- openSUSE Factory

openSUSE Release Engineering meeting 10.04.2024
by Lubos Kocman 12 Apr '24

12 Apr '24

How to join the meeting? https://calendar.opensuse.org/teams/release/events/opensuse_release_enginee… All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting ## Attendees bittin, lkocman, Dimstar, ddemaio, maxlin, bmwiedemann, guillaumeg, ana, adrian, wengel ## Leap Leap 15.6 - pending transition of default background to png https://news.opensuse.org/2024/04/09/common-wallpaper-path/ The reason is to have parity with icon set and background path with SLES, so we can run apps that utilize background. ^ This will unblock addition of cockpit to both Leap && Package HUB (currently blocked on libssh regression from SP4) https://code.opensuse.org/leap/features/issue/14 Test build in https://build.opensuse.org/project/show/home:lkocman:branches:openSUSE:Leap… Leap Micro 6.0 - Alpha availabiltiy on get-o-o today/tomorrow https://download.opensuse.org/distribution/leap-micro/6.0/ Leap Micro 6.X will not have the Elemental image since SLE Micro's elemental image (bare-metal-container) has a license exception for a free use. Agreement with Daniel Rahn, that we could get Leap Micro 6.X to public cloud. Lubos will sync up with Alex Osthof whether it would be possible. SUSE Open Source policy review - (Date bump) https://opensource.suse.com/legal/policy Bigger review revisiting AI section will be later this year. ## openSUSE Tumbleweed (ana) openSUSE:Factory build fail stats: 76 failed 30 unresolvable (last week 111 failed, 9 unresolvable) https://tinyurl.com/ysy4nnnz Many unresolvable due to boo#1222514, python-PyQt6 FTBFS with Qt6 6.7.0 Around 870 SR accepted since last week, round 340 SR related to Azure stack (APIs, SDKs and projects from Microsoft Azure) Most relevant updates: * Linux Kernel Longterm 6.6.25 * Linux Kernel 6.8.4 * coreutils 9.5 * libvirt 10.2.0, fixes CVE-2024-2494 * Mate 1.28.0 * Mercurial 6.7.2 * meson 1.4.0 * Qt6 6.7.0 * wine 9.6 * zstd 1.5.6 * several branding updates for the new wallpaper using png Updates waiting, likely being accepted soon : * util-linux 2.40 merging lastlog2 * python-kiwi 10.0.2 (two packages needs an update in their schemas (fixes submitted already) kiwi-images-vagrant : https://bugzilla.opensuse.org/show_bug.cgi?id=1222242 kiwi-templates-Minimal: https://bugzilla.opensuse.org/show_bug.cgi?id=1222243 ~80 other Tumbleweed packages need updated XML schema with xsltproc /path/to/kiwi/helper/xsl_to_v74/update.xsl *.kiwi > output ; it will drop comments so needs some manual merging ; see also SRs 1166476 1166479 1166485 ### longer-lasting topics * GCC 14: second phase ongoing, use gcc14 as the default compiler (Staging:Gcc7) Advancing slowly * RPM 4.19.1.1 + 4.20 * RPM 4.19.1.1 (user/group dependencies), Packages not included in rings getting updates, still some more to go. Few remaining packages: (6) https://bugzilla.opensuse.org/showdependencytree.cgi?id=1221415 * Preparations for RPM 4.20, %patchN won't be supported anymore, see https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… (as last week there were 188 spec files left with this issue in Factory) * go1.22 as default go version, blocked on i586 with packages which export CGO_ENABLED=0 and go build -buildmode pie https://github.com/golang/go/issues/64875 (needs to update ~70 packages) traking at https://bugzilla.opensuse.org/show_bug.cgi?id=1221095 * libxml 2.12.1, on hold, no progress * dbus-broker as default dbus session manager, now everything builds, two openQA checks failing. * memtest86+ (waiting for update of installation-images, https://bugzilla.opensuse.org/show_bug.cgi?id=1221221 ) * grub2 with support for BLS - Boot Loader Specification, blocked by a kiwi update, open issue https://build.opensuse.org/request/show/1161323 https://github.com/OSInside/kiwi/issues/2497 ## Richard (Aeon+botmaster) Not available ## Max Leap 15.6 - build stats in Backports: 46 failed(was 50), 5 unresolvable(was 5) * Struggling with the product publishing, Build656.1 has been set published on Monday but still does not appear on d.o.o (reported already) - Adrian is looking into it. Seems like we're having both new and old files in parallel for Leap 15.6 (no other project is experiencing similar issue). * Many build fails are caused by abseil-cpp update, bsc#1222261 * Check on repo's solv data, uninstallable packages fix up ## Guillaume - Arm * Tumbleweed: - Rolling - Heads-up: RPi firmware and u-boot updated in upcoming snapshot 20240409 (openQA is green) - WIP: Continue to fix packages built without PAC/BTI - rpmlint: https://rpmlint.opensuse.org/ * we noticed that rpmlint does not check anymore for packages built without distro %{optflags}. We should add it back. https://bugzilla.opensuse.org/show_bug.cgi?id=1217840 Doug: rpmlint GSOC topic. Neal will be helping to mentor that. https://github.com/openSUSE/mentoring/issues/204 * Leap 15.6/Backports SP6: - No update/no arm-specific issues ## Sarah - s390x Not available ## Doug * Community meetings * Board meeting for April 22 adjusted due to travel of board members * Contribution Workshops * Episode 6 - Host your own openSUSE mirror delayed. Waiting for upload * Episode 7 Custom openSUSE (Leap / Leap Micro) image spin in a few minutes. Need timeline * Went to embedded world * GSoC * Gaining evaluations on proposals submitted * Rankings due on April 24 * Community Summit * 16 Registrations, 12 Submissions, 5 Hours * openSUSE Conference * 83 Registrations, 51 Submissions, 29 Hours (5 Open 4 Business Submissions) * CfP closes on April 15 * Making draft schedule Static * oSC24 dates June 27 to 29 reserved (Thursday - Saturday) * Open 4 Business June 26 between 2 - 6 p.m. at Franken Campus * AI topics (static) ## Dirk Not available ## Wolfgang (Package Hub), Scott Bahling no news ## Maintenance team (Marcus or Maurizio (m4u)) Not available ## Adrian - OBS No update ## Bernhard - Slowroll version bump is done (20240213 -> 20240405) need to replace signing key with a stronger one soon ## Bernhard - reproducible builds at 12k verified Tumbleweed binaries now - still growing ## Open Floor

