Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20211001 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MozillaFirefox (92.0 -> 92.0.1) audit (3.0.3 -> 3.0.5) audit-secondary (3.0.3 -> 3.0.5) codec2 (1.0.0 -> 1.0.1) crypto-policies (20210225.05203d2 -> 20210917.c9d86d1) diffutils ffmpeg-4 gd inotify-tools (3.20.11.0 -> 3.21.9.5) libchewing (0.5.1+git20171114.3df07c9 -> 0.5.1+git20200627.452f622) libmtp (1.1.18 -> 1.1.19) monitoring-plugins mozjs78 (78.13.0 -> 78.14.0) openSUSE-build-key perl-Mail-AuthenticationResults (2.20210112 -> 2.20210915) perl-ldap perl-libwww-perl (6.56 -> 6.57) python python-base python-jmespath rtl8812au (5.9.3.2+git20210427.6ef5d8f_k5.14.6_1 -> 5.9.3.2+git20210427.6ef5d8f_k5.14.6_2) salt (3002.2 -> 3003.3) selinux-policy yast2-slp-server (4.3.0 -> 4.4.0) === Details === ==== MozillaFirefox ==== Version update (92.0 -> 92.0.1) Subpackages: MozillaFirefox-translations-common - Mozilla Firefox 92.0.1 * Fixed: Fixes an issue where audio playback was not working on some Linux systems (bmo#1730499) * Fixed: Fixes issues with the findbar close button on different operating systems (bmo#1728368) ==== audit ==== Version update (3.0.3 -> 3.0.5) Subpackages: libaudit1 libaudit1-32bit libauparse0 - Update to version 3.0.5: * In auditd, flush uid/gid caches when user/group added/deleted/modified * Fixed various issues when dealing with corrupted logs * In auditd, check if log_file is valid before closing handle - Include fixed from 3.0.4: * Apply performance speedups to auparse library * Optimize rule loading in auditctl * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath * Update syscall table to the 5.14 kernel * Fixed various issues when dealing with corrupted logs ==== audit-secondary ==== Version update (3.0.3 -> 3.0.5) Subpackages: audit python3-audit system-group-audit - Fix hardened auditd.service (bsc#1181400) * add fix-hardened-service.patch Make /etc/audit read-write from the service. Remove PrivateDevices=true to expose /dev/* to auditd.service. - Enable stop rules for audit.service (cf. bsc#1190227) * add enable-stop-rules.patch - Change default log_format from ENRICHED to RAW (bsc#1190500): * add change-default-log_format.patch (SUSE-specific patch) - Update to version 3.0.5: * In auditd, flush uid/gid caches when user/group added/deleted/modified * Fixed various issues when dealing with corrupted logs * In auditd, check if log_file is valid before closing handle - Include fixed from 3.0.4: * Apply performance speedups to auparse library * Optimize rule loading in auditctl * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath * Update syscall table to the 5.14 kernel * Fixed various issues when dealing with corrupted logs ==== codec2 ==== Version update (1.0.0 -> 1.0.1) - Update to version 1.0.1: * Release to support freedv-gui 1.6.1 ==== crypto-policies ==== Version update (20210225.05203d2 -> 20210917.c9d86d1) Subpackages: crypto-policies-scripts - Remove the scripts and documentation regarding fips-finish-install and test-fips-setup * Add crypto-policies-FIPS.patch - Update to version 20210917.c9d86d1: * openssl: fix disabling ChaCha20 * pacify pylint 2.11: use format strings * pacify pylint 2.11: specify explicit encoding * fix minor things found by new pylint * update-crypto-policies: --check against regenerated * update-crypto-policies: fix --check's walking order * policygenerators/gnutls: revert disabling DTLS0.9... * policygenerators/java: add javasystem backend * LEGACY: bump 1023 key size to 1024 * cryptopolicies: fix 'and' in deprecation warnings * *ssh: condition ecdh-sha2-nistp384 on SECP384R1 * nss: hopefully the last fix for nss sigalgs check * cryptopolicies: Python 3.10 compatibility * nss: postponing check + testing at least something * Rename 'policy modules' to 'subpolicies' * validation.rules: fix a missing word in error * cryptopolicies: raise errors right after warnings * update-crypto-policies: capitalize warnings * cryptopolicies: syntax-precheck scope errors * .gitlab-ci.yml, Makefile: enable codespell * all: fix several typos * docs: don't leave zero TLS/DTLS protocols on * openssl: separate TLS/DTLS MinProtocol/MaxProtocol * alg_lists: order protocols new-to-old for consistency * alg_lists: max_{d,}tls_version * update-crypto-policies: fix pregenerated + local.d * openssh: allow validation with pre-8.5 * .gitlab-ci.yml: run commit-range against upstream * openssh: Use the new name for PubkeyAcceptedKeyTypes * sha1_in_dnssec: deprecate * .gitlab-ci.yml: test commit ranges * FIPS:OSPP: sign = -*-SHA2-224 * scoped policies: documentation update * scoped policies: use new features to the fullest... * scoped policies: rewrite + minimal policy changes * scoped policies: rewrite preparations * nss: postponing the version check again, to 3.64 - Remove patches fixed upstream: crypto-policies-typos.patch - Rebase: crypto-policies-test_supported_modules_only.patch - Merge crypto-policies-asciidoc.patch into crypto-policies-no-build-manpages.patch ==== diffutils ==== Subpackages: diffutils-lang - Skip stack overflow tests under qemu emulation (bsc#1190046) ==== ffmpeg-4 ==== Subpackages: libavcodec58_134 libavdevice58_13 libavfilter7_110 libavformat58_76 libavresample4_0 libavutil56_70 libpostproc55_9 libswresample3_9 libswscale5_9 - Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix denial of service vulnerability exists due to a memory leak in avcodec_alloc_context3 at options.c (bsc#1186756). ==== gd ==== Subpackages: libgd3 - reenable gd/gd2 legacy formats, was disabled by upstream by default [bsc#1190762] ==== inotify-tools ==== Version update (3.20.11.0 -> 3.21.9.5) Subpackages: libinotifytools0 - update to 3.21.9.5: * Fix Wrong pointer passed to realloc * Fix offset compiler warning * various static code analyse annotations and fixes ==== libchewing ==== Version update (0.5.1+git20171114.3df07c9 -> 0.5.1+git20200627.452f622) Subpackages: chewing-data chewing-utils libchewing3 - Update to version 0.5.1+git20200627.452f622: * chewing.py supports platforms with 64bit pointer * Change ? to ? * Don't run tests in parallel * Try Ubuntu 16.04 Xenial * autotools: Build with -fPIC like the CMake-based one does * Show compilation commands if the build system is autotools * Tolerate unused const warnings * Fix LSan * Use internal-sqlite instead of static-sqlite, following 570ab6be - Remove unneeded BuildRequires on python-devel, and the conflicting old py_* macros. - Remove references to "Python 2", the module supports Python 3. - Mark COPYING as license. ==== libmtp ==== Version update (1.1.18 -> 1.1.19) Subpackages: libmtp-udev libmtp9 - updated to 1.1.19 release - Lots of USB ids added, especially Garmin devices - use a local libusb context, not the global one - various bugfixes ==== monitoring-plugins ==== Subpackages: monitoring-plugins-breeze monitoring-plugins-by_ssh monitoring-plugins-cluster monitoring-plugins-common monitoring-plugins-cups monitoring-plugins-dhcp monitoring-plugins-dig monitoring-plugins-disk monitoring-plugins-disk_smb monitoring-plugins-dns monitoring-plugins-dummy monitoring-plugins-file_age monitoring-plugins-flexlm monitoring-plugins-http monitoring-plugins-icmp monitoring-plugins-ide_smart monitoring-plugins-ifoperstatus monitoring-plugins-ifstatus monitoring-plugins-ircd monitoring-plugins-load monitoring-plugins-log monitoring-plugins-mailq monitoring-plugins-mrtg monitoring-plugins-mrtgtraf monitoring-plugins-nagios monitoring-plugins-nt monitoring-plugins-ntp_peer monitoring-plugins-ntp_time monitoring-plugins-nwstat monitoring-plugins-oracle monitoring-plugins-overcr monitoring-plugins-ping monitoring-plugins-procs monitoring-plugins-real monitoring-plugins-rpc monitoring-plugins-sensors monitoring-plugins-smtp monitoring-plugins-ssh monitoring-plugins -swap monitoring-plugins-tcp monitoring-plugins-time monitoring-plugins-ups