October 2024 - openSUSE Factory - openSUSE Mailing Lists

New Tumbleweed snapshot 20241003 released!
by Dominique Leuenberger 04 Oct '24

04 Oct '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: apache2 apache2-manual apache2-prefork apache2-utils audit-secondary filesystem flatpak gtk4 (4.16.2 -> 4.16.2+10) kernel-firmware (20240913 -> 20241001) libeconf libgsf (1.14.52 -> 1.14.53) libvirt (10.7.0 -> 10.8.0) open-iscsi openSUSE-release (20241002 -> 20241003) python-anyio (4.4.0 -> 4.6.0) python-libvirt-python (10.7.0 -> 10.8.0) python-urllib3 (2.1.0 -> 2.2.3) qt6-base (6.7.2 -> 6.7.3) qt6-declarative (6.7.2 -> 6.7.3) qt6-imageformats (6.7.2 -> 6.7.3) qt6-multimedia (6.7.2 -> 6.7.3) qt6-networkauth (6.7.2 -> 6.7.3) qt6-positioning (6.7.2 -> 6.7.3) qt6-qt5compat (6.7.2 -> 6.7.3) qt6-quick3d (6.7.2 -> 6.7.3) qt6-quicktimeline (6.7.2 -> 6.7.3) qt6-sensors (6.7.2 -> 6.7.3) qt6-shadertools (6.7.2 -> 6.7.3) qt6-speech (6.7.2 -> 6.7.3) qt6-svg (6.7.2 -> 6.7.3) qt6-tools (6.7.2 -> 6.7.3) qt6-translations (6.7.2 -> 6.7.3) qt6-virtualkeyboard (6.7.2 -> 6.7.3) qt6-wayland (6.7.2 -> 6.7.3) qt6-webchannel (6.7.2 -> 6.7.3) qt6-webengine (6.7.2 -> 6.7.3) qt6-webview (6.7.2 -> 6.7.3) === Details === ==== apache2 ==== - Add /srv/www directories to filelist [bsc#1231027] (apache2 will not start since default config uses this directory) ==== apache2-manual ==== - Add /srv/www directories to filelist [bsc#1231027] (apache2 will not start since default config uses this directory) ==== apache2-prefork ==== - Add /srv/www directories to filelist [bsc#1231027] (apache2 will not start since default config uses this directory) ==== apache2-utils ==== - Add /srv/www directories to filelist [bsc#1231027] (apache2 will not start since default config uses this directory) ==== audit-secondary ==== Subpackages: audit audit-rules python3-audit system-group-audit - Readd audit-allow-manual-stop.patch (removed by mistake) - Fix plugin termination when using systemd service units (bsc#1215377) * add auditd.service-fix-plugin-termination.patch ==== filesystem ==== - Move /srv/www hierachy to the packages which use them [bsc#1231027] ==== flatpak ==== Subpackages: flatpak-remote-flathub flatpak-selinux flatpak-zsh-completion libflatpak0 system-user-flatpak - Explicitly BuildRequire selinux-policy-targeted to allow selinux_relabel_* in scriptlets to work on other codestreams ==== gtk4 ==== Version update (4.16.2 -> 4.16.2+10) Subpackages: gtk4-lang gtk4-schema gtk4-tools libgtk-4-1 typelib-1_0-Gtk-4_0 - Update to version 4.16.2+10: * wayland: Look for default cursor theme in XDG directories * wayland: Clear settings_portal when going to fallback with no portal settings * wayland: Use the same default cursor size as gsettings schema * Updated translations. ==== kernel-firmware ==== Version update (20240913 -> 20241001) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-ath12k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update to version 20241001 (git commit 51e5af813eaf): * linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) * linux-firmware: add firmware for MT7920 * amdgpu: update raven firmware * amdgpu: update SMU 13.0.10 firmware * amdgpu: update PSP 13.0.10 firmware * amdgpu: update GC 11.0.3 firmware * amdgpu: update VCN 3.1.2 firmware * amdgpu: update PSP 13.0.5 firmware * amdgpu: update PSP 13.0.8 firmware * amdgpu: update vega12 firmware * amdgpu: update PSP 14.0.4 firmware * amdgpu: update GC 11.5.2 firmware * amdgpu: update vega10 firmware * amdgpu: update VCN 4.0.0 firmware * amdgpu: update PSP 13.0.0 firmware * amdgpu: update GC 11.0.0 firmware * amdgpu: update picasso firmware * amdgpu: update beige goby firmware * amdgpu: update vangogh firmware * amdgpu: update dimgrey cavefish firmware * amdgpu: update navy flounder firmware * amdgpu: update green sardine firmware * amdgpu: update VCN 4.0.2 firmware * amdgpu: update PSP 13.0.4 firmware * amdgpu: update GC 11.0.1 firmware * amdgpu: update sienna cichlid firmware * amdgpu: update VCN 4.0.6 firmware * amdgpu: update PSP 14.0.1 firmware * amdgpu: update GC 11.5.1 firmware * amdgpu: update VCN 4.0.5 firmware * amdgpu: update PSP 14.0.0 firmware * amdgpu: update GC 11.5.0 firmware * amdgpu: update navi14 firmware * amdgpu: update renoir firmware * amdgpu: update navi12 firmware * amdgpu: update SMU 13.0.6 firmware * amdgpu: update SDMA 4.4.2 firmware * amdgpu: update PSP 13.0.6 firmware * amdgpu: update GC 9.4.3 firmware * amdgpu: update yellow carp firmware * amdgpu: update VCN 4.0.4 firmware * amdgpu: update PSP 13.0.7 firmware * amdgpu: update GC 11.0.2 firmware * amdgpu: update navi10 firmware * amdgpu: update aldebaran firmware * qcom: update gpu firmwares for qcm6490 chipset * mt76: mt7996: add firmware files for mt7992 chipset * mt76: mt7996: add firmware files for mt7996 chipset variants * qcom: add gpu firmwares for sa8775p chipset * rtw89: 8922a: add fw format-2 v0.35.42.1 - Pick up the fixed ath12k firmware from https://git.codelinaro.org/clo/ath-firmware/ath12k-firmware (bsc#1230596) - Update aliases from 6.11.x and 6.12-rc1 ==== libeconf ==== Subpackages: libeconf0 libeconf0-32bit - Updated license in the spec file to MIT. ==== libgsf ==== Version update (1.14.52 -> 1.14.53) Subpackages: gsf-office-thumbnailer libgsf-1-114 libgsf-lang - Update to version 1.14.53: + Compilation fixes for libxml 2.13 + Fix ABR in gsf-vba-dump. + Teach gsf (the tool) to handle odf properties. + Fix integer overflows affecting memory allocation. + Add missing "DocumentStatus" ole2 property. + Avoid some undefined C behaviour in overflow checks. ==== libvirt ==== Version update (10.7.0 -> 10.8.0) Subpackages: libvirt-client libvirt-daemon-common libvirt-daemon-config-network libvirt-daemon-driver-libxl libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-lock libvirt-daemon-log libvirt-daemon-plugin-lockd libvirt-daemon-qemu libvirt-daemon-xen libvirt-libs - Update to libvirt 10.8.0 - libvirt-daemon-driver-storage-core: Change dependency on nfs-utils from Requires to Recommends - Switch from YAJL to json-c for JSON parsing and formatting - jsc#PED-8909 - Many incremental improvements and bug fixes, see https://libvirt.org/news.html#v10-8-0-2024-10-01 ==== open-iscsi ==== Subpackages: libopeniscsiusr0 - Update to version 2.1.10.suse+51.fea0fde82ed1: * Incudes upstream version 2.1.10 plus some fixes * Fix firmware targets startup to always be "onboot" (#482) (bsc#1228084) * Change a discovery function to void return type (#481) * Fix gcc issues (#480) * Bugfix read specific sysfs value "off" of session attribute (#466) * Fix bug where abort_tmo read failures were ignored. (#467) * grammar nitpicks (#464) * Fix memory leak in iscsi_check_session_use_count (#465) * improve the comments in idbm_lock() (#458) * Make it visible when memory allocation failure (#457) * Better handle multiple iscsiadm commands (#453) * iscsiadm: allow hostnames in node-mode commands (#451) * Modify how workqueue priority is set (#445) * Fix authmethod check by printing a warning message when CHAP used and authmethod=None (#443) * iscsid: Rescan devices on relogin (#444) * Adds missing characters in README. (#440) * Turn off iSCSI NOP-Outs, by default. * fix: add usr/iscsid_req.h missinig underline (#431) (#436) ==== openSUSE-release ==== Version update (20241002 -> 20241003) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== python-anyio ==== Version update (4.4.0 -> 4.6.0) - update to 4.6.0: * Dropped support for Python 3.8 (as #698 cannot be resolved without cancel message support) * Fixed 100% CPU use on asyncio while waiting for an exiting task group to finish while said task group is within a cancelled cancel scope (#695) * Fixed cancel scopes on asyncio not propagating CancelledError on exit when the enclosing cancel scope has been effectively cancelled (#698) * Fixed asyncio task groups not yielding control to the event loop at exit if there were no child tasks to wait on * Fixed inconsistent task uncancellation with asyncio cancel scopes belonging to a task group when said task group has child tasks running - update to 4.5.0: * Improved the performance of anyio.Lock and anyio.Semaphore on asyncio (even up to 50 %) * Added the fast_acquire parameter to anyio.Lock and anyio.Semaphore to further boost performance at the expense of safety (acquire() will not yield control back if there is no contention) * Added support for the from_uri(), full_match(), parser methods/properties in anyio.Path, newly added in Python 3.13 (#737) * Added support for more keyword arguments for run_process() and open_process(): startupinfo, creationflags, pass_fds, user, group, extra_groups and umask (#742) * Improved the type annotations and support for PathLike in run_process() and open_process() to allow for path-like arguments, just like subprocess.Popen * Changed the ResourceWarning from an unclosed memory object stream to include its address for easier identification * Changed start_blocking_portal() to always use daemonic threads, to accommodate the "loitering event loop" use case * Bumped the minimum version of Trio to v0.26.1 * Fixed __repr__() of MemoryObjectItemReceiver, when item is not defined (#767; PR by @Danipulok) * Fixed to_process.run_sync() failing to initialize if __main__.