June 2021 - openSUSE Kubic - openSUSE Mailing Lists

New ARM Kubic snapshot 20210614 released!
by Guillaume Gardet 16 Jun '21

16 Jun '21

Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=3&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: augeas gptfdisk (1.0.6 -> 1.0.8) grub2 hidapi libxslt multipath-tools podman (3.1.2 -> 3.2.0) sssd (2.5.0 -> 2.5.1) === Details === ==== augeas ==== - Allow all printable ASCII characters in WPA-PSK definition * augeas-allow_printable_ASCII.patch * bsc#1185524 * Sourced from https://github.com/hercules-team/augeas/pull/723/commits * Credit to Michal Filka <mfilka(a)suse.com> - Add new directives and options supported in chrony since 3.3 up to 4.0. * augeas-new_options_for_chrony.patch * [bsc#1178470] * sourced from https://github.com/hercules-team/augeas/pull/698 - update to 1.12.0 General changes/additions - update gnulib to 91584ed6 Lens changes/additions - Anaconda: new lens to process /etc/sysconfig/anaconda instead of Shellvars (Pino Toscano) (Issue #597) - DevfsRules: add lens for FreeBSD devfs.rules files - Dovecot: permit ! in block titles (Nathan Ward) (Issue #599) - Hostname: Allow creation of hostname when file is missing (David Farrell) (Issue #606) - Krb5: add more pkinit_* options (Issue #603) - Logrotate: fix missing recognition of double quoted filenames (Issue #611) - Multipath: accept values enclosed in quotes (Issue #583) - Nginx: support unix sockets as server address (Issue #618) - Nsswitch: add merge action (Issue #609) - Pam: accept continuation lines (Issue #590) - Puppetfile: allow symbols as (optional) values (Issue #619) allow comments in entries (Issue #620) - Rsyslog: support dynamic file paths (Issue #622) treat #!/+/- as comment (arnolda, PR #595) - Syslog: accept 'include' directive (Issue #486) - Semanage: new lens to process /etc/selinux/semanage.conf instead of Simplevars (Pino Toscano) (Issue #594) - Shellvars: allow and/or in @if conditions (#582) accept functions wrapped in round brackets, accept variables with a dash in their name, exclude csh/tcsh profile scripts (Pino Toscano) (Issue #600) accept variable as command (Issue #601) - Ssh: accept RekeyLimit (Issue #605) - Sshd: accept '=' to separate option names from their values (Emil Dragu, #587) - Sudoers: support 'always_query_group_plugin' flag (Steve Traylen, #588) - Strongswan: parse lists. This is a backwards-incompatible change since list entries that were parsed into a single string are now split into a list of entries (Kaarle Ritvanen) - Toml: new lens to parse .toml files (PR #91) - Xorg: accept empty values for options (arnolda, PR #596) - refresh patches - run spec-cleaner - Add gcc9-disable-broken-test.patch in order to address bsc#1120894. - Don't ignore %check test result, the testsuite now successfully passes - update to 1.11.0 General changes/additions - augmatch: add a --quiet option; make the exit status useful to tell whether there was a match or not - Drastically reduce the amount of memory needed to evaluate complex path expressions against large files (Issue #569) - Fix a segfault on OSX when 'augmatch' is run without any arguments (Issue #556) API changes - aug_source did not in fact return the source; and always returned NULL for that. That has been fixed. Lens changes/additions - Chrony: add new options supported in chrony 3.2 and 3.3 (Miroslav Lichvar) - Dhclient: fix parsing of append/prepend and similar directives (John Morrissey) - Fstab: allow leading whitespace in mount entry lines (Pino Toscano) (Issue #544) - Grub: tolerate some invalid entries. Those invalid entries get mapped to '#error' nodes - Httpd: accept comments with whitespace right after a tag opening a section (Issue #577) - Json: allow escaped slashes in strings (Issue #557) - Multipath: accept regular expressions for devnode, wwid, and property in blacklist and blacklist_exceptions sections (Issue #564) - Nginx: parse /etc/nginx/sites-enabled (plumbeo) allow semicolons inside double quoted strings in simple directives, and allow simple directives without an argument (Issue #566) - Redis: accept the 'bind' statement with multiple IP addresses (yannh) (Issue #194) - Rsyslog: support include() directive introduced in rsyslog 8.33 - Strongswan: new lens (Kaarle Ritvanen) - Systemd: do not try to treat *.d or *.wants directories as configuration files (Issue #548) - Fix RPM groups. - update to 1.10.1: General changes/additions New CLI utility 'augmatch' to print the tree for a file and select some of its contents New command 'count' in augtool New function 'not(bool) -> bool' for path expressions The path expression 'label[. = "value"]' can now be written more concisely as 'label["value"]' API changes libfa has now a function fa_json to export an FA as a JSON file, and fa_state_* functions that make it possible to iterate over the FA's states and transitions. (Pedro Valero Mejia) Add functions aug_ns_label, aug_ns_value, aug_ns_count, and aug_ns_path to get the label (with index), the value, the number of nodes, and the fully qualified path for nodes stored in a nodeset in a variable efficiently Lens changes/additions Grubenv: new lens to process /boot/grub/grubenv (omgold) Httpd: also read files from /etc/httpd/conf.modules.d/*.conf (Tomas Meszaros) (Issue #537) Nsswitch: allow comments at the end of a line (Philip Hahn) (Issue #517) Ntp: accept 'ntpsigndsocket' statement (Philip Hahn) (Issue #516) Properties: accept empty comments with DOS line endings (Issue #161) Rancid: new lens for RANCiD router databases (Matt Dainty) Resolv: accept empty comments with DOS line endings (Issue #161) Systemd: also process /etc/systemd/logind.conf (Pat Riehecky) YAML: process a document that is just a sequence (John Vandenberg) - drop chrpath dependency, the offending dump binary is no longer shipped - Use %license (boo#1082318) - Version update to 1.9.0: - General changes/additions * Fix error in handling escaped whitespace at the end of path expressions (addresses CVE-2017-7555) * several improvements to the error messages when transforming a tree back to text fails. They now make it clearer what part of the tree was problematic, and what the tree should have looked like. * Fixed the pkg-config file, which should now be usable * Fix handling of backslash-escaping in strings and regular expressions in the lens language. We used to handle constructs like "\\" and /\\\\/ incorrectly. (Issue #495) * do not unescape the default value of a del on create; otherwise we are double unescaping these strings (Issue #507) * remove tempfile when saving files because destination is not writable (Issue #479) * span information is now updated on save (Issue #467) * fix lots of warnings generated by gcc 7.1 * Various changes to reduce bashisms in tests and make them run on FreeBSD (Romain Tartière) - API changes * add function aug_ns_attr to allow iterating through a nodeset quickly. See examples/dump.c for an example of how to use them instead of aug_get, aug_label etc. and for a way to measure performance gains. - Lens changes/additions * Ceph: new lens for /etc/ceph/ceph.conf * Cgconfig: accept fperm & dperm in admin & task (Pino Toscano) * Dovecot: also load files from /usr/local/etc (Roy Hubbard) * Exports: relax the rules for the path at the beginning of a line so that double-quoted paths are legal, too * Getcap: new lens to parse generic termcap-style capability databases * Grub: accept toplevel 'boot' entry (Pino Toscano) * Httpd: handle empty comments with a continuation line (Issue #423); handle '>""' in a directive properly (Issue #429); make space between quoted arguments optional (Issue #435); accept quoted strings as part of bare arguments (Issue #470) * Nginx: load files from sites-available directory (Omer Katz) (Issue #471) * Nslcd: new lens for nss-pam-ldapd config (Jose Plana) * Oz: New lense for /etc/oz/oz.cnf * postfix lenses: also load files from /usr/local/etc (Roy Hubbard) * Properties: accept DOS line endings (Issue #468) * Rtadvd: new lens to parse the rtadvd configuration file (Matt Dainty) * Rsyslog: load files from /etc/rsyslog.d (Doug Wilson) (Issue #475); allow spaces before the # starting a comment; allow comments inside config statements like 'module' * Ssh: accept '=' to separate keyword from arguments * Sshd: split HostKeyAlgorithms into list of values; recognize quoted group names with spaces in them (Issue #477) * Sudoers: recognize "match_group_by_gid" (Luigi Toscano) (Issue #482) * Syslog: allow spaces before the # starting a comment * Termcap: new lens to parse termcap capability databases (Matt Dainty) * Vsftpd: accept seccomp_sandbox (Denys Stroebel) * Xymon: accept 'group-sorted' directive (Issue #462) - Version update to 1.8.0: * See the News file for all the details - Verified it contains fixes for bsc#933210 bsc#975729 bsc#925225 bsc#1023204 CVE-2014-8119 - Version update to 1.6.0: * See the NEWS file for the details - Update to version 1.5.0: - General changes/additions * augtool: new --timing option that prints after each operation how long it took * augtool: print brief help message when incorrect options are given rather than dumping all help text * Path expressions: optimize performance of evaluating certain expressions * lots of safety improvements in libfa to avoid using uninitialized values and the like (Daniel Trebbien) * tolerate building against OSX' libedit (Issue #256) - API changes * aug_match: fix a bug where expressions like /foo/*[2] would match a hidden node and pretend there was no match at all. We now make sure we never match a hidden node. Thanks to Xavier Mol for reporting the problem. * aug_get: make sure we set *value to NULL, even if the provided path is invalid (Issue #372) * aug_rm: fix segfault when deleting a tree and one of its ancestors (Issue #319) * aug_save: fix segfault when trying to save an invalid subtree. A routine that was generating details for the error message overflowed a buffer it had created (Issue #349) - Lens changes/additions * AptConf: support hash comments * AptSources: support options (Issue #295), support brackets with spaces in URI (GH #296) rename test file to test_aptsources.aug * Chrony: allow signed numbers and indentation, fix stray EOL entry, disallow comment on EOL, add many missing directives and options (Miroslav Lichvar, RHBZ#1213281) add new directives and options that were added in chrony-2.2 and chrony-2.3 and improve parsing of access configuration (Miroslav Lichvar, Issue #348) add new options for chrony-2.4 (Miroslav Lichvar) * Dhclient: avoid put ambiguity for node without value (Issue #294) * Group: support NIS map, support an overridden and disabled password, i.e. `+:*::` (Matt Dainty) (Issue #258) * Host_Conf: support spaces between list items (Cedric Bosdonnat, Issue #358) * Httpd: add paths to SLES vhosts (Jan Doleschal) (Issue #268) parse backslashes in directive arguments (Issue #307) parse mismatching case of opening/closing tags parse multiple ending section tags on one line parse wordlists in braces in SSLRequire directives parse directive args starting with double quote (Issue #330) parse directive args containing quotes support perl directives (Issue #327) parse line breaks/continuations in section arguments parse escaped spaces in directive/section arguments parse backslashes at the start of directive args (Issue #324) * Inputrc: support $else (Cedric Bosdonnat, Issue #359) * Interfaces: add support for source-directory (Issue #306) * Json: add comments support, refactor, allow escaped quotes and blackslashes * Keepalived: fix space/tag alignments and hanging spaces, add vrrp_mcast_group4 and vrrp_mcast_group6, add more vrrp_instance flags, add mcast/unicast_src_ip and unicast_peer, add missing garp options, add vrrp_script options, expand vrrp_sync_group block, allow notify option (Joe Topjian) (Issue #266) * Known_Hosts: refactoring and description fixed * Logrotate: support dateyesterday option (Chris Reeves) (GH #367, #368) * MasterPasswd: new lens to parse /etc/master.passwd (Matt Dainty) (Issue #258) * Multipath: add various missing keywoards (Olivier Mangold) (Issue #289) * MySQL: include /etc/my.cnf.d/*.cnf (Issue #353) * Nginx: improve typechecking of lens, allow masks in IP keys and IPv6 (Issue #260) add @server simple nodes (Issue #335) * Ntp: add support for basic interface syntax * OpenShift_Quickstarts: Use Json.lns * OpenVPN: add all options available in OpenVPN 2.3o (Justin Akers) (Issue #278) * Puppetfile: name separator is not mandatory add support for moduledir (Christoph Maser) * Rabbitmq: remove space in option name, add support for cluster_partitioning_handling, add missing simple options (Joe Topjian) (Issue #264) * Reprepro_Uploaders: add support for distribution field (Mathieu Alorent) (Issue #277), add support for groups (Issue #283) * Rhsm: new lens to parse subscription-manager's /etc/rhsm/rhsm.conf * Rsyslog: improve property filter parsing, treat whitespace after commas as optional. recognize '~' as a valid syslog action (discard) (Gregory Smith) (Issue #282), add support for redirecting output to named pipes (Gerlof Fokkema) (Issue #366) * Shellvars: allow partial quoting, mixing multiple styles (Kaarle Ritvanen) (Issue #183); allow wrapping builtin argument to multiple lines (Kaarle Ritvanen) (Issue #184); support ;; on same line with multiple commands (Kaarle Ritvanen) (Issue #185); allow line wrapping and improve quoting support (Kaarle Ritvanen) (Issue #187); accept [] and [[]] builtins (Issue #188); allow && and || constructs after condition (Kaarle Ritvanen) (Issue #265); add pattern nodes in case entries (BREAKING CHANGE: case entry values are now in a @pattern subnode) (Kaarle Ritvanen) (Issue #265) add eval builtin support; add alias builtin support; allow (almost) any command; allow && and || after commands (Issue #215); allow wrapping command sequences (Kaarle Ritvanen) (Issue #333); allow command-specific environment variable (Kaarle Ritvanen) (Issue #332); support subshells (Issue #339) newlines in start of functions allow newlines after actions support comments after function name (Issue #339) exclude SuSEfirewall2 (Cedric Bosdonnat, Issue #357) * Simplelines: parse OpenBSD's hostname.if(5) files (Jasper Lievisse Adriaanse) (Issue #252) * Smbusers: add support for ; comments * Spacevars: support flags (Issue #279) * Ssh: add support for HostKeyAlgorithms, KexAlgorithms and PubkeyAcceptedKeyTypes (Oliver Mangold) (Issue #290), add support for GlobalKnownHostsFile (Issue #316) * Star: New lens to parse /etc/default/star * Sudoers: support for negated command alias (Geoff Williams) (Issue #262) * Syslog: recognize '~' as a valid syslog action (discard) (Gregory Smith) (Issue #282) * Tmpfiles: new lens to parse systemd's tempfiles.d configuration files (Julien Pivotto) (Issue #269) * Trapperkeeper: new lens for Puppet server configuration files * Util: add comment_c_style_or_hash lens add empty_any lens * Vsftpd: add isolate and isolate_network options (Florian Chazal) (Issue #334) * Xml: allow empty document (Issue #255) * YAML: new lens (subset) (Dimitar Dimitrov) (Issue #338) - Drop upstreamed patches: 27d8457-inputrc-lens-support-mapping-like.patch 2d12670-inputrc-lens-support-else.patch 49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch 7558c12-host_conf-lens-spaces-between-list-items-support.patch - Fix errors showing up in guestfs tools. Add upstreamed patches: 27d8457-inputrc-lens-support-mapping-like.patch 2d12670-inputrc-lens-support-else.patch 49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch 7558c12-host_conf-lens-spaces-between-list-items-support.patch - Version bump to 1.4.0: * Loads of bugfixes all around the package * Read up NEWS file for the detailed changes - Whitespace - restore keyring and .sig file, as this is checked by the OBS source service - Update to version 1.3.0 + General changes/additions * Add missing cp entry in manpage (GH issue #78) * Add seq to vim syntax highlight (Robert Drake) * Update augtool.1 man page with new commands and --span, RHBZ#1100077 * augtool autocomplete includes command aliases, RHBZ#1100184 * Remove unused "filename" argument from dump-xml command, RHBZ#1100106 * aug_save returns non-zero result when unable to delete files, RHBZ#1091143 + Lens changes/additions * Aliases: permit missing whitespace between colon and recipients * AptPreferences: Support spaces in origin fields * Cgconfig: handle additional valid controllers (Andy Grimm) * Chrony: New lens to parse /etc/chrony.conf (Pat Riehecky) * CPanel: New lens to parse cpanel.config files * Desktop: Allow @ in keys (GH issue #92) * Device_map: Parse all device.map files under /boot (Mike Latimer) * Dhclient: Add support for option modifiers (Robert Drake, GH issue #95) Parse hash statements with dhcp-eval strings * Dhcpd: stmt_string quoted blocks no longer store quote marks (incompatible change), many changes to support more record types (Robert Drake) * Group: NIS support (KaMichael) * Grub: handle "foreground" option, RHBZ#1059383 (Miguel Armas) * Gshadow: New lens (Lorenzo Catucci) * Httpd: Allow eol comments after section tags Allow continued lines inside quoted value (GH issue #104) Allow comparison operators in tags (GH issue #154) * IPRoute2: handle "/" in protocol name, swap ID and name fields (incompatible change), RHBZ#1063968, handle hex IDs and hyphens, as present in rt_dsfield, RHBZ#1063961 * Iptables: parse /etc/sysconfig/iptables.save, RHBZ#1144651 * Kdump: parse new options, permit EOL comments, refactor, RHBZ#1139298 * Keepalived: Add more virtual/real server settings and checks, RHBZ#1064388 * Known_Hosts: New lens for SSH known hosts files * Krb5: permit braces in values when not in sub-section, RHBZ#1066419 * Ldso: handle "hwcap" lines (GH issue #100) * Lvm: support negative numbers, parse /etc/lvm/lvm.conf (Pino Toscano) * Multipath: add support for rr_min_io_rq (Joel Loudermilk) * NagiosConfig and NagiosObjects: Fix documentation (Simon Sehier) * NetworkManager: Use the Quote module, support # in values (no eol comments) * OpenVPN: Add support for fragment, mssfix, and script-security (Frank Grötzner) * Pagekite: New lens (Michael Pimmer) * Pam: Add partial support for arguments enclosed in [] (Vincent Brillault) * Passwd: Refactor lens (Lorenzo Catucci) * Redis: Allow empty quoted values (GH issue #115) * Rmt: New lens to parse /etc/default/rmt, RHBZ#1100549 * Rsyslog: support complex $template lines, property filters and file actions with templates, RHBZ#1083016 * Services: permit colons in service name, RHBZ#1121263 * Shadow: New lens (Lorenzo Catucci) * Shellvars: Handle case statements with same-line ';;', RHBZ#1033799 Allow any kind of quoted values in block conditions (GH issue #118) Support $(( .. )) arithmetic expansion