July 2024 - openSUSE Factory - openSUSE Mailing Lists

Tumbleweed - Review of the weeks 2024/26 & 27
by Dominique Leuenberger 07 Jul '24

07 Jul '24

Dear Tumbleweed users and hackers, My excuse to span two weeks in this report is quite simple: last week was the openSUSE Conference in Nuremberg and I spent my time talking to all the fun people from the community instead. And I am sure you are forgiving me for this. With the conference in full swing and weekends in between, it is quite amazing that the release Team (mostly Ana these days) still managed to produce and publish 12 snapshots (0620, 0621, 0622, 0624, 0625, 0627, 0628, 0629, 0701, 0702, 0703, and 0704) The most relevant changes from these snapshots include: * GDB 14.2 * MariaDB 11.4.2 * Mesa: work around broken graphics on ATI/AMD chipsets, Version 24.1.2 * Shadow 4.16.0 * Wayland 1.23.0 * KDE Plasma 6.1.0, 6.1.1 & 6.1.2 * GCC 14.1.1 * Qt 6.7.2 * Linux kernel 6.9.6 (fixing connection issues with iwlwifi) & 6.9.7 * NetworkManager 1.48.2 * ClamAV 1.3.1 * GNOME 46.3 * GStreamer 1.24.5 * Perl 5.40.0 * LLVM 18.1.8 * Poppler 24.07.0 * Qemu 9.0.1 * Systemd 255.8 * Cups 2.4.10 * Samba 4.20.2 * PyTest 8.2.2 * openssh fix against CVE-2024-6387, aka RegreSSHion Quite an impressive list in just 2 weeks I’d say. At least in the northern hemisphere, the summer holiday is starting (including my own – so no reports from me for the next two weeks! Please follow the individual snapshot release announcements on the factory(a)lists.opensuse.org mailing list). With many people enjoying a break, we will likely see fewer requests going to Tumbleweed. Looking at what is currently to be found in the staging area, we can predict those changes to happen in the next few days/weeks: * Mesa 24.1.3 * Mozilla Firefox 127.0.2 * LibreOffice: fix excessive recommends on libreoffice-qt6 * Agama packages and installer to appear. Not yet QA’ed as part of the Tumbleweed release process, but feel free to test and play with it * KDE Gear 24.05.2 * SELinux 3.7 * cmake 3.30.0 * transactional-update: enable soft reboot; see https://microos.opensuse.org/blog/2024-06-13-soft-reboot/ * dbus-broker: some networking issue after upgrades left to work out * GCC 14: phase 2: use gcc14 as the default compiler – lots of help needed: https://build.opensuse.org/project/show/openSUSE:Factory:Staging:Gcc7 Cheers, Dominique

2 1

ZNC vulnerability
by rexbinary 07 Jul '24

07 Jul '24

Hello, Would it be possible for someone to update ZNC in factory from 1.9.0 to 1.9.1? There is a remote code execution vulnerability present in ≤ 1.9.0 within the modtcl module. https://wiki.znc.in/ChangeLog/1.9.1 https://libera.chat/news/zncpsa Thank you rexbinary

4 3

Support for VirtualBox needed with Larry Finger no longer with us.
by Larry Len Rainey 06 Jul '24

