Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20230517 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: apache2-mod_php8 (8.1.18 -> 8.1.19) dnsmasq firewalld gawk gnutls hwdata (0.369 -> 0.370) inxi (3.3.23 -> 3.3.27) kernel-source (6.3.1 -> 6.3.2) libnettle (3.8.1 -> 3.9) libpng16 libstorage-ng (4.5.103 -> 4.5.105) memtest86+ (6.10 -> 6.20) mousepad (0.6.0 -> 0.6.1) nodejs20 php8 (8.1.18 -> 8.1.19) ristretto (0.13.0 -> 0.13.1) rp-pppoe (3.15 -> 4.0) setxkbmap (1.3.3 -> 1.3.4) sysvinit (3.00 -> 3.07) texlive tnftp (20210827 -> 20230507) yast2-installation (4.6.2 -> 4.6.3) yast2-pkg-bindings (4.6.1 -> 4.6.2) yast2-services-manager (4.6.0 -> 4.6.1) === Details === ==== apache2-mod_php8 ==== Version update (8.1.18 -> 8.1.19) - version update to 8.1.19 * This is a bug fix release. * https://www.php.net/ChangeLog-8.php#8.1.19 - modified patches % php-ar-flags.patch (refreshed) % php-build-reproducible-phar.patch (refreshed) % php-ini.patch (refreshed) % php-systzdata-v23.patch (refreshed) ==== dnsmasq ==== - Correct rundir from /var/run to /run for pid file ==== firewalld ==== Subpackages: firewalld-bash-completion firewalld-lang firewalld-zsh-completion python3-firewall - Add firewalld-runstatedir.patch: change pid file location from /var/run to /run ==== gawk ==== - enable profiling ==== gnutls ==== Subpackages: libgnutls-dane0 libgnutls30 libgnutls30-32bit libgnutls30-hmac - Disable GNULIB's year2038 also for 32-bit arm - boo#1211394 ==== hwdata ==== Version update (0.369 -> 0.370) - update to 0.370: * Update pci, usb and vendor ids ==== inxi ==== Version update (3.3.23 -> 3.3.27) - Update to version 3.3.27: + /usr/share/doc/packages/inxi/inxi.changelog. ==== kernel-source ==== Version update (6.3.1 -> 6.3.2) - Linux 6.3.2 (bsc#1012628). - netfilter: nf_tables: deactivate anonymous set from preparation phase (bsc#1012628). - arch_topology: Remove early cacheinfo error message if -ENOENT (bsc#1012628). - debugobject: Ensure pool refill (again) (bsc#1012628). - cifs: avoid potential races when handling multiple dfs tcons (bsc#1012628). - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (bsc#1012628). - cifs: fix potential race when tree connecting ipc (bsc#1012628). - cifs: fix sharing of DFS connections (bsc#1012628). - cifs: protect session status check in smb2_reconnect() (bsc#1012628). - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (bsc#1012628). - io_uring/rsrc: check for nonconsecutive pages (bsc#1012628). - perf intel-pt: Fix CYC timestamps after standalone CBR (bsc#1012628). - perf auxtrace: Fix address filter entire kernel size (bsc#1012628). - dm: don't lock fs when the map is NULL in process of resume (bsc#1012628). - dm ioctl: fix nested locking in table_clear() to remove deadlock concern (bsc#1012628). - dm flakey: fix a crash with invalid table line (bsc#1012628). - dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path (bsc#1012628). - dm clone: call kmem_cache_destroy() in dm_clone_init() error path (bsc#1012628). - dm verity: fix error handling for check_at_most_once on FEC (bsc#1012628). - vhost_vdpa: fix unmap process in no-batch mode (bsc#1012628). - mm/hugetlb: fix uffd-wp during fork() (bsc#1012628). - mm/mempolicy: correctly update prev when policy is equal on mbind (bsc#1012628). - ia64: fix an addr to taddr in huge_pte_offset() (bsc#1012628). - s390/dasd: fix hanging blockdevice after request requeue (bsc#1012628). - btrfs: scrub: reject unsupported scrub flags (bsc#1012628). - scripts/gdb: fix lx-timerlist for Python3 (bsc#1012628). - afs: Avoid endless loop if file is larger than expected (bsc#1012628). - afs: Fix getattr to report server i_size on dirs, not local size (bsc#1012628). - afs: Fix updating of i_size with dv jump from server (bsc#1012628). - PM: hibernate: Do not get block device exclusively in test_resume mode (bsc#1012628). - PM: hibernate: Turn snapshot_test into global variable (bsc#1012628). - ACPI: PM: Do not turn of unused power resources on the Toshiba Click Mini (bsc#1012628). - hte: tegra-194: Fix off by one in tegra_hte_map_to_line_id() (bsc#1012628). - hte: tegra: fix 'struct of_device_id' build error (bsc#1012628). - mfd: arizona-spi: Add missing