May 2024 - openSUSE Factory - openSUSE Mailing Lists

Slowroll updates
by Bernhard M. Wiedemann 11 May '24

11 May '24

Hi fellow Geekos, I got multiple good news on the progress of Slowroll: 1. We now got a proper install DVD, linked at https://en.opensuse.org/openSUSE:Slowroll It might still be a good idea to do zypper install openSUSE-repos-Slowroll to get the changed prio for the update repo. 2. Cloud/VM images also got a fix for repos: https://download.opensuse.org/update/slowroll/images/ 3. We now have 18 kernel-module-packages (KMPs) for kernel-longterm: https://www.reddit.com/r/openSUSE_Slowroll/comments/1cpj00b/kmps_for_kernel… 4. We got some branding included. Thanks go to pprmint for creating the logo [1] and to lcp for adding SVGs into distribution-logos. Those are now in wallpaper-branding-openSUSE, neofetch [2] and fastfetch [3]. Ciao Bernhard M. [1] https://en.opensuse.org/File:Slowroll_logo_by_pprmint.svg [2] https://github.com/bmwiedemann/neofetch/commit/ae66731fd [3] https://github.com/fastfetch-cli/fastfetch/pull/913

2 2

New Tumbleweed snapshot 20240510 released!
by Dominique Leuenberger 11 May '24

11 May '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: gcc14 (14.0.1+git10154 -> 14.1.0+git10173) ncurses openSUSE-release (20240509 -> 20240510) util-linux (2.39.3 -> 2.40.1) util-linux-systemd (1.3.1 -> 2.40.1) === Details === ==== gcc14 ==== Version update (14.0.1+git10154 -> 14.1.0+git10173) Subpackages: libasan8 libatomic1 libgcc_s1 libgcc_s1-32bit libgfortran5 libgomp1 libhwasan0 libitm1 liblsan0 libobjc4 libquadmath0 libstdc++6 libstdc++6-32bit libstdc++6-locale libstdc++6-pp libstdc++6-pp-32bit libtsan2 libubsan1 - Update to GCC 14.1 release. ==== ncurses ==== Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Make verify the patches an optional task for local builds only - Add ncurses patch 20240504 + update ncurses/wcwidth.c, for MinGW ports, from xterm. + trim obsolete comment about tack from INSTALL. - Verify also every patch ==== openSUSE-release ==== Version update (20240509 -> 20240510) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== util-linux ==== Version update (2.39.3 -> 2.40.1) Subpackages: libblkid1 libfdisk1 libmount1 libsmartcols1 libuuid1 util-linux-lang - Update to version 2.40.1 * agetty: don't overwrite TERM passed by the user * fsck.minix: fix possible overrun * libblkid: fix segfault when blkid.conf doesn't exist * libfdisk: add initializer to geometry * libmount: fix access check for utab in context * libmount: fix umount --read-only * lsns: fix netns use - Drop skip-lsfd-tests-PR2888.patch, was a backport - Don't delete binaries not common for all architectures. Create an util-linux-extra subpackage instead, so users of third party tools can use them. (bsc#1222285) - Added static_lib.patch to resolve build failure when using libblkid.pc in --static mode - Add new lastlog2 sub-package (to solve migration problems due to rpm %post/%postun ordering) * Add pam-config calls to enable pam_lastlog2 * Add lastlog2.conf systemd-tmpfile to create database directory - Skip tests marked as ts_skip_qemu_user when running under qemu - Mark racy lslocks test as known fail - Re-enable lsfd tests using mkfds, as it is fixed now. - liblastlog2-devel: * Obsolete/provide lastlog2-devel for migration * Add header file to filelist - Update to release 2.40 * Add lastlog2 * agetty: Load autologin user from agetty.autologin credential * agetty: use get_terminal_default_type() * agetty: use sd_get_sessions() for number of users (#2088) * blockdev: add support for BLKGETZONESZ * cfdisk: ask y/n before wipe * cfdisk: properly handle out-of-order partitions during resize * chcpu: document limitations of -g * chsh: use libeconf to read /etc/shells * column: fix -l * column: fix memory leak * dmesg: fix FD leak * dmesg: fix delta calculation * dmesg: fix wrong size calculation * dmesg: support reading kmsg format from file * enosys: a new small command to make syscalls fail with ENOSYS * exch: new command to atomically exchanges paths between two files * fdisk: add support for partition resizing * fdisk: remove usage of VLA * fincore: add --output-all * findmnt: add --list-columns * findmnt: add -I, --dfi options for imitating the output of df -i * findmnt: add inode-related columns for implementing "df -i" like output * hexdump: add '--one-byte-hex' format option * hwclock: add support for RTC_VL_READ/RTC_VL_CLR ioctls * login: initialize noauth from login.noauth credential * lsblk: add --filter * lsblk: add --highlight * lsblk: add --list-columns * lsclocks: new command to show clocks * lscpu: even more Arm part numbers * mkfs.minix: handle 64bit time on 32bit system * mkswap: implement --file * mkswap: implement --offset * mount: add --map-users and --map-groups convenience options * nsenter: add option `-c` to join the cgroup of target process * setarch: add riscv64/riscv32 support * setpgid: new command to run a program in a new process group * uuidd: add cont_clock persistence * uuidgen: add option --count * wall: query logind for list of users with tty (#2088) * write: query logind for list of users with tty (#2088) * libuuid: improved support for 64-bit time - skip-lsfd-tests-PR2888.patch: skip some lsfd tests which OBS does not support (https://github.com/util-linux/util-linux/issues/2822) - use-logind-not-utmp.patch: removed, accepted upstream - tests-increase-delay-for-waitpid-test.patch: removed, upstreamed - 0001-Revert-libblkid-try-LUKS2-first-when-probing.patch: reverted upstream - util-linux-fix-tests-with-64k-pagesize.patch: was a backport ==== util-linux-systemd ==== Version update (1.3.1 -> 2.40.1) Subpackages: lastlog2 - Update to version 2.40.1 * agetty: don't overwrite TERM passed by the user * fsck.minix: fix possible overrun * libblkid: fix segfault when blkid.conf doesn't exist * libfdisk: add initializer to geometry * libmount: fix access check for utab in context * libmount: fix umount --read-only * lsns: fix netns use - Drop skip-lsfd-tests-PR2888.patch, was a backport - Don't delete binaries not common for all architectures. Create an util-linux-extra subpackage instead, so users of third party tools can use them. (bsc#1222285) - Added static_lib.patch to resolve build failure when using libblkid.pc in --static mode - Add new lastlog2 sub-package (to solve migration problems due to rpm %post/%postun ordering) * Add pam-config calls to enable pam_lastlog2 * Add lastlog2.conf systemd-tmpfile to create database directory - Skip tests marked as ts_skip_qemu_user when running under qemu - Mark racy lslocks test as known fail - Re-enable lsfd tests using mkfds, as it is fixed now. - liblastlog2-devel: * Obsolete/provide lastlog2-devel for migration * Add header file to filelist - Update to release 2.40 * Add lastlog2 * agetty: Load autologin user from agetty.autologin credential * agetty: use get_terminal_default_type() * agetty: use sd_get_sessions() for number of users (#2088) * blockdev: add support for BLKGETZONESZ * cfdisk: ask y/n before wipe * cfdisk: properly handle out-of-order partitions during resize * chcpu: document limitations of -g * chsh: use libeconf to read /etc/shells * column: fix -l * column: fix memory leak * dmesg: fix FD leak * dmesg: fix delta calculation * dmesg: fix wrong size calculation * dmesg: support reading kmsg format from file * enosys: a new small command to make syscalls fail with ENOSYS * exch: new command to atomically exchanges paths between two files * fdisk: add support for partition resizing * fdisk: remove usage of VLA * fincore: add --output-all * findmnt: add --list-columns * findmnt: add -I, --dfi options for imitating the output of df -i * findmnt: add inode-related columns for implementing "df -i" like output * hexdump: add '--one-byte-hex' format option * hwclock: add support for RTC_VL_READ/RTC_VL_CLR ioctls * login: initialize noauth from login.noauth credential * lsblk: add --filter * lsblk: add --highlight * lsblk: add --list-columns * lsclocks: new command to show clocks * lscpu: even more Arm part numbers * mkfs.minix: handle 64bit time on 32bit system * mkswap: implement --file * mkswap: implement --offset * mount: add --map-users and --map-groups convenience options * nsenter: add option `-c` to join the cgroup of target process * setarch: add riscv64/riscv32 support * setpgid: new command to run a program in a new process group * uuidd: add cont_clock persistence * uuidgen: add option --count * wall: query logind for list of users with tty (#2088) * write: query logind for list of users with tty (#2088) * libuuid: improved support for 64-bit time - skip-lsfd-tests-PR2888.patch: skip some lsfd tests which OBS does not support (https://github.com/util-linux/util-linux/issues/2822) - use-logind-not-utmp.patch: removed, accepted upstream - tests-increase-delay-for-waitpid-test.patch: removed, upstreamed - 0001-Revert-libblkid-try-LUKS2-first-when-probing.patch: reverted upstream - util-linux-fix-tests-with-64k-pagesize.patch: was a backport

