February 2023 - MicroOS - openSUSE Mailing Lists

New MicroOS snapshot 20230211 released!
by Richard Brown 12 Feb '23

12 Feb '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: Mesa Mesa-drivers cockpit dbus-1 (1.14.4 -> 1.14.6) evolution-data-server (3.46.3 -> 3.46.4) fuse3 (3.13.0 -> 3.13.1) gnome-software (43.3 -> 43.4) lapack libjxl ncurses openblas_pthreads python-alembic (1.9.2 -> 1.9.3) wicked yast2-network (4.5.15 -> 4.5.16) === Details === ==== Mesa ==== Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - U_ReturnME.patch * fixes blackscreen in Return To Monkey Island on Intel graphics (boo#1208145) ==== Mesa-drivers ==== Subpackages: Mesa-dri Mesa-gallium Mesa-libva - U_ReturnME.patch * fixes blackscreen in Return To Monkey Island on Intel graphics (boo#1208145) ==== cockpit ==== Subpackages: cockpit-bridge cockpit-packagekit cockpit-system - Migration of PAM settings to /usr/lib/pam.d. ==== dbus-1 ==== Version update (1.14.4 -> 1.14.6) Subpackages: dbus-1-common dbus-1-daemon dbus-1-tools libdbus-1-3 - Fix multibuild: do not mention main flavor in multibuild, as it is implicit built. - update to 1.14.6: * Fix an incorrect assertion that could be used to crash dbus-daemon or other users of DBusServer prior to authentication, if libdbus was compiled with assertions enabled. We recommend that production builds of dbus, for example in OS distributions, should be compiled with checks but without assertions. * When connected to a dbus-broker, stop dbus-monitor from incorrectly replying to Peer method calls that were sent to the dbus-broker with a NULL destination * Fix out-of-bounds varargs read in the dbus-daemon's config- parser. This is not attacker-triggerable and appears to be harmless in practice, but is technically undefined behaviour and is detected as such by AddressSanitizer. * Avoid a data race in multi-threaded use of DBusCounter * Fix a crash with some glibc versions when non-auditable SELinux events are logged (dbus!386, Jeremi Piotrowski) * If dbus_message_demarshal() runs out of memory while validating a message, report it as NoMemory rather than InvalidArgs (dbus#420, Simon McVittie) * Use C11 _Alignof if available, for better standards- compliance * Stop including an outdated copy of pkg.m4 in the git tree * Documentation: * Fix the test-apparmor-activation test after dbus#416 * Internal changes: * Fix CI builds with recent git versions (dbus#447, Simon McVittie) - switch to using multibuild ==== evolution-data-server ==== Version update (3.46.3 -> 3.46.4) Subpackages: evolution-data-server-lang libcamel-1_2-64 libebackend-1_2-11 libebook-1_2-21 libebook-contacts-1_2-4 libecal-2_0-2 libedata-book-1_2-27 libedata-cal-2_0-2 libedataserver-1_2-27 libedataserverui-1_2-4 - Update to version 3.46.4: + Parse URI strings into GUri in a relaxed mode + IMAPx: Folder refresh could remove new message from local summary + Bugs fixed: - libedataserverui4: (almost) empty GIR/VAPI file - IMAP: Inbox hidden in offline with "Show only subscribed folders" - Google Task modification not synced - CalDAV: Can fail to refresh content in some cases + Updated translations. ==== fuse3 ==== Version update (3.13.0 -> 3.13.1) Subpackages: libfuse3-3 - Update to release 3.13.1 * Fixed an issue that resulted in errors when attempting to compile against installed libfuse headers (because libc symbol versioning support was not detected correctly in this case). - Add 0001-Split-config.h-into-private-and-public-config.patch to fix doubly-defined macros and build failure elsewhere. ==== gnome-software ==== Version update (43.3 -> 43.4) Subpackages: gnome-software-lang gnome-software-plugin-packagekit - Update to version 43.4: + Stop cancelled search in appstream data early. + Lookup for appstream-provided icons in more directories. ==== lapack ==== Subpackages: libblas3 libcblas3 liblapack3 - Fix missing symbols for deprecated functions in LAPACK, add Restore_missing_deprecated_prototypes.patch - Add -Wl,--no-undefined when creating shared libraries, to catch missing symbols during build - Test fixes: * Build test binaries during %build, run in %check * Fix incorrect path for test output, to actually catch any test failures - Spec file cleanup: * Do not rename blaslib, it is used for test binaries * Use same commands for building lapacke as for other libs * Remove unused FFLAGS_NOOP for test binaries - Remove unneeded links. These will be taken care of by the update-alternatives. This will bring this package in sync with openblas. - Build deprecated functions again to avoid breaking the ABI. (boo#1207989) - Make library links in the alternatives directory arch dependent. This avoids conflicts when both 32-bit and 64-bit versions are installed (boo#1207563). ==== libjxl ==== - build glibc hwcaps optimized overlay ==== ncurses ==== Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Fix use of run_cmd.sh ==== openblas_pthreads ==== - Do not set LIBNAMESUFFIX to mark different flavors as this causes the SONAME to be different so that different flavors of OpenBLAS cannot serve as plugin replacements of each other (boo#1177260). - Fix a fallout of making alternatives directory arch dependent. - Remove unneeded links that will be created by update-alternatives. Create remaining links %post scripts properly %ghost-ing the files. - Make library links in the alternatives directory arch dependent. This avoids conflicts when both 32-bit and 64-bit versions are installed (boo#1207563). ==== python-alembic ==== Version update (1.9.2 -> 1.9.3) - update to 1.9.3: * Fixed issue where rendering of user-defined types that then went onto use the .with_variant() method would fail to render, if using SQLAlchemy 2.0's version of variants. ==== wicked ==== Subpackages: wicked-service - bond: workaround 6.1 kernel enslave regression (boo#1206674) The kernel bond enslave rtnetlink message processing changed breaking an `ip link set down master bond0 dev eth0` like enslave which worked with all kernels from 4.12 up to 6.0. [+ 0001-bond-workaround-6.1-enslave-regression-boo-1206674.patch] ==== yast2-network ==== Version update (4.5.15 -> 4.5.16) - Fix calling method read on nil crash in bootloader caused by not restoring SCR chroot in save_network client when running in autoyast (bsc#1207968) - 4.5.16

1 0

New MicroOS snapshot 20230210 released!
by Richard Brown 11 Feb '23

11 Feb '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: Mesa (22.3.4 -> 22.3.5) Mesa-drivers (22.3.4 -> 22.3.5) grub2 installation-images-MicroOS (17.74 -> 17.75) libdrm (2.4.114 -> 2.4.115) python-Beaker (1.12.0 -> 1.12.1) python-cryptography (39.0.0 -> 39.0.1) xdg-user-dirs yast2-bootloader (4.5.7 -> 4.5.8) === Details === ==== Mesa ==== Version update (22.3.4 -> 22.3.5) Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - Update to version 22.3.5 * bug fix release which fixes bugs found since Mesa 22.3.4 * see https://docs.mesa3d.org/relnotes/22.3.5.html for more details - refreshed u_dep_xcb.patch ==== Mesa-drivers ==== Version update (22.3.4 -> 22.3.5) Subpackages: Mesa-dri Mesa-gallium Mesa-libva - Update to version 22.3.5 * bug fix release which fixes bugs found since Mesa 22.3.4 * see https://docs.mesa3d.org/relnotes/22.3.5.html for more details - refreshed u_dep_xcb.patch ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi - Amend the TPM2 stack and add authorized policy mode to tpm2_key_protector * 0001-tpm2-adjust-the-input-parameters-of-TPM2_EvictContro.patch * 0002-tpm2-declare-the-input-arguments-of-TPM2-functions-a.patch * 0003-tpm2-resend-the-command-on-TPM_RC_RETRY.patch * 0004-tpm2-add-new-TPM2-types-structures-and-command-const.patch * 0005-tpm2-add-more-marshal-unmarshal-functions.patch * 0006-tpm2-check-the-command-parameters-of-TPM2-commands.patch * 0007-tpm2-pack-the-missing-authorization-command-for-TPM2.patch * 0008-tpm2-allow-some-command-parameters-to-be-NULL.patch * 0009-tpm2-remove-the-unnecessary-variables.patch * 0010-tpm2-add-TPM2-commands-to-support-authorized-policy.patch * 0011-tpm2-make-the-file-reading-unmarshal-functions-gener.patch * 0012-tpm2-initialize-the-PCR-selection-list-early.patch * 0013-tpm2-support-unsealing-key-with-authorized-policy.patch ==== installation-images-MicroOS ==== Version update (17.74 -> 17.75) - merge gh#openSUSE/installation-images#627 - make /var/lib/chrony writable (bsc#1207374) - 17.75 ==== libdrm ==== Version update (2.4.114 -> 2.4.115) Subpackages: libdrm2 libdrm_amdgpu1 libdrm_intel1 libdrm_nouveau2 libdrm_radeon1 - Update to 2.4.115 * mdgpu: add marketing names from amd-5.4 (22.40) * amdgpu: add some additional marketing names * tests/amdgpu: use AMDGPU_TIMEOUT_INFINITE to query fence * intel: Eliminate need to keep adding PCI IDs * drm_fourcc: sync drm_fourcc with latest drm-next kernel * xf86drm: Add support for decoding Vivante format modifiers * tests/amdgpu/jpeg: enable unit test for jpeg 4 * xf86drm: fix warning in drmGetFormatModifierNameFromVivante() * xf86drm: add support for printing AMD GFX11 modifiers ==== python-Beaker ==== Version update (1.12.0 -> 1.12.1) - update to 1.12.1: * Fix ext:database backend failing to initialize * Improved inline code documentation for the crypto module ==== python-cryptography ==== Version update (39.0.0 -> 39.0.1) - Update to 39.0.1: * SECURITY ISSUE - Fixed a bug where Cipher.update_into accepted Python buffer protocol objects, but allowed immutable buffers. CVE-2023-23931 * Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.0.8. ==== xdg-user-dirs ==== Subpackages: xdg-user-dirs-lang - Add patch to provide a systemd user service (gh#systemd/systemd#18791, boo#1201728): * 0001-Add-a-systemd-service-to-run-xdg-user-dirs-update.patch ==== yast2-bootloader ==== Version update (4.5.7 -> 4.5.8) - make secure boot for ppc64 consistent with how secure boot works on other architectures (bsc#1206295) - 4.5.8

