September 2024 - MicroOS - openSUSE Mailing Lists

New ARM MicroOS snapshot 20240904 released!
by Guillaume Gardet 06 Sep '24

06 Sep '24

Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=3&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MicroOS-release (20240903 -> 20240904) ima-evm-utils (1.6 -> 1.6.2) libavif (1.0.4 -> 1.1.1) libfido2 (1.14.0 -> 1.15.0) live555 (2024.06.26 -> 2024.08.01) raspberrypi-firmware (2024.03.27 -> 2024.08.30) raspberrypi-firmware-config (2024.03.27 -> 2024.08.30) runc (1.2.0~rc2 -> 1.2.0~rc3) rust-keylime (0.2.6~0 -> 0.2.6+13) sdbootutil (1+git20240830.7f696c8 -> 1+git20240903.81f1f40) zlib-ng-compat (2.1.6 -> 2.2.1) === Details === ==== MicroOS-release ==== Version update (20240903 -> 20240904) Subpackages: MicroOS-release-appliance MicroOS-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== ima-evm-utils ==== Version update (1.6 -> 1.6.2) Subpackages: evmctl libimaevm5 - Update to version 1.6.2 https://github.com/linux-integrity/ima-evm-utils/blob/v1.6.2/NEWS - Remove LicenseRef-GPL-2.0-with-openssl-exception (no need due relicensing of OpenSSL 3 or later to the Apache 2 license https://github.com/linux-integrity/ima-evm-utils/commit/4a4c762c8e3cbbff5f4… ) - Upstream added COPYING (again) and COPYING.LGPL (new), add them to %license. ==== libavif ==== Version update (1.0.4 -> 1.1.1) - update to 1.1.1: * In avif.h, change "AVIF_API AVIF_NODISCARD" back to "AVIF_NODISCARD AVIF_API" to fix clang-cl and MSVC compilation errors in the shared library build on Windows. * Fix -DAVIF_GTEST=SYSTEM * Fix infe_type and codec_config_type wrongly read as byte- aligned fields in the * experimental feature AVIF_ENABLE_EXPERIMENTAL_METAV1. * When building aom as a local dependency, runtime CPU detection (`CONFIG_RUNTIME_CPU_DETECT`) is now always `ON`; * Fix CMake config shared library leaks * Update gain map metadata to current ISO 21496-1 draft. * cmake: Only search for ASM_NASM language on x86_64 platforms. * Fix "No known features for CXX compiler" CMake error. * Fix aom link flags so that transitive library link flags are included when aom is a static library * Fix out-of-order 'dimg' grid associations * Report files with an item used in multiple 'dimg' boxes with * AVIF_RESULT_NOT_IMPLEMENTED instead of AVIF_RESULT_INVALID_IMAGE_GRID. * Add experimental API for reading and writing gain maps in AVIF files. * If enabled at compile time, add `gainMap` field to `avifImage`, * add `qualityGainMap` field to `avifEncoder`, add `gainMapPresent`, `enableDecodingGainMap`, `enableParsingGainMapMetadata` and `ignoreColorAndAlpha` to `avifDecoder`. * Utility functions for working with gain maps are also added. * Gain maps allow readers that support them to display HDR images that look good on both HDR and SDR displays. * Add experimental support for converting jpeg files with gain maps to AVIF files with gain maps. Requires libxml2, and the AVIF_ENABLE_EXPERIMENTAL_GAIN_MAP compilation flag. * Add a --qgain-map flag to control the gain map quality in avifenc. * Add the headerFormat member of new type avifHeaderFormat to avifEncoder. * Add experimental API for reading and writing "mif3"-branded AVIF files behind the compilation flag AVIF_ENABLE_EXPERIMENTAL_METAV1. * Implement avifImageScale() fallback when libyuv is not available. * Partial import of libyuv to third_party/libyuv (new LICENSE). * Add avifenc flag suffixes ":update" and ":u". Quality- relative, tiling-relative and codec-specific flags can now be positional, relative to input files. * Add experimental support for layered AVIF encoding in avifenc. * Use the --layered flag to enable layered AVIF encoding. * Layered AVIF has multiple layers, which works like frame of animated AVIF, and layers can be rendered in progressive manner on supported viewers * Only aom supports layered AVIF encoding at the time of writing. * Add --scaling-mode flag to set scaling mode of each layer. * This part of AV1 encoder is not as thoroughly tested, so there are higher possibility encoder may crash when given certain configuration or input. * Add imageSequenceTrackPresent flag to the avifDecoder struct. * avifImageScale() function was made part of the public ABI. * Add avif_cxx.h as a C++ header with basic functionality. * Add enum aliases AVIF_COLOR_PRIMARIES_SRGB, AVIF_COLOR_PRIMARIES_BT2100, * AVIF_COLOR_PRIMARIES_DCI_P3, AVIF_TRANSFER_CHARACTERISTICS_PQ. * Add avifResult enum entry AVIF_RESULT_INTERNAL_ERROR. * Require libyuv by default (but it can still be disabled with * -DAVIF_LIBYUV=OFF). * Add avifdec --icc flag to override the output color profile. * Add experimental API for reading and writing 16-bit AVIF files behind the * compilation flag AVIF_ENABLE_EXPERIMENTAL_SAMPLE_TRANSFORM. * Add AVIF_CHROMA_SAMPLE_POSITION_RESERVED to avifChromaSamplePosition enum. ==== libfido2 ==== Version update (1.14.0 -> 1.15.0) - update to 1.15.0: * bio, credman: improved CTAP 2.1 support. * hid_osx: fix issue where fido_hid_read() may block unnecessarily; gh#757. * fido2-token -I: print maxcredbloblen. * hid_linux: improved support for uhid devices. * New API calls: - fido_cred_set_attobj; - fido_cred_x5c_list_count; - fido_cred_x5c_list_len; - fido_cred_x5c_list_ptr. ==== live555 ==== Version update (2024.06.26 -> 2024.08.01) Subpackages: libBasicUsageEnvironment2 libUsageEnvironment3 libgroupsock30 libliveMedia112 - update to 2024-08-01: * Updated "ServerMediaSession::generateSDPDescription()" to treat "time_t" as (long long). ==== raspberrypi-firmware ==== Version update (2024.03.27 -> 2024.08.30) - Update to bf12222 (2024-08-30): * firmware: arm_dt: Delay power property handling * firmware: AI Camera Support * firmware: video_encode: Add colourspace support See: #1885 * firmware: arm_loader: SET_POWER_STATE should only consider bit 0 See: #1905 * firmware: filesystem: Prevent any sdcard modifications See: #1893 * firmware: filesystem: Accept 0xf (W95 Ext) as an extended partition type * firmware: arm_dt: Support HAT EEPROM dtparams * firmware: arm_display: Add support for changing the pixel order via the mailbox See: #1320 * firmware: di_fast: Avoid green line at bottom of image See: https://forum.libreelec.tv/thread/28367-green-pulsing-line-rpi4 * firmware: arm_dt: On 2711, force otg_mode=1 if xhci is enabled See: raspberrypi/linux#6062 * firmware: arm_dt: Improve power HAT+ support * firmware: arm_loader: Add user otp read and write functions See: raspberrypi/linux#6014 * firmware: dtoverlay: Use %u when converting u32s to strings See: raspberrypi/linux#6039 * firmware: video_decode: CONFIGCHANGED not wanted with lack of aspect ratio in new frame See: https://forum.libreelec.tv/thread/28391-cvideoplayeraudio-process-stream-st… ==== raspberrypi-firmware-config ==== Version update (2024.03.27 -> 2024.08.30) - Update to bf12222 (2024-08-30): * firmware: arm_dt: Delay power property handling * firmware: AI Camera Support * firmware: video_encode: Add colourspace support See: #1885 * firmware: arm_loader: SET_POWER_STATE should only consider bit 0 See: #1905 * firmware: filesystem: Prevent any sdcard modifications See: #1893 * firmware: filesystem: Accept 0xf (W95 Ext) as an extended partition type * firmware: arm_dt: Support HAT EEPROM dtparams * firmware: arm_display: Add support for changing the pixel order via the mailbox See: #1320 * firmware: di_fast: Avoid green line at bottom of image See: https://forum.libreelec.tv/thread/28367-green-pulsing-line-rpi4 * firmware: arm_dt: On 2711, force otg_mode=1 if xhci is enabled See: raspberrypi/linux#6062 * firmware: arm_dt: Improve power HAT+ support * firmware: arm_loader: Add user otp read and write functions See: raspberrypi/linux#6014 * firmware: dtoverlay: Use %u when converting u32s to strings See: raspberrypi/linux#6039 * firmware: video_decode: CONFIGCHANGED not wanted with lack of aspect ratio in new frame See: https://forum.libreelec.tv/thread/28391-cvideoplayeraudio-process-stream-st… ==== runc ==== Version update (1.2.0~rc2 -> 1.2.0~rc3) - Update to runc v1.2.0~rc3. Upstream changelog is available from <https://github.com/opencontainers/runc/releases/tag/v1.2.0-rc.3>. Includes the patch for CVE-2024-45310. [ This was only ever released for SLES and Leap. ] - Update to runc v1.1.14. Upstream changelog is available from <https://github.com/opencontainers/runc/releases/tag/v1.1.14>. Includes the patch for CVE-2024-45310. - Rebase patches: * 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch * 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch * 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch * 0004-bsc1214960-nsenter-cloned_binary-remove-bindfd-logic.patch [ This was only ever released for SLES and Leap. ] - Update to runc v1.1.13. Upstream changelog is available from <https://github.com/opencontainers/runc/releases/tag/v1.1.12>. - Rebase patches: * 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch * 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch * 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch - Backport <https://github.com/opencontainers/runc/pull/3931> to fix a performance issue when running lots of containers, caused by systemd getting too many mount notifications. bsc#1214960 + 0004-bsc1214960-nsenter-cloned_binary-remove-bindfd-logic.patch ==== rust-keylime ==== Version update (0.2.6~0 -> 0.2.6+13) - Update vendored crates (bsc#1229952, bsc#1230029) * rustix 0.37.25 * rustix 0.38.34 * shlex 1.3.0 - Update to version 0.2.6+13: * Enable test functional/iak-idevid-persisted-and-protected * build(deps): bump uuid from 1.7.0 to 1.10.0 * build(deps): bump openssl from 0.10.64 to 0.10.66 * keylime-agent/src/revocation: Fix comment indentation * keylime/crypto: Fix indentation of documentation comment * build(deps): bump thiserror from 1.0.59 to 1.0.63 * build(deps): bump serde_json from 1.0.116 to 1.0.120 * dependabot: Extend to also monitor workflow actions * ci: Disable Packit CI on CentOS Stream 9 * ci: use CODECOV_TOKEN when submitting coverage data * revocation: Use into() for unfallible transformation * secure_mount: Fix possible infinite loop * error: Rename enum variants to avoid clippy warning ==== sdbootutil ==== Version update (1+git20240830.7f696c8 -> 1+git20240903.81f1f40) Subpackages: sdbootutil-snapper sdbootutil-tukit - Update to version 1+git20240903.81f1f40: * Generate new predictions for update_all_entries * Use raw option in jq update all entries ==== zlib-ng-compat ==== Version update (2.1.6 -> 2.2.1) - Update to 2.2.1: * Changelog at https://github.com/zlib-ng/zlib-ng/releases/tag/2.2.1

