- openSUSE Factory

Progress Update: SELinux as default MAC system on new Tumbleweed installations
by Cathy Hu 21 Dec '24

21 Dec '24

Hi all, *see TL;DR down below* We would like to give you a progress update about the change of the default mandatory access control (MAC) system selection in the Tumbleweed installer from AppArmor to SELinux. For context, please refer to the email: "RFC: SELinux as default MAC system on new Tumbleweed installations" sent to this list on 2024-07-19. What has been done so far: We have prepared the change [0] in the Yast installer, which selects SELinux in enforcing mode as the default MAC system instead of AppArmor. ** This change, however, is *not* in Tumbleweed yet. This means that the MAC system selected by default in the installer is still AppArmor at this time. ** During testing, we found and fixed multiple bugs on the distribution side, with major help from different teams and people, especially Fabian Vogt from the Future Technologies team (thanks!). However, there is still a long way to go, as there are still blockers on the list [1], so it will take some more time. Additionally, openQA tests were assuming AppArmor as the only MAC system in some cases, so they needed to be adjusted to the change, and additional tests added for SELinux. Thanks to the openQA devs, especially the qe-core squad, multiple tickets have already been resolved. However, same as on the distribution side, there are still a lot of topics open [2]. Timeline update: We announced in our last email that we aimed to make this change latest by the end of 2024. Unfortunately, this goal was too optimistic and there is still a lot of work to do. Moving forward, we want to make the change in 2025, and I will provide you with further updates about the progress. TL;DR: - The default MAC system selected by the Tumbleweed installer at this time is still AppArmor. - During testing, we found some bugs on the distribution side, many of which have been resolved by now, but some are still open blockers. - openQA tests are being adjusted to the change as well, but there are still some that are not done yet. - We will move forward with a different timeline (2025, instead of end of 2024). - We are not introducing any other change to the previous plan. Thank you very much :) Kind regards, Cathy [0] https://build.opensuse.org/request/show/1198720 [1] https://bugzilla.suse.com/show_bug.cgi?id=1230118 [2] https://progress.opensuse.org/issues/166613 -- Cathy Hu <cahu(a)suse.de> SELinux Security Engineer GPG: 5873 CFD1 8C0E A6D4 9CBB F6C4 062A 1016 1505 A08A SUSE Software Solutions Germany GmbH Frankenstrasse 146 90461 Nürnberg Geschäftsführer: Ivo Totev, Andrew McDonald, Werner Knoblich (HRB 36809, AG Nürnberg)

