Packages changed: ImageMagick (7.1.0.35 -> 7.1.0.37) cppcheck (2.7.5 -> 2.8) hylafax+ iso-codes (4.9.0 -> 4.10.0) kdump (1.0.2+git12.g1a68ca5 -> 1.0.2+git13.ge715180) kernel-source (5.18.1 -> 5.18.2) kexec-tools (2.0.22 -> 2.0.24) libnftnl (1.2.1 -> 1.2.2) makedumpfile (1.7.0 -> 1.7.1) nftables (1.0.2 -> 1.0.4) snapper === Details === ==== ImageMagick ==== Version update (7.1.0.35 -> 7.1.0.37) Subpackages: ImageMagick-config-7-SUSE ImageMagick-extra libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - update version to 7.1.0.37 * Support Unicode MP4 filenames * set pass when webp:target-size or webp:target-psnr are set to fix #4931 * Corrected rotation angle for right-top and left-bottom in auto-orient. see the upstream changelog: https://github.com/ImageMagick/Website/blob/main/ChangeLog.md - version update to 7.1.0.36 see the upstream changelog: https://github.com/ImageMagick/Website/blob/main/ChangeLog.md ==== cppcheck ==== Version update (2.7.5 -> 2.8) - update to 2.8: * Lifetime analysis can now track lifetime across user-defined constructors when they are inline and using member initializer list. * SymbolDatabase can now deduce iterator types from how they are specified in the library files. * ValueFlow can evaluate class member functions that return known values. * Improve duplicateValueTenary to not warn when used as an lvalue or when one branch has side effects * Fix variableScope to not warn when variables are used in lambda functions * Fix unassignedVariable warnings when using structured bindings * Fix redundantInitialization warning when variable is used in a lambda * Fix variableScope warnings when using if/while init-statement * Improve lifetime analysis when returning variadic template expressions * Detect more statements with constStatement * Detect variableScope for more types * Improvements to unreadVariable * Detect more instances of C style casts * Warn if the return value of new is discarded * The pre-ValueFlow uninitialized checker now uses a different ID as legacyUninitvar * Extended library format to exclude specific function argument values ==== hylafax+ ==== Subpackages: hylafax+-client libfaxutil7_0_5 - Project and download links switched to https libtiff44.diff added for tiff 4.x compatibility ==== iso-codes ==== Version update (4.9.0 -> 4.10.0) Subpackages: iso-codes-lang - update to 4.10.0: * Update ISO 639-2 codes to include Montenegrin (cnr) added in 2017. * Update ISO 4217. Fixes #24 * ISO 639-3: New translation for Friulian * ISO 639-5: New translations for Esperanto, Hindi, Russian * ISO 4217: New translation for Esperanto * Translation updates for ISO 3166-1 * Translation updates for ISO 3166-2 * Translation updates for ISO 3166-3 * Translation updates for ISO 639-2 * Translation updates for ISO 639-3 * Translation updates for ISO 639-5 * Translation updates for ISO 4217 * Translation updates for ISO 15924 * ISO 3166-2: Add parent codes for GB. Fixes #36 * ISO 3166-2: Fix subdivision names for Finland. Fixes #37 ==== kdump ==== Version update (1.0.2+git12.g1a68ca5 -> 1.0.2+git13.ge715180) - kdumptool calibrate: add more margin to reservation calculations (bsc#1196728) ==== kernel-source ==== Version update (5.18.1 -> 5.18.2) - Update config files (only run_oldconfig.sh). - commit 695cfee - Linux 5.18.2 (bsc#1012628). - netfilter: nf_tables: disallow non-stateful expression in sets earlier (bsc#1012628). - i2c: ismt: prevent memory corruption in ismt_access() (bsc#1012628). - assoc_array: Fix BUG_ON during garbage collect (bsc#1012628). - pipe: make poll_usage boolean and annotate its access (bsc#1012628). - pipe: Fix missing lock in pipe_resize_ring() (bsc#1012628). - net: ipa: compute proper aggregation limit (bsc#1012628). - drm/i915: Fix -Wstringop-overflow warning in call to intel_read_wm_latency() (bsc#1012628). - exfat: check if cluster num is valid (bsc#1012628). - netfilter: nft_limit: Clone packet limits' cost value (bsc#1012628). - netfilter: nf_tables: sanitize nft_set_desc_concat_parse() (bsc#1012628). - netfilter: nf_tables: hold mutex on netns pre_exit path (bsc#1012628). - netfilter: nf_tables: double hook unregistration in netns path (bsc#1012628). - netfilter: conntrack: re-fetch conntrack after insertion (bsc#1012628). - KVM: PPC: Book3S HV: fix incorrect NULL check on list iterator (bsc#1012628). - x86/fpu: KVM: Set the base guest FPU uABI size to sizeof(struct kvm_xsave) (bsc#1012628). - x86/kvm: Alloc dummy async #PF token outside of raw spinlock (bsc#1012628). - x86, kvm: use correct GFP flags for preemption disabled (bsc#1012628). - x86/uaccess: Implement macros for CMPXCHG on user addresses (bsc#1012628). - KVM: x86: Use __try_cmpxchg_user() to update guest PTE A/D bits (bsc#1012628). - KVM: x86: Use __try_cmpxchg_user() to emulate atomic accesses (bsc#1012628). - KVM: x86: fix typo in __try_cmpxchg_user causing non-atomicness (bsc#1012628). - KVM: x86: avoid loading a vCPU after .vm_destroy was called (bsc#1012628). - KVM: x86: Fix the intel_pt PMI handling wrongly considered from guest (bsc#1012628). - KVM: x86: Drop WARNs that assert a triple fault never "escapes" from L2 (bsc#1012628). - KVM: x86/mmu: Don't rebuild page when the page is synced and no tlb flushing is required (bsc#1012628). - KVM: SVM: Use kzalloc for sev ioctl interfaces to prevent kernel data leak (bsc#1012628). - crypto: caam - fix i.MX6SX entropy delay value (bsc#1012628). - crypto: ecrdsa - Fix incorrect use of vli_cmp (bsc#1012628). - crypto: qat - rework the VF2PF interrupt handling logic (bsc#1012628). - zsmalloc: fix races between asynchronous zspage free and page migration (bsc#1012628). - tools/memory-model/README: Update klitmus7 compat table (bsc#1012628). - ALSA: usb-audio: Workaround for clock setup on TEAC devices (bsc#1012628). - ALSA: usb-audio: Add missing ep_idx in fixed EP quirks (bsc#1012628). - ALSA: usb-audio: Configure sync endpoints before data (bsc#1012628). - Bluetooth: hci_qca: Use del_timer_sync() before freeing (bsc#1012628). - ARM: dts: s5pv210: Correct interrupt name for bluetooth in Aries (bsc#1012628). - dm integrity: fix error code in dm_integrity_ctr() (bsc#1012628). - dm crypt: make printing of the key constant-time (bsc#1012628). - dm stats: add cond_resched when looping over entries (bsc#1012628). - dm verity: set DM_TARGET_IMMUTABLE feature flag (bsc#1012628). - raid5: introduce MD_BROKEN (bsc#1012628). - fs/ntfs3: validate BOOT sectors_per_clusters (bsc#1012628). - HID: multitouch: Add support for Google Whiskers Touchpad (bsc#1012628). - HID: multitouch: add quirks to enable Lenovo X12 trackpoint (bsc#1012628). - x86/sgx: Disconnect backing page references from dirty status (bsc#1012628). - x86/sgx: Mark PCMD page as dirty when modifying contents (bsc#1012628). - x86/sgx: Obtain backing storage page with enclave mutex held (bsc#1012628). - x86/sgx: Fix race between reclaimer and page fault handler (bsc#1012628). - x86/sgx: Ensure no data in PCMD page after truncate (bsc#1012628). - media: i2c: imx412: Fix reset GPIO polarity (bsc#1012628). - media: i2c: imx412: Fix power_off ordering (bsc#1012628). - tpm: Fix buffer access in tpm2_get_tpm_pt() (bsc#1012628). - tpm: ibmvtpm: Correct the return value in tpm_ibmvtpm_probe() (bsc#1012628). - docs: submitting-patches: Fix crossref to 'The canonical patch format' (bsc#1012628). - NFS: Memory allocation failures are not server fatal errors (bsc#1012628). - NFSD: Fix possible sleep during nfsd4_release_lockowner() (bsc#1012628). - bpf: Fill new bpf_prog_pack with illegal instructions (bsc#1012628). - bpf: Fix potential array overflow in bpf_trampoline_get_progs() (bsc#1012628). - bpf: Fix combination of jit blinding and pointers to bpf subprogs (bsc#1012628). - bpf: Enlarge offset check value to INT_MAX in bpf_skb_{load,store}_bytes (bsc#1012628). - bpf: Fix usage of trace RCU in local storage (bsc#1012628). - bpf: Fix excessive memory allocation in stack_map_alloc() (bsc#1012628). - bpf: Reject writes for PTR_TO_MAP_KEY in check_helper_mem_access (bsc#1012628). - bpf: Check PTR_TO_MEM | MEM_RDONLY in check_helper_mem_access (bsc#1012628). - bpf: Do write access check for kfunc and global func (bsc#1012628). - ALSA: usb-audio: Optimize TEAC clock quirk (bsc#1012628). - commit b7b9d3b - Remove mistakenly enabled CONFIG_JBD2_DEBUG. - commit 7534680 - iommu/amd: Increase timeout waiting for GA log enablement (bsc#1199052). - commit dfccb72 - iommu/amd: Increase timeout waiting for GA log enablement (bsc#1199052). - commit 0578d76 - KVM: x86: avoid calling x86 emulator without a decoded instruction (CVE-2022-1852 bsc#1199875). - commit b4b07c8 - KVM: x86: avoid calling x86 emulator without a decoded instruction (CVE-2022-1852 bsc#1199875). - commit 01a406d ==== kexec-tools ==== Version update (2.0.22 -> 2.0.24) - update to 2.0.24: * arm64: fix static data relocations in machine_apply_elf_rel() * kexec/elf: assign one to align if sh_addralign equals zero * arm64/crashdump-arm64: explicit type conversion to suppress compiler warning * arm64/kexec-arm64: add support for R_AARCH64_MOVW_UABS_G* rela * arm64/kexec-arm64: use enum to organize the reloc type * arm64/kexec-arm64: add support for R_AARCH64_LDST128_ABS_LO12_NC rela * kexec-tools: fix leak FILE pointer. * purgatory: do not enable vectorization automatically for purgatory compiling * kexec-tools: Determine if the image is lzma commpressed * util_lib/elf_info: harden parsing of printk buffer * github: run apt-get update before installing packages * kexec-xen: Allow xen_kexec_exec() to return in case of Live Update * kexec-tools: print error if kexec_file_load fails * kexec-tools: mips: Concatenate --reuse-cmdline and --append * kexec-tools: mips: Add some debug info * arm64: fix PAGE_OFFSET calc for flipped mm * arm64: read VA_BITS from kcore for 52-bits VA kernel * arm64/crashdump: unify routine to get page_offset * arm64: make phys_offset signed * s390: add support for --reuse-cmdline * use slurp_proc_file() in get_command_line() * add slurp_proc_file() * s390: use KEXEC_ALL_OPTIONS * s390: add variable command line size * arm64: support more than one crash kernel regions * s390: handle R_390_PLT32DBL reloc entries in machine_apply_elf_rel() * arm64/crashdump: deduce paddr of _text based on kernel code size - drop kexec-tools-print-error-if-kexec_file_load-fails.patch, kexec-tools-remove-duplicate-ramdisk-definition.patch (upstream) - add homepage url - add gpg validation ==== libnftnl ==== Version update (1.2.1 -> 1.2.2) - Update to release 1.2.2 * exthdr: tcp option reset support ==== makedumpfile ==== Version update (1.7.0 -> 1.7.1) - Update to 1.7.1: * support for kernel up to 5.17 * sadump: remove variable length array * print error when reading with unsupported compression - Drop upstreamed makedumpfile-sadump-kaslr-fix-kaslr_offset-calculation.patch ==== nftables ==== Version update (1.0.2 -> 1.0.4) Subpackages: libnftables1 python3-nftables - Update to release 1.0.4 * Fixed a segfault in -o/--optimize with unsupported statements. * Bogus datatype mismatch error report in sets was fixed. - Update to release 1.0.3 * Support for wildcard interface name matching with sets * Support for runtime auto-merge of set elements. * Enhancements for the ruleset optimization -o/--optimize option which allows to coalesce several NAT rules into map. * Support for raw expressions in concatenations. * Support for integer type protocol header fields in concatenations. * Allow to reset TCP options (requires Linux kernel >= 5.18) - Drop 0001-build-add-missing-AM_CPPFLAGS-to-examples.patch ==== snapper ==== Subpackages: libsnapper6 snapper-zypp-plugin - added generic plugin support (gh#openSUSE/snapper#727)