May 2024 - MicroOS - openSUSE Mailing Lists

New ARM MicroOS snapshot 20240516 released!
by Guillaume Gardet 17 May '24

17 May '24

Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=3&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: bolt (0.9.7 -> 0.9.8) gdk-pixbuf (2.42.11 -> 2.42.12) glib2 (2.80.0 -> 2.80.2) grub2 hwdata (0.380 -> 0.382) iproute2 (6.8 -> 6.9) libbpf (1.4.1 -> 1.4.2) libmodulemd libxml2 (2.12.6 -> 2.12.7) makedumpfile (1.7.4 -> 1.7.5) mozilla-nss (3.99 -> 3.100) passt (20240426.d03c4e2 -> 20240510.7288448) patterns-base perl-URI (5.270.0 -> 5.280.0) pipewire powerdevil6 sdbootutil (1+git20240506.573a6a4 -> 1+git20240514.56dc89c) soundtouch (2.3.2 -> 2.3.3) xwayland (23.2.6 -> 24.1.0) === Details === ==== bolt ==== Version update (0.9.7 -> 0.9.8) - update to 0.9.8: * A new NHI for REMBRANDT. * CI fixes. * Don't install an empty DB directory. * Fixed: Determine the string length before writing file. * Fixed: Free on error to prevent resource leak. ==== gdk-pixbuf ==== Version update (2.42.11 -> 2.42.12) Subpackages: gdk-pixbuf-query-loaders gdk-pixbuf-thumbnailer libgdk_pixbuf-2_0-0 typelib-1_0-GdkPixbuf-2_0 - Update to version 2.42.12: + Fix a build failure, + Fix occasional build failures, + ani: Reject files with multiple INA or IART chunks, + ani: Reject files with multiple anih chunks (CVE-2022-48622), + ani: validate chunk size, + Updated translations. - Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed upstream. ==== glib2 ==== Version update (2.80.0 -> 2.80.2) Subpackages: glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 typelib-1_0-GLib-2_0 typelib-1_0-GModule-2_0 typelib-1_0-GObject-2_0 typelib-1_0-Gio-2_0 - Update to version 2.80.2: + Fix a regression with IBus caused by the fix for CVE-2024-34397. + Fix installation directory of the GVariant specification. + Bugs fixed: - GVariant specification installed in wrong directory. - Backport "gdbusconnection: Fix test signal subscription ordering" to glib-2-80. - Backport âCorrect installation directory of GVariant specificationâ to glib-2-80. - Backport âgdbusconnection: Allow name owners to have the syntax of a well-known nameâ to glib-2-80. - Changes from version 2.80.1 + Fix CVE-2024-34397: GDBus signal subscriptions for well-known names are vulnerable to unicast spoofing. + Updated translations. ==== grub2 ==== Subpackages: grub2-arm64-efi grub2-snapper-plugin - Update to the latest upstreaming TPM2 patches * 0001-key_protector-Add-key-protectors-framework.patch - Replace 0001-protectors-Add-key-protectors-framework.patch * 0002-tpm2-Add-TPM-Software-Stack-TSS.patch - Merge other TSS patches * 0001-tpm2-Add-TPM2-types-structures-and-command-constants.patch * 0002-tpm2-Add-more-marshal-unmarshal-functions.patch * 0003-tpm2-Implement-more-TPM2-commands.patch * 0003-key_protector-Add-TPM2-Key-Protector.patch - Replace 0003-protectors-Add-TPM2-Key-Protector.patch * 0004-cryptodisk-Support-key-protectors.patch * 0005-util-grub-protect-Add-new-tool.patch * 0001-tpm2-Support-authorized-policy.patch - Replace 0004-tpm2-Support-authorized-policy.patch * 0001-tpm2-Add-extra-RSA-SRK-types.patch * 0001-tpm2-Implement-NV-index.patch - Replace 0001-protectors-Implement-NV-index.patch * 0002-cryptodisk-Fallback-to-passphrase.patch * 0003-cryptodisk-wipe-out-the-cached-keys-from-protectors.patch * 0004-diskfilter-look-up-cryptodisk-devices-first.patch - Refresh affected patches * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch * grub2-bsc1220338-key_protector-implement-the-blocklist.patch - New manpage for grub2-protect - Fix error in /etc/grub.d/20_linux_xen: file_is_not_sym not found, renamed to file_is_not_xen_garbage (bsc#1224226) * grub2-fix-menu-in-xen-host-server.patch ==== hwdata ==== Version update (0.380 -> 0.382) - update to 0.382: * Update pci, usb and vendor ids ==== iproute2 ==== Version update (6.8 -> 6.9) - Update to release 6.9 * ss: add option to suppress queue columns * m_mirred: allow mirred to block * tc: add NLM_F_ECHO support for actions and filters * ip/bond: add coupled_control support * ss: add support for BPF socket-local storage * ip: ioam6: add monitor command ==== libbpf ==== Version update (1.4.1 -> 1.4.2) - update to 1.4.2: * Another struct_ops-focused bug fix release. It addresses a few more corner cases when dealing with SEC("struct_ops") programs. * It also improves error messaging around common use case of declaring struct_ops BPF program and not referencing it from SEC(".struct_ops") variable (backed by struct_ops BPF map). * This release should improve overall experience of using BPF struct_ops functionality. ==== libmodulemd ==== - Add glib-2.80.2-glibdoc-path.patch: Fix GLib documentation path for GLib 2.80.2 (https://github.com/fedora-modularity/libmodulemd/pull/618). ==== libxml2 ==== Version update (2.12.6 -> 2.12.7) Subpackages: libxml2-2 libxml2-tools - Update to version 2.12.7: + Fix buffer overread with `xmllint --htmlout` (CVE-2024-34459). + xmllint: Fix --pedantic option. + save: Handle invalid parent pointers in xhtmlNodeDumpOutput. ==== makedumpfile ==== Version update (1.7.4 -> 1.7.5) - Update to 1.7.5: * Support for kernels up to v6.8 (x86_64) * Support for printk caller_id by --dump-dmesg option * [PATCH] ppc64: get vmalloc start address from vmcoreinfo * [PATCH] ppc64: read cur_mmu_type from vmcoreinfo * [PATCH] add PRINTK_CALLER id support to --dump-dmesg option * [PATCH v2 2/2] s390x: uncouple virtual and physical address spaces * [PATCH 1/2] s390x: fix virtual vs physical address confusion Regenerated the content of the makedumpfile-ppc64-VA-range-SUSE.patch file based on version 1.7.5 of the code ==== mozilla-nss ==== Version update (3.99 -> 3.100) Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs - update to NSS 3.100 - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for faster Xyber operations. - bmo#1893752 - remove ckcapi. - bmo#1893162 - avoid a potential PK11GenericObject memory leak. - bmo#671060 - Remove incomplete ESDH code. - bmo#215997 - Decrypt RSA OAEP encrypted messages. - bmo#1887996 - Fix certutil CRLDP URI code. - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys. - bmo#676118 - Add ability to encrypt and decrypt CMS messages using ECDH. - bmo#676100 - Correct Templates for key agreement in smime/cmsasn.c. - bmo#1548723 - Moving the decodedCert allocation to NSS. - bmo#1885404 - Allow developers to speed up repeated local execution of NSS tests that depend on certificates. ==== passt ==== Version update (20240426.d03c4e2 -> 20240510.7288448) Subpackages: passt-selinux - Update to version 20240510.7288448: * apparmor: allow read access on /tmp for pasta * tcp_splice: Set OUT_WAIT_ flag whenever pipe isn't emptied * udp: Single buffer for IPv4, IPv6 headers and metadata * udp: Use the same buffer for the L2 header for all frames * udp: Share payload buffers between IPv4 and IPv6 * udp: Explicitly set checksum in guest-bound UDP headers * udp: Combine initialisation of IPv4 and IPv6 iovs * udp: Split tap-bound UDP packets into multiple buffers using io vector * test: Allow sftp via vsock-ssh in tests * tcp: Update tap specific header too in tcp_fill_headers[46]() * iov: Helper macro to construct iovs covering existing variables or fields * tap, tcp: (Re-)abstract TAP specific header handling * tcp: Simplify packet length calculation when preparing headers * treewide: Standardise variable names for various packet lengths * checksum: Make csum_ip4_header() take a host endian length * treewide: Remove misleading and redundant endianness notes * tap: Remove unused structs tap_msg, tap_l4_msg * tap: Split tap specific and L2 (ethernet) headers * checksum: Use proto_ipv6_header_psum() for ICMPv6 as well * netlink: Fix iterations over nexthop objects ==== patterns-base ==== Subpackages: patterns-base-base patterns-base-bootloader patterns-base-minimal_base patterns-base-x11 - add procps into the base pattern as recommended together with zypper (which dropped the dependency) ==== perl-URI ==== Version update (5.270.0 -> 5.280.0) - updated to 5.28 see /usr/share/doc/packages/perl-URI/Changes 5.28 2024-03-27 01:49:44Z - Using Scalar::Util::reftype instead of just ref(), but mindful this time about definedness to avoid warnings (GH#140) (Jacques Deguest) ==== pipewire ==== Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Move modules jack-tunnel and jackdbus-detect to the pipewire-spa-plugins-0_2-jack since those modules should only be used when the real jack server is running. This fixes pipewire starting jackdbus on start. ==== powerdevil6 ==== - Recommend ddcutil-i2c-udev-rules (boo#1224197) ==== sdbootutil ==== Version update (1+git20240506.573a6a4 -> 1+git20240514.56dc89c) Subpackages: sdbootutil-rpm-scriptlets sdbootutil-snapper - Update to version 1+git20240514.56dc89c: * Add show-entry command * Add SYSTEMD_COLORS flag * Add byte order mark to boot.csv ==== soundtouch ==== Version update (2.3.2 -> 2.3.3) - Update to 2.3.3: * Fixing compiler warnings, maintenance fixes to make/build files for various systems - Refresh disable-ffast-math.patch ==== xwayland ==== Version update (23.2.6 -> 24.1.0) - Update to feature release 24.1.0 * This fixes a couple of regressions introduced in the previous release candidate versions along with a fix for XTEST emulation with EI. + xwayland: Send ei_device_frame on device_scroll_discrete + xwayland: Restore the ResizeWindow handler + xwayland: Handle rootful resize in ResizeWindow + xwayland: Move XRandR emulation to the ResizeWindow hook + xwayland: Use correct xwl_window lookup function in xwl_set_shape - eglstreams has been dropped - Update to bug fix relesae 23.2.7 * m4: drop autoconf leftovers * xwayland: Send ei_device_frame on device_scroll_discrete * xwayland: Call drmFreeDevice for dma-buf default feedback * xwayland: Use drmDevicesEqual in xwl_dmabuf_feedback_tranche_done * dri3: Free formats in cache_formats_and_modifiers * xwayland/glamor: Handle depth 15 in gbm_format_for_depth * Revert "xwayland/glamor: Avoid implicit redirection with depth 32 parent windows" * xwayland: Check for outputs before lease devices * xwayland: Do not remove output on withdraw if leased

1 0

New ARM MicroOS snapshot 20240515 released!
by Guillaume Gardet 17 May '24

17 May '24

Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=3&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: AppStream (1.0.2 -> 1.0.3) AppStream-qt6 (1.0.2 -> 1.0.3) Mesa Mesa-drivers MicroOS-release (20240512 -> 20240515) NetworkManager distrobox (1.7.1 -> 1.7.2.1) gnome-browser-connector gnome-control-center installation-images-MicroOS (17.125 -> 17.127) kernel-firmware (20240426 -> 20240510) kernel-source (6.8.8 -> 6.8.9) kf6-kirigami (6.2.0 -> 6.2.1) krb5 libzypp (17.32.5 -> 17.34.0) mandoc openssh pipewire (1.0.5+git36.60deeb2 -> 1.0.6) podman (5.0.2 -> 5.0.3) python-Mako (1.3.3 -> 1.3.4) systemd (255.5 -> 255.6) vlc yast2 (5.0.6 -> 5.0.8) zvbi zypper (1.14.71 -> 1.14.73) === Details === ==== AppStream ==== Version update (1.0.2 -> 1.0.3) - Update to version 1.0.3: + Features: * validator: Check that description lists don't get translated * validator: Improve translation checks for descriptions * cli: compose: Allow to propagate selected custom entries to catalog output * validator: Check for common typo of "scheme_preference" branding property * xml: Generate a developer_name compat tag for older 3rd-party parsers * validator: Flag duplicate branding colors as invalid * Add Plasma Mobile as recognized desktop-style + Specification: * docs: Clarify a developer element is not allowed to exist multiple times * docs: Explicitly clarify a developer/name element must not be repeated * docs: Clarify metainfo translation rules a bit + Bugfixes: * qt: Fix relocation of Config.cmake files * cli: check-syscompat: Recognize available required controls as available * validator: Guard issue emission functions with G_GNUC_PRINTF * validator: Always use secure string formatting for issue emit function * utils: Explicitly set format style when installing catalog metadata * Suppress static-analyzer drawing wrong conclusions on GCC 14 + Miscellaneous: * docs: List AppStreamCompose as related to AppStream * docs: Add manpages back * validator: Mark developer-id-missing as info-priority again ==== AppStream-qt6 ==== Version update (1.0.2 -> 1.0.3) - Update to version 1.0.3: + Features: * validator: Check that description lists don't get translated * validator: Improve translation checks for descriptions * cli: compose: Allow to propagate selected custom entries to catalog output * validator: Check for common typo of "scheme_preference" branding property * xml: Generate a developer_name compat tag for older 3rd-party parsers * validator: Flag duplicate branding colors as invalid * Add Plasma Mobile as recognized desktop-style + Specification: * docs: Clarify a developer element is not allowed to exist multiple times * docs: Explicitly clarify a developer/name element must not be repeated * docs: Clarify metainfo translation rules a bit + Bugfixes: * qt: Fix relocation of Config.cmake files * cli: check-syscompat: Recognize available required controls as available * validator: Guard issue emission functions with G_GNUC_PRINTF * validator: Always use secure string formatting for issue emit function * utils: Explicitly set format style when installing catalog metadata * Suppress static-analyzer drawing wrong conclusions on GCC 14 + Miscellaneous: * docs: List AppStreamCompose as related to AppStream * docs: Add manpages back * validator: Mark developer-id-missing as info-priority again ==== Mesa ==== Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - Enable libvulkan_intel on arm ==== Mesa-drivers ==== Subpackages: Mesa-dri Mesa-gallium - Enable libvulkan_intel on arm ==== MicroOS-release ==== Version update (20240512 -> 20240515) Subpackages: MicroOS-release-appliance MicroOS-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== NetworkManager ==== Subpackages: NetworkManager-bluetooth NetworkManager-wwan libnm0 typelib-1_0-NM-1_0 - Don't recommend ModemManager for the main package, as it's only needed by NetworkManager-wwan subpackage(bsc#1100395). ==== distrobox ==== Version update (1.7.1 -> 1.7.2.1) Subpackages: distrobox-bash-completion - Update to version 1.7.2.1 + changes from 1.7.2.1 * chore(init): Add sudo to Wolfi (#1375) * Add fedora toolbox 40 to list of compatible images (#1377) * init: fix setting empty DISPLAY variable, breaking gpg + changes from 1.7.2 * all: properly handle env vars and configs in all commands (#1328) * chore: bump CI actions, minor fixes to README and other files (#1345) * docs: Specify that distrobox is in the extra repo (#1316) * docs: Support latest alpine (#1341) * docs: Update copyright in footer (#1365) * docs: Update useful_tips.md (#1330) * enter: make log_timestamp date format universally compatible (#1343) * export: cancel export when trying to delete (#1340) * export: consider only absolute candidate icon paths that exist (#1318) * init: Support musl variant of Void Linux (#1327) * init: add explicit creation of /etc/fish/conf.d (#1348) * init: massively speed up apt/pacman/xbps deps install (#1324) * install: use more portable install(1) arguments (#1364) * CI: fix hostname test * CI: try to ensure enough disk space * CI: use shell-funcheck * all: improve function docs * assemble: add custom hostname support * create: fix regression with rootless runc 1.20~rc1 (#1359) * docs: add Slackware 15 (#1357) * docs: move upgrading instruction a bit more ahead (#1342) * docs: update xhost command to be silent (#1350) * enter: Fix support for Active Directory usernames including backslashes (#1360) * enter: fix regression in fish shell login with initful systems * enter: fix typo in command generation (#1331) * export: fix duplicate extra_flags (#1311) * export: use different symbol for IFS (#1351) * init, create: use $CONTAINER_ID to distinguish container's prompts. Use host's hostname by default. * init: ensure fish config is sourced only on interactive shell (#1292) * init: fix endless hook append (#1320) * init: fix performance regression in skel file setup (#1317) * init: forward wayland display only if it is set * rm: revert 22bc081, simplify removal of exported app/bins (#1301) ==== gnome-browser-connector ==== - Patch to support python 3.6 on SLE/Leap 15.6 (bsc#1223902): python36.patch. ==== gnome-control-center ==== Subpackages: gnome-control-center-color gnome-control-center-goa - Re-Enable location-services support: + Pass -Dlocation-services=enabled to meson. * * Support had been disabled by upstream as the mozilla location service will shut down. which in turn means location service will not be very accurate anymore. ==== installation-images-MicroOS ==== Version update (17.125 -> 17.127) - merge gh#openSUSE/installation-images#715 - remove fbiterm (bsc#1224053) - 17.127 - merge gh#openSUSE/installation-images#714 - Add support for Slowroll - 17.126 ==== kernel-firmware ==== Version update (20240426 -> 20240510) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-ath12k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update to version 20240510 (git commit 7c2303328d8e): * linux-firmware: Amphion: Update vpu firmware * linux-firmware: Update firmware file for Intel BlazarU core * linux-firmware: Update firmware file for Intel Bluetooth Magnetor core * linux-firmware: Update firmware file for Intel Bluetooth Solar core * linux-firmware: Update firmware file for Intel Bluetooth Solar core * i915: Add BMG DMC v2.06 * linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 * linux-firmware: Update firmware tuning for HP Consumer Laptop * amdgpu: DMCUB updates for various AMDGPU ASICs * rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B * rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B * cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops * linux-firmware: Add firmware and tuning for Lenovo Y770S ==== kernel-source ==== Version update (6.8.8 -> 6.8.9) - ACPI: video: Add backlight=native quirk for Lenovo Slim 7 16ARH7 (bsc#1217750). - commit dca0b95 - Update patches.kernel.org/6.8.2-636-rds-tcp-Fix-use-after-free-of-net-in-reqsk_tim… references (add CVE-2024-26865 bsc#1223062). - commit eadd052 - Update patches.kernel.org/6.8.2-662-packet-annotate-data-races-around-ignore_outgo… references (add CVE-2024-26862 bsc#1223111). - commit dc3978a - drm/amdgpu: fix doorbell regression (git-fixes). - commit aa245c7 - Linux 6.8.9 (bsc#1012628). - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (bsc#1012628). - Bluetooth: hci_sync: Fix UAF on create_le_conn_complete (bsc#1012628). - Bluetooth: hci_sync: Fix UAF in hci_acl_create_conn_sync (bsc#1012628). - bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS (bsc#1012628). - phy: qcom: qmp-combo: fix VCO div offset on v5_5nm and v6 (bsc#1012628). - i2c: smbus: fix NULL function pointer dereference (bsc#1012628). - RISC-V: selftests: cbo: Ensure asm operands match constraints, take 2 (bsc#1012628). - riscv: hwprobe: fix invalid sign extension for RISCV_HWPROBE_EXT_ZVFHMIN (bsc#1012628). - sched/eevdf: Prevent vlag from going out of bounds in reweight_eevdf() (bsc#1012628). - sched/eevdf: Fix miscalculation in reweight_entity() when se is not curr (bsc#1012628). - sched/eevdf: Always update V if se->on_rq when reweighting (bsc#1012628). - dt-bindings: eeprom: at24: Fix ST M24C64-D compatible schema (bsc#1012628). - phy: ti: tusb1210: Resolve charger-det crash if charger psy is unregistered (bsc#1012628). - riscv: Fix loading 64-bit NOMMU kernels past the start of RAM (bsc#1012628). - riscv: Fix TASK_SIZE on 64-bit NOMMU (bsc#1012628). - dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (bsc#1012628). - dma: xilinx_dpdma: Fix locking (bsc#1012628). - dmaengine: idxd: Convert spinlock to mutex to lock evl workqueue (bsc#1012628). - phy: qcom: m31: match requested regulator name with dt schema (bsc#1012628). - phy: rockchip: naneng-combphy: Fix mux on rk3588 (bsc#1012628). - phy: rockchip-snps-pcie3: fix clearing PHP_GRF_PCIESEL_CON bits (bsc#1012628). - phy: rockchip-snps-pcie3: fix bifurcation on rk3588 (bsc#1012628). - phy: freescale: imx8m-pcie: fix pcie link-up instability (bsc#1012628). - phy: marvell: a3700-comphy: Fix hardcoded array size (bsc#1012628). - phy: marvell: a3700-comphy: Fix out of bounds read (bsc#1012628). - soundwire: amd: fix for wake interrupt handling for clockstop mode (bsc#1012628). - idma64: Don't try to serve interrupts when device is powered off (bsc#1012628). - dmaengine: tegra186: Fix residual calculation (bsc#1012628). - dmaengine: owl: fix register access functions (bsc#1012628). - mm: zswap: fix shrinker NULL crash with cgroup_disable=memory (bsc#1012628). - mm: turn folio_test_hugetlb into a PageType (bsc#1012628). - phy: qcom: qmp-combo: Fix VCO div offset on v3 (bsc#1012628). - phy: qcom: qmp-combo: Fix register base for QSERDES_DP_PHY_MODE (bsc#1012628). - firmware: qcom: uefisecapp: Fix memory related IO errors and crashes (bsc#1012628). - mtd: diskonchip: work around ubsan link failure (bsc#1012628). - mtd: limit OTP NVMEM cell parse to non-NAND devices (bsc#1012628). - udp: preserve the connected status if only UDP cmsg (bsc#1012628). - fbdev: fix incorrect address computation in deferred IO (bsc#1012628). - stackdepot: respect __GFP_NOLOCKDEP allocation flag (bsc#1012628). - macsec: Detect if Rx skb is macsec-related for offloading devices that update md_dst (bsc#1012628). - macsec: Enable devices to advertise whether they update sk_buff md_dst during offloads (bsc#1012628). - net: b44: set pause params only when interface is up (bsc#1012628). - ethernet: Add helper for assigning packet type when dest address does not match device address (bsc#1012628). - net/mlx5e: Advertise mlx5 ethernet driver updates sk_buff md_dst for MACsec (bsc#1012628). - ACPI: CPPC: Fix access width used for PCC registers (bsc#1012628). - ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro (bsc#1012628). - ACPI: CPPC: Use access_width over bit_width for system memory accesses (bsc#1012628). ... changelog too long, skipping 334 lines ... - commit e7fcfd8 ==== kf6-kirigami ==== Version update (6.2.0 -> 6.2.1) Subpackages: kf6-kirigami-imports libKirigamiPlatform6 - Update to 6.2.1 * New bugfix release - Changes since 6.2.0: * Revert "Dialog: Always use an overlay as visual parent" ==== krb5 ==== - Enable the LMDB backend for KDB ==== libzypp ==== Version update (17.32.5 -> 17.34.0) - version 17.34.0 (34) - Fix versioning scheme - version 17.33.4 (35) - add one more missing export for libyui-qt-pkg - Revert eintrSafeCall behavior to setting errno to 0. - version 17.33.3 (34) - fix up requires_eq usage for libsolv-tools-base - add one more missing export for PackageKit - version 17.33.2 - version 17.33.1 (33) - switch to reduced size libsolv-tools-base (jsc#PED-8153) - Fixed check for outdated repo metadata as non-root user (bsc#1222086) - Add ZYPP_API for exported functions and switch to visibility=hidden (jsc#PED-8153) - Dynamically resolve libproxy (jsc#PED-8153) - version 17.33.0 (33) - Fix download from gpgkey URL (bsc#1223430, fixes openSUSE/zypper#546) - version 17.32.6 (32) ==== mandoc ==== - Add /usr/lib/rpm/lua/mandoc.lua and use it for processing man pages in the trigger scripts, making processing of packages with many man pages (see OpenSSL for an example) significantly faster. ==== openssh ==== Subpackages: openssh-clients openssh-common openssh-server - Only for SLE15, restore the patch file removed in Thu Feb 18 13:54:44 UTC 2021 to restore the previous behaviour from SP5 of having root password login allowed by default (fixes bsc#1223486, related to bsc#1173067): * openssh-7.7p1-allow_root_password_login.patch - Since the default value for this config option is now set to permit root to use password logins in SLE15, the openssh-server-config-rootlogin subpackage isn't useful there so we now create an openssh-server-config-disallow-rootlogin subpackage that sets the configuration the other way around than openssh-server-config-rootlogin. ==== pipewire ==== Version update (1.0.5+git36.60deeb2 -> 1.0.6) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Update to version 1.0.6: * Highlights - A bitfield race was fixed that could cause some crashes or undefined behaviour when moving nodes between drivers. - Fix to some invalid memory access in the pw-mon and pw-dump. - A regression in kodi with IEC958 formats playback was fixed. - A race in the ALSA plugin was fixed when updating the eventfd. - Improvements and fixes to module-combine-stream. - Negotiation was improved in pipewiresrc. - Some more small fixes and improvements. * PipeWire - Context properties are now set early so that client properties can be matched with rules. - A bitfield race was fixed that could cause some crashes or undefined behaviour when moving nodes between drivers. * Tools - Fix failure to hide properties in pw-mon. (#3997) - Fix some memleaks and a crash in pw-dump. (#4001) * Modules - The combine-stream module now prevents resampling to avoid broken audio because of different samplerates. - Fix a potential double free in module-loopback when calculating the delay. (#3748) - The FFADO module now only starts when ports are negotiated to avoid startup races. (#3968) - The combine-stream module will now forward tags. * SPA - Monitor volumes are now also clamped to the min/max volumes. (#3962) - V4l2 and libcamera now encodes the device ids into a JSON array. This is part of the deduplication code of devices. - A regression in kodi with IEC958 formats playback was fixed. * Bluetooth - Improved buffer handling and queued data when stopping. * ALSA - A race was fixed when updating the eventfd. (#3711) * GStreamer - Handle some errors better instead of crashing. (#3994) - Fix a memleak in the stream params handling. - Negotiation was improved in pipewiresrc. ==== podman ==== Version update (5.0.2 -> 5.0.3) - Update to version 5.0.3: * Bump to v5.0.3 * Update release notes for v5.0.3 * [v5.0] Bump Buildah to v1.35.4 CVE-2024-3727 (bsc#1224122) * [CI:DOCS] Fix artifact action * [CI:DOCS] Build & upload release artifacts with GitHub Actions * Fix machine volumes with long path and paths with dashes * Disable failing bud test * Remove unncessary lines at the end of specfile summary * Add GitHub action to update version on Podman.io * Bump to v5.0.3-dev ==== python-Mako ==== Version update (1.3.3 -> 1.3.4) - update to 1.3.4: * Fixed regression caused by the fix for :ticket:`320` where new logic added to interpret list and dictionary comprehensions would fail for expression oriented keys. As the parsing in question was not necessary for these keys, it's been removed. * Fixed issue where a parsed expression which contained sub-brackets, such as dictionary literals, would fail to be interpreted correctly even though the initial parsing is correct. ==== systemd ==== Version update (255.5 -> 255.6) Subpackages: libsystemd0 libudev1 systemd-boot systemd-coredump systemd-experimental udev - Import commit a3dccacb97e94ed91f1c41ce82ef13bfe8fa1a79 (merge of v255.6) For a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/49fb09fa18a7b81f6b3c3c15aca47fd… ==== vlc ==== Subpackages: libvlc5 libvlccore9 vlc-noX vlc-qt - Address build failures with GCC 14 (boo#1223909): + Add 4645.patch: fix incompatible-pointer-types assignment on Linux. ==== yast2 ==== Version update (5.0.6 -> 5.0.8) - Properly close nested progress callbacks (bsc#1223281) - 5.0.8 - removed "journalctl --dmesg" from save_y2los - replaced "journalctl --dmesg" with "journalctl -b" - 5.0.7 ==== zvbi ==== - added patches fix build with gcc14 https://github.com/zapping-vbi/zvbi/commit/ae74ae513714f81b9b8abdb12e1b235d… + zvbi-gcc14.patch ==== zypper ==== Version update (1.14.71 -> 1.14.73) Subpackages: zypper-needs-restarting - Fixed check for outdated repo metadata as non-root user (bsc#1222086) - BuildRequires: libzypp-devel >= 17.33.0. - Delay zypp lock until command options are parsed (bsc#1223766) - version 1.14.73 - Unify message format(fixes #485) - version 1.14.72 - switch cmake build type to RelWithDebInfo - modernize spec file (remove Authors section, use proper macros, remove redundant clean section, don't mark man pages as doc) - switch to -O2 -fvisibility=hidden -fpie: * PIC is not needed as no shared lib is built * fstack-protector-strong is default on modern dists and would be downgraded by fstack-protector * default visibility hidden allows better optimisation * O2 is reducing inlining bloat - > 18% reduced binary size - remove procps requires (was only for ZMD which is dropped) (jsc#PED-8153)