2 2

New Tumbleweed snapshot 20241218 released!
by Dominique Leuenberger 20 Dec '24

20 Dec '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: bind clamav (1.3.1 -> 1.4.1) dracut-pcr-signature (0.5+0 -> 0.5+1) dump (0.4b47 -> 0.4b49) eekboard flashrom (1.4.0 -> 1.5.0) fwupd-efi (1.3 -> 1.7) glslang (15.0.0 -> 15.1.0) gnome-calculator (47.0 -> 47.1) meson (1.6.0 -> 1.6.1) mozjs128 openSUSE-release (20241217 -> 20241218) python-urllib3 qalculate (5.2.0 -> 5.4.0) sdbootutil (1+git20241206.dccea55 -> 1+git20241217.5aeb4e9) sendmail === Details === ==== bind ==== Subpackages: bind-doc bind-utils - update root hints file to 2024-11-20 version (boo#1234406) ==== clamav ==== Version update (1.3.1 -> 1.4.1) Subpackages: libclamav12 libclammspack0 libfreshclam3 - fix factory submission (clam.tcl, clamscan.log) - New version 1.4.1: * [CVE-2024-20506, bsc#1230162]: Changed the logging module to disable following symlinks on Linux and Unix systems so as to prevent an attacker with existing access to the 'clamd' or 'freshclam' services from using a symlink to corrupt system files. * [CVE-2024-20505, bsc#1230161]: Fixed a possible out-of-bounds read bug in the PDF file parser that could cause a denial-of-service (DoS) condition. * https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html - New version 1.4.0: * Added support for extracting ALZ archives. * Added support for extracting LHA/LZH archives. * Added the ability to disable image fuzzy hashing, if needed. For context, image fuzzy hashing is a detection mechanism useful for identifying malware by matching images included with the malware or phishing email/document. * https://blog.clamav.net/2024/08/clamav-140-feature-release-and-clamav.html - New version 1.3.2: * CVE-2024-20506: Changed the logging module to disable following symlinks on Linux and Unix systems so as to prevent an attacker with existing access to the 'clamd' or 'freshclam' services from using a symlink to corrupt system files. * CVE-2024-20505: Fixed a possible out-of-bounds read bug in the PDF file parser that could cause a denial-of-service condition. * Removed unused Python modules from freshclam tests including deprecated 'cgi' module that is expected to cause test failures in Python 3.13. * Fix unit test caused by expiring signing certificate. * Fixed a build issue on Windows with newer versions of Rust. Also upgraded GitHub Actions imports to fix CI failures. * Fixed an unaligned pointer dereference issue on select architectures. * Fixes to Jenkins CI pipeline. - Remove upstreamed 1305.patch ==== dracut-pcr-signature ==== Version update (0.5+0 -> 0.5+1) - Update to version 0.5+1: * Make the mount do not depend of default service ==== dump ==== Version update (0.4b47 -> 0.4b49) - Update to 0.4b49: * Reworking of regression tests and test harness * Import some patches from the Debian package. * restore -N should never change the fs. Fixes #154 * Support outputting list of files from restore -t with '\0' separator (Patch from debian bug 703564 by Heiko Schlittermann) * Fix reading of QFA file when listing tape. * Support restoring to filesystems with a blocksize that isn't a multiple of TP_BSIZE (debian bug 995992). This is a different fix to the one currently in debian. The advantage of using a common multiple, if available, is that every FS block will only be written to once. Fixed an issue where the alignment between blocksize and writing pos becomes misaligned when a sparse hole doesn't occupy a full fs block (happens when restoring to a FS with a different, larger blocksize than the one the dump was taken on. * Numerous other minor patches from the Debian package * Don't read off end of buffer when restoring symlinks * Fix some weirdness around dumping a subdirectory. Do not include the inodes for all of the items in the subdirectories - which then give a restore error "inode not found on tape" * Fix EA problem when EAs blocks are read immediately before a tape change. * Allow compressed dumps to work when -b blocksize setting is the maximum a tape drive supports. * Remove code added for building on systems other than __linux__ * Major reworking of how reading from disk and tape works. Dump now supports writing a compressed dump to a file and then writing that to tape. There is now only one "read" function. We do not have separate functions for reading tapes, files, compressed tapes, compressed files. * Improve the efficiency of TS_ADDR (and TS_INODE) record for representing larger files. A single TS_ADDR record can now represent up to 4GB of file rather than just 512K. Dumps written by 0.4b49 cannot be restored using 0.4b48 and before. - 0.4b48 changelog: * Handle fs with more than 2^32 blocks (Greg Oster) * Handle EA stored in blocks with address >2^32. * Handle the case were EAs are stored across two blocks. Fixes several reported bugs regarding the restore of directory attributes. Additionally, now restore -C passes too. Originally restore -C was patched for files, but not directories, in debian bug#940473 by Alexander Zangerl. Substantially redone and extended to directory attributes here. * Do not record garbage data in dump for files with EXT2_EXTENT_FLAGS_UNINIT set indicating that the disk block has not been written to and should be assumed to be all zeros. * Dump small files on ext4 partitions with -O inline-data set. * Major performance enhancements on the restoring and verifying of very sparse files. * Handle dumps that are over 2^32 (tape) blocks long (>4T) * Handle restoring sparse files that start with a hole from dump versions 0.4b42/43. Previously they were restored but corrupted as some of the initial hole was moved to the end. * Many cleanups. Move to autoconf v0.71. Remove need to build with - fcommon. Build with -W -Wall and without compiler warnings. Add some compile time checks for structures that are written to tape and must not change. * Extensive regression tests. Every bug fixed by 0.4b48 release is now covered by a regression test along with testing the restore of a historical dump created by the previous versions from 0.4b5 through 0.4b47. - Use autopatch - Refresh patches ==== eekboard ==== - Add