New MicroOS snapshot 20231005 released!

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version=Tumbleweed&build=20231005 https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&component=MicroOS&query_format=advanced&resolution=--- Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: AppStream Mesa (23.2.0 -> 23.2.1) Mesa-drivers (23.2.0 -> 23.2.1) chrony e2fsprogs fde-tools gdm geoclue2 (2.7.0 -> 2.7.1) glibc icewm (3.4.0 -> 3.4.3) javapackages-tools ldb (2.7.2 -> 2.8.0) libX11 (1.8.6 -> 1.8.7) libXpm (3.5.16 -> 3.5.17) libev libnvme libselinux libsemanage mpg123 (1.32.2 -> 1.32.3) netcfg nvme-cli python-SQLAlchemy (2.0.19 -> 2.0.21) python-greenlet (3.0.0~rc3 -> 3.0.0) python-psutil rubygem-nokogiri rubygem-ruby-dbus (0.23.0.beta2 -> 0.23.1) samba (4.18.6+git.320.cfda27bacb -> 4.19.0+git.306.19d2e214c58) selinux-policy srt (1.5.2 -> 1.5.3) talloc (2.4.0 -> 2.4.1) tdb (1.4.8 -> 1.4.9) tevent (0.14.1 -> 0.15.0) xdg-desktop-portal xscreensaver (6.06 -> 6.07) xterm (384 -> 385) === Details === ==== AppStream ==== Subpackages: AppStream-lang libAppStreamQt2 libappstream4 - Enable vala support when building in SLE-15 SP6 - Fix condition in files section for the case where vala support is disabled, where some files are being generated but were not included ==== Mesa ==== Version update (23.2.0 -> 23.2.1) Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - Update to Mesa 23.2.1 * Mesa 23.2.1 is a new development release. People who are concerned with stability and reliability should stick with a previous release or wait for Mesa 23.2.2. * Mesa 23.2.1 is an unusual first stable release due to the accidentl tagging of 23.2.0 durring the rc cycle. * Mesa 23.2.1 implements the OpenGL 4.6 API, but the version reported by glGetString(GL_VERSION) or glGetIntegerv(GL_MAJOR_VERSION) / glGetIntegerv(GL_MINOR_VERSION) depends on the particular driver being used. Some drivers don't support all the features required in OpenGL 4.6. OpenGL 4.6 is **only** available if requested at context creation. Compatibility contexts may report a lower version depending on each driver. * Mesa 23.2.1 implements the Vulkan 1.3 API, but the version reported by the apiVersion property of the VkPhysicalDeviceProperties struct depends on the particular driver being used. * More details in: - -> https://gitlab.freedesktop.org/mesa/mesa/-/blob/23.2/docs/relnotes/23.2.1.rs... ==== Mesa-drivers ==== Version update (23.2.0 -> 23.2.1) Subpackages: Mesa-dri Mesa-gallium Mesa-libva - Update to Mesa 23.2.1 * Mesa 23.2.1 is a new development release. People who are concerned with stability and reliability should stick with a previous release or wait for Mesa 23.2.2. * Mesa 23.2.1 is an unusual first stable release due to the accidentl tagging of 23.2.0 durring the rc cycle. * Mesa 23.2.1 implements the OpenGL 4.6 API, but the version reported by glGetString(GL_VERSION) or glGetIntegerv(GL_MAJOR_VERSION) / glGetIntegerv(GL_MINOR_VERSION) depends on the particular driver being used. Some drivers don't support all the features required in OpenGL 4.6. OpenGL 4.6 is **only** available if requested at context creation. Compatibility contexts may report a lower version depending on each driver. * Mesa 23.2.1 implements the Vulkan 1.3 API, but the version reported by the apiVersion property of the VkPhysicalDeviceProperties struct depends on the particular driver being used. * More details in: - -> https://gitlab.freedesktop.org/mesa/mesa/-/blob/23.2/docs/relnotes/23.2.1.rs... ==== chrony ==== Subpackages: chrony-pool-openSUSE - Use make quickcheck instead of make check to avoid >1h build times and failures due to timeouts. This was the default before 3.2 but it changed to make tests more reliable. Here a seed is already set to get deterministic execution. ==== e2fsprogs ==== Subpackages: libcom_err2 libext2fs2 - Update specfile to make sure regenerate_initrd_post macro is defined ==== fde-tools ==== - Add fde-tools-remove-redundant-2nd-pw-creation.patch to remove the creation of the secondary password in 'add-secondary-key' ==== gdm ==== Subpackages: gdm-lang gdm-schema gdmflexiserver libgdm1 typelib-1_0-Gdm-1_0 - Explicitly buildrequire /usr/bin/dbus-run-session: the dbus package is being restructured to be usable with dbus-broker and so far we just relied on implicit dependencies bringing this in. Meson checks for it, so it is correct to BR it though. ==== geoclue2 ==== Version update (2.7.0 -> 2.7.1) Subpackages: system-user-srvGeoClue typelib-1_0-Geoclue-2_0 - Update to version 2.7.1: + Add 'age' field to MLS locate queries + Location updates now always have an accuracy value + Improvements to NMEA parsing: - Parse NMEA timestamps with sub-second accuracy - Add default accuracy to NMEA RMC locations - Ignore locations from GGA and RMC sentences if the GNSS fix is not valid + Prioritize GNSS sources with a recent fix over other sources, preventing location jumps + Install D-Bus policy in /usr/share, not /etc + Upgrade GLib / Gio dependency to version 2.68.0 + Correct gi annotations in GClueSimple + Various small fixes - Use ldconfig_scriptlets macro for post(un) handling. ==== glibc ==== Subpackages: glibc-extra glibc-lang glibc-locale glibc-locale-base nscd - setxid-propagate-glibc-tunables.patch: Propagate GLIBC_TUNABLES in setxid binaries - tunables-string-parsing.patch: tunables: Terminate if end of input is reached (CVE-2023-4911, bsc#1215501) ==== icewm ==== Version update (3.4.0 -> 3.4.3) Subpackages: icewm-config-upstream icewm-default icewm-lang - Update to version 3.4.3: * New preference "TaskBarShowWindowTitles" for icon-only task buttons. * New winoption "doNotManage" to workaround bugs in picom for plank. * When a battery has no data about full charge, use the capacity. * When cascading windows, include the border size in the displacement. * Let icewmbg interpret command-line file arguments relative to $PWD. * Add a -f,--fork option to icewmbg to detach it from the terminal. * Fix the Window List Menu for #144. * Fix restoring from fullscreen with F11 in chromium for #141. * Support tabs in the Window List Menu. * Control the terminal in icewm-menu-fdo by option or environment. * Let icewm-menu-fdo use a list of default terminals to choose from. - Drop unknown config options: * --enable-guievents * --enable-antialiasing * --enable-gradients * --enable-shaped-decorations ==== javapackages-tools ==== Subpackages: javapackages-filesystem - Added patches: * 0005-Interpolate-properties-also-in-the-current-artifact.patch + interpolate variables also in current artifactId, groupId and version * 0006-Test-variable-expansion-in-artifactId.patch + test previous changes * 0007-Test-that-we-don-t-bomb-on-relativePath.patch + test gracious handling of empty <relativePath/> in parent reference of a pom file ==== ldb ==== Version update (2.7.2 -> 2.8.0) Subpackages: libldb2 python3-ldb - Update to 2.8.0 * CVE-2023-0614 Not-secret but access controlled LDAP attributes can be discovered (bug 15270) * pyldb: Raise an exception if ldb_dn_get_parent() fails * Implement ldap_whoami in pyldb and add the RFC4532 LDB_EXTENDED_WHOAMI_OID definition * Documentation and spelling fixes * Add ldb_val -> bool,uint64,int64 parsing functions * Split out ldb_val_as_dn() helper function * add LDB_CHANGETYPE_MODRDN support to ldb_ldif_to_pyobject() * add LDB_CHANGETYPE_DELETE support to ldb_ldif_to_pyobject() * let ldb_ldif_parse_modrdn() handle names without 'rdn_name=' prefix * Don't create error string if there is no error * Avoid allocation and memcpy() for every wildcard match candidate * Make ldb_msg_remove_attr O(n) * pyldb: Throw error on invalid controls * pyldb: remove py2 ifdefs * Call tevent_set_max_debug_level(TEVENT_DEBUG_TRACE) ==== libX11 ==== Version update (1.8.6 -> 1.8.7) Subpackages: libX11-6 libX11-data libX11-xcb1 - update to 1.8.7 This release contains fixes for the issues reported in security advisory here: https://lists.x.org/archives/xorg-announce/2023-October/003424.html * fixes CVE-2023-43785 libX11: out-of-bounds memory access in _XkbReadKeySyms() (boo#1215683) * fixes CVE-2023-43786 libX11: stack exhaustion from infinite recursion in PutSubImage() (boo#1215684) * fixes CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to a heap overflow (boo#1215685) along with: * Fail XOpenDisplay() if server-provided default visual is invalid (!233) * Bring XKB docs in line with actual implementation (!231, !228) * Xutil.h: declare XEmptyRegion() and XEqualRegion() as Bool (!225) * Assorted updates to en_US.UTF-8 compose keys (!213, !214, !215, !216, !217, !219, !220, !222, !223, !226, !227, !229) ==== libXpm ==== Version update (3.5.16 -> 3.5.17) - Update to 3.5.17 * This release contains fixes for the libXpm issues reported in security advisory here: https://lists.x.org/archives/xorg-announce/2023-October/003424.html * fixes CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer() (boo#1215686) * fixes CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap (boo#1215687) ==== libev ==== - run signify only on Factory ==== libnvme ==== Subpackages: libnvme-mi1 libnvme1 - Enable tests during build - Set git version tag - Drop unused make dependency - Drop unencessary minimum version depedency on meson. - Re-enable libdbus feature. Upstream defaults changed. ==== libselinux ==== Subpackages: libselinux1 selinux-tools - Repair initrd libselinux check in selinux-ready ==== libsemanage ==== Subpackages: libsemanage-conf libsemanage2 - Remove build counter syncing for real ==== mpg123 ==== Version update (1.32.2 -> 1.32.3) Subpackages: libmpg123-0 mpg123-openal - Update to version 1.32.3 * libmpg123, libsyn123: always ifdef LFS_LARGEFILE_64 (not just if) * libsyn123: re-introduce _32 wrappers in addition to suffix-less ones (regression from 1.31, bug 363) ==== netcfg ==== - Remove ftpusers, none of our ftp servers uses that anymore - Remove defaultdomain, NIS got dropped - Remove hosts.equiv and hosts.lpd, the tools using them got dropped long ago. ==== nvme-cli ==== Subpackages: nvme-cli-bash-completion - Enable test during build - Drop minimum version meson dependency - Add asciidoc dependency - Build documentation when requested ==== python-SQLAlchemy ==== Version update (2.0.19 -> 2.0.21) - Update to 2.0.21: * Changes from 2.0.21: https://docs.sqlalchemy.org/en/20/changelog/changelog_20.html#change-2.0.21 * Changes from 2.0.20: https://docs.sqlalchemy.org/en/20/changelog/changelog_20.html#change-2.0.20 - Remove .gitignore files from source tree, removes all rpmlint warnings. ==== python-greenlet ==== Version update (3.0.0~rc3 -> 3.0.0) - Update to 3.0.0: * No changes from 3.0rc3 aside from the version number. - Ignore some slow and flaky tests ==== python-psutil ==== - Require /usr/bin/who only for suse_version > 1500: 15.X does not provide it, but has it in coreutils. - PEP517 - Clean up specfile from obsolete python2 stuff ==== rubygem-nokogiri ==== - Buildrequire openssl gem to fix building with Ruby 3.0 ==== rubygem-ruby-dbus ==== Version update (0.23.0.beta2 -> 0.23.1) - 0.23.1 API: * Add DBus::Object.dbus_reader_attr_accessor to declare a common use case with a single call (gh#mvidner/ruby-dbus#140). * BusConnection#request_name defaults to the simple use case: single owner without queuing, failing fast; documented the complex use cases. ==== samba ==== Version update (4.18.6+git.320.cfda27bacb -> 4.19.0+git.306.19d2e214c58) Subpackages: libsamba-policy0-python3 samba-ad-dc-libs samba-client samba-client-libs samba-libs samba-libs-python3 samba-python3 - Update to 4.19.0 * File doesn't show when user doesn't have permission if aio_pthread is loaded; (bso#15453). * ctdb_killtcp fails to work with --enable-pcap and libpcap ≥ 1.9.1; (bso#15451). * Logging to stdout/stderr with DEBUG_SYSLOG_FORMAT_ALWAYS can log to syslog; (bso#15460). * ‘samba-tool domain level raise’ fails unless given a URL; (bso#15458). * reply_sesssetup_and_X() can dereference uninitialized tmp pointer; (bso#15420). * missing return in reply_exit_done(); (bso#15430). * TREE_CONNECT without SETUP causes smbd to use uninitialized pointer; (bso#15432). * Avoid infinite loop in initial user sync with Azure AD Connect when synchronising a large Samba AD domain; (bso#15401). * Samba replication logs show (null) DN; (bso#15407). * 2-3min delays at reconnect with smb2_validate_sequence_number: bad message_id 2; (bso#15346). * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed; (bso#15446). * CID 1539212 causes real issue when output contains only newlines; (bso#15438). * KDC encodes INT64 claims incorrectly; (bso#15452). * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449). * Windows client join fails if a second container CN=System exists somewhere; (bso#9959). * regression DFS not working with widelinks = true; (bso#15435). * Heimdal fails to build on 32-bit FreeBSD; (bso#15443). * samba-tool ntacl get segfault if aio_pthread appended; (bso#15441). ==== selinux-policy ==== Subpackages: selinux-policy-targeted - Use /var/adm/update-scripts in macros.selinux-policy. The rpm state directory doesn't exist on SUSE systems (bsc#1213593) - Modified update.sh to require first parameter "full" to also update container-selinux. For maintenance