Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version=Tumbleweed&build=20220210 https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&component=MicroOS&query_format=advanced&resolution=--- Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: accountsservice augeas dolphin (21.12.2 -> 21.12.2.1) fwupd (1.7.3 -> 1.7.5) gjs (1.70.0 -> 1.70.1) gnome-disk-utility gnome-settings-daemon gnome-shell gnome-shell-extensions gobject-introspection gstreamer (1.18.5 -> 1.18.6) gstreamer-plugins-bad (1.18.5 -> 1.18.6) gstreamer-plugins-base (1.18.5 -> 1.18.6) gstreamer-plugins-good (1.18.5 -> 1.18.6) gvfs harfbuzz (3.2.0 -> 3.3.2) installation-images-MicroOS (17.39 -> 17.41) keylime libzypp (17.29.3 -> 17.29.4) multipath-tools (0.8.8+45+suse.628d603e -> 0.8.8+57+suse.dfb672fe) pam-config (1.5 -> 1.6) patterns-base python-pyOpenSSL (21.0.0 -> 22.0.0) python-pyparsing (3.0.6 -> 3.0.7) python-setuptools (57.4.0 -> 58.3.0) webkit2gtk3 (2.34.4 -> 2.34.5) webkit2gtk3-soup2 (2.34.4 -> 2.34.5) wireplumber (0.4.7 -> 0.4.8) wpa_supplicant === Details === ==== accountsservice ==== Subpackages: libaccountsservice0 typelib-1_0-AccountsService-1_0 - Add ac9b14f1c1bbca413987d0bbfeaad05804107e9a.patch: Fix build with meson 0.61.0. ==== augeas ==== - testsuite requires glibc-locale, buildrequire it ==== dolphin ==== Version update (21.12.2 -> 21.12.2.1) Subpackages: dolphin-part libdolphinvcs5 - Update to 21.12.2.1 * Fix opening FTP files in their preferred app * Use the CDN based endpoint rather than the legacy endpoint ==== fwupd ==== Version update (1.7.3 -> 1.7.5) Subpackages: libfwupd2 libfwupdplugin5 typelib-1_0-Fwupd-2_0 - Update to version 1.7.5: * This release adds the following features: + Add a flag to indicate the firmware is not provided by the vendor + Add support for showing dependency versions in JSON format + Allow fwupd to operate in socket mode without a D-Bus daemon + Allow marking a device as End-of-Life by the OEM vendor + Allow specifying the machine Best Known Configuration locally + Fall back to the ARM Device Tree 'compatible' data when required * This release fixes the following bugs: + Be more robust by retrying IPMI transactions on servers + Change the expired Redfish password when required + Fix a ModemManager segfault on startup for some MBIM-QDU devices + Fix a possible dell-dock segfault at startup + Fix compiling with new versions of efivar + Fix the Nordic bootloader type detection + Fix USB4 retimer enumeration + Get the SMBIOS table and host machine ID when running on Windows + Show results when calling get-details if failing requirements + Uninhibit the modem using ModemManager after upgrade * This release adds support for the following hardware: + Future Analogix devices + NovaCustom NV4x - Changes from version 1.7.4: * This release adds the following features: + Add firmware branch support for ModemManager devices + Allow firmware engineers to patch files at known offsets + Show why more devices are not marked as updatable * This release fixes the following bugs: + Allow fwupdtool to be run as the non-root user in more cases + Assign the Logitech bulkcontroller update interface correctly + Do not allow UEFI updates when the laptop lid is closed + Do not autoload ipmi-si to avoid warning on non-server hardware + Do not show a critical warning for a weird TPM event log + Fix waiting for USB devices when using Windows + Ignore non-PCI NVMe devices * This release adds support for the following hardware: + HP USB-C G2 Dock + Many UF2 devices, experimentally + More PixArt devices + Nordic HID devices using MCUBoot + Quectel EG25-G LTE Modem + ThinkPad Thunderbolt 4 Dock ==== gjs ==== Version update (1.70.0 -> 1.70.1) Subpackages: libgjs0 typelib-1_0-GjsPrivate-1_0 - Update to version 1.70.1: + Build and crash fixes backported from the development branch. + Closed bugs and merge requests: - Handle optional out parameters in callbacks - Link fails on Debian armel|mipsel|powerpc: needs more - latomic - gjs/jsapi-util.cpp: fix build on gcc-12 - Drop patches fixed upstream: + b9e122044a7ccc1e2a3374c680b6ea82066bfa59.patch + 62025d4a2738a36ea5f1a7cebef08b22b5eef613.patch ==== gnome-disk-utility ==== - Add 60.patch: Fix build with meson 0.61 and newer. ==== gnome-settings-daemon ==== - Add 283.patch: Fix build with meson 0.60.0 and newer. - Renumber SLE/LEAP only patches to 1000+ range, make the separation of appliance more clear. ==== gnome-shell ==== Subpackages: gnome-shell-calendar - Update gs-fate318433-prevent-same-account-multi-logins.patch: Fix the JS ERR: Error: Wrong type number; string expected (bsc#1195179 bsc#1195141). - Add 2078.patch: Fix build with meson 0.61 and newer. ==== gnome-shell-extensions ==== Subpackages: gnome-shell-classic gnome-shell-extensions-common - Add cdaa837d48894737ca0b4e7d2dfb365119e53759.patch: Fix build with meson 0.61 and newer. Backported to apply on stable version. ==== gobject-introspection ==== Subpackages: girepository-1_0 libgirepository-1_0-1 - Add upstream patches to fix build with meson 0.61.0 and newer: + 7c1178069f1c58a05ec56a94ca6ba124215a947b.patch + effb1e09dee263cdac4ec593e8caf316e6f01fe2.patch + 827494d6415b696a98fa195cbd883b50cc893bfc.patch ==== gstreamer ==== Version update (1.18.5 -> 1.18.6) Subpackages: libgstreamer-1_0-0 typelib-1_0-Gst-1_0 - Update to version 1.18.6: + gstplugin: Fix for UWP build + gst-ptp-helper: Do not disable multicast loopback + concat: fix qos event handling + pluginfeature: Fix object leak + baseparse: fix invalid avg_bitrate after reset + multiqueue: Fix query unref race on flush + gst: Initialize optional event/message fields when parsing + bitwriter: Fix the trailing bits lost when getting its data + multiqueue: never consider a queue that is not waiting + input-selector: Use proper segments when cleaning cached buffers ==== gstreamer-plugins-bad ==== Version update (1.18.5 -> 1.18.6) Subpackages: libgstadaptivedemux-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstphotography-1_0-0 libgstplayer-1_0-0 libgstsctp-1_0-0 libgsturidownloader-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 - Update to version 1.18.6: + interlace: Fix a double-unref on shutdown + webrtcbin: Chain up to parent constructed method + webrtc: fix log error message in function gst_webrtc_bin_set_local_description + mxfdemux: don't error out if VANC track only contains packets we don't handle + av1parser: Fix data type of film grain param + assrender: Support RFC8081 mime types + pitch: Specify layout as required for negotiation + magicleap: update lumin_rt libraries names to the latest official version + codecs: h265decoder: Fix per-slice leak + mpeg4videoparse: fix criticals trying to insert configs that don't exist yet + webrtcbin: Always set SINK/SRC flags + mpegtspacketizer: memcmp potentially seen_before data + zxing: update to support version 1.1.1 - Drop service, use source url, upstream changes in git. ==== gstreamer-plugins-base ==== Version update (1.18.5 -> 1.18.6) Subpackages: libgstallocators-1_0-0 libgstapp-1_0-0 libgstaudio-1_0-0 libgstfft-1_0-0 libgstgl-1_0-0 libgstpbutils-1_0-0 libgstriff-1_0-0 libgstrtp-1_0-0 libgstrtsp-1_0-0 libgstsdp-1_0-0 libgsttag-1_0-0 libgstvideo-1_0-0 - Update to version 1.18.6: + tagdemux: Fix crash when presented with malformed files (security fix) + videoencoder: make sure the buffer is writable before modifying metadata + video-converter: Fix for broken gamma remap with high bitdepth YUV output + sdpmessage: fix mapping single char fmtp params + oggdemux: fix a race in push mode when performing the duration seek + uridecodebin: Fix critical warnings + audio-converter: Fix resampling when there's nothing to output + tcp: fix build on Solaris + uridecodebin3: Nullify current item after all play items are freed. + audio-resampler: Fix segfault when we can't output any frames + urisourcebin: Handle sources with dynamic pads and pads already present + playbin2/3: autoplug/caps: don't expand caps to ANY + uridecodebin3/urisourcebin: Reusability fixes + rtspconnection: Only reset timeout when socket is unused + gstvideoaggregator.c: fix build with gcc 4.8 - Drop service, use source url, upstream changes in git. ==== gstreamer-plugins-good ==== Version update (1.18.5 -> 1.18.6) - Update to version 1.18.6: + rtspsrc: Fix critical while serializing timeout element message + multifilesrc: fix caps leak + shout2: Add compatibility for libshout >= 2.4.2 shout_open return values + v4l2: Update fmt if padded height is greater than fmt height + v4l2bufferpool: set video alignment of video meta + qtmux: fix deadlock in gst_qt_mux_prepare_moov_recovery + matroska: Add support for muxing/demuxing ffv1 + qtdemux: Try to build AAC codec-data whenever it's possible - Remove service, use source url, upstream changes in git. ==== gvfs ==== Subpackages: gvfs-backends - Add 17a067b9b823a0d54e061eae45ff8e2c7e4a88d0.patch: Fix build with meson 0.61 and newer. Backported to apply on stable version. ==== harfbuzz ==== Version update (3.2.0 -> 3.3.2) Subpackages: libharfbuzz-gobject0 libharfbuzz-icu0 libharfbuzz-subset0 libharfbuzz0 typelib-1_0-HarfBuzz-0_0 - update to 3.3.2: + Revert splitting of pair positioning values introduced in 3.3.0 as it proved problematic - includes changes from 3.3.1: + Fix heap-use-after-free in harfbuzz-subset introduced in previous release - includes changes from 3.3.0: + Improved documentation, code cleanup + The low 16-bits of face index will be used by hb_face_create() to select a face inside a font collection file format, while the high 16-bits will be used by hb_font_create() to load the named instance + Glyph positions and other font metrics now apply synthetic slant set by hb_font_set_synthetic_slant(), for improved positioning for synthetically slanted fonts + Fixed unintentional locale dependency in hb_variation_to_string() for decimal point representation + When applying pair positioning (kerning) the positioning value is split between the two sides of the pair for improved cursor positioning between such pairs + Introduced new HB_GLYPH_FLAG_UNSAFE_TO_CONCAT, to be used in conjunction with HB_GLYPH_FLAG_UNSAFE_TO_BREAK for optimizing re-shaping during line breaking. Check the documentation for further details + Improved handling of macrolanguages when mapping BCP 47 codes to OpenType tags ==== installation-images-MicroOS ==== Version update (17.39 -> 17.41) - merge gh#openSUSE/installation-images#572 - debuginfodeps: blacklist usr/bin/syslinux-mtools - 17.41 - merge gh#openSUSE/installation-images#554 - Support for new oscrc location - 17.40 ==== keylime ==== Subpackages: keylime-agent keylime-config keylime-firewalld keylime-registrar keylime-tpm_cert_store keylime-verifier python38-keylime - Change back agent_uuid to hostname - Set tpm_hash_alg to sha256 by default - Update version.diff patch to point to the correct version number - Fix issue with Tornado, when multiple workers are started * Add cloud_verifier_tornado-use-fork_processes.patch (bsc#1195605) ==== libzypp ==== Version update (17.29.3 -> 17.29.4) - Fix handling of redirected command in-/output (bsc#1195326) This fixes delays at the end of zypper operations, where zypper unintentionally waits for appdata plugin scripts to complete. - version 17.29.4 (22) ==== multipath-tools ==== Version update (0.8.8+45+suse.628d603e -> 0.8.8+57+suse.dfb672fe) Subpackages: kpartx libmpath0 - Version 0.8.8+57+suse.dfb672fe * kpartx.rules: skip MD devices (bsc#1195644) * libmultipath: hwtable: use ALUA for all LIO targets (bsc#1195649) * multipathd.service: drop ExecStartPre for loading dm-multipath (bsc#1195397) ==== pam-config ==== Version update (1.5 -> 1.6) - Update to Version 1.6 - Create /etc/pam.d if not there - Support file option of pam_pwhistory ==== patterns-base ==== Subpackages: patterns-base-base patterns-base-bootloader patterns-base-minimal_base patterns-base-x11 - No longer recommend apparmor pattern by enhanced_base: installations using YaST have the LSM selected during installation. Other setups might just as well pick SELinux. ==== python-pyOpenSSL ==== Version update (21.0.0 -> 22.0.0) - update to 22.0.0: - Drop support for Python 2.7. - The minimum ``cryptography`` version is now 35.0. - Expose wrappers for some `DTLS <https://en.wikipedia.org/wiki/Datagram_Transport_Layer_Security>`_ primitives. - drop check_inv_ALPN_lists.patch: upstream ==== python-pyparsing ==== Version update (3.0.6 -> 3.0.7) - specfile: * update copyright year - update to version 3.0.7: * Fixed bug #345, in which delimitedList changed expressions in place using expr.streamline(). Reported by Kim Gräsman, thanks! * Fixed bug #346, when a string of word characters was passed to WordStart or WordEnd instead of just taking the default value. Originally posted as a question by Parag on StackOverflow, good catch! * Fixed bug #350, in which White expressions could fail to match due to unintended whitespace-skipping. Reported by Fu Hanxi, thank you! * Fixed bug #355, when a QuotedString is defined with characters in its quoteChar string containing regex-significant characters such as ., *, ?, [, ], etc. * Fixed bug in ParserElement.run_tests where comments would be displayed using with_line_numbers. * Added optional "min" and "max" arguments to `delimited_list`. PR submitted by Marius, thanks! * Added new API change note in `whats_new_in_pyparsing_3_0_0`, regarding a bug fix in the `bool()` behavior of `ParseResults`. * Prior to pyparsing 3.0.x, the `ParseResults` class implementation of `__bool__` would return `False` if the `ParseResults` item list was empty, even if it contained named results. In 3.0.0 and later, `ParseResults` will return `True` if either the item list is not empty *or* if the named results dict is not empty. * Minor enhancement to Word generation of internal regular expression, to emit consecutive characters in range, such as "ab", as "ab", not "a-b". * Fixed character ranges for search terms using non-Western characters in booleansearchparser, PR submitted by tc-yu, nice work! * Additional type annotations on public methods. ==== python-setuptools ==== Version update (57.4.0 -> 58.3.0) - update to 58.3.0: * ``setup.py install`` and ``easy_install`` commands are now officially deprecated. Use other standards-based installers (like pip) and builders (like build). Workloads reliant on this behavior should pin to this major version of Setuptools. * #1988: Deprecated the ``bdist_rpm`` command. * #2785: Replace confirparser's readfp with read_file, deprecated since Python 3.2. * #2823: Officially deprecated support for ``setup_requires``. Users are encouraged instead to migrate to PEP 518 ``build-system.requires`` in ``pyproject.toml``. Users reliant on ``setup_requires`` should consider pinning to this major version to avoid disruption. * #2762: Changed codecov.yml to configure the threshold to be lower * #2757: Add windows arm64 launchers for scripts generated by easy_install. * #2800: Added ``--owner`` and ``--group`` options to the ``sdist`` command, for specifying file ownership within the produced tarball (similarly to the corresponding distutils ``sdist`` options). * #2792: Document how the legacy and non-legacy versions are compared, and reference to the `PEP 440 <https://www.python.org/dev/peps/pep-0440/>`_ scheme. * #2773: Retain case in setup.cfg during sdist. * #2777: Build does not fail fast when ``use_2to3`` is supplied but set to a false value. * #2769: Build now fails fast when ``use_2to3`` is supplied. * #2765: In Distribution.finalize_options, suppress known removed entry points to avoid issues with older Setuptools. * #2086: Removed support for 2to3 during builds. Projects should port to a unified codebase or pin to an older version of Setuptools using PEP 518 build-requires. * #2712: Added implicit globbing support for `[options.data_files]` values. * #2737: fix various syntax and style errors in code snippets in docs ==== webkit2gtk3 ==== Version update (2.34.4 -> 2.34.5) Subpackages: libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 webkit2gtk-4_1-injected-bundles - Update to version 2.34.5 (boo#1195735): + Improve VP8 codec selection when using GStreamer 1.20. + Fix connecting to the accessiblity bus when using the Bubblewrap sandbox. + Fix links being incorrectly activated when starting a pinch zoom gesture. + Fix touch-based