Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version=Tumbleweed&build=20230917 https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&component=MicroOS&query_format=advanced&resolution=--- Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: groff (1.22.4 -> 1.23.0) groff-full (1.22.4 -> 1.23.0) health-checker (1.9 -> 1.10) libev liburing libwebp (1.3.1 -> 1.3.2) qemu snapper (0.10.5 -> 0.10.6) tiff (4.5.1 -> 4.6.0) === Details === ==== groff ==== Version update (1.22.4 -> 1.23.0) - Refresh bash-scripts.patch - Add nroff-map-CW-to-R.patch * Fixes man-db build errors - Update to 1.23.0: * Too many changes, see NEWS file for details. - Refreshed patches: * 0002-documentation-for-the-locale-keyword.patch * 0004-don-t-use-usr-bin-env-in-shebang.patch * groff-1.20.1-deunicode.patch * groff-1.20.1-nroff-empty-LANGUAGE.patch * groff-1.21-CVE-2009-5081.patch * groff-force-locale-usage.patch - Drop sort-perl-hash-keys.patch (upstreamed) - Drop doc-volume-operating-system and doc-default-operating-system changes (doesn't default to BSD anymore) - Configure flag --with-appresdir has been renamed to --with-appdefdir - Update file list with files that were removed from the package ==== groff-full ==== Version update (1.22.4 -> 1.23.0) Subpackages: gxditview - Refresh bash-scripts.patch - Add nroff-map-CW-to-R.patch * Fixes man-db build errors - Update to 1.23.0: * Too many changes, see NEWS file for details. - Refreshed patches: * 0002-documentation-for-the-locale-keyword.patch * 0004-don-t-use-usr-bin-env-in-shebang.patch * groff-1.20.1-deunicode.patch * groff-1.20.1-nroff-empty-LANGUAGE.patch * groff-1.21-CVE-2009-5081.patch * groff-force-locale-usage.patch - Drop sort-perl-hash-keys.patch (upstreamed) - Drop doc-volume-operating-system and doc-default-operating-system changes (doesn't default to BSD anymore) - Configure flag --with-appresdir has been renamed to --with-appdefdir - Update file list with files that were removed from the package ==== health-checker ==== Version update (1.9 -> 1.10) Subpackages: health-checker-plugins-MicroOS - Update to version 1.10 * Fix Btrfs subvolume check if subvol starts with '-' [boo#1215368]. ==== libev ==== - %bcond for signify ==== liburing ==== - tests-don-t-expect-multishot-recv-overflow-backloggi.patch (bsc#1215332) - build tests in parallel (using %{?_smp_mflags}) ==== libwebp ==== Version update (1.3.1 -> 1.3.2) Subpackages: libsharpyuv0 libwebp7 libwebpdemux2 libwebpmux3 - update to 1.3.2: * security fix for lossless decoder (boo#1215231 CVE-2023-4863) - Drop 0001-Fix-OOB-write-in-BuildHuffmanTable.patch, 0001-Fix-invalid-incremental-decoding-check.patch - Add 0001-Fix-invalid-incremental-decoding-check.patch: [boo#1215231] [CVE-2023-4863] ==== qemu ==== - Fix the build for SLE/Leap: * [openSUSE][RPM] Make the package buildable on SLE/Leap 15.x ==== snapper ==== Version update (0.10.5 -> 0.10.6) Subpackages: libsnapper7 snapper-zypp-plugin - fixed creating files in root dir (gh#openSUSE/snapper#168) - version 0.10.6 - relax access to info.xml files (gh#openSUSE/snapper#279) - enable snapper-timeline.timer when adjusting config using snapper (gh#openSUSE/snapper#788) ==== tiff ==== Version update (4.5.1 -> 4.6.0) - Update to version 4.6.0: * API/ABI breaks: none * WebP decoder: validate WebP blob width, height, band count against TIFF parameters to avoid use of uninitialized variable, or decoding corrupted content without explicit error (fixes issue #581, issue #582). * WebP codec: turn exact mode when creating lossless files to avoid altering R,G,B values in areas where alpha=0 * Fix TransferFunction writing of only two transfer functions. * TIFFReadDirectoryCheckOrder: avoid integer overflow. When it occurs, it should be harmless in practice though * tiffcp: remove -i option (ignore errors) * This version removes a big number of utilities that have suffered from lack of maintenance over the years and were the source of various reported security issues: + fax2ps + fax2tiff + pal2rgb + ppm2tiff + raw2tiff + rgb2ycbcr + thumbnail + tiff2bw + tiff2rgba + tiffcmp + tiffcrop + tiffdither + tiffgt + tiffmedian + tiff2ps + tiff2pdf - Remove no longer needed tiff-4.0.3-compress-warning.patch.