October 2024 - openSUSE Factory - openSUSE Mailing Lists

[opensuse-factory] reproducible builds status 2024-09
by Bernhard M. Wiedemann 02 Oct '24

02 Oct '24

Hi, I did plenty of patches this month. I spent a week in Hamburg on the r-b-world-summit, having good discussions and finding nice patches from Debian (thanks Mattia). With ring0 being reproducible, I concentrated on ring1 packages. I dropped efl and mono-core that are not needed there. I started to collect various details about my R-B-OS in https://en.opensuse.org/openSUSE:Reproducible_openSUSE/Part1 and https://en.opensuse.org/openSUSE:Reproducible_openSUSE/Part2 I worked with Fridrich Strba to greatly improve the reproducibility of java-related packages. This cut the number of remaining packages with issues in half. He made nice toolchain-patches for ant, xmvn and several maven-plugins, mostly for normalizing jar mtimes. https://github.com/mesonbuild/meson-python/issues/671 also stands out, because this affects at least 6 python packages. I have a workaround now. The kernel became reproducible after switching generation of Sphinx docs and BTF to -j1 to workaround race-conditions (partial fixes for the races exist). Two major items on my todo-list are: * write an rb-checker bot that tests submissions to Factory * fix non-determinism in emacs .pdmp files ( https://mail.gnu.org/archive/html/emacs-devel/2024-10/msg00004.html ) ; the alternative would be to drop it from my R-B-OS and lose tools that depend on it: a2ps anthy autoconf avfs caml-mode ddskk global gnugo gnuplot idutils librep maildir-utils notmuch psgml quilt rtags scheme48 supercollider tamago translate-shell uim vagrant xdp-tools xemacs-packages xslide Here are the autogenerated bits: last month's status: https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… Last months' reproducible builds project updates (including my work): https://reproducible-builds.org/reports/2024-08/ I uploaded https://rb.zq1.de/compare.factory-20241002/ today https://rb.zq1.de/spec/glossar.txt explains the meaning of below values: total-packages: 15806 (+98) build-tried: 15741 (+100) build-failed: 12 (+5) build-n-a: 180 (+0) build-succeeded: 15549 (+95) build-official-failed+na: 52 (-106) build-compare-failed: 153 (+1) build-compare-succeeded: 15396 (+94) verify-failed: 255 (+4) verified-semi-reproducible: 15106 (+95) verified-bit-identical: 13634 (-12) bit-by-bit-identical: 15292 (+467) not-bit-by-bit-identical: 258 (-366) not-bit-by-bit-identicalcheck: 257 (-372) https://rb.zq1.de/compare.factory-20241002/graph.png shows the change over time https://rb.zq1.de/compare.factory-20241002/unreproduciblerings.txt lists very unreproducible core packages (bootstrap+DVD) Of the badly unreproducible packages, 3 were in ring0 27 were in ring1 That makes it 30/4043 => 0.74 % which is below the overall average of 153/15549 => 0.98 % 258/15549 => 1.66 % of packages are not perfectly reproducible package notes: ==> ./agama-integration-tests/.rb.notes <== => https://github.com/openSUSE/agama/pull/1576 (old: SR 1194375) random port in .lock file ==> ./binutils/.rb.notes <== #=> SR 1171128 PGO from --enable-pgo-build=lto no problem? ==> ./biome/.rb.notes <== rust/llvm some order issue visible in strings diff ==> ./blaspp/.rb.notes <== #=> SR 1194838 => https://github.com/icl-utk-edu/blaspp/pull/87 ==> ./ca-certificates-mozilla/.rb.notes <== #=> SR 1192626 = https://bugzilla.opensuse.org/show_bug.cgi?id=1229003 date /usr/share/factory/var/lib/ca-certificates/java-cacerts differs at offset '30' (Java KeyStore) ca-certificates-mozilla:ca-certificates-mozilla-prebuilt unknown - likely