- openSUSE Factory

New Tumbleweed snapshot 20240409 released!
by Dominique Leuenberger 10 Apr '24

10 Apr '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: adwaita-xfce-icon-theme (0.0.3+git0.e0f73b9 -> 0.0.4+git0.b33d65a) awesfx branding-openSUSE (84.87.20230227 -> 84.87.20240405) capstone distribution-logos-openSUSE (20240207 -> 20240404) evolution fwupd (1.9.15 -> 1.9.16) gnutls (3.8.4 -> 3.8.5) gvfs icewm-theme-branding java-21-openjdk libX11 (1.8.8 -> 1.8.9) libproxy-backend (0.5.4 -> 0.5.5) libproxy-client (0.5.4 -> 0.5.5) lightdm-gtk-greeter-branding-openSUSE lttng-ust mutter oath-toolkit (2.6.8 -> 2.6.11) openSUSE-release (20240407 -> 20240409) opensc (0.25.0 -> 0.25.1) openssh pixman plasma6-openSUSE python-gobject (3.48.1 -> 3.48.2) qt6-base (6.6.3 -> 6.7.0) qt6-declarative (6.6.3 -> 6.7.0) qt6-imageformats (6.6.3 -> 6.7.0) qt6-multimedia (6.6.3 -> 6.7.0) qt6-networkauth (6.6.3 -> 6.7.0) qt6-positioning (6.6.3 -> 6.7.0) qt6-qt5compat (6.6.3 -> 6.7.0) qt6-quick3d (6.6.3 -> 6.7.0) qt6-quicktimeline (6.6.3 -> 6.7.0) qt6-sensors (6.6.3 -> 6.7.0) qt6-shadertools (6.6.3 -> 6.7.0) qt6-speech (6.6.3 -> 6.7.0) qt6-svg (6.6.3 -> 6.7.0) qt6-tools (6.6.3 -> 6.7.0) qt6-translations (6.6.3 -> 6.7.0) qt6-virtualkeyboard (6.6.3 -> 6.7.0) qt6-wayland (6.6.3 -> 6.7.0) qt6-webchannel (6.6.3 -> 6.7.0) qt6-webengine (6.6.3 -> 6.7.0) qt6-webview (6.6.3 -> 6.7.0) sdbootutil (1+git20240321.04bfbac -> 1+git20240408.49e4021) xfce4-branding-openSUSE (4.18.0+git0.9a2f754 -> 4.18.0+git1.8b02118) xfsprogs yast2-bootloader (5.0.7 -> 5.0.8) yast2-installation (5.0.7 -> 5.0.8) yast2-perl-bindings (5.0.2 -> 5.0.4) yast2-trans (84.87.20240331.90b1d91d29 -> 84.87.20240407.b46e9ca4fd) === Details === ==== adwaita-xfce-icon-theme ==== Version update (0.0.3+git0.e0f73b9 -> 0.0.4+git0.b33d65a) - Update to version 0.0.4+git0.b33d65a * Remove superfluous /apps directory from index.theme ==== awesfx ==== - Use full URL for source tarball. ==== branding-openSUSE ==== Version update (84.87.20230227 -> 84.87.20240405) Subpackages: grub2-branding-openSUSE libreoffice-branding-openSUSE plymouth-branding-openSUSE wallpaper-branding-openSUSE yast2-qt-branding-openSUSE - Use png for wallpapers for Tumbleweed - SLES seems to be using png - Using a compat symlink wallpapers/openSUSEdefault-> wallpapers/SLEdefault allows running certain apps without rebuild. Such as cockpit. - Use optipng -o5 to compress files (has to be reflected in spec) - Bump date ==== capstone ==== - Build with distro %{optflags} ==== distribution-logos-openSUSE ==== Version update (20240207 -> 20240404) Subpackages: distribution-logos-openSUSE-Tumbleweed distribution-logos-openSUSE-icons - Update to version 20240404: * Turn apple-touch-icon into round square ones * SLES Compatability supply apple-touch-icon for Leap, LeapMicro, TW * Delete dist/package directory * fix source mismatch with package name ==== evolution ==== Subpackages: evolution-lang evolution-plugin-spamassassin - Add boo1221868.patch, fixing a crash when hiding competed tasks (boo#1221868, glgo#GNOME/evolution#2712) ==== fwupd ==== Version update (1.9.15 -> 1.9.16) Subpackages: fwupd-bash-completion fwupd-lang libfwupd2 typelib-1_0-Fwupd-2_0 - Update to version 1.9.16: + This release adds the following features: - Prefer zstd over xz for metadata. - Relicense a few remaining plugin files to LGPL-2.1+. + This release fixes the following bugs: - Correctly record UEFI success if adding ESRT nodes. - Defer the DP Aux MST scanning on hotplug to workaround a kernel bug. - Do not do the post-update version check if the device needs-reboot. - Fix a fastboot warning when loading device. - Fix a possible warning in fwupdmgr when excluding releases. - Fix a qsi-dock warning when writing chunks. - Ignore attribute-changed to work around a regression in macOS. - Ignore ZFS zvols when finding the default ESP. - Mark Pluton TPMs as part of the main CPU. - Put the fwupd-efi verbose debugging in the journal. - Recognize zfsbootmenu in ESP detection heuristic. + This release adds support for the following hardware: - Acer T34 and U33 docks. - Qualcomm Series 5 Gen 1 and Gen 2 and Series 3 Gen 1 and Gen 2 devices. - Several Puya SPI chips. - VIA VL822 C0. ==== gnutls ==== Version update (3.8.4 -> 3.8.5) Subpackages: libgnutls-dane0 libgnutls30 libgnutls30-32bit - Update to 3.8.5: * libgnutls: Due to majority of usages and implementations of RSA decryption with PKCS#1 v1.5 padding being incorrect, leaving them vulnerable to Marvin attack, the RSAES-PKCS1-v1_5 is being deprecated (encryption and decryption) and will be disabled in the future. A new option 'allow-rsa-pkcs1-encrypt' has been added into the system-wide library configuration which allows to enable/disable the RSAES-PKCS1-v1_5. Currently, the RSAES-PKCS1-v1_5 is enabled by default. * libgnutls: Added support for RIPEMD160 and PBES1-DES-SHA1 for backward compatibility with GCR. * libgnutls: A couple of memory related issues have been fixed in RSA PKCS#1 v1.5 decryption error handling and deterministic ECDSA with earlier versions of GMP. These were a regression introduced in the 3.8.4 release. See #1535 and !1827. * build: Fixed a bug where building gnutls statically failed due to a duplicate definition of nettle_rsa_compute_root_tr(). * API and ABI modifications: - GNUTLS_PKCS_PBES1_DES_SHA1: New enum member of gnutls_pkcs_encrypt_flags_t * Rebase patches: - gnutls-FIPS-TLS_KDF_selftest.patch - gnutls-FIPS-140-3-references.patch ==== gvfs ==== Subpackages: gvfs-backend-afc gvfs-backend-goa gvfs-backend-samba gvfs-backends gvfs-fuse gvfs-lang - Move the recently