__file__ pointed to a file in a nonexistent directory (#696) * Fixed AssertionError: feed_data after feed_eof on asyncio when a subprocess is closed early, before its output has been read (#490) * Fixed TaskInfo.has_pending_cancellation() on asyncio not respecting shielded scopes (#771; PR by @gschaffner) * Fixed SocketStream.receive() returning bytearray instead of bytes when using asyncio with ProactorEventLoop (Windows) (#776) * Fixed quitting the debugger in a pytest test session while in an active task group failing the test instead of exiting the test session (because the exit exception arrives in an exception group) * Fixed support for Linux abstract namespaces in UNIX sockets that was broken in v4.2 (#781; PR by @tapetersen) * Fixed KeyboardInterrupt (ctrl+c) hanging the asyncio pytest runner ==== python-libvirt-python ==== Version update (10.7.0 -> 10.8.0) - Update to 10.8.0 - Add all new APIs and constants in libvirt 10.8.0 - jsc#PED-8909 ==== python-urllib3 ==== Version update (2.1.0 -> 2.2.3) - Update to 2.2.3: * Features + Added support for Python 3.13. * Bugfixes + Fixed the default encoding of chunked request bodies to be UTF-8 instead of ISO-8859-1. All other methods of supplying a request body already use UTF-8 starting in urllib3 v2.0. + Fixed ResourceWarning on CONNECT with Python < 3.11.4 by backporting python/cpython#103472. + Fixed a crash where certain standard library hash functions were absent in restricted environments. + Added the Proxy-Authorization header to the list of headers to strip from requests when redirecting to a different host. As before, different headers can be set via Retry.remove_headers_on_redirect. + Allowed passing negative integers as amt to read methods of http.client.HTTPResponse as an alternative to None. + Fixed issue where InsecureRequestWarning was emitted for HTTPS connections when using Emscripten. + Fixed HTTPConnectionPool.urlopen to stop automatically casting non-proxy headers to HTTPHeaderDict. This change was premature as it did not apply to proxy headers and HTTPHeaderDict does not handle byte header values correctly yet. + Changed InvalidChunkLength to ProtocolError when response terminates before the chunk length is sent. + Changed ProtocolError to be more verbose on incomplete reads with excess content. + Added support for HTTPResponse.read1() method. + Fixed issue where requests against urls with trailing dots were failing due to SSL errors when using proxy. + Fixed HTTPConnection.proxy_is_verified and HTTPSConnection.proxy_is_verified to be always set to a boolean after connecting to a proxy. It could be None in some cases previously. + Fixed an issue where headers passed in a request with json= would be mutated + Fixed HTTPSConnection.is_verified to be set to False when connecting from a HTTPS proxy to an HTTP target. It was set to True previously. + Fixed handling of new error message from OpenSSL 3.2.0 when configuring an HTTP proxy as HTTPS + Fixed TLS 1.3 post-handshake auth when the server certificate validation is disabled * HTTP/2 (experimental) + Excluded Transfer-Encoding: chunked from HTTP/2 request body + Added a probing mechanism for determining whether a given target origin supports HTTP/2 via ALPN. + Add support for sending a request body with HTTP/2 * Removals + Drop support for end-of-life PyPy3.8 and PyPy3.9. - Drop patches, they are now included upstream: * CVE-2024-37891.patch * openssl-3.2.patch - Included patched hypercorn, which is only unpacked and used for the test suite. ==== qt6-base ==== Version update (6.7.2 -> 6.7.3) Subpackages: libQt6Concurrent6 libQt6Core6 libQt6DBus6 libQt6Gui6 libQt6Network6 libQt6OpenGL6 libQt6OpenGLWidgets6 libQt6PrintSupport6 libQt6Sql6 libQt6Test6 libQt6Widgets6 libQt6Xml6 qt6-network-tls qt6-networkinformation-glib qt6-networkinformation-nm qt6-platformtheme-gtk3 qt6-printsupport-cups qt6-sql-mysql qt6-sql-sqlite - Add upstream fix: * 0001-Revert-xcb-handle-XI2-input-button-and-motion-events.patch - Update to 6.7.3 * https://www.qt.io/blog/qt-6.7.3-released - Drop patches, merged upstream: * gcc14.patch * 0001-HTTP2-Delay-any-communication-until-encrypted-can-be.patch ==== qt6-declarative ==== Version update (6.7.2 -> 6.7.3) Subpackages: libQt6LabsAnimation6 libQt6LabsFolderListModel6 libQt6LabsQmlModels6 libQt6LabsSettings6 libQt6LabsSharedImage6 libQt6LabsWavefrontMesh6 libQt6Qml6 libQt6QmlCore6 libQt6QmlLocalStorage6 libQt6QmlModels6 libQt6QmlNetwork6 libQt6QmlWorkerScript6 libQt6QmlXmlListModel6 libQt6Quick6 libQt6QuickControls2-6 libQt6QuickControls2Impl6 libQt6QuickDialogs2-6 libQt6QuickDialogs2QuickImpl6 libQt6QuickDialogs2Utils6 libQt6QuickEffects6 libQt6QuickLayouts6 libQt6QuickParticles6 libQt6QuickShapes6 libQt6QuickTemplates2-6 libQt6QuickTest6 libQt6QuickWidgets6 qt6-declarative-imports - Update to 6.7.3 * https://www.qt.io/blog/qt-6.7.3-released ==== qt6-imageformats ==== Version update (6.7.2 -> 6.7.3) - Update to 6.7.3 * https://www.qt.io/blog/qt-6.7.3-released ==== qt6-multimedia ==== Version update (6.7.2 -> 6.7.3) Subpackages: libQt6Multimedia6 libQt6MultimediaQuick6 libQt6MultimediaWidgets6 libQt6Quick3DSpatialAudio6 libQt6SpatialAudio6 qt6-multimedia-imports - Update to 6.7.3 * https://www.qt.io/blog/qt-6.7.3-released ==== qt6-networkauth ==== Version update (6.7.2 -> 6.7.3) - Update to 6.7.3 * https://www.qt.io/blog/qt-6.7.3-released ==== qt6-positioning ==== Version update (6.7.2 -> 6.7.3) - Update to 6.7.3 * https://www.qt.io/blog/qt-6.7.3-released ==== qt6-qt5compat ==== Version update (6.7.2 -> 6.7.3) Subpackages: libQt6Core5Compat6 qt6-qt5compat-imports - Update to 6.7.3 * https://www.qt.io/blog/qt-6.7.3-released ==== qt6-quick3d ==== Version update (6.7.2 -> 6.7.3) Subpackages: libQt6Quick3D6 libQt6Quick3DAssetImport6 libQt6Quick3DAssetUtils6 libQt6Quick3DEffects6 libQt6Quick3DHelpers6 libQt6Quick3DHelpersImpl6 libQt6Quick3DParticleEffects6 libQt6Quick3DParticles6 libQt6Quick3DRuntimeRender6 libQt6Quick3DUtils6 qt6-quick3d-imports - Update to 6.7.3 * https://www.qt.io/blog/qt-6.7.3-released ==== qt6-quicktimeline ==== Version update (6.7.2 -> 6.7.3) - Update to 6.7.3 * https://www.qt.io/blog/qt-6.7.3-released ==== qt6-sensors ==== Version update (6.7.2 -> 6.7.3) Subpackages: libQt6Sensors6 - Update to 6.7.3 * https://www.qt.io/blog/qt-6.7.3-released ==== qt6-shadertools ==== Version update (6.7.2 -> 6.7.3) - Update to 6.7.3 * https://www.qt.io/blog/qt-6.7.3-released ==== qt6-speech ==== Version update (6.7.2 -> 6.7.3) Subpackages: libQt6TextToSpeech6 qt6-texttospeech - Update to 6.7.3 * https://www.qt.io/blog/qt-6.7.3-released ==== qt6-svg ==== Version update (6.7.2 -> 6.7.3) Subpackages: libQt6Svg6 libQt6SvgWidgets6 - Update to 6.7.3 * https://www.qt.io/blog/qt-6.7.3-released ==== qt6-tools ==== Version update (6.7.2 -> 6.7.3) Subpackages: libQt6Designer6 libQt6Help6 libQt6UiTools6 qt6-tools-qdbus - Update to 6.7.3 * https://www.qt.io/blog/qt-6.7.3-released - Add fix-llvm19-build.patch to fix build with LLVM 19. Upstream report is at https://bugreports.qt.io/browse/QTBUG-129146. ==== qt6-translations ==== Version update (6.7.2 -> 6.7.3) - Update to 6.7.3 * https://www.qt.io/blog/qt-6.7.3-released ==== qt6-virtualkeyboard ==== Version update (6.7.2 -> 6.7.3) Subpackages: libQt6HunspellInputMethod6 libQt6VirtualKeyboard6 qt6-virtualkeyboard-imports - Update to 6.7.3 * https://www.qt.io/blog/qt-6.7.3-released ==== qt6-wayland ==== Version update (6.7.2 -> 6.7.3) Subpackages: libQt6WaylandClient6 libQt6WaylandCompositor6 libQt6WaylandEglClientHwIntegration6 libQt6WaylandEglCompositorHwIntegration6 libQt6WlShellIntegration6 - Update to 6.7.3 * https://www.qt.io/blog/qt-6.7.3-released - Drop patches, merged upstream: * 0001-Client-Ensure-that-guessed-popup-parent-has-a-shell-.patch * 0001-client-Guard-against-windows-being-on-a-null-screen.patch * 0002-Client-Improve-thread-safety-determining-window-size.patch ==== qt6-webchannel ==== Version update (6.7.2 -> 6.7.3) Subpackages: libQt6WebChannel6 libQt6WebChannelQuick6 qt6-webchannel-imports - Update to 6.7.3 * https://www.qt.io/blog/qt-6.7.3-released ==== qt6-webengine ==== Version update (6.7.2 -> 6.7.3) Subpackages: libQt6WebEngineCore6 libQt6WebEngineQuick6 libQt6WebEngineWidgets6 qt6-webengine-imports - Update to 6.7.3 * https://www.qt.io/blog/qt-6.7.3-released ==== qt6-webview ==== Version update (6.7.2 -> 6.7.3) - Update to 6.7.3 * https://www.qt.io/blog/qt-6.7.3-released

