detached / CoW'ed skbs (bsc#1012628). - tls: rx: device: fix checking decryption status (bsc#1012628). - gpiolib: fix allocation of mixed dynamic/static GPIOs (bsc#1012628). - bpf: netdev: init the offload table earlier (bsc#1012628). - platform/x86/amd/pmf: Fix CnQF and auto-mode after resume (bsc#1012628). - power: supply: rt9467: Fix passing zero to 'dev_err_probe' (bsc#1012628). - selftests/bpf: Fix pkg-config call building sign-file (bsc#1012628). - ARM: dts: imx6ull-dhcor: Set and limit the mode for PMIC buck 1, 2 and 3 (bsc#1012628). - coresight: perf: Release Coresight path when alloc trace id failed (bsc#1012628). - spi: spi-geni-qcom: Select FIFO mode for chip select (bsc#1012628). - firmware: arm_ffa: Fix usage of partition info get count flag (bsc#1012628). - firmware: arm_scmi: Fix incorrect alloc_workqueue() invocation (bsc#1012628). - commit f583ba4 - drm/amd/display: Only wait for blank completion if OTG active (https://gitlab.freedesktop.org/drm/amd/-/issues/2447) - commit fc379fb - Revert "Remove usrmerge compatibility symlink in buildroot (boo#1211796)" This reverts commit b8e00c5a84bcd75a1e2c491b6de601278e1572c7. It still breaks build as it needs support in kmod (SR#1089967). - commit 6db9c44 - Revert "Fix usrmerge error (boo#1211796)" This reverts commit da84579e78f4c4efa5b3b910484fdaedc79fefec. It still breaks build as it needs support in kmod (SR#1089967). - commit 4b4675f - Revert "Revert "Remove usrmerge compatibility symlink in buildroot (boo#1211796)"" This reverts commit d3cbce2379049d1657919d6ced51f6f5141f66fd, we will merge a fix from the packaging branch. - commit 07d1779 - Fix usrmerge error (boo#1211796) - commit da84579 - Revert "Remove usrmerge compatibility symlink in buildroot (boo#1211796)" ... changelog too long, skipping 225 lines ... - commit fc86ff2 ==== libXpresent ==== - Add -32bit package ==== libstorage-ng ==== Version update (4.5.115 -> 4.5.116) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - Translated using Weblate (Georgian) (bsc#1149754) - 4.5.116 ==== libzypp ==== Version update (17.31.11 -> 17.31.12) - Do not unconditionally release a medium if provideFile failed (bsc#1211661) - libzypp.spec.cmake: remove duplicate file listing. - version 17.31.12 (22) ==== live555 ==== Version update (2023.01.19 -> 2023.05.10) Subpackages: libBasicUsageEnvironment2 libUsageEnvironment3 libgroupsock30 libliveMedia107 - update to 2023.5.10: * Fixed a minor memory leak in the "RTSPServer" code. * Calls to "send()" and "sendto()" now explicitly take "MSG_NOSIGNAL" rather than 0 as the 'flags' parameter. In most systems, 0 seems to work, but apparently not in Debian Linux. ==== llvm16 ==== Version update (16.0.4 -> 16.0.5) Subpackages: clang-tools clang16 libLLVM16 libclang-cpp16 libclang13 llvm16-gold - Update to version 16.0.5. * This release contains bug-fixes for the LLVM 16.0.0 release. This release is API and ABI compatible with 16.0.0. - Rebase patches: * llvm-do-not-install-static-libraries.patch * llvm-remove-clang-only-flags.patch - Enable ThinLTO on riscv64. ==== m17n-db ==== Version update (1.8.0 -> 1.8.2) Subpackages: m17n-db-lang - update to 1.8.2: * New input methods are added. * si-sayura.mim: Sinhala input method using the sayura transliteration system, see https://www.sayura.net/im/ * mr-gamabhana.mim: Marathi input method with GaMaBhaNa * bn-national-jatiya.mim: Bengali input method National Jatiya layout * hu-rovas-post: icon added. * kn-inscript.mim: Add mapping for ZWNJ * gu-itrans.mim: Fix e o mappings * bo-ewts.mim: Fix ld mapping * bo-ewts.mim: remove whitespace in rn and brn mapping * Changes in the build system. * pa-remington.mim: Punjabi input method for remington layout * ta-remington.mim: Tamil input method for Remington typewriter layout * as-inscript2.mim: Input method for enhanced inscript layout * bn-inscript2.mim: Input method for enhanced inscript layout * brx-inscript2-deva.mim: Input method for enhanced inscript layout * doi-inscript2-deva.mim: Input method for enhanced inscript layout * gu-inscript2.mim: Input method for enhanced inscript layout * hi-inscript2.mim: Input method for enhanced inscript layout * kn-inscript2.mim: Input method for enhanced inscript layout * kok-inscript2-deva.mim: Input method for enhanced inscript layout * ks-inscript2-deva.mim: Input method for enhanced inscript layout * mai-inscript2.mim: Input method for enhanced inscript layout * ml-inscript2.mim: Input method for enhanced inscript layout * mni-inscript2-beng.mim: Input method for enhanced inscript layout * mni-inscript2-mtei.mim: Input method for enhanced inscript layout * mr-inscript2.mim: Input method for enhanced inscript layout * ne-inscript2-deva.mim: Input method for enhanced inscript layout * or-inscript2.mim: Input method for enhanced inscript layout * pa-inscript2-guru.mim: Input method for enhanced inscript layout * sa-inscript2.mim: Input method for enhanced inscript layout * sat-inscript2-deva.mim: Input method for enhanced inscript layout * sat-inscript2-olck.mim: Input method for enhanced inscript layout * sd-inscript2-deva.mim: Input method for enhanced inscript layout * ta-inscript2.mim: Input method for enhanced inscript layout * te-inscript2.mim: Input method for enhanced inscript layout * ml-swanalekha.mim: Adjusted for the latest Unicode * unicode.mim: allow input of characters above the BMP * ar-kbd.mim: Use digits 0-9 on the 0-9 keys * ml-mozhi.mim: fix spurious ZWNJ being added (Resolves: https://savannah.nongnu.org/bugs/index.php?59681) ==== mariadb ==== Subpackages: libmariadbd19 mariadb-client mariadb-errormessages - Skip test on s390x to fix build on ALP, bsc#1211859 - Update list of skipped tests ==== mutter ==== Version update (44.1+2 -> 44.2) Subpackages: mutter-lang - Update to version 44.2: + Fix DND in some server-side decorated windows + Fix redrawing regression in non-DMA remote sessions + Avoid race condition in xwayland-on-demand + Do not unminimize windows with initial IconicState + Fix mispositioning of some X11 fullscreen windows + Fix legacy fullscreen windows appearing on all monitors + Improve support for display-attached tablets + Fix stuck cursor in some clients + Avoid unexpected orientation changes around suspend/resume + Fix oversized input region around Xwayland windows + Fix X11 client input region issues + Plugged leak + Fixed crashes + Misc. bug fixes and cleanups + Updated translations. - Drop patches fixed upstream: + mutter-do-not-unminimize-windows-with-initial-iconic.patch + mutter-fix-wacom-tablet-crash.patch ==== openssh ==== Version update (8.9p1 -> 9.3p1) Subpackages: openssh-clients openssh-common openssh-server - Update to openssh 9.3p1: = Security * ssh-add(1): when adding smartcard keys to ssh-agent(1) with the per-hop destination constraints (ssh-add -h ...) added in OpenSSH 8.9, a logic error prevented the constraints from being communicated to the agent. This resulted in the keys being added without constraints. The common cases of non-smartcard keys and keys without destination constraints are unaffected. This problem was reported by Luci Stanescu. * ssh(1): Portable OpenSSH provides an implementation of the getrrsetbyname(3) function if the standard library does not provide it, for use by the VerifyHostKeyDNS feature. A specifically crafted DNS response could cause this function to perform an out-of-bounds read of adjacent stack data, but this condition does not appear to be exploitable beyond denial-of- service to the ssh(1) client. The getrrsetbyname(3) replacement is only included if the system's standard library lacks this function and portable OpenSSH was not compiled with the ldns library (--with-ldns). getrrsetbyname(3) is only invoked if using VerifyHostKeyDNS to fetch SSHFP records. This problem was found by the Coverity static analyzer. = New features * ssh-keygen(1), ssh-keyscan(1): accept -Ohashalg=sha1|sha256 when outputting SSHFP fingerprints to allow algorithm selection. bz3493 * sshd(8): add a `sshd -G` option that parses and prints the effective configuration without attempting to load private keys and perform other checks. This allows usage of the option before keys have been generated and for configuration evaluation and verification by unprivileged users. = Bugfixes * scp(1), sftp(1): fix progressmeter corruption on wide displays; bz3534 * ssh-add(1), ssh-keygen(1): use RSA/SHA256 when testing usability of private keys as some systems are starting to disable RSA/SHA1 in libcrypto. * sftp-server(8): fix a memory leak. GHPR363 * ssh(1), sshd(8), ssh-keyscan(1): remove vestigal protocol compatibility code and simplify what's left. * Fix a number of low-impact Coverity static analysis findings. These include several reported via bz2687 * ssh_config(5), sshd_config(5): mention that some options are not first-match-wins. * Rework logging for the regression tests. Regression tests will now capture separate logs for each ssh and sshd invocation in a test. * ssh(1): make `ssh -Q CASignatureAlgorithms` work as the manpage says it should; bz3532. * ssh(1): ensure that there is a terminating newline when adding a new entry to known_hosts; bz3529 = Portability * sshd(8): harden Linux seccomp sandbox. Move to an allowlist of mmap(2), madvise(2) and futex(2) flags, removing some concerning kernel attack surface. * sshd(8): improve Linux seccomp-bpf sandbox for older systems; bz3537 - Update to openssh 9.2p1: = Security * sshd(8): fix a pre-authentication double-free memory fault introduced in OpenSSH 9.1. This is not believed to be exploitable, and it occurs in the unprivileged pre-auth process that is subject to chroot(2) and is further sandboxed on most major platforms. * ssh(8): in OpenSSH releases after 8.7, the PermitRemoteOpen option would ignore its first argument unless it was one of the special keywords "any" or "none", causing the permission list to fail open if only one permission was specified. bz3515 * ssh(1): if the CanonicalizeHostname and CanonicalizePermittedCNAMEs options were enabled, and the system/libc resolver did not check that names in DNS responses were valid, then use of these options could allow an attacker with control of DNS to include invalid characters (possibly including wildcards) in names added to known_hosts files when they were updated. These names would still have to match the CanonicalizePermittedCNAMEs allow-list, so practical exploitation appears unlikely. = Potentially-incompatible changes * ssh(1): add a new EnableEscapeCommandline ssh_config(5) option that controls whether the client-side ~C escape sequence that provides a command-line is available. Among other things, the ~C command-line could be used to add additional port-forwards at runtime. This option defaults to "no", disabling the ~C command-line that was previously enabled by default. Turning off the command-line allows platforms that support sandboxing of the ssh(1) client (currently only OpenBSD) to use a stricter default sandbox policy. = New features * sshd(8): add support for channel inactivity timeouts via a new sshd_config(5) ChannelTimeout directive. This allows channels that have not seen traffic in a configurable interval to be automatically closed. Different timeouts may be applied to session, X11, agent and TCP forwarding channels. * sshd(8): add a sshd_config UnusedConnectionTimeout option to terminate client connections that have no open channels for a length of time. This complements the ChannelTimeout option above. * sshd(8): add a -V (version) option to sshd like the ssh client ... changelog too long, skipping 345 lines ... - wtmpdb.patch: add support for wtmpdb to sshd [jsc#PED-3144] ==== openssh-askpass-gnome ==== Version update (8.9p1 -> 9.3p1) - openssh-askpass-gnome: require only openssh-clients, not the full openssh (including -server), to avoid pulling in excessive dependencies when installing git on Gnome (boo#1211446) - Update to openssh 9.3p1 * No changes for askpass, see main package changelog for details ==== permissions ==== Version update (1699_20230516 -> 1699_20230602) Subpackages: chkstat permissions-config - Update to version 20230602: * profiles: remove dropped pppoe-wrapper ==== polkit-default-privs ==== Version update (1550+20230517.ab68b2d -> 1550+20230606.5001571) - Update to version 1550+20230606.5001571: * Whitelist org.freedesktop.systemd1.bypass-dump-ratelimit (bsc#1211978) - Update to version 1550+20230602.0c9c3c6: * profiles: drop dead mousepad action ==== qt6-base ==== Subpackages: libQt6Core6 libQt6DBus6 libQt6Gui6 libQt6Network6 libQt6OpenGL6 libQt6Sql6 libQt6Test6 libQt6Widgets6 qt6-network-tls qt6-platformtheme-gtk3 - Add patch for QTabBar regression in Qt 6.5.1 (QTBUG-114204) * 0001-tabbar-fix.patch ==== rubygem-ruby-dbus ==== Version update (0.22.1 -> 0.23.0.beta1) - 0.23.0.beta1 Bug fixes: * A service can now have more than one name (gh#mvidner/ruby-dbus#69). Connection#request_service is deprecated in favor of Connection#object_server and BusConnection#request_name API: * Remove Service, splitting it into ProxyService and ObjectServer * Split off BusConnection from Connection ==== shim-leap ==== - Update shim-install to support FDE + Read GRUB_CRYPTODISK_PASSWORD and GRUB_TPM2_SEALED_KEY to create the proper cryptomount command for grub.cfg + Save the PCR snapshot if grub2 supports the command + Support 'no_grub_install' to skip grub2-install + Detect the OS ID of openSUSE Leap ==== suse-module-tools ==== Version update (16.0.30 -> 16.0.31) Subpackages: suse-module-tools-scriptlets - Update to version 16.0.31: * rpm-script: skip run_bootloader check (boo#1208117) ==== systemd-presets-branding-openSUSE ==== - fix drkonqi entry, should end with .service ==== yast2-trans ==== Version update (84.87.20230516.e4ba802a -> 84.87.20230602.240a95214f) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sr yast2-trans-sv yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20230602.240a95214f: * New POT for text domain 'control'. * Translated using Weblate (Macedonian) * New POT for text domain 'autoinst'.