added onedrive provider to the backend-goa subpackage: onedrive support is integrated into the g-o-a provider. ==== icewm-theme-branding ==== - Do not substitute png to jpg for default wallpaper Details at https://github.com/openSUSE/branding/pull/149 - Keep openSUSEDefault although SLEDefault compat symlink exist ==== java-21-openjdk ==== Subpackages: java-21-openjdk-headless - Added patch: * reproducible-jlink.patch + make the timestamp in jmods reproducible ==== libX11 ==== Version update (1.8.8 -> 1.8.9) Subpackages: libX11-6 libX11-data libX11-xcb1 - Update to 1.8.9 * Fix regressions introduced in 1.8.8 (!245, !248) - this includes reverting for now the previous "Fix XIM input sometimes jumbled (#198, !236)" - supersedes * U_0001-xlibi18n-restore-parse_line1-for-WIN32-builds.patch * U_0002-Revert-imDefLkup-Commit-first-info-in-XimCommitInfo.patch * U_0003-Revert-ximcp-Unmark-to-fabricate-key-events-with-XKe.patch - U_0001-xlibi18n-restore-parse_line1-for-WIN32-builds.patch U_0002-Revert-imDefLkup-Commit-first-info-in-XimCommitInfo.patch U_0003-Revert-ximcp-Unmark-to-fabricate-key-events-with-XKe.patch * fix regressions in 1.8.8 (issues #204, #205, #206, #207, #208) ==== libproxy-backend ==== Version update (0.5.4 -> 0.5.5) - Update to version 0.5.5: + Windows: Try all configured proxy resolution types. + Cleanup curl. + Add release option. + Expose missing functions in symbol map. + Fix crash during unload by. + Log debug instead of warning on wpad pac failure. + Fix refcounting in px_proxy_factory_copy. + symver: Fix symbol map to be a valid tree. + Fix free function for pxProxyFactory type. + CodeQL badge and updated repology. + meson: Don't build OSX plugin on iOS. ==== libproxy-client ==== Version update (0.5.4 -> 0.5.5) - Update to version 0.5.5: + Windows: Try all configured proxy resolution types. + Cleanup curl. + Add release option. + Expose missing functions in symbol map. + Fix crash during unload by. + Log debug instead of warning on wpad pac failure. + Fix refcounting in px_proxy_factory_copy. + symver: Fix symbol map to be a valid tree. + Fix free function for pxProxyFactory type. + CodeQL badge and updated repology. + meson: Don't build OSX plugin on iOS. ==== lightdm-gtk-greeter-branding-openSUSE ==== - Use 1600x1200.png now when we've changed backgrounds to png Details in https://github.com/openSUSE/branding/pull/149 ==== lttng-ust ==== - remove dependency on /usr/bin/python3 using %python3_fix_shebang macro, [bsc#1212476] ==== mutter ==== Subpackages: mutter-lang - Add mutter-fix-front-buffer-lock.patch: Fix front buffer lock error by an unnecessary ensure_fb_id call (glgo#gnome/mutter!3674, bsc#1222409). ==== oath-toolkit ==== Version update (2.6.8 -> 2.6.11) - version update to 2.6.11 * liboath: Handle invalid base32 encoded secrets. Fixes: #41. * Various build fixes including updated gnulib files. * Improve compatibility with recent libxmlsec. ==== openSUSE-release ==== Version update (20240407 -> 20240409) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== opensc ==== Version update (0.25.0 -> 0.25.1) Subpackages: opensc-bash-completion - Update to verion 0.25.1 General improvements * Add missing file to dist tarball to build documentation. minidriver * Fix RSA decryption with PKCS#1 v1.5 padding. * Fix crash when app is not set. ==== openssh ==== Subpackages: openssh-clients openssh-common openssh-server - Add missing bugzilla/CVE references to the changelog - Add patch from SLE which was missing in Factory: * Mon Jun 7 20:54:09 UTC 2021 - Hans Petter Jansson <hpj(a)suse.com> - Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which attempts to mitigate instances of secrets lingering in memory after a session exits. (bsc#1213004 bsc#1213008) - Rebase patch: * openssh-6.6p1-privsep-selinux.patch ==== pixman ==== - a64-neon is an aarch64 feature, not armv6/7 ==== plasma6-openSUSE ==== Subpackages: plasma6-branding-openSUSE plasma6-sddm-theme-openSUSE plasma6-theme-openSUSE - Modify sddmtheme.diff to change the extension of the openSUSE branding wallpaper from jpg to png since the extension was changed in TW (boo#1222546) - Require the same wallpaper-branding version as used when building to make sure the png file exists ==== python-gobject ==== Version update (3.48.1 -> 3.48.2) Subpackages: python311-gobject python311-gobject-Gdk python311-gobject-cairo - Update to version 3.48.2: + Fix support for fundamental (primitive) types, such as Gst.Bitmask. ==== qt6-base ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6Concurrent6 libQt6Core6 libQt6DBus6 libQt6Gui6 libQt6Network6 libQt6OpenGL6 libQt6OpenGLWidgets6 libQt6PrintSupport6 libQt6Sql6 libQt6Test6 libQt6Widgets6 libQt6Xml6 qt6-network-tls qt6-networkinformation-glib qt6-networkinformation-nm qt6-platformtheme-gtk3 qt6-printsupport-cups qt6-sql-mysql qt6-sql-sqlite - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released - Replace 0001-Tell-the-truth-about-private-API.patch with upstream change: * 0001-CMake-ELF-allow-using-Qt-s-full-version-number-in-th.patch - Add upstream fix (QTBUG-123937): * fix_builds_with_Werror.patch ==== qt6-declarative ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6LabsAnimation6 libQt6LabsFolderListModel6 libQt6LabsQmlModels6 libQt6LabsSettings6 libQt6LabsSharedImage6 libQt6LabsWavefrontMesh6 libQt6Qml6 libQt6QmlCore6 libQt6QmlLocalStorage6 libQt6QmlModels6 libQt6QmlWorkerScript6 libQt6QmlXmlListModel6 libQt6Quick6 libQt6QuickControls2-6 libQt6QuickControls2Impl6 libQt6QuickDialogs2-6 libQt6QuickDialogs2QuickImpl6 libQt6QuickDialogs2Utils6 libQt6QuickEffects6 libQt6QuickLayouts6 