May 2024 - openSUSE Factory - openSUSE Mailing Lists

Getting ELF error on vlc-beta in Leap 15.5
by Larry Len Rainey 27 May '24

27 May '24

2 1

[15.6] openSUSE-release-15.6-lp156.408.1.x86_64 policy change???
by Felix Miata 27 May '24

27 May '24

openSUSE-release-15.6-lp156.408.1.x86_64: # rpm -ql openSUSE-release | grep repo /etc/zypp/repos.d/repo-backports-debug-update.repo /etc/zypp/repos.d/repo-backports-update.repo /etc/zypp/repos.d/repo-sle-debug-update.repo /etc/zypp/repos.d/repo-sle-update.repo # Two of these replicate existing repos. Two are unneeded/undesired (as all repos that are named "repo*.repo" are undesired here[1]). # ls -Ggl /etc/zypp/repos.d/*.repo -rw-rw-r-- 1 185 Jan 1 00:00 /etc/zypp/repos.d/FCL-leap.repo -rw-r--r-- 1 219 Jul 15 2023 /etc/zypp/repos.d/KDE3.repo -rw-r--r-- 1 153 Jul 15 2023 /etc/zypp/repos.d/NonOSS.repo -rw-r--r-- 1 143 Jul 15 2023 /etc/zypp/repos.d/OSS.repo -rw-r--r-- 1 129 Jul 15 2023 /etc/zypp/repos.d/Update.repo -rw-r--r-- 1 239 Jul 15 2023 /etc/zypp/repos.d/UpdateBP.repo -rw-r--r-- 1 145 Jul 15 2023 /etc/zypp/repos.d/UpdateNonOSS.repo -rw-r--r-- 1 135 Jul 15 2023 /etc/zypp/repos.d/UpdateSLE.repo -rw-r--r-- 1 192 Feb 8 2023 /etc/zypp/repos.d/openh264.repo # zypper lr Repository priorities are without effect. All enabled repositories share the same priority. # | Alias | Enabled | GPG Check | URI --+--------------+---------+-----------+------------------------------------------------------------------ 1 | FCL-leap | Yes | ( p) Yes | http://silk.apana.org.au/rpm-opensuse15-unstable-dev 2 | KDE3 | Yes | (r ) Yes | http://download.opensuse.org/repositories/KDE:/KDE3/15.6/ 3 | NonOSS | Yes | (r ) Yes | http://download.opensuse.org/distribution/leap/15.6/repo/non-oss/ 4 | OSS | Yes | (r ) Yes | http://download.opensuse.org/distribution/leap/15.6/repo/oss/ 5 | Update | Yes | (r ) Yes | http://download.opensuse.org/update/leap/15.6/oss/ 6 | UpdateBP | Yes | (r ) Yes | http://download.opensuse.org/update/leap/15.6/backports/ 7 | UpdateNonOSS | Yes | (r ) Yes | http://download.opensuse.org/update/leap/15.6/non-oss/ 8 | UpdateSLE | Yes | (r ) Yes | http://download.opensuse.org/update/leap/15.6/sle/ 9 | openh264 | Yes | (r ) Yes | http://codecs.opensuse.org/openh264/openSUSE_Leap/ # This seems may be a significant policy change for a "minor" release version, especially since this didn't first appear in TW. What's up that an admin can no longer choose what repos to include, or what to call them? [1] My normal routine is to run the following script as prequel to zypper up and to zypper dup: #!/bin/bash # /usr/local/zypstart [ -e /etc/zypp/repo*.repo ] && rm /etc/zypp/repos.d/repo*.repo 2> /dev/null zypper -v in --download-in-advance rpm zypper libzypp libsolv-tools openSUSE-release coreutils filesystem [ -e /etc/zypp/repo*.repo ] && rm /etc/zypp/repos.d/repo*.repo 2> /dev/null # -- Evolution as taught in public schools is, like religion, based on faith, not based on science. Team OS/2 ** Reg. Linux User #211409 ** a11y rocks! Felix Miata