1 0

kernel 6.3.3 breaks XFS
by Fritz Hudnut 09 Jun '23

09 Jun '23

> ---------- Forwarded message ---------- > From: ASSI <Stromeko(a)nexgo.de> > To: Richard Brown <rbrown(a)suse.de> > Cc: factory(a)lists.opensuse.org > Bcc: > Date: Sat, 27 May 2023 07:01:08 +0200 > Subject: Re: kernel 6.3.3 breaks XFS > Richard Brown writes: > > That said, the redhat bug report suggests it happens with the kernel > > version we already have out..so maybe moving forward would be the best > > thing to do. > > So, I thought I could get the kernel 6.2.12 back via tumbleweed-cli, but > of course it's already expired (would have been in 20230422). Any other > options? > > > Regards, > Achim. > -- > +<[Q+ Matrix-12 WAVE#46+305 Neuron microQkb Andromeda XTk Blofeld]>+ > > Waldorf MIDI Implementation & additional documentation: > http://Synth.Stromeko.net/Downloads.html#WaldorfDocs > > > > ---------- Forwarded message ---------- > From: Emanuel Castelo <emanuel.castelo(a)icloud.com> > To: ASSI <Stromeko(a)nexgo.de> > Cc: Richard Brown <rbrown(a)suse.de>, OpenSuse-Factory <factory(a)lists.opensuse.org> > Bcc: > Date: Sat, 27 May 2023 04:40:42 -0400 > Subject: Re: kernel 6.3.3 breaks XFS > Btrfs snapshot assuming you have it enabled? Can you move it forward?? I had some issue with nvidia stuff in my Leap install and I believe it was Takashi at bugzilla recommended going to the newest kernel available at the "OBS" site, selecting an "lp" kernel . . . that did work to fix the problem. Didn't see the link for it just now, I'm in Bookworm for the morning. F

4 3

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 08 Jun '23

08 Jun '23

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have had problems for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - matrix-synapse: Unresolvable - python-djvulibre: Fails to build - python-nss: Fails to build - python-sigal: Fails to build - python-weasyprint: Fails to build - traefik: Fails to build Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

1 0

Why don't move to zram?
by Walddys Emmanuel Dorrejo Céspedes 08 Jun '23

08 Jun '23

Hello, In base of the next article https://dev.to/archerallstars/lets-fine-tune-your-zram-aka-free-ram-in-open…, which i found more practical zram for swappiness than the other alternatives. With how most users aren't settings the swap correctly or using the default partition of yast2 of 2 Gb when enabled swap or default template installation guided, it would be good to add to the default packages installed systemd-zram-services, which add the zramswapon with the recommendation from the article and at the same time disable by default swap creating when creating the partition layout in the installation process. This will create a zram of the same size of the ram of the user with compression improve the performance of the machine for those users with low ram, or with a lot of comsunption of ram.

8 10

openSUSE Release Engineering meeting 07.06.2023
by Lubos Kocman 07 Jun '23

07 Jun '23

All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting The meeting is hosted here https://meet.opensuse.org/ReleaseEngineeringMeeting ## Attendees lkocman, Sarah, rbrown, max, Guillaume_G, doug, anag, wengel ## Leap Leap 15.5 GA is today! "Marketing availability" at 12:00 UTC lkocman is in prg office for the Open House event in the Prague office Annoucement of 15.6 https://news.opensuse.org/2023/06/06/leap-15.6-annoucement/ We'll update article with link to my osc2023 "Leap 16.0?" talk as soon as recording is published. 4k key instructions for upgrade https://doc.opensuse.org/release-notes/x86_64/openSUSE/Leap/15.5/#security https://en.opensuse.org/SDB:System_upgrade#0._New_4096_bit_RSA_signing_key Leap 15.5 Retrospective is now open! https://survey.opensuse.org/ Leap 15.5 IPRQ re-re-re-escalated. This legal approval is currently the only known release blocker. Legal doesn't want to approve the non-OSS part, as they do not have access to contract/agremeents fort the non-oss packages. I did inform them that I'm waiving this particular task for 15.5, given the situation with SUES legal, but we'll push to have this "all in order" for 15.6. RN + doc-o-o all set SCC enablement requested https://sd.suse.com/servicedesk/customer/portal/1/SD-122920 Transition will happen automatically Security Audit requested https://bugzilla.opensuse.org/show_bug.cgi?id=1211143 Green Kicked few feature requests that were pending python3.11 update (yubikey-manager etc). The current RN is hosted here (will not be listed on doc-o-o until GA) https://doc.opensuse.org/release-notes/x86_64/openSUSE/Leap/15.5 Need to be able to rebuild doc-o-o locally and rsync it over in case that Frank would not be around. openh264-repo 4k key setup (15.5 requries re-upload as we were using key from 15.4, Severin confirmed that he'll work on it next week). 15.4 image respin based on QU2 - makes no longer sense with 15.5 GA scheduled next week. ## openSUSE Tumbleweed Not available Max: all botmaster pipelines were broken due to a pipine was hanging then all agents vanished. Max fixed it 30 minutes ago. openSUSE:Factory build fail stats: 28 failed 33 unresolvable (on 20230510: 79 / 11) https://tinyurl.com/ysy4nnnz * Preparations for python 3.11-as-default-interpreter are ongoing. A lot of work happened in the last two weeks (wich many face2face encounters) * systemd maintainer submitted preset handling macros with file triggers; no direct need to change spec files (the old macros are defined to %nil, so don't break) * openssl 3.1 update has been submitted that should address most of the remaining issues. This might happen soon * 2k key formally being revoked from TW setup - the openh264 repo has been republished, the 3k key is no longer shipped to TW users. lkocman: will drop email to known thirdparty repos not under our control ## Richard (Aeon) MicroOS Desktop (GNOME) has been renamed openSUSE Aeon https://aeondesktop.org Product already being bootstrapped in OBS, using it as a pathfinder for the ALP Build Design (see below) Prototypical image being built, challenges with things like repo layout will likely be best handled by the repos-via-rpms already pioneered by Leap Richard has been hands on with Agama, has identified a few things that need addressing before Aeon could use it happily..may use it anyway https://github.com/openSUSE/agama/issues/602 https://github.com/openSUSE/agama/issues/601 Experimenting with ALP-like encrypted images with FDE and TPM unlock using kiwi Self-Installer. May be the 'one true way' of installing Aeon in the future, has far less options, isn't as pretty as Agama, but does the job we want it done the way we want it done. Much of this is dependant on ALP stuff getting into Factory which is WIP ## Richard (ALP Architecture) Prelimary ALP Build Design documented https://en.opensuse.org/openSUSE:ALP/BuildDesign ALP Architecture team is being bootstrapped https://en.opensuse.org/openSUSE:ALP/ArchitectureTeam Team will plan, design, experiment with ideas for future ALP-based openSUSE distros Efforts currently on hold/casually progressing with high-level discussions Will progress in earnist after SUSEcon when the current state of ALP can be fully shared ## Max Leap 15.5 * Disabled all 15.5 pipeline on botmaster * Disabled Leap, Leap-NonFree and Backports project * Set project attributes for maint update, OBS:RejectRequest and OBS:UpdateProject ## Guillaume - Arm Tumbleweed: * Still blocked on a plasma bug. openSUSE theme is not set on 1st boot (while installed and selected) which breaks openQA needles matching - https://bugzilla.opensuse.org/show_bug.cgi?id=1211628 Considering a workaround in openQA to unblock Tumbleweed Leap: * No update ALP: * shim not signed by MS (at least for aarch64, not sure for x86_64) - jsc#ARM-100 WSL: * Works with x86 emulator since appx installer is x86-64, but this is not really an issue since arm64 Win11 includes x86 emulator by default. Team is ok to publish it on Microsoft store anyway, but this would require some testing in openQA which is currently not possible (due to technical issues and MS licensing issues) https://progress.opensuse.org/issues/126083. Steps documented on the wiki to install the appx from download.o.o: https://en.opensuse.org/openSUSE:WSL#With_Appx_from_openSUSE_download_server ## Sarah - s390x Tumbleweed * release is rolling Leap: * working * waitingSubmissisions with fixes for gtkd and gnu-cobol: https://build.opensuse.org/request/show/1072852 https://build.opensuse.org/request/show/1078385 Sarah gave 2 talks at the openSUSE Conference The SUSE/openSUSE zSystems BBQ meeting will be 7th July 2023. The bi-weeky openSUSE zSystems meeting will switch from 18:00 to 19:00. ## Doug * Published a few articles submitted for news.o.o * openSUSE.Asia Summit * CfP should begin in the next two weeks * openSUSE Conference * videos are expected to be released at the end of June * Includes oSC23 & oSC22 (data was transfered) * Still processing some TSP submissions * Leap 15.5 release * Sent out info to press about release * Publishing social media posts about release * Still need future storage location * Contents have been isolated in one storage area to be transfered to knew location when that is available * Fedora flock CfP is open - https://cfp.fedoraproject.org/login * AI topics (static) *LFNW 2023 https://sessionize.com/lfnw2023 Looking for a volunteer to talk about ALP. ## Dirk Not available Further poking on the CDN / Fastly contract Submitted a few dozen python package updates * also todo announce tumbleweed maintainer policy draft currently working on testing those in a private staging test project * Started ALP:RISCV:* builds in the new build setup Biggest speedup can be observed by switching zlib to zlib-ng, so looked into fixing the build failures caused by switching to zlibo-ng- compat ## Wolfgang (Package Hub), Scott Bahling no news ## Maintenance team (Marcus or Maurizio (m4u)) Not available on the call openQA is stuck due to a regression - https://bugzilla.suse.com/show_bug.cgi?id=1211459 Leap Micro 5.4 maint-setup is active. Leap 15.5 setup is done, SLE export channel is still being refreshed occasionaly. 15.5 GA is currently scheduled for the 7th of June Key rotation: openSUSE:Leap:15.5 is done, Backports are bit more challenging because of SLES. Wolfgang: we're injecting the key. Marcus we probably want to do only Backports 15 SP5 for now. Backports 15SP5 key change, we have labs next week, so nobody would even notice a full rebuild :-) Wolfgang: do we add or replace key completely? The key will be kept on users Marcus was aiming for replacing the key, it would appear as added on existing systems. Marcus is working also on the SLES side, the update of package with the new key was released last week, it's just not activated yet, but it will be already trusted by Leap 15.5 systems. Leap 15.4 is working Leap Micro 5.3 is working Leap Micro 5.4 testing is now passing as well Leap 16.0 - we should revisit the update/sle repo as the current setup not exactly mirror friendly. Solutions could be dropping not so popular architectures or split repositories per architecture. securebootkey for SLES was rotated, it should be autotrusted and not noticeable. This will be in QU3, QU2 is already done. lkocman: 15.3 EOL could lead to stopping our physical Source DVD effort, as it seems we will not produce. As this was the last release which you could still get on a physical media. Lkocman: anything against decomissioning it? Not a single valid request since I've joined SUSE. We did receive only requests for binary install media which are not subject to ^. We do not plan to offer this for any new releases. ## Adrian - OBS Not available OBS build power is back to normal after fixing misconfiguration which kept workers busy. ## Open Floor

