July 2024 - openSUSE Factory - openSUSE Mailing Lists

New Tumbleweed snapshot 20240730 released!
by Dominique Leuenberger 31 Jul '24

31 Jul '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: NetworkManager apparmor (4.0.1 -> 4.0.2) b43-fwcutter clamav colord curl (8.8.0 -> 8.9.0) ffmpeg-4 ffmpeg-6 fprintd (1.94.2 -> 1.94.3) fwupd (1.9.21 -> 1.9.22) kernel-source (6.9.9 -> 6.10.2) libapparmor (4.0.1 -> 4.0.2) linux-glibc-devel (6.9 -> 6.10) mariadb-connector-c openSUSE-release (20240726 -> 20240730) openblas_openmp openblas_pthreads pciutils python-kiwi (10.0.25 -> 10.0.27) rubygem-nokogiri (1.15.5 -> 1.16.6) rubygem-ruby-augeas selinux-policy (20240715 -> 20240726) supermin systemd (255.8 -> 256.4) taglib (2.0 -> 2.0.1) virt-manager wtmpdb (0.12.0+git.20240508 -> 0.13.0+git.20240726) yast2 (5.0.8 -> 5.0.9) === Details === ==== NetworkManager ==== Subpackages: NetworkManager-bluetooth NetworkManager-lang NetworkManager-tui NetworkManager-wwan libnm0 typelib-1_0-NM-1_0 - Add NetworkManager-dont-renew-bridge-dhcp-if-no-mac-on-wakeup.patch: manager: don't renew dhcp lease when software devices' MAC is empty (bsc#1225498, glfd#NetworkManager/NetworkManager#1587). ==== apparmor ==== Version update (4.0.1 -> 4.0.2) Subpackages: apparmor-abstractions apparmor-docs apparmor-parser apparmor-parser-lang apparmor-profiles apparmor-utils apparmor-utils-lang python3-apparmor - update to AppArmor 4.0.2 - bugfix release with lots of fixes in all areas - add new userns profiles for balena-etcher, chromium and wike - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.0.2 for the detailed upstream changelog - drop upstream(ed) patches: - aa-remove-unknown-fix-unconfined.diff - logprof-mount-empty-source.diff - plasmashell.diff - sampa-rpcd-witness.diff - sddm-xauth.diff - teardown-unconfined.diff - test-aa-notify.diff - tools-fix-redefinition.diff - utils-relax-mount-rules-2.diff - utils-relax-mount-rules.diff - refresh GPG key (was expired) ==== b43-fwcutter ==== - Provide fallback in case %_firmwaredir is not defined ==== clamav ==== Subpackages: libclamav12 libclammspack0 libfreshclam3 - Add upstream 1305.patch to fix tests (boo#1102840, https://github.com/Cisco-Talos/clamav/issues/1300) ==== colord ==== Subpackages: colord-color-profiles colord-lang libcolord2 libcolorhug2 - Build -D_FILE_OFFSET_BITS=64 and -D_TIME_BITS=64 in order to avoid wrong type being passed to gmtime_r on i586 (and perhaps other 32bit targets). [boo#1228331] ==== curl ==== Version update (8.8.0 -> 8.9.0) Subpackages: curl-zsh-completion libcurl4 - Update to 8.9.0: * Security fixes: - [bsc#1227888, CVE-2024-6197] curl: freeing stack buffer in utf8asn1str - [bsc#1228260, CVE-2024-6874] idn: tweak buffer use when converting with macidn * Changes: - curl: add --ip-tos (IP Type of Service / Traffic Class) - curl: add --mptcp - curl: add --vlan-priority - curl: add -w '%{num_retries} - gnutls: support CA caching - mbedtls: support CURLOPT_CERTINFO - noproxy: patterns need to be comma separated - socket: support binding to interface *AND* IP - tcpkeepalive: add CURLOPT_TCP_KEEPCNT and --keepalive-cnt - urlapi: add CURLU_NO_GUESS_SCHEME - wolfssl: support CA caching * Bugfixes: - connection: shutdown TLS (for FTP) better - curl-config: revert to backticks to support old target envs - curl: allow etag and content-disposition for 3xx reply - curl: bsearch the --write-out variable name - curl: check for --disable case *sensitively* - doh: fix leak and zero-length HTTPS RR crash - file: separate fake headers and body with a stand-alone CRLF - ftp: remove redundant null pointer check in loop condition - gnutls: improve TLS shutdown - gnutls: pass in SNI name, not hostname when checking cert - hostip: skip error check for infallible function call - http/3: add shutdown support - http/3: resume upload on ack if we have more data to send - lib: add a few DEBUGASSERT(data) to aid code analyzers - lib: add failure reason on bind errors - lib: graceful connection shutdown - lib: xfer_setup and non-blocking shutdown - multi: add multi->proto_hash, a key-value store for protocol data - multi: do a final progress update on connect failure - multi: fix multi_wait() timeout handling - multi: fix pollset during RESOLVING phase - ngtcp2+quictls: fix cert-status use - noproxy: test bad ipv6 net size first - openssl/gnutls: rectify the TLS version checks for QUIC - openssl: fix hostname handling when using ECH - openssl: stop duplicate ssl key logging for legacy OpenSSL - quic: enable UDP GRO - quic: openssl quic, cmake and doc version update to 3.3.0 - quic: require at least OpenSSL 3.3 for QUIC - quic: update to quiche 0.22.0 - smtp: for starttls, do full upgrade - tool_operate: avoid explicitly setting verifypeer to 1 - tool_writeout: get certinfo only when needing it - transfer: avoid polling socket every transfer loop - transfer: conn close on paused upload - transfer: do not use EXPIRE_NOW while blocked - transfer: remove curl_upload_refill_watermark, no longer used - transfer: set CSELECT_IN if there is data pending - url: allow DoH transfers to override max connection limit - x509asn1: add some common ECDSA OIDs - x509asn1: ASN1tostr() should fail when 'constructed' is set - x509asn1: fallback to dotted OID representation - x509asn1: prevent NULL dereference - x509asn1: remove superfluous free() - x509asn1: remove two static variables * Rebase libcurl-ocloexec.patch * Remove curl-make-install-curl-config.patch upstream ==== ffmpeg-4 ==== Subpackages: libavcodec58_134 libavformat58_76 libavutil56_70 libpostproc55_9 libswresample3_9 libswscale5_9 - Add ffmpeg-c99.patch so that the package conforms to the C99 standard and builds on i586 with GCC 14. ==== ffmpeg-6 ==== Subpackages: libavcodec60 libavfilter9 libavformat60 libavutil58 libpostproc57 libswresample4 libswscale7 - Add ffmpeg-c99.patch so that the package conforms to the C99 standard and builds on i586 with GCC 14. - Add ffmpeg-6-CVE-2024-32230.patch: Backporting 96449cfe from upstream, Fix 1 line and one column images. (CVE-2024-32230 bsc#1227296) - Add ffmpeg-6-CVE-2024-32228.patch: Backporting 45964876 from upstream, Fix segfault on invalid film grain metadata. (CVE-2024-32228, bsc#1227277) - Add ffmpeg-6-CVE-2024-32228-shim-5d7f234e.patch: Backporting 5d7f234e from upstream, document that there can be multiple complex filtergraphs to prepare dependence code for CVE-2024-32228. (CVE-2024-32228, bsc#1227277) - Add ffmpeg-6-CVE-2024-32228-shim-f50382cb.patch: Backporting f50382cb from upstream, implement AFGS1 parsing. to prepare dependence code for CVE-2024-32228. (CVE-2024-32228, bsc#1227277) - Add ffmpeg-6-CVE-2024-32228-shim-1535d338.patch: Backporting 1535d338 from upstream, add AOM film grain synthesis, to prepare dependence code for CVE-2024-32228. (CVE-2024-32228, bsc#1227277) ==== fprintd ==== Version update (1.94.2 -> 1.94.3) Subpackages: fprintd-lang fprintd-pam - update to 1.94.3: * Don't try to clear storage on devices without internal storage * Build: Add option to use libelogind for DBus * Fixed loading external storage modules * Do not require bash to build (just posix sh) * Tests fixes for newer python, python-dbusmock and libfprint * Even more translation updates ==== fwupd ==== Version update (1.9.21 -> 1.9.22) Subpackages: fwupd-bash-completion fwupd-lang libfwupd2 typelib-1_0-Fwupd-2_0 - Update to version 1.9.22: + This release fixes the following bugs: - Add a PCB tag in the usi-dock GUID to distinguish different revisions. - Add explicit hidraw permission to fwupd.service to fix several devices. - Always load the flashrom plugin when using coreboot. - Be explicit with the rts54hub detach retry delay to fix the Acer D501. - Be more careful when setting thelio-io version strings. - Fix a critical warning if a device returns unexpected data from DFU upload. - Fix a critical warning if the DMI manufacturer is an empty string. - Fix several reported integer overflows from Coverity. - Fix the Blackbird and Talos II baseboard details. - Fix transient version number issue after flashing wacom-usb devices. - Increase the cros_ec acquiesce delay to manage additional reboots. - Only accept valid ASCII cabinet filenames. - Only require udevdir when gudev support is enabled. - Only show one PixArt receiver device per physical device. - Set the rts54hub version in more cases. - Speed up the daemon self tests by ~60%. - Use the bootloader build-timestamp as the fallback HWID BIOS version. + This release adds support for the following hardware: - Framework SD - Raspberry Pi 5 (unofficial) ==== kernel-source ==== Version update (6.9.9 -> 6.10.2) - Update patches.suse/drm-qxl-Pin-buffer-objects-for-internal-mappings.patch (bsc#1228387). Fix the bsc #. - commit 65a34e2 - drm/qxl: Pin buffer objects for internal mappings (bsc#1228388). - commit 691f036 - Linux 6.10.2 (bsc#1012628). - tap: add missing verification for short frame (bsc#1012628). - tun: add missing verification for short frame (bsc#1012628). - filelock: Fix fcntl/close race recovery compat path (bsc#1012628). - ALSA: seq: ump: Skip useless ports for static blocks (bsc#1012628). - ALSA: pcm_dmaengine: Don't synchronize DMA channel when DMA is paused (bsc#1012628). - arm64: dts: qcom: sm6115: Disable SS instance in Parkmode for USB (bsc#1012628). - arm64: dts: qcom: sdm845: Disable SS instance in Parkmode for USB (bsc#1012628). - arm64: dts: qcom: ipq8074: Disable SS instance in Parkmode for USB (bsc#1012628). - arm64: dts: qcom: sdm630: Disable SS instance in Parkmode for USB (bsc#1012628). - arm64: dts: qcom: ipq6018: Disable SS instance in Parkmode for USB (bsc#1012628). - arm64: dts: qcom: msm8998: Disable SS instance in Parkmode for USB (bsc#1012628). - arm64: dts: qcom: sm6350: Disable SS instance in Parkmode for USB (bsc#1012628). - arm64: dts: qcom: msm8996: Disable SS instance in Parkmode for USB (bsc#1012628). - arm64: dts: qcom: x1e80100-crd: Fix USB PHYs regulators (bsc#1012628). - arm64: dts: qcom: x1e80100-qcp: Fix the PHY regulator for PCIe 6a (bsc#1012628). - arm64: dts: qcom: x1e80100-crd: Fix the PHY regulator for PCIe 6a (bsc#1012628). - arm64: dts: qcom: qrb4210-rb2: switch I2C2 to i2c-gpio (bsc#1012628). - arm64: dts: qcom: qrb2210-rb1: switch I2C2 to i2c-gpio (bsc#1012628). - arm64: dts: qcom: x1e80100-qcp: Fix USB PHYs regulators (bsc#1012628). - arm64: dts: qcom: sc7280: Disable SuperSpeed instances in park mode (bsc#1012628). - arm64: dts: qcom: sc7180: Disable SuperSpeed instances in park mode (bsc#1012628). - ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 (bsc#1012628). - ALSA: hda/realtek: Enable headset mic on Positivo SU C1400 (bsc#1012628). - ALSA: hda/tas2781: Add new quirk for Lenovo Hera2 Laptop (bsc#1012628). - usb: gadget: midi2: Fix incorrect default MIDI2 protocol setup (bsc#1012628). - fs/ntfs3: Validate ff offset (bsc#1012628). - fs/ntfs3: Add a check for attr_names and oatbl (bsc#1012628). - jfs: don't walk off the end of ealist (bsc#1012628). - ocfs2: add bounds checking to ocfs2_check_dir_entry() (bsc#1012628). - s390/mm: Fix VM_FAULT_HWPOISON handling in do_exception() (bsc#1012628). - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (bsc#1012628). - commit d3b5079 - Revert "rpm/kernel-obs-build.spec.in: drop algif_hash from KERNEL_MODULES (bsc#1226463)" This reverts commit c9c2e244cf9031882276be043b882ccf33835a4f. Openssl was fixed: https://build.opensuse.org/request/show/1189541 - commit 178f0b6 - drm/amd/display: Take Synaptics Cascaded Topology into Account (bsc#1228093 #3495). - commit a4c3703 - Linux 6.10.1 (bsc#1012628). - thermal: core: Allow thermal zones to tell the core to ignore them (bsc#1012628). - io_uring: fix error pbuf checking (bsc#1012628). - ASoC: cs35l56: Limit Speaker Volume to +12dB maximum (bsc#1012628). - ASoC: cs35l56: Use header defines for Speaker Volume control definition (bsc#1012628). - tpm: Use auth only after NULL check in tpm_buf_check_hmac_response() (bsc#1012628). - cifs: Fix setting of zero_point after DIO write (bsc#1012628). - cifs: Fix server re-repick on subrequest retry (bsc#1012628). - cifs: fix noisy message on copy_file_range (bsc#1012628). - cifs: Fix missing fscache invalidation (bsc#1012628). - cifs: Fix missing error code set (bsc#1012628). - ext4: use memtostr_pad() for s_volume_name (bsc#1012628). - commit a57275a - Revert "drm/amd/display: FEC overhead should be checked once for mst slot nums" (bsc#1228093 #3495). - commit cee765e - update to 6.10 final - refresh configs (headers only) - commit b8b0277 ==== libapparmor ==== Version update (4.0.1 -> 4.0.2) - update to AppArmor 4.0.2 - bugfix release with lots of fixes in all areas - add new userns profiles for balena-etcher, chromium and wike - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.0.2 for the detailed upstream changelog - drop upstream(ed) patches: - aa-remove-unknown-fix-unconfined.diff - logprof-mount-empty-source.diff - plasmashell.diff - sampa-rpcd-witness.diff - sddm-xauth.diff - teardown-unconfined.diff - test-aa-notify.diff - tools-fix-redefinition.diff - utils-relax-mount-rules-2.diff - utils-relax-mount-rules.diff - refresh GPG key (was expired) ==== linux-glibc-devel ==== Version update (6.9 -> 6.10) - Update to kernel headers 6.10 ==== mariadb-connector-c ==== - Explicitly enable zstd support (new curl brings it in, and we want to ensure it to not be random): + Add pkgconfig(libzstd) BuildRequires: allow cmake to detect it. ==== openSUSE-release ==== Version update (20240726 -> 20240730) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== openblas_openmp ==== - Make sure the minimum CPU requirement set in the pkgconfig file is the same one as used for building. This also helps to maintain a reproducible build (boo#1228177). ==== openblas_pthreads ==== - Make sure the minimum CPU requirement set in the pkgconfig file is the same one as used for building. This also helps to maintain a reproducible build (boo#1228177). ==== pciutils ==== Subpackages: libpci3 - Synchronize SLE-15 and openSUSE:Factory [PED-8393, bsc#1224138]. The following patches are now obsolete in version 3.13.0: * lspci-Fixed-buffer-overflows-in-ls-tree.c.patch * pciutils-Add-PCIe-5.0-data-rate-32-GT-s-support.patch * pciutils-Add-PCIe-6.0-data-rate-64-GT-s-support.patch * pciutils-Add-decoding-of-vendor-specific-VPD-fields.patch * pciutils-VPD-Cleanup.patch * pciutils-VPD-When-printing-item-IDs-escape-non-ASCII-characte.patch ==== python-kiwi ==== Version update (10.0.25 -> 10.0.27) - Bump version: 10.0.26 â 10.0.27 - Fix dracut-interactive with systemd 256 With systemd 256, /usr (and thus also /bin/) is read-only in the initrd. Move dracut-interactive and its .service into /run instead. - Bump version: 10.0.25 â 10.0.26 - Revise scripts_testing.rst - Revise schema_extensions.rst - Pass kernel cmdline to agama In the agama integration test make sure to pass along the kernel boot parameters to allow controlling the behavior of agama better - Add <file> directive to incorporate custom files Usually custom files are managed by placing them as overlay files or archives. However, overlay files must be structured inside of a root/ subdirectory and archive files are binary data. It is therefore not straight forward to just reference one or more files as source files to the image description to be placed into the image. This commit adds a new <file> element which allows to do this. This Fixes #1953 ==== rubygem-nokogiri ==== Version update (1.15.5 -> 1.16.6) - 1.16.6: - update intree libxml2 copy (unused in our build) - update intree zlib copy (unused in our build) - [CRuby] `XML::Reader` sets the `@encoding` instance variable during reading if it is not passed into the initializer. Previously, it would remain `nil`. The behavior of `Reader#encoding` has not changed. This works around changes to how libxml2 reports the encoding used in v2.12.6. - [CRuby] `XML::Reader` defaults the encoding to UTF-8 if it's not specified in either the document or as a method parameter. Previously non-ASCII characters were serialized as NCRs in this case. [#2891] (@flavorjones) - [CRuby] Restored support for compilation by GCC versions earlier than 4.6, which was broken in v1.15.0 (540e9aee). [#3090] (@adfoster-r7) - [CRuby] Patched upstream libxml2 to allow parsing HTML5 in the context of a namespaced node (e.g., foreign content like MathML). [#3112, #3116] (@flavorjones) - [CRuby] Fixed a small memory leak in libgumbo (HTML5 parser) when the maximum tree depth limit is hit. [#3098, #3100] (@stevecheckoway) - Drop gcc14-allow-incompatible-pointer-types-for-now.patch - Added gcc14-allow-incompatible-pointer-types-for-now.patch: gcc 14 errors out on incompatible pointer types Allow those until https://github.com/sparklemotion/nokogiri/issues/3295 is fixed - Added only-complain-about-version-diff-if-it-is-older.patch boo#1202053 boo#1213999 boo#1203728 - limit ruby versions to 3.x - 1.16.0: This release introduces native gem support for Ruby 3.3. This release ends support for Ruby 2.7, for which [upstream support ended 2023-03-31](https://www.ruby-lang.org/en/downloads/branches/). [#]### Pattern matching This version marks _official support_ for the pattern matching API in `XML::Attr`, `XML::Document`, `XML::DocumentFragment`, `XML::Namespace`, `XML::Node`, and `XML::NodeSet` (and their subclasses), originally introduced as an experimental feature in v1.14.0. (@flavorjones) Documentation on what can be matched: * [`XML::Attr#deconstruct_keys`](https://nokogiri.org/rdoc/Nokogiri/XML/Attr.html?h=deconstruct#method-i-deconstruct_keys) * [`XML::Document#deconstruct_keys`](https://nokogiri.org/rdoc/Nokogiri/XML/Document.html?h=deconstruct#method-i-deconstruct_keys) * [`XML::Namespace#deconstruct_keys`](https://nokogiri.org/rdoc/Nokogiri/XML/Namespace.html?h=deconstruct+namespace#method-i-deconstruct_keys) * [`XML::Node#deconstruct_keys`](https://nokogiri.org/rdoc/Nokogiri/XML/Node.html?h=deconstruct#method-i-deconstruct_keys) * [`XML::DocumentFragment#deconstruct`](https://nokogiri.org/rdoc/Nokogiri/XML/DocumentFragment.html?h=deconstruct#method-i-deconstruct) * [`XML::NodeSet#deconstruct`](https://nokogiri.org/rdoc/Nokogiri/XML/NodeSet.html?h=deconstruct#method-i-deconstruct) [#]## Dependencies * [CRuby] Vendored libxml2 is updated to v2.12.3 from v2.11.6. (@flavorjones) * https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.12.0 * https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.12.1 * https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.12.2 * https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.12.3 [#]## Fixed * CSS `nth` pseudo-classes now handle spaces, e.g. `"2n + 1"`. [#3018] (@fusion2004) * [CRuby] `libgumbo` no longer leaks memory when an incomplete tag is abandoned by the HTML5 parser. [#3036] (@flavorjones) [#]## Removed * Removed `Nokogiri::HTML5.get` which was deprecated in v1.12.0. [#2278] (@flavorjones) * Removed the CSS-to-XPath utility modules `XPathVisitorAlwaysUseBuiltins` and `XPathVisitorOptimallyUseBuiltins`, which were deprecated in v1.13.0 in favor of `XPathVisitor` constructor args. [#2403] (@flavorjones) * Removed `XML::Reader#attribute_nodes` which was deprecated in v1.13.8 in favor of `#attribute_hash`. [#2598, #2599] (@flavorjones) * [CRuby] Removed the `libxml/libxml2_path` key from `VersionInfo`, used in the past for third-party library integration, in favor of the `nokogiri/cppflags` and `nokogiri/ldflags` keys. Please note that third-party library integration is not fully supported and may be deprecated soon, see #2746 for more context. [#2143] (@flavorjones) ==== rubygem-ruby-augeas ==== - Modify patch to also apply with -p1 COPYING.patch - Add gcc14.patch dont enforce the check until upstream can fix the code ==== selinux-policy ==== Version update (20240715 -> 20240726) Subpackages: selinux-policy-targeted - Update to version 20240726: * Allow snapper grub plugin to manage unlabeled_t and read link files - Update to version 20240725: * Initial policy for grub2 snapper plugin (bsc#1228205) - Update to version 20240716: * Set microos autorelabel script to systemd_autorelabel_generator_t * Allow systemd_generator to write kmsg * Initial policy for systemd growpart-generator (bsc#1226824) ==== supermin ==== - bsc#1228373 - supermin regression in Tumbleweed / Factory causes virt-inspector to fail add-rpm-database-location.patch - Drop disable-test-if-newer-ext2.patch ==== systemd ==== Version update (255.8 -> 256.4) Subpackages: libsystemd0 libsystemd0-32bit libudev1 systemd-32bit systemd-container systemd-lang udev - Import commit 5bba1ebe17564b606cc5d1c07b14123c305019a7 (merge of v256.4) For a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/bd8b5ee3cf0466b6b78e167967468cf… - Add 5004-disable-session-freeze.patch as a temporary workaround for https://github.com/systemd/systemd/issues/33083 - Add temporarily 5003-core-when-switching-root-remove-run-systemd-before-e.patch (bsc#1227580) - Don't mention any rpm macros inside comments, even if escaped (bsc#1228091) Otherwise pesign-obs-integration ends up re-packaging systemd with all macros inside comments unescaped leading to unpredictable behavior. Now why rpm expands rpm macros inside comments is the question... - Skip running the test units in %check for now. Some tests don't appreciate to run inside the build environment of OBS currently and some of them take an unexpected long time to execute on both risc and s390x architectures. - Make sure systemd-sysvcompat replaces systemd-sysvinit on upgrades (bsc#1218110) - Import commit bd8b5ee3cf0466b6b78e167967468cf6f93ec807 (merge of v256.2) For a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/dd15bf4f6430d8646e546ee0b980448… - varlinkctl is no more considered as experimental and has been moved to the main package. - Upgrade to v256.1 (commit dd15bf4f6430d8646e546ee0b980448c7d0c9699) See https://github.com/openSUSE/systemd/blob/SUSE/v256/NEWS for details. - Added pam.systemd-run0 ==== taglib ==== Version update (2.0 -> 2.0.1) Subpackages: libtag2 libtag_c2 - update to 2.0.1: * Fix aborting when _GLIBCXX_ASSERTIONS are enabled. * Fall back to utf8cpp header detection in the case that its CMake configuration is removed. * Improve compatibility with the SWIG interface compiler. * Build system fixes for testing without bindings, Emscripten and Illumos. * C bindings: Fix setting UTF-8 encoded property values. * Windows: Fix opening long paths. ==== virt-manager ==== Subpackages: virt-install virt-manager-common - bsc#1228227 - libvirt missing default hyperv options causes windows guest performance degredation. virtinst-add-hyperv-performance-options.patch ==== wtmpdb ==== Version update (0.12.0+git.20240508 -> 0.13.0+git.20240726) Subpackages: libwtmpdb0 - Update to version 0.13.0+git.20240726: * Release version 0.13.0 * Fix variable overflow and check for it (#15) ==== yast2 ==== Version update (5.0.8 -> 5.0.9) Subpackages: yast2-logs - Re-added missing error class (bsc#1227580) - 5.0.9

3 2

[opensuse-factory] RBOS and reproducible builds status 2024-07
by Bernhard M. Wiedemann 31 Jul '24

31 Jul '24

Hi, This month, I created several bugreports and patches, while working on the NLnet-funded project about creating a 100% bit-reproducible OS (RBOS) [1]. I also worked towards the bot that checks reproducibility of SRs to Factory. The prototype of the OBS-project-setup is in https://build.opensuse.org/project/show/home:bmwiedemann:reproducible:rebui… it already shows identical results with for r in j1 future1y openSUSE_Factory ; do osc api "/build/home:bmwiedemann:reproducible:rebuild/$r/x86_64/_repository?view=binaryversions" | grep libzzip ; done And different results with grep theunreproduciblepackage\\.rpm Additionally my reproducible-faketools got an overhaul to get rid of package-conflicts to make them even more versatile and useful, especially within OBS. They are now in Factory to allow easy testing in more places. Finally, I am happy to report that a bit-reproducible libreoffice is already in the devel-project. The Plan for RBOS: to reach the goal of a distribution that consists of 100% bit-reproducible packages, we need to address multiple issues. 1. newly unreproducible packages get submitted regularly and we need to test + notify these to slow down the introduction of new issues. A PoC works in https://build.opensuse.org/project/show/home:bmwiedemann:reproducible:rebui… by using a constant Release and distribution value, omitting disturl and adding in some variations via reproducible-faketools in the prjconf. TODO: This needs to be integrated in the workflows for staging + review of submissions to openSUSE:Factory. 2. Some (undroppable) existing packages have variations - several fixes were already submitted and more are to come. 3. Some packages built in OBS are modified by pesign to make them work with secure boot, e.g. grub2 and systemd - TODO - disable obs-pesign-integration? Build these outside of OBS as reference? Use a patched obs-pesign-integration version? 4. https://build.opensuse.org/project/show/home:bmwiedemann:reproducible:distr… is already setup and ring1 will come soon with more packages required to build a MinimalVM image or maybe even a DVD. The only open issue in ring0 is with pam:full pdf timestamps from xmlgraphics-fop. [1] https://nlnet.nl/project/Reproducible-openSUSE/ Here are the autogenerated bits: last month's status: https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… Last months' reproducible builds project updates (including my work): https://reproducible-builds.org/reports/2024-06/ I uploaded https://rb.zq1.de/compare.factory-20240731/ today https://rb.zq1.de/spec/glossar.txt explains the meaning of below values: total-packages: 15666 (+117) build-tried: 15602 (+111) build-failed: 13 (-9) build-n-a: 186 (-7) build-succeeded: 15403 (+127) build-official-failed+na: 25 (-14) build-compare-failed: 154 (+0) build-compare-succeeded: 15249 (+127) verify-failed: 249 (+15) verified-semi-reproducible: 14944 (+89) verified-bit-identical: 13591 (+46) bit-by-bit-identical: 14779 (+157) not-bit-by-bit-identical: 625 (-22) not-bit-by-bit-identicalcheck: 624 (-30) https://rb.zq1.de/compare.factory-20240731/graph.png shows the change over time https://rb.zq1.de/compare.factory-20240731/unreproduciblerings.txt lists very unreproducible core packages (bootstrap+DVD) Of the badly unreproducible packages, 3 were in ring0 31 were in ring1 That makes it 34/4043 => 0.84 % which is below the overall average of 154/15403 => 1.00 % 625/15403 => 4.06 % of packages are not perfectly reproducible package notes: ==> ./TeXmacs/.rb.notes <== => https://github.com/texmacs/texmacs/pull/77 date+time from `date` --- old /usr/libexec/TeXmacs/bin/texmacs.bin (objdump) ==> ./apache-arrow/.rb.notes <== OSC_BUILD_ROOT=/var/tmp/build-root.$slot osc build --noservice --vm-type=kvm --clean standard ==> ./armagetron/.rb.notes <== => SR 1188202 #=> https://gitlab.com/armagetronad/armagetronad/-/merge_requests/162 date ==> ./bcc/.rb.notes <== TODO - redo in luajit src/lj_asm_x86.h asm_href ; also for neovim = https://github.com/moonjit/moonjit/issues/110 report CPU-detection in moonjit ==> ./certgen/.rb.notes <== Go buildinf: - go1.23rc1 ==> ./clamav/.rb.notes <== => SR 1190176 = https://github.com/Cisco-Talos/clamav/issues/1300 FTBFS-2024-07-28 found range good=1722124782 bad=1722126706 ==> ./cloudflared/.rb.notes <== => SR 1188166 => https://github.com/cloudflare/cloudflared/pull/1289 date from `date` --- old /usr/bin/cloudflared (objdump) ==> ./dpdk/.rb.notes <== => SR 1185443 Sphinx doctrees regression ==> ./emacs/.rb.notes <== .pdmp from ["./temacs" "--__aslr-disabled" "-batch" "--no-build-details" "-l" "loadup" "--temacs=pdump" "--bin-dest" "/usr/bin/" "--eln-dest" "/usr/lib64/emacs/29.4/"] ==> ./fonttosfnt/.rb.notes <== => SR 1190278 => https://gitlab.freedesktop.org/xorg/app/fonttosfnt/-/merge_requests/22 toolchain, date ==> ./fractal/.rb.notes <== rust/llvm symbol order variation ==> ./gegl/.rb.notes <== => SR 1188550 = https://gitlab.gnome.org/GNOME/gegl/-/issues/337 parallelism, memory +++ new//usr/share/gir-1.0/Gegl-0.4.gir 2023-06-26 00:00:00.000000000 +0000 ==> ./gettext-runtime/.rb.notes <== => SR 1188059 1187694 jar mtime in /usr/lib64/gettext/gettext.jar = https://lists.gnu.org/archive/html/bug-gettext/2024-07/msg00020.html ==> ./gnutls/.rb.notes <== date in man - probably because patch updates mtime # filterdiff zcat R*/usr/share/man/man1/gnutls-cli.1.gz ==> ./gromacs/.rb.notes <== FTBFS-j1 failed - needs 4+ cores succeeds with parallelism=6 parallelism2=5 multibuildrbkall ==> ./helm/.rb.notes <== FTBFS-2028-04-05 2032-08-21 SSL ==> ./java-jwt/.rb.notes <== java/javadoc filesys (low-entropy) + strip-nd + other jar from ["/usr/lib64/jvm/java-21-openjdk-21/bin/java", "-classpath", "/usr/share/java/xmvn/xmvn-install.jar:/usr/share/java/xmvn/xmvn-api.jar:/usr/share/java/xmvn/xmvn-core.jar:/usr/share/java/beust-jcommander.jar:/usr/share/java/slf4j/api.jar:/usr/share/java/slf4j/simple.jar:/usr/share/java/objectweb-asm/asm.jar:/usr/share/java/commons-compress.jar:/usr/share/java/commons-io.jar", "org.fedoraproject.xmvn.tools.install.cli.InstallerCli", "-R", ".xmvn-reactor", "-n", "java-jwt", "-d", "/home/abuild/rpmbuild/BUILDROOT/java-jwt-3.8.3-0.x86_64"] ==> ./jaxen/.rb.notes <== post-processing modifies mtime in .jar /usr/bin/python3 /usr/share/java-utils/maven_depmap.py --pom-base /home/abuild/rpmbuild/BUILDROOT/jaxen-2.0.0-1.1.x86_64/usr/share/maven-poms --jar-base /home/abuild/rpmbuild/BUILDROOT/jaxen-2.0.0-1.1.x86_64/usr/share/java /home/abuild/rpmbuild/BUILDROOT/jaxen-2.0.0-1.1.x86_64/usr/share/maven-metadata/jaxen.xml /home/abuild/rpmbuild/BUILDROOT/jaxen-2.0.0-1.1.x86_64/usr/share/maven-poms/jaxen.pom /home/abuild/rpmbuild/BUILDROOT/jaxen-2.0.0-1.1.x86_64/usr/share/java/jaxen.jar ==> ./jmock/.rb.notes <== TODO: .jar javadoc jar from ["/usr/lib64/jvm/java-21-openjdk-21/bin/java", "-Dant.tstamp.now=1708473600", "-classpath", "/usr/share/java/ant.jar:/usr/share/java/ant-launcher.jar:/usr/share/java/ant/ant-junit.jar:/usr/share/java/junit.jar:/home/abuild/rpmbuild/BUILD/jmock-1.2.0/build/classes:/usr/share/java/cglib/cglib.jar:/usr/share/java/cglib/cglib-sample.jar", "-Dant.home=/usr/share/ant", "-Dant.library.dir=/usr/share/ant/lib", "org.apache.tools.ant.launch.Launcher", "-cp", "", "-Dant.build.javac.source=1.8", "-Dant.build.javac.target=1.8", "-Dbuild.sysclasspath=only", "package"] ==> ./kernel-source/.rb.notes <== doc variation from Sphinx -j auto ==> ./kf6-kirigami/.rb.notes <== = https://bugzilla.opensuse.org/show_bug.cgi?id=1228131 parallelism via /home/abuild/rpmbuild/BUILD/kirigami-6.4.0/build/src/dialogs/.rcc/qmlcache/KirigamiDialogs_PromptDialog_qml.cpp ==> ./kf6-qqc2-desktop-style/.rb.notes <== = https://bugzilla.opensuse.org/show_bug.cgi?id=1228131 qt6-declarative toolchain issue? parallelism? +++ /var/tmp/build-root.2b/.mount/home/abuild/rpmbuild/BUILD/qqc2-desktop-style-6.0.0/build/.rcc/qmlcache/org_kde_desktop_private_org.kde.desktop/private/CheckIndicator_qml.cpp 2040-04-14 03:00:38.066666668 +0000 ==> ./kubernetes1.26/.rb.notes <== => SR 1190449 random go tmp build path ==> ./lapackpp/.rb.notes <== => https://github.com/icl-utk-edu/lapackpp/pull/68 hostname in /usr/include/lapack/defines.h from cmake + defines.h.in ==> ./latex2html/.rb.notes <== => SR 1188512 nochecks cause variation => SR 1150775 drop latex log ==> ./ldns/.rb.notes <== [ 45s] ./libtool --tag=CC --quiet --mode=link gcc -DOPENSSL_API_COMPAT=10100 -fno-strict-aliasing -Wunused-function -Wstrict-prototypes -Wwrite-strings -W -Wall -O2 -Wall -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=3 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -Werror=return-type -flto=auto -g -fno-strict-aliasing -flto=auto examples/ldns-nsec3-hash.lo compat/b64_pton.lo compat/b64_ntop.lo libldns.la -lssl -lcrypto -o examples/ldns-nsec3-hash^M ==> ./libdb-4_8/.rb.notes <== => SR 1190247 1187675 /usr/share/java/db-4.8.30.jar mtimes from by pid=171773 dir=/home/abuild/rpmbuild/BUILD/db-4.8.30/build_nptl/classes exec="/usr/bin/jar", ["jar", "cfm", "../db.jar", "../../dist/../java/jarManifestEntries", "./com/sleepycat"] - started ==> ./libguestfs/.rb.notes <== minor /usr/share/doc/packages/rubygem-libguestfs/api/created.rid ==> ./librcc/.rb.notes <== => SR 1188204 #=> https://github.com/RusXMMS/librcc/pull/5 date --- old//usr/share/doc/packages/librcc-devel/examples/Makefile 2022-12-09 00:00:00.000000000 +0000 ==> ./libreoffice/.rb.notes <== => SR 1189287 = https://gerrit.libreoffice.org/q/topic:reprobuild clucene, .jar mtime, .zip mtime ==> ./libzypp/.rb.notes <== #= https://github.com/openSUSE/libzypp/issues/559 FTBFS-2038 stuck, bug osc build --noservice --vm-type=kvm --build-opt=--vm-custom-opt="-rtc base=2040-01-25T00:00:00" standard ==> ./llvm17/.rb.notes <== = https://github.com/llvm/llvm-project/issues/72206 Marvin investigates. Partially from ASLR - uninitialized memory? ==> ./maliit-keyboard/.rb.notes <== => SR 1185254 maliit-keyboard nocheck ==> ./mozilla-nss/.rb.notes <== = https://bugzilla.opensuse.org/show_bug.cgi?id=1081723 => https://bugzilla.mozilla.org/show_bug.cgi?id=1902078 = https://bugzilla.mozilla.org/show_bug.cgi?id=1813401 FTBFS-2023 ==> ./nautilus/.rb.notes <== => https://gitlab.gnome.org/GNOME/nautilus/-/merge_requests/1555 date from data/org.gnome.Nautilus.metainfo.xml.in.in: <release version="@release-version@" date="@build-date@"/> ==> ./neovim/.rb.notes <== = https://github.com/neovim/neovim/issues/26387 - maybe toolchain https://github.com/LuaJIT/LuaJIT/issues/1008 ==> ./newtonsoft-json/.rb.notes <== mono, random 20 byte ==> ./nodejs22/.rb.notes <== FTBFS-SSL: test/fixtures/x509-escaping/*pem expires 2031-12-18 ==> ./openblas/.rb.notes <== => SR 1190320 = https://bugzilla.opensuse.org/show_bug.cgi?id=1228177 CPU = https://bugzilla.opensuse.org/show_bug.cgi?id=1181083 FTBFS-j1 ==> ./openssl-1_0_0/.rb.notes <== verification issue ==> ./openssl-3/.rb.notes <== => SR 1187438 = https://bugzilla.opensuse.org/show_bug.cgi?id=1223336 random debugsource FTBFS-2035-07-02 ==> ./pop-launcher/.rb.notes <== parallelism ==> ./python-Django4/.rb.notes <== FTBFS-2038 ==> ./python-Sphinx/.rb.notes <== => https://github.com/sphinx-doc/sphinx/pull/12606 gzip mtime 0 0 0 0 0 1 ==> ./python-cfn-lint/.rb.notes <== FTBFS-2024-10-13 OSC_BUILD_ROOT=/var/tmp/build-root.$slot time osc build --noservice --vm-type=kvm --build-opt=--vm-custom-opt="-rtc base=2024-10-14T00:00:00" standard ==> ./python-contourpy/.rb.notes <== random: toolchain meson-py? ==> ./python-libcst/.rb.notes <== unknown rust/llvm /usr/lib64/python3.11/site-packages/libcst/native.cpython-311-x86_64-linux-gnu.so ==> ./python-paho-mqtt/.rb.notes <== FTBFS-j1 + SSL expired =https://github.com/eclipse/paho.mqtt.python/pull/854 found range 1783313692 -> 1783315617 ==> ./python-paramiko/.rb.notes <== FTBFS-CPU+j1 ==> ./python-pygraphviz/.rb.notes <== captures execution time ==> ./python-pysnmp/.rb.notes <== => https://github.com/lextudio/pysnmp/pull/35 FTBFS-2038 ==> ./python-pytest-mpi/.rb.notes <== FTBFS-j1 + CPU osc build --clean --vm-type=kvm -j1 --noservice --clean standard ==> ./python-python-datamatrix/.rb.notes <== FTBFS-j1 OSC_BUILD_ROOT=/var/tmp/build-root.$slot osc build --vm-type=kvm --clean -j1 --noservice standard ==> ./python-ruff/.rb.notes <== ASLR+checks/PID?, low-entropy? causes binary diff, size diff ==> ./python-spyder-notebook/.rb.notes <== = https://bugzilla.opensuse.org/show_bug.cgi?id=1228441 report FTBFS OSC_BUILD_ROOT=/var/tmp/build-root.$slot osc build --noservice --vm-type=kvm --clean -j4 standard ==> ./python310/.rb.notes <== PGO + other(:doc) ==> ./python311/.rb.notes <== => https://github.com/sphinx-doc/sphinxcontrib-devhelp/pull/13 gzip mtime => https://github.com/python/cpython/pull/121872 python311:doc date, partial ==> ./python313/.rb.notes <== = https://github.com/python/cpython/issues/122433 FTBFS-j1 OSC_BUILD_ROOT=/var/tmp/build-root.$slot time osc build --noservice --vm-type=kvm --clean standard ==> ./rabbitmq-server/.rb.notes <== FTBFS https://build.opensuse.org/package/show/network:messaging:amqp/rabbitmq-ser… ==> ./rmt-server/.rb.notes <== = https://bugzilla.opensuse.org/show_bug.cgi?id=1227542 date -/usr/lib64/rmt/vendor/bundle/ruby/3.3.0/gems/base32-0.3.4/lib/base32 0 (none) 40777 root root 0 4294967295 ==> ./samba/.rb.notes <== #= https://bugzilla.opensuse.org/show_bug.cgi?id=1225754 parallelism+ASLR --- /home/abuild/rpmbuild/BUILD/samba-4.20.1+git.335.0a46cdafe2/bin/default/source3/librpc/gen_ndr/py_smbXsrv.c 2024-05-31 03:19:30.679999998 +0000 ==> ./systemd/.rb.notes <== = https://bugzilla.opensuse.org/show_bug.cgi?id=1228091 pesign = https://bugzilla.opensuse.org/show_bug.cgi?id=1226200 FTBFS-2038 ==> ./tigervnc/.rb.notes <== minor jar mtimes ; from jar call #= https://bugzilla.opensuse.org/show_bug.cgi?id=1208478 RSA key ==> ./turbo/.rb.notes <== minor issue in /usr/lib64/libturbo-core.so ; ASLR Binary files /var/tmp/build-root.20/.mount/home/abuild/rpmbuild/BUILD/turbo-1715766145.697580e/build/CMakeFiles/turbo-core.dir/Unity/unity_0_cxx.cxx.o and /var/tmp/build-root.20b/.mount/home/abuild/rpmbuild/BUILD/turbo-1715766145.697580e/build/CMakeFiles/turbo-core.dir/Unity/unity_0_cxx.cxx.o differ ==> ./warzone2100/.rb.notes <== = https://github.com/BinomialLLC/basis_universal/issues/374 report parallelism = https://github.com/Warzone2100/warzone2100/issues/2991 report parallelism-dependent output ==> ./whatsie/.rb.notes <== date needs https://codereview.qt-project.org/gitweb?p=qt%2Fqtbase.git;a=commit;h=297fe… backported into libqt5-qtbase ==> ./wireplumber/.rb.notes <== parallelism: searchindex.js varies, toolchain python-Sphinx from ["/usr/bin/sphinx-build", "-q", "-E", "-j", "auto", "-d", "docs/html.p", "-c", "docs", "../docs/rst", "docs/html"] ==> ./xmobar/.rb.notes <== = https://bugzilla.opensuse.org/show_bug.cgi?id=1228175 ==> ./xorg-x11-fonts/.rb.notes <== => https://gitlab.freedesktop.org/xorg/app/fonttosfnt/-/merge_requests/22 toolchain fonttosfnt, -M=converted, ASLR, timestamp? = https://bugzilla.opensuse.org/show_bug.cgi?id=1173396 ASLR : x*3 uninit bytes 'checksum adjustment' ==> ./zola/.rb.notes <== unknown rust/llvm

1 0

What do I need to do to get VirtualBox 7.1.20 released. 7.1.0 is coming in 20 days.
by Larry Len Rainey 30 Jul '24

30 Jul '24

4 4

Switching to procps 4.0.x
by Thorsten Kukuk 30 Jul '24

30 Jul '24

Hi, As heads up: the last try to switch to procps 4.0.x two years ago got reverted since the sysctl output was incompatible to what applications did expect. Since this change got reverted upstream, we plan to give it a new try. Since other distributions, including Fedora, made this switch already, we don't expect any issues here. Thorsten -- Thorsten Kukuk, Distinguished Engineer, Senior Architect, Future Technologies SUSE Software Solutions Germany GmbH, Frankenstraße 146, 90461 Nuernberg, Germany Managing Director: Ivo Totev, Andrew McDonald, Werner Knoblich (HRB 36809, AG Nürnberg)

1 0

New Tumbleweed snapshot 20240725 released!
by Dominique Leuenberger 29 Jul '24

29 Jul '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: openSUSE-release (20240724 -> 20240725) === Details === ==== openSUSE-release ==== Version update (20240724 -> 20240725) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen

12 13

New package 'seergdb' for Factory
by Martin Schreiner 28 Jul '24

28 Jul '24

Hello, I'm submitting devel:tools/seergdb to openSUSE:Factory. SeerGDB is a modern, beautiful, useful GUI for GNU GDB written in modern C++. It's quite well maintained, and I think it'd be really useful as GDB's default interface won't be to everyone's liking. Devel package: https://build.opensuse.org/package/show/devel:tools/seergdb I'll take good care of it!

1 0

gstreamer-plugins-good-32bit disappeared from the tumbleweed oss repo
by JS 28 Jul '24

28 Jul '24

It has been disappeared since the beginning of this month. I have to install it from the multimedia:libs repo. Reported on bugzilla: https://bugzilla.opensuse.org/show_bug.cgi?id=1228176 Is there any hope to bring it back?

