Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version=Tumbleweed&build=20230622 https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&component=MicroOS&query_format=advanced&resolution=--- Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: brltty icu (73.1 -> 73.2) libevdev (1.13.0 -> 1.13.1) librsvg libwebp nghttp2 (1.53.0 -> 1.54.0) open-vm-tools openexr (3.1.7 -> 3.1.8) python-gobject tiff (4.5.0 -> 4.5.1) ucode-intel (20230516a -> 20230613) zlib-ng-compat (2.0.7 -> 2.1.2) === Details === ==== brltty ==== Subpackages: brltty-driver-at-spi2 brltty-driver-brlapi brltty-driver-speech-dispatcher brltty-driver-xwindow brltty-lang libbrlapi0_8 python3-brlapi system-user-brltty xbrlapi - Use conditionals for sysusers_requires to allow quilt setup - Remove workarounds for old TCL - Enable parallel build again - Don't use %tmpfiles_create_package anymore. This macro cannot work on transactional systems. However this macro was supposed to be used only when the tmpfiles stuff was needed in advance, which doesn't seem to be the case for brltty. ==== icu ==== Version update (73.1 -> 73.2) Subpackages: libicu73 libicu73-ledata - Update to release 73.2 * CLDR extends the support for âshortâ Chinese sort orders to cover some additional, required characters for Level 2. This is carried over into ICU collation. * ICU has a modified character conversion table, mapping some GB18030 characters to Unicode characters that were encoded after GB18030-2005. - Delete icu-UCHAR-uint16t.patch (merged) ==== libevdev ==== Version update (1.13.0 -> 1.13.1) - update to 1.13.1: * include: sync event codes with kernel 6.2 * CI fixes ==== librsvg ==== Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2 rsvg-thumbnailer typelib-1_0-Rsvg-2_0 - Use %build_rustflags instead of the deprecated %__default_rustflags macro. Requires at least cargo-packaging 1.2.0+3 (boo#1212333). ==== libwebp ==== Subpackages: libsharpyuv0 libwebp7 libwebpdemux2 libwebpmux3 - Add libwebp-double-free.patch: Avoid a double free, upstream commit a486d800 (bsc#1210212 CVE-2023-1999). ==== nghttp2 ==== Version update (1.53.0 -> 1.54.0) - update to 1.54.0: * nghttpx: Consistent error handling and use of high-level API * h2load: Fix http3 upload stall * h2load: Use std::chrono::steady_clock for quic timestamp ==== open-vm-tools ==== Subpackages: libvmtools0 open-vm-tools-desktop - Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867: open-vm-tools: Authentication Bypass vulnerability in the vgauth module + Add patch: 2023-20867-Remove-some-dead-code.patch ==== openexr ==== Version update (3.1.7 -> 3.1.8) Subpackages: libIex-3_1-30 libIlmThread-3_1-30 libOpenEXR-3_1-30 - update to 3.1.8: * Support for DWA compression in OpenEXRCore * Fix OSS-fuzz 59070 Stack-buffer-overflow in DwaCompressor_readChannelRules ==== python-gobject ==== Subpackages: python311-gobject python311-gobject-Gdk python311-gobject-cairo - Add %{?sle15_python_module_pythons}: build additional python flavors besides the 'default' when building for SLE15. ==== tiff ==== Version update (4.5.0 -> 4.5.1) - Update to version 4.5.1: * Definition of tags reformatted (clang-format off) for better readability of tag comments in tiff.h and tif_dirinfo.c * Do not install libtiff-4.pc when tiff-install is reset. * Add versioninfo resource files for DLL and tools compiled with Windows MSVC and MINGW. * Disable clang-formatting for tif_config.h.cmake.in and tiffconf.h.cmake.in because sensitive for CMake scripts. * CMake: make WebP component name compatible with upstream ConfigWebP.cmake * CMake: make Findliblzma with upstream CMake config file * CMake: FindDeflate.cmake: fix several errors (issue #526). * CMake: FindLERC.cmake: version string