timestamp in milliseconds ==> ./clutter/.rb.notes <== = https://gitlab.gnome.org/GNOME/libxslt/-/issues/123 = https://bugzilla.gnome.org/show_bug.cgi?id=751621 needs toolchain xsltproc patch for stable IDs ==> ./colord/.rb.notes <== = https://github.com/omgovich/colord/issues/122 https://bugzilla.opensuse.org/show_bug.cgi?id=1217747 .icc only-CPU ==> ./contrast/.rb.notes <== unknown rust/llvm => SR 1203242 contrast FTBFS-nocheck ==> ./crash/.rb.notes <== = https://bugzilla.opensuse.org/show_bug.cgi?id=1230281 parallelism, race ==> ./descent3/.rb.notes <== => descent3 https://github.com/DescentDevelopers/Descent3/pull/606 mtime/date = archive with embedded mtimes from ["../tools/HogMaker", "/home/abuild/rpmbuild/BUILD/Descent3-616f921e97b0fb4745a2d36de149c737bf720214/build/Descent3/d3-linux.hog", "/home/abuild/rpmbuild/BUILD/Descent3-616f921e97b0fb4745a2d36de149c737bf720214/scripts/data/fullhog/d3-linux-fullhog.txt", "/home/abuild/rpmbuild/BUILD/Descent3-616f921e97b0fb4745a2d36de149c737bf720214/build/scripts"] ==> ./difftastic/.rb.notes <== rust/llvm ==> ./elixir/.rb.notes <== = https://bugzilla.opensuse.org/show_bug.cgi?id=1205134 FTBFS-j1 stuck osc build --vm-type=kvm --clean --noservice -j1 standard ==> ./emacs/.rb.notes <== = https://mail.gnu.org/archive/html/emacs-devel/2024-10/msg00004.html .pdmp cd ~/rpmbuild/BUILD/emacs-29.4/src && ./temacs "--__aslr-disabled" "-batch" "--no-build-details" "-l" "loadup" "--temacs=pdump" "--bin-dest" "/usr/bin/" "--eln-dest" "/usr/lib64/emacs/29.4/" && md5sum emacs.pdmp ==> ./fonttosfnt/.rb.notes <== #=> SR 1190940 1190278 => https://gitlab.freedesktop.org/xorg/app/fonttosfnt/-/merge_requests/22 toolchain, date ==> ./ghostscript/.rb.notes <== date in .h + https://bugs.ghostscript.com/show_bug.cgi?id=696765 ==> ./git-annex/.rb.notes <== parallelism ==> ./git-credential-keepassxc/.rb.notes <== rust codegen-units, low-entropy +_ZN4clap5error5Error7for_app17h3a0e3b5c590fcdc5E.llvm.17478145784603506657 ==> ./glycin-loaders/.rb.notes <== = https://bugzilla.opensuse.org/show_bug.cgi?id=1230879 FTBFS-j1 osc build --vm-type=kvm --noservice -j1 standard ==> ./groff/.rb.notes <== groff:full postscript toolchain date+time in /usr/share/doc/packages/groff/pdf/pdfmark.pdf ==> ./grpc/.rb.notes <== #=> SR 1102203 grpc drop log #=>https://github.com/grpc/grpc/pull/35687 ==> ./gstreamer-plugins-rs/.rb.notes <== = https://gitlab.freedesktop.org/gstreamer/gst-plugins-rs/-/issues/599 date ; rust/llvm asm diff variations in /usr/lib64/pkgconfig/gstwebrtchttp.pc ==> ./helm/.rb.notes <== FTBFS-2028-04-05 2032-08-21 SSL ==> ./joker/.rb.notes <== #=> https://github.com/candid82/joker/commit/d2817bb18cd9cc0274460113a97dc87f26… #= https://github.com/candid82/joker/issues/491 hash random order ==> ./kernel-source/.rb.notes <== = https://bugzilla.opensuse.org/show_bug.cgi?id=1230414 BTF = https://lore.kernel.org/linux-doc/33018311-0bdf-4258-b0c0-428a548c710d@suse… doc variation from Sphinx -j auto ==> ./lapackpp/.rb.notes <== #=> SR 1194839 => https://github.com/icl-utk-edu/lapackpp/pull/68 hostname in /usr/include/lapack/defines.h from cmake + defines.h.in ==> ./less/.rb.notes <== #=> less https://github.com/gwsw/less/pull/567 date ==> ./libcamera/.rb.notes <== = https://bugs.libcamera.org/show_bug.cgi?id=233 = https://bugzilla.opensuse.org/show_bug.cgi?id=1217690 random: private key signatures of modules /usr/lib64/libcamera-suse.so.3 differs in ELF section .rodata ==> ./libdb-4_8/.rb.notes <== #=> SR 1190247 1187675 /usr/share/java/db-4.8.30.jar mtimes from by pid=171773 dir=/home/abuild/rpmbuild/BUILD/db-4.8.30/build_nptl/classes exec="/usr/bin/jar", ["jar", "cfm", "../db.jar", "../../dist/../java/jarManifestEntries", "./com/sleepycat"] - started ==> ./libgtop/.rb.notes <== = https://bugzilla.opensuse.org/show_bug.cgi?id=1230850 uname -r ==> ./libsamplerate/.rb.notes <== => SR 1202178 random/PGO: libsamplerate.so has random diffs from .o ==> ./libxslt/.rb.notes <== => SR 1202234 = https://gitlab.gnome.org/GNOME/libxslt/-/issues/37 => https://gitlab.gnome.org/GNOME/libxslt/-/commit/c45ed81aeb50a7fb6799a166270… ==> ./llvm17/.rb.notes <== ASLR left in .so = https://github.com/llvm/llvm-project/issues/72206 Marvin investigates. Partially from ASLR - uninitialized memory? ==> ./lua-lmod/.rb.notes <== => SR 1195841 => https://github.com/TACC/Lmod/pull/702 date+time from `date` /usr/share/lmod/8.7.37/libexec/Version.lua differs (ASCII text) ==> ./lua-luarepl/.rb.notes <== => SR 1204160 lua-luarepl FTBFS OSC_BUILD_ROOT=/var/tmp/build-root.$slot osc build --noservice --clean --vm-type=kvm -M=lua51 standard ==> ./mayavi/.rb.notes <== tvtk_classes.zip varies (mtimes?) from python build_wheel ==> ./nfdump/.rb.notes <== #=> SR 1163778 #=> https://github.com/phaag/nfdump/pull/482 date, solved differently ==> ./nodejs22/.rb.notes <== ASLR+CPU? ==> ./nvidia-persistenced/.rb.notes <== nvidia-persistenced date in /usr/share/man/man1/nvidia-persistenced.1.gz ==> ./nvidia-xconfig/.rb.notes <== => SR 1203885 nvidia-xconfig https://github.com/NVIDIA/nvidia-xconfig/pull/3 date in /usr/share/man/man1/nvidia-xconfig.1.gz ==> ./openttd/.rb.notes <== ASLR into build-id ==> ./openwsman/.rb.notes <== = openwsman https://bugzilla.opensuse.org/show_bug.cgi?id=1231038 FTBFS ==> ./parboiled/.rb.notes <== minor jar, strip-nd ==> ./perl/.rb.notes <== = https://bugzilla.opensuse.org/show_bug.cgi?id=1230137 embeds build machine kernel version => must build in KVM /usr/lib/perl5/5.40.0/x86_64-linux-thread-multi/CORE/config.h differs (C source, ASCII text) ==> ./pinentry/.rb.notes <== => SR 1202479 make efl droppable ==> ./python-PyGithub/.rb.notes <== => https://github.com/PyGithub/PyGithub/pull/3045 FTBFS 2024-11-25 found range good=1732496089 bad=1732498014 ==> ./python-chroma-hnswlib/.rb.notes <== => SR 1202316 python-chroma-hnswlib CPU ==> ./python-emoji/.rb.notes <== FTBFS [ 91s] tests/test_zwj_remove.py::test_non_rgi_zwj_replace PASSED [100%] ==> ./python-endesive/.rb.notes <== #=> https://github.com/m32/endesive/commit/47f751ad877e45d7954fdead5482ad164ae8… #= https://github.com/m32/endesive/issues/173 FTBFS-2040 ==> ./python-gobject/.rb.notes <== python-gobject _gi.cpython-310-x86_64-linux-gnu.so mesonpy toolchain random filename => https://build.opensuse.org/request/show/1204522 ==> ./python-libcst/.rb.notes <== => https://github.com/Instagram/LibCST/pull/1213 codegen-units=1 rust/llvm /usr/lib64/python3.11/site-packages/libcst/native.cpython-311-x86_64-linux-gnu.so ==> ./python-meson-python/.rb.notes <== = https://github.com/mesonbuild/meson-python/issues/671 toolchain for python-contourpy python-gobject python-numpy python-pandas python-scikit-learn python-scipy ==> ./python-numpy/.rb.notes <== mesonpy toolchain random ==> ./python-orjson/.rb.notes <== ?