Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version=Tumbleweed&build=20230411 https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&component=MicroOS&query_format=advanced&resolution=--- Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: dracut (059+suse.366.gf45bc67a -> 059+suse.368.g2e7ac134) edict (20211231 -> 20230411) gnutls (3.7.9 -> 3.8.0) libXt (1.2.1 -> 1.3.0) libpcap (1.10.3 -> 1.10.4) yast2-trans (84.87.20230401.d443fd75ae -> 84.87.20230408.14f26575c7) zvbi === Details === ==== dracut ==== Version update (059+suse.366.gf45bc67a -> 059+suse.368.g2e7ac134) Subpackages: dracut-ima - Update to version 059+suse.368.g2e7ac134: * chore(suse): remove mkinitrd wrapper (bsc#1202351) (jsc#PED-1919) ==== edict ==== Version update (20211231 -> 20230411) Subpackages: edict2 jmdict - Update to snapshot 20230411 * No changelog recorded. ==== gnutls ==== Version update (3.7.9 -> 3.8.0) - Temporarily disable GNULIB's year2038 support for 64bit time_t by using the --disable-year2038 flag. This omits support for timestamps past the year 2038: * Fixes the public API on 32-bit architectures avoiding to change the size of time_t as it cannot be changed without breaking the ABI compatibility. * Upstream issue: https://gitlab.com/gnutls/gnutls/-/issues/1466 - Update to 3.8.0: [bsc#1205763, bsc#1209627] * libgnutls: Fix a Bleichenbacher oracle in the TLS RSA key exchange. Reported by Hubert Kario (#1050). Fix developed by Alexander Sosedkin. [GNUTLS-SA-2020-07-14, CVSS: medium] [CVE-2023-0361] * libgnutls: C++ library is now header only. All definitions from gnutlsxx.c have been moved into gnutlsxx.h. Users of the C++ interface have two options: 1. include gnutlsxx.h in their application and link against the C library. (default) 2. include gnutlsxx.h in their application, compile with GNUTLS_GNUTLSXX_NO_HEADERONLY macro defined and link against the C++ library. * libgnutls: GNUTLS_NO_STATUS_REQUEST flag and %NO_STATUS_REQUEST priority modifier have been added to allow disabling of the status_request TLS extension in the client side. * libgnutls: TLS heartbeat is disabled by default. The heartbeat extension in TLS (RFC 6520) is not widely used given other implementations dropped support for it. To enable back support for it, supply --enable-heartbeat-support to configure script. * libgnutls: SRP authentication is now disabled by default. It is disabled because the SRP authentication in TLS is not up to date with the latest TLS standards and its ciphersuites are based on the CBC mode and SHA-1. To enable it back, supply - -enable-srp-authentication option to configure script. * libgnutls: All code has been indented using "indent -ppi1 -linux". CI/CD has been adjusted to catch regressions. This is implemented through devel/indent-gnutls, devel/indent-maybe and .gitlab-ci.ymlâs commit-check. You may run devel/indent-gnutls to fix any indentation issues if you make code modifications. * guile: Guile-bindings removed. They have been extracted into a separate project to reduce complexity and to simplify maintenance, see https://gitlab.com/gnutls/guile/. * minitasn1: Upgraded to libtasn1 version 4.19. * API and ABI modifications: GNUTLS_NO_STATUS_REQUEST: New flag GNUTLS_SRTP_AEAD_AES_128_GCM: New gnutls_srtp_profile_t enum member GNUTLS_SRTP_AEAD_AES_256_GCM: New gnutls_srtp_profile_t enum member * Merge gnutls-FIPS-Set-error-state-when-jent-init-failed.patch and gnutls-FIPS-jitterentropy-threadsafe.patch into the main patch gnutls-FIPS-jitterentropy.patch * Rebase gnutls-FIPS-140-3-references.patch * Rebase patches with upstream version: - gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch * Remove patches merged/fixed upstream: - gnutls-FIPS-disable-failing-tests.patch - gnutls-verify-library-HMAC.patch - gnutls_ECDSA_signing.patch - gnutls-Make-XTS-key-check-failure-not-fatal.patch - gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch * Update keyring with https://gnutls.org/gnutls-release-keyring.gpg - FIPS: Make the jitterentropy calls thread-safe [bsc#1208146] * Add gnutls-FIPS-jitterentropy-threadsafe.patch - FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183] * Rebase patches with the version submitted upstream. * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch ==== libXt ==== Version update (1.2.1 -> 1.3.0) - update to 1.3.0 * gitlab CI: add a basic build test * Fix spelling/wording issues * gitlab CI: stop requiring Signed-off-by in commits * Use memcpy() instead of memmove() when buffers are known not to overlap * Use memcpy() instead of XtMemmove() when buffers are known to differ * tests: update g_test_bug_base url from bugzilla to gitlab * tests: Use XORG_MEMORY_CHECK_FLAGS from xorg-macros 1.16 * tests: Replace g_assert() calls with g_assert_*() calls * configure.ac: Replace HAVE_LIBRARY with AC_CHECK_LIB * Add xfilesearchpath to xt.pc * TMstate.c: Handle -Wduplicated-branches warnings * Remove "All rights reserved" from Oracle copyright notices * configure: Use LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL * test: Add unit tests for XtMalloc, XtCalloc, & XtRealloc * Add XtReallocArray() for overflow checking of multiplied args * Replace XtRealloc() calls with XtReallocArray() * Replace XtMalloc() calls with XtMallocArray() * Define LONG64 if __SIZEOF_LONG__ indicates 64-bit long * XtArgVal: Support architectures where pointers are bigger than long * Use XtUIntPtr for integer types that can hold pointers * Cast via intptr_t when converting integers to pointers * Fix XrmResource layout if pointers are bigger than long * Fix InternalCallbackRec layout if pointers are bigger than 64 bits * Support buttons > 5 in translation tables [v2] * add _X_NORETURN to agree with header-file * codespell-fixes * cppcheck and clang --analyze fixes * fixes for gcc13 warnings * cppcheck fixes (const, null dereferencing, uninitialized, scope) * cppcheck (revise IsDescendant() to fix possible null-dereference) * update copyright-date ==== libpcap ==== Version update (1.10.3 -> 1.10.4) - update to 1.10.4: * rpcap: Fix name of launchd service. * documentation updates and build system tweaks ==== yast2-trans ==== Version update (84.87.20230401.d443fd75ae -> 84.87.20230408.14f26575c7) Subpackages: yast2-trans-cs yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-fr yast2-trans-hu yast2-trans-it yast2-trans-ja yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ru yast2-trans-zh_CN yast2-trans-zh_TW - Update to version 84.87.20230408.14f26575c7: * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Georgian) * Translated using Weblate (Slovak) * Translated using Weblate (Catalan) * Translated using Weblate (Slovak) * Translated using Weblate (Catalan) * Translated using Weblate (Dutch) * Translated using Weblate (Japanese) * New POT for text domain 'snapper'. * Translated using Weblate (Czech) * Translated using Weblate (Dutch) * Translated using Weblate (Japanese) * New POT for text domain 'storage'. * New POT for text domain 'country'. * New POT for text domain 'cluster'. * New POT for text domain 'base'. ==== zvbi ==== - Set minimum version for gettext