January 2022 - openSUSE Kubic - openSUSE Mailing Lists

Message from kubic
by Gustavo Ezquerro 31 Jan '22

31 Jan '22

Hi to all; One of my worker node somehow can't boot, showing me the next message... cri-o can't start and then it restarts [image: image.png] Any recommendations? -- Regards. Gustavo Ezquerro Morales

2 3

New MicroOS snapshot 20220128 released!
by Richard Brown 29 Jan '22

29 Jan '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: SVT-AV1 (0.8.7 -> 0.9.0) ell (0.46 -> 0.48) ethtool (5.15 -> 5.16) gstreamer-plugins-bad iputils keylime libimobiledevice (1.3.0+git.20200910 -> 1.3.0+git.20210921) libplist neon (0.32.1 -> 0.32.2) polkit toolbox util-linux (2.37.2 -> 2.37.3) webkit2gtk3 webkit2gtk3-soup2 wireplumber (0.4.6 -> 0.4.7) xen yast2 (4.4.39 -> 4.4.42) === Details === ==== SVT-AV1 ==== Version update (0.8.7 -> 0.9.0) - Update to 0.9.0 * New faster presets M9-M12, M12 reaching similar complexity level to that of x264 veryfast * New multi-pass and single pass VBR implementation minimizing the quality difference vs CRF while reducing the cycle overhead * Quality vs density tradeoffs improvements across all presets in CRF mode * Added support for CRF with capped bitrate * Added support for overlay frames and super resolution * Fixed film grain synthesis bugs * Added experimental support for > 4k resolutions * Added experimental support for the low delay prediction structure * Significant memory reduction especially for faster presets in a multi-threaded environment * API configuration structure cleanup removing all invalid or out of date parameters * Speedup legacy CPUs for faster development by adding SSE code for corresponding C-kernels * Updated the code license from BSD 2-clause to BSD 3-clause clear ==== ell ==== Version update (0.46 -> 0.48) - update to 0.48: * Fix issue with memory leaking from ICMPv6 RA. * Fix issue with memory leaking from DHCP leases. * Fix issue with NULL terminating of Base64 encoding. ==== ethtool ==== Version update (5.15 -> 5.16) - update to upstream release 5.16 * Feature: use memory maps for module EEPROM parsing (-m) * Feature: show CMIS diagnostic information (-m) * Fix: fix dumping advertised FEC modes (--show-fec) * Fix: ignore cable test notifications from other devices (--cable-test) * Fix: do not show duplicate options in help text (--help) ==== gstreamer-plugins-bad ==== Subpackages: libgstadaptivedemux-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstphotography-1_0-0 libgstplayer-1_0-0 libgstsctp-1_0-0 libgsturidownloader-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 - Add some conditionals to build as many plugins as possible in SLE-15-SP4 and move all conditional logic to the beginning of the spec file using bcond_with/without. ==== iputils ==== - temporarily reintroduce rarpd and rdisc tools to get them into 15sp4 [jsc#SLE-23521] ==== keylime ==== Subpackages: keylime-agent keylime-config keylime-firewalld keylime-registrar keylime-tpm_cert_store keylime-verifier python38-keylime - Set /var/lib/keylime under the same permissions expected by the code ==== libimobiledevice ==== Version update (1.3.0+git.20200910 -> 1.3.0+git.20210921) - Add python-rpm-macros to BuildRequires (boo#1194755). - Update to version 1.3.0+git.20210921: * Remove common code in favor of new libimobiledevice-glue * tools: idevicebackup2: Exit on service startup failure and improve error messages * idevice: Reset receive length variable in internal_ssl_read retry loop and fix wrong variable in debug message * lockdown: Get DeviceClass to make sure OS version dependent code is executed correctly * Handle error cases in relevant code when retrieving pair record fails * common: Return proper error codes from userpref_read_pair_record * Add support for MbedTLS * idevice: Make sure to handle timeout condition for network connections too * installation_proxy: Ignore non-status messages instead of terminating loop * mobilesync: Set DeviceLink version to 400 to support iOS 14b4+ * tools/idevicecrashreport: Fix illegal filenames on Windows * tools: Fix entering recovery mode on iOS 14.5+ which now requires a pairing * tools: Fix delays in idevicedebugserverproxy when using SSL * debugserver: Return success when a receive timed out but actualy bytes have been read * idevice: Allow partial reads in idevice_connection_receive_timeout() and handle timeouts more adequate * Fixed bytes/strings checks in lockdown.pxi for compatibility with Python2/3 * Fixed bytes/strings check in imobiledevice.pyx for compatibility with Python2/3 * Fixed debugserver.pxi PyString_AsString compatibility with Python3 * Fixed AFC afc.pxi definitions for Python2/3 compatibility. Added missing public method 'remove_path_and_contents' * ideviceprovision: Fix date output by adding MAC_EPOCH * docs: Improve --quiet command line switch description in idevicesyslog man page * idevicescreenshot: Choose a better filename, prevent overwriting existing files * idevicedebug: Add --detach option to start an app and exit idevicedebug without killing the app * idevicebackup2: Handle DLMessagePurgeDiskSpace by sending back error code * idevicebackup2: Update errno to device error mapping * idevice: Handle -EAGAIN in case usbmuxd_send() returns it * idevicebackup2: Don't fail on restore when source backup doesn't have any application info ==== libplist ==== - Add python-rpm-macros to BuildRequires (boo#1194756). ==== neon ==== Version update (0.32.1 -> 0.32.2) - update to 0.32.2: * Fix auth handling for request-target of "*" ==== polkit ==== Subpackages: libpolkit-agent-1-0 libpolkit-gobject-1-0 typelib-1_0-Polkit-1_0 - Switch from mozjs to duktape: * Add duktape-support.patch - Fixed pkexec Local Privilege Escalation aka pwnkit (CVE-2021-4034 bsc#1194568) CVE-2021-4034-pkexec-fix.patch ==== toolbox ==== - Allow docker as an alternative to podman in the package Requires. This was supported since 2.2. ==== util-linux ==== Version update (2.37.2 -> 2.37.3) Subpackages: libblkid1 libfdisk1 libmount1 libsmartcols1 libuuid1 - update to 2.37.3 (bsc#1194976): This release fixes two security mount(8) and umount(8) issues: * CVE-2021-3996 Improper UID check in libmount allows an unprivileged user to unmount FUSE filesystems of users with similar UID. * CVE-2021-3995 This issue is related to parsing the /proc/self/mountinfo file allows an unprivileged user to unmount other user's filesystems that are either world-writable themselves or mounted in a world-writable directory. ==== webkit2gtk3 ==== Subpackages: libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 webkit2gtk-4_1-injected-bundles - Add webkit2gtk3-gcc12.patch: fix the build with gcc 12. - Require glib2 2.44 to match source. ==== webkit2gtk3-soup2 ==== Subpackages: libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 webkit2gtk-4_0-injected-bundles - Add webkit2gtk3-gcc12.patch: fix the build with gcc 12. - Require glib2 2.44 to match source. ==== wireplumber ==== Version update (0.4.6 -> 0.4.7) Subpackages: libwireplumber-0_4-0 wireplumber-audio - Update to version 0.4.7: * Fixed a regression in 0.4.6 that caused the selection of the default audio sources and sinks to be delayed until some event, which effectively caused losing audio output in many circumstances (glfo#pipewire/wireplumber#148, glfo#pipewire/wireplumber#150, glfo#pipewire/wireplumber#151, glfo#pipewire/wireplumber#153) * Fixed a regression in 0.4.6 that caused the echo-cancellation pipewire module (and possibly others) to not work * A default sink or source is now not selected if there is no available route for it (glfo#pipewire/wireplumber#145) * Fixed an issue where some clients would wait for a bit while seeking (glfo#pipewire/wireplumber#146) * Fixed audio capture in the endpoints-based policy * Fixed an issue that would cause certain lua scripts to error out with older configuration files (glfo#pipewire/wireplumber#158) - Drop patches already included upstream: * 0001-policy-node-schedule-rescan-without-timeout-if-defined-target-is-not-found.patch * 0002-policy-node-find-best-linkable-if-default-one-cannot-be-linked.patch - Add patch from upstream to fix selection of Pro Audio nodes as default nodes: * 0001-default-nodes-handle-nodes-without-Routes.patch ==== xen ==== - bsc#1194576 - VUL-0: CVE-2022-23033: xen: arm: guest_physmap_remove_page not removing the p2m mappings (XSA-393) xsa393.patch - bsc#1194581 - VUL-0: CVE-2022-23034: xen: a PV guest could DoS Xen while unmapping a grant (XSA-394) xsa394.patch - bsc#1194588 - VUL-0: CVE-2022-23035: xen: insufficient cleanup of passed-through device IRQs (XSA-395) xsa395.patch - bsc#1191668 - L3: issue around xl and virsh operation - virsh list not giving any output libxl-dont-try-to-free-a-NULL-list-of-vcpus.patch libxl-dont-touch-nr_vcpus_out-if-listing-vcpus-and-returning-NULL.patch ==== yast2 ==== Version update (4.4.39 -> 4.4.42) - Added Y2Packager::NewRepositorySetup to track new repositories (related to bsc#1194453) - 4.4.42 - Fix PackageAI call to PackagesProposal.GetResolvable. It prevents a crash when cloning a system (bsc#1195137). - 4.4.41 - Use Package module instead of PackageSystem (bsc#1194886). - 4.4.40

1 0

New Kubic snapshot 20220128 released!
by Richard Brown 29 Jan '22

29 Jan '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ethtool (5.15 -> 5.16) iputils keylime polkit toolbox util-linux (2.37.2 -> 2.37.3) xen yast2 (4.4.39 -> 4.4.42) === Details === ==== ethtool ==== Version update (5.15 -> 5.16) - update to upstream release 5.16 * Feature: use memory maps for module EEPROM parsing (-m) * Feature: show CMIS diagnostic information (-m) * Fix: fix dumping advertised FEC modes (--show-fec) * Fix: ignore cable test notifications from other devices (--cable-test) * Fix: do not show duplicate options in help text (--help) ==== iputils ==== - temporarily reintroduce rarpd and rdisc tools to get them into 15sp4 [jsc#SLE-23521] ==== keylime ==== Subpackages: keylime-agent keylime-config keylime-firewalld keylime-registrar keylime-tpm_cert_store keylime-verifier python38-keylime - Set /var/lib/keylime under the same permissions expected by the code ==== polkit ==== Subpackages: libpolkit-agent-1-0 libpolkit-gobject-1-0 - Switch from mozjs to duktape: * Add duktape-support.patch - Fixed pkexec Local Privilege Escalation aka pwnkit (CVE-2021-4034 bsc#1194568) CVE-2021-4034-pkexec-fix.patch ==== toolbox ==== - Allow docker as an alternative to podman in the package Requires. This was supported since 2.2. ==== util-linux ==== Version update (2.37.2 -> 2.37.3) Subpackages: libblkid1 libfdisk1 libmount1 libsmartcols1 libuuid1 - update to 2.37.3 (bsc#1194976): This release fixes two security mount(8) and umount(8) issues: * CVE-2021-3996 Improper UID check in libmount allows an unprivileged user to unmount FUSE filesystems of users with similar UID. * CVE-2021-3995 This issue is related to parsing the /proc/self/mountinfo file allows an unprivileged user to unmount other user's filesystems that are either world-writable themselves or mounted in a world-writable directory. ==== xen ==== - bsc#1194576 - VUL-0: CVE-2022-23033: xen: arm: guest_physmap_remove_page not removing the p2m mappings (XSA-393) xsa393.patch - bsc#1194581 - VUL-0: CVE-2022-23034: xen: a PV guest could DoS Xen while unmapping a grant (XSA-394) xsa394.patch - bsc#1194588 - VUL-0: CVE-2022-23035: xen: insufficient cleanup of passed-through device IRQs (XSA-395) xsa395.patch - bsc#1191668 - L3: issue around xl and virsh operation - virsh list not giving any output libxl-dont-try-to-free-a-NULL-list-of-vcpus.patch libxl-dont-touch-nr_vcpus_out-if-listing-vcpus-and-returning-NULL.patch ==== yast2 ==== Version update (4.4.39 -> 4.4.42) - Added Y2Packager::NewRepositorySetup to track new repositories (related to bsc#1194453) - 4.4.42 - Fix PackageAI call to PackagesProposal.GetResolvable. It prevents a crash when cloning a system (bsc#1195137). - 4.4.41 - Use Package module instead of PackageSystem (bsc#1194886). - 4.4.40

