February 2023 - openSUSE ARM - openSUSE Mailing Lists

New Arm Tumbleweed snapshot 20230227 released!
by Guillaume Gardet 28 Feb '23

28 Feb '23

Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=3&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: kidletime open-iscsi python-service_identity === Details === ==== kidletime ==== - Build the wayland plugin (kde#462695) ==== open-iscsi ==== Subpackages: libopeniscsiusr0 - Build system: meson builds were ignoring optflags, and other passed in compiler options. ==== python-service_identity ==== - Clean up the SPEC file.

1 0

New Arm Tumbleweed snapshot 20230226 released!
by Guillaume Gardet 27 Feb '23

27 Feb '23

Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=3&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ImageMagick (7.1.0.61 -> 7.1.0.62) NetworkManager (1.42.0 -> 1.42.2) bluedevil5 (5.27.0 -> 5.27.1) breeze (5.27.0 -> 5.27.1) breeze-gtk (5.27.0 -> 5.27.1) createrepo_c discover (5.27.0 -> 5.27.1) drkonqi5 (5.27.0 -> 5.27.1) flatpak gimp (2.10.32 -> 2.10.34) gjs (1.74.1 -> 1.74.2) glib2 (2.74.5 -> 2.74.6) greybird-geeko-theme grub2 harfbuzz (7.0.0 -> 7.0.1) heaptrack kactivitymanagerd (5.27.0 -> 5.27.1) kcm_flatpak (5.27.0 -> 5.27.1) kcm_sddm (5.27.0 -> 5.27.1) kde-cli-tools5 (5.27.0 -> 5.27.1) kde-gtk-config5 (5.27.0 -> 5.27.1) kgamma5 (5.27.0 -> 5.27.1) khotkeys5 (5.27.0 -> 5.27.1) kinfocenter5 (5.27.0 -> 5.27.1) kmenuedit5 (5.27.0 -> 5.27.1) kpipewire (5.27.0 -> 5.27.1) kscreen5 (5.27.0 -> 5.27.1) kscreenlocker (5.27.0 -> 5.27.1) ksshaskpass5 (5.27.0 -> 5.27.1) ksystemstats5 (5.27.0 -> 5.27.1) kwayland-integration (5.27.0 -> 5.27.1) kwin5 (5.27.0 -> 5.27.1) kwrited5 (5.27.0 -> 5.27.1) lapack layer-shell-qt (5.27.0 -> 5.27.1) libcbor libfido2 (1.12.0 -> 1.13.0) libguestfs (1.50.0 -> 1.50.1) libjpeg-turbo (2.1.4 -> 2.1.5.1) libkdecoration2 (5.27.0 -> 5.27.1) libkscreen2 (5.27.0 -> 5.27.1) libksysguard5 (5.27.0 -> 5.27.1) libnotify (0.8.1 -> 0.8.2) libyui (4.4.8 -> 4.4.9) libyui-ncurses (4.4.8 -> 4.4.9) libyui-ncurses-pkg (4.4.8 -> 4.4.9) libyui-qt (4.4.8 -> 4.4.9) libyui-qt-graph (4.4.8 -> 4.4.9) libyui-qt-pkg (4.4.8 -> 4.4.9) mariadb (10.10.2 -> 10.10.3) milou5 (5.27.0 -> 5.27.1) nodejs19 (19.6.0 -> 19.7.0) oxygen5-sounds (5.27.0 -> 5.27.1) pango (1.50.12 -> 1.50.13) plasma-browser-integration (5.27.0 -> 5.27.1) plasma-nm5 (5.27.0 -> 5.27.1) plasma5-addons (5.27.0 -> 5.27.1) plasma5-desktop (5.27.0 -> 5.27.1) plasma5-disks (5.27.0 -> 5.27.1) plasma5-integration (5.27.0 -> 5.27.1) plasma5-openSUSE plasma5-pa (5.27.0 -> 5.27.1) plasma5-systemmonitor (5.27.0 -> 5.27.1) plasma5-thunderbolt (5.27.0 -> 5.27.1) plasma5-workspace (5.27.0 -> 5.27.1) polkit-kde-agent-5 (5.27.0 -> 5.27.1) powerdevil5 (5.27.0 -> 5.27.1) python-iniconfig (1.1.1 -> 2.0.0) python-lxml python-typing_extensions (4.4.0 -> 4.5.0) snapper spice-gtk (0.41 -> 0.42) sqlite3 (3.40.1 -> 3.41.0) sudo (1.9.13 -> 1.9.13p1) systemsettings5 (5.27.0 -> 5.27.1) thunar (4.18.3 -> 4.18.4) tiff unbound (1.17.0 -> 1.17.1) xdg-desktop-portal-kde (5.27.0 -> 5.27.1) xmlsec1 yast2-python-bindings (4.5.1 -> 4.5.2) yast2-security (4.5.5 -> 4.5.6) zstd (1.5.2 -> 1.5.4) === Details === ==== ImageMagick ==== Version update (7.1.0.61 -> 7.1.0.62) Subpackages: ImageMagick-config-7-SUSE ImageMagick-extra libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - version update to 7.1.0.62 https://github.com/ImageMagick/Website/blob/main/ChangeLog.md - add %bcond_without djvulibre ==== NetworkManager ==== Version update (1.42.0 -> 1.42.2) Subpackages: NetworkManager-bluetooth NetworkManager-pppoe NetworkManager-tui NetworkManager-wwan libnm0 typelib-1_0-NM-1_0 - Update to version 1.42.2: + Add build option to set the mobile-broadband-provider-info database path. + Add new "ipv[46].replace-local-rule" setting to control whether to remove the local route rule that is automatically generated. + Add the DHCPv6 IAID to the lease information exposed in /run and on D-Bus. + Fix assuming team connections at boot. + Fix race condition when setting the MAC address of an OVS interface. + Fix constructing the IPv4 name servers variable passed to dispatcher scripts. + Don't use tentative IPv6 address to resolve the system hostname via DNS. + Deprecate the "Master" property of the NMActiveConnection D-Bus object in favor of the new "Controller" property. - Drop 1539.patch: Fixed upstream. - Refresh patch with quilt: + 0001-Coerce-connectivity-LIMITED-to-NONE-when-device-is-d.patch ==== bluedevil5 ==== Version update (5.27.0 -> 5.27.1) Subpackages: bluedevil5-lang - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== breeze ==== Version update (5.27.0 -> 5.27.1) Subpackages: breeze5-cursors breeze5-decoration breeze5-style breeze5-style-lang libbreezecommon5-5 - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== breeze-gtk ==== Version update (5.27.0 -> 5.27.1) Subpackages: gtk2-metatheme-breeze gtk3-metatheme-breeze gtk4-metatheme-breeze metatheme-breeze-common - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== createrepo_c ==== Subpackages: libcreaterepo_c0 python3-createrepo_c - Precompile the python bytecode to avoid lingering files on package removal. - Add upstream patches (already merged) to publish IMA metadata in repomd repositories + 0001-Add-optional-filelists_ext-metadata.patch + 0002-Rename-filelists_ext-to-filelists-ext-to-be-consiste.patch + 0003-Rename-filelists_ext.xml-metadata-to-filelists-ext.x.patch + 0004-Add-missing-ext-to-filelists-ext-repomd-record.patch - Add upstream patches (under review) to rename filelists-ext + 0005-Complete-renaming-to-filelists-ext.patch - Use git for merging in %autosetup ==== discover ==== Version update (5.27.0 -> 5.27.1) Subpackages: discover-backend-flatpak discover-backend-fwupd discover-backend-packagekit discover-lang - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - Changes since 5.27.0: * [notifier] Fix KAboutData component name * Fix parsing of the <Categories> tag. * Extend CategoriesTest with checking of <Categories> tag parsing. * flatpak: fix build with appstream<0.16 * flatpak: Allow using newer appstream API to look up by bundle id ==== drkonqi5 ==== Version update (5.27.0 -> 5.27.1) Subpackages: drkonqi5-lang - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - Changes since 5.27.0: * Make python distro and psutil modules in the gdb preable optional * Handle WITH_SENTRY correctly * login on field accepting (kde#466109) - Drop patches, now upstream: * 0001-Handle-WITH_SENTRY-correctly.patch * 0002-Make-python-distro-and-psutil-modules-in-the-gdb-pre.patch ==== flatpak ==== Subpackages: flatpak-remote-flathub flatpak-zsh-completion libflatpak0 system-user-flatpak - Add flatpak-fix-gpg-agent-double-free.patch: stdout stream of a subprocess is owned by the subprocess, not the caller, so don't use g_autoptr for it to prevent double free (bsc#1207434). ==== gimp ==== Version update (2.10.32 -> 2.10.34) Subpackages: gimp-plugin-aa gimp-plugins-python libgimp-2_0-0 libgimpui-2_0-0 - Update to 2.10.34: - Core: - Check for updates now works on macOS (backported from 2.99.14). - Update help IDs for better integration with the documentation website. - Symmetry dockable contents is now shown, yet deactivated, when no images are opened, improving discoverability (backported from 2.99.14). - DBus fully disabled on macOS (in some case, it could even freeze GIMP process when dbus is present yet not responding). Open With feature (e.g. from file browsers) still work fine as it uses a different code path on macOS. Other features using dbus (opening files or running batch commands from a separate GIMP process) won't work, but they probably never did on macOS anyway. - "Canvas Size" dialog took too much vertical space and now better uses the horizontal space by moving the preview and offset fiels to the right side, and the "Center" button just below (backported from 2.99.8). - Template selector (backported from 2.99.6) in resize dialog. - Color scale preferences (0..255/0..100 and LCh/HSV settings in Colors selection dialogs) are now remembered across sessions. - Eye icon header added to the item tree views to make it more obvious where to click for item visibility and links (backported from 2.99.10) - Revert color proofing behavior changed in 2.10.32 which resulted in inconsistent past workflows. - "Lock path strokes" tooltip for the dockable icon was renamed "Lock path". - Plug-ins: - DDS: make GUI translatable. - file-raw: added high bit depth precision export (partial backport from 2.99.12). - TIFF: * Various bug fixes; * better check for invalid resolutions on import; * do not generated warnings for incorrect RichTIFFIPTC tags produced by Adobe products (only output a message to stderr, for not completely ignoring these); * Loading "reduced" image or not is now an option. We use a heuristic for the default value of said option (trying to guess if it's a thumbnail by using common usage), but final decision is now up to one knowing the image you load (backported from 2.99.14); * Default TIFF export format is "normal" TIFF, not BigTIFF (making it default was definitely an error in 2.10.32). - PSD: * Various bug fixes; * Useless physical unit conversion removed; * Backported improvement (2.99.10) for importing layers with clipping set (leading to color bleeding); * Backported improvements (2.99.10) for importing clipping layers; * Paths are now exported (backported from 2.99.14). - WebP: more informative error messages in some cases. - Flame: various bug fixes. - JPEG-XL: * metadata import backported from 2.99.14 - (requires libjxl 0.7.0) * Partial backport (2.99.8) of JPEG-XL export; export is always in 8bit lossless. - HEIF: various bug fixes. - Dicom: various bug fixes. - help: * macOS: https support now working fine for help files (bypassing lack of support in GIO for macOS platform). - animation-play: fixed on macOS. - PDF: * Import: new option "Fill transparent areas with white" to fill the background in white (ON by default as most office PDF writers seem to rely on readers filling the background with white), allowing importing transparent PDF files. * Export: new option "Fill transparent areas with background color" allowing to decide whether to export a PDF with transparent background. - TGA: * Added a workaround to load wrongful TGA files exported by Krita (which they fixed on their side too now, see Krita bug 464484). - ICO and CUR: * Magics detection for these formats has been removed (now using only using filename extension) because it was interfering with the detection of certain types of TGA images (which are likely more common than ICO and CUR files, and extension for these should be reliable enough). - Libgimpbase: - GimpMetadata API (in particular the gimp_metadata_set_from_*() functions) are now much less memory-hungry (backported from the main dev branch) when using GExiv 0.12.2 or over. With some huge metadata, it could cause long freeze or even crashes of plug-ins. - Libgimpwidgets: - Color-picking with X11 is now the default when compiled with X11, even if a color-picking portal also exists, because it is always right, whereas portals return color in display space without the space information itself (i.e. without profiles). - New dedicated GimpPickButton implementation for Windows (backported from 2.99.14). - Libgimp: - New wrapper functions around GEGL ops, which also map to items in our Color menu: * gimp_drawable_shadows_highlights() * gimp_drawable_extract_component() ==== gjs ==== Version update (1.74.1 -> 1.74.2) Subpackages: libgjs0 typelib-1_0-GjsPrivate-1_0 - Update to version 1.74.2: + Various fixes ported from the development branch. + Closed bugs and merge requests: - Build error with clang - Can't compile current version with mozjs 102 - Enabling window-list extension causes gnome-shell to crash when running "dconf update" as root - log: Fix an off-by-one buffer overflow ==== glib2 ==== Version update (2.74.5 -> 2.74.6) Subpackages: glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 libgthread-2_0-0 - Update to version 2.74.6: + Bugs fixed: glgo#GNOME/GLib!3239 Backport glgo#GNOME/GLib!3237 âFix safe_wspawnve #defineâ to glib-2-74. + Updated translations. ==== greybird-geeko-theme ==== Subpackages: gtk2-metatheme-greybird-geeko gtk3-metatheme-greybird-geeko gtk4-metatheme-greybird-geeko metatheme-greybird-geeko-common - Make "*:link:selected" optional to work around too old gtk4 libs on Leap 15.5, too. ==== grub2 ==== Subpackages: grub2-arm64-efi grub2-snapper-plugin grub2-systemd-sleep-plugin - Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024) * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch - Fix lpar got hung at grub after inactive migration (bsc#1207684) * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch - Rediff * safe_tpm_pcr_snapshot.patch - Patch supersceded * 0001-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch ==== harfbuzz ==== Version update (7.0.0 -> 7.0.1) Subpackages: libharfbuzz-gobject0 libharfbuzz-icu0 libharfbuzz-subset0 libharfbuzz0 typelib-1_0-HarfBuzz-0_0 - Update to version 7.0.1: + Various build and bug fixes ==== heaptrack ==== Subpackages: heaptrack-gui - Try another way to ignore the GLIBC_PRIVATE requirement ==== kactivitymanagerd ==== Version update (5.27.0 -> 5.27.1) - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== kcm_flatpak ==== Version update (5.27.0 -> 5.27.1) - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - Changes since 5.27.0: * DRY the code a bit * use range based for loops where possible * make clazy happy * typo-- * always use frontend strings but convert to backend strings when saving (kde#465818) * add a test case to cover BUG 465818 * don't needlessly define a default constructor * don't else after return * initialize variables where possible * don't declare multiple variables in a single line * don't const primitives * pass qstrings by reference where appropriate * refresh git-blame-ignore-revs for latest clang-format run * automatic clang-format run (clang 15) * enable clang-format * print a cmake feature summary * don't needlessly define default dtors * mark constructors explicit where appropriate * don't declare getters as slots * sort includes * Avoid creating empty fs permission entry from overrides ==== kcm_sddm ==== Version update (5.27.0 -> 5.27.1) - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== kde-cli-tools5 ==== Version update (5.27.0 -> 5.27.1) - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== kde-gtk-config5 ==== Version update (5.27.0 -> 5.27.1) Subpackages: kde-gtk-config5-gtk3 - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - Changes since 5.27.0: * xsettings: restrict `pidof` to own processes * Add support for XWayland client scaling (kde#465733) * Remove unnecessary `canConvert` check * Unset `Gdk/UnscaledDPI` and `Gdk/WindowScalingFactor` on Wayland (kde#465733) ==== kgamma5 ==== Version update (5.27.0 -> 5.27.1) - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== khotkeys5 ==== Version update (5.27.0 -> 5.27.1) - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== kinfocenter5 ==== Version update (5.27.0 -> 5.27.1) Subpackages: kinfocenter5-lang - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - Changes since 5.27.0: * Fix typo in string (kde#466144) ==== kmenuedit5 ==== Version update (5.27.0 -> 5.27.1) - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== kpipewire ==== Version update (5.27.0 -> 5.27.1) Subpackages: kpipewire-imports libKPipeWire5 libKPipeWireDmaBuf5 libKPipeWireRecord5 - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== kscreen5 ==== Version update (5.27.0 -> 5.27.1) Subpackages: kscreen5-plasmoid - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - Changes since 5.27.0: * kcm: notify scale factor change through DBus * kcm: Use correct role for revert button (kde#465788) - Add patch to fix the revert button: * 0001-kcm-use-onRejected-to-handle-reject-button-click.patch ==== kscreenlocker ==== Version update (5.27.0 -> 5.27.1) Subpackages: kscreenlocker-lang libKScreenLocker5 - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - Changes since 5.27.0: * Install logging categories, to make them configurable via KDebugSettings * CMake: Clean up whitespace ==== ksshaskpass5 ==== Version update (5.27.0 -> 5.27.1) Subpackages: ksshaskpass5-lang - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== ksystemstats5 ==== Version update (5.27.0 -> 5.27.1) - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - Changes since 5.27.0: * gpu/nvidia: lower pci id (kde#462512) ==== kwayland-integration ==== Version update (5.27.0 -> 5.27.1) - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== kwin5 ==== Version update (5.27.0 -> 5.27.1) - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - Changes since 5.27.0: * effects/glide: Fix transform (kde#465849) * Aurorae: Add dummy window for working device pixel ratio (kde#452730,kde#465790) * tiling: Make child tiles inherit padding from parent tile (kde#465842) * effects/contrast: Round device coordinates when creating geometry (kde#464526) * cursorsource: fix scaling with Xwayland (kde#466094) * cursordelgate: round cursor position when rendering * outputchangeset: Round passed scale (kde#465850) * Mark Window as damaged when decoration or shadow changes (kde#464417) * Add missing cerrno include. * effects/tileseditor: Set translation domain in QML files (kde#464572) * wayland: Remove SeatInterfacePrivate::accumulatedCapabilities * Match pointer/keyboard/touch lifespan to Seat lifespan * add support for Lima, V3D, VC4 (based on https://github.com/OpenMandrivaAssociation/kwin/blob/master/kwin-5.21.4-add… made by Bernhard Rosenkraenzer) and update list of supported devices for Panfrost * x11: Drop xv-related workaround * XWayland: Don't dispatch xwayland events in QAbstractEventDispatcher sleeps * tiling: Evacuate tiled windows from custom & quick tiling on output removal (kde#465522) * wayland: Fix a typo in DataControlDeviceV1Interface::sendPrimarySelection() * wayland: Version check before send_primary_selection calls (kde#465657) * Set CXX standard for crossbuilding utility * Include missing header for std::round * Fix button to Qt::MouseButton mapping (kde#465463) * backends/drm: set cursor again after it was hidden (kde#461181) * screencast: Fix region screencasts top coordinate ==== kwrited5 ==== Version update (5.27.0 -> 5.27.1) - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== lapack ==== Subpackages: libblas3 libcblas3 liblapack3 - Set -mfpmath=sse for the entire build for ix86 platforms on SLE/Leap. Since we build for x86_64, we know that sse is available. This helps to avoid effects from excess precision that can be seen in the test suite. On Factory we leave -ffloat-store for the test suite only as this option comes at a performance penalty. We may see precision related issues in the test suite with future compilers regardless. ==== layer-shell-qt ==== Version update (5.27.0 -> 5.27.1) - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== libcbor ==== - Merge change from SLE15 SP4 made by pgajdos(a)suse.com on Tue Apr 5 14:36:56 UTC 2022: - do not build manual page for 15sp4, it does not succeed [bsc#1197743] - added sources + libcbor.3 ==== libfido2 ==== Version update (1.12.0 -> 1.13.0) - Version 1.13.0 (2023-02-20) * Support for linking against OpenSSL on Windows; gh#668. * New API calls: + fido_assert_empty_allow_list; + fido_cred_empty_exclude_list. * fido2-token: fix issue when listing large blobs. * Improved support for different fuzzing engines. ==== libguestfs ==== Version update (1.50.0 -> 1.50.1) Subpackages: libguestfs-xfs libguestfs0 - Update to version 1.50.1 * This is a bug fix release. No upstream changelog. ==== libjpeg-turbo ==== Version update (2.1.4 -> 2.1.5.1) Subpackages: libjpeg8 libturbojpeg0 - update to 2.1.5.1: * Fixed a regression introduced by 2.0 beta1[15] that caused a buffer overrun in the progressive Huffman encoder when attempting to transform a specially-crafted malformed 12-bit-per-component JPEG image into a progressive 12-bit-per-component JPEG image using a 12-bit-per-component build of libjpeg-turbo. * Fixed an issue whereby, when using a 12-bit-per-component build of libjpeg-turbo (-DWITH_12BIT=1), passing samples with values greater than 4095 or less than 0 to jpeg_write_scanlines() caused a buffer overrun or underrun in the RGB-to-YCbCr color converter. * Fixed a floating point exception that occurred when attempting to use the jpegtran -drop and -trim options to losslessly transform a specially-crafted malformed JPEG image. * Fixed an issue in tjBufSizeYUV2() whereby it returned a bogus result, rather than throwing an error, if the align parameter was not a power of 2. * Fixed a similar issue in tjCompressFromYUV() whereby it generated a corrupt JPEG image in certain cases, rather than throwing an error, if the align parameter was not a power of 2. * Fixed an issue whereby tjDecompressToYUV2(), which is a wrapper for tjDecompressToYUVPlanes(), used the desired YUV image dimensions rather than the actual scaled image dimensions when computing the plane pointers and strides to pass to tjDecompressToYUVPlanes(). This caused a buffer overrun and subsequent segfault if the desired image dimensions exceeded the scaled image dimensions. * Fixed an issue whereby, when decompressing a 12-bit-per-component JPEG image (-DWITH_12BIT=1) using an alpha-enabled output color space such as JCS_EXT_RGBA, the alpha channel was set to 255 rather than 4095. * Fixed an issue whereby the Java version of TJBench did not accept a range of quality values. * Fixed an issue whereby, when -progressive was passed to TJBench, the JPEG input image was not transformed into a progressive JPEG image prior to decompression. ==== libkdecoration2 ==== Version update (5.27.0 -> 5.27.1) Subpackages: libkdecorations2-5 libkdecorations2-5-lang libkdecorations2private10 - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== libkscreen2 ==== Version update (5.27.0 -> 5.27.1) Subpackages: libKF5Screen8 libKF5ScreenDpms8 libkscreen2-plugin - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - Changes since 5.27.0: * Fix potential crash setting new configs (kde#464590) ==== libksysguard5 ==== Version update (5.27.0 -> 5.27.1) Subpackages: ksysguardsystemstats-data libKSysGuardSystemStats1 libksysguard5-imports libksysguard5-plugins - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - Changes since 5.27.0: * formatter: Properly extract strings to a translation catalog (kde#465281,kde#465282) ==== libnotify ==== Version update (0.8.1 -> 0.8.2) Subpackages: libnotify-tools libnotify4 typelib-1_0-Notify-0_7 - Update to version 0.8.2: + Set new summary for library. + Docs: - Port to gi-docgen. - Fix URL to Desktop Notification Spec. + meson: - Replace deprecated meson.source_root() calls. - Bump minimum meson version to 0.58. + Introspection docs fixes. - Following upstreams port to gi-docgen, drop gtk-doc and add meson, xsltproc and pkgconfig(gi-docgen) BuildRequires. Also pass explicit man=true to meson, ensure we are building manpages. ==== libyui ==== Version update (4.4.8 -> 4.4.9) - Fixed build with GCC13 (-Woverloaded-virtual) (bsc#1208238) - build-all: Don't build bindings with --small (-s) - More docs for YShortcutManager (FAQ for our QA) - Merged PR #88 from krai: libyui-ncurses: Replace off64_t with off_t and stat64 with stat - 4.4.9 ==== libyui-ncurses ==== Version update (4.4.8 -> 4.4.9) - Fixed build with GCC13 (-Woverloaded-virtual) (bsc#1208238) - build-all: Don't build bindings with --small (-s) - More docs for YShortcutManager (FAQ for our QA) - Merged PR #88 from krai: libyui-ncurses: Replace off64_t with off_t and stat64 with stat - 4.4.9 ==== libyui-ncurses-pkg ==== Version update (4.4.8 -> 4.4.9) - Fixed build with GCC13 (-Woverloaded-virtual) (bsc#1208238) - build-all: Don't build bindings with --small (-s) - More docs for YShortcutManager (FAQ for our QA) - Merged PR #88 from krai: libyui-ncurses: Replace off64_t with off_t and stat64 with stat - 4.4.9 ==== libyui-qt ==== Version update (4.4.8 -> 4.4.9) - Fixed build with GCC13 (-Woverloaded-virtual) (bsc#1208238) - build-all: Don't build bindings with --small (-s) - More docs for YShortcutManager (FAQ for our QA) - Merged PR #88 from krai: libyui-ncurses: Replace off64_t with off_t and stat64 with stat - 4.4.9 ==== libyui-qt-graph ==== Version update (4.4.8 -> 4.4.9) - Fixed build with GCC13 (-Woverloaded-virtual) (bsc#1208238) - build-all: Don't build bindings with --small (-s) - More docs for YShortcutManager (FAQ for our QA) - Merged PR #88 from krai: libyui-ncurses: Replace off64_t with off_t and stat64 with stat - 4.4.9 ==== libyui-qt-pkg ==== Version update (4.4.8 -> 4.4.9) - Fixed build with GCC13 (-Woverloaded-virtual) (bsc#1208238) - build-all: Don't build bindings with --small (-s) - More docs for YShortcutManager (FAQ for our QA) - Merged PR #88 from krai: libyui-ncurses: Replace off64_t with off_t and stat64 with stat - 4.4.9 ==== mariadb ==== Version update (10.10.2 -> 10.10.3) Subpackages: libmariadbd19 mariadb-client mariadb-errormessages - Update to 10.10.3: https://mariadb.com/kb/en/mariadb-10-10-3-release-notes/ https://mariadb.com/kb/en/mariadb-10-10-3-changelog/ - Update mariadb.keyring ==== milou5 ==== Version update (5.27.0 -> 5.27.1) Subpackages: milou5-lang - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== nodejs19 ==== Version update (19.6.0 -> 19.7.0) Subpackages: npm19 - Update to version 19.7.0: * deps: + upgrade npm to 9.5.0 + update undici to v5.20.0 * stream: add abort signal for ReadableStream and WritableStream * url: replace url-parser with ada (not language) - Changes in version 19.6.1: * fixes permissions policies can be bypassed via process.mainModule (bsc#1208481, CVE-2023-23918) * fixes insecure loading of ICU data through ICU_DATA environment variable (bsc#1208487, CVE-2023-23920) * fixes OpenSSL error handling issues in nodejs crypto library (bsc#1208483, CVE-2023-23919) * updates undici to v5.19.1 + Fetch API in Node.js did not protect against CRLF injection in host headers + Regular Expression Denial of Service in Headers in Node.js fetch API (bsc#1208413, bsc#1208485, CVE-2023-24807, CVE-2023-23936) - linker_lto_jobs.patch: refreshed - node-gyp_7.1.2.tar.xz: added dependencies - node-gyp-config.patch: allows gyp 7.1.2 to run with node 19.x ==== oxygen5-sounds ==== Version update (5.27.0 -> 5.27.1) - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== pango ==== Version update (1.50.12 -> 1.50.13) Subpackages: libpango-1_0-0 typelib-1_0-Pango-1_0 - Update to version 1.50.13: + win32: - Add back fallback for empty fontsets - Improve DirectWrite support + Fix word segmentation for Japanese + Don't set backspace-deletes-char for math symbols + coretext: Fix a crash + cairo: Apply metrics hinting to underlines too + Treat COLRv1 fonts as color fonts ==== plasma-browser-integration ==== Version update (5.27.0 -> 5.27.1) - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== plasma-nm5 ==== Version update (5.27.0 -> 5.27.1) Subpackages: plasma-nm5-openconnect plasma-nm5-openvpn plasma-nm5-pptp plasma-nm5-vpnc - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - Changes since 5.27.0: * Guard against double instantiation or double-free of PlasmaNM.NetworkModel (kde#465805) * Filter out the loopback device (kde#465655) * Revert "Use QWindow instead of KWindowSystem to set KeepAbove" (kde#465751) ==== plasma5-addons ==== Version update (5.27.0 -> 5.27.1) Subpackages: plasma5-addons-lang - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== plasma5-desktop ==== Version update (5.27.0 -> 5.27.1) Subpackages: plasma5-desktop-emojier - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - Changes since 5.27.0: * applets/taskmanager: don't honor groupPopups setting in IOTM form factor (kde#464627) ==== plasma5-disks ==== Version update (5.27.0 -> 5.27.1) - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== plasma5-integration ==== Version update (5.27.0 -> 5.27.1) Subpackages: plasma5-integration-plugin plasma5-integration-plugin-lang - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - Changes since 5.27.0: * autotests: Link against KXmlGui * autotests: Fix CMake code style (use some line breaks) * Remove unused include ==== plasma5-openSUSE ==== Subpackages: plasma5-defaults-openSUSE plasma5-theme-openSUSE plasma5-workspace-branding-openSUSE sddm-theme-openSUSE - Update to 5.27.1 ==== plasma5-pa ==== Version update (5.27.0 -> 5.27.1) Subpackages: plasma5-pa-lang - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== plasma5-systemmonitor ==== Version update (5.27.0 -> 5.27.1) - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== plasma5-thunderbolt ==== Version update (5.27.0 -> 5.27.1) - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== plasma5-workspace ==== Version update (5.27.0 -> 5.27.1) Subpackages: gmenudbusmenuproxy plasma5-session plasma5-session-wayland plasma5-workspace-libs xembedsniproxy - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - Changes since 5.27.0: * sddm-wayland-session: Disable global shortcuts * kcms/users: Port Connections to modern syntax * Better screen removal handling (kde#465892) * applets/digital-clock: fix logic error in tooltip (kde#465873) * Fix search for DWD weather data engine * applets/mediacontroller: add test for interacting with MPRIS2 interface * kcms/region_language: Down highlight delegate on press * If the desktopview is not deleted, don'r emit screenRemoved (kde#465536) * set LANG if we have language to glibc locale mapping (kde#464983) * plasmacalendarintegration: Omit astronomical events from Holidays data (kde#465539) * shell: read thickness from default group * use KDE_INSTALL_LIBEXECDIR ==== polkit-kde-agent-5 ==== Version update (5.27.0 -> 5.27.1) - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== powerdevil5 ==== Version update (5.27.0 -> 5.27.1) Subpackages: powerdevil5-lang - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - Changes since 5.27.0: * Only skip batteries if neither start or stop thresholds are available (kde#464535) ==== python-iniconfig ==== Version update (1.1.1 -> 2.0.0) - update to 2.0.0: * Drop Python 3.6 * Add Python 3.11 support * type hints added - use gh tarball for tests ==== python-lxml ==== - allow building against any libxml2 version in sle15 ==== python-typing_extensions ==== Version update (4.4.0 -> 4.5.0) - update to version 4.5.0 Details can be found here: https://pypi.org/project/typing-extensions/4.5.0/ - obsoletes _typed_dict_test_helper.py hack ==== snapper ==== Subpackages: libsnapper6 snapper-zypp-plugin - wait for existing btrfs quota rescans to finish (bsc#1206814) ==== spice-gtk ==== Version update (0.41 -> 0.42) Subpackages: libspice-client-glib-2_0-8 libspice-client-glib-helper libspice-client-gtk-3_0-5 typelib-1_0-SpiceClientGlib-2_0 typelib-1_0-SpiceClientGtk-3_0 - Update to version 0.42. Features and Issues addressed: * !115 - Fix compilation on win32 with EGL * !114 - spice-widget: fix hotspot position on Wayland/HiDPI * !112 - meson: Allow building on a Wayland-only environment * !110 - usb-backend: Fix devices not being enumerated * !108 - spicy: Add keyboard shortcuts for copy/paste sync * Require meson >= 0.56 ==== sqlite3 ==== Version update (3.40.1 -> 3.41.0) Subpackages: libsqlite3-0 sqlite3-tcl - Update to 3.41.0: * https://www.sqlite.org/releaselog/3_41_0.html * Various query planner improvements. * Add the built-in unhex() SQL function. * Add the base64 and base85 application-defined functions as an extension and include that extension in the CLI. * In-memory databases created using sqlite3_deserialize() now report their filename as an empty string, not as 'x'. * The ".scanstats est" command provides query planner estimates in profiles. * Enhance the --safe command-line option to disallow dangerous SQL functions. * The double-quoted string misfeature is now disabled by default for CLI builds. * Various other improvements and performance enhancements. - The new version obsoletes sqlite-src-3390000-func7-pg-181.patch ==== sudo ==== Version update (1.9.13 -> 1.9.13p1) Subpackages: sudo-plugin-python - Update to 1.9.13p1: Fixed a typo in the configure script that resulted in a line like â]: command not foundâ in the output. GitHub issue #238. Corrected the order of the C23 [[noreturn]] attribute in function prototypes. This fixes a build error with GCC 13. GitHub issue #239. The check make target misbehaved when there was more than one version of the UTF-8 C locale in the output of locale -a. GitHub issue #241. Removed a dependency on the AC_SYS_YEAR2038 macro in configure.ac. This was added in autoconf 2.72 but sudoâs configure.ac only required autoconf 2.70. GitHub issue #242. Relaxed the autoconf version requirement to version 2.69. ==== systemsettings5 ==== Version update (5.27.0 -> 5.27.1) - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== thunar ==== Version update (4.18.3 -> 4.18.4) Subpackages: libthunarx-3-0 thunar-lang - Update to 4.18.4: * Dont open folder when mounting device (Issue #919) * Dont show full menu for unmounted devices (#1049) * Support handling URIs via desktop file (#1044) * Focus correct split pane on mouse click (#1039) * Prevent wrong undo/redo notify (#1036) * Support undo trash for linked pathes (#1030) * Always ask before delete files via undo (#1027) * Fix use after free fault (#1031) * Allow symlink creation on remote locations (#875) * Prevent crash when closing window (#884) * Keep directory specific sort details (#1017) * Dont add extra-dot when creating links (#1019) * Translation Updates ==== tiff ==== Subpackages: libtiff6 - security update: * CVE-2023-0795 [bsc#1208226] * CVE-2023-0796 [bsc#1208227] * CVE-2023-0797 [bsc#1208228] * CVE-2023-0798 [bsc#1208229] * CVE-2023-0799 [bsc#1208230] + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch * CVE-2023-0800 [bsc#1208231] * CVE-2023-0801 [bsc#1208232] * CVE-2023-0802 [bsc#1208233] * CVE-2023-0803 [bsc#1208234] * CVE-2023-0804 [bsc#1208236] + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch ==== unbound ==== Version update (1.17.0 -> 1.17.1) Subpackages: libunbound8 unbound-anchor - Update to 1.17.1: * Features: - Expose 'statistics-inhibit-zero' as a configuration option; the default value retains Unbound's behavior. - Expose 'max-sent-count' as a configuration option; the default value retains Unbound's behavior. - Merge #461 from Christian Allred: Add max-query-restarts option. Exposes an internal configuration but the default value retains Unbound's behavior. - Merge #569 from JINMEI Tatuya: add keep-cache option to 'unbound-control reload' to keep caches. * Bug Fixes: - Merge #768 from fobser: Arithmetic on a pointer to void is a GNU extension. - In unit test, print python script name list correctly. - testcode/dohclient sets log identity to its name. - Clarify the use of MAX_SENT_COUNT in the iterator code. - Fix that cachedb does not store failures in the external cache. - Merge #767 from jonathangray: consistently use IPv4/IPv6 in unbound.conf.5. - Fix to ignore tcp events for closed comm points. - Fix to make sure to not read again after a tcp comm point is closed. - Fix #775: libunbound: subprocess reap causes parent process reap to hang. - iana portlist update. - Complementary fix for distutils.sysconfig deprecation in Python 3.10 to commit 62c5039ab9da42713e006e840b7578e01d66e7f2. - Fix #779: [doc] Missing documention in ub_resolve_event() for callback parameter was_ratelimited. - Ignore expired error responses. - Merge #720 from jonathangray: fix use after free when WSACreateEvent() fails. - Fix for the ignore of tcp events for closed comm points, preserve the use after free protection features. - Fix #782: Segmentation fault in stats.c:404. - Add SVCB and HTTPS to the types removed by 'unbound-control flush'. - Clear documentation for interactivity between the subnet module and the serve-expired and prefetch configuration options. - Fix #773: When used with systemd-networkd, unbound does not start until systemd-networkd-wait-online.service times out. - Merge #808: Wrap Makefile script's directory variables in quotes. - Fix to wrap Makefile scripts directory in quotes for uninstall. - Fix windows compile for libunbound subprocess reap comm point closes. - Update github workflows to use checkout v3. - Fix wildcard in hyperlocal zone service degradation, reported by Sergey Kacheev. * Add signature and keyring files - Tighten permissions (boo#1173619) - Add missing dependency: unbound-control-setup needs /usr/bin/openssl. ==== xdg-desktop-portal-kde ==== Version update (5.27.0 -> 5.27.1) - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - Changes since 5.27.0: * Extract i18n from QML files * appchooserdialog: show all apps while searching (kde#464521) ==== xmlsec1 ==== Subpackages: libxmlsec1-1 libxmlsec1-nss1 libxmlsec1-openssl1 - switch to pkgconfig(zlib) to allow alternative providers as well ==== yast2-python-bindings ==== Version update (4.5.1 -> 4.5.2) - Misc fixes to examples; (bsc#1199343). - Fix python2 utf8 handling (python2 code wasn't displaying unicode strings); (bsc#1199348). - Change conversion of Py_None to YCP_Void instead of YCP_Null; (bsc#1199344). - 4.5.2 ==== yast2-security ==== Version update (4.5.5 -> 4.5.6) - bsc#1208492 - do not store empty values in CFA login.defs empty value to avoid crash when parsing according to login.defs lens - 4.5.6 ==== zstd ==== Version update (1.5.2 -> 1.5.4) Subpackages: libzstd1 - update to 1.5.4: * perf: +20% faster huffman decompression for targets that can't compile x64 assembly * perf: up to +10% faster streaming compression at levels 1-2 * perf: +4-13% for levels 5-12 by optimizing function generation * pref: +3-11% compression speed for `arm` target * perf: +5-30% faster dictionary compression at levels 1-4 * perf: +10-20% cold dict compression speed by prefetching CDict tables * perf: +1% faster compression by removing a branch in ZSTD_fast_noDict * perf: Small compression ratio improvements in high compression mode * perf: small speed improvement by better detecting `STATIC_BMI2` for `clang` * perf: Improved streaming performance when `ZSTD_c_stableInBuffer` is set * cli: Asynchronous I/O for improved cli speed * cli: Change `zstdless` behavior to align with `zless` * cli: Keep original file if `-c` or `--stdout` is given * cli: Keep original files when result is concatenated into a single output with `-o` * cli: Preserve Permissions and Ownership of regular files * cli: Print zlib/lz4/lzma library versions with `-vv` * cli: Print checksum value for single frame files with `-lv` * cli: Print `dictID` when present with `-lv` * cli: when `stderr` is *not* the console, disable status updates, but preserve final summary * cli: support `--best` and `--no-name` in `gzip` compatibility mode * cli: support for `posix` high resolution timer `clock_gettime()`, for improved benchmark accuracy * cli: improved help/usage (`-h`, `-H`) formatting * cli: Fix better handling of bogus numeric values * cli: Fix input consists of multiple files _and_ `stdin` * cli: Fix tiny files passthrough * cli: Fix for `-r` on empty directory * cli: Fix empty string as argument for `--output-dir-*` * cli: Fix decompression memory usage reported by `-vv --long` * cli: Fix infinite loop when empty input is passed to trainer * cli: Fix `--adapt` doesn't work when `--no-progress` is also set * api: Support for Block-Level Sequence Producer * api: Support for in-place decompression * api: New `ZSTD_CCtx_setCParams()` function, set all parameters defined in a `ZSTD_compressionParameters` structure * api: Streaming decompression detects incorrect header ID sooner * api: Window size resizing optimization for edge case * api: More accurate error codes for busy-loop scenarios * api: Fix limit overflow in `compressBound` and `decompressBound` (#3362, #3373, Cyan4973) reported by @nigeltao * api: Deprecate several advanced experimental functions: streaming (#3408, @embg), copy * bug: Fix corruption that rarely occurs in 32-bit mode with wlog=25 * bug: Fix for block-splitter * bug: Fixes for Sequence Compression API * bug: Fix leaking thread handles on Windows * bug: Fix timing issues with cmake/meson builds * build: Allow user to select legacy level for cmake * build: Enable legacy support by default in cmake * build: Meson build script improvements * build: Add aarch64 to supported architectures for zstd_trace * build: support AIX architecture * build: Fix `ZSTD_LIB_MINIFY` build macro, which now reduces static library size by half * build: Fix Windows issues with Multithreading translation layer (#3364, #3380, @yoniko) and ARM64 target * build: Fix `cmake` script * doc: Updated man page, providing more details for `--train` mode * doc: Add decompressor errata document * misc: Enable Intel CET * misc: Fix `contrib/` seekable format * misc: Improve speed of the one-file library generator - rebase pzstd.1.patch

