March 2024 - openSUSE Factory - openSUSE Mailing Lists

kind (Kubernetes in Docker), podman, cgroup controllers and Delegate=yes
by Johannes Kastl 19 Mar '24

19 Mar '24

Hi all, I packaged kind (Kubernetes in Docker) for openSUSE, as I needed it for a demo at work. The package works, but I noticed something along the way. > https://build.opensuse.org/package/show/devel:kubic/kind The kind docs state how to enable systemd "delegation" for a user, i.e. the cgroup controllers are delegated to the user. https://kind.sigs.k8s.io/docs/user/rootless/ I tried that on my openSUSE tumbleweed machine, and did not work. I added another directory /etc/systemd/system/user(a)1234.service.d (where 1234 is my uid on the machine, the account comes from LDAP), put the file in it and it also did not work. After several reboots and switching from 'yes' to 'True' and back, I could get it to work. And today it no longer works. Or so I thought. I think I have narrowed it down to "login shells have more cgroup controllers in the output of 'podman info'". Which means I can only use this on one of the virtual terminals, not inside Plasma or tmux or screen. I can prefix the command with "systemd-run --user --scope --property=Delegate=yes", but that makes it a little awkward. So, what would be the best way to solve this? How to get systemd to actually respect the files when starting Plasma? Without konsole having to start a login shell for each window? And regarding packaging, I dropped the idea of shipping the file in /etc/systemd/system/user@.service.d/ (or similar), but would add a README pointing to the docs. For the next one having this issue... :-( Kind Regards, Johannes

1 0

[factory] pre-UEFI systems now require additional UEFI+ components???
by Felix Miata 19 Mar '24

19 Mar '24

This is new since under a week ago. When adding a longterm kernel it was a simple matter of installing the kernel-longterm rpm. Not any more: # grep yReq /etc/zypp/zypp.conf solver.onlyRequires = true # inxi -M | grep BIOS BIOS: Phoenix v: 6.00 PG date: 06/27/2006 # inxi -S System: Host: k8mmv Kernel: 6.6.11-1-default arch: x86_64 bits: 64 Console: pty pts/0 Distro: openSUSE Tumbleweed 20240310 # time zypper -v in kernel-longterm ... The following 15 NEW packages are going to be installed: efibootmgr 18-1.5 jq 1.7.1-1.2 kernel-longterm 6.6.21-1.1 libefivar1 38-2.2 libjq1 1.7.1-1.2 libonig5 6.9.9-1.2 libtss2-esys0 4.0.1-4.2 libtss2-mu0 4.0.1-4.2 libtss2-rc0 4.0.1-4.2 libtss2-sys1 4.0.1-4.2 libtss2-tcti-device0 4.0.1-4.2 pcr-oracle 0.5.4-4.1 sdbootutil 1+git20240215.cb7e392-1.1 sdbootutil-rpm-scriptlets 1+git20240215.cb7e392-1.1 systemd-boot 254.9-2.1 The following package requires a system reboot: kernel-longterm 6.6.21-1.1 15 new packages to install. Overall download size: 1.1 MiB. Already cached: 164.1 MiB. After the operation, additional 241.2 MiB will be used. Note: System reboot required. Continue? [y/n/v/...? shows all options] (y): If I try to download in advance and install with rpm, this results: # rpm -ivh /nfs/00srv/pub/Linux/Suse/Factory/kernel-longterm-6.6.18-1.1.x86_64.rpm error: Failed dependencies: suse-kernel-rpm-scriptlets is needed by kernel-longterm-6.6.18-1.1.x86_64 # zypper -v in suse-kernel-rpm-scriptlets ... The following 14 NEW packages are going to be installed: efibootmgr 18-1.5 jq 1.7.1-1.2 libefivar1 38-2.2 libjq1 1.7.1-1.2 libonig5 6.9.9-1.2 libtss2-esys0 4.0.1-4.2 libtss2-mu0 4.0.1-4.2 libtss2-rc0 4.0.1-4.2 libtss2-sys1 4.0.1-4.2 libtss2-tcti-device0 4.0.1-4.2 pcr-oracle 0.5.4-4.1 sdbootutil 1+git20240215.cb7e392-1.1 sdbootutil-rpm-scriptlets 1+git20240215.cb7e392-1.1 systemd-boot 254.9-2.1 14 new packages to install. Overall download size: 1.1 MiB. Already cached: 163.1 KiB. After the operation, additional 3.1 MiB will be used. Continue? [y/n/v/...? shows all options] (y): n Is it intended that all TW installations now must include these *efi* and related packages? As an experimenter: # rpm -ivh --nodeps kernel-longterm-6.6.21-1.1.x86_64.rpm Verifying... ################################# [100%] Preparing... ################################# [100%] Cannot execute /usr/lib/module-init-tools/kernel-scriptlets/rpm-pre Updating / installing... 1:kernel-longterm-6.6.21-1.1 ################################# [100%] Cannot execute /usr/lib/module-init-tools/kernel-scriptlets/rpm-post Cannot execute /usr/lib/module-init-tools/kernel-scriptlets/rpm-posttrans # nothing was deposited in /boot/. Eventually, partially outside of the package management system, I managed to get it installed and an initrd generated that works, but it took too long, and the steps are scattered among several terminals and logins. # inxi -S System: Host: k8mmv Kernel: 6.6.21-1-longterm arch: x86_64 bits: 64 Desktop: Trinity v: N/A Distro: openSUSE Tumbleweed 20240310 # -- Evolution as taught in public schools is, like religion, based on faith, not based on science. Team OS/2 ** Reg. Linux User #211409 ** a11y rocks! Felix Miata