1 0

SELinux policy denials on MicroOS (snapper/systemd)
by Andrei Borzenkov 10 May '24

10 May '24

Where should they be reported? Using systemd-boot/FDE image I get several non-muted failures, audit2allow results: #============= snapperd_t ============== allow snapperd_t dosfs_t:file unlink; #============= systemd_fstab_generator_t ============== allow systemd_fstab_generator_t init_t:bpf { map_read map_write }; #============= systemd_gpt_generator_t ============== allow systemd_gpt_generator_t init_t:bpf { map_read map_write }; They do not seem to cause any visible problems though. Should the be reported against each individual product? I did not try booting with dontaudit disabled, I assume dontaudit failures are benign.

4 3

New Tumbleweed snapshot 20240509 released!
by Dominique Leuenberger 10 May '24

10 May '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: cheese ffmpeg-4 libguestfs libstorage-ng (4.5.202 -> 4.5.203) llvm18 (18.1.4 -> 18.1.5) openSUSE-release (20240508 -> 20240509) openssl-3 osinfo-db taglib transactional-update (4.6.6 -> 4.6.8) unbound (1.19.3 -> 1.20.0) virt-manager wicked (0.6.74 -> 0.6.75) wtmpdb (0.11.0 -> 0.12.0+git.20240508) yast2-installation (5.0.9 -> 5.0.10) yast2-storage-ng (5.0.13 -> 5.0.14) === Details === ==== cheese ==== Subpackages: cheese-lang libcheese-common libcheese-gtk25 libcheese8 typelib-1_0-Cheese-3_0 - Add cheese-c99.patch: fix cast to invalid pointer type (glgo#GNOME/cheese!70). ==== ffmpeg-4 ==== Subpackages: libavcodec58_134 libavformat58_76 libavutil56_70 libpostproc55_9 libswresample3_9 libswscale5_9 - Add ffmpeg-CVE-2023-50010.patch: Backporting e4d2666b from upstream, fixes the out of array access. (CVE-2023-50010 bsc#1223256) ==== libguestfs ==== Subpackages: libguestfs-appliance libguestfs-winsupport libguestfs-xfs libguestfs0 - Set Recommends on zerofree and ntfsprogs for libguestfs-appliance ==== libstorage-ng ==== Version update (4.5.202 -> 4.5.203) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#992 - fixed typos - added .codespellrc - 4.5.203 ==== llvm18 ==== Version update (18.1.4 -> 18.1.5) Subpackages: clang-tools clang18 libLLVM18 libclang-cpp18 libclang13 llvm18-gold - Update to version 18.1.5. * This release contains bug-fixes for the LLVM 18.1.0 release. This release is API and ABI compatible with 18.1.0. - Rebase llvm-do-not-install-static-libraries.patch. ==== openSUSE-release ==== Version update (20240508 -> 20240509) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== openssl-3 ==== Subpackages: libopenssl3 libopenssl3-32bit libopenssl3-x86-64-v3 - Add ktls capability [bsc#1216950] Already added in January, but not mentioned in this changelog. - Security fix: [bsc#1222548, CVE-2024-2511] * Fix unconstrained session cache growth in TLSv1.3 * Add openssl-CVE-2024-2511.patch ==== osinfo-db ==== - bsc#1222738 - virt-manager shows SLE Micro 6.0 in suggested OS version should be SL Micro 6.0 add-slm6.0-support.patch Drop add-slem6.0-support.patch ==== taglib ==== Subpackages: libtag2 libtag_c2 - USe %autosetup macro: allows us to eliminate usage of deprecated %patchN syntax. ==== transactional-update ==== Version update (4.6.6 -> 4.6.8) Subpackages: dracut-transactional-update libtukit4 transactional-update-zypp-config tukit - Version 4.6.8 - tukit: Properly handle overlay syncing failures: If the system would not be rebooted and several snapshots accumulated in the meantime, it was possible that the previous base snapshot - required for /etc syncing - was deleted already. In that case changes in /etc might have been reset. [gh#openSUSE/transactional-update#116] [gh#kube-hetzner/terraform-hcloud-kube-hetzner#1287] - soft-reboot: Log requested reboot type - soft-reboot: Don't force hard reboot on version change only - Version 4.6.7 - Add support for snapper 0.11.0; also significantly decreases cleanup time [boo#1223504] ==== unbound ==== Version update (1.19.3 -> 1.20.0) Subpackages: libunbound8 unbound-anchor - Update to 1.20.0: Features: * The config for discard-timeout, wait-limit, wait-limit-cookie, wait-limit-netblock and wait-limit-cookie-netblock was added, for the fix to the DNSBomb issue. * Merge GH#1027: Introduce 'cache-min-negative-ttl' option. * Merge GH#1043 from xiaoxiaoafeifei: Add loongarch support; updates config.guess(2024-01-01) and config.sub(2024-01-01), verified with upstream. * Implement cachedb-check-when-serve-expired: yes option, default is enabled. When serve expired is enabled with cachedb, it first checks cachedb before serving the expired response. * Fix GH#876: [FR] can unbound-checkconf be silenced when configuration is valid? Bug Fixes: * Fix for the DNSBomb vulnerability CVE-2024-33655. Thanks to Xiang Li from the Network and Information Security Lab of Tsinghua University for reporting it. * Update doc/unbound.doxygen with 'doxygen -u'. Fixes option deprecation warnings and updates with newer defaults. * Remove unused portion from iter_dname_ttl unit test. * Fix validator classification of qtype DNAME for positive and redirection answers, and fix validator signature routine for dealing with the synthesized CNAME for a DNAME without previously encountering it and also for when the qtype is DNAME. * Fix qname minimisation for reply with a DNAME for qtype CNAME that answers it. * Fix doc test so it ignores but outputs unsupported doxygen options. * Fix GH#1021 Inconsistent Behavior with Changing rpz-cname-override and doing a unbound-control reload. * Merge GH#1028: Clearer documentation for tcp-idle-timeout and edns-tcp-keepalive-timeout. * Fix GH#1029: rpz trigger clientip and action rpz-passthru not working as expected. * Fix rpz that the rpz override is taken in case of clientip triggers. Fix that the clientip passthru action is logged. Fix that the clientip localdata action is logged. Fix rpz override action cname for the clientip trigger. * Fix to unify codepath for local alias for rpz cname action override. * Fix rpz for cname override action after nsdname and nsip triggers. * Fix that addrinfo is not kept around but copied and freed, so that log-destaddr uses a copy of the information, much like NSD does. * Merge GH#1030: Persist the openssl and expat directories for repeated Windows builds. * Fix that rpz CNAME content is limited to the max number of cnames. * Fix rpz, it follows iterator CNAMEs for nsip and nsdname and sets the reply query_info values, that is better for debug logging. * Fix rpz that copies the cname override completely to the temp region, so there are no references to the rpz region. * Add rpz unit test for nsip action override. * Fix rpz for qtype CNAME after nameserver trigger. * Fix rpz so that rpz CNAME can apply after rpz CNAME. And fix that clientip and nsip can give a CNAME. * Fix localdata and rpz localdata to match CNAME only if no direct type match is available. * Merge GH#831 from Pierre4012: Improve Windows NSIS installer script (setup.nsi). * For GH#831: Format text, use exclamation icon and explicit label names. * Fix name of unit test for subnet cache response. * Fix GH#1032: The size of subnet_msg_cache calculation mistake cause memory usage increased beyond expectations. * Fix for GH#1032, add safeguard to make table space positive. * Fix comment in lruhash space function. * Fix to add unit test for lruhash space that exercises the routines. * Fix that when the server truncates the pidfile, it does not follow symbolic links. * Fix that the server does not chown the pidfile. * Fix GH#1034: DoT forward-zone via unbound-control. * Fix for crypto related failures to have a better error string. * Fix GH#1035: Potential Bug while parsing port from the "stub-host" string; also affected forward-zones and remote-control host directives. * Fix GH#369: dnstap showing extra responses; for client responses right from the cache when replying with expired data or prefetching. * Fix GH#1040: fix heap-buffer-overflow issue in function cfg_mark_ports of file util/config_file.c. * For GH#1040: adjust error text and disallow negative ports in other parts of cfg_mark_ports. * Fix comment syntax for view function views_find_view. * Fix GH#595: unbound-anchor cannot deal with full disk; it will now first write out to a temp file before replacing the original one, like Unbound already does for auto-trust-anchor-file. * Fixup compile without cachedb. * Add test for cachedb serve expired. * Extended test for cachedb serve expired. * Fix makefile dependencies for fake_event.c. * Fix cachedb for serve-expired with serve-expired-reply-ttl. * Fix to not reply serve expired unless enabled for cachedb. ... changelog too long, skipping 32 lines ... * Fix doxygen comment for errinf_to_str_bogus. ==== virt-manager ==== Subpackages: virt-install virt-manager-common - bsc#1222738 - virt-manager shows SLE Micro 6.0 in suggested OS version should be SL Micro 6.0 virtinst-add-slm-detection-support.patch ==== wicked ==== Version update (0.6.74 -> 0.6.75) Subpackages: wicked-service - Update to version 0.6.75: - cleanup: fix ni_fsm_state_t enum-int-mismatch warnings - cleanup: fix overflow warnings in a socket testcase on i586 - ifcheck: report new and deleted configs as changed (bsc#1218926) - man: improve ARP configuration options in the wicked-config.5 - bond: add ports when master is UP to avoid port MTU revert (bsc#1219108) - cleanup: fix interface dependencies and shutdown order (bsc#1205604) - Remove port arrays from bond,team,bridge,ovs-bridge (redundant) and consistently use config and state info attached to the port interface as in rtnetlink(7). - Cleanup ifcfg parsing, schema configuration and service properties - Migrate ports in xml config and policies already applied in nanny - Remove "missed config" generation from finite state machine, which is completed while parsing the config or while xml config migration. - Issue a warning when "lower" interface (e.g. eth0) config is missed while parsing config depending on it (e.g. eth0.42 vlan). - Resolve ovs master to the effective bridge in config and wickedd - Implement netif-check-state require checks using system relations from wickedd/kernel instead of config relations for ifdown and add linkDown and deleteDevice checks to all master and lower references. - Add a `wicked <ifup|ifdown|ifreload> --dry-run â¦` option to show the system/config interface hierarchies as notice with +/- marked interfaces to setup and/or shutdown. - Removed patches included in the source archive: [- 0001-addrconf-fix-fallback-lease-drop-bsc-1220996.patch] [- 0002-extensions-nbft-replace-nvme-show-nbft-with-nvme-nbf.patch] [- 0003-move-all-attribute-definitions-to-compiler-h.patch] [- 0004-hide-secrets-in-debug-log-bsc-1221194.patch] [- 0005-client-do-to-not-convert-sec-to-msec-twice-bsc-1222105.patch] ==== wtmpdb ==== Version update (0.11.0 -> 0.12.0+git.20240508) Subpackages: libwtmpdb0 - Update to version 0.12.0+git.20240508: - boot: Query systemd if soft-reboot was done ==== yast2-installation ==== Version update (5.0.9 -> 5.0.10) - Added encryption_method and encryption_pbkdf in the product description file (section partitioning/proposal) in order to set the encryption method/pbkdf in the Guided Setup of partitioning (related to bsc#1185291). - 5.0.10 ==== yast2-storage-ng ==== Version update (5.0.13 -> 5.0.14) - Proposal: Make the encryption method and the key derivation function configurable by product. - Partitioner: LUKS2 is always available and used by default, with PBKDF2 as default derivation function (related to bsc#1185291). - 5.0.14

