Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20220603 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: Mesa (22.1.0 -> 22.1.1) Mesa-drivers (22.1.0 -> 22.1.1) alsa (1.2.6.1 -> 1.2.7) alsa-ucm-conf (1.2.6.3 -> 1.2.7) alsa-utils (1.2.6 -> 1.2.7) cups (2.4.1 -> 2.4.2) geoclue2 (2.5.7 -> 2.6.0) google-noto-fonts grub2 gsl hwdata (0.359 -> 0.360) libvirt (8.3.0 -> 8.4.0) libwacom (1.12 -> 2.2.0) ncurses (6.3.20220501 -> 6.3.20220529) openldap2 (2.6.1 -> 2.6.2) openldap2-contrib-src (2.6.1 -> 2.6.2) parted patterns-base perl-JSON (4.05 -> 4.06) perl-Mail-DKIM (1.20220408 -> 1.20220520) perl-libwww-perl (6.64 -> 6.66) python-Pillow python-libvirt-python (8.3.0 -> 8.4.0) python-pyOpenSSL re2 (20220401 -> 20220601) rubygem-nokogiri sg3_utils (1.47+4.82fb156 -> 1.47+5.d13bc56) suse-module-tools (16.0.19 -> 16.0.20) tiff (4.3.0 -> 4.4.0) xkeyboard-config (2.34 -> 2.36) === Details === ==== Mesa ==== Version update (22.1.0 -> 22.1.1) Subpackages: Mesa-dri-devel Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - Update to 22.1.1 * first bugfix release - supersedes U_llvmpipe-flush-resources-for-kms-swrast-path.patch - Add patch to fix glitches with KMS (boo#1199885): * U_llvmpipe-flush-resources-for-kms-swrast-path.patch ==== Mesa-drivers ==== Version update (22.1.0 -> 22.1.1) Subpackages: Mesa-dri Mesa-gallium Mesa-libva libxatracker2 - Update to 22.1.1 * first bugfix release - supersedes U_llvmpipe-flush-resources-for-kms-swrast-path.patch - Add patch to fix glitches with KMS (boo#1199885): * U_llvmpipe-flush-resources-for-kms-swrast-path.patch ==== alsa ==== Version update (1.2.6.1 -> 1.2.7) Subpackages: libasound2 libasound2-32bit libatopology2 - Update to version 1.2.7: more extended UCM API, PCM rate,multi,direct plugin fixes and enhancements, compilation fixes, etc. For details see: https://www.alsa-project.org/wiki/Changes_v1.2.6.3_v1.2.7#alsa-lib ==== alsa-ucm-conf ==== Version update (1.2.6.3 -> 1.2.7) - Update to version 1.2.7: Various profile updates for USB-audio, HD-audio, etc. For details, see: https://www.alsa-project.org/wiki/Changes_v1.2.6.3_v1.2.7#alsa-ucm-conf - Drop obsoleted patches: 0001-HDA-DualCodecs-fix-typo-in-Speaker-condition.patch 0002-HDA-acp-avoid-to-create-Mic-ACP-LED-control-for-the-.patch ==== alsa-utils ==== Version update (1.2.6 -> 1.2.7) - Update to alsa-utils 1.2.7: Enhancement and fixes of alsactl, speaker-test cleanup, alsatplg enhancements, arecord ghost data fix, etc. For details see: https://www.alsa-project.org/wiki/Changes_v1.2.6.3_v1.2.7#alsa-utils - Drop obsoleted patches: 0001-alsamixer-Fix-regression-in-color-setup.patch 0002-alsamixer-Revert-has_mouse-check.patch ==== cups ==== Version update (2.4.1 -> 2.4.2) Subpackages: cups-client cups-config libcups2 libcups2-32bit libcupsimage2 - Version upgrade to 2.4.2: See https://github.com/openprinting/cups/releases CUPS 2.4.2 brings the fix for CVE-2022-26691 (#bsc1199474) together with LibreSSL/OpenSSL and minimal AIX support. * Fixed certificate strings comparison for Local authorization (CVE-2022-26691) * The `cupsFileOpen` function no longer opens files for append in read-write mode (Issue #291) * The cupsd daemon removed processing temporary queue (Issue #364) * Fixed delay in IPP backend if GNUTLS is used and endpoint doesn't confirm closing the connection (Issue #365) * Fixed conditional jump based on uninitialized value in cups/ppd.c (Issue #329) * Fixed CSS related issues in CUPS Web UI (Issue #344) * Fixed copyright in CUPS Web UI trailer template (Issue #346) * mDNS hostname in device uri is not resolved when installaling a permanent IPP Everywhere queue (Issues #340, #343) * The `lpstat` command now reports when the scheduler is not running (Issue #352) * Updated the man pages concerning the `-h` option (Issue #357) * Re-added LibreSSL/OpenSSL support (Issue #362) * Updated the Solaris smf service file (Issue #368) * Fixed a regression in lpoptions option support (Issue #370) * The scheduler now regenerates the PPD cache information after changing the "cupsd.conf" file (Issue #371) * Updated the scheduler to set "auth-info-required" to "username,password" if a backend reports it needs authentication info but doesn't set a method for authentication (Issue #373) * Updated the configure script to look for the OpenSSL library the old way if pkg-config is not available (Issue #375) * Fixed the prototype for the `httpWriteResponse` function (Issue #380) * Brought back minimal AIX support (Issue #389) * `cupsGetResponse` did not always set the last error. * Fixed a number of old references to the Apple CUPS web page. * Restored the default/generic printer icon file for the web interface. * Removed old stylesheet classes that are no longer used by the web interface. - Adapted downgrade-autoconf-requirement.patch for CUPS 2.4.2 ==== geoclue2 ==== Version update (2.5.7 -> 2.6.0) Subpackages: system-user-srvGeoClue typelib-1_0-Geoclue-2_0 - Update to version 2.6.0: + Stop the client for system applications when accuracy is set to NONE. + NMEA: add a unix socket file option. + Client info: support cgroup v2. + Don't compute movements for low accuracy sources. + Add an option to generate vapi. + Send the 3G tower type as part of the Mozilla location service requests. + Add phosh & lipstick as allowed agents. + Use GeoIP when no WiFi device is available. + Modem manager: add polkit rule to allow GPS access. + Allow disabling compass at build and at runtime. + Fix heading computation for identical locations. + Be strict with time and distance threshold. + Fix the XDG location portal integration. + Replace agent wait timeout with a queue. + Other bugs fixes. - Drop geoclue2-geoip-when-wifi-unavailable.patch: fixed upstream. - Minor tweaks to rpmlintrc file: systemd_service changed from warnings to error (but still don't apply here, as it's a dbus enabled service). ==== google-noto-fonts ==== Subpackages: google-noto-fonts-doc noto-sans-fonts - Add obsoletes and provides for google-{arimo,cousine,tinos}-fonts ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - Use boot disks in OpenFirmware, fixing regression caused by 0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when the root LV is completely in the boot LUN (bsc#1197948) * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch - Fix error message in displaying help on bootable snapshot (bsc#1199609) ==== gsl ==== Subpackages: libgsl25 libgslcblas0 - Add gsl-rpmlintrc rule to ignore shlib name policy errors for HPC packages (see this file for explanation) (bsc#1191757). - Make doc package arch-independent. ==== hwdata ==== Version update (0.359 -> 0.360) - Update to version 0.360 (bsc#1200110): + Updated pci, usb and vendor ids. ==== libvirt ==== Version update (8.3.0 -> 8.4.0) Subpackages: libvirt-client libvirt-daemon libvirt-daemon-config-network libvirt-daemon-driver-interface libvirt-daemon-driver-libxl libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-qemu libvirt-daemon-xen libvirt-libs - Update to libvirt 8.4.0 - Many incremental improvements and bug fixes, see https://libvirt.org/news.html#v8-4-0-2022-06-01 ==== libwacom ==== Version update (1.12 -> 2.2.0) - Remove meson conditional - no other build system is supported. - update to 2.2.0: * data: Add ISDv4 5285 (Lenovo ThinkPad X13 Yoga Gen 2) * data: Add ISDv4 16C (HP ZBook x2 G4) * Add ISDv4 52a2 (Lenovo Yoga 6 13ALC6) * data: Add ISDv4 5218 (Lenovo IdeaPad Flex 5 14ALC05) * data: Add ISDv4 521c (Lenovo IdeaPad Flex 5 15ALC05) * data: Add ISDv4 49a3 (Dell Latitude 7320 Detachable) * Remove now-unused libwacom.pc.in * CI: add a workflow to check for "sysinfo" in newly added data files * doc: fix the check for integration flags in the example code * github: bump freebsd workflow to 0.1.5 * Update data/surface-go-2.tablet * Update huion-h610-pro.tablet * data: Add ISDv4 4995 (HP EliteBook x360 1040 G8 Notebook PC) * data: Add ISDv4 51EF (Lenovo Yoga C740-14IML) * data: Add ISDv4 2d1f:0095 (PINE64 PineNote) * data: Add ISDv4 52b0 (Lenovo Yoga 7 14ACN6) * data: Add ISDv4 511a (Lenovo ThinkPad X1 Tablet Gen 3) * data: Add ISDv4 484d (Dell Latitude 5290) * Add description for elan-2a70 (#466) * data: remove unknown BuiltIn key from the DTU1931 * data: Add ISDv4 5276 (Lenovo ThinkPad X1 Yoga Gen 6) * data: Add ISDv4 51d0 ("Lenovo ThinkPad X1 Titanium Gen 1") * data: Add ISDv4 5019 (Fujitsu LIFEBOOK T935) * test: add a test for matching the button count with the evdev codes * meson.build: use gnu_symbol_visibility argument * meson.build: use current_source_dir() over deprecated source_root() * Remove unused arguments from two helper functions * github: build with ninja --verbose * CI: don't enable -Wall -Wextra in the CI * Make sign-compare a warning/error * Add support for a new "Wacom One Pen Display 13" ==== ncurses ==== Version update (6.3.20220501 -> 6.3.20220529) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch 20220529 + expanded notes for teken/syscons -TD + fix overlooked copying of extended string-heap in copy_termtype (cf: 20220430). + update config.guess - Add ncurses patch 20220521 + improve memory-leak checking in several test-programs. + set trailing null on string passed from winsnstr() to wins_nwstr(). + modify del_curterm() to fix memory-leak introduced by change to copy_termtype(). - Update tack to 1.09-20220528 + Autoconf fixes - Add ncurses patch 20220514 + further improvements to test/test_mouse.c; compare with ncurses test program menu A/a. - Add ncurses patch 20220507 + add test/test_mouse.c (patch by Leonid S Usov). + add a few debug-traces for tic, fix a couple of memory-leaks. ==== openldap2 ==== Version update (2.6.1 -> 2.6.2) Subpackages: libldap-data libldap2 libldap2-32bit openldap2-client - Update to release 2.6.2 * Added support for OpenSSL 3.0 (ITS#9436) * Fixed ldapdelete to prune LDAP subentries (ITS#9737) * Fixed libldap to drop connection when non-LDAP data is received (ITS#9803) * Fixed libldap to allow newlines at end of included file (ITS#9811) * Fixed slapd slaptest conversion of olcLastBind (ITS#9808) * Fixed slapd to correctly init global_host earlier (ITS#9787) * Fixed slapd bconfig locking for cn=config replication (ITS#9584) * Fixed slapd usage of thread local counters (ITS#9789) * Fixed slapd to clear runqueue task correctly (ITS#9785) * Fixed slapd idletimeout handling (ITS#9820) * Fixed slapd syncrepl handling of new sessions (ITS#9584) * Fixed slapd to clear connections on bind (ITS#9799) * Fixed slapd to correctly advance connections index (ITS#9831) * Fixed slapd syncrepl ODSEE replication of unknown attr (ITS#9801) * Fixed slapd-asyncmeta memory leak in keepalive setting, slapd-ldap memory leak in keepalive setting, SEGV on config rewrite, ordering on config rewrite, memory leak in keepalive setting (ITS#9802) * Fixed slapo-pcache SEGV & slapd-monitor SEGV on shutdown (ITS#9809) * Fixed slapd-monitor crash