1 0

New MicroOS snapshot 20230209 released!
by Richard Brown 10 Feb '23

10 Feb '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: AppStream (0.15.6 -> 0.16.0) flatpak (1.14.1 -> 1.14.2) glibc (2.36 -> 2.37) gstreamer installation-images-MicroOS (17.70 -> 17.74) less libjaylink (0.2.0 -> 0.3.1) libmspack (0.10.1 -> 0.11) libstorage-ng (4.5.71 -> 4.5.73) patterns-microos python-Twisted transactional-update (4.1.2 -> 4.1.3) yast2-packager (4.5.13 -> 4.5.14) === Details === ==== AppStream ==== Version update (0.15.6 -> 0.16.0) Subpackages: AppStream-lang libAppStreamQt2 libappstream4 - Update to version 0.16.0: * Features: + pool: Offer API to look up components by bundles + Bump format version to 0.16 + Add new AsSystemInfo to read information about the current OS and device + Add helper to get device names from a modalias + Implement support for external release metadata + Add validation support for external release metadata + compose: Validate external release metadata used for the catalog as well + its: Add rule for standalone release metadata + Add function to test if an AsRelation is satisfied on the current system + cli: Add command to list category contents + cli: Display colored checkmarks if possible + cli: Add new is-satisfied check to test relations from the command-line + cli: Add Markdown export support for metainfo-to-news + qt: Add support for SystemInfo & relation satisfication checks * Specification: + spec: Specify a metadata format for external release descriptions * Bugfixes: + Fix build with Clang 15 + Give a better error message if trying to list too many categories + Adjust documentation of AsPool.get_components_by_categories to reflect reality + validator: Validate merge component catalog data properly again * Miscellaneous: + Consistently name catalog metadata as such everywhere - Update support-meson0.59.patch for latest version of AppStream - Build AppStream with compose support as a separate package. - Use %ldconfig_scriptlets. Leap 15.3 is out of maintenance. ==== flatpak ==== Version update (1.14.1 -> 1.14.2) Subpackages: flatpak-remote-flathub libflatpak0 system-user-flatpak - Update to version 1.14.2: + The INFO log level is now treated the same as the DEBUG log level by flatpak -v, to make backports from 1.15.x simpler. + Bug fixes: - Display the intended messages for flatpak repair. - Exporting an app to an existing repository on a CIFS filesystem now works as intended. - Unset $GIO_EXTRA_MODULES for apps, avoiding misbehaviour in some GLib apps when set to a path on the host. - Unset $XKB_CONFIG_ROOT for apps, avoiding crashes in GTK and Qt apps under Wayland when this variable is set to a path not available in the sandbox. - Unset $KRB5CCNAME for apps. - When using the fish shell, avoid duplicate XDG_DATA_DIRS entries if the profile script is sourced more than once. - Package flatpak-remote-flathub sub-package as noarch. ==== glibc ==== Version update (2.36 -> 2.37) Subpackages: glibc-extra glibc-lang glibc-locale glibc-locale-base nscd - Update to glibc 2.37 * The getent tool now supports the --no-addrconfig option * The dynamic linker no longer loads shared objects from the "tls" subdirectories on the library search path or the subdirectory that corresponds to the AT_PLATFORM system name, or employs the legacy AT_HWCAP search mechanism, which was deprecated in version 2.33 - printf-grouping.patch: Account for grouping in printf width (BZ #30068) - strftime-time64.patch: Use 64-bit time_t interfaces in strftime and strptime (BZ #30053) - glibcextract-compile-c-snippet.patch, sys-mount-kernel-definition.patch, sys-mount-usage.patch, nscd-netlink-cache-invalidation.patch, syslog-large-messages.patch, dlmopen-libc-early-init.patch, ldd-vdso-dependency.patch, syslog-extra-whitespace.patch, errlist-edeadlock.patch, makeflags.patch, get-nscd-addresses.patch, x86-64-avx2-string-functions.patch, nscd-aicache.patch, dl-debug-bindings.patch, floatn.patch: Removed - Remove reference to obsolete %usrmerged macro (boo#1206798) ==== gstreamer ==== Subpackages: gstreamer-lang libgstreamer-1_0-0 typelib-1_0-Gst-1_0 - Add fix using sed to find gst-plugin-scanner-%{_target_cpu} program (boo#1207908). ==== installation-images-MicroOS ==== Version update (17.70 -> 17.74) - merge gh#openSUSE/installation-images#626 - use grub2-i386-efi package on x86_64 (bsc#1208057) - 17.74 - merge gh#openSUSE/installation-images#625 - move open-iscsi into initrd to ensure config files are writable (bsc#1207374) - 17.73 - merge gh#openSUSE/installation-images#624 - fix grub2-i386-efi inclusion - 17.72 - merge gh#openSUSE/installation-images#623 - support 32-bit UEFI firmware on x86_64/i386 (bsc#1208003, jsc#PED-2569) - 17.71 ==== less ==== - Apply "cve-2022-46663.patch" to fix a vulnerability in less that could be exploited for denial-of-service attacks or even remote code execution by printing specially crafted escape sequences to the terminal. [CVE-2022-46663, bsc#1207815] - Refreshed all other patches with quilt to an uniform -p1 patch style, which allows us to use %autosetup and simplify the spec file a bit. ==== libjaylink ==== Version update (0.2.0 -> 0.3.1) Subpackages: libjaylink0 - Update to version 0.3.1 * Fix building with Autoconf < 2.7 - version 0.3.0 * New package version scheme * New supported target interfaces: - Silicon Labs 2-wire interface (C2) - Serial peripheral interface (SPI) - Compact JTAG (cJTAG) * Add support for querying USB voltage * jtag: Add functions to set/clear the TCK and TMS signals * New string utility functions: - jaylink_target_interface_string() - jaylink_hardware_type_string() * transport/tcp: Implement connection timeout ==== libmspack ==== Version update (0.10.1 -> 0.11) - Update to version 0.11: * see https://github.com/kyz/libmspack/blob/master/libmspack/ChangeLog for a full changelog ==== libstorage-ng ==== Version update (4.5.71 -> 4.5.73) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - Translated using Weblate (French) (bsc#1149754) - 4.5.73 ==== patterns-microos ==== Subpackages: patterns-microos-alt_onlyDVD patterns-microos-apparmor patterns-microos-base patterns-microos-base-microdnf patterns-microos-base-packagekit patterns-microos-base-zypper patterns-microos-basesystem patterns-microos-cloud patterns-microos-cockpit patterns-microos-defaults patterns-microos-desktop-common patterns-microos-desktop-gnome patterns-microos-desktop-kde patterns-microos-hardware patterns-microos-ima_evm patterns-microos-onlyDVD patterns-microos-ra_agent patterns-microos-ra_verifier patterns-microos-selinux patterns-microos-sssd_ldap - Comment out gtk4-metatheme-breeze until Plasma 5.27 - Add the folowing packages for Plasma Desktop pattern - Add spectacle - Add plasma5-desktop-emojier and google-noto-coloremoji-fonts - Add gtk2-metatheme-breeze, gtk3-metatheme-breeze and gtk4-metatheme-breeze - Add oxygen5-sounds - Add plasma5-systemmonitor - Add libqt5-qtimageformats, kdegraphics-thumbnailers and ffmpegthumbs (for thumbnails) - Add kcm_sddm - Remove gnome-usage (obsolete upstream), restore gnome-system-monitor for GNOME Desktop (boo#1205108) ==== python-Twisted ==== Subpackages: python310-Twisted python310-Twisted-tls - Add patch support-new-glibc.patch: * Support new glibc changes. ==== transactional-update ==== Version update (4.1.2 -> 4.1.3) Subpackages: dracut-transactional-update libtukit4 transactional-update-zypp-config tukit - Version 4.1.3 - Suppress SELinux relabelling output in quiet mode - Documentation readability improvements ==== yast2-packager ==== Version update (4.5.13 -> 4.5.14) - Prevent crash if nil dependencies instead of [] (bsc#1208068) - 4.5.14

1 0

New MicroOS snapshot 20230208 released!
by Richard Brown 09 Feb '23

09 Feb '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ImageMagick (7.1.0.60 -> 7.1.0.61) grub2 hwdata (0.366 -> 0.367) libstorage-ng (4.5.69 -> 4.5.71) ncurses (6.4.20230121 -> 6.4.20230128) texinfo (7.0.1 -> 7.0.2) xorg-x11-server (21.1.6 -> 21.1.7) xwayland (22.1.7 -> 22.1.8) === Details === ==== ImageMagick ==== Version update (7.1.0.60 -> 7.1.0.61) Subpackages: ImageMagick-config-7-SUSE libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - version update to 7.1.0.61 * https://github.com/ImageMagick/Website/blob/main/ChangeLog.md ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi - Fix nvmf boot device setup (bsc#1207811) * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch - Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064) * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch - Fix GCC 13 build failure (bsc#1201089) * 0002-AUDIT-0-http-boot-tracker-bug.patch ==== hwdata ==== Version update (0.366 -> 0.367) - update to 0.367: * Update pci, usb and vendor ids ==== libstorage-ng ==== Version update (4.5.69 -> 4.5.71) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - Translated using Weblate (Chinese (Taiwan) (zh_TW)) (bsc#1149754) - 4.5.71 - Translated using Weblate (Chinese (China) (zh_CN)) (bsc#1149754) - 4.5.70 - Translated using Weblate (Italian) (bsc#1149754) ==== ncurses ==== Version update (6.4.20230121 -> 6.4.20230128) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch 20230128 + document XF, kxIN and kxOUT -TD + add note on sun/wscons/cmdtool/shelltool -TD + modify configure script check for pkg-config library directory to take into account an older version 0.15.0 which used PKG_CONFIG_PATH but not PKG_CONFIG_LIBDIR - Correct offsets of patches * ncurses-5.9-ibm327x.dif * ncurses-6.4.dif ==== texinfo ==== Version update (7.0.1 -> 7.0.2) Subpackages: info info-lang info-std - texinfo 7.0.2: * texi2any: do not distribute architecture-dependent files * info: further fix of recoding of UTF-8 files to ASCII * install-info: build fixes ==== xorg-x11-server ==== Version update (21.1.6 -> 21.1.7) Subpackages: xorg-x11-server-Xvfb xorg-x11-server-extra - Update to version xorg-server-21.1.7: * This release contains the fix for CVE-2023-0494 in today's security advisory: https://lists.x.org/archives/xorg-announce/2023-February/003320.html It also fixes a second possible OOB access during EnqueueEvent and a crasher caused by ResourceClientBits not correctly honouring the MaxClients value in the configuration file. - supersedes U_Xi-fix-potential-use-after-free-in-DeepCopyPointerCl.patch, U_xorg-server-oob-read-enqueue-event.patch - U_Xi-fix-potential-use-after-free-in-DeepCopyPointerCl.patch * DeepCopyPointerClasses use-after-free (CVE-2023-0494, ZDI-CAN-19596, bsc#1207783) ==== xwayland ==== Version update (22.1.7 -> 22.1.8) - Update to version 22.1.8 * This release contains the fix for CVE-2023-0494 in today's security advisory: https://lists.x.org/archives/xorg-announce/2023-February/003320.html * It also fixes a second possible OOB access during EnqueueEvent. - supersedes U_Xi-fix-potential-use-after-free-in-DeepCopyPointerCl.patch - improved summary and description - added requires to xkeyboard-config - added recommends to xorg-x11-fonts-core - removed unused 'package' section - U_Xi-fix-potential-use-after-free-in-DeepCopyPointerCl.patch * DeepCopyPointerClasses use-after-free (CVE-2023-0494, ZDI-CAN-19596, bsc#1207783)