06 Jul '24

2 2

New Tumbleweed snapshot 20240704 released!
by Dominique Leuenberger 05 Jul '24

05 Jul '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: bluedevil6 (6.1.1 -> 6.1.2) breeze6 (6.1.1 -> 6.1.2) breeze6-gtk (6.1.1 -> 6.1.2) cfitsio (4.3.1 -> 4.4.0) clazy (1.11git.20240520T014559~87b83e3 -> 1.12git.20240630T203330~f3fb82c) cups (2.4.8 -> 2.4.10) discover6 (6.1.1 -> 6.1.2) drkonqi6 (6.1.1 -> 6.1.2) flatpak-kcm6 (6.1.1 -> 6.1.2) kactivitymanagerd6 (6.1.1 -> 6.1.2) kde-cli-tools6 (6.1.1 -> 6.1.2) kde-gtk-config6 (6.1.1 -> 6.1.2) kdecoration6 (6.1.1 -> 6.1.2) kdeplasma6-addons (6.1.1 -> 6.1.2) kgamma6 (6.1.1 -> 6.1.2) kglobalacceld6 (6.1.1 -> 6.1.2) kinfocenter6 (6.1.1 -> 6.1.2) kmenuedit6 (6.1.1 -> 6.1.2) kpipewire6 (6.1.1 -> 6.1.2) kscreen6 (6.1.1 -> 6.1.2) kscreenlocker6 (6.1.1 -> 6.1.2) ksshaskpass6 (6.1.1 -> 6.1.2) ksystemstats6 (6.1.1 -> 6.1.2) kwayland-integration6 (6.1.1 -> 6.1.2) kwayland6 (6.1.1 -> 6.1.2) kwin6 (6.1.1.2 -> 6.1.2) kwrited6 (6.1.1 -> 6.1.2) layer-shell-qt6 (6.1.1 -> 6.1.2) ldb (2.9.0 -> 2.9.1) libkscreen6 (6.1.1 -> 6.1.2) libksysguard6 (6.1.1 -> 6.1.2) libplasma6 (6.1.1 -> 6.1.2) libstorage-ng (4.5.215 -> 4.5.216) libva (2.21.0 -> 2.22.0) libva-gl (2.21.0 -> 2.22.0) libvpx (1.14.0 -> 1.14.1) milou6 (6.1.1 -> 6.1.2) ocean-sound-theme6 (6.1.1 -> 6.1.2) pam_kwallet6 (6.1.1 -> 6.1.2) plasma5support6 (6.1.1 -> 6.1.2) plasma6-activities (6.1.1 -> 6.1.2) plasma6-activities-stats (6.1.1 -> 6.1.2) plasma6-browser-integration (6.1.1 -> 6.1.2) plasma6-desktop (6.1.1 -> 6.1.2) plasma6-disks (6.1.1 -> 6.1.2) plasma6-integration (6.1.1 -> 6.1.2) plasma6-nm (6.1.1 -> 6.1.2) plasma6-openSUSE plasma6-pa (6.1.1 -> 6.1.2) plasma6-print-manager (6.1.1 -> 6.1.2) plasma6-systemmonitor (6.1.1 -> 6.1.2) plasma6-thunderbolt (6.1.1 -> 6.1.2) plasma6-workspace (6.1.1 -> 6.1.2) polkit-kde-agent-6 (6.1.1 -> 6.1.2) powerdevil6 (6.1.1 -> 6.1.2) qqc2-breeze-style6 (6.1.1 -> 6.1.2) samba (4.20.1+git.339.cf6e153bb2 -> 4.20.2+git.345.1e3d47bbda6) sddm-kcm6 (6.1.1 -> 6.1.2) systemsettings6 (6.1.1 -> 6.1.2) wacomtablet-kcm6 (6.1.1 -> 6.1.2) xdg-desktop-portal-kde6 (6.1.1 -> 6.1.2) === Details === ==== bluedevil6 ==== Version update (6.1.1 -> 6.1.2) Subpackages: bluedevil6-lang - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * update version for new release ==== breeze6 ==== Version update (6.1.1 -> 6.1.2) Subpackages: breeze6-cursors breeze6-decoration breeze6-style breeze6-style-lang - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * update version for new release ==== breeze6-gtk ==== Version update (6.1.1 -> 6.1.2) Subpackages: gtk2-metatheme-breeze6 gtk3-metatheme-breeze6 gtk4-metatheme-breeze6 metatheme-breeze6-common - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * update version for new release ==== cfitsio ==== Version update (4.3.1 -> 4.4.0) - Update to version 4.4.0: * Reorganization of helper utility code; added fitsverify * CMakeLists.txt: Changed install location of cfitsio-targets.cmake to conform with the one listed in cfitsio-config.cmake.in (i.e. including the extra "cfitsio" subdir of lib/cmake). * calculator functions that read GTIs do more correct validity checking of GTI input files * fits_insert_rows now works if input table starts with both no rows and no columns * Can now write internal memory files of size > 2^32 directly to a gzip-compressed output file. * Added support for unsigned long long types to fits_update_key. * Added ability for Windows builds to handle UTF-8 needed for reading filenames with non-ASCII characters. * Added 2-byte int test to speed.c utility. * Made fix to http file handler to expand the allowed URL length. - Change License tag to NASA-1.3 in keeping with upstream. - Switch to cmake+ninja for build. - Switch BuildRequires to pkgconfig based packages where possible. - Add a bunch of cmake build related patches to make the output close to that generated by autotools: * cfitsio-cmake-devel-scripts-destination.patch: Fix destination of pkgconfig and cmake scripts from /usr/lib to %{_libdir}. * cfitsio-cmake-allow-user-specified-incdir.patch: Allow specifying user-defined include dir into which to install header files. * cfitsio-cmake-lowercase-util-names.patch: Use lowercase names for utility binaries when building using cmake (same as autotools) * cfitsio-cmake-match-autotools-soversion.patch: Same so number as used in configure.in. ==== clazy ==== Version update (1.11git.20240520T014559~87b83e3 -> 1.12git.20240630T203330~f3fb82c) - Update to version 1.12git.20240630T203330~f3fb82c: * docs: update HOWTO.md * Update ChangeLog for 1.12 * docs: Update HOWTO to include release instructions * Don't hardcode version in ClazyStandaloneMain.cpp * docs: Bump minimum LLVM to 11 * docs: Don't hardcode current version in README * no-module-include: Fix on Windows as line endings can have \r\n * ci: Fix build on ubuntu 24.04 * ci: Bump to Qt 6.7 * tests: Remove ubuntu-18.04 and 20.04 Dockerfiles ==== cups ==== Version update (2.4.8 -> 2.4.10) Subpackages: cups-client cups-config libcups2 libcupsimage2 - Version upgrade to 2.4.10: See https://github.com/openprinting/cups/releases CUPS 2.4.10 brings two fixes: * Fixed error handling when reading a mixed 1setOf attribute. * Fixed scheduler start if there is only domain socket to listen on (Issue #985) which is fix for regression after fix for CVE-2024-35235 in scenarios where is no other listeners in cupsd.conf than domain socket created on demand by systemd, launchd or upstart. Issues are those at https://github.com/OpenPrinting/cups/issues - Version upgrade to 2.4.9: See https://github.com/openprinting/cups/releases CUPS 2.4.9 brings security fix for CVE-2024-35235 and several bug fixes regarding CUPS Web User Interface, PPD generation and HTTP protocol implementation. Detailed list (from CHANGES.md): * Fixed domain socket handling (CVE-2024-35235) * Fixed creating of `cupsUrfSupported` PPD keyword (Issue #952) * Fixed searching for destinations in web ui (Issue #954) * Fixed TLS negotiation using OpenSSL with servers that require the TLS SNI extension. * Really raised `cups_enum_dests()` timeout for listing available IPP printers (Issue #751)... * Fixed `Host` header regression (Issue #967) * Fixed DNS-SD lookups of local services with Avahi (Issue #970) * Fixed listing jobs in destinations in web ui. (Apple issue #6204) * Fixed showing search query in web ui help page. (Issue #977) Issues are those at https://github.com/OpenPrinting/cups/issues Apple issues are those at https://github.com/apple/cups/issues - Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.10 - Removed cups-2.4.8-CVE-2024-35235.patch : fixed upstream see the above CUPS 2.4.9 changes - avoid_C99_mode_for_loop_initial_declarations.patch avoids error "'for' loop initial declarations are only allowed in C99 mode" that happens when building for SLE12 in scheduler/client.c at "for (char *start = ..." since https://github.com/OpenPrinting/cups/commit/a7eda84da73126e40400e05dd27d57f… see https://github.com/OpenPrinting/cups/issues/1000 ==== discover6 ==== Version update (6.1.1 -> 6.1.2) Subpackages: discover6-backend-flatpak discover6-backend-fwupd discover6-backend-packagekit discover6-lang discover6-notifier - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * update version for new release * ApplicationPage: Fix share dialog (kde#488976) * update version for new release ==== drkonqi6 ==== Version update (6.1.1 -> 6.1.2) Subpackages: drkonqi6-lang - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * update version for new release ==== flatpak-kcm6 ==== Version update (6.1.1 -> 6.1.2) Subpackages: flatpak-kcm6-lang - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - No code changes since 6.1.1 ==== kactivitymanagerd6 ==== Version update (6.1.1 -> 6.1.2) Subpackages: kactivitymanagerd6-lang - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - No code changes since 6.1.1 ==== kde-cli-tools6 ==== Version update (6.1.1 -> 6.1.2) Subpackages: kde-cli-tools6-lang - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * update version for new release ==== kde-gtk-config6 ==== Version update (6.1.1 -> 6.1.2) Subpackages: kde-gtk-config6-gtk3 - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * update version for new release ==== kdecoration6 ==== Version update (6.1.1 -> 6.1.2) Subpackages: libkdecorations2-6 libkdecorations2-6-lang libkdecorations2private11 - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * update version for new release ==== kdeplasma6-addons ==== Version update (6.1.1 -> 6.1.2) Subpackages: kdeplasma6-addons-lang - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * update version for new release ==== kgamma6 ==== Version update (6.1.1 -> 6.1.2) Subpackages: kgamma6-lang - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * update version for new release ==== kglobalacceld6 ==== Version update (6.1.1 -> 6.1.2) Subpackages: libKGlobalAccelD6-0 - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * update version for new release ==== kinfocenter6 ==== Version update (6.1.1 -> 6.1.2) Subpackages: kinfocenter6-lang - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * update version for new release ==== kmenuedit6 ==== Version update (6.1.1 -> 6.1.2) Subpackages: kmenuedit6-lang - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * update version for new release ==== kpipewire6 ==== Version update (6.1.1 -> 6.1.2) Subpackages: kpipewire6-imports libKPipeWire6 libKPipeWire6-lang libKPipeWireDmaBuf6 libKPipeWireRecord6 - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * update version for new release ==== kscreen6 ==== Version update (6.1.1 -> 6.1.2) Subpackages: kscreen6-lang - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * update version for new release ==== kscreenlocker6 ==== Version update (6.1.1 -> 6.1.2) Subpackages: kscreenlocker6-lang libKScreenLocker6 - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * update version for new release ==== ksshaskpass6 ==== Version update (6.1.1 -> 6.1.2) Subpackages: ksshaskpass6-lang - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * update version for new release ==== ksystemstats6 ==== Version update (6.1.1 -> 6.1.2) Subpackages: ksystemstats6-lang - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * update version for new release ==== kwayland-integration6 ==== Version update (6.1.1 -> 6.1.2) - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * update version for new release ==== kwayland6 ==== Version update (6.1.1 -> 6.1.2) Subpackages: libKWaylandClient6 - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * update version for new release ==== kwin6 ==== Version update (6.1.1.2 -> 6.1.2) Subpackages: kwin6-lang kwin6-x11 libkwin6 - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1.2: * Don't assert on null output * quicktiling: Reset layout when last quicktile ceases to exist (kde#465937) * wayland: Bump default max buffer size to 1 MiB * plugins/qpa: set deprecated functions option correctly * plugins/kdecoration: Fix MenuButton not accepting button press events (kde#488993) * plugins/colorcorrection: simplify the effect, merge the shader files and support color management * opengl: Reset OpenGlContext::currentContext() if it's destroyed (kde#488830) * window: adhere to window rules in checkWorkspacePosition (kde#489117) * plugins/hidecursor: show the cursor on tablet events (kde#489009) ==== kwrited6 ==== Version update (6.1.1 -> 6.1.2) - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * update version for new release ==== layer-shell-qt6 ==== Version update (6.1.1 -> 6.1.2) Subpackages: libLayerShellQtInterface6 - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * update version for new release ==== ldb ==== Version update (2.9.0 -> 2.9.1) Subpackages: libldb2 libldb2-32bit python3-ldb - Update to 2.9.1 * Many qsort() comparison functions are non-transitive, which can lead to out-of-bounds access in some circumstances; (bso#15569). ==== libkscreen6 ==== Version update (6.1.1 -> 6.1.2) Subpackages: libKF6Screen8 libKF6Screen8-lang libKF6ScreenDpms8 libkscreen6-plugin - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * update version for new release ==== libksysguard6 ==== Version update (6.1.1 -> 6.1.2) Subpackages: ksysguardsystemstats6-data libKSysGuardSystemStats2 libksysguard6-imports libksysguard6-lang libksysguard6-plugins - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * update version for new release ==== libplasma6 ==== Version update (6.1.1 -> 6.1.2) Subpackages: libPlasma6 libPlasma6-lang libplasma6-components libplasma6-desktoptheme - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * update version for new release * On applet destroyed go out of configure mode (kde#488977) * Workaround to possible infinite reize loops (kde#488974) * quick/dialogbackground: Ensure we delete the SVG item (kde#486743) * update version for new release ==== libstorage-ng ==== Version update (4.5.215 -> 4.5.216) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#998 - added documentation - 4.5.216 ==== libva ==== Version update (2.21.0 -> 2.22.0) Subpackages: libva-drm2 libva-wayland2 libva-x11-2 libva2 - Update to version 2.22.0: * va:Add VVC decode LibVA interface. * va: fix --version-script detection for lld >= 17 * wayland: add support for linux-dmabuf * meson:remove autogen.sh from the meson script * trace: Add bit_depth capturing in trace log ==== libva-gl ==== Version update (2.21.0 -> 2.22.0) - Update to version 2.22.0: * va:Add VVC decode LibVA interface. * va: fix --version-script detection for lld >= 17 * wayland: add support for linux-dmabuf * meson:remove autogen.sh from the meson script * trace: Add bit_depth capturing in trace log ==== libvpx ==== Version update (1.14.0 -> 1.14.1) - Limit explicit GCC13 usage to suse_version < 1600, i.e to Leap 15.x. Future versions are supposed to have a recent enough GCC version. - Update to version 1.14.1: * Added buffer bounds checks to vpx_writer and vpx_write_bit_buffer. * Fix to GetSegmentationData() crash in aq_mode=0 for RTC rate control. * Fix to alloc for row_base_thresh_freq_fac. * Free row mt memory before freeing cpi->tile_data. * Fix to buffer alloc for vp9_bitstream_worker_data. * Fix to VP8 race issue for multi-thread with pnsr_calc. * Fix to uv width/height in vp9_scale_and_extend_frame_ssse3. * Fix to integer division by zero and overflow in calc_pframe_target_size(). * Fix to integer overflow in vpx_img_alloc() & vpx_img_wrap()(CVE-2024-5197). * Fix to UBSan error in vp9_rc_update_framerate(). * Fix to UBSan errors in vp8_new_framerate(). * Fix to integer overflow in vp8 encodeframe.c. * Handle EINTR from sem_wait(). ==== milou6 ==== Version update (6.1.1 -> 6.1.2) Subpackages: milou6-lang - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * update version for new release ==== ocean-sound-theme6 ==== Version update (6.1.1 -> 6.1.2) - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * Create bell.oga symlinked to the existing bell sound (kde#489231) * update version for new release ==== pam_kwallet6 ==== Version update (6.1.1 -> 6.1.2) Subpackages: pam_kwallet6-32bit pam_kwallet6-common - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * Switch to pkgconfig to find libgcrypt (allows building with libgcrypt 1.11) (kde#489303) * update version for new release ==== plasma5support6 ==== Version update (6.1.1 -> 6.1.2) Subpackages: libPlasma5Support6 libPlasma5Support6-lang - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * update version for new release ==== plasma6-activities ==== Version update (6.1.1 -> 6.1.2) Subpackages: libPlasmaActivities6 plasma6-activities-imports - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * update version for new release ==== plasma6-activities-stats ==== Version update (6.1.1 -> 6.1.2) Subpackages: libPlasmaActivitiesStats1 - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * update version for new release ==== plasma6-browser-integration ==== Version update (6.1.1 -> 6.1.2) Subpackages: plasma6-browser-integration-lang - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * update version for new release ==== plasma6-desktop ==== Version update (6.1.1 -> 6.1.2) Subpackages: plasma6-desktop-emojier plasma6-desktop-lang plasma6-kimpanel-ibus - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * [kcm/keyboard] Add missing GENERATE_MOC to kconfig_add_kcfg_files * update version for new release * kcms/keyboard: fix width and immutability of layout table headers (kde#488957) * Make panel config tooltips ask for focus after each applet change (kde#487640) * kcms/access: Bump the minimum cursor magnification factor (kde#489333) * kcms/access: fix list item highlighting (kde#489206) * Always center "Add Widgets" button on empty panels (kde#488789) * update version for new release ==== plasma6-disks ==== Version update (6.1.1 -> 6.1.2) Subpackages: plasma6-disks-lang - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * update version for new release ==== plasma6-integration ==== Version update (6.1.1 -> 6.1.2) Subpackages: plasma6-integration-plugin plasma6-integration-plugin-lang - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * update version for new release ==== plasma6-nm ==== Version update (6.1.1 -> 6.1.2) Subpackages: plasma6-nm-lang plasma6-nm-openconnect plasma6-nm-openvpn plasma6-nm-pptp plasma6-nm-vpnc - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * update version for new release ==== plasma6-openSUSE ==== Subpackages: plasma6-branding-openSUSE plasma6-sddm-theme-openSUSE plasma6-theme-openSUSE - Update to 6.1.2 ==== plasma6-pa ==== Version update (6.1.1 -> 6.1.2) Subpackages: plasma6-pa-lang - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * update version for new release ==== plasma6-print-manager ==== Version update (6.1.1 -> 6.1.2) Subpackages: plasma6-print-manager-lang - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * update version for new release ==== plasma6-systemmonitor ==== Version update (6.1.1 -> 6.1.2) Subpackages: plasma6-systemmonitor-lang - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * update version for new release ==== plasma6-thunderbolt ==== Version update (6.1.1 -> 6.1.2) Subpackages: plasma6-thunderbolt-lang - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - No code changes since 6.1.1 ==== plasma6-workspace ==== Version update (6.1.1 -> 6.1.2) Subpackages: plasma6-session plasma6-session-x11 plasma6-workspace-lang plasma6-workspace-libs sddm-qt6-branding-openSUSE - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * update version for new release * libtaskmanager: improve efficiency when window icon frequently changes (kde#487390) * Do not hide panel settings when a panel-parented dialog takes focus (kde#487161) * update version for new release ==== polkit-kde-agent-6 ==== Version update (6.1.1 -> 6.1.2) Subpackages: polkit-kde-agent-6-lang - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * update version for new release ==== powerdevil6 ==== Version update (6.1.1 -> 6.1.2) Subpackages: powerdevil6-lang - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * daemon/controllers: Reintroduce a mutex around ddca_open_display2() (kde#489169) * update version for new release * ddcutildisplay: give some time before changing brightness after the monitor resumes * core: reload actions on brightness controller changes * update version for new release - Rebase 0001-Revert-Added-setting-for-battery-conservation-mode-L.patch ==== qqc2-breeze-style6 ==== Version update (6.1.1 -> 6.1.2) - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * update version for new release ==== samba ==== Version update (4.20.1+git.339.cf6e153bb2 -> 4.20.2+git.345.1e3d47bbda6) Subpackages: libsamba-policy0-python3 samba-ad-dc-libs samba-client samba-client-32bit samba-client-libs samba-client-libs-32bit samba-gpupdate samba-ldb-ldap samba-libs samba-libs-python3 samba-python3 samba-winbind samba-winbind-libs samba-winbind-libs-32bit - Update to 4.20.2 * vfs_widelinks with DFS shares breaks case insensitivity; (bso#15662); (bsc#1213607). * Samba build is not reproducible; (bso#13213). * ldb qsort might r/w out of bounds with an intransitive compare function; (bso#15569). * Many qsort() comparison functions are non-transitive, which can lead to out-of-bounds access in some circumstances; (bso#15625). * Need to change gitlab-ci.yml tags in all branches to avoid CI bill; (bso#15638). * We have added new options --vendor-name and --vendor-patch- revision arguments to ./configure to allow distributions and packagers to put their name in the Samba version string so that when debugging Samba the source of the binary is obvious; (bso#15654). * CTDB RADOS mutex helper misses namespace support; (bso#15665). * Dynamic DNS updates with the internal DNS are not working; (bso#13019). * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with SysvolReady=0; (bso#14981). * Anonymous smb3 signing/encryption should be allowed (similar to Windows Server 2022); (bso#15412). * Panic in dreplsrv_op_pull_source_apply_changes_trigger; (bso#15573). * s4:nbt_server: does not provide unexpected handling, so winbindd can't use nmb requests instead cldap; (bso#15620). * winbindd, net ads join and other things don't work on an ipv6 only host; (bso#15642). * Segmentation fault when deleting files in vfs_recycle; (bso#15659). * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664). * "client use kerberos" and --use-kerberos is ignored for the machine account; (bso#15666). * Regression DFS not working with widelinks = true; (bso#15435). * samba-gpupdate - Invalid NtVer in netlogon_samlogon_response; (bso#15633). * idmap_ad creates an incorrect local krb5.conf in case of trusted domain lookups; (bso#15653). * The images don't build after the git security release and CentOS 8 Stream is EOL; (bso#15660). ==== sddm-kcm6 ==== Version update (6.1.1 -> 6.1.2) Subpackages: sddm-kcm6-lang - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * update version for new release ==== systemsettings6 ==== Version update (6.1.1 -> 6.1.2) Subpackages: systemsettings6-lang - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * update version for new release * Fix sub-category view remaining visible when moving to a top-level KCM (kde#434345) * update version for new release ==== wacomtablet-kcm6 ==== Version update (6.1.1 -> 6.1.2) Subpackages: wacomtablet-kcm6-lang - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * update version for new release ==== xdg-desktop-portal-kde6 ==== Version update (6.1.1 -> 6.1.2) Subpackages: xdg-desktop-portal-kde6-lang - Update to 6.1.2: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.2 - Changes since 6.1.1: * update version for new release

