Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version=Tumbleweed&build=20230617 https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&component=MicroOS&query_format=advanced&resolution=--- Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: codec2 (1.1.0 -> 1.1.1) cryptsetup docker (23.0.6_ce -> 24.0.2_ce) firewalld (1.3.2 -> 1.3.3) fwupd (1.8.12 -> 1.8.16) gdb (12.1 -> 13.2) libX11 libjxl (0.8.1 -> 0.8.2) librsvg libstorage-ng (4.5.118 -> 4.5.120) llvm16 (16.0.5 -> 16.0.6) mcelog (181 -> 194) ncurses (6.4.20230520 -> 6.4.20230615) openvpn (2.6.4 -> 2.6.5) osinfo-db (20230308 -> 20230518) publicsuffix (20230607 -> 20230613) python-Mako time vim (9.0.1572 -> 9.0.1632) yast2-bootloader (4.6.1 -> 4.6.2) === Details === ==== codec2 ==== Version update (1.1.0 -> 1.1.1) - Update to version 1.1.1 * Minor release to support clean freedv-gui builds ==== cryptsetup ==== Subpackages: cryptsetup-doc cryptsetup-lang libcryptsetup12 - Enable running the regression test suite. - Force a regeneration of the man pages from AsciiDoc. - Add LUKS1 and LUKS2 On-Disk Format Specification pdfs to doc. - FIPS: Remove not needed libcryptsetup12-hmac package that contains the HMAC checksums for integrity checking for FIPS. [bsc#1185116] * Remove the cryptsetup-rpmlintrc file. * Remove not needed fipscheck dependency. ==== docker ==== Version update (23.0.6_ce -> 24.0.2_ce) Subpackages: docker-bash-completion - Update to Docker 24.0.2-ce. See upstream changelog online at https://docs.docker.com/engine/release-notes/24.0/#2402. bsc#1212368 bsc#1210797 - Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as being provided by this package. - Rebase patches: * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch * cli-0001-docs-include-required-tools-in-source-tree.patch ==== firewalld ==== Version update (1.3.2 -> 1.3.3) Subpackages: firewalld-bash-completion firewalld-lang python3-firewall - update to 1.3.3: * fix(reload): restore policy for old backend if it changed (de85849) * fix(io): rich: tcp mss: handle value=None (8016f10) * fix(firewall-config): rich: set destination address (f6641a9) * fix(policy): mixed IP families in ingress/egress (69ed4d6) ==== fwupd ==== Version update (1.8.12 -> 1.8.16) Subpackages: fwupd-bash-completion fwupd-lang libfwupd2 typelib-1_0-Fwupd-2_0 - Update to version 1.8.16: + Auto-detect the OEM BCM57xx PCI cards with double the available EEPROM + Beep the console when waiting for user input + Do not assume a file descriptor of zero is invalid + Fix high memory usage when writing a carefully crafted EFI filesystem + Ignore refresh on a non-download remote to fix old versions of KDE + Limit the maximum number of file objects in the EFI filesystem + Only add the supported DFU attributes as private flags + Show devices with problems in fwupdmgr get-upgrades + Update official Intel GPU product names - Changes from version 1.8.15: + Add the latest dbx fixups for BlackLotus + Allow fwupd-refresh.timer trigger once per hour + Fix a crash when converting HFSTS1 values + Fix the version detection for SteelSeries Bluetooth mode + Invalidate the XMLb cache when installing new fwupd versions + Trigger the passive flow for usb4 from dell-dock + New hardware support: More Logitech Unifying receivers, Nordic MCUboot and nRF52 Desktop Keyboard - Changes from version 1.8.14: + Fix possible crash when getting UEFI report metadata + Fix 'fwupdmgr install FILE GUID' - Changes from version 1.8.13: + New features: - Add pcap converter which allows emulating devices from a Wireshark dump - Add the ability to dump TPM firmware for future use - Optionally retain firmware in a backup remote - Record the ESP type in the firmware report sent to the LVFS + Bugs fixed: - Accept application/octet-stream for archives when the mime database is missing - Add the latest dbx version version fixups as Microsoft removed another entry - Assume DFU appIDLE if GetStatus is not implemented - Do not require signatures for local or directory remotes - Do not use