January 2024 - openSUSE Factory - openSUSE Mailing Lists

New package ktls-utils for Factory
by Daniel Wagner 26 Jan '24

26 Jan '24

Hi, We (kernel-storage team) would like to add ktls-utils to Factory. In-kernel TLS consumers need a mechanism to perform TLS handshakes on a connected socket to negotiate TLS session parameters that can then be programmed into the kernel's TLS record protocol engine. This package of software provides a TLS handshake user agent that listens for kernel requests and then materializes a user space socket endpoint on which to perform these handshakes. The resulting negotiated session parameters are passed back to the kernel via standard kTLS socket options. Thus this daemon enables the TLS over nvme-tcp feature. The feeder project is here https://build.opensuse.org/package/show/network:utilities/ktls-utils Thanks, Daniel

2 1

New package for factory: python-taskgroup
by absolutely.vivid＠fastmail.org 26 Jan '24

26 Jan '24

Hi, I've created a new package in devel:languages:python that I would like to introduce to Factory. https://build.opensuse.org/package/show/devel:languages:python/python-taskg… Taskgroup (https://pypi.org/project/taskgroup/) is a python module that backports the asyncio.TaskGroup API from Python 3.11 to earlier versions of Python 3. It's a relatively small module, but it's useful for asyncio-based Python applications that wish to support Python 3.8-3.10 while still being able to use the newer asyncio features. An example is hypercorn (https://pypi.org/project/hypercorn/) which can't be packaged until taskgroup is packaged. Since taskgroup is a backport of a standard library API, I expect it to be easy to maintain. It looks feature complete and I don't think there will be any future breaking changes to worry about. I'm planning on reaching out to the upstream maintainer on pushing a new release to Pypi. There's been a bit of work done in the source repository since the last release, and I would like to make those changes available in this package. This is my first package, and I welcome all feedback! I want to make this package as good as it can be, and I'd like to incorporate any suggestions or feedback anyone might have :) Vivid

5 5

Re: Tumbleweed Installation
by Chuck Davis 26 Jan '24

26 Jan '24

Once upon a time we were able to start an installation, go off to get some work done in the garage and return to a functional desktop. Now the installation program gets itself into an infinite loop and never sets the machine to boot from the hard drive. Am I the only one plagued by this phenomenon?? If not, can somebody get the installation program fixed? This is using Imagewriter to a thumb drive for 20240115, 20240118, 20240124, at least, for KDE desktop install. Thanks.

2 2

New Tumbleweed snapshot 20240124 released!
by Dominique Leuenberger 25 Jan '24

25 Jan '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: Mesa (23.2.1 -> 23.3.3) Mesa-drivers (23.2.1 -> 23.3.3) cepces (0.3.7 -> 0.3.8) coreutils coreutils-systemd cronie gdm gnome-shell libeconf (0.6.0 -> 0.6.1) libidn (1.41 -> 1.42) libmspack libplacebo (6.338.1 -> 6.338.2) rdma-core (49.0 -> 49.1) sdbootutil (1+git20240118.7e744b4 -> 1+git20240122.c0d8f76) shaderc (2023.7 -> 2023.8) systemd vulkan-loader (1.3.268.0 -> 1.3.275.0) vulkan-tools (1.3.268.0 -> 1.3.275.0) zbar (0.23.90 -> 0.23.93) zchunk (1.3.2 -> 1.4.0) === Details === ==== Mesa ==== Version update (23.2.1 -> 23.3.3) Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libOSMesa8 libgbm1 - split python36-buildfix.patch into two patches python36-buildfix1.patch and python36-buildfix2.patch; apply the latter only on sle15-sp6/Leap 15.6 since on newer python releases than 3.6 it changes behaviour to remove required=True option - python36-buildfix.patch * src/freedreno/registers/gen_header.py: hopefully fixes aarch64 build - u_0001-intel-genxml-Drop-from-__future__-import-annotations.patch u_0002-intel-genxml-Add-a-untyped-OrderedDict-fallback-for-.patch python36-buildfix.patch * fixes build against python 3.6 - let Mesa-dri require libvulkan1 to get zink/swrast driver fallbacks working (hopefully); probably related: https://gitlab.freedesktop.org/mesa/mesa/-/commit/2a71f06f2938678d89d5ed137… - Update to bugfix release 23.3.3 - -> https://docs.mesa3d.org/relnotes/23.3.3.html - Update to bugfix release 23.3.2 - -> https://docs.mesa3d.org/relnotes/23.3.2.html - Update to version 23.3.0: * It includes NVK, a new reverse-engineered Vulkan driver for Nvidia hardware. This driver is still in experimental phase, not quite ready for prime time yet, but adventurous users can give it a go! * New extensions & features (in no particular order): - VK_EXT_pipeline_robustness on ANV - VK_KHR_maintenance5 on RADV - OpenGL ES 3.1 on Asahi - GL_ARB_compute_shader on Asahi - GL_ARB_shader_atomic_counters on Asahi - GL_ARB_shader_image_load_store on Asahi - GL_ARB_shader_image_size on Asahi - GL_ARB_shader_storage_buffer_object on Asahi - GL_ARB_sample_shading on Asahi - GL_OES_sample_variables on Asahi - GL_OES_shader_multisample_interpolation on Asahi - GL_OES_gpu_shader5 on Asahi - EGL_ANDROID_blob_cache works when disk caching is disabled - VK_KHR_cooperative_matrix on RADV/GFX11+ - Drop patches fixed upstream: * U_clover-llvm-move-to-modern-pass-manager.patch * U_radeonsi-prefix-function-with-si_-to-prevent-name-co.patch - Refresh patches with quilt. - Use %patch -p N instead of deprecated %patchN. ==== Mesa-drivers ==== Version update (23.2.1 -> 23.3.3) Subpackages: Mesa-dri Mesa-gallium Mesa-libva libxatracker2 - split python36-buildfix.patch into two patches python36-buildfix1.patch and python36-buildfix2.patch; apply the latter only on sle15-sp6/Leap 15.6 since on newer python releases than 3.6 it changes behaviour to remove required=True option - python36-buildfix.patch * src/freedreno/registers/gen_header.py: hopefully fixes aarch64 build - u_0001-intel-genxml-Drop-from-__future__-import-annotations.patch u_0002-intel-genxml-Add-a-untyped-OrderedDict-fallback-for-.patch python36-buildfix.patch * fixes build against python 3.6 - let Mesa-dri require libvulkan1 to get zink/swrast driver fallbacks working (hopefully); probably related: https://gitlab.freedesktop.org/mesa/mesa/-/commit/2a71f06f2938678d89d5ed137… - Update to bugfix release 23.3.3 - -> https://docs.mesa3d.org/relnotes/23.3.3.html - Update to bugfix release 23.3.2 - -> https://docs.mesa3d.org/relnotes/23.3.2.html - Update to version 23.3.0: * It includes NVK, a new reverse-engineered Vulkan driver for Nvidia hardware. This driver is still in experimental phase, not quite ready for prime time yet, but adventurous users can give it a go! * New extensions & features (in no particular order): - VK_EXT_pipeline_robustness on ANV - VK_KHR_maintenance5 on RADV - OpenGL ES 3.1 on Asahi - GL_ARB_compute_shader on Asahi - GL_ARB_shader_atomic_counters on Asahi - GL_ARB_shader_image_load_store on Asahi - GL_ARB_shader_image_size on Asahi - GL_ARB_shader_storage_buffer_object on Asahi - GL_ARB_sample_shading on Asahi - GL_OES_sample_variables on Asahi - GL_OES_shader_multisample_interpolation on Asahi - GL_OES_gpu_shader5 on Asahi - EGL_ANDROID_blob_cache works when disk caching is disabled - VK_KHR_cooperative_matrix on RADV/GFX11+ - Drop patches fixed upstream: * U_clover-llvm-move-to-modern-pass-manager.patch * U_radeonsi-prefix-function-with-si_-to-prevent-name-co.patch - Refresh patches with quilt. - Use %patch -p N instead of deprecated %patchN. ==== cepces ==== Version update (0.3.7 -> 0.3.8) Subpackages: cepces-certmonger cepces-selinux python3-cepces - Update to version 0.3.8: * Fix WSTEP BinarySecurityToken attribute namespaces * Migrate to SPNEGO auth mech ==== coreutils ==== Subpackages: coreutils-lang - coreutils-9.4.split-CVE-2024-0684.patch: Add upstream patch: split: do not shrink hold buffer. (CVE-2024-0684) - coreutils-i18n.patch: Update from Fedora to fix build on i686 on GCC14. ==== coreutils-systemd ==== - coreutils-9.4.split-CVE-2024-0684.patch: Add upstream patch: split: do not shrink hold buffer. (CVE-2024-0684) - coreutils-i18n.patch: Update from Fedora to fix build on i686 on GCC14. ==== cronie ==== Subpackages: cron - Update to 1.7.1: * crond: Wait on finishing the job with -n option to check the exit status * crond: Do not set the return path to <> if non-default MAILFROM is set * /etc/sysconfig/crond and /etc/default/anacron files are optional - Remove test-for-etc-default-anacron.patch - Set safe permissions for crontab backups. Add * safe-backup-permissions.patch ==== gdm ==== Subpackages: gdm-lang gdm-schema gdmflexiserver libgdm1 typelib-1_0-Gdm-1_0 - Make Patch0 only applies on s390 and s390x. ==== gnome-shell ==== Subpackages: gnome-extensions gnome-shell-calendar gnome-shell-lang - Adapt to version 45.3(bsc#1216072): + Rebase gnome-shell-domain.patch + Rebase gnome-shell-fate324570-Make-GDM-background-image-configurable.patch ==== libeconf ==== Version update (0.6.0 -> 0.6.1) Subpackages: libeconf0 libeconf0-32bit - Update to version 0.6.1: * reading lines which have a length greater than BUFSIZE (#195) * Improved data quote check in read_file (#193) ==== libidn ==== Version update (1.41 -> 1.42) - update to 1.42: * build system tweaks * Updated translations and gnulib * fixes for other platforms ==== libmspack ==== - The following bugs and CVEs are not affecting TW: * CVE-2018-18584 * CVE-2018-18585 * CVE-2018-18586 * CVE-2019-1010305 * bsc#1113038 * bsc#1113039 * bsc#1113040 * bsc#1130489 * bsc#1141680 ==== libplacebo ==== Version update (6.338.1 -> 6.338.2) - Update libplacebo to version 6.338.2. See details in: https://code.videolan.org/videolan/libplacebo/-/tags/v6.338.2 ==== rdma-core ==== Version update (49.0 -> 49.1) Subpackages: libefa1 libibverbs libibverbs1 libmana1 libmlx4-1 libmlx5-1 librdmacm1 rdma-ndd - Update to v49.1 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836, jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916) - No release notes available. ==== sdbootutil ==== Version update (1+git20240118.7e744b4 -> 1+git20240122.c0d8f76) Subpackages: sdbootutil-rpm-scriptlets sdbootutil-snapper - Update to version 1+git20240122.c0d8f76: * Integrate with kernel-install * Rework kernel listing a bit * Add checks to list-entries * List entries for current system only by default * Fall back to loader.conf if setting efivar failed * Runtime determine kernel image name * Add list-snapshots * Add list-entries command ==== shaderc ==== Version update (2023.7 -> 2023.8) - Update to release 2023.8 * API: Expose rlaxed Vulkan rules from glslang ==== systemd ==== Subpackages: libsystemd0 libsystemd0-32bit libudev1 systemd-32bit systemd-boot systemd-container systemd-coredump systemd-lang udev - Add patches that implement [jsc#PED-5659] 5003-cgroup-rename-TasksMax-structure-to-CGroupTasksMax.patch 5004-bus-print-properties-ignore-CGROUP_LIMIT_MAX-for-Mem.patch 5005-bus-print-properties-prettify-more-unset-properties.patch 5006-cgroup-Add-EffectiveMemoryMax-EffectiveMemoryHigh-an.patch 5007-test-Convert-rlimit-test-to-subtest-of-generic-limit.patch 5008-test-Add-effective-cgroup-limits-testing.patch 5009-cgroup-Restrict-effective-limits-with-global-resourc.patch 5010-cgroup-Rename-effective-limits-internal-table.patch They are temporarily put in quarantine to get broader testing but should be eventually moved to the git repo. ==== vulkan-loader ==== Version update (1.3.268.0 -> 1.3.275.0) - Update to release SDK-1.3.275.0 * Instance extensions unsupported by physical devices now return ERROR_EXTENSION_NOT_PRESENT * Unload drivers which report 0 physical devices ==== vulkan-tools ==== Version update (1.3.268.0 -> 1.3.275.0) - Update to release SDK-1.3.275.0 * icd: Add vkGetMemoryFdKHR support * icd: Add vkGetMemoryHostPointerPropertiesEXT support * vulkaninfo: Autogenerate Format list * icd: Add basic VkDisplayKHR support * icd: Add vkRegisterDisplayEventEXT * icd: Add video support ==== zbar ==== Version update (0.23.90 -> 0.23.93) - Update to 0.23.93: * Set a better dpi resolution when parsing PDF files * Fix memory recycle bug of empty symbols * Fix compilation with python 3.11 and 3.12 * CVE-2023-40889: Fix array out-of-bounds access * Stop ignoring non-binary entries that follow binary ones * Increase allocated buffer memory for symbols * barcodetest.py: fix error code print logic * convert: Crash fixing while using camera * Add some pod information for additional functions * perl skip more tests if DISPLAY not set and set prereqs in Makefile.PL * Fixes rt.cpan.org 122061 - test fails when DISPLAY not set * Update Barcode::ZBar * isaac: ensure proper order of parsing expression * Enforce x11 backend even on wayland * zbarimg: add the --polygon option * xml output: Add polygon containing code bar. * configure.ac: drop support for Qt4 and prepare for Qt6 support * win: fix compiling error in Visual studio * Enforce a coding style * configure.ac: fix some issues with gtk parameter * zbargtk: fix version check macros * zbar: Address some header issues * zbar, test: fix compilation issues with FreeBSD * zbar: Function stdcall declaration issue. * symbol: make it compatible with MSC * zbar: change the code to make it c90 standard compatible * test: fix decode test - Drop upstreamed patches: * zbar-CVE-2023-40889.patch * zbar-CVE-2023-40890.patch * py311.patch - Add patch to fix build see gh#mchehab/zbar#277: * zbar-configure.patch * zbar-pkgconfig.patch ==== zchunk ==== Version update (1.3.2 -> 1.4.0) - update to 1.4.0: * Rework hash code to support openSSL 3.x EVP API * memory leak fix * tests for invalid zchunk files * More statistics in zchunk_delta_info * avoid infinite loop under certain conditions * Add zck_get_chunk_ctx function to get context from chunk

1 0

New Tumbleweed snapshot 20240123 released!
by Dominique Leuenberger 25 Jan '24

25 Jan '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ed (1.19 -> 1.20) kernel-source (6.6.11 -> 6.7.1) ncurses (6.4.20240113 -> 6.4.20240120) pam (1.5.3 -> 1.6.0) pam-full-src (1.5.3 -> 1.6.0) python-kiwi (9.25.22 -> 9.25.19) === Details === ==== ed ==== Version update (1.19 -> 1.20) - update to 1.20: * New command-line options for jumping to a line number or match * Improved handling of file names containing control characters * Tweak workflow for fewer 'buffer modified' warnings * Tilde expansion is now performed on file names * Warn on modifying a buffer from a read-only file * Create missing intermediate directories when writing to a file * Documentation updates - drop obsolete makeinfo marcos ==== kernel-source ==== Version update (6.6.11 -> 6.7.1) - Linux 6.7.1 (bsc#1012628). - mm/memory_hotplug: fix memmap_on_memory sysfs value retrieval (bsc#1012628). - docs: kernel_feat.py: fix potential command injection (bsc#1012628). - scripts/decode_stacktrace.sh: optionally use LLVM utilities (bsc#1012628). - coresight: etm4x: Fix width of CCITMIN field (bsc#1012628). - PCI: Add ACS quirk for more Zhaoxin Root Ports (bsc#1012628). - leds: ledtrig-tty: Free allocated ttyname buffer on deactivate (bsc#1012628). - parport: parport_serial: Add Brainboxes device IDs and geometry (bsc#1012628). - parport: parport_serial: Add Brainboxes BAR details (bsc#1012628). - uio: Fix use-after-free in uio_open (bsc#1012628). - binder: fix comment on binder_alloc_new_buf() return value (bsc#1012628). - binder: fix trivial typo of binder_free_buf_locked() (bsc#1012628). - binder: fix use-after-free in shinker's callback (bsc#1012628). - binder: use EPOLLERR from eventpoll.h (bsc#1012628). - Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d" (bsc#1012628). - ksmbd: free ppace array on error in parse_dacl (bsc#1012628). - ksmbd: don't allow O_TRUNC open on read-only share (bsc#1012628). - drm/amd/display: Pass pwrseq inst for backlight and ABM (bsc#1012628). - bus: moxtet: Add spi device table (bsc#1012628). - bus: moxtet: Mark the irq as shared (bsc#1012628). - ACPI: resource: Add another DMI match for the TongFang GMxXGxx (bsc#1012628). - ALSA: hda: cs35l41: Support more HP models without _DSD (bsc#1012628). - ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP Envy X360 13-ay0xxx (bsc#1012628). - ALSA: hda/realtek: enable SND_PCI_QUIRK for Lenovo Legion Slim 7 Gen 8 (2023) serie (bsc#1012628). - ALSA: hda: Add driver properties for cs35l41 for Lenovo Legion Slim 7 Gen 8 serie (bsc#1012628). - ALSA: hda: cs35l41: Prevent firmware load if SPI speed too low (bsc#1012628). - ALSA: hda: cs35l41: Support additional Dell models without _DSD (bsc#1012628). - ALSA: hda/realtek: Add quirks for Dell models (bsc#1012628). - f2fs: explicitly null-terminate the xattr list (bsc#1012628). - commit b2e8ed6 - media: solo6x10: replace max(a, min(b, c)) by clamp(b, a, c) (fix build and make it faster). - Delete patches.rpmify/Revert-minmax-allow-comparisons-of-int-against-unsig.patch. - Delete patches.rpmify/Revert-minmax-allow-min-max-clamp-if-the-arguments-h.patch. - Delete patches.rpmify/Revert-minmax-fix-indentation-of-__cmp_once-and-__cl.patch. - Delete patches.rpmify/Revert-minmax-relax-check-to-allow-comparison-betwee.patch. Replace the reverts by an upstream workaround. - commit 9bff21f - mm: huge_memory: don't force huge page alignment on 32 bit (bsc#1218841). - Delete patches.suse/Revert-mm-align-larger-anonymous-mappings-on-THP-bou.patch. Replace the revert by an upstream fix. - commit d54abef - Update patches.suse/futex-Avoid-reusing-outdated-pi_state.patch (bsc#1218801). Update to v2. - commit eeba83a - Revert "mm: align larger anonymous mappings on THP boundaries" (bsc#1218841). - commit 69537e9 - futex: Avoid reusing outdated pi_state (bsc#1218841). - commit 9859079 ==== ncurses ==== Version update (6.4.20240113 -> 6.4.20240120) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch 20240120 + improve formatting/style of manpages (patches by Branden Robinson). + amend discussion of aliases in tput.1 + use ansi+sgrbold, ansi+sgrdim, ansi+sgrso, ansi+sgrul, ansi+tabs ecma+color, ecma+sgr, vt100+4bsd, vt100+pfkeys, vt220+pcedit xterm+256color, xterm+acs, xterm+nopcfkeys, xterm+pcf2 to trim -TD + modify configure scripts/makefiles to omit KEY_RESIZE if the corresponding SIGWINCH feature is disabled. ==== pam ==== Version update (1.5.3 -> 1.6.0) Subpackages: pam-32bit - Add post 1.6.0 release fixes for pam_env and pam_unix: - pam_env-fix-enable-vendordir-fallback.patch - pam_env-fix_vendordir.patch - pam_env-remove-escaped-newlines.patch - pam_unix-fix-password-aging-disabled.patch - Update to version 1.6.0 - Added support of configuration files with arbitrarily long lines. - build: fixed build outside of the source tree. - libpam: added use of getrandom(2) as a source of randomness if available. - libpam: fixed calculation of fail delay with very long delays. - libpam: fixed potential infinite recursion with includes. - libpam: implemented string to number conversions validation when parsing controls in configuration. - pam_access: added quiet_log option. - pam_access: fixed truncation of very long group names. - pam_canonicalize_user: new module to canonicalize user name. - pam_echo: fixed file handling to prevent overflows and short reads. - pam_env: added support of '\' character in environment variable values. - pam_exec: allowed expose_authtok for password PAM_TYPE. - pam_exec: fixed stack overflow with binary output of programs. - pam_faildelay: implemented parameter ranges validation. - pam_listfile: changed to treat \r and \n exactly the same in configuration. - pam_mkhomedir: hardened directory creation against timing attacks. - Please note that using *at functions leads to more open file handles during creation. - pam_namespace: fixed potential local DoS (CVE-2024-22365). - pam_nologin: fixed file handling to prevent short reads. - pam_pwhistory: helper binary is now built only if SELinux support is enabled. - pam_pwhistory: implemented reliable usernames handling when remembering passwords. - pam_shells: changed to allow shell entries with absolute paths only. - pam_succeed_if: fixed treating empty strings as numerical value 0. - pam_unix: added support of disabled password aging. - pam_unix: synchronized password aging with shadow. - pam_unix: implemented string to number conversions validation. - pam_unix: fixed truncation of very long user names. - pam_unix: corrected rounds retrieval for configured encryption method. - pam_unix: implemented reliable usernames handling when remembering passwords. - pam_unix: changed to always run the helper to obtain shadow password entries. - pam_unix: unix_update helper binary is now built only if SELinux support is enabled. - pam_unix: added audit support to unix_update helper. - pam_userdb: added gdbm support. - Multiple minor bug fixes, portability fixes, documentation improvements, and translation updates. - The following patches are obsolete with the update: - pam_access-doc-IPv6-link-local.patch - pam_access-hostname-debug.patch - pam_shells-fix-econf-memory-leak.patch - pam_shells-fix-econf-memory-leak.patch - disable-examples.patch - pam-login_defs-check.sh: adjust checksum, SHA_CRYPT_MAX_ROUNDS is no longer used. ==== pam-full-src ==== Version update (1.5.3 -> 1.6.0) - Add post 1.6.0 release fixes for pam_env and pam_unix: - pam_env-fix-enable-vendordir-fallback.patch - pam_env-fix_vendordir.patch - pam_env-remove-escaped-newlines.patch - pam_unix-fix-password-aging-disabled.patch - Update to version 1.6.0 - Added support of configuration files with arbitrarily long lines. - build: fixed build outside of the source tree. - libpam: added use of getrandom(2) as a source of randomness if available. - libpam: fixed calculation of fail delay with very long delays. - libpam: fixed potential infinite recursion with includes. - libpam: implemented string to number conversions validation when parsing controls in configuration. - pam_access: added quiet_log option. - pam_access: fixed truncation of very long group names. - pam_canonicalize_user: new module to canonicalize user name. - pam_echo: fixed file handling to prevent overflows and short reads. - pam_env: added support of '\' character in environment variable values. - pam_exec: allowed expose_authtok for password PAM_TYPE. - pam_exec: fixed stack overflow with binary output of programs. - pam_faildelay: implemented parameter ranges validation. - pam_listfile: changed to treat \r and \n exactly the same in configuration. - pam_mkhomedir: hardened directory creation against timing attacks. - Please note that using *at functions leads to more open file handles during creation. - pam_namespace: fixed potential local DoS (CVE-2024-22365). - pam_nologin: fixed file handling to prevent short reads. - pam_pwhistory: helper binary is now built only if SELinux support is enabled. - pam_pwhistory: implemented reliable usernames handling when remembering passwords. - pam_shells: changed to allow shell entries with absolute paths only. - pam_succeed_if: fixed treating empty strings as numerical value 0. - pam_unix: added support of disabled password aging. - pam_unix: synchronized password aging with shadow. - pam_unix: implemented string to number conversions validation. - pam_unix: fixed truncation of very long user names. - pam_unix: corrected rounds retrieval for configured encryption method. - pam_unix: implemented reliable usernames handling when remembering passwords. - pam_unix: changed to always run the helper to obtain shadow password entries. - pam_unix: unix_update helper binary is now built only if SELinux support is enabled. - pam_unix: added audit support to unix_update helper. - pam_userdb: added gdbm support. - Multiple minor bug fixes, portability fixes, documentation improvements, and translation updates. - The following patches are obsolete with the update: - pam_access-doc-IPv6-link-local.patch - pam_access-hostname-debug.patch - pam_shells-fix-econf-memory-leak.patch - pam_shells-fix-econf-memory-leak.patch - disable-examples.patch - pam-login_defs-check.sh: adjust checksum, SHA_CRYPT_MAX_ROUNDS is no longer used. ==== python-kiwi ==== Version update (9.25.22 -> 9.25.19)

