December 2020 - openSUSE Kubic - openSUSE Mailing Lists

COW/noCOW on MicroOS Desktop /home subvolume
by Dario Faggioli 23 Mar '21

23 Mar '21

Hello, I've finally had the chance to put in a VM an instance of MicroOS Desktop with the new partition layout and. IMO, the fact that it has /var in a (nocow) subvolume is really a big improvement, so thanks Richard for that! We have /home in a subvolume too, which is also great, and it as well has the nocow flag set. I know this mostly come from a conversation we had on #microos-desktop on IRC but thinking more about that, and discussing this with some users, I wonder whether it is really the best choice. I mean, it sure is ok for /var, but for /home, using nocow means that we give up on some of the nicer BTRFS features, especially for home folders, wouldn't it? That might be especially true for MicroOS Desktop. E.g., think at being able to compress (if not the entire home directories or the entire subvolume) the user installed flatpaks (and using that as an argument "against" those that are still complaining that <Ah, but flatpaks takes a lot of space on disk!>> :-D). So, are there reasons why it's really preferable to keep the /home subvolume as nocow and I'm missing them? Or shall we switch it to cow? Also, while there, shall we evaluate adding other flags by default (i.e., things like autodefrag, or even compression itself)? E.g., AFAIUI, on Fedora, while not doing that right now, they're considering doing something like that, e.g.: https://pagure.io/fedora-btrfs/project/issue/5 Regards -- Dario Faggioli, Ph.D http://about.me/dario.faggioli Virtualization Software Engineer SUSE Labs, SUSE https://www.suse.com/ ------------------------------------------------------------------- <<This happens because _I_ choose it to happen!>> (Raistlin Majere)

3 4

[opensuse-kubic] MicroOS error when setting container memory limit
by Sébastien 'sogal' Poher 11 Mar '21

11 Mar '21

Hi, On a fresh MicroOS install with podman, when I want to set memory limit for a container (using the -m flag) I get the following error: Error: container_linux.go:367: starting container process caused: process_linux.go:459: container init caused: process_linux.go:422: setting cgroup config for procHooks process caused: cannot set memory limit: container could not join or create cgroup: OCI runtime error I am not able to understand the nature of the error. Searching around, I found similar issue where adding cgroup_enable=memory parameter to boot settings in Grub might solve the issue. Is that correct ? If so, what is the proper way to update Grub config on a RO filesystem ? podman version 2.0.4 podman info (ociRuntime part): ociRuntime: name: runc package: runc-1.0.0~rc91-1.2.x86_64 path: /usr/bin/runc version: |- runc version 1.0.0-rc91 spec: 1.0.2-dev Regards, -- Sébastien 'sogal' Poher > When there's no more room at school, the dumb will walk the Earth!

5 10

Fish completions for kubernetes-client
by Robert Munteanu 14 Jan '21

14 Jan '21

Hi, The kubernetes-client package does not come with completions for fish. There is a long history upstream and in the fish shell itself but with no real conclusion: - https://github.com/fish-shell/fish-shell/issues/5516 - https://github.com/kubernetes/kubernetes/issues/30763 - https://github.com/kubernetes/kubernetes/pull/58484 - https://github.com/kubernetes/kubectl/issues/576 In the meantime, there is a third-party completion script that works reasonably well: https://github.com/evanlucas/fish-kubectl-completions I would like to package and submit this completion. I see two options: - add it as a source to the kubernetes-1.20 package - submit it as a separate kubernetes-client-fish-completion package and add supplements as usual, but without version ranges. Any thoughts on whether this is desirable and which option would be preferred? Thanks, Robert

3 4

New MicroOS snapshot 20201229 released!
by Richard Brown 30 Dec '20

30 Dec '20

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: libva (2.9.1 -> 2.10.0) === Details === ==== libva ==== Version update (2.9.1 -> 2.10.0) Subpackages: libva-drm2 libva2 - update to 2.10.0: * add: Pass offset and size of pred_weight_table * add: add vaCopy interface to copy surface and buffer * add: add definition for different execution * add: New parameters for transport controlled BRC were added * add: add FreeBSD support * add: add a bufer type to adjust context priority dynamically * fix: correct the api version in meson.build * fix: remove deprecated variable from va_trace.c * fix: Use va_deprecated for the deprecate variable * fix: Mark chroma_sample_position as deprecated * doc: va_dec_av1: clarifies CDEF syntax element packing * doc: [AV1] Update documented ranges for loop filter and quantization params. * doc: Update va.h for multi-threaded usages * trace: va/va_trace: ignore system gettid() on Linux

1 0

New MicroOS snapshot 20201228 released!
by Richard Brown 29 Dec '20

29 Dec '20

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: cantarell-fonts (0.201 -> 0.301) cyrus-sasl ell (0.33 -> 0.35) kio libhandy (1.0.2 -> 1.0.3) mpg123 (1.26.3 -> 1.26.4) === Details === ==== cantarell-fonts ==== Version update (0.201 -> 0.301) - Update to version 0.301: + Oopsie-release: The last one was missing PostScript names for the new glyphs. Only relevant for when extracting text from PDFs where the generator omitted the text stream. + Rounded coordinates of macronbelowcomb.narrow and macroncomb.narrow.case. Leftovers from when they were scaled components. + Internal: Removed stale layers and data, added normalization script to prune unnecessary data. import-glyphs.py also imports PostScript names now. - Update to version 0.300: + Import Greek glyph set designed by Florian Fecher for GSoC 2018. No kerning, might need a slight respacing. Imported anyway because someting is better than nothing. + Correct positioning of dotaccentcomb.case. + Correct mark positioning in caroncomb.case. + Correct appearance of ustraightstroke in variable font, the overlap became visible at smaller, autohinted sizes. + Correct bar positioning in Ustraightstroke and ustraightstroke. + Correct anchor positioning in Y. + Internal: Consolidate various anchors in composites into the base outline glyphs, to reduce the chance they get out sync. + Updated translations. ==== cyrus-sasl ==== Subpackages: cyrus-sasl-gssapi libsasl2-3 - Remove Berkeley DB dependency (JIRA#SLE-12190) The pacakges cyrus-sasl and cyrus-sasl-saslauthd are build without Berkely DB support. gdbm will be used instead of BDB. The pacakges cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are build with Berkely DB support. - Update to 2.1.27 * Added support for OpenSSL 1.1 * Added support for lmdb * Lots of build fixes * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech * DIGEST-MD5 plugin: Fixed memory leaks Fixed a segfault when looking for non-existent reauth cache Prevent client from going from step 3 back to step 2 Allow cmusaslsecretDIGEST-MD5 property to be disabled * GSSAPI plugin: Added support for retrieving negotiated SSF Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF Properly compute maxbufsize AFTER security layers have been set * SCRAM plugin: Added support for SCRAM-SHA-256 * LOGIN plugin: Don?t prompt client for password until requested by server * NTLM plugin: Fixed crash due to uninitialized HMAC context - Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468) - bsc#983938 `After=syslog.target` left-overs in several unit files - added patches: fix_libpq-fe_include.diff for fixing including libpq-fe.h - removed patches obsoleted by upstream changes: * shared_link_on_ppc.patch * cyrus-sasl-2.1.27-openssl-1.1.0.patch * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch * 0003-Check-return-error-from-gss_wrap_size_limit.patch * 0004-Add-support-for-retrieving-the-mech_ssf.patch * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch * cyrus-sasl-fix-logging-in-gssapi.patch - Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518) * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch - Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518) * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch ==== ell ==== Version update (0.33 -> 0.35) - Update to release 0.35 * Add support for DHCP v6 Rapid Commit. * Add support for ICMP v6 implementation. * Add support for PKCS#1 formatted private keys. ==== kio ==== Subpackages: kio-core - Add upstream patch to prevent crashing when using "apply to all" in the move/copy/overwrite dialog (kde#430374): * 0001-RenameDialog-Add-missing-nullptr-initialization.patch ==== libhandy ==== Version update (1.0.2 -> 1.0.3) Subpackages: libhandy-1-0 typelib-1_0-Handy-1_0 - Update to version 1.0.3: + Fix build warnings with newer GCC. + HdyActionRow: Clarify hdy_action_row_get_icon_name() documentation. + HdyCarousel: Fix drawing cache invalidation on resize. + HdyComboRow: Use the right checkmark icon. + HdyLeaflet and HdyDeck: Increase the edge swipe area size. + HdyKeypad: Fix typing the '+' symbol. + HdyPreferencesGroup: - Fix a memory leak when destroying the widget. - Don't show empty title and description when using gtk_widget_show_all(). + HdySwipeTracker: - Correctly transform widget coordinates for touchpad swipes. - Fix a memory leak. ==== mpg123 ==== Version update (1.26.3 -> 1.26.4) - Update to version 1.26.4 * Clarify seeking documentation regarding samples and PCM frames. * Fix cmake build to install fmt123.h. * Some cmake build fixes, tinyalsa addition by Maarten. * libmpg123: explicitly handle some irrelevant corner cases in tabinit

1 0

New Kubic snapshot 20201228 released!
by Richard Brown 29 Dec '20

29 Dec '20

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: cyrus-sasl === Details === ==== cyrus-sasl ==== Subpackages: cyrus-sasl-gssapi libsasl2-3 - Remove Berkeley DB dependency (JIRA#SLE-12190) The pacakges cyrus-sasl and cyrus-sasl-saslauthd are build without Berkely DB support. gdbm will be used instead of BDB. The pacakges cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are build with Berkely DB support. - Update to 2.1.27 * Added support for OpenSSL 1.1 * Added support for lmdb * Lots of build fixes * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech * DIGEST-MD5 plugin: Fixed memory leaks Fixed a segfault when looking for non-existent reauth cache Prevent client from going from step 3 back to step 2 Allow cmusaslsecretDIGEST-MD5 property to be disabled * GSSAPI plugin: Added support for retrieving negotiated SSF Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF Properly compute maxbufsize AFTER security layers have been set * SCRAM plugin: Added support for SCRAM-SHA-256 * LOGIN plugin: Don?t prompt client for password until requested by server * NTLM plugin: Fixed crash due to uninitialized HMAC context - Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468) - bsc#983938 `After=syslog.target` left-overs in several unit files - added patches: fix_libpq-fe_include.diff for fixing including libpq-fe.h - removed patches obsoleted by upstream changes: * shared_link_on_ppc.patch * cyrus-sasl-2.1.27-openssl-1.1.0.patch * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch * 0003-Check-return-error-from-gss_wrap_size_limit.patch * 0004-Add-support-for-retrieving-the-mech_ssf.patch * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch * cyrus-sasl-fix-logging-in-gssapi.patch - Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518) * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch - Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518) * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch

1 0

New MicroOS snapshot 20201226 released!
by Richard Brown 28 Dec '20

28 Dec '20

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: libtirpc (1.2.6 -> 1.3.1) === Details === ==== libtirpc ==== Version update (1.2.6 -> 1.3.1) Subpackages: libtirpc-netconfig libtirpc3 - Fix sed call to fixup libtirpc.pc.in: as we want our tirpc to be a transparent drop-in-replacement for rpc, we move the files from /usr/include/tirpc to /usr/include. Due to an upstream change in libtirpc.pc.in, though, the existing sed call no longer matched and no longer corrected the information according to our package. - Update to libtirpc 1.3.1 - Remove AUTH_DES interfaces from auth_des.h The unsupported AUTH_DES authentication has be compiled out since commit d918e41d889 (Wed Oct 9 2019) replaced by API routines that return errors. - svc_dg: Free xp_netid during destroy - Fix memory management issues of fd locks - libtirpc: replace array with list for per-fd locks - __svc_vc_dodestroy: fix double free of xp_ltaddr.buf - __rpc_dtbsize: rlim_cur instead of rlim_max - pkg-config: use the correct replacements for libdir/includedir

1 0

New Kubic snapshot 20201226 released!
by Richard Brown 28 Dec '20

28 Dec '20

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: libtirpc (1.2.6 -> 1.3.1) === Details === ==== libtirpc ==== Version update (1.2.6 -> 1.3.1) Subpackages: libtirpc-netconfig libtirpc3 - Fix sed call to fixup libtirpc.pc.in: as we want our tirpc to be a transparent drop-in-replacement for rpc, we move the files from /usr/include/tirpc to /usr/include. Due to an upstream change in libtirpc.pc.in, though, the existing sed call no longer matched and no longer corrected the information according to our package. - Update to libtirpc 1.3.1 - Remove AUTH_DES interfaces from auth_des.h The unsupported AUTH_DES authentication has be compiled out since commit d918e41d889 (Wed Oct 9 2019) replaced by API routines that return errors. - svc_dg: Free xp_netid during destroy - Fix memory management issues of fd locks - libtirpc: replace array with list for per-fd locks - __svc_vc_dodestroy: fix double free of xp_ltaddr.buf - __rpc_dtbsize: rlim_cur instead of rlim_max - pkg-config: use the correct replacements for libdir/includedir

1 0

New MicroOS snapshot 20201224 released!
by Richard Brown 25 Dec '20

25 Dec '20

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: boost-base dolphin gtk2 (2.24.32+70 -> 2.24.33) mozilla-nss (3.58 -> 3.59) plasma5-desktop python-importlib-metadata (3.1.1 -> 3.3.0) python-more-itertools (8.5.0 -> 8.6.0) python-pyOpenSSL sudo (1.9.4 -> 1.9.4p2) timezone (2020d -> 2020e) xmlsec1 (1.2.30 -> 1.2.31) === Details === ==== boost-base ==== Subpackages: boost-license1_75_0 libboost_thread1_75_0 - libboost_nowide now uses same pattern of Provides/Conflicts and version numbers as other Boost libraries - Add missing conflicts for Boost 1.66 - Boost.Build (jam) implementation is now obsoletes older versions ==== dolphin ==== Subpackages: dolphin-part libdolphinvcs5 - Add upstream patch to fix crash on launch (kde#429628, kde#430434): * 0001-Fix-access-url-navigator-while-creating-new-tab-in-f.patch ==== gtk2 ==== Version update (2.24.32+70 -> 2.24.33) Subpackages: gtk2-tools libgtk-2_0-0 - Update to version 2.24.33: + This is the final GTK 2.x release. There will be no more updates to GTK 2. All users are encouraged to update to GTK 3 or 4. + Make the output of gtk-query-immodules deterministic. + GtkCalendar: Use %OB if supported. + GtkIconTheme: prefer exact matches. + build: - Support automake 1.16. - Fix compiler warnings with newer gcc. ==== mozilla-nss ==== Version update (3.58 -> 3.59) Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs - update to NSS 3.59 Notable changes * Exported two existing functions from libnss: CERT_AddCertToListHeadWithData and CERT_AddCertToListTailWithData Bugfixes * bmo#1607449 - Lock cert->nssCertificate to prevent a potential data race * bmo#1672823 - Add Wycheproof test cases for HMAC, HKDF, and DSA * bmo#1663661 - Guard against NULL token in nssSlot_IsTokenPresent * bmo#1670835 - Support enabling and disabling signatures via Crypto Policy * bmo#1672291 - Resolve libpkix OCSP failures on SHA1 self-signed root certs when SHA1 signatures are disabled. * bmo#1644209 - Fix broken SelectedCipherSuiteReplacer filter to solve some test intermittents * bmo#1672703 - Tolerate the first CCS in TLS 1.3 to fix a regression in our CVE-2020-25648 fix that broke purple-discord (boo#1179382) * bmo#1666891 - Support key wrap/unwrap with RSA-OAEP * bmo#1667989 - Fix gyp linking on Solaris * bmo#1668123 - Export CERT_AddCertToListHeadWithData and CERT_AddCertToListTailWithData from libnss * bmo#1634584 - Set CKA_NSS_SERVER_DISTRUST_AFTER for Trustis FPS Root CA * bmo#1663091 - Remove unnecessary assertions in the streaming ASN.1 decoder that affected decoding certain PKCS8 private keys when using NSS debug builds * bmo#670839 - Use ARM crypto extension for AES, SHA1 and SHA2 on MacOS. ==== plasma5-desktop ==== - Add upstream patch to fix keyboard repeat settings not being applied immediately (boo#1164739, kde#418175): * Reparse-the-key-repeat-rate-config-when-we-try-to-load-it.patch ==== python-importlib-metadata ==== Version update (3.1.1 -> 3.3.0) - New version requires typing_extensions for Python < 3.8 (Leap and TW python36 flavor) - update to 3.3.0: * * #265: ``EntryPoint`` objects now expose a ``.dist`` object referencing the ``Distribution`` when constructed from a Distribution. * The object returned by ``metadata()`` now has a formally-defined protocol called ``PackageMetadata`` with declared support for the ``.get_all()`` method. Fixes #126. - add typing-extensions dependency for older python versions ==== python-more-itertools ==== Version update (8.5.0 -> 8.6.0) - update to 8.6.0: * :func:`all_unique` (thanks to brianmaissy) * :func:`nth_product` and :func:`nth_permutation` (thanks to N8Brooks) * :func:`chunked` and :func:`sliced` now accept a ``strict`` parameter (thanks to shlomif and jtwool) * Python 3.5 has reached its end of life and is no longer supported. * Python 3.9 is officially supported. ==== python-pyOpenSSL ==== - Adjust metadata for skip-networked-test.patch and refer to the proper upstream ticket gh#pyca/pyopenssl#68. ==== sudo ==== Version update (1.9.4 -> 1.9.4p2) - Update to 1.9.4p2 * Fixed a bug introduced in sudo 1.9.4p1 which could lead to a crash if the sudoers file contains a runas user-specific Defaults entry. Bug #951. - News in 1.9.4p1 * Fixed a regression introduced in version 1.9.4 where sudo would not build when configured using the --without-sendmail option. Bug #947. * Fixed a problem where if I/O logging was disabled and sudo was unable to connect to sudo_logsrvd, the command would still be allowed to run even when the "ignore_logfile_errors" sudoers option was enabled. * Fixed a crash introduced in version 1.9.4 when attempting to run a command as a non-existent user. Bug #948. * The installed sudo.conf file now has the default sudoers Plugin lines commented out. This fixes a potential conflict when there is both a system-installed version of sudo and a user-installed version. GitHub issue #75. * Fixed a regression introduced in sudo 1.9.4 where sudo would run the command as a child process even when a pseudo-terminal was not in use and the "pam_session" and "pam_setcred" options were disabled. GitHub issue #76. * Fixed a regression introduced in sudo 1.8.9 where the "closefrom" sudoers option could not be set to a value of 3. Bug #950. ==== timezone ==== Version update (2020d -> 2020e) - timezone update 2020e (bsc#1177460) * Volgograd switches to Moscow time on 2020-12-27 at 02:00. ==== xmlsec1 ==== Version update (1.2.30 -> 1.2.31) Subpackages: libxmlsec1-1 libxmlsec1-openssl1 - Update to version 1.2.31: + Unload error strings in OpenSSL shutdown. + Make userData available when executing preExecCallback function. + Add an option to use secure memset. - Pass --disable-md5 to configure: The cryptographic strength of the MD5 algorithm is sufficiently doubtful that its use is discouraged at this time. It is not listed as an algorithm in [XMLDSIG-CORE1] https://www.w3.org/TR/xmlsec-algorithms/#bib-XMLDSIG-CORE1

1 0

New Kubic snapshot 20201224 released!
by Richard Brown 25 Dec '20

25 Dec '20

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: boost-base mozilla-nss (3.58 -> 3.59) python-importlib-metadata (3.1.1 -> 3.3.0) python-more-itertools (8.5.0 -> 8.6.0) python-pyOpenSSL sudo (1.9.4 -> 1.9.4p2) timezone (2020d -> 2020e) xmlsec1 (1.2.30 -> 1.2.31) === Details === ==== boost-base ==== Subpackages: boost-license1_75_0 libboost_thread1_75_0 - libboost_nowide now uses same pattern of Provides/Conflicts and version numbers as other Boost libraries - Add missing conflicts for Boost 1.66 - Boost.Build (jam) implementation is now obsoletes older versions ==== mozilla-nss ==== Version update (3.58 -> 3.59) - update to NSS 3.59 Notable changes * Exported two existing functions from libnss: CERT_AddCertToListHeadWithData and CERT_AddCertToListTailWithData Bugfixes * bmo#1607449 - Lock cert->nssCertificate to prevent a potential data race * bmo#1672823 - Add Wycheproof test cases for HMAC, HKDF, and DSA * bmo#1663661 - Guard against NULL token in nssSlot_IsTokenPresent * bmo#1670835 - Support enabling and disabling signatures via Crypto Policy * bmo#1672291 - Resolve libpkix OCSP failures on SHA1 self-signed root certs when SHA1 signatures are disabled. * bmo#1644209 - Fix broken SelectedCipherSuiteReplacer filter to solve some test intermittents * bmo#1672703 - Tolerate the first CCS in TLS 1.3 to fix a regression in our CVE-2020-25648 fix that broke purple-discord (boo#1179382) * bmo#1666891 - Support key wrap/unwrap with RSA-OAEP * bmo#1667989 - Fix gyp linking on Solaris * bmo#1668123 - Export CERT_AddCertToListHeadWithData and CERT_AddCertToListTailWithData from libnss * bmo#1634584 - Set CKA_NSS_SERVER_DISTRUST_AFTER for Trustis FPS Root CA * bmo#1663091 - Remove unnecessary assertions in the streaming ASN.1 decoder that affected decoding certain PKCS8 private keys when using NSS debug builds * bmo#670839 - Use ARM crypto extension for AES, SHA1 and SHA2 on MacOS. ==== python-importlib-metadata ==== Version update (3.1.1 -> 3.3.0) - New version requires typing_extensions for Python < 3.8 (Leap and TW python36 flavor) - update to 3.3.0: * * #265: ``EntryPoint`` objects now expose a ``.dist`` object referencing the ``Distribution`` when constructed from a Distribution. * The object returned by ``metadata()`` now has a formally-defined protocol called ``PackageMetadata`` with declared support for the ``.get_all()`` method. Fixes #126. - add typing-extensions dependency for older python versions ==== python-more-itertools ==== Version update (8.5.0 -> 8.6.0) - update to 8.6.0: * :func:`all_unique` (thanks to brianmaissy) * :func:`nth_product` and :func:`nth_permutation` (thanks to N8Brooks) * :func:`chunked` and :func:`sliced` now accept a ``strict`` parameter (thanks to shlomif and jtwool) * Python 3.5 has reached its end of life and is no longer supported. * Python 3.9 is officially supported. ==== python-pyOpenSSL ==== - Adjust metadata for skip-networked-test.patch and refer to the proper upstream ticket gh#pyca/pyopenssl#68. ==== sudo ==== Version update (1.9.4 -> 1.9.4p2) - Update to 1.9.4p2 * Fixed a bug introduced in sudo 1.9.4p1 which could lead to a crash if the sudoers file contains a runas user-specific Defaults entry. Bug #951. - News in 1.9.4p1 * Fixed a regression introduced in version 1.9.4 where sudo would not build when configured using the --without-sendmail option. Bug #947. * Fixed a problem where if I/O logging was disabled and sudo was unable to connect to sudo_logsrvd, the command would still be allowed to run even when the "ignore_logfile_errors" sudoers option was enabled. * Fixed a crash introduced in version 1.9.4 when attempting to run a command as a non-existent user. Bug #948. * The installed sudo.conf file now has the default sudoers Plugin lines commented out. This fixes a potential conflict when there is both a system-installed version of sudo and a user-installed version. GitHub issue #75. * Fixed a regression introduced in sudo 1.9.4 where sudo would run the command as a child process even when a pseudo-terminal was not in use and the "pam_session" and "pam_setcred" options were disabled. GitHub issue #76. * Fixed a regression introduced in sudo 1.8.9 where the "closefrom" sudoers option could not be set to a value of 3. Bug #950. ==== timezone ==== Version update (2020d -> 2020e) - timezone update 2020e (bsc#1177460) * Volgograd switches to Moscow time on 2020-12-27 at 02:00. ==== xmlsec1 ==== Version update (1.2.30 -> 1.2.31) Subpackages: libxmlsec1-1 libxmlsec1-openssl1 - Update to version 1.2.31: + Unload error strings in OpenSSL shutdown. + Make userData available when executing preExecCallback function. + Add an option to use secure memset. - Pass --disable-md5 to configure: The cryptographic strength of the MD5 algorithm is sufficiently doubtful that its use is discouraged at this time. It is not listed as an algorithm in [XMLDSIG-CORE1] https://www.w3.org/TR/xmlsec-algorithms/#bib-XMLDSIG-CORE1

