Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version=Tumbleweed&build=20221223 https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&component=MicroOS&query_format=advanced&resolution=--- Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MozillaFirefox autoyast2 (4.5.11 -> 4.5.12) curl (7.86.0 -> 7.87.0) openssh util-linux (2.37.4 -> 2.38.1) util-linux-systemd (2.37.4 -> 2.38.1) === Details === ==== MozillaFirefox ==== Subpackages: MozillaFirefox-translations-common - add mozilla-bmo1805809.patch to fix build for x86-32 (boo#1206600) ==== autoyast2 ==== Version update (4.5.11 -> 4.5.12) - Added XSLT transformation for easy conversion of the data types in the AutoYaST XML profiles between the old and the new format. This allows to convert a new profile to the format accepted in SLE15-SP2 or older (bsc#1206597) - 4.5.12 ==== curl ==== Version update (7.86.0 -> 7.87.0) Subpackages: libcurl4 - Update to 7.87.0: * Security fixes: - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free * Changes - curl: add --url-query - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit - lib: add CURL_WRITEFUNC_ERROR to signal write callback error - openssl: reduce CA certificate bundle reparsing by caching - version: add a feature names array to curl_version_info_data * Bugfixes - altsvc: fix rejection of negative port numbers - aws_sigv4: consult x-%s-content-sha256 for payload hash - aws_sigv4: fix typos in aws_sigv4.c - base64: better alloc size - base64: encode without using snprintf - base64: faster base64 decoding - build: assume assert.h is always available - build: assume errno.h is always available - c-hyper: CONNECT respones are not server responses - c-hyper: fix multi-request mechanism - CI: Change FreeBSD image from 12.3 to 12.4 - CI: LGTM.com will be shut down in December 2022 - ci: Remove zuul fuzzing job as it's superseded by CIFuzz - cmake: check for cross-compile, not for toolchain - CMake: fix build with `CURL_USE_GSSAPI` - cmake: really enable warnings with clang - cmake: set the soname on the shared library - cmdline-opts/gen.pl: fix the linkifier - cmdline-opts/page-footer: remove long option nroff formatting - config-mac: define HAVE_SYS_IOCTL_H - config-mac: fix typo: size_T -> size_t - config-mac: remove HAVE_SYS_SELECT_H - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW - configure: require fork for NTLM-WB - contributors.sh: actually use $CURLWWW instead of just setting it - cookie: compare cookie prefixes case insensitively - cookie: expire cookies at once when max-age is negative - cookie: open cookie jar as a binary file - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS - curl-rustls.m4: on macOS, rustls also needs the Security framework - curl.h: include <sys/select.h> on SerenityOS - curl.h: name all public function parameters - curl.h: reword comment to not use deprecated option - curl: override the numeric locale and set "C" by force - curl: timeout in the read callback - curl_endian: remove Curl_write64_le from header - curl_get_line: allow last line without newline char - curl_path: do not add '/' if homedir ends with one - curl_url_get.3: remove spurious backtick - curl_url_set.3: document CURLU_DISALLOW_USER - curl_url_set.3: fix typo - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE - CURLOPT_COOKIEFILE.3: advice => advise - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw" - CURLOPT_POST.3: Explain setting to 0 changes request type - docs/curl_ws_send: Fixed typo in websocket docs - docs/EARLY-RELEASE.md: how to determine an early release - docs/examples: spell correction ('Retrieve') - docs/INSTALL.md: expand on static builds - docs/WEBSOCKET.md: explain the URL use - docs: add missing parameters for --retry flag - docs: add more "SEE ALSO" links to CA related pages - docs: explain the noproxy CIDR notation support - docs: extend the dump-header documentation - docs: remove performance note in CURLOPT_SSL_VERIFYPEER - examples/10-at-a-time: fix possible skipped final transfers - examples: update descriptions - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH - gen.pl: do not generate CURLHELP bitmask lines > 79 characters - GHA: clarify workflows permissions, set least possible privilege - GHA: NSS use