Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20230401 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: coreutils (9.1 -> 9.2) gnome-control-center (44.0+7 -> 44.0+20) gnome-shell (44.0+28 -> 44.0+42) gobject-introspection gstreamer-plugins-bad kernel-source (6.2.8 -> 6.2.9) ldb (2.7.1 -> 2.7.2) libgarcon (4.18.0 -> 4.18.1) libheif (1.15.1 -> 1.15.2) libxcrypt mutter (44.0+8 -> 44.0+18) nfs-utils samba (4.18.0+git.294.508b693e5c -> 4.18.1+git.298.4ccf830b2a4) snapper thunar-plugin-archive (0.5.0 -> 0.5.1) timezone (2023b -> 2023c) timezone-java (2023b -> 2023c) util-linux util-linux-systemd vim (9.0.1392 -> 9.0.1430) xen (4.17.0_04 -> 4.17.0_06) xfce4-panel (4.18.2 -> 4.18.3) xfce4-pulseaudio-plugin (0.4.5 -> 0.4.6) xfce4-session (4.18.1 -> 4.18.2) === Details === ==== coreutils ==== Version update (9.1 -> 9.2) Subpackages: coreutils-lang - update to 9.2: * cksum now accepts the --base64 (-b) option to print base64-encoded checksums. It also accepts/checks such checksums. * cksum now accepts the --raw option to output a raw binary checksum. No file name or other information is output in this mode. * cp, mv, and install now accept the --debug option to print details on how a file is being copied. * factor now accepts the --exponents (-h) option to print factors in the form p^e, rather than repeating the prime p, e times. * ls now supports the --time=modification option, to explicitly select the default mtime timestamp for display and sorting. * mv now supports the --no-copy option, which causes it to fail when asked to move a file to a different file system. * split now accepts options like '-n SIZE' that exceed machine integer range, when they can be implemented as if they were infinity. * split -n now accepts piped input even when not in round-robin mode, by first copying input to a temporary file to determine its size. * wc now accepts the --total={auto,never,always,only} option to give explicit control over when the total is output. * 'cp --reflink=always A B' no longer leaves behind a newly created empty file B merely because copy-on-write clones are not supported. * 'cp -n' and 'mv -n' now exit with nonzero status if they skip their action because the destination exists, and likewise for 'cp - i', 'ln -i', and 'mv -i' when the user declines. (POSIX specifies this for 'cp -i' and 'mv -i'.) * cp, mv, and install again read in multiples of the reported block size, to support unusual devices that may have this constraint. * du --apparent now counts apparent sizes only of regular files and symbolic links. POSIX does not specify the meaning of apparent sizes (i.e., st_size) for other file types, and counting those sizes could cause confusing and unwanted size mismatches. * 'ls -v' and 'sort -V' go back to sorting ".0" before ".A", reverting to the behavior in coreutils-9.0 and earlier. This behavior is now documented. * ls --color now matches a file extension case sensitively if there are different sequences defined for separate cases. * printf unicode \uNNNN, \UNNNNNNNN syntax, now supports all valid unicode code points. Previously is was restricted to the C universal character subset, which restricted most points <= 0x9F. * runcon now exits with status 125 for internal errors. Previously upon internal errors it would exit with status 1, which was less distinguishable from errors from the invoked command. * 'split -n N' now splits more evenly when the input size is not a multiple of N, by creating N output files whose sizes differ by at most 1 byte. Formerly, it did this only when the input size was less than N. * 'stat -c %s' now prints sizes as unsigned, consistent with 'ls'. * a long list of bugfixes, see included NEWS file for details - drop gnulib-simple-backup-fix.patch (upstream) - drop coreutils-tests-workaround-make-fdleak.patch (obsolete) ==== gnome-control-center ==== Version update (44.0+7 -> 44.0+20) Subpackages: gnome-control-center-color gnome-control-center-goa gnome-control-center-lang gnome-control-center-user-faces - Update to version 44.0+20: + datetime: Fix NTP