libQt6QuickParticles6 libQt6QuickShapes6 libQt6QuickTemplates2-6 libQt6QuickTest6 libQt6QuickWidgets6 qt6-declarative-imports - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released - Update build constraints ==== qt6-imageformats ==== Version update (6.6.3 -> 6.7.0) - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-multimedia ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6Multimedia6 libQt6MultimediaQuick6 libQt6Quick3DSpatialAudio6 libQt6SpatialAudio6 qt6-multimedia-imports - Add upstream change to restore binary compatibility (QTBUG-123997): * 0001-Fix-ABI-breakage-wrt-QAudioSink-Source-stateChanged-.patch - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-networkauth ==== Version update (6.6.3 -> 6.7.0) - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-positioning ==== Version update (6.6.3 -> 6.7.0) - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-qt5compat ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6Core5Compat6 qt6-qt5compat-imports - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-quick3d ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6Quick3D6 libQt6Quick3DAssetImport6 libQt6Quick3DAssetUtils6 libQt6Quick3DEffects6 libQt6Quick3DHelpers6 libQt6Quick3DHelpersImpl6 libQt6Quick3DParticleEffects6 libQt6Quick3DParticles6 libQt6Quick3DRuntimeRender6 libQt6Quick3DUtils6 qt6-quick3d-imports - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-quicktimeline ==== Version update (6.6.3 -> 6.7.0) - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-sensors ==== Version update (6.6.3 -> 6.7.0) - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-shadertools ==== Version update (6.6.3 -> 6.7.0) - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-speech ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6TextToSpeech6 qt6-texttospeech - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-svg ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6Svg6 libQt6SvgWidgets6 - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-tools ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6Designer6 libQt6UiTools6 qt6-tools-qdbus - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-translations ==== Version update (6.6.3 -> 6.7.0) - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-virtualkeyboard ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6HunspellInputMethod6 libQt6VirtualKeyboard6 qt6-virtualkeyboard-imports - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-wayland ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6WaylandClient6 libQt6WaylandCompositor6 libQt6WaylandEglClientHwIntegration6 libQt6WaylandEglCompositorHwIntegration6 libQt6WlShellIntegration6 - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-webchannel ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6WebChannel6 libQt6WebChannelQuick6 qt6-webchannel-imports - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-webengine ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6WebEngineCore6 libQt6WebEngineQuick6 libQt6WebEngineWidgets6 qt6-webengine-imports - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released - Update rtc-dont-use-h264.patch ==== qt6-webview ==== Version update (6.6.3 -> 6.7.0) - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== sdbootutil ==== Version update (1+git20240321.04bfbac -> 1+git20240408.49e4021) Subpackages: sdbootutil-rpm-scriptlets sdbootutil-snapper - Update to version 1+git20240408.49e4021: * Update requirements * Measure manually initrd if pcrlock fails * Set SYSTEMD_LOG_LEVEL if verbose * Only error out on empty machine-id when actually used * feat: add basic boot assessment * fix: use new os-release and machine-id files * dracut call: --add-device belongs to --sysroot * Make sdbootutil usable with no snapshot Systems ==== xfce4-branding-openSUSE ==== Version update (4.18.0+git0.9a2f754 -> 4.18.0+git1.8b02118) Subpackages: libgarcon-branding-openSUSE libxfce4ui-branding-openSUSE thunar-volman-branding-openSUSE xfce4-notifyd-branding-openSUSE xfce4-panel-branding-openSUSE xfce4-power-manager-branding-openSUSE xfce4-session-branding-openSUSE xfce4-settings-branding-openSUSE xfdesktop-branding-openSUSE xfwm4-branding-openSUSE - Update to version 4.18.0+git1.8b02118: * Tumbleweed now uses png for default.wallpaper ==== xfsprogs ==== Subpackages: libhandle1 - Switch to %autosetup in order to build with older rpm build ==== yast2-bootloader ==== Version update (5.0.7 -> 5.0.8) - Follow up of previous change to use even more precise wording (bsc#1219989,bsc#1222353) - 5.0.8 ==== yast2-installation ==== Version update (5.0.7 -> 5.0.8) - Adapted call for connecting all discovered NVMe-over-Fabrics subsystems (bsc#1222246). - 5.0.8 ==== yast2-perl-bindings ==== Version update (5.0.2 -> 5.0.4) - Fix downstream build failures caused by the previous change (bsc#1222375) - 5.0.4 - Use UTF-8 for translated texts coming from our Perl code (bsc#1216689), fixing most '?' occurrences in yast2-users. - 5.0.3 ==== yast2-trans ==== Version update (84.87.20240331.90b1d91d29 -> 84.87.20240407.b46e9ca4fd) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20240407.b46e9ca4fd: * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Czech) * Translated using Weblate (Slovak) * Translated using Weblate (Dutch) * Translated using Weblate (Japanese) * Translated using Weblate (Catalan) * New POT for text domain 'bootloader'. * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Romanian) * Translated using Weblate (Macedonian) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Macedonian) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian)

1 0

qdbus not found with Crow translate shortcut
by victorhck 10 Apr '24

10 Apr '24

Hello. Crow Translate¹ is application to translate text. Ctrl+Alt+E is a shortcut to translate the higlighted text. Since the update to Plasma 6, when I use that shortcut I get a message error with "qdbus not found" I created an issue in the main repo² but seems to be a distro issue. If I launch zypper se qdbus I get this: S | Name | Summary --+-----------------+--------------------------------------------------+-------- | libqt5-qdbus | Command line client for communication over D-Bus i | qt6-tools-qdbus | Command line client for communication over D-Bus Do I have to install something extra? Greetings. [1] https://github.com/crow-translate/crow-translate [2] https://github.com/crow-translate/crow-translate/issues/675 -- ------------------- GPG Key: 0xcc742e8dc9b7e22a Fingerprint = 6FE2 3B1F AAC8 E5B7 63EA 88A9 CC74 2E8D C9B7 E22A Aprende a proteger la privacidad de tu correo: https://emailselfdefense.fsf.org/es/ Mi blog sobre openSUSE, GNU/Linux y software libre: https://victorhckinthefreeworld.com/ Herramientas para proteger tu privacidad https://victorhck.gitlab.io/privacytools-es/

3 3

Clojure is working on better supporting XDG base directory rules
by Jesús Gómez 10 Apr '24

10 Apr '24

Hello. I just wanted to mention that the Clojure project recently accepted to work on enhancing its support to XDG base directory rules, as described in their ticket TDEPS-262[1] I'm sure there are important considerations related to your work. For example, how would an eventual change affect Suse users when upgrading the Clojure package? Anyway, I'm going to work the best I can on this issue, and I am opening this thread simply as a "heads-up" and a place to discuss it. Thank you for your work and contribution to Suse and Clojure! [1] https://clojure.atlassian.net/browse/TDEPS-262

1 0

New Tumbleweed snapshot 20240407 released!
by Dominique Leuenberger 08 Apr '24

08 Apr '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: apparmor cpio guestfs-tools inxi (3.3.33 -> 3.3.33+3) libapparmor libguestfs openSUSE-release (20240405 -> 20240407) perl-CGI (4.600.0 -> 4.640.0) python-typing_extensions (4.10.0 -> 4.11.0) === Details === ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-docs apparmor-parser apparmor-parser-lang apparmor-profiles apparmor-utils apparmor-utils-lang python3-apparmor - Use full URLs for source tarball and signature. ==== cpio ==== Subpackages: cpio-lang cpio-mt - Fix build with gcc14, bsc#1221712 * fix-gcc14.patch ==== guestfs-tools ==== - Upstream bug fixes Update-virt-customize-generated-files.patch Initialise-bar-fp-as-NULL.patch ==== inxi ==== Version update (3.3.33 -> 3.3.33+3) - Updated to version 3.3.33-1+3: + A quick point release, one critical bug fix, and a few new features and enhancements. + Code cleanup. - Add service to pull from git and avoid tarball release. - Adjust spec file for service use. ==== libapparmor ==== - Use full URLs for source tarball and signature. ==== libguestfs ==== Subpackages: libguestfs-appliance libguestfs-xfs libguestfs0 - Upstream bug fixes Split-chown-parameter-on-character.patch Initialise-bar-fp-as-NULL.patch ==== openSUSE-release ==== Version update (20240405 -> 20240407) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== perl-CGI ==== Version update (4.600.0 -> 4.640.0) - updated to 4.64 see /usr/share/doc/packages/perl-CGI/Changes 4.64 2024-03-18 [ META ] - pass --no-xattrs to tar in Makefile to fix tar backwards compat (GH #264, thanks to ryandesign) 4.63 2024-03-01 [ FIX ] - ->url returns a string in all cases (GH #263, thanks to Sketch6307) 4.62 2024-03-01 [ FIX ] - ->url now returns the correct thing for ipv6 brackets (GH #259, thanks to eserte) 4.61 2024-01-08 [ ENHANCEMENT ] - Support Paritioned cookies in CGI::Cookie (GH #262, thanks to dakkar) ==== python-typing_extensions ==== Version update (4.10.0 -> 4.11.0) - update to 4.11.0: * Fix tests on Python 3.13.0a5. Patch by Jelle Zijlstra. * Fix the runtime behavior of type parameters with defaults * Fix minor discrepancy between error messages produced by `typing` and `typing_extensions` on Python 3.10. * When `include_extra=False`, `get_type_hints()` now strips `ReadOnly` from the annotation.

1 0

osc bco -N no longer works?
by John Paul Adrian Glaubitz 08 Apr '24

08 Apr '24

Hi, I just noticed that branch-checking out a new package no longer works: glaubitz@suse-laptop:~/suse> osc bco -N devel:languages:python python-foo-bar Server returned an error: HTTP Error 404: Not Found Error getting meta for project 'devel:languages:python' package 'python-foo-bar' Package not found: devel:languages:python/python-foo-bar glaubitz@suse-laptop:~/suse> Is that by design? Adrian

1 2

Xorg 21.1.12 crashes running Android studio
by Michael Pujos 08 Apr '24

08 Apr '24

Hi, Started Android Studio for work this morning and had the surprise to see it crash Xorg. Details in this bug report: https://bugzilla.opensuse.org/show_bug.cgi?id=1222442

1 0

Can't get podman 5.0.1 to work
by Berthold Höllmann 08 Apr '24

08 Apr '24

I had some podman containers run woch the 4.* version, but after upgrading to podman 5.0.1 they fail to start. ,---- | > podman run hello | Error: pasta failed with exit code 1: | Couldn't open network namespace /run/user/1000/netns/netns-254f2095-273b-04d1-9b6f-af01071a4f4e: Permission denied `---- The problem seems to be related to the usage of pasta with the new podman: ,---- | > pasta | Could not open /proc/self/uid_map: Permission denied | Couldn't configure user mappings | Couldn't mount /proc: Permission denied | Failed to join network namespace: Permission denied | Could not open /proc/sys/net/ipv4/ping_group_range: Permission denied | Cannot set ping_group_range, ICMP requests might fail `---- I suspect apparmor for causing these permission problems, but are helpless on how to solve this.

3 3

New Tumbleweed snapshot 20240405 released!
by Dominique Leuenberger 07 Apr '24

07 Apr '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: avahi avahi-glib2 colord evince fwupd gobject-introspection (1.80.0 -> 1.80.1) gtk4 (4.14.1 -> 4.14.2) kernel-firmware kernel-source (6.8.2 -> 6.8.4) kmod (31 -> 32) libcanberra libsrtp2 (2.5.0 -> 2.6.0) llvm18 (18.1.2 -> 18.1.3) mpg123 (1.32.5 -> 1.32.6) openSUSE-release (20240404 -> 20240405) orca (46.0 -> 46.1) phodav snowball sushi (45.0 -> 46.0) xdm (1.1.15 -> 1.1.16) zstd (1.5.5 -> 1.5.6) === Details === ==== avahi ==== Subpackages: avahi-lang libavahi-client3 libavahi-client3-32bit libavahi-common3 libavahi-common3-32bit libavahi-core7 - Tag hardening patches as PATCH-FEATURE-OPENSUSE ==== avahi-glib2 ==== Subpackages: libavahi-glib1 libavahi-gobject0 libavahi-ui-gtk3-0 - Tag hardening patches as PATCH-FEATURE-OPENSUSE ==== colord ==== Subpackages: colord-color-profiles colord-lang libcolord2 libcolorhug2 - Tag hardening patch as PATCH-FEATURE-OPENSUSE. ==== evince ==== Subpackages: evince-lang evince-plugin-pdfdocument libevdocument3-4 libevview3-3 typelib-1_0-EvinceDocument-3_0 typelib-1_0-EvinceView-3_0 - Properly tag patches as PATCH-FIX-SLE. ==== fwupd ==== Subpackages: fwupd-bash-completion fwupd-lang libfwupd2 typelib-1_0-Fwupd-2_0 - dbxtool is built unconditionally on all architectures: move it out of the condition in the files section and also unconditionally provide/obsolete the old version. ==== gobject-introspection ==== Version update (1.80.0 -> 1.80.1) Subpackages: girepository-1_0 libgirepository-1_0-1 - Update to version 1.80.1: + Require Python 3.8 when running mypy. + Ensure that POSIX types follow the target architecture. + Look for finish functions inside the list of constructors. ==== gtk4 ==== Version update (4.14.1 -> 4.14.2) Subpackages: gtk4-lang gtk4-schema gtk4-tools libgtk-4-1 typelib-1_0-Gtk-4_0 - Update to version 4.14.2: + GtkScale: Improve positioning of values in some cases. + Theme: Make progress in entries visible. + Accessibility: Fix text insertion handling. + GDK: - dnd: Use the default cursor durion motion - dnd: Use a better cursor for indicating the move action + GSK: - gl: Handle offloads in offscreen context better - Fix text rendering problems with some fonts + Wayland: - Tighten up some protocol version checks - Use the presentation time protocol - Fix a crash with subsurfaces - Improve settings portal handling + Debugging: Add font settings in the inspector. + Demos: - Clean up the application demo - Update cursor images for the cursor demo + Updated translations. ==== kernel-firmware ==== Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-ath12k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Drop duplicated WHENCE from kernel-firmware-* subpackages (bsc#1222319) ==== kernel-source ==== Version update (6.8.2 -> 6.8.4) - Linux 6.8.4-rc1 (bsc#1012628). - Revert "workqueue.c: Increase workqueue name length" (bsc#1012628). - Revert "workqueue: Move pwq->max_active to wq->max_active" (bsc#1012628). - Revert "workqueue: Factor out pwq_is_empty()" (bsc#1012628). - Revert "workqueue: Replace pwq_activate_inactive_work() with [__]pwq_activate_work()" (bsc#1012628). - Revert "workqueue: Move nr_active handling into helpers" (bsc#1012628). - Revert "workqueue: Make wq_adjust_max_active() round-robin pwqs while activating" (bsc#1012628). - Revert "workqueue: RCU protect wq->dfl_pwq and implement accessors for it" (bsc#1012628). - Revert "workqueue: Introduce struct wq_node_nr_active" (bsc#1012628). - Revert "workqueue: Implement system-wide nr_active enforcement for unbound workqueues" (bsc#1012628). - Revert "workqueue: Don't call cpumask_test_cpu() with -1 CPU in wq_update_node_max_active()" (bsc#1012628). - Revert "workqueue: Shorten events_freezable_power_efficient name" (bsc#1012628). - commit 1089550 - Linux 6.8.3 (bsc#1012628). - drm/vmwgfx: Unmap the surface before resetting it on a plane state (bsc#1012628). - wifi: brcmfmac: avoid invalid list operation when vendor attach fails (bsc#1012628). - media: staging: ipu3-imgu: Set fields before media_entity_pads_init() (bsc#1012628). - arm64: dts: qcom: sc7280: Add additional MSI interrupts (bsc#1012628). - remoteproc: virtio: Fix wdg cannot recovery remote processor (bsc#1012628). - clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd (bsc#1012628). - smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr() (bsc#1012628). - smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity() (bsc#1012628). - arm: dts: marvell: Fix maxium->maxim typo in brownstone dts (bsc#1012628). - drm/vmwgfx: Fix possible null pointer derefence with invalid contexts (bsc#1012628). - arm64: dts: qcom: sm8450-hdk: correct AMIC4 and AMIC5 microphones (bsc#1012628). - serial: max310x: fix NULL pointer dereference in I2C instantiation (bsc#1012628). - drm/vmwgfx: Fix the lifetime of the bo cursor memory (bsc#1012628). - pci_iounmap(): Fix MMIO mapping leak (bsc#1012628). - media: xc4000: Fix atomicity violation in xc4000_get_frequency (bsc#1012628). - media: mc: Add local pad to pipeline regardless of the link state (bsc#1012628). - media: mc: Fix flags handling when creating pad links (bsc#1012628). - media: nxp: imx8-isi: Check whether crossbar pad is non-NULL before access (bsc#1012628). - media: mc: Add num_links flag to media_pad (bsc#1012628). - media: mc: Rename pad variable to clarify intent (bsc#1012628). - media: mc: Expand MUST_CONNECT flag to always require an enabled link (bsc#1012628). - media: nxp: imx8-isi: Mark all crossbar sink pads as MUST_CONNECT (bsc#1012628). - md: use RCU lock to protect traversal in md_spares_need_change() (bsc#1012628). - KVM: Always flush async #PF workqueue when vCPU is being destroyed (bsc#1012628). - arm64: dts: qcom: sm8550-qrd: correct WCD9385 TX port mapping (bsc#1012628). - arm64: dts: qcom: sm8550-mtp: correct WCD9385 TX port mapping (bsc#1012628). - cpufreq: amd-pstate: Fix min_perf assignment in amd_pstate_adjust_perf() (bsc#1012628). - thermal/intel: Fix intel_tcc_get_temp() to support negative CPU temperature (bsc#1012628). - powercap: intel_rapl: Fix a NULL pointer dereference (bsc#1012628). - powercap: intel_rapl: Fix locking in TPMI RAPL (bsc#1012628). - powercap: intel_rapl_tpmi: Fix a register bug (bsc#1012628). - powercap: intel_rapl_tpmi: Fix System Domain probing (bsc#1012628). - powerpc/smp: Adjust nr_cpu_ids to cover all threads of a core (bsc#1012628). - powerpc/smp: Increase nr_cpu_ids to include the boot CPU (bsc#1012628). - sparc64: NMI watchdog: fix return value of __setup handler (bsc#1012628). - sparc: vDSO: fix return value of __setup handler (bsc#1012628). - crypto: qat - change SLAs cleanup flow at shutdown (bsc#1012628). - crypto: qat - resolve race condition during AER recovery (bsc#1012628). - selftests/mqueue: Set timeout to 180 seconds (bsc#1012628). - pinctrl: qcom: sm8650-lpass-lpi: correct Kconfig name (bsc#1012628). - ext4: correct best extent lstart adjustment logic (bsc#1012628). - drm/amdgpu/display: Address kdoc for 'is_psr_su' in ... changelog too long, skipping 605 lines ... - commit b5e6a9b ==== kmod ==== Version update (31 -> 32) Subpackages: kmod-bash-completion libkmod2 - Update to release 32 * Drop python bindings * Remove unmaintained experimental tool - Drop upstreamed patches * configure-Detect-openssl-sm3-support.patch * man-depmod.d-Fix-incorrect-usr-lib-search-path.patch * usr-lib-modprobe.patch * kmod-Add-pkgconfig-file-with-kmod-compile-time-confi.patch * tools-depmod-fix-Walloc-size.patch * libkmod-remove-pkcs7-obj_to_hash_algo.patch * usr-lib-modules.patch * configure-Check-that-provided-paths-are-absolute.patch - Refresh no-stylesheet-download.patch ==== libcanberra ==== Subpackages: canberra-gtk-play libcanberra-gtk-module-common libcanberra-gtk0 libcanberra-gtk2-module libcanberra-gtk3-0 libcanberra-gtk3-module libcanberra0 - Don't recommend the gtk modules unconditionally. They already have conditional supplements. - Switch from packageand(x:y) to boolean dependencies - Use %license ==== libsrtp2 ==== Version update (2.5.0 -> 2.6.0) - version update to 2.6.0 * remove use of pointers to 32bit values * Cleaning up cmake and enabled more warnings. * start using const on internal arguments * Some srtp_driver fixes * remove travis reference from README.md * meson.build: implement mbedtls support * iv length is constant so set only once * Add x86 SIMD optimizations to crypto datatypes * Add a missing typedef for stream list ctx * cmake: Rename TEST_APPS as LIBSRTP_TEST_APPS option * cmake: Support configuring as subproject ==== llvm18 ==== Version update (18.1.2 -> 18.1.3) Subpackages: clang-tools clang18 libLLVM18 libclang-cpp18 libclang13 llvm18-gold - Update to version 18.1.3. * Fixes ThreadSanitizer failures for glibc's LoongArch and certain RISC-V ports when fstat is used. * `transform.structured.convert_to_loops` now properly deletes its target op. * Fix a `llvm.usub.with.overflow.i128` wrong code generation regression that was introduced with LLVM 18.1.0. * MemorySanitizer on Linux can now run even when maximum-entropy address-space layout randomization is configured globally (as is becoming increasingly common). MemorySanitizer can automatically re-exec ASLR-off for the process if needed, instead of aborting. * Fixed a Clang 18.x regression which increased binary size and stack usage with `-ftrivial-auto-var-init`. - Set directories for configuration files: /etc/clang for system- wide configuration and ~/.config/clang for users. For details see https://clang.llvm.org/docs/UsersManual.html#configuration-files. - Use old conflicts/provides for python3-clang on Leap. ==== mpg123 ==== Version update (1.32.5 -> 1.32.6) Subpackages: libmpg123-0 mpg123-openal - Update to version 1.32.6 build: * Detect forced 64 bit offsets on a dual-mode system that used to default to 32 bits and drop ambiguous suffix-less symbols in that case. This avoids subtle ABI breakage (causing memory corruption) with existing binaries and instead has them fail during runtime linking. You trigger that when having -D_FILE_OFFSET_BITS=64 in your compiler flags during mpg123 build. ==== openSUSE-release ==== Version update (20240404 -> 20240405) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== orca ==== Version update (46.0 -> 46.1) Subpackages: orca-lang - Update to version 46.1: + Fix issue causing flat review clicking to fail in some Gtk apps. + Fix regression in SayAll upon page load. + Fix presentation of new radio button groups. + Avoid triggering crash in Pidgin. + Fix issue in which Orca appeared to hang when where am I was used immediately after page load of a large document. ==== phodav ==== - Tag hardening patch as PATCH-FEATURE-OPENSUSE. ==== snowball ==== - Properly tag patches as PATCH-FIX-OPENSUSE. ==== sushi ==== Version update (45.0 -> 46.0) Subpackages: sushi-lang - Update to version 46.0: + Make webkit2gtk optional. + Fix freeze when libreoffice is missing. + Fix tick position for fullscreen video. + Misc cleanup. + Updated translations. ==== xdm ==== Version update (1.1.15 -> 1.1.16) - Update to release 1.1.16 * This release fixes a failure to build with the recent libXaw 1.0.16 release due to a change introduced in xdm 1.1.15 to address gcc 14 build issues. ==== zstd ==== Version update (1.5.5 -> 1.5.6) Subpackages: libzstd1 libzstd1-32bit libzstd1-x86-64-v3 - update to 1.5.6: * Introduce a new stable parameter ZSTD_c_targetCBlockSize, enabling the division of blocks into smaller segments to enhance initial byte delivery speed for congested networks * library allows allow ganular binary size selection - drop zstd-pr-3961.patch, merged upstream