1 0

New Tumbleweed snapshot 20240503 released!
by Dominique Leuenberger 09 May '24

09 May '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: binutils btrfsprogs (6.8 -> 6.8.1) desktop-translations (84.87.20230128.350400f -> 84.87.20240503.9343de5) evince (46.0 -> 46.1) evolution (3.52.0 -> 3.52.1) evolution-data-server (3.52.0 -> 3.52.1) evolution-ews (3.52.0 -> 3.52.1) gcc13 gdk-pixbuf (2.42.10 -> 2.42.11) gnome-control-center (46.0.1 -> 46.1) gnome-shell (46.0 -> 46.1) gnome-shell-extensions (46.0 -> 46.1) gnome-software (46.0 -> 46.1) gnome-terminal (3.52.0 -> 3.52.1) gnome-tweaks (46.0 -> 46.1) gnome-user-docs (46.0 -> 46.1) libshumate (1.2.0 -> 1.2.1) mobile-broadband-provider-info (20230416 -> 20240407) mutter (46.0 -> 46.1) nautilus (46.0 -> 46.1) polari (45.0 -> 46.0) vte (0.76.0 -> 0.76.1) xdg-desktop-portal-gnome (46.0 -> 46.1) === Details === ==== binutils ==== Subpackages: libctf-nobfd0 libctf0 - Allow to disable profiling - Use %patch -P N instead of deprecated %patchN. ==== btrfsprogs ==== Version update (6.8 -> 6.8.1) Subpackages: btrfsprogs-bash-completion btrfsprogs-udev-rules libbtrfs0 libbtrfsutil1 - update to 6.8.1 * mkfs: fix writing on zoned device when block-group-tree is selected * tune: fix writing on zoned device with option --convert-to-block-group-tree * check: * more progress and error messages * unify handling of unknown command line options with other commands * subvolume delete: remove options --delete-qgroup and --no-delete-qgroup (added in 6.6.3), qgroup deletion does not always work due to delayed background processing of subvolume or set value in sysfs:ggroup/drop_subtree_threshold * other: * misc refactoring * error handling fixes reported by gcc -fanalyzer * documentation updates * new and updated tests - enable zstd support for 15.6 / SLE15-SP6 build targets (bsc#1221943) ==== desktop-translations ==== Version update (84.87.20230128.350400f -> 84.87.20240503.9343de5) - Update to version 84.87.20240503.9343de5: * Update for SLES 15 SP6 RC / Leap 15.6 RC poo#131735 * Manually remove further invalid character occurances * Fix Browse C:\ drive incorrect escaping - Update to version 84.87.20240502.b932b7c: * Add download_data_from_download-o-o.sh * Added translation using Weblate (Latvian) * Disable appstream and polkit extraction * Leap 15.6 desktop-file-translations * Translated using Weblate (Arabic) * Translated using Weblate (Catalan) * Translated using Weblate (Chinese (China) (zh_CN)) * Translated using Weblate (Croatian) * Translated using Weblate (Czech) * Translated using Weblate (Dutch) * Translated using Weblate (English (United Kingdom)) * Translated using Weblate (Finnish) * Translated using Weblate (German) * Translated using Weblate (Greek) * Translated using Weblate (Indonesian) * Translated using Weblate (Italian) * Translated using Weblate (Japanese) * Translated using Weblate (Latvian) * Translated using Weblate (Lithuanian) * Translated using Weblate (Polish) * Translated using Weblate (Portuguese) * Translated using Weblate (Russian) * Translated using Weblate (Serbian (latin) (sr@latin)) * Translated using Weblate (Slovak) * Translated using Weblate (Swedish) * Translated using Weblate (Turkish) - Update to version 84.87.20230410.dc72281: * Translated using Weblate (Latvian) * Translated using Weblate (Latvian) * Translated using Weblate (German) * Translated using Weblate (Polish) * Translated using Weblate (Polish) * Translated using Weblate (Lithuanian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Finnish) * Translated using Weblate (Polish) * Translated using Weblate (Polish) * Translated using Weblate (Polish) * Translated using Weblate (Polish) * Translated using Weblate (Spanish) * Translated using Weblate (Persian) * Translated using Weblate (Persian) * Translated using Weblate (Czech) * Translated using Weblate (Czech) * Translated using Weblate (Czech) * Translated using Weblate (Czech) * Translated using Weblate (Czech) * Translated using Weblate (Georgian) * Translated using Weblate (Georgian) * Translated using Weblate (Georgian) * Translated using Weblate (Georgian) * Translated using Weblate (Georgian) * Translated using Weblate (Georgian) ==== evince ==== Version update (46.0 -> 46.1) Subpackages: evince-lang evince-plugin-pdfdocument libevdocument3-4 libevview3-3 typelib-1_0-EvinceDocument-3_0 typelib-1_0-EvinceView-3_0 - Update to version 46.1: + Metadata: Fix bugtracker URL. + Updated translations. ==== evolution ==== Version update (3.52.0 -> 3.52.1) Subpackages: evolution-lang evolution-plugin-spamassassin - Update to version 3.52.1: + Bug Fixes: - Wrong weeks in Month view when returning from different page of dates. - Mail: Prefer saving original message instead of re-encode. - EHeaderBar: Report correct minimum width. - Subject line in message pane not bold anymore in Wide view. - Crash when hiding completed tasks. - EMailBrowser: Hide Print preview menu option. + Miscellaneous: - data: Fix circular-component-relation in .appdata file. + Updated translations. - Drop boo1221868.patch: fixed upstream. ==== evolution-data-server ==== Version update (3.52.0 -> 3.52.1) Subpackages: evolution-data-server-lang libcamel-1_2-64 libebackend-1_2-11 libebook-1_2-21 libebook-contacts-1_2-4 libecal-2_0-3 libedata-book-1_2-27 libedata-cal-2_0-2 libedataserver-1_2-27 libedataserverui-1_2-4 - Update to version 3.52.1: + Bug Fixes: - Camel: Sanitize exported OpenPGP public key before transfer. - Google Task stale item cannot be deleted. + Miscellaneous: - EOAuth2ServiceOutlook: Cannot be used with IMAP. - IMAPx: Correct return value of imapx_splice_with_progress() when cancelled. - IMAPX: Correct path returned by imapx_get_filename(). + Updated translations. ==== evolution-ews ==== Version update (3.52.0 -> 3.52.1) Subpackages: evolution-ews-lang - Update to version 3.52.1: + Miscellaneous: - Do not include buildir in libecalbackendews.so. + Updated translations. ==== gcc13 ==== Subpackages: cpp13 gcc13-locale libgccjit0-gcc13 libstdc++6-devel-gcc13 - Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from the GCN offload compiler as that is requiring Code Object version 3 which is no longer supported by llvm18. ==== gdk-pixbuf ==== Version update (2.42.10 -> 2.42.11) Subpackages: gdk-pixbuf-lang gdk-pixbuf-query-loaders gdk-pixbuf-thumbnailer libgdk_pixbuf-2_0-0 typelib-1_0-GdkPixbuf-2_0 - Update to version 2.42.11: + Disable fringe loaders by default. + Introspection fixes. + Updated translations. ==== gnome-control-center ==== Version update (46.0.1 -> 46.1) Subpackages: gnome-control-center-color gnome-control-center-goa gnome-control-center-lang gnome-control-center-user-faces gnome-control-center-users - Update to version 46.1: + Accessibility: Improve accessibility of "Typing" settings sliders. + Display: Fix crash when