January 2024 - openSUSE Factory - openSUSE Mailing Lists

[opensuse-factory] Leap 42.3 Build 0312 released!
by Ludwig Nussel 25 Apr '24

25 Apr '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&version=42.3&bui… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Distribution&q… When you reply to discuss some issues, make sure to change the subject. Please use the test plan at https://docs.google.com/spreadsheets/d/1AGKijKpKiJCB616-bHVoNQuhWHpQLHPWCb3… to record your testing efforts and use bugzilla to report bugs. Packages changed: biosdevname btrfsmaintenance conduit gconf2-branding-openSUSE (42.1 -> 42.3) ibus kactivitymanagerd kde-user-manager kernel-source (4.4.73 -> 4.4.74) libxml2 libzypp (16.12.0 -> 16.13.0) lightdm marble mc plasma5-integration plasma5-openSUSE postgresql (9.4 -> 9.6) python-coverage (3.7.1 -> 4.3.4) ucode-intel (20160714 -> 20170511) yast2-bootloader (3.2.22 -> 3.2.23) yast2-ntp-client (3.2.9 -> 3.2.12) === Details === ==== biosdevname ==== - Duplicate naming of SRIOV VFs by biosdevname when VPD_DCM Strings are present in VFs (bsc#1042185) * Add: biosdevname_avoid_duplicates.patch ==== btrfsmaintenance ==== - Require btrfsprogs (bsc#1047226) - update to 0.2 - updated documentation - no hardcoded paths to external utilities - fixed logger name typos for 'journal' target - defrag fixes (sysconfig, find arguments) - Removed patch: balance-typo.patch - Added patch: sysconfig-override-trim.diff - Add balance-typo.patch (bnc#986543) - version 0.1.1 - fix typo and make journal logging target work - cron refresh: remove bashism - Removed patches: * 0003-Add-COPYING-file.patch * 0011-cron-refresh-remove-debuggiong-output.patch - cron script symlinks are not created on first installation (bsc#907343) - add COPYING to package - refresh script: remove extra messages - add uninstall targets - fix refresh service - adjust sysconfig defaults - Add more package dependencies (cron, zypp-plugin) - minor bugfixes - Add supplements(btrfsprogs) - initial version 0.1 ==== conduit ==== Subpackages: conduit-lang - Use python-vobject instead of vobject per python-vobject change in 42.3. ==== gconf2-branding-openSUSE ==== Version update (42.1 -> 42.3) - do not build novell-sound-theme in the gconf2-branding-SLED build to prevent duplicated binaries in openSUSE Leap. The novell-sound-theme is taken from gconf2-branding-SLES sources on both the SLED product and the SLES WE module. bsc#1046099 - bump versions ==== ibus ==== Subpackages: ibus-branding-openSUSE-KDE ibus-gtk ibus-gtk-32bit ibus-gtk3 ibus-lang libibus-1_0-5 libibus-1_0-5-32bit python-ibus typelib-1_0-IBus-1_0 - Update ibus.spec: copy auto-start files to SOURCE directory to enable modifications before compile. - Add ibus-disable-engines-preload-in-GNOME.patch: Disable load preload-engines actions in SLE, which is unnecessary for mono IMF in SLE and may cause CJK user login failed (bsc#1036729). ==== kactivitymanagerd ==== - Recommend -lang package ==== kde-user-manager ==== - Recommend -lang package ==== kernel-source ==== Version update (4.4.73 -> 4.4.74) Subpackages: kernel-default kernel-default-devel kernel-devel kernel-docs kernel-macros kernel-syms - Delete patches.kabi/kabi-fix-for-kvm-x86-fix-singlestepping-over-syscall. No need for kABI fix yet for Leap 42.3. - commit f0a86d9 - Fix kABI breakage by KVM CVE fix (bsc#1045922). - commit c0308f6 - powerpc/perf: Fix branch event code for power9 (fate#321438, Pending SUSE Kernel Fixes). - commit e954af6 - powerpc: Fix /proc/cpuinfo revision for POWER9 DD2 (bsc#1046789). - commit 444247f - Refresh metadata patches.drivers/ibmvnic-a2-Fix-assignment-of-RX-TX-IRQ-s.patch. - commit be32be9 - drm/i915: Serialize GTT/Aperture accesses on BXT (bsc#1046821). - commit b263fef - Bluetooth: hidp: fix possible might sleep error in hidp_session_thread (bsc#1031784). - Refresh patches.suse/kgr-0008-mark-task_safe-in-some-kthreads.patch. - commit 18c6f3e - KVM: x86: fix singlestepping over syscall (CVE-2017-7518 bsc#1045922). - commit d989643 - nvme/pci: Fix stuck nvme reset (bsc#1043805). - commit 7afe4f0 - Refresh fadump patches to upstream and add metadata patches.arch/powerpc-fadump-add-reschedule-point-while-releasing-memory.patch. patches.arch/powerpc-fadump-avoid-duplicates-in-crash-memory-ranges.patch patches.arch/powerpc-fadump-avoid-holes-in-boot-memory-area-when-fadump-is-registered.patch patches.arch/powerpc-fadump-provide-a-helpful-error-message.patch - commit f0fb5c3 - blacklist.conf: Remove duplicated entries - commit cb960d2 - Remove duplicated blacklist entries and put git-commit tag to patches - commit 12a0cb2 - blacklist.conf: Remove duplicated entry. - commit 561ddb1 - ibmvnic: Fix assignment of RX/TX IRQ's (bsc#1046589). - commit 5fa38bf - blacklist.conf: blacklist 570d8e939801 we do not care about the code in Documentation all that much, do we? - commit 69d5811 - blacklist.conf: blaclist 5380e5644afb it is just not worth backporting without any explicit report where a silently truncated success would lead to a real bug. - commit fc28626 - blacklist.conf: unnecessary patch The bug triggers only upon a malformed descriptor and the comparison is so that our buffer would be too large not too small so no overflow. The device would not work, but it won't anyway. - commit 99f8a16 - Rearrange the previous patches for hpsa and smartpqi to the right position. - commit a1f1f27 - Update patches.fixes/xfs-split-default-quota-limits-by-quota-type.patch (bsc#1040941). Fix the bug nr used. - commit 115ba75 - printk: Correctly handle preemption in console_unlock() (bsc#1046434). - commit 0a3c2a4 - printk/xen: Force printk sync mode when migrating Xen guest (bsc#1043347). - commit e13596b - btrfs: disable possible cause of premature ENOSPC (bsc#1040182) - commit 8bf31da - rbd: make sure pages are freed by libceph (bsc#1045596). - rbd: drop extra rbd_img_request_get (bsc#1045596). - commit c8719f2 - dm-raid: Do not call BUG() in __rdev_sectors() (bsc#1046264). - commit 0b1aab0 - btrfs: Round down values which are written for total_bytes_size (bsc#1043912). - btrfs: Manually implement device_total_bytes getter/setter (bsc#1043912). - commit c4d2eb7 - pipe: cap initial pipe capacity according to pipe-max-size limit (bsc#1045330). - commit 4ee3ec2 - Blacklist drivers/net/ethernet/ibm/emac We do not build the driver. - commit d432b2b - blacklist.conf: this patch breaks the API It disallows some operations that are now allowed - commit 98325c2 - arm64: Update config files. (bsc#1036737) Disable XGENE_PMU. - commit 7bb0115 - Disable Xilinx network drivers (bsc#1046170). - commit 656fc83 - hwpoison, memcg: forcibly uncharge LRU pages (bnc#1046105). - commit 2b252e1 - blacklist.conf: blacklist 570d8e939801 the issue is visible only when 80df554275c2 is applied (4.7+ and not backported to our trees) - commit 47b83ce - config/x86_64: make CONFIG_SERIAL_8250_DW and *_MID built-in (bsc#1024449) - commit 2e3ca7e - Refresh patches.drivers/0477-nvme-add-hostid-token-to-fabric-options.patch. Update mainline references. - commit eee1109 - fs/exec.c: account for argv/envp pointers (bnc#1039354, CVE-2017-1000365). - commit 7418d0f - Refresh ibmvnic patch metadata patches.drivers/ibmvnic-98-ibmvnic-Correct-return-code-checking-for-ibmvnic_init-during-probe.patch. patches.drivers/ibmvnic-a0-ibmvnic-Fix-incorrectly-defined-ibmvnic_request_map_rsp-structure.patch. patches.drivers/ibmvnic-a1-ibmvnic-Fix-error-handling-when-registering-long-term-mapped-buffers.patch. - commit babc17a - Refresh metadata patches.fixes/powerpc-tm-Fix-stack-pointer-corruption-in-__tm_recheckpoint. - commit 0b5bdc6 - powerpc/ftrace: Pass the correct stack pointer for DYNAMIC_FTRACE_WITH_REGS (FATE#322421). - commit 936e653 - nvme: add hostid token to fabric options (bsc#1045293). - commit 52dffb9 - iw_cxgb4: Fix error return code in c4iw_rdev_open() (bsc#1026570). - RDMA/iw_cxgb4: Always wake up waiter in c4iw_peer_abort_intr() (bsc#1026570). - commit 2ce43b1 - clocksource/drivers/arm_arch_timer: Fix read and iounmap of incorrect variable (bsc#1045937). - commit 594f037 - Linux 4.4.74 (CVE-2017-1000364 bnc#1012382 bnc#1039348 bnc#1045340 bsc#1031717 bsc#1043231). - Delete patches.drivers/media-pvrusb2-reduce-stack-usage-pvr2_eeprom_analyze. - Delete patches.drivers/media-vb2-Fix-an-off-by-one-error-in-vb2_plane_vaddr. - Delete patches.drivers/staging-rtl8188eu-prevent-an-underflow-in-rtw_check_. - Delete patches.fixes/mm-fix-new-crash-in-unmapped_area_topdown.patch. - Delete patches.fixes/mm-larger-stack-guard-gap-between-vmas.patch. - commit 5e41880 - tty: Fix ldisc crash on reopened tty (bnc#1043488). - commit 04cca20 - tty: Destroy ldisc instance on hangup (bnc#1043488). - tty: Refactor tty_ldisc_reinit() for reuse (bnc#1043488). - tty: Use 'disc' for line discipline index name (bnc#1043488). - tty: Move tty_ldisc_kill() (bnc#1043488). - tty: Handle NULL tty->ldisc (bnc#1043488). - tty: Prepare for destroying line discipline on hangup (bnc#1043488). - tty: Reset c_line from driver's init_termios (bnc#1043488). - tty: Simplify tty_set_ldisc() exit handling (bnc#1043488). - commit c016cca - kabi: ignore fs_info parameter for tracepoints that didn't have it (bsc#1044912). - commit 24869ea ==== libxml2 ==== Subpackages: libxml2-2 libxml2-2-32bit libxml2-devel libxml2-tools - Security fix: * libxml2-CVE-2017-7376.patch [bsc#1044887, CVE-2017-7376] * Increase buffer space for port in HTTP redirect support - Security fix: * libxml2-CVE-2017-7375.patch [bsc#1044894, CVE-2017-7375] * Prevent unwanted external entity reference - Upstream patches updated and with tests: * libxml2-CVE-2017-9047.patch and libxml2-CVE-2017-9048.patch merged into libxml2-CVE-2017-9047.patch [bsc#1039066, bsc#1039661] * libxml2-CVE-2017-9049.patch and libxml2-CVE-2017-9050.patch merged into libxml2-CVE-2017-9049.patch [bsc#1039063, bsc#1039064] ==== libzypp ==== Version update (16.12.0 -> 16.13.0) - Adapt loop mounting of iso images (bsc#1038132, bsc#1033236) - Adjust zypp.conf for openSUSE Tumbleweed (bsc#1031756) - Change arch variable names conflicting with compiler macros (fixes #70) - Fix potential crash if repo has no baseurl (bnc#1043218) - version 16.13.0 (0) ==== lightdm ==== Subpackages: liblightdm-gobject-1-0 lightdm-lang - Augment patch to also resolve the target of symlink sessions for detemining the preselected option: * ignore-known-symlink-sessions.patch ==== marble ==== Subpackages: libastro1 libmarblewidget-qt5-27 marble-data marble-devel marble-doc marble-kde marble-lang - Add Fix-utm-enum-value.patch and reverse-apply it, this upstream commit causes a crash when adding bookmarks if switched to UTM view angles because the necessary handler functions for the dialog are not implemented yet (boo#1044747, kde#381872) - Add Fix-plain-map-and-political-map-showing-no-content.patch to fix the plain map and the political map being not displayed at all (kde#379297) ==== mc ==== Subpackages: mc-lang - sftp.patch: Backport upstream fixes for SFTP (boo#1004280, boo#1042797) ==== plasma5-integration ==== - Move the Recommends: %{name}-plugin-lang to the plasma5-integration-plugin sub package, otherwise the translations won't get installed as there is no main package (boo#1027925) - Actually apply the aforementioned patch (shouldn't the source validator have warned?) ==== plasma5-openSUSE ==== Subpackages: plasma5-defaults-openSUSE plasma5-theme-openSUSE plasma5-workspace-branding-openSUSE sddm-theme-openSUSE - Fix installation of the sddm theme files (boo#1047254) ==== postgresql ==== Version update (9.4 -> 9.6) Subpackages: postgresql-contrib postgresql-devel postgresql-docs postgresql-server - Bump version and defaultpackage to 9.6. - Move ~postgres/.bash_profile to postgresql-server to avoid a file conflict between the versioned server packages. - Bump version and defaultpackage to 9.4. - Bump version and defaultpackage to 9.3. - Change license string to PostgreSQL. - Make all dummy packages noarch. - Make PostgreSQL 9.2 the default. - Reduce the postgresql packages with unversioned names to dummy packages that require the respective versioned package names. ==== python-coverage ==== Version update (3.7.1 -> 4.3.4) - uninstall alternatives in %postun - update for singlespec - update to 4.3.4: - Using the --skip-covered option on an HTML report with 100% coverage would cause a ?No data to report? error, as reported in issue 549. This is now fixed; thanks, Lo�c Dachary. - If-statements can be optimized away during compilation, for example, if 0: or if __debug__:. Coverage.py had problems properly understanding these statements which existed in the source, but not in the compiled bytecode. This problem, reported in issue 522, is now fixed. - If you specified --source as a directory, then coverage.py would look for importable Python files in that directory, and could identify ones that had never been executed at all. But if you specified it as a package name, that detection wasn?t performed. Now it is, closing issue 426. Thanks to Lo�c Dachary for the fix. - If you started and stopped coverage measurement thousands of times in your process, you could crash Python with a ?Fatal Python error: deallocating None? error. This is now fixed. Thanks to Alex Groce for the bug report. - On PyPy, measuring coverage in subprocesses could produce a warning: ?Trace function changed, measurement is likely wrong: None?. This was spurious, and has been suppressed. - Previously, coverage.py couldn?t start on Jython, due to that implementation missing the multiprocessing module (issue 551). This problem has now been fixed. Also, issue 322 about not being able to invoke coverage conveniently, seems much better: jython -m coverage run myprog.py works properly. - Let?s say you ran the HTML report over and over again in the same output directory, with --skip-covered. And imagine due to your heroic test-writing efforts, a file just acheived the goal of 100% coverage. With coverage.py 4.3, the old HTML file with the less-than-100% coverage would be left behind. This file is now properly deleted. - update to Version 4.3.1 ? 2016-12-28: - Some environments couldn?t install 4.3, as described in issue 540. This is now fixed. - The check for conflicting --source and --include was too simple in a few different ways, breaking a few perfectly reasonable use cases, described in issue 541. The check has been reverted while we re-think the fix for issue 265. - update to Version 4.3 ? 2016-12-27: Special thanks to Lo�c Dachary, who took an extraordinary interest in coverage.py and contributed a number of improvements in this release. - The HTML report now supports a --skip-covered option like the other reporting commands. Thanks, Lo�c Dachary for the implementation, closing issue 433. - Subprocesses that are measured with automatic subprocess measurement used to read in any pre-existing data file. This meant data would be incorrectly carried forward from run to run. Now those files are not read, so each subprocess only writes its own data. Fixes issue 510. - Coverage.py wouldn?t execute sys.excepthook when an exception happened in your program. Now it does, thanks to Andrew Hoos. Closes issue 535. - The coverage combine command will now fail if there are no data files to combine. The combine changes in 4.2 meant that multiple combines could lose data, leaving you with an empty .coverage data file. Fixes issues issue 525, issue 412, issue 516, and probably issue 511. - The branch coverage issues described in issue 493, issue 496, and issue 502 are now fixed, thanks to Lo�c Dachary. - Options can now be read from a tox.ini file, if any. Like setup.cfg, sections are prefixed with ?coverage:?, so [run] options will be read from the [coverage:run] section of tox.ini. Implements part of issue 519. Thanks, Stephen Finucane. - Specifying both --source and --include no longer silently ignores the include setting, instead it fails with a message. Thanks, Nathan Land and Lo�c Dachary. Closes issue 265. - Coverage.py can now search .pex files for source, just as it can .zip and .egg. Thanks, Peter Ebden. - update to 4.2: - Since ``concurrency=multiprocessing`` uses subprocesses, options specified on the coverage.py command line will not be communicated down to them. Only options in the configuration file will apply to the subprocesses. Previously, the options didn't apply to the subprocesses, but there was no indication. Now it is an error to use ``--concurrency=multiprocessing`` and other run-affecting options on the command line. This prevents failures like those reported in `issue 495`_. - Filtering the HTML report is now faster, thanks to Ville Skytt�. - update to 4.0.3: - Fixed a mysterious problem that manifested in different ways: sometimes hanging the process (`issue 420`_), sometimes making database connections fail (`issue 445`_). - The XML report now has correct ``<source>`` elements when using a ``--source=`` option somewhere besides the current directory. This fixes `issue 439`_. Thanks, Arcady Ivanov. - Fixed an unusual edge case of detecting source encodings, described in `issue 443`_. - Help messages that mention the command to use now properly use the actual command name, which might be different than "coverage". Thanks to Ben Finney, this closes `issue 438`_. - add LICENSE.txt - Pre require coreutils. This package is needed for the rm call in the pre section. Subprocess failed. Error: RPM failed: /var/tmp/rpm-tmp.gONanE: line 3: rm: command not found - specfile: * updated license * updated update-alternatives * README.txt -> README.rst - update to version 4.0: (long list, see http://coverage.readthedocs.org/en/latest/changes.html) - fix rhel deps by depending on /usr/sbin/update-alternatives ==== ucode-intel ==== Version update (20160714 -> 20170511) - Update to version 20170511 - Update to version 20161104. ==== yast2-bootloader ==== Version update (3.2.22 -> 3.2.23) - AuotYaST configuration: Set StorageDevices flag disks_valid to true. So libstorage can scan valid disks and "/" partition can be found. (bnc#1043132) - 3.2.23 ==== yast2-ntp-client ==== Version update (3.2.9 -> 3.2.12) - Resrict records are written at the end but the default file and most profiles use them at the beginning, which mangles the file completely (bsc#983486). To fix it we have just changed the order of writing. - 3.2.12 - AutoYaST: Fix crash when trying to sanitize not string values, for example initial_sync. - AutoYaST: Sanitize comments by only removing blank spaces at the beginning and adding line break. This avoids augeas parse errors (bsc#1045777). - 3.2.11 - AutoYaST: Fix crash in CFA when creating a command record with some key value option is given (bsc#1045968) - 3.2.10 - AutoYaST: Comments from autoyast profile should not be sanitized to avoid entries without space between value and comment (e.g trustedkey 1# coment). This is caused by a bug in augeas adding new entries. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

2 1

[opensuse-factory] acpid requires systemd?
by Felix Miata 25 Apr '24

25 Apr '24

Can this be true? If so, why? Zypper won't let me upgrade acpid without breakage unless systemd is installed too. I have systemd locked out, as I'd rather test things I can understand in Factory, not major overhaul stuff. -- "The wise are known for their understanding, and pleasant words are persuasive." Proverbs 16:21 (New Living Translation) Team OS/2 ** Reg. Linux User #211409 ** a11y rocks! Felix Miata *** http://fm.no-ip.com/ -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-factory+help(a)opensuse.org

4 3

New Tumbleweed snapshot 20240110 released!
by Dominique Leuenberger 22 Mar '24

22 Mar '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: certmonger (0.79.15 -> 0.79.19) eog (45.1 -> 45.2) git gnome-remote-desktop (45.0 -> 45.1) gnome-shell (45.2 -> 45.3) gvfs (1.52.1 -> 1.52.2) hwdata (0.377 -> 0.378) libgxps (0.3.2 -> 0.3.2+5) libstorage-ng (4.5.170 -> 4.5.171) libxkbcommon mutter (45.2 -> 45.3) nodejs21 (21.4.0 -> 21.5.0) publicsuffix (20231213 -> 20240107) redis (7.2.3 -> 7.2.4) sg3_utils (1.48+6.7f43e14 -> 1.48+7.63e63cb) transmission (4.0.4 -> 4.0.5) yast2-packager (5.0.1 -> 5.0.2) === Details === ==== certmonger ==== Version update (0.79.15 -> 0.79.19) - Update to 0.79.19 - Removed 0001-Disable-DSA-in-the-RPM-spec.patch - Added 0001-Update-tests-to-be-compatible-with-OpenSSL-3.2.patch ==== eog ==== Version update (45.1 -> 45.2) Subpackages: eog-lang - Update to version 45.2: + data: Update appdata. + Updated translations. ==== git ==== Subpackages: git-core git-email git-web perl-Git - gitweb AppArmor profile: allow reading etc/gitweb-common.conf (boo#1218664) ==== gnome-remote-desktop ==== Version update (45.0 -> 45.1) Subpackages: gnome-remote-desktop-lang - Update to version 45.1: + session: - Assert region size to be greater than 0 - Add debug message to also output new EI regions - Scale absolute pointer position with respect to the EI region - Clear all EI related instances before dbus session stop call - Only notify keysym when EI keyboard is available - Add struct for absolute pointer motion events + vnc-pipewire-stream: Don't remove buffer while dequeueing it + rdp-pipewire-stream: Don't remove buffer while dequeueing it + Adapt usage of abs pointer motion events to GrdEventPointerMotionAbs + Updated translations. ==== gnome-shell ==== Version update (45.2 -> 45.3) Subpackages: gnome-extensions gnome-shell-calendar gnome-shell-lang - Update to version 45.3: + Allow any enter key to be used to screenshot. + Fix spinner in light style variant. + Improve formatting of extension errors. + Fixed crash. + Misc. bug fixes and cleanups. + Updated translations. - Drop gnome-shell_nb_fix_trans.patch: fixed upstream. ==== gvfs ==== Version update (1.52.1 -> 1.52.2) Subpackages: gvfs-backend-afc gvfs-backend-goa gvfs-backend-samba gvfs-backends gvfs-fuse gvfs-lang - Update to version 1.52.2: + smb: Fix livelock when mounting share without enough permissions. + smb: Fi moving files across filesystem boundaries. + Updated transltions. ==== hwdata ==== Version update (0.377 -> 0.378) - update to 0.378: * Update pci, usb and vendor ids ==== libgxps ==== Version update (0.3.2 -> 0.3.2+5) - Update to version 0.3.2+5: + DOAP: Fix 'bug-database' value to point to GNOME GitLab Issues + images: - For jpeg images try to get the image resolution from exif first - Add support for jpeg images with CMYK color space + Fix compiler warnings + Fix meson warnings - Switch to git checkout via source service, use explicit commit. - Use ldconfig_scriptlets macro for post(un) handling. - Update URL to new home. - Drop no longer needed libgxps-rpmlintrc. ==== libstorage-ng ==== Version update (4.5.170 -> 4.5.171) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#977 - provide light_probe function with SystemInfo parameter - 4.5.171 ==== libxkbcommon ==== Subpackages: libxkbcommon-x11-0 libxkbcommon0 libxkbregistry0 - add libxkbregistry-devel to baselibs for use by wine-32bit. (bsc#1218640) ==== mutter ==== Version update (45.2 -> 45.3) Subpackages: mutter-lang - Update to version 45.3: + Fix handling of relative mode for tablets. + Fix forcing EGLStream with NVIDIA proprietary driver. + Sync geometry only when window is mapped. + Improve repick due to transform changes. + wayland/client: Add make_desktop() method. + Fix occasional artifacts at top of X11 fullscreen windows. + background: Fix background color around image. + Fixed crashes. + Plugged leaks. + Misc. bug fixes and cleanups. + Updated translations. ==== nodejs21 ==== Version update (21.4.0 -> 21.5.0) Subpackages: npm21 - Update to 21.5.0: * module: merge config with package_json_reader * src: move package resolver to c++ * doc: + deprecate hash constructor + deprecate dirent.path - linker_lto_jobs.patch: refreshed ==== publicsuffix ==== Version update (20231213 -> 20240107) - Update to version 20240107: * Remove homeoffice.gov.uk (#1909) * util: gTLD data autopull updates for 2024-01-06T15:12:04 UTC (#1918) ==== redis ==== Version update (7.2.3 -> 7.2.4) - redis 7.2.4: (boo#1218646) - Security fixes - (CVE-2023-41056) In some cases, Redis may incorrectly handle resizing of memory buffers which can result in incorrect accounting of buffer sizes and lead to heap overflow and potential remote code execution. - Bug fixes - Fix crashes of cluster commands clusters with mixed versions of 7.0 and 7.2 (#12805, #12832) - Fix slot ownership not being properly handled when deleting a slot from a node (#12564) - Fix atomicity issues with the RedisModuleEvent_Key module API event (#12733) ==== sg3_utils ==== Version update (1.48+6.7f43e14 -> 1.48+7.63e63cb) Subpackages: libsgutils2-1_48-2 - Fix spurious warning for non-SCSI devices (boo#1218666) ==== transmission ==== Version update (4.0.4 -> 4.0.5) Subpackages: transmission-common transmission-gtk transmission-gtk-lang - Update to version 4.0.5: + Fixed 4.0.0 bug where the IP address field in UDP announces were not encoded in network byte order. + Fixed a bug that incorrectly escaped JSON strings in some locales. + Fixed 4.0.4 decreased download speeds for people who set a low upload bandwidth limit. + Fixed bug that prevented editing trackers on magnet links. + Fixed HTTP tracker announces and scrapes sometimes failing after adding a torrent file by HTTPS URL. + In RPC responses, change the default sort order of torrents to match Transmission 3.00. + Fixed tr_sys_path_copy() behavior on some Synology Devices. + Fix: only append .added suffix to watchdir files. + Fixed crash when opening torrent file from "Recently used" section in GTK 4. ==== yast2-packager ==== Version update (5.0.1 -> 5.0.2) - After installation disable the empty installation repository from the SLE15 Online medium (bsc#1182303) - 5.0.2

5 5

enabling reproducible builds in Factory and ALP
by Jan Zerebecki 15 Mar '24

15 Mar '24

Hi *, to support https://en.opensuse.org/openSUSE:Reproducible_Builds I plan to get the following project configuration for Factory and ALP enabled: Macros: %source_date_epoch_from_changelog Y %clamp_mtime_to_source_date_epoch Y %use_source_date_epoch_as_buildtime Y %_buildhost reproducible :Macros I'm still waiting to get https://github.com/openSUSE/product-builder/pull/26 merged to prevent a bug with mirrors that will otherwise happen. Afterwards a time of the build is still in the HTTP header Last-Modified when requesting the rpm file. HTTP mtime is a few seconds earlier than end time of the build (seen in OBS web UI only as start + duration). I didn't double check, but it should also be recorded in the Tumbleweed archive Bernhard keeps, which can with a bit of work be looked up by content hash or name including version of the rpm file if its not on the normal mirrors anymore. Both the build time and host can also still be seen in the build log. Comments welcome. -- Best regards, Jan Zerebecki

4 6

Proposal: amend the packaging guidelines for %fillup_only
by Dan Čermák 02 Mar '24

02 Mar '24

Hi list, our packaging guidelines for %fillup_only [1] currently do not suggest anything for the %files section for the files generated in `/etc/sysconfig/`. I would like to suggest that we start adding the newly generated file `/etc/sysconfig/$pkgname` as follows to the %files section: --8<---------------cut here---------------start------------->8--- %files %ghost %config(noreplace) %attr(0600,root,root) /etc/sysconfig/%{name} %dir /etc/sysconfig --8<---------------cut here---------------end--------------->8--- This ensures that rpm is aware of the files as configuration files. Thoughts, opinions? Cheers, Dan Footnotes: [1] https://en.opensuse.org/openSUSE:Packaging_Conventions_RPM_Macros#%fillup_o… -- Dan Čermák <dcermak(a)suse.com> Software Engineer Development tools SUSE Software Solutions Germany GmbH Frankenstr. 146 90461 Nürnberg Germany www.suse.com Geschäftsführer: Ivo Totev, Andrew McDonald, Werner Knoblich (HRB 36809, AG Nürnberg)

3 3

Announcing Agama 7
by Imobach Gonzalez Sosa 28 Feb '24

28 Feb '24

Hi all, We are pleased to announce the availability of Agama 7. Among other features, it brings: * Allow choosing localization settings for the installed system (language, keyboard and timezone). * Use zram to reduce memory consumption. * Add support to install MicroOS and MicroOS Desktop. Drop Leap 16.0 support. * Simplified software selection based on a curated list of patterns per product. * Registration support. It is enabled for Dolomite. * Allow to select the file system type selection and to choose a policy to make space. * Support for network bonding in the unattended scenario. If you are interested in the details, please check the announcement on our team's blog: https://yast.opensuse.org/blog/2023-12-22/agama7 Thanks! Regards, Imo

4 15

systemd-based FDE in MicroOS / Tumbleweed
by aplanas 28 Feb '24

28 Feb '24

Hi, Some months ago we announced the support of systemd-boot in MicroOS and in Tumbleweed, using a new tool named sdbootutil, that help us to synchronize the boot loader entries with available snapshots in the system. Today we announce that we supporting the full disk encryption (FDE) tools that systemd bring us via systemd-cryptenroll or cryptsetup. We extended the pcr-oracle to support new PCRs and the generation of authorized policies in JSON format for systemd With this we also propose a new architecture in the distribution that allows the enrollment of the TPM2 (with full measured boot attestation) and the FIDO2 key, using the already available systemd user tools. The MicroOS image[0] was also extended to show all this nice features working together. The long (sorry, maybe too long) explanation is in the news-o-o blog post[1], and the technical details are in the openSUSE Systemd-fde wiki page[2]. Feedback is more than welcome! ... also happy holidays, end of the year and beginning of 2024! [0] http://download.opensuse.org/tumbleweed/appliances/openSUSE-MicroOS.x86_64-… [1] https://news.opensuse.org/2023/12/20/systemd-fde/ [2] https://en.opensuse.org/Systemd-fde

5 11

wine and zlib
by Joe Salmeri 22 Feb '24

22 Feb '24

I did a fresh install of TW 20230222 on a new PC. My main desktop which was installed back in 2021 has also been updated ( zypper dup ) to 20230222. I found something odd when comparing packages between the 2 machines. Both PC's have wine installed, however... On my main desktop when the original install in 2021 of wine was done it installed libz1-32bit ( as per the zypper history logs ) and it still has that installed after it was updated to 20230222. On the new PC fresh install of 20230222 when wine was installed it installed libz-ng-compat1-32bit. The libz-ng-compat1-32bit version looks like it was forked in 2021, just after my main machine was originally built so that would explain why it has libz1-32bit but shouldn't it have been updated by zypper dup ??? Is this a bug that I should report? If so, which system is wrong / which version should be used? Thanks!

5 6

Recent e2fsprogs update flag changes
by Patrick Schaaf 22 Feb '24

22 Feb '24

Hi, as I haven't found discussion by searching, I thought I bring up a gotcha I ran into today, on a host recently updated to tumbleweed 20230801 level. With a somewhat recent update to e2fsprogs, now at 1.47.0 compared to May '23 at 1.46.5, the set of mkfs flags has changed: --- /root/mke2fs.conf.20230512 2023-08-09 12:00:14.379476597 +0200 +++ /etc/mke2fs.conf 2023-06-14 19:20:22.000000000 +0200 @@ -14 +14 @@ - features = has_journal,extent,huge_file,flex_bg,metadata_csum,64bit,dir_nlink,extra_isize + features = has_journal,extent,huge_file,flex_bg,metadata_csum,metadata_csum_seed,64bit,dir_nlink,extra_isize,orphan_file For me, this resulted in an otherwise fine virtual machine with 20230512 userlevel, not booting after an "rsync copy migration" into a fresh root filesystem mkfs'ed with these new flags. Reason being that 3 months older fsck - the sytemd boot time rootfs service actually - goes "failed". I guess I'll need just use flag override options going forward, to cope with that, but thought I'd bring it to attention here at least. best regards Patrick

3 4

Testers Wanted: longterm kernel
by Robert Frohl 21 Feb '24

21 Feb '24

Hi all, I am looking for feedback on a side project that I have been working on the last couple of months: Introducing a rolling longterm kernel package to Factory. # Motivation The previous distribution I used as my daily driver offered a LTS variant of the kernel and that always served me well, if some change in kernel development broke a feature that I was relying on. When I moved to Tumbleweed I felt that this was missing, but because of snapper and file system rollback, the impact was never so severe. With the announcement of slowroll I had the feeling that having a longterm kernel might fill a gap, for more stable workloads or software packages that have a dependency onto the kernel, but can not keep up with new kernel versions. Therefor I started to look into how feasible it would be to have a longterm kernel in Factory. # General vision Having a longterm kernel package that follows the rolling release model and will track the latest longterm kernel, once the stable kernel has moved to a higher version number. The configuration should be as similar as possible to the stable kernel. The kernel packaging should use existing infrastructure and processes that are used for the stable kernel, to avoid re-inventing the wheel. # Current state and open points I have a longterm kernel version (6.1.68) available for x86_64 under [0]. This version is using the existing systems and processes. I am now at a state where I think further feedback would be helpful. Known open points that I want to take care of before trying to get into Factory: - Move to the new longterm version (6.6) to get a grasp of the process and see what potential fallout the update might have for users - Find out if external kernel modules would have a problem with different kernel versions and if so find a solution [1] Where this will go is not clear at the moment, I talked with Bernhard and dimstar if there is general interest for a longterm kernel in Factory. It might be an option as a base for slowroll. But there has been no decision on how to proceed. Currently just evaluating if the longterm kernel is feasible for Factory, if openSUSE users would be interested and if a community maintainer can handle the workload, as I am not a kernel developer in my day job. If someone has a use case that does not depend on external kernel modules and some time over the holidays, I would really appreciate feedback, be it improvements or any other type (also if things work out ok and there are no complaints ;) ). Cheers, Robert p.s: without the help and support of others, this little experiment would have been impossible to do, I would like to specifically thank a couple of people for their support and patience with my questions: Michal, Takashi, Jiri and Marcus. I would also like to thank SUSE for the time they make available during hackweek, as I spend some of my time on the longterm kernel. p.p.s: you can install the longterm kernel by: > zypper addrepo http://download.opensuse.org/repositories/Kernel:/slowroll/standard/Kernel:… > zypper refresh > zypper install kernel-longterm [0] http://download.opensuse.org/repositories/Kernel:/slowroll/standard/ [1] https://bugzilla.suse.com/show_bug.cgi?id=1217824 -- Security Engineer, SUSE Software Solutions Germany GmbH, Frankenstraße 146, 90461 Nürnberg, Germany, GF: Ivo Totev, Andrew McDonald, Werner Knoblich (HRB 36809, AG Nürnberg) GPG: D29F 82AA 9FD5 9D6E 74B1 6370 089E DB3D 230A 2404

4 9

Tighten permissions for DRM render nodes (/dev/dri/renderD128)
by Wolfgang Frisch 11 Feb '24

11 Feb '24

Hi, DRM render nodes [1] provide an interface for unprivileged GPU operations such as video encoding or off-screen rendering. They are currently world-writable in Factory: > crw-rw-rw- root:render /dev/dri/renderD128 This configuration allows every user, even `nobody`, to access the GPU drivers, cause load on the hardware and exploit hypothetical driver bugs. To our *current knowledge* this does not represent a security vulnerability. But given enough time and energy it very well might. It certainly does increase a local attack surface unnecessarily. Given the complexity of graphics drivers, maintaining such open permissions seems imprudent. While mode 0666 is the default [2], upstream has also been supporting an alternative configuration with mode 0660 and uaccess ACLs [3]. For context, here's how other distributions manage this: > Debian: mode 660 with uaccess > Ubuntu: mode 660 with uaccess > Fedora: mode 666 A submission [4] is underway to switch openSUSE Factory to this alternative configuration. This will result in Factory having these permissions: > crw-rw----+ root:render /dev/dri/renderD128 The impact of this change is likely to be zero for most users. If you have any workloads that depend on unprivileged GPU operations, you can simply add your user to the `render` group. Specific scenarios include: - Remote GPU access via ssh - Local GPU access by non-interactive users that aren't part of the render group yet, e.g. system users, cron jobs or `su` to another user. Best regards Wolfgang [1] https://dri.freedesktop.org/docs/drm/gpu/drm-uapi.html#render-nodes [2] https://github.com/systemd/systemd/blob/a3f5976ded023257f6299ca07b9749fd148… [3] https://github.com/systemd/systemd/blob/a3f5976ded023257f6299ca07b9749fd148… [4] https://build.opensuse.org/request/show/1128161 -- Wolfgang Frisch <wolfgang.frisch(a)suse.com> Security Engineer OpenPGP fingerprint: A2E6 B7D4 53E9 544F BC13 D26B D9B3 56BD 4D4A 2D15 SUSE Software Solutions Germany GmbH Maxfeldstr. 5, 90409 Nuremberg, Germany (HRB 36809, AG Nürnberg) Managing Director: Felix Imendörffer

6 10

RPM 4.19 soon in Factory (packaging changes inside)
by Ana Guerrero Lopez 06 Feb '24

06 Feb '24

Dear Tumbleweed hackers and packagers, After a lengthy staging period, RPM 4.19 is shaping up and all issues noticed in the rings (packages guaranteed to build/be installable) have been addressed or have fixes pending. As you are all aware, the rings cover only about 20% of the packages in Factory. The release notes for RPM 4.19 are at https://rpm.org/wiki/Releases/4.19.0 Out of the RPM release notes (https://rpm.org/wiki/Releases/4.19.0) the two most noteworthy bullets are: * Any non-root ownership in the %files section (through %attr() or %defattr()) now generates an automatic dependency on the named user and/or group. This dependency can be satisfied by another package shipping a sysusers.d(5) file or the /etc/passwd and /etc/group files themselves. Existing packages shipping any of these files will have to be rebuilt with RPM 4.19 in order for them to carry the respective user and/or group provides. This may require distro-level coordination to ensure proper installation of all the affected packages. For more information, please consult the manual. * %patch without arguments (previously an alias to %patch 0) is now a build error (use %patch N instead) The %patch one is rather simple and results in a build failure; monitoring your devel packages should give you hints very soon if your package is impacted. We created submit requests for most, if not all, packages affected by that in the last months. The story around the users can be trickier to be identified, as the build might succeed, but the package not being installable at the end due to missing dependencies reported. This usually happens when users are generated in %pre scripts using useradd. Either convert those packages to use sysusers.d ( https://en.opensuse.org/openSUSE:Packaging_guidelines#Users_and_Groups) or, as a quickest measure, usually helpful if no other package relies on the same users, manually add the respective Provides: user(USERNAME) and Provides: group(GROUPNAME) to the package generating the relevant user (as done for example in cluster-glue, https://build.opensuse.org/request/show/1138101 for reference) If you have any questions or need with your package, the opensuse-packaging mailing list is always at your disposal. Ana, on behalf of the Release Team

18 30

Installation without import previous user data
by Obs Geeko 01 Feb '24

01 Feb '24

Hello everyone, When install TW/Leap, I don't want to import previous user ssh keys. In "Local Uesers" step, the "Import User Data from a Previous Installation" is un-checked as default. But in installation summary step, "import SSH Host Keys and Configuration" is checked as default. So if we do not de-select it, it will import previous ssh keys. Does it conflict with "Local Uesers" step? "Import User Data" means not include ssh keys? I found this is not only happens recently in Tumbleweed, Leap 15.4, 15.5 also have this problem. Thank you. Best regards.

4 3

How Factory or ALP Workbench select bootstrap packages?
by Obs Geeko 31 Jan '24

31 Jan '24

Hello, May I ask how do you select packages for "SUSE:ALP:Workbench:1.0", to make it can be built everything else from itself? Is there scripts to do so? I notice some revision's comment like "initial import", "initial import needed for building eigen3:docs,eigen3", etc. How do you solve dependency problem? Manually? Another similar question: May I ask how do you select bootstrap package for "Rings:0-Bootstrap", "Rings:1-MinimalX"? Thank you.

3 4

package for sale: libx86
by Stefan Seyfried 31 Jan '24

31 Jan '24

Hi all, I just learned via bug 1219395 that I am still listed as the maintainer of libx86. I last touched that package 16 years ago, and I don't think that it is still needed today. So if someone thinks it should be kept, it's up for grabs. If not, it's https://build.opensuse.org/request/show/1143135 Have fun, seife -- Stefan Seyfried "For a successful technology, reality must take precedence over public relations, for nature cannot be fooled." -- Richard Feynman

1 0

[opensuse-factory] reproducible builds status 2024-01
by Bernhard M. Wiedemann 31 Jan '24

31 Jan '24

Hi, I made some more nice patches this month and even found bugs in meson and qt6. Here are the autogenerated bits: last month's status: https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… Last months' reproducible builds project updates (including my work): https://reproducible-builds.org/reports/2023-12/ I uploaded https://rb.zq1.de/compare.factory-20240131/ today https://rb.zq1.de/spec/glossar.txt explains the meaning of below values: total-packages: 15212 (+46) build-tried: 15189 (+48) build-failed: 111 (+1) build-n-a: 230 (-3) build-succeeded: 14848 (+50) build-official-failed+na: 95 (+0) build-compare-failed: 166 (-6) build-compare-succeeded: 14682 (+56) verify-failed: 15 (+0) verified-semi-reproducible: 20 (+1) verified-bit-identical: 0 (+0) bit-by-bit-identical: 14082 (+66) not-bit-by-bit-identical: 768 (-15) not-bit-by-bit-identicalcheck: 766 (-16) https://rb.zq1.de/compare.factory-20240131/unreproduciblerings.txt lists very unreproducible core packages (bootstrap+DVD) Of the badly unreproducible packages, 4 were in ring0 32 were in ring1 That makes it 36/3850 => 0.94 % which is below the overall average of 166/14848 => 1.12 % 768/14848 => 5.17 % of packages are not perfectly bit-reproducible package notes: ==> ./aws-c-common/.rb.notes <== FTBFS-j1 osc build --noservice --vm-type=kvm -j1 standard ==> ./cartridges/.rb.notes <== FTBFS-j1 osc build --vm-type=kvm -j1 --noservice standard ==> ./cockpit/.rb.notes <== filesys (from python) /usr/lib/python3.11/site-packages/cockpit/data/cockpit-bridge.beipack.xz ==> ./emacs/.rb.notes <== = https://lists.gnu.org/archive/html/emacs-devel/2024-01/msg00464.html ==> ./impression/.rb.notes <== FTBFS-j1 osc build --vm-type=kvm -j1 --noservice standard ==> ./libjcat/.rb.notes <== => SR 1138082 = https://bugzilla.opensuse.org/show_bug.cgi?id=1218715 crypto ==> ./loupe/.rb.notes <== rust/llvm ==> ./mumble/.rb.notes <== => SR 1141433 #=> https://github.com/mumble-voip/mumble/pull/6147 filesys (python listdir) ==> ./objectweb-asm/.rb.notes <== javadoc toolchain filesys readdir order ; strip-nd ==> ./presenterm/.rb.notes <== rust/llvm ==> ./python-grpcio/.rb.notes <== #=> https://github.com/grpc/grpc/pull/35687 sort filesys ==> ./perl-DateTime-TimeZone/.rb.notes <== FTBFS-j1 osc build --clean --no-preinstallimage --noservice --vm-type=kvm --alternative-project home:bmwiedemann:reproducible -j1 openSUSE_Tumbleweed ==> ./python-rjsmin/.rb.notes <== => SR 1137474 var_rjsmin_methods 4-byte diff ==> ./qt6-declarative/.rb.notes <== /usr/lib64/libQt6QuickDialogs2QuickImpl.so.6.4.2 differs in ELF sections order variation in qtdeclarative-everywhere-src-6.4.2/build/build.ninja , ColorDialog_qml.cpp from qmlcachegen ==> ./qt6-virtualkeyboard/.rb.notes <== = https://bugreports.qt.io/browse/QTBUG-121643 parallelism ==> ./scala/.rb.notes <== filesys in /usr/share/java/scala/scala-compiler.jar/scala/tools/nsc/fsc/CompileSocket.class ==> ./tbb/.rb.notes <== stuck tests FTBFS-j1 osc build --vm-type=kvm -j1 --noservice standard ==> ./woodstox-core/.rb.notes <== javadoc toolchain filesys

1 0

New Tumbleweed snapshot 20240130 released!
by Dominique Leuenberger 31 Jan '24

31 Jan '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MozillaFirefox apache2 apache2-manual apache2-prefork apache2-utils apparmor cryptsetup (2.6.1 -> 2.7.0) duktape firewalld (2.1.0 -> 2.1.1) fwupd (1.9.11 -> 1.9.12) kernel-firmware (20240115 -> 20240126) libapparmor libjcat (0.2.0 -> 0.2.1) mdevctl (1.2.0 -> 1.3.0) mutter numactl (2.0.16.21.g693fee1 -> 2.0.17.4.g63befa8) openssl-3 openssl python-argcomplete (3.2.1 -> 3.2.2) python-authheaders (0.16.1 -> 0.16.2) python-pyOpenSSL (23.3.0 -> 24.0.0) strace (6.6 -> 6.7) xdg-utils (1.2.0~beta1+20230929 -> 1.2.0+20240130) xf86-video-qxl xorg-x11-server xterm (388 -> 389) === Details === ==== MozillaFirefox ==== Subpackages: MozillaFirefox-translations-common - Fix file list ==== apache2 ==== - use grep -E for egrep ==== apache2-manual ==== - use grep -E for egrep ==== apache2-prefork ==== - use grep -E for egrep ==== apache2-utils ==== - use grep -E for egrep ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-docs apparmor-parser apparmor-parser-lang apparmor-profiles apparmor-utils apparmor-utils-lang python3-apparmor - Add dovecot-unix_chkpwd.diff to allow dovecot-auth to execute unix_chkpwd, and add a profile for unix_chkpwd. This is needed for PAM 1.6 (boo#1219139) - Refresh apparmor.keyring - the key was renewed ==== cryptsetup ==== Version update (2.6.1 -> 2.7.0) Subpackages: cryptsetup-doc cryptsetup-lang libcryptsetup12 - Update to 2.7.0: * Full changelog in: mirrors.edge.kernel.org/pub/linux/utils/cryptsetup/v2.7/v2.7.0-ReleaseNotes * Introduce support for hardware OPAL disk encryption. * plain mode: Set default cipher to aes-xts-plain64 and password hashing to sha256. * Allow activation (open), luksResume, and luksAddKey to use the volume key stored in a keyring. * Allow to store volume key to a user-specified keyring in open and luksResume commands. * Do not flush IO operations if resize grows the device. This can help performance in specific cases where the encrypted device is extended automatically while running many IO operations. * Use only half of detected free memory for Argon2 PBKDF on systems without swap (for LUKS2 new keyslot or format operations). * Add the possibility to specify a directory for external LUKS2 token handlers (plugins). * Do not allow reencryption/decryption on LUKS2 devices with authenticated encryption or hardware (OPAL) encryption. * Do not fail LUKS format if the operation was interrupted on subsequent device wipe. * Fix the LUKS2 keyslot option to be used while activating the device by a token. * Properly report if the dm-verity device cannot be activated due to the inability to verify the signed root hash (ENOKEY). * Fix to check passphrase for selected keyslot only when adding new keyslot. * Fix to not wipe the keyslot area before in-place overwrite. * bitlk: Fix segfaults when attempting to verify the volume key. * Add --disable-blkid command line option to avoid blkid device check. * Add support for the meson build system. * Fix wipe operation that overwrites the whole device if used for LUKS2 header with no keyslot area. * Fix luksErase to work with detached LUKS header. * Disallow the use of internal kernel crypto driver names in "capi" specification. * Fix reencryption to fail early for unknown cipher. * tcrypt: Support new Blake2 hash for VeraCrypt. * tcrypt: use hash values as substring for limiting KDF check. * Add Aria cipher support and block size info. * Do not decrease PBKDF parameters if the user forces them. * Support OpenSSL 3.2 Argon2 implementation. * Add support for Argon2 from libgcrypt (requires yet unreleased gcrypt 1.11). * Used Argon2 PBKDF implementation is now reported in debug mode in the cryptographic backend version. For native support in OpenSSL 3.2 or libgcrypt 1.11, "argon2" is displayed. If libargon2 is used, "cryptsetup libargon2" (for embedded library) or "external libargon2" is displayed. * Link only libcrypto from OpenSSL. * Disable reencryption for Direct-Access (DAX) devices. * Print a warning message if the device is not aligned to sector size. * Fix sector size and integrity fields display for non-LUKS2 crypt devices for the status command. * Fix suspend for LUKS2 with authenticated encryption (also suspend dm-integrity device underneath). * Update keyring and locking documentation and LUKS2 specification for OPAL2 support. * Remove patches fixed upstream: - cryptsetup-Check-for-physical-memory-available-also-in-PBKDF-be.patch - cryptsetup-Try-to-avoid-OOM-killer-on-low-memory-systems-withou.patch - cryptsetup-Use-only-half-of-detected-free-memory-on-systems-wit.patch ==== duktape ==== - Build with distro flags ==== firewalld ==== Version update (2.1.0 -> 2.1.1) Subpackages: firewalld-bash-completion firewalld-lang python3-firewall - update to 2.1.1: * fix(offline-cmd): use family when creating ipset (64f78a9) * fix(firewall-config): allow rich rule forwarded ports to be logged (d46ea62) * fix(ipXtables): log forwarded ports only (07dc202) * fix(nftables): log forwarded ports (5c26b73) * fix(io.ipset): raise exception if entries exceed limit (a2da5fb) * fix(policy): ipXtables: multiple policies using same zone (b6f2f09) * fix(policy): dispatch update for active policies (7f6f0e2) ==== fwupd ==== Version update (1.9.11 -> 1.9.12) Subpackages: fwupd-bash-completion fwupd-lang libfwupd2 typelib-1_0-Fwupd-2_0 - Update to version 1.9.12: + This release adds the following features: - Add remote modification support to fwupdtool - Add support for more modify-config options - Generate HTML pages for all man pages + This release fixes the following bugs: - Assume the legacy LVFS::UpdateRequestId tag is non-generic - Avoid crashing the daemon if not using udisks - Correctly mark the CPU as supported - Correctly match invalid EFI partitions - Do not change the device status until the action has completed - Do not require systemd for fwupdtool modify-config - Enable access to the home interface for snap - Fix an assertion when enabling lvfs-testing for the first time - Fix a possible crash in fwupdtool build-cabinet - Handle systems with more than one ccp device - Only check AMD CPUs for SHSTK, not IBT - Only write the mutable fwupd.conf with the current values - Re-evaluate supported every time pci-psp attributes are refreshed - Show "CET OS support" on AMD systems too + This release adds support for the following hardware: - AVer CAM340plus - AVer VB342 Pro - More Algoltek devices ==== kernel-firmware ==== Version update (20240115 -> 20240126) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-ath12k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update to version 20240126 (git commit 8fa621d2f9c1): * qcom: Add Audio firmware for SM8650 MTP * linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops * Intel Bluetooth: Make spacing consistent with rest of WHENCE * amdgpu: update raven2 firmware * amdgpu: update raven firmware * amdgpu: update SDMA 5.2.7 firmware * amdgpu: update PSP 13.0.8 firmware * amdgpu: update VCN 3.1.2 firmware * amdgpu: update SDMA 5.2.6 firmware * amdgpu: update PSP 13.0.5 firmware * amdgpu: update GC 10.3.6 firmware * amdgpu: add GC 11.0.1 rlc_1 firmware * amdgpu: update vega20 firmware * amdgpu: update VCN 4.0.0 firmware * amdgpu: update SMU 13.0.0 firmware * amdgpu: update PSP 13.0.0 firmware * amdgpu: update GC 11.0.0 firmware * amdgpu: update vega12 firmware * amdgpu: update vega10 firmware * amdgpu: update beige goby firmware * amdgpu: update picasso firmware * amdgpu: update dimgrey cavefish firmware * amdgpu: update vangogh firmware * amdgpu: update navy flounder firmware * amdgpu: update green sardine firmware * amdgpu: update sienna cichlid firmware * amdgpu: update PSP 13.0.11 firmware * amdgpu: update GC 11.0.4 firmware * amdgpu: update VCN 4.0.2 firmware * amdgpu: update PSP 13.0.4 firmware * amdgpu: update GC 11.0.1 firmware * amdgpu: update arcturus firmware * amdgpu: update navi14 firmware * amdgpu: add VCN 4.0.3 firmware * amdgpu: add SDMA 4.4.2 firmware * amdgpu: add SMU 13.0.6 firmware * amdgpu: add PSP 13.0.6 firmware * amdgpu: Add GC 9.4.3 firmware * amdgpu: update renoir firmware * amdgpu: update VCN 4.0.4 firmware * amdgpu: update SMU 13.0.7 firmware * amdgpu: update PSP 13.0.7 firmware * amdgpu: update GC 11.0.2 firmware * amdgpu: update navi12 firmware * amdgpu: update yellow carp firmware * amdgpu: update SMU 13.0.10 firmware * amdgpu: update SDMA 6.0.3 firmware * amdgpu: update PSP 13.0.10 firmware * amdgpu: update GC 11.0.3 firmware * amdgpu: update navi10 firmware * amdgpu: update aldebaran firmware * linux-firmware: Update AMD cpu microcode * RTL8192E: Remove old realtek WiFi firmware - Update aliases ==== libapparmor ==== - Add dovecot-unix_chkpwd.diff to allow dovecot-auth to execute unix_chkpwd, and add a profile for unix_chkpwd. This is needed for PAM 1.6 (boo#1219139) - Refresh apparmor.keyring - the key was renewed ==== libjcat ==== Version update (0.2.0 -> 0.2.1) - Update to version 0.2.1: + Do not dedupe sig and sig-of-checksum when loading. + Fix the installed tests. + Show the sig-of-checksum results clearer on the CLI. ==== mdevctl ==== Version update (1.2.0 -> 1.3.0) - Update to version 1.3.0 (jsc#PED-4981): * tests: add tests for live and defined support * doc: document live support and its options * cli: add live and defined parameters to modify command * callouts: add callout live event support * main: refactor jsonfile loading * main: refactor getting active devices * tests: add callout versioning tests * callouts: add warning for unknown supported actions and events * callouts: prevent repeating unsuccessful script searches * callouts: add versioning on callout scripts * callouts: make callout method reusable * callouts: add a check_result_fn to invoke_first_matching_script * Fix new clippy warnings * Cargo.toml: move tempfile to dev-dependencies * main: assemble active devices without overwriting * mdevctl.spec.in: Add systemd as build requirement * callout: ignore broken pipe on stdin * cli: improve lsmdev help * callouts: set script in callout on success only * main: fix file open error being suppressed * Fix clippy warning for useless vec * callouts: replace negated check and improve msgs * callouts: improve debug messages in get_attributes * callouts: match code format in Display for Event and Action * tests/callouts: make scripts cross distro compliant * actions: update release action to newer versions * Bump clap to 4.0 * Bump env_logger dependency to 0.9.0 * Fix deprecated github actions * cli: change modify parameter relationships * tests: use printf over echo * tests: add callout constructor panic tests * callouts: add MDev to callout struct * callouts: Move stdin generation from Callout::invoke_script() * callouts: Add a Callout argument to the invoke callback function * callouts: Reuse Callout::callout() for get_attributes() * callouts: Return Output from Callout::callout() * callouts: Remove Callout::callout_dir() * callouts: Move self.script invocation to callout() * callouts: make Callout::invoke() a method * mdev: provide better error message for invalid attr index * mdev: change attribute index arguments to usize * cli: adjust help text for modify option addattr * modify: ensure required parameter is given * trim trailing null from callout script get-attributes output * Add --force option for commands that have callouts * Bump 'nix' dependency * tests: test 'stop' with callouts * tests: remove stray debug prints during fork * tests: make test failure reports more obvious * Bump version to 1.3.0 * undefine: report error if device is not undefined * modify: add jsonfile optional parameter * cli: add cli tests * cli: fix clap deprecations warnings * tests: fix test_modify() when auto and manual are both set * Fix panic on modify delattr with invalid index * Active attributes (#71) * clippy: remove needless borrows * mdevctl.rst: align use of term state * Add tests for callout dir priority * Add system callout script dir outside /etc. * Add ability to set env root with env variable * Rename Environment::persist_base() to config_base() * Update github checkout action * Relax 'nix' dependency version requirement * callouts: remove return value from Callout::notify() * callouts: remove separate is_dir() check in notify() * callouts: filter and map iterator in notifier loop * Update uuid version * tests: verify that callout scripts are executed in order * callouts: make sure scripts are sorted * callouts: simplify loop through callout dir * callouts: Remove call to count() on callout dir entries * Fix new clippy warnings * Fix intermittent callout failure during test * rpm: set debug env vars when running tests in rpm build * Add python3-docutils to rpm BuildRequires ==== mutter ==== Subpackages: mutter-lang - mutter-SLE-bsc984738-grab-display.patch: * Temporary disable this SLE-only patch as it makes mutter 45 lock-up on non-CSD apps (bsc#1218935) ==== numactl ==== Version update (2.0.16.21.g693fee1 -> 2.0.17.4.g63befa8) Subpackages: libnuma1 - Update to version 2.0.17.4.g63befa8: * Fix CodeQl Warn: Wrong type of arguments to formatting function * libnuma: Fix incorrect print and exit of numa_preferred/_many APIs * libnuma: Fix unexpected output * Fix README.md * Increase version number * Fix build badge * Fix README.md * Update README.md * Add configure file for release * Fix unused function return warning in numastat * fix complain() fuction print newline * Document that numa_police_memory may cause data races * Add numastat_diff from jirka-h * Enable v1 compatibility for unused getnodemask test * libnuma: Handle initialization without sysfs * Support empty memory nodes * numactl: Add --version option to print version * Remove obsolete numamon file * numactl: Use standard tab indent for print_node_cpus * Avoid using /proc/cpuinfo in test suite * numact: Add --cpu-compress option * Pin release workflow script to minimize risk of supply chain attacks * move_pages: Fix warning (missing hunk from earlier revert) * numastat: Remove unused functions * distance: Remove unused variable (NFC) * numademo: Adjust memcpy test bandwidth calculation * numactl.c: Refactor print_node_cpus to display CPU ranges * numactl.c: Refactor print_node_cpus to display CPU ranges * numactl.c: Refactor print_node_cpus to display CPU ranges * Refactor print_node_cpus to display CPU ranges instead of individual CPUs * numactl: Fix manual for --preferred and --preferred-many * Revert "Fix build error on riscv64 by linking libatomic" * Include <fcntl.h> instead of <sys/fcntl.h> * Fix the example usage in the numactl manual * Fix issue #190 about numa_exit_on_warn does not work * Create SECURITY.md * fix: fix memory leaks when run with -H * use mems allowed nodes to test prefer_many policy. * fix typo in memhog.8 * Update move_pages.c * migspeed don't have to be linked against librt * Add MPOL_F_RELATIVE/STATIC_NODES ==== openssl-3 ==== Subpackages: libopenssl3 libopenssl3-32bit libopenssl3-x86-64-v3 - Encapsulate the fips provider into a new package called libopenssl-3-fips-provider. - Added openssl-3-use-include-directive.patch so that the default /etc/ssl/openssl.cnf file will include any configuration files that other packages might place into /etc/ssl/engines3.d/ and /etc/ssl/engdef3.d/. Also create symbolic links /etc/ssl/engines.d/ and /etc/ssl/engdef.d/ to above versioned directories. - Updated spec file to create the two new necessary directores for the above patch and two symbolic links to above directories. [bsc#1194187, bsc#1207472, bsc#1218933] - Security fix: [bsc#1218810, CVE-2023-6237] * Limit the execution time of RSA public key check * Add openssl-CVE-2023-6237.patch - Rename openssl-Override-default-paths-for-the-CA-directory-tree.patch to openssl-crypto-policies-support.patch - Embed the FIPS hmac. Add openssl-FIPS-embed-hmac.patch - Load the FIPS provider and set FIPS properties implicitly. * Add openssl-Force-FIPS.patch [bsc#1217934] - Disable the fipsinstall command-line utility. * Add openssl-disable-fipsinstall.patch - Add instructions to load legacy provider in openssl.cnf. * openssl-load-legacy-provider.patch - Disable the default provider for the test suite. * openssl-Disable-default-provider-for-test-suite.patch - Security fix: [bsc#1218690, CVE-2023-6129] * POLY1305: Fix vector register clobbering on PowerPC * Add openssl-CVE-2023-6129.patch - Add patch to fix BTI enablement on aarch64: * openssl-Enable-BTI-feature-for-md5-on-aarch64.patch ==== openssl ==== - New libopenssl-fips-provider package. ==== python-argcomplete ==== Version update (3.2.1 -> 3.2.2) - update to 3.2.2: * Expand tilde in zsh ==== python-authheaders ==== Version update (0.16.1 -> 0.16.2) - update to 0.16.2: * Add checks for None results to avoid tracebacks (#31) * Account for FWS in From (which is legal, apparently) * Delete more setup.py cruft for non-supported Pythons ==== python-pyOpenSSL ==== Version update (23.3.0 -> 24.0.0) - update to 24.0.0: * Added OpenSSL.SSL.Connection.get_selected_srtp_profile to determine which SRTP profile was negotiated. #1279. ==== strace ==== Version update (6.6 -> 6.7) - Update to strace 6.7 * Implemented -kk/--stack-traces=source option for libdw-based stack tracing. * Implemented decoding of futex_wake, futex_wait, and sys_futex_requeue syscalls. * Updated lists of BPF_*, BTRFS_*, IORING_*, KVM_*, LANDLOCK_*, PR_*, and TCP_* constants. * Updated lists of ioctl commands from Linux 6.7. * Fix strace -r during the first second after booting to show correct relative timestamps. * Fix strace -f entering deadlock on exit if there are tracee processes spawned using vfork semantics. ==== xdg-utils ==== Version update (1.2.0~beta1+20230929 -> 1.2.0+20240130) - Update to Version 1.2.0 (Lining up with the upstream release) * all: Add xdg-realpath to better handle Canonicalizing filenames (#66) * xdg-open: Use url.dll as url opener on wsl (#242) * tests: Fix quoting issues in t-xdg-open.sh * xdg-open: Added a reporting issues section to xdg-open in the hopes that more issues will be attributed correctly * xdg-mime: Added a secutity note on xdg-mime default to warn against confusing openers and runners * xdg-open: Added paragraph explaining the wiered return behaviour of xdg-open * xdg-email: shellcheck * xdg-mime: shellcheck * xdg-settings: Add support for deeping-desktop browser setting in xdg-settings. * all: Fix config.status warning about ignored --datarootdir setting * all: Shellchecked xdg-utils-common.in * xdg-open: shellcheck * xdg-mime: Create a generic implementation for KDE * all: Move to markdown for README's * xdg-mime: Improve Documentation around query file/default * xdg-open: Document not handling '-' at the start of filenames * xdg-open: Deduplicate URL recognition * xdg-open: remove unused open_generic_xdg_file_mime * xdg-open: use LC_ALL=C with URLs * xdg-open: Fix URI/URL handling * xdg-email: Remove default BROWSER logic, no longer needed * xdg-mime: Improve synopsis * xdg-settings: read KDE browser settings the right way around * xdg-open: Improve WSL support * xdg-mime: actually handle lists in mimeapps.list correctly ==== xf86-video-qxl ==== - Xspice-python3.patch * for python3 interpreter needs to be /usr/bin/python3 ==== xorg-x11-server ==== Subpackages: xorg-x11-server-Xvfb xorg-x11-server-extra - no longer (build-)require obsolete Xprint/XprintUtil ==== xterm ==== Version update (388 -> 389) Subpackages: xterm-bin xterm-resize - update to 389: * interchange variables in subparameter parsing, fixing a bug where subparameters after the first parameter could be misidentified * correct popping of icon/window titles in a case where only one was pushed from patch #385 changes. * add XTQMODKEYS response in DECRQSS, as alternative for vim. * correct DECCIR encoded information on character set size, handle a VT525 quirk, and add DECST8C (Windows Terminal [#14984]). * improve DECRQCRA (prompted by discussion with James Holderness, Windows Terminal #14974). * add part of VT525 color controls: + DECAC, to update default foreground/background, respond to DECRQSS + DECATC, to respond with DECRQSS * prevent Unicode non-characters from being printed * modify send_SGR() to avoid modifying colors 16 to 255 in printed output (patch by Grady Martin). * minor cleanup of miscellaneous error-codes with ERROR_MISC. * remove legacy CSI 53 for locator status, corrected in patch * modify DECRQUPSS and DECAUPSS feature to support VT5xx character sets (report by Thomas Wolff). * improve EWMH handling (report/analysis by Edward Rosten) + reset _NET_WM_STATE_HIDDEN flag from _NET_WM_STATE before mapping the window to deiconify. + cache X properties to reduce latency (adapted from patch by Edward Rosten).