1 0

New Tumbleweed snapshot 20240703 released!
by Dominique Leuenberger 04 Jul '24

04 Jul '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: Imath (3.1.9 -> 3.1.11) dracut (059+suse.598.gfe80dac7 -> 059+suse.628.g20b345b4) evolution-ews (3.52.2 -> 3.52.3) ghostscript (10.03.0 -> 10.03.1) inkscape llvm18 (18.1.6 -> 18.1.8) mariadb-connector-c (3.3.8 -> 3.3.10) ncurses (6.5.20240608 -> 6.5.20240629) open-vm-tools (12.4.0 -> 12.4.5) openSUSE-release (20240702 -> 20240703) osinfo-db (20240510 -> 20240701) pciutils (3.12.0 -> 3.13.0) pinentry (1.2.1 -> 1.3.0) pinentry-gui (1.2.1 -> 1.3.0) poppler (24.03.0 -> 24.07.0) poppler-qt6 (24.03.0 -> 24.07.0) python-Twisted (23.10.0 -> 24.3.0) qemu (9.0.0 -> 9.0.1) salt selinux-policy (20240617 -> 20240702) systemd (255.7 -> 255.8) virt-manager xterm (389 -> 392) yast2-trans (84.87.20240624.0295c6c7b8 -> 84.87.20240626.116e7b94dc) zypper (1.14.74 -> 1.14.76) === Details === ==== Imath ==== Version update (3.1.9 -> 3.1.11) - update to 3.1.11: * Fix a problem where downstream projects using Imath would build python bindings even if they weren't requested. * Fix for missing `std::bit_cast` * Fix missing/necessary use of IMATH_HOSTDEVICE * IMATH_INSTALL_PKG_CONFIG is now on by default, even on Windows * Fix calling default constructor by uniform init in TypeTraits * Fix redundant PYIMATH_EXPORTS causing compile issues on Windows Clang * Update to SO versioning policy: * succ()/pred() now use std::nextafter(). * Expand epsilon bounds for m44x pyImath test. * Rename "docs" to "website". * Add missing copyright/license identifiers. ==== dracut ==== Version update (059+suse.598.gfe80dac7 -> 059+suse.628.g20b345b4) - Update to version 059+suse.628.g20b345b4: * feat(crypt): force the inclusion of crypttab entries with x-initrd.attach (bsc#1226529) * fix(mdraid): try to assemble the missing raid device (bsc#1226412) * feat(ifcfg): minimize s390-specific network configuration aspects * refactor(ifcfg): delete code duplication using iface_get_subchannels() * fix(znet): append to udev rules so each rd.znet_ifname is effective * feat(qeth_rules): remove qeth handling consolidated in 95znet * docs(dracut.cmdline): generalize description of rd.znet * feat(znet): use zdev for consolidated device configuration * feat(dasd): minimize dasd handling consolidated in s390-tools * feat(dasd_mod): minimize dasd handling consolidated in s390-tools * feat(dasd_rules): remove dasd handling consolidated in s390-tools * feat(zfcp): minimize zfcp handling consolidated in s390-tools * feat(zfcp_rules): remove zfcp handling consolidated in s390-tools * refactor(cms): remove now unnecessary inclusion of full s390utils-base * refactor(cms): use consolidated network config with zdev from s390-tools * refactor(cms): use consolidated dasd config with zdev from s390-tools * refactor(cms): use consolidated zfcp config with zdev from s390-tools * refactor(cms): use zdev to simplify handling CMSDASD=... boot option * fix(dracut-install): continue parsing if ldd prints "cannot be preloaded" (bsc#1208690) ==== evolution-ews ==== Version update (3.52.2 -> 3.52.3) Subpackages: evolution-ews-lang - Update to version 3.52.3: + Bug Fixes: - m365: A removed task in the web app is not removed in Evolution - Mails sent only to the first recipient in the list + Miscellaneous: - m365 Camel: . Auto-save store summary on folder count changes . Send messages as MIME data . Fix a memory leak in m365_folder_merge_server_user_flags() - CI: Workaround broken git clone for libcanberra + Updated translations. ==== ghostscript ==== Version update (10.03.0 -> 10.03.1) Subpackages: ghostscript-x11 - Version upgrade to 10.03.1: Highlights in this release include: See 'Recent Changes in Ghostscript' at Ghostscript upstream https://ghostscript.readthedocs.io/en/gs10.03.1/News.html * Fixes for CVE-2024-33869, CVE-2023-52722, CVE-2024-33870, CVE-2024-33871 and CVE-2024-29510 - Regarding CVE-2024-33869 see bsc#1226946 and https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=5ae2e… https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f5336… https://bugs.ghostscript.com/show_bug.cgi?id=707691 - Regarding CVE-2023-52722 see bsc#1223852 and https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=afd71… - Regarding CVE-2024-33870 see bsc#1226944 and https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=79aef… https://bugs.ghostscript.com/show_bug.cgi?id=707686 - Regarding CVE-2024-33871 see bsc#1225491 and https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=71458… - Regarding CVE-2024-29510 see bsc#1226945 and https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=3b173… ==== inkscape ==== Subpackages: inkscape-extensions-extra inkscape-extensions-gimp inkscape-lang - added patches fix https://gitlab.com/inkscape/inkscape/-/commit/96ca7a6c215aa14336b52753f5624… + inkscape-poppler-24.05.0.patch fix https://gitlab.com/inkscape/inkscape/-/commit/877fc26483f74f951eab516f1b57b… + inkscape-poppler-c++20-2.patch fix https://gitlab.com/inkscape/inkscape/-/commit/1798e9c13b786f3d077ba0132592c… + inkscape-poppler-c++20.patch ==== llvm18 ==== Version update (18.1.6 -> 18.1.8) Subpackages: clang-tools clang18 libLLVM18 libclang-cpp18 libclang13 llvm18-gold - Update to version 18.1.8. * Fix a regression from the 18.1.6 release, which could result in compiler crashes in the PPCMergeStringPool pass when compiling for PowerPC targets. * Fixes clang-format regressions (since 18.1.1) on breaking before a stream insertion operator (<<) when both operands are string literals. * Fixes a clang-format regression (since 17.0.6) on formatting goto labels in macro definitions. - Rebase llvm-do-not-install-static-libraries.patch. ==== mariadb-connector-c ==== Version update (3.3.8 -> 3.3.10) - Update to 3.3.10: * https://mariadb.com/kb/en/mariadb-connector-c-3-3-10-release-notes/ - Remove fix-build-gcc14.patch (fixed upstream) ==== ncurses ==== Version update (6.5.20240608 -> 6.5.20240629) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch 20240629 + build-fix for ncurses-examples with newer PDCurses, which no longer has stubs for unimplemented features. + add help-popup for test_instr.c, test_inwstr.c + modify checks in delwin to avoid checking if the window is a pad until first checking if it is still on the active window-list (cf: 20211115). + improve -t option of test/gdc.c, allowing hours only, or hours and minutes only. - Update to tack 1.10 (patch 20240501) * init.c, edit.c: gcc warning (NetBSD) * edit.c: check to avoid printing a non-printable character, per Coverity * tack.c: initialize variables, per Coverity * tack.1: change limit for SGR tool to allow for aixterm's colors * ansi.c: change the SGR tool to show up to 120 (past aixterm's 108) * color.c: when reloading the colors 0-7, use the index for the named color rather than just the array-index (fixing an interchanged red/blue for instance). Also, initialize the palette using the ANSI codes if the terminal supports setaf/setab. * color.c, charset.c, ansi.c, edit.c, crum.c, pad.c, tack.c, tack.h: use "const" in a few places reported by cppcheck * tack.1: improve formatting/style - Add ncurses patch 20240622 + improve test/gdc.c (patch by Branden Robinson). + improve formatting/style of manpages (patches by Branden Robinson). + adjust naming of mingw *-config scripts to match the pkg-config names + widen pattern in pc/*-config scripts to disallow more linker options + add --cflags-only-I and --cflags-only-other options to misc/ncurses-config.in + revert change to CF_BUILD_CC macro (report by Vassili Courzakis, cf: 20240518). - Port patch ncurses-6.4.dif - Port edit.sed script to new ncurses-config - Add ncurses patch 20240615 + improve formatting/style of manpages (patches by Branden Robinson). + review/update modules files. + improve install-rules in Ada95 makefiles (report by Branden Robinson). + improve formatting/style of manpages in test-directory. ==== open-vm-tools ==== Version update (12.4.0 -> 12.4.5) Subpackages: libvmtools0 open-vm-tools-desktop - Update to 12.4.5 (build 23787635) (boo#1227181) - There are no new features in the open-vm-tools 12.4.5 release. This is primarily a maintenance release that addresses a few critical problems, including: - A Github pull request and associated issue has been handled. Please see the Resolved Issues section of the Release Notes. - A number of issues flagged by Coverity and ShellCheck have been addressed. - A vmtoolsd process hang related to nested logging from an RPC Channel error has been fixed. For a more complete list of issues resolved in this release, see the Resolved Issues section of the Release Notes. For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.4.5 Release Notes are available at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/ReleaseNotes.md The granular changes that have gone into the 12.4.5 release are in the ChangeLog at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/open-vm-tools/Ch… ==== openSUSE-release ==== Version update (20240702 -> 20240703) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== osinfo-db ==== Version update (20240510 -> 20240701) - Update to database version 20240701 osinfo-db-20240701.tar.xz - Adjust some default hardware requirements (bsc#1227231) adjust-tumbleweed-hardware-requirements.patch add-opensuse-leap-15.6-support.patch add-sle15sp6-support.patch - bsc#1227116 - osinfo still uses deprecated SL-Micro name Reverse prior decision to drop the use of "Enterprise" in the name of the SUSE Linux Micro product. add-slem6.0-support.patch Drop add-slm6.0-support.patch ==== pciutils ==== Version update (3.12.0 -> 3.13.0) Subpackages: libpci3 - update to 3.13.0: * lspci decodes CXL 1.1 device link status information. * Further development of the pcilmr (the link margining utility) * Dump parsing supports 6-digit domain numbers. * Bug fixes in PCIe link state reporting. * Decode more fields in PCIe AER capability. * Fixed build on Linux systems with musl libc. * Updated pci.ids. ==== pinentry ==== Version update (1.2.1 -> 1.3.0) - update to 1.3.0: * qt: Add new Qt6 frontend. [rP1e79123c38] * qt: Set parent window on Wayland. [T6930] * qt: Fix capslock detection on Wayland. [rP7dfc60a70d] * qt: Fix window icon on Wayland. [T6887] * qt: Add support for external password manager with libsecret. * qt: Remove focus indication by text selection. [T5863] * qt: Use same focus indication for labels as Kleopatra. * qt: Improve accessibility. [T5863] * gnome3: Prefer gcr-4. [rP069c219223] * curses: Fix timeout handling. [rP08408498b3] * curses: Add SETREPEATOK and quality bar colors. * curses: Add password quality meter. [rP2923707e75] * curses,tty: Upon SIGINT, let pinentry exit gracefully. * w32: Fix non-focused window and simplify code. * Disable secret storage integration when running on KDE Plasma. * The Windows CE support has been removed. ==== pinentry-gui ==== Version update (1.2.1 -> 1.3.0) Subpackages: pinentry-gnome3 pinentry-gtk2 - update to 1.3.0: * qt: Add new Qt6 frontend. [rP1e79123c38] * qt: Set parent window on Wayland. [T6930] * qt: Fix capslock detection on Wayland. [rP7dfc60a70d] * qt: Fix window icon on Wayland. [T6887] * qt: Add support for external password manager with libsecret. * qt: Remove focus indication by text selection. [T5863] * qt: Use same focus indication for labels as Kleopatra. * qt: Improve accessibility. [T5863] * gnome3: Prefer gcr-4. [rP069c219223] * curses: Fix timeout handling. [rP08408498b3] * curses: Add SETREPEATOK and quality bar colors. * curses: Add password quality meter. [rP2923707e75] * curses,tty: Upon SIGINT, let pinentry exit gracefully. * w32: Fix non-focused window and simplify code. * Disable secret storage integration when running on KDE Plasma. * The Windows CE support has been removed. ==== poppler ==== Version update (24.03.0 -> 24.07.0) Subpackages: libpoppler-glib8 poppler-tools - update to 24.07.0: core: * Fix crashes in broken files * Internal code improvements qt6: * Add getters for document additional actions * Implement reset forms link qt5: * Add getters for document additional actions * Implement reset forms link utils: * pdfinfo: Fix crash in broken documents when using -dests build system: * Mark glib-mkenums as required - drop poppler-CVE-2024-6239.patch (upstream) - version update to 24.06.1 Release 24.06.1: Re-release 24.06.0 with increased SOVERSION of poppler internal library Release 24.06.0: core: * Performance improvements in some files * Fix some issues with files bigger than 2^31 bytes * Remove all cairo include guards for cairo < 1.16 * Fix MSVC build * Internal code improvements qt6: * Update Qt6 doc example * Use the non deprecated version of QString::fromUcs4 glib: * properly document return value from poppler_font_info_scan Release 24.05.0: core: * Fix signing not being totally correct in some kind of PDF files * Assume "Adobe-Identity" for character collection. Issue #1465 * Small improvements in annotation font rendering * Remove some GooString methods, use std::string ones instead * Move some GooString methods to UTF.h * Fix crash in broken files cpp: * cpp: Fix crash extracting text and font in some files. Issue #1477 * Change base class of ustring to char16_t qt6: * Add async API for certificate validation * Fix text extraction for Landscape/Seascape pages qt5: * Add async API for certificate validation * Fix text extraction for Landscape/Seascape pages utils: * pdfdetach: Small code improvements * pdftops: Write compliant ps header build system: * Increase minimum supported base to that provided by Ubuntu 22.04 Release 24.04.0: core: * Optimize page text extraction speed * Fix clipping path handling in some files. Issue #739 * Fix regression in text selection * Fix text search across lines between paragraphs qt6: * Fix crash in SoundObject::data utils: * pdfsig: Add Catalan translation build system: * Build code as C++20 - modified patches % reduce-boost-required-version.patch (refreshed) % reduce-libtiff-required-version.patch (refreshed) - added patches fix CVE-2024-6239 [bsc#1226916], crash when using pdfinfo with -dests parameter on malformed input files + poppler-CVE-2024-6239.patch ==== poppler-qt6 ==== Version update (24.03.0 -> 24.07.0) - update to 24.07.0: core: * Fix crashes in broken files * Internal code improvements qt6: * Add getters for document additional actions * Implement reset forms link qt5: * Add getters for document additional actions * Implement reset forms link utils: * pdfinfo: Fix crash in broken documents when using -dests build system: * Mark glib-mkenums as required - drop poppler-CVE-2024-6239.patch (upstream) - version update to 24.06.1 Release 24.06.1: Re-release 24.06.0 with increased SOVERSION of poppler internal library Release 24.06.0: core: * Performance improvements in some files * Fix some issues with files bigger than 2^31 bytes * Remove all cairo include guards for cairo < 1.16 * Fix MSVC build * Internal code improvements qt6: * Update Qt6 doc example * Use the non deprecated version of QString::fromUcs4 glib: * properly document return value from poppler_font_info_scan Release 24.05.0: core: * Fix signing not being totally correct in some kind of PDF files * Assume "Adobe-Identity" for character collection. Issue #1465 * Small improvements in annotation font rendering * Remove some GooString methods, use std::string ones instead * Move some GooString methods to UTF.h * Fix crash in broken files cpp: * cpp: Fix crash extracting text and font in some files. Issue #1477 * Change base class of ustring to char16_t qt6: * Add async API for certificate validation * Fix text extraction for Landscape/Seascape pages qt5: * Add async API for certificate validation * Fix text extraction for Landscape/Seascape pages utils: * pdfdetach: Small code improvements * pdftops: Write compliant ps header build system: * Increase minimum supported base to that provided by Ubuntu 22.04 Release 24.04.0: core: * Optimize page text extraction speed * Fix clipping path handling in some files. Issue #739 * Fix regression in text selection * Fix text search across lines between paragraphs qt6: * Fix crash in SoundObject::data utils: * pdfsig: Add Catalan translation build system: * Build code as C++20 - modified patches % reduce-boost-required-version.patch (refreshed) % reduce-libtiff-required-version.patch (refreshed) - added patches fix CVE-2024-6239 [bsc#1226916], crash when using pdfinfo with -dests parameter on malformed input files + poppler-CVE-2024-6239.patch ==== python-Twisted ==== Version update (23.10.0 -> 24.3.0) Subpackages: python311-Twisted python311-Twisted-tls - update to 24.3.0: * twisted.logger.formatEvent now honors dotted method names, not just flat function names, in format strings, as it has long been explicitly documented to do. So, you will now get the expected result from formatEvent("here's the result of calling a method at log-format time: {obj.method()}", obj=...) * twisted.web.http.HTTPChannel now ignores the trailer headers provided in the last chunk of a chunked encoded response, rather than raising an exception. * twisted.protocols.tls.BufferingTLSTransport, used by default by twisted.protocols.tls.TLSMemoryBIOFactory, was refactored for improved performance when doing a high number of small writes. * twisted.python.failure.Failure now throws exception for generators without triggering a deprecation warnings on Python 3.12. * twisted.internet.process.Process, used by reactor.spawnProcess, now copies the parent environment when the env=None argument is passed on Posix systems and os.posix_spawnp is used internally. * twisted.internet.defer.inlineCallbacks.returnValue's stack introspection was adjusted for the latest PyPy 7.3.14 release, allowing legacy @inlineCallbacks to run on new PyPY versions. * twisted.trial.reporter.TestRun.startTest() is no longer called for tests with skip annotation or skip attribute for Python 3.12.1 or newer. This is the result of upstream Python gh-106584 change. The behavior is not change in 3.12.0 or older. - drop twisted-pr12054-testinvokationpy3.12.1.patch, stop-using-3-arg-throw.patch (upstream) ==== qemu ==== Version update (9.0.0 -> 9.0.1) Subpackages: qemu-accel-tcg-x86 qemu-audio-spice qemu-block-curl qemu-block-nfs qemu-block-rbd qemu-chardev-spice qemu-guest-agent qemu-hw-display-qxl qemu-hw-display-virtio-gpu qemu-hw-display-virtio-gpu-pci qemu-hw-display-virtio-vga qemu-hw-usb-host qemu-hw-usb-redirect qemu-hw-usb-smartcard qemu-img qemu-ipxe qemu-ksm qemu-lang qemu-microvm qemu-pr-helper qemu-seabios qemu-tools qemu-ui-curses qemu-ui-gtk qemu-ui-opengl qemu-ui-spice-app qemu-ui-spice-core qemu-vgabios qemu-x86 - Update to latest stable release (9.0.1). Full list of backports here: https://lore.kernel.org/qemu-devel/1718081053.366429.1238758.nullmailer@tls… A selection of them is reported here too: Update version for 9.0.1 release target/loongarch: fix a wrong print in cpu dump ui/sdl2: Allow host to power down screen virtio-gpu: fix v2 migration target/i386: fix SSE and SSE2 feature check target/i386: fix xsave.flat from kvm-unit-tests disas/riscv: Decode all of the pmpcfg and pmpaddr CSRs riscv, gdbstub.c: fix reg_width in ricsv_gen_dynamic_vector_feature() target/riscv/kvm.c: Fix the hart bit setting of AIA target/riscv: rvzicbo: Fixup CBO extension register calculation target/riscv: do not set mtval2 for non guest-page faults target/riscv: prioritize pmp errors in raise_mmu_exception() target/riscv: rvv: Remove redudant SEW checking for vector fp narrow/widen instructions target/riscv: rvv: Check single width operator for vfncvt.rod.f.f.w target/riscv: rvv: Check single width operator for vector fp widen instructions target/riscv: rvv: Fix Zvfhmin checking for vfwcvt.f.f.v and vfncvt.f.f.w instructions target/riscv/cpu.c: fix Zvkb extension config target/riscv: Fix the element agnostic function problem target/riscv/kvm: tolerate KVM disable ext errors target/riscv/kvm: Fix exposure of Zkr hw/intc/riscv_aplic: APLICs should add child earlier than realize iotests: test NBD+TLS+iothread qio: Inherit follow_coroutine_ctx across TLS ... ==== salt ==== Subpackages: python3-salt salt-master salt-minion salt-transactional-update - Fix performance of user.list_groups with many remote groups - Added: * fix-user.list_groups-omits-remote-groups.patch ==== selinux-policy ==== Version update (20240617 -> 20240702) Subpackages: selinux-policy-targeted - Update to version 20240702: * Allow manage dosfs_t files to snapperd (bsc#1224120) * Add auth_rw_wtmpdb_login_records to domains using auth_manage_login_records * Add auth_rw_wtmpdb_login_records to modules * Allow xdm_t to read-write to wtmpdb (bsc#1225984) * Introduce types for wtmpdb and rw interface * Introduce wtmp_file_type attribute * Revert "Add policy for wtmpdb (bsc#1210717)" ==== systemd ==== Version update (255.7 -> 255.8) Subpackages: libsystemd0 libsystemd0-32bit libudev1 systemd-32bit systemd-boot systemd-container systemd-experimental systemd-lang udev - Import commit 5a8eadd0c021758337a020c423f25a353bdb9b3c (merge of v255.8) For a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/603cd1d4d81147d4f2eccd5e352064a… - Drop 5003-Revert-run-pass-the-pty-slave-fd-to-transient-servic.patch as v255.8 contains the workaround (commit 639c922ede9485) for the broken commit 28459ba1f4df. ==== virt-manager ==== Subpackages: virt-install virt-manager-common - bsc#1227116 - osinfo still uses deprecated SL-Micro name virtinst-add-slem60-detection-support.patch Dropped virtinst-add-slm-detection-support.patch ==== xterm ==== Version update (389 -> 392) Subpackages: xterm-bin xterm-resize - update to 392: * improve input decoding for non-Latin1 character sets by preserving the sense of GL/GR. * add resource preferLatin1 to simplify UPSS configuration (Gentoo #932154). * build-fix for --disable-boxchars; patch #390 reuses that feature's code to draw the part of the DEC Technical character set which has no Unicode equivalent. * improve definitions used in clock_gettime logic in graphics_sixel.c, as well as updating comments (patch by Ben Wong). * amend allowC1Printable changes from patch #391, restoring a special case which caused C1 characters to be ignored (report/testcase by Dmytro Bagrii). - update to 391: * improve integration between UTF-8 and allowC1Printable. * alter SIXEL HLS computation to make blue 0 degrees (patch by Ben Wong). * disable SIXEL aspect-ratio, pending a rewrite (patch by Ben Wong). * add resource incrementalGraphics (prompted by patch by Ben Wong). * reorganize graphics_sixel.c as a step toward eliminating graphics buffer-size (integrated patch by Ben Wong). * fix regression in patch #390: non-UTF8 text pasted as a XA_UTF8_STRING was not decoded (report by Petri Kaukasoina). - update to 390: * improve typography of control-sequences page (patches by Branden Robinson). * amend UPSS change from patch #389, fixing a regression in VT100/VT220 character sets. * modify ANSI conformance per ECMA-43 and DEC 070: * set ANSI conformance level to 3 for DEC levels 2 and up. * disable locking shifts in level 1, e.g., VT100. * disable single-shifts from G2/G3 in level 1. * use UPSS for G2/G3 in levels 2 and up. * modify invisible-character attribute to permit DECRQCRA to report a consistent checksum (report/testcase by Thomas Wolff). * align terminfo building blocks in terminfo to correspond to recent refactoring/trimming in ncurses. * set flag in regexec call for onNClicks to handle â^â anchor (patch by Matthew Martin). * add line-drawing data for the characters in DEC Technical which have no Unicode equivalents. * remove a special case in encode_scs which made xterm report Latin-1 when encoding is set to UTF-8, where ASCII is the selected character set. This fixes a regression in vttest for the DECRSPS cursor test. * correct values for Ps of DECAUPSS in ctlseqs.ms (report by James Holderness). * simplify/correct expression for checking Unicode non-characters (report by Thomas Wolff). * correct loop for trimming environment variables (report/patch by Casper Dik). ==== yast2-trans ==== Version update (84.87.20240624.0295c6c7b8 -> 84.87.20240626.116e7b94dc) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20240626.116e7b94dc: * Translated using Weblate (Slovenian) * Translated using Weblate (Slovenian) * Translated using Weblate (Slovenian) * Translated using Weblate (Slovenian) * Translated using Weblate (Slovenian) * Translated using Weblate (Slovenian) * Translated using Weblate (Slovenian) * Translated using Weblate (Slovenian) * Translated using Weblate (Slovenian) * Translated using Weblate (Slovenian) * Translated using Weblate (Slovenian) * Translated using Weblate (Slovenian) * Translated using Weblate (Slovenian) * Translated using Weblate (Slovenian) * Translated using Weblate (Slovenian) * Translated using Weblate (Slovenian) * Translated using Weblate (Slovenian) * Translated using Weblate (Slovenian) * Translated using Weblate (Slovenian) * Translated using Weblate (Slovenian) * Translated using Weblate (Slovak) * Translated using Weblate (Slovenian) * Translated using Weblate (Czech) * Translated using Weblate (Slovenian) * Translated using Weblate (Slovenian) * Translated using Weblate (Slovenian) * Translated using Weblate (Slovenian) ==== zypper ==== Version update (1.14.74 -> 1.14.76) Subpackages: zypper-log zypper-needs-restarting - Show rpm install size before installing (bsc#1224771) If filesystem snapshots are taken before the installation (e.g. by snapper) no disk space is freed by removing old packages. In this case the install size of all packages is a hint how much additional disk space is needed by the new packages static content. - version 1.14.76 - Fix readline setup to handle Ctrl-C and Ctrl-D corrrectly (bsc#1227205) - version 1.14.75