1 0

New MicroOS snapshot 20201223 released!
by Richard Brown 24 Dec '20

24 Dec '20

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: atkmm1_6 (2.28.0 -> 2.28.1) curl (7.73.0 -> 7.74.0) fuse gstreamer-plugins-bad gtkmm3 (3.24.2 -> 3.24.3) ipset (7.9 -> 7.10) kdeconnect-kde kernel-firmware kernel-source (5.9.14 -> 5.10.1) libxml2 llvm11 openldap2 pangomm1_4 (2.42.1 -> 2.42.2) perl-libwww-perl (6.49 -> 6.50) pulseaudio python-Babel (2.8.0 -> 2.9.0) python-certifi (2020.11.8 -> 2020.12.5) python-cffi (1.14.3 -> 1.14.4) python-chardet (3.0.4 -> 4.0.0) python-cryptography (3.3 -> 3.3.1) python-ecdsa (0.16.0 -> 0.16.1) python-jsonpatch (1.26 -> 1.28) python-requests (2.25.0 -> 2.25.1) samba (4.13.2+git.176.0a5e55b510c -> 4.13.3+git.181.fc4672a5b81) snapper (0.8.14 -> 0.8.15) systemd (246.7 -> 246.9) udisks2 vulkan-loader (1.2.154.1 -> 1.2.162.0) === Details === ==== atkmm1_6 ==== Version update (2.28.0 -> 2.28.1) - Update to version 2.28.1: + Build: - Improve NMake support - Use __declspec(dllexport) when building with Visual Studio - Add Meson support - doc/reference/: Update for Doxygen >= 1.8.16 - Add meson BuildRequires and macros following upstreams port. - Add doxygen, graphviz and xsltproc BuildRequires, needed now for building documentation. - Replace gcc-c++ with generic c++_compiler BuildRequires. - Tweak setup macro and fdupes call. ==== curl ==== Version update (7.73.0 -> 7.74.0) Subpackages: libcurl4 - Enable zstd and brotli support - Update to 7.74.0 * Changes: hsts: add experimental support for Strict-Transport-Security * Bugfixes: - Inferior OCSP verification [bsc#1179593, CVE-2020-8286] - FTP wildcard stack overflow [bsc#1179399, CVE-2020-8285] - trusting FTP PASV responses [bsc#1179398, CVE-2020-8284] - Revert "multi: implement wait using winsock events" - openssl: free mem_buf in error path - ntlm: avoid malloc(0) on zero length user and domain - ngtcp2: use the minimal version of QUIC supported by ngtcp2 - ngtcp2: advertise h3 ALPN unconditionally - file: avoid duplicated code sequence - openssl: guard against OOM on context creation - docs: document the 8MB input string limit for curl_easy_escape and curl_easy_setopt() - hsts: add read/write callbacks - hsts: add support for Strict-Transport-Security - alt-svc: enable by default - checksrc: warn on empty line before open brace - connect: repair build without ipv6 availability - curl.se: new home - ftp: retry getpeername for FTP with TCP_FASTOPEN - gnutls: fix memory leaks (certfields memory wasn't released) - http: pass correct header size to debug callback for chunked post - libssh2: fix transport over HTTPS proxy - openssl: guard against OOM on context creation - openssl: use OPENSSL_init_ssl() with >= 1.1.0 - Revert "multi: implement wait using winsock events" - socks: check for DNS entries with the right port number - tool_operate: --retry for HTTP 408 responses too - tool_operate: bail out proper on errors during parallel transfers - urlapi: don't accept blank port number field without scheme - urlapi: URL encode a '+' in the query part - vquic/ngtcp2.h: define local_addr as sockaddr_storage - Update check section: * runtests now supports dynamically base64 encoded sections in tests * Replace env interpreter for perl and python3 - Remove curl-use_OPENSSL_config.patch since the OpenSSL initialization has been updated to use OPENSSL_init_ssl() with >= 1.1.0 - Update patches to fix compiling warnings: * curl-disabled-redirect-protocol-message.patch * libcurl-ocloexec.patch - Enable test 1165 ==== fuse ==== Subpackages: libfuse2 - Enable LTO (boo#1133101) and use -ffat-lto-objects. ==== gstreamer-plugins-bad ==== Subpackages: libgstadaptivedemux-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstphotography-1_0-0 libgstsctp-1_0-0 libgsturidownloader-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 - Drop GPL-2.0-or-later from license tag, upstream moved to LGPL-2.1-or-later only starting from version 1.18.1. See commit https://gitlab.freedesktop.org/gstreamer/gst-plugins-bad/-/merge_requests/1… ==== gtkmm3 ==== Version update (3.24.2 -> 3.24.3) - Update to version 3.24.3: + Gtk: Actionable::get_action_target_value(): Fix ref count + Documentation: - Improve the documentation of Gtk::Application::add_window() and Gtk::Window::set_application() - Gtk::Button::set_image(): Fix the documentation - Gtk::TreeView::append_column(): Add code example - README: Add instructions for building gtkmm - Explain key values + Demos: - Don't use C++14 auto deduction - Update the GLArea demo (similar to updates in gtk+) - GLArea demo: Fix a crash + Tests: Builder test: Test derived props declared in C++ + Build: - Improve NMake support - Fix Autotools build with X11 backend disabled (--enable-x11-backend=no) - Use __declspec(dllexport) when building with Visual Studio - Add support for building gtkmm with Meson - docs/reference/: Update for Doxygen >= 1.8.16 - Add meson BuildRequires and macros following upstreams port. - Add graphviz BuildRequires (needed for documentation build now) and replace gcc-c++ with generic c++_compiler BuildRequires. ==== ipset ==== Version update (7.9 -> 7.10) Subpackages: libipset13 - Update to release 7.10 * Fix shift-out-of-bounds in htable_bits() ==== kdeconnect-kde ==== - Add missing runtime requirements (boo#1180272) ==== kernel-firmware ==== Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network ucode-amd - add banana pi brcm wireless symlinks to extrawhence ==== kernel-source ==== Version update (5.9.14 -> 5.10.1) - drm/amdgpu: only set DP subconnector type on DP and eDP connectors (bsc#1180227). - commit 74c3250 - Update config files. Just to match my env. - commit 588066a - Linux 5.10.1 (bsc#1012628). - Revert "dm raid: fix discard limits for raid1 and raid10" (bsc#1012628). - Revert "md: change mddev 'chunk_sectors' from int to unsigned" (bsc#1012628). - commit bc79fb6 - lpae: disable CONFIG_QCOM_PIL_INFO to fix build on armv7 - commit 0c08c2e - Update to 5.10 final - eliminated 1 patch - patches.suse/revert-mm-filemap-add-static-for-function-__add_to_p.patch - update configs - NFS_V4_2_READ_PLUS=n (recommended default, unsafe feature) - commit ff9060b - config.conf: Reenable armv6hl/armv7hl/arm64 - Update config files: * Settings copied from x86_64 update * arm specific options are =m except if debug or test, =y otherwise - commit cc424ba ==== libxml2 ==== Subpackages: libxml2-2 libxml2-tools - Security fix: [bsc#1161521, CVE-2019-20388] * Memory leak in xmlSchemaPreRun in xmlschemas.c - Add libxml2-CVE-2019-20388.patch ==== llvm11 ==== - polly-pthread.patch: Remove, std::call_once no longer needs libpthread ==== openldap2 ==== - added openldap2.keyring and source signature file ==== pangomm1_4 ==== Version update (2.42.1 -> 2.42.2) - Update to version 2.42.2: + Build: - Use __declspec(dllexport) when building with Visual Studio - Meson build: Avoid some recompilations - Meson build: Better error message if trying to build with maintainer-mode=false when true is necessary - Meson build: Set default value of the 'warnings' option to 'min' - Improve NMake support - - Improve Visual Studio support - docs/reference/: Update for Doxygen >= 1.8.16 - Meson build: Fix versioning on macOS - Add meson BuildRequires and macros following upstreams port. - Add doxygen, graphviz and xsltproc BuildRequires, needed now for building documentation. - Replace gcc-c++ with generic c++_compiler BuildRequires. - Tweak setup macro and fdupes call. ==== perl-libwww-perl ==== Version update (6.49 -> 6.50) - updated to 6.50 see /usr/share/doc/packages/perl-libwww-perl/Changes 6.50 2020-12-16 18:35:08Z - Fix RT #81381 - Make LWP::UserAgent robust to 5.17.6/5.18 hash randomization (GH#355) (Yves Orton and Olaf Alders) ==== pulseaudio ==== Subpackages: libpulse-mainloop-glib0 libpulse0 pulseaudio-module-bluetooth pulseaudio-module-gsettings pulseaudio-module-x11 pulseaudio-module-zeroconf pulseaudio-utils - Enable LTO (boo#1133278) as it works now. ==== python-Babel ==== Version update (2.8.0 -> 2.9.0) - removed obsolete patches * python383.patch * pytest6.patch - update to 2.9.0 * Improvements - CLDR: Use CLDR 37 ? Aarni Koskela (#734) - Dates: Handle ZoneInfo objects in get_timezone_location, get_timezone_name - Alessio Bogon (#741) - Numbers: Add group_separator feature in number formatting - Abdullah Javed Nesar (#726) * Bugfixes - Dates: Correct default Format().timedelta format to 'long' to mute deprecation warnings ? Aarni Koskela - Import: Simplify iteration code in "import_cldr.py" ? Felix Schwarz - Import: Stop using deprecated ElementTree methods "getchildren()" and "getiterator()" ? Felix Schwarz - Messages: Fix unicode printing error on Python 2 without TTY. ? Niklas Hambüchen - Messages: Introduce invariant that _invalid_pofile() takes unicode line. ? Niklas Hambüchen - Tests: fix tests when using Python 3.9 ? Felix Schwarz - Tests: Remove deprecated 'sudo: false' from Travis configuration ? Jon Dufresne - Tests: Support Py.test 6.x ? Aarni Koskela - Utilities: LazyProxy: Handle AttributeError in specified func ? Nikiforov Konstantin (#724) - Utilities: Replace usage of parser.suite with ast.parse ? Miro Hron?ok - Support Py.test 6 - Aarni Koskela (#747, #750, #752) * Documentation - Update parse_number comments ? Brad Martin (#708) - Add __iter__ to Catalog documentation ? @CyanNani123 ==== python-certifi ==== Version update (2020.11.8 -> 2020.12.5) - update to 2020.12.5 ==== python-cffi ==== Version update (1.14.3 -> 1.14.4) - update to 1.14.4: * no upstream changelog provided ==== python-chardet ==== Version update (3.0.4 -> 4.0.0) - Remove now unnecessary pytest4.patch and python-chardet-rpmlintrc - Update to v4.0.0 See https://github.com/chardet/chardet/compare/3.0.4...4.0.0 ==== python-cryptography ==== Version update (3.3 -> 3.3.1) - update to 3.3.1: * Re-added a legacy symbol causing problems for older ``pyOpenSSL`` use ==== python-ecdsa ==== Version update (0.16.0 -> 0.16.1) - update to to 0.16.1: * `VerifyingKey.precompute()` supports `lazy` argument to delay precomputation to the first time the key is used to verify a signature. * Make created signatures correct when the hash used is bigger than the curve order bit size and the curve order is not a multiple of 8 * Speed up library load time by calculating the generator point multiplication tables the first time the points are used, not when they are initialised. ==== python-jsonpatch ==== Version update (1.26 -> 1.28) - update to 1.28: * Make it possible for from_diff to support custom types (issue #107) * Python 3.9 support ==== python-requests ==== Version update (2.25.0 -> 2.25.1) - update to 2.25.1: - Requests now treats `application/json` as `utf8` by default. Resolving inconsistencies between `r.text` and `r.json` output. (#5673) ==== samba ==== Version update (4.13.2+git.176.0a5e55b510c -> 4.13.3+git.181.fc4672a5b81) Subpackages: libdcerpc-binding0 libdcerpc0 libndr-krb5pac0 libndr-nbt0 libndr-standard0 libndr1 libnetapi0 libsamba-credentials0 libsamba-errors0 libsamba-hostconfig0 libsamba-passdb0 libsamba-util0 libsamdb0 libsmbclient0 libsmbconf0 libsmbldap2 libtevent-util0 libwbclient0 samba-client samba-libs samba-libs-python3 - Update to 4.13.3 + libcli: smb2: Never print length if smb2_signing_key_valid() fails for crypto blob; (bso#14210); + s3: modules: gluster. Fix the error I made in preventing talloc leaks from a function; (bso#14486); + s3: smbd: Don't overwrite contents of fsp->aio_requests[0] with NULL via TALLOC_FREE(); (bso#14515); + s3: spoolss: Make parameters in call to user_ok_token() match all other uses; (bso#14568); + s3: smbd: Quiet log messages from usershares for an unknown share; (bso#14590); + samba process does not honor max log size; (bso#14248); + vfs_zfsacl: Add missing inherited flag on hidden "magic" everyone@ ACE; (bso#14587); + s3-libads: Pass timeout to open_socket_out in ms; (bso#13124); + s3-vfs_glusterfs: Always disable write-behind translator; (bso#14486); + smbclient: Fix recursive mget; (bso#14517); + clitar: Use do_list()'s recursion in clitar.c; (bso#14581); + manpages/vfs_glusterfs: Mention silent skipping of write-behind translator; (bso#14486); + vfs_shadow_copy2: Preserve all open flags assuming ROFS; (bso#14573); + interface: Fix if_index is not parsed correctly; (bso#14514); ==== snapper ==== Version update (0.8.14 -> 0.8.15) Subpackages: libsnapper5 - added option to abbreviate columns in table (see gh#openSUSE/snapper#268) - version 0.8.15 - in systemd-helper continue with other configs if one config is broken (gh#openSUSE/snapper#495) - fixed compilation with --disable-btrfs (gh#openSUSE/snapper#505) ==== systemd ==== Version update (246.7 -> 246.9) Subpackages: libsystemd0 libudev1 systemd-logger systemd-sysvinit udev - Import commit 520e53b6d85087b05892ee637ae93f1b269e7e52 (merge of v246.9) For a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/2401461e5f0e32922823d954c56106f… - Import commit 2401461e5f0e32922823d954c56106f96344070e 6131548b0f udev: link_update() should fail if the entry in symlink dir couldn't have been created f6cb8c7d79 udev: make algorithm that selects highest priority devlink less susceptible to race conditions (bsc#1084748) fc64e47291 basic/stat-util: make mtime check stricter and use entire timestamp ae91d45d3d test/sys-script.py: add missing DEVNAME entries to uevents 09e3473a7a test/udev_test.pl: add "expected good" count fc89379b5b test/udev-test.pl: suppress umount error message at startup d9e114f10d test/sd-script.py: new helper script for udev testing f2672eae66 test/udev-test.pl: generator for large list of block devices 42b68e43e2 test/udev-test.pl: add repeat count eec8ec375a tests/udev-test.pl: add multiple device test 73b8f3cf93 test/udev-test.pl: count "good" results ee04d70bb6 test/udev-test.pl: merge import parent tests into one 03942c8fbc test/udev-test.pl: merge "space and var with space" tests ec95546189 test/udev-test.pl: remove bogus rules from magic subsys test f704429217 test/udev-test.pl: Make some tests a little harder ce1a877dc0 test/udev-test.pl: last_rule is unsupported 913c72ff2d test/udev-test.pl: fix wrong test descriptions eeb25a1be6 test/udev-test.pl: allow checking multiple symlinks 00ab4292da test/udev-test.pl: test correctness of symlink targets 5b71ee2911 test/udev-test.pl: use computed devnode name 2e04bb9ae8 test/udev-test.pl: allow concurrent additions and removals 8816dd593c test/udev-test.pl: create rules only once 214418632d test/udev-test.pl: allow multiple devices per test 1eb6b23f27 udev-test: do not rely on "mail" group being defined 4a0a4dcf10 udev: Fix sound.target dependency (bsc#1179363) - Enable support for zstd compression systemd-journald will now use zstd for compressing large fields in journal files. systemd-coredump will also use this algorithm to compress coredump files. Please note that systemd older than v246 won't be able to read new journal files as zstd algorithm is not supported by these versions. This incompatible change was actually not the only one introduced by v246 since the hash tables in journal files have been hardened against hash collisions too in an incompatible way with older versions. ==== udisks2 ==== Subpackages: libudisks2-0 - Add upstream bugfix patches: + udisks2-Fix-memory-leaks.patch + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch ==== vulkan-loader ==== Version update (1.2.154.1 -> 1.2.162.0) - Update to release 1.2.162 (sdk) * Add GGP WSI platform support to Vulkan-Loader - Update to release 1.2.161 * Fix some issues when EnumerateAdapterPhysicalDevices is available. * loader: Override layer load when custom allocator used. * Add support for VK_FUCHSIA_imagepipe_surface.