1 0

New ARM MicroOS snapshot 20240512 released!
by Guillaume Gardet 14 May '24

14 May '24

Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=3&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MicroOS-release (20240424 -> 20240512) SDL2 (2.30.2 -> 2.30.3) aalib accountsservice acl btrfsprogs (6.8 -> 6.8.1) ca-certificates (2+git20230406.2dae8b7 -> 2+git20240415.3fe9324) cloud-init conmon (2.1.10 -> 2.1.11) containerd (1.7.10 -> 1.7.15) cyrus-sasl distribution-logos-openSUSE (20240404 -> 20240429) docker (25.0.3_ce -> 26.1.0_ce) dracut (059+suse.563.g4900899a -> 059+suse.581.g19b7c06c) evolution-data-server (3.52.0 -> 3.52.1) ffmpeg-4 ffmpeg-6 flatpak (1.15.6 -> 1.15.8) fribidi (1.0.13 -> 1.0.14) fwupd (1.9.16 -> 1.9.19) gcc13 (13.2.1+git8285 -> 13.2.1+git8761) gcc14 (14.0.1+git10008 -> 14.1.0+git10173) gdk-pixbuf (2.42.10 -> 2.42.11) glibc glslang (14.1.0 -> 14.2.0) gnome-browser-connector gnome-control-center (46.0.1 -> 46.1) gnome-initial-setup (46.0 -> 46.1) gnome-settings-daemon gnome-shell (46.0 -> 46.1) gnome-shell-extensions (46.0 -> 46.1) gnome-software (46.0 -> 46.1) gnome-terminal (3.52.0 -> 3.52.1) gnome-tweaks (46.0 -> 46.1) gnome-user-docs (46.0 -> 46.1) gobject-introspection google-noto-coloremoji-fonts (20230315 -> 20240424) google-noto-fonts (20240401 -> 20240501) gpsd grub2 gsettings-desktop-schemas gstreamer gtk2 gtk4 (4.14.3 -> 4.14.4) harfbuzz hyper-v installation-images-MicroOS (17.121 -> 17.125) iso-codes kernel-firmware (20240419 -> 20240426) kernel-source (6.8.7 -> 6.8.8) kf6-attica (6.1.0 -> 6.2.0) kf6-baloo (6.1.0 -> 6.2.0) kf6-bluez-qt (6.1.0 -> 6.2.0) kf6-breeze-icons (6.1.0 -> 6.2.0) kf6-frameworkintegration (6.1.0 -> 6.2.0) kf6-karchive (6.1.0 -> 6.2.0) kf6-kauth (6.1.0 -> 6.2.0) kf6-kbookmarks (6.1.0 -> 6.2.0) kf6-kcmutils (6.1.0 -> 6.2.0) kf6-kcodecs (6.1.0 -> 6.2.0) kf6-kcolorscheme (6.1.0 -> 6.2.0) kf6-kcompletion (6.1.0 -> 6.2.0) kf6-kconfig (6.1.0 -> 6.2.0) kf6-kconfigwidgets (6.1.0 -> 6.2.0) kf6-kcoreaddons (6.1.0 -> 6.2.0) kf6-kcrash (6.1.0 -> 6.2.0) kf6-kdbusaddons (6.1.0 -> 6.2.0) kf6-kdeclarative (6.1.0 -> 6.2.0) kf6-kded (6.1.0 -> 6.2.0) kf6-kdesu (6.1.0 -> 6.2.0) kf6-kdnssd (6.1.0 -> 6.2.0) kf6-kdoctools (6.1.0 -> 6.2.0) kf6-kfilemetadata (6.1.0 -> 6.2.0) kf6-kglobalaccel (6.1.0 -> 6.2.0) kf6-kguiaddons (6.1.0 -> 6.2.0) kf6-kholidays (6.1.0 -> 6.2.0) kf6-ki18n (6.1.0 -> 6.2.0) kf6-kiconthemes (6.1.0 -> 6.2.0) kf6-kidletime (6.1.0 -> 6.2.0) kf6-kio (6.1.0 -> 6.2.0) kf6-kirigami (6.1.0 -> 6.2.0) kf6-kitemmodels (6.1.0 -> 6.2.0) kf6-kitemviews (6.1.0 -> 6.2.0) kf6-kjobwidgets (6.1.0 -> 6.2.0) kf6-knewstuff (6.1.0 -> 6.2.0) kf6-knotifications (6.1.0 -> 6.2.0) kf6-knotifyconfig (6.1.0 -> 6.2.0) kf6-kpackage (6.1.0 -> 6.2.0) kf6-kparts (6.1.0 -> 6.2.0) kf6-kpty (6.1.0 -> 6.2.0) kf6-kquickcharts (6.1.0 -> 6.2.0) kf6-krunner (6.1.0 -> 6.2.0) kf6-kservice (6.1.0 -> 6.2.0) kf6-kstatusnotifieritem (6.1.0 -> 6.2.0) kf6-ksvg (6.1.0 -> 6.2.0) kf6-ktexteditor (6.1.0 -> 6.2.0) kf6-ktextwidgets (6.1.0 -> 6.2.0) kf6-kunitconversion (6.1.0 -> 6.2.0) kf6-kuserfeedback (6.1.0 -> 6.2.0) kf6-kwallet (6.1.0 -> 6.2.0) kf6-kwidgetsaddons (6.1.0 -> 6.2.0) kf6-kwindowsystem (6.1.0 -> 6.2.0) kf6-kxmlgui (6.1.0 -> 6.2.0) kf6-modemmanager-qt (6.1.0 -> 6.2.0) kf6-networkmanager-qt (6.1.0 -> 6.2.0) kf6-prison (6.1.0 -> 6.2.0) kf6-purpose (6.1.0 -> 6.2.0) kf6-qqc2-desktop-style (6.1.0 -> 6.2.0) kf6-solid (6.1.0 -> 6.2.0) kf6-sonnet (6.1.0 -> 6.2.0) kf6-syndication (6.1.0 -> 6.2.0) kf6-syntax-highlighting (6.1.0 -> 6.2.0) kirigami-addons6 (1.1.0 -> 1.2.0) krb5 libarchive (3.7.2 -> 3.7.4) libbpf (1.4.0 -> 1.4.1) libcontainers-common libgpg-error (1.48 -> 1.49) libnvme (1.8+0.gbff7dda -> 1.9+0.g80c5cf2) libproxy-backend (0.5.5 -> 0.5.6) libproxy-client (0.5.5 -> 0.5.6) libqaccessibilityclient-qt6 (0.5.0 -> 0.6.0) libupnp (1.14.18 -> 1.14.19) libxslt llvm18 (18.1.4 -> 18.1.5) mobile-broadband-provider-info (20230416 -> 20240407) mutter (46.0 -> 46.1) nautilus (46.0 -> 46.1) ncurses (6.4.20240414 -> 6.5.20240427) nvme-cli (2.8 -> 2.9.1) openssl-3 osinfo-db passt (20240405.954589b -> 20240426.d03c4e2) patterns-base pcre2 pcsc-lite (2.0.3 -> 2.1.0) pipewire (1.0.5 -> 1.0.5+git36.60deeb2) pixman (0.43.2 -> 0.43.4) podman polkit-default-privs (1550+20240325.eddbe04 -> 1550+20240430.5327266) python-Jinja2 (3.1.3 -> 3.1.4) python-cryptography (42.0.5 -> 42.0.6) python-jsonschema (4.21.1 -> 4.22.0) python-referencing (0.34.0 -> 0.35.1) python311 python311-core qemu (8.2.2 -> 8.2.3) qt6-base re2 (20240401 -> 20240501) rebootmgr (2.4 -> 2.4+git20240503.5b98913) rust-keylime (0.2.4~0 -> 0.2.5~0) sdbootutil (1+git20240410.3325802 -> 1+git20240506.573a6a4) sddm sddm-qt6 setools (4.5.0 -> 4.5.1) slirp4netns (1.2.3 -> 1.3.0) sof-firmware (2023.12.1 -> 2024.03) sqlite3 (3.45.2 -> 3.45.3) systemd (255.4 -> 255.5) systemd-presets-branding-Aeon taglib thin-provisioning-tools tpm2-0-tss (4.0.1 -> 4.1.0) tpm2.0-tools (5.6 -> 5.7) tracker (3.7.1 -> 3.7.3) tracker-miners (3.7.1 -> 3.7.3) transactional-update (4.6.6 -> 4.6.8) util-linux (2.39.3 -> 2.40.1) util-linux-systemd (1.3.1 -> 2.40.1) vlc vte (0.76.0 -> 0.76.1) wireplumber wtmpdb (0.11.0 -> 0.12.0+git.20240508) xconsole (1.0.8 -> 1.1.0) xdg-desktop-portal-gnome (46.0 -> 46.1) xxhash === Details === ==== MicroOS-release ==== Version update (20240424 -> 20240512) Subpackages: MicroOS-release-appliance MicroOS-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== SDL2 ==== Version update (2.30.2 -> 2.30.3) - Update to release 2.30.3 * Fixed a pointer warping issue on XWayland * Reduced startup time when scanning for game controllers on Linux ==== aalib ==== - Remove conditionals for SUSE 11.3 - Add -fpermissive to optflags (boo#1223910). ==== accountsservice ==== Subpackages: libaccountsservice0 typelib-1_0-AccountsService-1_0 - Keep en and en_GB 'translations' in the main package: do not force -lang packages onto all users. ==== acl ==== - BuildRequire gettext-devel instead of gettext-tools-mini: let OBS sort out if the -mini package is the right one to be used or not. ==== btrfsprogs ==== Version update (6.8 -> 6.8.1) Subpackages: btrfsprogs-udev-rules libbtrfs0 libbtrfsutil1 - update to 6.8.1 * mkfs: fix writing on zoned device when block-group-tree is selected * tune: fix writing on zoned device with option --convert-to-block-group-tree * check: * more progress and error messages * unify handling of unknown command line options with other commands * subvolume delete: remove options --delete-qgroup and --no-delete-qgroup (added in 6.6.3), qgroup deletion does not always work due to delayed background processing of subvolume or set value in sysfs:ggroup/drop_subtree_threshold * other: * misc refactoring * error handling fixes reported by gcc -fanalyzer * documentation updates * new and updated tests - enable zstd support for 15.6 / SLE15-SP6 build targets (bsc#1221943) ==== ca-certificates ==== Version update (2+git20230406.2dae8b7 -> 2+git20240415.3fe9324) - Update to version 2+git20240415.3fe9324: * Add ca-certificates-setup.service * typo: differnt/different ==== cloud-init ==== - Add cloud-init-usr-sudoers.patch (bsc#1223469) + Handle the existence of /usr/etc/sudoers to search for the expected include location ==== conmon ==== Version update (2.1.10 -> 2.1.11) - New upstream release 2.1.11 * docs/Makefile: softcode GOMD2MAN by @rahilarious * chore(deps): update dependency containers/automation_images to v20231208 by @renovate * drop --tty on exec by @haircommander * update packit config, enable downstream tasks by @lsm5 * Remove checks for (long)deprecated libsystemd-journal for libsystemd by @rahilarious * Add support for s390x by @saschagrunert * Build s390x binaries using musl libc by @saschagrunert ==== containerd ==== Version update (1.7.10 -> 1.7.15) - Use obs_scm service instead of tar_scm - Removed patch 0002-shim-Create-pid-file-with-0644-permissions.patch (merged upstream at <https://github.com/containerd/containerd/pull/9571>) - Update to containerd v1.7.15. Upstream release notes: <https://github.com/containerd/containerd/releases/tag/v1.7.15> - Update to containerd v1.7.14. Upstream release notes: <https://github.com/containerd/containerd/releases/tag/v1.7.14> - Update to containerd v1.7.13. Upstream release notes: <https://github.com/containerd/containerd/releases/tag/v1.7.13> - Update to containerd v1.7.12. Upstream release notes: <https://github.com/containerd/containerd/releases/tag/v1.7.12> - Update to containerd v1.7.11. Upstream release notes: <https://github.com/containerd/containerd/releases/tag/v1.7.11> ==== cyrus-sasl ==== Subpackages: cyrus-sasl-gssapi libsasl2-3 - GCC 14: cyrus-sasl package fails (bsc#1221863) Apply upstream patch: 0001-Fix-time.h-check.patch ==== distribution-logos-openSUSE ==== Version update (20240404 -> 20240429) Subpackages: distribution-logos-openSUSE-MicroOS distribution-logos-openSUSE-icons - Update to version 20240429: * Introduce Slowroll logos * Aeon: Correct colored icons to use Aeon brand color - Update to version 20240424: * Aeon: Make light versions actually light ==== docker ==== Version update (25.0.3_ce -> 26.1.0_ce) Subpackages: docker-rootless-extras - Update to Docker 26.1.0-ce. See upstream changelog online at <https://docs.docker.com/engine/release-notes/26.1/#2610> - Rebase patches: * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch * cli-0001-docs-include-required-tools-in-source-tree.patch - Update to Docker 26.0.1-ce. See upstream changelog online at <https://docs.docker.com/engine/release-notes/26.0/#2601> - Rebase patches: * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch * cli-0001-docs-include-required-tools-in-source-tree.patch - Update --add-runtime to point to correct binary path. [NOTE: This update was only ever released in SLES and Leap.] - Update to Docker 25.0.5-ce. See upstream changelog online at <https://docs.docker.com/engine/release-notes/25.0/#2505> bsc#1223409 - Rebase patches: * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch * cli-0001-docs-include-required-tools-in-source-tree.patch - Remove upstreamed patches: - 0007-daemon-overlay2-remove-world-writable-permission-fro.patch - Update --add-runtime to point to correct binary path. [NOTE: This update was only ever released in SLES and Leap.] - Add patch to fix bsc#1220339 * 0007-daemon-overlay2-remove-world-writable-permission-fro.patch - rebase patches: * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch * 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch ==== dracut ==== Version update (059+suse.563.g4900899a -> 059+suse.581.g19b7c06c) Subpackages: dracut-ima - Update to version 059+suse.581.g19b7c06c: * fix(dracut): move hooks directory from /usr/lib to /var/lib (bsc#1218068) * feat(tpm2-tss): add tpm2.target and systemd-tpm2-generator * fix(systemd): explicitly install some libs that will not be statically included * fix(dracut-lib): only remove initqueue/finished scripts, not the hook dir * fix(dracut-util): avoid memory leak * fix(dracut-install): memory leak in two `hashmap_put` calls if key exists * fix(dracut-install): release memory allocated for regular expressions * fix(dracut-install): memory leak in `--modalias` option * refactor(dracut-install): strerror(errno) -> %m * perf(dracut-install): don't strdup() environment block * perf(dracut-install): don't reallocate {src,dst}path in hmac_install() * perf(dracut-install): don't strdup() excessively for dracut_install() * perf(dracut-install): stat() w/unused buf -> access(F_OK) in dracut-install * perf(dracut-install): multiple single-character strstr()s -> strpbrk() ==== evolution-data-server ==== Version update (3.52.0 -> 3.52.1) Subpackages: libcamel-1_2-64 libebackend-1_2-11 libebook-1_2-21 libebook-contacts-1_2-4 libecal-2_0-3 libedata-book-1_2-27 libedata-cal-2_0-2 libedataserver-1_2-27 libedataserverui-1_2-4 - Update to version 3.52.1: + Bug Fixes: - Camel: Sanitize exported OpenPGP public key before transfer. - Google Task stale item cannot be deleted. + Miscellaneous: - EOAuth2ServiceOutlook: Cannot be used with IMAP. - IMAPx: Correct return value of imapx_splice_with_progress() when cancelled. - IMAPX: Correct path returned by imapx_get_filename(). + Updated translations. ==== ffmpeg-4 ==== Subpackages: libavcodec58_134 libavformat58_76 libavutil56_70 libpostproc55_9 libswresample3_9 libswscale5_9 - Add ffmpeg-CVE-2023-50010.patch: Backporting e4d2666b from upstream, fixes the out of array access. (CVE-2023-50010 bsc#1223256) - Add 0001-avfilter-af_stereowiden-Check-length.patch [boo#1223437, CVE-2023-51794] - Add ffmpeg-CVE-2023-51793.patch: Backporting 0ecc1f0e from upstream, Fix odd height handling. (CVE-2023-51793 bsc#1223272) - Add ffmpeg-CVE-2023-49502.patch: Backporting 737ede40 from upstream, account for chroma sub-sampling in min size calculation. (CVE-2023-49502 bsc#1223235) - Address boo#1223304/CVE-2023-51798: add patch 0001-avfilter-vf_minterpolate-Check-pts-before-division.patch ==== ffmpeg-6 ==== Subpackages: libavcodec60 libavfilter9 libavformat60 libavutil58 libpostproc57 libswresample4 libswscale7 - Add ffmpeg-CVE-2023-50008.patch: Backporting 5f87a68c from upstream, Fix memory leaks. (CVE-2023-50008 bsc#1223254) - Add ffmpeg-CVE-2023-50007.patch: Backporting b1942734 from upstream, Fix crash with EOF handling. (CVE-2023-50007 bsc#1223253) ==== flatpak ==== Version update (1.15.6 -> 1.15.8) Subpackages: flatpak-selinux libflatpak0 system-user-flatpak - disable parental controls for now by using '-Dmalcontent=disabled', to work around issues with xdg-desktop-portal - Update to version 1.15.8: + Security fixes: - Don't allow an executable name to be misinterpreted as a command-line option for bwrap(1). This prevents a sandbox escape where a malicious or compromised app could ask xdg-desktop-portal to generate a .desktop file with access to files outside the sandbox. (CVE-2024-32462, boo#1223110). + Other bug fixes: - Pass the -export-dynamic linker option as - Wl,-export-dynamic, fixing build failures with clang 18 and lld 18. - Fix a double-free when installation is cancelled. - Fix installed-tests failure with "FUSERMOUNT: unbound variable". - Changes from version 1.15.7: + New features: - Automatically remove obsolete driver versions and other autopruned refs. - --socket=inherit-wayland-socket. - Automatically reload D-Bus session bus configuration after installing or upgrading apps, to pick up any exported D-Bus services. + Bug fixes: - Don't parse <developer><name/></developer> as the application name. - Don't refuse to start apps when there is no D-Bus system bus available. - Don't try to repeat migration of apps whose data was migrated to a new name and then deleted. - Improve handling of mixed locales on systems with systemd-localed. - Improve display of ellipsized columns in wide terminals. - Make flatpak info -e look for extensions in all installations. - Fix warnings from newer GLib versions. - Always set the container environment variable. - Always let the app inherit redirected file descriptors. - In flatpak ps, add xdg-desktop-portal-gnome to the list of backends we'll use to learn which apps are running in the background. - Don't use WAYLAND_SOCKET unless given - -socket=inherit-wayland-socket. - Use fusermount3 if compiled with FUSE 3, overridable with - Dsystem_fusermount compile-time option. - Avoid leaking a temporary variable from /etc/profile.d/flatpak.sh into the shell environment. - Improve async-signal safety. - Fix various memory leaks. - Avoid undefined behaviour of signed left-shift when storing object IDs in a hash table. - Detect the correct gtk-doc when cross-compiling. - Detect the correct wayland-scanner when cross-compiling. - Documentation improvements. - Skip more tests when FUSE isn't available. - Updated translations. - Add libglnx.patch: fix meson function detection. - Switch build system to meson: + Add meson BuildRequires. + Switch configure/make_build/make_install macros to meson/meson_build/meson_install, preserving the configure parameters as close as possible: - -disable-silent-rules => obsoleted - -with-system-bubblewrap => -Dsystem_bubblewrap=bwrap - -with-curl => -Dhttp_backend=curl - Add pkgconfig(malcontent-0) BuildRequires: enable malcontent support. ==== fribidi ==== Version update (1.0.13 -> 1.0.14) - update to 1.0.14: * Updated Unicode tables to version 15.1 ==== fwupd ==== Version update (1.9.16 -> 1.9.19) Subpackages: libfwupd2 typelib-1_0-Fwupd-2_0 - Update to version 1.9.19: + This release adds the following features: - Drop heap as part of a housekeeping action. - Retry downloads to workaround flaky network connections. + This release fixes the following bugs: - Assume new ME versions are called CSME. - Fix a buffer-overread when parsing invalid CoSWID entity data. - Fix a logic thinko when parsing GUID strings. - Fix downloading files on Windows with libcurl >= 7.77.0. - Revert back to a simpler syscall blocklist-based filter. + This release adds support for the following hardware:. - Acer U32 dock. - Luxshare 7-in-1 dock. - Pixart models 2404, 4206, 2440, 2418, 2752, 2840 and 2818. - Update to version 1.9.18: + Fix a small memory leak in fwupdmgr. + Use simple allow-listing for the syscall filter. - Changes from version 1.9.17: + This release fixes the following bugs: - Capture device status changes when in bootloader mode. - Change the systemd SystemCallFilter to an allowlist. - Detect when a CCGX dock forbids downgrade. - Do not add an overly-generic instance ID to CrosEC devices. - Do not read OptionROM verification data on Apple hardware. - Emit a signal when a user-request is no longer valid. - Fix a potential crash when parsing invalid CBOR data. - Properly show SPDX project licenses with AND as a delimiter. - Verify that syscalls are being filtered correctly at startup. + This release adds support for the following hardware: - Asus DC201. - Realtek Gen1 RTS541x. ==== gcc13 ==== Version update (13.2.1+git8285 -> 13.2.1+git8761) - Update to gcc-13 branch head, b7a2697733d19a093cbdd0e200, git8761 - Removed gcc13-pr111731.patch now included upstream - Add gcc13-amdgcn-remove-fiji.patch removing Fiji support from the GCN offload compiler as that is requiring Code Object version 3 which is no longer supported by llvm18. ==== gcc14 ==== Version update (14.0.1+git10008 -> 14.1.0+git10173) Subpackages: libgcc_s1 libgomp1 libstdc++6 libubsan1 - Update to GCC 14.1 release. - Update to gcc-14 branch head, 7a00c459cbb913ac165a39d34, git10154 * GCC 14.1 RC1 ==== gdk-pixbuf ==== Version update (2.42.10 -> 2.42.11) Subpackages: gdk-pixbuf-query-loaders gdk-pixbuf-thumbnailer libgdk_pixbuf-2_0-0 typelib-1_0-GdkPixbuf-2_0 - Pass -Dothers=enabled to meson: enable other image loaders (most notably beeded seems xpm,xbm). This is in line with upstreams recommendation for now, but won't be working past version 2.43.x. The loaders will likely be split out into a separate repo. (boo#1223903, glgo#GNOME/gdk-pixbuf!169). - Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test suite with other loaders enabled. - Update to version 2.42.11: + Disable fringe loaders by default. + Introspection fixes. + Updated translations. ==== glibc ==== Subpackages: glibc-locale glibc-locale-base - glibc-fix-cve-2024-33599.patch: nscd: Stack-based buffer overflow in netgroup cache (CVE-2024-33599, bsc#1223423) ==== glslang ==== Version update (14.1.0 -> 14.2.0) - Update to release 14.2 * Improve checking for location aliasing errors * Fix undefined behavior in parser * Add bounds check to gl_SampleMask * Fix alignment and padding of matrices consuming one vector * Remove duplicate SPIR-V decorations * Check for exponent overflow in float parser * Fix bug in relaxed verification rules * Fix bug when importing SPIR-V extended intruction set * Fix issues with the interaction of cooperative_matrix and spirv_intrinsics * Support SPV_QCOM_image_processing2 * Support files with UTF8BOM character ==== gnome-browser-connector ==== - remove dependency on /usr/bin/python3 using %python3_fix_shebang macro, [bsc#1212476] ==== gnome-control-center ==== Version update (46.0.1 -> 46.1) Subpackages: gnome-control-center-color gnome-control-center-goa - Update to version 46.1: + Accessibility: Improve accessibility of "Typing" settings sliders. + Display: Fix crash when pressing Escape in the display