3 7

New Tumbleweed snapshot 20240524 released!
by Dominique Leuenberger 27 May '24

27 May '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ImageMagick freerdp2 libguestfs (1.52.0 -> 1.52.1) libqt5-qtlocation (5.15.13+kde6 -> 5.15.13+kde7) libqt5-qtwebengine (5.15.16 -> 5.15.17) libreoffice openSUSE-release (20240523 -> 20240524) opencc python-requests (2.31.0 -> 2.32.2) sane-backends (1.3.0 -> 1.3.1) talloc (2.4.1 -> 2.4.2) tdb (1.4.9 -> 1.4.10) tevent (0.16.0 -> 0.16.1) === Details === ==== ImageMagick ==== Subpackages: libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - reverted update-alternatives usage removal [bsc#1122033][bsc#1220818] ==== freerdp2 ==== Subpackages: libfreerdp2-2 libwinpr2-2 - Multiple CVE fixes + Add freerdp-CVE-2024-32659.patch (bsc#1223346, CVE-2024-32659) - out-of-bounds read if `((nWidth == 0) and (nHeight == 0))` + Add freerdp-CVE-2024-32660.patch (bsc#1223347, CVE-2024-32660) - client crash via invalid huge allocation size + Add freerdp-CVE-2024-32661.patch (bsc#1223348, CVE-2024-32661) - client NULL pointer dereference + Add freerdp-CVE-2024-32658.patch (bsc#1223353, CVE-2024-32658) - out-of-bounds read in Interleaved RLE Bitmap Codec in FreeRDP based clients ==== libguestfs ==== Version update (1.52.0 -> 1.52.1) Subpackages: libguestfs-appliance libguestfs-winsupport libguestfs-xfs libguestfs0 - Update to version 1.52.1 bug fix release (jsc#PED-6305) * There are no upstream release notes for verion 1.52.x * Several python fixes * Rework Std_utils.Option so it works like the OCaml stdlib module * Update common submodule to latest - Drop patches contained in new tarball Split-chown-parameter-on-character.patch Initialise-bar-fp-as-NULL.patch ==== libqt5-qtlocation ==== Version update (5.15.13+kde6 -> 5.15.13+kde7) - Update to version 5.15.13+kde7: * Update mapbox-gl-native (boo#1224376) ==== libqt5-qtwebengine ==== Version update (5.15.16 -> 5.15.17) - Add compatibility patches for ICU 75: * qt5-webengine-icu-75.patch * 0001-Use-default-constructor-in-place-of-self-delegation-.patch - Consequently build with a newer compiler on Leap 15 - Update to version 5.15.17: * Add option to chose python version for building 5.15 WebEngine * Update Chromium. Backported fixes: * [Backport] Security bug 325296797 * [Backport] CVE-2024-1059: Use after free in WebRTC * [Backport] Security bug 1518994 * Fixup for [Backport] Security bug 1519980 * [Backport] CVE-2024-1283: Heap buffer overflow in Skia * [Backport] CVE-2024-1060: Use after free in Canvas * [Backport] CVE-2024-1077: Use after free in Network * [Backport] Security bug 1519980 * [Backport] CVE-2024-0808: Integer underflow in WebUI * [Backport] CVE-2024-0807: Use after free in WebAudio * Fix ffmpeg assembly with newer binutil * [Backport] Security bug 1511689 * [Backport] CVE-2024-0224: Use after free in WebAudio * [Backport] CVE-2023-7024: Heap buffer overflow in WebRTC * [Backport] Security bug 1506535 * [Backport] CVE-2024-0519: Out of bounds memory access in V8 * [Backport] CVE-2024-0518: Type Confusion in V8 * [Backport] CVE-2024-0333: Insufficient data validation in Extensions * [Backport] CVE-2024-0222: Use after free in ANGLE * Fixup: [Backport] Security bug 1488199 * FIXUP: Fix compilation with system ICU * Fixup: [Backport] Security bug 1505632 * [Backport] Security bug 1505632 * [Backport] CVE-2023-6702: Type Confusion in V8 * [Backport] CVE-2023-6345: Integer overflow in Skia * Bump V8_PATCH_LEVEL * [Backport] Security bug 1488199 (2/2) * [Backport] Security bug 1488199 (1/2) * [Backport] CVE-2023-6510: Use after free in Media Capture * Fix building with system libxml2 * [Backport] CVE-2023-6347: Use after free in Mojo * [Backport] CVE-2023-6112: Use after free in Navigation * [Backport] CVE-2023-5997: Use after free in Garbage Collection - Drop patches, merged upstream: * 0001-Fix-building-with-system-libxml2.patch * qtwebengine-python3.patch * python311-fixes.patch - Update _service file, catapult snapshots are not needed anymore ==== libreoffice ==== Subpackages: libreoffice-base libreoffice-calc libreoffice-draw libreoffice-filters-optional libreoffice-gnome libreoffice-gtk3 libreoffice-icon-themes libreoffice-impress libreoffice-l10n-cs libreoffice-l10n-da libreoffice-l10n-de libreoffice-l10n-el libreoffice-l10n-en libreoffice-l10n-en_GB libreoffice-l10n-es libreoffice-l10n-fr libreoffice-l10n-hu libreoffice-l10n-it libreoffice-l10n-ja libreoffice-l10n-pl libreoffice-l10n-pt_BR libreoffice-l10n-ru libreoffice-l10n-zh_CN libreoffice-l10n-zh_TW libreoffice-mailmerge libreoffice-math libreoffice-pyuno libreoffice-qt5 libreoffice-writer libreofficekit - bsc#1224309: LibreOffice fails to build with ICU 75. - Add patch to fix bsc#1224309. * icu-74-compatibility.patch - Add required 'sed' usage during %prep to fix bsc#1224309. - These two changes have been applied on both Gentoo and Arch Linux, but originally they come from upstream. ==== openSUSE-release ==== Version update (20240523 -> 20240524) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== opencc ==== Subpackages: libopencc1_1 opencc-data - switch to system rapidjson, fix boo#1221875 ==== python-requests ==== Version update (2.31.0 -> 2.32.2) - Update to 2.32.2 * To provide a more stable migration for custom HTTPAdapters impacted by the CVE changes in 2.32.0, we've renamed _get_connection to a new public API, get_connection_with_tls_context. Existing custom HTTPAdapters will need to migrate their code to use this new API. get_connection is considered deprecated in all versions of Requests>=2.32.0. - Update to 2.32.1 * Fixed an issue where setting verify=False on the first request from a Session will cause subsequent requests to the same origin to also ignore cert verification, regardless of the value of verify. (bsc#1224788, CVE-2024-35195) * verify=True now reuses a global SSLContext which should improve request time variance between first and subsequent requests. * Requests now supports optional use of character detection (chardet or charset_normalizer) when repackaged or vendored. This enables pip and other projects to minimize their vendoring surface area. * Requests has officially added support for CPython 3.12 and dropped support for CPython 3.7. * Starting in Requests 2.33.0, Requests will migrate to a PEP 517 build system using hatchling. ==== sane-backends ==== Version update (1.3.0 -> 1.3.1) Subpackages: libsane1 sane-backends-autoconfig - Updated to sane-backends version 1.3.1 * Re-release of 1.3.0 because upstream unreleased 1.3.0 due to VCS issues. ( https://gitlab.com/sane-project/backends/-/issues/751 ) ==== talloc ==== Version update (2.4.1 -> 2.4.2) Subpackages: libtalloc2 libtalloc2-32bit libtalloc2-x86-64-v3 python3-talloc python3-talloc-x86-64-v3 - Update to 2.4.2 * build with Python 3.12 (bso#15513) * documentation fixes * Update patch talloc-python3.5-fix-soabi_name.patch ==== tdb ==== Version update (1.4.9 -> 1.4.10) Subpackages: libtdb1 libtdb1-32bit python3-tdb - Update to 1.4.10 * build with Python 3.12 (bso#15513) * documentation fixes * minor build fixes ==== tevent ==== Version update (0.16.0 -> 0.16.1) Subpackages: libtevent0 libtevent0-32bit python3-tevent - Update to version 0.16.1 * build with Python 3.12 (bso#15513) * documentation fixes

1 0

Z Training for the community (Tuesday, 28th May 2024)
by Sarah Julia Kriesch 27 May '24

27 May '24

Hello together, tomorrow is the last Z training session of the Z training series at 19:00. Last time we went through the memory management and the processor architecture. This time we will go through the difference between zfcp and dasd as storage devices (attached disks). Afterwards you will receive an introduction about qeth as a network device/interface. The last step will be more interactive. We will use the s390-tools and watch, what you can do with this special package. Are you interested for the next learning sessions? Then join us tomorrow at 19:00 (German time)/ 10:00 (Pacific time)/ 18:00 (Nigeria) / 14:00 (Brazil)! Our meeting/training room: https://meet.opensuse.org/s390x Best regards, Sarah

1 0

Tumbleweed - Review of the week 2024/21
by Dominique Leuenberger 24 May '24

24 May '24

Dear Tumbleweed users and hackers, Week 21 felt somewhat quiet. But then, in my region, it was only a 4- day week with Monday being a holiday, which certainly added to the calm. Yet, we published 6 snapshots (0516, 0517, 0520, 0521, 0522, and 0523) since my last weekly review. According to OBS, we have accepted 590 submit requests during the previous 7 days. The main changes delivered in this week were: * Mesa 24.0.7 * OpenLDAP 2.6.7 * KDE Frameworks 5.116.0 * Rust 1.78 * Linux kernel 6.9.1 * Mozilla Firefox 126.0 * GTK 3.24.42 * Snapper 0.11.0 * GCC 13.3.0 * LLVM 18.1.6 * chkstat package renamed to permctl, giving it a better name concerning its functionality * ninja 1.12.0 The various package maintainers have submitted these things for inclusion into Tumbleweed: * KDE Gear 24.05.0 * KDE Plasma 6.0.5 * Python requests 2.32.2 * ICU 75.1 * QEmu 9.0.0 * AppArmor 4.0 * dbus-broker: some networking issue after upgrades left to work out * GCC 14: phase 2: use gcc14 as the default compiler – lots of help needed: https://build.opensuse.org/project/show/openSUSE:Factory:Staging:Gcc7 Cheers, Dominique

