May 2024 - openSUSE Factory - openSUSE Mailing Lists

New Tumbleweed snapshot 20240506 released!
by Dominique Leuenberger 07 May '24

07 May '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: acl gnome-sudoku (46.0 -> 46.1) gtk4 (4.14.3 -> 4.14.4) mlterm openSUSE-release (20240505 -> 20240506) systemd-presets-branding-Aeon tracker (3.7.2 -> 3.7.3) tracker-miners (3.7.2 -> 3.7.3) === Details === ==== acl ==== Subpackages: libacl1 libacl1-32bit - BuildRequire gettext-devel instead of gettext-tools-mini: let OBS sort out if the -mini package is the right one to be used or not. ==== gnome-sudoku ==== Version update (46.0 -> 46.1) Subpackages: gnome-sudoku-lang - Update to version 46.1: + Hide the board during pause. + Add pause accelerator. + Add single key accelerator for undo, redo, and fullscreen. + Add accelerators for warnings (C-w) and highlighter (C-h). + Save fullscreen state on exit and add unfullscreen button. ==== gtk4 ==== Version update (4.14.3 -> 4.14.4) Subpackages: gtk4-lang gtk4-schema gtk4-tools libgtk-4-1 typelib-1_0-Gtk-4_0 - Update to version 4.14.4: + GtkGraphicsOffload: Don't crash without a child. + Icontheme: - Make symbolic svg loading more efficient. - Handle color-free symbolics more efficiently. + Accessibility: - Make the gtk-demo sidebar search more accessible. - Stop emitting focus events. + GDK: - Support XDG_ACTIVATION_TOKEN. - dmabuf: Be more defensive when importing unknown formats. - dmabuf: Use narrow range for YUV. + GSK: gpu: Handle tiny offscreens correctl. + Build: Fix many ubsan warning. + Updated translations. ==== mlterm ==== Subpackages: mlterm-common mlterm-fcitx mlterm-sdl2 - Build with -fpermissive to make buildable with gcc14 (boo#1223886) ==== openSUSE-release ==== Version update (20240505 -> 20240506) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== systemd-presets-branding-Aeon ==== - Enable x86_64_v3-transactional-update.service for automated refresh of x86_64_v3 optimised libraries. Service automatically does not run on non v3 systems. ==== tracker ==== Version update (3.7.2 -> 3.7.3) Subpackages: libtracker-sparql-3_0-0 tracker-data-files tracker-lang typelib-1_0-Tracker-3_0 - Update to version 3.7.3: + Bump database version to fix SQLite 3.45.3 issues in existing installs. + Fixed possible infinite loop on incomplete/unterminated Turtle/Trig data. ==== tracker-miners ==== Version update (3.7.2 -> 3.7.3) Subpackages: tracker-miner-files tracker-miners-lang - Update to version 3.7.3: + Fix possible crashes handling live changes to extractor configuration. + Make it easier to run tracker-extract-3 under Valgrind. + Plug a leak on misdetected JPEG files. + Many further metadata extraction tests.