#solved in 3.10.7? machine code diffs from rustc+gcc13 ==> ./python-pandas/.rb.notes <== mesonpy toolchain random; random .pyc - ref counters? ==> ./python-pyHanko/.rb.notes <== = https://github.com/MatthiasValvekens/pyHanko/issues/472 FTBFS-2030 found range good=1893454427 bad=1893456352 ==> ./python-pygraphviz/.rb.notes <== = https://github.com/pygraphviz/pygraphviz/issues/541 captures execution time ==> ./python-pyhanko-certvalidator/.rb.notes <== FTBFS-2031 [ 57s] E pyhanko_certvalidator.errors.ExpiredError: The path could not be validated because intermediate certificate 1 expired 2030-12-31 08:30:00Z ==> ./python-rdflib/.rb.notes <== FTBFS :doc (pinged packager in Slack) ==> ./python-scikit-learn/.rb.notes <== mesonpy toolchain random parallelism via cython+openmp - similar to https://github.com/yt-project/yt/issues/4611 - ?does it need JOBLIB_MULTIPROCESSING=0 ? ==> ./python-scipy/.rb.notes <== mesonpy toolchain random ==> ./python-yt/.rb.notes <== = https://github.com/yt-project/yt/issues/4611 parallelism # old: ==> ./python312/.rb.notes <== => SR 1204725 python312 drop .pyc from doc = https://github.com/python/cpython/issues/124851 FTBFS-2038 ==> ./python313/.rb.notes <== = https://github.com/python/cpython/issues/122433 FTBFS-j1 OSC_BUILD_ROOT=/var/tmp/build-root.$slot time osc build --noservice --vm-type=kvm --clean standard ==> ./qqc2-breeze-style6/.rb.notes <== parallelism - source diff in BreezeStyle_Button_qml.cpp from "/usr/libexec/qt6/qmlcachegen", "--bare", "--resource-path", "/qt/qml/org/kde/breeze/Button.qml", "-I", "/home/abuild/rpmbuild/BUILD/qqc2-breeze-style-6.1.5/build/bin/", "-I", "/usr/lib64/qt6/qml", "-i", "/home/abuild/rpmbuild/BUILD/qqc2-breeze-style-6.1.5/build/bin/org/kde/breeze/qmldir", "--resource", "/home/abuild/rpmbuild/BUILD/qqc2-breeze-style-6.1.5/build/style/qtquickcontrols/.qt/rcc/qmake_org_kde_breeze.qrc", "--resource", "/home/abuild/rpmbuild/BUILD/qqc2-breeze-style-6.1.5/build/style/qtquickcontrols/.qt/rcc/BreezeStyle_raw_qml_0.qrc", "-o", "/home/abuild/rpmbuild/BUILD/qqc2-breeze-style-6.1.5/build/style/qtquickcontrols/.rcc/qmlcache/BreezeStyle_Button_qml.cpp", "/home/abuild/rpmbuild/BUILD/qqc2-breeze-style-6.1.5/style/qtquickcontrols/Button.qml" ==> ./resources/.rb.notes <== unknown rust/llvm ==> ./rmw/.rb.notes <== #=> https://github.com/theimpossibleastronaut/rmw/pull/442 = https://github.com/theimpossibleastronaut/rmw/issues/439 FTBFS-2038 found range 2147482293 -> 2147484218 ==> ./rpm/.rb.notes <== => https://github.com/rpm-software-management/rpm/pull/2762 = https://github.com/rpm-software-management/rpm/issues/932 Cannot set Build Date from changelog anymore ==> ./runawk/.rb.notes <== => SR 1199220 nocheck ==> ./scap-security-guide/.rb.notes <== = https://bugzilla.opensuse.org/show_bug.cgi?id=1230361 date ==> ./scheme48/.rb.notes <== FTBFS (from gcc14?) unreproducible dump ==> ./seahorse/.rb.notes <== = https://gitlab.gnome.org/GNOME/seahorse/-/issues/394 parallelism, bug Binary files /var/tmp/build-root.12/.mount/home/abuild/rpmbuild/BUILD/seahorse-43.0+22/x86_64-suse-linux/src/seahorse.p/meson-generated_application.c.o and /var/tmp/build-root.12b/.mount/home/abuild/rpmbuild/BUILD/seahorse-43.0+22/x86_64-suse-linux/src/seahorse.p/meson-generated_application.c.o differ ==> ./starship/.rb.notes <== maybe some low-entropy (filesys) issue left => https://github.com/starship/starship/pull/5352 filesys readdir, rust ==> ./subversion/.rb.notes <== => SR 1203785 minor jar mtimes /usr/lib64/svn-javahl/svn-javahl.jar ==> ./taigo/.rb.notes <== = taigo https://bugzilla.opensuse.org/show_bug.cgi?id=1231041 FTBFS ==> ./tycho/.rb.notes <== FTBFS-2038 osc build --noservice --clean --vm-type=kvm --build-opt=--vm-custom-opt="-rtc base=2038-01-25T00:00:00" -M=bootstrap java maven jar ==> ./wine/.rb.notes <== parallelism ==> ./xen/.rb.notes <== => SR 1202206 = https://bugzilla.opensuse.org/show_bug.cgi?id=1230856 date+time in debugsource ==> ./xindy/.rb.notes <== random xindy.mem CLISP memory image data = https://sourceforge.net/p/xindy/bugs/65/ report FTBFS-2036 ==> ./xmlsec1/.rb.notes <== FTBFS-2034-07-16 found range good=2036670842 bad=2036672767