1 0

New Factory inclusion : topgrade
by Nicolas Formichella 06 Jun '23

06 Jun '23

Hello, I packaged[1] topgrade[2] (a upgrader tool that supports a ton of package managers (from zypper to git submodules and vim packages)) written in Rust It only currently builds on TW and on 15.5 (15.4 hasn't a new enough Rust version in the repos to make a dep function) and will be submitted for Factory inclusion in a bit. I'm, of course, open to suggestions. Regards, Nicolas FORMICHELLA [1]: https://github.com/topgrade-rs/topgrade [2]: https://build.opensuse.org/package/show/utilities/topgrade

4 3

New Tumbleweed snapshot 20230605 released!
by Dominique Leuenberger 06 Jun '23

06 Jun '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ImageMagick (7.1.1.10 -> 7.1.1.11) MozillaFirefox-branding-openSUSE apparmor (3.1.3 -> 3.1.4) bcm43xx-firmware binutils ceph checkmedia (6.1 -> 6.2) cppcheck cups curl (8.1.1 -> 8.1.2) dav1d (1.2.0 -> 1.2.1) freerdp gc (8.2.2 -> 8.2.4) glslang (12.1.0 -> 12.2.0) gnome-mahjongg (3.38.3 -> 3.40.0) gnutls imlib2 (1.11.0 -> 1.11.1) javapackages-tools kio-extras5 kyotocabinet libX11 (1.8.4 -> 1.8.5) libapparmor (3.1.3 -> 3.1.4) libgsasl libmfx (22.6.5 -> 23.2.2) libproxy libproxy-plugins libreoffice (7.5.3.2 -> 7.5.4.1) librsvg (2.56.0 -> 2.56.1) libserf (1.3.9 -> 1.3.10) libstorage-ng (4.5.112 -> 4.5.115) libvirt (9.3.0 -> 9.4.0) libxcrypt (4.4.33 -> 4.4.34) libyui (4.5.2 -> 4.6.0) libyui-ncurses (4.5.2 -> 4.6.0) libyui-ncurses-pkg (4.5.2 -> 4.6.0) libyui-qt (4.5.2 -> 4.6.0) libyui-qt-graph (4.5.2 -> 4.6.0) libyui-qt-pkg (4.5.2 -> 4.6.0) lua54 (5.4.4 -> 5.4.6) man-pages (6.02 -> 6.04) manpages-l10n (4.18.1 -> 4.19.0) mariadb-connector-c (3.3.4 -> 3.3.5) mozilla-nss ncurses (6.4.20230506 -> 6.4.20230520) opensc openssl-1_1 (1.1.1t -> 1.1.1u) openssl-3 (3.0.8 -> 3.1.1) openssl (3.0.8 -> 3.1.1) perl-Bootloader (1.1 -> 1.2) perl-IO-Socket-SSL (2.081 -> 2.083) perl-Mojolicious (9.31 -> 9.32) perl-Net-DNS (1.37 -> 1.38) perl-libwww-perl (6.68 -> 6.70) python-argcomplete python-gevent python-libvirt-python (9.3.0 -> 9.4.0) python-rich (13.3.5 -> 13.4.1) python-rpm python-tornado6 (6.2 -> 6.3.2) python-zope.event qemu (8.0.0 -> 8.0.2) qt6-base rp-pppoe rpm rubygem-rack-2.2 (2.2.6.4 -> 2.2.7) sdl12_compat (1.2.60 -> 1.2.64) sendmail shaderc (2023.2 -> 2023.4) texlive tracker (3.5.2 -> 3.5.3) virtiofsd vulkan-loader (1.3.247 -> 1.3.250.0) vulkan-tools (1.3.247 -> 1.3.250.0) webkit2gtk3 (2.40.1 -> 2.40.2) webkit2gtk3-soup2 (2.40.1 -> 2.40.2) xfce4-power-manager (4.18.1 -> 4.18.2) xfce4-pulseaudio-plugin (0.4.6 -> 0.4.7) xfce4-screensaver (4.18.1 -> 4.18.2) xfce4-session (4.18.2 -> 4.18.3) yast2-apparmor (4.6.0 -> 4.6.1) yast2-auth-server (4.6.1 -> 4.6.2) yast2-control-center (4.6.0 -> 4.6.1) === Details === ==== ImageMagick ==== Version update (7.1.1.10 -> 7.1.1.11) Subpackages: ImageMagick-config-7-SUSE ImageMagick-extra libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - version update to 7.1.1.11 * upstream changelog: https://github.com/ImageMagick/Website/blob/main/ChangeLog.md#711-11---2023… ==== MozillaFirefox-branding-openSUSE ==== - add sle_version 150500 check - add some useful links about openSUSE in the about:newtab page - add sle_version 150300 and 150400 check ==== apparmor ==== Version update (3.1.3 -> 3.1.4) Subpackages: apparmor-abstractions apparmor-docs apparmor-parser apparmor-parser-lang apparmor-profiles apparmor-utils apparmor-utils-lang python3-apparmor - update to AppArmor 3.1.4 - parser: fix mount rules encoding (CVE-2016-1585) - aa-logprof: fix error when choosing named exec with plain profile names - aa-status: fix json output - several fixes for profiles and abstractions - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.4 for the full upstream changelog ==== bcm43xx-firmware ==== - refresh BCM4345C[05].hcd from upstream URL ==== binutils ==== Subpackages: libctf-nobfd0 libctf0 - riscv-dynamic-tls-reloc-pie.patch: Backport for PR ld/22263 and PR ld/25694 - riscv-pr22263-1.patch: Backport for PR ld/22263 ==== ceph ==== Subpackages: librados2 librbd1 - Add "#!BuildConstraint" to spec files for compatibility with _multibuild ==== checkmedia ==== Version update (6.1 -> 6.2) Subpackages: libmediacheck6 - merge gh#openSUSE/checkmedia#17 - do not select EFI System Partition for digest calculation (bsc#1211953) - use default for SKIPSECTORS only for RH media - add man pages for checkmedia and tagmedia - add spec file for OBS - 6.2 ==== cppcheck ==== - test suite quirks: * Add patch disable-some-tests-about-char-signedness.patch, taken from Debian, to disable test "TestCondition::alwaysTrueContainer" which fails on "unsigned char" archs (arm, ppc) * Run test suite with "-j1", as TestProcessExecutor test is flaky otherwise ==== cups ==== Subpackages: cups-client cups-config libcups2 libcupsimage2 - cups-2.4.2-CVE-2023-32324.patch fixes CVE-2023-32324 "Heap buffer overflow in cupsd" https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7 bsc#1211643 ==== curl ==== Version update (8.1.1 -> 8.1.2) Subpackages: libcurl4 - Update to 8.1.2: * Bugfixes: - configure: quote the assignments for run-compiler - configure: without pkg-config and no custom path, use -lnghttp2 - curl: cache the --trace-time value for a second - http2: fix EOF handling on uploads with auth negotiation - http3: send EOF indicator early as possible - lib1560: verify more scheme guessing - lib: remove unused functions, make single-use static - libcurl.m4: remove trailing 'dnl' that causes this to break autoconf - libssh: when keyboard-interactive auth fails, try password - misc: fix spelling mistakes - page-header: mention curl version and how to figure out current release - page-header: minor wording polish in the URL segment - scripts/singleuse.pl: add more API calls - urlapi: remove superfluous host name check ==== dav1d ==== Version update (1.2.0 -> 1.2.1) - Update to version 1.2.1 * Fix a threading race on task_thread.init_done * NEON z2 8bpc and high bit-depth optimizations * SSSE3 z2 high bit-depth optimziations * Fix a desynced luma/chroma planes issue with Film Grain * Reduce memory consumption * Improve dav1d_parse_sequence_header() speed * OBU: Improve header parsing and fix potential overflows * OBU: Improve ITU-T T.35 parsing speed * Misc buildsystems, CI and headers fixes - Add to description some performance mentions that set it apart from other packages e.g. gav1. ==== freerdp ==== Subpackages: libfreerdp2-2 libwinpr2-2 - Don't compile shared objects with -fPIE and use -pie only for executables - Reenable LTO on ARM ==== gc ==== Version update (8.2.2 -> 8.2.4) - Update to release 8.2.4 * Avoid potential race between realloc and GC_block_was_dirty * Fix comparisons to heap boundary in GC_get_back_ptr_info and GC_mark_from * Fix data race in GC_heapsize_at_forced_unmap variable * Workaround a malfunction of soft-dirty bits clearing on Power9 ==== glslang ==== Version update (12.1.0 -> 12.2.0) - Update to release 12.2.0 * Support GLSL_EXT_shader_tile_image, GL_EXT_ray_tracing_position_fetch, and custom include callbacks via the C API * Add preamble-text command-line option * Accept variables as parameters of spirv_decorate_id ==== gnome-mahjongg ==== Version update (3.38.3 -> 3.40.0) Subpackages: gnome-mahjongg-lang - Update to version 3.40.0: + Port to GTK4 and libadwaita + Build fixes + Fix hints + Translate scores dialog + help-overlay.ui: Remove ctrl+f1 shortcut + Updated translations. - Drop patches fixed upstream: + 26.patch + fix-new-cairo-select-tile.patch - Changes in BuildRequires following upstreams changes: + Dropped: hicolor-icon-theme, yelp-tools and pkgconfig(gtk+-3.0). + Added: appstream-glib, desktop-file-utils, itstool, pkgconfig(gtk4) and pkgconfig(libadwaita-1). - Stop passing compile-schemas and update-icon-cache to meson, no longer needed, nor recognized. - Add check section and run meson_test macro during build, validate appdata and desktop files. ==== gnutls ==== Subpackages: libgnutls-dane0 libgnutls30 libgnutls30-32bit - FIPS: Fix baselibs.conf to mention libgnutls30-hmac [bsc#1211476] Extend also the checks in gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch ==== imlib2 ==== Version update (1.11.0 -> 1.11.1) Subpackages: imlib2-loaders libImlib2-1 - update to 1.11.1: * imlib2: added loader for y4m files (uses liby4m and libyuv) * imlib2: add y4m test examples * Y4M loader: Various minor changes * autofoo: Tweak PACKAGE_DATA_DIR definition * XPM loader: Add rgb.txt * loaders: Fix loaders potentially being loaded more than once * loaders: Change method used to not unload loaders * Add JXL saver * loaders: Cosmetics ==== javapackages-tools ==== Subpackages: javapackages-filesystem - Enable the tests also for older distributions - Require python3-xml (python-xml for distributions that use versioned modules), since module xml needed by some scripts. ==== kio-extras5 ==== Subpackages: kio-extras5-lang libkioarchive5 - Add some missing BuildRequires (boo#1211933) ==== kyotocabinet ==== - Update url to new website. ==== libX11 ==== Version update (1.8.4 -> 1.8.5) Subpackages: libX11-6 libX11-data libX11-xcb1 - Update to version 1.8.5 * gitlab CI: Add libtool to required packages * configure: raise minimum autoconf requirement to 2.70 * configure: replace deprecated AC_HELP_STRING with AS_HELP_STRING * configure: Use LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL * gitlab CI: add workflow rules * nls: delete compose sequences that pointlessly mix upper and lower case * nls: remove four hundred and sixty untypable Greek compose sequences * nls: remove twenty two untypable Greek compose sequences * XSetScreenSaver.man: restore the part that was accidentally snipped * nls: make the Amharic compose sequences use the dead-vowel symbols * nls: sort three sequences alphabetically in their group, like all others * nls: delete six compose sequences that cannot be typed * nls: use a slash instead of a combining solidus in compose sequences * NLS: move long S compositions to respective blocks * NLS: implement the expansion of the six Breton N-graph keysyms * NLS: move dead-caron subscript compositions to the relevant Unicode block * NLS: Remove strange dead_cedilla cedi sign sequences * nls: add compose sequence for capital schwa, and delete a deviant one - Users of the Amharic (am_ET.UTF-8) compose key sequences provided by libX11 will also want to upgrade to xkeyboard-config 2.39 (releasing soon), in order to keep those sequeunces working with this release. ==== libapparmor ==== Version update (3.1.3 -> 3.1.4) - update to AppArmor 3.1.4 - parser: fix mount rules encoding (CVE-2016-1585) - aa-logprof: fix error when choosing named exec with plain profile names - aa-status: fix json output - several fixes for profiles and abstractions - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.4 for the full upstream changelog ==== libgsasl ==== Subpackages: libgsasl-lang libgsasl7 - Remove URLs from keyring and generated patch as these can change at whim of upstream servers. Keep the references in comments so they are still references for the humans - fixes compilation on s390x by not turning on additional compilation warnings which in turn results in -fanalyze resulting false analysis ==== libmfx ==== Version update (22.6.5 -> 23.2.2) - update to 23.2.2: * [Encode] Fix JPEG payload insertion on Linux * Update checking of