pandoc to build the man pages - Enhance Qubes functionality to use JCat - Fix a CCGX 'usbfs: process did not claim interface 1 before use' warning - Fix a compile warning when using a new libqmi version - Fix a critical warning when parsing an empty kernel cmdline - Fix a synaptics-cape regression where the firmware pauses for INTR - Fix the defines for HFSTS6 enforcement policy - Fix the i2c name properly for ElanTP hardware - Fix the name of the MTD Intel SPI controller - Set the release remote when installing archives - Use the powerd power type information to better set AC levels + New hardware: - Framework Audio Card - Lenovo ThinkPad TBT3-TR Gen 2 - Wacom Intuos BT S Gen 3 - Update options passed to meson following upstream changes. ==== gdb ==== Version update (12.1 -> 13.2) - Patches added (master backports): * pass-const-frame_info_ptr-reference-for-skip_-langua.patch - Maintenance script qa.sh: * Add PR30543 kfail. * Remove PR29793 kfail. - Patches added (master backports): * fix-pr30369-regression-on-aarch64-arm-pr30506.patch * gdb-tdep-aarch64-fix-frame-address-of-last-insn.patch * gdb-testsuite-fix-breakpoint-regexp-in-gdb.ada-out_o.patch * gdb-testsuite-relax-breakpoint-count-check-in-gdb.py.patch * gdb-testsuite-fix-buffer-overflow-in-gdb.base-signed.patch * gdb-testsuite-require-syscall-time-in-gdb.reverse-ti.patch * gdb-testsuite-handle-missing-gdc-in-gdb.dlang-dlang-.patch * gdb-testsuite-add-basic-lmap-for-tcl-8.6.patch * gdb-testsuite-fix-gdb.rust-watch.exp-on-ppc64le.patch * gdb-testsuite-fix-gdb.python-py-breakpoint.exp-timeo.patch * powerpc-fix-for-gdb.reverse-finish-precsave.exp-and-.patch * powerpc-regression-fix-for-reverse-finish-command.patch * gdb-testsuite-don-t-use-string-cat-in-gdb.dwarf2-dw2.patch * move-step_until-procedure.patch - Patches added (gdb-patches backport): * gdb-testsuite-add-have_host_locale.patch - Patches added (fedora patch fixups): * fixup-gdb-6.3-gstack-20050411.patch * fixup-gdb-6.3-attach-see-vdso-test.patch * fixup-gdb-lineno-makeup-test.patch * fixup-gdb-rhbz1261564-aarch64-hw-watchpoint-test.pat.patch - Patches dropped: * gdb-ppc-power7-test.patch * gdb-rhbz1156192-recursive-dlopen-test.patch * gdb-6.3-bz140532-ppc-unwinding-test.patch - Maintenance script qa.sh: * Add PR30540, PR30537, PR30021 and PR30542 KFAILs. * Add gdb.base/gcore-excessive-memory.exp internal error. * Update gdb.base/inline-frame-cycle-unwind.exp KFAIL comment. - Patches added (master backports): * aarch64-avoid-initializers-for-vlas.patch - Rebase to 13.2 release (fedora 38 @ fc4e284) * Replace gdb-12.1.tar.bz2 with gdb-13.2.tar.bz2. - Patches dropped: * add-elfcompress_zstd.patch * binutils-gdb-support-zstd-compressed-debug-section.patch * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch * fix-core-file-detach-crash-corefiles-29275.patch * fix-for-gdb.base-solib-search.exp-test.patch * fix-gdb-build-elf-support-check-lzstd.patch * fixup-gdb-rhbz1325795-framefilters-test.patch * gdb-6.3-focus-cmd-prev-test.patch * gdb-6.3-inheritancetest-20050726.patch * gdb-6.3-test-dtorfix-20050121.patch * gdb-6.3-test-movedir-20050125.patch * gdb-6.3-threaded-watchpoints2-20050225.patch * gdb-6.6-buildid-locate-rpm-scl.patch * gdb-6.6-bz230000-power6-disassembly-test.patch * gdb-add-gdb-syscalls-makefile.patch * gdb-add-support-for-readline-8.2.patch * gdb-bz601887-dwarf4-rh-test.patch * gdb-disable-commit-resumed-in-target_kill.patch * gdb-fix-assert-in-handle_jit_event.patch * gdb-fix-assert-when-quitting-gdb-while-a-thread-is-stepping.patch * gdb-fix-for-gdb.base-eof-exit.exp-test-failures.patch * gdb-fix-selftest-fails-with-gdb-build-with-O2-flto.patch * gdb-fortran-frame-string.patch * gdb-handle-pending-c-after-rl_callback_read_char.patch * gdb-improved-eof-handling-when-using-readline-7.patch * gdb-physname-pr11734-test.patch * gdb-physname-pr12273-test.patch * gdb-record-handle-statx-system-call.patch * gdb-rhbz1325795-framefilters-test.patch * gdb-rhbz1398387-tab-crash-test.patch * gdb-runtest-pie-override.patch * gdb-symtab-fix-handling-of-dw_tag_unspecified_type.patch * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch * gdb-tdep-handle-pipe2-syscall-for-amd64.patch * gdb-tdep-support-catch-syscall-pipe2-for-i386.patch * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch * gdb-test-expr-cumulative-archer.patch * gdb-testsuite-add-kfail-in-gdb.threads-fork-plus-threads.exp.patch * gdb-testsuite-add-new-gdb_attach-to-check-attach-command.patch * gdb-testsuite-address-test-failures-in-gdb.mi-mi-multi-commands.exp.patch * gdb-testsuite-detect-change-instead-of-init-in-gdb.mi-mi-var-block.exp.patch * gdb-testsuite-enable-some-test-cases-for-x86_64-m32.patch * gdb-testsuite-fix-fail-in-gdb.threads-fork-and-threads.exp.patch * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch * gdb-testsuite-fix-gdb.base-break-idempotent.exp-on-ppc.patch * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch * gdb-testsuite-fix-gdb.base-infoline-reloc-main-from-.patch * gdb-testsuite-fix-gdb.base-nested-subp-2-3-.exp-with.patch * gdb-testsuite-fix-gdb.dwarf2-dw2-dir-file-name.exp-w.patch * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch * gdb-testsuite-fix-gdb.dwarf2-dw2-unspecified-type-foo.c-with-m32.patch * gdb-testsuite-fix-gdb.mi-mi-sym-info.exp-on-opensuse-tumbleweed.patch * gdb-testsuite-fix-gdb.opt-clobbered-registers-o2.exp-with-gcc-12.patch * gdb-testsuite-fix-gdb.reverse-i387-env-reverse.exp-for-pie.patch * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch * gdb-testsuite-fix-have_mpx-test.patch * gdb-testsuite-fix-occasional-failure-in-gdb.mi-mi-multi-commands.exp.patch ... changelog too long, skipping 60 lines ... * Use -$arch as argument to qa.sh. ==== libX11 ==== Subpackages: libX11-6 libX11-data libX11-xcb1 - U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138) ==== libjxl ==== Version update (0.8.1 -> 0.8.2) - Update to release 0.8.2 * Fix an integer underflow bug in patch decoding. ==== librsvg ==== Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2 rsvg-thumbnailer typelib-1_0-Rsvg-2_0 - Use %__default_rustflags instead of the deprecated %__rustflags macro. Requires at least cargo-packaging 1.2.0+2 (boo#1212333). ==== libstorage-ng ==== Version update (4.5.118 -> 4.5.120) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#936 - use correct error callback when nvme-cli is missing during probing - 4.5.120 - merge gh#openSUSE/libstorage-ng#935 - added functions to convert BcacheType and CacheMode to string - added pool name for bcaches - check range in is_usable_as_partitionable() - 4.5.119 ==== llvm16 ==== Version update (16.0.5 -> 16.0.6) - Update to version 16.0.6. * This release contains bug-fixes for the LLVM 16.0.0 release. This release is API and ABI compatible with 16.0.0. - Rebase llvm-do-not-install-static-libraries.patch. - Make python3-clang noarch again and fix conflicts/provides to point to %python3_sitelib instead of %python3_sitearch. ==== mcelog ==== Version update (181 -> 194) - Update to version 194 (jsc#PED-4218): * client.c: fix build w/ musl libc * mcelog: New model number for Arrowlake * mcelog: Don't overwrite model number when lookup fails * mcelog: Add Graniterapids, Grandridge and Sierraforest * mcelog: New model number for Lunarlake * mcelog: Add Emerald Rapids * mcelog: Add decode support for Sapphire Rapids * Update PFA_test_howto * mcelog: Add support for Meteor Lake - Includes following SLE 15 SP5 jira features: * jsc#PED-671 mcelog: Update to latest release * jsc#PED-686 [CPU Features] Update mcelog support for ADL-N * jsc#PED-638 [CPU Features] Update mcelog support for MTL-P - Update to version 189: * mcelog: Add another Raptor Lake CPU model * Fix generation of cputype files * mcelog: Add missing model numbers for Broadwell and Raptorlake * mcelog: Makefile: Only touch cputype.h if needed to create it * Makefile: add install-nodoc target * Use env as the shebang target * Add missing dependencies for cputype include files * mcelog: Reverse sens of check to call