fix-compile-on-gcc14.patch. ==== flashrom ==== Version update (1.4.0 -> 1.5.0) - Update to version 1.5.0 * https://www.flashrom.org/release_notes/v_1_5.html * Update flashrom.keyring ==== fwupd-efi ==== Version update (1.3 -> 1.7) - Update to version 1.7: * Fix compilation with GNU-EFI 4.0 - Use upstream tarball: source service isn't useful on this package - Add 106.patch: * Improves ARM32 crt0 by splitting header and code * Use pkgconfig for gnu-efi - fixes RISC-V build * Update lds from gnu-efi 4.0 - Update to version 1.6: * Require gnu-efi 3.0.18 or later * Ship an objcopy capable LDS for ARM64 * Detect gnu-efi via pkgconfig * Backport the ctors and dtors work from gnu-efi upstream * Tidy up crt0 generator * Add RISC-V support * Fix per NX bit and UEFI 2.10 Microsoft requirements - Remove un-needed BRs: * pkgconfig(efiboot) * pkgconfig(efivar) - Remove shim requirement: it doesn't need it, it's a UEFI binary - Restore ix86 and ARM32 support - Add RISC-V support - Remove patches (fixed upstream): * binutils-2.38-arm-objcopy.patch * binutils-2.38-arm-system-crt0.patch * ARM-fixes.patch ==== glslang ==== Version update (15.0.0 -> 15.1.0) - Update to release 15.1 * Add Vulkan 1.4 target and client * Implement GLSL_NV_cooperative_matrix2 * Emit OpModfStruct instead of depracated OpModf ==== gnome-calculator ==== Version update (47.0 -> 47.1) Subpackages: gnome-calculator-lang gnome-shell-search-provider-gnome-calculator - Update to version 47.1: + Announce the calculation result even when done through the buttons. + Set "Insert Character Code" dialog as modal. + Fixed incorrect units in financial mode. + Changed history view default size. + Fixed incorrectly sized text entry. + Updated translations. ==== meson ==== Version update (1.6.0 -> 1.6.1) Subpackages: meson-vim - Update to version 1.6.1: + Handle top level options set in subprojects. + modernize Rust template. + CMakeToolchain: Log output on compiler state failure. + rust: fix computation of library directory. + modules/rust: Add support for autolib field in the Cargo.toml. - Drop 13935.patch: fixed upstream. ==== mozjs128 ==== - Add mozjs128-CVE-2024-11498.patch: Backporting bf4781a2 from upstream, Check height limit in modular trees. Also rewrite the implementation to use iterative checking instead of recursive checking of tree property values, to ensure stack usage is low. Before, it was possible for appropriately-crafted files to use a significant amount of stack. (CVE-2024-11498, bsc#1233786) - Add mozjs128-CVE-2024-11403.patch: Backporting 9cc451b9 from upstream, Port the Huffman lookup table size fix from brunsli. (CVE-2024-11403, bsc#1233766) ==== openSUSE-release ==== Version update (20241217 -> 20241218) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== python-urllib3 ==== - Ignore DeprecationWarning in tests (bsc#1234681) ==== qalculate ==== Version update (5.2.0 -> 5.4.0) Subpackages: libqalculate23 qalculate-data - update to 5.4.0: - Option to continuously display result while editing expression - Option to specify number of displayed significant digits, instead of using precision - New functions: tripleProduct(), multilimit() - Improve decision to automatically convert unchanged quantity with unit - Improve ability to abort matrix functions - Add plot() function example, and support expression in y=f(x) format - Place "approx." on same line as value (instead of as equals sign) in qalc - Display "aborted" for long aborted result in qalc - Updated French translation - Fix case conversion of Âµ to M and similar - Fix segfault with very large integer raised by very large integer - Fix wrong output of converted unit with non-numerical exponent in some cases (e.g. ft^x converted to m without expansion) - Fix "sqrt(x-1/x)+sqrt(1-1/x)-x=0" when approximation is not exact - Fix clear using Ctrl+L when input line is not empty - Minor bug fixes and feature enhancements - update to 5.3.0: - Fix memory leaks - Fix segfault with recursive (self-referencing) function - Fix input of negative exponent in scientific e notation with RPN syntax - Fix parsing of 1Â°2'3" as 1Â°+2'+3" - Fix definite integral for 1/sqrt(1-x^2), with limits higher/lower than or equal to -1 and 1 - Fix crash with empty vector in plot function, e.g. plot([]) - Fix "did you mean..." warning for two implicitly multiplicated functions without space between (e.g. "atan2(a,b)atan2(c,d)") - Fix inability to abort randpoisson() with very high rate value - Fix Calculator::reset() - Improve handling of "where" expressions with inequalities - Place n and C last in variable isolation priority order - Remove unnecessary calculation for output of integers with non-decimal number base (fixes delay with very high precision) - Add nmi symbol for nautical mile - Add free_thread_caches() function - Add Calculator::parseToExpression() - Disable load() and export() functions when --disable-insecure compile option is enabled - Fix saving of percentage interpretation in qalc - Fix save definitions option in qalc - Fix interpretation of mHâO, and related units with Unicode subscript in qalc - Fix line break for output from command line expression or file, before interactive mode - Avoid asking questions when reading commands/expressions from file before interactive mode - "unkeep" command (reverse of "keep") - Support abbreviations for scientific (sci) and engineering (eng) as options for scientific notation (exp) - Show error for unrecognized command line options when expression is separated from options by "--" - Do not show single input decimal number as fraction by default if small or large enough to be displayed using scientific notation - Minor bug fixes and feature enhancements ==== sdbootutil ==== Version update (1+git20241206.dccea55 -> 1+git20241217.5aeb4e9) Subpackages: sdbootutil-snapper sdbootutil-tukit - Update to version 1+git20241217.5aeb4e9: * Use only the first output line of findmount in free space calc - Update to version 1+git20241217.1370153: * Add trigger for grub2-bls ==== sendmail ==== Subpackages: libmilter1_0 - Add sendmail.8.18.1-reproducibleuname.patch to not embed the build machine's kernel version in debuginfo (boo#1234629)

