Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version=Tumbleweed&build=20220901 https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&component=MicroOS&query_format=advanced&resolution=--- Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: NetworkManager (1.38.4 -> 1.40.0) NetworkManager-openvpn (1.8.18 -> 1.10.0) curl (7.84.0 -> 7.85.0) flatpak (1.12.7 -> 1.14.0) gdk-pixbuf kdump (1.0.2+git17.g491c742 -> 1.0.2+git19.g0c60ffb) libfontenc (1.1.5 -> 1.1.6) lua54 microos-tools (2.12 -> 2.15) ncurses (6.3.20220813 -> 6.3.20220820) schily === Details === ==== NetworkManager ==== Version update (1.38.4 -> 1.40.0) Subpackages: NetworkManager-bluetooth NetworkManager-lang NetworkManager-tui NetworkManager-wwan libnm0 typelib-1_0-NM-1_0 - Update to version 1.40.0: + During the build, stop relying on intltool for i18n and use gettext only. + Undeprecate nm_remote_connection_get_secrets() in libnm. + NetworkManager now will restart DHCP if the MAC changes on a device. - Drop intltool BuildRequires following upstream changes. - Refresh patches with quilt. - Stop passing dnssec_trigger=%{_libexecdir}/dnssec-trigger-script to meson, support dropped upstream. ==== NetworkManager-openvpn ==== Version update (1.8.18 -> 1.10.0) Subpackages: NetworkManager-openvpn-gnome NetworkManager-openvpn-lang - Update to version 1.10.0: + Add support for "allow-compression" parameter. + Fix a regression in preserving the "tls-auth" settings. + Add support for "tls-min" and "tls-cipher" parameters. + Include the new gnome-control-center name in the AppData file. + Drop libnm-glib support, nobody is likely using it anymore. + Fix importing profiles with a PKCS#12 CA. + Make sure the plugin object links with glib. + Dropped dependency on intltool. + Updated translations. - Drop intltool BuildRequires following upstream changes. - Rebase patch with quilt. ==== curl ==== Version update (7.84.0 -> 7.85.0) Subpackages: libcurl4 - Update to 7.85.0: * Security fixes: [bsc#1202593, CVE-2022-35252] - control code in cookie denial of service * Changes: - quic: add support via wolfSSL - schannel: Add TLS 1.3 support - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR * Bugfixes: - asyn-thread: fix socket leak on OOM - asyn-thread: make getaddrinfo_complete return CURLcode - base64: base64url encoding has no padding - configure: fix broken m4 syntax in TLS options - configure: if asked to use TLS, fail if no TLS lib was detected - connect: add quic connection information - connect: set socktype/protocol correctly - cookie: reject cookies with "control bytes" - cookie: treat a blank domain in Set-Cookie: as non-existing - curl: output warning when a cookie is dropped due to size - Curl_close: call Curl_resolver_cancel to avoid memory-leak - digest: fix memory leak, fix not quoted 'opaque' - digest: fix missing increment of 'nc' value for auth-int - digest: pass over leading spaces in qop values - digest: reject broken header with session protocol but without qop - doh: use https protocol by default - easy_lock.h: include sched.h if available to fix build - easy_lock.h: use __asm__ instead of asm to fix build - easy_lock: switch to using atomic_int instead of bool - ftp: use a correct expire ID for timer expiry - h2h3: fix overriding the 'TE: Trailers' header - hostip: resolve *.localhost to 127.0.0.1/::1 - HTTP3.md: update to msh3 v0.4.0 - hyper: use wakers for curl pause/resume - lib3026: reduce the number of threads to 100 - libssh2: make atime/mtime date overflow return error - libssh2: provide symlink name in SFTP dir listing - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer - multi: use larger dns hash table for multi interface - multi_wait: fix skipping to populate revents for extra_fds - netrc: Use the password from lines without login - ngtcp2: Fix build error due to change in nghttp3 prototypes - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL - openssl: add cert path in error message - openssl: add details to "unable to set client certificate" error - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel - select: do not return fatal error on EINTR from poll() - sendf: fix paused header writes since after the header API - sendf: skip storing HTTP headers if HTTP disabled - url: really use the user provided in the url when netrc entry exists - url: reject URLs with hostnames longer than 65535 bytes - url: treat missing usernames in netrc as empty - urldata: reduce size of several struct fields - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend * Remove tests-for-32bit.patch fixed in the update * Rebase libcurl-ocloexec.patch ==== flatpak ==== Version update (1.12.7 -> 1.14.0) Subpackages: libflatpak0 system-user-flatpak - Update to version 1.14.0: + Improved support for sideloading. + Allow sub-sandboxes to own MPRIS names on the session bus. + Commands that accept "--user" will now also take "-u" as an alias for that. + The CLI now properly informs the user of which apps are (indirectly) using end-of-life runtime extensions in end-of-life info messages. + The CLI now takes into account operations in the pending transaction when printing end-of-life messages. + The uninstall command now asks for confirmation before removing in-use runtimes or runtime extensions. + A "--socket=gpg-agent" option is now recognized by "flatpak run" and related commands. + Curl supported as default HTTP backend. + Uses Fuse 3. + Implement support for rewriting dynamic launchers when an app is renamed. + Add --include-sdk/debug options to install command to install SDK/debuginfo along with a ref. + defense in depth against arbitrary file deletion by flatpak-system-helper when using very old libostree (boo#1202639). + Updated translations. - Replace pkgconfig(fuse) BuildRequires with pkgconfig(fuse3): Follow upstreams port to fuse3. - Add pkgconfig(libcurl) BuildRequires: enable the new HTTP backend. - Drop gtk-doc BuildRequires and no longer pass --enable-gtk-doc to configure: no longer supported. - Drop libtool BuildRequires: no need to bootstrap the tarball. - Replace pkgconfig(appstream-glib) BuildRequires with pkgconfig(appstream): match what configure checks for. - Add pkgconfig(gdk-pixbuf-2.0): verified dependency that was implicitly included by appstream-glib before. ==== gdk-pixbuf ==== Subpackages: gdk-pixbuf-lang gdk-pixbuf-query-loaders gdk-pixbuf-thumbnailer libgdk_pixbuf-2_0-0 typelib-1_0-GdkPixbuf-2_0 - Add 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch: fix loading of larger images (glgo#GNOME/gdk-pixbuf#216). ==== kdump ==== Version update (1.0.2+git17.g491c742 -> 1.0.2+git19.g0c60ffb) - mkdumprd: replace mkinitrd with native dracut (bsc#1202443) ==== libfontenc ==== Version update (1.1.5 -> 1.1.6) - Update to version 1.1.6 * This quick update fixes build failures in libfontenc 1.1.5 on platforms that require setting a #define such as _GNU_SOURCE, _OPENBSD_SOURCE, or __EXTENSIONS__ to expose the reallocarray() prototype in their headers. ==== lua54 ==== - Add more upstream patches: * luabugs6.patch * luabugs7.patch ==== microos-tools ==== Version update (2.12 -> 2.15) - Update to version 2.15 - 98selinux-microos: Add grep as dependency - Update to version 2.14 - Fix Makefile to install sysext-add-debug - Update to version 2.13 - 98selinux-microos: Don't rely on selinux=1 [bsc#1202449] - Add sysext-add-debug - Make sure /var/lib/overlay exists before relabeling ==== ncurses ==== Version update (6.3.20220813 -> 6.3.20220820) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch +20220820 + fix some cppcheck warnings, mostly style, in ncurses and c++ libraries and progs directory. + add curses_trace to ifdef's for START_TRACE in test/test.priv.h + update config.guess ==== schily ==== Subpackages: libcdrdeflt1_0 libdeflt1_0 libfile1_0 libfind4_0 librmt1_0 librscg1_0 libscg1_0 libscgcmd1_0 libschily2_0 mkisofs spax star - pbosh.1: replace broken ".so sh.1" refernce with a symlink to bosh.1