5 10

New Tumbleweed snapshot 20240318 released!
by Dominique Leuenberger 19 Mar '24

19 Mar '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: akonadi discover6 dolphin exempi (2.6.3 -> 2.6.5) ffmpegthumbs gcc13 glibc kf6-kconfig kio-extras kmail libavif (1.0.3 -> 1.0.4) libopenmpt (0.7.3 -> 0.7.5) libplasma6 plasma6-workspace python-importlib-metadata (7.0.1 -> 7.0.2) python-pyOpenSSL (24.0.0 -> 24.1.0) python-rich (13.7.0 -> 13.7.1) qt6-declarative timezone virglrenderer (1.0.0 -> 1.0.1) wavpack (5.6.0 -> 5.7.0) yast2-bootloader (5.0.6 -> 5.0.7) yast2-trans (84.87.20240309.6826dab25a -> 84.87.20240317.9b1b5b2b95) === Details === ==== akonadi ==== Subpackages: akonadi-lang libKPim6AkonadiAgentBase6 libKPim6AkonadiCore6 libKPim6AkonadiPrivate6 libKPim6AkonadiWidgets6 libKPim6AkonadiXml6 - Make sure the old translation package gets uninstalled (boo#1221515) ==== discover6 ==== Subpackages: discover6-backend-flatpak discover6-backend-fwupd discover6-backend-packagekit discover6-lang discover6-notifier - Update recommended packages - Also obsolete plasma5-pk-updates-lang ==== dolphin ==== Subpackages: dolphin-part dolphin-part-lang dolphin-zsh-completion libdolphinvcs6 - Add upstream fix for disappearing panels (boo#1221513): * 0001-Remove-unneeded-code-for-toggeling-dockwidget-visibi.patch ==== exempi ==== Version update (2.6.3 -> 2.6.5) - update to 2.6.5: * Update XMPCore to Adobe XMP SDK v2023.12 - Bug fixes - C++17 compliance changes - Changes to remove deprecated APIs - Removing unimplemented APIs in XMPUtils header * Fix a potential nullptr dereference. * Update XMPCore to Adobe XMP SDK v2023.07 - Security Fixes. - Fix Exif Date missing seconds values. https://github.com/adobe/XMP-Toolkit-SDK/issues/50 * Fix some portability build issues with dlopen on BSD: * Added missing file type constants from the XMP_SDK. ==== ffmpegthumbs ==== - Add a kf5 flavor for applications not ported yet to Qt6 (boo#1221502, kde#483741) ==== gcc13 ==== Subpackages: cpp13 gcc13-locale libgccjit0-gcc13 libstdc++6-devel-gcc13 - Revert libgccjit dependency change. [boo#1220724] ==== glibc ==== Subpackages: glibc-32bit glibc-devel glibc-extra glibc-lang glibc-locale glibc-locale-base nscd - stdbit-builtins.patch: Use gcc __builtin_stdc_* builtins in stdbit.h if possible - sigisemptyset.patch: linux/sigsetops: fix type confusion (BZ #31468) - duplocale-global-locale.patch: duplocale: protect use of global locale (bsc#1220441, BZ #23970) ==== kf6-kconfig ==== Subpackages: kconf_update6 kf6-kconfig-imports libKF6ConfigCore6 libKF6ConfigCore6-lang libKF6ConfigGui6 libKF6ConfigQml6 - Add patch to fix missing config migration (kde#483795): * 0001-kconf_update-Also-run-.upd-files-if-times-match-but-.patch ==== kio-extras ==== Subpackages: kio-extras-lang libkioarchive6-6 - Make kio-extras conflict with kio-extras5 versions older than 24.02.0 - Recommend ffmpegthumbs ==== kmail ==== Subpackages: kmail-application-icons kmail-lang ktnef - Add fix for a potential kontact crash (kde#483844): * 0001-Fix-483844-kontact-segfaults-on-startup.patch ==== libavif ==== Version update (1.0.3 -> 1.0.4) - update to 1.0.4: * AVIF_ENABLE_WERROR is set to OFF by default. * Fix wrong alpha plane deallocation when decoded tile pixel format does not match reconstructed output image pixel format * Fix identical chunk skipping optimization when writing animation data * Fix ID selection for artificial grid alpha item when decoding a grid of tiles which each have an associated auxiliary alpha image item (https://crbug.com/oss-fuzz/65657). ==== libopenmpt ==== Version update (0.7.3 -> 0.7.5) - Update to 0.7.5: * [Sec] Null-pointer write (32bit platforms) or excessive memory allocation (64bit platforms) when reading close to 4GiB of data from unseekable files.. * [Sec] Write buffer overflow when reading unseekable files close to 4GiB in size. * [Sec] Possible out-of-memory (32bit platforms) or excessive memory allocation (64bit platforms) when reading malformed data from unseekable files. * [Sec] DMF: Possible null-pointer write or excessive memory allocation when reading DMF files. * IT: In the previous version, Zxx macros in IT files made with older MPT versions were no longer working. * There was a periodic click when playing a module using the Chorus or Flanger DMO plugin at a mix rate exceeding ~136.5 kHz. * An older bugfix for undefined behaviour in the Distortion DMO plugin was incorrect, causing the distorted sound to be different in some situations. * xmp-openmpt: Metadata retrievel for playlist items was broken. - Changes in 0.7.4: * [Bug] Makefile: libopenmpt 0.7.3 broke running the test suite for Emscripten builds. * openmpt123: openmpt123 now uses a narrower layout on terminal windows with a width of less than 72 characters. * Setting all possible load_skip flags resulted in nothing being loaded at all, instead of just not loading the selected module parts. * When playing all subsongs, set_position_seconds didnât always calculate the correct