pressing Escape in the display settings. + Network: Add stable-ssid support for cloned-mac. + Privacy: - Add build option to enable Location services - Fix opening of Help pages while viewing Privacy settings + Sharing: Auto hide Sharing panel when Rygel AND gnome-user-share are not available. + System: - Don't show auto-timezone setting when Location services unavailable. - Avoid unnecessary time-change requests. - Fix issue with sensitivity of "Add" and "Enroll" Enterprise Login buttons. - Improve generated passwords capacity in Remote Desktop settings. + Wacom: Check for the right output connector name. - Drop upstream merged gnome-control-center-datetime-Avoid-emitting-the-time-changed-signal.patch. ==== gnome-shell ==== Version update (46.0 -> 46.1) Subpackages: gnome-extensions gnome-shell-calendar gnome-shell-lang - Update to version 46.1: + Improve notification of conflicting session. + Add shift level to Korean OSK layout. + Fix markup support in notifications. + extensions-app: Fix empty rows with '&' in extension name. + extensions-app: Improve HIG compliance. + Omit expand buttons in notification banners. + Misc. bug fixes and cleanups. + Updated translations. ==== gnome-shell-extensions ==== Version update (46.0 -> 46.1) Subpackages: gnome-shell-classic gnome-shell-extensions-common gnome-shell-extensions-common-lang - Update to version 46.1: + screenshot-window-sizer: Add flathub-recommended size. + Updated translations. ==== gnome-software ==== Version update (46.0 -> 46.1) Subpackages: gnome-software-lang gnome-software-plugin-packagekit - Update to version 46.1: + Fix a crash when updating apps when built with Mogwai. + Fix a crash when installing flatpak application. + Correct desktop/mobile hardware support detection. + Correct state of Fedora upgrade. + Several fixes in historical updates for rpm-ostree. + Updated translations. ==== gnome-terminal ==== Version update (3.52.0 -> 3.52.1) Subpackages: gnome-shell-search-provider-gnome-terminal gnome-terminal-lang nautilus-extension-terminal - Update to version 3.52.1: + schema: Fix light green color to match the GNOME palette. + prefs: Follow the theme variant setting. ==== gnome-tweaks ==== Version update (46.0 -> 46.1) Subpackages: gnome-tweaks-lang - Update to version 46.1: + Themes no longer show up despite that the user themes extension being enabled. + New font selections are not saved. + Updated translations. ==== gnome-user-docs ==== Version update (46.0 -> 46.1) - Update to version 46.1: + Updated translations. ==== libshumate ==== Version update (1.2.0 -> 1.2.1) Subpackages: libshumate-1_0-1 libshumate-lang typelib-1_0-Shumate-1_0 - Update to version 1.2.1: + Fix compiling with C++. + Fix crash with null reference map source. ==== mobile-broadband-provider-info ==== Version update (20230416 -> 20240407) - Update to version 20240407: + Switch to meson + Support MMS attachment size + New providers: - uk: Lebara + Updated providers: - in: Multiple providers - uk: Superdrug + Voicemail fixes: - au:Vodafone - us:AT&T - fr:FreeMobile - Add meson BuildRequires: follow upstreams port to meson. - Drop libtool BuildRequires: no longer needed with meson. - Replace configure/make/make_install macros by the meson equivalents meson/meson_build/meson_install. - Enable test suite. - BuildRequire libxml2-tools, needed by the tests. - Update to version 20240407: * Release 20240407 * build: Drop autoconf * ci: Use meson instead of autoconf * build: Switch to meson * ci: Switch to recent Debian * gb: Add voicemail for Superdrug * in: cleanup dead providers and update new and existing * Add voicemail for Vodafone AU * USA: Change AT&T Visual Voicemail Protocol to ios * Providers with mccmnc 310260: add primary attributes * fr: change Free Mobile standard to iOS * dtd: add iOS standard and references to visual voicemail * Lebara UK: Add maximum MMS size * serviceproviders.2.dtd: Add support for MMS size in bytes * Add Lebara UK Provider * gb: Update Superdrug's MMS proxy ==== mutter ==== Version update (46.0 -> 46.1) Subpackages: mutter-lang - Update to version 46.1: + Implement linux-drm-syncobj-v1. + Fix input lag on X11 nvidia. + Fix scanout on secondary GPUs. + Don't apply max-render-time to secondary GPUs. + Fix reusing single-pixel buffers. + Improve scanout candidate check. + Always use logical pixels for. + Fix modifiers getting stuck during grabs. + Fix night-light on displays without EDID. + Fix secondary GPU acceleration with nvidia driver. + Fix some XWayland clients being partially click-through. + Fix initial suspended state. + Fixed crashes. + Misc. bug fixes and cleanups. + Updated translations. - Drop mutter-fix-front-buffer-lock.patch and 0001-Revert-clutter-stage-Avoid-queueing-stage-updates-wh.patch: fixed upstream. ==== nautilus ==== Version update (46.0 -> 46.1) Subpackages: gnome-shell-search-provider-nautilus libnautilus-extension4 nautilus-lang - Update to version 46.1: + Bugfixes: - Create archive with Enter on Compress dialog. - Move focus correctly when item is removed. - View performance optimization. - Fix crash when compressing a file and a folder. - Don't show banners in global search. - Preserve permissions when copying from read-only file systems. - Disable non-working global search from Other Locations. + Updated translations. ==== polari ==== Version update (45.0 -> 46.0) Subpackages: polari-lang - Update to version 46.0: * Use adaptive dialogs. * Replace telepathy-logger with private tracker database. * Misc. bug fixes and cleanups. + Updated translations. - Replace pkgconfig(telepathy-logger-0.2) BuildRequires with pkgconfig(tracker-sparql-3.0): follow upstreams changes. ==== vte ==== Version update (0.76.0 -> 0.76.1) Subpackages: libvte-2_91-0 typelib-1_0-Vte-2_91 vte-lang - Update to version 0.76.1: + terminal: fix UTF-8 bounds check. + app: Don't hide scrolled-window option. + app: Add built-in CSS to hide scrolled-window over-scroll indicators. + emulation: Fix the reported bold/etc. color if unset + widget: Also set tag when returning no match. - Update to version 0.76.1: * emulation: Fix the reported bold/etc. color if unset * app: Fix the build with clang++ * app: Don't use typeof * terminal: fix UTF-8 bounds check * widget: Also set tag when returning no match * app: Add built-in CSS to hide scrolled-window over-scroll indicators * app: Don't hide scrolled-window option * build: Post release version bump ==== xdg-desktop-portal-gnome ==== Version update (46.0 -> 46.1) Subpackages: xdg-desktop-portal-gnome-lang - Update to version 46.1: + Remove D-Bus call timeout from Access portal requests that are proxied to GNOME Shell. This prevents the Access portal from failing requests if the user doesn't click on a dialog for more than 25 seconds. + Various fixes to the ScreenCast portal dialog. + Updated translations.

