April 2024 - openSUSE ARM - openSUSE Mailing Lists

New Arm Tumbleweed snapshot 20240409 released!
by Guillaume Gardet 10 Apr '24

10 Apr '24

Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=3&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: adwaita-xfce-icon-theme (0.0.3+git0.e0f73b9 -> 0.0.4+git0.b33d65a) awesfx branding-openSUSE (84.87.20230227 -> 84.87.20240405) capstone distribution-logos-openSUSE (20240207 -> 20240404) evolution fwupd (1.9.15 -> 1.9.16) gnutls (3.8.4 -> 3.8.5) gvfs icewm-theme-branding java-21-openjdk libX11 (1.8.8 -> 1.8.9) libproxy-backend (0.5.4 -> 0.5.5) libproxy-client (0.5.4 -> 0.5.5) lightdm-gtk-greeter-branding-openSUSE lttng-ust mutter oath-toolkit (2.6.8 -> 2.6.11) openSUSE-release (20240407 -> 20240409) opensc (0.25.0 -> 0.25.1) openssh ovmf pixman plasma6-openSUSE power-profiles-daemon (0.13 -> 0.20) python-gobject (3.48.1 -> 3.48.2) qt6-base (6.6.3 -> 6.7.0) qt6-declarative (6.6.3 -> 6.7.0) qt6-imageformats (6.6.3 -> 6.7.0) qt6-multimedia (6.6.3 -> 6.7.0) qt6-networkauth (6.6.3 -> 6.7.0) qt6-positioning (6.6.3 -> 6.7.0) qt6-qt5compat (6.6.3 -> 6.7.0) qt6-quick3d (6.6.3 -> 6.7.0) qt6-quicktimeline (6.6.3 -> 6.7.0) qt6-sensors (6.6.3 -> 6.7.0) qt6-shadertools (6.6.3 -> 6.7.0) qt6-speech (6.6.3 -> 6.7.0) qt6-svg (6.6.3 -> 6.7.0) qt6-tools (6.6.3 -> 6.7.0) qt6-translations (6.6.3 -> 6.7.0) qt6-virtualkeyboard (6.6.3 -> 6.7.0) qt6-wayland (6.6.3 -> 6.7.0) qt6-webchannel (6.6.3 -> 6.7.0) qt6-webengine (6.6.3 -> 6.7.0) qt6-webview (6.6.3 -> 6.7.0) sdbootutil (1+git20240321.04bfbac -> 1+git20240408.49e4021) u-boot-rpiarm64 (2024.01 -> 2024.04) xfce4-branding-openSUSE (4.18.0+git0.9a2f754 -> 4.18.0+git1.8b02118) xfsprogs yast2-bootloader (5.0.7 -> 5.0.8) yast2-installation (5.0.7 -> 5.0.8) yast2-perl-bindings (5.0.2 -> 5.0.4) yast2-trans (84.87.20240331.90b1d91d29 -> 84.87.20240407.b46e9ca4fd) === Details === ==== adwaita-xfce-icon-theme ==== Version update (0.0.3+git0.e0f73b9 -> 0.0.4+git0.b33d65a) - Update to version 0.0.4+git0.b33d65a * Remove superfluous /apps directory from index.theme ==== awesfx ==== - Use full URL for source tarball. ==== branding-openSUSE ==== Version update (84.87.20230227 -> 84.87.20240405) Subpackages: grub2-branding-openSUSE libreoffice-branding-openSUSE plymouth-branding-openSUSE wallpaper-branding-openSUSE yast2-qt-branding-openSUSE - Use png for wallpapers for Tumbleweed - SLES seems to be using png - Using a compat symlink wallpapers/openSUSEdefault-> wallpapers/SLEdefault allows running certain apps without rebuild. Such as cockpit. - Use optipng -o5 to compress files (has to be reflected in spec) - Bump date ==== capstone ==== - Build with distro %{optflags} ==== distribution-logos-openSUSE ==== Version update (20240207 -> 20240404) Subpackages: distribution-logos-openSUSE-Aeon distribution-logos-openSUSE-Tumbleweed distribution-logos-openSUSE-icons - Update to version 20240404: * Turn apple-touch-icon into round square ones * SLES Compatability supply apple-touch-icon for Leap, LeapMicro, TW * Delete dist/package directory * fix source mismatch with package name ==== evolution ==== Subpackages: evolution-plugin-spamassassin - Add boo1221868.patch, fixing a crash when hiding competed tasks (boo#1221868, glgo#GNOME/evolution#2712) ==== fwupd ==== Version update (1.9.15 -> 1.9.16) Subpackages: fwupd-bash-completion libfwupd2 typelib-1_0-Fwupd-2_0 - Update to version 1.9.16: + This release adds the following features: - Prefer zstd over xz for metadata. - Relicense a few remaining plugin files to LGPL-2.1+. + This release fixes the following bugs: - Correctly record UEFI success if adding ESRT nodes. - Defer the DP Aux MST scanning on hotplug to workaround a kernel bug. - Do not do the post-update version check if the device needs-reboot. - Fix a fastboot warning when loading device. - Fix a possible warning in fwupdmgr when excluding releases. - Fix a qsi-dock warning when writing chunks. - Ignore attribute-changed to work around a regression in macOS. - Ignore ZFS zvols when finding the default ESP. - Mark Pluton TPMs as part of the main CPU. - Put the fwupd-efi verbose debugging in the journal. - Recognize zfsbootmenu in ESP detection heuristic. + This release adds support for the following hardware: - Acer T34 and U33 docks. - Qualcomm Series 5 Gen 1 and Gen 2 and Series 3 Gen 1 and Gen 2 devices. - Several Puya SPI chips. - VIA VL822 C0. ==== gnutls ==== Version update (3.8.4 -> 3.8.5) Subpackages: libgnutls-dane0 libgnutls30 - Update to 3.8.5: * libgnutls: Due to majority of usages and implementations of RSA decryption with PKCS#1 v1.5 padding being incorrect, leaving them vulnerable to Marvin attack, the RSAES-PKCS1-v1_5 is being deprecated (encryption and decryption) and will be disabled in the future. A new option 'allow-rsa-pkcs1-encrypt' has been added into the system-wide library configuration which allows to enable/disable the RSAES-PKCS1-v1_5. Currently, the RSAES-PKCS1-v1_5 is enabled by default. * libgnutls: Added support for RIPEMD160 and PBES1-DES-SHA1 for backward compatibility with GCR. * libgnutls: A couple of memory related issues have been fixed in RSA PKCS#1 v1.5 decryption error handling and deterministic ECDSA with earlier versions of GMP. These were a regression introduced in the 3.8.4 release. See #1535 and !1827. * build: Fixed a bug where building gnutls statically failed due to a duplicate definition of nettle_rsa_compute_root_tr(). * API and ABI modifications: - GNUTLS_PKCS_PBES1_DES_SHA1: New enum member of gnutls_pkcs_encrypt_flags_t * Rebase patches: - gnutls-FIPS-TLS_KDF_selftest.patch - gnutls-FIPS-140-3-references.patch ==== gvfs ==== Subpackages: gvfs-backend-afc gvfs-backend-goa gvfs-backend-samba gvfs-backends gvfs-fuse - Move the recently added onedrive provider to the backend-goa subpackage: onedrive support is integrated into the g-o-a provider. ==== icewm-theme-branding ==== - Do not substitute png to jpg for default wallpaper Details at https://github.com/openSUSE/branding/pull/149 - Keep openSUSEDefault although SLEDefault compat symlink exist ==== java-21-openjdk ==== Subpackages: java-21-openjdk-headless - Added patch: * reproducible-jlink.patch + make the timestamp in jmods reproducible ==== libX11 ==== Version update (1.8.8 -> 1.8.9) Subpackages: libX11-6 libX11-data libX11-xcb1 - Update to 1.8.9 * Fix regressions introduced in 1.8.8 (!245, !248) - this includes reverting for now the previous "Fix XIM input sometimes jumbled (#198, !236)" - supersedes * U_0001-xlibi18n-restore-parse_line1-for-WIN32-builds.patch * U_0002-Revert-imDefLkup-Commit-first-info-in-XimCommitInfo.patch * U_0003-Revert-ximcp-Unmark-to-fabricate-key-events-with-XKe.patch - U_0001-xlibi18n-restore-parse_line1-for-WIN32-builds.patch U_0002-Revert-imDefLkup-Commit-first-info-in-XimCommitInfo.patch U_0003-Revert-ximcp-Unmark-to-fabricate-key-events-with-XKe.patch * fix regressions in 1.8.8 (issues #204, #205, #206, #207, #208) ==== libproxy-backend ==== Version update (0.5.4 -> 0.5.5) - Update to version 0.5.5: + Windows: Try all configured proxy resolution types. + Cleanup curl. + Add release option. + Expose missing functions in symbol map. + Fix crash during unload by. + Log debug instead of warning on wpad pac failure. + Fix refcounting in px_proxy_factory_copy. + symver: Fix symbol map to be a valid tree. + Fix free function for pxProxyFactory type. + CodeQL badge and updated repology. + meson: Don't build OSX plugin on iOS. ==== libproxy-client ==== Version update (0.5.4 -> 0.5.5) - Update to version 0.5.5: + Windows: Try all configured proxy resolution types. + Cleanup curl. + Add release option. + Expose missing functions in symbol map. + Fix crash during unload by. + Log debug instead of warning on wpad pac failure. + Fix refcounting in px_proxy_factory_copy. + symver: Fix symbol map to be a valid tree. + Fix free function for pxProxyFactory type. + CodeQL badge and updated repology. + meson: Don't build OSX plugin on iOS. ==== lightdm-gtk-greeter-branding-openSUSE ==== - Use 1600x1200.png now when we've changed backgrounds to png Details in https://github.com/openSUSE/branding/pull/149 ==== lttng-ust ==== - remove dependency on /usr/bin/python3 using %python3_fix_shebang macro, [bsc#1212476] ==== mutter ==== - Add mutter-fix-front-buffer-lock.patch: Fix front buffer lock error by an unnecessary ensure_fb_id call (glgo#gnome/mutter!3674, bsc#1222409). ==== oath-toolkit ==== Version update (2.6.8 -> 2.6.11) - version update to 2.6.11 * liboath: Handle invalid base32 encoded secrets. Fixes: #41. * Various build fixes including updated gnulib files. * Improve compatibility with recent libxmlsec. ==== openSUSE-release ==== Version update (20240407 -> 20240409) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== opensc ==== Version update (0.25.0 -> 0.25.1) Subpackages: opensc-bash-completion - Update to verion 0.25.1 General improvements * Add missing file to dist tarball to build documentation. minidriver * Fix RSA decryption with PKCS#1 v1.5 padding. * Fix crash when app is not set. ==== openssh ==== Subpackages: openssh-clients openssh-common openssh-server - Add missing bugzilla/CVE references to the changelog - Add patch from SLE which was missing in Factory: * Mon Jun 7 20:54:09 UTC 2021 - Hans Petter Jansson <hpj(a)suse.com> - Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which attempts to mitigate instances of secrets lingering in memory after a session