1 0

New MicroOS snapshot 20220126 released!
by Richard Brown 28 Jan '22

28 Jan '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: kernel-source (5.16.1 -> 5.16.2) mozilla-nss (3.73.1 -> 3.74) patterns-gnome pciutils python-py (1.10.0 -> 1.11.0) samba (4.15.3+git.219.40cc1cd8591 -> 4.15.4+git.224.dea2f6dc836) selinux-policy (20211111 -> 20220124) vim (8.2.4063 -> 8.2.4186) wpa_supplicant (2.9 -> 2.10) xf86-input-libinput (1.2.0 -> 1.2.1) === Details === ==== kernel-source ==== Version update (5.16.1 -> 5.16.2) - Update patches.kernel.org/5.16.2-005-vfs-fs_context-fix-up-param-length-parsing-in… (bsc#1012628 CVE-2022-0185 bsc#1194517). Add CVE reference. - commit 0d710a8 - s390/mm: fix 2KB pgtable release race (bsc#1188896). - commit 6f62d73 - HID: wacom: Avoid using stale array indicies to read contact count (bsc#1194667). - HID: wacom: Ignore the confidence flag when a touch is removed (bsc#1194667). - HID: wacom: Reset expected and received contact counts at the same time (bsc#1194667). - commit 07a970c - Linux 5.16.2 (bsc#1012628). - ALSA: hda/realtek: Re-order quirk entries for Lenovo (bsc#1012628). - ALSA: hda/realtek: Add quirk for Legion Y9000X 2020 (bsc#1012628). - ALSA: hda/tegra: Fix Tegra194 HDA reset failure (bsc#1012628). - ALSA: hda: ALC287: Add Lenovo IdeaPad Slim 9i 14ITL5 speaker quirk (bsc#1012628). - ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Master after reboot from Windows (bsc#1012628). - ALSA: hda/realtek: Use ALC285_FIXUP_HP_GPIO_LED on another HP laptop (bsc#1012628). - ALSA: hda/realtek: Add speaker fixup for some Yoga 15ITL5 devices (bsc#1012628). - perf annotate: Avoid TUI crash when navigating in the annotation of recursive functions (bsc#1012628). - firmware: qemu_fw_cfg: fix kobject leak in probe error path (bsc#1012628). - firmware: qemu_fw_cfg: fix NULL-pointer deref on duplicate entries (bsc#1012628). - firmware: qemu_fw_cfg: fix sysfs information leak (bsc#1012628). - rtlwifi: rtl8192cu: Fix WARNING when calling local_irq_restore() with interrupts enabled (bsc#1012628). - media: uvcvideo: fix division by zero at stream start (bsc#1012628). - video: vga16fb: Only probe for EGA and VGA 16 color graphic cards (bsc#1012628). - 9p: fix enodata when reading growing file (bsc#1012628). - 9p: only copy valid iattrs in 9P2000.L setattr implementation (bsc#1012628). - NFSD: Fix zero-length NFSv3 WRITEs (bsc#1012628). - remoteproc: qcom: pas: Add missing power-domain "mxc" for CDSP (bsc#1012628). - KVM: s390: Clarify SIGP orders versus STOP/RESTART (bsc#1012628). - KVM: x86: don't print when fail to read/write pv eoi memory (bsc#1012628). - KVM: x86: Register Processor Trace interrupt hook iff PT enabled in guest (bsc#1012628). - KVM: x86: Register perf callbacks after calling vendor's hardware_setup() (bsc#1012628). - perf: Protect perf_guest_cbs with RCU (bsc#1012628). - vfs: fs_context: fix up param length parsing in legacy_parse_param (bsc#1012628). - remoteproc: qcom: pil_info: Don't memcpy_toio more than is provided (bsc#1012628). - orangefs: Fix the size of a memory allocation in orangefs_bufmap_alloc() (bsc#1012628). - drm/amd/display: explicitly set is_dsc_supported to false before use (bsc#1012628). - devtmpfs regression fix: reconfigure on each mount (bsc#1012628). - commit 6fa29ec - kernel-binary.spec: Do not use the default certificate path (bsc#1194943). Using the the default path is broken since Linux 5.17 - commit 68b36f0 - disable the Bluetooth patch again The kernel is currently tested whether the patch is needed at all. As 95655456e7ce in upstream might fix the issue too (but differently). - commit c3bbaae - series.conf: cleanup - move mainline patches into sorted section: - patches.suse/mwifiex-Fix-skb_over_panic-in-mwifiex_usb_recv.patch - patches.suse/0001-usb-Add-Xen-pvUSB-protocol-description.patch - patches.suse/0002-usb-Introduce-Xen-pvUSB-frontend-xen-hcd.patch - update upstream references and move into sorted section: - patches.suse/ALSA-usb-audio-Add-minimal-mute-notion-in-dB-mapping.patch - patches.suse/ALSA-usb-audio-Fix-dB-level-of-Bose-Revolve-SoundLin.patch - patches.suse/ALSA-usb-audio-Use-int-for-dB-map-values.patch No effect on expanded tree. - commit 607f978 - Refresh and reenable patches.suse/Bluetooth-Apply-initial-command-workaround-for-more-.patch. - commit a7b7c0d - series.conf: Add sorted section header/footer Even though we don't carry many patches in the stable or master branches, having the sorted section header/footer allows the automated tools to work. - commit 05f8150 ==== mozilla-nss ==== Version update (3.73.1 -> 3.74) Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs - update to NSS 3.74 * bmo#966856 - mozilla::pkix: support SHA-2 hashes in CertIDs in OCSP responses * bmo#1553612 - Ensure clients offer consistent ciphersuites after HRR * bmo#1721426 - NSS does not properly restrict server keys based on policy * bmo#1733003 - Set nssckbi version number to 2.54 * bmo#1735407 - Replace Google Trust Services LLC (GTS) R4 root certificate * bmo#1735407 - Replace Google Trust Services LLC (GTS) R3 root certificate * bmo#1735407 - Replace Google Trust Services LLC (GTS) R2 root certificate * bmo#1735407 - Replace Google Trust Services LLC (GTS) R1 root certificate * bmo#1735407 - Replace GlobalSign ECC Root CA R4 * bmo#1733560 - Remove Expired Root Certificates - DST Root CA X3 * bmo#1740807 - Remove Expiring Cybertrust Global Root and GlobalSign root certificates * bmo#1741930 - Add renewed Autoridad de Certificacion Firmaprofesional CIF A62634068 root certificate * bmo#1740095 - Add iTrusChina ECC root certificate * bmo#1740095 - Add iTrusChina RSA root certificate * bmo#1738805 - Add ISRG Root X2 root certificate * bmo#1733012 - Add Chunghwa Telecom's HiPKI Root CA - G1 root certificate * bmo#1738028 - Avoid a clang 13 unused variable warning in opt build * bmo#1735028 - Check for missing signedData field * bmo#1737470 - Ensure DER encoded signatures are within size limits - enable key logging option (boo#1195040) ==== patterns-gnome ==== Subpackages: patterns-gnome-gnome_basic patterns-gnome-gnome_basis - Do not require gnome-packagekit by gnome_x11: we have a specific sw_management_gnome pattern, which supplements the generic sw_management plus the basic gnome pattern, and that's where we also should (and do) recommend gnome-packagekit. - Do not recommend speech-dispatcher-module-espeak: we recommend speech-dispatcher, the rest is handled by dependencies from the packages (recommends and supplements). - No longer recommend gnome-menus: GNOME 3 is not using menu structures. This package is used by extension-classic, and if that extension is installed, gnome-menus comes in as a dep. - Stop recommending samba: samba is the server, which makes no sense to be recommended by the desktop pattern. ==== pciutils ==== - Set sbindir to /usr/bin to fix Steam issues (rh#1858437, gh#ValveSoftware/steam-for-linux#3306) - Add symlinks from /usr/sbin to /usr/bin ==== python-py ==== Version update (1.10.0 -> 1.11.0) - update to 1.11.0: * Support Python 3.11 * Support ``NO_COLOR`` environment variable * Update vendored apipkg: 1.5 => 2.0 ==== samba ==== Version update (4.15.3+git.219.40cc1cd8591 -> 4.15.4+git.224.dea2f6dc836) Subpackages: samba-client samba-client-libs samba-libs - Update to 4.15.4 * Duplicate SMB file_ids leading to Windows client cache poisoning; (bso#14928); * Failed to parse NTLMv2_RESPONSE length 95 - Buffer Size Error - NT_STATUS_BUFFER_TOO_SMALL; (bso#14932); * kill_tcp_connections does not work; (bso#14934); * Can't connect to Windows shares not requiring authentication using KDE/Gnome; (bso#14935); * smbclient -L doesn't set "client max protocol" to NT1 before calling the "Reconnecting with SMB1 for workgroup listing" path; (bso#14939); * Cross device copy of the crossrename module always fails; (bso#14940); * symlinkat function from VFS cap module always fails with an error; (bso#14941); * Fix possible fsp pointer deference; (bso#14942); * Missing pop_sec_ctx() in error path inside close_directory(); (bso#14944); * "smbd --build-options" no longer works without an smb.conf file; (bso#14945); ==== selinux-policy ==== Version update (20211111 -> 20220124) Subpackages: selinux-policy-targeted - Update to version 20220124. Refreshed: * fix_hadoop.patch * fix_init.patch * fix_kernel_sysctl.patch * fix_systemd.patch * fix_systemd_watch.patch - Added fix_hypervkvp.patch to fix issues with hyperv labeling (bsc#1193987) ==== vim ==== Version update (8.2.4063 -> 8.2.4186) Subpackages: vim-data-common vim-small - Updated to version 8.2.4186, fixes the following problems * Vim9: exported function in autoload script not found. (Yegappan Lakshmanan) * Foam files are not detected. * Computation overflow with large count for :yank. * Vim9: imported autoload script loaded again. * Vim9: cannot call imported function with :call. (Drew Vogel) * Vim9: import test fails. * Vim9: import test fails on MS-Windows. * Using uninitialized memory when reading empty file. * Vim9: no detection of return in try/endtry. (Dominique Pellé) * Vim9: compiling function fails when autoload script is not loaded yet. * Coverity warns for using NULL pointer. * Going over the end of NameBuff. * Test failures. * Memory leak in autoload import. * Not all Libsensors files are recognized. * Terminal test for current directory not used on FreeBSD. * MS-Windows: "gvim --version" didn't work when build with VIMDLL. * Not sufficient test coverage for xxd. * CodeQL reports problem in if_cscope causing it to fail. * Check for autoload file name and prefix fails. (Christian J. Robinson) * Vim9: no test for "vim9script autoload' and using script variable in the same script. * Memory leak when looking for autoload prefixed variable. * Vim9: no test for using import in legacy script. * "cctx" argument of find_func_even_dead() is unused. * Cannot test items from an autoload script easily. * Xxd cannot output everything in one line. * Terminal test for current directory fails on FreeBSD. * After restoring a session buffer order can be quite different. * Virtcol is recomputed for statusline unnecessarily. * MacOS CI: unnecessarily doing "Install packages". * Cached breakindent values not initialized properly. * 'virtualedit' is window-local but using buffer-local enum. * Sed script not recognized by the first line. * Linux CI: unnecessarily installing packages * Wrong number in error message on 32 bit system. (John Paul Adrian Glaubitz) * Typing "interrupt" at debug prompt may keep exception around, causing function calls to fail. * Vim9: cannot use Vim9 syntax in mapping. * Early return when getting the 'formatlistpat' value. * Warning for unused argument in tiny version. * Vim9: import cannot be used after method. * Vim9: variable declared in for loop not initialzed. * Vim9: lower casing the autoload prefix causes problems. * Translation related comment in the wrong place. * Going over the end of the w_lines array. * Script context not restored after using <ScriptCmd>. * Going over the end of the w_lines array. * MS-Windows: high dpi support is outdated. * Coverity warns for using NULL pointer. * Potential proglem when map is deleted while executing. * Function not deleted at end of test. * Typo on DOCMD_RANGEOK results in not recognizing command. * Vim9: type checking for a funcref does not work for when it is used in a method. * Cannot use a method with a complex expression. * Vim9: cannot use a method with a complex expression in a :def function. * Vim9: wrong white space error after using imported item. * Using UNUSED for argument that is used. * Build failure when disabling the channel feature. * Block insert goes over the end of the line. * Visual test fails on MS-Windows. * ":command Cmd" does not show custom completion argument. * Complete function cannot be import.Name. * Vim9: method in compiled function may not see script item. * Completion tests fail. * Crash on exit when built with dynamic Tcl and EXITFREE is defined. (Dominique Pellé) * Build failure without the +eval feature. * Crash when method cannot be found. (Christian J. Robinson) * Building with +sound but without +eval fails. (Dominique Pellé) * MS-Windows: MSVC build may have libraries duplicated. * Vim9: calling function in autoload import does not work in a :def function. * Vim9: wrong error message when autoload script can't be found. * output of ":scriptnames" goes into the message history, while this des not happen for other commands, such as ":ls". * MS-Windows: test for import with absolute path fails. * Vim9: ":scriptnames" shows unloaded imported autoload script. * Vim9: the "autoload" argument of ":vim9script" is not useful. * Vim9: calling import with and without method is inconsistent. * Vim9: no error for return with argument when the function does not return anything. * Using freed memory if an expression abbreviation deletes the abbreviation. * maparg() does not indicate the type of script where it was defined. * Vim9 builtin functions test fails. * Build failure with normal features without persistent undo. * MS-Windows: IME support for Win9x is obsolete. * Cannot load libsodium dynamically. * Confusing error when using name of import for a function. * Vim9: shadowed function can be used in compiled function but not at script level. * E464 does not always include the offending command. * Deleting any mapping may cause <ScriptCmd> to not set the script context. * Test override not restored, autocommand left behind. * Coverity warns for using pointer after free. * Reading beyond the end of a line. * Block insert with double wide character fails. * MS-Windows: Global IME is no longer supported. * ml_get error when exchanging windows in Visual mode. * Translating strftime() argument results in check error. * Fileinfo message overwrites echo'ed message. * Terminal test fails because Windows sets the title. * MS-Windows: memory leak in :browse. * MS-Windows: _WndProc() is very long. * Cannot change the register used for Select mode delete. * Vim9: warning for missing white space after imported variable. * Vim9: no error for redefining function with export. * No error for omitting function name after autoload prefix. * Error in legacy code for function shadowing variable. * The nv_g_cmd() function is too long. * Undo synced when switching buffer in another window. * Vim9: error message for old style import. * Disallowing empty function name breaks existing plugins. * MS-Windows: unnessary casts and other minor things. * MS-Windows: still using old message API calls. * Cannot invoke option function using autoload import. * Filetype detection for BASIC is not optimal. * Cannot use an import in 'foldexpr'. * Vim9: can use an autoload name in normal script. * MS-Windows: runtime check for multi-line balloon is obsolete. * Vim9: cannot use imported function with call(). * Vim9: autoload script not loaded after "vim9script noclear". * Vim9: invalid error for return type of lambda when debugging. * 'foldtext' is evaluated in the current script context. * 'balloonexpr' is evaluated in the current script context. * Vim9: cannot use an import in 'diffexpr'. * Memory leak when evaluating 'diffexpr'. * Cannot use an import in 'formatexpr'. * Cannot use an import in 'includeexpr'. * Cannot use an import in 'indentexpr'. * Cannot use an import in 'patchexpr'. ==== wpa_supplicant ==== Version update (2.9 -> 2.10) - update to 2.10.0: * SAE changes - improved protection against side channel attacks [https://w1.fi/security/2022-1/] - added support for the hash-to-element mechanism (sae_pwe=1 or sae_pwe=2); this is currently disabled by default, but will likely get enabled by default in the future - fixed PMKSA caching with OKC - added support for SAE-PK * EAP-pwd changes - improved protection against side channel attacks [https://w1.fi/security/2022-1/] * fixed P2P provision discovery processing of a specially constructed invalid frame [https://w1.fi/security/2021-1/] * fixed P2P group information processing of a specially constructed invalid frame [https://w1.fi/security/2020-2/] * fixed PMF disconnection protection bypass in AP mode [https://w1.fi/security/2019-7/] * added support for using OpenSSL 3.0 * increased the maximum number of EAP message exchanges (mainly to support cases with very large certificates) * fixed various issues in experimental support for EAP-TEAP peer * added support for DPP release 2 (Wi-Fi Device Provisioning Protocol) * a number of MKA/MACsec fixes and extensions * added support for SAE (WPA3-Personal) AP mode configuration * added P2P support for EDMG (IEEE 802.11ay) channels * fixed EAP-FAST peer with TLS GCM/CCM ciphers * improved throughput estimation and BSS selection * dropped support for libnl 1.1 * added support for nl80211 control port for EAPOL frame TX/RX * fixed OWE key derivation with groups 20 and 21; this breaks backwards compatibility for these groups while the default group 19 remains backwards compatible * added support for Beacon protection * added support for Extended Key ID for pairwise keys * removed WEP support from the default build (CONFIG_WEP=y can be used to enable it, if really needed) * added a build option to remove TKIP support (CONFIG_NO_TKIP=y) * added support for Transition Disable mechanism to allow the AP to automatically disable transition mode to improve security * extended D-Bus interface * added support for PASN * added a file-based backend for external password storage to allow secret information to be moved away from the main configuration file without requiring external tools * added EAP-TLS peer support for TLS 1.3 (disabled by default for now) * added support for SCS, MSCS, DSCP policy * changed driver interface selection to default to automatic fallback to other compiled in options * a large number of other fixes, cleanup, and extensions - drop wpa_supplicant-p2p_iname_size.diff, CVE-2021-30004.patch, CVE-2021-27803.patch, CVE-2021-0326.patch, CVE-2019-16275.patch: upstream - refresh config from 2.10 defconfig, re-enable CONFIG_WEP ==== xf86-input-libinput ==== Version update (1.2.0 -> 1.2.1) - Enable tarball sig url too, verify tarball via keyring. - Update to version 1.2.1 * few typos and misc minor fixes * property added to turn off new high-resolution wheel scrolling API

