August 2024 - openSUSE Factory - openSUSE Mailing Lists

New Tumbleweed snapshot 20240810 released!
by Dominique Leuenberger 11 Aug '24

11 Aug '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: dracut (059+suse.628.g20b345b4 -> 059+suse.636.g9a22b6b0) erofs-utils (1.7.1 -> 1.8) flatpak gdm gnome-shell ipmitool kf6-attica (6.4.0 -> 6.5.0) kf6-baloo (6.4.0 -> 6.5.0) kf6-bluez-qt (6.4.0 -> 6.5.0) kf6-breeze-icons (6.4.0 -> 6.5.0) kf6-frameworkintegration (6.4.0 -> 6.5.0) kf6-karchive (6.4.0 -> 6.5.0) kf6-kauth (6.4.0 -> 6.5.0) kf6-kbookmarks (6.4.0 -> 6.5.0) kf6-kcalendarcore (6.4.0 -> 6.5.0) kf6-kcmutils (6.4.0 -> 6.5.0) kf6-kcodecs (6.4.0 -> 6.5.0) kf6-kcolorscheme (6.4.0 -> 6.5.0) kf6-kcompletion (6.4.0 -> 6.5.0) kf6-kconfig (6.4.0 -> 6.5.0) kf6-kconfigwidgets (6.4.0 -> 6.5.0) kf6-kcontacts (6.4.0 -> 6.5.0) kf6-kcoreaddons (6.4.0 -> 6.5.0) kf6-kcrash (6.4.0 -> 6.5.0) kf6-kdav (6.4.0 -> 6.5.0) kf6-kdbusaddons (6.4.0 -> 6.5.0) kf6-kdeclarative (6.4.0 -> 6.5.0) kf6-kded (6.4.0 -> 6.5.0) kf6-kdesu (6.4.0 -> 6.5.0) kf6-kdnssd (6.4.0 -> 6.5.0) kf6-kdoctools (6.4.0 -> 6.5.0) kf6-kfilemetadata (6.4.0 -> 6.5.0) kf6-kglobalaccel (6.4.0 -> 6.5.0) kf6-kguiaddons (6.4.0 -> 6.5.0) kf6-kholidays (6.4.0 -> 6.5.0) kf6-ki18n (6.4.0 -> 6.5.0) kf6-kiconthemes (6.4.0 -> 6.5.0) kf6-kidletime (6.4.0 -> 6.5.0) kf6-kimageformats (6.4.0 -> 6.5.0) kf6-kio (6.4.0 -> 6.5.0) kf6-kirigami (6.4.0 -> 6.5.0) kf6-kitemmodels (6.4.0 -> 6.5.0) kf6-kitemviews (6.4.0 -> 6.5.0) kf6-kjobwidgets (6.4.0 -> 6.5.0) kf6-knewstuff (6.4.0 -> 6.5.0) kf6-knotifications (6.4.0 -> 6.5.0) kf6-knotifyconfig (6.4.0 -> 6.5.0) kf6-kpackage (6.4.0 -> 6.5.0) kf6-kparts (6.4.0 -> 6.5.0) kf6-kplotting (6.4.0 -> 6.5.0) kf6-kpty (6.4.0 -> 6.5.0) kf6-kquickcharts (6.4.0 -> 6.5.0) kf6-krunner (6.4.0 -> 6.5.0) kf6-kservice (6.4.0 -> 6.5.0) kf6-kstatusnotifieritem (6.4.0 -> 6.5.0) kf6-ksvg (6.4.0 -> 6.5.0) kf6-ktexteditor (6.4.0 -> 6.5.0) kf6-ktexttemplate (6.4.0 -> 6.5.0) kf6-ktextwidgets (6.4.0 -> 6.5.0) kf6-kunitconversion (6.4.0 -> 6.5.0) kf6-kuserfeedback (6.4.0 -> 6.5.0) kf6-kwallet (6.4.0 -> 6.5.0) kf6-kwidgetsaddons (6.4.0 -> 6.5.0) kf6-kwindowsystem (6.4.0 -> 6.5.0) kf6-kxmlgui (6.4.0 -> 6.5.0) kf6-modemmanager-qt (6.4.0 -> 6.5.0) kf6-networkmanager-qt (6.4.0 -> 6.5.0) kf6-prison (6.4.0 -> 6.5.0) kf6-purpose (6.4.0 -> 6.5.0) kf6-qqc2-desktop-style (6.4.0 -> 6.5.0) kf6-solid (6.4.0 -> 6.5.0) kf6-sonnet (6.4.0 -> 6.5.0) kf6-syndication (6.4.0 -> 6.5.0) kf6-syntax-highlighting (6.4.0 -> 6.5.0) kf6-threadweaver (6.4.0 -> 6.5.0) libadwaita liblogging libyui (4.6.2 -> 4.6.3) libyui-ncurses (4.6.2 -> 4.6.3) libyui-ncurses-pkg (4.6.2 -> 4.6.3) libyui-qt (4.6.2 -> 4.6.3) libyui-qt-graph (4.6.2 -> 4.6.3) libyui-qt-pkg (4.6.2 -> 4.6.3) openSUSE-release (20240809 -> 20240810) openldap2 openldap2-contrib-src pavucontrol (5.0 -> 6.1) pcsc-lite (2.2.3 -> 2.3.0) pipewire (1.2.1 -> 1.2.2) python311 python311-core qt6-base selinux-policy (20240802 -> 20240809) systemd virtiofsd (1.10.1 -> 1.11.1) yast2-firewall (5.0.0 -> 5.0.1) yast2-security (5.0.0 -> 5.0.1) === Details === ==== dracut ==== Version update (059+suse.628.g20b345b4 -> 059+suse.636.g9a22b6b0) - Update to version 059+suse.636.g9a22b6b0: * fix(dracut): ldd output borked with `--sysroot` (bsc#1228659) * fix(dracut-functions.sh): only return block devices from get_persistent_dev * fix(convertfs): shellcheck * fix(convertfs): error in conditional expressions (bsc#1228847) ==== erofs-utils ==== Version update (1.7.1 -> 1.8) - Update to release 1.8 * Multi-threaded compression support with the mkfs.erofs utility. * Supporting the Intel IAA hardware accelerator using the QPL driver (for contemporary Xeon Scalable systems). * Initial support for Zstandard (Zstd) compression. ==== flatpak ==== Subpackages: flatpak-remote-flathub flatpak-selinux flatpak-zsh-completion libflatpak0 system-user-flatpak - As per documentation from flatpak 1.0: add weak dep on p11-kit-server for certificate transfer (boo#1188902) ==== gdm ==== Subpackages: gdm-lang gdm-schema gdmflexiserver libgdm1 typelib-1_0-Gdm-1_0 - Drop gdm-default-wm.patch: patch seems obsolete. The selection of default window manager happens by means of update-alternatives now. ==== gnome-shell ==== Subpackages: gnome-extensions gnome-shell-calendar gnome-shell-lang - Rebase SLE patches: + gnome-shell-gdm-login-applet.patch + gnome-shell-domain.patch + gnome-shell-fate324570-Make-GDM-background-image-configurable.patch + gnome-shell-jsc#SLE-16051-Input-method-recommendation.patch - Comment out gs-fate318433-prevent-same-account-multi-logins.patch Needs to be removed or rebased. ==== ipmitool ==== - Added ipmitool-fix_init_from_incompat_ptr_type.patch fixing a type which led to assignment from incompatible pointer type which is an error in GCC 14 [boo#1225992] ==== kf6-attica ==== Version update (6.4.0 -> 6.5.0) Subpackages: libKF6Attica6 - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update version to 6.5.0 * support new version field on DownloadDescription ==== kf6-baloo ==== Version update (6.4.0 -> 6.5.0) Subpackages: kf6-baloo-file kf6-baloo-imports kf6-baloo-kioslaves kf6-baloo-tools libKF6Baloo6 libKF6Baloo6-lang libKF6BalooEngine6 - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update version to 6.5.0 ==== kf6-bluez-qt ==== Version update (6.4.0 -> 6.5.0) Subpackages: kf6-bluez-qt-imports libKF6BluezQt6 - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Manager: Fix connections for the connectedDevices list property * Update version to 6.5.0 ==== kf6-breeze-icons ==== Version update (6.4.0 -> 6.5.0) Subpackages: libKF6BreezeIcons6 - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Add 22px color (and monochrome, using *-symbolic) category icons. (kde#489347) * Make 16px list-remove-symbolic be a link to the base icon * Add symlinks for Crow Translate icons (kde#489984) * Add flatpak symlink for Git Cola * Add icon to indicate adding to a playlist immediately after the current track * Update version to 6.5.0 ==== kf6-frameworkintegration ==== Version update (6.4.0 -> 6.5.0) Subpackages: kf6-frameworkintegration-plugin libKF6Style6 - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * plasma_workspace.notifyrc: relabel to match button * Update version to 6.5.0 ==== kf6-karchive ==== Version update (6.4.0 -> 6.5.0) Subpackages: libKF6Archive6 libKF6Archive6-lang - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Allow passing QIODevice::Truncate in open mode * Update version to 6.5.0 ==== kf6-kauth ==== Version update (6.4.0 -> 6.5.0) Subpackages: kf6-kauth-lang libKF6AuthCore6 - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Allow the dbus backend to pass file descriptors as arguments * Ensure that qt dbus macros are available with KAUTH_BUILD_CODEGENERATOR_ONLY=ON * Update version to 6.5.0 ==== kf6-kbookmarks ==== Version update (6.4.0 -> 6.5.0) Subpackages: libKF6Bookmarks6 libKF6Bookmarks6-lang libKF6BookmarksWidgets6 - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Update version to 6.5.0 ==== kf6-kcalendarcore ==== Version update (6.4.0 -> 6.5.0) - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Update version to 6.5.0 ==== kf6-kcmutils ==== Version update (6.4.0 -> 6.5.0) Subpackages: kf6-kcmutils-imports kf6-kcmutils-lang libKF6KCMUtils6 libKF6KCMUtils6-lang libKF6KCMUtilsCore6 libKF6KCMUtilsQuick6 - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * AbstractKCM: Document what extraFooterTopPadding is for * AbstractKCM: remove false deprecation notice * Update version to 6.5.0 ==== kf6-kcodecs ==== Version update (6.4.0 -> 6.5.0) Subpackages: libKF6Codecs6 libKF6Codecs6-lang - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Update version to 6.5.0 * Add static build support ==== kf6-kcolorscheme ==== Version update (6.4.0 -> 6.5.0) Subpackages: libKF6ColorScheme6 libKF6ColorScheme6-lang - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * bundle essential breeze color schemes as resource * Update version to 6.5.0 ==== kf6-kcompletion ==== Version update (6.4.0 -> 6.5.0) Subpackages: libKF6Completion6 libKF6Completion6-lang - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Update version to 6.5.0 ==== kf6-kconfig ==== Version update (6.4.0 -> 6.5.0) Subpackages: kconf_update6 kf6-kconfig-imports libKF6ConfigCore6 libKF6ConfigCore6-lang libKF6ConfigGui6 libKF6ConfigQml6 - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * ksharedconfig: move statercs to state dir * Explain what "desktop entry spec separator semantics" means * Reapply "don't create root-only readable files in /etc/xdg" * Make Qt6Quick dependency for QML plugin private * Update version to 6.5.0 * Expose KWindowStateSaver in the QML interface * Sync config group on KWindowStateSaver::timerEvent * don't do tests in ~/.kde-unit-test ==== kf6-kconfigwidgets ==== Version update (6.4.0 -> 6.5.0) Subpackages: libKF6ConfigWidgets6 libKF6ConfigWidgets6-lang - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Update version to 6.5.0 ==== kf6-kcontacts ==== Version update (6.4.0 -> 6.5.0) Subpackages: libKF6Contacts6 libKF6Contacts6-lang - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Update version to 6.5.0 ==== kf6-kcoreaddons ==== Version update (6.4.0 -> 6.5.0) Subpackages: kf6-kcoreaddons-imports kf6-kcoreaddons-lang libKF6CoreAddons6 - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Enable cppcheck * Add missing license header * Add QML Format example * [qml/formats] Drop no longer needed function * Remove obsolete doc comment * Replace deprecated globalMatch with globalMatchView * Update version to 6.5.0 ==== kf6-kcrash ==== Version update (6.4.0 -> 6.5.0) Subpackages: libKF6Crash6 - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * metadata: Include frameworks version number * metadata: pass along qt version * don't capture unused variable * Add CMakelint formatting commit to .git-blame-ignore-revs * Update version to 6.5.0 ==== kf6-kdav ==== Version update (6.4.0 -> 6.5.0) Subpackages: libKF6DAV6 libKF6DAV6-lang - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Update version to 6.5.0 ==== kf6-kdbusaddons ==== Version update (6.4.0 -> 6.5.0) Subpackages: kf6-kdbusaddons-tools libKF6DBusAddons6 libKF6DBusAddons6-lang - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Update version to 6.5.0 ==== kf6-kdeclarative ==== Version update (6.4.0 -> 6.5.0) Subpackages: kf6-kdeclarative-imports libKF6CalendarEvents6 libKF6CalendarEvents6-lang - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * KeySequenceItem: be Accessible.Button, not Checkbox * Update version to 6.5.0 * KeySequenceItem: Use KMessageDialog for displaying conflict messages * kquickcontrols: Drop validation code from KeySequenceHelper * kquickcontrols: Use KeySequenceValidator in KeySequenceItem (kde#483199) * kquickcontrols: Introduce private KeySequenceValidator type ==== kf6-kded ==== Version update (6.4.0 -> 6.5.0) - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Update version to 6.5.0 ==== kf6-kdesu ==== Version update (6.4.0 -> 6.5.0) Subpackages: libKF6Su6 libKF6Su6-lang - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Update version to 6.5.0 ==== kf6-kdnssd ==== Version update (6.4.0 -> 6.5.0) Subpackages: libKF6DNSSD6 libKF6DNSSD6-lang - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Update version to 6.5.0 ==== kf6-kdoctools ==== Version update (6.4.0 -> 6.5.0) Subpackages: kf6-kdoctools-lang libKF6DocTools6 - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Update version to 6.5.0 ==== kf6-kfilemetadata ==== Version update (6.4.0 -> 6.5.0) Subpackages: kf6-kfilemetadata-lang libKF6FileMetaData3 - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * [Extractors] Clarify Qt::Gui dependencies * Update version to 6.5.0 ==== kf6-kglobalaccel ==== Version update (6.4.0 -> 6.5.0) Subpackages: libKF6GlobalAccel6 libKF6GlobalAccel6-lang - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Update version to 6.5.0 ==== kf6-kguiaddons ==== Version update (6.4.0 -> 6.5.0) Subpackages: libKF6GuiAddons6 - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Add missing license text * Update version to 6.5.0 ==== kf6-kholidays ==== Version update (6.4.0 -> 6.5.0) Subpackages: kf6-kholidays-imports libKF6Holidays6 libKF6Holidays6-lang - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Kazakhstan: Add National Book Day * Update version to 6.5.0 ==== kf6-ki18n ==== Version update (6.4.0 -> 6.5.0) Subpackages: libKF6I18n6 libKF6I18n6-lang - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Use more specific names for the functions * Add comment for translators in example code * Code cleanup * Minor Doxygen change * Build with older clang versions too * Test also retranslateFormatString * Make retranslateFormatString() call function from correct namespace and adjust code documentation * Add helper method for setting a plural-aware spin box prefix/suffix * Update version to 6.5.0 ==== kf6-kiconthemes ==== Version update (6.4.0 -> 6.5.0) Subpackages: kf6-kiconthemes-imports libKF6IconThemes6 libKF6IconThemes6-lang libKF6IconWidgets6 - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * fix icon recoloring for portable installers * Overhaul KIconEngine docs * Deprecate KIconLoader::drawOverlays * Deprecate movie loading API * Add back effect into cache key (kde#490795) * Deprecate KIconEffect::apply API * Refactor icon effect application * [kiconeffect] Add static API for active effect * [kiconeffect] Add static API for disabled effect * [kiconeffects] Drop color and color2 members * [kiconeffects] Don't read effect settings from kconfig * [kiconeffect] Replace raw numbers with relevant enum * Add note to prefer QIcon::fromTheme over KIconLoader * Update version to 6.5.0 ==== kf6-kidletime ==== Version update (6.4.0 -> 6.5.0) Subpackages: kf6-kidletime-plugins libKF6IdleTime6 - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Update version to 6.5.0 ==== kf6-kimageformats ==== Version update (6.4.0 -> 6.5.0) - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * JXL: added ImageTransformation option * xcf: Fix crash on malformed files * pcx: Fix crash in broken files * xcf: Fix crash on broken files * pcx: fix crash on invalid files * pcx: fix crash on invalid files * exr: added some usefull attributes * pcx: Read 16 color images that are 4bpp and 1 plane * Full range HDR support * Prepare gitlab for files that are coming int the next commit * avif: check return values * raw: Fix compiler warning with macro redefinition in Windows * Update version to 6.5.0 ==== kf6-kio ==== Version update (6.4.0 -> 6.5.0) Subpackages: kf6-kio-lang libKF6KIO6 - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Too many changes since 6.4.0, only listing bugfixes: * kfileitem: show relative path for rel symlink (kde#456198) * KFilePlacesView: Show label in tooltip if it is elided (kde#454436) * Remove parent for DropMenu (kde#490183) - Drop patch, merged upstream: * 0001-Remove-parent-for-DropMenu.patch ==== kf6-kirigami ==== Version update (6.4.0 -> 6.5.0) Subpackages: kf6-kirigami-imports libKirigamiPlatform6 - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Relicense MenuDialog and PromptDialog to LGPL * GlobalDrawerActionItem: Fix tooltip * ContextualHelpButton: make text always accessible * Convert license headers to SPDX * Port dialogs to pragma ComponentBehavior: Bound * Dialog: Support variable base padding * Dialog: Add some null safety * Dialog: Fix ScrollView::contentItem management * Update version to 6.5.0 * We can Use directly nullptr * fix: install KirigamiPrivate soversion * NavigationTabButton: Drop bold font workaround ==== kf6-kitemmodels ==== Version update (6.4.0 -> 6.5.0) Subpackages: kf6-kitemmodels-imports libKF6ItemModels6 - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Update version to 6.5.0 * fix incorrect QML element name in documentation ==== kf6-kitemviews ==== Version update (6.4.0 -> 6.5.0) Subpackages: libKF6ItemViews6 libKF6ItemViews6-lang - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Update version to 6.5.0 ==== kf6-kjobwidgets ==== Version update (6.4.0 -> 6.5.0) Subpackages: libKF6JobWidgets6 libKF6JobWidgets6-lang - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Update version to 6.5.0 ==== kf6-knewstuff ==== Version update (6.4.0 -> 6.5.0) Subpackages: kf6-knewstuff-imports libKF6NewStuffCore6 libKF6NewStuffCore6-lang libKF6NewStuffWidgets6 - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * support new version field on DownloadLinkInformation * QML: Use some better property types * EntryDetails.qml: Qualify newStuffModel, use downloadItemId (kde#483659) * Update version to 6.5.0 * Use KPackageJob::update instead of ::install ==== kf6-knotifications ==== Version update (6.4.0 -> 6.5.0) Subpackages: kf6-knotifications-imports libKF6Notifications6 libKF6Notifications6-lang - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * allow to build on oses without dbus and any other backend * Update version to 6.5.0 ==== kf6-knotifyconfig ==== Version update (6.4.0 -> 6.5.0) Subpackages: libKF6NotifyConfig6 libKF6NotifyConfig6-lang - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Update version to 6.5.0 ==== kf6-kpackage ==== Version update (6.4.0 -> 6.5.0) Subpackages: kf6-kpackage-lang libKF6Package6 - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Update version to 6.5.0 ==== kf6-kparts ==== Version update (6.4.0 -> 6.5.0) Subpackages: libKF6Parts6 libKF6Parts6-lang - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Use the correct check to determine whether initial preference should be read from KParts or KPlugin * Update version to 6.5.0 ==== kf6-kplotting ==== Version update (6.4.0 -> 6.5.0) - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Update version to 6.5.0 ==== kf6-kpty ==== Version update (6.4.0 -> 6.5.0) Subpackages: libKF6Pty6 libKF6Pty6-lang - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Update version to 6.5.0 ==== kf6-kquickcharts ==== Version update (6.4.0 -> 6.5.0) - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Update version to 6.5.0 ==== kf6-krunner ==== Version update (6.4.0 -> 6.5.0) Subpackages: libKF6Runner6 - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Update version to 6.5.0 ==== kf6-kservice ==== Version update (6.4.0 -> 6.5.0) Subpackages: kf6-kservice-lang libKF6Service6 - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * store canonicalFilePath instead of looking it up twice * use canonicalFilePath instead of absoluteFilePath * Use absolute path to mimeapps.list * Update version to 6.5.0 ==== kf6-kstatusnotifieritem ==== Version update (6.4.0 -> 6.5.0) Subpackages: libKF6StatusNotifierItem6 libKF6StatusNotifierItem6-lang - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Add API to control quit behavior * Update version to 6.5.0 ==== kf6-ksvg ==== Version update (6.4.0 -> 6.5.0) Subpackages: kf6-ksvg-imports libKF6Svg6 - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * findInCache: Compare last modified to boot time if timestamp is 0 (kde#453876) * Update version to 6.5.0 * Drop dead code ==== kf6-ktexteditor ==== Version update (6.4.0 -> 6.5.0) Subpackages: kf6-ktexteditor-lang libKF6TextEditor6 - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Fix drag pixmap with wrapped lines (kde#476979) * Add actions to convert spaces to tabs and vice versa (kde#456736) * use ktexteditor-script-tester6 for javascript tests * fix -Woverflow warning with gcc * templates: Remove one level of nesting * Ignore buffer signals in completion on undo/redo * cursorToOffset: remove unnecessary line variable * Fix formatting * Update version to 6.5.0 * src/view/kateview.cpp (KTextEditor::ViewPrivate::setupActions) : Fix typo in m_toggleShowSpace and m_toggleDynWrap whatsThis text. * Treat 0x0000 to 0x001F as non-printable * add action to quick toggle space visibility ==== kf6-ktexttemplate ==== Version update (6.4.0 -> 6.5.0) Subpackages: libKF6TextTemplate6 - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Update version to 6.5.0 ==== kf6-ktextwidgets ==== Version update (6.4.0 -> 6.5.0) Subpackages: libKF6TextWidgets6 libKF6TextWidgets6-lang - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Update version to 6.5.0 ==== kf6-kunitconversion ==== Version update (6.4.0 -> 6.5.0) Subpackages: libKF6UnitConversion6 libKF6UnitConversion6-lang - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Update version to 6.5.0 ==== kf6-kuserfeedback ==== Version update (6.4.0 -> 6.5.0) Subpackages: kf6-kuserfeedback-imports kf6-kuserfeedback-lang libKF6UserFeedbackCore6 libKF6UserFeedbackWidgets6 - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Update version to 6.5.0 ==== kf6-kwallet ==== Version update (6.4.0 -> 6.5.0) Subpackages: kf6-kwallet-tools kf6-kwallet-tools-lang kwalletd6 kwalletd6-lang libKF6Wallet6 libKF6WalletBackend6 - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Update version to 6.5.0 ==== kf6-kwidgetsaddons ==== Version update (6.4.0 -> 6.5.0) Subpackages: libKF6WidgetsAddons6 libKF6WidgetsAddons6-lang - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * fix that last line in fonts list is only half visible (kde#488079) * avoid the creation of toplevel widget (kde#490712) * Remove unused license text * Partially revert cccaa8f89897146043a535d45a276e3a57412815 * Deprecate KJobWidgets::setWindowHandle,windowHandle * Fix tab not highlighted in some cases * Fix multiple overlays being installed over tab (kde#490213) * Update version to 6.5.0 - Drop patch, merged upstream: * 0001-Partially-revert-cccaa8.patch ==== kf6-kwindowsystem ==== Version update (6.4.0 -> 6.5.0) Subpackages: kf6-kwindowsystem-imports libKF6WindowSystem6 libKF6WindowSystem6-lang - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Update version to 6.5.0 ==== kf6-kxmlgui ==== Version update (6.4.0 -> 6.5.0) Subpackages: libKF6XmlGui6 libKF6XmlGui6-lang - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Remove QTreeWidgetHack, the methods are public now * Fix compile error of krichtexteditor on Craft on Windows * Update version to 6.5.0 ==== kf6-modemmanager-qt ==== Version update (6.4.0 -> 6.5.0) Subpackages: libKF6ModemManagerQt6 - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Update version to 6.5.0 ==== kf6-networkmanager-qt ==== Version update (6.4.0 -> 6.5.0) Subpackages: kf6-networkmanager-qt-imports libKF6NetworkManagerQt6 - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * ConnectionSettings: Support MeCard SAE security type * Update version to 6.5.0 ==== kf6-prison ==== Version update (6.4.0 -> 6.5.0) Subpackages: kf6-prison-imports libKF6Prison6 - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Update version to 6.5.0 ==== kf6-purpose ==== Version update (6.4.0 -> 6.5.0) Subpackages: kf6-purpose-lang kf6-purpose-services libKF6Purpose6 libKF6PurposeWidgets6 - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Update version to 6.5.0 ==== kf6-qqc2-desktop-style ==== Version update (6.4.0 -> 6.5.0) Subpackages: kf6-qqc2-desktop-style-lang - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * ScrollBar: Fix custom scrolling behavior (kde#488092) * Update version to 6.5.0 ==== kf6-solid ==== Version update (6.4.0 -> 6.5.0) Subpackages: kf6-solid-tools libKF6Solid6 libKF6Solid6-lang - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Update version to 6.5.0 * udev/cpuinfo_arm: add M2 Pro/Max core variants ==== kf6-sonnet ==== Version update (6.4.0 -> 6.5.0) Subpackages: kf6-sonnet-imports libKF6SonnetCore6 libKF6SonnetCore6-lang libKF6SonnetUi6 - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Downgrade qCWarning to qCDebug * Avoid initializing full HSpellDict when getting languages (kde#421451) * Update version to 6.5.0 * Fix SONNET_USE_QML=OFF by moving ECMQmlModule behind the conditional ==== kf6-syndication ==== Version update (6.4.0 -> 6.5.0) Subpackages: libKF6Syndication6 - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * Update version to 6.5.0 ==== kf6-syntax-highlighting ==== Version update (6.4.0 -> 6.5.0) Subpackages: kf6-syntax-highlighting-imports libKF6SyntaxHighlighting6 libKF6SyntaxHighlighting6-lang - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * earthfile.xml: modernize highlighter to support Earthly 0.8 features * C++: add floating-point literal suffixes of C++23 * Python: add some special variables and fix '\' line continuation after a string * add .clang-format and .clang-tidy files with YAML * Zig: fix range operator preceded by a number: [0..] * Odin: add raw string color * Update syntax highlighting for kdesrc-buildrc * Update version to 6.5.0 * cmake.xml: update syntax for CMake 3.30 * inc version after done type adding * hare: add done keyword ==== kf6-threadweaver ==== Version update (6.4.0 -> 6.5.0) - Update to 6.5.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/6/6.5.0 - Changes since 6.4.0: * Update dependency version to 6.5.0 * ensure windows tests work * only enter loop if signal didn't arrive before that * try to fix windows hang in tests * Update version to 6.5.0 ==== libadwaita ==== Subpackages: libadwaita-1-0 libadwaita-lang typelib-1_0-Adw-1 - Fix BuildRequires minimal version of gtk4 from 4.11.3 to 4.13.4 as per src/meson.build. ==== liblogging ==== - fix build error with gcc14 (bsc#1221715) * add 0001-support-build-with-gcc-14.patch ==== libyui ==== Version update (4.6.2 -> 4.6.3) - Add gcc-fortran to build requirements as a work-around to boost now really requiring quadmath.h. (boo#1225861) - 4.6.3 ==== libyui-ncurses ==== Version update (4.6.2 -> 4.6.3) - Add gcc-fortran to build requirements as a work-around to boost now really requiring quadmath.h. (boo#1225861) - 4.6.3 ==== libyui-ncurses-pkg ==== Version update (4.6.2 -> 4.6.3) - Add gcc-fortran to build requirements as a work-around to boost now really requiring quadmath.h. (boo#1225861) - 4.6.3 ==== libyui-qt ==== Version update (4.6.2 -> 4.6.3) - Add gcc-fortran to build requirements as a work-around to boost now really requiring quadmath.h. (boo#1225861) - 4.6.3 ==== libyui-qt-graph ==== Version update (4.6.2 -> 4.6.3) - Add gcc-fortran to build requirements as a work-around to boost now really requiring quadmath.h. (boo#1225861) - 4.6.3 ==== libyui-qt-pkg ==== Version update (4.6.2 -> 4.6.3) - Add gcc-fortran to build requirements as a work-around to boost now really requiring quadmath.h. (boo#1225861) - 4.6.3 ==== openSUSE-release ==== Version update (20240809 -> 20240810) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== openldap2 ==== Subpackages: libldap-data libldap2 libldap2-32bit openldap2-client - Add back two hunks from gcc14.patch as gcc14-v2.patch. Not all bugs that gcc14.patch fixed were dealt with in the upstream -- one bug is caused by 0016-Clear-shared-key-only-in-close-function.patch and one bug still remains in the upstream. ==== openldap2-contrib-src ==== - Add back two hunks from gcc14.patch as gcc14-v2.patch. Not all bugs that gcc14.patch fixed were dealt with in the upstream -- one bug is caused by 0016-Clear-shared-key-only-in-close-function.patch and one bug still remains in the upstream. ==== pavucontrol ==== Version update (5.0 -> 6.1) Subpackages: pavucontrol-lang - Update to version 6.1: * Fix translations not being correctly picked up. * Fix bug where cards don't go away when unplugged. * Fix app naming in desktop file (Volume Control). * Fix Bluetooth codec selection alignment. * Update Swedish translation. - Changes in version 6.0: * Migrate from Gtk 3 to 4. * Embed UI resources in executable. * Rename "Set as fallback" to "Default" for better legibility. * Support 144 Hz monitors with level bars. * App icons will fallback to generic rather than missing image, and this will be more common with Gtk 4. * Lots of translation updates. * Drop autotools build in favour of meson. * Make libcanberra dependency optional. - Update dependencies ==== pcsc-lite ==== Version update (2.2.3 -> 2.3.0) Subpackages: libpcsclite1 - version 2.3.0 - SCardGetStatusChange(): add the number of reader events - Add Appstream metainfo announcing HW support - meson: specify minimum meson version to use - fix formats under musl libc - Send libpcsclite.so logs to stderr instead of stdout - Some other minor improvements ==== pipewire ==== Version update (1.2.1 -> 1.2.2) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-jack pipewire-lang pipewire-libjack-0_3 pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Update to version 1.2.2: * Highlights - Fix some more fallout of the async nodes rewrite. Fixes some crackling, xruns and possibly also some crashes in some cases. - Fix freewheeling timeouts in case of xruns. This fixes ardour export. - Fix event mixdown in JACK. Fixes qsynth and possibly other apps. - Some more small fixes and improvements. * PipeWire - Add a new SPA_IO_CLOCK_FLAG_XRUN_RECOVER flag when the process function is called because of xrun recovery. - Properly stop nodes in all cases, this avoids spurious xruns and scheduling errors. (#4122) - Make sure async nodes receive an async link in all cases. Do the processing of source output ports slightly differently to make sure we don't cause latency for sources. (#4138) (#4133) - Fix some races when negotiating and starting nodes. (#4094) - Actually include the config.h header to use malloc_trim() to reduce memory usage in pulse-server. * Modules - Avoid unloading some modules on stream errors because it is possible to recover from the error. (#4121) - Fix a (harmless) warning in module-rtp because of comparing samples and time. (#4095) * SPA - Let the freewheel driver detect xrun recovery and handle the timeouts correctly. This fixes an issue with ardour export. - Remove the HDMI/AC3 profiles. they turn out to fail on some hardware with no way to detect this. - Signal the eventfd when the loop is full to make sure the other thread is woken up to process the queue. * JACK - Don't check timestamps when mixing down events. The timestamps are only checked when writing new events with the public API. This fixes an issue where qsynth would not receive midi events anymore. - Fix the jack_get_time() function, it was returning nano instead of micro seconds. ==== python311 ==== Subpackages: python311-curses python311-dbm python311-x86-64-v3 - Add CVE-2024-6923-email-hdr-inject.patch to prevent email header injection due to unquoted newlines (bsc#1228780, CVE-2024-6923). - %{profileopt} variable is set according to the variable %{do_profiling} (bsc#1227999) ==== python311-core ==== Subpackages: libpython3_11-1_0 libpython3_11-1_0-x86-64-v3 python311-base python311-base-x86-64-v3 - Add CVE-2024-6923-email-hdr-inject.patch to prevent email header injection due to unquoted newlines (bsc#1228780, CVE-2024-6923). - %{profileopt} variable is set according to the variable %{do_profiling} (bsc#1227999) ==== qt6-base ==== Subpackages: libQt6Concurrent6 libQt6Core6 libQt6DBus6 libQt6Gui6 libQt6Network6 libQt6OpenGL6 libQt6OpenGLWidgets6 libQt6PrintSupport6 libQt6Sql6 libQt6Test6 libQt6Widgets6 libQt6Xml6 qt6-network-tls qt6-networkinformation-glib qt6-networkinformation-nm qt6-platformtheme-gtk3 qt6-printsupport-cups qt6-sql-mysql qt6-sql-sqlite - Add gcc14.patch so that the package builds for 32bit with GCC 14. ==== selinux-policy ==== Version update (20240802 -> 20240809) Subpackages: selinux-policy-targeted - Update to version 20240809: * Label /run/udev/rules.d as udev_rules_t * Provide type for sysstat lock files (bsc#1228247) * Allow snapper to delete unlabeled_t files (bsc#1228889) - Update to version 20240808: * Use new kanidm interfaces * Initial module for kanidm * Update bootupd policy * Allow rhsmcertd read/write access to /dev/papr-sysparm * Label /dev/papr-sysparm and /dev/papr-vpd * Allow abrt-dump-journal-core connect to winbindd * Allow systemd-hostnamed shut down nscd * Allow systemd-pstore send a message to syslogd over a unix domain * Allow postfix_domain map postfix_etc_t files * Allow microcode create /sys/devices/system/cpu/microcode/reload * Allow rhsmcertd read, write, and map ica tmpfs files * Support SGX devices * Allow initrc_t transition to passwd_t * Update fstab and cryptsetup generators policy * Allow xdm_t read and write the dma device * Update stalld policy for bpf usage * Allow systemd_gpt_generator to getattr on DOS directories * Make cgroup_memory_pressure_t a part of the file_type attribute * Allow ssh_t to change role to system_r * Update policy for coreos generators * Allow init_t nnp domain transition to firewalld_t * Label /run/modprobe.d with modules_conf_t * Allow virtnodedevd run udev with a domain transition * Allow virtnodedev_t create and use virtnodedev_lock_t * Allow virtstoraged manage files with virt_content_t type * Allow virtqemud unmount a filesystem with extended attributes * Allow svirt_t connect to unconfined_t over a unix domain socket * Update afterburn file transition policy * Allow systemd_generator read attributes of all filesystems * Allow fstab-generator read and write cryptsetup-generator unit file * Allow cryptsetup-generator read and write fstab-generator unit file * Allow systemd_generator map files in /etc * Allow systemd_generator read init's process state * Allow coreos-installer-generator read sssd public files * Allow coreos-installer-generator work with partitions * Label /etc/mdadm.conf.d with mdadm_conf_t * Confine coreos generators * Label /run/metadata with afterburn_runtime_t * Allow afterburn list ssh home directory * Label samba certificates with samba_cert_t * Label /run/coreos-installer-reboot with coreos_installer_var_run_t * Allow virtqemud read virt-dbus process state * Allow staff user dbus chat with virt-dbus * Allow staff use watch /run/systemd * Allow systemd_generator to write kmsg * Allow virtqemud connect to sanlock over a unix stream socket * Allow virtqemud relabel virt_var_run_t directories * Allow svirt_tcg_t read vm sysctls * Allow virtnodedevd connect to systemd-userdbd over a unix socket * Allow svirt read virtqemud fifo files * Allow svirt attach_queue to a virtqemud tun_socket * Allow virtqemud run ssh client with a transition * Allow virt_dbus_t connect to virtqemud_t over a unix stream socket * Update keyutils policy * Allow sshd_keygen_t connect to userdbd over a unix stream socket * Allow postfix-smtpd read mysql config files * Allow locate stream connect to systemd-userdbd * Allow the staff user use wireshark * Allow updatedb connect to userdbd over a unix stream socket * Allow gpg_t set attributes of public-keys.d * Allow gpg_t get attributes of login_userdomain stream * Allow systemd_getty_generator_t read /proc/1/environ * Allow systemd_getty_generator_t to read and write to tty_device_t * Drop publicfile module * Remove permissive domain for systemd_nsresourced_t * Change fs_dontaudit_write_cgroup_files() to apply to cgroup_t * Label /usr/bin/samba-gpupdate with samba_gpupdate_exec_t * Allow to create and delete socket files created by rhsm.service * Allow virtnetworkd exec shell when virt_hooks_unconfined is on * Allow unconfined_service_t transition to passwd_t * Support /var is empty * Allow abrt-dump-journal read all non_security socket files * Allow timemaster write to sysfs files * Dontaudit domain write cgroup files * Label /usr/lib/node_modules/npm/bin with bin_t * Allow ip the setexec permission * Allow systemd-networkd write files in /var/lib/systemd/network * Fix typo in systemd_nsresourced_prog_run_bpf() ==== systemd ==== Subpackages: libsystemd0 libsystemd0-32bit libudev1 systemd-32bit systemd-container systemd-lang udev - Order the update of udev and systemd-boot right after systemd (bsc#1228659) ==== virtiofsd ==== Version update (1.10.1 -> 1.11.1) - Service: Remove deprecated cargo_config and cargo_audit services, both are now handled by the cargo_vendor service - Add new upstream features for the libvirt/virtiofsd interop config - Fix build failure after update to Rust 1.80 (bsc#1228972) - Update to version 1.11.1: * Changes since 1.11.0: * Add "separate-options" capability * Force-call DESTROY on INIT * Do not require --shared-dir to print capabilities * Enable notification on vring failure * Bump version to v1.11.0 * deps: Update to the latest rust-vmm crates * deps: Update to the latest libc * Note migration capability * README: Document new migration switches * Introduce --migration-mode switch * Introduce --migration-confirm-paths * PassthroughFs::init: Point to NegotiatedOpts * Implement device state deserialization * Add get_path_by_fd()/printable_fd() functions * Implement device state serialization * Implement preserialization/premigration * Define our serialized device state * Introduce serializable file handles * Introduce --migration-verify-handles * Introduce --migration-on-error switch * Allow explicitly invalid inodes and handles * Split try_lookup() off of do_lookup() * Add ReadDir::new_no_seek() * Put open_root_node() into own function * Add type for strong inode references * Hide InodeStore locking * Remove `&Inode` indirection * Add device state infrastructure * Add ErrorContext, ResultErrorContext traits * Add other_io_error() utility function * Add support for dirty memory logging * opt: Introduce --allow-mmap flag * fuse: Enable DIRECT_IO_ALLOW_MMAP with --allow-mmap * Add '--shared-dir' as required if '-o' is missing * Close the listener in the parent process * Check if the socket parent directory exists * Check if the shared directory exists * deps: Bump syslog version * Increase maximum virtqueue size to 32768 * Allow multiple uid/gid maps * Hide clippy warning in readdir * Shorten `std::result::Result` where possible * Remove redundant Result imports * deps: Bump vhost and vhost-user-backend versions * Remove virtio-bindings feature * Directly write uid/gidmap where possible * Fix clippy warning: Complicated `match` condition * Fix clippy warning: Skip converting to owned * Fix clippy warning: Make use of `.cloned()` * Fix new compiler warnings ==== yast2-firewall ==== Version update (5.0.0 -> 5.0.1) - In case of autoinstallation keep the firewall service state in the Installation::SecuritySettings for not conflicting with the proposal (bsc#1216615) - 5.0.1 ==== yast2-security ==== Version update (5.0.0 -> 5.0.1) - Do not load the security settings from the security policy until needed (bsc#1216615). - 5.0.1

