- openSUSE Factory

Glitches in Plasma6
by Jogchum Reitsma 04 May '24

04 May '24

Hi, I've posted this messages March 18, but while I see it in the archive, apparently it did not make it to my mailbox- no idea how that is possible. I'll give it try here again, slightly modified: Some small glitches after doing the upgrade to plasma 6: -The icon of the program starter is covered by the icon some program sitting on the task bar. I did not find out yes what the "algorithm" is, but so far the only way to get the correct icon is to enter the Edit mode for the panel setting, and change something. But as soon as one hovers over a program on the task bar, that icon supersedes the correct icon again. The tab's from the open programs on the taskbar initially have their corresponding icon, but if one hovers over it, the icon disappears, and only the describing text remains. The small icons for e.g. bluetooth and sound on the right also disappear when hovering over it, and they have no text as such, so it is a bit a guess to find what you need there. But if one hovers over them, you do see the pop-ups of the application under the mouse.. But for the rest, well done for such a massive release, I would say. Thanks! regards, Jogchum

2 2

What is pulling in *-lang packages?
by Stefan Seyfried 03 May '24

03 May '24

Hi all, I recently installed a new laptop with Tumbleweed instead of my old habit of just moving over the installed disk. Now I'm facing some issues that were not present before in my old installation. One of these issues is that something wants to pull in addiditonal -lang packages that I do not want: mixi:~ # zypper -v dup --no-recommends [...] The following 8 NEW packages are going to be installed: cpupower-lang 6.8.6-7.9 file-roller-lang 44.1-1.1 gcr-lang 4.3.0-1.1 gnome-online-accounts-lang 3.50.1-1.1 gtk3-lang 3.24.41-2.1 icewm-lang 3.4.5-3.1 pipewire-lang 1.0.4-3.1 xz-lang 5.6.1.revertto5.4-3.1 As you can see, I already added "--no-recommends" as every experienced user obviously always does, but the *-lang are still added. I can run "zypper al '*-lang'" to avoid this, but then it will never update the installed lang-packages, which is also not what I want. (I do not want translations for any command line tools and graphical stuff that has to be installed but I never actually use, but I do want translations for selected applications) The lock not breaking the update does show that these lang packages are only recommended and not required. But then why does "--no-recommends" not stop them from being installed? Best regards, -- Stefan Seyfried "For a successful technology, reality must take precedence over public relations, for nature cannot be fooled." -- Richard Feynman

14 37

ptrace disabled by default
by Johannes Segitz 03 May '24

03 May '24

Hello, with https://github.com/openSUSE/aaa_base/pull/138 ptrace got disabled by default on Tumbleweed by setting kernel.yama.ptrace_scope = 1 This means that you can't ptrace your own processes in the default configuration (e.g. use strace -p to attach to a running process). This was done because the vast majority of users don't need the funcionality and malware can abuse it to e.g. steal credentials. If you need this functionality (and since you read the list the chances are high) you can set kernel.yama.ptrace_scope back to the default value of 0 and get the old behavior back. Johannes -- GPG Key EE16 6BCE AD56 E034 BFB3 3ADD 7BF7 29D5 E7C8 1FA0 Subkey fingerprint: 250F 43F5 F7CE 6F1E 9C59 4F95 BC27 DD9D 2CC4 FD66 SUSE Software Solutions Germany GmbH, Frankenstraße 146, 90461 Nürnberg, Germany Geschäftsführer: Ivo Totev, Andrew McDonald, Werner Knoblich (HRB 36809, AG Nürnberg)