1 0

New Kubic snapshot 20201223 released!
by Richard Brown 24 Dec '20

24 Dec '20

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: curl (7.73.0 -> 7.74.0) ethtool (5.9 -> 5.10) fuse ipset (7.9 -> 7.10) kernel-firmware kernel-source (5.9.14 -> 5.10.1) libxml2 openldap2 python-Babel (2.8.0 -> 2.9.0) python-certifi (2020.11.8 -> 2020.12.5) python-cffi (1.14.3 -> 1.14.4) python-chardet (3.0.4 -> 4.0.0) python-cryptography (3.3 -> 3.3.1) python-ecdsa (0.16.0 -> 0.16.1) python-jsonpatch (1.26 -> 1.28) python-msgpack (1.0.0 -> 1.0.2) python-requests (2.25.0 -> 2.25.1) snapper (0.8.14 -> 0.8.15) systemd (246.7 -> 246.9) yomi-formula === Details === ==== curl ==== Version update (7.73.0 -> 7.74.0) Subpackages: libcurl4 - Enable zstd and brotli support - Update to 7.74.0 * Changes: hsts: add experimental support for Strict-Transport-Security * Bugfixes: - Inferior OCSP verification [bsc#1179593, CVE-2020-8286] - FTP wildcard stack overflow [bsc#1179399, CVE-2020-8285] - trusting FTP PASV responses [bsc#1179398, CVE-2020-8284] - Revert "multi: implement wait using winsock events" - openssl: free mem_buf in error path - ntlm: avoid malloc(0) on zero length user and domain - ngtcp2: use the minimal version of QUIC supported by ngtcp2 - ngtcp2: advertise h3 ALPN unconditionally - file: avoid duplicated code sequence - openssl: guard against OOM on context creation - docs: document the 8MB input string limit for curl_easy_escape and curl_easy_setopt() - hsts: add read/write callbacks - hsts: add support for Strict-Transport-Security - alt-svc: enable by default - checksrc: warn on empty line before open brace - connect: repair build without ipv6 availability - curl.se: new home - ftp: retry getpeername for FTP with TCP_FASTOPEN - gnutls: fix memory leaks (certfields memory wasn't released) - http: pass correct header size to debug callback for chunked post - libssh2: fix transport over HTTPS proxy - openssl: guard against OOM on context creation - openssl: use OPENSSL_init_ssl() with >= 1.1.0 - Revert "multi: implement wait using winsock events" - socks: check for DNS entries with the right port number - tool_operate: --retry for HTTP 408 responses too - tool_operate: bail out proper on errors during parallel transfers - urlapi: don't accept blank port number field without scheme - urlapi: URL encode a '+' in the query part - vquic/ngtcp2.h: define local_addr as sockaddr_storage - Update check section: * runtests now supports dynamically base64 encoded sections in tests * Replace env interpreter for perl and python3 - Remove curl-use_OPENSSL_config.patch since the OpenSSL initialization has been updated to use OPENSSL_init_ssl() with >= 1.1.0 - Update patches to fix compiling warnings: * curl-disabled-redirect-protocol-message.patch * libcurl-ocloexec.patch - Enable test 1165 ==== ethtool ==== Version update (5.9 -> 5.10) - update to new upstream release 5.10 * infrastructure for JSON output * separate FLAGS in -h output * use policy dumps to check flags support * show pause stats (-a) * pretty printing of policy dumps * improve error message when SFP module is missing * fix use after free in netlink_run_handler() * fix leaked instances of struct nl_socket * improve compatibility between netlink and ioctl (-s) - drop patches present in 5.10 release: * ethtool-Improve-compatibility-between-netlink-and-io.patch * netlink-do-not-send-messages-and-process-replies-in-.patch * netlink-fix-leaked-instances-of-struct-nl_socket.patch * netlink-fix-use-after-free-in-netlink_run_handler.patch ==== fuse ==== - Enable LTO (boo#1133101) and use -ffat-lto-objects. ==== ipset ==== Version update (7.9 -> 7.10) Subpackages: libipset13 - Update to release 7.10 * Fix shift-out-of-bounds in htable_bits() ==== kernel-firmware ==== Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network ucode-amd - add banana pi brcm wireless symlinks to extrawhence ==== kernel-source ==== Version update (5.9.14 -> 5.10.1) - drm/amdgpu: only set DP subconnector type on DP and eDP connectors (bsc#1180227). - commit 74c3250 - Update config files. Just to match my env. - commit 588066a - Linux 5.10.1 (bsc#1012628). - Revert "dm raid: fix discard limits for raid1 and raid10" (bsc#1012628). - Revert "md: change mddev 'chunk_sectors' from int to unsigned" (bsc#1012628). - commit bc79fb6 - lpae: disable CONFIG_QCOM_PIL_INFO to fix build on armv7 - commit 0c08c2e - Update to 5.10 final - eliminated 1 patch - patches.suse/revert-mm-filemap-add-static-for-function-__add_to_p.patch - update configs - NFS_V4_2_READ_PLUS=n (recommended default, unsafe feature) - commit ff9060b - config.conf: Reenable armv6hl/armv7hl/arm64 - Update config files: * Settings copied from x86_64 update * arm specific options are =m except if debug or test, =y otherwise - commit cc424ba ==== libxml2 ==== Subpackages: libxml2-2 libxml2-tools - Security fix: [bsc#1161521, CVE-2019-20388] * Memory leak in xmlSchemaPreRun in xmlschemas.c - Add libxml2-CVE-2019-20388.patch ==== openldap2 ==== - added openldap2.keyring and source signature file ==== python-Babel ==== Version update (2.8.0 -> 2.9.0) - removed obsolete patches * python383.patch * pytest6.patch - update to 2.9.0 * Improvements - CLDR: Use CLDR 37 ? Aarni Koskela (#734) - Dates: Handle ZoneInfo objects in get_timezone_location, get_timezone_name - Alessio Bogon (#741) - Numbers: Add group_separator feature in number formatting - Abdullah Javed Nesar (#726) * Bugfixes - Dates: Correct default Format().timedelta format to 'long' to mute deprecation warnings ? Aarni Koskela - Import: Simplify iteration code in "import_cldr.py" ? Felix Schwarz - Import: Stop using deprecated ElementTree methods "getchildren()" and "getiterator()" ? Felix Schwarz - Messages: Fix unicode printing error on Python 2 without TTY. ? Niklas Hambüchen - Messages: Introduce invariant that _invalid_pofile() takes unicode line. ? Niklas Hambüchen - Tests: fix tests when using Python 3.9 ? Felix Schwarz - Tests: Remove deprecated 'sudo: false' from Travis configuration ? Jon Dufresne - Tests: Support Py.test 6.x ? Aarni Koskela - Utilities: LazyProxy: Handle AttributeError in specified func ? Nikiforov Konstantin (#724) - Utilities: Replace usage of parser.suite with ast.parse ? Miro Hron?ok - Support Py.test 6 - Aarni Koskela (#747, #750, #752) * Documentation - Update parse_number comments ? Brad Martin (#708) - Add __iter__ to Catalog documentation ? @CyanNani123 ==== python-certifi ==== Version update (2020.11.8 -> 2020.12.5) - update to 2020.12.5 ==== python-cffi ==== Version update (1.14.3 -> 1.14.4) - update to 1.14.4: * no upstream changelog provided ==== python-chardet ==== Version update (3.0.4 -> 4.0.0) - Remove now unnecessary pytest4.patch and python-chardet-rpmlintrc - Update to v4.0.0 See https://github.com/chardet/chardet/compare/3.0.4...4.0.0 ==== python-cryptography ==== Version update (3.3 -> 3.3.1) - update to 3.3.1: * Re-added a legacy symbol causing problems for older ``pyOpenSSL`` use ==== python-ecdsa ==== Version update (0.16.0 -> 0.16.1) - update to to 0.16.1: * `VerifyingKey.precompute()` supports `lazy` argument to delay precomputation to the first time the key is used to verify a signature. * Make created signatures correct when the hash used is bigger than the curve order bit size and the curve order is not a multiple of 8 * Speed up library load time by calculating the generator point multiplication tables the first time the points are used, not when they are initialised. ==== python-jsonpatch ==== Version update (1.26 -> 1.28) - update to 1.28: * Make it possible for from_diff to support custom types (issue #107) * Python 3.9 support ==== python-msgpack ==== Version update (1.0.0 -> 1.0.2) - update to 1.0.2: * Python 3.9 support * bugfixes ==== python-requests ==== Version update (2.25.0 -> 2.25.1) - update to 2.25.1: - Requests now treats `application/json` as `utf8` by default. Resolving inconsistencies between `r.text` and `r.json` output. (#5673) ==== snapper ==== Version update (0.8.14 -> 0.8.15) Subpackages: libsnapper5 - added option to abbreviate columns in table (see gh#openSUSE/snapper#268) - version 0.8.15 - in systemd-helper continue with other configs if one config is broken (gh#openSUSE/snapper#495) - fixed compilation with --disable-btrfs (gh#openSUSE/snapper#505) ==== systemd ==== Version update (246.7 -> 246.9) Subpackages: libsystemd0 libudev1 systemd-logger systemd-sysvinit udev - Import commit 520e53b6d85087b05892ee637ae93f1b269e7e52 (merge of v246.9) For a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/2401461e5f0e32922823d954c56106f… - Import commit 2401461e5f0e32922823d954c56106f96344070e 6131548b0f udev: link_update() should fail if the entry in symlink dir couldn't have been created f6cb8c7d79 udev: make algorithm that selects highest priority devlink less susceptible to race conditions (bsc#1084748) fc64e47291 basic/stat-util: make mtime check stricter and use entire timestamp ae91d45d3d test/sys-script.py: add missing DEVNAME entries to uevents 09e3473a7a test/udev_test.pl: add "expected good" count fc89379b5b test/udev-test.pl: suppress umount error message at startup d9e114f10d test/sd-script.py: new helper script for udev testing f2672eae66 test/udev-test.pl: generator for large list of block devices 42b68e43e2 test/udev-test.pl: add repeat count eec8ec375a tests/udev-test.pl: add multiple device test 73b8f3cf93 test/udev-test.pl: count "good" results ee04d70bb6 test/udev-test.pl: merge import parent tests into one 03942c8fbc test/udev-test.pl: merge "space and var with space" tests ec95546189 test/udev-test.pl: remove bogus rules from magic subsys test f704429217 test/udev-test.pl: Make some tests a little harder ce1a877dc0 test/udev-test.pl: last_rule is unsupported 913c72ff2d test/udev-test.pl: fix wrong test descriptions eeb25a1be6 test/udev-test.pl: allow checking multiple symlinks 00ab4292da test/udev-test.pl: test correctness of symlink targets 5b71ee2911 test/udev-test.pl: use computed devnode name 2e04bb9ae8 test/udev-test.pl: allow concurrent additions and removals 8816dd593c test/udev-test.pl: create rules only once 214418632d test/udev-test.pl: allow multiple devices per test 1eb6b23f27 udev-test: do not rely on "mail" group being defined 4a0a4dcf10 udev: Fix sound.target dependency (bsc#1179363) - Enable support for zstd compression systemd-journald will now use zstd for compressing large fields in journal files. systemd-coredump will also use this algorithm to compress coredump files. Please note that systemd older than v246 won't be able to read new journal files as zstd algorithm is not supported by these versions. This incompatible change was actually not the only one introduced by v246 since the hash tables in journal files have been hardened against hash collisions too in an incompatible way with older versions. ==== yomi-formula ==== - Run spec-cleaner - Add temporary and explicit dependency to libudev1

1 0

New MicroOS snapshot 20201221 released!
by Richard Brown 22 Dec '20

22 Dec '20

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: audit audit-secondary containers-systemd (0.0+git20201208.1b4413e -> 0.0+git20201220.ed8a6b2) glib2 (2.66.3 -> 2.66.4) glibc gmp libcap (2.43 -> 2.44) libqt5-qtwebengine ncurses (6.2.20201031 -> 6.2.20201205) poppler (20.12.0 -> 20.12.1) poppler-qt5 (20.12.0 -> 20.12.1) qalculate (3.14.0 -> 3.15.0) readline xen (4.14.0_12 -> 4.14.1_02) === Details === ==== audit ==== Subpackages: libaudit1 libauparse0 - Enable Aarch64 processor support. (bsc#1179515 bsc#1179806) ==== audit-secondary ==== Subpackages: audit python3-audit - Enable Aarch64 processor support. (bsc#1179515 bsc#1179806) ==== containers-systemd ==== Version update (0.0+git20201208.1b4413e -> 0.0+git20201220.ed8a6b2) - Update to version 0.0+git20201220.ed8a6b2: * Add default for FETCHMAILRC - Update to version 0.0+git20201220.0fae7ba: * Add service for fetchmail container - Update to version 0.0+git20201220.69a11d7: * Document spamassassin support * Add support for a spamassassin container - LDAP_MAIL_READER_PASSWORD was renamed to LDAP_BIND_PASSWORD - Update to version 0.0+git20201217.a84253d: * Allow to overwrite TLS key location ==== glib2 ==== Version update (2.66.3 -> 2.66.4) Subpackages: glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 - Update to version 2.66.4: + Fix some issues in parsing floating point seconds in `GDateTime` + Fix some issues in handling invalid UTF-8 when parsing for `GDate` + Bugs fixed: glgo#GNOME/GLib#2264, glgo#GNOME/GLib!1774, glgo#GNOME/GLib!1790, glgo#GNOME/GLib!1793, glgo#GNOME/GLib!1799, glgo#GNOME/GLib!1805. ==== glibc ==== Subpackages: glibc-locale glibc-locale-base - aarch64-static-pie.patch: fix static PIE start code for BTI (bsc#1179450, BZ #27068) - iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224) - iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop bounds (CVE-2020-29562, bsc#1179694, BZ #26923) - printf-long-double-non-normal.patch: x86: Harden printf against non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649) - get-nprocs-cpu-online-parsing.patch: Fix parsing of /sys/devices/system/cpu/online (bsc#1180038, BZ #25859) ==== gmp ==== - Add gmp-6.2.1-arm64-invert_limb.patch [bsc#1179751] ==== libcap ==== Version update (2.43 -> 2.44) - update to 2.44: Generally, this is a release to help package builders: no functional change to any of the generated code just documentation and make related fixes. ==== libqt5-qtwebengine ==== - Fix build with ICU 68: * Added icu-68.patch * Added icu-68-2.patch ==== ncurses ==== Version update (6.2.20201031 -> 6.2.20201205) Subpackages: libncurses6 ncurses-utils terminfo-base - Add ncurses patch 20201205 + amend build-fixes for gnat 10 to work with certain systems lacking gprbuild (cf: 20200627). + eliminate an additional strlen and wsclen. + eliminate an unnecessary strlen in waddnstr() (suggested by Benjamin Abendroth). + modify inopts manpage, separating the items for nodelay and notimeout (patch by Benno Schulenberg). + correct mlterm3 kf1-kf4 (Debian #975322) -TD + add flash to mlterm3 -TD - Add ncurses patch 20201128 + add Smulx to alacritty (Christian Duerr). + add rep to PuTTY -TD + add putty+keypad -TD + add another fflush(stdout) in _nc_flush() to handle time-delays in the middle of strings such as flash when the application uses low-level calls rather than curses (cf: 20161217). + modify configure check for c89/c99 aliases of clang to use its - std option instead, because some platforms, in particular macOS, do not provide workable c89/c99 aliases. - Add ncurses patch 20201121 + fix some compiler-warnings in experimental Windows-10 driver. + add the definitions needed in recent configure-check for clang (report by Steven Pitman). - Add ncurses patch 20201114 + fix some compiler-warnings in experimental Windows-10 driver. + modify a check for parameters in terminfo capabilities to handle the special case where short extended capability strings were not converted from terminfo to termcap format. + modify CF_MIXEDCASE_FILENAMES macro, adding darwin as special case when cross-compiling (report by Eli Rykoff). - Add ncurses patch 20201107 + update kitty+common -TD + add putty+screen and putty-screen (suggested by Alexandre Montaron). + explain in ncurses.3x that functions in the tinfo library do not rely upon wide-characters (prompted by discussion with Reuben Thomas). ==== poppler ==== Version update (20.12.0 -> 20.12.1) Subpackages: libpoppler-cpp0 libpoppler-glib8 libpoppler105 - Update to version 20.12.1: + core: - PSOutputDev: fixing regression in the rasterization code. - Add missing profile copy operation in GfxICCBasedColorSpace::copy() - Fix issue in broken files. + build system: Use modern CMake linking for Qt and boost. ==== poppler-qt5 ==== Version update (20.12.0 -> 20.12.1) - Update to version 20.12.1: + core: - PSOutputDev: fixing regression in the rasterization code. - Add missing profile copy operation in GfxICCBasedColorSpace::copy() - Fix issue in broken files. + build system: Use modern CMake linking for Qt and boost. ==== qalculate ==== Version update (3.14.0 -> 3.15.0) - Update to 3.15.0: * Automatic and dual approximation and fractions mode in qalc and Gnome shell search provider * Do not ask before overwriting temporary variables in qalc * Add keyboard shortcuts for approximation (Ctrl+E), fraction mode (Ctrl+F), and save variable (Ctrl+R) in qalc * Add "precalculate expression" argument (default false) to save() function (this also changes the behaviour of ":=") * Support multiple equivalent custom digits, separated by semicolon (e.g. "0;aA1;bB2;cC3"), and phoneword digit set in base() function * Always place unit with prefix first (fixes kWh) * Fix local time zone on Windows * Fix matrix/vector multiplication with approximate matrix/vector variable * Fix parsing of expression with multiple degree signs * Minor bug fixes and feature improvements ==== readline ==== - get rid of /lib hack and install readline in /usr. Bash is already there anyways (boo#1029961) - remove deprecated %install_info ==== xen ==== Version update (4.14.0_12 -> 4.14.1_02) - Update to Xen 4.14.1 bug fix release (bsc#1027519) xen-4.14.1-testing-src.tar.bz2 Contains the following recent security fixes bsc#1179516 XSA-359 - CVE-2020-29571 bsc#1179514 XSA-358 - CVE-2020-29570 bsc#1179513 XSA-356 - CVE-2020-29567 bsc#1178963 XSA-355 - CVE-2020-29040 bsc#1178591 XSA-351 - CVE-2020-28368 bsc#1179506 XSA-348 - CVE-2020-29566 bsc#1179502 XSA-325 - CVE-2020-29483 bsc#1179501 XSA-324 - CVE-2020-29484 bsc#1179498 XSA-322 - CVE-2020-29481 bsc#1179496 XSA-115 - CVE-2020-29480 - Dropped patches contained in new tarball 5f1a9916-x86-S3-put-data-sregs-into-known-state.patch 5f21b9fd-x86-cpuid-APIC-bit-clearing.patch 5f479d9e-x86-begin-to-support-MSR_ARCH_CAPS.patch 5f4cf06e-x86-Dom0-expose-MSR_ARCH_CAPS.patch 5f4cf96a-x86-PV-fix-SEGBASE_GS_USER_SEL.patch 5f560c42-x86-PV-64bit-segbase-consistency.patch 5f560c42-x86-PV-rewrite-segment-ctxt-switch.patch 5f5b6b7a-hypfs-fix-custom-param-writes.patch 5f607915-x86-HVM-more-consistent-IO-completion.patch 5f6a002d-x86-PV-handle-MSR_MISC_ENABLE-correctly.patch 5f6a0049-memory-dont-skip-RCU-unlock-in-acquire_resource.patch 5f6a0067-x86-vPT-fix-race-when-migrating-timers.patch 5f6a008e-x86-MSI-drop-read_msi_msg.patch 5f6a00aa-x86-MSI-X-restrict-reading-of-PBA-bases.patch 5f6a00c4-evtchn-relax-port_is_valid.patch 5f6a00df-x86-PV-avoid-double-exception-injection.patch 5f6a00f4-evtchn-add-missing-barriers.patch 5f6a0111-evtchn-x86-enforce-correct-upper-limit.patch 5f6a013f-evtchn_reset-shouldnt-succeed-with.patch 5f6a0160-evtchn-IRQ-safe-per-channel-lock.patch 5f6a0178-evtchn-address-races-with-evtchn_reset.patch 5f6a01a4-evtchn-preempt-in-evtchn_destroy.patch 5f6a01c6-evtchn-preempt-in-evtchn_reset.patch 5f6cfb5b-x86-PV-dont-GP-for-SYSENTER-with-NT-set.patch 5f6cfb5b-x86-PV-dont-clobber-NT-on-return-to-guest.patch 5f71a21e-x86-S3-fix-shadow-stack-resume.patch 5f76ca65-evtchn-Flask-prealloc-for-send.patch 5f76caaf-evtchn-FIFO-use-stable-fields.patch 5f897c25-x86-traps-fix-read_registers-for-DF.patch 5f897c7b-x86-smpboot-restrict-memguard_guard_stack.patch 5f8ed5d3-x86-mm-map_pages_to_xen-single-exit-path.patch 5f8ed5eb-x86-mm-modify_xen_mappings-one-exit-path.patch 5f8ed603-x86-mm-prevent-races-in-mapping-updates.patch 5f8ed635-IOMMU-suppress-iommu_dont_flush_iotlb-when.patch 5f8ed64c-IOMMU-hold-page-ref-until-TLB-flush.patch 5f8ed682-AMD-IOMMU-convert-amd_iommu_pte.patch 5f8ed69c-AMD-IOMMU-update-live-PTEs-atomically.patch 5f8ed6b0-AMD-IOMMU-suitably-order-DTE-mods.patch xsa286-1.patch xsa286-2.patch xsa286-3.patch xsa286-4.patch xsa286-5.patch xsa286-6.patch xsa351-1.patch xsa351-2.patch xsa351-3.patch xsa355.patch - bsc#1178736 - allow restart of xenwatchdogd, enable tuning of keep-alive interval and timeout options via XENWATCHDOGD_ARGS= add xenwatchdogd-options.patch add xenwatchdogd-restart.patch - bsc#1177112 - Fix libxc.sr.superpage.patch The receiving side may punch holes incorrectly into optimistically allocated superpages. Also reduce overhead in bitmap handling. add libxc-bitmap-50a5215f30e964a6f16165ab57925ca39f31a849.patch add libxc-bitmap-long.patch add libxc-bitmap-longs.patch - boo#1029961 - Move files in xen-tools-domU to /usr/bin from /bin xen-destdir.patch Drop tmp_build.patch - bsc#1176782 - L3: xl dump-core shows missing nr_pages during core. If maxmem and current are the same the issue doesn't happen 5fca3b32-tools-libs-ctrl-fix-dumping-of-ballooned-guest.patch - bsc#1178963 - VUL-0: xen: stack corruption from XSA-346 change (XSA-355) xsa355.patch - Fix build error with libxl.fix-libacpi-dependency.patch - Enhance libxc.migrate_tracking.patch Hide SUSEINFO messages from pause/unpause/resume from xl command. They are intended for libvirt logging, but lacked info about execution context. Remove extra logging about dirty pages in each iteration, the number of transferred pages + protocol overhead is already reported elsewhere. - Remove libxl.libxl__domain_pvcontrol.patch It is already part of 4.14.0-rc1

1 0

New Kubic snapshot 20201221 released!
by Richard Brown 22 Dec '20

22 Dec '20

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: audit audit-secondary containers-systemd (0.0+git20201208.1b4413e -> 0.0+git20201220.ed8a6b2) glib2 (2.66.3 -> 2.66.4) glibc gmp libcap (2.43 -> 2.44) ncurses (6.2.20201031 -> 6.2.20201205) readline xen (4.14.0_12 -> 4.14.1_02) === Details === ==== audit ==== Subpackages: libaudit1 libauparse0 - Enable Aarch64 processor support. (bsc#1179515 bsc#1179806) ==== audit-secondary ==== Subpackages: audit python3-audit - Enable Aarch64 processor support. (bsc#1179515 bsc#1179806) ==== containers-systemd ==== Version update (0.0+git20201208.1b4413e -> 0.0+git20201220.ed8a6b2) - Update to version 0.0+git20201220.ed8a6b2: * Add default for FETCHMAILRC - Update to version 0.0+git20201220.0fae7ba: * Add service for fetchmail container - Update to version 0.0+git20201220.69a11d7: * Document spamassassin support * Add support for a spamassassin container - LDAP_MAIL_READER_PASSWORD was renamed to LDAP_BIND_PASSWORD - Update to version 0.0+git20201217.a84253d: * Allow to overwrite TLS key location ==== glib2 ==== Version update (2.66.3 -> 2.66.4) Subpackages: glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 - Update to version 2.66.4: + Fix some issues in parsing floating point seconds in `GDateTime` + Fix some issues in handling invalid UTF-8 when parsing for `GDate` + Bugs fixed: glgo#GNOME/GLib#2264, glgo#GNOME/GLib!1774, glgo#GNOME/GLib!1790, glgo#GNOME/GLib!1793, glgo#GNOME/GLib!1799, glgo#GNOME/GLib!1805. ==== glibc ==== Subpackages: glibc-locale glibc-locale-base - aarch64-static-pie.patch: fix static PIE start code for BTI (bsc#1179450, BZ #27068) - iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224) - iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop bounds (CVE-2020-29562, bsc#1179694, BZ #26923) - printf-long-double-non-normal.patch: x86: Harden printf against non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649) - get-nprocs-cpu-online-parsing.patch: Fix parsing of /sys/devices/system/cpu/online (bsc#1180038, BZ #25859) ==== gmp ==== - Add gmp-6.2.1-arm64-invert_limb.patch [bsc#1179751] ==== libcap ==== Version update (2.43 -> 2.44) - update to 2.44: Generally, this is a release to help package builders: no functional change to any of the generated code just documentation and make related fixes. ==== ncurses ==== Version update (6.2.20201031 -> 6.2.20201205) Subpackages: libncurses6 ncurses-utils terminfo-base - Add ncurses patch 20201205 + amend build-fixes for gnat 10 to work with certain systems lacking gprbuild (cf: 20200627). + eliminate an additional strlen and wsclen. + eliminate an unnecessary strlen in waddnstr() (suggested by Benjamin Abendroth). + modify inopts manpage, separating the items for nodelay and notimeout (patch by Benno Schulenberg). + correct mlterm3 kf1-kf4 (Debian #975322) -TD + add flash to mlterm3 -TD - Add ncurses patch 20201128 + add Smulx to alacritty (Christian Duerr). + add rep to PuTTY -TD + add putty+keypad -TD + add another fflush(stdout) in _nc_flush() to handle time-delays in the middle of strings such as flash when the application uses low-level calls rather than curses (cf: 20161217). + modify configure check for c89/c99 aliases of clang to use its - std option instead, because some platforms, in particular macOS, do not provide workable c89/c99 aliases. - Add ncurses patch 20201121 + fix some compiler-warnings in experimental Windows-10 driver. + add the definitions needed in recent configure-check for clang (report by Steven Pitman). - Add ncurses patch 20201114 + fix some compiler-warnings in experimental Windows-10 driver. + modify a check for parameters in terminfo capabilities to handle the special case where short extended capability strings were not converted from terminfo to termcap format. + modify CF_MIXEDCASE_FILENAMES macro, adding darwin as special case when cross-compiling (report by Eli Rykoff). - Add ncurses patch 20201107 + update kitty+common -TD + add putty+screen and putty-screen (suggested by Alexandre Montaron). + explain in ncurses.3x that functions in the tinfo library do not rely upon wide-characters (prompted by discussion with Reuben Thomas). ==== readline ==== - get rid of /lib hack and install readline in /usr. Bash is already there anyways (boo#1029961) - remove deprecated %install_info ==== xen ==== Version update (4.14.0_12 -> 4.14.1_02) - Update to Xen 4.14.1 bug fix release (bsc#1027519) xen-4.14.1-testing-src.tar.bz2 Contains the following recent security fixes bsc#1179516 XSA-359 - CVE-2020-29571 bsc#1179514 XSA-358 - CVE-2020-29570 bsc#1179513 XSA-356 - CVE-2020-29567 bsc#1178963 XSA-355 - CVE-2020-29040 bsc#1178591 XSA-351 - CVE-2020-28368 bsc#1179506 XSA-348 - CVE-2020-29566 bsc#1179502 XSA-325 - CVE-2020-29483 bsc#1179501 XSA-324 - CVE-2020-29484 bsc#1179498 XSA-322 - CVE-2020-29481 bsc#1179496 XSA-115 - CVE-2020-29480 - Dropped patches contained in new tarball 5f1a9916-x86-S3-put-data-sregs-into-known-state.patch 5f21b9fd-x86-cpuid-APIC-bit-clearing.patch 5f479d9e-x86-begin-to-support-MSR_ARCH_CAPS.patch 5f4cf06e-x86-Dom0-expose-MSR_ARCH_CAPS.patch 5f4cf96a-x86-PV-fix-SEGBASE_GS_USER_SEL.patch 5f560c42-x86-PV-64bit-segbase-consistency.patch 5f560c42-x86-PV-rewrite-segment-ctxt-switch.patch 5f5b6b7a-hypfs-fix-custom-param-writes.patch 5f607915-x86-HVM-more-consistent-IO-completion.patch 5f6a002d-x86-PV-handle-MSR_MISC_ENABLE-correctly.patch 5f6a0049-memory-dont-skip-RCU-unlock-in-acquire_resource.patch 5f6a0067-x86-vPT-fix-race-when-migrating-timers.patch 5f6a008e-x86-MSI-drop-read_msi_msg.patch 5f6a00aa-x86-MSI-X-restrict-reading-of-PBA-bases.patch 5f6a00c4-evtchn-relax-port_is_valid.patch 5f6a00df-x86-PV-avoid-double-exception-injection.patch 5f6a00f4-evtchn-add-missing-barriers.patch 5f6a0111-evtchn-x86-enforce-correct-upper-limit.patch 5f6a013f-evtchn_reset-shouldnt-succeed-with.patch 5f6a0160-evtchn-IRQ-safe-per-channel-lock.patch 5f6a0178-evtchn-address-races-with-evtchn_reset.patch 5f6a01a4-evtchn-preempt-in-evtchn_destroy.patch 5f6a01c6-evtchn-preempt-in-evtchn_reset.patch 5f6cfb5b-x86-PV-dont-GP-for-SYSENTER-with-NT-set.patch 5f6cfb5b-x86-PV-dont-clobber-NT-on-return-to-guest.patch 5f71a21e-x86-S3-fix-shadow-stack-resume.patch 5f76ca65-evtchn-Flask-prealloc-for-send.patch 5f76caaf-evtchn-FIFO-use-stable-fields.patch 5f897c25-x86-traps-fix-read_registers-for-DF.patch 5f897c7b-x86-smpboot-restrict-memguard_guard_stack.patch 5f8ed5d3-x86-mm-map_pages_to_xen-single-exit-path.patch 5f8ed5eb-x86-mm-modify_xen_mappings-one-exit-path.patch 5f8ed603-x86-mm-prevent-races-in-mapping-updates.patch 5f8ed635-IOMMU-suppress-iommu_dont_flush_iotlb-when.patch 5f8ed64c-IOMMU-hold-page-ref-until-TLB-flush.patch 5f8ed682-AMD-IOMMU-convert-amd_iommu_pte.patch 5f8ed69c-AMD-IOMMU-update-live-PTEs-atomically.patch 5f8ed6b0-AMD-IOMMU-suitably-order-DTE-mods.patch xsa286-1.patch xsa286-2.patch xsa286-3.patch xsa286-4.patch xsa286-5.patch xsa286-6.patch xsa351-1.patch xsa351-2.patch xsa351-3.patch xsa355.patch - bsc#1178736 - allow restart of xenwatchdogd, enable tuning of keep-alive interval and timeout options via XENWATCHDOGD_ARGS= add xenwatchdogd-options.patch add xenwatchdogd-restart.patch - bsc#1177112 - Fix libxc.sr.superpage.patch The receiving side may punch holes incorrectly into optimistically allocated superpages. Also reduce overhead in bitmap handling. add libxc-bitmap-50a5215f30e964a6f16165ab57925ca39f31a849.patch add libxc-bitmap-long.patch add libxc-bitmap-longs.patch - boo#1029961 - Move files in xen-tools-domU to /usr/bin from /bin xen-destdir.patch Drop tmp_build.patch - bsc#1176782 - L3: xl dump-core shows missing nr_pages during core. If maxmem and current are the same the issue doesn't happen 5fca3b32-tools-libs-ctrl-fix-dumping-of-ballooned-guest.patch - bsc#1178963 - VUL-0: xen: stack corruption from XSA-346 change (XSA-355) xsa355.patch - Fix build error with libxl.fix-libacpi-dependency.patch - Enhance libxc.migrate_tracking.patch Hide SUSEINFO messages from pause/unpause/resume from xl command. They are intended for libvirt logging, but lacked info about execution context. Remove extra logging about dirty pages in each iteration, the number of transferred pages + protocol overhead is already reported elsewhere. - Remove libxl.libxl__domain_pvcontrol.patch It is already part of 4.14.0-rc1

1 0

New MicroOS snapshot 20201218 released!
by Richard Brown 21 Dec '20

21 Dec '20

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: baloo5-widgets (20.08.3 -> 20.12.0) busybox dolphin (20.08.3 -> 20.12.0) fwupd kaccounts-integration (20.08.3 -> 20.12.0) kate (20.08.3 -> 20.12.0) kde-print-manager (20.08.3 -> 20.12.0) kdeconnect-kde (20.08.3 -> 20.12.0) kdialog (20.08.3 -> 20.12.0) kio-extras5 (20.08.3 -> 20.12.0) konsole (20.08.3 -> 20.12.0) kwalletmanager5 (20.08.3 -> 20.12.0) libopenmpt (0.5.0 -> 0.5.4) multipath-tools (0.8.4+192+suse.1bc10ad -> 0.8.5+12+suse.3b0e9ca) net-snmp numactl pcre2 (10.35 -> 10.36) webkit2gtk3 (2.30.3 -> 2.30.4) yast2 (4.3.45 -> 4.3.46) === Details === ==== baloo5-widgets ==== Version update (20.08.3 -> 20.12.0) - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * If include is define in .h remove it if it's defined in .cpp too (scripted) ==== busybox ==== - Don't require nogroup for adduser command, as this can lead to a dependency cycle with sysusers-tools. ==== dolphin ==== Version update (20.08.3 -> 20.12.0) Subpackages: dolphin-part libdolphinvcs5 - Add patch to fix appearance on the first start (kde#429447): * 0001-Update-cached-viewContainer-geometry-every-time-they.patch - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - Changes since 20.11.90: * Fix PlacesItemModelTest, 2nd try * Re-allow to paste files via context menu (kde#429762) - Update to 20.11.90 * New feature release - Too many changes since 20.11.80, only listing bugfixes: * Allow the openURLJob to run executables (kde#429603) * Places panel: highlight place only when it is displayed (kde#156678) * Select last visited folder when going up/back (kde#429097) * Re-allow icons that are not theme icon (kde#429113) - Update to 20.11.80 * New feature release - Too many changes to list here. ==== fwupd ==== Subpackages: libfwupd2 libfwupdplugin1 typelib-1_0-Fwupd-2_0 - Add fwupd-bsc1179790-disable-hintsystem.patch to remove Block.HintSystem from ESP filtering (bsc#1179790) ==== kaccounts-integration ==== Version update (20.08.3 -> 20.12.0) - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Too many changes to list here. ==== kate ==== Version update (20.08.3 -> 20.12.0) Subpackages: kate-plugins - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Too many changes since 20.08.3, only listing bugfixes: * lspclient: also secretly accept LocationLink in some replies (kde#427270) * implement optional limit for number of tabs and LRU replacement (kde#426520) ==== kde-print-manager ==== Version update (20.08.3 -> 20.12.0) - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Too many changes since 20.08.3, only listing bugfixes: * [applet] Simplify printer list item subtitle (kde#425534) ==== kdeconnect-kde ==== Version update (20.08.3 -> 20.12.0) - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - Changes since 20.11.90: * [SMS App] Disable sending attachments until we have Android support * Fix build with bluetooth enabled - Update to 20.11.90 * New feature release - Changes since 20.11.80: * Add a verification key that's displayed when pairing - Update to 20.11.80 * New feature release - Too many changes to list here. ==== kdialog ==== Version update (20.08.3 -> 20.12.0) - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Fix --menu, --checklist, and --radiolist usage instructions (kde#427415) * make \n work with (img)inputbox and (new)password (kde#352981) * Use camelcase (scripted) ==== kio-extras5 ==== Version update (20.08.3 -> 20.12.0) Subpackages: libkioarchive5 - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - Changes since 20.11.80: * Add PowerPoint slideshow mime types - Update to 20.11.80 * New feature release - Too many changes since 20.08.3, only listing bugfixes: * [DjvuThumbnailer] Replace open coded ddjvu invocation with QProcess (kde#420074) * Remove Mimetype overlay icon blending (kde#425789) ==== konsole ==== Version update (20.08.3 -> 20.12.0) Subpackages: konsole-part - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - Changes since 20.11.90: * Fix bold character color paint (kde#405345) * Require cmake 3.13 * SessionController: don't delete actions removed from QMenu manually * Revert "Uses SessionDisplayConnection to connect sessions and displays." - Update to 20.11.90 * New feature release - Changes since 20.11.80: * SessionController: iterate over a const container * SessionContoller: fix crash when closing session from Konsole KPart (kde#429538) - Update to 20.11.80 * New feature release - Too many changes to list here. ==== kwalletmanager5 ==== Version update (20.08.3 -> 20.12.0) - Update to 20.12.0 * New feature release * For more details please see: * https://kde.org/announcements/releases/2020-12-apps-update - No code change since 20.11.90 - Update to 20.11.90 * New feature release - No code change since 20.11.80 - Update to 20.11.80 * New feature release - Changes since 20.08.3: * Use systemsettings5 for Exec line * If include is define in .h remove it if it's defined in .cpp too (scripted) * Port away from deprecated KToolInvocation::startServiceByDesktopName * Remove unused include * align naming with elsewhere in the stack * [KWalletEditor] Use new kwallet methods to populate the view list(s) ==== libopenmpt ==== Version update (0.5.0 -> 0.5.4) - Update to 0.5.4: * AMS: An upper bound for uncompressed sample size is now established to avoid memory exhaustion from malformed files. * DMF: Support early format beta versions (in particular versions 1-4). * MED: Also use octave wrapping in 8-channel mode for MMD0/MMD1 modules. * MED: If 8-channel mode is activated, ignore BPM mode. * MED: Emulate tempo commands F01 and F02 quirk. * MED: Tempo commands below 32 BPM were interpreted as tempo slides. * IMF: Instrument sample mapping was off by one octave, notable in the guitar part of Astaris by Karsten Koch. Changes in 0.5.3: * [Sec] Possible hang if a MED file claimed to contain 256 songs. * [Bug] libopenmpt: openmpt::is_extension_supported2() exported symbol was missing (C++). * [Bug] openmpt::module::set_position_seconds sometimes behaved as if the song end was reached when seeking into a pattern loop and in some other corner cases. * Increase threshold for ignoring panning commands from 820 to 830. * Subsong names now fall back to the first pattern?s name if empty. * MO3: Avoid certain ModPlug hacks from being fixed up twice, which could lead to e.g. very narrow pan swing range for old OpenMPT IT files saved with a recent MO3 encoder version. * MO3: Some files with corrupted envelope data could be rejected completely (normally libopenmpt should fix up the envelope data). * MO3: Song metadata didn?t correctly identify MPTM as source format (it appeared as IT instead). * STM: Change tempo computation to behave like Scream Tracker 2.3 instead of Scream Tracker 2.2, as the playback frequencies we use for sample playback are closer to those of Scream Tracker 2.3. * PLM: Percentage offset (Mxx) was slightly off. * WOW: Fix loading of several files and harden WOW detection. Changes in 0.5.2: * PP20: The first few bytes of some files were not decompressed properly, making some files unplayable (depending on the original format). Changes in 0.5.1: * [Bug] libopenmpt/libopenmpt.h failed to compile with LIBOPENMPT_NO_DEPRECATE defined. * MPTM: Qxy now retriggers OPL notes if new compatibility flag is set in file. * MPTM: Bring back old OPL note end-of-envelope behaviour for files made with OpenMPT 1.28. * IT: Global volume slides with both nibbles set preferred the ?slide up? nibble over the ?slide down? nibble in old OpenMPT versions, unlike other slides. Such old files are now imported correctly again. * IT: Fixed an edge case where, if the filter hit full cutoff / no resonance on the first tick of a row where a new delayed note would be triggered, the filter would be disabled even though it should stay active. Fixes trace.it by maddie. * OXM: Some sample loops were not imported correctly. * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT 1.23.05.00. The arpeggios in Binary World by Dakota now play correctly again. * S3M: Support old-style sample pre-amp value in very early S3M files. * S3M: Only force-enable fast slides for files ST 3.00. Previously, any S3M file made with an ST3 version older than 3.20 enabled them. * S3M: Only apply volume and middle-C speed on instrument change if the new sample slot has sample data. * MOD: Fix an infinite loop in GamerMan by MrGamer by playing non-ProTracker MODs more like FT2 would. * M15: Improve tracker detection heuristics to never assume SoundTracker 2.0 if there is a huge number of Dxx commands, as that is a definite hint that they should be treated as volume slides. Fixes Monty On The Run by Master Blaster. * MO3: Support OPL patches in MO3 files created from MPTM and S3M * DBM: If a global pattern command would be lost because both effect commands in a cell would have to go into the regular effect column (e.g. a speed and a tempo command), the lost command is now attempted to be written into a different cell on the same row. Fixes ?Party-Question V? by grogon. ==== multipath-tools ==== Version update (0.8.4+192+suse.1bc10ad -> 0.8.5+12+suse.3b0e9ca) Subpackages: kpartx libmpath0 - Update to versioni 0.8.5+12+suse.3b0e9ca * libmultipath: force map reload if udev incomplete (bsc#1178662, bsc#1172157, bsc#1175454, bsc#1176406) - Fixes from upstream 0.8.5 * multipath-tools: add MacroSAN arrays to hwtable * libmultipath: Allow discovery of USB devices (add configuration option "allow_usb_devices") - Remove compatibility code for SLE <= 12-SP2 from spec file ==== net-snmp ==== Subpackages: libsnmp30 snmp-mibs - Update the tmpfiles.d/ drop-in file - remove legacy directory Fixes boo#1137761 and boo#1176997 ==== numactl ==== - Enable LTO (boo#1133098) as it works now. ==== pcre2 ==== Version update (10.35 -> 10.36) Subpackages: libpcre2-16-0 libpcre2-8-0 - pcre2 10.36: * add GNU grep's -m (aka --max-count) option to pcre2grep * unify the handling of substitution strings for both -O and callouts in pcre2grep, with the addition of $x{...} and $o{...} to allow for characters whose code points are greater than 255 in Unicode mode ==== webkit2gtk3 ==== Version update (2.30.3 -> 2.30.4) Subpackages: libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 webkit2gtk-4_0-injected-bundles - Update to version 2.30.4: + Fix text data sent with WebSockets when using libsoup < 2.68. + Fix the rendering on Raspberry Pi 3 using the proprietary video driver. + Fix clipping of descedant layers of a mask layer. + Fix the build with ICU 68.1. - Drop upstream merged patch: + 0001-ICU-68.1-no-longer-exposes-FALSE-and-TRUE-macros-by-.patch ==== yast2 ==== Version update (4.3.45 -> 4.3.46) - Removed SCR agent .etc.inittab which is obsolete because SysVinit is no longer supported (bsc#1175494). - 4.3.46

1 0

New Kubic snapshot 20201218 released!
by Richard Brown 21 Dec '20

21 Dec '20

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: busybox kubernetes1.20 multipath-tools (0.8.4+192+suse.1bc10ad -> 0.8.5+12+suse.3b0e9ca) numactl pcre2 (10.35 -> 10.36) yast2 (4.3.45 -> 4.3.46) === Details === ==== busybox ==== - Don't require nogroup for adduser command, as this can lead to a dependency cycle with sysusers-tools. ==== kubernetes1.20 ==== Subpackages: kubernetes1.20-client kubernetes1.20-client-common kubernetes1.20-kubeadm kubernetes1.20-kubelet kubernetes1.20-kubelet-common - Add obsoletes to -client-common to facilitate smooth upgrades from older versions ==== multipath-tools ==== Version update (0.8.4+192+suse.1bc10ad -> 0.8.5+12+suse.3b0e9ca) Subpackages: kpartx libmpath0 - Update to versioni 0.8.5+12+suse.3b0e9ca * libmultipath: force map reload if udev incomplete (bsc#1178662, bsc#1172157, bsc#1175454, bsc#1176406) - Fixes from upstream 0.8.5 * multipath-tools: add MacroSAN arrays to hwtable * libmultipath: Allow discovery of USB devices (add configuration option "allow_usb_devices") - Remove compatibility code for SLE <= 12-SP2 from spec file ==== numactl ==== - Enable LTO (boo#1133098) as it works now. ==== pcre2 ==== Version update (10.35 -> 10.36) - pcre2 10.36: * add GNU grep's -m (aka --max-count) option to pcre2grep * unify the handling of substitution strings for both -O and callouts in pcre2grep, with the addition of $x{...} and $o{...} to allow for characters whose code points are greater than 255 in Unicode mode ==== yast2 ==== Version update (4.3.45 -> 4.3.46) - Removed SCR agent .etc.inittab which is obsolete because SysVinit is no longer supported (bsc#1175494). - 4.3.46

1 0

New MicroOS snapshot 20201216 released!
by Richard Brown 17 Dec '20

17 Dec '20

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: installation-images-MicroOS (16.27 -> 16.28) krb5 (1.18.2 -> 1.18.3) openssl-1_1 python-dbus-python python-importlib-metadata (2.0.0 -> 3.1.1) python-notify2 python-pyOpenSSL (19.1.0 -> 20.0.0) python-setuptools python-urllib3 (1.25.10 -> 1.26.2) system-users systemd sysuser-tools === Details === ==== installation-images-MicroOS ==== Version update (16.27 -> 16.28) - merge gh#openSUSE/installation-images#440 - add system-group-kvm explicitly - 16.28 ==== krb5 ==== Version update (1.18.2 -> 1.18.3) - Update to 1.18.3 * Fix a denial of service vulnerability when decoding Kerberos protocol messages. * Fix a locking issue with the LMDB KDB module which could cause KDC and kadmind processes to lose access to the database. * Fix an assertion failure when libgssapi_krb5 is repeatedly loaded and unloaded while libkrb5support remains loaded. ==== openssl-1_1 ==== Subpackages: libopenssl1_1 - Use the centralized crypto policy profile (jsc#SLE-15832) * add openssl-1.1.1-system-cipherlist.patch from Fedora ==== python-dbus-python ==== - Support builds with more than one python3 flavor gh#openSUSE/python-rpm-macros#66 - Remove shebang from examples (rpmlint warning, is in common doc) - Clean duplicate python flavor variables for configure - Update the provides/obsoletes tags for old-style dbus-1-$python ==== python-importlib-metadata ==== Version update (2.0.0 -> 3.1.1) - Update to 3.1.1 * no changelog, probably just the merge of 2.1.1 - Update in v2.1.1 * #261: Restored compatibility for package discovery for metadata without version in the name and for legacy eggs. - Update in v3.1.0 * Merge with 2.1.0. - Update in v2.1.0 * #253: When querying for package metadata, the lookup now honors package normalization rules. - Update in v3.0.0 * Require Python 3.6 or later. - Upstream switched to pytest, so do we - Revert last change: The condition for **BuildRequires** does not make any sense, as that would also prevent the install of python36-importlib_resources into the build environment. - Make requirement of importlib_resources only for particular versions of Python (< 3.9). ==== python-notify2 ==== - Fix Requires of dbus-python so that the macros can work out the correct flavor for multiple python3 flavors gh#openSUSE/python-rpm-macros#66 ==== python-pyOpenSSL ==== Version update (19.1.0 -> 20.0.0) - According to gh#pyca/pyopenssl#684 tests must run with TZ=UTC, also skip test_verify_with_time on %ix86. - Update to v20.0.0 - Backward-incompatible changes: - The minimum cryptography version is now 3.2. - Remove deprecated OpenSSL.tsafe module. - Removed deprecated OpenSSL.SSL.Context.set_npn_advertise_callback, OpenSSL.SSL.Context.set_npn_select_callback, and OpenSSL.SSL.Connection.get_next_proto_negotiated. - Drop support for Python 3.4 - Drop support for OpenSSL 1.0.1 and 1.0.2 - Deprecations: - Deprecated OpenSSL.crypto.loads_pkcs7 and OpenSSL.crypto.loads_pkcs12. - Changes: - Added a new optional chain parameter to OpenSSL.crypto.X509StoreContext() where additional untrusted certificates can be specified to help chain building. #948 - Added OpenSSL.crypto.X509Store.load_locations to set trusted certificate file bundles and/or directories for verification. [#943] - Added Context.set_keylog_callback to log key material. #910 - Added OpenSSL.SSL.Connection.get_verified_chain to retrieve the verified certificate chain of the peer. #894. - Make verification callback optional in Context.set_verify. If omitted, OpenSSL?s default verification is used. #933 - Fixed a bug that could truncate or cause a zero-length key error due to a null byte in private key passphrase in OpenSSL.crypto.load_privatekey and OpenSSL.crypto.dump_privatekey. #947 - drop patch fix-compilation-2020.patch: no longer needed - refreshed patch skip-networked-test.patch ==== python-setuptools ==== - Add remove_mock.patch to remove dependency on the external mock package. ==== python-urllib3 ==== Version update (1.25.10 -> 1.26.2) - If you skip_python2 you don't need mock. - We don't need to break Python 2.7 - Add remove_mock.patch to remove dependency on the external mock package (gh#urllib3/urllib3#2108). - Fixed the testsuite and updated dependencies - update to 1.26.2: * Fixed an issue where ``wrap_socket`` and ``CERT_REQUIRED`` wouldn't be imported properly on Python 2.7.8 and earlier (Pull #2052) * Fixed an issue where two ``User-Agent`` headers would be sent if a ``User-Agent`` header key is passed as ``bytes`` (Pull #2047) * Added support for HTTPS proxies contacting HTTPS servers (Pull #1923, Pull #1806) * Deprecated negotiating TLSv1 and TLSv1.1 by default. Users that still wish to use TLS earlier than 1.2 without a deprecation warning should opt-in explicitly by setting ``ssl_version=ssl.PROTOCOL_TLSv1_1`` (Pull #2002) * *Starting in urllib3 v2.0: Connections that receive a ``DeprecationWarning`` will fail** * Deprecated ``Retry`` options ``Retry.DEFAULT_METHOD_WHITELIST``, ``Retry.DEFAULT_REDIRECT_HEADERS_BLACKLIST`` and ``Retry(method_whitelist=...)`` in favor of ``Retry.DEFAULT_ALLOWED_METHODS``, ``Retry.DEFAULT_REMOVE_HEADERS_ON_REDIRECT``, and ``Retry(allowed_methods=...)`` (Pull #2000) **Starting in urllib3 v2.0: Deprecated options will be removed** * Added default ``User-Agent`` header to every request (Pull #1750) * Added ``urllib3.util.SKIP_HEADER`` for skipping ``User-Agent``, ``Accept-Encoding``, and ``Host`` headers from being automatically emitted with requests (Pull #2018) * Collapse ``transfer-encoding: chunked`` request data and framing into the same ``socket.send()`` call (Pull #1906) * Send ``http/1.1`` ALPN identifier with every TLS handshake by default (Pull #1894) * Properly terminate SecureTransport connections when CA verification fails (Pull #1977) * Don't emit an ``SNIMissingWarning`` when passing ``server_hostname=None`` to SecureTransport (Pull #1903) * Disabled requesting TLSv1.2 session tickets as they weren't being used by urllib3 (Pull #1970) * Suppress ``BrokenPipeError`` when writing request body after the server has closed the socket (Pull #1524) * Wrap ``ssl.SSLError`` that can be raised from reading a socket (e.g. "bad MAC") into an ``urllib3.exceptions.SSLError`` (Pull #1939) * Fix retry backoff time parsed from ``Retry-After`` header when given in the HTTP date format. The HTTP date was parsed as the local timezone rather than accounting for the timezone in the HTTP date (typically UTC) (Pull #1932, Pull #1935, Pull #1938, Pull #1949) ==== system-users ==== Subpackages: system-group-hardware system-user-lp system-user-nobody - Remove kvm group from hardware subpackage, since kvm is in its own subpackage (jsc#SLE-11629). ==== systemd ==== Subpackages: libsystemd0 libudev1 systemd-logger systemd-sysvinit udev - Explicitly require group(kvm) by udev: the group used to be created by system-users-hardware, but has been split/moved to qemu/kvm, where it is more logical. The file /usr/lib/udev/rules.d/50-udev-default.rules references this group, thus we should make sure the group exists. Otherwise there are errors in the journal in the form of: /usr/lib/udev/rules.d/50-udev-default.rules:86 Unknown group 'kvm', ignoring ==== sysuser-tools ==== - useradd_or_adduser_dep must be PreReq so ordering makes sure it gets installed before. - suggest shadow where useradd_or_adduser_dep is actually required

