openSUSE ARM
Threads by month
- ----- 2024 -----
- April
- March
- February
- January
- ----- 2023 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2022 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2021 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2020 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2019 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2018 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2017 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2016 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2015 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2014 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2013 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2012 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2011 -----
- December
- November
- October
- September
- August
- July
- June
- May
October 2021
- 5 participants
- 9 discussions
Hello!,
I would like to replace the stock firmware of some thinclients (Dell Wyse
3010 & 3020) with opensuse Leap. Is there any experience dealing with these
machines?
As generic Linux notes, found some for the 3020 (ARMADA PXA 2128) but
nothing on the 3010 (Marvell ARMADA PXA 510 v7):
https://linux-mmp.docs.kernel.org/dell-wyse-3020.html
Regards,
CI.-
3
7
Please note that this mail was generated by a script.
The described changes are computed based on the aarch64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=3&versio…
Please do not reply to this email to report issues, rather file a bug
on bugzilla.opensuse.org. For more information on filing bugs please
see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
AppStream (0.14.4 -> 0.14.6)
MozillaThunderbird (91.1.2 -> 91.2.1)
apache2-mod_php7 (7.4.24 -> 7.4.25)
bluez-tools (0.1.38+git20190428 -> 0.1.38+git.20201024T225355.f653217)
freerdp (2.4.0 -> 2.4.1)
grub2
gstreamer-devtools
kernel-64kb (5.14.11 -> 5.14.14)
kernel-source (5.14.11 -> 5.14.14)
libguestfs
libyui (4.2.19 -> 4.2.20)
libyui-ncurses (4.2.19 -> 4.2.20)
libyui-ncurses-pkg (4.2.19 -> 4.2.20)
libyui-qt (4.2.19 -> 4.2.20)
libyui-qt-graph (4.2.19 -> 4.2.20)
libyui-qt-pkg (4.2.19 -> 4.2.20)
logrotate
mpg123 (1.29.1 -> 1.29.2)
ncurses (6.2.20211002 -> 6.3.20211021)
ocfs2-tools
parted
pcre2 (10.37 -> 10.38)
perl-Mojolicious (9.21 -> 9.22)
php7 (7.4.24 -> 7.4.25)
plasma5-openSUSE
polkit
postfix
privoxy
python
python-Babel
python-Mako (1.1.4 -> 1.1.5)
python-base
python-cryptography (3.3.2 -> 3.4.8)
python-numpy
python-pandas (1.3.3 -> 1.3.4)
python-rpm (4.16.1.3 -> 4.17.0)
python38
python38-core
python38-documentation
qca-qt5
rpm (4.16.1.3 -> 4.17.0)
rpm-config-SUSE (0.g83 -> 0.g89)
rsyslog (8.2108.0 -> 8.2110.0)
suse-module-tools (16.0.11 -> 16.0.13)
systemd-rpm-macros
tigervnc
transactional-update (3.5.6 -> 3.6.0)
u-boot-rpiarm64
virt-manager
yast2-country (4.4.6 -> 4.4.7)
=== Details ===
==== AppStream ====
Version update (0.14.4 -> 0.14.6)
Subpackages: libAppStreamQt2 libappstream4
- Update to 0.14.6. Check the NEWS file for the list of changes.
- Only install the license files once.
==== MozillaThunderbird ====
Version update (91.1.2 -> 91.2.1)
- Mozilla Thunderbird 91.2.1
* Preference added to disable automatic pausing RSS feed updates
after a fetch failure
* several bugfixes as outlined in release notes
https://www.thunderbird.net/en-US/thunderbird/91.2.1/releasenotes/
- Increase memory required per threads for aarch64 to avoid OOM
- Enable LTO on Tumbleweed.
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
fix some env variables which are enabled for any value
- Mozilla Thunderbird 91.2.0
* Saving a single message as .eml now uses a unique filename
* New mail notifications did not properly take subfolders into account
* Decrypting binary attachments when using an external GnuPG
configuration failed
* Account name fields in the account manager were not big enough
for long names
* LDAP searches using an extensibleMatch filter returned no results
* Read-only CalDAV calendars and CardDAV address books were not detected
* Multipart messages containing a calendar invite did not display
any of the human-readable alternatives
* Some calendar days were displayed incorrectly or duplicated
(eg. two "29th" days of a particular month)
* Phantom event was shown at the end of each day in Calendar week view
MFSA 2021-46 (bsc#1191332)
* CVE-2021-38496 (bmo#1725335)
Use-after-free in MessageTask
* CVE-2021-38497 (bmo#1726621)
Validation message could have been overlaid on another origin
* CVE-2021-38498 (bmo#1729642)
Use-after-free of nsLanguageAtomService object
* CVE-2021-32810 (bmo#1729813,
https://github.com/crossbeam-
rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
Data race in crossbeam-deque
* CVE-2021-38500 (bmo#1725854, bmo#1728321)
Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
and Firefox ESR 91.2
* CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2
==== apache2-mod_php7 ====
Version update (7.4.24 -> 7.4.25)
- updated to 7.4.25: This is a security release (CVE-2021-21703)
which also contains several bug fixes.
See https://www.php.net/ChangeLog-7.php#7.4.25
==== bluez-tools ====
Version update (0.1.38+git20190428 -> 0.1.38+git.20201024T225355.f653217)
- Update to version 0.1.38+git.20201024T225355.f653217 (changes
since 0.1.38+git20190428):
* Fix bt-agent file reloading signal handler setup.
* Remove incorrectly handled error argument from device_* calls.
* Fix gcc-10 compile.
* Correct the signal handler registration bt-agent.
==== freerdp ====
Version update (2.4.0 -> 2.4.1)
- Upgraded to freerdp 2.4.1
Important security issues, boo#1191895:
* CVE-2021-41159: Improper client input validation for gateway connections allows to overwrite memory
* CVE-2021-41160: Improper region checks in all clients allow out of bound write to memory
Noteworthy changes:
* Refactored RPC gateway parsing code
* OpenSSL 3.0 compatibility fixes
* USB redirection: fixed transfer lengths
Fixed issues:
* #gh:FreeRDP/FreeRDP#7363: Length checks in ConvertUTF8toUTF16
* #gh:FreeRDP/FreeRDP#7349: Added checks for bitmap width and heigth values
- Force library update to the latest, renamed versions (followup to
boo#1191755)
- Renamed libraries to follow packaging standards as requested in
boo#1191755
==== grub2 ====
Subpackages: grub2-arm64-efi grub2-snapper-plugin grub2-systemd-sleep-plugin
- Fix installation on usrmerged s390x
==== gstreamer-devtools ====
Subpackages: libgstvalidate-1_0-0 typelib-1_0-GstValidate-1_0
- Pass debug_viewer=enabled to meson, build the optional
gst-debug-viewer app.
==== kernel-64kb ====
Version update (5.14.11 -> 5.14.14)
- Update
patches.kernel.org/5.14.14-060-x86-fpu-Mask-out-the-invalid-MXCSR-bits-prop…
(bsc#1012628 bsc#1191855).
- commit 2b5383f
- Linux 5.14.14 (bsc#1012628).
- ALSA: usb-audio: Add quirk for VF0770 (bsc#1012628).
- ALSA: pcm: Workaround for a wrong offset in SYNC_PTR compat
ioctl (bsc#1012628).
- ALSA: usb-audio: Fix a missing error check in scarlett gen2
mixer (bsc#1012628).
- ALSA: seq: Fix a potential UAF by wrong private_free call order
(bsc#1012628).
- ALSA: hda/realtek: Enable 4-speaker output for Dell Precision
5560 laptop (bsc#1012628).
- ALSA: hda - Enable headphone mic on Dell Latitude laptops with
ALC3254 (bsc#1012628).
- ALSA: hda/realtek: Complete partial device name to avoid
ambiguity (bsc#1012628).
- ALSA: hda/realtek: Add quirk for Clevo X170KM-G (bsc#1012628).
- ALSA: hda/realtek - ALC236 headset MIC recording issue
(bsc#1012628).
- ALSA: hda/realtek: Add quirk for TongFang PHxTxX1 (bsc#1012628).
- ALSA: hda/realtek: Fix for quirk to enable speaker output on
the Lenovo 13s Gen2 (bsc#1012628).
- ALSA: hda/realtek: Fix the mic type detection issue for ASUS
G551JW (bsc#1012628).
- platform/x86: gigabyte-wmi: add support for B550 AORUS ELITE
AX V2 (bsc#1012628).
- platform/x86: amd-pmc: Add alternative acpi id for PMC
controller (bsc#1012628).
- spi: atmel: Fix PDC transfer setup bug (bsc#1012628).
- mtd: rawnand: qcom: Update code word value for raw read
(bsc#1012628).
- nds32/ftrace: Fix Error: invalid operands (*UND* and *UND*
sections) for `^' (bsc#1012628).
- dm: fix mempool NULL pointer race when completing IO
(bsc#1012628).
- ACPI: PM: Include alternate AMDI0005 id in special behaviour
(bsc#1012628).
- dm rq: don't queue request to blk-mq during DM suspend
(bsc#1012628).
- s390: fix strrchr() implementation (bsc#1012628).
- clk: socfpga: agilex: fix duplicate s2f_user0_clk (bsc#1012628).
- csky: don't let sigreturn play with priveleged bits of status
register (bsc#1012628).
- csky: Fixup regs.sr broken in ptrace (bsc#1012628).
- drm/fbdev: Clamp fbdev surface size if too large (bsc#1012628).
- arm64/hugetlb: fix CMA gigantic page order for non-4K PAGE_SIZE
(bsc#1012628).
- drm/nouveau/fifo: Reinstate the correct engine bit programming
(bsc#1012628).
- drm/msm: Do not run snapshot on non-DPU devices (bsc#1012628).
- drm/msm: Avoid potential overflow in timeout_to_jiffies()
(bsc#1012628).
- btrfs: unlock newly allocated extent buffer after error
(bsc#1012628).
- btrfs: deal with errors when replaying dir entry during log
replay (bsc#1012628).
- btrfs: deal with errors when adding inode reference during
log replay (bsc#1012628).
- btrfs: check for error when looking up inode during dir entry
replay (bsc#1012628).
- btrfs: update refs for any root except tree log roots
(bsc#1012628).
- btrfs: fix abort logic in btrfs_replace_file_extents
(bsc#1012628).
- module: fix clang CFI with MODULE_UNLOAD=n (bsc#1012628).
- x86/resctrl: Free the ctrlval arrays when
domain_setup_mon_state() fails (bsc#1012628).
- mei: me: add Ice Lake-N device id (bsc#1012628).
- mei: hbm: drop hbm responses on early shutdown (bsc#1012628).
- USB: xhci: dbc: fix tty registration race (bsc#1012628).
- xhci: guard accesses to ep_state in xhci_endpoint_reset()
(bsc#1012628).
- xhci: add quirk for host controllers that don't update endpoint
DCS (bsc#1012628).
- xhci: Fix command ring pointer corruption while aborting a
command (bsc#1012628).
- xhci: Enable trust tx length quirk for Fresco FL11 USB
controller (bsc#1012628).
- cb710: avoid NULL pointer subtraction (bsc#1012628).
- efi/cper: use stack buffer for error record decoding
(bsc#1012628).
- efi: Change down_interruptible() in virt_efi_reset_system()
to down_trylock() (bsc#1012628).
- usb: musb: dsps: Fix the probe error path (bsc#1012628).
- Input: xpad - add support for another USB ID of Nacon GC-100
(bsc#1012628).
- USB: serial: qcserial: add EM9191 QDL support (bsc#1012628).
- USB: serial: option: add Quectel EC200S-CN module support
(bsc#1012628).
- USB: serial: option: add Telit LE910Cx composition 0x1204
(bsc#1012628).
- USB: serial: option: add prod. id for Quectel EG91
(bsc#1012628).
- misc: fastrpc: Add missing lock before accessing find_vma()
(bsc#1012628).
- virtio: write back F_VERSION_1 before validate (bsc#1012628).
- EDAC/armada-xp: Fix output of uncorrectable error counter
(bsc#1012628).
- nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells
(bsc#1012628).
- virtio-blk: remove unneeded "likely" statements (bsc#1012628).
- Revert "virtio-blk: Add validation for block size in config
space" (bsc#1012628).
- x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT
automatically (bsc#1012628).
- powerpc/xive: Discard disabled interrupts in get_irqchip_state()
(bsc#1012628).
- iio: adc: aspeed: set driver data when adc probe (bsc#1012628).
- drivers: bus: simple-pm-bus: Add support for probing simple
bus only devices (bsc#1012628).
- driver core: Reject pointless SYNC_STATE_ONLY device links
(bsc#1012628).
- iio: adc: ad7192: Add IRQ flag (bsc#1012628).
- iio: adc: ad7780: Fix IRQ flag (bsc#1012628).
- iio: adc: ad7793: Fix IRQ flag (bsc#1012628).
- iio: adis16480: fix devices that do not support sleep mode
(bsc#1012628).
- iio: adc128s052: Fix the error handling path of 'adc128_probe()'
(bsc#1012628).
- iio: adc: max1027: Fix wrong shift with 12-bit devices
(bsc#1012628).
- iio: adis16475: fix deadlock on frequency set (bsc#1012628).
- iio: mtk-auxadc: fix case IIO_CHAN_INFO_PROCESSED (bsc#1012628).
- iio: light: opt3001: Fixed timeout error when 0 lux
(bsc#1012628).
- iio: accel: fxls8962af: return IRQ_HANDLED when fifo is flushed
(bsc#1012628).
- iio: adc: max1027: Fix the number of max1X31 channels
(bsc#1012628).
- iio: ssp_sensors: add more range checking in
ssp_parse_dataframe() (bsc#1012628).
- iio: ssp_sensors: fix error code in ssp_print_mcu_debug()
(bsc#1012628).
- Input: resistive-adc-touch - fix division by zero error on z1 ==
0 (bsc#1012628).
- eeprom: 93xx46: Add SPI device ID table (bsc#1012628).
- eeprom: 93xx46: fix MODULE_DEVICE_TABLE (bsc#1012628).
- eeprom: at25: Add SPI ID table (bsc#1012628).
- fpga: ice40-spi: Add SPI device ID table (bsc#1012628).
- iio: dac: ti-dac5571: fix an error code in probe()
(bsc#1012628).
- tracing: Fix missing osnoise tracer on max_latency
(bsc#1012628).
- tee: optee: Fix missing devices unregister during optee_remove
(bsc#1012628).
- ARM: dts: bcm2711-rpi-4-b: Fix usb's unit address (bsc#1012628).
- ARM: dts: bcm283x: Fix VEC address for BCM2711 (bsc#1012628).
- ARM: dts: bcm2711: fix MDIO #address- and #size-cells
(bsc#1012628).
- firmware: arm_ffa: Fix __ffa_devices_unregister (bsc#1012628).
- firmware: arm_ffa: Add missing remove callback to ffa_bus_type
(bsc#1012628).
- ARM: dts: bcm2711-rpi-4-b: fix sd_io_1v8_reg regulator states
(bsc#1012628).
- ARM: dts: bcm2711-rpi-4-b: Fix pcie0's unit address formatting
(bsc#1012628).
- clk: renesas: rzg2l: Fix clk status function (bsc#1012628).
- nvme-pci: Fix abort command id (bsc#1012628).
- sctp: account stream padding length for reconf chunk
(bsc#1012628).
- gpio: 74x164: Add SPI device ID table (bsc#1012628).
- gpio: pca953x: Improve bias setting (bsc#1012628).
- net: arc: select CRC32 (bsc#1012628).
- net: korina: select CRC32 (bsc#1012628).
- net/smc: improved fix wait on already cleared link
(bsc#1012628).
- net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path
(bsc#1012628).
- net/mlx5e: Mutually exclude RX-FCS and RX-port-timestamp
(bsc#1012628).
- net/mlx5e: Switchdev representors are not vlan challenged
(bsc#1012628).
- net: stmmac: fix get_hw_feature() on old hardware (bsc#1012628).
- net: phy: Do not shutdown PHYs in READY state (bsc#1012628).
- net: dsa: mv88e6xxx: don't use PHY_DETECT on internal PHY's
(bsc#1012628).
- net: dsa: microchip: Added the condition for scheduling
ksz_mib_read_work (bsc#1012628).
- net: dsa: fix spurious error message when unoffloaded port
leaves bridge (bsc#1012628).
- net: encx24j600: check error in devm_regmap_init_encx24j600
(bsc#1012628).
- ethernet: s2io: fix setting mac address during resume
(bsc#1012628).
- vhost-vdpa: Fix the wrong input in config_cb (bsc#1012628).
- nfc: fix error handling of nfc_proto_register() (bsc#1012628).
