15 Apr
2023
15 Apr
'23
16:00
Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20230414
Please do not reply to this email to report issues, rather file a bug
on bugzilla.opensuse.org. For more information on filing bugs please
see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
ImageMagick (7.1.1.5 -> 7.1.1.6)
binutils
btrfsprogs (6.2.2 -> 6.1.3)
gnome-control-center
isl (0.25 -> 0.26)
libXpm
libgcrypt (1.10.1 -> 1.10.2)
libgit2 (1.6.3 -> 1.6.4)
libgpg-error (1.46 -> 1.47)
libsolv (0.7.23 -> 0.7.24)
libva (2.17.0 -> 2.18.0)
libva-gl (2.17.0 -> 2.18.0)
libvirt
libzypp (17.31.8 -> 17.31.10)
microos-tools (2.20 -> 2.20+git20230413.2a43cdb)
ncurses (6.4.20230311 -> 6.4.20230408)
xdg-desktop-portal-gtk
zypper (1.14.59 -> 1.14.60)
=== Details ===
==== ImageMagick ====
Version update (7.1.1.5 -> 7.1.1.6)
Subpackages: ImageMagick-config-7-SUSE ImageMagick-extra libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10
- version update to 7.1.1.6
- https://github.com/ImageMagick/Website/blob/main/ChangeLog.md#711-6---2023-04-02
- fixes CVE-2023-1906 [bsc#1210308]
==== binutils ====
Subpackages: libctf-nobfd0 libctf0
- Rebase branch patch (includes fix for PR30281).
==== btrfsprogs ====
Version update (6.2.2 -> 6.1.3)
Subpackages: btrfsprogs-bash-completion btrfsprogs-udev-rules libbtrfs0 libbtrfsutil1
==== gnome-control-center ====
Subpackages: gnome-control-center-color gnome-control-center-goa gnome-control-center-lang gnome-control-center-user-faces
- Rebase gnome-control-center-disable-error-message-for-NM.patch
- Add gnome-control-center-fix-6f1567f23.patch:
network/connection-editor: fix crash when removing a connection
(glgo#GNOME/gnome-control-center/commit/8cb77b4d3, bsc#1210377).
==== isl ====
Version update (0.25 -> 0.26)
- update to 0.26:
* fix inherited overloaded methods in Python bindings
* decompose topological sort of clusters in incremental
scheduler
* improved isl_pw_aff_list_{min,max}
* add some convenience functions
* more exports to (templated C++) bindings
* slightly improved conversion from binary relation to function
==== libXpm ====
- with switching to suggests making use of (n)compress no longer
needs to be limited to openSUSE
- suggests instead of require compress (see changelog below)
- require compress (ncompress package) on openSUSE; it's not
supported on SLE
- Drop n_no-compress-on-sle.patch and set XPM_PATH_COMPRESS instead
(xpmPipeThrough function returns NULL when the command is not
available; so same result as with the patch applied; that the
child process for executing 'compress' returns with exit(1)
doesn't matter much; it might even be useful to see the error
message ...)
- Depend also on /usr/bin/uncompress, not only /usr/bin/gzip;
Requiring binaries instead of packages resolves the file
conflict with busybox-gzip, which is used when building nginx
opensuse images; dep chain was: nginx -> libdg3 -> libXpm4 -> gzip
==> conflict with busybox-gzip
- Depend on /usr/bin/gzip, not gzip
==== libgcrypt ====
Version update (1.10.1 -> 1.10.2)
Subpackages: libgcrypt20 libgcrypt20-32bit libgcrypt20-hmac
- Update to 1.10.2:
* Bug fixes:
- Fix Argon2 for the case output > 64. [rC13b5454d26]
- Fix missing HWF_PPC_ARCH_3_10 in HW feature. [rCe073f0ed44]
- Fix RSA key generation failure in forced FIPS mode. [T5919]
- Fix gcry_pk_hash_verify for explicit hash. [T6066]
- Fix a wrong result of gcry_mpi_invm. [T5970]
- Allow building with --disable-asm for HPPA. [T5976]
- Allow building with -Oz. [T6432]
- Enable the fast path to ChaCha20 only when supported. [T6384]
- Use size_t to avoid counter overflow in Keccak when directly
feeding more than 4GiB. [T6217]
* Other:
- Do not use secure memory for a DRBG instance. [T5933]
- Do not allow PKCS#1.5 padding for encryption in FIPS mode. [T5918]
- Fix the behaviour for child process re-seeding in the DRBG. [rC019a40c990]
- Allow verification of small RSA signatures in FIPS mode. [T5975]
- Allow the use of a shorter salt for KDFs in FIPS mode. [T6039]
- Run digest+sign self tests for RSA and ECC in FIPS mode. [rC06c9350165]
- Add function-name based FIPS indicator function.