1 0

[UKI project] new package: uki-tool
by Valentin Lefebvre 04 Jul '24

04 Jul '24

Hello everyone ! I am pleased to share a tool I have developed which aims to regroup useful commands dealing with the Unified Kernel Image (UKI) project: "*Unified Kernel Image Tool (UKIT or UKI-Tool)*". Sources can be found at this address *https://github.com/keentux/unified-kernel-image-tool <https://github.com/keentux/unified-kernel-image-tool> *. It is a project written exclusively in Shell which helps and regroups the Unified Kernel Image development and deployment (packaging). It provides some commands: - *create*: Uses Ukify to generate PCR keys and an UKI made by a pre-build static-initrd and Kernel - *extension*: Generate well formatted extensions to be used with a specific UKI. - *grub2: *Create bootloader entry for grub2 to load a specific UKI - *sdboot*: Generate bootloader entry for sdboot - *addon*: Generate addons with ukify to extend the kernel CMDLINE, useful for snapshots The package has been submitted into *Kernel:tools* OBS project, and will be needed to create the main UKI package that will provide a built UKI from packaging. All the best, Valentin Lefebvre Linux Distribution Engineer - packager Member of System Boot and Init team SUSE Software Solutions Germany GmbH 56100 Lorient, France Valentin Lefebvre Linux Distribution Engineer - packager Member of System Boot and Init team SUSE Software Solutions Germany GmbH 56100 Lorient, France

