Removed rpms ============ Added rpms ========== Package Source Changes ====================== apache2 +- Security update: + * fix CVE-2023-27522 [bsc#1209049], mod_proxy_uwsgi HTTP response splitting + + Added patch apache2-CVE-2023-27522.patch + * fix CVE-2023-25690 [bsc#1209047], HTTP request splitting with mod_rewrite and mod_proxy + + Added patch apache2-CVE-2023-25690.patch + +- Rename patches to use proper naming: + * Rename patch: + - Removed bsc1207327-fix-mod_proxy-handling-long-urls.patch + - Added apache2-bsc1207327-fix-mod_proxy-handling-long-urls.patch +- [bsc#1208708] fix passing health check does not recover worker + from its error state: + * Added: apache2-bsc1208708-fix-passing-health-check-recover-worker-from-error-state.patch + +- [bsc#1207327] fix mod_proxy handling of very long urls + + bsc1207327-fix-mod_proxy-handling-long-urls.patch + ceph +- Update to 16.2.11-58-g38d6afd3b78: + + test/CMakeLists.txt: move 'APPEND rgw_libs Boost::filesystem' to top level + +- Update to 16.2.11-57-g9be7fb44a33: + + ceph.spec.in: Replace %usrmerged macro with regular version check +- checkin.sh: default to ses7p branch + +- Update to 16.2.11-56-gc067055f8f5: + + (bsc#1199183) osd, tools, kv: non-aggressive, on-line trimming of accumulated dups + + (bsc#1200262) ceph-volume: fix fast device alloc size on mulitple device + + (bsc#1200501) cephadm: update monitoring container images + + (bsc#1200978) mgr/dashboard: prevent alert redirect + + (bsc#1201797) mgr/volumes: Add subvolumegroup resize cmd + + (bsc#1201837) mgr/volumes: Fix subvolume discover during upgrade (CVE-2022-0670) + + (bsc#1201976) monitoring/ceph-mixin: add RGW host to label info + + (bsc#1202077) mgr/dashboard: enable addition of custom Prometheus alerts + + (bsc#1203375) python-common: Add 'KB' to supported suffixes in SizeMatcher + + (bsc#1204430) ceph-crash: drop privleges to run as "ceph" user, rather than root (CVE-2022-3650) + + (bsc#1205025) rgw: Guard against malformed bucket URLs (CVE-2022-3854) + + (bsc#1205436) mgr/dashboard: fix rgw connect when using ssl + +- Update to 16.2.9-539-gea74dd900cd: + + (bsc#1202292) ceph.spec.in: Add -DFMT_DEPRECATED_OSTREAM to CXXFLAGS + +- Update to 16.2.9-538-g9de83fa4064: + + (bsc#1201604) cephfs-shell: move source to separate subdirectory + + + (bsc#1196046) mgr/cephadm: try to get FQDN for configuration files + + (bsc#1187748) When an RBD is mapped, it is attempted to be deployed as an OSD. + + (bsc#1188911) OSD marked down causes wrong backfill_toofull + + (bsc#1192838) cephadm: Fix iscsi client caps (allow mgr calls) + + (bsc#1200317) mgr/cephadm: fix and improve osd draining + + (bsc#1206158) add iscsi and nfs to upgrade process + + (bsc#1192840) mgr/mgr_module.py: CLICommand: Fix parsing of kwargs arguments curl +- Security fixes: + * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection + Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch + * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy + Add curl-CVE-2023-27534.patch + * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse + Add curl-CVE-2023-27535.patch + * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use + Add curl-CVE-2023-27536.patch + * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still + Add curl-CVE-2023-27538.patch + grub2 +- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in + btrfs filesystem. (bsc#1209165) + * grub2-btrfs-05-grub2-mkconfig.patch + kernel-firmware +- Revive the old iwlwifi-*-71 ucode for compatibility with + SLE15-SP4 kernel (bsc#1209681): + WHENCE updated by iwlwifi-WHENCE-fix.patch + +- Update to version 20230320 (git commit bcdcfbcf0a8f): + * linux-firmware: Update firmware file for Intel Bluetooth AX101 + * linux-firmware: Update firmware file for Intel Bluetooth 9462 + * linux-firmware: Update firmware file for Intel Bluetooth 9462 + * linux-firmware: Update firmware file for Intel Bluetooth 9560 + * linux-firmware: Update firmware file for Intel Bluetooth 9560 + * linux-firmware: Update firmware file for Intel Bluetooth AX203 + * linux-firmware: Update firmware file for Intel Bluetooth AX203 + * linux-firmware: Update firmware file for Intel Bluetooth AX211 + * linux-firmware: Update firmware file for Intel Bluetooth AX211 + * linux-firmware: Update firmware file for Intel Bluetooth AX210 + * linux-firmware: add firmware files for NXP BT chipsets + * rtw89: 8852b: update format-1 fw to v0.29.29.0 + * rtw89: 8852b: add format-1 fw v0.29.26.0 + * rtw89: 8852b: rollback firmware to v0.27.32.1 + * i915: Update MTL DMC to v2.12 + * i915: Update ADLP DMC to v2.19 + * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21 +- Update topics list +- Drop the manual revert of 8852b firmware file, as it's merged into + the upstream + +- Revert pssufix change that caused the package renaming and broke + dependencies from other packages + +- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily + (bsc#1209449) + +- Update to version 20230313 (git commit 5bc279fb161d): + * iwlwifi: update core69 and core72 firmwares for So device + * qat: update licence text + * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3 + * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3 + * WHENCE: remove duplicate File entries + * WHENCE: remove trailing white space + * linux-firmware: add fw for qat_4xxx (jsc#PED-3699) + * Fix symlinks for Intel firmware + * linux-firmware: update firmware for mediatek bluetooth chip (MT7921) + * linux-firmware: update firmware for MT7921 WiFi device + * iwlwifi: update core69 and core72 firmwares for Ty device + * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU + * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible + * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr + * brcm: Add nvram for the Advantech MICA-071 tablet + * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF + * rtl_bt: Add firmware and config files for RTL8821CS + * rtw89: 8852b: update fw to v0.29.29.0 + * rtw89: 8852b: update fw to v0.29.26.0 + * liquidio: remove lio_23xx_vsw.bin + * intel: avs: Add AudioDSP base firmware for CNL-based platforms + * intel: avs: Add AudioDSP base firmware for APL-based platforms + * intel: avs: Add AudioDSP base firmware for SKL-based platforms + * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23 + * ath11k: WCN6855 hw2.0: update board-2.bin + * ath11k: WCN6750 hw1.0: update board-2.bin + * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1 + * ath11k: IPQ5018 hw1.0: add board-2.bin + * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174 + * ath10k: WCN3990 hw1.0: update board-2.bin + * cnm: update chips&media wave521c firmware. + * amdgpu: Update GC 11.0.1 firmware + * intel: catpt: Add AudioDSP base firmware for BDW platforms +- Update topics for catpt/avs +- Update aliases +- Update spec template + +- set psuffix to deduplicate src.rpms +- spec-cleaner induced cleanups + kernel-firmware:compressed +- Revive the old iwlwifi-*-71 ucode for compatibility with + SLE15-SP4 kernel (bsc#1209681): + WHENCE updated by iwlwifi-WHENCE-fix.patch + +- Update to version 20230320 (git commit bcdcfbcf0a8f): + * linux-firmware: Update firmware file for Intel Bluetooth AX101 + * linux-firmware: Update firmware file for Intel Bluetooth 9462 + * linux-firmware: Update firmware file for Intel Bluetooth 9462 + * linux-firmware: Update firmware file for Intel Bluetooth 9560 + * linux-firmware: Update firmware file for Intel Bluetooth 9560 + * linux-firmware: Update firmware file for Intel Bluetooth AX203 + * linux-firmware: Update firmware file for Intel Bluetooth AX203 + * linux-firmware: Update firmware file for Intel Bluetooth AX211 + * linux-firmware: Update firmware file for Intel Bluetooth AX211 + * linux-firmware: Update firmware file for Intel Bluetooth AX210 + * linux-firmware: add firmware files for NXP BT chipsets + * rtw89: 8852b: update