1 0

New Tumbleweed snapshot 20240523 released!
by Dominique Leuenberger 24 May '24

24 May '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: curl fcitx5-gtk (5.1.1 -> 5.1.3) gcc13 (13.2.1+git8761 -> 13.3.0+git8781) glibc kf6-qqc2-desktop-style libarchive libcap-ng (0.8.4 -> 0.8.5) llvm18 (18.1.5 -> 18.1.6) lvm2 lvm2-device-mapper openssl-3 pangomm1_4 (2.46.3 -> 2.46.4) patterns-desktop permissions (1699_20240513 -> 1699_20240521) polkit-default-privs (1550+20240430.5327266 -> 1550+20240522.4ba9229) qqc2-desktop-style (5.116.0 -> 5.116.1) speech-dispatcher (0.12.0~rc2 -> 0.12.0~rc3) suse-module-tools (16.0.43 -> 16.0.44) udisks2 (2.10.0 -> 2.10.1) vlc xen (4.18.2_02 -> 4.18.2_04) zsh === Details === ==== curl ==== Subpackages: libcurl4 - Add split-provides for libcurl-devel -> libcurl-devel-doc. - Spin documentation off to libcurl-devel-doc, this saves buildroots 495 files and time (mandb is run in %posttrans). ==== fcitx5-gtk ==== Version update (5.1.1 -> 5.1.3) - update to 5.1.3 * Add <algorithm> for std::max * Also use SLIDE_Y for xdg_popup window ==== gcc13 ==== Version update (13.2.1+git8761 -> 13.3.0+git8781) Subpackages: cpp13 gcc13-locale libgccjit0-gcc13 libstdc++6-devel-gcc13 - Update to GCC 13.3 release ==== glibc ==== Subpackages: glibc-32bit glibc-devel glibc-extra glibc-lang glibc-locale glibc-locale-base nscd - glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch: nscd: Stack-based buffer overflow in netgroup cache (CVE-2024-33599, bsc#1223423, BZ #31677) - glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch: nscd: Avoid null pointer crashes after notfound response (CVE-2024-33600, bsc#1223424, BZ #31678) - glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch: nscd: Do not send missing not-found response in addgetnetgrentX (CVE-2024-33600, bsc#1223424, BZ #31678) - glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch: netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601, CVE-2024-33602, bsc#1223425, BZ #31680) - nscd-netgroup-cache-timeout.patch: Use time_t for return type of addgetnetgrentX (CVE-2024-33602, bsc#1223425) - glibc-fix-cve-2024-33599.patch: renamed - ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue for _start routine (bsc#1221940) - utmp-time-bits.patch: login: structs utmp, utmpx, lastlog _TIME_BITS independence (BZ #30701) - elf-parse-tunables.patch: elf: Only process multiple tunable once (BZ [#31686]) ==== kf6-qqc2-desktop-style ==== Subpackages: kf6-qqc2-desktop-style-lang - Update qqc2-desktop-style-lang obsoleted version ==== libarchive ==== - Fix bsdunzip test failing due to a locale issue * fix-bsdunzip-test.patch ==== libcap-ng ==== Version update (0.8.4 -> 0.8.5) - Update to version 0.8.5: * Remove python global exception handler since it's deprecated * Make the utilities link against just built libraries * Remove unused macro in cap-ng.h - Remove libcap-ng.rpmlintrc, it doesn't seem to be used any more. ==== llvm18 ==== Version update (18.1.5 -> 18.1.6) Subpackages: clang-tools clang18 libLLVM18 libclang-cpp18 libclang13 llvm18-gold - Update to version 18.1.6. * Fixes issues where LLVM is either generating the incorrect thunk for a function with aligned parameters or didn't correctly pass through the return value when StructRet was used. * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be used to enable unaligned scalar memory accesses for CPUs that do not support unaligned vector accesses. `-mno-strict-align` will enable unaligned scalar and vector memory accesses. * Don't replace an aliasee with an alias that has weak linkage. This avoids incorrect linkage that can lead to using the wrong symbols during linking time. * Fixes build failures when compiling AVX512 code using `-march=native` on machines without AVX512. The problem was introduced in LLVM 18.1.5. * Fixes crash in AArch64 backend when having `true` or `false` as operand for `fcmp` instruction on IR level. * Fixes compiler crash when user specifies `-mno-evex512` with AVX512 features but no AVX512VL. * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without AVX2. - Rebase llvm-do-not-install-static-libraries.patch. ==== lvm2 ==== Subpackages: liblvm2cmd2_03 - Use %patch -P N instead of deprecated %patchN syntax. ==== lvm2-device-mapper ==== Subpackages: device-mapper libdevmapper-event1_03 libdevmapper1_03 - Use %patch -P N instead of deprecated %patchN syntax. ==== openssl-3 ==== Subpackages: libopenssl3 libopenssl3-32bit libopenssl3-x86-64-v3 - Security fix: [bsc#1224388, CVE-2024-4603] * Check DSA parameters for excessive sizes before validating * Add openssl-CVE-2024-4603.patch ==== pangomm1_4 ==== Version update (2.46.3 -> 2.46.4) - Update to version 2.46.4: + Coverage: Don't use deprecated pango_coverage_ref/unref() + Documentation: - Doxyfile.in: Don't hide undocumented classes - Remove AUTHORS, HACKING, README.SUN; add general info to README.md. + Meson build: - Detect if we