- NFC: digital: fix possible memory leak in
digital_tg_listen_mdaa() (bsc#1012628).
- NFC: digital: fix possible memory leak in
digital_in_send_sdd_req() (bsc#1012628).
- pata_legacy: fix a couple uninitialized variable bugs
(bsc#1012628).
- ata: ahci_platform: fix null-ptr-deref in
ahci_platform_enable_regulators() (bsc#1012628).
- mlxsw: thermal: Fix out-of-bounds memory accesses (bsc#1012628).
- platform/mellanox: mlxreg-io: Fix argument base in kstrtou32()
call (bsc#1012628).
- platform/mellanox: mlxreg-io: Fix read access of n-bytes size
attributes (bsc#1012628).
- spi: spidev: Add SPI ID table (bsc#1012628).
- spi: bcm-qspi: clear MSPI spifie interrupt during probe
(bsc#1012628).
- drm/panel: olimex-lcd-olinuxino: select CRC32 (bsc#1012628).
- drm/edid: In connector_bad_edid() cap num_of_ext by num_blocks
read (bsc#1012628).
- drm/msm: Fix null pointer dereference on pointer edp
(bsc#1012628).
- drm/msm/mdp5: fix cursor-related warnings (bsc#1012628).
- drm/msm/submit: fix overflow check on 64-bit architectures
(bsc#1012628).
- drm/msm/a6xx: Track current ctx by seqno (bsc#1012628).
- drm/msm/a4xx: fix error handling in a4xx_gpu_init()
(bsc#1012628).
- drm/msm/a3xx: fix error handling in a3xx_gpu_init()
(bsc#1012628).
- drm/msm/dsi: dsi_phy_14nm: Take ready-bit into account in
poll_for_ready (bsc#1012628).
- drm/msm/dsi: Fix an error code in msm_dsi_modeset_init()
(bsc#1012628).
- drm/msm/dsi: fix off by one in dsi_bus_clk_enable error handling
(bsc#1012628).
- acpi/arm64: fix next_platform_timer() section mismatch error
(bsc#1012628).
- platform/x86: intel_scu_ipc: Fix busy loop expiry time
(bsc#1012628).
- mqprio: Correct stats in mqprio_dump_class_stats()
(bsc#1012628).
- mptcp: fix possible stall on recvmsg() (bsc#1012628).
- qed: Fix missing error code in qed_slowpath_start()
(bsc#1012628).
- r8152: select CRC32 and CRYPTO/CRYPTO_HASH/CRYPTO_SHA256
(bsc#1012628).
- ice: fix locking for Tx timestamp tracking flush (bsc#1012628).
- block/rnbd-clt-sysfs: fix a couple uninitialized variable bugs
(bsc#1012628).
- nfp: flow_offload: move flow_indr_dev_register from app init
to app start (bsc#1012628).
- net: mscc: ocelot: make use of all 63 PTP timestamp identifiers
(bsc#1012628).
- net: mscc: ocelot: avoid overflowing the PTP timestamp FIFO
(bsc#1012628).
- net: mscc: ocelot: warn when a PTP IRQ is raised for an unknown
skb (bsc#1012628).
- net: mscc: ocelot: deny TX timestamping of non-PTP packets
(bsc#1012628).
- net: mscc: ocelot: cross-check the sequence id from the
timestamp FIFO with the skb PTP header (bsc#1012628).
- net: dsa: felix: break at first CPU port during init and
teardown (bsc#1012628).
- ionic: don't remove netdev->dev_addr when syncing uc list
(bsc#1012628).
- commit 6859230
- media: firewire: firedtv-avc: fix a buffer overflow in
avc_ca_pmt() (CVE-2021-3542 bsc#1184673).
- commit 08ab8da
- x86/fpu: Mask out the invalid MXCSR bits properly (x86_32
breakage).
- commit 565cd48
- rpm/kernel-obs-build.spec.in: reduce initrd functionality
For building in OBS, we always build inside a virtual machine
that gets a new, freshly created scratch filesystem image. So
we do not need to handle fscks because that ain't gonna happen,
as well as not we do not need to handle microcode update in the
initrd as these only can be run on the host system anyway. We
can also strip and hardlink as an additional optimisation that
should not significantly hurt.
- commit c72c6fc
- Update upstream commit id for rtw89 patch (bsc#1191321)
- commit 8dccb66
- Linux 5.14.13 (bsc#1012628).
- hwmon: (pmbus/ibm-cffps) max_power_out swap changes
(bsc#1012628).
- io_uring: kill fasync (bsc#1012628).
- sched: Always inline is_percpu_thread() (bsc#1012628).
- perf/core: fix userpage->time_enabled of inactive events
(bsc#1012628).
- scsi: qla2xxx: Fix excessive messages during device logout
(bsc#1012628).
- scsi: virtio_scsi: Fix spelling mistake "Unsupport" ->
"Unsupported" (bsc#1012628).
- scsi: ses: Fix unsigned comparison with less than zero
(bsc#1012628).
- drm/amdgpu: fix gart.bo pin_count leak (bsc#1012628).
- net: sun: SUNVNET_COMMON should depend on INET (bsc#1012628).
- vboxfs: fix broken legacy mount signature checking
(bsc#1012628).
- net: bgmac-platform: handle mac-address deferral (bsc#1012628).
- mac80211: check return value of rhashtable_init (bsc#1012628).
- net: prevent user from passing illegal stab size (bsc#1012628).
- hwmon: (ltc2947) Properly handle errors when looking for the
external clock (bsc#1012628).
- m68k: Handle arrivals of multiple signals correctly
(bsc#1012628).
- pinctrl: qcom: sc7280: Add PM suspend callbacks (bsc#1012628).
- mac80211: Drop frames from invalid MAC address in ad-hoc mode
(bsc#1012628).
- netfilter: nf_nat_masquerade: defer conntrack walk to work queue
(bsc#1012628).
- netfilter: nf_nat_masquerade: make async masq_inet6_event
handling generic (bsc#1012628).
- KVM: arm64: nvhe: Fix missing FORCE for hyp-reloc.S build rule
(bsc#1012628).
- ASoC: SOF: loader: release_firmware() on load failure to avoid
batching (bsc#1012628).
- HID: wacom: Add new Intuos BT (CTL-4100WL/CTL-6100WL) device
IDs (bsc#1012628).
- netfilter: ip6_tables: zero-initialize fragment offset
(bsc#1012628).
- HID: apple: Fix logical maximum and usage maximum of Magic
Keyboard JIS (bsc#1012628).
- ALSA: usb-audio: Unify mixer resume and reset_resume procedure
(bsc#1012628).
- ALSA: oxfw: fix transmission method for Loud models based on
OXFW971 (bsc#1012628).
- ASoC: Intel: sof_sdw: tag SoundWire BEs as non-atomic
(bsc#1012628).
- ext4: correct the error path of ext4_write_inline_data_end()
(bsc#1012628).
- ext4: check and update i_disksize properly (bsc#1012628).
- commit ab3ca44
- kernel-spec-macros: Since rpm 4.17 %verbose is unusable (bsc#1191229).
The semantic changed in an incompatible way so invoking the macro now
causes a build failure.
- commit 3e55f55
- Linux 5.14.12 (bsc#1012628).
- dsa: tag_dsa: Fix mask for trunked packets (bsc#1012628).
- x86/hpet: Use another crystalball to evaluate HPET usability
(bsc#1012628).
- x86/entry: Clear X86_FEATURE_SMAP when CONFIG_X86_SMAP=n
(bsc#1012628).
- x86/entry: Correct reference to intended CONFIG_64_BIT
(bsc#1012628).
- x86/fpu: Restore the masking out of reserved MXCSR bits
(bsc#1012628).
- x86/sev: Return an error on a returned non-zero
SW_EXITINFO1[31:0] (bsc#1012628).
- x86/Kconfig: Correct reference to MWINCHIP3D (bsc#1012628).
- x86/platform/olpc: Correct ifdef symbol to intended
CONFIG_OLPC_XO15_SCI (bsc#1012628).
- pseries/eeh: Fix the kdump kernel crash during eeh_pseries_init
(bsc#1012628).
- powerpc/32s: Fix kuap_kernel_restore() (bsc#1012628).
- powerpc/64s: Fix unrecoverable MCE calling async handler from
NMI (bsc#1012628).
- powerpc/traps: do not enable irqs in _exception (bsc#1012628).
- powerpc/64s: fix program check interrupt emergency stack path
(bsc#1012628).
- powerpc/bpf ppc32: Fix BPF_SUB when imm == 0x80000000
(bsc#1012628).
- powerpc/bpf ppc32: Do not emit zero extend instruction for
64-bit BPF_END (bsc#1012628).
- powerpc/bpf ppc32: Fix JMP32_JSET_K (bsc#1012628).
- powerpc/bpf ppc32: Fix ALU32 BPF_ARSH operation (bsc#1012628).
- powerpc/bpf: Fix BPF_SUB when imm == 0x80000000 (bsc#1012628).
- powerpc/bpf: Fix BPF_MOD when imm == 1 (bsc#1012628).
- objtool: Make .altinstructions section entry size consistent
(bsc#1012628).
- objtool: Remove reloc symbol type checks in get_alt_entry()
(bsc#1012628).
- scsi: iscsi: Fix iscsi_task use after free (bsc#1012628).
- RISC-V: Include clone3() on rv32 (bsc#1012628).
- i2c: mlxcpld: Modify register setting for 400KHz frequency
(bsc#1012628).
- i2c: mlxcpld: Fix criteria for frequency setting (bsc#1012628).
- bpf, s390: Fix potential memory leak about jit_data
(bsc#1012628).
- riscv/vdso: make arch_setup_additional_pages wait for mmap_sem
for write killable (bsc#1012628).
- riscv/vdso: Move vdso data page up front (bsc#1012628).
- riscv/vdso: Refactor asm/vdso.h (bsc#1012628).
- RISC-V: Fix VDSO build for !MMU (bsc#1012628).
- riscv: explicitly use symbol offsets for VDSO (bsc#1012628).
- i2c: mediatek: Add OFFSET_EXT_CONF setting back (bsc#1012628).
- i2c: acpi: fix resource leak in reconfiguration device addition
(bsc#1012628).
- powerpc/iommu: Report the correct most efficient DMA mask for
PCI devices (bsc#1012628).
- net: prefer socket bound to interface when not in VRF
(bsc#1012628).
- iavf: fix double unlock of crit_lock (bsc#1012628).
- i40e: Fix freeing of uninitialized misc IRQ vector
(bsc#1012628).
- i40e: fix endless loop under rtnl (bsc#1012628).
- gve: report 64bit tx_bytes counter from
gve_handle_report_stats() (bsc#1012628).
- gve: fix gve_get_stats() (bsc#1012628).
- rtnetlink: fix if_nlmsg_stats_size() under estimation
(bsc#1012628).
- gve: Properly handle errors in gve_assign_qpl (bsc#1012628).
- gve: Avoid freeing NULL pointer (bsc#1012628).
- gve: Correct available tx qpl check (bsc#1012628).
- net: stmmac: trigger PCS EEE to turn off on link down
(bsc#1012628).
- net: pcs: xpcs: fix incorrect steps on disable EEE
(bsc#1012628).
- drm/nouveau/debugfs: fix file release memory leak (bsc#1012628).
- drm/nouveau/kms/nv50-: fix file release memory leak
(bsc#1012628).
- drm/nouveau: avoid a use-after-free when BO init fails
(bsc#1012628).
- video: fbdev: gbefb: Only instantiate device when built for IP32
(bsc#1012628).
- drm/panel: abt-y030xx067a: yellow tint fix (bsc#1012628).
- drm/nouveau/fifo/ga102: initialise chid on return from channel
creation (bsc#1012628).
- drm/sun4i: dw-hdmi: Fix HDMI PHY clock setup (bsc#1012628).
- bus: ti-sysc: Use CLKDM_NOAUTO for dra7 dcan1 for errata i893
(bsc#1012628).
- perf jevents: Free the sys_event_tables list after processing
entries (bsc#1012628).
- drm/amdgpu: handle the case of pci_channel_io_frozen only in
amdgpu_pci_resume (bsc#1012628).
- drm/amdkfd: fix a potential ttm->sg memory leak (bsc#1012628).
- ARM: defconfig: gemini: Restore framebuffer (bsc#1012628).
- netlink: annotate data races around nlk->bound (bsc#1012628).
- net: pcs: xpcs: fix incorrect CL37 AN sequence (bsc#1012628).
- net: sfp: Fix typo in state machine debug string (bsc#1012628).
- net/sched: sch_taprio: properly cancel timer from
taprio_destroy() (bsc#1012628).
- net: bridge: fix under estimation in br_get_linkxstats_size()
(bsc#1012628).
- net: bridge: use nla_total_size_64bit() in
br_get_linkxstats_size() (bsc#1012628).
- afs: Fix afs_launder_page() to set correct start file position
(bsc#1012628).
- netfs: Fix READ/WRITE confusion when calling iov_iter_xarray()
(bsc#1012628).
- drm/i915/bdb: Fix version check (bsc#1012628).
- drm/i915/tc: Fix TypeC port init/resume time sanitization
(bsc#1012628).
- drm/i915/jsl: Add W/A 1409054076 for JSL (bsc#1012628).
- drm/i915/audio: Use BIOS provided value for RKL HDA link
(bsc#1012628).
- ARM: imx6: disable the GIC CPU interface before calling
stby-poweroff sequence (bsc#1012628).
- dt-bindings: drm/bridge: ti-sn65dsi86: Fix reg value
(bsc#1012628).
- arm64: dts: ls1028a: fix eSDHC2 node (bsc#1012628).
- arm64: dts: imx8mm-kontron-n801x-som: do not allow to switch
off buck2 (bsc#1012628).
- arm64: dts: imx8: change the spi-nor tx (bsc#1012628).
- ARM: dts: imx: change the spi-nor tx (bsc#1012628).
- ptp_pch: Load module automatically if ID matches (bsc#1012628).
- powerpc/fsl/dts: Fix phy-connection-type for fm1mac3
(bsc#1012628).
- netfilter: nf_tables: honor NLM_F_CREATE and NLM_F_EXCL in
event notification (bsc#1012628).
- MIPS: Revert "add support for buggy MT7621S core detection"
(bsc#1012628).
- net: stmmac: dwmac-rk: Fix ethernet on rk3399 based devices
(bsc#1012628).
- net: mscc: ocelot: fix VCAP filters remaining active after
being deleted (bsc#1012628).
- net_sched: fix NULL deref in fifo_set_limit() (bsc#1012628).
- libbpf: Fix memory leak in strset (bsc#1012628).
- phy: mdio: fix memory leak (bsc#1012628).
- libbpf: Fix segfault in light skeleton for objects without BTF
(bsc#1012628).
- net/mlx5e: Fix the presented RQ index in PTP stats
(bsc#1012628).
- net/mlx5: Fix setting number of EQs of SFs (bsc#1012628).
- net/mlx5: Fix length of irq_index in chars (bsc#1012628).
- net/mlx5: Avoid generating event after PPS out in Real time mode
(bsc#1012628).
- net/mlx5: Force round second at 1PPS out start time
(bsc#1012628).
- net/mlx5: E-Switch, Fix double allocation of acl flow counter
(bsc#1012628).
- net/mlx5e: Keep the value for maximum number of channels in-sync
(bsc#1012628).
- net/mlx5e: IPSEC RX, enable checksum complete (bsc#1012628).
- bpf: Fix integer overflow in prealloc_elems_and_freelist()
(bsc#1012628).
- soc: ti: omap-prm: Fix external abort for am335x pruss
(bsc#1012628).
- bpf, arm: Fix register clobbering in div/mod implementation
(bsc#1012628).
- netfilter: nf_tables: reverse order in rule replacement
expansion (bsc#1012628).
- netfilter: nf_tables: add position handle in event notification
(bsc#1012628).
- netfilter: conntrack: fix boot failure with
nf_conntrack.enable_hooks=1 (bsc#1012628).
- iwlwifi: pcie: add configuration of a Wi-Fi adapter on Dell
XPS 15 (bsc#1012628).
- xtensa: call irqchip_init only when CONFIG_USE_OF is selected
(bsc#1012628).
- xtensa: use CONFIG_USE_OF instead of CONFIG_OF (bsc#1012628).
- arm64: dts: qcom: pm8150: use qcom,pm8998-pon binding
(bsc#1012628).
- ath5k: fix building with LEDS=m (bsc#1012628).
- PCI: hv: Fix sleep while in non-sleep context when removing
child devices from the bus (bsc#1012628).
- ARM: dts: imx6qdl-pico: Fix Ethernet support (bsc#1012628).