1 0

New Arm Tumbleweed snapshot 20230222 released!
by Guillaume Gardet 24 Feb '23

24 Feb '23

Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=3&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: emacs gnu-unifont-fonts (14.0.04 -> 15.0.01) heaptrack ncurses (6.4.20230128 -> 6.4.20230218) python310 python310-core sddm xf86-video-ark (0.7.5 -> 0.7.6) === Details === ==== emacs ==== Subpackages: emacs-el emacs-eln emacs-info emacs-nox emacs-x11 etags - Add upstream commit/patches * 01a4035c.patch Fix etags local command injection vulnerability (CVE-2022-48337, bsc#1208515) * CVE-2022-48338.patch Fix ruby-mode.el local command injection vulnerability (CVE-2022-48338, bsc#1208514) * CVE-2022-48339.patch Fix htmlfontify.el command injection vulnerability (CVE-2022-48339 bsc#1208512) - Require libwebp at build time for automatically enable support for libwebp if given ==== gnu-unifont-fonts ==== Version update (14.0.04 -> 15.0.01) - Add pcf font to SRPM - Rename package * gnu-unifont-ttf-fonts -> gnu-unifont-fonts - Package otf fonts. Introduce new subpackages * gnu-unifont-otf-fonts * gnu-unifont-jp-otf-fonts - Specfile cleanup - update to version 15.0.01 ==== heaptrack ==== Subpackages: heaptrack-gui - Add upstream change: * 0001-Return-early-when-__libc_dlopen_mode-is-detected.patch - Define _filter_GLIBC_PRIVATE to fix installation on Leap ==== ncurses ==== Version update (6.4.20230128 -> 6.4.20230218) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch 20230218 + configure-script improvements: + recent msys2 headers work with _DEFAULT_SOURCE; amend check + use $ac_includes_default in most cases where stdlib.h should work + use #error consistently vs "make an error" + add configure macro for gettimeofday vs inline check - Correct offsets of patch ncurses-6.4.dif - Add ncurses patch 20230211 + set dwShareMode in calls to CreateConsoleScreenBuffer() (patch by Hannes Domani). + use CreateFile with "CONIN$", "CONOUT$" rather than GetStdHandle to obtain a handle on the actual console, avoiding redirection in the MinGW/Win32 configurations (adapted from patch by LIU Hao). ==== python310 ==== Subpackages: python310-curses python310-dbm python310-tk - Add provides for readline and sqlite3 to the main Python package. ==== python310-core ==== Subpackages: libpython3_10-1_0 python310-base - Add provides for readline and sqlite3 to the main Python package. ==== sddm ==== Subpackages: sddm-branding-openSUSE - Honor /etc/nologin like login, sshd, xdm and gdm do * added: auth requisite pam_nologin.so to proper_pam.diff * see: man 5 nologin ==== xf86-video-ark ==== Version update (0.7.5 -> 0.7.6) - Update to version 0.7.6 * bringing the last decade worth of accumulated change, most importantly the ability to build against xorg-server 1.14 and newer out of the box - supersedes U_build_fix.diff

1 0

New Arm Tumbleweed snapshot 20230221 released!
by Guillaume Gardet 23 Feb '23

23 Feb '23

Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=3&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: NetworkManager binutils (2.39 -> 2.40) gnome-contacts gnome-control-center java-11-openjdk lapack libpaper (2.0.4 -> 2.0.9) lightsoff mutter (43.3 -> 43.3+2) nautilus-share openblas_openmp openblas_pthreads openssl-3 (3.0.7 -> 3.0.8) openssl (3.0.7 -> 3.0.8) parole (4.16.0 -> 4.18.0) pidgin (2.14.10 -> 2.14.12) procps4 (4.0.2 -> 4.0.3) qca-qt5 systemd-presets-common-SUSE traceroute (2.1.1 -> 2.1.2) u-boot-rpiarm64 xfce4-notifyd (0.8.0 -> 0.8.1) yast2-packager (4.5.15 -> 4.5.16) zchunk (1.2.3 -> 1.2.4) === Details === ==== NetworkManager ==== Subpackages: NetworkManager-bluetooth NetworkManager-pppoe NetworkManager-tui NetworkManager-wwan libnm0 typelib-1_0-NM-1_0 - Add 1539.patch: Fix constructing the IPv4 nameserver variable (boo#1208371). - Pass session_tracking=systemd and session_tracking_consolekit=false to meson, no longer build support for consolekit as session tracker. ==== binutils ==== Version update (2.39 -> 2.40) Subpackages: libctf-nobfd0 libctf0 - Pack libgprofng only for supported platforms. - Remove upstreamed patch binutils-maxpagesize.diff. - Rebase binutils-2.40-branch.diff.gz as it includes fix for PR30043. - Move libgprofng-related libraries to the proper locations (packages). - Add --without=bootstrap for skipping of bootstrap (faster testing of the package). ==== gnome-contacts ==== Subpackages: gnome-shell-search-provider-contacts - Drop unneeded nor used pkgconfig(clutter-gtk-1.0) BuildRequires. ==== gnome-control-center ==== Subpackages: gnome-control-center-color gnome-control-center-goa gnome-control-center-user-faces - Drop unneeded nor used pkgconfig(clutter-1.0) BuildRequires. ==== java-11-openjdk ==== Subpackages: java-11-openjdk-headless - Remove the accessibility sub-package, since it was never really working and creates another problems (bsc#1205916). It can eventually be built as standalone if needed - Removed patches: * jaw-jdk10.patch * jaw-misc.patch * jaw-nogtk.patch + not needed after the removal of the accessibility sub-package ==== lapack ==== Subpackages: libblas3 libcblas3 liblapack3 - As a configurable option add tmglib code to the LAPACK librarly and enable TMG in LAPACKE as the header files provide its API (boo#1207989 & bsc#1087426). - Restore generic link for update-alternatives. This is usually set by the update-alternatives and it is '%ghost'ed but rpmlint complains. - Move update-alternatives --remove to %%postun to stop rpmlint from complaining. - Removed useless - because never executed - %%postrans scriptlets. - Added missing _%%{_arch} to update-alternative names. - rpmlint complains anyway - this time about alternative-link-missing - as it does not understand the _%%{_arch} endings: muffle with rpmlintrc. - Make arch-dependent generic names conditional. ==== libpaper ==== Version update (2.0.4 -> 2.0.9) Subpackages: libpaper-tools libpaper2 - update to 2.0.9: * Tweak the documentation of how paper sizes are set to make it easier to find and more accurate. * Removes the requirement for help2man at build time * Various fixes. ==== lightsoff ==== - Drop unused nor needed pkgconfig(clutter-1.0) and pkgconfig(clutter-gtk-1.0) BuildRequires. ==== mutter ==== Version update (43.3 -> 43.3+2) - Update to version 43.3+2: + wayland: Don't overwrite surface offsets. + x11: Avoid updating focus on wayland compositor (boo#1208494). ==== nautilus-share ==== - Add 5.patch: Fix `'net usershare' returned error 255` (bsc#1208375). ==== openblas_openmp ==== - Make sure pre-existing (arch-independent) update-alternatives are wiped before registering new ones. Since update-alternatives has no reliable way to check if a certain 'generic name' exists, brute-force it and ignore any error (boo#1208248). - Remove totally pointless - ie. never executed - %%posttrans script. - Restore generic link for update-alternatives. This is usually set by the update-alternatives and it is '%ghost'ed but rpmlint complains. - Add rpmlintrc rules to avoid false positives from consistently guessing the update-alternatives generic name wrong. - Make arch dependent generic names conditional. ==== openblas_pthreads ==== - Make sure pre-existing (arch-independent) update-alternatives are wiped before registering new ones. Since update-alternatives has no reliable way to check if a certain 'generic name' exists, brute-force it and ignore any error (boo#1208248). - Remove totally pointless - ie. never executed - %%posttrans script. - Restore generic link for update-alternatives. This is usually set by the update-alternatives and it is '%ghost'ed but rpmlint complains. - Add rpmlintrc rules to avoid false positives from consistently guessing the update-alternatives generic name wrong. - Make arch dependent generic names conditional. ==== openssl-3 ==== Version update (3.0.7 -> 3.0.8) Subpackages: libopenssl3 libopenssl3-hmac - Update to 3.0.8: * Fixed NULL dereference during PKCS7 data verification. A NULL pointer can be dereferenced when signatures are being verified on PKCS7 signed or signedAndEnveloped data. In case the hash algorithm used for the signature is known to the OpenSSL library but the implementation of the hash algorithm is not available the digest initialization will fail. There is a missing check for the return value from the initialization function which later leads to invalid usage of the digest API most likely leading to a crash. ([bsc#1207541, CVE-2023-0401]) PKCS7 data is processed by the SMIME library calls and also by the time stamp (TS) library calls. The TLS implementation in OpenSSL does not call these functions however third party applications would be affected if they call these functions to verify signatures on untrusted data. * Fixed X.400 address type confusion in X.509 GeneralName. There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but the public structure definition for GENERAL_NAME incorrectly specified the type of the x400Address field as ASN1_TYPE. This field is subsequently interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an ASN1_STRING. When CRL checking is enabled (i.e. the application sets the X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass arbitrary pointers to a memcmp call, enabling them to read memory contents or enact a denial of service. ([bsc#1207533, CVE-2023-0286]) * Fixed NULL dereference validating DSA public key. An invalid pointer dereference on read can be triggered when an application tries to check a malformed DSA public key by the EVP_PKEY_public_check() function. This will most likely lead to an application crash. This function can be called on public keys supplied from untrusted sources which could allow an attacker to cause a denial of service attack. The TLS implementation in OpenSSL does not call this function but applications might call the function if there are additional security requirements imposed by standards such as FIPS 140-3. ([bsc#1207540, CVE-2023-0217]) * Fixed Invalid pointer dereference in d2i_PKCS7 functions. An invalid pointer dereference on read can be triggered when an application tries to load malformed PKCS7 data with the d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions. The result of the dereference is an application crash which could lead to a denial of service attack. The TLS implementation in OpenSSL does not call this function however third party applications might call these functions on untrusted data. ([bsc#1207539, CVE-2023-0216]) * Fixed Use-after-free following BIO_new_NDEF. The public API function BIO_new_NDEF is a helper function used for streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the SMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by end user applications. The function receives a BIO from the caller, prepends a new BIO_f_asn1 filter BIO onto the front of it to form a BIO chain, and then returns the new head of the BIO chain to the caller. Under certain conditions, for example if a CMS recipient public key is invalid, the new filter BIO is freed and the function returns a NULL result indicating a failure. However, in this case, the BIO chain is not properly cleaned up and the BIO passed by the caller still retains internal pointers to the previously freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO then a use-after-free will occur. This will most likely result in a crash. ([bsc#1207536, CVE-2023-0215]) * Fixed Double free after calling PEM_read_bio_ex. The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data. If the function succeeds then the "name_out", "header" and "data" arguments are populated with pointers to buffers containing the relevant decoded data. The caller is responsible for freeing those buffers. It is possible to construct a PEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex() will return a failure code but will populate the header argument with a pointer to a buffer that has already been freed. If the caller also frees this buffer then a double free will occur. This will most likely lead to a crash. The functions PEM_read_bio() and PEM_read() are simple wrappers around PEM_read_bio_ex() and therefore these functions are also directly affected. These functions are also called indirectly by a number of other OpenSSL functions including PEM_X509_INFO_read_bio_ex() and SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal uses of these functions are not vulnerable because the caller does not free the header argument if PEM_read_bio_ex() returns a failure code. ([bsc#1207538, CVE-2022-4450]) * Fixed Timing Oracle in RSA Decryption. A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages for decryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5, RSA-OEAP and RSASVE. ([bsc#1207534, CVE-2022-4304]) * Fixed X.509 Name Constraints Read Buffer Overflow. A read buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. The read buffer overrun might result in a crash which could lead to a denial of service attack. In a TLS client, this can be triggered by connecting to a malicious server. In a TLS server, this can be triggered if the server requests client authentication and a malicious client connects. ([bsc#1207535, CVE-2022-4203]) * Fixed X.509 Policy Constraints Double Locking security issue. If an X.509 certificate contains a malformed policy constraint and ... changelog too long, skipping 21 lines ... 7953 AC1F BC3D C8B3 B292 393E D5E9 E43F 7DF9 EE8C (Richard Levitte) ==== openssl ==== Version update (3.0.7 -> 3.0.8) - Update to 3.0.8 ==== parole ==== Version update (4.16.0 -> 4.18.0) Subpackages: parole-lang - Update to version 4.18.0 * Update copyright year * Update bug report address * player: Prevent infinite cycle when setting volume (#119) * Update some icon names (!17) * Reduce hiding controls to 2 seconds (Fixes #80, !12) * autoconf: Some updates * Update `.gitignore` * build: Replace DATADIRNAME no longer set by xfce4-dev-tools >= 4.17.0 * build: Bump GLib minimum required to 2.38 * autoconf: Use AC_CONFIG_MACRO_DIRS (!14) * Fix memory leak when loading cover image (#98) * Fix compilation warnings (!11) * Makefile.am: INCLUDES -> AM_CPPFLAGS * autoconf: Some updates * Remove the deprecated keys from desktop file (!9) * Translation Updates ==== pidgin ==== Version update (2.14.10 -> 2.14.12) Subpackages: libpurple libpurple-client0 libpurple-plugin-sametime libpurple-tcl libpurple0 - update to 2.14.12: * Remove a string from the Romanian translation that's breaks the creation of the Windows installer. * Add Markus "ivanhoe" Fischer to the Crazy Patch Writers! * Fix a crash when closing a group chat with spellchk plugin enabled. * Fix network interface detection on Windows to fix broken file transfers. * Update the about box to point people to Discourse instead of the mailing lists. ==== procps4 ==== Version update (4.0.2 -> 4.0.3) Subpackages: libproc2-0 - Update to procps-ng-4.0.3 * library Only changes were in copyright headers and tests * docs: Don't install English manpages twice * pgrep: Add -H match on userspace signal handler merge #165 * pgrep: make --terminal respect other criteria * ps: c flag shows command name again Debian #1026326 * ps.1: Match drs description from top.1 merge #156 * skill: Match on -p again Debian #1025915 * top: E/P-core toggle ('5' key) added to help * vmstat: Referesh memory statistics Debian #1027963 * vmstat: Fix initial si,so,bi,bo,in & cs values issue #15 Debian #668580 * vmstat: Fix conversion errors due to precision merge #75 * w: Add --pids option merge #159 * watch: Pass through beep issue #104 * watch: -r option to not re-exec on SIGWINCH merge #125 * watch: find eol with --no-linewrap merge #157 - Drop patches now upstream * linguas.patch * 82d8e3fa.patch - Port patches * procps-ng-3.3.10-errno.patch * procps-ng-3.3.10-slab.patch * procps-ng-3.3.10-xen.dif * procps-ng-3.3.11-pmap4suse.patch * procps-ng-3.3.8-ignore-scan_unevictable_pages.patch * procps-ng-3.3.8-petabytes.patch * procps-ng-3.3.8-readeof.patch * procps-ng-3.3.8-vmstat-terabyte.dif * procps-ng-3.3.9-w-notruncate.diff * procps-v3.3.3-columns.dif * procps-v3.3.3-ia64.diff * procps-v3.3.3-pwdx.patch * procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff ==== qca-qt5 ==== Subpackages: libqca-qt5-2 qca-qt5-plugins - Disable the pgp test. It fails randomly. - Remove test that openssl has decided it's wrong [boo#1208393] * Add 0001-Remove-test-that-openssl-has-decided-it-s-wrong.patch ==== systemd-presets-common-SUSE ==== - Enable spice-vdagent.service and xdg-user-dirs.service by default (boo#1201728) ==== traceroute ==== Version update (2.1.1 -> 2.1.2) - update to version 2.1.2: * Fix unprivileged ICMP tracerouting with Linux kernel >= 6.1 ==== u-boot-rpiarm64 ==== Subpackages: u-boot-rpiarm64-doc Patch queue updated from https://github.com/openSUSE/u-boot.git tumbleweed-2023.01 Use new upstream solution to fix boo#1207562 * Patches dropped: 0017-Backport-https-patchwork.ozlabs.org.patch * Patches added: 0017-Bump-LMB_MAX_REGIONS-default-to-16.patch 0018-lmb-Treat-a-region-which-is-a-subse.patch ==== xfce4-notifyd ==== Version update (0.8.0 -> 0.8.1) Subpackages: xfce4-notifyd-lang - Update to 0.8.1: * Set 1.5s timeouts for the log dbus proxy * Move log dbus server to its own object/file * Wrap queue item struct creation with a function * Improve old log migration error reporting * Delete old log file if it was empty * Clean up old log action parsing loop * Print a message if log db is busy or locked * Plug memleak when not sending log changed signal * Use GStrvBuilder instead of constructing one manually * Handle empty strings from DBus * Limit notification body to 2 lines in plugin menu * Remove old legacy support options from configure * Ensure gdbus-codegen doesn't generate too-new code * Clean up generate code and deprecate Quit method * Make all notification log access go through dbus * Drop old gtk 3.0 themes (3.20 themes are always used) * Clean up build system * Add hidden setting to restore override-redirect behavior * Remove ChangeLog make target * Markdownify and update the readme * Disconnect from GtkIconTheme::changed when plugin destroyed * Load main panel icon with _load_symbolic() variant * Restore log viewer's scrolled window shadow-type * Update icon when icon-theme changes * Fix incorrect signal handler connections in settings dialog * Translation Updates ==== yast2-packager ==== Version update (4.5.15 -> 4.5.16) - Fixed a crash when selecting depending products (bsc#1208421) - 4.5.16 ==== zchunk ==== Version update (1.2.3 -> 1.2.4) - update to 1.2.4: * Update tests to handle zstd 1.5.4

2 1

New Arm Tumbleweed snapshot 20230219 released!
by Guillaume Gardet 20 Feb '23

20 Feb '23

Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=3&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: AppStream (0.15.6 -> 0.16.0) GraphicsMagick (1.3.39 -> 1.3.40) ImageMagick (7.1.0.57 -> 7.1.0.61) Mesa (22.3.4 -> 22.3.5) Mesa-demo Mesa-drivers (22.3.4 -> 22.3.5) MozillaFirefox (109.0 -> 109.0.1) NetworkManager (1.40.10 -> 1.42.0) SDL2 (2.26.2 -> 2.26.3) adwaita-xfce-icon-theme akonadi-calendar (22.12.1 -> 22.12.2) akonadi-calendar-tools (22.12.1 -> 22.12.2) akonadi-contact (22.12.1 -> 22.12.2) akonadi-import-wizard (22.12.1 -> 22.12.2) akonadi-mime (22.12.1 -> 22.12.2) akonadi-notes (22.12.1 -> 22.12.2) akonadi-search (22.12.1 -> 22.12.2) akonadi-server (22.12.1 -> 22.12.2) akregator (22.12.1 -> 22.12.2) analitza (22.12.1 -> 22.12.2) apache2-mod_php8 (8.1.14 -> 8.1.16) apparmor apr (1.7.0 -> 1.7.2) apr-util (1.6.1 -> 1.6.3) ark (22.12.1 -> 22.12.2) arpwatch-ethercodes (20221212 -> 20230209) attica-qt5 (5.102.0 -> 5.103.0) audacity (3.2.2 -> 3.2.4) audit (3.0.6 -> 3.0.9) audit-secondary (3.0.6 -> 3.0.9) baloo5 (5.102.0 -> 5.103.0) baloo5-widgets (22.12.1 -> 22.12.2) bind (9.18.11 -> 9.18.12) blinken (22.12.1 -> 22.12.2) bluedevil5 (5.26.5 -> 5.27.0) blueman (2.2.4 -> 2.3.5) bluez-qt (5.102.0 -> 5.103.0) breeze (5.26.5 -> 5.27.0) breeze-gtk (5.26.5 -> 5.27.0) breeze5-icons (5.102.0 -> 5.103.0) c-ares (1.18.1 -> 1.19.0) cabextract (1.9.1 -> 1.10) calendarsupport (22.12.1 -> 22.12.2) ceph (16.2.9.539+gea74dd900cd -> 16.2.11.58+g38d6afd3b78) clamav (0.103.7 -> 0.103.8) cryptsetup (2.6.0 -> 2.6.1) cyrus-sasl dLeyna dav1d (1.0.0 -> 1.1.0) dbus-1 (1.14.4 -> 1.14.6) desktop-translations (84.87.20220427.80cb897f -> 84.87.20230128.350400f) discover (5.26.5 -> 5.27.0) dnsmasq (2.88 -> 2.89) dolphin (22.12.1 -> 22.12.2) dos2unix (7.4.3 -> 7.4.4) drkonqi5 (5.26.5 -> 5.27.0) elfutils elfutils-debuginfod eventviews (22.12.1 -> 22.12.2) evolution (3.46.3 -> 3.46.4) evolution-data-server (3.46.3 -> 3.46.4) evolution-ews (3.46.3 -> 3.46.4) exiv2 (0.27.5 -> 0.27.6) fetchmail (6.4.35 -> 6.4.36) ffmpeg-5 ffmpeg-5-mini ffmpegthumbs (22.12.1 -> 22.12.2) filesystem flatpak (1.14.1 -> 1.14.2) fontconfig (2.14.1 -> 2.14.2) frameworkintegration (5.102.0 -> 5.103.0) freeipmi (1.6.9 -> 1.6.10) fuse3 (3.13.0 -> 3.14.0) gcc13 (13.0.1+git5199 -> 13.0.1+git5428) git (2.39.1 -> 2.39.2) glibc (2.36 -> 2.37) gnome-contacts (43.0 -> 43.1) gnome-control-center (43.2 -> 43.4.1) gnome-desktop (43.1 -> 43.2) gnome-maps (43.3 -> 43.4) gnome-shell (43.2 -> 43.3) gnome-software (43.3 -> 43.4) gnome-terminal (3.46.7 -> 3.46.8) gnutls (3.7.8 -> 3.7.9) grantleetheme (22.12.1 -> 22.12.2) grub2 gsl (2.6 -> 2.7.1) gstreamer (1.20.5 -> 1.22.0) gstreamer-plugins-bad (1.20.5 -> 1.22.0) gstreamer-plugins-base (1.20.5 -> 1.22.0) gstreamer-plugins-good (1.20.5 -> 1.22.0) gstreamer-plugins-libav (1.20.5 -> 1.22.0) gstreamer-plugins-rs (0.9+git20221113.274e57a -> 0.10.1+git20230213.9cd68ff) gstreamer-plugins-ugly (1.20.5 -> 1.22.0) guestfs-tools (1.48.3 -> 1.50.0) gwenview5 (22.12.1 -> 22.12.2) harfbuzz (6.0.0 -> 7.0.0) heaptrack hwdata (0.366 -> 0.367) incidenceeditor (22.12.1 -> 22.12.2) inkscape (1.2.1 -> 1.2.2) java-11-openjdk (11.0.17.0 -> 11.0.18.0) jhead kaccounts-integration (22.12.1 -> 22.12.2) kaccounts-providers (22.12.1 -> 22.12.2) kactivities-stats (5.102.0 -> 5.103.0) kactivities5 (5.102.0 -> 5.103.0) kactivitymanagerd (5.26.5 -> 5.27.0) kaddressbook (22.12.1 -> 22.12.2) kalgebra (22.12.1 -> 22.12.2) kamera (22.12.1 -> 22.12.2) kanagram (22.12.1 -> 22.12.2) kapptemplate (22.12.1 -> 22.12.2) karchive (5.102.0 -> 5.103.0) kate (22.12.1 -> 22.12.2) kauth (5.102.0 -> 5.103.0) kbookmarks (5.102.0 -> 5.103.0) kbruch (22.12.1 -> 22.12.2) kcachegrind (22.12.1 -> 22.12.2) kcalc (22.12.1 -> 22.12.2) kcalendarcore (5.102.0 -> 5.103.0) kcalutils (22.12.1 -> 22.12.2) kcharselect (22.12.1 -> 22.12.2) kcm_sddm (5.26.5 -> 5.27.0) kcmutils (5.102.0 -> 5.103.0) kcodecs (5.102.0 -> 5.103.0) kcolorchooser (22.12.1 -> 22.12.2) kcompletion (5.102.0 -> 5.103.0) kconfig (5.102.0 -> 5.103.0) kconfigwidgets (5.102.0 -> 5.103.0) kcontacts (5.102.0 -> 5.103.0) kcoreaddons (5.102.0 -> 5.103.0) kcrash (5.102.0 -> 5.103.0) kdav (5.102.0 -> 5.103.0) kdbusaddons (5.102.0 -> 5.103.0) kde-cli-tools5 (5.26.5 -> 5.27.0) kde-gtk-config5 (5.26.5 -> 5.27.0) kde-print-manager (22.12.1 -> 22.12.2) kdeclarative (5.102.0 -> 5.103.0) kdeconnect-kde (22.12.1 -> 22.12.2) kded (5.102.0 -> 5.103.0) kdeedu-data (22.12.1 -> 22.12.2) kdegraphics-thumbnailers (22.12.1 -> 22.12.2) kdelibs4support (5.102.0 -> 5.103.0) kdenetwork-filesharing (22.12.1 -> 22.12.2) kdepim-addons (22.12.1 -> 22.12.2) kdepim-runtime (22.12.1 -> 22.12.2) kdesu (5.102.0 -> 5.103.0) kdevelop5 (22.12.1 -> 22.12.2) kdialog (22.12.1 -> 22.12.2) kdnssd-framework (5.102.0 -> 5.103.0) kdoctools (5.102.0 -> 5.103.0) kernel-firmware (20230110 -> 20230210) kernel-source (6.1.8 -> 6.1.12) kexec-tools (2.0.25 -> 2.0.26) kfilemetadata5 (5.102.0 -> 5.103.0) kgamma5 (5.26.5 -> 5.27.0) kgeography (22.12.1 -> 22.12.2) kglobalaccel (5.102.0 -> 5.103.0) kguiaddons (5.102.0 -> 5.103.0) khangman (22.12.1 -> 22.12.2) khelpcenter5 (22.12.1 -> 22.12.2) kholidays (5.102.0 -> 5.103.0) khotkeys5 (5.26.5 -> 5.27.0) khtml (5.102.0 -> 5.103.0) ki18n (5.102.0 -> 5.103.0) kiconthemes (5.102.0 -> 5.103.0) kidentitymanagement (22.12.1 -> 22.12.2) kidletime (5.102.0 -> 5.103.0) kig (22.12.1 -> 22.12.2) kimageformats (5.102.0 -> 5.103.0) kimap (22.12.1 -> 22.12.2) kinfocenter5 (5.26.5 -> 5.27.0) kinit (5.102.0 -> 5.103.0) kio (5.102.0 -> 5.103.0) kio-extras5 (22.12.1 -> 22.12.2) kio_audiocd (22.12.1 -> 22.12.2) kipi-plugins (22.12.1 -> 22.12.2) kirigami2 (5.102.0 -> 5.103.0) kitemmodels (5.102.0 -> 5.103.0) kitemviews (5.102.0 -> 5.103.0) kiten (22.12.1 -> 22.12.2) kitinerary (22.12.1 -> 22.12.2) kjobwidgets (5.102.0 -> 5.103.0) kjs (5.102.0 -> 5.103.0) kldap (22.12.1 -> 22.12.2) kleopatra (22.12.1 -> 22.12.2) kmag (22.12.1 -> 22.12.2) kmahjongg (22.12.1 -> 22.12.2) kmail (22.12.1 -> 22.12.2) kmail-account-wizard (22.12.1 -> 22.12.2) kmailtransport (22.12.1 -> 22.12.2) kmbox (22.12.1 -> 22.12.2) kmenuedit5 (5.26.5 -> 5.27.0) kmime (22.12.1 -> 22.12.2) kmines (22.12.1 -> 22.12.2) kmousetool (22.12.1 -> 22.12.2) kmplot (22.12.1 -> 22.12.2) knewstuff (5.102.0 -> 5.103.0) knotes (22.12.1 -> 22.12.2) knotifications (5.102.0 -> 5.103.0) knotifyconfig (5.102.0 -> 5.103.0) kompare (22.12.1 -> 22.12.2) konsole (22.12.1 -> 22.12.2) kontact (22.12.1 -> 22.12.2) kontactinterface (22.12.1 -> 22.12.2) konversation (22.12.1 -> 22.12.2) korganizer (22.12.1 -> 22.12.2) kpackage (5.102.0 -> 5.103.0) kparts (5.102.0 -> 5.103.0) kpat (22.12.1 -> 22.12.2) kpeople5 (5.102.0 -> 5.103.0) kpimtextedit (22.12.1 -> 22.12.2) kpipewire (5.26.5 -> 5.27.0) kpkpass (22.12.1 -> 22.12.2) kplotting (5.102.0 -> 5.103.0) kpty (5.102.0 -> 5.103.0) kqtquickcharts (22.12.1 -> 22.12.2) kquickcharts (5.102.0 -> 5.103.0) kreversi (22.12.1 -> 22.12.2) kross (5.102.0 -> 5.103.0) krunner (5.102.0 -> 5.103.0) ksanecore (22.12.1 -> 22.12.2) kscreen5 (5.26.5 -> 5.27.0) kscreenlocker (5.26.5 -> 5.27.0) kservice (5.102.0 -> 5.103.0) ksmtp (22.12.1 -> 22.12.2) ksshaskpass5 (5.26.5 -> 5.27.0) ksudoku (22.12.1 -> 22.12.2) ksystemstats5 (5.26.5 -> 5.27.0) ktexteditor (5.102.0 -> 5.103.0) ktextwidgets (5.102.0 -> 5.103.0) ktnef (22.12.1 -> 22.12.2) ktouch (22.12.1 -> 22.12.2) kunitconversion (5.102.0 -> 5.103.0) kwallet (5.102.0 -> 5.103.0) kwalletmanager5 (22.12.1 -> 22.12.2) kwayland (5.102.0 -> 5.103.0) kwayland-integration (5.26.5 -> 5.27.0) kwidgetsaddons (5.102.0 -> 5.103.0) kwin5 (5.26.5 -> 5.27.0) kwindowsystem (5.102.0 -> 5.103.0) kwordquiz (22.12.1 -> 22.12.2) kwrited5 (5.26.5 -> 5.27.0) kxmlgui (5.102.0 -> 5.103.0) lapack layer-shell-qt (5.26.5 -> 5.27.0) less libKF5ModemManagerQt (5.102.0 -> 5.103.0) libKF5NetworkManagerQt (5.102.0 -> 5.103.0) libadwaita (1.2.1 -> 1.2.2) libaom (3.5.0 -> 3.6.0) libapparmor libcap (2.66 -> 2.67) libdrm (2.4.114 -> 2.4.115) libgravatar (22.12.1 -> 22.12.2) libguestfs (1.48.6 -> 1.50.0) libhandy (1.8.0 -> 1.8.1) libheif libimagequant (2.17.0 -> 2.18.0) libjxl (0.8.0 -> 0.8.1) libkcddb (22.12.1 -> 22.12.2) libkcompactdisc (22.12.1 -> 22.12.2) libkdcraw (22.12.1 -> 22.12.2) libkdecoration2 (5.26.5 -> 5.27.0) libkdegames (22.12.1 -> 22.12.2) libkdepim (22.12.1 -> 22.12.2) libkeduvocdocument (22.12.1 -> 22.12.2) libkexiv2 (22.12.1 -> 22.12.2) libkgapi (22.12.1 -> 22.12.2) libkipi (22.12.1 -> 22.12.2) libkleo (22.12.1 -> 22.12.2) libkmahjongg (22.12.1 -> 22.12.2) libkomparediff2 (22.12.1 -> 22.12.2) libksane (22.12.1 -> 22.12.2) libkscreen2 (5.26.5 -> 5.27.0) libksieve (22.12.1 -> 22.12.2) libksysguard5 (5.26.5 -> 5.27.0) liblouis (3.23.0 -> 3.24.0) liblqr libmspack (0.10.1 -> 0.11) libnice (0.1.19 -> 0.1.21) libnvme (1.2 -> 1.3) libopenmpt (0.6.7 -> 0.6.8) libp11 libpng16 librdkafka (1.9.2 -> 2.0.2) libreoffice libsrtp2 (2.4.2 -> 2.5.0) libstorage-ng (4.5.67 -> 4.5.73) libvirt libxfce4ui (4.18.1 -> 4.18.2) libxml2 libxml2-python libzypp (17.31.7 -> 17.31.8) lmdb lokalize (22.12.1 -> 22.12.2) mailcommon (22.12.1 -> 22.12.2) mailimporter (22.12.1 -> 22.12.2) mbox-importer (22.12.1 -> 22.12.2) messagelib (22.12.1 -> 22.12.2) milou5 (5.26.5 -> 5.27.0) mlocate mobipocket (22.12.1 -> 22.12.2) mousepad (0.5.10 -> 0.6.0) mozilla-nss (3.86 -> 3.87) mozjs102 (102.7.0 -> 102.8.0) mpfr (4.1.1 -> 4.2.0) mutter (43.2 -> 43.3) ncurses (6.4.20230114 -> 6.4.20230128) nfs-utils nodejs19 (19.5.0 -> 19.6.0) nvme-cli (2.2.1 -> 2.3) okular (22.12.1 -> 22.12.2) openblas_openmp openblas_pthreads openssl-1_1 (1.1.1s -> 1.1.1t) openssl-3 openssl (1.1.1s -> 3.0.7) openvpn ovmf oxygen5-sounds (5.26.5 -> 5.27.0) parley (22.12.1 -> 22.12.2) patterns-media patterns-server patterns-xfce (20210209 -> 20230212) perl-HTML-Parser (3.80 -> 3.81) perl-IO-Socket-SSL (2.078 -> 2.081) perl-Mail-AuthenticationResults (2.20210915 -> 2.20230112) perl-Mail-DKIM (1.20220520 -> 1.20230212) perl-Net-Patricia permissions (1599_20221220 -> 1599_20230217) php8 (8.1.14 -> 8.1.16) pim-data-exporter (22.12.1 -> 22.12.2) pim-sieve-editor (22.12.1 -> 22.12.2) pimcommon (22.12.1 -> 22.12.2) pkgconf plasma-browser-integration (5.26.5 -> 5.27.0) plasma-framework (5.102.0 -> 5.103.0) plasma-nm5 (5.26.5 -> 5.27.0) plasma5-addons (5.26.5 -> 5.27.0) plasma5-desktop (5.26.5 -> 5.27.0) plasma5-disks (5.26.5 -> 5.27.0) plasma5-integration (5.26.5 -> 5.27.0) plasma5-openSUSE (84.87~git20220602T134713~22403ba -> 84.87~git20230131T131056~433af24) plasma5-pa (5.26.5 -> 5.27.0) plasma5-systemmonitor (5.26.5 -> 5.27.0) plasma5-thunderbolt (5.26.5 -> 5.27.0) plasma5-workspace (5.26.5 -> 5.27.0) pngquant (2.17.0 -> 2.18.0) polkit-kde-agent-5 (5.26.5 -> 5.27.0) poppler (23.01.0 -> 23.02.0) poppler-qt5 (23.01.0 -> 23.02.0) postfix postgresql15 (15.1 -> 15.2) powerdevil5 (5.26.5 -> 5.27.0) prison-qt5 (5.102.0 -> 5.103.0) psmisc pulseaudio purpose (5.102.0 -> 5.103.0) python-Twisted python-argcomplete python-cached-property python-cryptography (39.0.0 -> 39.0.1) python-dnspython (2.2.1 -> 2.3.0) python-future python-importlib-resources python-numpy python-pyzmq python-qt5 (5.15.7 -> 5.15.9) python-qt5-sip (12.11.0 -> 12.11.1) python-reportlab python-zope.event (4.5.0 -> 4.6) python310-pyparsing qalculate (4.5.0 -> 4.5.1) qemu qqc2-desktop-style (5.102.0 -> 5.103.0) re2 (20221201 -> 20230201) ristretto (0.12.4 -> 0.13.0) ruby (3.1 -> 3.2) ruby-common samba (4.17.4+git.314.7b07e3c51a6 -> 4.17.5+git.320.c38ca0f84a) sendmail setools (4.4.0 -> 4.4.1) shadow shotwell signon-kwallet-extension (22.12.1 -> 22.12.2) skanlite (22.12.1 -> 22.12.2) smartmontools snapper solid (5.102.0 -> 5.103.0) sonnet (5.102.0 -> 5.103.0) spectacle (22.12.1 -> 22.12.2) sssd step (22.12.1 -> 22.12.2) sudo (1.9.12p2 -> 1.9.13) suse-module-tools (16.0.28 -> 16.0.29) syndication (5.102.0 -> 5.103.0) syntax-highlighting (5.102.0 -> 5.103.0) systemd (252.4 -> 252.5) systemd-presets-branding-MicroOS (20200323 -> 20230214) systemsettings5 (5.26.5 -> 5.27.0) tcl texinfo (7.0.1 -> 7.0.2) threadweaver (5.102.0 -> 5.103.0) thunar thunar-plugin-media-tags (0.3.0 -> 0.4.0) tigervnc (1.12.0 -> 1.13.0) tpm2-0-tss (3.2.0 -> 4.0.1) transactional-update (4.1.2 -> 4.1.3) transmission tree (2.0.4 -> 2.1.0) umbrello (22.12.1 -> 22.12.2) util-linux util-linux-systemd vim (9.0.1234 -> 9.0.1307) vte (0.70.2 -> 0.70.3) vulkan-loader (1.3.236.0 -> 1.3.239.0) vulkan-tools (1.3.236.0 -> 1.3.239.0) webkit2gtk3 (2.38.3 -> 2.38.5) webkit2gtk3-soup2 (2.38.3 -> 2.38.5) wicked xdg-desktop-portal-kde (5.26.5 -> 5.27.0) xdg-user-dirs xen xfce4-notifyd (0.7.2 -> 0.8.0) xfce4-panel (4.18.1 -> 4.18.2) xfce4-power-manager (4.18.0 -> 4.18.1) xfce4-session (4.18.0 -> 4.18.1) xfce4-settings (4.18.1 -> 4.18.2) xkeyboard-config (2.37 -> 2.38) xorg-x11-server (21.1.6 -> 21.1.7) xterm (377 -> 378) xwayland (22.1.7 -> 22.1.8) yast2 (4.5.22 -> 4.5.24) yast2-bootloader (4.5.7 -> 4.5.8) yast2-iscsi-client (4.5.6 -> 4.5.7) yast2-network (4.5.15 -> 4.5.16) yast2-packager (4.5.13 -> 4.5.15) yast2-samba-client (4.5.2 -> 4.5.3) yast2-schema-default (4.5.7 -> 4.5.9) yast2-trans (84.87.20230130.b344a57eef -> 84.87.20230211.83e08d8766) zenity (3.43.0 -> 3.44.0) zsh === Details === ==== AppStream ==== Version update (0.15.6 -> 0.16.0) Subpackages: libAppStreamQt2 libappstream4 - Update to version 0.16.0: * Features: + pool: Offer API to look up components by bundles + Bump format version to 0.16 + Add new AsSystemInfo to read information about the current OS and device + Add helper to get device names from a modalias + Implement support for external release metadata + Add validation support for external release metadata + compose: Validate external release metadata used for the catalog as well + its: Add rule for standalone release metadata + Add function to test if an AsRelation is satisfied on the current system + cli: Add command to list category contents + cli: Display colored checkmarks if possible + cli: Add new is-satisfied check to test relations from the command-line + cli: Add Markdown export support for metainfo-to-news + qt: Add support for SystemInfo & relation satisfication checks * Specification: + spec: Specify a metadata format for external release descriptions * Bugfixes: + Fix build with Clang 15 + Give a better error message if trying to list too many categories + Adjust documentation of AsPool.get_components_by_categories to reflect reality + validator: Validate merge component catalog data properly again * Miscellaneous: + Consistently name catalog metadata as such everywhere - Update support-meson0.59.patch for latest version of AppStream - Build AppStream with compose support as a separate package. - Use %ldconfig_scriptlets. Leap 15.3 is out of maintenance. ==== GraphicsMagick ==== Version update (1.3.39 -> 1.3.40) Subpackages: libGraphicsMagick++-Q16-12 libGraphicsMagick-Q16-3 libGraphicsMagick3-config - version update to 1.3.40 * GetMagickGeometry(): Fix a scaling issue where dimensions could be scaled down to zero. * PCD: Handle writing image with a dimension of 1. * PNG: When writing, use lower-case raw profile identifiers (e.g. 'Raw profile type xmp') because exiftool expects that. * SUN: The sense of monochrome images was inverted. Fix scanline size calculation. * WPG: Fix 20-year old bug in WPG header reading. New Features: * JXL: Decode and log extra channel information. This information is not yet used. * PCX and DCX: Support writing uncompressed format (use -compress none for no compression). * Added IM1, IM8, and IM24 magick aliases for the Sun Raster format since those are the historically correct extensions. API Updates: * AppendImageToList() now updates the image list pointer to be the image which was just added. Use GetFirstImageInList() when the pointer to the first image in the list is needed. ==== ImageMagick ==== Version update (7.1.0.57 -> 7.1.0.61) Subpackages: ImageMagick-config-7-SUSE ImageMagick-extra libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - version update to 7.1.0.61 * https://github.com/ImageMagick/Website/blob/main/ChangeLog.md - Update to 7.1.0.60 * https://github.com/ImageMagick/Website/blob/main/ChangeLog.md#710-60 ==== Mesa ==== Version update (22.3.4 -> 22.3.5) Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - U_ReturnME.patch * fixes blackscreen in Return To Monkey Island on Intel graphics (boo#1208145) - Update to version 22.3.5 * bug fix release which fixes bugs found since Mesa 22.3.4 * see https://docs.mesa3d.org/relnotes/22.3.5.html for more details - refreshed u_dep_xcb.patch - Don't enable rusticl without opencl ==== Mesa-demo ==== Subpackages: Mesa-demo-egl Mesa-demo-es Mesa-demo-x - added baselibs.conf as source to specfile - Add Mesa-demo-{egl,es,x}-32bit. This is useful as the 64- and 32-bit OpenGL environments are separate and need separate diagnostic programs. ==== Mesa-drivers ==== Version update (22.3.4 -> 22.3.5) Subpackages: Mesa-dri Mesa-gallium Mesa-libva - U_ReturnME.patch * fixes blackscreen in Return To Monkey Island on Intel graphics (boo#1208145) - Update to version 22.3.5 * bug fix release which fixes bugs found since Mesa 22.3.4 * see https://docs.mesa3d.org/relnotes/22.3.5.html for more details - refreshed u_dep_xcb.patch - Don't enable rusticl without opencl ==== MozillaFirefox ==== Version update (109.0 -> 109.0.1) - Mozilla Firefox 109.0.1 * Fixed jank when loading pages containing a large number of emoji characters (bmo#1809081) * Fixed an issue causing authentication prompts to not appear when loading pages in some enterprise environments (bmo#1809151) * ixed inconsistent sizing of event listener checkboxes inside the Inspector developer tool (bmo#1811760) ==== NetworkManager ==== Version update (1.40.10 -> 1.42.0) Subpackages: NetworkManager-bluetooth NetworkManager-pppoe NetworkManager-tui NetworkManager-wwan libnm0 typelib-1_0-NM-1_0 - Update to version 1.42.0: + Added support for source load balancing for Ethernet Bonds. + Allow specifying vhost name (SNI) for a manually DNS-over-TLS server. Only works with systemd-resolved plugin. + Connections can now be activated on a loopback interface. + Added support of IPv4 ECMP routes. The ECMP routes will get merged. - Update to version 1.40.12: + Make sure "external-ids" stays up to date in Open vSwitch database on a connection reapply. + Retry if a netlink sockets runs out of buffer space before we're able to read results of a link change. + Fix a possible race involving concurrent invocation of iptables in IPv4 shared mode. + Other various fixes. ==== SDL2 ==== Version update (2.26.2 -> 2.26.3) - Update to release 2.26.3 * Fixed infinite loop shutting down WGI controllers * Fixed centering the D-pad on some Xbox controllers ==== adwaita-xfce-icon-theme ==== - Dependency adwaita-icon-theme needs to be explicit ==== akonadi-calendar ==== Version update (22.12.1 -> 22.12.2) Subpackages: akonadi-calendar-lang akonadi-plugin-calendar kalendarac libKF5AkonadiCalendar5 - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== akonadi-calendar-tools ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== akonadi-contact ==== Version update (22.12.1 -> 22.12.2) Subpackages: akonadi-plugin-contacts libKF5AkonadiContact5 libKF5ContactEditor5 - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== akonadi-import-wizard ==== Version update (22.12.1 -> 22.12.2) Subpackages: libKPimImportWizard5 - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== akonadi-mime ==== Version update (22.12.1 -> 22.12.2) Subpackages: akonadi-plugin-mime libKF5AkonadiMime5 - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== akonadi-notes ==== Version update (22.12.1 -> 22.12.2) Subpackages: akonadi-notes-lang libKF5AkonadiNotes5 - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== akonadi-search ==== Version update (22.12.1 -> 22.12.2) Subpackages: libKF5AkonadiSearch5 - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== akonadi-server ==== Version update (22.12.1 -> 22.12.2) Subpackages: libKF5AkonadiAgentBase5 libKF5AkonadiCore5 libKF5AkonadiPrivate5 libKF5AkonadiWidgets5 libKF5AkonadiXml5 - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== akregator ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== analitza ==== Version update (22.12.1 -> 22.12.2) Subpackages: libAnalitza8 - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== apache2-mod_php8 ==== Version update (8.1.14 -> 8.1.16) - version update to 8.1.16 * This is a security release that addresses CVE-2023-0567, CVE-2023-0568, and CVE-2023-0662. * https://www.php.net/ChangeLog-8.php#8.1.16 - version update to 8.1.15 * This is a bug fix release. * https://www.php.net/ChangeLog-8.php#8.1.15 ==== apparmor ==== Subpackages: apparmor-abstractions apparmor-docs apparmor-parser apparmor-profiles apparmor-utils python3-apparmor - add abstractions-openssl-1_1.diff: allow to read /etc/ssl/openssl-1_1.cnf in abstractions/openssl (boo#1207911) - add nscd-systemd-userdb.diff: allow nscd to read systemd-userdb (boo#1207698) ==== apr ==== Version update (1.7.0 -> 1.7.2) - update to 1.7.2: * CVE-2022-24963: Integer Overflow or Wraparound vulnerability in apr_encode functions allows an attacker to write beyond bounds of a buffer (boo#1207870) * Add error handling for lseek() failures in apr_file_write() and apr_file_writev() * Avoid an overflow on 32 bit platforms * Don't silently set APR_FOPEN_NOCLEANUP for apr_file_mktemp() created file to avoid a fd and inode leak when/if later passed to apr_file_setaside(). * build system fixes and fixes for other platforms - drop apr-CVE-2021-35940.patch included upstream (CVE-2021-35940) ==== apr-util ==== Version update (1.6.1 -> 1.6.3) - update to 1.6.3 * CVE-2022-25147: Integer Overflow or Wraparound vulnerability in apr_base64 function allows an attacker to write beyond bounds of a buffer (boo#1207866) * build system updates - drop patches now included upstream: * apr-util-apr_dbm_gdbm-fix-handling-of-error-codes.patch * apr-util-mariadb-10.2.patch ==== ark ==== Version update (22.12.1 -> 22.12.2) Subpackages: libkerfuffle22 - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== arpwatch-ethercodes ==== Version update (20221212 -> 20230209) - Update to version 20230209 ==== attica-qt5 ==== Version update (5.102.0 -> 5.103.0) Subpackages: libKF5Attica5 - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - No code change since 5.102.0 ==== audacity ==== Version update (3.2.2 -> 3.2.4) Subpackages: audacity-lang - Update to 3.2.3: This is a patch release for Audacity 3.2. It adds ability to share audio publicly and fixes some bugs. * #3884 Audio can now be shared publicly on audio.com * #4040 Fixed the screenshot tool * #4019 Selecting audio no longer marks the project as changed * #3693 A new toolbar with cut/copy/paste buttons has been added * #3216 Plain UI for VST3 plugins no longer show MIDI CC parameters * #2620 The effects sidebar no longer can fill the entire screen - Update to 3.2.4: This is a hotfix release. It fixes the following bug: * #4057 Fixed the meters not retaining size - Increase the constraints to avoid OOM at the build time ==== audit ==== Version update (3.0.6 -> 3.0.9) Subpackages: libaudit1 libauparse0 - Enable build for ARM (32-bit) - Update to version 3.0.9: * In auditd, release the async flush lock on stop * Don't allow auditd to log directly into /var/log when log_group is non-zero * Cleanup krb5 memory leaks on error paths * Update auditd.cron to use auditctl --signal * In auparse, if too many fields, realloc array bigger (Paul Wolneykien) * In auparse, special case kernel module name interpretation * If overflow_action is ignore, don't treat as an error (3.0.8) * Add gcc function attributes for access and allocation * Add some more man pages (MIZUTA Takeshi) * In auditd, change the reinitializing of the plugin queue * Fix path normalization in auparse (Sergio Correia) * In libaudit, handle ECONNREFUSED for network uid/gid lookups (Enzo Matsumiya) * In audisp-remote, fix hang with disk_low_action=suspend (Enzo Matsumiya) * Drop ProtectHome from auditd.service as it interferes with rules (3.0.7) * Add support for the OPENAT2 record type (Richard Guy Briggs) * In auditd, close the logging file descriptor when logging is suspended * Update the capabilities lookup table to match 5.16 kernel * Improve interpretation of renamat & faccessat family of syscalls * Update syscall table for the 5.16 kernel * Reduce dependency from initscripts to initscripts-service - Refresh patches (context adjusment): * audit-allow-manual-stop.patch * audit-ausearch-do-not-require-tclass.patch * audit-no-gss.patch * enable-stop-rules.patch * fix-hardened-service.patch * harden_auditd.service.patch - Remove patches (fixed by version update): * libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch * audisp-remote-fix-hang-with-disk_low_action-suspend-.patch ==== audit-secondary ==== Version update (3.0.6 -> 3.0.9) Subpackages: audit python3-audit system-group-audit - Replace transitional %usrmerged macro with regular version check (boo#1206798) - Enable build for ARM (32-bit) - Update to version 3.0.9: * In auditd, release the async flush lock on stop * Don't allow auditd to log directly into /var/log when log_group is non-zero * Cleanup krb5 memory leaks on error paths * Update auditd.cron to use auditctl --signal * In auparse, if too many fields, realloc array bigger (Paul Wolneykien) * In auparse, special case kernel module name interpretation * If overflow_action is ignore, don't treat as an error (3.0.8) * Add gcc function attributes for access and allocation * Add some more man pages (MIZUTA Takeshi) * In auditd, change the reinitializing of the plugin queue * Fix path normalization in auparse (Sergio Correia) * In libaudit, handle ECONNREFUSED for network uid/gid lookups (Enzo Matsumiya) * In audisp-remote, fix hang with disk_low_action=suspend (Enzo Matsumiya) * Drop ProtectHome from auditd.service as it interferes with rules (3.0.7) * Add support for the OPENAT2 record type (Richard Guy Briggs) * In auditd, close the logging file descriptor when logging is suspended * Update the capabilities lookup table to match 5.16 kernel * Improve interpretation of renamat & faccessat family of syscalls * Update syscall table for the 5.16 kernel * Reduce dependency from initscripts to initscripts-service - Refresh patches (context adjusment): * audit-allow-manual-stop.patch * audit-ausearch-do-not-require-tclass.patch * audit-no-gss.patch * enable-stop-rules.patch * fix-hardened-service.patch * harden_auditd.service.patch - Remove patches (fixed by version update): * libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch * audisp-remote-fix-hang-with-disk_low_action-suspend-.patch ==== baloo5 ==== Version update (5.102.0 -> 5.103.0) Subpackages: baloo5-file baloo5-file-lang baloo5-imports baloo5-kioslaves baloo5-kioslaves-lang baloo5-tools baloo5-tools-lang libKF5Baloo5 libKF5BalooEngine5 libKF5BalooEngine5-lang - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - Changes since 5.102.0: * Fix automoc issues on generated DBus source files * Don't skip automoc for DBus interfaces ==== baloo5-widgets ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== bind ==== Version update (9.18.11 -> 9.18.12) Subpackages: bind-doc bind-utils - Update to release 9.18.12 Removed Features: * Specifying a port when configuring source addresses (i.e., as an argument to query-source, query-source-v6, transfer-source, transfer-source-v6, notify-source, notify-source-v6, parental-source, or parental-source-v6, or in the source or source-v6 arguments to primaries, parental-agents, also-notify, or catalog-zones) has been deprecated. In addition, the use-v4-udp-ports, use-v6-udp-ports, avoid-v4-udp-ports, and avoid-v6-udp-ports options have also been deprecated. Warnings are now logged when any of these options are encountered in named.conf. In a future release, they will be made nonfunctional. Bug Fixes: * A constant stream of zone additions and deletions via rndc reconfig could cause increased memory consumption due to delayed cleaning of view memory. This has been fixed. * The speed of the message digest algorithms (MD5, SHA-1, SHA-2), and of NSEC3 hashing, has been improved. * Pointing parental-agents to a resolver did not work because the RD bit was not set on DS requests. This has been fixed. * Building BIND 9 failed when the --enable-dnsrps switch for ./configure was used. This has been fixed. - Updated keyring and signature ==== blinken ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== bluedevil5 ==== Version update (5.26.5 -> 5.27.0) Subpackages: bluedevil5-lang - Update to 5.27.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.0 - No code changes since 5.26.90 - Update to 5.26.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.90 - Too many changes to list here ==== blueman ==== Version update (2.2.4 -> 2.3.5) Subpackages: thunar-sendto-blueman - Update to version 2.3.5: * Right click menu was pointing to the wrong list row * Double click to connect - Changes from version 2.3.4: * Errors when connected to a device with the DisconnectItems plugin enabled - Changes from version 2.3.3: * Issues with NM PANU connections of equally named devices * Submenus in KDE Plasma tray * Avoid using StatusNotifierItem and GtkStatusIcon icons in parallel * Do not re-use dbusmenu item identifiers; avoids issues at least with gnome-shell-extension-appindicator - Changes from version 2.3.2: * StatusNotifierItem submenus did not work in lxqt-panel (@niknah) * StatusNotifierItem vanished on panel restarts * StatusNotifierItem compatibility issues with libdbusmenu used at least by xfce4-panel and Waybar * StatusNotifierItem showed the menu on left click in xfce4-panel - Changes from version 2.3.1: * StatusNotifierItem sent an incomplete NewStatus signal. * Avoid statusbar resize when showing progressbar - Changes from version 2.3.0: * Blocked emblem was not visible for scales other than 1 * Audio profile switcher in applet menu (@abhijeetviswa) * Symbolic tray icon option (GSettings switch symbolic-status-icons in org.blueman.general) * Replace AppIndicator with DBus StatusNotifierItem * Use a GtkTreeModelFilter to show/hide unnamed devices * Replace sigint hack with GLib to catch it * Port meson from deprecated python3 module * Rework battery handling * Merge Battery applet plugin into ConnectionNotifier * Symbolic icons and small UI improvements - Changes from version 2.2.5: * Fix network interface iteration on 32 bit systems * Manager: Fix cancel button in send-note dialog * Fix battery and signals bars - Removed blueman-2.2.4-ayatana-appindicator.patch as Appindicator has been replaced with DBus StatusNotifierItem - Dependencies.md file is no longer packaged ==== bluez-qt ==== Version update (5.102.0 -> 5.103.0) Subpackages: bluez-qt-imports bluez-qt-udev libKF5BluezQt6 - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - No code change since 5.102.0 ==== breeze ==== Version update (5.26.5 -> 5.27.0) Subpackages: breeze5-cursors breeze5-decoration breeze5-style breeze5-style-lang libbreezecommon5-5 - Update to 5.27.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.0 - Changes since 5.26.90: * MenuItem,TitleBar: Don't stretch icons, instead scale them down to fit and center inside their rect * Revert "MenuItem: Don't stretch icons, instead scale them down to fit rect" * MenuItem: Don't stretch icons, instead scale them down to fit rect * Factor out 3 pixelMetric calls in MenuItemControl drawing * Moved old wallpaper, added new one, updated previews * ToolButton: Fix text position in text-with-menu-but-no-icon RTL mode * ToolButton: Fix drop-down menu arrow in RTL layouts * ScrollBar: Fix pixel alignment in RTL mode * kdecoration: Fix outline gap with fractional scale (kde#461358) * Only use frameworkintegration on Linux/BSD - Update to 5.26.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.90 - Too many changes to list here ==== breeze-gtk ==== Version update (5.26.5 -> 5.27.0) Subpackages: gtk2-metatheme-breeze gtk3-metatheme-breeze metatheme-breeze-common - Update to 5.27.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.0 - No code changes since 5.26.90 - Update to 5.26.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.90 - Changes since 5.26.5: * Add gtk-dark-4.0.css target ==== breeze5-icons ==== Version update (5.102.0 -> 5.103.0) - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - No code change since 5.102.0 ==== c-ares ==== Version update (1.18.1 -> 1.19.0) - Update to version 1.19.0 Security: * Low. Stack overflow in ares_set_sortlist() which is used during c-ares initialization and typically provided by an administrator and not an end user. (bsc#1208067, CVE-2022-4904) Changes: * Add ARES_OPT_HOSTS_FILE similar to ARES_OPT_RESOLVCONF for specifying a custom hosts file location. Bug fixes: * Fix memory leak in reading /etc/hosts when using localhost fallback. * Fix chain building c-ares when libresolv is already included by another project. * File lookup should not immediately abort as there may be other tries due to search criteria. * Asterisks should be allowed in host validation as CNAMEs may reference wildcard domains. * AutoTools build system referenced bad STDC_HEADERS macro. * Even if one address class returns a failure for ares_getaddrinfo() we should still return the results we have. * Fix ares_getaddrinfo() numerical address resolution with AF_UNSPEC * Fix tools and help information. * Various documentation fixes and cleanups. * Add include guards to ares_data.h * c-ares could try to exceed maximum number of iovec entries supported by system. * The RFC6761 6.3 states localhost subdomains must be offline too ==== cabextract ==== Version update (1.9.1 -> 1.10) - Update to version 1.10 * Multiple -F filters can be given. cabextract will extract files matching any of the filters. * cabextract now overwrites symlinks by default. This is to be consistent with other archive tools. Use the new -k option for the old behaviour of keeping symlinks. This does not affect symlinks in the -d dirpath option. * New -n option to never overwrite files. * New -i option to interactively prompt if you want to overwrite files. ==== calendarsupport ==== Version update (22.12.1 -> 22.12.2) Subpackages: libKF5CalendarSupport5 - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== ceph ==== Version update (16.2.9.539+gea74dd900cd -> 16.2.11.58+g38d6afd3b78) Subpackages: librados2 librbd1 - Update to 16.2.11-58-g38d6afd3b78: + test/CMakeLists.txt: move 'APPEND rgw_libs Boost::filesystem' to top level - Update to 16.2.11-57-g9be7fb44a33: + ceph.spec.in: Replace %usrmerged macro with regular version check - checkin.sh: default to ses7p branch - Update to 16.2.11-56-gc067055f8f5: + (bsc#1199183) osd, tools, kv: non-aggressive, on-line trimming of accumulated dups + (bsc#1200262) ceph-volume: fix fast device alloc size on mulitple device + (bsc#1200501) cephadm: update monitoring container images + (bsc#1200978) mgr/dashboard: prevent alert redirect + (bsc#1201797) mgr/volumes: Add subvolumegroup resize cmd + (bsc#1201837) mgr/volumes: Fix subvolume discover during upgrade (CVE-2022-0670) + (bsc#1201976) monitoring/ceph-mixin: add RGW host to label info + (bsc#1202077) mgr/dashboard: enable addition of custom Prometheus alerts + (bsc#1203375) python-common: Add 'KB' to supported suffixes in SizeMatcher + (bsc#1204430) ceph-crash: drop privleges to run as "ceph" user, rather than root (CVE-2022-3650) + (bsc#1205025) rgw: Guard against malformed bucket URLs (CVE-2022-3854) + (bsc#1205436) mgr/dashboard: fix rgw connect when using ssl ==== clamav ==== Version update (0.103.7 -> 0.103.8) Subpackages: libclamav9 libfreshclam2 - Update to 0.103.8 * CVE-2023-20032: Fixed a possible remote code execution vulnerability in the HFS+ file parser. Issue affects versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier. (bsc#1208363) * CVE-2023-20052: Fixed a possible remote information leak vulnerability in the DMG file parser. Issue affects versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier. (bsc#1208365) * Update vendored libmspack library to version 0.11alpha. - Package huge .html documentation in a separate subpackage. ==== cryptsetup ==== Version update (2.6.0 -> 2.6.1) Subpackages: cryptsetup-doc libcryptsetup12 libcryptsetup12-hmac - cryptsetup 2.6.1 * bitlk: Fixes for BitLocker-compatible on-disk metadata parser * Fix possible iteration overflow in OpenSSL2 PBKDF2 crypto backend * portability and compilation fixes * verity: Fix possible hash offset setting overflow. * bitlk: Fix use of startup BEK key on big-endian platforms. * Do not initiate encryption (reencryption command) when the header and data devices are the same. If data device reduction is not requsted, this leads to data corruption since LUKS metadata was written over the data device. * Fix possible memory leak if crypt_load() fails. * Always use passphrases with a minimal 8 chars length for benchmarking, as used in some implementation of FIPS mode ==== cyrus-sasl ==== Subpackages: cyrus-sasl-crammd5 cyrus-sasl-digestmd5 cyrus-sasl-gssapi cyrus-sasl-plain libsasl2-3 - drop optional opie dependency ==== dLeyna ==== - Add dLeyna-no-python-shebang.patch: remove /usr/bin/python shebang from download_sync_controller.py. The file is installed into a python 3.10 site-directory and thus clearly does not need a python2 shebang. ==== dav1d ==== Version update (1.0.0 -> 1.1.0) - Update to version 1.1.0 * New function dav1d_get_frame_delay to query the decoder frame delay * Numerous fixes for strict conformity to the specs and samples * NEON and AVX-512 misc fixes and improvements * Partial AVX2 12bpc transform implementations * AVX-512 high bit-depth cdef_filter, loopfilter, itx * NEON z1/z3 optimization for 8bpc * SSSE3 z1 optimization for 8bpc ==== dbus-1 ==== Version update (1.14.4 -> 1.14.6) Subpackages: dbus-1-common dbus-1-daemon dbus-1-tools libdbus-1-3 - Fix multibuild: do not mention main flavor in multibuild, as it is implicit built. - update to 1.14.6: * Fix an incorrect assertion that could be used to crash dbus-daemon or other users of DBusServer prior to authentication, if libdbus was compiled with assertions enabled. We recommend that production builds of dbus, for example in OS distributions, should be compiled with checks but without assertions. * When connected to a dbus-broker, stop dbus-monitor from incorrectly replying to Peer method calls that were sent to the dbus-broker with a NULL destination * Fix out-of-bounds varargs read in the dbus-daemon's config- parser. This is not attacker-triggerable and appears to be harmless in practice, but is technically undefined behaviour and is detected as such by AddressSanitizer. * Avoid a data race in multi-threaded use of DBusCounter * Fix a crash with some glibc versions when non-auditable SELinux events are logged (dbus!386, Jeremi Piotrowski) * If dbus_message_demarshal() runs out of memory while validating a message, report it as NoMemory rather than InvalidArgs (dbus#420, Simon McVittie) * Use C11 _Alignof if available, for better standards- compliance * Stop including an outdated copy of pkg.m4 in the git tree * Documentation: * Fix the test-apparmor-activation test after dbus#416 * Internal changes: * Fix CI builds with recent git versions (dbus#447, Simon McVittie) - switch to using multibuild ==== desktop-translations ==== Version update (84.87.20220427.80cb897f -> 84.87.20230128.350400f) - Update to version 84.87.20230128.350400f: * Translated using Weblate (Macedonian) * Translated using Weblate (German) * Translated using Weblate (Georgian) * Translated using Weblate (Georgian) * Translated using Weblate (Finnish) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (German) * Translated using Weblate (German) * Translated using Weblate (German) * Translated using Weblate (Czech) * Translated using Weblate (Czech) * Translated using Weblate (Czech) * Translated using Weblate (Czech) * Translated using Weblate (Spanish) * Translated using Weblate (Spanish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Macedonian) * Translated using Weblate (Russian) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Russian) ==== discover ==== Version update (5.26.5 -> 5.27.0) Subpackages: discover-backend-flatpak discover-backend-fwupd discover-backend-packagekit discover-lang - Discover 5.27 can be built again on archs missing QtWebEngine - Update to 5.27.