February 2024 - openSUSE Factory - openSUSE Mailing Lists

Re: Something in the latest dup breaks USB virtualization.
by Pablo Sanchez 08 Feb '24

08 Feb '24

On 2024-02-08 14:25, Larry Len Rainey wrote: > Are you sure it is not greyed out - mine still is with today's zypper dup. > > On 2/8/24 11:32, Pablo Sanchez wrote: >> On 2024-02-08 12:20, Larry Len Rainey wrote: >>> >>> I have gone back 5 kernels and it does it on every TW kernel. >>> >>> Some library had to change - I put back an older VirtualBox with no >>> USB (all greyed out) the same. >>> >>> They all worked fine last Thusrday. >>> >>> Others have reported that QEMU has the same issue. >>> >>> https://forums.opensuse.org/t/usb-grayed-out-cant-add-usb-devices-in-virtua… >>> >> Hi Larry, >> >> I had a similar issue. As I had a pending 7.0.14 VBox upgrade, I >> applied it and USB became functional. >> Hi Larry, I'm sending my response to the list as I think it's good to keep conversations on the list. I have some interesting data. If I reboot my rig, VBox now longer has USB access. I have to run through its installation to regain it. While it's not a solution, have you tried to re-install VBox? Does that offer temporary relief? Thx! -pablo

1 0

Something in the latest dup breaks USB virtualization.
by Larry Len Rainey 08 Feb '24

08 Feb '24

3 2

Blog post: Agama future plans
by Ancor Gonzalez Sosa 08 Feb '24

08 Feb '24

Will 2024 be the year for Agama (the new installer based on YaST internals) to finally take off? Find more about the YaST Teams plans at the new blog post https://yast.opensuse.org/blog/2024-02-08/year-of-agama Cheers. -- Ancor González Sosa YaST Team at SUSE Linux GmbH

1 0

openSUSE Release Engineering meeting 07.02.2024 (we're temporarily using google meet)
by Lubos Kocman 08 Feb '24

08 Feb '24

!!! HEADS UP PLEASE USE https://meet.google.com/fud-xeti-hvn for a few upcoming meetings instead of jitsi, as we're experiencing lot of issues with it. I did update calendar-o-o to reflect this https://calendar.opensuse.org/teams/release/events/opensuse_release_enginee… How to join the meeting? https://calendar.opensuse.org/teams/release/events/opensuse_release_enginee… All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting ## Attendees rbrown, lkocman, dimstar, Sarah, ana,GuillaumeG, DocB, ddemaio ## Leap Leap 15.6 with Gnome 45 was published yesterday Several issues under wayland https://bugzilla.suse.com/show_bug.cgi?id=1219505 - input methods in chrome under Wayland https://bugzilla.suse.com/show_bug.cgi?id=1219486 - memory leak in Evolution (workaround uninstall evolution) We should start working on the Beta announcement to capture all interesting SP6 updates etc. We could use https://code.opensuse.org/leap/features/issues as an input Reminder that we have check in deadline for Leap 15.6 beta on 21st February (corresponds with SLES 15 SP6 Public Beta check in deadline) https://en.opensuse.org/openSUSE:Roadmap#Schedule_for_openSUSE_Leap_15.6 ALP Marble 6.0 was synced to OBS, I'll be working on the initial setup. https://build.opensuse.org/project/subprojects/openSUSE:Leap:Micro:6.0 de-branding in-progress In person discussion with Granite PM, on Thursday Data driven decision for migration (re-use binaries vs rebuild sources etc). PM is not keen on keeping identical packages with buildroot-only SLES/ALP packages. Desktop component awareness in ALP No data yet GnuHealth 4.4 - tracking of sr against SLES python311* https://etherpad.opensuse.org/p/gnuhealth Idea from yesterday's community meeting for OSC2024 "Lowering threshold for contributions" 5 workshops to: package basic software, write an openqa test, translate something in weblate, contribute with artwork, distribution/image spin. Each video could be 15 minutes. Could be hosted in a single focus room ... ## openSUSE Tumbleweed (ana) openSUSE:Factory build fail stats: 294 failed 166 unresolvable (last week 65 failed, 5 unresolvable) https://tinyurl.com/ysy4nnnz Most relevant updates: * RPM 4.19.1, Packages not included in rings still need updates, see https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… * Python 3.12.1 enablement + setuptools support * glibc 2.39 + security update ( CVE-2023-6246, CVE-2023-6779, CVE-2023-6780) * Alsa 1.2.11 * cpio 2.15 * emacs 29.2 * gstreamer 1.22.9 * kubernetes 1.29 (new default version) * QEMU 8.2.0 * syslog-ng 4.6.0 Updates waiting / work still in progress: * Linux kernel 6.7.4 & 6.7.3 & networking CVE fixes & other fixes * Fixes for Python 3.12 * GCC 14 (only for runtime libraries) * libxml 2.12.1 (lots of work to do), libzypp and some packages got fixed, on hold * dbus-broker as default dbus session manager, now everything builds, two openQA checks failing. * c-ares: after nodejs updates, there is an issues with a new package cycle (fix waiting for devel project https://build.opensuse.org/request/show/1143773 ) * cmake, macro changes (DOCDIR MANDIR INFODIR) make a few packages FBTFS, no progress ## Richard (Aeon+botmaster) Another brief botmaster outage on Monday, caused by an automated package update triggering update-alternatives for java, which confused goCD as to its location of java. It would be really nice to have the system as a MicroOS host instead of the more fragile SLE/Leap. Been experimenting with a seamless migration from legacy MicroOS Desktop patterns to correct Aeon patterns. However these experiments look to be infeasible. Invisible migrations will either need some new tooling or manual instructions. (lkocman: Could you suggest an update/upgrade via the parallel install, I recall your mod_install experiment? This would cover at least user data) tik development progressing slowly, discussions about getting some contributions from SUSE engineers. Aiming to deploy new aeondesktop.org website this week ## Bernhard (Slowroll) Not available * kernel-longterm expected around March * first openQA test WIP * next major version bump expected in 2-3 weeks (mid February) * Vacation 2024-02-05 to 09 ## Max Not available Leap 15.6 - build stats in Backports: 52(was 59) faild, 67 unresolvable(was 63) * Build597.1 has been published * The remaining qt5/qt6 applications got merged for adapt to the Qt5 5.15.12 and Qt6 6.6.1 from SLE15 * Merged many python application update or deleterequests, but still, most of unresolvables were python applications, and still has many were pending in staging * The tweak of skippkg-finder and 000package-groups works, the noarch ones has been selected to ftp-tree instead of the arch-dependent ones(with an unmatched version number) * Vacation: Feb. 7-14 ## Guillaume - Arm * Tumbleweed: - Rolling again, after the glitch in prjconf which dropped python 3.9 support for some time during the week-end. - WIP: Still some packages built without PAC/BTI, two main reasons: * assembler files without PAC/BTI (usually reported upstream, e.g. openssl, gnutls, etc) * Packages built without distro flags (usually fixed in spec file) - rpmlint: https://rpmlint.opensuse.org/ * we noticed that rpmlint does not check anymore for packages built without distro %{optflags}. We should add it back. https://bugzilla.opensuse.org/show_bug.cgi?id=1217840 * Leap 15.6/Backports SP6: - No update * WSL: x86_64 is fetched from Microsoft Store GUI for Tumbleweed image instead of arm64. But `wsl --install openSUSE-Tumbleweed --web-download` works just fine! - https://bugzilla.opensuse.org/show_bug.cgi?id=1219372. This is what team agreed to advertise. We just need to update our wiki and perhaps image description in Windows Store. lkocman: Ah thank you. I'll share that with team. Contents of the image are x86_64. Possible workaround would be a second application e.g. Leap 15 aarch64, Tumbleweed aarch64 etc ... ## Sarah - s390x Tumbleweed: * too less build nodes: waiting for Compilers to be finished with builds lkocman will ping Marcela && Moroni && Martin Piala. * Improved kernel performance for kernel 6.8 from IBM side: https://www.phoronix.com/news/Linux-6.8-s390-Syscall-Perf Z Training material (recommendations at IBM TechXChange in Barcelona): * Z Assembler (incl. exercises): http://zseries.marist.edu/enterprisesystemseducation/assemblerlanguageresou… * Books about Z Architecture and Assembler: https://idcp.marist.edu/assembler-resources Yesterday was the new release of the LinuxONE 4 Express (rackmount system): https://www.ibm.com/products/linuxone-4/sustainability ## Doug * FOSDEM * Geeko Foundation provide some items with good response * Likely to submit three booths for next year * Project * Open Build Service * openQA Rich: and an Aeon one? * GSoC * Application submitted * Two former mentees are now mentoring * Waiting on site visit feedback for Community-Summit at SUSECON * openSUSE Conference * 23 Registrations, 20 Submissions, 11 Hours * Contract caterer * Travel info article published Static * oSC24 dates June 27 to 29 reserved (Thursday - Saturday) * Open 4 Business June 26 between 2 - 6 p.m. at Franken Campus * AI topics (static) ## Dirk Not available - various python 3.12 fallout preparations - tried to split egrep/fgrep from "grep" into a separate subpackage, reducing fallout - drop overlays over python311 on Backports SP6 is in progress Dirk: it would help if we could have all the drops in a single staging as they have common build failure root causes. ## Wolfgang (Package Hub), Scott Bahling Not available ## Maintenance team (Marcus or Maurizio (m4u)) No big news QAM scheduled 15.6 Beta openQA setup for the next sprint, so it should be ready in mid-February according to the plan. ## Adrian - OBS No update The new composer/product builder discussion was covered in Max's section. Heads up: a first SR related to the composer is on the way. This is done to setup new products. ## Simon (Leap Replacement/Linarite) Not available ## Open Floor Adrian: the issue with jitsi is only with change from 2-3 people.