1 0

Difference between organizations “rpm” and “pool” in “src.opensuse.org”
by Obs Geeko 31 Jan '24

31 Jan '24

Hello, May I ask what are the differences between these two organizations in "src.opensuse.org"? They both have a similar package list. https://src.opensuse.org/pool https://src.opensuse.org/rpm/ By the way, will this old site continue to update? https://code.opensuse.org/group/package Thank you.

6 6

install Tumbleweed minimal without AppArmor
by Obs Geeko 31 Jan '24

31 Jan '24

Hello everyone, I got "These patterns need to be selected to install AppArmor. Please manually select the needed items to install." Product: openSUSE Tumbleweed Patterns: + Base System + Minimal Appliance Base I am using net-install with https://download.opensuse.org/tumbleweed/repo/oss/boot/x86_64/loader/{linux… to install Tumbleweed. I have de-select Pattern AppArmor, and select only "Base System" and package "zypper". Must we install AppArmor? How can we install a very minimal Tumbleweed like JeOS? Thank you. Best regards

6 6

openSUSE Release Engineering meeting 31.01.2024
by Lubos Kocman 31 Jan '24

31 Jan '24

How to join the meeting? https://calendar.opensuse.org/teams/release/events/opensuse_release_enginee… All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting ## Attendees lkocman, DimStar, GuillaumeG, ana, Max, DocB, Douglas ## Leap New Leap 15.6 with Gnome 45 was published yesterday https://openqa.opensuse.org/tests/overview?distri=opensuse&version=15.6&bui… We should start working on the Beta announcement to capture all interesting SP6 updates etc. We could use https://code.opensuse.org/leap/features/issues as an input Reminder that we have check in deadline for Leap 15.6 beta on 21st February (corresponds with SLES 15 SP6 Public Beta check in deadline) https://en.opensuse.org/openSUSE:Roadmap#Schedule_for_openSUSE_Leap_15.6 ALP Marble 6.0 was synced to OBS, I'll be working on the initial setup. https://build.opensuse.org/project/subprojects/openSUSE:Leap:Micro:6.0 de-branding in-progress In person discussion with Granite PM, on Thursday Data driven decision for migration (re-use binaries vs rebuild sources etc). PM is not keen on keeping identical packages with buildroot-only SLES/ALP packages. Desktop component awareness in ALP GnuHealth 4.4 - tracking of sr against SLES python311* https://etherpad.opensuse.org/p/gnuhealth Agama team - Scanning Leap 16 Roadmap, since they're aligning with Granite/SLATE ## openSUSE Tumbleweed (ana) openSUSE:Factory build fail stats: 65 failed 5 unresolvable (last week 76 failed, 11 unresolvable) https://tinyurl.com/ysy4nnnz Many changes going on, some of the very most relevant updates: * Linux Kernel enabled multibuild * ruby 3.3 is now the default * Update openssl 3 (still 3.1.4), many CVE fixed. * GPG2 2.4.4 * Mesa 23.3.4 * MozillaFirefox 122.0 * podman 4.9.0 lkocman: we just updated podman in SLES 15 SP6, I think we should consider 4.9.0 too * Rust 1.75 * systemtap 5.0 Updates waiting / work still in progress: * RPM 4.19.1, planning to accept it today. Packages not included in rings will need updates, see https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… Dirk: do we plan a full rebuild after the RPM acceptance? I would like to have a full rebuild after python312 enablement. We should not have rpm + gcc + python312 all in a single rebuild. If the rebuild happens this week I'd be happy * Additional Python 3.12 and setuptools modules in Staging:K, blocked by RPM 4.19.1 * GCC 14 (only for runtime libraries) * Kubernetes 1.29 * QEMU 8.2.0, ovmf build to stall against this version * libxml 2.12.1 (lots of work to do), libzypp and some packages got fixed, on hold * dbus-broker as default dbus session manager, now everything builds, two openQA checks failing. * c-ares: after nodejs updates, there is an issues with a new package cycle * cmake, macro changes (DOCDIR MANDIR INFODIR) make a few packages FBTFS ## Richard (Aeon+botmaster) Not available ## Bernhard (Slowroll) * kernel-longterm expected around March * first openQA test WIP * next major version bump expected in 2-3 weeks (mid February) * Vacation 2024-02-05 to 09 ## Max Leap 15.6 - build stats in Backports: 52(was 59) faild, 67 unresolvable(was 63) * Build597.1 has been published * The remaining qt5/qt6 applications got merged for adapt to the Qt5 5.15.12 and Qt6 6.6.1 from SLE15 * Merged many python application update or deleterequests, but still, most of unresolvables were python applications, and still has many were pending in staging * The tweak of skippkg-finder and 000package-groups works, the noarch ones has been selected to ftp-tree instead of the arch-dependent ones(with an unmatched version number) * Vacation: Feb. 7-14 ## Guillaume - Arm * Tumbleweed: - Rolling - WIP: Still some packages built without PAC/BTI, two main reasons: * assembler files without PAC/BTI (usually reported upstream, e.g. openssl, gnutls, etc) * Packages built without distro flags (usually fixed in spec file) - rpmlint: https://rpmlint.opensuse.org/ * we noticed that rpmlint does not check anymore for packages built without distro %{optflags}. We should add it back. https://bugzilla.opensuse.org/show_bug.cgi?id=1217840 - WIP to get Tumbleweed to run on Lenovo X13s: * Audio: kernel config fix lost on last update. Fixed in next kernel update. * Main pieces in place. Latest status available at https://en.opensuse.org/HCL:ThinkpadX13s * Leap 15.6/Backports SP6: - No update * WSL: x86_64 is fetched from Microsoft Strore for Tumbleweed image instead of arm64. See https://bugzilla.opensuse.org/show_bug.cgi?id=1219372 lkocman: Ah thank you. I'll share that with team. Contents of the image are x86_64. Possible workaround would be a second application e.g. Leap 15 aarch64, Tumbleweed aarch64 etc ... ## Sarah - s390x Not available ## Doug * FOSDEM * All set for travel. Mobile #s exchanged * Items organized * At GNU Health Booth on Saturday & distro devroom on Sunday * Telegram group for everyone on the bus (and others from SUSE might join): https://t.me/+ZnUyy8AcJABlM2Vk Adrian: if this would be a public channel non-telegram users could access it via webbrowser. * GSoC * Application now open. Deadline Feb. 6 at 18:00 UTC * Planning Community-Summit at SUSECON * Details not confirmed yet * Working with organizers on availability of room and structure lkocman: The interesting part for us is definitely the size of the SUSECon. Last year 600 people on a physical one. Previously 1000 on virtual. * openSUSE Conference * 22 Registrations, 18 Submissions, 10 Hours * Contract signed and returned to Z-Bau * Article about visa and TSP deadline released * The Geeko Foundation is taking over TSP * Wiki updated * Waiting on donation Static * oSC24 dates June 27 to 29 reserved (Thursday - Saturday) * Open 4 Business June 26 between 2 - 6 p.m. at Franken Campus * AI topics (static) ## Dirk - various python 3.12 fallout preparations - tried to split egrep/fgrep from "grep" into a separate subpackage, reducing fallout - drop overlays over python311 on Backports SP6 is in progress Dirk: it would help if we could have all the drops in a single staging as they have common build failure root causes. ## Wolfgang (Package Hub), Scott Bahling Not available ## Maintenance team (Marcus or Maurizio (m4u)) QAM scheduled 15.6 Beta openQA setup for the next sprint, so it should be ready in mid-February according to the plan. ## Adrian - OBS The new composer/product builder discussion was covered in Max's section. Heads up: a first SR related to the composer is on the way. This is done to setup new products. ## Simon (Leap Replacement/Linarite) Not available ## Open Floor Context was that the last request took a month to be processed. Research seems to show that only a portion of people know how to process them. openSUSE membership process - should not document connect.o.o anymore in https://en.opensuse.org/openSUSE:Membership_officials

1 0

New Tumbleweed snapshot 20240129 released!
by Dominique Leuenberger 30 Jan '24

30 Jan '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: GraphicsMagick dos2unix (7.5.1 -> 7.5.2) ghostscript (9.56.1 -> 10.02.1) grub2 gstreamer-plugins-rs iso-codes (4.15.0 -> 4.16.0) libexttextcat (3.4.6 -> 3.4.7) libgcrypt nghttp2 (1.58.0 -> 1.59.0) patterns-kde python-Jinja2 python-M2Crypto python-MarkupSafe (2.1.3 -> 2.1.4) python-pycryptodome (3.19.1 -> 3.20.0) rubygem-parser (3.2.2.4 -> 3.3.0.5) rubygem-rubocop (1.59.0 -> 1.60.2) salt virtualbox virtualbox-kmp (7.0.12_k6.7.1_1 -> 7.0.12_k6.7.1_2) yast2 (5.0.4 -> 5.0.5) yast2-installation (5.0.4 -> 5.0.5) yast2-trans (84.87.20240120.54f4b9f06a -> 84.87.20240126.9c7185e3f6) zenity (4.0.0 -> 4.0.1) === Details === ==== GraphicsMagick ==== Subpackages: libGraphicsMagick++-Q16-12 libGraphicsMagick-Q16-3 libGraphicsMagick3-config - ghostscript-fonts-std: relax to recommends [bsc#1216604] ==== dos2unix ==== Version update (7.5.1 -> 7.5.2) - update to 7.5.2: * Dos2unix can print info about the line break type of the last line, or indicate there is none * Updated documentation about ASCII mode conversion ==== ghostscript ==== Version update (9.56.1 -> 10.02.1) Subpackages: ghostscript-x11 - update to 10.02.1: * Patch release to address some security bugs * This release (10.02.0) marks the final demise of the PostScript based PDF interpreter. * This 10.01.1 release removes the "-dNEWPDF=false" command line option to fall back to the deprecated, old PDF interpreter. * This 10.01.0 release removes the "-dNEWPDF=false" command line option to fall back to the deprecated, old PDF interpreter. * This release officially deprecates the old Postscript implementation of PDF, we will not be updating or maintaining that code moving forward. The option to use the old PDF implementation _**will**_ be removed in the next full release (10.01.0) * Important: This release includes the new PDF interpreter (implemented in C rather than PostScript). It is both integrated into Ghostscript (now ENABLED by default), and available as a standalone, PDF only, binary. See https://ghostscript.com/pdfi.html for more details. * This also bundles the latest zlib (1.2.12) which addresses a security issue (CVE-2018-25032) * **Important**: This release includes the new PDF interpreter (implemented in C rather than PostScript). It is both integrated into Ghostscript (now **ENABLED** by default), and available as a standalone, PDF only, binary. See https://ghostscript.com/pdfi.html for more details. - drop CVE-2023-28879.patch, CVE-2023-36664.patch, CVE-2023-38559.patch, CVE-2023-43115.patch, CVE-2023-46751.patch: upstream - drop remove-zlib-h-dependency.patch: unused ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - Remove magic number header field check on arm64 (bsc#1218783) * 0001-loader-arm64-efi-linux-Remove-magic-number-header-fi.patch ==== gstreamer-plugins-rs ==== - Increase memory to 12G for s390x builds in _constraints (bsc#1218563). ==== iso-codes ==== Version update (4.15.0 -> 4.16.0) Subpackages: iso-codes-lang - update to 4.16.0: + Updated translations + ISO 4217: New translation for Khmer (Central) + ISO 639-2: New translation for Armenian + ISO 639-5: New translation for Lithuanian ==== libexttextcat ==== Version update (3.4.6 -> 3.4.7) Subpackages: libexttextcat-2_0-0 - Update to version 3.4.7: * Add Ilocano, Saraiki ==== libgcrypt ==== Subpackages: libgcrypt20 libgcrypt20-32bit libgcrypt20-x86-64-v3 - add libgcrypt-no-deprecated-grep-alias.patch ==== nghttp2 ==== Version update (1.58.0 -> 1.59.0) - update to 1.59.0: * Update bash_completion * h2load: Fix bug that ttfb is not recorded if h3 stream has no data * h2load: Consider all h2 HEADERS when counting bytes and recording ttfb * h2load: Ignore 1xx status code * nghttpd: Free SSL_CTX on exit * nghttpx: OpenSSL needs SSL_CTX_set_recv_max_early_data * nghttpx: OpenSSL needs SSL_CTX_set_recv_max_early_data * cmake: Require OpenSSL >= 1.1.1 * Add nghttp2_select_alpn and deprecate nghttp2_select_next_protocol * nghttpx: Add --alpn-list and deprecate --npn-list * h2load: Add --alpn-list and deprecate --npn-list * Remove NPN * src: Support building with aws-lc * Avoid detecting OpenSSL 3.2 as quictls * Use nghttp3_pri_parse_priority added since nghttp3 v1.1.0 * h2load: Fix IPv6 address in :authority * h2load: Fix IPv6 address in :authority * nghttpx: Propagate stream priority from backend to frontend * nghttpx: Propagate stream priority from backend to frontend * Merge pull request #1991 from nghttp2/get-and-parse- extpri * Add API to get and parse RFC 9218 priority * nghttpx: Prefer __FILE_NAME__ if defined ==== patterns-kde ==== Subpackages: patterns-kde-kde patterns-kde-kde_edutainment patterns-kde-kde_games patterns-kde-kde_ide patterns-kde-kde_imaging patterns-kde-kde_internet patterns-kde-kde_multimedia patterns-kde-kde_office patterns-kde-kde_pim patterns-kde-kde_plasma patterns-kde-kde_utilities patterns-kde-kde_utilities_opt patterns-kde-kde_yast - Make phonon4qt5-backend a hard dep of the plasma pattern (boo#1219277) - Avoid gstreamer if not necessary - Change from phonon4qt5-backend-gstreamer to phonon4qt5-backend-vlc due to deprecation of the gstreamer backend ==== python-Jinja2 ==== - Disable broken test with latest version of MarkupSafe (2.1.4) (gh#pallets/jinja#1930, gh#pallets/markupsafe#417) ==== python-M2Crypto ==== - Disable broken tests with openssl 3.2, bsc#1217782 ==== python-MarkupSafe ==== Version update (2.1.3 -> 2.1.4) - update to 2.1.4: * Don't use regular expressions for striptags, avoiding a performance issue. :pr:`413` ==== python-pycryptodome ==== Version update (3.19.1 -> 3.20.0) - update to 3.20.0: * Added support for TurboSHAKE128 and TurboSHAKE256. * Added method Crypto.Hash.new() to generate a hash object given a hash name. * Added support for AES-GCM encryption of PBES2 and PKCS#8 containers. * Added support for SHA-2 and SHA-3 algorithms in PBKDF2 when creating PBES2 and PKCS#8 containers. * Export of RSA keys accepts the prot_params dictionary as parameter to control the number of iterations for PBKDF2 and scrypt. * C unit tests also run on non-x86 architectures. * GH#787: Fixed autodetect logic for GCC 14 in combination with LTO. ==== rubygem-parser ==== Version update (3.2.2.4 -> 3.3.0.5) - updated to version 3.3.0.5 v3.3.0.5 (2024-01-21) - -------------------- API modifications: * Bump 3.2 branch to 3.2.3 (#993) (Koichi ITO) v3.3.0.4 (2024-01-15) - -------------------- Features implemented: * Register a Ruby 3.4 parser (#991) (Jean byroot Boussier) v3.3.0.3 (2024-01-12) - -------------------- Bugs fixed: * lexer.rl: accept tabs before closing heredoc delimiter (#990) (Ilya Bylich) v3.3.0.2 (2024-01-07) - -------------------- Bugs fixed: * Fix an error when using heredoc with non-word delimiters (#987) (Koichi ITO) v3.3.0.1 (2024-01-06) - -------------------- Bugs fixed: * Supports Ruby 2.0+ runtime (#986) (Koichi ITO) v3.3.0.0 (2024-01-05) - -------------------- API modifications: * current.rb: mark 3.3 branch as stable (#984) (Ilya Bylich) * ruby33.y: extract string_dend (#969) (Ilya Bylich) * lexer.rl: treat numparams as locals (#968) (Ilya Bylich) * ruby33.y: extract words_sep (#967) (Ilya Bylich) * literal.rb: match heredoc identifier from end of line (#965) (Ilya Bylich) * ruby33.y: extract {endless_command,endless_arg} rules (#964) (Ilya Bylich) * Bump Racc to 1.7.3 (#954) (Koichi ITO) Features implemented: * ruby33.y: reject ambiguous anonymous arguments (#983) (Ilya Bylich) * ruby33.y: extract arg_splat rule. (#981) (Ilya Bylich) * builder.rb: warn `it` in a block with no ordinary params. (#980) (Ilya Bylich) * builder.rb: extract named captures only from static regexes. (#979) (Ilya Bylich) * ruby33.y: accept expr_value in sclass definition. (#978) (Ilya Bylich) * ruby33.y: extract p_in_kwarg (#977) (Ilya Bylich) * ruby33.y: extract p_assoc and p_in rules (#976) (Ilya Bylich) * ruby33.y: reject invalid gvar as symbol (#974) (Ilya Bylich) * ruby33.y: properly restore in_defined flag, extract begin_defined rule (#973) (Ilya Bylich) * builder.rb: reject multi-char gvar names starting with 0 (#972) (Ilya Bylich) * ruby33.y: allow semicolon in parenthesis at the first argument of command call (#971) (Ilya Bylich) * ruby33.y: parse qualified const with brace block as a method call (#970) (Ilya Bylich) ==== rubygem-rubocop ==== Version update (1.59.0 -> 1.60.2) - updated to version 1.60.2 [#]# 1.60.2 (2024-01-24) [#]## Bug fixes * [#12627](https://github.com/rubocop/rubocop/issues/12627): Fix a false positive for `Layout/RedundantLineBreak` when using index access call chained on multiple lines with backslash. ([@koic][]) * [#12626](https://github.com/rubocop/rubocop/pull/12626): Fix a false positive for `Style/ArgumentsForwarding` when naming a block argument `&`. ([@koic][]) * [#12635](https://github.com/rubocop/rubocop/pull/12635): Fix a false positive for `Style/HashEachMethods` when both arguments are unused. ([@earlopain][]) * [#12636](https://github.com/rubocop/rubocop/pull/12636): Fix an error for `Style/HashEachMethods` when a block with both parameters has no body. ([@earlopain][]) * [#12638](https://github.com/rubocop/rubocop/issues/12638): Fix an `Errno::ENOENT` error when using server mode. ([@koic][]) * [#12628](https://github.com/rubocop/rubocop/pull/12628): Fix a false positive for `Style/ArgumentsForwarding` when using block arg forwarding with positional arguments forwarding to within block. ([@koic][]) * [#12642](https://github.com/rubocop/rubocop/pull/12642): Fix false positives for `Style/HashEachMethods` when using array converter method. ([@koic][]) * [#12632](https://github.com/rubocop/rubocop/issues/12632): Fix an infinite loop error when `EnforcedStyle: explicit` of `Naming/BlockForwarding` with `Style/ArgumentsForwarding`. ([@koic][]) [#]# 1.60.1 (2024-01-17) [#]## Bug fixes * [#12625](https://github.com/rubocop/rubocop/pull/12625): Fix an error when server cache dir has read-only file system. ([@Strzesia][]) * [#12618](https://github.com/rubocop/rubocop/issues/12618): Fix false positives for `Style/ArgumentsForwarding` when using block argument forwarding with other arguments. ([@koic][]) * [#12614](https://github.com/rubocop/rubocop/issues/12614): Fix false positiveis for `Style/RedundantParentheses` when parentheses in control flow keyword with multiline style argument. ([@koic][]) [#]## Changes * [#12617](https://github.com/rubocop/rubocop/issues/12617): Make `Style/CollectionCompact` aware of `grep_v` with nil. ([@koic][]) [#]# 1.60.0 (2024-01-15) [#]## Bug fixes * [#12603](https://github.com/rubocop/rubocop/issues/12603): Fix an infinite loop error for `Style/MultilineTernaryOperator` when using a method call as a ternary operator condition with a line break between receiver and method. ([@koic][]) * [#12549](https://github.com/rubocop/rubocop/issues/12549): Fix a false positive for `Style/RedundantLineContinuation` when line continuations for multiline leading dot method chain with a blank line. ([@koic][]) * [#12610](https://github.com/rubocop/rubocop/pull/12610): Accept parentheses in argument calls with blocks for `Style/MethodCallWithArgsParentheses` `omit_parentheses` style. ([@gsamokovarov][]) * [#12580](https://github.com/rubocop/rubocop/pull/12580): Fix an infinite loop error for `Layout/EndAlignment` when misaligned in singleton class assignments with `EnforcedStyleAlignWith: variable`. ([@koic][]) * [#12548](https://github.com/rubocop/rubocop/issues/12548): Fix an infinite loop error for `Layout/FirstArgumentIndentation` when specifying `EnforcedStyle: with_fixed_indentation` of `Layout/ArrayAlignment`. ([@koic][]) * [#12236](https://github.com/rubocop/rubocop/issues/12236): Fix an error for `Lint/ShadowedArgument` when self assigning to a block argument in `for`. ([@koic][]) * [#12569](https://github.com/rubocop/rubocop/issues/12569): Fix an error for `Style/IdenticalConditionalBranches` when using `if`...`else` with identical leading lines that assign to `self.foo`. ([@koic][]) * [#12437](https://github.com/rubocop/rubocop/issues/12437): Fix an infinite loop error for `EnforcedStyle: omit_parentheses` of `Style/MethodCallWithArgsParentheses` with `Style/SuperWithArgsParentheses`. ([@koic][]) * [#12558](https://github.com/rubocop/rubocop/issues/12558): Fix an incorrect autocorrect for `Style/MapToHash` when using `map.to_h` without receiver. ([@koic][]) * [#12179](https://github.com/rubocop/rubocop/issues/12179): Let `--auto-gen-config` generate `Exclude` when `Max` is overridden. ([@jonas054][]) * [#12574](https://github.com/rubocop/rubocop/issues/12574): Fix bug for unrecognized style in --auto-gen-config. ([@jonas054][]) * [#12542](https://github.com/rubocop/rubocop/issues/12542): Fix false positive for `Lint/MixedRegexpCaptureTypes` when using look-ahead matcher. ([@marocchino][]) * [#12607](https://github.com/rubocop/rubocop/pull/12607): Fix a false positive for `Style/RedundantParentheses` when regexp literal attempts to match against a parenthesized condition. ([@koic][]) * [#12539](https://github.com/rubocop/rubocop/pull/12539): Fix false positives for `Lint/LiteralAssignmentInCondition` when a collection literal contains non-literal elements. ([@koic][]) * [#12571](https://github.com/rubocop/rubocop/issues/12571): Fix false positives for `Naming/BlockForwarding` when using explicit block forwarding in block method. ([@koic][]) * [#12537](https://github.com/rubocop/rubocop/issues/12537): Fix false positives for `Style/RedundantParentheses` when `AllowInMultilineConditions: true` of `Style/ParenthesesAroundCondition`. ([@koic][]) * [#12578](https://github.com/rubocop/rubocop/pull/12578): Fix false positives for `Style/ArgumentsForwarding` when rest arguments forwarding to a method in block. ([@koic][]) * [#12540](https://github.com/rubocop/rubocop/issues/12540): Fix false positives for `Style/HashEachMethods` when rest block argument of `Enumerable#each` method is used. ([@koic][]) * [#12529](https://github.com/rubocop/rubocop/issues/12529): Fix false positives for `Style/ParenthesesAroundCondition`. ([@koic][]) * [#12556](https://github.com/rubocop/rubocop/issues/12556): Fix false positives for `Style/RedundantParentheses` when parentheses are used around a semantic operator in expressions within assignments. ([@koic][]) * [#12541](https://github.com/rubocop/rubocop/pull/12541): Fix false negative in `Style/ArgumentsForwarding` when a block is forwarded but other args aren't. ([@dvandersluis][]) * [#12581](https://github.com/rubocop/rubocop/pull/12581): Handle trailing line continuation in `Layout/LineContinuationLeadingSpace`. ([@eugeneius][]) * [#12601](https://github.com/rubocop/rubocop/issues/12601): Make `Style/EachForSimpleLoop` accept block with no parameters. ([@koic][]) [#]## Changes * [#12535](https://github.com/rubocop/rubocop/pull/12535): Allow --autocorrect with --display-only-fail-level-offenses. ([@naveg][]) * [#12572](https://github.com/rubocop/rubocop/pull/12572): Follow a Ruby 3.3 warning for `Security/Open` when `open` with a literal string starting with a pipe. ([@koic][]) * [#12453](https://github.com/rubocop/rubocop/issues/12453): Make `Style/RedundantEach` aware of safe navigation operator. ([@koic][]) * [#12233](https://github.com/rubocop/rubocop/issues/12233): Make `Style/SlicingWithRange` aware of redundant and beginless range. ([@koic][]) * [#12388](https://github.com/rubocop/rubocop/pull/12388): Reject additional 'expanded' `EnforcedStyle` options when `--no-auto-gen-enforced-style` is given. ([@kpost][]) * [#12593](https://github.com/rubocop/rubocop/pull/12593): Require Parser 3.3.0.2 or higher. ([@koic][]) ==== salt ==== Subpackages: python3-salt salt-master salt-minion salt-transactional-update - Provide user(salt)/group(salt) capabilities for RPM 4.19 - Prevent exceptions with fileserver.update when called via state (bsc#1218482) - Added: * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch - Improve pip target override condition with VENV_PIP_TARGET environment variable (bsc#1216850) - Fixed KeyError in logs when running a state that fails - Added: * improve-pip-target-override-condition-with-venv_pip_.patch * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch - Ensure that pillar refresh loads beacons from pillar without restart - Fix the aptpkg.py unit test failure - Prefer unittest.mock to python-mock in test suite - Added: * update-__pillar__-during-pillar_refresh.patch * fix-the-aptpkg.py-unit-test-failure.patch * prefer-unittest.mock-for-python-versions-that-are-su.patch - Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649) - Added: * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch - Revert changes to set Salt configured user early in the stack (bsc#1216284) - Added: * revert-make-sure-configured-user-is-properly-set-by-.patch - Align behavior of some modules when using salt-call via symlink (bsc#1215963) - Fix gitfs "__env__" and improve cache cleaning (bsc#1193948) - Added: * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch - Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157) - Added: * fix-cve-2023-34049-bsc-1215157.patch - Allow all primitive grain types for autosign_grains (bsc#1214477) - Added: * allow-all-primitive-grain-types-for-autosign_grains-.patch - Fix optimization_order opt to prevent testsuite fails - Improve salt.utils.json.find_json to avoid fails with transactional salt salt-ssh managed clients (bsc#1213293) - Use salt-call from salt bundle with transactional_update - Only call native_str on curl_debug message in tornado when needed - Implement the calling for batch async from the salt CLI - Added: * implement-the-calling-for-batch-async-from-the-salt-.patch * improve-salt.utils.json.find_json-bsc-1213293.patch * only-call-native_str-on-curl_debug-message-in-tornad.patch * use-salt-call-from-salt-bundle-with-transactional_up.patch * fix-optimization_order-opt-to-prevent-test-fails.patch - Fix calculation of SLS context vars when trailing dots on targetted sls/state (bsc#1213518) - Added: * fix-calculation-of-sls-context-vars-when-trailing-do.patch ==== virtualbox ==== - Fix extpack updater to allow PUEL version 11 - Package UnattendedTemplates into main package - Install UnattendedTemplates for unattended installing. ==== virtualbox-kmp ==== Version update (7.0.12_k6.7.1_1 -> 7.0.12_k6.7.1_2) - Fix extpack updater to allow PUEL version 11 - Package UnattendedTemplates into main package - Install UnattendedTemplates for unattended installing. ==== yast2 ==== Version update (5.0.4 -> 5.0.5) Subpackages: yast2-logs - Added s390 z/VM check to YaST::Arch (bsc#1210525). - 5.0.5 ==== yast2-installation ==== Version update (5.0.4 -> 5.0.5) - In zVM or KVM installations the cio_ignore kernel argument will be written only if given (bsc#1210525). - 5.0.5 ==== yast2-trans ==== Version update (84.87.20240120.54f4b9f06a -> 84.87.20240126.9c7185e3f6) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20240126.9c7185e3f6: * New POT for text domain 'installation'. * New POT for text domain 'base'. * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * New POT for text domain 'sap-installation-wizard'. ==== zenity ==== Version update (4.0.0 -> 4.0.1) Subpackages: zenity-lang - Update to version 4.0.1 + Changes and fixes since 4.0.0: - Bump webkit2gtk requirement in README - about: The licence is LGPL2.1+, not GPL - entry: Calculate number of --entry-text's properly (#75) - test: Add entry test in response to issue #75 - question: fix option --default-cancel - calendar: Fix off-by-one in day - test: Add test for --calendar - Updated translations.

1 0

Re: NFS Server mount issues since some days
by Ulf 30 Jan '24

30 Jan '24

Thanks Bernhard and Jose :-) can be the case, that Jose is right with his link to the resume and that nfs-client.target is stopped. Anyhow I don't use them, I will check it next time if my <mountpoint>.mount can be restarted at the client. At least the <mountpoint>.automount fails. About the Kernal I was looking as well Bernhard. Thanks for hint. I was thinking if the new scheduler have an impact as well. Ulf Am Dienstag, 30. Januar 2024, 10:02:25 CET schrieb Jose Iván Lopez: > Hi! > > I am not sure if it is related, but there is an open bug for NFS automount > after resuming the system, see > https://bugzilla.suse.com/show_bug.cgi?id=1217176. > > > On Tue, Jan 30, 2024 at 8:11 AM Bernhard M. Wiedemann via openSUSE Factory < > factory(a)lists.opensuse.org> wrote: > > On 29/01/2024 20.19, Ulf via openSUSE Factory wrote: > > > Since some days, my Tumbleweed with running NFS-server, blocks from time > > > > to > > > > > time the possibility to login. At systemctrl status and journalctl, I > > > > can't > > > > > find any hint. The login request will be displayed but the NFS-client > > > > timed > > > > > out. > > > > > > Can't find a update of NFS or bind in the last days. > > > > > > Any idea how to debug this issue? > > > > Kernel 6.7.1 came to Factory 3 days ago, so you could try to boot into a > > 6.6.x kernel to see if that helps. > > > > If it was already uninstalled, you can find it at > > > > https://download.opensuse.org/update/slowroll/repo/oss/x86_64/kernel-defau > > lt-6.6.11-1.1.x86_64.rpm

1 0

Re: NFS Server mount issues since some days
by Jose Iván Lopez 30 Jan '24

30 Jan '24

Hi! I am not sure if it is related, but there is an open bug for NFS automount after resuming the system, see https://bugzilla.suse.com/show_bug.cgi?id=1217176. On Tue, Jan 30, 2024 at 9:02 AM Jose Iván Lopez <jlopez(a)suse.com> wrote: > Hi! > > I am not sure if it is related, but there is an open bug for NFS automount > after resuming the system, see > https://bugzilla.suse.com/show_bug.cgi?id=1217176. > > > On Tue, Jan 30, 2024 at 8:11 AM Bernhard M. Wiedemann via openSUSE Factory > <factory(a)lists.opensuse.org> wrote: > >> >> >> On 29/01/2024 20.19, Ulf via openSUSE Factory wrote: >> > Since some days, my Tumbleweed with running NFS-server, blocks from >> time to >> > time the possibility to login. At systemctrl status and journalctl, I >> can't >> > find any hint. The login request will be displayed but the NFS-client >> timed >> > out. >> > >> > Can't find a update of NFS or bind in the last days. >> > >> > Any idea how to debug this issue? >> >> Kernel 6.7.1 came to Factory 3 days ago, so you could try to boot into a >> 6.6.x kernel to see if that helps. >> >> If it was already uninstalled, you can find it at >> >> https://download.opensuse.org/update/slowroll/repo/oss/x86_64/kernel-defaul… >> > > > -- > José Iván López González > System Management Team at SUSE LINUX GmbH > IRC: jilopez at libera > -- José Iván López González System Management Team at SUSE LINUX GmbH IRC: jilopez at libera

1 0

NFS Server mount issues since some days
by Ulf 30 Jan '24

30 Jan '24

Hello together, Since some days, my Tumbleweed with running NFS-server, blocks from time to time the possibility to login. At systemctrl status and journalctl, I can't find any hint. The login request will be displayed but the NFS-client timed out. Can't find a update of NFS or bind in the last days. Any idea how to debug this issue? Ulf

2 1

New Tumbleweed snapshot 20240126 released!
by Dominique Leuenberger 28 Jan '24

28 Jan '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: Mesa (23.3.3 -> 23.3.4) Mesa-drivers (23.3.3 -> 23.3.4) MozillaFirefox (121.0.1 -> 122.0) btrfsprogs (6.6.2 -> 6.7) corosync gcc13 (13.2.1+git8205 -> 13.2.1+git8250) gpg2 (2.4.3 -> 2.4.4) inih (57 -> 58) kernel-source libmaxminddb (1.8.0 -> 1.9.1) libqmi libsolv (0.7.27 -> 0.7.28) libvirt man perl-Bootloader (1.10 -> 1.11) postfix (3.8.4 -> 3.8.5) publicsuffix (20240107 -> 20240123) python-lxml spice-gtk tiff transactional-update virt-manager webkit2gtk3 webkit2gtk3-soup2 yast2-installation (5.0.3 -> 5.0.4) zbar === Details === ==== Mesa ==== Version update (23.3.3 -> 23.3.4) Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libOSMesa8 libgbm1 - Update to bugfix release 23.3.4 - -> https://docs.mesa3d.org/relnotes/23.3.4.html ==== Mesa-drivers ==== Version update (23.3.3 -> 23.3.4) Subpackages: Mesa-dri Mesa-gallium Mesa-libva libxatracker2 - Update to bugfix release 23.3.4 - -> https://docs.mesa3d.org/relnotes/23.3.4.html ==== MozillaFirefox ==== Version update (121.0.1 -> 122.0) Subpackages: MozillaFirefox-translations-common - Mozilla Firefox 122.0 https://www.mozilla.org/en-US/firefox/122.0/releasenotes/ MFSA 2024-01 (bsc#1218955) * CVE-2024-0741 (bmo#1864587) Out of bounds write in ANGLE * CVE-2024-0742 (bmo#1867152) Failure to update user input timestamp * CVE-2024-0743 (bmo#1867408) Crash in NSS TLS method * CVE-2024-0744 (bmo#1871089) Wild pointer dereference in JavaScript * CVE-2024-0745 (bmo#1871838) Stack buffer overflow in WebAudio * CVE-2024-0746 (bmo#1660223) Crash when listing printers on Linux * CVE-2024-0747 (bmo#1764343) Bypass of Content Security Policy when directive unsafe-inline was set * CVE-2024-0748 (bmo#1783504) Compromised content process could modify document URI * CVE-2024-0749 (bmo#1813463) Phishing site popup could show local origin in address bar * CVE-2024-0750 (bmo#1863083) Potential permissions request bypass via clickjacking * CVE-2024-0751 (bmo#1865689) Privilege escalation through devtools * CVE-2024-0752 (bmo#1866840) Use-after-free could occur when applying update on macOS * CVE-2024-0753 (bmo#1870262) HSTS policy on subdomain could bypass policy of upper domain * CVE-2024-0754 (bmo#1871605) Crash when using some WASM files in devtools * CVE-2024-0755 (bmo#1868456, bmo#1871445, bmo#1873701) Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7 - requires NSS 3.96.1 - rebased patches ==== btrfsprogs ==== Version update (6.6.2 -> 6.7) Subpackages: btrfsprogs-bash-completion btrfsprogs-udev-rules libbtrfs0 libbtrfsutil1 - update to 6.7 * mkfs: make 4k sectorsize default, recommended minimum kernel for that is 6.1 and requires subpage support on architectures with page size > 4k * subvolume create: return correct error code when a target already exists * tree-checker: dump tree block on error (btrfs-convert, ...) * scrub limit: fix reporting of a limit set while there's none * fi usage: fix reporting of unallocated data or raid56 profile without root privs due to lack of that information * convert: * align data block group lengths to 64K * fix conversion of a large filesystem when there are partial inode items present due to caching * other: * build fixes * updated documentation * new and updated tests - update to 6.6.3 * subvol create: accept multiple arguments * subvol delete: print the subvolume id in the output * subvol sync: check if the filesystems is still writeable so it does not wait indefinitely * device delete: add a timeout and warning when deleting multiple devices * scrub status: report limit if set in sysfs/../scrub_speed_max * scrub limit: new command to show or set the per-device scrub limits * scrub start: report the limit if set * build: * fix CPU feature detection on aarch64 * support Botan and OpenSSL (3.2+) as crypto backends * other: * documentation updates, RTD config update * new and updated tests * CI updates ==== corosync ==== Subpackages: libcfg6 libcmap4 libcorosync_common4 libcpg4 libquorum5 - Provide user(coroqnetd) and group(coroqnetd) in the -qnetd package: user and group are generated by the pre script. ==== gcc13 ==== Version update (13.2.1+git8205 -> 13.2.1+git8250) Subpackages: cpp13 gcc13-locale libasan8 libatomic1 libgcc_s1 libgcc_s1-32bit libgccjit0 libgfortran5 libgomp1 libhwasan0 libitm1 liblsan0 libobjc4 libquadmath0 libstdc++6 libstdc++6-32bit libstdc++6-locale libstdc++6-pp libstdc++6-pp-32bit libtsan2 libubsan1 - Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250 * Includes fix for building TVM. [boo#1218492] - Add cross-X-newlib-devel requires to newlib cross compilers. [boo#1219031] - Package m2rte.so plugin in the gcc13-m2 sub-package rather than in gcc13-devel. [boo#1210959] - Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs are linked against libstdc++6. ==== gpg2 ==== Version update (2.4.3 -> 2.4.4) Subpackages: dirmngr gpg2-lang - Update to 2.4.4: [bsc#1219191] * gpg: Do not keep an unprotected smartcard backup key on disk. See https://gnupg.org/blog/20240125-smartcard-backup-key.html for a security advisory. [T6944] * gpg: Allow to specify seconds since Epoch beyond 2038 on 32-bit platforms. [T6736] * gpg: Fix expiration time when Creation-Date is specified. [T5252] * gpg: Add support for Subkey-Expire-Date. [rG96b69c1866] * gpg: Add option --with-v5-fingerprint. [T6705] * gpg: Add sub-option ignore-attributes to --import-options. * gpg: Add --list-filter properties sig_expires/sig_expires_d. * gpg: Fix validity of re-imported keys. [T6399] * gpg: Report BEGIN_ status before examining the input. [T6481] * gpg: Don't try to compress a read-only keybox. [T6811] * gpg: Choose key from inserted card over a non-inserted card. [T6831] * gpg: Allow to create revocations even with non-compliant algos. [T6929] * gpg: Fix regression in the Revoker keyword of the parameter file. [T6923] * gpg: Improve error message for expired default keys. [T4704] * gpgsm: Add --always-trust feature. [T6559] * gpgsm: Support ECC certificates in de-vs mode. [T6802] * gpgsm: Major rewrite of the PKCS#12 parser. [T6536] * gpgsm: No not show the pkcs#12 passphrase in debug output. [T6654] * keyboxd: Timeout on failure to get the database lock. [T6838] * agent: Update the key stubs only if really modified. [T6829] * scd: Add support for certain Starcos 3.2 cards. [rG5304c9b080] * scd: Add support for CardOS 5.4 cards. [rG812f988059] * scd: Add support for D-Trust 4.1/4.4 cards. [rG0b85a9ac09] * scd: Add support for Smartcafe Expert 7.0 cards. [T6919] * scd: Add a length check for a new PIN. [T6843] * tpm: Fix keytotpm handling in the agent. [rG9909f622f6] * tpm: Fixes for the TPM test suite. [T6052] * dirmngr: New option --ignore-crl-extensions. [T6545] * dirmngr: Support config value "none" to disable the default keyserver. [T6708] * dirmngr: Fix handling of the HTTP Content-Length. [rGa5e33618f4] * gpgconf: Add commands --lock and --unlock. [rG93b5ba38dc] * gpgconf: Add keyword socketdir to gpgconf.ctl. [rG239c1fdc28] * gpgconf: Adjust the -X command for the new VERSION file format. [T6918] * wkd: Use export-clean for gpg-wks-client's --mirror and --create commands. [rG2c7f7a5a278c] * wkd: Make --add-revocs the default in gpg-wks-client. New option - -no-add-revocs. [rG10c937ee68] * Remove duplicated backslashes when setting the homedir. [T6833] * Ignore attempts to remove the /dev/null device. [T6556] * Improve advisory file lock retry strategy. [T3380] * Release-info: https://dev.gnupg.org/T6578 * Remove patch upstream: - gnupg-Report-BEGIN_-status-before-examining-the-input.patch ==== inih ==== Version update (57 -> 58) - Update to version 58 * Add ini_ prefix even to static names so inih can be used as an [#]include. ==== kernel-source ==== - rpm/constraints.in: add static multibuild packages Commit 841012b049a5 (rpm/mkspec: use kernel-source: prefix for constraints on multibuild) added "kernel-source:" prefix to the dynamically generated kernels. But there are also static ones like kernel-docs. Those fail to build as the constraints are still not applied. So add the prefix also to the static ones. Note kernel-docs-rt is given kernel-source-rt prefix. I am not sure it will ever be multibuilt... - commit c2e0681 - Revert "Limit kernel-source build to architectures for which the kernel binary" This reverts commit 08a9e44c00758b5f3f3b641830ab6affff041132. The fix for bsc#1108281 directly causes bsc#1218768, revert. - commit 2943b8a - mkspec: Include constraints for both multibuild and plain package always There is no need to check for multibuild flag, the constraints can be always generated for both cases. - commit 308ea09 - rpm/mkspec: use kernel-source: prefix for constraints on multibuild Otherwise the constraints are not applied with multibuild enabled. - commit 841012b - rpm/kernel-source.rpmlintrc: add action-ebpf Upstream commit a79d8ba734bd (selftests: tc-testing: remove buildebpf plugin) added this precompiled binary blob. Adapt rpmlintrc for kernel-source. - commit b5ccb33 - scripts/tar-up.sh: don't add spurious entry from kernel-sources.changes.old The previous change added the manual entry from kernel-sources.change.old to old_changelog.txt unnecessarily. Let's fix it. - commit fb033e8 - rpm/kernel-docs.spec.in: fix build with 6.8 Since upstream commit f061c9f7d058 (Documentation: Document each netlink family), the build needs python yaml. - commit 6a7ece3 - futex: Prevent the reuse of stale pi_state (bsc#1218841). Update upstream status (Queued in subsystem maintainer repository). - commit a3ee207 - Refresh patches.rpmify/media-solo6x10-replace-max-a-min-b-c-by-clamp-b-a-c.patch. Update usptream status. - commit 589bdfa - Update config files, enable CONFIG_IMA_DISABLE_HTABLE in all archs for Tumbleweed as SLE15-SP6 kernel does (bsc#1218400). - commit 020caa6 ==== libmaxminddb ==== Version update (1.8.0 -> 1.9.1) - libmaxminddb 1.9.1: * On very large databases, the calculation to determine the search tree size could overflow. This was fixed and several additional guards against overflows were added * build system tweaks ==== libqmi ==== Subpackages: libqmi-glib5 libqmi-tools - Add patch: * 0001-message-fix-16bit-service-on-big-endian.patch - Fixes 16-bit service indications on big endian architectures. Cherry-picked from upstream qmi-1-34 branch ==== libsolv ==== Version update (0.7.27 -> 0.7.28) Subpackages: libsolv-tools ruby-solv - build for multiple python versions [jsc#PED-6218] - bump version to 0.7.28 ==== libvirt ==== Subpackages: libvirt-client libvirt-daemon-common libvirt-daemon-config-network libvirt-daemon-driver-interface libvirt-daemon-driver-libxl libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-lock libvirt-daemon-log libvirt-daemon-plugin-lockd libvirt-daemon-qemu libvirt-daemon-xen libvirt-libs - Replace temporary build fix with upstream equivalent bsc#1218823 ==== man ==== - Skip posttrans dependency on systemd to support container without systemd (boo#1215538) - Use %(trans)filetriggerin and %(trans)filetriggerpostun to get an uptodate man database for installed manual pages ==== perl-Bootloader ==== Version update (1.10 -> 1.11) - merge gh#openSUSE/perl-bootloader#162 - handle script exit codes properly (bsc#1218847) - 1.11 ==== postfix ==== Version update (3.8.4 -> 3.8.5) - update to 3.8.5 * Security: this release improves support to defend against an email spoofing attack (SMTP smuggling) on recipients at a Postfix server. For background, see https://www.postfix.org/smtp-smuggling.html. ==== publicsuffix ==== Version update (20240107 -> 20240123) - Update to version 20240123: * util: gTLD data autopull updates for 2024-01-23T15:14:10 UTC (#1921) ==== python-lxml ==== - Fix build error for Leap. Use build and test as descriped on upstream. ==== spice-gtk ==== Subpackages: libspice-client-glib-2_0-8 libspice-client-glib-helper libspice-client-gtk-3_0-5 typelib-1_0-SpiceClientGlib-2_0 typelib-1_0-SpiceClientGtk-3_0 - Use libphotodav-3.0 on SLE/Leap 15.6+ (boo#1219083). ==== tiff ==== - security update: * CVE-2023-52356 [bsc#1219213] Fix segfault in TIFFReadRGBATileExt() + tiff-CVE-2023-52356.patch ==== transactional-update ==== Subpackages: dracut-transactional-update libtukit4 transactional-update-zypp-config tukit tukitd - Use "up" instead of "dup" by default on ALP [bsc#1218861] ==== virt-manager ==== Subpackages: virt-install virt-manager-common - Upstream bug fixes (bsc#1027942) (jsc#PED-6305) 058-uri-Mock-domcaps-returning-NO_SUPPORT.patch 059-tests-cli-Adjust-hotplug-test-for-latest-libvirt.patch 060-Fix-some-pylint.patch 061-tests-ui-make-newvm-test-start-less-flakey.patch 062-tests-ui-make-creatnet-test-start-less-flakey.patch - Cleanup now working or non-existant %check tests ==== webkit2gtk3 ==== Subpackages: WebKitGTK-4.1-lang libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles - Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue (bsc#1219113 CVE-2024-23222). ==== webkit2gtk3-soup2 ==== Subpackages: WebKitGTK-4.0-lang libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 webkit2gtk-4_0-injected-bundles - Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue (bsc#1219113 CVE-2024-23222). ==== yast2-installation ==== Version update (5.0.3 -> 5.0.4) - Keep cio_ignore kernel argument when present in the parmfile or use the cio_ignore -k output if not and write it always even in zVM and KVM (bsc#1210525). - 5.0.4 ==== zbar ==== - Fix building for Leap

1 0

Provide corepack in nodejs-common?
by xtexchooser＠duck.com 27 Jan '24

27 Jan '24

nodejs added corepack feature in v16.9.0, v14.19.0. [1] Now, corepack has to be installed by running "zypper in corepack21". May we provide corepack by adding it to nodejs-common? * [1] <https://nodejs.org/api/corepack.html> -- -- xtex Sat Jan 27 05:15:08 PM CST 2024