1 0

Re: Can't get podman 5.0.1 to work
by Ricardo Branco 07 Apr '24

07 Apr '24

podman with pasta (passt) fails with apparmor https://bugzilla.opensuse.org/show_bug.cgi?id=1221840 On Sun, Apr 7, 2024 at 1:46 AM Berthold Höllmann < berthold-tumbleweed(a)xn--hllmanns-n4a.de> wrote: > > I had some podman containers run woch the 4.* version, but after > upgrading to podman 5.0.1 they fail to start. > > ,---- > | > podman run hello > | Error: pasta failed with exit code 1: > | Couldn't open network namespace > /run/user/1000/netns/netns-254f2095-273b-04d1-9b6f-af01071a4f4e: Permission > denied > `---- > > The problem seems to be related to the usage of pasta with the new > podman: > > ,---- > | > pasta > | Could not open /proc/self/uid_map: Permission denied > | Couldn't configure user mappings > | Couldn't mount /proc: Permission denied > | Failed to join network namespace: Permission denied > | Could not open /proc/sys/net/ipv4/ping_group_range: Permission denied > | Cannot set ping_group_range, ICMP requests might fail > `---- > > I suspect apparmor for causing these permission problems, but are > helpless on how to solve this. >

1 0

Security practices for packages on build.o.o
by Atri Bhattacharya 06 Apr '24

06 Apr '24

Hi, In light of the recent xz supply-side attack [1], I wonder if we should have a discussion about security issues around packages on build.o.o that may be similarly exploited by a packager either acting in bad faith or working from a compromised system themself. Some specific issues that I repeatedly keep thinking of: 1. Packages where spec files do not have traceable source tarballs with full URLs pointing to upstream. I understand that this is already discouraged but not entirely forbidden [2], so a user could have something like ``` Source0: totally_not_an_exploit.tar.gz ``` in their specfile, have the package build and submit it to a devel project and eventually Factory. Unless project or Factory reviewers have the time to untar the sources and carefully study them, which seems an almost impossible burden on either, the tarball could, intentionally or not, carry through an exploit. For sources that do indicate the full URL, I understand that bots in the Factory check the bundled tarballs against upstream ones, and decline them in case of any mismatch. However, for locally generated tarballs with no traceability, there is no check that prevents them from being shipped around as part of the distro proper. For new packages, yes, there is a License check done by SUSE, but not security checks unless the package in question raises specific AUDIT level reviews (like installing polkit privileges etc). This means a packager either acting on bad faith or working from a compromised system could generate a tarball containing an exploit and push it, eventually, to Factory. I hope I am wrong. Perhaps we should reconfigure the Factory bot to forbid non-URL sources from Factory packages entirely. I am not sure how many packages currently have these, but I am fixing one right now. 2. Perhaps it is time to allow 2FA, and indeed make it mandatory, for packagers on build.o.o. 2FA is certainly not hack-proof, but it is better than the simple password based authentication we currently use. This will also cut down on spam comments, that have been slowly growing in number. I noticed that they have been discussing this over on Fedora [3] as well. 3. At the level of prj and Factory reviewers, perhaps we should encourage — and eventually enforce — running `autoreconf -fvi` for all autotools based packages after cleaning up pre-generated build scripts from the tarball in %prep. This could be optimally done with a new rpm macro. I understand that this will not be possible for all packages, and that there are still packages that have weird manually written m4 scripts, etc. However, they are a minority, and we should reconsider whether such poorly maintained packages have a place in our distro any more. 4. And finally, please, please, let there be a 15-day, or even 30-day, waiting period for new users on build.o.o before they can start commenting on projects and packages. This will cut down on stupid spammers and "new version please" pressure creators who simply add noise and affect the workload of packagers and project reviewers, most of whom — myself included — do voluntary work, and are often anyway pressed for time. Our comment reporting system, although good that we now have one anyway, only adds to the workload of project and package maintainers and is rather sub-optimal. It often feels like I am sending my reports to a black hole. Thanks for reading through what turned into a rather long email and best wishes. [1]: https://tukaani.org/xz-backdoor/ [2]: https://en.opensuse.org/openSUSE:Specfile_guidelines#Metadata_Tags [3]: https://pagure.io/fesco/issue/3186 -- Atri

15 33