1 0

New Tumbleweed snapshot 20240505 released!
by Dominique Leuenberger 06 May '24

06 May '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: 389-ds (3.0.1~git1.1f95b57 -> 3.0.1~git37.55529d1) glslang (14.1.0 -> 14.2.0) libgpg-error (1.48 -> 1.49) libnvme (1.8+0.gbff7dda -> 1.9+0.g80c5cf2) libqaccessibilityclient-qt6 (0.5.0 -> 0.6.0) libvirt (10.2.0 -> 10.3.0) nvme-cli (2.8 -> 2.9.1) openSUSE-release (20240503 -> 20240505) python-libvirt-python (10.2.0 -> 10.3.0) qt6-base rebootmgr (2.4 -> 2.4+git20240503.5b98913) sane-backends (1.2.1 -> 1.3.0) yast2-bootloader (5.0.9 -> 5.0.10) === Details === ==== 389-ds ==== Version update (3.0.1~git1.1f95b57 -> 3.0.1~git37.55529d1) Subpackages: lib389 libsvrcore0 - Update to version 3.0.1~git37.55529d1: * Issue 6082 - Remove explicit dependencies toward libdb - revert default (#6145) * Issue 6141 - freeipa test_topology_TestCASpecificRUVs is failing (#6144) * Issue 6142 - [RFE] Add LMDB configuration related checks into Healthcheck tool (#6143) * Issue 6136 - failure in freeipa tests (#6137) * Issue 6133 - Move slapi_pblock_set_flag_operation_notes() to slapi-plugin.h * Issue 5105 - lmdb - Cannot create entries with long rdn - fix covscan (#6131) * Issue i6057 - Fix3 - Fix covscan issues (#6127) * Issue 6105 - lmdb - Cannot create entries with long rdn (#6130) * Issue 6125 - dscreate interactive fails when chosing mdb backend (#6126) * Issue 6080 - ns-slapd crash in referint_get_config (#6081) * Issue 6110 - Typo in Account Policy plugin message * Issue 6057 - vlv search may result wrong result with lmdb - Fix 2 (#6121) * Issue 6119 - Synchronise accept_thread with slapd_daemon (#6120) * Issue 6117 - Fix the UTC offset print (#6118) * Issue 6112 - RFE - add new operation note for MFA authentications * Issue 5842 - Add log buffering to audit log * Issue 5305 - OpenLDAP version autodetection doesn't work * Issue 3527 - Support HAProxy and Instance on the same machine configuration (#6107) * Issue 6057 - vlv search may result wrong result with lmdb (#6091) * Issue 6103 - New connection timeout error breaks errormap (#6104) * Issue 6086 - Ambiguous warning about SELinux in dscreate for non-root user * Issue 6092 - passwordHistory is not updated with a pre-hashed password (#6093) * Issue 6067 - Improve dsidm CLI No Such Entry handling (#6079) * Issue 6096 - Improve connection timeout error logging (#6097) * Issue 5647 - covscan: memory leak in audit log when adding entries * Issue 6094 - Add coverity scan workflow * Issue 6067 - Add hidden -v and -j options to each CLI subcommand (#6088) * Issue 5487 - Fix various isses with logconv.pl (#6085) * Issue 5962 - Rearrange includes for 32-bit support logic * Issue 6046 - Make dscreate to work during kickstart installations * Issue 6082 - Remove explicit dependencies toward libdb (#6083) * Issue 6073 - Improve error log when running out of memory (#6084) * Issue 6071 - Instance creation/removal is slow * Issue 6010 - 389 ds ignores nsslapd-maxdescriptors (#6027) * Issue 6075 - Ignore build artifacts (#6076) * Issue 6068 - Add dscontainer stop function ==== glslang ==== Version update (14.1.0 -> 14.2.0) - Update to release 14.2 * Improve checking for location aliasing errors * Fix undefined behavior in parser * Add bounds check to gl_SampleMask * Fix alignment and padding of matrices consuming one vector * Remove duplicate SPIR-V decorations * Check for exponent overflow in float parser * Fix bug in relaxed verification rules * Fix bug when importing SPIR-V extended intruction set * Fix issues with the interaction of cooperative_matrix and spirv_intrinsics * Support SPV_QCOM_image_processing2 * Support files with UTF8BOM character ==== libgpg-error ==== Version update (1.48 -> 1.49) Subpackages: libgpg-error0 libgpg-error0-32bit - Update to 1.49: * Two new functions to improve the logging interface. The gpgrt_logv_domain is currently the same as gpgrt_logv_prefix but allows to pass a domain string so that in future we will be able to select log output by domain. It also provide a non yet functional feature to include a hex dump. * Add a "trunc" keyword to gpgrt_log_printhex. [rE0a39fbefcb] * Avoid an endless loop in the argparser due to a conf file read error. [rE2dc93cfecc] * Interface changes relative to the 1.48 release: - gpgrt_add_post_log_func NEW. - gpgrt_logv_domain NEW. * Release-info: https://dev.gnupg.org/T7012 ==== libnvme ==== Version update (1.8+0.gbff7dda -> 1.9+0.g80c5cf2) Subpackages: libnvme-mi1 libnvme1 - Update to version 1.9+0.g80c5cf2: * types: Added Command and Feature Lockdown LID * types: add ASQ, ACQ and BPMBL controller properties definitions * types: add controller properties enum documentation * types: fix CRTO.CRIMT mask value definition * tree: use strtou32 to read lba_size * types: Fix PMRWBM register name * examples: fix mi-mctp build warning errors * test: add CSTS.ST, CAP.CPS and CAP.NSSS registers * types: add CAP.CPS and CAP.NSSS definitions * types: add enum nvme_cap documentation * types: Add enum nvme_unit/cmbebs/cmbswtp/flbas/cmic documentation * util: Add string constant for ENVME_CONNECT_IGNORED * tests: Add sample NBFT table with mpath IPv4+IPv6 discovery * types: add controller status shutdown type (CSTS.ST) definition * types: Add enum nvme_csts documentation * types: Add NVME_CMIC definitions * types: Add CMBSWTP property definitions * types: Add NVME_CMBEBS property definitions * types: Fix boot partition read offset (BPROF) mask value * tree: fix mem leak in nvme_ns_init() (bsc#1223331) * fabrics: retry discovery log page when DNR is not set * ioctl: return EPROTO when an NVMe status occurred * linux: Allocate aligned payload for nvme_get_telemetry_log * test: use diff to compare sysfs output * tree: fix lba_count size calculation * tree: Add NVM subsystem controller identifier * test: Add unit test for nvme_id_ns_flbas_to_lbaf_inuse() * types: Fix NVME_CSTS_SHST_MASK definition * util: Fixed nvme_id_ns_flbas_to_lbaf_inuse() * types: Add optional data present filed mask and shift definition * types: Fix EOM header optional data present fields definition * libnvme : record the nvme pci adapter physical slot (bsc#1223208) * sysfs: minimize heap allocations of sysfs paths * json: Fix uninitialized variables * libnvme: add missing symbol nvme_scan_tls_keys * nbft: Whitespace fixes (bsc#1222026) * tests: Add complex NBFT table from Dell R660 (bsc#1222026) * tests: Adapt to added NBFT SSNS flags (bsc#1222026) * nbft: Add SSNS 'discovered' flag (bsc#1222026) * nbft: Add SSNS 'unavailable' flag (bsc#1222026) * doc: Document the NBFT API (bsc#1222026) * ioctl: Move nvme_cmd_dword_fields definitions into header file * types: Add PEL set feature event layout definitions * types: Fix enum nvme_pel_rci documentation error * types: Add boot partition information definitions * types: Add PEL header additional information definitions * fabrics: keyring is a long (bsc#1216982) * config-schema.json.in: tls keys and keyrings are strings (bsc#1216982) * linux: Add nvme_scan_tls_keys() (bsc#1216982) * json: dump TLS key data in PSK interchange format (bsc#1216982) * json: import TLS key from PSK interchange format (bsc#1216982) * json: export TLS key in PSK interchange format (bsc#1216982) * tree: read TLS key in nvme_configure_ctrl() (bsc#1216982) * linux: rework nvme_insert_tls_key_versioned() (bsc#1216982) * linux: add nvme_import_tls_key() (bsc#1216982) * linux: add nvme_export_tls_key() (bsc#1216982) * crc32: Add CRC32 algorithm (bsc#1216982) * linux: add nvme_update_key() (bsc#1216982) * linux: add nvme_read_key() (bsc#1216982) * linux: allow for NULL argument in nvme_lookup_keyring() (bsc#1216982) * log: Respect DEFAULT_LOGLEVEL on uninitialized logging * log: Introduce nvme_get_logging_level() * ioctl: remove incomplete debug logging infrastructure * ioctl: export nvme_submit_passthru{64} as weak symbol * log: move nvme_{set|get}_debug to log.c * fabrics: check the read() return value * types: Add PEL reporting context port identifier type definitions * types: Add persistent event log reporting context definitions - Upstream changed the sysfs test setup, thus sysfs test works in OSB * remove 0001-build-disable-sysfs-test.patch ==== libqaccessibilityclient-qt6 ==== Version update (0.5.0 -> 0.6.0) - Update to 0.6.0. No changelog. ==== libvirt ==== Version update (10.2.0 -> 10.3.0) Subpackages: libvirt-client libvirt-daemon-common libvirt-daemon-config-network libvirt-daemon-driver-interface libvirt-daemon-driver-libxl libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-lock libvirt-daemon-log libvirt-daemon-plugin-lockd libvirt-daemon-qemu libvirt-daemon-xen libvirt-libs - Update to libvirt 10.3.0 - Many incremental improvements and bug fixes, see https://libvirt.org/news.html#v10-3-0-2024-05-02 ==== nvme-cli ==== Version update (2.8 -> 2.9.1) Subpackages: nvme-cli-bash-completion nvme-cli-zsh-completion - Update to version 2.9.1: * plugins/spdk: drop the plugin - Update to version 2.9: * nvme-print: expand the maximum field length to prevent misalignment * plugins/spdk: plugin to list SPDK subsystems * nvme-print: check if controller belong to SPDK * plugins/spdk: plugin to list SPDK controllers * nvme-print-stdout: fix ASQB, ACQB and BMBBA prints * build: bump libnvme wrap * nvmf-autoconnect: fix string