Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20220510 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: alsa-firmware apparmor bash emacs-apel (10.8 -> 10.8+80+g6947dc4) gcc (11 -> 12) gcc12 (12.0.1+git192423 -> 12.1.0+git27) gnome-packagekit jemalloc (5.2.1 -> 5.3.0) libapparmor libgusb (0.3.9 -> 0.3.10) libunwind lsof (4.94.0 -> 4.95.0) pcre2 pigz (2.6 -> 2.7) plymouth portmidi (2.0.2 -> 2.0.3) protobuf python-argon2-cffi (21.1.0 -> 21.3.0) python-importlib-metadata (4.8.2 -> 4.11.3) rsyslog (8.2204.0 -> 8.2204.1) systemd (250.4 -> 250.5) tiff vlgothic-fonts (20140801 -> 20200720) zlib-ng-compat === Details === ==== alsa-firmware ==== - refresh spec file - add gpg validation, use https ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-docs apparmor-parser apparmor-parser-lang apparmor-profiles apparmor-utils apparmor-utils-lang pam_apparmor pam_apparmor-32bit python3-apparmor - Add python310-help-mr848.patch so that Tumbleweed can switch python3 to Python 3.10 (https://gitlab.com/apparmor/apparmor/-/merge_requests/848) ==== bash ==== Subpackages: bash-doc bash-lang bash-sh - use https:// for source urls ==== emacs-apel ==== Version update (10.8 -> 10.8+80+g6947dc4) - Switch to APEL-LB from Wanderlust - Update to version 10.8+80+g6947dc4: * Fold docstring within 80 characters * Fix fontset-pixel-size failure * Revive poe.el's dependency on pym.el * Remove conditional definition of functions and variable. * Remove codes for old platforms. * Update package description file for MELPA. * * product.el: Remove unneeded dependency on pym.el. * Don't use defun-maybe for mime-charset-list - apel-10.8-040_make-temp-file-for-Emacs-24.3.50.patch, apel-emacs-escape-fix.patch, emacs-apel-fix-old-backquote.patch, prevent-fontset-error.patch: Remote obsolete patches ==== gcc ==== Version update (11 -> 12) Subpackages: cpp libstdc++-devel - Switch gcc to default 12. - Remove 2 Ada binaries. ==== gcc12 ==== Version update (12.0.1+git192423 -> 12.1.0+git27) Subpackages: libatomic1 libgcc_s1 libgcc_s1-32bit libgfortran5 libgomp1 libitm1 liblsan0 libobjc4 libquadmath0 libstdc++6 libstdc++6-32bit libstdc++6-locale libstdc++6-pp libstdc++6-pp-32bit libubsan1 - Update to GCC 12.1 release, 1ea978e3066ac565a1ec28a96a4d61, git27 - Bump to 621650f64fb6679c457c33abf27c925f28bddc62, git9 * GCC 12.1 release candidate - Bump to f27848a5dc4d3b16cd4112bddcb59e0916eba623, git192706. - Switch ppc64le to the IEEE long double ABI by default in Factory. - Separate ppc64le from ppc/ppc64 specific configury. - Add _multibuild to gather all .spec files and reduce the number of .changes files to one, autogenerated by change_spec. - Drop %ringdisabled handling. - Ada bootstrap now requires at least GCC 5, use GCC 7 on SLES 12 instead of GCC 4.8. - Drop no longer necessary gcc12-d-workaround.patch - Bump to b85abacd902813daec5e44b97f275eb88caaf715, git192607. ==== gnome-packagekit ==== Subpackages: gnome-packagekit-lang - Modify bnc-946886-install-signatures-in-viewer.patch: Fix runtime error to make it work as before(bsc#1198801). ==== jemalloc ==== Version update (5.2.1 -> 5.3.0) - Update to release 5.3.0 * Added the thread.idle mallctl which hints that the calling thread will be idle for a nontrivial period of time. * Allow small size classes to be the maximum size class to cache in the thread-specific cache, through the opt.[lg_]tcache_max option. * Make the behavior of realloc(ptr, 0) configurable with opt.zero_realloc. * Support C++17 over-aligned allocation. * Add the thread.peak mallctl for approximate per-thread peak memory tracking. * Add high resolution timestamp support for profiling. - Drop use-volatile-to-workaround-buffer-overflow-false-pos.patch (merged) ==== libapparmor ==== Subpackages: libapparmor1 libapparmor1-32bit - Add python310-help-mr848.patch so that Tumbleweed can switch python3 to Python 3.10 (https://gitlab.com/apparmor/apparmor/-/merge_requests/848) ==== libgusb ==== Version update (0.3.9 -> 0.3.10) - Update to version 0.3.10: + New Features: - Add API to change the hotplug poll interval. ==== libunwind ==== - Enable build on riscv64 and run testsuite ==== lsof ==== Version update (4.94.0 -> 4.95.0) - update to 4.95.0: * Update perl scripts for the past few decades of progress * Drop LSOF_CCDATE across all dialects to ensure reproducible builds * Fix FD field description. * Adjust alignment of buffer passed to stat(). * Clean up source code and documents. - remove trailing whitespace, - fix some issues in scripts found through shellcheck, and - fix spelling * man page: fix hyphen issues * Fix broken LSOF_CFLAGS_OVERRIDE. * [linux] Remove sysvlegacy function. * [linux] use close_range instead of calling close repeatedly * Add -Q option for adjusting exit status when failed to find a search item (#129) - drop lsof-no-build-date-etc.patch (obsolete) ==== pcre2 ==== Subpackages: libpcre2-16-0 libpcre2-32-0 libpcre2-8-0 