Packages changed: MicroOS-release (20241129 -> 20241202) avahi avahi-glib2 cairo container-selinux (2.232.1 -> 2.233.0) file (5.45 -> 5.46) glib2 google-noto-fonts (20240901 -> 20241201) gpgme grub2 libssh (0.10.6 -> 0.11.1) python-gobject python-setuptools qt6-wayland sqlite3 (3.46.1 -> 3.47.1) system-config-printer === Details === ==== MicroOS-release ==== Version update (20241129 -> 20241202) Subpackages: MicroOS-release-appliance MicroOS-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== avahi ==== Subpackages: libavahi-client3 libavahi-common3 libavahi-core7 - Add avahi-CVE-2024-52616.patch: Backporting 1dade81c from upstream: Properly randomize query id of DNS packets. (CVE-2024-52616, bsc#1233420) ==== avahi-glib2 ==== - Add avahi-CVE-2024-52616.patch: Backporting 1dade81c from upstream: Properly randomize query id of DNS packets. (CVE-2024-52616, bsc#1233420) ==== cairo ==== Subpackages: libcairo-gobject2 libcairo-script-interpreter2 libcairo2 - Convert to source service: allows for easier upgrades by the GNOME team. ==== container-selinux ==== Version update (2.232.1 -> 2.233.0) - Update to version 2.233.0: * container_engine_t: small change to allow non root exec in a container * RPM: explicitly list ghosted paths and skip mode verification * container-selinux install on non selinux-policy-targeted systems (#332) * set container_log_t type for /var/log/kube-apiserver * Allow kubelet_t to create a sock file kubelet_var_lib_t * dontaudit spc_t to mmap_zero * Packit: update targets (#330) * container_engine_t: another round of small improvements (#327) * Allow container_device_plugin_t to use the network (#325) * RPM: cleanup changelog (#324) * TMT: Simplify tests ==== file ==== Version update (5.45 -> 5.46) Subpackages: file-magic libmagic1 - Update to 5.46: * Add OFFPOSITIVE * avoid leaking symbols in libmagic * PR/562: jsummers: Search/regex offsets are absolute to the beginning of the file, so adjust them by subtracting the offset that the "use" starts so that we don't double-count it. * PR/543: matshch: bump nbuf so we can get the flags into the buffer. * Add Android elf notes (enh) * Add limit for number of magic warnings allowed * check regex bounds (found by clusterfuzz) - Remove patch file-5.45-type_t.dif now upstream - Port patches * file-4.24-autoconf.dif * file-5.17-option.dif * file-5.18-javacheck.dif * file-5.19-biorad.dif * file-5.19-printf.dif * file-5.19-zip2.0.dif * file-5.22-elf.dif * file-5.28-btrfs-image.dif * file-5.45-type_t.dif * file-secure_getenv.patch - Port patch file-5.45.dif and rename it to file-5.46.dif * Note that our kernel magics do not fit anymore as upstream now has a huge rework and extended features ==== glib2 ==== Subpackages: glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 typelib-1_0-GLib-2_0 typelib-1_0-GModule-2_0 typelib-1_0-GObject-2_0 typelib-1_0-Gio-2_0 - Have the glib2-tools postun trigger exit normally if glib2-compile-schemas can't be run. Fixes error when uninstalling if libgio is uninstalled first (bsc#1231463). ==== google-noto-fonts ==== Version update (20240901 -> 20241201) Subpackages: google-noto-sans-fonts google-noto-sans-math-fonts - Update to 20241201 * Base Noto Sans and Noto Serif is updated ==== gpgme ==== Subpackages: libgpgme11 libgpgmepp6 python311-gpg - Add gpgme-fix-python-install.patch: Fix the installation of the python bindings without having to move them around manually. ==== grub2 ==== Subpackages: grub2-common grub2-i386-pc grub2-snapper-plugin grub2-x86_64-efi - Support s390x Secure Execution (jsc#PED-9531) * grub2-s390x-secure-execution-support.patch - Update grub2-s390x-set-hostonly.patch to add the patch header and the description ==== libssh ==== Version update (0.10.6 -> 0.11.1) Subpackages: libssh-config libssh4 - Update to version 0.11.1: * Fixed default TTY modes that are set when stdin is not connected to tty. * Fixed zlib cleanup procedure, which could crash on i386. * Various test fixes improving their stability. * Remove 0001-disable-timeout-test-on-slow-buildsystems.patch to enable slow tests also in s390 s390x ppc64le. - Set BuildArch: noarch for the config package as it only ships configuration files. - Update to version 0.11.0 https://www.libssh.org/2024/08/08/libssh-0-11-0-release/ - Updated 0001-disable-timeout-test-on-slow-buildsystems.patch - Removed libssh-fix-ipv6-hostname-regression.patch ==== python-gobject ==== Subpackages: python311-gobject python311-gobject-Gdk python311-gobject-cairo - Add python-pygobject provides: help packages to eliminate rpmlint warnings when comparing requrements.txt vs the packages depdency. 'pygobject' is the proper upstream name. ==== python-setuptools ==== - remove duplicated "uses_network" skip ==== qt6-wayland ==== Subpackages: libQt6WaylandClient6 libQt6WaylandCompositor6 libQt6WaylandEglClientHwIntegration6 libQt6WaylandEglCompositorHwIntegration6 libQt6WlShellIntegration6 - Add patch to fix crash when unplugging a graphics tablet: * 0001-client-Redo-management-of-tablet-object-proxies.patch ==== sqlite3 ==== Version update (3.46.1 -> 3.47.1) - Update to release 3.47.1: * Fix the makefiles so that they once again honored DESTDIR for the "install" target. * Add the SQLITE_IOCAP_SUBPAGE_READ capability to the VFS, to work around issues on some non-standard VFSes caused by making SQLITE_DIRECT_OVERFLOW_READ the default in version 3.45.0. * Fix incorrect answers to certain obscure IN queries caused by new query optimizations added in the 3.47.0 release. * Other minor bug fixes. - Update to release 3.47.0: * Allow arbitrary expressions in the second argument to the RAISE function. * If the RHS of the ->> operator is negative, then access array elements counting from the right. * Fix a problem with rolling back hot journal files in the seldom-used unix-dotfile VFS. * FTS5 tables can now be dropped even if they use a non-standard tokenizer that has not been registered. * Fix the group_concat() aggregate function so that it returns an empty string, not a NULL, if it receives a single input value which is an empty string. * Enhance the generate_series() table-valued function so that it is able to recognize and use constraints on its output value. Preupdate hooks now recognize when a column added by ALTER TABLE ADD COLUMN has a non-null default value. * Improved reuse of subqueries associated with the IN operator, especially when the IN operator has been duplicated due to predicate push-down. * Use a Bloom filter on subqueries on the right-hand side of the IN operator, in cases where that seems likely to improve performance. * Ensure that queries like "SELECT func(a) FROM tab GROUP BY 1" only invoke the func() function once per row. * No attempt is made to create automatic indexes on a column that is known to be non-selective because of its use in other indexes that have been analyzed. * Adjustments to the query planner so that it produces better plans for star queries with a large number of dimension tables. * Add the "order-by-subquery" optimization, that seeks to disable sort operations in outer queries if the desired order is obtained naturally due to ORDER BY clauses in subqueries. * The "indexed-subtype-expr" optimization strives to use expressions that are part of an index rather than recomputing the expression based on table values, as long as the query planner can prove that the subtype of the expression will never be used. * Miscellaneous coding tweaks for faster runtimes. * Add the experimental sqlite3_rsync program. * Add extension functions median(), percentile(), percentile_cont(), and percentile_disc() to the CLI. * Add the .www dot-command to the CLI. * The sqlite3_analyzer utility now provides a break-out of statistics for WITHOUT ROWID tables. * The sqldiff utility avoids creating an empty database if its second argument does not exist. * Enhance the sqlite_dbpage table-valued function such that INSERT can be used to increase or decrease the size of the database file. * SQLite no longer makes any use of the "long double" data type, as hardware support for long double is becoming less common and long double creates challenges for some compiler tool chains. Instead, SQLite uses Dekker's algorithm when extended precision is needed. * The TCL Interface for SQLite supports TCL9. Everything probably still works for TCL 8.5 and later, though this is not guaranteed. Users are encouraged to upgrade to TCL9. * Fix a corruption-causing bug in the JavaScript "opfs" VFS. Correct "mode=ro" handling for the "opfs" VFS. Work around a couple of browser-specific OPFS quirks. * Add the fts5_tokenizer_v2 API and the locale=1 option, for creating custom locale-aware tokenizers and fts5 tables that may take advantage of them. * Add the contentless_unindexed=1 option, for creating contentless fts5 tables that store the values of any UNINDEXED columns persistently in the database. * Allow an FTS5 table to be dropped even if it uses a custom tokenizer whose implementation is not available. ==== system-config-printer ==== Subpackages: python3-cupshelpers system-config-printer-common system-config-printer-dbus-service udev-configure-printer - Add installation-root-dir-from-setup.patch gh#OpenPrinting/system-config-printer#361 to fix cupshelpers installation.