Removed rpms ============ - mozilla-nss-certs Added rpms ========== - p11-kit-nss-trust Package Source Changes ====================== expat + * (CVE-2022-43680, bsc#1204708) use-after free caused by overeager + destruction of a shared DTD in XML_ExternalEntityParserCreate in + out-of-memory situations + - Added patch expat-CVE-2022-43680.patch + +- Security fix: gnutls +- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299] + * Fixes a SIGILL termination at the verzoupper instruction when + trying to run GnuTLS on a Linux kernel with the noxsave command + line parameter set. Relevant mostly for virutal systems. + * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282 + * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch + kernel-firmware -- Fix missing aliases for qlogic (bsc#1200889); - update other aliases as well from the latest SLE15-SP4 kernels +- Update to version 20221031 (git commit 8bb75626e9dd): + * linux-firmware: Add firmware for Cirrus CS35L41 on new ASUS Laptop + * iwlwifi: add new PNVM binaries from core74-44 release + * iwlwifi: add new FWs from core69-81 release + * qcom: update venus firmware files for VPU-2.0 + * qcom: remove split SC7280 venus firmware images + * qcom: update venus firmware file for v5.4 + * qcom: replace split SC7180 venus firmware images with symlink + * rtw89: 8852b: update fw to v0.27.32.1 + * rtlwifi: update firmware for rtl8192eu to v35.7 + * rtlwifi: Add firmware v4.0 for RTL8188FU + * i915: Add HuC 7.10.3 for DG2 + * linux-firmware: Add firmware for Cirrus CS35L41 on ASUS Laptops + * linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops + * linux-firmware: Add firmware for Cirrus CS35L41 on HP Laptops +- Drop the CS35L41 firmware tarball that has been merged +- Drop obsoleted cirrus-WHENCE-update.patch + +- Update to version 20221017 (git commit 48407ffd7adb): + * cnm: update chips&media wave521c firmware. + * brcm: add symlink for Pi Zero 2 W NVRAM file + * rtw89: 8852b: add initial fw v0.27.32.0 + * iwlwifi: add new FWs from core72-129 release + * iwlwifi: update 9000-family firmwares to core72-129 + * rtl_bt: Update RTL8852C BT USB firmware to 0xD5B8_A40A + * amdgpu: update GC 10.3.6 RLC firmware + * amdgpu: update GC 10.3.7 RLC firmware + * amdgpu: update Yellow Carp RLC firmware + * amdgpu: update Beige Goby RLC firmware + * amdgpu: update Dimgrey Cavefish RLC firmware + * amdgpu: update Navy Flounder RLC firmware + * amdgpu: update Sienna Cichlid RLC firmware + * mediatek: Update mt8195 SOF firmware to v0.4.1 + * qcom: add squashed version of a530 zap shader + * rtw89: 8852c: update fw to v0.27.56.1 + * rtw89: 8852c: update fw to v0.27.56.0 + * mediatek: Update mt8186 SCP firmware +- Update Cirrus CS35L41 firmware (bsc#1203699) + cirrus-WHENCE-update.patch +- Update aliases from 6.1-rc1 kernel + +- Apply the same workaround to uncompressed flat package, too + (bsc#1204103) + +- Workaround for update failure of kernel-firmware-qcom package + due to the change from a directory to a symlink (bsc#1204103) + +- Update to version 20220930 (git commit fdf1a6525852): + * linux-firmware: Update AMD cpu microcode + * mediatek: mt8195: Update scp.img to v2.0.11956 + * mediatek: Add new mt8195 SOF firmware + * mediatek: Update mt8186 SOF firmware to v0.2.1 + * linux-firmware: update firmware for mediatek bluetooth chip (MT7922) + * rtl_bt: Update RTL8852A BT USB firmware to 0xD9B8_8207 + * linux-firmware: update firmware for mediatek bluetooth chip (MT7921) + * linux-firmware: update firmware for MT7922 WiFi device + * linux-firmware: update firmware for MT7921 WiFi device + * cxgb4: Update firmware to revision 1.27.0.0 (jsc#PED-1501) + * i915: Add versionless HuC files for current platforms + * i915: Add GuC v70.5.1 for DG1, DG2, TGL and ADL-P + * qca: Update firmware files for BT chip WCN3991. + * Removing crnv32 + * amdgpu: update yellow carp DMCUB firmware + * amdgpu: add firmware for VCN 3.1.2 IP block + * amdgpu: add firmware for SDMA 5.2.6 IP block + * amdgpu: add firmware for PSP 13.0.5 IP block + * amdgpu: add firmware for GC 10.3.6 IP block + * amdgpu: add firmware for DCN 3.1.5 IP block + * qcom: rename Lenovo ThinkPad X13s firmware paths + * rtw89: 8852c: update fw to v0.27.42.0 + * rtw89: 8852c: update fw to v0.27.36.0 +- Fix install-split.sh for dealing with a symlink of directory + +- Update to version 20220902 (git commit 2f2f0181581d): + * Mellanox: Add new mlxsw_spectrum firmware xx.2010.3146 + * amdgpu: update beige goby VCN firmware + * amdgpu: update dimgrey cavefish VCN firmware + * amdgpu: update navy flounder VCN firmware + * amdgpu: update sienna cichlid VCN firmware (bsc#1202707) + * rtl_bt: Update RTL8852C BT USB firmware to 0xDFB8_5A33 + * mediatek: reference the LICENCE file for MediaTek firmwares + * mediatek: Add new mt8186 SOF firmware + * ice: Update package to 1.3.30.0 + * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00438 + * brcm: Add nvram for Lenovo Yoga Tablet 2 830F/L and 1050F/L tablets + * brcm: Add nvram for the Xiaomi Mi Pad 2 tablet + * brcm: Add nvram for the Asus TF103C tablet + * Add amd-ucode README file + * qca: Update firmware files for BT chip WCN6750. This commit will update required firmware files for WCN6750. + * amdgpu: Update Yellow Carp VCN firmware + * qcom: Add firmware for Lenovo ThinkPad X13s +- Update aliases from 6.0-rc +- Update topics list for mtk-sof + +- Update to version 20220804 (git commit e6185d5197fd): + * linux-firmware: Update firmware file for Intel Bluetooth 9462 + * linux-firmware: Update firmware file for Intel Bluetooth 9462 + * linux-firmware: Update firmware file for Intel Bluetooth 9560 + * linux-firmware: Update firmware file for Intel Bluetooth 9560 + * linux-firmware: Update firmware file for Intel Bluetooth AX201 + * linux-firmware: Update firmware file for Intel Bluetooth AX201 + * linux-firmware: Update firmware file for Intel Bluetooth AX211 + * linux-firmware: Update firmware file for Intel Bluetooth AX211 + * linux-firmware: Update firmware file for Intel Bluetooth AX210 + * linux-firmware: Update firmware file for Intel Bluetooth AX200 + * linux-firmware: Update firmware file for Intel Bluetooth AX201 + * Mellanox: Add new mlxsw_spectrum firmware xx.2010.3020 + * linux-firmware: Add firmware for Cirrus CS35L41 + * i915: Add GuC v70.4.1 for DG2 + * i915: Add DMC v2.07 for DG2 + * amdgpu partially revert "amdgpu: update beige goby to release 22.20" + * mediatek: Update mt8183/mt8192/mt8195 SCP firmware + * amdgpu: update renoir to release 22.20 + * amdgpu: update beige goby to release 22.20 + * amdgpu: update yellow carp to release 22.20 + * amdgpu: update dimgrey cavefish to release 22.20 + * amdgpu: update vega20 to release 22.20 + * amdgpu: update vega12 to release 22.20 + * amdgpu: update raven to release 22.20 + * amdgpu: update navy flounder to release 22.20 + * amdgpu: update vega10 to release 22.20 + * amdgpu: update sienna cichlid to release 22.20 + * amdgpu: update navi14 to release 22.20 + * amdgpu: update green sardine to release 22.20 + * amdgpu: update vangogh to release 22.20 + * amdgpu: update navi12 to release 22.20 + * amdgpu: update navi10 to release 22.20 + * amdgpu: update picasso