2 3

New Tumbleweed snapshot 20240502 released!
by Dominique Leuenberger 03 May '24

03 May '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MozillaFirefox (125.0.2 -> 125.0.3) SDL2 (2.30.2 -> 2.30.3) amarok (2.9.75git.20230408T114133~7098c192a6 -> 3.0.0) ca-certificates (2+git20230406.2dae8b7 -> 2+git20240415.3fe9324) cronie ed (1.20.1 -> 1.20.2) gcc14 (14.0.1+git10008 -> 14.0.1+git10154) gnome-browser-connector google-noto-fonts (20240401 -> 20240501) gpsd gstreamer kernel-firmware (20240419 -> 20240426) krb5 libbpf (1.4.0 -> 1.4.1) libreoffice (24.2.2.2 -> 24.2.3.2) nano (7.2 -> 8.0) ncurses (6.4.20240414 -> 6.5.20240427) openSUSE-release (20240430 -> 20240502) polkit-default-privs (1550+20240325.eddbe04 -> 1550+20240430.5327266) python-pygit2 python311 python311-core qemu (8.2.2 -> 8.2.3) re2 (20240401 -> 20240501) sac setools (4.5.0 -> 4.5.1) socat (1.7.4.3 -> 1.8.0.0) systemd yast2-bootloader (5.0.8 -> 5.0.9) yast2-installation (5.0.8 -> 5.0.9) === Details === ==== MozillaFirefox ==== Version update (125.0.2 -> 125.0.3) Subpackages: MozillaFirefox-translations-common - Mozilla Firefox 125.0.3 * Fixed: Fixed an extra blank tab with an address of `https://0.0.0.1` sometimes appearing when attempting to launch Firefox when it is already running (bmo#1892612). * Fixed: Fixed an issue that could cause incorrect font selection in some situations for users with the Japanese locale set (bmo#1892363). * Fixed: Fixed text corruption when dragging text containing unicode characters on Linux systems (bmo#1888202). * Fixed: Fixed a correctness error when checking `arguments.length` (and not using arguments otherwise) inside of a generator or async function (bmo#1892699). * Fixed: Fixed an issue that could lead to inconsistent focus handling of `<select>` elements when opened (bmo#1893177). - Fix build on Leap by requiring gcc13 which has been made available as an update. ==== SDL2 ==== Version update (2.30.2 -> 2.30.3) - Update to release 2.30.3 * Fixed a pointer warping issue on XWayland * Reduced startup time when scanning for game controllers on Linux ==== amarok ==== Version update (2.9.75git.20230408T114133~7098c192a6 -> 3.0.0) - Update to 3.0.0 * https://blogs.kde.org/2024/04/29/amarok-3.0-castaway-released/ - Drop patch, merged upstream: * 0001-Use-non-deprecated-TagLib-functions-fix-build-with-T.patch ==== ca-certificates ==== Version update (2+git20230406.2dae8b7 -> 2+git20240415.3fe9324) - Update to version 2+git20240415.3fe9324: * Add ca-certificates-setup.service * typo: differnt/different ==== cronie ==== Subpackages: cron - Remove safe-backup-permissions.patch -- Merged upstream - Update to 1.7.2: * crond: Revert setting the return path to <>. It is not RFC compliant. * crond: Inherit MAILFROM from the crond process environment. ==== ed ==== Version update (1.20.1 -> 1.20.2) - GNU ed 1.20.2: * Fix a bug that made global commands like 'g/x/s/x/x', with the last delimiter omitted, print every substituted line twice ==== gcc14 ==== Version update (14.0.1+git10008 -> 14.0.1+git10154) Subpackages: libasan8 libatomic1 libgcc_s1 libgcc_s1-32bit libgfortran5 libgomp1 libhwasan0 libitm1 liblsan0 libobjc4 libquadmath0 libstdc++6 libstdc++6-32bit libstdc++6-locale libstdc++6-pp libstdc++6-pp-32bit libtsan2 libubsan1 - Update to gcc-14 branch head, 7a00c459cbb913ac165a39d34, git10154 * GCC 14.1 RC1 ==== gnome-browser-connector ==== - remove dependency on /usr/bin/python3 using %python3_fix_shebang macro, [bsc#1212476] ==== google-noto-fonts ==== Version update (20240401 -> 20240501) Subpackages: google-noto-sans-fonts google-noto-sans-symbols-fonts google-noto-sans-symbols2-fonts - Update to 20240501 * Noto Rashi Hebrew - Corrects the width and position of marks under double-yud and double-vov - Improves the anchoring of yod - Adds the U+053F yod triangle character - Improves the spacing of tsadi * Noto Egyptian Hieroglyphs - Add codepoints from Unicode 14 ==== gpsd ==== - usage