November 2024 - openSUSE Factory - openSUSE Mailing Lists

Tumbleweed - Review of the week 2024/46
by Dominique Leuenberger 15 Nov '24

15 Nov '24

Dear Tumbleweed users and hackers, While everybody started thinking about HackWeek[0], Tumbleweed kept rolling on without any major bumps on the road. This week, we released five snapshots (1108, 1109, 1111, 1112, and 1113). The most relevant changes were: * KDE Gear 24.08.3 * KDE Frameworks 6.8.0 * Mesa 24.2.6 * LLVM 19.1.3 * cURL 8.11.0 * Mozilla Firefox 132.0.1: No longer use custom patches to interact with KDE’s file dialogs, but rather use the xdg-desktop-portals * Linux kernel 6.11.7 * Swig 4.3.0 Looking back at last week’s review, that is pretty much what had been advertised then. The preview for the upcoming snapshots includes: * Linux kernel 6.11.8 * Enabling Python 3.13 modules; Python 3.11 will remain the default for now, subject to change * Icu 76.1 * cmake 3.31.0 * Debugedit 5.1 * dbus-1-x11 will be removed: after the move to dbus-broker, we only need a simple dbus-launch, without X11-integration Cheers, Dominique [0] https://hackweek.opensuse.org/

1 0

New Slowroll update 20241115T0005 released!
by bernhardout＠lsmod.de 15 Nov '24

15 Nov '24

Please note that this mail was generated by a script. A collection of maintenance updates was released for Slowroll. Released 73 packages: * asar * babl * endless-sky * ghc-generically * gnunet-messenger-gtk * grafana * grub2 * gstreamer * gstreamer-editing-services * gstreamer-plugins-bad * gstreamer-plugins-base * gstreamer-plugins-good * hsqldb * hyfetch * jersey * libgnunetchat * libselinux * libsoup * libsoup2 * libspf2 * luajit * nextcloud * nghttp2 * obs-service-kiwi_metainfo_helper * perl-Mail-SPF * postgresql17 * python-Mako * python-PyChromecast * python-PyQt6 * python-PyQt6-3D * python-PyQt6-Charts * python-PyQt6-DataVisualization * python-PyQt6-NetworkAuth * python-PyQt6-WebEngine * python-Quart * python-SQLAlchemy * python-certifi * python-cryptography * python-fastapi * python-nocaselist * python-octave-kernel * python-peewee * python-python-engineio * python-qt5 * python-starlette * qt6-declarative * rubygem-autoprefixer-rails * rubygem-concurrent-ruby * rubygem-debase-ruby_core_source * rubygem-delayed_job * rubygem-fluentd * rubygem-http-cookie * rubygem-i18n * rubygem-importmap-rails * rubygem-json * rubygem-json_pure * rubygem-rack-2.2 * rubygem-rails-i18n * rubygem-sprockets-3.7 * rubygem-thor * rubygem-uglifier * rubygem-yard * scintilla * sdl_bomber * stress-ng * tinygo * tix * translate-toolkit * wardstone * woodpecker * xmrig * xorg-x11-driver-video * yast2-bootloader

