- openSUSE Factory

rust non-determinism
by Bernhard M. Wiedemann 04 Aug '24

04 Aug '24

Hello fellow R-B-ings, In previous months I had seen several rust-builds that were non-deterministic in similar ways. Via https://github.com/pop-os/launcher/issues/230 I finally found one big clue that points to rust's default of codegen-units = 16 as the cause. I'll advocate [1] to add to our (openSUSE) build envs: export RUSTFLAGS="-C codegen-units=1" that helps for many of these cases. In my measurements, it only needs 5-10% longer to compile on a 4-core-VM and some builds are even faster on 1-core VMs. Plus the docs say, it optimizes resulting binaries better, which makes it a worthy trade-off. Ciao Bernhard M. [1] https://github.com/openSUSE/post-build-checks/pull/65

2 1

How to submit a new package to Leap from Factory
by Dura-Kovács 03 Aug '24

03 Aug '24

I was trying to submit a package from Factory to Leap by following this guide: https://en.opensuse.org/openSUSE:Packaging_for_Leap It says: > A new package request has to be explicitly submitted against the intended destination project that will be in 99% openSUSE:Backports:SLE-15-SP6. An example of submitting from the Factory devel project to Leap 15.3+: > user $ osc submitrequest -m 'Submitting Factory version of Salt for openSUSE Leap, see https://lists.opensuse.org/opensuse-factory/2015-07/msg00443.html ' systemsmanagement:saltstack/salt openSUSE:Backports:SLE-15-SP6 I've tried exactly this and got the following error: "The target project openSUSE:Backports:SLE-15-SP6 is not accepting requests because: Please submit to openSUSE:Backports:SLE-15-SP6:Update" Now this is not good either, since I'm not trying to submit an update but a new package. So what should I do instead to include a package in Leap?