of %python3_fix_shebang to cover /usr/bin is also needed [bsc#1212476] ==== gstreamer ==== Subpackages: gstreamer-lang gstreamer-utils libgstreamer-1_0-0 typelib-1_0-Gst-1_0 - remove dependency on /usr/bin/python3 using %python3_fix_shebang_path macro, [bsc#1212476] ==== kernel-firmware ==== Version update (20240419 -> 20240426) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-ath12k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update to version 20240426 (git commit 2398d264f953): * amdgpu: DMCUB updates for various AMDGPU ASICs * linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops * i915: Update Xe2LPD DMC to v2.20 * linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 * linux-firmware: Add firmware for Lenovo Thinkbook 13X * ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop * amdgpu: add DMCUB 3.5 firmware * amdgpu: add VPE 6.1.0 firmware * amdgpu: add VCN 4.0.5 firmware * amdgpu: add UMSCH 4.0.0 firmware * amdgpu: add SDMA 6.1.0 firmware * amdgpu: add PSP 14.0.0 firmware * amdgpu: add GC 11.5.0 firmware * amdgpu: update license date ==== krb5 ==== Subpackages: krb5-32bit krb5-client - Remove requires for not used cron - Fix memory leaks, add patch 0009-Fix-three-memory-leaks.patch * CVE-2024-26458, bsc#1220770 * CVE-2024-26461, bsc#1220771 * CVE-2024-26462, bsc#1220772 ==== libbpf ==== Version update (1.4.0 -> 1.4.1) - update to 1.4.1: * Bug fix release fixing logic around determining whether to autoload SEC("struct_ops") programs in cases when old kernel doesn't support some optional callbacks and user reset them to NULL from BPF skeleton. ==== libreoffice ==== Version update (24.2.2.2 -> 24.2.3.2) Subpackages: libreoffice-base libreoffice-calc libreoffice-draw libreoffice-filters-optional libreoffice-gnome libreoffice-gtk3 libreoffice-icon-themes libreoffice-impress libreoffice-l10n-cs libreoffice-l10n-da libreoffice-l10n-de libreoffice-l10n-el libreoffice-l10n-en libreoffice-l10n-en_GB libreoffice-l10n-es libreoffice-l10n-fr libreoffice-l10n-hu libreoffice-l10n-it libreoffice-l10n-ja libreoffice-l10n-pl libreoffice-l10n-pt_BR libreoffice-l10n-ru libreoffice-l10n-zh_CN libreoffice-l10n-zh_TW libreoffice-mailmerge libreoffice-math libreoffice-pyuno libreoffice-qt5 libreoffice-writer libreofficekit - Update to 2.4.3.2 (24.2.3 final) https://wiki.documentfoundation.org/Releases/24.2.3/RC1 and https://wiki.documentfoundation.org/Releases/24.2.3/RC2 ==== nano ==== Version update (7.2 -> 8.0) Subpackages: nano-lang - GNU nano 8.0: * By default ^F is bound to starting a forward search, and ^B to starting a backward search, while M-F and M-B repeat the search in the corresponding direction. (See the documentation if you want the old bindings back.) * Command-line option --modernbindings (-/) makes ^Q quit, ^X cut, ^C copy, ^V paste, ^Z undo, ^Y redo, ^O open a file, ^W write a file, ^R replace, ^G find again, ^D find again backwards, ^A set the mark, ^T jump to a line, ^P show the position, and ^E execute. * Above modern bindings are activated also when the name of nano's executable (or a symlink to it) starts with the letter "e". * To open a file at a certain line number, one can now use also nano filename:number, besides nano +number filename. * <Alt+Home> and <Alt+End> put the cursor on the first and last row in the viewport, while retaining the horizontal position. * When the three digits in an #RGB color code are all the same, the code is mapped to the xterm grey scale, giving access to fourteen levels of grey instead of just four. * For easier access, M-" is bound to placing/removing an anchor, and M-' to jumping to the next anchor. * Whenever an error occurs, the keystroke buffer is cleared, thus stopping the execution of a macro or a string bind. * The mousewheel scrolls the viewport instead of moving the cursor. ==== ncurses ==== Version update (6.4.20240414 -> 6.5.20240427) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Update to