Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=3&version=Tumbleweed&build=20200905 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: Mesa (20.1.6 -> 20.1.7) Mesa-drivers (20.1.6 -> 20.1.7) audacity brotli (1.0.7 -> 1.0.9) gpg2 (2.2.21 -> 2.2.23) orca (3.36.5 -> 3.36.6) patterns-gnome perl-DBD-SQLite (1.64 -> 1.66) phodav (2.4 -> 2.5) pipewire (0.3.9 -> 0.3.10) read-only-root-fs rubygem-parser (2.7.1.2 -> 2.7.1.4) vulkan-loader (1.2.148 -> 1.2.151) xen (4.13.0_12 -> 4.14.0_02) yast2-installation (4.3.15 -> 4.3.16) === Details === ==== Mesa ==== Version update (20.1.6 -> 20.1.7) Subpackages: Mesa-dri-devel Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - update to 20.1.7 * seventh bugfix release for the 20.1 branch - switched to llvm9 usage for Leap/SLE15 since llvm10 is not (yet) in Leap/SLE15 - version 20.1.6 needed for jira#SLE/SLE-12880, jira#SLE/SLE-12882 - use again /etc/OpenCL/vendors for openSUSE Leap, i.e. use /usr/etc/OpenCL/vendors only for Tumbleweed ==== Mesa-drivers ==== Version update (20.1.6 -> 20.1.7) Subpackages: Mesa-dri Mesa-dri-nouveau Mesa-gallium Mesa-libva libvdpau_nouveau libvdpau_r300 libvdpau_r600 - update to 20.1.7 * seventh bugfix release for the 20.1 branch - switched to llvm9 usage for Leap/SLE15 since llvm10 is not (yet) in Leap/SLE15 - version 20.1.6 needed for jira#SLE/SLE-12880, jira#SLE/SLE-12882 - use again /etc/OpenCL/vendors for openSUSE Leap, i.e. use /usr/etc/OpenCL/vendors only for Tumbleweed ==== audacity ==== Subpackages: audacity-lang - Remove libavformat symlink and remove the plugins sub package. The symlink is obsoleted by linking to ffmpeg rather than dlopening it. The plugins were caused by the wrong suil version. - Add _constraints for min 6GB physicalymemory for ppc64/ppc64le - Link to ffmpeg rather than dlopening it. - Create symlink for libavformat, audacity looks for the major version only and this no longer exists in openSUSE after ffmpeg-4.3.1. See boo#1175205 ==== brotli ==== Version update (1.0.7 -> 1.0.9) Subpackages: libbrotli-devel libbrotlicommon1 libbrotlidec1 libbrotlienc1 - Add 0001-Revert-Add-runtime-linker-path-to-pkg-config-files-7.patch - Update to 1.0.9 * Fix integer overflow when input chunk is longer than 2GiB [boo#1175825] * `brotli -v` now reports raw / compressed size * decoder: minor speed / memory usage improvements * encoder: fix rare access to uninitialized data in ring-buffer - Drop brotli_Ensure-decompression-consumes-all-input.patch, brotli_Verbose-CLI+Shared-Brotli.patch (merged) ==== gpg2 ==== Version update (2.2.21 -> 2.2.23) Subpackages: dirmngr - GnuPG 2.2.23: * gpg: fix AHEAD preference list overflow boo#1176034 / CVE-2020-25125 * gpg: fix possible segv in the key cleaning code * gpgsm: fix a minor RFC2253 parser gub * scdaemon: Fix a PIN verify failure on certain OpenPGP card implementations - GnuPG 2.2.22: * gpg: Change the default key algorithm to rsa3072 * gpg: Add regular expression support for Trust Signatures on all platforms * gpg: Ignore --personal-digest-prefs for ECDSA keys * gpgsm: Make rsaPSS a de-vs compliant scheme * gpgsm: Show also the SHA256 fingerprint in key listings * gpgsm: Do not require a default keyring for --gpgconf-list * gpg-agent: Default to extended key format and record the creation time of keys Add new option --disable-extended-key-format * gpg-agent: Support the WAYLAND_DISPLAY envvar * gpg-agent: Allow using --gpgconf-list even if HOME does not exist * gpg-agent: Make the Pinentry work even if the envvar TERM is set to the empty string * scdaemon: Add a workaround for Gnuk tokens <= 2.15 which wrongly incremented the error counter when using the "verify" command of "gpg --edit-key" with only the signature key being present * dirmngr: Better handle systems with disabled IPv6 * gpgpslit: Install tool. It was not installed in the past to avoid conflicts with the version installed by GnuPG 1.4 * gpgtar: Make --files-from and --null work as documented - drop gnupg-gpgme-t-encrypt-sym.patch, upstream ==== orca ==== Version update (3.36.5 -> 3.36.6) - Update to version 3.36.6: + General: Add some sanity checks to prevent crashing due to GStreamer failure. ==== patterns-gnome ==== Subpackages: patterns-gnome-gnome patterns-gnome-gnome_basic patterns-gnome-gnome_basis patterns-gnome-gnome_basis_opt patterns-gnome-gnome_games patterns-gnome-gnome_ide patterns-gnome-gnome_imaging patterns-gnome-gnome_internet patterns-gnome-gnome_multimedia patterns-gnome-gnome_office patterns-gnome-gnome_utilities patterns-gnome-gnome_x11 patterns-gnome-gnome_yast patterns-gnome-sw_management_gnome - Drop a few suggests, making the DVD a bit smaller (no change on default installed systems): + dasher + gnome-backgrounds (50MB RPM) + python-gobject-devel ==== perl-DBD-SQLite ==== Version update (1.64 -> 1.66) - updated to 1.66 see /usr/share/doc/packages/perl-DBD-SQLite/Changes 1.66 2020-08-30 - Switched to a production version 1.65_03 2020-07-27 - Upgraded SQLite to 3.32.3 1.65_02 2020-02-08 - Upgraded SQLite to 3.31.1 1.65_01 2020-01-18 - Upgraded SQLite to 3.30.1 - Added several SQL_ types as alias (pali++) - Fixed two initialization issues (ppisar++) - Allowed create_function to return an array reference to specify the type of the value ==== phodav ==== Version update (2.4 -> 2.5) - Update to version 2.5: + Add PhodavVirtualDir & related API. + Various misc build and code fixes. ==== pipewire ==== Version update (0.3.9 -> 0.3.10) Subpackages: libpipewire-0_3-0 pipewire-modules pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Update to version 0.3.10: * Many improvements to the pulse layer. + GStreamer pulsesink element now works. + Fixes some segfaults. + Enable rtkit for client threads. + fixes capture of monitor stream by name + implement some more extensions, this makes paman work and removes some warnings. * Many improvements to the GStreamer elements + negotiation rework, avoid calling GStreamer methods from the PipeWire callbacks because they might block and cause deadlocks. + Add support for non-string property values. + improve stability after buffer and format renegotiation. + Rework the device provider. + pipewiresink can now provide a stream that can be consumed by apps like cheese. * Many improvements to the JACK layer: + Rework the buffer_size callbacks. Make sure we call the callback from a 'safe' thread and that we don't call the process callback while the application is handling the callback. This improves stability in apps like Carla when PipeWire dynamically changes the buffer size. + Improve compatibility with apps that call get_buffer_frames() with a 0 size (calfjackrack) + JACK can now create nodes that can be set as a sink/source in PulseAudio/ALSA apps (you can make an effects rack and set that as default sink for apps). * Added a group id property for nodes. This makes it possible to schedule nodes with the same driver even when they are otherwise not linked together. To make this work well a new flag needed to be added to nodes to signal when they are ready for processing. Together with the GStreamer fixes, this makes things like: gst-launch-1.0 -v pipewiresrc path=51 stream-properties="props,node.group=1" ! audio/x-raw ! pipewiresink stream-properties="props,node.group=1" work as expected with PipeWire managing the resampling to keep the clocks of the devices in sync. This can later also be used to force devices to be grouped together to create a JACK-like scheduling group. * Streams and filter now use PIPEWIRE_NODE and PIPEWIRE_LATENCY env variables as fallback. * ACP add per device port list. This makes UCM devices expose the right ports. * Fix some segfaults in ACP and UCM. * make pw-cat use the metadata to find default devices. * The media session can now save and load audio device Profiles and Routes (volumes), stream volumes and the default sink and sources. ==== read-only-root-fs ==== - Adjust btrfsmaintenance sysconfig to not use the read-only root filesystem [bsc#1176052] ==== rubygem-parser ==== Version update (2.7.1.2 -> 2.7.1.4) - New upstream release 2.7.1.4 v2.7.1.4 (2020-06-19) - -------------------- Features implemented: * ruby28.y: add find pattern. (#714) (Ilya Bylich) * lexer.rl: reject `->...` and `->(...)` with the same error. (#713) (Ilya Bylich) * ruby28.y: accept leading args before forward arg. (#712) (Ilya Bylich) * Added `emit_forward_arg` compatibility flag. (#710) (Ilya Bylich) * ruby28.y: include entire lambda expr in lambda rule. (#708) (Ilya Bylich) * ruby28.y: extracted excessed_comma rule. (#706) (Ilya Bylich) * Source::TreeRewriter: Improved merging and representations (#703) (Marc-André Lafortune) Bugs fixed: * ruby*.y: fixed context inside lambda args and module. (#709) (Ilya Bylich) v2.7.1.3 (2020-05-26) - -------------------- API modifications: * fixed all warnings. tests are running in verbose mode now. (#685) (Ilya Bylich) Features implemented: * ruby-[parse, rewrite]: add legacy switches (#699) (Marc-André Lafortune) * Added Parser::Source::Range#to_range. (#697) (Ilya Bylich) * ruby28.y: support rescue modifier in endless method definition. (#696) (Ilya Bylich) * ruby28.y: unify kwrest and no-kwrest rules. (#694) (Ilya Bylich) * ruby28.y: add right hand assignment (#682) (Vladimir Dementyev) Bugs fixed: * fix Comment.associate for postfix conditions/loops (#688) (Marc-André Lafortune) ==== vulkan-loader ==== Version update (1.2.148 -> 1.2.151) - Update to release 1.2.151 * Fixed crash in device enumeration ==== xen ==== Version update (4.13.0_12 -> 4.14.0_02) Subpackages: xen-libs xen-tools-domU - Fix build on aarch64 with gcc10 - Package xenhypfs for aarch64 - Correct license name * GPL-3.0+ is now GPL-3.0-or-later - Upstream bug fixes (bsc#1027519) 5f1a9916-x86-S3-put-data-sregs-into-known-state.patch 5f21b9fd-x86-cpuid-APIC-bit-clearing.patch - Update to Xen 4.14.0 FCS release xen-4.14.0-testing-src.tar.bz2 * Linux stubdomains (contributed by QUBES OS) * Control-flow Enforcement Technology (CET) Shadow Stack support (contributed by Citrix) * Lightweight VM fork for fuzzing / introspection. (contributed by Intel) * Livepatch: buildid and hotpatch stack requirements * CONFIG_PV32 * Hypervisor FS support * Running Xen as a Hyper-V Guest * Domain ID randomization, persistence across save / restore * Golang binding autogeneration * KDD support for Windows 7, 8.x and 10 - Dropped patches contained in new tarball 5eb51be6-cpupool-fix-removing-cpu-from-pool.patch 5eb51caa-sched-vcpu-pause-flags-atomic.patch 5ec2a760-x86-determine-MXCSR-mask-always.patch 5ec50b05-x86-idle-rework-C6-EOI-workaround.patch 5ec7dcaa-x86-dont-enter-C6-with-in-service-intr.patch 5ec7dcf6-x86-dont-enter-C3-C6-with-errata.patch 5ec82237-x86-extend-ISR-C6-workaround-to-Haswell.patch 5ece1b91-x86-clear-RDRAND-CPUID-bit-on-AMD-fam-15-16.patch 5ece8ac4-x86-load_system_tables-NMI-MC-safe.patch 5ed69804-x86-ucode-fix-start-end-update.patch 5eda60cb-SVM-split-recalc-NPT-fault-handling.patch 5edf6ad8-ioreq-pending-emulation-server-destruction-race.patch 5edfbbea-x86-spec-ctrl-CPUID-MSR-defs-for-SRBDS.patch 5edfbbea-x86-spec-ctrl-mitigate-SRBDS.patch 5ee24d0e-x86-spec-ctrl-document-SRBDS-workaround.patch xsa317.patch xsa319.patch xsa321-1.patch xsa321-2.patch xsa321-3.patch xsa321-4.patch xsa321-5.patch xsa321-6.patch xsa321-7.patch xsa328-1.patch xsa328-2.patch - bsc#1172356 - Not able to hot-plug NIC via virt-manager, asks to attach on next reboot while it should be live attached ignore-ip-command-script-errors.patch - Enhance libxc.migrate_tracking.patch After transfer of domU memory, the target host has to assemble the backend devices. Track the time prior xc_domain_unpause. - Add libxc.migrate_tracking.patch to track live migrations unconditionally in logfiles, especially in libvirt. This will track how long a domU was suspended during transit. - bsc#1173376 - VUL-0: CVE-2020-15566: xen: XSA-317 - Incorrect error handling in event channel port allocation xsa317.patch - bsc#1173377 - VUL-0: CVE-2020-15563: xen: XSA-319 - inverted code paths in x86 dirty VRAM tracking xsa319.patch - bsc#1173378 - VUL-0: CVE-2020-15565: xen: XSA-321 - insufficient cache write- back under VT-d xsa321-1.patch xsa321-2.patch xsa321-3.patch xsa321-4.patch xsa321-5.patch xsa321-6.patch xsa321-7.patch - bsc#1173380 - VUL-0: CVE-2020-15567: xen: XSA-328 - non-atomic modification of live EPT PTE xsa328-1.patch xsa328-2.patch - bsc#1172205 - VUL-0: CVE-2020-0543: xen: Special Register Buffer Data Sampling (SRBDS) aka "CrossTalk" (XSA-320) 5ee24d0e-x86-spec-ctrl-document-SRBDS-workaround.patch 5edfbbea-x86-spec-ctrl-CPUID-MSR-defs-for-SRBDS.patch (Replaces xsa320-1.patch) 5edfbbea-x86-spec-ctrl-mitigate-SRBDS.patch (Replaces xsa320-2.patch) - Upstream bug fixes (bsc#1027519) 5ec50b05-x86-idle-rework-C6-EOI-workaround.patch 