scrolling. + Fix the build with recent toolchains based on GCC 12 and on older ones as included e.g. in Ubuntu 18.04. + Fix the build with ICU 60, version 61 is no longer required. + Fix several crashes and rendering issues. + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,. + Drop webkit2gtk3-gcc12.patch: fixed upstream. - Update constraints for disk space even more, now at 20 gig. ==== webkit2gtk3-soup2 ==== Version update (2.34.4 -> 2.34.5) Subpackages: libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 webkit2gtk-4_0-injected-bundles - Update to version 2.34.5 (boo#1195735): + Improve VP8 codec selection when using GStreamer 1.20. + Fix connecting to the accessiblity bus when using the Bubblewrap sandbox. + Fix links being incorrectly activated when starting a pinch zoom gesture. + Fix touch-based scrolling. + Fix the build with recent toolchains based on GCC 12 and on older ones as included e.g. in Ubuntu 18.04. + Fix the build with ICU 60, version 61 is no longer required. + Fix several crashes and rendering issues. + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,. + Drop webkit2gtk3-gcc12.patch: fixed upstream. - Update constraints for disk space even more, now at 20 gig. ==== wireplumber ==== Version update (0.4.7 -> 0.4.8) Subpackages: libwireplumber-0_4-0 wireplumber-audio - Update to version 0.4.8: * Highlights: - Added bluetooth profile auto-switching support. Bluetooth headsets will now automatically switch to the HSP/HFP profile when making a call and go back to the A2DP profile after the call ends (#90) - Added an option (enabled by default) to auto-switch to echo-cancel virtual device nodes when the echo-cancel module is loaded in pipewire-pulse, if there is no other configured default node * Fixes: - Fixed a regression that prevented nodes from being selected as default when using the pro-audio profile (#163) - Fixed a regression that caused encoded audio streams to stall (#178) - Fixed restoring bluetooth device profiles * Library: - A new WpSpaJson API was added as a front-end to spa-json. This is also exposed to Lua, so that Lua scripts can natively parse and write data in the spa-json format * Misc: - wpctl can now list the configured default sources and sinks and has a new command that allows clearing those configured defaults, so that wireplumber goes back to choosing the default nodes based on node priorities - The restore-stream script now has its own configuration file in main.lua.d/40-stream-defaults.lua and has independent options for restoring properties and target nodes - The restore-stream script now supports rule-based configuration to disable restoring volume properties and/or target nodes for specific streams, useful for applications that misbehave when we restore those (see #169) - policy-endpoint now assigns the "Default" role to any stream that does not have a role, so that it can be linked to a pre-configured endpoint - The route-settings-api module was dropped in favor of dealing with json natively in Lua, now that the API exists - Drop patch which is already upstream: * 0001-default-nodes-handle-nodes-without-Routes.patch - Update split-config-file.py script ==== wpa_supplicant ==== - Apply Revert-DBus-Add-sae-to-interface-key_mgmt-capabilities.patch to fix connect with AVM FB, if WPA3 transition mode is activated, e.g. Wifi -> Security: is WPA2 + WPA3, alt. switch to WPA2 (CCMP) (bsc#1195312) - drop restore-old-dbus-interface.patch, wicked has been switching to the new dbus interface in version 0.6.66. - drop wpa_supplicant-getrandom.patch : glibc has been updated so the getrandom() wrapper is now there - config: * enable QCA vendor extensions to nl80211 * enable EAP-EKE * Support HT overrides * WPA3-Enterprise * TLS v1.1 and TLS v1.2 * Fast Session Transfer (FST) * Automatic Channel Selection * Multi Band Operation * Fast Initial Link Setup * Mesh Networking (IEEE 802.11s) - config: * Reenable Fast BSS Transition (likely fixing bsc#1195312) * Enable OCV, security feature that prevents MITM multi-channel attacks * Enable OWE for better hotspot support