Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20240321 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ImageMagick aaa_base (84.87+git20240318.3e4640d -> 84.87+git20240202.9526d46) bind (9.18.24 -> 9.18.25) boost-base boost-extra dracut (059+suse.557.g8a62bf73 -> 059+suse.560.g145cde90) ffmpeg-6 gdb libffi (3.4.4 -> 3.4.6) libnss_usrfiles (2.27 -> 2.27.1) python-netaddr (0.10.1 -> 1.2.1) strace (6.7 -> 6.8) unbound (1.19.2 -> 1.19.3) unixODBC wicked === Details === ==== ImageMagick ==== Subpackages: libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - allow delegates to be executed, was disabled by default policy - modified patches % ImageMagick-configuration-SUSE.patch (refreshed) % ImageMagick-library-installable-in-parallel.patch (refreshed) ==== aaa_base ==== Version update (84.87+git20240318.3e4640d -> 84.87+git20240202.9526d46) Subpackages: aaa_base-extras ==== bind ==== Version update (9.18.24 -> 9.18.25) Subpackages: bind-doc bind-utils - Update to release 9.18.25 Bug Fixes: * A regression in cache-cleaning code enabled memory use to grow significantly more quickly than before, until the configured max-cache-size limit was reached. This has been fixed. * Using rndc flush inadvertently caused cache cleaning to become less effective. This could ultimately lead to the configured max-cache-size limit being exceeded and has now been fixed. * The logic for cleaning up expired cached DNS records was tweaked to be more aggressive. This change helps with enforcing max-cache-ttl and max-ncache-ttl in a timely manner. [GL #4591] * It was possible to trigger a use-after-free assertion when the overmem cache cleaning was initiated. This has been fixed. ==== boost-base ==== Subpackages: boost-license1_84_0 libboost_filesystem1_84_0 libboost_filesystem1_84_0-x86-64-v3 libboost_iostreams1_84_0 libboost_iostreams1_84_0-x86-64-v3 libboost_locale1_84_0 libboost_locale1_84_0-x86-64-v3 libboost_program_options1_84_0 libboost_program_options1_84_0-x86-64-v3 libboost_thread1_84_0 libboost_thread1_84_0-x86-64-v3 - Avoid BuildRequire of 'gcc-c++ > 5' which is only a redundant check. This interferes with Substitute. ==== boost-extra ==== Subpackages: libboost_python-py3-1_84_0 libboost_python-py3-1_84_0-x86-64-v3 - Avoid BuildRequire of 'gcc-c++ > 5' which is only a redundant check. This interferes with Substitute. ==== dracut ==== Version update (059+suse.557.g8a62bf73 -> 059+suse.560.g145cde90) - Update to version 059+suse.560.g145cde90: * fix(systemd-pcrphase): rename systemd-pcrphase binary to systemd-pcrextend ==== ffmpeg-6 ==== Subpackages: libavcodec60 libavfilter9 libavformat60 libavutil58 libpostproc57 libswresample4 libswscale7 - Let the ffmpeg-6 main program be combinable with ffmpeg-6-mini-libs ==== gdb ==== - Avoid using a %gcc macro to support using gcc 4.8 for building on SLE11. Use the regular language compilers for testing. ==== libffi ==== Version update (3.4.4 -> 3.4.6) Subpackages: libffi8 libffi8-32bit - Add patches to fix BTI on aarch64: * 830.patch - Update to 3.4.6: * Fix long double regression on mips64 and alpha. - Update to 3.4.5: * Add support for wasm32. * Add support for aarch64 branch target identification (bti). * Add support for ARCv3: ARC32 & ARC64. * Add support for HPPA64, and many HPPA fixes. * Add support for Haikuos on PowerPC. * Fixes for AIX, loongson, MIPS, power, sparc64, and x86 Darwin. - Drop upstreamed patches: * 808.patch * 810.patch ==== libnss_usrfiles ==== Version update (2.27 -> 2.27.1) - Update to version 2.27.1 - Cleanup prototypes ==== python-netaddr ==== Version update (0.10.1 -> 1.2.1) - Update to 1.2.1: * Fix bad version 1.2.0 upload to PyPI – now yanked. No changes to the package. - 1.2.0: * Add CLI tool subcommand to display cli-network-info. * Support running interactive-shell without IPython installed. * Explicitly raise TypeError is a non-string value is passed to valid_ipv4 or valid_ipv6. - 1.1.0: * Add the required Python version to the package metadata (#365). * Add expand_partial_ipv4_address to the public API. * Fix IPNetwork(...) in IPRange(...) false negatives (#157). * Fix a few IPNetwork slicing edge cases (#214). * Fix support for partial IP addresses accidentally left in IPNetwork in 1.0.0. * Fixed an incorrect license classifier in the package metadata. - 1.0.0: * Removed: * Drop support for Python versions lower than 3.7. * Remove the flag shorthands: N, P and Z. Use NOHOST, INET_PTON and ZEROFILL instead. * Remove abbreviated CIDR format support in IPNetwork (implicit_prefix=True), use cidr_abbrev_to_verbose if you need this behavior. * Remove the IPAddress.is_private method. * Changed: * Stop accepting leading zeros when parsing IPv4 addresses in INET_PTON mode (it's been allowed on some platforms). * Stop parsing IPv4 addresses permissively (inet_aton()-like) by default. * Apply the two