1 0

New Tumbleweed snapshot 20241113 released!
by Dominique Leuenberger 14 Nov '24

14 Nov '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: alsa (1.2.12 -> 1.2.13) alsa-ucm-conf (1.2.12 -> 1.2.13) alsa-utils (1.2.12 -> 1.2.13) grub2 libheif (1.19.2 -> 1.19.3) libopenmpt (0.7.10 -> 0.7.11) libsemanage libsoup libsoup2 llvm18 nghttp2 (1.62.1 -> 1.64.0) openSUSE-release (20241112 -> 20241113) openssl-3 qt6-declarative schily wget (1.24.5 -> 1.25.0) yast2-iscsi-client (5.0.3 -> 5.0.4) === Details === ==== alsa ==== Version update (1.2.12 -> 1.2.13) Subpackages: libasound2 libatopology2 - Update to alsa-lib 1.2.13: * static build fixes * documentation update for control remap API * PCM dmix fixes * pcm: implement snd_pcm_hw_params_get_sync() and obsolete snd_pcm_info_get_sync() * ump: Add a function to provide the packet word length of a UMP type * seq: Add snd_seq_{get|set}_ump_is_midi1() API functions * seq: Add API functions to set different tempo base values * seq: Add API helper functions for creating UMP Endpoint and Blocks * documentation fixes for UMP and sequencer API * test: Add an example programs for UMP For details, see: https://www.alsa-project.org/wiki/Changes_v1.2.12_v1.2.13#alsa-lib - Conditionally take libtool ==== alsa-ucm-conf ==== Version update (1.2.12 -> 1.2.13) - Update to version 1.2.13: * Updates for USB-audio, Mediatek, Qualcomm, ACP, SoundWire, wsa884x, wcd938x, Intel AVS, SOF HDA, etc For details, see: https://www.alsa-project.org/wiki/Changes_v1.2.12_v1.2.13#alsa-ucm-conf ==== alsa-utils ==== Version update (1.2.12 -> 1.2.13) - Update to alsa-utils 1.2.13: * alsactl: add support for AMD ACP digital microphone * aplay: Print '=== PAUSE ===' only if it is supported * aplaymidi/arecordmidi: Allow to pass 0 to -u option, too * new aplaymidi2/arecordmidi2 for MIDI v2.0 * aseqdump: improved UMP supports * various topology updates * aseqsend: improvement and UMP supports For details, see: https://www.alsa-project.org/wiki/Changes_v1.2.12_v1.2.13#alsa-utils ==== grub2 ==== Subpackages: grub2-common grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - Revert the patches related to BLS support in grub2-mkconfig, as they are not relevant to the current BLS integration and cause issues in older KIWI versions, which actively force it to be enabled by default (bsc#1233196) * 0002-Add-BLS-support-to-grub-mkconfig.patch * 0003-Add-grub2-switch-to-blscfg.patch * 0007-grub-switch-to-blscfg-adapt-to-openSUSE.patch * 0008-blscfg-reading-bls-fragments-if-boot-present.patch * 0009-10_linux-Some-refinement-for-BLS.patch * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch ==== libheif ==== Version update (1.19.2 -> 1.19.3) Subpackages: gdk-pixbuf-loader-libheif libheif-aom libheif-dav1d libheif-ffmpeg libheif-jpeg libheif-openjpeg libheif-rav1e libheif-svtenc libheif1 - update to 1.19.2: * fixes a race condition that may lead to some image tiles not being included in the output image (#1379) * fix a potential crash when querying overlay image information ==== libopenmpt ==== Version update (0.7.10 -> 0.7.11) - Update to 0.7.11: * IT: Donât import SAx High Offset command for IT 1.xx modules. This feature was added in Impulse Tracker 2.00. * IT: Limit Vxx parameter to V80 for files made with old Schism Tracker versions. * IT / S3M: Impulse Tracker 2.14 patch version information was incorrect. * S3M: O00 effects are no longer ignored if the tracker version in the file header indicates Scream Tracker 3.00 / 3.01, but the file was clearly saved with another tool (e.g. UNMO3). * S3M: As files made with Scream Tracker 3.20 and 3.21 cannot be told apart, both versions are now listed in the tracker metadata. * ULT: Try to preserve global commands if thereâs e.g. both a speed and tempo command in the same cell. * STM: Improved tracker