1 0

New Kubic snapshot 20201216 released!
by Richard Brown 17 Dec '20

17 Dec '20

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: installation-images-MicroOS (16.27 -> 16.28) krb5 (1.18.2 -> 1.18.3) openssl-1_1 python-dbus-python python-importlib-metadata (2.0.0 -> 3.1.1) python-notify2 python-pyOpenSSL (19.1.0 -> 20.0.0) python-setuptools python-urllib3 (1.25.10 -> 1.26.2) system-users systemd sysuser-tools === Details === ==== installation-images-MicroOS ==== Version update (16.27 -> 16.28) - merge gh#openSUSE/installation-images#440 - add system-group-kvm explicitly - 16.28 ==== krb5 ==== Version update (1.18.2 -> 1.18.3) - Update to 1.18.3 * Fix a denial of service vulnerability when decoding Kerberos protocol messages. * Fix a locking issue with the LMDB KDB module which could cause KDC and kadmind processes to lose access to the database. * Fix an assertion failure when libgssapi_krb5 is repeatedly loaded and unloaded while libkrb5support remains loaded. ==== openssl-1_1 ==== Subpackages: libopenssl1_1 - Use the centralized crypto policy profile (jsc#SLE-15832) * add openssl-1.1.1-system-cipherlist.patch from Fedora ==== python-dbus-python ==== - Support builds with more than one python3 flavor gh#openSUSE/python-rpm-macros#66 - Remove shebang from examples (rpmlint warning, is in common doc) - Clean duplicate python flavor variables for configure - Update the provides/obsoletes tags for old-style dbus-1-$python ==== python-importlib-metadata ==== Version update (2.0.0 -> 3.1.1) - Update to 3.1.1 * no changelog, probably just the merge of 2.1.1 - Update in v2.1.1 * #261: Restored compatibility for package discovery for metadata without version in the name and for legacy eggs. - Update in v3.1.0 * Merge with 2.1.0. - Update in v2.1.0 * #253: When querying for package metadata, the lookup now honors package normalization rules. - Update in v3.0.0 * Require Python 3.6 or later. - Upstream switched to pytest, so do we - Revert last change: The condition for **BuildRequires** does not make any sense, as that would also prevent the install of python36-importlib_resources into the build environment. - Make requirement of importlib_resources only for particular versions of Python (< 3.9). ==== python-notify2 ==== - Fix Requires of dbus-python so that the macros can work out the correct flavor for multiple python3 flavors gh#openSUSE/python-rpm-macros#66 ==== python-pyOpenSSL ==== Version update (19.1.0 -> 20.0.0) - According to gh#pyca/pyopenssl#684 tests must run with TZ=UTC, also skip test_verify_with_time on %ix86. - Update to v20.0.0 - Backward-incompatible changes: - The minimum cryptography version is now 3.2. - Remove deprecated OpenSSL.tsafe module. - Removed deprecated OpenSSL.SSL.Context.set_npn_advertise_callback, OpenSSL.SSL.Context.set_npn_select_callback, and OpenSSL.SSL.Connection.get_next_proto_negotiated. - Drop support for Python 3.4 - Drop support for OpenSSL 1.0.1 and 1.0.2 - Deprecations: - Deprecated OpenSSL.crypto.loads_pkcs7 and OpenSSL.crypto.loads_pkcs12. - Changes: - Added a new optional chain parameter to OpenSSL.crypto.X509StoreContext() where additional untrusted certificates can be specified to help chain building. #948 - Added OpenSSL.crypto.X509Store.load_locations to set trusted certificate file bundles and/or directories for verification. [#943] - Added Context.set_keylog_callback to log key material. #910 - Added OpenSSL.SSL.Connection.get_verified_chain to retrieve the verified certificate chain of the peer. #894. - Make verification callback optional in Context.set_verify. If omitted, OpenSSL?s default verification is used. #933 - Fixed a bug that could truncate or cause a zero-length key error due to a null byte in private key passphrase in OpenSSL.crypto.load_privatekey and OpenSSL.crypto.dump_privatekey. #947 - drop patch fix-compilation-2020.patch: no longer needed - refreshed patch skip-networked-test.patch ==== python-setuptools ==== - Add remove_mock.patch to remove dependency on the external mock package. ==== python-urllib3 ==== Version update (1.25.10 -> 1.26.2) - If you skip_python2 you don't need mock. - We don't need to break Python 2.7 - Add remove_mock.patch to remove dependency on the external mock package (gh#urllib3/urllib3#2108). - Fixed the testsuite and updated dependencies - update to 1.26.2: * Fixed an issue where ``wrap_socket`` and ``CERT_REQUIRED`` wouldn't be imported properly on Python 2.7.8 and earlier (Pull #2052) * Fixed an issue where two ``User-Agent`` headers would be sent if a ``User-Agent`` header key is passed as ``bytes`` (Pull #2047) * Added support for HTTPS proxies contacting HTTPS servers (Pull #1923, Pull #1806) * Deprecated negotiating TLSv1 and TLSv1.1 by default. Users that still wish to use TLS earlier than 1.2 without a deprecation warning should opt-in explicitly by setting ``ssl_version=ssl.PROTOCOL_TLSv1_1`` (Pull #2002) * *Starting in urllib3 v2.0: Connections that receive a ``DeprecationWarning`` will fail** * Deprecated ``Retry`` options ``Retry.DEFAULT_METHOD_WHITELIST``, ``Retry.DEFAULT_REDIRECT_HEADERS_BLACKLIST`` and ``Retry(method_whitelist=...)`` in favor of ``Retry.DEFAULT_ALLOWED_METHODS``, ``Retry.DEFAULT_REMOVE_HEADERS_ON_REDIRECT``, and ``Retry(allowed_methods=...)`` (Pull #2000) **Starting in urllib3 v2.0: Deprecated options will be removed** * Added default ``User-Agent`` header to every request (Pull #1750) * Added ``urllib3.util.SKIP_HEADER`` for skipping ``User-Agent``, ``Accept-Encoding``, and ``Host`` headers from being automatically emitted with requests (Pull #2018) * Collapse ``transfer-encoding: chunked`` request data and framing into the same ``socket.send()`` call (Pull #1906) * Send ``http/1.1`` ALPN identifier with every TLS handshake by default (Pull #1894) * Properly terminate SecureTransport connections when CA verification fails (Pull #1977) * Don't emit an ``SNIMissingWarning`` when passing ``server_hostname=None`` to SecureTransport (Pull #1903) * Disabled requesting TLSv1.2 session tickets as they weren't being used by urllib3 (Pull #1970) * Suppress ``BrokenPipeError`` when writing request body after the server has closed the socket (Pull #1524) * Wrap ``ssl.SSLError`` that can be raised from reading a socket (e.g. "bad MAC") into an ``urllib3.exceptions.SSLError`` (Pull #1939) * Fix retry backoff time parsed from ``Retry-After`` header when given in the HTTP date format. The HTTP date was parsed as the local timezone rather than accounting for the timezone in the HTTP date (typically UTC) (Pull #1932, Pull #1935, Pull #1938, Pull #1949) ==== system-users ==== Subpackages: system-group-hardware system-user-nobody - Remove kvm group from hardware subpackage, since kvm is in its own subpackage (jsc#SLE-11629). ==== systemd ==== Subpackages: libsystemd0 libudev1 systemd-logger systemd-sysvinit udev - Explicitly require group(kvm) by udev: the group used to be created by system-users-hardware, but has been split/moved to qemu/kvm, where it is more logical. The file /usr/lib/udev/rules.d/50-udev-default.rules references this group, thus we should make sure the group exists. Otherwise there are errors in the journal in the form of: /usr/lib/udev/rules.d/50-udev-default.rules:86 Unknown group 'kvm', ignoring ==== sysuser-tools ==== - useradd_or_adduser_dep must be PreReq so ordering makes sure it gets installed before. - suggest shadow where useradd_or_adduser_dep is actually required

1 0

New MicroOS snapshot 20201215 released!
by Richard Brown 17 Dec '20

17 Dec '20

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: attica-qt5 (5.76.0 -> 5.77.0) baloo5 (5.76.0 -> 5.77.0) bluez-qt (5.76.0 -> 5.77.0) breeze5-icons (5.76.0 -> 5.77.0) dracut (050+suse.250.ge6b6e843 -> 051+suse.84.gc6bd70b8) frameworkintegration (5.76.0 -> 5.77.0) fuse fuse3 (3.10.0 -> 3.10.1) geoclue2 (2.5.4 -> 2.5.6) gnome-tweaks (3.34.0 -> 3.34.1) kactivities-stats (5.76.0 -> 5.77.0) kactivities5 (5.76.0 -> 5.77.0) karchive (5.76.0 -> 5.77.0) kauth (5.76.0 -> 5.77.0) kbookmarks (5.76.0 -> 5.77.0) kcmutils (5.76.0 -> 5.77.0) kcodecs (5.76.0 -> 5.77.0) kcompletion (5.76.0 -> 5.77.0) kconfig (5.76.0 -> 5.77.0) kconfigwidgets (5.76.0 -> 5.77.0) kcoreaddons (5.76.0 -> 5.77.0) kcrash (5.76.0 -> 5.77.0) kdbusaddons (5.76.0 -> 5.77.0) kdeclarative (5.76.0 -> 5.77.0) kded (5.76.0 -> 5.77.0) kdelibs4support (5.76.0 -> 5.77.0) kdesu (5.76.0 -> 5.77.0) kdnssd-framework (5.76.0 -> 5.77.0) kdoctools (5.76.0 -> 5.77.0) kfilemetadata5 (5.76.0 -> 5.77.0) kglobalaccel (5.76.0 -> 5.77.0) kguiaddons (5.76.0 -> 5.77.0) kholidays (5.76.0 -> 5.77.0) ki18n (5.76.0 -> 5.77.0) kiconthemes (5.76.0 -> 5.77.0) kidletime (5.76.0 -> 5.77.0) kinit (5.76.0 -> 5.77.0) kio (5.76.0 -> 5.77.0) kirigami2 (5.76.0 -> 5.77.0) kitemmodels (5.76.0 -> 5.77.0) kitemviews (5.76.0 -> 5.77.0) kjobwidgets (5.76.0 -> 5.77.0) knewstuff (5.76.0 -> 5.77.0) knotifications (5.76.0 -> 5.77.0) knotifyconfig (5.76.0 -> 5.77.0) kpackage (5.76.0 -> 5.77.0) kparts (5.76.0 -> 5.77.0) kpeople5 (5.76.0 -> 5.77.0) kpty (5.76.0 -> 5.77.0) kquickcharts (5.76.0 -> 5.77.0) kross (5.76.0 -> 5.77.0) krunner (5.76.0 -> 5.77.0) kservice (5.76.0 -> 5.77.0) ktexteditor (5.76.0 -> 5.77.0) ktextwidgets (5.76.0 -> 5.77.0) kunitconversion (5.76.0 -> 5.77.0) kwallet (5.76.0 -> 5.77.0) kwayland (5.76.0 -> 5.77.0) kwidgetsaddons (5.76.0 -> 5.77.0) kwindowsystem (5.76.0 -> 5.77.0) kxmlgui (5.76.0 -> 5.77.0) libKF5ModemManagerQt (5.76.0 -> 5.77.0) libKF5NetworkManagerQt (5.76.0 -> 5.77.0) plasma-framework (5.76.0 -> 5.77.0) prison-qt5 (5.76.0 -> 5.77.0) purpose (5.76.0 -> 5.77.0) qqc2-desktop-style (5.76.0 -> 5.77.0) solid (5.76.0 -> 5.77.0) sonnet (5.76.0 -> 5.77.0) syntax-highlighting (5.76.0 -> 5.77.0) threadweaver (5.76.0 -> 5.77.0) vim (8.2.2105 -> 8.2.2129) === Details === ==== attica-qt5 ==== Version update (5.76.0 -> 5.77.0) Subpackages: libKF5Attica5 - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Fix crash in provider loading by checking reply pointer before deref (kde#427974) ==== baloo5 ==== Version update (5.76.0 -> 5.77.0) Subpackages: baloo5-imports baloo5-kioslaves libKF5Baloo5 libKF5BalooEngine5 - Fix a regression causing empty results (kde#430273): 0001-BasicIndexingJob-Strip-trailing-slash-from-folders.patch - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Too many changes to list here. ==== bluez-qt ==== Version update (5.76.0 -> 5.77.0) Subpackages: bluez-qt-imports bluez-qt-udev libKF5BluezQt6 - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== breeze5-icons ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Add text-field variants: -frameless (-> text-field), -framed * Add symbolic name symlink for input-* icons. * Add icon for True Type XML font * Add add-subtitle * Change MathML icon to use a formula and use specific mime type * Add icon for QEMU disk image and SquashFS image * Add edit-move action icon * Add icon for core dumps * Add a bunch of subtitle mime types * Remove useless blur from kontrast icon ==== dracut ==== Version update (050+suse.250.ge6b6e843 -> 051+suse.84.gc6bd70b8) Subpackages: dracut-ima - Update to version 051 (051+suse.84.gc6bd70b8): * suse.spec: add 051 modules dbus, wicked * Update AUTHORS, NEWS * Drop 51-dracut-rescue-postinst.sh entirely * Revert "Retrieve service, rpc and protcol entries via getent in hostonly mode" * Adding stalebot file * Revert "Add --uefi-output for custom output filename" * Improve documentation of iso-scan/filename feature * multipathd: fix the comparison * 06dbus: consider dbus-broker * 06dbus: Add busctl as a more useful tool * 06dbus: Include dbus or messagebus group and user, depending on distro * 35network-wicked: openSUSE Factory has reintroduced libexec * 35network-wicked: install ip utility anyway * 35network-wicked: Run wicked early enough to unlock block devices * 06dbus: Do not install superfluous services * 40network: introduce wicked option * 35network-wicked: introduce wicked support module * 06dbus: introduce dbus support * Add --uefi-output for custom output filename * 95fcoe: don't install if there is no FCoE hostonly devices * 95fcoe: ensure needed modules are installed * dracut-install: Globbing support for resolving "firmware:" * dracut-bash-completion.sh: add positional argument completion * Prevent creating unexpected files on the host when running dracut * configure: Find FTS library with --as-needed - Update to version 050+suse.275.gc9639522: * Don't print when a module is explicitly omitted (by default) * 95nfs: /var/lib/nfs/statd/sm is /var/lib/nfs/sm on SUSE (boo#1177462) * Retrieve service, rpc and protcol entries via getent in hostonly mode (boo#1177461) * Remove uses of bash (and bash specific syntax) in runtime scripts * 90crypt: pull in remote-cryptsetup.target enablement * 90multipath: install kpartx's 11-dm-parts.rules * Revert "90crypt: ship initrd-cryptsetup.target" * 90qemu-net: install less module for strict hostonly mode * 90qemu-net: in hostonly mode, only install if network is needed * 95nfs: Install less module if hostonly mode is strict * 90kernel-modules: Install less modules for hostonly mode * 90kernel-modules: install block drivers more strictly * 04watchdog-modules: Simplify install_kernel using new added helper * dracut-init.sh: Add a helper for detect device kernel modules * dracut-functions.sh: Fix check_block_and_slaves_all * 90kernel-network-modules: Don't install iscsi related module * Add a --hostonly-nics option * Configure the runner for team interfaces * 99squash: Check require module earlier, and properly * dracut-functions: add a helper to check if kernel module is available * 90crypt: ship initrd-cryptsetup.target * Revert "90crypt: pull in remote-cryptsetup.target enablement" * dmsquash-live/iso-scan: Provide an easy reference to iso-scan device. * 99memstrack: use /bin/bash ==== frameworkintegration ==== Version update (5.76.0 -> 5.77.0) Subpackages: frameworkintegration-plugin libKF5Style5 - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Pass parent to Q*Layout ctor instead of calling setLayout() ==== fuse ==== Subpackages: libfuse2 - Modernize some older specfile constructs. Rediff patch4 as -p1. - Update descriptions. ==== fuse3 ==== Version update (3.10.0 -> 3.10.1) Subpackages: libfuse3-3 - Update to release 3.10.1 * Unspecified "various minor fixes" ==== geoclue2 ==== Version update (2.5.4 -> 2.5.6) Subpackages: system-user-srvGeoClue typelib-1_0-Geoclue-2_0 - Update to version 2.5.6: + Fix crashes in WiFi handling code. + Plug a leak. - Changes from version 2.5.5: + Plug another leak. + Fix another buffer overflow. + Fix WiFi-geolocation that got broken in 2.5.4. + Put freequently used small strings on the stack to avoid excessive memory usage. ==== gnome-tweaks ==== Version update (3.34.0 -> 3.34.1) - Update to version 3.34.1: + Fix default window sizing and requests. + Updated translations. - Drop gnome-tweaks-fix-titlebar-buttons-left.patch: Fixed upstream, though in a different way than the patch we had. ==== kactivities-stats ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Port deprecated method * Port QRegExp to QRegularExpression * Removed debugging output * ResultModel: expose resource MimeType * Add event filtering for files and directories (kde#428085) ==== kactivities5 ==== Version update (5.76.0 -> 5.77.0) Subpackages: kactivities5-imports libKF5Activities5 - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== karchive ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== kauth ==== Version update (5.76.0 -> 5.77.0) Subpackages: libKF5Auth5 libKF5AuthCore5 - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== kbookmarks ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Pass parent to Q*Layout ctor instead of calling setLayout() ==== kcmutils ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Pass parent to Q*Layout ctor instead of calling setLayout() * remove hack that broke multi level kcms in icon mode ==== kcodecs ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== kcompletion ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== kconfig ==== Version update (5.76.0 -> 5.77.0) Subpackages: kconf_update5 libKF5ConfigCore5 libKF5ConfigGui5 - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Add KF6 TODO to use the just-approved (*) XDG_STATE_HOME env var. * Fix KConfigGroup::copyTo with KConfigBase::Notify ==== kconfigwidgets ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Remove redundant setLayout() call ==== kcoreaddons ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Port some usage of QStringRef to QStringView * [ktexttohtml] Add test case for empty text * Make int to QChar conversion explicit * Remove unused include * Guard QRegExp include behind deprecation flag * Fix include for NAME_MAX * Fix test KFormatTest::formatRelativeDate * Avoid to crash when factory is empty (when we return an error) * KFormat: Add more relative date time cases * Enable KPluginFactory to optionally pass KPluginMetaData to plugins ==== kcrash ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== kdbusaddons ==== Version update (5.76.0 -> 5.77.0) Subpackages: kdbusaddons-tools libKF5DBusAddons5 - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== kdeclarative ==== Version update (5.76.0 -> 5.77.0) Subpackages: kdeclarative-components libKF5CalendarEvents5 libKF5Declarative5 libKF5QuickAddons5 - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Sync margins from AbstractKCM into SimpleKCM * Remove obsolete license text * Relicense file to LGPL-2.0-or-later * Rewrite KeySequenceItem (and helper) to use KeySequenceRecorder (kde#407395) ==== kded ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== kdelibs4support ==== Version update (5.76.0 -> 5.77.0) Subpackages: libKF5KDELibs4Support5 - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== kdesu ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Properly parse escaped double quotes * Add OpenBSD's doas(1) support ==== kdnssd-framework ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== kdoctools ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== kfilemetadata5 ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Port some deprecated method * Fix some leaks in OpenDocument and Office OpenXML extractors * Add several subtypes for OpenDocument and OpenXML document ==== kglobalaccel ==== Version update (5.76.0 -> 5.77.0) Subpackages: kglobalaccel5 libKF5GlobalAccel5 libKF5GlobalAccelPrivate5 - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Load statically linked kglobalacceld interface plugins ==== kguiaddons ==== Version update (5.76.0 -> 5.77.0) - Explicitly BuildRequire pkgconfig(wayland-client) that's needed now and don't rely on other packages pulling it in - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Remove redundant setLayout() call (parent is passed to Q*Layout ctor) * Make shortcut inhibition work from the get-go (kde#407395) * Fix potential crash in wayland inhibitor teardown (kde#429267) * CMake: Find Qt5::GuiPrivate when Wayland support is enabled * Add KeySequenceRecorder as base for KKeySequenceWidget and KeySequenceItem ==== kholidays ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Fix rounding of sun position events less than 30s before the next hour * Avoid parsing each holiday file twice in defaultRegionCode() * Compute the astro seasons only once per occurrence * Fix holiday region lookup for ISO 3166-2 codes * Make HolidayRegion copyable/movable * Add support for calculating civil twilight times ==== ki18n ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== kiconthemes ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Pass parent to Q*Layout ctor instead of calling setLayout() * Add selected property to effects * Use qDebug instead if icon theme is not found ==== kidletime ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Load statically linked system poller plugins ==== kinit ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== kio ==== Version update (5.76.0 -> 5.77.0) Subpackages: kio-core - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Too many changes since 5.76.0, only listing bugfixes: * NewFile Dialog: allow to accept directory creation before stat has run (kde#429838) * KUrlNavBtn: make opening subdirs from dropdown menu with the keyboard work (kde#428226) * Places view: highlight place only when it is displayed (kde#429806) * KIO::iconNameForUrl: resolve icon for remote files based on name (kde#429530) * RenameDialog: allow to overwrite when files are older (kde#236884) * Do not add unnecessary separators (kde#427830) ==== kirigami2 ==== Version update (5.76.0 -> 5.77.0) Subpackages: libKF5Kirigami2-5 - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Too many changes since 5.76.0, only listing bugfixes: * Refine list separator appearance (kde#428739) * Fix rendering borders the proper size with software fallback (kde#427556) * Use fwidth() for smoothing in low power mode (kde#427553) ==== kitemmodels ==== Version update (5.76.0 -> 5.77.0) Subpackages: kitemmodels-imports libKF5ItemModels5 - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Remove redundant setLayout() call * Remove test app, KRecursiveFilterProxyModel is deprecated since 5.65 * KRearrangeColumnsProxyModel: only column 0 has children ==== kitemviews ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Pass parent to Q*Layout ctor instead of calling setLayout() * We require Qt 5.13 now, so remove ifdef ==== kjobwidgets ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Pass parent to Q*Layout ctor instead of calling setLayout() ==== knewstuff ==== Version update (5.76.0 -> 5.77.0) Subpackages: knewstuff-imports libKF5NewStuff5 libKF5NewStuffCore5 - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Too many changes since 5.76.0, only listing bugfixes: * Reuse QWidgets dialog (kde#416328) * Fix entry disappearing too early from updatable page (kde#427801) * Remove entry from cache before inserting new entry (kde#424919) ==== knotifications ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Remove redundant setLayout() call * Don't pass transient hint (kde#422042) * Add SPDX license statement for the impl on macOS * Fix case-sensitive error of AppKit header on macOS * Do not invoke invalid notification actions * Fix memory handling for notifybysnore ==== knotifyconfig ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Pass parent to Q*Layout ctor instead of calling setLayout() ==== kpackage ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Drop X-KDE-PluginInfo-Depends ==== kparts ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Deprecate embed() method, for lack of usage * Make KParts use KPluginMetaData instead of KAboutData ==== kpeople5 ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== kpty ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== kquickcharts ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Too many changes to list here. ==== kross ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== krunner ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Do not use explicitly deleted constructor in autotests * Deprecate KDE4 package remnants * Remove unneeded test * Use isValid() method instead of nullptr check * Simplify nullptr checks * Make use of new KPluginMetaData plugin constructor support of KPluginLoader * Add trailing commas * Add clang-format target * Rework internals of match id methods and add tests for it ==== kservice ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * [kapplicationtrader] Fix API docs * KSycoca: recreate DB when version < expected version * KSycoca: Keep track of resources Files of KMimeAssociation * KSycoca: ensure extrafiles are ordered for comparison * KSycoca: avoid database rebuild if XDG_CONFIG_DIRS contains duplicates * Fix duplicate detection check ==== ktexteditor ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Port KComboBox to QComboBox * use KSyntaxHighlighting themeForPalette * fix i18n call, missing argument (kde#429096) * minor improvements to theme search * Improve the automatic theme selection ==== ktextwidgets ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Pass parent to Q*Layout ctor instead of calling setLayout() ==== kunitconversion ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== kwallet ==== Version update (5.76.0 -> 5.77.0) Subpackages: kwalletd5 libKF5Wallet5 libkwalletbackend5-5 - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== kwayland ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Compile without deprecated method ==== kwidgetsaddons ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Pass parent to Q*Layout ctor instead of calling setLayout() * Don't emit twice passwordChanged * We require Qt 5.13 now, so remove ifdef * KEditListWidget: fix runtime warning from QLayout * typo-- * Add KMessageDialog, an async-centric variant of KMessageBox * Restore the old default popup mode of KActionMenu * Port KActionMenu to QToolButton::ToolButtonPopupMode ==== kwindowsystem ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Pass parent to Q*Layout ctor instead of calling setLayout() * Load statically linked integration plugins * Portaway from pid() to processId() ==== kxmlgui ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Pass parent to Q*Layout ctor instead of calling setLayout() * autotests: fix for Windows by using GenericDataLocation * We depend on Qt 5.13 now so we can remove this check * Introduce HideLibraries and deprecate HideKdeVersion * Fix build without KGlobalAccel * Rewrite KKeySequenceWidget to use KeySequenceRecorder ==== libKF5ModemManagerQt ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== libKF5NetworkManagerQt ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== plasma-framework ==== Version update (5.76.0 -> 5.77.0) Subpackages: libKF5Plasma5 plasma-framework-components - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Too many changes since 5.76.0, only listing bugfixes: * Finish the animation before changing the length of the progressbar highlight (kde#428955) * [textfield] Fix clear button overlapping text (kde#429187) ==== prison-qt5 ==== Version update (5.76.0 -> 5.77.0) Subpackages: libKF5Prison5 prison-qt5-imports - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Pass parent to Q*Layout ctor instead of calling setLayout() ==== purpose ==== Version update (5.76.0 -> 5.77.0) Subpackages: libKF5Purpose5 libKF5PurposeWidgets5 - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Remove unused include * [bluetooth] Fix sharing multiple files (kde#429620) * Read translated plugin action label (kde#429510) ==== qqc2-desktop-style ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * button: rely on down, not pressed for styling * Reduce the size of round buttons on mobile * Remove debugging leftover * fix mobile scrollbar in RTL mode * fix progressbar in RTL mode * fix RTL display for RangeSlider ==== solid ==== Version update (5.76.0 -> 5.77.0) Subpackages: libKF5Solid5 solid-imports - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Include errno.h for EBUSY/EPERM * FstabBackend: return DeviceBusy where umount failed on EBUSY (kde#411772) * Fix detection of recent libplist and libimobiledevice ==== sonnet ==== Version update (5.76.0 -> 5.77.0) Subpackages: libKF5SonnetCore5 libKF5SonnetUi5 - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Changes since 5.76.0: * Use contains instead of indexOf ==== syntax-highlighting ==== Version update (5.76.0 -> 5.77.0) Subpackages: libKF5SyntaxHighlighting5 - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - Too many changes since 5.76.0, only listing bugfixes: * Latex: some math environments can be nested (kde#428947) ==== threadweaver ==== Version update (5.76.0 -> 5.77.0) - Update to 5.77.0 * New feature release * For more details please see: * https://kde.org/announcements/kde-frameworks-5.77.0 - No code change since 5.76.0 ==== vim ==== Version update (8.2.2105 -> 8.2.2129) Subpackages: vim-data-common vim-small - Update to version 8.2.2129, fixes the following problems: * There is no way to do something on CTRL-Z * Vim9: executing user command from Vim9 script not tested * Ruby: missing function prototype * Vim9: leaking memory * Vim9: a range cannot be computed at runtime * After using a complete popup the buffer is listed * Vim9: crash when sourcing vim9script early * Internal error when using \ze before \zs in a pattern * Not all Perl functionality is tested * GTK3: status line background color is wrong * Dead code in the job support * Some functions use any value as a string * Vim9: some errors not tested for; dead code * Vim9: unreachable code in assignment * Running tests may leave some files behind * GTK: menu background is the same color as the main window * Cannot use ":shell" when reading from stdin * "vim -" does not work well when modifyOtherKeys is enabled * Vim9: no test to check for :let error * Vim9: some errors not tested * TOML files are not recognized * Update runtime files.