1 0

openSUSE Release Engineering meeting 24.02.2024
by Lubos Kocman 24 Jan '24

24 Jan '24

How to join the meeting? https://calendar.opensuse.org/teams/release/events/opensuse_release_enginee… All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting ## Attendees DimStar, lkocman, ana, GuillaumeG, DocB, maxlin ## Leap https://news.opensuse.org/2024/01/15/clear-course-is-set-for-os-leap/ Best review/feedback to our Leap 16 article so far https://www.youtube.com/watch?v=rhYax00Wr7o&t=2s&pp=ygUPbGVhcCAxNiBpcyBiYWNr ALP Marble 6.0 was synced to OBS, I'll be working on the initial setup. https://build.opensuse.org/project/subprojects/openSUSE:Leap:Micro:6.0 de-branding pending Waiting for current rebuild of Leap 15.6 to have a usable desktop again. In person discussion with Granite PM, on Thursday Many staged 3.11 python-submissions + SDL currently blocking progress on GNUHealth 4.4. All submitted we just need to wait for staging project to be merged. ## openSUSE Tumbleweed (ana) openSUSE:Factory build fail stats: 76 failed 11 unresolvable (last week 73 failed, 13 unresolvable) https://tinyurl.com/ysy4nnnz Many changes going on, some of the very most relevant updates: * Linux Kernel 6.7.1: beware: nvidia open driver G06 failed to build: https://bugzilla.opensuse.org/show_bug.cgi?id=1219117 * ed 1.20 * pam 1.60 * xorg-server 21.1.11 * gnutls 3.8.3 * erlang 26.2.1 * rpm-config-SUSE: enable full ksym() dependencies in Tumbleweed (bsc#1215015) Updates waiting / work still in progress: * libxml 2.12.1 (lots of work to do), libzypp and some packages got fixed, on hold * dbus-broker as default dbus session manager, now everything builds, two openQA checks failing. * RPM 4.19.1, everything builds now, have a cycle to address (cmake to ring0 at least) and some issues with user/groups that need package updates . See https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… * Update to openssl 3.2.0, stuck until python-M2Crypto is fixed * Additional Python 3.12 and setuptools modules in Staging:K, blocked by RPM 4.19.1 * Ruby 3.3, waiting minor installation-images fix * Mesa 23.3.3, should be accepted today * c-ares: after nodejs updates, there is an issues with a new package cycle * QEMU 8.2.0. new build requires FTBFS * Removal of terraform packages (replaced by tofu, already available) * cmake, macro changes (DOCDIR MANDIR INFODIR) make 7 packages FBTFS ## Richard (Aeon+botmaster) Not available ## Bernhard (Slowroll) * publishing was broken for 12d - fixed now * first openQA test WIP * next major version bump expected in 1-3 weeks ## Max Leap 15.6 - build stats in Backports: 59(was 36) faild, 63 unresolvable(was 14) * gnome/X crashes at Build588.1 - bsc#1218895, this is because of incomplete GNOME 45 stack from SLE side, this issue should be fixed in the current SLE15 repo snapshot * Got Qt5 5.15.12 and Qt6 6.6.1 from SLE15, the remaining qt5/qt6 package in Backports need a update as well, working on that, and have talked to Antonio * Asked an instantiate rebuild on libqt5xdg in SLE15 SP6 project for fixing lxqt package unresolvables due to updated qt5 [DONE] * Merged many python application update(ver. 3.6 to 3.11) into Backports, this brings a lot of build unresolvables * FYI: There is entire staging with 3.11 packages in SLES 15 SP6 that currently blocks GNU Health 4.4 Axel: Can you point me to that? * Talk to Adrian about product-buidler picks arch-dependent ones over than noarch ones even though the noarch ones has a greater version number, an possible solution is set onlyarch=noarch for those package, I tweaked skippkg-finder and 000package-groups, the paragraph below has been added to NON_FTP_PACKAGES file, hope this solve the problem, will know in the next pkglistgen round <group name="NON_FTP_PACKAGES_only_noarch"> <conditional name="only_noarch"/> <packagelist relationship="requires"> <package name="MozillaFirefox-devel"/> </packagelist> </group> ## Guillaume - Arm * Tumbleweed: - Rolling - WIP: Still some packages built without PAC/BTI, two main reasons: * assembler files without PAC/BTI (usually reported upstream, e.g. openssl, gnutls, etc) * Packages built without distro flags (usually fixed in spec file) - rpmlint: https://rpmlint.opensuse.org/ * we noticed that rpmlint does not check anymore for packages built without distro %{optflags}. We should add it back. https://bugzilla.opensuse.org/show_bug.cgi?id=1217840 - WIP to get Tumbleweed to run on Lenovo X13s: * Main pieces in place. Latest status available at https://en.opensuse.org/HCL:ThinkpadX13s * Leap 15.6/Backports SP6: - No update * WSL: x86_64 is fetched from Microsoft Strore for Tumbleweed image instead of arm64. lkocman: Ah thank you. I'll share that with team. Contents of the image are x86_64. Possible workaround would be a second application e.g. Leap 15 aarch64, Tumbleweed aarch64 etc ... ## Sarah - s390x Not available ## Doug * FOSDEM * Seats still available on the bus to from NUE. email ddemaio(a)opensuse.org * Waiting on a few more marketing items * Big thank you to GNU Health extended invitation for openSUSE to be able share the openSUSE Booth on Saturday Many thanks Axel! * Sunday in distro devroom * GSoC * Application now open. Deadline Feb. 6 at 18:00 UTC * Mini-Summit * No update. * openSUSE Conference * 16 Registrations, 13 Submissions, 7 Hours * Still need signed contract with Z-Bau * Meeting to discuss Geekos taking over TSP set for Jan. 25 * Had to reschedule twice * Slowroll article released * Call for Hosts article released * Creative Freedom Summit happening yesterday, today and tomorrow. (creativefreedomsummit.com) * Congreso esLibre plan to have openSUSE booth 24 - 25 May in Valencia, Spain. * Contact ddemaio to get connect with booth organizers * Meeting with new openSUSE Board on Monday Static * oSC24 dates June 27 to 29 reserved (Thursday - Saturday) * Open 4 Business June 26 between 2 - 6 p.m. at Franken Campus * FOSDEM Bus Connect ddemaio(a)opensuse.org if you're in the Nuremberg area * AI topics (static) ## Dirk Not available ## Wolfgang (Package Hub), Scott Bahling Not available ## Maintenance team (Marcus or Maurizio (m4u)) Not available ## Adrian - OBS The new composer/product builder discussion was covered in Max's section. ## Simon (Leap Replacement/Linarite) Not available ## Open Floor

1 0

Distrobox images not allowing 'sudo' to be used
by Jim Henderson 23 Jan '24

23 Jan '24

We've got a forum user using Distrobox with an arch image who is getting an error that '<username> is not in sudoers' file. I found a thread a couple months ago on Reddit reporting this as well, and it seemed to be thought that this was likely an issue with the arch image. But I'm trying this with Tumbleweed as well (both as 'host' and 'guest'), and sudo is prompting for the root password, but isn't accepting it. I've tried just about everything I can think of for a password, and it's simply not accepting anything that would be valid on this system. I had been able to run sudo within distrobox previously (used it to install software with zypper, for example) - but I had been using an older image that I since have gotten rid of for the current one. Creating the container with '--absolutely-disable-root-password-i-am- really-positively-sure' lets sudo work, but is not a secure workaround. I'm wondering if this could be related to config files moving to /usr/etc from /etc. Any tips on how to troubleshoot would be appreciated. -- Jim Henderson Please keep on-topic replies on the list so everyone benefits

4 7

New Tumbleweed snapshot 20240122 released!
by Dominique Leuenberger 23 Jan '24

23 Jan '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: NetworkManager-applet (1.34.0 -> 1.36.0) abseil-cpp dracut (059+suse.533.g5a7cf9fa -> 059+suse.538.ge7a5cff9) emacs-flim fcitx-chewing fcitx-configtool fcitx-zhuyin grub2 ibus-libzhuyin ibus-m17n libvpl (2023.4.0 -> 2.10.1) pipewire python-Pillow (10.1.0 -> 10.2.0) python-kiwi (9.25.19 -> 9.25.22) sdbootutil (1+git20231221.42797ab -> 1+git20240118.7e744b4) systemd tevent (0.15.0 -> 0.16.0) util-linux util-linux-systemd yast2-trans (84.87.20240112.f631673f01 -> 84.87.20240120.54f4b9f06a) === Details === ==== NetworkManager-applet ==== Version update (1.34.0 -> 1.36.0) Subpackages: NetworkManager-connection-editor NetworkManager-connection-editor-lang - Update to version 1.36.0: + Support WiFi's cloned-mac "stable-ssid". + Update translations. ==== abseil-cpp ==== - fix build for non-SUSE distributions ==== dracut ==== Version update (059+suse.533.g5a7cf9fa -> 059+suse.538.ge7a5cff9) - Update to version 059+suse.538.ge7a5cff9: * fix(livenet): split `imgsize` calculation to avoid misleading error message * fix(livenet): check also `content-length` from live image header * fix(livenet): propagate error code * fix(dracut): correct regression with multiple `rd.break=` options ==== emacs-flim ==== - Use %patch0 to fix compilation with rpm-4.19 ==== fcitx-chewing ==== - Use %patch0 to fix compilation with rpm-4.19 ==== fcitx-configtool ==== - Use %patch0 to fix compilation with rpm-4.19 ==== fcitx-zhuyin ==== - Use %patch0 to fix compilation with rpm-4.19 ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - allow to boot memtest86 if stored in /usr/lib/memtest86+ * SR#1071109 can then work ==== ibus-libzhuyin ==== - Fixes for %_ibus_libexecdir moving to %_libexecdir (bsc#1174075) ==== ibus-m17n ==== - Use %_libexecdir as the basis of %_ibus_libexecdir (bsc#1174075) ==== libvpl ==== Version update (2023.4.0 -> 2.10.1) - u_buildfix-i586.patch * fixed build on i586 - Update to version 2.10.1 + Changed * Project name to IntelÂ® Video Processing Library (IntelÂ® VPL) * Project versioning scheme to align with library and API version + Added * IntelÂ® VPL specification and associated build scripts + Known Issues * sample_decode may report "DeliverOutput return error = -1" when run using -r option * vpl-infer example will fail to load model if built with CMake version higher than 3.25.3 on Windows - Add libva build dep ==== pipewire ==== Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-jack pipewire-lang pipewire-libjack-0_3 pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Add patches from upstream to fix building the package in Factory with libcamera 0.2.0: * 0001-spa-libcamera-use-CameraConfigurationorientation.patch * 0002-spa-libcamera-bump-minimum-supported-version-to-0.2.0.patch ==== python-Pillow ==== Version update (10.1.0 -> 10.2.0) - Update to 10.2.0: * Add ``keep_rgb`` option when saving JPEG to prevent conversion of RGB colorspace * Trim glyph size in ImageFont.getmask() * Deprecate IptcImagePlugin helpers * Allow uncompressed TIFF images to be saved in chunks * Concatenate multiple JPEG EXIF markers * Changed IPTC tile tuple to match other plugins * Do not assign new fp attribute when exiting context manager * Support arbitrary masks for uncompressed RGB DDS images * Support setting ROWSPERSTRIP tag * Apply ImageFont.MAX_STRING_LENGTH to ImageFont.getmask() * Optimise ``ImageColor`` using ``functools.lru_cache`` * Restricted environment keys for ImageMath.eval() (CVE-2023-50447, bsc#1219048) * Optimise ``ImageMode.getmode`` using ``functools.lru_cache`` * Fix incorrect color blending for overlapping glyphs * Attempt memory mapping when tile args is a string * Fill identical pixels with transparency in subsequent frames when saving GIF * Corrected duration when combining multiple GIF frames into single frame * Handle disposing GIF background from outside palette * Seek past the data when skipping a PSD layer * Import plugins relative to the module * Translate encoder error codes to strings; deprecate ``ImageFile.raise_oserror()`` * Support reading BC4U and DX10 BC1 images * Optimize ImageStat.Stat.extrema * Handle pathlib.Path in FreeTypeFont * Added support for reading DX10 BC4 DDS images * Optimized ImageStat.Stat.count * Correct PDF palette size when saving * Fixed closing file pointer with olefile 0.47 * Raise ValueError when TrueType font size is not greater than zero * If absent, do not try to close fp when closing image * Allow configuring JPEG restart marker interval on save * Decrement reference count for PyObject * Implement ``streamtype=1`` option for tables-only JPEG encoding * If save_all PNG only has one frame, do not create animated image * Fixed frombytes() for images with a zero dimension - Switch to autosetup and pyproject macros. ==== python-kiwi ==== Version update (9.25.19 -> 9.25.22) - Disable workflow runs from master The following github actions will be disabled from master because they are expected to run from main: - ci-publish-pages.yml - ci-publish-to-pypi.yml - ci-update-build-tests.yml - Bump version: 9.25.21 â 9.25.22 - Fixed regression in GRUB_SERIAL_COMMAND setup The condition to write the serial line setup was broken. This commit fixes it. Related to Issue #2419 - Fixed grub terminal setup The grub terminal setup is divided into the setting for the output and the input console. For both settings different parameters exists. So far kiwi did not differentiate between the two parts of the console setup and that could lead to a wrong setting if only one value is provided in kiwi's console= attribute which lead to the grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm grub takes this for both input and output and it's obviously wrong for the input. To make this less error prune the kiwi code changes with this commit to set GRUB_TERMINAL_INPUT and GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity checks on the provided values if they are applicable. The information for setting up the console in the schema stays untouched though. That's because it's used for all bootloaders and also because grub supports multiple values for the console in/out setting in one GRUB_TERMINAL variable even though kiwi does no longer use it. To make this clear for the users also the documentation for the console attribute setup has been updated. If we want to wish two distinct attributes for input and output console settings a schema change and also differentiation between bootloaders is needed and that I only see for the kiwi-10 branch if at all. This Fixes #2419 - Fix tox.ini python 3.12 unit target did not specify a 3.12 interpreter - Fix overwrite of kiwi_oemunattended In case rd.kiwi.oem.installdevice is set, there is an overwrite of the kiwi_oemunattended setting. However the variable was set in local scope of a function and therefore the change was not effective in other methods which also evaluates this variable. This commit fixes it such that the overwrite happens in the early initialize method which provides the environment for all code running in the dracut module. This is related to jira#PED-7180 - Ensure setfiles is detected inside the image-root We do not actually use setfiles from the host, we use it from the image root we create for the image build. Thus, we should look in the image root instead of on the host system. This prevents us from incorrectly detecting that setfiles is not available for setting SELinux contexts. Fixes: https://github.com/OSInside/kiwi/issues/2414 Fixes: 2a22901ddd11ae23b6724b5e1aaa4261f219ccb6 - Use xdist on the CI to speed up the test runs - Add unit test job using python 3.12 - Only run the job for this python environment - [ci] Switch runner to ubuntu-latest - Add missing raw string identifier infront of regexes - Allow target_blocksize to be available for kis image - Bump version: 9.25.20 â 9.25.21 - Cleanup tox targets Align tox targets with github workflows and fix targets not associated with a specific python version to use the python3 version installed on the host - Bump version: 9.25.19 â 9.25.20 - Fixed unit tests for parallel invokation - Make sure selinux policy is effectively applied setup_selinux_file_contexts is now called after the config.sh script. This makes sure that eventual policy related changes done in the optional config.sh are covered by a late setfiles call. In addition setup_selinux_file_contexts is called again at the end of any chroot based script hook. So we assume that any optional script target can change the system in a way that a new setfiles call might be required. It can happen that setfiles is called more often than required but as we cannot know what custom scripts does, it's better to call it more often compared to not often enough. This Fixes bsc#1210604 - Decrease image size for encrypted integration test Encrypted images do not compress well, therefore the size should be smaller such that we don't produce monsters - Use ext4 for rawhide integration test - Fixed typo in error message - package: Drop unused xorriso dep on dracut-kiwi-live subpackage We do not actually use xorriso anywhere inside of the dracut module, nor do we pull in any utilities from the xorriso package into the generated initramfs anyway. Fixes: https://github.com/OSInside/kiwi/issues/2404 - Set kpartx as default mapper tool for s390 Some time ago we moved the default partition mapper from kpartx to partx to reduce a package dependencies. However, on the s390 architecture partx does not work proplerly on e.g DASD devices. Thus the default mapper tool for this architecture will change to kpartx with this PR ==== sdbootutil ==== Version update (1+git20231221.42797ab -> 1+git20240118.7e744b4) Subpackages: sdbootutil-rpm-scriptlets sdbootutil-snapper - Update to version 1+git20240118.7e744b4: * Bind mount /etc inside the snapshot ==== systemd ==== Subpackages: libsystemd0 libsystemd0-32bit libudev1 systemd-32bit systemd-boot systemd-container systemd-coredump systemd-lang udev - remove pam-config call from post scriptlet of systemd-32bit * the full package already does that ==== tevent ==== Version update (0.15.0 -> 0.16.0) Subpackages: libtevent0 libtevent0-32bit python3-tevent - Update to version 0.16.0 * the epoll backend is no longer limited to 2 event handlers per low level fd. * finally add support for TEVENT_FD_ERROR ==== util-linux ==== Subpackages: libblkid1 libfdisk1 libmount1 libsmartcols1 libuuid1 util-linux-lang - Minor multibuild fixes (PED-307): * Restore /bin symlinks in util-linux-systemd if building with ul_extra_bin_sbin. * Restore compatibility supplements and split-provides. * Update safety check instructions. ==== util-linux-systemd ==== - Minor multibuild fixes (PED-307): * Restore /bin symlinks in util-linux-systemd if building with ul_extra_bin_sbin. * Restore compatibility supplements and split-provides. * Update safety check instructions. ==== yast2-trans ==== Version update (84.87.20240112.f631673f01 -> 84.87.20240120.54f4b9f06a) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20240120.54f4b9f06a: * New POT for text domain 'sap-installation-wizard'. * Translated using Weblate (Indonesian) * Translated using Weblate (Indonesian) * Translated using Weblate (Indonesian)

1 0

New Tumbleweed snapshot 20240121 released!
by Dominique Leuenberger 22 Jan '24

22 Jan '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: apache2-mod_php8 (8.2.14 -> 8.2.15) ibus ibus_gtk4 libstorage-ng (4.5.174 -> 4.5.175) libvirt (9.10.0 -> 10.0.0) php8 (8.2.14 -> 8.2.15) python-SQLAlchemy (2.0.24 -> 2.0.25) python-Twisted python-anyio (3.7.1 -> 4.2.0) python-authheaders (0.16.0 -> 0.16.1) python-libvirt-python (9.10.0 -> 10.0.0) python-service_identity (23.1.0 -> 24.1.0) python-trio (0.22.0 -> 0.23.2) qca-qt5 (2.3.7+git12 -> 2.3.8+git1) qpdf (11.7.0 -> 11.8.0) sssd (2.9.3 -> 2.9.4) virt-manager === Details === ==== apache2-mod_php8 ==== Version update (8.2.14 -> 8.2.15) - version update to 8.2.15 * This is a bug fix release. - modified patches % php-ar-flags.patch (refreshed) % php-build-reproducible-phar.patch (refreshed) ==== ibus ==== Subpackages: ibus-dict-emoji ibus-gtk ibus-gtk3 ibus-lang libibus-1_0-5 typelib-1_0-IBus-1_0 - Use %_libexecdir as the basis of %_ibus_libexecdir (bsc#1174075) ==== ibus_gtk4 ==== - Use %_libexecdir as the basis of %_ibus_libexecdir (bsc#1174075) ==== libstorage-ng ==== Version update (4.5.174 -> 4.5.175) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - Translated using Weblate (Indonesian) (bsc#1149754) - 4.5.175 ==== libvirt ==== Version update (9.10.0 -> 10.0.0) Subpackages: libvirt-client libvirt-daemon-common libvirt-daemon-config-network libvirt-daemon-driver-interface libvirt-daemon-driver-libxl libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-lock libvirt-daemon-log libvirt-daemon-plugin-lockd libvirt-daemon-qemu libvirt-daemon-xen libvirt-libs - Add temporary build fix for ppc64le bsc#1218823 - Update to libvirt 10.0.0 - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432, jsc#PED-6851 - Many incremental improvements and bug fixes, see https://libvirt.org/news.html#v10-0-0-2024-01-15 ==== php8 ==== Version update (8.2.14 -> 8.2.15) Subpackages: php8-cli php8-ctype php8-dom php8-gd php8-gettext php8-iconv php8-mbstring php8-mysql php8-openssl php8-pdo php8-sqlite php8-tokenizer php8-xmlreader php8-xmlwriter - version update to 8.2.15 * This is a bug fix release. - modified patches % php-ar-flags.patch (refreshed) % php-build-reproducible-phar.patch (refreshed) ==== python-SQLAlchemy ==== Version update (2.0.24 -> 2.0.25) - update to 2.0.25: * preliminary support for Python 3.12 pep-695 type alias structures * see https://docs.sqlalchemy.org/en/20/changelog/changelog_20.html#change-2.0.25 ==== python-Twisted ==== Subpackages: python311-Twisted python311-Twisted-tls - Add twisted-pr12054-testinvokationpy3.12.1.patch * Pull request gh#twisted/twisted#12054 fixes failing tests on python312 gh#twisted/twisted#12052 - Fix rpmlint errors ==== python-anyio ==== Version update (3.7.1 -> 4.2.0) - update to 4.2.0: * Add support for byte-based paths in connect_unix, create_unix_listeners, create_unix_datagram_socket, and create_connected_unix_datagram_socket. (PR by Lura Skye) * Enabled the Event and CapacityLimiter classes to be instantiated outside an event loop thread * Broadly improved/fixed the type annotations. Among other things, many functions and methods that take variadic positional arguments now make use of PEP 646 TypeVarTuple to allow the positional arguments to be validated by static type checkers. These changes affected numerous methods and functions, including: * anyio.run() * TaskGroup.start_soon() * anyio.from_thread.run() * anyio.from_thread.run_sync() * anyio.to_thread.run_sync() * anyio.to_process.run_sync() * BlockingPortal.call() * BlockingPortal.start_task_soon() * BlockingPortal.start_task() (also resolves #560) * Fixed various type annotations of anyio.Path to match Typeshed: * anyio.Path.__lt__() * anyio.Path.__le__() * anyio.Path.__gt__() * anyio.Path.__ge__() * anyio.Path.__truediv__() * anyio.Path.__rtruediv__() * anyio.Path.hardlink_to() * anyio.Path.samefile() * anyio.Path.symlink_to() * anyio.Path.with_segments() (PR by Ganden Schaffner) * Fixed adjusting the total number of tokens in a CapacityLimiter on asyncio failing to wake up tasks waiting to acquire the limiter in certain edge cases (fixed with help from Egor Blagov) * Fixed loop_factory and use_uvloop options not being used on the asyncio backend * Fixed cancellation propagating on asyncio from a task group to child tasks if the task hosting the task group is in a shielded cancel scope - update to 4.1.0: * Adapted to API changes made in Trio v0.23 * Removed a checkpoint when exiting a task group * Renamed the ``cancellable`` argument in ``anyio.to_thread.run_sync()`` to * ``abandon_on_cancel`` (and deprecated the old parameter name) * Added support for voluntary thread cancellation via * ``anyio.from_thread.check_cancelled()`` * Bumped minimum version of trio to v0.23 * Exposed the ``ResourceGuard`` class in the public API * Fixed ``RuntimeError: Runner is closed`` when running higher- scoped async generator fixtures in some cases * Fixed discrepancy between ``asyncio`` and ``trio`` where reraising a cancellation exception in an ``except*`` block would incorrectly bubble out of its cancel scope * Any exceptions raising out of a task groups are now nested inside an ``ExceptionGroup`` (or ``BaseExceptionGroup`` if one or more ``BaseException`` were included) * Fixed task group not raising a cancellation exception on asyncio at exit if no child tasks were spawned and an outer cancellation scope had been cancelled before * Ensured that exiting a ``TaskGroup`` always hits a yield point, regardless of whether there are running child tasks to be waited on * On asyncio, cancel scopes will defer cancelling tasks that are scheduled to resume with a finished future * On asyncio and Python 3.9/3.10, cancel scopes now only suppress cancellation exceptions if the cancel message matches the scope * Task groups on all backends now raise a single cancellation exception when an outer cancel scope is cancelled, and no exceptions other than cancellation exceptions are raised in the group * **BACKWARDS INCOMPATIBLE** Changes the pytest plugin to run all tests and fixtures in the same task, allowing fixtures to set context variables for tests and other fixtures ``anyio.Path.relative_to()`` and * ``anyio.Path.is_relative_to()`` to only accept one argument, as passing multiple arguments is deprecated as of Python 3.12 * **BACKWARDS INCOMPATIBLE** Dropped support for spawning tasks from old-style coroutine functions (``(a)asyncio.coroutine``) * **BACKWARDS INCOMPATIBLE** The ``policy`` option on the ``asyncio`` backend was changed to ``loop_factory`` to accommodate ``asyncio.Runner`` * Dropped support for Python 3.7 * Added support for Python 3.12 * Fixed ``from_thread.run`` failing when used to call sniffio- dependent functions on asyncio from a thread running trio or curio * Fixed deadlock when using ``from_thread.start_blocking_portal(backend="asyncio")`` * in a thread running trio or curio (PR by Ganden Schaffner) * Improved type annotations: * The ``item_type`` argument of ``create_memory_object_stream`` was deprecated. * To indicate the item type handled