Packages changed: MicroOS-release (20240407 -> 20240409) branding-openSUSE (84.87.20230227 -> 84.87.20240405) distribution-logos-openSUSE (20240207 -> 20240404) fwupd (1.9.15 -> 1.9.16) gnutls (3.8.4 -> 3.8.5) gvfs java-21-openjdk libX11 (1.8.8 -> 1.8.9) libproxy-backend (0.5.4 -> 0.5.5) libproxy-client (0.5.4 -> 0.5.5) mutter oath-toolkit (2.6.8 -> 2.6.11) openssh passt (20240220.1e6f92b -> 20240405.954589b) pixman plasma6-openSUSE python-gobject (3.48.1 -> 3.48.2) qt6-base (6.6.3 -> 6.7.0) qt6-declarative (6.6.3 -> 6.7.0) qt6-imageformats (6.6.3 -> 6.7.0) qt6-multimedia (6.6.3 -> 6.7.0) qt6-positioning (6.6.3 -> 6.7.0) qt6-qt5compat (6.6.3 -> 6.7.0) qt6-quick3d (6.6.3 -> 6.7.0) qt6-quicktimeline (6.6.3 -> 6.7.0) qt6-sensors (6.6.3 -> 6.7.0) qt6-shadertools (6.6.3 -> 6.7.0) qt6-speech (6.6.3 -> 6.7.0) qt6-svg (6.6.3 -> 6.7.0) qt6-tools (6.6.3 -> 6.7.0) qt6-translations (6.6.3 -> 6.7.0) qt6-virtualkeyboard (6.6.3 -> 6.7.0) qt6-wayland (6.6.3 -> 6.7.0) qt6-webchannel (6.6.3 -> 6.7.0) qt6-webengine (6.6.3 -> 6.7.0) qt6-webview (6.6.3 -> 6.7.0) sdbootutil (1+git20240321.04bfbac -> 1+git20240408.49e4021) xfsprogs yast2-bootloader (5.0.7 -> 5.0.8) yast2-installation (5.0.7 -> 5.0.8) yast2-perl-bindings (5.0.2 -> 5.0.4) yast2-trans (84.87.20240331.90b1d91d29 -> 84.87.20240407.b46e9ca4fd) === Details === ==== MicroOS-release ==== Version update (20240407 -> 20240409) Subpackages: MicroOS-release-appliance MicroOS-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== branding-openSUSE ==== Version update (84.87.20230227 -> 84.87.20240405) Subpackages: grub2-branding-openSUSE libreoffice-branding-openSUSE plymouth-branding-openSUSE wallpaper-branding-openSUSE yast2-qt-branding-openSUSE - Use png for wallpapers for Tumbleweed - SLES seems to be using png - Using a compat symlink wallpapers/openSUSEdefault-> wallpapers/SLEdefault allows running certain apps without rebuild. Such as cockpit. - Use optipng -o5 to compress files (has to be reflected in spec) - Bump date ==== distribution-logos-openSUSE ==== Version update (20240207 -> 20240404) Subpackages: distribution-logos-openSUSE-MicroOS distribution-logos-openSUSE-icons - Update to version 20240404: * Turn apple-touch-icon into round square ones * SLES Compatability supply apple-touch-icon for Leap, LeapMicro, TW * Delete dist/package directory * fix source mismatch with package name ==== fwupd ==== Version update (1.9.15 -> 1.9.16) Subpackages: fwupd-bash-completion fwupd-lang libfwupd2 typelib-1_0-Fwupd-2_0 - Update to version 1.9.16: + This release adds the following features: - Prefer zstd over xz for metadata. - Relicense a few remaining plugin files to LGPL-2.1+. + This release fixes the following bugs: - Correctly record UEFI success if adding ESRT nodes. - Defer the DP Aux MST scanning on hotplug to workaround a kernel bug. - Do not do the post-update version check if the device needs-reboot. - Fix a fastboot warning when loading device. - Fix a possible warning in fwupdmgr when excluding releases. - Fix a qsi-dock warning when writing chunks. - Ignore attribute-changed to work around a regression in macOS. - Ignore ZFS zvols when finding the default ESP. - Mark Pluton TPMs as part of the main CPU. - Put the fwupd-efi verbose debugging in the journal. - Recognize zfsbootmenu in ESP detection heuristic. + This release adds support for the following hardware: - Acer T34 and U33 docks. - Qualcomm Series 5 Gen 1 and Gen 2 and Series 3 Gen 1 and Gen 2 devices. - Several Puya SPI chips. - VIA VL822 C0. ==== gnutls ==== Version update (3.8.4 -> 3.8.5) - Update to 3.8.5: * libgnutls: Due to majority of usages and implementations of RSA decryption with PKCS#1 v1.5 padding being incorrect, leaving them vulnerable to Marvin attack, the RSAES-PKCS1-v1_5 is being deprecated (encryption and decryption) and will be disabled in the future. A new option 'allow-rsa-pkcs1-encrypt' has been added into the system-wide library configuration which allows to enable/disable the RSAES-PKCS1-v1_5. Currently, the