Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20230329 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: Mesa (23.0.0 -> 23.0.1) Mesa-drivers (23.0.0 -> 23.0.1) PackageKit-Qt5 (1.1.0 -> 1.1.1) bubblewrap (0.7.0 -> 0.8.0) ceph (16.2.11.62+gce6291a3463 -> 16.2.11.65+g8b7e6fc0182) dmidecode (3.4 -> 3.5) fwupd-efi (1.2 -> 1.3) gnome-tweaks (42.beta -> 42.beta+60) gupnp-igd iproute2 libcap libeconf (0.5.1 -> 0.5.2) libostree (2023.1 -> 2023.2) libstorage-ng (4.5.87 -> 4.5.88) mtools (4.0.42 -> 4.0.43) openssl-1_1 orca (44.rc -> 44.0) pulseaudio python-charset-normalizer (3.0.1 -> 3.1.0) python-cryptography (39.0.2 -> 40.0.1) python-gobject (3.44.0 -> 3.44.1) python-msgpack (1.0.4 -> 1.0.5) python-pexpect python-pyOpenSSL (23.0.0 -> 23.1.1) python-pytz (2022.7.1 -> 2023.2) snapper spandsp systemd-presets-branding-MicroOS tracker-miners webkit2gtk3 webkit2gtk3-soup2 xdg-user-dirs-gtk yast2-trans (84.87.20230318.5548fe53da -> 84.87.20230324.a3dfeee0c1) zchunk (1.2.4 -> 1.3.0) === Details === ==== Mesa ==== Version update (23.0.0 -> 23.0.1) Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - Update to version 23.0.1 * bug fix release which fixes bugs found since Mesa 23.0.0 - supersedes U_glx-fix-indirect-initialization-crash.patch ==== Mesa-drivers ==== Version update (23.0.0 -> 23.0.1) Subpackages: Mesa-dri Mesa-gallium Mesa-libva libxatracker2 - Update to version 23.0.1 * bug fix release which fixes bugs found since Mesa 23.0.0 - supersedes U_glx-fix-indirect-initialization-crash.patch ==== PackageKit-Qt5 ==== Version update (1.1.0 -> 1.1.1) - Update to 1.1.1 * Add explicit CMake option to control Qt major version * Return if we can't handle the transaction role * Transaction: Implement all methods * Read the Sender transaction property * Apply stricter compiler flags when building the library - Rebase 0001-Fix-PackageKit-not-emitting-network-state-changed-si.patch ==== bubblewrap ==== Version update (0.7.0 -> 0.8.0) Subpackages: bubblewrap-zsh-completion - update to v0.8.0: * Add --disable-userns option to prevent the sandbox from creating its own nested user namespace * Add --assert-userns-disabled option to check that an existing userns was created with --disable-userns * Give a clearer error message if the kernel doesn't have CONFIG_SECCOMP and CONFIG_SECCOMP_FILTER ==== ceph ==== Version update (16.2.11.62+gce6291a3463 -> 16.2.11.65+g8b7e6fc0182) Subpackages: librados2 librbd1 - Update to 16.2.11-65-g8b7e6fc0182: + (bsc#1201088) test/librados: fix FTBFS on gcc 13 + (bsc#1208820) mgr/dashboard: allow to pass controls on iscsi disk create ==== dmidecode ==== Version update (3.4 -> 3.5) - arm-use-alignment-workaround.patch: Fix the massive build warnings on armv7l. - Update to upstream version 3.5: * Decode HPE OEM records 216, 224, 230, 238 and 242. * Fortify entry point length checks. * Add a --no-quirks option. * Drop the CPUID exception list. * Do not let --dump-bin overwrite an existing file. * Ensure /dev/mem is a character device file. * Obsoletes news-fix-typo.patch and dmioem-fix-segmentation-fault-in-dmi_hp_240_attr.patch. ==== fwupd-efi ==== Version update (1.2 -> 1.3) - Disable ix86 and arm32: shim doesn't build on these platforms - Update ARM-fixes.patch to current git copy to add checks for an incompatible crt0 - Add ARM-fixes.patch: multiple fixes for ARM EFI after binutils 2.38 - Remove arm32-short-wchar.patch: included in ARM-fixes.patch - Add arm32-short-wchar.patch: fix an issue where fwup_sbat.o had a different wchar length - Update to version 1.3: * Release fwupd-efi 1.3 * Fix a regression when applying updates on an HP M60 * Show the version when starting fwupd-efi * trivial: Update precommit versions to fix CI * meson: fix ARM system crt0 name * trivial: post release version bump - Add binutils-2.38-arm-objcopy.patch: use objcopy with ARM on binutils 2.38+ - Add binutils-2.38-arm-system-crt0.patch: system crt0 doesn't need to contain the SBAT section if we have binutils 2.38+ - Enable ARM and ix86 support ==== gnome-tweaks ==== Version update (42.beta -> 42.beta+60) Subpackages: gnome-tweaks-lang - Update to version 42.beta+60: + Removed libsoup mention. + data: Remove extension mentions. + appdata: Remove GNOME 3 mention. + Remove deprecated option for separate Lock screen wallpaper. + Updated translations. - Switch to git checkout via source service, explicit commit id. ==== gupnp-igd ==== - Add upstream patches to hopefully fix racy tests: + 2c413bbd8b9afc41648f21ad173f0caf81a5f98b.patch + bbe36b279e247cd8ec4ab00bcdf02178af8a99af.patch ==== iproute2 ==== Subpackages: iproute2-bash-completion - Delete xfrm-support-displaying-transformations-used-for-Mob.patch (mip6d-ng is abandoned too) ==== libcap ==== Subpackages: libcap2 libcap2-32bit - Enable LTO and add missing -ffat-lto-objects for the provided static libs. - Revert LTO again; it still breaks builds - Enable LTO as it works fine. ==== libeconf ==== Version update (0.5.1 -> 0.5.2) Subpackages: libeconf0 libeconf0-32bit - Update to version 0.5.2: * Fixed build for aarch64 and gcc13. * Making the output verbose when a test fails. * Fixed a stack-buffer-overflow vulnerability in "econf_writeFile" function. * Fixed a stack-buffer-overflow vulnerability in "read_file" function. * Added new feature: econf_set_conf_dirs (const char **dir_postfix_list) Sets a list of directory structures (with order) which describes the directories in which the files have to be parsed. E.G. with the given list: {"/conf.d/", ".d/", "/", NULL} files in following directories will be parsed: "<default_dirs>/<project_name>.<suffix>.d/" "<default_dirs>/<project_name>/conf.d/" "<default_dirs>/<project_name>.d/" "<default_dirs>/<project_name>/" The entry "<default_dirs>/<project_name>.<suffix>.d/" will be added automatically. * General code cleanup. ==== libostree ==== Version update (2023.1 -> 2023.2) Subpackages: libostree-1-1 - Update to version 2023.2: + Fixes for recent GLibs introducing warnings around unset standard::size ==== libstorage-ng ==== Version update (4.5.87 -> 4.5.88) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - Translated using Weblate (Polish) (bsc#1149754) - 4.5.88 ==== mtools ==== Version update (4.0.42 -> 4.0.43) - update to 4.0.43: * Fix root directory test in mattrib * -b BiosDisk flag for mformat to allow setting physdrive to a user-specified value * Clearer error message in mformat when trying to mformat a disk whose total size is not known * Make recursive copy more consistent * Trailing slash now always implies target should be a directory ==== openssl-1_1 ==== Subpackages: libopenssl1_1 - Security Fix: [CVE-2023-0464, bsc#1209624] * Excessive Resource Usage Verifying X.509 Policy Constraints * Add openssl-CVE-2023-0464.patch ==== orca ==== Version update (44.rc -> 44.0) Subpackages: orca-lang - Update to version 44.0: + Updated translations. ==== pulseaudio ==== Subpackages: libpulse-mainloop-glib0 libpulse0 pulseaudio-bash-completion pulseaudio-gdm-hooks pulseaudio-lang pulseaudio-module-bluetooth pulseaudio-module-gsettings pulseaudio-module-x11 pulseaudio-module-zeroconf pulseaudio-setup pulseaudio-utils pulseaudio-zsh-completion system-user-pulse - Enable LTO as the GCC issue is fixed with gcc13 (boo#1133278). ==== python-charset-normalizer ==== Version update (3.0.1 -> 3.1.0) - update to 3.1.0: * Argument `should_rename_legacy` for legacy function `detect` and disregard any new arguments without errors (PR #262) * Removed Support for Python 3.6 (PR #260) * Optional speedup provided by mypy/c 1.0.1 ==== python-cryptography ==== Version update (39.0.2 -> 40.0.1) - update to 40.0.1: * Support for Python 3.6 is deprecated and will be removed in the next release. * Deprecated the current minimum supported Rust version (MSRV) of 1.48.0. In the next release we will raise MSRV to 1.56.0. Users with the latest ``pip`` will typically get a wheel and not need Rust installed * Deprecated support for OpenSSL less than 1.1.1d. The next release of ``cryptography`` will drop support for older versions. * Deprecated support for DSA keys in :func:`~cryptography.hazmat.primitives.serialization.load_s sh_public_key` and :func:`~cryptography.hazmat.primitives.serialization.load_s sh_private_key`. * Deprecated support for OpenSSH serialization in :class:`~cryptography.hazmat.primitives.asymmetric.dsa.DSAP ublicKey` and :class:`~cryptography.hazmat.primitives.asymmetric.dsa.DSAP rivateKey`. * Added support for parsing SSH certificates in addition to public keys with :func:`~cryptography.hazmat.primitives.serialization.load_s sh_public_identity`. :func:`~cryptography.hazmat.primitives.serialization.load_s sh_public_key` continues to support only public keys. * Added support for generating SSH certificates with :class:`~cryptography.hazmat.primitives.serialization.SSHCe rtificateBuilder`. * Added :meth:`~cryptography.x509.Certificate.verify_directly_i ssued_by` to :class:`~cryptography.x509.Certificate`. * Added a check to :class:`~cryptography.x509.NameConstraints` to