subsong to jump to. * IT: A few more compatibility flags are now disabled for modules saved with earlier Schism Tracker versions. * IT: MIDI macros were reset in IT 2.14 / 2.15 files that declared to be compatible with older IT versions (fixes spx-visionsofthepast.it). * OKT: Work around missing negative arpeggio implementation by transposing the notes up an octave. * OKT: Channel volume commands were sometimes lost over less important effects. * IMF: Ignore magic bytes in sample header. âLeaving All Behindâ by Karsten Koch uses unexpected magic bytes, Orpheus ignores them just like the instrument header magic bytes. ==== libplasma6 ==== Subpackages: libPlasma6 libPlasma6-lang libplasma6-components libplasma6-desktoptheme - Work around %preun in installed packages killing the session during upgrade (boo#1221405) ==== plasma6-workspace ==== Subpackages: plasma6-session plasma6-session-x11 plasma6-workspace-lang plasma6-workspace-libs sddm-qt6-branding-openSUSE - Let plasma6-session-x11 provide+obsolete plasma5-session to ensure that upgrades end up with the X11 session as well. ==== python-importlib-metadata ==== Version update (7.0.1 -> 7.0.2) - update to 7.0.2: * No significant changes. ==== python-pyOpenSSL ==== Version update (24.0.0 -> 24.1.0) - update to 24.1.0: * Removed the deprecated OpenSSL.crypto.PKCS12 and OpenSSL.crypto.NetscapeSPKI. OpenSSL.crypto.PKCS12 may be replaced by the PKCS#12 APIs in the cryptography package. ==== python-rich ==== Version update (13.7.0 -> 13.7.1) - update to 13.7.1: * Fixes some character widths ==== qt6-declarative ==== Subpackages: libQt6LabsAnimation6 libQt6LabsFolderListModel6 libQt6LabsQmlModels6 libQt6LabsSettings6 libQt6LabsSharedImage6 libQt6LabsWavefrontMesh6 libQt6Qml6 libQt6QmlCore6 libQt6QmlLocalStorage6 libQt6QmlModels6 libQt6QmlWorkerScript6 libQt6QmlXmlListModel6 libQt6Quick6 libQt6QuickControls2-6 libQt6QuickControls2Impl6 libQt6QuickDialogs2-6 libQt6QuickDialogs2QuickImpl6 libQt6QuickDialogs2Utils6 libQt6QuickEffects6 libQt6QuickLayouts6 libQt6QuickParticles6 libQt6QuickShapes6 libQt6QuickTemplates2-6 libQt6QuickTest6 libQt6QuickWidgets6 qt6-declarative-imports - Add patch to help fix PointHandler with HiDPI (kde#482580) - 0001-Fix-PointHandler-rejecting-click-events-near-window-.patch ==== timezone ==== - Drop the timezone-java (bsc#1213470). After thorough consideration of possible problems that arise from having a timezone package specifically for the Java ecosystem, Fridrich Strba and I have decided to drop the package altogether. Doing so means the JDK will use its built-in timezone data that is updated quarterly, when refreshed JDK versions are released. While this does mean there could be situations where there is a bit of a mismatch between the 'timezone' package's data, and the data that is used by JDK, in practice the difference will be minimal and short-lived. So we've established this to be the best course of action. - Remove _multibuild, not longer required. ==== virglrenderer ==== Version update (1.0.0 -> 1.0.1) - update to 1.0.1: * Fix 17 bugs, most of them securety related * Fix a number of issues uncovered by Coverity * Add meson option to enable unstable APIs and add the info to pkg-config * vtest: Stabilize protocol version 3 ==== wavpack ==== Version update (5.6.0 -> 5.7.0) - update to 5.7.0: * added: multithreaded encoding and decoding to libwavpack (optional) * added: option to specify multithreading in CLI programs (--threads) * added: multithreading support to Cool Edit filter (always enabled) * added: support for ID3v2.4 when importing tags (--import-id3) * added: optional bitrate specification to wavpack -c option * added: recognize WAV files with new fourcc of 'BW64' * fixed: decode non-compliant FFmpeg files over 8 channels * fixed: accept some common but non-compliant AIFF files * fixed: automatically delete newly obsolete correction files * fixed: don't delete source files if data loss warnings occur * improved: ID3v2 tag support (more items, multiple values, pics, etc) * improved: compression of 32-bit integer files (--optimize-int32) * improved: convert the man pages to mdoc(7) * improved: cmake & autoconf support - Build AVX2 enabled hwcaps library for x86_64-v3 ==== yast2-bootloader ==== Version update (5.0.6 -> 5.0.7) - Improve warnings and help text for secure boot on s390 to reflect state with new hardware. (bsc#1219989) - 5.0.7 ==== yast2-trans ==== Version update (84.87.20240309.6826dab25a -> 84.87.20240317.9b1b5b2b95) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20240317.9b1b5b2b95: * Translated using Weblate (Catalan) * Translated using Weblate (Slovak) * Translated using Weblate (Dutch) * Translated using Weblate (Indonesian) * Translated using Weblate (Japanese) * New POT for text domain 'bootloader'. * New POT for text domain 'registration'. * New POT for text domain 'packager'. * Translated using Weblate (French) * Added translation using Weblate (French) * Translated using Weblate (Catalan)