MODULE_DEVICE_TABLE (bsc#1012628). - mfd: ocelot-spi: Fix unsupported bulk read (bsc#1012628). - mfd: tqmx86: Correct board names for TQMxE39x (bsc#1012628). - mfd: tqmx86: Specify IO port register range more precisely (bsc#1012628). - mfd: tqmx86: Do not access I2C_DETECT register through io_base (bsc#1012628). - thermal/drivers/mediatek: Use devm_of_iomap to avoid resource leak in mtk_thermal_probe (bsc#1012628). - pinctrl-bcm2835.c: fix race condition when setting gpio dir (bsc#1012628). - dmaengine: at_xdmac: do not enable all cyclic channels (bsc#1012628). - dmaengine: at_xdmac: restore the content of grws register (bsc#1012628). - dmaengine: at_xdmac: do not resume channels paused by consumers (bsc#1012628). - dmaengine: at_xdmac: fix imbalanced runtime PM reference counter (bsc#1012628). - dmaengine: at_xdmac: disable/enable clock directly on suspend/resume (bsc#1012628). - dmaengine: dw-edma: Fix to enable to issue dma request on DMA processing (bsc#1012628). - dmaengine: dw-edma: Fix to change for continuous transfer (bsc#1012628). - dma: gpi: remove spurious unlock in gpi_ch_init (bsc#1012628). - phy: ti: j721e-wiz: Fix unreachable code in wiz_mode_select() (bsc#1012628). - phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port (bsc#1012628). - soundwire: intel: don't save hw_params for use in prepare (bsc#1012628). - pwm: mtk-disp: Configure double buffering before reading in .get_state() (bsc#1012628). - pwm: mtk-disp: Disable shadow registers before setting backlight values (bsc#1012628). - leds: tca6507: Fix error handling of using fwnode_property_read_string (bsc#1012628). - dmaengine: mv_xor_v2: Fix an error code (bsc#1012628). - pinctrl: ralink: reintroduce ralink,rt2880-pinmux compatible string (bsc#1012628). - leds: TI_LMU_COMMON: select REGMAP instead of depending on it (bsc#1012628). ... changelog too long, skipping 1100 lines ... - commit 26ec1ca ==== libnettle ==== Version update (3.8.1 -> 3.9) Subpackages: libhogweed6 libhogweed6-32bit libnettle8 libnettle8-32bit - update to 3.9 * rewrite of the C and plain x86_64 assembly implementations of GHASH to use precomputed tables in a different way, with tables always accessed in the same sequential manner. This should make Nettle's GHASH implementation side-channel silent on all platforms, but considerably slower on platforms without carry- less mul instructions. E.g., benchmarks of the C implementation on x86_64 showed a slowdown of 3 times. * Fix bug in ecdsa and gostdsa signature verify operation, for the unlikely corner case that point addition really is point duplication. * Fix for chacha on Power7, nettle's assembly used an instruction only available on later processors * Add support for the SM4 block cipher * Add support for the Balloon password hash * Add support for SIV-GCM authenticated encryption mode * Add support for OCB authenticated encryption mode. * New exported functions md5_compress, sha1_compress, sha256_compress, sha512_compress * multiple performance optimizations * Delete all arcfour assembly code. Affects 32-bit x86, 32-bit and 64-bit sparc ==== libpng16 ==== - do not use NEON instructions [bsc#1211176] ==== libstorage-ng ==== Version update (4.5.103 -> 4.5.105) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#931 - added test programs for nvme list and list-subsys - 4.5.105 - merge gh#openSUSE/libstorage-ng#930 - avoid to handle some fstab entries twice - 4.5.104 ==== memtest86+ ==== Version update (6.10 -> 6.20) - Revert change from Mon Mar 13, as this prevents the use of memtest and memtest is no longer displayed in the boot menu. - Update to 6.20 - Add support for Alder Lake-N CPUs - Add support for VIA VT8233(A)/VT8237 - Add support for nVidia nForce 3 - Add support for ALi M1533/1543(C)/1535 - Add temperature reporting on AMD K8 CPUs - Add some JEDEC Manufacturers - Better handling of SPD reading on Mobile CPUs - Fix APIC Timer fail on some mobile platforms - Fix older CPU (P5/P6-class) detection - don't install files in /boot. The OS needs to stay in /usr ==== mousepad ==== Version update (0.6.0 -> 0.6.1) Subpackages: libmousepad0 mousepad-lang - Update to version 0.6.1 * I18n: Update po/LINGUAS list * build: Optionally require polkit * build: Use m4_defined min versions and cleanup * build: Use XDT_VERSION_INIT and get rid of configure.ac.in * build: Switch from intltool to gettext * menubar: Improve some strings * search: Use consistent naming * history: Properly restore multi-window session * Restore opening mode only when it was overridden from the command line * Add "X of Y matches" to search bar and replace dialog (Closes #174) * Add application/x-zerosize to supported mime types (Fixes #194) * Apply opening mode also to the open dialog (Fixes #181) * Properly reconnect signal handler when auto-reload is enabled * Translation Updates ==== nodejs20 ==== Subpackages: npm20 - fix_ci_tests.patch: increase default timeout on unit tests to 20min from 2min. This seems to have lead to build failures on some platforms, like s390x in Factory. (bsc#1211407) ==== php8 ==== Version update (8.1.18 -> 8.1.19) Subpackages: php8-cli php8-ctype php8-dom php8-gd php8-gettext php8-iconv php8-mbstring php8-mysql php8-openssl php8-pdo php8-sqlite php8-tokenizer php8-xmlreader php8-xmlwriter - version update to 8.1.19 * This is a bug fix release. * https://www.php.net/ChangeLog-8.php#8.1.19 - modified patches % php-ar-flags.patch (refreshed) % php-build-reproducible-phar.patch (refreshed) % php-ini.patch (refreshed) % php-systzdata-v23.patch (refreshed) ==== ristretto ==== Version update (0.13.0 -> 0.13.1) Subpackages: ristretto-lang - Update to version 0.13.1 * I18n: Update po/LINGUAS list * Force g_file_query_info if magic_file returns "application/octet-stream" * build: Use m4_defined min versions and cleanup * Replace XDT_CHECK_LIBX11 and guard x11 code paths * build: Use XDT_VERSION_INIT and get rid of configure.ac.in * build: Switch from intltool to gettext * viewer: Paint background icon at window scale * Translation Updates ==== rp-pppoe ==== Version update (3.15 -> 4.0) - Updated to 4.0: * SPDX-License-Identifier: tags added to most source files * rp-pppoe.so plugin: Modified to compile against both pppd >= 2.5.0 and pppd < 2.5.0. * pppoe-server: If -L or -R option is specified as 0.0.0.0, then IP allocation is delegated to pppd. * pppoe-server: New -g option specifies the path of the rp-pppoe.so plugin to use with pppd in kernel-mode PPPoE. * pppoe-server: New -U option specifies a UNIX-domain control socket. This lets you send control commands to the server while it is running; see the pppoe-server man page for details. * All source code: Many cleanups and use of standard types like uint16_t rather than ones we define. * All source code: Support for OSes other than Linux has been dropped. * Documentation: Updated from modern Linux systems. * Cleanup: The following old and obsolete files have been removed: - Old connection scripts scripts/pppoe-connect.in, scripts/pppoe-start.in, scripts/pppoe-init-suse.in, scripts/pppoe-setup.in, scripts/pppoe-status, scripts/pppoe-init.in, and scripts/pppoe-stop.in * Obsolete firewall scripts configs/firewall-standalone and configs/firewall-masq - Obsolete configuration files configs/pppoe.conf and configs/pap-secrets - The Tcl/Tk gui script gui/tkpppoe.in and supporting files - The RPM spec file rp-pppoe.spec - Drop rp-pppoe-3.14-nonrfc-modems.patch, rp-pppoe-3.14-resolve-conf.patch, rp-pppoe-3.14-config.patch, rp-pppoe-3.14-init.patch, patched scripts no longer exists. - Drop rp-pppoe-3.14-release-buildsystem.patch, rp-pppoe-3.14-pie.patch rp-pppoe-3.14-strip.patch, no longer needed. ==== setxkbmap ==== Version update (1.3.3 -> 1.3.4) - Update to version 1.3.4 * gitlab CI: stop requiring Signed-off-by in commits * Be more careful about querying randr * Fix "Xwayland" spelling * Check for the XWAYLAND extension * Route the Xwayland warning through stderr ==== sysvinit ==== Version update (3.00 -> 3.07) - Update to sysvinit 3.07 * Fixed killall5 so that processes in the omit list are not sent any signals, including SIGSTOP. * Fixed usage message for killall5 to be more accurate. * pidof was not returning PIDs of programs which were launched using a symbolic link. (ie /tmp/sleep when /tmp/sleep links to /usr/bin/sleep). This is now fixed as we check both the realpath and symbolic path for