Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=3&version=Tumbleweed&build=20220317 https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&component=Kubic&query_format=advanced&resolution=--- Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: appstream-glib (0.7.18+30 -> 0.7.18+31) bluez (5.62 -> 5.63) boost-base dbus-1 glib2-branding-openSUSE grub2 haproxy (2.5.4+git0.e55ab4208 -> 2.5.5+git0.384c5c59a) harfbuzz (4.0.0 -> 4.0.1) iproute2 kernel-firmware (20220224 -> 20220309) librsvg (2.52.6 -> 2.52.7) libsolv (0.7.20 -> 0.7.21) libzypp (17.29.5 -> 17.29.6) ncurses (6.3.20220226 -> 6.3.20220312) openssl (1.1.1m -> 1.1.1n) openssl-1_1 (1.1.1m -> 1.1.1n) python-more-itertools python-py qemu rpm sqlite3 (3.37.2 -> 3.38.1) zlib-ng-compat (2.0.5 -> 2.0.6) === Details === ==== appstream-glib ==== Version update (0.7.18+30 -> 0.7.18+31) - Update to version 0.7.18+31: * Fix extracting relative symlinks (boo#1196459) ==== bluez ==== Version update (5.62 -> 5.63) - Add code to restore user modifications for modprobe.d %config files after moving the files to %_modprobedir - Use %_modprobedir (jsc#SLE-20639) - update to version 5.63: * Fix issue with storing IRK causing invalid read access. * Fix issue with disconnecting due to GattCharacteristic1.MTU. * Add support for Device{Found,Lost} of advertising monitoring. ==== boost-base ==== Subpackages: boost-license1_78_0 libboost_thread1_78_0 - add dependency on libzstd and libzstd-devel to get on-the-fly zstd compression in boost-iostreams ==== dbus-1 ==== Subpackages: libdbus-1-3 - set runstatedir correctly ==== glib2-branding-openSUSE ==== - Update .gschema.override.in: Change default libreoffice startup entry to libreoffice-startcenter.desktop according to the libreoffice update (bsc#1195836, bsc#1196951). ==== grub2 ==== Subpackages: grub2-arm64-efi grub2-snapper-plugin - Fix grub-install error when efi system partition is created as mdadm software raid1 device (bsc#1179981) (bsc#1195204) * 0001-install-fix-software-raid1-on-esp.patch - Fix riscv64 build error * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch - Fix error in grub-install when linux root device is on lvm thin volume (bsc#1192622) (bsc#1191974) * 0001-grub-install-bailout-root-device-probing.patch ==== haproxy ==== Version update (2.5.4+git0.e55ab4208 -> 2.5.5+git0.384c5c59a) - Update to version 2.5.5+git0.384c5c59a: * [RELEASE] Released version 2.5.5 * REGTESTS: fix the race conditions in be2hex.vtc * BUG/MEDIUM: httpclient: must manipulate head, not first * BUG/MINOR: httpclient: remove the UNUSED block when parsing headers * BUG/MINOR: httpclient: consume partly the blocks when necessary * CLEANUP: htx: remove unused co_htx_remove_blk() * BUG/MEDIUM: httpclient: don't consume data before it was analyzed * BUG/MINOR: session: fix theoretical risk of memleak in session_accept_fd() * BUG/MAJOR: mux-pt: Always destroy the backend connection on detach * DEBUG: stream: Fix stream trace message to print response buffer state * DEBUG: stream: Add the missing descriptions for stream trace events * BUG/MEDIUM: mcli: Properly handle errors and timeouts during reponse processing * DEBUG: cache: Update underlying buffer when loading HTX message in cache applet * BUG/MEDIUM: stream: Use the front analyzers for new listener-less streams * BUG/MINOR: promex: Set conn-stream/channel EOI flags at the end of request * BUG/MINOR: cache: Set conn-stream/channel EOI flags at the end of request * BUG/MINOR: stats: Set conn-stream/channel EOI flags at the end of request * BUG/MINOR: hlua: Set conn-stream/channel EOI flags at the end of request * BUG/MINOR: httpclient: Set conn-stream/channel EOI flags at the end of request * BUG/MINOR: cli: shows correct mode in "show sess" * BUG/MINOR: add missing modes in proxy_mode_str() * BUILD: fix recent build breakage of freebsd caused by kFreeBSD build fix * BUILD: pools: fix backport of no-memory-trimming on non-linux OS * MINOR: stats: Add dark mode support for socket rows * MINOR: pools: add a new global option "no-memory-trimming" * BUILD: fix kFreeBSD build. * BUG/MEDIUM: pools: fix ha_free() on area in the process of being freed * BUG/MINOR: pool: always