switch getting out of sync. + shell/style: Add workaround to make disabled pictures are painted as such. + illustrated-row, split-row: Add widget name and css class. + region: Fix label of formats for the login screen. + keyboard: Fix cancel button issue. + Updated translations. ==== gnome-shell ==== Version update (44.0+28 -> 44.0+42) Subpackages: gnome-extensions gnome-shell-calendar gnome-shell-lang - Update to version 44.0+42: + appFavorite: - Add missing .desktop extension for simplescan - Rename simple-scan.desktop + style: Light variant fixes and accommodations + extensionDownloader: Check schemadir existence and type + status/network: Fix a11y names for VPN connection menu items + quickSettings: Fix icon-name construct property in menu toggles + screenshot: Fix broken GLib.Error.matches call + Updated translations. ==== gobject-introspection ==== Subpackages: girepository-1_0 libgirepository-1_0-1 - Run meson_test only on x86(_64) arches until upstream issue is fixed. https://gitlab.gnome.org/GNOME/gobject-introspection/-/issues/458 ==== gstreamer-plugins-bad ==== Subpackages: gstreamer-plugins-bad-lang libgstadaptivedemux-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstcuda-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstphotography-1_0-0 libgstplay-1_0-0 libgstplayer-1_0-0 libgstsctp-1_0-0 libgsttranscoder-1_0-0 libgsturidownloader-1_0-0 libgstva-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 libgstwebrtcnice-1_0-0 - Move conditional pkgconfig(vo-amrwbenc) BuildRequires to main part of spec, now available in distro. Stop passing voamrwbenc=disabled to meson. ==== kernel-source ==== Version update (6.2.8 -> 6.2.9) - Linux 6.2.9 (bsc#1012628). - interconnect: qcom: osm-l3: fix icc_onecell_data allocation (bsc#1012628). - interconnect: qcom: sm8450: switch to qcom_icc_rpmh_* function (bsc#1012628). - interconnect: qcom: qcm2290: Fix MASTER_SNOC_BIMC_NRT (bsc#1012628). - perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output (bsc#1012628). - perf: fix perf_event_context->time (bsc#1012628). - tracing/hwlat: Replace sched_setaffinity with set_cpus_allowed_ptr (bsc#1012628). - drm/amd/display: fix k1 k2 divider programming for phantom streams (bsc#1012628). - drm/amd/display: Remove OTG DIV register write for Virtual signals (bsc#1012628). - drm/amd/display: Fix DP MST sinks removal issue (bsc#1012628). - arm64: dts: freescale: imx8-ss-lsio: Fix flexspi clock order (bsc#1012628). - arm64: dts: qcom: sc8280xp: Add label property to vadc channel nodes (bsc#1012628). - arm64: dts: qcom: sm6375: Add missing power-domain-named to CDSP (bsc#1012628). - arm64: dts: qcom: sm8450: correct WSA2 assigned clocks (bsc#1012628). - arm64: dts: qcom: sm8450: Mark UFS controller as cache coherent (bsc#1012628). - power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition (bsc#1012628). - power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition (bsc#1012628). - wifi: mt76: do not run mt76_unregister_device() on unregistered hw (bsc#1012628). - wifi: mt76: connac: do not check WED status for non-mmio devices (bsc#1012628). - efi: earlycon: Reprobe after parsing config tables (bsc#1012628). - arm64: dts: imx8dxl-evk: Disable hibernation mode of AR8031 for EQOS (bsc#1012628). - arm64: dts: imx8dxl-evk: Fix eqos phy reset gpio (bsc#1012628). - ARM: dts: imx6sll: e70k02: fix usbotg1 pinctrl (bsc#1012628). - ARM: dts: imx6sll: e60k02: fix usbotg1 pinctrl (bsc#1012628). - ARM: dts: imx6sl: tolino-shine2hd: fix usbotg1 pinctrl (bsc#1012628). - arm64: dts: imx8mn: specify #sound-dai-cells for SAI nodes (bsc#1012628). - arm64: dts: imx93: add missing #address-cells and #size-cells to i2c nodes (bsc#1012628). - NFS: Fix /proc/PID/io read_bytes for buffered reads (bsc#1012628). - NFS: Correct timing for assigning access cache timestamp (bsc#1012628). - xsk: Add missing overflow check in xdp_umem_reg (bsc#1012628). - iavf: fix inverted Rx hash condition leading to disabled hash (bsc#1012628). - iavf: fix non-tunneled IPv6 UDP packet type and hashing (bsc#1012628). - iavf: do not track VLAN 0 filters (bsc#1012628). - intel/igbvf: free irq on the error path in igbvf_request_msix() (bsc#1012628). - igbvf: Regard vf reset nack as success (bsc#1012628). - igc: fix the validation logic for taprio's gate list (bsc#1012628). - i2c: imx-lpi2c: check only for enabled interrupt flags (bsc#1012628). - i2c: mxs: ensure that DMA buffers are safe for DMA (bsc#1012628). - i2c: hisi: Only use the completion interrupt to finish the transfer (bsc#1012628). - scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate() (bsc#1012628). - nfsd: don't replace page in rq_pages if it's a continuation of last page (bsc#1012628). - net: dsa: b53: mmap: fix device tree support (bsc#1012628). - net: usb: smsc95xx: Limit packet length to skb->len (bsc#1012628). - qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info (bsc#1012628). - xirc2ps_cs: Fix use after free bug in xirc2ps_detach (bsc#1012628). - net: phy: Ensure state transitions are processed from phy_stop() (bsc#1012628). - net: mdio: fix owner field for mdio buses registered using device-tree (bsc#1012628). - net: mdio: fix owner field for mdio buses registered using ACPI (bsc#1012628). - net: stmmac: Fix for mismatched host/device DMA address width (bsc#1012628). - thermal/drivers/mellanox: Use generic thermal_zone_get_trip() function (bsc#1012628). - mlxsw: core_thermal: Fix fan speed in maximum cooling state (bsc#1012628). - drm/i915/fbdev: lock the fbdev obj before vma pin (bsc#1012628). - drm/i915/mtl: Disable MC6 for MTL A step (bsc#1012628). - drm/i915/guc: Rename GuC register state capture node to be more obvious (bsc#1012628). - drm/i915/guc: Fix missing ecodes (bsc#1012628). - drm/i915/gt: perform uc late init after probe error injection (bsc#1012628). ... changelog too long, skipping 340 lines ... - commit c9a94ac ==== ldb ==== Version update (2.7.1 -> 2.7.2) Subpackages: libldb2 libldb2-32bit python3-ldb - CVE-2023-0614: Access controlled AD LDAP attributes can be discovered (bso#15270); (bsc#1209485). ==== libgarcon ==== Version update (4.18.0 -> 4.18.1) Subpackages: libgarcon-1-0 libgarcon-data libgarcon-lang - Update to version 4.18.1 * garcon-gtk: Add missing lock when filling the GtkMenu * Wait for any async operation to finish before releasing locks * Use GIcons for menu icons instead of loading surfaces * Revert "garcon-gtk: Fix menu icon blurriness when UI scale factor != 1" * Revert "Load icons using icon theme scaling functions correctly" * garcon-gtk: Properly update GtkMenu is_populated state * Load icons using icon theme scaling functions correctly * Translation Updates ==== libheif ==== Version update (1.15.1 -> 1.15.2) Subpackages: gdk-pixbuf-loader-libheif libheif1 - update to 1.15.2 * Fixes an incompatibility with AOM v3.6.0. * A couple of smaller fixes. ==== libxcrypt ==== Subpackages: libcrypt1 libcrypt1-32bit libxcrypt-devel - Enable LTO now (boo#1138833) and use FAT LTO objects for static libs. ==== mutter ==== Version update (44.0+8 -> 44.0+18) Subpackages: mutter-lang - Update to version 44.0+18: + backends: Use meta_gamma_lut_new_sized() in a few more places + compositor: - Drop anchor_window_pos field from MetaWindowDrag - Use relative anchor coordinates for window drags - Avoid use of variable during resize + onscreen/native: Avoid freezing the frame clock on failed cursor commits + window-actor-x11: Check array bounds before accessing array + build: Don't disable checks in release builds + tests: Use a more interoperable path to bash + backend/nested: Ignore setting pointer constraint + Updated translations. - Clean up spec, drop old disabled and unneeded pkgconfig(gtk+-3.0) BuildRequires and move disabled patches to SLE. ==== nfs-utils ==== Subpackages: libnfsidmap1 nfs-client nfs-kernel-server - Add 0007-mount.nfs-always-include-mountpoint-or-spec-if-error.patch boo#1157881 - Add 0008-nfsd.man-fix-typo-in-section-on-scope.patch bsc#1209859 - Allow scope to be sed in sysconfig: NFSD_SCOPE - Add explicit pkgconfig(libkeyutils) BuildRequires: nfs-utils requires this for nfsv4 and we should not rely on the