New ARM MicroOS snapshot 20220223 released!
Please note that this mail was generated by a script.
The described changes are computed based on the aarch64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=microos&groupid=3&version=Tumbleweed&build=20220223
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&component=MicroOS&query_format=advanced&resolution=---
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
NetworkManager
adwaita-icon-theme
avahi
distribution-logos-openSUSE
expat (2.4.4 -> 2.4.6)
flatpak (1.12.5 -> 1.12.6)
gnome-session
gnome-settings-daemon
gtk4
installation-images-MicroOS (17.42 -> 17.44)
kernel-firmware (20220119 -> 20220218)
libinput (1.19.3 -> 1.20.0)
libnvme (1.0~3 -> 1.0~4)
libsecret (0.20.4 -> 0.20.5)
makedumpfile
ncurses (6.3.20220129 -> 6.3.20220212)
nvme-cli (2.0~3 -> 2.0~4)
patterns-base
perl
polkit
python38
python38-core
qemu
sg3_utils (1.47+3.adb7276 -> 1.47+4.82fb156)
sssd
systemd (249.9 -> 249.10)
update-alternatives (1.20.9 -> 1.21.1)
vim
vulkan-loader (1.2.198.0 -> 1.3.204.0)
vulkan-tools (1.2.198.0 -> 1.3.204.0)
xkeyboard-config
xorg-x11-server
=== Details ===
==== NetworkManager ====
Subpackages: libnm0 typelib-1_0-NM-1_0
- Add upstream bug fix patches:
+ 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
nm_ref_string_equal_str() Fix comparison with a NULL string
+ 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
fix maybe-uninitialized warning in "test-setting"
+ aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
fix maybe-uninitialized warning in "test-libnmc-setting"
+ 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
initialize nm_auto variable in _ethtool_features_reset()
+ 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
workaround maybe-uninitialized warning with LTO in
nm_uuid_generate_from_string_str()
- Use meson LTO setup as NM makes changes to CFLAGS
==== adwaita-icon-theme ====
- Replace Requires(post): gtk3-tools with the 2 following:
+ Requires(post): (gtk3-tools if libgtk-3-0)
+ Requires(post): (gtk4-tools if libgtk-4-1)
Do this as we want gtk3-tools when building and installing a gtk3
based package, and gtk4-tools when building and installing a gtk4
based package.
==== avahi ====
Subpackages: libavahi-client3 libavahi-common3 libavahi-core7
- remove avahi-mono* subspecfiles, they are no longer required
by anything. this makes the spec file slightly more readable.
==== distribution-logos-openSUSE ====
Subpackages: distribution-logos-openSUSE-MicroOS distribution-logos-openSUSE-icons
- Fix the obsoleted and provided versions of the old systemd logo branding package
==== expat ====
Version update (2.4.4 -> 2.4.6)
Subpackages: libexpat1
- update to 2.4.6 (bsc#1196168, CVE-2022-25313):
* Bug fixes:
- Fix a regression introduced by the fix for CVE-2022-25313
in release 2.4.5 that affects applications that (1)
call function XML_SetElementDeclHandler and (2) are
parsing XML that contains nested element declarations
(e.g. "<!ELEMENT junk ((bar|foo|xyz+), zebra*)>").
- Version info bumped from 9:5:8 to 9:6:8;
see https://verbump.de/ for what these numbers do.
- update to 2.4.5 (bsc#1196171, bsc#1196169, bsc#1196168,
bsc#1196026, bsc#1196025):
* Security fixes:
- CVE-2022-25235 -- Passing malformed 2- and 3-byte UTF-8
sequences (e.g. from start tag names) to the XML
processing application on top of Expat can cause
arbitrary damage (e.g. code execution) depending
on how invalid UTF-8 is handled inside the XML
processor; validation was not their job but Expat's.
Exploits with code execution are known to exist.
- CVE-2022-25236 -- Passing (one or more) namespace separator
characters in "xmlns[:prefix]" attribute values
made Expat send malformed tag names to the XML
processor on top of Expat which can cause
arbitrary damage (e.g. code execution) depending
on such unexpectable cases are handled inside the XML
processor; validation was not their job but Expat's.
Exploits with code execution are known to exist.
- CVE-2022-25313 -- Fix stack exhaustion in doctype parsing
that could be triggered by e.g. a 2 megabytes
file with a large number of opening braces.
Expected impact is denial of service or potentially
arbitrary code execution.
- CVE-2022-25314 -- Fix integer overflow in function copyString;
only affects the encoding name parameter at parser creation
time which is often hardcoded (rather than user input),
takes a value in the gigabytes to trigger, and a 64-bit
machine. Expected impact is denial of service.
- CVE-2022-25315 -- Fix integer overflow in function storeRawNames;
needs input in the gigabytes and a 64-bit machine.
Expected impact is denial of service or potentially
arbitrary code execution.
* Other changes:
- Version info bumped from 9:4:8 to 9:5:8;
see https://verbump.de/ for what these numbers do
==== flatpak ====
Version update (1.12.5 -> 1.12.6)
Subpackages: libflatpak0 system-user-flatpak
- Update to version 1.12.6:
+ Fix a bug that sometimes caused repo corruption in case
downloads are interrupted or canceled, necessitating a
"flatpak repair" to recover
+ More reliably detect the GTK theme
+ Fix history command unit test in some edge cases
+ Updated translations.
==== gnome-session ====
Subpackages: gnome-session-core gnome-session-default-session gnome-session-wayland
- Add back gnome-session-exit-when-lost-name-on-bus.patch:
gnome-session exit immediately when lost name on bus
(bsc#1175622 glgo!GNOME/gnome-session!60, bsc#1188882).
==== gnome-settings-daemon ====
- Rename 283.patch to the name of final commit id
afa7e4bb9c519e2daf500a6079088669500768c0.patch.
==== gtk4 ====
Subpackages: gtk4-schema libgtk-4-1 typelib-1_0-Gtk-4_0
- Add gtk4-tools = %%{version} to devel sub-package.
==== installation-images-MicroOS ====
Version update (17.42 -> 17.44)
- merge gh#openSUSE/installation-images#579
- include all of s390-tools in initrd (bsc#1195914)
- 17.44
- merge gh#openSUSE/installation-images#578
- use signed grub.elf on ppc64 (bsc#1196070)
- 17.43
==== kernel-firmware ====
Version update (20220119 -> 20220218)
Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network
- Update to version 20220218 (git commit c53073d4e148):
* rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
* rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
* rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
* amdgpu: Update yellow carp firmware from 21.50
* amdgpu: Update vega20 firmware from 21.50
* amdgpu: Update vega12 firmware from 21.50
* amdgpu: Update vega10 firmware from 21.50
* amdgpu: Update vangogh firmware from 21.50
* amdgpu: Update renoir firmware from 21.50
* amdgpu: Update raven2 firmware from 21.50
* amdgpu: Update raven firmware from 21.50
* amdgpu: Update picasso firmware from 21.50
* amdgpu: Update beige goby firmware from 21.50
* amdgpu: Update dimgrey cavefish firmware from 21.50
* amdgpu: Update navy flounder firmware from 21.50
* amdgpu: Update sienna cichlid firmware from 21.50
* amdgpu: Update navi14 firmware from 21.50
* amdgpu: Update navi12 firmware from 21.50
* amdgpu: Update navi10 firmware from 21.50
* amdgpu: Update cyan skillfish2 firmware from 21.50
* amdgpu: Update green sardine firmware from 21.50
* amdgpu: Update arcturus firmware from 21.50
* amdgpu: Add aldebaran firmware from 21.50
* LICENSE.amdgpu: update copyright date
* linux-firmware: Update AMD cpu microcode
* linux-firmware: update firmware for MT7921 WiFi device
* linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
* i915: Add DMC firmware v2.16 for ADL-P
* linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases
==== libinput ====
Version update (1.19.3 -> 1.20.0)
- Update to release 1.20.0
* High-resolution scroll is more reliable thanks to the
inclusion of new heuristics.
* Better handling of BTN_TOOL_PEN on top of BTN_TOOL_RUBBER on
graphics tablets that trigger a kernel bug.
* libinput does not handle joysticks and gamepads. The
detection algorithm has been improved to avoid tagging some
of those devices as keyboards.
* Improved clickpad detection
* New quirks and bug fixing
==== libnvme ====
Version update (1.0~3 -> 1.0~4)
- Update to version 1.0-rc4:
* fabrics: add default port number for NVMe/TCP I/O controllers
* linux: Update size when telemetry controller initiated data is unavailable
* add cdw13 for set_feature_args structure
* Add support for TP8010
* Documentation cleanups
==== libsecret ====
Version update (0.20.4 -> 0.20.5)
Subpackages: libsecret-1-0 typelib-1_0-Secret-1
- Update to version 0.20.5:
+ Drop autotools-based build
+ Use G_GNUC_NULL_TERMINATED where appropriate
+ collection, methods, prompt: Port to GTask
+ Detect local storage in snaps in the same way as flatpaks
+ Add bash-completion for secret-tool
+ secret-tool: Add locking capabilities to secret tool
+ secret-file-backend: Avoid closing the same file descriptor
twice
+ Add support for TPM2 based secret storage
+ Create default collection after DBus.Error.UnknownObject
+ Port documentation to gi-docgen
+ GI annotation and documentation fixes
+ Build fixes
+ Updated translations.
- Replace gtk-doc with pkgconfig(gi-docgen) BuildRequires following
upstreams port.
- Drop patch fixed upstream: libsecret-handle-UnknownObject.patch
==== makedumpfile ====
- Turn on zstd in Tumbleweed.
==== ncurses ====
Version update (6.3.20220129 -> 6.3.20220212)
Subpackages: libncurses6 ncurses-utils terminfo-base
- Add ncurses patch 20220212
+ improve font-formatting in other manpages, for consistency.
+ correct/improve font-formatting in curs_wgetch.3x (patch by Benno
Schulenberg).