1 0

New Kubic snapshot 20220126 released!
by Richard Brown 28 Jan '22

28 Jan '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: kernel-source (5.16.1 -> 5.16.2) pciutils python-py (1.10.0 -> 1.11.0) selinux-policy (20211111 -> 20220124) vim (8.2.4063 -> 8.2.4186) wpa_supplicant (2.9 -> 2.10) === Details === ==== kernel-source ==== Version update (5.16.1 -> 5.16.2) - Update patches.kernel.org/5.16.2-005-vfs-fs_context-fix-up-param-length-parsing-in… (bsc#1012628 CVE-2022-0185 bsc#1194517). Add CVE reference. - commit 0d710a8 - s390/mm: fix 2KB pgtable release race (bsc#1188896). - commit 6f62d73 - HID: wacom: Avoid using stale array indicies to read contact count (bsc#1194667). - HID: wacom: Ignore the confidence flag when a touch is removed (bsc#1194667). - HID: wacom: Reset expected and received contact counts at the same time (bsc#1194667). - commit 07a970c - Linux 5.16.2 (bsc#1012628). - ALSA: hda/realtek: Re-order quirk entries for Lenovo (bsc#1012628). - ALSA: hda/realtek: Add quirk for Legion Y9000X 2020 (bsc#1012628). - ALSA: hda/tegra: Fix Tegra194 HDA reset failure (bsc#1012628). - ALSA: hda: ALC287: Add Lenovo IdeaPad Slim 9i 14ITL5 speaker quirk (bsc#1012628). - ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Master after reboot from Windows (bsc#1012628). - ALSA: hda/realtek: Use ALC285_FIXUP_HP_GPIO_LED on another HP laptop (bsc#1012628). - ALSA: hda/realtek: Add speaker fixup for some Yoga 15ITL5 devices (bsc#1012628). - perf annotate: Avoid TUI crash when navigating in the annotation of recursive functions (bsc#1012628). - firmware: qemu_fw_cfg: fix kobject leak in probe error path (bsc#1012628). - firmware: qemu_fw_cfg: fix NULL-pointer deref on duplicate entries (bsc#1012628). - firmware: qemu_fw_cfg: fix sysfs information leak (bsc#1012628). - rtlwifi: rtl8192cu: Fix WARNING when calling local_irq_restore() with interrupts enabled (bsc#1012628). - media: uvcvideo: fix division by zero at stream start (bsc#1012628). - video: vga16fb: Only probe for EGA and VGA 16 color graphic cards (bsc#1012628). - 9p: fix enodata when reading growing file (bsc#1012628). - 9p: only copy valid iattrs in 9P2000.L setattr implementation (bsc#1012628). - NFSD: Fix zero-length NFSv3 WRITEs (bsc#1012628). - remoteproc: qcom: pas: Add missing power-domain "mxc" for CDSP (bsc#1012628). - KVM: s390: Clarify SIGP orders versus STOP/RESTART (bsc#1012628). - KVM: x86: don't print when fail to read/write pv eoi memory (bsc#1012628). - KVM: x86: Register Processor Trace interrupt hook iff PT enabled in guest (bsc#1012628). - KVM: x86: Register perf callbacks after calling vendor's hardware_setup() (bsc#1012628). - perf: Protect perf_guest_cbs with RCU (bsc#1012628). - vfs: fs_context: fix up param length parsing in legacy_parse_param (bsc#1012628). - remoteproc: qcom: pil_info: Don't memcpy_toio more than is provided (bsc#1012628). - orangefs: Fix the size of a memory allocation in orangefs_bufmap_alloc() (bsc#1012628). - drm/amd/display: explicitly set is_dsc_supported to false before use (bsc#1012628). - devtmpfs regression fix: reconfigure on each mount (bsc#1012628). - commit 6fa29ec - kernel-binary.spec: Do not use the default certificate path (bsc#1194943). Using the the default path is broken since Linux 5.17 - commit 68b36f0 - disable the Bluetooth patch again The kernel is currently tested whether the patch is needed at all. As 95655456e7ce in upstream might fix the issue too (but differently). - commit c3bbaae - series.conf: cleanup - move mainline patches into sorted section: - patches.suse/mwifiex-Fix-skb_over_panic-in-mwifiex_usb_recv.patch - patches.suse/0001-usb-Add-Xen-pvUSB-protocol-description.patch - patches.suse/0002-usb-Introduce-Xen-pvUSB-frontend-xen-hcd.patch - update upstream references and move into sorted section: - patches.suse/ALSA-usb-audio-Add-minimal-mute-notion-in-dB-mapping.patch - patches.suse/ALSA-usb-audio-Fix-dB-level-of-Bose-Revolve-SoundLin.patch - patches.suse/ALSA-usb-audio-Use-int-for-dB-map-values.patch No effect on expanded tree. - commit 607f978 - Refresh and reenable patches.suse/Bluetooth-Apply-initial-command-workaround-for-more-.patch. - commit a7b7c0d - series.conf: Add sorted section header/footer Even though we don't carry many patches in the stable or master branches, having the sorted section header/footer allows the automated tools to work. - commit 05f8150 ==== pciutils ==== - Set sbindir to /usr/bin to fix Steam issues (rh#1858437, gh#ValveSoftware/steam-for-linux#3306) - Add symlinks from /usr/sbin to /usr/bin ==== python-py ==== Version update (1.10.0 -> 1.11.0) - update to 1.11.0: * Support Python 3.11 * Support ``NO_COLOR`` environment variable * Update vendored apipkg: 1.5 => 2.0 ==== selinux-policy ==== Version update (20211111 -> 20220124) Subpackages: selinux-policy-targeted - Update to version 20220124. Refreshed: * fix_hadoop.patch * fix_init.patch * fix_kernel_sysctl.patch * fix_systemd.patch * fix_systemd_watch.patch - Added fix_hypervkvp.patch to fix issues with hyperv labeling (bsc#1193987) ==== vim ==== Version update (8.2.4063 -> 8.2.4186) Subpackages: vim-data-common vim-small - Updated to version 8.2.4186, fixes the following problems * Vim9: exported function in autoload script not found. (Yegappan Lakshmanan) * Foam files are not detected. * Computation overflow with large count for :yank. * Vim9: imported autoload script loaded again. * Vim9: cannot call imported function with :call. (Drew Vogel) * Vim9: import test fails. * Vim9: import test fails on MS-Windows. * Using uninitialized memory when reading empty file. * Vim9: no detection of return in try/endtry. (Dominique Pellé) * Vim9: compiling function fails when autoload script is not loaded yet. * Coverity warns for using NULL pointer. * Going over the end of NameBuff. * Test failures. * Memory leak in autoload import. * Not all Libsensors files are recognized. * Terminal test for current directory not used on FreeBSD. * MS-Windows: "gvim --version" didn't work when build with VIMDLL. * Not sufficient test coverage for xxd. * CodeQL reports problem in if_cscope causing it to fail. * Check for autoload file name and prefix fails. (Christian J. Robinson) * Vim9: no test for "vim9script autoload' and using script variable in the same script. * Memory leak when looking for autoload prefixed variable. * Vim9: no test for using import in legacy script. * "cctx" argument of find_func_even_dead() is unused. * Cannot test items from an autoload script easily. * Xxd cannot output everything in one line. * Terminal test for current directory fails on FreeBSD. * After restoring a session buffer order can be quite different. * Virtcol is recomputed for statusline unnecessarily. * MacOS CI: unnecessarily doing "Install packages". * Cached breakindent values not initialized properly. * 'virtualedit' is window-local but using buffer-local enum. * Sed script not recognized by the first line. * Linux CI: unnecessarily installing packages * Wrong number in error message on 32 bit system. (John Paul Adrian Glaubitz) * Typing "interrupt" at debug prompt may keep exception around, causing function calls to fail. * Vim9: cannot use Vim9 syntax in mapping. * Early return when getting the 'formatlistpat' value. * Warning for unused argument in tiny version. * Vim9: import cannot be used after method. * Vim9: variable declared in for loop not initialzed. * Vim9: lower casing the autoload prefix causes problems. * Translation related comment in the wrong place. * Going over the end of the w_lines array. * Script context not restored after using <ScriptCmd>. * Going over the end of the w_lines array. * MS-Windows: high dpi support is outdated. * Coverity warns for using NULL pointer. * Potential proglem when map is deleted while executing. * Function not deleted at end of test. * Typo on DOCMD_RANGEOK results in not recognizing command. * Vim9: type checking for a funcref does not work for when it is used in a method. * Cannot use a method with a complex expression. * Vim9: cannot use a method with a complex expression in a :def function. * Vim9: wrong white space error after using imported item. * Using UNUSED for argument that is used. * Build failure when disabling the channel feature. * Block insert goes over the end of the line. * Visual test fails on MS-Windows. * ":command Cmd" does not show custom completion argument. * Complete function cannot be import.Name. * Vim9: method in compiled function may not see script item. * Completion tests fail. * Crash on exit when built with dynamic Tcl and EXITFREE is defined. (Dominique Pellé) * Build failure without the +eval feature. * Crash when method cannot be found. (Christian J. Robinson) * Building with +sound but without +eval fails. (Dominique Pellé) * MS-Windows: MSVC build may have libraries duplicated. * Vim9: calling function in autoload import does not work in a :def function. * Vim9: wrong error message when autoload script can't be found. * output of ":scriptnames" goes into the message history, while this des not happen for other commands, such as ":ls". * MS-Windows: test for import with absolute path fails. * Vim9: ":scriptnames" shows unloaded imported autoload script. * Vim9: the "autoload" argument of ":vim9script" is not useful. * Vim9: calling import with and without method is inconsistent. * Vim9: no error for return with argument when the function does not return anything. * Using freed memory if an expression abbreviation deletes the abbreviation. * maparg() does not indicate the type of script where it was defined. * Vim9 builtin functions test fails. * Build failure with normal features without persistent undo. * MS-Windows: IME support for Win9x is obsolete. * Cannot load libsodium dynamically. * Confusing error when using name of import for a function. * Vim9: shadowed function can be used in compiled function but not at script level. * E464 does not always include the offending command. * Deleting any mapping may cause <ScriptCmd> to not set the script context. * Test override not restored, autocommand left behind. * Coverity warns for using pointer after free. * Reading beyond the end of a line. * Block insert with double wide character fails. * MS-Windows: Global IME is no longer supported. * ml_get error when exchanging windows in Visual mode. * Translating strftime() argument results in check error. * Fileinfo message overwrites echo'ed message. * Terminal test fails because Windows sets the title. * MS-Windows: memory leak in :browse. * MS-Windows: _WndProc() is very long. * Cannot change the register used for Select mode delete. * Vim9: warning for missing white space after imported variable. * Vim9: no error for redefining function with export. * No error for omitting function name after autoload prefix. * Error in legacy code for function shadowing variable. * The nv_g_cmd() function is too long. * Undo synced when switching buffer in another window. * Vim9: error message for old style import. * Disallowing empty function name breaks existing plugins. * MS-Windows: unnessary casts and other minor things. * MS-Windows: still using old message API calls. * Cannot invoke option function using autoload import. * Filetype detection for BASIC is not optimal. * Cannot use an import in 'foldexpr'. * Vim9: can use an autoload name in normal script. * MS-Windows: runtime check for multi-line balloon is obsolete. * Vim9: cannot use imported function with call(). * Vim9: autoload script not loaded after "vim9script noclear". * Vim9: invalid error for return type of lambda when debugging. * 'foldtext' is evaluated in the current script context. * 'balloonexpr' is evaluated in the current script context. * Vim9: cannot use an import in 'diffexpr'. * Memory leak when evaluating 'diffexpr'. * Cannot use an import in 'formatexpr'. * Cannot use an import in 'includeexpr'. * Cannot use an import in 'indentexpr'. * Cannot use an import in 'patchexpr'. ==== wpa_supplicant ==== Version update (2.9 -> 2.10) - update to 2.10.0: * SAE changes - improved protection against side channel attacks [https://w1.fi/security/2022-1/] - added support for the hash-to-element mechanism (sae_pwe=1 or sae_pwe=2); this is currently disabled by default, but will likely get enabled by default in the future - fixed PMKSA caching with OKC - added support for SAE-PK * EAP-pwd changes - improved protection against side channel attacks [https://w1.fi/security/2022-1/] * fixed P2P provision discovery processing of a specially constructed invalid frame [https://w1.fi/security/2021-1/] * fixed P2P group information processing of a specially constructed invalid frame [https://w1.fi/security/2020-2/] * fixed PMF disconnection protection bypass in AP mode [https://w1.fi/security/2019-7/] * added support for using OpenSSL 3.0 * increased the maximum number of EAP message exchanges (mainly to support cases with very large certificates) * fixed various issues in experimental support for EAP-TEAP peer * added support for DPP release 2 (Wi-Fi Device Provisioning Protocol) * a number of MKA/MACsec fixes and extensions * added support for SAE (WPA3-Personal) AP mode configuration * added P2P support for EDMG (IEEE 802.11ay) channels * fixed EAP-FAST peer with TLS GCM/CCM ciphers * improved throughput estimation and BSS selection * dropped support for libnl 1.1 * added support for nl80211 control port for EAPOL frame TX/RX * fixed OWE key derivation with groups 20 and 21; this breaks backwards compatibility for these groups while the default group 19 remains backwards compatible * added support for Beacon protection * added support for Extended Key ID for pairwise keys * removed WEP support from the default build (CONFIG_WEP=y can be used to enable it, if really needed) * added a build option to remove TKIP support (CONFIG_NO_TKIP=y) * added support for Transition Disable mechanism to allow the AP to automatically disable transition mode to improve security * extended D-Bus interface * added support for PASN * added a file-based backend for external password storage to allow secret information to be moved away from the main configuration file without requiring external tools * added EAP-TLS peer support for TLS 1.3 (disabled by default for now) * added support for SCS, MSCS, DSCP policy * changed driver interface selection to default to automatic fallback to other compiled in options * a large number of other fixes, cleanup, and extensions - drop wpa_supplicant-p2p_iname_size.diff, CVE-2021-30004.patch, CVE-2021-27803.patch, CVE-2021-0326.patch, CVE-2019-16275.patch: upstream - refresh config from 2.10 defconfig, re-enable CONFIG_WEP