return added. * CMake: export TiffConfig.cmake and TiffConfigVersion.cmake files * CMake: fix export of INTERFACE_INCLUDE_DIRECTORIES * Hardcode HOST_FILLORDER to FILLORDER_LSB2MSB and make 'H' flag of TIFFOpen() to warn and an alias of FILLORDER_MSB2LSB. tif_lerc.c: use WORDS_BIGENDIAN instead of HOST_BIGENDIAN. * Optimize relative seeking within TIFFSetDirectory() by using the learned list of IFD offsets. * Improve internal IFD offset and directory number map handling. * Behavior of TIFFOpen() mode "r+" in the Windows implementation adjusted to that of Linux. * TIFFDirectory td_fieldsset type changed from unsigned long, which can be 32 or 64 bits, to uint32_t (fixes issue #484). * tif_ojpeg.c: checking for division by zero (fixes issue #554). * LZWDecode(): avoid crash when trying to read again from a strip whith a missing end-of-information marker (fixes issue #548). * Fixed runtime error: applying zero offset to null pointer in countInkNamesString(). * Fixing crash in TIFFUnlinkDirectory() when called with directory number zero ("TIFFUnlinkDirectory(0)") as well as fixing incorrect behaviour when unlinking the first directory. * tif_luv: check and correct for NaN data in uv_encode() (issue #530). * TIFFClose() avoid NULL pointer dereferencing (issue #515). * tif_hash_set.c: include tif_hash_set.h after tif_config.h to let a chance for GDAL symbol renaming trick. * Fax3: fix failure to decode some fax3 number_of_images and add test for Fax3 decoding issues (issue #513). * TIFFSetDirectory() and TIFFWriteDirectorySec() avoid harmless unsigned-integer-overflow (due to gdal oss-fuzz #54311 and #54343). * tif_ojpeg.c: fix issue #554 by checking for division by zero in OJPEGWriteHeaderInfo(). * LZWDecode(): avoid crash when trying to read again from a strip whith a missing end-of-information marker (issue #548). - Drop no longer needed patches: * tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch * tiff-CVE-2022-48281.patch * tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch ==== ucode-intel ==== Version update (20230516a -> 20230613) - update to 20230613: * | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products * |:---------------|:---------|:------------|:---------|:---------|:--------- * | ADL-N | A0 | 06-be-00/01 | | 00000010 | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E * | AZB | A0 | 06-9a-04/40 | | 00000004 | Intel(R) Atom(R) C1100 * | AZB | R0 | 06-9a-04/40 | | 00000004 | Intel(R) Atom(R) C1100 * | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products * |:---------------|:---------|:------------|:---------|:---------|:--------- * | ADL       | L0    | 06-9a-03/80 | 00000429 | 0000042a | Core Gen12 * | ADL       | L0    | 06-9a-04/80 | 00000429 | 0000042a | Core Gen12 * | AML-Y22     | H0    | 06-8e-09/10 | 000000f0 | 000000f2 | Core Gen8 Mobile * | AML-Y42     | V0    | 06-8e-0c/94 | 000000f4 | 000000f6 | Core Gen10 Mobile * | CFL-H      | R0    | 06-9e-0d/22 | 000000f4 | 000000f8 | Core Gen9 Mobile * | CFL-H/S     | P0    | 06-9e-0c/22 | 000000f0 | 000000f2 | Core Gen9 * | CFL-H/S/E3   | U0    | 06-9e-0a/22 | 000000f0 | 000000f2 | Core Gen8 Desktop, Mobile, Xeon E * | CFL-S      | B0    | 06-9e-0b/02 | 000000f0 | 000000f2 | Core Gen8 * | CFL-U43e    | D0    | 06-8e-0a/c0 | 000000f0 | 000000f2 | Core Gen8 Mobile * | CLX-SP     | B0    | 06-55-06/bf | 04003303 | 04003501 | Xeon Scalable Gen2 * | CLX-SP     | B1    | 06-55-07/bf | 05003303 | 05003501 | Xeon Scalable Gen2 * | CML-H      | R1    | 06-a5-02/20 | 000000f4 | 000000f6 | Core Gen10 Mobile * | CML-S102    | Q0    | 06-a5-05/22 | 000000f4 | 000000f6 | Core Gen10 * | CML-S62     | G1    | 06-a5-03/22 | 000000f4 | 000000f6 | Core Gen10 * | CML-U62 V1   | A0    | 06-a6-00/80 | 000000f4 | 000000f6 | Core Gen10 Mobile * | CML-U62 V2   | K1    | 06-a6-01/80 | 000000f4 | 000000f6 | Core Gen10 Mobile * | CML-Y42     | V0    | 06-8e-0c/94 | 000000f4 | 000000f6 | Core Gen10 Mobile * | CPX-SP     | A1    | 06-55-0b/bf | 07002503 | 07002601 | Xeon Scalable Gen3 * | ICL-D      | B0    | 06-6c-01/10 | 01000211 | 01000230 | Xeon D-17xx, D-27xx * | ICL-U/Y     | D1    | 06-7e-05/80 | 000000b8 | 000000ba | Core Gen10 Mobile * | ICX-SP     | D0    | 06-6a-06/87 | 0d000389 | 0d000390 | Xeon Scalable Gen3 * | KBL-G/H/S/E3  | B0    | 06-9e-09/2a | 000000f0 | 000000f2 | Core Gen7; Xeon E3 v6 * | KBL-U/Y     | H0    | 06-8e-09/c0 | 000000f0 | 000000f2 | Core Gen7 Mobile * | LKF       | B2/B3   | 06-8a-01/10 | 00000032 | 00000033 | Core w/Hybrid Technology * | RKL-S      | B0    | 06-a7-01/02 | 00000057 | 00000058 | Core Gen11 * | RPL-H 6+8    | J0    | 06-ba-02/07 | 0000410e | 00004112 | Core Gen13 * | RPL-P 6+8    | J0    | 06-ba-02/07 | 0000410e | 00004112 | Core Gen13 * | RPL-S      | S0    | 06-b7-01/32 | 00000112 | 00000113 | Core Gen13 * | RPL-U 2+8    | Q0    | 06-ba-03/07 | 0000410e | 00004112 | Core Gen13 * | SKX-D      | H0    | 06-55-04/b7 | 02006e05 | 02006f05 | Xeon D-21xx * | SKX-SP     | B1    | 06-55-03/97 | 01000161 | 01000171 | Xeon Scalable * | SKX-SP     | H0/M0/U0 | 06-55-04/b7 | 02006e05 | 02006f05 | Xeon Scalable * | SPR-HBM     | B3    | 06-8f-08/10 | 2c000170 | 2c0001d1 | Xeon Max * | SPR-SP     | E0    | 06-8f-04/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4 * | SPR-SP     | E2    | 06-8f-05/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4 * | SPR-SP     | E3    | 06-8f-06/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4 * | SPR-SP     | E4    | 06-8f-07/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4 * | SPR-SP     | E5    | 06-8f-08/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4 * | SPR-SP     | S2    | 06-8f-07/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4 * | SPR-SP     | S3    | 06-8f-08/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4 * | TGL       | B1    | 06-8c-01/80 | 000000a6 | 000000aa | Core Gen11 Mobile * | TGL-H      | R0    | 06-8d-01/c2 | 00000042 | 00000044 | Core Gen11 Mobile * | TGL-R      | C0    | 06-8c-02/c2 | 00000028 | 0000002a | Core Gen11 Mobile * | WHL-U      | V0    | 06-8e-0c/94 | 000000f4 | 000000f6 | Core Gen8 Mobile * | WHL-U      | W0    | 06-8e-0b/d0 | 000000f0 | 000000f2 | Core Gen8 Mobile ==== zlib-ng-compat ==== Version update (2.0.7 -> 2.1.2) - Update to version 2.1.2: * Many improvements to the CMake scripts. * Improved support for detecting memory alignment functions. * Improved support for unaligned access by letting the compiler promote code to unaligned if supported by the CPU. * Remove x86 cpu feature detection for TZCNT, safely fallback to BSF. * Enable using AVX512 intrinsics with GCC <9. * Decompression is a lot faster (56% faster measured on AVX2-capable x86-64) * Compresson is improved for Level 9, at the cost of a little performance. * Compression is improved for Level 3, by switching from deflate_fast to deflate_medium. * Levels 3 and 4 have been reconfigured to provide a better gradual tradeoff for speed/compression between levels 2 and 5. * Deflate_quick (Level 1) has been improved to default to a bigger windowsize and support changing the window size like the other levels. * Deflate_rle has been optimized with its own compare_256 implementation. * Adler32 implementation using AVX512, AVX512-VNNI, VMX. * CRC32-B implementation using VPCLMULQDQ & IBM-Z. * Slide hash implementation using VMX. * Compare256 implementations using SSE2, Neon, & POWER9. * Inflate chunk copying using SSSE3 & VSX.