monitoring-plugins-users monitoring-plugins-wave - Remove unneeded build requirement on "syslog" ==== mozjs78 ==== Version update (78.13.0 -> 78.14.0) - Update to version 78.14.0esr. ==== openSUSE-build-key ==== - Only add openSUSE Backports key when building for a Leap system (sle_version > 0). Tumbleweed does not use Backports. ==== perl-Mail-AuthenticationResults ==== Version update (2.20210112 -> 2.20210915) - updated to 2.20210915 see /usr/share/doc/packages/perl-Mail-AuthenticationResults/Changes 2.20210915 2021-09-15 11:10:20+00:00 UTC - Fix for older versions of Perl 2.20210914 2021-09-14 05:17:31+00:00 UTC - New method to copy children from 1 object to another ==== perl-ldap ==== - fix build with perl 5.34.0 ==== perl-libwww-perl ==== Version update (6.56 -> 6.57) - updated to 6.57 see /usr/share/doc/packages/perl-libwww-perl/Changes 6.57 2021-09-20 20:20:14Z - Update docs for protocols_allowed and protocols forbidden (GH#386) (Olaf Alders) ==== python ==== - Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091 (CVE-2019-20907, bpo#39017) avoiding possible infinite loop in specifically crafted tarball. Add recursion.tar as a testing tarball for the patch. - Provide the newest setuptools wheel (bsc#1176262, CVE-2019-20916) in their correct form (bsc#1180686). - Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211 (CVE-2020-26116, bpo#39603) no longer allowing special characters in the method parameter of HTTPConnection.putrequest in httplib, stopping injection of headers. Such characters now raise ValueError. ==== python-base ==== Subpackages: libpython2_7-1_0 python-xml - Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091 (CVE-2019-20907, bpo#39017) avoiding possible infinite loop in specifically crafted tarball. Add recursion.tar as a testing tarball for the patch. - Provide the newest setuptools wheel (bsc#1176262, CVE-2019-20916) in their correct form (bsc#1180686). - Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211 (CVE-2020-26116, bpo#39603) no longer allowing special characters in the method parameter of HTTPConnection.putrequest in httplib, stopping injection of headers. Such characters now raise ValueError. ==== python-jmespath ==== - Add patch remove-nose.patch: * Remove use of nose in the tests. ==== rtl8812au ==== Version update (5.9.3.2+git20210427.6ef5d8f_k5.14.6_1 -> 5.9.3.2+git20210427.6ef5d8f_k5.14.6_2) - Exclude the s390x Architecture ==== salt ==== Version update (3002.2 -> 3003.3) Subpackages: python3-salt salt-master salt-minion salt-transactional-update - Support querying for JSON data in external sql pillar - Added: * 3003.3-postgresql-json-support-in-pillar-423.patch - Update to Salt release version 3003.3 - See release notes: https://docs.saltstack.com/en/latest/topics/releases/3003.3.html - Added: * allow-vendor-change-option-with-zypper.patch * support-transactional-systems-microos.patch * virt-enhancements.patch - Modified: * adds-explicit-type-cast-for-port.patch * use-adler32-algorithm-to-compute-string-checksums.patch * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch * fixes-56144-to-enable-hotadd-profile-support.patch * include-aliases-in-the-fqdns-grains.patch * implementation-of-held-unheld-functions-for-state-pk.patch * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch * debian-info_installed-compatibility-50453.patch * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch * update-target-fix-for-salt-ssh-to-process-targets-li.patch * x509-fixes-111.patch * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch * restore-default-behaviour-of-pkg-list-return.patch * adding-preliminary-support-for-rocky.-59682-391.patch * add-astra-linux-common-edition-to-the-os-family-list.patch * templates-move-the-globals-up-to-the-environment-jin.patch * fix-bsc-1065792.patch * add-migrated-state-and-gpg-key-management-functions-.patch * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch * improvements-on-ansiblegate-module-354.patch * add-custom-suse-capabilities-as-grains.patch * return-the-expected-powerpc-os-arch-bsc-1117995.patch * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch * enhance-openscap-module-add-xccdf_eval-call-386.patch * implementation-of-suse_ip-execution-module-bsc-10999.patch * add-missing-aarch64-to-rpm-package-architectures-405.patch * async-batch-implementation.patch * temporary-fix-extend-the-whitelist-of-allowed-comman.patch * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch * figure-out-python-interpreter-to-use-inside-containe.patch * better-handling-of-bad-public-keys-from-minions-bsc-.patch * early-feature-support-config.patch * do-not-monkey-patch-yaml-bsc-1177474.patch - Removed: * fix-memory-leak-produced-by-batch-async-find_jobs-me.patch * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch * fix-for-log-checking-in-x509-test.patch * do-not-make-ansiblegate-to-crash-on-python3-minions.patch * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch * remove-msgpack-1.0.0-requirement-in-the-installed-me.patch * move-server_id-deprecation-warning-to-reduce-log-spa.patch * re-adding-function-to-test-for-root.patch * make-profiles-a-package.patch * handle-master-tops-data-when-states-are-applied-by-t.patch * fix-unit-tests-for-batch-async-after-refactor.patch * prevent-test_mod_del_repo_multiline_values-to-fail.patch * prevent-import-errors-when-running-test_btrfs-unit-t.patch * fix-failing-unit-tests-for-batch-async.patch * remove-unnecessary-yield-causing-badyielderror-bsc-1.patch * virt-use-dev-kvm-to-detect-kvm-383.patch * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch * add-docker-logout-237.patch * drop-wrong-mock-from-chroot-unit-test.patch * fix-async-batch-multiple-done-events.patch * fix-unit-test-for-grains-core.patch * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch * pkgrepo-support-python-2.7-function-call-295.patch * opensuse-3000-virt-defined-states-222.patch * open-suse-3002.2-xen-grub-316.patch * add-patch-support-for-allow-vendor-change-option-wit.patch * fix-the-removed-six.itermitems-and-six.-_type-262.patch * fix-aptpkg-systemd-call-bsc-1143301.patch * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch * regression-fix-of-salt-ssh-on-processing-targets-353.patch * do-not-break-repo-files-with-multiple-line-values-on.patch * 3002-set-distro-requirement-to-oldest-supported-vers.patch * integration-of-msi-authentication-with-azurearm-clou.patch * zypperpkg-filter-patterns-that-start-with-dot-244.patch * fix-for-temp-folder-definition-in-loader-unit-test.patch * fix-novendorchange-option-284.patch * backport-virt-patches-from-3001-256.patch * allow-passing-kwargs-to-pkg.list_downloaded-bsc-1140.patch * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch * virt-uefi-fix-backport-312.patch * add-all_versions-parameter-to-include-all-installed-.patch * add-pkg.services_need_restart-302.patch * add-batch_presence_ping_timeout-and-batch_presence_p.patch * allow-vendor-change-option-with-zypper-313.patch * avoid-traceback-when-http.query-request-cannot-be-pe.patch * changed-imports-to-vendored-tornado.patch * fix-issue-parsing-errors-in-ansiblegate-state-module.patch * sanitize-grains-loaded-from-roster_grains.json.patch * handle-volumes-on-stopped-pools-in-virt.vm_info-373.patch * add-multi-file-support-and-globbing-to-the-filetree-.patch * loosen-azure-sdk-dependencies-in-azurearm-cloud-driv.patch * backport-thread.is_alive-fix-390.patch * get-os_arch-also-without-rpm-package-installed.patch * python3.8-compatibility-pr-s-235.patch * fixed-bug-lvm-has-no-parttion-type.