1 0

Workaround for extension breakage Firefox?
by zaggynl 19 Mar '24

19 Mar '24

Hello, Apparently Firefox extensions broke down on OpenSUSE: https://bugzilla.opensuse.org/show_bug.cgi?id=1221531 Does anyone know if the fix if imminent or a workaround? I saw a workaround like this https://support.mozilla.org/bm/questions/1442616#answer-1642858 but not sure if a good idea: sudo update-crypto-policies --set LEGACY -about:config -In the search box in the page, type or paste xpi- and pause while the list is filtered -Find the app.update.lastUpdateTime.xpi-signature-verification preference and click the trash can at the right end of the row to clear it -Close this tab and do a regular quit/restart of Firefox. It should re-run the verification within the first minute or two after startup. Kind Regards, zaggynl

2 1

New Tumbleweed snapshot 20240317 released!
by Dominique Leuenberger 18 Mar '24

18 Mar '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: cryptsetup (2.7.0 -> 2.7.1) dav1d (1.4.0 -> 1.4.1) expat (2.6.1 -> 2.6.2) libjxl (0.10.1 -> 0.10.2) libjxl-gtk (0.10.1 -> 0.10.2) mutter openSUSE-release (20240315 -> 20240317) pcr-oracle phonon-qt5 phonon-qt6 phonon-vlc-qt5 phonon-vlc-qt6 plasma6-nm qemu (8.2.1 -> 8.2.2) rebootmgr (2.3 -> 2.4) rsyslog spice sqlite3 (3.44.2 -> 3.45.2) wicked === Details === ==== cryptsetup ==== Version update (2.7.0 -> 2.7.1) Subpackages: cryptsetup-doc cryptsetup-lang libcryptsetup12 - Update to 2.7.1: * Fix interrupted LUKS1 decryption resume. With the replacement of the cryptsetup-reencrypt tool by the cryptsetup reencrypt command, resuming the interrupted LUKS1 decryption operation could fail. LUKS2 was not affected. * Allow --link-vk-to-keyring with --test-passphrase option. This option allows uploading the volume key in a user-specified kernel keyring without activating the device. * Fix crash when --active-name was used in decryption initialization. * Updates and changes to man pages, including indentation, sorting options alphabetically, fixing mistakes in crypt_set_keyring_to_link, and fixing some typos. * Fix compilation with libargon2 when --disable-internal-argon2 was used. * Do not require installed argon2.h header and never compile internal libargon2 code if the crypto library directly supports Argon2. * Fixes to regression tests to support older Linux distributions. ==== dav1d ==== Version update (1.4.0 -> 1.4.1) - Update to version 1.4.1 * Optimizations for 6tap filters for NEON (ARM) * More RISC-V optimizations for itx (4x8, 8x4, 4x16, 16x4, 8x16, 16x8) * Reduction of binary size on ARM64, ARM32 and RISC-V * Fix out-of-bounds read in 8bpc SSE2/SSSE3 wiener_filter * Msac optimizations ==== expat ==== Version update (2.6.1 -> 2.6.2) Subpackages: libexpat1 - update to 2.6.2: * CVE-2024-28757 -- Prevent billion laughs attacks with isolated use of external parsers (boo#1221289) * Reject direct parameter entity recursion and avoid the related undefined behavior ==== libjxl ==== Version update (0.10.1 -> 0.10.2) Subpackages: libjxl0_10 libjxl0_10-x86-64-v3 - Update to release 0.10.2 * Fix unspecified bugs in (lossless) encoding and streaming mode ==== libjxl-gtk ==== Version update (0.10.1 -> 0.10.2) Subpackages: gdk-pixbuf-loader-jxl gimp-plugin-jxl - Update to release 0.10.2 * Fix unspecified bugs in (lossless) encoding and streaming mode ==== mutter ==== Subpackages: mutter-lang - Add 0001-Revert-clutter-actor-Cache-stage-relative-instead-of.patch: This leads into partial update while switching VT (from TTY to GNOME) on X11 session with fbdev driver used ( glgo#GNOME/mutter#3302, bsc#1219546). ==== openSUSE-release ==== Version update (20240315 -> 20240317) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== pcr-oracle ==== - Add fix_grub_bls_entry.patch to measure boot entries in GRUB BLS ==== phonon-qt5 ==== Subpackages: libphonon4qt5 phonon4qt5-lang phononsettings-qt5 - Update the recommended backend package name (boo#1221459) ==== phonon-qt6 ==== Subpackages: libphonon4qt6 phononsettings-qt6 - Update the recommended backend package name (boo#1221459) ==== phonon-vlc-qt5 ==== - Make sure installing phonon-vlc-qt6 also recommends installing the translations package - Update phonon-qt5-vlc 'Provides' (related: boo#1221459) ==== phonon-vlc-qt6 ==== - Make sure installing phonon-vlc-qt6 also recommends installing the translations package - Update phonon-qt5-vlc 'Provides' (related: boo#1221459) ==== plasma6-nm ==== Subpackages: plasma6-nm-lang plasma6-nm-openconnect plasma6-nm-openvpn plasma6-nm-pptp plasma6-nm-vpnc - Make plasma6-nm-libreswan obsolete the plasma5 package ==== qemu ==== Version update (8.2.1 -> 8.2.2) Subpackages: qemu-accel-tcg-x86 qemu-audio-spice qemu-block-curl qemu-block-nfs qemu-block-rbd qemu-chardev-spice qemu-guest-agent qemu-hw-display-qxl qemu-hw-display-virtio-gpu qemu-hw-display-virtio-gpu-pci qemu-hw-display-virtio-vga qemu-hw-usb-host qemu-hw-usb-redirect qemu-hw-usb-smartcard qemu-img qemu-ipxe qemu-ksm qemu-lang qemu-microvm qemu-pr-helper qemu-seabios qemu-tools qemu-ui-curses qemu-ui-gtk qemu-ui-opengl qemu-ui-spice-app qemu-ui-spice-core qemu-vgabios qemu-x86 - Update to version 8.2.2. Full changelog here: https://lore.kernel.org/qemu-devel/1709577077.783602.1474596.nullmailer@tls… Some upstream backports: * chardev/char-socket: Fix TLS io channels sending too much data to the backend * tests/unit/test-util-sockets: Remove temporary file after test * hw/usb/bus.c: PCAP adding 0xA in Windows version * hw/intc/Kconfig: Fix GIC settings when using "--without-default-devices" * gitlab: force allow use of pip in Cirrus jobs * tests/vm: avoid re-building the VM images all the time * tests/vm: update openbsd image to 7.4 * target/i386: leave the A20 bit set in the final NPT walk * target/i386: remove unnecessary/wrong application of the A20 mask * target/i386: Fix physical address truncation * target/i386: check validity of VMCB addresses * target/i386: mask high bits of CR3 in 32-bit mode * pl031: Update last RTCLR value on write in case it's read back * hw/nvme: fix invalid endian conversion * update edk2 binaries to edk2-stable202402 * update edk2 submodule to edk2-stable202402 * target/ppc: Fix crash on machine check caused by ifetch * target/ppc: Fix lxv/stxv MSR facility check * .gitlab-ci.d/windows.yml: Drop msys2-32bit job * system/vl: Update description for input grab key * docs/system: Update description for input grab key * hw/hppa/Kconfig: Fix building with "configure --without-default-devices" * tests/qtest: Depend on dbus_display1_dep * meson: Explicitly specify dbus-display1.h dependency * audio: Depend on dbus_display1_dep * ui/console: Fix console resize with placeholder surface * ui/clipboard: add asserts for update and request * ui/clipboard: mark type as not available when there is no data * ui: reject extended clipboard message if not activated * target/i386: Generate an illegal opcode exception on cmp instructions with lock prefix * i386/cpuid: Move leaf 7 to correct group * i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F * i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs * i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available * .gitlab-ci/windows.yml: Don't install libusb or spice packages on 32-bit * iotests: Make 144 deterministic again * target/arm: Don't get MDCR_EL2 in pmu_counter_enabled() before checking ARM_FEATURE_PMU * target/arm: Fix SVE/SME gross MTE suppression checks * target/arm: Handle mte in do_ldrq, do_ldro - Address bsc#1220310. Backported upstream commits: * ppc/spapr: Initialize max_cpus limit to SPAPR_IRQ_NR_IPIS * ppc/spapr: Introduce SPAPR_IRQ_NR_IPIS to refer IRQ range for CPU IPIs. ==== rebootmgr ==== Version update (2.3 -> 2.4) - Update to version 2.4 - Make sure systemctl reboot will not switch to soft-reboot automatically ==== rsyslog ==== - Fix rpmlint warnings and errors: + rsyslog.spec:590: W: %autopatch-not-in-prep: - applying patches should be done in prep section and in this case, there is no reason not to do it. Use the opportunity to switch to %autosetup. - Do not BuildRequire libtool, autoconf, automake and don't run autoreconf: the comment indicates this would be needed for patch1, but likely for an 'older patch1': what we have now does not touch the build system. + E: superfluous-%clean-section: Drop long deprecated %clean section. + E: suse-zypp-otherproviders otherproviders(syslog): simply provide syslog. + W: non-etc-or-var-file-marked-as-conffile: do not mark files in /usr/share as config; admins are not supposed to change them. + rsyslog-doc.x86_64: E: no-binary: build rsyslog-doc as noarch. + E: explicit-lib-dependency librdkafka1: the dependency for one should be in module-kafka, but then is also auto-detected by RPM. ==== spice ==== - Add patch to fix build with gstreamer 1.24: * fix-build-with-gstreamer-1.24.patch ==== sqlite3 ==== Version update (3.44.2 -> 3.45.2) Subpackages: libsqlite3-0 libsqlite3-0-x86-64-v3 sqlite3-tcl - Update to release 3.45.2: * Added the SQLITE_RESULT_SUBTYPE property for application- defined SQL functions. * Enhancements to the JSON SQL functions * Add the FTS5 tokendata option to the FTS5 virtual table. * The SQLITE_DIRECT_OVERFLOW_READ optimization is now enabled by default. * Query planner improvements * Increase the default value for SQLITE_MAX_PAGE_COUNT from 1073741824 to 4294967294. * Enhancements to the CLI * Restore the JSON BLOB input bug, and promise to support the anomaly in subsequent releases, for backward compatibility. * Fix the PRAGMA integrity_check command so that it works on read-only databases that contain FTS3 and FTS5 tables. * Fix issues associated with processing corrupt JSONB inputs. * Fix a long-standing bug in which a read of a few bytes past the end of a memory-mapped segment might occur when accessing a craftily corrupted database using memory-mapped database. * Fix a long-standing bug in which a NULL pointer dereference might occur in the bytecode engine due to incorrect bytecode being generated for a class of SQL statements that are deliberately designed to stress the query planner but which are otherwise pointless. * Fix an error in UPSERT, introduced in version 3.35.0. * Reduce the scope of the NOT NULL strength reduction optimization that was added in version 3.35.0. - Add sqlite3-float-i586.patch to fix build on i586. - sqlite3-rtree-i686.patch is not needed anymore. - Abort build when %version and %tarversion don't match. ==== wicked ==== Subpackages: wicked-service - addrconf: fix fallback-lease drop (bsc#1220996) [+ 0001-addrconf-fix-fallback-lease-drop-bsc-1220996.patch] - extensions/nbft: use upstream `nvme nbft show` (bsc#1221358) [+ 0002-extensions-nbft-replace-nvme-show-nbft-with-nvme-nbf.patch]