- ARM: dts: imx: Fix USB host power regulator polarity on M53Menlo
(bsc#1012628).
- ARM: dts: imx: Add missing pinctrl-names for panel on M53Menlo
(bsc#1012628).
- soc: qcom: mdt_loader: Drop PT_LOAD check on hash segment
(bsc#1012628).
- iwlwifi: mvm: Fix possible NULL dereference (bsc#1012628).
- ARM: at91: pm: do not panic if ram controllers are not enabled
(bsc#1012628).
- Revert "arm64: dts: qcom: sc7280: Fixup the cpufreq node"
(bsc#1012628).
- ARM: dts: qcom: apq8064: Use 27MHz PXO clock as DSI PLL
reference (bsc#1012628).
- soc: qcom: socinfo: Fixed argument passed to platform_set_data()
(bsc#1012628).
- bus: ti-sysc: Add break in switch statement in sysc_init_soc()
(bsc#1012628).
- riscv: Flush current cpu icache before other cpus (bsc#1012628).
- scsi: ufs: core: Fix task management completion (bsc#1012628).
- ARM: dts: qcom: apq8064: use compatible which contains chipid
(bsc#1012628).
- ARM: dts: imx6dl-yapp4: Fix lp5562 LED driver probe
(bsc#1012628).
- ARM: dts: omap3430-sdp: Fix NAND device node (bsc#1012628).
- xen/balloon: fix cancelled balloon action (bsc#1012628).
- SUNRPC: fix sign error causing rpcsec_gss drops (bsc#1012628).
- nfsd4: Handle the NFSv4 READDIR 'dircount' hint being zero
(bsc#1012628).
- nfsd: fix error handling of register_pernet_subsys() in
init_nfsd() (bsc#1012628).
- ovl: fix IOCB_DIRECT if underlying fs doesn't support direct IO
(bsc#1012628).
- ovl: fix missing negative dentry check in ovl_rename()
(bsc#1012628).
- fbdev: simplefb: fix Kconfig dependencies (bsc#1012628).
- Update config files.
- mmc: sdhci-of-at91: replace while loop with read_poll_timeout
(bsc#1012628).
- mmc: sdhci-of-at91: wait for calibration done before proceed
(bsc#1012628).
- mmc: meson-gx: do not use memcpy_to/fromio for dram-access-quirk
(bsc#1012628).
- xen/privcmd: fix error handling in mmap-resource processing
(bsc#1012628).
- drm/i915: Extend the async flip VT-d w/a to skl/bxt
(bsc#1012628).
- drm/i915: Fix runtime pm handling in i915_gem_shrink
(bsc#1012628).
- drm/amd/display: Fix DCN3 B0 DP Alt Mapping (bsc#1012628).
- drm/amd/display: Fix detection of 4 lane for DPALT
(bsc#1012628).
- drm/amd/display: Limit display scaling to up to 4k for DCN 3.1
(bsc#1012628).
- drm/nouveau/ga102-: support ttm buffer moves via copy engine
(bsc#1012628).
- drm/nouveau/kms/tu102-: delay enabling cursor until after
assign_windows (bsc#1012628).
- drm/amdgpu: During s0ix don't wait to signal GFXOFF
(bsc#1012628).
- drm/amd/display: USB4 bring up set correct address
(bsc#1012628).
- drm/amd/display: Fix B0 USB-C DP Alt mode (bsc#1012628).
- usb: typec: tipd: Remove dependency on "connector" child fwnode
(bsc#1012628).
- usb: typec: tcpm: handle SRC_STARTUP state if cc changes
(bsc#1012628).
- usb: typec: tcpci: don't handle vSafe0V event if it's not
enabled (bsc#1012628).
- USB: cdc-acm: fix break reporting (bsc#1012628).
- USB: cdc-acm: fix racy tty buffer accesses (bsc#1012628).
- usb: gadget: f_uac2: fixed EP-IN wMaxPacketSize (bsc#1012628).
- usb: chipidea: ci_hdrc_imx: Also search for 'phys' phandle
(bsc#1012628).
- usb: cdc-wdm: Fix check for WWAN (bsc#1012628).
- Partially revert "usb: Kconfig: using select for USB_COMMON
dependency" (bsc#1012628).
- Update config files.
- commit 7246625
- rtw89: add Realtek 802.11ax driver (bsc#1191321).
- commit 4c399ab
- Enable CONFIG_RTW88_DEBUG and CONFIG_RTW89_DEBUG on debug flavors (bsc#1191321)
- commit a76143b
==== kernel-source ====
Version update (5.14.11 -> 5.14.14)
Subpackages: kernel-default kernel-docs
- Update
patches.kernel.org/5.14.14-060-x86-fpu-Mask-out-the-invalid-MXCSR-bits-prop…
(bsc#1012628 bsc#1191855).
- commit 2b5383f
- Linux 5.14.14 (bsc#1012628).
- ALSA: usb-audio: Add quirk for VF0770 (bsc#1012628).
- ALSA: pcm: Workaround for a wrong offset in SYNC_PTR compat
ioctl (bsc#1012628).
- ALSA: usb-audio: Fix a missing error check in scarlett gen2
mixer (bsc#1012628).
- ALSA: seq: Fix a potential UAF by wrong private_free call order
(bsc#1012628).
- ALSA: hda/realtek: Enable 4-speaker output for Dell Precision
5560 laptop (bsc#1012628).
- ALSA: hda - Enable headphone mic on Dell Latitude laptops with
ALC3254 (bsc#1012628).
- ALSA: hda/realtek: Complete partial device name to avoid
ambiguity (bsc#1012628).
- ALSA: hda/realtek: Add quirk for Clevo X170KM-G (bsc#1012628).
- ALSA: hda/realtek - ALC236 headset MIC recording issue
(bsc#1012628).
- ALSA: hda/realtek: Add quirk for TongFang PHxTxX1 (bsc#1012628).
- ALSA: hda/realtek: Fix for quirk to enable speaker output on
the Lenovo 13s Gen2 (bsc#1012628).
- ALSA: hda/realtek: Fix the mic type detection issue for ASUS
G551JW (bsc#1012628).
- platform/x86: gigabyte-wmi: add support for B550 AORUS ELITE
AX V2 (bsc#1012628).
- platform/x86: amd-pmc: Add alternative acpi id for PMC
controller (bsc#1012628).
- spi: atmel: Fix PDC transfer setup bug (bsc#1012628).
- mtd: rawnand: qcom: Update code word value for raw read
(bsc#1012628).
- nds32/ftrace: Fix Error: invalid operands (*UND* and *UND*
sections) for `^' (bsc#1012628).
- dm: fix mempool NULL pointer race when completing IO
(bsc#1012628).
- ACPI: PM: Include alternate AMDI0005 id in special behaviour
(bsc#1012628).
- dm rq: don't queue request to blk-mq during DM suspend
(bsc#1012628).
- s390: fix strrchr() implementation (bsc#1012628).
- clk: socfpga: agilex: fix duplicate s2f_user0_clk (bsc#1012628).
- csky: don't let sigreturn play with priveleged bits of status
register (bsc#1012628).
- csky: Fixup regs.sr broken in ptrace (bsc#1012628).
- drm/fbdev: Clamp fbdev surface size if too large (bsc#1012628).
- arm64/hugetlb: fix CMA gigantic page order for non-4K PAGE_SIZE
(bsc#1012628).
- drm/nouveau/fifo: Reinstate the correct engine bit programming
(bsc#1012628).
- drm/msm: Do not run snapshot on non-DPU devices (bsc#1012628).
- drm/msm: Avoid potential overflow in timeout_to_jiffies()
(bsc#1012628).
- btrfs: unlock newly allocated extent buffer after error
(bsc#1012628).
- btrfs: deal with errors when replaying dir entry during log
replay (bsc#1012628).
- btrfs: deal with errors when adding inode reference during
log replay (bsc#1012628).
- btrfs: check for error when looking up inode during dir entry
replay (bsc#1012628).
- btrfs: update refs for any root except tree log roots
(bsc#1012628).
- btrfs: fix abort logic in btrfs_replace_file_extents
(bsc#1012628).
- module: fix clang CFI with MODULE_UNLOAD=n (bsc#1012628).
- x86/resctrl: Free the ctrlval arrays when
domain_setup_mon_state() fails (bsc#1012628).
- mei: me: add Ice Lake-N device id (bsc#1012628).
- mei: hbm: drop hbm responses on early shutdown (bsc#1012628).
- USB: xhci: dbc: fix tty registration race (bsc#1012628).
- xhci: guard accesses to ep_state in xhci_endpoint_reset()
(bsc#1012628).
- xhci: add quirk for host controllers that don't update endpoint
DCS (bsc#1012628).
- xhci: Fix command ring pointer corruption while aborting a
command (bsc#1012628).
- xhci: Enable trust tx length quirk for Fresco FL11 USB
controller (bsc#1012628).
- cb710: avoid NULL pointer subtraction (bsc#1012628).
- efi/cper: use stack buffer for error record decoding
(bsc#1012628).
- efi: Change down_interruptible() in virt_efi_reset_system()
to down_trylock() (bsc#1012628).
- usb: musb: dsps: Fix the probe error path (bsc#1012628).
- Input: xpad - add support for another USB ID of Nacon GC-100
(bsc#1012628).
- USB: serial: qcserial: add EM9191 QDL support (bsc#1012628).
- USB: serial: option: add Quectel EC200S-CN module support
(bsc#1012628).
- USB: serial: option: add Telit LE910Cx composition 0x1204
(bsc#1012628).
- USB: serial: option: add prod. id for Quectel EG91
(bsc#1012628).
- misc: fastrpc: Add missing lock before accessing find_vma()
(bsc#1012628).
- virtio: write back F_VERSION_1 before validate (bsc#1012628).
- EDAC/armada-xp: Fix output of uncorrectable error counter
(bsc#1012628).
- nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells
(bsc#1012628).
- virtio-blk: remove unneeded "likely" statements (bsc#1012628).
- Revert "virtio-blk: Add validation for block size in config
space" (bsc#1012628).
- x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT
automatically (bsc#1012628).
- powerpc/xive: Discard disabled interrupts in get_irqchip_state()
(bsc#1012628).
- iio: adc: aspeed: set driver data when adc probe (bsc#1012628).
- drivers: bus: simple-pm-bus: Add support for probing simple
bus only devices (bsc#1012628).
- driver core: Reject pointless SYNC_STATE_ONLY device links
(bsc#1012628).
- iio: adc: ad7192: Add IRQ flag (bsc#1012628).
- iio: adc: ad7780: Fix IRQ flag (bsc#1012628).
- iio: adc: ad7793: Fix IRQ flag (bsc#1012628).
- iio: adis16480: fix devices that do not support sleep mode
(bsc#1012628).
- iio: adc128s052: Fix the error handling path of 'adc128_probe()'
(bsc#1012628).
- iio: adc: max1027: Fix wrong shift with 12-bit devices
(bsc#1012628).
- iio: adis16475: fix deadlock on frequency set (bsc#1012628).
- iio: mtk-auxadc: fix case IIO_CHAN_INFO_PROCESSED (bsc#1012628).
- iio: light: opt3001: Fixed timeout error when 0 lux
(bsc#1012628).
- iio: accel: fxls8962af: return IRQ_HANDLED when fifo is flushed
(bsc#1012628).
- iio: adc: max1027: Fix the number of max1X31 channels
(bsc#1012628).
- iio: ssp_sensors: add more range checking in
ssp_parse_dataframe() (bsc#1012628).
- iio: ssp_sensors: fix error code in ssp_print_mcu_debug()
(bsc#1012628).
- Input: resistive-adc-touch - fix division by zero error on z1 ==
0 (bsc#1012628).
- eeprom: 93xx46: Add SPI device ID table (bsc#1012628).
- eeprom: 93xx46: fix MODULE_DEVICE_TABLE (bsc#1012628).
- eeprom: at25: Add SPI ID table (bsc#1012628).
- fpga: ice40-spi: Add SPI device ID table (bsc#1012628).
- iio: dac: ti-dac5571: fix an error code in probe()
(bsc#1012628).
- tracing: Fix missing osnoise tracer on max_latency
(bsc#1012628).
- tee: optee: Fix missing devices unregister during optee_remove
(bsc#1012628).
- ARM: dts: bcm2711-rpi-4-b: Fix usb's unit address (bsc#1012628).
- ARM: dts: bcm283x: Fix VEC address for BCM2711 (bsc#1012628).
- ARM: dts: bcm2711: fix MDIO #address- and #size-cells
(bsc#1012628).
- firmware: arm_ffa: Fix __ffa_devices_unregister (bsc#1012628).
- firmware: arm_ffa: Add missing remove callback to ffa_bus_type
(bsc#1012628).
- ARM: dts: bcm2711-rpi-4-b: fix sd_io_1v8_reg regulator states
(bsc#1012628).
- ARM: dts: bcm2711-rpi-4-b: Fix pcie0's unit address formatting
(bsc#1012628).
- clk: renesas: rzg2l: Fix clk status function (bsc#1012628).
- nvme-pci: Fix abort command id (bsc#1012628).
- sctp: account stream padding length for reconf chunk
(bsc#1012628).
- gpio: 74x164: Add SPI device ID table (bsc#1012628).
- gpio: pca953x: Improve bias setting (bsc#1012628).
- net: arc: select CRC32 (bsc#1012628).
- net: korina: select CRC32 (bsc#1012628).
- net/smc: improved fix wait on already cleared link
(bsc#1012628).
- net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path
(bsc#1012628).
- net/mlx5e: Mutually exclude RX-FCS and RX-port-timestamp
(bsc#1012628).
- net/mlx5e: Switchdev representors are not vlan challenged
(bsc#1012628).
- net: stmmac: fix get_hw_feature() on old hardware (bsc#1012628).
- net: phy: Do not shutdown PHYs in READY state (bsc#1012628).
- net: dsa: mv88e6xxx: don't use PHY_DETECT on internal PHY's
(bsc#1012628).
- net: dsa: microchip: Added the condition for scheduling
ksz_mib_read_work (bsc#1012628).
- net: dsa: fix spurious error message when unoffloaded port
leaves bridge (bsc#1012628).
- net: encx24j600: check error in devm_regmap_init_encx24j600
(bsc#1012628).
- ethernet: s2io: fix setting mac address during resume
(bsc#1012628).
- vhost-vdpa: Fix the wrong input in config_cb (bsc#1012628).
- nfc: fix error handling of nfc_proto_register() (bsc#1012628).
- NFC: digital: fix possible memory leak in
digital_tg_listen_mdaa() (bsc#1012628).
- NFC: digital: fix possible memory leak in
digital_in_send_sdd_req() (bsc#1012628).
- pata_legacy: fix a couple uninitialized variable bugs
(bsc#1012628).
- ata: ahci_platform: fix null-ptr-deref in
ahci_platform_enable_regulators() (bsc#1012628).
- mlxsw: thermal: Fix out-of-bounds memory accesses (bsc#1012628).
- platform/mellanox: mlxreg-io: Fix argument base in kstrtou32()
call (bsc#1012628).
- platform/mellanox: mlxreg-io: Fix read access of n-bytes size
attributes (bsc#1012628).
- spi: spidev: Add SPI ID table (bsc#1012628).
- spi: bcm-qspi: clear MSPI spifie interrupt during probe
(bsc#1012628).
- drm/panel: olimex-lcd-olinuxino: select CRC32 (bsc#1012628).
- drm/edid: In connector_bad_edid() cap num_of_ext by num_blocks
read (bsc#1012628).
- drm/msm: Fix null pointer dereference on pointer edp
(bsc#1012628).
- drm/msm/mdp5: fix cursor-related warnings (bsc#1012628).
- drm/msm/submit: fix overflow check on 64-bit architectures
(bsc#1012628).
- drm/msm/a6xx: Track current ctx by seqno (bsc#1012628).
- drm/msm/a4xx: fix error handling in a4xx_gpu_init()
(bsc#1012628).
- drm/msm/a3xx: fix error handling in a3xx_gpu_init()
(bsc#1012628).
- drm/msm/dsi: dsi_phy_14nm: Take ready-bit into account in
poll_for_ready (bsc#1012628).
- drm/msm/dsi: Fix an error code in msm_dsi_modeset_init()
(bsc#1012628).
- drm/msm/dsi: fix off by one in dsi_bus_clk_enable error handling
(bsc#1012628).
- acpi/arm64: fix next_platform_timer() section mismatch error
(bsc#1012628).
- platform/x86: intel_scu_ipc: Fix busy loop expiry time
(bsc#1012628).
- mqprio: Correct stats in mqprio_dump_class_stats()
(bsc#1012628).
- mptcp: fix possible stall on recvmsg() (bsc#1012628).
- qed: Fix missing error code in qed_slowpath_start()
(bsc#1012628).
- r8152: select CRC32 and CRYPTO/CRYPTO_HASH/CRYPTO_SHA256
(bsc#1012628).
- ice: fix locking for Tx timestamp tracking flush (bsc#1012628).
- block/rnbd-clt-sysfs: fix a couple uninitialized variable bugs
(bsc#1012628).
- nfp: flow_offload: move flow_indr_dev_register from app init
to app start (bsc#1012628).
- net: mscc: ocelot: make use of all 63 PTP timestamp identifiers
(bsc#1012628).
- net: mscc: ocelot: avoid overflowing the PTP timestamp FIFO
(bsc#1012628).
- net: mscc: ocelot: warn when a PTP IRQ is raised for an unknown
skb (bsc#1012628).
- net: mscc: ocelot: deny TX timestamping of non-PTP packets
(bsc#1012628).
- net: mscc: ocelot: cross-check the sequence id from the
timestamp FIFO with the skb PTP header (bsc#1012628).
- net: dsa: felix: break at first CPU port during init and
teardown (bsc#1012628).
- ionic: don't remove netdev->dev_addr when syncing uc list
(bsc#1012628).
- commit 6859230
- media: firewire: firedtv-avc: fix a buffer overflow in
avc_ca_pmt() (CVE-2021-3542 bsc#1184673).
- commit 08ab8da
- x86/fpu: Mask out the invalid MXCSR bits properly (x86_32
breakage).
- commit 565cd48
- rpm/kernel-obs-build.spec.in: reduce initrd functionality
For building in OBS, we always build inside a virtual machine
that gets a new, freshly created scratch filesystem image. So
we do not need to handle fscks because that ain't gonna happen,
as well as not we do not need to handle microcode update in the
initrd as these only can be run on the host system anyway. We
can also strip and hardlink as an additional optimisation that
should not significantly hurt.
- commit c72c6fc
- Update upstream commit id for rtw89 patch (bsc#1191321)
- commit 8dccb66
- Linux 5.14.13 (bsc#1012628).
- hwmon: (pmbus/ibm-cffps) max_power_out swap changes
(bsc#1012628).
- io_uring: kill fasync (bsc#1012628).
- sched: Always inline is_percpu_thread() (bsc#1012628).
- perf/core: fix userpage->time_enabled of inactive events
(bsc#1012628).
- scsi: qla2xxx: Fix excessive messages during device logout
(bsc#1012628).
- scsi: virtio_scsi: Fix spelling mistake "Unsupport" ->
"Unsupported" (bsc#1012628).
- scsi: ses: Fix unsigned comparison with less than zero
(bsc#1012628).
- drm/amdgpu: fix gart.bo pin_count leak (bsc#1012628).
- net: sun: SUNVNET_COMMON should depend on INET (bsc#1012628).
- vboxfs: fix broken legacy mount signature checking
(bsc#1012628).
- net: bgmac-platform: handle mac-address deferral (bsc#1012628).
- mac80211: check return value of rhashtable_init (bsc#1012628).
- net: prevent user from passing illegal stab size (bsc#1012628).
- hwmon: (ltc2947) Properly handle errors when looking for the
external clock (bsc#1012628).
- m68k: Handle arrivals of multiple signals correctly
(bsc#1012628).
- pinctrl: qcom: sc7280: Add PM suspend callbacks (bsc#1012628).
- mac80211: Drop frames from invalid MAC address in ad-hoc mode
(bsc#1012628).
- netfilter: nf_nat_masquerade: defer conntrack walk to work queue
(bsc#1012628).
- netfilter: nf_nat_masquerade: make async masq_inet6_event
handling generic (bsc#1012628).
- KVM: arm64: nvhe: Fix missing FORCE for hyp-reloc.S build rule
(bsc#1012628).
- ASoC: SOF: loader: release_firmware() on load failure to avoid
batching (bsc#1012628).
- HID: wacom: Add new Intuos BT (CTL-4100WL/CTL-6100WL) device
IDs (bsc#1012628).
- netfilter: ip6_tables: zero-initialize fragment offset
(bsc#1012628).
- HID: apple: Fix logical maximum and usage maximum of Magic
Keyboard JIS (bsc#1012628).
- ALSA: usb-audio: Unify mixer resume and reset_resume procedure
(bsc#1012628).
- ALSA: oxfw: fix transmission method for Loud models based on
OXFW971 (bsc#1012628).
- ASoC: Intel: sof_sdw: tag SoundWire BEs as non-atomic
(bsc#1012628).
- ext4: correct the error path of ext4_write_inline_data_end()
(bsc#1012628).
- ext4: check and update i_disksize properly (bsc#1012628).
- commit ab3ca44
- kernel-spec-macros: Since rpm 4.17 %verbose is unusable (bsc#1191229).
The semantic changed in an incompatible way so invoking the macro now
causes a build failure.
- commit 3e55f55
- Linux 5.14.12 (bsc#1012628).
- dsa: tag_dsa: Fix mask for trunked packets (bsc#1012628).
- x86/hpet: Use another crystalball to evaluate HPET usability
(bsc#1012628).
- x86/entry: Clear X86_FEATURE_SMAP when CONFIG_X86_SMAP=n
(bsc#1012628).
- x86/entry: Correct reference to intended CONFIG_64_BIT
(bsc#1012628).
- x86/fpu: Restore the masking out of reserved MXCSR bits
(bsc#1012628).
- x86/sev: Return an error on a returned non-zero
SW_EXITINFO1[31:0] (bsc#1012628).
- x86/Kconfig: Correct reference to MWINCHIP3D (bsc#1012628).
- x86/platform/olpc: Correct ifdef symbol to intended
CONFIG_OLPC_XO15_SCI (bsc#1012628).
- pseries/eeh: Fix the kdump kernel crash during eeh_pseries_init
(bsc#1012628).
- powerpc/32s: Fix kuap_kernel_restore() (bsc#1012628).
- powerpc/64s: Fix unrecoverable MCE calling async handler from
NMI (bsc#1012628).
- powerpc/traps: do not enable irqs in _exception (bsc#1012628).
- powerpc/64s: fix program check interrupt emergency stack path
(bsc#1012628).
- powerpc/bpf ppc32: Fix BPF_SUB when imm == 0x80000000
(bsc#1012628).
- powerpc/bpf ppc32: Do not emit zero extend instruction for
64-bit BPF_END (bsc#1012628).
- powerpc/bpf ppc32: Fix JMP32_JSET_K (bsc#1012628).
- powerpc/bpf ppc32: Fix ALU32 BPF_ARSH operation (bsc#1012628).
- powerpc/bpf: Fix BPF_SUB when imm == 0x80000000 (bsc#1012628).
- powerpc/bpf: Fix BPF_MOD when imm == 1 (bsc#1012628).
- objtool: Make .altinstructions section entry size consistent
(bsc#1012628).
- objtool: Remove reloc symbol type checks in get_alt_entry()
(bsc#1012628).
- scsi: iscsi: Fix iscsi_task use after free (bsc#1012628).
- RISC-V: Include clone3() on rv32 (bsc#1012628).
- i2c: mlxcpld: Modify register setting for 400KHz frequency
(bsc#1012628).
- i2c: mlxcpld: Fix criteria for frequency setting (bsc#1012628).
- bpf, s390: Fix potential memory leak about jit_data
(bsc#1012628).
- riscv/vdso: make arch_setup_additional_pages wait for mmap_sem
for write killable (bsc#1012628).
- riscv/vdso: Move vdso data page up front (bsc#1012628).
- riscv/vdso: Refactor asm/vdso.h (bsc#1012628).
- RISC-V: Fix VDSO build for !MMU (bsc#1012628).
- riscv: explicitly use symbol offsets for VDSO (bsc#1012628).
- i2c: mediatek: Add OFFSET_EXT_CONF setting back (bsc#1012628).
- i2c: acpi: fix resource leak in reconfiguration device addition
(bsc#1012628).
- powerpc/iommu: Report the correct most efficient DMA mask for
PCI devices (bsc#1012628).
- net: prefer socket bound to interface when not in VRF
(bsc#1012628).
- iavf: fix double unlock of crit_lock (bsc#1012628).
- i40e: Fix freeing of uninitialized misc IRQ vector
(bsc#1012628).
- i40e: fix endless loop under rtnl (bsc#1012628).
- gve: report 64bit tx_bytes counter from
gve_handle_report_stats() (bsc#1012628).
- gve: fix gve_get_stats() (bsc#1012628).
- rtnetlink: fix if_nlmsg_stats_size() under estimation
(bsc#1012628).
- gve: Properly handle errors in gve_assign_qpl (bsc#1012628).
- gve: Avoid freeing NULL pointer (bsc#1012628).
- gve: Correct available tx qpl check (bsc#1012628).
- net: stmmac: trigger PCS EEE to turn off on link down
(bsc#1012628).
- net: pcs: xpcs: fix incorrect steps on disable EEE
(bsc#1012628).
- drm/nouveau/debugfs: fix file release memory leak (bsc#1012628).
- drm/nouveau/kms/nv50-: fix file release memory leak
(bsc#1012628).
- drm/nouveau: avoid a use-after-free when BO init fails
(bsc#1012628).
- video: fbdev: gbefb: Only instantiate device when built for IP32
(bsc#1012628).
- drm/panel: abt-y030xx067a: yellow tint fix (bsc#1012628).
- drm/nouveau/fifo/ga102: initialise chid on return from channel
creation (bsc#1012628).
- drm/sun4i: dw-hdmi: Fix HDMI PHY clock setup (bsc#1012628).
- bus: ti-sysc: Use CLKDM_NOAUTO for dra7 dcan1 for errata i893
(bsc#1012628).
- perf jevents: Free the sys_event_tables list after processing
entries (bsc#1012628).
- drm/amdgpu: handle the case of pci_channel_io_frozen only in
amdgpu_pci_resume (bsc#1012628).
- drm/amdkfd: fix a potential ttm->sg memory leak (bsc#1012628).
- ARM: defconfig: gemini: Restore framebuffer (bsc#1012628).
- netlink: annotate data races around nlk->bound (bsc#1012628).
- net: pcs: xpcs: fix incorrect CL37 AN sequence (bsc#1012628).
- net: sfp: Fix typo in state machine debug string (bsc#1012628).
- net/sched: sch_taprio: properly cancel timer from
taprio_destroy() (bsc#1012628).
- net: bridge: fix under estimation in br_get_linkxstats_size()
(bsc#1012628).
- net: bridge: use nla_total_size_64bit() in
br_get_linkxstats_size() (bsc#1012628).
- afs: Fix afs_launder_page() to set correct start file position
(bsc#1012628).
- netfs: Fix READ/WRITE confusion when calling iov_iter_xarray()
(bsc#1012628).
- drm/i915/bdb: Fix version check (bsc#1012628).
- drm/i915/tc: Fix TypeC port init/resume time sanitization
(bsc#1012628).
- drm/i915/jsl: Add W/A 1409054076 for JSL (bsc#1012628).
- drm/i915/audio: Use BIOS provided value for RKL HDA link
(bsc#1012628).
- ARM: imx6: disable the GIC CPU interface before calling
stby-poweroff sequence (bsc#1012628).
- dt-bindings: drm/bridge: ti-sn65dsi86: Fix reg value
(bsc#1012628).
- arm64: dts: ls1028a: fix eSDHC2 node (bsc#1012628).
- arm64: dts: imx8mm-kontron-n801x-som: do not allow to switch
off buck2 (bsc#1012628).
- arm64: dts: imx8: change the spi-nor tx (bsc#1012628).
- ARM: dts: imx: change the spi-nor tx (bsc#1012628).
- ptp_pch: Load module automatically if ID matches (bsc#1012628).
- powerpc/fsl/dts: Fix phy-connection-type for fm1mac3
(bsc#1012628).
- netfilter: nf_tables: honor NLM_F_CREATE and NLM_F_EXCL in
event notification (bsc#1012628).
- MIPS: Revert "add support for buggy MT7621S core detection"
(bsc#1012628).
- net: stmmac: dwmac-rk: Fix ethernet on rk3399 based devices
(bsc#1012628).
- net: mscc: ocelot: fix VCAP filters remaining active after
being deleted (bsc#1012628).
- net_sched: fix NULL deref in fifo_set_limit() (bsc#1012628).
- libbpf: Fix memory leak in strset (bsc#1012628).
- phy: mdio: fix memory leak (bsc#1012628).
- libbpf: Fix segfault in light skeleton for objects without BTF
(bsc#1012628).
- net/mlx5e: Fix the presented RQ index in PTP stats
(bsc#1012628).
- net/mlx5: Fix setting number of EQs of SFs (bsc#1012628).
- net/mlx5: Fix length of irq_index in chars (bsc#1012628).
- net/mlx5: Avoid generating event after PPS out in Real time mode
(bsc#1012628).
- net/mlx5: Force round second at 1PPS out start time
(bsc#1012628).
- net/mlx5: E-Switch, Fix double allocation of acl flow counter
(bsc#1012628).
- net/mlx5e: Keep the value for maximum number of channels in-sync
(bsc#1012628).
- net/mlx5e: IPSEC RX, enable checksum complete (bsc#1012628).
- bpf: Fix integer overflow in prealloc_elems_and_freelist()
(bsc#1012628).
- soc: ti: omap-prm: Fix external abort for am335x pruss
(bsc#1012628).
- bpf, arm: Fix register clobbering in div/mod implementation
(bsc#1012628).
- netfilter: nf_tables: reverse order in rule replacement
expansion (bsc#1012628).
- netfilter: nf_tables: add position handle in event notification
(bsc#1012628).
- netfilter: conntrack: fix boot failure with
nf_conntrack.enable_hooks=1 (bsc#1012628).
- iwlwifi: pcie: add configuration of a Wi-Fi adapter on Dell
XPS 15 (bsc#1012628).
- xtensa: call irqchip_init only when CONFIG_USE_OF is selected
(bsc#1012628).
- xtensa: use CONFIG_USE_OF instead of CONFIG_OF (bsc#1012628).
- arm64: dts: qcom: pm8150: use qcom,pm8998-pon binding
(bsc#1012628).
- ath5k: fix building with LEDS=m (bsc#1012628).
- PCI: hv: Fix sleep while in non-sleep context when removing
child devices from the bus (bsc#1012628).
- ARM: dts: imx6qdl-pico: Fix Ethernet support (bsc#1012628).
- ARM: dts: imx: Fix USB host power regulator polarity on M53Menlo
(bsc#1012628).
- ARM: dts: imx: Add missing pinctrl-names for panel on M53Menlo
(bsc#1012628).
- soc: qcom: mdt_loader: Drop PT_LOAD check on hash segment
(bsc#1012628).
- iwlwifi: mvm: Fix possible NULL dereference (bsc#1012628).
- ARM: at91: pm: do not panic if ram controllers are not enabled
(bsc#1012628).
- Revert "arm64: dts: qcom: sc7280: Fixup the cpufreq node"
(bsc#1012628).
- ARM: dts: qcom: apq8064: Use 27MHz PXO clock as DSI PLL
reference (bsc#1012628).
- soc: qcom: socinfo: Fixed argument passed to platform_set_data()
(bsc#1012628).
- bus: ti-sysc: Add break in switch statement in sysc_init_soc()
(bsc#1012628).
- riscv: Flush current cpu icache before other cpus (bsc#1012628).
- scsi: ufs: core: Fix task management completion (bsc#1012628).
- ARM: dts: qcom: apq8064: use compatible which contains chipid
(bsc#1012628).
- ARM: dts: imx6dl-yapp4: Fix lp5562 LED driver probe
(bsc#1012628).
- ARM: dts: omap3430-sdp: Fix NAND device node (bsc#1012628).
- xen/balloon: fix cancelled balloon action (bsc#1012628).
- SUNRPC: fix sign error causing rpcsec_gss drops (bsc#1012628).
- nfsd4: Handle the NFSv4 READDIR 'dircount' hint being zero
(bsc#1012628).
- nfsd: fix error handling of register_pernet_subsys() in
init_nfsd() (bsc#1012628).
- ovl: fix IOCB_DIRECT if underlying fs doesn't support direct IO
(bsc#1012628).
- ovl: fix missing negative dentry check in ovl_rename()
(bsc#1012628).
- fbdev: simplefb: fix Kconfig dependencies (bsc#1012628).
- Update config files.
- mmc: sdhci-of-at91: replace while loop with read_poll_timeout
(bsc#1012628).
- mmc: sdhci-of-at91: wait for calibration done before proceed
(bsc#1012628).
- mmc: meson-gx: do not use memcpy_to/fromio for dram-access-quirk
(bsc#1012628).
- xen/privcmd: fix error handling in mmap-resource processing
(bsc#1012628).
- drm/i915: Extend the async flip VT-d w/a to skl/bxt
(bsc#1012628).
- drm/i915: Fix runtime pm handling in i915_gem_shrink
(bsc#1012628).
- drm/amd/display: Fix DCN3 B0 DP Alt Mapping (bsc#1012628).
- drm/amd/display: Fix detection of 4 lane for DPALT
(bsc#1012628).
- drm/amd/display: Limit display scaling to up to 4k for DCN 3.1
(bsc#1012628).
- drm/nouveau/ga102-: support ttm buffer moves via copy engine
(bsc#1012628).
- drm/nouveau/kms/tu102-: delay enabling cursor until after
assign_windows (bsc#1012628).
- drm/amdgpu: During s0ix don't wait to signal GFXOFF
(bsc#1012628).
- drm/amd/display: USB4 bring up set correct address
(bsc#1012628).
- drm/amd/display: Fix B0 USB-C DP Alt mode (bsc#1012628).
- usb: typec: tipd: Remove dependency on "connector" child fwnode
(bsc#1012628).
- usb: typec: tcpm: handle SRC_STARTUP state if cc changes
(bsc#1012628).
- usb: typec: tcpci: don't handle vSafe0V event if it's not
enabled (bsc#1012628).
- USB: cdc-acm: fix break reporting (bsc#1012628).
- USB: cdc-acm: fix racy tty buffer accesses (bsc#1012628).
- usb: gadget: f_uac2: fixed EP-IN wMaxPacketSize (bsc#1012628).
- usb: chipidea: ci_hdrc_imx: Also search for 'phys' phandle
(bsc#1012628).
- usb: cdc-wdm: Fix check for WWAN (bsc#1012628).
- Partially revert "usb: Kconfig: using select for USB_COMMON
dependency" (bsc#1012628).
- Update config files.
- commit 7246625
- rtw89: add Realtek 802.11ax driver (bsc#1191321).
- commit 4c399ab
- Enable CONFIG_RTW88_DEBUG and CONFIG_RTW89_DEBUG on debug flavors (bsc#1191321)
- commit a76143b
==== libguestfs ====
Subpackages: guestfs-data guestfs-tools guestfs-winsupport libguestfs0 perl-Sys-Guestfs python3-libguestfs
- Fix build errors in Factory
* Alert ocaml_deprecated_cli: Setting a warning with a sequence
of lowercase or uppercase letters, like 'CDEFLMPSUVYZX', is
deprecated.
63c9cd93-m4-guestfs-ocaml.m4-Fix-deprecated-warning-format.patch
* Error (warning 6 [labels-omitted]): label verbose was omitted
in the application of this function.
a4930f5f-customize-Suppress-OCaml-warning.patch
- Update spec file licenses to GPL-2.0-or-later
==== libyui ====
Version update (4.2.19 -> 4.2.20)
- Use the C++17 standard in the *-pkg plugins (libzypp uses that
standard by default) (related to bsc#1191829)
- 4.2.20
==== libyui-ncurses ====
Version update (4.2.19 -> 4.2.20)
- Use the C++17 standard in the *-pkg plugins (libzypp uses that
standard by default) (related to bsc#1191829)
- 4.2.20
==== libyui-ncurses-pkg ====
Version update (4.2.19 -> 4.2.20)
- Use the C++17 standard in the *-pkg plugins (libzypp uses that
standard by default) (related to bsc#1191829)
- 4.2.20
==== libyui-qt ====
Version update (4.2.19 -> 4.2.20)
- Use the C++17 standard in the *-pkg plugins (libzypp uses that
standard by default) (related to bsc#1191829)
- 4.2.20
==== libyui-qt-graph ====
Version update (4.2.19 -> 4.2.20)
- Use the C++17 standard in the *-pkg plugins (libzypp uses that
standard by default) (related to bsc#1191829)
- 4.2.20
==== libyui-qt-pkg ====
Version update (4.2.19 -> 4.2.20)
- Use the C++17 standard in the *-pkg plugins (libzypp uses that
standard by default) (related to bsc#1191829)
- 4.2.20
==== logrotate ====
- Add patch:
* logrotate-dont_warn_on_size=_syntax.patch (boo#1191816)
==== mpg123 ====
Version update (1.29.1 -> 1.29.2)
Subpackages: libmpg123-0 mpg123-openal
- Update to version 1.29.2
* libmpg123: Fix non-live-decoder safeguard for
mpg123_framebyframe_decode() (was a no-op in practice).
==== ncurses ====
Version update (6.2.20211002 -> 6.3.20211021)
Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen
- Update to ncurses 6.3 (patch 20211021)
+ update release notes
+ add "ncu2openbsd" script, to illustrate how to update an OpenBSD
system to use a current ncurses release.
- Add upstream keyring to verify source signatures of both ncurses
and tack tar ball with their ASC (armored ASCii signature) counterpart
- Add ncurses patch 20211018
+ check for screen size-change in scr_init() and scr_restore(), in case
a screen dump does not match the current screen dimensions (report by
Frank Tkalcevic).
- Add ncurses patch 20211017
+ amend change for pkg-config to account for "none" being returned in
the libdir-path result rather than "no" (report by Gabriele Balducci).
- Add ncurses patch 20211016
+ build-fix for pmake with libtool.
+ improve make-tar.sh scripts, adding COPYING to tar file, and clean up
shellcheck warnings.
+ add link for "reset6" manpage in test-package ncurses6-doc
+ revise configure option --with-pkg-config-libdir, using the actual
search path from pkg-config or pkgconf using the output from --debug
(report by Pascal Pignard).
+ freeze ABI in ".map" files.
- Correct offsets of patch ncurses-6.2.dif
- Add ncurses patch 20211009
+ implement "+m" option in tabs program.
+ fill in some details for infoton -TD
+ fix spelling/consistency in several descriptions -TD
+ use vt420+lrmm in vt420 -TD
+ modify save_tty_settings() to avoid opening /dev/tty for cases other
than reset/init, e.g., for clear.
+ modify output of "toe -as" to show first description found rather
than the last.
+ improve tic checks for number of parameters of smglp, smgrp, smgtp,
and smgbp (cf: 20020525).
+ correct off-by-one comparison in last_char(), which did not allow
special case of ":" in a terminfo description field (cf: 20120407).
+ remove check in tic that assumes that none or both parameterized and
non-parameterized margin-setting capabilities are present
(cf: 20101002).
==== ocfs2-tools ====
- Fix mounted.ocfs2 output when some devices are not ready (bsc#1191810)
+ fixed-mounted.ocfs2-output-when-some-devices-are-Not.patch
+ update-mounted.ocfs2-mounted.c.patch
==== parted ====
Subpackages: libparted0
- BuildRequire python3-base: Fix execution of test suite. Otherwise
we fail with
./t0282-gpt-move-backup.sh: /usr/bin/python3: bad interpreter: No
such file or directory.
- run checks during build
- added patches:
tests-disable.patch
==== pcre2 ====
Version update (10.37 -> 10.38)
Subpackages: libpcre2-16-0 libpcre2-32-0 libpcre2-8-0
- pcre2 10.38:
* Following Perl's lead, \K is now locked out in lookaround
assertions by default, but an option is provided to re-enable
the previous behaviour
==== perl-Mojolicious ====
Version update (9.21 -> 9.22)
- updated to 9.22
see /usr/share/doc/packages/perl-Mojolicious/Changes
9.22 2021-10-16
- Added a referer method to Mojo::Headers, as an alias for the referrer method.
- Fixed response status log message to use the "trace" log level instead of "debug".
==== php7 ====
Version update (7.4.24 -> 7.4.25)
Subpackages: php7-cli php7-ctype php7-dom php7-gd php7-gettext php7-iconv php7-json php7-mbstring php7-mysql php7-openssl php7-pdo php7-sqlite php7-tokenizer php7-xmlreader php7-xmlwriter
- updated to 7.4.25: This is a security release (CVE-2021-21703)
which also contains several bug fixes.
See https://www.php.net/ChangeLog-7.php#7.4.25
==== plasma5-openSUSE ====
Subpackages: plasma5-defaults-openSUSE plasma5-theme-openSUSE plasma5-workspace-branding-openSUSE sddm-theme-openSUSE
- Update to 5.23.2
==== polkit ====
Subpackages: typelib-1_0-Polkit-1_0
- fork libpolkit0 package into libpolkit-agent-1-0 and libpolkit-gobject-1-0
as mandated. bsc#1191781
==== postfix ====
Subpackages: postfix-doc
- config.postfix not updatet after lmdb switch
(bsc#1190945)
Adapt config.postfix
- postfix master.cf: to include "submissions" service
(bsc#1189684)
Adapt master.cf patch
- postfix fails with glibc 2.34
Define HAS_CLOSEFROM
(bsc#1189101)
add patch
- postfix-3.6.2-glibc-234-build-fix.patch
- fix config.postfix (follow up of bsc#1188477)
- Syntax error in config.postfix
(bsc#1188477)
- Update to 3.6.2
* In Postfix 3.6, fixed a false "Result too large" (ERANGE) fatal
error in the compatibility_level parser, because there was no
'errno = 0' statement before an strtol() call.
* (problem introduced in Postfix 3.3) "Null pointer read" error
in the cleanup daemon when "header_from_format = standard" (the
default as of Postfix 3.3), and email was submitted with
/usr/sbin/sendmail without From: header, and an all-space full
name was specified in 1) the password file, 2) with "sendmail
- F", or 3) with the NAME environment variable. Found by Renaud
Metrich.
* (problem introduced in Postfix 2.4) False "too many reverse
jump" warnings in the showq daemon, because loop detection code
was comparing memory addresses instead of queue file names.
Reported by Mehmet Avcioglu.
* (problem introduced in 1999) The Postfix SMTP server was sending
all session transcripts to the error_notice_recipient (default:
postmaster), instead of sending transcripts of bounced mail to
the bounce_notice_recipient (default: postmaster). Reported by
Hans van Zijst.
* The texthash: map implementation broke tls_server_sni_maps,
because it did not support multi-file inputs. Reported by
Christopher Gurnee, who also found an instance of the missing
code in the "postmap -F" source code. File: util/dict_thash.c.
- spamd wants to start before mail-transfer-agent.target, but that target doesn't exist
(bsc#1066854)
- postfix-SUSE
* rework sysconfig.postfix, add
- POSTFIX_WITH_DKIM
- POSTFIX_DKIM_CONN
* rework config.postfix for main.cf
- with_dkim
- update postfix-main.cf.patch
* add OpenDKIM settings
- postfix-mysql
* add mysql_relay_recipient_maps.cf
- postfix-SUSE
* rework sysconfig.postfix, add
- POSTFIX_RELAY_RECIPIENTS
- POSTFIX_BACKUPMX
* add relay_recipients
* rework config.postfix for main.cf
- is_backupmx
- relay_recipient_maps
- Add now working CONFIG parameter to sysusers generator
- Remove unnecessary group line from postfix-vmail-user.conf
- Update to 3.6.1
* Bugfix (introduced: Postfix 2.11): the command "postmap
lmdb:/file/name" (create LMDB database from textfile) handled
duplicate input keys ungracefully, discarding entries stored
up to and including the duplicate key, and causing a double
free() call with lmdb versions 0.9.17 and later. Reported by
Adi Prasaja; double free() root cause analysis by Howard Chu.
* Typo (introduced: Postfix 3.4): silent_discard should be
silent-discard in BDAT_README.
- fix postfix-master.cf.patch
* set correct indentation (again) for options of
- submission (needs 3 spaces)
- smtps (needs 4 spaces)
to make config.postfix work nicely again
- Update to 3.6.0
- Major changes - internal protocol identification
Internal protocols have changed. You need to "postfix stop"
before updating, or before backing out to an earlier release,
otherwise long-running daemons (pickup, qmgr, verify, tlsproxy,
postscreen) may fail to communicate with the rest of Postfix,
causing mail delivery delays until Postfix is restarted.
For more see /usr/share/doc/packages/postfix/RELEASE_NOTES
- refreshed patches to apply cleanly again:
fix-postfix-script.patch
ipv6_disabled.patch
pointer_to_literals.patch
postfix-linux45.patch
postfix-main.cf.patch
postfix-master.cf.patch
postfix-no-md5.patch
postfix-ssl-release-buffers.patch
postfix-vda-v14-3.0.3.patch
set-default-db-type.patch
- (bsc#1186669) - postfix.service has "Requires=var-run.mount"
Remove bad requirements
- Update to 3.5.10 with security fixes:
* Missing null pointer checks (introduced in Postfix 3.4) after
an internal I/O error during the smtp(8) to tlsproxy(8) handshake.
Found by Coverity, reported by Jaroslav Skarvada. Based on a
fix by Viktor Dukhovni.
* Null pointer bug (introduced in Postfix 3.0) and memory leak
(introduced in Postfix 3.4) after an inline: table syntax error
in main.cf or master.cf. Found by Coverity, reported by Jaroslav
Skarvada. Based on a fix by Viktor Dukhovni.
* Incomplete null pointer check (introduced: Postfix 2.10) after
truncated HaProxy version 1 handshake message. Found by Coverity,
reported by Jaroslav Skarvada. Fix by Viktor Dukhovni.
* Missing null pointer check (introduced: Postfix alpha) after
null argv[0] value.
- (bsc#1183305) - config.postfix uses db as suffix for postmaps
Depending on DEF_DB_TYPE uses lmdb or db
- (bsc#1182833) - /usr/share/fillup-templates/sysconfig.postfix
still refers to /etc/services
Use getent to detect if smtps is already defined.
- (bsc#1180473) [Build 20201230] postfix has invalid default config
(bsc#1181381) [Build 130.3] openQA test fails in mta, mutt -
postfix broken: "queue file write error" and "error: unsupported
dictionary type: hash"
Export DEF_DB_TYPE before starting the perl script.
- bsc#1180473 - [Build 20201230] postfix has invalid default config
Fixing config.postfix and sysconfig.postfix
- Update to 3.5.9
* improves the reporting of DNSSEC problems that may affect
DANE security
- Only do the conversion from the hash/btree databases to lmdb when
the default database type changes from hash to lmdb and do not
stop and start the service (the old compiled databases can live
together with the new ones)
- convert-bdb-to-lmdb.sh
- Clean up the specfile
* Remove < 1330 conditional builds
* Use generated postfix-files instead of the obsolete one from
postfix-SUSE.tar.gz
* Use dynamicmaps.cf.d instead of modifying dynamicmaps.cf upon
(de)installation of optional mysql, pgsql and ldap subpackages
* Use default location for post-install, postfix-tls-script,
postfix-wrapper and postmulti-script
- Set lmdb to be the default db.
- Convert btree tables to lmdb too. Stop postfix before converting from
bdb to lmdb
- This package is without bdb support. That's why convert must be done
without any suse release condition.
o remove patch postfix-no-btree.patch
o add set-default-db-type.patch
- Set database type for address_verify_map and postscreen_cache_map
to lmdb (btree requires Berkeley DB)
o add postfix-no-btree.patch
- Set default database type to lmdb and fix update_postmaps script
- Use variable substition instead of sed to remove .db suffix and
substitute hash: for lmdb: in /etc/postfix/master.cf as well.
Check before substitution if there is something to do (to keep
rpmcheck happy).
- bsc#1176650 L3: What is regularly triggering the "fillup"
command and changing modify-time of /etc/sysconfig/postfix?
o Remove miss placed fillup_only call from %verifyscript
- Remove Berkeley DB dependency (JIRA#SLE-12191)
The pacakges postfix is build without Berkely DB support.
lmdb will be used instead of BDB.
The pacakges postfix-bdb is build with Berkely DB support.
o add patch for main.cf for postfix-bdb package
postfix-bdb-main.cf.patch
- Update to 3.5.8
* The Postfix SMTP client inserted <CR><LF> into message headers longer
than $line_length_limit (default: 2048), causing all subsequent header
content to become message body content.
* The postscreen daemon did not save a copy of the
postscreen_dnsbl_reply_map lookup result. This has no effect when the
recommended texthash: look table is used, but it could result in stale
data with other lookup tables.
* After deleting a recipient with a Milter, the Postfix recipient
duplicate filter was not updated; the filter suppressed requests
to add the recipient back.
* Memory leak: the static: maps did not free their casefolding buffer.
* With "smtpd_tls_wrappermode = yes", the smtps service was waiting for a
TLS handshake, after processing an XCLIENT command.
* The smtp_sasl_mechanism_filter implementation ignored table lookup
errors, treating them as 'not found'.
* The code that looks for Delivered-To: headers ignored headers longer
than $line_length_limit (default: 2048).