libpcre2-8-0-32bit - do not enable jit-sealloc [bsc#1182864] [bsc#1199208] - enable jit for s390x [bsc#1199196] ==== pigz ==== Version update (2.6 -> 2.7) - update to 2.7: * Improved display of multiple-member gzip files * Better gzip compatibility and bug fixes - add pigz-2.7-NOTHREAD-tests.patch to fix tests ==== plymouth ==== Subpackages: libply-splash-core5 libply-splash-graphics5 libply5 plymouth-dracut plymouth-lang plymouth-plugin-label plymouth-plugin-two-step plymouth-scripts plymouth-theme-bgrt plymouth-theme-spinner - Update plymouth.spec: change configure options --with-shutdown-tty from 1 to 7: Make sure shutdown display could show out (bsc#1141749). ==== portmidi ==== Version update (2.0.2 -> 2.0.3) - Update to 2.0.3 * This version allows multiple hardware devices to have the same name. - Add upstream changes: * 0001-Adding-missing-file-to-repo.patch * 0001-changing-path-to-pm_common-directory-in-file-pm_comm.patch * 0001-Add-missing-return-type.patch ==== protobuf ==== Subpackages: libprotobuf-lite31 libprotobuf31 - Add temporary patch gcc12-disable-__constinit-with-c++-11.patch that addresses gh#protocolbuffers/protobuf#9916. - Remove change_desc_db.patch, because underlying bug in gh#googleapis/python-api-core#372 has been fixed. ==== python-argon2-cffi ==== Version update (21.1.0 -> 21.3.0) - Update to version 21.3.0 * Feature: Full type hints. * Adjusted defaults to RFC 9106 and support for pre-configured profiles. * Python 3.5 is not supported anymore. * The CFFI bindings have been extracted into a separate project: argon2-cffi-bindings * Added: argon2.Parameters.from_parameters() together with the argon2.profiles module that offers easy access to the RFC-recommended configuration parameters and then some. * The CLI interface now has a --profile option that takes any name from argon2.profiles. * argon2.PasswordHasher now uses the RFC 9106 low-memory profile by default. The old defaults are available as argon2.profiles.PRE_21_2. ==== python-importlib-metadata ==== Version update (4.8.2 -> 4.11.3) - update to 4.11.3: * #372: Removed cast of path items in FastPath, not needed. * #369: Fixed bug where ``EntryPoint.extras`` was returning match objects and not the extras strings. * #367: In ``Distribution.requires`` for egg-info, if ``requires.txt`` is empty, return an empty list. * bpo-46246: Added ``__slots__`` to ``EntryPoints``. * #365 and bpo-46546: Avoid leaking ``method_name`` in ``DeprecatedList``. - update to 4.10.1: - #361: Avoid potential REDoS in ``EntryPoint.pattern``. - Update to 4.10.0: - #354: Removed Distribution._local factory. This functionality was created as a demonstration of the possible implementation. Now, the pep517 package provides this functionality directly through pep517.meta.load. - Require Python 3.7 or later. - #357: Fixed requirement generation from egg-info when a URL requirement is given. ==== rsyslog ==== Version update (8.2204.0 -> 8.2204.1) - rsyslog 8.2204.1: * CVE-2022-24903: potential buffer overrun in imptcp, imtcp, imgssapi and others (boo#1199061) ==== systemd ==== Version update (250.4 -> 250.5) Subpackages: libsystemd0 libsystemd0-32bit libudev1 libudev1-32bit systemd-32bit systemd-container systemd-lang udev - Import commit 0d950479e58dd3af007eb3780d600a5446aac519 (merge of v250.5) For a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/736db5a59f1ab1317ef64ec6e7dc3942... - Call pam_loginuid when creating user@.service (bsc#1198507) It's a backport of upstream commit 1000522a60ceade446773c67031b47a566d4a70d. ==== tiff ==== Subpackages: libtiff5 libtiff5-32bit - security update: * CVE-2022-0907 [bsc#1197070] + tiff-CVE-2022-0907.patch - security update * CVE-2022-0561 [bsc#1195964] + tiff-CVE-2022-0561.patch * CVE-2022-0562 [bsc#1195965] + tiff-CVE-2022-0562.patch * CVE-2022-0865 [bsc#1197066] + tiff-CVE-2022-0865.patch * CVE-2022-0909 [bsc#1197072] + tiff-CVE-2022-0909.patch * CVE-2022-0924 [bsc#1197073] + tiff-CVE-2022-0924.patch * CVE-2022-0908 [bsc#1197074] + tiff-CVE-2022-0908.patch - security update * CVE-2022-1056 [bsc#1197631] * CVE-2022-0891 [bsc#1197068] + tiff-CVE-2022-1056,CVE-2022-0891.patch - switch source url to https ==== vlgothic-fonts ==== Version update (20140801 -> 20200720) - Update to version 2020/07/20 * Fixed interchanged glyphs for U+23F4 and U+23F5 * Fixed wrong glyph for ? U+1F643 UPSIDE-DOWN FACE * Fixed wrong glyph for ? U+1F43F CHIPMUNK * Fixed incorrect character widths of several latin1 symbols * Fixed wrong glyphs fror U+2BF2 and U+2BF3 * add/fix some Greek Letter * Add Greek Capital Letter Yot (U+037F) * Fix Greek Small Letter Digamma (U+03dd) * Fix Small Digamma misplacing - Update to version 2020/07/19 * Fixed glyphs U+9304 and U+32FF - Update to version 2014/12/06 * Add Miscellaneous Symbols and Arrows U+2B60?2BA7 ==== zlib-ng-compat ==== - Add 'Provides: zlib-devel' to the compat package - Remove useless mis-typed '-DWITH_SANITIZERS=ON'