Mailinglist Archive: opensuse-kubic (54 mails)

< Previous Next >
[opensuse-kubic] New MicroOS snapshot 20201026 released!
  • From: Richard Brown <rbrown@xxxxxxx>
  • Date: Tue, 27 Oct 2020 23:05:53 +0000
  • Message-id: <160383995306.3551.5624898917941725500@go-agent-stagingbot-1>

Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.

Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version=Tumbleweed&build=20201026
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&component=MicroOS&query_format=advanced&resolution=---

Please do not reply to this email to report issues, rather file a bug on
bugzilla.opensuse.org.
For more information on filing bugs please see
https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
cups (2.3b6 -> 2.3.3)
dhcp
glib2 (2.64.6 -> 2.66.2)
grub2
kernel-source (5.8.15 -> 5.9.1)
libpwquality (1.4.2 -> 1.4.4)
librsvg (2.48.8 -> 2.50.1)
libwpe (1.6.0 -> 1.8.0)
microos-tools (2.5 -> 2.6)
open-vm-tools (11.1.5 -> 11.2.0)
perl-URI (1.76 -> 5.05)
transactional-update (2.27 -> 2.28)
wpebackend-fdo (1.6.1 -> 1.8.0)

=== Details ===

==== cups ====
Version update (2.3b6 -> 2.3.3)
Subpackages: cups-client cups-config libcups2 libcupsimage2