1 0

New Slowroll update 20241220T0135 released!
by bernhardout＠lsmod.de 20 Dec '24

20 Dec '24

Please note that this mail was generated by a script. A collection of maintenance updates was released for Slowroll. Released 42 packages: * argocd-cli * btop * cilium-cli * clknetsim * cluster-glue * docker-stable * gensio * govulncheck-vulndb * gstreamer-devtools * gstreamer-docs * gstreamer-editing-services * gstreamer-plugins-libav * gstreamer-plugins-ugly * gstreamer-plugins-vaapi * gstreamer-rtsp-server * gvfs * gyp * haproxy * json-glib * kor * lagrange * libgedit-gfls * libnvidia-egl-wayland * lswt * netavark * openexr * packetdrill * paprefs * plocate * python-Bottleneck * python-bokeh * python-gst * python-jedi * python-pandas * python-s3transfer * python-sortinghat * python-starlette * python-xhtml2pdf * rubygem-nokogiri * sbd * spicetify-cli * tpm2-pkcs11

1 0

New Slowroll update 20241218T2047 released!
by bernhardout＠lsmod.de 18 Dec '24

18 Dec '24

Please note that this mail was generated by a script. A collection of maintenance updates was released for Slowroll. Released 68 packages: * aws-cli * chronos * cloudflared * cosmic-app-library * cosmic-edit * cosmic-ext-applet-emoji-selector * cosmic-icons * cosmic-notifications * cosmic-osd * cosmic-panel * cosmic-randr * cosmic-reader * cosmic-session * cosmic-store * cosmic-term * cosmic-workspaces * dkms * docker * docker-stable * emacs * examine * flatpak-xdg-utils * git-bug * golang-github-prometheus-promu * gstreamer-plugins-bad * gstreamer-plugins-rs * hcloud-upload-image * helm * httperf * kernel-firmware * kstars * kumactl * libiscsi * libjxl * libnettle * liboqs * libtpms * localsearch * maven-javadoc-plugin * mozjs115 * mozjs128 * mpd * openrct2 * python-argcomplete * python-azure-mgmt-resourcehealth * python-boto3 * python-botocore * python-fontMath * python-identify * python-osc-tiny * python-poetry * python-pytest-sphinx * python-unify * python-wheezy.template * qubesome * radare2 * rhash * scons * sile * simutrans * starboard * tcpdump * timeshift * traefik2 * tree-sitter-markdown * tree-sitter-qmljs * tree-sitter-vim * ubridge

