Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=3&version=Tumbleweed&build=20200701 https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&component=MicroOS&query_format=advanced&resolution=--- Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: NetworkManager-branding-openSUSE dhcp flatpak (1.6.3 -> 1.6.4) graphene (1.10.0 -> 1.10.2) gssdp (1.2.2 -> 1.2.3) gtk3 (3.24.20 -> 3.24.21) gtksourceview4 (4.6.0 -> 4.6.1) gupnp (1.2.2 -> 1.2.3) haveged (1.9.8 -> 1.9.13) lame libnma (1.8.28 -> 1.8.30) mozilla-nss (3.52.1 -> 3.53.1) patterns-containers perl-HTTP-Message (6.24 -> 6.25) pipewire (0.3.5 -> 0.3.6) plasma5-workspace python-py (1.8.1 -> 1.9.0) python-rpm-macros (20200529.b301e36 -> 20200625.e862151) rpm sysfsutils vulkan-loader (1.2.141 -> 1.2.145) yast2 (4.3.9 -> 4.3.12) === Details === ==== NetworkManager-branding-openSUSE ==== - Also fix variable expansion in %description (boo#1172773). ==== dhcp ==== Subpackages: dhcp-client - The server package still requires insserv-compat: the .service files only call out to legacy sysv init scripts that are still sourcing /etc/rc.status (boo#1173440). ==== flatpak ==== Version update (1.6.3 -> 1.6.4) Subpackages: libflatpak0 system-user-flatpak typelib-1_0-Flatpak-1_0 - Update to version 1.6.4: + This release backports some of the OCI authenticator fixes from the 1.7 series, and should now be able to host flatpak images on e.g. docker hub. + Other changes: - Fix a use-after free in libflatpak. - Don't list p2p downgrades in list of available updates. ==== graphene ==== Version update (1.10.0 -> 1.10.2) Subpackages: libgraphene-1_0-0 typelib-1_0-Graphene-1_0 - Update to version 1.10.2: + Disable SSE on 32bit builds on Windows with MSVC + Add more documentation on the conventions used by matrix operations + Fix Euler angles/matrix conversion + Various bugs fixed. ==== gssdp ==== Version update (1.2.2 -> 1.2.3) - Update to version 1.2.3: + Prevent crash if client is not initialized + Fix critical if network device does not exists + Fix ::1 multicast + client. Add getter for network mask ==== gtk3 ==== Version update (3.24.20 -> 3.24.21) Subpackages: gtk3-data gtk3-schema gtk3-tools libgtk-3-0 typelib-1_0-Gtk-3_0 - Update to version 3.24.21: + Wayland: - Prevent crashes with offscreen windows. - Handle disorderly tablet/pad disconnects. + GtkFileChooser: - Translate the type column. - Add a tracker3 search engine. - Rate-limit trash monitoring. - Make get_filter work for native chooser. + GtkGLArea: Fix a redraw problem. + GtkScrolledWindow: Fix kinetic scrolling. + Add a gtk-cursor-aspect-ratio setting. + GDK: - Improve frame clock smoothness. - Fix frame clock monotonicity. + Adwaita: Improve notebook tab legibility. + Updated translations. ==== gtksourceview4 ==== Version update (4.6.0 -> 4.6.1) - Update to version 4.6.1: + Fix various G-I annotations + Improve draw-spaces coloring in solarized-light + javascript.lang: Performance improvements + c.lang: Fixes for #include preprocessor + sql.lang: Language completeness improvements + latex.lang: additional keywords + sh.lang: improved parameter expansion + yara.lang: initial support for YARA + Updated translations. ==== gupnp ==== Version update (1.2.2 -> 1.2.3) - Update to version 1.2.3: + Requires GSSDP 1.2.3 + Always build the gupnp-binding-tool manpage + Fix static linking issue caused by libguul subproject + Add mitigations for CVE-2020-12695 + Implement UDA 2.0 April 17 2020 Addendum ==== haveged ==== Version update (1.9.8 -> 1.9.13) - Update to 1.9.13: * added support for --version [Jirka Hladky] * updated systemd service file [Jirka Hladky] * fix a memory leak in havege_destroy [Anakin Zhang] * updated version reported by program [Jirka Hladky] * fix ordering cycle with private tmp [Christian Hesse] * Updated systemd service file [Nicolas Braud-Santoni] * Bump soname [Nicolas Braud-Santoni] * Fix crash on shutdown in threaded mode [Sergei Trofimovich] * Fix compilation with --enable-threads [Lars Wendler] ==== lame ==== - Create pkgconfig file. ==== libnma ==== Version update (1.8.28 -> 1.8.30) Subpackages: libnma0 typelib-1_0-NMA-1_0 - Update to version 1.8.30: + Properly dispose wireless security objects. + Don't clear the key when users set a non-pkcs12 certificate in the certificate chooser UI. + Added missing VAPI macro file. - Drop libnma-fix-segment-fault.patch: Fixed upstream. ==== mozilla-nss ==== Version update (3.52.1 -> 3.53.1) Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs - add FIPS mode patches from SLE stream nss-fips-aes-keywrap-post.patch nss-fips-approved-crypto-non-ec.patch nss-fips-cavs-dsa-fixes.patch nss-fips-cavs-general.patch nss-fips-cavs-kas-ecc.patch nss-fips-cavs-kas-ffc.patch nss-fips-cavs-keywrap.patch nss-fips-cavs-rsa-fixes.