1 0

New Slowroll update 20241002T1033 released!
by bernhardout＠lsmod.de 02 Oct '24

02 Oct '24

Please note that this mail was generated by a script. A collection of maintenance updates was released for Slowroll. Released 38 packages: * aws-c-mqtt * aws-c-s3 * azote * b4 * cosmic-app-library * cosmic-session * folks * fwupd * galera-4 * gcr * gcr3 * git * gpa * gstreamer * gstreamer-plugins-base * gupnp * hamlib * haproxy * jackson-dataformats-text * libpeas * libvirt-glib * lightsoff * os-autoinst * podman * powerman * python-astroid * python-ipykernel * python-jupyter-core * python-proton-client * python-zarr * python312 * resource-agents * simh * talhelper * tokei * tree * xen * yara

1 0

New Tumbleweed snapshot 20240930 released!
by Dominique Leuenberger 01 Oct '24

01 Oct '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ModemManager (1.20.6 -> 1.22.0) amarok (3.1.0 -> 3.1.1) audit (3.1.1 -> 4.0) audit-secondary (3.1.1 -> 4.0) cheese gtkmm4 (4.14.0 -> 4.16.0) gtksourceview5 (5.12.1 -> 5.14.0) ibus-libpinyin libwnck mozilla-nss (3.103 -> 3.104) pangomm (2.52.0 -> 2.54.0) pipewire (1.2.4 -> 1.2.5) python-cryptography (43.0.0 -> 43.0.1) virtualbox (7.0.20 -> 7.1.0) virtualbox-kmp (7.0.20_k6.11.0_1 -> 7.1.0_k6.11.0_1) === Details === ==== ModemManager ==== Version update (1.20.6 -> 1.22.0) Subpackages: ModemManager-bash-completion ModemManager-lang libmm-glib0 - Update to version 1.22.0: + A new "MSG" (message) log verbosity level is introduced, which is also the new default one if none explicitly defined. This level takes the place of the old "INFO" level, as a level including the most important messages that should be logged without needing to be warnings or errors. The new "INFO" level is more verbose than "MSG" but less verbose than "DBG", and may be useful as default in systems where active debugging of WWAN related issues is required. E.g. all user operations triggered via DBus method calls are logged in "INFO" level. + Introduced the concept of "personal information" which should by default not be included in log messages. Enabling personal information in logs requires to run the daemon with the '--log-personal-info' option. This feature is mostly implemented for QMI and MBIM specific logs, but hasn't yet been included in generic daemon logs or when using the AT protocol. Changes and fixes related to this feature will be cherry-picked and included in the future stable branch updates. - Update URL and Source adresses. ==== amarok ==== Version update (3.1.0 -> 3.1.1) - Update to 3.1.1 * Most of the context view QML items ported from QtControls 1 to QtControls 2 * Default to no fadeout on pause and stop (kde#491603) * Actually show the file browser panel toolbar * Fix track editor autocompletions (kde#491520) * Ensure home icon is shown in browser breadcrumb widgets (kde#491354) ==== audit ==== Version update (3.1.1 -> 4.0) Subpackages: libaudit1 libaudit1-32bit libauparse0 - Update to 4.0 - Drop python2 support - Drop auvirt and autrace programs - Drop SysVinit support - Require the use of the 5.0 or later kernel headers - New README.md file - Rewrite legacy service functions in terms of systemctl - Consolidate and update end of event detection to a common function - Split off rule loading from auditd.service into audit-rules.service - Refactor libaudit.h to split out logging functions and record numbers - Speed up aureport --summary reports - Limit libaudit python bindings to logging functions - Add a metrics function for auparse - Change auditctl to use pidfd_send_signal for signaling auditd - Adjust watches to optimize syscalls hooked when watch file access - Drop nispom rules - Add intepretations for fsconfig, fsopen, fsmount, & move_mount - Many code fixups (cgzones) - Update syscall and interpretation tables to the 6.8 kernel (from v3.1.2) - When processing a run level change, make auditd exit - In auditd, fix return code when rules added in immutable mode - In auparse, when files are given, also consider EUID for access - Auparse now interprets unnamed/anonymous sockets (Enzo Matsumiya) - Disable Python bindings from setting rules due to swig bug (S. Trofimovich) - Update all lookup tables for the 6.5 kernel - Don't be as paranoid about auditctl -R file permissions - In ausearch, correct subject/object search to be an and if both are given - Adjust formats for 64 bit time_t - Fix segfault in python bindings around the feed API - Add feed_has_data, get_record_num, and get/goto_field_num to python bindings - Update spec: * Add fix-auparse-test.patch (downstream): Upstream tests uses a static value (42) for 'gdm' uid/gid (based on Fedora values, apparently). Replace these occurrences with 'unknown(123456)' * Replace '--with-python' with '--with-python3' on %configure * Add new headers 'audit_logging.h' and 'audit-records.h' for audit-devel ==== audit-secondary ==== Version update (3.1.1 -> 4.0) Subpackages: audit python3-audit system-group-audit - Update audit-secondary.spec: * Add "Requires: audit-rules" for audit package * Remove preun/postun handling of audit-rules.service - Update to 4.0 - Drop python2 support - Drop auvirt and autrace programs - Drop SysVinit support - Require the use of the 5.0 or later kernel headers - New README.md file - Rewrite legacy service functions in terms of systemctl - Consolidate and update end of event detection to a common function - Split off rule loading from auditd.service into audit-rules.service - Refactor libaudit.h to split out logging functions and