1 0

New MicroOS snapshot 20240904 released!
by Richard Brown 05 Sep '24

05 Sep '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MicroOS-release (20240903 -> 20240904) ima-evm-utils (1.6 -> 1.6.2) libavif (1.0.4 -> 1.1.1) libfido2 (1.14.0 -> 1.15.0) live555 (2024.06.26 -> 2024.08.01) runc (1.2.0~rc2 -> 1.2.0~rc3) rust-keylime (0.2.6~0 -> 0.2.6+13) sdbootutil (1+git20240830.7f696c8 -> 1+git20240903.81f1f40) zlib-ng-compat (2.1.6 -> 2.2.1) === Details === ==== MicroOS-release ==== Version update (20240903 -> 20240904) Subpackages: MicroOS-release-appliance MicroOS-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== ima-evm-utils ==== Version update (1.6 -> 1.6.2) Subpackages: evmctl libimaevm5 - Update to version 1.6.2 https://github.com/linux-integrity/ima-evm-utils/blob/v1.6.2/NEWS - Remove LicenseRef-GPL-2.0-with-openssl-exception (no need due relicensing of OpenSSL 3 or later to the Apache 2 license https://github.com/linux-integrity/ima-evm-utils/commit/4a4c762c8e3cbbff5f4… ) - Upstream added COPYING (again) and COPYING.LGPL (new), add them to %license. ==== libavif ==== Version update (1.0.4 -> 1.1.1) - update to 1.1.1: * In avif.h, change "AVIF_API AVIF_NODISCARD" back to "AVIF_NODISCARD AVIF_API" to fix clang-cl and MSVC compilation errors in the shared library build on Windows. * Fix -DAVIF_GTEST=SYSTEM * Fix infe_type and codec_config_type wrongly read as byte- aligned fields in the * experimental feature AVIF_ENABLE_EXPERIMENTAL_METAV1. * When building aom as a local dependency, runtime CPU detection (`CONFIG_RUNTIME_CPU_DETECT`) is now always `ON`; * Fix CMake config shared library leaks * Update gain map metadata to current ISO 21496-1 draft. * cmake: Only search for ASM_NASM language on x86_64 platforms. * Fix "No known features for CXX compiler" CMake error. * Fix aom link flags so that transitive library link flags are included when aom is a static library * Fix out-of-order 'dimg' grid associations * Report files with an item used in multiple 'dimg' boxes with * AVIF_RESULT_NOT_IMPLEMENTED instead of AVIF_RESULT_INVALID_IMAGE_GRID. * Add experimental API for reading and writing gain maps in AVIF files. * If enabled at compile time, add `gainMap` field to `avifImage`, * add `qualityGainMap` field to `avifEncoder`, add `gainMapPresent`, `enableDecodingGainMap`, `enableParsingGainMapMetadata` and `ignoreColorAndAlpha` to `avifDecoder`. * Utility functions for working with gain maps are also added. * Gain maps allow readers that support them to display HDR images that look good on both HDR and SDR displays. * Add experimental support for converting jpeg files with gain maps to AVIF files with gain maps. Requires libxml2, and the AVIF_ENABLE_EXPERIMENTAL_GAIN_MAP compilation flag. * Add a --qgain-map flag to control the gain map quality in avifenc. * Add the headerFormat member of new type avifHeaderFormat to avifEncoder. * Add experimental API for reading and writing "mif3"-branded AVIF files behind the compilation flag AVIF_ENABLE_EXPERIMENTAL_METAV1. * Implement avifImageScale() fallback when libyuv is not available. * Partial import of libyuv to third_party/libyuv (new LICENSE). * Add avifenc flag suffixes ":update" and ":u". Quality- relative, tiling-relative and codec-specific flags can now be positional, relative to input files. * Add experimental support for layered AVIF encoding in avifenc. * Use the --layered flag to enable layered AVIF encoding. * Layered AVIF has multiple layers, which works like frame of animated AVIF, and layers can be rendered in progressive manner on supported viewers * Only aom supports layered AVIF encoding at the time of writing. * Add --scaling-mode flag to set scaling mode of each layer. * This part of AV1 encoder is not as thoroughly tested, so there are higher possibility encoder may crash when given certain configuration or input. * Add imageSequenceTrackPresent flag to the avifDecoder struct. * avifImageScale() function was made part of the public ABI. * Add avif_cxx.h as a C++ header with basic functionality. * Add enum aliases AVIF_COLOR_PRIMARIES_SRGB, AVIF_COLOR_PRIMARIES_BT2100, * AVIF_COLOR_PRIMARIES_DCI_P3, AVIF_TRANSFER_CHARACTERISTICS_PQ. * Add avifResult enum entry AVIF_RESULT_INTERNAL_ERROR. * Require libyuv by default (but it can still be disabled with * -DAVIF_LIBYUV=OFF). * Add avifdec --icc flag to override the output color profile. * Add experimental API for reading and writing 16-bit AVIF files behind the * compilation flag AVIF_ENABLE_EXPERIMENTAL_SAMPLE_TRANSFORM. * Add AVIF_CHROMA_SAMPLE_POSITION_RESERVED to avifChromaSamplePosition enum. ==== libfido2 ==== Version update (1.14.0 -> 1.15.0) - update to 1.15.0: * bio, credman: improved CTAP 2.1 support. * hid_osx: fix issue where fido_hid_read() may block unnecessarily; gh#757. * fido2-token -I: print maxcredbloblen. * hid_linux: improved support for uhid devices. * New API calls: - fido_cred_set_attobj; - fido_cred_x5c_list_count; - fido_cred_x5c_list_len; - fido_cred_x5c_list_ptr. ==== live555 ==== Version update (2024.06.26 -> 2024.08.01) Subpackages: libBasicUsageEnvironment2 libUsageEnvironment3 libgroupsock30 libliveMedia112 - update to 2024-08-01: * Updated "ServerMediaSession::generateSDPDescription()" to treat "time_t" as (long long). ==== runc ==== Version update (1.2.0~rc2 -> 1.2.0~rc3) - Update to runc v1.2.0~rc3. Upstream changelog is available from <https://github.com/opencontainers/runc/releases/tag/v1.2.0-rc.3>. Includes the patch for CVE-2024-45310. [ This was only ever released for SLES and Leap. ] - Update to runc v1.1.14. Upstream changelog is available from <https://github.com/opencontainers/runc/releases/tag/v1.1.14>. Includes the patch for CVE-2024-45310. - Rebase patches: * 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch * 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch * 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch * 0004-bsc1214960-nsenter-cloned_binary-remove-bindfd-logic.patch [ This was only ever released for SLES and Leap. ] - Update to runc v1.1.13. Upstream changelog is available from <https://github.com/opencontainers/runc/releases/tag/v1.1.12>. - Rebase patches: * 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch * 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch * 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch - Backport <https://github.com/opencontainers/runc/pull/3931> to fix a performance issue when running lots of containers, caused by systemd getting too many mount notifications. bsc#1214960 + 0004-bsc1214960-nsenter-cloned_binary-remove-bindfd-logic.patch ==== rust-keylime ==== Version update (0.2.6~0 -> 0.2.6+13) - Update vendored crates (bsc#1229952, bsc#1230029) * rustix 0.37.25 * rustix 0.38.34 * shlex 1.3.0 - Update to version 0.2.6+13: * Enable test functional/iak-idevid-persisted-and-protected * build(deps): bump uuid from 1.7.0 to 1.10.0 * build(deps): bump openssl from 0.10.64 to 0.10.66 * keylime-agent/src/revocation: Fix comment indentation * keylime/crypto: Fix indentation of documentation comment * build(deps): bump thiserror from 1.0.59 to 1.0.63 * build(deps): bump serde_json from 1.0.116 to 1.0.120 * dependabot: Extend to also monitor workflow actions * ci: Disable Packit CI on CentOS Stream 9 * ci: use CODECOV_TOKEN when submitting coverage data * revocation: Use into() for unfallible transformation * secure_mount: Fix possible infinite loop * error: Rename enum variants to avoid clippy warning ==== sdbootutil ==== Version update (1+git20240830.7f696c8 -> 1+git20240903.81f1f40) Subpackages: sdbootutil-snapper sdbootutil-tukit - Update to version 1+git20240903.81f1f40: * Generate new predictions for update_all_entries * Use raw option in jq update all entries ==== zlib-ng-compat ==== Version update (2.1.6 -> 2.2.1) - Update to 2.2.1: * Changelog at https://github.com/zlib-ng/zlib-ng/releases/tag/2.2.1