1 0

Which uptime implementation for the future?
by Thorsten Kukuk 04 Oct '24

04 Oct '24

Hello, There are current two "uptime" implementations with different behavior: 1. coreutils The GNUlib developers are of the opinion, that /proc/uptime is not correct, as the kernel does not count the time as uptime, in which a VM is stopped. I have no idea if the time where a VM is stopped should be really counted as uptime, I would say no. The problem with their implementation is, that we have several bug reports, that the uptime is wrong. Reason is, that they try to determine the boot time via timestamps from files, and if the machine has no RTC this time is most likely wrong. In other cases, the time does not get updated or the tools counts soft-reboots as real reboots. Feedback from last weeks All Systems Go! conference is, that they see the coreutils uptime behavior as bug. 2. procps-ng It's using /proc/uptime, which means it reports the uptime as the kernel sees it. Due to the problems with 1), shouldn't we switch to 2)? Regards, Thorsten -- Thorsten Kukuk, Distinguished Engineer, Senior Architect, Future Technologies SUSE Software Solutions Germany GmbH, Frankenstraße 146, 90461 Nuernberg, Germany Managing Director: Ivo Totev, Andrew McDonald, Werner Knoblich (HRB 36809, AG Nürnberg)

4 3

Tumbleweed - Review of the week 2024/40
by Dominique Leuenberger 04 Oct '24

04 Oct '24

Dear Tumbleweed users and hackers, We released six snapshots during 2024/40 (0926, 0927, 0929, 0930, 1001, and 1002). Bsed on personal feelings, the week seemed ‘mixed’ – Requests came in, and requests went out. And a few things seem to hang there for longer again. Let’s first look at what you have received during the last week, starting on the positive side of things: * Bash 5.2.37 * cURL 8.10.1 * fwupd 1.9.25 * GStreamer 1.24.8 * GTK 4.16.2 * Linux kernel 6.11.0 * openSSH 9.9p1 * systemd 256.6 * TCL 8.6.15 * PostgreSQL 17.0 (final release) * LibreOffice 24.8.2.1 * PHP 8.3.12 * Audit 4.0 * timezone 2024b * Virtualbox 7.1.0 * Cups 2.4.11 * AppArmor 4.0.3 * grub2: introduces a new package, grub2-x86_64-efi-bls, which includes a straightforward grubbls.efi file On the staging projects, we have some larger changes being worked on by multiple people. Some of the more interesting changes to come are: * Libproxy 0.5.9 * KDE Plasma 6.2 * GNOME 47: webkit2gtk3 breaks python-wxPython on i586; help appreciated * Busybox 1.37.0 * XWayland 24.1.3 * LLVM 19 * Mesa 24.2.x: https://gitlab.freedesktop.org/mesa/mesa/-/issues/11840 * Change of the default LSM (opted in at installation) to SELinux. AppArmor is still an option, just not the default. This change only impacts new installations. Cheers, Dominique

1 0

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 04 Oct '24

04 Oct '24

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have had problems for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - notcurses: Fails to build - python-django-silk: Fails to build - python-ligo-segments: Fails to build - python-moto: Fails to build - python-swifter: Fails to build Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

2 1

New Tumbleweed snapshot 20241002 released!
by Dominique Leuenberger 03 Oct '24

03 Oct '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: SDL2 (2.30.7 -> 2.30.8) apparmor (4.0.2 -> 4.0.3) autoyast2 (5.0.2 -> 5.0.3) branding-openSUSE glibc grub2 libapparmor (4.0.2 -> 4.0.3) libarchive (3.7.4 -> 3.7.6) mozjs115 openSUSE-release (20241001 -> 20241002) opensc python-PyYAML (6.0.1 -> 6.0.2) systemd-presets-common-SUSE virtualbox virtualbox-kmp yast2 (5.0.9 -> 5.0.10) yast2-iscsi-client (5.0.2 -> 5.0.3) yast2-security (5.0.1 -> 5.0.2) yast2-users (5.0.2 -> 5.0.3) === Details === ==== SDL2 ==== Version update (2.30.7 -> 2.30.8) - Update to release 2.30.8 * Fixed a crash in XInput code at startup * Fixed flooding the OS with I/O when a PS4/PS5 controller is disconnected * Added SDL_VIDEO_DOUBLE_BUFFER support to the Wayland backend * SDL_WINDOWEVENT_EXPOSED is sent appropriately when using Wayland * Fixed hang at startup in audio code when the application has large stack usage on Linux * Fixed initializing KMSDRM on older Linux systems ==== apparmor ==== Version update (4.0.2 -> 4.0.3) Subpackages: apparmor-abstractions apparmor-docs apparmor-parser apparmor-parser-lang apparmor-profiles apparmor-utils apparmor-utils-lang python3-apparmor - add mesa-cachedir.diff: new cachedir in Mesa 24.2.2 - update to AppArmor 4.0.3 - several small bugfixes - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.0.3 for the full release notes ==== autoyast2 ==== Version update (5.0.2 -> 5.0.3) Subpackages: autoyast2-installation - Removed obsolete USERADD_CMD, USERDEL_PRECMD, USERDEL_POSTCMD (bsc#1231006) - 5.0.3 ==== branding-openSUSE ==== Subpackages: grub2-branding-openSUSE libreoffice-branding-openSUSE plymouth-branding-openSUSE wallpaper-branding-openSUSE yast2-qt-branding-openSUSE - Install the grub2 branding if grub2-common is present ==== glibc ==== Subpackages: glibc-32bit glibc-devel glibc-extra glibc-gconv-modules-extra glibc-gconv-modules-extra-32bit glibc-lang glibc-locale glibc-locale-base nscd - langpacks are no more used. Drop glibc-2.3.90-langpackdir.diff. - gen-tempname-randomness.patch: Fix missing randomness in __gen_tempname (bsc#1230965, BZ #32214) - Use nss-systemd by default also in SLE (bsc#1230638) ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - Introduces a new package, grub2-x86_64-efi-bls, which includes a straightforward grubbls.efi file. This file can be copied to the EFI System Partition (ESP) along with boot fragments in the Boot Loader Specification (BLS) format * 0001-Streamline-BLS-and-improve-PCR-stability.patch - Fix crash in bli module (bsc#1226497) * 0001-bli-Fix-crash-in-get_part_uuid.patch - Rework package dependencies: grub2-common now includes common userland utilities and is required by grub2 platform packages. grub2 is now a meta package that pulls in the default platform package. ==== libapparmor ==== Version update (4.0.2 -> 4.0.3) - add mesa-cachedir.diff: new cachedir in Mesa 24.2.2 - update to AppArmor 4.0.3 - several small bugfixes - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.0.3 for the full release notes ==== libarchive ==== Version update (3.7.4 -> 3.7.6) - Update to 3.7.6: * tar: clean up linkpath between entries * tar: fix memory leaks when processing symlinks or parsing pax headers * iso: be more cautious about parsing ISO-9660 timestamps - Version 3.7.5 changes: * fix multiple vulnerabilities identified by SAST * cpio: ignore out-of-range gid/uid/size/ino and harden AFIO parsing * lzop: prevent integer overflow * rar4: protect copy_from_lzss_window_to_unp() (CVE-2024-20696, bsc#1225971) * rar4: fix CVE-2024-26256 (CVE-2024-26256, bsc#1225972) * rar4: fix OOB in delta and audio filter * rar4: fix out of boundary access with large files * rar4: add boundary checks to rgb filter * rar4: fix OOB access with unicode filenames * rar5: clear 'data ready' cache on window buffer reallocs * rpm: calculate huge header sizes correctly * unzip: unify EOF handling * util: fix out of boundary access in mktemp functions * uu: stop processing if lines are too long * 7zip: fix issue when skipping first file in 7zip archive that is a multiple of 65536 bytes * ar: fix archive entries having no type * lha: do not allow negative file sizes * lha: fix integer truncation on 32-bit systems * shar: check strdup return value * rar5: don't try to read rediculously long names * xar: fix another infinite loop and expat error handling * many Windows fixes, cleanups and improvements - Drop fix-soversion.patch, fix-bsdunzip-test.patch * Fixed upstream ==== mozjs115 ==== - Add mozjs115-CVE-2024-45492.patch: Backporting 9bf0f2c1 from libexpat upstream, Detect integer overflow in function nextScaffoldPart. (CVE-2024-45492, bsc#1230038) - Add mozjs115-CVE-2024-45491.patch: Backporting 8e439a99 from libexpat upstream, Detect integer overflow in dtdCopy. (CVE-2024-45491, bsc#1230037) - Add mozjs115-CVE-2024-45490-part01-5c1a3164.patch: Backporting 5c1a3164 from libexpat upstream, Reject negative len for XML_ParseBuffer. CVE-2024-45490's fixes including 3 parts: 5c1a3164 for libexpat sources; c12f039b for libexpat tests; 2db23301 for libexpat docs; Because mozjs only embeds libexpat sources, so unnecessary to port prart02 and part03. (CVE-2024-45490, bsc#1230036) ==== openSUSE-release ==== Version update (20241001 -> 20241002) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== opensc ==== Subpackages: opensc-bash-completion - - Security fix: [CVE-2024-8443, bsc#1230364] * opensc: heap buffer overflow in OpenPGP driver when generating key * Added patch: opensc-CVE-2024-8443.patch - Security fix: [opensc-CVE-2024-45620, bsc#1230076] - Security fix: [opensc-CVE-2024-45619, bsc#1230075] - Security fix: [opensc-CVE-2024-45618, bsc#1230074] - Security fix: [opensc-CVE-2024-45617, bsc#1230073] - Security fix: [opensc-CVE-2024-45616, bsc#1230072] - Security fix: [opensc-CVE-2024-45615, bsc#1230071] * opensc: pkcs15init: Usage of uninitialized values in libopensc and pkcs15init * opensc: Uninitialized values after incorrect check or usage of APDU response values in libopensc * opensc: Uninitialized values after incorrect or missing checking return values of functions in libopensc * opensc: Uninitialized values after incorrect or missing checking return values of functions in pkcs15init * opensc: Incorrect handling length of buffers or files in libopensc * opensc: Incorrect handling of the length of buffers or files in pkcs15init * Added patches: - opensc-CVE-2024-45615.patch - opensc-CVE-2024-45616.patch - opensc-CVE-2024-45617.patch - opensc-CVE-2024-45618.patch - opensc-CVE-2024-45619.patch - opensc-CVE-2024-45620.patch ==== python-PyYAML ==== Version update (6.0.1 -> 6.0.2) - Update to 6.0.2 * Support for Cython 3.x and Python 3.13 - Adjust invocation path for testsuite - Adjust upstream source name in spec file - Drop build-with-cython3.patch, merged upstream ==== systemd-presets-common-SUSE ==== - Enable audit-rules: audit-rules has been split form audit with version 4.0 in order to be able to load rules earlier. From audit changelog: One of the main features is the separation of loading rules and logging events into separate services, audit-rules.service and auditd.service. ==== virtualbox ==== - Edit cxx17.patch to make the Extension Pack work with our compiler flags and RT_NOEXCEPT choices. [boo#1231225] - Set BuildRequire on glslang to 11.5; this is when it starts to recognize GL_EXT_spirv_intrinsics. ==== virtualbox-kmp ==== - Edit cxx17.patch to make the Extension Pack work with our compiler flags and RT_NOEXCEPT choices. [boo#1231225] - Set BuildRequire on glslang to 11.5; this is when it starts to recognize GL_EXT_spirv_intrinsics. ==== yast2 ==== Version update (5.0.9 -> 5.0.10) Subpackages: yast2-logs - Removed obsolete USERADD_CMD, USERDEL_PRECMD, USERDEL_POSTCMD, GROUPADD_CMD (bsc#1231006) - 5.0.10 ==== yast2-iscsi-client ==== Version update (5.0.2 -> 5.0.3) - Fixes for bsc#1228084: - Inst client: Read sessions just after auto login in order to enable services at the end of the installation if needed - Finish client: enable iscsiuio.service instead of the socket - Use ip for reading the ip address of a given device instead of the deprecated ifconfig command - 5.0.3 ==== yast2-security ==== Version update (5.0.1 -> 5.0.2) - Drop obsolete USERADD_CMD, USERDEL_PRECMD, USERDEL_POSTCMD in /etc/login.defs.d/70-yast.defs (bsc#1231006) - 5.0.2 ==== yast2-users ==== Version update (5.0.2 -> 5.0.3) - Removed obsolete USERADD_CMD, USERDEL_PRECMD, USERDEL_POSTCMD, GROUPADD_CMD (bsc#1231006) - 5.0.3

1 0

New Slowroll update 20241003T1138 released!
by bernhardout＠lsmod.de 03 Oct '24

03 Oct '24

Please note that this mail was generated by a script. A collection of maintenance updates was released for Slowroll. Released 35 packages: * bugzilla * buildah * contrast * cosmic-applets * cosmic-comp * cosmic-files * cosmic-launcher * cosmic-store * cosmic-term * ffmpeg-6 * frr * geany-plugins * go1.22 * go1.23 * gstreamer-editing-services * gstreamer-plugins-bad * jafama * kbuild * libarchive * meson * microos-tools * mozjs115 * mozjs78 * newsflash * opensc * pika-backup * python-bugzilla * python-drgn * python-postorius * python-testtools * python313 * rioterm * shotwell * tigervnc * xdg-desktop-portal-hyprland

1 0

New Tumbleweed snapshot 20241001 released!
by Dominique Leuenberger 02 Oct '24

02 Oct '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: coreutils coreutils-systemd cups (2.4.10 -> 2.4.11) desktop-translations fprintd (1.94.3 -> 1.94.4) gnutls libgtop (2.41.3 -> 2.41.3+4) libjpeg-turbo librsvg (2.58.4 -> 2.59.1) mtools (4.0.44 -> 4.0.45) ncurses (6.5.20240922 -> 6.5.20240928) openSUSE-release (20240930 -> 20241001) opencc (1.1.7 -> 1.1.9) selinux-policy (20240925 -> 20240930) suse-module-tools (16.0.51 -> 16.0.52) xen (4.19.0_02 -> 4.19.0_04) === Details === ==== coreutils ==== Subpackages: coreutils-lang - coreutils-i18n.patch: fold(1): fix fold -b with UTF8 locale. Sync fix in I18N patch from Fedora/Redhat and add a test. (RHEL-60295) Original report: https://access.redhat.com/solutions/3459791 ==== coreutils-systemd ==== - coreutils-i18n.patch: fold(1): fix fold -b with UTF8 locale. Sync fix in I18N patch from Fedora/Redhat and add a test. (RHEL-60295) Original report: https://access.redhat.com/solutions/3459791 ==== cups ==== Version update (2.4.10 -> 2.4.11) Subpackages: cups-client cups-config libcups2 libcupsimage2 - Version upgrade to 2.4.11: See https://github.com/openprinting/cups/releases CUPS 2.4.11 brings several bug fixes regarding IPP response validation, processing PPD values, Web UI support (checkbox support, modifying printers) and others fixes. Detailed list (from CHANGES.md): * Updated the maximum file descriptor limit for `cupsd` to 64k-1 (Issue #989) * Fixed `lpoptions -d` with a discovered but not added printer (Issue #833) * Fixed incorrect error message for HTTP/IPP errors (Issue #893) * Fixed JobPrivateAccess and SubscriptionPrivateAccess support for "all" (Issue #990) * Fixed issues with cupsGetDestMediaByXxx (Issue #993) * Fixed adding and modifying of printers via the web interface (Issue #998) * Fixed HTTP PeerCred authentication for domain users (Issue #1001) * Fixed checkbox support (Issue #1008) * Fixed printer state notifications (Issue #1013) * Fixed IPP Everywhere printer setup (Issue #1033) Issues are those at https://github.com/OpenPrinting/cups/issues In particular CUPS 2.4.11 contains those commit regarding IPP response validation and processing PPD values: * "Quote PPD localized strings" https://github.com/OpenPrinting/cups/commit/1e6ca5913eceee906038bc04cc7ccfb… plus a cleanup to "Fix warnings for unused vars" https://github.com/OpenPrinting/cups/commit/2abe1ba8a66864aa82cd9836b37e571… - Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.11 - avoid_C99_mode_for_loop_initial_declarations.patch is no longer needed because the issue is fixed upstream. ==== desktop-translations ==== - Add support for the new tool %suse_translate_desktop. (boo#1158957) - Generate desktop-translation-devel for purpose of translation check. (boo#1158957) ==== fprintd ==== Version update (1.94.3 -> 1.94.4) Subpackages: fprintd-lang fprintd-pam - update to 1.94.4 * Support building in other non-linux unix platforms (FreeBSD tested) * Bump minimum glib dependency version to 2.64 * Allow interactive DBus authorization on fprintd-tools * Use prefix to determine the PAM modules dir * Translation updates ==== gnutls ==== Subpackages: libgnutls-dane0 libgnutls30 libgnutls30-32bit - Build with liboqs to support the X25519Kyber768 post-quantum key exchange algorithm. ==== libgtop ==== Version update (2.41.3 -> 2.41.3+4) Subpackages: libgtop-2_0-11 libgtop-lang - Update to version 2.41.3+4: + Reproducible Builds: Do not embed build-server kernel version on Linux (boo#1230850). + Updated translations. ==== libjpeg-turbo ==== Subpackages: libjpeg8 libjpeg8-x86-64-v3 - update to 3.0.4: * Fixed an issue whereby the CPU usage of the default marker processor in the decompressor grew exponentially with the number of markers. This caused an unreasonable slow-down in `jpeg_read_header()` if an application called `jpeg_save_markers()` to save markers of a particular type and then attempted to decompress a JPEG image containing an excessive number of markers of that type. * Hardened the default marker processor in the decompressor to guard against an issue (exposed by 3.0 beta2[6]) whereby attempting to decompress a specially-crafted malformed JPEG image (specifically an image with a complete 12-bit-per-sample Start Of Frame segment followed by an incomplete 8-bit-per-sample Start Of Frame segment) using buffered-image mode and input prefetching caused a segfault if the `fill_input_buffer()` method in the calling application's custom source manager incorrectly returned `FALSE` in response to a prematurely-terminated JPEG data stream. * Fixed an issue in cjpeg whereby, when generating a 12-bit-per-sample or 16-bit-per-sample lossless JPEG image, specifying a point transform value greater than 7 resulted in an error ("Invalid progressive/lossless parameters") unless the `-precision` option was specified before the `-lossless` option. * Fixed a regression introduced by 3.0.3[3] that made it impossible for calling applications to generate 12-bit-per-sample arithmetic-coded lossy JPEG images using the TurboJPEG API. * Fixed an error ("Destination buffer is not large enough") that occurred when attempting to generate a full-color lossless JPEG image using the TurboJPEG Java API's `byte[] TJCompressor.compress()` method if the value of `TJ.PARAM_SUBSAMP` was not `TJ.SAMP_444`. * Fixed a segfault in djpeg that occurred if a negative width was specified with the `-crop` option. Since the cropping region width was read into an unsigned 32-bit integer, a negative width was interpreted as a very large value. With certain negative width and positive left boundary values, the bounds checks in djpeg and `jpeg_crop_scanline()` overflowed and did not detect the out-of-bounds width, which caused a buffer overrun in the upsampling or color conversion routine. Both bounds checks now use 64-bit integers to guard against overflow, and djpeg now checks for negative numbers when it parses the crop specification from the command line. * Fixed an issue whereby the TurboJPEG lossless transformation function and methods checked the specified cropping region against the source image dimensions and level of chrominance subsampling rather than the destination image dimensions and level of chrominance subsampling, which caused some cropping regions to be unduly rejected when performing 90-degree rotation, 270-degree rotation, transposition, transverse transposition, or grayscale conversion. * Fixed an issue whereby the TurboJPEG lossless transformation function and methods did not honor `TJXOPT_COPYNONE`/`TJTransform.OPT_COPYNONE` unless it was specified for all lossless transforms. ==== librsvg ==== Version update (2.58.4 -> 2.59.1) Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2 rsvg-thumbnailer typelib-1_0-Rsvg-2_0 - Update to version 2.59.1: + Two mitigations for crashes found throuh fuzz testing: - Cairo is easy to crash by giving it path coordinates that are outside of the range that it can represent internally with its fixed-point arithmetic. Fuzzers usually produce SVGs with very large numbers for coordinates, which overflow Cairo's arithmetic. This is just a *mitigation*, not a complete fix: librsvg will now check if path coordinates are outside of Cairo's supported range, and it will not render shapes with problematic coordinates. However, fuzzers may still produce coordinates that are in range but that still make Cairo crash. I am starting to learn Cairo's code to see if this can be fixed gradually. - Update to version 2.59.0: + The biggest change in this release is that librsvg now uses the Meson build system instead of autotools. + With Meson, librsvg now builds a lot more reliably on Windows and MacOS. + Librsvg now uses Meson instead of Autotools + There is a -Davif meson option to include support for AVIF in the image-rs crate, which librsvg uses to load raster images. + Librsvg now explicitly builds only its supported raster formats for image-rs: JPEG, PNG, GIF, WEBP, and optional compile-time support for AVIF). Other raster image formats are not supported, to minimize the attack surface. + Librsvg now supports cancellable rendering; you can start rendering an RsvgHandle in one thread, and stop it from another thread with a GCancellable. In the C API, you can use the rsvg_handle_set_cancellable_for_rendering() function; in the Rust API, CairoRenderer now has a with_cancellable() method. + For Rust users, there is now a 'librsvg-rebind' crate that binds the C API for use from Rust. Internally this links to the system's librsvg shared library, in contrast with the 'librsvg' crate, which is statically linked and which has a native Rust API. The 'librsvg-rebind' crate is for cases where the additional code size from static linking is not desired. This librsvg-rebind crate is available from crates.io. + A bunch of fixes to bugs found through fuzz testing. - Use ldconfig_scriptlets macro for some of the post(un) handling. - Update to version 2.58.94: + The minimum supported Rust version (MSRV) is 1.77.2. + Fix assertion failures with large Hue value in hsl() or hwb() colors. + Limit the baseFrequency for feTurbulence to avoid integer overflow. + Only make exported symbols visible in the library's binary. + Fix the -Davif=enabled feature; it was not being handled correctly at compilation time. + Ensure compatibility with Binutils < 2.39. + Build fixes for Windows. - Update to version 2.58.92: + Librsvg is now part of Google's oss-fuzz and is fuzz-tested automatically - see https://gnome.pages.gitlab.gnome.org/librsvg/devel-docs/oss_fuzz.html for details. + This release has two bug fixes from fuzz testing, and a new API call: - Don't leak XML entities when the XML document fails to parse. - Fix stack overflow in <use> reference cycle. - Librsvg now supports cancellable rendering; you can start rendering an RsvgHandle in one thread, and stop it from another thread with a GCancellable. In the C API, you can use the rsvg_handle_set_cancellable_for_rendering() function; in the Rust API, CairoRenderer now has a with_cancellable() method. + Many build fixes for Windows, MacOS, iOS, and cross-compilation + Continued refactoring for a render tree. + Many fixes to the documentation. - Update to version 2.58.91: + Librsvg now requires cairo version 1.18.0 or later. + Librsvg now explicitly builds only its supported raster formats for image-rs: JPEG, PNG, GIF, WEBP, and optional compile-time support for AVIF. Other raster image formats are not supported, to minimize the attack surface. + Don't generate gdk-pixbuf loaders cache if DESTDIR is set. + Documentation updates for meson. + Document the fact that the default DPI in the C API for RsvgHandle is 90 DPI, unlike rsvg-convert and the Rust API, which use 96 DPI. + Document the security considerations for the image-rs crate and the raster image formats that librsvg supports. + Fix and fine-tune compilation on Windows (MSVC and msys2), MacOS, and Android. + Fix installation when only compiling the static library. + Update Pango for CI and fix a test file. The test suite now includes the DejaVu Sans font, which supports extra glyphs/languages for the test suite. - Changesfrom version 2.58.90: + librsvg has been ported to the Meson build system. Librsvg no longer uses autotools! + Changes in this release: - Librsvg now uses Meson instead of Autotools. - There is a -Davif meson option to include support for AVIF in the image-rs crate, which librsvg uses to load raster images. - Start revamping the fuzzing infrastructure. - Add cargo-c and pkgconfig(dav1d) BuildRequires: new dependencies. ==== mtools ==== Version update (4.0.44 -> 4.0.45) - version update to 4.0.45 * Fixed iconv descriptor leak * Fixed size of error message buffer ==== ncurses ==== Version update (6.5.20240922 -> 6.5.20240928) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch 20240928 + improve error-message from infocmp when a terminal entry cannot be opened (patch by Branden Robinson). + improve filtering of -L options in misc/gen-pkgconfig.in and in misc/ncurses-config.in + add check in wresize() for out-of-range dimensions (report by Peter Bierma). ==== openSUSE-release ==== Version update (20240930 -> 20241001) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== opencc ==== Version update (1.1.7 -> 1.1.9) Subpackages: libopencc1_1 opencc-data - update to 1.1.9: * Change googletest to bazel dev_dependency. * Add Installation details in readme. * Test of Github FUNDING.yml * Fix npmignore. * Apply patch to rapidjson. * Use Python 3. * Add Bazel Python library and test. * Add back Config::NewFromFile with one argument to maintain the ABI compatibility. ==== selinux-policy ==== Version update (20240925 -> 20240930) Subpackages: selinux-policy-targeted - Update to version 20240930: * Label yast binaries correctly ==== suse-module-tools ==== Version update (16.0.51 -> 16.0.52) Subpackages: suse-module-tools-scriptlets - Update to version 16.0.52: * rpm-script: create vmlinuz and initrd also in image build environments (bsc#1231040, bsc#1230858) * regenerate-initrd-posttrans: Fix SKIP_REGENERATE_INITRD_ALL (bsc#1228929) ==== xen ==== Version update (4.19.0_02 -> 4.19.0_04) Subpackages: xen-libs xen-tools xen-tools-domU - bsc#1230366 - VUL-0: CVE-2024-45817: xen: x86: Deadlock in vlapic_error() (XSA-462) 66f2af41-x86-vLAPIC-undue-recursion-of-vlapic_error.patch Drop xsa462.patch - Upstream bug fixes (bsc#1027519) 66cf737b-x86-Dom0-disable-SMAP-for-PV-only.patch 66d6dca8-libxl-nul-termination-in-xen_console_read_line.patch 66d8690f-SUPPORT-split-XSM-from-Flask.patch 66e29480-x86-HVM-properly-reject-indirect-VRAM-writes.patch 66e44ae2-x86-ucode-AMD-buffer-underrun.patch 66f2fd92-x86-ucode-Intel-stricter-sanity-check.patch - bsc#1230366 - VUL-0: CVE-2024-45817: xen: x86: Deadlock in vlapic_error() (XSA-462) xsa462.patch