2 2

New Tumbleweed snapshot 20240726 released!
by Dominique Leuenberger 27 Jul '24

27 Jul '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: bind (9.18.27 -> 9.20.0) emacs gnutls (3.8.5 -> 3.8.6) kdump (2.0.7 -> 2.0.9) lua54 (5.4.6 -> 5.4.7) ncurses (6.5.20240629 -> 6.5.20240713) openSUSE-release (20240725 -> 20240726) openssl-3 powerdevil6 python-pyOpenSSL (24.1.0 -> 24.2.1) qemu (9.0.1 -> 9.0.2) rsyslog (8.2306.0 -> 8.2406.0) salt xdg-utils xfce4-screenshooter (1.10.6 -> 1.11.0) yast2-kdump (5.0.0 -> 5.0.1) === Details === ==== bind ==== Version update (9.18.27 -> 9.20.0) Subpackages: bind-doc bind-utils - Update to new major version 9.20.0 For a complete list of all changes see: * https://bind9.readthedocs.io/en/v9.20.0/notes.html * The CHANGES file in the source RPM Some noteworthy changes: * Added new BuildRequires liburcu for lock free data structures. * A new DNSSEC tool dnssec-ksr has been added to create Key Signing Request (KSR) and Signed Key Response (SKR) files. * /etc/bind.keys and /var/lib/named/named.root.key have been removed as the correct defaults are pre-compiled and there is no need to configure bind.keys manually. * The functions that were in the libbind9 shared library have been moved to the libisc and libisccfg libraries. The now-empty libbind9 has been removed and is no longer installed. * The irs_resconf module has been moved to the libdns shared library. The now-empty libirs library has been removed and is no longer installed. Security Fixes: * A malicious DNS client that sent many queries over TCP but never read the responses could cause a server to respond slowly or not at all for other clients. This has been fixed. (CVE-2024-0760) [bsc#1228255] * It is possible to craft excessively large resource records sets, which have the effect of slowing down database processing. This has been addressed by adding a configurable limit to the number of records that can be stored per name and type in a cache or zone database. The default is 100, which can be tuned with the new max-records-per-type option. * It is possible to craft excessively large numbers of resource record types for a given owner name, which has the effect of slowing down database processing. This has been addressed by adding a configurable limit to the number of records that can be stored per name and type in a cache or zone database. The default is 100, which can be tuned with the new max-types-per-name option. (CVE-2024-1737) [bsc#1228256] * Validating DNS messages signed using the SIG(0) protocol (RFC 2931) could cause excessive CPU load, leading to a denial-of-service condition. Support for SIG(0) message validation was removed from this version of named. (CVE-2024-1975) [bsc#1228257] * Due to a logic error, lookups that triggered serving stale data and required lookups in local authoritative zone data could have resulted in an assertion failure. This has been fixed. * Potential data races were found in our DoH implementation, related to HTTP/2 session object management and endpoints set object management after reconfiguration. These issues have been fixed. * When looking up the NS records of parent zones as part of looking up DS records, it was possible for named to trigger an assertion failure if serve-stale was enabled. This has been fixed. (CVE-2024-4076) [bsc#1228258] ==== emacs ==== Subpackages: emacs-el emacs-eln emacs-info emacs-nox etags - Use simple trusted members of the group games (boo#1228058) - Split off the emacs-games package for score handling (boo#1227737) - Implement setgid based score handling - The xauth patch should ignore any locking at read time as otherwise emacs server might hang - Provide support of ELPA systemwide installations to OBS ==== gnutls ==== Version update (3.8.5 -> 3.8.6) Subpackages: libgnutls-dane0 libgnutls30 libgnutls30-32bit - Update to 3.8.6: * libgnutls: PBMAC1 is now supported as a MAC mechanism for PKCS#12 To be compliant with FIPS 140-3, PKCS#12 files with MAC based on PBKDF2 (PBMAC1) is now supported, according to the specification proposed in draft-ietf-lamps-pkcs12-pbmac1. * libgnutls: SHA3 extendable output functions (XOF) are now supported SHA3 XOF, SHAKE128 and SHAKE256, are now usable through a new public API gnutls_hash_squeeze. * API and ABI modifications: - gnutls_pkcs12_generate_mac3: New function - gnutls_pkcs12_flags_t: New enum - gnutls_hash_squeeze: New function * Rebase patches: - gnutls-FIPS-140-3-references.patch - gnutls-FIPS-jitterentropy.patch ==== kdump ==== Version update (2.0.7 -> 2.0.9) - upgrade to version 2.0.9 * start kdump-early earlier using DefaultDependencies=no * fadump: avoid re-registration if kernel is hotplug ready * mkdumprd: use pbl to get default kernel version (boo#1226676) ==== lua54 ==== Version update (5.4.6 -> 5.4.7) - Update to version 5.4.7: * Fixed 11 bugs from 5.4.6 * Tests now run on shared libraries - Removed skip-tests_big-endian.patch: fixed upstream ==== ncurses ==== Version update (6.5.20240629 -> 6.5.20240713) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch 20240713 + modify misc/ncurses-config.in, improved match with pkg-config output. - Add ncurses patch 20240706 + update configure script to use macro changes from dialog. + modify CF_NCURSES_PTHREADS to avoid equating package and library names. ==== openSUSE-release ==== Version update (20240725 -> 20240726) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== openssl-3 ==== Subpackages: libopenssl3 libopenssl3-32bit libopenssl3-x86-64-v3 - Build with no-afalgeng [bsc#1226463] - Security fix: [bsc#1227138, CVE-2024-5535] * SSL_select_next_proto buffer overread * Add openssl-CVE-2024-5535.patch - Build with enabled sm2 and sm4 support [bsc#1222899] ==== powerdevil6 ==== Subpackages: powerdevil6-lang - Add patch to fix crash on display wake up (kde#490356, kde#490421): * 0001-daemon-Don-t-leave-dangling-Action-pointers-in-idle-.patch ==== python-pyOpenSSL ==== Version update (24.1.0 -> 24.2.1) - 24.2.1: * Deprecated OpenSSL.crypto.X509Req, OpenSSL.crypto.load_certificate_request, OpenSSL.crypto.dump_certificate_request. Instead, cryptography.x509.CertificateSigningRequest,s cryptography.x509.CertificateSigningRequestBuilder,s cryptography.x509.load_der_x509_csr,s or cryptography.x509.load_pem_x509_csr should be used. * Added type hints for the SSL module. #1308. * Changed OpenSSL.crypto.PKey.from_cryptography_key to accept public and private EC, ED25519, ED448 keys ==== qemu ==== Version update (9.0.1 -> 9.0.2) Subpackages: qemu-accel-tcg-x86 qemu-audio-spice qemu-block-curl qemu-block-nfs qemu-block-rbd qemu-chardev-spice qemu-guest-agent qemu-hw-display-qxl qemu-hw-display-virtio-gpu qemu-hw-display-virtio-gpu-pci qemu-hw-display-virtio-vga qemu-hw-usb-host qemu-hw-usb-redirect qemu-hw-usb-smartcard qemu-img qemu-ipxe qemu-ksm qemu-lang qemu-microvm qemu-pr-helper qemu-seabios qemu-tools qemu-ui-curses qemu-ui-gtk qemu-ui-opengl qemu-ui-spice-app qemu-ui-spice-core qemu-vgabios qemu-x86 - roms: Build ipxe with NO_WERROR=1 (bsc#1227960) - Update to version 9.0.2: Full list of backports here: https://lore.kernel.org/qemu-devel/1718081053.366429.1238758.nullmailer@tls… A selection of them is reported here too: hw/nvme: fix number of PIDs for FDP RUH update sphinx/qapidoc: Fix to generate doc for explicit, unboxed arguments char-stdio: Restore blocking mode of stdout on exit virtio: remove virtio_tswap16s() call in vring_packed_event_read() virtio-pci: Fix the failure process in kvm_virtio_pci_vector_use_one() tcg/optimize: Fix TCG_COND_TST* simplification of setcond2 block: Parse filenames only when explicitly requested iotests/270: Don't store data-file with json: prefix in image iotests/244: Don't store data-file with protocol in image qcow2: Don't open data_file with BDRV_O_NO_IO tests: add testing of parameter=3D1 for SMP topology (bsc#1228169) hw/core: allow parameter=3D1 for SMP topology on any machine ... ==== rsyslog ==== Version update (8.2306.0 -> 8.2406.0) - Upgrade to rsyslog 8.2406.0 -patches replaced by upgrade (see details in upgrade logs below) 0001-use-logind-instead-of-utmp-for-wall-messages-with-sy.patch * 2023-11-29: Revert "Update omlibdbi.c" * 2023-11-21: imkmsg: add params "readMode" and "expectedBootCompleteSeconds" * 2023-11-10: testbench: fix "typo" in test case * 2023-11-08: omazureeventhubs: Corrected handling of transport closed failures * 2023-10-31: imkmsg: add module param parseKernelTimestamp * 2023-11-03: imfile: remove state file on file delete fix * 2023-10-30: imklog bugfix: keepKernelTimestamp=off config param did not work * 2023-10-30: Netstreamdriver: deallocate certificate related resources * 2023-10-20: TLS subsystem: add remote hostname to error reporting * 2023-10-21: Fix forking issue do to close_range call * 2023-10-23: replace debian sample systemd service file by readme * 2023-10-20: testbench: bump zookeeper version to match current offering * 2023-10-20: Update rsyslog.service sample unit to the latest version used in Debian Trixie * 2023-10-20: Only keep a single rsyslog.service for Debian * 2023-10-20: Remove no longer used --with-systemdsystemunitdir configure switch * 2023-10-18: use logind instead of utmp for wall messages with systemd - replaces 0001-use-logind-instead-of-utmp-for-wall-messages-with-sy.patch * 2023-10-11: Typo fixes * 2023-10-11: Drop CAP_IPC_LOCK capability * 2023-10-04: Add CAP_NET_RAW capability due to the omudpspoof module * 2023-10-03: Add new global config option "libcapng.enable" * 2023-10-02: tcp net subsystem: handle data race gracefully * 2023-08-31: Avoid crash on restart in imrelp SIGTTIN handler * 2023-09-26: fix startup issue on modern systemd systems * 2023-09-14: Fix misspeling in message. * 2023-09-13: tcpflood bugfix: plain tcp send error not properly reported * 2023-09-12: omprog bugfix: Add CAP_DAC_OVERRIDE to the bounding set * 2023-08-02: testbench: cleanup and improve some more imfile tests * 2023-08-02: lookup tables: fix static analyzer issue * 2023-08-02: lookup tables bugfix: reload on HUP did not work when backgrounded * 2023-07-28: CI: fix and cleaup github workflow * 2023-03-07: imjournal: Support input module * 2023-07-28: testbench: make test more reliable * 2023-07-28: tcpflood: add -A option to NOT abort when sending fails * 2023-07-28: tcpflood: fix today's programming error * 2023-07-28: openssl: Replaced depreceated method SSLv23_method with TLS_method * 2023-07-27: testbench improvement: define state file directories for imfile tests * 2023-07-28: testbench: cleanup a test and some nitfixes to it * 2023-07-27: tcpflood bugfix: TCP sending was not implemented properly * 2023-07-26: testbench: make waiting for HUP processing more reliable * 2023-07-25: build system: make rsyslogd execute when --disable-inet is configured * 2023-07-25: CI: update zookeper download to newer version * 2023-07-10: ossl driver: Using newer INIT API for OpenSSL 1.1+ Versions * 2023-07-11: ossl: Fix CRL File Expire from 1 day to 100 years. * 2023-07-06: PR5175: Add TLS CRL Support for GnuTLS driver and OpenSSL 1.0.2+ * 2022-05-13: omazureeventhubs: Initial implementation of new output module * 2023-07-03: TLS CRL Support Issue 5081 * 2023-06-29: action.resumeintervalmax: the parameter was not respected * 2023-06-28: IMHIREDIS::FIXED:: Restore compatiblity with hiredis < v1.0.0 * 2023-05-15: Add the 'batchsize' parameter to imhiredis * 2023-06-28: Clear undefined behavior in libgcry.c (GH #5167) * 2023-06-22: Do not try to drop capabilities when we don't have any * 2023-06-22: testbench: use newer zookeeper version in tests * 2023-06-22: build system: more precise error message on too-old lib * 2023-05-17: Fix quoting for omprog, improg, mmexternal ==== salt ==== Subpackages: python3-salt salt-master salt-minion salt-transactional-update - Fix rich rule comparison in firewalld module (bsc#1222684) - Added: * firewalld-normalize-new-rich-rules-before-comparing-.patch ==== xdg-utils ==== - Separate xdg-screensaver into a subpackage to isolate Perl dependency (bsc#1216537). ==== xfce4-screenshooter ==== Version update (1.10.6 -> 1.11.0) Subpackages: xfce4-screenshooter-lang xfce4-screenshooter-plugin - Add BuildRequires to enable Wayland support. - Update to 1.11.0 * Drop built-in support for imgur * Drop jobs-related code * Drop libsoup dependency * Use XDG_DATA_HOME in imgur-upload.sh * Make sure screenshot is copied to clipboard before closing (!56) * Add more tests * build: clang: Silence -Wcast-align * Translation Updates ==== yast2-kdump ==== Version update (5.0.0 -> 5.0.1) - Do not suggest Kdump if Systemd-Boot is used. Kdump is not stable if Systemd-Bootloader is used. (bsc#1226676, bsc#1228242) - 5.0.1

