Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version=Tumbleweed&build=20231006 https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&component=MicroOS&query_format=advanced&resolution=--- Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ImageMagick (7.1.1.18 -> 7.1.1.19) bluez filesystem grub2 libXrandr (1.5.3 -> 1.5.4) parted python-cryptography (41.0.3 -> 41.0.4) python-dnspython python-urllib3 (2.0.4 -> 2.0.6) sg3_utils (1.48~20221101+1.142dace -> 1.48+1.889c3e3) shadow (4.14.0 -> 4.14.1) systemd === Details === ==== ImageMagick ==== Version update (7.1.1.18 -> 7.1.1.19) Subpackages: ImageMagick-config-7-SUSE libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - version update to 7.1.1.19 * https://github.com/ImageMagick/Website/blob/main/ChangeLog.md * fixes CVE-2023-5341 [bsc#1215939] ==== bluez ==== Subpackages: bluez-auto-enable-devices bluez-cups libbluetooth3 - Moved btmgmt to main rpm of bluez. (jsc#PED-6216) ==== filesystem ==== - Add /run/lock (boo#1212926) - Remove /var/spool/mail (boo#1179574) - Remove obsolete home dir check. The filesystem package is not meant to contain home directories of random system users anymore - Create ghost symlinks also in pretrans, needed to get /var/run as link right away ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi - Add patch to fix reading files from btrfs with "implicit" holes: * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch - Update the TPM 2.0 patches to support more RSA and ECC algorithms * 0002-tpm2-Add-TPM-Software-Stack-TSS.patch * 0003-protectors-Add-TPM2-Key-Protector.patch * 0005-util-grub-protect-Add-new-tool.patch - Remove build require for gcc-32bit, target platform didn't rely on libgcc function shipped with compiler but rather using functions supplied in grub directly. - Add BuildIgnore to break cycle with the branding package ==== libXrandr ==== Version update (1.5.3 -> 1.5.4) - Update to version 1.5.4 This release fixes a bug where an invalid pointer (a pointer to the middle of a buffer returned from malloc() instead of to the beginning of the buffer) could be passed to free() when cleaning up after an out-of-bounds output is found in the response from the X server to XRRGetMonitors(). ==== parted ==== Subpackages: libparted-fs-resize0 libparted2 parted-lang - updated fatresize to version 0.2 which includes a man-page removed patches: - fatresize-fix-getting-dev-name.patch ==== python-cryptography ==== Version update (41.0.3 -> 41.0.4) - update to 41.0.4: * ~~~~~~~~~~~~~~~~~~~ * Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.1.3. * .. _v41-0-3: ==== python-dnspython ==== - Don't use curio. ==== python-urllib3 ==== Version update (2.0.4 -> 2.0.6) - update to 2.0.6 (bsc#1215968, CVE-2023-43804): * Added the Cookie header to the list of headers to strip from requests when redirecting to a different host. As before, different headers can be set via Retry.remove_headers_on_redirect - 2.0.5: * Allowed pyOpenSSL third-party module without any deprecation warning. #3126 * Fixed default blocksize of HTTPConnection classes to match high-level classes. Previously was 8KiB, now 16KiB. #3066 ==== sg3_utils ==== Version update (1.48~20221101+1.142dace -> 1.48+1.889c3e3) Subpackages: libsgutils2-1_48-2 - udev rules: allow kernel command line overrides with "udev.scsi_id_serial_src=LTVS" and "udev.scsi_symlink_src=LTVS" Try these boot parameters if your system fails to detect SCSI devices after update to sg3_utils 1.48. - dracut.conf: add 00-scsi-sg3_config.rules (jsc#PED-6226) - spec file: * fix build dependencies for regenerate_initrd_posttrans (bsc#1215772) * add missing rules file - Update to version 1.48 * udev rules: new, configurable scheme for creating symlinks for SCSI devices (jsc#PED-6226) See description of ".SCSI_ID_SERIAL_SRC" /usr/lib/udev/55-scsi-sg3_id.rules and .SCSI_SYMLINK_SRC in /usr/lib/udev/58-scsi_symlink.rules * decoding utilities: add -j/--json[=JO] and --js-file=JFN options * sg_sat_datetime: new tool to access date/time on ATA devices using a SAT layer * sg_z_act_query: new tool for sending zone activate/query commands * sg_rem_rest_elem: new tool for removing or restoring elements * sg_write_attr: support for SPC "Write Attirbute" command (for tapes) * sg_ses: swap meaning of -H and -HH, add json support, use e.g. "0:2" for range indicator * sg_rtpg: fix response truncation * sg_decode_sense: add --nodecode option * sg_logs: fix --list and -lll options * sg_modes: improve handling of ZBC disks * sg_inq: add version descriptors from SPC6r08, add --quiet option * sg_vpd: add --sinq_inraw=RFN option * sg_turs: add --timeout= and --ascq= options * sg_requests: add --timeout= option * sg_sat_read_gplog: add --smart and --ppt options * sgp_dd and sgm_dd: add --progress option * sg_dd: add support for accessing NVMe devices via passthrough * Bug fixes and minor fixes - _service: simplify version processing, as we have a clean upstream version again ==== shadow ==== Version update (4.14.0 -> 4.14.1) Subpackages: libsubid4 login_defs - Update to 4.14.1: Build system: Merge libshadow and libmisc into a single libshadow. This fixes problems in the linker, which were reported at least in Gentoo. #791 - Add Alejandro Colomar (new stable branch maintainer) to shadow.keyring ==== systemd ==== Subpackages: libsystemd0 libudev1 systemd-coredump systemd-doc systemd-lang udev - rpmlintrc: allow systemd-network and systemd-container sub-packages to ship shared libs. These are actually NSS plugins and are not really subject to shlib policy. - Drop 5000-core-manager-run-generators-directly-when-we-are-in-.patch Since dracut-059+suse.447.g9d1fc722, this workaround is not needed anymore.