1 0

New ARM MicroOS snapshot 20220125 released!
by Guillaume Gardet 27 Jan '22

27 Jan '22

Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=3&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: bash (5.1.12 -> 5.1.16) installation-images-MicroOS (17.36 -> 17.38) libqt5-qtbase (5.15.2+kde268 -> 5.15.2+kde294) libqt5-qtdeclarative (5.15.2+kde36 -> 5.15.2+kde43) libqt5-qtquickcontrols2 (5.15.2+kde8 -> 5.15.2+kde10) libqt5-qtsvg (5.15.2+kde13 -> 5.15.2+kde16) libqt5-qtvirtualkeyboard (5.15.2+kde4 -> 5.15.2+kde6) libqt5-qtwayland (5.15.2+kde37 -> 5.15.2+kde44) libqt5-qtwebchannel (5.15.2+kde2 -> 5.15.2+kde5) readline yast2 (4.4.36 -> 4.4.39) === Details === ==== bash ==== Version update (5.1.12 -> 5.1.16) Subpackages: bash-sh - Update bash 5.1 to patch level 16 * Add official patch bash51-013 Bash did not always perform tilde expansion following an unquoted colon on the rhs of an assignment statement in posix mode. * Add official patch bash51-014 Bash may produce corrupted input if a multibyte character spans a 512-byte boundary while reading the output of a command substitution. * Add official patch bash51-015 There are some characters (e.g., cyrillic) that can't be displayed using certain single-byte encodings (e.g., cp1251) because the negative signed int is interpreted as EOF and not displayed. * Add official patch bash51-016 Multiple `!' tokens should toggle negation of an expression in a [[ conditional command, instead of simply negating the expression. ==== installation-images-MicroOS ==== Version update (17.36 -> 17.38) - merge gh#openSUSE/installation-images#569 - re-add mount.nfs (bsc#1195035) - fix locale handling - 17.38 - merge gh#openSUSE/installation-images#568 - etc: update module.config to match 5.17 - 17.37 ==== libqt5-qtbase ==== Version update (5.15.2+kde268 -> 5.15.2+kde294) Subpackages: libQt5Concurrent5 libQt5Core5 libQt5DBus5 libQt5Gui5 libQt5Network5 libQt5PrintSupport5 libQt5Sql5 libQt5Sql5-sqlite libQt5Test5 libQt5Widgets5 libQt5Xml5 - Update to version 5.15.2+kde294: * QTzTimeZonePrivate::init(): fix handling of empty ID * Restore support for reading /etc/timezone for system zone name * QPathEdge: Fix array initialization * QTzTimeZonePrivate: fix UB (data race on m_icu) * Don't access QObject::objectName during QThread start * Restore C++11 compatibility after e8b9f4c28d3ab5e960dc54f2dc0c4b749b0b50e0 * QVarLengthArray: fix size update on failed append() * Call statx() with AT_NO_AUTOMOUNT * QThread: Remove superfluous initialization of threadId on Unix * QThread: Reset the system thread ID when thread exits on Unix * Add missing macOS header file that was indirectly included before * QXcb: don't dereference pointer before checking * xcb: avoid to use invalid pointers * QVarLengthArray: fix insert() type/alias mismatch between decl and impl * Use qint64 to replace int while qt_transform_image_rasterize * QVarLengthArray: assert that the range passed to erase() is valid * Fix pattern type matching * QThread: fix UB (invalid enum value) on Private::Priority * Use block char format to render list item bullets and numbers * QDateTime: Don't require c++17 * QVariantAnimation: fix UB (FP 0/0) in interpolated() arg calculation * QDateTime: fix UB (signed overflow) in addDays() * QString: fix UB (pointer arithmetic on nullptr) in qLastIndexOf * tst_QIODevice: fix UB (precondition violation) in SequentialReadBuffer::readData() * QVarLengthArray: fix UB (precondition violation) in range-erase() * Fix segmentation fault in QObject::dumpObjectInfo ==== libqt5-qtdeclarative ==== Version update (5.15.2+kde36 -> 5.15.2+kde43) - Update to version 5.15.2+kde43: * QQmlJs::FixedPoolArray: fix UB (precondition violation) in allocate() * Fix crash during model reset * QQuickWindow: don't leak old screenChanged connections * qqmldelegatemodel: Fix out of bounds cache removal * QQuickItemAnimation: close potential memory leak ==== libqt5-qtquickcontrols2 ==== Version update (5.15.2+kde8 -> 5.15.2+kde10) Subpackages: libQt5QuickControls2-5 libQt5QuickTemplates2-5 - Update to version 5.15.2+kde10: * QQuickAction: don't grab the same shortcut multiple times * Ensure we don't crash when changing sizes after cleanup ==== libqt5-qtsvg ==== Version update (5.15.2+kde13 -> 5.15.2+kde16) - Update to version 5.15.2+kde16: * Unconditionally stop parsing after the svg end tag * SVG Image reading: Reject oversize svgs as corrupt * Do stricter error checking when parsing path nodes ==== libqt5-qtvirtualkeyboard ==== Version update (5.15.2+kde4 -> 5.15.2+kde6) Subpackages: libQt5VirtualKeyboard5 - Update to version 5.15.2+kde6: * Fix processing of hard Qt::Key_Backspace and Qt::Key_Delete * Fix high CPU utilization caused by key repeat timer ==== libqt5-qtwayland ==== Version update (5.15.2+kde37 -> 5.15.2+kde44) Subpackages: libQt5WaylandClient5 libQt5WaylandCompositor5 - Update to version 5.15.2+kde44: * Move the wayland socket polling to a separate event thread * Connect flushRequest after forceRoundTrip * Handle registry_global out of constructor * Client: Avoid processing of events when showing windows * Client: Delay deletion of QDrag object until after we're done with it * Client: Implement DataDeviceV3 * Set preedit cursor when cursor equals to 0 - Drop patches, now upstream: * 0001-Client-Avoid-processing-of-events-when-showing-windo.patch ==== libqt5-qtwebchannel ==== Version update (5.15.2+kde2 -> 5.15.2+kde5) Subpackages: libQt5WebChannel5 libQt5WebChannel5-imports - Update to version 5.15.2+kde5: * QMetaObjectPublisher: Never send stale queued messages * Handle per-transport client idle status * Handle signals in the registered object's thread ==== readline ==== - Add official patch readline81-002 and its signature * There are some characters (e.g., cyrillic) that can't be displayed using certain single-byte encodings (e.g., cp1251) because the negative signed int is interpreted as EOF and not displayed. ==== yast2 ==== Version update (4.4.36 -> 4.4.39) - Preload libsuseconnect.so if avaiable. On aarch64 installer/YaST sometimes failed to load libsuseconnect.so with "cannot allocate memory in static TLS block" error. Loading the library before others solves the problem until a better solution is found (bsc#1194996). - 4.3.39 - Unify Package, PackageSystem and PackageAI. Now the Package module is the entry point. PackageSystem and PackageAI implement specific logic and they should not be referenced from outside (bsc#1194886). - 4.3.38 - Fix CWM dialog: argument delegation is handled differently in ruby 2.6 and before (bsc#1194984). - 4.4.37

