Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version=Tumbleweed&build=20230319 https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&component=MicroOS&query_format=advanced&resolution=--- Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ctags debianutils flatpak (1.14.3 -> 1.14.4) gcc (12 -> 13) gcc13 (13.0.1+git5428 -> 13.0.1+git6669) gobject-introspection gpgme highway (1.0.3 -> 1.0.4) libqt5-qtbase (5.15.8+kde160 -> 5.15.8+kde183) libqt5-qtimageformats (5.15.8+kde6 -> 5.15.8+kde9) libqt5-qtlocation (5.15.8+kde3 -> 5.15.8+kde4) libqt5-qtmultimedia (5.15.8+kde1 -> 5.15.8+kde3) libqt5-qtwayland (5.15.8+kde57 -> 5.15.8+kde63) libstorage-ng (4.5.85 -> 4.5.86) lzo patterns-microos python-M2Crypto python-hiredis qemu vmaf xscreensaver === Details === ==== ctags ==== - mark u-a generics as non-%ghost ==== debianutils ==== - Move run-parts to /usr/bin, Run-parts runs just fast as regular user. ==== flatpak ==== Version update (1.14.3 -> 1.14.4) Subpackages: flatpak-remote-flathub libflatpak0 system-user-flatpak - Update to version 1.14.4 (CVE-2023-28101, CVE-2023-28100): + Escape special characters when displaying permissions and metadata, preventing malicious apps from manipulating the appearance of the permissions list using crafted metadata (CVE-2023-28101, boo#1209410). + If a Flatpak app is run on a Linux virtual console (tty1, tty2, etc.), don't allow copy/paste via the TIOCLINUX ioctl (CVE-2023-28100). Note that this is specific to virtual consoles: Flatpak is not vulnerable to this if run from a graphical terminal emulator such as xterm, gnome-terminal or Konsole. (boo#1209411) + Updated translations. ==== gcc ==== Version update (12 -> 13) - Switch gcc to default 13. ==== gcc13 ==== Version update (13.0.1+git5428 -> 13.0.1+git6669) Subpackages: libatomic1 libgcc_s1 libgfortran5 libgomp1 libobjc4 libquadmath0 libstdc++6 libstdc++6-locale libstdc++6-pp libubsan1 - Bump to 42630fadbe248717859d61c0244c821c32b4e52c, git6669. - Always enable the link mutex. - Bump to 529e03b9882fe48cfa3c182abb12a5858a5762a2, git6353. - Rebase gcc44-rename-info-files.patch patch. ==== gobject-introspection ==== Subpackages: girepository-1_0 libgirepository-1_0-1 - Update path regex used in gobjectintrospection.attr: the old one was not sufficiently escaped, which resulted in many more files being scanned than needed. ==== gpgme ==== Subpackages: libgpgme11 libgpgmepp6 python310-gpg - drop python2 subpackage handling. we do not support python 2.x anymore, and if we would it would happen via singlespec ==== highway ==== Version update (1.0.3 -> 1.0.4) - Update to release 1.0.4 * Add PPC8..10, SSE2, AVX3_ZEN4, NEON_WITHOUT_AES targets * Add Expand, LoadExpand, integer AbsDiff, SumsOf8AbsDiff * Improved Half/Twice support, codegen for Shift*Same * Faster KV128 sorting * Update RISC-V V intrinsics for 1.0-draft - Remove arm-disable-runtime-dispatch.patch (appears merged) ==== libqt5-qtbase ==== Version update (5.15.8+kde160 -> 5.15.8+kde183) Subpackages: libQt5Concurrent5 libQt5Core5 libQt5DBus5 libQt5Gui5 libQt5Network5 libQt5OpenGL5 libQt5PrintSupport5 libQt5Sql5 libQt5Sql5-sqlite libQt5Test5 libQt5Widgets5 libQt5Xml5 libqt5-qtbase-platformtheme-gtk3 - Update to version 5.15.8+kde183: * Add nullptr guard in QStyleSheetStyle::drawPrimitive(PE_PanelLineEdit) * QAbstractItemView: don't access invalid indexes on copy-key * Apply CVE-2023-24607-qtbase-5.15.diff * QXcbConnection::getTimestamp: do not return stale timestamp * QToolButton: Elide text when constraints prevent from showing whole text * correctly set up ref counting in QThreadPool::tryStart(std::function) * Do not set Qt::ToolTip flag for QShapedPixmapWindow * Fix deletion order also for QImageReader/Writer::setDevice() * Fix deletion order in QImageReader/Writer