Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20240507 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ImageMagick (7.1.1.31 -> 7.1.1.32) autofs cyrus-sasl gdk-pixbuf gimp (2.10.36 -> 2.10.38) git (2.44.0 -> 2.45.0) gsettings-desktop-schemas harfbuzz iso-codes libarchive (3.7.2 -> 3.7.4) libxslt openSUSE-release (20240506 -> 20240507) pipewire (1.0.5 -> 1.0.5+git36.60deeb2) pixman (0.43.2 -> 0.43.4) python-Jinja2 (3.1.3 -> 3.1.4) sdbootutil (1+git20240410.3325802 -> 1+git20240506.573a6a4) tpm2-0-tss (4.0.1 -> 4.1.0) unison (2.53.4 -> 2.53.5) wireplumber xxhash yast2-trans (84.87.20240428.f3ddce30c5 -> 84.87.20240505.45b4c21d5b) === Details === ==== ImageMagick ==== Version update (7.1.1.31 -> 7.1.1.32) Subpackages: libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - version update to 7.1.1.32 * Fix GIF ICC profile reading #7282 * uhdr.c: add support for rgb inputs #7273 ==== autofs ==== - Fix -Werror=incompatible-pointer-types issues (bsc#1221682) * Add autofs-5.1.9-fix-ldap_parse_page_control-check.patch * Add autofs-5.1.9-cast-sasl_callback_t-function-pointers.patch ==== cyrus-sasl ==== Subpackages: cyrus-sasl-crammd5 cyrus-sasl-digestmd5 cyrus-sasl-gssapi cyrus-sasl-plain libsasl2-3 libsasl2-3-32bit - GCC 14: cyrus-sasl package fails (bsc#1221863) Apply upstream patch: 0001-Fix-time.h-check.patch ==== gdk-pixbuf ==== Subpackages: gdk-pixbuf-lang gdk-pixbuf-query-loaders gdk-pixbuf-thumbnailer libgdk_pixbuf-2_0-0 typelib-1_0-GdkPixbuf-2_0 - Pass -Dothers=enabled to meson: enable other image loaders (most notably beeded seems xpm,xbm). This is in line with upstreams recommendation for now, but won't be working past version 2.43.x. The loaders will likely be split out into a separate repo. (boo#1223903, glgo#GNOME/gdk-pixbuf!169). - Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test suite with other loaders enabled. ==== gimp ==== Version update (2.10.36 -> 2.10.38) Subpackages: gimp-plugin-aa libgimp-2_0-0 libgimpui-2_0-0 - Update to 2.10.38: * Fixed a crash with newer glib * Indexed PNGs with transparency are now exported with the correct colors * Anders Jonsson fixed the input ranges for several filters such as Waves and Distort * The titlebar customization field now supports UTF-8 characters * Existing image comments no longer âleakâ into newly created images ==== git ==== Version update (2.44.0 -> 2.45.0) Subpackages: git-core git-email git-svn git-web perl-Git - update to 2.45.0: * Improved efficiency managing repositories with many references ("git init --ref-format=reftable") * "git checkout -p" and friends learned that that "@" is a synonym for "HEAD" * cli improvements handling refs * Expanded a number of commands and options, UI improvements * status.showUntrackedFiles now accepts "true" * git-cherry-pick(1) now automatically drops redundant commits with new --empty option * The userdiff patterns for C# has been updated. ==== gsettings-desktop-schemas ==== Subpackages: gsettings-desktop-schemas-lang - Move en_US and en_GB 'translations' to the main package. Do not force the -lang package on all users. ==== harfbuzz ==== Subpackages: libharfbuzz-gobject0 libharfbuzz-icu0 libharfbuzz-subset0 libharfbuzz0 typelib-1_0-HarfBuzz-0_0 - Force higher C++ standard version for building with ICU 75. ==== iso-codes ==== - Merge iso codes-translations into the main package. iso-codes isn't particularly useful without its translations. Some KDE packages require and/or heavily rely on them. gnome-control-center also needs translations to display localized names in system config menu. ==== libarchive ==== Version update (3.7.2 -> 3.7.4) - Update to 3.7.4: * rar: Fix OOB in rar e8 filter (CVE-2024-26256, bsc#1222911) * zip: Fix out of boundary access * 7zip: Limit amount of properties * bsdtar: Fix error handling around strtol() usages * passphrase: Improve newline handling on Windows * passphrase: Never allow empty passwords * rar: Fix "File CRC Error" when extracting specific rar4 archives * xar: Avoid infinite link loop * zip: Update AppleDouble support for directories * zstd: Implement core detection - Update to 3.7.3: * PCRE2 support * add trailing letter b to bsdtar(1) substitute pattern * add support for long options "--group" and "--owner" to tar(1) * Fix possible vulnerability in tar error reporting introduced in f27c173 * ISO9660: preserve the natural order of links * rar5: fix decoding unicode filenames on Windows * rar5: fix infinite loop if during rar5 decompression the last block produced no data * xz filter: fix incorrect eof at the end of an lzip member * zip: fix end-of-data marker processing when decompressing zip archives * multiple bsdunzip(1) fixes * filetime truncation fix on Windows - Fix rpmlint warning about summary being too long ==== libxslt ==== Subpackages: libexslt0 libxslt-tools libxslt1 - Fix ftbfs with GCC14 (bsc#1220571) * correct libxslt-random-seed.patch to include time.h unconditionally * add gcc14-runtest-no-const.patch ==== openSUSE-release ==== Version update (20240506 -> 20240507) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== pipewire ==== Version update (1.0.5 -> 1.0.5+git36.60deeb2) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-jack pipewire-lang pipewire-libjack-0_3 pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Update to version 1.0.5+git36.60deeb2 to fix several crashes, NULL checks, format strings and other issues: * spa: libcamera: fix RGB mappings * pw-dump: destroy all objects not just those matching the pattern * pw-dump: fix string memory leak on error * json: fix high surrogate escapes * core: handle import errors better * gst/src: fix crash when current_caps is NULL * gst/src: Avoid unnecessary renegotiations during streaming * gst/src: Cleanups for src_negotiate() * pw-mon: fix type confusion in core event handler * gst: fix stream params memory leak * gst: handle some more errors * treewide: fix errno assignments * alsa-pcm: don't force quantum for iec958 formats * journal: prepend code location to messages at debug log levels * module-rt: fix compiler warning * filter-chain: fix arguments of calloc * combine-stream tag forward * Add album to tag metadata * impl-node: avoid bitfield races * treewide: fix some format string issues * conf: warn when match actions are missing * module-protocol-simple: handle 'node.name' property * module-ffado: only start after ports are configured * context: fill basic properties early * combine-stream: fix latency-compensate with resample.disabled=true * profiler: remove unused data-loop * v4l2: fix printf format * spa: v4l2: encode device id into a json array * spa: libcamera: encode device ids into a json array * impl-port: avoid doing work when the port is destroyed * impl-port: use 0 size when clearing IO * stream: log a warning when media.class and direction mismatch * module-loopback: only enable delay with valid rate and channels * alsa: fix race when updating the eventfd * audioconvert: also clamp monitor volume to min/max * combine-stream: actually make use of resample.disable ==== pixman ==== Version update (0.43.2 -> 0.43.4) - Update to version 0.43.4 + Fix incorrect compositing on big-endian architectures. + Allow building on clang/arm32. ==== python-Jinja2 ==== Version update (3.1.3 -> 3.1.4) - update to 3.1.4 (bsc#1223980, CVE-2024-34064): * The xmlattr filter does not allow keys with / solidus, > greater-than sign, or = equals sign, in addition to disallowing spaces. Regardless of any validation done by Jinja, user input should never be used as keys to this filter, or must be separately validated first. ==== sdbootutil ==== Version update (1+git20240410.3325802 -> 1+git20240506.573a6a4) Subpackages: sdbootutil-rpm-scriptlets sdbootutil-snapper - Update to version 1+git20240506.573a6a4: * Don't try to mess with overlayfs inside transaction * .spec - requires: dialog ==== tpm2-0-tss ==== Version update (4.0.1 -> 4.1.0) Subpackages: libtss2-esys0 libtss2-mu0 libtss2-rc0 libtss2-sys1 libtss2-tcti-device0 libtss2-tctildr0 Update to version 4.1: + Security - Fixed CVE-2024-29040 (bsc#1223690) + Fixed - fapi: Fix length check on FAPI auth callbacks - mu: Correct error message for errors - tss2-rc: fix unknown laer handler dropping bits. - fapi: Fix deviation from CEL specification (template_value was used instead of template_data). - fapi: Fix json syntax error in FAPI profiles which was ignored by json-c. - build: fix build fail after make clean. - mu: Fix unneeded size check in TPM2B unmarshaling. - fapi: Fix missing parameter encryption. - build: Fix failed build with --disable-vendor. - fapi: Fix flush of persistent handles. - fapi: Fix test provisioning with template with self generated certificate disabled. - fapi: Fix error in Fapi_GetInfo it TPM supports SHA3 hash algs. - fapi: Revert pcr extension for EV_NO_ACTION events. - fapi: Fix strange error messages if nv, ext, or policy path does not exits. - fapi: Fix segfault caused by wrong allocation of pcr policy. - esys: Fix leak in Esys_EvictControl for persistent handles. - tss2-tcti: tcti-libtpms: fix test failure on big-endian platform. - esys: Add reference counting for Esys_TR_FromTPMPublic. - esys: Fix HMAC error if session bind key has an auth value with a trailing 0. - fapi: fix usage of self signed certificates in TPM. - fapi: Usage of self signed certificates. - fapi: A segfault after the error handling of non existing keys. - fapi: Fix several leaks. - fapi: Fix error handling for policy execution. - fapi: Fix usage of persistent handles (should not be flushed) - fapi: Fix test provisioning with template (skip test without self generated certificate). - fapi: Fix pcr extension for EV_NO_ACTION - test: Fix fapi-key-create-policy-signed-keyedhash with P_ECC384 profile - tcti_spi_helper_transmit: ensure FIFO is accessed only after TPM reports commandReady bit is set - fapi: Fix read large system eventlog (> UINT16_MAX). - esys tests: Fix layer check for TPM2_RC_COMMAND_CODE (for /dev/tpmrm0) - test: unit: tcti-libtpms: fix test failed at 32-bit platforms. - fapi: Fix possible null pointer dereferencing in Fapi_List. - sys: Fix size check in Tss2_Sys_GetCapability. - esys: Fix leak in Esys_TR_FromTPMPublic. - esys: fix unchecked return value in esys crypto. - fapi: Fix wrong usage of local variable in provisioning. - fapi: Fix memset 0 in ifapi_json_TPMS_POLICYNV_deserialize. - fapi: Fix possible out of bound array access in IMA parser. - tcti device: Fix possible unmarshalling from uninitialized variable. - fapi: Fix error checking authorization of signing key. - fapi: Fix cleanup of policy sessions. - fapi: Eventlog H-CRTM events and different localities. - fapi: Fix missing synchronization of quote and eventlog. - faii: Fix invalid free in Fapi_Quote with empty eventlog. + Added - tcti: LetsTrust-TPM2Go TCTI module spi-ltt2go. - mbedtls: add sha512 hmac. - fapi: Enable usage of external keys for Fapi_Encrypt. - fapi: Support download of AMD certificates. - tcti: Add USB TPM (FTDI MPSSE USB to SPI bridge) TCTI module. - fapi: The recreation of primaries (except EK) in the owner hierarchy instead the endorsement hierarchy is fixed. - rc: New TPM return codes added. - fapi: Further Nuvoton certificates added. - tpm_types/esys: Add support for Attestable TPM changes in latest TPM spec. - tcti: Add '/dev/tcm0' to default conf - fapi: New Nuvoton certificates added. - esys: Fix leak in Esys_TR_FromTPMPublic. + Removed - Testing on Ubuntu 18.04 as it's near EOL (May 2023). - tpm2-tss.keyring: added Andreas Fuchs 0x8F4F9A45D7FFEE74 key, documented in upstream repo, which was used for signing this new release tarball. - add new sub-package libtss2-tcti-spidev0: TCTI for communicating with a TPM connected directly via SPI. - add new sub-package libtss2-tcti-i2c-helper0: TCTI for communicating with a TPM connected directly via I2C. ==== unison ==== Version update (2.53.4 -> 2.53.5) - Update to version 2.53.5 * Various minor bugfixes. * Recovery from errors during repeat mode (enabled in 2.53.1) is disabled for time being. ==== wireplumber ==== Subpackages: libwireplumber-0_5-0 wireplumber-audio wireplumber-lang wireplumber-zsh-completion - Better fix for (bsc#1223916) that basically turns the main profile into the (to be in 0.5.3) video-only profile unless wireplumber-audio is installed which now turns the main profile into exactly upstream's main profile. - Add patch from upstream to fix a json log issue: * 0001-lua-json-fix-error-ouput.patch - Add patch from upstream to add a method to merge json containers: * 0002-lua-json-add-method-to-merge-json-containers.patch - Add patch from upstream to fix merging a particular case of configuration options: * 0003-json-utils-fix-overriding-of-non-container-values-when.patch - Fix wireplumber not starting successfully when audio support is not enabled since the main profile now requires it. The best option would be to use a video-only profile but it's too late to change the way wireplumber is started in SLE/Leap, so the solution just makes audio/bluetooth optional for now (bsc#1223916) * split-config-file.py ==== xxhash ==== - Fix ftbfs with gcc14: * use correct optflags also in %check * add test-tools-do-not-override-cflags.patch - Execute more tests ==== yast2-trans ==== Version update (84.87.20240428.f3ddce30c5 -> 84.87.20240505.45b4c21d5b) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20240505.45b4c21d5b: * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Italian) * New POT for text domain 'bootloader'. * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (German) * Translated using Weblate (German) * Translated using Weblate (German) * Translated using Weblate (German) * Translated using Weblate (German) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Romanian) * Translated using Weblate (French) * Translated using Weblate (French) * Translated using Weblate (French) * Translated using Weblate (French) * New POT for text domain 'bootloader'. * Translated using Weblate (Spanish) * Translated using Weblate (Spanish) * Translated using Weblate (Spanish) * Translated using Weblate (Spanish) * Translated using Weblate (Romanian) * Translated using Weblate (Chinese (Taiwan) (zh_TW)) * Translated using Weblate (Chinese (China) (zh_CN)) * Translated using Weblate (Chinese (Taiwan) (zh_TW)) * Translated using Weblate (Chinese (China) (zh_CN)) * Translated using Weblate (Chinese (Taiwan) (zh_TW)) * Translated using Weblate (Chinese (China) (zh_CN)) * Translated using Weblate (Chinese (Taiwan) (zh_TW)) * Translated using Weblate (Chinese (China) (zh_CN)) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian)