openSUSE Factory
Threads by month
- ----- 2024 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2023 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2022 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2021 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2020 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2019 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2018 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2017 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2016 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2015 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2014 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2013 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2012 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2011 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2010 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2009 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2008 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2007 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2006 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2005 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2004 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2003 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2002 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2001 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
October 2024
- 70 participants
- 106 discussions
Please note that this mail was generated by a script.
A collection of maintenance updates was released for Slowroll.
Released 35 packages:
* bugzilla
* buildah
* contrast
* cosmic-applets
* cosmic-comp
* cosmic-files
* cosmic-launcher
* cosmic-store
* cosmic-term
* ffmpeg-6
* frr
* geany-plugins
* go1.22
* go1.23
* gstreamer-editing-services
* gstreamer-plugins-bad
* jafama
* kbuild
* libarchive
* meson
* microos-tools
* mozjs115
* mozjs78
* newsflash
* opensc
* pika-backup
* python-bugzilla
* python-drgn
* python-postorius
* python-testtools
* python313
* rioterm
* shotwell
* tigervnc
* xdg-desktop-portal-hyprland
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio…
Please do not reply to this email to report issues, rather file a bug
on bugzilla.opensuse.org. For more information on filing bugs please
see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
coreutils
coreutils-systemd
cups (2.4.10 -> 2.4.11)
desktop-translations
fprintd (1.94.3 -> 1.94.4)
gnutls
libgtop (2.41.3 -> 2.41.3+4)
libjpeg-turbo
librsvg (2.58.4 -> 2.59.1)
mtools (4.0.44 -> 4.0.45)
ncurses (6.5.20240922 -> 6.5.20240928)
openSUSE-release (20240930 -> 20241001)
opencc (1.1.7 -> 1.1.9)
selinux-policy (20240925 -> 20240930)
suse-module-tools (16.0.51 -> 16.0.52)
xen (4.19.0_02 -> 4.19.0_04)
=== Details ===
==== coreutils ====
Subpackages: coreutils-lang
- coreutils-i18n.patch: fold(1): fix fold -b with UTF8 locale.
Sync fix in I18N patch from Fedora/Redhat and add a test. (RHEL-60295)
Original report: https://access.redhat.com/solutions/3459791
==== coreutils-systemd ====
- coreutils-i18n.patch: fold(1): fix fold -b with UTF8 locale.
Sync fix in I18N patch from Fedora/Redhat and add a test. (RHEL-60295)
Original report: https://access.redhat.com/solutions/3459791
==== cups ====
Version update (2.4.10 -> 2.4.11)
Subpackages: cups-client cups-config libcups2 libcupsimage2
- Version upgrade to 2.4.11:
See https://github.com/openprinting/cups/releases
CUPS 2.4.11 brings several bug fixes regarding IPP response
validation, processing PPD values, Web UI support
(checkbox support, modifying printers) and others fixes.
Detailed list (from CHANGES.md):
* Updated the maximum file descriptor limit
for `cupsd` to 64k-1 (Issue #989)
* Fixed `lpoptions -d` with a discovered
but not added printer (Issue #833)
* Fixed incorrect error message for HTTP/IPP errors (Issue #893)
* Fixed JobPrivateAccess and SubscriptionPrivateAccess support
for "all" (Issue #990)
* Fixed issues with cupsGetDestMediaByXxx (Issue #993)
* Fixed adding and modifying of printers
via the web interface (Issue #998)
* Fixed HTTP PeerCred authentication
for domain users (Issue #1001)
* Fixed checkbox support (Issue #1008)
* Fixed printer state notifications (Issue #1013)
* Fixed IPP Everywhere printer setup (Issue #1033)
Issues are those at https://github.com/OpenPrinting/cups/issues
In particular CUPS 2.4.11 contains those commit regarding
IPP response validation and processing PPD values:
* "Quote PPD localized strings"
https://github.com/OpenPrinting/cups/commit/1e6ca5913eceee906038bc04cc7ccfb…
plus a cleanup to "Fix warnings for unused vars"
https://github.com/OpenPrinting/cups/commit/2abe1ba8a66864aa82cd9836b37e571…
- Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.11
- avoid_C99_mode_for_loop_initial_declarations.patch
is no longer needed because the issue is fixed upstream.
==== desktop-translations ====
- Add support for the new tool %suse_translate_desktop.
(boo#1158957)
- Generate desktop-translation-devel for purpose of translation
check. (boo#1158957)
==== fprintd ====
Version update (1.94.3 -> 1.94.4)
Subpackages: fprintd-lang fprintd-pam
- update to 1.94.4
* Support building in other non-linux unix platforms (FreeBSD tested)
* Bump minimum glib dependency version to 2.64
* Allow interactive DBus authorization on fprintd-tools
* Use prefix to determine the PAM modules dir
* Translation updates
==== gnutls ====
Subpackages: libgnutls-dane0 libgnutls30 libgnutls30-32bit
- Build with liboqs to support the X25519Kyber768 post-quantum key
exchange algorithm.
==== libgtop ====
Version update (2.41.3 -> 2.41.3+4)
Subpackages: libgtop-2_0-11 libgtop-lang
- Update to version 2.41.3+4:
+ Reproducible Builds: Do not embed build-server kernel version
on Linux (boo#1230850).
+ Updated translations.
==== libjpeg-turbo ====
Subpackages: libjpeg8 libjpeg8-x86-64-v3
- update to 3.0.4:
* Fixed an issue whereby the CPU usage of the default marker
processor in the decompressor grew exponentially with the
number of markers. This caused an unreasonable slow-down in
`jpeg_read_header()` if an application called `jpeg_save_markers()`
to save markers of a particular type and then attempted to
decompress a JPEG image containing an excessive number of markers
of that type.
* Hardened the default marker processor in the decompressor to guard
against an issue (exposed by 3.0 beta2[6]) whereby attempting to
decompress a specially-crafted malformed JPEG image (specifically
an image with a complete 12-bit-per-sample Start Of Frame segment
followed by an incomplete 8-bit-per-sample Start Of Frame segment)
using buffered-image mode and input prefetching caused a segfault
if the `fill_input_buffer()` method in the calling application's
custom source manager incorrectly returned `FALSE` in response to a
prematurely-terminated JPEG data stream.
* Fixed an issue in cjpeg whereby, when generating a
12-bit-per-sample or 16-bit-per-sample lossless JPEG image,
specifying a point transform value greater than 7 resulted in an
error ("Invalid progressive/lossless parameters") unless the
`-precision` option was specified before the `-lossless` option.