1 0

New MicroOS snapshot 20230207 released!
by Richard Brown 08 Feb '23

08 Feb '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: Mesa Mesa-drivers apparmor cabextract (1.9.1 -> 1.10) dnsmasq (2.88 -> 2.89) gstreamer-plugins-bad harfbuzz java-19-openjdk (19.0.1.0 -> 19.0.2.0) kernel-firmware (20230110 -> 20230125) kernel-source (6.1.8 -> 6.1.10) libapparmor libjxl (0.8.0 -> 0.8.1) libopenmpt (0.6.7 -> 0.6.8) libreoffice libxml2 lmdb nfs-utils pulseaudio re2 (20221201 -> 20230201) setools (4.4.0 -> 4.4.1) snapper sssd webkit2gtk3 (2.38.3 -> 2.38.4) webkit2gtk4 (2.38.3 -> 2.38.4) xkeyboard-config (2.37 -> 2.38) yast2-trans (84.87.20230130.b344a57eef -> 84.87.20230202.68f7d5c2e4) === Details === ==== Mesa ==== Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - Don't enable rusticl without opencl ==== Mesa-drivers ==== Subpackages: Mesa-dri Mesa-gallium Mesa-libva - Don't enable rusticl without opencl ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-parser apparmor-parser-lang apparmor-profiles apparmor-utils apparmor-utils-lang python3-apparmor - add abstractions-openssl-1_1.diff: allow to read /etc/ssl/openssl-1_1.cnf in abstractions/openssl (boo#1207911) ==== cabextract ==== Version update (1.9.1 -> 1.10) - Update to version 1.10 * Multiple -F filters can be given. cabextract will extract files matching any of the filters. * cabextract now overwrites symlinks by default. This is to be consistent with other archive tools. Use the new -k option for the old behaviour of keeping symlinks. This does not affect symlinks in the -d dirpath option. * New -n option to never overwrite files. * New -i option to interactively prompt if you want to overwrite files. ==== dnsmasq ==== Version update (2.88 -> 2.89) - update to 2.89: * Fix bug introduced in 2.88 (commit fe91134b) which can result in corruption of the DNS cache internal data structures and logging of "cache internal error". This has only been seen in one place in the wild, and it took considerable effort to even generate a test case to reproduce it, but there's no way to be sure it won't strike, and the effect is to break the cache badly. Installations with DNSSEC enabled are more likely to see the problem, but not running DNSSEC does not guarantee that it won't happen. Thanks to Timo van Roermund for reporting the bug and for his great efforts in chasing it down. - remove no longer needed rpmlintrc filters ==== gstreamer-plugins-bad ==== Subpackages: gstreamer-plugins-bad-lang libgstadaptivedemux-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstcuda-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstphotography-1_0-0 libgstplay-1_0-0 libgstplayer-1_0-0 libgstsctp-1_0-0 libgsturidownloader-1_0-0 libgstva-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 libgstwebrtcnice-1_0-0 - Enable zxing again, now that the updated version have landed. ==== harfbuzz ==== Subpackages: libharfbuzz-gobject0 libharfbuzz-icu0 libharfbuzz-subset0 libharfbuzz0 typelib-1_0-HarfBuzz-0_0 - Add harfbuzz-CVE-2023-25193.patch: limit how far we skip when looking back (boo#1207922 CVE-2023-25193). ==== java-19-openjdk ==== Version update (19.0.1.0 -> 19.0.2.0) Subpackages: java-19-openjdk-headless - Upgrade to upstream tag jdk-19.0.2+7 (January 2023 CPU) * CVEs + CVE-2023-21835, bsc#1207246 + CVE-2023-21843, bsc#1207248 * Security fixes + JDK-8286070: Improve UTF8 representation + JDK-8286496: Improve Thread labels + JDK-8287411: Enhance DTLS performance + JDK-8288516: Enhance font creation + JDK-8293554: Enhanced DH Key Exchanges + JDK-8293598: Enhance InetAddress address handling + JDK-8293717: Objective view of ObjectView + JDK-8293734: Improve BMP image handling + JDK-8293742: Better Banking of Sounds + JDK-8295687: Better BMP bounds * Other changes + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/ /OnScreenRenderingResizeTest.java fails + JDK-8029633: Raw inner class constructor ref should not perform diamond inference + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java failed with timeout + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/ /NoInvalidateSocketException.java fails with "tag mismatch" + JDK-8279941: sun/security/pkcs11/Signature/ /TestDSAKeyLength.java fails when NSS version detection fails + JDK-8285604: closed sun/java2d/GdiRendering/ /ClipShapeRendering.java failed with "Incorrect color ffeeeeee instead of ff0000ff in pixel (100, 100)" + JDK-8285835: SIGSEGV in PhaseIdealLoop::build_loop_late_post_work + JDK-8286314: Trampoline not created for far runtime targets outside small CodeCache + JDK-8286624: Regression Test CoordinateTruncationBug.java fails on OL8.3 + JDK-8287217: C2: PhaseCCP: remove not visited nodes, prevent type inconsistency + JDK-8288132: Update test artifacts in QuoVadis CA interop tests + JDK-8288377: [REDO] DST not applying properly with zone id offset set with TZ env variable + JDK-8288992: AArch64: CMN should be handled the same way as CMP + JDK-8290164: compiler/runtime/TestConstantsInError.java fails on riscv + JDK-8290246: test fails "assert(init != __null) failed: initialization not found" + JDK-8290451: Incorrect result when switching to C2 OSR compilation from C1 + JDK-8290496: riscv: Fix build warnings-as-errors with GCC 11 + JDK-8290529: C2: assert(BoolTest(btest).is_canonical()) failure + JDK-8290694: Update the release date after forking Oct CPU22_10 + JDK-8290705: StringConcat::validate_mem_flow asserts with "unexpected user: StoreI" + JDK-8290711: assert(false) failed: infinite loop in PhaseIterGVN::optimize + JDK-8290781: Segfault at PhaseIdealLoop::clone_loop_handle_data_uses + JDK-8290900: Build failure with Clang 14+ due to function warning attribute + JDK-8290964: C2 compilation fails with assert "non-reduction loop contains reduction nodes" + JDK-8290974: Bump version numbers for January 2023 CPU + JDK-8291508: Fix some tests with "requires vm.jvmti & vm.continuations" + JDK-8291599: Assertion in PhaseIdealLoop::skeleton_predicate_has_opaque after JDK-8289127 + JDK-8291633: Build failures with GCC 11, Alpine 3 due to incompatible casts from nullptr + JDK-8291775: C2: assert(r != __null && r->is_Region()) failed: this phi must have a region + JDK-8292158: AES-CTR cipher state corruption with AVX-512 + JDK-8292159: TYPE_USE annotations on generic type arguments of record components discarded + JDK-8292385: assert(ctrl == kit.control()) failed: Control flow was added although the intrinsic bailed out + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not work with signal chaining library + JDK-8292756: java.lang.AssertionError at at jdk.compiler/ /com.sun.tools.javac.code.Scope$ScopeImpl.leave(Scope.java:386) + JDK-8292780: misc tests failed "assert(false) failed: graph should be schedulable" + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX platform + JDK-8292969: Bad Thread Utilization in ForkJoinPool + JDK-8293044: C1: Missing access check on non-accessible class + JDK-8293100: RISC-V: Need to save and restore callee-saved FloatRegisters in StubGenerator::generate_call_stub + JDK-8293348: A false cyclic inheritance error reported + JDK-8293578: Duplicate ldc generated by javac + JDK-8293701: jdeps InverseDepsAnalyzer runs into NoSuchElementException: No value present + JDK-8293816: CI: ciBytecodeStream::get_klass() is not consistent + JDK-8293834: Update CLDR data following tzdata 2022c update + JDK-8293996: C2: fix and simplify ... changelog too long, skipping 62 lines ... + folded into fips.patch ==== kernel-firmware ==== Version update (20230110 -> 20230125) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network ucode-amd - Update to version 20230125 (git commit 5c11a3742947): (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171) * amdgpu: Add VCN 4.0.2 firmware * amdgpu: Add PSP 13.0.4 firmware * amdgpu: Add SDMA 6.0.1 fimware * amdgpu: Add GC 11.0.1 firmware * amdgpu: Add DCN 3.1.4 firmware * iwlwifi: remove old intermediate 5.15+ firmwares * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares * iwlwifi: remove old unsupported older than 4.14 LTS * linux-firmware: update firmware for MT7921 WiFi device * linux-firmware: update firmware for mediatek bluetooth chip (MT7921) * amdgpu: update vangogh firmware * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth AX211 * linux-firmware: Update firmware file for Intel Bluetooth AX211 * linux-firmware: Update firmware file for Intel Bluetooth AX210 * linux-firmware: Update firmware file for Intel Bluetooth AX200 * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth 9560 * linux-firmware: Update firmware file for Intel Bluetooth 9260 * brcm: add configuration files for CyberTan WC121 * qcom: add firmware files for Adreno A200 * rtw89: 8852c: update fw to v0.27.56.10 * QCA: Add Bluetooth firmware for QCA2066 ==== kernel-source ==== Version update (6.1.8 -> 6.1.10) - Linux 6.1.10 (bsc#1012628). - net: mctp: purge receive queues on sk destruction (bsc#1012628). - rust: print: avoid evaluating arguments in `pr_*` macros in `unsafe` blocks (bsc#1012628). - net: fix NULL pointer in skb_segment_list (bsc#1012628). - gpiolib-acpi: Don't set GPIOs for wakeup in S3 mode (bsc#1012628). - gpiolib: acpi: Add a ignore wakeup quirk for Clevo NL5xRU (bsc#1012628). - nvme-apple: only reset the controller when RTKit is running (bsc#1012628). - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (bsc#1012628). - gpiolib: acpi: Allow ignoring wake capability on pins that aren't in _AEI (bsc#1012628). - dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init (bsc#1012628). - HID: playstation: sanity check DualSense calibration data (bsc#1012628). - HID: uclogic: Add support for XP-PEN Deco 01 V2 (bsc#1012628). - s390: workaround invalid gcc-11 out of bounds read warning (bsc#1012628). - block: fix hctx checks for batch allocation (bsc#1012628). - ACPI: video: Add backlight=native DMI quirk for Acer Aspire 4810T (bsc#1012628). - LoongArch: Get frame info in unwind_start() when regs is not available (bsc#1012628). - blk-cgroup: fix missing pd_online_fn() while activating policy (bsc#1012628). - erofs: clean up parsing of fscache related options (bsc#1012628). - kselftest: Fix error message for unconfigured LLVM builds (bsc#1012628). - ARM: omap1: fix building gpio15xx (bsc#1012628). - arm64: dts: msm8994-angler: fix the memory map (bsc#1012628). - mac80211: Fix MLO address translation for multiple bss case (bsc#1012628). - erofs/zmap.c: Fix incorrect offset calculation (bsc#1012628). - bpf: Skip task with pid=1 in send_signal_common() (bsc#1012628). - firmware: arm_scmi: Clear stale xfer->hdr.status (bsc#1012628). - arm64: dts: imx8mq-thor96: fix no-mmc property for SDHCI (bsc#1012628). - arm64: dts: freescale: Fix pca954x i2c-mux node names (bsc#1012628). - ARM: dts: vf610: Fix pca9548 i2c-mux node names (bsc#1012628). - ARM: dts: imx: Fix pca9547 i2c-mux node name (bsc#1012628). - commit 2a0570b - Linux 6.1.9 (bsc#1012628). - memory: tegra: Remove clients SID override programming (bsc#1012628). - memory: atmel-sdramc: Fix missing clk_disable_unprepare in atmel_ramc_probe() (bsc#1012628). - memory: mvebu-devbus: Fix missing clk_disable_unprepare in mvebu_devbus_probe() (bsc#1012628). - arm64: dts: qcom: sc8280xp: fix primary USB-DP PHY reset (bsc#1012628). - dmaengine: qcom: gpi: Set link_rx bit on GO TRE for rx operation (bsc#1012628). - dmaengine: ti: k3-udma: Do conditional decrement of UDMA_CHAN_RT_PEER_BCNT_REG (bsc#1012628). - soc: imx: imx8mp-blk-ctrl: enable global pixclk with HDMI_TX_PHY PD (bsc#1012628). - arm64: dts: imx8mp-phycore-som: Remove invalid PMIC property (bsc#1012628). - ARM: dts: imx6ul-pico-dwarf: Use 'clock-frequency' (bsc#1012628). - ARM: dts: imx7d-pico: Use 'clock-frequency' (bsc#1012628). - ARM: dts: imx6qdl-gw560x: Remove incorrect 'uart-has-rtscts' (bsc#1012628). - arm64: dts: verdin-imx8mm: fix dahlia audio playback (bsc#1012628). - arm64: dts: imx8mm-beacon: Fix ecspi2 pinmux (bsc#1012628). - arm64: dts: verdin-imx8mm: fix dev board audio playback (bsc#1012628). - arm64: dts: imx93-11x11-evk: correct clock and strobe pad setting (bsc#1012628). - ARM: imx: add missing of_node_put() (bsc#1012628). - soc: imx: imx8mp-blk-ctrl: don't set power device name (bsc#1012628). - arm64: dts: imx8mp: Fix missing GPC Interrupt (bsc#1012628). - arm64: dts: imx8mp: Fix power-domain typo (bsc#1012628). - arm64: dts: imx8mp-evk: pcie0-refclk cosmetic cleanup (bsc#1012628). - HID: intel_ish-hid: Add check for ishtp_dma_tx_map (bsc#1012628). - arm64: dts: imx8mm-venice-gw7901: fix USB2 controller OC polarity (bsc#1012628). - soc: imx8m: Fix incorrect check for of_clk_get_by_name() (bsc#1012628). - reset: ti-sci: honor TI_SCI_PROTOCOL setting when not COMPILE_TEST (bsc#1012628). - reset: uniphier-glue: Fix possible null-ptr-deref (bsc#1012628). - EDAC/highbank: Fix memory leak in highbank_mc_probe() (bsc#1012628). - firmware: arm_scmi: Harden shared memory access in fetch_response (bsc#1012628). - firmware: arm_scmi: Harden shared memory access in fetch_notification (bsc#1012628). - firmware: arm_scmi: Fix virtio channels cleanup on shutdown ... changelog too long, skipping 467 lines ... - commit e426c74 ==== libapparmor ==== - add abstractions-openssl-1_1.diff: allow to read /etc/ssl/openssl-1_1.cnf in abstractions/openssl (boo#1207911) ==== libjxl ==== Version update (0.8.0 -> 0.8.1) - Update to release 0.8.1 * Allow fast-lossless for 16-bit float input * Fix OOB read in exif.h ==== libopenmpt ==== Version update (0.6.7 -> 0.6.8) - update to 0.6.8: * [Bug] DSYM: Loading DSYM files got broken in 0.6.7. * When seeking around in a module, the tempo was sometimes incorrectly limited to 255 BPM * Initial instrument cutoff was broken for OPL instruments in libopenmnpt 0.6.7 * mpg123: Update to v1.31.2 ==== libreoffice ==== Subpackages: libreoffice-base libreoffice-branding-upstream libreoffice-calc libreoffice-draw libreoffice-filters-optional libreoffice-gnome libreoffice-gtk3 libreoffice-icon-themes libreoffice-impress libreoffice-l10n-cs libreoffice-l10n-da libreoffice-l10n-de libreoffice-l10n-el libreoffice-l10n-en libreoffice-l10n-en_GB libreoffice-l10n-es libreoffice-l10n-fr libreoffice-l10n-hu libreoffice-l10n-it libreoffice-l10n-ja libreoffice-l10n-pl libreoffice-l10n-pt_BR libreoffice-l10n-ru libreoffice-l10n-zh_CN libreoffice-l10n-zh_TW libreoffice-mailmerge libreoffice-math libreoffice-pyuno libreoffice-qt5 libreoffice-writer libreofficekit - Update _constraints to match current requirements - riscv64-support.patch: Add backport of riscv64 support - No gold on riscv64 ==== libxml2 ==== Subpackages: libxml2-2 libxml2-tools - remove zlib-devel, pkgconfig(zlib) is sufficient ==== lmdb ==== - update to 0.9.29: * lmdump is not creating lock files ==== nfs-utils ==== Subpackages: libnfsidmap1 nfs-client - Rename all drop-in options.conf files as 10-options.conf This makes it easier for other packages to over-ride with a drop-in with a later sequence number. resource-agents does this. (bsc#1207843) ==== pulseaudio ==== Subpackages: libpulse-mainloop-glib0 libpulse0 pulseaudio-setup pulseaudio-utils system-user-pulse - Move dbus-1 system.d file to /usr (bsc#1207584) ==== re2 ==== Version update (20221201 -> 20230201) - update to 2023-02-01: * improved support for ICU - build with ICU ==== setools ==== Version update (4.4.0 -> 4.4.1) - Update to version 4.4.1: * Replace deprecated NetworkX function use in information flow and domain transition analysis. This function was removed in NetworkX 3.0. * Fix bug in apol copy and cut functions when copying from a tree view. * Fix bug with extended permission set construction when a range includes 0x0. * Add sesearch -Sp option for permission subset match. * Fix error in man page description for sesearch -ep option. * Improve output stability in constraint, common, class, role, and user queries. * Updated permission map. * Fix bug in sechecker parsing of multiline values. * Other code cleanups not visible to users. ==== snapper ==== Subpackages: libsnapper6 snapper-zypp-plugin - fix use of does_subvolume_exist() (bsc#1207901) - suppress debug logging in zypp-plugin per default - enable SELinux on Fedora and RHEL (gh#openSUSE/snapper#772) - Use libbtrfsutil implementation for BtrfsUtil::get_subvolume - Add build support for libbtrfsutil - Use libbtrfsutil implementation for the following methods: - check if a subvolume exists - create subvolume, snapshot - subvolume read-only check - delete subvolume - set/get default subvolume - filesystem sync ==== sssd ==== Subpackages: libsss_certmap0 libsss_idmap0 libsss_nss_idmap0 sssd-krb5-common sssd-ldap - Move dbus-1 system.d file to /usr (bsc#1207586) ==== webkit2gtk3 ==== Version update (2.38.3 -> 2.38.4) Subpackages: WebKit2GTK-4.1-lang libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles - Update to version 2.38.4: + Improve GStreamer multimedia playback across the board with improved codec selection logic, better handling of latency, and improving frame discard to avoid audio/video desynchronizationg, among other fixes. + Disable HLS media playback by default, which makes web sites use MSE instead. If needed WEBKIT_GST_ENABLE_HLS_SUPPORT=1 can be set in the environment to enable it back. + Disable threaded rendering in GTK4 builds by default, as it was causing crashes. + Fix MediaSession API not showing artwork images. + Fix MediaSession MPRIS usage when running inside a Flatpak sandbox. + Fix input element controls to correctly scale when applying a zoom factor different than the default. + Fix leakage of Web processes in certain situations. + Fix the injected bundle not being found when running inside a sandbox. + Fix the build with ENABLE_INTROSPECTION when cross-compiling. + FIx the build with ENABLE_WEBGL disabled. + Fix the build with GStreamer-based WebRTC enabled. + Fix the build with USE_GTK4 enabled. + Fix several crashes and rendering issues. ==== webkit2gtk4 ==== Version update (2.38.3 -> 2.38.4) Subpackages: WebKit2GTK-5.0-lang libjavascriptcoregtk-5_0-0 libwebkit2gtk-5_0-0 webkit2gtk-5_0-injected-bundles - Update to version 2.38.4: + Improve GStreamer multimedia playback across the board with improved codec selection logic, better handling of latency, and improving frame discard to avoid audio/video desynchronizationg, among other fixes. + Disable HLS media playback by default, which makes web sites use MSE instead. If needed WEBKIT_GST_ENABLE_HLS_SUPPORT=1 can be set in the environment to enable it back. + Disable threaded rendering in GTK4 builds by default, as it was causing crashes. + Fix MediaSession API not showing artwork images. + Fix MediaSession MPRIS usage when running inside a Flatpak sandbox. + Fix input element controls to correctly scale when applying a zoom factor different than the default. + Fix leakage of Web processes in certain situations. + Fix the injected bundle not being found when running inside a sandbox. + Fix the build with ENABLE_INTROSPECTION when cross-compiling. + FIx the build with ENABLE_WEBGL disabled. + Fix the build with GStreamer-based WebRTC enabled. + Fix the build with USE_GTK4 enabled. + Fix several crashes and rendering issues. ==== xkeyboard-config ==== Version update (2.37 -> 2.38) Subpackages: xkeyboard-config-lang - Update to version 2.38 * Add Russian layout with typographic symbols * Update symbols/ru * symbols/us: uncomment the nine keys in the international Dvorak layout * symbols/bg: reduce the "enhanced" layout to an include + three overrides * symbols/epo: reshuffle a comment, and drop unneeded key types * replace some Unicode codes with their corresponding symbol name * symbols/no: add missing symbols to Sami layout, and remove duplicates * symbols/no: add non-dead grave and such to Sami layout, and reshuffle * Add apple:jp_oadg109a and apple:jp_pc106 variants * Added Gujarati KaGaPa layout (guj-kagapa) * Update base.xml * rules: add option 'swap_ralt_rctl' * prerelease push, for translations * Handy script for publishing * Making ru(typo) more consistent with existing variants * Prerelease translation sync * fix rx-51 third level modifier * Add Latvia Modern Cyrillic keyboard layout * add colemak_dh_ortho * Add `trademark` to level4 of us-intl layout * dv-intl: add placeholder chars to lvl3+, bind LSGT ==== yast2-trans ==== Version update (84.87.20230130.b344a57eef -> 84.87.20230202.68f7d5c2e4) Subpackages: yast2-trans-cs yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-fr yast2-trans-hu yast2-trans-it yast2-trans-ja yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ru yast2-trans-zh_CN yast2-trans-zh_TW - Update to version 84.87.20230202.68f7d5c2e4: * Translated using Weblate (Czech) * Translated using Weblate (Czech) * Translated using Weblate (Czech) * Translated using Weblate (Czech) * Translated using Weblate (Georgian) * Translated using Weblate (Portuguese) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Slovak) * Translated using Weblate (Dutch) * Translated using Weblate (Catalan) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Japanese) * New POT for text domain 'samba-client'. * Translated using Weblate (Georgian)