1 0

Zypper crashes while loading shared libraries
by Ulf 18 Mar '24

18 Mar '24

Hi, during a zypper update, I stoped the update with <ctrl>+<c>. Seams to be that I stopped it during an updated of a required library (there was a segfault message visible). Now if I start "zypper", the following message is visible: zypper: error while loading shared libraries: libabsl_log_internal_check_op.so.2308.0.0: cannot open shared object file: No such file or directory According https://opensuse.pkgs.org/tumbleweed/opensuse-oss-x86_64/libabsl2308_0_0-20… the file should be available at https://ftp.lysator.liu.se/pub/opensuse/tumbleweed/repo/oss/x86_64/libabsl2… but it isn't. OK, so I downloaded the full folder with more than 2M files with: wget --no-parent -r https://ftp.lysator.liu.se/pub/opensuse/tumbleweed/repo/oss/x86_64/ --reject "index.html*" But still not there. I checked the dendencies but was not able to find the related package and installed all packages was there: # rpm -q --whatrequires zypper patterns-base-sw_management-20200505-47.1.x86_64 opi-5.0.0-1.1.noarch zypper-needs-restarting-1.14.68-1.4.noarch zypper-lifecycle-plugin-0.6.1601367426.843fe7a-3.8.noarch zypper-aptitude-1.14.68-1.4.noarch --> OK, I don't know if this is the right ones # rpm -qp zypper-1.14.68-1.4.x86_64.rpm --requires /bin/sh /bin/sh /bin/sh config(zypper) = 1.14.68-1.4 ld-linux-x86-64.so.2()(64bit) ld-linux-x86-64.so.2(GLIBC_2.3)(64bit) libaugeas.so.0()(64bit) libaugeas.so.0(AUGEAS_0.1.0)(64bit) libaugeas.so.0(AUGEAS_0.8.0)(64bit) libaugeas0 >= 1.10.0 libc.so.6()(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.28)(64bit) libc.so.6(GLIBC_2.32)(64bit) libc.so.6(GLIBC_2.34)(64bit) libc.so.6(GLIBC_2.38)(64bit) libc.so.6(GLIBC_2.4)(64bit) libgcc_s.so.1()(64bit) libgcc_s.so.1(GCC_3.0)(64bit) libgcc_s.so.1(GCC_3.3.1)(64bit) libreadline.so.8()(64bit) libstdc++.so.6()(64bit) libstdc++.so.6(CXXABI_1.3)(64bit) libstdc++.so.6(CXXABI_1.3.5)(64bit) libstdc++.so.6(CXXABI_1.3.8)(64bit) libstdc++.so.6(CXXABI_1.3.9)(64bit) libstdc++.so.6(GLIBCXX_3.4)(64bit) libstdc++.so.6(GLIBCXX_3.4.11)(64bit) libstdc++.so.6(GLIBCXX_3.4.14)(64bit) libstdc++.so.6(GLIBCXX_3.4.15)(64bit) libstdc++.so.6(GLIBCXX_3.4.18)(64bit) libstdc++.so.6(GLIBCXX_3.4.20)(64bit) libstdc++.so.6(GLIBCXX_3.4.21)(64bit) libstdc++.so.6(GLIBCXX_3.4.26)(64bit) libstdc++.so.6(GLIBCXX_3.4.29)(64bit) libstdc++.so.6(GLIBCXX_3.4.30)(64bit) libstdc++.so.6(GLIBCXX_3.4.32)(64bit) libstdc++.so.6(GLIBCXX_3.4.9)(64bit) libxml2.so.2()(64bit) libxml2.so.2(LIBXML2_2.4.30)(64bit) libxml2.so.2(LIBXML2_2.5.0)(64bit) libxml2.so.2(LIBXML2_2.6.0)(64bit) libzypp >= 17.31.31 libzypp.so.1722()(64bit) libzypp.so.1722(ZYPP_plain)(64bit) procps rpmlib(CompressedFileNames) <= 3.0.4-1 rpmlib(FileDigests) <= 4.6.0-1 rpmlib(PayloadFilesHavePrefix) <= 4.0-1 rpmlib(PayloadIsZstd) <= 5.4.18-1 --> This don't tell me the package name :-( Any idea how to repair zypper on a running system? PS: In worst case I need to boot a new install package and look it is possible to repair the system with an upgrade from an install disk Thanks Ulf

10 18

Slowroll zypper dup keeps reinstalling the same kernel
by Larry Len Rainey 18 Mar '24