encoding * nvme: identify primary ctrl do not accept nsid * nvme-wrap: remove unused nvme_cli_get_log_ana_groups() * nvme-print-json: use admin queue attributes definitions * nvme-print-json: use CSTS definitions * nvme-print-stdout: use POWER_OF_TWO macro * nvme-print-json: use controller configuration definitions * nvme-print-json, nvme-print-stdout: add tertiary version number * nvme-print-json: use NVME_MAJOR and NVME_MINOR definitions * nvme-print-json: use NVME_BOOT_PARTITION_INFO field definitions * nvme-print-json: add support telemetry log create event in PEL * nvme-print-json: add support set feature event in PEL * nvme-print-json: add obj_d() function * nvme-print-json: add obj_add_uint_0nx() function * meson.build: Fix spelling of sed-opal.h filename * sed_opal: Only build when we really have sed_opal headers * nvme: fix error path if write() fails in get_telemetry_log() * plugins/solidigm: Additional LID for temperature statistics. * plugins/solidigm: Improved Solidigm UUID index detection. * nvme-print-stdout: Add CSTS.ST register stdout print * nvme-print-stdout: Use NVME_CMIC definitions * nvme-print: Use NVME_UNIT definitions * nvme-print-stdout: Use NVME_CMBMSC/STS/EBS/SWTP definitions * plugins/ssstc: add a new plugin for SSSTC driver * nvmf-connect: systemd hardening effort * plugins/ocp: Adjusted variable type size carrying UUID index to 8 bit. * nvme: fix security buffer allocation size * nvme: Change fw-download xfer initialization to set 0 * nvme: Add fw-download warning message for FWUG alignment error * plugins/ocp: Split ocp_get_uuid_index() into find and get functions. * nvme: fix mem leak in multiple key related functions (bsc#1223331) * fabrics: fix mem leak in nvmf_check_hostid_and_hostnqn() (bsc#1223331) * nvme-print-stdout: Use NVME_BPRSEL definitions * nvme-print-stdout: Use NVME_BPINFO definitions * nvme-print-stdout: Use NVME_CMBSZ definitions * nvme-print-stdout: Use NVME_CMBLOC definitions * Revert "logging: fix error handling for ioctl passthru wrappers" * fabrics: align identify command payload * ocp: Unify line start spacing as tabs * ocp: support OCP DSSD Async Event Config feature * nvme: Add support for get-reg and set-reg commands * nvme-print-json: Add register print functions * nvme-print-stdout: Add register print functions * nvme-print: Add register print functions * nvme: Refactor mmap_registers to add writable parameter * nvme-print: Change PMRSZU string function as unit string * nvme-print: Refactor CMBLOC and PMRSTS registers function * logging: fix error handling for ioctl passthru wrappers * nbft: Fix scandir() error check * nbft: Refactor connection attempt out * nvme-print: Use EOM optional data present macros changed * nvme-print: Print cntlid number for controller * nvme: check-tls-key fails despite having hostnqn file (bsc#1223331) * nvme: print retained key for gen-tls-key's -i option too (bsc#1223331) * fabrics : allow host to create duplicate connections to target * fabrics: Fix fast_io_fail_tmo option * nvme-print-stdout: use admin queue attributes definitions * nvme-print-stdout: use CSTS definitions * nvme-print-stdout: use controller configuration definitions * nvme-print-stdout: use NVME_MAJOR and NVME_MINOR definitions * nvme-print-stdout: use FDP configuration attributes definitions * nvme: add new function 'tls_key' * nvme: use library functions for importing and exporting TLS keys (bsc#1216982) * nvme: extend error message for ns scan failures * nvme-print-json: Bugfix status json key of sanitize-log * sed: update SED password when initalizing (bsc#1222168) * plugins/memblaze: add performance stats * plugins/memblaze: fix code mis-type error * plugins/memblaze: code refactor on applying __packed on more structs * plugins/memblaze: code refactor on using cleanup_nvme_dev * nvme: Fix to cleanup free raw_secret memory allocated * plugins/memblaze: code-format on leading indent and align * plugins/wdc: Fix narrow index variable type in for loop to __u32 * plugins/wdc: Whitespace changes * nvme: Delete unused nvme root scanned * ocp: support OCP 2.5 Set Telemetry Profile feature * nvme: Don't seg fault if given device is not char/block device * nbft: Include SSNS index in error messages (bsc#1222026) * nbft: Pause logging for expected connection failures (bsc#1222026) * nbft: Silence connection failures for unavailable SSNS (bsc#1222026) * nbft: Fix 'verbose' argument type (bsc#1222026) * plugins/nbft: Implement verbose logging * plugins/nbft: Print the new SSNS flags * nbft: Fix uninitialized variable * plugins/nbft: Fix uninitialized variables * plugins/sed: Fix uninitialized variable * nvme-print-stdout: Fix uninitialized variable * nvme-print-json: Fix uninitialized variable * build: Switch default meson buildtype to 'debugoptimized' * nvme: do not scan topology when mmaping registers ... changelog too long, skipping 53 lines ... * remove 0100-harden_nvmf-connect@.service.patch ==== openSUSE-release ==== Version update (20240503 -> 20240505) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== python-libvirt-python ==== Version update (10.2.0 -> 10.3.0) - Update to 10.3.0 - Add all new APIs and constants in libvirt 10.3.0 ==== qt6-base ==== Subpackages: libQt6Concurrent6 libQt6Core6 libQt6DBus6 libQt6Gui6 libQt6Network6 libQt6OpenGL6 libQt6OpenGLWidgets6 libQt6PrintSupport6 libQt6Sql6 libQt6Test6 libQt6Widgets6 libQt6Xml6 qt6-network-tls qt6-networkinformation-glib qt6-networkinformation-nm qt6-platformtheme-gtk3 qt6-printsupport-cups qt6-sql-mysql qt6-sql-sqlite - Add upstream security fix (CVE-2024-33861): * 0001-QStringConverterICU-Pass-correct-pointer-to-callback.patch ==== rebootmgr ==== Version update (2.4 -> 2.4+git20240503.5b98913) - Remove rcrebootmgr symlink - Update to version 2.4+git20240503.5b98913: * Don't generate html documentation anymore * Fix manual page dependencies for parallel build * Update configure.ac * Fix soft-reboot detection in forced mode ==== sane-backends ==== Version update (1.2.1 -> 1.3.0) Subpackages: libsane1 sane-backends-autoconfig - Updated to sane-backends version 1.3.0 * Backends + avision: - Correction for ADF presence detect which caused a hang. - Internationalised some text items in the backend to make them available for translation. + epsonds: - Some small changes to option documentation. - Added support for models: ES-C220, DS-C330, and DS-C490. + escl: - Fix for pwf:Version item. - Fix for crash in libjpeg when cropping image. - Fix for issue with configured device when AVAHI not running. - Fix for build without poppler-glib. + fujitsu: - Added support for Ricoh scanners: FI-8040, FI-70F. + genesys: - Added missing configuration for Plustek OpticFilm 7500i and Plustek OpticFilm 8100. + hpljm1005: - Fixes to maximum geometries and various cropping and geometry details specifically for the HP LaserJet M1005. + lexmark_X2670: - Added new backend for the Lexmark X26xx series of scanners. + pixma: - Fix to prevent mode change when source is selected. Mode should not change if still valid for source. - Added support for models: TS8630 Series, XK110 Series, GX3000 Series, GX4000 Series, G3070 Series, G2070 Series, G4070 Series, G3030 Series, G2030 Series, TC-20M, TC-5200M, TR4500 Series, TS8700 series, XK120 series, GX1000 series, GX2000 series, TS6630 series, TS7700 series, TS7600i series, TS6730 series, TR7800 series, TS7700i series, TS7700A series, GX6500 series, i-SENSYS MF750 Series + snapscan: - Corrections for Agfa ARCUS 1200 scan area. + test: - Fix for a crash in the backend. + xerox_mfp: - Added support for Dell 1135n, which is a clone of the Samsung SCX-4623F. - Added support for Xerox WorkCentre 3335. - Added JPEG mitigation for modules that don't properly support JPEG output: Xerox WorkCentre 3225 - Fix to remove USB CLEAR HALT during initialisation which can potentially lock up devices. - General fixes to support the SCX-4521F model. * Frontends + saned: - Default scan buffer is now 1MB. -B option added to permit the buffersize to be set. - Documentation fixes. + scanimage: - Fix for keyboard prompt processing - Default scan buffer is now 1MB. --buffer-size and -B options now require an argument to be provided. - Fix for PDF generation, missing newline in generated file. * Build + Fixes for clang-16 compiler + Fixes for FreeBSD build. + Fixes for escl build option involving poppler-glib. + Optionally take build version from ChangeLog if not other version source is available. + Fixes to autoconf files to remove unnecessary warnings from test logs. + Fix for macOS builds related to threading support: SANE in macOS doesn't work for multi-process with libusb. * Tools + sane-find-scanner: Added some Linux SCSI device names since some later potential names are missing. Better solution in the pipeline. * Documentation + Fixes for a number of man pages. + Added documentation for a number of Ricoh scanners which are rebranded products acquired from Fujitsu. * Miscellaneous + sanei_config: Fix for a potential crash. + New Georgian translation added. + Translations updated for: British English, Ukrainian, French and Simplified Chinese. ==== yast2-bootloader ==== Version update (5.0.9 -> 5.0.10) - Writing "root" entry into /etc/kernel/cmdline which is needed by sdbootutil. (still for bsc#1220892) - 5.0.10