resolveaddr() * mcelog: Reverse the sense of the check to set memory_error_support * mcelog: Drop CASE_INTEL define * mcelog: Generate cpu_choices[] from table * mcelog: Generate the cputype_name[] array from the table * mcelog: Add CPU model numbers to table and generate switch function * mcelog: Generate CPU_* enums from a table * mcelog: Add two more Alderlake model numbers * mcelog: Reduce default threshold for corrected error page offline * Make genconfig use python3 * mcelog: Add support for Raptorlake * Fix warnings in sysfs.c * mcelog: Change "DDR4" string to "DDR" for i10nm platforms * Fix logrotate syntax * remove outdated mcelog.conf.5 manual file * add furture print function for Python2 * fix python errors in genconfig.py * fix the buf not freed in read_field * mcelog: Print warning for locked down kernel * mcelog: Handle sysfs files without length - Had to adopt to latest CPU identification model mainline patch: b54ee05056a76e mcelog: Drop CASE_INTEL define and friends A add_new_amd_cpu_defines D add-defines.patch M Start-consolidating-AMD-specific-stuff.patch M add-f10h-support.patch M add-f11h-support.patch M add-f12h-support.patch M add-f14h-support.patch M add-f15h-support.patch M add-f16h-support.patch M email.patch M fix_setgroups_missing_call.patch ==== ncurses ==== Version update (6.4.20230520 -> 6.4.20230615) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch 20230615 + modify _nc_read_file_entry() to show relevant filename in warnings. + improve checks in convert_string() for corrupt terminfo entry (report and test-case by Gregory James Duck). - Add ncurses patch 20230610 + improve manpages discussing file descriptors in low-level functions. + modify flushinp to use file descriptors in SCREEN, rather than from TERMINAL, and check if they are for a terminal, like SVr4. + modify mcprint to use file descriptor in SCREEN, for consistency. + add xterm+focus to foot+base (patch by Daniel Ekloef). + correct definition of Charable() for non-wide ncurses library (report and test-case by Zbigniew Baniewski). - Add ncurses patch 20230603 + add configure option --with-strip-program, to override program chosen by the install program for stripping executables (prompted by discussion with Aapo Rantalainen). + fix typo in INSTALL (report/patch by Aapo Rantalainen). + improve error-checks for isEILSEQ() + increase MB_CUR_MAX to 16, matching glibc's MB_LEN_MAX. + corrected mouse mask in test/testcurs.c + improve thread lock in lib_trace.c - Correct offsets of patch ncurses-6.4.dif - Add ncurses patch 20230527 + fixes for compiler warnings/cppcheck. ==== openvpn ==== Version update (2.6.4 -> 2.6.5) Subpackages: openvpn-auth-pam-plugin - update to 2.6.5: * apctl (windows): generate driver-specific names (if using tapctl to create additional tap/wintun/dco devices, and not using - -name) (Github #337) * interactive service (windows): do not force target desktop for openvpn.exe - this has no impact for normal use, but enables running of OpenVPN in a scripted way when no user is logged on (for example, via task scheduler) (Github OpenVPN/openvpn-gui#626) * fix use-after-free with EVP_CIPHER_free * fix building with MSVC from release tarball (missing version.m4.in) * dco-win: repair use of --dev-node to select specific DCO drivers (Github #336) * fix missing malloc() return check in dco_freebsd.c * windows: correctly handle unicode names for "exit event" * fix memleak in client-connect example plugin * fix fortify build problem in keying-material-exporter-demo plugin * fix memleak in dco_linux.c/dco_get_peer_stats_multi() - this will leak a small amount of memory every 15s on DCO enabled servers, leading to noticeable memory waste for long-running processes. * dco_linux.c: properly close dco version file (fd leak) ==== osinfo-db ==== Version update (20230308 -> 20230518) - Update to database version 20230518 osinfo-db-20230518.tar.xz ==== publicsuffix ==== Version update (20230607 -> 20230613) - Update to version 20230613: * Add `{id,io,ai}.vn` for .vn ccTLD in ICANN Section (#1771) * util: gTLD data autopull updates for 2023-06-10T15:11:56 UTC (#1774) ==== python-Mako ==== - Use sle15_python_module_pythons ==== time ==== - Add patch disable-time-max-rss-test.patch to disable time max rss test, broken because a kernel issue (bsc#1211092) ==== vim ==== Version update (9.0.1572 -> 9.0.1632) Subpackages: vim-data vim-data-common vim-small xxd - Updated to version 9.0.1632, fixes the following problems * Error messages are not translated. * Error for function name has wrong line number. * "file N of M" message is not translated. * Users may not know what to do with an internal error. * SpellCap highlight not always updated when needed. * Some error messages are not translated. * CI: indent test hangs on FreeBSD. * Translation does not work for plural argument. * :stopinsert may not work in a popup close handler. (Ben Jackson) * Get E304 when using 'cryptmethod' "xchacha20v2". (Steve Mynott) * Not all meson files are recognized. * Weird use of static variables for spell checking. * Checking translations gives an error for using two messages with ngettext() that differ in "%" items. * Corn config files are not recognized. * Incsearch not triggered when pasting clipboard register on the command line. * Filetype test contains too many special characters. * Filetype test has trailing white space. * Some "gomod" files are not recognized. * Not all timer tests are marked as flaky. * MS-Windows: assert error when compiled with debug mode. * Some internal error messages are translated. * Line pointer becomes invalid when using spell checking. * :registers command does not work in sandbox. * Cursor ends up below the window after a put. * screenchar(), screenchars() and screenstring() do not work properly when 'encoding' is set to a double-byte encoding. * Cursor not adjusted when near top or bottom of window and 'splitkeep' is not "cursor". * screenpos() does not take w_skipcol into account. * Filetype detection fails for *.conf file without comments. (Dmitrii Tcyganok) * Stray character is visible if 'smoothscroll' marker is displayed on top of a double-wide character. * Display wrong when scrolling multiple lines with 'smoothscroll' set. * Errors from the codestyle test are a bit confusing. * Crash when calling method on super in child constructor. (Israel Chauca Fuentes) * Using freed memory when 'foldcolumn' is set. * screenpos() returns wrong row with diff filler lines. * update_topline() is called twice. * Crash when an object indirectly references itself. * Display is wrong when 'smoothscroll' is set and scrolling multiple lines. * v:maxcol can be changed in a :for loop. * "skipcol" not reset when using multi-byte characters. * Some make output gets picked up by 'errorformat'. * strlen() called too often for :spellrepall. * URL shortcut files are not recognized. * Quickfix text field is truncated. * charidx() and utf16idx() result is not consistent with byteidx(). * Trace32 files are not recognized. * The focus gained/lost escape sequences cause trouble for a terminal where Vim does not expect them. * Nix files are not recognized from the hashbang line. * FILETYPE_FILE is defined to the same value multiple times. Same for a few similar macros. * Filetype name t32 is a bit obscure. * The program to filetype translation is not exported. * Crash when calling object constructor from legacy script. (Israel Chauca Fuentes) * "super" is not considered a reserved name. * Visual area not shown when using 'showbreak' and start of line is not visible. (Jaehwang Jung) * No generic mechanism to test syntax plugins. * Syntax tests fail on FreeBSD. * Having utf16idx() rounding up is inconvenient. * "make clean" at the toplevel fails. * Passing a wrong variable type to an option gives multiple errors. * Not all cabal config files are recognized. ==== yast2-bootloader ==== Version update (4.6.1 -> 4.6.2) - Persist zfcp.allow_lun_scan kernel option for s390 arch (needed for gh#openSUSE/agama#626). - 4.6.2