ensure that :class:`~cryptography.x509.DNSName` constraints do not contain any ``*`` wildcards. * Removed many unused CFFI OpenSSL bindings. This will not impact you unless you are using ``cryptography`` to directly invoke OpenSSL's C API. Note that these have never been considered a stable, supported, public API by ``cryptography``, this note is included as a courtesy. * The X.509 builder classes now raise ``UnsupportedAlgorithm`` instead of ``ValueError`` if an unsupported hash algorithm is passed. * Added public union type aliases for type hinting ==== python-gobject ==== Version update (3.44.0 -> 3.44.1) Subpackages: python310-gobject python310-gobject-Gdk python310-gobject-cairo - Update to version 3.44.1: + Fix tests with glib 2.76.x ==== python-msgpack ==== Version update (1.0.4 -> 1.0.5) - update to 1.0.5: * Fallback to compiler defines when __BYTE_ORDER is not available * Fix build error caused by ntohs, ntohl * Add python 3.11 wheels * fallback: Fix packing multidim memoryview * minor type in exception message ==== python-pexpect ==== - Skip test_interrupt, test_multiple_interrupts, test_existing_spawn when running in QEmu linux-user emulation ==== python-pyOpenSSL ==== Version update (23.0.0 -> 23.1.1) - update to 23.1.1: * Worked around an issue in OpenSSL 3.1.0 which caused `X509Extension.get_short_name` to raise an exception when no short name was known to OpenSSL. - update to 23.1.0: * ``cryptography`` maximum version has been increased to 40.0.x. * Add ``OpenSSL.SSL.Connection.DTLSv1_get_timeout`` and ``OpenSSL.SSL.Connection.DTLSv1_handle_timeout`` to support DTLS timeouts `#1180 ==== python-pytz ==== Version update (2022.7.1 -> 2023.2) - update to 2023.2: * Update to IANA 2023b ==== snapper ==== Subpackages: libsnapper6 snapper-zypp-plugin - enable SELinux (and allow to disable via conditional build) (bsc#1209515) - avoid some extra checks if SELinux is compile-time disabled ==== spandsp ==== - Enable LTO as it builds with now (boo#1136056). ==== systemd-presets-branding-MicroOS ==== - Remove tallow (package got dropped long ago) - Enable lastlog2-import ==== tracker-miners ==== Subpackages: tracker-miner-files tracker-miners-lang - Add 'tracker' to runtime dependencies (boo#1209737) ==== webkit2gtk3 ==== Subpackages: WebKitGTK-4.1-lang libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles - Add gcc13-fix.patch fix that handles invalid code as reported here: https://github.com/WebKit/WebKit/pull/11910. ==== webkit2gtk3-soup2 ==== Subpackages: WebKitGTK-4.0-lang libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 webkit2gtk-4_0-injected-bundles - Add gcc13-fix.patch fix that handles invalid code as reported here: https://github.com/WebKit/WebKit/pull/11910. ==== xdg-user-dirs-gtk ==== Subpackages: xdg-user-dirs-gtk-lang - Build with %optflags - Don't treat -Wcast-align as error ==== yast2-trans ==== Version update (84.87.20230318.5548fe53da -> 84.87.20230324.a3dfeee0c1) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20230324.a3dfeee0c1: * Translated using Weblate (Turkish) * Translated using Weblate (Turkish) * Translated using Weblate (Turkish) * Translated using Weblate (Turkish) * Translated using Weblate (Turkish) * Translated using Weblate (Turkish) * Translated using Weblate (Lithuanian) * Translated using Weblate (Lithuanian) * Translated using Weblate (Lithuanian) * Translated using Weblate (Lithuanian) * Translated using Weblate (Lithuanian) * Translated using Weblate (Lithuanian) * Translated using Weblate (Lithuanian) * Translated using Weblate (Lithuanian) * Translated using Weblate (Lithuanian) * Translated using Weblate (Lithuanian) * Translated using Weblate (Lithuanian) * Translated using Weblate (Lithuanian) * Translated using Weblate (Lithuanian) * Translated using Weblate (Lithuanian) * Translated using Weblate (Lithuanian) * Translated using Weblate (Lithuanian) * Translated using Weblate (Lithuanian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Javanese) * Translated using Weblate (Javanese) * Translated using Weblate (Javanese) * Translated using Weblate (Javanese) * Translated using Weblate (Javanese) * Translated using Weblate (Javanese) * Translated using Weblate (Javanese) * Translated using Weblate (Javanese) * Translated using Weblate (Javanese) * Translated using Weblate (Javanese) ==== zchunk ==== Version update (1.2.4 -> 1.3.0) - update to 1.3.0: * Add ZCK_NO_WRITE option to disable writing to a file * meson: Use global function in argp check