when hitting sizelimit (ITS#9832) * Fixed slapd-sql to properly escape filter value (ITS#9815) * Fixed slapo-dynlist dynamic group regression (ITS#9825) * Fixed slapo-ppolicy operation handling to be consistent (ITS#9794) * Fixed slapo-translucent to correctly duplicate substring filters (ITS#9818) * Contrib: * Update ppm module to the 2.1 release (ITS#9814) * Documentation: * admin26: Document new lloadd features (ITS#9780) * Fixed slapd.conf(5)/slapd-config(5) syncrepl sizelimit/timelimit documentation (ITS#9804) * Fixed slapd-sock(5) to clarify "sockresps result" behavior (ITS#8255) ==== openldap2-contrib-src ==== Version update (2.6.1 -> 2.6.2) - Update to release 2.6.2 * Added support for OpenSSL 3.0 (ITS#9436) * Fixed ldapdelete to prune LDAP subentries (ITS#9737) * Fixed libldap to drop connection when non-LDAP data is received (ITS#9803) * Fixed libldap to allow newlines at end of included file (ITS#9811) * Fixed slapd slaptest conversion of olcLastBind (ITS#9808) * Fixed slapd to correctly init global_host earlier (ITS#9787) * Fixed slapd bconfig locking for cn=config replication (ITS#9584) * Fixed slapd usage of thread local counters (ITS#9789) * Fixed slapd to clear runqueue task correctly (ITS#9785) * Fixed slapd idletimeout handling (ITS#9820) * Fixed slapd syncrepl handling of new sessions (ITS#9584) * Fixed slapd to clear connections on bind (ITS#9799) * Fixed slapd to correctly advance connections index (ITS#9831) * Fixed slapd syncrepl ODSEE replication of unknown attr (ITS#9801) * Fixed slapd-asyncmeta memory leak in keepalive setting, slapd-ldap memory leak in keepalive setting, SEGV on config rewrite, ordering on config rewrite, memory leak in keepalive setting (ITS#9802) * Fixed slapo-pcache SEGV & slapd-monitor SEGV on shutdown (ITS#9809) * Fixed slapd-monitor crash when hitting sizelimit (ITS#9832) * Fixed slapd-sql to properly escape filter value (ITS#9815) * Fixed slapo-dynlist dynamic group regression (ITS#9825) * Fixed slapo-ppolicy operation handling to be consistent (ITS#9794) * Fixed slapo-translucent to correctly duplicate substring filters (ITS#9818) * Contrib: * Update ppm module to the 2.1 release (ITS#9814) * Documentation: * admin26: Document new lloadd features (ITS#9780) * Fixed slapd.conf(5)/slapd-config(5) syncrepl sizelimit/timelimit documentation (ITS#9804) * Fixed slapd-sock(5) to clarify "sockresps result" behavior (ITS#8255) ==== parted ==== Subpackages: libparted-fs-resize0 libparted2 parted-lang - use static keyring file (and switch to the release team keyring) ==== patterns-base ==== Subpackages: patterns-base-apparmor patterns-base-base patterns-base-basesystem patterns-base-basic_desktop patterns-base-console patterns-base-enhanced_base patterns-base-minimal_base patterns-base-selinux patterns-base-sw_management patterns-base-transactional_base patterns-base-x11 patterns-base-x11_enhanced - No long recommend haveged (boo#1190024): The mainline Linux Kernel has now HAVEGED algorithm build in internally (since version 5.6). ==== perl-JSON ==== Version update (4.05 -> 4.06) - updated to 4.06 see /usr/share/doc/packages/perl-JSON/Changes 4.06 2022-05-22 - updated backportPP with JSON::PP 4.09 ==== perl-Mail-DKIM ==== Version update (1.20220408 -> 1.20220520) - updated to 1.20220520 see /usr/share/doc/packages/perl-Mail-DKIM/Changes 1.20220520 2022-05-20 UTC + Change default algorithm in dkimsign.pl to sha-256 + Use Getopt::Long::Descriptive in scripts for better command help ==== perl-libwww-perl ==== Version update (6.64 -> 6.66) - updated to 6.66 see /usr/share/doc/packages/perl-libwww-perl/Changes 6.66 2022-05-18 