* Fixed a regression introduced by 3.0.3[3] that made it impossible
for calling applications to generate 12-bit-per-sample
arithmetic-coded lossy JPEG images using the TurboJPEG API.
* Fixed an error ("Destination buffer is not large enough") that
occurred when attempting to generate a full-color lossless JPEG
image using the TurboJPEG Java API's `byte[]
TJCompressor.compress()` method if the value of `TJ.PARAM_SUBSAMP`
was not `TJ.SAMP_444`.
* Fixed a segfault in djpeg that occurred if a negative width was
specified with the `-crop` option. Since the cropping region width
was read into an unsigned 32-bit integer, a negative width was
interpreted as a very large value. With certain negative width and
positive left boundary values, the bounds checks in djpeg and
`jpeg_crop_scanline()` overflowed and did not detect the
out-of-bounds width, which caused a buffer overrun in the
upsampling or color conversion routine. Both bounds checks now use
64-bit integers to guard against overflow, and djpeg now checks for
negative numbers when it parses the crop specification from the
command line.
* Fixed an issue whereby the TurboJPEG lossless transformation
function and methods checked the specified cropping region against
the source image dimensions and level of chrominance subsampling
rather than the destination image dimensions and level of
chrominance subsampling, which caused some cropping regions to be
unduly rejected when performing 90-degree rotation, 270-degree
rotation, transposition, transverse transposition, or grayscale
conversion.
* Fixed an issue whereby the TurboJPEG lossless transformation
function and methods did not honor
`TJXOPT_COPYNONE`/`TJTransform.OPT_COPYNONE` unless it was
specified for all lossless transforms.
==== librsvg ====
Version update (2.58.4 -> 2.59.1)
Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2 rsvg-thumbnailer typelib-1_0-Rsvg-2_0
- Update to version 2.59.1:
+ Two mitigations for crashes found throuh fuzz testing:
- Cairo is easy to crash by giving it path coordinates that are
outside of the range that it can represent internally with
its fixed-point arithmetic. Fuzzers usually produce SVGs with
very large numbers for coordinates, which overflow Cairo's
arithmetic.
This is just a *mitigation*, not a complete fix: librsvg will
now check if path coordinates are outside of Cairo's
supported range, and it will not render shapes with
problematic coordinates. However, fuzzers may still produce
coordinates that are in range but that still make Cairo
crash. I am starting to learn Cairo's code to see if this can
be fixed gradually.
- Update to version 2.59.0:
+ The biggest change in this release is that librsvg now uses the
Meson build system instead of autotools.
+ With Meson, librsvg now builds a lot more reliably on Windows
and MacOS.
+ Librsvg now uses Meson instead of Autotools
+ There is a -Davif meson option to include support for AVIF in
the image-rs crate, which librsvg uses to load raster images.
+ Librsvg now explicitly builds only its supported raster formats
for image-rs: JPEG, PNG, GIF, WEBP, and optional compile-time
support for AVIF). Other raster image formats are not
supported, to minimize the attack surface.
+ Librsvg now supports cancellable rendering; you can start
rendering an RsvgHandle in one thread, and stop it from another
thread with a GCancellable. In the C API, you can use the
rsvg_handle_set_cancellable_for_rendering() function; in the
Rust API, CairoRenderer now has a with_cancellable() method.
+ For Rust users, there is now a 'librsvg-rebind' crate that
binds the C API for use from Rust. Internally this links to the
system's librsvg shared library, in contrast with the 'librsvg'
crate, which is statically linked and which has a native Rust
API. The 'librsvg-rebind' crate is for cases where the
additional code size from static linking is not desired. This
librsvg-rebind crate is available from crates.io.
+ A bunch of fixes to bugs found through fuzz testing.
- Use ldconfig_scriptlets macro for some of the post(un) handling.
- Update to version 2.58.94:
+ The minimum supported Rust version (MSRV) is 1.77.2.
+ Fix assertion failures with large Hue value in hsl() or hwb()
colors.
+ Limit the baseFrequency for feTurbulence to avoid integer
overflow.
+ Only make exported symbols visible in the library's binary.
+ Fix the -Davif=enabled feature; it was not being handled
correctly at compilation time.
+ Ensure compatibility with Binutils < 2.39.
+ Build fixes for Windows.
- Update to version 2.58.92:
+ Librsvg is now part of Google's oss-fuzz and is fuzz-tested
automatically - see
https://gnome.pages.gitlab.gnome.org/librsvg/devel-docs/oss_fuzz.html
for details.
+ This release has two bug fixes from fuzz testing, and a new API
call:
- Don't leak XML entities when the XML document fails to parse.
- Fix stack overflow in <use> reference cycle.
- Librsvg now supports cancellable rendering; you can start
rendering an RsvgHandle in one thread, and stop it from
another thread with a GCancellable. In the C API, you can use
the rsvg_handle_set_cancellable_for_rendering() function; in
the Rust API, CairoRenderer now has a with_cancellable()
method.
+ Many build fixes for Windows, MacOS, iOS, and cross-compilation
+ Continued refactoring for a render tree.
+ Many fixes to the documentation.
- Update to version 2.58.91:
+ Librsvg now requires cairo version 1.18.0 or later.
+ Librsvg now explicitly builds only its supported raster
formats for image-rs: JPEG, PNG, GIF, WEBP, and optional
compile-time support for AVIF. Other raster image formats are
not supported, to minimize the attack surface.
+ Don't generate gdk-pixbuf loaders cache if DESTDIR is set.
+ Documentation updates for meson.
+ Document the fact that the default DPI in the C API for
RsvgHandle is 90 DPI, unlike rsvg-convert and the Rust API,
which use 96 DPI.
+ Document the security considerations for the image-rs crate
and the raster image formats that librsvg supports.
+ Fix and fine-tune compilation on Windows (MSVC and msys2),
MacOS, and Android.
+ Fix installation when only compiling the static library.
+ Update Pango for CI and fix a test file. The test suite now
includes the DejaVu Sans font, which supports extra
glyphs/languages for the test suite.
- Changesfrom version 2.58.90:
+ librsvg has been ported to the Meson build system. Librsvg no
longer uses autotools!
+ Changes in this release:
- Librsvg now uses Meson instead of Autotools.
- There is a -Davif meson option to include support for AVIF in
the image-rs crate, which librsvg uses to load raster images.
- Start revamping the fuzzing infrastructure.
- Add cargo-c and pkgconfig(dav1d) BuildRequires: new dependencies.
==== mtools ====
Version update (4.0.44 -> 4.0.45)
- version update to 4.0.45
* Fixed iconv descriptor leak
* Fixed size of error message buffer
==== ncurses ====
Version update (6.5.20240922 -> 6.5.20240928)
Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen
- Add ncurses patch 20240928
+ improve error-message from infocmp when a terminal entry cannot be
opened (patch by Branden Robinson).