- Update to 3.5.7
* Fixed random certificate verification failures with
"smtp_tls_connection_reuse = yes", because tlsproxy(8) was using
the wrong global TLS context for connections that use DANE or
non-DANE trust anchors.
- Move ldap into an own sub-package like all other databases
- Move manual pages to correct sub-package
- Use sysusers.d to create system accounts
- Remove wrong %config for systemd directory content
- Use the correct signature file for source verification
- Rename postfix-3.5.6.tar.gz.sig to postfix-3.5.6.tar.gz.asc (to
prevent confusion, as the signature file from upstream with .sig
extension is incompatible with the build service)
- Update to 3.5.6 with following fixes:
* Workaround for unexpected TLS interoperability problems when Postfix
runs on OS distributions with system-wide OpenSSL configurations.
* Memory leaks in the Postfix TLS library, the largest one
involving multiple kBytes per peer certificate.
- Add source verification (add postfix.keyring)
- Use systemd_ordering instead of systemd_require.
- Move /etc/postfix/system to /usr/lib/postfix/systemd [bsc#1173688]
- Drop /var/adm/SuSEconfig from %post, it does nothing.
- Rename postfix-SuSE to postfix-SUSE
- Delete postfix-SUSE/README.SuSE, company name spelled wrong,
completly outdated and not used.
- Delete postfix-SUSE/SPAMASSASSIN+POSTFIX.SuSE, company name
spelled wrong, outdated and not used.
- sysconfig.mail-postfix: Fix description of MAIL_CREATE_CONFIG,
SuSEconfig is gone since ages.
- update_chroot.systemd: Remove advice to run SuSEconfig.
- Remove rc.postfix, not used, outdated.
- mkpostfixcert: Remove advice to run SuSEconfig.
- Update to 3.5.4:
* The connection_reuse attribute in smtp_tls_policy_maps always
resulted in an "invalid attribute name" error.
* SMTP over TLS connection reuse always failed for Postfix SMTP
client configurations that specify explicit trust anchors (remote
SMTP server certificates or public keys).
* The Postfix SMTP client's DANE implementation would always send
an SNI option with the name in a destination's MX record, even
if the MX record pointed to a CNAME record. MX records that
point to CNAME records are not conformant with RFC5321, and so
are rare.
Based on the DANE survey of ~2 million hosts it was found that
with the corrected SMTP client behavior, sending SNI with the
CNAME-expanded name, the SMTP server would not send a different
certificate. This fix should therefore be safe.
- Update to 3.5.3:
* TLS handshake failure in the Postfix SMTP server during SNI
processing, after the server-side TLS engine sent a TLSv1.3
HelloRetryRequest (HRR) to a remote SMTP client.
* The command "postfix tls deploy-server-cert" did not handle a
missing optional argument. This bug was introduced in Postfix
3.1.
- Update to 3.5.2:
* A TLS error for a database client caused a false 'lost connection'
error for an SMTP over TLS session in the same Postfix process.
This bug was introduced with Postfix 2.2.
* The same bug existed in the tlsproxy(8) daemon, where a TLS
error for one TLS session could cause a false 'lost connection'
error for a concurrent TLS session in the same process. This
bug was introduced with Postfix 2.8.
* The Postfix build now disables DANE support on Linux systems
with libc-musl such as Alpine, because libc-musl provides no
indication whether DNS responses are authentic. This broke DANE
support without a clear explanation.
* Due to implementation changes in the ICU library, some Postfix
daemons reported file access errrors (U_FILE_ACCESS_ERROR) after
chroot(). This was fixed by initializing the ICU library before
making the chroot() call.
* Minor code changes to silence a compiler that special-cases
string literals.
* Segfault (null pointer) in the tlsproxy(8) client role when the
server role was disabled. This typically happened on systems
that do not receive mail, after configuring connection reuse
for outbound SMTP over TLS.
* The date portion of the maillog_file_rotate_suffix default value
used the minute (%M) instead of the month (%m).
- boo#1106004 fix incorrect locations for files in postfix-files
- Dropped deprecated-RES_INSECURE1.patch to make DNSSEC-secured
lookups and DANE mail transport work again
- Update to 3.5.1:
* Support for the haproxy v2 protocol. The Postfix implementation
supports TCP over IPv4 and IPv6, as well as non-proxied
connections; the latter are typically used for heartbeat tests.
* Support to force-expire email messages. This introduces new
postsuper(1) command-line options to request expiration, and
additional information in mailq(1) or postqueue(1) output.
* The Postfix SMTP and LMTP client support a list of nexthop
destinations separated by comma or whitespace. These destinations
will be tried in the specified order.
* Incompatible changes:
* Logging: Postfix daemon processes now log the from= and to=
addresses in external (quoted) form in non-debug logging (info,
warning, etc.). This means that when an address localpart
contains spaces or other special characters, the localpart will
be quoted, for example:
from=<"name with spaces"@example.com>
Specify "info_log_address_format = internal" for backwards compatibility.
* Postfix now normalizes IP addresses received with XCLIENT,
XFORWARD, or with the HaProxy protocol, for consistency with
direct connections to Postfix. This may change the appearance
of logging, and the way that check_client_access will match
subnets of an IPv6 address.
- Update to 3.4.10:
* Bug (introduced: Postfix 2.3): Postfix Milter client state
was not properly reset after one Milter in a multi-Milter
configuration failed during MAIL FROM, resulting in a Postfix
Milter client panic during the next MAIL FROM command in the
same SMTP session.
- bsc#1162891 server:mail/postfix: cond_slp bug on TW after
moving /etc/services to /usr/etc/services
- bsc#1160413 postfix fails with -fno-common
- Update to 3.4.9:
* Bug (introduced: Postfix 3.1): smtp_dns_resolver_options were
broken while adding support for negative DNS response caching
in postscreen. Postfix was inadvertently changed to call
res_query() instead of res_search().
* Bug (introduced: Postfix 2.5): Postfix ignored the CONNECT macro
overrides from a Milter application. Postfix now evaluates the
Milter macros for an SMTP CONNECT event after the Postfix-to-Milter
connection is negotiated.
* Bug (introduced: Postfix 3.0): sanitize (remote) server responses
before storing them in the verify database, to avoid Postfix
warnings about malformed UTF8. Found during code maintenance.
- Update to 3.4.8:
* Fix for an Exim interoperability problem when postscreen after-220
checks are enabled. Bug introduced in Postfix 3.4: the code
that detected "PIPELINING after BDAT" looked at the wrong
variable. The warning now says "BDAT without valid RCPT", and
the error is no longer treated as a command PIPELINING error,
thus allowing mail to be delivered. Meanwhile, Exim has been
fixed to stop sending BDAT commands when postscreen rejects all
RCPT commands.
* Usability bug, introduced in Postfix 3.4: the parser for
key/certificate chain files rejected inputs that contain an EC
PARAMETERS object. While this is technically correct (the
documentation says what types are allowed) this is surprising
behavior because the legacy cert/key parameters will accept
such inputs. For now, the parser skips object types that it
does not know about for usability, and logs a warning because
ignoring inputs is not kosher.
* Bug introduced in Postfix 2.8: don't gratuitously enable all
after-220 tests when only one such test is enabled. This made
selective tests impossible with 'good' clients. This will be
fixed in older Postfix versions at some later time.
- Backport deprecated-RES_INSECURE1.patch in order to fix
boo#1149705.
- Update to 3.4.7:
* Robustness: the tlsproxy(8) daemon could go into a loop, logging
a flood of error messages. Problem reported by Andreas Schulze
after enabling SMTP/TLS connection reuse.
* Workaround: OpenSSL changed an SSL_Shutdown() non-error result
value into an error result value, causing logfile noise.
* Configuration: the new 'TLS fast shutdown' parameter name was
implemented incorrectly. The documentation said
"tls_fast_shutdown_enable", but the code said "tls_fast_shutdown".
This was fixed by changing the code, because no-one is expected
to override the default.
* Performance: workaround for poor TCP loopback performance on
LINUX, where getsockopt(..., TCP_MAXSEG, ...) reports a bogus
TCP maximal segment size that is 1/2 to 1/3 of the real MSS.
To avoid client-side Nagle delays or server-side delayed ACKs
caused by multiple smaller-than-MSS writes, Postfix chooses a
VSTREAM buffer size that is a small multiple of the reported
bogus MSS. This workaround increases the multiplier from 2x to
4x.
* Robustness: the Postfix Dovecot client could segfault (null
pointer read) or cause an SMTP server assertion to fail when
talking to a fake Dovecot server. The Postfix Dovecot client
now logs a proper error instead.
- bsc#1120757 L3: File Permissions->Paranoid can cause a system hang
Break loop if postfix has no permission in spool directory.
- add postfix-avoid-infinit-loop-if-no-permission.patch
- fix for boo#1144946
mydestination - missing default localhost
* update config.postfix
- bsc#1142881 - mkpostfixcert from Postfix still uses md
- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by
firewalld, see [1].
[1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html
- update example POSTFIX_BASIC_SPAM_PREVENTION: permit_mynetworks for
* POSTFIX_SMTPD_HELO_RESTRICTIONS
* POSTFIX_SMTPD_RECIPIENT_RESTRICTIONS
- fix for: Can't connect to local MySQL server through socket
'/run/mysql/mysql.sock'
* update config.postfix
* update update_chroot.systemd
- Update to 3.4.6:
* Workaround for implementations that hang Postfix while shutting
down a TLS session, until Postfix times out. With
"tls_fast_shutdown_enable = yes" (the default), Postfix no
longer waits for the TLS peer to respond to a TLS 'close'
request. This is recommended with TLSv1.0 and later.
* Fixed a too-strict censoring filter that broke multiline Milter
responses for header/body events. Problem report by Andreas
Thienemann.
* The code to reset Postfix SMTP server command counts was not
called after a HaProxy handshake failure, causing stale numbers
to be reported. Problem report by Joseph Ward.
* postconf(5) documentation: tlsext_padding is not a tls_ssl_options
feature.
* smtp(8) documentation: updated the BUGS section text about
Postfix support to reuse open TLS connections.
* Portability: added "#undef sun" to util/unix_dgram_connect.c.
- Ensure that postfix is member of all groups as before.
- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
shortcut the build queues by allowing usage of systemd-mini
- Drop the omc config fate#301838:
* it is obsolete since SLE11
- bsc#1104543 config.postfix does not start tlsmgr in master.cf
when using POSTFIX_SMTP_TLS_CLIENT="must". Applyed the proposed
patch.
- Update to 3.4.5:
Bugfix (introduced: Postfix 3.0): LMTP connections over
UNIX-domain sockets were cached but not reused, due to a
cache lookup key mismatch. Therefore, idle cached connections
could exhaust LMTP server resources, resulting in two-second
pauses between email deliveries. This problem was investigated
by Juliana Rodrigueiro. File: smtp/smtp_connect.c.
- Update to 3.4.4
o Incompatible changes
- The Postfix SMTP server announces CHUNKING (BDAT
command) by default. In the unlikely case that this breaks some
important remote SMTP client, disable the feature as follows:
/etc/postfix/main.cf:
[#] The logging alternative:
smtpd_discard_ehlo_keywords = chunking
[#] The non-logging alternative:
smtpd_discard_ehlo_keywords = chunking, silent_discard
- This introduces a new master.cf service 'postlog'
with type 'unix-dgram' that is used by the new postlogd(8) daemon.
Before backing out to an older Postfix version, edit the master.cf
file and remove the postlog entry.
- Postfix 3.4 drops support for OpenSSL 1.0.1
- To avoid performance loss under load, the
tlsproxy(8) daemon now requires a zero process limit in master.cf
(this setting is provided with the default master.cf file). By
default, a tlsproxy(8) process will retire after several hours.
- To set the tlsproxy process limit to zero:
postconf -F tlsproxy/unix/process_limit=0
postfix reload
o Major changes
- Postfix SMTP server support for RFC 3030 CHUNKING
(the BDAT command) without BINARYMIME, in both smtpd(8) and
postscreen(8). This has no effect on Milters, smtpd_mumble_restrictions,
and smtpd_proxy_filter. See BDAT_README for more.
- Support for logging to file or stdout, instead of using syslog.
- Logging to file solves a usability problem for MacOS, and
eliminates multiple problems with systemd-based systems.
- Logging to stdout is useful when Postfix runs in a container, as
it eliminates a syslogd dependency.
- Better handling of undocumented(!) Linux behavior
whether or not signals are delivered to a PID=1 process.
- Support for (key, list of filenames) in map source text.
Currently, this feature is used only by tls_server_sni_maps.
- Automatic retirement: dnsblog(8) and tlsproxy(8) process
will now voluntarily retire after after max_idle*max_use, or some
sane limit if either limit is disabled. Without this, a process
could stay busy for days or more.
- Postfix SMTP client support for multiple deliveries
per TLS-encrypted connection. This is primarily to improve mail
delivery performance for destinations that throttle clients when
they don't combine deliveries.
This feature is enabled with "smtp_tls_connection_reuse=yes" in
main.cf, or with "tls_connection_reuse=yes" in smtp_tls_policy_maps.
It supports all Postfix TLS security levels including dane and
dane-only.
- SNI support in the Postfix SMTP server, the
Postfix SMTP client, and in the tlsproxy(8) daemon (both server and
client roles). See the postconf(5) documentation for the new
tls_server_sni_maps and smtp_tls_servername parameters.
- Support for files that contain multiple (key, certificate, trust chain)
instances. This was required to implement
server-side SNI table lookups, but it also eliminates the need for
separate cert/key files for RSA, DSA, Elliptic Curve, and so on.
- Support for smtpd_reject_footer_maps (as well as the postscreen
variant postscreen_reject_footer_maps) for more informative reject
messages. This is indexed with the Postfix SMTP server response
text, and overrides the footer specified with smtpd_reject_footer.
One will want to use a pcre: or regexp: map with this.
o Bugfixes
- Andreas Schulze discovered that reject_multi_recipient_bounce
was producing false rejects with BDAT commands. This problem
already existed with Postfix 2.2 smtpd_end_of_data_restrictons.
Postfix 3.4.4 fixes both.
- postfix-linux45.patch: support also newer kernels -- pretend
we are still at kernel 3. Note that there are no conditionals for
LINUX3 or LINUX4. And LINUX5 was generated, but not tested in the
code which caused build failures.
- skip set -x and fix version update changes entry
- Update to 3.3.3
* When the master daemon runs with PID=1 (init mode), it will now
reap child processes from non-Postfix code running in the same
container, instead of terminating with a panic.
* Bugfix (introduced: postfix-2.11): with posttls-finger,
connections to unix-domain servers always resulted in "Failed
to establish session" even after a connection was established.
Jaroslav Skarva. File: posttls-finger/posttls-finger.c.
* Bugfix (introduced: Postfix 3.0): with smtputf8_enable=yes,
table lookups could casefold the search string when searching
a lookup table that does not use fixed-string keys (regexp,
pcre, tcp, etc.). Historically, Postfix would not case-fold
the search string with such tables. File: util/dict_utf8.c.
- PostrgeSQL's pg_config is meant for linking server extensions,
use libpq's pkg-config instead, if available.
This is needed to fix build with PostgreSQL 11.
- rework config.postfix
* disable commenting of smtpd_sasl_path/smtpd_sasl_type
no need to comment, cause it is set to default anyway
and 'uncommenting' would place it at end of file then
which is not wanted
- rework postfix-main.cf.patch
* disable virtual_alias_domains cause (default: $virtual_alias_maps)
- rework config.postfix
* disable PCONF of virtual_alias_domains
virtual_alias_maps will be set anyway to the correct value
* extend virtual_alias_maps with
- mysql_virtual_alias_domain_maps.cf
- mysql_virtual_alias_domain_catchall_maps.cf
- rework postfix-mysql, added
* mysql_virtual_alias_domain_maps.cf
* mysql_virtual_alias_domain_catchall_maps.cf
needed for reject_unverified_recipient
- binary hardening: link with full RELRO
- Update to 3.3.2
* Support for OpenSSL 1.1.1 and TLSv1.3.
* Bugfixes:
- smtpd_discard_ehlo_keywords could not disable "SMTPUTF8", because
some lookup table was using "EHLO_MASK_SMTPUTF8" instead.
- minor memory leak in DANE support when minting issuer certs.
- The Postfix build did not abort if the m4 command was not installed,
resulting in a broken postconf command.