1 0

New ARM MicroOS snapshot 20240903 released!
by Guillaume Gardet 04 Sep '24

04 Sep '24

Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=3&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MicroOS-release (20240902 -> 20240903) ffmpeg-6 google-noto-fonts (20240801 -> 20240901) libjpeg-turbo python-alembic (1.13.1 -> 1.13.2) python-cffi (1.16.0 -> 1.17.0) selinux-policy (20240830 -> 20240903) u-boot-rpiarm64 (2024.04 -> 2024.07) xmlsec1 (1.2.40 -> 1.2.41) === Details === ==== MicroOS-release ==== Version update (20240902 -> 20240903) Subpackages: MicroOS-release-appliance MicroOS-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== ffmpeg-6 ==== Subpackages: libavcodec60 libavfilter9 libavformat60 libavutil58 libpostproc57 libswresample4 libswscale7 - Add 0001-libavcodec-arm-mlpdsp_armv5te-fix-label-format-to-wo.patch [boo#1229338] ==== google-noto-fonts ==== Version update (20240801 -> 20240901) Subpackages: google-noto-sans-fonts google-noto-sans-math-fonts - Update to 20240901 * Various updates to fonts ==== libjpeg-turbo ==== - update to 3.0.3: * The x86-64 SIMD extensions now include support for Intel Control-flow Enforcement Technology (CET), which is enabled automatically if CET is enabled in the C compiler. * Fixed a regression introduced by 3.0 beta2[6] that made it impossible for calling applications to supply custom Huffman tables when generating 12-bit-per-component lossy JPEG images using the libjpeg API. * Fixed a segfault that occurred when attempting to use the jpegtran `-drop` option with a specially-crafted malformed input image or drop image (specifically an image in which all of the scans contain fewer components than the number of components specified in the Start Of Frame segment.) ==== python-alembic ==== Version update (1.13.1 -> 1.13.2) - update to 1.31.2: * Improve computed column compare function to support multi-line expressions. Pull request courtesy of Georg Wicke-Arndt. * Fixed bug in alembic command stdout where long messages were not properly wrapping at the terminal width. Pull request courtesy Saif Hakim. * Fixed internal issue where Alembic would call connection.execute() sending an empty tuple to indicate âno paramsâ. In SQLAlchemy 2.1 this case will be deprecated as âempty sequenceâ is ambiguous as to its intent. * Fixes to support pytest 8.1 for the test suite. * Fixed the detection of serial column in autogenerate with tables not under default schema on PostgreSQL. - Drop pytest8.patch as it has merged upstream and included in the 1.31.2 release. ==== python-cffi ==== Version update (1.16.0 -> 1.17.0) - update to 1.17.0: * Add support for Python 3.13. * In API mode, when you get a function from a C library by writing `fn = lib.myfunc`, you get an object of a special type for performance reasons, instead of a `<cdata 'C-function-type'>`. Before version 1.17 you could only call such objects. You could write `ffi.addressof(lib, "myfunc")` in order to get a real `<cdata>` object, based on the idea that in these cases in C you'd usually write `&myfunc` instead of `myfunc`. In version 1.17, the special object `lib.myfunc` can now be passed in many places where CFFI expects a regular `<cdata>` object. For example, you can now pass it as a callback to a C function call, or write it inside a C structure field of the correct pointer-to-function type, or use `ffi.cast()` or `ffi.typeof()` on it. - drop py313-compat.patch, py313-use-format-unraisable.patch, py313-use-hashpointer.patch (upstream) ==== selinux-policy ==== Version update (20240830 -> 20240903) Subpackages: selinux-policy-targeted - Update to version 20240903: * allow sshd_t and sshd_net_t access to ssh vsockets (bsc#1228831) - Update to version 20240902: * Allow xen to use qemu as dom0 disk backend (bsc#1228540) * Label /var/lib/xen/xenstore as xenstored_var_lib_t (bsc#1228540) * Allow xl to access hypercall interfaces to xen hypervisor (bsc#1228540) ==== u-boot-rpiarm64 ==== Version update (2024.04 -> 2024.07) Subpackages: u-boot-rpiarm64-doc - Update to 2024.07: * Full changelog available at: https://source.denx.de/u-boot/u-boot/-/compare/v2024.04...v2024.07 ==== xmlsec1 ==== Version update (1.2.40 -> 1.2.41) Subpackages: libxmlsec1-1 libxmlsec1-openssl1 - Update to 1.2.41: * (xmlsec-mscng,xmlsec-mscrypto) Improved certificates verification. * (xmlsec-gnutls) Added support for self-signed certificates. * (xmlsec-core) Fix deprecated functions in LibXML2 2.13.1 including disabling HTTP support by default (use '--enable-http' option to re-enable it).

1 0

New MicroOS snapshot 20240903 released!
by Richard Brown 04 Sep '24

04 Sep '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MicroOS-release (20240902 -> 20240903) ffmpeg-6 google-noto-fonts (20240801 -> 20240901) libjpeg-turbo python-alembic (1.13.1 -> 1.13.2) python-cffi (1.16.0 -> 1.17.0) selinux-policy (20240830 -> 20240903) xmlsec1 (1.2.40 -> 1.2.41) === Details === ==== MicroOS-release ==== Version update (20240902 -> 20240903) Subpackages: MicroOS-release-appliance MicroOS-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== ffmpeg-6 ==== Subpackages: libavcodec60 libavfilter9 libavformat60 libavutil58 libpostproc57 libswresample4 libswscale7 - Add 0001-libavcodec-arm-mlpdsp_armv5te-fix-label-format-to-wo.patch [boo#1229338] ==== google-noto-fonts ==== Version update (20240801 -> 20240901) Subpackages: google-noto-sans-fonts google-noto-sans-math-fonts - Update to 20240901 * Various updates to fonts ==== libjpeg-turbo ==== - update to 3.0.3: * The x86-64 SIMD extensions now include support for Intel Control-flow Enforcement Technology (CET), which is enabled automatically if CET is enabled in the C compiler. * Fixed a regression introduced by 3.0 beta2[6] that made it impossible for calling applications to supply custom Huffman tables when generating 12-bit-per-component lossy JPEG images using the libjpeg API. * Fixed a segfault that occurred when attempting to use the jpegtran `-drop` option with a specially-crafted malformed input image or drop image (specifically an image in which all of the scans contain fewer components than the number of components specified in the Start Of Frame segment.) ==== python-alembic ==== Version update (1.13.1 -> 1.13.2) - update to 1.31.2: * Improve computed column compare function to support multi-line expressions. Pull request courtesy of Georg Wicke-Arndt. * Fixed bug in alembic command stdout where long messages were not properly wrapping at the terminal width. Pull request courtesy Saif Hakim. * Fixed internal issue where Alembic would call connection.execute() sending an empty tuple to indicate âno paramsâ. In SQLAlchemy 2.1 this case will be deprecated as âempty sequenceâ is ambiguous as to its intent. * Fixes to support pytest 8.1 for the test suite. * Fixed the detection of serial column in autogenerate with tables not under default schema on PostgreSQL. - Drop pytest8.patch as it has merged upstream and included in the 1.31.2 release. ==== python-cffi ==== Version update (1.16.0 -> 1.17.0) - update to 1.17.0: * Add support for Python 3.13. * In API mode, when you get a function from a C library by writing `fn = lib.myfunc`, you get an object of a special type for performance reasons, instead of a `<cdata 'C-function-type'>`. Before version 1.17 you could only call such objects. You could write `ffi.addressof(lib, "myfunc")` in order to get a real `<cdata>` object, based on the idea that in these cases in C you'd usually write `&myfunc` instead of `myfunc`. In version 1.17, the special object `lib.myfunc` can now be passed in many places where CFFI expects a regular `<cdata>` object. For example, you can now pass it as a callback to a C function call, or write it inside a C structure field of the correct pointer-to-function type, or use `ffi.cast()` or `ffi.typeof()` on it. - drop py313-compat.patch, py313-use-format-unraisable.patch, py313-use-hashpointer.patch (upstream) ==== selinux-policy ==== Version update (20240830 -> 20240903) Subpackages: selinux-policy-targeted - Update to version 20240903: * allow sshd_t and sshd_net_t access to ssh vsockets (bsc#1228831) - Update to version 20240902: * Allow xen to use qemu as dom0 disk backend (bsc#1228540) * Label /var/lib/xen/xenstore as xenstored_var_lib_t (bsc#1228540) * Allow xl to access hypercall interfaces to xen hypervisor (bsc#1228540) ==== xmlsec1 ==== Version update (1.2.40 -> 1.2.41) Subpackages: libxmlsec1-1 libxmlsec1-openssl1 - Update to 1.2.41: * (xmlsec-mscng,xmlsec-mscrypto) Improved certificates verification. * (xmlsec-gnutls) Added support for self-signed certificates. * (xmlsec-core) Fix deprecated functions in LibXML2 2.13.1 including disabling HTTP support by default (use '--enable-http' option to re-enable it).