exits. (bsc#1213004 bsc#1213008) - Rebase patch: * openssh-6.6p1-privsep-selinux.patch ==== ovmf ==== Subpackages: qemu-uefi-aarch64 - Removed EFI shell from 4mb x86_64 ovmf image because it has security concern. Removed shell can also save space of ovmf image. (bsc#1219890, CVE-2023-48733) - Updated ovmf.spec: add BUILD_SHELL=FALSE to BUILD_OPTIONS_X64 - 2mb x86_64 ovmf and smm x86_64 ovmf are already removed shell since edk2-stable202208 and earlier. - The BUILD_SHELL build option is not available on aarch64 and xen ovmf. - Shell.efi still be built independently and be packaged to ovmf-tools. User can copy it to EFI partition for running it by firmware's boot manager if they still need a shell. But user should either disables secure boot or sign Shell.efi by himself. ==== pixman ==== - a64-neon is an aarch64 feature, not armv6/7 ==== plasma6-openSUSE ==== Subpackages: plasma6-branding-openSUSE plasma6-sddm-theme-openSUSE plasma6-theme-openSUSE - Modify sddmtheme.diff to change the extension of the openSUSE branding wallpaper from jpg to png since the extension was changed in TW (boo#1222546) - Require the same wallpaper-branding version as used when building to make sure the png file exists ==== power-profiles-daemon ==== Version update (0.13 -> 0.20) - remove dependency on /usr/bin/python3 using %python3_fix_shebang macro, [bsc#1212476] - Remove duplicate DBus service files net.hadess.PowerProfiles - Update to version 0.20: * Service has new name 'org.freedesktop.UPower.PowerProfiles' * Allow multiple power-profiles-daemon drivers to load simultaneously * amdgpu panel power savings which uses dedicated hardware in systems with integrated Radeon graphics to decrease panel power consumption when the system is on battery - Add python3-shebang.patch: * resolve env-script-interpreter error ==== python-gobject ==== Version update (3.48.1 -> 3.48.2) Subpackages: python311-gobject python311-gobject-Gdk python311-gobject-cairo - Update to version 3.48.2: + Fix support for fundamental (primitive) types, such as Gst.Bitmask. ==== qt6-base ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6Concurrent6 libQt6Core6 libQt6DBus6 libQt6Gui6 libQt6Network6 libQt6OpenGL6 libQt6OpenGLWidgets6 libQt6PrintSupport6 libQt6Sql6 libQt6Test6 libQt6Widgets6 libQt6Xml6 qt6-network-tls qt6-networkinformation-glib qt6-networkinformation-nm qt6-platformtheme-gtk3 qt6-printsupport-cups qt6-sql-mysql qt6-sql-sqlite - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released - Replace 0001-Tell-the-truth-about-private-API.patch with upstream change: * 0001-CMake-ELF-allow-using-Qt-s-full-version-number-in-th.patch - Add upstream fix (QTBUG-123937): * fix_builds_with_Werror.patch ==== qt6-declarative ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6LabsAnimation6 libQt6LabsFolderListModel6 libQt6LabsQmlModels6 libQt6LabsSettings6 libQt6LabsSharedImage6 libQt6LabsWavefrontMesh6 libQt6Qml6 libQt6QmlCore6 libQt6QmlLocalStorage6 libQt6QmlModels6 libQt6QmlWorkerScript6 libQt6QmlXmlListModel6 libQt6Quick6 libQt6QuickControls2-6 libQt6QuickControls2Impl6 libQt6QuickDialogs2-6 libQt6QuickDialogs2QuickImpl6 libQt6QuickDialogs2Utils6 libQt6QuickEffects6 libQt6QuickLayouts6 libQt6QuickParticles6 libQt6QuickShapes6 libQt6QuickTemplates2-6 libQt6QuickTest6 libQt6QuickWidgets6 qt6-declarative-imports - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released - Update build constraints ==== qt6-imageformats ==== Version update (6.6.3 -> 6.7.0) - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-multimedia ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6Multimedia6 libQt6MultimediaQuick6 libQt6Quick3DSpatialAudio6 libQt6SpatialAudio6 qt6-multimedia-imports - Add upstream change to restore binary compatibility (QTBUG-123997): * 0001-Fix-ABI-breakage-wrt-QAudioSink-Source-stateChanged-.patch - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-networkauth ==== Version update (6.6.3 -> 6.7.0) - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-positioning ==== Version update (6.6.3 -> 6.7.0) - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-qt5compat ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6Core5Compat6 qt6-qt5compat-imports - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-quick3d ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6Quick3D6 libQt6Quick3DAssetImport6 libQt6Quick3DAssetUtils6 libQt6Quick3DEffects6 libQt6Quick3DHelpers6 libQt6Quick3DHelpersImpl6 libQt6Quick3DParticleEffects6 libQt6Quick3DParticles6 libQt6Quick3DRuntimeRender6 libQt6Quick3DUtils6 qt6-quick3d-imports - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-quicktimeline ==== Version update (6.6.3 -> 6.7.0) - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-sensors ==== Version update (6.6.3 -> 6.7.0) - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-shadertools ==== Version update (6.6.3 -> 6.7.0) - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-speech ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6TextToSpeech6 qt6-texttospeech - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-svg ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6Svg6 libQt6SvgWidgets6 - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-tools ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6Designer6 libQt6UiTools6 qt6-tools-qdbus - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-translations ==== Version update (6.6.3 -> 6.7.0) - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-virtualkeyboard ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6HunspellInputMethod6 libQt6VirtualKeyboard6 qt6-virtualkeyboard-imports - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-wayland ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6WaylandClient6 libQt6WaylandCompositor6 libQt6WaylandEglClientHwIntegration6 libQt6WaylandEglCompositorHwIntegration6 libQt6WlShellIntegration6 - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-webchannel ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6WebChannel6 libQt6WebChannelQuick6 qt6-webchannel-imports - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-webengine ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6WebEngineCore6 libQt6WebEngineQuick6 libQt6WebEngineWidgets6 qt6-webengine-imports - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released - Update rtc-dont-use-h264.patch ==== qt6-webview ==== Version update (6.6.3 -> 6.7.0) - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== sdbootutil ==== Version update (1+git20240321.04bfbac -> 1+git20240408.49e4021) Subpackages: sdbootutil-rpm-scriptlets sdbootutil-snapper - Update to version 1+git20240408.49e4021: * Update requirements * Measure manually initrd if pcrlock fails * Set SYSTEMD_LOG_LEVEL if verbose * Only error out on empty machine-id when actually used * feat: add basic boot assessment * fix: use new os-release and machine-id files * dracut call: --add-device belongs to --sysroot * Make sdbootutil usable with no snapshot Systems ==== u-boot-rpiarm64 ==== Version update (2024.01 -> 2024.04) Subpackages: u-boot-rpiarm64-doc - Update to 2024.04: * Full changelog available at: https://source.denx.de/u-boot/u-boot/-/compare/v2024.01...v2024.04 - Patch queue updated from https://github.com/openSUSE/u-boot.git tumbleweed-2024.04 * Patches dropped: 0017-rpi5-add-initial-memory-map-for-bcm.patch 0018-rpi5-Use-devicetree-as-alternative-.patch 0019-rpi5-Use-devicetree-to-retrieve-boa.patch 0020-bcm2835-Dynamically-calculate-bytes.patch 0021-mmc-bcmstb-Add-support-for-bcm2712-.patch 0022-configs-rpi_arm64-enable-SDHCI-BCMS.patch 0023-configs-rpi_arm64-build-position-in.patch ==== xfce4-branding-openSUSE ==== Version update (4.18.0+git0.9a2f754 -> 4.18.0+git1.8b02118) Subpackages: libgarcon-branding-openSUSE libxfce4ui-branding-openSUSE thunar-volman-branding-openSUSE xfce4-notifyd-branding-openSUSE xfce4-panel-branding-openSUSE xfce4-power-manager-branding-openSUSE xfce4-session-branding-openSUSE xfce4-settings-branding-openSUSE xfdesktop-branding-openSUSE xfwm4-branding-openSUSE - Update to version 4.18.0+git1.8b02118: * Tumbleweed now uses png for default.wallpaper ==== xfsprogs ==== Subpackages: libhandle1 - Switch to %autosetup in order to build with older rpm build ==== yast2-bootloader ==== Version update (5.0.7 -> 5.0.8) - Follow up of previous change to use even more precise wording (bsc#1219989,bsc#1222353) - 5.0.8 ==== yast2-installation ==== Version update (5.0.7 -> 5.0.8) - Adapted call for connecting all discovered NVMe-over-Fabrics subsystems (bsc#1222246). - 5.0.8 ==== yast2-perl-bindings ==== Version update (5.0.2 -> 5.0.4) - Fix downstream build failures caused by the previous change (bsc#1222375) - 5.0.4 - Use UTF-8 for translated texts coming from our Perl code (bsc#1216689), fixing most '?' occurrences in yast2-users. - 5.0.3 ==== yast2-trans ==== Version update (84.87.20240331.90b1d91d29 -> 84.87.20240407.b46e9ca4fd) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20240407.b46e9ca4fd: * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Czech) * Translated using Weblate (Slovak) * Translated using Weblate (Dutch) * Translated using Weblate (Japanese) * Translated using Weblate (Catalan) * New POT for text domain 'bootloader'. * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Romanian) * Translated using Weblate (Macedonian) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Macedonian) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian)