identification metadata. * SymMOD: When running out of Zxx macros, try to find the closest macro to use instead. * SymMOD: Ignore unknown hunks instead of rejecting entire file, as thatâs what Symphonie does as well. * OKT: Disable loop on type âBâ samples if theyâre used on a mixed channel. * OKT: The last sample slot was never loaded. * PTM: Halve offset command strength for 16-bit samples. ==== libsemanage ==== Subpackages: libsemanage-conf libsemanage2 - Not conflict but obsolete libsemanage1 (bsc#1229757) ==== libsoup ==== Subpackages: libsoup-3_0-0 libsoup-lang typelib-1_0-Soup-3_0 - Add 6adc0e3e.patch: websocket: Process the frame as soon as we read data (boo#1233287 CVE-2024-52532 glgo#GNOME/libsoup#391). - Add 29b96fab.patch: websocket-test: disconnect error copy after the test ends (glgo#GNOME/libsoup#391). - Add a35222dd.patch: be more robust against invalid input when parsing params (boo#1233292 CVE-2024-52531 glgo#GNOME/libsoup!407). ==== libsoup2 ==== Subpackages: libsoup-2_4-1 libsoup2-lang - Add 04df03bc.patch: strictly don't allow NUL bytes in headers (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377). - Add libsoup-CVE-2024-52532.patch: websocket: Process the frame as soon as we read data (boo#1233287 CVE-2024-52532). - Add 29b96fab.patch: websocket-test: disconnect error copy after the test ends (glgo#GNOME/libsoup#391). - Add a35222dd.patch: be more robust against invalid input when parsing params (boo#1233292 CVE-2024-52531 glgo#GNOME/libsoup!407). ==== llvm18 ==== Subpackages: clang18 libLLVM18 libclang-cpp18 libclang_rt18 llvm18-gold - Require libffi when we build openmp for offloading. - Update llvm18.keyring from upstream. - Enable lldb on s390x and ppc64le (bsc#1232906). ==== nghttp2 ==== Version update (1.62.1 -> 1.64.0) - version update to 1.64.0 1.64.0 * Change clang-format options by @tatsuhiro-t in #2240 * build(deps): bump github.com/quic-go/quic-go from 0.46.0 to 0.47.0 by @dependabot in #2243 * build(deps): bump golang.org/x/net from 0.28.0 to 0.29.0 by @dependabot in #2244 * nghttp2_map: Port ngtcp2 changes by @tatsuhiro-t in #2245 * h2load: Fix UDP datagram send/recv metric by @tatsuhiro-t in #2248 * build(deps): bump golang.org/x/net from 0.29.0 to 0.30.0 by @dependabot in #2252 * fix race condition on h1 connection close by @TuxInvader in #2249 * Gha ubuntu 24.04 by @tatsuhiro-t in #2254 * GHA: Run tests for i686-w64-mingw32 host by @tatsuhiro-t in #2255 * cmake: Fix c-ares v1.34.0 version detection failure by @tatsuhiro-t in #2256 * fix: -Wextra-semi errors in nghttp2_helper.h by @codebytere in #2258 * clang-format macros that do not need semicolon at the end by @tatsuhiro-t in #2259 * Remove extra semicolons by @tatsuhiro-t in #2260 * Bump ngtcp2 and its dependencies by @tatsuhiro-t in #2261 * Do not allow '@' in :authority or host field values by @tatsuhiro-t in #2262 * h2load: GRO buffer size should be 64KiB by @tatsuhiro-t in #2263 * Bump libbpf to v1.4.6 by @tatsuhiro-t in #2264 * Update nghttp2_check_authority doc by @tatsuhiro-t in #2265 1.63.0 * Bump libbpf to v1.4.2 by @tatsuhiro-t in #2191 * build(deps): bump golang.org/x/net from 0.24.0 to 0.25.0 by @dependabot in #2193 * nghttpx: Fix batch UDP QUIC packet dropped on GRO read by @tatsuhiro-t in #2196 * CMakeLists.txt: allow to compile the C only lib without CXX compiler by @ThomasDevoogdt in #2200 * build(deps): bump github.com/quic-go/quic-go from 0.43.1 to 0.44.0 by @dependabot in #2197 * Fix compiler versions in readme by @ryandesign in #2203 * build(deps): bump golang.org/x/net from 0.25.0 to 0.26.0 by @dependabot in #2205 * build(deps): bump github.com/quic-go/quic-go from 0.44.0 to 0.45.0 by @dependabot in #2206 * Bump ngtcp2 and its dependencies by @tatsuhiro-t in #2207 * build(deps): bump docker/build-push-action from 5 to 6 by @dependabot in #2208 * Add wolfSSL support by @tatsuhiro-t in #2209 * Append --shallow-submodules to git clone --recursive by @tatsuhiro-t in #2210 * Always append options to extra options by @tatsuhiro-t in #2211 * build(deps): bump github.com/quic-go/quic-go from 0.45.0 to 0.45.1 by @dependabot in #2213 * Disable dependency tracking by @tatsuhiro-t in #2214 * Fix Dockerfile.android build failure by @tatsuhiro-t in #2215 * Fix UDP_GRO struct cmsghdr data type by @tatsuhiro-t in #2216 * GHA: Suppress warnings by @tatsuhiro-t in #2217 * Fix levenshtein initialization by @tatsuhiro-t in #2218 * build(deps): bump golang.org/x/net from 0.26.0 to 0.27.0 by @dependabot in #2220 * Undefine NGHTTP2_NO_SSIZE_T if BUILDING_NGHTTP2 is defined by @tatsuhiro-t in #2224 * Bump clang format by @tatsuhiro-t in #2226 * Suppress old compiler error by @tatsuhiro-t in #2228 * build(deps): bump github.com/quic-go/quic-go from 0.45.1 to 0.45.2 by @dependabot in #2229 * build(deps): bump golang.org/x/net from 0.27.0 to 0.28.0 by @dependabot in #2231 * build(deps): bump github.com/quic-go/quic-go from 0.45.2 to 0.46.0 by @dependabot in #2232 * Bump ngtcp2 and its dependencies by @tatsuhiro-t in #2236 * Bump libbpf to v1.4.5 by @tatsuhiro-t in #2237 * Update go by @tatsuhiro-t in #2238 * levenshtein: Use size_t by @tatsuhiro-t in #2239 ==== openSUSE-release ==== Version update (20241112 -> 20241113) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== openssl-3 ==== Subpackages: libopenssl3 libopenssl3-32bit libopenssl3-x86-64-v3 - Do not use HASHBANGPERL to avoid introducing a dependency on the perl-base package. [bsc#1233235] - Add missing fixes for SHA3_squeeze and quic_multistream_test on pcc64 arch. [jsc#PED-10280] * Added openssl-3-fix-sha3-squeeze-ppc64.patch * Added openssl-3-fix-quic_multistream_test.patch ==== qt6-declarative ==== Subpackages: libQt6LabsAnimation6 libQt6LabsFolderListModel6 libQt6LabsPlatform6 libQt6LabsQmlModels6 libQt6LabsSettings6 libQt6LabsSharedImage6 libQt6LabsWavefrontMesh6 libQt6Qml6 libQt6QmlCore6 libQt6QmlLocalStorage6 libQt6QmlMeta6 libQt6QmlModels6 libQt6QmlNetwork6 libQt6QmlWorkerScript6 libQt6QmlXmlListModel6 libQt6Quick6 libQt6QuickControls2-6 libQt6QuickControls2Impl6 libQt6QuickDialogs2-6 libQt6QuickDialogs2QuickImpl6 libQt6QuickDialogs2Utils6 libQt6QuickEffects6 libQt6QuickLayouts6 libQt6QuickParticles6 libQt6QuickShapes6 libQt6QuickTemplates2-6 libQt6QuickTest6 libQt6QuickVectorImage6 libQt6QuickWidgets6 qt6-declarative-imports - Replace 0001-WIP-speculative-gc-fix.patch with newer ones, should unbreak spectacle and some others (kde#496139): * 0001-Log-state-transitions-for-the-GC.patch * 0001-Engine-Mark-created-wrapped-objects-after-GCState-Ma.patch ==== schily ==== Subpackages: libcdrdeflt1_0 libdeflt1_0 libfile1_0 libfind4_0 librmt1_0 librscg1_0 libscg1_0 libscgcmd1_0 libschily2_0 mkisofs spax star - Modernize specfile ==== wget ==== Version update (1.24.5 -> 1.25.0) Subpackages: wget-lang - GNU wget 1.25.0: * New testcase for pathconf truncation * Fix libproxy build with --disable-debug * [BREAKING CHANGE] Support continious reading from stdin pipes * Properly re-implement userinfo parsing (rfc2396) * init: fix -Warray-bounds in setval_internal_tilde * Fix build error on MingW with `G_GETFL` and `F_SETFL` flags * Fix returning uninitialized variable * Fix a static analysis false positive * [BREAKING CHANGE] Fix CVE-2024-10524 (drop support for shorthand URLs) (bsc#1233256) - Remove committed patches * properly-re-implement-userinfo-parsing.patch - Renumber patches ==== yast2-iscsi-client ==== Version update (5.0.3 -> 5.0.4) - Fixes for bsc#1231385 - Do not call iscsi_offload.sh script anymore using the iscsi ifaces created by autoLogOn directly and exposing them in the UI instead of the offload card selection. - 5.0.4