by the stream, use * ``create_memory_object_stream[T_Item]()`` instead. Type checking should no longer fail when annotating memory object - drop tests-test_fileio.py-don-t-follow-symlinks-in-dev.patch (upstream) ==== python-authheaders ==== Version update (0.16.0 -> 0.16.1) - update to 0.16.1: * Clean up unnecessary escaping of semi-colons in test data and adjust related code to resolve SyntaxWarning with Python 3.12 (#29) * Set python_requires >3.7 and clean up cruft in setup.py * Use importlib.resources instead of importlib_resources - switch to PEP517 build ==== python-libvirt-python ==== Version update (9.10.0 -> 10.0.0) - Update to 10.0.0 - Add all new APIs and constants in libvirt 10.0.0 - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432, jsc#PED-6851 ==== python-service_identity ==== Version update (23.1.0 -> 24.1.0) - update to 24.1.0: * If a certificate doesn't contain any `subjectAltName`s, we now raise `service_identity.CertificateError` instead of `service_identity.VerificationError` to make the problem easier to debug. ==== python-trio ==== Version update (0.22.0 -> 0.23.2) - We don't need isort for the tests: Avoid it for Ring1 - Clean dependencies - update to 0.23.2: * TypeVarTuple is now used to fully type :meth:`nursery.start_soon() <trio.Nursery.start_soon>`, :func:`trio.run()`, :func:`trio.to_thread.run_sync()`, and other similar functions accepting (func, *args). This means type checkers will be able to verify types are used correctly. :meth:`nursery.start() <trio.Nursery.start>` is not fully typed yet however. (#2881) * Make pyright recognize :func:`open_memory_channel` as generic. (#2873) backlink Unknown interpreted text role "func". * Make pyright recognize :func:`open_memory_channel` as generic. * Unknown interpreted text role "func". * Moved the metadata into PEP 621-compliant :file:`pyproject.toml`. (#2860) - update to 0.23.1: * Don't crash on import in Anaconda interpreters. * Add type hints. * When exiting a nursery block, the parent task always waits for child tasks to exit. This wait cannot be cancelled. However, previously, if you tried to cancel it, it *would* inject a `Cancelled` exception, even though it wasn't cancelled. Most users probably never noticed either way, but injecting a `Cancelled` here is not really useful, and in some rare cases caused confusion or problems, so Trio no longer does that. * If called from a thread spawned by `trio.to_thread.run_sync`, `trio.from_thread.run` and `trio.from_thread.run_sync` now reuse the task and cancellation status of the host task; * this means that context variables and cancel scopes naturally propagate 'through' threads spawned by Trio. You can also use `trio.from_thread.check_cancelled` to efficiently check for cancellation without reentering the Trio thread. * :func:`trio.lowlevel.start_guest_run` now does a bit more setup of the guest run before it returns to its caller, so that the caller can immediately make calls to :func:`trio.current_time`, :func:`trio.lowlevel.spawn_system_task`, :func:`trio.lowlevel.current_trio_token`, etc. * When a starting function raises before calling :func:`trio.TaskStatus.started`, :func:`trio.Nursery.start` will no longer wrap the exception in an undocumented :exc:`ExceptionGroup`. * To better reflect the underlying thread handling semantics, the keyword argument for `trio.to_thread.run_sync` that was previously called ``cancellable`` is now named ``abandon_on_cancel``. * The old ``cancellable`` name is now deprecated. - Update to 0.22.2: * Fix PermissionError when importing trio due to trying to access pthread. * Breaking change: Timeout functions now raise ValueError if passed math.nan. This includes trio.sleep, trio.sleep_until, trio.move_on_at, trio.move_on_after, trio.fail_at and trio.fail_after. * Added support for naming threads created with trio.to_thread.run_sync, requires pthreads so is only available on POSIX platforms with glibc installed. * trio.socket.socket now prints the address it tried to connect to upon failure. * Fixed a crash that can occur when running Trio within an embedded Python interpreter, by handling the TypeError that is raised when trying to (re-)install a C signal handler. * Fix sniffio.current_async_library() when Trio tasks are spawned from a non-Trio context (such as when using trio-asyncio). Previously, a regular Trio task would inherit the non-Trio library name, and spawning a system task would cause the non-Trio caller to start thinking it was Trio. * Documented that Nursery.start_soon does not guarantee task ordering. ==== qca-qt5 ==== Version update (2.3.7+git12 -> 2.3.8+git1) Subpackages: libqca-qt5-2 qca-qt5-plugins - Update to version 2.3.8+git1: * CI: Enable Android builds - There's a v2.3.8 tag now so the version matches properly again ==== qpdf ==== Version update (11.7.0 -> 11.8.0) - Temporary workaround for test fuzz-16214 (bsc#1218902) * Add openssl3_2-fuzz-16214.patch - Update to 11.8.0: * Bug fixes: - When flattening annotations, preserve hyperlinks and other annotations that inherently have no appearance information. * CLI Enhancements - Introduce x in the numeric range syntax to allow exclusion of pages within a page range. See Page Ranges for details. - Support comma-separated numeric values with --collate to select different numbers of pages from different groups. - Add --set-page-labels option to completely override page labels in the output. * Library Enhancements - Add API to support --set-page-labels: - QPDFJob::Config::setPageLabels - pdf_page_label_e enumerated type - QPDFPageLabelDocumentHelper::pageLabelDict - Improve file recovery logic to better handle files with cross-reference streams. This should enable qpdf to recover some files that it would previously have reported âunable to find trailer dictionary.â ==== sssd ==== Version update (2.9.3 -> 2.9.4) Subpackages: libsss_certmap0 libsss_idmap0 libsss_nss_idmap0 sssd-krb5-common sssd-ldap - Update to release 2.9.4 * Fixes a crash when PAM passkey processing incorrectly handles non-passkey data. * Fixed group membership handling when members are coming from different forest domains and using ldap token groups is prohibited. * Files provider was erroneously taking into consideration ``local_auth_policy`` config option, thus breaking smartcard authentication of local user in setups that did not explicitly specify this option. This is now fixed. ==== virt-manager ==== Subpackages: virt-install virt-manager-common - bsc#1218983 - [SLE15SP6] virt-manager:test testCLI0264virt_xml fails with libvirt 10.0.0. Disable this test for now. virt-manager.spec

1 0

Tumbleweed x86_64 64-bit architecture only possible?
by Obs Geeko 22 Jan '24

22 Jan '24

Hello, I found x86_64 gcc13 requires glibc-32bit and glibc-devel-32bit, which are imported from i586 arch, to build. May I ask is it possible to have pure 64-bit x86_64 only Tumbleweed? If we still need i586 together with x86_64 arch in Tumbleweed to work, what is the differences between openSUSE:Factory i586 arch and openSUSE:Factory:LegacyX86 i586 arch, are they the same in most parts? Thank you. Best Regards

6 8