openSUSE Kubic

Download

kubic@lists.opensuse.org

May 2022

13 participants
72 discussions

New MicroOS snapshot 20220501 released!
by Richard Brown 02 May '22

02 May '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: NetworkManager apparmor argon2 btrfsprogs (5.16.1 -> 5.17) cockpit-podman coreutils (9.0 -> 9.1) curl (7.82.0 -> 7.83.0) elfutils (0.186 -> 0.187) file fontconfig (2.13.1 -> 2.14.0) gnome-control-center (42.0 -> 42.1) gnome-desktop (42.0 -> 42.1) gvfs (1.50.0 -> 1.50.1) gzip libadwaita (1.1.0 -> 1.1.1) libapparmor libeconf (0.4.5+git20220406.c9658f2 -> 0.4.6+git20220427.3016f4e) liboauth libqt5-qtwebengine librsvg (2.54.0 -> 2.54.1) liburing llvm14 (14.0.0 -> 14.0.1) nautilus (42.0 -> 42.1.1) ncurses (6.3.20220416 -> 6.3.20220423) openssh pango (1.50.4 -> 1.50.7) patterns-gnome perl-Bootloader (0.938 -> 0.939) pipewire (0.3.50 -> 0.3.51) policycoreutils python-jsonschema (3.2.0 -> 4.4.0) python-pycurl (7.43.0.6 -> 7.45.1) python-tornado6 re2 which xdg-desktop-portal-gnome (42.0.1 -> 42.1) xfsprogs (5.14.2 -> 5.15.0) zenity (3.42.0 -> 3.42.1) === Details === ==== NetworkManager ==== Subpackages: libnm0 typelib-1_0-NM-1_0 - Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-parser apparmor-profiles apparmor-utils python3-apparmor - Enhance zgrep-profile-mr870.diff to also allow/support zstd (boo#1198922). ==== argon2 ==== - use a source url ==== btrfsprogs ==== Version update (5.16.1 -> 5.17) Subpackages: btrfsprogs-udev-rules libbtrfs0 - update to 5.17: * check: * repair wrong num_devices in superblock * recognize overly long xattr names * fix wrong total bytes check for seed device * auto-repair on read on RAID56 * property set: unify handling of empty value to mean default, changed meaning for property 'compression' to allow reset to default and to set NOCOMPRESS, since kernel 5.14 * fixes: * dump-tree: print fs-verity items * fix location of system chunk on zoned filesystem * do not allow setting seeding flag on a filesystem with dirty log * mkfs and subpage support: use sectorsize as nodesize fallback for mixed profiles * preparatory work for extent tree v2, global roots * experimental feature (unstable interface, not built by default, do not use for production): * btrfstune: option --csum to switch checksum algorithm * other: * cleanups, refactoring * update documentation build, remove asciidocs leftovers * update fssum to consider xattrs * add fsstress - update to 5.16.2: * mkfs: fix detection of profile type for zoned mode when creating DUP * build: * add missing stub for zoned mode helper when zoned mode not enabled * fix 64bit types on MIPS and PowerPC * improved zoned mode support autodetection, for systems with existing blkzone.h header but missing support for zone capacity * other: * doc updates * test updates - add gpg signature validation - Update to 5.16.1 * mkfs: support DUP on metadata on zoned devices * subvol delete: drop warning for root when search ioctl fails * check: * fix --init-csum-tree to not create checksums for extents that are not supposed to have them * add check for metadata item levels * add udev rule for zoned devices as they require mq-deadline * build: fix redefinition of ALIGN on mixed old/new kernel/userspace (5.11) * other: * typo fixes * new tests * CI targets updated * Removed patches: btrfs-progs-kerncompat-add-local-definition-for-alig.patch (upstream) - add python-rpm-macros (bsc#1194748) - spec: also provide btrfs-progs as it's common package name in other distros - spec: clean up conditionals for < 12 versions - spec: let SLE12 build again (conditional dependency of libreiserfscore) - Removed patches: sles11-defaults.h (no SLE11 compatibility anymore) - Added patches: btrfs-progs-kerncompat-add-local-definition-for-alig.patch (fix build on SLE12/SLE15) - Update to 5.16 * rescue: new subcommand clear-uuid-tree to fix failed mount due to bad uuid subvolume keys, caught by tree-checker * fi du: skip inaccessible files * prop: properly resolve to symlink targets * send, receive: fix crash after parent subvolume lookup errors * build: * fix build on 5.12+ kernels due to changes in linux/kernel.h * fix build on musl with old kernel headers * other: * error handling fixes, cleanups, refactoring * extent tree v2 preparatory work * lots of RST documentation updates (last release with asciidoc sources), https://btrfs.readthedocs.io - Update to 5.15.1 * fi usage: fix wrongly reported space of used or unallocated space * fix detection of block device discard capability * check: add more sanity checks for checksum items * build: make sphinx optional backend for documentation - Update to 5.15 * mkfs: new defaults! * no-holes * free-space-tree * DUP for metadata unconditionally * libbtrfsutil: add missing profile defines * libbtrfs: minimize its impact on the other code, refactor and separate implementation where needed, cleanup afterwards, reduced header exports * documentation: introduce sphinx build and RST versions of manual pages, will become the new format and replace asciidoc * fixes: warning regarding v1 space cache when only v2 (free space tree) is enabled - Update to 5.14.1 * fixes * zoned mode * properly detect non-zoned devices in emulation mode * properly create quota tree * raid1c3/4 also excluded from unsupported profiles * use sysfs-based detection of device discard capability, fix mkfs-time trim for non-standard devices * mkfs: fix creation of populated filesystem with free space tree * detect multipath devices (needs libudev) * replace start: add option -K/--nodiscard, similar to what mkfs or device add has * dump-tree: print complete root_item * mkfs: add option --verbose * sb-mod: better help, no checksum calculation on read-only actions * subvol show: * print more information (regarding send and receive) * print warning if read-write subvolume has received_uuid set * property set: * add parameter -f to force changes * changing ro->rw switch now needs -f if subvolume has received_uuid set, (see documentation) * build: optional libudev (on by default) * other * remove deprecated support for CREATE_ASYNC bit for subvolume ioctl * CI updates * new and updated tests - Update patch: mkfs-default-features.patch (add stub define for new defaults) - Update to 5.14.1 * fixes: * defrag: fix parsing of compression (option -c) * add workaround for old kernels when reading zone sizes * let only check and restore open the fs with transid failures, namely preventing btrfstune to do so * convert: --uuid copy does not fail on duplicate uuids - Update to 5.14 * convert: * new option --uuid to copy, generate or set a given uuid * improve output * mkfs: * allow to create degenerate raid0 (on 1 device) and raid10 (on 2 devices) * image: * improved error messages * fix some alignment of restored image * subvol delete: allow to delete by id when path is not resolvable * check: * require alignment of nodesize for 64k page systems * detect and fix invalid block groups * libbtrfs (deprecated): * remove most exported symbols, leave only a few that are used by snapper * no version change (still 0.1) * remove btrfs-list.h, btrfsck.h * fixes: * reset generation of space v1 if v2 is used * fi us: don't wrongly report missing device size when partition is not readable * other: * build: experimental features * build: better detection of 64bit timestamp support for ext4 * corrupt-block: block group items * new and updated tests * refactoring * experimental features: * new image dump format, with data - Update to 5.13.1 * build: fix build on musl libc due to missing definition of NAME_MAX * check: * batch more work into one transaction when clearing v1 free space inodes * detect directoris with wrong number of links * libbtrfsutil: fix race between subvolume iterator and deletion * mkfs: be more specific about supported profiles for zoned device * other: * documentation updates - Update to 5.13 * restore: remove loop checks for extent count and directory scan * inspect dump-tree: new options to print node (--csum-headers) and data checksums (--csum-items) * fi usage: * print stripe count for striped profiles * print zoned information: size, total unusable * mkfs: print note about sha256 accelerated module loading issue * check: ability to reset dev_item::bytes_used * fixes * detect zoned kernel support at run time too * exclusive op running check return value * fi resize: support cancel (kernel 5.14) * device remove: support cancel (kernel 5.14) * documentation about general topics * compression * zoned mode * storage model * hardware considerations * other * libbtrfsutil API overview * help text fixes and updates * hash speedtest measure time, cycles using perf and print throughput - Add --disable-zoned for leap - revert previous change, unintentionally disables zstd on tumbleweed - Fix build for leap * --disable-zstd if leap < 42.3 * --disable-zoned for leap - Update to 5.12.1 * build: fix missing symbols in libbtrfs * mkfs: check for minimal number of zones * check: fix warning about cache generation when free space tree is enabled * fix superblock write in zoned mode on 16K pages - Update to 5.12 * libbtrfsutil: relicensed to LGPL v2.1+ * mkfs: zoned mode support (kernel 5.12+) * fi df: show zone_unusable per profile type in zoned mode * fi usage: show total amount of zone_unusable * fi resize: fix message for exact size * image: fix warning and enlarge output file if necessary * core * refactor chunk allocator for more modes * implement zoned mode support: allocation and writes, sb log * crypto/hash refactoring and cleanups * refactoring and cleanups * other * test updates * CI updates * travis-ci integration disabled * docker images updated, more coverage * incomplete build support for Android removed * doc updates * chattr mode m for 'NOCOMPRESS" * swapfile used from fstab * how to add a new export to libbtrfsutil * update status of mount options since 5.9 - Update to 5.11.1 * properly format checksums when a mismatch is reported * check: fix false alert on tree block crossing 64K page boundary * convert: * refuse to convert filesystem with 'needs_recovery' * update documentation to require fsck before conversion * balance convert: fix raid56 warning when converting other profiles * fi resize: improved summary * other * build: fix checks and autoconf defines * fix symlink paths for CI support scripts * updated tests - Update to 5.11 * fix device path canonicalization for device mapper devices * receive: remove workaround for setting capabilities, all stable kernels have been patched * receive: fix duplicate mount path detection * rescue: new subcommand create-control-device * device stats: minor fix for plain text format output * build: detect if e2fsprogs support 64bit timestamps * build: drop libmount, required functionality has been reimplemented * mkfs: warn when raid56 is used * balance convert: warn when raid56 is used * other * new and updated tests * documentation updates * seeding device * raid56 status * CI updates * docker images for various distros - Update to 5.10.1 * static build works again * other: * add a way to test static binaries with the testsuite * clarify scrub docs * update dependencies, minimum version for libmount is 2.24, this may change in the future - Update to 5.10 * scrub status: * print percentage of progress * add size unit options * fi usage: also print free space from statfs * convert: copy full 64 bit timestamp from ext4 if availalble * check: * add ability to repair extent item generation * new option to remove leftovers from inode number cache (-o inode_cache) * check for already running exclusive operation (balance, device add/...) when starting one * preliminary json output support for 'device stats' * fixes: * subvolume set-default: id 0 correctly falls back to toplevel * receive: align internal buffer to allow fast CRC calculation * logical-resolve: distinguish -o subvol and bind mounts * build: new dependency libmount * other * doc fixes and updates * new tests * ci on gitlab temporarily disabled * debugging output enhancements - prepare usrmerge (boo#1029961) - Update to 5.9: * mkfs: * switch default to single profile for multi-device filesystem, up to now it was raid0 that may not be simple to convert to some other profile as raid0 needs a workspace on all device for that * new option -R for run-time options (eg. mount time enabled), now understands free-space-tree * subvolume delete: * refuse to delete the default subvolume (kernel will not allow that but the error reason is not obvious) * warn on EPERM, eg. if send is on progress on the subvolume * convert: * fix 32bit overflows on large filesystems * improved error handling and error messages * check free space taking fragmentation into account * check: * detect and repair wrong inode generation * minor improvement in error reporting on roots * libbtrfsutils: follow main package versioning (5.9) * add pkg-config file definitions * python-btrfsutil: follow main package versioning (5.9) * inspect tree-stats: print node counts for each level, fanout * other: * docs: * remove obsolete mount options (alloc_start, subvolrootid) * deleting default subvolume is not permitted * updated or fixed tests * .editorconfig updates * move files to kernel-shared/ * CI: * updated to use zstd 1.4.5 * fix reiserfs build * more builds with asan, ubsan * sb-mod updates * build: * print .so versions of libraries in configure summary - Update to 5.7: * mkfs: * new option to enable features otherwise enabled at runtime, now implemented for quotas, 'mkfs.btrfs -R quota' * fix space accounting for small image, DUP and --rootdir * option -A removed * check: detect ranges with overlapping csum items * fi usage: report correct numbers when plain RAID56 profiles are used * convert: ensure the data chunks size never exceed device size * libbtrfsutil: update documentation regarding subvolume deletion * build: support libkcapi as implementation backend for cryptographic primitives * core: global options for verbosity (-v, -q), subcommands -v or -q are aliases and will continue to work but are considered deprecated, current command output is preserved to keep scripts working * other: * build warning fixes * btrfs-debugfs ported to python 3 - Update to 5.6.1: * print warning when multiple block group profiles exist, update 'fi usage' summary, add docs to maual page explaining the situation * build: optional support for libgcrypt or libsodium, providing hash implementations * updated docs - Fix content of _dracutmodulesdir variable: this definitively does not belong to libexecdir. - Update to 5.6: * inspect logical-resolve: support LOGICAL_INO_V2 as new option '-o', helps advanced dedupe tools * inspect: user larger buffer (64K) for results * subvol delete: support deletion by id (requires kernel 5.7+) * dump-tree: new option --hide-names, replace any names (file, directory, subvolume, xattr) in the output with stubs * various fixes - Update to 5.4.1 * build: fix docbook5 build * check: do extra verification of extent items, inode items and chunks * qgroup: return ENOTCONN if quotas not running (needs updated kernel) * other: various test fixups - BuildRequire pkgconfig(udev) instead of udev: Allow OBS to shortcut through the -mini flavor. - Use pkg-config --modversion udev to identify the current udev version. This is more portable and supports the -mini flavors. - Update to 5.4 * support new hash algorithms (kernel 5.5): * mkfs.btrfs and btrfs-convert with --csum, crc32c, xxhash, sha256, blake2 * mkfs: support new raid1c3 and raid1c4 block group profiles (kernel 5.5) * check: * --repair delays start with a warning, can be skipped using --force * enhanced detetion of inode types from partial data, more options for repair * receive: fix quiet option * image: speed up chunk loading * fi usage: * sort devices by id * print ratio of used/total per block group type * rescue zero-log: reset the log pointers directly, avoid reading some other potentially damaged structures * new make target install-static to install only static binaries/libraries * other * docs updates * new tests * cleanups and refactoring - Update to 5.3.1: * libbtrfs: fix link breakage due to missing symbols - Updaet to 5.3: * mkfs: * new option to specify checksum algorithm (only crc32c) * fix xattr enumeration * dump-tree: BFS (breadth-first) traversal now default * libbtrfsutil: remove stale BTRFS_DEV_REPLACE_ITEM_STATE_x defines * ci: add support for gitlab * other: * preparatory work for more checksum algorithms * docs update * switch to docbook5 backend for asciidoc * fix build on uClibc due to missing backtrace() * lots of printf format fixups - Enable build of python-bindings for libbtrfsutil - Update to 5.2.2: * check: * fix false report of wrong byte count for orphan inodes * option -E was not handled correctly * new check and repair for root item generation * balance: check for full-balance before background fork * mkfs: check that total device size does not overflow 16EiB * dump-tree: print DEV_STATS key type * other: * new and updated tests * doc fixups and updates - update to 5.2.1 * scrub status: fix ETA calculation after resume * check: fix crash when using -Q * restore: fix symlink owner restoration * mkfs: fix regression with mixed block groups * core: fix commit to process all delayed refs * other: * minor cleanups * test updates - update to 5.2 * subvol show: print qgroup information when available * scrub: * status: show ETA, revamp the whole output * fix reading/writing of last position on resume/cancel, potentially skipping part of the filesystem on next resume * dump-tree: add new option --noscan to use only devices given on the commandline * all-in-one binary (busybox style) with mkfs.btrfs, btrfs-image, btrfs-convert, btrfstune * image: fix hang when there are more than 32 cpus online and compression is requested * convert: fix some false ENOSPC errors when --rootdir is used * build: fix gcc9 warnings * core changes * command handling cleanups * dead code removal * cmds-* files moved to cmds/ * other shared userspace files moved to common/ * utils.c split into more files * preparatory work for more output formats * libbtrfsutil: fix unaligned access * other * new and updated tests * fix tests so CI passes again * sb-mod can modify more superblock items - update to version 5.1 * repair: flush/FUA support to avoid breaking metadata COW * file extents repair no longer relies on data in extent tree * lowmem: fix false error reports about gaps between extents * add inode mode check and repair for various objects * add check for invalid combination of nocow/compressed extents * device scan option to forget scanned devices [new] * mkfs: use same chunk size as kernel for initial creation * dev-repace: better report when other exclusive operation runs * help for sntax errors on command lines, print relevant msgs * defrag: able to open files in RO mode * dump-tree: --block can be specified multiple times - update to version 4.20.2 * dump-super: minor output fixup * revert fix for prefix detection of receive path, this is temporary and unbreaks existing user setups - Use correct path for dracut-fsck-help.txt in module-setup.sh (bsc#1122539) * Remove module-setup.sh * Add module-setup.sh.in - Advise user of fs recovery options when we fail to mount (fate#320443, bsc#1122539) * Add dracut-fsck-help.txt * Add module-setup.sh - update to version 4.20.1 * libbtrfs: fix build of external tools due to missing symbols * ci: enable library test - update to version 4.20 * new feature: metadata uuid * lightweight change of UUID without rewriting all metadata (incompatible change) * done by btrfstune -m/-M, needs kernel support, 5.0+ * image: * fix block groups when restoring from multi-device image * only enlarge result image if it's a regular file * check * more device extent checks and fixes * can repair dir item with mismatched hash * mkfs: uuid tree created with proper contents * fix mount point detection due to partial prefix match * other: * new tests, build fixes, doc updates * libbtrfsutil: fix tests if kernel lacks support for new subvolume ioctls - partial cleanup with spec-cleaner - drop 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch - drop 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch - drop 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch - drop 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch - drop 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch - Use %license instead of %doc [bsc#1082318] - Implement fate#325871 * Added 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch * Added 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch * Added 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch * Added 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch * Added 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch ==== cockpit-podman ==== - Remove translate-toolkit which is not available in SLE ==== coreutils ==== Version update (9.0 -> 9.1) - remove builddisabled conditions for rings - will be done now as BuildFlags: excludebuilds - gnulib-simple-backup-fix.patch: Add patch to make simple backups in correct directory; broken in 9.1. See https://bugs.gnu.org/55029 - update to 9.1: * chmod -R no longer exits with error status when encountering symlinks. All files would be processed correctly, but the exit status was incorrect. * If 'cp -Z A B' checks B's status and some other process then removes B, cp no longer creates B with a too-generous SELinux security context before adjusting it to the correct value. * 'cp --preserve=ownership A B' no longer ignores the umask when creating B. Also, 'cp --preserve-xattr A B' is less likely to temporarily chmod u+w B. * 'id xyz' now uses the name 'xyz' to determine groups, instead of xyz's uid. * 'ls -v' and 'sort -V' no longer mishandle corner cases like "a..a" vs "a.+" or lines containing NULs. Their behavior now matches the documentation for file names like ".m4" that consist entirely of an extension, and the documentation has been clarified for unusual cases. * 'mv -T --backup=numbered A B/' no longer miscalculates the backup number for B when A is a directory, possibly inflooping. * cat now uses the copy_file_range syscall if available, when doing simple copies between regular files. This may be more efficient, by avoiding user space copies, and possibly employing copy offloading or reflinking. * chown and chroot now warn about usages like "chown root.root f", which have the nonstandard and long-obsolete "." separator that causes problems on platforms where user names contain ".". Applications should use ":" instead of ".". * cksum no longer allows abbreviated algorithm names, so that forward compatibility and robustness is improved. * date +'%-N' now suppresses excess trailing digits, instead of always padding them with zeros to 9 digits. It uses clock_getres and clock_gettime to infer the clock resolution. * dd conv=fsync now synchronizes output even after a write error, and similarly for dd conv=fdatasync. * dd now counts bytes instead of blocks if a block count ends in "B". For example, 'dd count=100KiB' now copies 100 KiB of data, not 102,400 blocks of data. The flags count_bytes, skip_bytes and seek_bytes are therefore obsolescent and are no longer documented, though they still work. * ls no longer colors files with capabilities by default, as file-based capabilties are very rarely used, and lookup increases processing per file by about 30%. It's best to use getcap [-r] to identify files with capabilities. * ls no longer tries to automount files, reverting to the behavior before the statx() call was introduced in coreutils-8.32. * stat no longer tries to automount files by default, reverting to the behavior before the statx() call was introduced in coreutils-8.32. Only `stat --cached=never` will continue to automount files. * timeout --foreground --kill-after=... will now exit with status 137 if the kill signal was sent, which is consistent with the behavior when the --foreground option is not specified. This allows users to distinguish if the command was more forcefully terminated. * dd now supports the aliases iseek=N for skip=N, and oseek=N for seek=N, like FreeBSD and other operating systems. * dircolors takes a new --print-ls-colors option to display LS_COLORS entries, on separate lines, colored according to the entry color code. * dircolors will now also match COLORTERM in addition to TERM environment variables. The default config will apply colors with any COLORTERM set. * cp, mv, and install now use openat-like syscalls when copying to a directory. * This avoids some race conditions and should be more efficient. * The new 'date' option --resolution outputs the timestamp resolution. * With conv=fdatasync or conv=fsync, dd status=progress now reports any extra final progress just before synchronizing output data, since synchronizing can take a long time. * printf now supports printing the numeric value of multi-byte characters. * sort --debug now diagnoses issues with --field-separator characters that conflict with characters possibly used in numbers. * 'tail -f file | filter' now exits on Solaris when filter exits. * root invoked coreutils, that are built and run in single binary mode, now adjust /proc/$pid/cmdline to be more specific to the utility being