clang instead of clang-9 - gnutls: use common gnutls init and verify code for ngtcp2 - headers: add endif comments - HTTP-COOKIES.md: mention that http://localhost is a secure context - HTTP-COOKIES.md: update the 6265bis link to draft-11 - http: do not send PROXY more than once - http: fix the ::1 comparison for IPv6 localhost for cookies - http: set 'this_is_a_follow' in the Location: logic - http: use the IDN decoded name in HSTS checks - hyper: classify headers as CONNECT and 1XX - hyper: fix handling of hyper_task's when reusing the same address - idn: remove Curl_win32_ascii_to_idn - INSTALL: update operating systems and CPU archs - KNOWN_BUGS: remove eight entries - lib1560: add some basic IDN host name tests - lib: connection filters (cfilter) addition to curl: - lib: feature deprecation warnings in gcc >= 4.3 - lib: fix some type mismatches and remove unneeded typecasts - lib: parse numbers with fixed known base 10 - lib: remove bad set.opt_no_body assignments - lib: rewind BEFORE request instead of AFTER previous - lib: sync guard for Curl_getaddrinfo_ex() definition and use - lib: use size_t or int etc instead of longs - libcurl-errors.3: remove duplicate word - libssh2: return error when ssh_hostkeyfunc returns error - limit-rate.d: see also --rate - log2changes.pl: wrap long lines at 80 columns ... changelog too long, skipping 66 lines ... - x509asn1: avoid freeing unallocated pointers ==== openssh ==== Subpackages: openssh-clients openssh-common openssh-server - Adapt OpenSSH to build with OpenSSL 3, use new KDF API (bsc#1205042) Add openssh-openssl-3.patch ==== util-linux ==== Version update (2.37.4 -> 2.38.1) Subpackages: libblkid1 libfdisk1 libmount1 libsmartcols1 libuuid1 util-linux-lang - restore lsblk and lslogins as well - reinstanciate logger - Fix /usr/bin/findmnt to be in only one package (bsc#1206347) - Fix tests not passing when '@' character is in build path: Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038). - Add util-linux-fix-tests-when-at-symbol-in-path.patch - Convert the build back to per-parts build, just use multibuild. - libuuid continuous clock handling for time based UUIDs: Prevent use of the new libuuid ABI by uuidd %post before update of libuuid1 (bsc#1205646). - Do not set SUID permissions for util-linux-mini. - Fix pam directory for the staging package. - Add util-linux-rpmlintrc removing unneeded warnings. - Update to version 2.38.1: * column: fix buffer overflow when -l specified, fix greedy mode on -l * dmesg: fix --since and --until * libmount: when moving a mount point, all sub mount entries in utab should also be updated (bsc#1198731) * libuuid: improve cache handling (bsc#1201959, PED-1150) * lsblk: fix JSON output when without --bytes * lsfd:fix crash triggered by an empty filter expression * sulogin: fix includes (obsoletes linux-fs.patch) * Many other fixes, improvements and code cleanup. For the complete list see https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes - Fix some rpmlintrc warnings and remove util-linux-rpmlintrc. - Update to version 2.38: * first release with translated util-linux man-pages * mount: new options --mkdir as shortcut for X-mount.mkdir * mount, libmount: new mount options X-mount.subdir= * lsfd: new command * dmesg: new option --json to print kernel log in JSON format * libfdisk: improved to set correct CHS addresses in MBR * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim (jsc#SLE-17942) * hardlink: now supports reflinks and new option --method= * hwclock: new command line options --param-get and --param-set * irqtop: new option --cpu-stat * libblkid: supports zoned disks for btrfs * lsblk: new options --noempty to ignore all devices with zero size, and --zoned to print information about zones * mkswap: new option --quiet * nsenter: new option --wdns to change working directory within namespace * rename: new options --all and --last to replace all or last occurrences of expression rather than the first one * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE and RLIMIT_NOFILE reourse limits. * unshare: new options --map-users= and --map-groups= to map block of group IDs; new option --map-auto to map the first block of user IDs owned by the effective user from /etc/subuid * wdctl: new options --setpregovernor to set pre-timeout governor name, and --setpretimeout to set watchdog pre-timeout in seconds * Many other new features and fixes. For the complete list see https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes - Changed packaging style from multi spec build to multibuild with python multi-flavor build (PED-1007). Advantages: * Easily prevents bootstrap build loops. * No artificial package splitting needed any more. * Less complicated spec file. * Can run full test suite. * python*-libmount available for more python versions. * Enable asciidoctor to build documentation. * Enable support for libmagic. * Turn technically incorrect Recommends to Requires. - Fix rpmling warning by setting attr for clock.txt ghost file. - Drop upstreamed util-linux-sulogin4bsc1175514.patch ==== util-linux-systemd ==== Version update (2.37.4 -> 2.38.1) - restore lsblk and lslogins as well - reinstanciate logger - Fix /usr/bin/findmnt to be in only one package (bsc#1206347) - Fix tests not passing when '@' character is in build path: Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038). - Add util-linux-fix-tests-when-at-symbol-in-path.patch - Convert the build back to per-parts build, just use multibuild. - libuuid continuous clock handling for time based UUIDs: Prevent use of the new libuuid ABI by uuidd %post before update of libuuid1 (bsc#1205646). - Do not set SUID permissions for util-linux-mini. - Fix pam directory for the staging package. - Add util-linux-rpmlintrc removing unneeded warnings. - Update to version 2.38.1: * column: fix buffer overflow when -l specified, fix greedy mode on -l * dmesg: fix --since and --until * libmount: when moving a mount point, all sub mount entries in utab should also be updated (bsc#1198731) * libuuid: improve cache handling (bsc#1201959, PED-1150) * lsblk: fix JSON output when without --bytes * lsfd:fix crash triggered by an empty filter expression * sulogin: fix includes (obsoletes linux-fs.patch) * Many other fixes, improvements and code cleanup. For the complete list see https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes - Fix some rpmlintrc warnings and remove util-linux-rpmlintrc. - Update to version 2.38: * first release with translated util-linux man-pages * mount: new options --mkdir as shortcut for X-mount.mkdir * mount, libmount: new mount options X-mount.subdir= * lsfd: new command * dmesg: new option --json to print kernel log in JSON format * libfdisk: improved to set correct CHS addresses in MBR * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim (jsc#SLE-17942) * hardlink: now supports reflinks and new option --method= * hwclock: new command line options --param-get and --param-set * irqtop: new option --cpu-stat * libblkid: supports zoned disks for btrfs * lsblk: new options --noempty to ignore all devices with zero size, and --zoned to print information about zones * mkswap: new option --quiet * nsenter: new option --wdns to change working directory within namespace * rename: new options --all and --last to replace all or last occurrences of expression rather than the first one * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE and RLIMIT_NOFILE reourse limits. * unshare: new options --map-users= and --map-groups= to map block of group IDs; new option --map-auto to map the first block of user IDs owned by the effective user from /etc/subuid * wdctl: new options --setpregovernor to set pre-timeout governor name, and --setpretimeout to set watchdog pre-timeout in seconds * Many other new features and fixes. For the complete list see https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes - Changed packaging style from multi spec build to multibuild with python multi-flavor build (PED-1007). Advantages: * Easily prevents bootstrap build loops. * No artificial package splitting needed any more. * Less complicated spec file. * Can run full test suite. * python*-libmount available for more python versions. * Enable asciidoctor to build documentation. * Enable support for libmagic. * Turn technically incorrect Recommends to Requires. - Fix rpmling warning by setting attr for clock.txt ghost file. - Drop upstreamed util-linux-sulogin4bsc1175514.patch - Use %_pam_vendordir