align pool_heads to 64 bytes * BUG/MEDIUM: httpclient/lua: infinite appctx loop with POST * REGTESTS: fix the race conditions in secure_memcmp.vtc * REGTESTS: fix the race conditions in normalize_uri.vtc * BUG/MEDIUM: htx: Fix a possible null derefs in htx_xfer_blks() * BUG/MEDIUM: mux-fcgi: Don't rely on SI src/dst addresses for FCGI health-checks * BUILD: tree-wide: mark a few numeric constants as explicitly long long * BUILD: atomic: make the old HA_ATOMIC_LOAD() support const pointers * CI: Consistently use actions/checkout@v2 * CI: github actions: use cache for SSL libs * CI: refactor OpenTracing build script * CI: github actions: use cache for OpenTracing * CI: github actions: add the output of $CC -dM -E- ==== harfbuzz ==== Version update (4.0.0 -> 4.0.1) - Update to version 4.0.1: + Update OpenType to AAT mappings for ?hist? and ?vrtr? features + Update IANA Language Subtag Registry to 2022-03-02 + Update USE shaper to allow any non-numeric tail in a symbol cluster, and remove obsolete data overrides + Fix handling of baseline variations to return correctly scaled values ==== iproute2 ==== - Add eBPF(libbpf) support - Adjust NETNS_RUN_DIR from /var/run to /run ==== kernel-firmware ==== Version update (20220224 -> 20220309) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update to version 20220309 (git commit cd01f857da28): * iwlwifi: add new FWs from core68-60 release * ath11k: add links for WCN6855 hw2.1 * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3 * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin * ath10k/ath11k: mark notice.txt as "File:" * linux-firmware: add firmware for MT7986 * amdgpu: add firmware for SDMA 5.2.7 IP block * amdgpu: add firmware for PSP 13.0.8 IP block * amdgpu: add firmware for DCN 3.1.6 IP block * amdgpu: add firmware for GC 10.3.7 IP block * rtw89: 8852a: update fw to v0.13.36.0 * iwlwifi: update 9000-family firmwares to core68-60 * amdgpu: update raven2 VCN firmware * amdgpu: update raven VCN firmware * amdgpu: update picasso VCN firmware * linux-firmware: Update firmware file for Intel Bluetooth 9462 * linux-firmware: Update firmware file for Intel Bluetooth 9462 * linux-firmware: Update firmware file for Intel Bluetooth 9560 * linux-firmware: Update firmware file for Intel Bluetooth 9560 * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth AX211 * linux-firmware: Update firmware file for Intel Bluetooth AX211 * linux-firmware: Update firmware file for Intel Bluetooth AX210 * linux-firmware: Update firmware file for Intel Bluetooth AX200 * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth 9560 * linux-firmware: Update firmware file for Intel Bluetooth 9260 * linux-firmware: Update AMD SEV firmware * rtw89: 8852a: update fw to v0.13.35.0 ==== librsvg ==== Version update (2.52.6 -> 2.52.7) Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2 - Update to version 2.52.7: + Backport a fix for the regression that was introduced in the last release: Output filled text as text for PDF; fixes regression due to outputting all text as paths. ==== libsolv ==== Version update (0.7.20 -> 0.7.21) - fix segfault on conflict resolution when using bindings - fix split provides not working if the update includes a forbidden vendor change - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY - support zstd compressed control files in debian packages - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20) - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck - support solv files with an idarray block - allow accessing the toolversion at runtime - bump version to 0.7.21 ==== libzypp ==== Version update (17.29.5 -> 17.29.6) - Fix package signature check (bsc#184501) Pay attention that header and payload are secured by a valid signature and report more detailed which signature is missing. - Retry umount if device is busy (bsc#1196061, closes #381) A previously released ISO image may need a bit more time to release it's loop device. So we wait a bit and retry. - Fix serializing/deserializing type mismatch in zypp-rpm protocol (bsc#1196925) - Fix handling of ISO media in releaseAll (bsc#1196061) - Hint on common ptf resolver conflicts (bsc#1194848) - version 