Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=3&version=Tumbleweed&build=20240629 https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&component=MicroOS&query_format=advanced&resolution=--- Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: Mesa Mesa-drivers MicroOS-release (20240627 -> 20240629) apparmor containerd firewalld kernel-source (6.9.6 -> 6.9.7) kwin6 (6.1.1 -> 6.1.1.2) libapparmor patterns-base perl-HTTP-Message (6.450.0 -> 6.460.0) pipewire (1.1.83 -> 1.2.0) plasma-branding-Kalpa python311 python311-core vlc wireplumber (0.5.3+git11.4868b3c -> 0.5.4+git2.96dc045) zypper (1.14.73 -> 1.14.74) === Details === ==== Mesa ==== Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - boo1226725-test-fix1.patch * another try to fix coloring on s390x and other platforms - re-enabled patchtes only applied on s390x with previous change on all platforms again - apply patches below to get GL on s390x working again only on s390x, because they break colors during YaST installation also on x86_64 platform (QT/GTK using GL backend?) (boo#1226725) - u_egl-gbm-Enable-RGBA-configs.patch, u_egl-surfaceless-Enable-RGBA-configs.patch * these are needed now after applying previous patch u_dri-Fix-BGR-format-exclusion.patch also on other platforms than s390x? (boo#1226725) - u_dri-Fix-BGR-format-exclusion.patch * fixes glxinfo/eglxinfo on s390x (boo#1226725, comment#6) ==== Mesa-drivers ==== Subpackages: Mesa-dri Mesa-gallium - boo1226725-test-fix1.patch * another try to fix coloring on s390x and other platforms - re-enabled patchtes only applied on s390x with previous change on all platforms again - apply patches below to get GL on s390x working again only on s390x, because they break colors during YaST installation also on x86_64 platform (QT/GTK using GL backend?) (boo#1226725) - u_egl-gbm-Enable-RGBA-configs.patch, u_egl-surfaceless-Enable-RGBA-configs.patch * these are needed now after applying previous patch u_dri-Fix-BGR-format-exclusion.patch also on other platforms than s390x? (boo#1226725) - u_dri-Fix-BGR-format-exclusion.patch * fixes glxinfo/eglxinfo on s390x (boo#1226725, comment#6) ==== MicroOS-release ==== Version update (20240627 -> 20240629) Subpackages: MicroOS-release-appliance MicroOS-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-parser apparmor-profiles apparmor-utils python3-apparmor - add sampa-rpcd-witness.diff: allow samba-dcerpcd to execute rpcd_witness (boo#1225811) ==== containerd ==== - Revert noarch for devel subpackage for SLE 15 Switching to noarch causes issues on SLES maintenance updates, reverting it fixes our image builds ==== firewalld ==== Subpackages: python3-firewall - remove dependency on /usr/bin/python3 using %python3_fix_shebang macro, [bsc#1212476] ==== kernel-source ==== Version update (6.9.6 -> 6.9.7) - netfilter: fix undefined reference to 'netfilter_lwtunnel_*' when CONFIG_SYSCTL=n (git-fixes). - tcp: fix tcp_rcv_fastopen_synack() to enter TCP_CA_Loss for failed TFO (git-fixes). - ALSA: hda/realtek: Fix conflicting quirk for PCI SSID 17aa:3820 (git-fixes). - commit a5efffa - Linux 6.9.7 (bsc#1012628). - fs/writeback: bail out if there is no more inodes for IO and queued once (bsc#1012628). - padata: Disable BH when taking works lock on MT path (bsc#1012628). - crypto: hisilicon/sec - Fix memory leak for sec resource release (bsc#1012628). - crypto: hisilicon/qm - Add the err memory release process to qm uninit (bsc#1012628). - io_uring/sqpoll: work around a potential audit memory leak (bsc#1012628). - rcutorture: Fix rcu_torture_one_read() pipe_count overflow comment (bsc#1012628). - rcutorture: Make stall-tasks directly exit when rcutorture tests end (bsc#1012628). - rcutorture: Fix invalid context warning when enable srcu barrier testing (bsc#1012628). - platform/chrome: cros_usbpd_logger: provide ID table for avoiding fallback match (bsc#1012628). - platform/chrome: cros_usbpd_notify: provide ID table for avoiding fallback match (bsc#1012628). - ubsan: Avoid i386 UBSAN handler crashes with Clang (bsc#1012628). - arm64: defconfig: select INTERCONNECT_QCOM_SM6115 as built-in (bsc#1012628). - block/ioctl: prefer different overflow check (bsc#1012628). - ssb: Fix potential NULL pointer dereference in ssb_device_uevent() (bsc#1012628). - selftests/bpf: Prevent client connect before server bind in test_tc_tunnel.sh (bsc#1012628). - selftests/bpf: Fix flaky test btf_map_in_map/lookup_update (bsc#1012628). - bpf: Avoid kfree_rcu() under lock in bpf_lpm_trie (bsc#1012628). - devlink: use kvzalloc() to allocate devlink instance resources (bsc#1012628). - batman-adv: bypass empty buckets in batadv_purge_orig_ref() (bsc#1012628). - wifi: rtw89: 8852c: add quirk to set PCI BER for certain platforms (bsc#1012628). - wifi: ath9k: work around memset overflow warning (bsc#1012628). - af_packet: avoid a false positive warning in packet_setsockopt() (bsc#1012628). - clocksource: Make watchdog and suspend-timing multiplication overflow safe (bsc#1012628). - ACPI: x86: Add PNP_UART1_SKIP quirk for Lenovo Blade2 tablets (bsc#1012628). - drop_monitor: replace spin_lock by raw_spin_lock (bsc#1012628). - ACPI: resource: Do IRQ override on GMxBGxx (XMG APEX 17 M23) (bsc#1012628). - wifi: ath12k: fix kernel crash during resume (bsc#1012628). - scsi: qedi: Fix crash while reading debugfs attribute (bsc#1012628). - net: sfp: enhance quirk for Fibrestore 2.5G copper SFP module (bsc#1012628). - net: sfp: add quirk for ATS SFP-GE-T 1000Base-TX module (bsc#1012628). - net/sched: fix false lockdep warning on qdisc root lock (bsc#1012628). - arm64/sysreg: Update PIE permission encodings (bsc#1012628). - kselftest: arm64: Add a null pointer check (bsc#1012628). - net: dsa: realtek: keep default LED state in rtl8366rb (bsc#1012628). - net: dsa: realtek: do not assert reset on remove (bsc#1012628). - ACPI: resource: Skip IRQ override on Asus Vivobook Pro N6506MV (bsc#1012628). - netpoll: Fix race condition in netpoll_owner_active (bsc#1012628). - wifi: ath12k: fix the problem that down grade phy mode operation (bsc#1012628). - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (bsc#1012628). - HID: Add quirk for Logitech Casa touchpad (bsc#1012628). - HID: asus: fix more n-key report descriptors if n-key quirked (bsc#1012628). - bpf: avoid uninitialized warnings in verifier_global_subprogs.c (bsc#1012628). - selftests: net: fix timestamp not arriving in cmsg_time.sh (bsc#1012628). - net: ena: Add validation for completion descriptors consistency (bsc#1012628). - Bluetooth: ath3k: Fix multiple issues reported by checkpatch.pl (bsc#1012628). - drm/amd/display: Exit idle optimizations before HDCP execution (bsc#1012628). - drm/amd/display: Workaround register access in idle race with cursor (bsc#1012628). - platform/x86: toshiba_acpi: Add quirk for buttons on Z830 (bsc#1012628). - cgroup/cpuset: Make cpuset hotplug processing synchronous (bsc#1012628). - ASoC: Intel: sof_sdw: add JD2 quirk for HP Omen 14 (bsc#1012628). ... changelog too long, skipping 352 lines ... - commit d344d3a ==== kwin6 ==== Version update (6.1.1 -> 6.1.1.2) Subpackages: libkwin6 - Update to 6.1.1.2: * New bugfix release - Changes since 6.1.1: * 3rdparty: Reformat xcursor.{h,c} * utils: Load Xcursor themes using QFile (kde#489241) * 3rdparty: Drop xcursor write hook * plugins/hidecursor: Set minimum to allow disabling hiding cursor on inactivity * WindowHeapDelegate: Label text background (kde#483016) * plugins/backgroundcontrast,blur: correct support checks * opengl/glframebuffer: handle missing support for blits on Wayland (kde#484193) * opengl: glBufferStorage is not supported on GL ES by default * core/renderloop: assume high render times if the last frame has been a while ago ==== libapparmor ==== - add sampa-rpcd-witness.diff: allow samba-dcerpcd to execute rpcd_witness (boo#1225811) ==== patterns-base ==== Subpackages: patterns-base-base patterns-base-bootloader patterns-base-minimal_base patterns-base-x11 - suggest the full libcurl4 package for zypper installation ==== perl-HTTP-Message ==== Version update (6.450.0 -> 6.460.0) - updated to 6.460.0 (6.46) see /usr/share/doc/packages/perl-HTTP-Message/Changes 6.46 2024-05-27 18:58:16Z - Update several status codes to RFC 9110 (GH#197) (Wesley Schwengle) ==== pipewire ==== Version update (1.1.83 -> 1.2.0) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Update to version 1.2.0: * This is the 1.2 release that is API and ABI compatible with previous 1.1.x and 1.0.x releases. * This release contains some of the bigger changes that happened since the 1.0 release last year, including: - Support for asynchronous processing has been implemented. Nodes can choose (or be forced) to be scheduled asynchronously. The graph will not wait for the output of the node to continue processing but it will use the output of the previous cycle (or silence) instead. This adds one cycle of latency but it can avoid having some nodes blocking the processing graph. Non realtime streams and filters now also use this asynchronous processing instead of their own slightly broken version. - The concept of node.sync-group was added. This groups nodes with overlapping sync-group together when one of them sets the node.sync = true. This is now used to make sure all nodes are scheduled together when JACK transport is started so that they all see the same transport time. - Config parsing errors are reported earlier and much better with line and column numbers where the parsing started to fail. - Add support for mandatory metadata when negotiating buffer parameters. This can be used to only negotiate extra buffer planes when certain metadata is negotiated. One use case is the explicit sync support that requires 2 extra fds for the timelines. - Explicit sync metadata and support was added. - Support was added for making and using multiple data-loops in the server and clients. Support for CPU affinity and priorities was added to the data-loops as well. - The log topic debug levels can now be changed at runtime with metadata. - The log levels in the pulse server can be dynamically changed with a /core message. - The UCM conflicting devices patches were merged. - Add snapcast-discover module to stream to snapcast servers. - Rework how peers are linked and the counters are updated. Resume the peers when a node is unlinked and not yet processed. This should cause less occasional dropouts in the graph when reconnecting things. - Many GStreamer element updates. - Many more fixes and improvements. * Highlights (since the previous 1.1.83 release) - Small fixes here and there. * PipeWire - Compilation fixes after enabling -Werror=float-conversion * Modules - The module-rtp-sap now propagates the cleanup.sec property to the rtp-source and the rtp-source now sets a property with the receiving status. - Fix for ROC 0.3, explicitly specify sender encoding. (#4070) - Some fixes to the RAOP sink module, including a format fix for 32 bit machines. * Tools - Fix pw-cli monitoring code. * SPA - Revert peer_enum_params again because it was not used and flawed. - Fix multichannel processing in webrtc AEC. * GStreamer - Logging improvements. - Fix a race in the bufferpool activation. * Bluetooth - Improvements to BAP broadcast code parsing. - Remove patch already included in 1.2.0: * 0001-vulkan-fix-compilation.patch ==== plasma-branding-Kalpa ==== - Added for contextual menus in dolphin with ark flatpak (from plasma-branding-MicroOS) (boo#1224070): * ark-addtoservicemenu.desktop * ark-servicemenu.desktop ==== python311 ==== - Add CVE-2024-4032-private-IP-addrs.patch to fix bsc#1226448 (CVE-2024-4032) rearranging definition of private v global IP addresses. ==== python311-core ==== Subpackages: libpython3_11-1_0 python311-base - Add CVE-2024-4032-private-IP-addrs.patch to fix bsc#1226448 (CVE-2024-4032) rearranging definition of private v global IP addresses. ==== vlc ==== Subpackages: libvlc5 libvlccore9 vlc-noX vlc-qt - Restrict required version for libav* to avoid pulling in ffmpeg-6 packages. ==== wireplumber ==== Version update (0.5.3+git11.4868b3c -> 0.5.4+git2.96dc045) Subpackages: libwireplumber-0_5-0 wireplumber-audio - Update to version 0.5.4+git2.96dc045: * l/find-best-target: Allow regular filters to be best targets * linking-utils: fallback to role priority 0 if none is defined - Update to version 0.5.4: * Highlights: - Refactored the role-based linking policy (previously known also as "endpoints" or "virtual items" policy) to blend in with the standard desktop policy. It is now possible use role-based sinks alongside standard desktop audio operations and they will only be used for streams that have a "media.role" defined. It is also possible to force streams to have a media.role, using a setting. Other features include: blending with smart filters in the graph and allowing hardware DSP nodes to be also used easily instead of requiring software loopbacks for all roles. (#610, !649) * Improvements: - Filters that are not declared as smart will now behave again as normal application streams, instead of being treated sometimes differently (!657) * Fixes: - Fixed an issue that would cause WirePlumber to crash at startup if an empty configuration file was present in one of the search paths (#671) - Fixed Bluetooth profile auto-switching when a filter is permanently linked to the Bluetooth source (!650) - Fixed an issue in the software-dsp script that would cause DSP filters to stay around and cause issues after their device node was destroyed (!651) - Fixed an issue in the autoswitch-bluetooth-profile script that could cause an infinite loop of switching between profiles (!652, #617) - Fixed a rare issue that could cause WirePlumber to crash when dealing with a device object that didn't have the "device.name" property set (#674) ==== zypper ==== Version update (1.14.73 -> 1.14.74) Subpackages: zypper-needs-restarting - Let_readline_abort_on_Ctrl-C (bsc#1226493) - packages: add '--system' to show @System packages (bsc#222971) - version 1.14.74