GCRYCTL_FIPS_SERVICE_INDICATOR_FUNCTION. This is not considered
an ABI changes because the new FIPS features were not yet
approved. [rC822ee57f07]
- Improve PCT in FIPS mode. [rC285bf54b1a, rC4963c127ae, T6397]
- Use getrandom (GRND_RANDOM) in FIPS mode. [rCcf10c74bd9]
- Disable RSA-OAEP padding in FIPS mode. [rCe5bfda492a]
- Check minimum allowed key size in PBKDF in FIPS mode. [T6039,T6219]
- Get maximum 32B of entropy at once in FIPS mode. [rCce0df08bba]
- Prefer gpgrt-config when available. [T5034]
- Mark AESWRAP as approved FIPS algorithm. [T5512]
- Prevent usage of long salt for PSS in FIPS mode. [rCfdd2a8b332]
- Prevent usage of X9.31 keygen in FIPS mode. [rC392e0ccd25]
- Remove GCM mode from the allowed FIPS indicators. [rC1540698389]
- Add explicit FIPS indicators for hash and MAC algorithms. [T6376]
* Release-info: https://dev.gnupg.org/T5905
* Rebase FIPS patches:
- libgcrypt-FIPS-SLI-hash-mac.patch
- libgcrypt-FIPS-SLI-kdf-leylength.patch
- libgcrypt-FIPS-SLI-pk.patch
==== libgit2 ====
Version update (1.6.3 -> 1.6.4)
- Update to 1.6.4:
* config: return GIT_ENOTFOUND for missing programdata
- move experimental cli into libgit2-tools as intended
==== libgpg-error ====
Version update (1.46 -> 1.47)
Subpackages: libgpg-error0 libgpg-error0-32bit
- Update to 1.47:
* New error codes for PUKs and reset codes. [T6421]
* Avoid segv in logging with improper use of the "socket://".
* Fixed translation of argparse's internal option --help.
* Interface changes relative to the 1.46 release:
- GPG_ERR_SOURCE_TKD NEW.
- GPG_ERR_BAD_PUK NEW.
- GPG_ERR_NO_RESET_CODE NEW.
- GPG_ERR_BAD_RESET_CODE NEW.
- GPGRT_SPAWN_KEEP_STDIN NEW.
- GPGRT_SPAWN_KEEP_STDOUT NEW.
- GPGRT_SPAWN_KEEP_STDERR NEW.
- GPGRT_SPAWN_INHERIT_FILE NEW.
* Release-info: https://dev.gnupg.org/T6231
==== libsolv ====
Version update (0.7.23 -> 0.7.24)
Subpackages: libsolv-tools python3-solv ruby-solv
- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
[bsc#1195633]
- bump version to 0.7.24
==== libva ====
Version update (2.17.0 -> 2.18.0)
Subpackages: libva-drm2 libva-wayland2 libva-x11-2 libva2
- Update to version 2.18.0:
* doc: Add build and install libva informatio in home page.
* fix:
- Add libva.def into distribution package
- NULL check before calling strncmp.
- Remove reference to non-existent symbol
* meson: docs:
- Add encoder interface for av1
- Use libva_version over project_version()
* va:
- Add VAProfileH264High10
- Always build with va-messaging API
- Fix the codying style of CHECK_DISPLAY
- Remove Android pre Jelly Bean workarounds
- Remove dummy isValid() hook
- Remove unused drm_sarea.h include & ANDROID references in
va_dricommon.h
- va/sysdeps.h: remove Android section
* x11:
- Allow disabling DRI3 via LIBVA_DRI3_DISABLe env var
- Use LIBVA_DRI3_DISABLE in GetNumCandidates
- Switch to multibuild style. Drop libva-gl.spec|changes and
pre_checkin.sh.
- Switch to meson build system, add meson BuildRequires, drop
libtool and xz BuildRequires, and replace gcc-c++ with generic
c++_compiler.
- Use autosetup and ldconfig_scriptlets macros.
- Add libva-wayland to baselibs.conf, now that its build have moved
to the main part of spec, source validator should no longer
complain on SLE.
- Drop propagate-dpy.patch: The upstream issue was closed without
the patch ever getting applied, and the issue that it fixed was
deemed to not be a libva issue. See upstream issue:
https://github.com/intel/libva/issues/479
==== libva-gl ====
Version update (2.17.0 -> 2.18.0)
- Update to version 2.18.0:
* doc: Add build and install libva informatio in home page.
* fix:
- Add libva.def into distribution package
- NULL check before calling strncmp.
- Remove reference to non-existent symbol
* meson: docs:
- Add encoder interface for av1
- Use libva_version over project_version()
* va:
- Add VAProfileH264High10
- Always build with va-messaging API
- Fix the codying style of CHECK_DISPLAY
- Remove Android pre Jelly Bean workarounds
- Remove dummy isValid() hook
- Remove unused drm_sarea.h include & ANDROID references in
va_dricommon.h
- va/sysdeps.h: remove Android section
* x11:
- Allow disabling DRI3 via LIBVA_DRI3_DISABLe env var
- Use LIBVA_DRI3_DISABLE in GetNumCandidates
- Switch to multibuild style. Drop libva-gl.spec|changes and
pre_checkin.sh.
- Switch to meson build system, add meson BuildRequires, drop
libtool and xz BuildRequires, and replace gcc-c++ with generic
c++_compiler.
- Use autosetup and ldconfig_scriptlets macros.
- Add libva-wayland to baselibs.conf, now that its build have moved
to the main part of spec, source validator should no longer
complain on SLE.
- Drop propagate-dpy.patch: The upstream issue was closed without
the patch ever getting applied, and the issue that it fixed was
deemed to not be a libva issue. See upstream issue:
https://github.com/intel/libva/issues/479
- update to 2.17.0:
* win: Simplify signature for driver name loading
* win: Rewrite driver registry query and fix some
bugs/leaks/inefficiencies
* win: Add missing null check after calloc
* va: Update security disclaimer
* dep:remove the file .cvsignore
* pkgconfig: add 'with-legacy' for emgd, nvctrl and fglrx
* meson: add 'with-legacy' for emgd, nvctrl and fglrx
* x11: move all FGLRX code to va_fglrx.c
* x11: move all NVCTRL code to va_nvctrl.c
* meson: stop using deprecated meson.source_root()
* meson: stop using configure_file copy=true
* va: correctly include the win32 (local) headers
* win: clean-up the coding style
* va: dos2unix all the files
* drm: remove unnecessary dri2 version/extension query
* trace: annotate internal functions with DLL_HIDDEN
* build/sysdeps: Remove HAVE_GNUC_VISIBILITY_ATTRIBUTE and use _GNUC_
support level attribute instead
* meson: Check support for -Wl,-version-script and build link_args
accordingly
* meson: Set va_win32 soversion to '' and remove the install_data rename
* fix: resouce check null
* va_trace: Add Win32 memory types in va_TraceSurfaceAttributes
* va_trace: va_TraceSurfaceAttributes should check the
VASurfaceAttribMemoryType
* va: Adds Win32 Node and Windows build support
* va: Adds compat_win32 abstraction for Windows build and prepares va
common code for windows build
* pkgconfig: Add Win32 package for when WITH_WIN32 is enabled
* meson: Add with_win32 option, makes libdrm non-mandatory on Win
* x11: add basic DRI3 support
* drm: remove VA_DRM_IsRenderNodeFd() helper
* drm: add radeon drm + radeonsi mesa combo
==== libvirt ====
Subpackages: libvirt-client libvirt-daemon-common libvirt-daemon-config-network libvirt-daemon-driver-interface libvirt-daemon-driver-libxl libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-lock libvirt-daemon-log libvirt-daemon-plugin-lockd libvirt-daemon-proxy libvirt-daemon-qemu libvirt-daemon-xen libvirt-libs
- qemu: Fix potential crash during driver cleanup
bsc#1209861
==== libzypp ====
Version update (17.31.8 -> 17.31.10)
- BuildRequires: libsolv-devel >= 0.7.24 for x86_64_v[234]
support.
- version 17.31.10 (22)
- Workround bsc#1195633 while libsolv <= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
(boo#1127591)
Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
[#439])
Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)
==== microos-tools ====
Version update (2.20 -> 2.20+git20230413.2a43cdb)
- Update to version 2.20+git20230413.2a43cdb:
* Drop extra sysctl file for coredumps (boo#1091684)
==== ncurses ====
Version update (6.4.20230311 -> 6.4.20230408)
Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen
- Add ncurses patch 20230408
+ document limitations of tparm, and error-returns in curs_terminfo.3x
+ document limitations of tgoto, and error-returns in curs_termcap.3x
+ add xterm+focus to alacritty+common (patch by Christian Duerr).
+ add "-v" option to tput, to show warnings.
> improve checks for malformed terminfo data (report/analysis by
Jonathan Bar Or, Michael Pearse, Emanuele Cozzi).
+ make the parameter type/count checks in _nc_tiparm() more stringent
+ update tgoto() to account for _nc_tiparm() changes
+ add checks in tparm() and tiparm() for misuse of string parameters
+ add special cases in tput to handle extensions Cs/Ms parameters
+ ignore compiled-terminfo where the array sizes exceed the standard
- Skip gzipping manual pages as brp-compress does the job
- Add ncurses patch 20230401
+ modify experimental Windows driver to work with xterm mouse protocol.
+ remove DECCOLM+DECSCLM from foot (patch by Daniel Ekloef).
==== xdg-desktop-portal-gtk ====
Subpackages: xdg-desktop-portal-gtk-lang
- Change Supplements: Replace gtk3 with gtk3-schema, ensure the
supplements gets triggered.
- Add (gtk4-schema and (flatpak or snapd)) Supplements:
Futureproof the supplements, as more and more of GNOME moves to
gtk4.
==== zypper ====
Version update (1.14.59 -> 1.14.60)
Subpackages: zypper-log zypper-needs-restarting
- Fix selecting installed patterns from picklist (bsc#1209406)
- man: better explanation of --priority (fixes #480)
- version 1.14.60