Packages changed: MicroOS-release (20241206 -> 20241208) gobject-introspection liburing (2.6 -> 2.8) llvm19 (19.1.4 -> 19.1.5) pam pam-full-src podman sdbootutil (1+git20241112.ecf5f97 -> 1+git20241206.dccea55) selinux-policy (20241118 -> 20241206) === Details === ==== MicroOS-release ==== Version update (20241206 -> 20241208) Subpackages: MicroOS-release-appliance MicroOS-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== gobject-introspection ==== Subpackages: girepository-1_0 libgirepository-1_0-1 - Fix dependency generation for loongarch64. - Add python3-setuptools Requires: needed for python 3.13 which dropped distutils; setuptools now provides it. ==== liburing ==== Version update (2.6 -> 2.8) - switch URLs to the current location on github - Update to 2.8 * Add support for incrementally/partially consumed provided buffers, usable with the provided buffer ring support. * Add support for foo_and_wait_min_timeout(), where it's possible to define a minimum timeout for waiting to get batches of completions, but if that fails, extend for a longer timeout without having any extra context switches. * Add support for using different clock sources for completion waiting. * Great increase coverage of test cases, test case improvements and fixes. * Don't leak _GNU_SOURCE via pkb-config --cflags * Support for address sanitizer * Add examples/kdigest sample program * Add discard helper, test, and man page * Man page updates * Sync with kernel 6.10 * send/recv bundle support * accept nowait and CQE_F_MORE * Add and update test cases * Fix io_uring_queue_init_mem() returning a value that was too small, potentially causing memory corruption in userspace by overwriting 64 bytes beyond the returned value. Also add test case for that. * Add 64-bit length variants of io_uring_prep_{m,f}advise() * Add BIND/LISTEN support and helpers / man pages * Add io_uring_enable_rings.3 man page * Fix bug in io_uring_prep_read_multishot() * Fixup bundle test cases * Add fixed-hugepage test case * Fix io_uring_prep_fixed_fd_install.3 man page * Note 'len' == 0 requirement in io_uring_prep_send.3 man page * Fix some test cases for skipping on older kernels - drop (they are upstream) * test-buf-ring-nommap-skip-the-test-on-queue-init-ENO.patch * test-buf-ring-nommap-zero-the-ringbuf-memory.patch - add * 0001-test-init-mem-zero-the-ringbuf-memory.patch * 0001-test-rsrc_tags-use-correct-buffer-index-for-test.patch - cleanup spec file ==== llvm19 ==== Version update (19.1.4 -> 19.1.5) - Update to version 19.1.5. * This release contains bug-fixes for the LLVM 19.1.0 release. This release is API and ABI compatible with 19.1.0. - Rebase llvm-do-not-install-static-libraries.patch. ==== pam ==== - pam_access: rework resolving of tokens as hostname - separate resolving of IP addresses from hostnames. Don't resolve TTYs or display variables as hostname. - Add "nodns" option to disallow resolving of tokens as hostname. - [pam_access-rework-resolving-of-tokens-as-hostname.patch, bsc#1233078, CVE-2024-10963] ==== pam-full-src ==== - pam_access: rework resolving of tokens as hostname - separate resolving of IP addresses from hostnames. Don't resolve TTYs or display variables as hostname. - Add "nodns" option to disallow resolving of tokens as hostname. - [pam_access-rework-resolving-of-tokens-as-hostname.patch, bsc#1233078, CVE-2024-10963] ==== podman ==== - Re-add iptables temporarily * See https://github.com/containers/crun/pull/1613 ==== sdbootutil ==== Version update (1+git20241112.ecf5f97 -> 1+git20241206.dccea55) Subpackages: sdbootutil-snapper sdbootutil-tukit - Update to version 1+git20241206.dccea55: * Fix quotes in bind mount command (bsc#1233378) * Allow multiple entries for initial measurements - Update to version 1+git20241126.83ebe2c: * Fix help for get-timeout * Add get default and timeout * Replace -a with && * Drop PATH field * sdbootutil-enroll: harden script against unexpected conditions - Update to version 1+git20241118.23c1900: * Fix missing grep file * Detect new bootctl error message * If BLI is not active use the loader.conf ==== selinux-policy ==== Version update (20241118 -> 20241206) Subpackages: selinux-policy-targeted - Update to version 20241206: * Move systemd-homed interfaces to seperate optional_policy block (bsc#1234228) * adjust kandim binary paths (bsc#1232328)