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch nss-fips-constructor-self-tests.patch nss-fips-detect-fips-mode-fixes.patch nss-fips-dsa-kat.patch nss-fips-gcm-ctr.patch nss-fips-pairwise-consistency-check.patch nss-fips-rsa-keygen-strictness.patch nss-fips-tls-allow-md5-prf.patch nss-fips-use-getrandom.patch nss-fips-use-strong-random-pool.patch nss-fips-zeroization.patch nss-fix-dh-pkcs-derive-inverted-logic.patch - update to NSS 3.53.1 * required for Firefox 78 * CVE-2020-12402 - Use constant-time GCD and modular inversion in MPI. (bmo#1631597, bsc#1173032) - Add ppc-old-abi-v3.patch as per upstream bug https://bugzilla.mozilla.org/show_bug.cgi?id=1642174 - update to NSS 3.53 Notable changes * SEED is now moved into a new freebl directory freebl/deprecated bmo#1636389 * SEED will be disabled by default in a future release of NSS. At that time, users will need to set the compile-time flag (bmo#1622033) to disable that deprecation in order to use the algorithm. * Algorithms marked as deprecated will ultimately be removed * Several root certificates in the Mozilla program now set the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can query to further refine trust decisions. (bmo#1618404, bmo#1621159). If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp before the SCT or NotBefore date of a certificate that builtin issued, then clients can elect not to trust it. ==== patterns-containers ==== - Remove duplicate word in description of kubic_admin pattern - Fix Summary of kubeadm pattern to start with a capital letter ==== perl-HTTP-Message ==== Version update (6.24 -> 6.25) - updated to 6.25 see /usr/share/doc/packages/perl-HTTP-Message/Changes 6.25 2020-06-28 17:52:12Z - Don't run Changes test on master in GH actions - move Clone from required to suggests prerequisite, to re-enable fatpacking ==== pipewire ==== Version update (0.3.5 -> 0.3.6) Subpackages: libpipewire-0_3-0 pipewire-modules pipewire-spa-tools pipewire-tools - Update to version 0.3.6: * Extensive memory leak fixing and stress testing was done. A big leak in screen sharing with DMA-BUF was fixed. * Compile fixes * Stability improvements in jack and pulseaudio layers. * Added the old portal module to make the Camera portal work again. This will be moved to the session manager in future versions. * Improvements to the GStreamer source and sink shutdown. * Fix compatibility with v2 clients again when negotiating buffers. - Disable vulkan if the vulkan package is too old (as in SLE 15 SP0 and SP1) - Add patch to build with meson >= 0.46.0 since 0.50.0 is not really needed: * fix-meson-required-version.patch ==== plasma5-workspace ==== Subpackages: gmenudbusmenuproxy plasma5-session plasma5-session-wayland plasma5-workspace-libs xembedsniproxy - Add patch to speed up artwork shader compilation in VMs (boo#1172763): * 0001-mediacontroller-Use-half-the-samples-for-better-perf.patch ==== python-py ==== Version update (1.8.1 -> 1.9.0) - Update to 1.9.0 * Add type annotation stubs ==== python-rpm-macros ==== Version update (20200529.b301e36 -> 20200625.e862151) - Update to version 20200625.e862151: * fix pytest_arch PYTHONPATH * expand calls pyproject* macros (revert #45) * let the shell expand PYTHONPATH - Update to version 20200623.3ea9b62: * fix PYTHONPATH on pytest_arch macro - Update to version 20200622.1919233: * Expand %buildroot first (avoid endless cycle; bsc#1162743) - Update to version 20200622.1f4c5d2: * Add missing semicolon - For Factory change %system_python to python3. - Update to version 20200603.503823c: * Don't add empty path to PYTHONPATH setting. * Do not expand macros, just print them unexpanded (for %pytest* and %pyproject* macros) * Replace py.test -> pytest ==== rpm ==== - temporarily back out change of %_libexecdir to /usr/libexec - Update rpmconfigcheck: Remove bashism and use /bin/sh instead of /bin/bash. - update auto-config-update-aarch64-ppc64le.diff (bsc#1170849): * only update if hostarch isn't there ==== sysfsutils ==== - Added a _service file, as per new OBS requirement - Added a patch to bring sysfsutils up to latest upstream, which now is in place: * sysfsutils-latest-changes.diff.gz - Added patches which have been submitted upstream but not yet merged: * 0001-Fix-compiler-complain-about-multiple-defs-of-my_stdo.patch * 0002-Fix-compiler-complaint-about-string-truncation.patch * 0003-Fix-more-string-issues-for-gcc-10.patch And removing a patch that's subsumed by the above patches: * sysfsutils-fix-compiler-issues.patch Lastly, replaced the hand-rolled sysfsutils-2.1.0.tar.gz with upstream archive file sysfsutils-sysfsutils-2_1_0.tar.gz (retreived with OBS download service), though the contents of the two are the same. ==== vulkan-loader ==== Version update (1.2.141 -> 1.2.145) - Update to release 1.2.145 * scripts: Use named params for generator options * loader: Fix crash in vkGetDeviceQueue2 * loader: Use MoltenVK in app bundle if found * build: include system headers last ==== yast2 ==== Version update (4.3.9 -> 4.3.12) - Products: Do not solve dependencies while checking libzypp connection (bsc#1170322). - 4.3.12 - Avoid failure when downloading release notes from an inoperative proxy (bsc#1173447). - 4.3.11 - AutoClient#export method can receive a hash as an argument (bsc#1171356). - 4.3.10 -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-kubic+owner@opensuse.org