1 0

New Tumbleweed snapshot 20240125 released!
by Dominique Leuenberger 26 Jan '24

26 Jan '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: 389-ds (2.4.0~git113.84a845c -> 2.4.0~git126.5936946) 7zip ceph grub2 gstreamer-plugins-bad ibus-libpinyin lftp libstorage-ng (4.5.175 -> 4.5.176) mlocate mozilla-nss (3.95 -> 3.96.1) mutter nvidia-open-driver-G06-signed openssl-1_1 ruby (3.2 -> 3.3) thin-provisioning-tools (1.0.9 -> 1.0.10) yast2 (5.0.3 -> 5.0.4) yast2-bootloader (5.0.2 -> 5.0.4) === Details === ==== 389-ds ==== Version update (2.4.0~git113.84a845c -> 2.4.0~git126.5936946) Subpackages: lib389 libsvrcore0 - Update to version 2.4.0~git126.5936946: * Issue 6028 - vlv index keys inconsistencies (#6031) * Issue 5989 - RFE support of inChain Matching Rule (#5990) * Issue 6022 - lmdb inconsistency between vlv index and vlv cache names (#6026) * Issue 6015 - Fix typo remeber (#6014) * Issue 6016 - Pin upload/download artifacts action to v3 * Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007) * Issue 4673 - Update Rust crates * Issue 6004 - idletimeout may be ignored (#6005) * Issue 5954 - Disable Transparent Huge Pages * Issue 5997 - test_inactivty_and_expiration CI testcase is wrong (#5999) * Issue 5993 - Fix several race condition around CI tests (#5996) * Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994) * Bump openssl from 0.10.55 to 0.10.60 in /src (#5995) ==== 7zip ==== - Fix build on SLE-15-SP6 * fix-avx-sle.patch ==== ceph ==== Subpackages: librados2 librbd1 - Advertised user/groups that are generated by the pre scripts: * package cephadm generates user/group cephadm * package ceph-common generates user/group ceph ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - Reinstate the verification for a non-zero total entry count to skip unmapped data blocks (bsc#1218864) * 0001-fs-xfs-always-verify-the-total-number-of-entries-is-.patch - Removed temporary fix as reverting it will cause a different XFS parser bug * 0001-Revert-fs-xfs-Fix-XFS-directory-extent-parsing.patch ==== gstreamer-plugins-bad ==== Subpackages: gstreamer-plugins-bad-lang libgstadaptivedemux-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstcuda-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstphotography-1_0-0 libgstplay-1_0-0 libgstplayer-1_0-0 libgstsctp-1_0-0 libgsttranscoder-1_0-0 libgsturidownloader-1_0-0 libgstva-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 libgstwebrtcnice-1_0-0 - Disable zxing in Leap15 * Leap 15 can not provide zxing >= 1.4.0, zxing is inherited from SLE15 but SLE15 do provide zxing version 1.2.0 only, Factory do have zxing-cpp 2.0.0 however it's not an API compatible version. ==== ibus-libpinyin ==== ==== lftp ==== - Apply "0001-lftp_ssl-deinitialize-the-lftp_ssl_openssl_instance.patch" to fix a crash that ocurred when lftp is run on s390x with an IBM crypto card installed. The issue has been reported to upstream at https://github.com/lavv17/lftp/issues/716. [bsc#1213984] ==== libstorage-ng ==== Version update (4.5.175 -> 4.5.176) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - Translated using Weblate (Swedish) (bsc#1149754) - 4.5.176 ==== mlocate ==== Subpackages: mlocate-lang - Remove the post-install scriptlet introduced earlier. It turns out that "chmod" call opened a security vulnerability that allowed users with write access to /var/lib/mlocate to obtain read/write access to arbitrary files on the system, possibly facilitating privilege escalation to root. [bsc#1218896, CVE-2023-32190] ==== mozilla-nss ==== Version update (3.95 -> 3.96.1) Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs mozilla-nss-tools - update to NSS 3.96.1 * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups) * bmo#1867408 - add a defensive check for large ssl_DefSend return values * bmo#1869378 - Add dependency to the taskcluster script for Darwin * bmo#1869378 - Upgrade version of the MacOS worker for the CI ==== mutter ==== Subpackages: mutter-lang - Rebase mutter-disable-cvt-s390x.patch for mutter 45.x. ==== nvidia-open-driver-G06-signed ==== - splitted up 61-nvidia-$flavor.conf to 59-nvidia-$flavor.conf and 61-nvidia-$flavor.conf, because 'install' line cannot be overwritten with higher config number ... - mistakenly moved dracut config file from 60-nvidia-%1.conf to 61-nvidia-%1.conf --> reverted! - switched from 60-nvidia-$flavor.conf to 61-nvidia-$flavor.conf in modprobe.d to resolve conflict with older package, which can be installed in parallel ==== openssl-1_1 ==== Subpackages: libopenssl1_1 - Because OpenSSL 1.1.1 is no longer default, let's rename engine directories to contain version of OpenSSL and let unversioned for the default OpenSSL. [bsc#1194187, bsc#1207472, bsc#1218933] * /etc/ssl/engines.d -> /etc/ssl/engines1_1.d * /etc/ssl/engdef.d -> /etc/ssl/engdef1_1.d * Update patches: - openssl-1_1-ossl-sli-002-ran-make-update.patch - openssl-1_1-use-include-directive.patch ==== ruby ==== Version update (3.2 -> 3.3) - switch the default ruby to 3.3 ==== thin-provisioning-tools ==== Version update (1.0.9 -> 1.0.10) - Update to version 1.0.10: * Bump version to 1.0.10 * [build] Update dependencies * [all] Fix clippy lints and typos * [space_map] Allow non-zero values in unused index block entries * [thin_repair] Fix child keys checking on the node with a zero key * [thin_check] Tweak the logs to avoid confusion with node errors * [thin_check] Support overriding the details tree root * [tests] Update expected help text for _pack and _unpack * [all] Fix clippy lints on optional targets * [build] Simplify the pre-commit hooks by checking all the targets at once * [thin_metadata_unpack] Allow long format for input and output * [space map] Fix incorrect index_entry.nr_free while expansion * thin_metadata_pack: Allow long format for input and output ==== yast2 ==== Version update (5.0.3 -> 5.0.4) Subpackages: yast2-logs - Reading Kernel Params: Use kernel cmdline when install.inf is not available (bsc#1216408) - 5.0.4 ==== yast2-bootloader ==== Version update (5.0.2 -> 5.0.4) - Persist s390 cio_ignore kernel argument always when given (bsc#1210525). - 5.0.4 - Do not try finding undefined bootloader name to avoid error in logs (bsc#1218700) - 5.0.3

1 0

New package ktls-utils for Factory
by Daniel Wagner 26 Jan '24

26 Jan '24

Hi, We (kernel-storage team) would like to add ktls-utils to Factory. In-kernel TLS consumers need a mechanism to perform TLS handshakes on a connected socket to negotiate TLS session parameters that can then be programmed into the kernel's TLS record protocol engine. This package of software provides a TLS handshake user agent that listens for kernel requests and then materializes a user space socket endpoint on which to perform these handshakes. The resulting negotiated session parameters are passed back to the kernel via standard kTLS socket options. Thus this daemon enables the TLS over nvme-tcp feature. The feeder project is here https://build.opensuse.org/package/show/network:utilities/ktls-utils Thanks, Daniel

2 1

New package for factory: python-taskgroup
by absolutely.vivid＠fastmail.org 26 Jan '24

26 Jan '24

Hi, I've created a new package in devel:languages:python that I would like to introduce to Factory. https://build.opensuse.org/package/show/devel:languages:python/python-taskg… Taskgroup (https://pypi.org/project/taskgroup/) is a python module that backports the asyncio.TaskGroup API from Python 3.11 to earlier versions of Python 3. It's a relatively small module, but it's useful for asyncio-based Python applications that wish to support Python 3.8-3.10 while still being able to use the newer asyncio features. An example is hypercorn (https://pypi.org/project/hypercorn/) which can't be packaged until taskgroup is packaged. Since taskgroup is a backport of a standard library API, I expect it to be easy to maintain. It looks feature complete and I don't think there will be any future breaking changes to worry about. I'm planning on reaching out to the upstream maintainer on pushing a new release to Pypi. There's been a bit of work done in the source repository since the last release, and I would like to make those changes available in this package. This is my first package, and I welcome all feedback! I want to make this package as good as it can be, and I'd like to incorporate any suggestions or feedback anyone might have :) Vivid

5 5

Re: Tumbleweed Installation
by Chuck Davis 26 Jan '24

26 Jan '24

Once upon a time we were able to start an installation, go off to get some work done in the garage and return to a functional desktop. Now the installation program gets itself into an infinite loop and never sets the machine to boot from the hard drive. Am I the only one plagued by this phenomenon?? If not, can somebody get the installation program fixed? This is using Imagewriter to a thumb drive for 20240115, 20240118, 20240124, at least, for KDE desktop install. Thanks.

2 2

New Tumbleweed snapshot 20240124 released!
by Dominique Leuenberger 25 Jan '24

25 Jan '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: Mesa (23.2.1 -> 23.3.3) Mesa-drivers (23.2.1 -> 23.3.3) cepces (0.3.7 -> 0.3.8) coreutils coreutils-systemd cronie gdm gnome-shell libeconf (0.6.0 -> 0.6.1) libidn (1.41 -> 1.42) libmspack libplacebo (6.338.1 -> 6.338.2) rdma-core (49.0 -> 49.1) sdbootutil (1+git20240118.7e744b4 -> 1+git20240122.c0d8f76) shaderc (2023.7 -> 2023.8) systemd vulkan-loader (1.3.268.0 -> 1.3.275.0) vulkan-tools (1.3.268.0 -> 1.3.275.0) zbar (0.23.90 -> 0.23.93) zchunk (1.3.2 -> 1.4.0) === Details === ==== Mesa ==== Version update (23.2.1 -> 23.3.3) Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libOSMesa8 libgbm1 - split python36-buildfix.patch into two patches python36-buildfix1.patch and python36-buildfix2.patch; apply the latter only on sle15-sp6/Leap 15.6 since on newer python releases than 3.6 it changes behaviour to remove required=True option - python36-buildfix.patch * src/freedreno/registers/gen_header.py: hopefully fixes aarch64 build - u_0001-intel-genxml-Drop-from-__future__-import-annotations.patch u_0002-intel-genxml-Add-a-untyped-OrderedDict-fallback-for-.patch python36-buildfix.patch * fixes build against python 3.6 - let Mesa-dri require libvulkan1 to get zink/swrast driver fallbacks working (hopefully); probably related: https://gitlab.freedesktop.org/mesa/mesa/-/commit/2a71f06f2938678d89d5ed137… - Update to bugfix release 23.3.3 - -> https://docs.mesa3d.org/relnotes/23.3.3.html - Update to bugfix release 23.3.2 - -> https://docs.mesa3d.org/relnotes/23.3.2.html - Update to version 23.3.0: * It includes NVK, a new reverse-engineered Vulkan driver for Nvidia hardware. This driver is still in experimental phase, not quite ready for prime time yet, but adventurous users can give it a go! * New extensions & features (in no particular order): - VK_EXT_pipeline_robustness on ANV - VK_KHR_maintenance5 on RADV - OpenGL ES 3.1 on Asahi - GL_ARB_compute_shader on Asahi - GL_ARB_shader_atomic_counters on Asahi - GL_ARB_shader_image_load_store on Asahi - GL_ARB_shader_image_size on Asahi - GL_ARB_shader_storage_buffer_object on Asahi - GL_ARB_sample_shading on Asahi - GL_OES_sample_variables on Asahi - GL_OES_shader_multisample_interpolation on Asahi - GL_OES_gpu_shader5 on Asahi - EGL_ANDROID_blob_cache works when disk caching is disabled - VK_KHR_cooperative_matrix on RADV/GFX11+ - Drop patches fixed upstream: * U_clover-llvm-move-to-modern-pass-manager.patch * U_radeonsi-prefix-function-with-si_-to-prevent-name-co.patch - Refresh patches with quilt. - Use %patch -p N instead of deprecated %patchN. ==== Mesa-drivers ==== Version update (23.2.1 -> 23.3.3) Subpackages: Mesa-dri Mesa-gallium Mesa-libva libxatracker2 - split python36-buildfix.patch into two patches python36-buildfix1.patch and python36-buildfix2.patch; apply the latter only on sle15-sp6/Leap 15.6 since on newer python releases than 3.6 it changes behaviour to remove required=True option - python36-buildfix.patch * src/freedreno/registers/gen_header.py: hopefully fixes aarch64 build - u_0001-intel-genxml-Drop-from-__future__-import-annotations.patch u_0002-intel-genxml-Add-a-untyped-OrderedDict-fallback-for-.patch python36-buildfix.patch * fixes build against python 3.6 - let Mesa-dri require libvulkan1 to get zink/swrast driver fallbacks working (hopefully); probably related: https://gitlab.freedesktop.org/mesa/mesa/-/commit/2a71f06f2938678d89d5ed137… - Update to bugfix release 23.3.3 - -> https://docs.mesa3d.org/relnotes/23.3.3.html - Update to bugfix release 23.3.2 - -> https://docs.mesa3d.org/relnotes/23.3.2.html - Update to version 23.3.0: * It includes NVK, a new reverse-engineered Vulkan driver for Nvidia hardware. This driver is still in experimental phase, not quite ready for prime time yet, but adventurous users can give it a go! * New extensions & features (in no particular order): - VK_EXT_pipeline_robustness on ANV - VK_KHR_maintenance5 on RADV - OpenGL ES 3.1 on Asahi - GL_ARB_compute_shader on Asahi - GL_ARB_shader_atomic_counters on Asahi - GL_ARB_shader_image_load_store on Asahi - GL_ARB_shader_image_size on Asahi - GL_ARB_shader_storage_buffer_object on Asahi - GL_ARB_sample_shading on Asahi - GL_OES_sample_variables on Asahi - GL_OES_shader_multisample_interpolation on Asahi - GL_OES_gpu_shader5 on Asahi - EGL_ANDROID_blob_cache works when disk caching is disabled - VK_KHR_cooperative_matrix on RADV/GFX11+ - Drop patches fixed upstream: * U_clover-llvm-move-to-modern-pass-manager.patch * U_radeonsi-prefix-function-with-si_-to-prevent-name-co.patch - Refresh patches with quilt. - Use %patch -p N instead of deprecated %patchN. ==== cepces ==== Version update (0.3.7 -> 0.3.8) Subpackages: cepces-certmonger cepces-selinux python3-cepces - Update to version 0.3.8: * Fix WSTEP BinarySecurityToken attribute namespaces * Migrate to SPNEGO auth mech ==== coreutils ==== Subpackages: coreutils-lang - coreutils-9.4.split-CVE-2024-0684.patch: Add upstream patch: split: do not shrink hold buffer. (CVE-2024-0684) - coreutils-i18n.patch: Update from Fedora to fix build on i686 on GCC14. ==== coreutils-systemd ==== - coreutils-9.4.split-CVE-2024-0684.patch: Add upstream patch: split: do not shrink hold buffer. (CVE-2024-0684) - coreutils-i18n.patch: Update from Fedora to fix build on i686 on GCC14. ==== cronie ==== Subpackages: cron - Update to 1.7.1: * crond: Wait on finishing the job with -n option to check the exit status * crond: Do not set the return path to <> if non-default MAILFROM is set * /etc/sysconfig/crond and /etc/default/anacron files are optional - Remove test-for-etc-default-anacron.patch - Set safe permissions for crontab backups. Add * safe-backup-permissions.patch ==== gdm ==== Subpackages: gdm-lang gdm-schema gdmflexiserver libgdm1 typelib-1_0-Gdm-1_0 - Make Patch0 only applies on s390 and s390x. ==== gnome-shell ==== Subpackages: gnome-extensions gnome-shell-calendar gnome-shell-lang - Adapt to version 45.3(bsc#1216072): + Rebase gnome-shell-domain.patch + Rebase gnome-shell-fate324570-Make-GDM-background-image-configurable.patch ==== libeconf ==== Version update (0.6.0 -> 0.6.1) Subpackages: libeconf0 libeconf0-32bit - Update to version 0.6.1: * reading lines which have a length greater than BUFSIZE (#195) * Improved data quote check in read_file (#193) ==== libidn ==== Version update (1.41 -> 1.42) - update to 1.42: * build system tweaks * Updated translations and gnulib * fixes for other platforms ==== libmspack ==== - The following bugs and CVEs are not affecting TW: * CVE-2018-18584 * CVE-2018-18585 * CVE-2018-18586 * CVE-2019-1010305 * bsc#1113038 * bsc#1113039 * bsc#1113040 * bsc#1130489 * bsc#1141680 ==== libplacebo ==== Version update (6.338.1 -> 6.338.2) - Update libplacebo to version 6.338.2. See details in: https://code.videolan.org/videolan/libplacebo/-/tags/v6.338.2 ==== rdma-core ==== Version update (49.0 -> 49.1) Subpackages: libefa1 libibverbs libibverbs1 libmana1 libmlx4-1 libmlx5-1 librdmacm1 rdma-ndd - Update to v49.1 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836, jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916) - No release notes available. ==== sdbootutil ==== Version update (1+git20240118.7e744b4 -> 1+git20240122.c0d8f76) Subpackages: sdbootutil-rpm-scriptlets sdbootutil-snapper - Update to version 1+git20240122.c0d8f76: * Integrate with kernel-install * Rework kernel listing a bit * Add checks to list-entries * List entries for current system only by default * Fall back to loader.conf if setting efivar failed * Runtime determine kernel image name * Add list-snapshots * Add list-entries command ==== shaderc ==== Version update (2023.7 -> 2023.8) - Update to release 2023.8 * API: Expose rlaxed Vulkan rules from glslang ==== systemd ==== Subpackages: libsystemd0 libsystemd0-32bit libudev1 systemd-32bit systemd-boot systemd-container systemd-coredump systemd-lang udev - Add patches that implement [jsc#PED-5659] 5003-cgroup-rename-TasksMax-structure-to-CGroupTasksMax.patch 5004-bus-print-properties-ignore-CGROUP_LIMIT_MAX-for-Mem.patch 5005-bus-print-properties-prettify-more-unset-properties.patch 5006-cgroup-Add-EffectiveMemoryMax-EffectiveMemoryHigh-an.patch 5007-test-Convert-rlimit-test-to-subtest-of-generic-limit.patch 5008-test-Add-effective-cgroup-limits-testing.patch 5009-cgroup-Restrict-effective-limits-with-global-resourc.patch 5010-cgroup-Rename-effective-limits-internal-table.patch They are temporarily put in quarantine to get broader testing but should be eventually moved to the git repo. ==== vulkan-loader ==== Version update (1.3.268.0 -> 1.3.275.0) - Update to release SDK-1.3.275.0 * Instance extensions unsupported by physical devices now return ERROR_EXTENSION_NOT_PRESENT * Unload drivers which report 0 physical devices ==== vulkan-tools ==== Version update (1.3.268.0 -> 1.3.275.0) - Update to release SDK-1.3.275.0 * icd: Add vkGetMemoryFdKHR support * icd: Add vkGetMemoryHostPointerPropertiesEXT support * vulkaninfo: Autogenerate Format list * icd: Add basic VkDisplayKHR support * icd: Add vkRegisterDisplayEventEXT * icd: Add video support ==== zbar ==== Version update (0.23.90 -> 0.23.93) - Update to 0.23.93: * Set a better dpi resolution when parsing PDF files * Fix memory recycle bug of empty symbols * Fix compilation with python 3.11 and 3.12 * CVE-2023-40889: Fix array out-of-bounds access * Stop ignoring non-binary entries that follow binary ones * Increase allocated buffer memory for symbols * barcodetest.py: fix error code print logic * convert: Crash fixing while using camera * Add some pod information for additional functions * perl skip more tests if DISPLAY not set and set prereqs in Makefile.PL * Fixes rt.cpan.org 122061 - test fails when DISPLAY not set * Update Barcode::ZBar * isaac: ensure proper order of parsing expression * Enforce x11 backend even on wayland * zbarimg: add the --polygon option * xml output: Add polygon containing code bar. * configure.ac: drop support for Qt4 and prepare for Qt6 support * win: fix compiling error in Visual studio * Enforce a coding style * configure.ac: fix some issues with gtk parameter * zbargtk: fix version check macros * zbar: Address some header issues * zbar, test: fix compilation issues with FreeBSD * zbar: Function stdcall declaration issue. * symbol: make it compatible with MSC * zbar: change the code to make it c90 standard compatible * test: fix decode test - Drop upstreamed patches: * zbar-CVE-2023-40889.patch * zbar-CVE-2023-40890.patch * py311.patch - Add patch to fix build see gh#mchehab/zbar#277: * zbar-configure.patch * zbar-pkgconfig.patch ==== zchunk ==== Version update (1.3.2 -> 1.4.0) - update to 1.4.0: * Rework hash code to support openSSL 3.x EVP API * memory leak fix * tests for invalid zchunk files * More statistics in zchunk_delta_info * avoid infinite loop under certain conditions * Add zck_get_chunk_ctx function to get context from chunk

1 0

New Tumbleweed snapshot 20240123 released!
by Dominique Leuenberger 25 Jan '24

25 Jan '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ed (1.19 -> 1.20) kernel-source (6.6.11 -> 6.7.1) ncurses (6.4.20240113 -> 6.4.20240120) pam (1.5.3 -> 1.6.0) pam-full-src (1.5.3 -> 1.6.0) python-kiwi (9.25.22 -> 9.25.19) === Details === ==== ed ==== Version update (1.19 -> 1.20) - update to 1.20: * New command-line options for jumping to a line number or match * Improved handling of file names containing control characters * Tweak workflow for fewer 'buffer modified' warnings * Tilde expansion is now performed on file names * Warn on modifying a buffer from a read-only file * Create missing intermediate directories when writing to a file * Documentation updates - drop obsolete makeinfo marcos ==== kernel-source ==== Version update (6.6.11 -> 6.7.1) - Linux 6.7.1 (bsc#1012628). - mm/memory_hotplug: fix memmap_on_memory sysfs value retrieval (bsc#1012628). - docs: kernel_feat.py: fix potential command injection (bsc#1012628). - scripts/decode_stacktrace.sh: optionally use LLVM utilities (bsc#1012628). - coresight: etm4x: Fix width of CCITMIN field (bsc#1012628). - PCI: Add ACS quirk for more Zhaoxin Root Ports (bsc#1012628). - leds: ledtrig-tty: Free allocated ttyname buffer on deactivate (bsc#1012628). - parport: parport_serial: Add Brainboxes device IDs and geometry (bsc#1012628). - parport: parport_serial: Add Brainboxes BAR details (bsc#1012628). - uio: Fix use-after-free in uio_open (bsc#1012628). - binder: fix comment on binder_alloc_new_buf() return value (bsc#1012628). - binder: fix trivial typo of binder_free_buf_locked() (bsc#1012628). - binder: fix use-after-free in shinker's callback (bsc#1012628). - binder: use EPOLLERR from eventpoll.h (bsc#1012628). - Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d" (bsc#1012628). - ksmbd: free ppace array on error in parse_dacl (bsc#1012628). - ksmbd: don't allow O_TRUNC open on read-only share (bsc#1012628). - drm/amd/display: Pass pwrseq inst for backlight and ABM (bsc#1012628). - bus: moxtet: Add spi device table (bsc#1012628). - bus: moxtet: Mark the irq as shared (bsc#1012628). - ACPI: resource: Add another DMI match for the TongFang GMxXGxx (bsc#1012628). - ALSA: hda: cs35l41: Support more HP models without _DSD (bsc#1012628). - ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP Envy X360 13-ay0xxx (bsc#1012628). - ALSA: hda/realtek: enable SND_PCI_QUIRK for Lenovo Legion Slim 7 Gen 8 (2023) serie (bsc#1012628). - ALSA: hda: Add driver properties for cs35l41 for Lenovo Legion Slim 7 Gen 8 serie (bsc#1012628). - ALSA: hda: cs35l41: Prevent firmware load if SPI speed too low (bsc#1012628). - ALSA: hda: cs35l41: Support additional Dell models without _DSD (bsc#1012628). - ALSA: hda/realtek: Add quirks for Dell models (bsc#1012628). - f2fs: explicitly null-terminate the xattr list (bsc#1012628). - commit b2e8ed6 - media: solo6x10: replace max(a, min(b, c)) by clamp(b, a, c) (fix build and make it faster). - Delete patches.rpmify/Revert-minmax-allow-comparisons-of-int-against-unsig.patch. - Delete patches.rpmify/Revert-minmax-allow-min-max-clamp-if-the-arguments-h.patch. - Delete patches.rpmify/Revert-minmax-fix-indentation-of-__cmp_once-and-__cl.patch. - Delete patches.rpmify/Revert-minmax-relax-check-to-allow-comparison-betwee.patch. Replace the reverts by an upstream workaround. - commit 9bff21f - mm: huge_memory: don't force huge page alignment on 32 bit (bsc#1218841). - Delete patches.suse/Revert-mm-align-larger-anonymous-mappings-on-THP-bou.patch. Replace the revert by an upstream fix. - commit d54abef - Update patches.suse/futex-Avoid-reusing-outdated-pi_state.patch (bsc#1218801). Update to v2. - commit eeba83a - Revert "mm: align larger anonymous mappings on THP boundaries" (bsc#1218841). - commit 69537e9 - futex: Avoid reusing outdated pi_state (bsc#1218841). - commit 9859079 ==== ncurses ==== Version update (6.4.20240113 -> 6.4.20240120) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch 20240120 + improve formatting/style of manpages (patches by Branden Robinson). + amend discussion of aliases in tput.1 + use ansi+sgrbold, ansi+sgrdim, ansi+sgrso, ansi+sgrul, ansi+tabs ecma+color, ecma+sgr, vt100+4bsd, vt100+pfkeys, vt220+pcedit xterm+256color, xterm+acs, xterm+nopcfkeys, xterm+pcf2 to trim -TD + modify configure scripts/makefiles to omit KEY_RESIZE if the corresponding SIGWINCH feature is disabled. ==== pam ==== Version update (1.5.3 -> 1.6.0) Subpackages: pam-32bit - Add post 1.6.0 release fixes for pam_env and pam_unix: - pam_env-fix-enable-vendordir-fallback.patch - pam_env-fix_vendordir.patch - pam_env-remove-escaped-newlines.patch - pam_unix-fix-password-aging-disabled.patch - Update to version 1.6.0 - Added support of configuration files with arbitrarily long lines. - build: fixed build outside of the source tree. - libpam: added use of getrandom(2) as a source of randomness if available. - libpam: fixed calculation of fail delay with very long delays. - libpam: fixed potential infinite recursion with includes. - libpam: implemented string to number conversions validation when parsing controls in configuration. - pam_access: added quiet_log option. - pam_access: fixed truncation of very long group names. - pam_canonicalize_user: new module to canonicalize user name. - pam_echo: fixed file handling to prevent overflows and short reads. - pam_env: added support of '\' character in environment variable values. - pam_exec: allowed expose_authtok for password PAM_TYPE. - pam_exec: fixed stack overflow with binary output of programs. - pam_faildelay: implemented parameter ranges validation. - pam_listfile: changed to treat \r and \n exactly the same in configuration. - pam_mkhomedir: hardened directory creation against timing attacks. - Please note that using *at functions leads to more open file handles during creation. - pam_namespace: fixed potential local DoS (CVE-2024-22365). - pam_nologin: fixed file handling to prevent short reads. - pam_pwhistory: helper binary is now built only if SELinux support is enabled. - pam_pwhistory: implemented reliable usernames handling when remembering passwords. - pam_shells: changed to allow shell entries with absolute paths only. - pam_succeed_if: fixed treating empty strings as numerical value 0. - pam_unix: added support of disabled password aging. - pam_unix: synchronized password aging with shadow. - pam_unix: implemented string to number conversions validation. - pam_unix: fixed truncation of very long user names. - pam_unix: corrected rounds retrieval for configured encryption method. - pam_unix: implemented reliable usernames handling when remembering passwords. - pam_unix: changed to always run the helper to obtain shadow password entries. - pam_unix: unix_update helper binary is now built only if SELinux support is enabled. - pam_unix: added audit support to unix_update helper. - pam_userdb: added gdbm support. - Multiple minor bug fixes, portability fixes, documentation improvements, and translation updates. - The following patches are obsolete with the update: - pam_access-doc-IPv6-link-local.patch - pam_access-hostname-debug.patch - pam_shells-fix-econf-memory-leak.patch - pam_shells-fix-econf-memory-leak.patch - disable-examples.patch - pam-login_defs-check.sh: adjust checksum, SHA_CRYPT_MAX_ROUNDS is no longer used. ==== pam-full-src ==== Version update (1.5.3 -> 1.6.0) - Add post 1.6.0 release fixes for pam_env and pam_unix: - pam_env-fix-enable-vendordir-fallback.patch - pam_env-fix_vendordir.patch - pam_env-remove-escaped-newlines.patch - pam_unix-fix-password-aging-disabled.patch - Update to version 1.6.0 - Added support of configuration files with arbitrarily long lines. - build: fixed build outside of the source tree. - libpam: added use of getrandom(2) as a source of randomness if available. - libpam: fixed calculation of fail delay with very long delays. - libpam: fixed potential infinite recursion with includes. - libpam: implemented string to number conversions validation when parsing controls in configuration. - pam_access: added quiet_log option. - pam_access: fixed truncation of very long group names. - pam_canonicalize_user: new module to canonicalize user name. - pam_echo: fixed file handling to prevent overflows and short reads. - pam_env: added support of '\' character in environment variable values. - pam_exec: allowed expose_authtok for password PAM_TYPE. - pam_exec: fixed stack overflow with binary output of programs. - pam_faildelay: implemented parameter ranges validation. - pam_listfile: changed to treat \r and \n exactly the same in configuration. - pam_mkhomedir: hardened directory creation against timing attacks. - Please note that using *at functions leads to more open file handles during creation. - pam_namespace: fixed potential local DoS (CVE-2024-22365). - pam_nologin: fixed file handling to prevent short reads. - pam_pwhistory: helper binary is now built only if SELinux support is enabled. - pam_pwhistory: implemented reliable usernames handling when remembering passwords. - pam_shells: changed to allow shell entries with absolute paths only. - pam_succeed_if: fixed treating empty strings as numerical value 0. - pam_unix: added support of disabled password aging. - pam_unix: synchronized password aging with shadow. - pam_unix: implemented string to number conversions validation. - pam_unix: fixed truncation of very long user names. - pam_unix: corrected rounds retrieval for configured encryption method. - pam_unix: implemented reliable usernames handling when remembering passwords. - pam_unix: changed to always run the helper to obtain shadow password entries. - pam_unix: unix_update helper binary is now built only if SELinux support is enabled. - pam_unix: added audit support to unix_update helper. - pam_userdb: added gdbm support. - Multiple minor bug fixes, portability fixes, documentation improvements, and translation updates. - The following patches are obsolete with the update: - pam_access-doc-IPv6-link-local.patch - pam_access-hostname-debug.patch - pam_shells-fix-econf-memory-leak.patch - pam_shells-fix-econf-memory-leak.patch - disable-examples.patch - pam-login_defs-check.sh: adjust checksum, SHA_CRYPT_MAX_ROUNDS is no longer used. ==== python-kiwi ==== Version update (9.25.22 -> 9.25.19)

1 0

openSUSE Release Engineering meeting 24.02.2024
by Lubos Kocman 24 Jan '24

24 Jan '24

How to join the meeting? https://calendar.opensuse.org/teams/release/events/opensuse_release_enginee… All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting ## Attendees DimStar, lkocman, ana, GuillaumeG, DocB, maxlin ## Leap https://news.opensuse.org/2024/01/15/clear-course-is-set-for-os-leap/ Best review/feedback to our Leap 16 article so far https://www.youtube.com/watch?v=rhYax00Wr7o&t=2s&pp=ygUPbGVhcCAxNiBpcyBiYWNr ALP Marble 6.0 was synced to OBS, I'll be working on the initial setup. https://build.opensuse.org/project/subprojects/openSUSE:Leap:Micro:6.0 de-branding pending Waiting for current rebuild of Leap 15.6 to have a usable desktop again. In person discussion with Granite PM, on Thursday Many staged 3.11 python-submissions + SDL currently blocking progress on GNUHealth 4.4. All submitted we just need to wait for staging project to be merged. ## openSUSE Tumbleweed (ana) openSUSE:Factory build fail stats: 76 failed 11 unresolvable (last week 73 failed, 13 unresolvable) https://tinyurl.com/ysy4nnnz Many changes going on, some of the very most relevant updates: * Linux Kernel 6.7.1: beware: nvidia open driver G06 failed to build: https://bugzilla.opensuse.org/show_bug.cgi?id=1219117 * ed 1.20 * pam 1.60 * xorg-server 21.1.11 * gnutls 3.8.3 * erlang 26.2.1 * rpm-config-SUSE: enable full ksym() dependencies in Tumbleweed (bsc#1215015) Updates waiting / work still in progress: * libxml 2.12.1 (lots of work to do), libzypp and some packages got fixed, on hold * dbus-broker as default dbus session manager, now everything builds, two openQA checks failing. * RPM 4.19.1, everything builds now, have a cycle to address (cmake to ring0 at least) and some issues with user/groups that need package updates . See https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… * Update to openssl 3.2.0, stuck until python-M2Crypto is fixed * Additional Python 3.12 and setuptools modules in Staging:K, blocked by RPM 4.19.1 * Ruby 3.3, waiting minor installation-images fix * Mesa 23.3.3, should be accepted today * c-ares: after nodejs updates, there is an issues with a new package cycle * QEMU 8.2.0. new build requires FTBFS * Removal of terraform packages (replaced by tofu, already available) * cmake, macro changes (DOCDIR MANDIR INFODIR) make 7 packages FBTFS ## Richard (Aeon+botmaster) Not available ## Bernhard (Slowroll) * publishing was broken for 12d - fixed now * first openQA test WIP * next major version bump expected in 1-3 weeks ## Max Leap 15.6 - build stats in Backports: 59(was 36) faild, 63 unresolvable(was 14) * gnome/X crashes at Build588.1 - bsc#1218895, this is because of incomplete GNOME 45 stack from SLE side, this issue should be fixed in the current SLE15 repo snapshot * Got Qt5 5.15.12 and Qt6 6.6.1 from SLE15, the remaining qt5/qt6 package in Backports need a update as well, working on that, and have talked to Antonio * Asked an instantiate rebuild on libqt5xdg in SLE15 SP6 project for fixing lxqt package unresolvables due to updated qt5 [DONE] * Merged many python application update(ver. 3.6 to 3.11) into Backports, this brings a lot of build unresolvables * FYI: There is entire staging with 3.11 packages in SLES 15 SP6 that currently blocks GNU Health 4.4 Axel: Can you point me to that? * Talk to Adrian about product-buidler picks arch-dependent ones over than noarch ones even though the noarch ones has a greater version number, an possible solution is set onlyarch=noarch for those package, I tweaked skippkg-finder and 000package-groups, the paragraph below has been added to NON_FTP_PACKAGES file, hope this solve the problem, will know in the next pkglistgen round <group name="NON_FTP_PACKAGES_only_noarch"> <conditional name="only_noarch"/> <packagelist relationship="requires"> <package name="MozillaFirefox-devel"/> </packagelist> </group> ## Guillaume - Arm * Tumbleweed: - Rolling - WIP: Still some packages built without PAC/BTI, two main reasons: * assembler files without PAC/BTI (usually reported upstream, e.g. openssl, gnutls, etc) * Packages built without distro flags (usually fixed in spec file) - rpmlint: https://rpmlint.opensuse.org/ * we noticed that rpmlint does not check anymore for packages built without distro %{optflags}. We should add it back. https://bugzilla.opensuse.org/show_bug.cgi?id=1217840 - WIP to get Tumbleweed to run on Lenovo X13s: * Main pieces in place. Latest status available at https://en.opensuse.org/HCL:ThinkpadX13s * Leap 15.6/Backports SP6: - No update * WSL: x86_64 is fetched from Microsoft Strore for Tumbleweed image instead of arm64. lkocman: Ah thank you. I'll share that with team. Contents of the image are x86_64. Possible workaround would be a second application e.g. Leap 15 aarch64, Tumbleweed aarch64 etc ... ## Sarah - s390x Not available ## Doug * FOSDEM * Seats still available on the bus to from NUE. email ddemaio(a)opensuse.org * Waiting on a few more marketing items * Big thank you to GNU Health extended invitation for openSUSE to be able share the openSUSE Booth on Saturday Many thanks Axel! * Sunday in distro devroom * GSoC * Application now open. Deadline Feb. 6 at 18:00 UTC * Mini-Summit * No update. * openSUSE Conference * 16 Registrations, 13 Submissions, 7 Hours * Still need signed contract with Z-Bau * Meeting to discuss Geekos taking over TSP set for Jan. 25 * Had to reschedule twice * Slowroll article released * Call for Hosts article released * Creative Freedom Summit happening yesterday, today and tomorrow. (creativefreedomsummit.com) * Congreso esLibre plan to have openSUSE booth 24 - 25 May in Valencia, Spain. * Contact ddemaio to get connect with booth organizers * Meeting with new openSUSE Board on Monday Static * oSC24 dates June 27 to 29 reserved (Thursday - Saturday) * Open 4 Business June 26 between 2 - 6 p.m. at Franken Campus * FOSDEM Bus Connect ddemaio(a)opensuse.org if you're in the Nuremberg area * AI topics (static) ## Dirk Not available ## Wolfgang (Package Hub), Scott Bahling Not available ## Maintenance team (Marcus or Maurizio (m4u)) Not available ## Adrian - OBS The new composer/product builder discussion was covered in Max's section. ## Simon (Leap Replacement/Linarite) Not available ## Open Floor

1 0

Distrobox images not allowing 'sudo' to be used
by Jim Henderson 23 Jan '24

23 Jan '24

We've got a forum user using Distrobox with an arch image who is getting an error that '<username> is not in sudoers' file. I found a thread a couple months ago on Reddit reporting this as well, and it seemed to be thought that this was likely an issue with the arch image. But I'm trying this with Tumbleweed as well (both as 'host' and 'guest'), and sudo is prompting for the root password, but isn't accepting it. I've tried just about everything I can think of for a password, and it's simply not accepting anything that would be valid on this system. I had been able to run sudo within distrobox previously (used it to install software with zypper, for example) - but I had been using an older image that I since have gotten rid of for the current one. Creating the container with '--absolutely-disable-root-password-i-am- really-positively-sure' lets sudo work, but is not a secure workaround. I'm wondering if this could be related to config files moving to /usr/etc from /etc. Any tips on how to troubleshoot would be appreciated. -- Jim Henderson Please keep on-topic replies on the list so everyone benefits

4 7

New Tumbleweed snapshot 20240122 released!
by Dominique Leuenberger 23 Jan '24

23 Jan '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: NetworkManager-applet (1.34.0 -> 1.36.0) abseil-cpp dracut (059+suse.533.g5a7cf9fa -> 059+suse.538.ge7a5cff9) emacs-flim fcitx-chewing fcitx-configtool fcitx-zhuyin grub2 ibus-libzhuyin ibus-m17n libvpl (2023.4.0 -> 2.10.1) pipewire python-Pillow (10.1.0 -> 10.2.0) python-kiwi (9.25.19 -> 9.25.22) sdbootutil (1+git20231221.42797ab -> 1+git20240118.7e744b4) systemd tevent (0.15.0 -> 0.16.0) util-linux util-linux-systemd yast2-trans (84.87.20240112.f631673f01 -> 84.87.20240120.54f4b9f06a) === Details === ==== NetworkManager-applet ==== Version update (1.34.0 -> 1.36.0) Subpackages: NetworkManager-connection-editor NetworkManager-connection-editor-lang - Update to version 1.36.0: + Support WiFi's cloned-mac "stable-ssid". + Update translations. ==== abseil-cpp ==== - fix build for non-SUSE distributions ==== dracut ==== Version update (059+suse.533.g5a7cf9fa -> 059+suse.538.ge7a5cff9) - Update to version 059+suse.538.ge7a5cff9: * fix(livenet): split `imgsize` calculation to avoid misleading error message * fix(livenet): check also `content-length` from live image header * fix(livenet): propagate error code * fix(dracut): correct regression with multiple `rd.break=` options ==== emacs-flim ==== - Use %patch0 to fix compilation with rpm-4.19 ==== fcitx-chewing ==== - Use %patch0 to fix compilation with rpm-4.19 ==== fcitx-configtool ==== - Use %patch0 to fix compilation with rpm-4.19 ==== fcitx-zhuyin ==== - Use %patch0 to fix compilation with rpm-4.19 ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - allow to boot memtest86 if stored in /usr/lib/memtest86+ * SR#1071109 can then work ==== ibus-libzhuyin ==== - Fixes for %_ibus_libexecdir moving to %_libexecdir (bsc#1174075) ==== ibus-m17n ==== - Use %_libexecdir as the basis of %_ibus_libexecdir (bsc#1174075) ==== libvpl ==== Version update (2023.4.0 -> 2.10.1) - u_buildfix-i586.patch * fixed build on i586 - Update to version 2.10.1 + Changed * Project name to IntelÂ® Video Processing Library (IntelÂ® VPL) * Project versioning scheme to align with library and API version + Added * IntelÂ® VPL specification and associated build scripts + Known Issues * sample_decode may report "DeliverOutput return error = -1" when run using -r option * vpl-infer example will fail to load model if built with CMake version higher than 3.25.3 on Windows - Add libva build dep ==== pipewire ==== Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-jack pipewire-lang pipewire-libjack-0_3 pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Add patches from upstream to fix building the package in Factory with libcamera 0.2.0: * 0001-spa-libcamera-use-CameraConfigurationorientation.patch * 0002-spa-libcamera-bump-minimum-supported-version-to-0.2.0.patch ==== python-Pillow ==== Version update (10.1.0 -> 10.2.0) - Update to 10.2.0: * Add ``keep_rgb`` option when saving JPEG to prevent conversion of RGB colorspace * Trim glyph size in ImageFont.getmask() * Deprecate IptcImagePlugin helpers * Allow uncompressed TIFF images to be saved in chunks * Concatenate multiple JPEG EXIF markers * Changed IPTC tile tuple to match other plugins * Do not assign new fp attribute when exiting context manager * Support arbitrary masks for uncompressed RGB DDS images * Support setting ROWSPERSTRIP tag * Apply ImageFont.MAX_STRING_LENGTH to ImageFont.getmask() * Optimise ``ImageColor`` using ``functools.lru_cache`` * Restricted environment keys for ImageMath.eval() (CVE-2023-50447, bsc#1219048) * Optimise ``ImageMode.getmode`` using ``functools.lru_cache`` * Fix incorrect color blending for overlapping glyphs * Attempt memory mapping when tile args is a string * Fill identical pixels with transparency in subsequent frames when saving GIF * Corrected duration when combining multiple GIF frames into single frame * Handle disposing GIF background from outside palette * Seek past the data when skipping a PSD layer * Import plugins relative to the module * Translate encoder error codes to strings; deprecate ``ImageFile.raise_oserror()`` * Support reading BC4U and DX10 BC1 images * Optimize ImageStat.Stat.extrema * Handle pathlib.Path in FreeTypeFont * Added support for reading DX10 BC4 DDS images * Optimized ImageStat.Stat.count * Correct PDF palette size when saving * Fixed closing file pointer with olefile 0.47 * Raise ValueError when TrueType font size is not greater than zero * If absent, do not try to close fp when closing image * Allow configuring JPEG restart marker interval on save * Decrement reference count for PyObject * Implement ``streamtype=1`` option for tables-only JPEG encoding * If save_all PNG only has one frame, do not create animated image * Fixed frombytes() for images with a zero dimension - Switch to autosetup and pyproject macros. ==== python-kiwi ==== Version update (9.25.19 -> 9.25.22) - Disable workflow runs from master The following github actions will be disabled from master because they are expected to run from main: - ci-publish-pages.yml - ci-publish-to-pypi.yml - ci-update-build-tests.yml - Bump version: 9.25.21 â 9.25.22 - Fixed regression in GRUB_SERIAL_COMMAND setup The condition to write the serial line setup was broken. This commit fixes it. Related to Issue #2419 - Fixed grub terminal setup The grub terminal setup is divided into the setting for the output and the input console. For both settings different parameters exists. So far kiwi did not differentiate between the two parts of the console setup and that could lead to a wrong setting if only one value is provided in kiwi's console= attribute which lead to the grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm grub takes this for both input and output and it's obviously wrong for the input. To make this less error prune the kiwi code changes with this commit to set GRUB_TERMINAL_INPUT and GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity checks on the provided values if they are applicable. The information for setting up the console in the schema stays untouched though. That's because it's used for all bootloaders and also because grub supports multiple values for the console in/out setting in one GRUB_TERMINAL variable even though kiwi does no longer use it. To make this clear for the users also the documentation for the console attribute setup has been updated. If we want to wish two distinct attributes for input and output console settings a schema change and also differentiation between bootloaders is needed and that I only see for the kiwi-10 branch if at all. This Fixes #2419 - Fix tox.ini python 3.12 unit target did not specify a 3.12 interpreter - Fix overwrite of kiwi_oemunattended In case rd.kiwi.oem.installdevice is set, there is an overwrite of the kiwi_oemunattended setting. However the variable was set in local scope of a function and therefore the change was not effective in other methods which also evaluates this variable. This commit fixes it such that the overwrite happens in the early initialize method which provides the environment for all code running in the dracut module. This is related to jira#PED-7180 - Ensure setfiles is detected inside the image-root We do not actually use setfiles from the host, we use it from the image root we create for the image build. Thus, we should look in the image root instead of on the host system. This prevents us from incorrectly detecting that setfiles is not available for setting SELinux contexts. Fixes: https://github.com/OSInside/kiwi/issues/2414 Fixes: 2a22901ddd11ae23b6724b5e1aaa4261f219ccb6 - Use xdist on the CI to speed up the test runs - Add unit test job using python 3.12 - Only run the job for this python environment - [ci] Switch runner to ubuntu-latest - Add missing raw string identifier infront of regexes - Allow target_blocksize to be available for kis image - Bump version: 9.25.20 â 9.25.21 - Cleanup tox targets Align tox targets with github workflows and fix targets not associated with a specific python version to use the python3 version installed on the host - Bump version: 9.25.19 â 9.25.20 - Fixed unit tests for parallel invokation - Make sure selinux policy is effectively applied setup_selinux_file_contexts is now called after the config.sh script. This makes sure that eventual policy related changes done in the optional config.sh are covered by a late setfiles call. In addition setup_selinux_file_contexts is called again at the end of any chroot based script hook. So we assume that any optional script target can change the system in a way that a new setfiles call might be required. It can happen that setfiles is called more often than required but as we cannot know what custom scripts does, it's better to call it more often compared to not often enough. This Fixes bsc#1210604 - Decrease image size for encrypted integration test Encrypted images do not compress well, therefore the size should be smaller such that we don't produce monsters - Use ext4 for rawhide integration test - Fixed typo in error message - package: Drop unused xorriso dep on dracut-kiwi-live subpackage We do not actually use xorriso anywhere inside of the dracut module, nor do we pull in any utilities from the xorriso package into the generated initramfs anyway. Fixes: https://github.com/OSInside/kiwi/issues/2404 - Set kpartx as default mapper tool for s390 Some time ago we moved the default partition mapper from kpartx to partx to reduce a package dependencies. However, on the s390 architecture partx does not work proplerly on e.g DASD devices. Thus the default mapper tool for this architecture will change to kpartx with this PR ==== sdbootutil ==== Version update (1+git20231221.42797ab -> 1+git20240118.7e744b4) Subpackages: sdbootutil-rpm-scriptlets sdbootutil-snapper - Update to version 1+git20240118.7e744b4: * Bind mount /etc inside the snapshot ==== systemd ==== Subpackages: libsystemd0 libsystemd0-32bit libudev1 systemd-32bit systemd-boot systemd-container systemd-coredump systemd-lang udev - remove pam-config call from post scriptlet of systemd-32bit * the full package already does that ==== tevent ==== Version update (0.15.0 -> 0.16.0) Subpackages: libtevent0 libtevent0-32bit python3-tevent - Update to version 0.16.0 * the epoll backend is no longer limited to 2 event handlers per low level fd. * finally add support for TEVENT_FD_ERROR ==== util-linux ==== Subpackages: libblkid1 libfdisk1 libmount1 libsmartcols1 libuuid1 util-linux-lang - Minor multibuild fixes (PED-307): * Restore /bin symlinks in util-linux-systemd if building with ul_extra_bin_sbin. * Restore compatibility supplements and split-provides. * Update safety check instructions. ==== util-linux-systemd ==== - Minor multibuild fixes (PED-307): * Restore /bin symlinks in util-linux-systemd if building with ul_extra_bin_sbin. * Restore compatibility supplements and split-provides. * Update safety check instructions. ==== yast2-trans ==== Version update (84.87.20240112.f631673f01 -> 84.87.20240120.54f4b9f06a) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20240120.54f4b9f06a: * New POT for text domain 'sap-installation-wizard'. * Translated using Weblate (Indonesian) * Translated using Weblate (Indonesian) * Translated using Weblate (Indonesian)

1 0

New Tumbleweed snapshot 20240121 released!
by Dominique Leuenberger 22 Jan '24

22 Jan '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: apache2-mod_php8 (8.2.14 -> 8.2.15) ibus ibus_gtk4 libstorage-ng (4.5.174 -> 4.5.175) libvirt (9.10.0 -> 10.0.0) php8 (8.2.14 -> 8.2.15) python-SQLAlchemy (2.0.24 -> 2.0.25) python-Twisted python-anyio (3.7.1 -> 4.2.0) python-authheaders (0.16.0 -> 0.16.1) python-libvirt-python (9.10.0 -> 10.0.0) python-service_identity (23.1.0 -> 24.1.0) python-trio (0.22.0 -> 0.23.2) qca-qt5 (2.3.7+git12 -> 2.3.8+git1) qpdf (11.7.0 -> 11.8.0) sssd (2.9.3 -> 2.9.4) virt-manager === Details === ==== apache2-mod_php8 ==== Version update (8.2.14 -> 8.2.15) - version update to 8.2.15 * This is a bug fix release. - modified patches % php-ar-flags.patch (refreshed) % php-build-reproducible-phar.patch (refreshed) ==== ibus ==== Subpackages: ibus-dict-emoji ibus-gtk ibus-gtk3 ibus-lang libibus-1_0-5 typelib-1_0-IBus-1_0 - Use %_libexecdir as the basis of %_ibus_libexecdir (bsc#1174075) ==== ibus_gtk4 ==== - Use %_libexecdir as the basis of %_ibus_libexecdir (bsc#1174075) ==== libstorage-ng ==== Version update (4.5.174 -> 4.5.175) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - Translated using Weblate (Indonesian) (bsc#1149754) - 4.5.175 ==== libvirt ==== Version update (9.10.0 -> 10.0.0) Subpackages: libvirt-client libvirt-daemon-common libvirt-daemon-config-network libvirt-daemon-driver-interface libvirt-daemon-driver-libxl libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-lock libvirt-daemon-log libvirt-daemon-plugin-lockd libvirt-daemon-qemu libvirt-daemon-xen libvirt-libs - Add temporary build fix for ppc64le bsc#1218823 - Update to libvirt 10.0.0 - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432, jsc#PED-6851 - Many incremental improvements and bug fixes, see https://libvirt.org/news.html#v10-0-0-2024-01-15 ==== php8 ==== Version update (8.2.14 -> 8.2.15) Subpackages: php8-cli php8-ctype php8-dom php8-gd php8-gettext php8-iconv php8-mbstring php8-mysql php8-openssl php8-pdo php8-sqlite php8-tokenizer php8-xmlreader php8-xmlwriter - version update to 8.2.15 * This is a bug fix release. - modified patches % php-ar-flags.patch (refreshed) % php-build-reproducible-phar.patch (refreshed) ==== python-SQLAlchemy ==== Version update (2.0.24 -> 2.0.25) - update to 2.0.25: * preliminary support for Python 3.12 pep-695 type alias structures * see https://docs.sqlalchemy.org/en/20/changelog/changelog_20.html#change-2.0.25 ==== python-Twisted ==== Subpackages: python311-Twisted python311-Twisted-tls - Add twisted-pr12054-testinvokationpy3.12.1.patch * Pull request gh#twisted/twisted#12054 fixes failing tests on python312 gh#twisted/twisted#12052 - Fix rpmlint errors ==== python-anyio ==== Version update (3.7.1 -> 4.2.0) - update to 4.2.0: * Add support for byte-based paths in connect_unix, create_unix_listeners, create_unix_datagram_socket, and create_connected_unix_datagram_socket. (PR by Lura Skye) * Enabled the Event and CapacityLimiter classes to be instantiated outside an event loop thread * Broadly improved/fixed the type annotations. Among other things, many functions and methods that take variadic positional arguments now make use of PEP 646 TypeVarTuple to allow the positional arguments to be validated by static type checkers. These changes affected numerous methods and functions, including: * anyio.run() * TaskGroup.start_soon() * anyio.from_thread.run() * anyio.from_thread.run_sync() * anyio.to_thread.run_sync() * anyio.to_process.run_sync() * BlockingPortal.call() * BlockingPortal.start_task_soon() * BlockingPortal.start_task() (also resolves #560) * Fixed various type annotations of anyio.Path to match Typeshed: * anyio.Path.__lt__() * anyio.Path.__le__() * anyio.Path.__gt__() * anyio.Path.__ge__() * anyio.Path.__truediv__() * anyio.Path.__rtruediv__() * anyio.Path.hardlink_to() * anyio.Path.samefile() * anyio.Path.symlink_to() * anyio.Path.with_segments() (PR by Ganden Schaffner) * Fixed adjusting the total number of tokens in a CapacityLimiter on asyncio failing to wake up tasks waiting to acquire the limiter in certain edge cases (fixed with help from Egor Blagov) * Fixed loop_factory and use_uvloop options not being used on the asyncio backend * Fixed cancellation propagating on asyncio from a task group to child tasks if the task hosting the task group is in a shielded cancel scope - update to 4.1.0: * Adapted to API changes made in Trio v0.23 * Removed a checkpoint when exiting a task group * Renamed the ``cancellable`` argument in ``anyio.to_thread.run_sync()`` to * ``abandon_on_cancel`` (and deprecated the old parameter name) * Added support for voluntary thread cancellation via * ``anyio.from_thread.check_cancelled()`` * Bumped minimum version of trio to v0.23 * Exposed the ``ResourceGuard`` class in the public API * Fixed ``RuntimeError: Runner is closed`` when running higher- scoped async generator fixtures in some cases * Fixed discrepancy between ``asyncio`` and ``trio`` where reraising a cancellation exception in an ``except*`` block would incorrectly bubble out of its cancel scope * Any exceptions raising out of a task groups are now nested inside an ``ExceptionGroup`` (or ``BaseExceptionGroup`` if one or more ``BaseException`` were included) * Fixed task group not raising a cancellation exception on asyncio at exit if no child tasks were spawned and an outer cancellation scope had been cancelled before * Ensured that exiting a ``TaskGroup`` always hits a yield point, regardless of whether there are running child tasks to be waited on * On asyncio, cancel scopes will defer cancelling tasks that are scheduled to resume with a finished future * On asyncio and Python 3.9/3.10, cancel scopes now only suppress cancellation exceptions if the cancel message matches the scope * Task groups on all backends now raise a single cancellation exception when an outer cancel scope is cancelled, and no exceptions other than cancellation exceptions are raised in the group * **BACKWARDS INCOMPATIBLE** Changes the pytest plugin to run all tests and fixtures in the same task, allowing fixtures to set context variables for tests and other fixtures ``anyio.Path.relative_to()`` and * ``anyio.Path.is_relative_to()`` to only accept one argument, as passing multiple arguments is deprecated as of Python 3.12 * **BACKWARDS INCOMPATIBLE** Dropped support for spawning tasks from old-style coroutine functions (``(a)asyncio.coroutine``) * **BACKWARDS INCOMPATIBLE** The ``policy`` option on the ``asyncio`` backend was changed to ``loop_factory`` to accommodate ``asyncio.Runner`` * Dropped support for Python 3.7 * Added support for Python 3.12 * Fixed ``from_thread.run`` failing when used to call sniffio- dependent functions on asyncio from a thread running trio or curio * Fixed deadlock when using ``from_thread.start_blocking_portal(backend="asyncio")`` * in a thread running trio or curio (PR by Ganden Schaffner) * Improved type annotations: * The ``item_type`` argument of ``create_memory_object_stream`` was deprecated. * To indicate the item type handled by the stream, use * ``create_memory_object_stream[T_Item]()`` instead. Type checking should no longer fail when annotating memory object - drop tests-test_fileio.py-don-t-follow-symlinks-in-dev.patch (upstream) ==== python-authheaders ==== Version update (0.16.0 -> 0.16.1) - update to 0.16.1: * Clean up unnecessary escaping of semi-colons in test data and adjust related code to resolve SyntaxWarning with Python 3.12 (#29) * Set python_requires >3.7 and clean up cruft in setup.py * Use importlib.resources instead of importlib_resources - switch to PEP517 build ==== python-libvirt-python ==== Version update (9.10.0 -> 10.0.0) - Update to 10.0.0 - Add all new APIs and constants in libvirt 10.0.0 - jsc#PED-3226, jsc#PED-3279, jsc#PED-4931, jsc#PED-5432, jsc#PED-6851 ==== python-service_identity ==== Version update (23.1.0 -> 24.1.0) - update to 24.1.0: * If a certificate doesn't contain any `subjectAltName`s, we now raise `service_identity.CertificateError` instead of `service_identity.VerificationError` to make the problem easier to debug. ==== python-trio ==== Version update (0.22.0 -> 0.23.2) - We don't need isort for the tests: Avoid it for Ring1 - Clean dependencies - update to 0.23.2: * TypeVarTuple is now used to fully type :meth:`nursery.start_soon() <trio.Nursery.start_soon>`, :func:`trio.run()`, :func:`trio.to_thread.run_sync()`, and other similar functions accepting (func, *args). This means type checkers will be able to verify types are used correctly. :meth:`nursery.start() <trio.Nursery.start>` is not fully typed yet however. (#2881) * Make pyright recognize :func:`open_memory_channel` as generic. (#2873) backlink Unknown interpreted text role "func". * Make pyright recognize :func:`open_memory_channel` as generic. * Unknown interpreted text role "func". * Moved the metadata into PEP 621-compliant :file:`pyproject.toml`. (#2860) - update to 0.23.1: * Don't crash on import in Anaconda interpreters. * Add type hints. * When exiting a nursery block, the parent task always waits for child tasks to exit. This wait cannot be cancelled. However, previously, if you tried to cancel it, it *would* inject a `Cancelled` exception, even though it wasn't cancelled. Most users probably never noticed either way, but injecting a `Cancelled` here is not really useful, and in some rare cases caused confusion or problems, so Trio no longer does that. * If called from a thread spawned by `trio.to_thread.run_sync`, `trio.from_thread.run` and `trio.from_thread.run_sync` now reuse the task and cancellation status of the host task; * this means that context variables and cancel scopes naturally propagate 'through' threads spawned by Trio. You can also use `trio.from_thread.check_cancelled` to efficiently check for cancellation without reentering the Trio thread. * :func:`trio.lowlevel.start_guest_run` now does a bit more setup of the guest run before it returns to its caller, so that the caller can immediately make calls to :func:`trio.current_time`, :func:`trio.lowlevel.spawn_system_task`, :func:`trio.lowlevel.current_trio_token`, etc. * When a starting function raises before calling :func:`trio.TaskStatus.started`, :func:`trio.Nursery.start` will no longer wrap the exception in an undocumented :exc:`ExceptionGroup`. * To better reflect the underlying thread handling semantics, the keyword argument for `trio.to_thread.run_sync` that was previously called ``cancellable`` is now named ``abandon_on_cancel``. * The old ``cancellable`` name is now deprecated. - Update to 0.22.2: * Fix PermissionError when importing trio due to trying to access pthread. * Breaking change: Timeout functions now raise ValueError if passed math.nan. This includes trio.sleep, trio.sleep_until, trio.move_on_at, trio.move_on_after, trio.fail_at and trio.fail_after. * Added support for naming threads created with trio.to_thread.run_sync, requires pthreads so is only available on POSIX platforms with glibc installed. * trio.socket.socket now prints the address it tried to connect to upon failure. * Fixed a crash that can occur when running Trio within an embedded Python interpreter, by handling the TypeError that is raised when trying to (re-)install a C signal handler. * Fix sniffio.current_async_library() when Trio tasks are spawned from a non-Trio context (such as when using trio-asyncio). Previously, a regular Trio task would inherit the non-Trio library name, and spawning a system task would cause the non-Trio caller to start thinking it was Trio. * Documented that Nursery.start_soon does not guarantee task ordering. ==== qca-qt5 ==== Version update (2.3.7+git12 -> 2.3.8+git1) Subpackages: libqca-qt5-2 qca-qt5-plugins - Update to version 2.3.8+git1: * CI: Enable Android builds - There's a v2.3.8 tag now so the version matches properly again ==== qpdf ==== Version update (11.7.0 -> 11.8.0) - Temporary workaround for test fuzz-16214 (bsc#1218902) * Add openssl3_2-fuzz-16214.patch - Update to 11.8.0: * Bug fixes: - When flattening annotations, preserve hyperlinks and other annotations that inherently have no appearance information. * CLI Enhancements - Introduce x in the numeric range syntax to allow exclusion of pages within a page range. See Page Ranges for details. - Support comma-separated numeric values with --collate to select different numbers of pages from different groups. - Add --set-page-labels option to completely override page labels in the output. * Library Enhancements - Add API to support --set-page-labels: - QPDFJob::Config::setPageLabels - pdf_page_label_e enumerated type - QPDFPageLabelDocumentHelper::pageLabelDict - Improve file recovery logic to better handle files with cross-reference streams. This should enable qpdf to recover some files that it would previously have reported âunable to find trailer dictionary.â ==== sssd ==== Version update (2.9.3 -> 2.9.4) Subpackages: libsss_certmap0 libsss_idmap0 libsss_nss_idmap0 sssd-krb5-common sssd-ldap - Update to release 2.9.4 * Fixes a crash when PAM passkey processing incorrectly handles non-passkey data. * Fixed group membership handling when members are coming from different forest domains and using ldap token groups is prohibited. * Files provider was erroneously taking into consideration ``local_auth_policy`` config option, thus breaking smartcard authentication of local user in setups that did not explicitly specify this option. This is now fixed. ==== virt-manager ==== Subpackages: virt-install virt-manager-common - bsc#1218983 - [SLE15SP6] virt-manager:test testCLI0264virt_xml fails with libvirt 10.0.0. Disable this test for now. virt-manager.spec

1 0

Tumbleweed x86_64 64-bit architecture only possible?
by Obs Geeko 22 Jan '24

22 Jan '24

Hello, I found x86_64 gcc13 requires glibc-32bit and glibc-devel-32bit, which are imported from i586 arch, to build. May I ask is it possible to have pure 64-bit x86_64 only Tumbleweed? If we still need i586 together with x86_64 arch in Tumbleweed to work, what is the differences between openSUSE:Factory i586 arch and openSUSE:Factory:LegacyX86 i586 arch, are they the same in most parts? Thank you. Best Regards

6 8

bcachefs + snapper out of the box support - any plans?
by Andrea Ippolito 22 Jan '24

22 Jan '24

I love the current out of the box experience with btrfs + snapshots and how easy everything is, including grub boot entries for easy rollback. I suppose that with bcachefs being now in the kernel, giving users an extra option to back snapshots with bcachefs instead of btrfs would be a good addition, although I imagine it will take time. I just wanted to know if it's on the radar. Thanks :)

2 1

Re: Tumbleweed - Review of the week 2024/03
by Christoph Grüninger 21 Jan '24

21 Jan '24

Hi Dominique (and other interested parties), on your list of packages with issues prior to getting included in Tumbleweed, I missed Autoconf 2.72. My SR got declined and it somehow felt through the cracks. Some help would be appreciated! Further pointers: https://build.opensuse.org/request/show/1134966 https://bugzilla.opensuse.org/show_bug.cgi?id=1219035 Bye Christoph -- L'enjeu est de bâtir la France de nos enfants, pas de ressasser la France de notre enfance. [Emmanuel Macron, 2022]

1 0

New Tumbleweed snapshot 20240119 released!
by Dominique Leuenberger 21 Jan '24

21 Jan '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ibus-table java-11-openjdk (11.0.21.0 -> 11.0.22.0) kdump (2.0.0 -> 2.0.1) kernel-firmware (20240102 -> 20240115) libguestfs libnvme (1.6+5.g68c6ffb -> 1.7.1+0.g13ba383) libp11 nvme-cli (2.6 -> 2.7.1) ppp python-falcon rpm-config-SUSE (20230712 -> 20240118) rsyslog yast2-pkg-bindings (5.0.2 -> 5.0.4) === Details === ==== ibus-table ==== - Fixes for %_ibus_libexecdir moving to %_libexecdir (bsc#1174075) ==== java-11-openjdk ==== Version update (11.0.21.0 -> 11.0.22.0) Subpackages: java-11-openjdk-headless - Upgrade to upstream tag jdk-11.0.22+7 (January 2024 CPU) * Security fixes + JDK-8308204: Enhanced certificate processing + JDK-8314295, CVE-2024-20919, bsc#1218903: Enhance verification of verifier + JDK-8314284, CVE-2024-20926, bsc#1218906: Enhance Nashorn performance + JDK-8314307, CVE-2024-20921, bsc#1218905: Improve loop handling + JDK-8314468, CVE-2024-20918, bsc#1218907: Improve Compiler loops + JDK-8316976, CVE-2024-20945, bsc#1218909: Improve signature handling + JDK-8317547, CVE-2024-20952, bsc#1218911: Enhance TLS connection support * Other fixes + JDK-6381945: (cal) Japanese calendar unit test system should avoid multiple static imports + JDK-6445283: ProgressMonitorInputStream not large file aware (>2GB) + JDK-8026393: jarsigner never shows a warning in badKeyUsage case + JDK-8041447: Test javax/swing/dnd/7171812/bug7171812.java fails with java.lang.RuntimeException: Test failed, scroll on drag doesn't work + JDK-8053479: (dc) DatagramChannel.read() throws exception instead of discarding data when buffer too small + JDK-8067250: [mlvm] vm/mlvm/mixed/stress/regression/b6969574 fails and perf regression + JDK-8153090: TAB key cannot change input focus after the radio button in the Color Selection dialog + JDK-8168408: Test java/awt/Focus/ActualFocusedWindowTest/ /ActualFocusedWindowBlockingTest.java fails intermittentently on windows + JDK-8183374: Refactor java/lang/Runtime shell tests to java + JDK-8185531: [TESTBUG] Improve test configuration for shared strings + JDK-8195589: T6587786.java failed after JDK-8189997 + JDK-8197825: [Test] Intermittent timeout with javax/swing JColorChooser Test + JDK-8205467: javax/management/remote/mandatory/connection/ /MultiThreadDeadLockTest.java possible deadlock + JDK-8207166: jdk/jshell/ /JdiHangingLaunchExecutionControlTest.java - launch timeout + JDK-8210168: JCK test .vm.classfmt.ins.code__002.code__00201m1 .code__00201m1 hangs with -noverify + JDK-8210265: Crash in HSpaceCounters::update_used() + JDK-8211045: [Testbug] Fix for 8144279 didn't define a test case! + JDK-8212997: [TESTBUG] Remove defmeth tests for class file versions 50 and 51 + JDK-8213898: CDS dumping of springboot asserts in G1ArchiveAllocator::alloc_new_region + JDK-8214694: cleanup rawtypes warnings in open jndi tests + JDK-8217329: JTREG: Clean up, remove unused imports in gc folder + JDK-8218178: vmTestbase/vm/mlvm/mixed/stress/regression/ /b6969574/INDIFY_Test.java fails with -Xcomp + JDK-8220083: Remove hard-coded 127.0.0.1 loopback address in JDK networking tests + JDK-8221396: Clean up serviceability/sa/TestUniverse.java + JDK-8223145: Replace wildcard address with loopback or local host in tests - part 1 + JDK-8223788: [macos] JSpinner buttons in JColorChooser dialog may capture focus using TAB Key. + JDK-8224035: Replace wildcard address with loopback or local host in tests - part 9 + JDK-8224204: Replace wildcard address with loopback or local host in tests - part 10 + JDK-8226825: Replace wildcard address with loopback or local host in tests - part 19 + JDK-8230435: Replace wildcard address with loopback or local host in tests - part 22 + JDK-8230858: Replace wildcard address with loopback or local host in tests - part 23 + JDK-8231556: Wrong font ligatures used when 2 versions of same font used + JDK-8231931: [TESTBUG] serviceability/sa/TestUniverse.java looks for wrong string with Shenandoah + JDK-8232135: Add diagnostic output to test java/util/ProcessBuilder/Basic.java + JDK-8232513: java/net/DatagramSocket/PortUnreachable.java still fails intermittently with BindException + JDK-8232933: Javac inferred type does not conform to equality constraint + JDK-8233000: Mark vmTestbase/vm/mlvm/meth/stress/compiler/ /deoptimize test as stress test + JDK-8233847: (sctp) Flx link-local IPv6 scope handling and test cleanup. + JDK-8237858: PlainSocketImpl.socketAccept() handles EINTR incorrectly + JDK-8238740: java/net/httpclient/whitebox/FlowTestDriver.java should not specify a TLS protocol + JDK-8240235: jdk.test.lib.util.JarUtils updates jar files incorrectly + JDK-8240604: Rewrite sun/management/jmxremote/bootstrap/ /CustomLauncherTest.java test to make binaries from source file + JDK-8240754: Instrument FlowTest.java to provide more debug ... changelog too long, skipping 247 lines ... DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.22 ==== kdump ==== Version update (2.0.0 -> 2.0.1) - upgrade to version 2.0.1 * load.sh: fix fadump (bsc#1218589) ==== kernel-firmware ==== Version update (20240102 -> 20240115) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-ath12k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update to version 20240115 (git commit efeb548d2a2b): * Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 * Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 * Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 * Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 * Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 * amdgpu: DMCUB updates for DCN314 * cirrus: Add firmware file for cs42l43 * amdgpu: DMCUB updates for DCN312 - Update to version 20240111 (git commit b3132c18d0be): * qcom: Update the firmware for Adreno a630 family of GPUs * cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops * linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - Update to version 20240110 (git commit 31db82d69905): * linux-firmware: update firmware for qat_4xxx devices * linux-firmware: update firmware for w1u_uart * amdgpu: DMCUB updates for DCN314 * Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 * Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 * Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 * Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Update to version 20240105 (git commit 5a6ae745d8a4): * amlogic/bluetooth: add firmware bin of W1 serial soc(w1u_uart) - Drop superfluous Provides from uncompressed kernel-firmware package that may confuse dependencies (bsc#1218307) - Minor adjustment and updates of scripts / templates ==== libguestfs ==== Subpackages: libguestfs-appliance libguestfs-xfs libguestfs0 - Copy sorted packagelist to packages during supermin appliance setup. (bsc#1215586) libguestfs.spec ==== libnvme ==== Version update (1.6+5.g68c6ffb -> 1.7.1+0.g13ba383) Subpackages: libnvme-mi1 libnvme1 - Update to version 1.7.1+0.g13ba383: * tree: do no free ns on error in nvme_ns_init - Update to version 1.7+0.gf38b1d7: * tree: do not open blk device on default * tree: read all attributes from sysfs when available * ioctl: set data length when retrieving LBA status * types: fix regression for vendor-specific field in nvme_id_ns * util: use cleanup functions * linux: use cleanup functions * json: use cleanup functions * fabrics: use cleanup functions * tree: use cleanup functions * cleanup: add cleanup functions * tree: fix incorrect return value * tree: Fix clearing application strings * libnvme: reshuffle nvme_generate_tls_key_identity() * libnvme: fixup error codes * libnvme: Implement 'nvme_generate_tls_key_identity()' * libnvme: support NVMe TLS identities version 1 * libnvme: Add base64 functions * libnvme: separate out 'gen_tls_identity' and reshuffle 'derive_nvme_keys' * libnvme: separate out a function 'select_hmac' * libnvme: fix a memory leak when calling read_ssns() * libnvme: fix a memory leak in read_discovery() * fabrics: avoid redundant args in nvme_discovery_log() * fabrics: have nvmf_get_discovery_log() call nvmf_get_discovery_wargs() * fabrics: fetch smaller Discovery Log Page header * fabrics: avoid redundant Get Log Page on retry * fabrics: clear RAE for discovery log page commands * json-schema: add keyring and tls_key details * types: add Host Behavior Support field definitions * mi: Cast values to u32 if shift overflows int * types: Cast values to u32 if shift overflows int * test: Avoid unaligned pointer dereferences * nbft: Avoid unaligned pointer dereferences * types: add cross-namespace copy formats, status codes, ONCS bits * nvme: Add length field to Hkdf-Expand-Label computation * ioctl: use lsp arg in nvme_get_log_boot_partition * fabrics: use SECTYPE to determine whether to use TLS * fabrics: Allocate aligned payloads for id_ctrl and discovery log calls * linux: Allocate aligned payloads for id_ctrl and id_ns calls * ioctl: MSB variable-size storage/reference tags ==== libp11 ==== - Add support for OpenSSL 3.x: Add libp11-configure-treat-all-openssl-3.x-releases-the-same.patch ==== nvme-cli ==== Version update (2.6 -> 2.7.1) Subpackages: nvme-cli-bash-completion - Update to version 2.7.1: * nvme-print-json: Revert field name changes (bsc#1218306) - Update to version 2.7: * nvme-print-json: include vs for identify namespace * nvme-print-stdout: enhance connect message * fabrics: fix connect error if hostid file does not exist * fabrics: fix invalid output format error during nvme connect * wdc: Fix vs-smart-add-log Command for SN650 and SN655 * nvme: restric hmac options for gen-tls-key * wdc: Fix UUID index fallback mechanism * plugins/ocp: Add OCP Telemetry String log page, Telemetry log page * completions: Add bash completions for telemetry string log page * plugins/solidigm: Added OCP 2.0 compatibility version command * plugins/solidigm: Added OCP 2.0 vs-drive-info command. * plugins/ocp: Fix printing order of various Latency Monitor Log buckets * nvme: validate output format split status from flag return value * nvme: simplify cleanup_nvme_dev() * cleanup: remove unused cleanup_charp() * wdc: Add support for SN861 2nd pci device id * nvme: replace libhugetlbfs with mmap and madvise * util/mem: move alloc helper to util section * nvme: auto cleanup filedescriptors * nvme: auto cleanup buffers * nvme: return error code in get_persistent_event_log * nvme: sanitize nvme-gen-tls-key * nvme: print out the resulting TLS identity for 'nvme check-tls-key' * nvme: Add version '1' identifier for nvme-gen-tls-key * subprojects/libnvme: update wrapper for TP8018 * plugins/solidigm: Added re_sku_count smart atrribute * doc: Fix nvme-connect manpage --application option string * plugins/ocp: changed command clear-pcie-correctable-error-counters to match OCP 2.0 spec. * plugins/solidigm: Added command to clear PCIe Correctable Error Counters according to OCP 2.0 * plugins/ocp: Reorganized clear feature code for better reuse * nvme: fixup length calculation for 'nvme gen-tls-key --secret' * doc: remove invalid hostkey info for --dhchap-secret * nvme-print-json: use human helper everywhere * nvme-print-json: remove obj_print helper * plugins/ocp: update nvme_show_select_result call * mailmap: only show contributer's name * nvme-print-json: Change to report status and message in array * nvme-print-json: Change to report feature select in array * nvme-print-json: Change to report error and data in array * nvme-print-json: Add show_init/finish calls to report features in array * nvme-print: Add nvme_show_error_status() to merge error message and status * nvme-print-json: Use r instead of root and use obj_add_***(r, ..., ...) * nvme-print-json: Delete static const char string global variables * nvme-print-json: Add remaining controller registers readable format * nvme-print-json: Add readable format cap, vs, cc, csts, nssr and crto registers * nvme-print-json: Combine duplicated json key and val string variables * nvme-print-json: Replase json_array_add_value_string() to array_add_str() * nvme-print-json: Replase json_object_add_value_uint128() to obj/root_add_uint128() * nvme-print-json: Replase json_object_add_value_object() to obj/root_add_obj() * nvme-print-json: Replase json_array_add_value_object() to array_add_obj() * nvme-print-json: Replase json_object_add_value_array() to obj/root_add_array() * nvme-print-json: Replase json_object_add_value_uint() to obj/root_add_uint() * nvme-print-json: Replase json_object_add_value_int() to obj/root_add_int() * nvme-print-json: Replase json_object_add_value_uint64() to obj/root_add_uint64() * nvme-print-json: Replase json_object_add_value_string() to obj/root_add_str() * nvme-print-json: Update feature_show_fields_*** to use root/obj_add_***() * nvme-print-json: Update lba_status_log to use root_add_***() and obj_add_***() * nvme-print-json: Replace lba_status_log printf() to root_add_result() * nvme-print-json: Add list_item print function * nvme-print-json: Add lba_status_info print function * nvme-print-json: Add lba_range print function * nvme-print-json: Add id_ctrl_rpmbs print function * nvme-print-json: Unify json_list and jroot object names to root * nvme-print-json: Add json_zns_changed print function * nvme-print-json: Add root_add_result() to output result message * nvme-print-json: Split persistent_event_log print function * nvme-print-json: Remove unnecessary string newline code * nvme-print-json: Replace effects_log_list print to use json_print() * nvme-print-json: Print persistent_event_log no log data result correctly * nvme-print-json: Add static "result" and "erorr" strings variables * nvme-print-json: Add single_property printf function * nvme: Replace get feature command stderr output to nvme_show_error() * nvme-print-json: Change d() output to use d_json() * nvme: Fix get-feature command mixed stdout and json outputs * nvme-print-json: Add remaining feature fields print functions * nvme-print-json: Update formatting and codying style * build: Add -std=c99 to CFLAGS for muon on CentOS 7 * fabrics: add udev rule to avoid renaming nbft interfaces * fabrics: autoconnect: add service unit for connecting NBFT subsystems * fabrics: autoconnect: explicitly express module dependency * Updates to codeql config * libnvme-wrap: exit on VOID_FN lookup failure * plugins/ocp:Added the ocp C6h feature api * plugin/ocp_fid_c6h:Added the ocp C6h feature api * nvme-copy: support cross-namespace copy * nvme/plugins: fix mismatch operator * nvme: fix overflow possiblity * nvme: reduce identify cmd issue * nvme: allow set-features to take input from stdin * Fix common misspellings from codespell project * nvme-print: Correct to print correct ascii character string length * print-stdout: print Host Behavior Support correctly * build: Bump libnvme wrap * plugins/solidigm: Added support for temperature statistics log page * Add support for codeql sweeps * doc: Add virt-mgmt command ... changelog too long, skipping 44 lines ... * update NetApp udev rule file name ==== ppp ==== - Backport ppp-pidfiles.patch and ppp-mkdir-run.patch from the upcoming 2.5.1 release and make sure that pppd's pid, resolv and database files are created under /run/ppp (bsc#1218370). - Reflect the rp-pppoe -> pppoe name change also in pppoe-peers. ==== python-falcon ==== Subpackages: python-falcon-doc python311-falcon - remove unneeded build dependency python-ujson ==== rpm-config-SUSE ==== Version update (20230712 -> 20240118) - Update to version 20240118: * find-provides.ksyms: Fix ksym provides on Tumbleweed/ALP - Update to version 20240115: * macros.initrd: %regenerate_initrd_post: don't fail if mkdir is unavailable * scripts: Do full ksyms dependencies on Tumbleweed (bsc#1215015) ==== rsyslog ==== - suppress installation errors when systemd is not running (bsc#1218799) ==== yast2-pkg-bindings ==== Version update (5.0.2 -> 5.0.4) - Fixed repository and service probing with libzypp 7.31.26 and newer, convert the type to string by pkg-bindings, not by libzypp which might change it (bsc#1218399) - 5.0.4 - Added new pkg calls for managing and resolving the solver conflicts. Added PkgSolveProblems(), PkgSetSolveSolutions() and PkgResetSolveSolutions() calls. (gh#openSUSE/agama#944) - Libzypp 17.31.26+ uses "N/A" for unknown repository types instead of "NONE", support both cases (bsc#1218859) - 5.0.3

1 0

Tumbleweed zypper dup has weird error
by Larry Len Rainey 20 Jan '24

20 Jan '24

7 10

snapd applications not working on Tumbleweed (20230613)
by Jim Henderson 19 Jan '24

19 Jan '24

Wondering if anyone else is seeing this. I attempted to launch two apps (slack and spotify) installed with snapd, and the launch failed. Troubleshooting it, I removed all of the snaps from the system, uninstalled and reinstalled snapd, and I get the following output: --- $ snap install spotify error: cannot perform the following tasks: - Run configure hook of "spotify" snap if present (run hook "configure": ----- go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Matcha-dark-sea /snap/spotify/67/data-dir/themes/Matcha-dark-sea none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Matcha-sea /snap/spotify/67/data-dir/themes/Matcha-sea none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Materia-compact /snap/spotify/67/data-dir/themes/Materia-compact none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Materia-dark-compact /snap/spotify/67/data-dir/themes/Materia-dark-compact none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Materia-dark /snap/spotify/67/data-dir/themes/Materia-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Materia-light-compact /snap/spotify/67/data-dir/themes/Materia-light-compact none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Materia-light /snap/spotify/67/data-dir/themes/Materia-light none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Materia /snap/spotify/67/data-dir/themes/Materia none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Radiance /snap/spotify/67/data-dir/themes/Radiance none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Radiant-MATE /snap/spotify/67/data-dir/themes/Radiant-MATE none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-MATE-dark /snap/spotify/67/data-dir/themes/Yaru-MATE-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-MATE-light /snap/spotify/67/data-dir/themes/Yaru-MATE-light none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-bark-dark /snap/spotify/67/data-dir/themes/Yaru-bark-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-bark /snap/spotify/67/data-dir/themes/Yaru-bark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-blue-dark /snap/spotify/67/data-dir/themes/Yaru-blue-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-blue /snap/spotify/67/data-dir/themes/Yaru-blue none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-dark /snap/spotify/67/data-dir/themes/Yaru-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-light /snap/spotify/67/data-dir/themes/Yaru-light none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-magenta-dark /snap/spotify/67/data-dir/themes/Yaru-magenta-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-magenta /snap/spotify/67/data-dir/themes/Yaru-magenta none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-mate-dark /snap/spotify/67/data-dir/themes/Yaru-mate-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-mate /snap/spotify/67/data-dir/themes/Yaru-mate none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-olive-dark /snap/spotify/67/data-dir/themes/Yaru-olive-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-olive /snap/spotify/67/data-dir/themes/Yaru-olive none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-prussiangreen-dark /snap/spotify/67/data-dir/themes/Yaru-prussiangreen-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-prussiangreen /snap/spotify/67/data-dir/themes/Yaru-prussiangreen none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-purple-dark /snap/spotify/67/data-dir/themes/Yaru-purple-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-purple /snap/spotify/67/data-dir/themes/Yaru-purple none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-red-dark /snap/spotify/67/data-dir/themes/Yaru-red-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-red /snap/spotify/67/data-dir/themes/Yaru-red none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-sage-dark /snap/spotify/67/data-dir/themes/Yaru-sage-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-sage /snap/spotify/67/data-dir/themes/Yaru-sage none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-viridian-dark /snap/spotify/67/data-dir/themes/Yaru-viridian-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-viridian /snap/spotify/67/data-dir/themes/Yaru-viridian none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru /snap/spotify/67/data-dir/themes/Yaru none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/elementary /snap/spotify/67/data-dir/themes/elementary none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied cannot update snap namespace: cannot create writable mimic over "/usr/lib/x86_64-linux-gnu": permission denied snap-update-ns failed with code 1 -----) --- The execution of both programs prior to the reinstallation did the same thing. I did note that /usr/lib/x86_64-linux-gnu does not exist on my system. Happy to report a bug on bugzilla, but wanted to see if anyone else had noticed this. -- Jim Henderson Please keep on-topic replies on the list so everyone benefits

5 10

[TW][Slowroll] latest opi wants to install build system tools and more (29 new)
by Felix Miata 19 Jan '24

19 Jan '24

Should I report a bug? If yes, against TW? SR isn't apparent there. To update opi: # time zypper -v dup ... Computing upgrade... ... The following package is going to be upgraded: opi 3.5.0-1.1 -> 4.3.0-1.1 The following 29 NEW packages are going to be installed: binutils 2.41-1.2 debugedit 5.0-5.6 dwz 0.15-2.6 gcc 13-1.6 gcc13 13.2.1+git8109-1.1 gettext-runtime 0.21.1-2.4 gettext-tools 0.21.1-2.4 glibc-devel 2.38-7.1 libasan8 13.2.1+git8109-1.1 libatomic1 13.2.1+git8109-1.1 libctf-nobfd0 2.41-1.2 libctf0 2.41-1.2 libhwasan0 13.2.1+git8109-1.1 libitm1 13.2.1+git8109-1.1 liblsan0 13.2.1+git8109-1.1 liblzo2-2 2.10-8.4 libtextstyle0 0.21.1-2.4 libtsan2 13.2.1+git8109-1.1 libubsan1 13.2.1+git8109-1.1 libxcrypt-devel 4.4.36-1.4 linux-glibc-devel 6.6-1.1 make 4.4.1-2.5 patch 2.7.6-6.9 python-rpm-macros 20231010.0a1f0d9-1.1 python-rpm-packaging 20210526+a18ca48-1.9 python311-packaging 23.2-1.1 rpm-build 4.18.0-6.2 rpm-build-perl 4.18.0-6.2 squashfs 4.6.1-2.2 1 package to upgrade, 29 new. Overall download size: 1.3 MiB. Already cached: 48.7 MiB. After the operation, additional 188.3 MiB will be used. Continue? [y/n/v/...? shows all options] (y): n # Why are all these construction packages required in order to do opi package searches? Is this really intended? -- Evolution as taught in public schools is, like religion, based on faith, not based on science. Team OS/2 ** Reg. Linux User #211409 ** a11y rocks! Felix Miata

3 2

Tumbleweed - Review of the week 2024/03
by Dominique Leuenberger 19 Jan '24

19 Jan '24

Dear Tumbleweed users and hackers, As we can see in the number of larger and smaller things going through the staging process, the holiday season is over. To get all the changes out to the users, we have published six snapshots (0112, 0114…0118) this week. The main changes delivered were: * Linux kernel 6.6.11 * Pipewire 1.0.1 * Samba 4.19.4 * Mozilla Firefox 121.0.1 * Systemd 254.8 * KDE Frameworks 5.114.0 * ffmpeg 6.1.1 * Bash 5.2.26 * elfutils 0.190 * gnutls 3.8.3 * Wine 9.0 The staging projects currently show the community working on these changes: * RPM 4.19.1: getting closer to be ready. packagers: please ensure to read/understand Ana’s announcement at https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… * rpm-config-SUSE: enable full ksym() dependencies in Tumbleweed * Mesa 23.3.3 * Linux Kernel 6.7 * QEmu 8.2.0 * dbus-broker: a big step forward; upgrades seem to be an issue that need to be addressed * Ruby 3.3: all buld fails have been fixed/have a fix submitted. QA should happen next week. * libxml 2.12.x: slow progress * openSSL 3.2.0 * c-ares 1.21.0: nodejs build fails have been resolved, but a new cycle has formed: appstream-glib, c-ares, curl, googletest, nghttp2, python311 Cheers, Dominique

1 0

New Tumbleweed snapshot 20240118 released!
by Dominique Leuenberger 19 Jan '24

19 Jan '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: PackageKit desktop-file-utils gnutls (3.8.2 -> 3.8.3) iputils (20231222 -> 20240117) libstorage-ng (4.5.173 -> 4.5.174) ncurses (6.4.20240106 -> 6.4.20240113) xfce4-whiskermenu-plugin (2.8.2 -> 2.8.3) === Details === ==== PackageKit ==== Subpackages: PackageKit-backend-zypp PackageKit-gstreamer-plugin PackageKit-gtk3-module PackageKit-lang libpackagekit-glib2-18 typelib-1_0-PackageKitGlib-1_0 - Add PackageKit-find-python-3-6.patch: Specify the Python version we need to build this package. ==== desktop-file-utils ==== - support non-SUSE distributions ==== gnutls ==== Version update (3.8.2 -> 3.8.3) Subpackages: libgnutls-dane0 libgnutls30 libgnutls30-32bit - Update to 3.8.3: * libgnutls: Fix more timing side-channel inside RSA-PSK key exchange. [GNUTLS-SA-2024-01-14, CVSS: medium] [bsc#1218865, CVE-2024-0553] * libgnutls: Fix assertion failure when verifying a certificate chain with a cycle of cross signatures. [GNUTLS-SA-2024-01-09, CVSS: medium] [bsc#1218862, CVE-2024-0567] * libgnutls: Fix regression in handling Ed25519 keys stored in PKCS#11 token certtool was unable to handle Ed25519 keys generated on PKCS#11 with pkcs11-tool (OpenSC). This is a regression introduced in 3.8.2. * Rebase gnutls-FIPS-140-3-references.patch * Updated upstream gnutls.keyring ==== iputils ==== Version update (20231222 -> 20240117) - Update to version 20240117 (ping bugfix release) https://github.com/iputils/iputils/releases/tag/20240117 ==== libstorage-ng ==== Version update (4.5.173 -> 4.5.174) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#979 - allow to get Arch object from SystemInfo - make testcase more robust - coding style - 4.5.174 ==== ncurses ==== Version update (6.4.20240106 -> 6.4.20240113) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch 20240113 + improve formatting/style of manpages (patches by Branden Robinson). + modify dist.mk to avoid passing developer's comments in manpages into the generated html documentation. + use ansi+local, ansi+local1, ansi+pp, ansi+rca, ansi+rca2, ansi+sgr to trim -TD + restore padding for wy520* and vt320-k311 (report by Sven Joachim). ==== xfce4-whiskermenu-plugin ==== Version update (2.8.2 -> 2.8.3) Subpackages: xfce4-whiskermenu-plugin-lang - Update to version 2.8.3 * Fix adding launchers to desktop. (Issue #122) * Fix segfault in profile destructor. (Issue #123) * Translation updates

1 0

New Tumbleweed snapshot 20240117 released!
by Dominique Leuenberger 18 Jan '24

18 Jan '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: baobab bash (5.2.21 -> 5.2.26) elfutils (0.189 -> 0.190) elfutils-debuginfod (0.189 -> 0.190) eog evince fwupd gnome-logs gnome-music grub2 gtksourceview libgsf libosinfo live555 (2023.05.10 -> 2023.11.30) llvm17 memtest86+ mosh orca (45.1 -> 45.2) polari python-flufl.i18n python-lxml (4.9.4 -> 5.1.0) python-numpy python-redis python-zope.component readline (8.2 -> 8.2.10) shadow (4.14.2 -> 4.14.3) telepathy-logger upower xorg-x11-server (21.1.9 -> 21.1.11) xwayland (23.2.2 -> 23.2.4) === Details === ==== baobab ==== Subpackages: baobab-lang - Convert to source service for easier updating. ==== bash ==== Version update (5.2.21 -> 5.2.26) Subpackages: bash-doc bash-lang bash-sh - Add upstream patches * bash52-022 It's possible for readline to try to zero out a line that's not null-terminated, leading to a memory fault. * bash52-023 Running `local -' multiple times in a shell function would overwrite the original saved set of options. * bash52-024 Fix bug where associative array compound assignment would not expand tildes in values. * bash52-025 Make sure a subshell checks for and handles any terminating signals before exiting (which might have arrived after the command completed) so the parent and any EXIT trap will see the correct value for $?. ==== elfutils ==== Version update (0.189 -> 0.190) Subpackages: elfutils-lang libasm1 libdw1 libelf1 - Update to version 0.190: * libelf: Add RELR support. * libdw: Recognize .debug_[ct]u_index sections * readelf: - Support readelf -Ds, --use-dynamic --symbol. - Support .gdb_index version 9 * scrlines: New tool that compiles a list of source files associated with a specified dwarf/elf file. * backends: Various LoongArch updates. ==== elfutils-debuginfod ==== Version update (0.189 -> 0.190) Subpackages: debuginfod-client debuginfod-profile libdebuginfod1 - Update to version 0.190 * Schema change (reindexing required, sorry!) for a 60% compression in filename representation, which was a large part of the sqlite index; also, more deliberate sqlite - wal management during scanning using the - -scan-checkpoint option. ==== eog ==== Subpackages: eog-lang - Convert to source service for easier updating. - Own /usr/share/gtk-doc: glib no longer uses gtk-doc and as a consequence cannot be held responsible to deliver that basic directory structure. ==== evince ==== Subpackages: evince-lang evince-plugin-comicsdocument evince-plugin-djvudocument evince-plugin-dvidocument evince-plugin-pdfdocument evince-plugin-tiffdocument evince-plugin-xpsdocument libevdocument3-4 libevview3-3 typelib-1_0-EvinceDocument-3_0 typelib-1_0-EvinceView-3_0 - Convert to source service for easier updating. ==== fwupd ==== Subpackages: fwupd-bash-completion fwupd-lang libfwupd2 typelib-1_0-Fwupd-2_0 - Fix build failure on s390x and ppc64le + This release modifies spec file - add s390x and ppc64le into default 'with efi_fw_update' so that old dbxtool version can be obsoleted. ==== gnome-logs ==== Subpackages: gnome-logs-lang - Convert to source service for easier updating. ==== gnome-music ==== Subpackages: gnome-music-lang - Convert to source service for easier updating. ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - Resolved XFS regression leading to the "not a correct XFS inode" error by temporarily reverting the problematic commit (bsc#1218864) * 0001-Revert-fs-xfs-Fix-XFS-directory-extent-parsing.patch ==== gtksourceview ==== Subpackages: gtksourceview-lang libgtksourceview-3_0-1 typelib-1_0-GtkSource-3_0 - Own /usr/share/gtk-doc: glib no longer uses gtk-doc and as a consequence cannot be held responsible to deliver that basic directory structure. ==== libgsf ==== Subpackages: gsf-office-thumbnailer libgsf-1-114 libgsf-lang - Own /usr/share/gtk-doc: glib no longer uses gtk-doc and as a consequence cannot be held responsible to deliver that basic directory structure. ==== libosinfo ==== Subpackages: libosinfo-1_0-0 libosinfo-lang typelib-1_0-Libosinfo-1_0 - Own /usr/share/gtk-doc: glib no longer uses gtk-doc and as a consequence cannot be held responsible to deliver that basic directory structure. ==== live555 ==== Version update (2023.05.10 -> 2023.11.30) Subpackages: libBasicUsageEnvironment2 libUsageEnvironment3 libgroupsock30 - update up to 2023.11.30: * In the implementation of the "MPEGVideoStreamFramer" class, gave "TimeCode::operator==()" the "const" qualifier, to make some compilers happy. * Performed the annual update of the copyright years near the start of each file - update to 2023.11.08: * Changed the signature to the virtual function "getRTPSinkandRTCP()" (in "ServerMediaSubession", and its subclasses "OnDemandServerMediaSession" and "PassiveServerMediaSubsession") to make its 'result' arguments "rtpSink" and "rtcp" no longer "const *". There was no real reason to make those "const *". - update to 2023.11.07: * In the class "GenericMediaServer", made the variables "fServerMediaSessions", "fClientConnections", and "fClientSessions" 'protected' rather than 'private', to allow subclasses to access them if desired. - update to 2023.10.30: * Fixed a bug in "deleteEventTrigger()" that had accidentally been introduced during the change to 'event trigger' implementation back in June. - update to 2023.07.24: * Updated the event trigger implementation once again, to allow for the possibility of developers redefining MAX_NUM_EVENT_TRIGGERS (it must always be <= the number of bits in an "EventTriggerId", though. - update to 2023.06.20: * Updated the event trigger implementation again - in the case where "NO_STD_LIB" is defined. In this case, "fTriggersAwaitingHandling" is implemented as an array of "Boolean volatile"s, rather than as a 32-bit bitmap. This should make 'race conditions' less likely even if "NO_STD_LIB" is defined (though you should use the preferred, default implementation - that uses an array of "std::atomic_flag"s - if possible). - update to 2023.06.16: * Changed the (default) implementation of 'event triggers' in "BasicTaskScheduler" to implement "fTriggersAwaitingHandling" using "std:atomic_flag"s, rather than as a bitmap. This should overcome 'race conditions' that some users experienced when calling "triggerEvent()" from a non-LIVE555 thread. * Note that this is the first time the LIVE555 code has required the C++ standard library. (If you cannot use the C++ standard library, then you can compile the code - but getting the old behavior - by defining "NO_STD_LIB".) * Minor change to "RTSPCommon.cpp" to overcome a compilation error in XCode on Mac OS X. - update to 2023.06.14: * Fixed a bug in the Matroska file parsing code that could sometimes cause a 'use after free' error. (bsc#1218758, CVE-2023-20573) - update to 2023.06.10: * Minor change to "GroupsockHelper.cpp" to overcome a compilation error in XCode on Mac OS X. - update to 2023.06.08: * Updated the "dateHeader()" function in "RTSPCommon.cpp" to use "gmtime_r()" instead of the older, non-thread-safe "gmtime()". - Applied workarounds for the build error with atomic_flag test ==== llvm17 ==== - Use %_target_* for determining the compiler host triple (boo#1218701) ==== memtest86+ ==== - Change spec license to GPL-2.0-only * Outcome of legal review, requested by SUSE legal team- ==== mosh ==== - Remove the deprecated perl-IO-Socket-INET6 dependency. * Remove the dependency on perl(IO::Socket::INET6) as it has been deprecated by upstream, is no longer suitable for use and its not being maintained. A compatible replacement for this package is perl(IO::Socket::IP) which is shipped by the perl-base package. * In the sources, the perl(IO::Socket::IP) is preferred over INET6. ==== orca ==== Version update (45.1 -> 45.2) Subpackages: orca-lang - Update to version 45.2: + Web: Fix bug causing us to get stuck in menu bar during caret navigation. + General: Dump our cached information in response to children-changed events so that we do not present stale information. + Updated translations. ==== polari ==== Subpackages: polari-lang - Convert to source service for easier updating. ==== python-flufl.i18n ==== - Drop unneeded pdm dependency ==== python-lxml ==== Version update (4.9.4 -> 5.1.0) - update to version 5.1.0: Details on https://lxml.de/5.1/changes-5.1.0.html removed merged patches: - ISO-Schematron-schema-optional.patch - remove-ISO-Schematron-schema.patch - close_file_before_test.patch ==== python-numpy ==== - Update list of expected test failures on riscv64 - Fix gnu-hpc build error for Leap ==== python-redis ==== - add https://github.com/redis/redis-py/pull/3005 as Close-various-objects-created-during-asyncio-tests.patch to fix tests for python 3.12 ==== python-zope.component ==== - Rearrange requirements, run only basic testsuite in SLE-based projects ==== readline ==== Version update (8.2 -> 8.2.10) Subpackages: libreadline8 readline-doc - Add upstream patch readline82-008 * Add missing prototypes for several function declarations - Add upstream patch readline82-009 * Fix issue where the directory name portion of the word to be completed (the part that is passed to opendir()) requires both tilde expansion and dequoting. Readline only performed tilde expansion in this case, so filename completion would fail. - Add upstream patch readline82-010 * Fix the case where text to be completed from the line buffer (quoted) is compared to the common prefix of the possible matches (unquoted) and the quoting makes the former appear to be longer than the latter. Readline assumes the match doesn't add any characters to the word and doesn't display multiple matches. - Port patches * readline-5.2-conf.patch * readline-6.2-metamode.patch * readline-7.0-screen.patch * readline-8.2.dif ==== shadow ==== Version update (4.14.2 -> 4.14.3) Subpackages: libsubid4 login_defs - Update to 4.14.3: * libshadow: + Avoid null pointer dereference (#904) ==== telepathy-logger ==== Subpackages: libtelepathy-logger3 telepathy-logger-schema typelib-1_0-TelepathyLogger-0_2 - Own /usr/share/gtk-doc: glib no longer uses gtk-doc and as a consequence cannot be held responsible to deliver that basic directory structure. ==== upower ==== Subpackages: libupower-glib3 typelib-1_0-UpowerGlib-1_0 upower-lang - Own /usr/share/gtk-doc: glib no longer uses gtk-doc and as a consequence cannot be held responsible to deliver that basic directory structure. ==== xorg-x11-server ==== Version update (21.1.9 -> 21.1.11) Subpackages: xorg-x11-server-Xvfb xorg-x11-server-extra - Update to version 21.1.11 * This release contains fixes for the issues reported in today's security advisory: https://lists.x.org/archives/xorg/2024-January/061525.html * CVE-2023-6816 (bsc#1218582) * CVE-2024-0229 (bsc#1218583) * CVE-2024-21885 (bsc#1218584) * CVE-2024-21886 (bsc#1218585) * CVE-2024-0408 * CVE-2024-0409 - supersedes the following patches * U_xephyr-Don-t-check-for-SeatId-anymore.patch * U_bsc1217765-Xi-allocate-enough-XkbActions-for-our-buttons.patch * U_bsc1217766-randr-avoid-integer-truncation-in-length-check-of-Pr.patch ==== xwayland ==== Version update (23.2.2 -> 23.2.4) - This release contains also the following patches mentioned in previous sle15 releases * bsc1218582-0001-dix-allocate-enough-space-for-logical-button-maps.patch * bsc1218583-0001-dix-Allocate-sufficient-xEvents-for-our-DeviceStateN.patch * bsc1218583-0002-dix-fix-DeviceStateNotify-event-calculation.patch * bsc1218583-0003-Xi-when-creating-a-new-ButtonClass-set-the-number-of.patch * bsc1218584-0001-Xi-flush-hierarchy-events-after-adding-removing-mast.patch * bsc1218585-0001-Xi-do-not-keep-linked-list-pointer-during-recursion.patch * bsc1218585-0002-dix-when-disabling-a-master-float-disabled-slaved-de.patch - This release contains also the missing fixes of initial U_bsc1217765-Xi-allocate-enough-XkbActions-for-our-buttons.patch (bsc#1217765) - Update to version 23.2.4 * This release contains fixes for the issues reported in today's security advisory: https://lists.x.org/archives/xorg/2024-January/061525.html * CVE-2023-6816 (bsc#1218582) * CVE-2024-0229 (bsc#1218583) * CVE-2024-21885 (bsc#1218584) * CVE-2024-21886 (bsc#1218585) * CVE-2024-0408 * CVE-2024-0409 - supersedes the patches mentioned below: * U_bsc1217765-Xi-allocate-enough-XkbActions-for-our-buttons.patch * U_bsc1217766-randr-avoid-integer-truncation-in-length-check-of-Pr.patch

1 0

New Tumbleweed snapshot 20240116 released!
by Dominique Leuenberger 18 Jan '24

18 Jan '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: dconf-editor ffmpeg-6 (6.0.1 -> 6.1.1) libcroco libjpeg-turbo libjxl-gtk (0.8.2 -> 0.9.0) libxkbcommon nvidia-open-driver-G06-signed plocate (1.1.19 -> 1.1.22) rdesktop selinux-policy (20240104 -> 20240116) sushi === Details === ==== dconf-editor ==== Subpackages: dconf-editor-lang - Convert to source service for easier updating. ==== ffmpeg-6 ==== Version update (6.0.1 -> 6.1.1) Subpackages: libavcodec60 libavfilter9 libavformat60 libavutil58 libpostproc57 libswresample4 libswscale7 - Update to version 6.1.1: * libaribcaption decoder * Playdate video decoder and demuxer * Extend VAAPI support for libva-win32 on Windows * afireqsrc audio source filter * arls filter * ffmpeg CLI new option: -readrate_initial_burst * zoneplate video source filter * command support in the setpts and asetpts filters * Vulkan decode hwaccel, supporting H264, HEVC and AV1 * color_vulkan filter * bwdif_vulkan filter * nlmeans_vulkan filter * RivaTuner video decoder * xfade_vulkan filter * vMix video decoder * Essential Video Coding parser, muxer and demuxer * Essential Video Coding frame merge bsf * bwdif_cuda filter * Microsoft RLE video encoder * Raw AC-4 muxer and demuxer * Raw VVC bitstream parser, muxer and demuxer * Bitstream filter for editing metadata in VVC streams * Bitstream filter for converting VVC from MP4 to Annex B * scale_vt filter for videotoolbox * transpose_vt filter for videotoolbox * support for the P_SKIP hinting to speed up libx264 encoding * Support HEVC,VP9,AV1 codec in enhanced flv format * apsnr and asisdr audio filters * OSQ demuxer and decoder * Support HEVC,VP9,AV1 codec fourcclist in enhanced rtmp protocol * CRI USM demuxer * ffmpeg CLI '-top' option deprecated in favor of the setfield filter * VAAPI AV1 encoder * ffprobe XML output schema changed to account for multiple variable-fields elements within the same parent element * ffprobe -output_format option added as an alias of -of - Remove patch6 0001-avfilter-vf_libplacebo-remove-deprecated-field.diff - Prefer libvpl to libmfx: the latter is deprecated - Delete ffmpeg-6-private-devel package as it is only needed to build libav-tools ==== libcroco ==== - Own /usr/share/gtk-doc: glib no longer uses gtk-doc and as a consequence cannot be held responsible to deliver that basic directory structure. ==== libjpeg-turbo ==== Subpackages: libjpeg8 libjpeg8-x86-64-v3 - Do not require SIMD support when it does not exist ==== libjxl-gtk ==== Version update (0.8.2 -> 0.9.0) Subpackages: gdk-pixbuf-loader-jxl gimp-plugin-jxl - Remove cjxl/djxl manpages from gtk flavor installation, these are part of the tools subpackage from the main flavor. - Update to release 0.9 * Encoder API: * Add JxlEncoderSetExtraChannelDistance to adjust the quality of extra channels (like alpha) separately. * New API functions for streaming encoding. * New options for more fine-grained control over metadata preservation when using JxlEncoderAddJPEGFrame. * New function JxlEncoderSetUpsamplingMode to change the upsampling method, e.g. to use nearest-neighbor upsampling for pixel art. * New function JxlEncoderDistanceFromQuality for convenience to calculate a distance given a quality. * Decoder API: Implemented JxlDecoderSetOutputColorProfile and JxlDecoderSetCms to enable decoding to desired colorspace. * Deprecated functions removed from encoder and decoder APIs. * Command-line tools: * cjxl can now be used to explicitly add/update/strip Exif/XMP/JUMBF metadata using the decoder-hints syntax, e.g. cjxl input.ppm -x exif=input.exif output.jxl * djxl can now be used to extract Exif/XMP/JUMBF metadata. ==== libxkbcommon ==== Subpackages: libxkbcommon-x11-0 libxkbcommon0 libxkbregistry0 - Add libxkbcommon-tools-bash-completions. ==== nvidia-open-driver-G06-signed ==== - create /run/udev/static_node-tags/uaccess/nvidia${devid} symlinks also during modprobing the nvidia module; this changes the issue of not having access to /dev/nvidia${devid}, when gfxcard has been replaced by a different gfx card after installing the driver ==== plocate ==== Version update (1.1.19 -> 1.1.22) - remove fallback for _fillupdir in spec file, should be supported everywhere now - update to version 1.1.22: * Revert the updatedb change in 1.1.21 that did not open pruned paths; it broke pruning of paths that were not at the root (e.g. /foo/bar, as opposed to /foo). Reported by David Caldwell - use systemd timer file provided by the project - update to version 1.1.21: * Improve interactions between pruning and bind mount detection logic * Pruned paths are now not opened, which can be useful in certain cases. Note that this does not (yet) apply to filesystems that are pruned due to type and not due to paths; they are still opened and then immediately closed again - update to version 1.1.20: * Fix updatedb writing incomplete .db files under Termux * Make the systemd timer run more consistently during the night * Add an (undocumented) flag --ignore-visibility to plocate, giving the equivalent of building the database with - -require-visibility no ==== rdesktop ==== - add patch fix_C99_issue_in_configure.patch to fix detection of statvfs64 - add patch fix_dashes_in_manpage.patch to prevent dashes from being utf8 mangled - add patch fix_segfault_in_utils_cert_handle_exception.patch - add patch fix_wrong_string_null_terminated.patch to null-terminate the correct variable - adjust patch rdesktop-fix_pkgconfig_check.patch so it can be applied with "-p1" - minor spec cleanup ==== selinux-policy ==== Version update (20240104 -> 20240116) Subpackages: selinux-policy-targeted - Update to version 20240116: * Fix gitolite homedir paths (bsc#1218826) ==== sushi ==== Subpackages: sushi-lang - Convert to source service for easier updating.