format-1 fw to v0.29.29.0 + * rtw89: 8852b: add format-1 fw v0.29.26.0 + * rtw89: 8852b: rollback firmware to v0.27.32.1 + * i915: Update MTL DMC to v2.12 + * i915: Update ADLP DMC to v2.19 + * mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21 +- Update topics list +- Drop the manual revert of 8852b firmware file, as it's merged into + the upstream + +- Revert pssufix change that caused the package renaming and broke + dependencies from other packages + +- Revert the broken rtw89/rtw8852b_fw.bin firmware temporarily + (bsc#1209449) + +- Update to version 20230313 (git commit 5bc279fb161d): + * iwlwifi: update core69 and core72 firmwares for So device + * qat: update licence text + * rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3 + * rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3 + * WHENCE: remove duplicate File entries + * WHENCE: remove trailing white space + * linux-firmware: add fw for qat_4xxx (jsc#PED-3699) + * Fix symlinks for Intel firmware + * linux-firmware: update firmware for mediatek bluetooth chip (MT7921) + * linux-firmware: update firmware for MT7921 WiFi device + * iwlwifi: update core69 and core72 firmwares for Ty device + * rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU + * brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible + * brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr + * brcm: Add nvram for the Advantech MICA-071 tablet + * rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF + * rtl_bt: Add firmware and config files for RTL8821CS + * rtw89: 8852b: update fw to v0.29.29.0 + * rtw89: 8852b: update fw to v0.29.26.0 + * liquidio: remove lio_23xx_vsw.bin + * intel: avs: Add AudioDSP base firmware for CNL-based platforms + * intel: avs: Add AudioDSP base firmware for APL-based platforms + * intel: avs: Add AudioDSP base firmware for SKL-based platforms + * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23 + * ath11k: WCN6855 hw2.0: update board-2.bin + * ath11k: WCN6750 hw1.0: update board-2.bin + * ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1 + * ath11k: IPQ5018 hw1.0: add board-2.bin + * ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174 + * ath10k: WCN3990 hw1.0: update board-2.bin + * cnm: update chips&media wave521c firmware. + * amdgpu: Update GC 11.0.1 firmware + * intel: catpt: Add AudioDSP base firmware for BDW platforms +- Update topics for catpt/avs +- Update aliases +- Update spec template + +- set psuffix to deduplicate src.rpms +- spec-cleaner induced cleanups + librtas +- Update to version 2.0.4 (jsc#PED-554) + - fix possible call to munmap with garbage value +- Refresh librtas.fix_doc_path.patch + +- Update to version 2.0.3 + - Fix memory page address print issue +- Remove upstreamed patch + - librtasevent-Fix-memory-page-address-print-issue.patch +- Refresh spec file + libstorage-ng +- merge gh#openSUSE/libstorage-ng#920 +- propagate failure of snapper installation-helper (bsc#1089823) +- cleanup +- 4.5.87 + +- merge gh#openSUSE/libstorage-ng#919 +- always delegate used_features from Action to Device +- 4.5.86 + man-pages-ja +- update to version 20230115 + * Improved and updated manual pages + +- Update to version 20221215 + * Improved and updated manual pages + +- update to release 20221015 + * Improved manual pages + multipath-tools +- Update to version 0.9.4+71+suse.c648a77: + * libmultipath: avoid grouping paths wrongly with "find_multipaths smart" + (bsc#1209623) + * fix multipath-tools build with liburcu 0.14.0 + - * libmpathpersist: fix command keyword ordering (bsc#1207546) + * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345) sudo +- Fix CVE-2023-28486, sudo does not escape control characters in + log messages, (CVE-2023-28486, bsc#1209362) + * Add sudo-CVE-2023-28486.patch +- Fix CVE-2023-28487, sudo does not escape control characters in + sudoreplay output (CVE-2023-28487, bsc#1209361) + - * bsc#1208595 + * bsc#1208595 CVE-2023-27320