1 0

New MicroOS snapshot 20230205 released!
by Richard Brown 06 Feb '23

06 Feb '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: libstorage-ng (4.5.68 -> 4.5.69) python-dnspython (2.2.1 -> 2.3.0) smartmontools === Details === ==== libstorage-ng ==== Version update (4.5.68 -> 4.5.69) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - Translated using Weblate (Georgian) (bsc#1149754) - 4.5.69 ==== python-dnspython ==== Version update (2.2.1 -> 2.3.0) - Update to version 2.3.0 * The get_soa() method has been added to dns.zone.Zone. * The minimum TLS version is now 1.2. * EDNS padding is now supported. Messages with EDNS enabled and with a non-zero pad option will be automatically padded appropriately when converted to wire format. * dns.zone.from_text() and dns.zone.from_file() now have an allow_directives parameter to allow finer control over how directives in zonefiles are processed. * A preliminary implementation of DNS-over-QUIC has been added, and will be available if the aioquic library is present. See dns.query.quic(), dns.asyncquery.quic(), and examples/doq.py for more info. This API is subject to change in future releases For asynchronous I/O, both asyncio and Trio are supported, but Curio is not. * DNSSEC signing support has been added to the dns.dnssec module, along with a number of functions to help generate DS, CDS, and CDNSKEY RRsets. * Curio asynchronous I/O support is deprecated as of this release and will be removed in a future release. * The resolver objectâs nameserver field is planned to become a property in dnspython 2.4. Writing to this field other than by direct assignment is deprecated, and so is depending on the mutability and form of the iterable returned when it is read. ==== smartmontools ==== - Catch another invalid state in %post: DRIVEDB_H_RELEASE_SAVED might end up empty

1 0

New MicroOS snapshot 20230204 released!
by Richard Brown 05 Feb '23

05 Feb '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: apparmor baloo5-widgets (22.12.1 -> 22.12.2) dolphin (22.12.1 -> 22.12.2) ffmpegthumbs (22.12.1 -> 22.12.2) kaccounts-integration (22.12.1 -> 22.12.2) kaccounts-providers (22.12.1 -> 22.12.2) kate (22.12.1 -> 22.12.2) kde-print-manager (22.12.1 -> 22.12.2) kdegraphics-thumbnailers (22.12.1 -> 22.12.2) kdenetwork-filesharing (22.12.1 -> 22.12.2) kdialog (22.12.1 -> 22.12.2) kexec-tools (2.0.25 -> 2.0.26) keylime (6.5.3 -> 6.6.0) khelpcenter5 (22.12.1 -> 22.12.2) kio-extras5 (22.12.1 -> 22.12.2) konsole (22.12.1 -> 22.12.2) kwalletmanager5 (22.12.1 -> 22.12.2) libapparmor libheif libkdcraw (22.12.1 -> 22.12.2) libkexiv2 (22.12.1 -> 22.12.2) liblqr libstorage-ng (4.5.67 -> 4.5.68) mobipocket (22.12.1 -> 22.12.2) pngquant (2.17.0 -> 2.18.0) postfix python-numpy qalculate (4.5.0 -> 4.5.1) signon-kwallet-extension (22.12.1 -> 22.12.2) sil-charis-fonts (6.101 -> 6.200) suse-module-tools (16.0.28 -> 16.0.29) === Details === ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-parser apparmor-parser-lang apparmor-profiles apparmor-utils apparmor-utils-lang python3-apparmor - add nscd-systemd-userdb.diff: allow nscd to read systemd-userdb (boo#1207698) ==== baloo5-widgets ==== Version update (22.12.1 -> 22.12.2) Subpackages: baloo5-widgets-lang - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== dolphin ==== Version update (22.12.1 -> 22.12.2) Subpackages: dolphin-part dolphin-part-lang libdolphinvcs5 - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== ffmpegthumbs ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kaccounts-integration ==== Version update (22.12.1 -> 22.12.2) Subpackages: kaccounts-integration-lang libkaccounts2 - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kaccounts-providers ==== Version update (22.12.1 -> 22.12.2) Subpackages: kaccounts-providers-lang - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kate ==== Version update (22.12.1 -> 22.12.2) Subpackages: kate-lang kate-plugins - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ - Drop patch, merged upstream: * 0001-Fix-settings-saving-regression-in-CTags-plugin.patch ==== kde-print-manager ==== Version update (22.12.1 -> 22.12.2) Subpackages: kde-print-manager-lang - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kdegraphics-thumbnailers ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kdenetwork-filesharing ==== Version update (22.12.1 -> 22.12.2) Subpackages: kdenetwork-filesharing-lang - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kdialog ==== Version update (22.12.1 -> 22.12.2) Subpackages: kdialog-lang - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kexec-tools ==== Version update (2.0.25 -> 2.0.26) - update to 2.0.26: * m68k: pass rng seed via BI_RNG_SEED * workflow: update to checkout@v3 * LoongArch: Remove redundant cmdline parameters when using --reuse-cmdline option * LoongArch: Add purgatory framework code * LoongArch: PE format image loading support * LoongArch: Add kexec/kdump support * config: Add LoongArch architecture support in config.guess and config.sub files * ppc64: remove rma_top limit - refresh kexec-tools-riscv64.patch. ==== keylime ==== Version update (6.5.3 -> 6.6.0) Subpackages: keylime-config keylime-firewalld keylime-logrotate keylime-registrar keylime-tenant keylime-tpm_cert_store keylime-verifier python310-keylime - Update to version v6.6.0: * bump version to 6.6.0 * codestyle: Annotate registrar_common.py and add to mypy * codestyle: Type-annotate tenant.py * codestyle: Type-annotate registrar_client.py and add to mypy * black: Upgrade to new 23.1.0 and reformat some sources * pylint: Fix an issue related to usage of dict R1735 (use-dict-literal) * pylint: Fix two issues related to C0325 (superfluous-parens) * pylint: Fix an unreachable-code issue * pylintrc: Ignore W0719 (broad-exception-raised) * codestyle: Type-annotate revocation_notifier.py and add to mypy * CI/CD: Use later version of actions for style-checks * pre-commit: Use isort v5.12 and black v22.12 * migrations: Move bind parameter from MetaData() to reflect() method * pylint: Ignore newly reported too-many-ancestors issue * docker/ci: Remove image used for TPM 1.2 tests * docker/ci: Update ci image to base on Fedora 37 * docs: Update IMA instructions to new runtime policy format * docs: point newcomers to the design document * docs: add basic (m)TLS instructions to the installation guide * docs: update REST APIs TLS documentation to match new default setup * docs: remove old development instructions, move dev conainter section * docs: update theme to min 1.1.0 * docs: fix formatting of example IMA-policy * codestyle: Get rid of casts on return value from get_tpm_metadata() * codestyle: Add missing type annotations to tpm_main.py and add to mypy * codestyle: Add missing type annotations to tpm_abstract.py and add to mypy * tenant: Implement updateallowlist command to update an existing allowlist * verifier: Implement PUT method to update named allowlist * verifier: AllowlistHandler: Move getting runtime policy in DB format to function * verifier: AllowlistHandler: Deduplicate code validating REST API input * verifier: proper support for listening on 0.0.0.0 (fixes #705) * script: Remove unused argument argv * pylintc: Remove outdated modules from list of ignore modules * Rename keylime_agent_secure.mount to comply policy * scripts: Also copy excluded files and verification keys from base policy * scripts: Improve descriptions in create_policy tool * scripts: Add user-provided keys to the policy * scripts: update create_policy script to latest runtime policy JSON format * Rename "create_allowlist.sh" to "create_runtime_policy.sh" * Implement major Keylime policy overhaul ==== khelpcenter5 ==== Version update (22.12.1 -> 22.12.2) Subpackages: khelpcenter5-lang - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kio-extras5 ==== Version update (22.12.1 -> 22.12.2) Subpackages: kio-extras5-lang libkioarchive5 - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== konsole ==== Version update (22.12.1 -> 22.12.2) Subpackages: konsole-part konsole-part-lang - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kwalletmanager5 ==== Version update (22.12.1 -> 22.12.2) Subpackages: kwalletmanager5-lang - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== libapparmor ==== - add nscd-systemd-userdb.diff: allow nscd to read systemd-userdb (boo#1207698) ==== libheif ==== Subpackages: gdk-pixbuf-loader-libheif libheif1 - Use chrpath during build to delete otherwise illegal runtime directories stored as RPATH in the executables ==== libkdcraw ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== libkexiv2 ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== liblqr ==== - spec cleanups ==== libstorage-ng ==== Version update (4.5.67 -> 4.5.68) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - Translated using Weblate (Georgian) (bsc#1149754) - 4.5.68 ==== mobipocket ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== pngquant ==== Version update (2.17.0 -> 2.18.0) - update to 2.18.0: * build fixes on ARM * small quality improvement ==== postfix ==== - Disable NIS support on Factory (deprecated and will be removed) ==== python-numpy ==== - build-conditionalize cblas dependency, it is missing on SLE <= 15 related to bsc#1177260 not being fixable for SLE15 (jsc#PED-3257) ==== qalculate ==== Version update (4.5.0 -> 4.5.1) Subpackages: libqalculate22 qalculate-data - update to 4.5.1: * Fix retrieval of exchange rates from mycurrency.net and add alternative secondary exchange rates sources * Add m/sÂ³, m/sâ´, m/sâµ, and m/sâ¶ as derived units (improves automatic unit conversion) * Check that the output of command, in command() function, is a reasonably sane expression * EUR has replaced HRK as currency of Croatia * Fix MathStructure::countTotalChildren() with count_function_as_one set to false * Fix unit tests ==== signon-kwallet-extension ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== sil-charis-fonts ==== Version update (6.101 -> 6.200) - Update to 6.200: * This release is focused on adding features and 240+ glyphs, including support for over 180 additional characters mostly from Unicode 14 and 15. It does not include significant changes to line spacing, glyph widths, or kerning that might cause document reflow or layout changesâexcept for minor improvements to the size and weight of superscript, subscript, and modifier letters * Most important changes: support for subscript and superscript numerals and automatic fractions ==== suse-module-tools ==== Version update (16.0.28 -> 16.0.29) Subpackages: suse-module-tools-scriptlets - Update to version 16.0.29: * modprobe.conf: s390x: remove softdep on fbcon (boo#1207853)