- add POSTFIX_RELAY_DOMAINS
* more flexibility to add to relay_domains without breaking
config.postfix
* rework restriction examples in sysconf.postfix
based on postfix-buch.com (2. edtion by Hildebrandt, Koetter)
- disable weak cipher: RC4
after check with https://ssl-tools.net/mailservers
- update config.postfix
* don't reject mail from authenticated users even if
reject_unknown_client_hostname would match,
add permit_sasl_authenticated to all restrictions
requires smtpd_delay_reject = yes
- update postfix-main.cf.patch
* recover removed setting smtpd_sasl_path and smtpd_sasl_type,
set to default value
config.postfix will not 'enable' (remove #) var, but place
modified (enabled) var at end of file, far away from place
where it should be
- rebase patches
* fix-postfix-script.patch
* postfix-vda-v14-3.0.3.patch
* postfix-linux45.patch
* postfix-master.cf.patch
* pointer_to_literals.patch
* postfix-no-md5.patch
- bsc#1092939 - Postfixes postconf gives a lot of LDAP related warnings
o add m4 as buildrequires, as proposed.
- Add zlib-devel as buildrequires, previously included from
openssl-devel
- bsc#1087471 Unreleased Postfix update breaks SUSE Manager
o Removing setting smtpd_sasl_path and smtpd_sasl_type to empty
- Update to 3.3.1
* Postfix did not support running as a PID=1 process, which
complicated Postfix deployment in containers. The "postfix
start-fg" command will now run the Postfix master daemon as a
PID=1 process if possible. Thanks for inputs from Andreas
Schulze, Eray Aslan, and Viktor Dukhovni.
* Segfault in the postconf(1) command after it could not open a
Postfix database configuration file due to a file permission
error (dereferencing a null pointer). Reported by Andreas
Hasenack, fixed by Viktor Dukhovni.
* The luser_relay feature became a black hole, when the luser_relay
parameter was set to a non-existent local address (i.e. mail
disappeared silently). Reported by J?rgen Thomsen.
* Missing error propagation in the tlsproxy(8) daemon could result
in a segfault after TLS handshake error (dereferencing a
0xffff...ffff pointer). This daemon handles the TLS protocol
when a non-whitelisted client sends a STARTTLS command to
postscreen(8).
- remove pre-requirements on sysvinit(network) and sysvinit(syslog).
There seems to be no good reason for that other than blowing up
the dependencies (bsc#1092408).
- bsc#1071807 postfix-SuSE/config.postfix: only reload postfix
if the actual service is running. This prevents spurious
and irrelevant error messages in system logs.
- bsc#1082514 autoyast: postfix gets not set myhostname properly -
set to localhost
- Refresh spec-file via spec-cleaner and manual optinizations.
* Add %license macro.
* Set license to IPL-1.0 OR EPL-2.0.
- Update to 3.3.0
* http://cdn.postfix.johnriley.me/mirrors/postfix-release/official/postfix-3.…
* Dual license: in addition to the historical IBM Public License
1.0, Postfix is now also distributed with the more recent Eclipse
Public License 2.0. Recipients can choose to take the software
under the license of their choice. Those who are more comfortable
with the IPL can continue with that license.
* The postconf command now warns about unknown parameter names
in a Postfix database configuration file. As with other unknown
parameter names, these warnings can help to find typos early.
* Container support: Postfix 3.3 will run in the foreground with
"postfix start-fg". This requires that Postfix multi-instance
support is disabled (the default). To collect Postfix syslog
information on the container's host, mount the host's /dev/log
socket into the container, for example with "docker run -v
/dev/log:/dev/log ...other options...", and specify a distinct
Postfix syslog_name setting in the container (for example with
"postconf syslog_name=the-name-here").
* Milter support: applications can now send RET and ENVID parameters
in SMFIR_CHGFROM (change envelope sender) requests.
* Postfix-generated From: headers with 'full name' information
are now formatted as "From: name <address>" by default. Specify
"header_from_format = obsolete" to get the earlier form "From:
address (name)".
* Interoperability: when Postfix IPv6 and IPv4 support are both
enabled, the Postfix SMTP client will now relax MX preferences
and attempt to schedule similar numbers of IPv4 and IPv6
addresses. This works around mail delivery problems when a
destination announces lots of primary MX addresses on IPv6, but
is reachable only over IPv4 (or vice versa). The new behavior
is controlled with the smtp_balance_mx_inet_protocols parameter.
* Compatibility safety net: with compatibility_level < 1, the
Postfix SMTP server now warns for mail that would be blocked
by the Postfix 2.10 smtpd_relay_restrictions feature, without
blocking that mail. There still is a steady trickle of sites
that upgrade from an earlier Postfix version.
- bsc#1065411 Package postfix should require package system-user-nobody
- bsc#1080772 postfix smtpd throttle getting "hello" if no sasl auth
was configured
- Fix usage of fillup_only:-y is not a valid option to this macro.
- Replace references to /var/adm/fillup-templates with new
%_fillupdir macro (boo#1069468)
- Don't mark postfix.service as config file, this is no config
file.
- Some of the Requires(pre) are needed for post-install and at
runtime, fix the requires.
- update to 3.2.4
* DANE interoperability. Postfix builds with OpenSSL 1.0.0 or
1.0.1 failed to send email to some sites with "TLSA 2 X X" DNS
records associated with an intermediate CA certificate. Problem
report and initial fix by Erwan Legrand.
* Missing dynamicmaps support in the Postfix sendmail command.
This broke authorized_submit_users settings that use a
dynamically-loaded map type. Problem reported by Ulrich Zehl.
- bnc#1059512 L3: Postfix Problem
The applied changes breaks existing postfix configurations because
daemon_directory was not adapted to the new value.
- fix build for SLE
* nothing provides libnsl-devel
* add bcond_with libnsl
- bnc#1059512 L3: Postfix Problem
To manage multiple Postfix instances on a single host requires
that daemon_directory and shlib_directory is different to
avoid use of the shared directories also as per-instance directories.
For this reason daemon_directory was set to /usr/lib/postfix/bin/.
shlib_directory stands /usr/lib/postfix/.
- bnc#1016491 postfix raported to log "warning: group or other writable:"
on each symlink in config.
* Add fix-postfix-script.patch
- update to 3.2.3
* Extension propagation was broken with "recipient_delimiter = .".
This change reverts a change that was trying to be too clever.
* The postqueue command would abort with a panic message after it
experienced an output write error while listing the mail queue.
This change restores a write error check that was lost with the
Postfix 3.2 rewrite of the vbuf_print formatter.
* Restored sanity checks for dynamically-specified width and precision
in format strings (%*, %.*, and %*.*). These checks were lost with
the Postfix 3.2 rewrite of the vbuf_print formatter.
- Add libnsl-devel build requires for glibc obsoleting libnsl
- bnc#1045264 L3: postmap problem
* Applying proposed patch of leen.meyer(a)ziggo.nl in bnc#771811
- update to 3.2.2
* Security: Berkeley DB versions 2 and later try to read settings
from a file DB_CONFIG in the current directory. This undocumented
feature may introduce undisclosed vulnerabilities resulting in
privilege escalation with Postfix set-gid programs (postdrop,
postqueue) before they chdir to the Postfix queue directory,
and with the postmap and postalias commands depending on whether
the user's current directory is writable by other users. This
fix does not change Postfix behavior for Berkeley DB versions
< 3, but it does reduce postmap and postalias 'create' performance
with Berkeley DB versions 3.0 .. 4.6.
* The SMTP server receive_override_options were not restored at
the end of an SMTP session, after the options were modified by
an smtpd_milter_maps setting of "DISABLE". Milter support
remained disabled for the life time of the smtpd process.
* After the Postfix 3.2 address/domain table lookup overhaul, the
check_sender_access and check_recipient_access features ignored
a non-default parent_domain_matches_subdomains setting.
- revert changes of postfix-main.cf.patch from rev=261
* config.postfix will not 'enable' (remove #) var, but place
modified (enabled) var at end of file, far away from place
where it should be
* keep vars enabled but empty
- Some cleanups
* Fix SUSE postfix-files to avoid chown errors (anyway this file
seems to be obsolete)
* Avoid installing shared libraries twice
* Refresh patch postfix-linux45.patch
- update postfix-master.cf.patch
* recover lost (with 3.2.0 update) submission, smtps sections
* merge with upstream update
- update config.postfix
* update master.cf generation for submission
- rebase patches against 3.2.0
* pointer_to_literals.patch
* postfix-no-md5.patch
* postfix-ssl-release-buffers.patch
* postfix-vda-v14-3.0.3.patch
- Require system group mail
- Use mail group name instead of GID
- update to 3.2.0
- [Feature 20170128] Postfix 3.2 fixes the handling of address
extensions with email addresses that contain spaces. For
example, the virtual_alias_maps, canonical_maps, and
smtp_generic_maps features now correctly propagate an address
extension from "aa bb+ext"@example.com to "cc
dd+ext"@other.example, instead of producing broken output.
- [Feature 20161008] "PASS" and "STRIP" actions in
header/body_checks. "STRIP" is similar to "IGNORE" but also
logs the action, and "PASS" disables header, body, and Milter
inspection for the remainder of the message content.
Contributed by Hobbit.
- [Feature 20160330] The collate.pl script by Viktor Dukhovni for
grouping Postfix logfile records into "sessions" based on queue
ID and process ID information. It's in the auxiliary/collate
directory of the Postfix source tree.
- [Feature 20160527] Postfix 3.2 cidr tables support if/endif and
negation (by prepending ! to a pattern), just like regexp and
pcre tables. The primarily purpose is to improve readability
of complex tables. See the cidr_table(5) manpage for syntax
details.
- [Incompat 20160925] In the Postfix MySQL database client, the
default option_group value has changed to "client", to enable
reading of "client" option group settings in the MySQL options
file. This fixes a "not found" problem with Postfix queries
that contain UTF8-encoded non-ASCII text. Specify an empty
option_group value (option_group =) to get backwards-compatible
behavior.
- [Feature 20161217] Stored-procedure support for MySQL
databases. Contributed by John Fawcett. See mysql_table(5) for
instructions.
- [Feature 20170128] The postmap command, and the inline: and
texthash: maps now support spaces in left-hand field of the
lookup table "source text". Use double quotes (") around a
left-hand field that contains spaces, and use backslash (\) to
protect embedded quotes in a left-hand field. There is no
change in the processing of the right-hand field.
- [Feature 20160611] The Postfix SMTP server local IP address and
port are available in the policy delegation protocol (attribute
names: server_address, server_port), in the Milter protocol
(macro names: {daemon_addr}, {daemon_port}), and in the XCLIENT
protocol (attribute names: DESTADDR, DESTPORT).
- [Feature 20161024] smtpd_milter_maps support for per-client
Milter configuration that overrides smtpd_milters, and that has
the same syntax. A lookup result of "DISABLE" turns off Milter
support. See MILTER_README.html for details.
- [Feature 20160611] The Postfix SMTP server local IP address and
port are available in the policy delegation protocol (attribute
names: server_address, server_port), in the Milter protocol
(macro names: {daemon_addr}, {daemon_port}), and in the XCLIENT
protocol (attribute names: DESTADDR, DESTPORT).
- [Incompat 20170129] The postqueue command no longer forces all
message arrival times to be reported in UTC. To get the old
behavior, set TZ=UTC in main.cf:import_environment (this
override is not recommended, as it affects all Postfix utities
and daemons).
- [Incompat 20161227] For safety reasons, the sendmail -C option
must specify an authorized directory: the default configuration
directory, a directory that is listed in the default main.cf
file with alternate_config_directories or
multi_instance_directories, or the command must be invoked with
root privileges (UID 0 and EUID 0). This mitigates a recurring
problem with the PHP mail() function.
- [Feature 20160625] The Postfix SMTP server now passes remote
client and local server network address and port information to
the Cyrus SASL library. Build with ``make makefiles
"CCARGS=$CCARGS -DNO_IP_CYRUS_SASL_AUTH"'' for backwards
compatibility.
- [Feature 20161103] Postfix 3.2 disables the 'transitional'
compatibility between the IDNA2003 and IDNA2008 standards for
internationalized domain names (domain names beyond the limits
of US-ASCII).
This change makes Postfix behavior consistent with contemporary
web browsers. It affects the handling of some corner cases such
as German sz and Greek zeta. See
http://unicode.org/cldr/utility/idna.jsp for more examples.
Specify "enable_idna2003_compatibility = yes" to restore
historical behavior (but keep in mind that the rest of the
world may not make that same choice).
- [Feature 20160828] Fixes for deprecated OpenSSL 1.1.0 API
features, so that Postfix will build without depending on
backwards-compatibility support.
[Incompat 20161204] Postfix 3.2 removes tentative features that
were implemented before the DANE spec was finalized:
- Support for certificate usage PKIX-EE(1),
- The ability to disable digest agility (Postfix now behaves as
if "tls_dane_digest_agility = on"), and
- The ability to disable support for "TLSA 2 [01] [12]" records
that specify the digest of a trust anchor (Postfix now
behaves as if "tls_dane_trust_anchor_digest_enable = yes).
- [Feature 20161217] Postfix 3.2 enables elliptic curve
negotiation with OpenSSL >= 1.0.2. This changes the default
smtpd_tls_eecdh_grade setting to "auto", and introduces a new
parameter tls_eecdh_auto_curves with the names of curves that
may be negotiated.
The default tls_eecdh_auto_curves setting is determined at
compile time, and depends on the Postfix and OpenSSL versions.
At runtime, Postfix will skip curve names that aren't supported
by the OpenSSL library.
- [Feature 20160611] The Postfix SMTP server local IP address and
port are available in the policy delegation protocol (attribute
names: server_address, server_port), in the Milter protocol
(macro names: {daemon_addr}, {daemon_port}), and in the XCLIENT
protocol (attribute names: DESTADDR, DESTPORT).
- refresh postfix-master.cf.patch
- make sure that system users can be created in %pre
- Fix requires:
- shadow is needed for postfix-mysql pre-install section
- insserv is not needed if systemd is used
- update postfix-mysql
* update mysql_*.cf files
* update postfix-mysql.sql (INNODB, utf8)
- update postfix-main.cf.patch
* uncomment smtpd_sasl_path, smtpd_sasl_type
can be changed via POSTFIX_SMTP_AUTH_SERVICE=(cyrus,dovecot)
* add option for smtp_tls_policy_maps (commented)
- update postfix-master.cf.patch
* fix indentation of submission, smtps options for correct
enabling via config.postfix
- update config.postfix
* fix sync of CA certificates
* fix master.cf generation for submission, smtps
- rebase postfix-vda-v14-3.0.3.patch
- FATE#322322 Update postfix to version 3.X
Merging changes with SLES12-SP2
Removeved patches: add_missed_library.patch bnc#947707.diff dynamic_maps.patch postfix-db6.diff
postfix-opensslconfig.patch bnc#947519.diff dynamic_maps_pie.patch
postfix-post-install.patch
These are included in the new version of postfix
- Remove references to SuSEconfig.postfix from sysconfig docs.
(bsc#871575)
- bnc#947519 SuSEconfig.postfix should enforce umask 022
- bnc#947707 mail generated by Amavis being prevented from being re-adressed by /etc/postfix/virtual
- bnc#972346 /usr/sbin/SuSEconfig.postfix is wrong
- postfix-linux45.patch: handle Linux 4.x and Linux 5.x (used by aarch64)
(bsc#940289)
- update to 3.1.4
* The postscreen daemon did not merge the client test status information
for concurrent sessions from the same IP address.
* The Postfix SMTP server falsely rejected a sender address when validating
a sender address with "smtpd_reject_unlisted_recipient = yes" or with
"reject_unlisted_sender". Cause: the address validation code did not query sender_canonical_maps.
* The virtual delivery agent did not detect failure to skip to the end
of a mailbox file, so that mail would be delivered to the beginning of the file.
This could happen when a mailbox file was already larger than the virtual mailbox size limit.
* The postsuper logged an incorrect rename operation count after creating a missing directory.
* The Postfix SMTP server falsely rejected mail when a sender-dependent "error"
transport was configured. Cause: the SMTP server address validation code
was not updated when the sender_dependent_default_transport_maps feature
was introduced.
* The Postfix SMTP server falsely rejected an SMTPUTF8 sender address, when "smtpd_delay_reject = no".
* The "postfix tls deploy-server-cert" command used the wrong certificate
and key file. This was caused by a cut-and-paste error in the postfix-tls-script file.