1 0

New Tumbleweed snapshot 20241217 released!
by Dominique Leuenberger 18 Dec '24

18 Dec '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: emacs freerdp (3.9.0 -> 3.10.2) gnome-contacts (47.0 -> 47.1.1) gsasl libesmtp lvm2 (2.03.24 -> 2.03.29) lvm2-device-mapper (2.03.24_1.02.198 -> 2.03.29_1.02.203) ncurses (6.5.20241123 -> 6.5.20241214) openSUSE-release (20241216 -> 20241217) re2c (4.0.1 -> 4.0.2) selinux-policy (20241213 -> 20241216) sqlite3 tinysparql (3.8.1 -> 3.8.2) === Details === ==== emacs ==== Subpackages: emacs-el emacs-eln emacs-info emacs-nox etags - Add patch emacs-CVE-2024-53920.patch (bsc#1233894, CVE-2024-53920) * Disable flymake on start and save to avoid to be attacked with elisp code from foreign source. ==== freerdp ==== Version update (3.9.0 -> 3.10.2) Subpackages: libfreerdp3-3 librdtk0-0 libwinpr3-3 - Update to 3.10.2 * Fix initializing ComputerName setting (#10985) * Fix some warnings and possible leaks (#10985) * Add FreeBSD as architecture build to our ci (#10980 and others) * Fix empty include directory creation (#10981) * Fix SIMD detection (#10968) * Improve settings unit test coverage (#10966) * Fix sending server redirection PDU (#10963) * Fix return and use of GetComputerNameA (#10962) - Update to 3.10.0 So, what is new: * Enforce use of a supported build type (#10777) * Enable FDK-AAC support for nightly packages (#10875, #10781) * Better AAD/AVD support (#10796) * Build system updates (#10844) * Enforce spell checking (#10881) * Split unit tests so a subset can be run during package build (#10776) * We're shipping a .desktop file now (#10465) * Build scripts for nightly packages (#10835, #10783) Noteworthy changes: * Fix wStream API bugs (#10885) * Autoreconnect fixes (#10915) * Fix monitor layout checks (#10905) * Enforce code formatting for CMake files (#10895) * Enable SIMD optimizations by default (#10894) * WinPR types not based on stdint.h et al (#10754) * Improve code assertions (#10768) * Code cleanups (#10763, #10914) * Fixes bsc#1233824 ==== gnome-contacts ==== Version update (47.0 -> 47.1.1) Subpackages: gnome-contacts-lang gnome-shell-search-provider-contacts - Update to version 47.1.1: + Fixed the problem of the "Cancel" button no longer working in certain cases (for example when editing a contact). + The app name is again properly passed on to the system, fixing an issue where it wouldn't show up properly on some systems. + On some systems, taking a picture with the camera didn't work if graphics drivers aren't installed. This is now fixed. ==== gsasl ==== - Disable support for insecure NTLM authentication; jsc#PED-11790 ==== libesmtp ==== - Disable support for insecure NTLM authentication; jsc#PED-11790 ==== lvm2 ==== Version update (2.03.24 -> 2.03.29) Subpackages: liblvm2cmd2_03 - Update lvm2 from LVM2.2.03.24 to LVM2.2.03.29 * ** WHATS_NEW from 2.03.24 to 2.03.29 *** Version 2.03.29 - 09th December 2024 ==================================== Configure --enable/disable-sd-notify to control lvmlockd build with sd-notify. Allow test mode when lvmlockd is built without dlm support. Add a note about RAID + integrity synchronization to lvmraid(7) man page. Add a function for running lvconvert --repair on RAID LVs to lvmdbusd. Improve option section of man pages for listing commands ({pv,lv,vg}{s,display}). Fix renaming of raid sub LVs when converting a volume to raid (2.03.28). Fix segfault/VG write error for raid LV lvextend -i|--stripes -I|--stripesize. Revert ignore -i|--stripes, -I|--stripesize for lvextend on raid0 LV (2.03.27). Version 2.03.28 - 04th November 2024 ==================================== Use radix_tree to lookup for UUID within committed metadata. Use radix_tree to lookup LV list entry within VG struct. Introduce setting config/validate_metadata = full | none. Restore fs resize call for lvresize -r on the same size LV (2.03.17). Correct off-by-one devicesfile backup counting. Replace use of dm_hash with radix_tree for lv names and uuids. Refactor vg_validate with uniq_insert and better use of CPU caches. Add radix_tree_uniq_insert. Update DM cache when taking next VG lock instead of dropping it. Generate json string id only for json reporting. For vgsummary use new API call dm_config_parse_only_section(). Use radix_tree for PV names mapping. Split check_lv_segment into separate _in/complete_vg variant. Use find_lv instead of find_lv_in_vg when possible. Do a mirror fixup only when mirrors with logs are imported. Add faster crc32 calculation from zlib code for x86_64. Fall back to direct zeroing if BLKZEROOUT fails during new LV initialization. Version 2.03.27 - 02nd October 2024 =================================== Fix swap device size detection using blkid for lvresize/lvreduce/lvextend. Detect GPT partition table and pass partition filter if no partitions defined. Add global/sanlock_align_size option to configure sanlock lease size. Disable mem locking when activation/reserved_stack or reserved_memory is 0. Fix locking issues in lvmlockd leaving thin pool locked. Deprecate vdo settings vdo_write_policy and vdo_write_policy. Lots of typo fixes across lvm2 code base (codespell). Corrected integrity parameter interleave_sectors for DM table line. Ignore -i|--stripes, -I|--stripesize for lvextend on raid0 LV, like raid10. Do not accept duplicate device names for pvcreate. Version 2.03.26 - 23rd August 2024 ================================== Fix internal error reported by pvmove on a VG with single PV. Also accept --mknodes --refresh for vgscan. Fix vgmknodes --refresh to wait for udev before checking /dev content. Use log/report_command_log=1 config setting by default for JSON output format. Fix unreleased memory pools on RAID lvextend. Add --integritysettings option to manipulate dm-integrity settings. Version 2.03.25 - 12nd July 2024 ================================ Utilize more radix_tree instead of dm_hash and btree. Refactor DM uuid caching from device_mapper directory. Enhance checking for DM uuid device. Fix lvm shell command completion on tab key (2.03.24). Avoid lockd_vg call to lvmlockd for local VGs. Allow forced change of locktype from none. Handle OPTIONS defined in /etc/sysconfig/lvmlockd. * ** WHATS_NEW_DM from 1.02.198 to 1.02.203 *** Version 1.02.203 - 09th December 2024 ===================================== Version 1.02.202 - 04th November 2024 ===================================== Introduce dm_config_parse_only_section to stop parsing after section. For shorter string use on stack buffers when generating sections. Enhance dm_config tokenizer. Version 1.02.201 - 02nd October 2024 ==================================== Cleanup udev sync semaphore if dm_{udev_create,task_set}_cookie fails. Improve error messages on failed udev cookie create/inc/dec operation. Version 1.02.200 - 23rd August 2024 =================================== Version 