3 3

New Tumbleweed snapshot 20240206 released!
by Dominique Leuenberger 07 Feb '24

07 Feb '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: Mesa (23.3.4 -> 23.3.5) Mesa-drivers (23.3.4 -> 23.3.5) catfish cpio (2.14 -> 2.15) ethtool (6.6 -> 6.7) gc (8.2.4 -> 8.2.6) grub2 jasper (4.1.2 -> 4.2.0) libXext (1.3.5 -> 1.3.6) libXvMC (1.0.13 -> 1.0.14) libei (1.2.0 -> 1.2.1) libgsf (1.14.51 -> 1.14.52) libpciaccess (0.17 -> 0.18) libvpl libxcb libxkbfile (1.1.2 -> 1.1.3) menulibre mousepad (0.6.1 -> 0.6.2) netpbm pipewire (1.0.2 -> 1.0.3) python-MarkupSafe (2.1.4 -> 2.1.5) python-h11 python-msgpack (1.0.5 -> 1.0.7) python-pip qemu (8.1.3 -> 8.2.0) ristretto (0.13.1 -> 0.13.2) rp-pppoe rpm sendmail (8.17.2 -> 8.18.1) wireplumber xfce4-screenshooter (1.10.4 -> 1.10.5) xkbcomp (1.4.6 -> 1.4.7) xprop (1.2.6 -> 1.2.7) yast2-trans (84.87.20240126.9c7185e3f6 -> 84.87.20240205.897f2593b3) === Details === ==== Mesa ==== Version update (23.3.4 -> 23.3.5) Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libOSMesa8 libgbm1 - Update to bugfix release 23.3.5 - -> https://docs.mesa3d.org/relnotes/23.3.5.html - re-enabled rusticl on sle15-sp6 after linkpac'ing rust-bindgen in X11:XOrg project ==== Mesa-drivers ==== Version update (23.3.4 -> 23.3.5) Subpackages: Mesa-dri Mesa-gallium Mesa-libva libxatracker2 - Update to bugfix release 23.3.5 - -> https://docs.mesa3d.org/relnotes/23.3.5.html - re-enabled rusticl on sle15-sp6 after linkpac'ing rust-bindgen in X11:XOrg project ==== catfish ==== Subpackages: catfish-lang - As long as a new Python version does not ship a broken python3-distutils, like python311 did in its early days, there is no need to deal with or skip a specific python version at all. Disable all %%{python_module ...} and skip_python... stuff again. - Don't use %%{python_module ...} as we only build for the default Python interpreter. python312 still needs to be skipped due to python3-distutils! - Skip python312 for now until all required Python modules have been built. - Use %%{python_module ...} to specify required Python modules to build this package. ==== cpio ==== Version update (2.14 -> 2.15) Subpackages: cpio-lang cpio-mt - Update to 2.15: * Fix the operation of --no-absolute-filenames --make-directories. * Restore access and modification times of symlinks in copy-in and copy-pass modes. - Remove fix-operation-no-absolute-filenames.patch ==== ethtool ==== Version update (6.6 -> 6.7) Subpackages: ethtool-bash-completion - update to upstream release 6.7 * Feature: support for setting TCP data split * Fix: fix new gcc14 warning * Fix: fix SFF-8472 transceiver module identification (-m) ==== gc ==== Version update (8.2.4 -> 8.2.6) - Update to release 8.2.6 * Compiler warning fixes on various non-Linux platforms * Fix null dereference in check_finalizer_nested if redirecting malloc on Linux * Fix race in init_lib_bounds on Linux/glibc-2.34+ if redirecting malloc ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - Fix build error on gcc-14 (bsc#1218949) * 0001-squash-ieee1275-ofpath-enable-NVMeoF-logical-device-.patch ==== jasper ==== Version update (4.1.2 -> 4.2.0) - Update to 4.2.0: * Add the JAS_PACKAGING option to the CMake build in an attempt to allow easier control over rpath settings by packagers of JasPer. * Remove a number of obsolete scripts. * Make some cosmetic changes to the code for the JPC codec in order to improve readability (#371). * Fix a portability bug related to threads/atomics. * Replace some lingering uses of strtok in the JPC coder with jas_strtok, since the use of strtok is problematic in multithreading contexts. ==== libXext ==== Version update (1.3.5 -> 1.3.6) - Update to version 1.3.6 * Wrap Xext*CheckExtension() in do { ... } while(0) * configure: raise minimum autoconf requirement to 2.70 * configure: Use LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL * _xgeGetExtensionVersion should not free info on failure * Check for malloc failure in _xgeGetExtensionVersion * _xgeDpyClose: handle NULL return from _xgeFindDisplay * XEVI: fix -Walloc-size ==== libXvMC ==== Version update (1.0.13 -> 1.0.14) - Update to version 1.0.14 * Make doc install path from meson match autotools * gitlab CI: add a basic build test * gitlab CI: Add libtool to required packages * gitlab CI: stop requiring Signed-off-by in commits * configure: Use LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL * Convert to X.Org standard code style * Variable scope reductions as recommended by cppcheck * Replace custom copy of GetReq macro with call to Xlib 1.5's _XGetRequest * Handle implicit conversion warnings from clang - switched