16:44:44Z - Revert automatic follow of meta refresh tags which was added in 6.63 (GH#415) (Olaf Alders) 6.65 2022-05-09 18:36:14Z - fix NAME in Makefile.PL (GH#413) (Graham Knop) ==== python-Pillow ==== Subpackages: python38-Pillow python38-Pillow-tk - Add patch tiff-readcount.patch to fix build with the new tiff ==== python-libvirt-python ==== Version update (8.3.0 -> 8.4.0) - Update to 8.4.0 - Add all new APIs and constants in libvirt 8.4.0 ==== python-pyOpenSSL ==== - Shift BuildRequires on openssl, it's only required for tests. ==== re2 ==== Version update (20220401 -> 20220601) - update to 2022-06-01: * switch to cxx_std_11 and other developer visible fixes ==== rubygem-nokogiri ==== - Also build ruby 3.1 for 15.x ==== sg3_utils ==== Version update (1.47+4.82fb156 -> 1.47+5.d13bc56) Subpackages: libsgutils2-1_47-2 - Update to version 1.47+5.d13bc56: * rescan-scsi-bus.sh: add timeout parameter (bsc#1199248) ==== suse-module-tools ==== Version update (16.0.19 -> 16.0.20) - Update to version 16.0.20: * Bump version to 16.0.20 * driver-check.sh: avoid false positive error messages (boo#1200107) * don't hardcode /boot for kernel-related files (boo#1199873) * spec file: use "install -p" consistently ==== tiff ==== Version update (4.3.0 -> 4.4.0) Subpackages: libtiff5 libtiff5-32bit - update to 4.4.0: * TIFFIsBigTiff() function added. * Functions TIFFFieldSetGetSize() and TIFFieldSetGetCountSize() added. * LZWDecode(): major speed improvements (~30% faster) * Predictor 2 (horizontal differenciation): support 64-bit * Support libjpeg 9d * avoid hang in TIFFRewriteDirectory() if a classic file > 4 GB is attempted to be created * tif_jbig.c: fix crash when reading a file with multiple IFD in memory-mapped mode and when bit reversal is needed * TIFFFetchNormalTag(): avoid calling memcpy() with a null source pointer and size of zero * TIFFWriteDirectoryTagData(): turn assertion on data length into a runtime check * TIFFFetchStripThing(): avoid calling memcpy() with a null source pointer and size of zero * TIFFReadDirectory(): avoid calling memcpy() with a null source pointer and size of zero * TIFFYCbCrToRGBInit(): avoid Integer-overflow * TIFFGetField(TIFFTAG_STRIPBYTECOUNTS/TIFFTAG_STRIPOFFSETS): return error if returned pointer is NULL (fixes #342) * OJPEG: avoid assertion when using TIFFReadScanline() * TIFFReadDirectory: fix OJPEG hack * LZW codec: fix support for strips/tiles > 2 GB on Windows * TIFFAppendToStrip(): fix rewrite-in-place logic * Fix TIFFRewriteDirectory discarding directories. * TIFFReadCustomDirectory(): avoid crash when reading SubjectDistance tag on a non EXIF directory * Fix Segmentation fault printing GPS directory if Altitude tag is present * tif_jpeg.c: do not emit progressive scans with mozjpeg. (#266) * _TIFFRewriteField(): fix when writing a IFD with a single tile that is a sparse one, on big endian hosts * Fix all remaining uses of legacy Deflate compression id and warn on use. - drop tiff-CVE-2022-0907.patch, tiff-CVE-2022-0561.patch, tiff-CVE-2022-0562.patch, tiff-CVE-2022-0865.patch, tiff-CVE-2022-0909.patch, tiff-CVE-2022-0924.patch, tiff-CVE-2022-0908.patch, tiff-CVE-2022-1056,CVE-2022-0891.patch: all upstream - add signature validation, adds tiff.keyring ==== xkeyboard-config ==== Version update (2.34 -> 2.36) Subpackages: xkeyboard-config-lang - U_Fixes-regression-from-c3c5d02-were-mistakenly-replac.patch * Regression fixed from c3c5d02rules: sort the names of multimedia keyboards alphabetically "\" at the end of line were mistakenly replacd by "/" - Update to version 2.36 * bugfixes * removed autotools support :-( - switched to meson