1 0

New Tumbleweed snapshot 20241112 released!
by Dominique Leuenberger 13 Nov '24

13 Nov '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ImageMagick (7.1.1.39 -> 7.1.1.40) desktop-translations (84.87.20240503.9343de5 -> 84.87.20241104.9505069) expat gnome-shell (47.1 -> 47.1+6) gucharmap (16.0.1 -> 16.0.2) guestfs-tools kernel-source (6.11.6 -> 6.11.7) libzip (1.11.1 -> 1.11.2) man openSUSE-release (20241111 -> 20241112) plasma6-workspace polkit-default-privs (1550+20241105.bedeeca -> 1550+20241111.762abac) snapper (0.11.2 -> 0.12.0) yast2-storage-ng (5.0.20 -> 5.0.21) yast2-trans (84.87.20241103.9461c6178e -> 84.87.20241109.fe9daf12bb) === Details === ==== ImageMagick ==== Version update (7.1.1.39 -> 7.1.1.40) Subpackages: ImageMagick-config-7-SUSE libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - version update to 7.1.1.40 * .cut (Dr Halo) reading when run count in header #7734 * Bump azure/trusted-signing-action from 0.4.0 to 0.5.0 #7725 * Implement Magic Kernel Sharp 2013 and 2021 #7701 * don't process TIFF image if there is an exception * Corrected check for indexed channels in PSD files. * export exception when undo resource limit exceeded ==== desktop-translations ==== Version update (84.87.20240503.9343de5 -> 84.87.20241104.9505069) - Update to version 84.87.20241104.9505069 (after locking of most components in Weblate): * Translated using Weblate (Catalan) * Translated using Weblate (Czech) * Translated using Weblate (Dutch) * Translated using Weblate (German) * Translated using Weblate (Hungarian) * Translated using Weblate (Lithuanian) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Romanian) * Translated using Weblate (Russian) * Translated using Weblate (Slovak) * Translated using Weblate (Slovenian) * Translated using Weblate (Spanish) * Translated using Weblate (Turkish) ==== expat ==== Subpackages: libexpat1 - no source changes, just adding jira reference: jsc#SLE-21253 ==== gnome-shell ==== Version update (47.1 -> 47.1+6) Subpackages: gnome-extensions gnome-shell-calendar gnome-shell-lang - Update to version 47.1+6: + st/theme-node-drawing: Don't skip square top left inset shadow corners + Updated translations. ==== gucharmap ==== Version update (16.0.1 -> 16.0.2) Subpackages: gucharmap-lang libgucharmap_2_90-7 - Update to version 16.0.2: + Updated documentation. + Updated translations. ==== guestfs-tools ==== - virt-builder ships with out-of-date openSUSE signing key resulting in a GPG failure builder-update-openSUSE.gpg-key.patch ==== kernel-source ==== Version update (6.11.6 -> 6.11.7) - Linux 6.11.7 (bsc#1012628). - drm/amdgpu: fix random data corruption for sdma 7 (bsc#1012628). - cgroup: Fix potential overflow issue when checking max_depth (bsc#1012628). - spi: geni-qcom: Fix boot warning related to pm_runtime and devres (bsc#1012628). - slub/kunit: fix a WARNING due to unwrapped __kmalloc_cache_noprof (bsc#1012628). - perf trace: Fix non-listed archs in the syscalltbl routines (bsc#1012628). - perf python: Fix up the build on architectures without HAVE_KVM_STAT_SUPPORT (bsc#1012628). - scsi: scsi_debug: Fix do_device_access() handling of unexpected SG copy length (bsc#1012628). - wifi: iwlegacy: Fix "field-spanning write" warning in il_enqueue_hcmd() (bsc#1012628). - mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING (bsc#1012628). - wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys (bsc#1012628). - wifi: ath11k: Fix invalid ring usage in full monitor mode (bsc#1012628). - wifi: rtw89: pci: early chips only enable 36-bit DMA on specific PCI hosts (bsc#1012628). - wifi: brcm80211: BRCM_TRACING should depend on TRACING (bsc#1012628). - RDMA/cxgb4: Dump vendor specific QP details (bsc#1012628). - RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down (bsc#1012628). - RDMA/bnxt_re: Fix the usage of control path spin locks (bsc#1012628). - RDMA/bnxt_re: synchronize the qp-handle table array (bsc#1012628). - wifi: iwlwifi: mvm: don't leak a link on AP removal (bsc#1012628). - wifi: iwlwifi: mvm: really send iwl_txpower_constraints_cmd (bsc#1012628). - wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() (bsc#1012628). - wifi: iwlwifi: mvm: don't add default link in fw restart flow (bsc#1012628). - Revert "wifi: iwlwifi: remove retry loops in start" (bsc#1012628). - ASoC: cs42l51: Fix some error handling paths in cs42l51_probe() (bsc#1012628). - macsec: Fix use-after-free while sending the offloading packet (bsc#1012628). - ASoC: dapm: fix bounds checker error in dapm_widget_list_create (bsc#1012628). - sock_map: fix a NULL pointer dereference in sock_map_link_update_prog() (bsc#1012628). - net: stmmac: dwmac4: Fix high address display by updating reg_space[] from register values (bsc#1012628). - net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data (bsc#1012628). - dpll: add Embedded SYNC feature for a pin (bsc#1012628). - ice: add callbacks for Embedded SYNC enablement on dpll pins (bsc#1012628). - ice: fix crash on probe for DPLL enabled E810 LOM (bsc#1012628). - ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() (bsc#1012628). - ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1012628). - gtp: allow -1 to be specified as file description from userspace (bsc#1012628). - net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1012628). - bpf: Force checkpoint when jmp history is too long (bsc#1012628). - netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write() (bsc#1012628). - net/sched: sch_api: fix xa_insert() error path in tcf_block_get_ext() (bsc#1012628). - bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1012628). - net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1012628). - netfilter: Fix use-after-free in get_info() (bsc#1012628). - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1012628). - Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs (bsc#1012628). - bpf: Free dynamically allocated bits in bpf_iter_bits_destroy() (bsc#1012628). - bpf: Add bpf_mem_alloc_check_size() helper (bsc#1012628). - bpf: Check the validity of nr_words in bpf_iter_bits_new() (bsc#1012628). - net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension (bsc#1012628). - mlxsw: spectrum_ptp: Add missing verification before pushing Tx header (bsc#1012628). - mlxsw: pci: Sync Rx buffers for CPU (bsc#1012628). - mlxsw: pci: Sync Rx buffers for device (bsc#1012628). - mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address (bsc#1012628). - net: ethernet: mtk_wed: fix path of MT7988 WO firmware (bsc#1012628). - netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1012628). ... changelog too long, skipping 336 lines ... - commit 2217914 ==== libzip ==== Version update (1.11.1 -> 1.11.2) - version update to 1.11.2 * Fix performance regression in `zip_stat` introduced in 1.11. ==== man ==== - Readd patch man-db-2.7.1-zio.dif * Use also in-memory decompression - Add patch man-db-2.13.0-no_abort.patch * Avoid abort of mandb due switching to user man if executed by root - Drop libzio integration (man-db-2.7.1-zio.dif, BuildRequires and flag) to restore acceptable performance (boo#1232837): ==== openSUSE-release ==== Version update (20241111 -> 20241112) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== plasma6-workspace ==== Subpackages: plasma6-session plasma6-session-x11 plasma6-workspace-lang plasma6-workspace-libs sddm-qt6-branding-openSUSE - Replace %requires_ge plasma6-framework-components with %requires_ge libplasma6-components: the requires_eq macro does only work on real package names, not on virtual provides. ==== polkit-default-privs ==== Version update (1550+20241105.bedeeca -> 1550+20241111.762abac) - Update to version 1550+20241111.762abac: * profiles: whitelist additional upower charging-limit action (bsc#1232835) * profiles: xfce4-power-manager (bsc#1232244) ==== snapper ==== Version update (0.11.2 -> 0.12.0) Subpackages: libsnapper7 snapper-zypp-plugin - provide backup program for btrfs snapshots - version 0.12.0 - support creating empty snapshots (gh#openSUSE/snapper#944) ==== yast2-storage-ng ==== Version update (5.0.20 -> 5.0.21) - Fix failing test (bsc#1233095). - 5.0.21 ==== yast2-trans ==== Version update (84.87.20241103.9461c6178e -> 84.87.20241109.fe9daf12bb) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20241109.fe9daf12bb: * Translated using Weblate (Turkish) * Translated using Weblate (Turkish) * Translated using Weblate (Turkish) * Translated using Weblate (Turkish) * Translated using Weblate (Turkish) * Translated using Weblate (Czech) * Translated using Weblate (Turkish) * Translated using Weblate (Turkish) * Translated using Weblate (Turkish) * Translated using Weblate (Turkish) * Translated using Weblate (Turkish) * Translated using Weblate (Turkish) * Translated using Weblate (Turkish) * Translated using Weblate (German) * Translated using Weblate (German) * Translated using Weblate (Japanese) * Translated using Weblate (Catalan) * New POT for text domain 'hana-ha'. * New POT for text domain 'bootloader'. * Translated using Weblate (Slovenian)