+ improve filtering of -L options in misc/gen-pkgconfig.in and in
misc/ncurses-config.in
+ add check in wresize() for out-of-range dimensions (report by Peter
Bierma).
==== openSUSE-release ====
Version update (20240930 -> 20241001)
Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd
- automatically generated by openSUSE-release-tools/pkglistgen
==== opencc ====
Version update (1.1.7 -> 1.1.9)
Subpackages: libopencc1_1 opencc-data
- update to 1.1.9:
* Change googletest to bazel dev_dependency.
* Add Installation details in readme.
* Test of Github FUNDING.yml
* Fix npmignore.
* Apply patch to rapidjson.
* Use Python 3.
* Add Bazel Python library and test.
* Add back Config::NewFromFile with one argument to maintain the
ABI compatibility.
==== selinux-policy ====
Version update (20240925 -> 20240930)
Subpackages: selinux-policy-targeted
- Update to version 20240930:
* Label yast binaries correctly
==== suse-module-tools ====
Version update (16.0.51 -> 16.0.52)
Subpackages: suse-module-tools-scriptlets
- Update to version 16.0.52:
* rpm-script: create vmlinuz and initrd also in image build environments
(bsc#1231040, bsc#1230858)
* regenerate-initrd-posttrans: Fix SKIP_REGENERATE_INITRD_ALL
(bsc#1228929)
==== xen ====
Version update (4.19.0_02 -> 4.19.0_04)
Subpackages: xen-libs xen-tools xen-tools-domU
- bsc#1230366 - VUL-0: CVE-2024-45817: xen: x86: Deadlock in
vlapic_error() (XSA-462)
66f2af41-x86-vLAPIC-undue-recursion-of-vlapic_error.patch
Drop xsa462.patch
- Upstream bug fixes (bsc#1027519)
66cf737b-x86-Dom0-disable-SMAP-for-PV-only.patch
66d6dca8-libxl-nul-termination-in-xen_console_read_line.patch
66d8690f-SUPPORT-split-XSM-from-Flask.patch
66e29480-x86-HVM-properly-reject-indirect-VRAM-writes.patch
66e44ae2-x86-ucode-AMD-buffer-underrun.patch
66f2fd92-x86-ucode-Intel-stricter-sanity-check.patch
- bsc#1230366 - VUL-0: CVE-2024-45817: xen: x86: Deadlock in
vlapic_error() (XSA-462)
xsa462.patch
1
0
02 Oct '24
Hi,
I did plenty of patches this month.
I spent a week in Hamburg on the r-b-world-summit, having good
discussions and finding nice patches from Debian (thanks Mattia).
With ring0 being reproducible, I concentrated on ring1 packages.
I dropped efl and mono-core that are not needed there.
I started to collect various details about my R-B-OS in
https://en.opensuse.org/openSUSE:Reproducible_openSUSE/Part1
and
https://en.opensuse.org/openSUSE:Reproducible_openSUSE/Part2
I worked with Fridrich Strba to greatly improve the reproducibility of
java-related packages. This cut the number of remaining packages with
issues in half. He made nice toolchain-patches for ant, xmvn and several
maven-plugins, mostly for normalizing jar mtimes.
https://github.com/mesonbuild/meson-python/issues/671 also stands out,
because this affects at least 6 python packages. I have a workaround now.
The kernel became reproducible after switching generation of Sphinx docs
and BTF to -j1 to workaround race-conditions (partial fixes for the
races exist).
Two major items on my todo-list are:
* write an rb-checker bot that tests submissions to Factory
* fix non-determinism in emacs .pdmp files (
https://mail.gnu.org/archive/html/emacs-devel/2024-10/msg00004.html ) ;
the alternative would be to drop it from my R-B-OS and lose tools that
depend on it: a2ps anthy autoconf avfs caml-mode ddskk global gnugo
gnuplot idutils librep maildir-utils notmuch psgml quilt rtags scheme48
supercollider tamago translate-shell uim vagrant xdp-tools
xemacs-packages xslide
Here are the autogenerated bits:
last month's status:
https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/…
Last months' reproducible builds project updates (including my work):
https://reproducible-builds.org/reports/2024-08/
I uploaded https://rb.zq1.de/compare.factory-20241002/ today
https://rb.zq1.de/spec/glossar.txt explains the meaning of below values:
total-packages: 15806 (+98)
build-tried: 15741 (+100)
build-failed: 12 (+5)
build-n-a: 180 (+0)
build-succeeded: 15549 (+95)
build-official-failed+na: 52 (-106)
build-compare-failed: 153 (+1)
build-compare-succeeded: 15396 (+94)
verify-failed: 255 (+4)
verified-semi-reproducible: 15106 (+95)
verified-bit-identical: 13634 (-12)
bit-by-bit-identical: 15292 (+467)
not-bit-by-bit-identical: 258 (-366)
not-bit-by-bit-identicalcheck: 257 (-372)
https://rb.zq1.de/compare.factory-20241002/graph.png
shows the change over time
https://rb.zq1.de/compare.factory-20241002/unreproduciblerings.txt
lists very unreproducible core packages (bootstrap+DVD)
Of the badly unreproducible packages,
3 were in ring0
27 were in ring1
That makes it 30/4043 => 0.74 %
which is below the overall average of
153/15549 => 0.98 %
258/15549 => 1.66 % of packages are not perfectly reproducible
package notes:
==> ./agama-integration-tests/.rb.notes <==
=> https://github.com/openSUSE/agama/pull/1576 (old: SR 1194375) random
port in .lock file
==> ./binutils/.rb.notes <==
#=> SR 1171128 PGO from --enable-pgo-build=lto
no problem?
