Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=3&version=Tumbleweed&build=20240409 https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&component=MicroOS&query_format=advanced&resolution=--- Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MicroOS-release (20240407 -> 20240409) branding-openSUSE (84.87.20230227 -> 84.87.20240405) distribution-logos-openSUSE (20240207 -> 20240404) fwupd (1.9.15 -> 1.9.16) gnutls (3.8.4 -> 3.8.5) gvfs libX11 (1.8.8 -> 1.8.9) libproxy-backend (0.5.4 -> 0.5.5) libproxy-client (0.5.4 -> 0.5.5) mutter oath-toolkit (2.6.8 -> 2.6.11) openssh passt (20240220.1e6f92b -> 20240405.954589b) pixman plasma6-openSUSE power-profiles-daemon (0.13 -> 0.20) python-gobject (3.48.1 -> 3.48.2) qt6-base (6.6.3 -> 6.7.0) qt6-declarative (6.6.3 -> 6.7.0) qt6-imageformats (6.6.3 -> 6.7.0) qt6-multimedia (6.6.3 -> 6.7.0) qt6-positioning (6.6.3 -> 6.7.0) qt6-qt5compat (6.6.3 -> 6.7.0) qt6-quick3d (6.6.3 -> 6.7.0) qt6-quicktimeline (6.6.3 -> 6.7.0) qt6-sensors (6.6.3 -> 6.7.0) qt6-shadertools (6.6.3 -> 6.7.0) qt6-speech (6.6.3 -> 6.7.0) qt6-svg (6.6.3 -> 6.7.0) qt6-tools (6.6.3 -> 6.7.0) qt6-translations (6.6.3 -> 6.7.0) qt6-virtualkeyboard (6.6.3 -> 6.7.0) qt6-wayland (6.6.3 -> 6.7.0) qt6-webchannel (6.6.3 -> 6.7.0) qt6-webengine (6.6.3 -> 6.7.0) qt6-webview (6.6.3 -> 6.7.0) sdbootutil (1+git20240321.04bfbac -> 1+git20240408.49e4021) u-boot-rpiarm64 (2024.01 -> 2024.04) xfsprogs yast2-bootloader (5.0.7 -> 5.0.8) yast2-installation (5.0.7 -> 5.0.8) yast2-perl-bindings (5.0.2 -> 5.0.4) === Details === ==== MicroOS-release ==== Version update (20240407 -> 20240409) Subpackages: MicroOS-release-appliance MicroOS-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== branding-openSUSE ==== Version update (84.87.20230227 -> 84.87.20240405) Subpackages: grub2-branding-openSUSE plymouth-branding-openSUSE wallpaper-branding-openSUSE yast2-qt-branding-openSUSE - Use png for wallpapers for Tumbleweed - SLES seems to be using png - Using a compat symlink wallpapers/openSUSEdefault-> wallpapers/SLEdefault allows running certain apps without rebuild. Such as cockpit. - Use optipng -o5 to compress files (has to be reflected in spec) - Bump date ==== distribution-logos-openSUSE ==== Version update (20240207 -> 20240404) Subpackages: distribution-logos-openSUSE-MicroOS distribution-logos-openSUSE-icons - Update to version 20240404: * Turn apple-touch-icon into round square ones * SLES Compatability supply apple-touch-icon for Leap, LeapMicro, TW * Delete dist/package directory * fix source mismatch with package name ==== fwupd ==== Version update (1.9.15 -> 1.9.16) Subpackages: fwupd-bash-completion libfwupd2 typelib-1_0-Fwupd-2_0 - Update to version 1.9.16: + This release adds the following features: - Prefer zstd over xz for metadata. - Relicense a few remaining plugin files to LGPL-2.1+. + This release fixes the following bugs: - Correctly record UEFI success if adding ESRT nodes. - Defer the DP Aux MST scanning on hotplug to workaround a kernel bug. - Do not do the post-update version check if the device needs-reboot. - Fix a fastboot warning when loading device. - Fix a possible warning in fwupdmgr when excluding releases. - Fix a qsi-dock warning when writing chunks. - Ignore attribute-changed to work around a regression in macOS. - Ignore ZFS zvols when finding the default ESP. - Mark Pluton TPMs as part of the main CPU. - Put the fwupd-efi verbose debugging in the journal. - Recognize zfsbootmenu in ESP detection heuristic. + This release adds support for the following hardware: - Acer T34 and U33 docks. - Qualcomm Series 5 Gen 1 and Gen 2 and Series 3 Gen 1 and Gen 2 devices. - Several Puya SPI chips. - VIA VL822 C0. ==== gnutls ==== Version update (3.8.4 -> 3.8.5) - Update to 3.8.5: * libgnutls: Due to majority of usages and implementations of RSA decryption with PKCS#1 v1.5 padding being incorrect, leaving them vulnerable to Marvin attack, the RSAES-PKCS1-v1_5 is being deprecated (encryption and decryption) and will be disabled in the future. A new option 'allow-rsa-pkcs1-encrypt' has been added into the system-wide library configuration which allows to enable/disable the RSAES-PKCS1-v1_5. Currently, the RSAES-PKCS1-v1_5 is enabled by default. * libgnutls: Added support for RIPEMD160 and PBES1-DES-SHA1 for backward compatibility with GCR. * libgnutls: A couple of memory related issues have been fixed in RSA PKCS#1 v1.5 decryption error handling and deterministic ECDSA with earlier versions of GMP. These were a regression introduced in the 3.8.4 release. See #1535 and !1827. * build: Fixed a bug where building gnutls statically failed due to a duplicate definition of nettle_rsa_compute_root_tr(). * API and ABI modifications: - GNUTLS_PKCS_PBES1_DES_SHA1: New enum member of gnutls_pkcs_encrypt_flags_t * Rebase patches: - gnutls-FIPS-TLS_KDF_selftest.patch - gnutls-FIPS-140-3-references.patch ==== gvfs ==== Subpackages: gvfs-backend-afc gvfs-backend-goa gvfs-backend-samba gvfs-backends gvfs-fuse - Move the recently added onedrive provider to the backend-goa subpackage: onedrive support is integrated into the g-o-a provider. ==== libX11 ==== Version update (1.8.8 -> 1.8.9) Subpackages: libX11-6 libX11-data libX11-xcb1 - Update to 1.8.9 * Fix regressions introduced in 1.8.8 (!245, !248) - this includes reverting for now the previous "Fix XIM input sometimes jumbled (#198, !236)" - supersedes * U_0001-xlibi18n-restore-parse_line1-for-WIN32-builds.patch * U_0002-Revert-imDefLkup-Commit-first-info-in-XimCommitInfo.patch * U_0003-Revert-ximcp-Unmark-to-fabricate-key-events-with-XKe.patch - U_0001-xlibi18n-restore-parse_line1-for-WIN32-builds.patch U_0002-Revert-imDefLkup-Commit-first-info-in-XimCommitInfo.patch U_0003-Revert-ximcp-Unmark-to-fabricate-key-events-with-XKe.patch * fix regressions in 1.8.8 (issues #204, #205, #206, #207, #208) ==== libproxy-backend ==== Version update (0.5.4 -> 0.5.5) - Update to version 0.5.5: + Windows: Try all configured proxy resolution types. + Cleanup curl. + Add release option. + Expose missing functions in symbol map. + Fix crash during unload by. + Log debug instead of warning on wpad pac failure. + Fix refcounting in px_proxy_factory_copy. + symver: Fix symbol map to be a valid tree. + Fix free function for pxProxyFactory type. + CodeQL badge and updated repology. + meson: Don't build OSX plugin on iOS. ==== libproxy-client ==== Version update (0.5.4 -> 0.5.5) - Update to version 0.5.5: + Windows: Try all configured proxy resolution types. + Cleanup curl. + Add release option. + Expose missing functions in symbol map. + Fix crash during unload by. + Log debug instead of warning on wpad pac failure. + Fix refcounting in px_proxy_factory_copy. + symver: Fix symbol map to be a valid tree. + Fix free function for pxProxyFactory type. + CodeQL badge and updated repology. + meson: Don't build OSX plugin on iOS. ==== mutter ==== - Add mutter-fix-front-buffer-lock.patch: Fix front buffer lock error by an unnecessary ensure_fb_id call (glgo#gnome/mutter!3674, bsc#1222409). ==== oath-toolkit ==== Version update (2.6.8 -> 2.6.11) - version update to 2.6.11 * liboath: Handle invalid base32 encoded secrets. Fixes: #41. * Various build fixes including updated gnulib files. * Improve compatibility with recent libxmlsec. ==== openssh ==== Subpackages: openssh-clients openssh-common openssh-server - Add missing bugzilla/CVE references to the changelog - Add patch from SLE which was missing in Factory: * Mon Jun 7 20:54:09 UTC 2021 - Hans Petter Jansson <hpj@suse.com> - Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which attempts to mitigate instances of secrets lingering in memory after a session exits. (bsc#1213004 bsc#1213008) - Rebase patch: * openssh-6.6p1-privsep-selinux.patch ==== passt ==== Version update (20240220.1e6f92b -> 20240405.954589b) Subpackages: passt-selinux - spec: Install separate apparmor profile for `pasta` (bsc#1221840). - spec: Override symlinks with hard links for apparmor profiles to take effect. (bsc#1221840) (https://github.com/containers/buildah/issues/5440) - Update to version 20240405.954589b: * netlink: Ignore routes to link-local addresses for selecting interface * util: Add helper to return name