17.29.6 (22) ==== ncurses ==== Version update (6.3.20220226 -> 6.3.20220312) Subpackages: libncurses6 ncurses-utils terminfo-base - Add ncurses patch 20220312 + add xterm+acs building-block -TD + add xterm-p370, for use in older terminals -TD + add dec+sl to xterm-new, per patch #371 -TD + add mosh and mosh-256color -TD - Correct offsets of patches * ncurses-5.9-ibm327x.dif * ncurses-6.3.dif - Add ncurses patch 20220305 + replace obsolescent "-gnatg" option with "-gnatwa" and "-gnatyg", to work around build problems with gnat 12. + update external links in Ada95.html + trim unused return-value from canonical_name(). ==== openssl ==== Version update (1.1.1m -> 1.1.1n) - Update to 1.1.1n release ==== openssl-1_1 ==== Version update (1.1.1m -> 1.1.1n) Subpackages: libopenssl1_1 - Update to 1.1.1n: [bsc#1196877, CVE-2022-0778] * Security fix [CVE-2022-0778]: Infinite loop for non-prime moduli in BN_mod_sqrt() reachable when parsing certificates. * Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489) to the list of ciphersuites providing Perfect Forward Secrecy as required by SECLEVEL >= 3. * Rebase openssl-1.1.1-fips.patch openssl-1.1.1-evp-kdf.patch ==== python-more-itertools ==== - use python_expand for fdupes ==== python-py ==== - use %python_expand for %fdupes ==== qemu ==== Fix bsc#1189702 CVE-2021-3713 * Patches added: hw-nvram-at24-return-0xff-if-1-byte-addr.patch ==== rpm ==== Subpackages: librpmbuild9 - drop rpm-deptracking.patch, this is already upstream and we were just adding it twice - use fileprovide /usr/bin/gzip for "rpm-build" to make alternative providers possible - add leave-malloc-check-set.diff to actually use MALLOC_CHECK_ during build ==== sqlite3 ==== Version update (3.37.2 -> 3.38.1) - update to 3.38.1: * Fix problems with the new Bloom filter optimization that might cause some obscure queries to get an incorrect answer. * Fix the localtime modifier of the date and time functions so that it preserves fractional seconds. * Fix the sqlite_offset SQL function so that it works correctly even in corner cases such as when the argument is a virtual column or the column of a view. * Fix row value IN operator constraints on virtual tables so that they work correctly even if the virtual table implementation relies on bytecode to filter rows that do not satisfy the constraint. * Other minor fixes to assert() statements, test cases, and documentation. See the source code timeline for details. - add upstream patch to run atof1 tests only on x86_64 sqlite-src-3380100-atof1.patch - update to 3.38.0 * Add the -> and ->> operators for easier processing of JSON * The JSON functions are now built-ins * Enhancements to date and time functions * Rename the printf() SQL function to format() for better compatibility, with alias for backwards compatibility. * Add the sqlite3_error_offset() interface for helping localize an SQL error to a specific character in the input SQL text * Enhance the interface to virtual tables * CLI columnar output modes are enhanced to correctly handle tabs and newlines embedded in text, and add options like "--wrap N", "--wordwrap on", and "--quote" to the columnar output modes. * Query planner enhancements using a Bloom filter to speed up large analytic queries, and a balanced merge tree to evaluate UNION or UNION ALL compound SELECT statements that have an ORDER BY clause. * The ALTER TABLE statement is changed to silently ignores entries in the sqlite_schema table that do not parse when PRAGMA writable_schema=ON ==== zlib-ng-compat ==== Version update (2.0.5 -> 2.0.6) - Update to 2.0.6: * Fix hangs on macOS #1031 * Fix minideflate write buffers being overwritten #1060 * Fix deflateBound and compressBound returning too small size estimates #1049 #1071 * Fix incorrect function declaration warning #1080 * Fix build problems when building outside of source dir #1049 * Fix build problems on arm2-7 #1030 * Fixed some compile warnings #1020 #1036 #1037 #1048 * Improved posix memalign support #888 * Improvements to testing #637 #1026 #1032 #1035 #1049 #1051 #1056 #1063 #1067 * Improvements for integration into other projects #1022 #1042 * Code style fixes #637 #1040 #1050 #1075