1 0

New ARM MicroOS snapshot 20240902 released!
by Guillaume Gardet 03 Sep '24

03 Sep '24

Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=3&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MicroOS-release (20240829 -> 20240902) SDL2 ca-certificates (2+git20240415.3fe9324 -> 2+git20240805.fd24d50) glib2 glibmm2 (2.80.0 -> 2.80.1) kernel-firmware (20240809 -> 20240826) kernel-source (6.10.5 -> 6.10.7) multipath-tools (0.9.9+161+suse.0c835ef -> 0.10.0+103+suse.0fc97cd) patterns-microos python-requests python311 python311-core qemu qt6-wayland rsync sdbootutil (1+git20240823.30ef4f1 -> 1+git20240830.7f696c8) selinux-policy (20240828 -> 20240830) snapper (0.11.1 -> 0.11.2) suse-module-tools (16.0.49 -> 16.0.50) taglib (2.0.1 -> 2.0.2) transactional-update (4.8.0 -> 4.8.1) === Details === ==== MicroOS-release ==== Version update (20240829 -> 20240902) Subpackages: MicroOS-release-appliance MicroOS-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== SDL2 ==== - Don't build with fcitx support. fcitx support was just added because of a bug (boo#1025413) that could be fixed by building with fcitx support but upstream SDL2 developers fixed it in 2.0.5 when building without fcitx support too. Also fcitx support has always been disabled in SLE/Leap and in Factory it's built against fcitx 4.2.9.9, not the newer fcitx5 so let's disable it in order to reduce dependencies. ==== ca-certificates ==== Version update (2+git20240415.3fe9324 -> 2+git20240805.fd24d50) - Fix source archive - Update to version 2+git20240805.fd24d50: * Remove rc symlink [jsc#PED-266] ==== glib2 ==== Subpackages: glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 typelib-1_0-GLib-2_0 typelib-1_0-GModule-2_0 typelib-1_0-GObject-2_0 typelib-1_0-Gio-2_0 - remove dependency on /usr/bin/python3 using %python3_fix_shebang{,_path} macros, [bsc#1212476] ==== glibmm2 ==== Version update (2.80.0 -> 2.80.1) Subpackages: libgiomm-2_68-1 libglibmm-2_68-1 - Update to version 2.80.1: + Gio: Fix memory leak in DBus::generate_guid() + gmmproc: - generate_wrap_in.pl.in: Ignore -Winconsistent-dllimport from clang - Convert [enum(a)Module.Type.ENUMERATOR] in documentation - h2def.py: Avoid syntax warnings from Python 3.12 - DocsParser.pm: Don't link to developer-old.gnome.org - Improve documentation of enum and enum class + Build: Some fixes to avoid warnings from the clang compiler ==== kernel-firmware ==== Version update (20240809 -> 20240826) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-ath12k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update to version 20240826 (git commit bec4fd18cc57): * amdgpu: DMCUB updates forvarious AMDGPU ASICs * rtw89: 8922a: add fw format-1 v0.35.41.0 * linux-firmware: update firmware for MT7925 WiFi device * linux-firmware: update firmware for mediatek bluetooth chip (MT7925) * rtl_bt: Add firmware and config files for RTL8922A * rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part * rtl_bt: de-dupe identical config.bin files * rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin * linux-firmware: Update AMD SEV firmware * linux-firmware: update firmware for MT7996 * Revert "i915: Update MTL DMC v2.22" * ath12k: WCN7850 hw2.0: update board-2.bin * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 * ath11k: WCN6855 hw2.0: update board-2.bin * ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 * ath11k: QCA2066 hw2.1: add board-2.bin * ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 * qcom: vpu: add video firmware for sa8775p * amdgpu: DMCUB updates for various AMDGPU ASICs ==== kernel-source ==== Version update (6.10.5 -> 6.10.7) - Linux 6.10.7 (bsc#1012628). - tty: vt: conmakehash: remove non-portable code printing comment header (bsc#1012628). - tty: serial: fsl_lpuart: mark last busy before uart_add_one_port (bsc#1012628). - tty: atmel_serial: use the correct RTS flag (bsc#1012628). - Revert "ACPI: EC: Evaluate orphan _REG under EC device" (bsc#1012628). - Revert "misc: fastrpc: Restrict untrusted app to attach to privileged PD" (bsc#1012628). - Revert "serial: 8250_omap: Set the console genpd always on if no console suspend" (bsc#1012628). - Revert "usb: typec: tcpm: clear pd_event queue in PORT_RESET" (bsc#1012628). - selinux: revert our use of vma_is_initial_heap() (bsc#1012628). - netfs, ceph: Revert "netfs: Remove deprecated use of PG_private_2 as a second writeback flag" (bsc#1012628). - fuse: Initialize beyond-EOF page contents before setting uptodate (bsc#1012628). - char: xillybus: Don't destroy workqueue from work item running on it (bsc#1012628). - char: xillybus: Refine workqueue handling (bsc#1012628). - char: xillybus: Check USB endpoints when probing device (bsc#1012628). - ALSA: usb-audio: Add delay quirk for VIVO USB-C-XE710 HEADSET (bsc#1012628). - ALSA: usb-audio: Support Yamaha P-125 quirk entry (bsc#1012628). - usb: misc: ljca: Add Lunar Lake ljca GPIO HID to ljca_gpio_hids[] (bsc#1012628). - usb: xhci: Check for xhci->interrupters being allocated in xhci_mem_clearup() (bsc#1012628). - xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration (bsc#1012628). - thunderbolt: Mark XDomain as unplugged when router is removed (bsc#1012628). - ALSA: hda/tas2781: fix wrong calibrated data order (bsc#1012628). - ALSA: timer: Relax start tick time check for slave timer elements (bsc#1012628). - s390/dasd: fix error recovery leading to data corruption on ESE devices (bsc#1012628). - KVM: s390: fix validity interception issue when gisa is switched off (bsc#1012628). - thermal: gov_bang_bang: Call __thermal_cdev_update() directly (bsc#1012628). - KEYS: trusted: fix DCP blob payload length assignment (bsc#1012628). - KEYS: trusted: dcp: fix leak of blob encryption key (bsc#1012628). - riscv: change XIP's kernel_map.size to be size of the entire kernel (bsc#1012628). - riscv: entry: always initialize regs->a0 to -ENOSYS (bsc#1012628). - smb3: fix lock breakage for cached writes (bsc#1012628). - i2c: tegra: Do not mark ACPI devices as irq safe (bsc#1012628). - ACPICA: Add a depth argument to acpi_execute_reg_methods() (bsc#1012628). - ACPI: EC: Evaluate _REG outside the EC scope more carefully (bsc#1012628). - arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE (bsc#1012628). - dm resume: don't return EINVAL when signalled (bsc#1012628). - dm persistent data: fix memory allocation failure (bsc#1012628). - vfs: Don't evict inode under the inode lru traversing context (bsc#1012628). - fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1012628). - i2c: qcom-geni: Add missing geni_icc_disable in geni_i2c_runtime_resume (bsc#1012628). - tracing: Return from tracing_buffers_read() if