Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=3&version=Tumbleweed&build=20240902 https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&component=MicroOS&query_format=advanced&resolution=--- Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MicroOS-release (20240829 -> 20240902) SDL2 ca-certificates (2+git20240415.3fe9324 -> 2+git20240805.fd24d50) glib2 glibmm2 (2.80.0 -> 2.80.1) kernel-firmware (20240809 -> 20240826) kernel-source (6.10.5 -> 6.10.7) multipath-tools (0.9.9+161+suse.0c835ef -> 0.10.0+103+suse.0fc97cd) patterns-microos python-requests python311 python311-core qemu qt6-wayland rsync sdbootutil (1+git20240823.30ef4f1 -> 1+git20240830.7f696c8) selinux-policy (20240828 -> 20240830) snapper (0.11.1 -> 0.11.2) suse-module-tools (16.0.49 -> 16.0.50) taglib (2.0.1 -> 2.0.2) transactional-update (4.8.0 -> 4.8.1) === Details === ==== MicroOS-release ==== Version update (20240829 -> 20240902) Subpackages: MicroOS-release-appliance MicroOS-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== SDL2 ==== - Don't build with fcitx support. fcitx support was just added because of a bug (boo#1025413) that could be fixed by building with fcitx support but upstream SDL2 developers fixed it in 2.0.5 when building without fcitx support too. Also fcitx support has always been disabled in SLE/Leap and in Factory it's built against fcitx 4.2.9.9, not the newer fcitx5 so let's disable it in order to reduce dependencies. ==== ca-certificates ==== Version update (2+git20240415.3fe9324 -> 2+git20240805.fd24d50) - Fix source archive - Update to version 2+git20240805.fd24d50: * Remove rc symlink [jsc#PED-266] ==== glib2 ==== Subpackages: glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 typelib-1_0-GLib-2_0 typelib-1_0-GModule-2_0 typelib-1_0-GObject-2_0 typelib-1_0-Gio-2_0 - remove dependency on /usr/bin/python3 using %python3_fix_shebang{,_path} macros, [bsc#1212476] ==== glibmm2 ==== Version update (2.80.0 -> 2.80.1) Subpackages: libgiomm-2_68-1 libglibmm-2_68-1 - Update to version 2.80.1: + Gio: Fix memory leak in DBus::generate_guid() + gmmproc: - generate_wrap_in.pl.in: Ignore -Winconsistent-dllimport from clang - Convert [enum@Module.Type.ENUMERATOR] in documentation - h2def.py: Avoid syntax warnings from Python 3.12 - DocsParser.pm: Don't link to developer-old.gnome.org - Improve documentation of enum and enum class + Build: Some fixes to avoid warnings from the clang compiler ==== kernel-firmware ==== Version update (20240809 -> 20240826) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-ath12k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update to version 20240826 (git commit bec4fd18cc57): * amdgpu: DMCUB updates forvarious AMDGPU ASICs * rtw89: 8922a: add fw format-1 v0.35.41.0 * linux-firmware: update firmware for MT7925 WiFi device * linux-firmware: update firmware for mediatek bluetooth chip (MT7925) * rtl_bt: Add firmware and config files for RTL8922A * rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part * rtl_bt: de-dupe identical config.bin files * rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin * linux-firmware: Update AMD SEV firmware * linux-firmware: update firmware for MT7996 * Revert "i915: Update MTL DMC v2.22" * ath12k: WCN7850 hw2.0: update board-2.bin * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 * ath11k: WCN6855 hw2.0: update board-2.bin * ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 * ath11k: QCA2066 hw2.1: add board-2.bin * ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 * qcom: vpu: add video firmware for sa8775p * amdgpu: DMCUB updates for various AMDGPU ASICs ==== kernel-source ==== Version update (6.10.5 -> 6.10.7) - Linux 6.10.7 (bsc#1012628). - tty: vt: conmakehash: remove non-portable code printing comment header (bsc#1012628). - tty: serial: fsl_lpuart: mark last busy before uart_add_one_port (bsc#1012628). - tty: atmel_serial: use the correct RTS flag (bsc#1012628). - Revert "ACPI: EC: Evaluate orphan _REG under EC device" (bsc#1012628). - Revert "misc: fastrpc: Restrict untrusted app to attach to privileged PD" (bsc#1012628). - Revert "serial: 8250_omap: Set the console genpd always on if no console suspend" (bsc#1012628). - Revert "usb: typec: tcpm: clear pd_event queue in PORT_RESET" (bsc#1012628). - selinux: revert our use of vma_is_initial_heap() (bsc#1012628). - netfs, ceph: Revert "netfs: Remove deprecated use of PG_private_2 as a second writeback