processes. In other words, "pidof /tmp/sleep" and "pidof /usr/bin/sleep" will return the same PIDs when /tmp/sleep is a symbolic link to /usr/bin/sleep. * Fixed memory initialization error in pidof. Fix provided by Markus Fischer. * Accepted patch from Mark Hindley which avoids clearing realpath information in pidof when trying to find matching executables. * Mark Hindley fixed typo in es.po * Mark Hindley cleaned up translation code in src/Makefile. * Drop sulogin from Debian build. Removed libcrypt-dev dependency. * Fixed pt translation pages which were failing due to mis-matched open/close tags. * Makefile now respects ROOT prefix when setting up pidof-to-killall5 symbolic link. * Removed redundant translation files from man directory. * Makefile now respects DESTDIR. User can specify either ROOT= or DESTDIR= to set install prefix. * Helge Kreutzmann provided updated Makefile for translation of manual pages. This has been added to the man directory. * Added sys/sysmacros.h include in mountpoint.c to fix compiler errors on systems where major/minor macros were not defined. * Applied patches from Mark Hindley to clean up man page Makefile, translations and installs of new man pages. * Remove reliance on linux/fs.h as it conflicts with glibc 2.36. Patch provided by lucascars. * Mark Hindley supplied patch to make bootlogd compile on GNU Hurd systems. Was missing major/minor macro. * Fixed formatting in init.8 man page. Patch provided by Mark Hindley. * Added q and Q flags to synopsis in shutdown manual page. * Applied fixes for markup and spacing in manual pages. Patch provided by Mario Blattermann. * Added translation framework (po4a) from Mario Blttermann. * Added Makefile for man/ directory. Will handle translations and substitutions. * Applied new translations for multiple languages from Mario Blattermann. * Added ability to use "@" symbol in command named in the inittab file. This treats commands as literal and does not launch a shell to interpret them. * Updated inittab manual page to include overview of symbols which trigger a shell interpretor and how to disable them using the @ symbol. * Introduced change which adds error checking in bootlogd when performing chdir(). - Provided by Alexander Vickberg * Add check for console using TIOCGDEV on Linux systems in bootlogd to make finding console more robust. - Provided by Alexander Vickberg * Default to showing processes in the uninterruptable state (D). The -z flag no longer affects whether processes in D state are shown. The -z flag does still toggle whether zombie (Z) processes are shown. * Removed unnecessary check which is always true from init tab parsing. - Port patches * sysvinit-2.88dsf-suse.patch * sysvinit-2.90-no-kill.patch * sysvinit-2.90.dif - Add keyring as well as signature for source tar ball of sysvinit ==== texlive ==== Subpackages: libkpathsea6 libsynctex2 - Add patch source-luatex.dif * Update to luatex 1.17.0 with the fixes for CVE-2023-32668 and CVE-2023-32700 (bsc#1211389) VUL-0: TeXLive: Arbitrary code execution in LuaTeX ==== tnftp ==== Version update (20210827 -> 20230507) - Update to version 20230507 * Add timeout for SSL connection setup, defaulting to 60 seconds. * Consistently use poll(2) instead of select(2). * Check EAGAIN as well as EINTR. * Simplify includes. - Update to version 20230409 * Add option sslnoverify to control validation of SSL certificates. * Add netrc processing to fetch-mode (URL on command line) to enable options and autologin via netrc. * Fix SSL cleanup in some error paths. * Support SSL certificate validation by default. FTPSSLNOVERIFY=1 in the environment to disable validation. * Handle relative URLs. * Improve ftp(1) markup. * Fix -? in a more portable manner. ==== yast2-installation ==== Version update (4.6.2 -> 4.6.3) - Use a larger font for xterm during installation via X resources (bsc#1211267) Details: https://github.com/yast/yast-installation/pull/1085 4.6.3 ==== yast2-pkg-bindings ==== Version update (4.6.1 -> 4.6.2) - Dropped the *-devel-doc subpackage (related to bsc#1211319) - 4.6.2 ==== yast2-services-manager ==== Version update (4.6.0 -> 4.6.1) - Improved help text for services table (bsc#1211320) - 4.6.1