Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=3&version=Tumbleweed&build=20220317 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ImageMagick (7.1.0.26 -> 7.1.0.27) Mesa (21.3.7 -> 22.0.0) Mesa-drivers (21.3.7 -> 22.0.0) NetworkManager-openconnect (1.2.6 -> 1.2.8) NetworkManager-openvpn (1.8.16 -> 1.8.18) alpine (2.25 -> 2.25.1) apache2 (2.4.52 -> 2.4.53) apache2-manual (2.4.52 -> 2.4.53) apache2-prefork (2.4.52 -> 2.4.53) apache2-utils (2.4.52 -> 2.4.53) appstream-glib (0.7.18+30 -> 0.7.18+31) at binutils bluez (5.62 -> 5.63) boost-base boost-extra dbus-1 fdupes ffmpeg-4 glib2-branding-openSUSE grub2 guile harfbuzz (4.0.0 -> 4.0.1) iproute2 kernel-firmware (20220224 -> 20220309) kfilemetadata5 libHX (4.2 -> 4.4) libreoffice (7.3.1.3 -> 7.3.2.1) librsvg (2.52.6 -> 2.52.7) libsolv (0.7.20 -> 0.7.21) libuv (1.43.0 -> 1.44.1) libyui (4.3.2 -> 4.3.3) libyui-ncurses (4.3.2 -> 4.3.3) libyui-ncurses-pkg (4.3.2 -> 4.3.3) libyui-qt (4.3.2 -> 4.3.3) libyui-qt-graph (4.3.2 -> 4.3.3) libyui-qt-pkg (4.3.2 -> 4.3.3) libzypp (17.29.5 -> 17.29.6) ncurses (6.3.20220226 -> 6.3.20220312) nodejs17 (17.7.0 -> 17.7.1) openSUSE-xfce-icon-theme (4.16.1+git5.e82fd05 -> 4.16.1+git.5.e82fd05) openssl (1.1.1m -> 1.1.1n) openssl-1_1 (1.1.1m -> 1.1.1n) pam_mount pam_ssh perl-DBD-SQLite ppp publicsuffix (20220202 -> 20220304) python-Beaker python-more-itertools python-py qemu rpm rsyslog rubygem-bundler rubygem-formatador (0.3.0 -> 1.1.0) sqlite3 (3.37.2 -> 3.38.1) tuned (2.16.0 -> 2.18.0.8+git.6f907c9) xen xfce4-screenshooter (1.9.9 -> 1.9.10) xorg-x11-server yast2-country (4.4.11 -> 4.4.12) yast2-installation (4.4.46 -> 4.4.48) yast2-network (4.4.44 -> 4.4.45) yast2-trans (84.87.20220305.ba29422b84 -> 84.87.20220313.3dfcfc0d1f) z3 zlib-ng-compat (2.0.5 -> 2.0.6) === Details === ==== ImageMagick ==== Version update (7.1.0.26 -> 7.1.0.27) Subpackages: ImageMagick-config-7-SUSE ImageMagick-extra libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - version update to 7.1.0.27 see ChangeLog.md for details (https://github.com/ImageMagick/ImageMagick/blob/main/ChangeLog.md) ==== Mesa ==== Version update (21.3.7 -> 22.0.0) Subpackages: Mesa-dri-devel Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - U_meson-restore-private-requires-to-libdrm-in-dri.pc-f.patch * Due to a typo the private requires to libdrm were lost in dri.pc. Fixed another typo (only comment). - enabled "i915" Gallium-based Intel Gen3 driver - fixed llvm/clang buildrequires for sle15-sp4/Leap 15.4 - no longer try to build classic non-Gallium OpenGL drivers i915, i965, nouveau, r100 and r200, which have been dropped with Mesa 22.0.0; see also some documentation on Phoronix https://www.phoronix.com/scan.php?page=news_item&px=Mesa-Classic-Retired - update to 22.0.0 * lavapipe,radv,anv KHR_dynamic_rendering * radv EXT_image_view_min_lod * VK_KHR_synchronization2 on RADV. * OpenSWR has been moved to the Amber branch * radeonsi, zink ARB_sparse_texture * d3d12 GLES3.1 (shader storage buffers, images, compute, indirect draw, draw params, ARB_framebuffer_no_attachments, ARB_sample_shading, and GLSL400) * radeonsi, zink ARB_sparse_texture2 * zink EXT_memory_object, EXT_memory_object_fd, EXT_semaphore, EXT_semaphore_fd * anv VK_VALVE_mutable_descriptor_type * Vulkan 1.3 on RADV,Anv. * radeonsi, zink ARB_sparse_texture_clamp ==== Mesa-drivers ==== Version update (21.3.7 -> 22.0.0) Subpackages: Mesa-dri Mesa-gallium Mesa-libva libvdpau_r300 libvdpau_r600 libvdpau_radeonsi - U_meson-restore-private-requires-to-libdrm-in-dri.pc-f.patch * Due to a typo the private requires to libdrm were lost in dri.pc. Fixed another typo (only comment). - enabled "i915" Gallium-based Intel Gen3 driver - fixed llvm/clang buildrequires for sle15-sp4/Leap 15.4 - no longer try to build classic non-Gallium OpenGL drivers i915, i965, nouveau, r100 and r200, which have been dropped with Mesa 22.0.0; see also some documentation on Phoronix https://www.phoronix.com/scan.php?page=news_item&px=Mesa-Classic-Retired - update to 22.0.0 * lavapipe,radv,anv KHR_dynamic_rendering * radv EXT_image_view_min_lod * VK_KHR_synchronization2 on RADV. * OpenSWR has been moved to the Amber branch * radeonsi, zink ARB_sparse_texture * d3d12 GLES3.1 (shader storage buffers, images, compute, indirect draw, draw params, ARB_framebuffer_no_attachments, ARB_sample_shading, and GLSL400) * radeonsi, zink ARB_sparse_texture2 * zink EXT_memory_object, EXT_memory_object_fd, EXT_semaphore, EXT_semaphore_fd * anv VK_VALVE_mutable_descriptor_type * Vulkan 1.3 on RADV,Anv. * radeonsi, zink ARB_sparse_texture_clamp ==== NetworkManager-openconnect ==== Version update (1.2.6 -> 1.2.8) Subpackages: NetworkManager-openconnect-gnome - Update to version 1.2.8: + Gtk4 version of the editor plugin is now available (for use with Control Center of GNOME 42 or later). + Fix SNI and authgroup problems. + Handle IPv6 nameservers. + Allow IP prefixes of 0 for routing rules. + Updated translations. - Add pkgconfig(gtk4) and pkgconfig(libnma-gtk4) BuildRequires and pass --with-gtk4=yes to configure, build the gtk4 version. - Stop passing --without-libnm-glib to configure, no longer needed, nor recognized. - Add optional