==> ./biome/.rb.notes <==
rust/llvm
some order issue visible in strings diff
==> ./blaspp/.rb.notes <==
#=> SR 1194838 => https://github.com/icl-utk-edu/blaspp/pull/87
==> ./ca-certificates-mozilla/.rb.notes <==
#=> SR 1192626 = https://bugzilla.opensuse.org/show_bug.cgi?id=1229003
date /usr/share/factory/var/lib/ca-certificates/java-cacerts differs at
offset '30' (Java KeyStore)
ca-certificates-mozilla:ca-certificates-mozilla-prebuilt unknown -
likely timestamp in milliseconds
==> ./clutter/.rb.notes <==
= https://gitlab.gnome.org/GNOME/libxslt/-/issues/123
= https://bugzilla.gnome.org/show_bug.cgi?id=751621 needs toolchain
xsltproc patch for stable IDs
==> ./colord/.rb.notes <==
= https://github.com/omgovich/colord/issues/122
https://bugzilla.opensuse.org/show_bug.cgi?id=1217747 .icc only-CPU
==> ./contrast/.rb.notes <==
unknown rust/llvm
=> SR 1203242 contrast FTBFS-nocheck
==> ./crash/.rb.notes <==
= https://bugzilla.opensuse.org/show_bug.cgi?id=1230281 parallelism, race
==> ./descent3/.rb.notes <==
=> descent3 https://github.com/DescentDevelopers/Descent3/pull/606
mtime/date = archive with embedded mtimes
from ["../tools/HogMaker",
"/home/abuild/rpmbuild/BUILD/Descent3-616f921e97b0fb4745a2d36de149c737bf720214/build/Descent3/d3-linux.hog",
"/home/abuild/rpmbuild/BUILD/Descent3-616f921e97b0fb4745a2d36de149c737bf720214/scripts/data/fullhog/d3-linux-fullhog.txt",
"/home/abuild/rpmbuild/BUILD/Descent3-616f921e97b0fb4745a2d36de149c737bf720214/build/scripts"]
==> ./difftastic/.rb.notes <==
rust/llvm
==> ./elixir/.rb.notes <==
= https://bugzilla.opensuse.org/show_bug.cgi?id=1205134 FTBFS-j1 stuck
osc build --vm-type=kvm --clean --noservice -j1 standard
==> ./emacs/.rb.notes <==
= https://mail.gnu.org/archive/html/emacs-devel/2024-10/msg00004.html .pdmp
cd ~/rpmbuild/BUILD/emacs-29.4/src && ./temacs "--__aslr-disabled"
"-batch" "--no-build-details" "-l" "loadup" "--temacs=pdump"
"--bin-dest" "/usr/bin/" "--eln-dest" "/usr/lib64/emacs/29.4/" && md5sum
emacs.pdmp
==> ./fonttosfnt/.rb.notes <==
#=> SR 1190940 1190278 =>
https://gitlab.freedesktop.org/xorg/app/fonttosfnt/-/merge_requests/22
toolchain, date
==> ./ghostscript/.rb.notes <==
date in .h
+ https://bugs.ghostscript.com/show_bug.cgi?id=696765
==> ./git-annex/.rb.notes <==
parallelism
==> ./git-credential-keepassxc/.rb.notes <==
rust codegen-units, low-entropy
+_ZN4clap5error5Error7for_app17h3a0e3b5c590fcdc5E.llvm.17478145784603506657
==> ./glycin-loaders/.rb.notes <==
= https://bugzilla.opensuse.org/show_bug.cgi?id=1230879 FTBFS-j1
osc build --vm-type=kvm --noservice -j1 standard
==> ./groff/.rb.notes <==
groff:full postscript toolchain date+time
in /usr/share/doc/packages/groff/pdf/pdfmark.pdf
==> ./grpc/.rb.notes <==
#=> SR 1102203 grpc drop log
#=>https://github.com/grpc/grpc/pull/35687
==> ./gstreamer-plugins-rs/.rb.notes <==
= https://gitlab.freedesktop.org/gstreamer/gst-plugins-rs/-/issues/599
date ; rust/llvm asm diff
variations in /usr/lib64/pkgconfig/gstwebrtchttp.pc
==> ./helm/.rb.notes <==
FTBFS-2028-04-05
2032-08-21 SSL
==> ./joker/.rb.notes <==
#=>
https://github.com/candid82/joker/commit/d2817bb18cd9cc0274460113a97dc87f26…
#= https://github.com/candid82/joker/issues/491 hash random order
==> ./kernel-source/.rb.notes <==
= https://bugzilla.opensuse.org/show_bug.cgi?id=1230414 BTF
=
https://lore.kernel.org/linux-doc/33018311-0bdf-4258-b0c0-428a548c710d@suse…
doc variation from Sphinx -j auto
==> ./lapackpp/.rb.notes <==
#=> SR 1194839 => https://github.com/icl-utk-edu/lapackpp/pull/68
hostname in /usr/include/lapack/defines.h
from cmake + defines.h.in
==> ./less/.rb.notes <==
#=> less https://github.com/gwsw/less/pull/567 date
==> ./libcamera/.rb.notes <==
= https://bugs.libcamera.org/show_bug.cgi?id=233 =
https://bugzilla.opensuse.org/show_bug.cgi?id=1217690 random: private
key signatures of modules
/usr/lib64/libcamera-suse.so.3 differs in ELF section .rodata
==> ./libdb-4_8/.rb.notes <==
#=> SR 1190247 1187675 /usr/share/java/db-4.8.30.jar mtimes
from by pid=171773
dir=/home/abuild/rpmbuild/BUILD/db-4.8.30/build_nptl/classes
exec="/usr/bin/jar", ["jar", "cfm", "../db.jar",
"../../dist/../java/jarManifestEntries", "./com/sleepycat"] - started
==> ./libgtop/.rb.notes <==
= https://bugzilla.opensuse.org/show_bug.cgi?id=1230850 uname -r
==> ./libsamplerate/.rb.notes <==
=> SR 1202178 random/PGO:
libsamplerate.so has random diffs from .o
==> ./libxslt/.rb.notes <==
=> SR 1202234 = https://gitlab.gnome.org/GNOME/libxslt/-/issues/37
=>
https://gitlab.gnome.org/GNOME/libxslt/-/commit/c45ed81aeb50a7fb6799a166270…
==> ./llvm17/.rb.notes <==
ASLR left in .so
= https://github.com/llvm/llvm-project/issues/72206 Marvin investigates.
Partially from ASLR - uninitialized memory?
==> ./lua-lmod/.rb.notes <==
=> SR 1195841 => https://github.com/TACC/Lmod/pull/702 date+time from `date`
/usr/share/lmod/8.7.37/libexec/Version.lua differs (ASCII text)
==> ./lua-luarepl/.rb.notes <==
=> SR 1204160 lua-luarepl FTBFS
OSC_BUILD_ROOT=/var/tmp/build-root.$slot osc build --noservice --clean
--vm-type=kvm -M=lua51 standard
==> ./mayavi/.rb.notes <==
tvtk_classes.zip varies (mtimes?)
from python build_wheel
==> ./nfdump/.rb.notes <==
#=> SR 1163778
#=> https://github.com/phaag/nfdump/pull/482 date, solved differently
==> ./nodejs22/.rb.notes <==
ASLR+CPU?