1 0

New Tumbleweed snapshot 20240809 released!
by Dominique Leuenberger 10 Aug '24

10 Aug '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: freerdp (3.6.3 -> 3.7.0) gcc13 (13.3.0+git8781 -> 13.3.1+git8964) glibc (2.39 -> 2.40) okteta (0.26.15 -> 0.26.16) openSUSE-release (20240808 -> 20240809) pam pam-full-src === Details === ==== freerdp ==== Version update (3.6.3 -> 3.7.0) Subpackages: libfreerdp3-3 librdtk0-0 libwinpr3-3 - Update to 3.7.0 * Support for FDK-AAC for sound and microphone redirection (activate with -DWITH_FDK_AAC=ON build option) This allows enabling the AAC compression that do not ship faad2 and/or faac * Support keyboard layouts as JSON resources (activate with -DWITH_KEYBOARD_LAYOUT_FROM_FILE=ON build option, also requires JSON support) This allows editing keyboard layouts for existing releases should the need arise * Support timezones as JSON resources (activate with -DWITH_TIMEZONE_FROM_FILE=ON -DWITH_TIMEZONE_COMPILED=OFF build options, also requires JSON support) Allows reading the mapping between IANA and windows timezones from a JSON file, allowing easier updates without recompile * Improve shadow server compatibility with windows 11 24H2 RDP client Windows 7 RFX and bitmap updates with multiple rectangles have been deactivated, so adjust shadow to not send such. Noteworthy changes: * Fix ActionScript paramter (#10423) * Support keyboard layouts as JSON resource (#10394) * Support timezones as JSON resource and command line argument (#10428 #10393 #10391) * Deactivate AsyncUpdate (#10402) * Compatibility fixes for shadow with windows 11 24H2 (#10455 #10422 #10420 #10416) * Fix SDL client autoreconnect (#10390) * Fix xfreerdp clipboard locking (#10385) * Improve logging (#10426 #10441) * Improve warnings and code checks (#10381 #10401 #10403 #10405 #10406 #10410 #10421 #10454) * Support FDK-AAC (#10372) * Fix drive redirection state transitions (#10367 #10374) * Support mth:// routing token (#10366) * Ignore unsupported SetThreadPriority (#10363) * Fix reported documentation and code typos (#10365 #10368 #10370 #10369 #10431 #10446) ==== gcc13 ==== Version update (13.3.0+git8781 -> 13.3.1+git8964) Subpackages: cpp13 gcc13-locale libgccjit0-gcc13 libstdc++6-devel-gcc13 - Update to gcc-13 branch head, 9d368828bd4d04ce507e02a581, git8964 * includes fix for samba build with glibc 2.40 - Add gcc13-rs6000-Adjust-fpatchable-function-entry.patch to fix the incorrect NOPs layout when -fpatchable-function-enry is passed in ppc64le. ==== glibc ==== Version update (2.39 -> 2.40) Subpackages: glibc-32bit glibc-devel glibc-extra glibc-gconv-modules-extra glibc-gconv-modules-extra-32bit glibc-lang glibc-locale glibc-locale-base nscd - Update to glibc 2.40 * The <stdbit.h> header type-generic macros have been changed when using GCC 14.1 or later to use __builtin_stdc_bit_ceil etc. built-in functions * The GNU C Library now supports a feature test macro _ISOC23_SOURCE to enable features from the ISO C23 standard * The ISO C23 function families introduced in TS 18661-4:2015 are now supported in <math.h> * A new tunable, glibc.rtld.enable_secure, can be used to run a program as if it were a setuid process * On Linux, the epoll header was updated to include epoll ioctl definitions and the related structure added in Linux kernel 6.9 * The fortify functionality has been significantly enhanced for building programs with clang against the GNU C Library * Many functions have been added to the vector library for aarch64 * On x86, memset can now use non-temporal stores to improve the performance of large writes * Architectures which use a 32-bit seconds-since-epoch field in struct lastlog, struct utmp, struct utmpx (such as i386, powerpc64le, rv32, rv64, x86-64) switched from a signed to an unsigned type for that field * __rseq_size now denotes the size of the active rseq area (20 bytes initially), not the size of struct rseq (32 bytes initially). - arm-dl-start-user.patch, duplocale-global-locale.patch, elf-parse-tunables.patch, glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch, glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch, glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch, glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch, iconv-iso-2022-cn-ext.patch, nscd-netgroup-cache-timeout.patch, s390-clone-error-clobber-r7.patch, sigisemptyset.patch, stdbit-builtins.patch, utmp-time-bits.patch: Removed - glibc-2.3.90-langpackdir.diff: Rediff ==== okteta ==== Version update (0.26.15 -> 0.26.16) Subpackages: libKasten4 libOkteta3 libkasten-lang libokteta-lang okteta-data - Update to 0.26.16: * Update translations ==== openSUSE-release ==== Version update (20240808 -> 20240809) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== pam ==== Subpackages: pam-32bit - Prevent cursor escape from the login prompt [bsc#1194818] * Added: pam-bsc1194818-cursor-escape.patch ==== pam-full-src ==== - Prevent cursor escape from the login prompt [bsc#1194818] * Added: pam-bsc1194818-cursor-escape.patch

1 0

Tumbleweed AArch64 iso
by Uli Beling 10 Aug '24

10 Aug '24

Can we expect a new updated version? Last version is dated 29.06.2024. Want to run it on my Radxa Rock 5b. Current version is not fully loading dtbs. Regards Uli

3 3

Since some 3 days - will be slow
by Ulf 10 Aug '24

10 Aug '24

Hi, since 3 days, my system is pritty slow up to not reacting after a while. Sometimes it is frozen for about some minutes (including Plasma Clock is not running). If I look at the the Plasma Monitor, I see the system is always near 100% (at least some cores). Extract from top, shows that kswapd0 is consuming a lot of ressources, anyhow 32GB RAM should be OK for a simple KDE/Plasma desktop. # top top - 09:17:18 up 1:15, 4 users, load average: 9.77, 8.64, 7.36 Tasks: 397 total, 6 running, 391 sleeping, 0 stopped, 0 zombie %Cpu(s): 11.7 us, 49.2 sy, 5.5 ni, 21.1 id, 12.5 wa, 0.0 hi, 0.0 si, 0.0 st MiB Mem : 31510.43+total, 123.113 free, 7698.504 used, 24290.14+buff/cache MiB Swap: 31502.68+total, 28989.93+free, 2512.750 used. 23811.92+avail Mem PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 103 root 20 0 0 0 0 R 100.0 0.000 37:10.57 kswapd0 5816 ulf 39 19 0.255t 8.901g 5.012g R 93.75 28.93 55:38.54 baloo_file_extr 111512 root 20 0 0 0 0 R 87.50 0.000 2:06.69 kworker/u32:2+btrfs-qgroup-rescan 598 root 20 0 0 0 0 R 68.75 0.000 30:00.40 btrfs-cleaner 5793 ulf 20 0 3354276 146044 11972 S 37.50 0.453 4:39.36 mysqld 5748 ulf 20 0 3208872 21800 11096 S 31.25 0.068 2:45.96 akonadiserver 6023 ulf 20 0 1428256 50772 40480 S 25.00 0.157 1:57.20 akonadi_imap_re 5078 ulf 20 0 6246912 229212 59300 S 12.50 0.710 7:09.63 plasmashell # top - 09:50:10 up 1:48, 4 users, load average: 11.25, 10.37, 9.74 Tasks: 424 total, 5 running, 419 sleeping, 0 stopped, 0 zombie %Cpu(s): 5.8 us, 48.2 sy, 14.6 ni, 3.6 id, 27.0 wa, 0.0 hi, 0.7 si, 0.0 st MiB Mem : 31510.43+total, 473.695 free, 8782.738 used, 22937.44+buff/cache MiB Swap: 31502.68+total, 28025.43+free, 3477.250 used. 22727.69+avail Mem PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 103 root 20 0 0 0 0 R 100.0 0.000 68:02.50 kswapd0 4800 ulf 9 -11 566112 11980 7244 R 100.0 0.037 0:38.79 wireplumber 5078 ulf 20 0 6318224 330376 78776 S 100.0 1.024 11:45.49 plasmashell 5816 ulf 39 19 0.255t 7.121g 3.452g R 100.0 23.14 83:20.69 baloo_file_extr 598 root 20 0 0 0 0 R 87.50 0.000 55:32.16 btrfs-cleaner 115138 root 30 10 1015528 582280 4744 D 37.50 1.805 12:03.07 borg 117471 root 20 0 5976 3664 2640 R 12.50 0.011 0:00.02 top # top - 09:56:19 up 1:54, 4 users, load average: 11.27, 11.21, 10.33 Tasks: 411 total, 4 running, 407 sleeping, 0 stopped, 0 zombie %Cpu(s): 8.3 us, 33.3 sy, 5.3 ni, 12.9 id, 38.6 wa, 0.0 hi, 1.5 si, 0.0 st MiB Mem : 31510.43+total, 427.461 free, 8524.664 used, 23192.59+buff/cache MiB Swap: 31502.68+total, 28160.93+free, 3341.750 used. 22985.76+avail Mem PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 4800 ulf 9 -11 566112 10852 6116 R 106.2 0.034 6:46.96 wireplumber 103 root 20 0 0 0 0 R 100.0 0.000 73:09.90 kswapd0 598 root 20 0 0 0 0 R 68.75 0.000 60:20.11 btrfs-cleaner 115138 root 30 10 1015748 920544 6292 D 50.00 2.853 13:31.17 borg 5078 ulf 20 0 6330620 320416 55676 S 12.50 0.993 12:27.42 plasmashell 4750 ulf -2 0 3085516 214216 177584 S 6.250 0.664 19:03.60 kwin_wayland 5816 ulf 39 19 0.255t 7.011g 3.486g D 6.250 22.78 87:57.58 baloo_file_extr After killing wireplumber and baloo_file_extr, as well swapoff -a # top - 11:07:16 up 3:05, 5 users, load average: 7.87, 6.71, 6.60 Tasks: 404 total, 3 running, 401 sleeping, 0 stopped, 0 zombie %Cpu(s): 10.4 us, 29.6 sy, 0.0 ni, 41.5 id, 16.3 wa, 0.0 hi, 2.2 si, 0.0 st MiB Mem : 31510.43+total, 310.660 free, 6013.328 used, 25934.19+buff/cache MiB Swap: 0.000 total, 0.000 free, 0.000 used. 25497.10+avail Mem PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 103 root 20 0 0 0 0 R 100.0 0.000 136:32.70 kswapd0 598 root 20 0 0 0 0 R 87.50 0.000 117:38.18 btrfs-cleaner 5793 ulf 20 0 3354276 215228 8964 S 50.00 0.667 16:26.30 mysqld 5748 ulf 20 0 3208872 27960 10324 S 31.25 0.087 7:57.38 akonadiserver 6023 ulf 20 0 1428256 41056 14760 S 25.00 0.127 5:34.51 akonadi_imap_re 7598 ulf 20 0 2302032 197316 156856 S 6.250 0.612 12:04.02 konsole > lsblk NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINTS nvme0n1 259:0 0 931,5G 0 disk ├─nvme0n1p1 259:1 0 512M 0 part /boot/efi ├─nvme0n1p2 259:2 0 900,2G 0 part /root │ /srv │ /home │ /usr/local │ /opt │ /var │ /boot/grub2/x86_64-efi │ /boot/grub2/i386-pc │ /.snapshots │ / └─nvme0n1p3 259:3 0 30,8G 0 part [SWAP] Any Idea what can be the reason? Ulf

5 16

Who is still using /etc/sysconfig/windowmanager?
by Thorsten Kukuk 09 Aug '24

09 Aug '24

Hi, when cleaning up aaa_base from old, outdated staff, I run over: /etc/sysconfig/windowmanager The DEFAULT_WM entry has: # This value is deprecated and not read by most display managers. # Use 'update-alternatives --config default-xsession.desktop' for configuration instead. Since this file is SUSE specific, who is really using this variable and can we drop that config file completely? DEFAULT_WM seems to be used by: * gdm (I think we can just drop that patch?) * xdm (we should hardcode DEFAULT_WM with "default" and are fine) I haven't found more. Then we have INSTALL_DESKTOP_EXTENSIONS Who is using that? I couldn't find anything using that variable. For me it looks like we should drop /etc/sysconfig/windowmanager if nothing is using that anymore to not confuse users. Thanks, Thorsten -- Thorsten Kukuk, Distinguished Engineer, Senior Architect, Future Technologies SUSE Software Solutions Germany GmbH, Frankenstraße 146, 90461 Nuernberg, Germany Managing Director: Ivo Totev, Andrew McDonald, Werner Knoblich (HRB 36809, AG Nürnberg)

6 11

Tumbleweed - Review of the week 2024/32
by Dominique Leuenberger 09 Aug '24

09 Aug '24

Dear Tumbleweed users and hackers, Despite the summer vacation period being in full swing, there is enough throughput to produce snapshots. During the last week, we created 6 of them, of which 5 could be published (The failed one was held back due to issues uncovered with Mesa 21.1.5, see https://bugzilla.opensuse.org/show_bug.cgi?id=1228164 for details). The five delivered snapshots (0803, 0805, 0806, 0807, and 0808) contained these changes: * GCC 14.2 * GStreamer 1.24.6 * libzypp 17.35.9 * Shim 15.8 * Linux kernel 6.10.3 * libxml 2.12.9 * Procps 4 (no longer as an alternative, but as a native replacement of procps 3.x) * fwupd 1.9.23 * GNOME 46.4 * KDE Plasma 6.1.4 Staging projects are currently busy building test distributions and running QA on these changes: * glibc 2.40 * Rust 1.80 * KDE Frameworks 6.5.0 * cURL 8.9.1: breaks test suites of libzypp and python-tornado6 * nftables 1.1.0: openQA is far from happy; nftables’ python bindings seem not to work * go 1.22 as default: only transactional-update-notifier seems to be blocking * Switch the default ffmpeg version from 6 to 7: xine-lib as the only blocker. A submit request is pending for the development project * dbus-broker: some progress was made last week; most QA tests are fine, there is just a race condition on shutdown (likely not new, but dbus-daemon might have waited longer to report it, by when the system had completely shut down and the error has been ‘swallowed’) * GCC 14: phase 2: use gcc14 as the default compiler – lots of help needed: https://build.opensuse.org/project/show/openSUSE:Factory:Staging:Gcc7 Cheers, Dominique

1 0

New Tumbleweed snapshot 20240808 released!
by Dominique Leuenberger 09 Aug '24

09 Aug '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: apache2 (2.4.61 -> 2.4.62) apache2-manual (2.4.61 -> 2.4.62) apache2-prefork (2.4.61 -> 2.4.62) apache2-utils (2.4.61 -> 2.4.62) bluedevil6 (6.1.3 -> 6.1.4) breeze6 (6.1.3 -> 6.1.4) breeze6-gtk (6.1.3 -> 6.1.4) discover6 (6.1.3 -> 6.1.4) drkonqi6 (6.1.3 -> 6.1.4) flatpak-kcm6 (6.1.3 -> 6.1.4) kactivitymanagerd6 (6.1.3 -> 6.1.4) kde-cli-tools6 (6.1.3 -> 6.1.4) kde-gtk-config6 (6.1.3 -> 6.1.4) kdecoration6 (6.1.3 -> 6.1.4) kdeplasma6-addons (6.1.3 -> 6.1.4) kgamma6 (6.1.3 -> 6.1.4) kglobalacceld6 (6.1.3 -> 6.1.4) kinfocenter6 (6.1.3 -> 6.1.4) kmenuedit6 (6.1.3 -> 6.1.4) kpipewire6 (6.1.3 -> 6.1.4) kscreen6 (6.1.3 -> 6.1.4) kscreenlocker6 (6.1.3 -> 6.1.4) ksshaskpass6 (6.1.3 -> 6.1.4) ksystemstats6 (6.1.3 -> 6.1.4) kwayland-integration6 (6.1.3 -> 6.1.4) kwayland6 (6.1.3 -> 6.1.4) kwin6 (6.1.3 -> 6.1.4) kwrited6 (6.1.3 -> 6.1.4) layer-shell-qt6 (6.1.3 -> 6.1.4) libdb-4_8 libkscreen6 (6.1.3 -> 6.1.4) libksysguard6 (6.1.3 -> 6.1.4) liborcus libplasma6 (6.1.3 -> 6.1.4) libvirt (10.5.0 -> 10.6.0) milou6 (6.1.3 -> 6.1.4) mpg123 (1.32.6 -> 1.32.7) ocean-sound-theme6 (6.1.3 -> 6.1.4) openSUSE-release (20240807 -> 20240808) pam_kwallet6 (6.1.3 -> 6.1.4) plasma5support6 (6.1.3 -> 6.1.4) plasma6-activities (6.1.3 -> 6.1.4) plasma6-activities-stats (6.1.3 -> 6.1.4) plasma6-browser-integration (6.1.3 -> 6.1.4) plasma6-desktop (6.1.3 -> 6.1.4) plasma6-disks (6.1.3 -> 6.1.4) plasma6-integration (6.1.3 -> 6.1.4) plasma6-nm (6.1.3 -> 6.1.4) plasma6-openSUSE plasma6-pa (6.1.3 -> 6.1.4) plasma6-print-manager (6.1.3 -> 6.1.4) plasma6-systemmonitor (6.1.3 -> 6.1.4) plasma6-thunderbolt (6.1.3 -> 6.1.4) plasma6-workspace (6.1.3 -> 6.1.4) polkit-kde-agent-6 (6.1.3 -> 6.1.4) powerdevil6 (6.1.3 -> 6.1.4) python-libvirt-python (10.5.0 -> 10.6.0) qqc2-breeze-style6 (6.1.3 -> 6.1.4) salt sddm-kcm6 (6.1.3 -> 6.1.4) systemsettings6 (6.1.3 -> 6.1.4) sysuser-tools virt-manager wacomtablet-kcm6 (6.1.3 -> 6.1.4) xdg-desktop-portal-kde6 (6.1.3 -> 6.1.4) === Details === ==== apache2 ==== Version update (2.4.61 -> 2.4.62) - Update to 2.4.62 * ) SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with mod_rewrite in server/vhost context on Windows (cve.mitre.org) [boo#1228098] SSRF in Apache HTTP Server on Windows with mod_rewrite in server/vhost context, allows to potentially leak NTML hashes to a malicious server via SSRF and malicious requests. Users are recommended to upgrade to version 2.4.62 which fixes this issue. Credits: Smi1e (DBAPPSecurity Ltd.) * ) SECURITY: CVE-2024-40725: Apache HTTP Server: source code disclosure with handlers configured via AddType (cve.mitre.org) [boo#1228097] A partial fix for CVE-2024-39884 in the core of Apache HTTP Server 2.4.61 ignores some use of the legacy content-type based configuration of handlers. "AddType" and similar configuration, under some circumstances where files are requested indirectly, result in source code disclosure of local content. For example, PHP scripts may be served instead of interpreted. Users are recommended to upgrade to version 2.4.62, which fixes this issue. * ) mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO, SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also allowing for "unix:" sockets with BalancerMember(s). PR 69168. [Yann Ylavic] * ) mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:" URLs. PR 69160 [Yann Ylavic] * ) mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2. [Joe Orton] * ) mod_ssl: Add support for loading certs/keys from pkcs11: URIs via OpenSSL 3.x providers. [Ingo Franzki <ifranzki linux.ibm.com>] * ) mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL >= 3.0. [Ruediger Pluem, Yann Ylavic] * ) mpm_worker: Fix possible warning (AH00045) about children processes not terminating timely. [Yann Ylavic] ==== apache2-manual ==== Version update (2.4.61 -> 2.4.62) - Update to 2.4.62 * ) SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with mod_rewrite in server/vhost context on Windows (cve.mitre.org) [boo#1228098] SSRF in Apache HTTP Server on Windows with mod_rewrite in server/vhost context, allows to potentially leak NTML hashes to a malicious server via SSRF and malicious requests. Users are recommended to upgrade to version 2.4.62 which fixes this issue. Credits: Smi1e (DBAPPSecurity Ltd.) * ) SECURITY: CVE-2024-40725: Apache HTTP Server: source code disclosure with handlers configured via AddType (cve.mitre.org) [boo#1228097] A partial fix for CVE-2024-39884 in the core of Apache HTTP Server 2.4.61 ignores some use of the legacy content-type based configuration of handlers. "AddType" and similar configuration, under some circumstances where files are requested indirectly, result in source code disclosure of local content. For example, PHP scripts may be served instead of interpreted. Users are recommended to upgrade to version 2.4.62, which fixes this issue. * ) mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO, SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also allowing for "unix:" sockets with BalancerMember(s). PR 69168. [Yann Ylavic] * ) mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:" URLs. PR 69160 [Yann Ylavic] * ) mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2. [Joe Orton] * ) mod_ssl: Add support for loading certs/keys from pkcs11: URIs via OpenSSL 3.x providers. [Ingo Franzki <ifranzki linux.ibm.com>] * ) mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL >= 3.0. [Ruediger Pluem, Yann Ylavic] * ) mpm_worker: Fix possible warning (AH00045) about children processes not terminating timely. [Yann Ylavic] ==== apache2-prefork ==== Version update (2.4.61 -> 2.4.62) - Update to 2.4.62 * ) SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with mod_rewrite in server/vhost context on Windows (cve.mitre.org) [boo#1228098] SSRF in Apache HTTP Server on Windows with mod_rewrite in server/vhost context, allows to potentially leak NTML hashes to a malicious server via SSRF and malicious requests. Users are recommended to upgrade to version 2.4.62 which fixes this issue. Credits: Smi1e (DBAPPSecurity Ltd.) * ) SECURITY: CVE-2024-40725: Apache HTTP Server: source code disclosure with handlers configured via AddType (cve.mitre.org) [boo#1228097] A partial fix for CVE-2024-39884 in the core of Apache HTTP Server 2.4.61 ignores some use of the legacy content-type based configuration of handlers. "AddType" and similar configuration, under some circumstances where files are requested indirectly, result in source code disclosure of local content. For example, PHP scripts may be served instead of interpreted. Users are recommended to upgrade to version 2.4.62, which fixes this issue. * ) mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO, SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also allowing for "unix:" sockets with BalancerMember(s). PR 69168. [Yann Ylavic] * ) mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:" URLs. PR 69160 [Yann Ylavic] * ) mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2. [Joe Orton] * ) mod_ssl: Add support for loading certs/keys from pkcs11: URIs via OpenSSL 3.x providers. [Ingo Franzki <ifranzki linux.ibm.com>] * ) mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL >= 3.0. [Ruediger Pluem, Yann Ylavic] * ) mpm_worker: Fix possible warning (AH00045) about children processes not terminating timely. [Yann Ylavic] ==== apache2-utils ==== Version update (2.4.61 -> 2.4.62) - Update to 2.4.62 * ) SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with mod_rewrite in server/vhost context on Windows (cve.mitre.org) [boo#1228098] SSRF in Apache HTTP Server on Windows with mod_rewrite in server/vhost context, allows to potentially leak NTML hashes to a malicious server via SSRF and malicious requests. Users are recommended to upgrade to version 2.4.62 which fixes this issue. Credits: Smi1e (DBAPPSecurity Ltd.) * ) SECURITY: CVE-2024-40725: Apache HTTP Server: source code disclosure with handlers configured via AddType (cve.mitre.org) [boo#1228097] A partial fix for CVE-2024-39884 in the core of Apache HTTP Server 2.4.61 ignores some use of the legacy content-type based configuration of handlers. "AddType" and similar configuration, under some circumstances where files are requested indirectly, result in source code disclosure of local content. For example, PHP scripts may be served instead of interpreted. Users are recommended to upgrade to version 2.4.62, which fixes this issue. * ) mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO, SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also allowing for "unix:" sockets with BalancerMember(s). PR 69168. [Yann Ylavic] * ) mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:" URLs. PR 69160 [Yann Ylavic] * ) mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2. [Joe Orton] * ) mod_ssl: Add support for loading certs/keys from pkcs11: URIs via OpenSSL 3.x providers. [Ingo Franzki <ifranzki linux.ibm.com>] * ) mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL >= 3.0. [Ruediger Pluem, Yann Ylavic] * ) mpm_worker: Fix possible warning (AH00045) about children processes not terminating timely. [Yann Ylavic] ==== bluedevil6 ==== Version update (6.1.3 -> 6.1.4) Subpackages: bluedevil6-lang - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release ==== breeze6 ==== Version update (6.1.3 -> 6.1.4) Subpackages: breeze6-cursors breeze6-decoration breeze6-style breeze6-style-lang - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release ==== breeze6-gtk ==== Version update (6.1.3 -> 6.1.4) Subpackages: gtk2-metatheme-breeze6 gtk3-metatheme-breeze6 gtk4-metatheme-breeze6 metatheme-breeze6-common - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release ==== discover6 ==== Version update (6.1.3 -> 6.1.4) Subpackages: discover6-backend-flatpak discover6-backend-fwupd discover6-backend-packagekit discover6-lang discover6-notifier - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release * Only chop off leading @ from tokenized license text if needed (kde#491172) * flatpak: Make sure we don't call versionCompare with a null resource * flatpak: Ensure we are caching the right icons (kde#490786) * category: assert names aren't duplicated * ApplicationPage: Do not use Item.visible to calculate the visibility of the parent (kde#489745) ==== drkonqi6 ==== Version update (6.1.3 -> 6.1.4) Subpackages: drkonqi6-lang - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release * Use frameworks version number from kcrash * sentry: also send qt_version in the tags * support consuming the qt version from kcrash * coredump: synthesize crash metadata for kwin_x11 ==== flatpak-kcm6 ==== Version update (6.1.3 -> 6.1.4) Subpackages: flatpak-kcm6-lang - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - No code changes since 6.1.3 ==== kactivitymanagerd6 ==== Version update (6.1.3 -> 6.1.4) Subpackages: kactivitymanagerd6-lang - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - No code changes since 6.1.3 ==== kde-cli-tools6 ==== Version update (6.1.3 -> 6.1.4) Subpackages: kde-cli-tools6-lang - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release ==== kde-gtk-config6 ==== Version update (6.1.3 -> 6.1.4) Subpackages: kde-gtk-config6-gtk3 - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release ==== kdecoration6 ==== Version update (6.1.3 -> 6.1.4) Subpackages: libkdecorations2-6 libkdecorations2-6-lang libkdecorations2private11 - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release ==== kdeplasma6-addons ==== Version update (6.1.3 -> 6.1.4) Subpackages: kdeplasma6-addons-lang - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release ==== kgamma6 ==== Version update (6.1.3 -> 6.1.4) Subpackages: kgamma6-lang - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release * Fix wrong types/obsolete keys for kcm_kgamma.json file ==== kglobalacceld6 ==== Version update (6.1.3 -> 6.1.4) Subpackages: libKGlobalAccelD6-0 - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release ==== kinfocenter6 ==== Version update (6.1.3 -> 6.1.4) Subpackages: kinfocenter6-lang - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release ==== kmenuedit6 ==== Version update (6.1.3 -> 6.1.4) Subpackages: kmenuedit6-lang - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release ==== kpipewire6 ==== Version update (6.1.3 -> 6.1.4) Subpackages: kpipewire6-imports libKPipeWire6 libKPipeWire6-lang libKPipeWireDmaBuf6 libKPipeWireRecord6 - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release * sourcestream: make resilient against pipewire restarts * Add encoder using libopenh264 (kde#476187) - Drop patches, now upstream: * 0001-Simpler-yet-more-useful-handling-of-KPIPEWIRE_FORCE_.patch * 0002-Add-encoder-using-libopenh264.patch ==== kscreen6 ==== Version update (6.1.3 -> 6.1.4) Subpackages: kscreen6-lang - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release * Emit OrientationSensor::availableChanged() when needed (kde#488764) ==== kscreenlocker6 ==== Version update (6.1.3 -> 6.1.4) Subpackages: kscreenlocker6-lang libKScreenLocker6 - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release * greeter/pamauthenticators: also consider non-interactive info messages a "prompt" (kde#490547) ==== ksshaskpass6 ==== Version update (6.1.3 -> 6.1.4) Subpackages: ksshaskpass6-lang - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release ==== ksystemstats6 ==== Version update (6.1.3 -> 6.1.4) Subpackages: ksystemstats6-lang - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release ==== kwayland-integration6 ==== Version update (6.1.3 -> 6.1.4) - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release ==== kwayland6 ==== Version update (6.1.3 -> 6.1.4) Subpackages: libKWaylandClient6 - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release ==== kwin6 ==== Version update (6.1.3 -> 6.1.4) Subpackages: kwin6-lang kwin6-x11 libkwin6 - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release * activation: fix X11 windows being stuck in should_get_focus more properly * plugins/buttonrebinds: correctly handle level 1 keys (kde#484367) * backends/drm: don't block direct scanout if color profile source isn't set to ICC * Fix checking whether GraphicsBufferView is null * backends/drm: don't apply the brightness factor without HDR * activation: don't add the active window to should_get_focus list (kde#484155) * core/renderloop: don't move the target presentation timestamp back when rescheduling (kde#488843) * core/renderloop: fix triple buffering hysteresis * scene/itemrenderer_opengl: reset OpenGL state for YUV conversion back to RGB * autotests: test placement to always put the titlebar on the screen * placement: keep the titlebar in the screen with centered placement (kde#489500) * placement: don't overwrite scheduled position change in cascadeIfCovering * Make Workspace::desktopResized() reassign outputs of uninitialized windows * wayland: Avoid klipper loop with existing but empty clipboards (kde#469644) * backends/drm: Fix a crash in DrmGpu::releaseBuffers() * wayland: Ignore plasma shell reposition requests during interactive move resize (kde#481829) * backends/drm: limit max_bpc to 8 by default with docks * compositor_wayland: count rendering time for all steps of compositing * xdgshellwindow: never request clients to resize to a negative size (kde#489983) * backends/libinput: Ignore redundant events for pointer buttons and keyboard keys when pressed/released on multiple devices (kde#486034) * backends/x11: Fix crash that happens when toggling compositing * plugins/stickykeys: Unlatch modifiers when locking * Fix sticky keys for AltGr * Test locking sticky keys for all modifiers * Release key in sticky key test * utils: Fix gaining realtime scheduling with musl (kde#487996) * core/renderloop: add some hysteresis to triple buffering ==== kwrited6 ==== Version update (6.1.3 -> 6.1.4) - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release ==== layer-shell-qt6 ==== Version update (6.1.3 -> 6.1.4) Subpackages: libLayerShellQtInterface6 - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release ==== libdb-4_8 ==== Subpackages: db48-utils libdb-4_8-x86-64-v3 - Security fix: [bsc#1174414, CVE-2019-2708] * libdb: Data store execution leads to partial DoS * Backport the upsteam commits: - Fixed several possible crashes when running db_verify on a corrupted database. [#27864] - Fixed several possible hangs when running db_verify on a corrupted database. [#27864] - Added a warning message when attempting to verify a queue database which has many extent files. Verification will take a long time if there are many extent files. [#27864] * Add libdb-4_8-CVE-2019-2708.patch ==== libkscreen6 ==== Version update (6.1.3 -> 6.1.4) Subpackages: libKF6Screen8 libKF6Screen8-lang libKF6ScreenDpms8 libkscreen6-plugin - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release ==== libksysguard6 ==== Version update (6.1.3 -> 6.1.4) Subpackages: ksysguardsystemstats6-data libKSysGuardSystemStats2 libksysguard6-imports libksysguard6-lang libksysguard6-plugins - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release ==== liborcus ==== - On 32bit x86 architectures, compile with option -ffloat-store. This mitigates the unfortunate fact that the test-suite of the package expects the precision of FP operations to be lower than that of internal representation of 80387. ==== libplasma6 ==== Version update (6.1.3 -> 6.1.4) Subpackages: libPlasma6 libPlasma6-lang libplasma6-components libplasma6-desktoptheme - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release ==== libvirt ==== Version update (10.5.0 -> 10.6.0) Subpackages: libvirt-client libvirt-daemon-common libvirt-daemon-config-network libvirt-daemon-driver-interface libvirt-daemon-driver-libxl libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-lock libvirt-daemon-log libvirt-daemon-plugin-lockd libvirt-daemon-qemu libvirt-daemon-xen libvirt-libs - Update to libvirt 10.6.0 - jsc#PED-8909 - Many incremental improvements and bug fixes, see https://libvirt.org/news.html#v10-6-0-2024-08-05 ==== milou6 ==== Version update (6.1.3 -> 6.1.4) Subpackages: milou6-lang - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release ==== mpg123 ==== Version update (1.32.6 -> 1.32.7) Subpackages: libmpg123-0 mpg123-openal - Update to version 1.32.7 * Fix some laziness (func() to func(void)) for standards conformance. ==== ocean-sound-theme6 ==== Version update (6.1.3 -> 6.1.4) - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release ==== openSUSE-release ==== Version update (20240807 -> 20240808) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== pam_kwallet6 ==== Version update (6.1.3 -> 6.1.4) Subpackages: pam_kwallet6-32bit pam_kwallet6-common - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release ==== plasma5support6 ==== Version update (6.1.3 -> 6.1.4) Subpackages: libPlasma5Support6 libPlasma5Support6-lang - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release ==== plasma6-activities ==== Version update (6.1.3 -> 6.1.4) Subpackages: libPlasmaActivities6 plasma6-activities-imports - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release ==== plasma6-activities-stats ==== Version update (6.1.3 -> 6.1.4) Subpackages: libPlasmaActivitiesStats1 - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release ==== plasma6-browser-integration ==== Version update (6.1.3 -> 6.1.4) Subpackages: plasma6-browser-integration-lang - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release ==== plasma6-desktop ==== Version update (6.1.3 -> 6.1.4) Subpackages: plasma6-desktop-emojier plasma6-desktop-lang plasma6-kimpanel-ibus - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release * Make X-KDE-Init-Phase a proper in in JSON and remove obsolete X-KDE-Init-Symbol values * Folder View: hide existing label while renaming (kde#482802) * Folder View: re-transfer focus to grid view after rename (kde#491088) * Use bindings for anchors (kde#489492) * Restore the folderview title config * applets/taskmanager: fix size of textual list popup * applets/taskmanager: Fix applet's layout size with multiple rows (kde#490319) * [kcms/access] Set range for visual bell duration selector ==== plasma6-disks ==== Version update (6.1.3 -> 6.1.4) Subpackages: plasma6-disks-lang - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release ==== plasma6-integration ==== Version update (6.1.3 -> 6.1.4) Subpackages: plasma6-integration-plugin plasma6-integration-plugin-lang - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release ==== plasma6-nm ==== Version update (6.1.3 -> 6.1.4) Subpackages: plasma6-nm-lang plasma6-nm-openconnect plasma6-nm-openvpn plasma6-nm-pptp plasma6-nm-vpnc - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release ==== plasma6-openSUSE ==== Subpackages: plasma6-branding-openSUSE plasma6-sddm-theme-openSUSE plasma6-theme-openSUSE - Update to 6.1.4 ==== plasma6-pa ==== Version update (6.1.3 -> 6.1.4) Subpackages: plasma6-pa-lang - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release * volumemonitor: don't crash when there is no pa_context * kcm/SpeakerTest: Fix the minimum layout for Mono channel (kde#476096) ==== plasma6-print-manager ==== Version update (6.1.3 -> 6.1.4) Subpackages: plasma6-print-manager-lang - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release ==== plasma6-systemmonitor ==== Version update (6.1.3 -> 6.1.4) Subpackages: plasma6-systemmonitor-lang - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release * TableViewHeader: remove from tab chain ==== plasma6-thunderbolt ==== Version update (6.1.3 -> 6.1.4) Subpackages: plasma6-thunderbolt-lang - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - No code changes since 6.1.3 ==== plasma6-workspace ==== Version update (6.1.3 -> 6.1.4) Subpackages: plasma6-session plasma6-session-x11 plasma6-workspace-lang plasma6-workspace-libs sddm-qt6-branding-openSUSE - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release * Watch for Look and Feel changed * applets/batterymonitor: Fix property names to show the right tool-tip text * applets/mediacontroller: Fix label width overflow in horizontal panel * Track screen change * Respect centered images size (kde#490425,kde#489250) * xembed-sni-proxy: Check if descendant windows want button events * freespacenotifier: Rework to not warn for read only partitions * startplasma: Also set environment variable when it is not currently set (kde#490432) * notifications: When doing a drag and drop, set the supported action to cpoy (kde#469644) * krunner: Fix icon property name for additionalActions list * kastatsfavoritesmodel: Fix a crash ==== polkit-kde-agent-6 ==== Version update (6.1.3 -> 6.1.4) Subpackages: polkit-kde-agent-6-lang - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release ==== powerdevil6 ==== Version update (6.1.3 -> 6.1.4) Subpackages: powerdevil6-lang - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release * daemon: Don't leave dangling Action pointers in idle-time containers (kde#490356,kde#490421) - Drop patches, now upstream: * 0001-daemon-Don-t-leave-dangling-Action-pointers-in-idle-.patch ==== python-libvirt-python ==== Version update (10.5.0 -> 10.6.0) - Update to 10.6.0 - Add all new APIs and constants in libvirt 10.6.0 - jsc#PED-8909 ==== qqc2-breeze-style6 ==== Version update (6.1.3 -> 6.1.4) - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release ==== salt ==== Subpackages: python3-salt salt-master salt-minion salt-transactional-update - Fix few failing tests to work with both Salt and Salt bundle - Skip testing unsupported OpenSSL crypto algorithms - Added: * make-tests-compatible-with-venv-bundle.patch * skip-more-tests-related-to-old-openssl-algorithms.patch ==== sddm-kcm6 ==== Version update (6.1.3 -> 6.1.4) Subpackages: sddm-kcm6-lang - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release * Fix visual window artifact ==== systemsettings6 ==== Version update (6.1.3 -> 6.1.4) Subpackages: systemsettings6-lang - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release * Actually start the KAuth::ExecuteJob (kde#490507) * runner: Don't match if just one query word matches (kde#488676) - Drop patches, now upstream: * 0001-runner-Don-t-match-if-just-one-query-word-matches.patch ==== sysuser-tools ==== - usermod: revert renamed arguments - Implement UID:GID support for busybox - Reenable UID:GID support ==== virt-manager ==== Subpackages: virt-install virt-manager-common - Fix test failure with libvirt version 10.6.0 092-cli-Use-regex-for-grep-and-nogrep-args.patch 093-cli-Fix-with-latest-libvirt.patch ==== wacomtablet-kcm6 ==== Version update (6.1.3 -> 6.1.4) Subpackages: wacomtablet-kcm6-lang - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release ==== xdg-desktop-portal-kde6 ==== Version update (6.1.3 -> 6.1.4) Subpackages: xdg-desktop-portal-kde6-lang - Update to 6.1.4: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.1.4 - Changes since 6.1.3: * update version for new release * Set up translation for FileDialog * Set timeout on DBus calls to KWin * Inhibit: Forward the correct inhibition flags to PolicyAgent (kde#486506) * remotedesktop: Only show the restore checkbox if the app wants to persist

1 0

Factory: Removal of Pantheon (unless somebody really cares and steps up)
by Dominique Leuenberger 08 Aug '24

08 Aug '24

Dear Tumbleweed users and hackers, The package 'granite' has been failing to build since April 17 2024. Notifications have all remained unanswered and now, almost 4 months later, this package is still failing to build. The package belongs to the Pantheon desktop, and is dependency to many packages thereof. This mail thus serves to inform you, the community, that granite, and as a result all the packages depending on it, will be removed from Factory by August 13 unless new, active maintainership for this stack can be established. As usual, a removal does not need to be final and packages can be re- added at a later stage, should the maintainer status get resolved later on. Best regards, Dominique

2 2

New Tumbleweed snapshot 20240807 released!
by Dominique Leuenberger 08 Aug '24

08 Aug '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: amarok (3.0.1 -> 3.1.0) chrony eog (45.3 -> 45.4) evolution (3.52.3 -> 3.52.4) evolution-data-server (3.52.3 -> 3.52.4) evolution-ews (3.52.3 -> 3.52.4) fwupd (1.9.22 -> 1.9.23) gnome-online-accounts (3.50.3 -> 3.50.4) gnome-shell (46.3.1 -> 46.4) libcdio libdv makedumpfile mutter (46.3.1 -> 46.4) openSUSE-release (20240806 -> 20240807) pam pam-full-src qalculate (4.9.0 -> 5.2.0) selinux-policy (20240731 -> 20240802) strace system-config-printer yast2-trans (84.87.20240717.0cfcd596d6 -> 84.87.20240801.d54b6ae08f) === Details === ==== amarok ==== Version update (3.0.1 -> 3.1.0) - Update to 3.1.0 https://blogs.kde.org/2024/08/02/amarok-3.1-tricks-of-the-light-released/ New features: * Last.fm plugin updated to use token-based authentication (kde#414826, kde#327547) * Reintroducing Last.fm Similar Artists context applet * Remember the previous destination provider when saving playlist (kde#216528) ==== chrony ==== Subpackages: chrony-pool-openSUSE - Update clknetsim to snapshot 633a0be: fix missing stat/fstat with latest glibc. ==== eog ==== Version update (45.3 -> 45.4) Subpackages: eog-lang - Update to version 45.4: + Bug fixes and improvements: - Regenerate thumbnails on save. - Use "fast" content type as fallback if normal content type is unavailable. + docs: Replace dead links to developer-old.gnome.org. + Updated translations. ==== evolution ==== Version update (3.52.3 -> 3.52.4) Subpackages: evolution-lang evolution-plugin-spamassassin - Update to version 3.52.4: + Bug Fixes: - Tooltips in Month view not always shown. - Mail: Print to File keeps previous file name. - Tooltips only sometimes displayed in Task and Memos Pane. + Miscellaneous: EWebView: Just loaded remote images may be left invisible. + Updated translations. ==== evolution-data-server ==== Version update (3.52.3 -> 3.52.4) Subpackages: evolution-data-server-lang libcamel-1_2-64 libebackend-1_2-11 libebook-1_2-21 libebook-contacts-1_2-4 libecal-2_0-3 libedata-book-1_2-27 libedata-cal-2_0-2 libedataserver-1_2-27 libedataserverui-1_2-4 - Update to version 3.52.4: + alarm-notify: Save acknowledge time without sending iTip message. + Calendar: Anniversaries hidden when book goes to online. ==== evolution-ews ==== Version update (3.52.3 -> 3.52.4) Subpackages: evolution-ews-lang - Update to version 3.52.4: + Contacts: Offline GAL not searched with "manual query" views. + m365: Workaround MIME send server's reencode with forced base64. ==== fwupd ==== Version update (1.9.22 -> 1.9.23) Subpackages: fwupd-bash-completion fwupd-lang libfwupd2 typelib-1_0-Fwupd-2_0 - Update to version 1.9.23: + Fix a regression in 1.9.22 that caused some devices not to probe correctly. + Try harder to get a valid response when flashing usi-dock devices. ==== gnome-online-accounts ==== Version update (3.50.3 -> 3.50.4) Subpackages: gnome-online-accounts-lang libgoa-1_0-0 libgoa-backend-1_0-2 - Update to version 3.50.4: + Allow editing the details for Exchange accounts when re-authenticating. + Correctly save and reset settings for TLS certificate errors. ==== gnome-shell ==== Version update (46.3.1 -> 46.4) Subpackages: gnome-extensions gnome-shell-calendar gnome-shell-lang - Update to version 46.4: + Fix glitches in looking glass + Improve Persian on-screen keyboard layout + Make overview startup notification more reliable + Fix keyboard navigation in app folders + Fix connecting to WPA2 enterprise networks + Misc. bug fixes and cleanups + Updated translations. ==== libcdio ==== - Add c99.patch fixing implicit declaration of a function error so that the 32bit version of this package can be built with GCC 14. ==== libdv ==== - Add -Wno-incompatible-pointer-types to CFLAGS to enable building for 32bit with GCC 14. ==== makedumpfile ==== - add (bsc#1228388): * 0001-PATCH-Fix-failure-of-hugetlb-pages-exclusion-on-Linu.patch * 0002-PATCH-Fix-wrong-exclusion-of-Slab-pages-on-Linux-6.1.patch ==== mutter ==== Version update (46.3.1 -> 46.4) Subpackages: mutter-lang - Update to version 46.4: + Fix nested popovers on wayland. + Misc. bug fixes and cleanups. + Updated translations. - Drop mutter-fix-x11-restart.patch: fixed upstream. ==== openSUSE-release ==== Version update (20240806 -> 20240807) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== pam ==== Subpackages: pam-32bit - Prevent cursor escape from the login prompt [bsc#1194818] * Added: pam-bsc1194818-cursor-escape.patch ==== pam-full-src ==== - Prevent cursor escape from the login prompt [bsc#1194818] * Added: pam-bsc1194818-cursor-escape.patch ==== qalculate ==== Version update (4.9.0 -> 5.2.0) - version update to 5.2.0 * Physical constants updated with CODATA 2022 values * New function: allroots() * New units: therm, thermie, IUNS calorie, rpm * Additional names/symbols for turn unit * Use symbol "cal" for thermochemical (instead of international table) calorie * Change title and names/symbols of weak mixing angle (prepend "sin2" to theta variants) * Return exact negative integers in log10() * More conservative handling of infinity in equations * Remove n from equation solution if possible using assumptions of x * Fix input of scientific E-notation using lowercase e in numbers using concise interval notation, in expressions * Fix "bit width" and "signed integer" arguments in setbits() * Fix a^(f(x))=a^(b*g(x)) where b=2 or b=3 * Fix auto/dual approximation with "where" expression * Fix "where" expressions with multiple inequality statements for a single variable, e.g. "where x>0 and x<10" * Fix crash when a variable name/symbol with more than 20 characters is used in "where" expression * Fix unnecessary parenthesis, with wrong color for closing bracket, around unit with exponent in HTML output (affects qalculate-qt) * Fix qalc not exiting after factorization in non-interactive mode * Minor bug fixes and feature enhancements - Update to 5.1.1. Check https://github.com/Qalculate/libqalculate/releases for older changes list. Changes since 5.0.0: * Support for solving equations containing if() function * Support for solving root(a, x)=b (requires rational value for ln(a)/ln(b)) * New functions: powertower() and multiples() * New units for solar radius, mass, and luminosity * Ask for the desired interpretation the first time percent addition is used (e.g. 100 + 10% equals 110 or 100.1) * Use parentheses for exponent using scientific notation (with power of 10) * Support integer factorization of integers in matrix/vector, and of numerator and denominator in rational number * Relaxed conditions for (x^a)^b = x^(a Ã b) and x^a Ã x^b = x^(a + b) when complex numbers are deactivated (fixes segfaults) * Fix (ax + n)^2 > 1, where n is even and a is not 1, returning false * Fix setbits() function * Fix Number::equals(0, ..., true) when number is infinite (affects replace() function) * Add two's complement input and binary bits to preferences, and preserve these settings when leaving programming keypad (GTK, Qt) * Download button in dialog shown when new version is available, on Windows (GTK, Qt) * Fix AltGr (primarily for input of operators) on Windows (GTK, Qt) * Option to show parsed expression in result field (GTK) * Portuguese (Portugal) translation (GTK) * Fix updating of self-contained GNU/Linux binaries from GUI (GTK) * Improved history list efficiency (Qt) * Hide expression tooltip (after 300 ms) when input resumes, if delayed expression status is enabled (Qt) * Minor bug fixes and feature enhancements ==== selinux-policy ==== Version update (20240731 -> 20240802) Subpackages: selinux-policy-targeted - Update to version 20240802: * Dontaudit search of snapper grub plugin to nscd socket (bsc#1228745) ==== strace ==== - Update License tag (boo#1228216) ==== system-config-printer ==== Subpackages: python3-cupshelpers system-config-printer-applet system-config-printer-common system-config-printer-common-lang system-config-printer-dbus-service udev-configure-printer - Drop obsolete update-desktop-files BuildRequires and macro. ==== yast2-trans ==== Version update (84.87.20240717.0cfcd596d6 -> 84.87.20240801.d54b6ae08f) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20240801.d54b6ae08f: * New POT for text domain 'control'.

2 1

openSUSE Release Engineering meeting 13.03.2024
by Lubos Kocman 07 Aug '24

07 Aug '24

!!! HEADS UP WE ARE BACK USING JITSI !!! https://meet.opensuse.org/ReleaseEngineeringMeeting How to join the meeting? https://calendar.opensuse.org/teams/release/events/opensuse_release_enginee… All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting ## Attendees ana,guillaumeg, DimStar, lkocman, DocB, bmwiedemann,maxlin ## Leap Leap 15.6 Beta build Build630.1 bringing fix to Virtualbox was published yesterday in the evening. Publishing seem to be stuck as the data is not available on download-o-o . I did raise it with autobuild (#team-dist) aarch64 has an issue with running firefox with <= 4GB of memory. In comparison chromium seems to work with 2GB. This is a problems ince our minimal requirements for GNOME states 3GB https://bugzilla.opensuse.org/show_bug.cgi?id=1221314 Leap 15.6 Beta known issues page https://en.opensuse.org/openSUSE:Known_bugs_15.6# How do we see that submissions to SUSE:SLE-15-SP6:GA got accepted? The sync state doesn't work, easiest is to check particular package in SUSE:SLE-15-SP6:GA in OBS. Ongoing Plasma 5.27.1 update https://code.opensuse.org/leap/features/issue/154 based on Feedback from openSUSE Leap future strategy discussion with Rick Spencer on Friday in Prague. Leap 15.6 appliances are currently blocked at https://bugzilla.suse.com/show_bug.cgi?id=1213595 All openQA runs with 15.5 and 15.6 isos booted off USB fail: https://openqa.opensuse.org/tests/3992142#step/finish_desktop/2 It is visible that udev prefers the by-label link to sda instead of sda1 for some reason, even though https://bugzilla.suse.com/show_bug.cgi?id=1213185 implies that the fix for https://github.com/systemd/systemd/issues/28468 got backported. ## openSUSE Tumbleweed (DimStar) openSUSE:Factory build fail stats: 136 failed 47 unresolvable (last week 139 failed, 33 unresolvable) https://tinyurl.com/ysy4nnnz => Around ~80 are python packages that are still failing to build with Python 3.12 Most relevant updates: * Linux Kernel Longterm 6.6.21 * libpng 1.6.43 * poppler 24.03.0 * procps 14.5+0 * wine 9.4 * buildah 1.35.0 * MozillaFirefox 123.0.1 * libreoffice 24.2.1.2, * update openSUSE-build-key (new suse container key!) * KDE Frameworks and Plasma 6 + KDE Gear 24.02.0 (QA in progress for snapshot 0311) Max: asking about Plasma 5 parallel availability in TW. Plasma 6 obsoletes Plasma 5, so most were already deleted. Updates waiting / work still in progress: * kernel-source 6.7.9, to be accepted later today * systemd 255.3 ( SR#1152118), needs updated "build" package and fixed transactional-updates, this is blocking rpmlint Dominique: Adrian any update on the -build package for systemd-255.3? Adrian: releasing it as maintenance update will take some time. You'll get it in next minutes for Factory. * Still handle all issues for the new KDE fw + plasma * GCC 14: second phase ongoing, use gcc14 as the default compiler (Staging:Gcc7) * RPM 4.19.1.1 + 4.20 * RPM 4.19.1.1 (user/group dependencies), Packages not included in rings getting updates, still some more to go, see https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… * Preparations for RPM 4.20, %patchN won't be supported anymore, see https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… * Python 3.12+removal of 3.9 modules: Not all modules fixed to build with Python 3.12, removal of python 3.9 modules blocked by build failures. Python3.9 interpreter would stay for some time more. * go1.22 as default go version, blocked on i586 with packages which export CGO_ENABLED=0 and go build -buildmode pie https://github.com/golang/go/issues/64875 (needs to update ~70 packages) * autoconf 2.72, waiting libreoffice; fixed in version 24.2.2 in devel prj (unstable tree) * llvm 18, some packages FTBFS * shadow 4.15.0, openQA tests failing * libxml 2.12.1, on hold, no progress * dbus-broker as default dbus session manager, now everything builds, two openQA checks failing. Bernhard started to detect+fix/report issues with many packages that mis-use %check 1155606 exiv2 1155640 python-pypuppetdb 1156899 med-tools 1157116 rsync 1157126 gnome-disk-utility 1157141 xsimd 1157313 kosmindoormap 1157317 itinerary 1157315 plasma6-disks https://bugzilla.opensuse.org/show_bug.cgi?id=1221321 pspp FTBFS-nocheck ## Richard (Aeon+botmaster) ## Max Leap 15.6 - build stats in Backports: 68 faild(was 79), 22 unresolvable(was 24) * Debugging the uninstallable error from installcheck result * Go through build fails in Backports * Upcoming package change needed but are pending in SLE15 SP6 staging: polkit-default-privs and SDL2_image ## Guillaume - Arm * Tumbleweed: - Blocked by KDE live ISO being too large - Problem with buildah found by openQA - https://bugzilla.opensuse.org/show_bug.cgi?id=1221243 - WIP: Still some packages built without PAC/BTI, two main reasons: * assembler files without PAC/BTI (usually reported upstream, e.g. openssl, gnutls, etc) * Packages built without distro flags (usually fixed in spec file) * TW installer issues with PAC/BTI - https://bugzilla.suse.com/show_bug.cgi?id=1219717 - Unable to reproduce anymore on a different host, while openQA still fails. - rpmlint: https://rpmlint.opensuse.org/ * we noticed that rpmlint does not check anymore for packages built without distro %{optflags}. We should add it back. https://bugzilla.opensuse.org/show_bug.cgi?id=1217840 Doug: rpmlint GSOC topic. Neal will be helping to mentor that. https://github.com/openSUSE/mentoring/issues/204 * Leap 15.6/Backports SP6: - No update ## Sarah - s390x Not available * Second mainframe is up and running -> Many builds are running at the moment (also gcc) and the manframe is not really stable -> waiting for a new Tumbleweed release * gcc bug (2021) reactivated related to memory optimization on the mainframe: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=101523 * related openSUSE Bug (not really informative): https://bugzilla.opensuse.org/show_bug.cgi?id=1188441 GPG keys for s390x, PPCle and RISC-V expired in openSUSE-build-key: https://bugzilla.suse.com/show_bug.cgi?id=1220993 ## Doug Not available * bugzilla.opensuse.org * Submitted Bug 1220916 * Asked to delete - If you experience any difficulties or find any issues, please, report to SUSE Bugzilla Team (email) * Contribution Workshops * More sign ups at https://etherpad.opensuse.org/p/openSUSE-Contribution-Workshop * Episode 3 - Bumping "Packaging Guidelines" to a later date and will have a learning "how to report bugs" video * Episode 4 - Language-specific packaging - Rust and Go provided link. Will come in March * Published SD Boot Utils article * Leap 15.6 beta article ready for publication on Thursday at 7 p.m. We should do a little prequel for BugDay/LiveEvent (like a little tweet or similar today). To increase attendance of the event. * GSoC * Sent report to Project Manager * Started seperate workspace on slack for mentees and mentors - https://join.slack.com/t/opensuse-group/shared_invite/zt-2dwsqm6nb-iNJifnVb… * Community Summit * 8 Registrations, 5 Submissions, 2 Hours (pre-announcement) * openSUSE Conference * 48 Registrations, 27 Submissions, 16 Hours (5 Open 4 Business Submissions) ** I won't be available next weeks Static * oSC24 dates June 27 to 29 reserved (Thursday - Saturday) * Open 4 Business June 26 between 2 - 6 p.m. at Franken Campus * AI topics (static) ## Dirk Not available ## Wolfgang (Package Hub), Scott Bahling lkocman: Not available Customer request for Re-addition of rsh to Leap 15.5 / 15.6 and related Package Hub modules for SLES 15 SP5/SP6. ## Maintenance team (Marcus or Maurizio (m4u)) Not avialable expired repodata warning for http://download.opensuse.org/update/leap/15.6/backports/ http://download.opensuse.org/update/leap/15.6/non-oss/ This was mentioned as part of https://bugzilla.suse.com/show_bug.cgi?id=1220993 Struggling with chromium update. Maintainers are not currently able to update it to the current version. No transition method for expired keys. Temporarily disabling the key in libcontainer policy (Marcus please correct me). The goal is to have the least disruptive method for it. Dominique: the new key seems to raise some issues - transition needs to be figured out. Marcus: I did check podman documentation and am looking if we can have temporarily two keys in parallel. Marcus: will we resign all the images on the registry or only new ones? Dominique: for rpm we usually accept both old and new key for about a half a year. lkocman: Leap Micro 6.X update channel setup will have to be done soon (within a few weeks). ## Adrian - OBS No update lkocman: we need to cleanup accepted / rejected requests in SUSE:SLE-15-SP6:GA in OBS. lkocman doesn't have permissions to do so in OBS. Workaround would be to re-add/reject suse-sle-reviewers review. Lubos will write to autobuild + add Marco to the first line. ## Simon (Leap Replacement/Linarite) Not available ## Bernhard Slowroll * https://openqa.opensuse.org/group_overview/120 has regular runs now * kernel-longterm 6.6.21 from Factory * kernel-default follows Factory * OBS has a Slowroll distribution target, so it is easy to add in devel projects * https://www.reddit.com/r/openSUSE_Slowroll/ gets some activity ## Open Floor

2 1

New Tumbleweed snapshot 20240806 released!
by Dominique Leuenberger 06 Aug '24

06 Aug '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: 389-ds aaa_base (84.87+git20240620.57ee9e1 -> 84.87+git20240805.7513b28) elilo grub2 kernel-source (6.10.2 -> 6.10.3) libXfont2 (2.0.6 -> 2.0.7) libXtst (1.2.4 -> 1.2.5) libnbd (1.18.4 -> 1.20.2) libnvme (1.9+0.g80c5cf2 -> 1.10+0.gdd51fa8) libreoffice libstorage-ng (4.5.218 -> 4.5.219) libxml2 (2.12.8 -> 2.12.9) libxml2-python (2.12.8 -> 2.12.9) nbdkit (1.36.5 -> 1.40.1) nvme-cli (2.9.1 -> 2.10) openSUSE-release (20240805 -> 20240806) procps sensors swtpm (0.8.1 -> 0.9.0) vde2 zchunk (1.4.0 -> 1.5.1) === Details === ==== 389-ds ==== Subpackages: lib389 libsvrcore0 - dirsrv-user.conf: Remove explicit dirsrv group definition, it's already specified implicit with "u dirsrv" and not all tools like duplicate group entries. ==== aaa_base ==== Version update (84.87+git20240620.57ee9e1 -> 84.87+git20240805.7513b28) Subpackages: aaa_base-extras - Update to version 84.87+git20240805.7513b28: * Remove obsolete resolv+ manual page * Remove obsolete defaultdomain.5 manual page * Move /etc/skel to /usr/etc/skel (hermetic-usr) * Remove obsolete refresh_initrd * Add deprecation notice for service [jsc#PED-266] - Update to version 84.87+git20240801.75f05dd: * sysctl: Don't set kernel.pid_max on 32b archs (bsc#1227117) ==== elilo ==== - Add elilo-c99.patch so that the package conforms to the C99 standard and builds on i586 with GCC 14. ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - Fix btrfs subvolume for platform modules not mounting at runtime when the default subvolume is the topmost root tree (bsc#1228124) * grub2-btrfs-06-subvol-mount.patch - Rediff * 0001-Unify-the-check-to-enable-btrfs-relative-path.patch - Switch to '--no-hostonly' when creating the ZIPL initrd in the KIWI build environment to avoid some potential issues due to the missing modules * grub2-s390x-set-hostonly.patch ==== kernel-source ==== Version update (6.10.2 -> 6.10.3) - net: drop bad gso csum_start and offset in virtio_net_hdr (git-fixes). - commit ba01e0e - Linux 6.10.3 (bsc#1012628). - spi: spi-microchip-core: Fix the number of chip selects supported (bsc#1012628). - spi: atmel-quadspi: Add missing check for clk_prepare (bsc#1012628). - EDAC, i10nm: make skx_common.o a separate module (bsc#1012628). - rcu/tasks: Fix stale task snaphot for Tasks Trace (bsc#1012628). - md: fix deadlock between mddev_suspend and flush bio (bsc#1012628). - md/raid0: don't free conf on raid0_run failure (bsc#1012628). - md/raid1: don't free conf on raid0_run failure (bsc#1012628). - platform/chrome: cros_ec_debugfs: fix wrong EC message version (bsc#1012628). - ubd: refactor the interrupt handler (bsc#1012628). - ubd: untagle discard vs write zeroes not support handling (bsc#1012628). - block: initialize integrity buffer to zero before writing it to media (bsc#1012628). - dm: Call dm_revalidate_zones() after setting the queue limits (bsc#1012628). - io_uring: Fix probe of disabled operations (bsc#1012628). - cgroup/cpuset: Optimize isolated partition only generate_sched_domains() calls (bsc#1012628). - cgroup/cpuset: Fix remote root partition creation problem (bsc#1012628). - x86/kconfig: Add as-instr64 macro to properly evaluate AS_WRUSS (bsc#1012628). - hfsplus: fix to avoid false alarm of circular locking (bsc#1012628). - x86/of: Return consistent error type from x86_of_pci_irq_enable() (bsc#1012628). - x86/pci/intel_mid_pci: Fix PCIBIOS_* return code handling (bsc#1012628). - x86/pci/xen: Fix PCIBIOS_* return code handling (bsc#1012628). - x86/platform/iosf_mbi: Convert PCIBIOS_* return codes to errnos (bsc#1012628). - x86/syscall: Mark exit[_group] syscall handlers __noreturn (bsc#1012628). - cgroup/cpuset: Prevent UAF in proc_cpuset_show() (bsc#1012628). - hwmon: (adt7475) Fix default duty on fan is disabled (bsc#1012628). - block: Call .limit_depth() after .hctx has been set (bsc#1012628). - block/mq-deadline: Fix the tag reservation code (bsc#1012628). - xen-blkfront: fix sector_size propagation to the block layer (bsc#1012628). - perf: arm_pmuv3: Avoid assigning fixed cycle counter with threshold (bsc#1012628). - md: Don't wait for MD_RECOVERY_NEEDED for HOT_REMOVE_DISK ioctl (bsc#1012628). - md/raid5: recheck if reshape has finished with device_lock held (bsc#1012628). - hwmon: (ltc2991) re-order conditions to fix off by one bug (bsc#1012628). - pwm: stm32: Always do lazy disabling (bsc#1012628). - drm/bridge: adv7511: Fix Intermittent EDID failures (bsc#1012628). - arm64: smp: Fix missing IPI statistics (bsc#1012628). - nvmet-auth: fix nvmet_auth hash error handling (bsc#1012628). - drm/meson: fix canvas release in bind function (bsc#1012628). - pwm: atmel-tcb: Fix race condition and convert to guards (bsc#1012628). - drm/xe/display/xe_hdcp_gsc: Free arbiter on driver removal (bsc#1012628). - hwmon: (max6697) Fix underflow when writing limit attributes (bsc#1012628). - hwmon: (max6697) Fix swapped temp{1,8} critical alarms (bsc#1012628). - soc: qcom: socinfo: Update X1E PMICs (bsc#1012628). - arm64: dts: qcom: sc8180x: Correct PCIe slave ports (bsc#1012628). - arm64: dts: qcom: sc7280: Remove CTS/RTS configuration (bsc#1012628). - ARM: dts: qcom: msm8226-microsoft-common: Enable smbb explicitly (bsc#1012628). - arm64: dts: qcom: sc7180: drop extra UFS PHY compat (bsc#1012628). - arm64: dts: qcom: sc8180x: add power-domain to UFS PHY (bsc#1012628). - arm64: dts: qcom: sdm845: add power-domain to UFS PHY (bsc#1012628). - arm64: dts: qcom: sm6115: add power-domain to UFS PHY (bsc#1012628). - arm64: dts: qcom: sm6350: add power-domain to UFS PHY (bsc#1012628). - arm64: dts: qcom: sm8250: add power-domain to UFS PHY (bsc#1012628). - arm64: dts: qcom: sm8350: add power-domain to UFS PHY (bsc#1012628). - arm64: dts: qcom: sm8450: add power-domain to UFS PHY (bsc#1012628). - arm64: dts: qcom: msm8996-xiaomi-common: drop excton from the USB PHY (bsc#1012628). - arm64: dts: qcom: sdm850-lenovo-yoga-c630: fix IPA firmware path (bsc#1012628). - arm64: dts: qcom: msm8998: enable adreno_smmu by default ... changelog too long, skipping 1294 lines ... - commit 07b8b4e ==== libXfont2 ==== Version update (2.0.6 -> 2.0.7) - Update to version 2.0.7 * This release cleans out remnants of support for archiac platforms, improves handling of font server reconnection, fixes several issues found by static analysis, and updates some build checks. ==== libXtst ==== Version update (1.2.4 -> 1.2.5) - Update to version 1.2.5 * This release fixes issues found by Coverity & gcc -fanalyzer ==== libnbd ==== Version update (1.18.4 -> 1.20.2) Subpackages: libnbd0 - Update to version 1.20.2: * CVE-2024-7383 (bsc#1228872) * Version 1.20.2. * docs: security: Add link to TLS server certificate checking announcement * lib/uri.c: Allow tls-verify-peer to be overridden in URIs * interop: Test interop with a bad system CA * interop: Add -DEXPECT_FAIL=1 where we expect the test to fail * interop: Pass -DCERTS and -DPSK as strings * lib/crypto.c: Allow CA verification even if h->hostname is not set * lib/crypto.c: Check server certificate even when using system CA * build: Move to minimum gnutls >= 3.5.18 * nbdfuse: Can't use ?tls-certificates or ?tls-psk-file * ci: Fix MacOS builds * tests: Fix CI on Fedora 40 * Version 1.20.1. * tests: Add some code quality checks (mainly for maintainers) * common/utils/device-size.c: Include <stdint.h> * copy: Use device_size to get size of block devices * copy: Refactor the internal file_create API * common/utils: Add a function to find the size of a file or block device * Include <stdint.h> in code which uses standard C int types * common/include, ublk: Include <inttypes.h> in code which uses PRI* or SCN* * Include <stdbool.h> in code which uses bool/true/false * copy: Detect <sys/ioctl.h> * copy: Detect <linux/fs.h> at configure time * configure.ac: Indent AC_CHECK_HEADERS consistent with nbdkit * ublk/nbdublk.c: Include <errno.h> * copy, lib, ublk: Include <assert.h> which was missing in a few places * tests: Remove extra whitespace * copy/copy-nbd-to-small-block-error.sh: Use different pidfiles * copy: Use verbose nbdcopy in test * copy: Fix "destination size is smaller than source size" error * ci: refresh with latest 'lcitool manifest' * ci: import lcitool project package list definitions * podwrapper: nbd-server(1), nbd-client(8) are not local man pages * Version 1.20.0. * tests/connect-uri.c: Don't call strlen on each loop iteration * tests/connect-uri: Remove -DPIDFILE, generate it implicitly * lib/uri: Make parsing URIs more case insensitive * rust: Make the struct Cookie internal field fully public * interop/block-status-64.c: Fix skip path under valgrind * Revert "valgrind: Add suppression for liblzma bug" * docs: Add outline release notes for forthcoming libnbd 1.20 * lib/handle.c: Invalidate h->magic field just before freeing * Version 1.19.11. * ocaml: Add ocamlfind -package to ocamldoc invocation * ocaml: Mention bigstring and bigstringaf libraries * ocaml/tests: Add a test of the buffer lifecycle * ocaml: Update META so we link programs with bigarray on OCaml < 5 * ocaml: Use Bigarray to link examples and tests on OCaml < 5 * ocaml/tests: Modify the tests to use the new NBD.Buffer.t * ocaml: Add NBD.Buffer to/from string functions * ocaml: Reimplement NBD.Buffer.t using Bigarray for zero-copy * Version 1.19.10. * info: Add --isnt & --cannot to --help output * info: Implement --cannot and synonyms * info/can.c: Assert that 'can' variable is set * info: Fix error message * info: Add note that --can/--is/--has are synonyms * Version 1.19.9. * info: --uri: Free URI after printing it * lib/uri.c: Add better comments to nbd_get_uri function * info: Add --uri parameter * docs: Link from nbd_get_size to nbdinfo --size option * info: Handle failure of call to file * copy, fuse: Use vector_reserve_exactly in a few places * common/utils: Make vector_reserve_page_aligned allocate exactly * common/utils: Add vector_reserve_exactly function * fuzzing: Add a comment that the libfuzzer test is unmaintained * Version 1.19.8. * tests/opt-info.c: Free string returned by nbd_get_export_name * valgrind: Add suppression for liblzma bug * info: Try harder to report contents from nbd-server * copy: Add test for server without meta context support * api: Fix nbd_can_meta_context for server that lacks meta contexts * copy, info: Treat can_meta_context failures as unsupported * configure: Copy bash-completions test from nbdkit * Version 1.19.7. * podwrapper: Ignore check on older versions of Perl * podwrapper: Allow = (POD directive) followed by bare URL * podwrapper: Check for bare URLs and suggest replacement with L<> links * podwrapper: Move long lines and cross-reference checks earlier * contrib: Add suggested autoconf CHECK_LIBNBD macro * Version 1.19.6. * tests: Missed another C test which didn't use NBDKIT * tests: Use $NBDKIT instead of plain 'nbdkit' * tests: Use 'source ./function.sh' consistently in this directory * ocaml/tests: Add replacement for Bytes.set_int64_be * ocaml/tests: Add explicit dependency on ocaml_test_config.cm{o,x} * build: Define the minimum required version of OCaml as 4.05 * generator: Remove definition of sort_uniq * configure: Annotate OCaml tests by version of OCaml * ci: Skip certain deadlocking nbd-server tests on Alpine 3.19 * docs: Clarify description of block size constraints * ocaml: tests: Compute srcdir centrally in Ocaml_test_config module * ocaml: tests: Use @NBDKIT@ instead of hard coding nbdkit * python: tests: Use $NBDKIT instead of hard coding nbdkit * python: Various fixes to the Python tests and test wrapper * Version 1.19.5. ... changelog too long, skipping 51 lines ... * info: Try harder for graceful disconnect from server ==== libnvme ==== Version update (1.9+0.g80c5cf2 -> 1.10+0.gdd51fa8) Subpackages: libnvme-mi1 libnvme1 - Update to version 1.10: * linux: update TLS version 1 PSK derivation (bsc#1228376) * tree: fix nvme_read_config() to not set errno if return 0 * types: add new fields added in TP4165 * types: Changed the space into tap space * tree: handle no address phy slot dirs * linux: Remove the use of OpenSSL Engine API * types: Added new controller attribute as per TP4104 * tree: add helper to lookup hostnqn/hostid (bsc#1226216) * fabrics: extend hostnqn/hostid variable inject interface (bsc#1226216) * json: filter out pcie transport (bsc#1226216) * tree: preserve parsing order of a config file (bsc#1226216) * types: add new field added in TP4099 * types: add new field added in TP4090 * linux: add nvme_revoke_tls_key (bsc#1226197) * tree: fix segfault in nvme_free_tree() * types: add PEL vendor specific and TCG defined events definitions * mi-mctp: initialize the rc variable in handle_mctp_endpoint() * linux: avoid potential null pointer dereference * linux: add nvme_get_ana_log_len_from_id_ctrl() * libnvme: export nvme_mi_admin_get_ana_log_atomic() * ioctl: add support for atomic, piecewise ANA log fetch * ioctl: replace nvme_ana_rsp_hdr in doc comments * ioctl: respect rae in nvme_get_log_ana() * ioctl: fix nvme_get_log_ana_groups() pointer type * types: add new filed added in TP4141a * mi: Probe quirks on first command submission * tree: optionally skip namespaces during scanning * ioctl: update nvme_set_var_size_tags() to properly use reftag * types: add enum for Protection Information Format * libnvme: Introduce functions to generate host identifier and host NQN (bsc#1226216) * fabrics: Unescape URI elements * tests: Add uriparser tests * fabrics: Introduce simple URI parser * linux: default init cleanup variable * linux: Fix uninitialized variables * types: add the nvme Cancel command opcode * log: split log variables from root object * log: keep log level logic in one place * mi: restore default ep timeout during admin_passthru * mi: fix the rc for nvme_mi_scan_ep * ccan/endian.h: Only define __{BIG,LITTLE}_ENDIAN if undefined. * Use C99 types for uint32_t * mi: fix the return error code. ==== libreoffice ==== Subpackages: libreoffice-base libreoffice-calc libreoffice-draw libreoffice-filters-optional libreoffice-gnome libreoffice-gtk3 libreoffice-icon-themes libreoffice-impress libreoffice-l10n-cs libreoffice-l10n-da libreoffice-l10n-de libreoffice-l10n-el libreoffice-l10n-en libreoffice-l10n-en_GB libreoffice-l10n-es libreoffice-l10n-fr libreoffice-l10n-hu libreoffice-l10n-it libreoffice-l10n-ja libreoffice-l10n-pl libreoffice-l10n-pt_BR libreoffice-l10n-ru libreoffice-l10n-zh_CN libreoffice-l10n-zh_TW libreoffice-mailmerge libreoffice-math libreoffice-pyuno libreoffice-qt5 libreoffice-qt6 libreoffice-writer libreofficekit - Add reproducible-clucene.patch to use new clucene function to make index files reproducible (boo#1047218) - Normalize .jar and .zip mtimes with strip-nondeterminism ==== libstorage-ng ==== Version update (4.5.218 -> 4.5.219) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#1001 - added unit test - 4.5.219 ==== libxml2 ==== Version update (2.12.8 -> 2.12.9) Subpackages: libxml2-2 libxml2-tools - Update to version 2.12.9: + Security: (CVE-2024-40896) Fix XXE protection in downstream code. + Improvements: Undeprecate xmlKeepBlanksDefault. ==== libxml2-python ==== Version update (2.12.8 -> 2.12.9) - Update to version 2.12.9: + Security: (CVE-2024-40896) Fix XXE protection in downstream code. + Improvements: Undeprecate xmlKeepBlanksDefault. ==== nbdkit ==== Version update (1.36.5 -> 1.40.1) Subpackages: nbdkit-basic-filters nbdkit-basic-plugins nbdkit-curl-plugin nbdkit-nbd-plugin nbdkit-python-plugin nbdkit-server nbdkit-ssh-plugin nbdkit-vddk-plugin - Update to version 1.40.1: * Version 1.40.1. * tests/test-ext2-exportname.sh: Ignore libnbd < 1.8 for this test * server: Send the last error to the NBD client * server: Take a thread-local copy of the last call to nbdkit_error * server: Introduce threadlocal_{set,get}_last_error * server: Rename threadlocal_{set,get}_error to .._errno * server: log: Move preserve errno to log_verror function * server/crypto.c: Fix fallback functions used when gnutls is unavailable * Version 1.40.0. * tests/test-tar-info-xz.sh: Check plugin and filters required * README.md: Describe captive use of nbdkit as a key feature * curl: Add CURLPROTO_GOPHERS to list * tests: bzip2: Add disk.bz2 to CLEANFILES * tests: bzip2: Don't keep recreating disk.bz2 * curl: Enhance --dump-plugin output * curl: Add --dump-plugin output * docs: Copy-edit and fix typo in release notes for nbdkit 1.40 * docs: Add outline release notes for nbdkit 1.40 * ci: Drop Alma Linux 8 * file: Add file_block_size & file_blkrotational to --dump-plugin * Version 1.39.10. * file: Rethink calculation of block device I/O size preferences * file: Return minimum and preferred I/O size for block devices * server: Add a note about asynch-signal unsafety * ip: Fix version number where we started to deny unknown socket families * Version 1.39.9. * server: Add nbdkit_peer_tls_issuer_dn to read the CA DN * spinner: Small clarification for diagram of separate-heads property * vddk: Tested VDDK 8.0.3 * scan: Use superscript instead of asterisk for footnote * readahead, scan: Fix documentation referring to parallel thread model * ip: Revise filter documentation * ocaml, python: Implement bindings for nbdkit_peer_tls_dn * Version 1.39.8. * docs: Add nbdkit_peer_tls_dn.pod to EXTRA_DIST * ip: Allow matching on the TLS Distinguished Name * server: Add nbdkit_peer_tls_dn to read the TLS Distinguished Name * ip: Move fetching peer_name into check_if_allowed * ip: Move 'check_if_allowed' function closer to use * ip: Remove implicit allow for non-IP/-Unix/-vsock sockets * ip: Fix parsing of "security:" rule * server/crypto.c: Check <gnutls/socket.h> works before including it * server: Use '(void)' instead of '()' for a few function definitions * server/crypto.c: Fix spelling mistake in function name * docs: tls: Remove incorrect assertion that nbdkit checks the client's CN * build: Move to minimum gnutls >= 3.5.18 * maint: Fix logic bug in previous commit * tests: Fix CI on Fedora 40 * tests: Require bzip2 on OpenSUSE * bzip2: Fix mingw build * ci: Pull in bzip2 development for CI * xz: Add cross-reference to gzip filter. * gzip, xz: Add cross-references to new nbdkit-bzip2-filter * bzip2: Add cross-references to tar and xz filters * bzip2: Fix extension in description * Version 1.39.7. * docs: Mention bzip2 in README.md * New filter: bzip2 * .gitignore: add .swp * build: Fix sorting of 'evil' filter * Revise README.md file * .gitignore: Ignore various gcov files * captive: Use $uri instead of $nbd consistently * Version 1.39.6. * tests/test-tls.sh: Use $uri instead of constructing the URI * server: Set $tls_certificates and $tls_psk variables in --run command * server/uri.c: Append tls-certificates or tls-psk-key parameter to $uri * tests/test-tls.sh, tests/test-tls-psk.sh: Use captive nbdkit * server/uri.c: Refactor URI scheme creation * server/uri.c: Move URI debug statement into make_uri * server/uri.c: Single return from function * server/uri.c: Improve error messages * server/uri.c: Use close_memstream instead of fclose * server: Move URI code to a new file server/uri.c * tests: Fix comment in tests * tests/test-tls.sh: Skip on RHEL 8 * tests: Rework TLS tests to use nbdinfo instead of qemu-img info * tests: Test --print-uri + TLS * server: Make the --print-uri option easier to machine parse * docs/nbdkit-captive.pod: Refer to --print-uri section in main doc * server: Add --print-uri option * tests: Sort lines in list of tests * server/main.c: Sort options into order * tests: More debug output in test-blocksize-sharding.sh * Version 1.39.5. * tests: Add tests/test-gcs/google/api_core/__init__.py to EXTRA_DIST * common/utils/device-size.c: Include <stdint.h> * plugins: Use new device_size function * tests: Add and enhance some tests to cover device_size function * common/utils: Add a function to find the size of a file or block device * sh: Abstract the eval and sh plugins * docs: Fix references to nbdkit-sh-plugin(3) * cc, eval: Comma-separate SEE ALSO section of docs correctly * ci: refresh with latest lcitool manifest * ci: import lcitool project package list definitions * podwrapper: nbd-server(1), nbd-client(8) are not local man pages * tests/test-gcs: Skip tests if google.cloud.storage is installed * tests/test-gcs: Add __init__.py to mark package ... changelog too long, skipping 194 lines ... * python: Implement nbdkit.is_tls, nbdkit.stdio_safe and nbdkit.nanosleep ==== nvme-cli ==== Version update (2.9.1 -> 2.10) Subpackages: nvme-cli-bash-completion nvme-cli-zsh-completion - Update to version 2.10: * sed: Fix parsing of Discovery0 features * fabrics: avoid potential segfault in nvmf_dim() * nvme: avoid segfault in show-topology (bsc#1226197) * fabrics: do not leak nvme_ctrl_t object on connect * nvme: extend help message when mmap regs fails * nvme: return -ENXIO value to open device if errno not set * wdc: OCP 2.5 Log Page Updates * fabrics: drop --quiet alias -S * fabrics: drop --disable-sqflow alias -d * fabrics: check if json config is existing * plugins/ocp: fix UAF when printing telemetry log * nvme-print-stdout: fix persistent-event-log set feature event output * fabrics: do not report error when no modules are loaded when disconnecting * fabrics: use cleanup helper where possible * fabrics: print an error for ENOENT too * plugins/virtium: use time_t for time_stamp values * completions: add ocp set-error-injection command * doc: add ocp set-error-injection command * ocp: add set-error-injection command * nvme: use argconfig_parse_seen to check conditions * nvme: use proper mask to get correct lbafu value * utils: fix print formatting option * utils: cleanup includes in utils.h * utils: add missing header * nvme-print: Added print for two new fields for HMB feature * plugins/micron: Move OCP internal log parsing from Micron to OCP Plugin. * fabrics: remove unused _discover_from_json_config_file() argument * nvme: avoid unnecessary dup() + close() in io_mgmt_send() * util: remove unnecessary NULL check in cleanup_nvme_root() * nvme: use argconfig_parse_comma_sep_array_u16() in attach-ns * util: avoid duplication in argconfig_parse_comma_sep_array*() * util: remove redundant loop condition in argconfig_parse() * util: introduce is_null_or_empty() to avoid strlen() * util: reduce allocation sizes in argconfig_parse() * util: consolidate call paths to argconfig_parse_type() * util: reduce complexity of argconfig_parse_val() * util: reduce arguments passed to argconfig_parse_type() * util: remove empty default case in argconfig functions * util: remove unnecessary parentheses in argconfig_parse_type() * util: remove redundant cast in argconfig_parse_type() * util: inline argconfig_parse_byte() * util: remove redundant NULL check in argconfig_print_help() * util: use cleanup to avoid goto in argconfig_parse() * util: make argconfig_set_opt_val() a void function * util: remove argconfig_parse_val() declaration * util: remove argconfig CFG_SIZE type * wdc: Update and refactor the C0h log page parsing * ccan: Add freed pointer checking to delete strset member * fabrics: connect all hosts in config.json (bsc#1226216) * fabrics: refactore discover from json config (bsc#1226216) * fabrics: first read config before topology scanning (bsc#1226216) * fabrics: use helper to lookup default hostnqn/hostid (bsc#1226216) * fabrics: extend already connected message (bsc#1226216) * fabrics: use cleanup helper to free nvme root object * nvme: check MD size with PI size when PRACT set to 1 * nvme-print: add new field added in TP4090 * nvme-print-binary: add effects-log command output missed * completions: add ocp get-error-injection command * doc: add ocp get-error-injection command * ocp: add get-error-injection command * ocp: fix eol-plp-failure-mode command sel option value * doc: fix ocp eol-plp-failure-mode select short option * ocp: set UUID index for eol-plp-failure-mode command to get * nvme: fix verbose logging * doc: fix micron ocp telemetry log parse title * nvme-rpmb: send RPMB_REQ_READ_RESULT for authentication key programming * plugins/micron: Add support for OCP telemetry log parsing * ocp: Update Plugin Version * nvme: fix lbaf inuse to use 6:5 bits * ocp: use NVME_ARGS macro definition by eol-plp-failure-mode command * nvme: extern NVME_ARGS macro definition * nvme: use _cleanup_free_ type buffer for get-feature command * plugins/ocp: Update telemetry string log page (C9h) * nvme-print-json: add get-feature command fahrenheit temperature output * nvme: add get-feature and id-ctrl commands fahrenheit outputs * nvme: delete smart-log command fahrenheit option * nvme-print: check locale to use temperatures in degrees fahrenheit * completion: add support for tls-key (bsc#1226197) * doc: add tls-key --revoke documentation (bsc#1226197) * doc: fix tls-key --keyfile shorthand (bsc#1226197) * nvme: add support to revoke TLS key (bsc#1226197) * nvme: return error code/message for TLS commands (bsc#1226197) * nvme: factor out import key function (bsc#1226197) * nvme: use cleanup helper to close file descriptor (bsc#1226216) * nvme-rpmb: use cleanup helper for STREAM objects * fabrics: use cleanup helper for STREAM objects * nvme: use cleanup helper for STREAM objects (bsc#1226216) * nvme: strip newline when parsing TLS key files (bsc#1226197) * nvme: use stdout for exporting TLS keys (bsc#1226197) * nvme: change _cleanup_file_ to _cleanup_fd_ (bsc#1226197) * common.h: Avoid using unsupported load/store instructions in arm64 VMs * ocp: OCP 2.5 Telemetry DA 1 and 2 Parsing Updates * nvme-print-stdout: refactor subsys config * wdc: Fix compiler warning. * nvme: add flags type nvme_print_flags_t * nvme-print: Use 'unsigned int' instead of 'unsigned' * nvme: update parse_args() return value handling * nvme-print: Fix nvme_show_smart_log indentation error ... changelog too long, skipping 69 lines ... * add 0001-docs-rename-ocp-unsupported-req-log-file.patch ==== openSUSE-release ==== Version update (20240805 -> 20240806) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== procps ==== Subpackages: libproc2-0 procps-lang - Switch to procps 4 branch, absorbing the former procps4 package: + Add provides/obsoletes procps4: make zypper replace procps4 with the main package for users that manually switched. - Aligning to the existing procps4 package, drop/add/modify patches: A 79042e07.patch A procps-ng-4.0.0-integer-overflow.patch A procps-ng-4.0.4-ignore-sysctl_conf.patch A procps-ng-4.0.4-pmapX-not-twice-anymore.patch A procps-ng-4.0.0-floats.dif D CVE-2023-4016.patch D bsc1195468-23da4f40.patch D procps-3.3.17-bsc1181976.patch D procps-3.3.17-ignore-sysctl_conf.patch D procps-3.3.17-library-bsc1181475.patch D procps-3.3.17-top-bsc1181475.patch D procps-ng-3.3.10-integer-overflow.patch D procps-ng-3.3.10-large_pcpu.patch D procps-ng-3.3.17-logind.patch D procps-ng-3.3.8-bnc634840.patch D procps-ng-3.3.9-watch.patch D procps-ng-3.3.8-accuracy.dif D procps-ng-3.3.10-bnc634071_procstat2.diff D procps-ng-3.3.10-fdleak.dif M procps-ng-3.3.10-errno.patch M procps-ng-3.3.10-slab.patch M procps-ng-3.3.11-pmap4suse.patch M procps-ng-3.3.8-ignore-scan_unevictable_pages.patch M procps-ng-3.3.8-petabytes.patch M procps-ng-3.3.8-readeof.patch M procps-v3.3.3-pwdx.patch ==== sensors ==== Subpackages: libsensors4 - Add lm_sensors-revert-6b5a19b708.patch which reverts an upstream patch, thus adding back two explicit pointer type-casts. Code without them used to generate mere warnings until this year but causes compiler errors with GCC 14 by default. ==== swtpm ==== Version update (0.8.1 -> 0.9.0) Subpackages: swtpm-selinux - update to 0.9.0: - fixes: boo#1226398 - swtpm: - Use umask() to create/truncated state file rather than fchmod() - Use fchmod to set mode bits provided by user - Replace mkstemp with g_mkstemp_full (Coverity) - fix typo in help message - cuse: Fix Coverity complaints regarding locks - Fix double free in error path - Close fd after main loop - Restore logging to stderr on log open failure - swtpm_setup: - Fail --pcr-banks without --tpm2 - Fail --decryption or --allow-signing without --tpm2 - Initialized argv in get_swtpm_capabilities() - Flush spk after persisting to create room for another key - Refactor duplicate code into swtpm_tpm2_write_cert_nvram - Move persisting of certificate into tpm2_persist_certificate - Pass key_type to function creating filename for key - Add scheme parameter before curveid to createprimary_ecc - Rename is_ek to preserve for future extension - Mask-out EK and plaform certificate flags and set cert_flags - Move common code into new function read_certificate_file() - Exit with '0' upon --version rather than '1' - Close file descriptors passed to swtpm process on parent side - Make stdout unbuffered - Use medium duration on TSC_PhysicalPresence to avoid timeouts - Add poll() after write() and before read() to detect errors - swtpm_localca: - Add support for up to 20 bytes serial numbers - Introduce --key as more generic alias for --ek - Add missing NULL option to end of array - Make stdout unbuffered - swtpm_cert: - Add support for serial numbers up to 20 bytes long - swtpm_ioctl: - Separate return code from flags - Repeatedly call PTM_GET_INFO for long responses - selinux: - Re-add rule for svirt_tcg_t and user_tmp_t:sock_file (virt-install) - New SELinux policy that requires Fedora 40 or later - tests: - Fixed occurrences of stray '' before '-' - Rearrange order of test cases to run some also as 'root' - Add tests for command line options and combinations of options - Add softhsm_setup to shellcheck'ed files and fix issues - Add missing 'exit 1' on unexpected file size on --reconfigure - Add test cases for swtpm_cert with max serial number - Fix spelling mistakes - reformat regexs for easier readability and extension - ibmtss2: Add patch to disable x509 test with older libtpms - Upgrade to ibmtss2 v2.0.1 - Fixed several issues detected by shellcheck - build-sys: - Add support for --disable-tests to disable tests - Display GMP_LIBS and GMP_CFLAGS - Only display warning if pkg-config for gmp fails - Add gmp library and devel package as dependency - use PKG_CHECK_MODULES to check libtpms version ==== vde2 ==== - Added vde2-C99.patch to avoid a C99 violation preventing the package to be built with GC 14. [boo#1225950] ==== zchunk ==== Version update (1.4.0 -> 1.5.1) - update to 1.5.1: * Stop storing last error when missing zchunk context

1 0

New Tumbleweed snapshot 20240805 released!
by Dominique Leuenberger 06 Aug '24

06 Aug '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: emacs-compat (29.1.4.5 -> 30.0.0.0) emacs-jinx (1.9 -> 1.10) google-noto-fonts (20240601 -> 20240801) gtk4 libzypp (17.35.6 -> 17.35.9) mozilla-nss (3.101.1 -> 3.102.1) openSUSE-release (20240803 -> 20240805) python-pygit2 (1.15.0 -> 1.15.1) shim-leap (15.4 -> 15.8) sudo virt-manager webkit2gtk3 === Details === ==== emacs-compat ==== Version update (29.1.4.5 -> 30.0.0.0) - Add back the install_info macro's for Leap, info triggers are not old enough for Leap - Add patch to fix Texinfo references inside the manual: 0002-compat.texi-Fix-references-to-Emacs-30.1-in-Support-.patch - Remove use deprecated install_info macro's - Rebase 0001-Add-install-target.patch against new upstream version - Update to version 30.0.0.0: * compat-28: Mark =subr-native-elisp-p= as obsolete (renamed in Emacs 30). * compat-30: New function =char-to-name=. * compat-30: New function =obarray-clear=. * compat-30: New function =interpreted-function-p=. * compat-30: New function =primitive-function-p=. * compat-30: New function =closurep=. * compat-30: Add extended function =sort= with keyword arguments. * compat-30: New function =value<=. * compat-30: Add extended =copy-tree= with support for copying records with non-nil optional second argument. * compat-30: New macro =static-if=. * compat-30: New alias =drop=. * compat-30: New function =merge-ordered-lists=. * compat-30: New variables =completion-lazy-hilit= and =completion-lazy-hilit-fn= and new function =completion-lazy-hilit=. * compat-30: New function =require-with-check=. * compat-30: New functions =find-buffer= and =get-truename-buffer=. * compat-30: Add extended =completion-metadata-get= with support for =completion-category-overrides= and =completion-extra-properties=. ==== emacs-jinx ==== Version update (1.9 -> 1.10) - Rebase p0001-Only-export-necessary-symbols.-Fixes-105.patch against version 1.10 - Update to version 1.10: * Add jinx--syntax-overrides to override syntax table ==== google-noto-fonts ==== Version update (20240601 -> 20240801) Subpackages: google-noto-sans-fonts google-noto-sans-symbols-fonts google-noto-sans-symbols2-fonts - Update to 20240801 * Sans Mongolian has its shaping rules updated to match UTN#57 * Serif Balinese fixed some overlaps * Nastaliq Urdu has most of its issues fixed ==== gtk4 ==== Subpackages: gtk4-lang gtk4-schema gtk4-tools libgtk-4-1 typelib-1_0-Gtk-4_0 - Add 0002-Revert-no-pointer-viewport.patch -- Fixes https://gitlab.gnome.org/GNOME/gtk/-/issues/6620 ==== libzypp ==== Version update (17.35.6 -> 17.35.9) - single_rpmtrans: fix installation of .src.rpms (bsc#1228647) - version 17.35.9 (35) - Make sure not to statically linked installed tools (bsc#1228787) - version 17.35.8 (35) - MediaPluginType must be resolved to a valid MediaHandler (bsc#1228208) - version 17.35.7 (35) ==== mozilla-nss ==== Version update (3.101.1 -> 3.102.1) Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs mozilla-nss-sysinit mozilla-nss-tools - update to NSS 3.102.1 * bmo#1905691 - ChaChaXor to return after the function - update to NSS 3.102 * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305. * bmo#1901932 - missing sqlite header. * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME. * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling. * bmo#1660676 - correct length of raw SPKI data before printing in pp utility. - Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh depends on it and will create a broken, empty config, if sed is missing (bsc#1227918) - Added nss-fips-safe-memset.patch, fixing bsc#1222811. - Removed some dead code from nss-fips-constructor-self-tests.patch. - Rebased nss-fips-approved-crypto-non-ec.patch on above changes. - Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830. - Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813, bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118. - Updated nss-fips-approved-crypto-non-ec.patch and nss-fips-constructor-self-tests.patch, fixing bsc#1222807, bsc#1222828, bsc#1222834. - Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804, bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116. ==== openSUSE-release ==== Version update (20240803 -> 20240805) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== python-pygit2 ==== Version update (1.15.0 -> 1.15.1) - Update to 1.15.1 * New `Repository.revert(...)` * New optional `depth` argument in submodules `add()` and `update()` methods * Now `Submodule.url` returns `None` when the submodule does not have a url * Fix use after free bug in error reporting * Fix `Submodule.head_id` when the submodule is not in the current HEAD tree * Fix `Submodule.open()` when subclassing `Repository` * Fix error in the test suite when running with address sanitizer * Annotations and documentation fixes - Fix version number for previous changelog entry ==== shim-leap ==== Version update (15.4 -> 15.8) - Update to shim to 15.8-shim-15.8-lp155.8.2.x86_64.rpm from openSUSE secure-boot 15.5 + Version: 15.8, "Jan 23 2024" + Align the outside shim-install with the one in RPM file. This is because all important fixes in outside shim-install are also fixed in shim-install of RPM file. For consistency purposes, the outside shim-install is updated in this version. + Include the bug fixes for bsc#1215099,bsc#1215098,bsc#1215100,bsc#1215101, bsc#1215102, and bsc#1215103. ==== sudo ==== Subpackages: sudo-plugin-python - A quick note that bsc#1227574 is expected behavior in this version of sudo. It was a regression in 15.6 which doesn't have the /etc/ split for pam.d yet. ==== virt-manager ==== Subpackages: virt-install virt-manager-common - bsc#1228384 - virt-install generates unwanted libvirt storage pools when running with --dry-run --print-xml virtinst-dont-create-storage-pool-for-dryrun.patch ==== webkit2gtk3 ==== Subpackages: WebKitGTK-4.1-lang libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles - Add CVE fixes: + webkit2gtk3-CVE-2024-40776.patch (boo#1228613 CVE-2024-40776) + webkit2gtk3-CVE-2024-40779.patch (boo#1228693 CVE-2024-40779) + webkit2gtk3-CVE-2024-40780.patch (boo#1228694 CVE-2024-40780) + webkit2gtk3-CVE-2024-40782.patch (boo#1228695 CVE-2024-40782)

1 0

How to package telegram-desktop with dependency of openh264?
by Xu Zhao 05 Aug '24

05 Aug '24

Hello all, I am the maintainer of telegram-desktop package in OSS and I am seeking advice about how to update the package as its recent change is blocked by openSUSE's openh264 license issue. 2 weeks ago, tg_owt made a commit to use system-level openh264 instead of bundled version (https://github.com/desktop-app/tg_owt/commit/204f1abf4646a77b5c6903bd2cc850…) this will break the build of telegram-desktop on b.o.o obs because on opensuse openh264 is distributed separately at https://codecs.opensuse.org/openh264/openSUSE_Tumbleweed/x86_64/. I can think of the following options: 1. patch tg_owt to make openh264 an optional dependency instead of hard dependency, but this will probably be rejected by upsteam and we have to maintain our own patchset. 2. bundle openh264 library with tg_owt and maintain the previous behavior, but I am not sure if this will violate the rules of OBS 3. delete telegram-desktop package on b.o.o (https://build.opensuse.org/package/show/server:messaging/telegram-desktop) and ask users to use the flatpak version 4. if there is a plan to push openh264 into OSS factory, we can keep telegram-desktop and wait until openh264 is available in OSS factory repo. Please advice on which option we should take, or if you have other opinions. Your advice is much appreciated. Best, Xu Zhao -- Xu Zhao i(a)xuzhao.net

4 5

Re: How to package telegram-desktop with dependency of openh264?
by Larry Len Rainey 05 Aug '24

05 Aug '24

2 1

systemd-sleep - suspend not working
by Axel Braun 05 Aug '24

05 Aug '24

Hello, I noticed that suspend on my Laptop is not working anymore. The log offers: https://paste.opensuse.org/pastes/8e73d324319d I guess the issue is this: Aug 04 07:46:48 X1E systemd-sleep[260321]: User sessions remain unfrozen (add $SYSTEMD_SLEEP_FREEZE_USER_SESSIONS=1 to override), Aug 04 07:46:48 X1E systemd-sleep[260321]: relying on kernel to perform the freeze. Aug 04 07:46:48 X1E systemd-sleep[260321]: This is a temporary downstream workaround for https://github.com/systemd/systemd/issues/33083. Aug 04 07:46:48 X1E systemd-sleep[260326]: INFO: Skip running /usr/lib/systemd/system-sleep/grub2.sleep for suspend Aug 04 07:46:48 X1E systemd-sleep[260321]: Performing sleep operation 'suspend'... Aug 04 07:46:48 X1E kernel: PM: suspend entry (deep) Aug 04 07:46:48 X1E kernel: Filesystems sync: 0.040 seconds Aug 04 07:47:08 X1E kernel: Freezing user space processes Aug 04 07:47:08 X1E kernel: Freezing user space processes failed after 20.009 seconds (2 tasks refusing to freeze, wq_busy=0): Aug 04 07:47:08 X1E kernel: task:KIO::WorkerThre state:D stack:0 pid:216745 tgid:216055 ppid:1914 flags:0x00004006 Where should the parameter be added? As Kernel parameter on boot? I have opened https://bugzilla.opensuse.org/show_bug.cgi?id=1228833 for this Cheers Axel

3 3

New Tumbleweed snapshot 20240803 released!
by Dominique Leuenberger 05 Aug '24

05 Aug '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ImageMagick (7.1.1.34 -> 7.1.1.35) gcc14 (14.1.1+git10335 -> 14.2.0+git10526) gstreamer (1.24.5 -> 1.24.6) gstreamer-plugins-bad (1.24.5 -> 1.24.6) gstreamer-plugins-base (1.24.5 -> 1.24.6) gstreamer-plugins-good (1.24.5 -> 1.24.6) gstreamer-plugins-libav (1.24.5 -> 1.24.6) gstreamer-plugins-ugly (1.24.5 -> 1.24.6) kernel-firmware (20240712 -> 20240728) libheif (1.18.0 -> 1.18.1) openSUSE-release (20240801 -> 20240803) perl-HTML-Parser (3.820.0 -> 3.830.0) postfix python-tornado6 (6.4 -> 6.4.1) rubygem-nokogiri (1.16.6 -> 1.16.7) sysuser-tools xorg-x11-server === Details === ==== ImageMagick ==== Version update (7.1.1.34 -> 7.1.1.35) Subpackages: ImageMagick-config-7-SUSE libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - version update to 7.1.1.35 * Also set dpi-x and dpi-y when running rsvg-convert. eac001f * convert sub-command is deprecated d67039e * only operators should disable "identify ping" (ImageMagick/ImageMagick#7441) a262192 * fix compiler error ecc21c7 * -outdir deprecated 9980efa * Get the correct width and height when heic:preserve-orientation is set to true. ed3a0dd * Set heic image orientation using transform information. ba470aa * Exit earlier when the symlink could not be created when invoking the svg:decode delegate. 8a48edd * Fixed MSYS2 build error. 3b22378 * Also set the DNG properties when pinging the image. fc1c61b * Silence warning when lqr delegate is disabled. ae0d69a * Added version check for the heif_properties.h include. 656b4d2 * Make sure we always use the i64 version of the "file methods" on Windows. b3e8a78 * Changed defines to use method instead of a define. 75b66c4 * Changes due to upgrade of libheif. 841f033 * smooth the rendering of an ellipse (ImageMagick/ImageMagick#7465) 1bfce2a ==== gcc14 ==== Version update (14.1.1+git10335 -> 14.2.0+git10526) Subpackages: libasan8 libatomic1 libgcc_s1 libgcc_s1-32bit libgfortran5 libgomp1 libhwasan0 libitm1 liblsan0 libobjc4 libquadmath0 libstdc++6 libstdc++6-32bit libstdc++6-locale libstdc++6-pp libstdc++6-pp-32bit libtsan2 libubsan1 - Update to GCC 14.2.0 release, c035a7c30c310ff928988cbcf, git10526 - Add libquadmath0-devel-gcc14 sub-package to allow installing quadmath.h and SO link without installing the fortran frontend - Drop SLE11 compatibility %selfconflict wrapper, drop various conditions gating SLE11 build support - Update to gcc-14 branch head, a544898f6dd6a1689bb25abfd, git10504 * GCC 14.2 release candidate. ==== gstreamer ==== Version update (1.24.5 -> 1.24.6) Subpackages: gstreamer-lang gstreamer-utils libgstreamer-1_0-0 typelib-1_0-Gst-1_0 - Update to version 1.24.6: + Highlighted bugfixes: - Fix compatibility with FFmpeg 7.0. - qmlglsink: Fix failure to display content on recent Android devices. - adaptivedemux: Fix handling of closed caption streams. - cuda: Fix runtime compiler loading with old CUDA tookit. - decodebin3 stream selection handling fixes. - d3d11compositor, d3d12compositor: Fix transparent background mode with YUV output. - d3d12converter: Make gamma remap work as intended. - h264decoder: Update output frame duration for interlaced video when second field frame is discarded. - macOS audio device provider now listens to audio devices being added/removed at runtime. - Rust plugins: audioloudnorm, s3hlssink, gtk4paintablesink, livesync and webrtcsink fixes. - videoaggregator: preserve features in non-alpha caps for subclasses with non-system memory sink caps. - vtenc: Fix redistribute latency spam. - v4l2: fixes for complex video formats. - va: Fix strides when importing DMABUFs, dmabuf handle leaks, and blocklist unmaintained Intel i965 driver for encoding. - waylandsink: Fix surface cropping for rotated streams. - webrtcdsp: Enable multi_channel processing to fix handling of stereo streams. - Various bug fixes, memory leak fixes, and other stability and reliability improvements. ==== gstreamer-plugins-bad ==== Version update (1.24.5 -> 1.24.6) Subpackages: gstreamer-plugins-bad-lang libgstadaptivedemux-1_0-0 libgstanalytics-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstcuda-1_0-0 libgstinsertbin-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstmse-1_0-0 libgstphotography-1_0-0 libgstplay-1_0-0 libgstplayer-1_0-0 libgstsctp-1_0-0 libgsttranscoder-1_0-0 libgsturidownloader-1_0-0 libgstva-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 libgstwebrtcnice-1_0-0 - Update to version 1.24.6: + Highlighted bugfixes: - Fix compatibility with FFmpeg 7.0. - qmlglsink: Fix failure to display content on recent Android devices. - adaptivedemux: Fix handling of closed caption streams. - cuda: Fix runtime compiler loading with old CUDA tookit. - decodebin3 stream selection handling fixes. - d3d11compositor, d3d12compositor: Fix transparent background mode with YUV output. - d3d12converter: Make gamma remap work as intended. - h264decoder: Update output frame duration for interlaced video when second field frame is discarded. - macOS audio device provider now listens to audio devices being added/removed at runtime. - Rust plugins: audioloudnorm, s3hlssink, gtk4paintablesink, livesync and webrtcsink fixes. - videoaggregator: preserve features in non-alpha caps for subclasses with non-system memory sink caps. - vtenc: Fix redistribute latency spam. - v4l2: fixes for complex video formats. - va: Fix strides when importing DMABUFs, dmabuf handle leaks, and blocklist unmaintained Intel i965 driver for encoding. - waylandsink: Fix surface cropping for rotated streams. - webrtcdsp: Enable multi_channel processing to fix handling of stereo streams. - Various bug fixes, memory leak fixes, and other stability and reliability improvements. ==== gstreamer-plugins-base ==== Version update (1.24.5 -> 1.24.6) Subpackages: gstreamer-plugins-base-lang libgstallocators-1_0-0 libgstapp-1_0-0 libgstaudio-1_0-0 libgstfft-1_0-0 libgstgl-1_0-0 libgstpbutils-1_0-0 libgstriff-1_0-0 libgstrtp-1_0-0 libgstrtsp-1_0-0 libgstsdp-1_0-0 libgsttag-1_0-0 libgstvideo-1_0-0 typelib-1_0-GstAudio-1_0 typelib-1_0-GstPbutils-1_0 typelib-1_0-GstTag-1_0 typelib-1_0-GstVideo-1_0 - Update to version 1.24.6: + Highlighted bugfixes: - Fix compatibility with FFmpeg 7.0. - qmlglsink: Fix failure to display content on recent Android devices. - adaptivedemux: Fix handling of closed caption streams. - cuda: Fix runtime compiler loading with old CUDA tookit. - decodebin3 stream selection handling fixes. - d3d11compositor, d3d12compositor: Fix transparent background mode with YUV output. - d3d12converter: Make gamma remap work as intended. - h264decoder: Update output frame duration for interlaced video when second field frame is discarded. - macOS audio device provider now listens to audio devices being added/removed at runtime. - Rust plugins: audioloudnorm, s3hlssink, gtk4paintablesink, livesync and webrtcsink fixes. - videoaggregator: preserve features in non-alpha caps for subclasses with non-system memory sink caps. - vtenc: Fix redistribute latency spam. - v4l2: fixes for complex video formats. - va: Fix strides when importing DMABUFs, dmabuf handle leaks, and blocklist unmaintained Intel i965 driver for encoding. - waylandsink: Fix surface cropping for rotated streams. - webrtcdsp: Enable multi_channel processing to fix handling of stereo streams. - Various bug fixes, memory leak fixes, and other stability and reliability improvements. ==== gstreamer-plugins-good ==== Version update (1.24.5 -> 1.24.6) Subpackages: gstreamer-plugins-good-gtk gstreamer-plugins-good-lang - Update to version 1.24.6: + Highlighted bugfixes: - Fix compatibility with FFmpeg 7.0. - qmlglsink: Fix failure to display content on recent Android devices. - adaptivedemux: Fix handling of closed caption streams. - cuda: Fix runtime compiler loading with old CUDA tookit. - decodebin3 stream selection handling fixes. - d3d11compositor, d3d12compositor: Fix transparent background mode with YUV output. - d3d12converter: Make gamma remap work as intended. - h264decoder: Update output frame duration for interlaced video when second field frame is discarded. - macOS audio device provider now listens to audio devices being added/removed at runtime. - Rust plugins: audioloudnorm, s3hlssink, gtk4paintablesink, livesync and webrtcsink fixes. - videoaggregator: preserve features in non-alpha caps for subclasses with non-system memory sink caps. - vtenc: Fix redistribute latency spam. - v4l2: fixes for complex video formats. - va: Fix strides when importing DMABUFs, dmabuf handle leaks, and blocklist unmaintained Intel i965 driver for encoding. - waylandsink: Fix surface cropping for rotated streams. - webrtcdsp: Enable multi_channel processing to fix handling of stereo streams. - Various bug fixes, memory leak fixes, and other stability and reliability improvements. ==== gstreamer-plugins-libav ==== Version update (1.24.5 -> 1.24.6) - Update to version 1.24.6: + Highlighted bugfixes: - Fix compatibility with FFmpeg 7.0. - qmlglsink: Fix failure to display content on recent Android devices. - adaptivedemux: Fix handling of closed caption streams. - cuda: Fix runtime compiler loading with old CUDA tookit. - decodebin3 stream selection handling fixes. - d3d11compositor, d3d12compositor: Fix transparent background mode with YUV output. - d3d12converter: Make gamma remap work as intended. - h264decoder: Update output frame duration for interlaced video when second field frame is discarded. - macOS audio device provider now listens to audio devices being added/removed at runtime. - Rust plugins: audioloudnorm, s3hlssink, gtk4paintablesink, livesync and webrtcsink fixes. - videoaggregator: preserve features in non-alpha caps for subclasses with non-system memory sink caps. - vtenc: Fix redistribute latency spam. - v4l2: fixes for complex video formats. - va: Fix strides when importing DMABUFs, dmabuf handle leaks, and blocklist unmaintained Intel i965 driver for encoding. - waylandsink: Fix surface cropping for rotated streams. - webrtcdsp: Enable multi_channel processing to fix handling of stereo streams. - Various bug fixes, memory leak fixes, and other stability and reliability improvements. ==== gstreamer-plugins-ugly ==== Version update (1.24.5 -> 1.24.6) Subpackages: gstreamer-plugins-ugly-lang - Update to version 1.24.6: + Highlighted bugfixes: - Fix compatibility with FFmpeg 7.0. - qmlglsink: Fix failure to display content on recent Android devices. - adaptivedemux: Fix handling of closed caption streams. - cuda: Fix runtime compiler loading with old CUDA tookit. - decodebin3 stream selection handling fixes. - d3d11compositor, d3d12compositor: Fix transparent background mode with YUV output. - d3d12converter: Make gamma remap work as intended. - h264decoder: Update output frame duration for interlaced video when second field frame is discarded. - macOS audio device provider now listens to audio devices being added/removed at runtime. - Rust plugins: audioloudnorm, s3hlssink, gtk4paintablesink, livesync and webrtcsink fixes. - videoaggregator: preserve features in non-alpha caps for subclasses with non-system memory sink caps. - vtenc: Fix redistribute latency spam. - v4l2: fixes for complex video formats. - va: Fix strides when importing DMABUFs, dmabuf handle leaks, and blocklist unmaintained Intel i965 driver for encoding. - waylandsink: Fix surface cropping for rotated streams. - webrtcdsp: Enable multi_channel processing to fix handling of stereo streams. - Various bug fixes, memory leak fixes, and other stability and reliability improvements. ==== kernel-firmware ==== Version update (20240712 -> 20240728) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-ath12k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update to version 20240728 (git commit bcd040c21dc9): * amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 * Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" (CVE-2023-47210, bsc#1225601, CVE-2023-38417, bsc#1225600) * linux-firmware: update firmware for MT7922 WiFi device * linux-firmware: update firmware for MT7921 WiFi device * linux-firmware: update firmware for mediatek bluetooth chip (MT7922) * linux-firmware: update firmware for mediatek bluetooth chip (MT7921) * iwlwifi: add gl FW for core89-58 release * iwlwifi: update ty/So/Ma firmwares for core89-58 release * iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release * mediatek: Update mt8195 SOF firmware and sof-tplg * ASoC: tas2781: fix the license issue for tas781 firmware * rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 * .gitignore: Ignore intermediate files * i915: Update Xe2LPD DMC to v2.21 * qcom: move signed x1e80100 signed firmware to the SoC subdir * qcom: add video firmware file for vpu-3.0 * intel: avs: Add topology file for I2S Analog Devices 4567 * intel: avs: Add topology file for I2S Nuvoton 8825 * intel: avs: Add topology file for I2S Maxim 98927 * intel: avs: Add topology file for I2S Maxim 98373 * intel: avs: Add topology file for I2S Maxim 98357a * intel: avs: Add topology file for I2S Dialog 7219 * intel: avs: Add topology file for I2S Realtek 5663 * intel: avs: Add topology file for I2S Realtek 5640 * intel: avs: Add topology file for I2S Realtek 5514 * intel: avs: Add topology file for I2S Realtek 298 * intel: avs: Add topology file for I2S Realtek 286 * intel: avs: Add topology file for I2S Realtek 274 * intel: avs: Add topology file for Digital Microphone Array * intel: avs: Add topology file for HDMI codecs * intel: avs: Add topology file for HDAudio codecs * Add a copy of Apache-2.0 * intel: avs: Update AudioDSP base firmware for APL-based platforms - Update aliases from 6.10.y and 6.11-rc1 - Add the Provides/Obsoletes for avs-topology-firmware, as now the firmware files are provided in this package ==== libheif ==== Version update (1.18.0 -> 1.18.1) Subpackages: gdk-pixbuf-loader-libheif libheif-aom libheif-dav1d libheif-ffmpeg libheif-jpeg libheif-openjpeg libheif-rav1e libheif-svtenc libheif1 - update to 1.18.1: * Fix libbrotlidec pkg-config requires * tiff: Fix wrong type for "seekTIFF" function. * fix 32bit compiler warnings in box.cc * fix memory leaks in Brotli decoder ==== openSUSE-release ==== Version update (20240801 -> 20240803) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== perl-HTML-Parser ==== Version update (3.820.0 -> 3.830.0) - updated to 3.830.0 (3.83) see /usr/share/doc/packages/perl-HTML-Parser/Changes 3.83 2024-07-30 - fix '$\/]' in HTML::Entities::encode_entities (GH#45) (mauke) ==== postfix ==== - postfix gives warnings about deprecated parameters (bsc#1225397) ==== python-tornado6 ==== Version update (6.4 -> 6.4.1) - Update to version 6.4.1: + Security Improvements: - Parsing of the ``Transfer-Encoding`` header is now stricter. Unexpected transfer-encoding values were previously ignored and treated as the HTTP/1.0 default of read-until-close. This can lead to framing issues with certain proxies. We now treat any unexpected value as an error. - Handling of whitespace in headers now matches the RFC more closely. Only space and tab characters are treated as whitespace and stripped from the beginning and end of header values. Other unicode whitespace characters are now left alone. This could also lead to framing issues with certain proxies. - `tornado.curl_httpclient` now prohibits carriage return and linefeed headers in HTTP headers (matching the behavior of `simple_httpclient`). These characters could be used for header injection or request smuggling if untrusted data were used in headers. + General Changes: - `tornado.iostream`: `SLIOStream` now understands changes to error codes from OpenSSL 3.2. The main result of this change is to reduce the noise in the logs for certain errors. - `tornado.simple_httpclient`: `simple_httpclient` now prohibits carriage return characters in HTTP headers. It had previously prohibited only linefeed characters. - `tornado.testing`: `.AsyncTestCase` subclasses can now be instantiated without being associated with a test method. Improves compatibility with test discovery in Pytest 8.2. - Drop support-pytest-8.2.patch: fixed upstream. - Drop openssl-3.2.patch: fixed upstream. ==== rubygem-nokogiri ==== Version update (1.16.6 -> 1.16.7) - 1.16.7: - update intree libxml2 copy (unused in our build) ==== sysuser-tools ==== - Disable UID:GID support for now - UID:GID: don't create group with GID if it does not exist - Rewrite UID:GID support to work with busybox and fix it for useradd ==== xorg-x11-server ==== Subpackages: xorg-x11-server-Xvfb xorg-x11-server-extra - Added U_xorg-xserver-e89edec497ba.patch to fix incompatible pointer type error with GCC 14.

1 0

Secure boot: Upcoming Revocation of Windows Production PCA 2011
by Richard Weinberger 05 Aug '24

05 Aug '24

Hi, Microsoft seems to have plans to revoke the "Windows Production PCA 2011” certificate by putting it into DBX[0]. This made me think about the secure boot situation on Linux, and especially OpenSUSE. - How much does this affect us? - What if Microsoft revokes also the "Microsoft Corporation UEFI CA 2011" certificate which signs out shim? - Is there a general plan on how to deal with future CA revocations? [0] https://support.microsoft.com/en-us/topic/kb5025885-how-to-manage-the-windo… -- Thanks, //richard

4 4

Re: rust non-determinism
by Bernhard M. Wiedemann 05 Aug '24

05 Aug '24

On 04/08/2024 18.42, John Gilmore wrote: > And should a bug be filed against Rustc that their compiler defaults to > irreproducible results, while its default should be reproducibility > rather than slightly faster compiler runtimes? => https://github.com/rust-lang/rust/issues/128675

1 0

Re: mkosi-initrd: initial enablement for Tumbleweed
by Antonio Feijoo 05 Aug '24

05 Aug '24

Hi, On 02/08/2024 17.05, Björn Bidar wrote: > Antonio Feijoo via openSUSE Factory <factory(a)lists.opensuse.org> writes: > >> Why is it interesting and different from other initrd generators? Mainly, >> because it builds the initrd from distro packages instead of picking everything >> from your local host. > > How is this supposed to work in practice when the distribution could > already have moved further than the local installation? E.g. when > rebuilding initramfs in TW without updating the rest of the OS. > Picking everything from local host has the advantage that it assures > that the components match the ones used on the host. It's not supposed to work in that case, if a critical package involved bumps its version (e.g. systemd). But this way of working will be useful for other use cases. E.g., think about transactional systems, where the user cares more about guest container workloads and the host system is automatically updated. -- Antonio Álvarez Feijoo System Boot and Init SUSE

1 0

rust non-determinism
by Bernhard M. Wiedemann 04 Aug '24

04 Aug '24

Hello fellow R-B-ings, In previous months I had seen several rust-builds that were non-deterministic in similar ways. Via https://github.com/pop-os/launcher/issues/230 I finally found one big clue that points to rust's default of codegen-units = 16 as the cause. I'll advocate [1] to add to our (openSUSE) build envs: export RUSTFLAGS="-C codegen-units=1" that helps for many of these cases. In my measurements, it only needs 5-10% longer to compile on a 4-core-VM and some builds are even faster on 1-core VMs. Plus the docs say, it optimizes resulting binaries better, which makes it a worthy trade-off. Ciao Bernhard M. [1] https://github.com/openSUSE/post-build-checks/pull/65

2 1

How to submit a new package to Leap from Factory
by Dura-Kovács 03 Aug '24

03 Aug '24

I was trying to submit a package from Factory to Leap by following this guide: https://en.opensuse.org/openSUSE:Packaging_for_Leap It says: > A new package request has to be explicitly submitted against the intended destination project that will be in 99% openSUSE:Backports:SLE-15-SP6. An example of submitting from the Factory devel project to Leap 15.3+: > user $ osc submitrequest -m 'Submitting Factory version of Salt for openSUSE Leap, see https://lists.opensuse.org/opensuse-factory/2015-07/msg00443.html ' systemsmanagement:saltstack/salt openSUSE:Backports:SLE-15-SP6 I've tried exactly this and got the following error: "The target project openSUSE:Backports:SLE-15-SP6 is not accepting requests because: Please submit to openSUSE:Backports:SLE-15-SP6:Update" Now this is not good either, since I'm not trying to submit an update but a new package. So what should I do instead to include a package in Leap?

2 1

New Tumbleweed snapshot 20240801 released!
by Dominique Leuenberger 02 Aug '24

02 Aug '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: btrfsprogs (6.9.2 -> 6.10) cryptsetup (2.7.2 -> 2.7.4) espeak-ng (1.51 -> 1.51.1) frei0r-plugins (2.3.1 -> 2.3.3) gdm gnome-control-center gtk4 (4.14.4 -> 4.15.4) ibus-libpinyin kirigami-addons6 (1.3.0 -> 1.4.0) mutter openSUSE-release (20240731 -> 20240801) openldap2 (2.6.7 -> 2.6.8) openldap2-contrib-src (2.6.7 -> 2.6.8) python-Jinja2 python-Twisted python-ptyprocess rng-tools samba (4.20.2+git.348.4fb6af61307 -> 4.20.2+git.350.4cfcde9cdb) selinux-policy (20240726 -> 20240731) thunar (4.18.10 -> 4.18.11) vim (9.1.0588 -> 9.1.0636) vte xfce4-screenshooter (1.11.0 -> 1.11.1) === Details === ==== btrfsprogs ==== Version update (6.9.2 -> 6.10) Subpackages: btrfsprogs-bash-completion btrfsprogs-udev-rules libbtrfs0 libbtrfsutil1 - update to 6.10 * inspect: * list-chunks: new command to print information about chunks (i.e. the physical chunks as stored on devices), sortable; requires root as it's using SEARCH_TREE ioctl * tree-stats: * new option -t to print only the given tree * add long options for size units * filesystem df: with increased verbosity print per-type information from sysfs * version: print a line with built-in features or options (+FEATURE1 -FEATURE2) * image: document option -s and its potential problems * fixes: * scrub status: user selected base for Rate values * receive: escape special characters in paths and xattrs * dump-tree: escape special characters in paths and xattrs * image: sanitizing filenames did not work properly in all cases * convert: fix displayed restored image path on rollback * tune change csum: do conversion in smaller batches * other: * build fixes for uClibc * build fix for python 3.13 * documentation updates ==== cryptsetup ==== Version update (2.7.2 -> 2.7.4) Subpackages: cryptsetup-doc cryptsetup-lang libcryptsetup12 - Update to 2.7.4: * Detect device busy failure for device-mapper table-referenced devices. * Fix shared activation for dm-verity devices. * Add --shared option for veritysetup open action. * Do not use exclusive flag for the allocated backing loop files. * Fixes for problems found by static analyzers and Valgrind. * Fixes to tests and CI scripts. - Use fdupes to link identical man pages. - Update to 2.7.3: * Do not allow formatting LUKS2 with Opal SED (hardware encryption) if the reported logical sector size for the block device and Opal encryption logical block differs. * Fixes to wiping LUKS2 headers after Opal locking area erase. * Mention the need for possible PSID revert before Opal format for some drives (man page). * Fix Bitlocker-compatible code to ignore newly seen metadata entries. * Fix interactive query retry if LUKS2 unbound keyslot is present. * Detect unsupported zoned devices for LUKS header devices. * Allow "capi" cipher format for benchmark command and fix parsing of plain IV in "capi" format. * Add support for HCTR2 encryption mode. * Source code now uses SPDX license identifiers instead of full license preambles. * Fix missing includes for cryptographic backend that could cause compilation errors for some systems. * Fix tests to work correctly in FIPS mode with recent OpenSSL 3.2. * Fix various (mostly false positive) issues detected by Coverity. - License: Replace legacy 'AND SUSE-GPL-2.0-with-openssl-exception' with 'WITH cryptsetup-OpenSSL-exception' (the official SPDX exception). ==== espeak-ng ==== Version update (1.51 -> 1.51.1) - Update patch fix-configure-1171.patch from upstream (just a minor change in revision numbers) - Add espeak-ng-CVE-2023-49990-49991-49992-49993-49994.patch: Backporting 58f1e0b6 from upstream, * Add crash test and vectors provided by @SEU-SSL * Disallow dummy/null voice load (that causes incorrect translator initialization) * Fix empty `phondata` file load (that causes unitialized memory access) * Limit max word length for RemoveEnding (causes buffer overflow) * Limit punctlist initialization from embedded commands (buffer overflow) * Fix unitialized pitch in wavegen (DBZ and indexing problems) * Properly zeroize stack variables before use in TranslateClause and SetWordStress (CVE-2023-49990, bsc#1218010; CVE-2023-49991, bsc#1218006 CVE-2023-49992, bsc#1218007; CVE-2023-49993, bsc#1218008 CVE-2023-49994, bsc#1218009) - Update to 1.51.1: - no changes ==== frei0r-plugins ==== Version update (2.3.1 -> 2.3.3) - Update to 2.3.3 * Add new Kaleid0sc0pe example video * New effect - gate weave * Gateweave, Filmgrain - change inline functions to static inline * Filmgrain - fix memory leak when blur = 0 ==== gdm ==== Subpackages: gdm-lang gdm-schema gdmflexiserver libgdm1 typelib-1_0-Gdm-1_0 - Rebase gdm-restart-session-when-X-server-restart.patch. ==== gnome-control-center ==== Subpackages: gnome-control-center-color gnome-control-center-goa gnome-control-center-lang gnome-control-center-user-faces gnome-control-center-users - Rebase gnome-control-center-info-never-use-gnome-software.patch and rename to gnome-control-center-system-never-use-gnome-software.patch - Rebase gnome-control-center-bring-back-firewall-zone.patch. ==== gtk4 ==== Version update (4.14.4 -> 4.15.4) Subpackages: gtk4-lang gtk4-schema gtk4-tools libgtk-4-1 typelib-1_0-Gtk-4_0 - Add missed optflags to CFLAGS. - Add -Wno-int-conversion to CFLAGS to enable compilation with GCC 14. - Update to version 4.15.4: + GtkPopover: Fix size allocation with wrapping labels + GtkColumnView: Check column visibility when measuring + CSS: - Fix fallout from recent changes - Make implementation of currentcolor inheritance match browsers + Gdk: - Introduce GdkColorState for encoding color space information. Currently, we support srgb, srgb-linear, rec2100-pq and rec2100-linear - Add color states to GdkTexture, as well as to the texture builder and downloader objects, and convert as necessary - Add GdkMemoryTextureBuilder - Attach color states when loading or saving textures - Add GdkCicpParams to create color state objects for cicp tuples - Drop GDK_DEBUG=vulkan-validate. Use VK_INSTEANCE_LAYERS=VK_LAYER_KHRONOS_validation instead + Gsk: - Improve caching of glyphs and textures - Remove the uber shader - Numerous bug fixes - Fix corner cases in offload handling - Implement occlusion culling for opaque content - Allow offloading (some) transformed textures - Take colorstate into account when compositing - Add GDK_DEBUG=linear to opt into linear compositing - Implement tiling for large textures - Stop using descriptors and go back to simpler texture management that should work better with older GL - Use correct shader clip mode for glyphs - Improve shadow rendering + Media: Attach color states to textures obtained from gstreamer + Wayland: - Allow offloading GL textures via dmabuf export - Suppot the xx-color-management-v4 protocol + Deprecations: GskGLShader and the render node + Tools: - Improve the rendernode tool extract command - Add an image tool that is about manipulating textures + Build: GTK now requires a C11 compiler + Updated translations. - Update to version 4.15.3: + Accessibility: - Only emit notifications when cursor positions change in GtkText. - Fix handling of help text properties. + CSS: Fix some crashes introduced in recent currentcolor changes. + DND: Avoid a critical. + Documentation: Fix many oversights and missing docs. - Changes from version 4.15.2: + GtkFileChooserWidget: - Plug some memory leaks. - Make Ctrl-Shift-N create a new folder. + GtkPopover: Handle resizing and position changes better. + CSS: - Support color(), oklab(). - Support color-mix() (https://www.w3.org/TR/css-color-5/) - Support relative colors (https://www.w3.org/TR/css-color-5/) - Support more colorspaces in color(). - Allow percentages for opacity. - Handle currentcolor more correctly. + Accessibility: Avoid markup when reading labels. + GSK: - Subset fonts when serializing node trees. - Make ngl export render_texture results as dmabufs. + Wayland: Use xdg-dialog protocol for attached dialogs. + Documentation: Widget shortcuts and actions are now described in the docs. + Debugging: Add GTK_DEBUG=css for warning about deprecated css syntax. + Tools: rendernode-tool: Add an extract command for data urls. + Deprecations: - CSS Color functions shade(), lighter(), darker(), alpha(), mix(). + Updated translations. - Update to version 4.15.1: + GtkGraphicsOffload: Don't crash without a child. + GtkSpinner: Don't animate when unmapped. + CSS: - Support the :root selector. - Support variables and custom properties. - Implement math functions. - Support modern syntax and calc in rgb() and hsl(). + Icontheme: - Make symbolic svg loading more efficient. - Handle color-free symbolics more efficiently. + Accessibility: - Make the gtk-demo sidebar search more accessible. - Stop emitting focus events. - Realize child contexts when necessary. + GDK: - Support XDG_ACTIVATION_TOKEN. - dmabuf: Be more defensive when importing unknown formats to GL. ... changelog too long, skipping 18 lines ... + Updated translations. ==== ibus-libpinyin ==== - Fix boo#1228652 * Use default python3 version * need python311-gobject-Gdk on Leap 15 and python3-gobject-Gdk on Tumbleweed ==== kirigami-addons6 ==== Version update (1.3.0 -> 1.4.0) Subpackages: kirigami-addons6-lang - Update to 1.4.0 https://carlschwan.eu/2024/07/23/kirigami-addons-1.4/ * New module to manage actions similar to that we can find in the QtWidgets world * The FormCard design was tweaked a bit more when using a dark theme * New component to the FormCard collection: FormTextAreaDelegate ==== mutter ==== Subpackages: mutter-lang - Rebase mutter-SLE-relax-some-constraints-on-CSD-windows.patch. ==== openSUSE-release ==== Version update (20240731 -> 20240801) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== openldap2 ==== Version update (2.6.7 -> 2.6.8) Subpackages: libldap-data libldap2 libldap2-32bit openldap2-client - Update to relese 2.6.8 * slapd: ability to log directly to a file bypassing syslog * back-ndb has been retired * back-sql and back-perl have been deprecated * lloadd enhancments: * Additional load balancing strategies * Additional options to improve coherence with certain controls and extended operations * Ability to log directly to a file bypassing syslog - Delete gcc14.patch, openldap2-fb9e6a81bbee.patch (merged) - Drop rcslapd symlink - Backported one hunk from upstream commit fb9e6a81bbee as openldap2-fb9e6a81bbee.patch to fix incompatible pointer type being passed to a function which is diagnosed as an error by GCC 14. ==== openldap2-contrib-src ==== Version update (2.6.7 -> 2.6.8) - Update to relese 2.6.8 * slapd: ability to log directly to a file bypassing syslog * back-ndb has been retired * back-sql and back-perl have been deprecated * lloadd enhancments: * Additional load balancing strategies * Additional options to improve coherence with certain controls and extended operations * Ability to log directly to a file bypassing syslog - Delete gcc14.patch, openldap2-fb9e6a81bbee.patch (merged) - Drop rcslapd symlink - Backported one hunk from upstream commit fb9e6a81bbee as openldap2-fb9e6a81bbee.patch to fix incompatible pointer type being passed to a function which is diagnosed as an error by GCC 14. ==== python-Jinja2 ==== - Cherry-pick patch from Fedora to fix FTBFS with Python 3.13 * fix-ftbfs-with-python313.patch - Add new build dependency python-trio to BuildRequires ==== python-Twisted ==== Subpackages: python311-Twisted python311-Twisted-tls - Add a couple of upstream patches to fix http process information disclosure (CVE-2024-41671, bsc#1228549) and XSS via html injection (CVE-2024-41810, bsc#1228552): * CVE-2024-41671.patch gh#twisted/twisted@4a930de12fb6 * CVE-2024-41810.patch gh#twisted/twisted@046a164f89a0 ==== python-ptyprocess ==== - Cherry-pick upstream patch to fix tests with Python 3.13. * remove-old-unittest-functions.patch ==== rng-tools ==== - Do not specify a fill-watermark in the service file to fix non- starting service since 6.17, use auto-detection (boo#1228245) ==== samba ==== Version update (4.20.2+git.348.4fb6af61307 -> 4.20.2+git.350.4cfcde9cdb) Subpackages: libsamba-policy0-python3 samba-ad-dc-libs samba-client samba-client-32bit samba-client-libs samba-client-libs-32bit samba-gpupdate samba-ldb-ldap samba-libs samba-libs-python3 samba-python3 samba-winbind samba-winbind-libs samba-winbind-libs-32bit - Update samba-tool package to require python3-Markdown also in the Heimdal ADDC build. ==== selinux-policy ==== Version update (20240726 -> 20240731) Subpackages: selinux-policy-targeted - Update to version 20240731: * Fix labels for bind/named (bsc#1228372) - Update to version 20240729: * Label /usr/libexec/netconfig/ppp/ip-up pppd_initrc_exec_t (bsc#1228385) * Allow pppd to manage sysnet directories (bsc#1228385) ==== thunar ==== Version update (4.18.10 -> 4.18.11) Subpackages: libthunarx-3-0 thunar-lang - Update to 4.18.11: * Use parent windows for undo/redo dialog (#1393) * Fix for misc_open_new_windows_in_split_view (#889) * Dont add directories to recent:/// (#1372) * build: clang: Fix -Wmissing-noreturn * build: clang: Fix -Wsingle-bit-bitfield-constant-conversion * Focus split view pane on DnD events (#1243) * Dont reload folder when "draw_frames" is set (#1337) * Allow submenu UCAs in toolbar (#780) * Fix shortcuts for ucas in subfolders (#1043) * Dont show 'open location' on recent icon(#1297) * Fix for image preview visibility (#1285) * Prevent focus stealing of file transfer dialog (#643) * Dont update "last-view" when searching (#1278) * Translation Updates ==== vim ==== Version update (9.1.0588 -> 9.1.0636) Subpackages: vim-data vim-data-common xxd - Update to 9.1.0636: * 9.1.0636: filetype: ziggy files are not recognized * 9.1.0635: filetype: SuperHTML template files not recognized * 9.1.0634: Ctrl-P not working by default * 9.1.0633: Compilation warnings with `-Wunused-parameter` * 9.1.0632: MS-Windows: Compiler Warnings Add support for Files-Included in syntax script tweak documentation style a bit * 9.1.0631: wrong completion list displayed with non-existing dir + fuzzy completion * 9.1.0630: MS-Windows: build fails with VIMDLL and mzscheme * 9.1.0629: Rename of pum hl_group is incomplete * 9.1.0628: MinGW: coverage files are not cleaned up * 9.1.0627: MinGW: build-error when COVERAGE is enabled * 9.1.0626: Vim9: need more tests with null objects include initial filetype plugin * 9.1.0625: tests: test output all translated messages for all translations * 9.1.0624: ex command modifiers not found * 9.1.0623: Mingw: errors when trying to delete non-existing files * 9.1.0622: MS-Windows: mingw-build can be optimized * 9.1.0621: MS-Windows: startup code can be improved * 9.1.0620: Vim9: segfauls with null objects * 9.1.0619: tests: test_popup fails * 9.1.0618: cannot mark deprecated attributes in completion menu * 9.1.0617: Cursor moves beyond first line of folded end of buffer * 9.1.0616: filetype: Make syntax highlighting off for MS Makefiles * 9.1.0615: Unnecessary STRLEN() in make_percent_swname() Add single-line comment syntax Add syntax test for comments Update maintainer info * 9.1.0614: tests: screendump tests fail due to recent syntax changes * 9.1.0613: tests: termdebug test may fail and leave file around Update base-syntax, improve :set highlighting Optionally highlight the :: token for method references * 9.1.0612: filetype: deno.lock file not recognized Use delete() for deleting directory escape filename before trying to delete it * 9.1.0611: ambiguous mappings not correctly resolved with modifyOtherKeys correctly extract file from zip browser * 9.1.0610: filetype: OpenGL Shading Language files are not detected Fix endless recursion in netrw#Explore() * 9.1.0609: outdated comments in Makefile update syntax script Fix flow mapping key detection Remove orphaned YAML syntax dump files * 9.1.0608: Coverity warns about a few potential issues Update syntax script and remove syn sync * 9.1.0607: termdebug: uses inconsistent style * 9.1.0606: tests: generated files may cause failure in test_codestyle * 9.1.0605: internal error with fuzzy completion * 9.1.0604: popup_filter during Press Enter prompt seems to hang translation: Update Serbian messages translation * 9.1.0603: filetype: use correct extension for Dracula * 9.1.0602: filetype: Prolog detection can be improved fix more inconsistencies in assert function docs * 9.1.0601: Wrong cursor position with 'breakindent' when wide char doesn't fit Update base-syntax, improve :map highlighting * 9.1.0600: Unused function and unused error constants * 9.1.0599: Termdebug: still get E1023 when specifying arguments correct wrong comment options fix typo "a xterm" -> "an xterm" * 9.1.0598: fuzzy completion does not work with default completion * 9.1.0597: KeyInputPre cannot get the (unmapped typed) key * 9.1.0596: filetype: devscripts config files are not recognized gdb file/folder check is now performed only in CWD. quote filename arguments using double quotes update syntax to SDC-standard 2.1 minor updates. Cleanup :match and :loadkeymap syntax test files Update base-syntax, match types in Vim9 variable declarations * 9.1.0595: make errors out with the po Makefile * 9.1.0594: Unnecessary redraw when setting 'winfixbuf' using wrong highlight for UTF-8 include simple syntax plugin * 9.1.0593: filetype: Asymptote files are not recognized add recommended indent options to ftplugin add recommended indent options to ftplugin add recommended indent options to ftplugin * 9.1.0592: filetype: Mediawiki files are not recognized * 9.1.0591: filetype: *.wl files are not recognized * 9.1.0590: Vim9: crash when accessing getregionpos() return value 'cpoptions': Include "z" in the documented default * 9.1.0589: vi: d{motion} and cw work differently than expected update included colorschemes grammar fixes in options.txt - Add "Keywords" to gvim.desktop to make searching for gvim easier ==== vte ==== Subpackages: libvte-2_91-0 typelib-1_0-Vte-2_91 vte-lang - Only apply vte-revert-back-to-c++17.patch for SLE <= 15. ==== xfce4-screenshooter ==== Version update (1.11.0 -> 1.11.1) Subpackages: xfce4-screenshooter-lang xfce4-screenshooter-plugin - Update to 1.11.1 * Drop unnecessary libxml dependency * Translation Updates

1 0

Tumbleweed - Review of the week 2024/31
by Dominique Leuenberger 02 Aug '24

02 Aug '24

Dear Tumbleweed users and hackers, As it happens every now, there are weeks when we build more snapshots than we publish. That’s exactly what happened during this week. We held back two snapshots – one due to kernel 6.10 which behaved very strange on QXL graphics, and the 2nd one due to sstemd 256 vs kiwi fights, where initrd is now extra protected and made some kiwi features misbehave, incl. self-install on MicroOS. So these were at least some things openQA could protect our users. Unfortunately, some issues with systemd and Aeon have remained unnoticed; see https://bugzilla.opensuse.org/show_bug.cgi?id=1228659) Besides all this, we have released 4 snapshots during this week (0726, 0730, 0731, and 0801), containing these updates: * Qemu 9.0.2 * bind 9.20.0 * AppArmor 4.0.2 * cURL 8.9.0 * Linux kernel 6.10.2 * 389-ds 3.1.1 * Mozilla Firefox 128.0.3 * git 2.46.0 * sysuser-tools 3.3 * cryptsetup 2.7.4 The staging areas are currently filled with these packages, many of them almost ready to be shipped: * Mesa 24.1.5 * GStreamer 1.24.6 * GCC 14.2.0 * cURL 8.9.1: breaks test suites of libzypp and python-tornado6 * glibc 2.40: The only build failure left is samba * Rust 1.80: virtiofsd is the one holding up here * nftables 1.1.0: openQA is far from happy; nftables’ python bindings seem not to work * go 1.22 as default: only transactional-update-notifier seems to be blocking * Switch the default ffmpeg version from 6 to 7: mostly xine-lib and qt*-webengine failing; forcibly using older versions is still possible, as many packages are explicitly still on ffmpeg-4 * dbus-broker: some networking issue after upgrades left to work out * GCC 14: phase 2: use gcc14 as the default compiler – lots of help needed: https://build.opensuse.org/project/show/openSUSE:Factory:Staging:Gcc7 Cheers, Dominique

1 0

mkosi-initrd: initial enablement for Tumbleweed
by Antonio Feijoo 02 Aug '24

02 Aug '24

Hi! For those of you who want to experiment with an alternative initrd generator, I've prepared the initial enablement of mkosi-initrd for Tumbleweed. Why is it interesting and different from other initrd generators? Mainly, because it builds the initrd from distro packages instead of picking everything from your local host. Analysis and instructions: https://en.opensuse.org/Mkosi-initrd *A big warning here*: this is just a proof of concept, an incomplete initrd can break the system boot, so always keep a copy of a working image. Feedback is appreciated. Have fun! -- Antonio Álvarez Feijoo System Boot and Init SUSE

2 1

Re: How to package telegram-desktop with dependency of openh264?
by Xu Zhao 02 Aug '24

02 Aug '24

I can try with adding openSUSE-repos. Can I have a code pointer of how to enable it in obs build? Best, Xu -- Xu Zhao i(a)xuzhao.net On Thu, Aug 1, 2024, at 11:30 AM, Lubos Kocman wrote: > Hmm what about putting a dependency on openSUSE-repos which enables by default openh264 repo? But that would not ensure installation of the package I guess telegram could then suggests the installation of openh264 It sound a bit fragile to be honest. Any other ideas? > > Best regards > > Luboš Kocman > openSUSE Leap Release Manager > > > čt 1. 8. 2024 v 15:55 odesílatel Xu Zhao <i(a)xuzhao.net> napsal: >> Hello all, >> >> I am the maintainer of telegram-desktop package in OSS and I am seeking advice about how to update the package as its recent change is blocked by openSUSE's openh264 license issue. >> >> 2 weeks ago, tg_owt made a commit to use system-level openh264 instead of bundled version (https://github.com/desktop-app/tg_owt/commit/204f1abf4646a77b5c6903bd2cc850…) this will break the build of telegram-desktop on b.o.o obs because on opensuse openh264 is distributed separately at https://codecs.opensuse.org/openh264/openSUSE_Tumbleweed/x86_64/. >> >> I can think of the following options: >> 1. patch tg_owt to make openh264 an optional dependency instead of hard dependency, but this will probably be rejected by upsteam and we have to maintain our own patchset. >> 2. bundle openh264 library with tg_owt and maintain the previous behavior, but I am not sure if this will violate the rules of OBS >> 3. delete telegram-desktop package on b.o.o (https://build.opensuse.org/package/show/server:messaging/telegram-desktop) and ask users to use the flatpak version >> 4. if there is a plan to push openh264 into OSS factory, we can keep telegram-desktop and wait until openh264 is available in OSS factory repo. >> >> Please advice on which option we should take, or if you have other opinions. Your advice is much appreciated. >> >> Best, >> Xu Zhao >> >> -- >> Xu Zhao >> i(a)xuzhao.net

5 6

New Tumbleweed snapshot 20240731 released!
by Dominique Leuenberger 02 Aug '24

02 Aug '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: 389-ds (3.0.1~git39.e24615f -> 3.1.1~git0.aef1668) MozillaFirefox (128.0 -> 128.0.3) coreutils coreutils-systemd git (2.45.2 -> 2.46.0) libX11 (1.8.9 -> 1.8.10) libzypp (17.35.1 -> 17.35.6) openSUSE-release (20240730 -> 20240731) p11-kit perl-Bootloader (1.13 -> 1.14) python-cryptography (42.0.8 -> 43.0.0) python-pycairo (1.26.0 -> 1.26.1) python311 python311-core systemd-presets-branding-Aeon sysuser-tools (3.2 -> 3.3) === Details === ==== 389-ds ==== Version update (3.0.1~git39.e24615f -> 3.1.1~git0.aef1668) Subpackages: lib389 libsvrcore0 - Update to version 3.1.1~git0.aef1668: * Bump version to 3.1.1 * Issue 6256 - nsslapd-numlisteners limit is not enforced (#6257) * Issue 5327 - Fix test metadata * Security fix for CVE-2024-6237 * Security fix for CVE-2024-5953 * Security fix for CVE-2024-3657 * Security fix for CVE-2024-2199 * Issue 6256 - nsslapd-numlisteners limit is not enforced * Issue 6265 - lmdb - missing entries in range searches (#6266) * Issue 5853 - Update Cargo.lock * Bump openssl from 0.10.64 to 0.10.66 in /src * Issue 6245 - Revert __COVERITY__ ifndef (#6268) * Issue 6248 - fix fanalyzer warnings (#6253) * Issue 6238 - Fix test_audit_json_logging CI test regression (#6264) * Issue 6254 - Enabling replication for a sub suffix crashes browser (#6255) * Issue 6155 - ldap-agent fails to start because of permission error (#6179) * Issue 6238 - RFE - add option to write audit log in JSON format * Issue 6216 - CI test_fast_slow_import sometime fail (#6247) * Issue 6245 - covscan fixes (#6246) * Issue 6241 - Add support for CRYPT-YESCRYPT (#6242) * Issue 6229 - After an initial failure, subsequent online backups fail (#6230) * Issue 6236 - rpm: fix compatibility with RPM 4.20 * Issue 6227 - dsconf schema does not show inChain matching rule (#6228) * Issue 6233 - CI test wait_for_async_feature_test sometime fails (#6234) * Bump ws from 7.5.9 to 7.5.10 in /src/cockpit/389-console * Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes (#6225) * Issue 6222 - CI test acl/test_timeofday_keyword sometime fails (#6223) * Issue 6120 - /usr/lib64/dirsrv/plugins/libback-bdb.so has an invalid-looking DT_RPATH: /usr/lib/dirsrv * Issue 5772 - ONE LEVEL search fails to return sub-suffixes (#6219) * Issue 6183 - Slow ldif2db import on a newly created BDB backend (#6208) * Issue 6207 - Random crash in test_long_rdn CI test (#6215) * Bump braces from 3.0.2 to 3.0.3 in /src/cockpit/389-console * Issue 6191 - Node.js 16 actions are deprecated * Issue 6199 - unprotected search query during certificate based authentication (#6205) * Issue 6200 - Disable WebUI CI tests * Issue 6192 - Test failure: test_match_large_valueset * Issue 6181 - RFE - Allow system to manage uid/gid at startup * Issue 6188 - Add nsslapd-haproxy-trusted-ip to cn=schema (#6201) * Issue 6181 - RFE - Allow system to manage uid/gid at startup (#6182) * Issue 6170 - audit log buffering doesn't handle large updates * Issue 6193 - Test failure: test_tls_command_returns_error_text * Issue 6177 - Spec file cleanup * Issue 6189 - CI tests fail with `[Errno 2] No such file or directory: '/var/cache/dnf/metadata_lock.pid'` * Issue 6175 - Referential integrity plugin - in referint_thread_func does not handle null from ldap_utf8strtok (#6168) * Change default salt sizes generated in crypt_pwd (#6185) * Issue 6123 - Allow DNA plugin to reuse global config for bind method and connection protocol (#6124) * Issue 6159 - Add a test to check URP add and delete conflict (#6160) * Issue 6151 - Use %bcond macro for conditional builds in the spec file * Issue 6172 - RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) (#6173) * Bump version to 3.1.0 * fix issue6165 (#6167) ==== MozillaFirefox ==== Version update (128.0 -> 128.0.3) Subpackages: MozillaFirefox-translations-common - Firefox 128.0.3 Release * Fixed: Fixed an issue causing some sites to not load when connecting via HTTP/2. (bmo#1908161, bmo#1909666) * Fixed: Fixed collapsed table rows not appearing when expected in some situations. (bmo#1907789) * Fixed: Fixed the Windows on-screen keyboard potentially concealing the webpage when displayed. (bmo#1907766) - Firefox 128.0.2 Release * Fixed: Fixed an audio echo in video calls on macOS under certain conditions. (bmo#1908539) * Fixed: Fixed an issue where the Adguard extension popup was not displaying. (bmo#1906132) * Fixed: Fixed an issue causing some screen readers to fail to read when navigating by character in rich text editors. (Bug 1905021) * Fixed: Fixed visual glitches when dark mode is enabled in Windows ARM devices. (bmo#1897444) * Fixed: Fixed an issue causing NTLM authentication failure. (bmo#1908115) * Fixed: Fixed an issue where content displayed on mouseover was not captured in a screenshot. (bmo#1905468) * Fixed: Various stability fixes. - renamed firefox-3781e3117706.patch to mozilla-bmo1905018.patch to conform with patch structure and naming for the package ==== coreutils ==== Subpackages: coreutils-lang - Avoid empty scriptlets ==== coreutils-systemd ==== - Avoid empty scriptlets ==== git ==== Version update (2.45.2 -> 2.46.0) Subpackages: git-core git-email git-svn git-web perl-Git - update to 2.46.0 UI, Workflows & Features * The "--rfc" option of "git format-patch" learned to take an optional string value to be used in place of "RFC" to tweak the "[PATCH]" on the subject header. * The credential helper protocol, together with the HTTP layer, have been enhanced to support authentication schemes different from username & password pair, like Bearer and NTLM. * Command line completion script (in contrib/) learned to complete "git symbolic-ref" a bit better (you need to enable plumbing commands to be completed with GIT_COMPLETION_SHOW_ALL_COMMANDS). * When the user responds to a prompt given by "git add -p" with an unsupported command, list of available commands were given, which was too much if the user knew what they wanted to type but merely made a typo. Now the user gets a much shorter error message. * The color parsing code learned to handle 12-bit RGB colors, spelled as "#RGB" (in addition to "#RRGGBB" that is already supported). * The operation mode options (like "--get") the "git config" command uses have been deprecated and replaced with subcommands (like "git config get"). * "git tag" learned the "--trailer" option to futz with the trailers in the same way as "git commit" does. * A new global "--no-advice" option can be used to disable all advice messages, which is meant to be used only in scripts. * Updates to symbolic refs can now be made as a part of ref transaction. * The trailer API has been reshuffled a bit. * Terminology to call various ref-like things are getting straightened out. * The command line completion script (in contrib/) has been adjusted to the recent update to "git config" that adopted subcommand based UI. * The knobs to tweak how reftable files are written have been made available as configuration variables. * When "git push" notices that the commit at the tip of the ref on the other side it is about to overwrite does not exist locally, it used to first try fetching it if the local repository is a partial clone. The command has been taught not to do so and immediately fail instead. * The promisor.quiet configuration knob can be set to true to make lazy fetching from promisor remotes silent. * The inter/range-diff output has been moved to the end of the patch when format-patch adds it to a single patch, instead of writing it before the patch text, to be consistent with what is done for a cover letter for a multi-patch series. * A new command has been added to migrate a repository that uses the files backend for its ref storage to use the reftable backend, with limitations. * "git diff --exit-code --ext-diff" learned to take the exit status of the external diff driver into account when deciding the exit status of the overall "git diff" invocation when configured to do so. * "git update-ref --stdin" learned to handle transactional updates of symbolic-refs. * "git format-patch --interdiff" for multi-patch series learned to turn on cover letters automatically (unless told never to enable cover letter with "--no-cover-letter" and such). * The "--heads" option of "ls-remote" and "show-ref" has been been deprecated; "--branches" replaces "--heads". * For over a year, setting add.interactive.useBuiltin configuration variable did nothing but giving a "this does not do anything" warning. The warning has been removed. * The http transport can now be told to send request with authentication material without first getting a 401 response. * A handful of entries are added to the GitFAQ document. * "git var GIT_SHELL_PATH" should report the path to the shell used to spawn external commands, but it didn't do so on Windows, which has been corrected. Performance, Internal Implementation, Development Support etc. * Advertise "git contacts", a tool for newcomers to find people to ask review for their patches, a bit more in our developer documentation. * In addition to building the objects needed, try to link the objects that are used in fuzzer tests, to make sure at least they build without bitrot, in Linux CI runs. * Code to write out reftable has seen some optimization and simplification. * Tests to ensure interoperability between reftable written by jgit and our code have been added and enabled in CI. * The singleton index_state instance "the_index" has been eliminated by always instantiating "the_repository" and replacing references to "the_index" with references to its .index member. * Git-GUI has a new maintainer, Johannes Sixt. * The "test-tool" has been taught to run testsuite tests in parallel, bypassing the need to use the "prove" tool. * The "whitespace check" task that was enabled for GitHub Actions CI has been ported to GitLab CI. * The refs API lost functions that implicitly assumes to work on the primary ref_store by forcing the callers to pass a ref_store as an argument. * Code clean-up to reduce inter-function communication inside builtin/config.c done via the use of global variables. * The pack bitmap code saw some clean-up to prepare for a follow-up topic. * Preliminary code clean-up for "git send-email". * The default "creation-factor" used by "git format-patch" has been raised to make it more aggressively find matching commits. * Before discovering the repository details, We used to assume SHA-1 as the "default" hash function, which has been corrected. Hopefully this will smoke out codepaths that rely on such an unwarranted ... changelog too long, skipping 230 lines ... (merge 616e94ca24 tb/doc-max-tree-depth-fix later to maint). ==== libX11 ==== Version update (1.8.9 -> 1.8.10) Subpackages: libX11-6 libX11-data libX11-xcb1 - Update to 1.8.10; this release includes: * Re-fix XIM input sometimes jumbled (#205, #206, #207, #208, !246) * Fix various static analysis errors (!250) * Add compose sequences for Arabic hamza (!218), Ezh (!221), and hryvnia currency (!259) * Make colormap private interfaces thread safe (#215, !254) * Fix deadlock in XRebindKeysym() (!256) * Assorted memory handling cleanups (!251, !258) * Restore VAX support still in use by NetBSD (!257) ==== libzypp ==== Version update (17.35.1 -> 17.35.6) - Export CredentialManager for legacy YAST versions (bsc#1228420) - version 17.35.6 (35) - Export asSolvable for YAST (bsc#1228420) - Fix 4 typos in zypp.conf. - version 17.35.5 (35) - Fix typo in the geoip update pipeline (bsc#1228206) - Export RepoVariablesStringReplacer for yast2 (bsc#1228138) - version 17.35.4 (35) - Translation: updated .pot file. - Conflict with python zypp-plugin < 0.6.4 (bsc#1227793) Older zypp-plugins reject stomp headers including a '-'. Like the 'content-length' header we may send. - Fix int overflow in Provider (fixes #559) This patch fixes an issue in safe_strtonum which caused timestamps to overflow in the Provider message parser. - Fix error reporting on repoindex.xml parse error (bsc#1227625) - version 17.35.3 (35) - Keep UrlResolverPlugin API public (fixes #560) - Blacklist /snap executables for 'zypper ps' (bsc#1226014) - Fix handling of buddies when applying locks (bsc#1225267) Buddy pairs (like -release package and product) internally share the same status object. When applying locks from query results the locked bit must be set if either item is locked. - version 17.35.2 (35) ==== openSUSE-release ==== Version update (20240730 -> 20240731) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== p11-kit ==== Subpackages: libp11-kit0 libp11-kit0-32bit p11-kit-tools - Added a backport of an upstream commit in p11-kit-d938f4a8a3a2.patch to avoid passing an incompatible pointer type to a function which is an error by default in GCC 14. ==== perl-Bootloader ==== Version update (1.13 -> 1.14) - merge gh#openSUSE/perl-bootloader#169 - support grub2-bls (bsc#1226676, bsc#1208135) - better config file reading - add check whether bootloader is supported - unit test output changed, adjust reference data - adjust GRUB_ENABLE_BLSCFG when setting grub2-bls - add config, install, add-kernel, remove-kernel for grub2-bls - support --default option for grub2* - unify cmdline parsing code and move to library - add missing options for bls conforming loaders - updated tests - unify test case names - adjust documentation - 1.14 ==== python-cryptography ==== Version update (42.0.8 -> 43.0.0) - update to 43.0.0: * BACKWARDS INCOMPATIBLE: Support for OpenSSL less than 1.1.1e has been removed. Users on older version of OpenSSL will need to upgrade. * BACKWARDS INCOMPATIBLE: Dropped support for LibreSSL < 3.8. * Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.3.1. * Updated the minimum supported Rust version (MSRV) to 1.65.0, from 1.63.0. * :func:`~cryptography.hazmat.primitives.asymmetric.rsa.generat e_private_key` now enforces a minimum RSA key size of 1024-bit. Note that 1024-bit is still considered insecure, users should generally use a key size of 2048-bits. * :func:`~cryptography.hazmat.primitives.serialization.pkcs7.se rialize_certificates` now emits ASN.1 that more closely follows the recommendations in RFC 2315. * Added new :doc:`/hazmat/decrepit/index` module which contains outdated and insecure cryptographic primitives. :class:`~cryp tography.hazmat.primitives.ciphers.algorithms.CAST5`, :class: `~cryptography.hazmat.primitives.ciphers.algorithms.SEED`, :c lass:`~cryptography.hazmat.primitives.ciphers.algorithms.IDEA `, and :class:`~cryptography.hazmat.primitives.ciphers.algori thms.Blowfish`, which were deprecated in 37.0.0, have been added to this module. They will be removed from the cipher module in 45.0.0. * Moved :class:`~cryptography.hazmat.primitives.ciphers.algorit hms.TripleDES` and :class:`~cryptography.hazmat.primitives.ci phers.algorithms.ARC4` into :doc:`/hazmat/decrepit/index` and deprecated them in the cipher module. They will be removed from the cipher module in 48.0.0. * Added support for deterministic :class:`~cryptography.hazmat.primitives.asymmetric.ec.ECDSA` (RFC 6979) * Added support for client certificate verification to the :mod:`X.509 path validation <cryptography.x509.verification>` APIs in the form of :class:`~cryptography.x509.verification.ClientVerifier`, :class:`~cryptography.x509.verification.VerifiedClient`, and PolicyBuilder :meth:`~cryptography.x509.verification.PolicyBu ilder.build_client_verifier`. * Added Certificate :attr:`~cryptography.x509.Certificate.publi c_key_algorithm_oid` and Certificate Signing Request :attr:`~ cryptography.x509.CertificateSigningRequest.public_key_algori thm_oid` to determine the :class:`~cryptography.hazmat._oid.PublicKeyAlgorithmOID` Object Identifier of the public key found inside the certificate. * Added :attr:`~cryptography.x509.InvalidityDate.invalidity_dat e_utc`, a timezone-aware alternative to the naÃ¯ve datetime attribute :attr:`~cryptography.x509.InvalidityDate.invalidity_date`. * Added support for parsing empty DN string in :meth:`~cryptography.x509.Name.from_rfc4514_string`. * Added the following properties that return timezone-aware datetime objects: :meth:`~cryptography.x509.ocsp.OCSPResponse.produced_at_utc`, :meth:`~cryptography.x509.ocsp.OCSPResponse.revocation_time_u tc`, :meth:`~cryptography.x509.ocsp.OCSPResponse.this_update_utc`, :meth:`~cryptography.x509.ocsp.OCSPResponse.next_update_utc`, :meth:`~cryptography.x509.ocsp.OCSPSingleResponse.revocation_ time_utc`, :meth:`~cryptography.x509.ocsp.OCSPSingleResponse. this_update_utc`, :meth:`~cryptography.x509.ocsp.OCSPSingleRe sponse.next_update_utc`, These are timezone-aware variants of existing properties that return naÃ¯ve datetime objects. * Added :func:`~cryptography.hazmat.primitives.asymmetric.rsa.r sa_recover_private_exponent` * Added :meth:`~cryptography.hazmat.primitives.ciphers.CipherCo ntext.reset_nonce` for altering the nonce of a cipher context without initializing a new instance. See the docs for additional restrictions. * :class:`~cryptography.x509.NameAttribute` now raises an exception when attempting to create a common name whose length is shorter or longer than RFC 5280 permits. * Added basic support for PKCS7 encryption (including SMIME) via :class:`~cryptography.hazmat.primitives.serialization.pkc s7.PKCS7EnvelopeBuilder`. - add use-offline-build.patch ==== python-pycairo ==== Version update (1.26.0 -> 1.26.1) - Update to 1.26.1 * Fix Surface.set_mime_data() with Python 3.13 :pr:`366` This also fixes the test suite with Python 3.13b2. * Update vendored Windows wheel dependencies :pr:`370` ==== python311 ==== Subpackages: python311-curses python311-dbm python311-x86-64-v3 - Remove %suse_update_desktop_file macro as it is not useful any more. - Adding bso1227999-reproducible-builds.patch fixing bsc#1227999 adding reproducibility patches from gh#python/cpython!121872 and gh#python/cpython!121883. - Stop using %%defattr, it seems to be breaking proper executable attributes on /usr/bin/ scripts (bsc#1227378). ==== python311-core ==== Subpackages: libpython3_11-1_0 libpython3_11-1_0-x86-64-v3 python311-base python311-base-x86-64-v3 - Remove %suse_update_desktop_file macro as it is not useful any more. - Adding bso1227999-reproducible-builds.patch fixing bsc#1227999 adding reproducibility patches from gh#python/cpython!121872 and gh#python/cpython!121883. - Stop using %%defattr, it seems to be breaking proper executable attributes on /usr/bin/ scripts (bsc#1227378). ==== systemd-presets-branding-Aeon ==== - Enable aeon-check.service (boo#1228416) ==== sysuser-tools ==== Version update (3.2 -> 3.3) - Allow setting of UID:GID for as defined in sysusers.d

1 0

Open SRs without reaction (Virtualization:containers, network:utilities, server:http, server:monitoring)
by Johannes Kastl 01 Aug '24

01 Aug '24

Hi all, could one of the maintainers of the respective projects please have a look at those SRs, they are open for some time without any reaction... regclient => Virtualization:containers https://build.opensuse.org/request/show/1187279 hurl => server:http https://build.opensuse.org/request/show/1187437 termscp => network:utilities https://build.opensuse.org/request/show/1188996 golang-github-prometheus-node_exporter => server:monitoring https://build.opensuse.org/request/show/1187393 Thanks in advance, Johannes

1 1

openSUSE Release Engineering meeting 31.07.2024
by Lubos Kocman 01 Aug '24

01 Aug '24

How to join the meeting? https://calendar.opensuse.org/teams/release/events/opensuse-release-enginee… All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting ## Attendees: DimStar, bittin, rbrown, Sarah, ddemaio, lkocman, DocB,Adrian, bmwiedemann, wengel NOTICE! the meeting url is https://meet.opensuse.org/meeting ## Leap Set up new test suite for gnome-agama (was gnome-live). Agama installs test passes. https://openqa.opensuse.org/admin/test_suites https://github.com/os-autoinst/os-autoinst-distri-opensuse/pull/19854 Thanks to Dee we're now using yaml based scheduling rather than main_common.pm driven if/else approach https://github.com/os-autoinst/os-autoinst-distri-opensuse/pull/19848 WIP agama test suite with needles https://github.com/os-autoinst/os-autoinst-distri-opensuse/pull/19843 (official test suite will be done in pupeteer https://progress.opensuse.org/issues/163919) Photo wallpaper / competition received a new submission many thanks! https://github.com/openSUSE/wallpapers/issues/18 Brno, Czechia "coworking office" kickoff this week. Leap Micro 6.0 sigkey update, Main repo was already auto=republished (we updated ~6 packages + repodata) Appliance TBD ## openSUSE Tumbleweed (DimStar) openSUSE:Factory build fail stats: 19 failed 4 unresolvable (last week 18 failed, 26 unresolvable) https://tinyurl.com/ysy4nnnz 434 requests accepted in the last week Most relevant updates: Kernel 6.10 systemd 256.4 cURL 8.9.0 cmake 3.30.1 meson 1.5.0 & 1.5.1 Soon: libzypp 17.35.6; yast failures have been resolved (symbol visibility) Mozilla Firefox 128.0.3 Rust 1.80 git 2.46.0 Blocked: glibc 2.40: FTBFS chrony and samba nftables: ERROR: 'python-nftables' failed: internal:0:0-0 python312 (FTBFS: python-xmlschema, python-Twisted:test) ### longer-lasting topics Switch default LSM from AppArmor to SELinux, see https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… GCC 14: second phase ongoing, use gcc14 as the default compiler (Staging:Gcc7): 14 failed, 9 unresolvable go1.22 as default go version, blocked on i586 with packages which export CGO_ENABLED=0 and go build -buildmode pie https://github.com/golang/go/issues/64875 traking at https://bugzilla.opensuse.org/show_bug.cgi?id=1221095 - only waiting for transactional-update-notifier fixed on i586 dbus-broker as default dbus session manager, now everything builds, some openQA checks failing. ## Richard (Aeon+botmaster) Aeon RC3 is OUT with full disk encryption (including TPM unlock*) by default https://www.reddit.com/r/AeonDesktop/comments/1edi3tr/aeon_rc3_released/ *if supported by the available hardware One slight screw up results in current RC3 installations getting a TPM configuration that is both weaker and more fragile than expected The long promised aeon-check tool has therefore been put together to find and detect this issue on existing machines - users shouldn't have to do anything. Just waiting on Checkin to Factory Meanwhile testing fixes to tik to prevent the issue occuring on fresh installations ## Max (AWAY TODAY) ## Guillaume - Arm (AWAY TODAY) ## Sarah - s390x Tumbleweed: * can not setup sysfs for hvc: * kernel bug by IBM: https://bugzilla.suse.com/show_bug.cgi?id=1228425 -> kernel patch delivered 1 hour after mirror (how to test patch for installation) Sarah to talk to people at SUSE ## Doug * openSUSE.Asia Summit * CfP is open until August 4 * 44 Submission (+7 from last week) * Logo selected & winner informed https://groups.google.com/g/opensuseasia-summit/c/wkSke0a6His * Monthly TW blog published * Aeon RC3 * Article released * Gaining media coverage * TSP * New submissions added. * More marketing materials ordered * FrOSCon * Marketing material provided for booth * GSoC * Finals will be August 26 - Sept. 2 (For most) * AI topics (static) ## Dirk Not available ## Wolfgang (Package Hub), Scott Bahling no news ## Maintenance team (Marcus, Robert) (AWAY TODAY) Struggle with 15 SP6 openQA side. Robert and Marcus will talk to Richard Fan. Chromium updates are flowing in. * one snapper issue waiting for kernel fix. We need a help from QE. ## Adrian - OBS * We're still having reports with missing data after yesterdays storage situation. * Datacenters are back to normal again ## Bernhard - Slowroll next version bump coming soon (in 9d). Got reports about bugs, but not enough time to test/debug/fix. ## Bernhard - reproducible builds made major progress - see https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… ## Open Floor bmwiedemann: testing reproducibility of Factory submissions : do 3 builds (2 extra) in adi and :Staging projects to be able to compare results ; since this is only for x86_64 and not published, it should be fine with OBS-resources.

1 0