1 0

Re: Leap 16??? Why am I finding this out on Fosstodon??
by Dan Čermák 17 Jan '24

17 Jan '24

Eric Schirra <ecsos(a)opensuse.org> writes: > Am 16. Januar 2024 17:07:24 MEZ schrieb "Dan Čermák via openSUSE Factory" <factory(a)lists.opensuse.org>: >>Lew Wolfgang <wolfgang(a)sweet-haven.com> writes: >> >>> On 1/16/24 07:39, Dan Čermák via openSUSE Factory wrote: >>>> Eric Schirra<ecsos(a)opensuse.org> writes: >>>> >>>>> Am 16. Januar 2024 09:30:25 MEZ schrieb Simon Lees<sflees(a)suse.de>: >>>>>> >>>>>> On 1/16/24 14:43, Lew Wolfgang wrote: >>>>>>> On 1/15/24 20:03, Lew Wolfgang wrote: >>>>>>>> On 1/15/24 19:26, Simon Lees wrote: >>>>>>>>>> Will the anticipated upgrade from 15 to 16 support these use cases? Or, >>>>>>>>>> should we start looking for alternatives now? I really want to stay with >>>>>>>>>> openSUSE if at all possible, but I have a responsibility to my users to >>>>>>>>>> maintain continuity of operations going forward. Is it time for (shudder) >>>>>>>>>> RHEL or a BSD? BTW, before 1998 we used Sun Solaris and SunOS >>>>>>>>>> starting in 1986. >>>>>>>>> >>>>>>>>> ALP as it sits now is very different to ALP as it was first announced, alongside the read only transactional MicroOS style distro's that will be built from ALP, the successor to SLES 15 will also be built from ALP which is what Leap 16 will be built from. >>>>>>>>> >>>>>>>>> So containers won't be necessary, in many cases Upgrades from Leap 15 will be supported and you should expect an experience that's much closer to Leap 15 then that of MicroOS, although it won't be completely the same >>>>>>>> I know it's too soon to say, but are there guesses for how it will be different? >>>>>>>> BTW, our users use KDE., Thunderbird, and SmartCards. >>>>>>> I forgot to mention that we also use X11 display forwarding for remote displays. >>>>>>> As I understand things, Wayland didn't support this, does it now? Will X11 be in 16? >>>>>> I have a version of X11 building on top of the ALP code base and my plan is to submit it to 16, I also still have several usecases for it. From my research I haven't found a reason why it would be any harder to put KDE on top of Leap 16 then it is for Leap 15 (some decisions around lifecycle might actually make it easier). But at the end of the day that will be up to the KDE team. >>>>>> >>>>>> Similarly Thunderbird will be up to its current maintainer, but as a worst case you'd need to move to the flatpack if the maintainer decided it was too much effort. This announcement is new and much of the codebase isn't even there on the SUSE ALP side yet so its still somewhat hard for maintainers to gauge the amount of effort they will need to put in. >>>>> So it does. >>>>> Even Suse people have use cases that don't work with Alp. First reason not to use Leap anymore. >>>>> No more KDE under Leap. >>>>> Second reason not to be able to use Leap anymore. >>>>> No Thunderbird or Firefox under Leap. Only via flatpack? Third reason for no longer being able to use Leap. >>>>> Has anyone ever thought about how to install different software (Thunderbird or Firefox etc.) if you are in an internal company network so that you cannot access the Internet? >>>>> How can LeapAlp be used sensibly? >>>> This is all pure speculation. SLE 16 is still under development with >>>> many cornerstones still not being fully defined. There will most >>>> certainly be a Firefox in it (it is currently in the ALP codestream) and >>>> there might be a KDE in it, if someone sends it there from Factory. This >>>> is all not different from the way the current Leap works (or doesn't >>>> work, depending on how you see it). >>>> >>>> Please, let's not freak out over rumors. Leap 16 will probably come and >>>> it will probably be very similar to what you are used to. >>>> >>>> You might have to use a flatpak or two, but I have not yet given up hope >>>> that we'll be able to build these on OBS. >>> >>> Thanks to everyone who's chimed in on this. My take at this point is that >>> Leap 16 "may" be an acceptable successor to 15, but that it might not, >>> especially in a business environment. >> >>Please do note that Leap 16 will be based on SLE 16, a commercially >>supported distribution for the enterprise and business >>environment. Hence, I doubt that Leap 16 will be unsuitable in a >>business context. >> >>> >>> Given my situation it's prudent to hope for the best, but to prepare for >>> the worst. Looking for an acceptable replacement for 15 now makes >>> good business sense. I assume that 15 and 16 will be out simultaneously >>> and give us time to test 16 for suitability, but also have time to jump >>> ship if necessary. Note that my customer absolutely requires a actively >>> maintained operating system, so skating along on the last version of 15 >>> after EOL is not an option. >> >>If your business relies on Leap 15, then there is a very, very clear >>path forward: buy a SLES license. The upgrade from Leap to SLE works in >>place and you will receive support for a very long time [1]. Plus there will >>probably be a supported upgrade path to SLE 16. >> >>I definitely understand all your fears as an end user, because at the >>moment very little is clear. But as a business you can be assured that >>SUSE has a very high interest to keep you as a happy SLES user. > > This assumption also misses the mark. > SLES is the server version. You can get that. But I need the clients. So at most SLE desktop. Is that even still available? SLED is listed on the product lifecycle page, but I cannot tell you anything about its future (and neither about a potential SLED 16). I have no insight into that. > That's another cost that you can't get financed. And also far too expensive. So only Leap remains. The price is there, because it takes a lot of work to deliver and maintain a desktop on top of an enterprise distribution code base. Hence relying on a free & community provided distribution to provide the same is a business risk at best. I can see why people would get mad, when features that used to be there go away, but if there is no one who is willing to work on these features for free, then that's the way it is. I.e. if you want a Leap 16 with a desktop, think about contributing to the new Leap. Cheers, Dan -- Dan Čermák <dcermak(a)suse.com> Software Engineer Development tools SUSE Software Solutions Germany GmbH Frankenstr. 146 90461 Nürnberg Germany www.suse.com Geschäftsführer: Ivo Totev, Andrew McDonald, Werner Knoblich (HRB 36809, AG Nürnberg)

8 12

Re: Tumbleweed zypper dup has weird error
by Enrico 17 Jan '24

17 Jan '24

I believe the tonight rebuild of ffmpeg-6 on Packman build service has something to do with it. Try to check if the packman repo is listed with higher priority than repo-oss (`zypper lr -anupP`) , and then as Robert Webb mentioned. On 17 January 2024 07:43:30 GMT+01:00, factory-request(a)lists.opensuse.org wrote: >Send openSUSE Factory mailing list submissions to > factory(a)lists.opensuse.org > >To subscribe or unsubscribe via email, send a message with subject or >body 'help' to > factory-request(a)lists.opensuse.org > >You can reach the person managing the list at > factory-owner(a)lists.opensuse.org > >When replying, please edit your Subject line so it is more specific >than "Re: Contents of openSUSE Factory digest..."

1 0

New Tumbleweed snapshot 20240115 released!
by Dominique Leuenberger 16 Jan '24

16 Jan '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ImageMagick (7.1.1.25 -> 7.1.1.26) at-spi2-core attica-qt5 (5.113.0 -> 5.114.0) baloo5 (5.113.0 -> 5.114.0) bluez-qt (5.113.0 -> 5.114.0) breeze5-icons (5.113.0 -> 5.114.0) cronie e2fsprogs frameworkintegration (5.113.0 -> 5.114.0) kactivities-stats (5.113.0 -> 5.114.0) kactivities5 (5.113.0 -> 5.114.0) karchive (5.113.0 -> 5.114.0) kauth (5.113.0 -> 5.114.0) kbookmarks (5.113.0 -> 5.114.0) kcalendarcore (5.113.0 -> 5.114.0) kcmutils (5.113.0 -> 5.114.0) kcodecs (5.113.0 -> 5.114.0) kcompletion (5.113.0 -> 5.114.0) kconfig (5.113.0 -> 5.114.0) kconfigwidgets (5.113.0 -> 5.114.0) kcontacts (5.113.0 -> 5.114.0) kcoreaddons (5.113.0 -> 5.114.0) kcrash (5.113.0 -> 5.114.0) kdav (5.113.0 -> 5.114.0) kdbusaddons (5.113.0 -> 5.114.0) kdeclarative (5.113.0 -> 5.114.0) kded (5.113.0 -> 5.114.0) kdelibs4support (5.113.0 -> 5.114.0) kdesu (5.113.0 -> 5.114.0) kdnssd-framework (5.113.0 -> 5.114.0) kdoctools (5.113.0 -> 5.114.0) kfilemetadata5 (5.113.0 -> 5.114.0) kglobalaccel (5.113.0 -> 5.114.0) kguiaddons (5.113.0 -> 5.114.0) kholidays (5.113.0 -> 5.114.0) khtml (5.113.0 -> 5.114.0) ki18n (5.113.0 -> 5.114.0) kiconthemes (5.113.0 -> 5.114.0) kidletime (5.113.0 -> 5.114.0) kimageformats (5.113.0 -> 5.114.0) kinit (5.113.0 -> 5.114.0) kio (5.113.0 -> 5.114.0) kirigami2 (5.113.0 -> 5.114.0) kitemmodels (5.113.0 -> 5.114.0) kitemviews (5.113.0 -> 5.114.0) kjobwidgets (5.113.0 -> 5.114.0) kjs (5.113.0 -> 5.114.0) knewstuff (5.113.0 -> 5.114.0) knotifications (5.113.0 -> 5.114.0) knotifyconfig (5.113.0 -> 5.114.0) kpackage (5.113.0 -> 5.114.0) kparts (5.113.0 -> 5.114.0) kpeople5 (5.113.0 -> 5.114.0) kplotting (5.113.0 -> 5.114.0) kpty (5.113.0 -> 5.114.0) kquickcharts (5.113.0 -> 5.114.0) kross (5.113.0 -> 5.114.0) krunner (5.113.0 -> 5.114.0) kservice (5.113.0 -> 5.114.0) ktexteditor (5.113.0 -> 5.114.0) ktextwidgets (5.113.0 -> 5.114.0) kunitconversion (5.113.0 -> 5.114.0) kwallet (5.113.0 -> 5.114.0) kwayland (5.113.0 -> 5.114.0) kwidgetsaddons (5.113.0 -> 5.114.0) kwindowsystem (5.113.0 -> 5.114.0) kxmlgui (5.113.0 -> 5.114.0) libKF5ModemManagerQt (5.113.0 -> 5.114.0) libKF5NetworkManagerQt (5.113.0 -> 5.114.0) libdrm (2.4.119 -> 2.4.120) libinput (1.24.0 -> 1.25.0) libstorage-ng (4.5.172 -> 4.5.173) libuv open-lldp (1.1+77.75e83b6fb98e -> 1.1+106.74c0600a8692) plasma-framework (5.113.0 -> 5.114.0) prison-qt5 (5.113.0 -> 5.114.0) purpose (5.113.0 -> 5.114.0) python-authheaders (0.15.3 -> 0.16.0) qqc2-desktop-style (5.113.0 -> 5.114.0) solid (5.113.0 -> 5.114.0) sonnet (5.113.0 -> 5.114.0) speech-dispatcher syndication (5.113.0 -> 5.114.0) syntax-highlighting (5.113.0 -> 5.114.0) texlive threadweaver (5.113.0 -> 5.114.0) tpm2-0-tss vte xfce4-docklike-plugin (0.4.1 -> 0.4.2) xfce4-notes-plugin (1.10.0 -> 1.11.0) yast2-trans (84.87.20240105.ae431f155e -> 84.87.20240112.f631673f01) zlib-ng-compat (2.1.5 -> 2.1.6) === Details === ==== ImageMagick ==== Version update (7.1.1.25 -> 7.1.1.26) Subpackages: ImageMagick-config-7-SUSE ImageMagick-extra libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - version update to 7.1.1.26 https://github.com/ImageMagick/Website/blob/main/ChangeLog.md ==== at-spi2-core ==== Subpackages: at-spi2-core-lang libatk-1_0-0 libatk-bridge-2_0-0 libatspi0 typelib-1_0-Atk-1_0 typelib-1_0-Atspi-2_0 - Provide and obsolete more packages from old atk and at-spi2-atk: atk-devel, at-spi2-atk-devel and at-spi2-atk-common. ==== attica-qt5 ==== Version update (5.113.0 -> 5.114.0) Subpackages: libKF5Attica5 - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== baloo5 ==== Version update (5.113.0 -> 5.114.0) Subpackages: baloo5-file baloo5-file-lang baloo5-imports baloo5-kioslaves baloo5-kioslaves-lang baloo5-tools baloo5-tools-lang libKF5Baloo5 libKF5BalooEngine5 libKF5BalooEngine5-lang - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - Changes since 5.113.0: * [IndexCleaner] Remove no-op recursion over includedFolders * [ExtractorProcess] Remove unused members * [TimeEstimator] Cleanup, remove QObject depency * Use forward declaration for Baloo::Database * Remove inacurate mimetype check in xattrindexer and indexcleaner ==== bluez-qt ==== Version update (5.113.0 -> 5.114.0) Subpackages: bluez-qt-imports bluez-qt-udev libKF5BluezQt6 - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== breeze5-icons ==== Version update (5.113.0 -> 5.114.0) - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== cronie ==== Subpackages: cron - Fix anacron not working when /etc/default/anacron does not exist, fixes bsc#1218377 * test-for-etc-default-anacron.patch ==== e2fsprogs ==== Subpackages: e2fsprogs-scrub libcom_err2 libcom_err2-32bit libext2fs2 - e2fsck-Suppress-orphan-file-is-clean-message-in-preen.patch: e2fsck: Suppress "orphan file is clean" message in preen mode (bsc#1218747) ==== frameworkintegration ==== Version update (5.113.0 -> 5.114.0) Subpackages: frameworkintegration-plugin libKF5Style5 - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - Changes since 5.113.0: ==== kactivities-stats ==== Version update (5.113.0 -> 5.114.0) - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== kactivities5 ==== Version update (5.113.0 -> 5.114.0) Subpackages: kactivities5-imports libKF5Activities5 - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - Changes since 5.113.0: * Drop unused KF5WindowSystem from cli ==== karchive ==== Version update (5.113.0 -> 5.114.0) Subpackages: libKF5Archive5 libKF5Archive5-lang - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== kauth ==== Version update (5.113.0 -> 5.114.0) Subpackages: libKF5Auth5 libKF5Auth5-lang libKF5AuthCore5 - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== kbookmarks ==== Version update (5.113.0 -> 5.114.0) Subpackages: libKF5Bookmarks5 libKF5Bookmarks5-lang - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== kcalendarcore ==== Version update (5.113.0 -> 5.114.0) - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== kcmutils ==== Version update (5.113.0 -> 5.114.0) Subpackages: kcmutils-imports libKF5KCMUtils5 libKF5KCMUtils5-lang libKF5KCMUtilsCore5 - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== kcodecs ==== Version update (5.113.0 -> 5.114.0) Subpackages: libKF5Codecs5 libKF5Codecs5-lang - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - Changes since 5.113.0: * KEmailAddress: Add autotests for improved whitespace trimming * KEmailAddress: Only trim surrounding whitespace between E-Mail addresses instead of also replacing all whitespace within E-Mail address names with a single ASCII space ==== kcompletion ==== Version update (5.113.0 -> 5.114.0) Subpackages: libKF5Completion5 libKF5Completion5-lang - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== kconfig ==== Version update (5.113.0 -> 5.114.0) Subpackages: kconf_update5 libKF5ConfigCore5 libKF5ConfigCore5-lang libKF5ConfigGui5 libKF5ConfigQml5 - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== kconfigwidgets ==== Version update (5.113.0 -> 5.114.0) Subpackages: libKF5ConfigWidgets5 libKF5ConfigWidgets5-lang - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== kcontacts ==== Version update (5.113.0 -> 5.114.0) Subpackages: kcontacts-lang libKF5Contacts5 - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== kcoreaddons ==== Version update (5.113.0 -> 5.114.0) Subpackages: kcoreaddons-lang libKF5CoreAddons5 - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - Changes since 5.113.0: * Fix license text loading on Android ==== kcrash ==== Version update (5.113.0 -> 5.114.0) - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== kdav ==== Version update (5.113.0 -> 5.114.0) Subpackages: kdav-lang libKF5DAV5 - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== kdbusaddons ==== Version update (5.113.0 -> 5.114.0) Subpackages: kdbusaddons-tools libKF5DBusAddons5 libKF5DBusAddons5-lang - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== kdeclarative ==== Version update (5.113.0 -> 5.114.0) Subpackages: kdeclarative-components libKF5CalendarEvents5 libKF5Declarative5 libKF5Declarative5-lang libKF5QuickAddons5 - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== kded ==== Version update (5.113.0 -> 5.114.0) - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== kdelibs4support ==== Version update (5.113.0 -> 5.114.0) Subpackages: kdelibs4support-lang libKF5KDELibs4Support5 - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== kdesu ==== Version update (5.113.0 -> 5.114.0) Subpackages: libKF5Su5 libKF5Su5-lang - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== kdnssd-framework ==== Version update (5.113.0 -> 5.114.0) Subpackages: libKF5DNSSD5 libKF5DNSSD5-lang - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== kdoctools ==== Version update (5.113.0 -> 5.114.0) Subpackages: kdoctools-lang libKF5DocTools5 - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== kfilemetadata5 ==== Version update (5.113.0 -> 5.114.0) Subpackages: kfilemetadata5-lang - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== kglobalaccel ==== Version update (5.113.0 -> 5.114.0) Subpackages: kglobalaccel5 libKF5GlobalAccel5 libKF5GlobalAccel5-lang libKF5GlobalAccelPrivate5 - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== kguiaddons ==== Version update (5.113.0 -> 5.114.0) Subpackages: libKF5GuiAddons5 - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== kholidays ==== Version update (5.113.0 -> 5.114.0) Subpackages: libKF5Holidays5 libKF5Holidays5-lang - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - Changes since 5.113.0: * Introduce holidays observed in Kenya. ==== khtml ==== Version update (5.113.0 -> 5.114.0) Subpackages: libKF5KHtml5 libKF5KHtml5-lang - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== ki18n ==== Version update (5.113.0 -> 5.114.0) Subpackages: libKF5I18n5 libKF5I18n5-lang - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== kiconthemes ==== Version update (5.113.0 -> 5.114.0) Subpackages: libKF5IconThemes5 libKF5IconThemes5-lang - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== kidletime ==== Version update (5.113.0 -> 5.114.0) - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== kimageformats ==== Version update (5.113.0 -> 5.114.0) - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - Changes since 5.113.0: * avif: new quality settings * Update CI template * HEIF plug-in extended to support HEJ2 format ==== kinit ==== Version update (5.113.0 -> 5.114.0) Subpackages: kinit-lang - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== kio ==== Version update (5.113.0 -> 5.114.0) Subpackages: kio-core kio-lang - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - Changes since 5.113.0: * kpropertiesdialog: don't trip over malformed Exec (kde#465290) * WidgetsAskUserActionHandler: fix backport (kde#448532) * WidgetsAskUserActionHandler: Use QPointer to check the validity of parent widgets (kde#448532) ==== kirigami2 ==== Version update (5.113.0 -> 5.114.0) Subpackages: kirigami2-lang libKF5Kirigami2-5 - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - Changes since 5.113.0: * Make drawer actions accessible ==== kitemmodels ==== Version update (5.113.0 -> 5.114.0) Subpackages: kitemmodels-imports libKF5ItemModels5 - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== kitemviews ==== Version update (5.113.0 -> 5.114.0) Subpackages: libKF5ItemViews5 libKF5ItemViews5-lang - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== kjobwidgets ==== Version update (5.113.0 -> 5.114.0) Subpackages: libKF5JobWidgets5 libKF5JobWidgets5-lang - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - Changes since 5.113.0: * KUiServerV2JobTracker: prevent potenial use-after-free ==== kjs ==== Version update (5.113.0 -> 5.114.0) - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== knewstuff ==== Version update (5.113.0 -> 5.114.0) Subpackages: knewstuff-imports libKF5NewStuff5 libKF5NewStuff5-lang libKF5NewStuffCore5 libKF5NewStuffWidgets5 - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== knotifications ==== Version update (5.113.0 -> 5.114.0) Subpackages: libKF5Notifications5 libKF5Notifications5-lang - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== knotifyconfig ==== Version update (5.113.0 -> 5.114.0) Subpackages: libKF5NotifyConfig5 libKF5NotifyConfig5-lang - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== kpackage ==== Version update (5.113.0 -> 5.114.0) Subpackages: kpackage-lang - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== kparts ==== Version update (5.113.0 -> 5.114.0) Subpackages: libKF5Parts5 libKF5Parts5-lang - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== kpeople5 ==== Version update (5.113.0 -> 5.114.0) Subpackages: kpeople5-lang - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== kplotting ==== Version update (5.113.0 -> 5.114.0) - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== kpty ==== Version update (5.113.0 -> 5.114.0) Subpackages: libKF5Pty5 libKF5Pty5-lang - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== kquickcharts ==== Version update (5.113.0 -> 5.114.0) - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== kross ==== Version update (5.113.0 -> 5.114.0) Subpackages: kross-lang - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== krunner ==== Version update (5.113.0 -> 5.114.0) - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - Changes since 5.113.0: * DBusRunner: Use /runner as default for X-Plasma-DBusRunner-Path property ==== kservice ==== Version update (5.113.0 -> 5.114.0) Subpackages: kservice-lang - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== ktexteditor ==== Version update (5.113.0 -> 5.114.0) Subpackages: ktexteditor-lang - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== ktextwidgets ==== Version update (5.113.0 -> 5.114.0) Subpackages: libKF5TextWidgets5 libKF5TextWidgets5-lang - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== kunitconversion ==== Version update (5.113.0 -> 5.114.0) Subpackages: libKF5UnitConversion5 libKF5UnitConversion5-lang - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== kwallet ==== Version update (5.113.0 -> 5.114.0) Subpackages: kwallet-tools kwallet-tools-lang kwalletd5 kwalletd5-lang libKF5Wallet5 libkwalletbackend5-5 - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== kwayland ==== Version update (5.113.0 -> 5.114.0) - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== kwidgetsaddons ==== Version update (5.113.0 -> 5.114.0) Subpackages: libKF5WidgetsAddons5 libKF5WidgetsAddons5-lang - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== kwindowsystem ==== Version update (5.113.0 -> 5.114.0) Subpackages: libKF5WindowSystem5 libKF5WindowSystem5-lang - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== kxmlgui ==== Version update (5.113.0 -> 5.114.0) Subpackages: libKF5XmlGui5 libKF5XmlGui5-lang - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== libKF5ModemManagerQt ==== Version update (5.113.0 -> 5.114.0) - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== libKF5NetworkManagerQt ==== Version update (5.113.0 -> 5.114.0) - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== libdrm ==== Version update (2.4.119 -> 2.4.120) Subpackages: libdrm2 libdrm_amdgpu1 libdrm_intel1 libdrm_nouveau2 libdrm_radeon1 - update to 2.4.120 * radeon: fix missing stencil_tile_mode initialisation in the linear/fallback case * amdgpu: fix use-after-free * Sync headers with drm-next - adjusted * n_libdrm-drop-valgrind-dep-generic.patch * n_libdrm-drop-valgrind-dep-intel.patch - adjusted n_libdrm-drop-valgrind-dep-generic.patch, n_libdrm-drop-valgrind-dep-intel.patch to fix build ==== libinput ==== Version update (1.24.0 -> 1.25.0) Subpackages: libinput-udev libinput10 - Update to release 1.25 * Change how left-handed settings are handled for tablets: If libwacom does not contain a definition for a tablet yet, libinput defaults to enabling a left-handed setting. * Quirks for laptops from Dell, Google, Graviton, HP, HUAWEI, Lenovo and Razer, gadgets like the RollerMouse Pro3 and virtual machines like GNOME Boxes, VirtualBox or Virtual Machine Manager are included. ==== libstorage-ng ==== Version update (4.5.172 -> 4.5.173) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - Translated using Weblate (Russian) (bsc#1149754) - 4.5.173 ==== libuv ==== - add ppc64-disable-liburing.patch (bsc#1218365) ==== open-lldp ==== Version update (1.1+77.75e83b6fb98e -> 1.1+106.74c0600a8692) Subpackages: liblldp_clif1 - Update to version v1.1+106.74c0600a8692 (from upstream/branch-1.1): * lldpad: dcbx: prevent null dereference in dcbx_free_data * lldpad: ieee8023: reorder disabling pMAC and disabling MM TX * uapi: Provide a copy of const.h * dcbx: Fix use-after-free * dcbx: Fix NULL pointer dereference * ChangeLog: mention Additional Ethernet Capabilities TLV * lldptool: add man page for Additional Ethernet Capabilities TLV * lldptool: add CLI interface for Additional Ethernet Capabilities TLV * lldpad: ieee8023: allow changing the addFragSize advertisement * lldpad: ieee8023: add Additional Ethernet Capabilities TLV logic * lldpad: ieee8023: make ieee8023_data() return a pointer to ieee8023_user_data * lldpad: ethtool netlink accessors for MAC merge layer * lldpad: ieee8023: add basic rchange procedure * uapi: copy ethtool definitions for MAC Merge layer from Linux * uapi: update linux/netlink.h copy * uapi: import ethtool kernel headers from net-next * dcbx: Fix leak when receiving legacy TLVs with mismatched mode * lldp: Reject frames with duplicate TLVs * dcbx: Free manifest in rchange callback * dcbx: Avoid memory leak if ifup is called twice * ctrl_iface: Fix a memory leak in ctrl_iface_deinit * lldp: Avoid sending uninitialized data * lldptool: fix null pointer deference ==== plasma-framework ==== Version update (5.113.0 -> 5.114.0) Subpackages: libKF5Plasma5 plasma-framework-components plasma-framework-desktoptheme plasma-framework-lang - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - Changes since 5.113.0: * [CI] Fix pipeline include ==== prison-qt5 ==== Version update (5.113.0 -> 5.114.0) Subpackages: libKF5Prison5 prison-qt5-imports - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== purpose ==== Version update (5.113.0 -> 5.114.0) Subpackages: libKF5Purpose5 libKF5PurposeWidgets5 purpose-lang - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - Changes since 5.113.0: * Adapt to KAccounts API change ==== python-authheaders ==== Version update (0.15.3 -> 0.16.0) - Update to version 0.16.0 * Switch from pkg_resources resource_filename to importlib_resources * Add initial doctests for dmarc_lookup.py * Correctly strip trailing backslash in parsed DMARC record components * Handle DMARC records containing empty quoted values (#26) * Add dmarc_lookup.DMARCException and raise it for missing tag/values (#27) * Catch DMARCException error and return DMARC permerror result (#27) * Set DMARC result to permerror if From domain cannot be extracted (#25) * Use dns.resolver.resolve instead of dns.resolver.query due to deprecation * Update PSL from upstream * Add new option for authenticate_message, dmarcbis to enable DMARC policy * discovery and alignment per draft-ietf-dmarc-dmarcbis (default is False) - Removed authheaders-importlib-resources.patch ==== qqc2-desktop-style ==== Version update (5.113.0 -> 5.114.0) - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== solid ==== Version update (5.113.0 -> 5.114.0) Subpackages: libKF5Solid5 libKF5Solid5-lang solid-imports solid-tools - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== sonnet ==== Version update (5.113.0 -> 5.114.0) Subpackages: libKF5SonnetCore5 libKF5SonnetCore5-lang libKF5SonnetUi5 sonnet-imports - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== speech-dispatcher ==== Subpackages: libspeechd2 python3-speechd - Have speech-dispatcher-module espeak supplement libespeak-ng1, rather than espeak-ng. The latter provides a binary which is not used or needed and that might not be installed. ==== syndication ==== Version update (5.113.0 -> 5.114.0) - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== syntax-highlighting ==== Version update (5.113.0 -> 5.114.0) Subpackages: libKF5SyntaxHighlighting5 libKF5SyntaxHighlighting5-lang syntax-highlighting-imports - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== texlive ==== Subpackages: libkpathsea6 libsynctex2 - Fix wrong sys link target name for context.lua (Jianhua Lu) - Use gzip -n9 for bit-reproducible man-pages (Bernhard Wiedemann) - Re-run spec file generator to include the changes above ==== threadweaver ==== Version update (5.113.0 -> 5.114.0) - Update to 5.114.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.114.0 - No code change since 5.113.0 ==== tpm2-0-tss ==== Subpackages: libtss2-esys0 libtss2-mu0 libtss2-rc0 libtss2-sys1 libtss2-tcti-device0 libtss2-tctildr0 - Fix tmpfiles %ghost file names - Move tmpfiles config to different package: * tmpfiles_create was being called with bad input (version ?) * it avoids breaking SLPP for libtss2-fapi1 (hence the prior warning in spec) - tss sysusers requires should be pre not post ==== vte ==== Subpackages: libvte-2_91-0 typelib-1_0-Vte-2_91 vte-lang - Provide and Obsolete old typelib-1_0-Vte-2.91 package whose %{_binver} used the same exact value as %{_apiver}. ==== xfce4-docklike-plugin ==== Version update (0.4.1 -> 0.4.2) Subpackages: xfce4-docklike-plugin-lang - Update to version 0.4.2 * Wnck: Add missing sanity check * Settings: Use different colors for active and inactive indicators * Use FDO compliant icon name * Fix blurry icons/thumbnails when UI scale > 1 * GroupMenu: Make sure the window is the right size for each popup * Group: Stop timeouts in destructor * Fix pending source when GroupMenu is destroyed * Settings: Bound icon sizes * SettingsDialog: Fix deprecated icon names * Remove unused project files * Remove contrib directory * GroupMenu: Re-popup if windows are added/removed when shown * Update preview widgets on "showPreviews" setting change * Helpers: Always stop timeout before starting a new one * Wnck: Always update unactivated window state * Group: Do not filter out skip-tasklist windows when activated * Group: Do not manually mark window as activated when activating group * Group: Update active state when adding windows * Group: Remove useless class member states * AppInfos: Use also app names for matching * Use g_debug for debug logs * Replace FALSE with false * Replace NULL with nullptr * Release data as much as possible on XfcePanelPlugin::free-data signal * Wnck: Do not check for active window in init * Fix remaining raw pointers not released * Manage group button lifetime in Group * Revert "Reset pointer when group button is destroyed" * Wnck: Use std::shared_ptr to manage memory allocation of GroupWindows * Dock: Use std::shared_ptr to manage memory allocation of Groups * AppInfos: Use std::shared_ptr to manage memory allocation * AppInfos: Wrap raw pointers into std::unique_ptr * GroupMenuItem: Fix crash when closing window with preview enabled * Revert "group: Fix crash when middle-clicking an item with preview enabled" * Store pinned apps as ids instead of paths * Wnck: Fix memory leaks * Theme: Fix memory leaks * SettingsDialog: Fix memory leaks * Settings: Fix memory leaks * Helpers: Fix memory leaks * GroupMenuItem: Fix memory leaks * Group: Fix memory leaks * Dock: Fix memory leaks * Fix previous commit * Appinfos: Fix some memory leaks * Update TODO * AppInfos: Honor XDG_DATA_HOME also when editing item * AppInfos: Properly honor XDG base dir spec * group: Detach menu from button and destroy when hidden (Fixes #20) * Fix cplusplus.StringChecker warning from scan-build 16.0.6 * Use glib functions for memory allocation * build: Fix -Wunused-function warnings * build: Fix -Wdangling-else warnings * build: Fix -Wsequence-point warnings * build: Fix -Wsign-compare warnings * build: Fix -Wmaybe-uninitialized warnings * build: Fix -Wshadow warnings * build: Fix -Wmissing-declarations warnings * group-menu-item: Refresh preview less often * group: Fix missing dnd icon * group: Fix crash when middle-clicking an item with preview enabled * Reset pointer when group button is destroyed * helpers: Reset source id when removed * app-infos: Get translated app name (Fixes #67) * Fix help button icon to be same as other plugins * Added middle mouse button do nothing option * Added closedir call to prevent too many open files error (Fixes #54) * Fix previous commit * Fix copyright info * Translation Updates ==== xfce4-notes-plugin ==== Version update (1.10.0 -> 1.11.0) Subpackages: xfce4-notes-plugin-lang - Update to version 1.11.0 * Update copyright year * Make default notes names in singular form * Start numbering the notes with 1 * Rework Xnp.Window.insert_note() * Use separate icon for logo * Make menu icon themed * Notes path change: handle case when both apps are running * Rework Xnp.Application.update_notes_path() * Don't ask when deleting a group with one blank note * Fix notebook tab prelight * Focus previous notes window when hiding a window * Rework Xnp.Application.show_hide_notes() * Avoid focus loss when removing a group * Avoid focus loss for note windows * Store "skip-taskbar-hint" property in Xnp.Application * Rewrite links processing code * Switch to previous page after deleting current note * Merge delete_note with delete_current_note * Use separate icon names for panel, tray and application * Switch to rDNS icon naming scheme * Fix segfault when pressing Ctrl+W on empty group * Use default values for externally created groups * Rework notes window switching processing * Handle empty group window titles * Add notes path setting * Slightly change the design of settings dialog * Fix Xfconf "notes-path" property handling * Fix background color of title bar when renaming a group * Reduce frequency of saving windows configuration * Undo/redo: make cursor position behavior natural * Fix the logic of "move-cursor" signal detection * Remember windows focus order * Rework access to Xnp.Application.window_list from Xnp.Window * Escape window title for markup parser * Save windows configuration before group reloading * Make transition to new version seemless * Update tags immediately after loading a note * Slightly improve undo/redo processing * Simplify code * Allow note tabs to be moved between groups * New method: Xnp.Window.get_tab_evbox() * New method: Xnp.Window.get_note() * New property: Xnp.Window.current_note * Rework Xnp.Window.n_pages * Save windows configuration when in system tray mode * Rework application termination sequence * Simplify save_windows_configuration() * Prevent possible data loss when saving notes * Fix mouse cursor behavior after clicking on a link * Refuse to create/delete notes on file system errors * Handle errors when renaming a note * Report errors when creating/deleting notes * Select note before deletion request * Delete note with middle mouse click on tab * Handle errors when creating a group * Handle errors when deleting a group * Handle errors when renaming a group * Add error popup if note could not be saved * Save notes only when changed * Overwrite windows configuration only when changed * Save current note on page switching or focus loss * Don't overwrite notes on program start up * Add titles to dialog windows * Make title text color independent of gtk theme * Make title bar arrows respond to mouse scroll events * Replace mouse button numbers with constants * Set default icon name for application * Use pure gtk style when selecting "GTK+" color * Separate color css to a separate Gtk.CssProvider * Make titlebar customized * Simplify access to notebook pages * Rename note with double click on tab * Cleanup * Add icons to dialog windows * Fix notebook tab names for new notes * Don't change the title label sensitivity * Add a note about possibility of css customization * Allow resizing notes window from the top border * Change accelerators hexa values to symbolic names * Reset timeout_background when timer reaches end * Make 'GTK+' background color work * Bring back the choice of background color * Add support for ~/.config/gtk-3.0/gtk.css * Fix background color of disabled arrow * Get rid of ~/.config/xfce4/notes/xfce4-notes.css * Rename gtk-main.css -> gtk.css * Add support for system wide css customizations * Unite update_css() and update_style_context() * Move data files to $(datadir)/xfce4/notes * Derive hypertext link color from theme * Redraw main menu icon on mouse enter/leave events * Allow user to customize main menu icon * Add support for custom css * Replace 'Remove' with 'Quit' in application menu * Don't overwrite xfce4-notes.css without a need * Reload css instead of adding it over and over again * Move resource files to xfce4/notes subdirectory * Auto create config directory ... changelog too long, skipping 6 lines ... * Translation Updates ==== yast2-trans ==== Version update (84.87.20240105.ae431f155e -> 84.87.20240112.f631673f01) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20240112.f631673f01: * Translated using Weblate (Russian) * New POT for text domain 'packager'. * New POT for text domain 'users'. * New POT for text domain 'proxy'. * New POT for text domain 'nis'. * New POT for text domain 'network'. * New POT for text domain 'installation'. * New POT for text domain 'firewall'. ==== zlib-ng-compat ==== Version update (2.1.5 -> 2.1.6) - update to 2.1.6: * This release also improves on the functable implementation, and also moves its initialization to happen in deflateInit() and inflateInit(). We also have some optimizations for RVV and ARM. * Fix inflateCopy corruption caused by change in 2.1.4 #1628 * This is a regression caused by a change introduced in 2.1.4 * Initialize functable without TLS, using atomics #1609 * Initialize functable early, during DeflateInit and InflateInit #1613 * Add FAR macro to zlib-compat headers to improve compatibility * Improve performance of crc32_acle on 32-bit ARM #1397 * Add support for __attribute__((__target__(...))) to overcome limitations of -march=native #1620 * Remove tab character in ACLE uqsub16 assembly #1627 * Optimize adler32_fold_copy using RVV #1597 * Simplify AVX2 and AVX512 adler32_fold_copy by removing templates #1599 * Don't attempt ARMv6 detection on AARCH64 #1617 * Prevent tests writing into source directory #1604 * CMake: Fix clang-cl warnings #1591 * CMake: Export cmake target #1601 #1611 * CMake: Remove duplicate enable tests option #1610 * CMake: Fix reading version information from zlib.h.in #1614 * CMake: Check whether compiler supports -march=native or - mcpu=native #1618 * CMake: Always run compiler feature tests without LTO #1622 * CMake: Make sure uqsub16 check doesn't get optimized away with LTO #1619 * CMake: Update to GoogleTest 1.12.1 #1623 * Don't disable GoogleTest because of old CMake version #1623 [#1638] - update filelists

1 0

Re: Leap 16??? Why am I finding this out on Fosstodon??
by Eric Schirra 16 Jan '24

16 Jan '24

Am 16. Januar 2024 17:15:27 MEZ schrieb "Dan Čermák" <dcermak(a)suse.com>: >Hi Eric, > >Eric Schirra <ecsos(a)opensuse.org> writes: > >> Am 16. Januar 2024 16:39:39 MEZ schrieb "Dan Čermák via openSUSE Factory" <factory(a)lists.opensuse.org>: >>>Eric Schirra <ecsos(a)opensuse.org> writes: >>> >>>> Am 16. Januar 2024 09:30:25 MEZ schrieb Simon Lees <sflees(a)suse.de>: >>>>> >>>>> >>>>>On 1/16/24 14:43, Lew Wolfgang wrote: >>>>>> On 1/15/24 20:03, Lew Wolfgang wrote: >>>>>>> On 1/15/24 19:26, Simon Lees wrote: >>>>>>>>> Will the anticipated upgrade from 15 to 16 support these use cases? Or, >>>>>>>>> should we start looking for alternatives now? I really want to stay with >>>>>>>>> openSUSE if at all possible, but I have a responsibility to my users to >>>>>>>>> maintain continuity of operations going forward. Is it time for (shudder) >>>>>>>>> RHEL or a BSD? BTW, before 1998 we used Sun Solaris and SunOS >>>>>>>>> starting in 1986. >>>>>>>> >>>>>>>> >>>>>>>> ALP as it sits now is very different to ALP as it was first announced, alongside the read only transactional MicroOS style distro's that will be built from ALP, the successor to SLES 15 will also be built from ALP which is what Leap 16 will be built from. >>>>>>>> >>>>>>>> So containers won't be necessary, in many cases Upgrades from Leap 15 will be supported and you should expect an experience that's much closer to Leap 15 then that of MicroOS, although it won't be completely the same >>>>>>> >>>>>>> I know it's too soon to say, but are there guesses for how it will be different? >>>>>>> BTW, our users use KDE., Thunderbird, and SmartCards. >>>>>> >>>>>> I forgot to mention that we also use X11 display forwarding for remote displays. >>>>>> As I understand things, Wayland didn't support this, does it now? Will X11 be in 16? >>>>> >>>>>I have a version of X11 building on top of the ALP code base and my plan is to submit it to 16, I also still have several usecases for it. From my research I haven't found a reason why it would be any harder to put KDE on top of Leap 16 then it is for Leap 15 (some decisions around lifecycle might actually make it easier). But at the end of the day that will be up to the KDE team. >>>>> >>>>>Similarly Thunderbird will be up to its current maintainer, but as a worst case you'd need to move to the flatpack if the maintainer decided it was too much effort. This announcement is new and much of the codebase isn't even there on the SUSE ALP side yet so its still somewhat hard for maintainers to gauge the amount of effort they will need to put in. >>>> >>>> So it does. >>>> Even Suse people have use cases that don't work with Alp. First reason not to use Leap anymore. >>>> No more KDE under Leap. >>>> Second reason not to be able to use Leap anymore. >>>> No Thunderbird or Firefox under Leap. Only via flatpack? Third reason for no longer being able to use Leap. >>>> Has anyone ever thought about how to install different software (Thunderbird or Firefox etc.) if you are in an internal company network so that you cannot access the Internet? >>>> How can LeapAlp be used sensibly? >>> >>>This is all pure speculation. SLE 16 is still under development with >>>many cornerstones still not being fully defined. There will most >>>certainly be a Firefox in it (it is currently in the ALP codestream) and >>>there might be a KDE in it, if someone sends it there from Factory. This >>>is all not different from the way the current Leap works (or doesn't >>>work, depending on how you see it). >>> >>>Please, let's not freak out over rumors. Leap 16 will probably come and >>>it will probably be very similar to what you are used to. >>> >>>You might have to use a flatpak or two, but I have not yet given up hope >>>that we'll be able to build these on OBS. >> >> Why speculation? > >Because everything involving the Leap 15 successor is speculation at >this point. Nothing is clear and defined yet, except for a few very >basic things, like a non-immutable distro with next to no reliance on >containers or flatpaks. Or that it will be based on SLE 16. That's more >or less all that is known at the moment. > >> Isn't that how it is in aeon? Kalpa is still Alpha. And if I understand correctly, one person is working on it. >> Isn't it the case in aeon that it's only KDE? >> And in Aeon I have to install Firefox via flatpack? > >Aeon and Kalpa are based on Tumbleweed and are build specifically build >with flatpaks & immutable root in mind. Their existence has no >implication on Leap 16 or ALP. > >I see how you might come to this conclusion, as the official >communication around ALP has been spotty at best and confusing at >worst. But at the moment it looks like there will be a very traditional >distro based on ALP (with no flatpaks and no containers, unless you want >those), called SLE 16. And Leap 16 will be based on SLE 16. So kinda >like things are at the moment. That sounds better. Let's hope for the best. >> Every flatpack is one too many. >> How am I supposed to install or update it in an internal closed network without internet access? > >That is a problem I have indeed not considered. Thanks for bringing that >up! Gladly done. :-) >P.S.: you did not send your reply to the mailing list, hence mine wasn't > sent to the list either. However, feel free to reply to the full > list, this is not confidential or private information. Oh. That was an oversight. It's just nothing on a smartphone. :-) Regards Eric

1 0

Leap 16??? Why am I finding this out on Fosstodon??
by Fritz Hudnut 16 Jan '24

16 Jan '24

et al: Just saw on Fosstodon that there are plans for Leap 16 and/or an in between 15.7 to carry on the tradition of Leap?? But no apparent mention of it here?? I am glad to hear that, I do like Leap 15.6, even though it doesn't revive itself from suspend, it has fared better than my former Slow Roll system, which disappeared in a puff of cyber smoke . . . . I will be looking forward to the continuation of the Leap lineage . . . long live Leap for many iterations to come.

15 27

Slowroll cannot install wine
by Larry Len Rainey 16 Jan '24

16 Jan '24

2 2

Webcam no longer found
by Christian Boltz 15 Jan '24

15 Jan '24

Hello, I'm not sure if this is a regression in Tumbleweed or a hardware failure, therefore I'll ask before opening a bug: The webcam in my laptop no longer works, and also doesn't appear in the boot log anymore. The last time I used the camera was a week ago (2024-01-09), but in the log it appeared until 2024-01-11 [1]: Jan 11 19:35:10 tux kernel: usb 3-8: new high-speed USB device number 4 using xhci_hcd Jan 11 19:35:11 tux kernel: usb 3-8: New USB device found, idVendor=5986, idProduct=055c, bcdDevice= 6.05 Jan 11 19:35:11 tux kernel: usb 3-8: New USB device strings: Mfr=3, Product=1, SerialNumber=2 Jan 11 19:35:11 tux kernel: usb 3-8: Product: BisonCam, NB Pro Jan 11 19:35:11 tux kernel: usb 3-8: Manufacturer: Generic Jan 11 19:35:11 tux kernel: usb 3-8: SerialNumber: 200901010001 [...] Jan 11 19:35:19 tux kernel: usb 3-8: Found UVC 1.00 device BisonCam, NB Pro (5986:055c) Am I the only one who "lost" the camera? Regards, Christian Boltz [1] Tumbleweed snapshot numbers related to these dates on request - I run zypper dup nearly daily. -- Security does only work as long as it does not get into the way of whatever fills the fridge. [Kristian Köhntopp in https://plus.google.com/+KristianKöhntopp/posts/PY9GZduTsrd]

6 9

New Tumbleweed snapshot 20240114 released!
by Dominique Leuenberger 15 Jan '24

15 Jan '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MozillaFirefox (121.0 -> 121.0.1) kbd (2.6.3 -> 2.6.4) man-pages python-Jinja2 (3.1.2 -> 3.1.3) systemd (254.5 -> 254.8) xdg-desktop-portal === Details === ==== MozillaFirefox ==== Version update (121.0 -> 121.0.1) Subpackages: MozillaFirefox-translations-common - Mozilla Firefox 121.0.1 * Fixed unexpected line wrapping in some CJK contexts caused by changes in ideographic space handling. bmo#1870973) * Fixed a hang when loading sites containing column-based layouts under some circumstances. bmo#1867784) * Fixed missing rounded corners for videos playing over another video. bmo#1869994) * Fixed Firefox not closing properly and other applications being unable to use a USB security key after being previously used during a Firefox session. bmo#1863135) ==== kbd ==== Version update (2.6.3 -> 2.6.4) Subpackages: kbd-legacy - Update to version 2.6.4: - Use AX_ADD_FORTIFY_SOURCE to avoid redefining _FORTIFY_SOURCE - Do not look up include files in the current working directory ==== man-pages ==== - Do not remove bpf-helpers.7, as this is not provided by the bpftool package any more. ==== python-Jinja2 ==== Version update (3.1.2 -> 3.1.3) - update to 3.1.3 (bsc#1218722, CVE-2024-22195): * Fix compiler error when checking if required blocks in parent templates are xmlattr filter does not allow keys with spaces. * Make error messages stemming from invalid nesting of {% trans %} blocks more helpful. :pr:`1916` ==== systemd ==== Version update (254.5 -> 254.8) Subpackages: libsystemd0 libsystemd0-32bit libudev1 systemd-32bit systemd-boot systemd-container systemd-coredump systemd-lang udev - Add 5001-Revert-udev-update-devlink-with-the-newer-device-nod.patch 5002-Revert-udev-revert-workarounds-for-issues-caused-by-.patch It seems that systemd upstream has a dubious way to fix broken code these days... let's revert these hacks until a final decision is taken to solve https://github.com/systemd/systemd/issues/28141. See also https://github.com/systemd/systemd/pull/30075. - Import commit 67a5ac1043417d900bf417a884372ae14a96ef69 (merge of v254.8) For a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/071ac409a0564863657d8f8a5a35e6a… - udev(-mini)?: ensure %_modulesloaddir exists and is owned properly. Allows other packages to install modules without worry of the parent directory. We do not ensure /etc/modules-load.d exists in the -mini flavor, as that directory is not meant to be used by packages. ==== xdg-desktop-portal ==== Subpackages: xdg-desktop-portal-lang - Also own the packaging directory used by portals themselves

1 0

Fwd: Re: Leap 16??? Why am I finding this out on Fosstodon??
by Martin Schlander 15 Jan '24

15 Jan '24

Accidentally responed off-list. Darn phone. I guess these Fosstodon guys are referencining newso.o.o. https://news.opensuse.org/2024/01/15/clear-course-is-set-for-os-leap/ That bit of news doesn't clearly state at all that Leap 16 will not be useful for the usecase of the vast majority of existing Leap users. Unless I have misunderstood a lot of things. So this kind of confusion and false hope is probably to be expected. (sorry for top posting) > > Den Mandag den 15. januar 2024 skrev Knurpht-openSUSE: > > On maandag 15 januari 2024 18:51:59 CET Fritz Hudnut wrote: > > > et al: > > > > > > Just saw on Fosstodon > > > > Like "I read on the Internet": without a link it does not exist. So I will not > > relate to that content. > > > that there are plans for Leap 16 and/or an in between > > > 15.7 to carry on the tradition of Leap?? But no apparent mention of it > > > here?? > > > > Sure there are: "openSUSE Release Engineering meeting 10.06.2024" is the > > recent one. > > > I am glad to hear that, I do like Leap 15.6, even though it doesn't > > > revive itself from suspend, it has fared better than my former Slow Roll > > > system, which disappeared in a puff of cyber smoke . . . . > > > > Leap 15.6 is still in it's development phase, and is definitely not released > > yet. Did fosstodon say as well that it was? > > > > > > I will be looking forward to the continuation of the Leap lineage . . . long > > > live Leap for many iterations to come. > > And your hope is based on fosstodon "news" ? > > > > -- > > Gertjan Lettink a.k.a. Knurpht > > openSUSE Board > > openSUSE Forums Team > > > > -- > Sendt fra min Sailfish enhe -- Sendt fra min Sailfish enhed

1 0

New Tumbleweed snapshot 20240112 released!
by Dominique Leuenberger 14 Jan '24

14 Jan '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: container-selinux (2.222.0 -> 2.228.0) gcc13 (13.2.1+git8109 -> 13.2.1+git8205) health-checker (1.10 -> 1.10+git20240111.cb84209) jasper (4.1.1 -> 4.1.2) kernel-source (6.6.10 -> 6.6.11) libgedit-amtk libjcat libstorage-ng (4.5.171 -> 4.5.172) linux-glibc-devel (6.6 -> 6.7) microos-tools (2.21+git5 -> 2.21+git9) pcr-oracle pipewire (1.0.0 -> 1.0.1) python-gevent python-greenlet (3.0.2 -> 3.0.3) python-tornado6 python-urllib3 samba (4.19.2+git.324.fa0b54b91b -> 4.19.4+git.339.acf1ccaa020) selinux-policy (20231124 -> 20240104) zstd === Details === ==== container-selinux ==== Version update (2.222.0 -> 2.228.0) - Update to version 2.228: * Allow container domains to watch fifo_files * container_engine_t: improve for podman in kubernetes case * Allow spc_t to transition to install_t domain * Default to allowing containers to use dri devices * Allow access to BPF Filesystems * Fix kubernetes transition rule * Label kubensenter as well as kubenswrapper * Allow container domains to execute container_runtime_tmpfs_t files * Allow container domains to ptrace themselves * Allow container domains to use container_runtime_tmpfs_t as an entrypoint * Add boolean to allow containers to use dri devices * Give containers access to pod resources endpoint * Label kubenswrapper kubelet_exec_t ==== gcc13 ==== Version update (13.2.1+git8109 -> 13.2.1+git8205) Subpackages: cpp13 gcc13-locale libasan8 libatomic1 libgcc_s1 libgcc_s1-32bit libgccjit0 libgfortran5 libgomp1 libhwasan0 libitm1 liblsan0 libobjc4 libquadmath0 libstdc++6 libstdc++6-32bit libstdc++6-locale libstdc++6-pp libstdc++6-pp-32bit libtsan2 libubsan1 - Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205 ==== health-checker ==== Version update (1.10 -> 1.10+git20240111.cb84209) Subpackages: health-checker-plugins-MicroOS - Update to version 1.10+git20240111.cb84209: * Add missing rule for health-checker.service.8 * Don't generate html documentation * Fixing some typo's and improving the UX of the health-checker output * Fix a typo in README.md ==== jasper ==== Version update (4.1.1 -> 4.1.2) - Update to 4.1.2: * Fix invalid memory write bug (#367) (CVE-2023-51257). * Fix missing range check in the JPC encoder (#368). ==== kernel-source ==== Version update (6.6.10 -> 6.6.11) - keys, dns: Fix size check of V1 server-list header (git-fixes). - commit 05ae4ad - Linux 6.6.11 (bsc#1012628). - keys, dns: Fix missing size check of V1 server-list header (bsc#1012628). - ALSA: hda/tas2781: do not use regcache (bsc#1012628). - ALSA: hda/tas2781: move set_drv_data outside tasdevice_init (bsc#1012628). - ALSA: hda/tas2781: remove sound controls in unbind (bsc#1012628). - ALSA: hda/realtek: enable SND_PCI_QUIRK for hp pavilion 14-ec1xxx series (bsc#1012628). - ALSA: hda/realtek: fix mute/micmute LEDs for a HP ZBook (bsc#1012628). - ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP ProBook 440 G6 (bsc#1012628). - drm/amd/display: pbn_div need be updated for hotplug event (bsc#1012628). - mptcp: prevent tcp diag from closing listener subflows (bsc#1012628). - Revert "PCI/ASPM: Remove pcie_aspm_pm_state_change()" (bsc#1012628). - drm/mgag200: Fix gamma lut not initialized for G200ER, G200EV, G200SE (bsc#1012628). - cifs: cifs_chan_is_iface_active should be called with chan_lock held (bsc#1012628). - cifs: do not depend on release_iface for maintaining iface_list (bsc#1012628). - KVM: x86/pmu: fix masking logic for MSR_CORE_PERF_GLOBAL_CTRL (bsc#1012628). - accel/qaic: Fix GEM import path code (bsc#1012628). - accel/qaic: Implement quirk for SOC_HW_VERSION (bsc#1012628). - wifi: iwlwifi: pcie: don't synchronize IRQs from IRQ (bsc#1012628). - drm/bridge: parade-ps8640: Never store more than msg->size bytes in AUX xfer (bsc#1012628). - drm/bridge: ti-sn65dsi86: Never store more than msg->size bytes in AUX xfer (bsc#1012628). - drm/bridge: ps8640: Fix size mismatch warning w/ len (bsc#1012628). - netfilter: nf_tables: set transport offset from mac header for netdev/egress (bsc#1012628). - nfc: llcp_core: Hold a ref to llcp_local->dev when holding a ref to llcp_local (bsc#1012628). - octeontx2-af: Fix marking couple of structure as __packed (bsc#1012628). - drm/i915/dp: Fix passing the correct DPCD_REV for drm_dp_set_phy_test_pattern (bsc#1012628). - drm/i915/perf: Update handling of MMIO triggered reports (bsc#1012628). - ice: Fix link_down_on_close message (bsc#1012628). - ice: Shut down VSI with "link-down-on-close" enabled (bsc#1012628). - i40e: Fix filter input checks to prevent config with invalid values (bsc#1012628). - igc: Report VLAN EtherType matching back to user (bsc#1012628). - igc: Check VLAN TCI mask (bsc#1012628). - igc: Check VLAN EtherType mask (bsc#1012628). - ASoC: fsl_rpmsg: Fix error handler with pm_runtime_enable (bsc#1012628). - ASoC: mediatek: mt8186: fix AUD_PAD_TOP register and offset (bsc#1012628). - mlxbf_gige: fix receive packet race condition (bsc#1012628). - net: sched: em_text: fix possible memory leak in em_text_destroy() (bsc#1012628). - r8169: Fix PCI error on system resume (bsc#1012628). - net: Implement missing getsockopt(SO_TIMESTAMPING_NEW) (bsc#1012628). - selftests: bonding: do not set port down when adding to bond (bsc#1012628). - ARM: sun9i: smp: Fix array-index-out-of-bounds read in sunxi_mc_smp_init (bsc#1012628). - sfc: fix a double-free bug in efx_probe_filters (bsc#1012628). - net: bcmgenet: Fix FCS generation for fragmented skbuffs (bsc#1012628). - netfilter: nf_nat: fix action not being set for all ct states (bsc#1012628). - netfilter: nft_immediate: drop chain reference counter on error (bsc#1012628). - net: Save and restore msg_namelen in sock_sendmsg (bsc#1012628). - i40e: fix use-after-free in i40e_aqc_add_filters() (bsc#1012628). - ASoC: meson: g12a-toacodec: Validate written enum values (bsc#1012628). - ASoC: meson: g12a-tohdmitx: Validate written enum values (bsc#1012628). - ASoC: meson: g12a-toacodec: Fix event generation (bsc#1012628). - ASoC: meson: g12a-tohdmitx: Fix event generation for S/PDIF mux (bsc#1012628). - i40e: Restore VF MSI-X state during PCI reset (bsc#1012628). - igc: Fix hicredit calculation (bsc#1012628). - apparmor: Fix move_mount mediation by detecting if source is detached (bsc#1012628). - virtio_net: avoid data-races on dev->stats fields (bsc#1012628). - virtio_net: fix missing dma unmap for resize (bsc#1012628). - net/qla3xxx: fix potential memleak in ql_alloc_buffer_queues (bsc#1012628). - net/smc: fix invalid link access in dumping SMC-R connections (bsc#1012628). ... changelog too long, skipping 110 lines ... - commit f421cf4 ==== libgedit-amtk ==== Subpackages: libgedit-amtk-5-0 libgedit-amtk-5-lang typelib-1_0-Amtk-5 - Update spec file to conclicts the legacy amtk-devel, which shipped the same file Amtk-%{api_ver}.gir as libgedit-amtk does. ==== libjcat ==== - Do not install test files: pass -Dtest=false to meson instead of Dtest=true (aids with reproducible build, boo#1218715). - Add check section and run meson test. ==== libstorage-ng ==== Version update (4.5.171 -> 4.5.172) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#978 - added get_linux_partition_id() taking Arch parameter - make git ignore javascript in generated documentation - coding style - cleanup - 4.5.172 ==== linux-glibc-devel ==== Version update (6.6 -> 6.7) - Update to kernel headers 6.7 ==== microos-tools ==== Version update (2.21+git5 -> 2.21+git9) - Update to version 2.21+git9: * Add man-online command * Drop support for sle15 builds * Add OBS CI workflow ==== pcr-oracle ==== - Add fix_efi_measure.patch to fix the measurement of EFI binaries ==== pipewire ==== Version update (1.0.0 -> 1.0.1) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-jack pipewire-lang pipewire-libjack-0_3 pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Update to version 1.0.1: * Highlights - Work around the buggy ALSA backend in libcanberra by forcing the pulse backend in module-x11-bell. - Fix a race in the device info updates in pulse-server. - Fix timing and rate matching in ALSA sequencer. - Improve timing information in JACK and from the ALSA driver. - More small fixes and improvements. * PipeWire - Fix a build issue when examples where disabled. - Avoid some compiler warnings. - Avoid some bitfield data races. (#3706) * Modules - Bump the PTP driver priority. (#3217) - Support the previous "allowed" permission in the access module. - Fix filename leak in module-filter-chain. - Work around the buggy ALSA backend in libcanberra by forcing the pulse backend in module-x11-bell. (#3688) - Fix a race in the device info updates in pulse-server. - Fix compatibility in RAOP. (#3698) * SPA - Handle ALSA picth control errors correctly - Clamp buffer-frames correctly. (#3000) - Fix timing and rate matching in ALSA sequencer. (#3657) - Revert a commit that could result in current time in the future in the timing updates. - Improve adapter state checks. - Remove the timer from the ALSA pcm. - Fix timeout in freewheel driver. * Pulse-server - Also handle active ports for monitor sources. - Fix zeroconf-publish format properties. * JACK - Improve timing and transport calculations. - Handle -ENOENT from the core and don't error out. * GStreamer - Handle node port removal in the device provider. (#3708) - Improve error handling while connecting. - Fix dts_offset. ==== python-gevent ==== - Clean obsolete old python and old distribution directives * Only 15.5+ with the sle15 python module and Tumbleweed have the required Python 3.8+ * Drop fix-no-return-in-nonvoid-function.patch - Update test suite execution * Use -u-network flag to disable network tests * Add gevent-opensuse-nocolor-tests.patch -- Avoid colorization of test output in obs runners * Add gevent-fix-unittest-returncode-py312-c1.patch and gevent-fix-unittest-returncode-py312-c2.patch gh#gevent/gevent#2012 ==== python-greenlet ==== Version update (3.0.2 -> 3.0.3) - Update to 3.0.3 * Python 3.12: Restore the full ability to walk the stack of a suspended greenlet; previously only the innermost frame was exposed. See issue 388. Fix by Joshua Oreman in PR 393. - Disable building the docs: Now requires the furo theme, which is not available. ==== python-tornado6 ==== - Add patch openssl-3.2.patch gh#tornadoweb/tornado#3355 ==== python-urllib3 ==== - Add upstream patch openssl-3.2.patch, to fix tests with opennssl 3.2.0, gh#urllib3/urllib3#3271 ==== samba ==== Version update (4.19.2+git.324.fa0b54b91b -> 4.19.4+git.339.acf1ccaa020) Subpackages: libsamba-policy0-python3 samba-ad-dc-libs samba-client samba-client-32bit samba-client-libs samba-client-libs-32bit samba-gpupdate samba-ldb-ldap samba-libs samba-libs-python3 samba-python3 samba-winbind samba-winbind-libs samba-winbind-libs-32bit - Remove -x from bash shebang update-apparmor-samba-profile; (bsc#1218431). - Update to 4.19.4 * net changesecretpw cannot set the machine account password if secrets.tdb is empty; (bso#13577). * For generating doc, take, if defined, env XML_CATALOG_FILES; (bso#15540). * Trivial C typo in nsswitch/winbind_nss_netbsd.c; (bso#15541). * vfs_linux_xfs is incorrectly named; (bso#15542). * systemd stumbled over copyright-message at smbd startup; (bso#15377). * Following intermediate abolute share-local symlinks is broken; (bso#15505). * ctdb RELEASE_IP causes a crash in release_ip if a connection to a non-public address disconnects first; (bso#15523). * shadow_copy2 broken when current fileset's directories are removed; (bso#15544). * smbd does not detect ctdb public ipv6 addresses for multichannel exclusion; (bso#15534). * 'force user = localunixuser' doesn't work if 'allow trusted domains = no' is set; (bso#15469). * smbget debug logging doesn't work; (bso#15525). * smget: username in the smburl and interactive password entry doesn't work; (bso#15532). * smbget auth function doesn't set values for password prompt correctly; (bso#15538). * Unable to copy and write files from clients to Ceph cluster via SMB Linux gateway with Ceph VFS module; (bso#15440). * Multichannel refresh network information; (bso#15547). - Update to 4.19.3 * sid_strings test broken by unix epoch > 1700000000; (bso#15520). * smbd crashes if asked to return full information on close of a stream handle with delete on close disposition set; (bso#15487). * smbd: fix close order of base_fsp and stream_fsp in smb_fname_fsp_destructor(); (bso#15521). * Improve logging for failover scenarios; (bso#15499). * Files without "read attributes" NFS4 ACL permission are not listed in directories; (bso#15093). * CVE-2018-14628 [SECURITY] Deleted Object tombstones visible in AD LDAP to normal users; (bso#13595). * Kerberos TGS-REQ with User2User does not work for normal accounts; (bso#15492). * vfs_gpfs stat calls fail due to file system permissions; (bso#15507). * Samba doesn't build with Python 3.12; (bso#15513). ==== selinux-policy ==== Version update (20231124 -> 20240104) Subpackages: selinux-policy-targeted - Update to version 20240104: * Allow keepalived_t read+write kernel_t pipes (bsc#1216060) * allow rebootmgr to read the system state (bsc#1205931) ==== zstd ==== Subpackages: libzstd1 libzstd1-32bit libzstd1-x86-64-v3 - Disable build of gzip for Leap 15.x to fix build error.