ncurses 6.5 (patch 20240427) + update announcement + fixes/corrections for manpages (patches by Branden Robinson). + fix redefinition of CASTxPTR, for legacy Unix. - Update to tack 1.9 (patch 20230201) * configure: regen * configure.in: initialize $ac_includes_default s/fgrep/$FGREP/ * aclocal.m4: resync with my-autoconf - Add ncurses patch 20240420 + improve formatting/style of manpages (patches by Branden Robinson). + compiler warning/portability fixes. ==== openSUSE-release ==== Version update (20240430 -> 20240502) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== polkit-default-privs ==== Version update (1550+20240325.eddbe04 -> 1550+20240430.5327266) - Update to version 1550+20240430.5327266: * profiles: whitelist dnf5daemon-server (bsc#1218327) * profiles: remove pseudo auth action kcmkwallet5 (bsc#1217190) ==== python-pygit2 ==== - Fix build with gcc 14 * Fix-CI.patch * Fix-leaks-in-fetch_refspecs-and-push_refspecs.patch ==== python311 ==== Subpackages: python311-curses python311-dbm python311-x86-64-v3 - Update CVE-2023-52425-libexpat-2.6.0-backport.patch so that it uses features sniffing, not just comparing version number. Include also support-expat-CVE-2022-25236-patched.patch. - Add CVE-2023-52425-remove-reparse_deferral-tests.patch skipping failing tests. - Refresh patches: - CVE-2023-27043-email-parsing-errors.patch - fix_configure_rst.patch - skip_if_buildbot-extend.patch - Remove included patch: - support-expat-CVE-2022-25236-patched.patch ==== python311-core ==== Subpackages: libpython3_11-1_0 libpython3_11-1_0-x86-64-v3 python311-base python311-base-x86-64-v3 - Update CVE-2023-52425-libexpat-2.6.0-backport.patch so that it uses features sniffing, not just comparing version number. Include also support-expat-CVE-2022-25236-patched.patch. - Add CVE-2023-52425-remove-reparse_deferral-tests.patch skipping failing tests. - Refresh patches: - CVE-2023-27043-email-parsing-errors.patch - fix_configure_rst.patch - skip_if_buildbot-extend.patch - Remove included patch: - support-expat-CVE-2022-25236-patched.patch ==== qemu ==== Version update (8.2.2 -> 8.2.3) Subpackages: qemu-accel-tcg-x86 qemu-audio-spice qemu-block-curl qemu-block-nfs qemu-block-rbd qemu-chardev-spice qemu-guest-agent qemu-hw-display-qxl qemu-hw-display-virtio-gpu qemu-hw-display-virtio-gpu-pci qemu-hw-display-virtio-vga qemu-hw-usb-host qemu-hw-usb-redirect qemu-hw-usb-smartcard qemu-img qemu-ipxe qemu-ksm qemu-lang qemu-microvm qemu-pr-helper qemu-seabios qemu-tools qemu-ui-curses qemu-ui-gtk qemu-ui-opengl qemu-ui-spice-app qemu-ui-spice-core qemu-vgabios qemu-x86 - Fix a build issue on riscv: * target/riscv/kvm: rename riscv_reg_id() to riscv_reg_id_ulong() * target/riscv/kvm: add RISCV_CONFIG_REG() * target/riscv/kvm: change timer regs size to u64 * target/riscv/kvm: change KVM_REG_RISCV_FP_D to u64 * target/riscv/kvm: change KVM_REG_RISCV_FP_F to u32 - Update to version 8.2.3. Full changelog/backports here: https://lore.kernel.org/qemu-devel/1713980341.971368.1218343.nullmailer@tls… Some of the upstream backports are: * Update version for 8.2.3 release * ppc/spapr: Initialize max_cpus limit to SPAPR_IRQ_NR_IPIS. * ppc/spapr: Introduce SPAPR_IRQ_NR_IPIS to refer IRQ range for CPU IPIs. * hw/pci-host/ppc440_pcix: Do not expose a bridge device on PCI bus * hw/isa/vt82c686: Keep track of PIRQ/PINT pins separately * virtio-pci: fix use of a released vector * linux-user/x86_64: Handle the vsyscall page in open_self_maps_{2,4} * hw/audio/virtio-snd: Remove unused assignment * hw/net/net_tx_pkt: Fix overrun in update_sctp_checksum() * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set * hw/net/lan9118: Fix overflow in MIL TX FIFO * hw/net/lan9118: Replace magic '2048' value by MIL_TXFIFO_SIZE definition * backends/cryptodev: Do not abort for invalid session ID * hw/misc/applesmc: Fix memory leak in reset() handler * hw/block/nand: Fix out-of-bound access in NAND block buffer * hw/block/nand: Have blk_load() take unsigned offset and return boolean * hw/block/nand: Factor nand_load_iolen() method out * qemu-options: Fix CXL Fixed Memory Window interleave-granularity typo * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs * ...and many more... ==== re2 ==== Version update (20240401 -> 20240501) - update to 2024-05-01: * Stop setting re2_INCLUDE_DIR * Fixes related to python bindings ==== sac ==== - Clean the spec file a bit ==== setools ==== Version update (4.5.0 -> 4.5.1) Subpackages: python311-setools setools-console - Update to version 4.5.1: - Correct annotations of NetworkX types to make it optional again. - Fix packaging issue for apol's style sheet (apol.css). - Drop 0001-Make-networkx-optional-again-Fixes-125.patch fixed upstream - Change networkx Requires to Suggests ==== socat ==== Version update (1.7.4.3 -> 1.8.0.0) - Update to 1.8.0.0: * Support for network namespaces (option netns) * TCP client now automatically tries all addresses (IPv4 and IPv6) provided by nameserver until success * Implementation of POSIX message queue (mq) control and access on Linux (addresses POSIXMQ-READ and following) * New wrapper script socat-chain.sh allows to stack two addresses, e.g.HTTP proxy connect over SSL * New script socat-mux.sh allows n-to-1 / 1-to-n communications * New script socat-broker.sh allows group communications * Experimental socks5 client feature * Address ACCEPT-FD for systemd "inetd" mode * UDP-Lite and DCCP address types * Addresses SOCKETPAIR and SHELL * New option bind-tmpname allows forked off children to bind UNIX domain client sockets to random unique pathes * New option retrieve-vlan (with INTERFACE addresses) now makes kernel keep VLAN tags in incoming packets * Simple statistics output with Socat option --statistics and with SIGUSR1 * A couple of new options, many fixes and corrections, see file CHANGES - Drop socat-common-fixes.patch (no longer necessary) - Refactor socat-ignore-tests-failure-boo1078346.patch (test suite no longer exits at this stage) - Add socat-test-dhparam fixture (reduce build load and time) - Add socat-test-without-tty.patch for testing without tty. - Note: This version introduces "socat1", linking to "socat" - Note: This version introduces additional shell scripts, those are shipped in a new "socat-extra" subpackage - Update to 1.7.4.4: * FIX: InÂ error.cÂ msg2()Â thereÂ wasÂ aÂ stackÂ overflowÂ onÂ longÂ messages:Â The terminatingÂ \0Â ByteÂ wasÂ writtenÂ behindÂ theÂ lastÂ position. * FIX: UDP-RECVFROMÂ withÂ forkÂ sometimesÂ terminatedÂ whenÂ multipleÂ packets arrived. * FIX:Â aÂ coupleÂ ofÂ weaknessesÂ andÂ errorsÂ whenÂ accessingÂ invalidÂ or Â incompatibleÂ fileÂ systemÂ entriesÂ withÂ UNIXÂ domain,Â file,Â andÂ generic addresses. * FIX:Â badÂ parserÂ errorÂ messageÂ onÂ "socatÂ /tmp/x\"x/xÂ -" - Drop socat-fix-asan-error.patch ==== systemd ==== Subpackages: libsystemd0 libsystemd0-32bit libudev1 systemd-32bit systemd-boot systemd-container systemd-coredump systemd-experimental systemd-lang udev - Update 0008-sysv-generator-translate-Required-Start-into-a-Wants.patch to adapt sysv-generator-test to the SUSE's specificity brought by this patch. - systemd-testsuite: some of the integration tests depend on the bin, daemon, games and nobody users/groups. - Drop _FORTIFY_SOURCE=2 workaround. Since commit 7929e180aa (v253) it shouldn't be needed anymore. - systemd.spec: preparation for the next version of systemd (i.e. v256), libkmod2 will be dlopened hence explicitly require it now as it doesn't hurt with the current version. However don't recommend it from systemd by assuming that when module loading from PID1 is needed, udev is installed. - Make systemd-doc subpackage noarch. ==== yast2-bootloader ==== Version update (5.0.8 -> 5.0.9) - Creating kernel options for systemd-boot. (bsc#1220892) - 5.0.9 ==== yast2-installation ==== Version update (5.0.8 -> 5.0.9) - Handle SystemdBoot mitigations. (bsc#1220892) - 5.0.9