==> ./nvidia-persistenced/.rb.notes <==
nvidia-persistenced date in /usr/share/man/man1/nvidia-persistenced.1.gz
==> ./nvidia-xconfig/.rb.notes <==
=> SR 1203885 nvidia-xconfig
https://github.com/NVIDIA/nvidia-xconfig/pull/3 date in
/usr/share/man/man1/nvidia-xconfig.1.gz
==> ./openttd/.rb.notes <==
ASLR into build-id
==> ./openwsman/.rb.notes <==
= openwsman https://bugzilla.opensuse.org/show_bug.cgi?id=1231038 FTBFS
==> ./parboiled/.rb.notes <==
minor jar, strip-nd
==> ./perl/.rb.notes <==
= https://bugzilla.opensuse.org/show_bug.cgi?id=1230137 embeds build
machine kernel version => must build in KVM
/usr/lib/perl5/5.40.0/x86_64-linux-thread-multi/CORE/config.h differs (C
source, ASCII text)
==> ./pinentry/.rb.notes <==
=> SR 1202479 make efl droppable
==> ./python-PyGithub/.rb.notes <==
=> https://github.com/PyGithub/PyGithub/pull/3045 FTBFS 2024-11-25
found range good=1732496089 bad=1732498014
==> ./python-chroma-hnswlib/.rb.notes <==
=> SR 1202316 python-chroma-hnswlib CPU
==> ./python-emoji/.rb.notes <==
FTBFS
[ 91s] tests/test_zwj_remove.py::test_non_rgi_zwj_replace PASSED
[100%]
==> ./python-endesive/.rb.notes <==
#=>
https://github.com/m32/endesive/commit/47f751ad877e45d7954fdead5482ad164ae8…
#= https://github.com/m32/endesive/issues/173 FTBFS-2040
==> ./python-gobject/.rb.notes <==
python-gobject _gi.cpython-310-x86_64-linux-gnu.so mesonpy toolchain
random filename
=> https://build.opensuse.org/request/show/1204522
==> ./python-libcst/.rb.notes <==
=> https://github.com/Instagram/LibCST/pull/1213 codegen-units=1 rust/llvm
/usr/lib64/python3.11/site-packages/libcst/native.cpython-311-x86_64-linux-gnu.so
==> ./python-meson-python/.rb.notes <==
= https://github.com/mesonbuild/meson-python/issues/671 toolchain for
python-contourpy python-gobject python-numpy python-pandas
python-scikit-learn python-scipy
==> ./python-numpy/.rb.notes <==
mesonpy toolchain random
==> ./python-orjson/.rb.notes <==
?#solved in 3.10.7? machine code diffs from rustc+gcc13
==> ./python-pandas/.rb.notes <==
mesonpy toolchain random; random .pyc - ref counters?
==> ./python-pyHanko/.rb.notes <==
= https://github.com/MatthiasValvekens/pyHanko/issues/472 FTBFS-2030
found range good=1893454427 bad=1893456352
==> ./python-pygraphviz/.rb.notes <==
= https://github.com/pygraphviz/pygraphviz/issues/541 captures execution
time
==> ./python-pyhanko-certvalidator/.rb.notes <==
FTBFS-2031
[ 57s] E pyhanko_certvalidator.errors.ExpiredError: The path
could not be validated because intermediate certificate 1 expired
2030-12-31 08:30:00Z
==> ./python-rdflib/.rb.notes <==
FTBFS :doc (pinged packager in Slack)
==> ./python-scikit-learn/.rb.notes <==
mesonpy toolchain random
parallelism via cython+openmp - similar to
https://github.com/yt-project/yt/issues/4611 - ?does it need
JOBLIB_MULTIPROCESSING=0 ?
==> ./python-scipy/.rb.notes <==
mesonpy toolchain random
==> ./python-yt/.rb.notes <==
= https://github.com/yt-project/yt/issues/4611 parallelism
# old:
==> ./python312/.rb.notes <==
=> SR 1204725 python312 drop .pyc from doc
= https://github.com/python/cpython/issues/124851 FTBFS-2038
==> ./python313/.rb.notes <==
= https://github.com/python/cpython/issues/122433 FTBFS-j1
OSC_BUILD_ROOT=/var/tmp/build-root.$slot time osc build --noservice
--vm-type=kvm --clean standard
==> ./qqc2-breeze-style6/.rb.notes <==
parallelism - source diff in BreezeStyle_Button_qml.cpp
from "/usr/libexec/qt6/qmlcachegen", "--bare", "--resource-path",
"/qt/qml/org/kde/breeze/Button.qml", "-I",
"/home/abuild/rpmbuild/BUILD/qqc2-breeze-style-6.1.5/build/bin/", "-I",
"/usr/lib64/qt6/qml", "-i",
"/home/abuild/rpmbuild/BUILD/qqc2-breeze-style-6.1.5/build/bin/org/kde/breeze/qmldir",
"--resource",
"/home/abuild/rpmbuild/BUILD/qqc2-breeze-style-6.1.5/build/style/qtquickcontrols/.qt/rcc/qmake_org_kde_breeze.qrc",
"--resource",
"/home/abuild/rpmbuild/BUILD/qqc2-breeze-style-6.1.5/build/style/qtquickcontrols/.qt/rcc/BreezeStyle_raw_qml_0.qrc",
"-o",
"/home/abuild/rpmbuild/BUILD/qqc2-breeze-style-6.1.5/build/style/qtquickcontrols/.rcc/qmlcache/BreezeStyle_Button_qml.cpp",
"/home/abuild/rpmbuild/BUILD/qqc2-breeze-style-6.1.5/style/qtquickcontrols/Button.qml"
==> ./resources/.rb.notes <==
unknown rust/llvm
==> ./rmw/.rb.notes <==
#=> https://github.com/theimpossibleastronaut/rmw/pull/442 =
https://github.com/theimpossibleastronaut/rmw/issues/439 FTBFS-2038
found range 2147482293 -> 2147484218
==> ./rpm/.rb.notes <==
=> https://github.com/rpm-software-management/rpm/pull/2762
= https://github.com/rpm-software-management/rpm/issues/932 Cannot set
Build Date from changelog anymore
==> ./runawk/.rb.notes <==
=> SR 1199220 nocheck
==> ./scap-security-guide/.rb.notes <==
= https://bugzilla.opensuse.org/show_bug.cgi?id=1230361 date
==> ./scheme48/.rb.notes <==
FTBFS (from gcc14?)