1 0

New Kubic snapshot 20201215 released!
by Richard Brown 17 Dec '20

17 Dec '20

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: dracut (050+suse.250.ge6b6e843 -> 051+suse.84.gc6bd70b8) fuse fuse3 (3.10.0 -> 3.10.1) vim (8.2.2105 -> 8.2.2129) === Details === ==== dracut ==== Version update (050+suse.250.ge6b6e843 -> 051+suse.84.gc6bd70b8) Subpackages: dracut-ima - Update to version 051 (051+suse.84.gc6bd70b8): * suse.spec: add 051 modules dbus, wicked * Update AUTHORS, NEWS * Drop 51-dracut-rescue-postinst.sh entirely * Revert "Retrieve service, rpc and protcol entries via getent in hostonly mode" * Adding stalebot file * Revert "Add --uefi-output for custom output filename" * Improve documentation of iso-scan/filename feature * multipathd: fix the comparison * 06dbus: consider dbus-broker * 06dbus: Add busctl as a more useful tool * 06dbus: Include dbus or messagebus group and user, depending on distro * 35network-wicked: openSUSE Factory has reintroduced libexec * 35network-wicked: install ip utility anyway * 35network-wicked: Run wicked early enough to unlock block devices * 06dbus: Do not install superfluous services * 40network: introduce wicked option * 35network-wicked: introduce wicked support module * 06dbus: introduce dbus support * Add --uefi-output for custom output filename * 95fcoe: don't install if there is no FCoE hostonly devices * 95fcoe: ensure needed modules are installed * dracut-install: Globbing support for resolving "firmware:" * dracut-bash-completion.sh: add positional argument completion * Prevent creating unexpected files on the host when running dracut * configure: Find FTS library with --as-needed - Update to version 050+suse.275.gc9639522: * Don't print when a module is explicitly omitted (by default) * 95nfs: /var/lib/nfs/statd/sm is /var/lib/nfs/sm on SUSE (boo#1177462) * Retrieve service, rpc and protcol entries via getent in hostonly mode (boo#1177461) * Remove uses of bash (and bash specific syntax) in runtime scripts * 90crypt: pull in remote-cryptsetup.target enablement * 90multipath: install kpartx's 11-dm-parts.rules * Revert "90crypt: ship initrd-cryptsetup.target" * 90qemu-net: install less module for strict hostonly mode * 90qemu-net: in hostonly mode, only install if network is needed * 95nfs: Install less module if hostonly mode is strict * 90kernel-modules: Install less modules for hostonly mode * 90kernel-modules: install block drivers more strictly * 04watchdog-modules: Simplify install_kernel using new added helper * dracut-init.sh: Add a helper for detect device kernel modules * dracut-functions.sh: Fix check_block_and_slaves_all * 90kernel-network-modules: Don't install iscsi related module * Add a --hostonly-nics option * Configure the runner for team interfaces * 99squash: Check require module earlier, and properly * dracut-functions: add a helper to check if kernel module is available * 90crypt: ship initrd-cryptsetup.target * Revert "90crypt: pull in remote-cryptsetup.target enablement" * dmsquash-live/iso-scan: Provide an easy reference to iso-scan device. * 99memstrack: use /bin/bash ==== fuse ==== - Modernize some older specfile constructs. Rediff patch4 as -p1. - Update descriptions. ==== fuse3 ==== Version update (3.10.0 -> 3.10.1) - Update to release 3.10.1 * Unspecified "various minor fixes" ==== vim ==== Version update (8.2.2105 -> 8.2.2129) Subpackages: vim-data-common vim-small - Update to version 8.2.2129, fixes the following problems: * There is no way to do something on CTRL-Z * Vim9: executing user command from Vim9 script not tested * Ruby: missing function prototype * Vim9: leaking memory * Vim9: a range cannot be computed at runtime * After using a complete popup the buffer is listed * Vim9: crash when sourcing vim9script early * Internal error when using \ze before \zs in a pattern * Not all Perl functionality is tested * GTK3: status line background color is wrong * Dead code in the job support * Some functions use any value as a string * Vim9: some errors not tested for; dead code * Vim9: unreachable code in assignment * Running tests may leave some files behind * GTK: menu background is the same color as the main window * Cannot use ":shell" when reading from stdin * "vim -" does not work well when modifyOtherKeys is enabled * Vim9: no test to check for :let error * Vim9: some errors not tested * TOML files are not recognized * Update runtime files.

1 0

New ARM MicroOS snapshot 20201214 released!
by Guillaume Gardet 16 Dec '20

16 Dec '20

Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=3&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: busybox-links cockpit (230 -> 232) containers-systemd (0.0+git20201113.5e435e8 -> 0.0+git20201208.1b4413e) fwupd (1.5.2 -> 1.5.3) gstreamer (1.18.1 -> 1.18.2) gstreamer-plugins-bad (1.18.1 -> 1.18.2) gstreamer-plugins-base (1.18.1 -> 1.18.2) gstreamer-plugins-good (1.18.1 -> 1.18.2) kernel-firmware (20201120 -> 20201130) kernel-source (5.9.12 -> 5.9.14) libressl (3.2.2 -> 3.2.3) libzypp (17.25.2 -> 17.25.5) lvm2 lvm2-device-mapper malcontent mdadm open-lldp (1.1+15.ef8495548d04 -> 1.1+18.0e969d0edcc4) openldap2 (2.4.55 -> 2.4.56) patterns-gnome (20200416 -> 20201210) patterns-microos polkit-default-privs (1550+20201119.2c1dce4 -> 1550+20201208.135bf51) python-cryptography (3.2.1 -> 3.3) python-psutil systemd (246.6 -> 246.7) tracker (3.0.1 -> 3.0.2) tracker-miners (3.0.1 -> 3.0.3) u-boot-rpiarm64 xdm zypper (1.14.40 -> 1.14.41) === Details === ==== busybox-links ==== Subpackages: busybox-coreutils busybox-gawk busybox-grep busybox-gzip busybox-psmisc busybox-sed - busybox-adduser needs "nogroup" for system accounts, which have no group specified. ==== cockpit ==== Version update (230 -> 232) Subpackages: cockpit-bridge cockpit-system - new version 230 https://cockpit-project.org/blog/cockpit-232.html https://cockpit-project.org/blog/cockpit-231.html ==== containers-systemd ==== Version update (0.0+git20201113.5e435e8 -> 0.0+git20201208.1b4413e) - Update to version 0.0+git20201208.1b4413e: * Add support for dovecot * Fix description * Add support for minidlna container * Add LMTP variable ==== fwupd ==== Version update (1.5.2 -> 1.5.3) Subpackages: libfwupd2 libfwupdplugin1 typelib-1_0-Fwupd-2_0 - Update to version 1.5.3: + Lower the CURL version required to fix build in RHEL + Do not use meson ternary operations to avoid bumping the required meson version + Added Lite Mk III + Allow setting the GMainContext when used for sync methods + Fall back to the misc device for serio devices + Actually implement rescan in FuUdevDevice + bcm57xx: Refactor CRC code to remove extra byteswap + bcm57xx: Fix CRC check + synaptics-rmi: Don't crash if calling ->to_string() before - >setup() + Fix a possible critical warning due to missing retval + Add the serio->firmare_id for UDev devices + Export the driver name from FuUdevDevice + Allow the client to send PKCS7 and GPG signatures + Force the remote kind to JCat server-side + Only parse the signature if the remote is JCat + fu-main: Fix sender_features insert with wrong size + make platform integrity plugin optional and disabled by default + Add quirk for Western Digital + Mark more user-visible strings as translatable + modem-manager: validate firmware update method combinations + modem-manager: remove unused byte counts in QMI/PDC update logic + modem-manager: make sure the correct interface number is used for QMI + modem-manager: udev monitoring only if device switches layout + modem-manager: plug udev client leak + Restrict loading component types of firmware - Enable supported_build to clarify that this package is supported (bsc#1179790) - Drop fwupd-platform-integrity.conf since upstream disables the platform integrity module by default now due to incompleteness. - Address fwupd-refresh.service in %preun, %pre, %post, and %postun and provide a rc link for it - Version "Obsoletes: dbxtool" and "Obsoletes: fwupdate" ==== gstreamer ==== Version update (1.18.1 -> 1.18.2) Subpackages: libgstreamer-1_0-0 - Update to version 1.18.2: + Highlighted bugfixes: - Fix MPEG-TS timestamping regression when playing DVB streams - compositor: fix artefacts in certain input scaling/conversion situations and make sure that the output format is actually supported, plus renegotiation fixes - Fix sftp:// URI playback in decodebin/playbin via giosrc - adaptivedemux/dashdemux/hlsdemux fixes - rtsp-server fixes - android media: fix crash when encoding AVC - fix races in various unit tests - lots of other bug fixes and memory leak fixes - various stability, performance and reliability improvements - g-i annotation fixes - build fixes + gstreamer changes: - bin: When removing a sink, check if the EOS status changed - info: colorize PIDs in log messages - aggregator: Include min-upstream-latency in buffering time, helps especially with performance issues on single core systems where there are a lot of threads running - typefind: copy seqnum to new segment event, fixing issues with oggdemux operating in push mode with typefind operating in pull mode - identity, clocksync: Also provide system clock if sync=false - queue2: Fix modes in scheduling query handling - harness: Handle element not being set cleanly - g-i: Add some missing nullable annotations, and fix some nullable annotations: - gst_test_clock_process_next_clock_id() returns nullable - gst_stream_type_get_name() is not nullable - build: fix build issue when compiling for 32-bit architectures with 64-bit time_t (e.g. riscv32) by increasing padding in GstClockEntryImpl in gst_private.h - Fix the _service file and spec to really use the tarball generated by service. ==== gstreamer-plugins-bad ==== Version update (1.18.1 -> 1.18.2) Subpackages: libgstadaptivedemux-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstphotography-1_0-0 libgstsctp-1_0-0 libgsturidownloader-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 - Update to version 1.18.2: + tsparse: timestamp packetized buffers, fixing timestamp handling regression in connection with dvbsrc in MeTV + ttmlparse: fix issues in aggregation of input TTML + mpegdemux: Set duration on seeking query if possible, fixes seeking in MPEG-PS streams in gst-play-1.0 + mpegtsdemux: Fix off by one error + adaptivedemux: - Store QoS values on the element - Don't calculate bitrate for header/index fragments + hlsdemux: Don't double-free variant streams on errors + mpegtspacketizer: Handle PCR issues with adaptive streams + player: call ref_sink on pipeline + vkdeviceprovider: Avoid deadlock on physical device + wlvideoformat: fix DMA format convertor + Webrtc shutdown crashes + decklink: - Update enum value bounds check in gst_decklink_get_mode() - Correct framerate 2KDCI 23.98 + amc: Fix crash when encoding AVC + d3d11videoprocessor: Fix wrong input/output supportability check + opencv: allow compilation against 4.5.x + tests: svthevcenc: Fix test_encode_simple + tests: dtls: Don't set dtlsenc state before linking + mpegtsmux: Restore intervals when creating TsMux + adaptivedemux, hlsdemux, curl: Use actual object for logging + gi: player: Fix get_current_subtitle_track() annotation - Fix the _service file and spec to really use the tarball generated by service. ==== gstreamer-plugins-base ==== Version update (1.18.1 -> 1.18.2) Subpackages: libgstallocators-1_0-0 libgstapp-1_0-0 libgstaudio-1_0-0 libgstfft-1_0-0 libgstgl-1_0-0 libgstpbutils-1_0-0 libgstriff-1_0-0 libgstrtp-1_0-0 libgstrtsp-1_0-0 libgstsdp-1_0-0 libgsttag-1_0-0 libgstvideo-1_0-0 - Update to version 1.18.2: + gl/eagl: internal view resize fixes for glimagesink + video-converter: increase the number of cache lines for resampling, fixes significant color issues and artefacts with "special" resizing parameters in compositor + compositor: Don't crash in prepare_frame() if the pad was just removed + decodebin3: Properly handle caps query with no filter + videoaggregator: - Guarantee that the output format is supported - Fix locking around vagg->info - Fix renegotiation when using convert pad - document and fix locking in convert pad + gluploadelement: - Avoid race condition of base class' context - Avoid race condition of inside upload creation + gl: Fix prototype of glGetSynciv() + tcpserversink: Don't assume g_socket_get_remote_address() succeeds + audiodecoder, videodecoder: Don't reset max-errors property value in reset() + audioencoder: Fix incorrect GST_LOG_OBJECT usage + pbutils: Fix segfault when using invalid encoding profile + g-i: videometa: gir annotate the size of plane array in new API + examples/gl/gtk: Add missing dependency on gstgl + video: fix doc warning. - Fix the _service file and spec to really use the tarball generated by service. ==== gstreamer-plugins-good ==== Version update (1.18.1 -> 1.18.2) - Update to version 1.18.2: + rpicamsrc: add vchostif library as it is required to build successful + deinterlace: Enable x86 assembly with nasm on MSVC + v4l2: caps negotiate wrong as interlace feature + aacparse: Fix caps change handling + rtspsrc: Use URI hash for stream id + flvmux: Release pads via GstAggregator + qtmux: Chain up when releasing pad, and fix some locking + matroska-mux: Fix sparse stream crash + Splitmux testsuite races - Fix the _service file and spec to really use the tarball generated by service. ==== kernel-firmware ==== Version update (20201120 -> 20201130) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update to version 20201130 (git commit 7455a3606674): * linux-firmware: Update firmware file for Intel Bluetooth AX210 * linux-firmware: Update firmware file for Intel Bluetooth AX210 * i915: Add GuC firmware v49.0.1 for all platforms * i915: Remove duplicate KBL DMC entry * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2018 ==== kernel-source ==== Version update (5.9.12 -> 5.9.14) - drm/i915/gt: Declare gen9 has 64 mocs entries! (git-fixes). - commit c648a46 - Linux 5.9.14 (bsc#1012628). - usb: gadget: f_fs: Use local copy of descriptors for userspace copy (bsc#1012628). - USB: serial: kl5kusb105: fix memleak on open (bsc#1012628). - USB: serial: ch341: add new Product ID for CH341A (bsc#1012628). - USB: serial: ch341: sort device-id entries (bsc#1012628). - USB: serial: option: add Fibocom NL668 variants (bsc#1012628). - USB: serial: option: add support for Thales Cinterion EXS82 (bsc#1012628). - USB: serial: option: fix Quectel BG96 matching (bsc#1012628). - speakup: Reject setting the speakup line discipline outside of speakup (bsc#1012628). - ALSA: hda/realtek: Fix bass speaker DAC assignment on Asus Zephyrus G14 (bsc#1012628). - ALSA: hda/realtek: Add mute LED quirk to yet another HP x360 model (bsc#1012628). - ALSA: hda/realtek: Enable headset of ASUS UX482EG & B9400CEA with ALC294 (bsc#1012628). - ALSA: hda/realtek - Add new codec supported for ALC897 (bsc#1012628). - ALSA: hda/realtek - Fixed Dell AIO wrong sound tone (bsc#1012628). - ALSA: hda/generic: Add option to enforce preferred_dacs pairs (bsc#1012628). - ring-buffer: Update write stamp with the correct ts (bsc#1012628). - ring-buffer: Set the right timestamp in the slow path of __rb_reserve_next() (bsc#1012628). - ring-buffer: Always check to put back before stamp when crossing pages (bsc#1012628). - ftrace: Fix updating FTRACE_FL_TRAMP (bsc#1012628). - ftrace: Fix DYNAMIC_FTRACE_WITH_DIRECT_CALLS dependency (bsc#1012628). - cifs: allow syscalls to be restarted in __smb_send_rqst() (bsc#1012628). - cifs: fix potential use-after-free in cifs_echo_request() (bsc#1012628). - cifs: refactor create_sd_buf() and and avoid corrupting the buffer (bsc#1012628). - cifs: add NULL check for ses->tcon_ipc (bsc#1012628). - gfs2: Upgrade shared glocks for atime updates (bsc#1012628). - gfs2: Fix deadlock between gfs2_{create_inode,inode_lookup} and delete_work_func (bsc#1012628). - s390/pci: fix CPU address in MSI for directed IRQ (bsc#1012628). - i2c: imx: Fix reset of I2SR_IAL flag (bsc#1012628). - i2c: imx: Check for I2SR_IAL after every byte (bsc#1012628). - i2c: imx: Don't generate STOP condition if arbitration has been lost (bsc#1012628). - tracing: Fix userstacktrace option for instances (bsc#1012628). - thunderbolt: Fix use-after-free in remove_unplugged_switch() (bsc#1012628). - drm/omap: sdi: fix bridge enable/disable (bsc#1012628). - drm/amdgpu/vcn3.0: stall DPG when WPTR/RPTR reset (bsc#1012628). - drm/amdgpu/vcn3.0: remove old DPG workaround (bsc#1012628). - drm/i915/gt: Retain default context state across shrinking (bsc#1012628). - drm/i915/gt: Limit frequency drop to RPe on parking (bsc#1012628). - drm/i915/gt: Program mocs:63 for cache eviction on gen9 (bsc#1012628). - KVM: PPC: Book3S HV: XIVE: Fix vCPU id sanity check (bsc#1012628). - scsi: mpt3sas: Fix ioctl timeout (bsc#1012628). - io_uring: fix recvmsg setup with compat buf-select (bsc#1012628). - dm writecache: advance the number of arguments when reporting max_age (bsc#1012628). - dm writecache: fix the maximum number of arguments (bsc#1012628). - powerpc/64s/powernv: Fix memory corruption when saving SLB entries on MCE (bsc#1012628). - genirq/irqdomain: Add an irq_create_mapping_affinity() function (bsc#1012628). - powerpc/pseries: Pass MSI affinity to irq_create_mapping() (bsc#1012628). - dm: fix bug with RCU locking in dm_blk_report_zones (bsc#1012628). - dm: fix double RCU unlock in dm_dax_zero_page_range() error path (bsc#1012628). - dm: remove invalid sparse __acquires and __releases annotations (bsc#1012628). - x86/uprobes: Do not use prefixes.nbytes when looping over prefixes.bytes (bsc#1012628). - coredump: fix core_pattern parse error (bsc#1012628). - mm: list_lru: set shrinker map bit when child nr_items is not zero (bsc#1012628). - mm/swapfile: do not sleep with a spin lock held (bsc#1012628). - hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (bsc#1012628). - Revert "amd/amdgpu: Disable VCN DPG mode for Picasso" (bsc#1012628). - iommu/amd: Set DTE[IntTabLen] to represent 512 IRTEs (bsc#1012628). - mm: memcg/slab: fix obj_cgroup_charge() return value handling (bsc#1012628). - lib/syscall: fix syscall registers retrieval on 32-bit platforms (bsc#1012628). - can: af_can: can_rx_unregister(): remove WARN() statement from list operation sanity check (bsc#1012628). - gfs2: check for empty rgrp tree in gfs2_ri_update (bsc#1012628). - netfilter: ipset: prevent uninit-value in hash_ip6_add (bsc#1012628). - ASoC: wm_adsp: fix error return code in wm_adsp_load() (bsc#1012628). - gfs2: Fix deadlock dumping resource group glocks (bsc#1012628). - gfs2: Don't freeze the file system during unmount (bsc#1012628). - rtw88: debug: Fix uninitialized memory in debugfs code (bsc#1012628). - i2c: qcom: Fix IRQ error misassignement (bsc#1012628). - i2c: qup: Fix error return code in qup_i2c_bam_schedule_desc() (bsc#1012628). - dm writecache: remove BUG() and fail gracefully instead (bsc#1012628). - Input: i8042 - fix error return code in i8042_setup_aux() (bsc#1012628). - netfilter: nf_tables: avoid false-postive lockdep splat (bsc#1012628). - netfilter: nftables_offload: set address type in control dissector (bsc#1012628). - netfilter: nftables_offload: build mask based from the matching bytes (bsc#1012628). - x86/insn-eval: Use new for_each_insn_prefix() macro to loop over prefixes bytes (bsc#1012628). - Revert "geneve: pull IP header before ECN decapsulation" (bsc#1012628). - bpf: Fix propagation of 32-bit signed bounds from 64-bit bounds (bsc#1012628). - commit 960bcea - Update patches.suse/tty-Fix-pgrp-locking-in-tiocspgrp.patch (bsc#1179745 CVE-2020-29661). - Update patches.suse/tty-Fix-session-locking.patch (bsc#1179745 CVE-2020-29660). Add CVE numbers. - commit 1329f77 - Update config files to disable CONFIG_DEBUG_SECTION_MISMATCH (bsc#1177403) - commit a0a476d - Linux 5.9.13 (bsc#1012628). - devlink: Hold rtnl lock while reading netdev attributes (bsc#1012628). - devlink: Make sure devlink instance and port are in same net namespace (bsc#1012628). - ipv6: addrlabel: fix possible memory leak in ip6addrlbl_net_init (bsc#1012628). - net/af_iucv: set correct sk_protocol for child sockets (bsc#1012628). - net: openvswitch: fix TTL decrement action netlink message format (bsc#1012628). - net/tls: missing received data after fast remote close (bsc#1012628). - net/tls: Protect from calling tls_dev_del for TLS RX twice (bsc#1012628). - rose: Fix Null pointer dereference in rose_send_frame() (bsc#1012628). - sock: set sk_err to ee_errno on dequeue from errq (bsc#1012628). - tcp: Set INET_ECN_xmit configuration in tcp_reinit_congestion_control (bsc#1012628). - tun: honor IOCB_NOWAIT flag (bsc#1012628). - usbnet: ipheth: fix connectivity with iOS 14 (bsc#1012628). - vsock/virtio: discard packets only when socket is really closed (bsc#1012628). - mptcp: fix NULL ptr dereference on bad MPJ (bsc#1012628). - net/packet: fix packet receive on L3 devices without visible hard header (bsc#1012628). - netfilter: bridge: reset skb->pkt_type after NF_INET_POST_ROUTING traversal (bsc#1012628). - ipv4: Fix tos mask in inet_rtm_getroute() (bsc#1012628). - dt-bindings: net: correct interrupt flags in examples (bsc#1012628). - chelsio/chtls: fix panic during unload reload chtls (bsc#1012628). - ibmvnic: Ensure that SCRQ entry reads are correctly ordered (bsc#1012628). - ibmvnic: Fix TX completion error handling (bsc#1012628). - tipc: fix incompatible mtu of transmission (bsc#1012628). - inet_ecn: Fix endianness of checksum update when setting ECT(1) (bsc#1012628). - geneve: pull IP header before ECN decapsulation (bsc#1012628). - net: ip6_gre: set dev->hard_header_len when using header_ops (bsc#1012628). - dpaa_eth: copy timestamp fields to new skb in A-050385 workaround (bsc#1012628). - cxgb3: fix error return code in t3_sge_alloc_qset() (bsc#1012628). - net: pasemi: fix error return code in pasemi_mac_open() (bsc#1012628). - vxlan: fix error return code in __vxlan_dev_create() (bsc#1012628). - chelsio/chtls: fix a double free in chtls_setkey() (bsc#1012628). - net: mvpp2: Fix error return code in mvpp2_open() (bsc#1012628). - net: skbuff: ensure LSE is pullable before decrementing the MPLS ttl (bsc#1012628). - net: openvswitch: ensure LSE is pullable before reading it (bsc#1012628). - net/sched: act_mpls: ensure LSE is pullable before reading it (bsc#1012628). - net/mlx5: DR, Proper handling of unsupported Connect-X6DX SW steering (bsc#1012628). - net/mlx5: Fix wrong address reclaim when command interface is down (bsc#1012628). - net: mlx5e: fix fs_tcp.c build when IPV6 is not enabled (bsc#1012628). - ALSA: usb-audio: US16x08: fix value count for level meters (bsc#1012628). - Input: xpad - support Ardwiino Controllers (bsc#1012628). - Input: i8042 - add ByteSpeed touchpad to noloop table (bsc#1012628). - Input: atmel_mxt_ts - fix lost interrupts (bsc#1012628). - tracing: Fix alignment of static buffer (bsc#1012628). - tracing: Remove WARN_ON in start_thread() (bsc#1012628). - uapi: fix statx attribute value overlap for DAX & MOUNT_ROOT (bsc#1012628). - drm/i915/gt: Fixup tgl mocs for PTE tracking (bsc#1012628). - commit 3dfd18b - tty: Fix ->session locking (bsc#1179745). - tty: Fix ->pgrp locking in tiocspgrp() (bsc#1179745). - commit 9455f8b - net/x25: prevent a couple of overflows (bsc#1178590). - commit 2a06597 ==== libressl ==== Version update (3.2.2 -> 3.2.3) Subpackages: libcrypto46 libssl48 libtls20 - Update to release 3.2.3 * Fixed: Malformed ASN.1 in a certificate revocation list or a timestamp response token could lead to a NULL pointer dereference. ==== libzypp ==== Version update (17.25.2 -> 17.25.5) - Fix lsof monitoring (bsc#1179909) - version 17.25.5 (22) - Prevent librpmDb iterator from accidentally creating an empty rpmdb in / (repoened bsc#1178910) - Fix update of gpg keys with elongated expire date (bsc#1179222) - needreboot: remove udev from the list (bsc#1179083) - Prefer /run over /var/run. - version 17.25.4 (22) - RepoManager: Carefully tidy up the caches. Remove non-directory entries. (bsc#1178966) - RpmDb: If no database exists use the _dbpath configured in rpm. Still makes sure a compat symlink at /var/lib/rpm exists in case the configures _dbpath is elsewhere. (bsc#1178910) - Url: Hide known password entries when writing the query part (bsc#1050625 bsc#1177583, CVE-2017-9271) - adapt testcase to change introduced by libsolv#402. - RepoManager: Force refresh if repo url has changed (bsc#1174016) - RepoInfo: ignore legacy type= in a .repo file and let RepoManager probe (bsc#1177427, Fixes openSUSE/zypper#357). - version 17.25.3 (22) ==== lvm2 ==== Subpackages: liblvm2cmd2_03 - lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691) - change external_device_info_source from none to udev - comment out lvm.conf item preferred_names by default (bsc#1179738) - comment out preferred_names - Update lvm.conf, make it closely to upstream's setting (bsc#1179739) - change lvm.conf, follow upstream 7b41ea61b2e33dbfad754fd4c6e7851faf7ca5ef ==== lvm2-device-mapper ==== Subpackages: device-mapper libdevmapper-event1_03 libdevmapper1_03 - lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691) - change external_device_info_source from none to udev - comment out lvm.conf item preferred_names by default (bsc#1179738) - comment out preferred_names - Update lvm.conf, make it closely to upstream's setting (bsc#1179739) - change lvm.conf, follow upstream 7b41ea61b2e33dbfad754fd4c6e7851faf7ca5ef ==== malcontent ==== Subpackages: libmalcontent-0-0 typelib-1_0-Malcontent-0 - Split MalcontentControl into seperate package so a library doesn't require a desktop application. ==== mdadm ==== - There are some important fixes merged in mdadm upstream which should go with jsc#SLE-13700. This is the update from upstream mdadm including the important fixes we should have. - Detail: show correct raid level when the array is inactive (jsc#SLE-13700) 0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch - Don't create bitmap for raid5 with journal disk (jsc#SLE-13700) 0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch - Monitor: refresh mdstat fd after select (jsc#SLE-13700) 0097-Monitor-refresh-mdstat-fd-after-select.patch - Monitor: stop notifing about containers. (jsc#SLE-13700) 0098-Monitor-stop-notifing-about-containers.patch - mdmonitor: set small delay once (jsc#SLE-13700) 0099-mdmonitor-set-small-delay-once.patch - Check if other Monitor instance running before fork. (jsc#SLE-13700) 0100-Check-if-other-Monitor-instance-running-before-fork.patch - Super1: allow RAID0 layout setting to be removed. (jsc#SLE-13700) 0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch - Detail: fix segfault during IMSM raid creation (jsc#SLE-13700) 0102-Detail-fix-segfault-during-IMSM-raid-creation.patch - Create.c: close mdfd and generate uevent (jsc#SLE-13700) 0103-Create.c-close-mdfd-and-generate-uevent.patch - imsm: update num_data_stripes according to dev_size (jsc#SLE-13700) 0104-imsm-update-num_data_stripes-according-to-dev_size.patch - imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700) 0105-imsm-remove-redundant-calls-to-imsm_get_map.patch - Monitor: don't use default modes when creating a file (jsc#SLE-13700) 0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch - imsm: limit support to first NVMe namespace (jsc#SLE-13700) 0107-imsm-limit-support-to-first-NVMe-namespace.patch - mdadm: Unify forks behaviour (jsc#SLE-13700) 0108-mdadm-Unify-forks-behaviour.patch - mdadm/Detail: show correct state for clustered array (jsc#SLE-13700) 0109-mdadm-Detail-show-correct-state-for-clustered-array.patch - Make target to install binaries only (jsc#SLE-13700) 0110-Make-target-to-install-binaries-only.patch - udev: start grow service automatically (jsc#SLE-13700) 0111-udev-start-grow-service-automatically.patch ==== open-lldp ==== Version update (1.1+15.ef8495548d04 -> 1.1+18.0e969d0edcc4) Subpackages: liblldp_clif1 - Update to version v1.1+18.0e969d0edcc4: * event_iface: only set rcv buf size if too small (bsc#1175570) ==== openldap2 ==== Version update (2.4.55 -> 2.4.56) - updated to 2.4.56 OpenLDAP 2.4.56 Release (2020/11/10) Fixed slapd to remove assert in certificateListValidate (ITS#9383) Fixed slapd to remove assert in csnNormalize23 (ITS#9384) Fixed slapd to better parse ldapi listener URIs (ITS#9379) ==== patterns-gnome ==== Version update (20200416 -> 20201210) Subpackages: patterns-gnome-gnome_basic patterns-gnome-gnome_basis - Add malcontent-control recommendation to the base pattern ==== patterns-microos ==== Subpackages: patterns-microos-alt_onlyDVD patterns-microos-apparmor patterns-microos-base patterns-microos-basesystem patterns-microos-cloud patterns-microos-cockpit patterns-microos-defaults patterns-microos-desktop-gnome patterns-microos-desktop-kde patterns-microos-hardware patterns-microos-ima_evm patterns-microos-onlyDVD patterns-microos-selinux patterns-microos-sssd_ldap - Ensure gnome-session-wayland is pulled by GNOME desktop pattern. - Add desktop-common pattern for packages common to GNOME and KDE patterns - Some small cleanups, also because of the source formatter... - Use proper icons for desktop patterns - Switch the KDE pattern from plasma5-pk-updates to discover-notifier and add plasma-browser-integration ==== polkit-default-privs ==== Version update (1550+20201119.2c1dce4 -> 1550+20201208.135bf51) - Update to version 1550+20201208.135bf51: * libvirt: allow the active session to create read-only connections (bsc#1179126) * profiles: cleanup outdates keep_always entries ==== python-cryptography ==== Version update (3.2.1 -> 3.3) - update to 3.3.0 - BACKWARDS INCOMPATIBLE: Support for Python 3.5 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: The GCM and AESGCM now require 64-bit to 1024-bit (8 byte to 128 byte) initialization vectors. This change is to conform with an upcoming OpenSSL release that will no longer support sizes outside this window. - BACKWARDS INCOMPATIBLE: When deserializing asymmetric keys we now raise ValueError rather than UnsupportedAlgorithm when an unsupported cipher is used. This change is to conform with an upcoming OpenSSL release that will no longer distinguish between error types. - BACKWARDS INCOMPATIBLE: We no longer allow loading of finite field Diffie-Hellman parameters of less than 512 bits in length. This change is to conform with an upcoming OpenSSL release that no longer supports smaller sizes. These keys were already wildly insecure and should not have been used in any application outside of testing. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1i. - Python 2 support is deprecated in cryptography. This is the last release that will support Python 2. - Added the recover_data_from_signature() function to RSAPublicKey for recovering the signed data from an RSA signature. - Remove unnecessary dependency virtualenv. ==== python-psutil ==== - Only require unittest2 for Leap. - Add missing BR for unittest2 ==== systemd ==== Version update (246.6 -> 246.7) Subpackages: libsystemd0 libudev1 systemd-logger systemd-sysvinit udev - Import commit d5e7958d35dc7758fe2e87e0a8193b93ce1a1b15 (merge of v246.7) 450792497e sd-event: fix delays assert brain-o (#17790) 1040a19d08 udevadm: rename option '--log-priority' into '--log-level' a7b41e19bd udev: rename kernel option 'log_priority' into 'log_level' For a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/f6104ea5f554233e34b94ffd92da833… ==== tracker ==== Version update (3.0.1 -> 3.0.2) Subpackages: libtracker-sparql-3_0-0 tracker-data-files - Update to version 3.0.2: + Update some wording in website + Fix initialization issues in portal + Improve turtle parser + Improve checks for dates in the far past/future + Cleanup meson build options + Fix invalid reads + Make UPDATE parser tree processing iterative rather than recursive + Fix errors in tracker:uri-is-parent + Protect harder against invalid database state + Introspection annotation fixes + Improve thread safety of internal ontology objects + Add missing <package> element to gir file. ==== tracker-miners ==== Version update (3.0.1 -> 3.0.3) Subpackages: tracker-miner-files - Update to version 3.0.3: + Allow newstatat/statat64 syscalls + Brown paper bag release - Changes from version 3.0.2: + Fix sched test under non glibc platforms + Refcount fixes + Avoid the fluiddec gstreamer plugin + Ensure to avoid non-native files in tracker-extract-3 + CI fixes + Updated translations. ==== u-boot-rpiarm64 ==== Subpackages: u-boot-rpiarm64-doc - Add bananapim2zero flavor - Introduce odroid-c4 ==== xdm ==== - fixed %postun for older releases than factory/TW (see change right below, which broke it) ==== zypper ==== Version update (1.14.40 -> 1.14.41) Subpackages: zypper-needs-restarting - Avoid translated text in xml attributes ( fixes #361 ) - BuildRequires: libzypp-devel >= 17.25.3. Adapt to new LoadTestcase API. - version 1.14.41

1 0

New ARM Kubic snapshot 20201214 released!
by Guillaume Gardet 16 Dec '20

16 Dec '20

Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=3&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: busybox-links cockpit (230 -> 232) containers-systemd (0.0+git20201113.5e435e8 -> 0.0+git20201208.1b4413e) helm (3.4.1 -> 3.4.2) kernel-firmware (20201120 -> 20201130) kernel-source (5.9.12 -> 5.9.14) kubernetes (1.19.4 -> 1.20.0) kustomize (3.8.7 -> 3.9.0) libressl (3.2.2 -> 3.2.3) libzypp (17.25.2 -> 17.25.5) lvm2 lvm2-device-mapper open-lldp (1.1+15.ef8495548d04 -> 1.1+18.0e969d0edcc4) openldap2 (2.4.55 -> 2.4.56) patterns-microos python-M2Crypto (0.36.0 -> 0.37.1) python-PrettyTable python-cryptography (3.2.1 -> 3.3) python-psutil systemd (246.6 -> 246.7) u-boot-rpiarm64 zypper (1.14.40 -> 1.14.41) === Details === ==== busybox-links ==== Subpackages: busybox-coreutils busybox-gawk busybox-grep busybox-gzip busybox-sed - busybox-adduser needs "nogroup" for system accounts, which have no group specified. ==== cockpit ==== Version update (230 -> 232) Subpackages: cockpit-bridge cockpit-system - new version 230 https://cockpit-project.org/blog/cockpit-232.html https://cockpit-project.org/blog/cockpit-231.html ==== containers-systemd ==== Version update (0.0+git20201113.5e435e8 -> 0.0+git20201208.1b4413e) - Update to version 0.0+git20201208.1b4413e: * Add support for dovecot * Fix description * Add support for minidlna container * Add LMTP variable ==== helm ==== Version update (3.4.1 -> 3.4.2) - Update to version 3.4.2: * Updating to Kubernetes 1.19.4 package versions * fix: ingress path issue ==== kernel-firmware ==== Version update (20201120 -> 20201130) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update to version 20201130 (git commit 7455a3606674): * linux-firmware: Update firmware file for Intel Bluetooth AX210 * linux-firmware: Update firmware file for Intel Bluetooth AX210 * i915: Add GuC firmware v49.0.1 for all platforms * i915: Remove duplicate KBL DMC entry * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2018 ==== kernel-source ==== Version update (5.9.12 -> 5.9.14) - drm/i915/gt: Declare gen9 has 64 mocs entries! (git-fixes). - commit c648a46 - Linux 5.9.14 (bsc#1012628). - usb: gadget: f_fs: Use local copy of descriptors for userspace copy (bsc#1012628). - USB: serial: kl5kusb105: fix memleak on open (bsc#1012628). - USB: serial: ch341: add new Product ID for CH341A (bsc#1012628). - USB: serial: ch341: sort device-id entries (bsc#1012628). - USB: serial: option: add Fibocom NL668 variants (bsc#1012628). - USB: serial: option: add support for Thales Cinterion EXS82 (bsc#1012628). - USB: serial: option: fix Quectel BG96 matching (bsc#1012628). - speakup: Reject setting the speakup line discipline outside of speakup (bsc#1012628). - ALSA: hda/realtek: Fix bass speaker DAC assignment on Asus Zephyrus G14 (bsc#1012628). - ALSA: hda/realtek: Add mute LED quirk to yet another HP x360 model (bsc#1012628). - ALSA: hda/realtek: Enable headset of ASUS UX482EG & B9400CEA with ALC294 (bsc#1012628). - ALSA: hda/realtek - Add new codec supported for ALC897 (bsc#1012628). - ALSA: hda/realtek - Fixed Dell AIO wrong sound tone (bsc#1012628). - ALSA: hda/generic: Add option to enforce preferred_dacs pairs (bsc#1012628). - ring-buffer: Update write stamp with the correct ts (bsc#1012628). - ring-buffer: Set the right timestamp in the slow path of __rb_reserve_next() (bsc#1012628). - ring-buffer: Always check to put back before stamp when crossing pages (bsc#1012628). - ftrace: Fix updating FTRACE_FL_TRAMP (bsc#1012628). - ftrace: Fix DYNAMIC_FTRACE_WITH_DIRECT_CALLS dependency (bsc#1012628). - cifs: allow syscalls to be restarted in __smb_send_rqst() (bsc#1012628). - cifs: fix potential use-after-free in cifs_echo_request() (bsc#1012628). - cifs: refactor create_sd_buf() and and avoid corrupting the buffer (bsc#1012628). - cifs: add NULL check for ses->tcon_ipc (bsc#1012628). - gfs2: Upgrade shared glocks for atime updates (bsc#1012628). - gfs2: Fix deadlock between gfs2_{create_inode,inode_lookup} and delete_work_func (bsc#1012628). - s390/pci: fix CPU address in MSI for directed IRQ (bsc#1012628). - i2c: imx: Fix reset of I2SR_IAL flag (bsc#1012628). - i2c: imx: Check for I2SR_IAL after every byte (bsc#1012628). - i2c: imx: Don't generate STOP condition if arbitration has been lost (bsc#1012628). - tracing: Fix userstacktrace option for instances (bsc#1012628). - thunderbolt: Fix use-after-free in remove_unplugged_switch() (bsc#1012628). - drm/omap: sdi: fix bridge enable/disable (bsc#1012628). - drm/amdgpu/vcn3.0: stall DPG when WPTR/RPTR reset (bsc#1012628). - drm/amdgpu/vcn3.0: remove old DPG workaround (bsc#1012628). - drm/i915/gt: Retain default context state across shrinking (bsc#1012628). - drm/i915/gt: Limit frequency drop to RPe on parking (bsc#1012628). - drm/i915/gt: Program mocs:63 for cache eviction on gen9 (bsc#1012628). - KVM: PPC: Book3S HV: XIVE: Fix vCPU id sanity check (bsc#1012628). - scsi: mpt3sas: Fix ioctl timeout (bsc#1012628). - io_uring: fix recvmsg setup with compat buf-select (bsc#1012628). - dm writecache: advance the number of arguments when reporting max_age (bsc#1012628). - dm writecache: fix the maximum number of arguments (bsc#1012628). - powerpc/64s/powernv: Fix memory corruption when saving SLB entries on MCE (bsc#1012628). - genirq/irqdomain: Add an irq_create_mapping_affinity() function (bsc#1012628). - powerpc/pseries: Pass MSI affinity to irq_create_mapping() (bsc#1012628). - dm: fix bug with RCU locking in dm_blk_report_zones (bsc#1012628). - dm: fix double RCU unlock in dm_dax_zero_page_range() error path (bsc#1012628). - dm: remove invalid sparse __acquires and __releases annotations (bsc#1012628). - x86/uprobes: Do not use prefixes.nbytes when looping over prefixes.bytes (bsc#1012628). - coredump: fix core_pattern parse error (bsc#1012628). - mm: list_lru: set shrinker map bit when child nr_items is not zero (bsc#1012628). - mm/swapfile: do not sleep with a spin lock held (bsc#1012628). - hugetlb_cgroup: fix offline of hugetlb cgroup with reservations (bsc#1012628). - Revert "amd/amdgpu: Disable VCN DPG mode for Picasso" (bsc#1012628). - iommu/amd: Set DTE[IntTabLen] to represent 512 IRTEs (bsc#1012628). - mm: memcg/slab: fix obj_cgroup_charge() return value handling (bsc#1012628). - lib/syscall: fix syscall registers retrieval on 32-bit platforms (bsc#1012628). - can: af_can: can_rx_unregister(): remove WARN() statement from list operation sanity check (bsc#1012628). - gfs2: check for empty rgrp tree in gfs2_ri_update (bsc#1012628). - netfilter: ipset: prevent uninit-value in hash_ip6_add (bsc#1012628). - ASoC: wm_adsp: fix error return code in wm_adsp_load() (bsc#1012628). - gfs2: Fix deadlock dumping resource group glocks (bsc#1012628). - gfs2: Don't freeze the file system during unmount (bsc#1012628). - rtw88: debug: Fix uninitialized memory in debugfs code (bsc#1012628). - i2c: qcom: Fix IRQ error misassignement (bsc#1012628). - i2c: qup: Fix error return code in qup_i2c_bam_schedule_desc() (bsc#1012628). - dm writecache: remove BUG() and fail gracefully instead (bsc#1012628). - Input: i8042 - fix error return code in i8042_setup_aux() (bsc#1012628). - netfilter: nf_tables: avoid false-postive lockdep splat (bsc#1012628). - netfilter: nftables_offload: set address type in control dissector (bsc#1012628). - netfilter: nftables_offload: build mask based from the matching bytes (bsc#1012628). - x86/insn-eval: Use new for_each_insn_prefix() macro to loop over prefixes bytes (bsc#1012628). - Revert "geneve: pull IP header before ECN decapsulation" (bsc#1012628). - bpf: Fix propagation of 32-bit signed bounds from 64-bit bounds (bsc#1012628). - commit 960bcea - Update patches.suse/tty-Fix-pgrp-locking-in-tiocspgrp.patch (bsc#1179745 CVE-2020-29661). - Update patches.suse/tty-Fix-session-locking.patch (bsc#1179745 CVE-2020-29660). Add CVE numbers. - commit 1329f77 - Update config files to disable CONFIG_DEBUG_SECTION_MISMATCH (bsc#1177403) - commit a0a476d - Linux 5.9.13 (bsc#1012628). - devlink: Hold rtnl lock while reading netdev attributes (bsc#1012628). - devlink: Make sure devlink instance and port are in same net namespace (bsc#1012628). - ipv6: addrlabel: fix possible memory leak in ip6addrlbl_net_init (bsc#1012628). - net/af_iucv: set correct sk_protocol for child sockets (bsc#1012628). - net: openvswitch: fix TTL decrement action netlink message format (bsc#1012628). - net/tls: missing received data after fast remote close (bsc#1012628). - net/tls: Protect from calling tls_dev_del for TLS RX twice (bsc#1012628). - rose: Fix Null pointer dereference in rose_send_frame() (bsc#1012628). - sock: set sk_err to ee_errno on dequeue from errq (bsc#1012628). - tcp: Set INET_ECN_xmit configuration in tcp_reinit_congestion_control (bsc#1012628). - tun: honor IOCB_NOWAIT flag (bsc#1012628). - usbnet: ipheth: fix connectivity with iOS 14 (bsc#1012628). - vsock/virtio: discard packets only when socket is really closed (bsc#1012628). - mptcp: fix NULL ptr dereference on bad MPJ (bsc#1012628). - net/packet: fix packet receive on L3 devices without visible hard header (bsc#1012628). - netfilter: bridge: reset skb->pkt_type after NF_INET_POST_ROUTING traversal (bsc#1012628). - ipv4: Fix tos mask in inet_rtm_getroute() (bsc#1012628). - dt-bindings: net: correct interrupt flags in examples (bsc#1012628). - chelsio/chtls: fix panic during unload reload chtls (bsc#1012628). - ibmvnic: Ensure that SCRQ entry reads are correctly ordered (bsc#1012628). - ibmvnic: Fix TX completion error handling (bsc#1012628). - tipc: fix incompatible mtu of transmission (bsc#1012628). - inet_ecn: Fix endianness of checksum update when setting ECT(1) (bsc#1012628). - geneve: pull IP header before ECN decapsulation (bsc#1012628). - net: ip6_gre: set dev->hard_header_len when using header_ops (bsc#1012628). - dpaa_eth: copy timestamp fields to new skb in A-050385 workaround (bsc#1012628). - cxgb3: fix error return code in t3_sge_alloc_qset() (bsc#1012628). - net: pasemi: fix error return code in pasemi_mac_open() (bsc#1012628). - vxlan: fix error return code in __vxlan_dev_create() (bsc#1012628). - chelsio/chtls: fix a double free in chtls_setkey() (bsc#1012628). - net: mvpp2: Fix error return code in mvpp2_open() (bsc#1012628). - net: skbuff: ensure LSE is pullable before decrementing the MPLS ttl (bsc#1012628). - net: openvswitch: ensure LSE is pullable before reading it (bsc#1012628). - net/sched: act_mpls: ensure LSE is pullable before reading it (bsc#1012628). - net/mlx5: DR, Proper handling of unsupported Connect-X6DX SW steering (bsc#1012628). - net/mlx5: Fix wrong address reclaim when command interface is down (bsc#1012628). - net: mlx5e: fix fs_tcp.c build when IPV6 is not enabled (bsc#1012628). - ALSA: usb-audio: US16x08: fix value count for level meters (bsc#1012628). - Input: xpad - support Ardwiino Controllers (bsc#1012628). - Input: i8042 - add ByteSpeed touchpad to noloop table (bsc#1012628). - Input: atmel_mxt_ts - fix lost interrupts (bsc#1012628). - tracing: Fix alignment of static buffer (bsc#1012628). - tracing: Remove WARN_ON in start_thread() (bsc#1012628). - uapi: fix statx attribute value overlap for DAX & MOUNT_ROOT (bsc#1012628). - drm/i915/gt: Fixup tgl mocs for PTE tracking (bsc#1012628). - commit 3dfd18b - tty: Fix ->session locking (bsc#1179745). - tty: Fix ->pgrp locking in tiocspgrp() (bsc#1179745). - commit 9455f8b - net/x25: prevent a couple of overflows (bsc#1178590). - commit 2a06597 ==== kubernetes ==== Version update (1.19.4 -> 1.20.0) Subpackages: kubernetes-client kubernetes-kubeadm kubernetes-kubelet - Fix typo in *minus1 version definition - Bump kubernetes to 1.20.0 and assign 1.19.4 to *minus1 packages ==== kustomize ==== Version update (3.8.7 -> 3.9.0) - Update to version 3.9.0 - Auto update go.sum - Pin kustomize to api/v0.7.0, enabling kyaml by default - Flip default value of --enable_kyaml from false to true. - Update to version 3.8.8 - Pin kustomize to api/v0.6.7 - Pin to api v0.6.7 - Unpin kustomize from api. - Pin to api v0.6.6 - Pin to cmd/config v0.8.6 - Pin to kyaml v0.10.3 cliutils v0.22.1 - Automated Go mod cache updates. - Revert "helm values on inflator config" - helm values on inflator config spec. - connected allowresourcesidchanges bool to allow_id_changes flag - Automated go.sum updates. - update Go version to 1.15 - Use DepProvider in tests to access kyaml impls. - mark the list-builtin command alpha - Add command to list builtin plugins - added kustomize edit set label - Unpin everything post v3.8.7 release - Refresh vendor.tar.xz ==== libressl ==== Version update (3.2.2 -> 3.2.3) Subpackages: libcrypto46 libssl48 libtls20 - Update to release 3.2.3 * Fixed: Malformed ASN.1 in a certificate revocation list or a timestamp response token could lead to a NULL pointer dereference. ==== libzypp ==== Version update (17.25.2 -> 17.25.5) - Fix lsof monitoring (bsc#1179909) - version 17.25.5 (22) - Prevent librpmDb iterator from accidentally creating an empty rpmdb in / (repoened bsc#1178910) - Fix update of gpg keys with elongated expire date (bsc#1179222) - needreboot: remove udev from the list (bsc#1179083) - Prefer /run over /var/run. - version 17.25.4 (22) - RepoManager: Carefully tidy up the caches. Remove non-directory entries. (bsc#1178966) - RpmDb: If no database exists use the _dbpath configured in rpm. Still makes sure a compat symlink at /var/lib/rpm exists in case the configures _dbpath is elsewhere. (bsc#1178910) - Url: Hide known password entries when writing the query part (bsc#1050625 bsc#1177583, CVE-2017-9271) - adapt testcase to change introduced by libsolv#402. - RepoManager: Force refresh if repo url has changed (bsc#1174016) - RepoInfo: ignore legacy type= in a .repo file and let RepoManager probe (bsc#1177427, Fixes openSUSE/zypper#357). - version 17.25.3 (22) ==== lvm2 ==== Subpackages: liblvm2cmd2_03 - lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691) - change external_device_info_source from none to udev - comment out lvm.conf item preferred_names by default (bsc#1179738) - comment out preferred_names - Update lvm.conf, make it closely to upstream's setting (bsc#1179739) - change lvm.conf, follow upstream 7b41ea61b2e33dbfad754fd4c6e7851faf7ca5ef ==== lvm2-device-mapper ==== Subpackages: device-mapper libdevmapper-event1_03 libdevmapper1_03 - lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691) - change external_device_info_source from none to udev - comment out lvm.conf item preferred_names by default (bsc#1179738) - comment out preferred_names - Update lvm.conf, make it closely to upstream's setting (bsc#1179739) - change lvm.conf, follow upstream 7b41ea61b2e33dbfad754fd4c6e7851faf7ca5ef ==== open-lldp ==== Version update (1.1+15.ef8495548d04 -> 1.1+18.0e969d0edcc4) Subpackages: liblldp_clif1 - Update to version v1.1+18.0e969d0edcc4: * event_iface: only set rcv buf size if too small (bsc#1175570) ==== openldap2 ==== Version update (2.4.55 -> 2.4.56) - updated to 2.4.56 OpenLDAP 2.4.56 Release (2020/11/10) Fixed slapd to remove assert in certificateListValidate (ITS#9383) Fixed slapd to remove assert in csnNormalize23 (ITS#9384) Fixed slapd to better parse ldapi listener URIs (ITS#9379) ==== patterns-microos ==== Subpackages: patterns-microos-alt_onlyDVD patterns-microos-apparmor patterns-microos-base patterns-microos-basesystem patterns-microos-cloud patterns-microos-cockpit patterns-microos-defaults patterns-microos-hardware patterns-microos-ima_evm patterns-microos-onlyDVD patterns-microos-selinux patterns-microos-sssd_ldap - Ensure gnome-session-wayland is pulled by GNOME desktop pattern. - Add desktop-common pattern for packages common to GNOME and KDE patterns - Some small cleanups, also because of the source formatter... - Use proper icons for desktop patterns - Switch the KDE pattern from plasma5-pk-updates to discover-notifier and add plasma-browser-integration ==== python-M2Crypto ==== Version update (0.36.0 -> 0.37.1) - Update to 0.37.1: - Remove support for CentOS 6 and Python 2.6 (remove tests.vendor module). Python 2.7 is still fully supported. - Remodel CI: - on GitHub switched from Travis-CI to GH Actions - on GitLab-CI: stop testing 2.7 on Fedora, add centos7 - update appveyor.yml - Stop playing with swig in setup.py, we don't support swig 1.* anymore. - Fix dereferencing of pointers (gl#m2crypto/m2crypto#281) - Replace deprecated PyObject_AsReadBuffer with our own shim (thanks to Casey Deccio for saving my bacon there). - Use parametrized to create parametrized tests (new external dependency). - Only use DigestSign() and DigestUpdate() with OpenSSL >= 1.1.1 - Expose all the X509_V_FLAG - Add support for DigestSign* and DigestVerify* ==== python-PrettyTable ==== - Update URL/Source0 due to Google Code Hosting being dead since 2016 ==== python-cryptography ==== Version update (3.2.1 -> 3.3) - update to 3.3.0 - BACKWARDS INCOMPATIBLE: Support for Python 3.5 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: The GCM and AESGCM now require 64-bit to 1024-bit (8 byte to 128 byte) initialization vectors. This change is to conform with an upcoming OpenSSL release that will no longer support sizes outside this window. - BACKWARDS INCOMPATIBLE: When deserializing asymmetric keys we now raise ValueError rather than UnsupportedAlgorithm when an unsupported cipher is used. This change is to conform with an upcoming OpenSSL release that will no longer distinguish between error types. - BACKWARDS INCOMPATIBLE: We no longer allow loading of finite field Diffie-Hellman parameters of less than 512 bits in length. This change is to conform with an upcoming OpenSSL release that no longer supports smaller sizes. These keys were already wildly insecure and should not have been used in any application outside of testing. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1i. - Python 2 support is deprecated in cryptography. This is the last release that will support Python 2. - Added the recover_data_from_signature() function to RSAPublicKey for recovering the signed data from an RSA signature. - Remove unnecessary dependency virtualenv. ==== python-psutil ==== - Only require unittest2 for Leap. - Add missing BR for unittest2 ==== systemd ==== Version update (246.6 -> 246.7) Subpackages: libsystemd0 libudev1 systemd-logger systemd-sysvinit udev - Import commit d5e7958d35dc7758fe2e87e0a8193b93ce1a1b15 (merge of v246.7) 450792497e sd-event: fix delays assert brain-o (#17790) 1040a19d08 udevadm: rename option '--log-priority' into '--log-level' a7b41e19bd udev: rename kernel option 'log_priority' into 'log_level' For a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/f6104ea5f554233e34b94ffd92da833… ==== u-boot-rpiarm64 ==== Subpackages: u-boot-rpiarm64-doc - Add bananapim2zero flavor - Introduce odroid-c4 ==== zypper ==== Version update (1.14.40 -> 1.14.41) Subpackages: zypper-needs-restarting - Avoid translated text in xml attributes ( fixes #361 ) - BuildRequires: libzypp-devel >= 17.25.3. Adapt to new LoadTestcase API. - version 1.14.41

1 0

Re: Kubic Arm64 Raspberry Pi Images
by Anthony J Rabbito 15 Dec '20

15 Dec '20

Hi Nicolas, I have never tested this board with a UEFI image though worked fine with for example Ubuntu's image. I have a heatsink and enclosure on this Pi so I'd prefer not taking that apart. /proc/cpuinfo reads Hardware : BCM2711 Revision : d03114 Serial : 1000000056af08e4 Model : Raspberry Pi 4 Model B Rev 1.4 Let me know if that's not sufficient. I actually plan to compile edk2 today or tomorrow and see how it goes. Since it makes more sense to pass combustion/ignition via iPXE. Some more useful information while I'm booted into raspbian. BCM2711 detected VL805 firmware in bootloader EEPROM BOOTLOADER: up-to-date CURRENT: Tue 24 Nov 15:08:04 UTC 2020 (1606230484) LATEST: Tue 24 Nov 15:08:04 UTC 2020 (1606230484) FW DIR: /lib/firmware/raspberrypi/bootloader/beta VL805: up-to-date CURRENT: 000138a1 LATEST: 000138a1 https://github.com/raspberrypi/firmware/issues/1445#issuecomment-708822669 This issue is exactly what im facing and it looks like those patches have landed in the raspberry Pi firmware but not the MicroOS images? For clarity MicroOS boots fine on 4GB models just not 8GBs. Thank you, Anthony On Tue, Dec 15, 2020 at 7:46 AM Nicolas Saenz Julienne < nsaenzjulienne(a)suse.de> wrote: > Hi Anthony, > has this specifc board worked fine in tha past? > > Can you please provide the model number on your processor? For example see > this > image: https://i.imgur.com/IqtP2d0.jpg on which I read > "bcm2711zpksb06b0t". > > Regards, > Nicolas > > On Tue, 2020-12-15 at 12:21 +0000, Guillaume Gardet wrote: > > Ah, I checked raspberrypi-firmware instead of > raspberrypi-firmware-eeprom. > > And https://github.com/raspberrypi/firmware/issues/1445 is about > RPi0/1/2/3 firmware, not RPi4 firmware. > > > > For RPi4, we currently have the latest tagged version > https://github.com/raspberrypi/rpi-eeprom/tags > > > > I cc Nicolas as he may know something. > > > > Cheers, > > Guillaume > > > > > > From: Anthony J Rabbito <hello(a)anthonyrabbito.com> > > Sent: 15 December 2020 12:48 > > To: Guillaume Gardet <Guillaume.Gardet(a)arm.com>; > kubic(a)lists.opensuse.org > > Subject: Re: Kubic Arm64 Raspberry Pi Images > > > > Here's the latest boot sequence on a 8GB Pi as of yesterday. > https://photos.app.goo.gl/ZuxVAtdBdZ499S187 > > > > Still included. Seems like the firmware files just need updating. > Testing against stable and beta EEPROM. > > > > Thanks > > Anthony > > > > On Tue, Dec 15, 2020, 3:19 AM Guillaume Gardet <Guillaume.Gardet(a)arm.com> > wrote: > > > > > > > > > > -----Original Message----- > > > > From: Richard Brown <rbrown(a)suse.de> > > > > Sent: 14 December 2020 19:24 > > > > To: kubic(a)lists.opensuse.org > > > > Subject: Re: Kubic Arm64 Raspberry Pi Images > > > > > > > > On Mon, 2020-12-14 at 10:22 -0500, Anthony J Rabbito wrote: > > > > > Hi all, > > > > > > > > > > Would it be possible to bump the bundled EFI firmware for Kubic on > > > > > Raspberry Pi? There's a current bug in the latest snapshot > preventing > > > > > Raspberry Pi 4 8GB models from booting. > > > > > > > > > > https://github.com/raspberrypi/firmware/issues/1445 > > > > > > This should be fixed already since this issue has been closed in > October and the current firmware is from 2020.12.08. > > > > > > Please double check the problem is still present with latest firmware > from Tumbleweed. Maybe you have a different problem which would need to be > reported upstream? > > > > > > Cheers, > > > Guillaume > > > > > > > > > > > > > > It should be possible. Can you confirm the problem also happens on > Tumbleweed > > > > RPi JeOS Images? There shouldn't be anything different on those > images > > > > firmware-wise _______________________________________________ > > > > openSUSE Kubic mailing list -- kubic(a)lists.opensuse.org To > unsubscribe, email > > > > kubic-leave(a)lists.opensuse.org List Netiquette: > > > > https://en.opensuse.org/openSUSE:Mailing_list_netiquette > > > > List Archives: > https://lists.opensuse.org/archives/list/kubic@lists.opensuse.org > > > _______________________________________________ > > > openSUSE Kubic mailing list -- kubic(a)lists.opensuse.org > > > To unsubscribe, email kubic-leave(a)lists.opensuse.org > > > List Netiquette: > https://en.opensuse.org/openSUSE:Mailing_list_netiquette > > > List Archives: > https://lists.opensuse.org/archives/list/kubic@lists.opensuse.org > > IMPORTANT NOTICE: The contents of this email and any attachments are > confidential and may also be privileged. If you are not the intended > recipient, please notify the sender immediately and do not > > disclose the contents to any other person, use it for any purpose, or > store or copy the information in any medium. Thank you. > > >

2 1

RE: Kubic Arm64 Raspberry Pi Images
by Guillaume Gardet 15 Dec '20

15 Dec '20

Ah, I checked raspberrypi-firmware instead of raspberrypi-firmware-eeprom. And https://github.com/raspberrypi/firmware/issues/1445<https://github.com/raspberrypi/firmware/issues/1445%20> is about RPi0/1/2/3 firmware, not RPi4 firmware. For RPi4, we currently have the latest tagged version https://github.com/raspberrypi/rpi-eeprom/tags I cc Nicolas as he may know something. Cheers, Guillaume From: Anthony J Rabbito <hello(a)anthonyrabbito.com> Sent: 15 December 2020 12:48 To: Guillaume Gardet <Guillaume.Gardet(a)arm.com>; kubic(a)lists.opensuse.org Subject: Re: Kubic Arm64 Raspberry Pi Images Here's the latest boot sequence on a 8GB Pi as of yesterday. https://photos.app.goo.gl/ZuxVAtdBdZ499S187 Still included. Seems like the firmware files just need updating. Testing against stable and beta EEPROM. Thanks Anthony On Tue, Dec 15, 2020, 3:19 AM Guillaume Gardet <Guillaume.Gardet(a)arm.com<mailto:Guillaume.Gardet@arm.com>> wrote: > -----Original Message----- > From: Richard Brown <rbrown(a)suse.de<mailto:rbrown@suse.de>> > Sent: 14 December 2020 19:24 > To: kubic(a)lists.opensuse.org<mailto:kubic@lists.opensuse.org> > Subject: Re: Kubic Arm64 Raspberry Pi Images > > On Mon, 2020-12-14 at 10:22 -0500, Anthony J Rabbito wrote: > > Hi all, > > > > Would it be possible to bump the bundled EFI firmware for Kubic on > > Raspberry Pi? There's a current bug in the latest snapshot preventing > > Raspberry Pi 4 8GB models from booting. > > > > https://github.com/raspberrypi/firmware/issues/1445 This should be fixed already since this issue has been closed in October and the current firmware is from 2020.12.08. Please double check the problem is still present with latest firmware from Tumbleweed. Maybe you have a different problem which would need to be reported upstream? Cheers, Guillaume > > It should be possible. Can you confirm the problem also happens on Tumbleweed > RPi JeOS Images? There shouldn't be anything different on those images > firmware-wise _______________________________________________ > openSUSE Kubic mailing list -- kubic(a)lists.opensuse.org<mailto:kubic@lists.opensuse.org> To unsubscribe, email > kubic-leave(a)lists.opensuse.org<mailto:kubic-leave@lists.opensuse.org> List Netiquette: > https://en.opensuse.org/openSUSE:Mailing_list_netiquette > List Archives: https://lists.opensuse.org/archives/list/kubic@lists.opensuse.org _______________________________________________ openSUSE Kubic mailing list -- kubic(a)lists.opensuse.org<mailto:kubic@lists.opensuse.org> To unsubscribe, email kubic-leave(a)lists.opensuse.org<mailto:kubic-leave@lists.opensuse.org> List Netiquette: https://en.opensuse.org/openSUSE:Mailing_list_netiquette List Archives: https://lists.opensuse.org/archives/list/kubic@lists.opensuse.org IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.

1 0

Kubic Arm64 Raspberry Pi Images
by Anthony J Rabbito 15 Dec '20

15 Dec '20

Hi all, Would it be possible to bump the bundled EFI firmware for Kubic on Raspberry Pi? There's a current bug in the latest snapshot preventing Raspberry Pi 4 8GB models from booting. https://github.com/raspberrypi/firmware/issues/1445

3 2