flag" (bsc#1012628). - fuse: Initialize beyond-EOF page contents before setting uptodate (bsc#1012628). - char: xillybus: Don't destroy workqueue from work item running on it (bsc#1012628). - char: xillybus: Refine workqueue handling (bsc#1012628). - char: xillybus: Check USB endpoints when probing device (bsc#1012628). - ALSA: usb-audio: Add delay quirk for VIVO USB-C-XE710 HEADSET (bsc#1012628). - ALSA: usb-audio: Support Yamaha P-125 quirk entry (bsc#1012628). - usb: misc: ljca: Add Lunar Lake ljca GPIO HID to ljca_gpio_hids[] (bsc#1012628). - usb: xhci: Check for xhci->interrupters being allocated in xhci_mem_clearup() (bsc#1012628). - xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration (bsc#1012628). - thunderbolt: Mark XDomain as unplugged when router is removed (bsc#1012628). - ALSA: hda/tas2781: fix wrong calibrated data order (bsc#1012628). - ALSA: timer: Relax start tick time check for slave timer elements (bsc#1012628). - s390/dasd: fix error recovery leading to data corruption on ESE devices (bsc#1012628). - KVM: s390: fix validity interception issue when gisa is switched off (bsc#1012628). - thermal: gov_bang_bang: Call __thermal_cdev_update() directly (bsc#1012628). - KEYS: trusted: fix DCP blob payload length assignment (bsc#1012628). - KEYS: trusted: dcp: fix leak of blob encryption key (bsc#1012628). - riscv: change XIP's kernel_map.size to be size of the entire kernel (bsc#1012628). - riscv: entry: always initialize regs->a0 to -ENOSYS (bsc#1012628). - smb3: fix lock breakage for cached writes (bsc#1012628). - i2c: tegra: Do not mark ACPI devices as irq safe (bsc#1012628). - ACPICA: Add a depth argument to acpi_execute_reg_methods() (bsc#1012628). - ACPI: EC: Evaluate _REG outside the EC scope more carefully (bsc#1012628). - arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE (bsc#1012628). - dm resume: don't return EINVAL when signalled (bsc#1012628). - dm persistent data: fix memory allocation failure (bsc#1012628). - vfs: Don't evict inode under the inode lru traversing context (bsc#1012628). - fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1012628). - i2c: qcom-geni: Add missing geni_icc_disable in geni_i2c_runtime_resume (bsc#1012628). - tracing: Return from tracing_buffers_read() if the file has been closed (bsc#1012628). - perf/bpf: Don't call bpf_overflow_handler() for tracing events (bsc#1012628). - mseal: fix is_madv_discard() (bsc#1012628). - rtla/osnoise: Prevent NULL dereference in error handling (bsc#1012628). - mm: fix endless reclaim on machines with unaccepted memory (bsc#1012628). - mm/hugetlb: fix hugetlb vs. core-mm PT locking (bsc#1012628). - md/raid1: Fix data corruption for degraded array with slow disk (bsc#1012628). - net: mana: Fix RX buf alloc_size alignment and atomic op panic (bsc#1012628). - media: atomisp: Fix streaming no longer working on BYT / ISP2400 devices (bsc#1012628). - net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings (bsc#1012628). - wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion (bsc#1012628). - fs/netfs/fscache_cookie: add missing "n_accesses" check (bsc#1012628). - selinux: fix potential counting error in avc_add_xperms_decision() (bsc#1012628). - selinux: add the processing of the failure of avc_add_xperms_decision() (bsc#1012628). - alloc_tag: mark pages reserved during CMA activation as not tagged (bsc#1012628). - mm/memory-failure: use raw_spinlock_t in struct memory_failure_cpu (bsc#1012628). ... changelog too long, skipping 422 lines ... - commit d546de5 ==== multipath-tools ==== Version update (0.9.9+161+suse.0c835ef -> 0.10.0+103+suse.0fc97cd) Subpackages: kpartx libmpath0 - Update to 0.10.0+103+suse.0fc97cd - Update to upstream 0.10.0 (see also NEWS.md) * The `multipathd show daemon` command now shows `(reconfigure pending)` if a reconfiguration has been triggered but not finished yet. * Refactored the path checker loop. Paths are now checked for each multipath map in turn * Renamed public functions, variables, and macros to comply with the glibc policy for reserved names (gh#opensvc/multipath-tools#91) * Fixed bug that caused queueing to be always disabled if flushing a map failed (bug introduced in 0.9.8). (bsc#1229898) * Fixed failure to remove maps even with `deferred_remove` (bug introduced in 0.9.9). (bsc#1229898) * Fixed old mpathpersist bug leading to the error message "configured reservation key doesn't match: 0x0" when `reservation_key` was configured in the multipaths section of `multipath.conf`. (bsc#1228926, gh#opensvc/multipath-tools#92) * Fixed output of `multipath -t` and `multipath -T` for the options `force_sync` and `retrigger_tries`. (bsc#1229898, gh#opensvc/multipath-tools#88) * Fixed adding maps by WWID in CLI (command `add map $WWID`). (bsc#1229898) ==== patterns-microos ==== Subpackages: patterns-microos-alt_onlyDVD patterns-microos-apparmor patterns-microos-base patterns-microos-base-microdnf patterns-microos-base-packagekit patterns-microos-base-zypper patterns-microos-basesystem patterns-microos-cloud patterns-microos-cockpit patterns-microos-defaults patterns-microos-desktop-common patterns-microos-desktop-gnome patterns-microos-desktop-kde patterns-microos-hardware patterns-microos-ima_evm patterns-microos-onlyDVD patterns-microos-ra_agent patterns-microos-ra_verifier patterns-microos-selinux patterns-microos-sssd_ldap - Move exfatprogs to onlyDVD - Install tpm2 tools by default for FDE - Remove policycoreutils-python-utils again from selinux, no python in default install - Move systemd-zram-service to onlyDVD, as this is incompatible with main MicroOS workload - Remove the rest of the previously added packages from desktop common, since it's basically abandoned - Remove previously added packages from desktop common - Add TPM support and mokuil to onlyDVD pattern - Add zRam support to base - Add policycoreutils-python-utils to selinux - Sync some packages which are present in Aeon ==== python-requests ==== - Remove Requires on python-py, it should have been removed earlier. ==== python311 ==== - Add CVE-2024-8088-inf-loop-zipfile_Path.patch to prevent malformed payload to cause infinite loops in zipfile.Path (bsc#1229704, CVE-2024-8088). ==== python311-core ==== Subpackages: libpython3_11-1_0 python311-base - Add CVE-2024-8088-inf-loop-zipfile_Path.patch to prevent malformed payload to cause infinite loops in zipfile.Path (bsc#1229704, CVE-2024-8088). ==== qemu ==== - Fix bsc#1221812: * [openSUSE] block: Reschedule query-block during qcow2 invalidation (bsc#1221812) - Fixup a previous patch (cure a build warning): * [openSUSE] fixup patch "pc: q35: Allow 1024 cpus for old machine types" - Infra improvement: * [openSUSE] Workflows for Virtualization:Staging:TDX ==== qt6-wayland ==== Subpackages: libQt6WaylandClient6 libQt6WaylandCompositor6 libQt6WaylandEglClientHwIntegration6 libQt6WaylandEglCompositorHwIntegration6 libQt6WlShellIntegration6 - Add patch to fix 'wl_shm' higher than interface version (2 > 1) (boo#1229893, QTBUG-126379): * 0001-update-wayland_xml-to-version-1_23_0.patch ==== rsync ==== - add patch rsync-run-dir.patch: * Drop dependency on /var/run compat symlink, this causes problems on image based systems ==== sdbootutil ==== Version update (1+git20240823.30ef4f1 -> 1+git20240830.7f696c8) Subpackages: sdbootutil-snapper sdbootutil-tukit - Update to version 1+git20240830.7f696c8: * Use parameter "snapshot" instead the global one * Add update-entry and update-all-entries commands * Generate tpm2 public key before enroll_pcroracle * Fix function names for enrolling pcr-oracle * Check if enroll functions worked correctly * Warn when pcrlock.json or tpm2-pcr-signature.json are missing - Update to version 1+git20240829.1b5aa4d: * Add --default-snapshot parameter (bsc#1224773) ==== selinux-policy ==== Version update (20240828 -> 20240830) Subpackages: selinux-policy-targeted - Update to version 20240830: * Allow virtstoraged to manage images (bsc#1228742) * Allow virtstoraged_t domtrans to udev (bsc#1228742) ==== snapper ==== Version update (0.11.1 -> 0.11.2) Subpackages: libsnapper7 - use .snapshots dir for 'btrfs qgroup clear-stale' (bsc#1229904) - version 0.11.2 ==== suse-module-tools ==== Version update (16.0.49 -> 16.0.50) Subpackages: suse-module-tools-scriptlets * Generate initrd for the default snapshot (boo#1224773) ==== taglib ==== Version update (2.0.1 -> 2.0.2) - Update to 2.0.2: * Fix parsing of ID3v2.2 frames. * Tolerate MP4 files with unknown atom types as generated by Android tools. * Support setting properties with arbitrary names in MP4 tags. * Windows: Fix "-p" option in tagwriter example. * Support building with older utfcpp versions. ==== transactional-update ==== Version update (4.8.0 -> 4.8.1) Subpackages: dracut-transactional-update libtukit4 transactional-update-zypp-config tukit tukitd - Version 4.8.1 - tukit: fix --drop-if-no-change after apply [bsc#1229900]