libxml2-tools BuildRequires, build runs xml-stripblanks preprocessing if available. ==== NetworkManager-openvpn ==== Version update (1.8.16 -> 1.8.18) Subpackages: NetworkManager-openvpn-gnome - Update to version 1.8.18: + Gtk4 version of the editor plugin is now available (for use with Control Center of GNOME 42 or later). + Updated translations. - Drop nm-openvpn-bsc#1186091.patch: Fixed upstream. - Rebase patch with quilt. - Add pkgconfig(gtk4) and pkgconfig(libnma-gtk4) BuildRequires and pass --with-gtk4=yes to configure, build the gtk4 version. - Stop passing --without-libnm-glib to configure, no longer needed, nor recognized. - Pass --enable-lto=yes to configure, build using LTO support. - Add optional libxml2-tools BuildRequires, build runs xml-stripblanks preprocessing if available. ==== alpine ==== Version update (2.25 -> 2.25.1) Subpackages: pico - Update to release 2.25.1 * In the past, Alpine did not recognize images embedded in an HTML file, so now it does and a link to open them is given. * Support for code_verifier and code_challenge when generating a refresh token and access token in Gmail and Outlook using the S256 method and plain method. * Alpine is modified to not to attempt to continue a draft message if the draft folder is empty. (Some servers do not allow the Drafts folder to be removed, even when it is empty.) * Improvements to the screen that allows a user to select the client-id when a user attempts to login to a server and more than one client-id is available for that server. - Delete chappa-WrtAcc.patch. Under Linux, one can use the Compose key feature. (And for Windows, the putty client can provide an equivalent Compose key feature.) ==== apache2 ==== Version update (2.4.52 -> 2.4.53) - httpd-framework updated to svn1898917 - deleted patches - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed) - apache2-perl-io-socket.patch (upstreamed) - version update to 2.4.53 * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds (cve.mitre.org) Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data. This issue affects Apache HTTP Server 2.4 version 2.4.52 and prior versions. Credits: Ronald Crane (Zippenhop LLC) * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with very large or unlimited LimitXMLRequestBody (cve.mitre.org) If LimitXMLRequestBody is set to allow request bodies larger than 350MB (defaults to 1M) on 32 bit systems an integer overflow happens which later causes out of bounds writes. This issue affects Apache HTTP Server 2.4.52 and earlier. Credits: Anonymous working with Trend Micro Zero Day Initiative * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org) Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling Credits: James Kettle <james.kettle portswigger.net> * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of in r:parsebody (cve.mitre.org) A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This issue affects Apache HTTP Server 2.4.52 and earlier. Credits: Chamal De Silva * ) core: Make sure and check that LimitXMLRequestBody fits in system memory. [Ruediger Pluem, Yann Ylavic] * ) core: Simpler connection close logic if discarding the request body fails. [Yann Ylavic, Ruediger Pluem] * ) mod_http2: preserve the port number given in a HTTP/1.1 request that was Upgraded to HTTP/2. Fixes PR65881. [Stefan Eissing] * ) mod_proxy: Allow for larger worker name. PR 53218. [Yann Ylavic] * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When an attempt to load a dbm driver fails, log clearly which driver triggered the error (not "default"), and what the error was. [Graham Leggett] * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the minimum when tunneling requests (websockets, CONNECT requests). Backend timeouts can be configured more selectively (per worker if needed) as front end timeouts and typically the backend timeouts reflect the application requirements better. PR 65886 [Ruediger Pluem] * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers when an efficient TLS implementation is available. [Yann Ylavic] * ) core, mod_info: Add compiled and loaded PCRE versions to version number display. [Rainer Jung] * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/ resources if challenge type 'http-01' is not configured for a domain. Fixes <https://github.com/icing/mod_md/issues/279>. [Stefan Eissing] * ) mod_dav: Fix regression when gathering properties which could lead to huge memory consumption proportional to the number of resources. [Evgeny Kotkov, Ruediger Pluem] * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x) for regular expression evaluation. This depends on locating pcre2-config. [William Rowe, Petr Pisar <ppisar redhat.com>, Rainer Jung] * ) Add the ldap function to the expression API, allowing LDAP filters and distinguished names based on expressions to be escaped correctly to guard against LDAP injection. [Graham Leggett] * ) mod_md: the status description in MDomain's JSON, exposed in the md-status handler (if configured) did sometimes not carry the correct message when certificates needed renew. [Stefan Eissing] * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting and/or reaching MaxConnectionsPerChild. PR 