3 3

Is slowroll broken
by Larry Len Rainey 09 May '24

09 May '24

4 3

New Tumbleweed snapshot 20240508 released!
by Dominique Leuenberger 09 May '24

09 May '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: accountsservice fwupd (1.9.18 -> 1.9.19) glibc gnome-calculator (46.0 -> 46.1) guestfs-tools libguestfs openSUSE-release (20240507 -> 20240508) python-cryptography (42.0.5 -> 42.0.6) supermin virt-v2v virtualbox (7.0.14 -> 7.0.18) virtualbox-kmp (7.0.14_k6.8.8_1 -> 7.0.18_k6.8.8_1) === Details === ==== accountsservice ==== Subpackages: accountsservice-lang libaccountsservice0 typelib-1_0-AccountsService-1_0 - Keep en and en_GB 'translations' in the main package: do not force -lang packages onto all users. ==== fwupd ==== Version update (1.9.18 -> 1.9.19) Subpackages: fwupd-bash-completion fwupd-lang libfwupd2 typelib-1_0-Fwupd-2_0 - Update to version 1.9.19: + This release adds the following features: - Drop heap as part of a housekeeping action. - Retry downloads to workaround flaky network connections. + This release fixes the following bugs: - Assume new ME versions are called CSME. - Fix a buffer-overread when parsing invalid CoSWID entity data. - Fix a logic thinko when parsing GUID strings. - Fix downloading files on Windows with libcurl >= 7.77.0. - Revert back to a simpler syscall blocklist-based filter. + This release adds support for the following hardware:. - Acer U32 dock. - Luxshare 7-in-1 dock. - Pixart models 2404, 4206, 2440, 2418, 2752, 2840 and 2818. ==== glibc ==== Subpackages: glibc-32bit glibc-devel glibc-extra glibc-lang glibc-locale glibc-locale-base nscd - glibc-fix-cve-2024-33599.patch: nscd: Stack-based buffer overflow in netgroup cache (CVE-2024-33599, bsc#1223423) ==== gnome-calculator ==== Version update (46.0 -> 46.1) Subpackages: gnome-calculator-lang gnome-shell-search-provider-gnome-calculator - Update to version 46.1: + Disable undo action if nothing to undo. + Keep last conversion options at launch. + Fixed event controller propagation phase. + Updated translations. ==== guestfs-tools ==== - Add Requires on libguestfs which will pull in libguestfs-appliance and all its dependencies. guestfs-tools.spec ==== libguestfs ==== Subpackages: libguestfs-appliance libguestfs-winsupport libguestfs-xfs libguestfs0 - Switch Recommends to Requires for several packages in the libguestfs-appliance which is where the tools from these packages are used. (bsc#1223444) ==== openSUSE-release ==== Version update (20240507 -> 20240508) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== python-cryptography ==== Version update (42.0.5 -> 42.0.6) - update to 42.0.6: * Fixed compilation when using LibreSSL 3.9.1. ==== supermin ==== - Supermin uses mke2fs. Add Requires e2fsprogs for this command. supermin.spec ==== virt-v2v ==== Subpackages: virt-v2v-bash-completion - bsc#1223444 - New virt-v2v dependency on btrfsprogs causes error with zypper dup on systems without btrfs installed Drop Requires on the following packages and move them into libguestfs-appliance btrfsprogs, curl, dhcp-client, e2fsprogs, gptfdisk ntfsprogs, xfsprogs ==== virtualbox ==== Version update (7.0.14 -> 7.0.18) - Have the KMP package supplement the kernel-flavor plus virtualbox-guest-tools: -guest tools requires the kmp anyway, and this allows libsolv to give some hints on 'what kmp' to prefer on a system. - Version bump to VirtualBox 7.0.18 (released May 03 2024 by Oracle)) This is a maintenance release. The following items were fixed and/or added: Networking: Fixed an issue which caused host system crash when VM was using bridged or host-only network adapter (bug #22045) Linux Guest Additions: Added more fixes to prevent UBSAN warnings (bug #21877) Fixes boo#1211941 Linux Guest Additions: Fixed issue when time stamps were displayed incorrectly within mounted shared folder (bug #22047) Permanent fix for boo#1220524. File fix_shared_folder_time.patch is deleted. Files fixes_for_python.patch and handle_gsoap_208103.patch are deleted. VirtualBox 7.0.16 (released April 16 2024) This is a maintenance release. The following items were fixed and/or added: VMM: Fixed a guru meditation executing nested-guests using the KVM hypervisor in the guest on Intel hosts (bug #21805) VMM: Fixed Linux VM crash on some recent AMD models USB: Fixed issue when EHCI controller was mishandling short packets (bug #20726) Audio: Introduced general improvements VBoxManage and vboximg-mount: Updated usage information and documentation (bugs #21895, #21992 and #21993) Guest Control: Fixed starting Windows guest processes in the correct Windows session (7.0 regression) Linux Host: Fixed issue when VBox.sh was deleting wrong VBoxSVC IPC socket when VM was started using sudo (bug #20928) Linux Host: Fixed kernel modules build failure when using GCC 13.2 Linux Host and Guest: Added fixes related to UBSAN warnings discovered on recent Linux distributions (bug #21877) Linux Host and Guest: Added possibility to prevent kernel module from automatic loading during system boot by adding mod_name.disabled=1 into kernel command line Linux Host and Guest: Added initial support for kernel 6.9 (bug #22033). File kernel-6.9.patch is deleted. Linux Host and Guest: Fixed mk_pte warning introduced in kernel 6.6 (bug #21898) Linux Guest Additions: Added initial support for kernel 6.8. File kernel-6.8.patch is deleted. Windows Guest Additions: Introduced general improvements in graphics area - Build kernel-longterm KMP on Tumbleweed (boo#1217824) ==== virtualbox-kmp ==== Version update (7.0.14_k6.8.8_1 -> 7.0.18_k6.8.8_1) - Have the KMP package supplement the kernel-flavor plus virtualbox-guest-tools: -guest tools requires the kmp anyway, and this allows libsolv to give some hints on 'what kmp' to prefer on a system. - Version bump to VirtualBox 7.0.18 (released May 03 2024 by Oracle)) This is a maintenance release. The following items were fixed and/or added: Networking: Fixed an issue which caused host system crash when VM was using bridged or host-only network adapter (bug #22045) Linux Guest Additions: Added more fixes to prevent UBSAN warnings (bug #21877) Fixes boo#1211941 Linux Guest Additions: Fixed issue when time stamps were displayed incorrectly within mounted shared folder (bug #22047) Permanent fix for boo#1220524. File fix_shared_folder_time.patch is deleted. Files fixes_for_python.patch and handle_gsoap_208103.patch are deleted. VirtualBox 7.0.16 (released April 16 2024) This is a maintenance release. The following items were fixed and/or added: VMM: Fixed a guru meditation executing nested-guests using the KVM hypervisor in the guest on Intel hosts (bug #21805) VMM: Fixed Linux VM crash on some recent AMD models USB: Fixed issue when EHCI controller was mishandling short packets (bug #20726) Audio: Introduced general improvements VBoxManage and vboximg-mount: Updated usage information and documentation (bugs #21895, #21992 and #21993) Guest Control: Fixed starting Windows guest processes in the correct Windows session (7.0 regression) Linux Host: Fixed issue when VBox.sh was deleting wrong VBoxSVC IPC socket when VM was started using sudo (bug #20928) Linux Host: Fixed kernel modules build failure when using GCC 13.2 Linux Host and Guest: Added fixes related to UBSAN warnings discovered on recent Linux distributions (bug #21877) Linux Host and Guest: Added possibility to prevent kernel module from automatic loading during system boot by adding mod_name.disabled=1 into kernel command line Linux Host and Guest: Added initial support for kernel 6.9 (bug #22033). File kernel-6.9.patch is deleted. Linux Host and Guest: Fixed mk_pte warning introduced in kernel 6.6 (bug #21898) Linux Guest Additions: Added initial support for kernel 6.8. File kernel-6.8.patch is deleted. Windows Guest Additions: Introduced general improvements in graphics area - Build kernel-longterm KMP on Tumbleweed (boo#1217824)