unreproducible dump
==> ./seahorse/.rb.notes <==
= https://gitlab.gnome.org/GNOME/seahorse/-/issues/394 parallelism, bug
Binary files
/var/tmp/build-root.12/.mount/home/abuild/rpmbuild/BUILD/seahorse-43.0+22/x86_64-suse-linux/src/seahorse.p/meson-generated_application.c.o
and
/var/tmp/build-root.12b/.mount/home/abuild/rpmbuild/BUILD/seahorse-43.0+22/x86_64-suse-linux/src/seahorse.p/meson-generated_application.c.o
differ
==> ./starship/.rb.notes <==
maybe some low-entropy (filesys) issue left
=> https://github.com/starship/starship/pull/5352 filesys readdir, rust
==> ./subversion/.rb.notes <==
=> SR 1203785 minor jar mtimes
/usr/lib64/svn-javahl/svn-javahl.jar
==> ./taigo/.rb.notes <==
= taigo https://bugzilla.opensuse.org/show_bug.cgi?id=1231041 FTBFS
==> ./tycho/.rb.notes <==
FTBFS-2038 osc build --noservice --clean --vm-type=kvm
--build-opt=--vm-custom-opt="-rtc base=2038-01-25T00:00:00" -M=bootstrap
java maven jar
==> ./wine/.rb.notes <==
parallelism
==> ./xen/.rb.notes <==
=> SR 1202206 = https://bugzilla.opensuse.org/show_bug.cgi?id=1230856
date+time in debugsource
==> ./xindy/.rb.notes <==
random xindy.mem CLISP memory image data
= https://sourceforge.net/p/xindy/bugs/65/ report FTBFS-2036
==> ./xmlsec1/.rb.notes <==
FTBFS-2034-07-16
found range good=2036670842 bad=2036672767
1
0
Please note that this mail was generated by a script.
A collection of maintenance updates was released for Slowroll.
Released 38 packages:
* aws-c-mqtt
* aws-c-s3
* azote
* b4
* cosmic-app-library
* cosmic-session
* folks
* fwupd
* galera-4
* gcr
* gcr3
* git
* gpa
* gstreamer
* gstreamer-plugins-base
* gupnp
* hamlib
* haproxy
* jackson-dataformats-text
* libpeas
* libvirt-glib
* lightsoff
* os-autoinst
* podman
* powerman
* python-astroid
* python-ipykernel
* python-jupyter-core
* python-proton-client
* python-zarr
* python312
* resource-agents
* simh
* talhelper
* tokei
* tree
* xen
* yara
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio…
Please do not reply to this email to report issues, rather file a bug
on bugzilla.opensuse.org. For more information on filing bugs please
see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
ModemManager (1.20.6 -> 1.22.0)
amarok (3.1.0 -> 3.1.1)
audit (3.1.1 -> 4.0)
audit-secondary (3.1.1 -> 4.0)
cheese
gtkmm4 (4.14.0 -> 4.16.0)
gtksourceview5 (5.12.1 -> 5.14.0)
ibus-libpinyin
libwnck
mozilla-nss (3.103 -> 3.104)
pangomm (2.52.0 -> 2.54.0)
pipewire (1.2.4 -> 1.2.5)
python-cryptography (43.0.0 -> 43.0.1)
virtualbox (7.0.20 -> 7.1.0)
virtualbox-kmp (7.0.20_k6.11.0_1 -> 7.1.0_k6.11.0_1)
=== Details ===
==== ModemManager ====
Version update (1.20.6 -> 1.22.0)
Subpackages: ModemManager-bash-completion ModemManager-lang libmm-glib0
- Update to version 1.22.0:
+ A new "MSG" (message) log verbosity level is introduced, which
is also the new default one if none explicitly defined. This
level takes the place of the old "INFO" level, as a level
including the most important messages that should be logged
without needing to be warnings or errors. The new "INFO" level
is more verbose than "MSG" but less verbose than "DBG", and may
be useful as default in systems where active debugging of WWAN
related issues is required. E.g. all user operations triggered
via DBus method calls are logged in "INFO" level.
+ Introduced the concept of "personal information" which should
by default not be included in log messages. Enabling personal
information in logs requires to run the daemon with the
'--log-personal-info' option. This feature is mostly
implemented for QMI and MBIM specific logs, but hasn't yet been
included in generic daemon logs or when using the AT protocol.
Changes and fixes related to this feature will be cherry-picked
and included in the future stable branch updates.
- Update URL and Source adresses.
==== amarok ====
Version update (3.1.0 -> 3.1.1)
- Update to 3.1.1
* Most of the context view QML items ported from QtControls 1
to QtControls 2
* Default to no fadeout on pause and stop (kde#491603)
* Actually show the file browser panel toolbar
* Fix track editor autocompletions (kde#491520)
* Ensure home icon is shown in browser breadcrumb
widgets (kde#491354)
==== audit ====
Version update (3.1.1 -> 4.0)
Subpackages: libaudit1 libaudit1-32bit libauparse0
- Update to 4.0
- Drop python2 support
- Drop auvirt and autrace programs
- Drop SysVinit support
- Require the use of the 5.0 or later kernel headers
- New README.md file
- Rewrite legacy service functions in terms of systemctl
- Consolidate and update end of event detection to a common function
- Split off rule loading from auditd.service into audit-rules.service
- Refactor libaudit.h to split out logging functions and record numbers
- Speed up aureport --summary reports
- Limit libaudit python bindings to logging functions
- Add a metrics function for auparse
- Change auditctl to use pidfd_send_signal for signaling auditd
- Adjust watches to optimize syscalls hooked when watch file access
- Drop nispom rules
- Add intepretations for fsconfig, fsopen, fsmount, & move_mount
- Many code fixups (cgzones)
- Update syscall and interpretation tables to the 6.8 kernel
(from v3.1.2)
- When processing a run level change, make auditd exit
- In auditd, fix return code when rules added in immutable mode
- In auparse, when files are given, also consider EUID for access
- Auparse now interprets unnamed/anonymous sockets (Enzo Matsumiya)
- Disable Python bindings from setting rules due to swig bug (S. Trofimovich)
- Update all lookup tables for the 6.5 kernel
- Don't be as paranoid about auditctl -R file permissions
- In ausearch, correct subject/object search to be an and if both are given
- Adjust formats for 64 bit time_t
- Fix segfault in python bindings around the feed API
- Add feed_has_data, get_record_num, and get/goto_field_num to python bindings
- Update spec:
* Add fix-auparse-test.patch (downstream):
Upstream tests uses a static value (42) for 'gdm' uid/gid (based
on Fedora values, apparently). Replace these occurrences with
'unknown(123456)'
* Replace '--with-python' with '--with-python3' on %configure
* Add new headers 'audit_logging.h' and 'audit-records.h' for
audit-devel
==== audit-secondary ====
Version update (3.1.1 -> 4.0)
Subpackages: audit python3-audit system-group-audit
- Update audit-secondary.spec:
* Add "Requires: audit-rules" for audit package