1 0

[opensuse-factory] reproducible builds status 2024-09
by Bernhard M. Wiedemann 02 Oct '24

02 Oct '24

Hi, I did plenty of patches this month. I spent a week in Hamburg on the r-b-world-summit, having good discussions and finding nice patches from Debian (thanks Mattia). With ring0 being reproducible, I concentrated on ring1 packages. I dropped efl and mono-core that are not needed there. I started to collect various details about my R-B-OS in https://en.opensuse.org/openSUSE:Reproducible_openSUSE/Part1 and https://en.opensuse.org/openSUSE:Reproducible_openSUSE/Part2 I worked with Fridrich Strba to greatly improve the reproducibility of java-related packages. This cut the number of remaining packages with issues in half. He made nice toolchain-patches for ant, xmvn and several maven-plugins, mostly for normalizing jar mtimes. https://github.com/mesonbuild/meson-python/issues/671 also stands out, because this affects at least 6 python packages. I have a workaround now. The kernel became reproducible after switching generation of Sphinx docs and BTF to -j1 to workaround race-conditions (partial fixes for the races exist). Two major items on my todo-list are: * write an rb-checker bot that tests submissions to Factory * fix non-determinism in emacs .pdmp files ( https://mail.gnu.org/archive/html/emacs-devel/2024-10/msg00004.html ) ; the alternative would be to drop it from my R-B-OS and lose tools that depend on it: a2ps anthy autoconf avfs caml-mode ddskk global gnugo gnuplot idutils librep maildir-utils notmuch psgml quilt rtags scheme48 supercollider tamago translate-shell uim vagrant xdp-tools xemacs-packages xslide Here are the autogenerated bits: last month's status: https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… Last months' reproducible builds project updates (including my work): https://reproducible-builds.org/reports/2024-08/ I uploaded https://rb.zq1.de/compare.factory-20241002/ today https://rb.zq1.de/spec/glossar.txt explains the meaning of below values: total-packages: 15806 (+98) build-tried: 15741 (+100) build-failed: 12 (+5) build-n-a: 180 (+0) build-succeeded: 15549 (+95) build-official-failed+na: 52 (-106) build-compare-failed: 153 (+1) build-compare-succeeded: 15396 (+94) verify-failed: 255 (+4) verified-semi-reproducible: 15106 (+95) verified-bit-identical: 13634 (-12) bit-by-bit-identical: 15292 (+467) not-bit-by-bit-identical: 258 (-366) not-bit-by-bit-identicalcheck: 257 (-372) https://rb.zq1.de/compare.factory-20241002/graph.png shows the change over time https://rb.zq1.de/compare.factory-20241002/unreproduciblerings.txt lists very unreproducible core packages (bootstrap+DVD) Of the badly unreproducible packages, 3 were in ring0 27 were in ring1 That makes it 30/4043 => 0.74 % which is below the overall average of 153/15549 => 0.98 % 258/15549 => 1.66 % of packages are not perfectly reproducible package notes: ==> ./agama-integration-tests/.rb.notes <== => https://github.com/openSUSE/agama/pull/1576 (old: SR 1194375) random port in .lock file ==> ./binutils/.rb.notes <== #=> SR 1171128 PGO from --enable-pgo-build=lto no problem? ==> ./biome/.rb.notes <== rust/llvm some order issue visible in strings diff ==> ./blaspp/.rb.notes <== #=> SR 1194838 => https://github.com/icl-utk-edu/blaspp/pull/87 ==> ./ca-certificates-mozilla/.rb.notes <== #=> SR 1192626 = https://bugzilla.opensuse.org/show_bug.cgi?id=1229003 date /usr/share/factory/var/lib/ca-certificates/java-cacerts differs at offset '30' (Java KeyStore) ca-certificates-mozilla:ca-certificates-mozilla-prebuilt unknown - likely timestamp in milliseconds ==> ./clutter/.rb.notes <== = https://gitlab.gnome.org/GNOME/libxslt/-/issues/123 = https://bugzilla.gnome.org/show_bug.cgi?id=751621 needs toolchain xsltproc patch for stable IDs ==> ./colord/.rb.notes <== = https://github.com/omgovich/colord/issues/122 https://bugzilla.opensuse.org/show_bug.cgi?id=1217747 .icc only-CPU ==> ./contrast/.rb.notes <== unknown rust/llvm => SR 1203242 contrast FTBFS-nocheck ==> ./crash/.rb.notes <== = https://bugzilla.opensuse.org/show_bug.cgi?id=1230281 parallelism, race ==> ./descent3/.rb.notes <== => descent3 https://github.com/DescentDevelopers/Descent3/pull/606 mtime/date = archive with embedded mtimes from ["../tools/HogMaker", "/home/abuild/rpmbuild/BUILD/Descent3-616f921e97b0fb4745a2d36de149c737bf720214/build/Descent3/d3-linux.hog", "/home/abuild/rpmbuild/BUILD/Descent3-616f921e97b0fb4745a2d36de149c737bf720214/scripts/data/fullhog/d3-linux-fullhog.txt", "/home/abuild/rpmbuild/BUILD/Descent3-616f921e97b0fb4745a2d36de149c737bf720214/build/scripts"] ==> ./difftastic/.rb.notes <== rust/llvm ==> ./elixir/.rb.notes <== = https://bugzilla.opensuse.org/show_bug.cgi?id=1205134 FTBFS-j1 stuck osc build --vm-type=kvm --clean --noservice -j1 standard ==> ./emacs/.rb.notes <== = https://mail.gnu.org/archive/html/emacs-devel/2024-10/msg00004.html .pdmp cd ~/rpmbuild/BUILD/emacs-29.4/src && ./temacs "--__aslr-disabled" "-batch" "--no-build-details" "-l" "loadup" "--temacs=pdump" "--bin-dest" "/usr/bin/" "--eln-dest" "/usr/lib64/emacs/29.4/" && md5sum emacs.pdmp ==> ./fonttosfnt/.rb.notes <== #=> SR 1190940 1190278 => https://gitlab.freedesktop.org/xorg/app/fonttosfnt/-/merge_requests/22 toolchain, date ==> ./ghostscript/.rb.notes <== date in .h + https://bugs.ghostscript.com/show_bug.cgi?id=696765 ==> ./git-annex/.rb.notes <== parallelism ==> ./git-credential-keepassxc/.rb.notes <== rust codegen-units, low-entropy +_ZN4clap5error5Error7for_app17h3a0e3b5c590fcdc5E.llvm.17478145784603506657 ==> ./glycin-loaders/.rb.notes <== = https://bugzilla.opensuse.org/show_bug.cgi?id=1230879 FTBFS-j1 osc build --vm-type=kvm --noservice -j1 standard ==> ./groff/.rb.notes <== groff:full postscript toolchain date+time in /usr/share/doc/packages/groff/pdf/pdfmark.pdf ==> ./grpc/.rb.notes <== #=> SR 1102203 grpc drop log #=>https://github.com/grpc/grpc/pull/35687 ==> ./gstreamer-plugins-rs/.rb.notes <== = https://gitlab.freedesktop.org/gstreamer/gst-plugins-rs/-/issues/599 date ; rust/llvm asm diff variations in /usr/lib64/pkgconfig/gstwebrtchttp.pc ==> ./helm/.rb.notes <== FTBFS-2028-04-05 2032-08-21 SSL ==> ./joker/.rb.notes <== #=> https://github.com/candid82/joker/commit/d2817bb18cd9cc0274460113a97dc87f26… #= https://github.com/candid82/joker/issues/491 hash random order ==> ./kernel-source/.rb.notes <== = https://bugzilla.opensuse.org/show_bug.cgi?id=1230414 BTF = https://lore.kernel.org/linux-doc/33018311-0bdf-4258-b0c0-428a548c710d@suse… doc variation from Sphinx -j auto ==> ./lapackpp/.rb.notes <== #=> SR 1194839 => https://github.com/icl-utk-edu/lapackpp/pull/68 hostname in /usr/include/lapack/defines.h from cmake + defines.h.in ==> ./less/.rb.notes <== #=> less https://github.com/gwsw/less/pull/567 date ==> ./libcamera/.rb.notes <== = https://bugs.libcamera.org/show_bug.cgi?id=233 = https://bugzilla.opensuse.org/show_bug.cgi?id=1217690 random: private key signatures of modules /usr/lib64/libcamera-suse.so.3 differs in ELF section .rodata ==> ./libdb-4_8/.rb.notes <== #=> SR 1190247 1187675 /usr/share/java/db-4.8.30.jar mtimes from by pid=171773 dir=/home/abuild/rpmbuild/BUILD/db-4.8.30/build_nptl/classes exec="/usr/bin/jar", ["jar", "cfm", "../db.jar", "../../dist/../java/jarManifestEntries", "./com/sleepycat"] - started ==> ./libgtop/.rb.notes <== = https://bugzilla.opensuse.org/show_bug.cgi?id=1230850 uname -r ==> ./libsamplerate/.rb.notes <== => SR 1202178 random/PGO: libsamplerate.so has random diffs from .o ==> ./libxslt/.rb.notes <== => SR 1202234 = https://gitlab.gnome.org/GNOME/libxslt/-/issues/37 => https://gitlab.gnome.org/GNOME/libxslt/-/commit/c45ed81aeb50a7fb6799a166270… ==> ./llvm17/.rb.notes <== ASLR left in .so = https://github.com/llvm/llvm-project/issues/72206 Marvin investigates. Partially from ASLR - uninitialized memory? ==> ./lua-lmod/.rb.notes <== => SR 1195841 => https://github.com/TACC/Lmod/pull/702 date+time from `date` /usr/share/lmod/8.7.37/libexec/Version.lua differs (ASCII text) ==> ./lua-luarepl/.rb.notes <== => SR 1204160 lua-luarepl FTBFS OSC_BUILD_ROOT=/var/tmp/build-root.