1 0

New Slowroll base snapshot 20240429 released!
by Bernhard M. Wiedemann 08 May '24

08 May '24

Dear fellow Geekos, today I released a new Slowroll base snapshot with an upgrade from 20240405 to 20240429. Due to some OBS hickup there were slightly inconsistent repos for some hours today. This should now all be sorted out. On the list of updates, I see among others: Qt 6.6.3 -> 6.7.0 KDE 6.0.0 -> 6.1.0 Mesa 24.0.3 -> 24.0.5 docker 25.0.3 -> 26.1.0 In other news: * OBS links to packages in openSUSE:Slowroll should now work better * I started to incorporate the new logo artwork into branding-openSUSE and it should show up in more places soon. I'll try to stick to monthly version bumps for a while, aiming for the 2nd week of a month, to make them more predictable. So expect the next one around 2024-06-09 (+-3d) We are slowly getting closer to where I want Slowroll to be. Ciao Bernhard M.

4 5

New Tumbleweed snapshot 20240507 released!
by Dominique Leuenberger 08 May '24

08 May '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ImageMagick (7.1.1.31 -> 7.1.1.32) autofs cyrus-sasl gdk-pixbuf gimp (2.10.36 -> 2.10.38) git (2.44.0 -> 2.45.0) gsettings-desktop-schemas harfbuzz iso-codes libarchive (3.7.2 -> 3.7.4) libxslt openSUSE-release (20240506 -> 20240507) pipewire (1.0.5 -> 1.0.5+git36.60deeb2) pixman (0.43.2 -> 0.43.4) python-Jinja2 (3.1.3 -> 3.1.4) sdbootutil (1+git20240410.3325802 -> 1+git20240506.573a6a4) tpm2-0-tss (4.0.1 -> 4.1.0) unison (2.53.4 -> 2.53.5) wireplumber xxhash yast2-trans (84.87.20240428.f3ddce30c5 -> 84.87.20240505.45b4c21d5b) === Details === ==== ImageMagick ==== Version update (7.1.1.31 -> 7.1.1.32) Subpackages: libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - version update to 7.1.1.32 * Fix GIF ICC profile reading #7282 * uhdr.c: add support for rgb inputs #7273 ==== autofs ==== - Fix -Werror=incompatible-pointer-types issues (bsc#1221682) * Add autofs-5.1.9-fix-ldap_parse_page_control-check.patch * Add autofs-5.1.9-cast-sasl_callback_t-function-pointers.patch ==== cyrus-sasl ==== Subpackages: cyrus-sasl-crammd5 cyrus-sasl-digestmd5 cyrus-sasl-gssapi cyrus-sasl-plain libsasl2-3 libsasl2-3-32bit - GCC 14: cyrus-sasl package fails (bsc#1221863) Apply upstream patch: 0001-Fix-time.h-check.patch ==== gdk-pixbuf ==== Subpackages: gdk-pixbuf-lang gdk-pixbuf-query-loaders gdk-pixbuf-thumbnailer libgdk_pixbuf-2_0-0 typelib-1_0-GdkPixbuf-2_0 - Pass -Dothers=enabled to meson: enable other image loaders (most notably beeded seems xpm,xbm). This is in line with upstreams recommendation for now, but won't be working past version 2.43.x. The loaders will likely be split out into a separate repo. (boo#1223903, glgo#GNOME/gdk-pixbuf!169). - Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test suite with other loaders enabled. ==== gimp ==== Version update (2.10.36 -> 2.10.38) Subpackages: gimp-plugin-aa libgimp-2_0-0 libgimpui-2_0-0 - Update to 2.10.38: * Fixed a crash with newer glib * Indexed PNGs with transparency are now exported with the correct colors * Anders Jonsson fixed the input ranges for several filters such as Waves and Distort * The titlebar customization field now supports UTF-8 characters * Existing image comments no longer âleakâ into newly created images ==== git ==== Version update (2.44.0 -> 2.45.0) Subpackages: git-core git-email git-svn git-web perl-Git - update to 2.45.0: * Improved efficiency managing repositories with many references ("git init --ref-format=reftable") * "git checkout -p" and friends learned that that "@" is a synonym for "HEAD" * cli improvements handling refs * Expanded a number of commands and options, UI improvements * status.showUntrackedFiles now accepts "true" * git-cherry-pick(1) now automatically drops redundant commits with new --empty option * The userdiff patterns for C# has been updated. ==== gsettings-desktop-schemas ==== Subpackages: gsettings-desktop-schemas-lang - Move en_US and en_GB 'translations' to the main package. Do not force the -lang package on all users. ==== harfbuzz ==== Subpackages: libharfbuzz-gobject0 libharfbuzz-icu0 libharfbuzz-subset0 libharfbuzz0 typelib-1_0-HarfBuzz-0_0 - Force higher C++ standard version for building with ICU 75. ==== iso-codes ==== - Merge iso codes-translations into the main package. iso-codes isn't particularly useful without its translations. Some KDE packages require and/or heavily rely on them. gnome-control-center also needs translations to display localized names in system config menu. ==== libarchive ==== Version update (3.7.2 -> 3.7.4) - Update to 3.7.4: * rar: Fix OOB in rar e8 filter (CVE-2024-26256, bsc#1222911) * zip: Fix out of boundary access * 7zip: Limit amount of properties * bsdtar: Fix error handling around strtol() usages * passphrase: Improve newline handling on Windows * passphrase: Never allow empty passwords * rar: Fix "File CRC Error" when extracting specific rar4 archives * xar: Avoid infinite link loop * zip: Update AppleDouble support for directories * zstd: Implement core detection - Update to 3.7.3: * PCRE2 support * add trailing letter b to bsdtar(1) substitute pattern * add support for long options "--group" and "--owner" to tar(1) * Fix possible vulnerability in tar error reporting introduced in f27c173 * ISO9660: preserve the natural order of links * rar5: fix decoding unicode filenames on Windows * rar5: fix infinite loop if during rar5 decompression the last block produced no data * xz filter: fix incorrect eof at the end of an lzip member * zip: fix end-of-data marker processing when decompressing zip archives * multiple bsdunzip(1) fixes * filetime truncation fix on Windows - Fix rpmlint warning about summary being too long ==== libxslt ==== Subpackages: libexslt0 libxslt-tools libxslt1 - Fix ftbfs with GCC14 (bsc#1220571) * correct libxslt-random-seed.patch to include time.h unconditionally * add gcc14-runtest-no-const.patch ==== openSUSE-release ==== Version update (20240506 -> 20240507) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== pipewire ==== Version update (1.0.5 -> 1.0.5+git36.60deeb2) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-jack pipewire-lang pipewire-libjack-0_3 pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Update to version 1.0.5+git36.60deeb2 to fix several crashes, NULL checks, format strings and other issues: * spa: libcamera: fix RGB mappings * pw-dump: destroy all objects not just those matching the pattern * pw-dump: fix string memory leak on error * json: fix high surrogate escapes * core: handle import errors better * gst/src: fix crash when current_caps is NULL * gst/src: Avoid unnecessary renegotiations during streaming * gst/src: Cleanups for src_negotiate() * pw-mon: fix type confusion in core event handler * gst: fix stream params memory leak * gst: handle some more errors * treewide: fix errno assignments * alsa-pcm: don't force quantum for iec958 formats * journal: prepend code location to messages at debug log levels * module-rt: fix compiler warning * filter-chain: fix arguments of calloc * combine-stream tag forward * Add album to tag metadata * impl-node: avoid bitfield races * treewide: fix some format string issues * conf: warn when match actions are missing * module-protocol-simple: handle 'node.name' property * module-ffado: only start after ports are configured * context: fill basic properties early * combine-stream: fix latency-compensate with resample.disabled=true * profiler: remove unused data-loop * v4l2: fix printf format * spa: v4l2: encode device id into a json array * spa: libcamera: encode device ids into a json array * impl-port: avoid doing work when the port is destroyed * impl-port: use 0 size when clearing IO * stream: log a warning when media.class and direction mismatch * module-loopback: only enable delay with valid rate and channels * alsa: fix race when updating the eventfd * audioconvert: also clamp monitor volume to min/max * combine-stream: actually make use of resample.disable ==== pixman ==== Version update (0.43.2 -> 0.43.4) - Update to version 0.43.4 + Fix incorrect compositing on big-endian architectures. + Allow building on clang/arm32. ==== python-Jinja2 ==== Version update (3.1.3 -> 3.1.4) - update to 3.1.4 (bsc#1223980, CVE-2024-34064): * The xmlattr filter does not allow keys with / solidus, > greater-than sign, or = equals sign, in addition to disallowing spaces. Regardless of any validation done by Jinja, user input should never be used as keys to this filter, or must be separately validated first. ==== sdbootutil ==== Version update (1+git20240410.3325802 -> 1+git20240506.573a6a4) Subpackages: sdbootutil-rpm-scriptlets sdbootutil-snapper - Update to version 1+git20240506.573a6a4: * Don't try to mess with overlayfs inside transaction * .spec - requires: dialog ==== tpm2-0-tss ==== Version update (4.0.1 -> 4.1.0) Subpackages: libtss2-esys0 libtss2-mu0 libtss2-rc0 libtss2-sys1 libtss2-tcti-device0 libtss2-tctildr0 Update to version 4.1: + Security - Fixed CVE-2024-29040 (bsc#1223690) + Fixed - fapi: Fix length check on FAPI auth callbacks - mu: Correct error message for errors - tss2-rc: fix unknown laer handler dropping bits. - fapi: Fix deviation from CEL specification (template_value was used instead of template_data). - fapi: Fix json syntax error in FAPI profiles which was ignored by json-c. - build: fix build fail after make clean. - mu: Fix unneeded size check in TPM2B unmarshaling. - fapi: Fix missing parameter encryption. - build: Fix failed build with --disable-vendor. - fapi: Fix flush of persistent handles. - fapi: Fix test provisioning with template with self generated certificate disabled. - fapi: Fix error in Fapi_GetInfo it TPM supports SHA3 hash algs. - fapi: Revert pcr extension for EV_NO_ACTION events. - fapi: Fix strange error messages if nv, ext, or policy path does not exits. - fapi: Fix segfault caused by wrong allocation of pcr policy. - esys: Fix leak in Esys_EvictControl for persistent handles. - tss2-tcti: tcti-libtpms: fix test failure on big-endian platform. - esys: Add reference counting for Esys_TR_FromTPMPublic. - esys: Fix HMAC error if session bind key has an auth value with a trailing 0. - fapi: fix usage of self signed certificates in TPM. - fapi: Usage of self signed certificates. - fapi: A segfault after the error handling of non existing keys. - fapi: Fix several leaks. - fapi: Fix error handling for policy execution. - fapi: Fix usage of persistent handles (should not be flushed) - fapi: Fix test provisioning with template (skip test without self generated certificate). - fapi: Fix pcr extension for EV_NO_ACTION - test: Fix fapi-key-create-policy-signed-keyedhash with P_ECC384 profile - tcti_spi_helper_transmit: ensure FIFO is accessed only after TPM reports commandReady bit is set - fapi: Fix read large system eventlog (> UINT16_MAX). - esys tests: Fix layer check for TPM2_RC_COMMAND_CODE (for /dev/tpmrm0) - test: unit: tcti-libtpms: fix test failed at 32-bit platforms. - fapi: Fix possible null pointer dereferencing in Fapi_List. - sys: Fix size check in Tss2_Sys_GetCapability. - esys: Fix leak in Esys_TR_FromTPMPublic. - esys: fix unchecked return value in esys crypto. - fapi: Fix wrong usage of local variable in provisioning. - fapi: Fix memset 0 in ifapi_json_TPMS_POLICYNV_deserialize. - fapi: Fix possible out of bound array access in IMA parser. - tcti device: Fix possible unmarshalling from uninitialized variable. - fapi: Fix error checking authorization of signing key. - fapi: Fix cleanup of policy sessions. - fapi: Eventlog H-CRTM events and different localities. - fapi: Fix missing synchronization of quote and eventlog. - faii: Fix invalid free in Fapi_Quote with empty eventlog. + Added - tcti: LetsTrust-TPM2Go TCTI module spi-ltt2go. - mbedtls: add sha512 hmac. - fapi: Enable usage of external keys for Fapi_Encrypt. - fapi: Support download of AMD certificates. - tcti: Add USB TPM (FTDI MPSSE USB to SPI bridge) TCTI module. - fapi: The recreation of primaries (except EK) in the owner hierarchy instead the endorsement hierarchy is fixed. - rc: New TPM return codes added. - fapi: Further Nuvoton certificates added. - tpm_types/esys: Add support for Attestable TPM changes in latest TPM spec. - tcti: Add '/dev/tcm0' to default conf - fapi: New Nuvoton certificates added. - esys: Fix leak in Esys_TR_FromTPMPublic. + Removed - Testing on Ubuntu 18.04 as it's near EOL (May 2023). - tpm2-tss.keyring: added Andreas Fuchs 0x8F4F9A45D7FFEE74 key, documented in upstream repo, which was used for signing this new release tarball. - add new sub-package libtss2-tcti-spidev0: TCTI for communicating with a TPM connected directly via SPI. - add new sub-package libtss2-tcti-i2c-helper0: TCTI for communicating with a TPM connected directly via I2C. ==== unison ==== Version update (2.53.4 -> 2.53.5) - Update to version 2.53.5 * Various minor bugfixes. * Recovery from errors during repeat mode (enabled in 2.53.1) is disabled for time being. ==== wireplumber ==== Subpackages: libwireplumber-0_5-0 wireplumber-audio wireplumber-lang wireplumber-zsh-completion - Better fix for (bsc#1223916) that basically turns the main profile into the (to be in 0.5.3) video-only profile unless wireplumber-audio is installed which now turns the main profile into exactly upstream's main profile. - Add patch from upstream to fix a json log issue: * 0001-lua-json-fix-error-ouput.patch - Add patch from upstream to add a method to merge json containers: * 0002-lua-json-add-method-to-merge-json-containers.patch - Add patch from upstream to fix merging a particular case of configuration options: * 0003-json-utils-fix-overriding-of-non-container-values-when.patch - Fix wireplumber not starting successfully when audio support is not enabled since the main profile now requires it. The best option would be to use a video-only profile but it's too late to change the way wireplumber is started in SLE/Leap, so the solution just makes audio/bluetooth optional for now (bsc#1223916) * split-config-file.py ==== xxhash ==== - Fix ftbfs with gcc14: * use correct optflags also in %check * add test-tools-do-not-override-cflags.patch - Execute more tests ==== yast2-trans ==== Version update (84.87.20240428.f3ddce30c5 -> 84.87.20240505.45b4c21d5b) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20240505.45b4c21d5b: * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Italian) * New POT for text domain 'bootloader'. * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (German) * Translated using Weblate (German) * Translated using Weblate (German) * Translated using Weblate (German) * Translated using Weblate (German) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Romanian) * Translated using Weblate (French) * Translated using Weblate (French) * Translated using Weblate (French) * Translated using Weblate (French) * New POT for text domain 'bootloader'. * Translated using Weblate (Spanish) * Translated using Weblate (Spanish) * Translated using Weblate (Spanish) * Translated using Weblate (Spanish) * Translated using Weblate (Romanian) * Translated using Weblate (Chinese (Taiwan) (zh_TW)) * Translated using Weblate (Chinese (China) (zh_CN)) * Translated using Weblate (Chinese (Taiwan) (zh_TW)) * Translated using Weblate (Chinese (China) (zh_CN)) * Translated using Weblate (Chinese (Taiwan) (zh_TW)) * Translated using Weblate (Chinese (China) (zh_CN)) * Translated using Weblate (Chinese (Taiwan) (zh_TW)) * Translated using Weblate (Chinese (China) (zh_CN)) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian)