settings. + Network: Add stable-ssid support for cloned-mac. + Privacy: - Add build option to enable Location services - Fix opening of Help pages while viewing Privacy settings + Sharing: Auto hide Sharing panel when Rygel AND gnome-user-share are not available. + System: - Don't show auto-timezone setting when Location services unavailable. - Avoid unnecessary time-change requests. - Fix issue with sensitivity of "Add" and "Enroll" Enterprise Login buttons. - Improve generated passwords capacity in Remote Desktop settings. + Wacom: Check for the right output connector name. - Drop upstream merged gnome-control-center-datetime-Avoid-emitting-the-time-changed-signal.patch. ==== gnome-initial-setup ==== Version update (46.0 -> 46.1) - Update to version 46.1: + gnome-initial-setup-copy-worker, which runs after Initial Setup has created the first user on the system, is now ordered before GNOME Keyring, assuming both Initial Setup and GNOME Keyring have been configured with systemd support. This avoids a race between gnome-initial-setup-copy-worker copying the login keyring that was created during Initial Setup, and GNOME Keyring creating a login keyring if none exists on disk. + Keyboard navigation now works better on the Wi-Fi page. + Updated translations. ==== gnome-settings-daemon ==== - Update gnome-settings-daemon-bgo793253.patch to fix the build with gcc 14. ==== gnome-shell ==== Version update (46.0 -> 46.1) Subpackages: gnome-shell-calendar - Update to version 46.1: + Improve notification of conflicting session. + Add shift level to Korean OSK layout. + Fix markup support in notifications. + extensions-app: Fix empty rows with '&' in extension name. + extensions-app: Improve HIG compliance. + Omit expand buttons in notification banners. + Misc. bug fixes and cleanups. + Updated translations. - remove dependency on /usr/bin/python3 using %python3_fix_shebang macro, [bsc#1212476] ==== gnome-shell-extensions ==== Version update (46.0 -> 46.1) Subpackages: gnome-shell-classic gnome-shell-extensions-common - Update to version 46.1: + screenshot-window-sizer: Add flathub-recommended size. + Updated translations. ==== gnome-software ==== Version update (46.0 -> 46.1) - Update to version 46.1: + Fix a crash when updating apps when built with Mogwai. + Fix a crash when installing flatpak application. + Correct desktop/mobile hardware support detection. + Correct state of Fedora upgrade. + Several fixes in historical updates for rpm-ostree. + Updated translations. ==== gnome-terminal ==== Version update (3.52.0 -> 3.52.1) Subpackages: nautilus-extension-terminal - Update to version 3.52.1: + schema: Fix light green color to match the GNOME palette. + prefs: Follow the theme variant setting. ==== gnome-tweaks ==== Version update (46.0 -> 46.1) - Update to version 46.1: + Themes no longer show up despite that the user themes extension being enabled. + New font selections are not saved. + Updated translations. - remove dependency on /usr/bin/python3 using %python3_fix_shebang macro, [bsc#1212476] ==== gnome-user-docs ==== Version update (46.0 -> 46.1) - Update to version 46.1: + Updated translations. ==== gobject-introspection ==== Subpackages: girepository-1_0 libgirepository-1_0-1 - remove dependency on /usr/bin/python3 using %python3_fix_shebang macro, [bsc#1212476] ==== google-noto-coloremoji-fonts ==== Version update (20230315 -> 20240424) - Update to v2.042 * Unicode 15.1 update ==== google-noto-fonts ==== Version update (20240401 -> 20240501) Subpackages: google-noto-sans-fonts google-noto-sans-math-fonts - Update to 20240501 * Noto Rashi Hebrew - Corrects the width and position of marks under double-yud and double-vov - Improves the anchoring of yod - Adds the U+053F yod triangle character - Improves the spacing of tsadi * Noto Egyptian Hieroglyphs - Add codepoints from Unicode 14 ==== gpsd ==== - usage of %python3_fix_shebang to cover /usr/bin is also needed [bsc#1212476] ==== grub2 ==== Subpackages: grub2-arm64-efi grub2-snapper-plugin - Fix gcc error with CFLAGS=-Og * grub2-grubenv-in-btrfs-header.patch ==== gsettings-desktop-schemas ==== - Move en_US and en_GB 'translations' to the main package. Do not force the -lang package on all users. ==== gstreamer ==== Subpackages: libgstreamer-1_0-0 typelib-1_0-Gst-1_0 - remove dependency on /usr/bin/python3 using %python3_fix_shebang_path macro, [bsc#1212476] ==== gtk2 ==== Subpackages: gtk2-tools libgtk-2_0-0 - remove dependency on /usr/bin/python3 using %python3_fix_shebang macro, [bsc#1212476] - Add gtk2-gcc14.patch: fix build with gcc 14. ==== gtk4 ==== Version update (4.14.3 -> 4.14.4) Subpackages: gtk4-schema gtk4-tools libgtk-4-1 typelib-1_0-Gtk-4_0 - Update to version 4.14.4: + GtkGraphicsOffload: Don't crash without a child. + Icontheme: - Make symbolic svg loading more efficient. - Handle color-free symbolics more efficiently. + Accessibility: - Make the gtk-demo sidebar search more accessible. - Stop emitting focus events. + GDK: - Support XDG_ACTIVATION_TOKEN. - dmabuf: Be more defensive when importing unknown formats. - dmabuf: Use narrow range for YUV. + GSK: gpu: Handle tiny offscreens correctl. + Build: Fix many ubsan warning. + Updated translations. ==== harfbuzz ==== Subpackages: libharfbuzz-gobject0 libharfbuzz-icu0 libharfbuzz-subset0 libharfbuzz0 typelib-1_0-HarfBuzz-0_0 - Force higher C++ standard version for building with ICU 75. ==== hyper-v ==== - remove dependency on /usr/bin/python3 using %python3_fix_shebang macro, [bsc#1212476] ==== installation-images-MicroOS ==== Version update (17.121 -> 17.125) - merge gh#openSUSE/installation-images#707 - refresh ssh_host_rsa_key (jsc#PED-129) - 17.125 - merge gh#openSUSE/installation-images#711 - increase XZ compression level for initrd (bsc#1223982) - support ZSTD compression for initrd - 17.124 - merge gh#openSUSE/installation-images#710 - require libsolv-tools explicitly - 17.123 - merge gh#openSUSE/installation-images#709 - do not use gettext-runtime-mini (bsc#1223775) - 17.122 ==== iso-codes ==== - Merge iso codes-translations into the main package. iso-codes isn't particularly useful without its translations. Some KDE packages require and/or heavily rely on them. gnome-control-center also needs translations to display localized names in system config menu. ==== kernel-firmware ==== Version update (20240419 -> 20240426) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-ath12k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update to version 20240426 (git commit 2398d264f953): * amdgpu: DMCUB updates for various AMDGPU ASICs * linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops * i915: Update Xe2LPD DMC to v2.20 * linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 * linux-firmware: Add firmware for Lenovo Thinkbook 13X * ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop * amdgpu: add DMCUB 3.5 firmware * amdgpu: add VPE 6.1.0 firmware * amdgpu: add VCN 4.0.5 firmware * amdgpu: add UMSCH 4.0.0 firmware * amdgpu: add SDMA 6.1.0 firmware * amdgpu: add PSP 14.0.0 firmware * amdgpu: add GC 11.5.0 firmware * amdgpu: update license date ==== kernel-source ==== Version update (6.8.7 -> 6.8.8) - Linux 6.8.8 (bsc#1012628). - thunderbolt: Reset only non-USB4 host routers in resume (bsc#1012628). - ksmbd: common: use struct_group_attr instead of struct_group for network_open_info (bsc#1012628). - ksmbd: clear RENAME_NOREPLACE before calling vfs_rename (bsc#1012628). - ksmbd: validate request buffer size in smb2_allocate_rsp_buf() (bsc#1012628). - ksmbd: fix slab-out-of-bounds in smb2_allocate_rsp_buf (bsc#1012628). - net: dsa: mt7530: fix enabling EEE on MT7531 switch on all boards (bsc#1012628). - net: dsa: mt7530: fix improper frames on all 25MHz and 40MHz XTAL MT7530 (bsc#1012628). - fork: defer linking file vma until vma is fully initialized (bsc#1012628). - nilfs2: fix OOB in nilfs_set_de_type (bsc#1012628). - Squashfs: check the inode number is not the invalid value of zero (bsc#1012628). - bootconfig: use memblock_free_late to free xbc memory to buddy (bsc#1012628). - nouveau: fix instmem race condition around ptr stores (bsc#1012628). - drm/vmwgfx: Fix crtc's atomic check conditional (bsc#1012628). - drm/vmwgfx: Sort primary plane formats by order of preference (bsc#1012628). - drm/vmwgfx: Fix prime import/export (bsc#1012628). - drm/xe: Fix bo leak in intel_fb_bo_framebuffer_init (bsc#1012628). - drm/ttm: stop pooling cached NUMA pages v2 (bsc#1012628). - drm/amdgpu: remove invalid resource->start check v2 (bsc#1012628). - drm/amdkfd: Fix memory leak in create_process failure (bsc#1012628). - drm/amdgpu: validate the parameters of bo mapping operations more clearly (bsc#1012628). - fuse: fix leaked ENOSYS error on first statx call (bsc#1012628). - mm/shmem: inline shmem_is_huge() for disabled transparent hugepages (bsc#1012628). - mm/memory-failure: fix deadlock when hugetlb_optimize_vmemmap is enabled (bsc#1012628). - mm,swapops: update check in is_pfn_swap_entry for hwpoison entries (bsc#1012628). - mm/userfaultfd: allow hugetlb change protection upon poison entry (bsc#1012628). - mm/madvise: make MADV_POPULATE_(READ|WRITE) handle VM_FAULT_RETRY properly (bsc#1012628). - init/main.c: Fix potential static_command_line memory overflow (bsc#1012628). - arm64: hibernate: Fix level3 translation fault in swsusp_save() (bsc#1012628). - arm64/head: Disable MMU at EL2 before clearing HCR_EL2.E2H (bsc#1012628). - KVM: x86/mmu: Write-protect L2 SPTEs in TDP MMU when clearing dirty status (bsc#1012628). - KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes (bsc#1012628). - KVM: x86/pmu: Do not mask LVTPC when handling a PMI on AMD platforms (bsc#1012628). - KVM: x86/pmu: Disable support for adaptive PEBS (bsc#1012628). - KVM: x86: Snapshot if a vCPU's vendor model is AMD vs. Intel compatible (bsc#1012628). - sched: Add missing memory barrier in switch_mm_cid (bsc#1012628). - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (bsc#1012628). - speakup: Avoid crash on very long word (bsc#1012628). - mei: me: disable RPL-S on SPS and IGN firmwares (bsc#1012628). - mei: vsc: Unregister interrupt handler for system suspend (bsc#1012628). - usb: typec: tcpm: Correct the PDO counting in pd_set (bsc#1012628). - usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport error (bsc#1012628). - usb: Disable USB3 LPM at shutdown (bsc#1012628). - usb: dwc2: host: Fix dereference issue in DDMA completion flow (bsc#1012628). - Revert "mei: vsc: Call wake_up() in the threaded IRQ handler" (bsc#1012628). - Revert "usb: cdc-wdm: close race between read and workqueue" (bsc#1012628). - USB: serial: option: add Telit FN920C04 rmnet compositions (bsc#1012628). - USB: serial: option: add Rolling RW101-GL and RW135-GL support (bsc#1012628). - USB: serial: option: support Quectel EM060K sub-models (bsc#1012628). - USB: serial: option: add Lonsung U8300/U9300 product (bsc#1012628). - USB: serial: option: add support for Fibocom FM650/FG650 (bsc#1012628). - USB: serial: option: add Fibocom FM135-GL variants (bsc#1012628). - serial: core: Fix missing shutdown and startup for serial base port (bsc#1012628). - serial: core: Clearing the circular buffer before NULLifying it (bsc#1012628). - serial: core: Fix regression when runtime PM is not enabled ... changelog too long, skipping 185 lines ... - commit 5cd3298 ==== kf6-attica ==== Version update (6.1.0 -> 6.2.0) Subpackages: libKF6Attica6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - Changes since 6.1.0: * modernize: don't else after return * provider: document default ctor * providermanager: remove unused function with typo * postfiledata: simplify private * modernize: use unique_ptr for privates * basejob: don't leave dangly pointers * platformdependent: v3 ==== kf6-baloo ==== Version update (6.1.0 -> 6.2.0) Subpackages: kf6-baloo-file kf6-baloo-imports kf6-baloo-kioslaves libKF6Baloo6 libKF6BalooEngine6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - Changes since 6.1.0: * Don't kill the lock file, can lead to random corruption (kde#389848) ==== kf6-bluez-qt ==== Version update (6.1.0 -> 6.2.0) Subpackages: kf6-bluez-qt-imports libKF6BluezQt6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - Changes since 6.1.0: * Fixed min_bitpool and max_bitpool from capabilities where ignored * Port QML module to declarative type registration ==== kf6-breeze-icons ==== Version update (6.1.0 -> 6.2.0) - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - Changes since 6.1.0: * Add support for media-playlist-no-shuffle icon name * Add audio/ogg and audio/x-vorbis+ogg icons * Add audio/vnd.wave MIME type * Remove generic non-symbolic audio and video icons * Add 16 and 22px symbolic versions of some Places icons that were missing (kde#486316) * Add zoom-in-map and zoom-out-map icons along with -symbolic versions * Longer description for the ICONS_LIBRARY option * Add symbolic versions for more USB device style icons * Fix some scale errors (kde#485479) * Fixed input-combo-on.svg colour issue * Add -symbolic symlinks for notification-* icons * Use new `dev.suyu_emu.suyu` id, add symlink for old id * Add accessories-screenshot-tool icon/symlink * [webfont] enable ligatures * gitignore: add VS Code dir * add input-keyboard-color 22px, 32 px ==== kf6-frameworkintegration ==== Version update (6.1.0 -> 6.2.0) Subpackages: kf6-frameworkintegration-plugin libKF6Style6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - No code change since 6.1.0 ==== kf6-karchive ==== Version update (6.1.0 -> 6.2.0) Subpackages: libKF6Archive6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - Changes since 6.1.0: * gitignore: add VS Code dir ==== kf6-kauth ==== Version update (6.1.0 -> 6.2.0) Subpackages: libKF6AuthCore6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - No code change since 6.1.0 ==== kf6-kbookmarks ==== Version update (6.1.0 -> 6.2.0) Subpackages: libKF6Bookmarks6 libKF6BookmarksWidgets6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - No code change since 6.1.0 ==== kf6-kcmutils ==== Version update (6.1.0 -> 6.2.0) Subpackages: kf6-kcmutils-imports libKF6KCMUtils6 libKF6KCMUtilsCore6 libKF6KCMUtilsQuick6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - Changes since 6.1.0: * KQuickConfigModule: Don't crash on null object * SimpleKCM: Remove remnants of footerParent * Use ellipsis character instead of three dots * GridDelegate: Port to ComponentBehavior: Bound * GridDelegate: Consolidate code paths for opening a menu * GridDelegate: Don't use qualified property access as appropriate * GridDelegate: Use concrete type for the popup menu * GridDelegate: Use somewhat more consistent ToolTip bindings, remove timeout * components: Drop QML import versions, unify import aliases * components: Guard nullable property access * components: Explicitly specify signal handler arguments * KCModuleQml: Provide a fallback in case a pushed page is not one of magical KCMUtils types * Add API to make header and footer paddings optional * Round all the things consistently * pluginselector: cache delegates ==== kf6-kcodecs ==== Version update (6.1.0 -> 6.2.0) Subpackages: libKF6Codecs6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - Changes since 6.1.0: * gitignore: add VS Code dir ==== kf6-kcolorscheme ==== Version update (6.1.0 -> 6.2.0) Subpackages: libKF6ColorScheme6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - Changes since 6.1.0: * gitignore: add VS Code dir ==== kf6-kcompletion ==== Version update (6.1.0 -> 6.2.0) Subpackages: libKF6Completion6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - No code change since 6.1.0 ==== kf6-kconfig ==== Version update (6.1.0 -> 6.2.0) Subpackages: kconf_update6 kf6-kconfig-imports libKF6ConfigCore6 libKF6ConfigGui6 libKF6ConfigQml6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - Changes since 6.1.0: * avoid allocations while parsing int/float lists * Adapt kdesktopfiletest to QTemporaryFile behavior change * Guard header with an ifndef and include moc generates sources in the cpp file * autotests: Don't use a timeout in testLocalDeletion * Adjust kconfig_compiler autotests to include a version without kcfgc * Add a CMake function to add a kcfg file without kcfgc * gitignore: add VS Code dir ==== kf6-kconfigwidgets ==== Version update (6.1.0 -> 6.2.0) Subpackages: libKF6ConfigWidgets6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - Changes since 6.1.0: * KConfigDialogManager: port to non-deprecated QCheckBox signal * KCommandBar: Better UI * KRecentFilesAction: Load mimeType and action lazily * Remove forward declaration of KToggleAction * Test that an invalid language gives the empty string * gitignore: add VS Code dir ==== kf6-kcoreaddons ==== Version update (6.1.0 -> 6.2.0) Subpackages: kf6-kcoreaddons-imports libKF6CoreAddons6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - Changes since 6.1.0: * Replace KAboutDialog with KAboutApplicationDialog * gitignore: add VS Code dir ==== kf6-kcrash ==== Version update (6.1.0 -> 6.2.0) Subpackages: libKF6Crash6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - Changes since 6.1.0: * gitignore: add VS Code dir ==== kf6-kdbusaddons ==== Version update (6.1.0 -> 6.2.0) Subpackages: kf6-kdbusaddons-tools libKF6DBusAddons6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - No code change since 6.1.0 ==== kf6-kdeclarative ==== Version update (6.1.0 -> 6.2.0) Subpackages: kf6-kdeclarative-imports libKF6CalendarEvents6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - No code change since 6.1.0 ==== kf6-kded ==== Version update (6.1.0 -> 6.2.0) - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - No code change since 6.1.0 ==== kf6-kdesu ==== Version update (6.1.0 -> 6.2.0) Subpackages: libKF6Su6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - No code change since 6.1.0 ==== kf6-kdnssd ==== Version update (6.1.0 -> 6.2.0) - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - No code change since 6.1.0 ==== kf6-kdoctools ==== Version update (6.1.0 -> 6.2.0) Subpackages: libKF6DocTools6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - No code change since 6.1.0 ==== kf6-kfilemetadata ==== Version update (6.1.0 -> 6.2.0) Subpackages: libKF6FileMetaData3 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - Changes since 6.1.0: * API dox: add some minimal info to undocumented classes * UserMetadata: return errors when xattr ops fails * Value is already default timeout value in QT6 framework * [XmlExtractor] Add support for compressed SVGs * [XmlExtractorTest] Move Test class declaration to source file * [Office2007Extractor] Reuse DublinCoreExtractor, fix namespace handling * [DublinCoreExtractor] Add CreationDate (dc::created) support * [DublinCoreExtractor] Skip properties from empty elements, cleanup * Move date parser helper out of ExtractorPlugin, clean it up * [TaglibExtractor] Include vnd.audible.aaxc audio books in supported types * [Test] Include vnd.audible.aax audio books in coverage tests * [TaglibWriterTest] Move test class declaration to source file, cleanup * [TaglibExtractor|Writer] Fix mimetypes ==== kf6-kglobalaccel ==== Version update (6.1.0 -> 6.2.0) Subpackages: libKF6GlobalAccel6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - Changes since 6.1.0: * Port q->connect to QObject::connect * Fix connection lifetime issue ==== kf6-kguiaddons ==== Version update (6.1.0 -> 6.2.0) Subpackages: libKF6GuiAddons6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - Changes since 6.1.0: * recorder/kkeysequencerecorder: conform to KKeyServer changes * gitignore: add VS Code dir ==== kf6-kholidays ==== Version update (6.1.0 -> 6.2.0) Subpackages: kf6-kholidays-imports libKF6Holidays6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - Changes since 6.1.0: * Latvia holiday grammar corrections * Update holiday_bd_en ==== kf6-ki18n ==== Version update (6.1.0 -> 6.2.0) Subpackages: libKF6I18n6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - Changes since 6.1.0: * gitignore: add VS Code dir ==== kf6-kiconthemes ==== Version update (6.1.0 -> 6.2.0) Subpackages: kf6-kiconthemes-imports libKF6IconThemes6 libKF6IconWidgets6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - Changes since 6.1.0: * allow to configure if we register our icon plugin for SVGs * Port QML module to declarative type registration * Fix typo in BreezeIcons::initIcons loading * gitignore: add VS Code dir * Set QML module base version to 1.0 ==== kf6-kidletime ==== Version update (6.1.0 -> 6.2.0) Subpackages: kf6-kidletime-plugins libKF6IdleTime6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - No code change since 6.1.0 ==== kf6-kio ==== Version update (6.1.0 -> 6.2.0) Subpackages: libKF6KIO6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - Changes since 6.1.0: * [kfilefilter] Consider mime globs valid * kfileitemtest: add basic tests for dir * file_unix: don't call QMimeDatabase::mimeTypeForFile for directories * widgetsaskuseractionhandler prevent crash when job had no parent widget * PreviewJob: Add file extension to thumbnail temp files (kde#463989) * KFileItem: handle the case parent url path is empty * KFileItemActions: Add logic to order actions between separators (kde#466115) * KFileItem: fix getStatusBarInfo() displaying symlink target as "http:" (kde#475422) * ScopedProcessRunner: support waitForStarted * ScopedProcessRunner: fix use of undeclared identifier 'close' * [ftp] Always use default timeout values * [http] Set error string for ERR_DOES_NOT_EXIST * Force test language to en * knewfilemenu: Add @since 6.2 to the new signals and methods * kfilefilter.h: update API docs * kencodingfiledialog dox: rewrite API dox that refer to removed functions * kfilewidget dox: replace references to setFilter() with setFilters() * Add `EnableRemoteFolderThumbnail` option checking * PreviewJob: Display preview for locally mounted remote directories * knewfilemenu: add isNewDirNameJobRunning * KFilePlacesItem: Show teardown busy indicator during optical media eject * KUrlNavigator: allow adding a badge widget after the breadcrumb * Set ideal case for TwoVectors * udsentry_api_comparison_benchmark: update * kurlnavigatorbutton: prevent * connection: don't queue tasks until OOM * http: Fix parsing DAV:getlastmodified (kde#484671) * kfileitem: Linux, use statx to refresh files (kde#446858) ==== kf6-kirigami ==== Version update (6.1.0 -> 6.2.0) Subpackages: kf6-kirigami-imports libKirigamiPlatform6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - Too many changes since 6.1.0, only listing bugfixes: * Fixed wrong navigation and dialog header button colors (kde#486163) * ContextualHelpButton: remove excess space from tooltip (kde#481817) ==== kf6-kitemmodels ==== Version update (6.1.0 -> 6.2.0) Subpackages: kf6-kitemmodels-imports libKF6ItemModels6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - Changes since 6.1.0: * Add dependency to QML module * Port to declarative type registration ==== kf6-kitemviews ==== Version update (6.1.0 -> 6.2.0) Subpackages: libKF6ItemViews6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - No code change since 6.1.0 ==== kf6-kjobwidgets ==== Version update (6.1.0 -> 6.2.0) Subpackages: libKF6JobWidgets6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - No code change since 6.1.0 ==== kf6-knewstuff ==== Version update (6.1.0 -> 6.2.0) Subpackages: kf6-knewstuff-imports libKF6NewStuffCore6 libKF6NewStuffWidgets6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - Too many changes since 6.1.0, only listing bugfixes: * Show header warning message framelessly (kde#485464) * DownloadItemsSheet: use alternating background colors for legibility (kde#483724) ==== kf6-knotifications ==== Version update (6.1.0 -> 6.2.0) Subpackages: kf6-knotifications-imports libKF6Notifications6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - Changes since 6.1.0: * Enforce passing tests on Windows ==== kf6-knotifyconfig ==== Version update (6.1.0 -> 6.2.0) Subpackages: libKF6NotifyConfig6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - No code change since 6.1.0 ==== kf6-kpackage ==== Version update (6.1.0 -> 6.2.0) Subpackages: libKF6Package6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - No code change since 6.1.0 ==== kf6-kparts ==== Version update (6.1.0 -> 6.2.0) Subpackages: libKF6Parts6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - Changes since 6.1.0: * Use QUrl::PreferLocalFile for URL emitted with Part::setWindowCaption * Enforce passing tests on Windows ==== kf6-kpty ==== Version update (6.1.0 -> 6.2.0) Subpackages: libKF6Pty6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - No code change since 6.1.0 ==== kf6-kquickcharts ==== Version update (6.1.0 -> 6.2.0) - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - No code change since 6.1.0 ==== kf6-krunner ==== Version update (6.1.0 -> 6.2.0) Subpackages: libKF6Runner6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - Changes since 6.1.0: * runnercontext: Fix saving the launch counts * update version for new release * update version for new release * Action: Make bool operator explicit * Fix matchInternalFinished not being emitted in case of dbus errors ==== kf6-kservice ==== Version update (6.1.0 -> 6.2.0) Subpackages: libKF6Service6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - Changes since 6.1.0: ==== kf6-kstatusnotifieritem ==== Version update (6.1.0 -> 6.2.0) Subpackages: libKF6StatusNotifierItem6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - No code change since 6.1.0 ==== kf6-ksvg ==== Version update (6.1.0 -> 6.2.0) Subpackages: kf6-ksvg-imports libKF6Svg6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - Changes since 6.1.0: * Don't call update on missing marginObject * Make property type fully qualified ==== kf6-ktexteditor ==== Version update (6.1.0 -> 6.2.0) Subpackages: libKF6TextEditor6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - Changes since 6.1.0: * Fix caret painting for inline notes at the end of line * KateCompletionWidget: Mark function static * KateCompletionModel: remove useless std::as_const * run more tests offscreen * Fix performance with many cursors in a large line * fix test expectations * fix crashs and OOM on load with encoding failures (kde#486195) * a11y: Improve tab order for "Appeareance" -> "Borders" * a11y: Set "Line Height Multiplier" buddy * Fix broken navigation in completion widget with multiple views * Fix clicking in completion * fix textInsertedRange signal for insertText behind last line (kde#483363) ==== kf6-ktextwidgets ==== Version update (6.1.0 -> 6.2.0) - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - No code change since 6.1.0 ==== kf6-kunitconversion ==== Version update (6.1.0 -> 6.2.0) Subpackages: libKF6UnitConversion6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - No code change since 6.1.0 ==== kf6-kuserfeedback ==== Version update (6.1.0 -> 6.2.0) Subpackages: kf6-kuserfeedback-imports libKF6UserFeedbackCore6 libKF6UserFeedbackWidgets6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - Changes since 6.1.0: * Fix logging category ==== kf6-kwallet ==== Version update (6.1.0 -> 6.2.0) Subpackages: kwalletd6 libKF6Wallet6 libKF6WalletBackend6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - Changes since 6.1.0: * Fix reply type in portal implementation * kwalletportalsecrets.h: Add missing include * Implement XDG Secrets Portal (kde#466197) ==== kf6-kwidgetsaddons ==== Version update (6.1.0 -> 6.2.0) Subpackages: libKF6WidgetsAddons6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - Changes since 6.1.0: * KViewStateSerializer: fix docu: setTreeView -> setView * KBusyIndicatorWidget: fix warning when hiding on startup * Introduce KContextualHelpButton * KMessageWidget: Fix handling of palette changes * KMessageWidget: Make sure icon label is always vertically centered * gitignore: add VS Code dir ==== kf6-kwindowsystem ==== Version update (6.1.0 -> 6.2.0) Subpackages: kf6-kwindowsystem-imports libKF6WindowSystem6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - Changes since 6.1.0: * Port to QNativeInterface::Private::QWaylandWindow * Introduce KXcbEvent to initialize the memory of sent XCB events ==== kf6-kxmlgui ==== Version update (6.1.0 -> 6.2.0) Subpackages: libKF6XmlGui6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - Changes since 6.1.0: * improve dbus disabling ==== kf6-modemmanager-qt ==== Version update (6.1.0 -> 6.2.0) Subpackages: libKF6ModemManagerQt6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - No code change since 6.1.0 ==== kf6-networkmanager-qt ==== Version update (6.1.0 -> 6.2.0) Subpackages: kf6-networkmanager-qt-imports libKF6NetworkManagerQt6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - No code change since 6.1.0 ==== kf6-prison ==== Version update (6.1.0 -> 6.2.0) Subpackages: kf6-prison-imports libKF6Prison6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - No code change since 6.1.0 ==== kf6-purpose ==== Version update (6.1.0 -> 6.2.0) Subpackages: kf6-purpose-services libKF6Purpose6 libKF6PurposeWidgets6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - Changes since 6.1.0: * Add pre share hooks * Enforce passing tests on Windows ==== kf6-qqc2-desktop-style ==== Version update (6.1.0 -> 6.2.0) - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - Changes since 6.1.0: * DialogButtonBox: Use largeSpacing as padding * TreeViewDelegate: Fix non-observable modelIndex property getting stuck * [CheckIndicator] Use control as AbstractButton * Add missing dependency to private module * Add QTBUG to comment * Make SwitchIndicator more compiler-friendly * ItemBranchIndicators: Fix uninitialized member variable m_selected * StyleSingleton: Check whether object is qGuiApp * [RadioButton] Use id instead of parent lookup * [TabButton] Fix property type * Apply Kirigami.Units.cornerRadius to default list item background too * gitignore: add VS Code dir * Use consistent radius value from Kirigami.Units.radius ==== kf6-solid ==== Version update (6.1.0 -> 6.2.0) Subpackages: libKF6Solid6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - Changes since 6.1.0: * remove too aggressive assert (kde#464149) * [StorageAccess] Fix storageAccessFromPath returning unmounted filesystems * [SolidHwTest] Extend FakeHW description with encrypted volume, add tests * [SolidHwTest] Test Device::storageAccessFromPath * [DeviceManager] Remove exists() check from storageAccessFromPath * udisks: Return empty string for "root" clearTextPath (kde#485507) * [SolidHwTest] Remove unnecessary slotPropertyChanged helper, fix bug * [SolidHwTest] Remove setenv wrapper, unnecessary qt_windows.h include * [SolidHwTest] Move test class declaration to source file * udisks2: Add support CanCheck/Check/CanRepair/Repair - Drop patch, merged upstream: * 0001-udisks-Return-empty-string-for-root-clearTextPath.patch ==== kf6-sonnet ==== Version update (6.1.0 -> 6.2.0) Subpackages: kf6-sonnet-imports libKF6SonnetCore6 libKF6SonnetUi6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - Changes since 6.1.0: * Add dependency to QML module * gitignore: add VS Code dir ==== kf6-syndication ==== Version update (6.1.0 -> 6.2.0) Subpackages: libKF6Syndication6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - No code change since 6.1.0 ==== kf6-syntax-highlighting ==== Version update (6.1.0 -> 6.2.0) Subpackages: libKF6SyntaxHighlighting6 - Update to 6.2.0 * New feature release * For more details please see: * https://kde.org/announcements/gear/6.2.0/ - Changes since 6.1.0: * Support single-quoted strings in MapCSS * Add Syntax Highlighting for Vue Template Files * Add syntax highlighting support for CashScript ==== kirigami-addons6 ==== Version update (1.1.0 -> 1.2.0) - Update to 1.2.0: https://carlschwan.eu/2024/05/09/kirigami-addons-1.2/ * Accessibility fixes * New component: FloatingToolBar ==== krb5 ==== - Remove requires for not used cron - Fix memory leaks, add patch 0009-Fix-three-memory-leaks.patch * CVE-2024-26458, bsc#1220770 * CVE-2024-26461, bsc#1220771 * CVE-2024-26462, bsc#1220772 ==== libarchive ==== Version update (3.7.2 -> 3.7.4) - Update to 3.7.4: * rar: Fix OOB in rar e8 filter (CVE-2024-26256, bsc#1222911) * zip: Fix out of boundary access * 7zip: Limit amount of properties * bsdtar: Fix error handling around strtol() usages * passphrase: Improve newline handling on Windows * passphrase: Never allow empty passwords * rar: Fix "File CRC Error" when extracting specific rar4 archives * xar: Avoid infinite link loop * zip: Update AppleDouble support for directories * zstd: Implement core detection - Update to 3.7.3: * PCRE2 support * add trailing letter b to bsdtar(1) substitute pattern * add support for long options "--group" and "--owner" to tar(1) * Fix possible vulnerability in tar error reporting introduced in f27c173 * ISO9660: preserve the natural order of links * rar5: fix decoding unicode filenames on Windows * rar5: fix infinite loop if during rar5 decompression the last block produced no data * xz filter: fix incorrect eof at the end of an lzip member * zip: fix end-of-data marker processing when decompressing zip archives * multiple bsdunzip(1) fixes * filetime truncation fix on Windows - Fix rpmlint warning about summary being too long ==== libbpf ==== Version update (1.4.0 -> 1.4.1) - update to 1.4.1: * Bug fix release fixing logic around determining whether to autoload SEC("struct_ops") programs in cases when old kernel doesn't support some optional callbacks and user reset them to NULL from BPF skeleton. ==== libcontainers-common ==== Subpackages: libcontainers-default-policy - Introduce new subpackage that ships registries.conf that uses registry.suse.com as the only unqualified registry while pulling images on SL Micro and SP6. (jsc#SMO-376, jsc#PED-8289) ==== libgpg-error ==== Version update (1.48 -> 1.49) - Update to 1.49: * Two new functions to improve the logging interface. The gpgrt_logv_domain is currently the same as gpgrt_logv_prefix but allows to pass a domain string so that in future we will be able to select log output by domain. It also provide a non yet functional feature to include a hex dump. * Add a "trunc" keyword to gpgrt_log_printhex. [rE0a39fbefcb] * Avoid an endless loop in the argparser due to a conf file read error. [rE2dc93cfecc] * Interface changes relative to the 1.48 release: - gpgrt_add_post_log_func NEW. - gpgrt_logv_domain NEW. * Release-info: https://dev.gnupg.org/T7012 ==== libnvme ==== Version update (1.8+0.gbff7dda -> 1.9+0.g80c5cf2) Subpackages: libnvme-mi1 libnvme1 - Update to version 1.9+0.g80c5cf2: * types: Added Command and Feature Lockdown LID * types: add ASQ, ACQ and BPMBL controller properties definitions * types: add controller properties enum documentation * types: fix CRTO.CRIMT mask value definition * tree: use strtou32 to read lba_size * types: Fix PMRWBM register name * examples: fix mi-mctp build warning errors * test: add CSTS.ST, CAP.CPS and CAP.NSSS registers * types: add CAP.CPS and CAP.NSSS definitions * types: add enum nvme_cap documentation * types: Add enum nvme_unit/cmbebs/cmbswtp/flbas/cmic documentation * util: Add string constant for ENVME_CONNECT_IGNORED * tests: Add sample NBFT table with mpath IPv4+IPv6 discovery * types: add controller status shutdown type (CSTS.ST) definition * types: Add enum nvme_csts documentation * types: Add NVME_CMIC definitions * types: Add CMBSWTP property definitions * types: Add NVME_CMBEBS property definitions * types: Fix boot partition read offset (BPROF) mask value * tree: fix mem leak in nvme_ns_init() (bsc#1223331) * fabrics: retry discovery log page when DNR is not set * ioctl: return EPROTO when an NVMe status occurred * linux: Allocate aligned payload for nvme_get_telemetry_log * test: use diff to compare sysfs output * tree: fix lba_count size calculation * tree: Add NVM subsystem controller identifier * test: Add unit test for nvme_id_ns_flbas_to_lbaf_inuse() * types: Fix NVME_CSTS_SHST_MASK definition * util: Fixed nvme_id_ns_flbas_to_lbaf_inuse() * types: Add optional data present filed mask and shift definition * types: Fix EOM header optional data present fields definition * libnvme : record the nvme pci adapter physical slot (bsc#1223208) * sysfs: minimize heap allocations of sysfs paths * json: Fix uninitialized variables * libnvme: add missing symbol nvme_scan_tls_keys * nbft: Whitespace fixes (bsc#1222026) * tests: Add complex NBFT table from Dell R660 (bsc#1222026) * tests: Adapt to added NBFT SSNS flags (bsc#1222026) * nbft: Add SSNS 'discovered' flag (bsc#1222026) * nbft: Add SSNS 'unavailable' flag (bsc#1222026) * doc: Document the NBFT API (bsc#1222026) * ioctl: Move nvme_cmd_dword_fields definitions into header file * types: Add PEL set feature event layout definitions * types: Fix enum nvme_pel_rci documentation error * types: Add boot partition information definitions * types: Add PEL header additional information definitions * fabrics: keyring is a long (bsc#1216982) * config-schema.json.in: tls keys and keyrings are strings (bsc#1216982) * linux: Add nvme_scan_tls_keys() (bsc#1216982) * json: dump TLS key data in PSK interchange format (bsc#1216982) * json: import TLS key from PSK interchange format (bsc#1216982) * json: export TLS key in PSK interchange format (bsc#1216982) * tree: read TLS key in nvme_configure_ctrl() (bsc#1216982) * linux: rework nvme_insert_tls_key_versioned() (bsc#1216982) * linux: add nvme_import_tls_key() (bsc#1216982) * linux: add nvme_export_tls_key() (bsc#1216982) * crc32: Add CRC32 algorithm (bsc#1216982) * linux: add nvme_update_key() (bsc#1216982) * linux: add nvme_read_key() (bsc#1216982) * linux: allow for NULL argument in nvme_lookup_keyring() (bsc#1216982) * log: Respect DEFAULT_LOGLEVEL on uninitialized logging * log: Introduce nvme_get_logging_level() * ioctl: remove incomplete debug logging infrastructure * ioctl: export nvme_submit_passthru{64} as weak symbol * log: move nvme_{set|get}_debug to log.c * fabrics: check the read() return value * types: Add PEL reporting context port identifier type definitions * types: Add persistent event log reporting context definitions - Upstream changed the sysfs test setup, thus sysfs test works in OSB * remove 0001-build-disable-sysfs-test.patch ==== libproxy-backend ==== Version update (0.5.5 -> 0.5.6) - Update to version 0.5.6: + Support XDP Desktop Portal proxy resolver. ==== libproxy-client ==== Version update (0.5.5 -> 0.5.6) - Update to version 0.5.6: + Support XDP Desktop Portal proxy resolver. ==== libqaccessibilityclient-qt6 ==== Version update (0.5.0 -> 0.6.0) - Update to 0.6.0. No changelog. ==== libupnp ==== Version update (1.14.18 -> 1.14.19) Subpackages: libixml11 libupnp17 - Update to release 1.14.19 * Fix some memory allocations in the "TvDevice" example ==== libxslt ==== Subpackages: libexslt0 libxslt-tools libxslt1 - Fix ftbfs with GCC14 (bsc#1220571) * correct libxslt-random-seed.patch to include time.h unconditionally * add gcc14-runtest-no-const.patch ==== llvm18 ==== Version update (18.1.4 -> 18.1.5) - Update to version 18.1.5. * This release contains bug-fixes for the LLVM 18.1.0 release. This release is API and ABI compatible with 18.1.0. - Rebase llvm-do-not-install-static-libraries.patch. ==== mobile-broadband-provider-info ==== Version update (20230416 -> 20240407) - Update to version 20240407: + Switch to meson + Support MMS attachment size + New providers: - uk: Lebara + Updated providers: - in: Multiple providers - uk: Superdrug + Voicemail fixes: - au:Vodafone - us:AT&T - fr:FreeMobile - Add meson BuildRequires: follow upstreams port to meson. - Drop libtool BuildRequires: no longer needed with meson. - Replace configure/make/make_install macros by the meson equivalents meson/meson_build/meson_install. - Enable test suite. - BuildRequire libxml2-tools, needed by the tests. - Update to version 20240407: * Release 20240407 * build: Drop autoconf * ci: Use meson instead of autoconf * build: Switch to meson * ci: Switch to recent Debian * gb: Add voicemail for Superdrug * in: cleanup dead providers and update new and existing * Add voicemail for Vodafone AU * USA: Change AT&T Visual Voicemail Protocol to ios * Providers with mccmnc 310260: add primary attributes * fr: change Free Mobile standard to iOS * dtd: add iOS standard and references to visual voicemail * Lebara UK: Add maximum MMS size * serviceproviders.2.dtd: Add support for MMS size in bytes * Add Lebara UK Provider * gb: Update Superdrug's MMS proxy ==== mutter ==== Version update (46.0 -> 46.1) - Update to version 46.1: + Implement linux-drm-syncobj-v1. + Fix input lag on X11 nvidia. + Fix