1 0

Checksum of image in repository /devel:/ARM:/Factory:/Contrib:/Pine64/images/ is wrong
by Freek de Kruijf 10 Apr '24

10 Apr '24

I downloaded and tried to use the image openSUSE-Tumbleweed-ARM-JeOS-pine64.aarch64.raw.xz in fact 2024.03.15-Build9.20 on a Banana Pi M64. It starts OK but a reboot gives errors. I also found that the checksum in the .sha256 files differs from the checksums calculated from the images. -- fr.gr. member openSUSE Freek de Kruijf

1 0

Radxa Rock5B support?
by Felix Niederwanger 09 Apr '24

09 Apr '24

Hey, I recently purchased a beautiful Radxa Rock 5B [1] to replace my ageing RPi4 Home server. Since we have a Tumbleweed image for the Radxa Zero [2], I was having some hopes, that we might also have images for the Rock 5B. Is there something known about it? Best, phoenix [1] https://wiki.radxa.com/Rock5/5b [2] https://en.opensuse.org/HCL:Radxa_Zero

5 8

New Arm Tumbleweed snapshot 20240407 released!
by Guillaume Gardet 09 Apr '24

09 Apr '24

Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=3&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: Mesa Mesa-drivers MozillaFirefox (124.0.1 -> 124.0.2) aaa_base (84.87+git20240202.9526d46 -> 84.87+git20240402.16596d1) apparmor avahi avahi-glib2 bash bubblewrap (0.8.0 -> 0.9.0) c-ares (1.27.0 -> 1.28.1) colord coreutils (9.4 -> 9.5) coreutils-systemd (9.4 -> 9.5) cpio emacs evince freerdp2 (2.11.2 -> 2.11.5) fwupd gobject-introspection (1.80.0 -> 1.80.1) gtk4 (4.14.1 -> 4.14.2) guestfs-tools harfbuzz (8.3.0 -> 8.4.0) inxi (3.3.33 -> 3.3.33+3) kate kdsoap-qt6 (2.1.1 -> 2.2.0) kernel-firmware kernel-source (6.8.1 -> 6.8.4) kirigami-addons6 (1.0.1 -> 1.1.0) kmod (31 -> 32) krb5 libapparmor libbpf (1.3.0 -> 1.4.0) libcanberra libdeflate (1.19 -> 1.20) libguestfs libproxy-backend (0.5.3 -> 0.5.4) libproxy-client (0.5.3 -> 0.5.4) libsrtp2 (2.5.0 -> 2.6.0) libssh2_org liburing (2.4 -> 2.5) libuv (1.47.0 -> 1.48.0) libvirt (10.1.0 -> 10.2.0) libzypp (17.32.0 -> 17.32.2) llvm18 (18.1.2 -> 18.1.3) mpg123 (1.32.5 -> 1.32.6) nghttp2 (1.60.0 -> 1.61.0) openSUSE-release (20240402 -> 20240407) openssh orca (46.0 -> 46.1) pango perl-CGI (4.600.0 -> 4.640.0) phodav plasma6-desktop python-M2Crypto python-Pillow (10.2.0 -> 10.3.0) python-cryptography (42.0.4 -> 42.0.5) python-httpcore (1.0.4 -> 1.0.5) python-libvirt-python (10.1.0 -> 10.2.0) python-numpy python-pyasn1 (0.5.1 -> 0.6.0) python-pyzmq python-typing_extensions (4.10.0 -> 4.11.0) raspberrypi-firmware (2023.11.21 -> 2024.03.27) raspberrypi-firmware-config (2023.11.21 -> 2024.03.27) re2 (20240301 -> 20240401) snowball sushi (45.0 -> 46.0) systemd vim xdm (1.1.15 -> 1.1.16) xorg-x11-server (21.1.11 -> 21.1.12) xwayland (23.2.4 -> 23.2.5) yast2-storage-ng (5.0.10 -> 5.0.11) zstd (1.5.5 -> 1.5.6) === Details === ==== Mesa ==== Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - fix missing free codecs in builds with non-free codecs enabled ==== Mesa-drivers ==== Subpackages: Mesa-dri Mesa-gallium Mesa-libva - fix missing free codecs in builds with non-free codecs enabled ==== MozillaFirefox ==== Version update (124.0.1 -> 124.0.2) - Mozilla Firefox 124.0.2 https://www.mozilla.org/en-US/firefox/124.0.2/releasenotes/ * Fixed an issue where users with a large amount of bookmarks would be unable to restore a bookmarks backup. (bmo#1884308) * Fixed an issue that would cause open Firefox windows to go blank or crash during video playback on sites such as Netflix. (bmo#1883932) * Fixed a crash that affected Linux AArch64 builds. (bmo#1866396) * Fixed an issue where some users experienced difficulties loading webpages due to changes made to the default AppArmor configuration shipping in Ubuntu 24.04. (bmo#1884347) ==== aaa_base ==== Version update (84.87+git20240202.9526d46 -> 84.87+git20240402.16596d1) Subpackages: aaa_base-extras - Update to version 84.87+git20240402.16596d1: * add alacritty to DIR_COLORS * Make sure tput it present before resetting TERM * Add mc helpers for both tcsh and bash resources * Do not overwrite escape sequences for xterm like * Check for valid TERM ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-docs apparmor-parser apparmor-profiles apparmor-utils python3-apparmor - Use full URLs for source tarball and signature. ==== avahi ==== Subpackages: libavahi-client3 libavahi-common3 libavahi-core7 - Tag hardening patches as PATCH-FEATURE-OPENSUSE ==== avahi-glib2 ==== Subpackages: libavahi-glib1 libavahi-gobject0 libavahi-ui-gtk3-0 - Tag hardening patches as PATCH-FEATURE-OPENSUSE ==== bash ==== Subpackages: bash-sh - Help dependcy resolver to identify package split done with bash-sh ==== bubblewrap ==== Version update (0.8.0 -> 0.9.0) Subpackages: bubblewrap-zsh-completion - update to v0.9.0: * Build system changed to Meson from Autotools * Add --argv0 https://github.com/containers/bubblewrap/issues/91 * --symlink is now idempotent, meaning it succeeds if the symlink already exists and already has the desired target * Clarify security considerations in documentation * Clarify documentation for --cap-add * Report a better error message if mount(2) fails with ENOSPC * Fix a double-close on error reading from --args, --seccomp or - -add-seccomp-fd argument * Improve memory allocation behaviour ==== c-ares ==== Version update (1.27.0 -> 1.28.1) - c-ares 1.28.1 Features: * Emit warnings when deprecated c-ares functions are used. This can be disabled by passing a compiler definition of `CARES_NO_DEPRECATED`. [PR #732] * Add function `ares_search_dnsrec()` to search for records using the new DNS record data structures. [PR #719] * Rework internals to pass around `ares_dns_record_t` instead of binary data, this introduces new public functions of `ares_query_dnsrec()` and `ares_send_dnsrec()`. [PR #730] Changes: * tests: when performing simulated queries, reduce timeouts to make tests run faster * Replace configuration file parsers with memory-safe parser. [PR #725] * Remove `acountry` completely, the manpage might still get installed otherwise. [Issue #718] Bugfixes: * CMake: don't overwrite global required libraries/definitions/includes which could cause build errors for projects chain building c-ares. [Issue #729] * On some platforms, `netinet6/in6.h` is not included by `netinet/in.h` and needs to be included separately. [PR #728] * Fix a potential memory leak in `ares_init()`. [Issue #724] * Some platforms don't have the `isascii()` function. Implement as a macro. [PR #721] * CMake: Fix Chain building if CMAKE runtime paths not set * NDots configuration should allow a value of zero. [PR #735] ==== colord ==== Subpackages: colord-color-profiles libcolord2 libcolorhug2 - Tag hardening patch as PATCH-FEATURE-OPENSUSE. ==== coreutils ==== Version update (9.4 -> 9.5) - Update to 9.5: Bug fixes: * chmod -R now avoids a race where an attacker may replace a traversed file with a symlink, causing chmod to operate on an unintended file. [This bug was present in "the beginning".] * cp, mv, and install no longer issue spurious diagnostics like "failed to preserve ownership" when copying to GNU/Linux CIFS file systems. They do this by working around some Linux CIFS bugs. * cp --no-preserve=mode will correctly maintain set-group-ID bits for created directories. Previously on systems that didn't support ACLs, cp would have reset the set-group-ID bit on created directories. [bug introduced in coreutils-8.20] * join and uniq now support multi-byte characters better. For example, 'join -tX' now works even if X is a multi-byte character, and both programs now treat multi-byte characters like U+3000 IDEOGRAPHIC SPACE as blanks if the current locale treats them so. * numfmt options like --suffix no longer have an arbitrary 127-byte limit. [bug introduced with numfmt in coreutils-8.21] * mktemp with --suffix now better diagnoses templates with too few X's. Previously it conflated the insignificant --suffix in the error. [bug introduced in coreutils-8.1] * sort again handles thousands grouping characters in single-byte locales where the grouping character is greater than CHAR_MAX. For e.g. signed character platforms with a 0xA0 (aka &nbsp) grouping character. [bug introduced in coreutils-9.1] * split --line-bytes with a mixture of very long and short lines no longer overwrites the heap (CVE-2024-0684). [bug introduced in coreutils-9.2] * tail no longer mishandles input from files in /proc and /sys file systems, on systems with a page size larger than the stdio BUFSIZ. [This bug was present in "the beginning".] * timeout avoids a narrow race condition, where it might kill arbitrary processes after a failed process fork. [bug introduced with timeout in coreutils-7.0] * timeout avoids a narrow race condition, where it might fail to kill monitored processes immediately after forking them. [bug introduced with timeout in coreutils-7.0] * wc no longer fails to count unprintable characters as parts of words. [bug introduced in textutils-2.1] Changes in behavior: * base32 and base64 no longer require padding when decoding. Previously an error was given for non padded encoded data. * base32 and base64 have improved detection of corrupted encodings. Previously encodings with non zero padding bits were accepted. * basenc --base16 -d now supports lower case hexadecimal characters. Previously an error was given for lower case hex digits. * cp --no-clobber, and mv -n no longer exit with failure status if existing files are encountered in the destination. Instead they revert to the behavior from before v9.2, silently skipping existing files. * ls --dired now implies long format output without hyperlinks enabled, and will take precedence over previously specified formats or hyperlink mode. * numfmt will accept lowercase 'k' to indicate Kilo or Kibi units on input, and uses lowercase 'k' when outputting such units in '--to=si' mode. * pinky no longer tries to canonicalize the user's login location by default, rather requiring the new --lookup option to enable this often slow feature. * wc no longer ignores encoding errors when counting words. Instead, it treats them as non white space. New features: * chgrp now accepts the --from=OWNER:GROUP option to restrict changes to files with matching current OWNER and/or GROUP, as already supported by chown(1). * chmod adds support for -h, -H,-L,-P, and --dereference options, providing more control over symlink handling. This supports more secure handling of CLI arguments, and is more consistent with chown, and chmod on other systems. * cp now accepts the --keep-directory-symlink option (like tar), to preserve and follow existing symlinks to directories in the destination. * cp and mv now accept the --update=none-fail option, which is similar to the --no-clobber option, except that existing files are diagnosed, and the command exits with failure status if existing files. The -n,--no-clobber option is best avoided due to platform differences. * env now accepts the -a,--argv0 option to override the zeroth argument of the command being