1 0

New Slowroll update 20241113T1918 released!
by bernhardout＠lsmod.de 13 Nov '24

13 Nov '24

Please note that this mail was generated by a script. A collection of maintenance updates was released for Slowroll. Released 96 packages: * ansible-variables * bluedevil6 * breeze6 * breeze6-gtk * discover6 * dnsdist * drkonqi6 * ecwolf * flatpak-kcm6 * go1.22 * go1.23 * govulncheck-vulndb * jackson-core * kactivitymanagerd6 * kde-cli-tools6 * kde-gtk-config6 * kdecoration6 * kdeplasma6-addons * kgamma6 * kglobalacceld6 * kinfocenter6 * kmenuedit6 * kpipewire6 * krdp6 * kscreen6 * kscreenlocker6 * ksshaskpass6 * ksystemstats6 * kubernetes * kubeseal * kwayland-integration6 * kwayland6 * kwin6 * kwrited6 * layer-shell-qt6 * libcmpiutil * libkscreen6 * libksysguard6 * libplasma6 * libvirt-cim * milou6 * mousepad * ncurses * ntfs2btrfs * nvme-stas * ocean-sound-theme6 * opae * oxygen6 * pam_kwallet6 * pam_ssh_agent_auth * patterns-base * pdns * plasma5support6 * plasma6-activities * plasma6-activities-stats * plasma6-disks * plasma6-firewall * plasma6-integration * plasma6-nano * plasma6-nm * plasma6-pa * plasma6-print-manager * plasma6-sdk * plasma6-systemmonitor * plasma6-thunderbolt * plasma6-vault * plasma6-welcome * plasma6-workspace-wallpapers * plymouth-theme-breeze6 * polkit-kde-agent-6 * powerd * python-azure-cognitiveservices-vision-computervision * python-azure-cognitiveservices-vision-contentmoderator * python-azure-cognitiveservices-vision-customvision * python-azure-cognitiveservices-vision-face * python-azure-mgmt-servicebus * python-azure-mgmt-sql * python-cssmin * python-jupyter-client * python-poppler-qt5 * python-pyenchant * python-pytest-jupyter * python-pyudev * python-qtcharts-qt5 * python-qtwebengine-qt5 * python-vobject * qt6-wayland * ruby-bundled-gems-rpmhelper * ruby3.3 * sddm-kcm6 * seamonkey * suse-module-tools * systemsettings6 * unclutter * wacomtablet-kcm6 * xdg-desktop-portal-kde6

1 0

Is anyone currently using the "systemd-ui" package?
by Franck Bui 13 Nov '24

13 Nov '24

Hi, I'm asking because it hasn't received any updates from upstream since the end of 2013, and we haven't seen any bug reports for it AFAICT, which makes us think it might not be widely used. I've never used this tool and don't maintain it either but the tool apparently doesn't provide any particularly useful features. The only thing it does is give a list of units and their state via a GUI. If anyone still wants to keep this package, please speak up other I'll send a delete request for Factory. Thanks.

7 9

action needed: Upstream desktop translations, drop update-desktop-files
by Stanislav Brabec 12 Nov '24

12 Nov '24

In 2003, SUSE started a project for translation and customization of desktop files: update-desktop-files. The implementation did not make possible sending these translations to the upstream. And it ignored that upstream created its own translation project. The new implementation makes upstreaming possible. It generates several patches for different upstream translation implementations, and small po files with translations and instructions how to upstream them. Package maintainers should start to work on the goal: "upstream first", send SUSE modification to the upstream and move to the pure upstream desktop files with no custom modification and no custom translation. If you see a deprecation warning, then your package needs updating, and very probably has a translation or desktop file modification that needs upstreaming. Detailed instructions: https://en.opensuse.org/openSUSE:Update-desktop-files_deprecation You can find customized instructions in the build log. Please start to work on this as soon as possible. Upstream review will take some time. The project in numbers: strings to translate: about 20000 already translated for all languages: about 380000 strings, which corresponds to about 20 human years of work Announce: https://news.opensuse.org/2024/11/11/streamlining-translations/ Best regards -- Stanislav Brabec

1 0

gerbera 2.3.0
by mh＠mike.franken.de 12 Nov '24

12 Nov '24

Hi, not sure, if this is the place to ask for it, but would it be possible to provide gerbera 2.3.0 for openSUSE Leap 15.6 and Tumbleweed? 2.2.0 is available as experimental version for Leap and official version for Tumbleweed, but not 2.3.0. 2.3.0 solves lots of small, but annoying bugs. TIA. Bye. Michael.