bitsream left size (#3033) * [Decode] Fix memory out-of-bounds issue for VP9 * [Decode] Fix memory out-of-bounds issue for VP8 * [Decode]Remove AVC level 6.0 check * [Decode]Fix hevc decode issue * hevce: use Low Power mode for RGB encoding by default ==== libproxy ==== - Only build mono support on openSUSE, not SLE nor SUSE ALP. ==== libproxy-plugins ==== Subpackages: libproxy1-config-gnome3 libproxy1-config-kde libproxy1-networkmanager libproxy1-pacrunner-duktape - Only build mono support on openSUSE, not SLE nor SUSE ALP. ==== libreoffice ==== Version update (7.5.3.2 -> 7.5.4.1) Subpackages: libreoffice-base libreoffice-calc libreoffice-draw libreoffice-filters-optional libreoffice-gnome libreoffice-gtk3 libreoffice-icon-themes libreoffice-impress libreoffice-l10n-cs libreoffice-l10n-da libreoffice-l10n-de libreoffice-l10n-el libreoffice-l10n-en libreoffice-l10n-en_GB libreoffice-l10n-es libreoffice-l10n-fr libreoffice-l10n-hu libreoffice-l10n-it libreoffice-l10n-ja libreoffice-l10n-pl libreoffice-l10n-pt_BR libreoffice-l10n-ru libreoffice-l10n-zh_CN libreoffice-l10n-zh_TW libreoffice-mailmerge libreoffice-math libreoffice-pyuno libreoffice-qt5 libreoffice-writer libreofficekit - Update to 7.5.4.1: https://wiki.documentfoundation.org/Releases/7.5.4/RC1 - Update bundled dependencies: * gpgme-1.16.0.tar.bz2 -> gpgme-1.18.0.tar.bz2 * curl-7.86.0.tar.xz -> curl-8.0.1.tar.xz * icu4c-71_1-src.tgz -> icu4c-72_1-src.tgz * icu4c-71_1-data.zip -> icu4c-72_1-data.zip ==== librsvg ==== Version update (2.56.0 -> 2.56.1) Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2 rsvg-thumbnailer typelib-1_0-Rsvg-2_0 - Update to version 2.56.1: + The minimum supported Rust version (MSRV) is 1.65. Unfortunately the assert_cmd crate, used in the test suite, bumped its MSRV and is forcing us to do the same. + Shrink the shared library by telling the linker to omit unused code. + Updates to dependencies. ==== libserf ==== Version update (1.3.9 -> 1.3.10) - update to 1.3.10: * Fix handling of invalid chunk lengths in the dechunk bucket * Fix an endless loop in the deflate bucket with truncated input * Fix BIO control handlers to support BIO_CTRL_EOF * Fix a CRT mismatch issue caused by using certain OpenSSL functions - drop upstream patches: * libserf-python3-2.patch * libserf-python3.patch * openssl3.patch ==== libstorage-ng ==== Version update (4.5.112 -> 4.5.115) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - Translated using Weblate (Georgian) (bsc#1149754) - 4.5.115 - Translated using Weblate (Georgian) (bsc#1149754) - 4.5.114 - Translated using Weblate (Indonesian) (bsc#1149754) - 4.5.113 ==== libvirt ==== Version update (9.3.0 -> 9.4.0) Subpackages: libvirt-client libvirt-daemon-common libvirt-daemon-config-network libvirt-daemon-driver-interface libvirt-daemon-driver-libxl libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-lock libvirt-daemon-log libvirt-daemon-plugin-lockd libvirt-daemon-proxy libvirt-daemon-qemu libvirt-daemon-xen libvirt-libs - Update to libvirt 9.4.0 - Many incremental improvements and bug fixes, see https://libvirt.org/news.html#v9-4-0-2023-06-01 ==== libxcrypt ==== Version update (4.4.33 -> 4.4.34) Subpackages: libcrypt1 libcrypt1-32bit libxcrypt-devel - Update to 4.4.34 * Optimize some cast operation for performance in lib/alg-yescrypt-platform.c. * Add SHA-2 Maj() optimization proposed by Wei Dai in lib/alg-sha512.c. * Explicitly clean the stack and context state after computation in lib/alg-gost3411-2012-hmac.c, lib/alg-hmac-sha1.c, and lib/alg-sha256.c (issue #168). ==== libyui ==== Version update (4.5.2 -> 4.6.0) - NCurses UI: Prevent buffer overflow when drawing very wide labels (bsc#1211354) - 4.6.0 - Cherry-picked BLumia's patch from community PR #97: CMake: use pkg-config to find and use ncurses libs by Wang Zichong <wangzichong(a)deepin.org> ==== libyui-ncurses ==== Version update (4.5.2 -> 4.6.0) - NCurses UI: Prevent buffer overflow when drawing very wide labels (bsc#1211354) - 4.6.0 - Cherry-picked BLumia's patch from community PR #97: CMake: use pkg-config to find and use ncurses libs by Wang Zichong <wangzichong(a)deepin.org> ==== libyui-ncurses-pkg ==== Version update (4.5.2 -> 4.6.0) - NCurses UI: Prevent buffer overflow when drawing very wide labels (bsc#1211354) - 4.6.0 - Cherry-picked BLumia's patch from community PR #97: CMake: use pkg-config to find and use ncurses libs by Wang Zichong <wangzichong(a)deepin.org> ==== libyui-qt ==== Version update (4.5.2 -> 4.6.0) - NCurses UI: Prevent buffer overflow when drawing very wide labels (bsc#1211354) - 4.6.0 - Cherry-picked BLumia's patch from community PR #97: CMake: use pkg-config to find and use ncurses libs by Wang Zichong <wangzichong(a)deepin.org> ==== libyui-qt-graph ==== Version update (4.5.2 -> 4.6.0) - NCurses UI: Prevent buffer overflow when drawing very wide labels (bsc#1211354) - 4.6.0 - Cherry-picked BLumia's patch from community PR #97: CMake: use pkg-config to find and use ncurses libs by Wang Zichong <wangzichong(a)deepin.org> ==== libyui-qt-pkg ==== Version update (4.5.2 -> 4.6.0) - NCurses UI: Prevent buffer overflow when drawing very wide labels (bsc#1211354) - 4.6.0 - Cherry-picked BLumia's patch from community PR #97: CMake: use pkg-config to find and use ncurses libs by Wang Zichong <wangzichong(a)deepin.org> ==== lua54 ==== Version update (5.4.4 -> 5.4.6) - Library is always liblua5_4-5: due to SOVERSION leading digit being 5 - Final release of 5.4.6. No change in the changelog. - Experimenting with lua 5.4.6-rc1 (release 5.4.5 has been effectively withdrawn). - Update to 5.4.5: - this is a bug-fix release. - Lua 5.4.5 also contains several internal improvements and includes a revised reference manual - Remove upstreamed patches: - luabugs1.patch - luabugs10.patch - luabugs11.patch - luabugs2.patch - luabugs3.patch - luabugs4.patch - luabugs5.patch - luabugs6.patch - luabugs7.patch - luabugs8.patch - luabugs9.patch ==== man-pages ==== Version update (6.02 -> 6.04) - update to 6.04: * Newly documented interfaces in existing pages * proc.5 KPF_PGTABLE (Linux 4.18) * landlock.7 LANDLOCK_ACCESS_FS_REFER (Linux 5.19) * udp.7 UDP_GRO (Linux 5.0) UDP_SEGMENT (Linux 4.18) * Changes to individual pages ==== manpages-l10n ==== Version update (4.18.1 -> 4.19.0) Subpackages: man-pages-cs man-pages-da man-pages-de man-pages-el man-pages-es man-pages-fr man-pages-hu man-pages-it man-pages-pl man-pages-pt_BR man-pages-ru - Update to version 4.19.0: Updated and added many translations. ==== mariadb-connector-c ==== Version update (3.3.4 -> 3.3.5) - update to 3.3.5: * https://mariadb.com/kb/en/mariadb-connector-c-3-3-5-release-notes/ ==== mozilla-nss ==== Subpackages: libfreebl3 libfreebl3-hmac libsoftokn3 libsoftokn3-hmac mozilla-nss-certs mozilla-nss-tools - Move testsuite to %check-section and move env-variables to files for easier chroot-debugging ==== ncurses ==== Version update (6.4.20230506 -> 6.4.20230520) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch 20230520 + fixes for compiler warnings in MinGW environments. - Add ncurses patch 20230514 + modify test-package "ncurses6-doc" to use manpage-aliases, which in turn required a change to the configure script to factor in the extra-suffix option when deriving alias names. + add mode 1004 to xterm+sm+1006 from xterm #380 -TD - Port and correct offsets of patch ncurses-6.4.dif ==== opensc ==== - Security Fix: [CVE-2023-2977, bsc#1211894] * opensc: out of bounds read in pkcs15 cardos_have_verifyrc_package() * Add opensc-CVE-2023-2977.patch ==== openssl-1_1 ==== Version update (1.1.1t -> 1.1.1u) Subpackages: libopenssl1_1 - Update to 1.1.1u: * Mitigate for the time it takes for `OBJ_obj2txt` to translate gigantic OBJECT IDENTIFIER sub-identifiers to canonical numeric text form. OBJ_obj2txt() would translate any size OBJECT IDENTIFIER to canonical numeric text form. For gigantic sub-identifiers, this would take a very long time, the time complexity being O(n^2) where n is the size of that sub-identifier. (CVE-2023-2650, bsc#1211430) To mitigitate this, `OBJ_obj2txt()` will only translate an OBJECT IDENTIFIER to canonical numeric text form if the size of that OBJECT IDENTIFIER is 586 bytes or less, and fail otherwise. The basis for this restriction is RFC 2578 (STD 58), section 3.5. OBJECT IDENTIFIER values, which stipulates that OBJECT IDENTIFIERS may have at most 128 sub-identifiers, and that the maximum value that each sub- identifier may have is 2^32-1 (4294967295 decimal). For each byte of every sub-identifier, only the 7 lower bits are part of the value, so the maximum amount of bytes that an OBJECT IDENTIFIER with these restrictions may occupy is 32 * 128 / 7, which is approximately 586 bytes. Ref: https://datatracker.ietf.org/doc/html/rfc2578#section-3.5 * Reworked the Fix for the Timing Oracle in RSA Decryption (CVE-2022-4304, bsc#1207534). The previous fix for this timing side channel turned out to cause a severe 2-3x performance regression in the typical use case compared to 1.1.1s. The new fix uses existing constant time code paths, and restores the previous performance level while fully eliminating all existing timing side channels. The fix was developed by Bernd Edlinger with testing support by Hubert Kario. * Corrected documentation of X509_VERIFY_PARAM_add0_policy() to mention that it does not enable policy checking. Thanks to David Benjamin for discovering this issue. (CVE-2023-0466, bsc#1209873) * Fixed an issue where invalid certificate policies in leaf certificates are silently ignored by OpenSSL and other certificate policy checks are skipped for that certificate. A malicious CA could use this to deliberately assert invalid certificate policies in order to circumvent policy checking on the certificate altogether. (CVE-2023-0465, bsc#1209878) * Limited the number of nodes created in a policy tree to mitigate against CVE-2023-0464. The default limit is set to 1000 nodes, which should be sufficient for most installations. If required, the limit can be adjusted by setting the OPENSSL_POLICY_TREE_NODES_MAX build time define to a desired maximum number of nodes or zero to allow unlimited growth. (CVE-2023-0464, bsc#1209624) * Rebased patch openssl-1_1-openssl-config.patch * Removed patches: - openssl-CVE-2023-0464.patch - openssl-CVE-2023-0465.patch - openssl-CVE-2023-0466.patch * Update openssl.keyring with key A21F AB74 B008 8AA3 6115 2586 B8EF 1A6B A9DA 2D5C (Tomas Mraz) - FIPS: Merge libopenssl1_1-hmac package into the library [bsc#1185116] ==== openssl-3 ==== Version update (3.0.8 -> 3.1.1) Subpackages: libopenssl3 libopenssl3-32bit - Update to 3.1.1: * Restrict the size of OBJECT IDENTIFIERs that OBJ_obj2txt will translate (CVE-2023-2650, bsc#1211430) * Multiple algorithm implementation fixes for ARM BE platforms. * Added a -pedantic option to fipsinstall that adjusts the various settings to ensure strict FIPS compliance rather than backwards compatibility. * Fixed buffer overread in AES-XTS decryption on ARM 64 bit platforms which happens if the buffer size is 4 mod 5 in 16 byte AES blocks. This can trigger a crash of an application using AES-XTS decryption if the memory just after the buffer being decrypted is not mapped. Thanks to Anton Romanov (Amazon) for discovering the issue. (CVE-2023-1255, bsc#1210714) * Add FIPS provider configuration option to disallow the use of truncated digests