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.0 - Changes since 5.26.90: * Workaround visibly empty changelog * PackageKit: PackageState takes the packageName not the appstreamId (kde#464357) * ui: Fix plural calculation of app list page heading (kde#464882) * flatpak: Use the recommended URL for flathub's flatpakrepo * flatpak: Make sure we are reading the correct metadata (kde#464128) * flatpak: Don't filter twice the componentsByFlatpakId result for its bundle id * flatpak: Make test run a bit faster * flatpak: Address install package look-up * flatpak: Properly read .flatpakrepo names * flatpak: Fix test on the CI * Specify the domain in libdiscover's QML i18n calls * DiscoverObject: Also show C++ errors in the messages sheet * flatpak: Fix loading flatpakref files (kde#464206) * Add network timeouts by default * ReviewsPage: Fix clipping under scroll bar - Refresh 0001-Warning-for-FlatHub.patch - Update to 5.26.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.90 - Too many changes to list here ==== dnsmasq ==== Version update (2.88 -> 2.89) - update to 2.89: * Fix bug introduced in 2.88 (commit fe91134b) which can result in corruption of the DNS cache internal data structures and logging of "cache internal error". This has only been seen in one place in the wild, and it took considerable effort to even generate a test case to reproduce it, but there's no way to be sure it won't strike, and the effect is to break the cache badly. Installations with DNSSEC enabled are more likely to see the problem, but not running DNSSEC does not guarantee that it won't happen. Thanks to Timo van Roermund for reporting the bug and for his great efforts in chasing it down. (boo#1207174) - remove no longer needed rpmlintrc filters ==== dolphin ==== Version update (22.12.1 -> 22.12.2) Subpackages: dolphin-part libdolphinvcs5 - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== dos2unix ==== Version update (7.4.3 -> 7.4.4) - update to 7.4.4: * translation updates ==== drkonqi5 ==== Version update (5.26.5 -> 5.27.0) Subpackages: drkonqi5-lang - Update to 5.27.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.0 - No code changes since 5.26.90 - Add patch to actually disable sentry: * 0001-Handle-WITH_SENTRY-correctly.patch - Add patch to avoid unnecessary dependencies of the gdb script: * 0002-Make-python-distro-and-psutil-modules-in-the-gdb-pre.patch - Update to 5.26.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.90 - Changes since 5.26.5: * pass the bug id not the attachment id to the gui (kde#462432) * remove pointless todo * check telemetrymode * Use qdbus to query for the hostname * allow using debuginfod for symbol resolution with gdb12 (kde#454063) * add some a11y annotations * do not submit to sentry when the bugzilla url is overridden * Install po folder * Port away from deprecated KDeclarative::setupEngine - Avoid try-restarting a template unit in %postun ==== elfutils ==== Subpackages: libasm1 libdw1 libelf1 - Fix build with libcurl version 7.88.0 for various deprecated constants. Add patches: * elfutils-0.188-CURLOPT_PROTOCOLS_STR.patch * elfutils-0.188-CURL_AT_LEAST_VERSION.patch * elfutils-0.188-deprecated-CURLINFO.patch - Add support-DW_TAG_unspecified_type.patch that fixes PR30047. ==== elfutils-debuginfod ==== Subpackages: debuginfod-profile libdebuginfod1 - Fix build with libcurl version 7.88.0 for various deprecated constants. Add patches: * elfutils-0.188-CURLOPT_PROTOCOLS_STR.patch * elfutils-0.188-CURL_AT_LEAST_VERSION.patch * elfutils-0.188-deprecated-CURLINFO.patch - Add support-DW_TAG_unspecified_type.patch that fixes PR30047. ==== eventviews ==== Version update (22.12.1 -> 22.12.2) Subpackages: libKF5EventViews5 - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== evolution ==== Version update (3.46.3 -> 3.46.4) Subpackages: evolution-plugin-spamassassin - Update to version 3.46.4: + Markdown: Enhance convert of mail signature into markdown + CollectionAccountEditor: Fix packing of the switch widgets + Bugs fixed: - Moving message does not select previous message - "Private reply" addressed to list when sender is one of my accounts - Calendar: . Preserve Work Week view on date change, if possible . Copy through clipboard can break series - ENameSelectorEntry: Refresh completion results more ofter + Updated translations. ==== evolution-data-server ==== Version update (3.46.3 -> 3.46.4) Subpackages: libcamel-1_2-64 libebackend-1_2-11 libebook-1_2-21 libebook-contacts-1_2-4 libecal-2_0-2 libedata-book-1_2-27 libedata-cal-2_0-2 libedataserver-1_2-27 libedataserverui-1_2-4 - Update to version 3.46.4: + Parse URI strings into GUri in a relaxed mode + IMAPx: Folder refresh could remove new message from local summary + Bugs fixed: - libedataserverui4: (almost) empty GIR/VAPI file - IMAP: Inbox hidden in offline with "Show only subscribed folders" - Google Task modification not synced - CalDAV: Can fail to refresh content in some cases + Updated translations. ==== evolution-ews ==== Version update (3.46.3 -> 3.46.4) - Update to version 3.46.4: + Sanitize headers in debug log also for level 1 + Bugs fixed: - Calendar: . Cover possible ID conversion for Online meetings . Ensure TimeZone info in SOAP-header request . Convert floating time to user's timezone on save - Disabled sources auto-re-enabled the next start - Subscribed free/busy calendar does not show all events ==== exiv2 ==== Version update (0.27.5 -> 0.27.6) - add always-use-signed-char-for-conversion.patch for test suite fixes on non-x86_64 - Disable bugfixes.github.test_CVE_2018_12265.AdditionOverflowInLoaderExifJpeg as it is broken on some archs See: https://github.com/Exiv2/exiv2/issues/933 - update to 0.27.6: * Add Nikon3.WhiteBalanceBias2 * Add Nikon LensData v0802 * Add some F mount lenses * Initial support for OM System MakerNote * Add Sony ARW compression to dict * Exif start can be at any byte in payload, not word aligned * Fix exception type when writing BMFF file * Add more MIME type mappings for TIFF-based raws * Fix naming of canon EF 35-80mm * Replace assert with enforce * PNG: always strip the existing iCCP chunk * Account for header bytes for Exif and XMP boxes * Fix Integer overflow in Photoshop::setIptcIrb * Fix Integer-overflow in sumToLong * Fix out of bounds read in isValidBoxFileType() * Fix in Jp2 metadata writing & improvements in reading * Strip XMP raw packet before decoding * Add tiff tags * Add more DNG 1.6 tags * Fix bug in iterating over the elements of dateStrings * Use memmove in TiffEncoder::updateDirEntry * Treat Exif.Sony1.PreviewImage as undefined tag ==== fetchmail ==== Version update (6.4.35 -> 6.4.36) Subpackages: fetchmailconf - Update to 6.4.36: * TRANSLATIONS: language translations were updated: - cs, es, fr, ja, pl, ro, sq, sv ==== ffmpeg-5 ==== Subpackages: libavcodec59 libavdevice59 libavfilter8 libavformat59 libavutil57 libpostproc56 libswresample4 libswscale6 - Add no-vk-video-decoding.patch to resolve build failure with Vulkan 1.3.239 ==== ffmpeg-5-mini ==== - Add no-vk-video-decoding.patch to resolve build failure with Vulkan 1.3.239 ==== ffmpegthumbs ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== filesystem ==== - Remove /etc/sysconfig/network hierachy again, YaST got fixed - Add Korean man pages directory used by xz ==== flatpak ==== Version update (1.14.1 -> 1.14.2) Subpackages: flatpak-remote-flathub flatpak-zsh-completion libflatpak0 system-user-flatpak - Update to version 1.14.2: + The INFO log level is now treated the same as the DEBUG log level by flatpak -v, to make backports from 1.15.x simpler. + Bug fixes: - Display the intended messages for flatpak repair. - Exporting an app to an existing repository on a CIFS filesystem now works as intended. - Unset $GIO_EXTRA_MODULES for apps, avoiding misbehaviour in some GLib apps when set to a path on the host. - Unset $XKB_CONFIG_ROOT for apps, avoiding crashes in GTK and Qt apps under Wayland when this variable is set to a path not available in the sandbox. - Unset $KRB5CCNAME for apps. - When using the fish shell, avoid duplicate XDG_DATA_DIRS entries if the profile script is sourced more than once. - Package flatpak-remote-flathub sub-package as noarch. ==== fontconfig ==== Version update (2.14.1 -> 2.14.2) Subpackages: libfontconfig1 - update to 2.14.2: * Adjust indentation between programlisting in fontconfig-user.sgml * Add some missing constant names for weight * Report more detailed logs instead of assertion * Fix a typo in description for HAVE_STDATOMIC_PRIMITIVES * Ignore LC_CTYPE if set to "UTF-8" * add --with-default-sub-pixel-rendering option * Add FC_DESKTOP_NAME property ==== frameworkintegration ==== Version update (5.102.0 -> 5.103.0) Subpackages: frameworkintegration-plugin libKF5Style5 - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - No code change since 5.102.0 ==== freeipmi ==== Version update (1.6.9 -> 1.6.10) Subpackages: libfreeipmi17 libipmiconsole2 libipmidetect0 - freeipmi 1.6.10 * Support IPv6 Lan configuration in ipmi-config IPv6 configuration is supported in the new Lan6_Conf section - add upstream signing key and source signature ==== fuse3 ==== Version update (3.13.0 -> 3.14.0) Subpackages: libfuse3-3 - Update to release 3.14 * Split config.h into private and public config - Delete 0001-Split-config.h-into-private-and-public-config.patch (merged). - Update to release 3.13.1 * Fixed an issue that resulted in errors when attempting to compile against installed libfuse headers (because libc symbol versioning support was not detected correctly in this case). - Add 0001-Split-config.h-into-private-and-public-config.patch to fix doubly-defined macros and build failure elsewhere. ==== gcc13 ==== Version update (13.0.1+git5199 -> 13.0.1+git5428) Subpackages: libasan8 libatomic1 libgcc_s1 libgfortran5 libgomp1 libhwasan0 libitm1 liblsan0 libobjc4 libstdc++6 libstdc++6-locale libstdc++6-pp libtsan2 libubsan1 - Add support for new front-ends Rust and Modula-2. - Align _multibuild order with gcc12 package. - Bump to ca8fb0096713a8477614ef874f16ba5bf16c48bc, git5428. - Add bootstrap conditional to allow --without=bootstrap to be specified to speed up local builds for testing. - Bump included newlib to version 4.3.0. - Update to GCC trunk head (r13-5254-g05b9868b182bb9) * pulls Go frontend fix to fix build fail on s390x * pulls upstream fix for PR107678, obsoleting gcc13-pr107678.patch - Also package libhwasan_preinit.o on aarch64. ==== git ==== Version update (2.39.1 -> 2.39.2) Subpackages: git-core git-email git-gui git-svn git-web gitk perl-Git - git 2.39.2: * CVE-2023-22490: Using a specially-crafted repository, Git can be tricked into using its local clone optimization even when using a non-local transport boo#1208027 * CVE-2023-23946: a path outside the working tree can be overwritten as the user who is running "git apply" boo#1208028 ==== glibc ==== Version update (2.36 -> 2.37) Subpackages: glibc-devel glibc-extra glibc-locale glibc-locale-base nscd - Update to glibc 2.37 * The getent tool now supports the --no-addrconfig option * The dynamic linker no longer loads shared objects from the "tls" subdirectories on the library search path or the subdirectory that corresponds to the AT_PLATFORM system name, or employs the legacy AT_HWCAP search mechanism, which was deprecated in version 2.33 - printf-grouping.patch: Account for grouping in printf width (BZ #30068) - strftime-time64.patch: Use 64-bit time_t interfaces in strftime and strptime (BZ #30053) - glibcextract-compile-c-snippet.patch, sys-mount-kernel-definition.patch, sys-mount-usage.patch, nscd-netlink-cache-invalidation.patch, syslog-large-messages.patch, dlmopen-libc-early-init.patch, ldd-vdso-dependency.patch, syslog-extra-whitespace.patch, errlist-edeadlock.patch, makeflags.patch, get-nscd-addresses.patch, x86-64-avx2-string-functions.patch, nscd-aicache.patch, dl-debug-bindings.patch, floatn.patch: Removed - Remove reference to obsolete %usrmerged macro (boo#1206798) ==== gnome-contacts ==== Version update (43.0 -> 43.1) Subpackages: gnome-shell-search-provider-contacts - Update to version 43.1: + This is the second stable release in the GNOME 43 series, which fixes several bugs when updating or editing a contact. + Updated translations. ==== gnome-control-center ==== Version update (43.2 -> 43.4.1) Subpackages: gnome-control-center-color gnome-control-center-goa gnome-control-center-user-faces - Update to version 43.4.1: + Network: Fix possible race in tests. + Updated translations. ==== gnome-desktop ==== Version update (43.1 -> 43.2) Subpackages: libgnome-desktop-3-20 libgnome-desktop-3_0-common libgnome-desktop-4-2 typelib-1_0-GnomeDesktop-3_0 typelib-1_0-GnomeDesktop-4_0 - Update to version 43.2: + Fix idle monitor watch leak. + Updated translations. ==== gnome-maps ==== Version update (43.3 -> 43.4) - Update to version 43.4: + Prevent the scale to cover the sidebar when the window is narrow. ==== gnome-shell ==== Version update (43.2 -> 43.3) Subpackages: gnome-extensions gnome-shell-calendar - Update to version 43.3: + Ensure quick settings toggles align with the pixel grid + Lower OOM score of gnome-shell process + Fix incomplete device list in volume menus + Fixed crash + Plugged leak + Misc. bug fixes and cleanups + Updated translations. ==== gnome-software ==== Version update (43.3 -> 43.4) Subpackages: gnome-software-plugin-packagekit - Add upstream leak fixes: + 66b400d63b8d7b921b83250a8b9a09e9a1eb6732.patch: gs-plugin-job-list-apps: Fix a leak of the GsAppQuery + 1355554764815195aaf9f6e23acdd7a9c521ceaa.patch: gs-plugin-job-manage-repository: Fix a minor leak - Update to version 43.4: + Stop cancelled search in appstream data early. + Lookup for appstream-provided icons in more directories. ==== gnome-terminal ==== Version update (3.46.7 -> 3.46.8) Subpackages: gnome-shell-search-provider-gnome-terminal nautilus-extension-terminal - Update to version 3.46.8: * all: Make env filtering uniform * build: Use built-in mandir option * client: - legacy: Drop debug messages - Transport XDG_ACTIVATION_TOKEN to the server * metainfo: Add launchable info * prefs: Fix default terminal check * screen: Use correct environment filter * Updated translations. ==== gnutls ==== Version update (3.7.8 -> 3.7.9) Subpackages: libgnutls-dane0 libgnutls30 libgnutls30-hmac - Update to 3.7.9: [bsc#1208143, CVE-2023-0361] * libgnutls: Fix a Bleichenbacher oracle in the TLS RSA key exchange. [GNUTLS-SA-2020-07-14, CVSS: medium][CVE-2023-0361] * Rebase gnutls-FIPS-140-3-references.patch ==== grantleetheme ==== Version update (22.12.1 -> 22.12.2) Subpackages: libKF5GrantleeTheme5 - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== grub2 ==== Subpackages: grub2-arm64-efi grub2-snapper-plugin grub2-systemd-sleep-plugin - Refresh 0003-tpm2-resend-the-command-on-TPM_RC_RETRY.patch to handle the TPM2 responseCode correctly. - Add module for boot loader interface. Needed for load Unified Kernel Image (UKI) * grub2-add-module-for-boot-loader-interface.patch - Amend the TPM2 stack and add authorized policy mode to tpm2_key_protector * 0001-tpm2-adjust-the-input-parameters-of-TPM2_EvictContro.patch * 0002-tpm2-declare-the-input-arguments-of-TPM2-functions-a.patch * 0003-tpm2-resend-the-command-on-TPM_RC_RETRY.patch * 0004-tpm2-add-new-TPM2-types-structures-and-command-const.patch * 0005-tpm2-add-more-marshal-unmarshal-functions.patch * 0006-tpm2-check-the-command-parameters-of-TPM2-commands.patch * 0007-tpm2-pack-the-missing-authorization-command-for-TPM2.patch * 0008-tpm2-allow-some-command-parameters-to-be-NULL.patch * 0009-tpm2-remove-the-unnecessary-variables.patch * 0010-tpm2-add-TPM2-commands-to-support-authorized-policy.patch * 0011-tpm2-make-the-file-reading-unmarshal-functions-gener.patch * 0012-tpm2-initialize-the-PCR-selection-list-early.patch * 0013-tpm2-support-unsealing-key-with-authorized-policy.patch - Fix nvmf boot device setup (bsc#1207811) * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch - Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064) * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch - Fix GCC 13 build failure (bsc#1201089) * 0002-AUDIT-0-http-boot-tracker-bug.patch ==== gsl ==== Version update (2.6 -> 2.7.1) - update to gsl 2.7.1: * update libtool version numbers - update to gsl 2.7: * fixed doc bug for gsl_histogram_min_bin (lhcsky at 163.com) * fixed bug #60335 (spmatrix test failure, J. Lamb) * fixed bug #36577 * clarified documentation on interpolation accelerators (V. Krishnan) * fixed bug #45521 (erroneous GSL_ERROR_NULL in ode-initval2, thanks to M. Sitte) * fixed doc bug #59758 * fixed bug #58202 (rstat median for n=5) * added support for native C complex number types in gsl_complex when using a C11 compiler * upgraded to autoconf 2.71, automake 1.16.3, libtool 2.4.6 * updated exponential fitting example for nonlinear least squares * added banded LU decomposition and solver (gsl_linalg_LU_band) * New functions added to the library: - gsl_matrix_norm1 - gsl_spmatrix_norm1 - gsl_matrix_complex_conjtrans_memcpy - gsl_linalg_QL: decomp, unpack - gsl_linalg_complex_QR_* (thanks to Christian Krueger) - gsl_vector_sum - gsl_matrix_scale_rows - gsl_matrix_scale_columns - gsl_multilarge_linear_matrix_ptr - gsl_multilarge_linear_rhs_ptr - gsl_spmatrix_dense_add (renamed from gsl_spmatrix_add_to_dense) - gsl_spmatrix_dense_sub - gsl_linalg_cholesky_band: solvem, svxm, scale, scale_apply - gsl_linalg_QR_UD: decomp, lssolve - gsl_linalg_QR_UU: decomp, lssolve, QTvec - gsl_linalg_QR_UZ: decomp - gsl_multifit_linear_lcurvature - gsl_spline2d_eval_extrap * bug fix in checking vector lengths in gsl_vector_memcpy (dieggsy(a)pm.me) * made gsl_sf_legendre_array_index() inline and documented gsl_sf_legendre_nlm() - Drop no longer required gsl-rpmlintrc ==== gstreamer ==== Version update (1.20.5 -> 1.22.0) Subpackages: gstreamer-utils libgstreamer-1_0-0 typelib-1_0-Gst-1_0 - Add fix using sed to find gst-plugin-scanner-%{_target_cpu} program (boo#1207908). - Add patch to reduce the required meson version to 0.61.0 since that's what we have in SLE 15: * reduce-required-meson.patch - Probably because of a problem in SLE's meson, the generated pkgconfig files are missing some variables that are needed by rpm to generate the pkgconfig(...) provides correctly. In order to fix this, we now check for those variables and insert them in the pc files before installation if they're missing. - Update to version 1.22.0: + AV1 video codec support improvements + New HLS, DASH and Microsoft Smooth Streaming adaptive streaming clients + Qt6 support for rendering video inside a QML scene + Minimal builds optimised for binary size, including only the individual elements needed + Playbin3, Decodebin3, UriDecodebin3, Parsebin enhancements and stabilisation + WebRTC simulcast support and support for Google Congestion Control + WebRTC-based media server ingestion/egress (WHIP/WHEP) support + New easy to use batteries-included WebRTC sender plugin + Easy RTP sender timestamp reconstruction for RTP and RTSP + ONVIF timed metadata support + New fragmented MP4 muxer and non-fragmented MP4 muxer + New plugins for Amazon AWS storage and audio transcription services + New gtk4paintablesink and gtkwaylandsink renderers + New videocolorscale element that can convert and scale in one go for better performance + High bit-depth video improvements + Touchscreen event support in navigation API + Rust plugins now shipped in macOS and Windows/MSVC binary packages + H.264/H.265 timestamp correction elements for PTS/DTS reconstruction before muxers + Improved design for DMA buffer sharing and modifier handling for hardware-accelerated video decoders/encoders/filters and capturing/rendering on Linux + Video4Linux2 hardware accelerated decoder improvements + CUDA integration and Direct3D11 integration and plugin improvements + New H.264 / AVC, H.265 / HEVC and AV1 hardware-accelerated video encoders for AMD GPUs using the Advanced Media Framework (AMF) SDK + applemedia: H.265 / HEVC video encoding + decoding support + androidmedia: H.265 / HEVC video encoding support + New "force-live" property for audiomixer, compositor, glvideomixer, d3d11compositor etc. + Lots of new plugins, features, performance improvements and bug fixes - Rebase patches with quilt. ==== gstreamer-plugins-bad ==== Version update (1.20.5 -> 1.22.0) Subpackages: libgstadaptivedemux-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstphotography-1_0-0 libgstplay-1_0-0 libgstplayer-1_0-0 libgstsctp-1_0-0 libgsturidownloader-1_0-0 libgstva-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 - Remove sys/decklink since that contains a non-standard license and disable the decklink plugin - Stop building openh264 by default even on 3'rd party buildservices, do this via bcond. Codec now available via a special repo. - Enable zxing again, now that the updated version have landed. - Temporarily disable zxing, waiting for updated version to land in Factory. - Add patch to reduce the required meson version to 0.61.0 since that's what we have in SLE 15: * reduce-required-meson.patch - Probably because of a problem in SLE's meson, the generated pkgconfig files are missing some variables that are needed by rpm to generate the pkgconfig(...) provides correctly. In order to fix this, we now check for those variables and insert them in the pc files before installation if they're missing. - Only build the microdns plugin in TW since SLE is missing the required dependencies. - Add new shared libs libgstcuda-1_0-0 and libgstwebrtcnice-1_0-0 to baselibs.conf. - Update to version 1.22.0: + Please see changes in gstreamer main package, major version bump. - Pass amfcodec=disabled and directshow=disabled to meson, not supported on linux (yet?). - Build qsv plugin only for supported targets via passing conditional qsv=disabled/enabled to meson. - Add pkgconfig(gtk+-3.0) BuildRequires: New dependency. - Package new sub-packages + libgstcuda-1_0-0 + libgstwebrtcnice-1_0-0 + typelib-1_0-CudaGst-1_0 + typelib-1_0-GstCuda-1_0 + typelib-1_0-GstVa-1_0 ==== gstreamer-plugins-base ==== Version update (1.20.5 -> 1.22.0) Subpackages: libgstallocators-1_0-0 libgstapp-1_0-0 libgstaudio-1_0-0 libgstfft-1_0-0 libgstgl-1_0-0 libgstpbutils-1_0-0 libgstriff-1_0-0 libgstrtp-1_0-0 libgstrtsp-1_0-0 libgstsdp-1_0-0 libgsttag-1_0-0 libgstvideo-1_0-0 typelib-1_0-GstAudio-1_0 typelib-1_0-GstPbutils-1_0 typelib-1_0-GstTag-1_0 typelib-1_0-GstVideo-1_0 - Add patch to reduce the required meson version to 0.61.0 since that's what we have in SLE 15: * reduce-required-meson.patch - Probably because of a problem in SLE's meson, the generated pkgconfig files are missing some variables that are needed by rpm to generate the pkgconfig(...) provides correctly. In order to fix this, we now check for those variables and insert them in the pc files before installation if they're missing. - Update to version 1.22.0: + Please see changes in gstreamer main package, major version bump. - Rebase patches with quilt. - Add pkgconfig(xi) BuildRequires: New dependency. ==== gstreamer-plugins-good ==== Version update (1.20.5 -> 1.22.0) Subpackages: gstreamer-plugins-good-extra gstreamer-plugins-good-gtk gstreamer-plugins-good-jack gstreamer-plugins-good-qtqml - Add patch to reduce the required meson version to 0.61.0 since that's what we have in SLE 15: * reduce-required-meson.patch - Update to version 1.22.0: + Please see changes in gstreamer main package, major version bump. - Add disabled pkgconfig(Qt6Core), pkgconfig(Qt6Gui), pkgconfig(Qt6Qml), pkgconfig(Qt6Quick) and pkgconfig(Qt6WaylandClient) BuildRequires and pass Dqt6=disabled to meson, do not build qt6 support yet. - Fixed in 1.21.1: + avoid integer overflow in WavPack header handling code (boo#1201688 CVE-2022-1920). + fix integer overflow resulting in heap corruption (boo#1201693 CVE-2022-1921). + fix integer overflows in zlib/bz2/etc. decompression (boo#1201702 boo#1201704 boo#1201706 boo#1201707 boo#1201708 CVE-2022-1922 CVE-2022-1923 CVE-2022-1924 CVE-2022-1925 CVE-2022-2122). ==== gstreamer-plugins-libav ==== Version update (1.20.5 -> 1.22.0) - Update to version 1.22.0: + Please see changes in gstreamer main package, major version bump. ==== gstreamer-plugins-rs ==== Version update (0.9+git20221113.274e57a -> 0.10.1+git20230213.9cd68ff) - Add BuildRequires: zstd so it build in SLE/Leap now that the sources are compressed with zstd - Update to version 0.10.1+git20230213.9cd68ff: * rtpav1pay: Fix calculation of Leb128 size size to work correctly with streams from certain encoders. - Changes from version 0.10.0: * Fixed: - audiornnoise: Use correct value range for the samples - awss3sink: Treat stopping without EOS as an error for multipart upload - awss3hlssink: . Fix the name of the hlssink child element . Fix deadlock on EOS - dav1d: Various fixes to improve performance, to handle decoding errors more gracefully and to make sure all frames are output in the end - fmp4mux: Various fixes to fragment splitting behaviour, output formatting and header generation - gtk4: Various stability and rendering fixes - meson: Various fixes and improvements to the meson-based build system - ndi: provide non-Linux/macOS UNIX fallback for the soname - ndisrc: Use default channel mask for audio output to allow >2 channels to work better - rav1e: Correctly enable threading support - rtpav1: Various fixes to the payloader and depayloader to handle streams more correctly and to handle errors more cleanly - rtpav1depay: Set caps on the source pad - spotify: fix "start a runtime from within a runtime" with static link - textahead: fix previous buffers - textwrap: Don't panic on empty buffers - tttocea608: Don't fail if a GAP event contains no duration - webrtchttp: whipsink: construct TURN URL correctly - webrtcsink: fix panic on pre-bwe request error - whipsink: . Send ICE candidates together with the offer . Various cleanups and minor fixes * Added: - audiornnoise: Add voice detection threshold property - awss3hlssink: Add stats property - awss3sink: Add properties to set Content-Type and Content-Disposition - fmp4mux: . Add 'offset-to-zero' property . Add support for CMAF-style chunking, e.g. low-latency / LL HLS and DASH - fmp4mux/mp4mux: . Add support for muxing Opus, VP8, VP9 and AV1 streams . Make media/track timescales configurable - gtk4: Support for rendering GL textures on X11/EGL, X11/GLX, Wayland and macOS - hlssink3: Allow generating i-frame-only playlist - livesync: New element that alllows maintaining a contiguous live stream without gaps from a potentially unstable source. - mp4mux: New non-fragmented MP4 muxer element - spotifyaudiosrc: Support configurable bitrate - textahead: add settings to display previous buffers - threadshare: Introduce new ts-audiotestsrc - webrtcsink: Support nvv4l2vp9enc - whepsource: Add a WebRTC WHEP source element * Changed: - audiofx: Derive from AudioFilter where possible - dav1ddec: Lower rank to primary to allow usage of hardware decoders with higher ranks - fmp4mux: Only push fragment_offset if write-mfra is true to reduce memory usage - webrtcsink: . Make the turn-server property a turn-servers list . Move from async-std to tokio - Update to version 0.9.8+git20230124.d9e9468: * aws: Update to AWS SDK 0.53/0.23 * dav1d: - Don't flush the decoder when draining - Don't treat any kind of bitstream error immediately as fatal - Get rid of some unnecessary `unwrap()`s - Only drain at most one decoded frame per input frame unless the decoder requires more before accepting new data - Remove unnecessary frame dropping loop * Downgrade clap dependency to 4.0 * gtk4: - Asynchronously flush frames from GDK - Keep `GstGLMemory` alive as long as it is used inside GDK - Make no caps in the allocation query a non-error - Only provide a buffer pool to upstream if it requested one * livesync: fix late-threshold property min value * meson: - Only enable cargo features when options are enabled (bis) - Update version to 0.9.8 - Update to version 0.9.5+git20230111.df3b908: * awss3hlssink: Add stats property. * aws: - Update to AWS SDK 0.52/0.22 - Update to test-with 0.9 * cargo_wrapper: - Fix setting of PKG_CONFIG_PATH and CARGO_TARGET_DIR - Handle windows paths for depfiles - Write to log with line-buffering ... changelog too long, skipping 147 lines ... * whipsink: Handle offer creation errors more gracefully ==== gstreamer-plugins-ugly ==== Version update (1.20.5 -> 1.22.0) - Add patch to reduce the required meson version to 0.61.0 since that's what we have in SLE 15: * reduce-required-meson.patch - Update to version 1.22.0: + Please see changes in gstreamer main package, major version bump. ==== guestfs-tools ==== Version update (1.48.3 -> 1.50.0) - Update to verion 1.50.0 * Drivers: Require guestfs_inspect_get_build_id API * Drivers: Add support for scanning drivers in Windows guests * New 'virt-drivers' tool This tool can be pointed at a disk image which lacks metadata and in some circumstances can determine useful information about it, such as what bootloader it contains and what device emulation it needs to boot. * Customize: Implement --inject-qemu-ga and --inject-virtio-win operations * Customize: Run zypper dist-upgrade for --update operation * Customize: rebase to the common/mlcustomize/Guest_packages interface * Adopt inversion of SELinux relabeling in virt-customize * Update common submodule. In particular, pick up the new Inject_virtio_win module: * Inspector: Update coreos test for new <build_id> field * Inspector: Display the new build ID field * Sysprep: advise against cloning VMs with internal full disk encryption * Sysprep: make an effort to cope with LUKS-on-LVM * Fixes related to "--key ID:clevis" sysprep: set networking for "--key ID:clevis" customize: add reminder about "--key ID:clevis" get-kernel, sparsify: set networking for "--key ID:clevis" cat, log, ls, tail, diff, edit, insp.: set networking for "--key ID:clevis" * Builder: templates: Account for UEFI when regenerating grub * Ocaml-dep.sh.in: Remove reference to bundled/ocaml-augeas - Drop CVE-2022-2211-options-fix-buffer-overflow-in-get_keys.patch ==== gwenview5 ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== harfbuzz ==== Version update (6.0.0 -> 7.0.0) Subpackages: libharfbuzz-gobject0 libharfbuzz-icu0 libharfbuzz-subset0 libharfbuzz0 typelib-1_0-HarfBuzz-0_0 - Update to version 7.0.0: + New hb-paint API that is designed mainly to paint COLRv1 glyphs, but can be also used as a unified API to paint any of the glyph representations supported by HarfBuzz (B/W outlines, color layers, or color bitmaps). + New hb-cairo API for integrating with cairo graphics library. This is provided as a separate harfbuzz-cairo library. + Support for instancing CFF2 table + Support font emboldening + Support feature ranges with AAT shaping + Experimental support to cubic curves in glyf table + Various subsetter improvements + Various documentation improvements + Significantly reduced memory use during shaping + Greatly reduced memory use during subsetting CFF table + New command line utility, hb-info, for querying various font information + New hb-shape/hb-view options: --glyphs, --color-palette, - -font-bold, --font-grade, and --named-instance + Miscellaneous fixes and improvements - harfbuzz-CVE-2023-25193.patch dropped in favor of upstream consensus fix - Add harfbuzz-CVE-2023-25193.patch: limit how far we skip when looking back (boo#1207922 CVE-2023-25193). ==== heaptrack ==== Subpackages: heaptrack-gui - Add GCC 13 and boost 1.81 compatibility patches: * 0001-Fix-build-with-gcc-13-by-including-cstdint.patch * 0001-Add-missing-include.patch ==== hwdata ==== Version update (0.366 -> 0.367) - update to 0.367: * Update pci, usb and vendor ids ==== incidenceeditor ==== Version update (22.12.1 -> 22.12.2) Subpackages: libKF5IncidenceEditor5 - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== inkscape ==== Version update (1.2.1 -> 1.2.2) Subpackages: inkscape-extensions-extra inkscape-extensions-gimp - Update to version 1.2.2: + 4 crash fixes, over 25 bug fixes, 5 fixes for extension bugs and 13 improved user interface translations + 2f3101417.patch merged upstream + See the full release notes for Inkscape 1.2.2 at https://media.inkscape.org/media/doc/release_notes/1.2.2/Inkscape_1.2.2.html ==== java-11-openjdk ==== Version update (11.0.17.0 -> 11.0.18.0) Subpackages: java-11-openjdk-headless - Upgrade to upstream tag jdk-11.0.18+10 (January 2023 CPU) * CVEs + CVE-2023-21835, bsc#1207246 + CVE-2023-21843, bsc#1207248 * Security fixes + JDK-8286070: Improve UTF8 representation + JDK-8286496: Improve Thread labels + JDK-8287411: Enhance DTLS performance + JDK-8288516: Enhance font creation + JDK-8289350: Better media supports + JDK-8293554: Enhanced DH Key Exchanges + JDK-8293598: Enhance InetAddress address handling + JDK-8293717: Objective view of ObjectView + JDK-8293734: Improve BMP image handling + JDK-8293742: Better Banking of Sounds + JDK-8295687: Better BMP bounds * Other changes + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException + JDK-6782021: It is not possible to read local computer certificates with the SunMSCAPI provider + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/ScreenInsetsTest.java fails in Windows + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/ /OnScreenRenderingResizeTest.java fails + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/ /DropTargetEnterExitTest/MissedDragExitTest.java failed + JDK-8029633: Raw inner class constructor ref should not perform diamond inference + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/ /MissingDragExitEventTest.java fails + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/ /RepaintTest.java fails + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/ /RobotWheelTest.java fails + JDK-8159599: [TEST_BUG] java/awt/Modal/ /ModalInternalFrameTest/ModalInternalFrameTest.java + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/ /MultiresolutionIconTest.java + JDK-8172269: When checking the default behaviour for a scroll tab layout and checking the 'opaque' checkbox, the area behind tabs is not red. + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java failed with timeout + JDK-8193942: Regression automated test '/open/test/jdk/javax/ /swing/JFrame/8175301/ScaledFrameBackgroundTest.java' fails + JDK-8194126: Regression automated Test '/open/test/jdk/javax/ /swing/JColorChooser/Test7194184.java' fails + JDK-8198343: Test java/awt/print/PrinterJob/ /TestPgfmtSetMPA.java may fail w/o printer + JDK-8199290: [TESTBUG] sun.hotspot.WhiteBox$WhiteBoxPermission is not copied + JDK-8202836: [macosx] test java/awt/Graphics/TextAAHintsTest.java fails + JDK-8206125: [windows] cannot pass relative path to - -with-boot-jdk + JDK-8210047: some pages contain content outside of landmark region + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips testing for non-corner-case values + JDK-8212096: javax/net/ssl/ServerName/ /SSLEngineExplorerMatchedSNI.java failed intermittently due to SSLException: Tag mismatch + JDK-8213239: Configure cannot handle command overrides with arguments + JDK-8215571: jdb does not include jdk.* in the default class filter + JDK-8217032: Check pandoc capabilities in configure + JDK-8222091: Javadoc does not handle package annotations correctly on package-info.java + JDK-8222251: preflow visitor is not visiting lambda expressions + JDK-8226236: win32: gc/metaspace/ /TestCapacityUntilGCWrapAround.java fails + JDK-8227179: Test for new gc+metaspace=info output format + JDK-8227651: Tests fail with SSLProtocolException: Input record too big + JDK-8228672: [TESTBUG] gc/metaspace/TestSizeTransitions.java fails on 32-bit platforms + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on macOs + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java fails on macos + JDK-8233565: [TESTBUG] NullModalityDialogTest.java fails on MacOS + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on macos + JDK-8239708: Split basics.m4 into basic.m4 and util.m4 + JDK-8240281: Remove failing assertion code when selecting first memory state in SuperWord::co_locate_pack + JDK-8242468: VS2019 build missing vcruntime140_1.dll + JDK-8243565: some gc tests use 'test.java.opts' and not 'test.vm.opts' + JDK-8243568: serviceability/logging/TestLogRotation.java uses 'test.java.opts' and not 'test.vm.opts' + JDK-8244010: Simplify usages of ProcessTools.createJavaProcessBuilder in our tests + JDK-8244557: test/jdk/javax/swing/JTabbedPane/ ... changelog too long, skipping 300 lines ... backport ==== jhead ==== - Remove hunk that enables -fsanitize=address (bsc#1208386), note it's already removed in the upstream project: https://github.com/Matthias-Wandel/jhead/commit/34f61c3f1408e6b00f6f65dd3d7… - added patches fix [bsc#1207150] https://github.com/Matthias-Wandel/jhead/commit/2a237d866581b3774ebe63d6c31… + jhead-CVE-2022-41751-3.patch ==== kaccounts-integration ==== Version update (22.12.1 -> 22.12.2) Subpackages: libkaccounts2 - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kaccounts-providers ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kactivities-stats ==== Version update (5.102.0 -> 5.103.0) - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - No code change since 5.102.0 ==== kactivities5 ==== Version update (5.102.0 -> 5.103.0) Subpackages: kactivities5-imports libKF5Activities5 - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - No code change since 5.102.0 ==== kactivitymanagerd ==== Version update (5.26.5 -> 5.27.0) - Update to 5.27.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.0 - No code changes since 5.26.90 - Update to 5.26.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.90 - Changes since 5.26.5: * Not use forward and includes * Use ecm_set_disabled_deprecation_versions * Port away from deprecated KWindowSystem API * Remove unused includes ==== kaddressbook ==== Version update (22.12.1 -> 22.12.2) Subpackages: kaddressbook-doc libKPimAddressbookImportExport5 - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kalgebra ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kamera ==== Version update (22.12.1 -> 22.12.2) Subpackages: kamera-lang kio_kamera - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kanagram ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kapptemplate ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== karchive ==== Version update (5.102.0 -> 5.103.0) - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - Changes since 5.102.0: * Limit size of file to be added by what the tar header supports ==== kate ==== Version update (22.12.1 -> 22.12.2) Subpackages: kate-plugins - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ - Drop patch, merged upstream: * 0001-Fix-settings-saving-regression-in-CTags-plugin.patch ==== kauth ==== Version update (5.102.0 -> 5.103.0) Subpackages: libKF5Auth5 libKF5Auth5-lang libKF5AuthCore5 - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - Changes since 5.102.0: * Fix polkit-qt-1 CI dep ==== kbookmarks ==== Version update (5.102.0 -> 5.103.0) - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - No code change since 5.102.0 ==== kbruch ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kcachegrind ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kcalc ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kcalendarcore ==== Version update (5.102.0 -> 5.103.0) - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - Changes since 5.102.0: * Add Q_PROPERTY for IncidenceBase::url as well * Avoid calling twice update() in setAttendees(). * Unbreak static build consumers ==== kcalutils ==== Version update (22.12.1 -> 22.12.2) Subpackages: libKF5CalendarUtils5 - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kcharselect ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kcm_sddm ==== Version update (5.26.5 -> 5.27.0) - Update to 5.27.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.0 - No code changes since 5.26.90 - Update to 5.26.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.90 - Changes since 5.26.5: * Add missing break statement to switch-case * Smooth wallpaper preview image * Re-add drop shadow to wallpaper image * Remove unnecessary multiplication by Screen.devicePixelRatio * Use ecm_set_disabled_deprecation_versions * Install po folder ==== kcmutils ==== Version update (5.102.0 -> 5.103.0) Subpackages: kcmutils-imports libKF5KCMUtils5 libKF5KCMUtilsCore5 - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - Changes since 5.102.0: * KCModuleQml: Specify URL for root component's QML context * Fix comment: use punctuation for readability for sentences. * Set systemsettings as alias when generating desktop files ==== kcodecs ==== Version update (5.102.0 -> 5.103.0) - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - Changes since 5.102.0: * Remove winsami2 from codecs list * Replace jis7 with ISO-2022-JP in offered codecs * Fix name for CP 949 in KCharsets::encodingsByScript ==== kcolorchooser ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kcompletion ==== Version update (5.102.0 -> 5.103.0) - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - No code change since 5.102.0 ==== kconfig ==== Version update (5.102.0 -> 5.103.0) Subpackages: kconf_update5 libKF5ConfigCore5 libKF5ConfigGui5 libKF5ConfigQml5 - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - Changes since 5.102.0: * kconf_update: use standard exit status code * kconf_update: use CMAKE_INSTALL_FULL_LIBDIR * KCoreConfigSkeleton::ItemEnum::Choice2: add deprecation warning markup * KCoreConfigSkeleton::ItemEnum::choices2(): add deprecation markup * Android: Fix a bug where new file wouldn't be created ==== kconfigwidgets ==== Version update (5.102.0 -> 5.103.0) - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - Changes since 5.102.0: * Port away from deprecated KCoreConfigSkeleton::ItemEnum::Choice2 typedef * [kcodecaction] Deprecate QTextCodec and mib-based API (kde#463421) * [kcodecaction] Add name-based trigger signal * kcommandbar: Fix positioning when no mainwindow parent * kcommandbar: Fix no central widget crashes app (kde#463251) ==== kcontacts ==== Version update (5.102.0 -> 5.103.0) Subpackages: kcontacts-lang libKF5Contacts5 - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - No code change since 5.102.0 ==== kcoreaddons ==== Version update (5.102.0 -> 5.103.0) Subpackages: libKF5CoreAddons5 - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - Changes since 5.102.0: * don't needlessly copy urls while iterating * KSandbox: Warn when running without flatpak-spawn privileges ==== kcrash ==== Version update (5.102.0 -> 5.103.0) - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - No code change since 5.102.0 ==== kdav ==== Version update (5.102.0 -> 5.103.0) Subpackages: libKF5DAV5 - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - No code change since 5.102.0 ==== kdbusaddons ==== Version update (5.102.0 -> 5.103.0) Subpackages: kdbusaddons-tools libKF5DBusAddons5 - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - No code change since 5.102.0 ==== kde-cli-tools5 ==== Version update (5.26.5 -> 5.27.0) - Update to 5.27.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.0 - No code changes since 5.26.90 - Update to 5.26.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.90 - Changes since 5.26.5: * kdeinhibit: Add ability to inhibit notifications * In kf6 we use kservices6 * Not use forward and includes * Find CoreAddons * kdesu remove DCOP * Add a clang-format commit to ignore file * Remove code that has been commented out for two decades * [kstart] Remove dead code * [keditfiletype] Properly load parts in KF6 * Fix typo in dependency name * Install translated documentation from po/ too * kcmshell: Fix log formatting (x2) * kcmshell: Fix log formatting * [kdesu] Port away from KDEsuClient::isServerSGID * Port away from deprecated KSycoca::databaseChanged * Add Qt6 CI * Remove unnecessary find * Use KRuntimePlatform * Address comments * plasma-open-settings: Prefer plasma-settings if on mobile * Make ksvgtopng a QGuiApplication * Install po folder * Set bugReportURL for filetypes KCM * Remove unused includes ==== kde-gtk-config5 ==== Version update (5.26.5 -> 5.27.0) Subpackages: kde-gtk-config5-gtk3 - Update to 5.27.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.0 - Changes since 5.26.90: * Set DPI scaling settings for GTK on Plasma/X11 sessions (kde#442901) - Update to 5.26.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.90 - Changes since 5.26.5: * Provide implementation for DecoratedClient::windowClass() * refactor: split config editor into smaller editors * kded: properly delete factory to fix file descriptor leak (kde#458430,kde#458817) ==== kde-print-manager ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kdeclarative ==== Version update (5.102.0 -> 5.103.0) Subpackages: kdeclarative-components libKF5CalendarEvents5 libKF5Declarative5 libKF5QuickAddons5 - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - Changes since 5.102.0: * Remove unused QtGraphicalEffects import * Fix anchors error in AbstractKCM & SimpleKCM types * QML/JS: Prefer const over let, and use strict === equality ==== kdeconnect-kde ==== Version update (22.12.1 -> 22.12.2) Subpackages: kdeconnect-kde-zsh-completion - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kded ==== Version update (5.102.0 -> 5.103.0) - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - Changes since 5.102.0: * Only recreate icons if an icon dir changed (kde#463353) ==== kdeedu-data ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kdegraphics-thumbnailers ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kdelibs4support ==== Version update (5.102.0 -> 5.103.0) Subpackages: libKF5KDELibs4Support5 - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - Changes since 5.102.0: * Fix transparent borders on the right and bottom sides of Italy flag * Fix polkit-qt-1 and taglib CI deps ==== kdenetwork-filesharing ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kdepim-addons ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kdepim-runtime ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kdesu ==== Version update (5.102.0 -> 5.103.0) - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - No code change since 5.102.0 ==== kdevelop5 ==== Version update (22.12.1 -> 22.12.2) Subpackages: kdevplatform libkdevplatform510 - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kdialog ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kdnssd-framework ==== Version update (5.102.0 -> 5.103.0) - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - No code change since 5.102.0 ==== kdoctools ==== Version update (5.102.0 -> 5.103.0) Subpackages: libKF5DocTools5 - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - No code change since 5.102.0 ==== kernel-firmware ==== Version update (20230110 -> 20230210) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update to version 20230210 (git commit bf4115c1aa2b): * linux-firmware: Update AMD cpu microcode * brcm: revert firmware files for Cypress devices * brcm: restore previous firmware file for BCM4329 device * rtw88: 8822c: Update normal firmware to v9.9.14 * i915: Add DMC v2.11 for MTL (jsc#PED-1225) * linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop * linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps (bsc#1203699) * i915: Add DMC v2.18 for ADLP (jsc#PED-1225) - Update to version 20230125 (git commit 5c11a3742947): (jsc#PED-1167, jsc#PED-1169, jsc#PED-1171) * amdgpu: Add VCN 4.0.2 firmware * amdgpu: Add PSP 13.0.4 firmware * amdgpu: Add SDMA 6.0.1 fimware * amdgpu: Add GC 11.0.1 firmware * amdgpu: Add DCN 3.1.4 firmware * iwlwifi: remove old intermediate 5.15+ firmwares * iwlwifi: remove 5.10 and 5.15 intermediate old firmwares * iwlwifi: remove 5.4 and 5.10 intermediate old firmwares * iwlwifi: remove 4.19 and 5.4 intermediate old firmwares * iwlwifi: remove old unsupported older than 4.14 LTS * linux-firmware: update firmware for MT7921 WiFi device * linux-firmware: update firmware for mediatek bluetooth chip (MT7921) * amdgpu: update vangogh firmware * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth AX211 * linux-firmware: Update firmware file for Intel Bluetooth AX211 * linux-firmware: Update firmware file for Intel Bluetooth AX210 * linux-firmware: Update firmware file for Intel Bluetooth AX200 * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth 9560 * linux-firmware: Update firmware file for Intel Bluetooth 9260 * brcm: add configuration files for CyberTan WC121 * qcom: add firmware files for Adreno A200 * rtw89: 8852c: update fw to v0.27.56.10 * QCA: Add Bluetooth firmware for QCA2066 ==== kernel-source ==== Version update (6.1.8 -> 6.1.12) Subpackages: kernel-64kb kernel-default - Linux 6.1.12 (bsc#1012628). - Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions (bsc#1012628). - KVM: x86: Mitigate the cross-thread return address predictions bug (bsc#1012628). - x86/speculation: Identify processors vulnerable to SMT RSB predictions (bsc#1012628). - drm/i915: Fix VBT DSI DVO port handling (bsc#1012628). - drm/i915: Initialize the obj flags for shmem objects (bsc#1012628). - drm/i915: Move fd_install after last use of fence (bsc#1012628). - drm/amd/display: fix cursor offset on rotation 180 (bsc#1012628). - drm/amd/display: properly handling AGP aperture in vm setup (bsc#1012628). - drm/amdgpu/smu: skip pptable init under sriov (bsc#1012628). - drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini (bsc#1012628). - drm/amd/pm: bump SMU 13.0.7 driver_if header version (bsc#1012628). - drm/amdgpu: Add unique_id support for GC 11.0.1/2 (bsc#1012628). - drm/amd/pm: bump SMU 13.0.0 driver_if header version (bsc#1012628). - arm64: efi: Force the use of SetVirtualAddressMap() on eMAG and Altra Max machines (bsc#1012628). - Fix page corruption caused by racy check in __free_pages (bsc#1012628). - arm64: dts: meson-axg: Make mmc host controller interrupts level-sensitive (bsc#1012628). - arm64: dts: meson-g12-common: Make mmc host controller interrupts level-sensitive (bsc#1012628). - arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive (bsc#1012628). - rtmutex: Ensure that the top waiter is always woken up (bsc#1012628). - tracing: Fix TASK_COMM_LEN in trace event format file (bsc#1012628). - drm/amdgpu: Use the TGID for trace_amdgpu_vm_update_ptes (bsc#1012628). - powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch (bsc#1012628). - riscv: kprobe: Fixup misaligned load text (bsc#1012628). - riscv: Fixup race condition on PG_dcache_clean in flush_icache_pte (bsc#1012628). - nvdimm: Support sizeof(struct page) > MAX_STRUCT_PAGE_SIZE (bsc#1012628). - ceph: flush cap releases when the session is flushed (bsc#1012628). - drm/amd/pm: add SMU 13.0.7 missing GetPptLimit message mapping (bsc#1012628). - pinctrl: qcom: sm8450-lpass-lpi: correct swr_rx_data group (bsc#1012628). - clk: ingenic: jz4760: Update M/N/OD calculation algorithm (bsc#1012628). - cxl/region: Fix passthrough-decoder detection (bsc#1012628). - cxl/region: Fix null pointer dereference for resetting decoder (bsc#1012628). - usb: typec: altmodes/displayport: Fix probe pin assign check (bsc#1012628). - usb: core: add quirk for Alcor Link AK9563 smartcard reader (bsc#1012628). - btrfs: free device in btrfs_close_devices for a single device filesystem (bsc#1012628). - btrfs: simplify update of last_dir_index_offset when logging a directory (bsc#1012628). - selftests: mptcp: stop tests earlier (bsc#1012628). - selftests: mptcp: allow more slack for slow test-case (bsc#1012628). - mptcp: be careful on subflow status propagation on errors (bsc#1012628). - mptcp: do not wait for bare sockets' timeout (bsc#1012628). - net: USB: Fix wrong-direction WARNING in plusb.c (bsc#1012628). - cifs: Fix use-after-free in rdata->read_into_pages() (bsc#1012628). - pinctrl: intel: Restore the pins that used to be in Direct IRQ mode (bsc#1012628). - pinctrl: aspeed: Revert "Force to disable the function's signal" (bsc#1012628). - spi: dw: Fix wrong FIFO level setting for long xfers (bsc#1012628). - pinctrl: single: fix potential NULL dereference (bsc#1012628). - pinctrl: aspeed: Fix confusing types in return value (bsc#1012628). - pinctrl: mediatek: Fix the drive register definition of some Pins (bsc#1012628). - clk: microchip: mpfs-ccc: Use devm_kasprintf() for allocating formatted strings (bsc#1012628). - ASoC: topology: Return -ENOMEM on memory allocation failure (bsc#1012628). - ASoC: fsl_sai: fix getting version from VERID (bsc#1012628). - ASoC: tas5805m: add missing page switch (bsc#1012628). - ASoC: tas5805m: rework to avoid scheduling while atomic (bsc#1012628). - arm64: dts: mediatek: mt8195: Fix vdosys* compatible strings (bsc#1012628). - riscv: stacktrace: Fix missing the first frame (bsc#1012628). - ALSA: pci: lx6464es: fix a debug loop (bsc#1012628). - arm64: dts: rockchip: set sdmmc0 speed to sd-uhs-sdr50 on rock-3a (bsc#1012628). ... changelog too long, skipping 1045 lines ... - commit e426c74 ==== kexec-tools ==== Version update (2.0.25 -> 2.0.26) - update to 2.0.26: * m68k: pass rng seed via BI_RNG_SEED * workflow: update to checkout@v3 * LoongArch: Remove redundant cmdline parameters when using --reuse-cmdline option * LoongArch: Add purgatory framework code * LoongArch: PE format image loading support * LoongArch: Add kexec/kdump support * config: Add LoongArch architecture support in config.guess and config.sub files * ppc64: remove rma_top limit - refresh kexec-tools-riscv64.patch. ==== kfilemetadata5 ==== Version update (5.102.0 -> 5.103.0) - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - Changes since 5.102.0: * Also add external extractors to vector of all plugins (kde#463598) * Fix loading of external extractors and writers (kde#463598) ==== kgamma5 ==== Version update (5.26.5 -> 5.27.0) - Update to 5.27.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.0 - No code changes since 5.26.90 - Update to 5.26.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.90 - Changes since 5.26.5: * Install translated documentation from po/ too * Install po folder ==== kgeography ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kglobalaccel ==== Version update (5.102.0 -> 5.103.0) Subpackages: kglobalaccel5 libKF5GlobalAccel5 libKF5GlobalAccelPrivate5 - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - Changes since 5.102.0: * Send X11 startup id when invoking service actions ==== kguiaddons ==== Version update (5.102.0 -> 5.103.0) Subpackages: libKF5GuiAddons5 - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - Changes since 5.102.0: * waylandinhibition singleton pattern for ShortcutsInhibitManager * waylandclipboard: roundtrip to get accurate focus state (kde#463199) * KColorSchemeWatcherMac: do not use new NSAppearance API on older macOS versions (kde#463752) ==== khangman ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== khelpcenter5 ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kholidays ==== Version update (5.102.0 -> 5.103.0) - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - No code change since 5.102.0 ==== khotkeys5 ==== Version update (5.26.5 -> 5.27.0) - Update to 5.27.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.0 - No code changes since 5.26.90 - Update to 5.26.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.90 - Changes since 5.26.5: * Fix typo in dependency name * Install translated documentation from po/ too * Install po folder ==== khtml ==== Version update (5.102.0 -> 5.103.0) - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - No code change since 5.102.0 ==== ki18n ==== Version update (5.102.0 -> 5.103.0) - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - No code change since 5.102.0 ==== kiconthemes ==== Version update (5.102.0 -> 5.103.0) - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - No code change since 5.102.0 ==== kidentitymanagement ==== Version update (22.12.1 -> 22.12.2) Subpackages: kidentitymanagement-lang libKF5IdentityManagement5 libKF5IdentityManagementWidgets5 - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kidletime ==== Version update (5.102.0 -> 5.103.0) - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - No code change since 5.102.0 ==== kig ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kimageformats ==== Version update (5.102.0 -> 5.103.0) - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - Changes since 5.102.0: * psd: conversion speed improvements (kf5) * Fix writing TGA alpha depth flag * HDR support removed from RAW plugin * heif: reject invalid files with zero size ==== kimap ==== Version update (22.12.1 -> 22.12.2) Subpackages: kimap-lang libKF5IMAP5 - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kinfocenter5 ==== Version update (5.26.5 -> 5.27.0) Subpackages: kinfocenter5-lang - Update to 5.27.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.0 - No code changes since 5.26.90 - Update to 5.26.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.90 - Changes since 5.26.5: * Show OpenCL info * about-distro: do not recreate dialog * Add "kinfocenter" as a keyword to application desktop file * Install translated documentation from po/ too * refine new osversion a bit * Show BUILD_ID in kinfocenter if ShowBuild set in kcm-about-distrorc. * remove bad commit * CommandOutputKCM: Fix text sizing and make it selectable * Add FreeBSD Qt6 CI * Add Linux Qt6 CI * Perform initialization in initialization list * Move graph controls to be below the graph * Fix labels in Energy module wrapping unnecessarily * Make value labels in form layouts individually selectable and copyable (kde#428881) * Install po folder * Set bugReportURL for all KCMs in tihs repo * Find qdbus command correctly ==== kinit ==== Version update (5.102.0 -> 5.103.0) - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - Changes since 5.102.0: * kdeinit: Use close_range for cleanup_fds if available ==== kio ==== Version update (5.102.0 -> 5.103.0) Subpackages: kio-core - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - Changes since 5.102.0: * CommandLauncher: Emit error when command was not found * Add KUrlNavigator::supportedSchemes, to replace customProtocols * Add missing copyFromFile entries to http.json for webdav and webdavs (kde#464450) * Mark WorkerBase::needSubUrlData as deprecated * [commandlauncherjob] Deprecate setIcon * job_error: add missing space between sentences for one string (kde#464631) * Correct setDesktopName() docs regarding optionality of .desktop suffix * Drop outdated docs for mailto kioslave * Add deprecation warnings for KDirOperator::setView(KFile::FileView) * Deprecate unused Scheduler::connect/disconnects methods * Deprecate Slave::isConnected/setConnected * Restore old behavior for KFileFilterCombo::setFilter (kde#463309) * KCoreDirListerCache: Remove unnecessary assert * KFilePlacesView: Set transientParent on context menu (kde#453532) * KURISearchFilterEngine: Use DuckDuckGo as a default shortcut * widgets/renamefiledialog: remove bulk rename number limit ==== kio-extras5 ==== Version update (22.12.1 -> 22.12.2) Subpackages: libkioarchive5 - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kio_audiocd ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kipi-plugins ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kirigami2 ==== Version update (5.102.0 -> 5.103.0) Subpackages: libKF5Kirigami2-5 - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - Too many changes since 5.102.0, only listing bugfixes: * Take into account more button after is visible (kde#464988) * Take into account side margins (kde#465052) * Disable HoverHandler (kde#464829) * WheelHandler: Fix scrolling over ScrollBars on ScrollablePage (kde#438526) ==== kitemmodels ==== Version update (5.102.0 -> 5.103.0) Subpackages: kitemmodels-imports libKF5ItemModels5 - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - No code change since 5.102.0 ==== kitemviews ==== Version update (5.102.0 -> 5.103.0) - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - No code change since 5.102.0 ==== kiten ==== Version update (22.12.1 -> 22.12.2) Subpackages: fonts-KanjiStrokeOrders - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kitinerary ==== Version update (22.12.1 -> 22.12.2) Subpackages: libKPimItinerary5 libKPimItinerary5-lang - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kjobwidgets ==== Version update (5.102.0 -> 5.103.0) - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - No code change since 5.102.0 ==== kjs ==== Version update (5.102.0 -> 5.103.0) Subpackages: libKF5JS5 libKF5JSApi5 - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - No code change since 5.102.0 ==== kldap ==== Version update (22.12.1 -> 22.12.2) Subpackages: libKF5Ldap5 - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kleopatra ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kmag ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kmahjongg ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kmail ==== Version update (22.12.1 -> 22.12.2) Subpackages: kmail-application-icons ktnef - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kmail-account-wizard ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kmailtransport ==== Version update (22.12.1 -> 22.12.2) Subpackages: libKF5MailTransport5 libKF5MailTransportAkonadi5 - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kmbox ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kmenuedit5 ==== Version update (5.26.5 -> 5.27.0) - Update to 5.27.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.0 - No code changes since 5.26.90 - Update to 5.26.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.90 - Changes since 5.26.5: * Not use forward and includes * Port deprecated methods * Fix typo in dependency name * Install translated documentation from po/ too * Explicitly support environment variables when editing apps' configs (kde#461315) * Remove wrong entry from appstream releases * Install po folder * Remove unused includes ==== kmime ==== Version update (22.12.1 -> 22.12.2) Subpackages: kmime-lang libKF5Mime5 - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kmines ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kmousetool ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kmplot ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== knewstuff ==== Version update (5.102.0 -> 5.103.0) Subpackages: knewstuff-imports libKF5NewStuff5 libKF5NewStuffCore5 libKF5NewStuffWidgets5 - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - Changes since 5.102.0: * Fix crash in QQuickQuestionListener (kde#464624) * Install desktop file for knewstuff-dialog ==== knotes ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== knotifications ==== Version update (5.102.0 -> 5.103.0) - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - Changes since 5.102.0: * knotification: Fix documentation typo ==== knotifyconfig ==== Version update (5.102.0 -> 5.103.0) - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - No code change since 5.102.0 ==== kompare ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== konsole ==== Version update (22.12.1 -> 22.12.2) Subpackages: konsole-part konsole-part-lang - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kontact ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kontactinterface ==== Version update (22.12.1 -> 22.12.2) Subpackages: kontactinterface-lang libKF5KontactInterface5 - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== konversation ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== korganizer ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kpackage ==== Version update (5.102.0 -> 5.103.0) - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - Changes since 5.102.0: * Update README with new json metadata * Show deprecation message about the desktop to json conversion being removed ==== kparts ==== Version update (5.102.0 -> 5.103.0) - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - Changes since 5.102.0: * PartLoader: move UI strings out of template code in header * Deprecate class PartSelectEvent * Deprecate PartBase::setPluginInterfaceVersion(int) ==== kpat ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kpeople5 ==== Version update (5.102.0 -> 5.103.0) - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - No code change since 5.102.0 ==== kpimtextedit ==== Version update (22.12.1 -> 22.12.2) Subpackages: libKF5PimTextEdit5 - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kpipewire ==== Version update (5.26.5 -> 5.27.0) Subpackages: kpipewire-imports libKPipeWire5 libKPipeWireRecord5 - Update to 5.27.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.0 - Changes since 5.26.90: * record: Use vp8 instead of x264 * Prefer x264 * Allow to reset fd in `PipeWireSourceItem` * Record: Make sure we issue key frames and sequential pts * Record: Make sure the frames we encode are in an expected format * PipeWireRecord: Make sure we use the correct pixel formats ==== kpkpass ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kplotting ==== Version update (5.102.0 -> 5.103.0) - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - No code change since 5.102.0 ==== kpty ==== Version update (5.102.0 -> 5.103.0) - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - No code change since 5.102.0 ==== kqtquickcharts ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kquickcharts ==== Version update (5.102.0 -> 5.103.0) - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - No code change since 5.102.0 ==== kreversi ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kross ==== Version update (5.102.0 -> 5.103.0) - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - No code change since 5.102.0 ==== krunner ==== Version update (5.102.0 -> 5.103.0) - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - No code change since 5.102.0 ==== ksanecore ==== Version update (22.12.1 -> 22.12.2) Subpackages: ksanecore-lang libKSaneCore1 - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kscreen5 ==== Version update (5.26.5 -> 5.27.0) Subpackages: kscreen5-plasmoid - Update to 5.27.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.0 - Changes since 5.26.90: * common: fix unset translation domain and add `Messages.sh` * kcm: notify update through DBus - Update to 5.26.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.90 - Too many changes to list here ==== kscreenlocker ==== Version update (5.26.5 -> 5.27.0) Subpackages: kscreenlocker-lang libKScreenLocker5 - Update to 5.27.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.0 - Changes since 5.26.90: * Only inhibit screen locker on "ChangeScreenSettings" (kde#464119) - Update to 5.26.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.90 - Too many changes to list here ==== kservice ==== Version update (5.102.0 -> 5.103.0) - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - No code change since 5.102.0 ==== ksmtp ==== Version update (22.12.1 -> 22.12.2) Subpackages: ksmtp-lang libKPimSMTP5 - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== ksshaskpass5 ==== Version update (5.26.5 -> 5.27.0) Subpackages: ksshaskpass5-lang - Update to 5.27.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.0 - No code changes since 5.26.90 - Update to 5.26.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.90 - Changes since 5.26.5: * Use ecm_set_disabled_deprecation_versions * Port deprecated methods * Install po folder ==== ksudoku ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== ksystemstats5 ==== Version update (5.26.5 -> 5.27.0) - Update to 5.27.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.0 - No code changes since 5.26.90 - Update to 5.26.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.90 - Changes since 5.26.5: * cpu: Account for offline processors when adding CPU objects (kde#459130) * plugins/gpu: Use pci address to identify nvidia gpus (kde#463033,kde#461361) * plugins/gpu: Don't let a newline confuse the nvidia-smi output parsing (kde#462512) * Use ecm_set_disabled_deprecation_versions * fix null pointer in amd platforms * initial implementation for NVidia GPUs * Install po folder * Remove unused includes ==== ktexteditor ==== Version update (5.102.0 -> 5.103.0) - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - Changes since 5.102.0: * Fix indent failing due to unknown method 'replace' * Don't show selection count when there are none ==== ktextwidgets ==== Version update (5.102.0 -> 5.103.0) - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - No code change since 5.102.0 ==== ktnef ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== ktouch ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kunitconversion ==== Version update (5.102.0 -> 5.103.0) - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - No code change since 5.102.0 ==== kwallet ==== Version update (5.102.0 -> 5.103.0) Subpackages: kwallet-tools kwalletd5 libKF5Wallet5 libkwalletbackend5-5 - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - No code change since 5.102.0 ==== kwalletmanager5 ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kwayland ==== Version update (5.102.0 -> 5.103.0) - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - No code change since 5.102.0 ==== kwayland-integration ==== Version update (5.26.5 -> 5.27.0) - Update to 5.27.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.0 - No code changes since 5.26.90 - Update to 5.26.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.90 - Changes since 5.26.5: * Use ecm_set_disabled_deprecation_versions * Adapt to deprecated KWindowSystem API * Drop idletime plugin * Suppress "could not create KWindowShadow" warnings in plasmashell * Fix warning text in activeWindow() * Add missing QObject include * Fix shadow removal (kde#455270) ==== kwidgetsaddons ==== Version update (5.102.0 -> 5.103.0) - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - Changes since 5.102.0: * Restore ABI compatibility broken in 29bb6d ==== kwin5 ==== Version update (5.26.5 -> 5.27.0) - Update to 5.27.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.0 - Too many changes to list here - Update to 5.26.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.90 - Too many changes to list here ==== kwindowsystem ==== Version update (5.102.0 -> 5.103.0) - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - No code change since 5.102.0 ==== kwordquiz ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== kwrited5 ==== Version update (5.26.5 -> 5.27.0) - Update to 5.27.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.0 - No code changes since 5.26.90 - Update to 5.26.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.90 - Changes since 5.26.5: * Use ecm_set_disabled_deprecation_versions * There's no QGuiApplication::setFallbackSessionManagementEnabled in Qt6 ==== kxmlgui ==== Version update (5.102.0 -> 5.103.0) - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - Changes since 5.102.0: * Prevent user from expanding tooltips by key, if they weren't expandable * Remove duplicate "Whats This?" tooltips ==== lapack ==== Subpackages: libblas3 libcblas3 liblapack3 - Fix missing symbols for deprecated functions in LAPACK, add Restore_missing_deprecated_prototypes.patch - Add -Wl,--no-undefined when creating shared libraries, to catch missing symbols during build - Test fixes: * Build test binaries during %build, run in %check * Fix incorrect path for test output, to actually catch any test failures - Spec file cleanup: * Do not rename blaslib, it is used for test binaries * Use same commands for building lapacke as for other libs * Remove unused FFLAGS_NOOP for test binaries - Remove unneeded links. These will be taken care of by the update-alternatives. This will bring this package in sync with openblas. - Build deprecated functions again to avoid breaking the ABI. (boo#1207989) - Make library links in the alternatives directory arch dependent. This avoids conflicts when both 32-bit and 64-bit versions are installed (boo#1207563). ==== layer-shell-qt ==== Version update (5.26.5 -> 5.27.0) - Update to 5.27.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.0 - No code changes since 5.26.90 - Update to 5.26.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.90 - Changes since 5.26.5: * Use ecm_set_disabled_deprecation_versions ==== less ==== - Apply "cve-2022-46663.patch" to fix a vulnerability in less that could be exploited for denial-of-service attacks or even remote code execution by printing specially crafted escape sequences to the terminal. [CVE-2022-46663, bsc#1207815] - Refreshed all other patches with quilt to an uniform -p1 patch style, which allows us to use %autosetup and simplify the spec file a bit. ==== libKF5ModemManagerQt ==== Version update (5.102.0 -> 5.103.0) - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - No code change since 5.102.0 ==== libKF5NetworkManagerQt ==== Version update (5.102.0 -> 5.103.0) - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - Changes since 5.102.0: * Fix remaining 5 compile warnings (unused parameters) * Fix builds with examples: they were not compiling ==== libadwaita ==== Version update (1.2.1 -> 1.2.2) Subpackages: libadwaita-1-0 typelib-1_0-Adw-1 - Update to version 1.2.2: + AboutWindow: Prevent double clicks from opening troubleshooting page. + AdwLeaflet: Fix can-unfold=false. + AdwSpringAnimation: Fix critical damping velocity. + AdwSwipeable: Fix get_swipe_area() fallback. + AdwToastOverlay: - Don't focus buttons on click. - Prevent toast labels from wrapping. + Demo: Fix the switch on the avatar page. + Stylesheet: Fix GtkLevelBar fill colors. + Fix dependency names in docs. + Updated translations. ==== libaom ==== Version update (3.5.0 -> 3.6.0) - Update to version 3.6.0: * This release includes compression efficiency and perceptual quality improvements, speedup and memory optimizations, and some new features. This release is ABI compatible with the last release. * New Features: - New values 20-27 (corresponding to levels 7.0-7.3 and 8.0-8.3) for the encoder control AV1E_SET_TARGET_SEQ_LEVEL_IDX (note that the proposal to add the new levels are still in draft status). The original special value 24 (keep level stats only for level monitoring) is renumbered as 32. - New encoder control AV1E_SET_SKIP_POSTPROC_FILTERING to skip the application of post-processing filters on reconstructed frame in all intra mode. - New encoder option "kf-max-pyr-height": Maximum height of pyramid structure used for the GOP starting with a key frame (-1 to 5). - Make SVC work for screen content. - Rate control improvements to reduce frame-size spikes for screen content coding. - RISC-V architecture support with gcc toolchain. * Compression Efficiency Improvements: - Peak compression efficiency in VOD setting is improved by 1%. - 0.7% - 2.2% RTC encoding BDrate gains for real time speed 8 to 10. - 15% RTC encoding BDrate gains for screen content speed 10. * Perceptual Quality Improvements: - Resolved a visual quality issue that was reported for high resolution clips (2K) for speed 4 and above in VOD use case. - Visual quality improvements to screen content coding. - Quality improvements to temporal layer RTC coding. * Speedup and Memory Optimizations: - RTC single-thread encoder speedup: . ~6% instruction count reduction for speed 5 and 6. . ~15% instruction count reduction for speed 7. . ~10% instruction count reduction for speed 8 to 10 (>=360p resolutions). - RTC multi-thread encoder speedup (beyond single-thread speedup): . 5-8% encode time reduction for speed 7 to 10. - RTC screen-content encoder speedup: . 11% instruction count reduction for speed 9 and 10 (>=720p resolutions). - ~5% reduction in heap memory requirements for RTC, speed 6 to 10. * AVIF: . 4-5% speedup for speed 9 in still-picture encoding mode. . 3-4% heap memory reduction in still-picture encoding mode for 360p-720p resolutions with multiple threads. * Bug Fixes: - Added a workaround for an AV1 specification bug which makes TRANSLATION type global motion models unusable. - Fixed AddressSanitizer global-buffer-overflow errors in av1/encoder/arm/neon/av1_fwd_txfm2d_neon.c. - Fixed AddressSanitizer heap-buffer-overflow error in av1_wiener_convolve_add_src_neon(). - chromium:1393384 Avoid scene detection on spatial resize. - aomedia:3308 Remove color artifacts under high motion. - aomedia:3310 Avoid out of memory failures with Visual Studio 2017, 2019, and 2022 for Win32 x86 builds. - aomedia:3346 Make SVC work properly for screen content. - aomedia:3348 Fix a bug where an uninitialized search_site is used. - aomedia:3365 Work around what seems like a Visual Studio 2022 compiler optimization bug. - aomedia:3369 Incorrect PSNR values reported by libaom for 12-bit encode. - Modernize spec, use cmake_build and ldconfig_scriptlets macros. ==== libapparmor ==== - add abstractions-openssl-1_1.diff: allow to read /etc/ssl/openssl-1_1.cnf in abstractions/openssl (boo#1207911) - add nscd-systemd-userdb.diff: allow nscd to read systemd-userdb (boo#1207698) ==== libcap ==== Version update (2.66 -> 2.67) - update to 2.67: * Replace use of fgrep with grep -F (POSIX grep flags preferred by GNU grep) - patch from David Seifert. * Added SPDX identifiers to License file(s). Hopefully this will help the various robots out there correctly identify the longstanding licenses for libcap and friends. (Bug: 216609 reported by GÃ¼nther Noack) * Started down the rabbit hole of trying to address (Bug: 216610 reported by GÃ¼nther Noack on behalf of Michael Stapelberg) * The basic issue is how to link C code with Go psx without using CGo. This is all a low level hackery. If you are interested, browse the source. * Correct for bad whatis entries in man pages (this was throwing a Debian build test, detail) * Also reviewed man pages and addressed cross linkage issues (Bug: * Cleaned up some README.md files (made a github mirror now just so I can automatically render them). * Changed meaning of DYNAMIC=no builds. This now builds everything with static linking except for libc. The reason for this exception is explained in the commit message. * Inserted demonstration exploit code in capso.so to support article. ==== libdrm ==== Version update (2.4.114 -> 2.4.115) Subpackages: libdrm2 libdrm_amdgpu1 libdrm_nouveau2 libdrm_radeon1 - Adjust the n_libdrm-drop-valgrind* patches accordingly - Update to 2.4.115 * mdgpu: add marketing names from amd-5.4 (22.40) * amdgpu: add some additional marketing names * tests/amdgpu: use AMDGPU_TIMEOUT_INFINITE to query fence * intel: Eliminate need to keep adding PCI IDs * drm_fourcc: sync drm_fourcc with latest drm-next kernel * xf86drm: Add support for decoding Vivante format modifiers * tests/amdgpu/jpeg: enable unit test for jpeg 4 * xf86drm: fix warning in drmGetFormatModifierNameFromVivante() * xf86drm: add support for printing AMD GFX11 modifiers ==== libgravatar ==== Version update (22.12.1 -> 22.12.2) Subpackages: libKF5Gravatar5 - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== libguestfs ==== Version update (1.48.6 -> 1.50.0) Subpackages: libguestfs-xfs libguestfs0 - Update to version 1.50.0 * https://libguestfs.org/guestfs-release-notes-1.50.1.html * Inspection When listing the packages in RPM-based guests, the inspection API no longer checks package signatures. This is because the newer librpm used by libguestfs does not understand signatures stored in older guests, such as SHA1 used by RHEL 6 (thanks Panu Matilainen). "guestfs_inspect_get_hostname" in guestfs(3) can now handle /etc/hostname files containing comments (thanks Dawid Zamirski). "guestfs_file_architecture" in guestfs(3) can now parse files using zstd compression. "guestfs_inspect_get_osinfo" in guestfs(3) now returns the correct osinfo field for Windows 11. However because of decisions made by Microsoft, these guests still return product name and other strings identifying as Windows 10 (thanks Yaakov Selkowitz, Yongkui Guo). * New APIs "guestfs_device_name" in guestfs(3) is a new API to read the device name associated with a drive, for example calling this with 0 will return /dev/sda. "guestfs_clevis_luks_unlock" in guestfs(3) is a new API for unlocking disks using the Clevis/Tang network-based full disk encryption scheme. Furthermore implement this in guestfish and guestmount (Laszlo Ersek). "guestfs_inspect_get_build_id" in guestfs(3) is a new API for reading the build ID from some Linux and Windows guests. It is not widely used on Linux, but for Windows it is vital for identifying Windows 11. * Other API changes In the "guestfs_add_drive" in guestfs(3) API, the name and iface fields are not used. name has not been used since around 2017, but the documentation has only just been updated to reflect this. iface was never allowed for the libvirt backend and didn't work reliably with the direct backend (Laszlo Ersek). "guestfs_readdir" in guestfs(3) is no longer limited to the maximum message size but can read a directory of any size (Laszlo Ersek). * Numerous build changes, internal improvements, and bug fixes Note that the Augeas bindings for libguestfs are no longer bundled with libguestfs and must be built separately. ==== libhandy ==== Version update (1.8.0 -> 1.8.1) Subpackages: libhandy-1-0 typelib-1_0-Handy-1_0 - Update to version 1.8.1: + Fix double click handling for HdyWindowHandle and HdyHeaderBar. + Updated translations. ==== libheif ==== Subpackages: gdk-pixbuf-loader-libheif libheif1 - Use chrpath during build to delete otherwise illegal runtime directories stored as RPATH in the executables - add 2ca02a128b2f76f7f293aa86a2ce1e04a8306c65.patch b6812284a2d70f29a5121ec3dbe652da07fdbbb7.patch: (bsc#1206945) * replace internal API with public API and fix typo (Fixes #745) - The fix for rpath error for the examples sub-package was mistakenly moved ==== libimagequant ==== Version update (2.17.0 -> 2.18.0) - update to 2.18: - added more perceptually-weighed color selection - dropped problematic omp_set_nested() - fixed a rare memory leak ==== libjxl ==== Version update (0.8.0 -> 0.8.1) - build glibc hwcaps optimized overlay - Update to release 0.8.1 * Allow fast-lossless for 16-bit float input * Fix OOB read in exif.h ==== libkcddb ==== Version update (22.12.1 -> 22.12.2) Subpackages: libKF5Cddb5 - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== libkcompactdisc ==== Version update (22.12.1 -> 22.12.2) Subpackages: libKF5CompactDisc5 libkcompactdisc-lang - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== libkdcraw ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== libkdecoration2 ==== Version update (5.26.5 -> 5.27.0) Subpackages: libkdecorations2-5 libkdecorations2-5-lang - Update to 5.27.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.0 - No code changes since 5.26.90 - Update to 5.26.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.90 - Changes since 5.26.5: * port all headers to pragma once * Add DecoratedClient::windowClass() * Floor mouse positions rather than rounding ==== libkdegames ==== Version update (22.12.1 -> 22.12.2) Subpackages: kdegames-carddecks-default libKF5KDEGames7 libkdegames-qt5-imports - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== libkdepim ==== Version update (22.12.1 -> 22.12.2) Subpackages: libKF5Libkdepim5 - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== libkeduvocdocument ==== Version update (22.12.1 -> 22.12.2) Subpackages: libKEduVocDocument5 libkeduvocdocument-lang - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== libkexiv2 ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== libkgapi ==== Version update (22.12.1 -> 22.12.2) Subpackages: libKPimGAPICalendar5 libKPimGAPIContacts5 libKPimGAPICore5 libKPimGAPITasks5 libkgapi-lang sasl2-kdexoauth2 - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== libkipi ==== Version update (22.12.1 -> 22.12.2) Subpackages: libKF5Kipi32_0_0 libkipi-data - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== libkleo ==== Version update (22.12.1 -> 22.12.2) Subpackages: libKF5Libkleo5 - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== libkmahjongg ==== Version update (22.12.1 -> 22.12.2) Subpackages: libKF5KMahjongglib5 - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== libkomparediff2 ==== Version update (22.12.1 -> 22.12.2) Subpackages: libkomparediff2-5 libkomparediff2-lang - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== libksane ==== Version update (22.12.1 -> 22.12.2) Subpackages: libKF5Sane5 libksane-lang - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== libkscreen2 ==== Version update (5.26.5 -> 5.27.0) - Update to 5.27.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.0 - No code changes since 5.26.90 - Update to 5.26.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.90 - Too many changes to list here ==== libksieve ==== Version update (22.12.1 -> 22.12.2) Subpackages: libksieve5 - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== libksysguard5 ==== Version update (5.26.5 -> 5.27.0) Subpackages: ksysguardsystemstats-data libKSysGuardSystemStats1 libksysguard5-imports libksysguard5-plugins - Update to 5.27.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.0 - Changes since 5.26.90: * Faces: Specify the domain in Choices.qml i18n calls * Add an autotest for UnitBootTimestamp * formatter: Add ticks as time unit and use it for user/system time columns * Un-deprecate UnitBootTimestamp and use it for the "start time" column (kde#458277) * formatter: Use KFormat::formatDuration for formatting the Time unit - Update to 5.26.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.90 - Changes since 5.26.5: * sensors: Account for base unit rather than starting unit in SensorUnitModel (kde#461143) * Formatter: Format plain numbers (kde#450947) * Add CMake option to build WITH_X11 * add missing check for HeadingVmPSS * Port away from deprecated KWindowSystem API * Fix updating placeholder text * QML error: digist -> digits * Add ColorGrid face which uses rectangle opacity to denote sensor value * Install po folder * Allow to extract messages from processui/processdetails * Perform initialization in initialization list ==== liblouis ==== Version update (3.23.0 -> 3.24.0) Subpackages: liblouis-data liblouis20 python3-louis - Update to version 3.24.0: + This release contains major updates to Hungarian, UEB, and Chinese bopomofo braille. Danish has been completely reworked and there is now support for the Danish braille standard 2022. There are also some new tables so that liblouis can now generate Georgian computer braille, Swahili (Kenya) and Chichewa (Malawi). Aside from that there is the usual assortment of code cleanups and bug fixes. + For a detailed list of all the changes refer to https://github.com/liblouis/liblouis/milestone/34?closed=1 + Braille table improvements: - New grade 1, 1.2, 1.3, 1.4, 1.5 and 2 tables for Swahili (Kenya) and grade 1 table for Chichewa (Malawi). - Improvements to Hungarian. - Update braille patterns of some Chinese characters and phrases in the Chinese bopomofo braille table - Add experimental Georgian computer braille table - Updated the Danish tables to the new 2022 Danish braille standard - Limited contraction level (grade 2l or 1.5) is no longer part of the Danish braille standard 2022. - There is no longer any need for "literary" tables. In Danish braille, capital letters are now always indicated, and steps have been taken in the standard to ensure better back-translation. - As requested by The Danish Braille Committee, the tables for the 1993 standard will be kept as an option for at least a year. All the 1993 tables have been renamed to include "_1993" in the filename, so the new tables will be used as default. - Improvements to UEB. - Add new sign for German sharp S (ICEB July 2022) - Fix a couple of acronyms which require grade 1 indicator (LLB, LLP) - Fix placement of numeral sign in letters comma digits - Review rules for "under" and "there" contractions ==== liblqr ==== - spec cleanups ==== libmspack ==== Version update (0.10.1 -> 0.11) - Update to version 0.11: * see https://github.com/kyz/libmspack/blob/master/libmspack/ChangeLog for a full changelog ==== libnice ==== Version update (0.1.19 -> 0.1.21) Subpackages: gstreamer-libnice libnice10 - Update to version 0.1.21: * Only use `ifr_ifindex` if OS supports it, fixes build on iOS and FreeBSD. - Changes from version 0.1.20: * Remove support for GStreamer 0.10 builds. * Add macro to check LIBNICE version. * Added utility function to get the STUN server from a candidate. * Support additional header in built-in HTTP proxy client. * Add boxed type for NiceAddress for bindings. * Add API to get the interface index for a local address. * Explicitly bind to a specific interface when creating UDP sockets. * Limit the number of stored incoming checks based on a property. * Do asynchronous DNS resolution for STUN and TURN servers. * Add introspection friendly API to get an allocated string from a NiceCandidate. * Enable gst-full to link in a single element. ==== libnvme ==== Version update (1.2 -> 1.3) Subpackages: libnvme-mi1 libnvme1 - Update to version 1.3: * Support added for Flexible Data Placement (TP4146) * Fabrics: added support for Persistent Discovery Controllers. * libnvme-mi added a quirk framework to workaround special behavior of certain devices * The python binding behaves more friendly in a threading environment by release the GIL on blocking calls. * Replaced 3the libsystemd dependency with libdbus * A lot of small fixes everywhere (leaks, wrong ordering of arguments, ...) - Update spec file * Project depends on meson >= 0.50.0 ==== libopenmpt ==== Version update (0.6.7 -> 0.6.8) - update to 0.6.8: * [Bug] DSYM: Loading DSYM files got broken in 0.6.7. * When seeking around in a module, the tempo was sometimes incorrectly limited to 255 BPM * Initial instrument cutoff was broken for OPL instruments in libopenmnpt 0.6.7 * mpg123: Update to v1.31.2 ==== libp11 ==== - Fix build against openSSL 3. ==== libpng16 ==== - Fix build: some*.la files are symlinks. Adjust spec to use find -type f,l - switch to pkgconfig(zlib) to allow alternative providers as well - build with glibc hwcaps optimized libs ==== librdkafka ==== Version update (1.9.2 -> 2.0.2) - update to 2.0.2: * OffsetFetch Protocol Update (#3995). * Add Consumer Group operations to Admin API (started by @lesterfan, #3995). * Allow listing consumer groups per state (#3995). * Partially implemented: support for AlterConsumerGroupOffsets * OpenSSL 3.0.x support - the maximum bundled OpenSSL version is now 3.0.7 (previously 1.1.1q). * Fixes to the transactional and idempotent producer. * The introduction of OpenSSL 3.0.x in the self-contained librdkafka bundles changes the default set of available ciphers, in particular all obsolete or insecure ciphers and algorithms as listed in the OpenSSL legacy manual page are now disabled by default. Should you need to use any of these old ciphers you'll need to explicitly enable the `legacy` provider by configuring `ssl.providers=default,legacy` on the librdkafka client. OpenSSL 3.0.x deprecates the use of engines, which is being replaced by providers. As such librdkafka will emit a deprecation warning if `ssl.engine.location` is configured. OpenSSL providers may be configured with the new `ssl.providers` configuration property. The default value for `ssl.endpoint.identification.algorithm` has been changed from `none` (no hostname verification) to `https`, which enables broker hostname verification (to counter man-in-the-middle impersonation attacks) by default. To restore the previous behaviour, set `ssl.endpoint.identification.algorithm` to `none`. * The Consumer Batch APIs `rd_kafka_consume_batch()` and `rd_kafka_consume_batch_queue()` are not thread safe if `rkmessages_size` is greater than 1 and any of the **seek**, * *pause**, **resume** or **rebalancing** operation is performed in parallel with any of the above APIs. Some of the messages might be lost, or erroneously returned to the application, in the above scenario. * It is strongly recommended to use the Consumer Batch APIs and the mentioned operations in sequential order in order to get consistent result. * For **rebalancing** operation to work in sequencial manner, please set `rebalance_cb` configuration property (refer [examples/rdkafka_complex_consumer_example.c] * (examples/rdkafka_complex_consumer_example.c) for the help with the usage) for the consumer. * Added `rd_kafka_sasl_set_credentials()` API to update SASL credentials. * Setting `allow.auto.create.topics` will no longer give a warning if used by a producer, since that is an expected use case. Improvement in documentation for this property. * Added a `resolve_cb` configuration setting that permits using custom DNS resolution logic. * Added `rd_kafka_mock_broker_error_stack_cnt()`. * The librdkafka.redist NuGet package has been updated to have fewer external dependencies for its bundled librdkafka builds, as everything but cyrus-sasl is now built-in. There are bundled builds with and without linking to cyrus-sasl for maximum compatibility. * Admin API DescribeGroups() now provides the group instance id for static members KIP-345 (#3995). * Fixed memory leak when loading SSL certificates (@Mekk, #3930) * Load all CA certificates from `ssl.ca.pem`, not just the first one. * Each HTTP request made when using OAUTHBEARER OIDC would leak a small amount of memory. * When a PID epoch bump is requested and the producer is waiting to reconnect to the transaction coordinator, a failure in a find coordinator request could cause an assert to fail. This is fixed by retrying when the coordinator is known (#4020). * Transactional APIs (except `send_offsets_for_transaction()`) that timeout due to low timeout_ms may now be resumed by calling the same API again, as the operation continues in the background. * For fatal idempotent producer errors that may be recovered by bumping the epoch the current transaction must first be aborted prior to the epoch bump. This is now handled correctly, which fixes issues seen with fenced transactional producers on fatal idempotency errors. * Timeouts for EndTxn requests (transaction commits and aborts) are now automatically retried and the error raised to the application is also a retriable error. * TxnOffsetCommitRequests were retried immediately upon temporary errors in `send_offsets_to_transactions()`, causing excessive network requests. These retries are now delayed 500ms. * If `init_transactions()` is called with an infinite timeout (-1), the timeout will be limited to 2 * `transaction.timeout.ms`. The application may retry and resume the call if a retriable error is returned. * Back-off and retry JoinGroup request if coordinator load is in progress. * Fix `rd_kafka_consume_batch()` and `rd_kafka_consume_batch_queue()` skipping other partitions' offsets intermittently when **seek**, **pause**, **resume** or **rebalancing** is used for a partition. * Fix `rd_kafka_consume_batch()` and `rd_kafka_consume_batch_queue()` intermittently returing incorrect partitions' messages if **rebalancing** happens during these operations. ==== libreoffice ==== Subpackages: libreoffice-base libreoffice-calc libreoffice-draw libreoffice-filters-optional libreoffice-gnome libreoffice-gtk3 libreoffice-icon-themes libreoffice-impress libreoffice-l10n-en libreoffice-mailmerge libreoffice-math libreoffice-pyuno libreoffice-qt5 libreoffice-writer libreofficekit - Update _constraints to match current requirements - riscv64-support.patch: Add backport of riscv64 support - No gold on riscv64 - add boost-181.patch to fix build with boost 1.81.x - Add Remove_dependency_on_BitArray_h.patch: Remove dependency on BitArray.h from zxing-1.2.0. In zxing-1.4.0, numerous headers are no longer public. Rework the ConvertToSVGFormat method so it uses bitmatrix.get instead of bitmatrix.getRow, similar to the ToSVG method in zxing itself. See https://github.com/zxing-cpp/zxing-cpp/issues/361 ==== libsrtp2 ==== Version update (2.4.2 -> 2.5.0) - Update to release 2.5.0 * No changelog provided; some unspecified crypto updates occurred. ==== libstorage-ng ==== Version update (4.5.67 -> 4.5.73) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - Translated using Weblate (French) (bsc#1149754) - 4.5.73 - Translated using Weblate (Spanish) (bsc#1149754) - 4.5.72 - Translated using Weblate (Chinese (Taiwan) (zh_TW)) (bsc#1149754) - 4.5.71 - Translated using Weblate (Chinese (China) (zh_CN)) (bsc#1149754) - 4.5.70 - Translated using Weblate (Italian) (bsc#1149754) - Translated using Weblate (Georgian) (bsc#1149754) - 4.5.69 - Translated using Weblate (Georgian) (bsc#1149754) - 4.5.68 ==== libvirt ==== Subpackages: libvirt-client libvirt-daemon libvirt-daemon-config-network libvirt-daemon-driver-interface libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-qemu libvirt-libs - qemu: Fix umount of /dev in VM private namespace c3f16cea-qemu-cleanup-label-on-umount-failure.patch, 697c16e3-qemu_process-better-debug-message.patch, 5155ab4b-qemu_namespace-nested-mounts-when-umount.patch boo#1207889 ==== libxfce4ui ==== Version update (4.18.1 -> 4.18.2) Subpackages: libxfce4kbd-private-3-0 libxfce4ui-2-0 libxfce4ui-lang libxfce4ui-tools typelib-1_0-Libxfce4ui-2_0 - Update to version 4.18.2 * Update copyright year * Add XfceScreensaver (!89) * docs: Fix broken links * shortcut-dialog: Use parent window for the grab if possible (Fixes #52) * Fix memory leaks ==== libxml2 ==== Subpackages: libxml2-2 libxml2-tools - remove zlib-devel, pkgconfig(zlib) is sufficient ==== libxml2-python ==== - remove zlib-devel, pkgconfig(zlib) is sufficient ==== libzypp ==== Version update (17.31.7 -> 17.31.8) - ProgressData: enforce reporting the INIT||END state (bsc#1206949) - ps: fix service detection on newer Tumbleweed systems (bsc#1205636) - version 17.31.8 (22) ==== lmdb ==== - update to 0.9.29: * lmdump is not creating lock files ==== lokalize ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== mailcommon ==== Version update (22.12.1 -> 22.12.2) Subpackages: libKF5MailCommon5 - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== mailimporter ==== Version update (22.12.1 -> 22.12.2) Subpackages: libKF5MailImporter5 libKF5MailImporterAkonadi5 - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== mbox-importer ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== messagelib ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== milou5 ==== Version update (5.26.5 -> 5.27.0) Subpackages: milou5-lang - Update to 5.27.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.0 - No code changes since 5.26.90 - Update to 5.26.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.90 - Changes since 5.26.5: * Fix Qt6 build due to deprecated Plasma::QueryMatch::InformationalMatch enum * ResultDelegate: Add tooltip for main text, too, if needed * Install po folder ==== mlocate ==== Subpackages: mlocate-lang - Remove ProtectKernelModules from systemd unit as it makes files inaccessible that are then not visible for locate (bsc#1207884) ==== mobipocket ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== mousepad ==== Version update (0.5.10 -> 0.6.0) Subpackages: libmousepad0 - Update to version 0.6.0 * Dependency Changes: - GLib >= 2.56.2 * New Features: - Keep saved state in memory to track actual modification state * Appearance Changes / Minor Improvements: - Add "match whole word" toggle to search toolbar (#180, !124) * Code Refactoring: - cleanup: prefs: Reduce the diff from what Glade 3.40.0 would do - cleanup: Use G_DECLARE_FINAL_TYPE - cleanup: Remove dead code - cleanup: Use consistent naming and avoid duplicated code - build: Let xdt-depends.m4 macros set GLib macros - flatpak: Updates from Flathub * Bug Fixes: - Clear undo action list in case of unbuffered modification - Set file properties only for actual changes - Emit "encoding-changed" after setting BOM if needed - Update action states on reload - Mark document as modified if line ending actually changes (Fixes #187) - Do not show the menubar on Alt key release if focus is lost (#185) - plugins: Do not resize unnecessarily the prefs dialog on Wayland - Initialize static variable only once - prefs-dialog: Improve history widget alignment (Fixes #173) * Translation Updates ==== mozilla-nss ==== Version update (3.86 -> 3.87) Subpackages: libfreebl3 libfreebl3-hmac libsoftokn3 libsoftokn3-hmac mozilla-nss-certs mozilla-nss-tools - update to NSS 3.87 * bmo#1803226 - NULL password encoding incorrect * bmo#1804071 - Fix rng stub signature for fuzzing builds * bmo#1803595 - Updating the compiler parsing for build * bmo#1749030 - Modification of supported compilers * bmo#1774654 - tstclnt crashes when accessing gnutls server without a user cert in the database. * bmo#1751707 - Add configuration option to enable source-based coverage sanitizer * bmo#1751705 - Update ECCKiila generated files. * bmo#1730353 - Add support for the LoongArch 64-bit architecture * bmo#1798823 - add checks for zero-length RSA modulus to avoid memory errors and failed assertions later * bmo#1798823 - Additional zero-length RSA modulus checks - add man-pages to the tools package (boo#1208242) ==== mozjs102 ==== Version update (102.7.0 -> 102.8.0) - Update to version 102.8.0: + Various security fixes. + CVE-2023-25728: Content security policy leak in violation reports using iframes. + CVE-2023-25730: Screen hijack via browser fullscreen mode. + CVE-2023-25743: Fullscreen notification not shown in Firefox Focus. + CVE-2023-0767: Arbitrary memory write via PKCS 12 in NSS. + CVE-2023-25735: Potential use-after-free from compartment mismatch in SpiderMonkey. + CVE-2023-25737: Invalid downcast in SVGUtils::SetupStrokeGeometry. + CVE-2023-25738: Printing on Windows could potentially crash Firefox with some device drivers. + CVE-2023-25739: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext. + CVE-2023-25729: Extensions could have opened external schemes without user knowledge. + CVE-2023-25732: Out of bounds memory write from EncodeInputStream. + CVE-2023-25734: Opening local .url files could cause unexpected network loads. + CVE-2023-25742: Web Crypto ImportKey crashes tab. + CVE-2023-25744: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8. + CVE-2023-25746: Memory safety bugs fixed in Firefox ESR 102.8. ==== mpfr ==== Version update (4.1.1 -> 4.2.0) - tests-tsprintf.patch: Avoid testsuite failure with glibc >= 2.37 - Update to mpfr 4.2.0 * New functions mpfr_cosu, mpfr_sinu, mpfr_tanu, mpfr_acosu, mpfr_asinu, mpfr_atanu and mpfr_atan2u. * New functions mpfr_cospi, mpfr_sinpi, mpfr_tanpi, mpfr_acospi, mpfr_asinpi, mpfr_atanpi and mpfr_atan2pi. * New functions mpfr_log2p1, mpfr_log10p1, mpfr_exp2m1, mpfr_exp10m1 and mpfr_compound_si. * New functions mpfr_fmod_ui, mpfr_powr, mpfr_pown, mpfr_pow_uj, mpfr_pow_sj and mpfr_rootn_si (mpfr_pown is actually a macro defined as an alias for mpfr_pow_sj). * Bug fixes. In particular, for the formatted output functions (mpfr_printf, etc.), the case where the precision consists only of a period has been fixed to be like ".0" as specified in the ISO C standard, and the manual has been corrected and clarified. The macros of the custom interface have also been fixed: they now behave like functions (except a minor limitation for mpfr_custom_init_set). - Remove mpfr-4.1.1-patch01.patch which is included in the new release. ==== mutter ==== Version update (43.2 -> 43.3) - Update to version 43.3: + Skip resize effects for tiled windows during user grabs + Disable direct scanout during drag-n-drop operations + Ignore unmapped subsurfaces in direct scanout check + Fix cursor disappearing over windows during grabs + Fix pointer constrains with subsurfaces + Make wl_output mode independent of the orientation + Improve focus handling on workspace switches + Fix cursor position in window screencasts + Do not require a physical device to update pointer visibility + Fix initialization of keyboard accessibility + Fix freeze when crossing monitors under some conditions + Don't allow window activation to break global grabs + Fixed crashes + Plugged leak + Misc. bug fixes and cleanups + Updated translations. ==== ncurses ==== Version update (6.4.20230114 -> 6.4.20230128) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Fix use of run_cmd.sh - Add ncurses patch 20230128 + document XF, kxIN and kxOUT -TD + add note on sun/wscons/cmdtool/shelltool -TD + modify configure script check for pkg-config library directory to take into account an older version 0.15.0 which used PKG_CONFIG_PATH but not PKG_CONFIG_LIBDIR - Correct offsets of patches * ncurses-5.9-ibm327x.dif * ncurses-6.4.dif - Add ncurses patch 20230121 + correct limit-check when dumping tc/use clause via tic -I (report by Gabriel Ravier). + correct a check for manpage-alias in edit_man.sh, to work with out of tree builds (report by Sven Joachim). - Port ncurses-6.4.dif to patch 20230121 ==== nfs-utils ==== Subpackages: libnfsidmap1 nfs-client nfs-kernel-server - Rename all drop-in options.conf files as 10-options.conf This makes it easier for other packages to over-ride with a drop-in with a later sequence number. resource-agents does this. (bsc#1207843) ==== nodejs19 ==== Version update (19.5.0 -> 19.6.0) Subpackages: npm19 - Update to version 19.6.0: * ESM: Leverage loaders when resolving subsequent loaders Loaders now apply to subsequent loaders, for example: - -experimental-loader ts-node --experimental-loader loader-written-in-typescript * deps: upgrade npm to 9.4.0 Added --install-strategy=linked option for installations similar to pnpm. - sysctl.patch, s390.patch: upstreamed, removed - Do not use pkg_vcmp to decide BuildDependencies: this works based on 'installed packages' which is not interpreted correctly by the scheduler. Rather switch to boolean dependencies. ==== nvme-cli ==== Version update (2.2.1 -> 2.3) Subpackages: nvme-cli-bash-completion nvme-cli-zsh-completion - Update to version 2.3: * Added support for Flexible Data Placement (TP4146) * Added Persistent Discovery Controller support (TP8013/TP8014) * nvme-mi: support for firmware downloads * nvme device-self-test learned the --wait command line argument which makes nvme-cli to wait (incl. progress bar) in foreground until the test has finished. * A lot of bug fixes all over the place - Update spec file * Project depends on meson >= 0.50.0 * make build dependency dropped ==== okular ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== openblas_openmp ==== - Do not set LIBNAMESUFFIX to mark different flavors as this causes the SONAME to be different so that different flavors of OpenBLAS cannot serve as plugin replacements of each other (boo#1177260). - Fix a fallout of making alternatives directory arch dependent. - Remove unneeded links that will be created by update-alternatives. Create remaining links %post scripts properly %ghost-ing the files. - Make library links in the alternatives directory arch dependent. This avoids conflicts when both 32-bit and 64-bit versions are installed (boo#1207563). ==== openblas_pthreads ==== - Do not set LIBNAMESUFFIX to mark different flavors as this causes the SONAME to be different so that different flavors of OpenBLAS cannot serve as plugin replacements of each other (boo#1177260). - Fix a fallout of making alternatives directory arch dependent. - Remove unneeded links that will be created by update-alternatives. Create remaining links %post scripts properly %ghost-ing the files. - Make library links in the alternatives directory arch dependent. This avoids conflicts when both 32-bit and 64-bit versions are installed (boo#1207563). ==== openssl-1_1 ==== Version update (1.1.1s -> 1.1.1t) Subpackages: libopenssl1_1 libopenssl1_1-hmac - Update to 1.1.1t: * Fixed X.400 address type confusion in X.509 GeneralName. There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but subsequently interpreted by GENERAL_NAME_cmp as an ASN1_TYPE. This vulnerability may allow an attacker who can provide a certificate chain and CRL (neither of which need have a valid signature) to pass arbitrary pointers to a memcmp call, creating a possible read primitive, subject to some constraints. Refer to the advisory for more information. Thanks to David Benjamin for discovering this issue. [bsc#1207533, CVE-2023-0286] This issue has been fixed by changing the public header file definition of GENERAL_NAME so that x400Address reflects the implementation. It was not possible for any existing application to successfully use the existing definition; however, if any application references the x400Address field (e.g. in dead code), note that the type of this field has changed. There is no ABI change. * Fixed Use-after-free following BIO_new_NDEF. The public API function BIO_new_NDEF is a helper function used for streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the SMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by end user applications. The function receives a BIO from the caller, prepends a new BIO_f_asn1 filter BIO onto the front of it to form a BIO chain, and then returns the new head of the BIO chain to the caller. Under certain conditions, for example if a CMS recipient public key is invalid, the new filter BIO is freed and the function returns a NULL result indicating a failure. However, in this case, the BIO chain is not properly cleaned up and the BIO passed by the caller still retains internal pointers to the previously freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO then a use-after-free will occur. This will most likely result in a crash. [bsc#1207536, CVE-2023-0215] * Fixed Double free after calling PEM_read_bio_ex. The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data. If the function succeeds then the "name_out", "header" and "data" arguments are populated with pointers to buffers containing the relevant decoded data. The caller is responsible for freeing those buffers. It is possible to construct a PEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex() will return a failure code but will populate the header argument with a pointer to a buffer that has already been freed. If the caller also frees this buffer then a double free will occur. This will most likely lead to a crash. The functions PEM_read_bio() and PEM_read() are simple wrappers around PEM_read_bio_ex() and therefore these functions are also directly affected. These functions are also called indirectly by a number of other OpenSSL functions including PEM_X509_INFO_read_bio_ex() and SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal uses of these functions are not vulnerable because the caller does not free the header argument if PEM_read_bio_ex() returns a failure code. [bsc#1207538, CVE-2022-4450] [Kurt Roeckx, Matt Caswell] * Fixed Timing Oracle in RSA Decryption. A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages for decryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5, RSA-OEAP and RSASVE. [bsc#1207534, CVE-2022-4304] * Rebased openssl-1_1-openssl-config.patch * Update openssl.keyring with key 7953 AC1F BC3D C8B3 B292 393E D5E9 E43F 7DF9 EE8C (Richard Levitte) ==== openssl-3 ==== - Relax the crypto-policies requirements for the regression tests - Set OpenSSL 3.0.7 as the default openssl [bsc#1205042] * Rename openssl-1.1.0-no-html.patch to openssl-no-html-docs.patch * Rebase openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch * Package a copy of the original default config file called openssl.cnf and name it as openssl-orig.cnf and warn the user if the files differ. * Add openssl-3-devel as conflicting with libopenssl-1_1-devel * Remove patches: - fix-config-in-tests.patch - openssl-use-versioned-config.patch - Create the openssl ca-certificates directory in case the ca-certificates package is not installed. This directory is required by the nodejs regression tests. [bsc#1207484] ==== openssl ==== Version update (1.1.1s -> 3.0.7) ==== openvpn ==== - Remove migration from openvpn.service to openvpn@.service and depending requires, this is from pre SLE12 times and not supported anymore. ==== ovmf ==== Subpackages: qemu-uefi-aarch64 - Add ovmf-Revert-OvmfPkg-OvmfXen-Set-PcdFSBClock.patch to revert 71cdb91f313380152d7bf38cfeebe76f5b2d39ac patch (bsc#1205613) - 71cdb91f313380152d7bf38cfeebe76f5b2d39ac OvmfPkg/OvmfXen: Set PcdFSBClock - We are waiting better upsteam patch, revert the issue patch first. Then PcdFSBClock will back to fixed variable. - Reference: https://edk2.groups.io/g/devel/topic/94891128#96077 https://bugzilla.tianocore.org/show_bug.cgi?id=4340 - Add fix-aarch64.patch: this fixes https://bugzilla.suse.com/show_bug.cgi?id=1207095 ==== oxygen5-sounds ==== Version update (5.26.5 -> 5.27.0) - Update to 5.27.