Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20211123 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: git (2.33.1 -> 2.34.0) haveged libblockdev libwacom llvm13 mariadb-connector-c (3.2.4 -> 3.2.5) monitoring-plugins patterns-base rsync spacenavd sshfs yast2-packager (4.4.13 -> 4.4.14) yast2-schema (4.4.5 -> 4.4.6) yast2-trans (84.87.20211114.f6c5a7e501 -> 84.87.20211121.6ee9157350) === Details === ==== git ==== Version update (2.33.1 -> 2.34.0) Subpackages: git-core git-cvs git-daemon git-email git-gui git-svn git-web gitk perl-Git - git 2.34.0: * Release notes: https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34... ==== haveged ==== Subpackages: libhavege2 - Remove ProtectKernelTunables hardening, causes the service to fail (boo#1192921) ==== libblockdev ==== Subpackages: libbd_btrfs2 libbd_crypto2 libbd_fs2 libbd_loop2 libbd_mdraid2 libbd_part2 libbd_swap2 libbd_utils2 libblockdev2 - Fix lack of dependency on libblockdev-lvm needed by libblockdev package. The lvm-cache-stats binary needs the logical volume plugin to work (boo#1183948). ==== libwacom ==== Subpackages: libwacom-data libwacom2 - Add python requires to tools subpackage (bsc#1192852) ==== llvm13 ==== Subpackages: clang-tools clang13 clang13-doc libLLVM13 libLTO13 libc++-devel libc++1 libc++abi-devel libc++abi1 libclang13 - Add FileCheck into the devel package, as is required for testing Rust (boo#1192629) ==== mariadb-connector-c ==== Version update (3.2.4 -> 3.2.5) - Update to 3.2.5: * release notes and changelog: https://mariadb.com/kb/en/library/mariadb-connector-c-325-release-notes https://mariadb.com/kb/en/library/mariadb-connector-c-325-changelog ==== monitoring-plugins ==== Subpackages: monitoring-plugins-breeze monitoring-plugins-by_ssh monitoring-plugins-cluster monitoring-plugins-common monitoring-plugins-cups monitoring-plugins-dhcp monitoring-plugins-dig monitoring-plugins-disk monitoring-plugins-disk_smb monitoring-plugins-dns monitoring-plugins-dummy monitoring-plugins-file_age monitoring-plugins-flexlm monitoring-plugins-http monitoring-plugins-icmp monitoring-plugins-ide_smart monitoring-plugins-ifoperstatus monitoring-plugins-ifstatus monitoring-plugins-ircd monitoring-plugins-load monitoring-plugins-log monitoring-plugins-mailq monitoring-plugins-mrtg monitoring-plugins-mrtgtraf monitoring-plugins-nagios monitoring-plugins-nt monitoring-plugins-ntp_peer monitoring-plugins-ntp_time monitoring-plugins-nwstat monitoring-plugins-oracle monitoring-plugins-overcr monitoring-plugins-ping monitoring-plugins-procs monitoring-plugins-real monitoring-plugins-rpc monitoring-plugins-sensors monitoring-plugins-smtp monitoring-plugins-ssh monitoring-plugins -swap monitoring-plugins-tcp monitoring-plugins-time monitoring-plugins-ups monitoring-plugins-users monitoring-plugins-wave - recommend syslog for monitoring-plugins-log, as people probably want to analize logs generated by (r)syslog or journald Renamed patches: - renamed monitoring-plugins-1.4.6-no_chown.patch to monitoring-plugins-1.4.6-Makefile_-_no_chown.patch to make it easier to detect the patched file - renamed monitoring-plugins-2.1.1-check_logfile.patch to monitoring-plugins-2.1.1-check_log_-_quoting.patch to make it easier to detect the patched file and reason for the patch New patches: - added monitoring-plugins-2.3.1-check_snmp_segfaults.patch check_snmp will segfaults at line 489 if number of lines returned by SNMPD is greater than number of defined thresholds - > https://github.com/monitoring-plugins/monitoring-plugins/pull/1589 - added monitoring-plugins-2.3.1-check_snmp_hang_on_STDERR_workaround.patch When the MIBs are not quite right, snmpget outputs lots of errors on STDERR before getting down to business. If this is enough to fill the pipe buffer, snmpget hangs waiting for it to be cleared, which it never will be because check_snmp is waiting for snmpget to output something on STDOUT. This simple fix from s2156945 for this is to read STDERR before STDOUT. cmd_run_array from utils_cmd.c is also used by plugins/check_by_ssh and plugins/negate but you're likely to get lots of errors or lots of output, not both at the same time. The real fix is probably to do a select() and read from both as they come in. https://github.com/monitoring-plugins/monitoring-plugins/issues/1706 - added monitoring-plugins-2.3.1-check_dhcp_-_detect_rogue_dhcp_servers.patch feature enhancement from Patrick Cervicek for check_dhcp, which allows to detect rogue DHCP servers. Use it with the "-x" flag, example: ./check_dhcp -s 192.168.1.1 -x CRITICAL: Rogue DHCP Server detected! Server 192.168.1.205 offered 192.168.1.239 - added monitoring-plugins-2.3.1-check_ssh.patch , which includes patches provided by op5, mainly around RFC 4253:4.2 and 4253:5 + fixing a few typos + properly parse a (delayed) version control string + Handle non-alpha software versions reported by the checked service - added monitoring-plugins-2.3.1-check_ssh.t_-_improve_testing.patch which improves the testing of check_ssh - including the patches mentioned in monitoring-plugins-2.3.1-check_ssh.patch - added monitoring-plugins-2.3.1-fixing-shellcheck.patch , which fixes some complains from shellcheck(.net): + quoting and parenthesis in check_log.sh, check_oracle.sh, check_sensors.sh ==== patterns-base ==== Subpackages: patterns-base-apparmor patterns-base-base patterns-base-basesystem patterns-base-basic_desktop patterns-base-console patterns-base-documentation patterns-base-enhanced_base patterns-base-minimal_base patterns-base-selinux patterns-base-sw_management patterns-base-transactional_base patterns-base-x11 patterns-base-x11_enhanced - x11 pattern: Require xf86-input-libinput also on s390x (JIRA#SLE-18632) ==== rsync ==== - Added hardening to systemd service(s) (bsc#1181400). Modified: * rsyncd.service ==== spacenavd ==== - Added hardening to systemd service(s) (bsc#1181400). Added patch(es): * harden_spacenavd.service.patch Modified: * spacenavd.service ==== sshfs ==== - Add fix-typo-in-ssh_opts.patch (boo#1191886) Required for kdeconnect-kde + openssh >= 8.8 ==== yast2-packager ==== Version update (4.4.13 -> 4.4.14) - Use consistent names for the Full medium repositories (bsc#1191652) - 4.4.14 ==== yast2-schema ==== Version update (4.4.5 -> 4.4.6) - Add 'efi' element to the rules schema (jsc#SLE-18819) - 4.4.6 ==== yast2-trans ==== Version update (84.87.20211114.f6c5a7e501 -> 84.87.20211121.6ee9157350) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20211121.6ee9157350: * Translated using Weblate (Catalan) * New POT for text domain 'autoinst'. * Translated using Weblate (Slovak) * New POT for text domain 'control'. * Translated using Weblate (Slovak) * New POT for text domain 'storage'. * Translated using Weblate (Japanese) * New POT for text domain 'vpn'. * New POT for text domain 'users'. * New POT for text domain 'update'. * New POT for text domain 'tune'. * New POT for text domain 'tftp-server'. * New POT for text domain 'sysconfig'. * New POT for text domain 'support'. * New POT for text domain 'sudo'. * New POT for text domain 'storage'. * New POT for text domain 'squid'. * New POT for text domain 'sound'. * New POT for text domain 'snapper'. * New POT for text domain 'slp-server'. * New POT for text domain 'services-manager'. * New POT for text domain 'security'. * New POT for text domain 'scanner'. * New POT for text domain 'samba-server'. * New POT for text domain 'samba-client'. * New POT for text domain 's390'. * New POT for text domain 'registration'. * New POT for text domain 'rear'. * New POT for text domain 'proxy'. * New POT for text domain 'printer'. * New POT for text domain 'pam'. * New POT for text domain 'packager'. * New POT for text domain 'online-update-configuration'. * New POT for text domain 'online-update'. * New POT for text domain 'oneclickinstall'. * New POT for text domain 'ntp-client'. * New POT for text domain 'nis_server'. * New POT for text domain 'nis'. * New POT for text domain 'nfs_server'. * New POT for text domain 'nfs'. * New POT for text domain 'network'. * New POT for text domain 'migration'. * New POT for text domain 'mail'. * New POT for text domain 'ldap-client'. * New POT for text domain 'ldap'. * New POT for