with Hash and HMAC DRBGs (q.v. FIPS 140-3 IG D.R.). The option '-no_drbg_truncated_digests' can optionally be supplied to 'openssl fipsinstall'. * Corrected documentation of X509_VERIFY_PARAM_add0_policy() to mention that it does not enable policy checking. Thanks to David Benjamin for discovering this issue. (CVE-2023-0466, bsc#1209873) * Fixed an issue where invalid certificate policies in leaf certificates are silently ignored by OpenSSL and other certificate policy checks are skipped for that certificate. A malicious CA could use this to deliberately assert invalid certificate policies in order to circumvent policy checking on the certificate altogether. (CVE-2023-0465, bsc#1209878) * Limited the number of nodes created in a policy tree to mitigate against CVE-2023-0464. The default limit is set to 1000 nodes, which should be sufficient for most installations. If required, the limit can be adjusted by setting the OPENSSL_POLICY_TREE_NODES_MAX build time define to a desired maximum number of nodes or zero to allow unlimited growth. (CVE-2023-0464, bsc#1209624) * Update openssl.keyring with key A21F AB74 B008 8AA3 6115 2586 B8EF 1A6B A9DA 2D5C (Tomas Mraz) * Rebased patches: - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch - openssl-Add_support_for_Windows_CA_certificate_store.patch * Removed patches: - openssl-CVE-2023-0464.patch - openssl-Fix-OBJ_nid2obj-regression.patch - openssl-CVE-2023-0465.patch - openssl-CVE-2023-0466.patch - FIPS: Merge libopenssl3-hmac package into the library [bsc#1185116] - Add support for Windows CA certificate store [bsc#1209430] https://github.com/openssl/openssl/pull/18070 * Add openssl-Add_support_for_Windows_CA_certificate_store.patch - Security Fix: [CVE-2023-0465, bsc#1209878] * Invalid certificate policies in leaf certificates are silently ignored * Add openssl-CVE-2023-0465.patch - Security Fix: [CVE-2023-0466, bsc#1209873] * Certificate policy check not enabled * Add openssl-CVE-2023-0466.patch - Fix regression in the OBJ_nid2obj() function: [bsc#1209430] * Upstream https://github.com/openssl/openssl/issues/20555 * Add openssl-Fix-OBJ_nid2obj-regression.patch - Fix compiler error "initializer element is not constant" on s390 * Add openssl-z16-s390x.patch - Security Fix: [CVE-2023-0464, bsc#1209624] * Excessive Resource Usage Verifying X.509 Policy Constraints * Add openssl-CVE-2023-0464.patch - Pass over with spec-cleaner - Update to 3.1.0: * Add FIPS provider configuration option to enforce the Extended Master Secret (EMS) check during the TLS1_PRF KDF. The option '-ems-check' can optionally be supplied to 'openssl fipsinstall'. * The FIPS provider includes a few non-approved algorithms for backward compatibility purposes and the "fips=yes" property query must be used for all algorithm fetches to ensure FIPS compliance. The algorithms that are included but not approved are Triple DES ECB, Triple DES CBC and EdDSA. * Added support for KMAC in KBKDF. * RNDR and RNDRRS support in provider functions to provide random number generation for Arm CPUs (aarch64). * s_client and s_server apps now explicitly say when the TLS version does not include the renegotiation mechanism. This avoids confusion between that scenario versus when the TLS version includes secure renegotiation but the peer lacks support for it. * AES-GCM enabled with AVX512 vAES and vPCLMULQDQ. * The various OBJ_* functions have been made thread safe. * Parallel dual-prime 1536/2048-bit modular exponentiation for AVX512_IFMA capable processors. * The functions OPENSSL_LH_stats, OPENSSL_LH_node_stats, OPENSSL_LH_node_usage_stats, OPENSSL_LH_stats_bio, OPENSSL_LH_node_stats_bio and OPENSSL_LH_node_usage_stats_bio are now marked deprecated from OpenSSL 3.1 onwards and can be disabled by defining OPENSSL_NO_DEPRECATED_3_1. The macro DEFINE_LHASH_OF is now deprecated in favour of the macro DEFINE_LHASH_OF_EX, which omits the corresponding type-specific function definitions for these functions regardless of whether OPENSSL_NO_DEPRECATED_3_1 is defined. Users of DEFINE_LHASH_OF may start receiving deprecation warnings for these functions regardless of whether they are using them. It is recommended that users transition to the new macro, DEFINE_LHASH_OF_EX. * When generating safe-prime DH parameters set the recommended private key length equivalent to minimum key lengths as in RFC 7919. * Change the default salt length for PKCS#1 RSASSA-PSS signatures to the maximum size that is smaller or equal to the digest length to comply with FIPS 186-4 section 5. This is implemented by a new option OSSL_PKEY_RSA_PSS_SALT_LEN_AUTO_DIGEST_MAX ("auto-digestmax") for the rsa_pss_saltlen parameter, which is now the default. Signature verification is not affected by this change and continues to work as before. * Update openssl.keyring with key 8657 ABB2 60F0 56B1 E519 0839 D9C4 D26D 0E60 4491 (Matt Caswell) ==== openssl ==== Version update (3.0.8 -> 3.1.1) - Update to 3.1.1 - Update to 3.1.0 ==== perl-Bootloader ==== Version update (1.1 -> 1.2) - merge gh#openSUSE/perl-bootloader#148 - UEFI: update also default location, if it is controlled by SUSE (bsc#1210799, bsc#1201399) - 1.2 ==== perl-IO-Socket-SSL ==== Version update (2.081 -> 2.083) - updated to 2.083 see /usr/share/doc/packages/perl-IO-Socket-SSL/Changes 2.083 2023/05/18 - fix t/protocol_version.t for OpenSSL versions which don't support SECLEVEL (regression from #122) 2.082 2023/05/17 - SSL_version default now TLS 1.2+ since TLS 1.1 and lower deprecated #122 - fix output of alert string when debugging #132 - improve regex for hostname validation #130, #126 - add can_ciphersuites subroutine for feature checking #127 - Utils::CERT_create - die if unexpected arguments are given instead of ignoring these ==== perl-Mojolicious ==== Version update (9.31 -> 9.32) - updated to 9.32 see /usr/share/doc/packages/perl-Mojolicious/Changes 9.32 2022-05-09 - Improved file and line number details in async/await exceptions. (batman) - Fixed various CSS selector equation bugs in Mojo::DOM::CSS. (mauke) - Fixed exceptions being added to the stash for formats other than HTML. (rawleyfowler) - Fixed context sensitivity issue. (Grinnz) ==== perl-Net-DNS ==== Version update (1.37 -> 1.38) - updated to 1.38 see /usr/share/doc/packages/perl-Net-DNS/Changes ==== perl-libwww-perl ==== Version update (6.68 -> 6.70) - updated to 6.70 see /usr/share/doc/packages/perl-libwww-perl/Changes 6.70 2023-04-30 13:22:56Z - Add cookie_jar_class attribute to allow different cookie jar modules to be used more easily (GH#91) (Tom Hukins, Julien Fiegehenn) - POD now contains all default attributes (GH#428) (Julien Fiegehenn) 6.69 2023-04-29 13:14:31Z - Timeouts for cached connections now update (GH#73) (Eric Johnson) - The conn_cache() can now be unset (GH#424) (Julien Fiegehenn) - LWP::Protocol now only attempts to load modules once (GH#62) (Burak Gursoy) - Fix a bug in no_proxy that allowed partial matches to a proxy address to disable a proxy (GH#421) (Julien Fiegehenn) ==== python-argcomplete ==== - bash-repl.patch: Use correct place for auxiliary bashrc.sh file from pexpect ==== python-gevent ==== - handle-python-ssl-changes.patch: refresh to handle ssl.shared_ciphers() behavior change in python 3.11 as well ==== python-libvirt-python ==== Version update (9.3.0 -> 9.4.0) - Update to 9.4.0 - Add all new APIs and constants in libvirt 9.4.0 ==== python-rich ==== Version update (13.3.5 -> 13.4.1) - update to 13.4.1: * Fixed typing extensions import in markdown #2979 - update to 13.4.0: * Added support for tables in Markdown #2977 ==== python-rpm ==== - add _multibuild for multiple .spec-files ==== python-tornado6 ==== Version update (6.2 -> 6.3.2) - New upstream release 6.3.2 - Security improvements - Fixed an open redirect vulnerability in StaticFileHandler under certain configurations. - ``tornado.web`` - `.RequestHandler.set_cookie` once again accepts capitalized keyword arguments for backwards compatibility. This is deprecated and in Tornado 7.0 only lowercase arguments will be accepted. - What's new in Tornado 6.3.0 - The new `.Application` setting ``xsrf_cookie_name`` can now be used to take advantage of the ``__Host`` cookie prefix for improved security. To use it, add ``{"xsrf_cookie_name": "__Host-xsrf", "xsrf_cookie_kwargs": {"secure": True}}`` to your `.Application` settings. Note that this feature currently only works when HTTPS is used. - `.WSGIContainer` now supports running the application in a ``ThreadPoolExecutor`` so the event loop is no longer blocked. - `.AsyncTestCase` and `.AsyncHTTPTestCase`, which were deprecated in Tornado 6.2, are no longer deprecated. - WebSockets are now much faster at receiving large messages split into many fragments. - General changes - Python 3.7 is no longer supported; the minimum supported . Python version is 3.8 Python 3.12 is now supported . - To avoid spurious deprecation warnings, users of Python 3.10 should upgrade to at least version 3.10.9, and users of Python 3.11 should upgrade to at least version 3.11.1. - Tornado submodules are now imported automatically on demand. This means it is now possible to use a single ``import tornado`` statement and refer to objects in submodules such as `tornado.web.RequestHandler`. - Deprecation notices - In Tornado 7.0, `tornado.testing.ExpectLog` will match ``WARNING`` and above regardless of the current logging configuration, unless the ``level`` argument is used. - `.RequestHandler.get_secure_cookie` is now a deprecated alias for `.RequestHandler.get_signed_cookie`. `.RequestHandler.set_secure_cookie` is now a deprecated alias for `.RequestHandler.set_signed_cookie`. - `.RequestHandler.clear_all_cookies` is deprecated. No direct replacement is provided; `.RequestHandler.clear_cookie` should be used on individual cookies. - Calling the `.IOLoop` constructor without a ``make_current`` argument, which was deprecated in Tornado 6.2, is no longer deprecated. - `.AsyncTestCase` and `.AsyncHTTPTestCase`, which were deprecated in Tornado 6.2, are no longer deprecated. - `.AsyncTestCase.get_new_ioloop` is deprecated. - ``tornado.auth`` - New method `.GoogleOAuth2Mixin.get_google_oauth_settings` can now be overridden to get credentials from a source other than the `.Application` settings. - ``tornado.gen`` - `contextvars` now work properly when a ``(a)gen.coroutine`` calls a native coroutine. - ``tornado.options`` - `~.OptionParser.parse_config_file` now recognizes single comma-separated strings (in addition to lists of strings) for options with ``multiple=True``. - ``tornado.web`` - New `.Application` setting ``xsrf_cookie_name`` can be used to change the name of the XSRF cookie. This is most useful to take advantage of the ``__Host-`` cookie prefix. - `.RequestHandler.get_secure_cookie` and `.RequestHandler.set_secure_cookie` (and related methods and attributes) have been renamed to `~.RequestHandler.get_signed_cookie` and `~.RequestHandler.set_signed_cookie`. This makes it more explicit what kind of security is provided, and avoids confusion with the ``Secure`` cookie attribute and ``__Secure-`` cookie prefix. The old names remain supported as deprecated aliases. - `.RequestHandler.clear_cookie` now accepts all keyword arguments accepted by `~.RequestHandler.set_cookie`. In some cases clearing a cookie requires certain arguments to be passed the same way in which it was