run, rather than using the general "coreutils" binary name. - coreutils-i18n.patch: Re-sync the patch with Fedora. - drop coreutils-chmod-fix-exit-status-ign-symlinks.patch (upstream) ==== curl ==== Version update (7.82.0 -> 7.83.0) Subpackages: libcurl4 - Patches rework: * Refreshed all patches as -p1. * Use autopatch macro. * Renamed: - dont-mess-with-rpmoptflags.diff -> dont-mess-with-rpmoptflags.patch * Removed (already upstream): - curl-fix-verifyhost.patch - Update to 7.83.0: * Security fixes: - (bsc#1198766, CVE-2022-27776) Auth/cookie leak on redirect - (bsc#1198723, CVE-2022-27775) Bad local IPv6 connection reuse - (bsc#1198608, CVE-2022-27774) Credential leak on redirect - (bsc#1198614, CVE-2022-22576) OAUTH2 bearer bypass in connection re-use * Changes: - curl: add %header{name} experimental support in -w handling - curl: add %{header_json} experimental support in -w handling - curl: add --no-clobber - curl: add --remove-on-error - header api: add curl_easy_header and curl_easy_nextheader - msh3: add support for QUIC and HTTP/3 using msh3 * Bugfixes: - appveyor: add Cygwin build - appveyor: only add MSYS2 to PATH where required - BearSSL: add CURLOPT_SSL_CIPHER_LIST support - BearSSL: add CURLOPT_SSL_CTX_FUNCTION support - BINDINGS.md: add Hollywood binding - CI: Do not use buildconf. Instead, just use: autoreconf -fi - CI: install Python package impacket to run SMB test 1451 - configure.ac: move -pthread CFLAGS setting back where it used to be - configure: bump the copyright year range int the generated output - conncache: include the zone id in the "bundle" hashkey - connecache: remove duplicate connc->closure_handle check - connect: make Curl_getconnectinfo work with conn cache from share handle - connect: use TCP_KEEPALIVE only if TCP_KEEPIDLE is not defined - cookie.d: clarify when cookies are sent - cookies: improve errorhandling for reading cookiefile - curl/system.h: update ifdef condition for MCST-LCC compiler - curl: error out if -T and -d are used for the same URL - curl: error out when options need features not present in libcurl - curl: escape '?' in generated --libcurl code - curl: fix segmentation fault for empty output file names. - curl_easy_header: fix typos in documentation - CURLINFO_PRIMARY_PORT.3: clarify which port this is - CURLOPT*TLSAUTH.3: they only work with OpenSSL or GnuTLS - CURLOPT_DISALLOW_USERNAME_IN_URL.3: use uppercase URL - CURLOPT_PREQUOTE.3: only works for FTP file transfers, not dirs - CURLOPT_PROGRESSFUNCTION.3: fix typo in example - CURLOPT_UNRESTRICTED_AUTH.3: extended explanation - CURLSHOPT_UNLOCKFUNC.3: fix the callback prototype - docs/HYPER.md: updated to reflect current hyper build needs - docs/opts: Mention Schannel client cert type is P12 - docs: Fix missing semicolon in example code - docs: lots of minor language polish - English: use American spelling consistently - fail.d: tweak the description - firefox-db2pem.sh: make the shell script safer - ftp: fix error message for partial file upload - gen.pl: change wording for mutexed options - GHA: add openssl3 jobs moved over from zuul - GHA: build hyper with nightly rustc - GHA: move bearssl jobs over from zuul - gha: move the event-based test over from Zuul - gtls: fix build for disabled TLS-SRP - http2: handle DONE called for the paused stream - http2: RST the stream if we stop it on our own will - http: avoid auth/cookie on redirects same host diff port - http: close the stream (not connection) on time condition abort - http: reject header contents with nul bytes - http: return error on colon-less HTTP headers - http: streamclose "already downloaded" - hyper: fix status_line() return code - hyper: fix tests 580 and 581 for hyper - hyper: no h2c support - infof: consistent capitalization of warning messages - ipv4/6.d: clarify that they are about using IP addresses - json.d: fix typo (overriden -> overridden) - keepalive-time.d: It takes many probes to detect brokenness - lib/warnless.[ch]: only check for WIN32 and ignore _WIN32 - lib670: avoid double check result - lib: #ifdef on USE_HTTP2 better - lib: fix some misuse of curlx_convert_wchar_to_UTF8 - lib: remove exclamation marks - libssh2: compare sha256 strings case sensitively - libssh2: make the md5 comparison fail if wrong length - libssh: fix build with old libssh versions - libssh: fix double close - libssh: Improve fix for missing SSH_S_ stat macros - libssh: unstick SFTP transfers when done event-based - macos: set .plist version in autoconf - mbedtls: remove 'protocols' array from backend when ALPN is not used - mbedtls: remove server_fd from backend - mk-ca-bundle.pl: Use stricter logic to process the certificates - mk-ca-bundle.vbs: delete this script in favor of mk-ca-bundle.pl - mlc_config.json: add file to ignore known troublesome URLs - mqtt: better handling of TCP disconnect mid-message - ngtcp2: add client certificate authentication for OpenSSL - ngtcp2: avoid busy loop in low CWND situation - ngtcp2: deal with sub-millisecond timeout - ngtcp2: disconnect the QUIC connection proper - ngtcp2: enlarge H3_SEND_SIZE - ngtcp2: fix HTTP/3 upload stall and avoid busy loop - ngtcp2: fix memory leak - ngtcp2: fix QUIC_IDLE_TIMEOUT - ngtcp2: make curl 1ms faster - ngtcp2: remove remote_addr which is not used in a meaningful way - ngtcp2: update to work after recent ngtcp2 updates - ngtcp2: use token when detecting :status header field - nonblock: restore setsockopt method to curlx_nonblock - openssl: check SSL_get_peer_cert_chain return value - openssl: enable CURLOPT_SSL_EC_CURVES with BoringSSL - openssl: fix CN check error code - options: remove mistaken space before paren in prototype - perl: removed a double semicolon at end of line - pop3/smtp: return *WEIRD_SERVER_REPLY when not understood - projects/README: converted to markdown - projects: Update VC version names for VS2017, VS2022 - rtsp: don't let CSeq error override earlier errors - runtests: add 'bearssl' as testable feature - runtests: make 'oldlibssh' be before 0.9.4 - schannel: remove dead code that will never run - scripts/copyright.pl: ignore the new mlc_config.json file - scripts: move three scripts from lib/ to scripts/ - test1135: sync with recent API updates - test1459: disable for oldlibssh - test375: fix line endings on Windows - test386: Fix an incorrect test markup tag - test718: edited slightly to return better HTTP - tests/server/util.h: align WIN32 condition with util.c - tests: refactor server/socksd.c to support --unix-socket - timediff.[ch]: add curlx helper functions for timeval conversions - tls: make mbedtls and NSS check for h2, not nghttp2 - tool and tests: force flush of all buffers at end of program - tool_cb_hdr: Turn the Location: into a terminal hyperlink - tool_getparam: error out on missing -K file - tool_listhelp.c: uppercase URL - tool_operate: fix a scan-build warning - tool_paramhlp: use feof(3) to identify EOF correctly when using fread(3) - transfer: redirects to other protocols or ports clear auth - unit1620: call global_init before calling Curl_open - url: check sasl additional parameters for connection reuse. - vtls: provide a unified APLN-disagree string for all backends - vtls: use a backend standard message for "ALPN: offers %s" - vtls: use a generic "ALPN, server accepted" message - winbuild/README.md: fixup dead link - winbuild: Add a Visual Studio example to the README - wolfssl: fix compiler error without IPv6 ==== elfutils ==== Version update (0.186 -> 0.187) Subpackages: libasm1 libdw1 libelf1 - Update to version 0.187: * debuginfod: Support -C option for connection thread pooling. * debuginfod-client: Negative cache file are now zero sized instead of no-permission files. * addr2line: The -A, --absolute option, which shows file names including the full compilation directory is now the default. To get the old behavior use the new option --relative. * readelf, elflint: Recognize FDO Packaging Metadata ELF notes * libdw, debuginfo-client: Load libcurl lazily only when files need to be fetched remotely. libcurl is now never loaded when DEBUGINFOD_URLS is unset. And when DEBUGINFOD_URLS is set, libcurl is only loaded when the debuginfod_begin function is called. ==== file ==== Subpackages: file-magic libmagic1 - Try to solve 32bit import dependency problems (boo#1198788) ==== fontconfig ==== Version update (2.13.1 -> 2.14.0) Subpackages: libfontconfig1 - Seems we now need python3 for building - update to 2.14.0: * Fix endianness on generating MD5 cache name * Fix a typo in the description of FcWeightFromOpenTypeDouble * fc-validate: returns an error code when missing some glyphs * Fallback uuid-based name to read a cache if no MD5-based cache * fc-cache: Show font directories to generate cache with -v * Replace UUID file mechanism with per-directory 'map' attribute [v2] * memleak fixes - drop fontconfig-do-not-remove-UUID-file.patch (obsolete) - add skip-network-test.patch ==== gnome-control-center ==== Version update (42.0 -> 42.1) Subpackages: gnome-control-center-goa - Update to version 42.1: + Display: - Various small behavior improvements. - Fix monitor labels. + Network: Improve handling of VPN connections. + Online Accounts: - Fix behavior of helper application on X11. - Fix changes to online accounts services not applying correctly. + User Accounts: Various small polishments. + Wacom: Properly translate various strings. + Updated translations. - Drop upstream fixed patches: + gnome-control-center-reload-vpn-plugins.patch + gnome-control-center-goa-helper-on-X11.patch + gnome-control-center-42.0-fix-sharing-panel-crash.patch + 1283.patch - Add 1283.patch: user-accounts: close password change dialog. Addresses boo#1198235: Fail to change password on GNOME42. ==== gnome-desktop ==== Version update (42.0 -> 42.1) Subpackages: gnome-version libgnome-desktop-3-19 libgnome-desktop-3_0-common libgnome-desktop-4-1 typelib-1_0-GnomeDesktop-3_0 - Update to version 42.1: + Fix build_gtk4 option. + Updated translations. - Drop a3ed548d92b160245b79978ae362d47091ad8dad.patch: fixed upstream. ==== gvfs ==== Version update (1.50.0 -> 1.50.1) Subpackages: gvfs-backends - Update to version 1.50.1: + dav: - Drop user from URI as a workaround for Nextcloud bug. - Port DNS-SD resolver to async API to fix hangs when mounting. - Rewrite to libsoup async API to fix crashes. - Do not lose userinfo when copying URIs. + smb: Ignore EINVAL for kerberos/ccache login. - Drop gvfs-smb-ignore-EINVAL-kerberos-ccache.patch: fixed upstream. ==== gzip ==== - Rename xz_lzma.patch xz_lzma_zstd.patch and expand the patch to supprt zstd compression (boo#1198922). ==== libadwaita ==== Version update (1.1.0 -> 1.1.1) Subpackages: libadwaita-1-0 typelib-1_0-Adw-1 - Update to version 1.1.1: + AdwAvatar: Fix initials not updating after setting. custom-image. + AdwSplitButton: Avoid state changes during dispose. + AdwViewSwitcherTitle: Clear pending idle callback on unrealize. + AdwPreferencesGroup: Annotation fixes. + AdwTabBar: - Ensure indicators are clickable with inverted=true. - Fix resize deferring with non-expanded tabs. - Fix scroll animation stopping too early. + Mention AdwComboRow:selected type in migration guide. + Fix a Meson error when using as a subproject. + Updated translations. ==== libapparmor ==== - Enhance zgrep-profile-mr870.diff to also allow/support zstd (boo#1198922). ==== libeconf ==== Version update (0.4.5+git20220406.c9658f2 -> 0.4.6+git20220427.3016f4e) - Update to version 0.4.6+git20220427.3016f4e: * econftool: * * Parsing error: Reporting file and line nr. * * --delimeters=spaces Taking all kind of spaces for delimiter * libeconf: Fixed bsc#1198165: Parsing files correctly which have space characters AND none space characters as delimiters. ==== liboauth ==== - urls switched to https ==== libqt5-qtwebengine ==== - Add libqt5-qtwebengine-rpmlintrc to silence the 'shlib-policy-name-error' rpmlint error ==== librsvg ==== Version update (2.54.0 -> 2.54.1) Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2 rsvg-thumbnailer typelib-1_0-Rsvg-2_0 - Update to version 2.54.1: + Fix oversight in the Minimum Supported Rust Version (MSRV): this release requires Rust 1.56 or later. + Make rst2man and gi-docgen optional. + Fix documentation comments. ==== liburing ==== - avoid requiring kernel-default (bsc#1193522) ==== llvm14 ==== Version update (14.0.0 -> 14.0.1) - Update to version 14.0.1. * This release contains bug-fixes for the LLVM 14.0.0 release. This release is API and ABI compatible with 14.0.0. - Rebase llvm-do-not-install-static-libraries.patch. - Drop obsolete patches: * PPCISelLowering-Avoid-emitting-calls-to-__multi3.patch - Don't override default linker flags. (We were losing -Wl,-z,now.) ==== nautilus ==== Version update (42.0 -> 42.1.1) Subpackages: gnome-shell-search-provider-nautilus libnautilus-extension1 - Update to version 42.1.1: + Revert wrongly introduced dependency on unstable gnome-desktop. - Changes from version 42.1: + Add HighContrast syle support. + Preload dragged external file info in list view. + Override dark mode wallpaper when not using portal. + Avoid truncated popover in Compress dialog under X11. + Add checkerboard background to transparent thumbnails. + Style and scroll pathbar propperly in RTL languages. + Updated translations. ==== ncurses ==== Version update (6.3.20220416 -> 6.3.20220423) Subpackages: libncurses6 ncurses-utils terminfo-base - Include FORTIFY_SOURCE_3-fix.patch as the patch is needed for upcoming -D_FORTIFY_SOURCE=3 $optflag. We discussed the change with upstream, but the project disagrees about stricter rules used with -D_FORTIFY_SOURCE=3. - Add ncurses patch 20220423 + in-progress work on invalid_merge(), disable it (cf: 20220402). + fix memory leak in _nc_tic_dir() when called from _nc_set_writedir(). + fix memory leak in tic when "-c" option is used. ==== openssh ==== Subpackages: openssh-clients openssh-common openssh-server - read ssh and sshd config file also from /usr/etc - add openssh-server-config-rootlogin subpackage that enabled PermitRootLogin ==== pango ==== Version update (1.50.4 -> 1.50.7) Subpackages: libpango-1_0-0 typelib-1_0-Pango-1_0 - Update to version 1.50.7: + coretext: Fix the build. + editing: Fix moving across paragraph boundaries in rtl. + layout: Try harder to survive without fonts. + Windows: - Register a sans-serif font. - Try harder to load a font. - Update to version 1.50.6: + Drop hb-glib dependency. + Fix test font configuration. + Maintain order in pango_attr_list_change. + Fix a use-after-free in pango_attr_list_change. - Update to version 1.50.5: + Fix compiler warnings. + Enable cairo by default. + pango-view: Show more baselines. + layout: Handle baselines. - Use ldconfig_scriptlets macro for post(un) handling. ==== patterns-gnome ==== Subpackages: patterns-gnome-gnome_basic patterns-gnome-gnome_basis - Enable bijiben for default installation on SLE as well (bsc#1192326). ==== perl-Bootloader ==== Version update (0.938 -> 0.939) - merge gh#openSUSE/perl-bootloader#139 - fix sysconfig parsing (bsc#1198828) - 0.939 ==== pipewire ==== Version update (0.3.50 -> 0.3.51) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Update to version 0.3.51: * Highlights - Improve graph reconfiguration. - Extra configuration options for streams and filters with config rules and environment variable. - Improve module-pulse-tunnel latency, stability and error recovery. - pw-top, pw-cli and pw-link improvements. - Fix a channelmixer upmixing clipping issue. - The ROC module has seen many improvements. - Many more bugfixes and improvements. * PipeWire - The graph reconfiguration code was reworked: * Moved nodes will update the new driver quantum correctly. * Inactive nodes are ignored more. * Nodes that require a driver are now not scheduled anymore when they are passive (unused). * Improved performance, the graph is reconfigured with a minimal amount of changes. - Method and event argument names were improved. - A linker garbage collection problem was fixed. - Properties on threads are now implemented. Use common code to set thread name and add an option to set stack-size. - Streams and filters always want a driver now. This makes it possible to just link a playback stream to a capture stream without a driver and have it work. - Streams and filters can now also have rules in the config file. - Streams, filters, JACK, ALSA and v4l2 now support PIPEWIRE_PROPS environment variable to override node properties. - Add config section extensions. This provides a way for modules to have specific config to override the default config. - Handle realloc errors better. - Improve stream and filter property updates. * Modules - The pulse-tunnel modules has improved latency management and should now work a lot better. - Module-loopback, module-echo-cancel, module-filter-chain unload the module when a stream is destroyed. - Biquads in filter-chain now can have more gain (5->20 dB). - Filter-chain now has a builtin delay line filter. - Filter-chain can now parse the config key correctly in all cases. - The ROC sink and source saw many improvements. roc-source is now a stream by default that connects to the default sink. Both modules will try to set a graph rate. Both modules have an option to select the FEC mode. The ROC source has lower latency now. - Handle realloc errors better. * tools - pw-cat does not have --list-targets anymore, use one of the more advanced and less buggy tools such as wpctl or pw-cli to list sinks and sources. - pw-top has seen many improvements. * It now has some timeouts to reset the node values to their default state when unused. * The man page was improved. * Invalid timings and errors are displayed in a better way. - pw-cli and pw-link can now create links between all ports of given nodes. - pw-cat can now save to other file formats than wav, based on the extension of the filename. * SPA - The resampler now uses a different internal method for draining. It can now also handle 0 size buffers as input without draining. - The channelmixer now uses the front channel averages for FC and LFE. This avoids clipping and results in much better upmixing. - ALSA should now work again on 32 bits. (#2271) - The JSON parser now converts escaped unicode correctly to UTF8. * bluetooth - Codec switch improvements when the device is disconnected. * pulse-server - There is a new module-roc-sink-input module, the PulseAudio equivalent. - The ROC source and sink-input module now have a much lower latency. - The ROC module now has an option to select FEC mode. - Playback and record rate adjustements should work now. * JACK - Remove some useless pthread attributes. This makes JACK work in QEMU with sandboxing enabled. - The buffer_size callback is now only called when something has changed since the last process() callback or get_buffer_size() method. This fixes a GStreamer issue and is more in line with what JACK does. - Fix a potential deadlock when the process thread is doing IPC and the IPC thread is blocking on the data thread. - Allocation errors in metadata are handled better. - Rebase reduce-meson-dependency.patch. ==== policycoreutils ==== Subpackages: policycoreutils-python-utils python3-policycoreutils - Fix file list: package ru/man8/sepolgen.8 only in the devel package (was in devel and main). ==== python-jsonschema ==== Version update (3.2.0 -> 4.4.0) - Update to 4.4.0 * Add mypy support (#892) * Add support for Python 3.11 - Release 4.3.3 * Properly report deprecation warnings at the right stack level (#899) - Release 4.3.2 * Additional performance improvements for resolving refs (#896) - Release 4.3.1 * Resolving refs has had performance improvements (#893) - Release 4.3.0 * Fix undesired fallback to brute force container uniqueness check on certain input types (#893) * Implement a PEP544 Protocol for validator classes (#890) - Release 4.2.1 * Pin importlib.resources from below (#877) - Release 4.2.0 * Use importlib.resources to load schemas (#873) * Ensure all elements of arrays are verified for uniqueness by uniqueItems (#866) - Release 4.1.2 * Fix dependentSchemas to properly consider non-object instances to be valid (#850) - Release 4.1.1 * Fix prefixItems not indicating which item was invalid within the instance path (#862) - Release 4.1.0 * Add Python 3.10 to the list of supported Python versions - Release 4.0.1 * Fix the declaration of minimum supported Python version (#846) - Release 4.0.0 * Partial support for Draft 2020-12 (as well as 2019-09). Thanks to Thomas Schmidt and Harald Nezbeda. * False and 0 are now properly considered non-equal even recursively within a container (#686). As part of this change, uniqueItems validation may be slower in some cases. Please feel free to report any significant performance regressions, though in some cases they may be difficult to address given the specification requirement. * The CLI has been improved, and in particular now supports a - -output option (with plain (default) or pretty arguments) to control the output format. Future work may add additional machine-parsable output formats. * Code surrounding DEFAULT_TYPES and the legacy mechanism for specifying types to validators have been removed, as per the deprecation policy. Validators should use the TypeChecker object to customize the set of Python types corresponding to JSON Schema types. * Validation errors now have a json_path attribute, describing their location in JSON path format * Support for the IP address and domain name formats has been improved * Support for Python 2 and 3.6 has been dropped, with python_requires properly set. * multipleOf could overflow when given sufficiently large numbers. Now, when an overflow occurs, jsonschema will fall back to using fraction division (#746). * jsonschema.__version__, jsonschema.validators.validators, jsonschema.validators.meta_schemas and jsonschema.RefResolver.in_scope have been deprecated, as has passing a second-argument schema to Validator.iter_errors and Validator.is_valid. - Drop webcolors.patch ==== python-pycurl ==== Version update (7.43.0.6 -> 7.45.1) - Update to 7.45.1: * Fixed build against libcurl < 7.64.1 (patch by Scott Talbert). * Add CURLOPT_MAXLIFETIME_CONN (patch by fsbs). * Easy handle duplication support (patch by fsbs). * Support for unsetting a number of multi options (patch by fsbs). * pycurl classes can now be subclassed (patch by fsbs). * Multi callbacks' thread state management fixed (patch by fsbs). * Add CURL_LOCK_DATA_PSL (patch by fsbs). * Add support for SecureTransport SSL backend (MacOS) (patch by Scott Talbert). * Fixed Python thread initialization causing hangs on operations (patch by Scott Talbert). * getinfo(CURLINFO_FTP_ENTRY_PATH) now handles NULL return from libcurl, returning None in this case. * Python 3.9 is now officially supported (patch by Bill Collins). * Added CURLOPT_DOH_URL (patch by resokou). * Best effort Python 2 support has been reinstated. * Added missing fields to curl_version_info struct (patch by Hasan). * Added CURLINFO_CONDITION_UNMET (patch by Dima Tisnek). * Exposed MAX_CONCURRENT_STREAMS in CurlMulti (patch by Alexandre Pion). * Compilation fixed against Python 3.10 alpha (patch by Kamil Dudka). - Remove patch curl7770_compatibility.patch and remove_nose.patch: * They have both merged upstream. - Modify patch disable_randomly_failing_tests.patch: * Use pytest rather than nose methods. - Add patch curl-789-error-message.patch: * Handle missing ! in a returned error message. ==== python-tornado6 ==== - Add patch remove-multiheader-http-test.patch: * Do not test multi-line headers. ==== re2 ==== - Avoid sporadic failures by setting until-pass on CTest - Disable tests on ARMv6 ==== which ==== - https urls, added signature (but did not find the public key) ==== xdg-desktop-portal-gnome ==== Version update (42.0.1 -> 42.1) - Update to version 42.1: + Improve filechooser handling of file names and paths. + Updated translations. ==== xfsprogs ==== Version update (5.14.2 -> 5.15.0) - update to 5.15.0: - mkfs: increase the min log size to 64MB when possible - xfs_scrub: retry items that are ok except for XFAIL - xfs_scrub: fix xfrog_scrub_metadata error reporting - mkfs: enable inobtcount and bigtime by default - mkfs: prevent corruption of suboption string values - mkfs: document sample configuration file location - mkfs: add configuration files for a few LTS kernels - mkfs: add a config file for x86_64 pmem filesystems - xfs_quota: don't exit on "project" cmd failure - xfs_repair: don't guess about failure reason in phase6 - xfs_repair: update 2ndary superblocks after upgrades - xfs_scrub: fix reporting if we can't open devices - xfs_scrub: report optional features in version - libxcmd: use emacs mode for command history editing - libfrog: always use the kernel GETFSMAP definitions - mkfs.xfs(8): fix default inode allocator description - xfs_quota(8): fix up dump and report documentation - xfs_quota(8): document units in limit command - misc: add a crc32c self test to mkfs and repair - libxfs changes merged from kernel 5.15 ==== zenity ==== Version update (3.42.0 -> 3.42.1) - Update to version 3.42.1: + scale: Make OK button default (allows pressing Enter to accept selected value). + Fix maximum width of message dialogs to 60 characters, and make message dialogs non-resizable (fixes regression from 3b64d05e).

1 0

New Kubic snapshot 20220501 released!
by Richard Brown 02 May '22

02 May '22

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=T… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: NetworkManager apparmor argon2 btrfsprogs (5.16.1 -> 5.17) cockpit-podman coreutils (9.0 -> 9.1) curl (7.82.0 -> 7.83.0) elfutils (0.186 -> 0.187) etcd file fontconfig (2.13.1 -> 2.14.0) haproxy (2.5.5+git0.384c5c59a -> 2.5.6+git0.ba44b4312) libapparmor libeconf (0.4.5+git20220406.c9658f2 -> 0.4.6+git20220427.3016f4e) librsvg (2.54.0 -> 2.54.1) liburing ncurses (6.3.20220416 -> 6.3.20220423) openssh pango (1.50.4 -> 1.50.7) perl-Bootloader (0.938 -> 0.939) policycoreutils python-jsonschema (3.2.0 -> 4.4.0) python-tornado6 which xfsprogs (5.14.2 -> 5.15.0) === Details === ==== NetworkManager ==== Subpackages: libnm0 - Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-parser apparmor-profiles apparmor-utils python3-apparmor - Enhance zgrep-profile-mr870.diff to also allow/support zstd (boo#1198922). ==== argon2 ==== - use a source url ==== btrfsprogs ==== Version update (5.16.1 -> 5.17) Subpackages: btrfsprogs-udev-rules libbtrfs0 - update to 5.17: * check: * repair wrong num_devices in superblock * recognize overly long xattr names * fix wrong total bytes check for seed device * auto-repair on read on RAID56 * property set: unify handling of empty value to mean default, changed meaning for property 'compression' to allow reset to default and to set NOCOMPRESS, since kernel 5.14 * fixes: * dump-tree: print fs-verity items * fix location of system chunk on zoned filesystem * do not allow setting seeding flag on a filesystem with dirty log * mkfs and subpage support: use sectorsize as nodesize fallback for mixed profiles * preparatory work for extent tree v2, global roots * experimental feature (unstable interface, not built by default, do not use for production): * btrfstune: option --csum to switch checksum algorithm * other: * cleanups, refactoring * update documentation build, remove asciidocs leftovers * update fssum to consider xattrs * add fsstress - update to 5.16.2: * mkfs: fix detection of profile type for zoned mode when creating DUP * build: * add missing stub for zoned mode helper when zoned mode not enabled * fix 64bit types on MIPS and PowerPC * improved zoned mode support autodetection, for systems with existing blkzone.h header but missing support for zone capacity * other: * doc updates * test updates - add gpg signature validation - Update to 5.16.1 * mkfs: support DUP on metadata on zoned devices * subvol delete: drop warning for root when search ioctl fails * check: * fix --init-csum-tree to not create checksums for extents that are not supposed to have them * add check for metadata item levels * add udev rule for zoned devices as they require mq-deadline * build: fix redefinition of ALIGN on mixed old/new kernel/userspace (5.11) * other: * typo fixes * new tests * CI targets updated * Removed patches: btrfs-progs-kerncompat-add-local-definition-for-alig.patch (upstream) - add python-rpm-macros (bsc#1194748) - spec: also provide btrfs-progs as it's common package name in other distros - spec: clean up conditionals for < 12 versions - spec: let SLE12 build again (conditional dependency of libreiserfscore) - Removed patches: sles11-defaults.h (no SLE11 compatibility anymore) - Added patches: btrfs-progs-kerncompat-add-local-definition-for-alig.patch (fix build on SLE12/SLE15) - Update to 5.16 * rescue: new subcommand clear-uuid-tree to fix failed mount due to bad uuid subvolume keys, caught by tree-checker * fi du: skip inaccessible files * prop: properly resolve to symlink targets * send, receive: fix crash after parent subvolume lookup errors * build: * fix build on 5.12+ kernels due to changes in linux/kernel.h * fix build on musl with old kernel headers * other: * error handling fixes, cleanups, refactoring * extent tree v2 preparatory work * lots of RST documentation updates (last release with asciidoc sources), https://btrfs.readthedocs.io - Update to 5.15.1 * fi usage: fix wrongly reported space of used or unallocated space * fix detection of block device discard capability * check: add more sanity checks for checksum items * build: make sphinx optional backend for documentation - Update to 5.15 * mkfs: new defaults! * no-holes * free-space-tree * DUP for metadata unconditionally * libbtrfsutil: add missing profile defines * libbtrfs: minimize its impact on the other code, refactor and separate implementation where needed, cleanup afterwards, reduced header exports * documentation: introduce sphinx build and RST versions of manual pages, will become the new format and replace asciidoc * fixes: warning regarding v1 space cache when only v2 (free space tree) is enabled - Update to 5.14.1 * fixes * zoned mode * properly detect non-zoned devices in emulation mode * properly create quota tree * raid1c3/4 also excluded from unsupported profiles * use sysfs-based detection of device discard capability, fix mkfs-time trim for non-standard devices * mkfs: fix creation of populated filesystem with free space tree * detect multipath devices (needs libudev) * replace start: add option -K/--nodiscard, similar to what mkfs or device add has * dump-tree: print complete root_item * mkfs: add option --verbose * sb-mod: better help, no checksum calculation on read-only actions * subvol show: * print more information (regarding send and receive) * print warning if read-write subvolume has received_uuid set * property set: * add parameter -f to force changes * changing ro->rw switch now needs -f if subvolume has received_uuid set, (see documentation) * build: optional libudev (on by default) * other * remove deprecated support for CREATE_ASYNC bit for subvolume ioctl * CI updates * new and updated tests - Update patch: mkfs-default-features.patch (add stub define for new defaults) - Update to 5.14.1 * fixes: * defrag: fix parsing of compression (option -c) * add workaround for old kernels when reading zone sizes * let only check and restore open the fs with transid failures, namely preventing btrfstune to do so * convert: --uuid copy does not fail on duplicate uuids - Update to 5.14 * convert: * new option --uuid to copy, generate or set a given uuid * improve output * mkfs: * allow to create degenerate raid0 (on 1 device) and raid10 (on 2 devices) * image: * improved error messages * fix some alignment of restored image * subvol delete: allow to delete by id when path is not resolvable * check: * require alignment of nodesize for 64k page systems * detect and fix invalid block groups * libbtrfs (deprecated): * remove most exported symbols, leave only a few that are used by snapper * no version change (still 0.1) * remove btrfs-list.h, btrfsck.h * fixes: * reset generation of space v1 if v2 is used * fi us: don't wrongly report missing device size when partition is not readable * other: * build: experimental features * build: better detection of 64bit timestamp support for ext4 * corrupt-block: block group items * new and updated tests * refactoring * experimental features: * new image dump format, with data - Update to 5.13.1 * build: fix build on musl libc due to missing definition of NAME_MAX * check: * batch more work into one transaction when clearing v1 free space inodes * detect directoris with wrong number of links * libbtrfsutil: fix race between subvolume iterator and deletion * mkfs: be more specific about supported profiles for zoned device * other: * documentation updates - Update to 5.13 * restore: remove loop checks for extent count and directory scan * inspect dump-tree: new options to print node (--csum-headers) and data checksums (--csum-items) * fi usage: * print stripe count for striped profiles * print zoned information: size, total unusable * mkfs: print note about sha256 accelerated module loading issue * check: ability to reset dev_item::bytes_used * fixes * detect zoned kernel support at run time too * exclusive op running check return value * fi resize: support cancel (kernel 5.14) * device remove: support cancel (kernel 5.14) * documentation about general topics * compression * zoned mode * storage model * hardware considerations * other * libbtrfsutil API overview * help text fixes and updates * hash speedtest measure time, cycles using perf and print throughput - Add --disable-zoned for leap - revert previous change, unintentionally disables zstd on tumbleweed - Fix build for leap * --disable-zstd if leap < 42.3 * --disable-zoned for leap - Update to 5.12.1 * build: fix missing symbols in libbtrfs * mkfs: check for minimal number of zones * check: fix warning about cache generation when free space tree is enabled * fix superblock write in zoned mode on 16K pages - Update to 5.12 * libbtrfsutil: relicensed to LGPL v2.1+ * mkfs: zoned mode support (kernel 5.12+) * fi df: show zone_unusable per profile type in zoned mode * fi usage: show total amount of zone_unusable * fi resize: fix message for exact size * image: fix warning and enlarge output file if necessary * core * refactor chunk allocator for more modes * implement zoned mode support: allocation and writes, sb log * crypto/hash refactoring and cleanups * refactoring and cleanups * other * test updates * CI updates * travis-ci integration disabled * docker images updated, more coverage * incomplete build support for Android removed * doc updates * chattr mode m for 'NOCOMPRESS" * swapfile used from fstab * how to add a new export to libbtrfsutil * update status of mount options since 5.9 - Update to 5.11.1 * properly format checksums when a mismatch is reported * check: fix false alert on tree block crossing 64K page boundary * convert: * refuse to convert filesystem with 'needs_recovery' * update documentation to require fsck before conversion * balance convert: fix raid56 warning when converting other profiles * fi resize: improved summary * other * build: fix checks and autoconf defines * fix symlink paths for CI support scripts * updated tests - Update to 5.11 * fix device path canonicalization for device mapper devices * receive: remove workaround for setting capabilities, all stable kernels have been patched * receive: fix duplicate mount path detection * rescue: new subcommand create-control-device * device stats: minor fix for plain text format output * build: detect if e2fsprogs support 64bit timestamps * build: drop libmount, required functionality has been reimplemented * mkfs: warn when raid56 is used * balance convert: warn when raid56 is used * other * new and updated tests * documentation updates * seeding device * raid56 status * CI updates * docker images for various distros - Update to 5.10.1 * static build works again * other: * add a way to test static binaries with the testsuite * clarify scrub docs * update dependencies, minimum version for libmount is 2.24, this may change in the future - Update to 5.10 * scrub status: * print percentage of progress * add size unit options * fi usage: also print free space from statfs * convert: copy full 64 bit timestamp from ext4 if availalble * check: * add ability to repair extent item generation * new option to remove leftovers from inode number cache (-o inode_cache) * check for already running exclusive operation (balance, device add/...) when starting one * preliminary json output support for 'device stats' * fixes: * subvolume set-default: id 0 correctly falls back to toplevel * receive: align internal buffer to allow fast CRC calculation * logical-resolve: distinguish -o subvol and bind mounts * build: new dependency libmount * other * doc fixes and updates * new tests * ci on gitlab temporarily disabled * debugging output enhancements - prepare usrmerge (boo#1029961) - Update to 5.9: * mkfs: * switch default to single profile for multi-device filesystem, up to now it was raid0 that may not be simple to convert to some other profile as raid0 needs a workspace on all device for that * new option -R for run-time options (eg. mount time enabled), now understands free-space-tree * subvolume delete: * refuse to delete the default subvolume (kernel will not allow that but the error reason is not obvious) * warn on EPERM, eg. if send is on progress on the subvolume * convert: * fix 32bit overflows on large filesystems * improved error handling and error messages * check free space taking fragmentation into account * check: * detect and repair wrong inode generation * minor improvement in error reporting on roots * libbtrfsutils: follow main package versioning (5.9) * add pkg-config file definitions * python-btrfsutil: follow main package versioning (5.9) * inspect tree-stats: print node counts for each level, fanout * other: * docs: * remove obsolete mount options (alloc_start, subvolrootid) * deleting default subvolume is not permitted * updated or fixed tests * .editorconfig updates * move files to kernel-shared/ * CI: * updated to use zstd 1.4.5 * fix reiserfs build * more builds with asan, ubsan * sb-mod updates * build: * print .so versions of libraries in configure summary - Update to 5.7: * mkfs: * new option to enable features otherwise enabled at runtime, now implemented for quotas, 'mkfs.btrfs -R quota' * fix space accounting for small image, DUP and --rootdir * option -A removed * check: detect ranges with overlapping csum items * fi usage: report correct numbers when plain RAID56 profiles are used * convert: ensure the data chunks size never exceed device size * libbtrfsutil: update documentation regarding subvolume deletion * build: support libkcapi as implementation backend for cryptographic primitives * core: global options for verbosity (-v, -q), subcommands -v or -q are aliases and will continue to work but are considered deprecated, current command output is preserved to keep scripts working * other: * build warning fixes * btrfs-debugfs ported to python 3 - Update to 5.6.1: * print warning when multiple block group profiles exist, update 'fi usage' summary, add docs to maual page explaining the situation * build: optional support for libgcrypt or libsodium, providing hash implementations * updated docs - Fix content of _dracutmodulesdir variable: this definitively does not belong to libexecdir. - Update to 5.6: * inspect logical-resolve: support LOGICAL_INO_V2 as new option '-o', helps advanced dedupe tools * inspect: user larger buffer (64K) for results * subvol delete: support deletion by id (requires kernel 5.7+) * dump-tree: new option --hide-names, replace any names (file, directory, subvolume, xattr) in the output with stubs * various fixes - Update to 5.4.1 * build: fix docbook5 build * check: do extra verification of extent items, inode items and chunks * qgroup: return ENOTCONN if quotas not running (needs updated kernel) * other: various test fixups - BuildRequire pkgconfig(udev) instead of udev: Allow OBS to shortcut through the -mini flavor. - Use pkg-config --modversion udev to identify the current udev version. This is more portable and supports the -mini flavors. - Update to 5.4 * support new hash algorithms (kernel 5.5): * mkfs.btrfs and btrfs-convert with --csum, crc32c, xxhash, sha256, blake2 * mkfs: support new raid1c3 and raid1c4 block group profiles (kernel 5.5) * check: * --repair delays start with a warning, can be skipped using --force * enhanced detetion of inode types from partial data, more options for repair * receive: fix quiet option * image: speed up chunk loading * fi usage: * sort devices by id * print ratio of used/total per block group type * rescue zero-log: reset the log pointers directly, avoid reading some other potentially damaged structures * new make target install-static to install only static binaries/libraries * other * docs updates * new tests * cleanups and refactoring - Update to 5.3.1: * libbtrfs: fix link breakage due to missing symbols - Updaet to 5.3: * mkfs: * new option to specify checksum algorithm (only crc32c) * fix xattr enumeration * dump-tree: BFS (breadth-first) traversal now default * libbtrfsutil: remove stale BTRFS_DEV_REPLACE_ITEM_STATE_x defines * ci: add support for gitlab * other: * preparatory work for more checksum algorithms * docs update * switch to docbook5 backend for asciidoc * fix build on uClibc due to missing backtrace() * lots of printf format fixups - Enable build of python-bindings for libbtrfsutil - Update to 5.2.2: * check: * fix false report of wrong byte count for orphan inodes * option -E was not handled correctly * new check and repair for root item generation * balance: check for full-balance before background fork * mkfs: check that total device size does not overflow 16EiB * dump-tree: print DEV_STATS key type * other: * new and updated tests * doc fixups and updates - update to 5.2.1 * scrub status: fix ETA calculation after resume * check: fix crash when using -Q * restore: fix symlink owner restoration * mkfs: fix regression with mixed block groups * core: fix commit to process all delayed refs * other: * minor cleanups * test updates - update to 5.2 * subvol show: print qgroup information when available * scrub: * status: show ETA, revamp the whole output * fix reading/writing of last position on resume/cancel, potentially skipping part of the filesystem on next resume * dump-tree: add new option --noscan to use only devices given on the commandline * all-in-one binary (busybox style) with mkfs.btrfs, btrfs-image, btrfs-convert, btrfstune * image: fix hang when there are more than 32 cpus online and compression is requested * convert: fix some false ENOSPC errors when --rootdir is used * build: fix gcc9 warnings * core changes * command handling cleanups * dead code removal * cmds-* files moved to cmds/ * other shared userspace files moved to common/ * utils.c split into more files * preparatory work for more output formats * libbtrfsutil: fix unaligned access * other * new and updated tests * fix tests so CI passes again * sb-mod can modify more superblock items - update to version 5.1 * repair: flush/FUA support to avoid breaking metadata COW * file extents repair no longer relies on data in extent tree * lowmem: fix false error reports about gaps between extents * add inode mode check and repair for various objects * add check for invalid combination of nocow/compressed extents * device scan option to forget scanned devices [new] * mkfs: use same chunk size as kernel for initial creation * dev-repace: better report when other exclusive operation runs * help for sntax errors on command lines, print relevant msgs * defrag: able to open files in RO mode * dump-tree: --block can be specified multiple times - update to version 4.20.2 * dump-super: minor output fixup * revert fix for prefix detection of receive path, this is temporary and unbreaks existing user setups - Use correct path for dracut-fsck-help.txt in module-setup.sh (bsc#1122539) * Remove module-setup.sh * Add module-setup.sh.in - Advise user of fs recovery options when we fail to mount (fate#320443, bsc#1122539) * Add dracut-fsck-help.txt * Add module-setup.sh - update to version 4.20.1 * libbtrfs: fix build of external tools due to missing symbols * ci: enable library test - update to version 4.20 * new feature: metadata uuid * lightweight change of UUID without rewriting all metadata (incompatible change) * done by btrfstune -m/-M, needs kernel support, 5.0+ * image: * fix block groups when restoring from multi-device image * only enlarge result image if it's a regular file * check * more device extent checks and fixes * can repair dir item with mismatched hash * mkfs: uuid tree created with proper contents * fix mount point detection due to partial prefix match * other: * new tests, build fixes, doc updates * libbtrfsutil: fix tests if kernel lacks support for new subvolume ioctls - partial cleanup with spec-cleaner - drop 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch - drop 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch - drop 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch - drop 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch - drop 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch - Use %license instead of %doc [bsc#1082318] - Implement fate#325871 * Added 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch * Added 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch * Added 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch * Added 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch * Added 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch ==== cockpit-podman ==== - Remove translate-toolkit which is not available in SLE ==== coreutils ==== Version update (9.0 -> 9.1) - remove builddisabled conditions for rings - will be done now as BuildFlags: excludebuilds - gnulib-simple-backup-fix.patch: Add patch to make simple backups in correct directory; broken in 9.1. See https://bugs.gnu.org/55029 - update to 9.1: * chmod -R no longer exits with error status when encountering symlinks. All files would be processed correctly, but the exit status was incorrect. * If 'cp -Z A B' checks B's status and some other process then removes B, cp no longer creates B with a too-generous SELinux security context before adjusting it to the correct value. * 'cp --preserve=ownership A B' no longer ignores the umask when creating B. Also, 'cp --preserve-xattr A B' is less likely to temporarily chmod u+w B. * 'id xyz' now uses the name 'xyz' to determine groups, instead of xyz's uid. * 'ls -v' and 'sort -V' no longer mishandle corner cases like "a..a" vs "a.+" or lines containing NULs. Their behavior now matches the documentation for file names like ".m4" that consist entirely of an extension, and the documentation has been clarified for unusual cases. * 'mv -T --backup=numbered A B/' no longer miscalculates the backup number for B when A is a directory, possibly inflooping. * cat now uses the copy_file_range syscall if available, when doing simple copies between regular files. This may be more efficient, by avoiding user space copies, and possibly employing copy offloading or reflinking. * chown and chroot now warn about usages like "chown root.root f", which have the nonstandard and long-obsolete "." separator that causes problems on platforms where user names contain ".". Applications should use ":" instead of ".". * cksum no longer allows abbreviated algorithm names, so that forward compatibility and robustness is improved. * date +'%-N' now suppresses excess trailing digits, instead of always padding them with zeros to 9 digits. It uses clock_getres and clock_gettime to infer the clock resolution. * dd conv=fsync now synchronizes output even after a write error, and similarly for dd conv=fdatasync. * dd now counts bytes instead of blocks if a block count ends in "B". For example, 'dd count=100KiB' now copies 100 KiB of data, not 102,400 blocks of data. The flags count_bytes, skip_bytes and seek_bytes are therefore obsolescent and are no longer documented, though they still work. * ls no longer colors files with capabilities by default, as file-based capabilties are very rarely used, and lookup increases processing per file by about 30%. It's best to use getcap [-r] to identify files with capabilities. * ls no longer tries to automount files, reverting to the behavior before the statx() call was introduced in