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.0 - No code changes since 5.26.90 - Update to 5.26.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.90 - No code changes since 5.26.5 ==== parley ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== patterns-media ==== Subpackages: patterns-media-rest_cd_core patterns-media-rest_dvd - rest_core_dvd: added recommends to packages for nVidia's openGPU driver * nvidia-open-driver-G06-signed-kmp-default * kernel-firmware-nvidia-gsp-G06 ==== patterns-server ==== Subpackages: patterns-server-dhcp_dns_server patterns-server-directory_server patterns-server-file_server patterns-server-gateway_server patterns-server-kvm_server patterns-server-kvm_tools patterns-server-lamp_server patterns-server-mail_server patterns-server-printing - Drop recommends on yast2-{dns,dhcp,http}-server: yast modules are no longer maintained. ==== patterns-xfce ==== Version update (20210209 -> 20230212) Subpackages: patterns-xfce-xfce patterns-xfce-xfce_basis patterns-xfce-xfce_laptop patterns-xfce-xfce_office - Restore previously removed gnome-packagekit as it is needed so that openQA does not fail graphical update test (poo#124364). This is also useful in preparation for offline updates method planned at some point in the future. - Replaced gnome-calculator with galculator since it better integrates with Xfce look and feel. - Do not recommend package-update-indicator on Tumbleweed. Only Leap supports update method via PackageKit. ==== perl-HTML-Parser ==== Version update (3.80 -> 3.81) - updated to 3.81 see /usr/share/doc/packages/perl-HTML-Parser/Changes 3.81 2023-01-30 - Stop depending on "Test" (GH#34) (James Raspass) - fix test scripts after conversion to Test::More (GH#35) (Graham Knop) ==== perl-IO-Socket-SSL ==== Version update (2.078 -> 2.081) - updated to 2.081 see /usr/share/doc/packages/perl-IO-Socket-SSL/Changes 2.081 2023/01/25 - new function set_msg_callback for user defined callback on each SSL message - showcase function in example/ssl_client.pl and example/ssl_server.pl for computing JA3S/JA3 fingerprints - fix tracing added in 2.076 to no longer include SSL3_RT_HEADER (noise) 2.080 2023/01/18 - move certs into t/ so that distributions like CentOS don't install the test certificates as part of the documentation any longer. 2.079 2023/01/16 - properly extract IPv6 address for verification from PeerAddr if not explicitly given as SSL_verifycn_name. https://github.com/noxxi/p5-io-socket-ssl/issues/123 ==== perl-Mail-AuthenticationResults ==== Version update (2.20210915 -> 2.20230112) - updated to 2.20230112 see /usr/share/doc/packages/perl-Mail-AuthenticationResults/Changes 2.20230112 2023-01-12 22:49:04+00:00 UTC - Add parser method to parse json serialized object back into the object(s) it represents ==== perl-Mail-DKIM ==== Version update (1.20220520 -> 1.20230212) - updated to 1.20230212 see /usr/share/doc/packages/perl-Mail-DKIM/Changes 1.20230212 2023-02-12 UTC + Fix typo in ARC signer example code. Thanks to @dev-aaront-org ==== perl-Net-Patricia ==== - no-libnsl.diff: don't link against libnsl if we don't use it ==== permissions ==== Version update (1599_20221220 -> 1599_20230217) Subpackages: chkstat permissions-config - Update to version 20230217: * shadow: newgidmap,newuidmap: use capabilities (bsc#1208309) * profiles: whitelist kismet capabilities (bsc#1200954) (#171) ==== php8 ==== Version update (8.1.14 -> 8.1.16) Subpackages: php8-cli php8-ctype php8-dom php8-gd php8-gettext php8-iconv php8-mbstring php8-mysql php8-openssl php8-pdo php8-sqlite php8-tokenizer php8-xmlreader php8-xmlwriter - version update to 8.1.16 * This is a security release that addresses CVE-2023-0567, CVE-2023-0568, and CVE-2023-0662. * https://www.php.net/ChangeLog-8.php#8.1.16 - version update to 8.1.15 * This is a bug fix release. * https://www.php.net/ChangeLog-8.php#8.1.15 ==== pim-data-exporter ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== pim-sieve-editor ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== pimcommon ==== Version update (22.12.1 -> 22.12.2) Subpackages: libKF5PimCommon5 libKF5PimCommonAkonadi5 libKF5PimCommonAutoCorrection5 - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== pkgconf ==== Subpackages: libpkgconf3 pkgconf-m4 pkgconf-pkg-config - Add pkgconf-CVE-2023-24056.patch: Backport commit 628b2b2baf from upstream, test for, and stop string processing, on truncation (bsc#1207394 CVE-2023-24056). ==== plasma-browser-integration ==== Version update (5.26.5 -> 5.27.0) - Update to 5.27.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.0 - Changes since 5.26.90: * Purpose Plugin: Always send a title - Update to 5.26.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.90 - Changes since 5.26.5: * mprisplugin: Don't skip if size is invalid and take at least one image * Avoid accidental global variable in page-script * Remove generateGuid function * Use ecm_set_disabled_deprecation_versions * Register chrome.downloads.onChanged listener lazily * mprisplugin: xesam:artist is a list of strings * Use user agent string to detect Firefox * Use a separate script injected into the page context * Add Linux Qt6 CI * Fix excess comma in X-Plasma-Runner-Syntaxes values * Install po folder ==== plasma-framework ==== Version update (5.102.0 -> 5.103.0) Subpackages: libKF5Plasma5 plasma-framework-components - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - Changes since 5.102.0: * Dialog: Fix calculation of distance between dialog and parent applet (kde#464201) * Refactor glowbar SVG * QMenuProxy & Plasma::Types::PopupPlacement: Reverse direction for RTL * QMenuProxy: Fix relative positioning with embedded/off-screen parent windows * IconItemTest: Wait for rendering before capturing an image of IconItem * iconitem: Use InOutCubic for the animation's easing curve * iconitem: Adjust fade animation to not flicker as much (kde#463061) ==== plasma-nm5 ==== Version update (5.26.5 -> 5.27.0) Subpackages: plasma-nm5-openconnect plasma-nm5-openvpn plasma-nm5-pptp plasma-nm5-vpnc - Update to 5.27.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.0 - Changes since 5.26.90: * Don't initialize sent/received bytes with stale values * applet: Fix key navigation in standalone (non-systray) mode * applet: Only show airplane mode in context menu when visible in toolbar (kde#464527) - Update to 5.26.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.90 - Too many changes to list here ==== plasma5-addons ==== Version update (5.26.5 -> 5.27.0) Subpackages: plasma5-addons-lang - Update to 5.27.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.0 - Changes since 5.26.90: * runners/datetime: refine time zone matching - Update to 5.26.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.90 - Too many changes to list here ==== plasma5-desktop ==== Version update (5.26.5 -> 5.27.0) Subpackages: plasma5-desktop-emojier - Don't try to delete the DBus interfaces folder on s390x. There's nothing to delete on this arch. - Tarball got respun. Changes: * applets/taskmanager: Only activate the triangle filter when a tooltip is open (kde#465595) * kcms/landingPage: Remove double definition of onClickHandler - Update to 5.27.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.0 - Too many changes to list here - Drop patches, now upstream: * 0001-attica-kde-Use-the-correct-location-for-determining-.patch - Update to 5.26.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.90 - Too many changes to list here - Add patch to fix attica cache corruption (kde#464517): * 0001-attica-kde-Use-the-correct-location-for-determining-.patch ==== plasma5-disks ==== Version update (5.26.5 -> 5.27.0) - Update to 5.27.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.0 - No code changes since 5.26.90 - Update to 5.26.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.90 - Changes since 5.26.5: * Use ecm_set_disabled_deprecation_versions * Remove wrong releases from appstream ==== plasma5-integration ==== Version update (5.26.5 -> 5.27.0) Subpackages: plasma5-integration-plugin plasma5-integration-plugin-lang - Update to 5.27.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.0 - No code changes since 5.26.90 - Update to 5.26.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.90 - Changes since 5.26.5: * Compile with Qt 6 as well * Use ecm_set_disabled_deprecation_versions * correctly use x11 wid as hex, not decimal * Fix crash when selecting "Open with other application" on download notification (kde#461529) * create a window handle before trying to export windows (kde#462108) * Port away from deprecated KStandardGuiItem::yes/no * Port away from deprecated KDirLister::showingDotFiles * extend kio with portal-based open-with implementation * Use CamelCase includes * Port away from deprecated KIO API * Fix QtQuickRenderSettings from loading (kde#455575) ==== plasma5-openSUSE ==== Version update (84.87~git20220602T134713~22403ba -> 84.87~git20230131T131056~433af24) Subpackages: plasma5-defaults-openSUSE plasma5-theme-openSUSE plasma5-workspace-branding-openSUSE sddm-theme-openSUSE - Require distribution-logos-openSUSE-icons - Update to 5.27.0 - Remove compatibility with KDE4 - Update to version 84.87~git20230131T131056~433af24: * desktoptheme: Enable `AdaptiveTransparency` * Use logo provided by distribution-logos-openSUSE-icons - Update to 5.26.90 ==== plasma5-pa ==== Version update (5.26.5 -> 5.27.0) Subpackages: plasma5-pa-lang - Update to 5.27.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.0 - No code changes since 5.26.90 - Update to 5.26.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.90 - Changes since 5.26.5: * Use ecm_set_disabled_deprecation_versions * Update module name for the combine-sink * Install translated documentation from po/ too * applet: hide current output device from tooltip when it's the only one * applet: mention scrollability in tooltip * kcm: make volume sliders obey "Raise maximum volume" setting (kde#458977) * Make global mute actually global between plasmoid instances (kde#418713) * Add portal.app_id to iconName lookup in pulseobject.cpp for flatpak * Move applet settings into KCM (kde#440846) * [kcm] Bundle icon for speakers test * applet: fix slider animation when toggling "Raise Maximum Volume" * applet: Surface middle-clickability in the UI * don't crash when the server doesn't respond (kde#454647,kde#437272) * KCM: Allow comboboxes to grow to fit contents (kde#458422) * KCM: Only show port/profile labels if port combobox is visible * Install po folder * Set bugReportURL for KCM ==== plasma5-systemmonitor ==== Version update (5.26.5 -> 5.27.0) - Update to 5.27.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.0 - Changes since 5.26.90: * Set RemoveDeadEntries=true in the pages knsrc (kde#453651) * table: Workaround a memory leak in QQmlPropertyCache (kde#460370) - Update to 5.26.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.90 - Changes since 5.26.5: * Process table: Always use binary name for icon lookup (kde#454326) * Add missing KWindowSystem link * applicationstable: Use the same scaling for CPU details as the column display (kde#462775) * table: Don't clear the selection when setting current index (kde#460615) * Be more explicit in kill button texts (kde#454753) * port all headers to pragma once * Slightly reduce minimum window size (kde#462803) * Convert hardcoded minimum sizes to multiples of GridUnit * Use ecm_set_disabled_deprecation_versions * Perform initialization in initialization list * Remove invalid appstream releases * Install po folder * Move DialogLoader to data of ScrollablePage (kde#459514) * Set QSurfaceFormat::ResetNotification ==== plasma5-thunderbolt ==== Version update (5.26.5 -> 5.27.0) - Update to 5.27.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.0 - No code changes since 5.26.90 - Update to 5.26.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.90 - Changes since 5.26.5: * Fix list item text clarity * Use ecm_set_disabled_deprecation_versions * Install po folder * Avoid combining smart pointers and qobject parent ownership (kde#439192) * Set bugReportURL for KCM ==== plasma5-workspace ==== Version update (5.26.5 -> 5.27.0) Subpackages: gmenudbusmenuproxy plasma5-session plasma5-session-wayland plasma5-workspace-libs xembedsniproxy - Tarball got respun. Changes: * klipper: store QImage and construct QPixmap only when necessary (kde#465225, kde#465326, kde#464828, kde#465603) * shell: Ensure containments that belong to the current activity are not deleted prior to loading - Update to 5.27.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.0 - Too many changes to list here - Update to 5.26.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.90 - Too many changes to list here ==== pngquant ==== Version update (2.17.0 -> 2.18.0) - update to 2.18.0: * build fixes on ARM * small quality improvement ==== polkit-kde-agent-5 ==== Version update (5.26.5 -> 5.27.0) - Update to 5.27.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.0 - No code changes since 5.26.90 - Update to 5.26.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.90 - Changes since 5.26.5: * Use ecm_set_disabled_deprecation_versions * Install po folder * Remove unused includes ==== poppler ==== Version update (23.01.0 -> 23.02.0) Subpackages: libpoppler-cpp0 libpoppler-glib8 libpoppler126 poppler-tools - Update to version 23.02.0: + core: * CairoOutputDev: . Fix rendering of color type 3 fonts . Add handling matte entry * Fix segfault on wrong nssdir * Fix "NSS could not shutdown" + utils: pdfsig: Point out supports PKCS#11 URIs as nickname ==== poppler-qt5 ==== Version update (23.01.0 -> 23.02.0) - Update to version 23.02.0: + core: * CairoOutputDev: . Fix rendering of color type 3 fonts . Add handling matte entry * Fix segfault on wrong nssdir * Fix "NSS could not shutdown" + utils: pdfsig: Point out supports PKCS#11 URIs as nickname ==== postfix ==== - SELinux: postfix denied to access /var/spool/postfix/pid/master.pid (bsc#1207177) Apply proposed changes in postfix.service - remove patch included into the source: harden_postfix.service.patch - Disable NIS support on Factory (deprecated and will be removed) ==== postgresql15 ==== Version update (15.1 -> 15.2) Subpackages: libpq5 postgresql15-contrib postgresql15-server - Update to 15.2: * CVE-2022-41862, bsc#1208102: memory leak in libpq * https://www.postgresql.org/about/news/2592/ * https://www.postgresql.org/docs/15/release-15-2.html - Bump latest_supported_llvm_ver to 15. ==== powerdevil5 ==== Version update (5.26.5 -> 5.27.0) Subpackages: powerdevil5-lang - Update to 5.27.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.0 - Changes since 5.26.90: * chargethresholdhelper: Filter out batteries without thresholds early (kde#464535) * daemon: Fix wakeup removal not rescheduling the timerfd wakeup BUG: 464251 (kde#464251) - Update to 5.26.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.90 - Changes since 5.26.5: * Handle Button Events: Turn off keyboard backlight when lid is closed (kde#444029) * Do not hardcode ACPI battery names * Use ecm_set_disabled_deprecation_versions * Remove unused KWayland dep * Remove out-of-date infor from kcm docbook * Apply exponential moving average to remaining time when unplugged * powerdevilbackendinterface: run clang-format * Better libddcutil error handling * Install translated documentation from po/ too * Allow triggering critical battery action manually * Choose easing curve based on old and new brightness values * wirelesspowersaving: Reduce calls to NetworkManager::permissions() * DPMS: Port to KScreenDPMS * powerprofileconfig: Use proper signal for detecting user interaction * Add FreeBSD Qt6 CI * Add Linux Qt6 CI * Fix install in kf6/ * Perform initialization in initialization list * Fix compile against qt6 * Install po folder * Set bugReportURL for KCMs ==== prison-qt5 ==== Version update (5.102.0 -> 5.103.0) Subpackages: libKF5Prison5 prison-qt5-imports - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - No code change since 5.102.0 ==== psmisc ==== - allow to switch off Apparmor support via bcond ==== pulseaudio ==== Subpackages: libpulse-mainloop-glib0 libpulse0 pulseaudio-bash-completion pulseaudio-gdm-hooks pulseaudio-module-bluetooth pulseaudio-module-gsettings pulseaudio-module-x11 pulseaudio-module-zeroconf pulseaudio-setup pulseaudio-utils pulseaudio-zsh-completion system-user-pulse - Move dbus-1 system.d file to /usr (bsc#1207584) ==== purpose ==== Version update (5.102.0 -> 5.103.0) Subpackages: libKF5Purpose5 libKF5PurposeWidgets5 - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - No code change since 5.102.0 ==== python-Twisted ==== Subpackages: python310-Twisted python310-Twisted-tls - Add patch support-new-glibc.patch: * Support new glibc changes. ==== python-argcomplete ==== - fix substitution on tests/test.py to test the current python flavor ==== python-cached-property ==== - Refresh patches and remove weird replacement of conftest.py command in %%prep. - add python311.patch to fix tests with 3.11 ==== python-cryptography ==== Version update (39.0.0 -> 39.0.1) - Update to 39.0.1: * SECURITY ISSUE - Fixed a bug where Cipher.update_into accepted Python buffer protocol objects, but allowed immutable buffers. CVE-2023-23931 * Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.0.8. ==== python-dnspython ==== Version update (2.2.1 -> 2.3.0) - Update to version 2.3.0 * The get_soa() method has been added to dns.zone.Zone. * The minimum TLS version is now 1.2. * EDNS padding is now supported. Messages with EDNS enabled and with a non-zero pad option will be automatically padded appropriately when converted to wire format. * dns.zone.from_text() and dns.zone.from_file() now have an allow_directives parameter to allow finer control over how directives in zonefiles are processed. * A preliminary implementation of DNS-over-QUIC has been added, and will be available if the aioquic library is present. See dns.query.quic(), dns.asyncquery.quic(), and examples/doq.py for more info. This API is subject to change in future releases For asynchronous I/O, both asyncio and Trio are supported, but Curio is not. * DNSSEC signing support has been added to the dns.dnssec module, along with a number of functions to help generate DS, CDS, and CDNSKEY RRsets. * Curio asynchronous I/O support is deprecated as of this release and will be removed in a future release. * The resolver objectâs nameserver field is planned to become a property in dnspython 2.4. Writing to this field other than by direct assignment is deprecated, and so is depending on the mutability and form of the iterable returned when it is read. ==== python-future ==== - pull in dbm for all flavors on SLE15 SP4+ as well ==== python-importlib-resources ==== - Remove obsolete cache compilation for tests * fixes d:l:p:backports 15.4_py39 build failure. - Avoid building for not supported Python <= 3.6 ==== python-numpy ==== - build-conditionalize cblas dependency, it is missing on SLE <= 15 related to bsc#1177260 not being fixable for SLE15 (jsc#PED-3257) ==== python-pyzmq ==== - skip numy tests for the testsuite on SLE15 ==== python-qt5 ==== Version update (5.15.7 -> 5.15.9) - Update to v5.15.9 * Fix the order in which modules are built so that the composite Qt module is built after everything it depends on. - Update to 5.15.8 * Added the missing QLocale.Language.NigerianPidgin member (Qt v5.15.2 and later). * Added the missing QOperatingSystemVersion.MacOSBigSure attribute (Qt v5.15.1 and later). * Added the missing QThreadPool.contains() method (Qt v5.15.1 and later). * Added the missing QBluetoothDeviceDiscoveryAgent.DiscoveryMethod members. * Bug fixes. ==== python-qt5-sip ==== Version update (12.11.0 -> 12.11.1) - Update to ABI version 12.11.1 * error on subclassing enums ==== python-reportlab ==== - pick the primary interpreter for doc generation even if it is not "python3" ==== python-zope.event ==== Version update (4.5.0 -> 4.6) - update to 4.6: * Port documentation to Python 3. * Add support for Python 3.10, 3.11. ==== python310-pyparsing ==== - do primary/all split only for tumbleweed (similar to flit-core) ==== qalculate ==== Version update (4.5.0 -> 4.5.1) Subpackages: libqalculate22 qalculate-data - update to 4.5.1: * Fix retrieval of exchange rates from mycurrency.net and add alternative secondary exchange rates sources * Add m/sÂ³, m/sâ´, m/sâµ, and m/sâ¶ as derived units (improves automatic unit conversion) * Check that the output of command, in command() function, is a reasonably sane expression * EUR has replaced HRK as currency of Croatia * Fix MathStructure::countTotalChildren() with count_function_as_one set to false * Fix unit tests ==== qemu ==== Subpackages: qemu-arm qemu-audio-spice qemu-block-curl qemu-block-nfs qemu-block-rbd qemu-chardev-spice qemu-guest-agent qemu-hw-display-qxl qemu-hw-display-virtio-gpu qemu-hw-display-virtio-gpu-pci qemu-hw-display-virtio-vga qemu-hw-usb-host qemu-hw-usb-redirect qemu-hw-usb-smartcard qemu-ipxe qemu-ksm qemu-tools qemu-ui-curses qemu-ui-gtk qemu-ui-opengl qemu-ui-spice-app qemu-ui-spice-core qemu-vgabios - Fixes: jsc#PED-1716 Add S390 features from IBM requirements * Patches added: dump-Add-architecture-section-and-sectio.patch dump-Refactor-dump_iterate-and-introduce.patch dump-Reintroduce-memory_offset-and-secti.patch dump-Rename-write_elf_loads-to-write_elf.patch dump-Rename-write_elf-_phdr_note-to-prep.patch dump-Reorder-struct-DumpState.patch dump-Replace-opaque-DumpState-pointer-wi.patch dump-Rework-dump_calculate_size-function.patch dump-Rework-filter-area-variables.patch dump-Rework-get_start_block.patch dump-Split-elf-header-functions-into-pre.patch dump-Use-a-buffer-for-ELF-section-data-a.patch dump-Write-ELF-section-headers-right-aft.patch include-elf.h-add-s390x-note-types.patch s390x-Add-KVM-PV-dump-interface.patch s390x-Add-protected-dump-cap.patch s390x-Introduce-PV-query-interface.patch s390x-pv-Add-dump-support.patch - Fixed: bsc#1205847 (CVE-2022-4172), bsc#1203788 (CVE-2022-3165), bsc#1205808 (CVE-2022-4144), bsc#1206527, bsc#1208139 - Improved handling of: bsc#1202282 (jsc#PED-2592) * Patches dropped: pc-q35-Bump-max_cpus-to-1024.patch * Patches added: accel-abort-if-we-fail-to-load-the-accel.patch bios-tables-test-add-test-for-number-of-.patch bios-tables-test-teach-test-to-use-smbio.patch dmg-warn-when-opening-dmg-images-contain.patch hw-acpi-erst.c-Fix-memory-handling-issue.patch hw-display-qxl-Avoid-buffer-overrun-in-q.patch hw-display-qxl-Document-qxl_phys2virt.patch hw-display-qxl-Have-qxl_log_command-Retu.patch hw-display-qxl-Pass-requested-buffer-siz.patch hw-smbios-add-core_count2-to-smbios-tabl.patch hw-smbios-support-for-type-8-port-connec.patch module-add-Error-arguments-to-module_loa.patch module-removed-unused-function-argument-.patch module-rename-module_load_one-to-module_.patch openSUSE-pc-q35-Bump-max_cpus-to-1024.patch s390x-tod-kvm-don-t-save-restore-the-TOD.patch tests-acpi-allow-changes-for-core_count2.patch tests-acpi-update-tables-for-new-core-co.patch ui-vnc-clipboard-fix-integer-underflow-i.patch ==== qqc2-desktop-style ==== Version update (5.102.0 -> 5.103.0) - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - Too many changes since 5.102.0, only listing bugfixes: * RadioButton: Add support for icons, just like in CheckBox (kde#442986) ==== re2 ==== Version update (20221201 -> 20230201) - update to 2023-02-01: * improved support for ICU - build with ICU ==== ristretto ==== Version update (0.12.4 -> 0.13.0) Subpackages: ristretto-lang - Update to version 0.13.0 * New Features: - Add print support (#1) * Bug Fixes: - editor-chooser: Expand tree view vertically - properties-dialog: Update thumbnail on "ready" signal - Fix remaining blurry icons when UI scale > 1 - thumbnailer: Properly support window scaling (#81) - Revert "thumbnailer: Increase thumbnail sizes" * Translation Updates ==== ruby ==== Version update (3.1 -> 3.2) - switch the default ruby to 3.2 ==== ruby-common ==== - do not rely on file dependencies for getopt ==== samba ==== Version update (4.17.4+git.314.7b07e3c51a6 -> 4.17.5+git.320.c38ca0f84a) Subpackages: libsamba-policy0-python3 samba-ad-dc-libs samba-client samba-client-libs samba-gpupdate samba-ldb-ldap samba-libs samba-libs-python3 samba-python3 samba-winbind samba-winbind-libs - Update to 4.17.5 * smbc_getxattr() return value is incorrect; (bso#14808); * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not handled correctly; (bso#15172); * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210); * samba-tool gpo listall fails IPv6 only - finddcs() fails to find DC when there is only an AAAA record for the DC in DNS; (bso#15226); * smbd crashes if an FSCTL request is done on a stream handle; (bso#15236); * DFS links don't work anymore on Mac clients since 4.17; (bso#15277); * vfs_virusfilter segfault on access, directory edgecase (accessing NULL value); (bso#15283); * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5) based SChannel on NETLOGON (additional changes); (bso#15240); * %U for include directive doesn't work for share listing (netshareenum); (bso#15243); * Shares missing from netshareenum response in samba 4.17.4; (bso#15266); * ctdb: use-after-free in run_proc; (bso#15269); * irpc_destructor may crash during shutdown; (bso#15280); * auth3_generate_session_info_pac leaks wbcAuthUserInfo; (bso#15286); * smbclient segfaults with use after free on an optimized build; (bso#15268); * smbstatus leaking files in msg.sock and msg.lock; (bso#15282); * Leak in wbcCtxPingDc2; (bso#15164); * Access based share enum does not work in Samba 4.16+; (bso#15265); * Crash during share enumeration; (bso#15267); * rep_listxattr on FreeBSD does not properly check for reads off end of returned buffer; (bso#15271); * Avoid relying on C89 features in a few places; (bso#15281); - named crashes on DLZ zone update; (bso#14030); (bsc#1206996); - Drop libnsl build requirement; (bsc#1208220); ==== sendmail ==== Subpackages: libmilter1_0 - Drop NIS/NISPLUS support for Tumbleweed (boo#1208221) ==== setools ==== Version update (4.4.0 -> 4.4.1) - Update to version 4.4.1: * Replace deprecated NetworkX function use in information flow and domain transition analysis. This function was removed in NetworkX 3.0. * Fix bug in apol copy and cut functions when copying from a tree view. * Fix bug with extended permission set construction when a range includes 0x0. * Add sesearch -Sp option for permission subset match. * Fix error in man page description for sesearch -ep option. * Improve output stability in constraint, common, class, role, and user queries. * Updated permission map. * Fix bug in sechecker parsing of multiline values. * Other code cleanups not visible to users. ==== shadow ==== Subpackages: libsubid4 login_defs - Update shadow-fix-print-login-timeout.patch - Reorder source files and patches - Remove scripts that claim to be config but are in /usr (boo#1191578) * userdel-script.patch * useradd-script.patch * useradd.local * userdel-post.local * userdel-pre.local ==== shotwell ==== - Add cd82759231e5ece2fa0dea40397c9051d15fd5c2.patch: gphoto2: Add missing cheader attributes of delegate symbols. ==== signon-kwallet-extension ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== skanlite ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== smartmontools ==== - Catch another invalid state in %post: DRIVEDB_H_RELEASE_SAVED might end up empty ==== snapper ==== Subpackages: libsnapper6 snapper-zypp-plugin - fix use of does_subvolume_exist() (bsc#1207901) - suppress debug logging in zypp-plugin per default - enable SELinux on Fedora and RHEL (gh#openSUSE/snapper#772) - Use libbtrfsutil implementation for BtrfsUtil::get_subvolume - Add build support for libbtrfsutil - Use libbtrfsutil implementation for the following methods: - check if a subvolume exists - create subvolume, snapshot - subvolume read-only check - delete subvolume - set/get default subvolume - filesystem sync ==== solid ==== Version update (5.102.0 -> 5.103.0) Subpackages: libKF5Solid5 solid-imports solid-tools - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - No code change since 5.102.0 ==== sonnet ==== Version update (5.102.0 -> 5.103.0) Subpackages: libKF5SonnetCore5 libKF5SonnetUi5 sonnet-imports - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - Changes since 5.102.0: * Change underscores to spaces in Esperanto trigrams ==== spectacle ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== sssd ==== Subpackages: libsss_certmap0 libsss_idmap0 libsss_nss_idmap0 sssd-krb5-common sssd-ldap - Move dbus-1 system.d file to /usr (bsc#1207586) ==== step ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== sudo ==== Version update (1.9.12p2 -> 1.9.13) Subpackages: sudo-plugin-python - Update to 1.9.13: * Changes in 1.9.13: Fixed a bug running relative commands via sudo when log_subcmds is enabled. GitHub issue #194. Fixed a signal handling bug when running sudo commands in a shell script. Signals were not being forwarded to the command when the sudo process was not run in its own process group. Fixed a bug in the cvtsudoers LDIF parsing when the file ends without a newline and a backslash is the last character of the file. Fixed a potential use-after-free bug with cvtsudoers filtering. GitHub issue #198. Added a reminder to the default lecture that the password will not echo. This line is only displayed when the pwfeedback option is disabled. GitHub issue #195. Fixed potential memory leaks in error paths. GitHub issue #199. GitHub issue #202. Fixed potential NULL dereferences on memory allocation failure. GitHub issue #204. GitHub issue #211. Sudo now uses C23-style attributes in function prototypes instead of gcc-style attributes if supported. Added a new list pseudo-command in sudoers to allow a user to list another userâs privileges. Previously, only root or a user with the ability to run any command as either root or the target user on the current host could use the -U option. This also includes a fix to the log entry when a user lacks permission to run sudo -U otheruser -l command. Previously, the logs would indicate that the user tried to run the actual command, now the log entry includes the list operation. JSON logging now escapes control characters if they happen to appear in the command or environment. New Albanian translation from translationproject.org. Regular expressions in sudoers or logsrvd.conf may no longer contain consecutive repetition operators. This is implementation- specific behavior according to POSIX, but some implementations will allocate excessive amounts of memory. This mainly affects the fuzzers. Sudo now builds AIX-style shared libraries and dynamic shared objects by default instead of svr4-style. This means that the default sudo plugins are now .a (archive) files that contain a .so shared object file instead of bare .so files. This was done to improve compatibility with the AIX Freeware ecosystem, specifically, the AIX Freeware build of OpenSSL. Sudo will still load svr4-style .so plugins and if a .so file is requested, either via sudo.conf or the sudoers file, and only the .a file is present, sudo will convert the path from plugin.so to plugin.a(plugin.so) when loading it. This ensures compatibility with existing configurations. To restore the old, pre-1.9.13 behavior, run configure using the âwith-aix-soname=svr4 option. Sudo no longer checks the ownership and mode of the plugins that it loads. Plugins are configured via either the sudo.conf or sudoers file which are trusted configuration files. These checks suffered from time-of-check vs. time-of-use race conditions and complicate loading plugins that are not simple paths. Ownership and mode checks are still performed when loading the sudo.conf and sudoers files, which do not suffer from race conditions. The sudo.conf developer_mode setting is no longer used. Control characters in sudo log messages and sudoreplay -l output are now escaped in octal format. Space characters in the command path are also escaped. Command line arguments that contain spaces are surrounded by single quotes and any literal single quote or backslash characters are escaped with a backslash. This makes it possible to distinguish multiple command line arguments from a single argument that contains spaces. Improved support for DragonFly BSD which uses a different struct procinfo than either FreeBSD or 4.4BSD. Fixed a compilation error on Linux arm systems running older kernels that may not define EM_ARM in linux/elf-em.h. GitHub issue #232. Fixed a compilation error when LDFLAGS contains -Wl,âno-undefined. Sudo will now link using -Wl,âno-undefined by default if possible. GitHub issue #234. Fixed a bug executing a command with a very long argument vector when log_subcmds or intercept is enabled on a system where intercept_type is set to trace. GitHub issue #194. When sudo is configured to run a command in a pseudo-terminal but the standard input is not connected to a terminal, the command will now be run as a background process. This works around a problem running sudo commands in the background from a shell script where changing the terminal to raw mode could interfere with the interactive shell that ran the script. GitHub issue #237. A missing include file in sudoers is no longer a fatal error unless the error_recovery plugin argument has been set to false. ==== suse-module-tools ==== Version update (16.0.28 -> 16.0.29) Subpackages: suse-module-tools-scriptlets - Update to version 16.0.29: * modprobe.conf: s390x: remove softdep on fbcon (boo#1207853) ==== syndication ==== Version update (5.102.0 -> 5.103.0) - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - No code change since 5.102.0 ==== syntax-highlighting ==== Version update (5.102.0 -> 5.103.0) Subpackages: libKF5SyntaxHighlighting5 syntax-highlighting-imports - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - Changes since 5.102.0: * Log: fix slow search regex ; add Critical section ; some improvement in Log File (advanced) (kde#464424) * Cobol: add extensions ; add exec sql block ; picture clause more permissive * Cobol: replace tab with 2 spaces * Add Zig language * Add Cabal syntax * Add Log File syntax * avoid copies of Theme and QString in functions that manipulate themes * FormatPrivate now contains a definition name rather than a reference to a definition * add noexcept * Theme::m_data is now always initialized with a valid pointer * optimize ThemeData::textStyleOverride * Replace DefinitionRef in StateData with a definition id * Add COBOL syntax * Indexer: suggest more minimal=1 or other rule for RegExpr with lookhaed=1 and .