set. - `.RequestHandler.clear_all_cookies` now accepts additional keyword arguments for the same reason as ``clear_cookie``. However, since the requirements for additional arguments mean that it cannot reliably clear all cookies, this method is now deprecated. - ``tornado.websocket`` - It is now much faster (no longer quadratic) to receive large messages that have been split into many fragments. - `.websocket_connect` now accepts a ``resolver`` parameter. - ``tornado.wsgi`` - `.WSGIContainer` now accepts an ``executor`` parameter which can be used to run the WSGI application on a thread pool. - What's new in Tornado 6.2.0 - Deprecation notice - Python 3.10 has begun the process of significant changes to the APIs for managing the event loop. Calls to methods such as `asyncio.get_event_loop` may now raise `DeprecationWarning` if no event loop is running. This has significant impact on the patterns for initializing ... changelog too long, skipping 101 lines ... - Remove upstreamed ignore-py310-deprecation-warnings.patch ==== python-zope.event ==== - Switch documentation to be within the main package. ==== qemu ==== Version update (8.0.0 -> 8.0.2) Subpackages: qemu-accel-tcg-x86 qemu-audio-spice qemu-block-curl qemu-block-nfs qemu-block-rbd qemu-chardev-spice qemu-guest-agent qemu-hw-display-qxl qemu-hw-display-virtio-gpu qemu-hw-display-virtio-gpu-pci qemu-hw-display-virtio-vga qemu-hw-usb-host qemu-hw-usb-redirect qemu-hw-usb-smartcard qemu-ipxe qemu-ksm qemu-lang qemu-microvm qemu-seabios qemu-tools qemu-ui-curses qemu-ui-gtk qemu-ui-opengl qemu-ui-spice-app qemu-ui-spice-core qemu-vgabios qemu-x86 - Update to version 8.0.2: * Stability, security and bug fixes - Patch added: * [openSUSE][RPM] Update to version 8.0.2 ==== qt6-base ==== Subpackages: libQt6Core6 libQt6DBus6 libQt6Gui6 libQt6Network6 libQt6OpenGL6 libQt6Sql6 libQt6Test6 libQt6Widgets6 qt6-network-tls qt6-platformtheme-gtk3 - Add upstream changes (CVE-2023-34410, boo#1211994): * 0001-Schannel-Reject-certificate-not-signed-by-a-configur.patch * 0001-Ssl-Copy-the-on-demand-cert-loading-bool-from-defaul.patch ==== rp-pppoe ==== - Removed remains of permissions setting for the pppoe-wrapper setuid binary. The major update to 4.0 dropped this. ==== rpm ==== Subpackages: librpmbuild9 - add _multibuild for multiple .spec-files ==== rubygem-rack-2.2 ==== Version update (2.2.6.4 -> 2.2.7) - update to version 2.2.7 * Correct the year number in the changelog (https://github.com/rack/rack/pull/2015) * Support underscore in host names for Rack 2.2 (https://github.com/rack/rack/pull/2071) ==== sdl12_compat ==== Version update (1.2.60 -> 1.2.64) - Update to release 1.2.64 * Some games started working: Steel Storm Burning Retribution, Maelstrom, Quake 2 XP, boswars, pink-pony, Sid Meier's Alpha Centauri (Loki version), xrick, grafx2, MLT, tuxfootball, freedroid. ==== sendmail ==== Subpackages: libmilter1_0 - Use the bash intrinsic virtual file /dev/tcp/localhost/<port> to check for MTA port - Avoid fuser for detecting if sendmail is listen on MTA port ==== shaderc ==== Version update (2023.2 -> 2023.4) - Update to release 2023.4 * Add option to preserve bindings * Add options to control mesh shading limits ==== texlive ==== Subpackages: libkpathsea6 libsynctex2 - Move the provides of pdfjam to its usecase (boo#1211877) ==== tracker ==== Version update (3.5.2 -> 3.5.3) Subpackages: libtracker-sparql-3_0-0 tracker-data-files tracker-lang typelib-1_0-Tracker-3_0 - Update to version 3.5.3: + Build fixes around strftime() bug workarounds on some architectures/platforms. + Improved compatibility of JSON cursor readers. + Leaks plugged. - Drop 63ea8f1a.patch: Fixed upstream. - Drop %systemd_user_postun_with_restart macro from the %postun directive. It's been deprecated and emptied (expands to nil) on both Tumbleweed and Leap already. - Comment unneded "/usr/bin/env python3" shebang line on utils/ trackertestutils/__main__.py Python script. - Change tracker-data-files package's architecture to noarch, as it doesn't contain any binaries. ==== virtiofsd ==== - Add qemu config file to ensure qemu is aware of the virtiofsd executable - https://www.reddit.com/r/suse/comments/13xmote/vm_with_virtiofs_does_not_st… ==== vulkan-loader ==== Version update (1.3.247 -> 1.3.250.0) - Update to release SDK-1.3.250.0 * No changes over 1.3.247 [SDK-250 is a branch of regular-243 with some cherry-picks bringing it to roughly regular-247; there is little relation to regular-250] ==== vulkan-tools ==== Version update (1.3.247 -> 1.3.250.0) - Update to release SDK-1.3.250.0 * vulkaninfo: Issue flush before exiting ==== webkit2gtk3 ==== Version update (2.40.1 -> 2.40.2) Subpackages: WebKitGTK-4.1-lang libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles - Update to version 2.40.2 (boo#1211846): + Fix scrollbar jumping to top when drag released outside window in GTK4. + Fix video rendering when GL is disabled. + Fix flickering on looped videos when starting again. + Fix CPU usage on autoplaying videos. + Choose amount of painting threads depending on available CPU cores on GTK4. + Fix several crashes and rendering issues. + Security fixes: CVE-2023-28204 CVE-2023-32373 (boo#1211658 boo#1211659). - Drop gcc13-fix.patch: fixed upstream. ==== webkit2gtk3-soup2 ==== Version update (2.40.1 -> 2.40.2) Subpackages: WebKitGTK-4.0-lang libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 webkit2gtk-4_0-injected-bundles - Update to version 2.40.2 (boo#1211846): + Fix scrollbar jumping to top when drag released outside window in GTK4. + Fix video rendering when GL is disabled. + Fix flickering on looped videos when starting again. + Fix CPU usage on autoplaying videos. + Choose amount of painting threads depending on available CPU cores on GTK4. + Fix several crashes and rendering issues. + Security fixes: CVE-2023-28204 CVE-2023-32373 (boo#1211658 boo#1211659). - Drop gcc13-fix.patch: fixed upstream. ==== xfce4-power-manager ==== Version update (4.18.1 -> 4.18.2) Subpackages: xfce4-power-manager-lang xfce4-power-manager-plugin - Update to version 4.18.2 * Fix typos in previous backported commit * Keep "lock-on-sleep" in sync with other components via XfceScreensaver * power: Fix old typo * Do not check repeatedly for logind running * Write on stderr when appropriate * build: Require gio-unix-2.0 * settings: Keep a ref on device to avoid use-after-free (Fixes #56) * dpms: Add missing sanity checks (Fixes #163) * Fix Xfconf memory management * Update bug report address * Translation Updates ==== xfce4-pulseaudio-plugin ==== Version update (0.4.6 -> 0.4.7) Subpackages: xfce4-pulseaudio-plugin-lang - Update to version 0.4.7 * Fix crash when D-Bus connection is lost before it's connected * Fix copyright info * MPRIS: Control recently open/used player using multimedia keys * Deduplicate key binding code * Bind all possible keys * Update about authors * MPRIS: Remove old settings when clearing known players * MPRIS: Ignore multimedia keys for blacklisted players * MPRIS: Add possibility to hide inactive players, improve config storage * MPRIS: Remove pulseaudio_mpris_player_can_launch function * MPRIS: Fix memory leak in player finalize * MPRIS: Remove unused pulseaudio_mpris_player_is_equal function * MPRIS: Refactor player connection lost and finalize * MPRIS: Deduplicate find_desktop_entry function * MPRIS: Make pulseaudio_mpris_get_available_players static * MPRIS: Check for filename before launching the player * Improve connection/disconnection with server * Menu: Don't clear structure, it's not needed * MPRIS: Reduce player_is_usable timeout to 5 sec * MPRIS: Memory management fixes * MPRIS: Don't initialize struct members, GLib is doing it * MPRIS: Micro-optimization * MPRIS: Check for is_playing in set_can_play function * Subscribe NameOwnerChanged to watch MPRIS changes instead of timer * Fix removing blacklisted MPRIS players from config * Improve run mixer button sensitivity * Display default device name in tooltip * Don't set has-tooltip property twice * Don't show recording indicator for non-default monitors * Make run mixer button sensitive for any path * Show unplugged devices as insensitive * Don't show rec icon if the source output doesn't belong to any client * Don't show recording indicator when it's not connected to the source * Fix mistake in comment * Don't reset recording value in callback * Allow maximum volume configuration in dialog * Improve volume step size text * Translation Updates - Remove _service file ==== xfce4-screensaver ==== Version update (4.18.1 -> 4.18.2) - Update to version 4.18.2 * screensaver-configure: Ensure consistent dialog positioning * screensaver-configure: Remove dead code * screensaver-configure: Improve some strings * screensaver-configure: Print errors on stderr without translating * screensaver-configure: Replace single quotes with double quotes in _() * screensaver-configure: Get translated strings from desktop files * screensaver-configure: Fix broken translations * screensaver-configure: Set dialogs modal * Revert "prefs-dialog: Grey out prefs button for popsquares (no prefs)" * screensaver-configure: Fix broken prefs * screensaver-configure: Fix critical when closing dialog * prefs-dialog: Grey out prefs button for popsquares (no prefs) * Bump GTK version and remove dead code * Keep "lock-on-sleep" in sync with other components via XfceScreensaver * *.desktop: Distinguishing our screensaver from others (Fixes #17) * Use GLib wrappers for memory allocation * Fix unix.Malloc warnings from scan-build 15.0.7 * Fix core.uninitialized.Assign warnings from scan-build 15.0.7 * Fix deadcode.DeadStores warnings from scan-build 15.0.7 * Avoid duplicated code * manager: Do not discard monitors without model and manufacturer * Translation Updates - Remove xfce4-screensaver-manager-efifb-lockup-fix.patch ==== xfce4-session ==== Version update (4.18.2 -> 4.18.3) Subpackages: xfce4-session-lang - Update to version 4.18.3 * shutdown: Do not set an error when returning TRUE * logout-dialog: Fix use-after-free * Use glib wrappers for memory allocation * build: Fix build when there is no suspend/hibernate support * build: Add suspend support for Solaris * startxfce4: Fix xinit arguments order * manager: Always use xfsm_manager_save_yourself_dbus() (Fixes #106) * settings: Remove useless tooltip * xflock4: Update fallback list * logout-dialog: Lower warning level * shutdown: Keep error NULL when unused * cleanup: Remove dead polkit code * Revert "Fallback to old method for shutdown (bug #8630)." * Use g_critical() instead of g_error() * Use GLib logging functions or g_printerr() instead of g_print() * Use GLib logging functions instead of g_printerr() * build: Fix untranslated policykit file * Escape/unescape string list delimiter when saving/restoring session * Replace XfceRc with GKeyFile for session file parsing * Translation Updates ==== yast2-apparmor ==== Version update (4.6.0 -> 4.6.1) - Added missing textdomain (bsc#1211980) - 4.6.1 ==== yast2-auth-server ==== Version update (4.6.1 -> 4.6.2) - Add deprecation notice to this tool (bsc#1211734). - 4.6.2 ==== yast2-control-center ==== Version update (4.6.0 -> 4.6.1) Subpackages: yast2-control-center-qt - Require xdg-utils since it's no longer required by desktop-data-openSUSE and yast-control-center-qt needs it to start modules with 'xdg-su'. (bsc#1211869) - 4.6.1