2 1

New Tumbleweed snapshot 20240801 released!
by Dominique Leuenberger 02 Aug '24

02 Aug '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: btrfsprogs (6.9.2 -> 6.10) cryptsetup (2.7.2 -> 2.7.4) espeak-ng (1.51 -> 1.51.1) frei0r-plugins (2.3.1 -> 2.3.3) gdm gnome-control-center gtk4 (4.14.4 -> 4.15.4) ibus-libpinyin kirigami-addons6 (1.3.0 -> 1.4.0) mutter openSUSE-release (20240731 -> 20240801) openldap2 (2.6.7 -> 2.6.8) openldap2-contrib-src (2.6.7 -> 2.6.8) python-Jinja2 python-Twisted python-ptyprocess rng-tools samba (4.20.2+git.348.4fb6af61307 -> 4.20.2+git.350.4cfcde9cdb) selinux-policy (20240726 -> 20240731) thunar (4.18.10 -> 4.18.11) vim (9.1.0588 -> 9.1.0636) vte xfce4-screenshooter (1.11.0 -> 1.11.1) === Details === ==== btrfsprogs ==== Version update (6.9.2 -> 6.10) Subpackages: btrfsprogs-bash-completion btrfsprogs-udev-rules libbtrfs0 libbtrfsutil1 - update to 6.10 * inspect: * list-chunks: new command to print information about chunks (i.e. the physical chunks as stored on devices), sortable; requires root as it's using SEARCH_TREE ioctl * tree-stats: * new option -t to print only the given tree * add long options for size units * filesystem df: with increased verbosity print per-type information from sysfs * version: print a line with built-in features or options (+FEATURE1 -FEATURE2) * image: document option -s and its potential problems * fixes: * scrub status: user selected base for Rate values * receive: escape special characters in paths and xattrs * dump-tree: escape special characters in paths and xattrs * image: sanitizing filenames did not work properly in all cases * convert: fix displayed restored image path on rollback * tune change csum: do conversion in smaller batches * other: * build fixes for uClibc * build fix for python 3.13 * documentation updates ==== cryptsetup ==== Version update (2.7.2 -> 2.7.4) Subpackages: cryptsetup-doc cryptsetup-lang libcryptsetup12 - Update to 2.7.4: * Detect device busy failure for device-mapper table-referenced devices. * Fix shared activation for dm-verity devices. * Add --shared option for veritysetup open action. * Do not use exclusive flag for the allocated backing loop files. * Fixes for problems found by static analyzers and Valgrind. * Fixes to tests and CI scripts. - Use fdupes to link identical man pages. - Update to 2.7.3: * Do not allow formatting LUKS2 with Opal SED (hardware encryption) if the reported logical sector size for the block device and Opal encryption logical block differs. * Fixes to wiping LUKS2 headers after Opal locking area erase. * Mention the need for possible PSID revert before Opal format for some drives (man page). * Fix Bitlocker-compatible code to ignore newly seen metadata entries. * Fix interactive query retry if LUKS2 unbound keyslot is present. * Detect unsupported zoned devices for LUKS header devices. * Allow "capi" cipher format for benchmark command and fix parsing of plain IV in "capi" format. * Add support for HCTR2 encryption mode. * Source code now uses SPDX license identifiers instead of full license preambles. * Fix missing includes for cryptographic backend that could cause compilation errors for some systems. * Fix tests to work correctly in FIPS mode with recent OpenSSL 3.2. * Fix various (mostly false positive) issues detected by Coverity. - License: Replace legacy 'AND SUSE-GPL-2.0-with-openssl-exception' with 'WITH cryptsetup-OpenSSL-exception' (the official SPDX exception). ==== espeak-ng ==== Version update (1.51 -> 1.51.1) - Update patch fix-configure-1171.patch from upstream (just a minor change in revision numbers) - Add espeak-ng-CVE-2023-49990-49991-49992-49993-49994.patch: Backporting 58f1e0b6 from upstream, * Add crash test and vectors provided by @SEU-SSL * Disallow dummy/null voice load (that causes incorrect translator initialization) * Fix empty `phondata` file load (that causes unitialized memory access) * Limit max word length for RemoveEnding (causes buffer overflow) * Limit punctlist initialization from embedded commands (buffer overflow) * Fix unitialized pitch in wavegen (DBZ and indexing problems) * Properly zeroize stack variables before use in TranslateClause and SetWordStress (CVE-2023-49990, bsc#1218010; CVE-2023-49991, bsc#1218006 CVE-2023-49992, bsc#1218007; CVE-2023-49993, bsc#1218008 CVE-2023-49994, bsc#1218009) - Update to 1.51.1: - no changes ==== frei0r-plugins ==== Version update (2.3.1 -> 2.3.3) - Update to 2.3.3 * Add new Kaleid0sc0pe example video * New effect - gate weave * Gateweave, Filmgrain - change inline functions to static inline * Filmgrain - fix memory leak when blur = 0 ==== gdm ==== Subpackages: gdm-lang gdm-schema gdmflexiserver libgdm1 typelib-1_0-Gdm-1_0 - Rebase gdm-restart-session-when-X-server-restart.patch. ==== gnome-control-center ==== Subpackages: gnome-control-center-color gnome-control-center-goa gnome-control-center-lang gnome-control-center-user-faces gnome-control-center-users - Rebase gnome-control-center-info-never-use-gnome-software.patch and rename to gnome-control-center-system-never-use-gnome-software.patch - Rebase gnome-control-center-bring-back-firewall-zone.patch. ==== gtk4 ==== Version update (4.14.4 -> 4.15.4) Subpackages: gtk4-lang gtk4-schema gtk4-tools libgtk-4-1 typelib-1_0-Gtk-4_0 - Add missed optflags to CFLAGS. - Add -Wno-int-conversion to CFLAGS to enable compilation with GCC 14. - Update to version 4.15.4: + GtkPopover: Fix size allocation with wrapping labels + GtkColumnView: Check column visibility when measuring + CSS: - Fix fallout from recent changes - Make implementation of currentcolor inheritance match browsers + Gdk: - Introduce GdkColorState for encoding color space information. Currently, we support srgb, srgb-linear, rec2100-pq and rec2100-linear - Add color states to GdkTexture, as well as to the texture builder and downloader objects, and convert as necessary - Add GdkMemoryTextureBuilder - Attach color states when loading or saving textures - Add GdkCicpParams to create color state objects for cicp tuples - Drop GDK_DEBUG=vulkan-validate. Use VK_INSTEANCE_LAYERS=VK_LAYER_KHRONOS_validation instead + Gsk: - Improve caching of glyphs and textures - Remove the uber shader - Numerous bug fixes - Fix corner cases in offload handling - Implement occlusion culling for opaque content - Allow offloading (some) transformed textures - Take colorstate into account when compositing - Add GDK_DEBUG=linear to opt into linear compositing - Implement tiling for large textures - Stop using descriptors and go back to simpler texture management that should work better with older GL - Use correct shader clip mode for glyphs - Improve shadow rendering + Media: Attach color states to textures obtained from gstreamer + Wayland: - Allow offloading GL textures via dmabuf export - Suppot the xx-color-management-v4 protocol + Deprecations: GskGLShader and the render node + Tools: - Improve the rendernode tool extract command - Add an image tool that is about manipulating textures + Build: GTK now requires a C11 compiler + Updated translations. - Update to version 4.15.3: + Accessibility: - Only emit notifications when cursor positions change in GtkText. - Fix handling of help text properties. + CSS: Fix some crashes introduced in recent currentcolor changes. + DND: Avoid a critical. + Documentation: Fix many oversights and missing docs. - Changes from version 4.15.2: + GtkFileChooserWidget: - Plug some memory leaks. - Make Ctrl-Shift-N create a new folder. + GtkPopover: Handle resizing and position changes better. + CSS: - Support color(), oklab(). - Support color-mix() (https://www.w3.org/TR/css-color-5/) - Support relative colors (https://www.w3.org/TR/css-color-5/) - Support more colorspaces in color(). - Allow percentages for opacity. - Handle currentcolor more correctly. + Accessibility: Avoid markup when reading labels. + GSK: - Subset fonts when serializing node trees. - Make ngl export render_texture results as dmabufs. + Wayland: Use xdg-dialog protocol for attached dialogs. + Documentation: Widget shortcuts and actions are now described in the docs. + Debugging: Add GTK_DEBUG=css for warning about deprecated css syntax. + Tools: rendernode-tool: Add an extract command for data urls. + Deprecations: - CSS Color functions shade(), lighter(), darker(), alpha(), mix(). + Updated translations. - Update to version 4.15.1: + GtkGraphicsOffload: Don't crash without a child. + GtkSpinner: Don't animate when unmapped. + CSS: - Support the :root selector. - Support variables and custom properties. - Implement math functions. - Support modern syntax and calc in rgb() and hsl(). + Icontheme: - Make symbolic svg loading more efficient. - Handle color-free symbolics more efficiently. + Accessibility: - Make the gtk-demo sidebar search more accessible. - Stop emitting focus events. - Realize child contexts when necessary. + GDK: - Support XDG_ACTIVATION_TOKEN. - dmabuf: Be more defensive when importing unknown formats to GL. ... changelog too long, skipping 18 lines ... + Updated translations. ==== ibus-libpinyin ==== - Fix boo#1228652 * Use default python3 version * need