Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version=Tumbleweed&build=20220216 https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&component=MicroOS&query_format=advanced&resolution=--- Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: flatpak gcc gcc11 glib2-branding-openSUSE glibc (2.34 -> 2.35) gnome-control-center (41.2 -> 41.4) gnome-shell (41.3 -> 41.4) gnome-user-docs (41.1 -> 41.2) iputils kdump lcms2 (2.13 -> 2.13.1) libqmi (1.30.2 -> 1.30.4) multipath-tools (0.8.8+57+suse.dfb672fe -> 0.8.8+64+suse.f265f7e0) mutter (41.3 -> 41.4) open-iscsi openexr (3.1.3 -> 3.1.4) patterns-gnome python-charset-normalizer (2.0.10 -> 2.0.12) === Details === ==== flatpak ==== Subpackages: libflatpak0 system-user-flatpak - drop apparently unused libdwarf buildrequires ==== gcc ==== - Move gcc-PIE contents to gccVER-PIE and only require that from the gcc-PIE package. [bsc#1195628] ==== gcc11 ==== Subpackages: cpp11 libgcc_s1 libgfortran5 libgomp1 libquadmath0 libstdc++6 libubsan1 - Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628] - Put libstdc++6-pp Requires on the shared library and drop to Recoomends. - Remove sys/rseq.h from include-fixed ==== glib2-branding-openSUSE ==== - Drop gnome-documents from favorite-apps for both openSUSE and SLED, package is archived upstream. ==== glibc ==== Version update (2.34 -> 2.35) Subpackages: glibc-locale glibc-locale-base - Update to glibc 2.35 Major new features: * Unicode 14.0.0 Support * Bump r_version in the debugger interface to 2 * Support for the C.UTF-8 locale has been added to glibc * <math.h> functions that round their results to a narrower type, and corresponding <tgmath.h> macros, are added from TS 18661-1:2014, TS 18661-3:2015 and draft ISO C2X * <math.h> functions for floating-point maximum and minimum, corresponding to new operations in IEEE 754-2019, and corresponding <tgmath.h> macros, are added from draft ISO C2X * <math.h> macros for single-precision float constants are added as a GNU extension * The __STDC_IEC_60559_BFP__ and __STDC_IEC_60559_COMPLEX__ macros are predefined as specified in TS 18661-1:2014 * The exp10 functions in <math.h> now have a corresponding type-generic macro in <tgmath.h> * The ISO C2X macro _PRINTF_NAN_LEN_MAX has been added to <stdio.h> * printf-family functions now support the %b format for output of integers in binary, as specified in draft ISO C2X, and the %B variant of that format recommended by draft ISO C2X * A new DSO sorting algorithm has been added in the dynamic linker that uses topological sorting by depth-first search (DFS), solving performance issues of the existing sorting algorithm when encountering particular circular object dependency cases * A new tunable, glibc.rtld.dynamic_sort, can be used to select between the two DSO sorting algorithms * ABI support for a new function '__memcmpeq'. '__memcmpeq' is meant to be used by compilers for optimizing usage of 'memcmp' when its return value is only used for its boolean status * Support for automatically registering threads with the Linux rseq system call has been added * A symbolic link to the dynamic linker is now installed under /usr/bin/ld.so (or more precisely, '${bindir}/ld.so') * All programs and the testsuite in glibc are now built as position independent executables (PIE) by default on toolchains and architectures that support it * On Linux, a new tunable, glibc.malloc.hugetlb, can be used to either make malloc issue madvise plus MADV_HUGEPAGE on mmap and sbrk or to use huge pages directly with mmap calls with the MAP_HUGETLB flags) * The printf family of functions now handles the flagged %#m conversion specifier, printing errno as an error constant (similar to strerrorname_np) * The function _dl_find_object has been added * On Linux, the epoll_pwait2 function has been added * The function posix_spawn_file_actions_addtcsetpgrp_np has been added, enabling posix_spawn and posix_spawnp to set the controlling terminal in the new process in a race free manner * Source fortification (_FORTIFY_SOURCE) level 3 is now available for applications compiling with glibc and gcc 12 and later Deprecated and removed features, and other changes affecting compatibility: * On x86-64, the LD_PREFER_MAP_32BIT_EXEC environment variable support has been removed since the first PT_LOAD segment is no longer executable due to defaulting to -z separate-code * The r_version update in the debugger interface makes the glibc binary incompatible with GDB * Intel MPX support (lazy PLT, ld.so profile, and LD_AUDIT) has been removed * The catchsegv script and associated libSegFault.so shared object have been removed * Support for prelink will be removed in the next release; this includes removal of the LD_TRACE_PRELINKING, and LD_USE_LOAD_BIAS, environment variables and their functionality in the dynamic loader Changes to build and runtime requirements: * The audit module interface version LAV_CURRENT is increased to enable proper bind-now support * The audit interface on aarch64 is extended to support both the indirect result location register (x8) and NEON Q register Security related changes: * CVE-2022-23219: Passing an overlong file name to the clnt_create legacy function could result in a stack-based buffer overflow when using the "unix" protocol * CVE-2022-23218: Passing an overlong file name to the svcunix_create legacy function could result in a stack-based buffer overflow * CVE-2021-3998: Passing a path longer than PATH_MAX to the realpath function could result in a memory leak and potential access of uninitialized memory * CVE-2021-3999: Passing a buffer of size exactly 1 byte to the getcwd function may result in an off-by-one buffer underflow and overflow when the current working directory is longer than PATH_MAX and also corresponds to the / directory through an unprivileged mount namespace - copy-and-spawn-sgid-double-close.patch, fcntl-time-bits-64-redirect.patch, gaiconf-init-double-free.patch, gconv-parseconfdir-memory-leak.patch, getcwd-attribute-access.patch, glibc-c-utf8-locale.patch, iconv-charmap-close-output.patch, ld-show-auxv-colon.patch, ldconfig-leak-empty-paths.patch, librt-null-pointer.patch, pthread-kill-fail-after-exit.patch, pthread-kill-race-thread-exit.patch, pthread-kill-return-esrch.patch, pthread-kill-send-specific-thread.patch, pthread-mutexattr-getrobust-np-type.patch, setxid-deadlock-blocked-signals.patch, sysconf-nprocessors-affinity.patch, x86-string-control-test.patch: Removed. ==== gnome-control-center ==== Version update (41.2 -> 41.4) Subpackages: gnome-control-center-goa - Update to version 41.4: + Drop unused argument for i18n.merge_file() in Meson rules + Applications: Set the Icon key in desktop file to a icon that exists + Display: Do not invert order when constructing modes + Network: Show configuration button only for active/connecting connections + Printers: Fix error cancelling PPD dialog + Sound: Clear level bar when stream is empty + Updated translations. - Drop 4f64deb5f1bc7b83fcc4381b7dbbaf71ad4a77c8.patch: Fixed upstream. ==== gnome-shell ==== Version update (41.3 -> 41.4) Subpackages: gnome-shell-calendar - Update to version 41.4: + Start tracking windows when expected by extensions. + Fix timing issue on login screen. + Fix lightbox shader compatibility with older drivers. + Fix activating apps with tracked OR windows. + Fix banding issues with the vignette lightbox shader. + Fix keyboard navigation to windows/apps in overview. + Fix stuck transition when using super-scroll gesture. + Fix calendar events with custom timezone. + Fix out-of-sync location indicator. + Misc. bug fixes and cleanups. + Updated translations. ==== gnome-user-docs ==== Version update (41.1 -> 41.2) - Update to version 41.2: + Added missing icon for network-wired-symbolic + Added Ubuntu note about GNOME Classic prerequisite + Updated translations. ==== iputils ==== - rarpd and rdisc tools are now disabled again [jsc#SLE-23521] ==== kdump ==== - Exclude i586 from SLE builds. ==== lcms2 ==== Version update (2.13 -> 2.13.1) - update