Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=3&version=Tumbleweed&build=20230705 https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&component=MicroOS&query_format=advanced&resolution=--- Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ghostscript patterns-microos policycoreutils suse-module-tools (16.0.31 -> 16.0.32) yast2-network (4.6.4 -> 4.6.5) === Details === ==== ghostscript ==== Subpackages: ghostscript-x11 - CVE-2023-36664.patch fixes CVE-2023-36664 see https://bugs.ghostscript.com/show_bug.cgi?id=706761 "OS command injection in %pipe% access" and https://bugs.ghostscript.com/show_bug.cgi?id=706778 "%pipe% allowed_path bypass" and bsc#1212711 "permission validation mishandling for pipe devices (with the %pipe% prefix or the | pipe character prefix)" ==== patterns-microos ==== Subpackages: patterns-microos-alt_onlyDVD patterns-microos-apparmor patterns-microos-base patterns-microos-base-microdnf patterns-microos-base-packagekit patterns-microos-base-zypper patterns-microos-basesystem patterns-microos-cloud patterns-microos-cockpit patterns-microos-defaults patterns-microos-desktop-common patterns-microos-desktop-gnome patterns-microos-desktop-kde patterns-microos-hardware patterns-microos-ima_evm patterns-microos-onlyDVD patterns-microos-ra_agent patterns-microos-ra_verifier patterns-microos-selinux patterns-microos-sssd_ldap - Add KDE partition manager to the default plasma install (boo#1212925) ==== policycoreutils ==== Subpackages: policycoreutils-python-utils python3-policycoreutils - Only recommend policycoreutils-devel. The requires causes build issues and this can be used with a policy from a different source - Required fixed python3-selinux, not version dependend sub-packages ==== suse-module-tools ==== Version update (16.0.31 -> 16.0.32) Subpackages: suse-module-tools-scriptlets - Update to version 16.0.32: * rpm-script: check for regenerate-initrd-posttrans in %posttrans (boo#1212957) ==== yast2-network ==== Version update (4.6.4 -> 4.6.5) - Fix typo when writing the wireless channel (bsc#1212976) - 4.6.5