1 0

New ARM Kubic snapshot 20220125 released!
by Guillaume Gardet 27 Jan '22

27 Jan '22

Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=3&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: bash (5.1.12 -> 5.1.16) installation-images-MicroOS (17.36 -> 17.38) readline socat (1.7.4.2 -> 1.7.4.3) yast2 (4.4.36 -> 4.4.39) === Details === ==== bash ==== Version update (5.1.12 -> 5.1.16) Subpackages: bash-sh - Update bash 5.1 to patch level 16 * Add official patch bash51-013 Bash did not always perform tilde expansion following an unquoted colon on the rhs of an assignment statement in posix mode. * Add official patch bash51-014 Bash may produce corrupted input if a multibyte character spans a 512-byte boundary while reading the output of a command substitution. * Add official patch bash51-015 There are some characters (e.g., cyrillic) that can't be displayed using certain single-byte encodings (e.g., cp1251) because the negative signed int is interpreted as EOF and not displayed. * Add official patch bash51-016 Multiple `!' tokens should toggle negation of an expression in a [[ conditional command, instead of simply negating the expression. ==== installation-images-MicroOS ==== Version update (17.36 -> 17.38) - merge gh#openSUSE/installation-images#569 - re-add mount.nfs (bsc#1195035) - fix locale handling - 17.38 - merge gh#openSUSE/installation-images#568 - etc: update module.config to match 5.17 - 17.37 ==== readline ==== - Add official patch readline81-002 and its signature * There are some characters (e.g., cyrillic) that can't be displayed using certain single-byte encodings (e.g., cp1251) because the negative signed int is interpreted as EOF and not displayed. ==== socat ==== Version update (1.7.4.2 -> 1.7.4.3) - update to 1.7.4.3: * fixes the TCP_INFO issue that broke building on non-Linux platforms. * building on AIX works again. * A few more corrections and improvements have been added ==== yast2 ==== Version update (4.4.36 -> 4.4.39) - Preload libsuseconnect.so if avaiable. On aarch64 installer/YaST sometimes failed to load libsuseconnect.so with "cannot allocate memory in static TLS block" error. Loading the library before others solves the problem until a better solution is found (bsc#1194996). - 4.3.39 - Unify Package, PackageSystem and PackageAI. Now the Package module is the entry point. PackageSystem and PackageAI implement specific logic and they should not be referenced from outside (bsc#1194886). - 4.3.38 - Fix CWM dialog: argument delegation is handled differently in ruby 2.6 and before (bsc#1194984). - 4.4.37

1 0

Re: Kubic updatek8s_init_microsite role update
by Attila Pinter 27 Jan '22

27 Jan '22

On Tuesday, January 25th, 2022 at 2:19 PM, Thorsten Kukuk <kukuk(a)suse.de> wrote: > Hi, > > On Tue, Jan 25, Attila Pinter wrote: > > > Hi, > > > > Ran into an interesting "issue" (quotes, because I'm not sure what to expect and absolutely possible that I'm pulling an armature hour type deal) with Kubic. > > > > After starting my test cluster at home I noticed that `kured` pods are on ImagePullBackOff and checking registry-o-o the requested version (1.6.1) in the manifest is missing for amd64. My question: - updates of pods should happen via transactional-updates (as it seems to be a package in /usr/share/k8s-yaml/ that holds these manifests) > > transactional-update only updates packages, no kubernetes workload. It > > cannot do that, as it has no credentials to do so and even if, would not > > know anything about the cluster to do it. > > Beside automatic update of a k8s cluster would be a really bad idea, > > since the tools have no clue about your workload and which changes they > > need to work with the new k8s version. > > > - or kubicctl should do this (I think kubicctl should only handle the k8s upgrades in the cluster with `salt`, I can be wrong) > > kubicctl will upgrade your k8s cluster, but you have to plan, schedule > > and do it yourself. See above, it's for this tools not possible to do it > > automatically due to the fast move and big changes of new k8s versions. > > So from time to time plan to run kubicctl to upgrade your k8s cluster. > > > - or it is the users responsibility to keep the pods up-to-date in their preferred manner? > > Correct. > > Thorsten > > > Have the feeling that the last option is the winner, but would feel a lot better if someone would clarify this. > > > > -- > > > > Br, > > > > A. > > Thorsten Kukuk, Distinguished Engineer, Senior Architect > > SUSE Software Solutions Germany GmbH, Maxfeldstr. 5, 90409 Nuernberg, Germany > > Managing Director: Ivo Totev (HRB 36809, AG Nürnberg) A followup question: Is it possible to downgrade nodes with kubicctl? Got a pretty naughty situation on my hand: dev-k8s-master-1 Ready control-plane,master 46d v1.22.4 dev-k8s-worker-01 Ready <none> 44m v1.23.0 dev-k8s-worker-02 Ready <none> 43m v1.23.0 dev-k8s-worker-03 Ready <none> 45d v1.22.4 dev-k8s-worker-04 Ready <none> 45d v1.22.4 dev-k8s-worker-05 Ready <none> 45d v1.22.4 How could I get the 2 worker nodes from 1.23 to 1.22.4? Sorry, couldn't find relevant documentation on the subject. -- Br, A.