1 0

New Tumbleweed snapshot 20240702 released!
by Dominique Leuenberger 04 Jul '24

04 Jul '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: clamav (0.103.11 -> 1.3.1) evolution (3.52.2 -> 3.52.3) evolution-data-server (3.52.2 -> 3.52.3) gnome-control-center (46.2 -> 46.3) gnome-online-accounts (3.50.2 -> 3.50.3) gnome-remote-desktop (46.2 -> 46.3) gnome-shell (46.2 -> 46.3.1) gnome-software (46.2 -> 46.3) gnome-sudoku (46.2 -> 46.3) google-noto-fonts gstreamer (1.24.0 -> 1.24.5) gstreamer-plugins-bad (1.24.0 -> 1.24.5) gstreamer-plugins-base (1.24.0 -> 1.24.5) gstreamer-plugins-good (1.24.0 -> 1.24.5) gstreamer-plugins-libav (1.24.0 -> 1.24.5) gstreamer-plugins-ugly (1.24.0 -> 1.24.5) gvfs (1.54.1 -> 1.54.2) libadwaita (1.5.1 -> 1.5.2) libgexiv2 (0.14.2 -> 0.14.3) libvirt (10.4.0 -> 10.5.0) libzypp (17.34.1 -> 17.35.1) mutter (46.2 -> 46.3) openSUSE-release (20240701 -> 20240702) openssh orca (46.1 -> 46.2) perl (5.38.2 -> 5.40.0) python-PyYAML python-cffi python-libvirt-python (10.4.0 -> 10.5.0) python-setuptools (70.0.0 -> 70.1.1) re2 (20240601 -> 20240702) wireplumber (0.5.4+git2.96dc045 -> 0.5.5) === Details === ==== clamav ==== Version update (0.103.11 -> 1.3.1) - New Version: 1.3.1: * CVE-2024-20380: Fixed a possible crash in the HTML file parser that could cause a denial-of-service (DoS) condition. * Updated select Rust dependencies to the latest versions. * Fixed a bug causing some text to be truncated when converting from UTF-16. * Fixed assorted complaints identified by Coverity static analysis. * Fixed a bug causing CVDs downloaded by the DatabaseCustomURL Freshclam config option to be pruned and then re-downloaded with every update. * Added the new 'valhalla' database name to the list of optional databases in preparation for future work. - New version: 1.3.0: * Added support for extracting and scanning attachments found in Microsoft OneNote section files. OneNote parsing will be enabled by default, but may be optionally disabled. * Added file type recognition for compiled Python (`.pyc`) files. * Improved support for decrypting PDFs with empty passwords. * Fixed a warning when scanning some HTML files. * ClamOnAcc: Fixed an infinite loop when a watched directory does not exist. * ClamOnAcc: Fixed an infinite loop when a file has been deleted before a scan. - New version: 1.2.0: * Added support for extracting Universal Disk Format (UDF) partitions. * Added an option to customize the size of ClamAV's clean file cache. * Raised the MaxScanSize limit so the total amount of data scanned when scanning a file or archive may exceed 4 gigabytes. * Added ability for Freshclam to use a client certificate PEM file and a private key PEM file for authentication to a private mirror. * Fix an issue extracting files from ISO9660 partitions where the files are listed in the plain ISO tree and there also exists an empty Joliet tree. * PID and socket are now located under /run/clamav/clamd.pid and /run/clamav/clamd.sock . * bsc#1211594: Fixed an issue where ClamAV does not abort the signature load process after partially loading an invalid signature. - New version 1.1.0: * https://blog.clamav.net/2023/05/clamav-110-released.html * Added the ability to extract images embedded in HTML CSS <style>Â blocks. * Updated to Sigtool so that theÂ --vbaÂ option will extract VBA code from Microsoft Office documents the same way that libclamav extracts VBA. * Added a new option --fail-if-cvd-older-than=days to clamscan and clamd, and FailIfCvdOlderThan to clamd.conf * Added a new functionÂ cl_cvdgetage()Â to the libclamav API. * Added a new functionÂ cl_engine_set_clcb_vba()Â to the libclamav API. * obsoletes clamav-ec32.patch. - boo#1180296: Integrate clamonacc as a service. - New version 1.0.1 LTS (including changes in 0.104 and 0.105): * As of ClamAV 0.104, CMake is required to build ClamAV. * As of ClamAV 0.105, Rust is now required to compile ClamAV. * Increased the default limits for file and scan size: * MaxScanSize: 100M to 400M * MaxFileSize: 25M to 100M * StreamMaxLength: 25M to 100M * PCREMaxFileSize: 25M to 100M * MaxEmbeddedPE: 10M to 40M * MaxHTMLNormalize: 10M to 40M * MaxScriptNormalize: 5M to 20M * MaxHTMLNoTags: 2M to 8M * Added image fuzzy hash subsignatures for logical signatures. * Support for decrypting read-only OLE2-based XLS files that are encrypted with the default password. * Overhauled the implementation of the all-match feature. * Added a new callback to the public API for inspecting file content during a scan at each layer of archive extraction. * Added a new function to the public API for unpacking CVD signature archives. * The option to build with an external TomsFastMath library has been removed. ClamAV requires non-default build options for TomsFastMath to support bigger floating point numbers. * For a full list of changes see the release announcements: * https://blog.clamav.net/2022/11/clamav-100-lts-released.html * https://blog.clamav.net/2022/05/clamav-01050-01043-01036-released.html * https://blog.clamav.net/2021/09/clamav-01040-released.html - Build clamd with systemd support. - Fix format strings on 32bit platforms (clamav-format.patch). - Add missing endianness conversions (clamav-ec32.patch). - Don't build on armv7l for now due to some test failures. - Drop clamav-disable-yara.patch as yara cannot be disabled anymore ==== evolution ==== Version update (3.52.2 -> 3.52.3) Subpackages: evolution-lang evolution-plugin-spamassassin - Update to version 3.52.3: + Bug Fixes: - Speed up startup - lots of local folders - Composer: . Wrap search by default . Text out of <div> can break Undo . Crash when opening spellcheck dialog - Forwarded e-mails don't have a filename extension - Composer: Crash when opening spellcheck dialog - Unable to drag'n'drop attachments between attachment bars - Crash under gtk_clutter_init_internal() + Miscellaneous: - Misc: Replace XPM images with SVG images - EAttachment: Check file_info contains display-name before accessing it - CI: Workaround broken git clone for libcanberra + Updated translations. ==== evolution-data-server ==== Version update (3.52.2 -> 3.52.3) Subpackages: evolution-data-server-lang libcamel-1_2-64 libebackend-1_2-11 libebook-1_2-21 libebook-contacts-1_2-4 libecal-2_0-3 libedata-book-1_2-27 libedata-cal-2_0-2 libedataserver-1_2-27 libedataserverui-1_2-4 - Update to version 3.52.3: + Bug Fixes: - Camel: . Attachments not recognized when filtering POP3 message . Search folder's message UID is not persistent - CalDAV: Correct check for "is Google server" + Miscellaneous: - OAuth2 Prompter: Fix two memory leaks - EOAuth2ServiceYahoo: Update redirect URI - CI: Workaround broken git clone for libcanberra - Fix few issues reported by Coverity Scan + Updated translations. ==== gnome-control-center ==== Version update (46.2 -> 46.3) Subpackages: gnome-control-center-color gnome-control-center-goa gnome-control-center-lang gnome-control-center-user-faces gnome-control-center-users - Update to version 46.3: + CI fixes + Mouse: Make Mouse test click indicator not respond for middle clicks + Network: Reference icon-name proper for wifi panel + Tests: Don't require Xvfb or setxkbmap for tests + Sharing: Make Orca read the "Add Folder" row in Media Sharing settings + Update translations. - Refresh patches with quilt. ==== gnome-online-accounts ==== Version update (3.50.2 -> 3.50.3) Subpackages: gnome-online-accounts-lang libgoa-1_0-0 libgoa-backend-1_0-2 - Update to version 3.50.3: + WebDAV: minor fixes for accounts with app passwords + Fix libsoup error handling + Updated translations. ==== gnome-remote-desktop ==== Version update (46.2 -> 46.3) Subpackages: gnome-remote-desktop-lang - Update to version 46.3: + Avoid crash when getting invalid PipeWire buffers + Updated translations. ==== gnome-shell ==== Version update (46.2 -> 46.3.1) Subpackages: gnome-extensions gnome-shell-calendar gnome-shell-lang - Update to version 46.3.1: + Fix including gvc source in tarball - Changes from version 46.3: + Fix rendering artifacts of some rounded borders + Fix overview animation glitch when windows overlap workspaces + Misc. bug fixes and cleanups + Updated translations. - Add gvc (libgnome-volume-control) submodule to _service file and inject subproject into the source directory. This is not tracked as git submodules, so the regular 'git submodule' service parameter is ineffective here. ==== gnome-software ==== Version update (46.2 -> 46.3) Subpackages: gnome-software-lang gnome-software-plugin-packagekit - Update to version 46.3: + Show "Install All" button only for codecs + Prefer vendor name from os release in app origin + Updated translations. ==== gnome-sudoku ==== Version update (46.2 -> 46.3) Subpackages: gnome-sudoku-lang - Update to version 46.3: + Fix GTK allocation warnings. + Remove option show-possible-values from --help. ==== google-noto-fonts ==== Subpackages: google-noto-sans-fonts google-noto-sans-symbols-fonts google-noto-sans-symbols2-fonts - Update to 20230701 * Sans Kaithi, Sans Psalter Pahlavi, Serif Toto, Sans Nag Mundari, Sans Old Italic, Sans Old Sogdian, Sans Old Turkic, Serif Old Uyghur, Sans Masaram Gondi, Sans Hebrew, Sans Math, Sans Limbu, Sans Mandaic, and Sans Marchen have all received updates ==== gstreamer ==== Version update (1.24.0 -> 1.24.5) Subpackages: gstreamer-lang gstreamer-utils libgstreamer-1_0-0 typelib-1_0-Gst-1_0 - Update to version 1.24.5: + Highlighted bugfixes: - webrtcsink: Support for AV1 via nvav1enc, av1enc or rav1enc encoders - AV1 RTP payloader/depayloader fixes to work correctly with Chrome and Pion WebRTC - av1parse, av1dec error handling/robustness improvements - av1enc: Handle force-keyunit events properly for WebRTC - decodebin3: selection and collection handling improvements - hlsdemux2: Various fixes for discontinuities, variant switching, playlist updates - qml6glsink: fix RGB format support - rtspsrc: more control URL handling fixes - v4l2src: Interpret V4L2 report of sync loss as video signal loss - d3d12 encoder, memory and videosink fixes - vtdec: more robust error handling, fix regression - ndi: support for NDI SDK v6 - Various bug fixes, memory leak fixes, and other stability and reliability improvements - Please see https://gstreamer.freedesktop.org/releases/1.24/ for changes between 1.24.0 and this version and even more in-depth info. - Refresh patches with quilt. - Drop 0001-Canonicalize-the-library-path-returned-by-dladdr.patch and 0001-ptp-Dont-install-test-executable.patch: Fixed upstream. ==== gstreamer-plugins-bad ==== Version update (1.24.0 -> 1.24.5) Subpackages: gstreamer-plugins-bad-lang libgstadaptivedemux-1_0-0 libgstanalytics-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstcuda-1_0-0 libgstinsertbin-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstmse-1_0-0 libgstphotography-1_0-0 libgstplay-1_0-0 libgstplayer-1_0-0 libgstsctp-1_0-0 libgsttranscoder-1_0-0 libgsturidownloader-1_0-0 libgstva-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 libgstwebrtcnice-1_0-0 - Update to version 1.24.5: + Highlighted bugfixes: - webrtcsink: Support for AV1 via nvav1enc, av1enc or rav1enc encoders - AV1 RTP payloader/depayloader fixes to work correctly with Chrome and Pion WebRTC - av1parse, av1dec error handling/robustness improvements - av1enc: Handle force-keyunit events properly for WebRTC - decodebin3: selection and collection handling improvements - hlsdemux2: Various fixes for discontinuities, variant switching, playlist updates - qml6glsink: fix RGB format support - rtspsrc: more control URL handling fixes - v4l2src: Interpret V4L2 report of sync loss as video signal loss - d3d12 encoder, memory and videosink fixes - vtdec: more robust error handling, fix regression - ndi: support for NDI SDK v6 - Various bug fixes, memory leak fixes, and other stability and reliability improvements - Please see https://gstreamer.freedesktop.org/releases/1.24/ for changes between 1.24.0 and this version and even more in-depth info. - Drop 0001-Move-PROP_RATE_CONTROL-to-the-end-of-the-array.patch: Fixed upstream. ==== gstreamer-plugins-base ==== Version update (1.24.0 -> 1.24.5) Subpackages: gstreamer-plugins-base-lang libgstallocators-1_0-0 libgstapp-1_0-0 libgstaudio-1_0-0 libgstfft-1_0-0 libgstgl-1_0-0 libgstpbutils-1_0-0 libgstriff-1_0-0 libgstrtp-1_0-0 libgstrtsp-1_0-0 libgstsdp-1_0-0 libgsttag-1_0-0 libgstvideo-1_0-0 typelib-1_0-GstAudio-1_0 typelib-1_0-GstPbutils-1_0 typelib-1_0-GstTag-1_0 typelib-1_0-GstVideo-1_0 - Update to version 1.24.5: + Highlighted bugfixes: - webrtcsink: Support for AV1 via nvav1enc, av1enc or rav1enc encoders - AV1 RTP payloader/depayloader fixes to work correctly with Chrome and Pion WebRTC - av1parse, av1dec error handling/robustness improvements - av1enc: Handle force-keyunit events properly for WebRTC - decodebin3: selection and collection handling improvements - hlsdemux2: Various fixes for discontinuities, variant switching, playlist updates - qml6glsink: fix RGB format support - rtspsrc: more control URL handling fixes - v4l2src: Interpret V4L2 report of sync loss as video signal loss - d3d12 encoder, memory and videosink fixes - vtdec: more robust error handling, fix regression - ndi: support for NDI SDK v6 - Various bug fixes, memory leak fixes, and other stability and reliability improvements - Please see https://gstreamer.freedesktop.org/releases/1.24/ for changes between 1.24.0 and this version and even more in-depth info. - Refresh patches with quilt. - Drop gst-plugins-base-audiobasesink-gap.patch and gstreamer-plugins-base-CVE-2024-4453.patch: Fixed upstream. ==== gstreamer-plugins-good ==== Version update (1.24.0 -> 1.24.5) Subpackages: gstreamer-plugins-good-gtk gstreamer-plugins-good-lang - Update to version 1.24.5: + Highlighted bugfixes: - webrtcsink: Support for AV1 via nvav1enc, av1enc or rav1enc encoders - AV1 RTP payloader/depayloader fixes to work correctly with Chrome and Pion WebRTC - av1parse, av1dec error handling/robustness improvements - av1enc: Handle force-keyunit events properly for WebRTC - decodebin3: selection and collection handling improvements - hlsdemux2: Various fixes for discontinuities, variant switching, playlist updates - qml6glsink: fix RGB format support - rtspsrc: more control URL handling fixes - v4l2src: Interpret V4L2 report of sync loss as video signal loss - d3d12 encoder, memory and videosink fixes - vtdec: more robust error handling, fix regression - ndi: support for NDI SDK v6 - Various bug fixes, memory leak fixes, and other stability and reliability improvements - Please see https://gstreamer.freedesktop.org/releases/1.24/ for changes between 1.24.0 and this version and even more in-depth info. ==== gstreamer-plugins-libav ==== Version update (1.24.0 -> 1.24.5) - Update to version 1.24.5: + Highlighted bugfixes: - webrtcsink: Support for AV1 via nvav1enc, av1enc or rav1enc encoders - AV1 RTP payloader/depayloader fixes to work correctly with Chrome and Pion WebRTC - av1parse, av1dec error handling/robustness improvements - av1enc: Handle force-keyunit events properly for WebRTC - decodebin3: selection and collection handling improvements - hlsdemux2: Various fixes for discontinuities, variant switching, playlist updates - qml6glsink: fix RGB format support - rtspsrc: more control URL handling fixes - v4l2src: Interpret V4L2 report of sync loss as video signal loss - d3d12 encoder, memory and videosink fixes - vtdec: more robust error handling, fix regression - ndi: support for NDI SDK v6 - Various bug fixes, memory leak fixes, and other stability and reliability improvements - Please see https://gstreamer.freedesktop.org/releases/1.24/ for changes between 1.24.0 and this version and even more in-depth info. ==== gstreamer-plugins-ugly ==== Version update (1.24.0 -> 1.24.5) Subpackages: gstreamer-plugins-ugly-lang - Update to version 1.24.5: + Highlighted bugfixes: - webrtcsink: Support for AV1 via nvav1enc, av1enc or rav1enc encoders - AV1 RTP payloader/depayloader fixes to work correctly with Chrome and Pion WebRTC - av1parse, av1dec error handling/robustness improvements - av1enc: Handle force-keyunit events properly for WebRTC - decodebin3: selection and collection handling improvements - hlsdemux2: Various fixes for discontinuities, variant switching, playlist updates - qml6glsink: fix RGB format support - rtspsrc: more control URL handling fixes - v4l2src: Interpret V4L2 report of sync loss as video signal loss - d3d12 encoder, memory and videosink fixes - vtdec: more robust error handling, fix regression - ndi: support for NDI SDK v6 - Various bug fixes, memory leak fixes, and other stability and reliability improvements - Please see https://gstreamer.freedesktop.org/releases/1.24/ for changes between 1.24.0 and this version and even more in-depth info. ==== gvfs ==== Version update (1.54.1 -> 1.54.2) Subpackages: gvfs-backend-afc gvfs-backend-goa gvfs-backend-samba gvfs-backends gvfs-fuse gvfs-lang - Update to version 1.54.2: + ftp: - Change cwd to root before renaming to prevent failures - Use timegm instead of mktime to not shift dates by timezone - Preserve mtime when copying to local + udisks2: Ignore autofs mounts to prevent duplicated entries + build: - Add deprecated_apis option to control installation of headers - Disable burn backend by default + dav: Disable query_info_on_read method to fix mtime preservation + network: Disable usage of smbbrowse backend by default + smbbrowse: Don't enforce NT1 to fix mounting in certain cases + onedrive: Fix various memory leaks + Updated translations. - Pass burn=true to meson, we still want to build the burn backend, at least for now. ==== libadwaita ==== Version update (1.5.1 -> 1.5.2) Subpackages: libadwaita-1-0 libadwaita-lang typelib-1_0-Adw-1 - Update to version 1.5.2: + AdwAlertDialog: - Fix unmatched va_start() - Fix setting default widget when removing a response + AdwBreakpointCondition: Fix leaks when parsing + AdwBreakpointBin: Fix a leak + AdwDialog: - Fix toggling presentation mode - Fix close button ignoring :can-close - Fix ::close-attempt not emitting in some cases - Fix swipe area for bottom sheets - Leak fixes + AdwHeaderBar: - Fix initial focus for the back button - Fix split view links in docs + AdwMessageDialog: Fix unmatched va_start() + AdwSpinRow: Fix ::input handling + AdwTabButton: Fix needs-attention badge on RTL + AdwTabView: Accessibility fixes + AdwViewStack: Accessibility fixes + Updated translations. ==== libgexiv2 ==== Version update (0.14.2 -> 0.14.3) - Update to version 0.14.3: + Prevent std::exception escaping from exiv2 + Declare gexiv2_metadata_open_stream and _save_stream as deprecated + Documentation updates + Bugs fixed: https://gitlab.gnome.org/GNOME/gexiv2/issues/81 ==== libvirt ==== Version update (10.4.0 -> 10.5.0) Subpackages: libvirt-client libvirt-daemon-common libvirt-daemon-config-network libvirt-daemon-driver-interface libvirt-daemon-driver-libxl libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-lock libvirt-daemon-log libvirt-daemon-plugin-lockd libvirt-daemon-qemu libvirt-daemon-xen libvirt-libs - Update to libvirt 10.5.0 - Introduce SEV-SNP support - Many incremental improvements and bug fixes, see https://libvirt.org/news.html#v10-5-0-2024-07-01 ==== libzypp ==== Version update (17.34.1 -> 17.35.1) - Install zypp/APIConfig.h legacy include (fixes #557) - version 17.35.1 (35) - Update soname due to RepoManager refactoring and cleanup. - version 17.35.0 (35) - Workaround broken libsolv-tools-base requirements (fixes openSUSE/zypper#551) - Strip ssl_clientkey from repo urls (bsc#1226030) - Remove protobuf build dependency. - Lazily attach medium during refresh workflows (bsc#1223094) - Refactor RepoManager and add Service workflows. - version 17.34.2 (34) ==== mutter ==== Version update (46.2 -> 46.3) Subpackages: mutter-lang - Update to version 46.3: + Fix performance issues with second virtual monitor + Fix missing unmap animation of some windows + Fix placement/resizing regression + Fix possible out of sync primary selections and clipboard + Fix ibus support in popups + Fix hardware accelerated rendering when headless + Add back support for legacy X11 cursor themes + Fix preedit offsets + Use character offsets to specify surrounding text + Don't force titlebar on screen on all interactive resizes + Fixed crashes + Misc. bug fixes and cleanups + Updated translations. - Rebase patches with quilt. ==== openSUSE-release ==== Version update (20240701 -> 20240702) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== openssh ==== Subpackages: openssh-clients openssh-common openssh-server - Add patch to fix a race condition in a signal handler by removing the async-signal-unsafe code (CVE-2024-6387, bsc#1226642): * fix-CVE-2024-6387.patch ==== orca ==== Version update (46.1 -> 46.2) Subpackages: orca-lang - Update to version 46.2: + Web: Eliminate chattiness from page-load events from embedded ads. + Web: Fix bug causing Orca to not present certain ARIA dialog titles. + Map xfce4-notifyd to notification-daemon script so that notifications are presented. + Table Navigator: Ensure we set the caret in Writer tables. + LibreOffice: Fix presentation of editable combobox value changes. + General: Fix bug that could cause Orca to not present the new caret location. + Updated translations. ==== perl ==== Version update (5.38.2 -> 5.40.0) Subpackages: perl-base - Insert manual provide for perl(Getopt::Long) until new version transition is done - move UNIVERSAL.pm into perl-base - update to 5.40.0 * New __CLASS__ Keyword * :reader attribute for field variables * Permit a space in -M command-line option * Restrictions to use VERSION declarations * New builtin::inf and builtin::nan functions (experimental) * New ^^ logical xor operator * try/catch feature is no longer experimental * for iterating over multiple values at a time is no longer experimental * builtin module is no longer experimental * The :5.40 feature bundle adds try * use v5.40; imports builtin functions * CVE-2023-47038 - Write past buffer end via illegal user-defined Unicode property * CVE-2023-47039 - Perl for Windows binary hijacking vulnerability * reset EXPR now calls set-magic on scalars * Calling the import method of an unknown package produces a warning * return no longer allows an indirect object * Class barewords no longer resolved as file handles in method calls under no feature "bareword_filehandles" * Using goto to jump from an outer scope into an inner scope is deprecated and will be removed completely in Perl 5.42. [GH #21601] * The negation OPs have been modified to support the generic TARGMY optimization. [GH #21442] - Refresh perl-5.38.0.diff - Drop perl-5.18.2-overflow.diff (no longer applicable) - Drop perl-locale-backport.diff (proper fix in new version) - Drop old manual package name based perl provides ==== python-PyYAML ==== - add build-with-cython3.patch from 6.0.2rc1 to build with cython3 (needed for python 3.13+) ==== python-cffi ==== - add py313-compat.patch py313-use-format-unraisable.patch py313-use-hashpointer.patch: add upstream patches for py3.13 support ==== python-libvirt-python ==== Version update (10.4.0 -> 10.5.0) - Update to 10.5.0 - Add all new APIs and constants in libvirt 10.5.0 ==== python-setuptools ==== Version update (70.0.0 -> 70.1.1) - update to 70.1.1: * Improve error message when pkg_resources.ZipProvider tries to extract resources with a missing Egg Added variables and parameter type annotations to pkg_resources to be nearly on par with typeshed.* * Improve error message when pkg_resources.ZipProvider tries to extract resources with a missing Egg * Added variables and parameter type annotations to pkg_resources to be nearly on par with typeshed.* * Migrated Setuptools' own config to pyproject.toml * Prevent a TypeError: 'NoneType' object is not callable when shutil_rmtree is called without an onexc parameter on Python<=3.11 * Replace use of mktemp with can_symlink from the stdlib test suite. * Improvement for attr: directives in configuration to handle more edge cases related to complex package_dir. * Fix accidental implicit string concatenation. ==== re2 ==== Version update (20240601 -> 20240702) - update to 2024-07-02: * address -Wsign-compare warnings ==== wireplumber ==== Version update (0.5.4+git2.96dc045 -> 0.5.5) Subpackages: libwireplumber-0_5-0 wireplumber-audio wireplumber-lang wireplumber-zsh-completion - Update to version 0.5.5: * Highlights: - Hotfix release to address crashes in the Bluetooth HSP/HFP autoswitch functionality that were side-effects of some changes that were part of the role-based linking policy (#682) * Improvements: - wpctl will now properly show a '*' in front of sink filters when they are selected as the default sink (!660)

1 0

Mesa 3D packages are not available for openSUSE Leap from X11:XOrg repository
by Nikolai Nikolaevskii 04 Jul '24

04 Jul '24

Since 2024-06-17 (see boo#1226445 https://bugzilla.opensuse.org/show_bug.cgi?id=1226445) new Mesa 3D is not available for openSUSE Leap. That means newer GPUs (including iGPUs in new CPUs) cannot work with Leap. Previously it was possible to use new hardware with openSUSE Leap by getting Mesa 3D packages from X11:XOrg repo and new kernel from kernel:stable repo. Mesa 3D packages: https://software.opensuse.org/package/Mesa Will Mesa 3D packages be available from X11:XOrg repository for Leap?