python311-gobject-Gdk on Leap 15 and python3-gobject-Gdk on Tumbleweed ==== kirigami-addons6 ==== Version update (1.3.0 -> 1.4.0) Subpackages: kirigami-addons6-lang - Update to 1.4.0 https://carlschwan.eu/2024/07/23/kirigami-addons-1.4/ * New module to manage actions similar to that we can find in the QtWidgets world * The FormCard design was tweaked a bit more when using a dark theme * New component to the FormCard collection: FormTextAreaDelegate ==== mutter ==== Subpackages: mutter-lang - Rebase mutter-SLE-relax-some-constraints-on-CSD-windows.patch. ==== openSUSE-release ==== Version update (20240731 -> 20240801) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== openldap2 ==== Version update (2.6.7 -> 2.6.8) Subpackages: libldap-data libldap2 libldap2-32bit openldap2-client - Update to relese 2.6.8 * slapd: ability to log directly to a file bypassing syslog * back-ndb has been retired * back-sql and back-perl have been deprecated * lloadd enhancments: * Additional load balancing strategies * Additional options to improve coherence with certain controls and extended operations * Ability to log directly to a file bypassing syslog - Delete gcc14.patch, openldap2-fb9e6a81bbee.patch (merged) - Drop rcslapd symlink - Backported one hunk from upstream commit fb9e6a81bbee as openldap2-fb9e6a81bbee.patch to fix incompatible pointer type being passed to a function which is diagnosed as an error by GCC 14. ==== openldap2-contrib-src ==== Version update (2.6.7 -> 2.6.8) - Update to relese 2.6.8 * slapd: ability to log directly to a file bypassing syslog * back-ndb has been retired * back-sql and back-perl have been deprecated * lloadd enhancments: * Additional load balancing strategies * Additional options to improve coherence with certain controls and extended operations * Ability to log directly to a file bypassing syslog - Delete gcc14.patch, openldap2-fb9e6a81bbee.patch (merged) - Drop rcslapd symlink - Backported one hunk from upstream commit fb9e6a81bbee as openldap2-fb9e6a81bbee.patch to fix incompatible pointer type being passed to a function which is diagnosed as an error by GCC 14. ==== python-Jinja2 ==== - Cherry-pick patch from Fedora to fix FTBFS with Python 3.13 * fix-ftbfs-with-python313.patch - Add new build dependency python-trio to BuildRequires ==== python-Twisted ==== Subpackages: python311-Twisted python311-Twisted-tls - Add a couple of upstream patches to fix http process information disclosure (CVE-2024-41671, bsc#1228549) and XSS via html injection (CVE-2024-41810, bsc#1228552): * CVE-2024-41671.patch gh#twisted/twisted@4a930de12fb6 * CVE-2024-41810.patch gh#twisted/twisted@046a164f89a0 ==== python-ptyprocess ==== - Cherry-pick upstream patch to fix tests with Python 3.13. * remove-old-unittest-functions.patch ==== rng-tools ==== - Do not specify a fill-watermark in the service file to fix non- starting service since 6.17, use auto-detection (boo#1228245) ==== samba ==== Version update (4.20.2+git.348.4fb6af61307 -> 4.20.2+git.350.4cfcde9cdb) Subpackages: libsamba-policy0-python3 samba-ad-dc-libs samba-client samba-client-32bit samba-client-libs samba-client-libs-32bit samba-gpupdate samba-ldb-ldap samba-libs samba-libs-python3 samba-python3 samba-winbind samba-winbind-libs samba-winbind-libs-32bit - Update samba-tool package to require python3-Markdown also in the Heimdal ADDC build. ==== selinux-policy ==== Version update (20240726 -> 20240731) Subpackages: selinux-policy-targeted - Update to version 20240731: * Fix labels for bind/named (bsc#1228372) - Update to version 20240729: * Label /usr/libexec/netconfig/ppp/ip-up pppd_initrc_exec_t (bsc#1228385) * Allow pppd to manage sysnet directories (bsc#1228385) ==== thunar ==== Version update (4.18.10 -> 4.18.11) Subpackages: libthunarx-3-0 thunar-lang - Update to 4.18.11: * Use parent windows for undo/redo dialog (#1393) * Fix for misc_open_new_windows_in_split_view (#889) * Dont add directories to recent:/// (#1372) * build: clang: Fix -Wmissing-noreturn * build: clang: Fix -Wsingle-bit-bitfield-constant-conversion * Focus split view pane on DnD events (#1243) * Dont reload folder when "draw_frames" is set (#1337) * Allow submenu UCAs in toolbar (#780) * Fix shortcuts for ucas in subfolders (#1043) * Dont show 'open location' on recent icon(#1297) * Fix for image preview visibility (#1285) * Prevent focus stealing of file transfer dialog (#643) * Dont update "last-view" when searching (#1278) * Translation Updates ==== vim ==== Version update (9.1.0588 -> 9.1.0636) Subpackages: vim-data vim-data-common xxd - Update to 9.1.0636: * 9.1.0636: filetype: ziggy files are not recognized * 9.1.0635: filetype: SuperHTML template files not recognized * 9.1.0634: Ctrl-P not working by default * 9.1.0633: Compilation warnings with `-Wunused-parameter` * 9.1.0632: MS-Windows: Compiler Warnings Add support for Files-Included in syntax script tweak documentation style a bit * 9.1.0631: wrong completion list displayed with non-existing dir + fuzzy completion * 9.1.0630: MS-Windows: build fails with VIMDLL and mzscheme * 9.1.0629: Rename of pum hl_group is incomplete * 9.1.0628: MinGW: coverage files are not cleaned up * 9.1.0627: MinGW: build-error when COVERAGE is enabled * 9.1.0626: Vim9: need more tests with null objects include initial filetype plugin * 9.1.0625: tests: test output all translated messages for all translations * 9.1.0624: ex command modifiers not found * 9.1.0623: Mingw: errors when trying to delete non-existing files * 9.1.0622: MS-Windows: mingw-build can be optimized * 9.1.0621: MS-Windows: startup code can be improved * 9.1.0620: Vim9: segfauls with null objects * 9.1.0619: tests: test_popup fails * 9.1.0618: cannot mark deprecated attributes in completion menu * 9.1.0617: Cursor moves beyond first line of folded end of buffer * 9.1.0616: filetype: Make syntax highlighting off for MS Makefiles * 9.1.0615: Unnecessary STRLEN() in make_percent_swname() Add single-line comment syntax Add syntax test for comments Update maintainer info * 9.1.0614: tests: screendump tests fail due to recent syntax changes * 9.1.0613: tests: termdebug test may fail and leave file around Update base-syntax, improve :set highlighting Optionally highlight the :: token for method references * 9.1.0612: filetype: deno.lock file not recognized Use delete() for deleting directory escape filename before trying to delete it * 9.1.0611: ambiguous mappings not correctly resolved with modifyOtherKeys correctly extract file from zip browser * 9.1.0610: filetype: OpenGL Shading Language files are not detected Fix endless recursion in netrw#Explore() * 9.1.0609: outdated comments in Makefile update syntax script Fix flow mapping key detection Remove orphaned YAML syntax dump files * 9.1.0608: Coverity warns about a few potential issues Update syntax script and remove syn sync * 9.1.0607: termdebug: uses inconsistent style * 9.1.0606: tests: generated files may cause failure in test_codestyle * 9.1.0605: internal error with fuzzy completion * 9.1.0604: popup_filter during Press Enter prompt seems to hang translation: Update Serbian messages translation * 9.1.0603: filetype: use correct extension for Dracula * 9.1.0602: filetype: Prolog detection can be improved fix more inconsistencies in assert function docs * 9.1.0601: Wrong cursor position with 'breakindent' when wide char doesn't fit Update base-syntax, improve :map highlighting * 9.1.0600: Unused function and unused error constants * 9.1.0599: Termdebug: still get E1023 when specifying arguments correct wrong comment options fix typo "a xterm" -> "an xterm" * 9.1.0598: fuzzy completion does not work with default completion * 9.1.0597: KeyInputPre cannot get the (unmapped typed) key * 9.1.0596: filetype: devscripts config files are not recognized gdb file/folder check is now performed only in CWD. quote filename arguments using double quotes update syntax to SDC-standard 2.1 minor updates. Cleanup :match and :loadkeymap syntax test files Update base-syntax, match types in Vim9 variable declarations * 9.1.0595: make errors out with the po Makefile * 9.1.0594: Unnecessary redraw when setting 'winfixbuf' using wrong highlight for UTF-8 include simple syntax plugin * 9.1.0593: filetype: Asymptote files are not recognized add recommended indent options to ftplugin add recommended indent options to ftplugin add recommended indent options to ftplugin * 9.1.0592: filetype: Mediawiki files are not recognized * 9.1.0591: filetype: *.wl files are not recognized * 9.1.0590: Vim9: crash when accessing getregionpos() return value 'cpoptions': Include "z" in the documented default * 9.1.0589: vi: d{motion} and cw work differently than expected update included colorschemes grammar fixes in options.txt - Add "Keywords" to gvim.desktop to make searching for gvim easier ==== vte ==== Subpackages: libvte-2_91-0 typelib-1_0-Vte-2_91 vte-lang - Only apply vte-revert-back-to-c++17.patch for SLE <= 15. ==== xfce4-screenshooter ==== Version update (1.11.0 -> 1.11.1) Subpackages: xfce4-screenshooter-lang xfce4-screenshooter-plugin - Update to 1.11.1 * Drop unnecessary libxml dependency * Translation Updates