$slot osc build --noservice --clean --vm-type=kvm -M=lua51 standard ==> ./mayavi/.rb.notes <== tvtk_classes.zip varies (mtimes?) from python build_wheel ==> ./nfdump/.rb.notes <== #=> SR 1163778 #=> https://github.com/phaag/nfdump/pull/482 date, solved differently ==> ./nodejs22/.rb.notes <== ASLR+CPU? ==> ./nvidia-persistenced/.rb.notes <== nvidia-persistenced date in /usr/share/man/man1/nvidia-persistenced.1.gz ==> ./nvidia-xconfig/.rb.notes <== => SR 1203885 nvidia-xconfig https://github.com/NVIDIA/nvidia-xconfig/pull/3 date in /usr/share/man/man1/nvidia-xconfig.1.gz ==> ./openttd/.rb.notes <== ASLR into build-id ==> ./openwsman/.rb.notes <== = openwsman https://bugzilla.opensuse.org/show_bug.cgi?id=1231038 FTBFS ==> ./parboiled/.rb.notes <== minor jar, strip-nd ==> ./perl/.rb.notes <== = https://bugzilla.opensuse.org/show_bug.cgi?id=1230137 embeds build machine kernel version => must build in KVM /usr/lib/perl5/5.40.0/x86_64-linux-thread-multi/CORE/config.h differs (C source, ASCII text) ==> ./pinentry/.rb.notes <== => SR 1202479 make efl droppable ==> ./python-PyGithub/.rb.notes <== => https://github.com/PyGithub/PyGithub/pull/3045 FTBFS 2024-11-25 found range good=1732496089 bad=1732498014 ==> ./python-chroma-hnswlib/.rb.notes <== => SR 1202316 python-chroma-hnswlib CPU ==> ./python-emoji/.rb.notes <== FTBFS [ 91s] tests/test_zwj_remove.py::test_non_rgi_zwj_replace PASSED [100%] ==> ./python-endesive/.rb.notes <== #=> https://github.com/m32/endesive/commit/47f751ad877e45d7954fdead5482ad164ae8… #= https://github.com/m32/endesive/issues/173 FTBFS-2040 ==> ./python-gobject/.rb.notes <== python-gobject _gi.cpython-310-x86_64-linux-gnu.so mesonpy toolchain random filename => https://build.opensuse.org/request/show/1204522 ==> ./python-libcst/.rb.notes <== => https://github.com/Instagram/LibCST/pull/1213 codegen-units=1 rust/llvm /usr/lib64/python3.11/site-packages/libcst/native.cpython-311-x86_64-linux-gnu.so ==> ./python-meson-python/.rb.notes <== = https://github.com/mesonbuild/meson-python/issues/671 toolchain for python-contourpy python-gobject python-numpy python-pandas python-scikit-learn python-scipy ==> ./python-numpy/.rb.notes <== mesonpy toolchain random ==> ./python-orjson/.rb.notes <== ?#solved in 3.10.7? machine code diffs from rustc+gcc13 ==> ./python-pandas/.rb.notes <== mesonpy toolchain random; random .pyc - ref counters? ==> ./python-pyHanko/.rb.notes <== = https://github.com/MatthiasValvekens/pyHanko/issues/472 FTBFS-2030 found range good=1893454427 bad=1893456352 ==> ./python-pygraphviz/.rb.notes <== = https://github.com/pygraphviz/pygraphviz/issues/541 captures execution time ==> ./python-pyhanko-certvalidator/.rb.notes <== FTBFS-2031 [ 57s] E pyhanko_certvalidator.errors.ExpiredError: The path could not be validated because intermediate certificate 1 expired 2030-12-31 08:30:00Z ==> ./python-rdflib/.rb.notes <== FTBFS :doc (pinged packager in Slack) ==> ./python-scikit-learn/.rb.notes <== mesonpy toolchain random parallelism via cython+openmp - similar to https://github.com/yt-project/yt/issues/4611 - ?does it need JOBLIB_MULTIPROCESSING=0 ? ==> ./python-scipy/.rb.notes <== mesonpy toolchain random ==> ./python-yt/.rb.notes <== = https://github.com/yt-project/yt/issues/4611 parallelism # old: ==> ./python312/.rb.notes <== => SR 1204725 python312 drop .pyc from doc = https://github.com/python/cpython/issues/124851 FTBFS-2038 ==> ./python313/.rb.notes <== = https://github.com/python/cpython/issues/122433 FTBFS-j1 OSC_BUILD_ROOT=/var/tmp/build-root.$slot time osc build --noservice --vm-type=kvm --clean standard ==> ./qqc2-breeze-style6/.rb.notes <== parallelism - source diff in BreezeStyle_Button_qml.cpp from "/usr/libexec/qt6/qmlcachegen", "--bare", "--resource-path", "/qt/qml/org/kde/breeze/Button.qml", "-I", "/home/abuild/rpmbuild/BUILD/qqc2-breeze-style-6.1.5/build/bin/", "-I", "/usr/lib64/qt6/qml", "-i", "/home/abuild/rpmbuild/BUILD/qqc2-breeze-style-6.1.5/build/bin/org/kde/breeze/qmldir", "--resource", "/home/abuild/rpmbuild/BUILD/qqc2-breeze-style-6.1.5/build/style/qtquickcontrols/.qt/rcc/qmake_org_kde_breeze.qrc", "--resource", "/home/abuild/rpmbuild/BUILD/qqc2-breeze-style-6.1.5/build/style/qtquickcontrols/.qt/rcc/BreezeStyle_raw_qml_0.qrc", "-o", "/home/abuild/rpmbuild/BUILD/qqc2-breeze-style-6.1.5/build/style/qtquickcontrols/.rcc/qmlcache/BreezeStyle_Button_qml.cpp", "/home/abuild/rpmbuild/BUILD/qqc2-breeze-style-6.1.5/style/qtquickcontrols/Button.qml" ==> ./resources/.rb.notes <== unknown rust/llvm ==> ./rmw/.rb.notes <== #=> https://github.com/theimpossibleastronaut/rmw/pull/442 = https://github.com/theimpossibleastronaut/rmw/issues/439 FTBFS-2038 found range 2147482293 -> 2147484218 ==> ./rpm/.rb.notes <== => https://github.com/rpm-software-management/rpm/pull/2762 = https://github.com/rpm-software-management/rpm/issues/932 Cannot set Build Date from changelog anymore ==> ./runawk/.rb.notes <== => SR 1199220 nocheck ==> ./scap-security-guide/.rb.notes <== = https://bugzilla.opensuse.org/show_bug.cgi?id=1230361 date ==> ./scheme48/.rb.notes <== FTBFS (from gcc14?) unreproducible dump ==> ./seahorse/.rb.notes <== = https://gitlab.gnome.org/GNOME/seahorse/-/issues/394 parallelism, bug Binary files /var/tmp/build-root.12/.mount/home/abuild/rpmbuild/BUILD/seahorse-43.0+22/x86_64-suse-linux/src/seahorse.p/meson-generated_application.c.o and /var/tmp/build-root.12b/.mount/home/abuild/rpmbuild/BUILD/seahorse-43.0+22/x86_64-suse-linux/src/seahorse.p/meson-generated_application.c.o differ ==> ./starship/.rb.notes <== maybe some low-entropy (filesys) issue left => https://github.com/starship/starship/pull/5352 filesys readdir, rust ==> ./subversion/.rb.notes <== => SR 1203785 minor jar mtimes /usr/lib64/svn-javahl/svn-javahl.jar ==> ./taigo/.rb.notes <== = taigo https://bugzilla.opensuse.org/show_bug.cgi?id=1231041 FTBFS ==> ./tycho/.rb.notes <== FTBFS-2038 osc build --noservice --clean --vm-type=kvm --build-opt=--vm-custom-opt="-rtc base=2038-01-25T00:00:00" -M=bootstrap java maven jar ==> ./wine/.rb.notes <== parallelism ==> ./xen/.rb.notes <== => SR 1202206 = https://bugzilla.opensuse.org/show_bug.cgi?id=1230856 date+time in debugsource ==> ./xindy/.rb.notes <== random xindy.mem CLISP memory image data = https://sourceforge.net/p/xindy/bugs/65/ report FTBFS-2036 ==> ./xmlsec1/.rb.notes <== FTBFS-2034-07-16 found range good=2036670842 bad=2036672767