1 0

openSUSE Release Engineering meeting 08.05.2024
by ddemaio openSUSE 08 May '24

08 May '24

How to join the meeting? https://calendar.opensuse.org/teams/release/events/opensuse-release-enginee… All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting ## Attendees DimStar, DocB,Adrian, BMWiedemann, Doug, mlin, Richard ## Leap (last week was busy LABS + MFF Job fair) openSUSE 15.6 RC was published last friday https://news.opensuse.org/2024/04/29/try-cockpit-in-leap-rc/ Podman was finally unforked in SLES (on Apr 30) so we'll have the 4.8.3 which fixes distrobox issues I am still unhappy about the desktop Wayland situation with chrome/flatpak apps. We have broken input switching, and annyoing flickering with NVIDIA. https://en.opensuse.org/openSUSE:Known_bugs_15.6 DocB: Testing of GNUHealth so far without issues, same for LXQt desktop, Onionshare to be tested Max: \o/ Leap 16 Shared concerns about the currently proposed schedule of SLES. Leap Micro 6.0 Need to revisit re-adding of RT flavor and re-check default registiries (SLE Micro limits it newly to only registry.suse.com) I'd like to transition to Beta next week. Look into registris-conf-suse has installed rather than registris-conf-default while building Leap-Micro image, it was about patterns-micro has a "Requires: (registries-conf-default if libcontainers-common)", patterns-micro has forked in openSUSE:Leap:Micro:6.0, and adjsuted the requirment. Agreement with Daniel Rahn, that we could get Leap Micro 6.X to public cloud. Lubos will sync up with Alex Osthof whether it would be possible. openSUSE Being part of community catalog in Azure (received a headsup in in discuss-opensuse on slack) Conversation with Alex Osthof -> Robert Scheweikert. Due to capacity, LeapMicro in clouds would be only taken care off as a low priority via a ticket in backlog. Public Cloud team seems to be pretty busy. ## openSUSE Tumbleweed (DimStar) openSUSE:Factory build fail stats: 61 failed 6 unresolvable (last week 55 failed, 1 unresolvable) https://tinyurl.com/ysy4nnnz 540 requests accepted in the last week Most relevant updates: * GNOME 46.1 * Linux Kernel Longterm 6.6.30 * Linux Kernel 6.8.8 soon: virtualbox brings KMPs for kernel-longterm Blocked: * util-linux 2.40 merging lastlog2. Causes QA failures (serial port prompt escape sequence changed, poo#159807) ### longer-lasting topics * GCC 14: second phase ongoing, use gcc14 as the default compiler (Staging:Gcc7) Advancing slowly * RPM 4.20 https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… (101 spec files left with this issue in Factory) * go1.22 as default go version, blocked on i586 with packages which export CGO_ENABLED=0 and go build -buildmode pie https://github.com/golang/go/issues/64875 (needs to update ~70 packages) traking at https://bugzilla.opensuse.org/show_bug.cgi?id=1221095 * dbus-broker as default dbus session manager, now everything builds, some openQA checks failing. ## Richard (Aeon+botmaster) tik has been rewritten from being a TUI-based installer to a GUI one Just completed the first test of tik 0.2.0 which is MVP feature complete - image based install (2-3minutes vs ~15 for Tumbleweed) - detects existing btrfs /home on the disk that it would be wiping over and offers to back it up and restore it - detailed logging with a single log for uploading to bug reports - fully-fledged Aeon-based GUI installer session, very nice for debugging Next step - writing a post hook to put the Aeon OS image inside the Aeon installer image ## Max Leap 15.6 - build stats in Backports: 13 failed(was 21), 1 unresolvable(was 3) * Published Build680.1 * oss repo installcheck result looks quite good * Forked umockdev in Backports for fix power-profiles-daemon build(umockdev does not released in any SLE15-SP6 module/extension) ## Guillaume - Arm Not available ## Sarah - s390x Not available ## Doug * Leap 15.6 * Article complete * Sent emails to community to help with translations * Community meetings *Contribution Workshops * Episode 8 - 12 all contacted * Likely to resume episodes during week of May 20 * GSoC * 11 Mentees selected * Coding begins May 28 * Mid-term evaluation July 8 - 12 * Sent out info about GSoC Summit to mentors * Items purchased for oSC and Summit * TSP requests * Tempory pause * Evaluating future execution based on 2x more requests * Matomo access restored (thx crameleon) * Community Summit * 28 Registrations, 18 Submissions * Approved talks (will send info to speakers ASAP) * openSUSE Conference * 136 Registrations * Schedule posted https://events.opensuse.org/conferences/oSC24/schedule * Need to provide info to Open 4 Business attendees Static * oSC24 dates June 27 to 29 reserved (Thursday - Saturday) * Open 4 Business June 26 between 2 - 6 p.m. at Franken Campus * AI topics (static) ## Dirk Not available ## Wolfgang (Package Hub), Scott Bahling no news ## Maintenance team (Marcus or Maurizio (m4u)) We need to publish at least empty repodata to https://download.opensuse.org/update/leap-micro/6.0/sle/ Otherwise I keep temporarily repo as disabled https://build.opensuse.org/projects/openSUSE:Leap:Micro:6.0/packages/openSU… ## Adrian - OBS change make for git managed build-counter of changes. ## Bernhard - Slowroll version bump done (20240405 => 20240429) plan for monthly cadence added logo https://www.reddit.com/r/openSUSE_Slowroll/comments/1cmygc3/logo_artwork/ need help with NET iso build in https://build.opensuse.org/project/show/openSUSE:Slowroll:Build:iso ## Bernhard - reproducible builds https://news.opensuse.org/2024/04/18/factory-bit-reproducible-builds/ ## Open Floor

1 0