1.02.199 - 12nd July 2024 ================================= - update lvm2.spec - change lvm2_version to 2.03.29 - change upstream_device_mapper_version and device_mapper_version to 1.02.203 - include new systemed files lvm-devices-import.path and lvm-devices-import.service in lvm2 package - add build dependency 'pkgconfig(systemd)' and configure option '--enable-sd-notify' for lvmlockd - remove unrecognized (since 2.03.01) configure parameter '--with-cluster' from lvmlockd ==== lvm2-device-mapper ==== Version update (2.03.24_1.02.198 -> 2.03.29_1.02.203) Subpackages: device-mapper libdevmapper-event1_03 libdevmapper1_03 - Update lvm2 from LVM2.2.03.24 to LVM2.2.03.29 * ** WHATS_NEW from 2.03.24 to 2.03.29 *** Version 2.03.29 - 09th December 2024 ==================================== Configure --enable/disable-sd-notify to control lvmlockd build with sd-notify. Allow test mode when lvmlockd is built without dlm support. Add a note about RAID + integrity synchronization to lvmraid(7) man page. Add a function for running lvconvert --repair on RAID LVs to lvmdbusd. Improve option section of man pages for listing commands ({pv,lv,vg}{s,display}). Fix renaming of raid sub LVs when converting a volume to raid (2.03.28). Fix segfault/VG write error for raid LV lvextend -i|--stripes -I|--stripesize. Revert ignore -i|--stripes, -I|--stripesize for lvextend on raid0 LV (2.03.27). Version 2.03.28 - 04th November 2024 ==================================== Use radix_tree to lookup for UUID within committed metadata. Use radix_tree to lookup LV list entry within VG struct. Introduce setting config/validate_metadata = full | none. Restore fs resize call for lvresize -r on the same size LV (2.03.17). Correct off-by-one devicesfile backup counting. Replace use of dm_hash with radix_tree for lv names and uuids. Refactor vg_validate with uniq_insert and better use of CPU caches. Add radix_tree_uniq_insert. Update DM cache when taking next VG lock instead of dropping it. Generate json string id only for json reporting. For vgsummary use new API call dm_config_parse_only_section(). Use radix_tree for PV names mapping. Split check_lv_segment into separate _in/complete_vg variant. Use find_lv instead of find_lv_in_vg when possible. Do a mirror fixup only when mirrors with logs are imported. Add faster crc32 calculation from zlib code for x86_64. Fall back to direct zeroing if BLKZEROOUT fails during new LV initialization. Version 2.03.27 - 02nd October 2024 =================================== Fix swap device size detection using blkid for lvresize/lvreduce/lvextend. Detect GPT partition table and pass partition filter if no partitions defined. Add global/sanlock_align_size option to configure sanlock lease size. Disable mem locking when activation/reserved_stack or reserved_memory is 0. Fix locking issues in lvmlockd leaving thin pool locked. Deprecate vdo settings vdo_write_policy and vdo_write_policy. Lots of typo fixes across lvm2 code base (codespell). Corrected integrity parameter interleave_sectors for DM table line. Ignore -i|--stripes, -I|--stripesize for lvextend on raid0 LV, like raid10. Do not accept duplicate device names for pvcreate. Version 2.03.26 - 23rd August 2024 ================================== Fix internal error reported by pvmove on a VG with single PV. Also accept --mknodes --refresh for vgscan. Fix vgmknodes --refresh to wait for udev before checking /dev content. Use log/report_command_log=1 config setting by default for JSON output format. Fix unreleased memory pools on RAID lvextend. Add --integritysettings option to manipulate dm-integrity settings. Version 2.03.25 - 12nd July 2024 ================================ Utilize more radix_tree instead of dm_hash and btree. Refactor DM uuid caching from device_mapper directory. Enhance checking for DM uuid device. Fix lvm shell command completion on tab key (2.03.24). Avoid lockd_vg call to lvmlockd for local VGs. Allow forced change of locktype from none. Handle OPTIONS defined in /etc/sysconfig/lvmlockd. * ** WHATS_NEW_DM from 1.02.198 to 1.02.203 *** Version 1.02.203 - 09th December 2024 ===================================== Version 1.02.202 - 04th November 2024 ===================================== Introduce dm_config_parse_only_section to stop parsing after section. For shorter string use on stack buffers when generating sections. Enhance dm_config tokenizer. Version 1.02.201 - 02nd October 2024 ==================================== Cleanup udev sync semaphore if dm_{udev_create,task_set}_cookie fails. Improve error messages on failed udev cookie create/inc/dec operation. Version 1.02.200 - 23rd August 2024 =================================== Version 1.02.199 - 12nd July 2024 ================================= - update lvm2.spec - change lvm2_version to 2.03.29 - change upstream_device_mapper_version and device_mapper_version to 1.02.203 - include new systemed files lvm-devices-import.path and lvm-devices-import.service in lvm2 package - add build dependency 'pkgconfig(systemd)' and configure option '--enable-sd-notify' for lvmlockd - remove unrecognized (since 2.03.01) configure parameter '--with-cluster' from lvmlockd ==== ncurses ==== Version update (6.5.20241123 -> 6.5.20241214) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch +20241207 + strict compiler-warning fixes for upcoming gcc15 - Port patches means same fixes as above * FORTIFY_SOURCE_3-fix.patch * ncurses-6.4.dif - Add ncurses patch 20241130 + improve configure check for lint program. + adjust options in test-programs to allow for consistent use of -c/-l for command/logging. + modify win_driver.c for MinGW to handle shift-tab and control-tab as back-tab (report by Axel Reinhold) ==== openSUSE-release ==== Version update (20241216 -> 20241217) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== re2c ==== Version update (4.0.1 -> 4.0.2) - Update to version 4.0.2 * CMake build system: fixed bug (#515) where language-specific binaries erroneously defaulted to generating code for C. * Playground: address bar now reflects navigation between examples, editors use a more high-contrast CSS theme. ==== selinux-policy ==== Version update (20241213 -> 20241216) Subpackages: selinux-policy-targeted - Update to version 20241216: * Allow vhostmd_t list virtqemud pid dirs (bsc#1230961) ==== sqlite3 ==== Subpackages: libsqlite3-0 libsqlite3-0-x86-64-v3 sqlite3-tcl - Add sqlite3-6216bfcb.patch to fix a test suite regression in 3.47.0 on s390x. Only the test was broken, not the code itself. https://sqlite.org/forum/forumpost/7b2bab04c5 ==== tinysparql ==== Version update (3.8.1 -> 3.8.2) Subpackages: libtracker-sparql-3_0-0 tinysparql-lang typelib-1_0-Tracker-3_0 - Update to version 3.8.2: + Hide again unintentionally leaked tracker_http_* symbols. + Doc building improvements.