1 0

Where is the Tumbleweed snapshot changes page?
by Silviu C. 06 Jun '23

06 Jun '23

Hello, I've been using this URL to check what changes were made or were coming next for Tumbleweed. But it does not work anymore. What happened? URL: https://openqa.opensuse.org/snapshot-changes/opensuse/Tumbleweed/

3 5

Project Announces Plans for Another Minor Leap 15 Release
by Lubos Kocman 06 Jun '23

06 Jun '23

Hello openSUSE! We’d like to announce that the openSUSE Release team plans to work on openSUSE Leap 15.6. openSUSE Leap 15.6 is expected to be released in early June 2024 and would reach its end of life by the end of the year 2025. This decision was based on recent discussions at SUSE Labs and openSUSE Conference, and it reflects recent changes, progress on individual projects, and our new distribution *architect. This will also enable us to provide SUSE customers with an updated Package HUB module, as both SLES 15 SP5 and Leap 15.6 would be considered a feature release based on our *tick-tock release model. With a Leap 15.6, more time is given for efforts related to an ALP- based Leap 15.X *successor. A more detailed explanation of the situation at lkocman’s oSC2023 “Leap 16.0?” talk. Recording should be available within a few days at the openSUSE youtube *channel. Related news-o-o article: https://news.opensuse.org/2023/06/06/leap-15.6-annoucement/ [0]https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/threa… [1]https://en.wikipedia.org/wiki/Tick%E2%80%93tock_model [2]https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/threa… [3]https://www.youtube.com/@openSUSE Thank you! Lubos Kocman on behalf of the openSUSE Release team

