Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version=Tumbleweed&build=20220618 https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&component=MicroOS&query_format=advanced&resolution=--- Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: NetworkManager (1.38.0 -> 1.38.2) cockpit (251.3 -> 271) cockpit-podman (33 -> 49.1) gtk3 gtk4 krb5 (1.19.3 -> 1.20) ldb (2.5.0 -> 2.5.1) libnma (1.8.38 -> 1.8.40) powerdevil5 samba (4.16.1+git.237.1d04c5f421f -> 4.16.2+git.262.6acc6531bc7) yast2 (4.5.4 -> 4.5.5) === Details === ==== NetworkManager ==== Version update (1.38.0 -> 1.38.2) Subpackages: NetworkManager-wwan libnm0 typelib-1_0-NM-1_0 - Update to version 1.38.2: + Fix race condition with pppd that caused failures when activating PPPoE connections. + Unbreak DHCPv6 over PPP. + Don't ignore IPv6 DNS servers received from PPP. + Fix crash while checking WEP capability of Wi-Fi interfaces. + Ensure DHCP is restarted every time the link goes up. + Fix struct alignment issues seen on some architectures. + Various other bugfixes and improvements. ==== cockpit ==== Version update (251.3 -> 271) Subpackages: cockpit-bridge cockpit-packagekit cockpit-system - css-overrides.patch: css overrides for better theming support - new version 271 https://cockpit-project.org/blog/cockpit-271.html - cockpit-redhatfont.diff: not needed, dropped - 0001-selinux-allow-login-to-read-motd-file.patch, hide-docs.patch, hide-pcp.patch remove-pwscore.patch: refreshed ==== cockpit-podman ==== Version update (33 -> 49.1) - load-css-overrides.patch: css overrides for better theming support - new version 49.1 https://github.com/cockpit-project/cockpit-podman/releases/tag/49.1 ==== gtk3 ==== Subpackages: gtk3-data gtk3-schema gtk3-tools libgtk-3-0 typelib-1_0-Gtk-3_0 - Add dependency "python3x-gobject-Gdk if python3x-gobject" to the typelib package (boo#1200614). ==== gtk4 ==== Subpackages: gtk4-schema gtk4-tools libgtk-4-1 typelib-1_0-Gtk-4_0 - Add dependency "python3x-gobject-Gdk if python3x-gobject" to the typelib package (boo#1200614). ==== krb5 ==== Version update (1.19.3 -> 1.20) - update to 1.20.0: * Added a "disable_pac" realm relation to suppress adding PAC authdata to tickets, for realms which do not need to support S4U requests. * Most credential cache types will use atomic replacement when a cache is reinitialized using kinit or refreshed from the client keytab. * kprop can now propagate databases with a dump size larger than 4GB, if both the client and server are upgraded. * kprop can now work over NATs that change the destination IP address, if the client is upgraded. * Updated the KDB interface. The sign_authdata() method is replaced with the issue_pac() method, allowing KDB modules to add logon info and other buffers to the PAC issued by the KDC. * Host-based initiator names are better supported in the GSS krb5 mechanism. * Replaced AD-SIGNEDPATH authdata with minimal PACs. * To avoid spurious replay errors, password change requests will not be attempted over UDP until the attempt over TCP fails. * PKINIT will sign its CMS messages with SHA-256 instead of SHA-1. * Updated all code using OpenSSL to be compatible with OpenSSL 3. * Reorganized the libk5crypto build system to allow the OpenSSL back-end to pull in material from the builtin back-end depending on the OpenSSL version. * Simplified the PRNG logic to always use the platform PRNG. * Converted the remaining Tcl tests to Python. ==== ldb ==== Version update (2.5.0 -> 2.5.1) - Update to version 2.5.1 + Fix build problems; (bso#15071); ==== libnma ==== Version update (1.8.38 -> 1.8.40) Subpackages: libnma-gtk4-0 libnma0 typelib-1_0-NMA-1_0 - Update to version 1.8.40: + Ad-Hoc networks now default to using WPA2 instead of WEP. + WEP is no longer provided as an option for connecting to hidden networks due to its deprecated status. - Package docs sub-package as noarch. ==== powerdevil5 ==== - Add backported upower-Prevent-integer-overflow-during-new-brightness.patch * Fixes brightness stuck on low level on systems with multiple GPUS ( boo#1199907 kde#454161 ) ==== samba ==== Version update (4.16.1+git.237.1d04c5f421f -> 4.16.2+git.262.6acc6531bc7) Subpackages: samba-client samba-client-libs samba-libs - Update to 4.16.2 * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * Reintroduce netgroups support; (bso#15087); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Update from 4.15 to 4.16 breaks discovery of [homes] on standalone server from Win and IOS; (bso#15062); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient -E doesn't work as advertised; (bso#15075); * The samba background daemon doesn't refresh the printcap cache on startup; (bso#15081); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443); - Fix samba4.blackbox.net_ads_dns_async test with bind9 >= 9.17.7 - Support building with MIT Kerberos 1.20 - Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC; (CVE-2020-17049); - Resource Based Constrained Delegation (RBCD) for Samba AD DC - Support building with gcc 12.1 ==== yast2 ==== Version update (4.5.4 -> 4.5.5) - Allow to install missing packages in chroot (bsc#1199840) - 4.5.5