1 0

Nextcloud Upgrad error
by Ulf 18 Dec '24

18 Dec '24

Hi, yesterday at tumbleweed I can't login in my nextloud anymore. Reason: # Error Update from Nextcloud to 30.0.4" I manually switched to $ cd /srv/www/htdocs/nextcloud $ sudo -u www-data php occ maintenance:mode --off $ sudo -u www-data php occ upgrade The current PHP memory limit is below the recommended value of 512MB. Nextcloud or one of the apps require upgrade - only a limited number of commands are available You may use your browser or the occ upgrade command to do the upgrade Setting log level to debug Updating database schema Updated database Update app recognize from App Store PHP Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 78826624 bytes) in /srv/www/htdocs/nextcloud/lib/private/ Installer.php on line 250 # Solution due to following infos: https://help.nextcloud.com/t/how-to-easily-fix-this-nextcloud-instance-is-c… https://help.nextcloud.com/t/the-php-memory-limit-is-below-the-recommended-… Changed: /etc/php8/cli/php.ini memory_limit = 1G (instead 128G) upload_max_filesize = 1G (instead 2M) Thanks and merry Christmas at all Ulf

3 4

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 17 Dec '24

17 Dec '24

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have had problems for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - ViTables: Fails to build - hypre: Fails to build - mumps: Fails to build - netcdf-fortran: Fails to build - plplot: Fails to build - purple-libsteam: Fails to build - purple-rocketchat: Fails to build - python-BitVector: Fails to build - python-Js2Py: Fails to build - python-azure-ai-ml: Unresolvable - python-azure-core-tracing-opencensus: Uninstallable: nothing provides python313-opencensus-ext-azure >= 0.3.1 needed by python313-azure-core-tracing-opencensus-1.0.0b10.noarch - python-azure-sdk: Uninstallable: nothing provides python313-azure-ai-ml needed by python313-azure-sdk-4.0.0.noarch - python-beartype: Fails to build - python-bpython: Fails to build - python-cloudscraper: Unresolvable - python-cramjam: Fails to build - python-fanficfare: Unresolvable - python-hatch: Fails to build - python-jirafs: Unresolvable - python-limnoria: Fails to build - python-objsize: Fails to build - python-omni-camera: Fails to build - python-pytest-doctestplus: Fails to build - python-ruffus: Fails to build - python-sphinxcontrib-plantuml: Fails to build Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

1 0

New Slowroll update 20241217T2006 released!
by bernhardout＠lsmod.de 17 Dec '24

17 Dec '24

Please note that this mail was generated by a script. A collection of maintenance updates was released for Slowroll. Released 83 packages: * MozillaThunderbird * adios2 * alembic * alloy * ansible-runner * apphub * aws-c-s3 * cmake * cmpi-bindings * compiz-plugins-extra * compiz-plugins-main * cosmic-applets * cosmic-bg * cosmic-comp * cosmic-ext-dirstat * cosmic-files * cosmic-idle * cosmic-launcher * cosmic-player * cosmic-screenshot * dnf5 * element-desktop * element-web * fde-tools * gdb * gegl * gerbera * glab * glycin-loaders * gnu-cobol * go1.20 * go1.21 * indi * ksmbd-tools * kubeshark-cli * kyverno * libclc * libgcrypt * meson * modsecurity * mozjs115 * mozjs78 * mtd-utils * mumble * nebula * notify-osd * nvidia-open-driver-G06-signed * openCryptoki * petsc * pgadmin4 * pixman * python-aexpect * python-bleak * python-django-contrib-comments * python-mkdocs-material * python-msal * python-pscript * python-py-moneyed * python-pycurl * qemu * quick-webapps * rke2 * rke2-1.29 * rke2-1.30 * rust1.81 * rust1.82 * spirv-llvm-translator * sqlcipher * sqlite3 * superlu * suse-module-tools * system-config-printer * traefik * tree-sitter-gomod * tree-sitter-lua * tree-sitter-qmldir * tree-sitter-query * tree-sitter-vimdoc * ugrep * vim * wasm-bindgen * xdg-desktop-portal-cosmic * xf86-video-voodoo

1 0

Untranslated string in KMail
by Javier Llorente 17 Dec '24

17 Dec '24

Hello everyone! I was wondering if any of you are seeing the following string untranslated in KMail/Tumbleweed: "Note: This HTML message may contain external references to images etc. For security/privacy reasons external references are not loaded. If you trust the sender of this message then you can load the external references for this message by clicking here." This string comes from messagelib (libmessageviewer6.po) and yes, it is translated into Spanish. I have messagelib-lang installed and the corresponding .mo is there: /usr/share/locale/es/LC_MESSAGES/ libmessageviewer6.mo Perhaps there are other strings/languages affected. All I have seen so far is that messagelib.spec has %find_lang %{name} --all- name without --with-html (the string is in htmlmessagepart.html). I have added --with-html to the spec, recompiled it and installed the rpms without luck; I am still seeing the untranslated string. Any suggestions? Merry Christmas! Ciao, -- Javier Llorente