1 0

Re: Grub Rescue of OpenSuSE MicroOS / Harvester VM
by Thorsten Kukuk 04 Feb '23

04 Feb '23

Hi, On Sat, Feb 04, Torsten Behrens wrote: > Hi OpenSuSE MicroOS Users, > > I want to know how to rescue / reinstall grub bootloader. > > The standard way of chroot and running grub-install does not work, > because of the read-only filesystem. MicroOS is designed in a way, that is on the one side very robust and it should not be necessary to boot a rescue system to repair it. But if it really breaks, it's much easier and faster to redeploy it then to try to fix it. Since I really run only container on my server with MicroOS, I only need to enable the containers again, that's all. > I booted the system over CDROM with OpenSuSE MicroOS Rescue Mode, > but for me it's totally impossible to rewrite the bootloader to MBR. > > transactional-update bootloader does also not work, > because it can not write anything to /var/run If transcational-update bootloader does not work anymore for you, then there is something more serious broken on your system. Before you spend hours on trying to find all the pieces which seems to be broken on your system, redeploy it. > Can maybe someone explain how to rescue systems, > e.g. when you created an Image over Harvester and want to boot this system > image? With MicroOS we don't rescue systems, we re-install them. > I don't find a lot of infos at the web about how to rescue systems at opensuse > microOS > and it will be really helpful - if someone can support me in this Topic. Because, as written, it's faster to re-install MicroOS then to try to repair it ;) Thorsten > Thanks a lot > Have a lot of Fun. > > Kind regards > Torsten > > -- > torsten(a)linux.schule > www.behrens.engineer -- Thorsten Kukuk, Distinguished Engineer, Senior Architect, Future Technologies SUSE Software Solutions Germany GmbH, Frankenstraße 146, 90461 Nuernberg, Germany Managing Director: Ivo Totev, Andrew Myers, Andrew McDonald, Martje Boudien Moerman (HRB 36809, AG Nürnberg)