1 0

New Tumbleweed snapshot 20240111 released!
by Dominique Leuenberger 12 Jan '24

12 Jan '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: grub2 (2.12~rc1 -> 2.12) gstreamer-plugins-rs libcap-ng (0.8.3 -> 0.8.4) libzypp (17.31.27 -> 17.31.28) mdadm mpg123 (1.32.3 -> 1.32.4) ncurses (6.4.20231202 -> 6.4.20240106) shadow yast2-core (5.0.1 -> 5.0.2) === Details === ==== grub2 ==== Version update (2.12~rc1 -> 2.12) Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - Version bump to 2.12 (PED-5589) * Added: - grub-2.12.tar.xz - fix_no_extra_deps_in_release_tarball.patch * Removed: - grub-2.12~rc1.tar.xz * Patch dropped as it merged into new version: - 0001-disk-cryptodisk-Fix-missing-change-when-updating-to-.patch - 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch - 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch - 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch - 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch - 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch - 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch - 0006-fs-ntfs-Make-code-more-readable.patch - 0001-kern-ieee1275-init-Restrict-high-memory-in-presence-.patch - 0001-fs-xfs-Incorrect-short-form-directory-data-boundary-.patch - 0002-fs-xfs-Fix-XFS-directory-extent-parsing.patch - 0003-fs-xfs-add-large-extent-counters-incompat-feature-su.patch - 0001-mkstandalone-ensure-stable-timestamps-for-generated-.patch - 0002-mkstandalone-ensure-deterministic-tar-file-creation-.patch * Patch adjusted for the updated base version: - use-grub2-as-a-package-name.patch - grub2-s390x-04-grub2-install.patch - grub2-btrfs-04-grub2-install.patch - grub2-ppc64le-disable-video.patch - 0002-AUDIT-0-http-boot-tracker-bug.patch - 0001-Unify-the-check-to-enable-btrfs-relative-path.patch - 0003-Handle-multi-arch-64-on-32-boot-in-linuxefi-loader.patch - 0004-Add-suport-for-signing-grub-with-an-appended-signatu.patch - 0016-grub-install-support-embedding-x509-certificates.patch - 0021-appended-signatures-documentation.patch - 0022-ieee1275-enter-lockdown-based-on-ibm-secure-boot.patch - safe_tpm_pcr_snapshot.patch ==== gstreamer-plugins-rs ==== - Increase memory for s390x builds in _constraints. - Update both vendor files and include jsonwebtoken 9.2 in them. - The ring crate only supports s390x since v0.17.0 and jsonwebtoken 8 uses an older version, so we now patch livekit-api to use jsonwebtoken 9(.2) which allows to build the package in s390x (bsc#1218563). ==== libcap-ng ==== Version update (0.8.3 -> 0.8.4) - Update to version 0.8.4 * In capng_change_id, clear PR_SET_KEEPCAPS if returning an error * pscap: add -p option for reporting a specified process * Annotate function prototypes to warn if results are unused * Drop python2 support ==== libzypp ==== Version update (17.31.27 -> 17.31.28) - Fix to build with libxml 2.12.x (fixes #505) - version 17.31.28 (22) ==== mdadm ==== - Update mdadm to latest upstream state upto commit 582945c2d3bb. (jsc#PED-7542) 1) The testing changes are not included here. 2) Code clean up, and more helper routines added for Manage.c, Monitor.c, mdadm.c, ReadMe.c, super-intel.c, super0.c, super1.c, Create.c, Incremental.c and so on. 3) Man page update for mdadm.8.in. 4) Several memory leak and double free fixes. 5) Check /etc/initrd-release for whether systemd running on an initrd. - Manage: Block unsafe member failing 0062-Manage-Block-unsafe-member-failing.patch - Mdmonitor: Split alert() into separate functions 0063-Mdmonitor-Split-alert-into-separate-functions.patch - Monitor: block if monitor modes are combined. 0064-Monitor-block-if-monitor-modes-are-combined.patch - Update mdadm Monitor manual. 0065-Update-mdadm-Monitor-manual.patch - mdadm: create ident_init() 0066-mdadm-create-ident_init.patch - mdadm: Add option validation for --update-subarray 0067-mdadm-Add-option-validation-for-update-subarray.patch - Fix --update-subarray on active volume 0068-Fix-update-subarray-on-active-volume.patch - Add code specific update options to enum. 0069-Add-code-specific-update-options-to-enum.patch - super-ddf: Remove update_super_ddf. 0070-super-ddf-Remove-update_super_ddf.patch - super0: refactor the code for enum 0071-super0-refactor-the-code-for-enum.patch - super1: refactor the code for enum 0072-super1-refactor-the-code-for-enum.patch - super-intel: refactor the code for enum 0073-super-intel-refactor-the-code-for-enum.patch - Change update to enum in update_super and update_subarray 0074-Change-update-to-enum-in-update_super-and-update_sub.patch - Manage&Incremental: code refactor, string to enum 0075-Manage-Incremental-code-refactor-string-to-enum.patch - Change char* to enum in context->update & refactor code 0076-Change-char-to-enum-in-context-update-refactor-code.patch - mdadm/udev: Don't handle change event on raw devices 0077-mdadm-udev-Don-t-handle-change-event-on-raw-devices.patch - Manage: do not check array state when drive is removed 0078-Manage-do-not-check-array-state-when-drive-is-remove.patch - incremental, manage: do not verify if remove is safe 0079-incremental-manage-do-not-verify-if-remove-is-safe.patch - super-intel: make freesize not required for chunk size 0080-super-intel-make-freesize-not-required-for-chunk-siz.patch - manage: move comment with function description 0081-manage-move-comment-with-function-description.patch - Fix NULL dereference in super_by_fd 0082-Fix-NULL-dereference-in-super_by_fd.patch - Mdmonitor: Make alert_info global 0083-Mdmonitor-Make-alert_info-global.patch - Mdmonitor: Pass events to alert() using enums instead of 0084-Mdmonitor-Pass-events-to-alert-using-enums-instead-o.patch - Mdmonitor: Add helper functions 0085-Mdmonitor-Add-helper-functions.patch - Add helpers to determine whether directories or files are 0086-Add-helpers-to-determine-whether-directories-or-file.patch - Mdmonitor: Refactor write_autorebuild_pid() 0087-Mdmonitor-Refactor-write_autorebuild_pid.patch - Mdmonitor: Refactor check_one_sharer() for better error 0088-Mdmonitor-Refactor-check_one_sharer-for-better-error.patch - util.c: reorder code lines in parse_layout_faulty() 0089-util.c-reorder-code-lines-in-parse_layout_faulty.patch - util.c: fix memleak in parse_layout_faulty() 0090-util.c-fix-memleak-in-parse_layout_faulty.patch - Detail.c: fix memleak in Detail() 0091-Detail.c-fix-memleak-in-Detail.patch - isuper-intel.c: fix double free in load_imsm_mpb() 0092-isuper-intel.c-fix-double-free-in-load_imsm_mpb.patch - super-intel.c: fix memleak in find_disk_attached_hba() 0093-super-intel.c-fix-memleak-in-find_disk_attached_hba.patch - super-ddf.c: fix memleak in get_vd_num_of_subarray() 0094-super-ddf.c-fix-memleak-in-get_vd_num_of_subarray.patch - Create: goto abort_locked instead of return 1 in error path 0095-Create-goto-abort_locked-instead-of-return-1-in-erro.patch - Create: remove safe_mode_delay local variable 0096-Create-remove-safe_mode_delay-local-variable.patch - Create: Factor out add_disks() helpers 0097-Create-Factor-out-add_disks-helpers.patch - mdadm: Introduce pr_info() 0098-mdadm-Introduce-pr_info.patch - mdadm: Add --write-zeros option for Create 0099-mdadm-Add-write-zeros-option-for-Create.patch - manpage: Add --write-zeroes option to manpage 0100-manpage-Add-write-zeroes-option-to-manpage.patch - Define alignof using _Alignof when using C11 or newer 0101-Define-alignof-using-_Alignof-when-using-C11-or-newe.patch - Use existence of /etc/initrd-release to detect initrd. 0102-Use-existence-of-etc-initrd-release-to-detect-initrd.patch - Create: Fix checking for container in update_metadata 0103-Create-Fix-checking-for-container-in-update_metadata.patch ==== mpg123 ==== Version update (1.32.3 -> 1.32.4) Subpackages: libmpg123-0 mpg123-openal - Update to version 1.32.4 build: * Reorganize shared headers, API headers into src/include. * Use relative include paths, avoiding internal directories in CPPFLAGS except for config.h. * Group C99 feature checks and make several standard headers mandatory. * Get rid of SIZE_P, OFF_P and friends. * Only enforce dummy module together with libout123, to be able to build individual modules using --disable-components logic. out123: * added --libversion libmpg123: * Avoid indirect branches into the assembly routines by using C wrappers also for dct36, relieving us of the need to care for bti / endbr i nstructions for control flow integrity. ==== ncurses ==== Version update (6.4.20231202 -> 6.4.20240106) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add foot to terminfo-base. It's the most compliant wayland terminal emulator according to https://github.com/dankamongmen/notcurses/blob/master/TERMINALS.md - Add ncurses patch 20240106 + use ansi+arrows, ansi+apparrows, ansi+csr, ansi+erase, ansi+idc, ansi+idc1, ansi+idl, ansi+idl1, ansi+inittabs to trim -TD + minor manpage formatting changes for consistency. + modify doc-html test package's install-directory, per lintian. + add attr_get.3x to man_db.renames.in (patch by Sven Joachim). - Add ncurses patch 20231230 + improve formatting/style of manpages (patches by Branden Robinson). + add ms-vt100-16color, winconsole -TD + add rio, rio-direct -TD + add mostlike -TD + add wezterm, contour -TD - Add ncurses patch 20231223 + improve formatting/style of manpages (patches by Branden Robinson). - Add ncurses patch 20231217 + improve formatting/style of manpages (patches by Branden Robinson). + correct an assignment in infocmp "-u" for detecting if a boolean is unset in a base entry and set in a use'd chunk, i.e., if it was cancelled. + modify infocmp "-u" option to not report cancels for strings which were already cancelled in a use'd chunk. + join two lines in infotocap.3x to eliminate a spurious "description" link in installed manpages (report by Sven Joachim). + fix typo in NEWS (report by Sven Joachim). - Port patches * ncurses-5.9-ibm327x.dif * ncurses-6.4.dif ==== shadow ==== Subpackages: libsubid4 login_defs - bsc#1199026 bsc#1203823: Remove pam_keyinit from PAM configuration. This was introduced for bsc#1144060. ==== yast2-core ==== Version update (5.0.1 -> 5.0.2) - Don't close file descriptors in .target.bash calls (bsc#1218064) avoiding "[ASYNC BUG] rb_thread_wakeup_timer_thread: write(3) EBADF" with Ruby 3.3 - 5.0.2

1 0

Tumbleweed - Review of the week 2024/02
by Dominique Leuenberger 12 Jan '24

12 Jan '24

Dear Tumbleweed users and hackers, Tumbleweed is back at full speed – with seven snapshots released in as many days. The release team could again not let their hands off the system even on the weekend and delivered all the changes as fast as possible. The most relevant changes in those seven snapshots were: * Bind 9.18.21 * GStreamer 1.22.8 * SELinux 3.6 * firewalls 2.1.0 * Linux kernel 6.6.10 * GNOME 45.3 * Node.js 21.5.0 * Grub 2.12 * Meson 1.3.1 While looking at the staging projects, there has been some progress, but the list of older requests is mostly unchanged. With the holiday period over, we can all expect changes there relatively soon. Currently, we have these changes staged: * Linux kernel 6.6.11 * systemd 254.8 * RPM 4.19: all fixes have arrived, and the final phase has started. We expect openQA runs over the weekend and will likely ship it soon. With RPM 4.19, we will have to promote cmake to ring0 * Ruby 3.3: yast failures are being debugged and worked on * libxml 2.12.x: slow progress * openSSL 3.2.0 * c-ares 1.21.0: nodejs build fails have been resolved, but a new cycle has formed: appstream-glib, c-ares, curl, googletest, nghttp2, python311 * dbus-broker: no progress: openQA fails to launch the network stack in the installer Cheers, Dominique

1 0

Re: systemd-vconsole-setup.service failure
by Tony Walker 10 Jan '24

10 Jan '24

Hit reply instead of reply all. See below. -- Tony On Tue, Jan 9, 2024, 3:10 PM Tony Walker <tony.walker.iu(a)gmail.com> wrote: > Thanks and good points, Martin! > > TL;DR I submitted a bug report > (https://bugzilla.opensuse.org/show_bug.cgi?id=1218623), but missed an > existing one (https://bugzilla.opensuse.org/show_bug.cgi?id=1218618). > Not surprisingly, the maintainers were ahead of me and my > understanding .I assumed that Plymouth was holding onto the tty and > preventing systemd-vconsole-setup from resetting the tty. A simple > view of my fix is that it kills Plymouth if it takes too long. > However, it appears that Plymouth may be leaving the tty in graphics > mode. > > Longer story... > > > However, I am not quite certain whether your solution is correct. > > At least we should try to understand why it works. > > I am not sure either. ;-) Systemd and the boot process are outside my > area of expertise. I started using Linux in the mid 90's and learned > all about rc scripts. When Debian moved to systemd, I just went along > for the ride and became a dinosaur who knew just enough to start and > stop daemons. This seemed like a good excuse to learn, so please > correct me. > > > plymouth gets special treatment from systemd. Rather than stopping > > "plymouth-start.service", systemd runs "plymouth-quit.service". The > > reason is AFAIR that the plymouth splash screen is supposed to keep > > being displayed while the system is switching root. For this reason, > > plymouthd uses "KillMode=none". I suppose if you replace this with > > "mixed", plymouthd will be stopped when the initramfs shuts down. Do > > you see any difference in the visual appearance of the boot screen > > after applying your changes? > > Yes, there is a brief (~1-2s) view of the console before and after > Plymouth. That is, this is a crude fix. My thinking was that there are > other ways to fix that. Part of my reasoning is that Fedora uses the > exact settings I proposed, so if I could find the time to dig into > Fedora, I might find some other changes elsewhere. Of course, because > Fedora sticks its head in a toilet, we don't have to. Still, I thought > the Fedora folks would probably have a good implementation given their > proximity to its developers and it might be good to see what they do. > > Crudely killing Plymouth when initramfs is done is exactly what I > intended. My understanding is that systemd-vconsole-setup is called by > systemd-localed.service, localectl, etc. My thinking was that Plymouth > was holding the tty while the next boot step was trying to configure > it. A classic race condition (I'm a programmer not an admin, so I > always go for synchronization first). > > > > 2) add "IgnoreOnIsolate=true" to the "[Unit]" section, and > > > > The effect of this directive is unclear to me for the case at hand. The > > man page says "If true, this unit will not be stopped when isolating > > another unit". But this unit hasn't been stopped before your changes, > > because it had "KillMode=none" set. Is this really needed to solve the > > issue? > > I honestly don't know. My testing says no. However, I saw this and > thought it might fix a corner case that I never saw but thought might > happen eventually. Basically, I am completely ignorant of what > Plymouth does. I thought Plymouth might fork some other processes and, > because I am ignorant, IgnoreOnIsolate=false might cause systemd to > kill Plymouth due to timing. That is, I wanted to kill Plymouth but > not too quickly. > > When I looked at the Fedora (rawhide) package, I saw that they do use > IgnoreOnIsolate=true. Again, I don't know and we don't need to do > what Fedora does. However, it did make me feel better. > > > On my system, systemd-vconsole-setup.service runs successfully very > > early during initramfs processing. It prints the "device or resource > > busy" error when it's started again later, after switching root, > > probably because the plymouthd instance from the initrd is still > > running ("KillMode=none"). It's probably unnecessary to start systemd- > > vconsole-setup again after switching root, because the first invocation > > from the initramfs should have already set the fonts, keymaps, etc. > > Good point. I saw that too and did not bother to look at the logs from > my last Debian system to see if the same thing happens there. However, > I suspect so. As I said above, my understanding is that > systemd-vconsole-setup is called by systemd-localed.service, > localectl, etc. As such, I would expect to see repeated service starts > during boot while the tty is reconfigured for different stages. Again, > this is outside of my expertise, so I may be wrong. > > > Actually, looking at my boot log, it is weird to see that systemd- > > vconsole.setup is started and stopped more than 10 times during a > > single boot, while it should really be sufficient to do this once and > > for all very early at system startup. > > As I said above, my assumption is it will be restarted several times. > I am very likely wrong. > > > This looks like a systemd issue to me. I suggest you open a bug so that > > it can be properly analyzed. > > I searched for the bug and opened one: > https://bugzilla.opensuse.org/show_bug.cgi?id=1218623. Unfortunately, > I missed an existing one: > https://bugzilla.opensuse.org/show_bug.cgi?id=1218618. Sorry! I did > find similar reports: > https://bugzilla.opensuse.org/show_bug.cgi?id=1215282 and > https://bugzilla.opensuse.org/show_bug.cgi?id=943312. In those bug > reports, it appears that Plymouth leaves the tty in graphics mode. My > thinking was that killing Plymouth would do some "garbage collection" > and reset the terminal if this is the root of my problem. Either way, > it seemed I had a partial solution. > > Feel free to teach me or ask me questions. > > -- > Tony Walker <tony.walker.iu(a)gmail.com> > PGP Key @ https://tonywalker1.github.io/ or https://keys.openpgp.org/ > 9F46 <https://keys.openpgp.org/9F46> D66D FF6C 182D A5AC 11E1 8559 98D1 > 7543 319C > > On Tue, Jan 9, 2024 at 4:46 AM Martin Wilck <mwilck(a)suse.com> wrote: > > > > On Sun, 2024-01-07 at 12:35 -0500, Tony Walker wrote: > > > I finally found some time to debug and find a solution... > > > > > > The problem seems to be a race-condition caused by plymouth not > > > terminating quickly enough. > > > > Thanks for debugging this and finding a workaround. It has been > > bothering me, too, but I never took the time to take deeper look. > > > > However, I am not quite certain whether your solution is correct. > > At least we should try to understand why it works. > > > > > To make the error with vconsole-setuo > > > stop, I modified /usr/lib/systemd/system/plymouth-start.service as > > > follows: > > > > > > 1) change "KillMode" from none to "mixed", > > > > plymouth gets special treatment from systemd. Rather than stopping > > "plymouth-start.service", systemd runs "plymouth-quit.service". The > > reason is AFAIR that the plymouth splash screen is supposed to keep > > being displayed while the system is switching root. For this reason, > > plymouthd uses "KillMode=none". I suppose if you replace this with > > "mixed", plymouthd will be stopped when the initramfs shuts down. Do > > you see any difference in the visual appearance of the boot screen > > after applying your changes? > > > > > 2) add "IgnoreOnIsolate=true" to the "[Unit]" section, and > > > > The effect of this directive is unclear to me for the case at hand. The > > man page says "If true, this unit will not be stopped when isolating > > another unit". But this unit hasn't been stopped before your changes, > > because it had "KillMode=none" set. Is this really needed to solve the > > issue? > > > > > 3) run "dracut -f". > > > > > > I rebooted a few times and the errors were not generated. > > > > > > Let me know if this works for you and I will submit a bug and patch. > > > > > > > On my system, systemd-vconsole-setup.service runs successfully very > > early during initramfs processing. It prints the "device or resource > > busy" error when it's started again later, after switching root, > > probably because the plymouthd instance from the initrd is still > > running ("KillMode=none"). It's probably unnecessary to start systemd- > > vconsole-setup again after switching root, because the first invocation > > from the initramfs should have already set the fonts, keymaps, etc. > > > > Actually, looking at my boot log, it is weird to see that systemd- > > vconsole.setup is started and stopped more than 10 times during a > > single boot, while it should really be sufficient to do this once and > > for all very early at system startup. > > > > This looks like a systemd issue to me. I suggest you open a bug so that > > it can be properly analyzed. > > > > Regards, > > Martin > > > > > > > > > > > -- > > > Tony Walker <tony.walker.iu(a)gmail.com> > > > PGP Key @ https://tonywalker1.github.io/ or https://keys.openpgp.org/ > > > 9F46 D66D FF6C 182D A5AC 11E1 8559 98D1 7543 319C > > > > > > On Fri, Jan 5, 2024 at 6:58 PM Tony Walker <tony.walker.iu(a)gmail.com> > > > wrote: > > > > > > > > I saw this too. I haven't had time to debug it, but my hunch is a > > > > missing dependency in it's unit file. That would cause a race > > > > condition where vconsole-setup tries to start before its > > > > dependencies are running. > > > > > > > > Hope this helps. > > > > > > > > -- Tony > > > > > > > > On Fri, Jan 5, 2024, 6:24 PM Joe Salmeri <jmscdba(a)gmail.com> wrote: > > > > > > > > > > Yesterday I updated several TW machines and also TW vms from > > > > > 20231120 to > > > > > 20231228. > > > > > > > > > > After rebooting I ran systemctl --failed which shows > > > > > > > > > > UNIT LOAD ACTIVE SUB > > > > > DESCRIPTION > > > > > ? systemd-vconsole-setup.service loaded failed > > > > > failed > > > > > Virtual Console Setup > > > > > > > > > > systemctl status systemd-vconsole-setup.service provides the > > > > > details > > > > > > > > > > × systemd-vconsole-setup.service - Virtual Console Setup > > > > > Loaded: loaded > > > > > (/usr/lib/systemd/system/systemd-vconsole-setup.service; static) > > > > > Active: failed (Result: exit-code) since Thu 2024-01-04 > > > > > 17:10:27 > > > > > EST; 23h ago > > > > > Duration: 5h 2.219s > > > > > Docs: man:systemd-vconsole-setup.service(8) > > > > > man:vconsole.conf(5) > > > > > Main PID: 1105 (code=exited, status=1/FAILURE) > > > > > CPU: 5ms > > > > > > > > > > systemd[1]: Starting Virtual Console Setup... > > > > > systemd-vconsole-setup[1105]: No usable source console found: > > > > > Device or > > > > > resource busy > > > > > systemd[1]: systemd-vconsole-setup.service: Main process exited, > > > > > code=exited, status=1/FAILURE > > > > > systemd[1]: systemd-vconsole-setup.service: Failed with result > > > > > 'exit-code'. > > > > > systemd[1]: Failed to start Virtual Console Setup. > > > > > > > > > > Not sure what is causing the "No usable source console found: > > > > > Device or > > > > > resource busy" error but it happens on multiple TW machines and > > > > > also on > > > > > my TW vms. > > > > > > > > > > systemctl restart systemd-vconsole-setup.service > > > > > > > > > > Restarts the service with no errors or problems so wondering if > > > > > something timewise is not ready during the boot process ? > > > > > > > > > > Is this a known issue ? > > > > > > > > > > -- > > > > > Regards, > > > > > > > > > > Joe > > >

3 3

New Tumbleweed snapshot 20240109 released!
by Dominique Leuenberger 10 Jan '24

10 Jan '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: alsa-utils argyllcms (3.0.2 -> 3.1.0) curl firewalld (2.0.2 -> 2.1.0) git gnome-software kernel-source (6.6.9 -> 6.6.10) mlocate python-attrs (23.1.0 -> 23.2.0) python-greenlet python-gunicorn (20.1.0 -> 21.2.0) python-typing_extensions (4.8.0 -> 4.9.0) restorecond (3.5 -> 3.6) rubygem-addressable (2.8.5 -> 2.8.6) sg3_utils (1.48+3.b642f6a -> 1.48+6.7f43e14) vulkan-loader wtmpdb (0.10.0 -> 0.11.0) yast2-trans (84.87.20231230.7bdda36766 -> 84.87.20240105.ae431f155e) === Details === ==== alsa-utils ==== - Backport upstream fixes: buffer overflow fixes in aplay, segfault in aplaymidi, etc: 0008-topology-include-locale.h.patch 0009-nhlt-dmic-info.c-include-sys-types.h.patch 0010-topology-pre-processor-Add-support-for-enum-controls.patch 0011-configure.ac-fix-UMP-support-detection.patch 0012-bat-really-skip-analysis-of-the-first-period-and-upd.patch 0013-topology-add-include-for-ENABLE_NLS-on-musl.patch 0014-nhlt-use-stdint.h-types.patch 0015-Revert-nhlt-dmic-info.c-include-sys-types.h.patch 0016-aplay-use-stdint.h-types-instead-u_int-u_short-u_cha.patch 0017-alsa-restore.rules-use-devnode-instead-number-atribu.patch 0018-nhlt-Revert-SSP_ANALOG-device_type-field.patch 0019-alsactl-fix-potential-buffer-overwrite.patch 0020-aplay-fix-buffer-overflow-and-tainted-format-string.patch 0021-misc-fix-incorrect-usages-of-strerror.patch 0022-aplay-Add-option-for-specifying-subformat.patch 0023-aplay-allow-to-compile-with-older-alsa-lib-subformat.patch 0024-aplay-log-pcm-status-before-reporting-a-fatal-error.patch 0025-aplay-enable-timestamps-by-default.patch 0026-aplay-status-dumps-are-called-only-in-verbose-mode.patch 0027-aplaymidi-Set-event-completely-for-tempo-event.patch ==== argyllcms ==== Version update (3.0.2 -> 3.1.0) - update to 3.1.0: * Fixed bug in CMYK profile B2A table creation that sometimes resulted in bumpy black generation. (Only occurred when compiled using recent gcc with code optimization.) * Changed ICC profile serialization of pure ASCII text tags emit a warning rather than error if they are fed non-ASCII utf8 input. * Made ICC code a little more robust against bad profiles. (Thanks to David Hoyt). * Fixed latent bug in X11 plot code that caused window not to be created or updated when dowait == 0. This shows up on Linux as failure of spotread -S to show spectral plot. * Fixed problem with colorhug not noticing errors from the instrument. * Updated scanin/it8Wolf.cht to improve accuracy of grey wedge patch recognition. * Merged some Debian patches, including spelling fixes. ==== curl ==== Subpackages: libcurl4 - Added curl-adjust-pollset-fix.patch to fix broken MPD http streaming: https://github.com/curl/curl/issues/12632 ==== firewalld ==== Version update (2.0.2 -> 2.1.0) Subpackages: firewalld-bash-completion firewalld-lang python3-firewall - update to 2.1.0: * eat(service): add DNS over QUIC (DoQ) Service (5130430) * feat(icmp): add ICMPv6 Multicast Listener Discovery (MLD) types (dd88bbf) * feat(fw): add ReloadPolicy option in firewalld.conf (0019371) * feat(service): add submission service (tcp 587) (d6a9561) * feat(service): Add alvr (3a92358) * feat(service): add vrrp (d62fc8d) [* Renamed patch 0002-Disable-FlushAllOnReload-option.patch to 0001-Disable-FlushAllOnReload-option.patch [* Renamed patch firewalld-runstatedir.patch to 0002-firewalld-runstatedir.patch] ==== git ==== Subpackages: git-core git-email git-web perl-Git - git moved to /usr/libexec/git/git, update AppArmor profile accordingly (boo#1218588) ==== gnome-software ==== Subpackages: gnome-software-lang gnome-software-plugin-packagekit - Do not use _distconfdir on SLE/Leap less than version 16. ==== kernel-source ==== Version update (6.6.9 -> 6.6.10) - Refresh patches.suse/firewire-ohci-suppress-unexpected-system-reboot-in-A.patch. Update upstream status and move to sorted section. - commit 7d3b8d0 - Linux 6.6.10 (bsc#1012628). - Revert "platform/x86: p2sb: Allow p2sb_bar() calls during PCI device probe" (bsc#1012628). - netfilter: nf_tables: skip set commit for deleted/destroyed sets (bsc#1012628). - wifi: nl80211: fix deadlock in nl80211_set_cqm_rssi (6.6.x) (bsc#1012628). - wifi: cfg80211: fix CQM for non-range use (bsc#1012628). - tracing: Fix blocked reader of snapshot buffer (bsc#1012628). - ftrace: Fix modification of direct_function hash while in use (bsc#1012628). - ring-buffer: Fix wake ups when buffer_percent is set to 100 (bsc#1012628). - Revert "nvme-fc: fix race between error recovery and creating association" (bsc#1012628). - mm/memory-failure: check the mapcount of the precise page (bsc#1012628). - mm/memory-failure: cast index to loff_t before shifting it (bsc#1012628). - mm: migrate high-order folios in swap cache correctly (bsc#1012628). - mm/filemap: avoid buffered read/write race to read inconsistent data (bsc#1012628). - selftests: secretmem: floor the memory size to the multiple of page_size (bsc#1012628). - maple_tree: do not preallocate nodes for slot stores (bsc#1012628). - platform/x86: p2sb: Allow p2sb_bar() calls during PCI device probe (bsc#1012628). - ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16() (bsc#1012628). - platform/x86/intel/pmc: Move GBE LTR ignore to suspend callback (bsc#1012628). - platform/x86/intel/pmc: Allow reenabling LTRs (bsc#1012628). - platform/x86/intel/pmc: Add suspend callback (bsc#1012628). - block: renumber QUEUE_FLAG_HW_WC (bsc#1012628). - mptcp: fix inconsistent state on fastopen race (bsc#1012628). - mptcp: fix possible NULL pointer dereference on close (bsc#1012628). - mptcp: refactor sndbuf auto-tuning (bsc#1012628). - linux/export: Ensure natural alignment of kcrctab array (bsc#1012628). - linux/export: Fix alignment for 64-bit ksymtab entries (bsc#1012628). - kexec: select CRYPTO from KEXEC_FILE instead of depending on it (bsc#1012628). - kexec: fix KEXEC_FILE dependencies (bsc#1012628). - Update config files. The defaults for s390 taken from the master branch. - virtio_ring: fix syncs DMA memory with different direction (bsc#1012628). - fs: cifs: Fix atime update check (bsc#1012628). - client: convert to new timestamp accessors (bsc#1012628). - fs: new accessor methods for atime and mtime (bsc#1012628). - ksmbd: avoid duplicate opinfo_put() call on error of smb21_lease_break_ack() (bsc#1012628). - ksmbd: lazy v2 lease break on smb2_write() (bsc#1012628). - ksmbd: send v2 lease break notification for directory (bsc#1012628). - ksmbd: downgrade RWH lease caching state to RH for directory (bsc#1012628). - ksmbd: set v2 lease capability (bsc#1012628). - ksmbd: set epoch in create context v2 lease (bsc#1012628). - ksmbd: don't update ->op_state as OPLOCK_STATE_NONE on error (bsc#1012628). - ksmbd: move setting SMB2_FLAGS_ASYNC_COMMAND and AsyncId (bsc#1012628). - ksmbd: release interim response after sending status pending response (bsc#1012628). - ksmbd: move oplock handling after unlock parent dir (bsc#1012628). - ksmbd: separately allocate ci per dentry (bsc#1012628). - ksmbd: prevent memory leak on error return (bsc#1012628). - ksmbd: fix kernel-doc comment of ksmbd_vfs_kern_path_locked() (bsc#1012628). - ksmbd: no need to wait for binded connection termination at logoff (bsc#1012628). - ksmbd: add support for surrogate pair conversion (bsc#1012628). - ksmbd: fix missing RDMA-capable flag for IPoIB device in ksmbd_rdma_capable_netdev() (bsc#1012628). - ksmbd: fix kernel-doc comment of ksmbd_vfs_setxattr() (bsc#1012628). - ksmbd: reorganize ksmbd_iov_pin_rsp() (bsc#1012628). - ksmbd: Remove unused field in ksmbd_user struct (bsc#1012628). - commit b5b393f - Delete doc/config-options.changes (jsc#PED-5021) Following on adedbd2a5c6 ("kernel-source: Remove config-options.changes (jsc#PED-5021)"), remove the now unused file from the tree. - commit e04388e - Refresh patches.suse/firewire-ohci-suppress-unexpected-system-reboot-in-A.patch. Update upstream status. - commit 6da42fc - Update config files. Only run oldconfig to keep up with the lost configs. ... changelog too long, skipping 19 lines ... - commit aa5424d ==== mlocate ==== Subpackages: mlocate-lang - Drop url from source, fedorahosted.org is no longer running. ==== python-attrs ==== Version update (23.1.0 -> 23.2.0) - update to 23.2.0: * The type annotation for `attrs.resolve_types()` is now correct. * Type stubs now use `typing.dataclass_transform` to decorate dataclass-like decorators, instead of the non-standard `__dataclass_transform__` special form, which is only supported by Pyright. * Fixed serialization of namedtuple fields using `attrs.asdict/astuple()` with `retain_collection_types=True`. * `attrs.AttrsInstance` is now a `typing.Protocol` in both type hints and code. * This allows you to subclass it along with another `Protocol`. * If *attrs* detects that `__attrs_pre_init__` accepts more than just `self`, it will call it with the same arguments as `__init__` was called. * This allows you to, for example, pass arguments to `super().__init__()`. * Slotted classes now transform `functools.cached_property` decorated methods to support equivalent semantics. * Added *class_body* argument to `attrs.make_class()` to provide additional attributes for newly created classes. * It is, for example, now possible to attach methods. ==== python-greenlet ==== - require setuptools ==== python-gunicorn ==== Version update (20.1.0 -> 21.2.0) - Clean up the SPEC file - Update to version 21.2.0 * See https://github.com/benoitc/gunicorn/blob/21.2.0/docs/source/news.rst or the packaged news.rst - Removed support-eventlet-30-3.patch ==== python-typing_extensions ==== Version update (4.8.0 -> 4.9.0) - update to 4.9.0: * This feature release adds `typing_extensions.ReadOnly`, as specified by PEP 705, and makes various other improvements, especially to `(a)typing_extensions.deprecated()`. * Add support for PEP 705, adding `typing_extensions.ReadOnly`. * All parameters on `NewType.__call__` are now positional-only. This means that the signature of `typing_extensions.NewType.__call__` now exactly matches the * signature of `typing.NewType.__call__`. * Fix bug with using `@deprecated` on a mixin class. * Exclude `__match_args__` from `Protocol` members. * When creating a `typing_extensions.NamedTuple` class, ensure `__set_name__` is called on all objects that define `__set_name__` and exist in the values of the `NamedTuple` class's class dictionary. ==== restorecond ==== Version update (3.5 -> 3.6) - Update to version 3.6 https://github.com/SELinuxProject/selinux/releases/tag/3.6 * Add notself support for neverallow rules * Improve man pages * man pages: Remove the Russian translations * Add notself and other support to CIL * Add support for deny rules * Translations updated from https://translate.fedoraproject.org/projects/selinux/ * Bug fixes - Remove keys from keyring since they expired: - E853C1848B0185CF42864DF363A8AD4B982C4373 Petr Lautrbach <plautrba(a)redhat.com> - 63191CE94183098689CAB8DB7EF137EC935B0EAF Jason Zaman <jasonzaman(a)gmail.com> - Add key to keyring: - B8682847764DF60DF52D992CBC3905F235179CF1 Petr Lautrbach <lautrbach(a)redhat.com> ==== rubygem-addressable ==== Version update (2.8.5 -> 2.8.6) - Updated to 2.8.6 * Memoize regexps for common character classes. ==== sg3_utils ==== Version update (1.48+3.b642f6a -> 1.48+6.7f43e14) Subpackages: libsgutils2-1_48-2 - Upstream bug fixes for sg3_utils 1.48 (bsc#1218591) * sg_turs: fix missing CDB on several codepaths * sg_dd: fix bug that identified all block devices as NVME * rescan-scsi-bus.sh: avoid root FS going read-only with "rescan-scsi-bus.sh -r" (gh#doug-gilbert/sg3_utils#46) ==== vulkan-loader ==== - Align the fallback XDG config dirs with SUSE spec in-case it can't read it from the environment ==== wtmpdb ==== Version update (0.10.0 -> 0.11.0) Subpackages: libwtmpdb0 - Update to version 0.11.0 - last: add support for time-format option ==== yast2-trans ==== Version update (84.87.20231230.7bdda36766 -> 84.87.20240105.ae431f155e) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20240105.ae431f155e: * Translated using Weblate (German) * Translated using Weblate (German) * Translated using Weblate (German) * Translated using Weblate (Romanian)

1 0

openSUSE Release Engineering meeting 10.06.2024
by Lubos Kocman 10 Jan '24

10 Jan '24

All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting The meeting is hosted here https://meet.opensuse.org/ReleaseEngineeringMeeting Happy New Year 2024!!! ## Attendees bittin,ana, DimStar, lkocman, Sarah,Guillaume, ddemaio, dirk,maxlin, wengel ## Leap Working on Leap 16 announcement to reduce user confusion. https://www.reddit.com/r/openSUSE/comments/18ykxyo/confused_about_leap/ Banner for the annoucement https://github.com/openSUSE/artwork/pull/78 ALP Marble 6.0 was synced to OBS, I'll be working on the initial setup. https://build.opensuse.org/project/subprojects/openSUSE:Leap:Micro:6.0 42.X migration tests to current Leap were finally dropped from openqa https://progress.opensuse.org/issues/151864 Many thanks to Michal Suchanek, Antonio, Petr Gajdos, ... and all other maintainers for a help to get calibre working. https://code.opensuse.org/leap/features/issue/102 Waiting for qt6/5 updates in Staging :F in SLES 15 SP6 for a new Leap build ## openSUSE Tumbleweed (ana) openSUSE:Factory build fail stats: 73 failed 9 unresolvable (last week 78 failed, 15 unresolvable) https://tinyurl.com/ysy4nnnz Some of the most relevant updates: * Linux kernel 6.6.7 & 6.6.9 and 6.6.10 * Security-enhanced Linux stack: libsemanage/policycoreutils/libselinux 3.6, * meson 1.3.1 * GStreamer 1.22.8 * PHP 8.2.14 * postfix 3.8.4 * Qt5 5.15.12 * vagrant wasn't deleted and got a new maintainer, see plans on https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… Updates waiting / work still in progress: * libxml 2.12.1 (lots of work to do), libzypp and some packages got fixed, on hold * dbus-broker as default dbus session manager, waiting for maintainers to reach agreement, no progress * RPM 4.19 (work advanced) * FTBFS llvm17 (i586) * waiting users/groups update: pacemaker, resource-agents, libdlm -> https://build.opensuse.org/request/show/1137062 * Update to openssl 3.2.0, some updates, still 10-12 packages failing. * Additional Python 3.12 modules in Staging:K * Ruby 3.3, yast2 problems being researched https://bugzilla.opensuse.org/show_bug.cgi?id=1218064 * Mesa 23.3, on hold until the maintainer can look at it * Discussion for packaging Gimp 2 in parallel with Gimp 3, or even replace it already since Gimp 2 is keeping some python2 modules around. See boo#1218653 ## Richard (Aeon) Not available ## Bernhard (Slowroll) Normally rolling (slowly) ## Max Leap 15.6 - build stats in Backports: 33(was 34) faild, 14 unresolvable(was 13) * Published Build582.1 * 15.6 will switch to llvm17 after the next snapshot refreshing, llvm meta package will update to ver. 17 too * Will trigger Factory-to-Backports updater again this week lkocman will resubmit all translation packages to SLES/Leap this week. ## Guillaume - Arm * Tumbleweed: - Rolling again after the holidays period - WIP: Still some packages built without PAC/BTI, two main reasons: * assembler files without PAC/BTI (usually reported upstream, e.g. openssl, gnutls, etc) * Packages built without distro flags (usually fixed in spec file) - rpmlint: https://rpmlint.opensuse.org/ * we noticed that rpmlint does not check anymore for packages built without distro %{optflags}. We should add it back. https://bugzilla.opensuse.org/show_bug.cgi?id=1217840 - WIP to get Tumbleweed to run on Lenovo X13s: * Main pieces in place. Latest status available at https://en.opensuse.org/HCL:ThinkpadX13s * Leap 15.6/Backports SP6: - No update ## Sarah - s390x * openQA does not work for s390x: https://progress.opensuse.org/issues/153057 -> no releases possible lkocman to reach out to Oliver, perhaps Santi as well. Mainframe status: * CPU upgrade (more ipls) planned for LinuxONE system * second mainframe (z13) can be configured now Statement: timeline unknown :( ## Doug * FOSDEM * Seats available on bus to from NUE. email ddemaio(a)opensuse.org * Ordered some marketing items * GSoC * Application period Jan. 22 - Feb. 6 * Workshop planned for Jan. 16 at 15:30 UTC * openSUSE Conference * Will put out a call for hosts for oSC25 w/info regarding possible limitations * Planning to have an #open4business network event to kickoff oSC24 * Coordinating this as an event to take place on June 26 before oSC24 begins the following morning * Working with others to establish an #open4business network associated with community events * TSP * Approved some new requests * Asia Summit payments complete Static * oSC24 dates June 27 to 29 reserved (Thursday - Saturday) * FOSDEM Bus Connect ddemaio(a)opensuse.org if you're in the Nuremberg area * AI topics (static) ## Dirk * Help with Python 3.12 module enablement ## Wolfgang (Package Hub), Scott Bahling Dominique confirmed that we're asked to deliver Package HUB for ALP. Working on upgrade of ansible (from version 2.9.x to version 9), in sync with SUMA (since they are also using ansible and plan to upgrade to the latest version) ## Maintenance team (Marcus or Maurizio (m4u)) openSUSE Leap 15.4 and Backports 15 SP4 is EOL since 31st of Dec, there are still some lingering updates on SLES side. lkocman finishing of the welcome EOL, openSUSE-welcome update sr was not done yet. openSUSE 15.6 Beta by the end of Feb 2024 which is when we should start working on the maintenance setup. QE already booked it into a releavant sprint. ## Adrian - OBS No relevant update ## Simon (Leap Replacement/Linarite) Not available ## Open Floor New Calendar webpage for openSUSE related meetings: https://calendar.opensuse.org/ coded by LCP

1 0

systemd-vconsole-setup.service failure
by Joe Salmeri 09 Jan '24

09 Jan '24

Yesterday I updated several TW machines and also TW vms from 20231120 to 20231228. After rebooting I ran systemctl --failed which shows UNIT LOAD ACTIVE SUB DESCRIPTION ? systemd-vconsole-setup.service loaded failed failed Virtual Console Setup systemctl status systemd-vconsole-setup.service provides the details × systemd-vconsole-setup.service - Virtual Console Setup Loaded: loaded (/usr/lib/systemd/system/systemd-vconsole-setup.service; static) Active: failed (Result: exit-code) since Thu 2024-01-04 17:10:27 EST; 23h ago Duration: 5h 2.219s Docs: man:systemd-vconsole-setup.service(8) man:vconsole.conf(5) Main PID: 1105 (code=exited, status=1/FAILURE) CPU: 5ms systemd[1]: Starting Virtual Console Setup... systemd-vconsole-setup[1105]: No usable source console found: Device or resource busy systemd[1]: systemd-vconsole-setup.service: Main process exited, code=exited, status=1/FAILURE systemd[1]: systemd-vconsole-setup.service: Failed with result 'exit-code'. systemd[1]: Failed to start Virtual Console Setup. Not sure what is causing the "No usable source console found: Device or resource busy" error but it happens on multiple TW machines and also on my TW vms. systemctl restart systemd-vconsole-setup.service Restarts the service with no errors or problems so wondering if something timewise is not ready during the boot process ? Is this a known issue ? -- Regards, Joe

4 8

New Tumbleweed snapshot 20240108 released!
by Dominique Leuenberger 09 Jan '24

09 Jan '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: checkpolicy (3.5 -> 3.6) glibc libselinux (3.5 -> 3.6) libselinux-bindings (3.5 -> 3.6) libsemanage (3.5 -> 3.6) libsepol (3.5 -> 3.6) netcfg policycoreutils (3.5 -> 3.6) python-authheaders python-netaddr (0.9.0 -> 0.10.1) python-semanage (3.5 -> 3.6) python311 (3.11.6 -> 3.11.7) python311-core (3.11.6 -> 3.11.7) update-alternatives (1.22.1 -> 1.22.2) === Details === ==== checkpolicy ==== Version update (3.5 -> 3.6) - Update to version 3.6 https://github.com/SELinuxProject/selinux/releases/tag/3.6 * checkpolicy: Add the command line argument -N, --disable-neverallow * dispol: add option to display users, drop duplicate option to display booleans, show number of entries before listing them * dispol: Add the ability to show booleans, classes, roles, types and type attributes of policies * dispol: add options: --actions ACTIONS, --help * dismod: add options: --actions ACTIONS, --help * Add notself support for neverallow rules * Improve man pages * man pages: Remove the Russian translations * Add notself and other support to CIL * Add support for deny rules * Translations updated from https://translate.fedoraproject.org/projects/selinux/ * Bug fixes - Remove keys from keyring since they expired: - E853C1848B0185CF42864DF363A8AD4B982C4373 Petr Lautrbach <plautrba(a)redhat.com> - 63191CE94183098689CAB8DB7EF137EC935B0EAF Jason Zaman <jasonzaman(a)gmail.com> - Add key to keyring: - B8682847764DF60DF52D992CBC3905F235179CF1 Petr Lautrbach <lautrbach(a)redhat.com> ==== glibc ==== Subpackages: glibc-32bit glibc-devel glibc-extra glibc-lang glibc-locale glibc-locale-base nscd - sem-open-o-creat.patch: sem_open: Clear O_CREAT when semaphore file is expected to exist (BZ #30789) - ldconfig-process-elf-file.patch: elf: Fix wrong break removal from 8ee878592c - tls-modid-reuse.patch: elf: Fix TLS modid reuse generation assignment (BZ #29039) - getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to EAI_MEMORY (bsc#1217589, BZ #31163) - libio-wdo-write.patch: libio: Check remaining buffer size in _IO_wdo_write (BZ #31183) ==== libselinux ==== Version update (3.5 -> 3.6) Subpackages: libselinux1 libselinux1-32bit selinux-tools - Update to version 3.6 https://github.com/SELinuxProject/selinux/releases/tag/3.6 * libselinux: performance optimization for duplicate detection * Introduce getpolicyload - a helper binary to print the number of policy reloads on the running system * Add notself support for neverallow rules * Improve man pages * man pages: Remove the Russian translations * Add notself and other support to CIL * Add support for deny rules * Translations updated from https://translate.fedoraproject.org/projects/selinux/ * Bug fixes - Remove keys from keyring since they expired: - E853C1848B0185CF42864DF363A8AD4B982C4373 Petr Lautrbach <plautrba(a)redhat.com> - 63191CE94183098689CAB8DB7EF137EC935B0EAF Jason Zaman <jasonzaman(a)gmail.com> - Add key to keyring: - B8682847764DF60DF52D992CBC3905F235179CF1 Petr Lautrbach <lautrbach(a)redhat.com> ==== libselinux-bindings ==== Version update (3.5 -> 3.6) - The PEP517 python build requires setuptools - Update to version 3.6 https://github.com/SELinuxProject/selinux/releases/tag/3.6 * libselinux: performance optimization for duplicate detection * Introduce getpolicyload - a helper binary to print the number of policy reloads on the running system * Add notself support for neverallow rules * Improve man pages * man pages: Remove the Russian translations * Add notself and other support to CIL * Add support for deny rules * Translations updated from https://translate.fedoraproject.org/projects/selinux/ * Bug fixes - Remove keys from keyring since they expired: - E853C1848B0185CF42864DF363A8AD4B982C4373 Petr Lautrbach <plautrba(a)redhat.com> - 63191CE94183098689CAB8DB7EF137EC935B0EAF Jason Zaman <jasonzaman(a)gmail.com> - Add key to keyring: - B8682847764DF60DF52D992CBC3905F235179CF1 Petr Lautrbach <lautrbach(a)redhat.com> ==== libsemanage ==== Version update (3.5 -> 3.6) Subpackages: libsemanage-conf libsemanage-migrate-store libsemanage2 - Update to version 3.6 https://github.com/SELinuxProject/selinux/releases/tag/3.6 * Add notself support for neverallow rules * Improve man pages * man pages: Remove the Russian translations * Add notself and other support to CIL * Add support for deny rules * Translations updated from https://translate.fedoraproject.org/projects/selinux/ * Bug fixes - Remove keys from keyring since they expired: - E853C1848B0185CF42864DF363A8AD4B982C4373 Petr Lautrbach <plautrba(a)redhat.com> - 63191CE94183098689CAB8DB7EF137EC935B0EAF Jason Zaman <jasonzaman(a)gmail.com> - Add key to keyring: - B8682847764DF60DF52D992CBC3905F235179CF1 Petr Lautrbach <lautrbach(a)redhat.com> ==== libsepol ==== Version update (3.5 -> 3.6) - Update to version 3.6 https://github.com/SELinuxProject/selinux/releases/tag/3.6 * struct cond_expr_t bool renamed to boolean The change is indicated by COND_EXPR_T_RENAME_BOOL_BOOLEAN macro * Add notself support for neverallow rules * Improve man pages * man pages: Remove the Russian translations * Add notself and other support to CIL * Add support for deny rules * Translations updated from https://translate.fedoraproject.org/projects/selinux/ * Bug fixes - Remove keys from keyring since they expired: - E853C1848B0185CF42864DF363A8AD4B982C4373 Petr Lautrbach <plautrba(a)redhat.com> - 63191CE94183098689CAB8DB7EF137EC935B0EAF Jason Zaman <jasonzaman(a)gmail.com> - Add key to keyring: - B8682847764DF60DF52D992CBC3905F235179CF1 Petr Lautrbach <lautrbach(a)redhat.com> ==== netcfg ==== - Add krb-prop entry, fix for bsc#1211886. ==== policycoreutils ==== Version update (3.5 -> 3.6) Subpackages: policycoreutils-lang policycoreutils-python-utils python3-policycoreutils - Update to version 3.6 https://github.com/SELinuxProject/selinux/releases/tag/3.6 * Add notself support for neverallow rules * Improve man pages * man pages: Remove the Russian translations * Add notself and other support to CIL * Add support for deny rules * Translations updated from https://translate.fedoraproject.org/projects/selinux/ * Bug fixes - Remove keys from keyring since they expired: - E853C1848B0185CF42864DF363A8AD4B982C4373 Petr Lautrbach <plautrba(a)redhat.com> - 63191CE94183098689CAB8DB7EF137EC935B0EAF Jason Zaman <jasonzaman(a)gmail.com> - Add key to keyring: - B8682847764DF60DF52D992CBC3905F235179CF1 Petr Lautrbach <lautrbach(a)redhat.com> - Remove reproducible-build.patch since it is upstream now - Fix issues in get_os_version.patch ==== python-authheaders ==== - Fix importing resources * Added authheaders-importlib-resources.patch ==== python-netaddr ==== Version update (0.9.0 -> 0.10.1) - update to 0.10.1: * Get rid of some warnings * Add an :data:`INET_ATON` flag to explicitly request ``inet_aton()`` IPv4 parsing semantics from :class:`IPAddress`. * Add an :meth:`IPAddress.is_ipv4_private_use` convenience method. * Add an :meth:`IPAddress.is_global` convenience method to allow determining if an address is considered globally reachable. * Add an :meth:`IPAddress.is_ipv6_unique_local` convenience method. * Improve Python 3.13 compatibility, thank you John Eckersberg. * Deprecate Python 3.7 support. * Deprecate abbreviated CIDR format support in :class:`IPNetwork` * Deprecate accepting leading zeros when parsing IPv4 addresses in :data:`INET_PTON` mode (it's been allowed on some platforms). If you need to allow and discard leading zeros use the :data:`ZEROFILL` flag. * Raise an exception if invalid flags are passed to ``IPAddress``, ``IPNetwork`` or ``IPRange``. * Improve the documentation substantially. * Update the DB files to the latest versions (2023-12-23). ==== python-semanage ==== Version update (3.5 -> 3.6) - Update to version 3.6 https://github.com/SELinuxProject/selinux/releases/tag/3.6 * Add notself support for neverallow rules * Improve man pages * man pages: Remove the Russian translations * Add notself and other support to CIL * Add support for deny rules * Translations updated from https://translate.fedoraproject.org/projects/selinux/ * Bug fixes - Remove keys from keyring since they expired: - E853C1848B0185CF42864DF363A8AD4B982C4373 Petr Lautrbach <plautrba(a)redhat.com> - 63191CE94183098689CAB8DB7EF137EC935B0EAF Jason Zaman <jasonzaman(a)gmail.com> - Add key to keyring: - B8682847764DF60DF52D992CBC3905F235179CF1 Petr Lautrbach <lautrbach(a)redhat.com> ==== python311 ==== Version update (3.11.6 -> 3.11.7) Subpackages: python311-curses python311-dbm python311-x86-64-v3 - Update patch fix_configure_rst.patch - Update to 3.11.7: - Core and Builtins - gh-112625: Fixes a bug where a bytearray object could be cleared while iterating over an argument in the bytearray.join() method that could result in reading memory after it was freed. - gh-112388: Fix an error that was causing the parser to try to overwrite tokenizer errors. Patch by pablo Galindo - gh-112387: Fix error positions for decoded strings with backwards tokenize errors. Patch by Pablo Galindo - gh-112266: Change docstrings of __dict__ and __weakref__. - gh-109181: Speed up Traceback object creation by lazily compute the line number. Patch by Pablo Galindo - gh-102388: Fix a bug where iso2022_jp_3 and iso2022_jp_2004 codecs read out of bounds - gh-111366: Fix an issue in the codeop that was causing SyntaxError exceptions raised in the presence of invalid syntax to not contain precise error messages. Patch by Pablo Galindo - gh-111380: Fix a bug that was causing SyntaxWarning to appear twice when parsing if invalid syntax is encountered later. Patch by Pablo galindo - gh-88116: Traceback location ranges involving wide unicode characters (like emoji and asian characters) now are properly highlighted. Patch by Batuhan Taskaya and Pablo Galindo. - gh-94438: Fix a regression that prevented jumping across is None and is not None when debugging. Patch by Savannah Ostrowski. - gh-110696: Fix incorrect error message for invalid argument unpacking. Patch by Pablo Galindo - gh-110237: Fix missing error checks for calls to PyList_Append in _PyEval_MatchClass. - gh-109216: Fix possible memory leak in BUILD_MAP. - Library - gh-112618: Fix a caching bug relating to typing.Annotated. Annotated[str, True] is no longer identical to Annotated[str, 1]. - gh-112509: Fix edge cases that could cause a key to be present in both the __required_keys__ and __optional_keys__ attributes of a typing.TypedDict. Patch by Jelle Zijlstra. - gh-94722: Fix bug where comparison between instances of DocTest fails if one of them has None as its lineno. - gh-112105: Make readline.set_completer_delims() work with libedit - gh-111942: Fix SystemError in the TextIOWrapper constructor with non-encodable âerrorsâ argument in non-debug mode. - gh-109538: Issue warning message instead of having RuntimeError be displayed when event loop has already been closed at StreamWriter.__del__(). - gh-111942: Fix crashes in io.TextIOWrapper.reconfigure() when pass invalid arguments, e.g. non-string encoding. - gh-111804: Remove posix.fallocate() under WASI as the underlying posix_fallocate() is not available in WASI preview2. - gh-111841: Fix truncating arguments on an embedded null character in os.putenv() and os.unsetenv() on Windows. - gh-111541: Fix doctest for SyntaxError not-builtin subclasses. - gh-110894: Call loop exception handler for exceptions in client_connected_cb of asyncio.start_server() so that applications can handle it. Patch by Kumar Aditya. - gh-111531: Fix reference leaks in bind_class() and bind_all() methods of tkinter widgets. - gh-111356: Added io.text_encoding(), io.DEFAULT_BUFFER_SIZE, and io.IncrementalNewlineDecoder to io.__all__. - gh-68166: Remove mention of not supported âvsapiâ element type in tkinter.ttk.Style.element_create(). Add tests for element_create() and other ttk.Style methods. Add examples for element_create() in the documentation. - gh-111251: Fix _blake2 not checking for errors when initializing. - gh-111174: Fix crash in io.BytesIO.getbuffer() called repeatedly for empty BytesIO. - gh-111187: Postpone removal version for locale.getdefaultlocale() to Python 3.15. - gh-111159: Fix doctest output comparison for exceptions with notes. - gh-110910: Fix invalid state handling in asyncio.TaskGroup and asyncio.Timeout. They now raise proper RuntimeError if they are improperly used and are left in consistent state after this. - gh-111092: Make turtledemo run without default root enabled. - gh-110590: Fix a bug in _sre.compile() where TypeError would be overwritten by OverflowError when the code argument was a list of non-ints. - gh-65052: Prevent pdb from crashing when trying to display undisplayable objects - gh-110519: Deprecation warning about non-integer number in gettext now alwais refers to the line in the user code where gettext function or method is used. Previously it could refer to a line in gettext code. - gh-110378: contextmanager() and asynccontextmanager() context managers now close an invalid underlying generator object that yields more then one value. - gh-110365: Fix termios.tcsetattr() bug that was overwritting existing errors during parsing integers from term list. - gh-110196: Add __reduce__ method to IPv6Address in order to keep scope_id - gh-109747: Improve errors for unsupported look-behind patterns. Now re.error is raised instead of OverflowError or RuntimeError for too large width of look-behind pattern. - gh-109786: Fix possible reference leaks and crash when re-enter the __next__() method of itertools.pairwise. - gh-108791: Improved error handling in pdb command line ... changelog too long, skipping 87 lines ... raise SystemError if these attributes have wrong type. ==== python311-core ==== Version update (3.11.6 -> 3.11.7) Subpackages: libpython3_11-1_0 libpython3_11-1_0-x86-64-v3 python311-base python311-base-x86-64-v3 - Update patch fix_configure_rst.patch - Update to 3.11.7: - Core and Builtins - gh-112625: Fixes a bug where a bytearray object could be cleared while iterating over an argument in the bytearray.join() method that could result in reading memory after it was freed. - gh-112388: Fix an error that was causing the parser to try to overwrite tokenizer errors. Patch by pablo Galindo - gh-112387: Fix error positions for decoded strings with backwards tokenize errors. Patch by Pablo Galindo - gh-112266: Change docstrings of __dict__ and __weakref__. - gh-109181: Speed up Traceback object creation by lazily compute the line number. Patch by Pablo Galindo - gh-102388: Fix a bug where iso2022_jp_3 and iso2022_jp_2004 codecs read out of bounds - gh-111366: Fix an issue in the codeop that was causing SyntaxError exceptions raised in the presence of invalid syntax to not contain precise error messages. Patch by Pablo Galindo - gh-111380: Fix a bug that was causing SyntaxWarning to appear twice when parsing if invalid syntax is encountered later. Patch by Pablo galindo - gh-88116: Traceback location ranges involving wide unicode characters (like emoji and asian characters) now are properly highlighted. Patch by Batuhan Taskaya and Pablo Galindo. - gh-94438: Fix a regression that prevented jumping across is None and is not None when debugging. Patch by Savannah Ostrowski. - gh-110696: Fix incorrect error message for invalid argument unpacking. Patch by Pablo Galindo - gh-110237: Fix missing error checks for calls to PyList_Append in _PyEval_MatchClass. - gh-109216: Fix possible memory leak in BUILD_MAP. - Library - gh-112618: Fix a caching bug relating to typing.Annotated. Annotated[str, True] is no longer identical to Annotated[str, 1]. - gh-112509: Fix edge cases that could cause a key to be present in both the __required_keys__ and __optional_keys__ attributes of a typing.TypedDict. Patch by Jelle Zijlstra. - gh-94722: Fix bug where comparison between instances of DocTest fails if one of them has None as its lineno. - gh-112105: Make readline.set_completer_delims() work with libedit - gh-111942: Fix SystemError in the TextIOWrapper constructor with non-encodable âerrorsâ argument in non-debug mode. - gh-109538: Issue warning message instead of having RuntimeError be displayed when event loop has already been closed at StreamWriter.__del__(). - gh-111942: Fix crashes in io.TextIOWrapper.reconfigure() when pass invalid arguments, e.g. non-string encoding. - gh-111804: Remove posix.fallocate() under WASI as the underlying posix_fallocate() is not available in WASI preview2. - gh-111841: Fix truncating arguments on an embedded null character in os.putenv() and os.unsetenv() on Windows. - gh-111541: Fix doctest for SyntaxError not-builtin subclasses. - gh-110894: Call loop exception handler for exceptions in client_connected_cb of asyncio.start_server() so that applications can handle it. Patch by Kumar Aditya. - gh-111531: Fix reference leaks in bind_class() and bind_all() methods of tkinter widgets. - gh-111356: Added io.text_encoding(), io.DEFAULT_BUFFER_SIZE, and io.IncrementalNewlineDecoder to io.__all__. - gh-68166: Remove mention of not supported âvsapiâ element type in tkinter.ttk.Style.element_create(). Add tests for element_create() and other ttk.Style methods. Add examples for element_create() in the documentation. - gh-111251: Fix _blake2 not checking for errors when initializing. - gh-111174: Fix crash in io.BytesIO.getbuffer() called repeatedly for empty BytesIO. - gh-111187: Postpone removal version for locale.getdefaultlocale() to Python 3.15. - gh-111159: Fix doctest output comparison for exceptions with notes. - gh-110910: Fix invalid state handling in asyncio.TaskGroup and asyncio.Timeout. They now raise proper RuntimeError if they are improperly used and are left in consistent state after this. - gh-111092: Make turtledemo run without default root enabled. - gh-110590: Fix a bug in _sre.compile() where TypeError would be overwritten by OverflowError when the code argument was a list of non-ints. - gh-65052: Prevent pdb from crashing when trying to display undisplayable objects - gh-110519: Deprecation warning about non-integer number in gettext now alwais refers to the line in the user code where gettext function or method is used. Previously it could refer to a line in gettext code. - gh-110378: contextmanager() and asynccontextmanager() context managers now close an invalid underlying generator object that yields more then one value. - gh-110365: Fix termios.tcsetattr() bug that was overwritting existing errors during parsing integers from term list. - gh-110196: Add __reduce__ method to IPv6Address in order to keep scope_id - gh-109747: Improve errors for unsupported look-behind patterns. Now re.error is raised instead of OverflowError or RuntimeError for too large width of look-behind pattern. - gh-109786: Fix possible reference leaks and crash when re-enter the __next__() method of itertools.pairwise. - gh-108791: Improved error handling in pdb command line ... changelog too long, skipping 87 lines ... raise SystemError if these attributes have wrong type. ==== update-alternatives ==== Version update (1.22.1 -> 1.22.2) - Update to version 1.22.2. The full changelog is very large. Please check it here: https://git.dpkg.org/cgit/dpkg/dpkg.git/tree/debian/changelog?h=1.22.2

1 0

New Tumbleweed snapshot 20240107 released!
by Dominique Leuenberger 08 Jan '24

08 Jan '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: Mesa-demo cfitsio (4.3.0 -> 4.3.1) gpgme gpgmeqt ibus-libpinyin libdrm (2.4.118 -> 2.4.119) libjcat (0.1.14 -> 0.2.0) libntlm (1.6 -> 1.7) libxmlb (0.3.14 -> 0.3.15) man-pages-zh_CN (1.6.3.6 -> 1.6.4.0) python-httpx (0.25.2 -> 0.26.0) python-pygit2 (1.12.2 -> 1.13.3) xorg-x11-server === Details === ==== Mesa-demo ==== Subpackages: Mesa-demo-egl Mesa-demo-es Mesa-demo-x - Remove old rpm constructs that are long defaulted. - Remove legalese from descriptions as per our wiki guidelines. ==== cfitsio ==== Version update (4.3.0 -> 4.3.1) - Update to version 4.3.1: * Improve longstring keyword functions ==== gpgme ==== Subpackages: libgpgme11 libgpgmepp6 - Python 3.12 has dropped distutils * Build require python-setuptools instead * Drop old gpgme-D545-python310.patch * Replace with gpgme-D545-obsolete-distutils.patch ==== gpgmeqt ==== - Python 3.12 has dropped distutils * Build require python-setuptools instead * Drop old gpgme-D545-python310.patch * Replace with gpgme-D545-obsolete-distutils.patch ==== ibus-libpinyin ==== - Update ibus-libpinyin.spec: Change build requirement and installation requirement from python310 to python311 in SLE-15-SP6 and later release, since there's no python310 provided yet. (bsc#1218160) ==== libdrm ==== Version update (2.4.118 -> 2.4.119) Subpackages: libdrm2 libdrm_amdgpu1 libdrm_intel1 libdrm_nouveau2 libdrm_radeon1 - update to 2.4.119: * add amdgpu_va_get_start_addr ==== libjcat ==== Version update (0.1.14 -> 0.2.0) - Update to version 0.2.0: + New Features: - Add support for verifying firmware transparency checkpoints - Add various bitcounting functions for future use - Allow creating and validating SHA512 checksums - Allow verifying the checksum of a payload + Bugfixes: - Sprinkle attribute((nonnull)) to give a little more compile-time safety ==== libntlm ==== Version update (1.6 -> 1.7) - update to 1.7: * Moved GitLab URL to <https://gitlab.com/gsasl/libntlm>. * Use gnulib ./bootstrap for building from version controlled sources. * API and ABI modifications: + No changes since last version. ==== libxmlb ==== Version update (0.3.14 -> 0.3.15) Subpackages: libxmlb2 libxmlb2-x86-64-v3 - update to 0.3.15: * Sprinkle __attribute__((nonnull)) to give a little more compile-time safety * Accept text/xml as an alternative to application/xml * Do not inline shared code * Fix compiling with Visual Studio * Fix the exported api test on Windows * Generate and use .def file for clang-cl builds Fan) * Release source file handles early ==== man-pages-zh_CN ==== Version update (1.6.3.6 -> 1.6.4.0) - update to 1.6.4.0: * stty(1): Retranslated from coreutils 9.1. * vt-is-UTF8(1): Dropped, tool already disappeared. * Import and update coreutils 9.1 translation. ==== python-httpx ==== Version update (0.25.2 -> 0.26.0) - update to 0.26.0: * The `proxy` argument was added. You should use the `proxy` argument instead of the deprecated `proxies`, or use `mounts=` for more complex configurations. * The `proxies` argument is now deprecated. It will still continue to work, but it will be removed in the future. * Fix cases of double escaping of URL path components. Allow / as a safe character in the query portion. * Handle `NO_PROXY` envvar cases when a fully qualified URL is supplied as the value. * Allow URLs where username or password contains unescaped '@'. * Ensure ASGI `raw_path` does not include URL query component. * Ensure `Response.iter_text()` cannot yield empty strings. ==== python-pygit2 ==== Version update (1.12.2 -> 1.13.3) - update to 1.13.3: * New API for filters in Python #1237 #1244 * Shallow repositories: New depth optional argument for clone_repository(...) and Remote.fetch(...) #1245 #1246 * New submodule init(...), update(...) and reload(...) functions #1248 * Release GIL in Walker.__next__ #1249 * Type hints for submodule functions in Repository #1247 * Support Python 3.12 * Documentation updates #1242 * Fix crash in reference rename #1233 * Upgrade to libgit2 v1.7.1 * Don't distribute wheels for pypy, only universal wheels for macOS * New Repository.remotes.create_anonymous(url) #1229 * docs: update links to pypi, pygit2.org #1228 * Prep work for Python 3.12 (not yet supported) #1223 - drop support-libgit2-1.7.patch (upstream) ==== xorg-x11-server ==== Subpackages: xorg-x11-server-Xvfb xorg-x11-server-extra - n_xserver-optimus-autoconfig-hack.patch u_randr-Do-not-crash-if-slave-screen-does-not-have-pro.patch u_xfree86-activate-GPU-screens-on-autobind.patch * check dixPrivateKeyRegistered(rrPrivKey) before calling rrGetScrPriv() to avoid xserver crash when Xinerama is enabled (boo#1218240) - ------------------------------------------------------------------

1 0

New Tumbleweed snapshot 20240106 released!
by Dominique Leuenberger 07 Jan '24

07 Jan '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: evolution (3.50.2 -> 3.50.3) evolution-data-server (3.50.2 -> 3.50.3) evolution-ews (3.50.2 -> 3.50.3) osinfo-db (20231027 -> 20231215) python-atpublic python-dkimpy (1.0.5 -> 1.1.5) python-flufl.i18n (4.1.1 -> 5.0.2) python-flufl.lock (7.1.1 -> 8.0.2) python-pyzmq (25.1.1 -> 25.1.2) === Details === ==== evolution ==== Version update (3.50.2 -> 3.50.3) Subpackages: evolution-lang evolution-plugin-spamassassin - Update to version 3.50.3: + rss: Ensure feed icon size to not be too large. + Bug Fixes: - Calendar: Improve print of the Month view - rss: Better parse itunes feeds - Drag and drop images in HTML composer from Chrome - EMFolderTree: Do not expand to-be-selected folder + Updated translations. ==== evolution-data-server ==== Version update (3.50.2 -> 3.50.3) Subpackages: evolution-data-server-lang libcamel-1_2-64 libebackend-1_2-11 libebook-1_2-21 libebook-contacts-1_2-4 libecal-2_0-2 libedata-book-1_2-27 libedata-cal-2_0-2 libedataserver-1_2-27 libedataserverui-1_2-4 - Update to version 3.50.3: + Camel: Ignore errors about missing messages during filtering. + Bug Fixes: - sqlite3_enable_shared_cache is deprecated - Camel: Hide errors from for-offline download - IMAP: Copy/move messages in smaller batches + Updated translations. ==== evolution-ews ==== Version update (3.50.2 -> 3.50.3) Subpackages: evolution-ews-lang - Update to version 3.50.3: + Bug Fixes: - Mail: Calendar attachments can be broken by the server. - Workaround Outlook 2019 ORGANIZER and ATTENDEE addition into plain events. + Updated translations. ==== osinfo-db ==== Version update (20231027 -> 20231215) - Update to database version 20231215 (jsc#PED-6305) osinfo-db-20231215.tar.xz ==== python-atpublic ==== - remove obsolete pdm-pep517 dependency ==== python-dkimpy ==== Version update (1.0.5 -> 1.1.5) - update to 1.1.5: * Use dns.resolver.resolve instead of dns.resolver.query due to deprecation * Treat dns.resolver.NoNameservers like NXDOMAIN (not an error) * Confine errors from dnspython to dnsplug and use dkim errors, since dkim.__init__.py doesn't import dns and needs dkim errors * Catch nacl.exceptions.ValueError and raise KeyFormatError, similar to how RSA key errors are treated * Create ed25519 key files with secure permissions to avoid risk of insecure chmode call/race condition * Properly cleanup temporary directories in tests * Verify correct AMS header is used for ARC seal verification (AndrÃ© Cruz) * Document dropping of Python 2 support * Fix traceback when attempting to verify an unsigned message using async verify * Add domain validity check for ascii domains (no specials) * Add option to specify index number of signature to verify to dkimverify * Correct signature indexing error introduced in 1.0.0 that prevents verification of multiple signatures in a single message * Correct dkim.verify processing to avoid errors when verifying messages with no DKIM signatures * Update dnsplug for DNS Python (dns) 2.0 compatibility * Provide more specific error message when ed25519 private key is invalid * Add support for PKCS#8 for private keys, openssl 3 default * Add limitations section to README to document current IDN status * Add USE_ASYNC flag to allow async to be disabled when aiodns is installed (LP: #1954331) * Add new dkim.DnsTimeoutError class to report queried domain and selector along with timeout error from dnspython * Invalid Authentication-Results header fields are ignored for ARC signing ==== python-flufl.i18n ==== Version update (4.1.1 -> 5.0.2) - update to 5.0.2: * Fix the build backend. * Drop Python 3.7 support. * Bump dependencies. ==== python-flufl.lock ==== Version update (7.1.1 -> 8.0.2) - update to 8.0.2: * Update dependencies. * Other minor improvements and cleanups. * Minor documentation fix. * Drop Python 3.7 support (GL#34) * Added a claimfile property to Lock objects * Switch to pdm- ackend (GL#33) * Use ruff for linting, since its much faster. ==== python-pyzmq ==== Version update (25.1.1 -> 25.1.2) - update to 25.1.2: * Fix builds with some recent compilers and bundled libzmq * Fix builds with upcoming Cython 3.1

1 0

Tumbleweed - Review of the week 2024/01
by Dominique Leuenberger 07 Jan '24

07 Jan '24

Dear Tumbleweed users and hackers, Welcome to the year 2024! I hope you had a great start and did not get too anxious about the few snapshots you received during the last two weeks. I’m sure many of you had better things to do than running zypper dup on their machines. Since I was having some days off myself, I missed the weekly review of week 2023/52 – so I will include this here as well. I will cover the six snapshots 1222, 1225, 1226, 1228, 0103, and 0104, which have all been released since my last reviews. 0104 is hot off the press! The main changes in those snapshots were: * Mozilla Firefox 121.0 * Postfix 3.8.4 * Linux kernel 6.6.7 & 6.6.9 * BlueZ 5.71 * Poppler 23.12.0 * Sudo 1.9.15p5 * Qt 5.15.12 * PHP 8.2.14 This week is still quiet, as many developers stretch the holiday period over the first week of the new year. So, it’s not a big surprise that many things on the to-do list are identical to the previous weeks. Things currently being tested in staging include: * meson 1.3.1 * GStreamer 1.22.8 * RPM 4.19.x: llvm17 fails to build (?) * Ruby 3.3: yast failures are being debugged * libxml 2.12.x: slow progress * openSSL 3.2.0 * c-ares 1.21.0: breaks nodejs * dbus-broker: no progress: openQA fails to launch the network stack in the installer Cheers, Dominique

2 1

New Tumbleweed snapshot 20240105 released!
by Dominique Leuenberger 06 Jan '24

06 Jan '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: 7zip ImageMagick bind (9.18.20 -> 9.18.21) emacs fuse-exfat fwupd (1.9.10 -> 1.9.11) gnome-settings-daemon (45.0 -> 45.1) gnustep-base grub2 gstreamer (1.22.7 -> 1.22.8) gstreamer-plugins-bad (1.22.7 -> 1.22.8) gstreamer-plugins-base (1.22.7 -> 1.22.8) gstreamer-plugins-good (1.22.7 -> 1.22.8) gstreamer-plugins-libav (1.22.7 -> 1.22.8) gstreamer-plugins-rs (0.11.2 -> 0.11.3) gstreamer-plugins-ugly (1.22.7 -> 1.22.8) gtk-layer-shell (0.8.1 -> 0.8.2) gucharmap (15.1.1 -> 15.1.2) guestfs-tools (1.51.6 -> 1.52.0) inotify-tools (3.22.6.0 -> 4.23.9.0) libguestfs (1.51.9 -> 1.52.0) libportal librsvg (2.57.0 -> 2.57.1) libstorage-ng (4.5.169 -> 4.5.170) multipath-tools (0.9.7+76+suse.5f857af -> 0.9.7+93+suse.e2f2272) perl-HTTP-Cookies (6.10 -> 6.110.0) perl-IO-Tty (1.180.0 -> 1.200.0) perl-Net-DNS (1.410.0 -> 1.420.0) perl-XML-Parser (2.46 -> 2.470.0) perl-ldap python-M2Crypto python-SQLAlchemy (2.0.23 -> 2.0.24) python-argcomplete (3.1.6 -> 3.2.1) python-configobj python-hiredis python-numpy python-pycryptodome (3.19.0 -> 3.19.1) python-pycups python-redis python-six python-tornado6 (6.3.3 -> 6.4) python-zope.configuration (4.4.1 -> 5.0) python-zope.hookable (5.4 -> 6.0) python-zope.i18nmessageid (6.0.1 -> 6.1.0) python-zope.interface spamassassin supermin (5.2.2 -> 5.3.3) virt-v2v (2.2.0 -> 2.4.0) wireplumber (0.4.16 -> 0.4.17) yast2-journal (5.0.0 -> 5.0.1) === Details === ==== 7zip ==== - Add missing man pages for 7z / 7za / 7zr / 7zz. This solves bsc#1204856. ==== ImageMagick ==== Subpackages: ImageMagick-config-7-SUSE ImageMagick-extra libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - drop update-alternatives for config; use exactly one of configuration package provided ==== bind ==== Version update (9.18.20 -> 9.18.21) Subpackages: bind-doc bind-utils - Update to release 9.18.21 Removed Features: * Support for using AES as the DNS COOKIE algorithm (cookie-algorithm aes;) has been deprecated and will be removed in a future release. Please use the current default, SipHash-2-4, instead. * The resolver-nonbackoff-tries and resolver-retry-interval statements have been deprecated. Using them now causes a warning to be logged. ==== emacs ==== Subpackages: emacs-el emacs-eln emacs-info emacs-nox emacs-x11 etags - fix typo in %{ext_info} macro usage ==== fuse-exfat ==== - Do not mess with system config files which we do not own during post/postun. ==== fwupd ==== Version update (1.9.10 -> 1.9.11) Subpackages: fwupd-bash-completion fwupd-lang libfwupd2 typelib-1_0-Fwupd-2_0 - Update to version 1.9.11: + This release adds the following features: - Allow exporting 'offline' reports for manual upload + This release fixes the following bugs: - Add some recovery partition names to ignore for ESP selection - Check for CET and SMAP on non-Intel x86 processors too - Correctly mark the CPU as supported in the HSI tests - Do not fail on probing downstream Synaptics MST ports - Do not offer to change BIOS settings that are already set - Do not prefer msftdata when choosing the default ESP - Do not show spurious device request flags - Fix a missing build dependency to fwupdplugin-self-test - Fix a segfault when using zlib-ng instead of zlib - Fix updating Jabra 410, 510, 710 and 810 devices - Match more community-supported branches - Remove the Intel SPIBAR proxy support as the mtd module works - Show a better error when the ESP is missing - Show an error if the post-update version does not match exactly - Speed up Synaptics MST device enumeration + This release adds support for the following hardware: - Algoltek USB devices - Luxshare Quad USB4 Dock ==== gnome-settings-daemon ==== Version update (45.0 -> 45.1) Subpackages: gnome-settings-daemon-lang - Update to version 45.1: + Power: Compiler warning fixes. + Smartcard: Error handling fix. + USB Protection: Comment clean up. + Updated translations. - Drop upstream fixed patches: + 41d0dc1db4d75c37ba67fe903105b4e162d42f1a.patch + 538816ff42f682fc4b541810ca107486abab9976.patch + a059909d62da0c11774f1089d02937699fabf150.patch ==== gnustep-base ==== - Add 295.patch: Fix build with libxml2 2.11.0+. ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - grub2.spec: Add ofnet to signed grub.elf to support powerpc net boot installation when secure boot is enabled (bsc#1217761) - Improved check for disk device when looking for PReP partition * 0004-Introduce-prep_load_env-command.patch ==== gstreamer ==== Version update (1.22.7 -> 1.22.8) Subpackages: gstreamer-lang gstreamer-utils libgstreamer-1_0-0 typelib-1_0-Gst-1_0 - Update to version 1.22.8: + Highlighted bugfixes in 1.22.8 - Security fixes for the AV1 video codec parser - avdec video decoder: fix another possible deadlock with FFmpeg 6.1 - qtdemux: reverse playback and seeking fixes for files with raw audio streams - v4l2: fix "newly allocated buffer ... is not free" warning log flood - GstPlay + GstPlayer library fixes - dtls: Fix build failure on Windows when compiling against OpenSSL 3.2.0 - d3d11screencapturesrc: Fix wrong color with HDR enabled - Cerbero build tool: More python 3.12 string escape warning fixes; make sure to bundle build tools as well - various bug fixes, build fixes, memory leak fixes, and other stability and reliability improvements + gstreamer - buffer: Unref memories before metas - pad: Recheck pads when linking after temporary unlock - baseparse: Fixes to buffers extracted from adapter - Rebase reduce-required-meson.patch ==== gstreamer-plugins-bad ==== Version update (1.22.7 -> 1.22.8) Subpackages: gstreamer-plugins-bad-lang libgstadaptivedemux-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstcuda-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstphotography-1_0-0 libgstplay-1_0-0 libgstplayer-1_0-0 libgstsctp-1_0-0 libgsttranscoder-1_0-0 libgsturidownloader-1_0-0 libgstva-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 libgstwebrtcnice-1_0-0 - Update to version 1.22.8: + aesenc: Fix IV length addition to output buffer length + av1parser: Fix array sizes in scalability structure + camerabin: Fix source updates with user filters + codecparsers: av1: Clip max tile rows and cols values + dtlscertificate: Define WINSOCKAPI before including windows.h + d3d11: fix building with address sanitizer + d3d11screencapturesrc: Fix wrong color with HDR enabled + h264decoder: Fix GstVideoCodecFrame leak + ladspa: Make RDF parsing truly optional + rtponviftimestamp: Fix drop-out-of-segment=false mode + qsvdecoder: Fix stream format detection + webrtcsdp: Remove fingerprint validation that doesn't make sense + GstPlay: Automatically flush the bus when disposing the signal adapter + GstPlayer: Without dispatcher emit signals directly instead of via the default main context - Rebase reduce-required-meson.patch ==== gstreamer-plugins-base ==== Version update (1.22.7 -> 1.22.8) Subpackages: gstreamer-plugins-base-lang libgstallocators-1_0-0 libgstapp-1_0-0 libgstaudio-1_0-0 libgstfft-1_0-0 libgstgl-1_0-0 libgstpbutils-1_0-0 libgstriff-1_0-0 libgstrtp-1_0-0 libgstrtsp-1_0-0 libgstsdp-1_0-0 libgsttag-1_0-0 libgstvideo-1_0-0 typelib-1_0-GstAudio-1_0 typelib-1_0-GstPbutils-1_0 typelib-1_0-GstTag-1_0 typelib-1_0-GstVideo-1_0 - Update to version 1.22.8: + appsrc: Fix flow return when buffer is dropped + audioringbuffer: Don't try to map MONO channel + encoding-target: Properly free when missing type field in parse_encoding_profile + pbutils: Don't include default vp9 parameters in resulting codec mime string + videorate: Don't forget last_ts on caps changes - Rebase reduce-required-meson.patch ==== gstreamer-plugins-good ==== Version update (1.22.7 -> 1.22.8) Subpackages: gstreamer-plugins-good-extra gstreamer-plugins-good-gtk gstreamer-plugins-good-jack gstreamer-plugins-good-lang gstreamer-plugins-good-qtqml - Update to version 1.22.8: + dcaparse: keep upstream buffer meta + rtpklvdepay: Recover after invalid fragmented KLV unit + matroska-demux: fix accumulated base offset in segment seeks + qtdemux: fix bug report URL + qtdemux: Don't overflow sample index + qtdemux: Fix reverse playback for pcm audio stream + qtdemux: Ignore raw audio streams when adjusting seek + qtdemux: Under-seeking to a key unit in certain (encoded by Adobe products) ProRes movies (macOS x86_64 & arm64, Windows x86_64, ...) + rtpac3depay: should output audio/x-ac3 not audio/ac3 + rtp: Fix incorrect RTP channel order lookup by name + v4l2bufferpool: add lock as atomic operation for seek - Rebase reduce-required-meson.patch ==== gstreamer-plugins-libav ==== Version update (1.22.7 -> 1.22.8) - Update to version 1.22.8: + avviddec: Unlock stream lock while waiting for decoded frame. Fixes potential deadlock + avviddec: Calculate latency only for fixed framerate - Rebase reduce-required-meson.patch. ==== gstreamer-plugins-rs ==== Version update (0.11.2 -> 0.11.3) - Update to version 0.11.3: + Fixed - ndi: Mark a private type as such and remove a wrong `Clone` impl of internal types. - uriplaylistbin: Fix a minor clippy warning. - fallbacksrc: Fix error during badly timed timeout scheduling. - webrtcsink: Fail gracefully if webrtcbin pads can't be requested instead of panicking. - threadshare: Fix deadlock in `ts-udpsrc` `notify::used-socket` signal emission. + Changed - Update to AWS SDK 1.0. - Update to windows-sys 0.52. - Update to async-tungstenite 0.24. - Update to bitstream-io 2.0. - tttocea608: De-duplicate some functions. - gtk4: Use async-channel instead of deprecated GLib main context channel. - Update BuildRequires on cargo-c >= 0.9.21. ==== gstreamer-plugins-ugly ==== Version update (1.22.7 -> 1.22.8) Subpackages: gstreamer-plugins-ugly-lang - Update to version 1.22.8: + No changes, stable bump only. - Rebase reduce-required-meson.patch. ==== gtk-layer-shell ==== Version update (0.8.1 -> 0.8.2) - Update to 0.8.2: * Compat: bump supported GTK to v3.24.39 * Compat: NOTE: GTK v3.24.40 may break previous version and work with this one, but we won't know for sure until it's released ==== gucharmap ==== Version update (15.1.1 -> 15.1.2) Subpackages: gucharmap-lang libgucharmap_2_90-7 - Update to version 15.1.2: + Updated translations. ==== guestfs-tools ==== Version update (1.51.6 -> 1.52.0) - Update to version 1.52.0 * mltools/libosinfo-c.c: Fix off-by-one error * Documentation fixes * Fix bugs-in-changelog.sh: Use grep -E instead of egrep ==== inotify-tools ==== Version update (3.22.6.0 -> 4.23.9.0) Subpackages: libinotifytools0 - update to 4.23.9.0: * support cross compile for Android * libinotifytools: Rename init variable to fix conflict with entry point * Add CodeQL workflow for GitHub code scanning * Fix build with musl and add Alpine buildnode to CI * Update Cirrus CI FreeBSD images * Fix enabling of fanotify/fsnotify. * Fix fanotify_supported() * Combine to one build machine, reduce test iteration to 64 * Add -fanalyzer to build * Enable CentOS Stream 9 build * Add debian 12 * Ensure C++ libraries are not linked in ==== libguestfs ==== Version update (1.51.9 -> 1.52.0) Subpackages: libguestfs-appliance libguestfs-xfs libguestfs0 - Update to version 1.52.0 * The Python bindings now use bytes (instead of str) for the event callback message, since it may contain arbitrary 8 bit data Fix a rare crash, and avoid memory leaks in event callbacks * Support for OCaml 5, and OCaml â¥ 4.07 is now the minimum * The OCaml bindings now release the runtime lock around calls to guestfs_close, since that call might be long-running (for example it might have to shut down the appliance and synch disks). * Support OpencloudOS * SELinux relabelling now runs in parallel, meaning it's a lot quicker * Add support for lzma and zstd compression methods in tar APIs (like guestfs_tar_in) * guestfs_pvs_full previously didn't always return the correct device names. This has now been fixed. * guestfs_btrfs_filesystem_balance fixed so it now works with more modern btrfs tools (JÃ¼rgen HÃ¶tzel). * The guestfish(1) --key option now recognizes LVM names like /dev/mapper/rhel_bootp--73--75--123-root * guestfish --key option also supports a new --key all:... selector to try the same key on all devices. * In guestmount(1) avoid calling fclose(NULL) on error paths, which might have caused a crash on some platforms. ==== libportal ==== Subpackages: libportal-gtk3-1 libportal-gtk4-1 libportal1 typelib-1_0-Xdp-1_0 - Replace copypasted summaries by something more concrete ==== librsvg ==== Version update (2.57.0 -> 2.57.1) Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2 rsvg-thumbnailer typelib-1_0-Rsvg-2_0 - Update to version 2.57.1: + Fix small-caps and bump the version of Pango required to 1.50.0. + Fix panic when using negative scaling transforms on the toplevel. + Support "var(--foo, #aabbcc)" just for colors. This is the minimum required to render color SVG emoji fonts that provide color fallbacks, but it is not yet full support for CSS var(). + Fix the VS2017 build. + Update cairo-rs. + Update the project metadata files. ==== libstorage-ng ==== Version update (4.5.169 -> 4.5.170) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#976 - make more use of new SystemCmd interface - use in-class member initialization - inhibit colored output from udevadm - fixed typos - 4.5.170 ==== multipath-tools ==== Version update (0.9.7+76+suse.5f857af -> 0.9.7+93+suse.e2f2272) Subpackages: kpartx libmpath0 - Update to version 0.9.7+93+suse.e2f2272: * fix ANA prioritizer enablement logic (bsc#1218326) * avoid setting queue_if_no_path on multipath maps for which the no_path_retry timeout has expired * the interactive commands "restorequeueing map X" and "restorequeing maps" now only affect maps that had queueing manually disabled using "disablequeuing maps" or "disablequeuing map X" beforehand * Spelling fixes ==== perl-HTTP-Cookies ==== Version update (6.10 -> 6.110.0) - updated to 6.11 see /usr/share/doc/packages/perl-HTTP-Cookies/Changes 6.11 2023-12-07 16:36:52Z - Replace "Test" with "Test::More" (GH#70) (James Raspass) ==== perl-IO-Tty ==== Version update (1.180.0 -> 1.200.0) - updated to 1.20 see /usr/share/doc/packages/perl-IO-Tty/ChangeLog 1.20 2023-12-28 Todd Rinaldo <toddr(a)cpan.org> * #32 - Skip t/pty_get_winsize.t tests on AIX * #27 - Fix patchlevel check for util.h 1.19 2023-12-28 Todd Rinaldo <toddr(a)cpan.org> * #37 - Remove --no-undefined from compiler test which is not compatible with all platforms. ==== perl-Net-DNS ==== Version update (1.410.0 -> 1.420.0) - updated to 1.42 see /usr/share/doc/packages/perl-Net-DNS/Changes ==== perl-XML-Parser ==== Version update (2.46 -> 2.470.0) - updated to 2.47 see /usr/share/doc/packages/perl-XML-Parser/Changes 2.47 2023-12-28 (by Todd Rinaldo) - #84 use $fh instead of $foo - #85 Fix typo in documentation - #89 Devel::CheckLib to from 0.99 -> 1.14 - Devel::CheckLibn 1.16 - #91 POD fix for verbatim text - #97 Add a LICENSE file - #94 Don't ship Expat/Makefile - Various github workflow improvements. Windows is still not working. ==== perl-ldap ==== - Remove the dependency on perl(IO::Socket::INET6) as it has been deprecated by upstream, is no longer suitable for use and its not being maintained. A compatible replacement for this package is perl(IO::Socket::IP) which is shipped by the perl-base package. ==== python-M2Crypto ==== - require setuptools ==== python-SQLAlchemy ==== Version update (2.0.23 -> 2.0.24) - update to 2.0.24: * https://docs.sqlalchemy.org/en/20/changelog/changelog_20.html#change-2.0.24 ==== python-argcomplete ==== Version update (3.1.6 -> 3.2.1) - Remove coverage check - Fix zsh test failures: avoid coloring terminal - update to 3.2.1: * Allow explicit zsh global completion activation (#467) * Fix and test global completion in zsh (#463, #466) * Add âyes option to activate-global-python-argcomplete (#461) * Test suite improvements - drop without_zsh.patch: obsolete ==== python-configobj ==== - Remove six from the rpm requirements. Why would we have remove_six.patch in the first place if we still require it? - Enable unit tests - require setuptools - remove python2 logic, this makes no sense after "remove_six.patch" ==== python-hiredis ==== - require setuptools ==== python-numpy ==== - Fix build error for Leap. Need gcc >= 8.5 ==== python-pycryptodome ==== Version update (3.19.0 -> 3.19.1) - update to 3.19.1: * Fixed a side-channel leakage with OAEP decryption that could be exploited to carry out a Manger attack ==== python-pycups ==== - require setuptools ==== python-redis ==== - Add patch to increase timeouts in s390x where tests take longer to run: * increase-test-timeout.patch ==== python-six ==== - require setuptools ==== python-tornado6 ==== Version update (6.3.3 -> 6.4) - update to 6.4: * https://www.tornadoweb.org/en/stable/releases/v6.4.0.html * Python 3.12 is now supported. - drop py312-datetime.patch (upstream) ==== python-zope.configuration ==== Version update (4.4.1 -> 5.0) - update to 5.0: * Drop support for Python 2.7, 3.5, 3.6. * Add support for Python 3.11. ==== python-zope.hookable ==== Version update (5.4 -> 6.0) - update to 6.0: * Drop support for Python 2.7, 3.5, 3.6. * Add support for Python 3.12. ==== python-zope.i18nmessageid ==== Version update (6.0.1 -> 6.1.0) - update to 6.1.0: * Add support for Python 3.12. ==== python-zope.interface ==== - remove python2 specific codepaths ==== spamassassin ==== Subpackages: perl-Mail-SpamAssassin spamassassin-spamc - Remove the dependency on perl(IO::Socket::INET6) as it has been deprecated by upstream, is no longer suitable for use and its not being maintained. A compatible replacement for this package is perl(IO::Socket::IP) which is shipped by the perl-base package. ==== supermin ==== Version update (5.2.2 -> 5.3.3) - Update to version 5.3.3 * initrd: Support ztd-compressed modules * pacman: Recognise Artix, an Arch derivative * Add a separate variable to store link flags, and use that to supply * Add appropriate globs for arm based kernels. The file names end in -arm64 but the architecture is named aarch64. * Add support for OCaml 5.0 * Add LFS support for fts functions * Numerous bug fixes - Upstream bug fixes and features 001-Improved-debugging-of-the-supermin-if-newer-calculation.patch 002-Fix-if-newer-copy-kernel.patch 003-Fix-kernel-filtering-for-aarch64-architecture.patch 004-Use-output-complete-exe-instead-of-custom.patch 005-Only-supply-output-complete-exe-to-final-link.patch 006-Rename-function-file-kernel.patch 007-Uncompress-kernel-on-RISC-V.patch 008-Fix-link-to-renamed-kernel-documentation.patch 009-New-mailing-list-email-address.patch - Dropped initrd_support_ztd-compressed_modules.patch ==== virt-v2v ==== Version update (2.2.0 -> 2.4.0) Subpackages: virt-v2v-bash-completion - Update to virt-v2v 2.4.0 * New --block-driver option which can be used to choose to install either virtio-blk or virtio-scsi drivers * The virt-v2v --key option now recognizes LVM names like /dev/mapper/rhel_bootp--73--75--123-root * The --key option also supports a new --key all:... selector to try the same key on all devices. * Conversions now set the host-model CPU in the output metadata, except where the source hypervisor overrides this. The exception is -o qemu mode which uses -cpu host. * virt-v2v will now look for bootloader configuration in /boot/grub/grub.cfg for UEFI guests * Invoke pnputil (if available) to install drivers, fixing some Windows conversions * Skip SELinux relabelling if the guest has disabled SELinux * Several output modes now generate metadata to indicate whether the guest requires the RTC to be set to UTC (Linux) or localtime (most Windows). For example with -o libvirt this generates <clock offset="utc|localtime"/>. * -i ova mode is now less strict about parsing the manifest file, which helps when converting some non-conforming OVA files. * Input modes using -it ssh now use the correct quoting * -i vmx mode now rejects VMDK files explicitly, reducing a source of user confusion * Multiple fixes to -o kubevirt mode. Also implement -oo compressed for this mode. * -o libvirt mode now supports Rocky Linux * -o openstack documentation for cloud configurations fixed * -o rhv-upload mode has an improved error when the -os parameter is invalid or missing * Remove support for RHEL 3 * Various language translation updates - Drop patches fix-compiler-error-Stdlib.stderr.patch fix-linker-error.patch ==== wireplumber ==== Version update (0.4.16 -> 0.4.17) Subpackages: libwireplumber-0_4-0 wireplumber-audio wireplumber-lang - Update to version 0.4.17: * Fixes: - Fix a reference counting issue in the object managers that could cause crashes due to memory corruption. - Fix an issue with filters linking to wrong targets, often with two sets of links. - Fix a crash in the endpoints policy that would show up when log messages were enabled at level 3 or higher. ==== yast2-journal ==== Version update (5.0.0 -> 5.0.1) - Make sure not to get escape sequences (for colors) into the output of the 'journalctl --output json' command, even if $SYSTEMD_COLORS is set in the environment (bsc#1218106) - 5.0.1

1 0

openSUSE Release Engineering meeting 03.01.2024
by Lubos Kocman 06 Jan '24

06 Jan '24

All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting The meeting is hosted here https://meet.opensuse.org/ReleaseEngineeringMeeting Happy New Year 2024!!! ## Attendees bittin, lkocman, DimStar, Sarah, Max ## Leap https://calendar.opensuse.org/ is live, we should add Releng and weekly call in there. Members of this call are welcome to join https://calendar.opensuse.org/teams/release https://calendar.opensuse.org/teams/release. https://github.com/openSUSE/calendar-o-o Beta at the end of February (Based on SLES 15 SP6 Public Beta). All package drops and SLES update requests should be finalized by then https://en.opensuse.org/openSUSE:Roadmap. Leap already has a wallpaper including the newly elected logo, perhaps we could scan for some other occurrences of the old logo. I see one in "About system" in gnome-settings. I suspect that KDE will have a similar placement. gnuhealth will require 3.11 versions of python-tinydb and python-Kivy + opencv SCC enablement to unblock SLES migration testing https://bugzilla.suse.com/show_bug.cgi?id=1217966 Discussion about openSUSE Dolomite / Marble on extended SLE Micro call tomorrow I'm really happy that the situation (was https://etherpad.opensuse.org/p/ReleaseEngineering-20231122-pm-discussion) is now clarified. The new plan is to start working on an openSUSE Leap Micro 6.X setup since the beginning of 2024. From Daniel and Sergio (PM): As for Dolomite, the idea is for it to be implemented as an extension for SLE Micro and we would like to also copy that extension over to openSUSE once the details are clearer to us, so basically a Dolomite extension to openSUSE Leap Micro. ## openSUSE Tumbleweed (ana) openSUSE:Factory build fail stats: 78 failed 15 unresolvable (last week 57 failed, 4 unresolvable) https://tinyurl.com/ysy4nnnz Most relevant updates from this last week: * x-mas / new-year break Updates waiting / work in progress in staging: (almost same than past week) * libxml 2.12.1 (lots of work to do), on hold until January 8th * dbus-broker as default dbus session manager, waiting for maintainers to reach agreement * RPM 4.19 (work advanced, %patch with unnumbered patches is not supported from this version on) * Update to openssl 3.2.0 * ruby 3.3 * Mesa 23.3, on hold until January 8th * Delete vagrant & Virtualization:vagrant due to licensing changes by Hashicorp https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… ## Richard (Aeon) Work on "aeon-installer" has been supplanted by work on "tik" - Transactional Installation Kit Basic premise has evolved to no longer being graphical, but a tui installer, akin to the kiwi SelfInstaller but with a number of new features Most of these features evolve from a core assumption - all of our installation media todate assumes a read-only ISO, back from the days of installing via CDrom tik installation media assumes a SUSE-style "transactional" hybrid read-only and read-write filesystem, and assumes will only be run from a USB stick. This will allow people to customise the installer, and use the USB stick to deliver things like ignition/combustion scripts, while still actually deploying properly crafted images Core features - Partition for storing ignition/combustion scripts on the same USB stick as being used for installation - tik OS on the USB can be modified with additional drivers/packages from transactional-update - Core installation workflow is very simple - Select Disk, Select Image, Deploy Image to Disk, Done. - Customisable installation workflow by distros by adding pre/post shell script modules in /usr/lib/tik/modules - Customisable installation workflow by users by adding pre/post shell script modules in /etc/tik/modules - Support for both 'single distro' installations, or multiple images if stored in /var/lib/tik Current status Under heavy development, got working module loading and working storage function for selecting storage devices, now working on selecting images ## Bernhard (Slowroll) Last week was silent. Had version bump around Christmas. We're pretty close to TW right now. Moved to a new repository. We don't have signing keys for kernel atm. DimStar: We need Adrian for this ^. DimStar/Adrian: we have to think this through a bit. Continues to roll Slowly, sometimes has dependency problems -> need install-check Bernhard: three open issues in OBS bugtracker osc rdiff + osc getbinaries + building DVD with product-builder does not work with TWsnapshot+dod approach = https://github.com/openSUSE/slowroll/issues/1 https://github.com/openSUSE/open-build-service/issues/14994 osc branch -r release counter reset https://github.com/openSUSE/open-build-service/issues/15079 causes spurious "downgrades" missing build-compare causes extra publishes https://github.com/openSUSE/open-build-service/issues/15108 ## Max Leap 15.6 - build stats in Backports: 34(was 26) faild, 13 unresolvable(was 13) * Not much news, snapshot repo just got refreshed - massive package rebuilding now * Preparing a duplicate SLE/Backports package list, they're candidate to be deleted ## Guillaume - Arm Not available * Tumbleweed: - Rolling - WIP: Still some packages built without PAC/BTI, two main reasons: * assembler files without PAC/BTI (usually reported upstream, e.g. openssl, gnutls, etc) * Packages built without distro flags (usually fixed in spec file) - rpmlint: * openSUSE:Factory:ARM now part of https://rpmlint.opensuse.org/ * we noticed that rpmlint does not check anymore for packages built without distro %{optflags}. We should add it back. https://bugzilla.opensuse.org/show_bug.cgi?id=1217840 - WIP to get Tumbleweed to run on Lenovo X13s: * Latest status available at https://en.opensuse.org/HCL:ThinkpadX13s * Leap 15.6/Backports SP6: - No update ## Sarah - s390x Tumbleweed: * Christmas release did not go to openQA -> Any openQA changes again? DimStar: last build from 28th failed for s390x in openQA. good news: * Emulator unicorn updated: https://build.opensuse.org/package/show/home:AdaLovelace:branches:Virtualiz… -> does not build for SLES/openSUSE Leap on s390x/aarch64 Upstream issue: https://github.com/unicorn-engine/unicorn/issues/1840 * 2nd mainframe connected to the energy ## Doug Not available * Logo contest complete * 10,813 votes * Results posted at https://en.opensuse.org/Logocontest * Winners of contest contacted for gift - lkocman: we will eventually have to refresh wallpapers with new logo too. I can cover the Leap one. existing Tumbleweed would be more tricky. * Community meeting * Meeting provides a pathway forward with a two-step process for logo contest * ddemaio will send out email shortly * TSP * One payment pending * One new request * CLT Sponsorship PO recieved Static * oSC24 dates June 27 to 29 reserved (Thursday - Saturday) * FOSDEM Bus Connect ddemaio(a)opensuse.org if you're in the Nuremberg area * AI topics (static) * Sponsorship of Installfest.cz requested, seems like it was tentatively approved. ## Dirk Not available Further work on python 3.12 enablement preps for Factory, submitted about ~ 35 updates Working on python 3.6 removal in SP6 Package Hub ## Wolfgang (Package Hub), Scott Bahling Not available task for lkocman: The problem statement (SLES/SLED expectations) Draft to be composed here: https://etherpad.opensuse.org/p/packagehub-problem-statement ## Maintenance team (Marcus or Maurizio (m4u)) Not available HEADS UP! Leap 15.4 EOL on Dec 31st 2023 Updated lkocman: will look into openSUSE-welcome to announce when a release is almost/is EOL lkocman: no update, I've looked into the package (I was surprised to see that it's in c++), but no progress so far. It would be nice to have this done this week, prior xmas break and have update released. Confirmed that maintenance setup for Leap 15.6 will be with Public Beta (~February 2024) Max: php81, SLES 15 SP6 seem to have already php82. Marcus: Let's not add php81 into 15.6 since php82 is out. No issues. Internal request to add php8.1 to Package HUB. Regarding AMD issue, kernel update is scheduled for a second Tuesday of the month. https://bugzilla.suse.com/show_bug.cgi?id=1215802 Start working on the maintenance setup with Beta 15.6 (End of February 2024) ## Adrian - OBS Not available ## Simon (Leap Replacement/Linarite) Not available ## Open Floor

9 17

Marketing and Branding
by Tony Walker 06 Jan '24

06 Jan '24

Because there seems to be interest in and unresolved questions around branding and marketing, it seems that openSUSE needs an official marketing and branding team...IMO. -- Tony

1 0

New Tumbleweed snapshot 20240104 released!
by Dominique Leuenberger 05 Jan '24

05 Jan '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ImageMagick (7.1.1.21 -> 7.1.1.25) apache2-mod_php8 (8.2.13 -> 8.2.14) bluez fltk (1.3.8 -> 1.3.9) ghostscript gnome-control-center hplip (3.23.8 -> 3.23.12) icewm (3.4.4 -> 3.4.5) iw (5.19 -> 6.7) kernel-firmware (20231214 -> 20240102) kernel-source (6.6.7 -> 6.6.9) kmozillahelper libarchive (3.7.0 -> 3.7.2) libebml (1.4.4 -> 1.4.5) libheif (1.17.5 -> 1.17.6) libical (3.0.16 -> 3.0.17) libical-glib (3.0.16 -> 3.0.17) libjpeg-turbo (8.2.2 -> 8.3.2) libqt5-qtbase (5.15.11+kde138 -> 5.15.12+kde147) libqt5-qtconnectivity (5.15.11+kde6 -> 5.15.12+kde6) libqt5-qtdeclarative (5.15.11+kde30 -> 5.15.12+kde31) libqt5-qtgraphicaleffects (5.15.11+kde0 -> 5.15.12+kde0) libqt5-qtimageformats (5.15.11+kde12 -> 5.15.12+kde10) libqt5-qtlocation (5.15.11+kde4 -> 5.15.12+kde6) libqt5-qtmultimedia (5.15.11+kde2 -> 5.15.12+kde2) libqt5-qtnetworkauth (5.15.11+kde0 -> 5.15.12+kde0) libqt5-qtquickcontrols (5.15.11+kde0 -> 5.15.12+kde0) libqt5-qtquickcontrols2 (5.15.11+kde5 -> 5.15.12+kde5) libqt5-qtscript (5.15.15 -> 5.15.16) libqt5-qtsensors (5.15.11+kde0 -> 5.15.12+kde0) libqt5-qtserialport (5.15.11+kde0 -> 5.15.12+kde0) libqt5-qtspeech (5.15.11+kde1 -> 5.15.12+kde1) libqt5-qtsvg (5.15.11+kde6 -> 5.15.12+kde6) libqt5-qttools (5.15.11+kde3 -> 5.15.12+kde4) libqt5-qttranslations (5.15.11+kde0 -> 5.15.12+kde0) libqt5-qtvirtualkeyboard (5.15.11+kde0 -> 5.15.12+kde0) libqt5-qtwayland (5.15.11+kde59 -> 5.15.12+kde60) libqt5-qtwebchannel (5.15.11+kde3 -> 5.15.12+kde3) libqt5-qtwebsockets (5.15.11+kde2 -> 5.15.12+kde2) libqt5-qtwebview (5.15.11+kde0 -> 5.15.12+kde0) libqt5-qtx11extras (5.15.11+kde0 -> 5.15.12+kde0) libqt5-qtxmlpatterns (5.15.11+kde0 -> 5.15.12+kde0) libraw (0.21.1 -> 0.21.2) libstorage-ng (4.5.168 -> 4.5.169) lttng-ust (2.13.5 -> 2.13.6) newt (0.52.23 -> 0.52.24) nftables nodejs21 perl-IO-Socket-SSL perl-MIME-tools (5.510 -> 5.511.0) php8 (8.2.13 -> 8.2.14) pulseaudio python-falcon python-python-slugify (5.0.2 -> 8.0.1) python-unicodedata2 qca-qt5 (2.3.7+git8 -> 2.3.7+git12) qt6-base sdbootutil (1+git20231214.b186b2d -> 1+git20231221.42797ab) suse-module-tools (16.0.39 -> 16.0.42) tracker-miners unbound (1.18.0 -> 1.19.0) vim (9.0.2181 -> 9.1.0000) wireless-regdb (20230901 -> 20231201) yast2-trans (84.87.20231224.d98b72cc24 -> 84.87.20231230.7bdda36766) === Details === ==== ImageMagick ==== Version update (7.1.1.21 -> 7.1.1.25) Subpackages: ImageMagick-config-7-SUSE ImageMagick-extra libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - version update to 7.1.1.25 https://github.com/ImageMagick/Website/blob/main/ChangeLog.md - update to 7.1.1.24: * Added extra check for rare case when ImageMagick is build without any delegates. * Corrected order to fix invalid matches. * only fill the alpha channel for alpha floodfill * Make sure we use the lt_ methods like we do elsewhere. * support dng:max-raw-memory define (ImageMagick/ImageMagick#6922) * properly export YUV JP2 images (ImageMagick/ImageMagick#6943) * use : specifier * correct display program name * check for corrupt DJVU images * support UTF-8 comments (ImageMagick/ImageMagick#6949) * do not prefix iTxt key with 'png:' * enhance sampling factor parser (ImageMagick/ImageMagick#6943) * Switch to ubuntu 20.04 in the app-image build. * Corrected packages that need to be install due to ubuntu upgrade. * improve accuracy of image statistics * fx calculations of skewness and kurtosis * Only write comments as itxt when the string contains non ansi chars. * check if the string contains non-Latin1 characters * Corrected patch to check for non-Latin1 characters. * invalid JSON with -ping (ImageMagick/ImageMagick#6966) * throw exception if # of meta channels exceed max https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-hx5j-px… * multiplication result converted to larger type * invalid HTTPS certificates are no longer ignored https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3r24-6m… * multiplication result converted to larger type * eliminate compiler warning * don't include the index channel in the overall image statistics * multiplication result converted to larger type - version update to 7.1.1.23 https://github.com/ImageMagick/Website/blob/main/ChangeLog.md - modified patches % ImageMagick-library-installable-in-parallel.patch (refreshed) - deleted patches - ImageMagick-infinite-resource-time-limit.patch (upstreamed) ==== apache2-mod_php8 ==== Version update (8.2.13 -> 8.2.14) - version update to 8.2.14 * This is a bug fix release. https://www.php.net/ChangeLog-8.php#8.2.14 ==== bluez ==== Subpackages: bluez-auto-enable-devices bluez-cups libbluetooth3 - add fix-link-key-address-type.patch - thanks to pallaswept for identifying the right patch for the pairing regression ==== fltk ==== Version update (1.3.8 -> 1.3.9) - update to 1.3.9: * Support macOS up to macOS 14 "Sonoma". * Update bundled libraries to current versions (see below). * Introduce bundled image library "prefixing" to avoid conflicts with system libraries. * Bundled library versions (see also README.bundled-libs.txt): * Library Version Release date * jpeg jpeg-9e 2022-01-16 * png libpng-1.6.40 2023-06-21 * zlib zlib-1.3 2023-08-18 * Backport X11 INCR protocol fixes from 1.4.0 (issue #451) * X11: Suppress compiler warnings when using gcc or clang * Fix crash if a program exits before it opens a window * Fix compilation error with current Visual Studio 2022 * Backport warning fixes from 1.4.0 in src/fl_draw.cxx * Fix compiler warning as pointed out in PR #693 * Fix another compiler warning (#693) * Remove unused variable, fix "type issue" (#445, part 2) * Fix stack buffer overflow found by address sanitizer * Fix "gtk+ rendering" (GitHub Issue #443) * Fix doxygen warnings * Bump version numbers, prepare release 1.3.9 * Fix several compiler warnings * Update bundled image libraries and zlib to current versions * Update README, README.CMake.txt, and some support files * Fix compiler warnings: backported from 1.4 (git 'master') * CMake/MSVC: remove confusing recommendation to rerun * Documentation: remove dark color on title page * Raise CMake minimum required version to 3.15 and more * macOS platform: Issue #325 "Disabling IM disables Greek and Cyrillic layouts" * Fix fullscreen window level corner cases on macOS * Fix issue #373 apparent with macOS platform and SDK â¤ * Issue #452: Fl::get_font_name failure on OS-X. * Issue #454: crash in Fl::get_font_name(). * Issue #469: Fl_Sys_Menu_Bar menu item shortcuts using Esc Tab don't work on Mac * Fix "Focus is lost leaving full screen on macOS 13" * Add support of macOS Ventura 13.0 and macOS Sonoma 14.0 * macOS: remove configure option --enable-x11 and CMake OPTION_APPLE_X11; this functionality remains in FLTK 1.4. * configure.ac: make sure local-png and local-zlib always run together * Remove the -mwindows argument from CFLAGS and CXXFLAGS ==== ghostscript ==== Subpackages: ghostscript-x11 - CVE-2023-46751.patch is https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=dcdbc595c13 adapted for Ghostscript-9.56.1 that fixes https://bugs.ghostscript.com/show_bug.cgi?id=707264 which includes a fix for CVE-2023-46751 "dangling pointer in gdev_prn_open_printer_seekable()" (bsc#1217871) ==== gnome-control-center ==== Subpackages: gnome-control-center-color gnome-control-center-goa gnome-control-center-lang gnome-control-center-user-faces - Add gnome-control-center-fix-region-preview-crash.patch: nl_langinfo's returned pointer could be invalid after switching locale, so we have to save the result before switch locale to prevent the crash (bsc#1218528, glgo#GNOME/gnome-control-center!2122). ==== hplip ==== Version update (3.23.8 -> 3.23.12) Subpackages: hplip-hpijs hplip-sane hplip-udev-rules - Update to hplip 3.23.12 * del fix-printer-attributes-parsing.patch (merged upstream) * del hppsfilter-booklet-printing-change-insecure-fixed-tm.patch (merged upstream) - Added support for new printers: * HP OfficeJet Pro 9130b series * HP OfficeJet Pro 9120b series * HP OfficeJet Pro 9110b series * HP Color LaserJet Enterprise Flow MFP X58045z * HP Color LaserJet Enterprise Flow MFP X58045zs * HP Color LaserJet Enterprise MFP X58045dnâ * HP Color LaserJet Enterprise MFP X58045 * HP LaserJet Pro P1106 plus * HP LaserJet Pro P1108 plus ==== icewm ==== Version update (3.4.4 -> 3.4.5) Subpackages: icewm-config-upstream icewm-default icewm-lang icewm-lite - Update to 3.4.5: * Fix for centering the clock LED digits vertically * Fix the KeyWinTile commands for multi-mon setups * Fix the workspace buttons for right-to-left languages ==== iw ==== Version update (5.19 -> 6.7) - Update to version 6.7: * update nl80211.h * bump version to 6.7 * update nl80211.h * iw: allow extra cflags * iw: S1G: add 802.11ah support for link command display * update nl80211.h * iw: connect: Fix segfault during open authentication * iw: fix attribute size mismatch * iw: add more extended capa bits * iw: Fix EHT rates printing. * iw: S1G: add list command support for 802.11ah * iw: S1G: add parsing for 802.11ah scan IE's * iw: S1G: add frequency set in kHz and offset options * util: don't print EHT info if not present * interface: print links * link: update for MLO * link: fix some formatting * iw: scan: set NL80211_SCAN_FLAG_COLOCATED_6GHZ in case of full sched scan * util: add support for 320MHz bandwidth without cf1 * util: add support for 320Mhz bandwidth * update nl80211.h * iw: event: fix printf format error * iw: add support for retrieving keys * iw: info: fix bug reading preambles and bandwidths * iw: add cac background command * iw: info: print PMSR capabilities ==== kernel-firmware ==== Version update (20231214 -> 20240102) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update to version 20240102 (git commit b83108216200): * linux-firmware: add firmware for mediatek bluetooth chip (MT7925) * linux-firmware: add firmware for MT7925 * ASoC: tas2563: Add dsp firmware for laptops or other mobile devices * QCA: Add bluetooth firmware nvm files for QCA2066 * QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00629 - Update aliases - Update to version 20231226 (git commit abfcad8b1405): * rtl_bt: Add firmware and config files for RTL8852BT/RTL8852BE-VT * ASoC: tas2781: Add dsp firmware for different laptops * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.36 * ath11k: WCN6855 hw2.0: update board-2.bin * ath11k: WCN6750 hw1.0: update board-2.bin * ath11k: IPQ8074 hw2.0: update board-2.bin * ath10k: WCN3990 hw1.0: update board-2.bin * ath10k: QCA9888 hw2.0: update board-2.bin * ath10k: QCA4019 hw1.0: update board-2.bin * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00309- * ath12k: add new driver and firmware for WCN7850 * iwlwifi: update gl FW for core80-165 release * intel: vsc: Add firmware for Visual Sensing Controller * cirrus: Add CS35L41 firmware and tunings for ASUS Zenbook 2023 Models * cirrus: Add CS35L41 firmware and tunings for ASUS Zenbook 2022 Models * amdgpu: DMCUB updates for various AMDGPU ASICs - New subpackag kernel-firmware-ath12k - Update aliases ==== kernel-source ==== Version update (6.6.7 -> 6.6.9) - Linux 6.6.9 (bsc#1012628). - bpf: Fix prog_array_map_poke_run map poke update (bsc#1012628). - mm/damon/core: use number of passed access sampling as a timer (bsc#1012628). - mm/damon/core: make damon_start() waits until kdamond_fn() starts (bsc#1012628). - btrfs: qgroup: iterate qgroups without memory allocation for qgroup_reserve() (bsc#1012628). - btrfs: qgroup: use qgroup_iterator in qgroup_convert_meta() (bsc#1012628). - btrfs: free qgroup pertrans reserve on transaction abort (bsc#1012628). - drm/amd/display: fix hw rotated modes when PSR-SU is enabled (bsc#1012628). - drm/i915: Fix FEC state dump (bsc#1012628). - drm/i915: Introduce crtc_state->enhanced_framing (bsc#1012628). - drm/i915/edp: don't write to DP_LINK_BW_SET when using rate select (bsc#1012628). - drm: Update file owner during use (bsc#1012628). - drm: Fix FD ownership check in drm_master_check_perm() (bsc#1012628). - spi: spi-imx: correctly configure burst length when using dma (bsc#1012628). - arm64: dts: allwinner: h616: update emac for Orange Pi Zero 3 (bsc#1012628). - ARM: dts: dra7: Fix DRA7 L3 NoC node register size (bsc#1012628). - ARM: OMAP2+: Fix null pointer dereference and memory leak in omap_soc_device_init (bsc#1012628). - reset: Fix crash when freeing non-existent optional resets (bsc#1012628). - s390/vx: fix save/restore of fpu kernel context (bsc#1012628). - platform/x86/intel/pmc: Fix hang in pmc_core_send_ltr_ignore() (bsc#1012628). - SUNRPC: Revert 5f7fc5d69f6e92ec0b38774c387f5cf7812c5806 (bsc#1012628). - wifi: ieee80211: don't require protected vendor action frames (bsc#1012628). - wifi: iwlwifi: pcie: add another missing bh-disable for rxq->lock (bsc#1012628). - wifi: mac80211: check if the existing link config remains unchanged (bsc#1012628). - wifi: mac80211: don't re-add debugfs during reconfig (bsc#1012628). - wifi: mac80211: check defragmentation succeeded (bsc#1012628). - wifi: mac80211: mesh: check element parsing succeeded (bsc#1012628). - wifi: mac80211: mesh_plink: fix matches_local logic (bsc#1012628). - ice: fix theoretical out-of-bounds access in ethtool link modes (bsc#1012628). - bpf: syzkaller found null ptr deref in unix_bpf proto add (bsc#1012628). - Revert "net/mlx5e: fix double free of encap_header in update funcs" (bsc#1012628). - Revert "net/mlx5e: fix double free of encap_header" (bsc#1012628). - net/mlx5e: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list() (bsc#1012628). - net/mlx5e: Fix a race in command alloc flow (bsc#1012628). - net/mlx5e: fix a potential double-free in fs_udp_create_groups (bsc#1012628). - net/mlx5e: Fix overrun reported by coverity (bsc#1012628). - net/mlx5e: Decrease num_block_tc when unblock tc offload (bsc#1012628). - net/mlx5e: XDP, Drop fragmented packets larger than MTU size (bsc#1012628). - net/mlx5: Fix fw tracer first block check (bsc#1012628). - net/mlx5: Refactor mlx5_flow_destination->rep pointer to vport num (bsc#1012628). - net/mlx5e: Fix error code in mlx5e_tc_action_miss_mapping_get() (bsc#1012628). - net/mlx5e: Fix error codes in alloc_branch_attr() (bsc#1012628). - net/mlx5e: Correct snprintf truncation handling for fw_version buffer (bsc#1012628). - net/mlx5e: Correct snprintf truncation handling for fw_version buffer used by representors (bsc#1012628). - net: mscc: ocelot: fix eMAC TX RMON stats for bucket 256-511 and above (bsc#1012628). - net: mscc: ocelot: fix pMAC TX RMON stats for bucket 256-511 and above (bsc#1012628). - octeontx2-pf: Fix graceful exit during PFC configuration failure (bsc#1012628). - net: Return error from sk_stream_wait_connect() if sk_wait_event() fails (bsc#1012628). - net: sched: ife: fix potential use-after-free (bsc#1012628). - ethernet: atheros: fix a memleak in atl1e_setup_ring_resources (bsc#1012628). - net/rose: fix races in rose_kill_by_device() (bsc#1012628). - Bluetooth: Fix not notifying when connection encryption changes (bsc#1012628). - Bluetooth: Fix deadlock in vhci_send_frame (bsc#1012628). - Bluetooth: hci_event: shut up a false-positive warning (bsc#1012628). - Bluetooth: hci_core: Fix hci_conn_hash_lookup_cis (bsc#1012628). - bnxt_en: do not map packet buffers twice (bsc#1012628). - net: phy: skip LED triggers on PHYs on SFP modules (bsc#1012628). - ice: stop trashing VF VSI aggregator node ID information ... changelog too long, skipping 466 lines ... - commit e7a87d7 ==== kmozillahelper ==== - BuildRequire rpm_macro(cmake_kf5): we call cmake_kf5 to build and thus need to ensure the macro to be known. - Add extra-cmake-modules BuildRequires: fix build after recent KDE Frameworks update. ==== libarchive ==== Version update (3.7.0 -> 3.7.2) - skip write tests on 32bit, they OOM - update to 3.7.2: * Multiple vulnerabilities have been fixed in the PAX writer * bsdunzip(1) now correctly handles arguments following an - x after the zipfile * zstd filter now supports the "long" write option * SEGV and stack buffer overflow in verbose mode of cpio * bsdunzip updated to match latest upstream code * miscellaneous functional bugfixes ==== libebml ==== Version update (1.4.4 -> 1.4.5) - update to 1.4.5 (bsc#1218432): * Fix invalid memory access (reading beyond allocated memory) due to missing integer overflow check. ==== libheif ==== Version update (1.17.5 -> 1.17.6) Subpackages: gdk-pixbuf-loader-libheif libheif-aom libheif-dav1d libheif-ffmpeg libheif-jpeg libheif-openjpeg libheif-rav1e libheif-svtenc libheif1 - update to 1.17.6: * A couple of build fixes and bug fixes detected by fuzzing. * Corrects these issues: * CVE-2023-49462 - #1043 * CVE-2023-49463 - #1042 - drop libheif-CVE-2023-49462.patch, libheif-CVE-2023-49464.patch, libheif-CVE-2023-49460.patch: upstream - security update - added patches fix CVE-2023-49460 [bsc#1217902], segmentation violation in decode_uncompressed_image() + libheif-CVE-2023-49460.patch - sync ExclusiveArch with SVT-AV1 - move HEIF plugins from examples to separate package - make sure all subpackages use the same libheif1 ABI ==== libical ==== Version update (3.0.16 -> 3.0.17) - update to 3.0.17: * Escape commas in x-property TEXT values * Built-in timezones updated to tzdata2023c * icalparser_ctrl setting defines how to handle invalid CONTROL characters during parsing * New publicly available functions: + get_zone_directory() + icalparser_get_ctrl + icalparser_set_ctrl ==== libical-glib ==== Version update (3.0.16 -> 3.0.17) - update to 3.0.17: * Escape commas in x-property TEXT values * Built-in timezones updated to tzdata2023c * icalparser_ctrl setting defines how to handle invalid CONTROL characters during parsing * New publicly available functions: + get_zone_directory() + icalparser_get_ctrl + icalparser_set_ctrl ==== libjpeg-turbo ==== Version update (8.2.2 -> 8.3.2) Subpackages: libjpeg8 libjpeg8-x86-64-v3 - update to 3.0.1 (bsc#1211542, CVE-2023-2804): * The x86-64 SIMD functions now use a standard stack frame, prologue, and epilogue so that debuggers and profilers can reliably capture backtraces from within the functions. * Fixed two minor issues in the interblock smoothing algorithm that caused mathematical (but not necessarily perceptible) edge block errors when decompressing progressive JPEG images exactly two MCU blocks in width or that use vertical chrominance subsampling. * The TurboJPEG API now supports 4:4:1 (transposed 4:1:1) chrominance subsampling, which allows losslessly transposed or rotated 4:1:1 JPEG images to be losslessly cropped, partially decompressed, or decompressed to planar YUV images. * Fixed various segfaults and buffer overruns (CVE-2023-2804) * that occurred when attempting to decompress various specially-crafted malformed 12-bit-per-component and 16-bit-per-component lossless JPEG images using color quantization or merged chroma upsampling/color conversion. The underlying cause of these issues was that the color quantization and merged chroma upsampling/color conversion algorithms were not designed with lossless decompression in mind. Since libjpeg-turbo explicitly does not support color conversion when compressing or decompressing lossless JPEG images, merged chroma upsampling/color conversion never should have been enabled for such images. Color quantization is a legacy feature that serves little or no purpose with lossless JPEG images, so it is also now disabled when decompressing such images. (As a result, djpeg can no longer decompress a lossless JPEG image into a GIF image.) * Fixed an oversight in 1.4 beta1[8] that caused various segfaults and buffer overruns when attempting to decompress various specially-crafted malformed 12-bit-per-component JPEG images using djpeg with both color quantization and RGB565 color conversion enabled. * Fixed an issue whereby `jpeg_crop_scanline()` sometimes miscalculated the downsampled width for components with 4x2 or 2x4 subsampling factors if decompression scaling was enabled. This caused the components to be upsampled incompletely, which caused the color converter to read from uninitialized memory. With 12-bit data precision, this caused a buffer overrun or underrun and subsequent segfault if the sample value read from uninitialized memory was outside of the valid sample range. * Fixed a long-standing issue whereby the `tj3Transform()` function, when used with the `TJXOP_TRANSPOSE`, `TJXOP_TRANSVERSE`, `TJXOP_ROT90`, or `TJXOP_ROT270` transform operation and without automatic JPEG destination buffer (re)allocation or lossless cropping, computed the worst-case transformed JPEG image size based on the source image dimensions rather than the transformed image dimensions. If a calling program allocated the JPEG destination buffer based on the transformed image dimensions, as the API documentation instructs, and attempted to transform a specially-crafted 4:2:2, 4:4:0, 4:1:1, or 4:4:1 JPEG source image containing a large amount of metadata, the issue caused `tj3Transform()` to overflow the JPEG destination buffer rather than fail gracefully. The issue could be worked around by setting `TJXOPT_COPYNONE`. Note that, irrespective of this issue, `tj3Transform()` cannot reliably transform JPEG source images that contain a large amount of metadata unless automatic JPEG destination buffer (re)allocation is used or `TJXOPT_COPYNONE` is set. * Significantly sped up the computation of optimal Huffman tables. This speeds up the compression of tiny images by as much as 2x and provides a noticeable speedup for images as large as 256x256 when using optimal Huffman tables. * All deprecated fields, constructors, and methods in the TurboJPEG Java API have been removed. * Arithmetic entropy coding is now supported with 12-bit-per-component JPEG images. * Overhauled the TurboJPEG API to address long-standing limitations and to make the API more extensible and intuitive. ==== libqt5-qtbase ==== Version update (5.15.11+kde138 -> 5.15.12+kde147) Subpackages: libQt5Concurrent5 libQt5Core5 libQt5DBus5 libQt5Gui5 libQt5Network5 libQt5OpenGL5 libQt5PrintSupport5 libQt5Sql5 libQt5Sql5-mysql libQt5Sql5-sqlite libQt5Test5 libQt5Widgets5 libQt5Xml5 libqt5-qtbase-platformtheme-gtk3 - Update to version 5.15.12+kde147: * Http2: fix potential overflow in assemble_hpack_block() (bsc#1218413, CVE-2023-51714) * HPack: fix incorrect integer overflow check * HPack: fix a Yoda Condition - Update to version 5.15.12+kde144, rebased upstream: * QMimeDatabase: handle buggy type definitions with circular inheritance * xcb: only set base size when it's valid * QPixmapCache: fix leaking of QStrings and Keys on clear() * OpenFile portal: do not use O_PATH fds * QSystemTrayIcon: properly disconnect old menu in setContextMenu() * Guard QTabBar against nested event processing during moving tabs * QDial: don't crash when min==max and setting a value != min & max * QStandardItemModel: don't leak in mimeData() * SQL/MySQL: properly initialize variable * QWidgetTextControl: ignore invalid input method event * Update the LGPL license header * SQL/MySQL: fix handling of json column * Remove QMAKE_RANLIB and QMAKE_LINK_SHLIB from android/default_pre.prf * macOS: Fix less common writing systems on Catalina and later * Blacklist 1 tests in tst_QFtp on ubuntu-20.04 * Update bundled libpng to version 1.6.39 * Android: Fix signing of APKs that are generated when an AAB is also built * Update bundled zlib to version 1.2.13 * doc: update the limitation of QSystemTrayIcon on X11 * Blacklist 1 tests in tst_QTimer on ubuntu-20.04 * Add benchmarks for QLocale number parsing * Add benchmarks for QString number parsing * Android: Fix incorrect fullscreen dimensions * Gtk3Theme: set XCURSOR_SIZE and XCURSOR_THEME for wayland sessions * xcb: Flush Display when processing xcb events * xcb: Add xlib wrapper for XFlush() * QHostAddress: Fix incorrect comparison against 'Any' * QSsl[OpenSSL/Android]: Fix hardcoded 1_1 suffix * BLACKLIST: tst_QApplication::sendEventsOnProcessEvents for RHEL 9.0 * QMacStyle: do not set white color for grayed out button * Work round macOS's omission of en_DE from its own uiLanguages() * Suppress a deprecation warning in tst_QDateTime::toString_enumformat() * QJsonValue: fix incorrect to{Array,Object} when the value is empty * QGtk3Dialog: remove the #include for empty moc * Remove unneeded QWindow from QGtk3Dialog * tst_QSslSocket: Delete sslOptions * tst_QSslServer: Make the in-process server use TLS1.2 * Android: fix Gradle warning about using enableUncompressedNativeLibs * Mention limitation of QDir::drives() on Windows * QFileSystemEngine/Win: fix incorrect buffer size in currentPath() * Android: properly retrieve mime type of uri to for openUrl() * Android: Fix clipboard issue with urls * Android: Add a way to disable accessibility via an environment var * Update bundled libpng to version 1.6.38 * QIOSMessageDialog::exec - work around 'windowsless' exec * QIosScreen: retain the right window * tst_Q{BitArray,ContiguousCache}: check not only count(), but size(), too * QIosTextResponder: stop using deprecated constants and type * qcompilerdetection.h: detect Coverity * Android: Fix Display.getRealMetrics deprecation * Fix broken Text rendering when noantialiased NativeRendering is used * forkfd: fix Clang 15 ATOMIC_VAR_INIT deprecation warning * eglfs: Add env.var. to disable the dedicated drmHandleEvent thread * doc: Don't put strings into QVector<double> * Remove focusProxyAndInputMethods from tst_QWidget * Bump version to 5.15.12 * Update documentation of qWaitForWindowActive / qWaitForWindowExposed * QtHttp: Lower the severity of some log output * StyleSheetStyle: Fix color of placeholder texts in text edits * Android: Fix flickering on split screen mode * Update url to IAccessible2 Specification ==== libqt5-qtconnectivity ==== Version update (5.15.11+kde6 -> 5.15.12+kde6) Subpackages: libQt5Bluetooth5 libQt5Bluetooth5-imports libQt5Nfc5 libQt5Nfc5-imports libqt5-qtconnectivity-tools - Update to version 5.15.12+kde6, rebased upstream: * Bump version to 5.15.12 ==== libqt5-qtdeclarative ==== Version update (5.15.11+kde30 -> 5.15.12+kde31) - Update to version 5.15.12+kde31, rebased upstream: * QML: Fortify qmlExecuteDeferred some more * QV4: Avoid memory corruption in Reflect.apply * Blacklist 1 tests in tst_qquickanimations on macos * doc: Add note to PinchHandler.translation property about macOS trackpad * Revert "masm: Treat Android as generic Posix regarding mmap and friends" * QML: Check for stack overflows when creating objects * Fix wrong item-sizeHint-cache when StackLayout children were reordered * Doc: Add missing QQuickWindow constructor * Handle missing stops gracefully in Shape gradients * Do not crash if madvise() fails on MADV_WILLNEED * Blacklist 1 tests in tst_qquickbehaviors on macos * Avoid double applyDelegateChange in QQIV::setDelegate * QSGGeometry: add Q_DISABLE_COPY_MOVE * Qml: Don't crash on bad grouped properties * Fix TypeError in dynamicview1 example * Fix broken Text rendering when noantialiased NativeRendering is used * Trim file names before adding them to qml components and scripts * masm: Treat Android as generic Posix regarding mmap and friends * Bump version to 5.15.12 * Move StackLayout tests from qtquickcontrols.git (5.15) ==== libqt5-qtgraphicaleffects ==== Version update (5.15.11+kde0 -> 5.15.12+kde0) - Update to version 5.15.12+kde0, rebased upstream: * Bump version to 5.15.12 ==== libqt5-qtimageformats ==== Version update (5.15.11+kde12 -> 5.15.12+kde10) - Update to version 5.15.12+kde10, rebased upstream: * Bump version to 5.15.12 ==== libqt5-qtlocation ==== Version update (5.15.11+kde4 -> 5.15.12+kde6) Subpackages: libQt5Location5 libQt5Positioning5 libQt5PositioningQuick5 - Update to version 5.15.12+kde6, rebased upstream: * Fix HereMap plugin not supporting authentication via apiKey * Fix build of Qt.labs.location QML plugin * PositionSource: fix lastKnownPosition request at startup * Bump version to 5.15.12 - Drop patches, now upstream: * 0001-Fix-build-of-Qt.labs.location-QML-plugin.patch ==== libqt5-qtmultimedia ==== Version update (5.15.11+kde2 -> 5.15.12+kde2) - Update to version 5.15.12+kde2, rebased upstream: * Fix crash on macos13 with iphone camera * VideoOutput: Always update geometry when video surface format changes * VideoOutput: fix resize of a finished video * Bump version to 5.15.12 * Windows: Fix cropping for HEVC-encoded videos ==== libqt5-qtnetworkauth ==== Version update (5.15.11+kde0 -> 5.15.12+kde0) - Update to version 5.15.12+kde0, rebased upstream: * Bump version to 5.15.12 ==== libqt5-qtquickcontrols ==== Version update (5.15.11+kde0 -> 5.15.12+kde0) - Update to version 5.15.12+kde0, rebased upstream: * Bump version to 5.15.12 * Remove tests for StackLayout ==== libqt5-qtquickcontrols2 ==== Version update (5.15.11+kde5 -> 5.15.12+kde5) Subpackages: libQt5QuickControls2-5 libQt5QuickTemplates2-5 - Update to version 5.15.12+kde5, rebased upstream: * Bump version to 5.15.12 ==== libqt5-qtscript ==== Version update (5.15.15 -> 5.15.16) - Update to version 5.15.16: * Bump version to 5.15.16 - Update to version 5.15.15+kde0, rebased upstream: * No code changes - Commits dropped by the rebase: * Bump version to 5.15.15 * Bump version to 5.15.14 * BumpÂ versionÂ toÂ 5.15.13 * Bump version to 5.15.12 * Bump version to 5.15.11 * Bump version to 5.15.10 ==== libqt5-qtsensors ==== Version update (5.15.11+kde0 -> 5.15.12+kde0) Subpackages: libQt5Sensors5 libQt5Sensors5-imports - Update to version 5.15.12+kde0, rebased upstream: * Bump version to 5.15.12 ==== libqt5-qtserialport ==== Version update (5.15.11+kde0 -> 5.15.12+kde0) - Update to version 5.15.12+kde0, rebased upstream: * Bump version to 5.15.12 ==== libqt5-qtspeech ==== Version update (5.15.11+kde1 -> 5.15.12+kde1) Subpackages: libQt5TextToSpeech5 libqt5-qtspeech-plugin-speechd - Update to version 5.15.12+kde1, rebased upstream: * Bump version to 5.15.12 ==== libqt5-qtsvg ==== Version update (5.15.11+kde6 -> 5.15.12+kde6) - Update to version 5.15.12+kde6, rebased upstream: * Bump version to 5.15.12 ==== libqt5-qttools ==== Version update (5.15.11+kde3 -> 5.15.12+kde4) Subpackages: libQt5Designer5 libQt5Help5 libqt5-qdbus libqt5-qtpaths - Update to version 5.15.12+kde4, rebased upstream: * qdoc: Ensure the generated temporary header file is closed properly * Bump version to 5.15.12 ==== libqt5-qttranslations ==== Version update (5.15.11+kde0 -> 5.15.12+kde0) - Update to version 5.15.12+kde0, rebased upstream: * Bump version to 5.15.12 ==== libqt5-qtvirtualkeyboard ==== Version update (5.15.11+kde0 -> 5.15.12+kde0) Subpackages: libQt5HunspellInputMethod5 libQt5VirtualKeyboard5 libqt5-qtvirtualkeyboard-hunspell - Update to version 5.15.12+kde0, rebased upstream: * Doc: Improve locale section of technical guide * Fix visible area in the basic example * Bump version to 5.15.12 ==== libqt5-qtwayland ==== Version update (5.15.11+kde59 -> 5.15.12+kde60) Subpackages: libQt5WaylandClient5 libQt5WaylandCompositor5 - Update to version 5.15.12+kde60, rebased upstream: * Client: Always populate mimedata in drags * Client: Honor QGuiApplication::overrideCursor() * Always use blocking write for data_source.send * client: Mark return values as unused to suppress compiler warnings * tests: fix tst_seatv4 to use 24 as default cursor size * Bump version to 5.15.12 ==== libqt5-qtwebchannel ==== Version update (5.15.11+kde3 -> 5.15.12+kde3) Subpackages: libQt5WebChannel5 libQt5WebChannel5-imports - Update to version 5.15.12+kde3, rebased upstream: * Bump version to 5.15.12 ==== libqt5-qtwebsockets ==== Version update (5.15.11+kde2 -> 5.15.12+kde2) Subpackages: libQt5WebSockets5 libQt5WebSockets5-imports - Update to version 5.15.12+kde2, rebased upstream: * Bump version to 5.15.12 ==== libqt5-qtwebview ==== Version update (5.15.11+kde0 -> 5.15.12+kde0) Subpackages: libQt5WebView5 libQt5WebView5-imports - Update to version 5.15.12+kde0, rebased upstream: * Bump version to 5.15.12 ==== libqt5-qtx11extras ==== Version update (5.15.11+kde0 -> 5.15.12+kde0) - Update to version 5.15.12+kde0, rebased upstream: * Bump version to 5.15.12 ==== libqt5-qtxmlpatterns ==== Version update (5.15.11+kde0 -> 5.15.12+kde0) Subpackages: libQt5XmlPatterns5 libqt5-qtxmlpatterns-imports - Update to version 5.15.12+kde0, rebased upstream: * Bump version to 5.15.12 ==== libraw ==== Version update (0.21.1 -> 0.21.2) - update to 0.21.2: * New compile-defined limit LIBRAW_MAX_PROFILE_SIZE_MB: limits allocation/read size for embedded color profile Embedded color profile allocation/read size: limited by input file size. * Multiple fixes (mostly inspired by oss-fuzz) to improve library stability and/or input checks. * raw-identify: use fallback if PATH_MAX not available * Disabled color conversion for Canon 16-bit thumbnails * docs/changelog: explained the case when no thumbnail is found in specific file * swapXX renamed to libraw_swapXX to avoid name conflict * better striped thumbnails handling - drop libraw-CVE-2023-1729.patch (upstream) ==== libstorage-ng ==== Version update (4.5.168 -> 4.5.169) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#975 - reduce number of udevadm settle calls during probing - use in-class member initialization - proved probe function taking SystemInfo as an additional argument - fixed typos - moved code - 4.5.169 ==== lttng-ust ==== Version update (2.13.5 -> 2.13.6) - update to 2.13.6: * Fix: segmentation fault on filter interpretation in "switch" mode * Fix: `ip` context is expressed as a base-10 field * Fix: c99: use __asm__ __volatile__ * Fix: c99: static assert: clang build fails due to multiple typedef * Fix: Reevaluate LTTNG_UST_TRACEPOINT_DEFINE each time tracepoint.h is included * Fix: trace events in C++ constructors/destructors * Fix: trace events in C constructors/destructors * Fix: use unaligned pointer accesses for lttng_inline_memcpy ==== newt ==== Version update (0.52.23 -> 0.52.24) - update to 0.52.24: * add support for python3.13 * fix compiler warnings ==== nftables ==== Subpackages: libnftables1 python311-nftables - buildrequire setuptools explicitly as pip drops the dependency ==== nodejs21 ==== Subpackages: npm21 - c-ares-fixes.patch: fixes unit tests for new c-ares ==== perl-IO-Socket-SSL ==== - Fix the test t/core.t to build with OpenSSL 3.2.0. [bsc#1218342] * https://github.com/noxxi/p5-io-socket-ssl/issues/147 * Add perl-IO-Socket-SSL-Openssl32.patch ==== perl-MIME-tools ==== Version update (5.510 -> 5.511.0) - updated to 5.511 see /usr/share/doc/packages/perl-MIME-tools/ChangeLog 5.511 2024-01-02 Dianne Skoll <dianne(a)skoll.ca> * VERSION 5.511 RELEASED * Silence a warning if used with a development version of MIME::QuotedPrint https://rt.cpan.org/Ticket/Display.html?id=150118 https://rt.cpan.org/Ticket/Display.html?id=149225 ==== php8 ==== Version update (8.2.13 -> 8.2.14) Subpackages: php8-cli php8-ctype php8-dom php8-gd php8-gettext php8-iconv php8-mbstring php8-mysql php8-openssl php8-pdo php8-sqlite php8-tokenizer php8-xmlreader php8-xmlwriter - version update to 8.2.14 * This is a bug fix release. https://www.php.net/ChangeLog-8.php#8.2.14 ==== pulseaudio ==== Subpackages: libpulse-mainloop-glib0 libpulse0 pulseaudio-setup pulseaudio-utils system-user-pulse - minor fixes for setup-pulseaudio * be sure /etc/profile.d/pulseaudio.sh exists before using grep ==== python-falcon ==== Subpackages: python-falcon-doc python311-falcon - removed unneeded build dependency on python3-pygments-style-railscasts ==== python-python-slugify ==== Version update (5.0.2 -> 8.0.1) - Update to version v8.0.1: * Legal Notice / Readme * Add note on licensing (#130) * By default, prefer unidecode if installed * Update import order for unidecode vs text_unidecode (#126) * Support Matrix * SemVer Table * merge sandbox * github action revert * cmdline options * update dev deps * Up Version * Add missing cmdLine options ==== python-unicodedata2 ==== - Add %{?sle15_python_module_pythons} ==== qca-qt5 ==== Version update (2.3.7+git8 -> 2.3.7+git12) Subpackages: libqca-qt5-2 qca-qt5-plugins - Update to version 2.3.7+git12: * Increase version number * Update rootcerts.pem * test: add test for EME_PKCS1_OAEP and fix openssl >= 3.2 does not failing anymore when decrypting with the wrong key * plugins/qca-ossl: Announce tripledes unconditionally again ==== qt6-base ==== Subpackages: libQt6Core6 libQt6DBus6 libQt6Gui6 libQt6Network6 libQt6OpenGL6 libQt6Sql6 libQt6Test6 libQt6Widgets6 qt6-network-tls qt6-networkinformation-glib qt6-networkinformation-nm qt6-platformtheme-gtk3 - Add upstream patches to fix an incorrect integer overflow check (boo#1218413, CVE-2023-51714): * 0001-HPack-fix-a-Yoda-Condition.patch * 0002-HPack-fix-incorrect-integer-overflow-check.patch - Add upstream patch to fix a potential overflow in assemble_hpack_block(): * 0001-Http2-fix-potential-overflow-in-assemble_hpack_block.patch ==== sdbootutil ==== Version update (1+git20231214.b186b2d -> 1+git20231221.42797ab) Subpackages: sdbootutil-rpm-scriptlets sdbootutil-snapper - Update to version 1+git20231221.42797ab: * Do not fail if LUKS2 section is empty ==== suse-module-tools ==== Version update (16.0.39 -> 16.0.42) Subpackages: suse-module-tools-scriptlets - Update to version 16.0.42: * 60-io-scheduler.rules: test for "scheduler" sysfs attribute (boo#1216717) - Update to version 16.0.41: * rpm-script: fix issue during installation (bsc#1217775) * rpm-script: preun: remove stale .vmlinuz.hmac file * add blacklist entry for reiserfs (jsc#PED-6167) * rpm-script: add symlink /boot/.vmlinuz.hmac (bsc#1217775) * Remove kmp-install (boo#1214360) ==== tracker-miners ==== Subpackages: tracker-miner-files tracker-miners-lang - Rebase tracker-miners-drop-syscalls-in-seccomp.patch ==== unbound ==== Version update (1.18.0 -> 1.19.0) Subpackages: libunbound8 unbound-anchor - Update to 1.19.0: * Features: - Fix #850: [FR] Ability to use specific database in Redis, with new redis-logical-db configuration option. - Merge #944: Disable EDNS DO. Disable the EDNS DO flag in upstream requests. This can be helpful for devices that cannot handle DNSSEC information. But it should not be enabled otherwise, because that would stop DNSSEC validation. The DNSSEC validation would not work for Unbound itself, and also not for downstream users. Default is no. The option is disable-edns-do: no - Expose the script filename in the Python module environment 'mod_env' instead of the config_file structure which includes the linked list of scripts in a multi Python module setup; fixes #79. - Expose the configured listening and outgoing interfaces, if any, as a list of strings in the Python 'config_file' class instead of the current Swig object proxy; fixes #79. - Mailing list patches from Daniel GrÃ¶ber for DNS64 fallback to plain AAAA when no A record exists for synthesis, and minor DNS64 code refactoring for better readability. - Merge #951: Cachedb no store. The cachedb-no-store: yes option is used to stop cachedb from writing messages to the backend storage. It reads messages when data is available from the backend. The default is no. * Bug Fixes: - Fix for version generation race condition that ignored changes. - Fix #942: 1.18.0 libunbound DNS regression when built without OpenSSL. - Fix for WKS call to getservbyname that creates allocation on exit in unit test by testing numbers first and testing from the services list later. - Fix autoconf 2.69 warnings in configure. - Fix #927: unbound 1.18.0 make test error. Fix make test without SHA1. - Merge #931: Prevent warnings from -Wmissing-prototypes. - Fix to scrub resource records of type A and AAAA that have an inappropriate size. They are removed from responses. - Fix to move msgparse_rrset_remove_rr code to util/msgparse.c. - Fix to add EDE text when RRs have been removed due to length. - Fix to set ede match in unit test for rr length removal. - Fix to print EDE text in readable form in output logs. - Fix send of udp retries when ENOBUFS is returned. It stops looping and also waits for the condition to go away. Reported by Florian Obser. - Fix authority zone answers for obscured DNAMEs and delegations. - Merge #936: Check for c99 with autoconf versions prior to 2.70. - Fix to remove two c99 notations. - Fix rpz tcp-only action with rpz triggers nsdname and nsip. - Fix misplaced comment. - Merge #881: Generalise the proxy protocol code. - Fix #946: Forwarder returns servfail on upstream response noerror no data. - Fix edns subnet so that queries with a source prefix of zero cause the recursor send no edns subnet option to the upstream. - Fix that printout of EDNS options shows the EDNS cookie option by name. - Fix infinite loop when reading multiple lines of input on a broken remote control socket. Addesses #947 and #948. - Fix #949: "could not create control compt". - Fix that cachedb does not warn when serve-expired is disabled about use of serve-expired-reply-ttl and serve-expired-client-timeout. - Fix for #949: Fix pythonmod/ubmodule-tst.py for Python 3.x. - Better fix for infinite loop when reading multiple lines of input on a broken remote control socket, by treating a zero byte line the same as transmission end. Addesses #947 and #948. - For multi Python module setups, clean previously parsed module functions in __main__'s dictionary, if any, so that only current module functions are registered. - Fix #954: Inconsistent RPZ handling for A record returned along with CNAME. - Fixes for the DNS64 patches. - Update the dns64_lookup.rpl test for the DNS64 fallback patch. - Merge #955 from buevsan: fix ipset wrong behavior. - Update testdata/ipset.tdir test for ipset fix. - Fix to print detailed errors when an SSL IO routine fails via SSL_get_error. - Clearer configure text for missing protobuf-c development libraries. - autoconf. - Merge #930 from Stuart Henderson: add void to log_ident_revert_to_default declaration. - Fix #941: dnscrypt doesn't work after upgrade to 1.18 with suggestion by dukeartem to also fix the udp_ancil with dnscrypt. - Fix SSL compile failure for definition in log_crypto_err_io_code_arg. - Fix SSL compile failure for other missing definitions in log_crypto_err_io_code_arg. - Fix compilation without openssl, remove unused function warning. - Mention flex and bison in README.md when building from repository source. ==== vim ==== Version update (9.0.2181 -> 9.1.0000) Subpackages: vim-data vim-data-common xxd - update to 9.1.0000 add missing help tags regenerate synmenu proto files need update improve filetype detection for *.v (V/Verilog/Coq) Update sh syntax and add local keyword for bash Update ftplugin and omni-complete Update Version9.txt for release 9.1 Add help tags to items in version9.txt Updated German translation Improve Turkish documentation update syntax and documentation Wrong display with 'briopt=sbr' and 'nobreakindent' Updates to indent and syntax Fix folding of code blocks Provide sass_recommended_style option Updates to ftplugin and syntax Make diffs foldable Add small ftplugin add Hungarian translation Updated Russian translation remove coveralls, move runtime/lang/Make_mvc.mak correct the :public example adjust tutor/README.ru.utf-8.txt Update Italian translations missing undo_ftplugin for indentkeys cursor wrong after { in single line buffer Visual not drawn with 'breakindent' when line doesn't fit add help tag multiple-constructors. fix indentation Syntax fix LTCG compile error ARM64 for write_chars clarify behaviour of ]m and ]M motions Update default links update ConTeXt keywords and other minor fixes Add variable categories and null related documentation Update R runtime files and docs Update Ukrainian translation Coverity complains about not checking return value Clarify that new() is not static list of new/changed features in version9.txt updates to indent, syntax and ftplugin Add loong64 arch add some error codes to `:help vim9class` Vim9: inconsistent :type/:class messages add support for matchit plugin add variants of opcodes Include Vim9 class features in version9.txt Maximum callback depth is not configurable Update Serbian messages translation reformat and align :h ft-c-syntax Update syntax file Vim9: need a way to reserve future extension Add TODO support to syntax script Vim9: missing error messages update helptags POSIX function name in exarg causes issues no filetype detection for execline scripts reg_executing() wrong for :normal with range Wrong cursor position when dragging out of window Update Serbian messages translation prevent E11 on FocusGained autocommand Update Japanese translation updated 8th syntax change dependabot prefix to "CI" Update change.txt Compile error with Motif UI + mouse support Create Changelog until v9.0.2175 Update Italian translations Update tmux syntax rules Update Turkish translations Compiler warning for uninitialized var update fortran syntax rules and doc notes Vim9: segfault when assigning to type remove deprecation warning for gdefault Vim9: crash when compiling for statement and non-existing type Vim9: compiling :defer may fail Updated Irish translation Update Logtalk runtime files for the latest language spec update Racket runtime files Update colorschemes The options[] array is still not sorted alphabetically Vim9: no support for const/final class/objects vars Vim9: builtin funcs may accept a non-value Moving tabpages on :drop may cause an endless loop sync runtime files with upstream grammar & typo fixes add Tbreak command Vim9: not consistently using :var for declarations Memory leak in Configure Script when checking GTK Vim9: can simplify arg type checking code Vim9: can use type a func arg/return value escape curdir in BrowseUpDir Vim9: type can be assigned to list/dict Vim9: type documentation out-dated Vim9: not able to use imported interfaces and classes Fix i386 build instanceof() should use varargs as second arg Update syntax file, fix missing for highlight ... changelog too long, skipping 30 lines ... Type check tests fail without the channel feature ==== wireless-regdb ==== Version update (20230901 -> 20231201) - Update to version 20231201: * wireless-regdb: Update keys and maintainer information ==== yast2-trans ==== Version update (84.87.20231224.d98b72cc24 -> 84.87.20231230.7bdda36766) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20231230.7bdda36766: * New POT for text domain 'security'. * New POT for text domain 'pam'. * New POT for text domain 'ntp-client'. * New POT for text domain 'add-on'. * Translated using Weblate (Georgian) * New POT for text domain 'installation'. * New POT for text domain 'autoinst'. * Translated using Weblate (Czech) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish)

1 0

New Tumbleweed snapshot 20240103 released!
by Dominique Leuenberger 04 Jan '24

04 Jan '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: python-psycopg2 qt6-base sudo (1.9.15p4 -> 1.9.15p5) thunar (4.18.8 -> 4.18.10) === Details === ==== python-psycopg2 ==== - require setuptools ==== qt6-base ==== Subpackages: libQt6Core6 libQt6DBus6 libQt6Gui6 libQt6Network6 libQt6OpenGL6 libQt6Sql6 libQt6Test6 libQt6Widgets6 qt6-network-tls qt6-networkinformation-glib qt6-networkinformation-nm qt6-platformtheme-gtk3 - Add upstream patch for a bug in QMimeDatabase which makes impossible to save JPEG files in Qt6 applications: * 0001-QMimeDatabase-collect-glob-patterns-from.patch * https://code.qt.io/cgit/qt/qtbase.git/commit/?id=4e9944e6c8a456353d243ab268… ==== sudo ==== Version update (1.9.15p4 -> 1.9.15p5) Subpackages: sudo-plugin-python - Update to 1.9.15p5: * Fixed evaluation of the lecture, listpw, verifypw, and fdexec sudoers Defaults settings when used without an explicit value. Previously, if specified without a value they were evaluated as boolean false, even when the negation operator ('!') was not present. * Fixed a bug introduced in sudo 1.9.14 that prevented LDAP netgroup queries using the NETGROUP_BASE setting from being performed. * Sudo will now transparently rename a user's lecture file from the older name-based path to the newer user-ID-based path. GitHub issue #342. * Fixed a bug introduced in sudo 1.9.15 that could cause a memory allocation failure if sysconf(_SC_LOGIN_NAME_MAX) fails. Bug #1066. ==== thunar ==== Version update (4.18.8 -> 4.18.10) Subpackages: libthunarx-3-0 thunar-lang - Update to 4.18.10: * Prevent infinite reload loop for symlinks (#1270) - Update to 4.18.9: * g_file_get_basename over realpath (#1030) * Fix and simplify symlink resolver (#1260) * Fix thumbnailer symlink support (#1260) * Prevent GLib GIO CRITICAL (#1204) * Translation Updates

1 0

New Tumbleweed snapshot 20231228 released!
by Dominique Leuenberger 03 Jan '24

03 Jan '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: bluez (5.70 -> 5.71) ell (0.60 -> 0.61) ffmpeg-4 hxtools (20231101 -> 20231224) mozilla-nss poppler (23.11.0 -> 23.12.0) poppler-qt5 (23.11.0 -> 23.12.0) postfix protobuf-c (1.4.1 -> 1.5.0) python-Babel (2.13.1 -> 2.14.0) python-alembic (1.13.0 -> 1.13.1) python-distro (1.8.0 -> 1.9.0) python-importlib-metadata (7.0.0 -> 7.0.1) python-psutil (5.9.6 -> 5.9.7) python-unicodedata2 (15.0.0 -> 15.1.0) qpdf (11.6.4 -> 11.7.0) timezone (2023c -> 2023d) xerces-c (3.2.4 -> 3.2.5) === Details === ==== bluez ==== Version update (5.70 -> 5.71) Subpackages: bluez-auto-enable-devices bluez-cups libbluetooth3 - update to 5.71: * Fix issue with not registering CSIS service. * Fix issue with registering pairing callbacks. * Fix issue with corruption during discovery filter parsing. - drop CVE-2023-45866.patch, Fix-.device_probe-failing-if-SDP-record-is-not.patch: upstream - update bluez-disable-broken-tests.diff: disable failing vcp test ==== ell ==== Version update (0.60 -> 0.61) - Update to release 0.61 * netconfig: Always set DHCP MAC address on start * netlink: Add workaround for missing NLM_F_ACK_TLVS and NLM_F_CAPPED ==== ffmpeg-4 ==== Subpackages: libavcodec58_134 libavformat58_76 libavutil56_70 libpostproc55_9 libswresample3_9 libswscale5_9 - Update ffmpeg-glslang-cxx17.patch to build with glslang 14 - Disable vmaf integration as ffmpeg-4 cannot handle vmaf>=3 - Delete vmaf-trim-usr-local.patch ==== hxtools ==== Version update (20231101 -> 20231224) Subpackages: fd0ssh ofl - Update to release 20231224 * Add gh-trim-workflowruns script * git-forest: port to Perl 5.38 ==== mozilla-nss ==== Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs mozilla-nss-tools - add nss-allow-slow-tests-s390x.patch: "certutil dump keys with explicit default trust flags" test needs longer than the allowed 6 seconds on s390x ==== poppler ==== Version update (23.11.0 -> 23.12.0) Subpackages: libpoppler-cpp0 libpoppler-glib8 libpoppler133 poppler-tools - version update to 23.12.0 core: * Rewrite FoFiType1::parse to be more flexible * Small internal code refactoring ==== poppler-qt5 ==== Version update (23.11.0 -> 23.12.0) - version update to 23.12.0 core: * Rewrite FoFiType1::parse to be more flexible * Small internal code refactoring ==== postfix ==== - update default configuration to enable the long-term fix for bsc#1218304, CVE-2023-51764, SMTP smuggling attack: * smtpd_forbid_bare_newline = yes * smtpd_forbid_bare_newline_exclusions = $mynetworks ==== protobuf-c ==== Version update (1.4.1 -> 1.5.0) - update to 1.5.0: * Use CMAKE_CURRENT_BINARY_DIR instead of CMAKE_BINARY_DIR * remove deprecated functionality * Avoid "unused variable" compiler warning * Update autotools * Support for new Google protobuf 22.x, 23.x releases * Remove protobuf 2.x support ==== python-Babel ==== Version update (2.13.1 -> 2.14.0) - update to 2.14.0: * ``Locale.number_symbols`` will now have first-level keys for each numbering system. * Babel no longer directly depends on either ``distutils`` or ``setuptools``; if you had been using the Babel setuptools command extensions, you would need explicitly depend on ``setuptools`` * CLDR/Numbers: Add support of local numbering systems for number symbols * CLDR: Upgrade to CLDR 43 * Frontend: Allow last_translator to be passed as an option to extract_message * Frontend: Decouple `pybabel` CLI frontend from distutils/setuptools * Numbers: Improve parsing of malformed decimals ==== python-alembic ==== Version update (1.13.0 -> 1.13.1) - update to 1.13.1: * Fixed :class:`.Rewriter` so that more than two instances could be chained together correctly, also allowing multiple ``process_revision_directives`` callables to be chained. * Fixed issue where the method :meth:`.EnvironmentContext.get_x_argument` using the :paramref:`.EnvironmentContext.get_x_argument.as_dictionary` parameter would fail if an argument key were passed on the command line as a name alone, that is, without an equal sign ``=`` or a value. Behavior is repaired where this condition is detected and will return a blank string for the given key, consistent with the behavior where the ``=`` sign is present and no value. * Fixed issue where the "unique" flag of an ``Index`` would not be maintained when generating downgrade migrations. * Fixed bug in versioning model where a downgrade across a revision with two down revisions with one down revision depending on the other, would produce an erroneous state in the alembic_version table, making upgrades impossible without manually repairing the table. * Updated pep-484 typing to pass mypy "strict" mode, however including per-module qualifications for specific typing elements not yet complete. * This allows us to catch specific typing issues that have been ongoing such as import symbols not properly exported. ==== python-distro ==== Version update (1.8.0 -> 1.9.0) - update to 1.9.0: * Refactor distro.info() method to return an InfoDict [#360] * Ignore the file '/etc/board-release' [#353] * Ignore the file '/etc/ec2_version' [#359] * Test on modern versions of CPython and PyPy and macOS [#362] * Add support for ALT Linux Server 10.1 distribution [#354] * Add Debian Testing to the tests [#356] * Update archlinux resource for tests [#352] ==== python-importlib-metadata ==== Version update (7.0.0 -> 7.0.1) - update to 7.0.1: * Corrected the interface for SimplePath to encompass the expectations of locate_file and PackagePath. * Fixed type annotations to allow strings. ==== python-psutil ==== Version update (5.9.6 -> 5.9.7) - update to 5.9.7: * 2324_: enforce Ruff rule `raw-string-in-exception`, which helps providing clearer tracebacks when exceptions are raised by psutil. * 2325_, [PyPy]: psutil did not compile on PyPy due to missing `PyErr_SetExcFromWindowsErrWithFilenameObject` cPython API. - drop logind_y2038.patch (upstream) ==== python-unicodedata2 ==== Version update (15.0.0 -> 15.1.0) - update to 15.1.0: * Updated to Unicode 15.1 and added support for Python 3.12 ==== qpdf ==== Version update (11.6.4 -> 11.7.0) - update to 11.7.0: * Add QPDFAcroFormDocumentHelper::disableDigitalSignatures, which disables any digital signature fields, leaving their visual representations intact. The --remove-restrictions command-line argument now calls this. * Generate a more complete qpdf "man page" from the same source as qpdf --help. Fixes #1064. * Allow the syntax "--encrypt --user-password=user-password - -owner-password=owner-password --bits={40,128,256}" when encrypting PDF files. This is an alternative to the syntax "--encrypt user-password owner-password {40,128,256}", which will continue to be supported. The new syntax works better with shell completion and allows creation of passwords that start with "-". * When setting a check box value, allow any value other than /Off to mean checked. This is permitted by the spec. * Fix to QPDF JSON: a floating point number that appears in scientific notation will be converted to fixed-point notation, rounded to six digits after the decimal point. * Fix to QPDF JSON: the syntax "n:/pdf-syntax" is now accepted as an alternative way to represent names. This can be used for any name (e.g. "n:/text#2fplain"), but it is necessary when the name contains binary characters. * Update code and tests so that qpdf's test suite no longer depends on the output of any specific zlib implementation. This makes it possible to get a fully passing test suite with any API-compatible zlib library. CI tests with the default zlib as well as zlib-ng (including verifying that zlib-ng is not the default), but any zlib implementation should work. Fixes [#774]. * Bug fix: with --compress-streams=n, don't compress object, XRef, or linearization hint streams. * Add new C++ functions "qpdf_c_get_qpdf" and "qpdf_c_wrap" to qpdf-c.h that make it possible to write your own extern "C" functions in C++ that interoperate with the C API. See examples/extend-c-api for more information. ==== timezone ==== Version update (2023c -> 2023d) - update to 2023d: * Ittoqqortoormiit, Greenland changes time zones on 2024-03-31. * Vostok, Antarctica changed time zones on 2023-12-18. * Casey, Antarctica changed time zones five times since 2020. * Code and data fixes for Palestine timestamps starting in 2072. * A new data file zonenow.tab for timestamps starting now. * Fix predictions for DST transitions in Palestine in 2072-2075, correcting a typo introduced in 2023a. * Vostok, Antarctica changed to +05 on 2023-12-18. It had been at +07 (not +06) for years. * Change data for Casey, Antarctica to agree with timeanddate.com, by adding five time zone changes since 2020. Casey is now at +08 instead of +11. * Much of Greenland, represented by America/Nuuk, changed its standard time from -03 to -02 on 2023-03-25, not on 2023-10-28. * localtime.c no longer mishandles TZif files that contain a single transition into a DST regime. Previously, it incorrectly assumed DST was in effect before the transition too. * tzselect no longer creates temporary files. * tzselect no longer mishandles the following: * Spaces and most other special characters in BUGEMAIL, PACKAGE, TZDIR, and VERSION. * TZ strings when using mawk 1.4.3, which mishandles regular expressions of the form /X{2,}/. * ISO 6709 coordinates when using an awk that lacks the GNU extension of newlines in -v option-arguments. * Non UTF-8 locales when using an iconv command that lacks the GNU //TRANSLIT extension. * zic no longer mishandles data for Palestine after the year 2075. ==== xerces-c ==== Version update (3.2.4 -> 3.2.5) - update to 3.2.5 (bsc#1159552, CVE-2018-1311): * [XERCESC-2163] - XercesMessages_en_US.cat is installed to wrong directory * [XERCESC-2188] - Use-after-free on external DTD scan

1 0