executed. * mv now accepts an --exchange option, which causes the source and destination to be exchanged. It should be combined with - -no-target-directory (-T) if the destination is a directory. The exchange is atomic if source and destination are on a single file system that supports atomic exchange; --exchange is not yet supported in other situations. * od now supports printing IEEE half precision floating point with -t fH, or brain 16 bit floating point with -t fB, where supported by the compiler. * tail now supports following multiple processes, with repeated --pid options. Improvements: * cp,mv,install,cat,split now read and write a minimum of 256KiB at a time. This was previously 128KiB and increasing to 256KiB was seen to increase throughput by 10-20% when reading cached files on modern systems. * env,kill,timeout now support unnamed signals. kill(1) for example now supports sending such signals, and env(1) will list them appropriately. * SELinux operations in file copy operations are now more efficient, avoiding unneeded MCS/MLS label translation. * sort no longer dynamically links to libcrypto unless -R is used. This decreases startup overhead in the typical case. * wc is now much faster in single-byte locales and somewhat faster in multi-byte locales. - coreutils-9.4.split-CVE-2024-0684.patch: Remove now-upstream patch. - gnulib-readutmp-under-gdm.patch: Likewise. - gnulib-readutmp.patch: Likewise. - coreutils-i18n.patch: Remove multi-byte patches for join and uniq, as the upstream version now handles those tests. Pull in gnulib module mbchar manually, as it is a dependency of mbfile, but dropped out of the upstream dependency chain. - coreutils-misc.patch: Remove change for gnulib-tests/test-isnanl.h. - coreutils-fix-gnulib-time_r-tests.patch: Add upstream gnulib patch to skip French test if TZ='Europe/Paris' does not work. ==== coreutils-systemd ==== Version update (9.4 -> 9.5) - Update to 9.5: Bug fixes: * chmod -R now avoids a race where an attacker may replace a traversed file with a symlink, causing chmod to operate on an unintended file. [This bug was present in "the beginning".] * cp, mv, and install no longer issue spurious diagnostics like "failed to preserve ownership" when copying to GNU/Linux CIFS file systems. They do this by working around some Linux CIFS bugs. * cp --no-preserve=mode will correctly maintain set-group-ID bits for created directories. Previously on systems that didn't support ACLs, cp would have reset the set-group-ID bit on created directories. [bug introduced in coreutils-8.20] * join and uniq now support multi-byte characters better. For example, 'join -tX' now works even if X is a multi-byte character, and both programs now treat multi-byte characters like U+3000 IDEOGRAPHIC SPACE as blanks if the current locale treats them so. * numfmt options like --suffix no longer have an arbitrary 127-byte limit. [bug introduced with numfmt in coreutils-8.21] * mktemp with --suffix now better diagnoses templates with too few X's. Previously it conflated the insignificant --suffix in the error. [bug introduced in coreutils-8.1] * sort again handles thousands grouping characters in single-byte locales where the grouping character is greater than CHAR_MAX. For e.g. signed character platforms with a 0xA0 (aka &nbsp) grouping character. [bug introduced in coreutils-9.1] * split --line-bytes with a mixture of very long and short lines no longer overwrites the heap (CVE-2024-0684). [bug introduced in coreutils-9.2] * tail no longer mishandles input from files in /proc and /sys file systems, on systems with a page size larger than the stdio BUFSIZ. [This bug was present in "the beginning".] * timeout avoids a narrow race condition, where it might kill arbitrary processes after a failed process fork. [bug introduced with timeout in coreutils-7.0] * timeout avoids a narrow race condition, where it might fail to kill monitored processes immediately after forking them. [bug introduced with timeout in coreutils-7.0] * wc no longer fails to count unprintable characters as parts of words. [bug introduced in textutils-2.1] Changes in behavior: * base32 and base64 no longer require padding when decoding. Previously an error was given for non padded encoded data. * base32 and base64 have improved detection of corrupted encodings. Previously encodings with non zero padding bits were accepted. * basenc --base16 -d now supports lower case hexadecimal characters. Previously an error was given for lower case hex digits. * cp --no-clobber, and mv -n no longer exit with failure status if existing files are encountered in the destination. Instead they revert to the behavior from before v9.2, silently skipping existing files. * ls --dired now implies long format output without hyperlinks enabled, and will take precedence over previously specified formats or hyperlink mode. * numfmt will accept lowercase 'k' to indicate Kilo or Kibi units on input, and uses lowercase 'k' when outputting such units in '--to=si' mode. * pinky no longer tries to canonicalize the user's login location by default, rather requiring the new --lookup option to enable this often slow feature. * wc no longer ignores encoding errors when counting words. Instead, it treats them as non white space. New features: * chgrp now accepts the --from=OWNER:GROUP option to restrict changes to files with matching current OWNER and/or GROUP, as already supported by chown(1). * chmod adds support for -h, -H,-L,-P, and --dereference options, providing more control over symlink handling. This supports more secure handling of CLI arguments, and is more consistent with chown, and chmod on other systems. * cp now accepts the --keep-directory-symlink option (like tar), to preserve and follow existing symlinks to directories in the destination. * cp and mv now accept the --update=none-fail option, which is similar to the --no-clobber option, except that existing files are diagnosed, and the command exits with failure status if existing files. The -n,--no-clobber option is best avoided due to platform differences. * env now accepts the -a,--argv0 option to override the zeroth argument of the command being executed. * mv now accepts an --exchange option, which causes the source and destination to be exchanged. It should be combined with - -no-target-directory (-T) if the destination is a directory. The exchange is atomic if source and destination are on a single file system that supports atomic exchange; --exchange is not yet supported in other situations. * od now supports printing IEEE half precision floating point with -t fH, or brain 16 bit floating point with -t fB, where supported by the compiler. * tail now supports following multiple processes, with repeated --pid options. Improvements: * cp,mv,install,cat,split now read and write a minimum of 256KiB at a time. This was previously 128KiB and increasing to 256KiB was seen to increase throughput by 10-20% when reading cached files on modern systems. * env,kill,timeout now support unnamed signals. kill(1) for example now supports sending such signals, and env(1) will list them appropriately. * SELinux operations in file copy operations are now more efficient, avoiding unneeded MCS/MLS label translation. * sort no longer dynamically links to libcrypto unless -R is used. This decreases startup overhead in the typical case. * wc is now much faster in single-byte locales and somewhat faster in multi-byte locales. - coreutils-9.4.split-CVE-2024-0684.patch: Remove now-upstream patch. - gnulib-readutmp-under-gdm.patch: Likewise. - gnulib-readutmp.patch: Likewise. - coreutils-i18n.patch: Remove multi-byte patches for join and uniq, as the upstream version now handles those tests. Pull in gnulib module mbchar manually, as it is a dependency of mbfile, but dropped out of the upstream dependency chain. - coreutils-misc.patch: Remove change for gnulib-tests/test-isnanl.h. - coreutils-fix-gnulib-time_r-tests.patch: Add upstream gnulib patch to skip French test if TZ='Europe/Paris' does not work. ==== cpio ==== Subpackages: cpio-mt - Fix build with gcc14, bsc#1221712 * fix-gcc14.patch ==== emacs ==== Subpackages: emacs-el emacs-eln emacs-info emacs-nox etags - Fix the temporary parking path by using %{version} (hint from Andre Barros) ==== evince ==== Subpackages: evince-plugin-pdfdocument libevdocument3-4 libevview3-3 typelib-1_0-EvinceDocument-3_0 typelib-1_0-EvinceView-3_0 - Properly tag patches as PATCH-FIX-SLE. ==== freerdp2 ==== Version update (2.11.2 -> 2.11.5) Subpackages: libfreerdp2-2 libwinpr2-2 - Update Source0 URL to make it valid with the actual Source0. - Fix file conflict of wlog.7 with freerdp3 - Update to version 2.11.5: * Fix integer overflow in progressive decoder * Update OpenSSL API usage for compatiblility with newer versions (#9747) * Prevent NULL dereference for single thread decoder (#9712) - Modify package names to freerdp2: * This allows to have a freerdp version 2 and freerdp version 3 simultaneously installed - Add freerdp-CVE-2023-40574-to-2023-40576.patch * Fix CVE-2023-40574 - bsc#1214869 Out-Of-Bounds Write in general_YUV444ToRGB_8u_P3AC4R_BGRX * Fix CVE-2023-40575 - bsc#1214870 Out-Of-Bounds Read in general_YUV444ToRGB_8u_P3AC4R_BGRX * Fix CVE-2023-40576 - bsc#1214871 Out-Of-Bounds Read in RleDecompress ==== fwupd ==== Subpackages: fwupd-bash-completion libfwupd2 typelib-1_0-Fwupd-2_0 - dbxtool is built unconditionally on all architectures: move it out of the condition in the files section and also unconditionally provide/obsolete the old version. ==== gobject-introspection ==== Version update (1.80.0 -> 1.80.1) Subpackages: girepository-1_0 libgirepository-1_0-1 - Update to version 1.80.1: + Require Python 3.8 when running mypy. + Ensure that POSIX types follow the target architecture. + Look for finish functions inside the list of constructors. ==== gtk4 ==== Version update (4.14.1 -> 4.14.2) Subpackages: gtk4-schema gtk4-tools libgtk-4-1 typelib-1_0-Gtk-4_0 - Update to version 4.14.2: + GtkScale: Improve positioning of values in some cases. + Theme: Make progress in entries visible. + Accessibility: Fix text insertion handling. + GDK: - dnd: Use the default cursor durion motion - dnd: Use a better cursor for indicating the move action + GSK: - gl: Handle offloads in offscreen context better - Fix text rendering problems with some fonts + Wayland: - Tighten up some protocol version checks - Use the presentation time protocol - Fix a crash with subsurfaces - Improve settings portal handling + Debugging: Add font settings in the inspector. + Demos: - Clean up the application demo - Update cursor images for the cursor demo + Updated translations. ==== guestfs-tools ==== - Upstream bug fixes Update-virt-customize-generated-files.patch Initialise-bar-fp-as-NULL.patch ==== harfbuzz ==== Version update (8.3.0 -> 8.4.0) Subpackages: libharfbuzz-gobject0 libharfbuzz-icu0 libharfbuzz-subset0 libharfbuzz0 typelib-1_0-HarfBuzz-0_0 - update to version 8.4.0: + When