changes above to valid_ipv4 as well. * Update the address databases to the 2024-02-10 versions. * Fixed: * Return False instead of raising AddrFormatError when an empty string is passed to valid_ipv4 or valid_ipv6. * Fix handling of dialect provided to EUI during copy-construction. ==== strace ==== Version update (6.7 -> 6.8) - Update to strace 6.8 * Renamed --stack-traces to --stack-trace for consistency. Old option is retained for backwards compatibility. * Implemented --stack-trace-frame-limit=N option for configuring the limit of the number of printed backtrace frames. * Implemented decoding of statmount, listmount, lsm_get_self_attr, lsm_set_self_attr, and lsm_list_modules syscalls. * Implemented decoding of setsockopt(TCP_AO_ADD_KEY). * Updated decoding of landlock_create_ruleset and landlock_add_rule syscalls. * Updated decoding of SMC_DIAG_DMBINFO netlink attribute. * Updated decoding of UBI_IOCATT ioctl command. * Enhanced decoding of mount attributes of fsmount and mount_setattr syscalls. * Updated lists of BPF_*, KEXEC_*, KVM_*, PERF_*, SOL_*, STATX_*, UFFD_*, and V4L2_* constants. * Updated lists of ioctl commands from Linux 6.8. ==== unbound ==== Version update (1.19.2 -> 1.19.3) Subpackages: libunbound8 unbound-anchor - Update to 1.19.3: * Features: - Merge PR #973: Use the origin (DNAME) TTL for synthesized CNAMEs as per RFC 6672. * Bug Fixes - Fix unit test parse of origin syntax. - Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer systems. - Fix #964: config.h.in~ backup file in release tar balls. - Merge #968: Replace the obsolescent fgrep with grep -F in tests. - Merge #971: fix 'WARNING: Message has 41 extra bytes at end'. - Fix #969: [FR] distinguish Do53, DoT and DoH in the logs. - Fix dnstap that assertion failed on logging other than UDP and TCP traffic. It lists it as TCP traffic. - Fix to sync the tests script file common.sh. - iana portlist update. - Updated IPv4 and IPv6 address for b.root-servers.net in root hints. - Update test script file common.sh. - Fix tests to use new common.sh functions, wait_logfile and kill_from_pidfile. - Fix #974: doc: default number of outgoing ports without libevent. - Merge #975: Fixed some syntax errors in rpl files. - Fix root_zonemd unit test, it checks that the root ZONEMD verifies, now that the root has a valid ZONEMD. - Update example.conf with cookie options. - Merge #980: DoH: reject non-h2 early. To fix #979: Improve errors for non-HTTP/2 DoH clients. - Merge #985: Add DoH and DoT to dnstap message. - Fix #983: Sha1 runtime insecure change was incomplete. - Remove unneeded newlines and improve indentation in remote control code. - Merge #987: skip edns frag retry if advertised udp payload size is not smaller. - Fix unit test for #987 change in udp1xxx retry packet send. - Merge #988: Fix NLnetLabs#981: dump_cache truncates large records. - Fix to link with -lcrypt32 for OpenSSL 3.2.0 on Windows. - Fix to link with libssp for libcrypto and getaddrinfo check for only header. Also update crosscompile to remove ssp for 32bit. - Merge #993: Update b.root-servers.net also in example config file. - Update workflow for ports to use newer openssl on windows compile. - Fix warning for windres on resource files due to redefinition. - Fix for #997: Print details for SSL certificate failure. - Update error printout for duplicate trust anchors to include the trust anchor name (relates to #920). - Update message TTL when using cached RRSETs. It could result in non-expired messages with expired RRSETs (non-usable messages by Unbound). - Merge #999: Search for protobuf-c with pkg-config. - Fix #1006: Can't find protobuf-c package since #999. - Fix documentation for access-control in the unbound.conf man page. - Merge #1010: Mention REFUSED has the TC bit set with unmatched allow_cookie acl in the manpage. It also fixes the code to match the documentation about clients with a valid cookie that bypass the ratelimit regardless of the allow_cookie acl. - Document the suspend argument for process_ds_response(). - Move github workflows to use checkoutv4. - Fix edns subnet replies for scope zero answers to not get stored in the global cache, and in cachedb, when the upstream replies without an EDNS record. - Fix for #1022: Fix ede prohibited in access control refused answers. - Fix unbound-control-setup.cmd to use 3072 bits so that certificates are long enough for newer OpenSSL versions. - Fix TTL of synthesized CNAME when a DNAME is used from cache. - Fix unbound-control-setup.cmd to have CA v3 basicConstraints, like unbound-control-setup.sh has. ==== unixODBC ==== - bsc#1221709: Fix build with gcc14 Add unixODBC-gcc14.patch ==== wicked ==== Subpackages: wicked-service - hide secrets in debug log (bsc#1221194) [+ 0003-move-all-attribute-definitions-to-compiler-h.patch] [+ 0004-hide-secrets-in-debug-log-bsc-1221194.patch]