5ec7dcaa-x86-dont-enter-C6-with-in-service-intr.patch 5ec7dcf6-x86-dont-enter-C3-C6-with-errata.patch 5ec82237-x86-extend-ISR-C6-workaround-to-Haswell.patch 5ece1b91-x86-clear-RDRAND-CPUID-bit-on-AMD-fam-15-16.patch 5ece8ac4-x86-load_system_tables-NMI-MC-safe.patch 5ed69804-x86-ucode-fix-start-end-update.patch 5eda60cb-SVM-split-recalc-NPT-fault-handling.patch 5edf6ad8-ioreq-pending-emulation-server-destruction-race.patch - Fixes for %_libexecdir changing to /usr/libexec - bsc#1172205 - VUL-0: CVE-2020-0543: xen: Special Register Buffer Data Sampling (SRBDS) aka "CrossTalk" (XSA-320) xsa320-1.patch xsa320-2.patch - Update to Xen 4.13.1 bug fix release (bsc#1027519) xen-4.13.1-testing-src.tar.bz2 5eb51be6-cpupool-fix-removing-cpu-from-pool.patch 5eb51caa-sched-vcpu-pause-flags-atomic.patch 5ec2a760-x86-determine-MXCSR-mask-always.patch - Drop patches contained in new tarball 5de65f84-gnttab-map-always-do-IOMMU-part.patch 5de65fc4-x86-avoid-HPET-use-on-certain-Intel.patch 5e15e03d-sched-fix-S3-resume-with-smt=0.patch 5e16fb6a-x86-clear-per-cpu-stub-page-info.patch 5e1da013-IRQ-u16-is-too-narrow-for-evtchn.patch 5e1dcedd-Arm-place-speculation-barrier-after-ERET.patch 5e21ce98-x86-time-update-TSC-stamp-after-deep-C-state.patch 5e286cce-VT-d-dont-pass-bridges-to-domain_context_mapping_one.patch 5e318cd4-x86-apic-fix-disabling-LVT0.patch 5e344c11-x86-HVM-relinquish-resources-from-domain_destroy.patch 5e3bd385-EFI-recheck-variable-name-strings.patch 5e3bd3d1-EFI-dont-leak-heap-VIA-XEN_EFI_get_next_variable_name.patch 5e3bd3f8-xmalloc-guard-against-overflow.patch 5e46e090-x86-smp-reset-x2apic_enabled-in-smp_send_stop.patch 5e4c00ef-VT-d-check-full-RMRR-for-E820-reserved.patch 5e4d4f5b-sched-fix-get_cpu_idle_time-with-core-sched.patch 5e4e614d-x86-spec-ctrl-no-xen-also-disables-branch-hardening.patch 5e4ec20e-x86-virtualise-MSR_PLATFORM_ID-properly.patch 5e5e7188-fix-error-path-in-cpupool_unassign_cpu_start.patch 5e6f53dd-AMD-IOMMU-fix-off-by-one-get_paging_mode.patch 5e7a371c-sched-fix-cpu-onlining-with-core-sched.patch 5e7c90cf-sched-fix-cpu-offlining-with-core-sched.patch 5e7cfb29-x86-ucode-AMD-fix-assert-in-compare_patch.patch 5e7cfb29-x86-ucode-fix-error-paths-in-apply_microcode.patch 5e7dd83b-libx86-CPUID-fix-not-just-leaf-7.patch 5e7dfbf6-x86-ucode-AMD-potential-buffer-overrun-equiv-tab.patch 5e846cce-x86-HVM-fix-AMD-ECS-handling-for-Fam10.patch 5e84905c-x86-ucode-AMD-fix-more-potential-buffer-overruns.patch 5e86f7b7-credit2-avoid-vCPUs-with-lower-creds-than-idle.patch 5e86f7fd-credit2-fix-credit-too-few-resets.patch 5e876b0f-tools-xenstore-fix-use-after-free-in-xenstored.patch 5e95ad61-xenoprof-clear-buffer-intended-to-be-shared-with-guests.patch 5e95ad8f-xenoprof-limit-consumption-of-shared-buffer-data.patch 5e95ae77-Add-missing-memory-barrier-in-the-unlock-path-of-rwlock.patch 5e95af5e-xen-gnttab-Fix-error-path-in-map_grant_ref.patch 5e95afb8-gnttab-fix-GNTTABOP_copy-continuation-handling.patch ==== yast2-installation ==== Version update (4.3.15 -> 4.3.16) - Self-update improvement: write the list of updated packages to the /.packages.self_update file in the inst-sys (bsc#1175614) - 4.3.16 N�����r��y隊Z)z{.�櫛맲��r��z�^�ˬz��N�(�֜��^� ޭ隊Z)z{.�櫛�0�����Ǩ