the file has been closed (bsc#1012628). - perf/bpf: Don't call bpf_overflow_handler() for tracing events (bsc#1012628). - mseal: fix is_madv_discard() (bsc#1012628). - rtla/osnoise: Prevent NULL dereference in error handling (bsc#1012628). - mm: fix endless reclaim on machines with unaccepted memory (bsc#1012628). - mm/hugetlb: fix hugetlb vs. core-mm PT locking (bsc#1012628). - md/raid1: Fix data corruption for degraded array with slow disk (bsc#1012628). - net: mana: Fix RX buf alloc_size alignment and atomic op panic (bsc#1012628). - media: atomisp: Fix streaming no longer working on BYT / ISP2400 devices (bsc#1012628). - net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings (bsc#1012628). - wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion (bsc#1012628). - fs/netfs/fscache_cookie: add missing "n_accesses" check (bsc#1012628). - selinux: fix potential counting error in avc_add_xperms_decision() (bsc#1012628). - selinux: add the processing of the failure of avc_add_xperms_decision() (bsc#1012628). - alloc_tag: mark pages reserved during CMA activation as not tagged (bsc#1012628). - mm/memory-failure: use raw_spinlock_t in struct memory_failure_cpu (bsc#1012628). ... changelog too long, skipping 422 lines ... - commit d546de5 ==== multipath-tools ==== Version update (0.9.9+161+suse.0c835ef -> 0.10.0+103+suse.0fc97cd) Subpackages: kpartx libmpath0 - Update to 0.10.0+103+suse.0fc97cd - Update to upstream 0.10.0 (see also NEWS.md) * The `multipathd show daemon` command now shows `(reconfigure pending)` if a reconfiguration has been triggered but not finished yet. * Refactored the path checker loop. Paths are now checked for each multipath map in turn * Renamed public functions, variables, and macros to comply with the glibc policy for reserved names (gh#opensvc/multipath-tools#91) * Fixed bug that caused queueing to be always disabled if flushing a map failed (bug introduced in 0.9.8). (bsc#1229898) * Fixed failure to remove maps even with `deferred_remove` (bug introduced in 0.9.9). (bsc#1229898) * Fixed old mpathpersist bug leading to the error message "configured reservation key doesn't match: 0x0" when `reservation_key` was configured in the multipaths section of `multipath.conf`. (bsc#1228926, gh#opensvc/multipath-tools#92) * Fixed output of `multipath -t` and `multipath -T` for the options `force_sync` and `retrigger_tries`. (bsc#1229898, gh#opensvc/multipath-tools#88) * Fixed adding maps by WWID in CLI (command `add map $WWID`). (bsc#1229898) ==== patterns-microos ==== Subpackages: patterns-microos-alt_onlyDVD patterns-microos-apparmor patterns-microos-base patterns-microos-base-microdnf patterns-microos-base-packagekit patterns-microos-base-zypper patterns-microos-basesystem patterns-microos-cloud patterns-microos-cockpit patterns-microos-defaults patterns-microos-desktop-common patterns-microos-desktop-gnome patterns-microos-desktop-kde patterns-microos-hardware patterns-microos-ima_evm patterns-microos-onlyDVD patterns-microos-ra_agent patterns-microos-ra_verifier patterns-microos-selinux patterns-microos-sssd_ldap - Move exfatprogs to onlyDVD - Install tpm2 tools by default for FDE - Remove policycoreutils-python-utils again from selinux, no python in default install - Move systemd-zram-service to onlyDVD, as this is incompatible with main MicroOS workload - Remove the rest of the previously added packages from desktop common, since it's basically abandoned - Remove previously added packages from desktop common - Add TPM support and mokuil to onlyDVD pattern - Add zRam support to base - Add policycoreutils-python-utils to selinux - Sync some packages which are present in Aeon ==== python-requests ==== - Remove Requires on python-py, it should have been removed earlier. ==== python311 ==== - Add CVE-2024-8088-inf-loop-zipfile_Path.patch to prevent malformed payload to cause infinite loops in zipfile.Path (bsc#1229704, CVE-2024-8088). ==== python311-core ==== Subpackages: libpython3_11-1_0 python311-base - Add CVE-2024-8088-inf-loop-zipfile_Path.patch to prevent malformed payload to cause infinite loops in zipfile.Path (bsc#1229704, CVE-2024-8088). ==== qemu ==== - Fix bsc#1221812: * [openSUSE] block: Reschedule query-block during qcow2 invalidation (bsc#1221812) - Fixup a previous patch (cure a build warning): * [openSUSE] fixup patch "pc: q35: Allow 1024 cpus for old machine types" - Infra improvement: * [openSUSE] Workflows for Virtualization:Staging:TDX ==== qt6-wayland ==== Subpackages: libQt6WaylandClient6 libQt6WaylandCompositor6 libQt6WaylandEglClientHwIntegration6 libQt6WaylandEglCompositorHwIntegration6 libQt6WlShellIntegration6 - Add patch to fix 'wl_shm' higher than interface version (2 > 1) (boo#1229893, QTBUG-126379): * 0001-update-wayland_xml-to-version-1_23_0.patch ==== rsync ==== - add patch rsync-run-dir.patch: * Drop dependency on /var/run compat symlink, this causes problems on image based systems ==== sdbootutil ==== Version update (1+git20240823.30ef4f1 -> 1+git20240830.7f696c8) Subpackages: sdbootutil-snapper sdbootutil-tukit - Update to version 1+git20240830.7f696c8: * Use parameter "snapshot" instead the global one * Add update-entry and update-all-entries commands * Generate tpm2 public key before enroll_pcroracle * Fix function names for enrolling pcr-oracle * Check if enroll functions worked correctly * Warn when pcrlock.json or tpm2-pcr-signature.json are missing - Update to version 1+git20240829.1b5aa4d: * Add --default-snapshot parameter (bsc#1224773) ==== selinux-policy ==== Version update (20240828 -> 20240830) Subpackages: selinux-policy-targeted - Update to version 20240830: * Allow virtstoraged to manage images (bsc#1228742) * Allow virtstoraged_t domtrans to udev (bsc#1228742) ==== snapper ==== Version update (0.11.1 -> 0.11.2) Subpackages: libsnapper7 - use .snapshots dir for 'btrfs qgroup clear-stale' (bsc#1229904) - version 0.11.2 ==== suse-module-tools ==== Version update (16.0.49 -> 16.0.50) Subpackages: suse-module-tools-scriptlets * Generate initrd for the default snapshot (boo#1224773) ==== taglib ==== Version update (2.0.1 -> 2.0.2) - Update to 2.0.2: * Fix parsing of ID3v2.2 frames. * Tolerate MP4 files with unknown atom types as generated by Android tools. * Support setting properties with arbitrary names in MP4 tags. * Windows: Fix "-p" option in tagwriter example. * Support building with older utfcpp versions. ==== transactional-update ==== Version update (4.8.0 -> 4.8.1) Subpackages: dracut-transactional-update libtukit4 transactional-update-zypp-config tukit tukitd - Version 4.8.1 - tukit: fix --drop-if-no-change after apply [bsc#1229900]

1 0

New MicroOS snapshot 20240902 released!
by Richard Brown 03 Sep '24

03 Sep '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MicroOS-release (20240901 -> 20240902) ca-certificates (2+git20240415.3fe9324 -> 2+git20240805.fd24d50) rsync === Details === ==== MicroOS-release ==== Version update (20240901 -> 20240902) Subpackages: MicroOS-release-appliance MicroOS-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== ca-certificates ==== Version update (2+git20240415.3fe9324 -> 2+git20240805.fd24d50) - Fix source archive - Update to version 2+git20240805.fd24d50: * Remove rc symlink [jsc#PED-266] ==== rsync ==== - add patch rsync-run-dir.patch: * Drop dependency on /var/run compat symlink, this causes problems on image based systems

1 0

New MicroOS snapshot 20240901 released!
by Richard Brown 02 Sep '24

02 Sep '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MicroOS-release (20240830 -> 20240901) kernel-source (6.10.5 -> 6.10.7) sdbootutil (1+git20240829.1b5aa4d -> 1+git20240830.7f696c8) selinux-policy (20240828 -> 20240830) suse-module-tools (16.0.49 -> 16.0.50) transactional-update (4.8.0 -> 4.8.1) === Details === ==== MicroOS-release ==== Version update (20240830 -> 20240901) Subpackages: MicroOS-release-appliance MicroOS-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== kernel-source ==== Version update (6.10.5 -> 6.10.7) - Linux 6.10.7 (bsc#1012628). - tty: vt: conmakehash: remove non-portable code printing comment header (bsc#1012628). - tty: serial: fsl_lpuart: mark last busy before uart_add_one_port (bsc#1012628). - tty: atmel_serial: use the correct RTS flag (bsc#1012628). - Revert "ACPI: EC: Evaluate orphan _REG under EC device" (bsc#1012628). - Revert "misc: fastrpc: Restrict untrusted app to attach to privileged PD" (bsc#1012628). - Revert "serial: 8250_omap: Set the console genpd always on if no console suspend" (bsc#1012628). - Revert "usb: typec: tcpm: clear pd_event queue in PORT_RESET" (bsc#1012628). - selinux: revert our use of vma_is_initial_heap() (bsc#1012628). - netfs, ceph: Revert "netfs: Remove deprecated use of PG_private_2 as a second writeback flag" (bsc#1012628). - fuse: Initialize beyond-EOF page contents before setting uptodate (bsc#1012628). - char: xillybus: Don't destroy workqueue from work item running on it (bsc#1012628). - char: xillybus: Refine workqueue handling (bsc#1012628). - char: xillybus: Check USB endpoints when probing device (bsc#1012628). - ALSA: usb-audio: Add delay quirk for VIVO USB-C-XE710 HEADSET (bsc#1012628). - ALSA: usb-audio: Support Yamaha P-125 quirk entry (bsc#1012628). - usb: misc: ljca: Add Lunar Lake ljca GPIO HID to ljca_gpio_hids[] (bsc#1012628). - usb: xhci: Check for xhci->interrupters being allocated in xhci_mem_clearup() (bsc#1012628). - xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration (bsc#1012628). - thunderbolt: Mark XDomain as unplugged when router is removed (bsc#1012628). - ALSA: hda/tas2781: fix wrong calibrated data order (bsc#1012628). - ALSA: timer: Relax start tick time check for slave timer elements (bsc#1012628). - s390/dasd: fix error recovery leading to data corruption on ESE devices (bsc#1012628). - KVM: s390: fix validity interception issue when gisa is switched off (bsc#1012628). - thermal: gov_bang_bang: Call __thermal_cdev_update() directly (bsc#1012628). - KEYS: trusted: fix DCP blob payload length assignment (bsc#1012628). - KEYS: trusted: dcp: fix leak of blob encryption key (bsc#1012628). - riscv: change XIP's kernel_map.size to be size of the entire kernel (bsc#1012628). - riscv: entry: always initialize regs->a0 to -ENOSYS (bsc#1012628). - smb3: fix lock breakage for cached writes (bsc#1012628). - i2c: tegra: Do not mark ACPI devices as irq safe (bsc#1012628). - ACPICA: Add a depth argument to acpi_execute_reg_methods() (bsc#1012628). - ACPI: EC: Evaluate _REG outside the EC scope more carefully (bsc#1012628). - arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE (bsc#1012628). - dm resume: don't return EINVAL when signalled (bsc#1012628). - dm persistent data: fix memory allocation failure (bsc#1012628). - vfs: Don't evict inode under the inode lru traversing context (bsc#1012628). - fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1012628). - i2c: qcom-geni: Add missing geni_icc_disable in geni_i2c_runtime_resume (bsc#1012628). - tracing: Return from tracing_buffers_read() if the file has been closed (bsc#1012628). - perf/bpf: Don't call bpf_overflow_handler() for tracing events (bsc#1012628). - mseal: fix is_madv_discard() (bsc#1012628). - rtla/osnoise: Prevent NULL dereference in error handling (bsc#1012628). - mm: fix endless reclaim on machines with unaccepted memory (bsc#1012628). - mm/hugetlb: fix hugetlb vs. core-mm PT locking (bsc#1012628). - md/raid1: Fix data corruption for degraded array with slow disk (bsc#1012628). - net: mana: Fix RX buf alloc_size alignment and atomic op panic (bsc#1012628). - media: atomisp: Fix streaming no longer working on BYT / ISP2400 devices (bsc#1012628). - net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings (bsc#1012628). - wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion (bsc#1012628). - fs/netfs/fscache_cookie: add missing "n_accesses" check (bsc#1012628). - selinux: fix potential counting error in avc_add_xperms_decision() (bsc#1012628). - selinux: add the processing of the failure of avc_add_xperms_decision() (bsc#1012628). - alloc_tag: mark pages reserved during CMA activation as not tagged (bsc#1012628). - mm/memory-failure: use raw_spinlock_t in struct memory_failure_cpu (bsc#1012628). ... changelog too long, skipping 422 lines ... - commit d546de5 ==== sdbootutil ==== Version update (1+git20240829.1b5aa4d -> 1+git20240830.7f696c8) Subpackages: sdbootutil-snapper sdbootutil-tukit - Update to version 1+git20240830.7f696c8: * Use parameter "snapshot" instead the global one * Add update-entry and update-all-entries commands * Generate tpm2 public key before enroll_pcroracle * Fix function names for enrolling pcr-oracle * Check if enroll functions worked correctly * Warn when pcrlock.json or tpm2-pcr-signature.json are missing ==== selinux-policy ==== Version update (20240828 -> 20240830) Subpackages: selinux-policy-targeted - Update to version 20240830: * Allow virtstoraged to manage images (bsc#1228742) * Allow virtstoraged_t domtrans to udev (bsc#1228742) ==== suse-module-tools ==== Version update (16.0.49 -> 16.0.50) Subpackages: suse-module-tools-scriptlets * Generate initrd for the default snapshot (boo#1224773) ==== transactional-update ==== Version update (4.8.0 -> 4.8.1) Subpackages: dracut-transactional-update libtukit4 transactional-update-zypp-config tukit tukitd - Version 4.8.1 - tukit: fix --drop-if-no-change after apply [bsc#1229900]

1 0

New MicroOS snapshot 20240830 released!
by Richard Brown 01 Sep '24

01 Sep '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MicroOS-release (20240829 -> 20240830) SDL2 glib2 glibmm2 (2.80.0 -> 2.80.1) kernel-firmware (20240809 -> 20240826) multipath-tools (0.9.9+161+suse.0c835ef -> 0.10.0+103+suse.0fc97cd) patterns-microos python-requests python311 python311-core qemu qt6-wayland sdbootutil (1+git20240823.30ef4f1 -> 1+git20240829.1b5aa4d) snapper (0.11.1 -> 0.11.2) taglib (2.0.1 -> 2.0.2) === Details === ==== MicroOS-release ==== Version update (20240829 -> 20240830) Subpackages: MicroOS-release-appliance MicroOS-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== SDL2 ==== - Don't build with fcitx support. fcitx support was just added because of a bug (boo#1025413) that could be fixed by building with fcitx support but upstream SDL2 developers fixed it in 2.0.5 when building without fcitx support too. Also fcitx support has always been disabled in SLE/Leap and in Factory it's built against fcitx 4.2.9.9, not the newer fcitx5 so let's disable it in order to reduce dependencies. ==== glib2 ==== Subpackages: glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 typelib-1_0-GLib-2_0 typelib-1_0-GModule-2_0 typelib-1_0-GObject-2_0 typelib-1_0-Gio-2_0 - remove dependency on /usr/bin/python3 using %python3_fix_shebang{,_path} macros, [bsc#1212476] ==== glibmm2 ==== Version update (2.80.0 -> 2.80.1) Subpackages: libgiomm-2_68-1 libglibmm-2_68-1 - Update to version 2.80.1: + Gio: Fix memory leak in DBus::generate_guid() + gmmproc: - generate_wrap_in.pl.in: Ignore -Winconsistent-dllimport from clang - Convert [enum(a)Module.Type.ENUMERATOR] in documentation - h2def.py: Avoid syntax warnings from Python 3.12 - DocsParser.pm: Don't link to developer-old.gnome.org - Improve documentation of enum and enum class + Build: Some fixes to avoid warnings from the clang compiler ==== kernel-firmware ==== Version update (20240809 -> 20240826) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-ath12k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network ucode-amd - Update to version 20240826 (git commit bec4fd18cc57): * amdgpu: DMCUB updates forvarious AMDGPU ASICs * rtw89: 8922a: add fw format-1 v0.35.41.0 * linux-firmware: update firmware for MT7925 WiFi device * linux-firmware: update firmware for mediatek bluetooth chip (MT7925) * rtl_bt: Add firmware and config files for RTL8922A * rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part * rtl_bt: de-dupe identical config.bin files * rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin * linux-firmware: Update AMD SEV firmware * linux-firmware: update firmware for MT7996 * Revert "i915: Update MTL DMC v2.22" * ath12k: WCN7850 hw2.0: update board-2.bin * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 * ath11k: WCN6855 hw2.0: update board-2.bin * ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 * ath11k: QCA2066 hw2.1: add board-2.bin * ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 * qcom: vpu: add video firmware for sa8775p * amdgpu: DMCUB updates for various AMDGPU ASICs ==== multipath-tools ==== Version update (0.9.9+161+suse.0c835ef -> 0.10.0+103+suse.0fc97cd) Subpackages: kpartx libmpath0 - Update to 0.10.0+103+suse.0fc97cd - Update to upstream 0.10.0 (see also NEWS.md) * The `multipathd show daemon` command now shows `(reconfigure pending)` if a reconfiguration has been triggered but not finished yet. * Refactored the path checker loop. Paths are now checked for each multipath map in turn * Renamed public functions, variables, and macros to comply with the glibc policy for reserved names (gh#opensvc/multipath-tools#91) * Fixed bug that caused queueing to be always disabled if flushing a map failed (bug introduced in 0.9.8). (bsc#1229898) * Fixed failure to remove maps even with `deferred_remove` (bug introduced in 0.9.9). (bsc#1229898) * Fixed old mpathpersist bug leading to the error message "configured reservation key doesn't match: 0x0" when `reservation_key` was configured in the multipaths section of `multipath.conf`. (bsc#1228926, gh#opensvc/multipath-tools#92) * Fixed output of `multipath -t` and `multipath -T` for the options `force_sync` and `retrigger_tries`. (bsc#1229898, gh#opensvc/multipath-tools#88) * Fixed adding maps by WWID in CLI (command `add map $WWID`). (bsc#1229898) ==== patterns-microos ==== Subpackages: patterns-microos-alt_onlyDVD patterns-microos-apparmor patterns-microos-base patterns-microos-base-microdnf patterns-microos-base-packagekit patterns-microos-base-zypper patterns-microos-basesystem patterns-microos-cloud patterns-microos-cockpit patterns-microos-defaults patterns-microos-desktop-common patterns-microos-desktop-gnome patterns-microos-desktop-kde patterns-microos-hardware patterns-microos-ima_evm patterns-microos-onlyDVD patterns-microos-ra_agent patterns-microos-ra_verifier patterns-microos-selinux patterns-microos-sssd_ldap - Move exfatprogs to onlyDVD - Install tpm2 tools by default for FDE - Remove policycoreutils-python-utils again from selinux, no python in default install - Move systemd-zram-service to onlyDVD, as this is incompatible with main MicroOS workload - Remove the rest of the previously added packages from desktop common, since it's basically abandoned - Remove previously added packages from desktop common - Add TPM support and mokuil to onlyDVD pattern - Add zRam support to base - Add policycoreutils-python-utils to selinux - Sync some packages which are present in Aeon ==== python-requests ==== - Remove Requires on python-py, it should have been removed earlier. ==== python311 ==== - Add CVE-2024-8088-inf-loop-zipfile_Path.patch to prevent malformed payload to cause infinite loops in zipfile.Path (bsc#1229704, CVE-2024-8088). ==== python311-core ==== Subpackages: libpython3_11-1_0 python311-base - Add CVE-2024-8088-inf-loop-zipfile_Path.patch to prevent malformed payload to cause infinite loops in zipfile.Path (bsc#1229704, CVE-2024-8088). ==== qemu ==== - Fix bsc#1221812: * [openSUSE] block: Reschedule query-block during qcow2 invalidation (bsc#1221812) - Fixup a previous patch (cure a build warning): * [openSUSE] fixup patch "pc: q35: Allow 1024 cpus for old machine types" - Infra improvement: * [openSUSE] Workflows for Virtualization:Staging:TDX ==== qt6-wayland ==== Subpackages: libQt6WaylandClient6 libQt6WaylandCompositor6 libQt6WaylandEglClientHwIntegration6 libQt6WaylandEglCompositorHwIntegration6 libQt6WlShellIntegration6 - Add patch to fix 'wl_shm' higher than interface version (2 > 1) (boo#1229893, QTBUG-126379): * 0001-update-wayland_xml-to-version-1_23_0.patch ==== sdbootutil ==== Version update (1+git20240823.30ef4f1 -> 1+git20240829.1b5aa4d) Subpackages: sdbootutil-snapper sdbootutil-tukit - Update to version 1+git20240829.1b5aa4d: * Add --default-snapshot parameter (bsc#1224773) ==== snapper ==== Version update (0.11.1 -> 0.11.2) Subpackages: libsnapper7 - use .snapshots dir for 'btrfs qgroup clear-stale' (bsc#1229904) - version 0.11.2 ==== taglib ==== Version update (2.0.1 -> 2.0.2) - Update to 2.0.2: * Fix parsing of ID3v2.2 frames. * Tolerate MP4 files with unknown atom types as generated by Android tools. * Support setting properties with arbitrary names in MP4 tags. * Windows: Fix "-p" option in tagwriter example. * Support building with older utfcpp versions.

1 0