destructors * QNetworkReply: Fix typos in the documentation * Doc: Fix typo in the online documentation template * Doc: Link to page documenting Qt trademarks in the copyright footer * [doc] Fix typo in QBuffer::setBuffer() description * qwindowsdrag: Fix typo in documentation * openglblacklists: Fix typo in description * qxcbscreen: Fix typo in documentation * Fix typos in SQL driver documentation * qxcbwindow.cpp: Fix sign-compare and another warnings * QToolButton: reimplement the fix for QTBUG-95255 * QSysInfo::prettyProductName(): Add macOS Ventura product name * QSysInfo::prettyProductName(): add missing macOS product names * xcb: correctly disconnect xsettings callbacks * ibus: add SetCursorLocationRelative in InputContext.xml ==== libqt5-qtimageformats ==== Version update (5.15.8+kde6 -> 5.15.8+kde9) - Update to version 5.15.8+kde9: * TGA Plugin: Fix reading of CMapDepth * Implement support for file memory mapping for tiff reading * Explicitly include QVarLengthArray header ==== libqt5-qtlocation ==== Version update (5.15.8+kde3 -> 5.15.8+kde4) - Update to version 5.15.8+kde4: * Update mapbox-gl-native - Drop patches, now upstream: * 0001-Add-some-missing-cstdint-inclusions-872.patch ==== libqt5-qtmultimedia ==== Version update (5.15.8+kde1 -> 5.15.8+kde3) - Update to version 5.15.8+kde3: * Drop obsolete QtOpengl dependency * Pass explicit GL api when initializing GStreamer backend ==== libqt5-qtwayland ==== Version update (5.15.8+kde57 -> 5.15.8+kde63) Subpackages: libQt5WaylandClient5 libQt5WaylandCompositor5 - Update to version 5.15.8+kde63: * Client: Remove flip popup constraints * client: set_constraint_adjustment() for popups in xdg * client: Do not cast placeholder screens to QWaylandScreen * Client: Manage QMimeData lifecycle * client: Force a roundtrip when an XdgOutput is not ready yet * Client: Fix handling of Qt::BlankCursor ==== libstorage-ng ==== Version update (4.5.85 -> 4.5.86) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#919 - always delegate used_features from Action to Device - 4.5.86 ==== lzo ==== - adjust lzo-2.08-rhbz1309225.patch download reference - Build AVX2 enabled hwcaps library for x86_64-v3 ==== patterns-microos ==== Subpackages: patterns-microos-alt_onlyDVD patterns-microos-apparmor patterns-microos-base patterns-microos-base-microdnf patterns-microos-base-packagekit patterns-microos-base-zypper patterns-microos-basesystem patterns-microos-cloud patterns-microos-cockpit patterns-microos-defaults patterns-microos-desktop-common patterns-microos-desktop-gnome patterns-microos-desktop-kde patterns-microos-hardware patterns-microos-ima_evm patterns-microos-onlyDVD patterns-microos-ra_agent patterns-microos-ra_verifier patterns-microos-selinux patterns-microos-sssd_ldap - Add openconnect VPN support to both Gnome and Plasma (boo#1209171) - Add NetworkManager-openconnect-gnome - Add plasma-nm5-openconnect ==== python-M2Crypto ==== - Adapt tests for OpenSSL v3.1.0 * Add openssl-adapt-tests-for-3.1.0.patch ==== python-hiredis ==== - Replace 0001-Use-system-libhiredis.patch with the upstream provided (gh#redis/hiredis-py!161) 161-use-system-hiredis.patch for proper use of the system hiredis library. ==== qemu ==== - Fix bsc#1209064 - Backport the "acpi: cpuhp: fix guest-visible maximum access size to the legacy reg block" patch, as it makes developing and testing OVMF/EDK2 easier * Patches added: acpi-cpuhp-fix-guest-visible-maximum-acc.patch s390x-pci-reset-ISM-passthrough-devices-.patch s390x-pci-shrink-DMA-aperture-to-be-boun.patch ==== vmaf ==== - Fix "no such built-in model" due to missing build dependency ==== xscreensaver ==== Subpackages: xscreensaver-data xscreensaver-lang - Drop obsolete patch (bsc#1203594). - xscreensaver-slideshow-dri-detect.patch - Use autosetup