updates you usually don't want it to be updated ==== srt ==== Version update (1.5.2 -> 1.5.3) - version update to 1.5.3 * New Features - PR #2714: Added maximum BW limit for retransmissions. See SRTO_MAXREXMITBW. * Important Bug Fixes - PR #2632: Use overlapped WSASendTo to avoid UDP sending losses. - PR #2766: Fixed spurious group read-ready epoll events. - PR #2772: Fixed RCV buffer initialization in Rendezvous. ⚠️ - PR #2757: Fix memory leak on queuing connection initialization packets. - PR #2745: Fix hang up on not enough space in the RCV buffer. - PR #2740: Fix possible tsbpd() deadlock with processCtrlShutdown(). - PR #2692: Rejection not undertaken in rendezvous after KMX failure. - PR #2774: Fix rendezvous connection mode when processing resulted in ACCEPT it was still sending rejection. - PR #2778: Drop unencrypted packets in AES-GCM mode. * Build - PR #2779, #2780: Fix the build for targets without IP_ADD_SOURCE_MEMBERSHIP. - PR #2784: Added missing public header files in Windows binary installer. * Unit Tests - PR #2681: Added custom main with transparent parameters. * Documentation - PR #2765: Updated the explicit information for binding to IPv6 wildcard. - PR #2785: Fixed API doc: SRT_INVALID_SOCK * https://github.com/Haivision/srt/releases/tag/v1.5.3 ==== talloc ==== Version update (2.4.0 -> 2.4.1) Subpackages: libtalloc2 python3-talloc - Update to 2.4.1 * Remove remaining, but broken python2 support * Spelling fixes * Remove unneeded va_copy() ==== tdb ==== Version update (1.4.8 -> 1.4.9) Subpackages: libtdb1 python3-tdb - Update to 1.4.9 * Remove remaining, but broken python2 support * Spelling fixes * python: Safely clear structure members ==== tevent ==== Version update (0.14.1 -> 0.15.0) Subpackages: libtevent0 python3-tevent - Update to version 0.15.0 * remove py2 ifdefs * python: Safely clear structure members * the tevent_thread_call_depth API is updated in order to allow better tracing. * add tevent_set_max_debug_level() only and don't pass TEVENT_DEBUG_TRACE to tevent_debug() callbacks by default. * Spelling fixes * Make use of epoll_create1() for epoll backend * Optimize overhead in the epoll backend ==== xdg-desktop-portal ==== Subpackages: xdg-desktop-portal-lang - Support building with meson 0.61.x used by SLE, where .pc files in dataonly packages are installed to %_libdir unlike in meson >= 0.62.0 where the default was changed to %_datadir. ==== xscreensaver ==== Version update (6.06 -> 6.07) Subpackages: xscreensaver-data xscreensaver-lang - update to 6.07: * New hacks, droste, skulloop, papercube and cubocteversion * xscreensaver-settings was sometimes turning off the DPMS checkbox * Log pid of caller of deactivate command, to give a hint about who is preventing the screen from blanking * Updates to sphereeversion. * Added some new map sources to mapscroller. * Various other minor bug fixes. - leave a nice notice for a very angry upstream developer in xscreensaver-disable-upgrade-nagging-message.patch - drop xscreensaver-bsc1204744.patch, included upstream ==== xterm ==== Version update (384 -> 385) Subpackages: xterm-bin xterm-resize - update to 385: * fixes for ReGIS (report by Ben Wong). + correct conversion from HLS to RGB + improve font-caching performance. * update tables in wcwidth.c based on Unicode 15.1.0 * improve fastScroll resource: + suppress screen-refreshes for carriage-returns + add -jf option to simplify use of this resource. + add a control sequence for enabling/disabling the resource. + enable this feature by default * extend title-stack feature to allow an additional parameter to directly access the stack, like the XTPUSHCOLORS and XTPOPCOLORS feature. * correct size and position of box shown for double-cell character which happens to be missing from the bitmap font (report by Peter Fabinski). * improved configure script: + add pattern for uClibc-ng to CF_XOPEN_SOURCE (report/patch by Waldemar Brodkorb). + add configure options --with-utmp-path and --with-wtmp-path to override configure script's check for utmp/wtmp pathnames which are shown in the manual (Debian #1042767). + CF_XOPEN_SOURCE provides for defining _DEFAULT_SOURCE for MinGW32 and MinGW64. + sed expression used to report gcc version now works with MinGW * ensure that line-attributes are reset after drawing missing character (report by Christian Weisgerber). * update config.guess, config.sub - rebased all patches