of address family * netlink: Adjust interface index inside copied nexthop objects too * apparmor: Fix access to procfs namespace entries in pasta's abstraction * apparmor: Expand scope of @{run}/user access, allow writing PID files too * apparmor: Add mount rule with explicit, empty source in passt abstraction * README.md: Alpine, Guix and OpenSUSE now have packages for passt - New upstream release 20240326.4988e2b * tcp: Unconditionally force ACK for all !SYN, !RST packets * tcp: Never automatically add the ACK flag to RST packets * tcp: Rearrange logic for setting ACK flag in tcp_send_flag() * tcp: Split handling of DUP_ACK from ACK * util: fix confusion between offset in the iovec array and in the entry * netlink: Fix selection of template interface * netlink: Fix handling of NLMSG_DONE in nl_route_dup() ==== pixman ==== - a64-neon is an aarch64 feature, not armv6/7 ==== plasma6-openSUSE ==== Subpackages: plasma6-branding-openSUSE plasma6-sddm-theme-openSUSE plasma6-theme-openSUSE - Modify sddmtheme.diff to change the extension of the openSUSE branding wallpaper from jpg to png since the extension was changed in TW (boo#1222546) - Require the same wallpaper-branding version as used when building to make sure the png file exists ==== power-profiles-daemon ==== Version update (0.13 -> 0.20) - remove dependency on /usr/bin/python3 using %python3_fix_shebang macro, [bsc#1212476] - Remove duplicate DBus service files net.hadess.PowerProfiles - Update to version 0.20: * Service has new name 'org.freedesktop.UPower.PowerProfiles' * Allow multiple power-profiles-daemon drivers to load simultaneously * amdgpu panel power savings which uses dedicated hardware in systems with integrated Radeon graphics to decrease panel power consumption when the system is on battery - Add python3-shebang.patch: * resolve env-script-interpreter error ==== python-gobject ==== Version update (3.48.1 -> 3.48.2) Subpackages: python311-gobject python311-gobject-Gdk python311-gobject-cairo - Update to version 3.48.2: + Fix support for fundamental (primitive) types, such as Gst.Bitmask. ==== qt6-base ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6Concurrent6 libQt6Core6 libQt6DBus6 libQt6Gui6 libQt6Network6 libQt6OpenGL6 libQt6OpenGLWidgets6 libQt6PrintSupport6 libQt6Sql6 libQt6Test6 libQt6Widgets6 libQt6Xml6 qt6-network-tls qt6-networkinformation-glib qt6-networkinformation-nm qt6-platformtheme-gtk3 qt6-printsupport-cups qt6-sql-sqlite - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released - Replace 0001-Tell-the-truth-about-private-API.patch with upstream change: * 0001-CMake-ELF-allow-using-Qt-s-full-version-number-in-th.patch - Add upstream fix (QTBUG-123937): * fix_builds_with_Werror.patch ==== qt6-declarative ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6LabsAnimation6 libQt6LabsFolderListModel6 libQt6LabsQmlModels6 libQt6LabsSettings6 libQt6LabsSharedImage6 libQt6LabsWavefrontMesh6 libQt6Qml6 libQt6QmlCore6 libQt6QmlLocalStorage6 libQt6QmlModels6 libQt6QmlWorkerScript6 libQt6QmlXmlListModel6 libQt6Quick6 libQt6QuickControls2-6 libQt6QuickControls2Impl6 libQt6QuickDialogs2-6 libQt6QuickDialogs2QuickImpl6 libQt6QuickDialogs2Utils6 libQt6QuickEffects6 libQt6QuickLayouts6 libQt6QuickParticles6 libQt6QuickShapes6 libQt6QuickTemplates2-6 libQt6QuickTest6 libQt6QuickWidgets6 qt6-declarative-imports - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released - Update build constraints ==== qt6-imageformats ==== Version update (6.6.3 -> 6.7.0) - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-multimedia ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6Multimedia6 libQt6MultimediaQuick6 libQt6Quick3DSpatialAudio6 libQt6SpatialAudio6 qt6-multimedia-imports - Add upstream change to restore binary compatibility (QTBUG-123997): * 0001-Fix-ABI-breakage-wrt-QAudioSink-Source-stateChanged-.patch - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-positioning ==== Version update (6.6.3 -> 6.7.0) - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-qt5compat ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6Core5Compat6 qt6-qt5compat-imports - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-quick3d ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6Quick3D6 libQt6Quick3DAssetImport6 libQt6Quick3DAssetUtils6 libQt6Quick3DEffects6 libQt6Quick3DHelpers6 libQt6Quick3DHelpersImpl6 libQt6Quick3DParticleEffects6 libQt6Quick3DParticles6 libQt6Quick3DRuntimeRender6 libQt6Quick3DUtils6 qt6-quick3d-imports - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-quicktimeline ==== Version update (6.6.3 -> 6.7.0) - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-sensors ==== Version update (6.6.3 -> 6.7.0) - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-shadertools ==== Version update (6.6.3 -> 6.7.0) - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-speech ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6TextToSpeech6 qt6-texttospeech - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-svg ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6Svg6 libQt6SvgWidgets6 - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-tools ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6Designer6 libQt6UiTools6 qt6-tools-qdbus - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-translations ==== Version update (6.6.3 -> 6.7.0) - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-virtualkeyboard ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6HunspellInputMethod6 libQt6VirtualKeyboard6 qt6-virtualkeyboard-imports - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-wayland ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6WaylandClient6 libQt6WaylandCompositor6 libQt6WaylandEglClientHwIntegration6 libQt6WaylandEglCompositorHwIntegration6 libQt6WlShellIntegration6 - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-webchannel ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6WebChannel6 libQt6WebChannelQuick6 qt6-webchannel-imports - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-webengine ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6WebEngineCore6 libQt6WebEngineQuick6 libQt6WebEngineWidgets6 qt6-webengine-imports - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released - Update rtc-dont-use-h264.patch ==== qt6-webview ==== Version update (6.6.3 -> 6.7.0) - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== sdbootutil ==== Version update (1+git20240321.04bfbac -> 1+git20240408.49e4021) Subpackages: sdbootutil-rpm-scriptlets sdbootutil-snapper - Update to version 1+git20240408.49e4021: * Update requirements * Measure manually initrd if pcrlock fails * Set SYSTEMD_LOG_LEVEL if verbose * Only error out on empty machine-id when actually used * feat: add basic boot assessment * fix: use new os-release and machine-id files * dracut call: --add-device belongs to --sysroot * Make sdbootutil usable with no snapshot Systems ==== u-boot-rpiarm64 ==== Version update (2024.01 -> 2024.04) Subpackages: u-boot-rpiarm64-doc - Update to 2024.04: * Full changelog available at: https://source.denx.de/u-boot/u-boot/-/compare/v2024.01...v2024.04 - Patch queue updated from https://github.com/openSUSE/u-boot.git tumbleweed-2024.04 * Patches dropped: 0017-rpi5-add-initial-memory-map-for-bcm.patch 0018-rpi5-Use-devicetree-as-alternative-.patch 0019-rpi5-Use-devicetree-to-retrieve-boa.patch 0020-bcm2835-Dynamically-calculate-bytes.patch 0021-mmc-bcmstb-Add-support-for-bcm2712-.patch 0022-configs-rpi_arm64-enable-SDHCI-BCMS.patch 0023-configs-rpi_arm64-build-position-in.patch ==== xfsprogs ==== - Switch to %autosetup in order to build with older rpm build ==== yast2-bootloader ==== Version update (5.0.7 -> 5.0.8) - Follow up of previous change to use even more precise wording (bsc#1219989,bsc#1222353) - 5.0.8 ==== yast2-installation ==== Version update (5.0.7 -> 5.0.8) - Adapted call for connecting all discovered NVMe-over-Fabrics subsystems (bsc#1222246). - 5.0.8 ==== yast2-perl-bindings ==== Version update (5.0.2 -> 5.0.4) - Fix downstream build failures caused by the previous change (bsc#1222375) - 5.0.4 - Use UTF-8 for translated texts coming from our Perl code (bsc#1216689), fixing most '?' occurrences in yast2-users. - 5.0.3