2 1

Tumbleweed - Review of the weeks 2024/14 & 15
by Dominique Leuenberger 12 Apr '24

12 Apr '24

Dear Tumbleweed users and hackers, My slacking off last week and daring to take a longer weekend is being punished by my having to review two weeks’ worth of updates again. But it should be fine, as at least from the feel, the two weeks were quiet regarding snapshots and updates. This also shows in the number of snapshots: an average count of 8 snapshots in two weeks. The 8 snapshots were numbered 0329, 0402, 0403, 0404, 0405, 0407, 0409, and 0410. The most relevant changes included: * libressl 3.9.1 * Tracker 3.7.1 * Linux kernel 6.8.2 & 6.8.4 * libproxy 0.5.4 & 0.5.5 * freerdp 3.4.0 & 2.11.5, parallel installable * Mozilla Firefox 124.0.2 * coreutils 9.5 * zstd 1.5.6 * Qt 6.7.0 * fwupd 1.9.16 * Python39 modules removed from the tree (few remaining packages, that currently fail to build) The upcoming changes being worked on include: * Linux kernel 6.8.5 * Apache 2.4.59 * SDL 3 * Pam 1.6.1 * Python 3.11.9 & 3.12.3 * grub2 with BootLoaderSpecification (BLS) support * dbus-broker: no progress this week * GCC 14: phase 2: use gcc14 as the default compiler – lots of help needed: https://build.opensuse.org/project/show/openSUSE:Factory:Staging:Gcc7 Cheers, Dominique

1 0

Re: State of debuginfod.opensuse.org ?
by Georg Pfuetzenreuter 11 Apr '24

11 Apr '24

On 4/12/24 00:07, Florian "sp1rit" wrote: > Am Mittwoch, dem 10.04.2024 um 16:55 +0200 schrieb Michael Pujos: >> Any request to https://debuginfod.opensuse.org results in a 503 with >> a >> deprecation message. >> This makes gdb unable to retrieve debuginfo data automatically. >> > > Based on openSUSE/heroes-salt:bae4d577[0], the debuginfod service seems > entirely deprecated, as >> nobody stepped up to maintain it, and it being broken repeatedly >> causes confusion with users > > This is quite sad, as I've personally found the debuginfod service > (when it was working) to be very useful compared to having to manually > download dozens of debug packages using zypper each time I want to > debug something using gdb. Hi, in the meanwhile a team at SUSE stepped up to build and maintain a new openSUSE debuginfod service. I'm not sure when it will be ready, we still need to coordinate it - but I think this is already good news. Best, Georg > > > [0]:https://github.com/openSUSE/heroes-salt/commit/bae4d5773420d23fb882d4a68… > > -- > $\int_\text{now}^{+\infty}\text{Keep trying}$ > > Matrix: @sp1rit:tchncs.de > > <sp1rit(a)disroot.org> > D248BF2F4C6A82A1E0569D897D8C1CD573166D09 > <sp1rit(a)national.shitposting.agency> > BBDE032EAAFBFC627FB7E635B1F4055D8460CE34 >

