Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20240317 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: cryptsetup (2.7.0 -> 2.7.1) dav1d (1.4.0 -> 1.4.1) expat (2.6.1 -> 2.6.2) libjxl (0.10.1 -> 0.10.2) libjxl-gtk (0.10.1 -> 0.10.2) mutter openSUSE-release (20240315 -> 20240317) pcr-oracle phonon-qt5 phonon-qt6 phonon-vlc-qt5 phonon-vlc-qt6 plasma6-nm qemu (8.2.1 -> 8.2.2) rebootmgr (2.3 -> 2.4) rsyslog spice sqlite3 (3.44.2 -> 3.45.2) wicked === Details === ==== cryptsetup ==== Version update (2.7.0 -> 2.7.1) Subpackages: cryptsetup-doc cryptsetup-lang libcryptsetup12 - Update to 2.7.1: * Fix interrupted LUKS1 decryption resume. With the replacement of the cryptsetup-reencrypt tool by the cryptsetup reencrypt command, resuming the interrupted LUKS1 decryption operation could fail. LUKS2 was not affected. * Allow --link-vk-to-keyring with --test-passphrase option. This option allows uploading the volume key in a user-specified kernel keyring without activating the device. * Fix crash when --active-name was used in decryption initialization. * Updates and changes to man pages, including indentation, sorting options alphabetically, fixing mistakes in crypt_set_keyring_to_link, and fixing some typos. * Fix compilation with libargon2 when --disable-internal-argon2 was used. * Do not require installed argon2.h header and never compile internal libargon2 code if the crypto library directly supports Argon2. * Fixes to regression tests to support older Linux distributions. ==== dav1d ==== Version update (1.4.0 -> 1.4.1) - Update to version 1.4.1 * Optimizations for 6tap filters for NEON (ARM) * More RISC-V optimizations for itx (4x8, 8x4, 4x16, 16x4, 8x16, 16x8) * Reduction of binary size on ARM64, ARM32 and RISC-V * Fix out-of-bounds read in 8bpc SSE2/SSSE3 wiener_filter * Msac optimizations ==== expat ==== Version update (2.6.1 -> 2.6.2) Subpackages: libexpat1 - update to 2.6.2: * CVE-2024-28757 -- Prevent billion laughs attacks with isolated use of external parsers (boo#1221289) * Reject direct parameter entity recursion and avoid the related undefined behavior ==== libjxl ==== Version update (0.10.1 -> 0.10.2) Subpackages: libjxl0_10 libjxl0_10-x86-64-v3 - Update to release 0.10.2 * Fix unspecified bugs in (lossless) encoding and streaming mode ==== libjxl-gtk ==== Version update (0.10.1 -> 0.10.2) Subpackages: gdk-pixbuf-loader-jxl gimp-plugin-jxl - Update to release 0.10.2 * Fix unspecified bugs in (lossless) encoding and streaming mode ==== mutter ==== Subpackages: mutter-lang - Add 0001-Revert-clutter-actor-Cache-stage-relative-instead-of.patch: This leads into partial update while switching VT (from TTY to GNOME) on X11 session with fbdev driver used ( glgo#GNOME/mutter#3302, bsc#1219546). ==== openSUSE-release ==== Version update (20240315 -> 20240317) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== pcr-oracle ==== - Add fix_grub_bls_entry.patch to measure boot entries in GRUB BLS ==== phonon-qt5 ==== Subpackages: libphonon4qt5 phonon4qt5-lang phononsettings-qt5 - Update the recommended backend package name (boo#1221459) ==== phonon-qt6 ==== Subpackages: libphonon4qt6 phononsettings-qt6 - Update the recommended backend package name (boo#1221459) ==== phonon-vlc-qt5 ==== - Make sure installing phonon-vlc-qt6 also recommends installing the translations package - Update phonon-qt5-vlc 'Provides' (related: boo#1221459) ==== phonon-vlc-qt6 ==== - Make sure installing phonon-vlc-qt6 also recommends installing the translations package - Update phonon-qt5-vlc 'Provides' (related: boo#1221459) ==== plasma6-nm ==== Subpackages: plasma6-nm-lang plasma6-nm-openconnect plasma6-nm-openvpn plasma6-nm-pptp plasma6-nm-vpnc - Make plasma6-nm-libreswan obsolete the plasma5 package ==== qemu ==== Version update (8.2.1 -> 8.2.2) Subpackages: qemu-accel-tcg-x86 qemu-audio-spice qemu-block-curl qemu-block-nfs qemu-block-rbd qemu-chardev-spice qemu-guest-agent qemu-hw-display-qxl qemu-hw-display-virtio-gpu qemu-hw-display-virtio-gpu-pci qemu-hw-display-virtio-vga qemu-hw-usb-host qemu-hw-usb-redirect qemu-hw-usb-smartcard qemu-img qemu-ipxe qemu-ksm qemu-lang qemu-microvm qemu-pr-helper qemu-seabios qemu-tools qemu-ui-curses qemu-ui-gtk qemu-ui-opengl qemu-ui-spice-app qemu-ui-spice-core qemu-vgabios qemu-x86 - Update to version 8.2.2. Full changelog here: https://lore.kernel.org/qemu-devel/1709577077.783602.1474596.nullmailer@tls.... Some upstream backports: * chardev/char-socket: Fix TLS io channels sending too much data to the backend * tests/unit/test-util-sockets: Remove temporary file after test * hw/usb/bus.c: PCAP adding 0xA in Windows version * hw/intc/Kconfig: Fix GIC settings when using "--without-default-devices" * gitlab: force allow use of pip in Cirrus jobs * tests/vm: avoid re-building the VM images all the time * tests/vm: update openbsd image to 7.4 * target/i386: leave the A20 bit set in the final NPT walk * target/i386: remove unnecessary/wrong application of the A20 mask * target/i386: Fix physical address truncation * target/i386: check validity of VMCB addresses * target/i386: mask high bits of CR3 in 32-bit mode * pl031: Update last RTCLR value on write in case it's read back * hw/nvme: fix invalid endian conversion * update edk2 binaries to edk2-stable202402 * update edk2 submodule to edk2-stable202402 * target/ppc: Fix crash on machine check caused by ifetch * target/ppc: Fix lxv/stxv MSR facility check * .gitlab-ci.d/windows.yml: Drop msys2-32bit job * system/vl: Update description for input grab key * docs/system: Update description for input grab key * hw/hppa/Kconfig: Fix building with "configure --without-default-devices" * tests/qtest: Depend on dbus_display1_dep * meson: Explicitly specify dbus-display1.h dependency * audio: Depend on dbus_display1_dep * ui/console: Fix console resize with placeholder surface * ui/clipboard: add asserts for update and request * ui/clipboard: mark type as not available when there is no data * ui: reject extended clipboard message if not activated * target/i386: Generate an illegal opcode exception on cmp instructions with lock prefix * i386/cpuid: Move leaf 7 to correct group * i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F * i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs * i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available * .gitlab-ci/windows.yml: Don't install libusb or spice packages on 32-bit * iotests: Make 144 deterministic again * target/arm: Don't get MDCR_EL2 in pmu_counter_enabled() before checking ARM_FEATURE_PMU * target/arm: Fix SVE/SME gross MTE suppression checks * target/arm: Handle mte in do_ldrq, do_ldro - Address bsc#1220310. Backported upstream commits: * ppc/spapr: Initialize max_cpus limit to SPAPR_IRQ_NR_IPIS * ppc/spapr: Introduce SPAPR_IRQ_NR_IPIS to refer IRQ range for CPU IPIs. ==== rebootmgr ==== Version update (2.3 -> 2.4) - Update to version 2.4 - Make sure systemctl reboot will not switch to soft-reboot automatically ==== rsyslog ==== - Fix rpmlint warnings and errors: + rsyslog.spec:590: W: %autopatch-not-in-prep: - applying patches should be done in prep section and in this case, there is no reason not to do it. Use the opportunity to switch to %autosetup. - Do not BuildRequire libtool, autoconf, automake and don't run autoreconf: the comment indicates this would be needed for patch1, but likely for an 'older patch1': what we have now does not touch the build system. + E: superfluous-%clean-section: Drop long deprecated %clean section. + E: suse-zypp-otherproviders otherproviders(syslog): simply provide syslog. + W: non-etc-or-var-file-marked-as-conffile: do not mark files in /usr/share as config; admins are not supposed to change them. + rsyslog-doc.x86_64: E: no-binary: build rsyslog-doc as noarch. + E: explicit-lib-dependency librdkafka1: the dependency for one should be in module-kafka, but then is also auto-detected by RPM. ==== spice ==== - Add patch to fix build with gstreamer 1.24: * fix-build-with-gstreamer-1.24.patch ==== sqlite3 ==== Version update (3.44.2 -> 3.45.2) Subpackages: libsqlite3-0 libsqlite3-0-x86-64-v3 sqlite3-tcl - Update to release 3.45.2: * Added the SQLITE_RESULT_SUBTYPE property for application- defined SQL functions. * Enhancements to the JSON SQL functions * Add the FTS5 tokendata option to the FTS5 virtual table. * The SQLITE_DIRECT_OVERFLOW_READ optimization is now enabled by default. * Query planner improvements * Increase the default value for SQLITE_MAX_PAGE_COUNT from 1073741824 to 4294967294. * Enhancements to the CLI * Restore the JSON BLOB input bug, and promise to support the anomaly in subsequent releases, for backward compatibility. * Fix the PRAGMA integrity_check command so that it works on read-only databases that contain FTS3 and FTS5 tables. * Fix issues associated with processing corrupt JSONB inputs. * Fix a long-standing bug in which a read of a few bytes past the end of a memory-mapped segment might occur when accessing a craftily corrupted database using memory-mapped database. * Fix a long-standing bug in which a NULL pointer dereference might occur in the bytecode engine due to incorrect bytecode being generated for a class of SQL statements that are deliberately designed to stress the query planner but which are otherwise pointless. * Fix an error in UPSERT, introduced in version 3.35.0. * Reduce the scope of the NOT NULL strength reduction optimization that was added in version 3.35.0. - Add sqlite3-float-i586.patch to fix build on i586. - sqlite3-rtree-i686.patch is not needed anymore. - Abort build when %version and %tarversion don't match. ==== wicked ==== Subpackages: wicked-service - addrconf: fix fallback-lease drop (bsc#1220996) [+ 0001-addrconf-fix-fallback-lease-drop-bsc-1220996.patch] - extensions/nbft: use upstream `nvme nbft show` (bsc#1221358) [+ 0002-extensions-nbft-replace-nvme-show-nbft-with-nvme-nbf.patch]