subsetting, place variation store at the end of âGDEFâ table to fix shaping issues with some versions of Adobe InDesign. + Various build fixes - update to version 8.3.1: + Fix hb_style_get_value() in fonts with âSTATâ table + Properly handle negative offsets in CFF table + Update IANA Language Subtag Registry to 2024-03-07 + Subsetter now supports subsetting âBASEâ table + Subsetter will update âhheaâ font metrics in sync with âOS/2â ones. + â--variationsâ option of âhb-subsetâ now supports leaving out values that should be unchanged, e.g. âwght=:500:â will change the default and keep max and min unchanged. It also supports â*=dropâ to to pin all axes to default location. + Fix hb_ot_math_get_glyph_kerning() to match updated âMATHâ table spec. + Support legacy MacRoman encoding in âcmapâ table. + Various build fixes. + Various subsetting and instancing fixes. ==== inxi ==== Version update (3.3.33 -> 3.3.33+3) - Updated to version 3.3.33-1+3: + A quick point release, one critical bug fix, and a few new features and enhancements. + Code cleanup. - Add service to pull from git and avoid tarball release. - Adjust spec file for service use. ==== kate ==== Subpackages: kate-plugins - Add a couple recommended plugins to preview files in kate ==== kdsoap-qt6 ==== Version update (2.1.1 -> 2.2.0) - update to 2.2.0: * buildsystem - Add co-installability of Qt5 and Qt6 headers back. Installs Qt6 headers into their own subdirectory so client code still works, but can be co-installed with Qt5 again. * Add KDSoapClientInterface::setMessageAddressingProperties() so that WS-Addressing support can be used with WSDL-generated services (issue #254) * Don't require a SOAP action in order to write addressing properties (also issue #254) * WSDL parser / code generator changes, applying to both client and server side * Improve -import-path ==== kernel-firmware ==== Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-ath12k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Drop duplicated WHENCE from kernel-firmware-* subpackages (bsc#1222319) ==== kernel-source ==== Version update (6.8.1 -> 6.8.4) - Linux 6.8.4-rc1 (bsc#1012628). - Revert "workqueue.c: Increase workqueue name length" (bsc#1012628). - Revert "workqueue: Move pwq->max_active to wq->max_active" (bsc#1012628). - Revert "workqueue: Factor out pwq_is_empty()" (bsc#1012628). - Revert "workqueue: Replace pwq_activate_inactive_work() with [__]pwq_activate_work()" (bsc#1012628). - Revert "workqueue: Move nr_active handling into helpers" (bsc#1012628). - Revert "workqueue: Make wq_adjust_max_active() round-robin pwqs while activating" (bsc#1012628). - Revert "workqueue: RCU protect wq->dfl_pwq and implement accessors for it" (bsc#1012628). - Revert "workqueue: Introduce struct wq_node_nr_active" (bsc#1012628). - Revert "workqueue: Implement system-wide nr_active enforcement for unbound workqueues" (bsc#1012628). - Revert "workqueue: Don't call cpumask_test_cpu() with -1 CPU in wq_update_node_max_active()" (bsc#1012628). - Revert "workqueue: Shorten events_freezable_power_efficient name" (bsc#1012628). - commit 1089550 - Linux 6.8.3 (bsc#1012628). - drm/vmwgfx: Unmap the surface before resetting it on a plane state (bsc#1012628). - wifi: brcmfmac: avoid invalid list operation when vendor attach fails (bsc#1012628). - media: staging: ipu3-imgu: Set fields before media_entity_pads_init() (bsc#1012628). - arm64: dts: qcom: sc7280: Add additional MSI interrupts (bsc#1012628). - remoteproc: virtio: Fix wdg cannot recovery remote processor (bsc#1012628). - clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd (bsc#1012628). - smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr() (bsc#1012628). - smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity() (bsc#1012628). - arm: dts: marvell: Fix maxium->maxim typo in brownstone dts (bsc#1012628). - drm/vmwgfx: Fix possible null pointer derefence with invalid contexts (bsc#1012628). - arm64: dts: qcom: sm8450-hdk: correct AMIC4 and AMIC5 microphones (bsc#1012628). - serial: max310x: fix NULL pointer dereference in I2C instantiation (bsc#1012628). - drm/vmwgfx: Fix the lifetime of the bo cursor memory (bsc#1012628). - pci_iounmap(): Fix MMIO mapping leak (bsc#1012628). - media: xc4000: Fix atomicity violation in xc4000_get_frequency (bsc#1012628). - media: mc: Add local pad to pipeline regardless of the link state (bsc#1012628). - media: mc: Fix flags handling when creating pad links (bsc#1012628). - media: nxp: imx8-isi: Check whether crossbar pad is non-NULL before access (bsc#1012628). - media: mc: Add num_links flag to media_pad (bsc#1012628). - media: mc: Rename pad variable to clarify intent (bsc#1012628). - media: mc: Expand MUST_CONNECT flag to always require an enabled link (bsc#1012628). - media: nxp: imx8-isi: Mark all crossbar sink pads as MUST_CONNECT (bsc#1012628). - md: use RCU lock to protect traversal in md_spares_need_change() (bsc#1012628). - KVM: Always flush async #PF workqueue when vCPU is being destroyed (bsc#1012628). - arm64: dts: qcom: sm8550-qrd: correct WCD9385 TX port mapping (bsc#1012628). - arm64: dts: qcom: sm8550-mtp: correct WCD9385 TX port mapping (bsc#1012628). - cpufreq: amd-pstate: Fix min_perf assignment in amd_pstate_adjust_perf() (bsc#1012628). - thermal/intel: Fix intel_tcc_get_temp() to support negative CPU temperature (bsc#1012628). - powercap: intel_rapl: Fix a NULL pointer dereference (bsc#1012628). - powercap: intel_rapl: Fix locking in TPMI RAPL (bsc#1012628). - powercap: intel_rapl_tpmi: Fix a register bug (bsc#1012628). - powercap: intel_rapl_tpmi: Fix System Domain probing (bsc#1012628). - powerpc/smp: Adjust nr_cpu_ids to cover all threads of a core (bsc#1012628). - powerpc/smp: Increase nr_cpu_ids to include the boot CPU (bsc#1012628). - sparc64: NMI watchdog: fix return value of __setup handler (bsc#1012628). - sparc: vDSO: fix return value of __setup handler (bsc#1012628). - crypto: qat - change SLAs cleanup flow at shutdown (bsc#1012628). - crypto: qat - resolve race condition during AER recovery (bsc#1012628). - selftests/mqueue: Set timeout to 180 seconds (bsc#1012628). - pinctrl: qcom: sm8650-lpass-lpi: correct Kconfig name (bsc#1012628). - ext4: correct best extent lstart adjustment logic (bsc#1012628). - drm/amdgpu/display: Address kdoc for 'is_psr_su' in ... changelog too long, skipping 1837 lines ... - commit 6a29422 ==== kirigami-addons6 ==== Version update (1.0.1 -> 1.1.0) - Update to 1.1.0 * New FormCard delegate: FormColorDelegate * New delegate container: FormCardDialog * Fixed a newline bug in the AboutKDE component * The default size of MessageDialog was decreased * Fixed the autoplay of the video delegate for the maximized album component ==== kmod ==== Version update (31 -> 32) Subpackages: kmod-bash-completion libkmod2 - Update to release 32 * Drop python bindings * Remove unmaintained experimental tool - Drop upstreamed patches * configure-Detect-openssl-sm3-support.patch * man-depmod.d-Fix-incorrect-usr-lib-search-path.patch * usr-lib-modprobe.patch * kmod-Add-pkgconfig-file-with-kmod-compile-time-confi.patch * tools-depmod-fix-Walloc-size.patch * libkmod-remove-pkcs7-obj_to_hash_algo.patch * usr-lib-modules.patch * configure-Check-that-provided-paths-are-absolute.patch - Refresh no-stylesheet-download.patch ==== krb5 ==== Subpackages: krb5-client - Add crypto-policies support [bsc#1211301] * Update krb5.conf in vendor-files.tar.bz2 ==== libapparmor ==== - Use full URLs for source tarball and signature. ==== libbpf ==== Version update (1.3.0 -> 1.4.0) - update to 1.4.0: * support for BPF token throughout low-level and high-level APIs (see also LIBBPF_BPF_TOKEN_PATH envvar) * struct_ops functionality around handling multi-kernel compatibility using BPF CO-RE principles and approaches * BPF arena map support * support __arena tagged global variables, which are automatically put into BPF arena map * BPF cookie support for raw tracepoint BPF programs in attach APIs loaded or created, respectively * add SEC("sk_skb/verdict") support * support global subprog argument tagging for for kprobe/uprobe, and perf_event BPF program with newly added __arg_ctx, __arg_nonnull, __arg_nullable, __arg_trusted, and __arg_arena annotations * add bpf_core_cast() macro, improving ergonomics of bpf_rdonly_cast() BPF helper * __long() macro added for specifying 64-bit values when declaring BTF-defined maps * better GCC-BPF support in BPF CO-RE macros in bpf_core_read.h header * show specific error messages when attempting to use struct bpf_program/bpf_map instances there were not loaded or created * fix inner map's max_entries setting logic * btf_ext__raw_data() and btf__new_split() APIs are added back * ignore DWARF sections in BPF linker sanity checks, improving handling of some corner cases * fix potential NULL dereference when handling corrupted ELF files. ==== libcanberra ==== Subpackages: canberra-gtk-play libcanberra-gtk-module-common libcanberra-gtk0 libcanberra-gtk2-module libcanberra-gtk3-0 libcanberra-gtk3-module libcanberra0 - Don't recommend the gtk modules unconditionally. They already have conditional supplements. - Switch from packageand(x:y) to boolean dependencies - Use %license ==== libdeflate ==== Version update (1.19 -> 1.20) - update to 1.20: * Improved CRC-32 performance on recent x86 CPUs by adding * VPCLMULQDQ-accelerated implementations using 256-bit and 512-bit vectors. * Improved Adler-32 performance on recent x86 CPUs by adding * VNNI-accelerated implementations using 256-bit and 512-bit vectors. * Improved CRC-32 and Adler-32 performance on short inputs. * Optimized the portable implementation of Adler-32. * Added some basic optimizations for RISC-V. * Dropped support for gcc versions older than v4.9 (released in 2014) and clang versions older than v3.9 (released in 2016). * Dropped support for CRC-32 acceleration on 32-bit ARM using the ARMv8 pmull or crc32 instructions. ==== libguestfs ==== Subpackages: libguestfs-appliance libguestfs-xfs libguestfs0 - Upstream bug fixes Split-chown-parameter-on-character.patch Initialise-bar-fp-as-NULL.patch ==== libproxy-backend ==== Version update (0.5.3 -> 0.5.4) - Update to version 0.5.4: + Add golang link to application page. + Improve libproxy test coverage. + Improve coverage. + Specify library version more completely. + Use the correct separator character for Windows ProxyOverride. + Improve handling of Windows proxy settings. + Add curl option to the generated config for backend instead. + Set initial state to online. + Windows: Detect scheme presence in proxy URLs more robustly. + Fix broken WPAD proxy resolution. ==== libproxy-client ==== Version update (0.5.3 -> 0.5.4) - Update to version 0.5.4: + Add golang link to application page. + Improve libproxy test coverage. + Improve coverage. + Specify library version more completely. + Use the correct separator character for Windows ProxyOverride. + Improve handling of Windows proxy settings. + Add curl option to the generated config for backend instead. + Set initial state to online. + Windows: Detect scheme presence in proxy URLs more robustly. + Fix broken WPAD proxy resolution. ==== libsrtp2 ==== Version update (2.5.0 -> 2.6.0) - version update to 2.6.0 * remove use of pointers to 32bit values * Cleaning up cmake and enabled more warnings. * start using const on internal arguments * Some srtp_driver fixes * remove travis reference from README.md * meson.build: implement mbedtls support * iv length is constant so set only once * Add x86 SIMD optimizations to crypto datatypes * Add a missing typedef for stream list ctx * cmake: Rename TEST_APPS as LIBSRTP_TEST_APPS option * cmake: Support configuring as subproject ==== libssh2_org ==== - Fix an issue with Encrypt-then-MAC family. [bsc#1221622] * Test the ETM feature in the remote end's configuration when receiving data. Upstream issue: #1331. * Add libssh2_org-ETM-remote.patch - Always add the KEX pseudo-methods "ext-info-c" and "kex-strict-c-v00(a)openssh.com" when configuring custom method list. [bsc#1218971, CVE-2023-48795] * The strict-kex extension is announced in the list of available KEX methods. However, when the default KEX method list is modified or replaced, the extension is not added back automatically. * Add libssh2_org-CVE-2023-48795-ext.patch ==== liburing ==== Version update (2.4 -> 2.5) - Update to 2.5: * Add support for io_uring_prep_cmd_sock() * Add support for application allocated ring memory, for placing rings in huge mem. Available through io_uring_queue_init_mem(). * Add support for registered ring fds * Various documentation updates * Various fixes - Remove (they are upstream) * test-io_uring_register-fix-errno-confusion-and-new-e.patch * tests-don-t-expect-multishot-recv-overflow-backloggi.patch - Add * test-recv-multishot-wait-for-the-right-amount-of-CQE.patch (to fix test errors on the 6.8.2 kernel) * test-no-mmap-inval-0-return-is-fine-too.patch (fix the test) ==== libuv ==== Version update (1.47.0 -> 1.48.0) - Update to version 1..48.0 * CVE-2024-24806: Improper Domain Lookup that potentially leads to SSRF attacks (bsc#1219724) * misc: remove deprecated stalebot file * misc: ignore libuv-release-tool files * build,win: remove extraneous -lshell32 * build,win: work around missing uuid.dll on MinGW * build: disable windows asan buildbot * build: add .cache clangd folder to .gitignore * build: re-enable msvc-asan job on CI * linux: disable io_uring on hppa below kernel 6.1.51 * linux: remove HAVE_IFADDRS_H macro * linux: fix bind/connect for abstract sockets * linux: retry fs op if unsupported by io_uring * linux: disable io_uring on ppc64 and ppc64le * unix,win: utility for setting priority for thread * unix,win: fix read past end of pipe name buffer * unix,win: fix busy loop with zero timeout timers * unix,win: reset the timer queue on stop * unix: ignore ifaddrs with NULL ifa_addr * unix: unbreak macOS < 10.14 * unix: correct pwritev conditional * unix: support full TCP keep-alive on Solaris * unix: optimize uv__tcp_keepalive cpp directives * freebsd: fix F_KINFO file path handling * freebsd: fix build on non-intel archs * aix: disable ipv6 link local * aix,ibmi: use uv_interface_addresses instead of getifaddrs * win: remove check for UV_PIPE_NO_TRUNCATE * win: honor NoDefaultCurrentDirectoryInExePath env var * win: stop using deprecated names * win: replace c99 comments with c89 comments * win: fix ESRCH implementation * win/spawn: optionally run executable paths with no file extension * test: don't run tcp_writealot under msan * test: check if ipv6 link-local traffic is routable * test: skip tcp-write-in-a-row on IBM i * test: empty strings are not valid IDNA * test_fs.c: Fix issue on 32-bit systems using btrfs * idna: fix compilation warning * pipe: add back error handling to connect / bind * fix: always zero-terminate idna output * fix: reject zero-length idna inputs * doc: move cjihrig to emeriti * doc: add very basic Security Policy document * Merge pull request from GHSA-f74f-cvh7-c6q6 - Remove ppc64-disable-liburing.patch because it was applied in the current source code ==== libvirt ==== Version update (10.1.0 -> 10.2.0) Subpackages: libvirt-client libvirt-daemon-common libvirt-daemon-config-network libvirt-daemon-driver-interface libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-lock libvirt-daemon-log libvirt-daemon-plugin-lockd libvirt-daemon-qemu libvirt-libs - Update to libvirt 10.2.0 - CVE-2024-2494 - Many incremental improvements and bug fixes, see https://libvirt.org/news.html#v10-2-0-2024-04-02 ==== libzypp ==== Version update (17.32.0 -> 17.32.2) - Fixup New VendorSupportOption flag VendorSupportSuperseded (jsc#OBS-301, jsc#PED-8014) Fixed the name of the keyword to "support_superseded" as it was agreed on in jsc#OBS-301. - version 17.32.2 (32) - Add resolver option 'removeUnneeded' to file weak remove jobs for unneeded packages (bsc#1175678) - version 17.32.1 (32) ==== llvm18 ==== Version update (18.1.2 -> 18.1.3) Subpackages: clang-tools clang18 libLLVM18 libclang-cpp18 libclang13 llvm18-gold - Update to version 18.1.3. * Fixes ThreadSanitizer failures for glibc's LoongArch and certain RISC-V ports when fstat is used. * `transform.structured.convert_to_loops` now properly deletes its target op. * Fix a `llvm.usub.with.overflow.i128` wrong code generation regression that was introduced with LLVM 18.1.0. * MemorySanitizer on Linux can now run even when maximum-entropy address-space layout randomization is configured globally (as is becoming increasingly common). MemorySanitizer can automatically re-exec ASLR-off for the process if needed, instead of aborting. * Fixed a Clang 18.x regression which increased binary size and stack usage with `-ftrivial-auto-var-init`. - Set directories for configuration files: /etc/clang for system- wide configuration and ~/.config/clang for users. For details see https://clang.llvm.org/docs/UsersManual.html#configuration-files. - Use old conflicts/provides for python3-clang on Leap. ==== mpg123 ==== Version update (1.32.5 -> 1.32.6) Subpackages: libmpg123-0 mpg123-openal - Update to version 1.32.6 build: * Detect forced 64 bit offsets on a dual-mode system that used to default to 32 bits and drop ambiguous suffix-less symbols in that case. This avoids subtle ABI breakage (causing memory corruption) with existing binaries and instead has them fail during runtime linking. You trigger that when having -D_FILE_OFFSET_BITS=64 in your compiler flags during mpg123 build. ==== nghttp2 ==== Version update (1.60.0 -> 1.61.0) - version update to 1.61.0 * Fixes CVE-2024-28182 [bsc#1221399] * nghttpx: Shutdown h3 stream read with trailer as well by @tatsuhiro-t in #2087 * Checkout with submodules by @jonaski in #2093 * Respect BUILD_STATIC_LIBS and add option for tests by @jonaski in #2092 * build(deps): bump golang.org/x/net from 0.21.0 to 0.22.0 by @dependabot in #2097 * Workaround llvm issue on github ubuntu runner by @tatsuhiro-t in #2098 * docker: Use copy --link by @tatsuhiro-t in #2099 * Nghttpx header idle timeout by @tatsuhiro-t in #2100 * nghttpx: Fix frontend-header-timeout does not work in config file by @tatsuhiro-t in #2101 * Rewrite hexdump by @tatsuhiro-t in #2102 * Switch to distroless/base-nossl by @tatsuhiro-t in #2103 * Bump ngtcp2 by @tatsuhiro-t in #2105 * nghttpx: Simplify quic connection close handling by @tatsuhiro-t in #2106 * build(deps): bump github.com/quic-go/quic-go from 0.41.0 to 0.42.0 by @dependabot in #2107 * autotools: Use tar-ustar automake option by @tatsuhiro-t in #2108 * Automate release process by @tatsuhiro-t in #2109 * autotools: Switch to tar-pax by @tatsuhiro-t in #2110 * nghttpx: Drop a UDP datagram from well-known port by @tatsuhiro-t in #2111 * nghttpx: Fix port byte order by @tatsuhiro-t in #2112 * h2load: Allow host header to be overridden by @tatsuhiro-t in #2113 * nghttpx: Rework QUIC stateless reset packet size by @tatsuhiro-t in #2114 * nghttpx: More QUIC prohibited ports by @tatsuhiro-t in #2115 * Add actions/stale by @tatsuhiro-t in #2116 * nghttpx: Discard UDP datagram that is too short to be a valid QUIC packet by @tatsuhiro-t in #2117 * nghttp: Support SSLKEYLOGFILE by @tatsuhiro-t in #2119 * No rfc7540 priority fix by @tatsuhiro-t in #2120 * Further reduce Stateless reset emission by @tatsuhiro-t in #2122 * nghttpx: Rework Connection ID construction by @tatsuhiro-t in #2124 * Nghttpx faster worker lookup by @tatsuhiro-t in #2125 * nghttpx: Split thread into worker_process and thread by @tatsuhiro-t in #2126 * bpf: Drop bad QUIC packet by @tatsuhiro-t in #2127 * cmake: check SSL_provide_quic_data when ENABLE_HTTP3 is ON by @jimmy-park in #2128 * nghttpx: Allocate 3 bits for QUIC configuration in Connection ID by @tatsuhiro-t in #2129 * nghttpx: Migrate to ares_getaddrinfo by @tatsuhiro-t in #2132 * Bump munit by @tatsuhiro-t in #2131 * nghttpx: Fix error message by @tatsuhiro-t in #2133 * nghttpd: Fix read stall by @tatsuhiro-t in #2134 - gcc7.patch: Fix compilation for SLE-15 (jsc#PED-8206) ==== openSUSE-release ==== Version update (20240402 -> 20240407) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== openssh ==== Subpackages: openssh-clients openssh-common openssh-server - Use %config(noreplace) for sshd_config . In any case, it's recommended to drop a file in sshd_config.d instead of editing sshd_config (bsc#1221063) - Use %{_libexecdir} when removing ssh-keycat instead of the hardcoded path so it works in TW and SLE. - Add crypto-policies support [bsc#1211301] * Add patches: - openssh-9.6p1-crypto-policies.patch - openssh-9.6p1-crypto-policies-man.patch ==== orca ==== Version update (46.0 -> 46.1) - Update to version 46.1: + Fix issue causing flat review clicking to fail in some Gtk apps. + Fix regression in SayAll upon page load. + Fix presentation of new radio button groups. + Avoid triggering crash in Pidgin. + Fix issue in which Orca appeared to hang when where am I was used immediately after page load of a large document. ==== pango ==== Subpackages: libpango-1_0-0 typelib-1_0-Pango-1_0 - added GraphicsMagick package as Recommends. The invocation of pango-view with the ft2 backend requires the gm command found in that package ==== perl-CGI ==== Version update (4.600.0 -> 4.640.0) - updated to 4.64 see /usr/share/doc/packages/perl-CGI/Changes 4.64 2024-03-18 [ META ] - pass --no-xattrs to tar in Makefile to fix tar backwards compat (GH #264, thanks to ryandesign) 4.63 2024-03-01 [ FIX ] - ->url returns a string in all cases (GH #263, thanks to Sketch6307) 4.62 2024-03-01 [ FIX ] - ->url now returns the correct thing for ipv6 brackets (GH #259, thanks to eserte) 4.61 2024-01-08 [ ENHANCEMENT ] - Support Paritioned cookies in CGI::Cookie (GH #262, thanks to dakkar) ==== phodav ==== - Tag hardening patch as PATCH-FEATURE-OPENSUSE. ==== plasma6-desktop ==== Subpackages: plasma6-desktop-emojier - Add "-DBUILD_KCM_MOUSE_X11=OFF" for s390x - Move touchpad and mouse configuration to all (also for