to release 22.20 + * amdgpu: update aldebaran to release 22.20 + * amdgpu: update psp 13.0.8 TA firmware + * WHENCE: Fix the dangling symlinks fix +- Revert the previous rtw88/rtw8822c_fw.bin change due to regression + on HP Pavilion 15 (bsc#1202152) +- Update alias from 5.19 + +- Update to version 20220714 (git commit 84661a3ba62f): + * amdgpu: update DMCUB firmware for DCN 3.1.6 + * WHENCE: Correct dangling symlinks + * Correct WHENCE entry for wfx firmware + * bnx2: Drop unsupported Broadcom NetXtremeII firmware + * bnx2: drop unsupported firmwares + * bnx2: sort firmware names in filesystem order + * Remove old Broadcom Everest (bnx2x) v4/5 firmware + * drop Token Ring network firmwares + * Drop TDA7706 radio firmware + * Drop Intel WiMax firmware + * Drop Computone IntelliPort Plus serial firmware + * Drop ATM Ambassador devices firmware + * brocade: drop old unsupported firmware revs + * amdgpu: update yellow carp DMCUB firmware + * linux-firmware: update firmware for MT7622 WiFi device + * linux-firmware: update firmware for MT7922 WiFi device + * linux-firmware: update firmware for mediatek bluetooth chip (MT7922) + * linux-firmware: Update firmware file for Intel Bluetooth 9462 + * linux-firmware: Update firmware file for Intel Bluetooth 9462 + * linux-firmware: Update firmware file for Intel Bluetooth 9560 + * linux-firmware: Update firmware file for Intel Bluetooth 9560 + * linux-firmware: Update firmware file for Intel Bluetooth AX201 + * linux-firmware: Update firmware file for Intel Bluetooth AX201 + * linux-firmware: Update firmware file for Intel Bluetooth AX211 + * linux-firmware: Update firmware file for Intel Bluetooth AX211 + * linux-firmware: Update firmware file for Intel Bluetooth AX210 + * linux-firmware: Update firmware file for Intel Bluetooth AX200 + * linux-firmware: Update firmware file for Intel Bluetooth AX201 + * mediatek: Add SCP firmware for MT8186 + * rtw88: 8822c: Update normal firmware to v9.9.13 + * rtw88: 8822c: Update normal firmware to v9.9.12 +- Drop obsoleted temporary patches: + wfx-WHENCE-fix.diff + brcm-symlink-fixes.diff +- Minor update of README.build +- Fix missing aliases for qlogic (bsc#1200889) + +- Update to version 20220622 (git commit 9ed4d42c51ac): + * amdgpu: update Yellow Carp VCN firmware + * linux-firmware: update firmware for MT7921 WiFi device + * linux-firmware: update firmware for mediatek bluetooth chip (MT7921) + * qed: update 8.59.1.0 firmware + * Link some devices that ship with the AW-CM256SM + * Add initial AzureWave AW-CM256SM NVRAM file + * Remove the Pine64 Quartz copy of the RPi NVRAM + * qca: Update firmware files for BT chip WCN6750. + * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00409 + * WHENCE: add symlinks for StarFive based boards + * linux-firmware: wilc1000: update WILC1000 firmware to v15.6 + * brcm: Add NVRAM file 43455 based Wifi/BT module as used on the Quartz64 Model B from Pine64. This file is based on the existing "brcm/brcmfmac43455-sdio.raspberrypi,4-model-b.txt" NVRAM file. + * iwlwifi: add new FWs from core70-87 release + * iwlwifi: update 9000-family firmwares to core70-87 +- Temporary fix for incorrect symlinks for brcm in WHENCE: + brcm-symlink-fixes.diff +- Minor updates of scripts, sorting alphabetically and add version + to Provides/Obsoletes +- Update alias + +- Update to version 20220607 (git commit 02c69863c885): + * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB8_0634 + * Makefile: replace mkdir by install + * iwlwifi: remove old unsupported 3160/7260/7265/8000/8265 firmware + * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.9 + * WHENCE: ath11k: move regdb.bin before board-2.bin + * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00157 + * ath10k: QCA9888 hw2.0: update board-2.bin + * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00157 + * ath10k: QCA4019 hw1.0: update board-2.bin + * ath10k: WCN3990 hw1.0: add board-2.bin +- Update aliases from 5.19-rc1 +- Minor adjustment of spec template and makespec.sh to align with + the latest TW format + +- Update to version 20220516 (git commit 251d29004ffc): + * amdgpu: update beige goby firmware for 22.10 + * amdgpu: update renoir firmware for 22.10 + * amdgpu: update dimgrey cavefish firmware for 22.10 + * amdgpu: update vega20 firmware for 22.10 + * amdgpu: update yellow carp firmware for 22.10 + * amdgpu: update vega12 firmware for 22.10 + * amdgpu: update navy flounder firmware for 22.10 + * amdgpu: update vega10 firmware for 22.10 + * amdgpu: update raven2 firmware for 22.10 + * amdgpu: update raven firmware for 22.10 + * amdgpu: update sienna cichlid firmware for 22.10 + * amdgpu: update green sardine firmware for 22.10 + * amdgpu: update PCO firmware for 22.10 + * amdgpu: update vangogh firmware for 22.10 + * amdgpu: update navi14 firmware for 22.10 + * amdgpu: update navi12 firmware for 22.10 + * amdgpu: update navi10 firmware for 22.10 + * amdgpu: update aldebaran firmware for 22.10 + * linux-firmware: Update firmware file for Intel Bluetooth 9462 + * linux-firmware: Update firmware file for Intel Bluetooth 9462 + * linux-firmware: Update firmware file for Intel Bluetooth 9560 + * linux-firmware: Update firmware file for Intel Bluetooth 9560 + * linux-firmware: Update firmware file for Intel Bluetooth AX201 + * linux-firmware: Update firmware file for Intel Bluetooth AX201 + * linux-firmware: Update firmware file for Intel Bluetooth AX211 + * linux-firmware: Update firmware file for Intel Bluetooth AX211 + * linux-firmware: Update firmware file for Intel Bluetooth AX210 + * linux-firmware: Update firmware file for Intel Bluetooth AX200 + * linux-firmware: Update firmware file for Intel Bluetooth AX201 + * mediatek: Update mt8192 SCP firmware libarchive +- Fix CVE-2021-31566, modifies file flags of symlink target + (CVE-2021-31566, bsc#1192426.patch) + CVE-2021-31566.patch +- Fix bsc#1192427, processing fixup entries may follow symbolic links + bsc1192427.patch + libyui +- Prevent antisocial focus grabbing in pkg list (bsc#1204429) +- 4.4.6 + +- Fixed build failure with gcc 13 (gh#libyui/libyui/#80) +- Killed YCP zombies in log output and comments +- 4.4.5 + libyui:libyui-ncurses +- Prevent antisocial focus grabbing in pkg list (bsc#1204429) +- 4.4.6 + +- Fixed build failure with gcc 13 (gh#libyui/libyui/#80) +- Killed YCP zombies in log output and comments +- 4.4.5 + libyui:libyui-ncurses-pkg +- Prevent antisocial focus grabbing in pkg list (bsc#1204429) +- 4.4.6 + +- Fixed build failure with gcc 13 (gh#libyui/libyui/#80) +- Killed YCP zombies in log output and comments +- 4.4.5 + libyui:libyui-qt +- Prevent antisocial focus grabbing in pkg list (bsc#1204429) +- 4.4.6 + +- Fixed build failure with gcc 13 (gh#libyui/libyui/#80) +- Killed YCP zombies in log output and comments +- 4.4.5 + libyui:libyui-qt-graph +- Prevent antisocial focus grabbing in pkg list (bsc#1204429) +- 4.4.6 + +- Fixed build failure with gcc 13 (gh#libyui/libyui/#80) +- Killed YCP zombies in log output and comments +- 4.4.5 + libyui:libyui-qt-pkg +- Prevent antisocial focus grabbing in pkg list (bsc#1204429) +- 4.4.6 + +- Fixed build failure with gcc 13 (gh#libyui/libyui/#80) +- Killed YCP zombies