3 6

New MicroOS snapshot 20220125 released!
by Richard Brown 27 Jan '22

27 Jan '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: bash (5.1.12 -> 5.1.16) installation-images-MicroOS (17.36 -> 17.38) libqt5-qtbase (5.15.2+kde268 -> 5.15.2+kde294) libqt5-qtdeclarative (5.15.2+kde36 -> 5.15.2+kde43) libqt5-qtquickcontrols2 (5.15.2+kde8 -> 5.15.2+kde10) libqt5-qtsvg (5.15.2+kde13 -> 5.15.2+kde16) libqt5-qtvirtualkeyboard (5.15.2+kde4 -> 5.15.2+kde6) libqt5-qtwayland (5.15.2+kde37 -> 5.15.2+kde44) libqt5-qtwebchannel (5.15.2+kde2 -> 5.15.2+kde5) readline yast2 (4.4.36 -> 4.4.39) === Details === ==== bash ==== Version update (5.1.12 -> 5.1.16) Subpackages: bash-sh - Update bash 5.1 to patch level 16 * Add official patch bash51-013 Bash did not always perform tilde expansion following an unquoted colon on the rhs of an assignment statement in posix mode. * Add official patch bash51-014 Bash may produce corrupted input if a multibyte character spans a 512-byte boundary while reading the output of a command substitution. * Add official patch bash51-015 There are some characters (e.g., cyrillic) that can't be displayed using certain single-byte encodings (e.g., cp1251) because the negative signed int is interpreted as EOF and not displayed. * Add official patch bash51-016 Multiple `!' tokens should toggle negation of an expression in a [[ conditional command, instead of simply negating the expression. ==== installation-images-MicroOS ==== Version update (17.36 -> 17.38) - merge gh#openSUSE/installation-images#569 - re-add mount.nfs (bsc#1195035) - fix locale handling - 17.38 - merge gh#openSUSE/installation-images#568 - etc: update module.config to match 5.17 - 17.37 ==== libqt5-qtbase ==== Version update (5.15.2+kde268 -> 5.15.2+kde294) Subpackages: libQt5Concurrent5 libQt5Core5 libQt5DBus5 libQt5Gui5 libQt5Network5 libQt5OpenGL5 libQt5PrintSupport5 libQt5Sql5 libQt5Sql5-sqlite libQt5Test5 libQt5Widgets5 libQt5Xml5 - Update to version 5.15.2+kde294: * QTzTimeZonePrivate::init(): fix handling of empty ID * Restore support for reading /etc/timezone for system zone name * QPathEdge: Fix array initialization * QTzTimeZonePrivate: fix UB (data race on m_icu) * Don't access QObject::objectName during QThread start * Restore C++11 compatibility after e8b9f4c28d3ab5e960dc54f2dc0c4b749b0b50e0 * QVarLengthArray: fix size update on failed append() * Call statx() with AT_NO_AUTOMOUNT * QThread: Remove superfluous initialization of threadId on Unix * QThread: Reset the system thread ID when thread exits on Unix * Add missing macOS header file that was indirectly included before * QXcb: don't dereference pointer before checking * xcb: avoid to use invalid pointers * QVarLengthArray: fix insert() type/alias mismatch between decl and impl * Use qint64 to replace int while qt_transform_image_rasterize * QVarLengthArray: assert that the range passed to erase() is valid * Fix pattern type matching * QThread: fix UB (invalid enum value) on Private::Priority * Use block char format to render list item bullets and numbers * QDateTime: Don't require c++17 * QVariantAnimation: fix UB (FP 0/0) in interpolated() arg calculation * QDateTime: fix UB (signed overflow) in addDays() * QString: fix UB (pointer arithmetic on nullptr) in qLastIndexOf * tst_QIODevice: fix UB (precondition violation) in SequentialReadBuffer::readData() * QVarLengthArray: fix UB (precondition violation) in range-erase() * Fix segmentation fault in QObject::dumpObjectInfo ==== libqt5-qtdeclarative ==== Version update (5.15.2+kde36 -> 5.15.2+kde43) - Update to version 5.15.2+kde43: * QQmlJs::FixedPoolArray: fix UB (precondition violation) in allocate() * Fix crash during model reset * QQuickWindow: don't leak old screenChanged connections * qqmldelegatemodel: Fix out of bounds cache removal * QQuickItemAnimation: close potential memory leak ==== libqt5-qtquickcontrols2 ==== Version update (5.15.2+kde8 -> 5.15.2+kde10) Subpackages: libQt5QuickControls2-5 libQt5QuickTemplates2-5 - Update to version 5.15.2+kde10: * QQuickAction: don't grab the same shortcut multiple times * Ensure we don't crash when changing sizes after cleanup ==== libqt5-qtsvg ==== Version update (5.15.2+kde13 -> 5.15.2+kde16) - Update to version 5.15.2+kde16: * Unconditionally stop parsing after the svg end tag * SVG Image reading: Reject oversize svgs as corrupt * Do stricter error checking when parsing path nodes ==== libqt5-qtvirtualkeyboard ==== Version update (5.15.2+kde4 -> 5.15.2+kde6) Subpackages: libQt5VirtualKeyboard5 - Update to version 5.15.2+kde6: * Fix processing of hard Qt::Key_Backspace and Qt::Key_Delete * Fix high CPU utilization caused by key repeat timer ==== libqt5-qtwayland ==== Version update (5.15.2+kde37 -> 5.15.2+kde44) Subpackages: libQt5WaylandClient5 libQt5WaylandCompositor5 - Update to version 5.15.2+kde44: * Move the wayland socket polling to a separate event thread * Connect flushRequest after forceRoundTrip * Handle registry_global out of constructor * Client: Avoid processing of events when showing windows * Client: Delay deletion of QDrag object until after we're done with it * Client: Implement DataDeviceV3 * Set preedit cursor when cursor equals to 0 - Drop patches, now upstream: * 0001-Client-Avoid-processing-of-events-when-showing-windo.patch ==== libqt5-qtwebchannel ==== Version update (5.15.2+kde2 -> 5.15.2+kde5) Subpackages: libQt5WebChannel5 libQt5WebChannel5-imports - Update to version 5.15.2+kde5: * QMetaObjectPublisher: Never send stale queued messages * Handle per-transport client idle status * Handle signals in the registered object's thread ==== readline ==== - Add official patch readline81-002 and its signature * There are some characters (e.g., cyrillic) that can't be displayed using certain single-byte encodings (e.g., cp1251) because the negative signed int is interpreted as EOF and not displayed. ==== yast2 ==== Version update (4.4.36 -> 4.4.39) - Preload libsuseconnect.so if avaiable. On aarch64 installer/YaST sometimes failed to load libsuseconnect.so with "cannot allocate memory in static TLS block" error. Loading the library before others solves the problem until a better solution is found (bsc#1194996). - 4.3.39 - Unify Package, PackageSystem and PackageAI. Now the Package module is the entry point. PackageSystem and PackageAI implement specific logic and they should not be referenced from outside (bsc#1194886). - 4.3.38 - Fix CWM dialog: argument delegation is handled differently in ruby 2.6 and before (bsc#1194984). - 4.4.37

1 0

New Kubic snapshot 20220125 released!
by Richard Brown 27 Jan '22

27 Jan '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: bash (5.1.12 -> 5.1.16) installation-images-MicroOS (17.36 -> 17.38) readline socat (1.7.4.2 -> 1.7.4.3) yast2 (4.4.36 -> 4.4.39) === Details === ==== bash ==== Version update (5.1.12 -> 5.1.16) Subpackages: bash-sh - Update bash 5.1 to patch level 16 * Add official patch bash51-013 Bash did not always perform tilde expansion following an unquoted colon on the rhs of an assignment statement in posix mode. * Add official patch bash51-014 Bash may produce corrupted input if a multibyte character spans a 512-byte boundary while reading the output of a command substitution. * Add official patch bash51-015 There are some characters (e.g., cyrillic) that can't be displayed using certain single-byte encodings (e.g., cp1251) because the negative signed int is interpreted as EOF and not displayed. * Add official patch bash51-016 Multiple `!' tokens should toggle negation of an expression in a [[ conditional command, instead of simply negating the expression. ==== installation-images-MicroOS ==== Version update (17.36 -> 17.38) - merge gh#openSUSE/installation-images#569 - re-add mount.nfs (bsc#1195035) - fix locale handling - 17.38 - merge gh#openSUSE/installation-images#568 - etc: update module.config to match 5.17 - 17.37 ==== readline ==== - Add official patch readline81-002 and its signature * There are some characters (e.g., cyrillic) that can't be displayed using certain single-byte encodings (e.g., cp1251) because the negative signed int is interpreted as EOF and not displayed. ==== socat ==== Version update (1.7.4.2 -> 1.7.4.3) - update to 1.7.4.3: * fixes the TCP_INFO issue that broke building on non-Linux platforms. * building on AIX works again. * A few more corrections and improvements have been added ==== yast2 ==== Version update (4.4.36 -> 4.4.39) - Preload libsuseconnect.so if avaiable. On aarch64 installer/YaST sometimes failed to load libsuseconnect.so with "cannot allocate memory in static TLS block" error. Loading the library before others solves the problem until a better solution is found (bsc#1194996). - 4.3.39 - Unify Package, PackageSystem and PackageAI. Now the Package module is the entry point. PackageSystem and PackageAI implement specific logic and they should not be referenced from outside (bsc#1194886). - 4.3.38 - Fix CWM dialog: argument delegation is handled differently in ruby 2.6 and before (bsc#1194984). - 4.4.37

1 0

2023

2022

2021

2020

2019

2018

openSUSE Kubic January 2022