1 0

New Tumbleweed snapshot 20240410 released!
by Dominique Leuenberger 11 Apr '24

11 Apr '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: SDL2 (2.30.1 -> 2.30.2) cryptsetup (2.7.1 -> 2.7.2) dracut-pcr-signature (0.2+0 -> 0.3+0) gcc13 kbd openSUSE-release (20240409 -> 20240410) power-profiles-daemon publicsuffix (20240326 -> 20240410) sdbootutil (1+git20240408.49e4021 -> 1+git20240410.3325802) spamassassin (4.0.0 -> 4.0.1) systemd-default-settings (0.9 -> 0.10) wicked wsdd (0.7.1 -> 0.8) xen (4.18.1_02 -> 4.18.2_02) xwayland (23.2.5 -> 23.2.6) === Details === ==== SDL2 ==== Version update (2.30.1 -> 2.30.2) - Update to release 2.30.2 * Fixed performance regression initialing controllers on Linux * Added support for the 6-button SEGA Mega Drive Control Pad for Nintendo Online * Add support for MadCatz Saitek Side Panel Control Deck * Added support for the Hori Fighting Stick EX2 * Added support for the Yawman Arrow flightstick * Added a gamepad mapping for the Defender Joystick Cobra R4 * Fixed the gamepad mapping for the Sanwa Supply JY-P76USV controller * Allow using SDL_RWFromFile() with named pipes ==== cryptsetup ==== Version update (2.7.1 -> 2.7.2) Subpackages: cryptsetup-doc cryptsetup-lang libcryptsetup12 - update to 2.7.2: * Fix activation of OPAL-only encrypted LUKS device with tokens * Fix formatting of OPAL devices with 4096-byte sector size * Fix incorrect OPAL locking range alignment calculation if used over an unaligned device partition. * Do not check the passphrase quality for OPAL Admin PIN, as this passphrase already exists. * Update license for FAQ document to CC BY-SA 4.0. NOTE: Please note that with OPAL-only (--hw-opal-only) encryption, the configured OPAL administrator PIN (passphrase) allows unlocking all configured locking ranges without LUKS keyslot decryption (without knowledge of LUKS passphrase). Because of many observed problems with compatibility, cryptsetup currently DOES NOT use OPAL single-user mode, which would allow such decoupling of OPAL admin PIN access. ==== dracut-pcr-signature ==== Version update (0.2+0 -> 0.3+0) - Update to version 0.3+0: * Various small improvements ==== gcc13 ==== Subpackages: cpp13 gcc13-locale libgccjit0-gcc13 libstdc++6-devel-gcc13 - Add gcc13-pr101523.patch to avoid combine spending too much compile-time and memory doing nothing on s390x. [boo#1188441] - Make requirement to lld version specific to avoid requiring the meta-package. - Add gcc13-pr111731.patch to fix unwinding for JIT code. [bsc#1221239] ==== kbd ==== - Move legacy keymaps that have no acceptable xkb counterpart and its includes back to kbd. (bsc#1194609) - Stop requiring kbd-legacy. All YaST supported languages should now have its keymaps in kbd. - Remove kbd-1.15.2-prtscr_no_sigquit.patch rejected by the upstream. The problem is fixed for a long time, this is an additional modification. (PED-7977, https://github.com/legionus/kbd/pull/111): - Drop kbd_fonts.tar.bz2 containing just several 30 years old inferior fonts with an unknown author and uncertain license. - Add structured comments to patches. ==== openSUSE-release ==== Version update (20240409 -> 20240410) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== power-profiles-daemon ==== - Revert "Remove duplicate DBus service files net.hadess.PowerProfiles" workaround to boo#1222179 (see comment 10). ==== publicsuffix ==== Version update (20240326 -> 20240410) - Update to version 20240410: * Removing `ravendb.me` (#1841) * Updating psl: Adding myfritz.link (follow up PR#77) (#1761) * Add `framer.ai` (#1831) * chore: add `is-a.dev` (#1949) * Add StackBlitz (#1939) * Add `unison-services.cloud` (#1839) * Add `is-cool.dev`, `is-local.org`, `is-not-a.dev` and `localplayer.dev` (#1672) * Add grayjayleagues.com (#1742) * Add `runcontainers.dev` for Libre IT Ltd (#1783) * Add `heliohost.us`, `helioho.st`(#1825) * Remove `123sait.ru` (#1844) * Add MyDNS.JP Dynamic DNS