* * Indexer: check xml validity * feat: Add new syntax for `Earthfile` ==== systemd ==== Version update (252.4 -> 252.5) Subpackages: libsystemd0 libudev1 systemd-container udev - Import commit d87834a33444b7163e741e1089e82b44af663808 (merge of v252.5) For a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/5a506d73bde7ba9261985f8e9ce0840… - Move the bash completion support for systemd-cryptenroll in udev. - systemd-testsuite: move the integration tests in a dedicated sub directory. - machines.target belongs to systemd-container, do its init/cleanup steps from the scriptlets of this sub-package. ==== systemd-presets-branding-MicroOS ==== Version update (20200323 -> 20230214) - Correct spelling of transactional-update-notifier.service in 50-default-MicroOS-user.preset - 20230214 - Introduce 50-default-MicroOS-user.preset to allow Systemd user units for MicroOS users - Add transactional-update-notifier Systemd user unit to default user preset. This will allow MicroOS Desktop users to have Desktop notifications about transactional updates either succeeding or failing. The D-Bus service in use have been audited already (boo#1206163). - 20230130 ==== systemsettings5 ==== Version update (5.26.5 -> 5.27.0) - Update to 5.27.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.0 - Changes since 5.26.90: * sidebar: Use a proper checked state for the menu button (kde#464536) * Make external apps clickable in search results (kde#464491) * Sidebar: Move final trailing separator out of main layout * Remove unused KF5ActivitiesStats dependency - Update to 5.26.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.90 - Too many changes to list here ==== tcl ==== - bsc#1203982, tcl-interp-limit-time.patch: Fix a y2k38 problem in [interp limit -time] . ==== texinfo ==== Version update (7.0.1 -> 7.0.2) Subpackages: info info-lang - texinfo 7.0.2: * texi2any: do not distribute architecture-dependent files * info: further fix of recoding of UTF-8 files to ASCII * install-info: build fixes ==== threadweaver ==== Version update (5.102.0 -> 5.103.0) - Update to 5.103.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.103.0 - No code change since 5.102.0 ==== thunar ==== Subpackages: libthunarx-3-0 thunar-lang - Explicitly require the newer libpcre2 instead of libpcre; this fixes boo#1208260 ==== thunar-plugin-media-tags ==== Version update (0.3.0 -> 0.4.0) Subpackages: thunar-plugin-media-tags-lang - Update to version 0.4.0 * build: Add GLib requirement * build: Fix autotools warnings * Replace libexo with libxfce4util * Replace ExoBinding with GBinding * Fix compilation warnings * Adds new README.md and updates * AM_INIT_AUTOMAKE macro with foreign option * A couple of autotools improvements * Translation Updates ==== tigervnc ==== Version update (1.12.0 -> 1.13.0) Subpackages: libXvnc1 xorg-x11-Xvnc xorg-x11-Xvnc-module - A little cleanup of specfile - Update to tigervnc 1.13.0 * The servers and native viewer now support RealVNC's RSA-AES authentication methods and encryption * The native viewer is now translated to Romanian and Georgian * The native viewer now (optionally) supports PiKVM's H.264 encoding * The display settings for the native viewer have been overhauled to make them easier to understand * The native viewer now supports adding exceptions for expired certificates * Resolved an issue where full-screen mode didn't work in the native viewer on macOS 13 * Lock key synchronization has been re-enabled in the native viewer after being accidentally disabled in 1.11.0 * Xvnc/libvnc.so can now be built with Xorg 1.21 * x0vncserver is a bit better at handling differing server and client keyboard layout * x0vncserver now correctly handles zaphod mode - Removed patches (no longer needed): * tigervnc-newfbsize.patch (https://github.com/TigerVNC/tigervnc/pull/13) * n_utilize-system-crypto-policies.patch (https://github.com/TigerVNC/tigervnc/pull/1262) * xserver211.patch & u_tigervnc-211.patch (https://github.com/TigerVNC/tigervnc/pull/1383) - Refreshed patches: * n_tigervnc-date-time.patch * n_vncserver.patch * u_change-button-layout-in-ServerDialog.patch ==== tpm2-0-tss ==== Version update (3.2.0 -> 4.0.1) Subpackages: libtss2-esys0 libtss2-mu0 libtss2-rc0 libtss2-sys1 libtss2-tctildr0 - Drop 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch as was already merged upstream - Update to 4.0.1 + Fixed: * A buffer overflow in tss2-rc as CVE-2023-22745. - Update to 4.0.0 + Fixed: * tcti-ldr: Use heap instead of stack when tcti initialize * Fix usage of NULL pointer if Esys_TR_SetAuth is calles with ESYS_TR_NONE. * Conditionally check user/group manipulation commands. * Store VERSION into the release tarball. * When using DESTDIR for make einstall, do not invoke systemd-sysusers and systemd-tmpfiles. * esys_iutil: fix possible NPD. * Tss2_Sys_Flushcontext: flushHandle was encoded as a handleArea handle and not as parameter one, this affected the contents of cpHash. * esys: fix allow usage of HMAC sessions for Esys_TR_FromTPMPublic. * fapi: fix usage of policy_nv with a TPM nv index. * linking tcti for libtpms against tss2-tctildr. It should be linked against tss2-mu. * build: Remove erroneous trailing comma in linker option. Bug [#2391]. * fapi: fix encoding of complex tpm2bs in authorize nv, duplication select and policy template policies. Now the complex and TPMT or TPMS representations can be used. Bug #2383 * The error message for unsupported FAPI curves was in hex without a leading 0x, make it integer output to clarify. * Documentation that had various scalar out pointers as "callee allocated". * test: build with opaque FILE structure like in musl libc. * Transient endorsement keys were not recreated according to the EK credential profile. * Evict control for a persistent EK failed during provisioning if an auth value for the storage hierarchy was set. * The authorization of the storage hierarchy is now added. Fixes FAPI: Provisioning error if an auth value is needed for the storage hierarchy #2438. * Usage of a second profile in a path was not possible because the default profile was always used. * The setting of an empty auth value for Fapi_Provision was fixed. * JSON encoding of a structure TPMS_POLICYAUTHORIZATION used the field keyPEMhashAlg instead of hashAlg as defined in "TCG TSS 2.0 JSON Data Types and Policy Language Specification". Rename to hashAlg but preserve support for reading keyPEMhashAlg for backwards compatibility. * fapi: PolicySecret did not work with keys as secret object. * Esys_PCR_SetAuthValue: remembers the auth like other SetAutg ESAPI functions. * tests: esys-pcr-auth-value.int moved to destructive tests. * FAPI: Fix double free if keystore is corrupted. * Marshaling of TPMU_CAPABILITIES data, only field intelPttProperty was broken before.a * Spec deviation in Fapi_GetDescription caused description to be NULL when it should be empty string. This is API breaking but considered a bug since it deviated from the FAPI spec. * FAPI: undefined reference to curl_url_strerror when using curl less than 7.80.0. * FAPI: Fixed support for EK templates in NV inidices per the spec, see #2518 for details. * FAPI: fix NPD in ifapi_curl logging. * FAPI: Improve documentation fapi-profile * FAPI: Fix CURL HTTP handling. * FAPI: Return FAPI_RC_IO_ERROR if a policy does not exist in keystore. + Added: * TPM version 1.59 support. * ci: ubuntu-22.04 added. * mbedTLS 3.0 is supported by ESAPI. * Add CreationHash to JSON output for usage between applications not using the FAPI keystore, like command line tools. * Reduced code size for SAPI. * Support for Runtime Switchable ESAPI Crypto Backend via Esys_SetCryptoCallbacks. * Testing for TCG EK Credential Profile TPM 2.0, Version 2.4 Rev. 3, 2021 for the low and high address range of EK templates. * tss2-rc: Tss2_RC_DecodeInfo function for parsing TSS2_RC into the various bit fields. * FAPI support for P_ECC384 profile. * tss2-rc: Tss2_RC_DecodeInfoError: Function to get a human readable error from a TSS2_RC_INFO returned by Tss2_RC_DecodeInfo * tcti: Generic SPI driver, implementors only need to connect to acquire/release, transmit/receive, and sleep/timeout functions. * FAPI: Add event logging for Firmware and IMA Events. See #2170 for details. * FAPI: Fix Fapi_ChangeAuth updates on hierarchy objects not being reflected across profiles. * FAPI: Allow keyedhash keys in PolicySigned. * ESAPI: Support sha512 for mbedtls crypto backend. * TPM2B_MAX_CAP_BUFFER and mu routines * vendor field to TPMU_CAPABILTIIES * FAPI: support for PolicyTemplate + Changed * libmu soname from 0:0:0 to 0:1:0. * tss2-sys soname from 1:0:0 to 1:1:0 * tss2-esys: from 0:0:0 to 0:1:0 ... changelog too long, skipping 6 lines ... * Dead code Tss2_MU_TPMS_ALGORITHM_DESCRIPTION_Unmarshal ==== transactional-update ==== Version update (4.1.2 -> 4.1.3) Subpackages: dracut-transactional-update libtukit4 transactional-update-zypp-config tukit tukitd - Version 4.1.3 - Suppress SELinux relabelling output in quiet mode - Documentation readability improvements ==== transmission ==== Subpackages: transmission-common transmission-gtk - Apply downstream patch from Gentoo to fix a crash with openSSL 3 (boo#1207914): * transmission-3.00-openssl-3.patch ==== tree ==== Version update (2.0.4 -> 2.1.0) - tree 2.1.0: * Add support for --info and --gitignore for the --fromfile option. (Suggested by Piotr Andruszkow) * Add options --infofile and --gitfile to load .info and .gitignore files explicitly. Each implies --info or --gitignore respectively. * Add NULL guard for json_printinfo() and xml_printinfo() (and fix ftype printing for XML) (Kenta Arai) * Fix getcharset() to not return a getenv() pointer (fix for ENV34-C issue.) (Kenta Arai) * Another attempt at fixing extraneous /'s in HTML URLs/output. (Sebastian Rose) * Fixed XML output (Dave Rice) * Remove the (very outdated) French version of the manpage. Look to localization projects such as Debian's 'manpages-l10n' for localized translations. (hmartink) * Add support for the NO_COLOR environment variable (https://no-color.org/). Equivalent to the -n option (can be still be overridden with -C). (Timm Fitschen) * Removed many C99isms to enable compiling on C90 compilers with fewer warnings. (Sith Wijesinghe and Matthew Sessions) It should not be necessary to avoid using a standard that is old enough to drink, furthermore it is all but impossible to remove the remaining warnings and have modern features like compound literals. In the meantime I've added - std=c11 to the default CFLAGS for Linux and will likely not worry about C90 compatibility going forward unless there is some other reason for it. * Added a helper function for long command line arguments to clean up option processing (and fixes the processing for a few of the options such as - -timefmt= (Ð½Ð°Ð±?).) * Added --hintro and --houtro options to select files to use as the HTML intro and outro. Use /dev/null or an empty file to eliminate them entirely. This should make it much easier to create your own custom CSS or embed one or more trees into a web page. * Defer printing the version until the character set is known so we can use the linedraw copyright symbol. * Revert change to the error code to not return an error (code 2) when attempting to list a non-directory that actually exists. Tree will still return an error when attempting to list a non-existing directory/file. * Added option --fflinks which will process symbolic link information from a file generated with 'tree -if --noreport' when using --fromfile. (Suggested by Chentao Credungtao) * Updated the totals reporting code to also include in the total the file or directory that is being listed. This should make a correct report when doing something like 'tree *'. ==== umbrello ==== Version update (22.12.1 -> 22.12.2) - Update to 22.12.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.2/ ==== util-linux ==== Subpackages: libblkid1 libfdisk1 libmount1 libsmartcols1 libuuid1 - Remove requires for adjtimex, which and time: this where wrongly implemented split provides we don't need anymore. - Remove pam_lastlog, not Y2038 safe, will be removed upstream. Additional tools update the files themself. - Readd hwclock.8 manual page. - Move permissions pre-require to correct package. - Remove install_info_prereq, we have no info pages. - clean up spec file, tag all the %if-endif to make it easy to read the file and try to simplify a bit the if-endif logic grouping by core, systemd and python. ==== util-linux-systemd ==== - Remove requires for adjtimex, which and time: this where wrongly implemented split provides we don't need anymore. - Remove pam_lastlog, not Y2038 safe, will be removed upstream. Additional tools update the files themself. - Readd hwclock.8 manual page. - Move permissions pre-require to correct package. - Remove install_info_prereq, we have no info pages. - clean up spec file, tag all the %if-endif to make it easy to read the file and try to simplify a bit the if-endif logic grouping by core, systemd and python. ==== vim ==== Version update (9.0.1234 -> 9.0.1307) Subpackages: vim-data vim-data-common - Add patch vim-fix-sh-syntax.patch which fixes broken sh syntax. - Updated to version 9.0.1307, fixes the following problems * Crash when using search stat in narrow screen. * Using sizeof() and subtract array size is tricky. * Typo in pattern for filetype detection. * "1v" may select block with wrong size. (Evgeni Chasnovski) * FIRRTL files are not recognized. * The code for setting options is too complicated. * Some mappings with Meta and Shift do not work. * Cursor may move with autocmd in Visual mode. * go.work.sum files are not recognized. * Display shows lines scrolled down erroneously. (Yishai Lerner) * Inssufficient testing for what 9.0.1265 fixes. * Cadence files are not recognized. * Ron files are not recognized. * The code for setting options is too complicated. * Compiler warnings for uninitialized variables. (Tony Mechelynck) * Various small problems. * Coverity warns for using a NULL pointer. * With the Kitty key protocl Esc with NumLock cannot be mapped. * FunC files are not recognized. * A newer version of clang can be used for CI. * CTRL-N and -P on cmdline don't trigger CmdlineChanged. * Move language files are not recognized. * :defer may call the wrong method for an object. (Ernie Rael) * The set_num_option() is too long. * The set_bool_option() function is too long. * The option initialization function is too long. * Calling an object method with arguments does not work. (Ernie Rael) * Wrong value for $LC_CTYPE makes the environ test fail. * Inserting a register on the command line does not trigger incsearch or update hlsearch. * Change for triggering incsearch not sufficiently tested. * 'statusline' only supports one "%=" item. * Virtual text below empty line not displayed. * On a Belgian keyboard CTRL-] does not work. * Motif: scrollbar width/height wrong when maximized. * "$" for 'list' option displayed in wrong position when there are text properties. * Cursor in wrong line with virtual text above. * No regression test for solved problem of #11959. * Setting 'formatoptions' with :let doesn't check for errors. - Updated to version 9.0.1270, fixes the following problems * The code style has to be checked manually. * MS-Windows console: not flushing termguicolors. * Code in same_leader() can be simplified. * Code is indented more than necessary. * :runtime completion can be further improved. * Cannot have a line break before an object member access. * Cannot access a private object member in a lambda defined inside the class. * Coverity warns for not checking function return value. * Code for :runtime completion is not consistent. * :setglobal cannot use script-local function for "expr" option. * Cursor briefly displayed in a wrong position when pressing Esc in Insert mode after autoindent was used. * Code is indented more than necessary. * Code is indented more than necessary. * Divide by zero with 'smoothscroll' set and a narrow window. * Cannot export an interface. (Ernie Rael) * Cannot export an abstract class. (Ernie Rael) * Cannot use an object method with :defer. (Ernie Rael) * Checking returned value of ga_grow() is inconsistent. * MS-Windows: scrollback cropped off on Vim exit. * Calling a method on an interface does not work. * Changing 'virtualedit' does not have immediate effect. * NetworkManager connection files are not recognized. * Code style is not check in test scripts. * Code style test fails. * Diffmode test fails. * Coverity warns for possible NULL pointer usage. * Elsa files are not recognized. * The did_set_string_option function is too long. * KDL files are not recognized. * Motif: compiler warning for unused argument. * Using an interface method may give a compilation error. * Error for space before ": type" is inconsistent. * The did_set_string_option function is too long. * .clangd and .stylelintrc files don't get a filetype. ==== vte ==== Version update (0.70.2 -> 0.70.3) Subpackages: libvte-2_91-0 typelib-1_0-Vte-2_91 - Update to version 0.70.3: + widget: - Ensure the ringview is updated before converting coordinates - gtk4: Translate control+key events when using multiple layouts - Use correct end row for getting the selected text - Drop ddb2c8a.patch: Fixed upstream. ==== vulkan-loader ==== Version update (1.3.236.0 -> 1.3.239.0) - Update to release SDK-1.3.239.0 * layers: update documentation to make it clear the VK_LAYER_PATH supports both explicit directories and files * layers: modify TestLayerDetails so either files or directories can be set on VK_LAYER_PATH env var ==== vulkan-tools ==== Version update (1.3.236.0 -> 1.3.239.0) - Add baselibs.conf. This is useful as 64- and 32-bit vulkan environments need separate drivers and need to be diagnosed separately. - Update to release SDK-1.3.239.0 * No end-user visible changes ==== webkit2gtk3 ==== Version update (2.38.3 -> 2.38.5) Subpackages: libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles - Update to version 2.38.5 (boo#1208328): + Fix large memory allocation when uploading content. + Fix scrolling after a history navigation with PSON enabled. + Always update the active uri of WebKitFrame. + Fix the build on Ubuntu 20.04. + Fix several crashes and rendering issues. + Security fixes: CVE-2023-23529. - Update to version 2.38.4 (boo#1207997): + Improve GStreamer multimedia playback across the board with improved codec selection logic, better handling of latency, and improving frame discard to avoid audio/video desynchronizationg, among other fixes. + Disable HLS media playback by default, which makes web sites use MSE instead. If needed WEBKIT_GST_ENABLE_HLS_SUPPORT=1 can be set in the environment to enable it back. + Disable threaded rendering in GTK4 builds by default, as it was causing crashes. + Fix MediaSession API not showing artwork images. + Fix MediaSession MPRIS usage when running inside a Flatpak sandbox. + Fix input element controls to correctly scale when applying a zoom factor different than the default. + Fix leakage of Web processes in certain situations. + Fix the injected bundle not being found when running inside a sandbox. + Fix the build with ENABLE_INTROSPECTION when cross-compiling. + FIx the build with ENABLE_WEBGL disabled. + Fix the build with GStreamer-based WebRTC enabled. + Fix the build with USE_GTK4 enabled. + Fix several crashes and rendering issues. + Security fixes: CVE-2023-23517, CVE-2023-23518, CVE-2022-42826. ==== webkit2gtk3-soup2 ==== Version update (2.38.3 -> 2.38.5) Subpackages: libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 webkit2gtk-4_0-injected-bundles - Update to version 2.38.5 (boo#1208328): + Fix large memory allocation when uploading content. + Fix scrolling after a history navigation with PSON enabled. + Always update the active uri of WebKitFrame. + Fix the build on Ubuntu 20.04. + Fix several crashes and rendering issues. + Security fixes: CVE-2023-23529. - Update to version 2.38.4 (boo#1207997): + Improve GStreamer multimedia playback across the board with improved codec selection logic, better handling of latency, and improving frame discard to avoid audio/video desynchronizationg, among other fixes. + Disable HLS media playback by default, which makes web sites use MSE instead. If needed WEBKIT_GST_ENABLE_HLS_SUPPORT=1 can be set in the environment to enable it back. + Disable threaded rendering in GTK4 builds by default, as it was causing crashes. + Fix MediaSession API not showing artwork images. + Fix MediaSession MPRIS usage when running inside a Flatpak sandbox. + Fix input element controls to correctly scale when applying a zoom factor different than the default. + Fix leakage of Web processes in certain situations. + Fix the injected bundle not being found when running inside a sandbox. + Fix the build with ENABLE_INTROSPECTION when cross-compiling. + FIx the build with ENABLE_WEBGL disabled. + Fix the build with GStreamer-based WebRTC enabled. + Fix the build with USE_GTK4 enabled. + Fix several crashes and rendering issues. + Security fixes: CVE-2023-23517, CVE-2023-23518, CVE-2022-42826. ==== wicked ==== Subpackages: wicked-service - bond: workaround 6.1 kernel enslave regression (boo#1206674) The kernel bond enslave rtnetlink message processing changed breaking an `ip link set down master bond0 dev eth0` like enslave which worked with all kernels from 4.12 up to 6.0. [+ 0001-bond-workaround-6.1-enslave-regression-boo-1206674.patch] ==== xdg-desktop-portal-kde ==== Version update (5.26.5 -> 5.27.0) - Update to 5.27.0 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.0 - Changes since 5.26.90: * fix streams not being ended correctly (kde#465302) * Fix segfault crash: capture QStringList variable by value * notifications: Do not crash as notifications get removed (kde#464549) * Fix condition for cmake feature - Update to 5.26.90 * New feature release * For more details please see: * https://kde.org/announcements/plasma/5/5.26.90 - Too many changes to list here ==== xdg-user-dirs ==== - Add patch to provide a systemd user service (gh#systemd/systemd#18791, boo#1201728): * 0001-Add-a-systemd-service-to-run-xdg-user-dirs-update.patch ==== xen ==== Subpackages: xen-libs xen-tools-domU - bsc#1208286 - VUL-0: CVE-2022-27672: xen: Cross-Thread Return Address Predictions (XSA-426) 63ebca9c-x86-spec-ctrl-Mitigate-Cross-Thread-Return-Address-Predictions.patch - bsc#1205792 - Partner-L3: launch-xenstore error messages show in SLES15 SP4 xen kernel. 63e4da00-dont-log-errors-when-trying-to-load-PVH-xenstore-stubdom.patch - bsc#1026236 - tidy/modernize patch xen.bug1026236.suse_vtsc_tolerance.patch - Upstream bug fixes (bsc#1027519) 63c05478-VMX-calculate-model-specific-LBRs-once.patch 63c05478-VMX-support-CPUs-without-model-specific-LBR.patch - bsc#1207544 - VUL-0: CVE-2022-42330: xen: Guests can cause Xenstore crash via soft reset (XSA-425) xsa425.patch -> 63d24e91-tools-xenstore-revert-simplify-loop-handling.patch ==== xfce4-notifyd ==== Version update (0.7.2 -> 0.8.0) Subpackages: xfce4-notifyd-lang - Update to 0.8.0: * Notification windows don't need to be override-redirect * Reposition notifications when workarea changes * Add setting to allow ignoring app-specified expire timeout * Add setting to never expire notifications * Update log viewer in settings when log changes on disk * Fix one more unnecessary full count of unread messages * Update log entry icons when marking all read * Remove unused var * Use new unread emblem for icons in log * Stop checking if there are unread notifications as often * Improve the panel icon when there are unread notifications * Make the log max size a little friendlier * Remove warning about high log size limit * Add ability to mark individual log entries read * Add emblem to icon of unread messages in log * Make migrating the old log file more robust * Remove bool returns from the log write functions * Improve unread handling * Make max-log-size option work again * Add missing finalize for 'delete all' sqlite statement * Implement progressive loading for log viewer * Move log viewer to its own widget/file * Add options for what to do when opening the plugin menu * Add option to only show unread notifications in plugin menu * Reduce some error-checking boilerplate * Glade-ify the plugin settings dialog * Queue writes to sqlite database * settings: don't bail if libnotify init fails * Fix deprecated unitless font-size in ZOMG-PONIES! theme * Rearrange settings dialog * Add ability to delete individual log entries * Update my copyright & email * Add timestamp formatting options * Clean up extraneous things in settings glade file * Add "Mark All Read" button to settings and panel plugin * Move notification log to sqlite * Set default debug based on git/not-git * Remove configure.ac from gitignore * Eliminate need for pre-processed configure.ac.in * Translation Updates - Update to 0.7.3: * Add timestamp to log entries in settings and plugin menu * Update description text of apps panel in settings * Change text of option to "Allow urgent notifications" * Add panel plugin setting for log icon size in menu * Make it easier to add things to the panel plugin settings * Fix possible segfault when counting apps frequency in log * Clean and DRY up the log population code * Fix panel plugin menu icon blurriness when UI scale > 1 * Update XfceNotifyDaemon header comment * Translation Updates ==== xfce4-panel ==== Version update (4.18.1 -> 4.18.2) Subpackages: libxfce4panel-2_0-4 xfce4-panel-lang xfce4-panel-restore-defaults - Ensure statusnotifier plugin is fully usable with appindicators - Update to version 4.18.2 * directorymenu: Add missing sanity check * panel: Properly handle null string as property default value * Revert "Use RGBA visual only if compositing is enabled (Fixes gxo#xfce/xfce4-panel#251)" (gxo#xfce/xfce4-panel#672) * Revert "systray: Do not require compositing to be enabled to use RGBA visual" * systray: Fix blurry icons in prefs dialog when UI scale > 1 * launcher: Fix blurry icons in prefs and add dialogs when UI scale > 1 * launcher: Use GIcon for the tooltip icon (gxo#xfce/xfce4-panel#674) * pager: Use WnckHandle if available (gxo#xfce/xfce4-panel#695) * Translation Updates ==== xfce4-power-manager ==== Version update (4.18.0 -> 4.18.1) Subpackages: xfce4-power-manager-lang xfce4-power-manager-plugin - Update to version 4.18.1 * Update copyright year * Use XfceScreensaver from Libxfce4ui (!33) * screensaver: Fall back on lock command if D-Bus call failed (#142, !24) * panel-plugin: Properly disconnect signal handler * build: Fix autotools warnings * Fix management of source ids * panel-plugin: Add missing ref on image * Fix blurriness in icons when UI scale factor > 1 (!30) * Translation Updates ==== xfce4-session ==== Version update (4.18.0 -> 4.18.1) Subpackages: xfce4-session-lang - Update to version 4.18.1 * Update copyright year * Fix bus name acquisition/ownership (#54, !34) * Use XfceScreensaver from Libxfce4ui (!35) * build: Fix previous commit * build: Fix autotools warnings * Avoid duplicating directories in the tail of $XDG_* envs (#111, !21) * settings: Fix memory leak * libxfsm: Fix wrong return value * Fix memory leaks when opening xfce4-session-settings * Fix blurry session snapshots (!33) * Fix blurry icons in autostart tab when UI scale > 1 (!33) * build: Fix GTK deprecation warnings (!32) * build: Fix some other GDK deprecation warnings (!32) * build: Fix gdk_error_trap_push/pop() deprecation warnings (!32) * build: Let xdt-depends.m4 macros set GLib macros (!32) * build: Remove GDK_VERSION_MIN_REQUIRED/MAX_ALLOWED (!32) * Make use of translations for run hooks (Fixes #156) * Translation Updates - Regenerate xfce4-session-adapt-session-scripts-git.patch and xfce4-session-adapt-session-scripts.patch - Remove two stray comments about add-light-locker-support patches ==== xfce4-settings ==== Version update (4.18.1 -> 4.18.2) Subpackages: xfce4-settings-color xfce4-settings-lang - Update to version 4.18.2 * Update copyright year * mime-settings: Increase dialog size (!96) * display: fix blurry 'help' indicator on output (#400, !95) * display: fix blurry icon in profiles treeview * display: fix blurry icons in minimal display settings dialog * mime: fix blurry icons in default app menus * mouse: fix blurriness in cursor theme previews * appearance: fix blurry subpixel antialias icons * appearance: fix blurry icon theme previews * xfsettingsd: Make xsettings.xml well-formed (Fixes #431, !94) * xfsettingsd: Remove duplicated config line (Fixes #425) * Translation Updates ==== xkeyboard-config ==== Version update (2.37 -> 2.38) - Update to version 2.38 * Add Russian layout with typographic symbols * Update symbols/ru * symbols/us: uncomment the nine keys in the international Dvorak layout * symbols/bg: reduce the "enhanced" layout to an include + three overrides * symbols/epo: reshuffle a comment, and drop unneeded key types * replace some Unicode codes with their corresponding symbol name * symbols/no: add missing symbols to Sami layout, and remove duplicates * symbols/no: add non-dead grave and such to Sami layout, and reshuffle * Add apple:jp_oadg109a and apple:jp_pc106 variants * Added Gujarati KaGaPa layout (guj-kagapa) * Update base.xml * rules: add option 'swap_ralt_rctl' * prerelease push, for translations * Handy script for publishing * Making ru(typo) more consistent with existing variants * Prerelease translation sync * fix rx-51 third level modifier * Add Latvia Modern Cyrillic keyboard layout * add colemak_dh_ortho * Add `trademark` to level4 of us-intl layout * dv-intl: add placeholder chars to lvl3+, bind LSGT ==== xorg-x11-server ==== Version update (21.1.6 -> 21.1.7) Subpackages: xorg-x11-server-Xvfb xorg-x11-server-extra - Update to version xorg-server-21.1.7: * This release contains the fix for CVE-2023-0494 in today's security advisory: https://lists.x.org/archives/xorg-announce/2023-February/003320.html It also fixes a second possible OOB access during EnqueueEvent and a crasher caused by ResourceClientBits not correctly honouring the MaxClients value in the configuration file. - supersedes U_Xi-fix-potential-use-after-free-in-DeepCopyPointerCl.patch, U_xorg-server-oob-read-enqueue-event.patch - U_Xi-fix-potential-use-after-free-in-DeepCopyPointerCl.patch * DeepCopyPointerClasses use-after-free (CVE-2023-0494, ZDI-CAN-19596, bsc#1207783) ==== xterm ==== Version update (377 -> 378) Subpackages: xterm-bin xterm-resize - update to 378: * improve descriptions of XTQMODKEYS and XTQALLOWED features in ctlseqs.ms (reports by Bram Moolenaar, Thomas Wolff). * add bracketed+paste and report+version building blocks to terminfo, from ncurses 6.4 * improve check for unsupported formatting characters, e.g., zero-width space, to properly ignore them (report by Thomas Wolff). * improve/document error-checking for some of the controls which return responses: DECRQSS, XTGETXRES, XTSETTCAP, XTGETTCAP (prompted by discussion with David Leadbeater). * improve limit-checks for fallback font cache (report by Dimitrije Erdeljan). * improve check for too-wide glyph in fallback font by allowing xterm to continue searching for a suitable font rather than just failing on the first. Also add limitFontWidth to allow changing the amount by which a glyph must extend outside the font's bounding box to disallow it. ==== xwayland ==== Version update (22.1.7 -> 22.1.8) - Update to version 22.1.8 * This release contains the fix for CVE-2023-0494 in today's security advisory: https://lists.x.org/archives/xorg-announce/2023-February/003320.html * It also fixes a second possible OOB access during EnqueueEvent. - supersedes U_Xi-fix-potential-use-after-free-in-DeepCopyPointerCl.patch - improved summary and description - added requires to xkeyboard-config - added recommends to xorg-x11-fonts-core - removed unused 'package' section - U_Xi-fix-potential-use-after-free-in-DeepCopyPointerCl.patch * DeepCopyPointerClasses use-after-free (CVE-2023-0494, ZDI-CAN-19596, bsc#1207783) ==== yast2 ==== Version update (4.5.22 -> 4.5.24) Subpackages: yast2-logs - Allow dir:///foo to equal dir:/foo (bsc#1207239) - 4.5.24 - DnsServerApi: drop module. It should never be in yast2 as it import module from yast2-dns-server. And now dns-server is going to be dropped (bsc#1205363) - 4.5.23 ==== yast2-bootloader ==== Version update (4.5.7 -> 4.5.8) - make secure boot for ppc64 consistent with how secure boot works on other architectures (bsc#1206295) - 4.5.8 ==== yast2-iscsi-client ==== Version update (4.5.6 -> 4.5.7) - Expose all core functionality from IscsiClientLib, with options to suppress usage of pop-ups (related t gh#yast/d-installer#402). - Finish client: copy the content of both /etc/iscsi and /var/lib/iscsi (bsc#1207374). - Finish client: never enable both the iscsid socket and the service (partial fix for bsc#1207839). - 4.5.7 ==== yast2-network ==== Version update (4.5.15 -> 4.5.16) - Fix calling method read on nil crash in bootloader caused by not restoring SCR chroot in save_network client when running in autoyast (bsc#1207968) - 4.5.16 ==== yast2-packager ==== Version update (4.5.13 -> 4.5.15) - Ruby 3.2: Change a test to treat dir:///foo equal to dir:/foo (bsc#1207239) - 4.5.15 - Prevent crash if nil dependencies instead of [] (bsc#1208068) - 4.5.14 ==== yast2-samba-client ==== Version update (4.5.2 -> 4.5.3) - Add join option for enabling group policy; (bsc#1207604). - 4.5.3 ==== yast2-schema-default ==== Version update (4.5.7 -> 4.5.9) - drop yast2-dhcp-server and yast2-http-server schema from TW as it also depends on yast2-dns-server (bsc#1205363) - 4.5.9 - drop yast2-dns-server schema from TW (bsc#1205363) - 4.5.8 ==== yast2-trans ==== Version update (84.87.20230130.b344a57eef -> 84.87.20230211.83e08d8766) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20230211.83e08d8766: * Translated using Weblate (Georgian) * Translated using Weblate (Georgian) * Translated using Weblate (Georgian) * Translated using Weblate (Georgian) * New POT for text domain 'iscsi-client'. * New POT for text domain 'control'. * New POT for text domain 'base'. * Translated using Weblate (French) * Translated using Weblate (French) * Translated using Weblate (French) * Translated using Weblate (French) * Translated using Weblate (French) * Translated using Weblate (French) * Translated using Weblate (French) * Translated using Weblate (French) * Translated using Weblate (French) * Translated using Weblate (French) * Translated using Weblate (French) * Translated using Weblate (French) * Translated using Weblate (French) * Translated using Weblate (French) * Translated using Weblate (French) * Translated using Weblate (French) * Translated using Weblate (French) * Translated using Weblate (French) * Translated using Weblate (French) * Translated using Weblate (Spanish) * Translated using Weblate (Spanish) * Translated using Weblate (Spanish) * Translated using Weblate (Spanish) * Translated using Weblate (Spanish) * Translated using Weblate (Spanish) * Translated using Weblate (Spanish) * Translated using Weblate (Spanish) * Translated using Weblate (Spanish) * Translated using Weblate (Spanish) * Translated using Weblate (Spanish) * Translated using Weblate (Spanish) * Translated using Weblate (Spanish) * Translated using Weblate (Spanish) * Translated using Weblate (Spanish) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (French) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Chinese (Taiwan) (zh_TW)) * Translated using Weblate (Chinese (Taiwan) (zh_TW)) * Translated using Weblate (Chinese (Taiwan) (zh_TW)) * Translated using Weblate (Chinese (Taiwan) (zh_TW)) * Translated using Weblate (Chinese (Taiwan) (zh_TW)) * Translated using Weblate (Chinese (China) (zh_CN)) * Translated using Weblate (Chinese (Taiwan) (zh_TW)) * Translated using Weblate (Chinese (Taiwan) (zh_TW)) * Translated using Weblate (Chinese (Taiwan) (zh_TW)) * Translated using Weblate (Chinese (Taiwan) (zh_TW)) * Translated using Weblate (Chinese (Taiwan) (zh_TW)) * Translated using Weblate (Chinese (Taiwan) (zh_TW)) * Translated using Weblate (Chinese (Taiwan) (zh_TW)) * Translated using Weblate (Chinese (Taiwan) (zh_TW)) * Translated using Weblate (Chinese (Taiwan) (zh_TW)) * Translated using Weblate (Chinese (Taiwan) (zh_TW)) * Translated using Weblate (Chinese (Taiwan) (zh_TW)) * Translated using Weblate (Chinese (Taiwan) (zh_TW)) * Translated using Weblate (Chinese (Taiwan) (zh_TW)) * Translated using Weblate (Chinese (Taiwan) (zh_TW)) * Translated using Weblate (Chinese (Taiwan) (zh_TW)) * Translated using Weblate (Chinese (Taiwan) (zh_TW)) * Translated using Weblate (Chinese (Taiwan) (zh_TW)) * Translated using Weblate (Chinese (Taiwan) (zh_TW)) * Translated using Weblate (Chinese (China) (zh_CN)) * Translated using Weblate (Chinese (China) (zh_CN)) * Translated using Weblate (Chinese (China) (zh_CN)) * Translated using Weblate (Chinese (China) (zh_CN)) * Translated using Weblate (Chinese (China) (zh_CN)) * Translated using Weblate (Chinese (China) (zh_CN)) * Translated using Weblate (Chinese (China) (zh_CN)) * Translated using Weblate (Chinese (China) (zh_CN)) * Translated using Weblate (Chinese (China) (zh_CN)) * Translated using Weblate (Chinese (China) (zh_CN)) * Translated using Weblate (Chinese (China) (zh_CN)) * Translated using Weblate (Chinese (China) (zh_CN)) * Translated using Weblate (Chinese (China) (zh_CN)) * Translated using Weblate (Chinese (China) (zh_CN)) * Translated using Weblate (Chinese (China) (zh_CN)) * Translated using Weblate (Chinese (China) (zh_CN)) * Translated using Weblate (Chinese (China) (zh_CN)) * Translated using Weblate (Chinese (China) (zh_CN)) * New POT for text domain 'control'. * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Italian) ... changelog too long, skipping 51 lines ... * Translated using Weblate (Georgian) ==== zenity ==== Version update (3.43.0 -> 3.44.0) - Update to version 3.44.0: + scale: set a page increment so mouse wheel can be used on widget. + build: - Use GNOME module post_install(). - Replace deprecated functions. + docs: Fix incorrect markup. + Updated translations. ==== zsh ==== - Replace transitional %usrmerged macro with regular version check (boo#1206798)

1 0