coreutils-8.32. * stat no longer tries to automount files by default, reverting to the behavior before the statx() call was introduced in coreutils-8.32. Only `stat --cached=never` will continue to automount files. * timeout --foreground --kill-after=... will now exit with status 137 if the kill signal was sent, which is consistent with the behavior when the --foreground option is not specified. This allows users to distinguish if the command was more forcefully terminated. * dd now supports the aliases iseek=N for skip=N, and oseek=N for seek=N, like FreeBSD and other operating systems. * dircolors takes a new --print-ls-colors option to display LS_COLORS entries, on separate lines, colored according to the entry color code. * dircolors will now also match COLORTERM in addition to TERM environment variables. The default config will apply colors with any COLORTERM set. * cp, mv, and install now use openat-like syscalls when copying to a directory. * This avoids some race conditions and should be more efficient. * The new 'date' option --resolution outputs the timestamp resolution. * With conv=fdatasync or conv=fsync, dd status=progress now reports any extra final progress just before synchronizing output data, since synchronizing can take a long time. * printf now supports printing the numeric value of multi-byte characters. * sort --debug now diagnoses issues with --field-separator characters that conflict with characters possibly used in numbers. * 'tail -f file | filter' now exits on Solaris when filter exits. * root invoked coreutils, that are built and run in single binary mode, now adjust /proc/$pid/cmdline to be more specific to the utility being run, rather than using the general "coreutils" binary name. - coreutils-i18n.patch: Re-sync the patch with Fedora. - drop coreutils-chmod-fix-exit-status-ign-symlinks.patch (upstream) ==== curl ==== Version update (7.82.0 -> 7.83.0) Subpackages: libcurl4 - Patches rework: * Refreshed all patches as -p1. * Use autopatch macro. * Renamed: - dont-mess-with-rpmoptflags.diff -> dont-mess-with-rpmoptflags.patch * Removed (already upstream): - curl-fix-verifyhost.patch - Update to 7.83.0: * Security fixes: - (bsc#1198766, CVE-2022-27776) Auth/cookie leak on redirect - (bsc#1198723, CVE-2022-27775) Bad local IPv6 connection reuse - (bsc#1198608, CVE-2022-27774) Credential leak on redirect - (bsc#1198614, CVE-2022-22576) OAUTH2 bearer bypass in connection re-use * Changes: - curl: add %header{name} experimental support in -w handling - curl: add %{header_json} experimental support in -w handling - curl: add --no-clobber - curl: add --remove-on-error - header api: add curl_easy_header and curl_easy_nextheader - msh3: add support for QUIC and HTTP/3 using msh3 * Bugfixes: - appveyor: add Cygwin build - appveyor: only add MSYS2 to PATH where required - BearSSL: add CURLOPT_SSL_CIPHER_LIST support - BearSSL: add CURLOPT_SSL_CTX_FUNCTION support - BINDINGS.md: add Hollywood binding - CI: Do not use buildconf. Instead, just use: autoreconf -fi - CI: install Python package impacket to run SMB test 1451 - configure.ac: move -pthread CFLAGS setting back where it used to be - configure: bump the copyright year range int the generated output - conncache: include the zone id in the "bundle" hashkey - connecache: remove duplicate connc->closure_handle check - connect: make Curl_getconnectinfo work with conn cache from share handle - connect: use TCP_KEEPALIVE only if TCP_KEEPIDLE is not defined - cookie.d: clarify when cookies are sent - cookies: improve errorhandling for reading cookiefile - curl/system.h: update ifdef condition for MCST-LCC compiler - curl: error out if -T and -d are used for the same URL - curl: error out when options need features not present in libcurl - curl: escape '?' in generated --libcurl code - curl: fix segmentation fault for empty output file names. - curl_easy_header: fix typos in documentation - CURLINFO_PRIMARY_PORT.3: clarify which port this is - CURLOPT*TLSAUTH.3: they only work with OpenSSL or GnuTLS - CURLOPT_DISALLOW_USERNAME_IN_URL.3: use uppercase URL - CURLOPT_PREQUOTE.3: only works for FTP file transfers, not dirs - CURLOPT_PROGRESSFUNCTION.3: fix typo in example - CURLOPT_UNRESTRICTED_AUTH.3: extended explanation - CURLSHOPT_UNLOCKFUNC.3: fix the callback prototype - docs/HYPER.md: updated to reflect current hyper build needs - docs/opts: Mention Schannel client cert type is P12 - docs: Fix missing semicolon in example code - docs: lots of minor language polish - English: use American spelling consistently - fail.d: tweak the description - firefox-db2pem.sh: make the shell script safer - ftp: fix error message for partial file upload - gen.pl: change wording for mutexed options - GHA: add openssl3 jobs moved over from zuul - GHA: build hyper with nightly rustc - GHA: move bearssl jobs over from zuul - gha: move the event-based test over from Zuul - gtls: fix build for disabled TLS-SRP - http2: handle DONE called for the paused stream - http2: RST the stream if we stop it on our own will - http: avoid auth/cookie on redirects same host diff port - http: close the stream (not connection) on time condition abort - http: reject header contents with nul bytes - http: return error on colon-less HTTP headers - http: streamclose "already downloaded" - hyper: fix status_line() return code - hyper: fix tests 580 and 581 for hyper - hyper: no h2c support - infof: consistent capitalization of warning messages - ipv4/6.d: clarify that they are about using IP addresses - json.d: fix typo (overriden -> overridden) - keepalive-time.d: It takes many probes to detect brokenness - lib/warnless.[ch]: only check for WIN32 and ignore _WIN32 - lib670: avoid double check result - lib: #ifdef on USE_HTTP2 better - lib: fix some misuse of curlx_convert_wchar_to_UTF8 - lib: remove exclamation marks - libssh2: compare sha256 strings case sensitively - libssh2: make the md5 comparison fail if wrong length - libssh: fix build with old libssh versions - libssh: fix double close - libssh: Improve fix for missing SSH_S_ stat macros - libssh: unstick SFTP transfers when done event-based - macos: set .plist version in autoconf - mbedtls: remove 'protocols' array from backend when ALPN is not used - mbedtls: remove server_fd from backend - mk-ca-bundle.pl: Use stricter logic to process the certificates - mk-ca-bundle.vbs: delete this script in favor of mk-ca-bundle.pl - mlc_config.json: add file to ignore known troublesome URLs - mqtt: better handling of TCP disconnect mid-message - ngtcp2: add client certificate authentication for OpenSSL - ngtcp2: avoid busy loop in low CWND situation - ngtcp2: deal with sub-millisecond timeout - ngtcp2: disconnect the QUIC connection proper - ngtcp2: enlarge H3_SEND_SIZE - ngtcp2: fix HTTP/3 upload stall and avoid busy loop - ngtcp2: fix memory leak - ngtcp2: fix QUIC_IDLE_TIMEOUT - ngtcp2: make curl 1ms faster - ngtcp2: remove remote_addr which is not used in a meaningful way - ngtcp2: update to work after recent ngtcp2 updates - ngtcp2: use token when detecting :status header field - nonblock: restore setsockopt method to curlx_nonblock - openssl: check SSL_get_peer_cert_chain return value - openssl: enable CURLOPT_SSL_EC_CURVES with BoringSSL - openssl: fix CN check error code - options: remove mistaken space before paren in prototype - perl: removed a double semicolon at end of line - pop3/smtp: return *WEIRD_SERVER_REPLY when not understood - projects/README: converted to markdown - projects: Update VC version names for VS2017, VS2022 - rtsp: don't let CSeq error override earlier errors - runtests: add 'bearssl' as testable feature - runtests: make 'oldlibssh' be before 0.9.4 - schannel: remove dead code that will never run - scripts/copyright.pl: ignore the new mlc_config.json file - scripts: move three scripts from lib/ to scripts/ - test1135: sync with recent API updates - test1459: disable for oldlibssh - test375: fix line endings on Windows - test386: Fix an incorrect test markup tag - test718: edited slightly to return better HTTP - tests/server/util.h: align WIN32 condition with util.c - tests: refactor server/socksd.c to support --unix-socket - timediff.[ch]: add curlx helper functions for timeval conversions - tls: make mbedtls and NSS check for h2, not nghttp2 - tool and tests: force flush of all buffers at end of program - tool_cb_hdr: Turn the Location: into a terminal hyperlink - tool_getparam: error out on missing -K file - tool_listhelp.c: uppercase URL - tool_operate: fix a scan-build warning - tool_paramhlp: use feof(3) to identify EOF correctly when using fread(3) - transfer: redirects to other protocols or ports clear auth - unit1620: call global_init before calling Curl_open - url: check sasl additional parameters for connection reuse. - vtls: provide a unified APLN-disagree string for all backends - vtls: use a backend standard message for "ALPN: offers %s" - vtls: use a generic "ALPN, server accepted" message - winbuild/README.md: fixup dead link - winbuild: Add a Visual Studio example to the README - wolfssl: fix compiler error without IPv6 ==== elfutils ==== Version update (0.186 -> 0.187) Subpackages: libasm1 libdw1 libelf1 - Update to version 0.187: * debuginfod: Support -C option for connection thread pooling. * debuginfod-client: Negative cache file are now zero sized instead of no-permission files. * addr2line: The -A, --absolute option, which shows file names including the full compilation directory is now the default. To get the old behavior use the new option --relative. * readelf, elflint: Recognize FDO Packaging Metadata ELF notes * libdw, debuginfo-client: Load libcurl lazily only when files need to be fetched remotely. libcurl is now never loaded when DEBUGINFOD_URLS is unset. And when DEBUGINFOD_URLS is set, libcurl is only loaded when the debuginfod_begin function is called. ==== etcd ==== - add variable ETCD_OPTIONS to both service unit and configuration file this allows the user to easily add things like "--enable-v2=true" ==== file ==== Subpackages: file-magic libmagic1 - Try to solve 32bit import dependency problems (boo#1198788) ==== fontconfig ==== Version update (2.13.1 -> 2.14.0) Subpackages: libfontconfig1 - Seems we now need python3 for building - update to 2.14.0: * Fix endianness on generating MD5 cache name * Fix a typo in the description of FcWeightFromOpenTypeDouble * fc-validate: returns an error code when missing some glyphs * Fallback uuid-based name to read a cache if no MD5-based cache * fc-cache: Show font directories to generate cache with -v * Replace UUID file mechanism with per-directory 'map' attribute [v2] * memleak fixes - drop fontconfig-do-not-remove-UUID-file.patch (obsolete) - add skip-network-test.patch ==== haproxy ==== Version update (2.5.5+git0.384c5c59a -> 2.5.6+git0.ba44b4312) - Update to version 2.5.6+git0.ba44b4312: * [RELEASE] Released version 2.5.6 * REGTESTS: fix the race conditions in be2dec.vtc ad field.vtc * BUG/MINOR: connection: "connection:close" header added despite 'close-spread-time' * BUG/MINOR: sample: add missing use_backend/use-server contexts in smp_resolve_args * Revert "CI: github actions: disable -Wno-deprecated" * BUG/MINOR: rules: Fix check_capture() function to use the right rule arguments * BUG/MEDIUM: rules: Be able to use captures defined in defaults section * BUG/MINOR: rules: Forbid captures in defaults section if used by a backend * DOC: remove my name from the config doc * MEDIUM: queue: use tasklet_instant_wakeup() to wake tasks * MINOR: task: add a new task_instant_wakeup() function * BUG/MAJOR: connection: Never remove connection from idle lists outside the lock * BUG/MINOR: cache: Disable cache if applet creation fails * BUILD: calltrace: fix wrong include when building with TRACE=1 * SCRIPTS: announce-release: add shortened links to pending issues * DOC: lua: update a few doc URLs * SCRIPTS: announce-release: update the doc's URL * BUG/MEDIUM: compression: Don't forget to update htx_sl and http_msg flags * BUG/MEDIUM: fcgi-app: Use http_msg flags to know if C-L header can be added * BUG/MEDIUM: stream: do not abort connection setup too early * BUILD: compiler: use a more portable set of asm(".weak") statements * BUILD: sched: workaround crazy and dangerous warning in Clang 14 * BUG/MEDIUM: mux-h1: Don't request more room on partial trailers * BUG/MINOR: mux-h2: use timeout http-request as a fallback for http-keep-alive * BUG/MINOR: mux-h2: do not use timeout http-keep-alive on backend side * BUILD: debug: mark the __start_mem_stats/__stop_mem_stats symbols as weak * BUG/MINOR: cache: do not display expired entries in "show cache" * BUG/MINOR: mux-h2: do not send GOAWAY if SETTINGS were not sent * CI: cirrus: switch to FreeBSD-13.0 * CI: github actions: disable -Wno-deprecated * BUG/MINOR: stats: define the description' background color in dark color scheme * CI: Update to actions/cache@v3 * CI: Update to actions/checkout@v3 * MEDIUM: global: Add a "close-spread-time" option to spread soft-stop on time window * Revert "BUILD: opentracing: display warning in case of using OT_USE_VARS at compile time" * MAJOR: opentracing: reenable usage of vars to transmit opentracing context * DEBUG: opentracing: display the contents of the err variable after setting * CLEANUP: opentracing: added FLT_OT_PARSE_INVALID_enum enum * DEBUG: opentracing: show return values of all functions in the debug output * MINOR: opentracing: improved normalization of context variable names * CLEANUP: opentracing: added variable to store variable length * CLEANUP: opentracing: added flt_ot_smp_init() function * MINOR: opentracing: only takes the variables lock on shared entries * Revert "MINOR: opentracing: change the scope of the variable 'ot.uuid' from 'sess' to 'txn'" * CLEANUP: opentracing: removed unused function flt_ot_var_get() * CLEANUP: opentracing: removed unused function flt_ot_var_unset() * DOC: opentracing: corrected comments in function descriptions * EXAMPLES: opentracing: refined shell scripts for testing filter performance * BUG/BUILD: opentracing: fixed OT_DEFINE variable setting * BUG/MINOR: opentracing: setting the return value in function flt_ot_var_set() * BUG/MEDIUM: http-act: Don't replace URI if path is not found or invalid * BUG/MEDIUM: http-conv: Fix url_enc() to not crush const samples * BUG/MEDIUM: mux-h1: Set outgoing message to DONE when payload length is reached * BUG/MEDIUM: promex: Be sure to never set EOM flag on an empty HTX message * BUG/MEDIUM: hlua: Don't set EOM flag on an empty HTX message in HTTP applet * BUG/MEDIUM: stats: Be sure to never set EOM flag on an empty HTX message * BUG/MINOR: fcgi-app: Don't add C-L header on response to HEAD requests * BUG/MINOR: httpclient: end callback in applet release * BUG/MINOR: ssl/cli: Remove empty lines from CLI output * CI: github actions: update OpenSSL to 3.0.2 * DOC: remove double blanks in configuration.txt * BUG/MAJOR: mux_pt: always report the connection error to the conn_stream * BUG/MINOR: cli/stream: fix "shutdown session" to iterate over all threads * BUG/MINOR: samples: add missing context names for sample fetch functions * REGTESTS: ssl: use X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY for cert check * BUG/MEDIUM: mux-h1: Properly detect full buffer cases during message parsing * BUG/MEDIUM: mux-fcgi: Properly handle return value of headers/trailers parsing * DOC: reflect H2 timeout changes * BUG/MINOR: tools: url2sa reads too far when no port nor path * DOC: config: Explictly add supported MQTT versions * MEDIUM: mqtt: support mqtt_is_valid and mqtt_field_value converters for MQTTv3.1 * BUG/MINOR: rules: Initialize the list element when allocating a new rule * BUG/MEDIUM: mux-h2: make use of http-request and keep-alive timeouts * MEDIUM: mux-h2: slightly relax timeout management rules * BUG/MEDIUM: trace: avoid race condition when retrieving session from conn->owner * BUG/MEDIUM: stream-int: do not rely on the connection error once established * BUG/MEDIUM: mux-h1: only turn CO_FL_ERROR to CS_FL_ERROR with empty ibuf * CI: github actions: switch to LibreSSL-3.5.1 * BUG/MINOR: httpclient: CF_SHUTW_NOW should be tested with channel_is_empty() * BUG/MINOR: httpclient: process the response when received before the end of the request * BUG/MINOR: httpclient: only check co_data() instead of HTTP_MSG_DATA * BUG/MINOR: server/ssl: free the SNI sample expression * BUILD: httpclient: fix build without SSL * BUG/MINOR: httpclient: send the SNI using the host header * MINOR: server: export server_parse_sni_expr() function * BUG/MINOR: httpclient/lua: stuck when closing without data * BUG/MINOR: tools: fix url2sa return value with IPv4 ==== libapparmor ==== - Enhance zgrep-profile-mr870.diff to also allow/support zstd (boo#1198922). ==== libeconf ==== Version update (0.4.5+git20220406.c9658f2 -> 0.4.6+git20220427.3016f4e) - Update to version 0.4.6+git20220427.3016f4e: * econftool: * * Parsing error: Reporting file and line nr. * * --delimeters=spaces Taking all kind of spaces for delimiter * libeconf: Fixed bsc#1198165: Parsing files correctly which have space characters AND none space characters as delimiters. ==== librsvg ==== Version update (2.54.0 -> 2.54.1) Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2 - Update to version 2.54.1: + Fix oversight in the Minimum Supported Rust Version (MSRV): this release requires Rust 1.56 or later. + Make rst2man and gi-docgen optional. + Fix documentation comments. ==== liburing ==== - avoid requiring kernel-default (bsc#1193522) ==== ncurses ==== Version update (6.3.20220416 -> 6.3.20220423) Subpackages: libncurses6 ncurses-utils terminfo-base - Include FORTIFY_SOURCE_3-fix.patch as the patch is needed for upcoming -D_FORTIFY_SOURCE=3 $optflag. We discussed the change with upstream, but the project disagrees about stricter rules used with -D_FORTIFY_SOURCE=3. - Add ncurses patch 20220423 + in-progress work on invalid_merge(), disable it (cf: 20220402). + fix memory leak in _nc_tic_dir() when called from _nc_set_writedir(). + fix memory leak in tic when "-c" option is used. ==== openssh ==== Subpackages: openssh-clients openssh-common openssh-server - read ssh and sshd config file also from /usr/etc - add openssh-server-config-rootlogin subpackage that enabled PermitRootLogin ==== pango ==== Version update (1.50.4 -> 1.50.7) - Update to version 1.50.7: + coretext: Fix the build. + editing: Fix moving across paragraph boundaries in rtl. + layout: Try harder to survive without fonts. + Windows: - Register a sans-serif font. - Try harder to load a font. - Update to version 1.50.6: + Drop hb-glib dependency. + Fix test font configuration. + Maintain order in pango_attr_list_change. + Fix a use-after-free in pango_attr_list_change. - Update to version 1.50.5: + Fix compiler warnings. + Enable cairo by default. + pango-view: Show more baselines. + layout: Handle baselines. - Use ldconfig_scriptlets macro for post(un) handling. ==== perl-Bootloader ==== Version update (0.938 -> 0.939) - merge gh#openSUSE/perl-bootloader#139 - fix sysconfig parsing (bsc#1198828) - 0.939 ==== policycoreutils ==== Subpackages: policycoreutils-python-utils python3-policycoreutils - Fix file list: package ru/man8/sepolgen.8 only in the devel package (was in devel and main). ==== python-jsonschema ==== Version update (3.2.0 -> 4.4.0) - Update to 4.4.0 * Add mypy support (#892) * Add support for Python 3.11 - Release 4.3.3 * Properly report deprecation warnings at the right stack level (#899) - Release 4.3.2 * Additional performance improvements for resolving refs (#896) - Release 4.3.1 * Resolving refs has had performance improvements (#893) - Release 4.3.0 * Fix undesired fallback to brute force container uniqueness check on certain input types (#893) * Implement a PEP544 Protocol for validator classes (#890) - Release 4.2.1 * Pin importlib.resources from below (#877) - Release 4.2.0 * Use importlib.resources to load schemas (#873) * Ensure all elements of arrays are verified for uniqueness by uniqueItems (#866) - Release 4.1.2 * Fix dependentSchemas to properly consider non-object instances to be valid (#850) - Release 4.1.1 * Fix prefixItems not indicating which item was invalid within the instance path (#862) - Release 4.1.0 * Add Python 3.10 to the list of supported Python versions - Release 4.0.1 * Fix the declaration of minimum supported Python version (#846) - Release 4.0.0 * Partial support for Draft 2020-12 (as well as 2019-09). Thanks to Thomas Schmidt and Harald Nezbeda. * False and 0 are now properly considered non-equal even recursively within a container (#686). As part of this change, uniqueItems validation may be slower in some cases. Please feel free to report any significant performance regressions, though in some cases they may be difficult to address given the specification requirement. * The CLI has been improved, and in particular now supports a - -output option (with plain (default) or pretty arguments) to control the output format. Future work may add additional machine-parsable output formats. * Code surrounding DEFAULT_TYPES and the legacy mechanism for specifying types to validators have been removed, as per the deprecation policy. Validators should use the TypeChecker object to customize the set of Python types corresponding to JSON Schema types. * Validation errors now have a json_path attribute, describing their location in JSON path format * Support for the IP address and domain name formats has been improved * Support for Python 2 and 3.6 has been dropped, with python_requires properly set. * multipleOf could overflow when given sufficiently large numbers. Now, when an overflow occurs, jsonschema will fall back to using fraction division (#746). * jsonschema.__version__, jsonschema.validators.validators, jsonschema.validators.meta_schemas and jsonschema.RefResolver.in_scope have been deprecated, as has passing a second-argument schema to Validator.iter_errors and Validator.is_valid. - Drop webcolors.patch ==== python-tornado6 ==== - Add patch remove-multiheader-http-test.patch: * Do not test multi-line headers. ==== which ==== - https urls, added signature (but did not find the public key) ==== xfsprogs ==== Version update (5.14.2 -> 5.15.0) - update to 5.15.0: - mkfs: increase the min log size to 64MB when possible - xfs_scrub: retry items that are ok except for XFAIL - xfs_scrub: fix xfrog_scrub_metadata error reporting - mkfs: enable inobtcount and bigtime by default - mkfs: prevent corruption of suboption string values - mkfs: document sample configuration file location - mkfs: add configuration files for a few LTS kernels - mkfs: add a config file for x86_64 pmem filesystems - xfs_quota: don't exit on "project" cmd failure - xfs_repair: don't guess about failure reason in phase6 - xfs_repair: update 2ndary superblocks after upgrades - xfs_scrub: fix reporting if we can't open devices - xfs_scrub: report optional features in version - libxcmd: use emacs mode for command history editing - libfrog: always use the kernel GETFSMAP definitions - mkfs.xfs(8): fix default inode allocator description - xfs_quota(8): fix up dump and report documentation - xfs_quota(8): document units in limit command - misc: add a crc32c self test to mkfs and repair - libxfs changes merged from kernel 5.15

1 0