build from a git subtree - Don't copy files with configure_file() - Fix the evaluation of is_git_build on Windows - Don't fail if warning_level=everything - Enable check section: run meson test (no tests defined as of now). ==== patterns-desktop ==== Subpackages: patterns-desktop-books patterns-desktop-imaging patterns-desktop-mobile patterns-desktop-multimedia - No longer recommend tlp: we have three (conflicting) power tuners by now, each is recommended by some pattern/feature: + tuned is recommended by the base patterns (installed on all systems) + power-daemon-profiles is recommended by GNOME and Plasma (GUI controlled) + tlp recommended by laptop pattern (tlp conflicts explicitly with the other two though). ==== permissions ==== Version update (1699_20240513 -> 1699_20240521) Subpackages: permctl permissions-config - Update to version 1699_20240521: * permctl: return special exit code in --warn mode if entries need fixing ==== polkit-default-privs ==== Version update (1550+20240430.5327266 -> 1550+20240522.4ba9229) - Update to version 1550+20240522.4ba9229: * whitelist gnome-remote-desktop (bsc#1222159) ==== qqc2-desktop-style ==== Version update (5.116.0 -> 5.116.1) Subpackages: qqc2-desktop-style-lang - Update to 5.116.1 - Changes since 5.116.0: * Extract translations into qqc2desktopstyle_qt5.pot * Really fix the translation file ==== speech-dispatcher ==== Version update (0.12.0~rc2 -> 0.12.0~rc3) Subpackages: libspeechd2 python311-speechd speech-dispatcher-module-espeak - Update to version 0.12.0~rc3: * Detect module failures from generic module. * Make the fallback espeak-ng and dummy modules hardcoded. * Better detect generic module failures to disable them. * pulse: Use asynchronous API to avoid buffer underruns. * generic: Make stripping punctuation use locale charset. - Add speech-dispatcher-missing-return-vals.patch: add missing return statements. ==== suse-module-tools ==== Version update (16.0.43 -> 16.0.44) Subpackages: suse-module-tools-scriptlets - Update to version 16.0.44: * Include unblacklist in initramfs (bsc#1224320) * regenerate-initrd-posttrans: run update-bootloader --refresh for XEN (bsc#1223278) ==== udisks2 ==== Version update (2.10.0 -> 2.10.1) Subpackages: libudisks2-0 libudisks2-0_btrfs udisks2-bash-completion udisks2-lang udisks2-zsh-completion - update to version 2.10.1 - Update Ukrainian translation - tests: Wipe used devices for LVM2 RAID tests - tests: Settle down before checking the LVM RAID MissingPhysicalVolumes property - tests: Rescan vdevs after lvm raid tests - Update German translation - tests: Mark UDF fstab filesystem tests as unstable - tests: Add offline and online filesystem grow tests - doc: Clarify the Filesystem.Size property presence - udiskslinuxfilesystem: Force native tools for mounted XFS fs size retrieval - udiskslinuxfilesystem: Refactor internal whitelists - tests: Fix Python class invocation in nvme tests - udisksctl: Add "--no-partition-scan" option for "loop-setup" command - tests: Fix regex escaping - integration-test: Fix invalid escaping - tests: Mark LVM RAID tests as unstable - tests: Fix LSM drive objects crawl - iscsi: Fix login on firmware-discovered nodes - udiskslinuxmanager: Properly handle disabled modules - tests: Replace deprecated unittest assert calls - udisksctl: Guard object lookup - Update ka.po - udiskslinuxloop: Avoid warnings on empty loop devices - Update Polish translation - Limit getting filesystem size only to Ext and XFS - build: Check for gobject-introspection m4 macro presence - tests: start the polkitd mock with the corresponding user if it exists - Drop merged upstream patches: 0001-doc-Clarify-the-Filesystem.Size-property-presence.patch 0001-udiskslinuxfilesystem-Force-native-tools-for-mounted.patch 0001-udiskslinuxfilesystem-Refactor-internal-whitelists.patch 0001-tests-Mark-UDF-fstab-filesystem-tests-as-unstable.patch 0001-tests-Add-offline-and-online-filesystem-grow-tests.patch ==== vlc ==== Subpackages: libvlc5 libvlccore9 vlc-codec-gstreamer vlc-lang vlc-noX vlc-qt vlc-vdpau - Add 770789f2.patch: Fix missing cast in chromaprint (boo#1223909). ==== xen ==== Version update (4.18.2_02 -> 4.18.2_04) Subpackages: xen-libs xen-tools xen-tools-domU - bsc#1221984 - VUL-0: CVE-2023-46842: xen: x86 HVM hypercalls may trigger Xen bug check (XSA-454) 6617d62c-x86-hvm-Misra-Rule-19-1-regression.patch - Upstream bug fixes (bsc#1027519) 6627a4ee-vRTC-UIP-set-for-longer-than-expected.patch 6627a5fc-x86-MTRR-inverted-WC-check.patch 662a6a4c-x86-spec-reporting-of-BHB-clearing.patch 662a6a8d-x86-spec-adjust-logic-to-elide-LFENCE.patch 663090fd-x86-gen-cpuid-syntax.patch 663a383c-libxs-open-xenbus-fds-as-O_CLOEXEC.patch 663a4f3e-x86-cpu-policy-migration-IceLake-to-CascadeLake.patch 663d05b5-x86-ucode-distinguish-up-to-date.patch 663eaa27-libxl-XenStore-error-handling-in-device-creation.patch ==== zsh ==== - Use %patch -P N instead of deprecated %patchN.