5 5

Why has slowroll gone back to older kernel?
by Larry Len Rainey 03 Jul '24

03 Jul '24

3 2

openSUSE Release Engineering meeting 03.07.2024
by Lubos Kocman 03 Jul '24

03 Jul '24

How to join the meeting? https://calendar.opensuse.org/teams/release/events/opensuse-release-enginee… All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting ## Attendees: wengel, DocB, Lubos, Ana, DimStar, Max, Doug, ## Leap Leap 15.6 Release retrospective survey was closed on Sunday https://survey.opensuse.org/ Many thanks to all who participated. We've had 146 responses in total. Leap 16.0 Installable image https://download.opensuse.org/repositories/openSUSE:/Leap:/16.0:/Images/ima… (we need to update 8.0.0 to 9.0.0 as we use Agama 9) Agama SRs to factory on the way - maybe we could skip Playwright theme. I'd like to make some get-o-o items to test it out. Needs to be marked as experimental etc. Regaring Leap 16 Branding workshop on OSC, I'd like to put together some next steps article and call out for photo competition. To put together some wallpaper collection as part of https://github.com/openSUSE/branding/issues/135 Leap Micro 6.0 GA ed on Tuesday before conference https://news.opensuse.org/2024/06/25/leap-micro-60-availability/ Considering adding Leap Micro 6.X into agama. ## openSUSE Tumbleweed (ana) openSUSE:Factory build fail stats: xx failed xx unresolvable (last week 22 failed, 24 unresolvable) https://tinyurl.com/ysy4nnnz - Still building ~499 requests accepted in the last week Most relevant updates: cmake 3.29.6 perl 5.40.0 Linux Kernel 6.9.7 Linux Kernel Longterm 6.6.36 Plasma 6.1.1 Gnome 46.3 wireplumber 0.5.5 pipewire 1.2.0 gstreamer 1.24.5 libzypp 17.35.1 // zypper 1.14.73 Soon: Plasma 6.1.2 Agama, new Linux installer ( https://github.com/opensuse/agama ) systemd 255.8 Blocked: pytest 8.2.0 (first of 8.x.x series), almost there, got tied to python312 3.12.4 update Poppler 24.07.0 (fixed inkscape and scribus, missing efl) transactional-updates (adds soft-reboot by default, blocked by openQA tests) libcrypt (breaks testsuite of obs-build, waiting for merge of https://github.com/openSUSE/obs-build/pull/1011) ### longer-lasting topics GCC 14: second phase ongoing, use gcc14 as the default compiler (Staging:Gcc7) Advancing slowly RPM 4.20 https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… (2 spec files left with this issue in Factory - https://rpmlint.opensuse.org/openSUSE:Factory/x86_64/standard?rule=patch-ma…) go1.22 as default go version, blocked on i586 with packages which export CGO_ENABLED=0 and go build -buildmode pie https://github.com/golang/go/issues/64875 (needs to update ~70 packages) traking at https://bugzilla.opensuse.org/show_bug.cgi?id=1221095 dbus-broker as default dbus session manager, now everything builds, some openQA checks failing. btrfsmaintenance - https://bugzilla.opensuse.org/show_bug.cgi?id=1224364 rubygem-rspec, waiting for update of the remaining -rspec packages (DONE) ## Richard (Aeon+botmaster) ## Max no news ## Guillaume - Arm Not available ## Sarah - s390x Not available ## Doug * Sent marketing material to Brazil * openSUSE.Asia Summit * CfP is open * 12 Submission * lkocman talked to Sunny about Leap 16 / Leap Micro 6.0 talk todo discuss this within the team. Anicka supports us * Community Summit * 38 Atttendees * openSUSE Conference * 245 Registrations (250 Atttendees) * Open 4 Business was well received * Video (Thank you video team) * Raw video at https://streaming.media.ccc.de/osc24/relive * Youtube uploads to come TBD * GSoC * Mid-term evaluation July 8 - 12 * Finals will be August 26 - Sept. 2 (For most) Static * AI topics (static) ## Dirk Not available zypper/libzypp size reduction landed (~ 5-8MB less code), please CC me on issues ## Wolfgang (Package Hub), Scott Bahling no news lkocman: Plan for 15.7/15 SP7 is to have just a minimal setup to support Package HUB Migration from 15.6 to SP7 (maybe via SP6 and then upgrade to SP7). Let's discuss this with the QA testing migration. Minimum is to have a clear statement on wiki regarding migrations. https://en.opensuse.org/SDB:How_to_migrate_to_SLE Wolfgang: osc2024 videos, they'll be probably published next week. Encoding && publish is missing ## Maintenance team (Marcus, Robert) Not available Marcus: 15.6 looks correctly setup. Processing chromium updates. old GPG keys were in :Update repos. This is now fixed. Leap Micro 5.4 was marked as EOL (will not receive further updates) ## Adrian - OBS Not available ## Bernhard - Slowroll pulled in openssh CVE fix (TW has it in the update channel too) preparing next version bump next version bumps planned with monthly cadence around 2024-07-09, 2024-08-09, 2024-09-09 ## Bernhard - reproducible builds did several fixes. plan to spend more time on https://en.opensuse.org/openSUSE:Reproducible_openSUSE distribution. ## Open Floor

1 0

Re: drkonqi service
by Eric Schwarzenbach 03 Jul '24

03 Jul '24

It's not some random page, it's the KDE drkonqi github README. Of course this doesn't mean they can't wrong or misguided. If so, the output from these commands is certainly misleading: ❯ systemctl is-enableddrkonqi-coredump-processor@.service disabled   ~/stuff/work/code/wrycan/xms-8.0-branch ❯ sudo systemctl enabledrkonqi-coredump-processor@.service Created symlink /etc/systemd/system/systemd-coredump@.service.wants/drkonqi-coredump-processor@.service → /usr/lib/systemd/system/drkonqi-coredump-processor@.service. ❯ systemctl is-enableddrkonqi-coredump-processor@.service enabled ❯ sudo systemctl is-enableddrkonqi-coredump-processor@.service enabled On 7/2/24 11:33 AM, Andrei Borzenkov wrote: > On 02.07.2024 18:06, Eric Schwarzenbach wrote: >> Thanks, Andreas, that clears up that side confusion. >> >> The command suggested by https://github.com/KDE/drkonqi, >> >> |systemctl is-enabled drkonqi-coredump-processor@.service| >> >> does work, and shows it to be disable|d|, despite that page suggesting >> it should be enabled. >> > > You cannot enable template unit. Period. Whatever is written on some > random page in Internet. > > You can have DefaultInstance=xxx property in template unit which will > get enabled when you try to enable template itself. This property is > not present in drkonqi-coredump-processor@.service. > >> I could of course just enable it, > > You cannot. > >> but I'm trying to understand whether >> it being disabled is some intentional openSUSE decision that I might > > It is not. The drkonqi-coredump-processor@.service is even explicitly > enabled in presets shipped by openSUSE. It just cannot work with the > current unit definition. > >> want to go along with, especially in light of messages during my >> update and >> Lassi's journalctl that suggest either that it may have previously been >> enabled, or doesn't need to be enabled to be activated during a crash or >> some such. I hope someone can clear that up. >> >> Cheers, >> Eric >> >> >> On 7/2/24 4:07 AM, Andreas Schwab wrote: >>> On Jun 30 2024, Eric Schwarzenbach wrote: >>> >>>> Failed to stopdrkonqi-coredump-processor@.service: Unit name >>>> drkonqi-coredump-processor@.service is missing the instance name. >>> This is a limitation of the systemd-update-helper script, it cannot >>> cope >>> properly with parameterized units. >>> > > Well, as mentioned template@.service can provide default instance > which then can be implicitly enabled through "systemctl enable > template@.service". May be it was there is the past but got lost. I > have no idea what is expected as an instance here. > >>>> systemctl status drkonqi-coredump-processor.service >>>> >>>> gives >>>> >>>> Unit drkonqi-coredump-processor.service could not be found. >>>> >>>> nor do I find it with list-units. Web searches don't give me any sense >>>> that KDE has moved away from using it...has openSUSE for some reason? >>> See systemd.unit(5): >>> >>> Unit names can be parameterized by a single argument called >>> the >>> "instance name". The unit is then constructed based on a >>> "template file" >>> which serves as the definition of multiple services or >>> other units. A >>> template unit must have a single "@" at the end of the unit >>> name prefix >>> (right before the type suffix). The name of the full unit >>> is formed by >>> inserting the instance name between "@" and the unit type >>> suffix. In the >>> unit file itself, the instance parameter may be referred to >>> using "%i" >>> and other specifiers, see below. >>> >>

2 1

dmesg new T column
by JA McInnes 02 Jul '24

02 Jul '24

A recent Tumbleweed update has brought a new column to dmesg..? T followed by a number like: [ T158] usb 5-2: new low-speed USB device number 9 using xhci_hcd What is this? -JohnM.

3 2

Re: drkonqi service
by Eric Schwarzenbach 02 Jul '24

02 Jul '24

Thanks, Andreas, that clears up that side confusion. The command suggested by https://github.com/KDE/drkonqi, |systemctl is-enabled drkonqi-coredump-processor@.service| does work, and shows it to be disable|d|, despite that page suggesting it should be enabled. I could of course just enable it, but I'm trying to understand whether it being disabled is some intentional openSUSE decision that I might want to go along with, especially in light of messages during my update and Lassi's journalctl that suggest either that it may have previously been enabled, or doesn't need to be enabled to be activated during a crash or some such. I hope someone can clear that up. Cheers, Eric On 7/2/24 4:07 AM, Andreas Schwab wrote: > On Jun 30 2024, Eric Schwarzenbach wrote: > >> Failed to stopdrkonqi-coredump-processor@.service: Unit name >> drkonqi-coredump-processor@.service is missing the instance name. > This is a limitation of the systemd-update-helper script, it cannot cope > properly with parameterized units. > >> systemctl status drkonqi-coredump-processor.service >> >> gives >> >> Unit drkonqi-coredump-processor.service could not be found. >> >> nor do I find it with list-units. Web searches don't give me any sense >> that KDE has moved away from using it...has openSUSE for some reason? > See systemd.unit(5): > > Unit names can be parameterized by a single argument called the > "instance name". The unit is then constructed based on a "template file" > which serves as the definition of multiple services or other units. A > template unit must have a single "@" at the end of the unit name prefix > (right before the type suffix). The name of the full unit is formed by > inserting the instance name between "@" and the unit type suffix. In the > unit file itself, the instance parameter may be referred to using "%i" > and other specifiers, see below. >

2 1

RegreSSHion: Remote Code Execution Vulnerability In OpenSSH Server (CVE-2024-6387)
by Nikolai Nikolaevskii 02 Jul '24

02 Jul '24

https://www.suse.com/security/cve/CVE-2024-6387.html https://www.qualys.com/regresshion-cve-2024-6387/ The regreSSHion Bug An Unauthenticated Remote Code Execution (RCE) vulnerability in OpenSSH’s server (sshd) on glibc-based Linux systems. What is regreSShion? regreSSHion, CVE-2024-6387, is an unauthenticated remote code execution in OpenSSH’s server (sshd) that grants full root access. It affects the default configuration and does not require user interaction. It poses a significant exploit risk. https://blog.qualys.com/vulnerabilities-threat-research/2024/07/01/regressh… The Qualys Threat Research Unit (TRU) has discovered a Remote Unauthenticated Code Execution (RCE) vulnerability in OpenSSH’s server (sshd) in glibc-based Linux systems. CVE assigned to this vulnerability is CVE-2024-6387. https://nvd.nist.gov/vuln/detail/CVE-2024-6387 CVE-2024-6387 Detail Awaiting Analysis This vulnerability is currently awaiting analysis. Description A signal handler race condition was found in OpenSSH's server (sshd), where a client does not authenticate within LoginGraceTime seconds (120 by default, 600 in old OpenSSH versions), then sshd's SIGALRM handler is called asynchronously. However, this signal handler calls various functions that are not async-signal-safe, for example, syslog(). https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6387 https://access.redhat.com/security/cve/cve-2024-6387 https://security-tracker.debian.org/tracker/CVE-2024-6387 https://www.kaspersky.com/blog/openssh-vulnerability-mitigation-cve-2024-63… https://vulcan.io/blog/cve-2024-6387-how-to-fix-regresshion-vulnerability/ https://www.phoronix.com/news/RegreSSHion-CVE-2024-6387 https://www.phoronix.com/forums/forum/software/general-linux-open-source/14…