- Add ncurses patch 20220205
+ workaround in test/picsmap.c for use of floating point for rgb values
by ImageMagick 6.9.11, which appears to use the wrong upper limit.
+ improve use of "trap" in shell scripts, using "fixup-trap".
==== nvme-cli ====
Version update (2.0~3 -> 2.0~4)
- Update to version 2.0-rc4:
* netapp-nvme: free the nsdescs pointer after use
* netapp-nvme: fix ontapdevices segfault in json output
* nvme-print: fix 'nvme list -o json' segfault
* nvme: get_ns_id command fails on nvme device
* wdc: updated products list for telemetry (--type) argument
* docs: fix typo in Data Set Management section
* Fix ctrlist for attach-ns and detach-ns
* netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
* wdc: Fix use-after-free access of cbs_data
* Fixed regression with 'open namespace exclusive' (bsc#1195945)
==== patterns-base ====
Subpackages: patterns-base-base patterns-base-bootloader patterns-base-minimal_base patterns-base-x11
- Use ntfs-3g again, udisks no longer works with the new ntfs3 module
(gh#storaged-project/udisks#932)
==== perl ====
Subpackages: perl-base
- Add multibuild flavor to split the testsuite out of the main package
build time. The testsuite dominates the build time and having perl
in the bootstrap cycle, we better seperate it. The testsuite flavor
rebuilds the same package the same way, but runs the check section
==== polkit ====
Subpackages: libpolkit-agent-1-0 libpolkit-gobject-1-0 typelib-1_0-Polkit-1_0
- Fixed denial of service via file descriptor leak (bsc#1195542 CVE-2021-4115)
0001-CVE-2021-4115-GHSL-2021-077-fix.patch
==== python38 ====
- Add patch support-expat-245.patch:
* Support Expat >= 2.4.5
==== python38-core ====
Subpackages: libpython3_8-1_0 python38-base
- Add patch support-expat-245.patch:
* Support Expat >= 2.4.5
==== qemu ====
* Patches added:
block-backend-Retain-permissions-after-m.patch
iotest-065-explicit-compression-type.patch
iotest-214-explicit-compression-type.patch
iotest-302-use-img_info_log-helper.patch
iotest-303-explicit-compression-type.patch
iotest-39-use-_qcow2_dump_header.patch
iotests-60-more-accurate-set-dirty-bit-i.patch
iotests-bash-tests-filter-compression-ty.patch
iotests-common.rc-introduce-_qcow2_dump_.patch
iotests-declare-lack-of-support-for-comp.patch
iotests-drop-qemu_img_verbose-helper.patch
iotests-massive-use-_qcow2_dump_header.patch
iotests-MRCE-Write-data-to-source.patch
iotests.py-filter-out-successful-output-.patch
iotests.py-img_info_log-rename-imgopts-a.patch
iotests.py-implement-unsupported_imgopts.patch
iotests.py-qemu_img-create-support-IMGOP.patch
iotests.py-rewrite-default-luks-support-.patch
iotests-specify-some-unsupported_imgopts.patch
qcow2-simple-case-support-for-downgradin.patch
tests-qemu-iotests-Fix-051-for-binaries-.patch
-Backport patch from upstream, bsc#1194063 CVE-2021-4158
* Patches added:
acpi-validate-hotplug-selector-on-access.patch
==== sg3_utils ====
Version update (1.47+3.adb7276 -> 1.47+4.82fb156)
Subpackages: libsgutils2-1_47-2
- Update to version 1.47+4.82fb156:
* rescan_scsi_bus.sh: restore numeric ordering of hosts (bsc#1196244)
==== sssd ====
Subpackages: libsss_certmap0 libsss_idmap0 libsss_nss_idmap0 sssd-krb5-common sssd-ldap
- Enable selinux support
- Update Supplements to new format
==== systemd ====
Version update (249.9 -> 249.10)
Subpackages: libsystemd0 libudev1 udev
- Import commit 0bb1977021be2fc9ebfae10d766dff0b1a457f88 (merge of v249.10)
For a complete list of changes, visit:
https://github.com/openSUSE/systemd/compare/b9b83c5d11e686178ddd545862a00b33...
- Import commit b9b83c5d11e686178ddd545862a00b33c6fdfabb
8973cb2462 systemd-coredump: allow setting external core size to infinity (bsc#1195899 jsc#SLE-23866)
- Fix build if %_distconfdir is not defined (see bsc#1195679)
==== update-alternatives ====
Version update (1.20.9 -> 1.21.1)
- rebase patches:
* update-alternatives.changes
* update-alternatives.spec
* update-alternatives-suse.patch
- New upstream release 1.21.1
dpkg (1.21.1) unstable; urgency=medium
[ Guillem Jover ]
* dpkg-buildpackage: Remove duplicate command print for dpkg-genchanges.
* dpkg-buildpackage: Fix build description due to improper multiline match.
* dpkg-realpath: Remove spurious heading space from --help output.
* update-alternatives: When initializing admindir from DPKG_ADMINDIR append
"/alternatives". Closes: #1001198
* Code internals:
- Remove
participants (1)
-
Guillaume Gardet