to meson build system ==== libei ==== Version update (1.2.0 -> 1.2.1) - Update to release 1.2.1 * Previously, using OEFFIS_DEVICE_ALL_DEVICES in oeffis_create_session() would erroneously result in the portal selecting no devices instead of all. ==== libgsf ==== Version update (1.14.51 -> 1.14.52) Subpackages: gsf-office-thumbnailer libgsf-1-114 libgsf-lang - Update to version 1.14.52: + xml: Fix build with libxml2 2.12. ==== libpciaccess ==== Version update (0.17 -> 0.18) - Update to version 0.18 * Remove "All rights reserved" from Oracle copyright notices * Try fopen(".../pci.ids", "re") on Solarish systems as well * Remove autotools build * gitlab-ci: use `meson setup` * gitlab-ci: don't bother to configure meson for the version check * gitlab-ci: remove unnecessary call to `meson configure` * FreeBSD: Fallback to /usr/share/misc/pci_vendors * FreeBSD: Remove sparc64 code * Fix compilation warnings when building against hurd-amd64. ==== libvpl ==== - Re-enable build on aarch64 ==== libxcb ==== Subpackages: libxcb-composite0 libxcb-damage0 libxcb-dpms0 libxcb-dri2-0 libxcb-dri3-0 libxcb-glx0 libxcb-present0 libxcb-randr0 libxcb-record0 libxcb-render0 libxcb-res0 libxcb-shape0 libxcb-shm0 libxcb-sync1 libxcb-xfixes0 libxcb-xinerama0 libxcb-xinput0 libxcb-xkb1 libxcb-xv0 libxcb1 - devel package: added missing Requires to libxcb-dbe0 (boo#1219572) ==== libxkbfile ==== Version update (1.1.2 -> 1.1.3) - update to 1.1.3 * configure: Use LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL * Set close-on-exec when opening files * _XkbMakeAtom: remove check for impossible case * _XkbInitAtoms: check for malloc() failure * XkbChangeAtomDisplay: stop leaking atom name * XkbCFReportError: avoid -Wformat-nonliteral warning * XkbWriteCFile: stop leaking header file ifdef name * DefaultParser: avoid -Wimplicit-fallthrough warnings * xkbtext.c: Add tbGetBufferString helper function * XkbIndentText: Fix -Wsign-compare warning * Fix -Wsign-compare warnings in xkbtext.c & xkmread.c * Add a meson build system - switched to meson build system ==== menulibre ==== - As long as a new Python version does not ship a broken python3-distutils, like python311 did in its early days, there is no need to deal with or skip a specific python version at all. Disable all %%{python_module ...} and skip_python... stuff again. - Don't use %%{python_module ...} as we only build for the default Python interpreter. python312 still needs to be skipped due to python3-distutils! - Skip python312 for now until all required Python modules have been built. - Use %%{python_module ...} to specify required Python modules to build this package. ==== mousepad ==== Version update (0.6.1 -> 0.6.2) Subpackages: libmousepad0 mousepad-lang - Update to version 0.6.2 * Update copyright year * history: Default to yes when user is asked to restore previous session * build: Search for bind_textdomain_codeset in libintl too * tests: Increase timeout a bit * tests: Check for pwait/pidwait * dialogs: Do not reuse text buffer to test encoding in save-as dialog * history: Remove dead code * history: Rework paste menu * Move paste history to mousepad-history.c * window: Fix GVariant management * Do not scroll text view when zooming in or out * file-monitoring: Delay emission of "externaly-modified" signal * Fix a typo in a comment, additionnal â additional. * Add icons at missing sizes, clean up SVG metadata * search: Properly reset current match * Translation Updates ==== netpbm ==== Subpackages: libnetpbm11 - added patches fix CVE-2017-5849 [bsc#1022790], CVE-2017-5849 [bsc#1022791] + netpbm-use-byrow-when-needed.patch ==== pipewire ==== Version update (1.0.2 -> 1.0.3) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-jack pipewire-lang pipewire-libjack-0_3 pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Update to version 1.0.3: * Highlights - Fix ALSA version check. This should allow the alsa plugin to work again. - Some small fixes and improvements. * PipeWire - Escape @DEFAULT_SINK@ in the conf files. * Modules - Improve logging in module-pipe-tunnel. * SPA - Always recheck rate matching in ALSA when moving drivers. This fixes a potential issue where the adaptive resampler would not be activated in some cases. * ALSA - Fix ALSA version check. This should allow the alsa plugin to work again. ==== python-MarkupSafe ==== Version update (2.1.4 -> 2.1.5) - update to 2.1.5: * Fix striptags not collapsing spaces. :issue:`417` ==== python-h11 ==== - spec cleanup ==== python-msgpack ==== Version update (1.0.5 -> 1.0.7) - update to 1.0.7: * remove inline macro for msvc * do not fallback on