s390x) ==== python-M2Crypto ==== - Build for modern python stack on SLE/Leap ==== python-Pillow ==== Version update (10.2.0 -> 10.3.0) - update to 10.3.0 (bsc#1222262, CVE-2024-28219): * CVE-2024-28219: Use strncpy to avoid buffer overflow #7928 [radarhere, hugovk] * Deprecate eval(), replacing it with lambda_eval() and unsafe_eval() #7927 [radarhere, hugovk] * Raise ValueError if seeking to greater than offset-sized integer in TIFF #7883 [radarhere] * Add --report argument to __main__.py to omit supported formats #7818 [nulano, radarhere, hugovk] * Added RGB to I;16, I;16L, I;16B and I;16N conversion #7918, [#7920] [radarhere] * Fix editable installation with custom build backend and configuration options #7658 [nulano, radarhere] * Fix putdata() for I;16N on big-endian #7209 [Yay295, hugovk, radarhere] * Determine MPO size from markers, not EXIF data #7884 [radarhere] * Improved conversion from RGB to RGBa, LA and La #7888 [radarhere] * Support FITS images with GZIP_1 compression #7894 [radarhere] * Use I;16 mode for 9-bit JPEG 2000 images #7900 [scaramallion, radarhere] * Raise ValueError if kmeans is negative #7891 [radarhere] * Remove TIFF tag OSUBFILETYPE when saving using libtiff #7893 [radarhere] * Raise ValueError for negative values when loading P1-P3 PPM images #7882 [radarhere] * Added reading of JPEG2000 palettes #7870 [radarhere] * Added alpha_quality argument when saving WebP images #7872 [radarhere] * Fixed joined corners for ImageDraw rounded_rectangle() non- integer dimensions #7881 [radarhere] * Stop reading EPS image at EOF marker #7753 [radarhere] * PSD layer co-ordinates may be negative #7706 [radarhere] * Use subprocess with CREATE_NO_WINDOW flag in ImageShow WindowsViewer #7791 [radarhere] * When saving GIF frame that restores to background color, do not fill identical pixels #7788 [radarhere] * Fixed reading PNG iCCP compression method #7823 [radarhere] * Allow writing IFDRational to UNDEFINED tag #7840 [radarhere] * Fix logged tag name when loading Exif data #7842 [radarhere] * Use maximum frame size in IHDR chunk when saving APNG images [#7821] [radarhere] * Prevent opening P TGA images without a palette #7797 [radarhere] * Use palette when loading ICO images #7798 [radarhere] * Use consistent arguments for load_read and load_seek #7713 [radarhere] * Turn off nullability warnings for macOS SDK #7827 [radarhere] * Fix shift-sign issue in Convert.c #7838 [r-barnes, radarhere] * Open 16-bit grayscale PNGs as I;16 #7849 [radarhere] * Handle truncated chunks at the end of PNG images #7709 [lajiyuan, radarhere] * Match mask size to pasted image size in GifImagePlugin #7779 [radarhere] * Release GIL while calling WebPAnimDecoderGetNext #7782 [evanmiller, radarhere] * Fixed reading FLI/FLC images with a prefix chunk #7804 [twolife] * Update wl-paste handling and return None for some errors in grabclipboard() on Linux #7745 [nik012003, radarhere] * Remove execute bit from setup.py #7760 [hugovk] * Do not support using test-image-results to upload images after test failures #7739 [radarhere] * Changed ImageMath.ops to be static #7721 [radarhere] * Fix APNG info after seeking backwards more than twice #7701 [esoma, radarhere] * Deprecate ImageCms constants and versions() function #7702 [nulano, radarhere] * Added PerspectiveTransform #7699 [radarhere] * Add support for reading and writing grayscale PFM images [#7696] [nulano, hugovk] * Add LCMS2 flags to ImageCms #7676 [nulano, radarhere, hugovk] * Rename x64 to AMD64 in winbuild #7693 [nulano] ==== python-cryptography ==== Version update (42.0.4 -> 42.0.5) - update to 42.0.5: * Limit the number of name constraint checks that will be performed in :mod:`X.509 path validation <cryptography.x509.verification>` to protect against denial of service attacks. * Upgrade pyo3 version, which fixes building on PowerPC. ==== python-httpcore ==== Version update (1.0.4 -> 1.0.5) - update to 1.0.5: * Handle `EndOfStream` exception for anyio backend. * Allow trio `0.25.*` series in package dependancies. ==== python-libvirt-python ==== Version update (10.1.0 -> 10.2.0) - Update to 10.2.0 - Add all new APIs and constants in libvirt 10.2.0 ==== python-numpy ==== - Add patch to fix detection of some features: * 0001-feature-module-Fix-handling-of-multiple-conflicts-pe.patch - Add patch to fix test failure on some platforms (boo#1221902): * 0001-BUG-Fix-test_impossible_feature_enable-failing-witho.patch ==== python-pyasn1 ==== Version update (0.5.1 -> 0.6.0) - update to 0.6.0: * Added support for previously missing RELATIVE-OID construct * Updated link to Layman's Guide Now it provides a link to links to a formatted PDF version of the paper, at a stable domain (researchgate), using https * Removed support for EOL Python 2.7, 3.6, 3.7 ==== python-pyzmq ==== - Add %{?sle15_python_module_pythons} ==== python-typing_extensions ==== Version update (4.10.0 -> 4.11.0) - update to 4.11.0: * Fix tests on Python 3.13.0a5. Patch by Jelle Zijlstra. * Fix the runtime behavior of type parameters with defaults * Fix minor discrepancy between error messages produced by `typing` and `typing_extensions` on Python 3.10. * When `include_extra=False`, `get_type_hints()` now strips `ReadOnly` from the annotation. ==== raspberrypi-firmware ==== Version update (2023.11.21 -> 2024.03.27) - Update to a43358b (2024-03-27): * firmware: sdram: Implement get_info for 2711 See: raspberrypi/linux#6045 * Revert "firmware: sdram: Implement get_info for 2711" This reverts commit f762e4a * firmware: sdram: Implement get_info for 2711 See: raspberrypi/linux#6045 * firmware: sdram: Handle mode registers and refresh updates in sdram driver See: #1854 * firmware: arm_loader: mailbox: Optionally return extended board rev See: #1831 * firmware: arm_loader: Set dma-channel-mask as well as brcm,dma-channel-mask * firmware: board_info: Add Compute Module 5 model info string * firmware: arm_loader: Move non-kernels back to 512KB See: #1868 * firmware: Increase DATA_READY_TIMEOUT in sdhost.h * firmware: arm_loader/bootloader: Add HAT+ support * firmware: hat_lib: Avoid an I2C double-close - Enable v3d "Broadcom V3D DRM Driver" (bsc#1218780). See also: https://docs.mesa3d.org/drivers/v3d.html ==== raspberrypi-firmware-config ==== Version update (2023.11.21 -> 2024.03.27) - Update to a43358b (2024-03-27): * firmware: sdram: Implement get_info for 2711 See: raspberrypi/linux#6045 * Revert "firmware: sdram: Implement get_info for 2711" This reverts commit f762e4a * firmware: sdram: Implement get_info for 2711 See: raspberrypi/linux#6045 * firmware: sdram: Handle mode registers and refresh updates in sdram driver See: #1854 * firmware: arm_loader: mailbox: Optionally return extended board rev See: #1831 * firmware: arm_loader: Set dma-channel-mask as well as brcm,dma-channel-mask * firmware: board_info: Add Compute Module 5 model info string * firmware: arm_loader: Move non-kernels back to 512KB See: #1868 * firmware: Increase DATA_READY_TIMEOUT in sdhost.h * firmware: arm_loader/bootloader: Add HAT+ support * firmware: hat_lib: Avoid an I2C double-close ==== re2 ==== Version update (20240301 -> 20240401) - update to 2024-04-01: * Fix SIGSEGV if Match is called before Compile * remove unsuppressable stderr message when compiling an empty re2.Filter ==== snowball ==== - Properly tag patches as PATCH-FIX-OPENSUSE. ==== sushi ==== Version update (45.0 -> 46.0) - Update to version 46.0: + Make webkit2gtk optional. + Fix freeze when libreoffice is missing. + Fix tick position for fullscreen video. + Misc cleanup. + Updated translations. ==== systemd ==== Subpackages: libsystemd0 libudev1 systemd-boot systemd-container systemd-coredump udev - Move systemd-repart from experimental to udev. - Add 0001-Drop-support-for-efivar-SystemdOptions.patch (bsc#1220338) Upstream deprecated it and plan to drop it in the future. Let's get ahead and drop it now as this feature is unlikely to be used on SUSE distros and it might be used to gain access to encrypted SLEM systems with unattended disk unlock and with secure boot disabled. - The following patches have been merged into SUSE/v255 branch hence removed from the OBS project. 5006-cgroup-Add-EffectiveMemoryMax-EffectiveMemoryHigh-an.patch 5007-test-Convert-rlimit-test-to-subtest-of-generic-limit.patch 5008-test-Add-effective-cgroup-limits-testing.patch 5009-cgroup-Restrict-effective-limits-with-global-resourc.patch 5010-cgroup-Rename-effective-limits-internal-table.patch - Import commit 56b53b17bcd8311dfb53f05b359b2812593883ab 56b53b17bc cgroup: Rename effective limits internal table (jsc#PED-5659) 7c9202317c cgroup: Restrict effective limits with global resource provision (jsc#PED-5659) da858e68eb test: Add effective cgroup limits testing (jsc#PED-5659) 2f013357a5 test: Convert rlimit test to subtest of generic limit testing (jsc#PED-5659) 0a3ea7f367 cgroup: Add EffectiveMemoryMax=, EffectiveMemoryHigh= and EffectiveTasksMax= properties (jsc#PED-5659) - Drop split_usr build conditional since both split-usr and unmerged-usr supports have been removed since v255. - Don't use the "Patch:" directive with a suffix number as since the suffix doesn't serve any purpose. ==== vim ==== Subpackages: vim-data vim-data-common xxd - spec.skeleton: add sample check section (W: no-%check-section) ==== xdm ==== Version update (1.1.15 -> 1.1.16) - Update to release 1.1.16 * This release fixes a failure to build with the recent libXaw 1.0.16 release due to a change introduced in xdm 1.1.15 to address gcc 14 build issues. ==== xorg-x11-server ==== Version update (21.1.11 -> 21.1.12) Subpackages: xorg-x11-server-Xvfb xorg-x11-server-extra - Security update 21.1.12 This release addresses the following 4 security issues: * CVE-2024-31080 * CVE-2024-31081 * CVE-2024-31082 * CVE-2024-31083 Additionally it provides a way to disable byte-swapped clients either by command line flag or config option. This allows to turn off byte swapping code that has been a source of security problems lately. ==== xwayland ==== Version update (23.2.4 -> 23.2.5) - Security update 23.2.5 This release contains the 3 security fixes that actually apply to Xwayland reported in the security advisory of April 3rd 2024 * CVE-2024-31080 * CVE-2024-31081 * CVE-2024-31083 Additionally, it also contains a couple of other fixes, a copy/paste error in the DeviceStateNotify event and a fix to enable buttons with pointer gestures for backward compatibility with legacy X11 clients. ==== yast2-storage-ng ==== Version update (5.0.10 -> 5.0.11) - GuidedProposal: fixed a problem related to the :bigger_resize strategy (Agama) detected at gh#openSUSE/agama#1106. - 5.0.11 ==== zstd ==== Version update (1.5.5 -> 1.5.6) Subpackages: libzstd1 - update to 1.5.6: * Introduce a new stable parameter ZSTD_c_targetCBlockSize, enabling the division of blocks into smaller segments to enhance initial byte delivery speed for congested networks * library allows allow ganular binary size selection - drop zstd-pr-3961.patch, merged upstream