in log output and comments +- 4.4.5 + mozilla-nspr +- update to version 4.34.1 + * add file descriptor sanity checks in the NSPR poll function. + openssh +- Add openssh-do-not-send-empty-message.patch: Prevent empty + messages from being sent. This avoids a superfluous new line + (bsc#1192439). + openssl-1_1 +- FIPS: Add a missing dependency on jitterentropy-devel for + libopenssl-1_1-devel [bsc#1202148] + +- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651] + * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch + pam +- Update pam_motd to the most current version. This fixes various issues + and adds support for mot.d directories [jsc#PED-1712]. + * Added: pam-ped1712-pam_motd-directory-feature.patch + protobuf +- Fix a potential DoS issue in protobuf-cpp and protobuf-python, + CVE-2022-1941, bsc#1203681 + * Add protobuf-CVE-2022-1941.patch +- Fix a potential DoS issue when parsing with binary data in + protobuf-java, CVE-2022-3171, bsc#1204256 + * Add protobuf-CVE-2022-3171.patch +- Refresh protobuf-CVE-2021-22570.patch +- Backport changes from 3.16.x tree for apply recent CVE patches + * Add protobuf-51026d922970e06475f005b39287963594134b96.patch + * Add protobuf-6ee16a9c60e734104aeb738503fe3f411c97bd88.patch + * Add protobuf-73e0d748b9acdc40b693f2879ce82ecb1a849b81.patch + * Add protobuf-7bff8393cab939bfbb9b5c69b3fe76b4d83c41ee.patch + * Add protobuf-4f02f056b5cea99052bfdfb6698afe47a3cf2964.patch + * Add protobuf-763c3588740b97e8e80b1b1a1a2dc4f417647133.patch + * Add protobuf-6c92f9dff1807c142edf6780d775b58a3b078591.patch + * Add protobuf-4e93585e8bb234efeacb7737b8d080968c5ab91e.patch + * Add protobuf-58d4420e2dd8a3cd354fff9db0052881c25369ce.patch +- Reorganize patch set ordering + +- Fix potential Denial of Service in protobuf-java in the parsing procedure + for binary data, CVE-2021-22569, bsc#1194530 + * Add protobuf-improve-performance-of-parsing-unknown-fields-in-Java.patch + transactional-update +- Version 4.1.0 + - t-u: Add a "setup-kdump" command; implements [jsc#PED-1441] + - Export TRANSACTIONAL_UPDATE_ROOT (the path to the snapshot) in + the update environment; implements [jsc#PED-1078] + - Add support for "notify" reboot method for desktop use + [gh#openSUSE/transactional-update#93] + - Fix kdump initrd recreation detection; the check was performed in the + active snapshot instead of the target snapshot + - Document register command [bsc#1202900] + - Avoid unnecessary snapshots for register command [bsc#1202901] + - Various optimizations for register command + - Remove bogus error message when triggering reboot + - Rework /etc overlay documentation in "The Transactional Update Guide" + - Fix incorrect manpage formatting + - Remove leftover "salt" reboot method in configuration example file + - Replace deprecated std::mem_fn with lambdas + +- Migration of logrotate configuration to /usr/etc: Saving user + changed configuration files in /etc and restoring them while + an RPM update. + yast2 +- Fix hash vs keyword arguments in RSpec expectations (bsc#1204871) +- 4.5.19 + yast2-configuration-management +- Fix hash vs keyword arguments in RSpec expectations (bsc#1204871) +- 4.5.1 + yast2-packager +- Do not add an empty repository to the system when upgrading + a registered system using the Full installation medium + (bsc#1204399) +- 4.5.8 + +- Fix hash vs keyword arguments in RSpec expectations (bsc#1204871) +- 4.5.7 + yast2-samba-client +- Enable pam_mount also for gdm-password service; (bsc#1204830); +- 4.5.2 + yast2-security +- Fix hash vs keyword arguments in RSpec expectations (bsc#1204871) +- 4.5.2 +