1 0

What is pulling in *-lang packages?
by Stefan Seyfried 06 May '24

06 May '24

Hi all, I recently installed a new laptop with Tumbleweed instead of my old habit of just moving over the installed disk. Now I'm facing some issues that were not present before in my old installation. One of these issues is that something wants to pull in addiditonal -lang packages that I do not want: mixi:~ # zypper -v dup --no-recommends [...] The following 8 NEW packages are going to be installed: cpupower-lang 6.8.6-7.9 file-roller-lang 44.1-1.1 gcr-lang 4.3.0-1.1 gnome-online-accounts-lang 3.50.1-1.1 gtk3-lang 3.24.41-2.1 icewm-lang 3.4.5-3.1 pipewire-lang 1.0.4-3.1 xz-lang 5.6.1.revertto5.4-3.1 As you can see, I already added "--no-recommends" as every experienced user obviously always does, but the *-lang are still added. I can run "zypper al '*-lang'" to avoid this, but then it will never update the installed lang-packages, which is also not what I want. (I do not want translations for any command line tools and graphical stuff that has to be installed but I never actually use, but I do want translations for selected applications) The lock not breaking the update does show that these lang packages are only recommended and not required. But then why does "--no-recommends" not stop them from being installed? Best regards, -- Stefan Seyfried "For a successful technology, reality must take precedence over public relations, for nature cannot be fooled." -- Richard Feynman

14 40

Please check if your packages build (correctly) with GCC 14
by Martin Jambor 06 May '24

06 May '24

Hello, we would like to ask Factory package maintainers to help us to bring GCC 14 to Tumbleweed. Currently there are 766 packages that are known to fail to build with it in one way or another. If you want to see if your package is one of them, have a look at: https://build.opensuse.org/project/monitor/home:rguenther:plgrnd?arch_x86_6… In order to reproduce the build using GCC 14 locally, you can invoke osc with: osc -A https://api.opensuse.org build --alternative-project home:rguenther:nextgcc Most of the failures are going to be because GCC 14 by default treats as errors a number of situations which up to now only triggered warnings, such as implicit int types or implicit function declarations. There is a very nice document describing most likely way to fix these and other issues along with possible pitfalls at: https://gcc.gnu.org/gcc-14/porting_to.html Please note that the new errors can and unfortunately also do affect environment probing, especially with old autotools. So even when your package builds, it is advisable to check and/or compare config.log and/or config.h with compilation using GCC 13. It is always best to fix the new errors, but if your project is just written in pre-C99-standard C, you can simply use option -std=gnu89 to revert to previous behavior in this regard. In the unfortunate case that the C used is more "modern" but relies on the use of this newly erroneous behavior and there simply isn't enough time to fix it soon, you can turn the errors back to warnings with a new C option -fpermissive. In that case, please report a bug and make it depend on meta-bug boo#1220571. If you want to have a look whether and/or how people at Gentoo and Fedore already dealt with such issues in their corresponding package, you can check out: - https://bugs.gentoo.org/showdependencytree.cgi?id=870412&hide_resolved=0 - https://gitlab.com/fweimer-rh/fedora-modernc/ Of course, there may be also other issues with the new compiler, please use meta-bug boo#1220574 to track these. If you suspect the new compiler is to blame, please (double check and then) indicate so in the bug and we will try to help you. Thank you very much, Martin