1 0

New Arm Tumbleweed snapshot 20240329 released!
by Guillaume Gardet 04 Apr '24

04 Apr '24

Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=3&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: gnome-control-center (46.0 -> 46.0.1) myspell-dictionaries (20221012 -> 20240321) open-vm-tools openSUSE-release (20240328 -> 20240329) publicsuffix (20240306 -> 20240326) python-pyasn1-modules (0.3.0 -> 0.4.0) systemd-default-settings (0.8 -> 0.9) tracker (3.7.0 -> 3.7.1) tracker-miners (3.7.0 -> 3.7.1) === Details === ==== gnome-control-center ==== Version update (46.0 -> 46.0.1) Subpackages: gnome-control-center-color gnome-control-center-goa gnome-control-center-user-faces gnome-control-center-users - Update to version 46.0.1: + Handle legacy panel arguments + Accessibility: Allow launching subpages directly. + Privacy: Fix Thunderbolt panel not launching. + System: - Avoid setting auto time sync when it isn't needed. - Improve startup time by loading subpages on demand. + Updated translations. ==== myspell-dictionaries ==== Version update (20221012 -> 20240321) Subpackages: myspell-en myspell-en_US myspell-lightproof-en - version update to 20240321 * use general label for Turkish dictionary * Updated Afrikaans dictionary * tdf#159164 Update the English dictionaries: GB+ZA+AU+CA+US * update hunspell dictionaries for Turkish language * Updated Slovenian thesaurus * tdf#156723 False positives in pt-BR lightproof * Belarusian hunspell dictionary update * Update the Korean Dictionaries: ko-KR * Updated the English dictionaries: GB * Update Danish dictionaries (v2.8.001) * Fix path of logo for Spanish dictionary * Fixes issue #156669: Updates Catalan dictionaries (spelling, hyphenation, and thesaurus) with latest releases. * Add Indonesian hyphenation library to dictionary package * Updating RLA-ES Spanish spellcheker to v2.8. * Updated Slovak dictionaries (v2.4.7 2023-08-29) * Update of Occitan spellchecker (more words and up-to-date licence * tdf#156723 Remove false pleonasms for pt-BR * tdf#156101 add en-IL alongside the other English locales * On Linux dictionaries are packaged separately * Update Hungarian dictionary * Updated the English dictionaries: GB+ZA * tdf#154459 Improve grammar for hlp_ellipsis * Add .gitreview used by git-review tool * id: sync dictionaries to version v2.3.0 (2022.09.21) * Updated Slovenian thesaurus * tdf#148876 Adding Thai hyphenation patterns * Update Italian hyphenation and dictionary * Update Mongolian dictionary * Fix typos in Thesaurus - modified sources % update.sh - deleted patches - es-remove-duplicate-locales.diff (upstreamed) ==== open-vm-tools ==== Subpackages: libvmtools0 open-vm-tools-desktop - Remove protobuf < 22 dependency from spec file (bsc#1217478) Required linking with additional absl libraries for sle_version > 150400. - Use (boo#1222089) for updating open-vm-tools to version 12.4.0. ==== openSUSE-release ==== Version update (20240328 -> 20240329) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== publicsuffix ==== Version update (20240306 -> 20240326) - Update to version 20240326: * Add `*.ir.md` (#1625) * Update name for info.cx (#1616) * add `nftstorage.link` (#1548) * GD - graphic.design (#1940) * Removing wildcard for cloudapp.azure.com (#1944) ==== python-pyasn1-modules ==== Version update (0.3.0 -> 0.4.0) - update to 0.4.0: * Added support for Python 3.11, 3.12 * Removed support for EOL Pythons 2.7, 3.6, 3.7 ==== systemd-default-settings ==== Version update (0.8 -> 0.9) Subpackages: systemd-default-settings-branding-SLE systemd-default-settings-branding-openSUSE - Import 0.9 bb859bf user@.service: Disable controllers by default (jsc#PED-2276) ==== tracker ==== Version update (3.7.0 -> 3.7.1) Subpackages: libtracker-sparql-3_0-0 tracker-data-files typelib-1_0-Tracker-3_0 - Update to version 3.7.1: + Fix possible stalls in D-Bus endpoint batch updates. + Better API documentation around handling of corrupted databases. + Test improvements. ==== tracker-miners ==== Version update (3.7.0 -> 3.7.1) Subpackages: tracker-miner-files - Update to version 3.7.1: + Improvements to the handling of corrupted databases. + Further syscall rules in the seccomp sandbox. + Fix some possible warnings during tracker-extract-3 startup. + Fixes to extraction of dc:source fields from XMP data. + Avoid SIGABRT on missing Landlock.

2 2

New Arm Tumbleweed snapshot 20240402 released!
by Guillaume Gardet 03 Apr '24

03 Apr '24

Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=3&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: NetworkManager-openconnect NetworkManager-openvpn NetworkManager-pptp NetworkManager-vpnc ell (0.63 -> 0.64) gcc14 (14.0.1+git9355 -> 14.0.1+git9687) google-noto-fonts (20240301 -> 20240401) libopenmpt (0.7.5 -> 0.7.6) libplacebo5 libressl (3.8.3 -> 3.9.1) openSUSE-release (20240329 -> 20240402) patterns-fonts qt6-virtualkeyboard shim wireplumber (0.5.0 -> 0.5.1) yast2-trans (84.87.20240324.ae2a0736e6 -> 84.87.20240331.90b1d91d29) === Details === ==== NetworkManager-openconnect ==== Subpackages: NetworkManager-applet-openconnect - Add missing supplements(bsc#1220391): + NMA subpackage: Main package and gnome-control-center ==== NetworkManager-openvpn ==== Subpackages: NetworkManager-applet-openvpn - Add missing supplements(bsc#1220391): + NMA subpackage: Main package and gnome-control-center ==== NetworkManager-pptp ==== Subpackages: NetworkManager-applet-pptp - Add missing supplements(bsc#1220391): + NMA subpackage: Main package and gnome-control-center ==== NetworkManager-vpnc ==== Subpackages: NetworkManager-applet-vpnc - Add missing supplements(bsc#1220391): + NMA subpackage: Main package and gnome-control-center ==== ell ==== Version update (0.63 -> 0.64) - Update to version 0.64 * Fix issue with casting in C++ environment. * Fix issue with ASCII string upper and lower helpers. ==== gcc14 ==== Version update (14.0.1+git9355 -> 14.0.1+git9687) Subpackages: libasan8 libatomic1 libgcc_s1 libgfortran5 libgomp1 libhwasan0 libitm1 liblsan0 libobjc4 libstdc++6 libstdc++6-pp libtsan2 libubsan1 - Update to trunk head, 0b02da5b99e89347f5f8bf875ec8318f84, git9687 - Fix install link to amdgcn-amdhsa-ld. - Add newlib-gcn-iolock.diff to fix locking for I/O on gcn offload targets. - Remove timezone Recommends from the libstdc++6 package. [boo#1221601] ==== google-noto-fonts ==== Version update (20240301 -> 20240401) - Update to 20240401 * Fix Oriya interpolation issues ==== libopenmpt ==== Version update (0.7.5 -> 0.7.6) - Update to 0.7.6: * [Sec] Potential heap out-of-bounds read or write past sample end with malformed sustain loops in SymMOD files. * MED: Transposed samples were playing too low in some files (e.g. mix94.mmd1). * OKT: Some files with garbage at the end were rejected (e.g. katharsis - piano lesson.okta). * Compressor DMO: It was possible that the plugin would not behave as intended at mix rates above 500 kHz. * Avoid re-allocating the loop state map contents on every playthrough of the module. - Run test suite during package build ==== libplacebo5 ==== - Add %{?sle15_python_module_pythons} to make libplacebo5 build with python 3.11 on Leap15 ==== libressl ==== Version update (3.8.3 -> 3.9.1) - Update to release 3.9.1 * Updated tests with expiring certificates * CET-related build fixes for Windows and macOS targets * update libtls linker script to include libssl and libcrypto again ==== openSUSE-release ==== Version update (20240329 -> 20240402) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== patterns-fonts ==== Subpackages: patterns-fonts-fonts patterns-fonts-fonts_opt - Update patterns-fonts.spec: Add google-noto-sans-symbols-fonts google-noto-sans-symbols2-fonts to default installation, to enable terminal display special characters (bsc#1219553). ==== qt6-virtualkeyboard ==== Subpackages: libQt6HunspellInputMethod6 libQt6VirtualKeyboard6 qt6-virtualkeyboard-imports - Fix description of libQt6VirtualKeyboard6 - Make the lib depend on the inputcontext plugin (boo#1222158) ==== shim ==== - Introduce %shim_use_fde_tpm_helper macro so that the project can include the fde-tpm-helper-macros for the build targets other than Tumbleweed ==== wireplumber ==== Version update (0.5.0 -> 0.5.1) Subpackages: libwireplumber-0_5-0 wireplumber-audio wireplumber-zsh-completion - Update to version 0.5.1: * Highlights: - Added a guide documenting how to migrate configuration from 0.4 to 0.5, also available online at: https://pipewire.pages.freedesktop.org/wireplumber/daemon/configuration/mig… If you are packaging WirePlumber for a distribution, please consider informing users about this. Installing the wireplumber-doc subpackage, this file can be read by running: xdg-open /usr/share/doc/wireplumber/html/daemon/configuration/migration.html * Fixes: - Fixed an odd issue where microphones would stop being usable when a Bluetooth headset was connected in the HSP/HFP profile (#598, !620) - Fixed an issue where it was not possible to store the volume/mute state of system notifications (#604) - Fixed a rare crash that could occur when a node was destroyed while the 'select-target' event was still being processed (!621) - Fixed deleting all the persistent settings via wpctl --delete (!622) - Fixed using Bluetooth autoswitch with A2DP profiles that have an input route (!624) - Fixed sending an error to clients when linking fails due to a format mismatch (!625) * Additions: - Added a check that prints a verbose warning when old-style 0.4.x Lua configuration files are found in the system. (#611) - The "policy-dsp" script, used in Asahi Linux to provide a software DSP for Apple Sillicon devices, has now been ported to 0.5 properly and documented (#619, !627) - Remove patch already included upstream: * 0001-filter-utils-fix-handling-of-targetless-smart-filters.patch - Enable documentation generation and create new doc subpackage including the documentation that can be read by running: xdg-open /usr/share/doc/wireplumber/html/index.html ==== yast2-trans ==== Version update (84.87.20240324.ae2a0736e6 -> 84.87.20240331.90b1d91d29) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20240331.90b1d91d29: * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (German) * Translated using Weblate (German) * Translated using Weblate (Catalan) * Translated using Weblate (Czech) * Translated using Weblate (Japanese) * New POT for text domain 'rmt'. * New POT for text domain 'control'.

1 0