* Remove preun/postun handling of audit-rules.service
- Update to 4.0
- Drop python2 support
- Drop auvirt and autrace programs
- Drop SysVinit support
- Require the use of the 5.0 or later kernel headers
- New README.md file
- Rewrite legacy service functions in terms of systemctl
- Consolidate and update end of event detection to a common function
- Split off rule loading from auditd.service into audit-rules.service
- Refactor libaudit.h to split out logging functions and record numbers
- Speed up aureport --summary reports
- Limit libaudit python bindings to logging functions
- Add a metrics function for auparse
- Change auditctl to use pidfd_send_signal for signaling auditd
- Adjust watches to optimize syscalls hooked when watch file access
- Drop nispom rules
- Add intepretations for fsconfig, fsopen, fsmount, & move_mount
- Many code fixups (cgzones)
- Update syscall and interpretation tables to the 6.8 kernel
(from v3.1.2)
- When processing a run level change, make auditd exit
- In auditd, fix return code when rules added in immutable mode
- In auparse, when files are given, also consider EUID for access
- Auparse now interprets unnamed/anonymous sockets (Enzo Matsumiya)
- Disable Python bindings from setting rules due to swig bug (S. Trofimovich)
- Update all lookup tables for the 6.5 kernel
- Don't be as paranoid about auditctl -R file permissions
- In ausearch, correct subject/object search to be an and if both are given
- Adjust formats for 64 bit time_t
- Fix segfault in python bindings around the feed API
- Add feed_has_data, get_record_num, and get/goto_field_num to python bindings
- Update spec:
* Move rules-related files into new subpackage `audit-rules':
* Files moved:
- /sbin/auditctl, /sbin/augenrules,
/etc/audit/{audit.rules,rules.d/audit.rules,audit-stop.rules}
- manpages for auditctl, augenrules, and audit.rules
- /etc/audit is now owned by `audit-rules' as well
* Add new file /usr/lib/systemd/system/audit-rules.service
* Remove in-house create-augenrules-service.patch that generated
augenrules.service systemd unit service
* Remove ownership of /usr/share/audit
* Create /usr/share/audit-rules directory on %install
* Remove audit-userspace-517-compat.patch (fixed upstream)
* Remove libev-werror.patch (fixed upstream)
* Remove audit-allow-manual-stop.patch (fixed upstream)
* Add fix-auparse-test.patch (downstream):
Upstream tests uses a static value (42) for 'gdm' uid/gid (based
on Fedora values, apparently). Replace these occurrences with
'unknown(123456)'
* Replace '--with-python' with '--with-python3' on %configure
* Remove autrace and auvirt references (upstream)
* Replace README with README.md
- Drop `--enable-systemd' from %configure as SysV-style scripts
aren't supported in upstream since
113ae191758c ("Drop support for SysVinit")
==== cheese ====
Subpackages: cheese-lang libcheese-common libcheese-gtk25 libcheese8 typelib-1_0-Cheese-3_0
- Add 73.patch: Fix JSON validation. Fixes startup with json-glib
1.10.
==== gtkmm4 ====
Version update (4.14.0 -> 4.16.0)
- Update to version 4.16.0:
+ Almost identical to 4.15.1.
- Update to version 4.15.1:
+ Gdk:
- DrawContext: Deprecate begin_frame(), end_frame(),
is_in_frame(), get_frame_region().
- Surface: Deprecate set_opaque_region().
- Cursor: Rename create(const SlotGetTexture& slot, .....).
Call it create_from_slot(). It was added in 4.15.0, but some
create() calls in old code became ambiguous.
+ Gtk:
- Window: Add set_interactive_debugging().
- TextBuffer: Add enum TextBuffer::NotifyFlags,
add_commit_notify(), remove_commit_notify().
+ Build: Require gtk4 >= 4.15.5.
- Drop gtkmm4-docs-without-timestamp.patch: Fixed upstream.
==== gtksourceview5 ====
Version update (5.12.1 -> 5.14.0)
Subpackages: gtksourceview5-lang libgtksourceview-5-0
- Update to version 5.14.0:
+ Fix an issue where the gutter would not redraw when focus
changes.
+ Add support for Groff syntax.
- Changes from version 5.13.1:
+ Documentation improvements
+ Improve performance of BuilderBlocks font loading. Some of this
effort required changes to the TTF, so user testing with a wide
variety of languages is desired. This should reduce startup
time of GtkSourceView using applications.
+ gtk-doc.lang: highlight `backtick` spans
+ c.lang: highlight [[]] style attributes
+ java.lang: improve escaped character matching
+ Adwaita.xml, Adwaita-dark.xml: style updates to track platform
changes for GNOME 47.
- Changes from version 5.13.0:
+ Ensure gutter renderers are released during dispose
+ Make default auto-indenter keep indentation when cursor is at
line start
+ python3.lang: Fix f-string in curly braces to have
no-spellcheck applied
+ Updated translations.
==== ibus-libpinyin ====
- Update ibus-libpinyin.spec:
Change python depending version, Since tumbleweed and SLE already
totally switch to python3, no longer coexist with python2.
(boo#1228652)
- Add ibus-libpinyin-revert-python-3.2.patch:
Backporting cf67e92a from upstream, Revert python3 version
checking to 3.2 to enable lower python version building.
(boo#1228652)
==== libwnck ====
Subpackages: libwnck-3-0 libwnck-lang typelib-1_0-Wnck-3_0
- BuildRequire gettext-devel instead of gettext: allow OBS to
shortcut through gettext-runtime-mini.
==== mozilla-nss ====
Version update (3.103 -> 3.104)
Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs mozilla-nss-sysinit mozilla-nss-tools
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
* bmo#1910071 - Copy original corpus to heap-allocated buffer
* bmo#1910079 - Fix min ssl version for DTLS client fuzzer
* bmo#1908990 - Remove OS2 support just like we did on NSPR
* bmo#1910605 - clang-format NSS improvements
* bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
* bmo#1908990 - removing dirent.c from build
* bmo#1902078 - Allow handing in keymaterial to shlibsign to make
the output reproducible
* bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
* bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
openunix, sco, unixware or reliantUnix
* bmo#1908990 - remove mentions of WIN95
* bmo#1908990 - remove mentions of WIN16
* bmo#1913750 - More explicit directory naming
* bmo#1913755 - Add more options to TLS server fuzz target
* bmo#1913675 - Add more options to TLS client fuzz target
* bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
* bmo#1908012 - set nssckbi version number to 2.70.
* bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
* bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
* bmo#1908006 - Add Cybertrust Japan Roots to NSS.
* bmo#1908004 - Add Taiwan CA Roots to NSS.
* bmo#1911354 - remove search by decoded serial in
nssToken_FindCertificateByIssuerAndSerialNumber
* bmo#1913132 - Fix tstclnt CI build failure
* bmo#1913047 - vfyserv: ensure peer cert chain is in db for
CERT_VerifyCertificateNow
* bmo#1912427 - Enable all supported protocol versions for UDP
* bmo#1910361 - Actually use random PSK hash type
* bmo#1911576 - Initialize NSS DB once
* bmo#1910361 - Additional ECH cipher suites and PSK hash types
* bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
* bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
* bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
==== pangomm ====
Version update (2.52.0 -> 2.54.0)
- Update to version 2.54.0:
+ Color: Add parse_with_alpha().
+ Context: Add set/get_round_glyph_positions().
+ Item: Add default constructor, get_char_offset().
+ Layout: Add set/get_justify_last_line(), get_direction(),
get_caret_pos().
+ LayoutIter: Add operator bool(), get_run_baseline().
+ LayoutLine: Add is_paragraph_start(), get_resolved_direction(),
get_height().
+ TabArray: Add TabArray(const Glib::ustring& text) constructor,
operator bool(), set_positions_in_pixels(), to_string(),
set/get_decimal_point(), sort().
+ Documentation:
- Language::get_scripts(): Improve documentation.
- Don't link to removed parts of library.gnome.org.
+ Build:
- Require pango >= 1.54.0.
- Meson build: Require meson >= 0.62.0.
- Use Meson's pkgconfig module instead of using the *.pc.in
templates.
- Drop pangomm-docs-without-timestamp.patch, fixed upstream.
==== pipewire ====
Version update (1.2.4 -> 1.2.5)
Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-jack pipewire-lang pipewire-libjack-0_3 pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools
- Update to version 1.2.5:
+ Highlights
- Fix an fd mismatch in the protocol in some cases that could
lead to fd leaks and crashes.
- Fix a bug where the mixer was not updated after setting the
port, which would cause muted audio at boot or resume from
suspend.
- Fix a potential use-after-free in module-rt when stopping a
thread.
- Cached objects are now freed in the JACK API to avoid memory
leaks.
- Some more fixes and improvements.
+ PipeWire
- RequestProcess commands are now only sent after the node
completes the state change to RUNNING.
- More FreeBSD fixes.
- Handle ACTIVE links going to < PAUSED as well. This improves
renegotiation in some cases.
- Fix an fd mismatch in the protocol in some cases that could
lead to fd leaks and crashes.
+ Modules
- Many of the network modules can now also accept hostnames
instead of IP addresses.
- Fix a potential use-after-free in module-rt when stopping
the thread.
+ SPA
- Support for elogind was added.
- Some more errors are checked when converting JSON to POD.
- Fix a bug where the mixer was not updated after setting the
port, which would cause muted audio at boot or resume from
suspend.
+ JACK
- The BBT transport handling was improved. Some fields were
added to be able to handle the JACK semantics correctly.
- Buffers are now aligned according to the maximum CPU
alignment instead of the hardcoded 16 bytes alignment.
- Cached objects are now freed correctly.
+ Doc
- Some small doc updates.
- Don't try to enable apparmor support if without_apparmor is
defined (as in SLFO).
==== python-cryptography ====
Version update (43.0.0 -> 43.0.1)
- update to 43.0.1:
* Updated Windows, macOS, and Linux wheels to be compiled with
OpenSSL 3.3.2.
==== virtualbox ====
Version update (7.0.20 -> 7.1.0)
- Update to release 7.1
* The GUI now offers a selection between Basic and Experienced
user level with reduced or full UI functionality.
* VRDE: If user does not set up TLS with custom certificates,
enable it with self-signed certificate, including issuing a
new one before the old one expires
* NAT: New engine with IPv6 support.
* Linux host and guest: Added Wayland support for Clipboard
sharing.
- Add cxx17.patch to workaround "new" build failures
with gcc14/C++17
- Move the C++17 command line switch from vbox-vboxadd-init-script.diff
to cxx17.patch
- Add Conflict markers to prevent the situation {virtualbox-7.1
combined with virtualbox-qt-7.0}; old VBQT did not have the right
(strong enough) Requires lines.
==== virtualbox-kmp ====
Version update (7.0.20_k6.11.0_1 -> 7.1.0_k6.11.0_1)
- Update to release 7.1
* The GUI now offers a selection between Basic and Experienced
user level with reduced or full UI functionality.
* VRDE: If user does not set up TLS with custom certificates,
enable it with self-signed certificate, including issuing a
new one before the old one expires
* NAT: New engine with IPv6 support.
* Linux host and guest: Added Wayland support for Clipboard
sharing.
- Add cxx17.patch to workaround "new" build failures
with gcc14/C++17
- Move the C++17 command line switch from vbox-vboxadd-init-script.diff
to cxx17.patch
- Add Conflict markers to prevent the situation {virtualbox-7.1
combined with virtualbox-qt-7.0}; old VBQT did not have the right
(strong enough) Requires lines.
1
0
Please note that this mail was generated by a script.
A collection of maintenance updates was released for Slowroll.
Released 59 packages:
* ViTables
* ansible-variables
* aws-c-auth
* aws-c-common
* aws-c-http
* aws-checksums
* cmake
* delve
* docker
* dyff
* gearlever
* golang-github-lusitaniae-apache_exporter
* gsoap
* gucharmap
* hyprwayland-scanner
* istioctl
* kernel-source-longterm
* libsvm
* lxc
* lxcfs
* lyx
* matthewlib-java
* nautilus-dropbox
* ncurses
* nvidia-open-driver-G06-signed
* obs-service-kiwi_metainfo_helper
* osc
* pax-utils
* pinentry
* python-Genshi
* python-accessible-pygments
* python-awkward
* python-colorclass
* python-compressed_rtf
* python-domdf-python-tools
* python-easygui
* python-ebcdic
* python-gear
* python-iminuit
* python-msoffcrypto-tool
* python-nbval
* python-pycurl
* python-pydub
* python-pytest-pretty
* python-red-black-tree-mod
* python-sphinx-theme-builder
* python-whatthepatch
* python-xlrd
* qrtool
* remind
* sddm
* tectonic
* transactional-update
* trytond
* trytond_account
* trytond_stock
* trytond_stock_supply
* vte
* xen
1
0