scanout on secondary GPUs. + Don't apply max-render-time to secondary GPUs. + Fix reusing single-pixel buffers. + Improve scanout candidate check. + Always use logical pixels for. + Fix modifiers getting stuck during grabs. + Fix night-light on displays without EDID. + Fix secondary GPU acceleration with nvidia driver. + Fix some XWayland clients being partially click-through. + Fix initial suspended state. + Fixed crashes. + Misc. bug fixes and cleanups. + Updated translations. - Drop mutter-fix-front-buffer-lock.patch and 0001-Revert-clutter-stage-Avoid-queueing-stage-updates-wh.patch: fixed upstream. - Add 0001-Revert-clutter-stage-Avoid-queueing-stage-updates-wh.patch: Reverting commit 261f516a to fix black screen on Xorg when logging in or logging out (glgo#GNOME/mutter#3452 bsc#1222612). ==== nautilus ==== Version update (46.0 -> 46.1) Subpackages: gnome-shell-search-provider-nautilus libnautilus-extension4 - Update to version 46.1: + Bugfixes: - Create archive with Enter on Compress dialog. - Move focus correctly when item is removed. - View performance optimization. - Fix crash when compressing a file and a folder. - Don't show banners in global search. - Preserve permissions when copying from read-only file systems. - Disable non-working global search from Other Locations. + Updated translations. ==== ncurses ==== Version update (6.4.20240414 -> 6.5.20240427) Subpackages: libncurses6 ncurses-utils terminfo-base - Make verify the patches an optional task for local builds only - Add ncurses patch 20240504 + update ncurses/wcwidth.c, for MinGW ports, from xterm. + trim obsolete comment about tack from INSTALL. - Verify also every patch - Update to ncurses 6.5 (patch 20240427) + update announcement + fixes/corrections for manpages (patches by Branden Robinson). + fix redefinition of CASTxPTR, for legacy Unix. - Update to tack 1.9 (patch 20230201) * configure: regen * configure.in: initialize $ac_includes_default s/fgrep/$FGREP/ * aclocal.m4: resync with my-autoconf - Add ncurses patch 20240420 + improve formatting/style of manpages (patches by Branden Robinson). + compiler warning/portability fixes. ==== nvme-cli ==== Version update (2.8 -> 2.9.1) - Update to version 2.9.1: * plugins/spdk: drop the plugin - Update to version 2.9: * nvme-print: expand the maximum field length to prevent misalignment * plugins/spdk: plugin to list SPDK subsystems * nvme-print: check if controller belong to SPDK * plugins/spdk: plugin to list SPDK controllers * nvme-print-stdout: fix ASQB, ACQB and BMBBA prints * build: bump libnvme wrap * nvmf-autoconnect: fix string encoding * nvme: identify primary ctrl do not accept nsid * nvme-wrap: remove unused nvme_cli_get_log_ana_groups() * nvme-print-json: use admin queue attributes definitions * nvme-print-json: use CSTS definitions * nvme-print-stdout: use POWER_OF_TWO macro * nvme-print-json: use controller configuration definitions * nvme-print-json, nvme-print-stdout: add tertiary version number * nvme-print-json: use NVME_MAJOR and NVME_MINOR definitions * nvme-print-json: use NVME_BOOT_PARTITION_INFO field definitions * nvme-print-json: add support telemetry log create event in PEL * nvme-print-json: add support set feature event in PEL * nvme-print-json: add obj_d() function * nvme-print-json: add obj_add_uint_0nx() function * meson.build: Fix spelling of sed-opal.h filename * sed_opal: Only build when we really have sed_opal headers * nvme: fix error path if write() fails in get_telemetry_log() * plugins/solidigm: Additional LID for temperature statistics. * plugins/solidigm: Improved Solidigm UUID index detection. * nvme-print-stdout: Add CSTS.ST register stdout print * nvme-print-stdout: Use NVME_CMIC definitions * nvme-print: Use NVME_UNIT definitions * nvme-print-stdout: Use NVME_CMBMSC/STS/EBS/SWTP definitions * plugins/ssstc: add a new plugin for SSSTC driver * nvmf-connect: systemd hardening effort * plugins/ocp: Adjusted variable type size carrying UUID index to 8 bit. * nvme: fix security buffer allocation size * nvme: Change fw-download xfer initialization to set 0 * nvme: Add fw-download warning message for FWUG alignment error * plugins/ocp: Split ocp_get_uuid_index() into find and get functions. * nvme: fix mem leak in multiple key related functions (bsc#1223331) * fabrics: fix mem leak in nvmf_check_hostid_and_hostnqn() (bsc#1223331) * nvme-print-stdout: Use NVME_BPRSEL definitions * nvme-print-stdout: Use NVME_BPINFO definitions * nvme-print-stdout: Use NVME_CMBSZ definitions * nvme-print-stdout: Use NVME_CMBLOC definitions * Revert "logging: fix error handling for ioctl passthru wrappers" * fabrics: align identify command payload * ocp: Unify line start spacing as tabs * ocp: support OCP DSSD Async Event Config feature * nvme: Add support for get-reg and set-reg commands * nvme-print-json: Add register print functions * nvme-print-stdout: Add register print functions * nvme-print: Add register print functions * nvme: Refactor mmap_registers to add writable parameter * nvme-print: Change PMRSZU string function as unit string * nvme-print: Refactor CMBLOC and PMRSTS registers function * logging: fix error handling for ioctl passthru wrappers * nbft: Fix scandir() error check * nbft: Refactor connection attempt out * nvme-print: Use EOM optional data present macros changed * nvme-print: Print cntlid number for controller * nvme: check-tls-key fails despite having hostnqn file (bsc#1223331) * nvme: print retained key for gen-tls-key's -i option too (bsc#1223331) * fabrics : allow host to create duplicate connections to target * fabrics: Fix fast_io_fail_tmo option * nvme-print-stdout: use admin queue attributes definitions * nvme-print-stdout: use CSTS definitions * nvme-print-stdout: use controller configuration definitions * nvme-print-stdout: use NVME_MAJOR and NVME_MINOR definitions * nvme-print-stdout: use FDP configuration attributes definitions * nvme: add new function 'tls_key' * nvme: use library functions for importing and exporting TLS keys (bsc#1216982) * nvme: extend error message for ns scan failures * nvme-print-json: Bugfix status json key of sanitize-log * sed: update SED password when initalizing (bsc#1222168) * plugins/memblaze: add performance stats * plugins/memblaze: fix code mis-type error * plugins/memblaze: code refactor on applying __packed on more structs * plugins/memblaze: code refactor on using cleanup_nvme_dev * nvme: Fix to cleanup free raw_secret memory allocated * plugins/memblaze: code-format on leading indent and align * plugins/wdc: Fix narrow index variable type in for loop to __u32 * plugins/wdc: Whitespace changes * nvme: Delete unused nvme root scanned * ocp: support OCP 2.5 Set Telemetry Profile feature * nvme: Don't seg fault if given device is not char/block device * nbft: Include SSNS index in error messages (bsc#1222026) * nbft: Pause logging for expected connection failures (bsc#1222026) * nbft: Silence connection failures for unavailable SSNS (bsc#1222026) * nbft: Fix 'verbose' argument type (bsc#1222026) * plugins/nbft: Implement verbose logging * plugins/nbft: Print the new SSNS flags * nbft: Fix uninitialized variable * plugins/nbft: Fix uninitialized variables * plugins/sed: Fix uninitialized variable * nvme-print-stdout: Fix uninitialized variable * nvme-print-json: Fix uninitialized variable * build: Switch default meson buildtype to 'debugoptimized' * nvme: do not scan topology when mmaping registers ... changelog too long, skipping 53 lines ... * remove 0100-harden_nvmf-connect@.service.patch ==== openssl-3 ==== Subpackages: libopenssl3 - Enable livepatching support (bsc#1223428) - Add ktls capability [bsc#1216950] Already added in January, but not mentioned in this changelog. - Security fix: [bsc#1222548, CVE-2024-2511] * Fix unconstrained session cache growth in TLSv1.3 * Add openssl-CVE-2024-2511.patch ==== osinfo-db ==== - bsc#1222738 - virt-manager shows SLE Micro 6.0 in suggested OS version should be SL Micro 6.0 add-slm6.0-support.patch Drop add-slem6.0-support.patch ==== passt ==== Version update (20240405.954589b -> 20240426.d03c4e2) Subpackages: passt-selinux - Specify version for make_build so that passt reports its version correctly, fixes bsc#1223853 - Update to version 20240426.d03c4e2: * netlink: Use IFA_F_NODAD also while duplicating addresses from the host * netlink: For IPv4, IFA_LOCAL is the interface address, not IFA_ADDRESS * test: Make log truncation test more robust * test: Slight simplification to pasta log tests * udp: Correctly look up outbound socket with port remappings * tcp: Replace TCP buffer structure by an iovec array * conf: Don't fail if the template interface doesn't have a MAC address * conf: We're interested in the MAC address, not in the MAC itself * pasta, util: Align stack area for clones to maximum natural alignment * treewide: Compilers' name for armv6l and armv7l is "arm" ==== patterns-base ==== Subpackages: patterns-base-base patterns-base-bootloader patterns-base-minimal_base patterns-base-x11 - Update Summary for generic_desktop pattern: make clear that this is based on IceWM (boo#1221320). ==== pcre2 ==== Subpackages: libpcre2-16-0 libpcre2-8-0 ==== pcsc-lite ==== Version update (2.0.3 -> 2.1.0) - Update the spec for building with version 2.1.0 - version 2.1.0 * LIBPCSCLITE_DELEGATE is used to redirect to another libpcsclite library * setup_spy.sh displays the LIBPCSCLITE_DELEGATE value to use for spying * provides libfake.c as a sample source code * Some other minor improvements- ==== pipewire ==== Version update (1.0.5 -> 1.0.5+git36.60deeb2) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Update to version 1.0.5+git36.60deeb2 to fix several crashes, NULL checks, format strings and other issues: * spa: libcamera: fix RGB mappings * pw-dump: destroy all objects not just those matching the pattern * pw-dump: fix string memory leak on error * json: fix high surrogate escapes * core: handle import errors better * gst/src: fix crash when current_caps is NULL * gst/src: Avoid unnecessary renegotiations during streaming * gst/src: Cleanups for src_negotiate() * pw-mon: fix type confusion in core event handler * gst: fix stream params memory leak * gst: handle some more errors * treewide: fix errno assignments * alsa-pcm: don't force quantum for iec958 formats * journal: prepend code location to messages at debug log levels * module-rt: fix compiler warning * filter-chain: fix arguments of calloc * combine-stream tag forward * Add album to tag metadata * impl-node: avoid bitfield races * treewide: fix some format string issues * conf: warn when match actions are missing * module-protocol-simple: handle 'node.name' property * module-ffado: only start after ports are configured * context: fill basic properties early * combine-stream: fix latency-compensate with resample.disabled=true * profiler: remove unused data-loop * v4l2: fix printf format * spa: v4l2: encode device id into a json array * spa: libcamera: encode device ids into a json array * impl-port: avoid doing work when the port is destroyed * impl-port: use 0 size when clearing IO * stream: log a warning when media.class and direction mismatch * module-loopback: only enable delay with valid rate and channels * alsa: fix race when updating the eventfd * audioconvert: also clamp monitor volume to min/max * combine-stream: actually make use of resample.disable ==== pixman ==== Version update (0.43.2 -> 0.43.4) - Update to version 0.43.4 + Fix incorrect compositing on big-endian architectures. + Allow building on clang/arm32. ==== podman ==== - convert to using obs_scm ==== polkit-default-privs ==== Version update (1550+20240325.eddbe04 -> 1550+20240430.5327266) - Update to version 1550+20240430.5327266: * profiles: whitelist dnf5daemon-server (bsc#1218327) * profiles: remove pseudo auth action kcmkwallet5 (bsc#1217190) ==== python-Jinja2 ==== Version update (3.1.3 -> 3.1.4) - update to 3.1.4 (bsc#1223980, CVE-2024-34064): * The xmlattr filter does not allow keys with / solidus, > greater-than sign, or = equals sign, in addition to disallowing spaces. Regardless of any validation done by Jinja, user input should never be used as keys to this filter, or must be separately validated first. ==== python-cryptography ==== Version update (42.0.5 -> 42.0.6) - update to 42.0.6: * Fixed compilation when using LibreSSL 3.9.1. ==== python-jsonschema ==== Version update (4.21.1 -> 4.22.0) - update to 4.22.0: * Improve best_match (and thereby error messages from jsonschema.validate) in cases where there are multiple sibling errors from applying anyOf / allOf -- i.e. when multiple elements of a JSON array have errors, we now do prefer showing errors from earlier elements rather than simply showing an error for the full array (#1250). * (Micro-)optimize equality checks when comparing for JSON Schema equality by first checking for object identity, as == would. ==== python-referencing ==== Version update (0.34.0 -> 0.35.1) - Update to version 0.35.1: * Make Resource.pointer also properly handle empty pointers (which refer to the root document). This fix likely only affects you if you were using that function directly, as Resource.lookup already handles empty fragments. - Update to version 0.35.0: * Make Registry.contents raise NoSuchResource when needed. * Update pre-commit hooks. * Run coverage with 3.12 * Try convincing RTD to use uv. * uv and minor workflow tweaks * Use uv for envs, particularly the requirements env. * [pre-commit.ci] pre-commit autoupdate * Whatever pyright regression was present is still present. * [pre-commit.ci] pre-commit autoupdate * Bump suite from `71c85d0` to `87851a6` * Bump suite from `d3fdf35` to `71c85d0` * Bump suite from `e3fe0aa` to `d3fdf35` ==== python311 ==== - Update CVE-2023-52425-libexpat-2.6.0-backport.patch so that it uses features sniffing, not just comparing version number. Include also support-expat-CVE-2022-25236-patched.patch. - Add CVE-2023-52425-remove-reparse_deferral-tests.patch skipping failing tests. - Refresh patches: - CVE-2023-27043-email-parsing-errors.patch - fix_configure_rst.patch - skip_if_buildbot-extend.patch - Remove included patch: - support-expat-CVE-2022-25236-patched.patch ==== python311-core ==== Subpackages: libpython3_11-1_0 python311-base - Update CVE-2023-52425-libexpat-2.6.0-backport.patch so that it uses features sniffing, not just comparing version number. Include also support-expat-CVE-2022-25236-patched.patch. - Add CVE-2023-52425-remove-reparse_deferral-tests.patch skipping failing tests. - Refresh patches: - CVE-2023-27043-email-parsing-errors.patch - fix_configure_rst.patch - skip_if_buildbot-extend.patch - Remove included patch: - support-expat-CVE-2022-25236-patched.patch ==== qemu ==== Version update (8.2.2 -> 8.2.3) - Fix a build issue on riscv: * target/riscv/kvm: rename riscv_reg_id() to riscv_reg_id_ulong() * target/riscv/kvm: add RISCV_CONFIG_REG() * target/riscv/kvm: change timer regs size to u64 * target/riscv/kvm: change KVM_REG_RISCV_FP_D to u64 * target/riscv/kvm: change KVM_REG_RISCV_FP_F to u32 - Update to version 8.2.3. Full changelog/backports here: https://lore.kernel.org/qemu-devel/1713980341.971368.1218343.nullmailer@tls… Some of the upstream backports are: * Update version for 8.2.3 release * ppc/spapr: Initialize max_cpus limit to SPAPR_IRQ_NR_IPIS. * ppc/spapr: Introduce SPAPR_IRQ_NR_IPIS to refer IRQ range for CPU IPIs. * hw/pci-host/ppc440_pcix: Do not expose a bridge device on PCI bus * hw/isa/vt82c686: Keep track of PIRQ/PINT pins separately * virtio-pci: fix use of a released vector * linux-user/x86_64: Handle the vsyscall page in open_self_maps_{2,4} * hw/audio/virtio-snd: Remove unused assignment * hw/net/net_tx_pkt: Fix overrun in update_sctp_checksum() * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set * hw/net/lan9118: Fix overflow in MIL TX FIFO * hw/net/lan9118: Replace magic '2048' value by MIL_TXFIFO_SIZE definition * backends/cryptodev: Do not abort for invalid session ID * hw/misc/applesmc: Fix memory leak in reset() handler * hw/block/nand: Fix out-of-bound access in NAND block buffer * hw/block/nand: Have blk_load() take unsigned offset and return boolean * hw/block/nand: Factor nand_load_iolen() method out * qemu-options: Fix CXL Fixed Memory Window interleave-granularity typo * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs * ...and many more... ==== qt6-base ==== Subpackages: libQt6Concurrent6 libQt6Core6 libQt6DBus6 libQt6Gui6 libQt6Network6 libQt6OpenGL6 libQt6OpenGLWidgets6 libQt6PrintSupport6 libQt6Sql6 libQt6Test6 libQt6Widgets6 libQt6Xml6 qt6-network-tls qt6-networkinformation-glib qt6-networkinformation-nm qt6-printsupport-cups qt6-sql-sqlite - Add upstream security fix (CVE-2024-33861): * 0001-QStringConverterICU-Pass-correct-pointer-to-callback.patch ==== re2 ==== Version update (20240401 -> 20240501) - update to 2024-05-01: * Stop setting re2_INCLUDE_DIR * Fixes related to python bindings ==== rebootmgr ==== Version update (2.4 -> 2.4+git20240503.5b98913) - Remove rcrebootmgr symlink - Update to version 2.4+git20240503.5b98913: * Don't generate html documentation anymore * Fix manual page dependencies for parallel build * Update configure.ac * Fix soft-reboot detection in forced mode ==== rust-keylime ==== Version update (0.2.4~0 -> 0.2.5~0) - Update to version 0.2.5~0: * Bump version to 0.2.5 * cargo: Relax required version for pest crate * build(deps): bump log from 0.4.20 to 0.4.21 * build(deps): bump thiserror from 1.0.56 to 1.0.59 - actix-web update moves rustls as feature (bsc#1223234, CVE-2024-32650) - Update to version 0.2.4~39: * build(deps): bump openssl from 0.10.63 to 0.10.64 * build(deps): bump h2 from 0.3.24 to 0.3.26 * build(deps): bump serde_json from 1.0.107 to 1.0.116 * build(deps): bump actix-web from 4.4.1 to 4.5.1 * crypto: Enable TLS 1.3 * build(deps): bump tempfile from 3.9.0 to 3.10.1 * build(deps): bump mio from 0.8.4 to 0.8.11 * enable hex values to be used for tpm_ownerpassword * config: Support IPv6 with or without brackets * keylime: Implement a simple IP parser to remove brackets * crypto: Implement CertificateBuilder to generate certificates * tests: Fix coverage download by supporting arbitrary URL * cargo: Add testing feature to keylime library * Set X509 SAN with local DNSname/IP/IPv6 * Include newest Node20 versions for Github actions * tpm: Add unit test for uncovered public functions * crypto: Implement ECC key generation support * crypto: Add test for match_cert_to_template() * Fix minor typo, format and remove end whitespaces * crypto: Make error types less specific * tests/run.sh: Run tarpaulin with a single thread * payloads: Remove explicit drop of channel transmitter * crypto: Move to keylime library * crypto: Add specific type for every possible error * tpm: Rename origin of error as source in structures * list_parser: Add source for error for backtrace * algorithms: Make errors more specific * typo fix for default path to measured boot log file * README: remove mentions of libarchive as a dependency * Dockerfile.wolfi: Update clang to version 17 * docker: Remove libarchive as a dependency * rpm: Remove libarchive from dependencies * cargo: Replace compress-tools with zip crate * cargo: Bump ahash to version 0.8.7 * build(deps): bump serde from 1.0.195 to 1.0.196 * build(deps): bump libc from 0.2.152 to 0.2.153 * build(deps): bump reqwest from 0.11.23 to 0.11.24 * docker: Install configuration file in the correct path * config: Make IAK/IDevID disabled by default ==== sdbootutil ==== Version update (1+git20240410.3325802 -> 1+git20240506.573a6a4) Subpackages: sdbootutil-rpm-scriptlets sdbootutil-snapper - Update to version 1+git20240506.573a6a4: * Don't try to mess with overlayfs inside transaction * .spec - requires: dialog ==== sddm ==== - Drop the empty branding-upstream subpackages (boo#1224063) ==== sddm-qt6 ==== Subpackages: sddm-greeter-qt6 - Drop the empty branding-upstream subpackages (boo#1224063) ==== setools ==== Version update (4.5.0 -> 4.5.1) - Update to version 4.5.1: - Correct annotations of NetworkX types to make it optional again. - Fix packaging issue for apol's style sheet (apol.css). - Drop 0001-Make-networkx-optional-again-Fixes-125.patch fixed upstream - Change networkx Requires to Suggests ==== slirp4netns ==== Version update (1.2.3 -> 1.3.0) - New upstream release 1.3.0 * Support new `--netns-type=tapfd` (#340, thanks to @helmutg) * Do not leak socket in case of success (#339, thanks to @jnovy) ==== sof-firmware ==== Version update (2023.12.1 -> 2024.03) - Add a workaround for installation error due to the change of intel/sof-ace-tplg directory to a symlink - update to 2024.03: * For v2.9 series, the following new topology files have been added since v2.8: v2.9.x/sof-ipc4-tplg-v2.9 âââ sof-hda-generic-ace1-2ch.tplg âââ sof-hda-generic-ace1-4ch.tplg âââ sof-hda-generic-cavs25-2ch.tplg âââ sof-hda-generic-cavs25-4ch.tplg âââ sof-mtl-es83x6-ssp1-hdmi-ssp02.tplg âââ sof-mtl-hdmi-ssp02.tplg * For v2.2.8 series, the following new topology files have been added since v2.2.8 âââ sof-adl-es8336-ssp1-hdmi-ssp02-4ch.tplg âââ sof-adl-sdw-cs42l42-4ch.tplg ==== sqlite3 ==== Version update (3.45.2 -> 3.45.3) - Update to release 3.45.3: * Fix a long-standing bug (going back to version 3.24.0) that might (rarely) cause the "old.*" values of an UPDATE trigger to be incorrect if that trigger fires in response to an UPSERT. * Reduce the scope of the NOT NULL strength reduction optimization that was added as item 8e in version 3.35.0. The optimization was being attempted in some contexts where it did not work, resulting in incorrect query results. - Add SQLITE_STRICT_SUBTYPE=1 as recommended by upstream. ==== systemd ==== Version update (255.4 -> 255.5) Subpackages: libsystemd0 libudev1 systemd-boot systemd-coredump systemd-experimental udev - Import commit 49fb09fa18a7b81f6b3c3c15aca47fd00940430e (merge of v255.5) For a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/23b15deb203780580cbfad095ae1071… - Import commit 23b15deb203780580cbfad095ae1071bd2133220 23b15deb20 gpt-auto-generator: be more defensive when checking the presence of ESP in fstab (bsc#1218671) 7ed2979654 journalctl: explicitly check < 0 for error fc5e25d0a0 journalctl: make --until work again with --after-cursor and --lines (bsc#1221906) - Update 0008-sysv-generator-translate-Required-Start-into-a-Wants.patch to adapt sysv-generator-test to the SUSE's specificity brought by this patch. - systemd-testsuite: some of the integration tests depend on the bin, daemon, games and nobody users/groups. - Drop _FORTIFY_SOURCE=2 workaround. Since commit 7929e180aa (v253) it shouldn't be needed anymore. - systemd.spec: preparation for the next version of systemd (i.e. v256), libkmod2 will be dlopened hence explicitly require it now as it doesn't hurt with the current version. However don't recommend it from systemd by assuming that when module loading from PID1 is needed, udev is installed. - Make systemd-doc subpackage noarch. ==== systemd-presets-branding-Aeon ==== - Enable x86_64_v3-transactional-update.service for automated refresh of x86_64_v3 optimised libraries. Service automatically does not run on non v3 systems. - Remove redundant services formerly from MicroOS - Remove sshd from presets (we're a desktop OS) ==== taglib ==== - USe %autosetup macro: allows us to eliminate usage of deprecated %patchN syntax. ==== thin-provisioning-tools ==== - Update vendored dependencies ==== tpm2-0-tss ==== Version update (4.0.1 -> 4.1.0) Subpackages: libtss2-esys0 libtss2-fapi-common libtss2-fapi1 libtss2-mu0 libtss2-rc0 libtss2-sys1 libtss2-tcti-device0 libtss2-tctildr0 Update to version 4.1: + Security - Fixed CVE-2024-29040 (bsc#1223690) + Fixed - fapi: Fix length check on FAPI auth callbacks - mu: Correct error message for errors - tss2-rc: fix unknown laer handler dropping bits. - fapi: Fix deviation from CEL specification (template_value was used instead of template_data). - fapi: Fix json syntax error in FAPI profiles which was ignored by json-c. - build: fix build fail after make clean. - mu: Fix unneeded size check in TPM2B unmarshaling. - fapi: Fix missing parameter encryption. - build: Fix failed build with --disable-vendor. - fapi: Fix flush of persistent handles. - fapi: Fix test provisioning with template with self generated certificate disabled. - fapi: Fix error in Fapi_GetInfo it TPM supports SHA3 hash algs. - fapi: Revert pcr extension for EV_NO_ACTION events. - fapi: Fix strange error messages if nv, ext, or policy path does not exits. - fapi: Fix segfault caused by wrong allocation of pcr policy. - esys: Fix leak in Esys_EvictControl for persistent handles. - tss2-tcti: tcti-libtpms: fix test failure on big-endian platform. - esys: Add reference counting for Esys_TR_FromTPMPublic. - esys: Fix HMAC error if session bind key has an auth value with a trailing 0. - fapi: fix usage of self signed certificates in TPM. - fapi: Usage of self signed certificates. - fapi: A segfault after the error handling of non existing keys. - fapi: Fix several leaks. - fapi: Fix error handling for policy execution. - fapi: Fix usage of persistent handles (should not be flushed) - fapi: Fix test provisioning with template (skip test without self generated certificate). - fapi: Fix pcr extension for EV_NO_ACTION - test: Fix fapi-key-create-policy-signed-keyedhash with P_ECC384 profile - tcti_spi_helper_transmit: ensure FIFO is accessed only after TPM reports commandReady bit is set - fapi: Fix read large system eventlog (> UINT16_MAX). - esys tests: Fix layer check for TPM2_RC_COMMAND_CODE (for /dev/tpmrm0) - test: unit: tcti-libtpms: fix test failed at 32-bit platforms. - fapi: Fix possible null pointer dereferencing in Fapi_List. - sys: Fix size check in Tss2_Sys_GetCapability. - esys: Fix leak in Esys_TR_FromTPMPublic. - esys: fix unchecked return value in esys crypto. - fapi: Fix wrong usage of local variable in provisioning. - fapi: Fix memset 0 in ifapi_json_TPMS_POLICYNV_deserialize. - fapi: Fix possible out of bound array access in IMA parser. - tcti device: Fix possible unmarshalling from uninitialized variable. - fapi: Fix error checking authorization of signing key. - fapi: Fix cleanup of policy sessions. - fapi: Eventlog H-CRTM events and different localities. - fapi: Fix missing synchronization of quote and eventlog. - faii: Fix invalid free in Fapi_Quote with empty eventlog. + Added - tcti: LetsTrust-TPM2Go TCTI module spi-ltt2go. - mbedtls: add sha512 hmac. - fapi: Enable usage of external keys for Fapi_Encrypt. - fapi: Support download of AMD certificates. - tcti: Add USB TPM (FTDI MPSSE USB to SPI bridge) TCTI module. - fapi: The recreation of primaries (except EK) in the owner hierarchy instead the endorsement hierarchy is fixed. - rc: New TPM return codes added. - fapi: Further Nuvoton certificates added. - tpm_types/esys: Add support for Attestable TPM changes in latest TPM spec. - tcti: Add '/dev/tcm0' to default conf - fapi: New Nuvoton certificates added. - esys: Fix leak in Esys_TR_FromTPMPublic. + Removed - Testing on Ubuntu 18.04 as it's near EOL (May 2023). - tpm2-tss.keyring: added Andreas Fuchs 0x8F4F9A45D7FFEE74 key, documented in upstream repo, which was used for signing this new release tarball. - add new sub-package libtss2-tcti-spidev0: TCTI for communicating with a TPM connected directly via SPI. - add new sub-package libtss2-tcti-i2c-helper0: TCTI for communicating with a TPM connected directly via I2C. ==== tpm2.0-tools ==== Version update (5.6 -> 5.7) Update to version 5.7: + Security - Fixed CVE-2024-29038 (bsc#1223687) - Fixed CVE-2024-29039 (bsc#1223689) + Fixed - Fix eventlog test - Fix issues with reading NV indexes - Fix context save error on tpm2_create - tpm2_sessionconfig: fix handling of --disable-continue session so that the subsequent command will not fail - when attempting to context save a flushed session. - detection of functions within libcrypto when CRYPTO_LIBS is set and system has install libcrypto. - tpm2_send: fix EOF detection on input stream. - tpm2_policy.c fix compilation error caused by format directive for size_t on 32 bit systems. - tpm2_nvread: fix input handling no nv index. - Auth file: Ensure 0-termination when reading auths from a file. - configure.ac: fix bashisms. configure scripts need to be runnable with a POSIX-compliant /bin/sh. - cirrus.yml fix tss compilation with libtpms for FreeBSD. - tpm2_tool.c Fix missing include for basename to enable compilation on netbsd. - options: fix TCTI handling to avoid failures for commands that should work with no options. - tpm2_getekcertificate.c Fix leak. ek_uri was not freed if get_ek_server_address failed. + Added - Add the possibility for autoflush (environment variable "TPM2TOOLS_AUTOFLUSH", or -R option) + Removed - Testing on Ubuntu 18.04 as it's near EOL (May 2023).m2_policy.c fix compilation error caused by format directive for size_t on 32 bit systems. - tpm2_nvread: fix input handling no nv index. - tpm2-tools.keyring: added Andreas Fuchs 0x8F4F9A45D7FFEE74 key, documented in upstream repo, which was used for signing this new release tarball. ==== tracker ==== Version update (3.7.1 -> 3.7.3) Subpackages: libtracker-sparql-3_0-0 tracker-data-files - Update to version 3.7.3: + Bump database version to fix SQLite 3.45.3 issues in existing installs. + Fixed possible infinite loop on incomplete/unterminated Turtle/Trig data. - Update to version 3.7.2: + Fix runtime issue introduced by SQLite 3.45.3. + Fix possible inconsistency in the handling of DELETE WHERE queries. + Updated translations. ==== tracker-miners ==== Version update (3.7.1 -> 3.7.3) Subpackages: tracker-miner-files - Update to version 3.7.3: + Fix possible crashes handling live changes to extractor configuration. + Make it easier to run tracker-extract-3 under Valgrind. + Plug a leak on misdetected JPEG files. + Many further metadata extraction tests. - Update to version 3.7.2: + Fixes to data deletion after removing an indexed folder from configuration. + Fixed glib/inotify based monitors to not follow symlinks in some circumstances. + Added a build-time option for fanotify. + Fix build with musl libc. + Updated translations. ==== transactional-update ==== Version update (4.6.6 -> 4.6.8) Subpackages: dracut-transactional-update libtukit4 transactional-update-zypp-config tukit - Version 4.6.8 - tukit: Properly handle overlay syncing failures: If the system would not be rebooted and several snapshots accumulated in the meantime, it was possible that the previous base snapshot - required for /etc syncing - was deleted already. In that case changes in /etc might have been reset. [gh#openSUSE/transactional-update#116] [gh#kube-hetzner/terraform-hcloud-kube-hetzner#1287] - soft-reboot: Log requested reboot type - soft-reboot: Don't force hard reboot on version change only - Version 4.6.7 - Add support for snapper 0.11.0; also significantly decreases cleanup time [boo#1223504] ==== util-linux ==== Version update (2.39.3 -> 2.40.1) Subpackages: libblkid1 libfdisk1 libmount1 libsmartcols1 libuuid1 - Update to version 2.40.1 * agetty: don't overwrite TERM passed by the user * fsck.minix: fix possible overrun * libblkid: fix segfault when blkid.conf doesn't exist * libfdisk: add initializer to geometry * libmount: fix access check for utab in context * libmount: fix umount --read-only * lsns: fix netns use - Drop skip-lsfd-tests-PR2888.patch, was a backport - Don't delete binaries not common for all architectures. Create an util-linux-extra subpackage instead, so users of third party tools can use them. (bsc#1222285) - Added static_lib.patch to resolve build failure when using libblkid.pc in --static mode - Add new lastlog2 sub-package (to solve migration problems due to rpm %post/%postun ordering) * Add pam-config calls to enable pam_lastlog2 * Add lastlog2.conf systemd-tmpfile to create database directory - Skip tests marked as ts_skip_qemu_user when running under qemu - Mark racy lslocks test as known fail - Re-enable lsfd tests using mkfds, as it is fixed now. - liblastlog2-devel: * Obsolete/provide lastlog2-devel for migration * Add header file to filelist - Update to release 2.40 * Add lastlog2 * agetty: Load autologin user from agetty.autologin credential * agetty: use get_terminal_default_type() * agetty: use sd_get_sessions() for number of users (#2088) * blockdev: add support for BLKGETZONESZ * cfdisk: ask y/n before wipe * cfdisk: properly handle out-of-order partitions during resize * chcpu: document limitations of -g * chsh: use libeconf to read /etc/shells * column: fix -l * column: fix memory leak * dmesg: fix FD leak * dmesg: fix delta calculation * dmesg: fix wrong size calculation * dmesg: support reading kmsg format from file * enosys: a new small command to make syscalls fail with ENOSYS * exch: new command to atomically exchanges paths between two files * fdisk: add support for partition resizing * fdisk: remove usage of VLA * fincore: add --output-all * findmnt: add --list-columns * findmnt: add -I, --dfi options for imitating the output of df -i * findmnt: add inode-related columns for implementing "df -i" like output * hexdump: add '--one-byte-hex' format option * hwclock: add support for RTC_VL_READ/RTC_VL_CLR ioctls * login: initialize noauth from login.noauth credential * lsblk: add --filter * lsblk: add --highlight * lsblk: add --list-columns * lsclocks: new command to show clocks * lscpu: even more Arm part numbers * mkfs.minix: handle 64bit time on 32bit system * mkswap: implement --file * mkswap: implement --offset * mount: add --map-users and --map-groups convenience options * nsenter: add option `-c` to join the cgroup of target process * setarch: add riscv64/riscv32 support * setpgid: new command to run a program in a new process group * uuidd: add cont_clock persistence * uuidgen: add option --count * wall: query logind for list of users with tty (#2088) * write: query logind for list of users with tty (#2088) * libuuid: improved support for 64-bit time - skip-lsfd-tests-PR2888.patch: skip some lsfd tests which OBS does not support (https://github.com/util-linux/util-linux/issues/2822) - use-logind-not-utmp.patch: removed, accepted upstream - tests-increase-delay-for-waitpid-test.patch: removed, upstreamed - 0001-Revert-libblkid-try-LUKS2-first-when-probing.patch: reverted upstream - util-linux-fix-tests-with-64k-pagesize.patch: was a backport ==== util-linux-systemd ==== Version update (1.3.1 -> 2.40.1) Subpackages: lastlog2 - Update to version 2.40.1 * agetty: don't overwrite TERM passed by the user * fsck.minix: fix possible overrun * libblkid: fix segfault when blkid.conf doesn't exist * libfdisk: add initializer to geometry * libmount: fix access check for utab in context * libmount: fix umount --read-only * lsns: fix netns use - Drop skip-lsfd-tests-PR2888.patch, was a backport - Don't delete binaries not common for all architectures. Create an util-linux-extra subpackage instead, so users of third party tools can use them. (bsc#1222285) - Added static_lib.patch to resolve build failure when using libblkid.pc in --static mode - Add new lastlog2 sub-package (to solve migration problems due to rpm %post/%postun ordering) * Add pam-config calls to enable pam_lastlog2 * Add lastlog2.conf systemd-tmpfile to create database directory - Skip tests marked as ts_skip_qemu_user when running under qemu - Mark racy lslocks test as known fail - Re-enable lsfd tests using mkfds, as it is fixed now. - liblastlog2-devel: * Obsolete/provide lastlog2-devel for migration * Add header file to filelist - Update to release 2.40 * Add lastlog2 * agetty: Load autologin user from agetty.autologin credential * agetty: use get_terminal_default_type() * agetty: use sd_get_sessions() for number of users (#2088) * blockdev: add support for BLKGETZONESZ * cfdisk: ask y/n before wipe * cfdisk: properly handle out-of-order partitions during resize * chcpu: document limitations of -g * chsh: use libeconf to read /etc/shells * column: fix -l * column: fix memory leak * dmesg: fix FD leak * dmesg: fix delta calculation * dmesg: fix wrong size calculation * dmesg: support reading kmsg format from file * enosys: a new small command to make syscalls fail with ENOSYS * exch: new command to atomically exchanges paths between two files * fdisk: add support for partition resizing * fdisk: remove usage of VLA * fincore: add --output-all * findmnt: add --list-columns * findmnt: add -I, --dfi options for imitating the output of df -i * findmnt: add inode-related columns for implementing "df -i" like output * hexdump: add '--one-byte-hex' format option * hwclock: add support for RTC_VL_READ/RTC_VL_CLR ioctls * login: initialize noauth from login.noauth credential * lsblk: add --filter * lsblk: add --highlight * lsblk: add --list-columns * lsclocks: new command to show clocks * lscpu: even more Arm part numbers * mkfs.minix: handle 64bit time on 32bit system * mkswap: implement --file * mkswap: implement --offset * mount: add --map-users and --map-groups convenience options * nsenter: add option `-c` to join the cgroup of target process * setarch: add riscv64/riscv32 support * setpgid: new command to run a program in a new process group * uuidd: add cont_clock persistence * uuidgen: add option --count * wall: query logind for list of users with tty (#2088) * write: query logind for list of users with tty (#2088) * libuuid: improved support for 64-bit time - skip-lsfd-tests-PR2888.patch: skip some lsfd tests which OBS does not support (https://github.com/util-linux/util-linux/issues/2822) - use-logind-not-utmp.patch: removed, accepted upstream - tests-increase-delay-for-waitpid-test.patch: removed, upstreamed - 0001-Revert-libblkid-try-LUKS2-first-when-probing.patch: reverted upstream - util-linux-fix-tests-with-64k-pagesize.patch: was a backport ==== vlc ==== Subpackages: libvlc5 libvlccore9 vlc-noX vlc-qt - Enable FluidSynth plugin using an optional package ==== vte ==== Version update (0.76.0 -> 0.76.1) - Update to version 0.76.1: + terminal: fix UTF-8 bounds check. + app: Don't hide scrolled-window option. + app: Add built-in CSS to hide scrolled-window over-scroll indicators. + emulation: Fix the reported bold/etc. color if unset + widget: Also set tag when returning no match. - Update to version 0.76.1: * emulation: Fix the reported bold/etc. color if unset * app: Fix the build with clang++ * app: Don't use typeof * terminal: fix UTF-8 bounds check * widget: Also set tag when returning no match * app: Add built-in CSS to hide scrolled-window over-scroll indicators * app: Don't hide scrolled-window option * build: Post release version bump ==== wireplumber ==== Subpackages: libwireplumber-0_5-0 wireplumber-audio - Better fix for (bsc#1223916) that basically turns the main profile into the (to be in 0.5.3) video-only profile unless wireplumber-audio is installed which now turns the main profile into exactly upstream's main profile. - Add patch from upstream to fix a json log issue: * 0001-lua-json-fix-error-ouput.patch - Add patch from upstream to add a method to merge json containers: * 0002-lua-json-add-method-to-merge-json-containers.patch - Add patch from upstream to fix merging a particular case of configuration options: * 0003-json-utils-fix-overriding-of-non-container-values-when.patch - Fix wireplumber not starting successfully when audio support is not enabled since the main profile now requires it. The best option would be to use a video-only profile but it's too late to change the way wireplumber is started in SLE/Leap, so the solution just makes audio/bluetooth optional for now (bsc#1223916) * split-config-file.py ==== wtmpdb ==== Version update (0.11.0 -> 0.12.0+git.20240508) Subpackages: libwtmpdb0 - Update to version 0.12.0+git.20240508: - boot: Query systemd if soft-reboot was done ==== xconsole ==== Version update (1.0.8 -> 1.1.0) - Update to version 1.1.0 * This release fixes use of the scroll wheel in the text area, adds -version and -help options, and removes support for several older OS'es. ==== xdg-desktop-portal-gnome ==== Version update (46.0 -> 46.1) - Update to version 46.1: + Remove D-Bus call timeout from Access portal requests that are proxied to GNOME Shell. This prevents the Access portal from failing requests if the user doesn't click on a dialog for more than 25 seconds. + Various fixes to the ScreenCast portal dialog. + Updated translations. ==== xxhash ==== - Fix ftbfs with gcc14: * use correct optflags also in %check * add test-tools-do-not-override-cflags.patch - Execute more tests