to 2.13.1: * Fix a bug on grayscale that made printing gray on white paper * Added support for premultiplied alpha * tifficc can now handle alpha channels, both unassociated and premultiplied * Better documentation * CGATS parser can now deal with very long strings * Added Projects for Visual Studio 2020 * Travis CI discontinued, GitHub actions used instead * Added a very preliminary meson build script (thanks to xclaesse) * Added ARM64 target to visual studio 2019 (thanks to gaborkertesz-linaro) * Added thread safe code to get time * Added automatic linear space detection * Added cmsGetStageContextID function * Added cmsDetectRGBProfileGamma * configure now accepts --without-fastfloat to turn plugin off * autogen.sh has now a --distclean toggle to get rid of all autotools generated files * Checked to work on STM32 Cortex-A, Cortex-M families * Bug & typos fixing (thanks to many reporters and contributors) * Fixed mem leaks and out-of bounds accesses as reported by fuzzer ==== libqmi ==== Version update (1.30.2 -> 1.30.4) - update to 1.30.4: * * meson: switch to use the new python module in meson. * * meson: added a new boolean 'man' option in the meson setup to explicitly enable or disable building the man pages. * * meson: removed the option to detect if rmnet is supported. * * meson: multiple updates to use newer meson features like install_dir(), install_mode() or summary(). * * meson: options 'mbim_qmux' and 'qrtr' are enabled by default and must be explicitly disabled if they're not needed, there is no attempt to autodetect whether they can be enabled or not. * qmi-proxy: * * Remove assert when attempting to close ghost device. * qmi-firmware-update: * * Use defaults if FLASH variables not reported, enabling support to flash the new Sierra Wireless EM9190 and EM9191 modules. * Several other minor improvements and fixes. ==== multipath-tools ==== Version update (0.8.8+57+suse.dfb672fe -> 0.8.8+64+suse.f265f7e0) Subpackages: kpartx libmpath0 - Update to version 0.8.8+64+suse.f265f7e0: * libmultipath: fix printing native nvme multipath topology (bsc#1196011) * libmultipath: add %L path wildcard for 64-bit hex LUN * libmultipath: support host adapter name lookup for s390x ccw bus - Update to version 0.8.8+60+suse.4c5922cb: * multipathd: add suppport for FC Fabric Performance Impact Notifications (FPIN) (bsc#1195506) ==== mutter ==== Version update (41.3 -> 41.4) - Update to version 41.4: + Fix DND between X11 and wayland clients. + Fix resetting idle time on lid open. + wayland/gtk: Only perform allowed titlebar gestures. + Place popups on the same monitor as the anchor rect. + Fix wrong resizes of some clients on focus changes. + Misc. bug fixes. + Fixed crashes. + Updated translations. - Add 0002-Drop-CI-test-setup-that-needs-catchsegv.patch: Fix build with glibc 2.35 and newer. ==== open-iscsi ==== Subpackages: iscsiuio libopeniscsiusr0_2_0 - Updated to latest upstream 2.1.6 as 2.1.6-suse, which contains bug fixes and cleanups. See the Changelog for more details. ==== openexr ==== Version update (3.1.3 -> 3.1.4) Subpackages: libIex-3_1-30 libIlmThread-3_1-30 libOpenEXR-3_1-30 - update to 3.1.4 (bsc#1194333): * Several bug fixes to properly reject invalid input upon read * A check to enable SSE2 when building with Visual Studio * A check to fix building with VisualStudio on ARM64 * Update the automatically-downloaded version of Imath to v3.1.4 * Miscellaneous documentation improvements - drop openexr-CVE-2021-45942.patch (upstream) ==== patterns-gnome ==== Subpackages: patterns-gnome-gnome_basic patterns-gnome-gnome_basis - Drop gnome-documents Recommends: Package is archived upstream. - Recommend the gnome_games pattern by gnome_x11 instead of the generic games pattern. ==== python-charset-normalizer ==== Version update (2.0.10 -> 2.0.12) - update to 2.0.12: * ASCII miss-detection on rare cases (PR #170) * Explicit support for Python 3.11 (PR #164) * The logging behavior have been completely reviewed, now using only TRACE and DEBUG levels