2 1

New Tumbleweed snapshot 20240701 released!
by Dominique Leuenberger 02 Jul '24

02 Jul '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: boost-base boost-extra libjxl (0.10.2 -> 0.10.3) libjxl-gtk (0.10.2 -> 0.10.3) libvpl (2.10.1 -> 2.11.0) openSUSE-release (20240629 -> 20240701) rng-tools (6.16 -> 6.17) virt-manager xfce4-kbdleds-plugin (0.2.5 -> 0.3.0) === Details === ==== boost-base ==== Subpackages: boost-license1_85_0 libboost_filesystem1_85_0 libboost_filesystem1_85_0-x86-64-v3 libboost_iostreams1_85_0 libboost_iostreams1_85_0-x86-64-v3 libboost_locale1_85_0 libboost_locale1_85_0-x86-64-v3 libboost_program_options1_85_0 libboost_program_options1_85_0-x86-64-v3 libboost_thread1_85_0 libboost_thread1_85_0-x86-64-v3 - add patch boost-1.85.0-python-numpy-2.patch from upstream ==== boost-extra ==== Subpackages: libboost_python-py3-1_85_0 libboost_python-py3-1_85_0-x86-64-v3 - add patch boost-1.85.0-python-numpy-2.patch from upstream ==== libjxl ==== Version update (0.10.2 -> 0.10.3) Subpackages: libjxl0_10 libjxl0_10-x86-64-v3 - Update to release 0.10.3 * fix bug in huffman-rle-gradient (e1) specialized decode path ==== libjxl-gtk ==== Version update (0.10.2 -> 0.10.3) Subpackages: gdk-pixbuf-loader-jxl gimp-plugin-jxl - Update to release 0.10.3 * fix bug in huffman-rle-gradient (e1) specialized decode path ==== libvpl ==== Version update (2.10.1 -> 2.11.0) - Update to version 2.11.0 + Added: IntelÂ® VPL API 2.11 support + Removed: Command line tools. They have been moved to a separate repository (https://github.com/intel/libvpl-tools) - Drop samples sub-package as the tools have been removed upstream - Drop u_buildfix-i586.patch, no longer needed nor applies after removal of tools - Use ldconfig_scriptlets macro for post(un) handling. ==== openSUSE-release ==== Version update (20240629 -> 20240701) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== rng-tools ==== Version update (6.16 -> 6.17) - update to 6.17: * mix data fed to the kernel byte-wise from multiple sources * added option to attempt more persistent use of slow entropy sources * fix some missing m4 quotes * improved debug output to show FIPS failures more clearly * added a named pipe entropy source * adjusted linux poolsize * fixed some pkcs11 error messages * fixed ignorefail and random_step options ==== virt-manager ==== Subpackages: virt-install virt-manager-common - remove dependency on /usr/bin/python3 using %python3_fix_shebang macro, [bsc#1212476] ==== xfce4-kbdleds-plugin ==== Version update (0.2.5 -> 0.3.0) Subpackages: xfce4-kbdleds-plugin-lang - Update to version 0.3.0 * Ability to show/hide leds * Add missing x11 linker flags

1 0

Submitting Agama 9 and agama-installer-openSUSE to Factory
by Lubos Kocman 02 Jul '24

02 Jul '24

Hello openSUSE! I hope that you all share the excitement from the progress that the Agama/YaST team shared on osc2024! YaST blog has a nice summary of all new features https://yast.opensuse.org/blog/2024-06-28/agama-9. All osc2024 videos should be soon at https://www.youtube.com/playlist?list=PL_AMhvchzBadtOw4K3kWfWhidyhXPnW9P in case you need more context. I sat together with Max and YaST folks by the table at the openSUSE Conference and we were able to get a bootable Leap 16.0 image deployed by Agama 9. Many thanks to the team for their support in incorporating our submissions at https://github.com/openSUSE/agama. Here's the Leap 16 Image, just please don't try to install Leap16/GNOME yet. I hope to get that working by end of the week :) https://download.opensuse.org/repositories/openSUSE:/Leap:/16.0:/Images/ima… With that said, I believe this is the right time to get all bits to Factory so early adopters can get their hands on it. See my Leap 16 feature tracker for a list of initial Agama submissions to Factory https://code.opensuse.org/leap/features/issue/158 agama-installer-openSUSE (the actual deliverable) is a live image that can, at the moment, install a variety of openSUSE distributions, namely MicroOS, *Leap 16, and Tumbleweed. You can find specific distro configs in agama-products-opensuse. After initial feedback from Leap Micro 6.0 GA, I'd also like to consider adding support for Leap Micro 6.X to satisfy a few individuals for who the self-install simply doesn't cut it. Please consider the agama-install-openSUSE as an alternative for early adopters who like to play with new tech. We still have some homework to do as this is currently online installer-only. Yes, you can use Packages DVD with Agama, but that might be too large for some. Being fully transparent here, the long-term plan would be to adopt Agama by default in Tumbleweed, Leap 16 / SLES 16, and Leap Micro 6.X. I can imagine that if everything goes well the transition could happen with Leap 16 GA somewhen in 2nd half of 2025 https://en.opensuse.org/openSUSE:Roadmap#DRAFT_Schedule_for_openSUSE_Leap_1… Many thanks to the Agama/YaST team for all of their hard work! The project is nowhere close where it was last year. Lubos on behalf of openSUSE release team

1 0

drkonqi service
by Eric Schwarzenbach 02 Jul '24

02 Jul '24

Is it expected that the drkonqi service should have been removed by a recent Tumbleweed update? I just zypper dupped for the first time since before Plasma 6.1 dropped, and saw a message about Failed to stop drkonqi-coredump-processor@.service: Unit name drkonqi-coredump-processor@.service is missing the instance name. systemctl status drkonqi-coredump-processor.service gives Unit drkonqi-coredump-processor.service could not be found. nor do I find it with list-units. Web searches don't give me any sense that KDE has moved away from using it...has openSUSE for some reason? The package drkonqi6 is definitely installed on my system. Thanks, Eric

3 2

Re: drkonqi service
by Eric Schwarzenbach 01 Jul '24

01 Jul '24

I get the same as you when I use list-unit-files. Apparently list-units only shows "active" units...perhaps drkonqi-coredump-processor only becomes active when invoked by systemd-coredump. I'm afraid I'm running into complexities of how systemd works that I'm not familiar with. The page https://github.com/KDE/drkonqi indicates that drkonqi-coredump-processor@.service should be enabled. It seems to be disabled on both our systems. It seems reasonable to me that a timeout might stop the service, but not disable it. It's unclear to me what your journalctl messages mean...the show a different service name ("...-pickup", which is not listed according to your list-unit-files / grep command). Is drkonqi-coredump-processor@.serviced intentionally disabled in Tumbleweed by default? Should it be? On 7/1/24 11:35 AM, Lassi Väätämöinen wrote: > On sunnuntaina 30. kesäkuuta 2024 19.30.25 UTC+3 Eric Schwarzenbach wrote: >> nor do I find it with list-units. Web searches don't give me any sense >> that KDE has moved away from using it...has openSUSE for some reason? >> >> The package drkonqi6 is definitely installed on my system. > YEsterday it provided me with crash reports. I had some issues starting Plasma > 6.1.1. now. But for me, DrKonqi is listed, but disable now. Maybe there was a > timeout or some such: > >> sudo systemctl list-unit-files |grep core > drkonqi-coredump-processor@.service disabled enabled > systemd-coredump@.service static - > systemd-coredump.socket static - > > > Journalctl seems to agree with my guess: > > 18:08:04 kaappi systemd[7925]: drkonqi-coredump-pickup.service: Service > reached runtime time limit. Stopping. > 18:08:04 kaappi systemd[7925]: drkonqi-coredump-pickup.service: Failed with > result 'timeout'. > >

1 0

Devel projects not building against Slowroll, yet
by Dominik Heidler 01 Jul '24

01 Jul '24

Hi, most devel projects are not building against Slowroll yet. Actually only these view projects DO already build against Slowroll: - Cloud:Seafile - Java:Factory - Java:packages - X11:xfce - filesystems:snapper - multimedia:proaudio The projects that are currently building against Tumbleweed but not against Slowroll: Apache:Modules Apache:Shibboleth Application:Astrophotography Application:Dochazka Application:ERP:GNUHealth:Factory Application:Geo Archiving:Backup Base:System Cloud:OpenStack:Factory Cloud:Tools CrossToolchain:avr devel:automotive devel:CaaSP:Head:ControllerNode devel:kanku devel:kubic devel:kubic:ignition devel:languages:clojure devel:languages:D devel:languages:haskell devel:languages:haxe devel:languages:javascript devel:languages:lua devel:languages:misc devel:languages:nodejs devel:languages:ocaml devel:languages:pascal devel:languages:perl devel:languages:python devel:languages:python:aliyun devel:languages:python:avocado devel:languages:python:aws devel:languages:python:azure devel:languages:python:certbot devel:languages:python:django devel:languages:python:Factory devel:languages:python:flask devel:languages:python:google devel:languages:python:jupyter devel:languages:python:mailman devel:languages:python:numeric devel:languages:python:pytest devel:languages:R:released devel:languages:ruby devel:languages:ruby:extensions devel:languages:rust devel:languages:tcl devel:microos devel:microos:aeon devel:microos:aeon:images devel:microos:images devel:microos:kalpa devel:openQA:tested devel:openSUSE:Factory:Apps devel:sap:cluster-agents devel:tools devel:tools:scm devel:tools:scm:svn devel:tools:statica Documentation Documentation:Tools editors Education Emulators Emulators:Wine filesharing filesystems filesystems:ceph games games:tools graphics graphics:darktable hamradio hardware hardware:boot hardware:FPGA hardware:nvdimm hardware:sdr isv:SUSE:SupportTools:Factory KDE:Applications KDE:Extra KDE:Frameworks KDE:KDE3 KDE:Qt:5.15 KDE:Qt6 KDE:Qt:PyQt Kernel:kdump LibreOffice:Factory Linux-PAM M17N M17N:fonts M17N:l10n.opensuse.org Mono multimedia:apps multimedia:color_management multimedia:libs multimedia:voice-assistant multimedia:xine network network:chromium network:cluster network:cluster:ohpc network:dhcp network:ha-clustering:Factory network:ha-clustering:sap-deployments:devel network:idm network:im:whatsapp network:ldap network:messaging:kafka network:messaging:matrix network:messaging:mqtt network:messaging:xmpp network:NIS network:pidgin network:samba:CONTAINERS network:samba:STABLE network:telephony network:vpn network:vpn:wireguard network:wicked:factory Office openSUSE:infrastructure:MirrorCache openSUSE:Tools Printing Publishing Publishing:TeXLive science science:machinelearning security security:apparmor security:chipcard security:dehydrated security:forensics security:idm security:keepassxc security:netfilter security:OpenVAS:STABLE security:privacy security:sensor security:Stunnel security:tls server:database server:database:postgresql server:dns server:http server:irc server:mail server:monitoring server:monitoring:zabbix server:php:extensions server:search shells SUSE:SUSEStudio system:packagemanager system:packagemanager:dnf systemsmanagement systemsmanagement:Agama:Devel systemsmanagement:ansible systemsmanagement:cockpit systemsmanagement:opentofu systemsmanagement:saltstack systemsmanagement:SCC systemsmanagement:SCC:RMT systemsmanagement:terraform systemsmanagement:wbem systemsmanagement:yomi vdr Virtualization Virtualization:Appliances:Builder Virtualization:Appliances:Images:openSUSE-Tumbleweed Virtualization:containers Virtualization:containers:images Virtualization:vagrant Virtualization:VMware Virtualization:WSL windows:mingw windows:mingw:win32 windows:mingw:win64 X11:Bumblebee X11:common:Factory X11:Compiz X11:Deepin X11:Drivers:Video:Redesign X11:Enlightenment:Factory X11:FOX X11:GNUstep X11:lxde X11:LXQt X11:LXQt:Other X11:Pantheon X11:Pantheon:Apps X11:RemoteDesktop X11:Solus X11:Unity X11:Utilities X11:Wayland X11:windowmanagers X11:wxWidgets X11:XOrg YaST:Head zypp:Head Regards, Dominik

11 14