1 0

New MicroOS snapshot 20240505 released!
by Richard Brown 06 May '24

06 May '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MicroOS-release (20240503 -> 20240505) glslang (14.1.0 -> 14.2.0) libcontainers-common libgpg-error (1.48 -> 1.49) libnvme (1.8+0.gbff7dda -> 1.9+0.g80c5cf2) libqaccessibilityclient-qt6 (0.5.0 -> 0.6.0) nvme-cli (2.8 -> 2.9.1) qt6-base rebootmgr (2.4 -> 2.4+git20240503.5b98913) tpm2.0-tools (5.6 -> 5.7) === Details === ==== MicroOS-release ==== Version update (20240503 -> 20240505) Subpackages: MicroOS-release-appliance MicroOS-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== glslang ==== Version update (14.1.0 -> 14.2.0) - Update to release 14.2 * Improve checking for location aliasing errors * Fix undefined behavior in parser * Add bounds check to gl_SampleMask * Fix alignment and padding of matrices consuming one vector * Remove duplicate SPIR-V decorations * Check for exponent overflow in float parser * Fix bug in relaxed verification rules * Fix bug when importing SPIR-V extended intruction set * Fix issues with the interaction of cooperative_matrix and spirv_intrinsics * Support SPV_QCOM_image_processing2 * Support files with UTF8BOM character ==== libcontainers-common ==== Subpackages: libcontainers-default-policy - Introduce new subpackage that ships registries.conf that uses registry.suse.com as the only unqualified registry while pulling images on SL Micro and SP6. (jsc#SMO-376, jsc#PED-8289) ==== libgpg-error ==== Version update (1.48 -> 1.49) - Update to 1.49: * Two new functions to improve the logging interface. The gpgrt_logv_domain is currently the same as gpgrt_logv_prefix but allows to pass a domain string so that in future we will be able to select log output by domain. It also provide a non yet functional feature to include a hex dump. * Add a "trunc" keyword to gpgrt_log_printhex. [rE0a39fbefcb] * Avoid an endless loop in the argparser due to a conf file read error. [rE2dc93cfecc] * Interface changes relative to the 1.48 release: - gpgrt_add_post_log_func NEW. - gpgrt_logv_domain NEW. * Release-info: https://dev.gnupg.org/T7012 ==== libnvme ==== Version update (1.8+0.gbff7dda -> 1.9+0.g80c5cf2) Subpackages: libnvme-mi1 libnvme1 - Update to version 1.9+0.g80c5cf2: * types: Added Command and Feature Lockdown LID * types: add ASQ, ACQ and BPMBL controller properties definitions * types: add controller properties enum documentation * types: fix CRTO.CRIMT mask value definition * tree: use strtou32 to read lba_size * types: Fix PMRWBM register name * examples: fix mi-mctp build warning errors * test: add CSTS.ST, CAP.CPS and CAP.NSSS registers * types: add CAP.CPS and CAP.NSSS definitions * types: add enum nvme_cap documentation * types: Add enum nvme_unit/cmbebs/cmbswtp/flbas/cmic documentation * util: Add string constant for ENVME_CONNECT_IGNORED * tests: Add sample NBFT table with mpath IPv4+IPv6 discovery * types: add controller status shutdown type (CSTS.ST) definition * types: Add enum nvme_csts documentation * types: Add NVME_CMIC definitions * types: Add CMBSWTP property definitions * types: Add NVME_CMBEBS property definitions * types: Fix boot partition read offset (BPROF) mask value * tree: fix mem leak in nvme_ns_init() (bsc#1223331) * fabrics: retry discovery log page when DNR is not set * ioctl: return EPROTO when an NVMe status occurred * linux: Allocate aligned payload for nvme_get_telemetry_log * test: use diff to compare sysfs output * tree: fix lba_count size calculation * tree: Add NVM subsystem controller identifier * test: Add unit test for nvme_id_ns_flbas_to_lbaf_inuse() * types: Fix NVME_CSTS_SHST_MASK definition * util: Fixed nvme_id_ns_flbas_to_lbaf_inuse() * types: Add optional data present filed mask and shift definition * types: Fix EOM header optional data present fields definition * libnvme : record the nvme pci adapter physical slot (bsc#1223208) * sysfs: minimize heap allocations of sysfs paths * json: Fix uninitialized variables * libnvme: add missing symbol nvme_scan_tls_keys * nbft: Whitespace fixes (bsc#1222026) * tests: Add complex NBFT table from Dell R660 (bsc#1222026) * tests: Adapt to added NBFT SSNS flags (bsc#1222026) * nbft: Add SSNS 'discovered' flag (bsc#1222026) * nbft: Add SSNS 'unavailable' flag (bsc#1222026) * doc: Document the NBFT API (bsc#1222026) * ioctl: Move nvme_cmd_dword_fields definitions into header file * types: Add PEL set feature event layout definitions * types: Fix enum nvme_pel_rci documentation error * types: Add boot partition information definitions * types: Add PEL header additional information definitions * fabrics: keyring is a long (bsc#1216982) * config-schema.json.in: tls keys and keyrings are strings (bsc#1216982) * linux: Add nvme_scan_tls_keys() (bsc#1216982) * json: dump TLS key data in PSK interchange format (bsc#1216982) * json: import TLS key from PSK interchange format (bsc#1216982) * json: export TLS key in PSK interchange format (bsc#1216982) * tree: read TLS key in nvme_configure_ctrl() (bsc#1216982) * linux: rework nvme_insert_tls_key_versioned() (bsc#1216982) * linux: add nvme_import_tls_key() (bsc#1216982) * linux: add nvme_export_tls_key() (bsc#1216982) * crc32: Add CRC32 algorithm (bsc#1216982) * linux: add nvme_update_key() (bsc#1216982) * linux: add nvme_read_key() (bsc#1216982) * linux: allow for NULL argument in nvme_lookup_keyring() (bsc#1216982) * log: Respect DEFAULT_LOGLEVEL on uninitialized logging * log: Introduce nvme_get_logging_level() * ioctl: remove incomplete debug logging infrastructure * ioctl: export nvme_submit_passthru{64} as weak symbol * log: move nvme_{set|get}_debug to log.c * fabrics: check the read() return value * types: Add PEL reporting context port identifier type definitions * types: Add persistent event log reporting context definitions - Upstream changed the sysfs test setup, thus sysfs test works in OSB * remove 0001-build-disable-sysfs-test.patch ==== libqaccessibilityclient-qt6 ==== Version update (0.5.0 -> 0.6.0) - Update to 0.6.0. No changelog. ==== nvme-cli ==== Version update (2.8 -> 2.9.1) - Update to version 2.9.1: * plugins/spdk: drop the plugin - Update to version 2.9: * nvme-print: expand the maximum field length to prevent misalignment * plugins/spdk: plugin to list SPDK subsystems * nvme-print: check if controller belong to SPDK * plugins/spdk: plugin to list SPDK controllers * nvme-print-stdout: fix ASQB, ACQB and BMBBA prints * build: bump libnvme wrap * nvmf-autoconnect: fix string encoding * nvme: identify primary ctrl do not accept nsid * nvme-wrap: remove unused nvme_cli_get_log_ana_groups() * nvme-print-json: use admin queue attributes definitions * nvme-print-json: use CSTS definitions * nvme-print-stdout: use POWER_OF_TWO macro * nvme-print-json: use controller configuration definitions * nvme-print-json, nvme-print-stdout: add tertiary version number * nvme-print-json: use NVME_MAJOR and NVME_MINOR definitions * nvme-print-json: use NVME_BOOT_PARTITION_INFO field definitions * nvme-print-json: add support telemetry log create event in PEL * nvme-print-json: add support set feature event in PEL * nvme-print-json: add obj_d() function * nvme-print-json: add obj_add_uint_0nx() function * meson.build: Fix spelling of sed-opal.h filename * sed_opal: Only build when we really have sed_opal headers * nvme: fix error path if write() fails in get_telemetry_log() * plugins/solidigm: Additional LID for temperature statistics. * plugins/solidigm: Improved Solidigm UUID index detection. * nvme-print-stdout: Add CSTS.ST register stdout print * nvme-print-stdout: Use NVME_CMIC definitions * nvme-print: Use NVME_UNIT definitions * nvme-print-stdout: Use NVME_CMBMSC/STS/EBS/SWTP definitions * plugins/ssstc: add a new plugin for SSSTC driver * nvmf-connect: systemd hardening effort * plugins/ocp: Adjusted variable type size carrying UUID index to 8 bit. * nvme: fix security buffer allocation size * nvme: Change fw-download xfer initialization to set 0 * nvme: Add fw-download warning message for FWUG alignment error * plugins/ocp: Split ocp_get_uuid_index() into find and get functions. * nvme: fix mem leak in multiple key related functions (bsc#1223331) * fabrics: fix mem leak in nvmf_check_hostid_and_hostnqn() (bsc#1223331) * nvme-print-stdout: Use NVME_BPRSEL definitions * nvme-print-stdout: Use NVME_BPINFO definitions * nvme-print-stdout: Use NVME_CMBSZ definitions * nvme-print-stdout: Use NVME_CMBLOC definitions * Revert "logging: fix error handling for ioctl passthru wrappers" * fabrics: align identify command payload * ocp: Unify line start spacing as tabs * ocp: support OCP DSSD Async Event Config feature * nvme: Add support for get-reg and set-reg commands * nvme-print-json: Add register print functions * nvme-print-stdout: Add register print functions * nvme-print: Add register print functions * nvme: Refactor mmap_registers to add writable parameter * nvme-print: Change PMRSZU string function as unit string * nvme-print: Refactor CMBLOC and PMRSTS registers function * logging: fix error handling for ioctl passthru wrappers * nbft: Fix scandir() error check * nbft: Refactor connection attempt out * nvme-print: Use EOM optional data present macros changed * nvme-print: Print cntlid number for controller * nvme: check-tls-key fails despite having hostnqn file (bsc#1223331) * nvme: print retained key for gen-tls-key's -i option too (bsc#1223331) * fabrics : allow host to create duplicate connections to target * fabrics: Fix fast_io_fail_tmo option * nvme-print-stdout: use admin queue attributes definitions * nvme-print-stdout: use CSTS definitions * nvme-print-stdout: use controller configuration definitions * nvme-print-stdout: use NVME_MAJOR and NVME_MINOR definitions * nvme-print-stdout: use FDP configuration attributes definitions * nvme: add new function 'tls_key' * nvme: use library functions for importing and exporting TLS keys (bsc#1216982) * nvme: extend error message for ns scan failures * nvme-print-json: Bugfix status json key of sanitize-log * sed: update SED password when initalizing (bsc#1222168) * plugins/memblaze: add performance stats * plugins/memblaze: fix code mis-type error * plugins/memblaze: code refactor on applying __packed on more structs * plugins/memblaze: code refactor on using cleanup_nvme_dev * nvme: Fix to cleanup free raw_secret memory allocated * plugins/memblaze: code-format on leading indent and align * plugins/wdc: Fix narrow index variable type in for loop to __u32 * plugins/wdc: Whitespace changes * nvme: Delete unused nvme root scanned * ocp: support OCP 2.5 Set Telemetry Profile feature * nvme: Don't seg fault if given device is not char/block device * nbft: Include SSNS index in error messages (bsc#1222026) * nbft: Pause logging for expected connection failures (bsc#1222026) * nbft: Silence connection failures for unavailable SSNS (bsc#1222026) * nbft: Fix 'verbose' argument type (bsc#1222026) * plugins/nbft: Implement verbose logging * plugins/nbft: Print the new SSNS flags * nbft: Fix uninitialized variable * plugins/nbft: Fix uninitialized variables * plugins/sed: Fix uninitialized variable * nvme-print-stdout: Fix uninitialized variable * nvme-print-json: Fix uninitialized variable * build: Switch default meson buildtype to 'debugoptimized' * nvme: do not scan topology when mmaping registers ... changelog too long, skipping 53 lines ... * remove 0100-harden_nvmf-connect@.service.patch ==== qt6-base ==== Subpackages: libQt6Concurrent6 libQt6Core6 libQt6DBus6 libQt6Gui6 libQt6Network6 libQt6OpenGL6 libQt6OpenGLWidgets6 libQt6PrintSupport6 libQt6Sql6 libQt6Test6 libQt6Widgets6 libQt6Xml6 qt6-network-tls qt6-networkinformation-glib qt6-networkinformation-nm qt6-printsupport-cups qt6-sql-sqlite - Add upstream security fix (CVE-2024-33861): * 0001-QStringConverterICU-Pass-correct-pointer-to-callback.patch ==== rebootmgr ==== Version update (2.4 -> 2.4+git20240503.5b98913) - Remove rcrebootmgr symlink - Update to version 2.4+git20240503.5b98913: * Don't generate html documentation anymore * Fix manual page dependencies for parallel build * Update configure.ac * Fix soft-reboot detection in forced mode ==== tpm2.0-tools ==== Version update (5.6 -> 5.7) Update to version 5.7: + Security - Fixed CVE-2024-29038 - Fixed CVE-2024-29039 + Fixed - Fix eventlog test - Fix issues with reading NV indexes - Fix context save error on tpm2_create - tpm2_sessionconfig: fix handling of --disable-continue session so that the subsequent command will not fail - when attempting to context save a flushed session. - detection of functions within libcrypto when CRYPTO_LIBS is set and system has install libcrypto. - tpm2_send: fix EOF detection on input stream. - tpm2_policy.c fix compilation error caused by format directive for size_t on 32 bit systems. - tpm2_nvread: fix input handling no nv index. - Auth file: Ensure 0-termination when reading auths from a file. - configure.ac: fix bashisms. configure scripts need to be runnable with a POSIX-compliant /bin/sh. - cirrus.yml fix tss compilation with libtpms for FreeBSD. - tpm2_tool.c Fix missing include for basename to enable compilation on netbsd. - options: fix TCTI handling to avoid failures for commands that should work with no options. - tpm2_getekcertificate.c Fix leak. ek_uri was not freed if get_ek_server_address failed. + Added - Add the possibility for autoflush (environment variable "TPM2TOOLS_AUTOFLUSH", or -R option) + Removed - Testing on Ubuntu 18.04 as it's near EOL (May 2023).m2_policy.c fix compilation error caused by format directive for size_t on 32 bit systems. - tpm2_nvread: fix input handling no nv index. - tpm2-tools.keyring: added Andreas Fuchs 0x8F4F9A45D7FFEE74 key, documented in upstream repo, which was used for signing this new release tarball.

1 0

New MicroOS snapshot 20240502 released!
by Richard Brown 03 May '24

03 May '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MicroOS-release (20240430 -> 20240502) SDL2 (2.30.2 -> 2.30.3) ca-certificates (2+git20230406.2dae8b7 -> 2+git20240415.3fe9324) conmon (2.1.10 -> 2.1.11) containerd (1.7.10 -> 1.7.15) gcc14 (14.0.1+git10008 -> 14.0.1+git10154) gnome-browser-connector google-noto-fonts (20240401 -> 20240501) gpsd gstreamer hyper-v kernel-firmware (20240419 -> 20240426) krb5 libbpf (1.4.0 -> 1.4.1) ncurses (6.4.20240414 -> 6.5.20240427) polkit-default-privs (1550+20240325.eddbe04 -> 1550+20240430.5327266) python-jsonschema (4.21.1 -> 4.22.0) python-referencing (0.34.0 -> 0.35.1) python311 python311-core qemu (8.2.2 -> 8.2.3) re2 (20240401 -> 20240501) rust-keylime (0.2.4~0 -> 0.2.5~0) setools (4.5.0 -> 4.5.1) slirp4netns (1.2.3 -> 1.3.0) systemd === Details === ==== MicroOS-release ==== Version update (20240430 -> 20240502) Subpackages: MicroOS-release-appliance MicroOS-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== SDL2 ==== Version update (2.30.2 -> 2.30.3) - Update to release 2.30.3 * Fixed a pointer warping issue on XWayland * Reduced startup time when scanning for game controllers on Linux ==== ca-certificates ==== Version update (2+git20230406.2dae8b7 -> 2+git20240415.3fe9324) - Update to version 2+git20240415.3fe9324: * Add ca-certificates-setup.service * typo: differnt/different ==== conmon ==== Version update (2.1.10 -> 2.1.11) - New upstream release 2.1.11 * docs/Makefile: softcode GOMD2MAN by @rahilarious * chore(deps): update dependency containers/automation_images to v20231208 by @renovate * drop --tty on exec by @haircommander * update packit config, enable downstream tasks by @lsm5 * Remove checks for (long)deprecated libsystemd-journal for libsystemd by @rahilarious * Add support for s390x by @saschagrunert * Build s390x binaries using musl libc by @saschagrunert ==== containerd ==== Version update (1.7.10 -> 1.7.15) - Use obs_scm service instead of tar_scm - Removed patch 0002-shim-Create-pid-file-with-0644-permissions.patch (merged upstream at <https://github.com/containerd/containerd/pull/9571>) - Update to containerd v1.7.15. Upstream release notes: <https://github.com/containerd/containerd/releases/tag/v1.7.15> - Update to containerd v1.7.14. Upstream release notes: <https://github.com/containerd/containerd/releases/tag/v1.7.14> - Update to containerd v1.7.13. Upstream release notes: <https://github.com/containerd/containerd/releases/tag/v1.7.13> - Update to containerd v1.7.12. Upstream release notes: <https://github.com/containerd/containerd/releases/tag/v1.7.12> - Update to containerd v1.7.11. Upstream release notes: <https://github.com/containerd/containerd/releases/tag/v1.7.11> ==== gcc14 ==== Version update (14.0.1+git10008 -> 14.0.1+git10154) Subpackages: libatomic1 libgcc_s1 libgomp1 libstdc++6 libubsan1 - Update to gcc-14 branch head, 7a00c459cbb913ac165a39d34, git10154 * GCC 14.1 RC1 ==== gnome-browser-connector ==== - remove dependency on /usr/bin/python3 using %python3_fix_shebang macro, [bsc#1212476] ==== google-noto-fonts ==== Version update (20240401 -> 20240501) Subpackages: google-noto-sans-fonts google-noto-sans-math-fonts - Update to 20240501 * Noto Rashi Hebrew - Corrects the width and position of marks under double-yud and double-vov - Improves the anchoring of yod - Adds the U+053F yod triangle character - Improves the spacing of tsadi * Noto Egyptian Hieroglyphs - Add codepoints from Unicode 14 ==== gpsd ==== - usage of %python3_fix_shebang to cover /usr/bin is also needed [bsc#1212476] ==== gstreamer ==== Subpackages: libgstreamer-1_0-0 typelib-1_0-Gst-1_0 - remove dependency on /usr/bin/python3 using %python3_fix_shebang_path macro, [bsc#1212476] ==== hyper-v ==== - remove dependency on /usr/bin/python3 using %python3_fix_shebang macro, [bsc#1212476] ==== kernel-firmware ==== Version update (20240419 -> 20240426) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-ath12k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network ucode-amd - Update to version 20240426 (git commit 2398d264f953): * amdgpu: DMCUB updates for various AMDGPU ASICs * linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops * i915: Update Xe2LPD DMC to v2.20 * linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 * linux-firmware: Add firmware for Lenovo Thinkbook 13X * ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop * amdgpu: add DMCUB 3.5 firmware * amdgpu: add VPE 6.1.0 firmware * amdgpu: add VCN 4.0.5 firmware * amdgpu: add UMSCH 4.0.0 firmware * amdgpu: add SDMA 6.1.0 firmware * amdgpu: add PSP 14.0.0 firmware * amdgpu: add GC 11.5.0 firmware * amdgpu: update license date ==== krb5 ==== - Remove requires for not used cron - Fix memory leaks, add patch 0009-Fix-three-memory-leaks.patch * CVE-2024-26458, bsc#1220770 * CVE-2024-26461, bsc#1220771 * CVE-2024-26462, bsc#1220772 ==== libbpf ==== Version update (1.4.0 -> 1.4.1) - update to 1.4.1: * Bug fix release fixing logic around determining whether to autoload SEC("struct_ops") programs in cases when old kernel doesn't support some optional callbacks and user reset them to NULL from BPF skeleton. ==== ncurses ==== Version update (6.4.20240414 -> 6.5.20240427) Subpackages: libncurses6 ncurses-utils terminfo-base - Update to ncurses 6.5 (patch 20240427) + update announcement + fixes/corrections for manpages (patches by Branden Robinson). + fix redefinition of CASTxPTR, for legacy Unix. - Update to tack 1.9 (patch 20230201) * configure: regen * configure.in: initialize $ac_includes_default s/fgrep/$FGREP/ * aclocal.m4: resync with my-autoconf - Add ncurses patch 20240420 + improve formatting/style of manpages (patches by Branden Robinson). + compiler warning/portability fixes. ==== polkit-default-privs ==== Version update (1550+20240325.eddbe04 -> 1550+20240430.5327266) - Update to version 1550+20240430.5327266: * profiles: whitelist dnf5daemon-server (bsc#1218327) * profiles: remove pseudo auth action kcmkwallet5 (bsc#1217190) ==== python-jsonschema ==== Version update (4.21.1 -> 4.22.0) - update to 4.22.0: * Improve best_match (and thereby error messages from jsonschema.validate) in cases where there are multiple sibling errors from applying anyOf / allOf -- i.e. when multiple elements of a JSON array have errors, we now do prefer showing errors from earlier elements rather than simply showing an error for the full array (#1250). * (Micro-)optimize equality checks when comparing for JSON Schema equality by first checking for object identity, as == would. ==== python-referencing ==== Version update (0.34.0 -> 0.35.1) - Update to version 0.35.1: * Make Resource.pointer also properly handle empty pointers (which refer to the root document). This fix likely only affects you if you were using that function directly, as Resource.lookup already handles empty fragments. - Update to version 0.35.0: * Make Registry.contents raise NoSuchResource when needed. * Update pre-commit hooks. * Run coverage with 3.12 * Try convincing RTD to use uv. * uv and minor workflow tweaks * Use uv for envs, particularly the requirements env. * [pre-commit.ci] pre-commit autoupdate * Whatever pyright regression was present is still present. * [pre-commit.ci] pre-commit autoupdate * Bump suite from `71c85d0` to `87851a6` * Bump suite from `d3fdf35` to `71c85d0` * Bump suite from `e3fe0aa` to `d3fdf35` ==== python311 ==== - Update CVE-2023-52425-libexpat-2.6.0-backport.patch so that it uses features sniffing, not just comparing version number. Include also support-expat-CVE-2022-25236-patched.patch. - Add CVE-2023-52425-remove-reparse_deferral-tests.patch skipping failing tests. - Refresh patches: - CVE-2023-27043-email-parsing-errors.patch - fix_configure_rst.patch - skip_if_buildbot-extend.patch - Remove included patch: - support-expat-CVE-2022-25236-patched.patch ==== python311-core ==== Subpackages: libpython3_11-1_0 python311-base - Update CVE-2023-52425-libexpat-2.6.0-backport.patch so that it uses features sniffing, not just comparing version number. Include also support-expat-CVE-2022-25236-patched.patch. - Add CVE-2023-52425-remove-reparse_deferral-tests.patch skipping failing tests. - Refresh patches: - CVE-2023-27043-email-parsing-errors.patch - fix_configure_rst.patch - skip_if_buildbot-extend.patch - Remove included patch: - support-expat-CVE-2022-25236-patched.patch ==== qemu ==== Version update (8.2.2 -> 8.2.3) - Fix a build issue on riscv: * target/riscv/kvm: rename riscv_reg_id() to riscv_reg_id_ulong() * target/riscv/kvm: add RISCV_CONFIG_REG() * target/riscv/kvm: change timer regs size to u64 * target/riscv/kvm: change KVM_REG_RISCV_FP_D to u64 * target/riscv/kvm: change KVM_REG_RISCV_FP_F to u32 - Update to version 8.2.3. Full changelog/backports here: https://lore.kernel.org/qemu-devel/1713980341.971368.1218343.nullmailer@tls… Some of the upstream backports are: * Update version for 8.2.3 release * ppc/spapr: Initialize max_cpus limit to SPAPR_IRQ_NR_IPIS. * ppc/spapr: Introduce SPAPR_IRQ_NR_IPIS to refer IRQ range for CPU IPIs. * hw/pci-host/ppc440_pcix: Do not expose a bridge device on PCI bus * hw/isa/vt82c686: Keep track of PIRQ/PINT pins separately * virtio-pci: fix use of a released vector * linux-user/x86_64: Handle the vsyscall page in open_self_maps_{2,4} * hw/audio/virtio-snd: Remove unused assignment * hw/net/net_tx_pkt: Fix overrun in update_sctp_checksum() * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set * hw/net/lan9118: Fix overflow in MIL TX FIFO * hw/net/lan9118: Replace magic '2048' value by MIL_TXFIFO_SIZE definition * backends/cryptodev: Do not abort for invalid session ID * hw/misc/applesmc: Fix memory leak in reset() handler * hw/block/nand: Fix out-of-bound access in NAND block buffer * hw/block/nand: Have blk_load() take unsigned offset and return boolean * hw/block/nand: Factor nand_load_iolen() method out * qemu-options: Fix CXL Fixed Memory Window interleave-granularity typo * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs * ...and many more... ==== re2 ==== Version update (20240401 -> 20240501) - update to 2024-05-01: * Stop setting re2_INCLUDE_DIR * Fixes related to python bindings ==== rust-keylime ==== Version update (0.2.4~0 -> 0.2.5~0) - Update to version 0.2.5~0: * Bump version to 0.2.5 * cargo: Relax required version for pest crate * build(deps): bump log from 0.4.20 to 0.4.21 * build(deps): bump thiserror from 1.0.56 to 1.0.59 - actix-web update moves rustls as feature (bsc#1223234, CVE-2024-32650) - Update to version 0.2.4~39: * build(deps): bump openssl from 0.10.63 to 0.10.64 * build(deps): bump h2 from 0.3.24 to 0.3.26 * build(deps): bump serde_json from 1.0.107 to 1.0.116 * build(deps): bump actix-web from 4.4.1 to 4.5.1 * crypto: Enable TLS 1.3 * build(deps): bump tempfile from 3.9.0 to 3.10.1 * build(deps): bump mio from 0.8.4 to 0.8.11 * enable hex values to be used for tpm_ownerpassword * config: Support IPv6 with or without brackets * keylime: Implement a simple IP parser to remove brackets * crypto: Implement CertificateBuilder to generate certificates * tests: Fix coverage download by supporting arbitrary URL * cargo: Add testing feature to keylime library * Set X509 SAN with local DNSname/IP/IPv6 * Include newest Node20 versions for Github actions * tpm: Add unit test for uncovered public functions * crypto: Implement ECC key generation support * crypto: Add test for match_cert_to_template() * Fix minor typo, format and remove end whitespaces * crypto: Make error types less specific * tests/run.sh: Run tarpaulin with a single thread * payloads: Remove explicit drop of channel transmitter * crypto: Move to keylime library * crypto: Add specific type for every possible error * tpm: Rename origin of error as source in structures * list_parser: Add source for error for backtrace * algorithms: Make errors more specific * typo fix for default path to measured boot log file * README: remove mentions of libarchive as a dependency * Dockerfile.wolfi: Update clang to version 17 * docker: Remove libarchive as a dependency * rpm: Remove libarchive from dependencies * cargo: Replace compress-tools with zip crate * cargo: Bump ahash to version 0.8.7 * build(deps): bump serde from 1.0.195 to 1.0.196 * build(deps): bump libc from 0.2.152 to 0.2.153 * build(deps): bump reqwest from 0.11.23 to 0.11.24 * docker: Install configuration file in the correct path * config: Make IAK/IDevID disabled by default ==== setools ==== Version update (4.5.0 -> 4.5.1) - Update to version 4.5.1: - Correct annotations of NetworkX types to make it optional again. - Fix packaging issue for apol's style sheet (apol.css). - Drop 0001-Make-networkx-optional-again-Fixes-125.patch fixed upstream - Change networkx Requires to Suggests ==== slirp4netns ==== Version update (1.2.3 -> 1.3.0) - New upstream release 1.3.0 * Support new `--netns-type=tapfd` (#340, thanks to @helmutg) * Do not leak socket in case of success (#339, thanks to @jnovy) ==== systemd ==== Subpackages: libsystemd0 libudev1 systemd-boot systemd-coredump systemd-experimental udev - Update 0008-sysv-generator-translate-Required-Start-into-a-Wants.patch to adapt sysv-generator-test to the SUSE's specificity brought by this patch. - systemd-testsuite: some of the integration tests depend on the bin, daemon, games and nobody users/groups. - Drop _FORTIFY_SOURCE=2 workaround. Since commit 7929e180aa (v253) it shouldn't be needed anymore. - systemd.spec: preparation for the next version of systemd (i.e. v256), libkmod2 will be dlopened hence explicitly require it now as it doesn't hurt with the current version. However don't recommend it from systemd by assuming that when module loading from PID1 is needed, udev is installed. - Make systemd-doc subpackage noarch.

1 0