Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20240606 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: apparmor cJSON (1.7.17 -> 1.7.18) chrony dialog gnome-control-center kernel-firmware-nvidia-gspx-G06 (550.78 -> 550.90.07) libapparmor libbpf (1.4.2 -> 1.4.3) libstorage-ng (4.5.206 -> 4.5.207) libtommath (1.2.1 -> 1.3.0) libvirt (10.3.0 -> 10.4.0) man (2.12.0 -> 2.12.1) ndctl (78 -> 79) nvidia-open-driver-G06-signed (550.78_k6.9.1_1 -> 550.90.07_k6.9.3_1) openSUSE-release (20240605 -> 20240606) patterns-base python-libvirt-python (10.3.0 -> 10.4.0) rubygem-ruby-augeas samba (4.20.1+git.335.0a46cdafe2 -> 4.20.1+git.339.cf6e153bb2) seahorse selinux-policy (20240321 -> 20240411) subversion telepathy-glib xen (4.18.2_04 -> 4.18.2_05) xwayland === Details === ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-docs apparmor-parser apparmor-parser-lang apparmor-profiles apparmor-utils apparmor-utils-lang python3-apparmor - add sddm-xauth.diff - sddm uses a new path for xauth (boo#1223900) - add plasmashell.diff - fix QtWebEngineProcess path to prevent a crash in plasmashell (boo#1225961) ==== cJSON ==== Version update (1.7.17 -> 1.7.18) - unconditionally apply the revert NULL pointer test - update to 1.7.18: * CVE-2024-31755: NULL pointer dereference via cJSON_SetValuestring() (boo#1223420) * Remove non-functional list handling of compiler flags * Fix heap buffer overflow * remove misused optimization flag -01 * Set free'd pointers to NULL whenever they are not reassigned immediately after - revert tests for NULL pointers that fail on Leap 15.5 cJSON-1.7.18-misc_tests.patch ==== chrony ==== Subpackages: chrony-pool-openSUSE - bsc#1225362, chrony-124-tai.patch: make 124-tai more reliable - Update clknetsim to snapshot 0a11a35. ==== dialog ==== Subpackages: dialog-lang libdialog15 - Update to version 1.3-20240307: + add option --color-modes, which can be used to color the content of programbox, tailbox, textbox (requested by RafaÅ Radziejewski). + updated configure script, e.g., for compiler-warning fixes. + amend change to formbox while revising --max-input to work with the form's "ilen" parameter (report by Anna-Maria Gruber, cf: 2022/04/14) + update config.guess, config.sub + updated configure script, e.g., for compiler-warning fixes. + updated lv.po from http://translationproject.org/latest/dialog/ + add/use dlg_print_nowrap(), to handle multibyte character strings in progressbox and tailbox (report/testcase by Sergey Merzlikin). + updated configure script, e.g., for compiler-warning fixes. + update config.guess, config.sub + updated configure script, e.g., for compiler-warning fixes. + minor fixes for manpages to address mandoc warnings. + updated th.po from http://translationproject.org/latest/dialog/ + update config.guess, config.sub ==== gnome-control-center ==== Subpackages: gnome-control-center-color gnome-control-center-goa gnome-control-center-lang gnome-control-center-user-faces gnome-control-center-users - Update gnome-control-center-disable-error-message-for-NM.patch: Add info page to toolbar view instead of navigation page to prevent hiding close button (bsc#1222099). ==== kernel-firmware-nvidia-gspx-G06 ==== Version update (550.78 -> 550.90.07) - Security Update 550.90.07 * addresses boo#1223356 [CVE-2024-0090, CVE-2024-0091, CVE-2024-0092] ==== libapparmor ==== - add sddm-xauth.diff - sddm uses a new path for xauth (boo#1223900) - add plasmashell.diff - fix QtWebEngineProcess path to prevent a crash in plasmashell (boo#1225961) ==== libbpf ==== Version update (1.4.2 -> 1.4.3) - update to 1.4.3: * Fix libbpf unintentionally dropping FD_CLOEXEC flag when (internally) duping FDs ==== libstorage-ng ==== Version update (4.5.206 -> 4.5.207) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#996 - make more use of new SystemCmd interface - 4.5.207 ==== libtommath ==== Version update (1.2.1 -> 1.3.0) Subpackages: libtommath1 libtommath1-x86-64-v3 - update to 1.3.0: * Deprecate more APIs which are replaced in develop * Add support for CMake (PR #573) * Add support for GitHub Actions (PR #573) ==== libvirt ==== Version update (10.3.0 -> 10.4.0) Subpackages: libvirt-client libvirt-daemon-common libvirt-daemon-config-network libvirt-daemon-driver-interface libvirt-daemon-driver-libxl libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-lock libvirt-daemon-log libvirt-daemon-plugin-lockd libvirt-daemon-qemu libvirt-daemon-xen libvirt-libs - Update to libvirt 10.4.0 - network: use nftables to setup virtual network firewall rules boo#1201510 - Many incremental improvements and bug fixes, see https://libvirt.org/news.html#v10-4-0-2024-06-03 ==== man ==== Version update (2.12.0 -> 2.12.1) - Update to 2.12.1 (5 April 2024) * Fix excessive cleanup of `/var/cache/man` by `systemd-tmpfiles`. * `man` matches the display width more accurately to the configured width. * Upgrade to Gnulib `stable-202401`. * Mention `groff`'s `pdf` device in `man(1)`. * Speed up `seccomp` filter slightly. * Document how to format pages using italic rather than underlined text. * Remove the obsolete `chconfig` tool for converting man-db configuration files to the FHS. This transition took place almost 25 years ago (at least in Debian), so it's not worth keeping it around now. - Remove patch man-db-2.9.4-alternitive.dif now upstream - Port the patches * man-db-2.6.3-listall.dif * man-db-2.7.1-zio.dif * man-db-2.9.4.patch * man-propose-online.patch ==== ndctl ==== Version update (78 -> 79) - Update to version 79 * New cxl-wait-sanitize and cxl-set-alert-config commands * Support for QOS Class in cxl-create-region ==== nvidia-open-driver-G06-signed ==== Version update (550.78_k6.9.1_1 -> 550.90.07_k6.9.3_1) - Security Update 550.90.07 (boo#1223356) [CVE-2024-0090, CVE-2024-0091, CVE-2024-0092] ==== openSUSE-release ==== Version update (20240605 -> 20240606) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== patterns-base ==== Subpackages: patterns-base-apparmor patterns-base-base patterns-base-basesystem patterns-base-basic_desktop patterns-base-console patterns-base-enhanced_base patterns-base-minimal_base patterns-base-selinux patterns-base-sw_management patterns-base-transactional_base patterns-base-x11 patterns-base-x11_enhanced - Update rpmlintrc W: no-binary to E: no-binary - Remove tigervnc * Most users including myself don't even know what a vnc is or how to use one ==== python-libvirt-python ==== Version update (10.3.0 -> 10.4.0) - Update to 10.4.0 - Add all new APIs and constants in libvirt 10.4.0 ==== rubygem-ruby-augeas ==== - Replace %patchN with %patch -P N: %patchN is deprecated. ==== samba ==== Version update (4.20.1+git.335.0a46cdafe2 -> 4.20.1+git.339.cf6e153bb2) Subpackages: libsamba-policy0-python3 samba-ad-dc-libs samba-client samba-client-32bit samba-client-libs samba-client-libs-32bit samba-gpupdate samba-ldb-ldap samba-libs samba-libs-python3 samba-python3 samba-winbind samba-winbind-libs samba-winbind-libs-32bit - Fix non deterministic builds; (bsc#1225754); (bso#13213); ==== seahorse ==== Subpackages: gnome-shell-search-provider-seahorse seahorse-lang - Add seahorse-gcc14.patch: fix an invalid cast (glgo#GNOME/seahorse!220). ==== selinux-policy ==== Version update (20240321 -> 20240411) Subpackages: selinux-policy-targeted - Remove "Reference" from the package description. It's not the reference policy, but the Fedora branch of the policy - Use python311 tools in 15.4 and 15.5 when building selinux-policy to deprecate python36 tooling - Fixed varrun-convert.sh script to not break because of duplicate entries - Move to %posttrans to ensure selinux-policy got updated before the commands run (bsc#1221720) - Add file contexts "forwarding" to file_contexts.sub_dist to fix systemd-gpt-auto-generator and systemd-fstab-generator (bsc#1222736): * /run/systemd/generator.early /usr/lib/systemd/system * /run/systemd/generator.late /usr/lib/systemd/system - Update to version 20240411: * Remove duplicate in sysnetwork.fc * Rename /var/run/wicked* to /run/wicked* * Remove /var/run/rsyslog/additional-log-sockets.conf from logging.fc * policy: support pidfs * Confine selinux-autorelabel-generator.sh * Allow logwatch_mail_t read/write to init over a unix stream socket * Allow logwatch read logind sessions files * files_dontaudit_getattr_tmpfs_files allowed the access and didn't dontaudit it * files_dontaudit_mounton_modules_object allowed the access and didn't dontaudit it * Allow NetworkManager the sys_ptrace capability in user namespace * dontaudit execmem for modemmanager * Allow dhcpcd use unix_stream_socket * Allow dhcpc read /run/netns files * Update mmap_rw_file_perms to include the lock permission * Allow plymouthd log during shutdown * Add logging_watch_all_log_dirs() and logging_watch_all_log_files() * Allow journalctl_t read filesystem sysctls * Allow cgred_t to get attributes of cgroup filesystems * Allow wdmd read hardware state information * Allow wdmd list the contents of the sysfs directories * Allow linuxptp configure phc2sys and chronyd over a unix domain socket * Allow sulogin relabel tty1 * Dontaudit sulogin the checkpoint_restore capability * Modify sudo_role_template() to allow getpgid * Allow userdomain get attributes of files on an nsfs filesystem * Allow opafm create NFS files and directories * Allow virtqemud create and unlink files in /etc/libvirt/ * Allow virtqemud domain transition on swtpm execution * Add the swtpm.if interface file for interactions with other domains * Allow samba to have dac_override capability * systemd: allow sys_admin capability for systemd_notify_t * systemd: allow systemd_notify_t to send data to kernel_t datagram sockets * Allow thumb_t to watch and watch_reads mount_var_run_t * Allow krb5kdc_t map krb5kdc_principal_t files * Allow unprivileged confined user dbus chat with setroubleshoot * Allow login_userdomain map files in /var * Allow wireguard work with firewall-cmd * Differentiate between staff and sysadm when executing crontab with sudo * Add crontab_admin_domtrans interface * Allow abrt_t nnp domain transition to abrt_handle_event_t * Allow xdm_t to watch and watch_reads mount_var_run_t * Dontaudit subscription manager setfscreate and read file contexts * Don't audit crontab_domain write attempts to user home * Transition from sudodomains to crontab_t when executing crontab_exec_t * Add crontab_domtrans interface * Fix label of pseudoterminals created from sudodomain * Allow utempter_t use ptmx * Dontaudit rpmdb attempts to connect to sssd over a unix stream socket * Allow admin user read/write on fixed_disk_device_t * Only allow confined user domains to login locally without unconfined_login * Add userdom_spec_domtrans_confined_admin_users interface * Only allow admindomain to execute shell via ssh with ssh_sysadm_login * Add userdom_spec_domtrans_admin_users interface * Move ssh dyntrans to unconfined inside unconfined_login tunable policy * Update ssh_role_template() for user ssh-agent type * Allow init to inherit system DBus file descriptors * Allow init to inherit fds from syslogd * Allow any domain to inherit fds from rpm-ostree * Update afterburn policy * Allow init_t nnp domain transition to abrtd_t * Rename all /var/lock file context entries to /run/lock * Rename all /var/run file context entries to /run - Add script varrun-convert.sh for locally existing modules to be able to cope with the /var/run -> /run change - Update embedded container-selinux to commit a8e389dbcd3f9b6ed0a7e495c6f559c0383dc49e ==== subversion ==== Subpackages: libsvn_auth_gnome_keyring-1-0 libsvn_auth_kwallet-1-0 subversion-bash-completion subversion-perl - fix build with gcc14 (boo#1225929) subversion-1.14.3-gcc14.patch subversion-1.14.3-gcc14-2.patch ==== telepathy-glib ==== Subpackages: libtelepathy-glib0 typelib-1_0-TelepathyGlib-0_12 - Add telepathy-glib-function-type-cast.patch: fix an invalid cast (glfdo#telepathy/telepathy-glib!4). ==== xen ==== Version update (4.18.2_04 -> 4.18.2_05) Subpackages: xen-libs xen-tools xen-tools-domU - bsc#1225953 - Package xen does not build with gcc14 because of new errors gcc14-fixes.patch ==== xwayland ==== - disable DPMS on sle15 due to missing proto package