1 0

Tumbleweed - Review of the week 2024/31
by Dominique Leuenberger 02 Aug '24

02 Aug '24

Dear Tumbleweed users and hackers, As it happens every now, there are weeks when we build more snapshots than we publish. That’s exactly what happened during this week. We held back two snapshots – one due to kernel 6.10 which behaved very strange on QXL graphics, and the 2nd one due to sstemd 256 vs kiwi fights, where initrd is now extra protected and made some kiwi features misbehave, incl. self-install on MicroOS. So these were at least some things openQA could protect our users. Unfortunately, some issues with systemd and Aeon have remained unnoticed; see https://bugzilla.opensuse.org/show_bug.cgi?id=1228659) Besides all this, we have released 4 snapshots during this week (0726, 0730, 0731, and 0801), containing these updates: * Qemu 9.0.2 * bind 9.20.0 * AppArmor 4.0.2 * cURL 8.9.0 * Linux kernel 6.10.2 * 389-ds 3.1.1 * Mozilla Firefox 128.0.3 * git 2.46.0 * sysuser-tools 3.3 * cryptsetup 2.7.4 The staging areas are currently filled with these packages, many of them almost ready to be shipped: * Mesa 24.1.5 * GStreamer 1.24.6 * GCC 14.2.0 * cURL 8.9.1: breaks test suites of libzypp and python-tornado6 * glibc 2.40: The only build failure left is samba * Rust 1.80: virtiofsd is the one holding up here * nftables 1.1.0: openQA is far from happy; nftables’ python bindings seem not to work * go 1.22 as default: only transactional-update-notifier seems to be blocking * Switch the default ffmpeg version from 6 to 7: mostly xine-lib and qt*-webengine failing; forcibly using older versions is still possible, as many packages are explicitly still on ffmpeg-4 * dbus-broker: some networking issue after upgrades left to work out * GCC 14: phase 2: use gcc14 as the default compiler – lots of help needed: https://build.opensuse.org/project/show/openSUSE:Factory:Staging:Gcc7 Cheers, Dominique

1 0

mkosi-initrd: initial enablement for Tumbleweed
by Antonio Feijoo 02 Aug '24

02 Aug '24

Hi! For those of you who want to experiment with an alternative initrd generator, I've prepared the initial enablement of mkosi-initrd for Tumbleweed. Why is it interesting and different from other initrd generators? Mainly, because it builds the initrd from distro packages instead of picking everything from your local host. Analysis and instructions: https://en.opensuse.org/Mkosi-initrd *A big warning here*: this is just a proof of concept, an incomplete initrd can break the system boot, so always keep a copy of a working image. Feedback is appreciated. Have fun! -- Antonio Álvarez Feijoo System Boot and Init SUSE

2 1

Re: How to package telegram-desktop with dependency of openh264?
by Xu Zhao 02 Aug '24

02 Aug '24

I can try with adding openSUSE-repos. Can I have a code pointer of how to enable it in obs build? Best, Xu -- Xu Zhao i(a)xuzhao.net On Thu, Aug 1, 2024, at 11:30 AM, Lubos Kocman wrote: > Hmm what about putting a dependency on openSUSE-repos which enables by default openh264 repo? But that would not ensure installation of the package I guess telegram could then suggests the installation of openh264 It sound a bit fragile to be honest. Any other ideas? > > Best regards > > Luboš Kocman > openSUSE Leap Release Manager > > > čt 1. 8. 2024 v 15:55 odesílatel Xu Zhao <i(a)xuzhao.net> napsal: >> Hello all, >> >> I am the maintainer of telegram-desktop package in OSS and I am seeking advice about how to update the package as its recent change is blocked by openSUSE's openh264 license issue. >> >> 2 weeks ago, tg_owt made a commit to use system-level openh264 instead of bundled version (https://github.com/desktop-app/tg_owt/commit/204f1abf4646a77b5c6903bd2cc850…) this will break the build of telegram-desktop on b.o.o obs because on opensuse openh264 is distributed separately at https://codecs.opensuse.org/openh264/openSUSE_Tumbleweed/x86_64/. >> >> I can think of the following options: >> 1. patch tg_owt to make openh264 an optional dependency instead of hard dependency, but this will probably be rejected by upsteam and we have to maintain our own patchset. >> 2. bundle openh264 library with tg_owt and maintain the previous behavior, but I am not sure if this will violate the rules of OBS >> 3. delete telegram-desktop package on b.o.o (https://build.opensuse.org/package/show/server:messaging/telegram-desktop) and ask users to use the flatpak version >> 4. if there is a plan to push openh264 into OSS factory, we can keep telegram-desktop and wait until openh264 is available in OSS factory repo. >> >> Please advice on which option we should take, or if you have other opinions. Your advice is much appreciated. >> >> Best, >> Xu Zhao >> >> -- >> Xu Zhao >> i(a)xuzhao.net