1 0

New Slowroll update 20241002T1033 released!
by bernhardout＠lsmod.de 02 Oct '24

02 Oct '24

Please note that this mail was generated by a script. A collection of maintenance updates was released for Slowroll. Released 38 packages: * aws-c-mqtt * aws-c-s3 * azote * b4 * cosmic-app-library * cosmic-session * folks * fwupd * galera-4 * gcr * gcr3 * git * gpa * gstreamer * gstreamer-plugins-base * gupnp * hamlib * haproxy * jackson-dataformats-text * libpeas * libvirt-glib * lightsoff * os-autoinst * podman * powerman * python-astroid * python-ipykernel * python-jupyter-core * python-proton-client * python-zarr * python312 * resource-agents * simh * talhelper * tokei * tree * xen * yara

1 0

New Tumbleweed snapshot 20240930 released!
by Dominique Leuenberger 01 Oct '24

01 Oct '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ModemManager (1.20.6 -> 1.22.0) amarok (3.1.0 -> 3.1.1) audit (3.1.1 -> 4.0) audit-secondary (3.1.1 -> 4.0) cheese gtkmm4 (4.14.0 -> 4.16.0) gtksourceview5 (5.12.1 -> 5.14.0) ibus-libpinyin libwnck mozilla-nss (3.103 -> 3.104) pangomm (2.52.0 -> 2.54.0) pipewire (1.2.4 -> 1.2.5) python-cryptography (43.0.0 -> 43.0.1) virtualbox (7.0.20 -> 7.1.0) virtualbox-kmp (7.0.20_k6.11.0_1 -> 7.1.0_k6.11.0_1) === Details === ==== ModemManager ==== Version update (1.20.6 -> 1.22.0) Subpackages: ModemManager-bash-completion ModemManager-lang libmm-glib0 - Update to version 1.22.0: + A new "MSG" (message) log verbosity level is introduced, which is also the new default one if none explicitly defined. This level takes the place of the old "INFO" level, as a level including the most important messages that should be logged without needing to be warnings or errors. The new "INFO" level is more verbose than "MSG" but less verbose than "DBG", and may be useful as default in systems where active debugging of WWAN related issues is required. E.g. all user operations triggered via DBus method calls are logged in "INFO" level. + Introduced the concept of "personal information" which should by default not be included in log messages. Enabling personal information in logs requires to run the daemon with the '--log-personal-info' option. This feature is mostly implemented for QMI and MBIM specific logs, but hasn't yet been included in generic daemon logs or when using the AT protocol. Changes and fixes related to this feature will be cherry-picked and included in the future stable branch updates. - Update URL and Source adresses. ==== amarok ==== Version update (3.1.0 -> 3.1.1) - Update to 3.1.1 * Most of the context view QML items ported from QtControls 1 to QtControls 2 * Default to no fadeout on pause and stop (kde#491603) * Actually show the file browser panel toolbar * Fix track editor autocompletions (kde#491520) * Ensure home icon is shown in browser breadcrumb widgets (kde#491354) ==== audit ==== Version update (3.1.1 -> 4.0) Subpackages: libaudit1 libaudit1-32bit libauparse0 - Update to 4.0 - Drop python2 support - Drop auvirt and autrace programs - Drop SysVinit support - Require the use of the 5.0 or later kernel headers - New README.md file - Rewrite legacy service functions in terms of systemctl - Consolidate and update end of event detection to a common function - Split off rule loading from auditd.service into audit-rules.service - Refactor libaudit.h to split out logging functions and record numbers - Speed up aureport --summary reports - Limit libaudit python bindings to logging functions - Add a metrics function for auparse - Change auditctl to use pidfd_send_signal for signaling auditd - Adjust watches to optimize syscalls hooked when watch file access - Drop nispom rules - Add intepretations for fsconfig, fsopen, fsmount, & move_mount - Many code fixups (cgzones) - Update syscall and interpretation tables to the 6.8 kernel (from v3.1.2) - When processing a run level change, make auditd exit - In auditd, fix return code when rules added in immutable mode - In auparse, when files are given, also consider EUID for access - Auparse now interprets unnamed/anonymous sockets (Enzo Matsumiya) - Disable Python bindings from setting rules due to swig bug (S. Trofimovich) - Update all lookup tables for the 6.5 kernel - Don't be as paranoid about auditctl -R file permissions - In ausearch, correct subject/object search to be an and if both are given - Adjust formats for 64 bit time_t - Fix segfault in python bindings around the feed API - Add feed_has_data, get_record_num, and get/goto_field_num to python bindings - Update spec: * Add fix-auparse-test.patch (downstream): Upstream tests uses a static value (42) for 'gdm' uid/gid (based on Fedora values, apparently). Replace these occurrences with 'unknown(123456)' * Replace '--with-python' with '--with-python3' on %configure * Add new headers 'audit_logging.h' and 'audit-records.h' for audit-devel ==== audit-secondary ==== Version update (3.1.1 -> 4.0) Subpackages: audit python3-audit system-group-audit - Update audit-secondary.spec: * Add "Requires: audit-rules" for audit package * Remove preun/postun handling of audit-rules.service - Update to 4.0 - Drop python2 support - Drop auvirt and autrace programs - Drop SysVinit support - Require the use of the 5.0 or later kernel headers - New README.md file - Rewrite legacy service functions in terms of systemctl - Consolidate and update end of event detection to a common function - Split off rule loading from auditd.service into audit-rules.service - Refactor libaudit.h to split out logging functions and record numbers - Speed up aureport --summary reports - Limit libaudit python bindings to logging functions - Add a metrics function for auparse - Change auditctl to use pidfd_send_signal for signaling auditd - Adjust watches to optimize syscalls hooked when watch file access - Drop nispom rules - Add intepretations for fsconfig, fsopen, fsmount, & move_mount - Many code fixups (cgzones) - Update syscall and interpretation tables to the 6.8 kernel (from v3.1.2) - When processing a run level change, make auditd exit - In auditd, fix return code when rules added in immutable mode - In auparse, when files are given, also consider EUID for access - Auparse now interprets unnamed/anonymous sockets (Enzo Matsumiya) - Disable Python bindings from setting rules due to swig bug (S. Trofimovich) - Update all lookup tables for the 6.5 kernel - Don't be as paranoid about auditctl -R file permissions - In ausearch, correct subject/object search to be an and if both are given - Adjust formats for 64 bit time_t - Fix segfault in python bindings around the feed API - Add feed_has_data, get_record_num, and get/goto_field_num to python bindings - Update spec: * Move rules-related files into new subpackage `audit-rules': * Files moved: - /sbin/auditctl, /sbin/augenrules, /etc/audit/{audit.rules,rules.d/audit.rules,audit-stop.rules} - manpages for auditctl, augenrules, and audit.rules - /etc/audit is now owned by `audit-rules' as well * Add new file /usr/lib/systemd/system/audit-rules.service * Remove in-house create-augenrules-service.patch that generated augenrules.service systemd unit service * Remove ownership of /usr/share/audit * Create /usr/share/audit-rules directory on %install * Remove audit-userspace-517-compat.patch (fixed upstream) * Remove libev-werror.patch (fixed upstream) * Remove audit-allow-manual-stop.patch (fixed upstream) * Add fix-auparse-test.patch (downstream): Upstream tests uses a static value (42) for 'gdm' uid/gid (based on Fedora values, apparently). Replace these occurrences with 'unknown(123456)' * Replace '--with-python' with '--with-python3' on %configure * Remove autrace and auvirt references (upstream) * Replace README with README.md - Drop `--enable-systemd' from %configure as SysV-style scripts aren't supported in upstream since 113ae191758c ("Drop support for SysVinit") ==== cheese ==== Subpackages: cheese-lang libcheese-common libcheese-gtk25 libcheese8 typelib-1_0-Cheese-3_0 - Add 73.patch: Fix JSON validation. Fixes startup with json-glib 1.10. ==== gtkmm4 ==== Version update (4.14.0 -> 4.16.0) - Update to version 4.16.0: + Almost identical to 4.15.1. - Update to version 4.15.1: + Gdk: - DrawContext: Deprecate begin_frame(), end_frame(), is_in_frame(), get_frame_region(). - Surface: Deprecate set_opaque_region(). - Cursor: Rename create(const SlotGetTexture& slot, .....). Call it create_from_slot(). It was added in 4.15.0, but some create() calls in old code became ambiguous. + Gtk: - Window: Add set_interactive_debugging(). - TextBuffer: Add enum TextBuffer::NotifyFlags, add_commit_notify(), remove_commit_notify(). + Build: Require gtk4 >= 4.15.5. - Drop gtkmm4-docs-without-timestamp.patch: Fixed upstream. ==== gtksourceview5 ==== Version update (5.12.1 -> 5.14.0) Subpackages: gtksourceview5-lang libgtksourceview-5-0 - Update to version 5.14.0: + Fix an issue where the gutter would not redraw when focus changes. + Add support for Groff syntax. - Changes from version 5.13.1: + Documentation improvements + Improve performance of BuilderBlocks font loading. Some of this effort required changes to the TTF, so user testing with a wide variety of languages is desired. This should reduce startup time of GtkSourceView using applications. + gtk-doc.lang: highlight `backtick` spans + c.lang: highlight [[]] style attributes + java.lang: improve escaped character matching + Adwaita.xml, Adwaita-dark.xml: style updates to track platform changes for GNOME 47. - Changes from version 5.13.0: + Ensure gutter renderers are released during dispose + Make default auto-indenter keep indentation when cursor is at line start + python3.lang: Fix f-string in curly braces to have no-spellcheck applied + Updated translations. ==== ibus-libpinyin ==== - Update ibus-libpinyin.spec: Change python depending version, Since tumbleweed and SLE already totally switch to python3, no longer coexist with python2. (boo#1228652) - Add ibus-libpinyin-revert-python-3.2.patch: Backporting cf67e92a from upstream, Revert python3 version checking to 3.2 to enable lower python version building. (boo#1228652) ==== libwnck ==== Subpackages: libwnck-3-0 libwnck-lang typelib-1_0-Wnck-3_0 - BuildRequire gettext-devel instead of gettext: allow OBS to shortcut through gettext-runtime-mini. ==== mozilla-nss ==== Version update (3.103 -> 3.104) Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs mozilla-nss-sysinit mozilla-nss-tools - Fix build error under Leap by rebasing nss-fips-safe-memset.patch. - update to NSS 3.104 * bmo#1910071 - Copy original corpus to heap-allocated buffer * bmo#1910079 - Fix min ssl version for DTLS client fuzzer * bmo#1908990 - Remove OS2 support just like we did on NSPR * bmo#1910605 - clang-format NSS improvements * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function * bmo#1908990 - removing dirent.c from build * bmo#1902078 - Allow handing in keymaterial to shlibsign to make the output reproducible * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR, openunix, sco, unixware or reliantUnix * bmo#1908990 - remove mentions of WIN95 * bmo#1908990 - remove mentions of WIN16 * bmo#1913750 - More explicit directory naming * bmo#1913755 - Add more options to TLS server fuzz target * bmo#1913675 - Add more options to TLS client fuzz target * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI * bmo#1908012 - set nssckbi version number to 2.70. * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert. * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA. * bmo#1908006 - Add Cybertrust Japan Roots to NSS. * bmo#1908004 - Add Taiwan CA Roots to NSS. * bmo#1911354 - remove search by decoded serial in nssToken_FindCertificateByIssuerAndSerialNumber * bmo#1913132 - Fix tstclnt CI build failure * bmo#1913047 - vfyserv: ensure peer cert chain is in db for CERT_VerifyCertificateNow * bmo#1912427 - Enable all supported protocol versions for UDP * bmo#1910361 - Actually use random PSK hash type * bmo#1911576 - Initialize NSS DB once * bmo#1910361 - Additional ECH cipher suites and PSK hash types * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE * bmo#1910605 - clang-format shlibsign.c - remove obsolete nss-reproducible-builds.patch ==== pangomm ==== Version update (2.52.0 -> 2.54.0) - Update to version 2.54.0: + Color: Add parse_with_alpha(). + Context: Add set/get_round_glyph_positions(). + Item: Add default constructor, get_char_offset(). + Layout: Add set/get_justify_last_line(), get_direction(), get_caret_pos(). + LayoutIter: Add operator bool(), get_run_baseline(). + LayoutLine: Add is_paragraph_start(), get_resolved_direction(), get_height(). + TabArray: Add TabArray(const Glib::ustring& text) constructor, operator bool(), set_positions_in_pixels(), to_string(), set/get_decimal_point(), sort(). + Documentation: - Language::get_scripts(): Improve documentation. - Don't link to removed parts of library.gnome.org. + Build: - Require pango >= 1.54.0. - Meson build: Require meson >= 0.62.0. - Use Meson's pkgconfig module instead of using the *.pc.in templates. - Drop pangomm-docs-without-timestamp.patch, fixed upstream. ==== pipewire ==== Version update (1.2.4 -> 1.2.5) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-jack pipewire-lang pipewire-libjack-0_3 pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Update to version 1.2.5: + Highlights - Fix an fd mismatch in the protocol in some cases that could lead to fd leaks and crashes. - Fix a bug where the mixer was not updated after setting the port, which would cause muted audio at boot or resume from suspend. - Fix a potential use-after-free in module-rt when stopping a thread. - Cached objects are now freed in the JACK API to avoid memory leaks. - Some more fixes and improvements. + PipeWire - RequestProcess commands are now only sent after the node completes the state change to RUNNING. - More FreeBSD fixes. - Handle ACTIVE links going to < PAUSED as well. This improves renegotiation in some cases. - Fix an fd mismatch in the protocol in some cases that could lead to fd leaks and crashes. + Modules - Many of the network modules can now also accept hostnames instead of IP addresses. - Fix a potential use-after-free in module-rt when stopping the thread. + SPA - Support for elogind was added. - Some more errors are checked when converting JSON to POD. - Fix a bug where the mixer was not updated after setting the port, which would cause muted audio at boot or resume from suspend. + JACK - The BBT transport handling was improved. Some fields were added to be able to handle the JACK semantics correctly. - Buffers are now aligned according to the maximum CPU alignment instead of the hardcoded 16 bytes alignment. - Cached objects are now freed correctly. + Doc - Some small doc updates. - Don't try to enable apparmor support if without_apparmor is defined (as in SLFO). ==== python-cryptography ==== Version update (43.0.0 -> 43.0.1) - update to 43.0.1: * Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.3.2. ==== virtualbox ==== Version update (7.0.20 -> 7.1.0) - Update to release 7.1 * The GUI now offers a selection between Basic and Experienced user level with reduced or full UI functionality. * VRDE: If user does not set up TLS with custom certificates, enable it with self-signed certificate, including issuing a new one before the old one expires * NAT: New engine with IPv6 support. * Linux host and guest: Added Wayland support for Clipboard sharing. - Add cxx17.patch to workaround "new" build failures with gcc14/C++17 - Move the C++17 command line switch from vbox-vboxadd-init-script.diff to cxx17.patch - Add Conflict markers to prevent the situation {virtualbox-7.1 combined with virtualbox-qt-7.0}; old VBQT did not have the right (strong enough) Requires lines. ==== virtualbox-kmp ==== Version update (7.0.20_k6.11.0_1 -> 7.1.0_k6.11.0_1) - Update to release 7.1 * The GUI now offers a selection between Basic and Experienced user level with reduced or full UI functionality. * VRDE: If user does not set up TLS with custom certificates, enable it with self-signed certificate, including issuing a new one before the old one expires * NAT: New engine with IPv6 support. * Linux host and guest: Added Wayland support for Clipboard sharing. - Add cxx17.patch to workaround "new" build failures with gcc14/C++17 - Move the C++17 command line switch from vbox-vboxadd-init-script.diff to cxx17.patch - Add Conflict markers to prevent the situation {virtualbox-7.1 combined with virtualbox-qt-7.0}; old VBQT did not have the right (strong enough) Requires lines.

1 0