18 Mar '24

2 1

New Tumbleweed snapshot 20240315 released!
by Dominique Leuenberger 17 Mar '24

17 Mar '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: AppStream AppStream-qt6 Mesa Mesa-drivers NetworkManager-branding-openSUSE amarok avahi avahi-glib2 glib2-branding-openSUSE glslang (14.0.0 -> 14.1.0) gtk2-branding-openSUSE gtk3-branding-openSUSE gtk4-branding-openSUSE icewm-theme-branding kdepim-runtime kernel-firmware (20240229 -> 20240312) kscreenlocker (5.27.10 -> 5.27.11) layer-shell-qt (5.27.10 -> 5.27.11) libkscreen2 (5.27.10 -> 5.27.11) libressl (3.7.0 -> 3.8.3) openSUSE-build-key openSUSE-release (20240314 -> 20240315) pam_kwallet6 patterns-kde (20231206 -> 20240311) polkit-default-privs (1550+20240307.987ebab -> 1550+20240311.559e6ac) postgresql16 presage publicsuffix (20240303 -> 20240306) python-sniffio (1.3.0 -> 1.3.1) qtkeychain-qt6 (0.14.1 -> 0.14.2) salt yast2-network (5.0.2 -> 5.0.3) yast2-packager (5.0.4 -> 5.0.5) === Details === ==== AppStream ==== - Add conflict in appstream-qt6-devel with libAppStreamQt-devel < 1.0. This is required to fix a file conflict in SLE with the old libAppStreamQt-devel package. ==== AppStream-qt6 ==== - Add conflict in appstream-qt6-devel with libAppStreamQt-devel < 1.0. This is required to fix a file conflict in SLE with the old libAppStreamQt-devel package. ==== Mesa ==== Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - buildrequires llvm18-devel/clang18-devel on Leap 15.5/15.6 - disabled u_zink-dont-print-error-messages-when-failing-an-implicit.patch for now, since it breaks driver build; this patch needs other patches below to build ... - u_zink-dont-print-error-messages-when-failing-an-implicit.patch * zink: don't print error messages when failing an implicit driver load (Mesa gitlab issue #10802) - Add U_fix-ac-llvm-LLVM-18-remove-useless-passes.patch to fix build with LLVM 18. ==== Mesa-drivers ==== Subpackages: Mesa-dri Mesa-gallium Mesa-libva libxatracker2 - buildrequires llvm18-devel/clang18-devel on Leap 15.5/15.6 - disabled u_zink-dont-print-error-messages-when-failing-an-implicit.patch for now, since it breaks driver build; this patch needs other patches below to build ... - u_zink-dont-print-error-messages-when-failing-an-implicit.patch * zink: don't print error messages when failing an implicit driver load (Mesa gitlab issue #10802) - Add U_fix-ac-llvm-LLVM-18-remove-useless-passes.patch to fix build with LLVM 18. ==== NetworkManager-branding-openSUSE ==== - Ensure flavor has a value, at least %nil. - ExclusiveArch: %nil is invalid: give it a value (do-not-build). ==== amarok ==== - Require a phonon-vlc backend that was built with Qt5 ==== avahi ==== Subpackages: avahi-lang libavahi-client3 libavahi-client3-32bit libavahi-common3 libavahi-common3-32bit libavahi-core7 - remove dependency on /usr/bin/python3 using %python3_fix_shebang macro, [bsc#1212476] ==== avahi-glib2 ==== Subpackages: libavahi-glib1 libavahi-gobject0 libavahi-ui-gtk3-0 - remove dependency on /usr/bin/python3 using %python3_fix_shebang macro, [bsc#1212476] ==== glib2-branding-openSUSE ==== - Ensure flavor has a value, at least %nil. - ExclusiveArch: %nil is invalid: give it a value (do-not-build). ==== glslang ==== Version update (14.0.0 -> 14.1.0) - Update to release 14.1 * Add a new ``--absolute-path`` command-line option to output absolute paths in error messages * Support GL_EXT_control_flow_attributes2, GL_ARB_shading_language_include, NV_shader_atomic_fp16_vector, GL_EXT_expect_assume_support, GL_KHR_shader_subgroup_rotate, EXT_shader_quad_control, GL_EXT_maximal_reconvergence, GL_ARB_texture_multisample_extension * Emit debug info for accelerationStructure and rayQuery variables * Improve debug source and line info * Add OpAssumeTrueKHR and OpExpectKHR * Remove generation of deprecated Target.cmake files ==== gtk2-branding-openSUSE ==== - Ensure flavor has a value, at least %nil. - ExclusiveArch: %nil is invalid: give it a value (do-not-build). ==== gtk3-branding-openSUSE ==== - Ensure flavor has a value, at least %nil. - ExclusiveArch: %nil is invalid: give it a value (do-not-build). ==== gtk4-branding-openSUSE ==== - Ensure flavor has a value, at least %nil. - ExclusiveArch: %nil is invalid: give it a value (do-not-build). ==== icewm-theme-branding ==== - Make sure flavor is never defined without content, but at least has %nil. - Use an invalid arch for "" flavor (do-not-build): %nil is not actually supported and worked by accident. ==== kdepim-runtime ==== Subpackages: kdepim-runtime-lang - Add upstream change to fix the etesync resource build (kde#482600): * 0001-Bring-back-etesync-support.patch ==== kernel-firmware ==== Version update (20240229 -> 20240312) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-ath12k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update to version 20240312 (git commit 4a404b5bfdb9): * linux-firmware: update firmware for mediatek bluetooth chip (MT7921) * iwlwifi: update 9000-family firmwares to core85-89 * rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA * linux-firmware: update firmware for MT7921 WiFi device * linux-firmware: update firmware for mediatek bluetooth chip (MT7922) * linux-firmware: update firmware for MT7922 WiFi device * linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops ==== kscreenlocker ==== Version update (5.27.10 -> 5.27.11) Subpackages: kscreenlocker-lang - Update to 5.27.11: * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.11 - Changes since 5.27.10: * Port to new Gitlab template include format ==== layer-shell-qt ==== Version update (5.27.10 -> 5.27.11) - Update to 5.27.11: * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.11 - Changes since 5.27.10: * Port to new Gitlab template include format ==== libkscreen2 ==== Version update (5.27.10 -> 5.27.11) Subpackages: libKF5Screen8 libKF5Screen8-lang libKF5ScreenDpms8 - Update to 5.27.11: * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.11 - No code changes since 5.27.10 ==== libressl ==== Version update (3.7.0 -> 3.8.3) - Update to 3.8.3: * Improved control-flow enforcement (CET) support. - Rework conflicts again - Update to release 3.8.2 * Added support for truncated SHA-2 and for SHA-3. * The BPSW primality test performs additional Miller-Rabin rounds with random bases to reduce the likelihood of composites passing. * Allow testing of ciphers and digests using badly aligned buffers in openssl speed. * Added a workaround for a poorly thought-out change in OpenSSL 3 that broke privilege separation support in libtls. * Compatibility changes: * Removed most public symbols that were deprecated in OpenSSL 0.9.8. * Security fixes: * Disabled TLSv1.0 and TLSv1.1 in libssl so that they may no longer be selected for use. - Improve cross-package provides/conflicts [boo#1210313] * Remove explicit conflicts with other devel-libraries * Remove Obsoletes: ssl - Update to 3.7.3: * Bug fix: Hostflags in the verify parameters would not propagate from an SSL_CTX to newly created SSL. * Reliability fix: A double free or use after free could occur after SSL_clear(3). - Update to release 3.7.2 * Updates to the build system - Add more conflicts between openssl<>libressl - Update to release 3.7.1 * Added UI_null() * Added X509_STORE_*check_issued() * Added X509_CRL_get0_sigalg() and X509_get0_uids() accessors * Added EVP_CIPHER_meth_*() setter API ==== openSUSE-build-key ==== - Install import-openSUSE-build-key to %{_sbindir}: align to where the .service file is launching the script from (boo#1221427). ==== openSUSE-release ==== Version update (20240314 -> 20240315) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== pam_kwallet6 ==== Subpackages: pam_kwallet6-common - Also attempt pam-config enablement in %posttrans (boo#1221371) - Add patches to avoid depending on Qt: * 0001-Allow-specifing-KWALLETD_BIN_PATH-manually.patch * 0002-Use-GNUInstallDirs-instead-of-KDEInstallDirs.patch ==== patterns-kde ==== Version update (20231206 -> 20240311) Subpackages: patterns-kde-kde patterns-kde-kde_edutainment patterns-kde-kde_games patterns-kde-kde_ide patterns-kde-kde_imaging patterns-kde-kde_internet patterns-kde-kde_multimedia patterns-kde-kde_office patterns-kde-kde_pim patterns-kde-kde_plasma patterns-kde-kde_utilities patterns-kde-kde_utilities_opt patterns-kde-kde_yast - Add a pattern for KDE Frameworks and Plasma 6 development packages - Update recommended applications ==== polkit-default-privs ==== Version update (1550+20240307.987ebab -> 1550+20240311.559e6ac) - Update to version 1550+20240311.559e6ac: * whitelist gnome-control-center remote-session-helper (bsc#1220862) ==== postgresql16 ==== Subpackages: libpq5 postgresql16-contrib postgresql16-server - Require LLVM <= 17 for now, because LLVM 18 doesn't seem to work. - Remove constraints file because improved memory usage for s390x ==== presage ==== Subpackages: libpresage1 presage-data - remove dependency on /usr/bin/python3 using %python3_fix_shebang macro, [bsc#1212476] ==== publicsuffix ==== Version update (20240303 -> 20240306) - Update to version 20240306: * util: gTLD data autopull updates for 2024-03-06T15:14:58 UTC (#1943) ==== python-sniffio ==== Version update (1.3.0 -> 1.3.1) - update to 1.3.1: * Added missing thread_local to sniffio.__all__ * Add support for Python 3.9 and 3.10. * Provide sniffio.thread_local.name for coroutine libraries to set * Drop support for Python 3.5 and 3.6. * Include type hints ==== qtkeychain-qt6 ==== Version update (0.14.1 -> 0.14.2) Subpackages: libqt6keychain1 qtkeychain-qt6-lang - Update to 0.14.2 * Add support for KWallet 6 ==== salt ==== Subpackages: python3-salt salt-master salt-minion salt-transactional-update - Fix detected issues in Salt tests when running on VMs - Added: * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch ==== yast2-network ==== Version update (5.0.2 -> 5.0.3) - Guard secret attributes against leaking to the log (bsc#1221194) - 5.0.3 ==== yast2-packager ==== Version update (5.0.4 -> 5.0.5) - Change the product mapping API to be the same as in SP5 and older (related to bsc#1220567) - 5.0.5 - Display a better product summary for the SLE_HPC => SLES upgrade (jsc#PED-7841)

1 0

Re: Control panel for sddm missing on KDE 6.0
by miguel＠rozsas.eng.br 16 Mar '24

16 Mar '24

I've got a control panel for sddm only after manually uninstalling the package 'sddm' and installing the new 'sddm-qt6' . Looks like 'zypper dup' didn't handle this during the KDE5->6 transition and left the user with a weird/ugly login screen. Took me 2 days to fix it, thanks to u/DragonOfTartarus on Reddit's opensuse sub.

1 0

Control panel for sddm missing on KDE 6.0
by John Paul Adrian Glaubitz 16 Mar '24

16 Mar '24

Hello, after updating my Tumbleweed system to KDE 6.0, I am missing the control panel for configuring sddm so that I cannot configure the wallpaper. I am using sddm-qt6 which I had switched to in the past already since a previous regression in Qt5 which broke sddm-qt5. Has kcm_sddm been ported to Qt6 yet? I'm seeing that the current version is still 5.27. Thanks, Adrian

2 2