5 6

New Tumbleweed snapshot 20240731 released!
by Dominique Leuenberger 02 Aug '24

02 Aug '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: 389-ds (3.0.1~git39.e24615f -> 3.1.1~git0.aef1668) MozillaFirefox (128.0 -> 128.0.3) coreutils coreutils-systemd git (2.45.2 -> 2.46.0) libX11 (1.8.9 -> 1.8.10) libzypp (17.35.1 -> 17.35.6) openSUSE-release (20240730 -> 20240731) p11-kit perl-Bootloader (1.13 -> 1.14) python-cryptography (42.0.8 -> 43.0.0) python-pycairo (1.26.0 -> 1.26.1) python311 python311-core systemd-presets-branding-Aeon sysuser-tools (3.2 -> 3.3) === Details === ==== 389-ds ==== Version update (3.0.1~git39.e24615f -> 3.1.1~git0.aef1668) Subpackages: lib389 libsvrcore0 - Update to version 3.1.1~git0.aef1668: * Bump version to 3.1.1 * Issue 6256 - nsslapd-numlisteners limit is not enforced (#6257) * Issue 5327 - Fix test metadata * Security fix for CVE-2024-6237 * Security fix for CVE-2024-5953 * Security fix for CVE-2024-3657 * Security fix for CVE-2024-2199 * Issue 6256 - nsslapd-numlisteners limit is not enforced * Issue 6265 - lmdb - missing entries in range searches (#6266) * Issue 5853 - Update Cargo.lock * Bump openssl from 0.10.64 to 0.10.66 in /src * Issue 6245 - Revert __COVERITY__ ifndef (#6268) * Issue 6248 - fix fanalyzer warnings (#6253) * Issue 6238 - Fix test_audit_json_logging CI test regression (#6264) * Issue 6254 - Enabling replication for a sub suffix crashes browser (#6255) * Issue 6155 - ldap-agent fails to start because of permission error (#6179) * Issue 6238 - RFE - add option to write audit log in JSON format * Issue 6216 - CI test_fast_slow_import sometime fail (#6247) * Issue 6245 - covscan fixes (#6246) * Issue 6241 - Add support for CRYPT-YESCRYPT (#6242) * Issue 6229 - After an initial failure, subsequent online backups fail (#6230) * Issue 6236 - rpm: fix compatibility with RPM 4.20 * Issue 6227 - dsconf schema does not show inChain matching rule (#6228) * Issue 6233 - CI test wait_for_async_feature_test sometime fails (#6234) * Bump ws from 7.5.9 to 7.5.10 in /src/cockpit/389-console * Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes (#6225) * Issue 6222 - CI test acl/test_timeofday_keyword sometime fails (#6223) * Issue 6120 - /usr/lib64/dirsrv/plugins/libback-bdb.so has an invalid-looking DT_RPATH: /usr/lib/dirsrv * Issue 5772 - ONE LEVEL search fails to return sub-suffixes (#6219) * Issue 6183 - Slow ldif2db import on a newly created BDB backend (#6208) * Issue 6207 - Random crash in test_long_rdn CI test (#6215) * Bump braces from 3.0.2 to 3.0.3 in /src/cockpit/389-console * Issue 6191 - Node.js 16 actions are deprecated * Issue 6199 - unprotected search query during certificate based authentication (#6205) * Issue 6200 - Disable WebUI CI tests * Issue 6192 - Test failure: test_match_large_valueset * Issue 6181 - RFE - Allow system to manage uid/gid at startup * Issue 6188 - Add nsslapd-haproxy-trusted-ip to cn=schema (#6201) * Issue 6181 - RFE - Allow system to manage uid/gid at startup (#6182) * Issue 6170 - audit log buffering doesn't handle large updates * Issue 6193 - Test failure: test_tls_command_returns_error_text * Issue 6177 - Spec file cleanup * Issue 6189 - CI tests fail with `[Errno 2] No such file or directory: '/var/cache/dnf/metadata_lock.pid'` * Issue 6175 - Referential integrity plugin - in referint_thread_func does not handle null from ldap_utf8strtok (#6168) * Change default salt sizes generated in crypt_pwd (#6185) * Issue 6123 - Allow DNA plugin to reuse global config for bind method and connection protocol (#6124) * Issue 6159 - Add a test to check URP add and delete conflict (#6160) * Issue 6151 - Use %bcond macro for conditional builds in the spec file * Issue 6172 - RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) (#6173) * Bump version to 3.1.0 * fix issue6165 (#6167) ==== MozillaFirefox ==== Version update (128.0 -> 128.0.3) Subpackages: MozillaFirefox-translations-common - Firefox 128.0.3 Release * Fixed: Fixed an issue causing some sites to not load when connecting via HTTP/2. (bmo#1908161, bmo#1909666) * Fixed: Fixed collapsed table rows not appearing when expected in some situations. (bmo#1907789) * Fixed: Fixed the Windows on-screen keyboard potentially concealing the webpage when displayed. (bmo#1907766) - Firefox 128.0.2 Release * Fixed: Fixed an audio echo in video calls on macOS under certain conditions. (bmo#1908539) * Fixed: Fixed an issue where the Adguard extension popup was not displaying. (bmo#1906132) * Fixed: Fixed an issue causing some screen readers to fail to read when navigating by character in rich text editors. (Bug 1905021) * Fixed: Fixed visual glitches when dark mode is enabled in Windows ARM devices. (bmo#1897444) * Fixed: Fixed an issue causing NTLM authentication failure. (bmo#1908115) * Fixed: Fixed an issue where content displayed on mouseover was not captured in a screenshot. (bmo#1905468) * Fixed: Various stability fixes. - renamed firefox-3781e3117706.patch to mozilla-bmo1905018.patch to conform with patch structure and naming for the package ==== coreutils ==== Subpackages: coreutils-lang - Avoid empty scriptlets ==== coreutils-systemd ==== - Avoid empty scriptlets ==== git ==== Version update (2.45.2 -> 2.46.0) Subpackages: git-core git-email git-svn git-web perl-Git - update to 2.46.0 UI, Workflows & Features * The "--rfc" option of "git format-patch" learned to take an optional string value to be used in place of "RFC" to tweak the "[PATCH]" on the subject header. * The credential helper protocol, together with the HTTP layer, have been enhanced to support authentication schemes different from username & password pair, like Bearer and NTLM. * Command line completion script (in contrib/) learned to complete "git symbolic-ref" a bit better (you need to enable plumbing commands to be completed with GIT_COMPLETION_SHOW_ALL_COMMANDS). * When the user responds to a prompt given by "git add -p" with an unsupported command, list of available commands were given, which was too much if the user knew what they wanted to type but merely made a typo. Now the user gets a much shorter error message. * The color parsing code learned to handle 12-bit RGB colors, spelled as "#RGB" (in addition to "#RRGGBB" that is already supported). * The operation mode options (like "--get") the "git config" command uses have been deprecated and replaced with subcommands (like "git config get"). * "git tag" learned the "--trailer" option to futz with the trailers in the same way as "git commit" does. * A new global "--no-advice" option can be used to disable all advice messages, which is meant to be used only in scripts. * Updates to symbolic refs can now be made as a part of ref transaction. * The trailer API has been reshuffled a bit. * Terminology to call various ref-like things are getting straightened out. * The command line completion script (in contrib/) has been adjusted to the recent update to "git config" that adopted subcommand based UI. * The knobs to tweak how reftable files are written have been made available as configuration variables. * When "git push" notices that the commit at the tip of the ref on the other side it is about to overwrite does not exist locally, it used to first try fetching it if the local repository is a partial clone. The command has been taught not to do so and immediately fail instead. * The promisor.quiet configuration knob can be set to true to make lazy fetching from promisor remotes silent. * The inter/range-diff output has been moved to the end of the patch when format-patch adds it to a single patch, instead of writing it before the patch text, to be consistent with what is done for a cover letter for a multi-patch series. * A new command has been added to migrate a repository that uses the files backend for its ref storage to use the reftable backend, with limitations. * "git diff --exit-code --ext-diff" learned to take the exit status of the external diff driver into account when deciding the exit status of the overall "git diff" invocation when configured to do so. * "git update-ref --stdin" learned to handle transactional updates of symbolic-refs. * "git format-patch --interdiff" for multi-patch series learned to turn on cover letters automatically (unless told never to enable cover letter with "--no-cover-letter" and such). * The "--heads" option of "ls-remote" and "show-ref" has been been deprecated; "--branches" replaces "--heads". * For over a year, setting add.interactive.useBuiltin configuration variable did nothing but giving a "this does not do anything" warning. The warning has been removed. * The http transport can now be told to send request with authentication material without first getting a 401 response. * A handful of entries are added to the GitFAQ document. * "git var GIT_SHELL_PATH" should report the path to the shell used to spawn external commands, but it didn't do so on Windows, which has been corrected. Performance, Internal Implementation, Development Support etc. * Advertise "git contacts", a tool for newcomers to find people to ask review for their patches, a bit more in our developer documentation. * In addition to building the objects needed, try to link the objects that are used in fuzzer tests, to make sure at least they build without bitrot, in Linux CI runs. * Code to write out reftable has seen some optimization and simplification. * Tests to ensure interoperability between reftable written by jgit and our code have been added and enabled in CI. * The singleton index_state instance "the_index" has been eliminated by always instantiating "the_repository" and replacing references to "the_index" with references to its .index member. * Git-GUI has a new maintainer, Johannes Sixt. * The "test-tool" has been taught to run testsuite tests in parallel, bypassing the need to use the "prove" tool. * The "whitespace check" task that was enabled for GitHub Actions CI has been ported to GitLab CI. * The refs API lost functions that implicitly assumes to work on the primary ref_store by forcing the callers to pass a ref_store as an argument. * Code clean-up to reduce inter-function communication inside builtin/config.c done via the use of global variables. * The pack bitmap code saw some clean-up to prepare for a follow-up topic. * Preliminary code clean-up for "git send-email". * The default "creation-factor" used by "git format-patch" has been raised to make it more aggressively find matching commits. * Before discovering the repository details, We used to assume SHA-1 as the "default" hash function, which has been corrected. Hopefully this will smoke out codepaths that rely on such an unwarranted ... changelog too long, skipping 230 lines ... (merge 616e94ca24 tb/doc-max-tree-depth-fix later to maint). ==== libX11 ==== Version update (1.8.9 -> 1.8.10) Subpackages: libX11-6 libX11-data libX11-xcb1 - Update to 1.8.10; this release includes: * Re-fix XIM input sometimes jumbled (#205, #206, #207, #208, !246) * Fix various static analysis errors (!250) * Add compose sequences for Arabic hamza (!218), Ezh (!221), and hryvnia currency (!259) * Make colormap private interfaces thread safe (#215, !254) * Fix deadlock in XRebindKeysym() (!256) * Assorted memory handling cleanups (!251, !258) * Restore VAX support still in use by NetBSD (!257) ==== libzypp ==== Version update (17.35.1 -> 17.35.6) - Export CredentialManager for legacy YAST versions (bsc#1228420) - version 17.35.6 (35) - Export asSolvable for YAST (bsc#1228420) - Fix 4 typos in zypp.conf. - version 17.35.5 (35) - Fix typo in the geoip update pipeline (bsc#1228206) - Export RepoVariablesStringReplacer for yast2 (bsc#1228138) - version 17.35.4 (35) - Translation: updated .pot file. - Conflict with python zypp-plugin < 0.6.4 (bsc#1227793) Older zypp-plugins reject stomp headers including a '-'. Like the 'content-length' header we may send. - Fix int overflow in Provider (fixes #559) This patch fixes an issue in safe_strtonum which caused timestamps to overflow in the Provider message parser. - Fix error reporting on repoindex.xml parse error (bsc#1227625) - version 17.35.3 (35) - Keep UrlResolverPlugin API public (fixes #560) - Blacklist /snap executables for 'zypper ps' (bsc#1226014) - Fix handling of buddies when applying locks (bsc#1225267) Buddy pairs (like -release package and product) internally share the same status object. When applying locks from query results the locked bit must be set if either item is locked. - version 17.35.2 (35) ==== openSUSE-release ==== Version update (20240730 -> 20240731) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== p11-kit ==== Subpackages: libp11-kit0 libp11-kit0-32bit p11-kit-tools - Added a backport of an upstream commit in p11-kit-d938f4a8a3a2.patch to avoid passing an incompatible pointer type to a function which is an error by default in GCC 14. ==== perl-Bootloader ==== Version update (1.13 -> 1.14) - merge gh#openSUSE/perl-bootloader#169 - support grub2-bls (bsc#1226676, bsc#1208135) - better config file reading - add check whether bootloader is supported - unit test output changed, adjust reference data - adjust GRUB_ENABLE_BLSCFG when setting grub2-bls - add config, install, add-kernel, remove-kernel for grub2-bls - support --default option for grub2* - unify cmdline parsing code and move to library - add missing options for bls conforming loaders - updated tests - unify test case names - adjust documentation - 1.14 ==== python-cryptography ==== Version update (42.0.8 -> 43.0.0) - update to 43.0.0: * BACKWARDS INCOMPATIBLE: Support for OpenSSL less than 1.1.1e has been removed. Users on older version of OpenSSL will need to upgrade. * BACKWARDS INCOMPATIBLE: Dropped support for LibreSSL < 3.8. * Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.3.1. * Updated the minimum supported Rust version (MSRV) to 1.65.0, from 1.63.0. * :func:`~cryptography.hazmat.primitives.asymmetric.rsa.generat e_private_key` now enforces a minimum RSA key size of 1024-bit. Note that 1024-bit is still considered insecure, users should generally use a key size of 2048-bits. * :func:`~cryptography.hazmat.primitives.serialization.pkcs7.se rialize_certificates` now emits ASN.1 that more closely follows the recommendations in RFC 2315. * Added new :doc:`/hazmat/decrepit/index` module which contains outdated and insecure cryptographic primitives. :class:`~cryp tography.hazmat.primitives.ciphers.algorithms.CAST5`, :class: `~cryptography.hazmat.primitives.ciphers.algorithms.SEED`, :c lass:`~cryptography.hazmat.primitives.ciphers.algorithms.IDEA `, and :class:`~cryptography.hazmat.primitives.ciphers.algori thms.Blowfish`, which were deprecated in 37.0.0, have been added to this module. They will be removed from the cipher module in 45.0.0. * Moved :class:`~cryptography.hazmat.primitives.ciphers.algorit hms.TripleDES` and :class:`~cryptography.hazmat.primitives.ci phers.algorithms.ARC4` into :doc:`/hazmat/decrepit/index` and deprecated them in the cipher module. They will be removed from the cipher module in 48.0.0. * Added support for deterministic :class:`~cryptography.hazmat.primitives.asymmetric.ec.ECDSA` (RFC 6979) * Added support for client certificate verification to the :mod:`X.509 path validation <cryptography.x509.verification>` APIs in the form of :class:`~cryptography.x509.verification.ClientVerifier`, :class:`~cryptography.x509.verification.VerifiedClient`, and PolicyBuilder :meth:`~cryptography.x509.verification.PolicyBu ilder.build_client_verifier`. * Added Certificate :attr:`~cryptography.x509.Certificate.publi c_key_algorithm_oid` and Certificate Signing Request :attr:`~ cryptography.x509.CertificateSigningRequest.public_key_algori thm_oid` to determine the :class:`~cryptography.hazmat._oid.PublicKeyAlgorithmOID` Object Identifier of the public key found inside the certificate. * Added :attr:`~cryptography.x509.InvalidityDate.invalidity_dat e_utc`, a timezone-aware alternative to the naÃ¯ve datetime attribute :attr:`~cryptography.x509.InvalidityDate.invalidity_date`. * Added support for parsing empty DN string in :meth:`~cryptography.x509.Name.from_rfc4514_string`. * Added the following properties that return timezone-aware datetime objects: :meth:`~cryptography.x509.ocsp.OCSPResponse.produced_at_utc`, :meth:`~cryptography.x509.ocsp.OCSPResponse.revocation_time_u tc`, :meth:`~cryptography.x509.ocsp.OCSPResponse.this_update_utc`, :meth:`~cryptography.x509.ocsp.OCSPResponse.next_update_utc`, :meth:`~cryptography.x509.ocsp.OCSPSingleResponse.revocation_ time_utc`, :meth:`~cryptography.x509.ocsp.OCSPSingleResponse. this_update_utc`, :meth:`~cryptography.x509.ocsp.OCSPSingleRe sponse.next_update_utc`, These are timezone-aware variants of existing properties that return naÃ¯ve datetime objects. * Added :func:`~cryptography.hazmat.primitives.asymmetric.rsa.r sa_recover_private_exponent` * Added :meth:`~cryptography.hazmat.primitives.ciphers.CipherCo ntext.reset_nonce` for altering the nonce of a cipher context without initializing a new instance. See the docs for additional restrictions. * :class:`~cryptography.x509.NameAttribute` now raises an exception when attempting to create a common name whose length is shorter or longer than RFC 5280 permits. * Added basic support for PKCS7 encryption (including SMIME) via :class:`~cryptography.hazmat.primitives.serialization.pkc s7.PKCS7EnvelopeBuilder`. - add use-offline-build.patch ==== python-pycairo ==== Version update (1.26.0 -> 1.26.1) - Update to 1.26.1 * Fix Surface.set_mime_data() with Python 3.13 :pr:`366` This also fixes the test suite with Python 3.13b2. * Update vendored Windows wheel dependencies :pr:`370` ==== python311 ==== Subpackages: python311-curses python311-dbm python311-x86-64-v3 - Remove %suse_update_desktop_file macro as it is not useful any more. - Adding bso1227999-reproducible-builds.patch fixing bsc#1227999 adding reproducibility patches from gh#python/cpython!121872 and gh#python/cpython!121883. - Stop using %%defattr, it seems to be breaking proper executable attributes on /usr/bin/ scripts (bsc#1227378). ==== python311-core ==== Subpackages: libpython3_11-1_0 libpython3_11-1_0-x86-64-v3 python311-base python311-base-x86-64-v3 - Remove %suse_update_desktop_file macro as it is not useful any more. - Adding bso1227999-reproducible-builds.patch fixing bsc#1227999 adding reproducibility patches from gh#python/cpython!121872 and gh#python/cpython!121883. - Stop using %%defattr, it seems to be breaking proper executable attributes on /usr/bin/ scripts (bsc#1227378). ==== systemd-presets-branding-Aeon ==== - Enable aeon-check.service (boo#1228416) ==== sysuser-tools ==== Version update (3.2 -> 3.3) - Allow setting of UID:GID for as defined in sysusers.d

1 0

Open SRs without reaction (Virtualization:containers, network:utilities, server:http, server:monitoring)
by Johannes Kastl 01 Aug '24

01 Aug '24

Hi all, could one of the maintainers of the respective projects please have a look at those SRs, they are open for some time without any reaction... regclient => Virtualization:containers https://build.opensuse.org/request/show/1187279 hurl => server:http https://build.opensuse.org/request/show/1187437 termscp => network:utilities https://build.opensuse.org/request/show/1188996 golang-github-prometheus-node_exporter => server:monitoring https://build.opensuse.org/request/show/1187393 Thanks in advance, Johannes

1 1

openSUSE Release Engineering meeting 31.07.2024
by Lubos Kocman 01 Aug '24

01 Aug '24

How to join the meeting? https://calendar.opensuse.org/teams/release/events/opensuse-release-enginee… All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting ## Attendees: DimStar, bittin, rbrown, Sarah, ddemaio, lkocman, DocB,Adrian, bmwiedemann, wengel NOTICE! the meeting url is https://meet.opensuse.org/meeting ## Leap Set up new test suite for gnome-agama (was gnome-live). Agama installs test passes. https://openqa.opensuse.org/admin/test_suites https://github.com/os-autoinst/os-autoinst-distri-opensuse/pull/19854 Thanks to Dee we're now using yaml based scheduling rather than main_common.pm driven if/else approach https://github.com/os-autoinst/os-autoinst-distri-opensuse/pull/19848 WIP agama test suite with needles https://github.com/os-autoinst/os-autoinst-distri-opensuse/pull/19843 (official test suite will be done in pupeteer https://progress.opensuse.org/issues/163919) Photo wallpaper / competition received a new submission many thanks! https://github.com/openSUSE/wallpapers/issues/18 Brno, Czechia "coworking office" kickoff this week. Leap Micro 6.0 sigkey update, Main repo was already auto=republished (we updated ~6 packages + repodata) Appliance TBD ## openSUSE Tumbleweed (DimStar) openSUSE:Factory build fail stats: 19 failed 4 unresolvable (last week 18 failed, 26 unresolvable) https://tinyurl.com/ysy4nnnz 434 requests accepted in the last week Most relevant updates: Kernel 6.10 systemd 256.4 cURL 8.9.0 cmake 3.30.1 meson 1.5.0 & 1.5.1 Soon: libzypp 17.35.6; yast failures have been resolved (symbol visibility) Mozilla Firefox 128.0.3 Rust 1.80 git 2.46.0 Blocked: glibc 2.40: FTBFS chrony and samba nftables: ERROR: 'python-nftables' failed: internal:0:0-0 python312 (FTBFS: python-xmlschema, python-Twisted:test) ### longer-lasting topics Switch default LSM from AppArmor to SELinux, see https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… GCC 14: second phase ongoing, use gcc14 as the default compiler (Staging:Gcc7): 14 failed, 9 unresolvable go1.22 as default go version, blocked on i586 with packages which export CGO_ENABLED=0 and go build -buildmode pie https://github.com/golang/go/issues/64875 traking at https://bugzilla.opensuse.org/show_bug.cgi?id=1221095 - only waiting for transactional-update-notifier fixed on i586 dbus-broker as default dbus session manager, now everything builds, some openQA checks failing. ## Richard (Aeon+botmaster) Aeon RC3 is OUT with full disk encryption (including TPM unlock*) by default https://www.reddit.com/r/AeonDesktop/comments/1edi3tr/aeon_rc3_released/ *if supported by the available hardware One slight screw up results in current RC3 installations getting a TPM configuration that is both weaker and more fragile than expected The long promised aeon-check tool has therefore been put together to find and detect this issue on existing machines - users shouldn't have to do anything. Just waiting on Checkin to Factory Meanwhile testing fixes to tik to prevent the issue occuring on fresh installations ## Max (AWAY TODAY) ## Guillaume - Arm (AWAY TODAY) ## Sarah - s390x Tumbleweed: * can not setup sysfs for hvc: * kernel bug by IBM: https://bugzilla.suse.com/show_bug.cgi?id=1228425 -> kernel patch delivered 1 hour after mirror (how to test patch for installation) Sarah to talk to people at SUSE ## Doug * openSUSE.Asia Summit * CfP is open until August 4 * 44 Submission (+7 from last week) * Logo selected & winner informed https://groups.google.com/g/opensuseasia-summit/c/wkSke0a6His * Monthly TW blog published * Aeon RC3 * Article released * Gaining media coverage * TSP * New submissions added. * More marketing materials ordered * FrOSCon * Marketing material provided for booth * GSoC * Finals will be August 26 - Sept. 2 (For most) * AI topics (static) ## Dirk Not available ## Wolfgang (Package Hub), Scott Bahling no news ## Maintenance team (Marcus, Robert) (AWAY TODAY) Struggle with 15 SP6 openQA side. Robert and Marcus will talk to Richard Fan. Chromium updates are flowing in. * one snapper issue waiting for kernel fix. We need a help from QE. ## Adrian - OBS * We're still having reports with missing data after yesterdays storage situation. * Datacenters are back to normal again ## Bernhard - Slowroll next version bump coming soon (in 9d). Got reports about bugs, but not enough time to test/debug/fix. ## Bernhard - reproducible builds made major progress - see https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… ## Open Floor bmwiedemann: testing reproducibility of Factory submissions : do 3 builds (2 extra) in adi and :Staging projects to be able to compare results ; since this is only for x86_64 and not published, it should be fine with OBS-resources.