2 1

New MicroOS snapshot 20230202 released!
by Richard Brown 04 Feb '23

04 Feb '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MozillaFirefox (109.0 -> 109.0.1) NetworkManager (1.40.10 -> 1.40.12) docker (20.10.21_ce -> 20.10.23_ce) exiv2 fontconfig (2.14.1 -> 2.14.2) gstreamer (1.20.5 -> 1.22.0) gstreamer-plugins-bad (1.20.5 -> 1.22.0) gstreamer-plugins-base (1.20.5 -> 1.22.0) gstreamer-plugins-good (1.20.5 -> 1.22.0) libhandy (1.8.0 -> 1.8.1) libheif liblouis (3.23.0 -> 3.24.0) libnice (0.1.19 -> 0.1.21) libpng16 libsrtp2 (2.4.2 -> 2.5.0) mpfr (4.1.1 -> 4.2.0) ncurses (6.4.20230114 -> 6.4.20230121) openssl-3 openssl (1.1.1s -> 3.0.7) pkgconf python-pyzmq vim (9.0.1234 -> 9.0.1270) zenity (3.43.0 -> 3.44.0) === Details === ==== MozillaFirefox ==== Version update (109.0 -> 109.0.1) Subpackages: MozillaFirefox-translations-common - Mozilla Firefox 109.0.1 * Fixed jank when loading pages containing a large number of emoji characters (bmo#1809081) * Fixed an issue causing authentication prompts to not appear when loading pages in some enterprise environments (bmo#1809151) * ixed inconsistent sizing of event listener checkboxes inside the Inspector developer tool (bmo#1811760) ==== NetworkManager ==== Version update (1.40.10 -> 1.40.12) Subpackages: NetworkManager-bluetooth NetworkManager-lang NetworkManager-tui NetworkManager-wwan libnm0 typelib-1_0-NM-1_0 - Update to version 1.40.12: + Make sure "external-ids" stays up to date in Open vSwitch database on a connection reapply. + Retry if a netlink sockets runs out of buffer space before we're able to read results of a link change. + Fix a possible race involving concurrent invocation of iptables in IPv4 shared mode. + Other various fixes. ==== docker ==== Version update (20.10.21_ce -> 20.10.23_ce) Subpackages: docker-bash-completion - update to 20.10.23-ce * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023 - drop kubic flavor as kubic is EOL. this removes: kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch ==== exiv2 ==== - add always-use-signed-char-for-conversion.patch for test suite fixes on non-x86_64 ==== fontconfig ==== Version update (2.14.1 -> 2.14.2) Subpackages: fontconfig-lang libfontconfig1 - update to 2.14.2: * Adjust indentation between programlisting in fontconfig-user.sgml * Add some missing constant names for weight * Report more detailed logs instead of assertion * Fix a typo in description for HAVE_STDATOMIC_PRIMITIVES * Ignore LC_CTYPE if set to "UTF-8" * add --with-default-sub-pixel-rendering option * Add FC_DESKTOP_NAME property ==== gstreamer ==== Version update (1.20.5 -> 1.22.0) Subpackages: gstreamer-lang libgstreamer-1_0-0 typelib-1_0-Gst-1_0 - Add patch to reduce the required meson version to 0.61.0 since that's what we have in SLE 15: * reduce-required-meson.patch - Probably because of a problem in SLE's meson, the generated pkgconfig files are missing some variables that are needed by rpm to generate the pkgconfig(...) provides correctly. In order to fix this, we now check for those variables and insert them in the pc files before installation if they're missing. - Update to version 1.22.0: + AV1 video codec support improvements + New HLS, DASH and Microsoft Smooth Streaming adaptive streaming clients + Qt6 support for rendering video inside a QML scene + Minimal builds optimised for binary size, including only the individual elements needed + Playbin3, Decodebin3, UriDecodebin3, Parsebin enhancements and stabilisation + WebRTC simulcast support and support for Google Congestion Control + WebRTC-based media server ingestion/egress (WHIP/WHEP) support + New easy to use batteries-included WebRTC sender plugin + Easy RTP sender timestamp reconstruction for RTP and RTSP + ONVIF timed metadata support + New fragmented MP4 muxer and non-fragmented MP4 muxer + New plugins for Amazon AWS storage and audio transcription services + New gtk4paintablesink and gtkwaylandsink renderers + New videocolorscale element that can convert and scale in one go for better performance + High bit-depth video improvements + Touchscreen event support in navigation API + Rust plugins now shipped in macOS and Windows/MSVC binary packages + H.264/H.265 timestamp correction elements for PTS/DTS reconstruction before muxers + Improved design for DMA buffer sharing and modifier handling for hardware-accelerated video decoders/encoders/filters and capturing/rendering on Linux + Video4Linux2 hardware accelerated decoder improvements + CUDA integration and Direct3D11 integration and plugin improvements + New H.264 / AVC, H.265 / HEVC and AV1 hardware-accelerated video encoders for AMD GPUs using the Advanced Media Framework (AMF) SDK + applemedia: H.265 / HEVC video encoding + decoding support + androidmedia: H.265 / HEVC video encoding support + New "force-live" property for audiomixer, compositor, glvideomixer, d3d11compositor etc. + Lots of new plugins, features, performance improvements and bug fixes - Rebase patches with quilt. ==== gstreamer-plugins-bad ==== Version update (1.20.5 -> 1.22.0) Subpackages: gstreamer-plugins-bad-lang libgstadaptivedemux-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstphotography-1_0-0 libgstplay-1_0-0 libgstplayer-1_0-0 libgstsctp-1_0-0 libgsturidownloader-1_0-0 libgstva-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 - Temporarily disable zxing, waiting for updated version to land in Factory. - Add patch to reduce the required meson version to 0.61.0 since that's what we have in SLE 15: * reduce-required-meson.patch - Probably because of a problem in SLE's meson, the generated pkgconfig files are missing some variables that are needed by rpm to generate the pkgconfig(...) provides correctly. In order to fix this, we now check for those variables and insert them in the pc files before installation if they're missing. - Only build the microdns plugin in TW since SLE is missing the required dependencies. - Add new shared libs libgstcuda-1_0-0 and libgstwebrtcnice-1_0-0 to baselibs.conf. - Update to version 1.22.0: + Please see changes in gstreamer main package, major version bump. - Pass amfcodec=disabled and directshow=disabled to meson, not supported on linux (yet?). - Build qsv plugin only for supported targets via passing conditional qsv=disabled/enabled to meson. - Add pkgconfig(gtk+-3.0) BuildRequires: New dependency. - Package new sub-packages + libgstcuda-1_0-0 + libgstwebrtcnice-1_0-0 + typelib-1_0-CudaGst-1_0 + typelib-1_0-GstCuda-1_0 + typelib-1_0-GstVa-1_0 ==== gstreamer-plugins-base ==== Version update (1.20.5 -> 1.22.0) Subpackages: gstreamer-plugins-base-lang libgstallocators-1_0-0 libgstapp-1_0-0 libgstaudio-1_0-0 libgstfft-1_0-0 libgstgl-1_0-0 libgstpbutils-1_0-0 libgstriff-1_0-0 libgstrtp-1_0-0 libgstrtsp-1_0-0 libgstsdp-1_0-0 libgsttag-1_0-0 libgstvideo-1_0-0 typelib-1_0-GstTag-1_0 - Add patch to reduce the required meson version to 0.61.0 since that's what we have in SLE 15: * reduce-required-meson.patch - Probably because of a problem in SLE's meson, the generated pkgconfig files are missing some variables that are needed by rpm to generate the pkgconfig(...) provides correctly. In order to fix this, we now check for those variables and insert them in the pc files before installation if they're missing. - Update to version 1.22.0: + Please see changes in gstreamer main package, major version bump. - Rebase patches with quilt. - Add pkgconfig(xi) BuildRequires: New dependency. ==== gstreamer-plugins-good ==== Version update (1.20.5 -> 1.22.0) Subpackages: gstreamer-plugins-good-gtk gstreamer-plugins-good-lang - Add patch to reduce the required meson version to 0.61.0 since that's what we have in SLE 15: * reduce-required-meson.patch - Update to version 1.22.0: + Please see changes in gstreamer main package, major version bump. - Add disabled pkgconfig(Qt6Core), pkgconfig(Qt6Gui), pkgconfig(Qt6Qml), pkgconfig(Qt6Quick) and pkgconfig(Qt6WaylandClient) BuildRequires and pass Dqt6=disabled to meson, do not build qt6 support yet. ==== libhandy ==== Version update (1.8.0 -> 1.8.1) Subpackages: libhandy-1-0 libhandy-lang typelib-1_0-Handy-1_0 - Update to version 1.8.1: + Fix double click handling for HdyWindowHandle and HdyHeaderBar. + Updated translations. ==== libheif ==== Subpackages: gdk-pixbuf-loader-libheif libheif1 - add 2ca02a128b2f76f7f293aa86a2ce1e04a8306c65.patch b6812284a2d70f29a5121ec3dbe652da07fdbbb7.patch: (bsc#1206945) * replace internal API with public API and fix typo (Fixes #745) ==== liblouis ==== Version update (3.23.0 -> 3.24.0) Subpackages: liblouis-data liblouis20 python3-louis - Update to version 3.24.0: + This release contains major updates to Hungarian, UEB, and Chinese bopomofo braille. Danish has been completely reworked and there is now support for the Danish braille standard 2022. There are also some new tables so that liblouis can now generate Georgian computer braille, Swahili (Kenya) and Chichewa (Malawi). Aside from that there is the usual assortment of code cleanups and bug fixes. + For a detailed list of all the changes refer to https://github.com/liblouis/liblouis/milestone/34?closed=1 + Braille table improvements: - New grade 1, 1.2, 1.3, 1.4, 1.5 and 2 tables for Swahili (Kenya) and grade 1 table for Chichewa (Malawi). - Improvements to Hungarian. - Update braille patterns of some Chinese characters and phrases in the Chinese bopomofo braille table - Add experimental Georgian computer braille table - Updated the Danish tables to the new 2022 Danish braille standard - Limited contraction level (grade 2l or 1.5) is no longer part of the Danish braille standard 2022. - There is no longer any need for "literary" tables. In Danish braille, capital letters are now always indicated, and steps have been taken in the standard to ensure better back-translation. - As requested by The Danish Braille Committee, the tables for the 1993 standard will be kept as an option for at least a year. All the 1993 tables have been renamed to include "_1993" in the filename, so the new tables will be used as default. - Improvements to UEB. - Add new sign for German sharp S (ICEB July 2022) - Fix a couple of acronyms which require grade 1 indicator (LLB, LLP) - Fix placement of numeral sign in letters comma digits - Review rules for "under" and "there" contractions ==== libnice ==== Version update (0.1.19 -> 0.1.21) Subpackages: gstreamer-libnice libnice10 - Update to version 0.1.21: * Only use `ifr_ifindex` if OS supports it, fixes build on iOS and FreeBSD. - Changes from version 0.1.20: * Remove support for GStreamer 0.10 builds. * Add macro to check LIBNICE version. * Added utility function to get the STUN server from a candidate. * Support additional header in built-in HTTP proxy client. * Add boxed type for NiceAddress for bindings. * Add API to get the interface index for a local address. * Explicitly bind to a specific interface when creating UDP sockets. * Limit the number of stored incoming checks based on a property. * Do asynchronous DNS resolution for STUN and TURN servers. * Add introspection friendly API to get an allocated string from a NiceCandidate. * Enable gst-full to link in a single element. ==== libpng16 ==== - Fix build: some*.la files are symlinks. Adjust spec to use find -type f,l - switch to pkgconfig(zlib) to allow alternative providers as well - build with glibc hwcaps optimized libs ==== libsrtp2 ==== Version update (2.4.2 -> 2.5.0) - Update to release 2.5.0 * No changelog provided; some unspecified crypto updates occurred. ==== mpfr ==== Version update (4.1.1 -> 4.2.0) - tests-tsprintf.patch: Avoid testsuite failure with glibc >= 2.37 - Update to mpfr 4.2.0 * New functions mpfr_cosu, mpfr_sinu, mpfr_tanu, mpfr_acosu, mpfr_asinu, mpfr_atanu and mpfr_atan2u. * New functions mpfr_cospi, mpfr_sinpi, mpfr_tanpi, mpfr_acospi, mpfr_asinpi, mpfr_atanpi and mpfr_atan2pi. * New functions mpfr_log2p1, mpfr_log10p1, mpfr_exp2m1, mpfr_exp10m1 and mpfr_compound_si. * New functions mpfr_fmod_ui, mpfr_powr, mpfr_pown, mpfr_pow_uj, mpfr_pow_sj and mpfr_rootn_si (mpfr_pown is actually a macro defined as an alias for mpfr_pow_sj). * Bug fixes. In particular, for the formatted output functions (mpfr_printf, etc.), the case where the precision consists only of a period has been fixed to be like ".0" as specified in the ISO C standard, and the manual has been corrected and clarified. The macros of the custom interface have also been fixed: they now behave like functions (except a minor limitation for mpfr_custom_init_set). - Remove mpfr-4.1.1-patch01.patch which is included in the new release. ==== ncurses ==== Version update (6.4.20230114 -> 6.4.20230121) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch 20230121 + correct limit-check when dumping tc/use clause via tic -I (report by Gabriel Ravier). + correct a check for manpage-alias in edit_man.sh, to work with out of tree builds (report by Sven Joachim). - Port ncurses-6.4.dif to patch 20230121 ==== openssl-3 ==== - Relax the crypto-policies requirements for the regression tests - Set OpenSSL 3.0.7 as the default openssl [bsc#1205042] * Rename openssl-1.1.0-no-html.patch to openssl-no-html-docs.patch * Rebase openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch * Package a copy of the original default config file called openssl.cnf and name it as openssl-orig.cnf and warn the user if the files differ. * Add openssl-3-devel as conflicting with libopenssl-1_1-devel * Remove patches: - fix-config-in-tests.patch - openssl-use-versioned-config.patch - Create the openssl ca-certificates directory in case the ca-certificates package is not installed. This directory is required by the nodejs regression tests. [bsc#1207484] ==== openssl ==== Version update (1.1.1s -> 3.0.7) ==== pkgconf ==== Subpackages: libpkgconf3 pkgconf-m4 pkgconf-pkg-config - Add pkgconf-CVE-2023-24056.patch: Backport commit 628b2b2baf from upstream, test for, and stop string processing, on truncation (bsc#1207394 CVE-2023-24056). ==== python-pyzmq ==== - skip numy tests for the testsuite on SLE15 ==== vim ==== Version update (9.0.1234 -> 9.0.1270) Subpackages: vim-data vim-data-common vim-small - Updated to version 9.0.1270, fixes the following problems * The code style has to be checked manually. * MS-Windows console: not flushing termguicolors. * Code in same_leader() can be simplified. * Code is indented more than necessary. * :runtime completion can be further improved. * Cannot have a line break before an object member access. * Cannot access a private object member in a lambda defined inside the class. * Coverity warns for not checking function return value. * Code for :runtime completion is not consistent. * :setglobal cannot use script-local function for "expr" option. * Cursor briefly displayed in a wrong position when pressing Esc in Insert mode after autoindent was used. * Code is indented more than necessary. * Code is indented more than necessary. * Divide by zero with 'smoothscroll' set and a narrow window. * Cannot export an interface. (Ernie Rael) * Cannot export an abstract class. (Ernie Rael) * Cannot use an object method with :defer. (Ernie Rael) * Checking returned value of ga_grow() is inconsistent. * MS-Windows: scrollback cropped off on Vim exit. * Calling a method on an interface does not work. * Changing 'virtualedit' does not have immediate effect. * NetworkManager connection files are not recognized. * Code style is not check in test scripts. * Code style test fails. * Diffmode test fails. * Coverity warns for possible NULL pointer usage. * Elsa files are not recognized. * The did_set_string_option function is too long. * KDL files are not recognized. * Motif: compiler warning for unused argument. * Using an interface method may give a compilation error. * Error for space before ": type" is inconsistent. * The did_set_string_option function is too long. * .clangd and .stylelintrc files don't get a filetype. ==== zenity ==== Version update (3.43.0 -> 3.44.0) Subpackages: zenity-lang - Update to version 3.44.0: + scale: set a page increment so mouse wheel can be used on widget. + build: - Use GNOME module post_install(). - Replace deprecated functions. + docs: Fix incorrect markup. + Updated translations.

1 0

Grub Rescue of OpenSuSE MicroOS / Harvester VM
by Torsten Behrens 04 Feb '23

04 Feb '23

Hi OpenSuSE MicroOS Users, I want to know how to rescue / reinstall grub bootloader. The standard way of chroot and running grub-install does not work, because of the read-only filesystem. I booted the system over CDROM with OpenSuSE MicroOS Rescue Mode, but for me it's totally impossible to rewrite the bootloader to MBR. transactional-update bootloader does also not work, because it can not write anything to /var/run Can maybe someone explain how to rescue systems, e.g. when you created an Image over Harvester and want to boot this system image? I don't find a lot of infos at the web about how to rescue systems at opensuse microOS and it will be really helpful - if someone can support me in this Topic. Thanks a lot Have a lot of Fun. Kind regards Torsten -- torsten(a)linux.schule www.behrens.engineer

1 0