3 2

ptrace disabled by default
by Johannes Segitz 06 May '24

06 May '24

Hello, with https://github.com/openSUSE/aaa_base/pull/138 ptrace got disabled by default on Tumbleweed by setting kernel.yama.ptrace_scope = 1 This means that you can't ptrace your own processes in the default configuration (e.g. use strace -p to attach to a running process). This was done because the vast majority of users don't need the funcionality and malware can abuse it to e.g. steal credentials. If you need this functionality (and since you read the list the chances are high) you can set kernel.yama.ptrace_scope back to the default value of 0 and get the old behavior back. Johannes -- GPG Key EE16 6BCE AD56 E034 BFB3 3ADD 7BF7 29D5 E7C8 1FA0 Subkey fingerprint: 250F 43F5 F7CE 6F1E 9C59 4F95 BC27 DD9D 2CC4 FD66 SUSE Software Solutions Germany GmbH, Frankenstraße 146, 90461 Nürnberg, Germany Geschäftsführer: Ivo Totev, Andrew McDonald, Werner Knoblich (HRB 36809, AG Nürnberg)

3 4

Re: gdk-pixbuf-2.42.11 causes programs using XPM icons to fail, e.g. gkrellm
by Manfred Hollstein 05 May '24

05 May '24

On Sun, 05 May 2024, 20:26:43 +0200, Patrick Shanahan wrote: > * Manfred Hollstein <mhollstein(a)t-online.de> [05-05-24 12:03]: > > On Sun, 05 May 2024, 17:03:51 +0200, Patrick Shanahan wrote: > > > * Manfred Hollstein <mhollstein(a)t-online.de> [05-05-24 05:08]: > > > > Sorry, for the double post - forgot to change the Subject. > > > > > > > > On Sat, 04 May 2024, 22:00:46 +0200, Dominique Leuenberger wrote: > > > > > [...] > > > > > ==== gdk-pixbuf ==== > > > > > Version update (2.42.10 -> 2.42.11) > > > > > Subpackages: gdk-pixbuf-lang gdk-pixbuf-query-loaders gdk-pixbuf-thumbnailer libgdk_pixbuf-2_0-0 typelib-1_0-GdkPixbuf-2_0 > > > > > > > > > > - Update to version 2.42.11: > > > > > + Disable fringe loaders by default. > > > > > + Introspection fixes. > > > > > + Updated translations. > > > > > > > > Are .xpm files fringe? With this update, gkrellm just fails to start > > > > because it uses .xpm files a lot. > > > > > > > > <https://bugzilla.opensuse.org/show_bug.cgi?id=1223903> > > > > > > > > The bugzilla also contains the fix I'm now using in my branched package. > > > > > > fwiw: it also breaks using createrepo for maintaining local repos. > > > > Are you sure? I use createrepo_c myself for all my local repos, but did > > not see an issue there. According to "rpm -q createrepo_c -R" it does > > not use any of the pixbuf related packages - I would be astonished if it > > would. > > > > What failure do you see? > > I got: > New and old repodata match, not updating. > > ran with -vvv and do not see problem and still fails > > removed ./repodata/ > and subsequent run was successful > > refreshed repos > added pkg to local repo and ran: > createrepo -u drktbl /data/work/ --update > and again see: > New and old repodata match, not updating. > > again remove ./repodata/ > and succeeds > > > I assume it has a problem comparing xml files due to gdk-pixbuf > > but ??? No, I would assume an issue with your download.opensuse.org mirrors. If you really think, I'd suggest you open another bugzilla for this! > tks, > -- > (paka)Patrick Shanahan Plainfield, Indiana, USA @ptilopteri Cheers. l8er manfred

1 0

Re: gdk-pixbuf-2.42.11 causes programs using XPM icons to fail, e.g. gkrellm
by Manfred Hollstein 05 May '24

05 May '24

On Sun, 05 May 2024, 17:03:51 +0200, Patrick Shanahan wrote: > * Manfred Hollstein <mhollstein(a)t-online.de> [05-05-24 05:08]: > > Sorry, for the double post - forgot to change the Subject. > > > > On Sat, 04 May 2024, 22:00:46 +0200, Dominique Leuenberger wrote: > > > [...] > > > ==== gdk-pixbuf ==== > > > Version update (2.42.10 -> 2.42.11) > > > Subpackages: gdk-pixbuf-lang gdk-pixbuf-query-loaders gdk-pixbuf-thumbnailer libgdk_pixbuf-2_0-0 typelib-1_0-GdkPixbuf-2_0 > > > > > > - Update to version 2.42.11: > > > + Disable fringe loaders by default. > > > + Introspection fixes. > > > + Updated translations. > > > > Are .xpm files fringe? With this update, gkrellm just fails to start > > because it uses .xpm files a lot. > > > > <https://bugzilla.opensuse.org/show_bug.cgi?id=1223903> > > > > The bugzilla also contains the fix I'm now using in my branched package. > > fwiw: it also breaks using createrepo for maintaining local repos. Are you sure? I use createrepo_c myself for all my local repos, but did not see an issue there. According to "rpm -q createrepo_c -R" it does not use any of the pixbuf related packages - I would be astonished if it would. What failure do you see? Cheers. l8er manfred