1 0

New Tumbleweed snapshot 20240730 released!
by Dominique Leuenberger 31 Jul '24

31 Jul '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: NetworkManager apparmor (4.0.1 -> 4.0.2) b43-fwcutter clamav colord curl (8.8.0 -> 8.9.0) ffmpeg-4 ffmpeg-6 fprintd (1.94.2 -> 1.94.3) fwupd (1.9.21 -> 1.9.22) kernel-source (6.9.9 -> 6.10.2) libapparmor (4.0.1 -> 4.0.2) linux-glibc-devel (6.9 -> 6.10) mariadb-connector-c openSUSE-release (20240726 -> 20240730) openblas_openmp openblas_pthreads pciutils python-kiwi (10.0.25 -> 10.0.27) rubygem-nokogiri (1.15.5 -> 1.16.6) rubygem-ruby-augeas selinux-policy (20240715 -> 20240726) supermin systemd (255.8 -> 256.4) taglib (2.0 -> 2.0.1) virt-manager wtmpdb (0.12.0+git.20240508 -> 0.13.0+git.20240726) yast2 (5.0.8 -> 5.0.9) === Details === ==== NetworkManager ==== Subpackages: NetworkManager-bluetooth NetworkManager-lang NetworkManager-tui NetworkManager-wwan libnm0 typelib-1_0-NM-1_0 - Add NetworkManager-dont-renew-bridge-dhcp-if-no-mac-on-wakeup.patch: manager: don't renew dhcp lease when software devices' MAC is empty (bsc#1225498, glfd#NetworkManager/NetworkManager#1587). ==== apparmor ==== Version update (4.0.1 -> 4.0.2) Subpackages: apparmor-abstractions apparmor-docs apparmor-parser apparmor-parser-lang apparmor-profiles apparmor-utils apparmor-utils-lang python3-apparmor - update to AppArmor 4.0.2 - bugfix release with lots of fixes in all areas - add new userns profiles for balena-etcher, chromium and wike - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.0.2 for the detailed upstream changelog - drop upstream(ed) patches: - aa-remove-unknown-fix-unconfined.diff - logprof-mount-empty-source.diff - plasmashell.diff - sampa-rpcd-witness.diff - sddm-xauth.diff - teardown-unconfined.diff - test-aa-notify.diff - tools-fix-redefinition.diff - utils-relax-mount-rules-2.diff - utils-relax-mount-rules.diff - refresh GPG key (was expired) ==== b43-fwcutter ==== - Provide fallback in case %_firmwaredir is not defined ==== clamav ==== Subpackages: libclamav12 libclammspack0 libfreshclam3 - Add upstream 1305.patch to fix tests (boo#1102840, https://github.com/Cisco-Talos/clamav/issues/1300) ==== colord ==== Subpackages: colord-color-profiles colord-lang libcolord2 libcolorhug2 - Build -D_FILE_OFFSET_BITS=64 and -D_TIME_BITS=64 in order to avoid wrong type being passed to gmtime_r on i586 (and perhaps other 32bit targets). [boo#1228331] ==== curl ==== Version update (8.8.0 -> 8.9.0) Subpackages: curl-zsh-completion libcurl4 - Update to 8.9.0: * Security fixes: - [bsc#1227888, CVE-2024-6197] curl: freeing stack buffer in utf8asn1str - [bsc#1228260, CVE-2024-6874] idn: tweak buffer use when converting with macidn * Changes: - curl: add --ip-tos (IP Type of Service / Traffic Class) - curl: add --mptcp - curl: add --vlan-priority - curl: add -w '%{num_retries} - gnutls: support CA caching - mbedtls: support CURLOPT_CERTINFO - noproxy: patterns need to be comma separated - socket: support binding to interface *AND* IP - tcpkeepalive: add CURLOPT_TCP_KEEPCNT and --keepalive-cnt - urlapi: add CURLU_NO_GUESS_SCHEME - wolfssl: support CA caching * Bugfixes: - connection: shutdown TLS (for FTP) better - curl-config: revert to backticks to support old target envs - curl: allow etag and content-disposition for 3xx reply - curl: bsearch the --write-out variable name - curl: check for --disable case *sensitively* - doh: fix leak and zero-length HTTPS RR crash - file: separate fake headers and body with a stand-alone CRLF - ftp: remove redundant null pointer check in loop condition - gnutls: improve TLS shutdown - gnutls: pass in SNI name, not hostname when checking cert - hostip: skip error check for infallible function call - http/3: add shutdown support - http/3: resume upload on ack if we have more data to send - lib: add a few DEBUGASSERT(data) to aid code analyzers - lib: add failure reason on bind errors - lib: graceful connection shutdown - lib: xfer_setup and non-blocking shutdown - multi: add multi->proto_hash, a key-value store for protocol data - multi: do a final progress update on connect failure - multi: fix multi_wait() timeout handling - multi: fix pollset during RESOLVING phase - ngtcp2+quictls: fix cert-status use - noproxy: test bad ipv6 net size first - openssl/gnutls: rectify the TLS version checks for QUIC - openssl: fix hostname handling when using ECH - openssl: stop duplicate ssl key logging for legacy OpenSSL - quic: enable UDP GRO - quic: openssl quic, cmake and doc version update to 3.3.0 - quic: require at least OpenSSL 3.3 for QUIC - quic: update to quiche 0.22.0 - smtp: for starttls, do full upgrade - tool_operate: avoid explicitly setting verifypeer to 1 - tool_writeout: get certinfo only when needing it - transfer: avoid polling socket every transfer loop - transfer: conn close on paused upload - transfer: do not use EXPIRE_NOW while blocked - transfer: remove curl_upload_refill_watermark, no longer used - transfer: set CSELECT_IN if there is data pending - url: allow DoH transfers to override max connection limit - x509asn1: add some common ECDSA OIDs - x509asn1: ASN1tostr() should fail when 'constructed' is set - x509asn1: fallback to dotted OID representation - x509asn1: prevent NULL dereference - x509asn1: remove superfluous free() - x509asn1: remove two static variables * Rebase libcurl-ocloexec.patch * Remove curl-make-install-curl-config.patch upstream ==== ffmpeg-4 ==== Subpackages: libavcodec58_134 libavformat58_76 libavutil56_70 libpostproc55_9 libswresample3_9 libswscale5_9 - Add ffmpeg-c99.patch so that the package conforms to the C99 standard and builds on i586 with GCC 14. ==== ffmpeg-6 ==== Subpackages: libavcodec60 libavfilter9 libavformat60 libavutil58 libpostproc57 libswresample4 libswscale7 - Add ffmpeg-c99.patch so that the package conforms to the C99 standard and builds on i586 with GCC 14. - Add ffmpeg-6-CVE-2024-32230.patch: Backporting 96449cfe from upstream, Fix 1 line and one column images. (CVE-2024-32230 bsc#1227296) - Add ffmpeg-6-CVE-2024-32228.patch: Backporting 45964876 from upstream, Fix segfault on invalid film grain metadata. (CVE-2024-32228, bsc#1227277) - Add ffmpeg-6-CVE-2024-32228-shim-5d7f234e.patch: Backporting 5d7f234e from upstream, document that there can be multiple complex filtergraphs to prepare dependence code for CVE-2024-32228. (CVE-2024-32228, bsc#1227277) - Add ffmpeg-6-CVE-2024-32228-shim-f50382cb.patch: Backporting f50382cb from upstream, implement AFGS1 parsing. to prepare dependence code for CVE-2024-32228. (CVE-2024-32228, bsc#1227277) - Add ffmpeg-6-CVE-2024-32228-shim-1535d338.patch: Backporting 1535d338 from upstream, add AOM film grain synthesis, to prepare dependence code for CVE-2024-32228. (CVE-2024-32228, bsc#1227277) ==== fprintd ==== Version update (1.94.2 -> 1.94.3) Subpackages: fprintd-lang fprintd-pam - update to 1.94.3: * Don't try to clear storage on devices without internal storage * Build: Add option to use libelogind for DBus * Fixed loading external storage modules * Do not require bash to build (just posix sh) * Tests fixes for newer python, python-dbusmock and libfprint * Even more translation updates ==== fwupd ==== Version update (1.9.21 -> 1.9.22) Subpackages: fwupd-bash-completion fwupd-lang libfwupd2 typelib-1_0-Fwupd-2_0 - Update to version 1.9.22: + This release fixes the following bugs: - Add a PCB tag in the usi-dock GUID to distinguish different revisions. - Add explicit hidraw permission to fwupd.service to fix several devices. - Always load the flashrom plugin when using coreboot. - Be explicit with the rts54hub detach retry delay to fix the Acer D501. - Be more careful when setting thelio-io version strings. - Fix a critical warning if a device returns unexpected data from DFU upload. - Fix a critical warning if the DMI manufacturer is an empty string. - Fix several reported integer overflows from Coverity. - Fix the Blackbird and Talos II baseboard details. - Fix transient version number issue after flashing wacom-usb devices. - Increase the cros_ec acquiesce delay to manage additional reboots. - Only accept valid ASCII cabinet filenames. - Only require udevdir when gudev support is enabled. - Only show one PixArt receiver device per physical device. - Set the rts54hub version in more cases. - Speed up the daemon self tests by ~60%. - Use the bootloader build-timestamp as the fallback HWID BIOS version. + This release adds support for the following hardware: - Framework SD - Raspberry Pi 5 (unofficial) ==== kernel-source ==== Version update (6.9.9 -> 6.10.2) - Update patches.suse/drm-qxl-Pin-buffer-objects-for-internal-mappings.patch (bsc#1228387). Fix the bsc #. - commit 65a34e2 - drm/qxl: Pin buffer objects for internal mappings (bsc#1228388). - commit 691f036 - Linux 6.10.2 (bsc#1012628). - tap: add missing verification for short frame (bsc#1012628). - tun: add missing verification for short frame (bsc#1012628). - filelock: Fix fcntl/close race recovery compat path (bsc#1012628). - ALSA: seq: ump: Skip useless ports for static blocks (bsc#1012628). - ALSA: pcm_dmaengine: Don't synchronize DMA channel when DMA is paused (bsc#1012628). - arm64: dts: qcom: sm6115: Disable SS instance in Parkmode for USB (bsc#1012628). - arm64: dts: qcom: sdm845: Disable SS instance in Parkmode for USB (bsc#1012628). - arm64: dts: qcom: ipq8074: Disable SS instance in Parkmode for USB (bsc#1012628). - arm64: dts: qcom: sdm630: Disable SS instance in Parkmode for USB (bsc#1012628). - arm64: dts: qcom: ipq6018: Disable SS instance in Parkmode for USB (bsc#1012628). - arm64: dts: qcom: msm8998: Disable SS instance in Parkmode for USB (bsc#1012628). - arm64: dts: qcom: sm6350: Disable SS instance in Parkmode for USB (bsc#1012628). - arm64: dts: qcom: msm8996: Disable SS instance in Parkmode for USB (bsc#1012628). - arm64: dts: qcom: x1e80100-crd: Fix USB PHYs regulators (bsc#1012628). - arm64: dts: qcom: x1e80100-qcp: Fix the PHY regulator for PCIe 6a (bsc#1012628). - arm64: dts: qcom: x1e80100-crd: Fix the PHY regulator for PCIe 6a (bsc#1012628). - arm64: dts: qcom: qrb4210-rb2: switch I2C2 to i2c-gpio (bsc#1012628). - arm64: dts: qcom: qrb2210-rb1: switch I2C2 to i2c-gpio (bsc#1012628). - arm64: dts: qcom: x1e80100-qcp: Fix USB PHYs regulators (bsc#1012628). - arm64: dts: qcom: sc7280: Disable SuperSpeed instances in park mode (bsc#1012628). - arm64: dts: qcom: sc7180: Disable SuperSpeed instances in park mode (bsc#1012628). - ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 (bsc#1012628). - ALSA: hda/realtek: Enable headset mic on Positivo SU C1400 (bsc#1012628). - ALSA: hda/tas2781: Add new quirk for Lenovo Hera2 Laptop (bsc#1012628). - usb: gadget: midi2: Fix incorrect default MIDI2 protocol setup (bsc#1012628). - fs/ntfs3: Validate ff offset (bsc#1012628). - fs/ntfs3: Add a check for attr_names and oatbl (bsc#1012628). - jfs: don't walk off the end of ealist (bsc#1012628). - ocfs2: add bounds checking to ocfs2_check_dir_entry() (bsc#1012628). - s390/mm: Fix VM_FAULT_HWPOISON handling in do_exception() (bsc#1012628). - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (bsc#1012628). - commit d3b5079 - Revert "rpm/kernel-obs-build.spec.in: drop algif_hash from KERNEL_MODULES (bsc#1226463)" This reverts commit c9c2e244cf9031882276be043b882ccf33835a4f. Openssl was fixed: https://build.opensuse.org/request/show/1189541 - commit 178f0b6 - drm/amd/display: Take Synaptics Cascaded Topology into Account (bsc#1228093 #3495). - commit a4c3703 - Linux 6.10.1 (bsc#1012628). - thermal: core: Allow thermal zones to tell the core to ignore them (bsc#1012628). - io_uring: fix error pbuf checking (bsc#1012628). - ASoC: cs35l56: Limit Speaker Volume to +12dB maximum (bsc#1012628). - ASoC: cs35l56: Use header defines for Speaker Volume control definition (bsc#1012628). - tpm: Use auth only after NULL check in tpm_buf_check_hmac_response() (bsc#1012628). - cifs: Fix setting of zero_point after DIO write (bsc#1012628). - cifs: Fix server re-repick on subrequest retry (bsc#1012628). - cifs: fix noisy message on copy_file_range (bsc#1012628). - cifs: Fix missing fscache invalidation (bsc#1012628). - cifs: Fix missing error code set (bsc#1012628). - ext4: use memtostr_pad() for s_volume_name (bsc#1012628). - commit a57275a - Revert "drm/amd/display: FEC overhead should be checked once for mst slot nums" (bsc#1228093 #3495). - commit cee765e - update to 6.10 final - refresh configs (headers only) - commit b8b0277 ==== libapparmor ==== Version update (4.0.1 -> 4.0.2) - update to AppArmor 4.0.2 - bugfix release with lots of fixes in all areas - add new userns profiles for balena-etcher, chromium and wike - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.0.2 for the detailed upstream changelog - drop upstream(ed) patches: - aa-remove-unknown-fix-unconfined.diff - logprof-mount-empty-source.diff - plasmashell.diff - sampa-rpcd-witness.diff - sddm-xauth.diff - teardown-unconfined.diff - test-aa-notify.diff - tools-fix-redefinition.diff - utils-relax-mount-rules-2.diff - utils-relax-mount-rules.diff - refresh GPG key (was expired) ==== linux-glibc-devel ==== Version update (6.9 -> 6.10) - Update to kernel headers 6.10 ==== mariadb-connector-c ==== - Explicitly enable zstd support (new curl brings it in, and we want to ensure it to not be random): + Add pkgconfig(libzstd) BuildRequires: allow cmake to detect it. ==== openSUSE-release ==== Version update (20240726 -> 20240730) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== openblas_openmp ==== - Make sure the minimum CPU requirement set in the pkgconfig file is the same one as used for building. This also helps to maintain a reproducible build (boo#1228177). ==== openblas_pthreads ==== - Make sure the minimum CPU requirement set in the pkgconfig file is the same one as used for building. This also helps to maintain a reproducible build (boo#1228177). ==== pciutils ==== Subpackages: libpci3 - Synchronize SLE-15 and openSUSE:Factory [PED-8393, bsc#1224138]. The following patches are now obsolete in version 3.13.0: * lspci-Fixed-buffer-overflows-in-ls-tree.c.patch * pciutils-Add-PCIe-5.0-data-rate-32-GT-s-support.patch * pciutils-Add-PCIe-6.0-data-rate-64-GT-s-support.patch * pciutils-Add-decoding-of-vendor-specific-VPD-fields.patch * pciutils-VPD-Cleanup.patch * pciutils-VPD-When-printing-item-IDs-escape-non-ASCII-characte.patch ==== python-kiwi ==== Version update (10.0.25 -> 10.0.27) - Bump version: 10.0.26 â 10.0.27 - Fix dracut-interactive with systemd 256 With systemd 256, /usr (and thus also /bin/) is read-only in the initrd. Move dracut-interactive and its .service into /run instead. - Bump version: 10.0.25 â 10.0.26 - Revise scripts_testing.rst - Revise schema_extensions.rst - Pass kernel cmdline to agama In the agama integration test make sure to pass along the kernel boot parameters to allow controlling the behavior of agama better - Add <file> directive to incorporate custom files Usually custom files are managed by placing them as overlay files or archives. However, overlay files must be structured inside of a root/ subdirectory and archive files are binary data. It is therefore not straight forward to just reference one or more files as source files to the image description to be placed into the image. This commit adds a new <file> element which allows to do this. This Fixes #1953 ==== rubygem-nokogiri ==== Version update (1.15.5 -> 1.16.6) - 1.16.6: - update intree libxml2 copy (unused in our build) - update intree zlib copy (unused in our build) - [CRuby] `XML::Reader` sets the `@encoding` instance variable during reading if it is not passed into the initializer. Previously, it would remain `nil`. The behavior of `Reader#encoding` has not changed. This works around changes to how libxml2 reports the encoding used in v2.12.6. - [CRuby] `XML::Reader` defaults the encoding to UTF-8 if it's not specified in either the document or as a method parameter. Previously non-ASCII characters were serialized as NCRs in this case. [#2891] (@flavorjones) - [CRuby] Restored support for compilation by GCC versions earlier than 4.6, which was broken in v1.15.0 (540e9aee). [#3090] (@adfoster-r7) - [CRuby] Patched upstream libxml2 to allow parsing HTML5 in the context of a namespaced node (e.g., foreign content like MathML). [#3112, #3116] (@flavorjones) - [CRuby] Fixed a small memory leak in libgumbo (HTML5 parser) when the maximum tree depth limit is hit. [#3098, #3100] (@stevecheckoway) - Drop gcc14-allow-incompatible-pointer-types-for-now.patch - Added gcc14-allow-incompatible-pointer-types-for-now.patch: gcc 14 errors out on incompatible pointer types Allow those until https://github.com/sparklemotion/nokogiri/issues/3295 is fixed - Added only-complain-about-version-diff-if-it-is-older.patch boo#1202053 boo#1213999 boo#1203728 - limit ruby versions to 3.x - 1.16.0: This release introduces native gem support for Ruby 3.3. This release ends support for Ruby 2.7, for which [upstream support ended 2023-03-31](https://www.ruby-lang.org/en/downloads/branches/). [#]### Pattern matching This version marks _official support_ for the pattern matching API in `XML::Attr`, `XML::Document`, `XML::DocumentFragment`, `XML::Namespace`, `XML::Node`, and `XML::NodeSet` (and their subclasses), originally introduced as an experimental feature in v1.14.0. (@flavorjones) Documentation on what can be matched: * [`XML::Attr#deconstruct_keys`](https://nokogiri.org/rdoc/Nokogiri/XML/Attr.html?h=deconstruct#method-i-deconstruct_keys) * [`XML::Document#deconstruct_keys`](https://nokogiri.org/rdoc/Nokogiri/XML/Document.html?h=deconstruct#method-i-deconstruct_keys) * [`XML::Namespace#deconstruct_keys`](https://nokogiri.org/rdoc/Nokogiri/XML/Namespace.html?h=deconstruct+namespace#method-i-deconstruct_keys) * [`XML::Node#deconstruct_keys`](https://nokogiri.org/rdoc/Nokogiri/XML/Node.html?h=deconstruct#method-i-deconstruct_keys) * [`XML::DocumentFragment#deconstruct`](https://nokogiri.org/rdoc/Nokogiri/XML/DocumentFragment.html?h=deconstruct#method-i-deconstruct) * [`XML::NodeSet#deconstruct`](https://nokogiri.org/rdoc/Nokogiri/XML/NodeSet.html?h=deconstruct#method-i-deconstruct) [#]## Dependencies * [CRuby] Vendored libxml2 is updated to v2.12.3 from v2.11.6. (@flavorjones) * https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.12.0 * https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.12.1 * https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.12.2 * https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.12.3 [#]## Fixed * CSS `nth` pseudo-classes now handle spaces, e.g. `"2n + 1"`. [#3018] (@fusion2004) * [CRuby] `libgumbo` no longer leaks memory when an incomplete tag is abandoned by the HTML5 parser. [#3036] (@flavorjones) [#]## Removed * Removed `Nokogiri::HTML5.get` which was deprecated in v1.12.0. [#2278] (@flavorjones) * Removed the CSS-to-XPath utility modules `XPathVisitorAlwaysUseBuiltins` and `XPathVisitorOptimallyUseBuiltins`, which were deprecated in v1.13.0 in favor of `XPathVisitor` constructor args. [#2403] (@flavorjones) * Removed `XML::Reader#attribute_nodes` which was deprecated in v1.13.8 in favor of `#attribute_hash`. [#2598, #2599] (@flavorjones) * [CRuby] Removed the `libxml/libxml2_path` key from `VersionInfo`, used in the past for third-party library integration, in favor of the `nokogiri/cppflags` and `nokogiri/ldflags` keys. Please note that third-party library integration is not fully supported and may be deprecated soon, see #2746 for more context. [#2143] (@flavorjones) ==== rubygem-ruby-augeas ==== - Modify patch to also apply with -p1 COPYING.patch - Add gcc14.patch dont enforce the check until upstream can fix the code ==== selinux-policy ==== Version update (20240715 -> 20240726) Subpackages: selinux-policy-targeted - Update to version 20240726: * Allow snapper grub plugin to manage unlabeled_t and read link files - Update to version 20240725: * Initial policy for grub2 snapper plugin (bsc#1228205) - Update to version 20240716: * Set microos autorelabel script to systemd_autorelabel_generator_t * Allow systemd_generator to write kmsg * Initial policy for systemd growpart-generator (bsc#1226824) ==== supermin ==== - bsc#1228373 - supermin regression in Tumbleweed / Factory causes virt-inspector to fail add-rpm-database-location.patch - Drop disable-test-if-newer-ext2.patch ==== systemd ==== Version update (255.8 -> 256.4) Subpackages: libsystemd0 libsystemd0-32bit libudev1 systemd-32bit systemd-container systemd-lang udev - Import commit 5bba1ebe17564b606cc5d1c07b14123c305019a7 (merge of v256.4) For a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/bd8b5ee3cf0466b6b78e167967468cf… - Add 5004-disable-session-freeze.patch as a temporary workaround for https://github.com/systemd/systemd/issues/33083 - Add temporarily 5003-core-when-switching-root-remove-run-systemd-before-e.patch (bsc#1227580) - Don't mention any rpm macros inside comments, even if escaped (bsc#1228091) Otherwise pesign-obs-integration ends up re-packaging systemd with all macros inside comments unescaped leading to unpredictable behavior. Now why rpm expands rpm macros inside comments is the question... - Skip running the test units in %check for now. Some tests don't appreciate to run inside the build environment of OBS currently and some of them take an unexpected long time to execute on both risc and s390x architectures. - Make sure systemd-sysvcompat replaces systemd-sysvinit on upgrades (bsc#1218110) - Import commit bd8b5ee3cf0466b6b78e167967468cf6f93ec807 (merge of v256.2) For a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/dd15bf4f6430d8646e546ee0b980448… - varlinkctl is no more considered as experimental and has been moved to the main package. - Upgrade to v256.1 (commit dd15bf4f6430d8646e546ee0b980448c7d0c9699) See https://github.com/openSUSE/systemd/blob/SUSE/v256/NEWS for details. - Added pam.systemd-run0 ==== taglib ==== Version update (2.0 -> 2.0.1) Subpackages: libtag2 libtag_c2 - update to 2.0.1: * Fix aborting when _GLIBCXX_ASSERTIONS are enabled. * Fall back to utf8cpp header detection in the case that its CMake configuration is removed. * Improve compatibility with the SWIG interface compiler. * Build system fixes for testing without bindings, Emscripten and Illumos. * C bindings: Fix setting UTF-8 encoded property values. * Windows: Fix opening long paths. ==== virt-manager ==== Subpackages: virt-install virt-manager-common - bsc#1228227 - libvirt missing default hyperv options causes windows guest performance degredation. virtinst-add-hyperv-performance-options.patch ==== wtmpdb ==== Version update (0.12.0+git.20240508 -> 0.13.0+git.20240726) Subpackages: libwtmpdb0 - Update to version 0.13.0+git.20240726: * Release version 0.13.0 * Fix variable overflow and check for it (#15) ==== yast2 ==== Version update (5.0.8 -> 5.0.9) Subpackages: yast2-logs - Re-added missing error class (bsc#1227580) - 5.0.9

3 2