2 1

OpenH264 Leap repository metadata mismatch
by Andrei Borzenkov 06 Jun '23

06 Jun '23

The metadata on http://codecs.opensuse.org/openh264/openSUSE_Leap/ does not match actual packages. Timestamp of files on http://ciscobinary.openh264.org/ is newer and hash does not match. Related question - for which Leap releases is this repository suitable? It does not have any version indication, but packages are apparently built on Leap 15.4. What about Leap 15.5? Users are already confused (not that I expect anyone to really care :( ) https://forums.opensuse.org/t/strange-upgrade-questions/166649

4 4

Re: binutils doesn't seem to use LD_LIBRARY_PATH
by Jiri Slaby 05 Jun '23

05 Jun '23

On 02. 06. 23, 20:09, L A Walsh wrote: > in trying to use a different version of gcc/+libs/+binutils > I have run into a problem -- namely that ld seems to use > a hard coded path (or two): > /home/devel/root/usr/bin> ldd ./ld > ./ld: /lib64/libc.so.6: version `GLIBC_2.34' not found (required by ./ld) > linux-vdso.so.1 (0x00007ffcc6340000) > libbfd-2.40.0.20230412-4.so => not found > libctf.so.0 => not found > libc.so.6 => /lib64/libc.so.6 (0x00007f724619b000) > /lib64/ld-linux-x86-64.so.2 (0x00007f7246c7a000) > > The 'ld' prog from binutils ignores LD_LIBRARY_PATH and points > to the root to resolve libc, You did something wrong: /tmp/l> cp /lib64/libc.so.6 . /tmp/l> LD_LIBRARY_PATH=`pwd` ldd /usr/bin/echo linux-vdso.so.1 (0x00007ffea33db000) libc.so.6 => /tmp/l/libc.so.6 (0x00007f69a6417000) /lib64/ld-linux-x86-64.so.2 (0x00007f69a661f000) > a few other libs that are not found > and ld-linux-x86-64.so.2 (hard-coded to /lib64 instead > of using LD_LIBRARY_PATH /lib64/ld-linux-x86-64.so.2 is a hardcoded interpreter, so cannot be overriden using LD_LIBRARY_PATH: $ readelf -p .interp /usr/bin/echo String dump of section '.interp': [ 0] /lib64/ld-linux-x86-64.so.2 You can still run the linker manually instead of relying on binaires' .interp: /tmp/l> cp /lib64/ld-linux-x86-64.so.2 . /tmp/l> ./ld-linux-x86-64.so.2 /usr/bin/echo XXX XXX regards, -- js suse labs

1 0

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 04 Jun '23

04 Jun '23

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have had problems for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - rpi-eeprom-config: Uninstallable: package raspberrypi-eeprom-2023.01.11.noarch obsoletes rpi-eeprom-config < 2023.01.11 provided by rpi-eeprom-config-0.0.20200625~9342fdb.noarch Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

1 0

Build Rust project on OBS
by Bernd Ritter 03 Jun '23

03 Jun '23

Hi there, i want to package a software written in Rust on OBS. I've read the guidelines here: https://en.opensuse.org/openSUSE:Packaging_Rust_Software but as it is not a library but an application some things dont really apply. When I build with the rust macros, the build is offline, which becomes a problem when trying to download the dependencies. [ 2s] + /usr/bin/cargo auditable build -j4 --offline --release [ 2s] error: no matching package named `base64` found [ 2s] location searched: registry `crates-io` [ 2s] required by package `ludusavi v0.19.0 (/home/abuild/rpmbuild/BUILD/ludusavi-0.19.0)` [ 2s] As a reminder, you're using offline mode (--offline) which can sometimes cause surprising resolution failures, if this error is too confusing you may wish to retry without the offline flag. [ 2s] error: Bad exit status from /var/tmp/rpm-tmp.OvIlq8 (%build) Building the software manually in OBS results in a network error because it is probably forbidden. What can I do here? Should I download the dependencies manually and place them somewhere? Cheers, Bernd

3 3

How do i add factory arm with zypper?
by vani jindam 03 Jun '23

03 Jun '23

I am at loss about how to add openSUSE Factory ARM using zypper. I am trying to familiarise with os [ installed using proot-distro ] and eventually install on my desktop [ replace existing debian experimental ]. But before installing & using it as daily driver, i need more meddling. I am on tumbleweed. However, i want to use factory also [ similar to debian experimental? ]. Regards, jindam, vani

3 5

MicroOS dup issue > rpmpkg: detected non-zero blob
by Pablo Sanchez 03 Jun '23

03 Jun '23

Hi, I have a VM running MicroOS. There's nothing critical on it. Recently dups have been failing due to 'rpmpkg: detected non-zero blob' - see snippet below. I assumed some package was borked and it'd eventually get fixed. (Read as: I ignored it until now.) Today it occurred to me that I might try to `transactional-update dup` The problem is still around. Running `zypper clean` did clear the cache but the problem continues. Noting in the bugs database. I don't mind opening a bug. I thought I'd check here in case I've missed something obvious ... Thx! --8-<---8-<---8-<---8-<---8-<-- . . . ( 23/238) Installing: python310-base-3.10.11-1.2.x86_64 [............... warning: rpmpkg: detected non-zero blob, trying auto repair error: python310-base-3.10.11-1.2.x86_64: install failed error: python310-base-3.10.10-2.2.x86_64: erase skipped error] Installation of python310-base-3.10.11-1.2.x86_64 failed: Error: Subprocess failed. Error: RPM failed: Command exited with status 1. Abort, retry, ignore? [a/r/i] (a): a Warning: %posttrans scripts skipped while aborting: kernel-firmware-usb-network-20230517-1.1.noarch.rpm ucode-intel-20230516a-1.1.x86_64.rpm Problem occurred during or after installation or removal of packages: Installation has been aborted as directed. Please see the above error message for a hint. 2023-06-02 10:17:27 Application returned with exit status 8. ERROR: zypper --no-cd dup on /.snapshots/20/snapshot failed with exit code 8! Use '--interactive' for manual problem resolution. Removing snapshot #20... 2023-06-02 10:17:27 tukit 4.2.1 started --- Pablo

4 5

i586: zypper on Coppermine Pentium III segfaults
by Felix Miata 02 Jun '23

02 Jun '23

TW20230526: zypper dup segfaults zypper in segfaults zypper se works zypper ref segfaults zypper ve segfaults Is all this expected when there is no sse2? -- Evolution as taught in public schools is, like religion, based on faith, not based on science. Team OS/2 ** Reg. Linux User #211409 ** a11y rocks! Felix Miata

11 15

Tumbleweed - Review of the weeks 2023/19-22
by Dominique Leuenberger 02 Jun '23

02 Jun '23

Dear Tumbleweed users and hackers, First off, apologies for not having the weekly review since May 5th. There were some personal days off, some travels to conferences and things just lined up to fall through the cracks. But more importantly, than the weekly reviews, I’m sure you have all noticed that Tumbleweed has not been stopped. Au contraire: with people being all in the same time zones and proximity, we managed to resolve some of the long- standing issues in stagings and progress on. I’ll try to give an overview of what happened in the last 4 weeks. Looking at all of May 2023, there have been a total of 29 snapshots published. The only ones skipped were 0516 and 0528. Snapshots 0501 through 0504 had been covered in week 2023/18’s review and I’ll skip them today. This brings us to this overview of what happened in the last weeks in Tumbleweed: * iproute2 6.3 * LibreOffice 7.5.3.1 & 7.5.3.2 * Virtualbox 7.0.8 * php8 was attempted to be updated to 8.2.5, later reverted to 8.1.19 due to nextcloud incompatibilities * Salt 3006.0 * systemd 253.4, plus the introduction of file triggers instead of relying upon packagers using all the systemd_ macros. There was an issue detected though, hinting at obs-pesign stripping the file triggers away. * PAM 1.5.3 * Mozilla Firefox 113.0 & 113.0.1 & 113.0.2 * KDE Plasma 5.27.5 * KDE Gear 23.04.1 * KDE Frameworks 5.106.0 * OpenVPN 2.6.4 * Linux kernel 6.3.2 & 6.3.4 * SQLite 3.42.0 * LLVM 16.0.4 * GCC 13.1.1 * GStreamer 1.22.3 * QEmu 8.0.0 * The old 2k RSA signing key for openSUSE repos has been removed from default installations. The key is still valid, but not part of the default trusted keys anymore. Things that are in the pipeline and are close to being ready – also thanks to the many in-person meetings at the SUSE Labs conference and the openSUSE Conference * Python 3.11 as the new default Python interpreter (a few packages from the numeric stack pending confirmation) * openSSL 3.1.1 * openSSH 9.3p1 * libxml2 2.11.4: breaks a few packages like perl-XML-LibXML, raptor, virtualbox * fmt 10: breaks at least ceph and spdlog * libplist 2.3.0: breaks libimobiledevice-glue * protobuf 23.1: breaks libphonenumber, libzypp, protobuf-c, and vlc Cheers, Dominique

1 0

Building packages for Leap 15.5
by Natasha Ament 02 Jun '23

02 Jun '23

Hi, I'm not sure whether this is the right place to ask, so correct me if I'm wrong. In the build portal there is at this point no possibility to build packages for Leap 15.5. Is there any ETA when this option will be available? Or may I've overlooked it? Kind regards, Natasha

2 2

New Tumbleweed snapshot 20230531 released!
by Dominique Leuenberger 01 Jun '23

01 Jun '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: drbd-utils glibc === Details === ==== drbd-utils ==== - Update url and remove download url for tarball, not valid anymore. ==== glibc ==== Subpackages: glibc-32bit glibc-devel glibc-extra glibc-lang glibc-locale glibc-locale-base nscd - ulp-prologue-into-asm-functions.patch: Add support for livepatches in ASM written functions (bsc#1210777)

1 0

Leap 15.5 update
by Lubos Kocman 01 Jun '23

01 Jun '23

Hello openSUSE! I just received a heads up that SLES 15 SP5 has a confirmed GMC. So big congratulations to the SLES team. This implies that the Leap 15.5 build which is currently being cooked in OBS is our (first) Gold Master Candidate. So far everything suggests that we can keep up with the current https://en.opensuse.org/openSUSE:Roadmap and have GA on June 7th. These are currently top issues under our radar https://en.opensuse.org/openSUSE:Most_annoying_bugs_15.5 See you at the oSC2023! Best regards Lubos Kocman openSUSE Leap Release Manager

1 1