1 0

Tumbleweed - Review of the weeks 2024/28 & 29 & 30
by Dominique Leuenberger 26 Jul '24

26 Jul '24

Dear Tumbleweed users and hackers, As I informed you in my last ‘weekly review’ (end of week 27 – so three weeks ago), I enjoyed some vacation time of my own and used it to recharge by entirely stepping away from computers. Of course, you did not notice anything, as Ana was there to steer the big Tumbleweed ship around and snapshots have been delivered constantly. for completeness, I will also include things that happened during my absence to give more continuity to the reports. During the weeks 28 – 30, 11 snapshots could be published (0705, 0708, 0709, 0710, 0711, 0712, 0714, 0715, 0716, 0722, 0724, and 0725). There was a larger gap between 0716 and 0722, as openQA detected some issues on Mesa and sdbootutil,. As we did not want you to suffer through those problems, snapshots were held back and the issues addressed. The most relevant changes included in those snapshots were: * Mesa 24.1.3 * Mozilla Firefox 127.0.2 & 128.0 * KDE Gear 24.05.2 * PHP 8.3.9 * Apache 2.4.61 * cmake 3.30.0 & 3.30.1 * NetworkManager 1.48.4 * Ruby 3.3.4 * SELinux 3.7 * Linux kernel 6.9.9 * KDE Frameworks 6.4.0 * KDE Plasma 6.1.3 * LibreOffice 24.2.5.2 * trasnactional-update 4.7.0: soft-reboot feature not yet enabled, as it takes a bit more time to get QA adjusted for this during the summer break Agama installer medium is generated as part of the snapshot. This is not yet the default installer, but you are invited to check out progress. ISOs are published in https://download.opensuse.org/tumbleweed/appliances/iso/ The staging projects are currently nicely filled; some things are passing tests already, and others will take a bit more time. But you deserve to know what’s brewing, namely: * gnutls 3.8.6 * Qemu 9.0.2 * Lua 5.4.7 * Systemd 256.4 * AppArmor 4.0.2 * Linux kernel 6.10.1 * cURL 8.9.0: breaks test suite of cmake * ffmpeg-7 as system default (currently ffmpeg-6). A big bunch of packages is still stuck on ffmpeg-4. * transactional-update: enable soft reboot; see https://microos.opensuse.org/blog/2024-06-13-soft-reboot/ * dbus-broker: some networking issue after upgrades left to work out * GCC 14: phase 2: use gcc14 as the default compiler – lots of help needed: https://build.opensuse.org/project/show/openSUSE:Factory:Staging:Gcc7 Cheers, Dominique

1 0

Buy Essays Online with Confidence at GoEssayWriter
by Aria Carter 26 Jul '24

26 Jul '24

Are you a student in search of a reliable place to [url=https://goessaywriter.com/buy-essay.html]essay writing help[/url]? Look no further than GoEssayWriter, your trusted source for high-quality essay writing services. At GoEssayWriter, we understand the demands of academic life and are here to support you with custom-written essays that meet your needs and exceed your expectations. Our team of expert writers is passionate about helping students achieve their full potential. When you buy an essay from GoEssayWriter, you're not just purchasing a paper—you're gaining a partner in your academic success. We take the time to understand your requirements, ensuring that each essay is tailored to your specific instructions and is delivered on time, every time. We pride ourselves on our commitment to originality and excellence. Every essay we provide is 100% plagiarism-free and is crafted with the utmost attention to detail. Our goal is to help you stand out in your studies, and we achieve this by delivering essays that are not only well-written but also deeply researched and thoughtfully argued. At GoEssayWriter, we believe that buying essays online should be a seamless and secure experience. That's why we offer a user-friendly platform, 24/7 customer support, and a satisfaction guarantee. We're here to answer your questions, address your concerns, and ensure that your experience with us is nothing short of exceptional. Whether you're in high school, college, or pursuing a postgraduate degree, GoEssayWriter is your go-to solution for all your essay-writing needs. Say goodbye to stress and hello to academic confidence. Buy essays online with GoEssayWriter today and take the first step toward a brighter academic future!

1 0