build error * fix: build status badge * Drop python2 support * Drop Python 3.6 support * try Cython 3.0 * sphinx-related work ==== python-pip ==== - Fix shebang path for "pip3.XX" binaries ==== qemu ==== Version update (8.1.3 -> 8.2.0) Subpackages: qemu-accel-tcg-x86 qemu-audio-spice qemu-block-curl qemu-block-nfs qemu-block-rbd qemu-chardev-spice qemu-guest-agent qemu-hw-display-qxl qemu-hw-display-virtio-gpu qemu-hw-display-virtio-gpu-pci qemu-hw-display-virtio-vga qemu-hw-usb-host qemu-hw-usb-redirect qemu-hw-usb-smartcard qemu-img qemu-ipxe qemu-ksm qemu-kvm qemu-lang qemu-microvm qemu-pr-helper qemu-seabios qemu-tools qemu-ui-curses qemu-ui-gtk qemu-ui-opengl qemu-ui-spice-app qemu-ui-spice-core qemu-vgabios qemu-x86 - Fix a build issue of OVMF caused by https://gitlab.com/qemu-project/qemu/-/issues/2064: * target/i386: fix incorrect EIP in PC-relative translation blocks * target/i386: Do not re-compute new pc with CF_PCREL - Update to latest upstream release, 8.2.0: The full list of changes are available at: https://wiki.qemu.org/ChangeLog/8.2 Highlights include: * New virtio-sound device emulation * New virtio-gpu rutabaga device emulation used by Android emulator * New hv-balloon for dynamic memory protocol device for Hyper-V guests * New Universal Flash Storage device emulation * Network Block Device (NBD) 64-bit offsets for improved performance * dump-guest-memory now supports the standard kdump format * ARM: Xilinx Versal board now models the CFU/CFI, and the TRNG device * ARM: CPU emulation support for cortex-a710 and neoverse-n2 * ARM: architectural feature support for PACQARMA3, EPAC, Pauth2, FPAC, FPACCOMBINE, TIDCP1, MOPS, HBC, and HPMN0 * HPPA: CPU emulation support for 64-bit PA-RISC 2.0 * HPPA: machine emulation support for C3700, including Astro memory controller and four Elroy PCI bridges * LoongArch: ISA support for LASX extension and PRELDX instruction * LoongArch: CPU emulation support for la132 * RISC-V: ISA/extension support for AIA virtualization support via KVM, and vector cryptographic instructions * RISC-V: Numerous extension/instruction cleanups, fixes, and reworks * s390x: support for vfio-ap passthrough of crypto adapter for protected virtualization guests * Tricore: support for TC37x CPU which implements ISA v1.6.2 * Tricore: support for CRCN, FTOU, FTOHP, and HPTOF instructions * x86: Zen support for PV console and network devices - Patch added (from upstream stable tree): * include/ui/rect.h: fix qemu_rect_init() mis-assignment - Some packaging and dependencies fixes: * [openSUSE] rpm: restrict canokey to openSUSE only * [openSUSE] rpm: fix virtiofsd dependency on 32 bit systems * [openSUSE] rpm: add support for canokeys (boo#1217520) - Rearrange dependencies and subpackages and filter features for ALP * [openSUSE] rpm: disable Xen support in ALP-based distros * [openSUSE] rpm: some more refinements of inter-subpackage dependencies - Fix boo#1084909 and create a new qemu-spice metapackage: * [openSUSE] rpm: normalize hostname, for reproducible builds (#44) * [openSUSE] rpm: new subpackage, for SPICE ==== ristretto ==== Version update (0.13.1 -> 0.13.2) Subpackages: ristretto-lang - Update to version 0.13.2 * Update copyright year * Fix duplicate mnemonic in File menu * image_viewer: Add missing sanity check * Fix criticals about unset GIO attributes * viewer: Fix possible crash when closing while an image is loading * Ensure that file manager proxy creation is non-blocking * Add icons at missing sizes, clean up SVG metadata * Translation Updates ==== rp-pppoe ==== - Removed rcpppoe and rcpppoe-server rudiments. ==== rpm ==== Subpackages: librpmbuild10 - Need to mention the changed patches for the python-setuptools to cmake migration: * Drop python_setup.diff * Add cmake_python_version.diff ==== sendmail ==== Version update (8.17.2 -> 8.18.1) Subpackages: libmilter1_0 - Update to version sendmail 8.18.1 2024/01/31 * sendmail is now stricter in following the RFCs and rejects some invalid input with respect to line endings and pipelining: - Prevent transaction stuffing by ensuring SMTP clients wait for the HELO/EHLO and DATA response before sending further SMTP commands. This can be disabled using the new srv_features option 'F'. Issue reported by Yepeng Pan and Christian Rossow from CISPA Helmholtz Center for Information Security. - Accept only CRLF . CRLF as end of an SMTP message as required by the RFCs, which can disabled by the new srv_features option 'O'. - Do not accept a CR or LF except in the combination CRLF (as required by the RFCs). These checks can be disabled by the new srv_features options 