Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20210805 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: grep hwdata (0.349 -> 0.350) ilmbase (2.5.6 -> 2.5.7) keyutils libHX (3.25 -> 3.26) libinput (1.18.0 -> 1.18.1) libvirt (7.5.0 -> 7.6.0) man-pages ncurses (6.2.20210718 -> 6.2.20210724) nodejs16 (16.5.0 -> 16.6.0) openafs (1.8.7 -> 1.8.8) openexr (2.5.6 -> 2.5.7) pcre (8.44 -> 8.45) perl-DBD-SQLite (1.68 -> 1.70) python-gobject python-libvirt-python (7.5.0 -> 7.6.0) python38 python38-core python38-documentation rubygem-rspec samba (4.14.5+git.165.70143cb153d -> 4.14.6+git.168.6a9fc8a1ddd) tcsh tigervnc transactional-update (3.4.0 -> 3.5.1) vte xf86-video-intel yast2-country (4.4.2 -> 4.4.4) yast2-installation (4.4.14 -> 4.4.15) === Details === ==== grep ==== Subpackages: grep-lang - gnulib-c-stack.patch: Fix AC_SYS_XSI_STACK_OVERFLOW_HEURISTIC configure check ==== hwdata ==== Version update (0.349 -> 0.350) - Update to version 0.350 (bsc#1189005): + Updated pci, usb and vendor ids. ==== ilmbase ==== Version update (2.5.6 -> 2.5.7) Subpackages: libHalf-2_5-25 libIex-2_5-25 libIlmThread-2_5-25 libImath-2_5-25 - version update to 2.5.7 Patch release of 2.5 with security and build fixes: * OSS-fuzz 28051 Heap-buffer-overflow in Imf_2_5::copyIntoFrameBuffer * OSS-fuzz 28155 Crash in Imf_2_5::PtrIStream::read * Fix broken symlink and pkg-config lib suffix for cmake debug builds - modified patches % 0001-Use-absolute-CMAKE_INSTALL_FULL_LIBDIR-for-libdir-in.patch (refreshed) - deleted patches - openexr-CVE-2021-3598.patch (upstreamed) - openexr-CVE-2021-3605.patch (upstreamed) ==== keyutils ==== Subpackages: libkeyutils1 libkeyutils1-32bit - Add /etc/keys/ and /usr/etc/keys/ directory (bsc#1187654) ==== libHX ==== Version update (3.25 -> 3.26) Subpackages: libHX32 libHX32-32bit - Update to release 3.26 * io: cure a potential infinite loop on EOF with HXio_fullread() * io: HXio_fullread() now returns actual bytes read rather than bytes requested * time: rectified HX_timeval_sub producing wrong results ==== libinput ==== Version update (1.18.0 -> 1.18.1) Subpackages: libinput-udev libinput10 - Update to release 1.18.1 * This release only adds device-specific quirks. ==== libvirt ==== Version update (7.5.0 -> 7.6.0) Subpackages: libvirt-client libvirt-daemon libvirt-daemon-driver-interface libvirt-daemon-driver-libxl libvirt-daemon-driver-lxc libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-lxc libvirt-daemon-qemu libvirt-daemon-xen libvirt-libs - Update to libvirt 7.6.0 - storage_driver: Unlock object on ACL fail in storagePoolLookupByTargetPath CVE-2021-3667 bsc#1188843 - Many incremental improvements and bug fixes, see https://libvirt.org/news.html - Dropped patches: de1e0ae0-lockd-no-error-if-lockspace.patch, f58349c9-qemu-storage-migration.patch ==== man-pages ==== - do not package man5/motd.5, it is provided by pam package [bsc#1188724] ==== ncurses ==== Version update (6.2.20210718 -> 6.2.20210724) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch 20210724 + add workaround for Windows Terminal's problems with CR/LF mapping to ms-terminal (patch by Juergen Pfeifer). + review/update current Windows Terminal vs ms-terminal -TD - Correct offsets of patch ncurses-6.2.dif ==== nodejs16 ==== Version update (16.5.0 -> 16.6.0) Subpackages: npm16 - Update to 16.6.0: http2: fixes use after free on close http2 on stream canceling (bsc#1188917, CVE-2021-22930) ==== openafs ==== Version update (1.8.7 -> 1.8.8) Subpackages: openafs-client openafs-kmp-default - update to openafs version 1.8.8 - remove linux-kmp.patch. Not required at the minute. ==== openexr ==== Version update (2.5.6 -> 2.5.7) - version update to 2.5.7 Patch release of 2.5 with security and build fixes: * OSS-fuzz 28051 Heap-buffer-overflow in Imf_2_5::copyIntoFrameBuffer * OSS-fuzz 28155 Crash in Imf_2_5::PtrIStream::read * Fix broken symlink and pkg-config lib suffix for cmake debug builds - modified patches % 0001-Use-absolute-CMAKE_INSTALL_FULL_LIBDIR-for-libdir-in.patch (refreshed) - deleted patches - openexr-CVE-2021-3598.patch (upstreamed) - openexr-CVE-2021-3605.patch (upstreamed) ==== pcre ==== Version update (8.44 -> 8.45) Subpackages: libpcre1 libpcre1-32bit libpcreposix0 - update to 8.45: * This is the final PCRE1 release. A very few small issues have been fixed. ==== perl-DBD-SQLite ==== Version update (1.68 -> 1.70) - Remove silence_sqlite_unicode_deprecation_warning.patch (upstream fix) - updated to 1.70 see /usr/share/doc/packages/perl-DBD-SQLite/Changes 1.70 2021-08-01 - Switched to a production version 1.69_02 2021-07-30 - Fix doc to use the correct attribute with sqlite_ (GH#86, eekboek++) - Modify the fix to silence the sqlite_unicode warning not to check the attribute twice - Fix an encoding issue of naive (GH#83, HaraldJoerg++) 1.69_01 2021-07-30 - Typo (GH#85, grr++) - Silenced deprecation warning of sqlite_unicode not to break tests of existing applications ==== python-gobject ==== Subpackages: python38-gobject python38-gobject-Gdk python38-gobject-cairo - Adjust BuildRequires for python_module cairo to python-module pycairo: the module was renamed 2 years ago. - Skip build for python2: not supported anymore since 3.38.0. ==== python-libvirt-python ==== Version update (7.5.0 -> 7.6.0) - Update to 7.6.0 - Add all new APIs and constants in libvirt 7.6.0 - jsc#SLE-18354 ==== python38 ==== Subpackages: python38-curses python38-dbm python38-tk - Use versioned python-Sphinx to avoid dependency on other version of Python (bsc#1183858). ==== python38-core ==== Subpackages: libpython3_8-1_0 python38-base - Use versioned python-Sphinx to avoid dependency on other version of Python (bsc#1183858). ==== python38-documentation ==== - Use versioned python-Sphinx to avoid dependency on other version of Python (bsc#1183858). ==== rubygem-rspec ==== - Remove obsolete source rspec-3.9.0.gem.sha256 ==== samba ==== Version update (4.14.5+git.165.70143cb153d -> 4.14.6+git.168.6a9fc8a1ddd) Subpackages: libdcerpc-binding0 libdcerpc-binding0-32bit libdcerpc0 libdcerpc0-32bit libndr-krb5pac0 libndr-krb5pac0-32bit libndr-nbt0 libndr-nbt0-32bit libndr-standard0 libndr-standard0-32bit libndr1 libndr1-32bit libnetapi0 libnetapi0-32bit libsamba-credentials1 libsamba-credentials1-32bit libsamba-errors0 libsamba-errors0-32bit libsamba-hostconfig0 libsamba-hostconfig0-32bit libsamba-passdb0 libsamba-passdb0-32bit libsamba-policy0-python3 libsamba-util0 libsamba-util0-32bit libsamdb0 libsamdb0-32bit libsmbclient0 libsmbconf0 libsmbconf0-32bit libsmbldap2 libsmbldap2-32bit libtevent-util0 libtevent-util0-32bit libwbclient0 libwbclient0-32bit samba-client samba-client-32bit samba-doc samba-libs samba-libs-32bit samba-libs-python3 samba-python3 samba-winbind samba-winbind-32bit - Update to 4.14.6 * s3: lib: Fix talloc heirarcy error in parent_smb_fname(); (bso#14722). * smbd: Fix pathref unlinking in create_file_unixpath(); (bso#14732). * s3: VFS: default: Add proc_fd's fallback for vfswrap_fchown(); (bso#14734). * s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in change_file_owner_to_parent() error path; (bso#14736). * NT_STATUS_FILE_IS_A_DIRECTORY error messages when using glusterfs VFS module; (bso#14730). * s3/modules: fchmod: Fallback to path based chmod if pathref; (bso#14734). * Spotlight RPC service doesn't work with vfs_glusterfs; (bso#14740). * gensec_krb5: Restore ipv6 support for kpasswd; (bso#14750). * smbXsrv_{open,session,tcon}: protect smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records; (bso#14752). * samba-tool domain backup offline doesn't work against bind DLZ backend; (bso#14027). * netcmd: Use next_free_rid() function to calculate a SID for restoring a backup; (bso#14669). ==== tcsh ==== Subpackages: tcsh-lang - Key-binding: support also other variants of terminals like xterm-256color ==== tigervnc ==== Subpackages: libXvnc1 xorg-x11-Xvnc xorg-x11-Xvnc-module - no longer require libXfont(1) ==== transactional-update ==== Version update (3.4.0 -> 3.5.1) Subpackages: dracut-transactional-update libtukit0 transactional-update-zypp-config tukit - Version 3.5.1 - t-u: Disable status file generation by default The new experimental `status` command requires the availability of /etc/YaST2/control.xml, which is not present on all systems. Hide the creation of the corresponding status file behind a new EXPERIMENTAL_STATUS option to try out this functionality. - Increase library version - Add tukit.conf to spec file - Version 3.5.0 - Add alias setDiscardIfUnchanged for setDiscard. The old method name wasn't really clear and will be removed if we should have an API break in the future - Replace mkinitrd with direct dracut call [boo#1186213] - tukit: Add configuration file support (/etc/tukit.conf) - Allow users to configure additional bind mounts (see /usr/etc/tukit.conf for an example and limitations) [bsc#1188322] - Add 'transactional-update status' call. This is a POC for obtaining a hash of a system to verify its integrity. The functionality is still experimental! - Internal bugfixes / optimizations ==== vte ==== Subpackages: libvte-2_91-0 vte-lang - Add vte-enable-build-flag-pie.patch: enable PIE flag to be compatible with gcc default linking option. Otherwise build will be failed with current SLE-15-SP4 project setup. ==== xf86-video-intel ==== - no longer require libXfont(1) ==== yast2-country ==== Version update (4.4.2 -> 4.4.4) Subpackages: yast2-country-data - Offer the fr-afnor keyboard only if it is defined (bsc#1188867) It is not part of SLE15 so far. - 4.4.4 - AutoYaST: allow empty /profile/timezone/timezone setting, meaning to keep the UTC default (bsc#1188406). - 4.4.3 ==== yast2-installation ==== Version update (4.4.14 -> 4.4.15) - Activate devices before probing (bsc#1187220). - 4.4.15