1 0

New Tumbleweed snapshot 20240502 released!
by Dominique Leuenberger 03 May '24

03 May '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MozillaFirefox (125.0.2 -> 125.0.3) SDL2 (2.30.2 -> 2.30.3) amarok (2.9.75git.20230408T114133~7098c192a6 -> 3.0.0) ca-certificates (2+git20230406.2dae8b7 -> 2+git20240415.3fe9324) cronie ed (1.20.1 -> 1.20.2) gcc14 (14.0.1+git10008 -> 14.0.1+git10154) gnome-browser-connector google-noto-fonts (20240401 -> 20240501) gpsd gstreamer kernel-firmware (20240419 -> 20240426) krb5 libbpf (1.4.0 -> 1.4.1) libreoffice (24.2.2.2 -> 24.2.3.2) nano (7.2 -> 8.0) ncurses (6.4.20240414 -> 6.5.20240427) openSUSE-release (20240430 -> 20240502) polkit-default-privs (1550+20240325.eddbe04 -> 1550+20240430.5327266) python-pygit2 python311 python311-core qemu (8.2.2 -> 8.2.3) re2 (20240401 -> 20240501) sac setools (4.5.0 -> 4.5.1) socat (1.7.4.3 -> 1.8.0.0) systemd yast2-bootloader (5.0.8 -> 5.0.9) yast2-installation (5.0.8 -> 5.0.9) === Details === ==== MozillaFirefox ==== Version update (125.0.2 -> 125.0.3) Subpackages: MozillaFirefox-translations-common - Mozilla Firefox 125.0.3 * Fixed: Fixed an extra blank tab with an address of `https://0.0.0.1` sometimes appearing when attempting to launch Firefox when it is already running (bmo#1892612). * Fixed: Fixed an issue that could cause incorrect font selection in some situations for users with the Japanese locale set (bmo#1892363). * Fixed: Fixed text corruption when dragging text containing unicode characters on Linux systems (bmo#1888202). * Fixed: Fixed a correctness error when checking `arguments.length` (and not using arguments otherwise) inside of a generator or async function (bmo#1892699). * Fixed: Fixed an issue that could lead to inconsistent focus handling of `<select>` elements when opened (bmo#1893177). - Fix build on Leap by requiring gcc13 which has been made available as an update. ==== SDL2 ==== Version update (2.30.2 -> 2.30.3) - Update to release 2.30.3 * Fixed a pointer warping issue on XWayland * Reduced startup time when scanning for game controllers on Linux ==== amarok ==== Version update (2.9.75git.20230408T114133~7098c192a6 -> 3.0.0) - Update to 3.0.0 * https://blogs.kde.org/2024/04/29/amarok-3.0-castaway-released/ - Drop patch, merged upstream: * 0001-Use-non-deprecated-TagLib-functions-fix-build-with-T.patch ==== ca-certificates ==== Version update (2+git20230406.2dae8b7 -> 2+git20240415.3fe9324) - Update to version 2+git20240415.3fe9324: * Add ca-certificates-setup.service * typo: differnt/different ==== cronie ==== Subpackages: cron - Remove safe-backup-permissions.patch -- Merged upstream - Update to 1.7.2: * crond: Revert setting the return path to <>. It is not RFC compliant. * crond: Inherit MAILFROM from the crond process environment. ==== ed ==== Version update (1.20.1 -> 1.20.2) - GNU ed 1.20.2: * Fix a bug that made global commands like 'g/x/s/x/x', with the last delimiter omitted, print every substituted line twice ==== gcc14 ==== Version update (14.0.1+git10008 -> 14.0.1+git10154) Subpackages: libasan8 libatomic1 libgcc_s1 libgcc_s1-32bit libgfortran5 libgomp1 libhwasan0 libitm1 liblsan0 libobjc4 libquadmath0 libstdc++6 libstdc++6-32bit libstdc++6-locale libstdc++6-pp libstdc++6-pp-32bit libtsan2 libubsan1 - Update to gcc-14 branch head, 7a00c459cbb913ac165a39d34, git10154 * GCC 14.1 RC1 ==== gnome-browser-connector ==== - remove dependency on /usr/bin/python3 using %python3_fix_shebang macro, [bsc#1212476] ==== google-noto-fonts ==== Version update (20240401 -> 20240501) Subpackages: google-noto-sans-fonts google-noto-sans-symbols-fonts google-noto-sans-symbols2-fonts - Update to 20240501 * Noto Rashi Hebrew - Corrects the width and position of marks under double-yud and double-vov - Improves the anchoring of yod - Adds the U+053F yod triangle character - Improves the spacing of tsadi * Noto Egyptian Hieroglyphs - Add codepoints from Unicode 14 ==== gpsd ==== - usage of %python3_fix_shebang to cover /usr/bin is also needed [bsc#1212476] ==== gstreamer ==== Subpackages: gstreamer-lang gstreamer-utils libgstreamer-1_0-0 typelib-1_0-Gst-1_0 - remove dependency on /usr/bin/python3 using %python3_fix_shebang_path macro, [bsc#1212476] ==== kernel-firmware ==== Version update (20240419 -> 20240426) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-ath12k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update to version 20240426 (git commit 2398d264f953): * amdgpu: DMCUB updates for various AMDGPU ASICs * linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops * i915: Update Xe2LPD DMC to v2.20 * linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 * linux-firmware: Add firmware for Lenovo Thinkbook 13X * ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop * amdgpu: add DMCUB 3.5 firmware * amdgpu: add VPE 6.1.0 firmware * amdgpu: add VCN 4.0.5 firmware * amdgpu: add UMSCH 4.0.0 firmware * amdgpu: add SDMA 6.1.0 firmware * amdgpu: add PSP 14.0.0 firmware * amdgpu: add GC 11.5.0 firmware * amdgpu: update license date ==== krb5 ==== Subpackages: krb5-32bit krb5-client - Remove requires for not used cron - Fix memory leaks, add patch 0009-Fix-three-memory-leaks.patch * CVE-2024-26458, bsc#1220770 * CVE-2024-26461, bsc#1220771 * CVE-2024-26462, bsc#1220772 ==== libbpf ==== Version update (1.4.0 -> 1.4.1) - update to 1.4.1: * Bug fix release fixing logic around determining whether to autoload SEC("struct_ops") programs in cases when old kernel doesn't support some optional callbacks and user reset them to NULL from BPF skeleton. ==== libreoffice ==== Version update (24.2.2.2 -> 24.2.3.2) Subpackages: libreoffice-base libreoffice-calc libreoffice-draw libreoffice-filters-optional libreoffice-gnome libreoffice-gtk3 libreoffice-icon-themes libreoffice-impress libreoffice-l10n-cs libreoffice-l10n-da libreoffice-l10n-de libreoffice-l10n-el libreoffice-l10n-en libreoffice-l10n-en_GB libreoffice-l10n-es libreoffice-l10n-fr libreoffice-l10n-hu libreoffice-l10n-it libreoffice-l10n-ja libreoffice-l10n-pl libreoffice-l10n-pt_BR libreoffice-l10n-ru libreoffice-l10n-zh_CN libreoffice-l10n-zh_TW libreoffice-mailmerge libreoffice-math libreoffice-pyuno libreoffice-qt5 libreoffice-writer libreofficekit - Update to 2.4.3.2 (24.2.3 final) https://wiki.documentfoundation.org/Releases/24.2.3/RC1 and https://wiki.documentfoundation.org/Releases/24.2.3/RC2 ==== nano ==== Version update (7.2 -> 8.0) Subpackages: nano-lang - GNU nano 8.0: * By default ^F is bound to starting a forward search, and ^B to starting a backward search, while M-F and M-B repeat the search in the corresponding direction. (See the documentation if you want the old bindings back.) * Command-line option --modernbindings (-/) makes ^Q quit, ^X cut, ^C copy, ^V paste, ^Z undo, ^Y redo, ^O open a file, ^W write a file, ^R replace, ^G find again, ^D find again backwards, ^A set the mark, ^T jump to a line, ^P show the position, and ^E execute. * Above modern bindings are activated also when the name of nano's executable (or a symlink to it) starts with the letter "e". * To open a file at a certain line number, one can now use also nano filename:number, besides nano +number filename. * <Alt+Home> and <Alt+End> put the cursor on the first and last row in the viewport, while retaining the horizontal position. * When the three digits in an #RGB color code are all the same, the code is mapped to the xterm grey scale, giving access to fourteen levels of grey instead of just four. * For easier access, M-" is bound to placing/removing an anchor, and M-' to jumping to the next anchor. * Whenever an error occurs, the keystroke buffer is cleared, thus stopping the execution of a macro or a string bind. * The mousewheel scrolls the viewport instead of moving the cursor. ==== ncurses ==== Version update (6.4.20240414 -> 6.5.20240427) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Update to ncurses 6.5 (patch 20240427) + update announcement + fixes/corrections for manpages (patches by Branden Robinson). + fix redefinition of CASTxPTR, for legacy Unix. - Update to tack 1.9 (patch 20230201) * configure: regen * configure.in: initialize $ac_includes_default s/fgrep/$FGREP/ * aclocal.m4: resync with my-autoconf - Add ncurses patch 20240420 + improve formatting/style of manpages (patches by Branden Robinson). + compiler warning/portability fixes. ==== openSUSE-release ==== Version update (20240430 -> 20240502) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== polkit-default-privs ==== Version update (1550+20240325.eddbe04 -> 1550+20240430.5327266) - Update to version 1550+20240430.5327266: * profiles: whitelist dnf5daemon-server (bsc#1218327) * profiles: remove pseudo auth action kcmkwallet5 (bsc#1217190) ==== python-pygit2 ==== - Fix build with gcc 14 * Fix-CI.patch * Fix-leaks-in-fetch_refspecs-and-push_refspecs.patch ==== python311 ==== Subpackages: python311-curses python311-dbm python311-x86-64-v3 - Update CVE-2023-52425-libexpat-2.6.0-backport.patch so that it uses features sniffing, not just comparing version number. Include also support-expat-CVE-2022-25236-patched.patch. - Add CVE-2023-52425-remove-reparse_deferral-tests.patch skipping failing tests. - Refresh patches: - CVE-2023-27043-email-parsing-errors.patch - fix_configure_rst.patch - skip_if_buildbot-extend.patch - Remove included patch: - support-expat-CVE-2022-25236-patched.patch ==== python311-core ==== Subpackages: libpython3_11-1_0 libpython3_11-1_0-x86-64-v3 python311-base python311-base-x86-64-v3 - Update CVE-2023-52425-libexpat-2.6.0-backport.patch so that it uses features sniffing, not just comparing version number. Include also support-expat-CVE-2022-25236-patched.patch. - Add CVE-2023-52425-remove-reparse_deferral-tests.patch skipping failing tests. - Refresh patches: - CVE-2023-27043-email-parsing-errors.patch - fix_configure_rst.patch - skip_if_buildbot-extend.patch - Remove included patch: - support-expat-CVE-2022-25236-patched.patch ==== qemu ==== Version update (8.2.2 -> 8.2.3) Subpackages: qemu-accel-tcg-x86 qemu-audio-spice qemu-block-curl qemu-block-nfs qemu-block-rbd qemu-chardev-spice qemu-guest-agent qemu-hw-display-qxl qemu-hw-display-virtio-gpu qemu-hw-display-virtio-gpu-pci qemu-hw-display-virtio-vga qemu-hw-usb-host qemu-hw-usb-redirect qemu-hw-usb-smartcard qemu-img qemu-ipxe qemu-ksm qemu-lang qemu-microvm qemu-pr-helper qemu-seabios qemu-tools qemu-ui-curses qemu-ui-gtk qemu-ui-opengl qemu-ui-spice-app qemu-ui-spice-core qemu-vgabios qemu-x86 - Fix a build issue on riscv: * target/riscv/kvm: rename riscv_reg_id() to riscv_reg_id_ulong() * target/riscv/kvm: add RISCV_CONFIG_REG() * target/riscv/kvm: change timer regs size to u64 * target/riscv/kvm: change KVM_REG_RISCV_FP_D to u64 * target/riscv/kvm: change KVM_REG_RISCV_FP_F to u32 - Update to version 8.2.3. Full changelog/backports here: https://lore.kernel.org/qemu-devel/1713980341.971368.1218343.nullmailer@tls… Some of the upstream backports are: * Update version for 8.2.3 release * ppc/spapr: Initialize max_cpus limit to SPAPR_IRQ_NR_IPIS. * ppc/spapr: Introduce SPAPR_IRQ_NR_IPIS to refer IRQ range for CPU IPIs. * hw/pci-host/ppc440_pcix: Do not expose a bridge device on PCI bus * hw/isa/vt82c686: Keep track of PIRQ/PINT pins separately * virtio-pci: fix use of a released vector * linux-user/x86_64: Handle the vsyscall page in open_self_maps_{2,4} * hw/audio/virtio-snd: Remove unused assignment * hw/net/net_tx_pkt: Fix overrun in update_sctp_checksum() * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set * hw/net/lan9118: Fix overflow in MIL TX FIFO * hw/net/lan9118: Replace magic '2048' value by MIL_TXFIFO_SIZE definition * backends/cryptodev: Do not abort for invalid session ID * hw/misc/applesmc: Fix memory leak in reset() handler * hw/block/nand: Fix out-of-bound access in NAND block buffer * hw/block/nand: Have blk_load() take unsigned offset and return boolean * hw/block/nand: Factor nand_load_iolen() method out * qemu-options: Fix CXL Fixed Memory Window interleave-granularity typo * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs * ...and many more... ==== re2 ==== Version update (20240401 -> 20240501) - update to 2024-05-01: * Stop setting re2_INCLUDE_DIR * Fixes related to python bindings ==== sac ==== - Clean the spec file a bit ==== setools ==== Version update (4.5.0 -> 4.5.1) Subpackages: python311-setools setools-console - Update to version 4.5.1: - Correct annotations of NetworkX types to make it optional again. - Fix packaging issue for apol's style sheet (apol.css). - Drop 0001-Make-networkx-optional-again-Fixes-125.patch fixed upstream - Change networkx Requires to Suggests ==== socat ==== Version update (1.7.4.3 -> 1.8.0.0) - Update to 1.8.0.0: * Support for network namespaces (option netns) * TCP client now automatically tries all addresses (IPv4 and IPv6) provided by nameserver until success * Implementation of POSIX message queue (mq) control and access on Linux (addresses POSIXMQ-READ and following) * New wrapper script socat-chain.sh allows to stack two addresses, e.g.HTTP proxy connect over SSL * New script socat-mux.sh allows n-to-1 / 1-to-n communications * New script socat-broker.sh allows group communications * Experimental socks5 client feature * Address ACCEPT-FD for systemd "inetd" mode * UDP-Lite and DCCP address types * Addresses SOCKETPAIR and SHELL * New option bind-tmpname allows forked off children to bind UNIX domain client sockets to random unique pathes * New option retrieve-vlan (with INTERFACE addresses) now makes kernel keep VLAN tags in incoming packets * Simple statistics output with Socat option --statistics and with SIGUSR1 * A couple of new options, many fixes and corrections, see file CHANGES - Drop socat-common-fixes.patch (no longer necessary) - Refactor socat-ignore-tests-failure-boo1078346.patch (test suite no longer exits at this stage) - Add socat-test-dhparam fixture (reduce build load and time) - Add socat-test-without-tty.patch for testing without tty. - Note: This version introduces "socat1", linking to "socat" - Note: This version introduces additional shell scripts, those are shipped in a new "socat-extra" subpackage - Update to 1.7.4.4: * FIX: InÂ error.cÂ msg2()Â thereÂ wasÂ aÂ stackÂ overflowÂ onÂ longÂ messages:Â The terminatingÂ \0Â ByteÂ wasÂ writtenÂ behindÂ theÂ lastÂ position. * FIX: UDP-RECVFROMÂ withÂ forkÂ sometimesÂ terminatedÂ whenÂ multipleÂ packets arrived. * FIX:Â aÂ coupleÂ ofÂ weaknessesÂ andÂ errorsÂ whenÂ accessingÂ invalidÂ or Â incompatibleÂ fileÂ systemÂ entriesÂ withÂ UNIXÂ domain,Â file,Â andÂ generic addresses. * FIX:Â badÂ parserÂ errorÂ messageÂ onÂ "socatÂ /tmp/x\"x/xÂ -" - Drop socat-fix-asan-error.patch ==== systemd ==== Subpackages: libsystemd0 libsystemd0-32bit libudev1 systemd-32bit systemd-boot systemd-container systemd-coredump systemd-experimental systemd-lang udev - Update 0008-sysv-generator-translate-Required-Start-into-a-Wants.patch to adapt sysv-generator-test to the SUSE's specificity brought by this patch. - systemd-testsuite: some of the integration tests depend on the bin, daemon, games and nobody users/groups. - Drop _FORTIFY_SOURCE=2 workaround. Since commit 7929e180aa (v253) it shouldn't be needed anymore. - systemd.spec: preparation for the next version of systemd (i.e. v256), libkmod2 will be dlopened hence explicitly require it now as it doesn't hurt with the current version. However don't recommend it from systemd by assuming that when module loading from PID1 is needed, udev is installed. - Make systemd-doc subpackage noarch. ==== yast2-bootloader ==== Version update (5.0.8 -> 5.0.9) - Creating kernel options for systemd-boot. (bsc#1220892) - 5.0.9 ==== yast2-installation ==== Version update (5.0.8 -> 5.0.9) - Handle SystemdBoot mitigations. (bsc#1220892) - 5.0.9

1 0

Re: ptrace disabled by default
by Mihai Moldovan 03 May '24

03 May '24

* On 5/3/24 14:44, Carlos E. R. wrote: > Does this need recompiling? > > Is it a boot option only, or can it be done after the system is booted? It's a sysctl setting that can be modified at run time. Mostly. Unless you set its value to "3", at which point it'll stick and can't be modified again. More information, as usual, in the kernel documentation: https://www.kernel.org/doc/Documentation/security/Yama.txt Mihai

1 0

Tumbleweed - Review of the weeks 2024/17 & 18
by Dominique Leuenberger 03 May '24

03 May '24

Dear Tumbleweed users and hackers, Last week, I was attending the SUSE Labs Conference last week and had to skip writing the weekly review. As many SUSE devs were there too, the expectation was to get fewer changes anyway during week 17. Consequently, I am spanning two weeks again today and will be covering the nine snapshots (0419, 0421, 0423, 0425…0430) released during this period. The most relevant changes delivered were: * Linux kernel 6.8.7 & 6.8.8 * SETools 4.5.0 * libxml 2.12.6 * LLVM 18.1.4 * Python 3.11.9 & 3.12.3 * Mesa 24.0.5 * Mozilla Firefox 125.0.2 * SQLite 3.45.3 Having some engineers together at the Labs Conference also allowed them to directly exchange ideas and work on some of the things in staging. Simon and I have worked on dbus-broker and made some good progress, but we have not yet reached the end goal. Similarly for other things in the staging areas. The most interesting changes being prepared are: * Mozilla Firefox 125.0.3 * LibreOffice 24.2.3.2 * QEmu 8.2.3 * GNOME 46.1 * Ninja 1.12.0 * util-linux 2.40 * Ruby 3.3.1 * dbus-broker: some networking issue after upgrades left to work out * GCC 14: phase 2: use gcc14 as the default compiler – lots of help needed: https://build.opensuse.org/project/show/openSUSE:Factory:Staging:Gcc7 Cheers, Dominique

1 0