Packages changed: Mesa Mesa-drivers MicroOS-release (20240820 -> 20240825) NetworkManager aaa_base (84.87+git20240809.5d13eb4 -> 84.87+git20240821.fbabe1d) apparmor audit-secondary bluez (5.71 -> 5.77) cockpit (321 -> 322) dbus-1 dracut (059+suse.636.g9a22b6b0 -> 059+suse.639.g49307b2a) ffmpeg-7 fwupd (1.9.23 -> 1.9.24) gnome-desktop (44.0 -> 44.1) gstreamer (1.24.6 -> 1.24.7) gstreamer-plugins-bad (1.24.6 -> 1.24.7) gstreamer-plugins-base (1.24.6 -> 1.24.7) kmod (32 -> 33) libapparmor librepo (1.17.0 -> 1.18.1) libtirpc (1.3.4 -> 1.3.5) openjpeg2 podman (5.2.1 -> 5.2.2) samba (4.20.2+git.350.4cfcde9cdb -> 4.20.4+git.356.d4a5fa2a818) sdbootutil (1+git20240812.ee2298f -> 1+git20240822.bc7e06b) selinux-policy (20240816 -> 20240823) systemd-presets-common-SUSE === Details === ==== Mesa ==== Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - fix build with current rust-bindgen * u_fix_rust_bindgen.patch ==== Mesa-drivers ==== Subpackages: Mesa-dri Mesa-gallium - fix build with current rust-bindgen * u_fix_rust_bindgen.patch ==== MicroOS-release ==== Version update (20240820 -> 20240825) Subpackages: MicroOS-release-appliance MicroOS-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== NetworkManager ==== Subpackages: NetworkManager-bluetooth NetworkManager-wwan libnm0 typelib-1_0-NM-1_0 - Add NetworkManager-dont-enforce-ip-cleanup-on-device-deactivating.patch: device: don't enforce IP cleanup on deactivating state (bsc#1228154, glfd#NetworkManager/NetworkManager!2016). ==== aaa_base ==== Version update (84.87+git20240809.5d13eb4 -> 84.87+git20240821.fbabe1d) - Update to version 84.87+git20240821.fbabe1d: * Add helper service for soft-reboot ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-parser apparmor-profiles apparmor-utils python3-apparmor - remove dependency on /usr/bin/python3 using %python3_fix_shebang macro, [bsc#1212476] ==== audit-secondary ==== Subpackages: audit python3-audit system-group-audit - Remove rcaudit symlink [jsc#PED-266] ==== bluez ==== Version update (5.71 -> 5.77) Subpackages: bluez-auto-enable-devices bluez-cups libbluetooth3 - add bluez-no-cups-devel-buildreq.patch to avoid cups-devel buildrequires which results in an excessive build loop - update to 5.77: * Fix issue with storing and handling connection parameters. * Fix issue with handling device that are marked as temporary. * Fix issue with HID and special handling for non-keyboards. * Fix issue with BR/EDR not support when discoverable is off. * Add support for initial implementation of ASHA profile. * Fix issue with broadcast channel location and stream capabilities. * Fix issue with handling BIS management and synchronization. * Fix issue with handling Extended Advertising. * Fix issue with UserspaceHID and replay structures. * Add support for providing PPCP characteristic. * Fix issue with build system and header inclusion. * Fix issue with not enabling Wideband Speech when available. * Fix issue with UserspaceHID and Bluetooth Classic devices. * Fix issue with checking for services being connected. * Fix issue with GATT client connection creation. * Fix issue with OBEX and small file transfers. * Fix issue with handling pairing with Apple AirPods. * Fix issue with BAP and setting up broadcast source. * Fix issue with BAP and register all endpoints. * Fix issue with BAP and missing metadata property. * Fix issue with BAP and not handling out of order responses. * Fix issue with BAP and attempting to set device as connectable. * Add support for CCP plugin for call control profile. * Fix issue with BAP and handling stream IO linking. * Fix issue with BAP and setup of multiple streams per endpoint. * Fix issue with AVDTP and potential incorrect transaction label. * Fix issue with A2DP and handling crash on suspend. * Fix issue with GATT database and an invalid pointer. * Add support for AICS service. - drop bluez-test-2to3.diff, bluez-cups-libexec.patch: upstream has different solutions for ages, use those instead - drop fix-link-key-address-type.patch, fix-a2dp-suspend-crash.patch: upstream - add fix-a2dp-suspend-crash.patch (Issue #701 in upstream) ==== cockpit ==== Version update (321 -> 322) Subpackages: cockpit-bridge cockpit-networkmanager cockpit-packagekit cockpit-system cockpit-ws - remove requires on pam_oath completely. It will be re-introduced later when it works with optional enrollment - add 0005-cockpit-ws-user-remove-default-deps.patch (bsc#1229146) - new version 322: * shell: Deprecate host switcher * files: Permissions column in details view - suse_docs.patch: refreshed For details, see https://cockpit-project.org/blog/cockpit-322.html ==== dbus-1 ==== Subpackages: dbus-1-common dbus-1-daemon dbus-1-tools libdbus-1-3 - Drop feature-suse-auto-socket-target-wants.patch and use the filesystem