September 2024 - openSUSE Factory - openSUSE Mailing Lists

New Tumbleweed snapshot 20240905 released!
by Dominique Leuenberger 06 Sep '24

06 Sep '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: SDL2 (2.30.6 -> 2.30.7) gnome-autoar (0.4.4 -> 0.4.5) gnutls (3.8.6 -> 3.8.7) kernel-firmware (20240826 -> 20240903) kwalletmanager libjxl libjxl-gtk libvirt (10.6.0 -> 10.7.0) libwebp (1.3.2 -> 1.4.0) mozilla-nss (3.102.1 -> 3.103) openssl-3 osinfo-db power-profiles-daemon (0.21 -> 0.22) procps python-libvirt-python (10.6.0 -> 10.7.0) python-olefile (0.46 -> 0.47) ruby3.3 (3.3.4 -> 3.3.5) salt selinux-policy supermin (5.3.4 -> 5.3.5) xen xfsprogs (6.9.0 -> 6.10.1) xxhash zxing-cpp (2.1.0 -> 2.2.1) === Details === ==== SDL2 ==== Version update (2.30.6 -> 2.30.7) - Update to release 2.30.7 * Added support for the Retro-bit Controller in PS3 mode * Fixed the cursor becoming visible when using relative mode under XWayland * Fixed Direct Rendering Manager initialization failure on some Linux systems * Fixed a crash when the current mouse capture window is destroyed ==== gnome-autoar ==== Version update (0.4.4 -> 0.4.5) Subpackages: libgnome-autoar-0-0 libgnome-autoar-gtk-0-0 - Update to version 0.4.5: + mime-types: Add tar variant of bzip2 + extractor: Fix source string leak ==== gnutls ==== Version update (3.8.6 -> 3.8.7) Subpackages: libgnutls-dane0 libgnutls30 libgnutls30-32bit - Update to 3.8.7: * libgnutls: New configure option to compile out DSA support The --disable-dsa configure option has been added to completely disable DSA algorithm support. * libgnutls: Experimental support for X25519Kyber768Draft00 key exchange in TLS. For testing purposes, the hybrid post-quantum key exchange defined in draft-tls-westerbaan-xyber768d00 has been implemented using liboqs. Since the algorithm is still not finalized, the support of this key exchange is disabled by default and can be enabled with the --with-liboqs configure option. * Rebase patches: - gnutls-FIPS-140-3-references.patch - gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch ==== kernel-firmware ==== Version update (20240826 -> 20240903) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-ath12k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update to version 20240903 (git commit 96af55bd3d0b): * amdgpu: Revert sienna cichlid dmcub firmware update (bsc#1230007) * iwlwifi: add Bz FW for core89-58 release * rtl_nic: add firmware rtl8126a-3 * linux-firmware: update firmware for MT7921 WiFi device * linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - Update to version 20240830 (git commit d6c600d46981): * amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 * qcom: vpu: restore compatibility with kernels before 6.6 ==== kwalletmanager ==== Subpackages: kwalletmanager-lang - Add upstream fix (kde#492138): * 0001-Fix-service-file-name.patch ==== libjxl ==== Subpackages: libjxl0_10 libjxl0_10-x86-64-v3 - Update libjxl.spec: Add compiler condition to fix SLE-15-SP7 ppc64le build env. (bsc#1229831) ==== libjxl-gtk ==== Subpackages: gdk-pixbuf-loader-jxl gimp-plugin-jxl - Update libjxl.spec: Add compiler condition to fix SLE-15-SP7 ppc64le build env. (bsc#1229831) ==== libvirt ==== Version update (10.6.0 -> 10.7.0) Subpackages: libvirt-client libvirt-daemon-common libvirt-daemon-config-network libvirt-daemon-driver-libxl libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-lock libvirt-daemon-log libvirt-daemon-plugin-lockd libvirt-daemon-qemu libvirt-daemon-xen libvirt-libs - Update to libvirt 10.7.0 - CVE-2024-8235, bsc#1230024 - Unconditionally disable building the interface driver - Remove SysV rc* compatibility symlinks - jsc#PED-8909 - Many incremental improvements and bug fixes, see https://libvirt.org/news.html#v10-7-0-2024-09-02 ==== libwebp ==== Version update (1.3.2 -> 1.4.0) Subpackages: libsharpyuv0 libwebp7 libwebpdemux2 libwebpmux3 - Update to 1.4.0 & fix libwebp.changes header from previous commit: * further security related hardening in libwebp & examples * some minor optimizations in the lossless encoder * added WEBP_NODISCARD to report unused result warnings; enable with - DWEBP_ENABLE_NODISCARD=1 * improvements and corrections in webp-container-spec.txt and webp-lossless-bitstream-spec.txt (#611) * miscellaneous warning, bug & build fixes - Remove 0001-Fix-invalid-incremental-decoding-check.patch ==== mozilla-nss ==== Version update (3.102.1 -> 3.103) Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs mozilla-nss-sysinit mozilla-nss-tools - update to NSS 3.103 * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList. * bmo#1899542: Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH, * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch. * bmo#1903783: Adjust libFuzzer size limits * bmo#1899542: Add fuzzing support for SSL_SetCertificateCompressionAlgorithm, SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk * bmo#1899542: Add fuzzing support for SSL_ENABLE_GREASE and SSL_ENABLE_CH_EXTENSION_PERMUTATION - Add nss-reproducible-builds.patch to make the rpms reproducible, by using a hardcoded, static key to generate the checksums (*.chk-files) - Updated nss-fips-approved-crypto-non-ec.patch to enforce approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113). ==== openssl-3 ==== Subpackages: libopenssl3 libopenssl3-32bit libopenssl3-x86-64-v3 - Security fix: [bsc#1229465, CVE-2024-6119] * possible denial of service in X.509 name checks * openssl-CVE-2024-6119.patch ==== osinfo-db ==== - Add support for openSUSE Leap 15.7 (jsc#PED-8910) add-opensuse-leap-15.7-support.patch - Add support for SLE-15-SP7 (jsc#PED-8910) add-sle15sp7-support.patch ==== power-profiles-daemon ==== Version update (0.21 -> 0.22) Subpackages: powerprofilesctl-bash-completion powerprofilesctl-zsh-completion - Update to version 0.22: * power-profiles-daemon is now battery-level aware: some drivers use this value for better optimizations * AMD p-state improvements: + supports core performance boost when not in power-saver mode + uses minimum frequency to lowest non-linear frequency + more impervious to faulty firmware and kernel bugs * support for changing DPM clocks on amdgpu: explicitly set the DPM clocks down to "low" when in power-saver mode * powerprofilesctl can disable logind and upower integration * fix handling of turbo_pct, now assumed as not present by default * power-profiles-daemon.service further lockdown restrictions * start power-profiles-daemon.service after multi-user.target AND display-manager.target to avoid conflicts with module loading ==== procps ==== Subpackages: libproc2-0 procps-lang - procps-ng-4.0.4-idletime-no-tty.patch: don't print idle time without tty - procps-ng-4.0.4-w-array-bounds.patch: fix array bounds violation ==== python-libvirt-python ==== Version update (10.6.0 -> 10.7.0) - Update to 10.7.0 - Add all new APIs and constants in libvirt 10.7.0 - jsc#PED-8909 ==== python-olefile ==== Version update (0.46 -> 0.47) - Update to 0.47 * Now distributed as wheel package * Added VT_VECTOR support for properties * Added get_userdefined_properties * Fixed bugs in isOleFile and write_sect * Improved file closure - Drop README.html from %doc section - Drop README.rst from %doc section - Drop support for older Python versions - Limit Python files matched in %files section - Remove obsolete sed invocation to fix line endings - Switch build system from setuptools to pyproject.toml * Add python-pip and python-wheel to BuildRequires * Replace %python_build with %pyproject_wheel * Replace %python_install with %pyproject_install ==== ruby3.3 ==== Version update (3.3.4 -> 3.3.5) Subpackages: libruby3_3-3_3 - Added 7939.diff Cleanup binstub lock files https://github.com/rubygems/rubygems/issues/7997 https://github.com/rubygems/rubygems/pull/7939 - Update to 3.3.5 This is a routine update that includes minor bug fixes. We recommend upgrading your Ruby version at your earliest convenience. https://github.com/ruby/ruby/releases/tag/v3_3_5 ==== salt ==== Subpackages: python3-salt salt-master salt-minion salt-transactional-update - Set contextvars as a build requirement for package - Increase warn_until_date date for code we still support - The test_debian test now uses port 80 for ubuntu keyserver - Fix too frequent systemd service restart in test_system test - Added: * fix-test_debian-to-work-in-our-infrastructure-676.patch * fix-test_system-flaky-setup_teardown-fn.patch * fix-deprecated-code-677.patch ==== selinux-policy ==== Subpackages: selinux-policy-targeted - Fix macros.selinux-policy (bsc#1229132) - %selinux_modules_install and %selinux_modules_uninstall will now only execute load_policy if $TRANSACTIONAL_UPDATE is not set (aka only if they are not in a transactional system) - $TRANSACTIONAL_UPDATE is set here: https://github.com/openSUSE/transactional-update/blob/bd524d3ddfcd9aeebb7b9… ==== supermin ==== Version update (5.3.4 -> 5.3.5) - Update to version 5.3.5 (jsc#PED-8910) * Fix qemu-kvm example command ==== xen ==== Subpackages: xen-libs xen-tools xen-tools-domU - Fix build on aarch64 with gcc14 (bsc#1225953) 66d02b69-Arm64-adjust-irq_to_desc-to-fix-build-with-gcc14.patch ==== xfsprogs ==== Version update (6.9.0 -> 6.10.1) Subpackages: libhandle1 - update to 6.10.1 - fix C++ compilation errors in xfs_fs.h - ------------------------------------------------------------------ - update to 6.10.0 - debian: enable xfs_scrub_all systemd timer services by default - mkfs: set autofsck filesystem property - xfs_scrub: use the autofsck fsproperty to select mode - xfs_scrub: allow sysadmin to control background scrubs - xfs_property: add a new tool to administer fs properties - xfs_db: add a command to list xattrs - xfs_db: improve getting and setting extended attributes - xfs_io: edit filesystem properties - xfs_scrub: defer phase5 file scans if dirloop fails - xfs_repair: wipe ondisk parent pointers when there are none - xfs_scrub: detect and repair directory tree corruptions - xfs_repair: update ondisk parent pointer records - xfs_spaceman: report directory tree corruption in the health information - xfsprogs: support vectored scrub - man: document vectored scrub mode - man2: update ioctl_xfs_scrub_metadata.2 for parent pointers - mkfs: enable formatting with parent pointers - mkfs: Add parent pointers during protofile creation - xfs_repair: check parent pointers - xfs_db: compute hashes of parent pointers - xfs_db: add link and unlink expert commands - xfs_repair: build a parent pointer index - xfs_db: add a parents command to list the parents of a file - xfs_db: obfuscate dirent and parent pointer names consistently - xfs_db: report parent pointers embedded in xattrs - xfs_db: report parent bit on xattrs - xfs_db: report parent pointers in version command - xfs_scrub: use parent pointers to report lost file data - xfs_scrub: use parent pointers when possible to report file operations - xfs_logprint: decode parent pointers in ATTRI items fully - xfs_io: Add i, n and f flags to parent command - xfs_io: adapt parent command to new parent pointer ioctls - libfrog: report parent pointers to userspace - libfrog: add parent pointer support code - man: document the XFS_IOC_GETPARENTS ioctl - xfs_logprint: dump new attr log item fields - xfs_scrub_all: failure reporting for the xfs_scrub_all job - xfs_repair: check free space requirements before allowing upgrades - xfs_scrub_all: convert systemctl calls to dbus - xfs_scrub_all: trigger automatic media scans once per month - xfs_scrub: add an optimization-only mode - xfs_scrub_all: add CLI option for easier debugging - xfs_scrub_all: enable periodic file data scrubs automatically - xfs_scrub: automatic downgrades to dry-run mode in service mode - xfs_scrub_all: support metadata+media scans of all filesystems - xfs_scrub_all: fail fast on masked units - xfs_scrub_all: remove journalctl background process - xfs_scrub_all: only use the xfs_scrub@ systemd services in service mode - xfs_scrub: tune fstrim minlen parameter based on free space histograms - xfs_scrub: improve responsiveness while trimming the filesystem - xfs_scrub: tighten up the security on the background systemd service - xfs_scrub: don't call FITRIM after runtime errors - xfs_scrub: use dynamic users when running as a systemd service - xfs_scrub: report FITRIM errors properly - xfs_scrub.service: reduce background CPU usage to less than one core if possible - xfs_scrub: don't close stdout when closing the progress bar - xfs_scrub: fix the work estimation for phase 8 - libfrog: print cdf of free space buckets - libfrog: print wider columns for free space histogram - xfs_scrub: ignore phase 8 if the user disabled fstrim - xfs_scrub: move FITRIM to phase 8 - xfs_scrub: improve thread scheduling repair items during phase 4 - xfs_scrub: avoid potential UAF after freeing a duplicate name entry - xfs_scrub: enable users to bump information messages to warnings - xfs_scrub: retry incomplete repairs - xfs_scrub: warn about difficult repairs to rt and quota metadata - xfs_scrub: any inconsistency in metadata should trigger difficulty warnings - mkfs: add a formatting option for exchange-range - xfs_repair: add exchange-range to file systems - xfs_scrub: fix missing scrub coverage for broken inodes - xfs_scrub: log when a repair was unnecessary - libfrog: advertise exchange-range support - xfs_io: create exchangerange command to test file range exchange ioctl - xfs_fsr: skip the xattr/forkoff levering with the newer swapext implementations - xfs_fsr: convert to bulkstat v5 ioctls - xfs_logprint: support dumping exchmaps log items - xfs_db: advertise exchange-range in the version command - libfrog: add support for exchange range ioctl family - libhandle: add support for bulkstat v5 - man: document XFS_FSOP_GEOM_FLAGS_EXCHRANGE - man: document the exchange-range ioctl - xfs_repair: don't crash on -vv - xfsprogs: Remove support for split-/usr installs - libxfs: kernel sync - ------------------------------------------------------------------ ==== xxhash ==== - Add inline.patch to resolve FTBFS on gcc-14 + -Og. ==== zxing-cpp ==== Version update (2.1.0 -> 2.2.1) - Update to 2.2.1. Changes: * Fix ABI breakage from 2.2.0. - Changes from 2.2.0: * Rename DecodeHints to ReaderOptions. The old name is still available for backward API compatibility but deprecated. Since the C-API and the Qt wrapper code are not officially part of the library, they changed without backward compatibility. * WASM: bytes in ReadResult. * DataMatrix: use charset for encoding. * QRCode: Support QR Code Model1. * rMQR Code: Support Rectangular Micro QR Code. - Refresh patch: * cmake.patch

1 0

dbus-broker
by Joe Salmeri 06 Sep '24

06 Sep '24

3 3

New Slowroll update 20240906T0313 released!
by bernhardout＠lsmod.de 06 Sep '24

06 Sep '24

Please note that this mail was generated by a script. A collection of maintenance updates was released for Slowroll. Released 37 packages: * 389-ds * ImageMagick * OpenImageIO * ffmpeg-5 * gdb * git * gnustep-make * haproxy * htmldoc * inarpd * libaom * libdrm * libpcap * ncurses * povray * python-Django4 * python-Paste * python-Werkzeug * python-azure-cognitiveservices-knowledge-qnamaker * python-azure-cognitiveservices-language-luis * python-azure-mgmt-web * python-isort * python-jupyterlab * python-logreduce * python-mysql-to-sqlite3 * python-netCDF4 * python-pandas * python-pywinrm * python-requests * python-resolvelib * roundcubemail * runc * salt * snapper * text-engine * xf86-video-sis * xf86-video-vesa

1 0

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 05 Sep '24

05 Sep '24

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have had problems for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - python-hypothesis: Fails to build Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

1 0

pam_wtmpdb.so and pam_lastlog2.so not installed
by Joe Salmeri 05 Sep '24

05 Sep '24

I've been getting these 2 warnings for a while with TW updates: WARNING: module /lib/security/pam_wtmpdb.so is not installed. WARNING: module /lib/security/pam_lastlog2.so is not installed. The wtmpdb and libwtmpdb0 packages are installed S | Name | Type | Version | Arch | Repository ---+--------------+---------+-------------------------+--------+----------------------------------- i | libwtmpdb0 | package | 0.13.0+git.20240814-1.1 | x86_64 | openSUSE-Tumbleweed-Oss (20240903) i | wtmpdb | package | 0.13.0+git.20240814-1.1 | x86_64 | openSUSE-Tumbleweed-Oss (20240903) dir And the 64 bit versions exist ll /usr/lib64/security/pam_wtmpdb.so /usr/lib64/security/pam_lastlog2.so -rwxr-xr-x 1 root root 14K Jul 16 09:25 /usr/lib64/security/pam_lastlog2.so -rwxr-xr-x 1 root root 14K Aug 14 05:59 /usr/lib64/security/pam_wtmpdb.so The only 32 bit sw that I use is wine and I really don't need 32 bit as the Windows program is 64 bit but wine installs BOTH wine 32 and 64 bit versions. What package that is not installed provides : /lib/security/pam_wtmpdb.so is not installed. /lib/security/pam_lastlog2.so is not installed. Unrelated but another message that has been coming up for quite a while during updates but I'm not sure which package is causing it: udevadm hwdb is deprecated. Use systemd-hwdb instead. Both /usr/bin/udevadm and /usr/bin/systemd-hwdb so I'm guessing that some package still has references bot udevadm but not sure how to find which one ? -- Regards, Joe

4 6

New Tumbleweed snapshot 20240904 released!
by Dominique Leuenberger 05 Sep '24

05 Sep '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: 389-ds (3.1.1~git0.aef1668 -> 3.1.1~git13.a9c7ff9) erofs-utils libavif (1.0.4 -> 1.1.1) libfido2 (1.14.0 -> 1.15.0) libpcap (1.10.4 -> 1.10.5) live555 (2024.06.26 -> 2024.08.01) nbdkit (1.40.1 -> 1.40.2) openSUSE-release (20240903 -> 20240904) python-kiwi (10.1.2 -> 10.1.4) zlib-ng-compat (2.1.6 -> 2.2.1) === Details === ==== 389-ds ==== Version update (3.1.1~git0.aef1668 -> 3.1.1~git13.a9c7ff9) Subpackages: lib389 libsvrcore0 - bsc#1229948 - CVE-2024-43806 - rustix::fs::Dir iterator with the linux_raw backend can cause memory explosion - Update to version 3.1.1~git13.a9c7ff9: * Issue 2472 - Add a CI test (#6314) * Issue 6276 - Schema lib389 object is not keeping custom schema data upon editing (#6279) * Issue 3555 - UI - Fix audit issue with npm - micromatch (#6310) * Issue 5843 - Fix size formatting in dscreate output and enhance tests (#6309) * Issue 6301 - Fix long delay when setting replication agreement with dsconf (#6303) * Issue 6280 - Changelog trims updates from a given RID even if a consumer has not received any of them (#6281) * Issue 6296 - basic_test.py::test_conn_limits fails in main branch (#6300) * Issue 6295 - test_password_modify_non_utf8 should set default password storage scheme * Issue 6294 - Nightly copr builds are failing * Issue 6288 - dsidm crash with account policy when alt-state-attr is disabled (#6292) * Issue 2324 - Add a CI test (#6289) * Issue 6284 - BUG - freelist ordering causes high wtime (#6285) * Issue 6282 - BUG - out of tree build fails (#6283) ==== erofs-utils ==== - Enable zstd [boo#1229961] ==== libavif ==== Version update (1.0.4 -> 1.1.1) - update to 1.1.1: * In avif.h, change "AVIF_API AVIF_NODISCARD" back to "AVIF_NODISCARD AVIF_API" to fix clang-cl and MSVC compilation errors in the shared library build on Windows. * Fix -DAVIF_GTEST=SYSTEM * Fix infe_type and codec_config_type wrongly read as byte- aligned fields in the * experimental feature AVIF_ENABLE_EXPERIMENTAL_METAV1. * When building aom as a local dependency, runtime CPU detection (`CONFIG_RUNTIME_CPU_DETECT`) is now always `ON`; * Fix CMake config shared library leaks * Update gain map metadata to current ISO 21496-1 draft. * cmake: Only search for ASM_NASM language on x86_64 platforms. * Fix "No known features for CXX compiler" CMake error. * Fix aom link flags so that transitive library link flags are included when aom is a static library * Fix out-of-order 'dimg' grid associations * Report files with an item used in multiple 'dimg' boxes with * AVIF_RESULT_NOT_IMPLEMENTED instead of AVIF_RESULT_INVALID_IMAGE_GRID. * Add experimental API for reading and writing gain maps in AVIF files. * If enabled at compile time, add `gainMap` field to `avifImage`, * add `qualityGainMap` field to `avifEncoder`, add `gainMapPresent`, `enableDecodingGainMap`, `enableParsingGainMapMetadata` and `ignoreColorAndAlpha` to `avifDecoder`. * Utility functions for working with gain maps are also added. * Gain maps allow readers that support them to display HDR images that look good on both HDR and SDR displays. * Add experimental support for converting jpeg files with gain maps to AVIF files with gain maps. Requires libxml2, and the AVIF_ENABLE_EXPERIMENTAL_GAIN_MAP compilation flag. * Add a --qgain-map flag to control the gain map quality in avifenc. * Add the headerFormat member of new type avifHeaderFormat to avifEncoder. * Add experimental API for reading and writing "mif3"-branded AVIF files behind the compilation flag AVIF_ENABLE_EXPERIMENTAL_METAV1. * Implement avifImageScale() fallback when libyuv is not available. * Partial import of libyuv to third_party/libyuv (new LICENSE). * Add avifenc flag suffixes ":update" and ":u". Quality- relative, tiling-relative and codec-specific flags can now be positional, relative to input files. * Add experimental support for layered AVIF encoding in avifenc. * Use the --layered flag to enable layered AVIF encoding. * Layered AVIF has multiple layers, which works like frame of animated AVIF, and layers can be rendered in progressive manner on supported viewers * Only aom supports layered AVIF encoding at the time of writing. * Add --scaling-mode flag to set scaling mode of each layer. * This part of AV1 encoder is not as thoroughly tested, so there are higher possibility encoder may crash when given certain configuration or input. * Add imageSequenceTrackPresent flag to the avifDecoder struct. * avifImageScale() function was made part of the public ABI. * Add avif_cxx.h as a C++ header with basic functionality. * Add enum aliases AVIF_COLOR_PRIMARIES_SRGB, AVIF_COLOR_PRIMARIES_BT2100, * AVIF_COLOR_PRIMARIES_DCI_P3, AVIF_TRANSFER_CHARACTERISTICS_PQ. * Add avifResult enum entry AVIF_RESULT_INTERNAL_ERROR. * Require libyuv by default (but it can still be disabled with * -DAVIF_LIBYUV=OFF). * Add avifdec --icc flag to override the output color profile. * Add experimental API for reading and writing 16-bit AVIF files behind the * compilation flag AVIF_ENABLE_EXPERIMENTAL_SAMPLE_TRANSFORM. * Add AVIF_CHROMA_SAMPLE_POSITION_RESERVED to avifChromaSamplePosition enum. ==== libfido2 ==== Version update (1.14.0 -> 1.15.0) Subpackages: libfido2-1 libfido2-udev - update to 1.15.0: * bio, credman: improved CTAP 2.1 support. * hid_osx: fix issue where fido_hid_read() may block unnecessarily; gh#757. * fido2-token -I: print maxcredbloblen. * hid_linux: improved support for uhid devices. * New API calls: - fido_cred_set_attobj; - fido_cred_x5c_list_count; - fido_cred_x5c_list_len; - fido_cred_x5c_list_ptr. ==== libpcap ==== Version update (1.10.4 -> 1.10.5) - Update to 1.10.5: * Security fixes: - [bsc#1230020, CVE-2023-7256] double free via addrinfo in sock_initaddress() - [bsc#1230034, CVE-2024-8006] null pointer derefence in pcap_findalldevs_ex() * Thread safety: Make some static variables thread-local * Packet filtering: - Return an error from pcap_compile() if the scanner fails to initialize. - Optimizer fix from Archit Shah to recompute dominators after moving code; (although the resulting filter isn't empty). - Optimizer fix from Archit Shah to mark value as unknown when store of that value is deleted. * Linux: - Don't use DLT_LINUX_SLL2 for anything other than the "any" device. - Avoid 32-bit unsigned integer overflow in USB captures. - Fix a file descriptor leak. - Fix DLT_CAN_SOCKETCAN handling of CAN FD. - Add CAN XL support to DLT_CAN_SOCKETCAN. - Clean up the code that sets the "real" ("original") length for isochronous USB transfers. - Avoid unnecessary blocking on recvmsg() in the Bluetooth monitor and Bluetoth modules. * Haiku: - Report non-existent devices correctly. - Fix handling of packet statistics. - Fix packet timestamping. - Fix packet filtering with low snaplen. - Improve connection status reporting. - Add support for promiscuous mode. - Detect DLTs and loopback capture support at run time. - Report IEEE 802.11 as PCAP_IF_WIRELESS. * BSD, macOS, AIX, Solaris 11, Linux: - Add a new error PCAP_ERROR_CAPTURE_NOTSUP, for use if a capture mechanism is not present, in the hopes that, for example, attempts to capture on Windows Services for Linux 1, in which the NT kernel attempts to simulate Linux system calls but does not support packet sockets, can get an error that better indicates the underlying problem. * AirPcap: Format an error message if we run out of memory. * nflog: Make sure we don't overflow when rounding up the TLV length. * rpcap: - Handle routines removed in at least some OpenSSL libraries. - CVE-2023-7256: Clean up sock_initaddress() and its callers to avoid double frees in some cases. - Don't define SOCKET ourselves; instead, define PCAP_SOCKET as int on UN*Xes and as SOCKET on Windows. - CVE-2024-8006: Fix pcap_findalldevs_ex() not to crash if passed a file:// URL with a path to a directory that cannot be opened. * Savefiles: - Handle DLT_/LINKTYPE_ mapping better, to handle some OpenBSD-specific link types better. - Treat if_tsoffset as signed in pcapng files, as the spec says. - Don't try to fix the "real" length for isochronous USB transfers if the number of USB descriptors is too large. - Reject pcap files where one of the reserved fields in the "link-layer type plus other stuff" is non-zero. * Rebase libpcap-1.0.0-s390.patch ==== live555 ==== Version update (2024.06.26 -> 2024.08.01) Subpackages: libBasicUsageEnvironment2 libUsageEnvironment3 libgroupsock30 libliveMedia112 - update to 2024-08-01: * Updated "ServerMediaSession::generateSDPDescription()" to treat "time_t" as (long long). ==== nbdkit ==== Version update (1.40.1 -> 1.40.2) Subpackages: nbdkit-basic-filters nbdkit-basic-plugins nbdkit-curl-plugin nbdkit-nbd-plugin nbdkit-python-plugin nbdkit-server nbdkit-ssh-plugin nbdkit-vddk-plugin - Update to version 1.40.2: * Version 1.40.2. * tests/dummy-vddk.c: Stop the background thread in dummy _Exit function * vddk: Check create-size is aligned to VIXDISKLIB_SECTOR_SIZE * vddk: Detect possible VDDK crash and warn * docs: Refresh nbdkit-service(1) page - Enable bzip2 filter ==== openSUSE-release ==== Version update (20240903 -> 20240904) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== python-kiwi ==== Version update (10.1.2 -> 10.1.4) - Bump version: 10.1.3 â 10.1.4 - Add note about guestOS values for vmware ovftools. - Add note about guestOS values for vmware platform. - Fixed resize of dos table type on s390 On s390, parted is used to detect the partition table type. In contrast to blkid the name for DOS tables is reported as 'msdos' and not 'dos' which impacts several conditions in the kiwi initrd code which checks for 'dos'. This commit fixes the get_partition_table_type() method to return a consistent table name for DOS tables. This Fixes bsc#1228729 - Revert "remove dependency on /usr/bin/python" This reverts commit 15b450188483b567ca10bb459bf50ed90e905bb7. The change provided here entirely broke kiwi in OBS. With this patch applied every image build in OBS fails with the following message: 'line 1: /usr/sbin/kiwi: No such file or directory' - Bump version: 10.1.2 â 10.1.3 - Fix bundle extension for archive types When bundling result files that uses an archive type like tbz or docker, kiwi creates them with the extension tar.xz/tar.gz The bundler code only uses the extension from the last tuple in a "." split which is wrong for "tar." filenames. This commit adds an exception to the prefix rule for this output filenames and Fixes #2628 - Fix ImageSystem mount procedure The mount() method did not take custom partitions into account. This commit fixes it. This Fixes #2619 - remove dependency on /usr/bin/python - Add support for isomd5sum for tagging iso files The isomd5sum tool suite is used and available on all supported distributions except SUSE distributions, and is necessary to produce conformant ISOs for most Linux distributions. This change adds support for isomd5sum tool suite for kiwi, though it does not extend the kiwi-live dracut module to use it. The upstream dracut dmsquash-live module must be used instead. Co-authored-by: Dan ÄermÃ¡k <dcermak(a)suse.com> - kiwi/builder/live: Log the correct value for Application ID Since it is now possible to set a custom application ID, we want to see this when it is being used for the image. - kiwi/builder/live: Clean up leftover dracut configuration file The existence of this file breaks installers on live media that sync the full filesystem to disk and are not aware of this configuration before generating the target system initramfs. - Allow string versions and test "word" versions There are descriptions out in the wild that use "non-numeric" versions in their descriptions, particularly without separators for splitting. This change switches all of this to strings rather than assuming numbers and gracefully handles the single word case. - Add documentation for boxbuild tweaks - Fixed wrong log level on --logfile When using --logfile, the log generated there matches the stdout log (which without --debug, does not include any debug info). This is in contrast to the automatically generated one in the output directory, which always does and also not following the way how it is documented. This Fixes #2503 - Fixed arch flag for namedCollection The arch flag in a namedCollection was not taken into account. This commit fixes this and also makes sure the result information is sorted and unique like we have it for the package lists. This Fixes #2600 - Fix handling of zipl.conf in plain zipl bootloader When using the plain zipl bootloader kiwi created a /etc/zipl.conf file. However, this file was only useful during image build as it points to a loop target device and geometry but does not represent a proper config file to be used in the running system. In addition the different distributors provides their own version and layout of the zipl.conf to be used inside of the system and with their respective tools. Thus this commit changes the way how kiwi operates in a way that the zipl.conf used in the initial image only exists during the image build process. An eventual present /etc/zipl.conf will not be touched by kiwi. This Fixes #2597 ==== zlib-ng-compat ==== Version update (2.1.6 -> 2.2.1) - Update to 2.2.1: * Changelog at https://github.com/zlib-ng/zlib-ng/releases/tag/2.2.1

1 0

[opensuse-factory] reproducible builds status 2024-08
by Bernhard M. Wiedemann 05 Sep '24

05 Sep '24

Hi, In August, I had two weeks off with my family, so I made fewer patches, but had the machines build all of ring0 reproducibly for the first time and did start builds of ring1 (500GB binaries each). In ring0, I also managed to build packages with OBS, osc and pbuild and all methods agreed on the build-result. That is with debuginfo enabled everywhere to keep compatibility with Tumbleweed. Only pesign-obs-integration is still causing diffs in OBS. With my reproducibleopensuse tools (devel branch), the lines to reproduce are: osc co home:bmwiedemann:reproducible:distribution:ring0/zstd && cd $_ nachbau # or for a double-build with more variations: debuginfo="--debuginfo --baselibs" repo=standard \ project=home:bmwiedemann:reproducible:distribution:ring0 \ rbk and with pbuild (patched with cd /usr/lib/build && curl https://github.com/openSUSE/obs-build/commit/f47374bc2027b3a21c2232e3d88b2b… | patch -p1 ), it is osc co home:bmwiedemann:reproducible:distribution:ring0 && cd $_ ln -sf 000pbuildconf/_* . pbuild --kvm --vm-memory=9000 --vm-disk-size=30000 --jobs 4 \ --buildjobs 4 --no-checks --release 1.1 --baselibs sha256sums To reach a 100% reproducible ring0, some trade-offs had to be accepted. One is that we use %do_profiling 0 which costs some ~8% performance in gcc, bash, python and others that used profile-guided-optimization (PGO). Another is that LTO triggered a reproducibility issue in llvm's libomp, so all versions of llvm build without LTO here, probably losing ~10% of performance when compiling with these as well. There are also some unmerged patches integrated: * SR 1192491 rpm-config-SUSE * https://github.com/rpm-software-management/rpm/pull/2762 * https://github.com/apache/xmlgraphics-fop/pull/65 for pdf-rendering with a PoC/WIP portion for deterministic UUIDs All this brings me close to the first goal of the project: to have all the 328 ingredient rpms for a minimalVM image build 100% bit-reproducible. https://build.opensuse.org/package/show/home:bmwiedemann:reproducible:distr… needs some parts from ring1 and those still need checking, but hopefully not much is left to fix. Image-creation itself is not yet reproducible with random IDs in filesystems and maybe even mtimes. In past years, %post scripts also caused some non-determinism. However, this part is out-of-scope for this project. Here are the autogenerated bits: last month's status: https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… Last months' reproducible builds project updates (including my work): https://reproducible-builds.org/reports/2024-07/ I uploaded https://rb.zq1.de/compare.factory-20240904/ today https://rb.zq1.de/spec/glossar.txt explains the meaning of below values: total-packages: 15708 (+42) build-tried: 15641 (+39) build-failed: 7 (-6) build-n-a: 180 (-6) build-succeeded: 15454 (+51) build-official-failed+na: 158 (+133) build-compare-failed: 152 (-2) build-compare-succeeded: 15302 (+53) verify-failed: 251 (+2) verified-semi-reproducible: 15011 (+67) verified-bit-identical: 13646 (+55) bit-by-bit-identical: 14825 (+46) not-bit-by-bit-identical: 624 (-1) not-bit-by-bit-identicalcheck: 629 (+5) https://rb.zq1.de/compare.factory-20240904/graph.png shows the change over time https://rb.zq1.de/compare.factory-20240904/unreproduciblerings.txt lists very unreproducible core packages (bootstrap+DVD) Of the badly unreproducible packages, 3 were in ring0 28 were in ring1 That makes it 31/4043 => 0.77 % which is below the overall average of 152/15454 => 0.98 % 624/15454 => 4.04 % of packages are not perfectly reproducible package notes: ==> ./agama-integration-tests/.rb.notes <== => SR 1194375 random port in .lock file ==> ./apache-arrow/.rb.notes <== OSC_BUILD_ROOT=/var/tmp/build-root.$slot osc build --noservice --vm-type=kvm --clean standard ==> ./binutils/.rb.notes <== => SR 1171128 PGO from --enable-pgo-build=lto no problem? ==> ./blaspp/.rb.notes <== => SR 1194838 => https://github.com/icl-utk-edu/blaspp/pull/87 ==> ./ca-certificates-mozilla/.rb.notes <== => SR 1192626 = https://bugzilla.opensuse.org/show_bug.cgi?id=1229003 date /usr/share/factory/var/lib/ca-certificates/java-cacerts differs at offset '30' (Java KeyStore) ca-certificates-mozilla:ca-certificates-mozilla-prebuilt unknown - likely timestamp in milliseconds ==> ./clamav/.rb.notes <== => SR 1190176 = https://github.com/Cisco-Talos/clamav/issues/1300 FTBFS-2024-07-28 found range good=1722124782 bad=1722126706 ==> ./contrast/.rb.notes <== unknown rust/llvm ==> ./cosmic-edit/.rb.notes <== = https://github.com/pop-os/cosmic-edit/issues/221 hash order issue, rust -4CXlibnamebaseblue of +inf-inf+NaN-NaNopendataRectBlurDx12kindlineDarkFontB4x4B5x4B5x5B6x5B6x6B8x5B8x6B8x8filetextnodeItemmimeGridListNameThinBoldFifocodesizePollInitKeyAKeyBKeyCKeyDKeyEKeyFKeyGKeyHKeyIKeyJKeyKKeyLKeyMKeyNKeyOKeyPKeyQKeyRKeySKeyTKeyUKeyVKeyWKeyXKeyYKeyZHelpHomeMetaCopyFindOpenUndoCellNV12AstcaxisLeftBackRedoAttnPlayEisuSaveCallExitInfoLinkLockWinkDragViewDropPathUserCodeNoneSomeSizelistgridviewpathexeciconDeadIterRgba.gitgapsrectOhos]*/ AtomFullLostMisctrueiterhwndBindWiretimehighdiffundoredocopysavequiteditfindwarnhashdate -> dark ==> ./cosmic-term/.rb.notes <== unknown asm diff - from lto? ==> ./elixir/.rb.notes <== = https://bugzilla.opensuse.org/show_bug.cgi?id=1205134 FTBFS-j1 stuck osc build --vm-type=kvm --clean --noservice -j1 standard ==> ./elixir115/.rb.notes <== = https://bugzilla.opensuse.org/show_bug.cgi?id=1205134 FTBFS-j1 stuck ==> ./emacs/.rb.notes <== .pdmp from ["./temacs" "--__aslr-disabled" "-batch" "--no-build-details" "-l" "loadup" "--temacs=pdump" "--bin-dest" "/usr/bin/" "--eln-dest" "/usr/lib64/emacs/29.4/"] ==> ./fonttosfnt/.rb.notes <== => SR 1190940 1190278 => https://gitlab.freedesktop.org/xorg/app/fonttosfnt/-/merge_requests/22 toolchain, date ==> ./fractal/.rb.notes <== rust/llvm symbol order variation ==> ./gawk/.rb.notes <== PGO ==> ./git-annex/.rb.notes <== parallelism ==> ./git-credential-keepassxc/.rb.notes <== rust codegen-units, low-entropy +_ZN4clap5error5Error7for_app17h3a0e3b5c590fcdc5E.llvm.17478145784603506657 ==> ./gromacs/.rb.notes <== FTBFS-j1 failed - needs 4+ cores succeeds with parallelism=6 parallelism2=5 multibuildrbkall ==> ./gstreamer-plugins-rs/.rb.notes <== date ; rust/llvm asm diff variations in /usr/lib64/pkgconfig/gstwebrtchttp.pc ==> ./helm/.rb.notes <== FTBFS-2028-04-05 2032-08-21 SSL ==> ./kanidm/.rb.notes <== low-entropy unknown rust/llvm ==> ./lapackpp/.rb.notes <== => SR 1194839 => https://github.com/icl-utk-edu/lapackpp/pull/68 hostname in /usr/include/lapack/defines.h from cmake + defines.h.in ==> ./libdb-4_8/.rb.notes <== => SR 1190247 1187675 /usr/share/java/db-4.8.30.jar mtimes from by pid=171773 dir=/home/abuild/rpmbuild/BUILD/db-4.8.30/build_nptl/classes exec="/usr/bin/jar", ["jar", "cfm", "../db.jar", "../../dist/../java/jarManifestEntries", "./com/sleepycat"] - started ==> ./libguestfs/.rb.notes <== hostname in /usr/lib64/guestfs/supermin.d/base.tar.gz in etc/hosts ==> ./lua-lmod/.rb.notes <== => SR 1195841 => https://github.com/TACC/Lmod/pull/702 date+time from `date` /usr/share/lmod/8.7.37/libexec/Version.lua differs (ASCII text) ==> ./mayavi/.rb.notes <== tvtk_classes.zip varies (mtimes?) from python build_wheel ==> ./openblas/.rb.notes <== => SR 1190320 = https://bugzilla.opensuse.org/show_bug.cgi?id=1228177 CPU = https://bugzilla.opensuse.org/show_bug.cgi?id=1181083 FTBFS-j1 ==> ./pop-launcher/.rb.notes <== => SR 1190933 = https://github.com/pop-os/launcher/issues/230 parallelism ==> ./python-EditorConfig/.rb.notes <== #=> 1191536 .pyc mtime from %check ==> ./python-cfn-lint/.rb.notes <== FTBFS-2024-10-13 OSC_BUILD_ROOT=/var/tmp/build-root.$slot time osc build --noservice --vm-type=kvm --build-opt=--vm-custom-opt="-rtc base=2024-10-14T00:00:00" standard ==> ./python-libcst/.rb.notes <== unknown rust/llvm /usr/lib64/python3.11/site-packages/libcst/native.cpython-311-x86_64-linux-gnu.so ==> ./python-paramiko/.rb.notes <== FTBFS-CPU+j1 ==> ./python-pysnmp/.rb.notes <== => https://github.com/lextudio/pysnmp/pull/35 FTBFS-2038 ==> ./python-pyvo/.rb.notes <== FTBFS-2024-12-29 found range good=1735428808 bad=1735430733 ==> ./python-spyder-notebook/.rb.notes <== = https://bugzilla.opensuse.org/show_bug.cgi?id=1228441 report FTBFS OSC_BUILD_ROOT=/var/tmp/build-root.$slot osc build --noservice --vm-type=kvm --clean -j4 standard ==> ./python-torch/.rb.notes <== = python-torch https://bugzilla.opensuse.org/show_bug.cgi?id=1229033 CPU ==> ./python-yt/.rb.notes <== = https://github.com/yt-project/yt/issues/4611 parallelism # old: ==> ./python311/.rb.notes <== PGO only as of 2024-08-01 ==> ./python312/.rb.notes <== see python311 ==> ./python313/.rb.notes <== = https://github.com/python/cpython/issues/122433 FTBFS-j1 OSC_BUILD_ROOT=/var/tmp/build-root.$slot time osc build --noservice --vm-type=kvm --clean standard ==> ./qemu/.rb.notes <== #= https://bugzilla.opensuse.org/show_bug.cgi?id=1221340 FTBFS /usr/share/qemu/slof.bin differs at offset '108' (data) ==> ./rabbitmq-server/.rb.notes <== FTBFS https://build.opensuse.org/package/show/network:messaging:amqp/rabbitmq-ser… ==> ./resources/.rb.notes <== unknown rust/llvm ==> ./rmw/.rb.notes <== #=> https://github.com/theimpossibleastronaut/rmw/pull/442 = https://github.com/theimpossibleastronaut/rmw/issues/439 FTBFS-2038 found range 2147482293 -> 2147484218 ==> ./rpm-config-SUSE/.rb.notes <== => SR 1192491 date+time /usr/lib/rpm/macros.d/macros.opensuse differs (ASCII text) ==> ./seahorse/.rb.notes <== parallelism Binary files /var/tmp/build-root.12/.mount/home/abuild/rpmbuild/BUILD/seahorse-43.0+22/x86_64-suse-linux/src/seahorse.p/meson-generated_application.c.o and /var/tmp/build-root.12b/.mount/home/abuild/rpmbuild/BUILD/seahorse-43.0+22/x86_64-suse-linux/src/seahorse.p/meson-generated_application.c.o differ ==> ./swipl/.rb.notes <== date;FTBFS-2029 swipl found range good=1867791402 bad=1867793326 (2029-03-09T23:28:46) ==> ./tigervnc/.rb.notes <== minor jar mtimes ; from jar call #= https://bugzilla.opensuse.org/show_bug.cgi?id=1208478 RSA key ==> ./weblate/.rb.notes <== => SR 1194546 = https://github.com/WeblateOrg/weblate/issues/8556 FTBFS-2038 toolchain mercurial ERROR: test_upstream_changes_rename (weblate.vcs.tests.test_vcs.VCSHgTest) ==> ./xdg-desktop-portal-cosmic/.rb.notes <== low-entropy order issue --- old /usr/libexec/xdg-desktop-portal-cosmic (objdump) ==> ./zig/.rb.notes <== debuginfo ==> ./zls/.rb.notes <== random path in debuginfo=--debuginfo multibuildrbkall -/usr/src/debug/zls-0.13.0/zig-cache/o/dd3075db6d19db75877b8d14c5f6fc11/version_data_0.13.0.zig 0 (none) 100644 root root 0 4294967295

3 2

openSUSE Release Engineering meeting 04.09.2024
by Lubos Kocman 04 Sep '24

04 Sep '24

How to join the meeting? https://calendar.opensuse.org/teams/release/events/opensuse-release-enginee… All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting ## Attendees: DimStar, GuillaumeG, Adamm, Sarah, Richard, max, ddemaio, dirk, bmwiedemann NOTICE! the meeting url is https://meet.opensuse.org/meeting ## Leap Leap 16.0 agama installation in openQA with custom urls is finally working https://github.com/os-autoinst/os-autoinst-distri-opensuse/pull/20064 and https://github.com/os-autoinst/openqa-trigger-from-obs/commit/8a5d90845f6a5… Initial merge of KDE into Leap 16.0 (~800 submissions). Build still in progress on s390x. KDE addition addition into Leap 16.0 / agama https://github.com/openSUSE/agama/pull/1571 Branding related Initialwork on ultrawide wallpaper for Tumbleweed Experiments with geo-based wallpapers for 16.0 https://github.com/lkocman/geo-wallpapers I'm bit unhappy about current packaging of wallpapers https://etherpad.opensuse.org/p/lkocman-packaging I shall start working on Leap Micro 6.1 Beta ## openSUSE Tumbleweed (DimStar) openSUSE:Factory build fail stats: 134 failed 23 unresolvable (last week 15 failed, 9 unresolvable) https://tinyurl.com/ysy4nnnz (big increase due to more things trying to rebuild with gcc14; https://build.opensuse.org/project/show/openSUSE:Factory:Rebuild shows the resutls when we'd use rebuild=transitive, i.e 559 failed packages) 424 requests accepted in the last week Most relevant changes: Switch to GCC14 as default compiler in 20240827 (emacs was locked on GCC13 as it fails test suite with gcc13) Kernel 6.10.7 Other updates: NetworkManager 1.48.10 openSSH 9.8p1 python numpy2 - by far not everything is ready for that, so numpy 1.x will be re-introduced Blocked: perl-Bootloader to be renamed to update-bootloader, openQA tests needs updating https://progress.opensuse.org/issues/165686 python-Sphinx 8.0.2: causes a few breakages, Staging:L Boost 1.86: LibreOffice fails to build go 1.23 as new distro default: ignition fails to build (https://github.com/coreos/ignition/issues/1931) ### longer-lasting topics Switch default LSM from AppArmor to SELinux, see https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… ## Richard (Aeon+botmaster) Recovering after weeks of serious illness. Catching up with everything that happened in the past weeks. Not aware of any burning issues with Aeon. Looking forward to picking up Aeon/tik and pushng them towards release.. Reading up on some discussions regarding tuning up the deploment of opensuse-release-tools to botmaster Q, Toying with the idea of volunteering Aeon as an exemplar/pathfinder for git workflow, does that sound feasible? lkocman: We do already have git for Leap:16.0:Images, but the main image agama-installer-Leap is currently built in openSUSE:Leap:16.0 ## Max Leap 16.0 * Merged kde packages to Leap 16.0, some kapps are pending in staging still, the requirement for patterns-kde is fulfilled at least. Max mentioned that we finally broke the 1000 packages count in 16.0 :-) * Disabled devel_web pattern for the time being until we know the desicision about virtualization package * Working on check_source make it to made submission on hold if the target package exist in SLFO * A script has uploaded SLFO packagelist to https://build.opensuse.org/projects/openSUSE:Leap:16.0:Staging/packages/das… in case you want to adjust your tooling against SLFO packagelist and don't want to checkout gittree every time lkocman: agama - KDE was added as an option for Leap 16.0 lkocman: Dimstar mentioned that perhaps we want to make a storage HW request for 16.0, as we'll build more trees and images than in 15.3+ (where we started to use adi stagings only). Adrian: the entire model of stagings might change, there is multiple possibilities. It's also the data transfer aside from pure storage. Max: Same situation with staging will happen soon on Tumbleweed. ## Guillaume - Arm Tumbleweed: * Rolling * Submitted fixes for some build failures related to GCC14 (starting with packages from ring1) * User complained about missing web browsers for armv7 - https://lists.opensuse.org/archives/list/arm@lists.opensuse.org/thread/5LLT… Leap 15.5: * RPi3 boot problem related to a kernel update https://bugzilla.suse.com/show_bug.cgi?id=1225352 Leap 15.6: * No blocker ## Sarah - s390x * Tumbleweed rolling * s390-tools are updated Topic openSUSE on Hercules * hercules package not compatible with openSUSE Tumbleweed (x86) any more -> new project on Github https://github.com/SDL-Hercules-390/hyperion -> submitted Hints about special instructions in Hercules: https://www.mail-archive.com/linux-390@vm.marist.edu/msg74185.html Kernel problem with Leap/Tumbleweed on new Hercules emulator (zram kernel trace): https://www.mail-archive.com/linux-390@vm.marist.edu/msg74187.html -> takeover by SUSE (Marcela) AI packages by IBM installable with anaconda Python Installer (conda install): RedBook AI for Linux on Z published: https://ibm.github.io/ai-on-z-101/blog/archive/2024/ (https://lists.opensuse.org/archives/list/zsystems@lists.opensuse.org/thread…) User feedback about reasons for switching from Leap to Tumbleweed (because of Upgrade problems): https://www.mail-archive.com/linux-390@vm.marist.edu/msg74188.html Leap 16.0 will very likely have similar maintenance workflow as Leap Micro 6.1, which does not utilize :Update project. Perhaps some of these issues would simply go away by design. lkocman: the mentioned upgrade issues were a past issue which was already resolved. We've clarified it over email. ## Doug * openSUSE.Asia Summit * A couple talks cancelled by prospective speakers * TSP * 16 of 28 accepted so far * Akademy begins this weekend * FOSDEM * No call for booth yet * Dates are likely to be 01.02 & 02.02 * Provided small article about slowroll snapshots * Establishing roadmap for https://github.com/openSUSE/lessons * GSoC * 10 or 11 finals complete * 1 final extention due on Sept. 30 lkocman: LinuxDays 2024 (11-12 Oct) followed by Packaging workshop in Prague. We have I believe ~5 talks from SUSE employees. ## Dirk No update ## Wolfgang (Package Hub), Scott Bahling, Nathan Cutler Package HUB for SLES 16 talk on next Wednesday (after this call). A high level discussion about what should we make available in Package HUB module and what not. ## Maintenance team (Marcus, Robert) * Sarah mentioned 20 downgrades of packages during distribution upgrade. Details in https://www.mail-archive.com/linux-390@vm.marist.edu/msg74188.html lkocman: will open a bug report and will get list of packages from the ML above. need more maintainers for future chromium updates after Andreas Stieger stepped down. ## Adrian - OBS Heads up: planning regarding offline installer for Agama. ## Bernhard - Slowroll had trouble from incompatible dbus-1 update => reverted preparing next version bump to 20240901 - planned in a week ## Bernhard - reproducible builds see https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… I plan to attend the r-b summit in Hamburg 2024-09-17 want to see merged https://github.com/openSUSE/openSUSE-release-tools/pull/3129 => needs change to create adiN:rb subproject to not block progress of submissions with slow builds (e.g. chromium 18h+) or failing timebombs (e.g. python-gpstime) ## Adam - Git Workflow {wip} migrating project workflow to RabbitMQ + polling (in case events lost) TODO: migrate NodeJS devel project after above is done ## Open Floor lkocman: Sebastian Riedel raised a problem with ownership of legal-auto.py (OSRT). We got the change it, but nobody seem to be officially owning the tool. Maybe move it into SUSE org.

2 1

New Tumbleweed snapshot 20240903 released!
by Dominique Leuenberger 04 Sep '24

04 Sep '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ffmpeg-6 google-noto-fonts (20240801 -> 20240901) libjpeg-turbo openSUSE-release (20240902 -> 20240903) python-cffi (1.16.0 -> 1.17.0) selinux-policy (20240830 -> 20240903) xmlsec1 (1.2.40 -> 1.2.41) === Details === ==== ffmpeg-6 ==== Subpackages: libavcodec60 libavfilter9 libavformat60 libavutil58 libpostproc57 libswresample4 libswscale7 - Add 0001-libavcodec-arm-mlpdsp_armv5te-fix-label-format-to-wo.patch [boo#1229338] ==== google-noto-fonts ==== Version update (20240801 -> 20240901) Subpackages: google-noto-sans-fonts google-noto-sans-symbols-fonts google-noto-sans-symbols2-fonts - Update to 20240901 * Various updates to fonts ==== libjpeg-turbo ==== Subpackages: libjpeg8 libjpeg8-x86-64-v3 - update to 3.0.3: * The x86-64 SIMD extensions now include support for Intel Control-flow Enforcement Technology (CET), which is enabled automatically if CET is enabled in the C compiler. * Fixed a regression introduced by 3.0 beta2[6] that made it impossible for calling applications to supply custom Huffman tables when generating 12-bit-per-component lossy JPEG images using the libjpeg API. * Fixed a segfault that occurred when attempting to use the jpegtran `-drop` option with a specially-crafted malformed input image or drop image (specifically an image in which all of the scans contain fewer components than the number of components specified in the Start Of Frame segment.) ==== openSUSE-release ==== Version update (20240902 -> 20240903) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== python-cffi ==== Version update (1.16.0 -> 1.17.0) - update to 1.17.0: * Add support for Python 3.13. * In API mode, when you get a function from a C library by writing `fn = lib.myfunc`, you get an object of a special type for performance reasons, instead of a `<cdata 'C-function-type'>`. Before version 1.17 you could only call such objects. You could write `ffi.addressof(lib, "myfunc")` in order to get a real `<cdata>` object, based on the idea that in these cases in C you'd usually write `&myfunc` instead of `myfunc`. In version 1.17, the special object `lib.myfunc` can now be passed in many places where CFFI expects a regular `<cdata>` object. For example, you can now pass it as a callback to a C function call, or write it inside a C structure field of the correct pointer-to-function type, or use `ffi.cast()` or `ffi.typeof()` on it. - drop py313-compat.patch, py313-use-format-unraisable.patch, py313-use-hashpointer.patch (upstream) ==== selinux-policy ==== Version update (20240830 -> 20240903) Subpackages: selinux-policy-targeted - Update to version 20240903: * allow sshd_t and sshd_net_t access to ssh vsockets (bsc#1228831) - Update to version 20240902: * Allow xen to use qemu as dom0 disk backend (bsc#1228540) * Label /var/lib/xen/xenstore as xenstored_var_lib_t (bsc#1228540) * Allow xl to access hypercall interfaces to xen hypervisor (bsc#1228540) ==== xmlsec1 ==== Version update (1.2.40 -> 1.2.41) Subpackages: libxmlsec1-1 libxmlsec1-nss1 libxmlsec1-openssl1 - Update to 1.2.41: * (xmlsec-mscng,xmlsec-mscrypto) Improved certificates verification. * (xmlsec-gnutls) Added support for self-signed certificates. * (xmlsec-core) Fix deprecated functions in LibXML2 2.13.1 including disabling HTTP support by default (use '--enable-http' option to re-enable it).

1 0

New Slowroll update 20240904T1230 released!
by bernhardout＠lsmod.de 04 Sep '24

04 Sep '24

Please note that this mail was generated by a script. A collection of maintenance updates was released for Slowroll. Released 25 packages: * RigelEngine * SDL2 * SDL2_mixer * clknetsim * crmsh * fence-agents * ffmpeg-6 * glib2 * glusterfs * golang-github-lusitaniae-apache_exporter * hostapd * ibus-table * ibus-typing-booster * mbedtls-2 * mmc-utils * os-autoinst * patterns-base * python-dataclasses-json * python-executing * python-iniparse * python-trustme * python-xmlschema * systemd-presets-common-SUSE * tcpdump * zmusic

1 0