RSAES-PKCS1-v1_5 is enabled by default. * libgnutls: Added support for RIPEMD160 and PBES1-DES-SHA1 for backward compatibility with GCR. * libgnutls: A couple of memory related issues have been fixed in RSA PKCS#1 v1.5 decryption error handling and deterministic ECDSA with earlier versions of GMP. These were a regression introduced in the 3.8.4 release. See #1535 and !1827. * build: Fixed a bug where building gnutls statically failed due to a duplicate definition of nettle_rsa_compute_root_tr(). * API and ABI modifications: - GNUTLS_PKCS_PBES1_DES_SHA1: New enum member of gnutls_pkcs_encrypt_flags_t * Rebase patches: - gnutls-FIPS-TLS_KDF_selftest.patch - gnutls-FIPS-140-3-references.patch ==== gvfs ==== Subpackages: gvfs-backend-afc gvfs-backend-goa gvfs-backend-samba gvfs-backends gvfs-fuse gvfs-lang - Move the recently added onedrive provider to the backend-goa subpackage: onedrive support is integrated into the g-o-a provider. ==== java-21-openjdk ==== Subpackages: java-21-openjdk-headless - Added patch: * reproducible-jlink.patch + make the timestamp in jmods reproducible ==== libX11 ==== Version update (1.8.8 -> 1.8.9) Subpackages: libX11-6 libX11-data libX11-xcb1 - Update to 1.8.9 * Fix regressions introduced in 1.8.8 (!245, !248) - this includes reverting for now the previous "Fix XIM input sometimes jumbled (#198, !236)" - supersedes * U_0001-xlibi18n-restore-parse_line1-for-WIN32-builds.patch * U_0002-Revert-imDefLkup-Commit-first-info-in-XimCommitInfo.patch * U_0003-Revert-ximcp-Unmark-to-fabricate-key-events-with-XKe.patch - U_0001-xlibi18n-restore-parse_line1-for-WIN32-builds.patch U_0002-Revert-imDefLkup-Commit-first-info-in-XimCommitInfo.patch U_0003-Revert-ximcp-Unmark-to-fabricate-key-events-with-XKe.patch * fix regressions in 1.8.8 (issues #204, #205, #206, #207, #208) ==== libproxy-backend ==== Version update (0.5.4 -> 0.5.5) - Update to version 0.5.5: + Windows: Try all configured proxy resolution types. + Cleanup curl. + Add release option. + Expose missing functions in symbol map. + Fix crash during unload by. + Log debug instead of warning on wpad pac failure. + Fix refcounting in px_proxy_factory_copy. + symver: Fix symbol map to be a valid tree. + Fix free function for pxProxyFactory type. + CodeQL badge and updated repology. + meson: Don't build OSX plugin on iOS. ==== libproxy-client ==== Version update (0.5.4 -> 0.5.5) - Update to version 0.5.5: + Windows: Try all configured proxy resolution types. + Cleanup curl. + Add release option. + Expose missing functions in symbol map. + Fix crash during unload by. + Log debug instead of warning on wpad pac failure. + Fix refcounting in px_proxy_factory_copy. + symver: Fix symbol map to be a valid tree. + Fix free function for pxProxyFactory type. + CodeQL badge and updated repology. + meson: Don't build OSX plugin on iOS. ==== mutter ==== Subpackages: mutter-lang - Add mutter-fix-front-buffer-lock.patch: Fix front buffer lock error by an unnecessary ensure_fb_id call (glgo#gnome/mutter!3674, bsc#1222409). ==== oath-toolkit ==== Version update (2.6.8 -> 2.6.11) - version update to 2.6.11 * liboath: Handle invalid base32 encoded secrets. Fixes: #41. * Various build fixes including updated gnulib files. * Improve compatibility with recent libxmlsec. ==== openssh ==== Subpackages: openssh-clients openssh-common openssh-server - Add missing bugzilla/CVE references to the changelog - Add patch from SLE which was missing in Factory: * Mon Jun 7 20:54:09 UTC 2021 - Hans Petter Jansson - Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which attempts to mitigate instances of secrets lingering in memory after a session exits. (bsc#1213004 bsc#1213008) - Rebase patch: * openssh-6.6p1-privsep-selinux.patch ==== passt ==== Version update (20240220.1e6f92b -> 20240405.954589b) Subpackages: passt-selinux - spec: Install separate apparmor profile for `pasta` (bsc#1221840). - spec: Override symlinks with hard links for apparmor profiles to take effect. (bsc#1221840) (https://github.com/containers/buildah/issues/5440) - Update to version 20240405.954589b: * netlink: Ignore routes to link-local addresses for selecting interface * util: Add helper to return name of address family * netlink: Adjust interface index inside copied nexthop objects too * apparmor: Fix access to procfs namespace entries in pasta's abstraction * apparmor: Expand scope of @{run}/user access, allow writing PID files too * apparmor: Add mount rule with explicit, empty source in passt abstraction * README.md: Alpine, Guix and OpenSUSE now have packages for passt - New upstream release 20240326.4988e2b * tcp: Unconditionally force ACK for all !SYN, !RST packets * tcp: Never automatically add the ACK flag to RST packets * tcp: Rearrange logic for setting ACK flag in tcp_send_flag() * tcp: Split handling of DUP_ACK from ACK * util: fix confusion between offset in the iovec array and in the entry * netlink: Fix selection of template interface * netlink: Fix handling of NLMSG_DONE in nl_route_dup() ==== pixman ==== - a64-neon is an aarch64 feature, not armv6/7 ==== plasma6-openSUSE ==== Subpackages: plasma6-branding-openSUSE plasma6-sddm-theme-openSUSE plasma6-theme-openSUSE - Modify sddmtheme.diff to change the extension of the openSUSE branding wallpaper from jpg to png since the extension was changed in TW (boo#1222546) - Require the same wallpaper-branding version as used when building to make sure the png file exists ==== python-gobject ==== Version update (3.48.1 -> 3.48.2) Subpackages: python311-gobject python311-gobject-Gdk python311-gobject-cairo - Update to version 3.48.2: + Fix support for fundamental (primitive) types, such as Gst.Bitmask. ==== qt6-base ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6Concurrent6 libQt6Core6 libQt6DBus6 libQt6Gui6 libQt6Network6 libQt6OpenGL6 libQt6OpenGLWidgets6 libQt6PrintSupport6 libQt6Sql6 libQt6Test6 libQt6Widgets6 libQt6Xml6 qt6-network-tls qt6-networkinformation-glib qt6-networkinformation-nm qt6-platformtheme-gtk3 qt6-printsupport-cups qt6-sql-sqlite - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released - Replace 0001-Tell-the-truth-about-private-API.patch with upstream change: * 0001-CMake-ELF-allow-using-Qt-s-full-version-number-in-th.patch - Add upstream fix (QTBUG-123937): * fix_builds_with_Werror.patch ==== qt6-declarative ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6LabsAnimation6 libQt6LabsFolderListModel6 libQt6LabsQmlModels6 libQt6LabsSettings6 libQt6LabsSharedImage6 libQt6LabsWavefrontMesh6 libQt6Qml6 libQt6QmlCore6 libQt6QmlLocalStorage6 libQt6QmlModels6 libQt6QmlWorkerScript6 libQt6QmlXmlListModel6 libQt6Quick6 libQt6QuickControls2-6 libQt6QuickControls2Impl6 libQt6QuickDialogs2-6 libQt6QuickDialogs2QuickImpl6 libQt6QuickDialogs2Utils6 libQt6QuickEffects6 libQt6QuickLayouts6 libQt6QuickParticles6 libQt6QuickShapes6 libQt6QuickTemplates2-6 libQt6QuickTest6 libQt6QuickWidgets6 qt6-declarative-imports - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released - Update build constraints ==== qt6-imageformats ==== Version update (6.6.3 -> 6.7.0) - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-multimedia ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6Multimedia6 libQt6MultimediaQuick6 libQt6Quick3DSpatialAudio6 libQt6SpatialAudio6 qt6-multimedia-imports - Add upstream change to restore binary compatibility (QTBUG-123997): * 0001-Fix-ABI-breakage-wrt-QAudioSink-Source-stateChanged-.patch - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-positioning ==== Version update (6.6.3 -> 6.7.0) - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-qt5compat ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6Core5Compat6 qt6-qt5compat-imports - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-quick3d ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6Quick3D6 libQt6Quick3DAssetImport6 libQt6Quick3DAssetUtils6 libQt6Quick3DEffects6 libQt6Quick3DHelpers6 libQt6Quick3DHelpersImpl6 libQt6Quick3DParticleEffects6 libQt6Quick3DParticles6 libQt6Quick3DRuntimeRender6 libQt6Quick3DUtils6 qt6-quick3d-imports - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-quicktimeline ==== Version update (6.6.3 -> 6.7.0) - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-sensors ==== Version update (6.6.3 -> 6.7.0) - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-shadertools ==== Version update (6.6.3 -> 6.7.0) - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-speech ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6TextToSpeech6 qt6-texttospeech - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-svg ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6Svg6 libQt6SvgWidgets6 - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-tools ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6Designer6 libQt6UiTools6 qt6-tools-qdbus - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-translations ==== Version update (6.6.3 -> 6.7.0) - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-virtualkeyboard ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6HunspellInputMethod6 libQt6VirtualKeyboard6 qt6-virtualkeyboard-imports - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-wayland ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6WaylandClient6 libQt6WaylandCompositor6 libQt6WaylandEglClientHwIntegration6 libQt6WaylandEglCompositorHwIntegration6 libQt6WlShellIntegration6 - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-webchannel ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6WebChannel6 libQt6WebChannelQuick6 qt6-webchannel-imports - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== qt6-webengine ==== Version update (6.6.3 -> 6.7.0) Subpackages: libQt6WebEngineCore6 libQt6WebEngineQuick6 libQt6WebEngineWidgets6 qt6-webengine-imports - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released - Update rtc-dont-use-h264.patch ==== qt6-webview ==== Version update (6.6.3 -> 6.7.0) - Update to 6.7.0: * https://www.qt.io/blog/qt-6.7-released ==== sdbootutil ==== Version update (1+git20240321.04bfbac -> 1+git20240408.49e4021) Subpackages: sdbootutil-rpm-scriptlets sdbootutil-snapper - Update to version 1+git20240408.49e4021: * Update requirements * Measure manually initrd if pcrlock fails * Set SYSTEMD_LOG_LEVEL if verbose * Only error out on empty machine-id when actually used * feat: add basic boot assessment * fix: use new os-release and machine-id files * dracut call: --add-device belongs to --sysroot * Make sdbootutil usable with no snapshot Systems ==== xfsprogs ==== - Switch to %autosetup in order to build with older rpm build ==== yast2-bootloader ==== Version update (5.0.7 -> 5.0.8) - Follow up of previous change to use even more precise wording (bsc#1219989,bsc#1222353) - 5.0.8 ==== yast2-installation ==== Version update (5.0.7 -> 5.0.8) - Adapted call for connecting all discovered NVMe-over-Fabrics subsystems (bsc#1222246). - 5.0.8 ==== yast2-perl-bindings ==== Version update (5.0.2 -> 5.0.4) - Fix downstream build failures caused by the previous change (bsc#1222375) - 5.0.4 - Use UTF-8 for translated texts coming from our Perl code (bsc#1216689), fixing most '?' occurrences in yast2-users. - 5.0.3 ==== yast2-trans ==== Version update (84.87.20240331.90b1d91d29 -> 84.87.20240407.b46e9ca4fd) Subpackages: yast2-trans-cs yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-fr yast2-trans-hu yast2-trans-it yast2-trans-ja yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ru yast2-trans-zh_CN yast2-trans-zh_TW - Update to version 84.87.20240407.b46e9ca4fd: * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Czech) * Translated using Weblate (Slovak) * Translated using Weblate (Dutch) * Translated using Weblate (Japanese) * Translated using Weblate (Catalan) * New POT for text domain 'bootloader'. * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Romanian) * Translated using Weblate (Macedonian) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Macedonian) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian)