Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=1&version=Tu... https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&comp... Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: gcc11 glib2-branding-openSUSE glibc (2.34 -> 2.35) iputils kdump lcms2 (2.13 -> 2.13.1) libqmi (1.30.2 -> 1.30.4) multipath-tools (0.8.8+57+suse.dfb672fe -> 0.8.8+64+suse.f265f7e0) open-iscsi python-charset-normalizer (2.0.10 -> 2.0.12) python-distro (1.6.0 -> 1.7.0) === Details === ==== gcc11 ==== Subpackages: libgcc_s1 libgfortran5 libgomp1 libquadmath0 libstdc++6 - Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628] - Put libstdc++6-pp Requires on the shared library and drop to Recoomends. - Remove sys/rseq.h from include-fixed ==== glib2-branding-openSUSE ==== - Drop gnome-documents from favorite-apps for both openSUSE and SLED, package is archived upstream. ==== glibc ==== Version update (2.34 -> 2.35) Subpackages: glibc-locale-base - Update to glibc 2.35 Major new features: * Unicode 14.0.0 Support * Bump r_version in the debugger interface to 2 * Support for the C.UTF-8 locale has been added to glibc * <math.h> functions that round their results to a narrower type, and corresponding <tgmath.h> macros, are added from TS 18661-1:2014, TS 18661-3:2015 and draft ISO C2X * <math.h> functions for floating-point maximum and minimum, corresponding to new operations in IEEE 754-2019, and corresponding <tgmath.h> macros, are added from draft ISO C2X * <math.h> macros for single-precision float constants are added as a GNU extension * The __STDC_IEC_60559_BFP__ and __STDC_IEC_60559_COMPLEX__ macros are predefined as specified in TS 18661-1:2014 * The exp10 functions in <math.h> now have a corresponding type-generic macro in <tgmath.h> * The ISO C2X macro _PRINTF_NAN_LEN_MAX has been added to <stdio.h> * printf-family functions now support the %b format for output of integers in binary, as specified in draft ISO C2X, and the %B variant of that format recommended by draft ISO C2X * A new DSO sorting algorithm has been added in the dynamic linker that uses topological sorting by depth-first search (DFS), solving performance issues of the existing sorting algorithm when encountering particular circular object dependency cases * A new tunable, glibc.rtld.dynamic_sort, can be used to select between the two DSO sorting algorithms * ABI support for a new function '__memcmpeq'. '__memcmpeq' is meant to be used by compilers for optimizing usage of 'memcmp' when its return value is only used for its boolean status * Support for automatically registering threads with the Linux rseq system call has been added * A symbolic link to the dynamic linker is now installed under /usr/bin/ld.so (or more precisely, '${bindir}/ld.so') * All programs and the testsuite in glibc are now built as position independent executables (PIE) by default on toolchains and architectures that support it * On Linux, a new tunable, glibc.malloc.hugetlb, can be used to either make malloc issue madvise plus MADV_HUGEPAGE on mmap and sbrk or to use huge pages directly with mmap calls with the MAP_HUGETLB flags) * The printf family of functions now handles the flagged %#m conversion specifier, printing errno as an error constant (similar to strerrorname_np) * The function _dl_find_object has been added * On Linux, the epoll_pwait2 function has been added * The function posix_spawn_file_actions_addtcsetpgrp_np has been added, enabling posix_spawn and posix_spawnp to set the controlling terminal in the new process in a race free manner * Source fortification (_FORTIFY_SOURCE) level 3 is now available for applications compiling with glibc and gcc 12 and later Deprecated and removed features, and other changes affecting compatibility: * On x86-64, the LD_PREFER_MAP_32BIT_EXEC environment variable support has been removed since the first PT_LOAD segment is no longer executable due to defaulting to -z separate-code * The r_version update in the debugger interface makes the glibc binary incompatible with GDB * Intel MPX support (lazy PLT, ld.so profile, and LD_AUDIT) has been removed * The catchsegv script and associated libSegFault.so shared object have been removed * Support for prelink will be removed in the next release; this includes removal of the LD_TRACE_PRELINKING, and LD_USE_LOAD_BIAS, environment variables and their functionality in the dynamic loader Changes to build and runtime requirements: * The audit module interface version LAV_CURRENT is increased to enable proper bind-now support * The audit interface on aarch64 is extended to support both the indirect result location register (x8) and NEON Q register Security related changes: * CVE-2022-23219: Passing an overlong file name to the clnt_create legacy function could result in a stack-based buffer overflow when using the "unix" protocol * CVE-2022-23218: Passing an overlong file name to the svcunix_create legacy function could result in a stack-based buffer overflow * CVE-2021-3998: Passing a path longer than PATH_MAX to the realpath function could result in a memory leak and potential access of uninitialized memory * CVE-2021-3999: Passing a buffer of size exactly 1 byte to the getcwd function may result in an off-by-one buffer underflow and overflow when the current working directory is longer than PATH_MAX and also corresponds to the / directory through an unprivileged mount namespace - copy-and-spawn-sgid-double-close.patch, fcntl-time-bits-64-redirect.patch, gaiconf-init-double-free.patch, gconv-parseconfdir-memory-leak.patch, getcwd-attribute-access.patch, glibc-c-utf8-locale.patch, iconv-charmap-close-output.patch, ld-show-auxv-colon.patch, ldconfig-leak-empty-paths.patch, librt-null-pointer.patch, pthread-kill-fail-after-exit.patch, pthread-kill-race-thread-exit.patch, pthread-kill-return-esrch.patch, pthread-kill-send-specific-thread.patch, pthread-mutexattr-getrobust-np-type.patch, setxid-deadlock-blocked-signals.patch, sysconf-nprocessors-affinity.patch, x86-string-control-test.patch: Removed. ==== iputils ==== - rarpd and rdisc tools are now disabled again [jsc#SLE-23521] ==== kdump ==== - Exclude i586 from SLE builds. ==== lcms2 ==== Version update (2.13 -> 2.13.1) - update to 2.13.1: * Fix a bug on grayscale that made printing gray on white paper * Added support for premultiplied alpha * tifficc can now handle alpha channels, both unassociated and premultiplied * Better documentation * CGATS parser can now deal with very long strings * Added Projects for Visual Studio 2020 * Travis CI discontinued, GitHub actions used instead * Added a very preliminary meson build script (thanks to xclaesse) * Added ARM64 target to visual studio 2019 (thanks to gaborkertesz-linaro) * Added thread safe code to get time * Added automatic linear space detection * Added cmsGetStageContextID function * Added cmsDetectRGBProfileGamma * configure now accepts --without-fastfloat to turn plugin off * autogen.sh has now a --distclean toggle to get rid of all autotools generated files * Checked to work on STM32 Cortex-A, Cortex-M families * Bug & typos fixing (thanks to many reporters and contributors) * Fixed mem leaks and out-of bounds accesses as reported by fuzzer ==== libqmi ==== Version update (1.30.2 -> 1.30.4) - update to 1.30.4: * * meson: switch to use the new python module in meson. * * meson: added a new boolean 'man' option in the meson setup to explicitly enable or disable building the man pages. * * meson: removed the option to detect if rmnet is supported. * * meson: multiple updates to use newer meson features like install_dir(), install_mode() or summary(). * * meson: options 'mbim_qmux' and 'qrtr' are enabled by default and must be explicitly disabled if they're not needed, there is no attempt to autodetect whether they can be enabled or not. * qmi-proxy: * * Remove assert when attempting to close ghost device. * qmi-firmware-update: * * Use defaults if FLASH variables not reported, enabling support to flash the new Sierra Wireless EM9190 and EM9191 modules. * Several other minor improvements and fixes. ==== multipath-tools ==== Version update (0.8.8+57+suse.dfb672fe -> 0.8.8+64+suse.f265f7e0) Subpackages: kpartx libmpath0 - Update to version 0.8.8+64+suse.f265f7e0: * libmultipath: fix printing native nvme multipath topology (bsc#1196011) * libmultipath: add %L path wildcard for 64-bit hex LUN * libmultipath: support host adapter name lookup for s390x ccw bus - Update to version 0.8.8+60+suse.4c5922cb: * multipathd: add suppport for FC Fabric Performance Impact Notifications (FPIN) (bsc#1195506) ==== open-iscsi ==== Subpackages: iscsiuio libopeniscsiusr0_2_0 - Updated to latest upstream 2.1.6 as 2.1.6-suse, which contains bug fixes and cleanups. See the Changelog for more details. ==== python-charset-normalizer ==== Version update (2.0.10 -> 2.0.12) - update to 2.0.12: * ASCII miss-detection on rare cases (PR #170) * Explicit support for Python 3.11 (PR #164) * The logging behavior have been completely reviewed, now using only TRACE and DEBUG levels ==== python-distro ==== Version update (1.6.0 -> 1.7.0) - remove shebang from distro.py - update to version 1.7.0: - BACKWARD COMPATIBILITY: - Dropped support for EOL Pythons 2.7, 3.4 and 3.5 [[#281](https://github.com/python-distro/distro/pull/281)] - Dropped support for LSB and `uname` back-ends when `--root-dir` is specified [[#311](https://github.com/python-distro/distro/pull/311)] - Moved `distro.py` to `src/distro/distro.py` [[#315](https://github.com/python-distro/distro/pull/315)] - ENHANCEMENTS: - Documented that `distro.version()` can return an empty string on rolling releases [[#312](https://github.com/python-distro/distro/pull/312)] - Documented support for Python 3.10 [[#316](https://github.com/python-distro/distro/pull/316)] - Added official support for Rocky Linux distribution [[#318](https://github.com/python-distro/distro/pull/318)] - Added a shebang to `distro.py` to allow standalone execution [[#313](https://github.com/python-distro/distro/pull/313)] - Added support for AIX platforms [[#311](https://github.com/python-distro/distro/pull/311)] - Added compliance for PEP-561 [[#315](https://github.com/python-distro/distro/pull/315)] - BUG FIXES: - Fixed `include_uname` parameter oversight [[#305](https://github.com/python-distro/distro/pull/305)] - Fixed crash when `uname -rs` output is empty [[#304](https://github.com/python-distro/distro/pull/304)] - Fixed Amazon Linux identifier in `distro.id()` documentation [[#318](https://github.com/python-distro/distro/pull/318)] - Fixed OpenSuse >= 15 support [[#319](https://github.com/python-distro/distro/pull/319)] - Fixed encoding issues when opening distro release files [[#324](https://github.com/python-distro/distro/pull/324)] - Fixed `linux_distribution` regression introduced in [[#230](https://github.com/python-distro/distro/pull/230)] [[#325](https://github.com/python-distro/distro/pull/325)]