Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20210701 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: arpwatch blueberry (1.4.2 -> 1.4.4) chrony python-gst (1.18.3 -> 1.18.4) remmina (1.4.18 -> 1.4.19) system-users systemd (246.13 -> 248.3) sysuser-tools (3.0 -> 3.1) yast2 (4.4.9 -> 4.4.14) === Details === ==== arpwatch ==== - Fixed local privilege escalation from runtime user to root (bsc#1186240, CVE-2021-25321) - Added service_* calls for the @.service file ==== blueberry ==== Version update (1.4.2 -> 1.4.4) Subpackages: blueberry-lang - Update to 1.4.4 * l10n: Update translations ==== chrony ==== Subpackages: chrony-pool-openSUSE - Add now working CONFIG parameter to sysusers generator ==== python-gst ==== Version update (1.18.3 -> 1.18.4) - Update to version 1.18.4: + No changes ==== remmina ==== Version update (1.4.18 -> 1.4.19) Subpackages: remmina-lang remmina-plugin-rdp remmina-plugin-secret remmina-plugin-vnc remmina-plugin-xdmcp - App-Indicator is now required - Added upstream mark-appindicator-as-required.patch to see better error messages when appindicator is not around - Update to 1.4.19 * Fix Freerdp Git Revision !2277 * UI improvements and cleanup !2278 * Desktop integration for the Remmina SNAP !2279 * Add process-control to the remmina snap !2276 * Adding SSH_AGENT support to the snap package !2280 * Adding option to disable smooth scrolling !2281 * Scrolled Viewport: use viewport_motion_handler as the only timeout indicator !2282 * Adding TCP redirection through rdp2tcp !2283 * Added setting for RDP number of reconnect attempts !2284 * Add RDP reconnect interrupt on window close, fix crash introduced with 7c13b918. Should fix #2079 (closed) !2286 * Removing GtkStatusIcon as deprecated !2285 * Adding advanced option to share multiple folders !2287 * Profile list grabs the focus when search is hidden !2288 ==== system-users ==== Subpackages: system-group-hardware system-group-kvm system-group-libvirt system-group-wheel system-user-bin system-user-daemon system-user-ftp system-user-games system-user-lp system-user-mail system-user-man system-user-news system-user-nobody system-user-qemu system-user-tftp system-user-tss system-user-upsd system-user-uucp system-user-vscan system-user-wwwrun - Add default hardware group for 'sgx' enclave access Since udev v248, a default rule for /dev/sgx_enclave is provided to give rw access to the new group hopefully making 'sgx' the standard group name for such devices. - Add third argument to sysusers_generate_pre calls to allow admin overrides with systemd-sysusers ==== systemd ==== Version update (246.13 -> 248.3) Subpackages: libsystemd0 libsystemd0-32bit libudev-devel libudev1 libudev1-32bit systemd-32bit systemd-container systemd-doc systemd-lang systemd-logger systemd-sysvinit udev - Import commit e9a23d9e064c2e7ac21a1b984d116bcf15327e63 8dd19c6ee3 sd-device: allow to read sysattr which contains embedded NUL d52409e5fe pid1: only add a Wants= type dependency on /tmp when PrivateTmp=yes (bsc#1181970 - Import commit fcdb8dce591db2f5fc3c1e3eeb7abe9a2090b401 aa2d840a3b compat-rules: fix warning: "label ?out? defined but not used" in path_id_compat.c - Restore 61-persistent-storage-compat.rules that was mistakenly dropped during the merge of v248. - Create /run/lock/subsys again (bsc#1187292) The creation of this directory was mistakenly dropped when 'filesystem' package took the initialization of the generic paths over. Paths under /run/lock are still managed by systemd for lack of better place. - Drop systemd's dependency on udev (jsc#PM-2677) In some environments (i.e. containers) udev is usually not necessary but pulls in unnecessary packages. - Now that chkconfig/insserv are history, let's implement the strict minimum in systemd-sysv-install to enable/disable SysV init scripts (bsc#1186595 bsc#1186359) Indeed there's no much point in dropping SysV support completely until upstream will do especially since 3rd party applications such as vmware still rely on it, see bsc#1186359). - Allow the sysusers config files shipped by systemd rpms to be overriden during system installation (bsc#1171962) - While at it, add a comment to explain why we don't use %sysusers_create in %pre and why it should be safe in %post. - udev requires systemd in its %post (bsc#1185958) udevadm, called in udev's %post, requires libsystemd-shared-248.so. - Restore all "License:" tags udev uses a different license (GPL-2.0-only) than the main package and "osc service localrun format_spec_file" has the good taste to restore the license tags for all other subpackages if one of the subpackage tag differs. - Expect 644 permissions for /usr/lib/udev/compat-symlink-generation (bsc#1185807) - Spec file minor cleanups: - Drop all "Group:" tags as they are deprecated. - Drop "License:" tags from all subpackages and make it inherited from the main package. - Drop "%bcond_with parentpathid" as it's not used. - Introduce subpackage systemd-tests This subpackage is mainly used before submitting a new version of the systemd packages. As such it's not intended for regular users hence can be removed/renamed at any time. One might wonder why the unit tests are not executed during package builds (%check)... the reason is that the environment used to build package (chroot) is too limited and therefore only a subset of the unit tests would be executed in this environment. To disable the build of the subpackage, use "--without=tests". - Add 0001-Revert-core-prevent-excessive-proc-self-mountinfo-pa.patch A temporary patch until https://github.com/systemd/systemd/issues/19464 is solved. - Import commit bc08011f04ac4f12569ec05965149f665a0b110b (merge of v248.3) For a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/6f5c11b28f5739b901390f22c2bf4c00... - Import commit 6f5c11b28f5739b901390f22c2bf4c003cadedaa (merge of v248.2) For a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/e5f93c9d2e9e26dd0dff430c4c072a54... - Upgrade to v248 (commit 5d3d934a5c2f4593207497db94e6f313348e89e7) See https://github.com/openSUSE/systemd/blob/SUSE/v248/NEWS for details. - A couple runtime dependencies on libraries are now tracked manually (with Recommends:) due to the fact that some symbols of these libs are dynamically loaded with dlopen() (heck!) - oomd is left disablde for now - pam configuration file 'systemd-user' is now shipped in /usr/etc/pam.d - Rebased 0001-conf-parser-introduce-early-drop-ins.patch 0003-strip-the-domain-part-from-etc-hostname-when-setting.patch 0006-sysv-generator-add-back-support-for-SysV-scripts-for.patch - Dropped 0004-tmpfiles-support-exclude-statements-based-on-file-ow.patch as it is SLE specific. - Clean systemd-experimental up: - Enclose "%package/%descriptoin experimental" within a "%if %experimental/%endif" block condition - List the build requirements in the sub-package instead of listing them in the main package. - Enable support for fido2, pwquality and qrencode in the home stuff - Improve the package description ==== sysuser-tools ==== Version update (3.0 -> 3.1) - Bump version up to 3.1. The --replace parameter only appeared in systemd 238, so we need to ensure to get the update order correct for sysuser-generate when using the 3rd command line parameters: * systemd -> sysuser-tools -> system-{user|group}-FOO. - Add dependency on systemd >=238 if systemd is installed to sysuser-shadow - update sysuser_requires to request sysuser-shadow 3.1 - Support systemd-sysusers --replace=/usr/lib/sysusers.d/ option - sysusers-generate-pre: only use first argument for grep - sysusers2shadow.sh: use "run" prefix for systemd-sysusers call - macros.sysusers: fix typo ==== yast2 ==== Version update (4.4.9 -> 4.4.14) Subpackages: yast2-logs - Y2Issues::Issue: renamed severity "fatal" to "error", to be more consistent with other parts of (Auto)YaST - Added options to configure the behavior of Y2Issues.report (related to jsc#PM-2620 and bsc#1166743) - 4.4.14 - Y2Issues::List: Add methods size and concat (related to bsc#1181295). - 4.4.13 - add riscv64 architecture helper (jsc#PM-2612) - 4.4.12 - Yast2::AutoClient.run: Ensure that Reset, Read, and SetModified return nil regardless of their implementation, to prevent a crash in the component system (bsc#1187233) - 4.4.11 - Ignore sysctl configuration files that do not have the .conf extension. The only exception are kernel files (/boot/sysctl.conf-*) (bsc#1187018). - 4.4.10