in variable assignment, RHBZ#1100550 * Simplevars: Support flags and empty values * Sshd: Allow all types of entries in Match groups (GH issue #75) * Sssd: Allow ; for comments * Squid: Support configuration files for squid 3 (Mykola Nikishov) * Sudoers: Allow wuoted string in default str/bool params (Nick Piacentine) * Syslog: Support "# !" style comments (Robert Drake, GH issue #65) Permit IPv6 loghost addresses, RHBZ#1129388 * Systemd: Allow quoted Environment key=value pairs, RHBZ#1100547 Parse /etc/sysconfig/*.systemd, RHBZ#1083022 Parse semicolons inside entry values, RHBZ#1139498 * Tuned: New lens for /etc/tuned/tuned-main.conf (Pat Riehecky) * UpdateDB: New lens to parse /etc/updatedb.conf (incompatible change as this file used to be processed with Simplevars) * Xml: Allow backslash in #attribute values (GH issue #145) Parse CDATA elements (GH issue #80) * Xymon_Alerting: refactor lens (GH issue #89) - Remove the sig and the keyring file as there is no gpg verification anyway - Remove augeas-device_map-grub2.patch, fixed on upstream release - Change desc to describe the "tools" not just the library bnc#885495. - Enable tests but "pass" them even with 2 failures. - Add check phase, comment out as 2 test fails now. - Clean up with spec-cleaner - Version bump to 1.2.0: - API changes * Add aug_cp and the cp and copy commands * aug_to_xml now includes span information in the XML dump - General changes/additions * Fix documentation link in c_api NaturalDocs menu * Fix NaturalDocs documentation for various lenses * src/transform.c (filter_matches): wrap fnmatch to ensure that an incl pattern containing "//" matches file paths, RHBZ#1031084 * Correct locations table for transform_save() (Tomas Hoger) * Corrections for CVE-2012-0786 tests (Tomas Hoger) * Fix umask handling when creating new files, RHBZ#1034261 - Lens changes/additions * Access: support DOMAIN\user syntax for users and groups, bug #353 * Authorized_Keys: Allow 'ssh-ed25519' as a valid authorized_key type (Jasper Lievisse Adriaanse) * Automounter: Handle hostnames with dashes in them, GH issue #27 * Build: Add combinatorics group * Cyrus_Imapd: Create new entries without space before separator, RHBZ#1014974 (Dietmar Kling) * Desktop: Support square brackets in keys * Dhclient: Add dhclient.conf path for Debian/Ubuntu (Esteve Fernandez) * Dhcpd: Support conditionals, GH issue #34 Support a wider variety of allow/deny statement, including booting and bootp (Yanis Guenane) Support a wider variety of DHCP allow/deny/ignore statements (Yanis Guenane) * Dovecot: Various enhancements and bug fixes (Michael Haslgrübler): add mailbox to block_names, fix for block_args in quotes, fix for block's brackets upon write, fixes broken tests for mailbox, fixes indention, test case for block_args with ", fixes broken indention Use Quote module * Exports: Permit colons for IPv6 client addresses, bug #366 * Grub: Support the 'setkey' and 'lock' directives NFC fix whitespace errors Handle makeactive menu command, bug #340 Add 'verbose' option, GH issue #73 * Interfaces: Add in support for the source stanza in /etc/network/interfaces files Map bond-slaves and bridge-ports to arrays (incompatible change) (Kaarle Ritvanen) Add /etc/network/interfaces.d/* support Allow numeric characters in stanza options (Pascal Lalonde) * Koji: New lens to parse Koji configs (Pat Riehecky) * MongoDBServer: Accept quoted values (Tomas Klouda) * NagiosCfg: Do not try to parse /etc/nagios/nrpe.cfg anymore, GH issue #43 /etc/nagios/nrpe.cfg is parsed by Nrpe (Yanis Guenane) * Nagiosobjects: Add support for optional spaces and indents and whole-line comments (Sean Millichamp) * OpenVPN: Support daemon, client-config-dir, route, and management directives (Freakin https://github.com/Freakin) * PHP: allow php-fpm syntax in keys, GH issue #35 * Postfix_Main: Handle stray whitespace at end of multiline lines, bug #348 * Postfix_virtual: allow '+' and '=' in email addresses (Tom Hendrikx) * Properties: support multiline starting with an empty string, GH issue #19 * Samba: Permit asterisk in key name, bug #354 * Shellvars: Read /etc/firewalld/firewalld.conf, bug #363 Support all types of quoted strings in arrays, bug #357 Exclude /etc/sysconfig/ip*tables.save files * Shellvars, Sysconfig: map "bare" export and unset lines to seq numbered nodes to handle multiple variables (incompatible change), RHBZ#1033795 * Shellvars_list: Handle backtick variable assignments, bug #368 Allow end-of-line comments, bug #342 * Simplevars: Add /etc/selinux/semanage.conf * Slapd: use smart quotes for database entries; rename by/what to by/access; allow access to be absent as per official docs (incompatible change) * Sshd: Indent Match entries by 2 spaces by default Support Ciphers and KexAlgorithms groups, GH issue #69 Let all special keys be case-insensitive * Sudoers: Permit underscores in group names, bug #370 (Matteo Cerutti) Allow uppercase characters in user names, bug #376 * Sysconfig: Permit empty comments after comment lines, RHBZ#1043636 * Sysconfig_Route: New lens for RedHat's route configs * Syslog: Accept UDP(@) and TCP(@@) protocol, bug #364 (Yanis Guenane) * Xymon_Alerting: New lens for Xymon alerting files (François Maillard) * Yum: Add yum-cron*.conf files (Pat Riehecky) Include only *.repo files from yum.repos.d (Andrew N Golovkov) Permit spaces after equals sign in list options, GH issue #45 Split excludes as lists, bug #275 - device_map lense: Find device.map in any dir beneath /boot (bnc#875086) augeas-device_map-grub2.patch - download url changed, also added keyring and .sig ring - Update to version 1.1.0 - Handle files with special characters in their name, bug #343 - Fix type error in composition ('f; g') of functions, bug #328 - Improve detection of version script; make build work on Illumos with GBU ld (Igor Pashev) - augparse: add --trace option to print filenames of all modules being loaded - Various lens documentation improvements (Jasper Lievisse Adriaanse) - Lens changes/additions - ActiveMQ_*: new lens for ActiveMQ/JBoss A-MQ (Brian Harrington) - AptCacherNGSecurity: new lens for /etc/apt-cacher-ng/security.conf (Erik Anderson) - Automaster: accept spaces between options - BBHosts: support more flags and downtime feature (Mathieu Alorent) - Bootconf: new lens for OpenBSD's /etc/boot.conf (Jasper Adriaanse) - Desktop: Support dos eol - Dhclient: read /etc/dhclient.conf used in OpenBSD (Jasper Adriaanse) - Dovecot: New lens for dovecot configurations (Serge Smetana) - Fai_Diskconfig: Optimize some regexps - Fonts: exclude all README files (Jasper Adriaanse) - Inetd: support IPv6 addresses, bug #320 - IniFile: Add lns_loose and lns_loose_multiline definitions Support smart quotes Warning: Smart quotes support means users should not add escaped double quotes themselves. Tests need to be fixed also. Use standard Util.comment_generic and Util.empty_generic Warning: Existing lens tests must be adapted to use standard comments and empty lines Allow spaces in entry_multiline* values Add entry_generic and entry_multiline_generic Add empty_generic and empty_noindent Let multiline values begin with a single newline Support dos eol Warning: Support for dos eol means existing lenses usually need to be adapted to exclude \r as well as \n. - IPRoute2: Support for iproute2 files (Davide Guerri) - JaaS: lens for the Java Authentication and Authorization Service (Simon Vocella) - JettyRealm: new lens for jetty-realm.properties (Brian Harrington) - JMXAccess, JMXPassword: new lenses for ActiveMQ's JMX files (Brian Harrington) - Krb5: Use standard comments and empty lines Support dos eol Improve performance Accept pkinit_anchors (Andrew Anderson) - Lightdm: Use standard comments and empty lines - LVM: New lens for LVM metadata (Gabriel) - Mdadm_conf: optimize some regexps - MongoDBServer: new lens (Brian Harrington) - Monit: also load /etc/monitrc (Jasper Adriaanse) - MySQL: Use standard comments and empty lines Support dos eol - NagiosCfg: handle Icinga and resources.cfg (Jasper Adriaanse) - Nrpe: accept any config option rather than predefined list (Gonzalo Servat); optimize some regexps - Ntpd: new lense for OpenNTPD config (Jasper Adriaanse) - Odbc: Use standard comments and empty lines - Openshift_*: new lenses for Openshift support (Brian Harrington) - Quote: allow multiple spaces in quote_spaces; improve docs - Passwd: allow period in user names in spec, bug #337; allow overrides in nisentry - PHP: Support smart quotes Use standard comments and empty lines Load /etc/php*/fpm/pool.d/*.conf (Enrico Stahn) - Postfix_master: allow [] in words, bug #345 - Resolv: support 'lookup' and 'family' key words, bug #320 (Jasper Adriaanse)) - Rsyslog: support :omusrmsg: list of users in actions - RX: add CR to RX.space_in - Samba: Use standard comments and empty lines Support dos eol - Schroot: Support smart quotes - Services: support port ranges (Branan Purvine-Riley) - Shellvars: optimize some regexps; reinstate /etc/sysconfig/network, fixes bug #330, RHBZ#904222, RHBZ#920609; parse /etc/rc.conf.local from OpenBSD - Sip_Conf: New lens for sip.conf configurations (Rob Tucker) - Splunk: new lens (Tim Brigham) - Subversion: Support smart quotes Use standard comments and empty lines Use IniFile.entry_multiline_generic Use IniFile.empty_noindent Support dos eol - Sudoers: allow user aliases in specs - Sysctl: exclude README file - Systemd: Support smart quotes; allow backslashes in values - Xinetd: handle missing values in list, bug #307 - Xorg: allow 'Screen' in Device section, bug #344 - Yum: Support dos eol, optimize some regexps - update to 1.0.0 - drop bnc-729491-recognize-suse-sysconfig-files.patch: upstream ShellVars lense now uses /etc/sysconfig/* include filter - drop patches, now upstream: augeas-pkgdeps.diff, augeas-stdio.h.patch - license update: GPL-3.0+ and LGPL-2.1+ semicolon is ambiguous - Fix build with missing gets declaration (glibc 2.16) - Ensure libxml2 is present in .pc file - update to 0.10.0 - support relative paths by taking them relative to the value of /augeas/context in all API functions where paths are used - add aug_to_xml to API: transform tree(s) into XML, exposed as dump-xml in aug_srun and augtool. Introduces dependency on libxml2 - fix regular expression escaping. Previously, /[/]/ match either a backslash or a slash. Now it only matches a slash - path expressions: add function 'int' to convert a node value (string) to an integer - path expressions: make sure the regexp produced by empty nodesets from regexp() and glob() matches nothing, rather than the empty word - fix --autosave when running single command from command line, BZ 743023 - aug_srun: support 'insert' and 'move' as aliases for 'ins' and 'mv' - aug_srun: allow escaping of spaces, quotes and brackets with \ - aug_init: accept AUG_NO_ERR_CLOSE flag; return augeas handle even when initialization fails so that caller gets some details about why initialization failed - aug_srun: tolerate trailing white space in commands - much improved, expanded documentation of many lenses - always interpret lens filter paths as absolute, bug #238 - fix bug in libfa that would incorrectly calculate the difference of a case sensistive and case insensitive regexp (/[a-zA-Z]+/ - /word/i would match 'worD') - new builtin 'regexp_match' for .aug files to make testing regexp matching easier during development - fix 'span' command, bug #220 - Lens changes/additions * Access: parse user@host and (group) in users field; field separator need not be surrounded by spaces * Aliases: allow spaces before colons * Aptconf: new lens for /etc/apt/apt.conf * Aptpreferences: support origin entries * Backuppchosts: new lens for /etc/backuppc/hosts, bug 233 (Adam Helms) * Bbhosts: various fixes * Cgconfig: id allowed too many characters * Cron: variables aren't set like shellvars, semicolons are allowed in email addresses; fix parsing of numeric fields, previously upper case chars were allowed; support ranges in time specs * Desktop: new lens for .desktop files * Dhcpd: slashes must be double-quoted; add Red Hat's dhcpd.conf locations * Exports: allow empty options * Fai_diskconfig: new lens for FAI disk_config files * Fstab: allow ',' in file names, BZ 751342 * Host_access: new lens for /etc/hosts.{allow,deny} * Host_conf: new lens for /etc/host.conf * Hostname: new lens for /etc/hostname * Hosts: also load /etc/mailname by default * Iptables: allow digits in ipt_match keys, bug #224 * Json: fix whitespace handling, removing some cf ambiguities * Kdump: new lens for /etc/kdump.conf (Roman Rakus) * Keepalived: support many more flags, fields and blocks * Krb5: support [pam] section, bug #225 * Logrotate: be more tolerant of whitespace in odd places * Mdadm_conf: new lens for /etc/mdadm.conf * Modprobe: Parse commands in install/remove stanzas (this introduces a backwards incompatibility); Drop support for include as it is not documented in manpages and no unit tests are shipped. * Modules: new lens for /etc/modules * Multipath: add support for seveal options in defaults section, bug #207 * Mysql: includedir statements are not part of sections; support !include; allow indentation of entries and flags * Networks: new lens for /etc/networks * Nrpe: allow '=' in commands, bug #218 (Marc Fournier) * Php: allow indented entries * Phpvars: allow double quotes in variable names; accept case insensitive PHP tags; accept 'include_once'; allow empty lines at EOF; support define() and bash-style and end-of-line comments * ostfix_master: allow a lot more chars in words/commands, including commas * PuppetFileserver: support same-line comments and trailing whitespace, bug #214 * Reprepo_uploaders: new lens for reprepro's uploaders files * Resolv: permit end-of-line comments * Schroot: new lens for /etc/schroot/schroot.conf * Shellvars: greatly expand shell syntax understood; support various syntactic constructs like if/then/elif/else, for, while, until, case, and select; load /etc/blkid.conf by default * Spacevars: add toplevel lens 'lns' for consistency * Ssh: new lens for ssh_config (Jiri Suchomel) * Stunnel: new lens for /etc/stunnel/stunnel.conf (Oliver Beattie) * Sudoers: support more parameter flags/options, bug #143 * Xendconfsxp: lens for Xen configuration (Tom Limoncelli) * Xinetd: allow spaces after '{' - update modprobe lens patch to apply on 0.10.0 - update shellvars lens patch to add some missing files on SUSE distros mentioned in bnc#729491 - Remove rednudant tags/sections from specfile - Patch shellvars.aug to recognize SUSE specific files in sysconfig (bnc#729491) - move lenses from /usr/share/libaugeas0/augeas to /usr/share/augeas (bnc#719199) - move vim lenses syntax files from -lenses to -devel package - Remove redundant tags/sections from specfile - Add augeas-devel to baselibs - update to 0.9.0: - augtool: keep history in ~/.augeas/history - add aug_srun API function; this makes it possible to run a sequence of commands through the API - aug_mv: report error AUG_EMVDESC on attempts to move a node into one of its descendants - path expressions: allow whitespace inside names, making '/files/etc/foo bar/baz' a legal path, but parse [expr1 or expr2] and [expr1 and expr2] as the logical and/or of expr1 and expr2 - path expressions: interpret escape sequences in regexps; since '.' does not match newlines, it has to be possible to write '.|\n' to match any character - path expressions: allow concatenating strings and regexps; add comparison operator '!~'; add function 'glob'; allow passing a nodeset to function 'regexp' - store the names of the functions available in path expressions under /augeas/version - fix several smaller memory leaks - Lens changes/additions * Aliases: allow spaces and commas in aliases (Mathieu Arnold) * Grub: allow "bootfs" Solaris/ZFS extension for dataset name, bug #201 (Dominic Cleal); allow kernel path starting with a BIOS device, bug #199 * Inifile: allow multiline values * Php: include files from Zend community edition, bug #210 * Properties: new lens for Java properties files, bug #194 (Craig Dunn) * Spacevars: autoload two ldap files, bug #202 (John Morrissey) * Sudoers: support users:groups format in a Runas_Spec line, bug #211; add CSW paths (Dominic Cleal) * Util: allow comment_or_eol to match whitespace-only comments, bug #205 (Dominic Cleal) * Xorg: accept InputClass section; autoload from /etc/X11/xorg.conf.d, bug #197 - fate#311042: Update augeas packages for latest puppet support in SLE-11 - update to 0.8.1 * augtool: respect autosave flag in oneshot mode, bug #193; fix segfault caused by unmatched bracket in path expression, bug #186 * eliminate a global variable in the lexer, fixes BZ 690286 * replace an erroneous assert(0) with a proper error message when none of the alternatives in a union match during saving, bug #183 * improve AIX support * Lens changes/additions * Access: support the format @netgroup@@nisdomain, bug #190 * Fstab: fix parsing of SELinux labels in the fscontext option * Grub: support 'device' directive for UEFI boot, bug #189; support 'configfile' and 'background' * Httpd: handle continuation lines; autoload httpd.conf on Fedora/RHEL, BZ 688149; fix support for single-quoted strings * Iptables: support --tcp-flags, bug #157; allow blank and comment lines anywhere * Mysql: include /etc/my.cnf used on Fedora/RHEL, BZ 688053 * NagiosCfg: parse setting multiple values on one line * NagiosObjects: process /etc/nagios3/objects/*.cfg * Nsswitch: support 'sudoers' as a database, bug #187 * Shellvars: autoload /etc/rc.conf used in FreeBSD * Sudoers: support '#include' and '#includedir', bug #188 * Yum: exclude /etc/yum/pluginconf.d/versionlock.list - changes for 0.8.0 * add new 'square' lens combinator * add new aug_span API function * augtool: short options for --nostdinc, --noload, and --noautoload * augtool: read commands from tty after executing file with --interactive * augtool: add --autosave option * augtool: add --span option to load nodes' span * augtool: add span command to get the node's span according to the input file * augtool: really be quiet when we shouldn't be echoing * fix segfault in get.c with L_MAYBE lens; bug #180 * fix segfault when a path expression called regexp() with an invalid regexp; bug #168 * improved vim syntax file * replace augtest by test-augtool.sh to obviate the need for Ruby to run tests * use sys_wait module from gnulib; bug #164 * Lens changes/additions * Access: new lens for /etc/security/access.conf * Crypttab: new lens for /etc/crypttab * Dhcpd: new lens * Exports: accept hostnames with dashes; bug #169 * Grub: add various Solaris extensions; support "map" entries, bug #148 * Httpd: new lens for Apache config * Inifile: new lens indented_title_label * Interfaces: allow indentation for "iface" entries; bug #182 * Mysql: change default comment delimiter from ';' to '#'; bug #181 * Nsswitch: accept various add'l databases; bug #171 * PuppetFileserver: new lens for Puppet's fileserver.conf * REsolv: allow comments starting with ';'; bug #173 * Shellvars: autoload various snmpd config files; bug #170 * Solaris_system: new lens for /etc/system on Solaris * Util (comment_c_style, empty_generic, empty_c_style): new lenses * Xml: generic lens to process XML files * Xorg: make "position" in "screen" optional; allow "Extensions" section; bug #175 - add baselibs.conf - update to 0.7.4 * augtool: new clearm command to parallel setm * augtool: add --file option * Fix SEGV under gcc 4.5, caused by difficulties of the gcc optimizer handling bitfields (bug #149; rhbz #651992) * Preserve parse errors under /augeas//error: commit 5ee81630, released in 0.7.3, introduced a regression that would cause the loss of parse errors; bug #138 * Avoid losing already parsed nodes under certain circumstances; bug #144 * Properly record the new mtime of a saved file; previously the mtime in the tree was reset to 0 when a file was saved, causing unnecessary file reloads * fix a SEGV when using L_MAYBE in recursive lens; bug #136 * Incompatible lens changes * Fstab: parse option values * Squid: various improvements, see bug #46; * Xinetd: map service names differently * Lens changes/additions * Aptsources: map comments properly, allow indented lines; bug #151 * Grub: add indomU setting for Debian. Allow '=' as separator in title; bug #150 * Fstab: also process /etc/mtab * Inetd: support rpc services * Iptables: allow underscore in chain names * Keepalived: new lens for /etc/keepalived/keepalived.conf * Krb5: allow digits in realm names; bug #139 * Login_defs: new lens for /etc/login.defs (Erinn Looney-Triggs) * Mke2fs: new lens for /etc/mke2fs.conf * Nrpe: new lens for Nagios nrpe (Marc Fournier) * Nsswitch: new lens for /etc/nsswitch.conf * Odbc: new lens for /etc/odbc.ini (Marc Fournier) * Pg_hba: New lens; bug #140 (Aurelien Bompard). Add system path on Debian; bug #154 (Marc Fournier) * Postfix_master: parse arguments in double quotes; bug #69 * Resolv: new lens for /etc/resolv.conf * Shells: new lens for /etc/shells * Shellvars: parse ulimit builtin * Sudoers: load file from /usr/local/etc (Mathieu Arnold) Allow 'visiblepw' parameter flag; bug #143. Read files from /etc/sudoers.d * Syslog: new lens for /etc/syslog.conf (Mathieu Arnold) * Util: exclude dpkg backup files; bug #153 (Marc Fournier) * Yum: accept continuation lines for gpgkey; bug #132 - added patch for allow_unsupported_modules command in modprobe.d conf files - added vim files symlinks for lens syntax files - fixed a few rpmlint warnings (fixed rpm group, no ldconfig run) * Update to 0.7.3 * ug_load: only reparse files that have actually changed; greatly speeds up reloading * record all variables in /augeas/variables, regardless of whether they were defined with aug_defvar or aug_defnode; make sure /augeas/variables always exists * redefine all variables (by reevaluating their corresponding expressions) after a aug_load. This makes variables 'sticky' across loads * fix behavior of aug_defnode to not fail when the expression evaluates to a nonempty node set * make gnulib a git submodule so that we record the gnulib commit off which we are based * allow 'let rec' with non-recursive RHS * fix memory corruption when reloading a tree into which a variable defined by defnode points (BZ 613967) * plug a few small memory leaks, and some segfaults * Lens changes/additions * Device_map: new lens for grub's device.map (Matt Booth) * Limits: also look for files in /etc/security/limits.d * Mysql: new lens (Tim Stoop) * Shellvars: read /etc/sysconfig/suseconfig (Frederik Wagner) * Sudoers: allow escaped spaces in user/group names (Raphael Pinson) * Sysconfig: lens for the shell subdialect used in /etc/sysconfig; lens strips quotes automatically * 0.7.2 - 2010-06-22 * new API call aug_setm to set/create multiple nodes simultaneously * record expression used in a defvar underneath /augeas/variables * Lens changes/additions * Group: add test for disabled account (Raphael Pinson) * Grub: handle comments within a boot stanza * Iptables: also look for /etc/iptables-save (Nicolas Valcarcel) * Modules_conf: new lens for /etc/modules.conf (Matt Booth) * Securetty: added handling of emtpy lines/comments (Frederik Wagner) * Shellvars: added SuSE sysconfig puppet files (Frederik Wagner), process /etc/environment (seph) * Shellvars_list: Shellvars-like lens that treats strings of space-separated words as lists (Frederik Wagner) * 0.7.1 - 2010-04-21 * fix crash when recursive lens was used in a nonrecursive lens (bug #100) * context free parser/recursive lenses: handle 'l?' properly (bug #119); distinguish between successful parse and parse with an error at end of input; do caller filtering to avoid spurious ambiguous parses with grammars containing epsilon productions * aug_get: return -1 when multiple nodes match (bug #121) * much better error message when iteration stops prematurely during put/create than the dreaded 'Short iteration' * src/lens.c (lns_check_rec): fix refcounting mistake on error path (bug #120) * Lens changes/additions * Approx: lens and test for the approx proxy server (Tim Stoop) * Cgconfig: lens and tests for libcgroup config (Ivana Hutarova Varekova) * Cgrules: new lens and test (Ivana Hutarova Varekova) * Cobblermodules: lens + tests for cobbler's modules.conf (Shannon Hughes) * Debctrl: new lens and test (Dominique Dumont) * Dput: add 'allow_dcut' parameter (bug #105) (Raphael Pinson) * Dhclient: add rfc code parsing (bug #107) (Raphael Pinson) * Group: handle disabled passwords * Grub: support empty kernel parameters, Suse incl.s (Frederik Wagner) * Inittab: allow ':' in the process field (bug #109) * Logrotate: tolerate whitespace at the end of a line (bug #101); files can be separated by newlines (bug #104) (Raphael Pinson) * Modprobe: Suse includes (Frederik Wagner) * Nagisocfg: lens and test for /etc/nagios3/nagios.cfg (Tim Stoop) * Ntp: add 'tinker' directive (bug #103) * Passwd: parse NIS entries on Solaris * Securetty: new lens and test for /etc/securetty (Simon Josi) * Shellvars: handle a bare 'export VAR'; Suse includes (Frederik Wagner); allow spaces after/before opening/closing parens for array * Sudoers: allow del_negate even if no negate_node is found (bug #106) (Raphael Pinson); accept 'secure_path' (BZ 566134) (Stuart Sears) * 0.7.0 - 2010-01-14 * Support for context-free lenses via the 'let rec' keyword. The syntax is experimental, though the feature is here to stay. See lenses/json.aug for an example of what's possible with that. * Support for case-insensitive regular expressions. Simply append 'i' to a regexp literal to make it case-insensitive, e.g. /hello/i will match all variations of hello, regardless of case. * Major revamp of augtool. In particular, path expressions don't need to be quoted anymore. The online help has been greatly improved. * Check during load/save that each file is only matched by one transform under /augeas/load. If there are multiple transforms for a file, the file is skipped. * New error codes AUG_ENOLENS and AUG_EMXFM * Do not choke on non-existing lens during save * Change the metadata for files under /augeas/files slightly: the node /augeas/files/$PATH/lens now has the name of the lens used to load the file; the source location of that lens has moved to /augeas/files/$PATH/lens/info * New public functions fa_nocase, fa_is_nocase, and fa_expand_nocase in libfa * Various smaller bug fixes, performance improvements and improved error messages * Lens changes/additions * Cobblersettings: new lens and test (Bryan Kearney) * Iptables: allow quoted strings as arguments; handle both negation syntaxes * Json: lens and tests for generic Json files * Lokkit: allow '-' in arguments * Samba: accept entry keys with ':' (Partha Aji) * Shellvars: allow arrays that span multiple lines * Xinetd (name): fix bad '-' in character class * 0.6.0 - 2009-11-30 * Add error reporting API (aug_error and related calls); use to report error details in a variety of places * Path expressions: add regexp matching; add operator '|' to form union of nodesets (ticket #89) * Tolerate non-C locales from the environment (ticket #35); it is no longer necessary to set the locale to C from the outside * use stpcpy/stpncpy from gnulib (needed for building on Solaris) * Properly check regexp literals for syntax errors (ticket #93) * Distribute and install vim syntax files (ticket #97) * many more bugfixes * Lens changes/additions * Apt_preferences: support version pin; filter out empty lines (Matt Palmer) * Cron: variables can contain '_' etc. (ticket #94) * Ethers: new lens for /etc/ethers (Satoru SATOH) * Fstab: allow '#' in spec (ticket #95) * Group: allow empty password field (ticket #95) * Inittab: parse end-of-line comments into a #comment * Krb5: support kdc section; add v4_name_convert subsection to libdefaults (ticket #95) * Lokkit: add mising eol to forward_port; make argument for --trust more permissive * Pam: allow '-' before type * Postfix_access: new lens for /etc/postfix/access (Partha Aji) * Rx: allow '!' in device_name * Sudoers: allow certain backslash-quoted characters in a command (Matt Palmer) * Wine: new lens to read Windows registry files * 0.5.3 - 2009-09-14 * Match trees on label + value, not just label; see tests/modules/pass_strip_quotes.aug for how that enables stripping quotes * Do not trip over symlinks to files on a different device during save; fixes problems with writing to /etc/grub.conf on Fedora/RHEL * API (defnode): always add the newly created node into the resulting nodeset * Add preceding-sibling and following-sibling axes to path expressions * augtool, augparse: add --version option (bug #88) * Change file info recorded under /augeas/files/FILE/*: remove lens/id and move lens/info to lens * Properly record new files under /augeas/files (bug #78) * aug_load: clean up variables to avoid dangling references (bug #79) * Make Augeas work on AIX * Ignore anything but regular files when globbing * Add 'clear' function to language for use in unit tests * typechecker: print example trees in tree format * libfa: properly support regexps with embedded NUL's * Lens changes/additions * Xorg: revamped, fixes various parse failures (Matt Booth) * Inetd: new lens and test (Matt Palmer) * Multipath: new lens and test * Slapd: also read /etc/openldap.slapd.conf (bug #85) * 0.5.2 - 2009-07-13 * Make Augeas work on Mac OS/X (bug #66) (Anders Bjoerklund) * reduce symbols exported from libfa with linker script * add --echo option to augtool * require Automake 1.11 (Jim Meyering) * avoid spurious save attempts for freshly read files * Lens changes/additions * Inittab: schema change: use 'id' field as name of subtree for a line, instead of a generated number. Map comments as '#comment' (Matt Palmer) * Logrotate: make owner/group in create statement optional, allow filenames to be indented * Ntp: allow additional options for server etc. (bug #72) * Shellvars: allow backticks as quote characters (bug #74) * Yum: also read files in /etc/yum/pluginconf.d (Marc Fournier) * 0.5.1 - 2009-06-09 * augeas.h: flag AUG_NO_MODL_AUTOLOAD suppresses initial loading of modules; exposed as --noautoload in augtool * augtool: don't prompt when input is not from tty (Raphael Pinson) * augparse: add --notypecheck option * path expressions: allow things like '/foo and /bar[3]' in predicates * Lens changes/additions * Aliases: map comments as #comment (Raphael Pinson) * Build, Rx, Sep: new utility modules (Raphael Pinson) * Cron: new lens (Raphael Pinson) * Dnsmasq: process files in /etc/dnsmasq.d/* (ticket #65) * Grub: parse kernel and module args into separate nodes; parse arguments for 'serial', 'terminal', and 'chainloader'; allow optional argument for 'savedefault' * Interfaces: make compliant with actual Debian spec (Matt Palmer) * Iptables: relax regexp for chain names; allow comment lines mixed in with chains and rules (ticket #51) * Logrotate: allow '=' as separator (ticket #61); make newline at end of scriptlet optional * Modprobe: handle comments at end of line * Ntp: parse fudge record (Raphael Pinson); parse all directives in default Fedora ntp.conf; process 'broadcastdelay', 'leapfile', and enable/disable flags (ticket #62) * Pbuilder: new lens for Debian's personal builder (Raphael Pinson) * Php: add default path on Fedora/RHEL (Marc Fournier) * Squid: handle indented entries (Raphael Pinson) * Shellvars: map 'export' and 'unset'; map comments as #comment (Raphael Pinson) * Sudoers: allow backslashes inside values (ticket #60) (Raphael Pinson) * Vsftpd: map comments as #comment; handle empty lines; find vsftpd.conf on Fedora/RHEL * Xinetd: map comments as #comment (Raphael Pinson) - enable parallel building * Update to 0.5.0 * Upstream notes: Clean up interface for libfa; the interface is now considered stable * New aug_load API call; allows controlling which files to load by modifying /augeas/load and then calling aug_load; on startup, the transforms marked with autoload are reported under /augeas/load * New flag AUG_NO_LOAD for aug_init to keep it from loading files on startup; add --noload option to augtool * New API calls aug_defvar and aug_defnode to define variables for path expressions; exposed as 'defvar' and 'defnode' in augtool * New program examples/fadot to draw various finite automata (Francis Giraldeau) * Report line number and character offset in the tree when parsing a file with a lens fails * Fix error in propagation of dirty flag, which could lead to only parts of a tree being saved when multiple files were modified * Flush files to disk before moving them * Fix a number of memory corruptions in the XPath evaluator * Several performance improvements in libfa * Lens changes/additions * Grub: process embedded comments for update-grub (Raphael Pinson) * Iptables: new lens for /etc/sysconfig/iptables * Krb5: new lens for /etc/krb5.conf * Limits: map dpmain as value of 'domain' node, not as label (Raphael Pinson) * Lokkit: new lens for /etc/sysconfig/system-config-firewall * Modprobe: new lens for /etc/modprobe.d/* * Sudoers: more finegrained parsing (ticket #48) (Raphael Pinson) * Update to 0.4.2 * Moved lense tests into separate package 'augeas-lense-tests' * Added augeas-lenses-license-fix patch * Upstream notes: * Do not delete files that had an error upon parsing * For Fedora/EPEL RPM's, BuildRequire libselinux-devel (bug #26) * In path expressions, the meaning of '<' and '<=' was reversed * Always create an entry /files in aug_init * New builtin 'Sys' module with functions 'getenv' and 'read_file', the latter reads a the contents of a file into a string * Lens changes/additions * Postfix_main: handle continuation lines * Bbhosts, Hosts, Logrotate, Sudoers: label comment nodes as '#comment' * Sshd: map comments as '#comment' nodes * Squid: add all keywords from squid 2.7 and 3 (Francois Deppierraz) * Logrotate: process unit suffixes for 'size' and 'minsize' * Update to 0.4.1 * Moved lenses to separate package 'augeas-lenses'. * Upstream notes: * Remove files when their entire subtree under /files is deleted * Various bug fixes and syntax enhancements for path expressions (see tests/xpath.tests for details) * Evaluate path expressions with multiple predicates correctly * Fix incorrect setting of /augeas/events/saved * Major cleanup of matching during get; drastically improves performance for very large (on the order of 10k lines) config files * Small performance improvement in the typechecker * Reject invalid character sets like [x-u] during typecheck * Build with compile warnings set to 'maximum' instead of 'error', so that builds on platforms with broken headers will work out of the box * Lens changes/additions * Util.stdexcl now excludes .augsave and .augnew files * Logrotate: allow 'yearly' schedule, spaces around braces * Ntp: fix so that it processes ntp.conf on Fedora 10 * Services: lens for /etc/services (Raphael Pinson) * Xorg: new lens and tests (Raphael Pinson) * Update to 0.4.0 * Much improved and expanded support for path expressions in the public API. See doc/xpath.txt and tests/xpath.tests for details. * Solaris support: builds at least on OpenSolaris 2008.11 * Lens changes/additions o Grub: support color and savedefault o DarkIce: new lens for http://darkice.tyrell.hu/ (Free Ekanayaka) * Update to 0.3.6 * report version in /augeas/version, report legal save modes in /augeas/version/save/mode for feature tests/version checking * dynamically change behavior of aug_save; add noop save mode (Bryan Kearney) * plug memory leak, more portable SELinux test (Jim Meyering) * fix bz rhbz#478619 - do not use abspath (Arnaud Gomes-do-Vale) * fix segfault when branch in a union does not have a ktype * Lens changes/additions o Dpkg: new lens for Debian's dpkg.cfg (Robin Lee Powell) o Limits: new lens for /etc/security/limits.conf (Free Ekanayaka) o Soma: new lens for http://www.somasuite.org/ config (Free Ekanayaka) o Php, Gdm: fix minor regexp error (Marc Fournier) expand filter for Php config files (Robin Lee Powell) o Phpvars: whitspace fixes (Free Ekanayaka) o Puppet: accept indented puppet.conf (ticket #25) ==== gptfdisk ==== Version update (1.0.6 -> 1.0.8) - Update to 1.0.8 * Fixed double byte swap operation on writes of partition name data on big-endian systems; this is in addition to the double byte swap fix on reading partition label data fixed in 1.0.7. (Thanks to Erik Larsson for both fixes.) * Added feature to gdisk and sgdisk to enable swapping the byte order of partition names, so as to correct disks already affected by the preceding bug. This option is 'b' on the experts' menu in gdisk and - b/--byte-swap-name in sgdisk. This seems advanced/obscure enough that I don't want to clutter cgdisk's menu with this option, so I haven't added it there. * Added type code for the Barebox boot loader (0xbb00; 4778ED65-BF42-45FA-9C5B-287A1DC4AAB1). * Fixed bug that caused spurious warnings about the partition table header claiming an invalid size of partition entries when reading some MBR disks. * Added ARM64 as an architecture for the Mac builds of gdisk and fixparts. The official GPT fdisk binaries of these files for macOS are now "universal" x86-64/ARM64 binaries, so they will run natively on the new M1 (ARM64) Macs. The sgdisk and cgdisk binaries, though, remain built only for x86-64, because they rely on libraries that are not easily built in "universal" form. * Fixed double byte swap operation on partition label data on big-endian CPUs. This resulted in partition names becoming gibberish on such CPUs. * Added three new type codes: - 0x0701 - Microsoft Storage Replica - 0x0702 - ArcaOS Type 1 - 0x8401 - Storage Performance Development Kit (SPDK) block device - Drop fix-spurious-warnings.patch ==== grub2 ==== Subpackages: grub2-arm64-efi grub2-snapper-plugin - Fix running grub2-once leads to failure of starting systemd service in the boot sequence (bsc#1169460) * grub2-once * grub2-once.service ==== hidapi ==== - Add 0001-configure.ac-remove-duplicate-AC_CONFIG_MACRO_DIR-22.patch: fix boo#1187056 ==== libxslt ==== - Backport upstream xsltproc manpage fix f165525f Recreate xsltproc man page with old Docbook stylesheet URL Recreate-xsltproc-man-page-with-old-Docbook-styleshe.patch - Don't disable testsuite under QEMU - Move the Copyright file to %_defaultlicensedir Configure.ac replaces the COPYING file with a symlink. ==== multipath-tools ==== Subpackages: kpartx libmpath0 - install to /usr (boo#1029961) ==== podman ==== Version update (3.1.2 -> 3.2.0) Subpackages: podman-cni-config - Update to version 3.2.0: * Bump to v3.2.0 * Fix network create macvlan with subnet option * Final release notes updates for v3.2.0 * add ipv6 nameservers only when the container has ipv6 enabled * Use request context instead of background * [v.3.2] events: support disjunctive filters * System tests: add :Z to volume mounts * generate systemd: make mounts portable * vendor containers/storage(a)v1.31.3 * vendor containers/common(a)v0.38.5 * Bump to v3.2.0-dev * Bump to v3.2.0-RC3 * Update release notes for v3.2.0-RC3 * Fix race on podman start --all * Fix race condition in running ls container in a pod * docs: --cert-dir: point to containers-certs.d(5) * Handle hard links in different directories * Improve OCI Runtime error * Handle hard links in remote builds * Podman info add support for status of cgroup controllers * Drop container does not exist on removal to debugf * Downgrade API service routing table logging * add libimage events * docs: generate systemd: XDG_RUNTIME_DIR * Fix problem copying files when container is in host pid namespace * Bump to v3.2.0-dev * Bump to v3.2.0-RC2 * update c/common * Update Cirrus DEST_BRANCH to v3.2 * Updated vendors of c/image, c/storage, Buildah * Initial release notes for v3.2.0-RC2 * Add script for identifying commits in release branches * Add host.containers.internal entry into container's etc/hosts * image prune: remove unused images only with `--all` * podman network reload add rootless support * Use more recent `stale` release... * network tutorial: update with rootless cni changes * [CI:DOCS] Update first line in intro page * Use updated VM images + updated automation tooling * auto-update service: prune images * make vendor * fix system upgrade tests * Print "extracting" only on compressed file * podman image tree: restore previous behavior * fix network restart always test * fix incorrect log driver in podman container image * Add support for cli network prune --filter flag * Move filter parsing to common utils * Bump github.com/containers/storage from 1.30.2 to 1.30.3 * Update nix pin with `make nixpkgs` * [CI:DOCS] hack/bats - new helper for running system tests * fix restart always with slirp4netns * Bump github.com/opencontainers/runc from 1.0.0-rc93 to 1.0.0-rc94 * Bump github.com/coreos/go-systemd/v22 from 22.3.1 to 22.3.2 * Add host.serviceIsRemote to podman info results * Add client disconnect to build handler loop * Remove obsolete skips * Fix podman-remote build --rm=false ... * fix: improved "containers/{name}/wait" endpoint * Bump github.com/containers/storage from 1.30.1 to 1.30.2 * Add envars to the generated systemd unit * fix: use UTC Time Stamps in response JSON * fix container startup for empty pidfile * Kube like pods should share ipc,net,uts by default * fix: compat API "images/get" for multiple images * Revert escaped double dash man page flag syntax * Report Download complete in Compatibility mode * Add documentation on short-names * Bump github.com/docker/docker * Adds support to preserve auto update labels in generate and play kube * [CI:DOCS] Stop conversion of `--` into en dash * Revert Patch to relabel if selinux not enabled * fix per review request * Add support for environment variable secrets * fix pre review request * Fix infinite loop in isPathOnVolume * Add containers.conf information for changing defaults * CI: run rootless tests under ubuntu * Fix wrong macvlan PNG in networking doc. * Add restart-policy to container filters & --filter to podman start * Fixes docker-compose cannot set static ip when use ipam * channel: simplify implementation * build: improve regex for iidfile * Bump github.com/onsi/gomega from 1.11.0 to 1.12.0 * cgroup: fix rootless --cgroup-parent with pods * fix: docker APIv2 `images/get` * codespell cleanup * Minor podmanimage docs updates. * Fix handling of runlabel IMAGE and NAME * Bump to v3.2.0-dev * Bump to v3.2.0-rc1 * rootless: improve automatic range split * podman: set volatile storage flag for --rm containers * Bump github.com/onsi/ginkgo from 1.16.1 to 1.16.2 * Bump github.com/containers/image/v5 from 5.11.1 to 5.12.0 * migrate Podman to containers/common/libimage * Add filepath glob support to --security-opt unmask * Force log_driver to k8s-file for containers in containers * add --mac-address to podman play kube * compat api: Networks must be empty instead of null * System tests: honor $OCI_RUNTIME (for CI) * is this a bug? * system test image: add arm64v8 image * Fix troubleshooting documentation on handling sublemental groups. * Add --all to podman start * Fix variable reference typo. in multi-arch image action * cgroup: always honor --cgroup-parent with cgroupfs * Bump github.com/uber/jaeger-client-go * Don't require tests for github-actions & metadata * Detect if in podman machine virtual vm * Fix multi-arch image workflow typo * [CI:DOCS] Add titles to remote docs (windows) * Remove unused VolumeList* structs * Cirrus: Update F34beta -> F34 * Update container image docs + fix unstable execution * Bump github.com/containers/storage from 1.30.0 to 1.30.1 * TODO complete * Docker returns 'die' status rather then 'died' status * Check if another VM is running on machine start * [CI:DOCS] Improve titles of command HTML pages * system tests: networking: fix another race condition * Use seccomp_profile as default profile if defined in containers.conf * Bump github.com/json-iterator/go from 1.1.10 to 1.1.11 * Vendored * Autoupdate local label functional * System tests: fix two race conditions * Add more documentation on conmon * Allow docker volume create API to pass without name * Cirrus: Update Ubuntu images to 21.04 * Skip blkio-weight test when no kernel BFQ support * rootless: Tell the user what was led to the error, not just what it is * Add troubleshooting advice about the --userns option. * Fix images prune filter until * Fix logic for pushing stable multi-arch images * Fixes generate kube incorrect when bind-mounting "/" and "/root" * libpod/image: unit tests: don't use system's registries.conf.d * runtime: create userns when CAP_SYS_ADMIN is not present * rootless: attempt to copy current mappings first * [CI:DOCS] Restore missing content to manpages * [CI:DOCS] Fix Markdown layout bugs * Fix podman ps --filter ancestor to match exact ImageName/ImageID * Add machine-enabled to containers.conf for machine * Several multi-arch image build/push fixes * Add podman run --timeout option * Parse slirp4netns net options with compat api * Fix rootlesskit port forwarder with custom slirp cidr * Fix removal race condition in ListContainers * Add github-action workflow to build/push multi-arch * rootless: if root is not sub?id raise a debug message * Bump github.com/containers/common from 0.36.0 to 0.37.0 * Add go template shell completion for --format * Add --group-add keep-groups: suplimentary groups into container * Fixes from make codespell * Typo fix to usage text of --compress option * corrupt-image test: fix an oops * Add --noheading flag to all list commands * Bump github.com/containers/storage from 1.29.0 to 1.30.0 * Bump github.com/containers/image/v5 from 5.11.0 to 5.11.1 * [CI:DOCS] Fix Markdown table layout bugs * podman-remote should show podman.sock info * rmi: don't break when the image is missing a manifest * [CI:DOCS] Rewrite --uidmap doc in podman-create.1.md and podman-run.1.md * Add support for CDI device configuration * [CI:DOCS] Add missing dash to verbose option * Bump github.com/uber/jaeger-client-go * Remove an advanced layer diff function * Ensure mount destination is clean, no trailing slash * add it for inspect pidfile * [CI:DOCS] Fix introduction page typo * support pidfile on container restore * fix start it * skip pidfile test on remote * improve document * set pidfile default value int containerconfig * add pidfile in inspection * add pidfile it for container start * skip pidfile it on remote * Modify according to comments * WIP: drop test requirement * runtime: bump required conmon version * runtime: return findConmon to libpod * oci: drop ExecContainerCleanup * oci: use `--full-path` option for conmon * use AttachSocketPath when removing conmon files * hide conmon-pidfile flag on remote mode * Fix possible panic in libpod/image/prune.go * add --ip to podman play kube * add flag autocomplete * add ut * add flag "--pidfile" for podman create/run * Add network bindings tests: remove and list * Fix build with GO111MODULE=off * system tests: build --pull-never: deal with flakes * compose test: diagnose flakes v3 * podman play kube apply correct log driver * Fixes podman-remote save to directories does not work * Bump github.com/rootless-containers/rootlesskit from 0.14.1 to 0.14.2 * Update documentation of podman-run to reflect volume "U" option * Fix flake on failed podman-remote build : try 2 * compose test: ongoing efforts to diagnose flakes * Test that we don't error out on advertised --log-level values * At trace log level, print error text using %+v instead of %v * pkg/errorhandling.JoinErrors: don't throw away context for lone errors * Recognize --log-level=trace * Fix flake on failed podman-remote build * System tests: fix racy podman-inspect * Fixes invalid expression in save command * Bump github.com/containers/common from 0.35.4 to 0.36.0 * Update nix pin with `make nixpkgs` * compose test: try to get useful data from flakes * Remove in-memory state implementation * Fix message about runtime to show only the actual runtime * System tests: setup: better cleanup of stray images * Bump github.com/containers/ocicrypt from 1.1.0 to 1.1.1 * Reflect current state of prune implementation in docs * Do not delete container twice * [CI:DOCS] Correct status code for /pods/create * vendor in containers/storage v1.29.0 * cgroup: do not set cgroup parent when rootless and cgroupfs * Overhaul Makefile binary and release worflows * Reorganize Makefile with sections and guide * Simplify Makefile help target * Don't shell to obtain current directory * Remove unnecessary/not-needed release.txt target * Fix incorrect version number output * Exclude .gitignore from test req. * Fix handling of $NAME and $IMAGE in runlabel * Update podman image Dockerfile to support Podman in container * Bump github.com/containers/image/v5 from 5.10.5 to 5.11.0 * Fix slashes in socket URLs * Add network prune filters support to bindings * Add support for play/generate kube volumes * Update manifest API endpoints * Fix panic when not giving a machine name for ssh * cgroups: force 64 bits to ParseUint * Bump k8s.io/api from 0.20.5 to 0.21.0 * [CI:DOCS] Fix formatting of podman-build man page * buildah-bud tests: simplify * Add missing return * Bump github.com/onsi/ginkgo from 1.16.0 to 1.16.1 * speed up CI handling of images * Volumes prune endpoint should use only prune filters * Cirrus: Use Fedora 34beta images * Bump go.sum + Makefile for golang 1.16 * Exempt Makefile changes from test requirements * Adjust libpod API Container Wait documentation to the code * [CI:DOCS] Update swagger definition of inspect manifest * use updated ubuntu images * podman unshare: add --rootless-cni to join the ns * Update swagger-check * swagger: remove name wildcards * Update buildah-bud diffs * Handle podman-remote --arch, --platform, --os * buildah-bud tests: handle go pseudoversions, plus... * Fix flaking rootless compose test * rootless cni add /usr/sbin to PATH if not present * System tests: special case for RHEL: require runc * Add --requires flag to podman run/create * [CI:DOCS] swagger-check: compare operations * [CI:DOCS] Polish swagger OpertionIDs * [NO TESTS NEEDED] Update nix pin with `make nixpkgs` * Ensure that `--userns=keep-id` sets user in config * [CI:DOCS] Set all operation id to be compatibile * Move operationIds to swagger:operation line * swagger: add operationIds that match with docker * Cirrus: Make use of shared get_ci_vm container * Don't relabel volumes if running in a privileged container * Allow users to override default storage opts with --storage-opt * Add support for podman --context default * Verify existence of auth file if specified * fix machine naming conventions * Initial network bindings tests * Update release notes to indicate CVE fix * Move socket activation check into init() and set global condition. * Bump github.com/onsi/ginkgo from 1.15.2 to 1.16.0 * Http api tests for network prune with until filter * podman-run.1.md, podman-create.1.md : Adjust Markdown layout for --userns * Fix typos --uidmapping and --gidmapping * Add transport and destination info to manifest doc * Bump github.com/rootless-containers/rootlesskit from 0.14.0 to 0.14.1 * Add default template functions * Fix missing podman-remote build options * Bump github.com/coreos/go-systemd/v22 from 22.3.0 to 22.3.1 * Add ssh connection to root user * Add rootless docker-compose test to the CI * Use the slrip4netns dns in the rootless cni ns * Cleanup the rootless cni namespace * Add new docker-compose test for two networks * Make the docker-compose test work rootless * Remove unused rootless-cni-infra container files * Only use rootless RLK when the container has ports * Fix dnsname test * Enable rootless network connect/disconnect * Move slirp4netns functions into an extra file * Fix pod infra container cni network setup * Add rootless support for cni and --uidmap * rootless cni without infra container * Recreate until container prune tests for bindings * Remove --execute from podman machine ssh * Fixed podman-remote --network flag * Makefile: introduce install.docker-full * Makefile: ensure install.docker creates BINDIR * Fix unmount doc reference in image.rst * Should send the OCI runtime path not just the name to buildah * podman machine shell completion * Fix handling of remove --log-rusage param * Fix bindings prune containers flaky test * [CI:DOCS] Add local html build info to docs/README.md * Add podman machine list * Trim white space from /top endpoint results * Remove semantic version suffices from API calls * podman machine init --ignition-path * Document --volume from podman-remote run/create client * Update main branch to reflect the release of v3.1.0 * Silence podman network reload errors with iptables-nft * Containers prune endpoint should use only prune filters * resolve proper aarch64 image names * APIv2 basic test: relax APIVersion check * Add machine support for qemu-system-aarch64 * podman machine init user input * manpage xref: helpful diagnostic for unescaped dash-dash * Bump to v3.2.0-dev * swagger: update system version response body * buildah-bud tests: reenable pull-never test * [NO TESTS NEEDED] Shrink the size of podman-remote * Add powershell completions * [NO TESTS NEEDED] Drop Warning to Info, if cgroups not mounted * Fix long option format on docs.podman.io * system tests: friendier messages for 2-arg is() * service: use LISTEN_FDS * man pages: correct seccomp-policy label * rootless: use is_fd_inherited * podman generate systemd --new do not duplicate params * play kube: add support for env vars defined from secrets * play kube: support optional/mandatory env var from config map * play kube: prepare supporting other env source than config maps * Add machine support for more Linux distros * [NO TESTS NEEDED] Use same function podman-remote rmi as podman * Podman machine enhancements * Add problematic volume name to kube play error messages * Fix podman build --pull-never * [NO TESTS NEEDED] Fix for kernel without CONFIG_USER_NS * [NO TESTS NEEDED] Turn on podman-remote build --isolation * Fix list pods filter handling in libpod api * Remove resize race condition * [NO TESTS NEEDED] Vendor in containers/buildah v1.20.0 * Use TMPDIR when commiting images * Add RequiresMountsFor= to systemd generate * Bump github.com/vbauerster/mpb/v6 from 6.0.2 to 6.0.3 * Fix swapped dimensions from terminal.GetSize * Rename podman machine create to init and clean up * Correct json field name * system tests: new interactive tests * Improvements for machine * libpod/image: unit tests: use a `registries.conf` for aliases * libpod/image: unit tests: defer cleanup * libpod/image: unit tests: use `require.NoError` * Add --execute flag to podman machine ssh * introduce podman machine * Podman machine CLI and interface stub * Support multi doc yaml for generate/play kube * Fix filters in image http compat/libpod api endpoints * Bump github.com/containers/common from 0.35.3 to 0.35.4 * Bump github.com/containers/storage from 1.28.0 to 1.28.1 * Check if stdin is a term in --interactive --tty mode * [NO TESTS NEEDED] Remove /tmp/containers-users-* files on reboot * [NO TESTS NEEDED] Fix rootless volume plugins * Ensure manually-created volumes have correct ownership * Bump github.com/rootless-containers/rootlesskit * Unification of until filter across list/prune endpoints * Unification of label filter across list/prune endpoints * fixup * fix: build endpoint for compat API * [CI:DOCS] Add note to mappings for user/group userns in build * Bump k8s.io/api from 0.20.1 to 0.20.5 * Validate passed in timezone from tz option * WIP: run buildah bud tests using podman * Fix containers list/prune http api filter behaviour * Generate Kubernetes PersistentVolumeClaims from named volumes ==== sssd ==== Version update (2.5.0 -> 2.5.1) Subpackages: libsss_certmap0 libsss_idmap0 libsss_nss_idmap0 sssd-krb5-common sssd-ldap - Update to release 2.5.1 * auto_private_groups option can be set centrally through ID range setting in IPA (see ipa idrange commands family). This feature requires SSSD update on both client and server. This feature also requires freeipa 4.9.4 and newer. * Fix getsidbyname issues with IPA users with a user-private-group. * Default value of ldap_sudo_random_offset changed to 0 (disabled). This makes sure that sudo rules are available as soon as possible after SSSD start in default configuration.

