Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=3&version=Tumbleweed&build=20221122 https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&component=MicroOS&query_format=advanced&resolution=--- Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: Mesa (22.2.3 -> 22.2.4) Mesa-drivers (22.2.3 -> 22.2.4) bind (9.18.8 -> 9.18.9) flatpak (1.14.0 -> 1.14.1) gssdp (1.6.1 -> 1.6.2) gupnp (1.6.1 -> 1.6.2) hplip ibus libXdmcp (1.1.3 -> 1.1.4) libXpm (3.5.13 -> 3.5.14) libXrandr (1.5.2 -> 1.5.3) libcontainers-common mozjs102 (102.4.0 -> 102.5.0) mpfr patterns-microos python-Twisted python-rich (12.5.1 -> 12.6.0) python-typing_extensions raspberrypi-firmware (2022.10.26 -> 2022.11.18) raspberrypi-firmware-config (2022.10.26 -> 2022.11.18) suse-module-tools (16.0.26 -> 16.0.27) yast2-ntp-client (4.5.1 -> 4.5.2) yast2-online-update (4.5.1 -> 4.5.2) yast2-storage-ng (4.5.13 -> 4.5.14) === Details === ==== Mesa ==== Version update (22.2.3 -> 22.2.4) Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - update to 22.2.4: * clover: windows: library filename has \`-1` suffix and a \`lib` prefix when built with mingw * radv, dxvk: Rendering errors in World of Tanks after "Switch to dynamic rendering only" * gen9 gt3e/gt4e skus fail dEQP-VK.pipeline.multisample.sample_locations_ext.* * v3d: Wrong colors (pink) in videos in Firefox (likely YUV->RGB shader issue) * panfrost t860 glmark-es2 regression * radv: Flickering in Spider-Man Remastered (Regression) (Bisected) * radv: Hitman 2 using Direct3D 12 has discolored squares on RDNA2 with DCC enabled * panfrost/midgard - on Duckstation PSX emulator: segfault on GLES 3.0 and bad shader compilations on 3.3 ==== Mesa-drivers ==== Version update (22.2.3 -> 22.2.4) Subpackages: Mesa-dri Mesa-gallium Mesa-libva - update to 22.2.4: * clover: windows: library filename has \`-1` suffix and a \`lib` prefix when built with mingw * radv, dxvk: Rendering errors in World of Tanks after "Switch to dynamic rendering only" * gen9 gt3e/gt4e skus fail dEQP-VK.pipeline.multisample.sample_locations_ext.* * v3d: Wrong colors (pink) in videos in Firefox (likely YUV->RGB shader issue) * panfrost t860 glmark-es2 regression * radv: Flickering in Spider-Man Remastered (Regression) (Bisected) * radv: Hitman 2 using Direct3D 12 has discolored squares on RDNA2 with DCC enabled * panfrost/midgard - on Duckstation PSX emulator: segfault on GLES 3.0 and bad shader compilations on 3.3 ==== bind ==== Version update (9.18.8 -> 9.18.9) - Update to bind release 9.18.9 Bug Fixes: * A crash was fixed that happened when a dnssec-policy zone that used NSEC3 was reconfigured to enable inline-signing. * In certain resolution scenarios, quotas could be erroneously reached for servers, including any configured forwarders, resulting in SERVFAIL answers being sent to clients. * rpz-ip rules in response-policy zones could be ineffective in some cases if a query had the CD (Checking Disabled) bit set to 1. * Previously, if Internet connectivity issues were experienced during the initial startup of named, a BIND resolver with dnssec-validation set to auto could enter into a state where it would not recover without stopping named, manually deleting the managed-keys.bind and managed-keys.bind.jnl files, and starting named again. * The statistics counter representing the current number of clients awaiting recursive resolution results (RecursClients) could overflow in certain resolution scenarios. * Previously, the port in remote servers such as in primaries and parental-agents could be wrongly configured because of an inheritance bug. * Previously, BIND failed to start on Solaris-based systems with hundreds of CPUs. * When a DNS resource recordâs TTL value was equal to the resolverâs configured prefetch âeligibilityâ value, the record was erroneously not treated as eligible for prefetching. ==== flatpak ==== Version update (1.14.0 -> 1.14.1) Subpackages: libflatpak0 system-user-flatpak - Update to version 1.14.1: + New features: Add a httpbackend variable to flatpak.pc, allowing dependent projects like GNOME Software to detect whether they are compatible with libflatpak. + Bugs fixed: - Terminate the flatpak-session-helper and flatpak-portal services when the session ends, so that applications will not inherit outdated Wayland and X11 socket addresses. - When using fish shell, don't overwrite a previously-set XDG_DATA_DIRS. - Don't try to enable HTTP 2 if linked to a libcurl version that doesn't support it. - Stop systemd reporting the session-helper as failed when terminated by a signal. - Fix a warning when listing a document with no permissions. - Fix compilation with GLib 2.66.x (as used in Debian 11). - Fix compilation with GLib 2.58.x (as used in Debian 10). - Fix a compiler warning on 32-bit architectures. - If an app update is blocked by parental controls policies, clean up the temporary deploy directory. - Fix Autotools build with versions of gpgme that no longer provide gpgme-config(1). - When building with Autotools, be more consistent about applying compiler warning flags. - Unset $TEMP, $TEMPDIR and $TMP for apps, the same as $TMPDIR. - Treat /efi the same as /boot/efi. - Make generated files more reproducible. + Updated translations. - Add and recommend a package flatpak-remote-flathub which adds the Flathub repository (boo#1186315) ==== gssdp ==== Version update (1.6.1 -> 1.6.2) - Update to version 1.6.2: + Propagate random port up to client, partial fix for GUPnP/81 + Add manpage for sniffer. - Pass manpages=false to meson, we do not have the needed pandoc BuildRequires available for all arches/buildtargets. ==== gupnp ==== Version update (1.6.1 -> 1.6.2) - Update to version 1.6.2: + Add test for issue 81. + Bugs fixed in this release: - https://gitlab.gnome.org/GNOME/gupnp/issues/81 ==== hplip ==== Subpackages: hplip-hpijs hplip-udev-rules - Update disable_hp-upgrade.patch: Log the 'openSUSE disabled this for security message' is 'info', not 'error'. ==== ibus ==== Subpackages: ibus-dict-emoji libibus-1_0-5 typelib-1_0-IBus-1_0 - Switch to use systemd service file to start ibus daemon * Fix boo#1201421 * Add ibus-ui-gtk3-restart-via-systemd.patch * Enable ibus-autostart for xdg-autostart-generator ==== libXdmcp ==== Version update (1.1.3 -> 1.1.4) - Update to version 1.1.4 * Update configure.ac bug URL for gitlab migration * gitlab CI: add a basic build test * Fix build on Solaris 11.3.0 - 11.3.8 * Fix spelling/wording issues * gitlab CI: enable doc builds in basic build test * Use memcpy() instead of memmove() when buffers are known not to overlap * arc4random_buf: Only declare ret if HAVE_GETENTROPY is defined * XdmcpDisposeARRAYofARRAY8: Reduce scope of i * Only link with libbsd if needed for arc4random_buf() * Switch from libbsd to libbsd-overlay ==== libXpm ==== Version update (3.5.13 -> 3.5.14) - Update to version 3.5.14 * Fix spelling/wording issues * man: strip trailing whitespace * gitlab CI: add a basic build test * man pages: Make file names consistent with their displayed names * man pages: Fix shadow man pages * man pages: Make function synopses more consistent with other pages * man pages: Add missing word 'function' where needed * man pages: Fix typos * man pages: Correct Copyright/License notices * add man pages based on doc/xpm.PS * update man pages ==== libXrandr ==== Version update (1.5.2 -> 1.5.3) - Update to version 1.5.3 * Fix spelling/wording issues * gitlab CI: add a basic build test * Xrandr.h: remove misleading comment for XRRGetScreenSizeRange() * XRRGetProviderInfo: Remove unneeded ProviderInfoExtra * Variable scope reductions as recommended by cppcheck * Remove unnecessary casts of return values from malloc() ==== libcontainers-common ==== - add container-storage-driver.sh (bsc#1197093) - postinstall script: slight cleanup, no functional change ==== mozjs102 ==== Version update (102.4.0 -> 102.5.0) - Update to version 102.5.0: + Various stability, functionality, and security fixes. + CVE-2022-45403: Service Workers might have learned size of cross-origin media files. + CVE-2022-45404: Fullscreen notification bypass. + CVE-2022-45405: Use-after-free in InputStream implementation. + CVE-2022-45406: Use-after-free of a JavaScript Realm. + CVE-2022-45408: Fullscreen notification bypass via windowName. + CVE-2022-45409: Use-after-free in Garbage Collection. + CVE-2022-45410: ServiceWorker-intercepted requests bypassed SameSite cookie policy. + CVE-2022-45411: Cross-Site Tracing was possible via non-standard override headers. + CVE-2022-45412: Symlinks may resolve to partially uninitialized buffers. + CVE-2022-45416: Keystroke Side-Channel Leakage. + CVE-2022-45418: Custom mouse cursor could have been drawn over browser UI. + CVE-2022-45420: Iframe contents could be rendered outside the iframe. + CVE-2022-45421: Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5. ==== mpfr ==== - package license files correctly ==== patterns-microos ==== Subpackages: patterns-microos-alt_onlyDVD patterns-microos-apparmor patterns-microos-base patterns-microos-base-microdnf patterns-microos-base-packagekit patterns-microos-base-zypper patterns-microos-basesystem patterns-microos-cloud patterns-microos-cockpit patterns-microos-defaults patterns-microos-desktop-common patterns-microos-desktop-gnome patterns-microos-desktop-kde patterns-microos-hardware patterns-microos-ima_evm patterns-microos-onlyDVD patterns-microos-ra_agent patterns-microos-ra_verifier patterns-microos-selinux patterns-microos-sssd_ldap - Add fonts to KDE pattern, so common unicode characters are displayed on default install (boo#1205546) - Add noto-sans-math-fonts - google-noto-sans-cjk-fonts ==== python-Twisted ==== Subpackages: python310-Twisted python310-Twisted-tls - Skip rpmlint error python-tests-in-package. ==== python-rich ==== Version update (12.5.1 -> 12.6.0) - change Source URL to https://files.pythonhosted.org - change Upstream URL to https://github.com/Textualize/rich - add _service file to easily download this - remove CHANGELOG.md, as this is not present in the PyPI tarball - Update to 12.6.0: * Added - Parse ANSI escape sequences in pretty repr #2470 - Add support for FORCE_COLOR env var #2449 - Allow a max_depth argument to be passed to the install() hook #2486 - Document using None as name in __rich_repr__ for tuple positional args #2379 - Add font_aspect_ratio parameter in SVG export https://github.com/Textualize/rich/pull/2539/files - Added Table.add_section method. #2544 * Fixed - Handle stdout/stderr being null #2513 - Fix NO_COLOR support on legacy Windows #2458 - Fix pretty printer handling of cyclic references #2524 - Fix missing mode property on file wrapper breaking uploads via requests #2495 - Fix mismatching default value of parameter ensure_ascii #2538 - Remove unused height parameter in Layout class #2540 - Fixed exception in Syntax.rich_measure for empty files * Changed - Removed border from code blocks in Markdown ==== python-typing_extensions ==== - Back to multibuild: remove python-testsuite from buildcycle, because of setuptools_scm closing it at the other end. ==== raspberrypi-firmware ==== Version update (2022.10.26 -> 2022.11.18) - Update to b8a7365 (2022-11-18): * firmware: arm_loader: Improvements to Compute Module audio See: https://forums.raspberrypi.com/viewtopic.php?p=2052680 * firmware: arm_loader: Fix GPIO bank 1 support See: #1756 ==== raspberrypi-firmware-config ==== Version update (2022.10.26 -> 2022.11.18) - Update to b8a7365 (2022-11-18): * firmware: arm_loader: Improvements to Compute Module audio See: https://forums.raspberrypi.com/viewtopic.php?p=2052680 * firmware: arm_loader: Fix GPIO bank 1 support See: #1756 ==== suse-module-tools ==== Version update (16.0.26 -> 16.0.27) - Update to version 16.0.27: * 80-hotplug-cpu-mem.rules: use CONST{arch} (bsc#1204423) ==== yast2-ntp-client ==== Version update (4.5.1 -> 4.5.2) - Fix the netconfig executable path using /sbin/netconfig instead of /usr/sbin/netconfig which is not available in SLE-15-SP5 (bsc#1205401) - 4.5.2 ==== yast2-online-update ==== Version update (4.5.1 -> 4.5.2) Subpackages: yast2-online-update-frontend - bsc#1204907 - Dropped old workaround from 2.13.15 with unconditional refresh of all repositories. - 4.5.2 ==== yast2-storage-ng ==== Version update (4.5.13 -> 4.5.14) - GuidedProposal: support for LUKS2 encryption with a configurable PBKDF to be used by D-Installer (related to jsc#PED-2182). - 4.5.14