1 0

New Tumbleweed snapshot 20240522 released!
by Dominique Leuenberger 23 May '24

23 May '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: clazy (1.11git.20240311T110110~ebf99de -> 1.11git.20240520T014559~87b83e3) firewalld (2.1.1 -> 2.1.2) geoclue2 gtk3 (3.24.41 -> 3.24.42) icewm (3.4.5 -> 3.5.0) kernel-firmware (20240510 -> 20240519) kio-extras libslirp (4.7.0+60 -> 4.8.0+2) msgraph (0.2.1 -> 0.2.2) neon (0.32.5 -> 0.33.0) openSUSE-release (20240521 -> 20240522) python-pygit2 snapper (0.10.7 -> 0.11.0) tlp === Details === ==== clazy ==== Version update (1.11git.20240311T110110~ebf99de -> 1.11git.20240520T014559~87b83e3) - Update to version 1.11git.20240520T014559~87b83e3: * no-module-include: Fix test with Qt6, ignore internal include of QtQmlBuiltinsDepends file * lambda-in-connect test: remove unused and confusing member variable * Fix false positive from lambda-in-connect when the receiver is on the stack ==== firewalld ==== Version update (2.1.1 -> 2.1.2) Subpackages: firewalld-bash-completion firewalld-lang firewalld-zsh-completion python3-firewall - update to 2.1.2: * fix(policy): allow forward ports w/ to-addr for egress- zone=HOST * fix(rich): fix range check for large rule limit * fix(tests): fix skip detection in fw-in-container environment ==== geoclue2 ==== Subpackages: system-user-srvGeoClue typelib-1_0-Geoclue-2_0 - Add /etc/geoclue/conf.d as used by tools like gnome-initial-setup ==== gtk3 ==== Version update (3.24.41 -> 3.24.42) Subpackages: gtk3-data gtk3-immodule-amharic gtk3-immodule-inuktitut gtk3-immodule-thai gtk3-immodule-tigrigna gtk3-immodule-vietnamese gtk3-immodule-xim gtk3-lang gtk3-schema gtk3-tools libgtk-3-0 typelib-1_0-Gtk-3_0 - Update to version 3.24.42: + GtkFileChooser: - Avoid warnings about floating refs. - Improve performance of recursive search. - Populate search model in an idle. + GtkGLArea: Fix a regression in transparency handling. + Printing: Avoid accessing freed printers. + Accessibility: Drop support for the deprecated atk_focus_tracker. + Wayland: - Fix monitor sizes. - Fix a crash related to tablet removal. - Infer resizable edges for tiled windows. - Always commit soon after acking a configure. + gdk: - Use css cursor names as far as possible. - Sync DND cursor use with GTK4. + build: Allow building against sysprof-capture-4. + Updated translations. ==== icewm ==== Version update (3.4.5 -> 3.5.0) Subpackages: icewm-config-upstream icewm-default icewm-lang icewm-lite - Update to 3.5.0: * New -i,--install option installs an icewm-extra theme. * Add file argument completion to the address bar. * Add "cd" and "pwd" commands to the address bar. * Improve tilde expansion on user login names. * Document the 22 address bar editing keys. * When lowering a frame by KeyWinLower, also lower it in the focus order. * Keyboard layout icon names can now be longer than 2 letters. * Don't use XSendEvent for internal WM actions, but use XPutBack. * When focusing a client, clear urgency and stop flashing. * When the frame drops urgency, also update the client. * Let "icesh restore" also clear the urgency flag. * Several small documentation improvements. ==== kernel-firmware ==== Version update (20240510 -> 20240519) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-ath12k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update to version 20240519 (git commit aae8224390e2): * amdgpu: add new ISP 4.1.1 firmware ==== kio-extras ==== Subpackages: kio-extras-lang libkioarchive6-6 - Make kcm_trash conflict with kio < 5.116 only (boo#1221438) ==== libslirp ==== Version update (4.7.0+60 -> 4.8.0+2) - Update to version 4.8.0+2: * Fix actually linking the library * Use simpler test linker script for detectiong --version-script option * Release v4.8.0 * Explicit that -Dstatic=True is not meant for distributing a static library * icmp6: Add echo request forwarding support * fuzz: Fix icmp6 matching and checksum computation * fuzz: Drop debugging * fuzz: Drop debugging * fuzz: Add ARP and NDP cases * fuzz: Add IPv6 cases * mbuf: Do not reallocate when the requested size already fits exactly * mbuf: Fix copying headers * oss-fuzz: Fix udp-h and tcp-h corpuses * fuzz: comment coherency * fuzz: Simplify TCP checksum code * Note changes that can probably be security issues * Add changelog for next release * eth: pad ethernet frames to 60 bytes * udp: Make cleanup loop clearer * fuzz: Fix tftp fuzz actually receiving a file * tftp: cleanup sessions remaining at slirp shutdown * tftp: Fix use-after-free * Add fuzzing CI * fuzz: Add ip filtering * tcp: hack syn/ack * fuzzing: Increase coverage * First attempt at fuzzing with libFuzzer based on @elmarco work * Start some fuzzing test * tcp: Fix testing for last fragment * icmp: Fix msg duplication for debugging * tcp: Fix allocating room * mbuf: Be extra careful with freed pointer * mbuf: remove '#define if*' member accessors * m_cleanup_list: Fix missing cleanup packets from the same session * tcp-input: inline TCP_REASS * ip: remove second argument from ip_stripoptions() * Document endianness of slirp_add_hostfwd parameters ==== msgraph ==== Version update (0.2.1 -> 0.2.2) - Update to version 0.2.2: + Add remote copy and move functions. + Drop Authorization header during download. + Fix browsing shared files. - Drop pkgconfig(rest-0.1) BuildRequires: no longer needed. - Add pkgconfig(libxml-2.0) BuildRequires: new dependency for the test suite. - Enable test suite: run meson_test in check section. - Remove 'drive' test from test suite: this specific test wants to verify the library against Microsofts servers. As we build without network connectivity, this test cannot pass for us. ==== neon ==== Version update (0.32.5 -> 0.33.0) - update to 0.33.0: * Interface clarifications * added DAV:lockroot support per RFC 4918 * Improved handling of interim (1xx) responses, headers in interim responses are now accessible * TLS name verification updated to match RFC 9110/6125, added strict handling of IP literals vs DNS names * bug fixes - drop fix_timeout_tests_for_ppc64le.patch - replace replace_manpage_with_links.sh with fdupes ==== openSUSE-release ==== Version update (20240521 -> 20240522) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== python-pygit2 ==== - add pygit2-Upgrade_to_libgit2_v1_8_1-2.patch pygit2-Upgrade_to_libgit2_v1_8_1.patch: support libgit2 1.8.1 ==== snapper ==== Version update (0.10.7 -> 0.11.0) Subpackages: libsnapper7 snapper-zypp-plugin - async cleanup of stale btrfs qgroups (bsc#1222847) - version 0.11.0 - reverted some parts of PR#884 to fix build in obs - run cleanup service every hour (gh#openSUSE/snapper#885) - disable qgroup if it does not exist to avoid failure creating snapshots with kernel 6.8.4 (gh#openSUSE/snapper#894) - avoid excessive logging (gh#openSUSE/snapper#892) - improved log message (see gh#openSUSE/snapper#866) - improved error message (gh#openSUSE/snapper#864) Sat 9 Mar 09:44:17 GMT 2024 - infinity0(a)pwned.gg - add support for quarterly snapshots - select table style based on codeset - added experimental bcachefs support (gh#openSUSE/snapper#858) - lock config during list and cleanup commands and in zypper plugin (gh#openSUSE/snapper#867) - increase min age for cleanup to 3600 seconds - drop permissions check in GetPluginsReport and ClearPluginsReport (gh#openSUSE/snapper#856) ==== tlp ==== Subpackages: tlp-rdw - Conflicts with tuned (bsc#1224202) - Spec cleanups - Fix systemd_sleepdir: It must be %{_systemd_util_dir}/system-sleep and not %{_unitdir}/system-sleep (/usr/lib/systemd/system-sleep instead of /usr/lib/systemd/system/system-sleep).

1 0

openSUSE Release Engineering meeting 22.05.2024
by Lubos Kocman 22 May '24

22 May '24

How to join the meeting? https://calendar.opensuse.org/teams/release/events/opensuse-release-enginee… All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting ## Attendees Sarah, lkocman, guillaumeg, rbrown, DimStar, AdrianS, bmwiedemann, ddemaio, ana ## Leap (vacation on Thursday) Security audit will most likely not be done https://bugzilla.suse.com/show_bug.cgi?id=1224165 due to team capacity issues / availability. (same will have to be done for Micro once we have Beta) openSUSE 15.6 GMC code submission deadline was last week. As of yesterday SLES 15 SP6 does not plan to take additional changes. GO/NOGO is today at 15:30. I am invited to the meeting. The build containing all changes after the snapshot removal is still in progress. So the only snapshot we have at the moment is for maintenance updates from previous SPs. Update on known issues https://en.opensuse.org/openSUSE:Known_bugs_15.6 https://bugzilla.opensuse.org/show_bug.cgi?id=1219505 (is in fact two issues) the switching was fixed by Alynx Zhou, by implementing text-input-v1 for mutter https://bugzilla.opensuse.org/show_bug.cgi?id=1219718 (NVIDIA only) # We expect to have a fix https://bugzilla.opensuse.org/show_bug.cgi?id=1219718#c6 - update on issue Leap Micro 6.0 I've backported all changes from SLEM 6.0 till yesterday. We have -RT flavors back etc. I'm blocking Beta on openQA availability https://github.com/os-autoinst/opensuse-jobgroups/pull/447 (merged) https://github.com/os-autoinst/openqa-trigger-from-obs/pull/246 in progress With openQA we can transition to RC -> GM within two weeks. // I'll be attending Fedora 40 release party in Prague, CZ on Friday 18:30 in case somebody from factory@ wants to meet in person Fedora party was great, interesting talk about what's new in GNOME and planned changes for F41. https://gitlab.gnome.org/chergert/ptyxis was an interesting finding Leap 16 I'd like to have MVP of self-install image, + Agama 8 base-system installation for osc2024. After short discussion with Adrian we'll try to do product builds based on the git workflow Update: Adrian configured https://build.opensuse.org/project/show/openSUSE:Leap:16.0:Images is setup to use https://src.opensuse.org/openSUSE/Leap as scm. The goal is to use it for building product images. osc2024 Playing with some ideas for osc2024 talk and related branding workshop 3d printable chameleon (needs some polishing to make it look more like actual Geeko) https://github.com/lkocman/geeko-brickz/blob/main/README.md ## openSUSE Tumbleweed (ana) openSUSE:Factory build fail stats: 45 failed 3 unresolvable (last week 57 failed, 9 unresolvable) https://tinyurl.com/ysy4nnnz 383 requests accepted in the last week Most relevant updates: Linux Kernel 6.9.1 Linux Kernel Longterm 6.6.31 ninja 1.12.0 bind 9.18.27 KDE Frameworks 5.116 kdump 2.0.5 postfix 3.9.0 systemd 255.6 Mozilla Firefox 126.0 Mozilla Thunderbird 115.11.0 Soon: GTK3 3.24.42 Blocked: * pytest 8.2.0 (first of 8.x.x series), a bunch of python packages require fixes in their tests. * rubygem-rspec, waiting for update of the remaining -rspec packages * icu 75.1 (Waiting libreoffice boo#1224309, new failure libqt5-qtwebengine) ### longer-lasting topics * GCC 14: second phase ongoing, use gcc14 as the default compiler (Staging:Gcc7) Advancing slowly * RPM 4.20 https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… (64 spec files left with this issue in Factory) * go1.22 as default go version, blocked on i586 with packages which export CGO_ENABLED=0 and go build -buildmode pie https://github.com/golang/go/issues/64875 (needs to update ~70 packages) traking at https://bugzilla.opensuse.org/show_bug.cgi?id=1221095 * dbus-broker as default dbus session manager, now everything builds, some openQA checks failing. * nfs-utils - https://bugzilla.opensuse.org/show_bug.cgi?id=1218158 * btrfsmaintenance - https://bugzilla.opensuse.org/show_bug.cgi?id=1224364 ## Richard (Aeon+botmaster) Tons of progress again Aeon Release Candidate 2 Candidate (RC2C? RC²? or is that RC²2) is built and published through the Factory process, with the Aeon community doing an AWESOME job finding mildly annoying errors that we'll want to clean up before declaring the images RC2 - The occational strange boot issue with the installer media - fixed either by removing the ,ro mount option as the kernel can be racy if ro is set both as a btrfs property and as a mount option, and possibly by kernel 6.9 - Minor issues with migration, all seem relatively trivial to address - Need to correct locale installation during aeon-firstboot - reports of dconf settings not being persistant but no logs/supporting evidence to help identify where the problem comes from yet MicroOS Desktop/Aeon install support was removed from Agama - tik will be the only way of installing Aeon (MicroOS Desktop/Aeon install support will be removed from YaST once Aeon reaches RC2) aeon-firstboot has a PR under review that will support increased customisation of initial flatpaks and will hopefully be multi-threaded to speed up that step tik has a PR under review that will support migration from crypted partitions. Biggest concern is how that will interact with FDE+TPM or FDE+FIDO2 auth, which are the two primary methods under investigation for Aeon. After the above hoping to find a sliver of time to investigate FDE and possibly slipping support for it in before RC2 And after all that is done I want to build multi-distro tik demonstration media to show how it could also be used for installing - MicroOS - SLE Micro and maybe any other distro.. (Fedora? Silverblue? Who'd be most fun to troll?) lkocman: There is a modded version silverblue aka a new distro not sure what the name is ... Only botmaster news is that it's still working :) ## Max Leap 15.6 - build stats in Backports: 7 failed(was 11) * Published Build701.1 * Switched SUSE:SLE-15-SP6:GA build-repo to pool from toberemoved snapshot * Did wipebinaries for build-fail/build-unresolvable package * Pretty quiet in Leap 15.6 staging and Backports:SLE-15-SP6 staging, we're almost there ## Guillaume - Arm * Tumbleweed: - Rolling - WIP: Continue to fix packages built without PAC/BTI - rpmlint: https://rpmlint.opensuse.org/ * we noticed that rpmlint does not check anymore for packages built without distro %{optflags}. We should add it back. https://bugzilla.opensuse.org/show_bug.cgi?id=1217840 Doug: rpmlint GSOC topic. Neal will be helping to mentor that. https://github.com/openSUSE/mentoring/issues/204 * Leap 15.6/Backports SP6: - no issue ## Sarah - s390x * Tumbleweed: - grub2 was not building during the weekend because the protect package was required for s390x (wrong architecture dependency set for only riscv) * bi-weekly Z architecture related trainings instead of openSUSE zSystems meetings (invitations distributed via opensuse-zsystems and opensuse-factory): Next week planned about different disks (dasd and zFCP) and qeth for networks, the same as "how to use s390-tools) lkocman: I wonder if the SUSE certified instructor (for universities) would make sense for you Sarah. I can send you link or simply message universities(a)suse.com. * orga of the openSUSE/SUSE zSystems BBQ party (before Ihno wants to retire) -> Ihno will join openSUSE zSystems (switch from SUSE to openSUSE) lkocman: I'd be happy to join if its around osc2024 skriesch: Planned time 29th June 2024 after the oSC: https://lists.opensuse.org/archives/list/zsystems@lists.opensuse.org/thread… ## Doug * Leap 15.6 article * Community translations in CA/ ES / JA / * https://en.opensuse.org/Release_announcement_15.6 *Contribution Workshops likely to resume episodes during week of May 20 * Waiting on uploads of some videos * GSoC * Provided some documentation for Mentees * Coding begins May 28 * Mid-term evaluation July 8 - 12 * https://huggingface.co/openSUSE started (thx kraih) * open-source AI models, tools, and resources for developers * drafting article * Will need to figure if any budget might be necessary * Article for Aeon RC2 in draft - https://etherpad.opensuse.org/p/aeonrc2 * Community Summit * 32 Registrations * Schedule published * Received name tags * openSUSE Conference * 149 Registrations * Will publish article about oSC24 - https://etherpad.opensuse.org/p/osc24s * Schedule - https://events.opensuse.org/conferences/oSC24/schedule * Received name tags Static * oSC24 dates June 27 to 29 reserved (Thursday - Saturday) * Open 4 Business June 26 between 2 - 6 p.m. at Franken Campus * AI topics (static) * https://huggingface.co/openSUSE ## Dirk Not available zypper/libzypp size reduction landed (~ 5-8MB less code), please CC me on issues ## Wolfgang (Package Hub), Scott Bahling Not available ## Maintenance team (Marcus, Robert) Not available We need to publish at least empty repodata to https://download.opensuse.org/update/leap-micro/6.0/sle/ Otherwise I keep temporarily repo as disabled https://build.opensuse.org/projects/openSUSE:Leap:Micro:6.0/packages/openSU… Chromium regression, update revoked ## Adrian - OBS No update ## Bernhard - Slowroll got new default wallpaper https://www.zq1.de/~bernhard/images/share/slowroll/1920x1080-SR2.png http://stage3.opensuse.org:17080/munin/opensuse.org/stage3.opensuse.org/slo… progressing nicely - might declare Slowroll as Beta/RC/ready on openSUSE conference next version bumps planned with monthly cadence around 2024-06-09, 2024-07-09, 2024-08-09 DVD done ; NET iso should work after next version-bump openQA-test-fix WIP ## Bernhard - reproducible builds no news ## Open Floor Sarah - we will receive a z16 system shared with other Linux distros in the community cloud. lkocman: worth writing a news-o-o post. lkocman SLFO (SUSE Linux Framework One was ALP) - Submissions are welcome (IBS only). Related to future work on https://build.opensuse.org/project/show/openSUSE:Leap:16.0 Lubos needs to open request for SR mirroring. Marco Strigl confirmed that current tooling for sr mirroring will not be sufficient.