-the-scipt-later-.patch * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch * xfs-do-not-fails-if-type-is-not-present.patch * grains-master-can-read-grains.patch * invalidate-file-list-cache-when-cache-file-modified-.patch * move-vendor-change-logic-to-zypper-class-355.patch * implement-network.fqdns-module-function-bsc-1134860-.patch * opensuse-3000.2-virt-backports-236-257.patch * prevent-ansiblegate-unit-tests-to-fail-on-ubuntu.patch * batch_async-avoid-using-fnmatch-to-match-event-217.patch * provide-the-missing-features-required-for-yomi-yet-o.patch * fix-__mount_device-wrapper-254.patch * fix-ipv6-scope-bsc-1108557.patch * fix-failing-unit-tests-for-systemd.patch * use-current-ioloop-for-the-localclient-instance-of-b.patch * revert-add-patch-support-for-allow-vendor-change-opt.patch * remove-deprecated-warning-that-breaks-miniion-execut.patch * prevent-systemd-run-description-issue-when-running-a.patch * fix-grains.test_core-unit-test-277.patch * prevent-command-injection-in-the-snapper-module-bsc-.patch * backport-of-upstream-pr59492-to-3002.2-404.patch * use-threadpool-from-multiprocessing.pool-to-avoid-le.patch * reintroducing-reverted-changes.patch * add-cpe_name-for-osversion-grain-parsing-u-49946.patch * add-hold-unhold-functions.patch * virt._get_domain-don-t-raise-an-exception-if-there-i.patch * fix-error-handling-in-openscap-module-bsc-1188647-40.patch * apply-patch-from-upstream-to-support-python-3.8.patch * remove-deprecated-usage-of-no_mock-and-no_mock_reaso.patch * add-supportconfig-module-for-remote-calls-and-saltss.patch * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch * fall-back-to-pymysql.patch * fixes-cve-2018-15750-cve-2018-15751.patch * do-not-crash-when-there-are-ipv6-established-connect.patch * improve-batch_async-to-release-consumed-memory-bsc-1.patch * support-config-non-root-permission-issues-fixes-u-50.patch * transactional_update-detect-recursion-in-the-executo.patch * open-suse-3002.2-virt-network-311.patch * option-to-en-disable-force-refresh-in-zypper-215.patch * do-noop-for-services-states-when-running-systemd-in-.patch * exclude-the-full-path-of-a-download-url-to-prevent-i.patch * fix-a-wrong-rebase-in-test_core.py-180.patch * add-new-custom-suse-capability-for-saltutil-state-mo.patch * opensuse-3000-libvirt-engine-fixes-251.patch * accumulated-changes-from-yomi-167.patch * fix-async-batch-race-conditions.patch * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch * loop-fix-variable-names-for-until_no_eval.patch * batch-async-catch-exceptions-and-safety-unregister-a.patch * grains.extra-support-old-non-intel-kernels-bsc-11806.patch * backport-a-few-virt-prs-272.patch * fix-git_pillar-merging-across-multiple-__env__-repos.patch * drop-wrong-virt-capabilities-code-after-rebasing-pat.patch * virt-adding-kernel-boot-parameters-to-libvirt-xml-55.patch * async-batch-implementation-fix-320.patch * support-for-btrfs-and-xfs-in-parted-and-mkfs.patch * support-transactional-systems-microos-271.patch * strip-trailing-from-repo.uri-when-comparing-repos-in.patch * opensuse-3000.3-spacewalk-runner-parse-command-250.patch * calculate-fqdns-in-parallel-to-avoid-blockings-bsc-1.patch * add-virt.all_capabilities.patch * ansiblegate-take-care-of-failed-skipped-and-unreacha.patch * virt-pass-emulator-when-getting-domain-capabilities-.patch * fixing-streamclosed-issue.patch * fix-for-some-cves-bsc1181550.patch * transactional_update-unify-with-chroot.call.patch * do-not-raise-streamclosederror-traceback-but-only-lo.patch * fix-batch_async-obsolete-test.patch * fix-zypper-pkg.list_pkgs-expectation-and-dpkg-mockin.patch * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch * accumulated-changes-required-for-yomi-165.patch * fix-virt.update-with-cpu-defined-263.patch * remove-vendored-backports-abc-from-requirements.patch * open-suse-3002.2-bigvm-310.patch * xen-disk-fixes-264.patch * virt.network_update-handle-missing-ipv4-netmask-attr.patch * add-saltssh-multi-version-support-across-python-inte.patch ==== selinux-policy ==== Subpackages: selinux-policy-targeted - Fix auditd service start with systemd hardening directives (boo#1190918) * add fix_auditd.patch ==== yast2-slp-server ==== Version update (4.3.0 -> 4.4.0) - 4.4.0 (bsc#1185510)