devel package being brought in by other deps. ==== samba ==== Version update (4.18.0+git.294.508b693e5c -> 4.18.1+git.298.4ccf830b2a4) Subpackages: libsamba-policy0-python3 samba-ad-dc-libs samba-ad-dc-libs-32bit samba-client samba-client-32bit samba-client-libs samba-client-libs-32bit samba-gpupdate samba-ldb-ldap samba-libs samba-libs-32bit samba-libs-python3 samba-python3 samba-winbind samba-winbind-libs samba-winbind-libs-32bit - Update to 4.18.1 * CVE-2023-0225: AD DC "dnsHostname" attribute can be deleted by unprivileged authenticated users. (bso#15276);(bsc#1209483). * CVE-2023-0614: Access controlled AD LDAP attributes can be discovered (bso#15270); (bsc#1209485). * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords in cleartext(bso#15315);(bsc#1209481). * ldb wildcard matching makes excessive allocations; (bso#15331). * large_ldap test is inefficient; (bso#15332). ==== snapper ==== Subpackages: libsnapper6 snapper-zypp-plugin - use xz compression instead of bzip2 for source tar (gh#openSUSE/snapper#277) ==== thunar-plugin-archive ==== Version update (0.5.0 -> 0.5.1) Subpackages: thunar-plugin-archive-lang - Update to version 0.5.1 * Fix use-after-free crash in "tap_provider_child_watch_destroy" * build: Add GLib requirement * build: Fix autotools warnings * Use generic package icon name in dialog header * Translation Updates ==== timezone ==== Version update (2023b -> 2023c) - timezone update 2023c: * Reverts changes for 2023 Lebanon DST change to 2023a data ==== timezone-java ==== Version update (2023b -> 2023c) - timezone update 2023c: * Reverts changes for 2023 Lebanon DST change to 2023a data ==== util-linux ==== Subpackages: libblkid1 libblkid1-32bit libfdisk1 libmount1 libmount1-32bit libsmartcols1 libuuid1 libuuid1-32bit util-linux-lang - login.pamd, remote.pamd: include postlogin-* rules - runuser.pamd, su.pamd: Include common-session-nonlogin instead of common-session ==== util-linux-systemd ==== - login.pamd, remote.pamd: include postlogin-* rules - runuser.pamd, su.pamd: Include common-session-nonlogin instead of common-session ==== vim ==== Version update (9.0.1392 -> 9.0.1430) Subpackages: vim-data vim-data-common - Updated to version 9.0.1430, fixes the following problems * The included xdiff code is a bit outdated. * Lean files are not recognized. * Build failure because SIZE_MAX is not defined. * Nu files are not recognized. * Sage files are not recognized. * WebAssembly Interface Type files are not recognized. * Unused macros are defined. * "wat" and "wast" files are one filetype. * Indent wrong after "export namespace" in C++. * Warning for uninitialized variable. (Tony Mechelynck) * Cursor in wrong position when leaving insert mode. * Invalid memory access when ending insert mode. * Livebook files are not recognized. - Create a standalone package for xxd * This is used by non-vim tools too - Updated to version 9.0.1418, fixes the following problems - fixes CVE-2023-1355 * Using NULL pointer with nested :open command. * Cairo files are not recognized. * Unx Tal files are not recognized. * Odin files are not recognized. * sort(list, 'N') does not work in Vim9 script context. * Highlight for popupmenu kind and extra cannot be set. * Profile test repeats the headers many times. * Highlight test script has a few problems. * find_file_in_path() is not reentrant. * Condition is always true. * Crash when using null_class. * Unused variables and functions. * Compilation error with some compilers. * Missing check for out-of-memory. * ILE RPG files are not recognized. * TableGen files are not recognized. * QMLdir files are not recognized. * Racket files are recognized as scheme. * Accuracy of profiling is not optimal. * Pony files are not recognized. * Compiler warning for unused variable. * <M-S-x> in Kitty does not use the Shift modifier. * Crystal files are not recognized. * Crash when collection is modified when using filter(). * ESDL files are not recognized. * The included xdiff code is a bit outdated. ==== xen ==== Version update (4.17.0_04 -> 4.17.0_06) Subpackages: xen-libs xen-tools xen-tools-domU - Upstream bug fixes (bsc#1027519) 63a03b73-VMX-VMExit-based-BusLock-detection.patch 63a03ba6-VMX-INTR_SHADOW_NMI-helper.patch 63a03bce-VMX-Notify-VMExit.patch 63e53ac9-x86-CPUID-leaves-7-1-ecx-edx.patch 63e53ac9-x86-disable-CET-SS-when-fractured-updates.patch 63f4d045-x86-ucode-AMD-apply-early-on-all-threads.patch 63fe06e0-x86-ucode-AMD-apply-late-on-all-threads.patch 641041e8-VT-d-constrain-IGD-check.patch 6419697d-AMD-IOMMU-no-XT-x2APIC-phys.patch - Use "proper" upstream backports: 640f3035-x86-altp2m-help-gcc13.patch 64104238-bunzip-gcc13.patch 64199e0c-x86-shadow-account-for-log-dirty-mode.patch 64199e0d-x86-HVM-bound-number-of-pca-regions.patch 64199e0e-x86-HVM-serialize-pca-list-manipulation.patch 64199e0f-x86-spec-ctrl-defer-CR4_PV32_RESTORE-for-CSTAR.patch - ... in place of: bunzip-gcc13.patch altp2m-gcc13.patch xsa427.patch xsa428-1.patch xsa428-2.patch xsa429.patch - bsc#1209245 - fix host-assisted kexec/kdump for HVM domUs libxl.fix-guest-kexec-skip-cpuid-policy.patch - bsc#1209017 - VUL-0: CVE-2022-42332: xen: x86 shadow plus log-dirty mode use-after-free (XSA-427) xsa427.patch - bsc#1209018 - VUL-0: CVE-2022-42333,CVE-2022-42334: xen: x86/HVM pinned cache attributes mis-handling (XSA-428) xsa428-1.patch xsa428-2.patch - bsc#1209019 - VUL-0: CVE-2022-42331: xen: x86: speculative vulnerability in 32bit SYSCALL path (XSA-429) xsa429.patch ==== xfce4-panel ==== Version update (4.18.2 -> 4.18.3) Subpackages: libxfce4panel-2_0-4 xfce4-panel-lang xfce4-panel-restore-defaults - Update to version 4.18.3 * launcher: Show action menu also when there are several items * Fix memory management of vala generated plugins * panel: Rephrase "Don't reserve space on borders" (V2) * panel: Make property migration generic * launcher: Avoid "no trigger event" warning when showing the menu * launcher: Guard access to the plugin menu GdkWindow * libxfce4panel: Unregister menu also on GtkWidget::hide * panel: Do not reset output name if a monitor does not have a model name * libxfce4panel: Fix memory management of source for menu positioning * panel: Delay removal of ExternalPlugin to prevent use-after-free * systray: Cancel any async D-Bus operation in finalize() * tasklist: Do not try to resolve /proc/pid/exe to launch new instance * Translation Updates ==== xfce4-pulseaudio-plugin ==== Version update (0.4.5 -> 0.4.6) Subpackages: xfce4-pulseaudio-plugin-lang - Update to version 0.4.6 * Fix changing default sink and source devices * Fix flickering mic icon when recording application is connected * Avoid critical from xfce4-notifyd if gauge_value > 100 * Display maximum volume of all channels instead of volume of left channel * Add recording base volume indicator * Control mic volume/mute when mouse cursor is over the mic icon * Lower warning level * Improve volume notifications settings * Show volume notifications from hotkeys according to comment * Don't set negative volume from hotkeys * Use correct variable for "volume-mic-changed" signal ID * Don't force set the default device * Set recording icon according to recording volume level * Show source monitor if it is a default source * Check for recording state on context ready * Allow volume step configuration in dialog (gxo#panel-plugins/xfce4-pulseaudio-plugin#28) * wnck: Add missing LIBS/CFLAGS in Makefile * wnck: Use Libxfce4windowing when available * wnck: Guard X11 code path to prevent crash on Wayland * wnck: Improve RaiseWnck a bit * Fix memory leak * cleanup: Fix formatting * Fix blurry media player icon from file when UI scale > 1 * Fix blurry icons in prefs dialog when UI scale factor > 1 * Use "logo-icon-name" instead of "logo" in about dialog * Do not override fatal log level * build: Bump GLib minimum required to 2.44 * Translation Updates ==== xfce4-session ==== Version update (4.18.1 -> 4.18.2) Subpackages: xfce4-session-lang - Update to version 4.18.2 * manager: Fix GQueue memory management * Fix Xfconf memory management * Update bug report address * Fix suspend/hibernation bug on ConsoleKit2 (Fixes #164)