instead, this works more consistenly with dbus-broker - Add RH/Fedora compat provides dbus-libs to library package needed by Mullvad - Add feature-suse-auto-socket-target-wants.patch: move from static enable symlinks to systemd created symlinks otherwise it can't be enabled by systemd-presets-common-SUSE - Update feature-suse-refuse-manual-start-stop.patch: prevent killing the socket or user service aswell - common: dbus.socket still gets used after migration to dbus-broker so keep pre/post/postun scriptlets - Explicitly require /usr/bin/cmp for the post scripts instead of diffutils: allow other implementations like busybox-diffutils to be acceptable. - No longer start or offer starting dbus as a system service dbus-broker will be the only supported system dbus. Although the existing daemon will stay as some things (gdm) require dbus-run-session ==== dracut ==== Version update (059+suse.636.g9a22b6b0 -> 059+suse.639.g49307b2a) Subpackages: dracut-ima - Update to version 059+suse.639.g49307b2a: * feat(systemd*): include systemd config files from /usr/lib/systemd (bsc#1228398) ==== ffmpeg-7 ==== Subpackages: libavcodec61 libavfilter10 libavformat61 libavutil59 libpostproc58 libswresample5 libswscale8 - Add 0001-libavcodec-arm-mlpdsp_armv5te-fix-label-format-to-wo.patch to resolve build failure on armv7 [boo#1229338] ==== fwupd ==== Version update (1.9.23 -> 1.9.24) Subpackages: libfwupd2 typelib-1_0-Fwupd-2_0 - Update to version 1.9.24: + This release fixes the following bugs: - Add support for capsule on disk for Dell systems - Do not re-use the connection cache to fix Redfish BMC restart - Exclude known recovery partitions when choosing an ESP volume - Fix the VLI usb3 private flag registration + This release adds support for the following hardware: - More Mediatek scaler devices - Parade USB hubs ==== gnome-desktop ==== Version update (44.0 -> 44.1) Subpackages: libgnome-desktop-3-20 libgnome-desktop-3_0-common libgnome-desktop-4-2 typelib-1_0-GnomeBG-4_0 typelib-1_0-GnomeDesktop-4_0 - Update to version 44.1: + Fix compatibility with muslc + Fix GNOME_DESKTOP_IS_THUMBNAIL_FACTORY + Update default Indic input methods + Use ibus-chewing as the default input source for zh_TW + Updated translations. - Rebase gnome-desktop-switch-Japanese-default-input-to-mozc.patch ==== gstreamer ==== Version update (1.24.6 -> 1.24.7) Subpackages: libgstreamer-1_0-0 typelib-1_0-Gst-1_0 - Update to version 1.24.7: + Highlighted bugfixes: - Fix APE and Musepack audio file and GIF playback with FFmpeg 7.0 - playbin3: Fix potential deadlock with multiple playbin3s with glimagesink used in parallel - qt6: various qmlgl6src and qmlgl6sink fixes and improvements - rtspsrc: expose property to force usage of non-compliant setup URLs for RTSP servers where the automatic fallback doesn't work - urisourcebin: gapless playback and program switching fixes - v4l2: various fixes - va: Fix potential deadlock with multiple va elements used in parallel - meson: option to disable gst-full for static-library build configurations that do not need this - Various bug fixes, memory leak fixes, and other stability and reliability improvements + gstreamer: - bin: Don't keep the object lock while setting a GstContext when handling NEED_CONTEXT - core: Log pad name, not just the pointer ==== gstreamer-plugins-bad ==== Version update (1.24.6 -> 1.24.7) Subpackages: libgstadaptivedemux-1_0-0 libgstanalytics-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstcuda-1_0-0 libgstinsertbin-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstmse-1_0-0 libgstphotography-1_0-0 libgstplay-1_0-0 libgstplayer-1_0-0 libgstsctp-1_0-0 libgsttranscoder-1_0-0 libgsturidownloader-1_0-0 libgstva-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 libgstwebrtcnice-1_0-0 - Update to version 1.24.7: + aom: av1enc: restrict allowed input width and height + h264parse: - bypass check for length_size_minus_one - Reject FD received before SPS + msdk: replace strcmp with g_strcmp0 + msdkvc1dec crashes (segfault) + rsvgoverlay: add debug category + va: - don't use GST_ELEMENT_WARNING in set_context() vmethod to fix potential deadlock - deadlock when playing two videos at once + webrtc: Add missing G_BEGIN/END_DECLS in header for C++ + wpe: initialize threading.ready before reading it - Drop 85b4fbf40b1d53a4141941abf70d2d4d83eb140e.patch: Fixed upstream. ==== gstreamer-plugins-base ==== Version update (1.24.6 -> 1.24.7) Subpackages: libgstallocators-1_0-0 libgstapp-1_0-0 libgstaudio-1_0-0 libgstfft-1_0-0 libgstgl-1_0-0 libgstpbutils-1_0-0 libgstriff-1_0-0 libgstrtp-1_0-0 libgstrtsp-1_0-0 libgstsdp-1_0-0 libgsttag-1_0-0 libgstvideo-1_0-0 - Update to version 1.24.7: + pbutils: descriptions: use subsampling factor to get YUV subsampling + rtspconnection: Handle invalid argument properly + urisourcebin: - Actually drop EOS on old-school pad switch - Don't hold lock when emitting about-to-finish + gst-launch deadlock with two playbin3s + xvimagesink: Fix crash in pool on error - Add gst-plugins-base-decodebin3-collection-identity-check.patch: - Fixes a assertion causing crash on track change. Upstream bug: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3742 ==== kmod ==== Version update (32 -> 33) Subpackages: libkmod2 - Update to release 33 * Add weak dependencies * Stop parsing .alias files from modprobe.d directories - Delete no-stylesheet-download.patch (merged) - Add 0001-testsuite-fix-path-for-test-user.patch ==== libapparmor ==== - remove dependency on /usr/bin/python3 using %python3_fix_shebang macro, [bsc#1212476] ==== librepo ==== Version update (1.17.0 -> 1.18.1) - update to 1.18.1: * Use rpm-sequoia on RHEL 10+ * gpg: Check is_selinux_enabled() before trying to label * spec: Correct setting -DENABLE_SELINUX cmake argument * tests: Adapt to CURL without NTLM support * Fix a memory leak in select_next_target() * Fix memory leaks when using zchunk - update to 1.18.0: * API: Add LRO_USERNAME and LRO_PASSWORD options - update to 1.17.2: * Add a private dependency on zck to librepo.pc if zchunk support is enabled * Hash cache: Improved work with extended file attributes * Improve performance of large number of package downloads * Fix error handling, Fix examples and build them - update to 1.17.1: * gpg_gpgme.c: fix build errors with older gcc * Fix some compiler warnings * Change header files to match a configured ABI regarding a zchunk support * Fix building zchunk code if zchunk is enabled ==== libtirpc ==== Version update (1.3.4 -> 1.3.5) Subpackages: libtirpc-netconfig libtirpc3 - update to 1.3.5: * Try using a new abstract address when connecting to rpcbind * Change local_rpcb() to take a targaddr pointer. * Allow working with abstract AF_UNIX addresses. * rpcb_clnt.c: memory leak in destroy_addr * _rpc_dtablesize: Decrease the value of size. * netconfig: remove tcp6, udp6 on --disable-ipv6 * gssapi: fix rpc_gss_seccreate passed in cred * Revert commit f5b6e6fdb1e6 "gss-api: expose gss major/minor error in authgss_refresh()". ==== openjpeg2 ==== - Make version check for the work around reliable to not silently match Factory/Tumbleweed. - Work around a bug by cmake installing docs into the wrong directory when building for openSUSE Leap 15.5 ==== podman ==== Version update (5.2.1 -> 5.2.2) - Update to version 5.2.2: Bugfixes: * Fixed a bug where rootless Podman could fail to validate the runtime's volume path on systems with a symlinked /home (#23515). Misc: * Updated Buildah to v1.37.2 * Updated the containers/common library to v0.60.2 * Updated the containers/image library to v5.32.2 ==== samba ==== Version update (4.20.2+git.350.4cfcde9cdb -> 4.20.4+git.356.d4a5fa2a818) Subpackages: samba-ad-dc-libs samba-client samba-client-libs samba-libs - Fix a crash when joining offline and 'kerberos method' includes keytab; (bsc#1228732). - Update to 4.20.4 * --version-* options are still not ergonomic, and they reject tilde characters; (bso#15673). - Update to 4.20.3 * Running samba-bgqd a a standalone systemd service does not work; (bso#15683). * When claims enabled with heimdal kerberos, unable to log on to a Windows computer when user account need to change their own password; (bso#15655). * Invalid client warning about command line passwords; (bso#15671). * Version string is truncated in manpages; (bso#15672). * cmdline_burn does not always burn secrets; (bso#15674). * Samba does not parse SDDL found in defaultSecurityDescriptor in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685). * The images don\'t build after the git security release and CentOS 8 Stream is EOL; (bso#15660). * Fix clock skew error message and memory cache clock skew recovery; (bso#15676). * Heimdal ignores _gsskrb5_decapsulate errors in init_sec_context/repl_mutual; (bso#15603). * s4:ldap_server: does not support tls channel bindings for sasl binds; (bso#15621). * CTDB socket output queues may suffer unbounded delays under some special conditions; (bso#15678). ==== sdbootutil ==== Version update (1+git20240812.ee2298f -> 1+git20240822.bc7e06b) Subpackages: sdbootutil-snapper sdbootutil-tukit - Update to version 1+git20240822.bc7e06b: * Hide exit code for set-default-snapshot plugin call ==== selinux-policy ==== Version update (20240816 -> 20240823) Subpackages: selinux-policy-targeted - Update to version 20240823: * Allow rasdaemon write access to sysfs (bsc#1229587) ==== systemd-presets-common-SUSE ==== - Add presets to enable dbus-broker.service for both system and user due to naming socket activation doesn't work directly. - Order .presets file alphabetically via service.