65769. [Yann Ylavic] ==== apache2-manual ==== Version update (2.4.52 -> 2.4.53) - httpd-framework updated to svn1898917 - deleted patches - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed) - apache2-perl-io-socket.patch (upstreamed) - version update to 2.4.53 * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds (cve.mitre.org) Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data. This issue affects Apache HTTP Server 2.4 version 2.4.52 and prior versions. Credits: Ronald Crane (Zippenhop LLC) * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with very large or unlimited LimitXMLRequestBody (cve.mitre.org) If LimitXMLRequestBody is set to allow request bodies larger than 350MB (defaults to 1M) on 32 bit systems an integer overflow happens which later causes out of bounds writes. This issue affects Apache HTTP Server 2.4.52 and earlier. Credits: Anonymous working with Trend Micro Zero Day Initiative * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org) Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling Credits: James Kettle <james.kettle portswigger.net> * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of in r:parsebody (cve.mitre.org) A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This issue affects Apache HTTP Server 2.4.52 and earlier. Credits: Chamal De Silva * ) core: Make sure and check that LimitXMLRequestBody fits in system memory. [Ruediger Pluem, Yann Ylavic] * ) core: Simpler connection close logic if discarding the request body fails. [Yann Ylavic, Ruediger Pluem] * ) mod_http2: preserve the port number given in a HTTP/1.1 request that was Upgraded to HTTP/2. Fixes PR65881. [Stefan Eissing] * ) mod_proxy: Allow for larger worker name. PR 53218. [Yann Ylavic] * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When an attempt to load a dbm driver fails, log clearly which driver triggered the error (not "default"), and what the error was. [Graham Leggett] * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the minimum when tunneling requests (websockets, CONNECT requests). Backend timeouts can be configured more selectively (per worker if needed) as front end timeouts and typically the backend timeouts reflect the application requirements better. PR 65886 [Ruediger Pluem] * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers when an efficient TLS implementation is available. [Yann Ylavic] * ) core, mod_info: Add compiled and loaded PCRE versions to version number display. [Rainer Jung] * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/ resources if challenge type 'http-01' is not configured for a domain. Fixes <https://github.com/icing/mod_md/issues/279>. [Stefan Eissing] * ) mod_dav: Fix regression when gathering properties which could lead to huge memory consumption proportional to the number of resources. [Evgeny Kotkov, Ruediger Pluem] * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x) for regular expression evaluation. This depends on locating pcre2-config. [William Rowe, Petr Pisar <ppisar redhat.com>, Rainer Jung] * ) Add the ldap function to the expression API, allowing LDAP filters and distinguished names based on expressions to be escaped correctly to guard against LDAP injection. [Graham Leggett] * ) mod_md: the status description in MDomain's JSON, exposed in the md-status handler (if configured) did sometimes not carry the correct message when certificates needed renew. [Stefan Eissing] * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting and/or reaching MaxConnectionsPerChild. PR 65769. [Yann Ylavic] ==== apache2-prefork ==== Version update (2.4.52 -> 2.4.53) - httpd-framework updated to svn1898917 - deleted patches - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed) - apache2-perl-io-socket.patch (upstreamed) - version update to 2.4.53 * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds (cve.mitre.org) Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data. This issue affects Apache HTTP Server 2.4 version 2.4.52 and prior versions. Credits: Ronald Crane (Zippenhop LLC) * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with very large or unlimited LimitXMLRequestBody (cve.mitre.org) If LimitXMLRequestBody is set to allow request bodies larger than 350MB (defaults to 1M) on 32 bit systems an integer overflow happens which later causes out of bounds writes. This issue affects Apache HTTP Server 2.4.52 and earlier. Credits: Anonymous working with Trend Micro Zero Day Initiative * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org) Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling Credits: James Kettle <james.kettle portswigger.net> * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of in r:parsebody (cve.mitre.org) A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This issue affects Apache HTTP Server 2.4.52 and earlier. Credits: Chamal De Silva * ) core: Make sure and check that LimitXMLRequestBody fits in system memory. [Ruediger Pluem, Yann Ylavic] * ) core: Simpler connection close logic if discarding the request body fails. [Yann Ylavic, Ruediger Pluem] * ) mod_http2: preserve the port number given in a HTTP/1.1 request that was Upgraded to HTTP/2. Fixes PR65881. [Stefan Eissing] * ) mod_proxy: Allow for larger worker name. PR 53218. [Yann Ylavic] * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When an attempt to load a dbm driver fails, log clearly which driver triggered the error (not "default"), and what the error was. [Graham Leggett] * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the minimum when tunneling requests (websockets, CONNECT requests). Backend timeouts can be configured more selectively (per worker if needed) as front end timeouts and typically the backend timeouts reflect the application requirements better. PR 65886 [Ruediger Pluem] * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers when an efficient TLS implementation is available. [Yann Ylavic] * ) core, mod_info: Add compiled and loaded PCRE versions to version number display. [Rainer Jung] * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/ resources if challenge type 'http-01' is not configured for a domain. Fixes <https://github.com/icing/mod_md/issues/279>. [Stefan Eissing] * ) mod_dav: Fix regression when gathering properties which could lead to huge memory consumption proportional to the number of resources. [Evgeny Kotkov, Ruediger Pluem] * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x) for regular expression evaluation. This depends on locating pcre2-config. [William Rowe, Petr Pisar <ppisar redhat.com>, Rainer Jung] * ) Add the ldap function to the expression API, allowing LDAP filters and distinguished names based on expressions to be escaped correctly to guard against LDAP injection. [Graham Leggett] * ) mod_md: the status description in MDomain's JSON, exposed in the md-status handler (if configured) did sometimes not carry the correct message when certificates needed renew. [Stefan Eissing] * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting and/or reaching MaxConnectionsPerChild. PR 65769. [Yann Ylavic] ==== apache2-utils ==== Version update (2.4.52 -> 2.4.53) - httpd-framework updated to svn1898917 - deleted patches - apache-test-DirectorySlash-NotFound-logic.patch (upstreamed) - apache2-perl-io-socket.patch (upstreamed) - version update to 2.4.53 * ) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds (cve.mitre.org) Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data. This issue affects Apache HTTP Server 2.4 version 2.4.52 and prior versions. Credits: Ronald Crane (Zippenhop LLC) * ) SECURITY: CVE-2022-22721: core: Possible buffer overflow with very large or unlimited LimitXMLRequestBody (cve.mitre.org) If LimitXMLRequestBody is set to allow request bodies larger than 350MB (defaults to 1M) on 32 bit systems an integer overflow happens which later causes out of bounds writes. This issue affects Apache HTTP Server 2.4.52 and earlier. Credits: Anonymous working with Trend Micro Zero Day Initiative * ) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org) Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling Credits: James Kettle <james.kettle portswigger.net> * ) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of in r:parsebody (cve.mitre.org) A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This issue affects Apache HTTP Server 2.4.52 and earlier. Credits: Chamal De Silva * ) core: Make sure and check that LimitXMLRequestBody fits in system memory. [Ruediger Pluem, Yann Ylavic] * ) core: Simpler connection close logic if discarding the request body fails. [Yann Ylavic, Ruediger Pluem] * ) mod_http2: preserve the port number given in a HTTP/1.1 request that was Upgraded to HTTP/2. Fixes PR65881. [Stefan Eissing] * ) mod_proxy: Allow for larger worker name. PR 53218. [Yann Ylavic] * ) dbm: Split the loading of a dbm driver from the opening of a dbm file. When an attempt to load a dbm driver fails, log clearly which driver triggered the error (not "default"), and what the error was. [Graham Leggett] * ) mod_proxy: Use the maxium of front end and backend timeouts instead of the minimum when tunneling requests (websockets, CONNECT requests). Backend timeouts can be configured more selectively (per worker if needed) as front end timeouts and typically the backend timeouts reflect the application requirements better. PR 65886 [Ruediger Pluem] * ) ap_regex: Use Thread Local Storage (TLS) to recycle ap_regexec() buffers when an efficient TLS implementation is available. [Yann Ylavic] * ) core, mod_info: Add compiled and loaded PCRE versions to version number display. [Rainer Jung] * ) mod_md: do not interfere with requests to /.well-known/acme-challenge/ resources if challenge type 'http-01' is not configured for a domain. Fixes <https://github.com/icing/mod_md/issues/279>. [Stefan Eissing] * ) mod_dav: Fix regression when gathering properties which could lead to huge memory consumption proportional to the number of resources. [Evgeny Kotkov, Ruediger Pluem] * ) Support pcre2 (10.x) library in place of the now end-of-life pcre (8.x) for regular expression evaluation. This depends on locating pcre2-config. [William Rowe, Petr Pisar <ppisar redhat.com>, Rainer Jung] * ) Add the ldap function to the expression API, allowing LDAP filters and distinguished names based on expressions to be escaped correctly