1 0

Please check if your packages build (correctly) with GCC 14
by Martin Jambor 03 May '24

03 May '24

Hello, we would like to ask Factory package maintainers to help us to bring GCC 14 to Tumbleweed. Currently there are 766 packages that are known to fail to build with it in one way or another. If you want to see if your package is one of them, have a look at: https://build.opensuse.org/project/monitor/home:rguenther:plgrnd?arch_x86_6… In order to reproduce the build using GCC 14 locally, you can invoke osc with: osc -A https://api.opensuse.org build --alternative-project home:rguenther:nextgcc Most of the failures are going to be because GCC 14 by default treats as errors a number of situations which up to now only triggered warnings, such as implicit int types or implicit function declarations. There is a very nice document describing most likely way to fix these and other issues along with possible pitfalls at: https://gcc.gnu.org/gcc-14/porting_to.html Please note that the new errors can and unfortunately also do affect environment probing, especially with old autotools. So even when your package builds, it is advisable to check and/or compare config.log and/or config.h with compilation using GCC 13. It is always best to fix the new errors, but if your project is just written in pre-C99-standard C, you can simply use option -std=gnu89 to revert to previous behavior in this regard. In the unfortunate case that the C used is more "modern" but relies on the use of this newly erroneous behavior and there simply isn't enough time to fix it soon, you can turn the errors back to warnings with a new C option -fpermissive. In that case, please report a bug and make it depend on meta-bug boo#1220571. If you want to have a look whether and/or how people at Gentoo and Fedore already dealt with such issues in their corresponding package, you can check out: - https://bugs.gentoo.org/showdependencytree.cgi?id=870412&hide_resolved=0 - https://gitlab.com/fweimer-rh/fedora-modernc/ Of course, there may be also other issues with the new compiler, please use meta-bug boo#1220574 to track these. If you suspect the new compiler is to blame, please (double check and then) indicate so in the bug and we will try to help you. Thank you very much, Martin

2 1

Re: ptrace disabled by default
by Mihai Moldovan 03 May '24

03 May '24

* On 5/3/24 14:44, Carlos E. R. wrote: > Does this need recompiling? > > Is it a boot option only, or can it be done after the system is booted? It's a sysctl setting that can be modified at run time. Mostly. Unless you set its value to "3", at which point it'll stick and can't be modified again. More information, as usual, in the kernel documentation: https://www.kernel.org/doc/Documentation/security/Yama.txt Mihai

1 0

Tumbleweed - Review of the weeks 2024/17 & 18
by Dominique Leuenberger 03 May '24

03 May '24

Dear Tumbleweed users and hackers, Last week, I was attending the SUSE Labs Conference last week and had to skip writing the weekly review. As many SUSE devs were there too, the expectation was to get fewer changes anyway during week 17. Consequently, I am spanning two weeks again today and will be covering the nine snapshots (0419, 0421, 0423, 0425…0430) released during this period. The most relevant changes delivered were: * Linux kernel 6.8.7 & 6.8.8 * SETools 4.5.0 * libxml 2.12.6 * LLVM 18.1.4 * Python 3.11.9 & 3.12.3 * Mesa 24.0.5 * Mozilla Firefox 125.0.2 * SQLite 3.45.3 Having some engineers together at the Labs Conference also allowed them to directly exchange ideas and work on some of the things in staging. Simon and I have worked on dbus-broker and made some good progress, but we have not yet reached the end goal. Similarly for other things in the staging areas. The most interesting changes being prepared are: * Mozilla Firefox 125.0.3 * LibreOffice 24.2.3.2 * QEmu 8.2.3 * GNOME 46.1 * Ninja 1.12.0 * util-linux 2.40 * Ruby 3.3.1 * dbus-broker: some networking issue after upgrades left to work out * GCC 14: phase 2: use gcc14 as the default compiler – lots of help needed: https://build.opensuse.org/project/show/openSUSE:Factory:Staging:Gcc7 Cheers, Dominique

1 0

Question about build
by Larry Finger 03 May '24

03 May '24

When I build VirtualBox using osc, I get the following WARNING: [ 15s] WARNING could not set SOURCE_DATE_EPOCH, ensure BUILD_RELEASE is set in /.buildenv I have not found any description of the contents of .buildenv. I do notice that OBS has a file _buildenv, but it does not define BUILD_RELEASE. Is that the same file? Are either file described any place that is accessible? Thanks, Larry

2 1

Need a sanity check re: efivarfs
by Jim Henderson 03 May '24

03 May '24

I'm working on an issue with my System76 system not being able to apply the firmware update that updates the UEFI dbx to version 371 (the version that resolves the issue resulting from the discovery of the BlackLotus UEFI bootkit). The issue I'm having is that efivarfs is running out of space. I'm being advised to increase the size of my UEFI partition - which is 4 GB and has 158 MB free - for a firmware update that is 21.2 KB in size, and the output from fwupdmgr is telling me that efivarfs doesn't have enough free space (it has 20KB free). There's nothing in the messages that suggests that I need additional space in the UEFI partition on my system - the specific message I get is: failed to write data to efivarfs: Error writing to file descriptor: No space left on device There's no reason to be messing about with my UEFI partition at all, is there? (They had also suggested using efibootmgr to remove some entries, and that does clear out some of the Boot0* files in /sys/firmware/efi/ efivars - but not enough). The issue is with the constraints in the nvram where this data is stored itself, and not the UEFI boot partition on my SSD, correct? Just want to make sure I'm completely understanding the message I'm seeing. (As a "bonus question", messing around with just deleting stuff like the dbx files in efivarfs could potentially brick the system, right?) -- Jim Henderson Please keep on-topic replies on the list so everyone benefits

6 42

krdc has been seriously broken since plasma6
by Joe Salmeri 02 May '24

02 May '24

krdc has been seriously broken since plasma6 reached TW, meanwhile xfreerdp has no problems connecting. This is still true as of 20240430. It seems that users of other distros have had success going back from krdc version 24.02 to 23.8. Any way that krdc 23.8 could be made available again ? Previously I reported that krdc just displayed a blue screen on connection but that was with 20240329 it has gotten worse with new builds. Now it just segfaults but there seem to be multiple issues related to the breakage. joe@twlatest:~> krdc rdp://joe@rdptemp kf.coreaddons: The plugin "/usr/lib64/qt6/plugins/krdc/libkrdc_rdpplugin.so" explicitly states an Id in the embedded metadata, which is different from the one derived from the filename The Id field from the KPlugin object in the metadata should be removed kf.coreaddons: The plugin "/usr/lib64/qt6/plugins/krdc/libkrdc_testplugin.so" explicitly states an Id in the embedded metadata, which is different from the one derived from the filename The Id field from the KPlugin object in the metadata should be removed kf.coreaddons: The plugin "/usr/lib64/qt6/plugins/krdc/libkrdc_vncplugin.so" explicitly states an Id in the embedded metadata, which is different from the one derived from the filename The Id field from the KPlugin object in the metadata should be removed qt.core.qobject.connect: QObject::connect: No such signal KBookmarkManager::changed(QString,QString) Segmentation fault (core dumped) -- Regards, Joe

2 3