record numbers - Speed up aureport --summary reports - Limit libaudit python bindings to logging functions - Add a metrics function for auparse - Change auditctl to use pidfd_send_signal for signaling auditd - Adjust watches to optimize syscalls hooked when watch file access - Drop nispom rules - Add intepretations for fsconfig, fsopen, fsmount, & move_mount - Many code fixups (cgzones) - Update syscall and interpretation tables to the 6.8 kernel (from v3.1.2) - When processing a run level change, make auditd exit - In auditd, fix return code when rules added in immutable mode - In auparse, when files are given, also consider EUID for access - Auparse now interprets unnamed/anonymous sockets (Enzo Matsumiya) - Disable Python bindings from setting rules due to swig bug (S. Trofimovich) - Update all lookup tables for the 6.5 kernel - Don't be as paranoid about auditctl -R file permissions - In ausearch, correct subject/object search to be an and if both are given - Adjust formats for 64 bit time_t - Fix segfault in python bindings around the feed API - Add feed_has_data, get_record_num, and get/goto_field_num to python bindings - Update spec: * Move rules-related files into new subpackage `audit-rules': * Files moved: - /sbin/auditctl, /sbin/augenrules, /etc/audit/{audit.rules,rules.d/audit.rules,audit-stop.rules} - manpages for auditctl, augenrules, and audit.rules - /etc/audit is now owned by `audit-rules' as well * Add new file /usr/lib/systemd/system/audit-rules.service * Remove in-house create-augenrules-service.patch that generated augenrules.service systemd unit service * Remove ownership of /usr/share/audit * Create /usr/share/audit-rules directory on %install * Remove audit-userspace-517-compat.patch (fixed upstream) * Remove libev-werror.patch (fixed upstream) * Remove audit-allow-manual-stop.patch (fixed upstream) * Add fix-auparse-test.patch (downstream): Upstream tests uses a static value (42) for 'gdm' uid/gid (based on Fedora values, apparently). Replace these occurrences with 'unknown(123456)' * Replace '--with-python' with '--with-python3' on %configure * Remove autrace and auvirt references (upstream) * Replace README with README.md - Drop `--enable-systemd' from %configure as SysV-style scripts aren't supported in upstream since 113ae191758c ("Drop support for SysVinit") ==== cheese ==== Subpackages: cheese-lang libcheese-common libcheese-gtk25 libcheese8 typelib-1_0-Cheese-3_0 - Add 73.patch: Fix JSON validation. Fixes startup with json-glib 1.10. ==== gtkmm4 ==== Version update (4.14.0 -> 4.16.0) - Update to version 4.16.0: + Almost identical to 4.15.1. - Update to version 4.15.1: + Gdk: - DrawContext: Deprecate begin_frame(), end_frame(), is_in_frame(), get_frame_region(). - Surface: Deprecate set_opaque_region(). - Cursor: Rename create(const SlotGetTexture& slot, .....). Call it create_from_slot(). It was added in 4.15.0, but some create() calls in old code became ambiguous. + Gtk: - Window: Add set_interactive_debugging(). - TextBuffer: Add enum TextBuffer::NotifyFlags, add_commit_notify(), remove_commit_notify(). + Build: Require gtk4 >= 4.15.5. - Drop gtkmm4-docs-without-timestamp.patch: Fixed upstream. ==== gtksourceview5 ==== Version update (5.12.1 -> 5.14.0) Subpackages: gtksourceview5-lang libgtksourceview-5-0 - Update to version 5.14.0: + Fix an issue where the gutter would not redraw when focus changes. + Add support for Groff syntax. - Changes from version 5.13.1: + Documentation improvements + Improve performance of BuilderBlocks font loading. Some of this effort required changes to the TTF, so user testing with a wide variety of languages is desired. This should reduce startup time of GtkSourceView using applications. + gtk-doc.lang: highlight `backtick` spans + c.lang: highlight [[]] style attributes + java.lang: improve escaped character matching + Adwaita.xml, Adwaita-dark.xml: style updates to track platform changes for GNOME 47. - Changes from version 5.13.0: + Ensure gutter renderers are released during dispose + Make default auto-indenter keep indentation when cursor is at line start + python3.lang: Fix f-string in curly braces to have no-spellcheck applied + Updated translations. ==== ibus-libpinyin ==== - Update ibus-libpinyin.spec: Change python depending version, Since tumbleweed and SLE already totally switch to python3, no longer coexist with python2. (boo#1228652) - Add ibus-libpinyin-revert-python-3.2.patch: Backporting cf67e92a from upstream, Revert python3 version checking to 3.2 to enable lower python version building. (boo#1228652) ==== libwnck ==== Subpackages: libwnck-3-0 libwnck-lang typelib-1_0-Wnck-3_0 - BuildRequire gettext-devel instead of gettext: allow OBS to shortcut through gettext-runtime-mini. ==== mozilla-nss ==== Version update (3.103 -> 3.104) Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs mozilla-nss-sysinit mozilla-nss-tools - Fix build error under Leap by rebasing nss-fips-safe-memset.patch. - update to NSS 3.104 * bmo#1910071 - Copy original corpus to heap-allocated buffer * bmo#1910079 - Fix min ssl version for DTLS client fuzzer * bmo#1908990 - Remove OS2 support just like we did on NSPR * bmo#1910605 - clang-format NSS improvements * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function * bmo#1908990 - removing dirent.c from build * bmo#1902078 - Allow handing in keymaterial to shlibsign to make the output reproducible * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR, openunix, sco, unixware or reliantUnix * bmo#1908990 - remove mentions of WIN95 * bmo#1908990 - remove mentions of WIN16 * bmo#1913750 - More explicit directory naming * bmo#1913755 - Add more options to TLS server fuzz target * bmo#1913675 - Add more options to TLS client fuzz target * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI * bmo#1908012 - set nssckbi version number to 2.70. * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert. * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA. * bmo#1908006 - Add Cybertrust Japan Roots to NSS. * bmo#1908004 - Add Taiwan CA Roots to NSS. * bmo#1911354 - remove search by decoded serial in nssToken_FindCertificateByIssuerAndSerialNumber * bmo#1913132 - Fix tstclnt CI build failure * bmo#1913047 - vfyserv: ensure peer cert chain is in db for CERT_VerifyCertificateNow * bmo#1912427 - Enable all supported protocol versions for UDP * bmo#1910361 - Actually use random PSK hash type * bmo#1911576 - Initialize NSS DB once * bmo#1910361 - Additional ECH cipher suites and PSK hash types * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE * bmo#1910605 - clang-format shlibsign.c - remove obsolete nss-reproducible-builds.patch ==== pangomm ==== Version update (2.52.0 -> 2.54.0) - Update to version 2.54.0: + Color: Add parse_with_alpha(). + Context: Add set/get_round_glyph_positions(). + Item: Add default constructor, get_char_offset(). + Layout: Add set/get_justify_last_line(), get_direction(), get_caret_pos(). + LayoutIter: Add operator bool(), get_run_baseline(). + LayoutLine: Add is_paragraph_start(), get_resolved_direction(), get_height(). + TabArray: Add TabArray(const Glib::ustring& text) constructor, operator bool(), set_positions_in_pixels(), to_string(), set/get_decimal_point(), sort(). + Documentation: - Language::get_scripts(): Improve documentation. - Don't link to removed parts of library.gnome.org. + Build: - Require pango >= 1.54.0. - Meson build: Require meson >= 0.62.0. - Use Meson's pkgconfig module instead of using the *.pc.in templates. - Drop pangomm-docs-without-timestamp.patch, fixed upstream. ==== pipewire ==== Version update (1.2.4 -> 1.2.5) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-jack pipewire-lang pipewire-libjack-0_3 pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Update to version 1.2.5: + Highlights - Fix an fd mismatch in the protocol in some cases that could lead to fd leaks and crashes. - Fix a bug where the mixer was not updated after setting the port, which would cause muted audio at boot or resume from suspend. - Fix a potential use-after-free in module-rt when stopping a thread. - Cached objects are now freed in the JACK API to avoid memory leaks. - Some more fixes and improvements. + PipeWire - RequestProcess commands are now only sent after the node completes the state change to RUNNING. - More FreeBSD fixes. - Handle ACTIVE links going to < PAUSED as well. This improves renegotiation in some cases. - Fix an fd mismatch in the protocol in some cases that could lead to fd leaks and crashes. + Modules - Many of the network modules can now also accept hostnames instead of IP addresses. - Fix a potential use-after-free in module-rt when stopping the thread. + SPA - Support for elogind was added. - Some more errors are checked when converting JSON to POD. - Fix a bug where the mixer was not updated after setting the port, which would cause muted audio at boot or resume from suspend. + JACK - The BBT transport handling was improved. Some fields were added to be able to handle the JACK semantics correctly. - Buffers are now aligned according to the maximum CPU alignment instead of the hardcoded 16 bytes alignment. - Cached objects are now freed correctly. + Doc - Some small doc updates. - Don't try to enable apparmor support if without_apparmor is defined (as in SLFO). ==== python-cryptography ==== Version update (43.0.0 -> 43.0.1) - update to 43.0.1: * Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.3.2. ==== virtualbox ==== Version update (7.0.20 -> 7.1.0) - Update to release 7.1 * The GUI now offers a selection between Basic and Experienced user level with reduced or full UI functionality. * VRDE: If user does not set up TLS with custom certificates, enable it with self-signed certificate, including issuing a new one before the old one expires * NAT: New engine with IPv6 support. * Linux host and guest: Added Wayland support for Clipboard sharing. - Add cxx17.patch to workaround "new" build failures with gcc14/C++17 - Move the C++17 command line switch from vbox-vboxadd-init-script.diff to cxx17.patch - Add Conflict markers to prevent the situation {virtualbox-7.1 combined with virtualbox-qt-7.0}; old VBQT did not have the right (strong enough) Requires lines. ==== virtualbox-kmp ==== Version update (7.0.20_k6.11.0_1 -> 7.1.0_k6.11.0_1) - Update to release 7.1 * The GUI now offers a selection between Basic and Experienced user level with reduced or full UI functionality. * VRDE: If user does not set up TLS with custom certificates, enable it with self-signed certificate, including issuing a new one before the old one expires * NAT: New engine with IPv6 support. * Linux host and guest: Added Wayland support for Clipboard sharing. - Add cxx17.patch to workaround "new" build failures with gcc14/C++17 - Move the C++17 command line switch from vbox-vboxadd-init-script.diff to cxx17.patch - Add Conflict markers to prevent the situation {virtualbox-7.1 combined with virtualbox-qt-7.0}; old VBQT did not have the right (strong enough) Requires lines.

1 0

New Slowroll update 20241001T1818 released!
by bernhardout＠lsmod.de 01 Oct '24

01 Oct '24

Please note that this mail was generated by a script. A collection of maintenance updates was released for Slowroll. Released 59 packages: * ViTables * ansible-variables * aws-c-auth * aws-c-common * aws-c-http * aws-checksums * cmake * delve * docker * dyff * gearlever * golang-github-lusitaniae-apache_exporter * gsoap * gucharmap * hyprwayland-scanner * istioctl * kernel-source-longterm * libsvm * lxc * lxcfs * lyx * matthewlib-java * nautilus-dropbox * ncurses * nvidia-open-driver-G06-signed * obs-service-kiwi_metainfo_helper * osc * pax-utils * pinentry * python-Genshi * python-accessible-pygments * python-awkward * python-colorclass * python-compressed_rtf * python-domdf-python-tools * python-easygui * python-ebcdic * python-gear * python-iminuit * python-msoffcrypto-tool * python-nbval * python-pycurl * python-pydub * python-pytest-pretty * python-red-black-tree-mod * python-sphinx-theme-builder * python-whatthepatch * python-xlrd * qrtool * remind * sddm * tectonic * transactional-update * trytond * trytond_account * trytond_stock * trytond_stock_supply * vte * xen

1 0