1 0

New Kubic snapshot 20210614 released!
by Richard Brown 16 Jun '21

16 Jun '21

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: gptfdisk (1.0.6 -> 1.0.8) hidapi libxslt podman (3.1.2 -> 3.2.0) === Details === ==== gptfdisk ==== Version update (1.0.6 -> 1.0.8) - Update to 1.0.8 * Fixed double byte swap operation on writes of partition name data on big-endian systems; this is in addition to the double byte swap fix on reading partition label data fixed in 1.0.7. (Thanks to Erik Larsson for both fixes.) * Added feature to gdisk and sgdisk to enable swapping the byte order of partition names, so as to correct disks already affected by the preceding bug. This option is 'b' on the experts' menu in gdisk and - b/--byte-swap-name in sgdisk. This seems advanced/obscure enough that I don't want to clutter cgdisk's menu with this option, so I haven't added it there. * Added type code for the Barebox boot loader (0xbb00; 4778ED65-BF42-45FA-9C5B-287A1DC4AAB1). * Fixed bug that caused spurious warnings about the partition table header claiming an invalid size of partition entries when reading some MBR disks. * Added ARM64 as an architecture for the Mac builds of gdisk and fixparts. The official GPT fdisk binaries of these files for macOS are now "universal" x86-64/ARM64 binaries, so they will run natively on the new M1 (ARM64) Macs. The sgdisk and cgdisk binaries, though, remain built only for x86-64, because they rely on libraries that are not easily built in "universal" form. * Fixed double byte swap operation on partition label data on big-endian CPUs. This resulted in partition names becoming gibberish on such CPUs. * Added three new type codes: - 0x0701 - Microsoft Storage Replica - 0x0702 - ArcaOS Type 1 - 0x8401 - Storage Performance Development Kit (SPDK) block device - Drop fix-spurious-warnings.patch ==== hidapi ==== - Add 0001-configure.ac-remove-duplicate-AC_CONFIG_MACRO_DIR-22.patch: fix boo#1187056 ==== libxslt ==== - Backport upstream xsltproc manpage fix f165525f Recreate xsltproc man page with old Docbook stylesheet URL Recreate-xsltproc-man-page-with-old-Docbook-styleshe.patch - Don't disable testsuite under QEMU - Move the Copyright file to %_defaultlicensedir Configure.ac replaces the COPYING file with a symlink. ==== podman ==== Version update (3.1.2 -> 3.2.0) Subpackages: podman-cni-config - Update to version 3.2.0: * Bump to v3.2.0 * Fix network create macvlan with subnet option * Final release notes updates for v3.2.0 * add ipv6 nameservers only when the container has ipv6 enabled * Use request context instead of background * [v.3.2] events: support disjunctive filters * System tests: add :Z to volume mounts * generate systemd: make mounts portable * vendor containers/storage(a)v1.31.3 * vendor containers/common(a)v0.38.5 * Bump to v3.2.0-dev * Bump to v3.2.0-RC3 * Update release notes for v3.2.0-RC3 * Fix race on podman start --all * Fix race condition in running ls container in a pod * docs: --cert-dir: point to containers-certs.d(5) * Handle hard links in different directories * Improve OCI Runtime error * Handle hard links in remote builds * Podman info add support for status of cgroup controllers * Drop container does not exist on removal to debugf * Downgrade API service routing table logging * add libimage events * docs: generate systemd: XDG_RUNTIME_DIR * Fix problem copying files when container is in host pid namespace * Bump to v3.2.0-dev * Bump to v3.2.0-RC2 * update c/common * Update Cirrus DEST_BRANCH to v3.2 * Updated vendors of c/image, c/storage, Buildah * Initial release notes for v3.2.0-RC2 * Add script for identifying commits in release branches * Add host.containers.internal entry into container's etc/hosts * image prune: remove unused images only with `--all` * podman network reload add rootless support * Use more recent `stale` release... * network tutorial: update with rootless cni changes * [CI:DOCS] Update first line in intro page * Use updated VM images + updated automation tooling * auto-update service: prune images * make vendor * fix system upgrade tests * Print "extracting" only on compressed file * podman image tree: restore previous behavior * fix network restart always test * fix incorrect log driver in podman container image * Add support for cli network prune --filter flag * Move filter parsing to common utils * Bump github.com/containers/storage from 1.30.2 to 1.30.3 * Update nix pin with `make nixpkgs` * [CI:DOCS] hack/bats - new helper for running system tests * fix restart always with slirp4netns * Bump github.com/opencontainers/runc from 1.0.0-rc93 to 1.0.0-rc94 * Bump github.com/coreos/go-systemd/v22 from 22.3.1 to 22.3.2 * Add host.serviceIsRemote to podman info results * Add client disconnect to build handler loop * Remove obsolete skips * Fix podman-remote build --rm=false ... * fix: improved "containers/{name}/wait" endpoint * Bump github.com/containers/storage from 1.30.1 to 1.30.2 * Add envars to the generated systemd unit * fix: use UTC Time Stamps in response JSON * fix container startup for empty pidfile * Kube like pods should share ipc,net,uts by default * fix: compat API "images/get" for multiple images * Revert escaped double dash man page flag syntax * Report Download complete in Compatibility mode * Add documentation on short-names * Bump github.com/docker/docker * Adds support to preserve auto update labels in generate and play kube * [CI:DOCS] Stop conversion of `--` into en dash * Revert Patch to relabel if selinux not enabled * fix per review request * Add support for environment variable secrets * fix pre review request * Fix infinite loop in isPathOnVolume * Add containers.conf information for changing defaults * CI: run rootless tests under ubuntu * Fix wrong macvlan PNG in networking doc. * Add restart-policy to container filters & --filter to podman start * Fixes docker-compose cannot set static ip when use ipam * channel: simplify implementation * build: improve regex for iidfile * Bump github.com/onsi/gomega from 1.11.0 to 1.12.0 * cgroup: fix rootless --cgroup-parent with pods * fix: docker APIv2 `images/get` * codespell cleanup * Minor podmanimage docs updates. * Fix handling of runlabel IMAGE and NAME * Bump to v3.2.0-dev * Bump to v3.2.0-rc1 * rootless: improve automatic range split * podman: set volatile storage flag for --rm containers * Bump github.com/onsi/ginkgo from 1.16.1 to 1.16.2 * Bump github.com/containers/image/v5 from 5.11.1 to 5.12.0 * migrate Podman to containers/common/libimage * Add filepath glob support to --security-opt unmask * Force log_driver to k8s-file for containers in containers * add --mac-address to podman play kube * compat api: Networks must be empty instead of null * System tests: honor $OCI_RUNTIME (for CI) * is this a bug? * system test image: add arm64v8 image * Fix troubleshooting documentation on handling sublemental groups. * Add --all to podman start * Fix variable reference typo. in multi-arch image action * cgroup: always honor --cgroup-parent with cgroupfs * Bump github.com/uber/jaeger-client-go * Don't require tests for github-actions & metadata * Detect if in podman machine virtual vm * Fix multi-arch image workflow typo * [CI:DOCS] Add titles to remote docs (windows) * Remove unused VolumeList* structs * Cirrus: Update F34beta -> F34 * Update container image docs + fix unstable execution * Bump github.com/containers/storage from 1.30.0 to 1.30.1 * TODO complete * Docker returns 'die' status rather then 'died' status * Check if another VM is running on machine start * [CI:DOCS] Improve titles of command HTML pages * system tests: networking: fix another race condition * Use seccomp_profile as default profile if defined in containers.conf * Bump github.com/json-iterator/go from 1.1.10 to 1.1.11 * Vendored * Autoupdate local label functional * System tests: fix two race conditions * Add more documentation on conmon * Allow docker volume create API to pass without name * Cirrus: Update Ubuntu images to 21.04 * Skip blkio-weight test when no kernel BFQ support * rootless: Tell the user what was led to the error, not just what it is * Add troubleshooting advice about the --userns option. * Fix images prune filter until * Fix logic for pushing stable multi-arch images * Fixes generate kube incorrect when bind-mounting "/" and "/root" * libpod/image: unit tests: don't use system's registries.conf.d * runtime: create userns when CAP_SYS_ADMIN is not present * rootless: attempt to copy current mappings first * [CI:DOCS] Restore missing content to manpages * [CI:DOCS] Fix Markdown layout bugs * Fix podman ps --filter ancestor to match exact ImageName/ImageID * Add machine-enabled to containers.conf for machine * Several multi-arch image build/push fixes * Add podman run --timeout option * Parse slirp4netns net options with compat api * Fix rootlesskit port forwarder with custom slirp cidr * Fix removal race condition in ListContainers * Add github-action workflow to build/push multi-arch * rootless: if root is not sub?id raise a debug message * Bump github.com/containers/common from 0.36.0 to 0.37.0 * Add go template shell completion for --format * Add --group-add keep-groups: suplimentary groups into container * Fixes from make codespell * Typo fix to usage text of --compress option * corrupt-image test: fix an oops * Add --noheading flag to all list commands * Bump github.com/containers/storage from 1.29.0 to 1.30.0 * Bump github.com/containers/image/v5 from 5.11.0 to 5.11.1 * [CI:DOCS] Fix Markdown table layout bugs * podman-remote should show podman.sock info * rmi: don't break when the image is missing a manifest * [CI:DOCS] Rewrite --uidmap doc in podman-create.1.md and podman-run.1.md * Add support for CDI device configuration * [CI:DOCS] Add missing dash to verbose option * Bump github.com/uber/jaeger-client-go * Remove an advanced layer diff function * Ensure mount destination is clean, no trailing slash * add it for inspect pidfile * [CI:DOCS] Fix introduction page typo * support pidfile on container restore * fix start it * skip pidfile test on remote * improve document * set pidfile default value int containerconfig * add pidfile in inspection * add pidfile it for container start * skip pidfile it on remote * Modify according to comments * WIP: drop test requirement * runtime: bump required conmon version * runtime: return findConmon to libpod * oci: drop ExecContainerCleanup * oci: use `--full-path` option for conmon * use AttachSocketPath when removing conmon files * hide conmon-pidfile flag on remote mode * Fix possible panic in libpod/image/prune.go * add --ip to podman play kube * add flag autocomplete * add ut * add flag "--pidfile" for podman create/run * Add network bindings tests: remove and list * Fix build with GO111MODULE=off * system tests: build --pull-never: deal with flakes * compose test: diagnose flakes v3 * podman play kube apply correct log driver * Fixes podman-remote save to directories does not work * Bump github.com/rootless-containers/rootlesskit from 0.14.1 to 0.14.2 * Update documentation of podman-run to reflect volume "U" option * Fix flake on failed podman-remote build : try 2 * compose test: ongoing efforts to diagnose flakes * Test that we don't error out on advertised --log-level values * At trace log level, print error text using %+v instead of %v * pkg/errorhandling.JoinErrors: don't throw away context for lone errors * Recognize --log-level=trace * Fix flake on failed podman-remote build * System tests: fix racy podman-inspect * Fixes invalid expression in save command * Bump github.com/containers/common from 0.35.4 to 0.36.0 * Update nix pin with `make nixpkgs` * compose test: try to get useful data from flakes * Remove in-memory state implementation * Fix message about runtime to show only the actual runtime * System tests: setup: better cleanup of stray images * Bump github.com/containers/ocicrypt from 1.1.0 to 1.1.1 * Reflect current state of prune implementation in docs * Do not delete container twice * [CI:DOCS] Correct status code for /pods/create * vendor in containers/storage v1.29.0 * cgroup: do not set cgroup parent when rootless and cgroupfs * Overhaul Makefile binary and release worflows * Reorganize Makefile with sections and guide * Simplify Makefile help target * Don't shell to obtain current directory * Remove unnecessary/not-needed release.txt target * Fix incorrect version number output * Exclude .gitignore from test req. * Fix handling of $NAME and $IMAGE in runlabel * Update podman image Dockerfile to support Podman in container * Bump github.com/containers/image/v5 from 5.10.5 to 5.11.0 * Fix slashes in socket URLs * Add network prune filters support to bindings * Add support for play/generate kube volumes * Update manifest API endpoints * Fix panic when not giving a machine name for ssh * cgroups: force 64 bits to ParseUint * Bump k8s.io/api from 0.20.5 to 0.21.0 * [CI:DOCS] Fix formatting of podman-build man page * buildah-bud tests: simplify * Add missing return * Bump github.com/onsi/ginkgo from 1.16.0 to 1.16.1 * speed up CI handling of images * Volumes prune endpoint should use only prune filters * Cirrus: Use Fedora 34beta images * Bump go.sum + Makefile for golang 1.16 * Exempt Makefile changes from test requirements * Adjust libpod API Container Wait documentation to the code * [CI:DOCS] Update swagger definition of inspect manifest * use updated ubuntu images * podman unshare: add --rootless-cni to join the ns * Update swagger-check * swagger: remove name wildcards * Update buildah-bud diffs * Handle podman-remote --arch, --platform, --os * buildah-bud tests: handle go pseudoversions, plus... * Fix flaking rootless compose test * rootless cni add /usr/sbin to PATH if not present * System tests: special case for RHEL: require runc * Add --requires flag to podman run/create * [CI:DOCS] swagger-check: compare operations * [CI:DOCS] Polish swagger OpertionIDs * [NO TESTS NEEDED] Update nix pin with `make nixpkgs` * Ensure that `--userns=keep-id` sets user in config * [CI:DOCS] Set all operation id to be compatibile * Move operationIds to swagger:operation line * swagger: add operationIds that match with docker * Cirrus: Make use of shared get_ci_vm container * Don't relabel volumes if running in a privileged container * Allow users to override default storage opts with --storage-opt * Add support for podman --context default * Verify existence of auth file if specified * fix machine naming conventions * Initial network bindings tests * Update release notes to indicate CVE fix * Move socket activation check into init() and set global condition. * Bump github.com/onsi/ginkgo from 1.15.2 to 1.16.0 * Http api tests for network prune with until filter * podman-run.1.md, podman-create.1.md : Adjust Markdown layout for --userns * Fix typos --uidmapping and --gidmapping * Add transport and destination info to manifest doc * Bump github.com/rootless-containers/rootlesskit from 0.14.0 to 0.14.1 * Add default template functions * Fix missing podman-remote build options * Bump github.com/coreos/go-systemd/v22 from 22.3.0 to 22.3.1 * Add ssh connection to root user * Add rootless docker-compose test to the CI * Use the slrip4netns dns in the rootless cni ns * Cleanup the rootless cni namespace * Add new docker-compose test for two networks * Make the docker-compose test work rootless * Remove unused rootless-cni-infra container files * Only use rootless RLK when the container has ports * Fix dnsname test * Enable rootless network connect/disconnect * Move slirp4netns functions into an extra file * Fix pod infra container cni network setup * Add rootless support for cni and --uidmap * rootless cni without infra container * Recreate until container prune tests for bindings * Remove --execute from podman machine ssh * Fixed podman-remote --network flag * Makefile: introduce install.docker-full * Makefile: ensure install.docker creates BINDIR * Fix unmount doc reference in image.rst * Should send the OCI runtime path not just the name to buildah * podman machine shell completion * Fix handling of remove --log-rusage param * Fix bindings prune containers flaky test * [CI:DOCS] Add local html build info to docs/README.md * Add podman machine list * Trim white space from /top endpoint results * Remove semantic version suffices from API calls * podman machine init --ignition-path * Document --volume from podman-remote run/create client * Update main branch to reflect the release of v3.1.0 * Silence podman network reload errors with iptables-nft * Containers prune endpoint should use only prune filters * resolve proper aarch64 image names * APIv2 basic test: relax APIVersion check * Add machine support for qemu-system-aarch64 * podman machine init user input * manpage xref: helpful diagnostic for unescaped dash-dash * Bump to v3.2.0-dev * swagger: update system version response body * buildah-bud tests: reenable pull-never test * [NO TESTS NEEDED] Shrink the size of podman-remote * Add powershell completions * [NO TESTS NEEDED] Drop Warning to Info, if cgroups not mounted * Fix long option format on docs.podman.io * system tests: friendier messages for 2-arg is() * service: use LISTEN_FDS * man pages: correct seccomp-policy label * rootless: use is_fd_inherited * podman generate systemd --new do not duplicate params * play kube: add support for env vars defined from secrets * play kube: support optional/mandatory env var from config map * play kube: prepare supporting other env source than config maps * Add machine support for more Linux distros * [NO TESTS NEEDED] Use same function podman-remote rmi as podman * Podman machine enhancements * Add problematic volume name to kube play error messages * Fix podman build --pull-never * [NO TESTS NEEDED] Fix for kernel without CONFIG_USER_NS * [NO TESTS NEEDED] Turn on podman-remote build --isolation * Fix list pods filter handling in libpod api * Remove resize race condition * [NO TESTS NEEDED] Vendor in containers/buildah v1.20.0 * Use TMPDIR when commiting images * Add RequiresMountsFor= to systemd generate * Bump github.com/vbauerster/mpb/v6 from 6.0.2 to 6.0.3 * Fix swapped dimensions from terminal.GetSize * Rename podman machine create to init and clean up * Correct json field name * system tests: new interactive tests * Improvements for machine * libpod/image: unit tests: use a `registries.conf` for aliases * libpod/image: unit tests: defer cleanup * libpod/image: unit tests: use `require.NoError` * Add --execute flag to podman machine ssh * introduce podman machine * Podman machine CLI and interface stub * Support multi doc yaml for generate/play kube * Fix filters in image http compat/libpod api endpoints * Bump github.com/containers/common from 0.35.3 to 0.35.4 * Bump github.com/containers/storage from 1.28.0 to 1.28.1 * Check if stdin is a term in --interactive --tty mode * [NO TESTS NEEDED] Remove /tmp/containers-users-* files on reboot * [NO TESTS NEEDED] Fix rootless volume plugins * Ensure manually-created volumes have correct ownership * Bump github.com/rootless-containers/rootlesskit * Unification of until filter across list/prune endpoints * Unification of label filter across list/prune endpoints * fixup * fix: build endpoint for compat API * [CI:DOCS] Add note to mappings for user/group userns in build * Bump k8s.io/api from 0.20.1 to 0.20.5 * Validate passed in timezone from tz option * WIP: run buildah bud tests using podman * Fix containers list/prune http api filter behaviour * Generate Kubernetes PersistentVolumeClaims from named volumes

1 0

New MicroOS snapshot 20210614 released!
by Richard Brown 16 Jun '21

16 Jun '21

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: gnome-desktop (40.1 -> 40.2) gptfdisk (1.0.6 -> 1.0.8) gtk4 hidapi libxslt pipewire (0.3.28 -> 0.3.30) podman (3.1.2 -> 3.2.0) re2 (20210401 -> 20210601) tracker (3.1.1 -> 3.1.2) xorg-x11-server === Details === ==== gnome-desktop ==== Version update (40.1 -> 40.2) Subpackages: gnome-version libgnome-desktop-3-19 libgnome-desktop-3_0-common typelib-1_0-GnomeDesktop-3_0 - Update to version 40.2: + Fix crash loading keyboard settings panel. ==== gptfdisk ==== Version update (1.0.6 -> 1.0.8) - Update to 1.0.8 * Fixed double byte swap operation on writes of partition name data on big-endian systems; this is in addition to the double byte swap fix on reading partition label data fixed in 1.0.7. (Thanks to Erik Larsson for both fixes.) * Added feature to gdisk and sgdisk to enable swapping the byte order of partition names, so as to correct disks already affected by the preceding bug. This option is 'b' on the experts' menu in gdisk and - b/--byte-swap-name in sgdisk. This seems advanced/obscure enough that I don't want to clutter cgdisk's menu with this option, so I haven't added it there. * Added type code for the Barebox boot loader (0xbb00; 4778ED65-BF42-45FA-9C5B-287A1DC4AAB1). * Fixed bug that caused spurious warnings about the partition table header claiming an invalid size of partition entries when reading some MBR disks. * Added ARM64 as an architecture for the Mac builds of gdisk and fixparts. The official GPT fdisk binaries of these files for macOS are now "universal" x86-64/ARM64 binaries, so they will run natively on the new M1 (ARM64) Macs. The sgdisk and cgdisk binaries, though, remain built only for x86-64, because they rely on libraries that are not easily built in "universal" form. * Fixed double byte swap operation on partition label data on big-endian CPUs. This resulted in partition names becoming gibberish on such CPUs. * Added three new type codes: - 0x0701 - Microsoft Storage Replica - 0x0702 - ArcaOS Type 1 - 0x8401 - Storage Performance Development Kit (SPDK) block device - Drop fix-spurious-warnings.patch ==== gtk4 ==== Subpackages: gtk4-schema libgtk-4-1 typelib-1_0-Gtk-4_0 - Move RPM macros to %_rpmmacrodir. ==== hidapi ==== - Add 0001-configure.ac-remove-duplicate-AC_CONFIG_MACRO_DIR-22.patch: fix boo#1187056 ==== libxslt ==== Subpackages: libxslt-tools libxslt1 - Backport upstream xsltproc manpage fix f165525f Recreate xsltproc man page with old Docbook stylesheet URL Recreate-xsltproc-man-page-with-old-Docbook-styleshe.patch - Don't disable testsuite under QEMU - Move the Copyright file to %_defaultlicensedir Configure.ac replaces the COPYING file with a symlink. ==== pipewire ==== Version update (0.3.28 -> 0.3.30) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-modules pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Update to 0.3.30 * This is a quick emergency release to fix some severe problems with the previous release. * Highlights - Recording from a monitor port should work again. - JACK applications should now be more stable again. - Freewheeling should not lock up anymore. - Fix lockups in many pulseaudio apps. - module-echo-cancel was implemented in pipewire-pulse - Many other stability fixes. * PipeWire - Improve module path logic. - Improve logger formatting * PulseAudio server - Make sure to pass 64 bits values for time on ARM 32 bits to avoid protocol errors. - Avoid a crash when unloading module-combine-sink. - Avoid overflow in requested bytes, resulting in stalled audio. - Implement module-echo-cancel. * Bluetooth - Handle latency parameters instead of failing. * JACK - Fix locking in many places to avoid deadlocks and crashes. - Fix port rename. - Stop freewheeling correctly instead of deadlocking. - Update to 0.3.29 * Highlights - Latency reporting is now implemented. - Many documentation updates and cleanups. - module-combine-sink was added to PulseAudio server. - Better handling of multichannel input profiles. - Fix 100% volume issue when monitor suspends or profile changes in some cases. - Bugfixes and crashes * PipeWire - A new module-rt was added to acquire real-time scheduling priviledges without using RTKit. - Documentation fixes and updates. Docs are now using a custom theme. - There is now a MANDATORY flag on properties that influence how properties are filtered. - Filter-chain now parses the LADSPA_PATH correctly when it contains a colon separated list. - Move `#pipewire` IRC channel to oftc.net. - Fix an error where param changes were not emited in all cases. - Implement Latency reporting. Latency values are propagated through the graph so that each node knows the latency to the output/input device. Synchronization in pw-stream has been updated to use this. - Some more upmix cases are added so that LFE, SIDE and REAR can be generated from a mono channel as well. - pw-stream and pw-filter will now emit the process event from the real-time thread in a safe way, potentially avoiding some of the harder to debug crashes. - Fix potential stack overflow with serialize_dict. - Add PIPEWIRE_NO_CONFIG to run without custom config files. - The WebRTC echo canceler was added. Next versions will integrate this better. * PulseAudio server - module-combine-sink was implemented. - Fix some segfaults when DBus connections fail. - Support for listening on IPv6 was added. - Fix a bug where many flushes could result in requests for too much data from the client, causing sync, latency and garbled sound problems after many seeks. * ALSA - Also probe input paths for multichannel mappings. This makes multichannel input ports show up in more cases. - Fix headphones/front volume issue on some cards. - Fix max volume issue when profile changes. - Fix issue with UCM local config that was not available when the device was opened in the server but the UCM was opened by the session manager. Fixes alsa 1.2.5 compatibility. * JACK - Implement latency reporting with the new Latency params. - Add BuildRequires: pkgconfig(webrtc-audio-processing) which is required by the new WebRTC echo canceler. - Remove patch which is already included: * 0001-alsa-mixer-only-use-switch-to-mute-Front-in-the-Headphone-path.patch ==== podman ==== Version update (3.1.2 -> 3.2.0) Subpackages: podman-cni-config - Update to version 3.2.0: * Bump to v3.2.0 * Fix network create macvlan with subnet option * Final release notes updates for v3.2.0 * add ipv6 nameservers only when the container has ipv6 enabled * Use request context instead of background * [v.3.2] events: support disjunctive filters * System tests: add :Z to volume mounts * generate systemd: make mounts portable * vendor containers/storage(a)v1.31.3 * vendor containers/common(a)v0.38.5 * Bump to v3.2.0-dev * Bump to v3.2.0-RC3 * Update release notes for v3.2.0-RC3 * Fix race on podman start --all * Fix race condition in running ls container in a pod * docs: --cert-dir: point to containers-certs.d(5) * Handle hard links in different directories * Improve OCI Runtime error * Handle hard links in remote builds * Podman info add support for status of cgroup controllers * Drop container does not exist on removal to debugf * Downgrade API service routing table logging * add libimage events * docs: generate systemd: XDG_RUNTIME_DIR * Fix problem copying files when container is in host pid namespace * Bump to v3.2.0-dev * Bump to v3.2.0-RC2 * update c/common * Update Cirrus DEST_BRANCH to v3.2 * Updated vendors of c/image, c/storage, Buildah * Initial release notes for v3.2.0-RC2 * Add script for identifying commits in release branches * Add host.containers.internal entry into container's etc/hosts * image prune: remove unused images only with `--all` * podman network reload add rootless support * Use more recent `stale` release... * network tutorial: update with rootless cni changes * [CI:DOCS] Update first line in intro page * Use updated VM images + updated automation tooling * auto-update service: prune images * make vendor * fix system upgrade tests * Print "extracting" only on compressed file * podman image tree: restore previous behavior * fix network restart always test * fix incorrect log driver in podman container image * Add support for cli network prune --filter flag * Move filter parsing to common utils * Bump github.com/containers/storage from 1.30.2 to 1.30.3 * Update nix pin with `make nixpkgs` * [CI:DOCS] hack/bats - new helper for running system tests * fix restart always with slirp4netns * Bump github.com/opencontainers/runc from 1.0.0-rc93 to 1.0.0-rc94 * Bump github.com/coreos/go-systemd/v22 from 22.3.1 to 22.3.2 * Add host.serviceIsRemote to podman info results * Add client disconnect to build handler loop * Remove obsolete skips * Fix podman-remote build --rm=false ... * fix: improved "containers/{name}/wait" endpoint * Bump github.com/containers/storage from 1.30.1 to 1.30.2 * Add envars to the generated systemd unit * fix: use UTC Time Stamps in response JSON * fix container startup for empty pidfile * Kube like pods should share ipc,net,uts by default * fix: compat API "images/get" for multiple images * Revert escaped double dash man page flag syntax * Report Download complete in Compatibility mode * Add documentation on short-names * Bump github.com/docker/docker * Adds support to preserve auto update labels in generate and play kube * [CI:DOCS] Stop conversion of `--` into en dash * Revert Patch to relabel if selinux not enabled * fix per review request * Add support for environment variable secrets * fix pre review request * Fix infinite loop in isPathOnVolume * Add containers.conf information for changing defaults * CI: run rootless tests under ubuntu * Fix wrong macvlan PNG in networking doc. * Add restart-policy to container filters & --filter to podman start * Fixes docker-compose cannot set static ip when use ipam * channel: simplify implementation * build: improve regex for iidfile * Bump github.com/onsi/gomega from 1.11.0 to 1.12.0 * cgroup: fix rootless --cgroup-parent with pods * fix: docker APIv2 `images/get` * codespell cleanup * Minor podmanimage docs updates. * Fix handling of runlabel IMAGE and NAME * Bump to v3.2.0-dev * Bump to v3.2.0-rc1 * rootless: improve automatic range split * podman: set volatile storage flag for --rm containers * Bump github.com/onsi/ginkgo from 1.16.1 to 1.16.2 * Bump github.com/containers/image/v5 from 5.11.1 to 5.12.0 * migrate Podman to containers/common/libimage * Add filepath glob support to --security-opt unmask * Force log_driver to k8s-file for containers in containers * add --mac-address to podman play kube * compat api: Networks must be empty instead of null * System tests: honor $OCI_RUNTIME (for CI) * is this a bug? * system test image: add arm64v8 image * Fix troubleshooting documentation on handling sublemental groups. * Add --all to podman start * Fix variable reference typo. in multi-arch image action * cgroup: always honor --cgroup-parent with cgroupfs * Bump github.com/uber/jaeger-client-go * Don't require tests for github-actions & metadata * Detect if in podman machine virtual vm * Fix multi-arch image workflow typo * [CI:DOCS] Add titles to remote docs (windows) * Remove unused VolumeList* structs * Cirrus: Update F34beta -> F34 * Update container image docs + fix unstable execution * Bump github.com/containers/storage from 1.30.0 to 1.30.1 * TODO complete * Docker returns 'die' status rather then 'died' status * Check if another VM is running on machine start * [CI:DOCS] Improve titles of command HTML pages * system tests: networking: fix another race condition * Use seccomp_profile as default profile if defined in containers.conf * Bump github.com/json-iterator/go from 1.1.10 to 1.1.11 * Vendored * Autoupdate local label functional * System tests: fix two race conditions * Add more documentation on conmon * Allow docker volume create API to pass without name * Cirrus: Update Ubuntu images to 21.04 * Skip blkio-weight test when no kernel BFQ support * rootless: Tell the user what was led to the error, not just what it is * Add troubleshooting advice about the --userns option. * Fix images prune filter until * Fix logic for pushing stable multi-arch images * Fixes generate kube incorrect when bind-mounting "/" and "/root" * libpod/image: unit tests: don't use system's registries.conf.d * runtime: create userns when CAP_SYS_ADMIN is not present * rootless: attempt to copy current mappings first * [CI:DOCS] Restore missing content to manpages * [CI:DOCS] Fix Markdown layout bugs * Fix podman ps --filter ancestor to match exact ImageName/ImageID * Add machine-enabled to containers.conf for machine * Several multi-arch image build/push fixes * Add podman run --timeout option * Parse slirp4netns net options with compat api * Fix rootlesskit port forwarder with custom slirp cidr * Fix removal race condition in ListContainers * Add github-action workflow to build/push multi-arch * rootless: if root is not sub?id raise a debug message * Bump github.com/containers/common from 0.36.0 to 0.37.0 * Add go template shell completion for --format * Add --group-add keep-groups: suplimentary groups into container * Fixes from make codespell * Typo fix to usage text of --compress option * corrupt-image test: fix an oops * Add --noheading flag to all list commands * Bump github.com/containers/storage from 1.29.0 to 1.30.0 * Bump github.com/containers/image/v5 from 5.11.0 to 5.11.1 * [CI:DOCS] Fix Markdown table layout bugs * podman-remote should show podman.sock info * rmi: don't break when the image is missing a manifest * [CI:DOCS] Rewrite --uidmap doc in podman-create.1.md and podman-run.1.md * Add support for CDI device configuration * [CI:DOCS] Add missing dash to verbose option * Bump github.com/uber/jaeger-client-go * Remove an advanced layer diff function * Ensure mount destination is clean, no trailing slash * add it for inspect pidfile * [CI:DOCS] Fix introduction page typo * support pidfile on container restore * fix start it * skip pidfile test on remote * improve document * set pidfile default value int containerconfig * add pidfile in inspection * add pidfile it for container start * skip pidfile it on remote * Modify according to comments * WIP: drop test requirement * runtime: bump required conmon version * runtime: return findConmon to libpod * oci: drop ExecContainerCleanup * oci: use `--full-path` option for conmon * use AttachSocketPath when removing conmon files * hide conmon-pidfile flag on remote mode * Fix possible panic in libpod/image/prune.go * add --ip to podman play kube * add flag autocomplete * add ut * add flag "--pidfile" for podman create/run * Add network bindings tests: remove and list * Fix build with GO111MODULE=off * system tests: build --pull-never: deal with flakes * compose test: diagnose flakes v3 * podman play kube apply correct log driver * Fixes podman-remote save to directories does not work * Bump github.com/rootless-containers/rootlesskit from 0.14.1 to 0.14.2 * Update documentation of podman-run to reflect volume "U" option * Fix flake on failed podman-remote build : try 2 * compose test: ongoing efforts to diagnose flakes * Test that we don't error out on advertised --log-level values * At trace log level, print error text using %+v instead of %v * pkg/errorhandling.JoinErrors: don't throw away context for lone errors * Recognize --log-level=trace * Fix flake on failed podman-remote build * System tests: fix racy podman-inspect * Fixes invalid expression in save command * Bump github.com/containers/common from 0.35.4 to 0.36.0 * Update nix pin with `make nixpkgs` * compose test: try to get useful data from flakes * Remove in-memory state implementation * Fix message about runtime to show only the actual runtime * System tests: setup: better cleanup of stray images * Bump github.com/containers/ocicrypt from 1.1.0 to 1.1.1 * Reflect current state of prune implementation in docs * Do not delete container twice * [CI:DOCS] Correct status code for /pods/create * vendor in containers/storage v1.29.0 * cgroup: do not set cgroup parent when rootless and cgroupfs * Overhaul Makefile binary and release worflows * Reorganize Makefile with sections and guide * Simplify Makefile help target * Don't shell to obtain current directory * Remove unnecessary/not-needed release.txt target * Fix incorrect version number output * Exclude .gitignore from test req. * Fix handling of $NAME and $IMAGE in runlabel * Update podman image Dockerfile to support Podman in container * Bump github.com/containers/image/v5 from 5.10.5 to 5.11.0 * Fix slashes in socket URLs * Add network prune filters support to bindings * Add support for play/generate kube volumes * Update manifest API endpoints * Fix panic when not giving a machine name for ssh * cgroups: force 64 bits to ParseUint * Bump k8s.io/api from 0.20.5 to 0.21.0 * [CI:DOCS] Fix formatting of podman-build man page * buildah-bud tests: simplify * Add missing return * Bump github.com/onsi/ginkgo from 1.16.0 to 1.16.1 * speed up CI handling of images * Volumes prune endpoint should use only prune filters * Cirrus: Use Fedora 34beta images * Bump go.sum + Makefile for golang 1.16 * Exempt Makefile changes from test requirements * Adjust libpod API Container Wait documentation to the code * [CI:DOCS] Update swagger definition of inspect manifest * use updated ubuntu images * podman unshare: add --rootless-cni to join the ns * Update swagger-check * swagger: remove name wildcards * Update buildah-bud diffs * Handle podman-remote --arch, --platform, --os * buildah-bud tests: handle go pseudoversions, plus... * Fix flaking rootless compose test * rootless cni add /usr/sbin to PATH if not present * System tests: special case for RHEL: require runc * Add --requires flag to podman run/create * [CI:DOCS] swagger-check: compare operations * [CI:DOCS] Polish swagger OpertionIDs * [NO TESTS NEEDED] Update nix pin with `make nixpkgs` * Ensure that `--userns=keep-id` sets user in config * [CI:DOCS] Set all operation id to be compatibile * Move operationIds to swagger:operation line * swagger: add operationIds that match with docker * Cirrus: Make use of shared get_ci_vm container * Don't relabel volumes if running in a privileged container * Allow users to override default storage opts with --storage-opt * Add support for podman --context default * Verify existence of auth file if specified * fix machine naming conventions * Initial network bindings tests * Update release notes to indicate CVE fix * Move socket activation check into init() and set global condition. * Bump github.com/onsi/ginkgo from 1.15.2 to 1.16.0 * Http api tests for network prune with until filter * podman-run.1.md, podman-create.1.md : Adjust Markdown layout for --userns * Fix typos --uidmapping and --gidmapping * Add transport and destination info to manifest doc * Bump github.com/rootless-containers/rootlesskit from 0.14.0 to 0.14.1 * Add default template functions * Fix missing podman-remote build options * Bump github.com/coreos/go-systemd/v22 from 22.3.0 to 22.3.1 * Add ssh connection to root user * Add rootless docker-compose test to the CI * Use the slrip4netns dns in the rootless cni ns * Cleanup the rootless cni namespace * Add new docker-compose test for two networks * Make the docker-compose test work rootless * Remove unused rootless-cni-infra container files * Only use rootless RLK when the container has ports * Fix dnsname test * Enable rootless network connect/disconnect * Move slirp4netns functions into an extra file * Fix pod infra container cni network setup * Add rootless support for cni and --uidmap * rootless cni without infra container * Recreate until container prune tests for bindings * Remove --execute from podman machine ssh * Fixed podman-remote --network flag * Makefile: introduce install.docker-full * Makefile: ensure install.docker creates BINDIR * Fix unmount doc reference in image.rst * Should send the OCI runtime path not just the name to buildah * podman machine shell completion * Fix handling of remove --log-rusage param * Fix bindings prune containers flaky test * [CI:DOCS] Add local html build info to docs/README.md * Add podman machine list * Trim white space from /top endpoint results * Remove semantic version suffices from API calls * podman machine init --ignition-path * Document --volume from podman-remote run/create client * Update main branch to reflect the release of v3.1.0 * Silence podman network reload errors with iptables-nft * Containers prune endpoint should use only prune filters * resolve proper aarch64 image names * APIv2 basic test: relax APIVersion check * Add machine support for qemu-system-aarch64 * podman machine init user input * manpage xref: helpful diagnostic for unescaped dash-dash * Bump to v3.2.0-dev * swagger: update system version response body * buildah-bud tests: reenable pull-never test * [NO TESTS NEEDED] Shrink the size of podman-remote * Add powershell completions * [NO TESTS NEEDED] Drop Warning to Info, if cgroups not mounted * Fix long option format on docs.podman.io * system tests: friendier messages for 2-arg is() * service: use LISTEN_FDS * man pages: correct seccomp-policy label * rootless: use is_fd_inherited * podman generate systemd --new do not duplicate params * play kube: add support for env vars defined from secrets * play kube: support optional/mandatory env var from config map * play kube: prepare supporting other env source than config maps * Add machine support for more Linux distros * [NO TESTS NEEDED] Use same function podman-remote rmi as podman * Podman machine enhancements * Add problematic volume name to kube play error messages * Fix podman build --pull-never * [NO TESTS NEEDED] Fix for kernel without CONFIG_USER_NS * [NO TESTS NEEDED] Turn on podman-remote build --isolation * Fix list pods filter handling in libpod api * Remove resize race condition * [NO TESTS NEEDED] Vendor in containers/buildah v1.20.0 * Use TMPDIR when commiting images * Add RequiresMountsFor= to systemd generate * Bump github.com/vbauerster/mpb/v6 from 6.0.2 to 6.0.3 * Fix swapped dimensions from terminal.GetSize * Rename podman machine create to init and clean up * Correct json field name * system tests: new interactive tests * Improvements for machine * libpod/image: unit tests: use a `registries.conf` for aliases * libpod/image: unit tests: defer cleanup * libpod/image: unit tests: use `require.NoError` * Add --execute flag to podman machine ssh * introduce podman machine * Podman machine CLI and interface stub * Support multi doc yaml for generate/play kube * Fix filters in image http compat/libpod api endpoints * Bump github.com/containers/common from 0.35.3 to 0.35.4 * Bump github.com/containers/storage from 1.28.0 to 1.28.1 * Check if stdin is a term in --interactive --tty mode * [NO TESTS NEEDED] Remove /tmp/containers-users-* files on reboot * [NO TESTS NEEDED] Fix rootless volume plugins * Ensure manually-created volumes have correct ownership * Bump github.com/rootless-containers/rootlesskit * Unification of until filter across list/prune endpoints * Unification of label filter across list/prune endpoints * fixup * fix: build endpoint for compat API * [CI:DOCS] Add note to mappings for user/group userns in build * Bump k8s.io/api from 0.20.1 to 0.20.5 * Validate passed in timezone from tz option * WIP: run buildah bud tests using podman * Fix containers list/prune http api filter behaviour * Generate Kubernetes PersistentVolumeClaims from named volumes ==== re2 ==== Version update (20210401 -> 20210601) - update to 2021-06-01: * Fix (|a)* matching more text than (|a)+ * build system tweaks and developer visible fixes ==== tracker ==== Version update (3.1.1 -> 3.1.2) Subpackages: libtracker-sparql-3_0-0 tracker-data-files - Update to version 3.1.2: + Add missing autocleanup functions. + Support empty array updates. + VAPI fixes. + Add missing G_BEGIN_DECLS/G_END_DECLS guards. + Manpage fixes. + Fix crash in "tracker3 export --2to3" subcommand. + Fix rare bug that lead to triples being silently eaten. + Improvements to datetime handling. + Updated translations. ==== xorg-x11-server ==== Subpackages: xorg-x11-server-Xvfb - u_modesetting-Fix-dirty-updates-for-sw-rotation.patch * Fixes broken rotation support for DRM drivers without hardware rotation support or direct vram access (bsc#1182955)

1 0

New ARM MicroOS snapshot 20210612 released!
by Guillaume Gardet 15 Jun '21

15 Jun '21

Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=3&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: alsa apparmor at-spi2-core (2.40.1 -> 2.40.2) avahi baloo5-widgets (21.04.1 -> 21.04.2) compat-usrmerge cups distribution-logos-openSUSE dolphin (21.04.1 -> 21.04.2) gobject-introspection gpsd gupnp (1.2.6 -> 1.2.7) kaccounts-integration (21.04.1 -> 21.04.2) kate (21.04.1 -> 21.04.2) kde-print-manager (21.04.1 -> 21.04.2) kdialog (21.04.1 -> 21.04.2) kio-extras5 (21.04.1 -> 21.04.2) konsole (21.04.1 -> 21.04.2) kwalletmanager5 (21.04.1 -> 21.04.2) libX11 (1.7.1 -> 1.7.2) libapparmor libgnomekbd libnettle (3.7.2 -> 3.7.3) librsvg (2.50.6 -> 2.50.7) linux-atm mpg123 (1.27.2 -> 1.28.0) openSUSE-build-key pam-config plasma5-workspace polkit python-attrs (20.3.0 -> 21.2.0) python-idna (3.1 -> 3.2) python-more-itertools (8.7.0 -> 8.8.0) python-oauthlib (3.1.0 -> 3.1.1) python38 python38-core setools u-boot-rpiarm64 === Details === ==== alsa ==== - Fix regression in config read and UCM handling on pipewire and pulseaudio (boo#1187079, boo#1187033): 0001-conf-fix-load_for_all_cards.patch 0002-ucm-add-_alibpref-to-get-the-private-device-prefix.patch 0003-ucm-fix-_alibpref-string-add-.-delimiter-to-the-end.patch ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-parser apparmor-profiles apparmor-utils python3-apparmor - move Requires: python3 back to the python3-apparmor subpackage - readline usage is in the python modules, not in apparmor-utils - Remove python symbols (python means currently python2), work only with python3 ones (fallout from bsc#1185588). ==== at-spi2-core ==== Version update (2.40.1 -> 2.40.2) Subpackages: libatspi0 typelib-1_0-Atspi-2_0 - Update to version 2.40.2: + README: Remove outdated links. + Key grab fixes for the new API. + registryd: Add a missing call to va_end. ==== avahi ==== Subpackages: libavahi-client3 libavahi-common3 libavahi-core7 - Fix libavahi-devel requirements. The devel package installs libavahi-libevent.so but didn't require the library it's pointing to. ==== baloo5-widgets ==== Version update (21.04.1 -> 21.04.2) - Update to 21.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.04.2 - No code change since 21.04.1 ==== compat-usrmerge ==== - early exit in case of overlayfs (boo#1187027) - Avoid dependency on mountpoint from util-linux - Also check for availability of find - fix conversion with split /usr (boo#1186781) - exit early if one of the affected directories has mountpoint beneath it - add fallback for filesystems without renameat2 (boo#1186637) ==== cups ==== Subpackages: cups-client cups-config libcups2 libcupsimage2 - Provide /usr/share/cups/ppdc/ in the "cups" main package to avoid that "lpinfo -m" results in /var/log/cups/error_log things like "ppdc: Unable to find include file font.defs" or "ppdc: Unable to find include file hp.h" and then "Bad driver information file /usr/share/cups/drv/sample.drv" (bsc#1186843) ==== distribution-logos-openSUSE ==== - Add icons package to handle systemd branding better ==== dolphin ==== Version update (21.04.1 -> 21.04.2) Subpackages: dolphin-part libdolphinvcs5 - Update to 21.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.04.2 - Changes since 21.04.1: * Fix crash on Wayland when closing the mainwindow while another dialog is open * [contextmenusettingspage] Fix Crash because of nullptr (kde#437539) * search/facetswidget: Check for protocol before trying to fetch tags (kde#435586) ==== gobject-introspection ==== Subpackages: girepository-1_0 libgirepository-1_0-1 - gi-find-deps.sh: on Tumbleweed, HOSTTYPE on ppc64/ppc64le reports powerpc64 and powerpc64le: accept those strings as 64bit archs. ==== gpsd ==== - disable lto on aarch64 for now (bsc#1187089) ==== gupnp ==== Version update (1.2.6 -> 1.2.7) - Update to version 1.2.7: + Fix build with -Wformat-security=error + Bump required GLib version to 2.66 + Fix some introspection annotations + Add missing varargs functions to vapi + Revert fix from 1.2.5 which causes managed control points to live too long ==== kaccounts-integration ==== Version update (21.04.1 -> 21.04.2) - Update to 21.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.04.2 - No code change since 21.04.1 ==== kate ==== Version update (21.04.1 -> 21.04.2) Subpackages: kate-plugins - Update to 21.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.04.2 - Changes since 21.04.1: * Prevent crash in git-blame for HUGE git commits (kde#437683) * Fix crash when turning on "bg shading" for Documents plugin * deactivate Kate command bar if KXMLGui command bar is there ==== kde-print-manager ==== Version update (21.04.1 -> 21.04.2) - Update to 21.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.04.2 - No code change since 21.04.1 ==== kdialog ==== Version update (21.04.1 -> 21.04.2) - Update to 21.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.04.2 - No code change since 21.04.1 ==== kio-extras5 ==== Version update (21.04.1 -> 21.04.2) Subpackages: libkioarchive5 - Update to 21.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.04.2 - Changes since 21.04.1: * thumbnail: Check shm size before writing to it ==== konsole ==== Version update (21.04.1 -> 21.04.2) Subpackages: konsole-part - Update to 21.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.04.2 - Changes since 21.04.1: * Allow /bin/sh as a profile command (kde#436242) * Fix alpha channel of scrollbar colors (kde#437223) * Don't override profile icon in "New Tab" menu (kde#437200) * Fix crash when using a color scheme with random colors (kde#434892) * Fix type of randomSeed parameter - Drop upstream patch: * 0001-Fix-alpha-channel-of-scrollbar-colors.patch ==== kwalletmanager5 ==== Version update (21.04.1 -> 21.04.2) - Update to 21.04.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/21.04.2 - No code change since 21.04.1 ==== libX11 ==== Version update (1.7.1 -> 1.7.2) Subpackages: libX11-6 libX11-data libX11-xcb1 - Update to version 1.7.2 * bug fix release, correcting a regression introduced by and improving the checks from the fix for CVE-2021-31535. - supersedes U_Check-for-NULL-strings-before-getting-their-lengths.patch ==== libapparmor ==== - move Requires: python3 back to the python3-apparmor subpackage - readline usage is in the python modules, not in apparmor-utils - Remove python symbols (python means currently python2), work only with python3 ones (fallout from bsc#1185588). ==== libgnomekbd ==== Subpackages: gnomekbd-tools libgnomekbd8 - Add libgnomekbd_avoid_implicit_definition.patch: Add string.h into include files to avoid inplicit definition warning in building. This change is to meet the needs of the inspection of maintaince build checking script(bnc#1160963, bnc#1034390, glgo#GNOME/libgnomekbd!7) - Add libgnomekbd-set-default-indicator.patch: set the common keyboard layout indicator as "default" to avoid misleading (bnc#1034390). ==== libnettle ==== Version update (3.7.2 -> 3.7.3) Subpackages: libhogweed6 libnettle8 - GNU Nettle 3.7.3: [CVE-2021-3580, bsc#1187060] * Fix crash for zero input to rsa_sec_decrypt and rsa_decrypt_tr. Potential denial of service vector. * Ensure that all of rsa_decrypt_tr and rsa_sec_decrypt return failure for out of range inputs, instead of either crashing, or silently reducing input modulo n. Potential denial of service vector. * Ensure that rsa_decrypt returns failure for out of range inputs, instead of silently reducing input modulo n. * Ensure that rsa_sec_decrypt returns failure if the message size is too large for the given key. Unlike the other bugs, this would typically be triggered by invalid local configuration, rather than by processing untrusted remote data. ==== librsvg ==== Version update (2.50.6 -> 2.50.7) Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2 rsvg-thumbnailer typelib-1_0-Rsvg-2_0 - Update to version 2.50.7: + Two cairo-related bug fixes: - glgo#GNOME/librsvg#745: Fix mismatched cairo_save/restore when running in inside the Cairo test suite. - glgo#GNOME/librsvg#746: Possible cairo_save() without cairo_restore() in render_layer(). ==== linux-atm ==== - Use %_firmwaredir ==== mpg123 ==== Version update (1.27.2 -> 1.28.0) - Update to version 1.28.0 build: * Fix up the build to actually build all library objects with libtool consistently, also ensuring no pointless static archives for output modules. * Adapted things to autoconf 2.71, requiring 2.69 now * Improved configure to be more useful --with-default-audio to define the search order, fix static build for --with-audio being a list (just choosing the first one). * Ensure consistent use of LINK_MPG123_DLL in headers. build (ports/cmake): * Hardcode ports/cmake CPU detection for x64 and ARM as CMAKE_SYSTEM_PROCESSOR is useless crap (bug 298 for real). * Added JACK output, fixed handling of compat_str there libsyn123: * Fix syn123_mix() to actually do intermediate conversion when input and output encoding are the same but non-float. This makes out123 --mix work with s16 input and output, which is not that special! libmpg123: * Fix misguided handling of part2_3_length checks in III_get_scale_factors_1() and III_get_scale_factors_2() which invalidated decoding of a mono source encoded as ms+i-stereo (bug 312). This was a regression introduced with version 1.25.7. libout123: * Print basic module loading errors only for last one in list. This enables use of an output module search list that anticipates module files not installed with the main package. ==== openSUSE-build-key ==== - remove dumpsigs, unused since SLE12+ (rpm 4.x) (bsc#1186827) - add URL - spec-cleaner run - Merge changes from openSUSE Leap 15.3 for rpm-repos-openSUSE (boo#1186593) - Refresh the SLE15 build(a)suse.de key * Updated gpg-pubkey-39db7c82-5847eb1f.asc ==== pam-config ==== - Add "revoke" to the option list for pam_keyinit (Remove some leftover debugs while we're at it) [pam-config-fix-pam_keyinit-options.patch] - prior to writing an service-specific config file, the main function calls access() on the destination file in /etc/pam.d. This will fail and no config file will be written when the original config file was installed in /usr/etc/pam.d. A similar problem exists when creating the new service file: create_service_file() wants to give the new service file the same user, group and mode as the old one, but the old one may not exist. In that case, set these to 0(root), 0(root), and 0644. [pam-config-remove-bad-access-call.patch] ==== plasma5-workspace ==== Subpackages: gmenudbusmenuproxy plasma5-session plasma5-session-wayland plasma5-workspace-libs xembedsniproxy - Add another patch to fix migration of krunner shortcuts from Plasma < 5.17 (boo#1187204): * 0001-krunerglobalshortcuts-Fix-migration-from-old-compone.patch ==== polkit ==== Subpackages: libpolkit0 typelib-1_0-Polkit-1_0 - Fix verifyscript: the path to the binary was wrongly defined as %{_libexecdir}/lib. - CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync() (bsc#1186497) CVE-2021-3560.patch ==== python-attrs ==== Version update (20.3.0 -> 21.2.0) - update to 21.2.0: * We had to revert the recursive feature for ``attr.evolve()`` because it broke some use-cases -- sorry! * Python 3.4 is now blocked using packaging metadata because ``attrs`` can't be imported on it anymore. * The long-awaited, much-talked-about, little-delivered ``import attrs`` is finally upon us! * The *cmp* argument to ``attr.s()`` and `attr.ib()` has been **undeprecated** It will continue to be supported as syntactic sugar to set *eq* and *order* in one go. * Further smaller changes, see included Changelog.md ==== python-idna ==== Version update (3.1 -> 3.2) - update to 3.2: * Add type hints (Thanks, Seth Michael Larson!) * Remove support for Python 3.4 ==== python-more-itertools ==== Version update (8.7.0 -> 8.8.0) - update to 8.8.0: * :func:`countable` (thanks to krzysieq) * :func:`split_before` was updated to handle empy collections (thanks to TiunovNN) * :func:`unique_everseen` got a performance boost (thanks to Numerlor) * The type hint for :func:`value_chain` was corrected (thanks to vr2262) - %check: use %pyunittest rpm macro ==== python-oauthlib ==== Version update (3.1.0 -> 3.1.1) - update to 3.1.1: * #753: Fix acceptance of valid IPv6 addresses in URI validation * #730: Base OAuth2 Client now has a consistent way of managing the `scope`: it consistently relies on the `scope` provided in the constructor if any, except if overridden temporarily in a method call. Note that in particular providing a non-None `scope` in `prepare_authorization_request` or `prepare_refresh_token` does not override anymore `self.scope` forever, it is just used temporarily. * #726: MobileApplicationClient.prepare_request_uri and MobileApplicationClient.parse_request_uri_response, ServiceApplicationClient.prepare_request_body, and WebApplicationClient.prepare_request_uri now correctly use the default `scope` provided in constructor. * #725: LegacyApplicationClient.prepare_request_body now correctly uses the default `scope` provided in constructor * #711: client_credentials grant: fix log message * #746: OpenID Connect Hybrid - fix nonce not passed to add_id_token * #756: Different prompt values are now handled according to spec (e.g. prompt=none) * #759: OpenID Connect - fix Authorization: Basic parsing * #716: improved skeleton validator for public vs private client * #720: replace mock library with standard unittest.mock * #727: build isort integration * #734: python2 code removal * #735, #750: add python3.8 support * #749: bump minimum versions of pyjwt and cryptography - drop o_switch_to_unitest_mock.patch (upstream) ==== python38 ==== - allow building against sphinx 3.x+ - Stop providing "python" symbol (bsc#1185588), which means python2 currently. ==== python38-core ==== Subpackages: libpython3_8-1_0 python38-base - allow building against sphinx 3.x+ - Stop providing "python" symbol (bsc#1185588), which means python2 currently. ==== setools ==== - Fix dependency of python3-setools: require python3, not python (which is python2). ==== u-boot-rpiarm64 ==== Subpackages: u-boot-rpiarm64-doc Fix Ethernet PHY initialization on OdroidC2 (boo#1187095) Patch queue updated from https://github.com/openSUSE/u-boot.git tumbleweed-2021.04 * Patches added: 0015-arm64-dts-meson-odroidc2-readd-PHY-.patch

1 0

New ARM Kubic snapshot 20210612 released!
by Guillaume Gardet 15 Jun '21

15 Jun '21

Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=3&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: alsa apparmor at-spi2-core (2.40.1 -> 2.40.2) avahi compat-usrmerge cups gobject-introspection libX11 (1.7.1 -> 1.7.2) libapparmor libnettle (3.7.2 -> 3.7.3) librsvg (2.50.6 -> 2.50.7) openSUSE-build-key pam-config polkit python-attrs (20.3.0 -> 21.2.0) python-idna (3.1 -> 3.2) python-more-itertools (8.7.0 -> 8.8.0) python-oauthlib (3.1.0 -> 3.1.1) python38 python38-core setools u-boot-rpiarm64 === Details === ==== alsa ==== - Fix regression in config read and UCM handling on pipewire and pulseaudio (boo#1187079, boo#1187033): 0001-conf-fix-load_for_all_cards.patch 0002-ucm-add-_alibpref-to-get-the-private-device-prefix.patch 0003-ucm-fix-_alibpref-string-add-.-delimiter-to-the-end.patch ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-parser apparmor-profiles apparmor-utils python3-apparmor - move Requires: python3 back to the python3-apparmor subpackage - readline usage is in the python modules, not in apparmor-utils - Remove python symbols (python means currently python2), work only with python3 ones (fallout from bsc#1185588). ==== at-spi2-core ==== Version update (2.40.1 -> 2.40.2) Subpackages: libatspi0 - Update to version 2.40.2: + README: Remove outdated links. + Key grab fixes for the new API. + registryd: Add a missing call to va_end. ==== avahi ==== Subpackages: libavahi-client3 libavahi-common3 - Fix libavahi-devel requirements. The devel package installs libavahi-libevent.so but didn't require the library it's pointing to. ==== compat-usrmerge ==== - early exit in case of overlayfs (boo#1187027) - Avoid dependency on mountpoint from util-linux - Also check for availability of find - fix conversion with split /usr (boo#1186781) - exit early if one of the affected directories has mountpoint beneath it - add fallback for filesystems without renameat2 (boo#1186637) ==== cups ==== Subpackages: cups-config libcups2 - Provide /usr/share/cups/ppdc/ in the "cups" main package to avoid that "lpinfo -m" results in /var/log/cups/error_log things like "ppdc: Unable to find include file font.defs" or "ppdc: Unable to find include file hp.h" and then "Bad driver information file /usr/share/cups/drv/sample.drv" (bsc#1186843) ==== gobject-introspection ==== Subpackages: girepository-1_0 libgirepository-1_0-1 - gi-find-deps.sh: on Tumbleweed, HOSTTYPE on ppc64/ppc64le reports powerpc64 and powerpc64le: accept those strings as 64bit archs. ==== libX11 ==== Version update (1.7.1 -> 1.7.2) Subpackages: libX11-6 libX11-data - Update to version 1.7.2 * bug fix release, correcting a regression introduced by and improving the checks from the fix for CVE-2021-31535. - supersedes U_Check-for-NULL-strings-before-getting-their-lengths.patch ==== libapparmor ==== - move Requires: python3 back to the python3-apparmor subpackage - readline usage is in the python modules, not in apparmor-utils - Remove python symbols (python means currently python2), work only with python3 ones (fallout from bsc#1185588). ==== libnettle ==== Version update (3.7.2 -> 3.7.3) Subpackages: libhogweed6 libnettle8 - GNU Nettle 3.7.3: [CVE-2021-3580, bsc#1187060] * Fix crash for zero input to rsa_sec_decrypt and rsa_decrypt_tr. Potential denial of service vector. * Ensure that all of rsa_decrypt_tr and rsa_sec_decrypt return failure for out of range inputs, instead of either crashing, or silently reducing input modulo n. Potential denial of service vector. * Ensure that rsa_decrypt returns failure for out of range inputs, instead of silently reducing input modulo n. * Ensure that rsa_sec_decrypt returns failure if the message size is too large for the given key. Unlike the other bugs, this would typically be triggered by invalid local configuration, rather than by processing untrusted remote data. ==== librsvg ==== Version update (2.50.6 -> 2.50.7) Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2 - Update to version 2.50.7: + Two cairo-related bug fixes: - glgo#GNOME/librsvg#745: Fix mismatched cairo_save/restore when running in inside the Cairo test suite. - glgo#GNOME/librsvg#746: Possible cairo_save() without cairo_restore() in render_layer(). ==== openSUSE-build-key ==== - remove dumpsigs, unused since SLE12+ (rpm 4.x) (bsc#1186827) - add URL - spec-cleaner run - Merge changes from openSUSE Leap 15.3 for rpm-repos-openSUSE (boo#1186593) - Refresh the SLE15 build(a)suse.de key * Updated gpg-pubkey-39db7c82-5847eb1f.asc ==== pam-config ==== - Add "revoke" to the option list for pam_keyinit (Remove some leftover debugs while we're at it) [pam-config-fix-pam_keyinit-options.patch] - prior to writing an service-specific config file, the main function calls access() on the destination file in /etc/pam.d. This will fail and no config file will be written when the original config file was installed in /usr/etc/pam.d. A similar problem exists when creating the new service file: create_service_file() wants to give the new service file the same user, group and mode as the old one, but the old one may not exist. In that case, set these to 0(root), 0(root), and 0644. [pam-config-remove-bad-access-call.patch] ==== polkit ==== Subpackages: libpolkit0 - Fix verifyscript: the path to the binary was wrongly defined as %{_libexecdir}/lib. - CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync() (bsc#1186497) CVE-2021-3560.patch ==== python-attrs ==== Version update (20.3.0 -> 21.2.0) - update to 21.2.0: * We had to revert the recursive feature for ``attr.evolve()`` because it broke some use-cases -- sorry! * Python 3.4 is now blocked using packaging metadata because ``attrs`` can't be imported on it anymore. * The long-awaited, much-talked-about, little-delivered ``import attrs`` is finally upon us! * The *cmp* argument to ``attr.s()`` and `attr.ib()` has been **undeprecated** It will continue to be supported as syntactic sugar to set *eq* and *order* in one go. * Further smaller changes, see included Changelog.md ==== python-idna ==== Version update (3.1 -> 3.2) - update to 3.2: * Add type hints (Thanks, Seth Michael Larson!) * Remove support for Python 3.4 ==== python-more-itertools ==== Version update (8.7.0 -> 8.8.0) - update to 8.8.0: * :func:`countable` (thanks to krzysieq) * :func:`split_before` was updated to handle empy collections (thanks to TiunovNN) * :func:`unique_everseen` got a performance boost (thanks to Numerlor) * The type hint for :func:`value_chain` was corrected (thanks to vr2262) - %check: use %pyunittest rpm macro ==== python-oauthlib ==== Version update (3.1.0 -> 3.1.1) - update to 3.1.1: * #753: Fix acceptance of valid IPv6 addresses in URI validation * #730: Base OAuth2 Client now has a consistent way of managing the `scope`: it consistently relies on the `scope` provided in the constructor if any, except if overridden temporarily in a method call. Note that in particular providing a non-None `scope` in `prepare_authorization_request` or `prepare_refresh_token` does not override anymore `self.scope` forever, it is just used temporarily. * #726: MobileApplicationClient.prepare_request_uri and MobileApplicationClient.parse_request_uri_response, ServiceApplicationClient.prepare_request_body, and WebApplicationClient.prepare_request_uri now correctly use the default `scope` provided in constructor. * #725: LegacyApplicationClient.prepare_request_body now correctly uses the default `scope` provided in constructor * #711: client_credentials grant: fix log message * #746: OpenID Connect Hybrid - fix nonce not passed to add_id_token * #756: Different prompt values are now handled according to spec (e.g. prompt=none) * #759: OpenID Connect - fix Authorization: Basic parsing * #716: improved skeleton validator for public vs private client * #720: replace mock library with standard unittest.mock * #727: build isort integration * #734: python2 code removal * #735, #750: add python3.8 support * #749: bump minimum versions of pyjwt and cryptography - drop o_switch_to_unitest_mock.patch (upstream) ==== python38 ==== - allow building against sphinx 3.x+ - Stop providing "python" symbol (bsc#1185588), which means python2 currently. ==== python38-core ==== Subpackages: libpython3_8-1_0 python38-base - allow building against sphinx 3.x+ - Stop providing "python" symbol (bsc#1185588), which means python2 currently. ==== setools ==== - Fix dependency of python3-setools: require python3, not python (which is python2). ==== u-boot-rpiarm64 ==== Subpackages: u-boot-rpiarm64-doc Fix Ethernet PHY initialization on OdroidC2 (boo#1187095) Patch queue updated from https://github.com/openSUSE/u-boot.git tumbleweed-2021.04 * Patches added: 0015-arm64-dts-meson-odroidc2-readd-PHY-.patch

1 0

New MicroOS snapshot 20210613 released!
by Richard Brown 14 Jun '21

14 Jun '21

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: cups-filters gnome-terminal (3.40.1 -> 3.40.2) grub2 multipath-tools samba (4.14.4+git.162.18fd73a39a0 -> 4.14.5+git.165.70143cb153d) sssd (2.5.0 -> 2.5.1) vte (0.64.1 -> 0.64.2) yelp (40.0 -> 40.2) yelp-xsl (40.0 -> 40.2) === Details === ==== cups-filters ==== - The cups-brf backend needs to run as root see https://bugzilla.redhat.com/show_bug.cgi?id=1657261 (bsc#1186844) ==== gnome-terminal ==== Version update (3.40.1 -> 3.40.2) Subpackages: nautilus-extension-terminal - Update to version 3.40.2: + all: - Add settings schema verifier - Specify the schema source when constructing any GSettings + app: Make owner-change check only on X11 + util: Fix deprecation warning + Updated translations. ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-x86_64-efi - Fix running grub2-once leads to failure of starting systemd service in the boot sequence (bsc#1169460) * grub2-once * grub2-once.service ==== multipath-tools ==== Subpackages: kpartx libmpath0 - install to /usr (boo#1029961) ==== samba ==== Version update (4.14.4+git.162.18fd73a39a0 -> 4.14.5+git.165.70143cb153d) Subpackages: libdcerpc-binding0 libdcerpc0 libndr-krb5pac0 libndr-nbt0 libndr-standard0 libndr1 libnetapi0 libsamba-credentials1 libsamba-errors0 libsamba-hostconfig0 libsamba-passdb0 libsamba-util0 libsamdb0 libsmbclient0 libsmbconf0 libsmbldap2 libtevent-util0 libwbclient0 samba-client samba-libs samba-libs-python3 - Update to 4.14.5 * s3: smbd: SMB1 SMBsplwr doesn't send a reply packet on success; (bso#14696); * s3: smbd: Ensure POSIX default ACL is mapped into returned Windows ACL for directory handles; (bso#14708); * s3: smbd: Fix uninitialized memory read in process_symlink_open() when used with vfs_shadow_copy2(); (bso#14721); * docs: Expand the "log level" docs on audit logging; (bso#14689); * smbd: Correctly initialize close timestamp fields; (bso#14714); * Fix gcc11 compiler issues; (bso#14699); * docs-xml: Update smbcacls manpage; (bso#14718); * docs: Update list of available commands in rpcclient; (bso#14719); * ctdb: Fix a crash in run_proc_signal_handler(); (bso#14475); * s3:winbind: For 'security = ADS' require realm/workgroup to be set; (bso#14695); * lib:replace: Do not build strndup test with gcc 11 or newer; (bso#14699); ==== sssd ==== Version update (2.5.0 -> 2.5.1) Subpackages: libsss_certmap0 libsss_idmap0 libsss_nss_idmap0 sssd-krb5-common sssd-ldap - Update to release 2.5.1 * auto_private_groups option can be set centrally through ID range setting in IPA (see ipa idrange commands family). This feature requires SSSD update on both client and server. This feature also requires freeipa 4.9.4 and newer. * Fix getsidbyname issues with IPA users with a user-private-group. * Default value of ldap_sudo_random_offset changed to 0 (disabled). This makes sure that sudo rules are available as soon as possible after SSSD start in default configuration. ==== vte ==== Version update (0.64.1 -> 0.64.2) - Update to version 0.64.2: + widget: Docs fix + Updated translations. ==== yelp ==== Version update (40.0 -> 40.2) Subpackages: libyelp0 - Update to version 40.2: + Updated translations. - Modernize spec file. ==== yelp-xsl ==== Version update (40.0 -> 40.2) - Update to version 40.2: + Updated translations. - Modernize spec file.

1 0

New Kubic snapshot 20210613 released!
by Richard Brown 14 Jun '21

14 Jun '21

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: grub2 multipath-tools sssd (2.5.0 -> 2.5.1) === Details === ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-x86_64-efi - Fix running grub2-once leads to failure of starting systemd service in the boot sequence (bsc#1169460) * grub2-once * grub2-once.service ==== multipath-tools ==== Subpackages: kpartx libmpath0 - install to /usr (boo#1029961) ==== sssd ==== Version update (2.5.0 -> 2.5.1) Subpackages: libsss_certmap0 libsss_idmap0 libsss_nss_idmap0 sssd-krb5-common sssd-ldap - Update to release 2.5.1 * auto_private_groups option can be set centrally through ID range setting in IPA (see ipa idrange commands family). This feature requires SSSD update on both client and server. This feature also requires freeipa 4.9.4 and newer. * Fix getsidbyname issues with IPA users with a user-private-group. * Default value of ldap_sudo_random_offset changed to 0 (disabled). This makes sure that sudo rules are available as soon as possible after SSSD start in default configuration.

1 0

New Kubic snapshot 20210610 released!
by Richard Brown 14 Jun '21

14 Jun '21

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: avahi compat-usrmerge === Details === ==== avahi ==== Subpackages: libavahi-client3 libavahi-common3 - Fix libavahi-devel requirements. The devel package installs libavahi-libevent.so but didn't require the library it's pointing to. ==== compat-usrmerge ==== - early exit in case of overlayfs (boo#1187027) - Avoid dependency on mountpoint from util-linux - Also check for availability of find - fix conversion with split /usr (boo#1186781) - exit early if one of the affected directories has mountpoint beneath it - add fallback for filesystems without renameat2 (boo#1186637)

1 0

New MicroOS snapshot 20210611 released!
by Richard Brown 14 Jun '21

14 Jun '21

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: apparmor at-spi2-core (2.40.1 -> 2.40.2) cups distribution-logos-openSUSE gobject-introspection gupnp (1.2.6 -> 1.2.7) libX11 (1.7.1 -> 1.7.2) libapparmor librsvg (2.50.6 -> 2.50.7) mpg123 (1.27.2 -> 1.28.0) openSUSE-build-key python-attrs (20.3.0 -> 21.2.0) python-idna (3.1 -> 3.2) python-more-itertools (8.7.0 -> 8.8.0) python-oauthlib (3.1.0 -> 3.1.1) python38 python38-core setools === Details === ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-parser apparmor-profiles apparmor-utils python3-apparmor - move Requires: python3 back to the python3-apparmor subpackage - readline usage is in the python modules, not in apparmor-utils - Remove python symbols (python means currently python2), work only with python3 ones (fallout from bsc#1185588). ==== at-spi2-core ==== Version update (2.40.1 -> 2.40.2) Subpackages: libatspi0 typelib-1_0-Atspi-2_0 - Update to version 2.40.2: + README: Remove outdated links. + Key grab fixes for the new API. + registryd: Add a missing call to va_end. ==== cups ==== Subpackages: cups-client cups-config libcups2 libcupsimage2 - Provide /usr/share/cups/ppdc/ in the "cups" main package to avoid that "lpinfo -m" results in /var/log/cups/error_log things like "ppdc: Unable to find include file font.defs" or "ppdc: Unable to find include file hp.h" and then "Bad driver information file /usr/share/cups/drv/sample.drv" (bsc#1186843) ==== distribution-logos-openSUSE ==== - Add icons package to handle systemd branding better ==== gobject-introspection ==== Subpackages: girepository-1_0 libgirepository-1_0-1 - gi-find-deps.sh: on Tumbleweed, HOSTTYPE on ppc64/ppc64le reports powerpc64 and powerpc64le: accept those strings as 64bit archs. ==== gupnp ==== Version update (1.2.6 -> 1.2.7) - Update to version 1.2.7: + Fix build with -Wformat-security=error + Bump required GLib version to 2.66 + Fix some introspection annotations + Add missing varargs functions to vapi + Revert fix from 1.2.5 which causes managed control points to live too long ==== libX11 ==== Version update (1.7.1 -> 1.7.2) Subpackages: libX11-6 libX11-data libX11-xcb1 - Update to version 1.7.2 * bug fix release, correcting a regression introduced by and improving the checks from the fix for CVE-2021-31535. - supersedes U_Check-for-NULL-strings-before-getting-their-lengths.patch ==== libapparmor ==== - move Requires: python3 back to the python3-apparmor subpackage - readline usage is in the python modules, not in apparmor-utils - Remove python symbols (python means currently python2), work only with python3 ones (fallout from bsc#1185588). ==== librsvg ==== Version update (2.50.6 -> 2.50.7) Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2 rsvg-thumbnailer typelib-1_0-Rsvg-2_0 - Update to version 2.50.7: + Two cairo-related bug fixes: - glgo#GNOME/librsvg#745: Fix mismatched cairo_save/restore when running in inside the Cairo test suite. - glgo#GNOME/librsvg#746: Possible cairo_save() without cairo_restore() in render_layer(). ==== mpg123 ==== Version update (1.27.2 -> 1.28.0) - Update to version 1.28.0 build: * Fix up the build to actually build all library objects with libtool consistently, also ensuring no pointless static archives for output modules. * Adapted things to autoconf 2.71, requiring 2.69 now * Improved configure to be more useful --with-default-audio to define the search order, fix static build for --with-audio being a list (just choosing the first one). * Ensure consistent use of LINK_MPG123_DLL in headers. build (ports/cmake): * Hardcode ports/cmake CPU detection for x64 and ARM as CMAKE_SYSTEM_PROCESSOR is useless crap (bug 298 for real). * Added JACK output, fixed handling of compat_str there libsyn123: * Fix syn123_mix() to actually do intermediate conversion when input and output encoding are the same but non-float. This makes out123 --mix work with s16 input and output, which is not that special! libmpg123: * Fix misguided handling of part2_3_length checks in III_get_scale_factors_1() and III_get_scale_factors_2() which invalidated decoding of a mono source encoded as ms+i-stereo (bug 312). This was a regression introduced with version 1.25.7. libout123: * Print basic module loading errors only for last one in list. This enables use of an output module search list that anticipates module files not installed with the main package. ==== openSUSE-build-key ==== - remove dumpsigs, unused since SLE12+ (rpm 4.x) (bsc#1186827) - add URL - spec-cleaner run - Merge changes from openSUSE Leap 15.3 for rpm-repos-openSUSE (boo#1186593) - Refresh the SLE15 build(a)suse.de key * Updated gpg-pubkey-39db7c82-5847eb1f.asc ==== python-attrs ==== Version update (20.3.0 -> 21.2.0) - update to 21.2.0: * We had to revert the recursive feature for ``attr.evolve()`` because it broke some use-cases -- sorry! * Python 3.4 is now blocked using packaging metadata because ``attrs`` can't be imported on it anymore. * The long-awaited, much-talked-about, little-delivered ``import attrs`` is finally upon us! * The *cmp* argument to ``attr.s()`` and `attr.ib()` has been **undeprecated** It will continue to be supported as syntactic sugar to set *eq* and *order* in one go. * Further smaller changes, see included Changelog.md ==== python-idna ==== Version update (3.1 -> 3.2) - update to 3.2: * Add type hints (Thanks, Seth Michael Larson!) * Remove support for Python 3.4 ==== python-more-itertools ==== Version update (8.7.0 -> 8.8.0) - update to 8.8.0: * :func:`countable` (thanks to krzysieq) * :func:`split_before` was updated to handle empy collections (thanks to TiunovNN) * :func:`unique_everseen` got a performance boost (thanks to Numerlor) * The type hint for :func:`value_chain` was corrected (thanks to vr2262) - %check: use %pyunittest rpm macro ==== python-oauthlib ==== Version update (3.1.0 -> 3.1.1) - update to 3.1.1: * #753: Fix acceptance of valid IPv6 addresses in URI validation * #730: Base OAuth2 Client now has a consistent way of managing the `scope`: it consistently relies on the `scope` provided in the constructor if any, except if overridden temporarily in a method call. Note that in particular providing a non-None `scope` in `prepare_authorization_request` or `prepare_refresh_token` does not override anymore `self.scope` forever, it is just used temporarily. * #726: MobileApplicationClient.prepare_request_uri and MobileApplicationClient.parse_request_uri_response, ServiceApplicationClient.prepare_request_body, and WebApplicationClient.prepare_request_uri now correctly use the default `scope` provided in constructor. * #725: LegacyApplicationClient.prepare_request_body now correctly uses the default `scope` provided in constructor * #711: client_credentials grant: fix log message * #746: OpenID Connect Hybrid - fix nonce not passed to add_id_token * #756: Different prompt values are now handled according to spec (e.g. prompt=none) * #759: OpenID Connect - fix Authorization: Basic parsing * #716: improved skeleton validator for public vs private client * #720: replace mock library with standard unittest.mock * #727: build isort integration * #734: python2 code removal * #735, #750: add python3.8 support * #749: bump minimum versions of pyjwt and cryptography - drop o_switch_to_unitest_mock.patch (upstream) ==== python38 ==== - allow building against sphinx 3.x+ - Stop providing "python" symbol (bsc#1185588), which means python2 currently. ==== python38-core ==== Subpackages: libpython3_8-1_0 python38-base - allow building against sphinx 3.x+ - Stop providing "python" symbol (bsc#1185588), which means python2 currently. ==== setools ==== - Fix dependency of python3-setools: require python3, not python (which is python2).

1 0

New Kubic snapshot 20210611 released!
by Richard Brown 14 Jun '21

14 Jun '21

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: apparmor at-spi2-core (2.40.1 -> 2.40.2) cups gobject-introspection libX11 (1.7.1 -> 1.7.2) libapparmor librsvg (2.50.6 -> 2.50.7) openSUSE-build-key python-attrs (20.3.0 -> 21.2.0) python-idna (3.1 -> 3.2) python-more-itertools (8.7.0 -> 8.8.0) python-oauthlib (3.1.0 -> 3.1.1) python38 python38-core setools === Details === ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-parser apparmor-profiles apparmor-utils python3-apparmor - move Requires: python3 back to the python3-apparmor subpackage - readline usage is in the python modules, not in apparmor-utils - Remove python symbols (python means currently python2), work only with python3 ones (fallout from bsc#1185588). ==== at-spi2-core ==== Version update (2.40.1 -> 2.40.2) Subpackages: libatspi0 - Update to version 2.40.2: + README: Remove outdated links. + Key grab fixes for the new API. + registryd: Add a missing call to va_end. ==== cups ==== Subpackages: cups-config libcups2 - Provide /usr/share/cups/ppdc/ in the "cups" main package to avoid that "lpinfo -m" results in /var/log/cups/error_log things like "ppdc: Unable to find include file font.defs" or "ppdc: Unable to find include file hp.h" and then "Bad driver information file /usr/share/cups/drv/sample.drv" (bsc#1186843) ==== gobject-introspection ==== Subpackages: girepository-1_0 libgirepository-1_0-1 - gi-find-deps.sh: on Tumbleweed, HOSTTYPE on ppc64/ppc64le reports powerpc64 and powerpc64le: accept those strings as 64bit archs. ==== libX11 ==== Version update (1.7.1 -> 1.7.2) Subpackages: libX11-6 libX11-data - Update to version 1.7.2 * bug fix release, correcting a regression introduced by and improving the checks from the fix for CVE-2021-31535. - supersedes U_Check-for-NULL-strings-before-getting-their-lengths.patch ==== libapparmor ==== - move Requires: python3 back to the python3-apparmor subpackage - readline usage is in the python modules, not in apparmor-utils - Remove python symbols (python means currently python2), work only with python3 ones (fallout from bsc#1185588). ==== librsvg ==== Version update (2.50.6 -> 2.50.7) Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2 - Update to version 2.50.7: + Two cairo-related bug fixes: - glgo#GNOME/librsvg#745: Fix mismatched cairo_save/restore when running in inside the Cairo test suite. - glgo#GNOME/librsvg#746: Possible cairo_save() without cairo_restore() in render_layer(). ==== openSUSE-build-key ==== - remove dumpsigs, unused since SLE12+ (rpm 4.x) (bsc#1186827) - add URL - spec-cleaner run - Merge changes from openSUSE Leap 15.3 for rpm-repos-openSUSE (boo#1186593) - Refresh the SLE15 build(a)suse.de key * Updated gpg-pubkey-39db7c82-5847eb1f.asc ==== python-attrs ==== Version update (20.3.0 -> 21.2.0) - update to 21.2.0: * We had to revert the recursive feature for ``attr.evolve()`` because it broke some use-cases -- sorry! * Python 3.4 is now blocked using packaging metadata because ``attrs`` can't be imported on it anymore. * The long-awaited, much-talked-about, little-delivered ``import attrs`` is finally upon us! * The *cmp* argument to ``attr.s()`` and `attr.ib()` has been **undeprecated** It will continue to be supported as syntactic sugar to set *eq* and *order* in one go. * Further smaller changes, see included Changelog.md ==== python-idna ==== Version update (3.1 -> 3.2) - update to 3.2: * Add type hints (Thanks, Seth Michael Larson!) * Remove support for Python 3.4 ==== python-more-itertools ==== Version update (8.7.0 -> 8.8.0) - update to 8.8.0: * :func:`countable` (thanks to krzysieq) * :func:`split_before` was updated to handle empy collections (thanks to TiunovNN) * :func:`unique_everseen` got a performance boost (thanks to Numerlor) * The type hint for :func:`value_chain` was corrected (thanks to vr2262) - %check: use %pyunittest rpm macro ==== python-oauthlib ==== Version update (3.1.0 -> 3.1.1) - update to 3.1.1: * #753: Fix acceptance of valid IPv6 addresses in URI validation * #730: Base OAuth2 Client now has a consistent way of managing the `scope`: it consistently relies on the `scope` provided in the constructor if any, except if overridden temporarily in a method call. Note that in particular providing a non-None `scope` in `prepare_authorization_request` or `prepare_refresh_token` does not override anymore `self.scope` forever, it is just used temporarily. * #726: MobileApplicationClient.prepare_request_uri and MobileApplicationClient.parse_request_uri_response, ServiceApplicationClient.prepare_request_body, and WebApplicationClient.prepare_request_uri now correctly use the default `scope` provided in constructor. * #725: LegacyApplicationClient.prepare_request_body now correctly uses the default `scope` provided in constructor * #711: client_credentials grant: fix log message * #746: OpenID Connect Hybrid - fix nonce not passed to add_id_token * #756: Different prompt values are now handled according to spec (e.g. prompt=none) * #759: OpenID Connect - fix Authorization: Basic parsing * #716: improved skeleton validator for public vs private client * #720: replace mock library with standard unittest.mock * #727: build isort integration * #734: python2 code removal * #735, #750: add python3.8 support * #749: bump minimum versions of pyjwt and cryptography - drop o_switch_to_unitest_mock.patch (upstream) ==== python38 ==== - allow building against sphinx 3.x+ - Stop providing "python" symbol (bsc#1185588), which means python2 currently. ==== python38-core ==== Subpackages: libpython3_8-1_0 python38-base - allow building against sphinx 3.x+ - Stop providing "python" symbol (bsc#1185588), which means python2 currently. ==== setools ==== - Fix dependency of python3-setools: require python3, not python (which is python2).

1 0