text domain 'kdump'. * New POT for text domain 'journalctl'. * New POT for text domain 'journal'. * New POT for text domain 'isns'. * New POT for text domain 'iscsi-lio-server'. * New POT for text domain 'iscsi-client'. * New POT for text domain 'instserver'. * New POT for text domain 'installation'. * New POT for text domain 'http-server'. * New POT for text domain 'ftp-server'. * New POT for text domain 'firewall'. * New POT for text domain 'fcoe-client'. * New POT for text domain 'drbd'. * New POT for text domain 'docker'. * New POT for text domain 'dns-server'. * New POT for text domain 'dhcp-server'. * New POT for text domain 'crowbar'. * New POT for text domain 'country'. * New POT for text domain 'control'. * New POT for text domain 'configuration_management'. * New POT for text domain 'cluster'. * New POT for text domain 'cio'. * New POT for text domain 'caasp'. * New POT for text domain 'bootloader'. * New POT for text domain 'base'. * New POT for text domain 'autoinst'. * New POT for text domain 'authserver'. * New POT for text domain 'auth-client'. * New POT for text domain 'audit-laf'. * New POT for text domain 'apparmor'. * New POT for text domain 'alternatives'. * New POT for text domain 'add-on'. * New POT for text domain 'vpn'. * New POT for text domain 'users'. * New POT for text domain 'update'. * New POT for text domain 'tune'. * New POT for text domain 'tftp-server'. * New POT for text domain 'sysconfig'. * New POT for text domain 'support'. * New POT for text domain 'sudo'. * New POT for text domain 'storage'. * New POT for text domain 'squid'. * New POT for text domain 'sound'. * New POT for text domain 'snapper'. * New POT for text domain 'slp-server'. * New POT for text domain 'services-manager'. * New POT for text domain 'security'. * New POT for text domain 'scanner'. * New POT for text domain 'samba-server'. * New POT for text domain 'samba-client'. * New POT for text domain 's390'. * New POT for text domain 'registration'. * New POT for text domain 'rear'. * New POT for text domain 'proxy'. * New POT for text domain 'printer'. * New POT for text domain 'pam'. * New POT for text domain 'packager'. * New POT for text domain 'online-update-configuration'. * New POT for text domain 'online-update'. * New POT for text domain 'oneclickinstall'. * New POT for text domain 'ntp-client'. * New POT for text domain 'nis_server'. * New POT for text domain 'nis'. * New POT for text domain 'nfs_server'. * New POT for text domain 'nfs'. * New POT for text domain 'network'. * New POT for text domain 'migration'. * New POT for text domain 'mail'. * New POT for text domain 'ldap-client'. * New POT for text domain 'ldap'. * New POT for text domain 'kdump'. * New POT for text domain 'journalctl'. * New POT for text domain 'journal'. * New POT for text domain 'isns'. * New POT for text domain 'iscsi-lio-server'. * New POT for text domain 'iscsi-client'. * New POT for text domain 'instserver'. * New POT for text domain 'installation'. * New POT for text domain 'http-server'. * New POT for text domain 'ftp-server'. * New POT for text domain 'firewall'. * New POT for text domain 'fcoe-client'. * New POT for text domain 'drbd'. * New POT for text domain 'docker'. * New POT for text domain 'dns-server'. * New POT for text domain 'dhcp-server'. * New POT for text domain 'crowbar'. * New POT for text domain 'country'. * New POT for text domain 'control'. * New POT for text domain 'configuration_management'. * New POT for text domain 'cluster'. * New POT for text domain 'cio'. * New POT for text domain 'caasp'. * New POT for text domain 'bootloader'. * New POT for text domain 'base'. * New POT for text domain 'autoinst'. * New POT for text domain 'authserver'. * New POT for text domain 'auth-client'. * New POT for text domain 'audit-laf'. * New POT for text domain 'apparmor'. * New POT for text domain 'alternatives'. * New POT for text domain 'add-on'. * New POT for text domain 'registration'. * New POT for text domain 'packager'. * New POT for text domain 'installation'. * New POT for text domain 'base'. * New POT for text domain 'autoinst'.