1 0

New Tumbleweed snapshot 20240521 released!
by Dominique Leuenberger 22 May '24

22 May '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MozillaFirefox (125.0.3 -> 126.0) file-roller (44.2 -> 44.3) fwupd (1.9.19 -> 1.9.20) grub2 kirigami-addons6 (1.2.0 -> 1.2.1) ktextaddons (1.5.3 -> 1.5.4) libgit2 (1.8.0 -> 1.8.1) libostree (2024.5 -> 2024.6) openSUSE-release (20240520 -> 20240521) postfix python-attrs ruby3.3 salt webkit2gtk3 (2.44.1 -> 2.44.2) xdg-desktop-portal (1.18.2 -> 1.18.4) xfsprogs (6.7.0 -> 6.8.0) yast2-trans (84.87.20240511.9a3bd96575 -> 84.87.20240518.c88399d6be) === Details === ==== MozillaFirefox ==== Version update (125.0.3 -> 126.0) Subpackages: MozillaFirefox-translations-common - Mozilla Firefox 126.0 https://www.mozilla.org/en-US/firefox/126.0/releasenotes MFSA 2024-21 (bsc#1224056) * CVE-2024-4764 (bmo#1879093) Use-after-free when audio input connected with multiple consumers * CVE-2024-4367 (bmo#1893645) Arbitrary JavaScript execution in PDF.js * CVE-2024-4765 (bmo#1871109) Web application manifests could have been overwritten via hash collision * CVE-2024-4766 (bmo#1871214, bmo#1871217) Fullscreen notification could have been obscured on Firefox for Android * CVE-2024-4767 (bmo#1878577) IndexedDB files retained in private browsing mode * CVE-2024-4768 (bmo#1886082) Potential permissions request bypass via clickjacking * CVE-2024-4769 (bmo#1886108) Cross-origin responses could be distinguished between script and non-script content-types * CVE-2024-4770 (bmo#1893270) Use-after-free could occur when printing to PDF * CVE-2024-4771 (bmo#1893891) Failed allocation could lead to use-after-free * CVE-2024-4772 (bmo#1870579) Use of insecure rand() function to generate nonce * CVE-2024-4773 (bmo#1875248) URL bar could be cleared after network error * CVE-2024-4774 (bmo#1886598) Undefined behavior in ShmemCharMapHashEntry() * CVE-2024-4775 (bmo#1887332) Invalid memory access in the built-in profiler * CVE-2024-4776 (bmo#1887343) Window may remain disabled after file dialog is shown in full-screen * CVE-2024-4777 (bmo#1878199, bmo#1893340) Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11 * CVE-2024-4778 (bmo#1838834, bmo#1889291, bmo#1889595, bmo#1890204, bmo#1891545) Memory safety bugs fixed in Firefox 126 - requires NSS 3.100 - removed obsolete mozilla-libproxy-fix.patch ==== file-roller ==== Version update (44.2 -> 44.3) Subpackages: file-roller-lang - Update to version 44.3: + Fixed filename not changed when creating a new archive. + 7z: error when creating archives with volumes. ==== fwupd ==== Version update (1.9.19 -> 1.9.20) Subpackages: fwupd-bash-completion fwupd-lang libfwupd2 typelib-1_0-Fwupd-2_0 - Update to version 1.9.20: + This release adds the following features: - Add some API to allow uploading reports for use in gnome-firmware - Allow the user to upload the entire devicelist to the LVFS + This release fixes the following bugs: - Correctly detect Synaptics Cayenne and Spyder firmware - Do not offer the UEFI DBX update on Lenovo ideacentre 300-20ISH - Explicitly enable shadow stack support in fwupd.service - Fix a potential buffer overread when reading the algoltek-usb version number - Fix the CET HSI test by rewriting it in assembly - Fix using --verbose in fwupdmgr - Ignore --p2p when downloading the metadata signature + This release adds support for the following hardware: - FPC FF2 fingerprint devices ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - Only enable grub-protect for EFI systems * 0001-util-enable-grub-protect-only-for-EFI-systems.patch ==== kirigami-addons6 ==== Version update (1.2.0 -> 1.2.1) Subpackages: kirigami-addons6-lang - Update to 1.2.1 * Fix regression with double accept * Update maintainer name * Define minimum requirement on framework ==== ktextaddons ==== Version update (1.5.3 -> 1.5.4) Subpackages: ktextaddons-lang libKF6TextAddons1 - Update to 1.5.4. No changelog ==== libgit2 ==== Version update (1.8.0 -> 1.8.1) - update to 1.8.1: * In v1.8, libgit2 introduced the `report_unchanged ` member in the `git_fetch_options` structure. We mistakenly introduced this as a bitfield, which is not suitable for our public API. To correct this mistake, we have _removed_ the `report_unchanged ` member. To support the report unchanged tips option, users can set the `update_fetchhead` member to include the `GIT_REMOTE_UPDATE_REPORT_UNCHANGED` value. * The libgit2 projects regrets the API change, but this was required to support cross-platform compatibility. * commit: Fix git_commit_create_from_stage without author and * committer * process.c: fix environ * Bounds check for pack index read * transport: provide a useful error message during cancellation * transport: support sha256 oids * Revparse: Correctly accept ref with '@' at the end * remote: drop bitfields in git_remote_fetch_options * examples: fix memory leak in for-each-ref.c * xdiff: use proper free function * rand: avoid uninitialized loadavg warnings * cli: include alloca on illumos / solaris / sunos * Update git_array allocator to obey strict aliasing rules * tree: avoid mixed signedness comparison by @ethomson in ==== libostree ==== Version update (2024.5 -> 2024.6) Subpackages: libostree-1-1 - update to 2024.6: + prepare-root: Handle non-AB aboot properly + various bug fixes and developer visible fixes + ostree-prepare-root.service: add OnFailureJobMode=isolate + ostree-sysroot-deploy: check if deployments are in the same stateroot ==== openSUSE-release ==== Version update (20240520 -> 20240521) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== postfix ==== - Update update_chroot.systemd * Add missing checks for DKIM (openDKIM) - keep spec and changes files in sync ==== python-attrs ==== - Add patch pytest8.patch to adapt the tests to the new pytest ==== ruby3.3 ==== Subpackages: libruby3_3-3_3 - Backport for fix segfault caused by stack pointers not saved/restored properly when yielding execution from Ruby to C. https://bugs.ruby-lang.org/issues/20493 https://github.com/ruby/ruby/pull/10798 Adds fix-gvl-save-restore.patch - fix typo in the macros file. this only affected people building without the OBS as this macro was shadowed by the macro that is in the prjconf ==== salt ==== Subpackages: python3-salt salt-master salt-minion salt-transactional-update - Mark python3-CherryPy as recommended package for the testsuite - Make "man" a recommended package instead of required ==== webkit2gtk3 ==== Version update (2.44.1 -> 2.44.2) Subpackages: WebKitGTK-4.1-lang libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles - Update to version 2.44.2: + Make gamepads visible on axis movements, and not only on button presses. + Disable the gst-libav AAC decoder. + Make user scripts and style sheets visible in the Web Inspector. + Use the geolocation portal where available, with the existing geoclue as fallback if the portal is not usable. + Use the printing portal when running sandboxed. + Use the file transfer portal for drag and drop when running sandboxed. + Avoid notifying an empty cursor rectangle to input methods. + Remove empty bar shown in detached inspector windows. + Consider keycode when activating application accelerators. + Fix the build with ENABLE_WEBAUDIO disabled. + Fix several crashes and rendering issues. - Update keyring (taken from rawhide). ==== xdg-desktop-portal ==== Version update (1.18.2 -> 1.18.4) Subpackages: xdg-desktop-portal-lang - update to 1.18.4: + Don't allow commandline arrays when the first commandline item starts with whitespace or hyphen. (CVE-2024-32462, boo#1223110) + Do not store device access permission if it returned an error + Fix crash with config files without a default backend set - includes changes from 1.18.3: + Don't try to read D-Bus object properties of Request objects on construction + Fix various memory and file descriptor leaks. + Minuscule optimization to the ScreenCast portal so that it stores restoration data with a single D-Bus call, instead of two. + Fix a crash in the OpenURI file when trying to open a non- existing file + Fix a bug in PipeWire that prevented cameras from being reported reliably. + Various smaller bug fixes. ==== xfsprogs ==== Version update (6.7.0 -> 6.8.0) Subpackages: libhandle1 - update to 6.8.0 - xfs_repair: Dump both inode details in Phase 6 duplicate file check - libxfs: print the device name if flush-on-close fails - xfs_db: fix leak in flist_find_ftyp() - xfs_repair: support more than INT_MAX block maps - xfs_repair: constrain attr fork extent count - xfs_repair: support more than 2^32 owners per physical block - xfs_repair: support more than 2^32 rmapbt records per AG - xfs_db: add a bmbt inflation command - xfs_scrub: scan whole-fs metadata files in parallel - mkfs: allow sizing internal logs for concurrency - mkfs: allow sizing allocation groups for concurrency - mkfs: use a sensible log sector size default - xfs_io: add linux madvise advice codes - xfs_scrub: fix threadcount estimates for phase 6 - xfs_db: improve number extraction in getbitval - xfs_repair: adjust btree bulkloading slack computations to match online repair - xfs: make rextslog computation consistent with mkfs - mkfs: fix log sunit rounding when external logs are in use - libxfs: kernel sync ==== yast2-trans ==== Version update (84.87.20240511.9a3bd96575 -> 84.87.20240518.c88399d6be) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20240518.c88399d6be: * Translated using Weblate (Slovenian) * Translated using Weblate (Slovenian) * Translated using Weblate (Slovenian) * Translated using Weblate (Slovenian) * Translated using Weblate (Slovenian) * Translated using Weblate (Slovenian) * Translated using Weblate (Lithuanian) * Translated using Weblate (Slovenian) * Translated using Weblate (Lithuanian) * Translated using Weblate (Lithuanian) * Translated using Weblate (Lithuanian) * Translated using Weblate (Lithuanian) * Translated using Weblate (Lithuanian) * Translated using Weblate (Lithuanian) * Translated using Weblate (Lithuanian) * Translated using Weblate (Lithuanian) * Translated using Weblate (Lithuanian) * Translated using Weblate (Lithuanian) * Translated using Weblate (Lithuanian) * Translated using Weblate (Slovenian) * New POT for text domain 'control'. * Translated using Weblate (Romanian) * Translated using Weblate (Slovenian) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian)

1 0

recent wicked change related to STARTMODE?
by Patrick Schaaf 22 May '24

22 May '24

Hi, (also submitted as https://bugzilla.opensuse.org/show_bug.cgi?id=1224860) I'm running a number (few hundreds) of servers for a few (6 or so) years on tumbleweed, with the network setup using * wicked * generated ifcfg files (own generator) * vlan interfaces on top of a vlan enabled bridge on top of bond (lacp) on top of eth With the recent wicked update (0.6.74 -> 0.6.75) tested today, network did not come up as it used to. No errors were seen in logs or systemd services, just the interfaces all were not configured. The change in behaviour apparently relates to recursive determination of what to bring up. I'm used to (and thought at some point in the past had to) have STARTMODE configured like this: penn:~ # egrep -H ^STARTMODE /etc/sysconfig/network/ifcfg-* /etc/sysconfig/network/ifcfg-eth0:STARTMODE=manual /etc/sysconfig/network/ifcfg-eth1:STARTMODE=manual /etc/sysconfig/network/ifcfg-lacp:STARTMODE=manual /etc/sysconfig/network/ifcfg-lo:STARTMODE=nfsroot /etc/sysconfig/network/ifcfg-v0001:STARTMODE=auto /etc/sysconfig/network/ifcfg-v0178:STARTMODE=auto /etc/sysconfig/network/ifcfg-v2080:STARTMODE=auto /etc/sysconfig/network/ifcfg-vbr:STARTMODE=manual That relies on v0001 and so on vlan interfaces (auto) triggering up-ping of vbr, that referencing lacp, that referencing eth0+eth1. With the wicked update, that no longer worked. Setting STARTMODE=auto for all of the ifcfg files, again makes it work fine. Not sure this is a bug, or intended behaviour change. Thought it's better to report + maybe save someone from running into the same. best regards Patrick

1 0