to guard against LDAP injection. [Graham Leggett] * ) mod_md: the status description in MDomain's JSON, exposed in the md-status handler (if configured) did sometimes not carry the correct message when certificates needed renew. [Stefan Eissing] * ) mpm_event: Fix a possible listener deadlock on heavy load when restarting and/or reaching MaxConnectionsPerChild. PR 65769. [Yann Ylavic] ==== appstream-glib ==== Version update (0.7.18+30 -> 0.7.18+31) Subpackages: libappstream-glib8 - Update to version 0.7.18+31: * Fix extracting relative symlinks (boo#1196459) ==== at ==== - Drop systemd hardening as it breaks some jobs, fixes bsc#1196219 * Remove harden_atd.service.patch ==== binutils ==== Subpackages: libctf-nobfd0 libctf0 - Update binutils-skip-rpaths.patch: add back fix for boo#1191473, which got lost in the update to 2.38. ==== bluez ==== Version update (5.62 -> 5.63) Subpackages: libbluetooth3 - Add code to restore user modifications for modprobe.d %config files after moving the files to %_modprobedir - Use %_modprobedir (jsc#SLE-20639) - update to version 5.63: * Fix issue with storing IRK causing invalid read access. * Fix issue with disconnecting due to GattCharacteristic1.MTU. * Add support for Device{Found,Lost} of advertising monitoring. ==== boost-base ==== Subpackages: boost-license1_78_0 libboost_date_time1_78_0 libboost_filesystem1_78_0 libboost_iostreams1_78_0 libboost_locale1_78_0 libboost_program_options1_78_0 libboost_thread1_78_0 - add dependency on libzstd and libzstd-devel to get on-the-fly zstd compression in boost-iostreams ==== boost-extra ==== - add dependency on libzstd and libzstd-devel to get on-the-fly zstd compression in boost-iostreams ==== dbus-1 ==== Subpackages: libdbus-1-3 - set runstatedir correctly ==== fdupes ==== - A more correct approach to creating symlinks (old bug actually): Do not link the files as given by fdupes, but turn them into relative links (it works by chance if given a buildroot, but fails if running on a subdirectory) - Support multiple directories given (as glob to the macro) - Handle symlinks (-s argument) correctly - Simplify macros.fdupes with a call to a C++ program that does the same within a fraction of a second what the shell loop did in many seconds (bsc#1195709) ==== ffmpeg-4 ==== Subpackages: libavcodec58_134 libavdevice58_13 libavfilter7_110 libavformat58_76 libavresample4_0 libavutil56_70 libpostproc55_9 libswresample3_9 libswscale5_9 - Fix OS version check, so nvcodec is enabled for Leap too. ==== glib2-branding-openSUSE ==== - Update .gschema.override.in: Change default libreoffice startup entry to libreoffice-startcenter.desktop according to the libreoffice update (bsc#1195836, bsc#1196951). ==== grub2 ==== Subpackages: grub2-arm64-efi grub2-snapper-plugin grub2-systemd-sleep-plugin - Fix grub-install error when efi system partition is created as mdadm software raid1 device (bsc#1179981) (bsc#1195204) * 0001-install-fix-software-raid1-on-esp.patch - Fix riscv64 build error * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch - Fix error in grub-install when linux root device is on lvm thin volume (bsc#1192622) (bsc#1191974) * 0001-grub-install-bailout-root-device-probing.patch ==== guile ==== Subpackages: guile-modules-3_0 libguile-3_0-1 - Add patch to fix build on 32-bit big-endian targets * adjust-32bit-big-endian-build-flags.patch - Run aclocal before %configure to regenerate aclocal.m4 ==== harfbuzz ==== Version update (4.0.0 -> 4.0.1) Subpackages: libharfbuzz-gobject0 libharfbuzz-icu0 libharfbuzz-subset0 libharfbuzz0 typelib-1_0-HarfBuzz-0_0 - Update to version 4.0.1: + Update OpenType to AAT mappings for ?hist? and ?vrtr? features + Update IANA Language Subtag Registry to 2022-03-02 + Update USE shaper to allow any non-numeric tail in a symbol cluster, and remove obsolete data overrides + Fix handling of baseline variations to return correctly scaled values ==== iproute2 ==== - Add eBPF(libbpf) support - Adjust NETNS_RUN_DIR from /var/run to /run ==== kernel-firmware ==== Version update (20220224 -> 20220309) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update to version 20220309 (git commit cd01f857da28): * iwlwifi: add new FWs from core68-60 release * ath11k: add links for WCN6855 hw2.1 * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3 * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin * ath10k/ath11k: mark notice.txt as "File:" * linux-firmware: add firmware for MT7986 * amdgpu: add firmware for SDMA 5.2.7 IP block * amdgpu: add firmware for PSP 13.0.8 IP block * amdgpu: add firmware for DCN 3.1.6 IP block * amdgpu: add firmware for GC 10.3.7 IP block * rtw89: 8852a: update fw to v0.13.36.0 * iwlwifi: update 9000-family firmwares to core68-60 * amdgpu: update raven2 VCN firmware * amdgpu: update raven VCN firmware * amdgpu: update picasso VCN firmware * linux-firmware: Update firmware file for Intel Bluetooth 9462 * linux-firmware: Update firmware file for Intel Bluetooth 9462 * linux-firmware: Update firmware file for Intel Bluetooth 9560 * linux-firmware: Update firmware file for Intel Bluetooth 9560 * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth AX211 * linux-firmware: Update firmware file for Intel Bluetooth AX211 * linux-firmware: Update firmware file for Intel Bluetooth AX210 * linux-firmware: Update firmware file for Intel Bluetooth AX200 * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth 9560 * linux-firmware: Update firmware file for Intel Bluetooth 9260 * linux-firmware: Update AMD SEV firmware * rtw89: 8852a: update fw to v0.13.35.0 ==== kfilemetadata5 ==== - Build the optional mobipocket extractor. QMobipocket only depends on Qt and shouldn't cause any issue. ==== libHX ==== Version update (4.2 -> 4.4) - Update to release 4.4 * Build fixes for mingw environments. - Update to release 4.3 * string: New functions ``HX_strtoull_sec``, ``HX_unit_seconds`` for converting between second-based time durations and human-readable durations like 129600 <-> 1d12h. * io: New function ``HX_sendfile``. ==== libreoffice ==== Version update (7.3.1.3 -> 7.3.2.1) Subpackages: libreoffice-base libreoffice-calc libreoffice-draw libreoffice-filters-optional libreoffice-gnome libreoffice-gtk3 libreoffice-icon-themes libreoffice-impress libreoffice-l10n-en libreoffice-mailmerge libreoffice-math libreoffice-pyuno libreoffice-qt5 libreoffice-writer libreofficekit - Update to 7.3.2.1 - Refresh patches: * 0001-Revert-java-9-changes.patch * fix_gtk_popover_on_3.20.patch ==== librsvg ==== Version update (2.52.6 -> 2.52.7) Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2 rsvg-thumbnailer typelib-1_0-Rsvg-2_0 - Update to version 2.52.7: + Backport a fix for the regression that was introduced in the last release: Output filled text as text for PDF; fixes regression due to outputting all text as paths. ==== libsolv ==== Version update (0.7.20 -> 0.7.21) Subpackages: libsolv-tools python3-solv ruby-solv - fix segfault on conflict resolution when using bindings - fix split provides not working if the update includes a forbidden vendor change - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY - support zstd compressed control files in debian packages - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20) - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck - support solv files with an idarray block - allow accessing the toolversion at runtime - bump version to 0.7.21 ==== libuv ==== Version update (1.43.0 -> 1.44.1) - update to 1.44.1: * fix a hang after NOTE_EXIT - inclues changes from 1.44.0: * Support for poxix_spawn API * updates to documentation, tests, benchmarks and build scripts ==== libyui ==== Version update (4.3.2 -> 4.3.3) - Fixed release notes dialog in YQWizard clearing content on click (bsc#1195158) - Documented the different ways of displaying release notes in the UI - 4.3.3 ==== libyui-ncurses ==== Version update (4.3.2 -> 4.3.3) - Fixed release notes dialog in YQWizard clearing content on click (bsc#1195158) - Documented the different ways of displaying release notes in the UI - 4.3.3 ==== libyui-ncurses-pkg ==== Version update (4.3.2 -> 4.3.3) - Fixed release notes dialog in YQWizard clearing content on click (bsc#1195158) - Documented the different ways of displaying release notes in the UI - 4.3.3 ==== libyui-qt ==== Version update (4.3.2 -> 4.3.3) - Fixed release notes dialog in YQWizard clearing content on click (bsc#1195158) - Documented the different ways of displaying release notes in the UI - 4.3.3 ==== libyui-qt-graph ==== Version update (4.3.2 -> 4.3.3) - Fixed release notes dialog in YQWizard clearing content on click (bsc#1195158) - Documented the different ways of displaying release notes in the UI - 4.3.3 ==== libyui-qt-pkg ==== Version update (4.3.2 -> 4.3.3) - Fixed release notes dialog in YQWizard clearing content on click (bsc#1195158) - Documented the different ways of displaying release notes in the UI - 4.3.3 ==== libzypp ==== Version update (17.29.5 -> 17.29.6) - Fix package signature check (bsc#184501) Pay attention that header and payload are secured by a valid signature and report more detailed which signature is missing. - Retry umount if device is busy (bsc#1196061, closes #381) A previously released ISO image may need a bit more time to release it's loop device. So we wait a bit and retry. - Fix serializing/deserializing type mismatch in zypp-rpm protocol (bsc#1196925) - Fix handling of ISO media in releaseAll (bsc#1196061) - Hint on common ptf resolver conflicts (bsc#1194848) - version 17.29.6 (22) ==== ncurses ==== Version update (6.3.20220226 -> 6.3.20220312) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch 20220312 + add xterm+acs building-block -TD + add xterm-p370, for use in older terminals -TD + add dec+sl to xterm-new, per patch #371 -TD + add mosh and mosh-256color -TD - Correct offsets of patches * ncurses-5.9-ibm327x.dif * ncurses-6.3.dif - Add ncurses patch 20220305 + replace obsolescent "-gnatg" option with "-gnatwa" and "-gnatyg", to work around build problems with gnat 12. + update external links in Ada95.html + trim unused return-value from canonical_name(). ==== nodejs17 ==== Version update (17.7.0 -> 17.7.1) Subpackages: npm17 - update to 17.7.1: * url: revert fix url.parse() for @hostname - 42342.patch: fix expired certificates in unit tests ==== openSUSE-xfce-icon-theme ==== Version update (4.16.1+git5.e82fd05 -> 4.16.1+git.5.e82fd05) - Remove deprecated macros from spec - Update Upstream URL ==== openssl ==== Version update (1.1.1m -> 1.1.1n) - Update to 1.1.1n release ==== openssl-1_1 ==== Version update (1.1.1m -> 1.1.1n) Subpackages: libopenssl1_1 libopenssl1_1-hmac - Update to 1.1.1n: [bsc#1196877, CVE-2022-0778] * Security fix [CVE-2022-0778]: Infinite loop for non-prime moduli in BN_mod_sqrt() reachable when parsing certificates. * Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489) to the list of ciphersuites providing Perfect Forward Secrecy as required by SECLEVEL >= 3. * Rebase openssl-1.1.1-fips.patch openssl-1.1.1-evp-kdf.patch ==== pam_mount ==== Subpackages: libcryptmount0 - Add tmpfiles.d conf for /run/pam_mount ==== pam_ssh ==== - Update source packages from upstream - Add tmpfiles.d conf for /run/pam_ssh ==== perl-DBD-SQLite ==== - link embedded sqlite devel files to system files - build with internal sqlite on Leap systems ==== ppp ==== - Removed Wants=network.target from modem@.service (bsc#1196359). ==== publicsuffix ==== Version update (20220202 -> 20220304) - Update to version 20220304: * Add deta.app and deta.dev (#1511) * Add typedream.app (#1509) * Add `musician.io` - updates Staclar entry from #1331 (#1532) * Remove couk.me and ukco.me from private section (#1519) * add `*.build.run`, `*.database.run` and `*.migration.run` to PSL (#1498) * Add ktistory.com (#1493) * Remove WapBlog Suffix (#1510) * Add `aivencloud.com` (#1508) * Add site.transip.me (#1524) * Add 105 `lolipop` and `heteml` domains to private section for GMO (#1522) * Add `tech.orange` (#1526) * Add rocky.page (#1491) * Add messwithdns.com (#1490) * Revise policy links for `.ac` `.io` `.sh` (#1528) * Add kapsi.fi to PSL (#1476) * Add translated.page (#1478) * Add discordsays.com and discordsez.com (#1474) * Add `onporter.run` (#1483) * util: gTLD data autopull updates for 2022-02-18T15:13:38 UTC (#1525) * Update `.cy` per request from nic.cy in Issue 1516 (#1517) * add `*.beget.app` (#1470) * Add `vultrobjects.com` and future regional subdomains (#1472) ==== python-Beaker ==== - python-mock is actually not required for build ==== python-more-itertools ==== - use python_expand for fdupes ==== python-py ==== - use %python_expand for %fdupes ==== qemu ==== Subpackages: qemu-arm qemu-audio-spice qemu-block-curl qemu-block-rbd qemu-chardev-spice qemu-guest-agent qemu-hw-display-qxl qemu-hw-display-virtio-gpu qemu-hw-display-virtio-gpu-pci qemu-hw-display-virtio-vga qemu-hw-usb-host qemu-hw-usb-redirect qemu-hw-usb-smartcard qemu-ipxe qemu-ksm qemu-tools qemu-ui-curses qemu-ui-gtk qemu-ui-opengl qemu-ui-spice-app qemu-ui-spice-core qemu-vgabios Fix bsc#1189702 CVE-2021-3713 * Patches added: hw-nvram-at24-return-0xff-if-1-byte-addr.patch ==== rpm ==== Subpackages: librpmbuild9 - drop rpm-deptracking.patch, this is already upstream and we were just adding it twice - use fileprovide /usr/bin/gzip for "rpm-build" to make alternative providers possible - add leave-malloc-check-set.diff to actually use MALLOC_CHECK_ during build ==== rsyslog ==== - remove invalid dependencies from systemd service unit (bsc#1196795, bsc#1196359) ==== rubygem-bundler ==== - only limit to ruby 2.7 on sle 12 ==== rubygem-formatador ==== Version update (0.3.0 -> 1.1.0) updated to version 1.1.0 see installed changelog.txt v1.0.0 01/20/21 =============== release v1, it's been stable for ages ==== sqlite3 ==== Version update (3.37.2 -> 3.38.1) - update to 3.38.1: * Fix problems with the new Bloom filter optimization that might cause some obscure queries to get an incorrect answer. * Fix the localtime modifier of the date and time functions so that it preserves fractional seconds. * Fix the sqlite_offset SQL function so that it works correctly even in corner cases such as when the argument is a virtual column or the column of a view. * Fix row value IN operator constraints on virtual tables so that they work correctly even if the virtual table implementation relies on bytecode to filter rows that do not satisfy the constraint. * Other minor fixes to assert() statements, test cases, and documentation. See the source code timeline for details. - add upstream patch to run atof1 tests only on x86_64 sqlite-src-3380100-atof1.patch - update to 3.38.0 * Add the -> and ->> operators for easier processing of JSON * The JSON functions are now built-ins * Enhancements to date and time functions * Rename the printf() SQL function to format() for better compatibility, with alias for backwards compatibility. * Add the sqlite3_error_offset() interface for helping localize an SQL error to a specific character in the input SQL text * Enhance the interface to virtual tables * CLI columnar output modes are enhanced to correctly handle tabs and newlines embedded in text, and add options like "--wrap N", "--wordwrap on", and "--quote" to the columnar output modes. * Query planner enhancements using a Bloom filter to speed up large analytic queries, and a balanced merge tree to evaluate UNION or UNION ALL compound SELECT statements that have an ORDER BY clause. * The ALTER TABLE statement is changed to silently ignores entries in the sqlite_schema table that do not parse when PRAGMA writable_schema=ON ==== tuned ==== Version update (2.16.0 -> 2.18.0.8+git.6f907c9) - Add new openshift platform profiles - Instead of adding all profiles to main package and exclude subpackage profiles, explicitly mention all added profiles in %files section - Sort (alphabetically) profiles and packages - Update to version 2.18.0.8+git.6f907c9: * beakerlib: fix systemd rate limiting for variables-support-in-profiles * scheduler: fix construction of the process name regex * Added more conflicting implementations to the systemd unit file. * raise the netfilter hash table size in openshift/atomic-{host,guest} to match the max netfilter conntrack entries, reducing such hash table load. * Fixing save call and comments in tuned gui * Adding option "txqueuelen" to net_plugin * bootloader: on s390(x) remove TuneD variables from the BLS * daemon: don't do full rollback on systemd failure * profiles: use cstate.id_no_zero instead of the cstate.id * Expanding cpu plugin force_latency option syntax * Adding support for nvme subsystem block devices and adding tests so it won't throw errors on hdparms commands. * Fix improper parsing of include directive * application: log TuneD and kernel version * readme: mention conflicting cpupower and power-profiles-daemon * dbus: fix traceback on python-2.7 * cpu_partitioning: fixed no_balance_cores on newer kernels * spec: do not require subscription-manager on CentOS * Add conditional profile loading * openshift profile: workaround high CPU utilization of [scheduler] plug-in. * scheduler: new option cgroup_ps_blacklist * breaking up various modules and implementing neccessary new syntax used downstream to keep docs repos synced ==== xen ==== Subpackages: xen-libs xen-tools-domU - bsc#1196915 - VUL-0: CVE-2022-0001, CVE-2022-0002,CVE-2021-26401: xen: BHB speculation issues (XSA-398) 62278667-Arm-introduce-new-processors.patch 62278668-Arm-move-errata-CSV2-check-earlier.patch 62278669-Arm-add-ECBHB-and-CLEARBHB-ID-fields.patch 6227866a-Arm-Spectre-BHB-handling.patch 6227866b-Arm-allow-SMCCC_ARCH_WORKAROUND_3-use.patch 6227866c-x86-AMD-cease-using-thunk-lfence.patch ==== xfce4-screenshooter ==== Version update (1.9.9 -> 1.9.10) Subpackages: xfce4-screenshooter-lang xfce4-screenshooter-plugin - Update to version 1.9.10 * Use symbolic icons * Bump Xfce dependencies to 4.14 * _NET_FRAME_EXTENTS support * Add back button to take new screenshot (gxo#apps/xfce4-screenshooter!29) * Fix Imgur upload via CLI (gxo#apps/xfce4-screenshooter!26) * Set up ScreenshotData after commandline parsing * Fix compile warning (#62) * Update to description and addition of donate and translate links * Replace link to bugzilla with gitlab (gxo#apps/xfce4-screenshooter!25) * Translation Updates ==== xorg-x11-server ==== Subpackages: xorg-x11-server-Xvfb xorg-x11-server-extra xorg-x11-server-sdk - u_sync-pci-ids-with-Mesa-22.0.0.patch * sync pci ids with Mesa 22.0.0 ==== yast2-country ==== Version update (4.4.11 -> 4.4.12) Subpackages: yast2-country-data - Fixed French (Canada) keyboard layout (bsc#1196891): Use "ca", not "ca-fr-legacy" - 4.4.12 ==== yast2-installation ==== Version update (4.4.46 -> 4.4.48) - Prevent getty auto-generation because it makes xvnc to fail when it is started in YaST second stage (bsc#1196614). - 4.4.48 - Avoid terminal login prompt when running Second Stage service (bsc#1196594 and related to bsc#1195059). - 4.4.47 ==== yast2-network ==== Version update (4.4.44 -> 4.4.45) - Display the network configuration in the AutoYaST user interface (see bsc#1197019). - 4.4.45 ==== yast2-trans ==== Version update (84.87.20220305.ba29422b84 -> 84.87.20220313.3dfcfc0d1f) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20220313.3dfcfc0d1f: * Translated using Weblate (Hindi) * Translated using Weblate (Polish) * New POT for text domain 'base'. * Translated using Weblate (Hindi) * Translated using Weblate (Hindi) * Translated using Weblate (Hindi) * Translated using Weblate (Hindi) * Translated using Weblate (Hindi) * Translated using Weblate (Hindi) * Translated using Weblate (Indonesian) * Translated using Weblate (Indonesian) * Translated using Weblate (Indonesian) * Translated using Weblate (Indonesian) * New POT for text domain 'packager'. * New POT for text domain 'autoinst'. * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Chinese (Taiwan) (zh_TW)) * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Indonesian) ==== z3 ==== - fix python3-z3 requirement ==== zlib-ng-compat ==== Version update (2.0.5 -> 2.0.6) - Update to 2.0.6: * Fix hangs on macOS #1031 * Fix minideflate write buffers being overwritten #1060 * Fix deflateBound and compressBound returning too small size estimates #1049 #1071 * Fix incorrect function declaration warning #1080 * Fix build problems when building outside of source dir #1049 * Fix build problems on arm2-7 #1030 * Fixed some compile warnings #1020 #1036 #1037 #1048 * Improved posix memalign support #888 * Improvements to testing #637 #1026 #1032 #1035 #1049 #1051 #1056 #1063 #1067 * Improvements for integration into other projects #1022 #1042 * Code style fixes #637 #1040 #1050 #1075