Service (#1937) * add `scrypted.io` (#1826) * Add `darklang.io` (#1880) * Update `cloudns.net` dynamic dns domains listing (#1593) * Add wildcard to `snowflake.app` and `privatelink.snowflake.app` (#1743) * Add `preview.csb.app` and `csb.app` (#1648) * Add `nimsite.uk` (#1797) * add getlocalcert.net domains (#1798) * Add wadl.top (#1924) * ADD: `can.re` (#1651) * Add cdn77-storage.com and rsc.contentproxy9.cz (#1882) * add `srv.us`, `xmit.co` * Add at.emf.camp (#1955) * util: gTLD data autopull updates for 2024-03-28T15:13:37 UTC (#1952) ==== sdbootutil ==== Version update (1+git20240408.49e4021 -> 1+git20240410.3325802) Subpackages: sdbootutil-rpm-scriptlets sdbootutil-snapper - Update to version 1+git20240410.3325802: * fallback for machine-id ==== spamassassin ==== Version update (4.0.0 -> 4.0.1) Subpackages: perl-Mail-SpamAssassin spamassassin-spamc - fix iXhash2-meta-rules.patch - update to patch release version 4.0.1 - Incompatibilities with some versions of perl and some perl modules that have been released since the release of SpamAssassin 4.0.0 - Problems using cpan to install SpamAssassin when certain required or optional modules are not already installed - Support for space characters in the path name of some executables used by certain plugins - Improved handling of URL shortener link redirects - Improved TxRep locking management - Added Mail::SpamAssassin::Plugin::AuthRes plugin to use Authentication-Results header fields in other plugins - Added a Pyzor Perl implementation - Perl crash when certain uri_detail rules processed some messages with UTF-8 characters - Inconsistent handling of newlines in header rules - Text or HTML content placed in octet-stream attachments by spammers to bypass SpamAssassin scanning - Implemented TCP fallback for truncated DNS UDP replies - Refresh patch-URIDNSBL - Drop undocumented patch-SQL_ASCII_SORT breaking sqlite - Drop most of iXhash2-meta-rules.patch (additional services no longer exist) ==== systemd-default-settings ==== Version update (0.9 -> 0.10) Subpackages: systemd-default-settings-branding-SLE systemd-default-settings-branding-openSUSE - Import 0.10 5088997 SLE: Disable pids controller limit under user instances (jsc#SLE-10123) ==== wicked ==== Subpackages: wicked-service - client: do not convert sec to msec twice (bsc#1222105) [+ 0005-client-do-to-not-convert-sec-to-msec-twice-bsc-1222105.patch] ==== wsdd ==== Version update (0.7.1 -> 0.8) - Fix build for SLE_15 - Update to version 0.8 * Configuration files for firewalld added * Show device type and allow filtering in API's list command * Add option --metadata-timeout to set the timeout for the HTTP-based metadata exchange * The employed UUID is now read from /etc/{machine-id,hostid} before falling by back to the UUID derivation from the host name. * Handle addresses with zone id by ignoring the interface part * Do not crash with asyncio future error when non-existing interface is provided - Remove some bashism from wsdd-init.sh - Use the unmodified service files from wsdd for Leap 15.5 and below, else reuse ws-discovery-udp service from firewalld ==== xen ==== Version update (4.18.1_02 -> 4.18.2_02) Subpackages: xen-libs xen-tools xen-tools-domU - Update to Xen 4.18.2 security bug fix release (bsc#1027519) xen-4.18.2-testing-src.tar.bz2 * No upstream changelog found in sources or webpage - bsc#1221984 - VUL-0: CVE-2023-46842: xen: x86 HVM hypercalls may trigger Xen bug check (XSA-454) - bsc#1222302 - VUL-0: CVE-2024-31142: xen: x86: Incorrect logic for BTC/SRSO mitigations (XSA-455) - bsc#1222453 - VUL-0: CVE-2024-2201: xen: x86: Native Branch History Injection (XSA-456) - Dropped patch contained in new tarball 65f83951-x86-mm-use-block_lock_speculation-in.patch ==== xwayland ==== Version update (23.2.5 -> 23.2.6) - Update to 23.2.6 * This is a quick bug fix release to address a regression introduced by the fix for CVE-2024-31083 in xwayland-23.2.5.

1 0

VirtualBox on Leap 15.6 not building
by Larry Finger 10 Apr '24

10 Apr '24

There is an important fix for VirtualBox on Leap 15.6 waiting at OBS. It is blocked by kbuild, gsoap-devel, and libgsoap. Package kbuild is blocked by package byacc. Package byacc has been successfully built for x86_64 and ppc64le, but is in the "scheduled" state for aarch64 and s390x. I have seen it in this state for over 24 hours. Is there an explanation for these architectures to be scheduled, but not run? Thanks, Larry

2 1

New Tumbleweed snapshot 20240409 released!
by Dominique Leuenberger 10 Apr '24

10 Apr '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: adwaita-xfce-icon-theme (0.0.3+git0.e0f73b9 -> 0.0.4+git0.b33d65a) awesfx branding-openSUSE (84.87.20230227 -> 84.87.20240405) capstone distribution-logos-openSUSE (20240207 -> 20240404) evolution fwupd (1.9.15 -> 1.9.16) gnutls (3.8.4 -> 3.8.5) gvfs icewm-theme-branding java-21-openjdk libX11 (1.8.8 -> 1.8.9) libproxy-backend (0.5.4 -> 0.5.5) libproxy-client (0.5.4 -> 0.5.5) lightdm-gtk-greeter-branding-openSUSE lttng-ust mutter oath-toolkit (2.6.8 -> 2.6.11) openSUSE-release (20240407 -> 20240409) opensc (0.25.0 -> 0.25.1) openssh pixman plasma6-openSUSE python-gobject (3.48.1 -> 3.48.2) qt6-base (6.6.3 -> 6.7.0) qt6-declarative (6.6.3 -> 6.7.0) qt6-imageformats (6.6.3 -> 6.7.0) qt6-multimedia (6.6.3 -> 6.7.0) qt6-networkauth (6.6.3 -> 6.7.0) qt6-positioning (6.6.3 -> 6.7.0) qt6-qt5compat (6.6.3 -> 6.7.0) qt6-quick3d (6.6.3 -> 6.7.0) qt6-quicktimeline (6.6.3 -> 6.7.0) qt6-sensors (6.6.3 -> 6.7.0) qt6-shadertools (6.6.3 -> 6.7.0) qt6-speech (6.6.3 -> 6.7.0) qt6-svg (6.6.3 -> 6.7.0) qt6-tools (6.6.3 -> 6.7.0) qt6-translations (6.6.3 -> 6.7.0) qt6-virtualkeyboard (6.6.3 -> 6.7.0) qt6-wayland (6.6.3 -> 6.7.0) qt6-webchannel (6.6.3 -> 6.7.0) qt6-webengine (6.6.3 -> 6.7.0) qt6-webview (6.6.3 -> 6.7.0) sdbootutil (1+git20240321.04bfbac -> 1+git20240408.49e4021) xfce4-branding-openSUSE (4.18.0+git0.9a2f754 -> 4.18.0+git1.8b02118) xfsprogs yast2-bootloader (5.0.7 -> 5.0.8) yast2-installation (5.0.7 -> 5.0.8) yast2-perl-bindings (5.0.2 -> 5.0.4) yast2-trans (84.87.20240331.90b1d91d29 -> 84.87.20240407.b46e9ca4fd) === Details === ==== adwaita-xfce-icon-theme ==== Version update (0.0.3+git0.e0f73b9 -> 0.0.4+git0.b33d65a) - Update to version 0.0.4+git0.b33d65a * Remove superfluous /apps directory from index.theme ==== awesfx ==== - Use full URL for source tarball. ==== branding-openSUSE ==== Version update (84.87.20230227 -> 84.87.20240405) Subpackages: grub2-branding-openSUSE libreoffice-branding-openSUSE plymouth-branding-openSUSE wallpaper-branding-openSUSE yast2-qt-branding-openSUSE - Use png for wallpapers for Tumbleweed - SLES seems to be using png - Using a compat symlink wallpapers/openSUSEdefault-> wallpapers/SLEdefault allows running certain apps without rebuild. Such as cockpit. - Use optipng -o5 to compress files (has to be reflected in spec) - Bump date ==== capstone ==== - Build with distro %{optflags} ==== distribution-logos-openSUSE ==== Version update (20240207 -> 20240404) Subpackages: distribution-logos-openSUSE-Tumbleweed distribution-logos-openSUSE-icons - Update to version 20240404: * Turn apple-touch-icon into round square ones * SLES Compatability supply apple-touch-icon for Leap, LeapMicro, TW * Delete dist/package directory * fix source mismatch with package name ==== evolution ==== Subpackages: evolution-lang evolution-plugin-spamassassin - Add boo1221868.patch, fixing a crash when hiding competed tasks (boo#1221868, glgo#GNOME/evolution#2712) ==== fwupd ==== Version update (1.9.15 -> 1.9.16) Subpackages: fwupd-bash-completion fwupd-lang libfwupd2 typelib-1_0-Fwupd-2_0 - Update to version 1.9.16: + This release adds the following features: - Prefer zstd over xz for metadata. - Relicense a few remaining plugin files to LGPL-2.1+. + This release fixes the following bugs: - Correctly record UEFI success if adding ESRT nodes. - Defer the DP Aux MST scanning on hotplug to workaround a kernel bug. - Do not do the post-update version check if the device needs-reboot. - Fix a fastboot warning when loading device. - Fix a possible warning in fwupdmgr when excluding releases. - Fix a qsi-dock warning when writing chunks. - Ignore attribute-changed to work around a regression in macOS. - Ignore ZFS zvols when finding the default ESP. - Mark Pluton TPMs as part of the main CPU. - Put the fwupd-efi verbose debugging in the journal. - Recognize zfsbootmenu in ESP detection heuristic. + This release adds support for the following hardware: - Acer T34 and U33 docks. - Qualcomm Series 5 Gen 1 and Gen 2 and Series 3 Gen 1 and Gen 2 devices. - Several Puya SPI chips. - VIA VL822 C0. ==== gnutls ==== Version update (3.8.4 -> 3.8.5) Subpackages: libgnutls-dane0 libgnutls30 libgnutls30-32bit - Update to 3.8.5: * libgnutls: Due to majority of usages and implementations of RSA decryption with PKCS#1 v1.5 padding being incorrect, leaving them vulnerable to Marvin attack, the RSAES-PKCS1-v1_5 is being deprecated (encryption and decryption) and will be disabled in the future. A new option 'allow-rsa-pkcs1-encrypt' has been added into the system-wide library configuration which allows to enable/disable the RSAES-PKCS1-v1_5. Currently, the RSAES-PKCS1-v1_5 is enabled by default. * libgnutls: Added support for RIPEMD160 and PBES1-DES-SHA1 for backward compatibility with GCR. * libgnutls: A couple of memory related issues have been fixed in RSA PKCS#1 v1.5 decryption error handling and deterministic ECDSA with earlier versions of GMP. These were a regression introduced in the 3.8.4 release. See #1535 and !1827. * build: Fixed a bug where building gnutls statically failed due to a duplicate definition of nettle_rsa_compute_root_tr(). * API and ABI modifications: - GNUTLS_PKCS_PBES1_DES_SHA1: New enum member of gnutls_pkcs_encrypt_flags_t * Rebase patches: - gnutls-FIPS-TLS_KDF_selftest.patch - gnutls-FIPS-140-3-references.patch ==== gvfs ==== Subpackages: gvfs-backend-afc gvfs-backend-goa gvfs-backend-samba gvfs-backends gvfs-fuse gvfs-lang - Move the recently added onedrive provider to the backend-goa subpackage: onedrive support is integrated into the g-o-a provider. ==== icewm-theme-branding ==== - Do not substitute png to jpg for default wallpaper Details at https://github.com/openSUSE/branding/pull/149 - Keep openSUSEDefault although SLEDefault compat symlink exist ==== java-21-openjdk ==== Subpackages: java-21-openjdk-headless - Added patch: * reproducible-jlink.patch + make the timestamp in jmods reproducible ==== libX11 ==== Version update (1.8.8 -> 1.8.9) Subpackages: libX11-6 libX11-data libX11-xcb1 - Update to 1.8.9 * Fix regressions introduced in 1.8.8 (!245, !248) - this includes reverting for now the previous "Fix XIM input sometimes jumbled (#198, !236)" - supersedes * U_0001-xlibi18n-restore-parse_line1-for-WIN32-builds.patch * U_0002-Revert-imDefLkup-Commit-first-info-in-XimCommitInfo.patch * U_0003-Revert-ximcp-Unmark-to-fabricate-key-events-with-XKe.patch - U_0001-xlibi18n-restore-parse_line1-for-WIN32-builds.patch U_0002-Revert-imDefLkup-Commit-first-info-in-XimCommitInfo.patch U_0003-Revert-ximcp-Unmark-to-fabricate-key-events-with-XKe.patch * fix regressions in 1.8.8 (issues #204, #205, #206, #207, #208) ==== libproxy-backend ==== Version update (0.5.4 -> 0.5.5) - Update to version 0.5.5: + Windows: Try all configured proxy resolution types. + Cleanup curl. + Add release option. + Expose missing functions in symbol map. + Fix crash during unload by. + Log debug instead of warning on wpad pac failure. + Fix refcounting in px_proxy_factory_copy. + symver: Fix symbol map to be a valid tree. + Fix free function for pxProxyFactory type. + CodeQL badge and updated repology. + meson: Don't build OSX plugin on iOS. ==== libproxy-client ==== Version update (0.5.4 -> 0.5.5) - Update to version 0.5.5: + Windows: Try all configured proxy resolution types. + Cleanup curl. + Add release option. + Expose missing functions in symbol map. + Fix crash during unload by. + Log debug instead of warning on wpad pac failure. + Fix refcounting in px_proxy_factory_copy. + symver: Fix symbol map to be a valid tree. + Fix free function for pxProxyFactory type. + CodeQL badge and updated repology. + meson: Don't build OSX plugin on iOS. ==== lightdm-gtk-greeter-branding-openSUSE ==== - Use 1600x1200.png now when we've changed backgrounds to png Details in https://github.com/openSUSE/branding/pull/149 ==== lttng-ust ==== - remove dependency on /usr/bin/python3 using %python3_fix_shebang macro, [bsc#1212476] ==== mutter ==== Subpackages: mutter-lang - Add mutter-fix-front-buffer-lock.patch: Fix front buffer lock error by an unnecessary ensure_fb_id call (glgo#gnome/mutter!3674, bsc#1222409). ==== oath-toolkit ==== Version update (2.6.8 -> 2.6.11) - version update to 2.6.11 * liboath: Handle invalid base32 encoded secrets. Fixes: #41. * Various build fixes including updated gnulib files. * Improve compatibility with recent libxmlsec. ==== openSUSE-release ==== Version update (20240407 -> 20240409) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== opensc ==== Version update (0.25.0 -> 0.25.1) Subpackages: opensc-bash-completion - Update to verion 0.25.1 General improvements * Add missing file to dist tarball to build documentation. minidriver * Fix RSA decryption with PKCS#1 v1.5 padding. * Fix crash when app is not set. ==== openssh ==== Subpackages: openssh-clients openssh-common openssh-server - Add missing bugzilla/CVE references to the changelog - Add patch from SLE which was missing in Factory: * Mon Jun 7 20:54:09 UTC 2021 - Hans Petter Jansson <hpj(a)suse.com> - Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which attempts to mitigate instances of secrets lingering in memory after a session exits. (bsc#1213004 bsc#1213008) - Rebase patch: * openssh-6.6p1-privsep-selinux.patch ==== pixman ==== - a64-neon is an aarch64 feature, not armv6/7 ==== plasma6-openSUSE ==== Subpackages: plasma6-branding-openSUSE plasma6-sddm-theme-openSUSE plasma6-theme-openSUSE - Modify sddmtheme.diff to change the extension of the openSUSE branding wallpaper from jpg to png since the extension was changed in TW (boo#1222546) - Require the same wallpaper-branding version as used when building to make sure the png file exists ==== python-gobject ==== Version update (3.48.1 -> 3.48.2) Subpackages: python311-gobject python311-gobject-Gdk python311-gobject-cairo - Update to version 3.48.2: + Fix support for fundamental (primitive) types, such as Gst.Bitmask. ==== qt6-base ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6Concurrent6 libQt6Core6 libQt6DBus6 libQt6Gui6 libQt6Network6 libQt6OpenGL6 libQt6OpenGLWidgets6 libQt6PrintSupport6 libQt6Sql6 libQt6Test6 libQt6Widgets6 libQt6Xml6 qt6-network-tls qt6-networkinformation-glib qt6-networkinformation-nm qt6-platformtheme-gtk3 qt6-printsupport-cups qt6-sql-mysql qt6-sql-sqlite - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released - Replace 0001-Tell-the-truth-about-private-API.patch with upstream change: * 0001-CMake-ELF-allow-using-Qt-s-full-version-number-in-th.patch - Add upstream fix (QTBUG-123937): * fix_builds_with_Werror.patch ==== qt6-declarative ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6LabsAnimation6 libQt6LabsFolderListModel6 libQt6LabsQmlModels6 libQt6LabsSettings6 libQt6LabsSharedImage6 libQt6LabsWavefrontMesh6 libQt6Qml6 libQt6QmlCore6 libQt6QmlLocalStorage6 libQt6QmlModels6 libQt6QmlWorkerScript6 libQt6QmlXmlListModel6 libQt6Quick6 libQt6QuickControls2-6 libQt6QuickControls2Impl6 libQt6QuickDialogs2-6 libQt6QuickDialogs2QuickImpl6 libQt6QuickDialogs2Utils6 libQt6QuickEffects6 libQt6QuickLayouts6 libQt6QuickParticles6 libQt6QuickShapes6 libQt6QuickTemplates2-6 libQt6QuickTest6 libQt6QuickWidgets6 qt6-declarative-imports - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released - Update build constraints ==== qt6-imageformats ==== Version update (6.6.3 -> 6.7.0) - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-multimedia ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6Multimedia6 libQt6MultimediaQuick6 libQt6Quick3DSpatialAudio6 libQt6SpatialAudio6 qt6-multimedia-imports - Add upstream change to restore binary compatibility (QTBUG-123997): * 0001-Fix-ABI-breakage-wrt-QAudioSink-Source-stateChanged-.patch - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-networkauth ==== Version update (6.6.3 -> 6.7.0) - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-positioning ==== Version update (6.6.3 -> 6.7.0) - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-qt5compat ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6Core5Compat6 qt6-qt5compat-imports - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-quick3d ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6Quick3D6 libQt6Quick3DAssetImport6 libQt6Quick3DAssetUtils6 libQt6Quick3DEffects6 libQt6Quick3DHelpers6 libQt6Quick3DHelpersImpl6 libQt6Quick3DParticleEffects6 libQt6Quick3DParticles6 libQt6Quick3DRuntimeRender6 libQt6Quick3DUtils6 qt6-quick3d-imports - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-quicktimeline ==== Version update (6.6.3 -> 6.7.0) - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-sensors ==== Version update (6.6.3 -> 6.7.0) - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-shadertools ==== Version update (6.6.3 -> 6.7.0) - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-speech ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6TextToSpeech6 qt6-texttospeech - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-svg ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6Svg6 libQt6SvgWidgets6 - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-tools ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6Designer6 libQt6UiTools6 qt6-tools-qdbus - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-translations ==== Version update (6.6.3 -> 6.7.0) - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-virtualkeyboard ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6HunspellInputMethod6 libQt6VirtualKeyboard6 qt6-virtualkeyboard-imports - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-wayland ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6WaylandClient6 libQt6WaylandCompositor6 libQt6WaylandEglClientHwIntegration6 libQt6WaylandEglCompositorHwIntegration6 libQt6WlShellIntegration6 - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-webchannel ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6WebChannel6 libQt6WebChannelQuick6 qt6-webchannel-imports - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-webengine ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6WebEngineCore6 libQt6WebEngineQuick6 libQt6WebEngineWidgets6 qt6-webengine-imports - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released - Update rtc-dont-use-h264.patch ==== qt6-webview ==== Version update (6.6.3 -> 6.7.0) - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== sdbootutil ==== Version update (1+git20240321.04bfbac -> 1+git20240408.49e4021) Subpackages: sdbootutil-rpm-scriptlets sdbootutil-snapper - Update to version 1+git20240408.49e4021: * Update requirements * Measure manually initrd if pcrlock fails * Set SYSTEMD_LOG_LEVEL if verbose * Only error out on empty machine-id when actually used * feat: add basic boot assessment * fix: use new os-release and machine-id files * dracut call: --add-device belongs to --sysroot * Make sdbootutil usable with no snapshot Systems ==== xfce4-branding-openSUSE ==== Version update (4.18.0+git0.9a2f754 -> 4.18.0+git1.8b02118) Subpackages: libgarcon-branding-openSUSE libxfce4ui-branding-openSUSE thunar-volman-branding-openSUSE xfce4-notifyd-branding-openSUSE xfce4-panel-branding-openSUSE xfce4-power-manager-branding-openSUSE xfce4-session-branding-openSUSE xfce4-settings-branding-openSUSE xfdesktop-branding-openSUSE xfwm4-branding-openSUSE - Update to version 4.18.0+git1.8b02118: * Tumbleweed now uses png for default.wallpaper ==== xfsprogs ==== Subpackages: libhandle1 - Switch to %autosetup in order to build with older rpm build ==== yast2-bootloader ==== Version update (5.0.7 -> 5.0.8) - Follow up of previous change to use even more precise wording (bsc#1219989,bsc#1222353) - 5.0.8 ==== yast2-installation ==== Version update (5.0.7 -> 5.0.8) - Adapted call for connecting all discovered NVMe-over-Fabrics subsystems (bsc#1222246). - 5.0.8 ==== yast2-perl-bindings ==== Version update (5.0.2 -> 5.0.4) - Fix downstream build failures caused by the previous change (bsc#1222375) - 5.0.4 - Use UTF-8 for translated texts coming from our Perl code (bsc#1216689), fixing most '?' occurrences in yast2-users. - 5.0.3 ==== yast2-trans ==== Version update (84.87.20240331.90b1d91d29 -> 84.87.20240407.b46e9ca4fd) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20240407.b46e9ca4fd: * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Czech) * Translated using Weblate (Slovak) * Translated using Weblate (Dutch) * Translated using Weblate (Japanese) * Translated using Weblate (Catalan) * New POT for text domain 'bootloader'. * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Romanian) * Translated using Weblate (Macedonian) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Macedonian) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian)

1 0

qdbus not found with Crow translate shortcut
by victorhck 10 Apr '24

10 Apr '24

Hello. Crow Translate¹ is application to translate text. Ctrl+Alt+E is a shortcut to translate the higlighted text. Since the update to Plasma 6, when I use that shortcut I get a message error with "qdbus not found" I created an issue in the main repo² but seems to be a distro issue. If I launch zypper se qdbus I get this: S | Name | Summary --+-----------------+--------------------------------------------------+-------- | libqt5-qdbus | Command line client for communication over D-Bus i | qt6-tools-qdbus | Command line client for communication over D-Bus Do I have to install something extra? Greetings. [1] https://github.com/crow-translate/crow-translate [2] https://github.com/crow-translate/crow-translate/issues/675 -- ------------------- GPG Key: 0xcc742e8dc9b7e22a Fingerprint = 6FE2 3B1F AAC8 E5B7 63EA 88A9 CC74 2E8D C9B7 E22A Aprende a proteger la privacidad de tu correo: https://emailselfdefense.fsf.org/es/ Mi blog sobre openSUSE, GNU/Linux y software libre: https://victorhckinthefreeworld.com/ Herramientas para proteger tu privacidad https://victorhck.gitlab.io/privacytools-es/

3 3

Clojure is working on better supporting XDG base directory rules
by Jesús Gómez 09 Apr '24

09 Apr '24

Hello. I just wanted to mention that the Clojure project recently accepted to work on enhancing its support to XDG base directory rules, as described in their ticket TDEPS-262[1] I'm sure there are important considerations related to your work. For example, how would an eventual change affect Suse users when upgrading the Clojure package? Anyway, I'm going to work the best I can on this issue, and I am opening this thread simply as a "heads-up" and a place to discuss it. Thank you for your work and contribution to Suse and Clojure! [1] https://clojure.atlassian.net/browse/TDEPS-262

1 0

New Tumbleweed snapshot 20240407 released!
by Dominique Leuenberger 08 Apr '24

08 Apr '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: apparmor cpio guestfs-tools inxi (3.3.33 -> 3.3.33+3) libapparmor libguestfs openSUSE-release (20240405 -> 20240407) perl-CGI (4.600.0 -> 4.640.0) python-typing_extensions (4.10.0 -> 4.11.0) === Details === ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-docs apparmor-parser apparmor-parser-lang apparmor-profiles apparmor-utils apparmor-utils-lang python3-apparmor - Use full URLs for source tarball and signature. ==== cpio ==== Subpackages: cpio-lang cpio-mt - Fix build with gcc14, bsc#1221712 * fix-gcc14.patch ==== guestfs-tools ==== - Upstream bug fixes Update-virt-customize-generated-files.patch Initialise-bar-fp-as-NULL.patch ==== inxi ==== Version update (3.3.33 -> 3.3.33+3) - Updated to version 3.3.33-1+3: + A quick point release, one critical bug fix, and a few new features and enhancements. + Code cleanup. - Add service to pull from git and avoid tarball release. - Adjust spec file for service use. ==== libapparmor ==== - Use full URLs for source tarball and signature. ==== libguestfs ==== Subpackages: libguestfs-appliance libguestfs-xfs libguestfs0 - Upstream bug fixes Split-chown-parameter-on-character.patch Initialise-bar-fp-as-NULL.patch ==== openSUSE-release ==== Version update (20240405 -> 20240407) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== perl-CGI ==== Version update (4.600.0 -> 4.640.0) - updated to 4.64 see /usr/share/doc/packages/perl-CGI/Changes 4.64 2024-03-18 [ META ] - pass --no-xattrs to tar in Makefile to fix tar backwards compat (GH #264, thanks to ryandesign) 4.63 2024-03-01 [ FIX ] - ->url returns a string in all cases (GH #263, thanks to Sketch6307) 4.62 2024-03-01 [ FIX ] - ->url now returns the correct thing for ipv6 brackets (GH #259, thanks to eserte) 4.61 2024-01-08 [ ENHANCEMENT ] - Support Paritioned cookies in CGI::Cookie (GH #262, thanks to dakkar) ==== python-typing_extensions ==== Version update (4.10.0 -> 4.11.0) - update to 4.11.0: * Fix tests on Python 3.13.0a5. Patch by Jelle Zijlstra. * Fix the runtime behavior of type parameters with defaults * Fix minor discrepancy between error messages produced by `typing` and `typing_extensions` on Python 3.10. * When `include_extra=False`, `get_type_hints()` now strips `ReadOnly` from the annotation.

1 0

osc bco -N no longer works?
by John Paul Adrian Glaubitz 08 Apr '24

08 Apr '24

Hi, I just noticed that branch-checking out a new package no longer works: glaubitz@suse-laptop:~/suse> osc bco -N devel:languages:python python-foo-bar Server returned an error: HTTP Error 404: Not Found Error getting meta for project 'devel:languages:python' package 'python-foo-bar' Package not found: devel:languages:python/python-foo-bar glaubitz@suse-laptop:~/suse> Is that by design? Adrian

1 2