- Version upgrade to 2.3.3:
- CVE-2020-3898: The `ppdOpen` function did not handle invalid UI
constraint. `ppdcSource::get_resolution` function did not
handle invalid resolution strings.
- CVE-2019-8842: The `ippReadIO` function may under-read an
extension field.
- Fixed WARNING_OPTIONS support for GCC 9.x
Changes in CUPS 2.3.2:
Localization updates
Changes in CUPS 2.3.1:
- CVE-2019-2228: The `ippSetValuetag` function did not validate
the default language value.
- Fixed a crash bug in the web interface.
- The PPD cache code now looks up page sizes using their
dimensions.
- PPD files containing "custom" option keywords did not work.
- Added a workaround for the scheduler's systemd support.
- Added a DigestOptions directive for the `client.conf` file to
control whether MD5-based Digest authentication is allowed.
- Fixed a bug in the handling of printer resource files.
- The libusb-based USB backend now reports an error when the
distribution permissions are wrong.
- Added paint can labels to Dymo driver.
- The `ippeveprinter` program now supports authentication.
- The `ippeveprinter` program now advertises DNS-SD services on
the correct interfaces, and provides a way to turn them off.
- The `--with-dbusdir` option was ignored by the configure
script.
- Sandboxed applications were not able to get the default
printer.
- Log file access controls were not preserved by `cupsctl`.
- Default printers set with `lpoptions` did not work in all
cases.
- Fixed an error in the jobs web interface template.
- Fixed an off-by-one error in `ippEnumString`.
- Fixed some new compiler warnings.
- Fixed a few issues with the Apple Raster support.
- The IPP backend did not detect all cases where a job should be
retried using a raster format.
- Fixed spelling of "fold-accordion".
- Fixed the default common name for TLS certificates used by
`ippeveprinter`.
- Fixed the option names used for IPP Everywhere finishing
options.
- Added support for the second roll of the DYMO Twin/DUO label
printers.
Changes in CUPS v2.3.0:
- CVE-2019-8696 and CVE-2019-8675: Fixed SNMP buffer overflows.
- Added a GPL2/LGPL2 exception to the new CUPS license terms.
- Fixed a bug in the scheduler job cleanup code.
- Fixed builds when there is no TLS library.
- "make" failed with GZIP options.
- Fixed potential excess logging from the scheduler when removing
job files.
- Fixed a NULL pointer dereference bug in `httpGetSubField2`.
- Added FIPS-140 workarounds for GNU TLS.
- The scheduler no longer provides a default value for the
description.
- The scheduler now logs jobs held for authentication using the
error level so it is clear what happened.
- The `lpadmin` command did not always update the PPD file for
changes to the `cupsIPPSupplies` and `cupsSNMPSupplies` keywords.
- The scheduler now uses both the group's membership list as well
as the various OS-specific membership functions to determine
whether a user belongs to a named group.
- Added USB quirks rule for HP LaserJet 1015.
- Fixed some PPD parser issues.
- The IPP parser no longer allows invalid member attributes in
collections.
- The configure script now treats the "wheel" group as a
potential system group.
- Fixed IPP buffer overflow.
- Fixed memory disclosure issue in the scheduler.
- Fixed DoS issues in the scheduler.
- Fixed an issue with unsupported "sides" values in the IPP
backend.
- The scheduler would restart continuously when idle and printers
were not shared.
- Fixed an issue with `EXPECT !name WITH-VALUE ...` tests.
- Fixed a command ordering issue in the Zebra ZPL driver.
- Fixed a memory leak in `ppdOpen`.
Changes in CUPS v2.3rc1:
- The `cups-config` script no longer adds extra libraries when linking against
shared libraries.
- The supplied example print documents have been optimized for
size.
- The `cupsctl` command now prevents setting "cups-files.conf"
directives.
- The "forbidden" message in the web interface is now explained.
- The footer in the web interface covered some content on small
displays.
- The libusb-based USB backend now enforces read limits,
improving print speed in many cases.
- The `ippeveprinter` command now looks for print commands in
the "command" subdirectory.
- The `ipptool` command now supports `$date-current` and
`$date-start` variables to insert the current and starting date
and time values, as well as ISO-8601 relative time values such
as "PT30S" for 30 seconds in the future.
Changes in CUPS v2.3b8
- Media size matching now uses a tolerance of 0.5mm.
- The lpadmin command would hang with a bad PPD file.
- Fixed a potential crash bug in cups-driverd.
- Fixed a performance regression with large PPDs.
- Fixed a memory reallocation bug in HTTP header value expansion.
- Timed out job submission now yields an error.
- Restored minimal support for the `Emulators` keyword in PPD
files to allow old Samsung printer drivers to continue to work.
- The scheduler did not encode octetString values like
"job-password" correctly for the print filters.
- The `cupsCheckDestSupported` function did not check octetString
values correctly.
- Added support for `UserAgentTokens` directive in "client.conf".
- Updated the systemd service file for cupsd.
- The `ippValidateAttribute` function did not catch all instances
of invalid UTF-8 strings.
- Fixed an issue with the self-signed certificates generated by
GNU TLS.
- Fixed a potential memory leak when reading at the end of a
file.
- Fixed potential unaligned accesses in the string pool.
- Fixed a potential memory leak when loading a PPD file.
- Added a USB quirks rule for the Lexmark E120n.
- Updated the USB quirks rule for Zebra label printers.
- The lpadmin command, web interface, and scheduler all queried
an IPP Everywhere printer differently, resulting in different
PPDs for the same printer.
- The web interface no longer provides access to the log files.
- Non-Kerberized printing to Windows via IPP was broken.
- The scheduler no longer stops a printer if an error occurs when
a job is canceled or aborted.
- Added a USB quirks rule for the DYMO 450 Turbo.
- Added a USB quirks rule for Xerox printers.
- The scheduler's self-signed certificate did not include all of
the alternate names for the server when using GNU TLS.
- Fixed some PPD caching and IPP Everywhere PPD
accounting/password bugs.
- Fixed `PreserveJobHistory` bug with time values.
- The scheduler no longer advertises the HTTP methods it
supports.
- The scheduler did not always idle exit as quickly as it could.
- Added a new `ippeveprinter` command based on the old ippserver
sample code.
Changes in CUPS v2.3b7
- Running ppdmerge with the same input and output filenames did
not work as advertised.
- Rebase let-cupsd-start-after-network.patch and
cups-config-libs.patch.
- Drop issue5509-fix-utf-8-validation-issue.patch and
issue5453.patch: fixed upstream.

==== dhcp ====
Subpackages: dhcp-client

- Complete the /var/run -> /run migration by renaming
/var/lib/dhcp/var/run accordingly (boo#1177951).

==== glib2 ====
Version update (2.64.6 -> 2.66.2)
Subpackages: glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0
libgobject-2_0-0

- Enable building of documentation:
+ Toggle gtk_doc from bcond_with to bcond_without.
+ Use sed to replace gtk-doc version in
docs/reference/meson.build with 1.32.
- Update to version 2.66.2:
+ Important and time-critical fix to DST transitions which will
happen in Europe on 2020-10-25 on distributions which use the
?slim? tzdata format (which is now the default in tzdata/tzcode
2020b).
+ Further timezone handling changes to restore support for
changing the timezone when `/etc/localtime/` changes.
+ Fix deadlock on Windows when `G_SLICE` is set in the
environment.
+ Fix UTF-8 validation when escaping URI components.
+ Updated translations.
- Update to version 2.66.1:
+ A performance problem where timezones were reloaded from disk
every time a `GTimeZone` was created has been fixed, but this
means that changes to `/etc/localtime` will not take effect
until a process restarts; future changes in a subsequent 2.66.x
release will improve this.
+ Security fix for incorrect scope/zone ID parsing in URIs.
+ Updated translations.
- Update to version 2.66.0:
+ * Bugs fixed:
- Missing tab in makefile rule.
- guri: Fix user passed to g_uri_split_with_user() not being
NULL'd.
+ Updated translations.
- Update to version 2.65.3:
+ Fixes to the new `statx()` calls ? note that since GLib 2.65.2
uses `statx()` (if available) instead of
`stat()`/`fstat()`/`lstat()`/`fstatat()`, syscall sandboxing
for third party applications might need to be updated.
+ Updated translations.
- Update to version 2.65.2:
+ Support `statx()` and `G_FILE_ATTRIBUTE_TIME_CREATED`.
+ Fix deadlock in `g_subprocess_communicate_async()`.
+ Add `%f`/microsecond placeholder support to
`g_date_time_format()`.
- Changes from version 2.65.1:
+ Add `GUri` API for parsing, building and representing URIs
according to [RFC 3986](https://tools.ietf.org/html/rfc3986).
+ Fix handling of xattr data with embedded nuls.
+ Add `g_file_set_contents_full()` which gives more control over
fsyncs.
+ Add a `x-gvfs-notrash` option to disable trash on certain
mounts.
+ Support ?slim? TZif files generated with `zic -b slim`.
+ Support emitting profiling marks from `GMainContext` to sysprof
capture files.
+ Accept IPv6 zone IDs in `g_hostname_is_ip_address()`.
+ Updated translations.
- Rebase glib2-gdbus-codegen-version.patch.
- Build without gtk-doc: it would require a not yet released
version of gtk-doc.

==== grub2 ====
Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-x86_64-efi

- Fix grub2-install error with "failed to get canonical path of
`/boot/grub2/i386-pc'." (bsc#1177957)
* Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch
- Fix https boot interrupted by unrecognised network address error message
(bsc#1172952)
* 0001-add-support-for-UEFI-network-protocols.patch
- grub2.spec: Fix bare words used as string in expression which is no longer
allowed in rpm 4.16
- Improve the error handling when grub2-install fails with short mbr gap
(bsc#1176062)
* 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
* 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch

==== kernel-source ====
Version update (5.8.15 -> 5.9.1)

- vt_ioctl: fix GIO_UNIMAP regression (5.9 GIO_UNIMAP regression).
- commit 15946ea
- kernel-binary.spec.in: pack scripts/module.lds into kernel-$flavor-devel
Since mainline commit 596b0474d3d9 ("kbuild: preprocess module linker
script") in 5.10-rc1, scripts/module.lds linker script is needed to build
out of tree modules. Add it into kernel-$flavor-devel subpackage.
- commit fe37c16
- drm/amd/display: Don't invoke kgdb_breakpoint() unconditionally
(bsc#1177973).
- drm/amd/display: Fix kernel panic by dal_gpio_open() error
(bsc#1177973).
- commit 3f21462
- series.conf: cleanup
- move to "almost mainline" section:
patches.suse/coresight-fix-offset-by-one-error-in-counting-ports.patch
- commit 8e0635b
- Refresh
patches.suse/coresight-fix-offset-by-one-error-in-counting-ports.patch.
Update upstream status.
- commit 7b40cc9
- Linux 5.9.1 (bsc#1012628).
- Bluetooth: MGMT: Fix not checking if BT_HS is enabled
(bsc#1012628).
- media: usbtv: Fix refcounting mixup (bsc#1012628).
- USB: serial: option: add Cellient MPL200 card (bsc#1012628).
- USB: serial: option: Add Telit FT980-KS composition
(bsc#1012628).
- staging: comedi: check validity of wMaxPacketSize of usb
endpoints found (bsc#1012628).
- USB: serial: pl2303: add device-id for HP GC device
(bsc#1012628).
- USB: serial: ftdi_sio: add support for FreeCalypso JTAG+UART
adapters (bsc#1012628).
- vt_ioctl: make VT_RESIZEX behave like VT_RESIZE (bsc#1012628).
- reiserfs: Initialize inode keys properly (bsc#1012628).
- reiserfs: Fix oops during mount (bsc#1012628).
- Revert "drm/amdgpu: Fix NULL dereference in dpm sysfs handlers"
(bsc#1012628).
- crypto: bcm - Verify GCM/CCM key length in setkey (bsc#1012628).
- crypto: qat - check cipher length for aead AES-CBC-HMAC-SHA
(bsc#1012628).
- commit b7f511b
- update patches metadata
- update upstream references:
patches.suse/Bluetooth-A2MP-Fix-not-initializing-all-members.patch
patches.suse/Bluetooth-L2CAP-Fix-calling-sk_filter-on-non-socket-.patch
- commit b1f22f7

==== libpwquality ====
Version update (1.4.2 -> 1.4.4)
Subpackages: libpwquality-tools libpwquality1 pam_pwquality

- update to 1.4.4
* e11f2bd Fix regression with enabling cracklib check
* 02e6728 Use make macros in rpm spec file
* xxxxxxx Translated using Weblate (Polish, Turkish, Ukrainian)
- update to 1.4.3
* 1213d33 Update translation files
* a951fbe Add --disable-cracklib-check configure parameter
* 6a8845b fixup static compilation
* 92c6066 python: Add missing getters/setters for newly added settings
* bfef79d Add usersubstr check
* 09a2e65 pam_pwquality: Add debug message for the local_users_only option
* a6f7705 Fix some gcc warnings
* 8c8a260 pwmake: Properly validate the bits parameter.
* 7be4797 we use Fedora Weblate now
* xxxxxxx Translated using Weblate (Azerbaijani, Bulgarian,
Chinese (Simplified), Czech, French, Friulian, Hungarian, Italian,
Japanese, Norwegian Bokmål, Persian, Russian, Spanish, Turkish)

==== librsvg ====
Version update (2.48.8 -> 2.50.1)
Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2 rsvg-thumbnailer
typelib-1_0-Rsvg-2_0

- Update to version 2.50.1:
+ SVG2: Support a chain of uri() filters in the "filter"
property.
+ Support CSS selectors for attribute matching, like
rect[attr^="prefix"].
+ Fixed the geometry_for_layer() APIs to not ignore the passed
viewport.
+ Fixed CSS "import" so it allows only files from the same base
directory.
+ The pkg-config files (*.pc) do not define the 'svgz_supported'
and 'css_supported' variables anymore. These variables were
hardcoded to 'true' and unchanged since 2011.
+ The source repository no longer produces a
librsvg-uninstalled.pc file.
- Update to version 2.50.0:
+ Librsvg now consumes much less memory for large SVG files.
+ The 'font' shorthand in is now supported in CSS. Librsvg
ignores the 'line-height' sub-property because it cannot be
done easily with Pango, but everything else in 'font' should
work now.
+ Many new features from SVG2:
- radialGradient now supports the "fr" property from SVG2.
- Support href attribute in addition to xlink:href per SVG2.
- Ignore missing filter references per SVG2.
- Support the mix-blend-mode property from SVG2 and the
Compositing and Blending Level 1 specification, so layers can
be composited with operators like multiply/screen/color-burn.
- Support the paint-order property from SVG2, so one can pick
the order in which a path's fill/stroke/markers are drawn.
+ Updated translations.

==== libwpe ====
Version update (1.6.0 -> 1.8.0)

- Update to version 1.8.0:
+ New build configuration system based on Meson. The existing
CMake-based system is still maintained, and both produce the
same outputs.
+ Hidden visibility is now used by default for symbols, and only
those belonging to the public API are exported.
- Switch to meson.

==== microos-tools ====
Version update (2.5 -> 2.6)

- Update to version 2.6
- Don't delete autorelabel file in initrd

==== open-vm-tools ====
Version update (11.1.5 -> 11.2.0)
Subpackages: libvmtools0

- Update to 11.2.0 (build 16938113) (boo#1177987)
+ Fixed memory leak occurs in disk device mapping information for IDE,
SATA or SAS (LSI Logic SAS) disks configured in the guest.
+ The following issues and pull requests reported on
https://github.com/vmware/open-vm-tools have been addressed:
https://github.com/vmware/open-vm-tools/issues/429
https://github.com/vmware/open-vm-tools/pull/431
https://github.com/vmware/open-vm-tools/pull/432
https://github.com/vmware/open-vm-tools/issues/452
+ A number of Coverity reported errors and false positives have been
addressed.
+ A complete list of the granular changes that are in the open-vm-tools
11.2.0 release is available at:

https://github.com/vmware/open-vm-tools/blob/stable-11.2.0/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch (boo#1177987): removed the pam_securetty.so line
from the new suse file. Modified the Makefile.am to copy the suse file to
the /etc/pam.d/vmtoolsd file rather than the default generic file.

==== perl-URI ====
Version update (1.76 -> 5.05)

- updated to 5.05
see /usr/share/doc/packages/perl-URI/Changes
5.05 2020-10-21 13:00:44Z
- Bump all versions to 5.05 in order to remove various version mismatches.
(GH #77) (Olaf Alders)
- Add a simple test case for an ipv6 host (GH#66) (Olaf Alders)

==== transactional-update ====
Version update (2.27 -> 2.28)
Subpackages: transactional-update-zypp-config

- Version 2.28
- Add 'setup-selinux' command for easy setup of a SELinux system
- Allow complex commands for the 'run' command
- SELinux: Fix /etc / overlay labeling

==== wpebackend-fdo ====
Version update (1.6.1 -> 1.8.0)

- Update to version 1.8.0:
+ Added new API for the audio rendering protocol, which allows
embedders to receive audio samples instead of letting WPE
WebKit handle their playback.
+ Added support to export frames using EGLStreams, which can be
used e.g. with Nvidia GPUs.
+ New build configuration system based on Meson. The existing
CMake-based system is still maintained, and both produce the
same outputs.
+ Use libepoxy for EGL operations.
- Switch to meson.
- Add epoxy to BuildRequires: new dependency.


N�����r��y隊Z)z{.��.n'>�{.n�+������Ǩ��r��i�m��0��ޙ����������s�0�����Ǩ�
< Previous Next >
This Thread
  • No further messages