1 0

New Tumbleweed snapshot 20241216 released!
by Dominique Leuenberger 17 Dec '24

17 Dec '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MozillaFirefox (133.0 -> 133.0.3) libICE (1.1.1 -> 1.1.2) libSM (1.2.4 -> 1.2.5) libXau (1.0.11 -> 1.0.12) libXv (1.0.12 -> 1.0.13) libXxf86vm (1.1.5 -> 1.1.6) libxcvt (0.1.2 -> 0.1.3) libxshmfence (1.3.2 -> 1.3.3) mozjs128 mpg123 (1.32.9 -> 1.32.10) openSUSE-release (20241215 -> 20241216) === Details === ==== MozillaFirefox ==== Version update (133.0 -> 133.0.3) Subpackages: MozillaFirefox-branding-upstream MozillaFirefox-translations-common - Mozilla Firefox 133.0.3 * Fixed the missing scrollbar in the Library window, such as when viewing History or Bookmarks. (bmo#1934482) * Fixed blurry line drawing on some Canvas elements when hardware acceleration is enabled. (bmo#1933668) ==== libICE ==== Version update (1.1.1 -> 1.1.2) - update to 1.1.2 * configure: Use LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL * Set close-on-exec when opening files * gitlab CI: Update to latest CI templates * gitlab CI: add xz-utils to container for "make distcheck" * IceOpenConnection: stop processing messages if connection was closed * ConnectToPeer: return failure if malloc() fails * EXTRACT_STRING: Avoid writing to NULL pointer if malloc fails * _IceAddOpcodeMapping: Avoid writing to NULL pointer if malloc fails * Clear some -Wuseless-cast warnings from gcc 14.1 * IceReadCompleteMessage: callers need to check if malloc() failed * ProcessConnectionSetup: avoid writing to NULL pointer if malloc() failed * ProcessProtocolSetup: return failure if malloc() failed for ProtocolName * IceProtocolSetup: return failure if malloc() failed for authIndices * IceRegisterForProtocolSetup: return failure if malloc() failed * AuthRequired: avoid undefined behavior in memcpy() call * write_counted_string: avoid undefined behavior in fwrite() call * ICElibint.h: add do ... while (0) around macro definitions * ProcessAuthReply: Handle -Wconditional-uninitialized warning * libICE : Dereferencing a possible NULL pointer in error.c ==== libSM ==== Version update (1.2.4 -> 1.2.5) - update to 1.2.5: * Remove "All rights reserved" from Oracle copyright notices * configure: Use LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL * gitlab CI: add xz-utils to container for "make distcheck" * unifdef __UNIXWARE__ * unifdef MNX_TCPCONN * SmcOpenConnection: remove cast of return value from getenv() * IceReadCompleteMessage callers need to check if malloc() failed ==== libXau ==== Version update (1.0.11 -> 1.0.12) - update to 1.0.12 * This release adds support for building with meson as well as autoconf, thanks to the work of Dylan Baker. - switched to meson build system ==== libXv ==== Version update (1.0.12 -> 1.0.13) - Update to version 1.0.13 * Remove "All rights reserved" from Oracle copyright notices * configure: Use LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL * Use calloc instead of malloc and manual loops to zero array contents * XvQueryEncodings: avoid NULL deref if length is 0, but num_encodings is not * XvQueryAdaptors: avoid NULL deref if length is 0, but num_adaptors is not ==== libXxf86vm ==== Version update (1.1.5 -> 1.1.6) - Update to version 1.1.6 * Remove "All rights reserved" from Oracle copyright notices * configure: Use LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL * Add X.Org's standard C warning flags to AM_CFLAGS * Add -no-undefined flag to LDFLAGS to fix Windows builds ==== libxcvt ==== Version update (0.1.2 -> 0.1.3) - Update to version 0.1.3 * cvt: fix -Wmissing-prototypes warning for cvt_is_standard * ci: Update CI and enable static analysis * README: remove double dollar sign * Fix hsync_start computation * Fix too-small back porch at very low resolutions * Rename constant to CVT_MIN_V_PORCH_RND ==== libxshmfence ==== Version update (1.3.2 -> 1.3.3) - update to 1.3.3 * configure: Use LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL * configure: replace deprecated AC_HELP_STRING with AS_HELP_STRING * configure: replace deprecated AC_TRY_COMPILE with AC_COMPILE_IFELSE * alloc: Allow disabling memfd usage at runtime with XSHMFENCE_NO_MEMFD=1 * src/xshmfence_futex.h: fix build on 32-bit architectures using 64-bit time_t ==== mozjs128 ==== - Add mozjs128-CVE-2024-50602.patch: Backporting 51c70190 from upstream, * lib: Make XML_StopParser refuse to stop/suspend an unstarted parser. * lib: Be explicit about XML_PARSING in XML_StopParser. (CVE-2024-50602, bsc#1232599, bsc#1232602) ==== mpg123 ==== Version update (1.32.9 -> 1.32.10) Subpackages: libmpg123-0 mpg123-openal - Update to version 1.32.10 * scripts/tag_lyrics.py: fix for python3 * libout123: Use strtok_r() to avoid conflicts multithreaded contexts (both sides should avoid plain strtok()! * libmpg123: Un-break DLL builds that need I/O functions defined in libmpg123.c * ports/cmake: More fixup to also produce .pc files with Libs.private. ==== openSUSE-release ==== Version update (20241215 -> 20241216) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen

1 0