'U' and 'G', respectively. In this case it is suggested to use 'u2' and 'g2' instead so the server replaces offending bare CR or bare LF with a space. It is recommended to only turn these protections off for trusted networks due to the potential for abuse. * Full DANE support is available if OpenSSL versions 1.1.1 or 3.x are used, i.e., TLSA RR 2-x-y and 3-x-y are supported as required by RFC 7672. * OpenSSL version 3.0.x is supported. Note: OpenSSL 3 loads by default an openssl.cnf file from a location specified in the library which may cause unwanted behaviour in sendmail. Hence sendmail sets the environment variable OPENSSL_CONF to /etc/mail/sendmail.ossl to override the default. The file name can be changed by defining confOPENSSL_CNF in the mc file; using an empty value prevents setting OPENSSL_CONF. Note: referring to a file which does not exist does not cause an an error. * Two new values have been added for {verify}: "DANE_TEMP": DANE verification failed temporarily. "DANE_NOTLS": DANE was required but STARTTLS was not offered by the server. The default rules return a temporary error for these cases, so delivery is not attempted. * If the TLS setup code in the client fails and DANE requirements exist then {verify} will be set to "DANE_TEMP" thus preventing delivery by default. * DANE related logging has been slightly changed for clarification: "DANE configured in DNS but no STARTTLS available" changed to "DANE configured in DNS but STARTTLS not offered" * When the compile time option USE_EAI is enabled, vacation could fail to respond when it should (the code change in 8.17.2 was incomplete). Problem reported by Alex Hautequest. * If SMTPUTF8 BODY=7BIT are used as parameters for the MAIL command the parsing of UTF8 addresses could fail (USE_EAI). * If a reply to a previous RCPT was received while sending another RCPT in pipelining mode then parts of the reply could have been assigned to the wrong RCPT. * New DontBlameSendmail option CertOwner to relax requirement for certificate public and private key ownership. Based on suggestion from Marius Strobl of the FreeBSD project. * clt_features was not checked for connections via Unix domain sockets. * CONFIG: FEATURE(`enhdnsbl') did not handle multiple replies from DNS lookups thus potentially causing random "false negatives". Note: the fix creates an incompatibility: the arguments must not have a trailing dot anymore because the -a. option has been removed (as it only applies to the entire result, not individual values). * CONFIG: New FEATURE(`fips3') for basic FIPS support in OpenSSL 3. * VACATION: Add support for Return-Path header to set sender to match OpenBSD and NetBSD functionality. * VACATION: Honor RFC3834 and avoid an auto-reply if 'Auto-Submitted: no' is found in the headers to match OpenBSD and NetBSD functionality. * VACATION: Avoid an auto-reply if a 'List-Id:' is found in the headers to match OpenBSD functionality. * VACATION: Add support for $SUBJECT in .vacation.msg which is replaced with the first line of the subject of the original message to match OpenBSD and NetBSD functionality. * New Files: cf/feature/fips3.m4 devtools/OS/Darwin.23.x - This release fixes CVE-2023-51765 (bsc#1218351) - Port and rename patch sendmail-8.17.2.dif which is now sendmail-8.18.1.dif ==== wireplumber ==== Subpackages: libwireplumber-0_4-0 wireplumber-audio wireplumber-lang - Add patch to only enable bluetooth when audio support is enabled by installing wireplumber-audio (bsc#1219411): * fix-bsc1219411.patch ==== xfce4-screenshooter ==== Version update (1.10.4 -> 1.10.5) Subpackages: xfce4-screenshooter-lang xfce4-screenshooter-plugin - Update to 1.10.5 * Add imgur support as custom action (!51) * Translation Updates - Recommend curl, jq and zenity for the new script imgur.sh ==== xkbcomp ==== Version update (1.4.6 -> 1.4.7) - update to 1.4.7 * This release mainly focuses on code cleanup and improving maintainability and making static analysis work better on this code base. It also fixes a bug that could cause build failures with gcc when the -ftracer option was used. ==== xprop ==== Version update (1.2.6 -> 1.2.7) - Update to version 1.2.7 * This release fixes a failure to build with C23 compilers. ==== yast2-trans ==== Version update (84.87.20240126.9c7185e3f6 -> 84.87.20240205.897f2593b3) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20240205.897f2593b3: * New POT for text domain 'control'. * Translated using Weblate (Russian) * Translated using Weblate (Georgian) * Translated using Weblate (Georgian) * Translated using Weblate (Georgian) * New POT for text domain 'installation'.

1 0

Reminder: Leap 15.6 Beta code submission deadline is on Feb 21st
by Lubos Kocman 07 Feb '24

07 Feb '24

Hello openSUSE! Just a friendly reminder that the code submission deadline for Leap 15.6 Beta is on February 21st. This corresponds with SLES 15 SP6 Public Beta code drop deadline. If your 15.6 contributions still require an update of a SLES package past this deadline please make sure that it has a corresponding feature in https://code.opensuse.org/leap/features o Deadline is at 15:00 UTC o Deadline for any package removals from Leap. o Deadline corresponds with SLE 15 SP6 late feature cutoff deadline o Every feature with a code delivery for SUSE Linux Enterprise after this date requires an ECO and may be targeted post FCS date. Does not apply for Leap code-drops. o After this date only P1 bugfixes, important security fixes and pre-agreed important P2 fixes are accepted in SUSE Linux Enterprise. This does not apply for Leap code-drops. -- Best regards Luboš Kocman openSUSE Leap Release Manager

1 0

New package for Factory: python-hypercorn
by vivid 07 Feb '24

07 Feb '24

I'd like to introduce python-hypercorn into Factory: https://build.opensuse.org/package/show/devel:languages:python/python-hyper… Hypercorn (https://pypi.org/project/Hypercorn/) is a Python ASGI webserver supporting HTTP/1, HTTP/2, and HTTP/3. Hypercorn is primarily used in by the Quart package (https://pypi.org/project/Hypercorn/) and can be used to deploy ASGI python applications. It has active upstream development with a fair amount of contributors, so I don't think it will have any maintainability issues. Please let me know if there are any questions, concerns, or comments about introducing this package into Factory! Vivid

1 1

python setuptools
by Peter Czanik 06 Feb '24

06 Feb '24

Hi, I submitted syslog-ng to Base:System and then to Factory. It compiled successfully in my home project, then in Base:System, and also while it was under review for Factory. Today I updated my Tumbleweed installation and was surprised to see that syslog-ng is still at the old version. I checked, and it failed to build in Factory, missing "setuptools": [ 164s] (cd ./modules/python-modules && /usr/bin/python3 setup.py \ [ 164s] build --build-base="/home/abuild/rpmbuild/BUILD/syslog-ng-4.6.0/modules/python-modules/build" \ [ 164s] egg_info --egg-base="/home/abuild/rpmbuild/BUILD/syslog-ng-4.6.0/modules/python-modules" \ [ 164s] install --record=/home/abuild/rpmbuild/BUILD/syslog-ng-4.6.0/modules/python-modules/install-manifest.txt --root="/home/abuild/rpmbuild/BUILDROOT/syslog-ng-4.6.0-218.3.x86_64" --install-lib="/usr/lib64/syslog-ng/python") [ 164s] Traceback (most recent call last): [ 164s] File "/home/abuild/rpmbuild/BUILD/syslog-ng-4.6.0/modules/python-modules/setup.py", line 24, in <module> [ 164s] from setuptools import setup [ 164s] ModuleNotFoundError: No module named 'setuptools' [ 164s] make[4]: *** [Makefile:34010: pymodules-install] Error 1 [ 164s] make[3]: *** [Makefile:32461: install-exec-am] Error 2 [ 164s] make[2]: *** [Makefile:30970: install-am] Error 2 [ 164s] make[1]: *** [Makefile:29058: install-recursive] Error 1 [ 164s] make: *** [Makefile:30963: install] Error 2 [ 164s] error: Bad exit status from /var/tmp/rpm-tmp.bxkktG (%install) (full logs at https://build.opensuse.org/package/live_build_log/Base:System/syslog-ng/sta…) What changed during the weekend? :-) Is there a workaround / fix for this problem? Peter

3 3

RPM 4.19 "fallout" : group(opendkim) provide missing
by Patrick Schaaf 06 Feb '24

06 Feb '24

Just FYI, I notice opendkim package also needs the group provide fix. Just created https://bugzilla.opensuse.org/show_bug.cgi?id=1219638 also.

1 0

New Tumbleweed snapshot 20240205 released!
by Dominique Leuenberger 06 Feb '24

06 Feb '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: fcitx5-gtk (5.1.0 -> 5.1.1) === Details === ==== fcitx5-gtk ==== Version update (5.1.0 -> 5.1.1) - update to 5.1.1 * add delete surrounding to process batch

1 0