3 4

New Tumbleweed snapshot 20241111 released!
by Dominique Leuenberger 12 Nov '24

12 Nov '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MozillaFirefox (131.0.3 -> 132.0.1) MozillaFirefox-branding-openSUSE ibus-m17n (1.4.32 -> 1.4.34) libnice (0.1.21 -> 0.1.22) libwebp openSUSE-release (20241109 -> 20241111) rebootmgr === Details === ==== MozillaFirefox ==== Version update (131.0.3 -> 132.0.1) Subpackages: MozillaFirefox-translations-common - require xdg-desktop-portal (boo#1233166) - Mozilla Firefox 132.0.1 * Fixed issues causing intermittent video playback problems on some sites. (bmo#1928484, bmo#1928798) - remove KDE integration patches - mozilla-kde.patch - firefox-kde.patch on KDE use these settings instead widget.use-xdg-desktop-portal.file-picker=1 widget.use-xdg-desktop-portal.mime-handler=1 (those are set by the latest branding package as well) - Mozilla Firefox 132.0 https://www.mozilla.org/en-US/firefox/132.0/releasenotes MFSA 2024-55 (bsc#1231879) * CVE-2024-10458 (bmo#1921733) Permission leak via embed or object elements * CVE-2024-10459 (bmo#1919087) Use-after-free in layout with accessibility * CVE-2024-10460 (bmo#1912537) Confusing display of origin for external protocol handler prompt * CVE-2024-10461 (bmo#1914521) XSS due to Content-Disposition being ignored in multipart/x-mixed-replace response * CVE-2024-10462 (bmo#1920423) Origin of permission prompt could be spoofed by long URL * CVE-2024-10463 (bmo#1920800) Cross origin video frame leak * CVE-2024-10468 (bmo#1914982) Race conditions in IndexedDB * CVE-2024-10464 (bmo#1913000) History interface could have been used to cause a Denial of Service condition in the browser * CVE-2024-10465 (bmo#1918853) Clipboard "paste" button persisted across tabs * CVE-2024-10466 (bmo#1924154) DOM push subscription message could hang Firefox * CVE-2024-10467 (bmo#1829029, bmo#1888538, bmo#1900394, bmo#1904059, bmo#1917742, bmo#1919809, bmo#1923706) Memory safety bugs fixed in Firefox 132, Thunderbird 132, Firefox ESR 128.4, and Thunderbird 128.4 - requires NSS 3.105 - rebased patches ==== MozillaFirefox-branding-openSUSE ==== - do not use XDG for mime-handler as it does not handle the default browser check correctly - add properties to use xdg-desktop-portal (boo#1226112) ==== ibus-m17n ==== Version update (1.4.32 -> 1.4.34) - Update to 1.4.34 * Add the âS-â prefix to msymbols for non-ASCII characters only if the character âis not graphâ (Resolves: #90) ==== libnice ==== Version update (0.1.21 -> 0.1.22) Subpackages: gstreamer-libnice libnice10 - Update to version 0.1.22: + API: Make nice_address_is_local() available to applications + Make padding be all zeros to conform to RFC8489 + Fix interface listing on Android + Include TURN sockets in the list from nice_agent_get_sockets() + Set consent refresh timeout in line with RFC 7675 + Fix ifr_ifindex build with cland and OpenBSD - Drop 4b63250c.patch: Fixed upstream. - Rebase patch with quilt. ==== libwebp ==== Subpackages: libsharpyuv0 libwebp7 libwebpdemux2 libwebpmux3 - switch to cmake based build as other packages now require the cmake finders ==== openSUSE-release ==== Version update (20241109 -> 20241111) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== rebootmgr ==== - Add compatibility symlink for rebootmgrctl to sbin

1 0

New Slowroll update 20241112T1228 released!
by bernhardout＠lsmod.de 12 Nov '24

12 Nov '24

Please note that this mail was generated by a script. A collection of maintenance updates was released for Slowroll. Released 71 packages: * MozillaFirefox * ant * asco * autofs * bpftrace * byte-buddy * camsource * conauto * containerd * deepin-terminal * dracut * eclipse-jgit * gnome-session * gtkam * guestfs-tools * k8senv * kconfig * kubernetes1.28 * kubernetes1.29 * kubernetes1.30 * kubernetes1.31 * libftdi1 * libnvidia-egl-wayland * libqt5-qtcharts * libvma * mailgraph * maven-surefire * mpd * multipath-tools * obs-service-replace_using_package_version * oneko * p0f * patterns-gnome * python-aioresponses * python-beautifulsoup4 * python-calmjs.types * python-charset-normalizer * python-humanfriendly * python-legacy-cgi * python-numba * python-patsy * python-puremagic * python-pyqt-builder * python-python-socks * python-repoze.who * python-requests-mock * python-sat-stac * python-sip * python-sphinx-design * python-sphinx-notfound-page * python-tornado * python310 * qemu * rabbitmq-c * regclient * restic * rocksdb * rspamd * rust1.82 * scapy * skupper * squidGuard * taisei * tik * ucl * vim * virt-manager * voms * xcoral * xpinguin * xtexit

1 0