- improve config.postfix
* improve SASL stuff
* add POSTFIX_SMTP_AUTH_SERVICE=(cyrus|dovecot)
- improve config.postfix
* improve with MySQL stuff
- update vda patch to latest available
* remove postfix-vda-v13-3.10.0.patch
* add postfix-vda-v14-3.0.3.patch
- rebase patches (and to be p0)
* pointer_to_literals.patch
* postfix-main.cf.patch
* postfix-master.cf.patch
* postfix-no-md5.patch
* postfix-ssl-release-buffers.patch
- add /etc/postfix/ssl as default DIR for SSL stuff
* cacerts -> ../../ssl/certs/
* certs/
- revert POSTFIX_SSL_PATH from '/etc/ssl' to '/etc/postfix/ssl'
- improve config.postfix
* revert smtpd_tls_CApath to POSTFIX_SSL_PATH/cacerts which is a
symlink to /etc/ssl/certs
Without reverting, 'gen_CA' would create files which would then be on
the previous defined 'sslpath(/etc/ssl)/certs' (smtpd_tls_CApath)
Cert reqs would be placed in 'sslpath(/etc/ssl)/certs/postfixreq.pem'
which is not a good idea.
* mkchroot: sync '/etc/postfix/ssl' to chroot
* improve PCONF for smtp{,d}_tls_{cert,key}_file, adding/removing from
main.cf, show warning if enabled and file is missing
- update to 3.1.3:
* The Postfix SMTP server did not reset a previous session's
failed/total command counts before rejecting a client that
exceeds request or concurrency rates. This resulted in incorrect
failed/total command counts being logged at the end of the
rejected session.
* The unionmap multi-table interface did not propagate table
lookup errors, resulting in false "user unknown" responses.
* The documentation was updated with a workaround for false "not
found" errors with MySQL map queries that contain UTF8-encoded
text. The workaround is to specify "option_group = client" in
Postfix MySQL configuration files. This will be the default
setting with Postfix 3.2 and later.
- update to 3.1.2:
* Changes to make Postfix build with OpenSSL 1.1.0.
* The makedefs script ignored readme_directory=pathname overrides.
Fix by Todd C. Olson.
* The tls_session_ticket_cipher documentation says that the default
cipher for TLS session tickets is aes-256-cbc, but the implemented
default was aes-128-cbc. Note that TLS session ticket keys are
rotated after 1/2 hour, to limit the impact of attacks on session
ticket keys.
- postfix-post-install.patch: remove empty patch
- fix Changelog cause of Factory decline
- Fix typo in config.postfix
- bnc#981097 config.postfix creates broken main.cf for tls client configuration
- bnc#981099 /etc/sysconfig/postfix: POSTFIX_SMTP_TLS_CLIENT incomplete
- update to 3.1.1:
- The new address_verify_pending_request_limit
parameter introduces a safety limit for the number of address
verification probes in the active queue. The default limit is 1/4
of the active queue maximum size. The queue manager enforces the
limit by tempfailing probe messages that exceed the limit. This
design avoids dependencies on global counters that get out of sync
after a process or system crash.
- Machine-readable, JSON-formatted queue listing with "postqueue -j"
(no "mailq" equivalent).
- The milter_macro_defaults feature provides an optional list of macro
name=value pairs. These specify default values for Milter macros when
no value is available from the SMTP session context.
- Support to enforce a destination-independent delay between email
deliveries. The following example inserts 20 seconds of delay
between all deliveries with the SMTP transport, limiting the delivery
rate to at most three messages per minute.
smtp_transport_rate_delay = 20s
- Historically, the default setting "postscreen_dnsbl_ttl = 1h" assumes
that a "not found" result from a DNSBL server will be valid for one
hour. This may have been adequate five years ago when postscreen
was first implemented, but nowadays, that one hour can result in
missed opportunities to block new spambots.
To address this, postscreen now respects the TTL of DNSBL "not
found" replies, as well as the TTL of DNSWL replies (both "found"
and "not found"). The TTL for a "not found" reply is determined
according to RFC 2308 (the TTL of an SOA record in the reply).
Support for DNSBL or DNSWL reply TTL values is controlled by two
configuration parameters:
postscreen_dnsbl_min_ttl (default: 60 seconds).
postscreen_dnsbl_max_ttl (default: $postscreen_dnsbl_ttl or 1 hour)
The postscreen_dnsbl_ttl parameter is now obsolete, and has become
the default value for the new postscreen_dnsbl_max_ttl parameter.
- New "smtpd_client_auth_rate_limit" feature, to
enforce an optional rate limit on AUTH commands per SMTP client IP
address. Similar to other smtpd_client_*_rate_limit features, this
enforces a limit on the number of requests per $anvil_rate_time_unit.
- New SMTPD policy service attribute "policy_context",
with a corresponding "smtpd_policy_service_policy_context" configuration
parameter. Originally, this was implemented to share the same SMTPD
policy service endpoint among multiple check_policy_service clients.
- A new "postfix tls" command to quickly enable opportunistic TLS
in the Postfix SMTP client or server, and to manage SMTP server keys
and certificates, including certificate signing requests and
TLSA DNS records for DANE.
- build with working support for SMTPUTF8
- fix build on sle11 by pointing _libexecdir to /usr/lib all the
time.
- some distros did not pull pkgconfig indirectly. pull it directly.
- fix building the dynamic maps: the old build had postgresql e.g.
with missing symbols.
- convert to AUXLIBS_* instead of plain AUXLIBS which is needed
for proper dynamic maps.
- reordered the CCARGS and AUXLIBS* lines to group by feature
- use pkgconfig or *_config tools where possible
- picked up signed char from fedora spec file
- enable lmdb support: new BR lmdb-devel, new subpackage
postfix-lmdb.
- don't delete vmail user/groups
- update to 3.1.0
- Since version 3.0 postfix supports dynamic loading of cdb:, ldap:,
lmdb:, mysql:, pcre:, pgsql:, sdbm:, and sqlite: database clients.
Thats why the patches dynamic_maps.patch and dynamic_maps_pie.patch
could be removed.
- Adapting all the patches to postfix 3.1.0
- remove obsolete patches
* add_missed_library.patch
* postfix-opensslconfig.patch
- update vda patch
* remove postfix-vda-v13-2.10.0.patch
* add postfix-vda-v13-3.10.0.patch
- The patch postfix-db6.diff is not more neccessary
- Backwards-compatibility safety net.
With NEW Postfix installs, you MUST install a main.cf file with
the setting "compatibility_level = 2". See conf/main.cf for an
example.
With UPGRADES of existing Postfix systems, you MUST NOT change the
main.cf compatibility_level setting, nor add this setting if it
does not exist.
Several Postfix default settings have changed with Postfix 3.0. To
avoid massive frustration with existing Postfix installations,
Postfix 3.0 comes with a safety net that forces Postfix to keep
running with backwards-compatible main.cf and master.cf default
settings. This safety net depends on the main.cf compatibility_level
setting (default: 0). Details are in COMPATIBILITY_README.
- Major changes - tls
* [Feature 20160207] A new "postfix tls" command to quickly enable
opportunistic TLS in the Postfix SMTP client or server, and to
manage SMTP server keys and certificates, including certificate
signing requests and TLSA DNS records for DANE.
* As of the middle of 2015, all supported Postfix releases no longer
nable "export" grade ciphers for opportunistic TLS, and no longer
use the deprecated SSLv2 and SSLv3 protocols for mandatory or
opportunistic TLS.
* [Incompat 20150719] The default Diffie-Hellman non-export prime was
updated from 1024 to 2048 bits, because SMTP clients are starting
to reject TLS handshakes with primes smaller than 2048 bits.
* [Feature 20160103] The Postfix SMTP client by default enables DANE
policies when an MX host has a (DNSSEC) secure TLSA DNS record,
even if the MX DNS record was obtained with insecure lookups. The
existence of a secure TLSA record implies that the host wants to
talk TLS and not plaintext. For details see the
smtp_tls_dane_insecure_mx_policy configuration parameter.
- Major changes - default settings
[Incompat 20141009] The default settings have changed for relay_domains
(new: empty, old: $mydestination) and mynetworks_style (new: host,
old: subnet). However the backwards-compatibility safety net will
prevent these changes from taking effect, giving the system
administrator the option to make an old default setting permanent
in main.cf or to adopt the new default setting, before turning off
backwards compatibility. See COMPATIBILITY_README for details.
[Incompat 20141001] A new backwards-compatibility safety net forces
Postfix to run with backwards-compatible main.cf and master.cf
default settings after an upgrade to a newer but incompatible Postfix
version. See COMPATIBILITY_README for details.
While the backwards-compatible default settings are in effect,
Postfix logs what services or what email would be affected by the
incompatible change. Based on this the administrator can make some
backwards-compatibility settings permanent in main.cf or master.cf,
before turning off backwards compatibility.
- Major changes - address verification safety
[Feature 20151227] The new address_verify_pending_request_limit
parameter introduces a safety limit for the number of address
verification probes in the active queue. The default limit is 1/4
of the active queue maximum size. The queue manager enforces the
limit by tempfailing probe messages that exceed the limit. This
design avoids dependencies on global counters that get out of sync
after a process or system crash.
Tempfailing verify requests is not as bad as one might think. The
Postfix verify cache proactively updates active addresses weeks
before they expire. The address_verify_pending_request_limit affects
only unknown addresses, and inactive addresses that have expired
from the address verify cache (by default, after 31 days).
- Major changes - json support
[Feature 20151129] Machine-readable, JSON-formatted queue listing
with "postqueue -j" (no "mailq" equivalent). The output is a stream
of JSON objects, one per queue file. To simplify parsing, each
JSON object is formatted as one text line followed by one newline
character. See the postqueue(1) manpage for a detailed description
of the output format.
- Major changes - milter support
[Feature 20150523] The milter_macro_defaults feature provides an
optional list of macro name=value pairs. These specify default
values for Milter macros when no value is available from the SMTP
session context.
For example, with "milter_macro_defaults = auth_type=TLS", the
Postfix SMTP server will send an auth_type of "TLS" to a Milter,
unless the remote client authenticates with SASL.
This feature was originally implemented for a submission service
that may authenticate clients with a TLS certificate, without having
to make changes to the code that implements TLS support.
- Major changes - output rate control
[Feature 20150710] Destination-independent delivery rate delay
Support to enforce a destination-independent delay between email
deliveries. The following example inserts 20 seconds of delay
between all deliveries with the SMTP transport, limiting the delivery
rate to at most three messages per minute.
/etc/postfix/main.cf:
smtp_transport_rate_delay = 20s
For details, see the description of default_transport_rate_delay
and transport_transport_rate_delay in the postconf(5) manpage.
- Major changes - postscreen dnsbl
[Feature 20150710] postscreen support for the TTL of DNSBL and DNSWL
lookup results
Historically, the default setting "postscreen_dnsbl_ttl = 1h" assumes
that a "not found" result from a DNSBL server will be valid for one
hour. This may have been adequate five years ago when postscreen
was first implemented, but nowadays, that one hour can result in
missed opportunities to block new spambots.
To address this, postscreen now respects the TTL of DNSBL "not
found" replies, as well as the TTL of DNSWL replies (both "found"
and "not found"). The TTL for a "not found" reply is determined
according to RFC 2308 (the TTL of an SOA record in the reply).
Support for DNSBL or DNSWL reply TTL values is controlled by two
configuration parameters:
postscreen_dnsbl_min_ttl (default: 60 seconds).
This parameter specifies a minimum for the amount of time that
a DNSBL or DNSWL result will be cached in the postscreen_cache_map.
This prevents an excessive number of postscreen cache updates
when a DNSBL or DNSWL server specifies a very small reply TTL.
postscreen_dnsbl_max_ttl (default: $postscreen_dnsbl_ttl or 1 hour)
This parameter specifies a maximum for the amount of time that
a DNSBL or DNSWL result will be cached in the postscreen_cache_map.
This prevents cache pollution when a DNSBL or DNSWL server
specifies a very large reply TTL.
The postscreen_dnsbl_ttl parameter is now obsolete, and has become
the default value for the new postscreen_dnsbl_max_ttl parameter.
- Major changes - sasl auth safety
[Feature 20151031] New "smtpd_client_auth_rate_limit" feature, to
enforce an optional rate limit on AUTH commands per SMTP client IP
address. Similar to other smtpd_client_*_rate_limit features, this
enforces a limit on the number of requests per $anvil_rate_time_unit.
- Major changes - smtpd policy
[Feature 20150913] New SMTPD policy service attribute "policy_context",
with a corresponding "smtpd_policy_service_policy_context" configuration
parameter. Originally, this was implemented to share the same SMTPD
policy service endpoint among multiple check_policy_service clients.
- bnc#958329 postfix fails to start when openslp is not installed
- upstream update postfix 2.11.7:
* The Postfix Milter client aborted with a panic while adding a
message header, after adding a short message header with the
header_checks PREPEND action. Fixed by invoking the header
output function while PREPENDing a message header.
* False alarms while scanning the Postfix queue. Fixed by resetting
errno before calling readdir(). This defect was introduced
19970309.
* The postmulti command produced an incorrect error message.
* The postmulti command now refuses to create a new MTA instance
when the template main.cf or master.cf file are missing. This
is a common problem on Debian-like systems.
* Turning on Postfix SMTP server HAProxy support broke TLS
wrappermode. Fixed by temporarily using a 1-byte VSTREAM buffer
to read the HAProxy connection hand-off information.
* The xtext_unquote() function did not propagate error reports
from xtext_unquote_append(), causing the decoder to return
partial output, instead of rejecting malformed input. The Postfix
SMTP server uses this function to parse input for the ENVID and
ORCPT parameters, and for XFORWARD and XCLIENT command parameters.
- boo#934060: Remove quirky hostname logic from config.postfix
* /etc/hostname doesn't contain anything useful
* linux.local is no good either
* postfix will use `hostname`.localdomain as fallback
- postfix-no-md5.patch: replace fingerprint defaults by sha1. bsc#928885
- %verifyscript is a new section, move it out of the %ifdef
so the fillups are run afterwards.
- upstream update postfix 2.11.6:
Default settings have been updated so that they no longer enable
export-grade ciphers, and no longer enable the SSLv2 and SSLv3
protocols.
- removed postfix-2.11.5_linux4.patch because it's obsolete
- Bugfix (introduced: Postfix 2.11): with connection caching
enabled (the default), recipients could be given to the wrong
mail server. (bsc#944722)
- postfix-SuSE.tar.gz/postfix.service: None of
nss-lookup.target network.target local-fs.target time-sync.target
should be Wanted or Required except by the services
the implement the relevant functionality i.e network.target
is wanted/required by networkmanager, wicked,
systemd-network. other software must be ordered After them,
see systemd.special(7)
- Fix library symlink generation (boo#928662)
- added postfix-2.11.5_linux4.patch:
Allow building on kernel 4. Patch taken from:
https://groups.google.com/forum/#!topic/mailing.postfix.users/fufS22sMGWY
- update to postfix 2.11.5
- Bugfix (introduced: Postfix 2.6):
sender_dependent_relayhost_maps ignored the relayhost setting
in the case of a DUNNO lookup result. It would use the
recipient domain instead. Viktor Dukhovni. Wietse took the
pieces of code that enforce the precedence of a
sender-dependent relayhost, the global relayhost, and the
recipient domain, and put that code together in once place so
that it is easier to maintain. File:
trivial-rewrite/resolve.c.
- Bitrot: prepare for future changes in OpenSSL API. Viktor
Dukhovni. File: tls_dane.c.
- Incompatibility: specifying "make makefiles" with "CC=command"
will no longer override the default WARN setting.
- upstream update postfix 2.11.4:
Postfix 2.11.4 only:
* Fix a core dump when smtp_policy_maps specifies an invalid TLS
level.
* Fix a missing " in \%s\", in postconf(1) fatal error messages,
which violated the C language spec. Reported by Iain Hibbert.
All supported releases:
* Stop excessive recursion in the cleanup server while recovering
from a virtual alias expansion loop. Problem found at Two Sigma.
* Stop exponential memory allocation with virtual alias expansion
loops. This came to light after fixing the previous problem.
- correct pf_daemon_directory in spec. This must be /usr/lib/
- bnc#914086 syntax error in config.postfix
- Adapt config.postfix to be able to run on SLE11 too.
- Don't install sysvinit script when systemd is used
- Make explicit PreReq dependencies conditional only for older
systems
- Don't try to set explicit attributes to symlinks
- Cleanup spec file vith spec-cleaner
- bnc#912594 config.postfix creates config based on old options
- bnc#911806 config.postfix does not set up correct saslauthd socket directory for chroot
- bnc#910265 config.postfix does not upgrade the chroot
- bnc#908003 wrong access rights on /usr/sbin/postdrop causes
permission denied when trying to send a mail as non root user
- bnc#729154 wrong permissions for some postfix components
- Remove keyring and things as it is md5 based one no longer
accepted by gpg 2.1
- No longer perform gpg validation; osc source_validator does it
implicit:
+ Drop gpg-offline BuildRequires.
+ No longer execute gpg_verify.
- restore previously lost fix:
Fri Oct 11 13:32:32 UTC 2013 - matz(a)suse.de
- Ignore errors in %pre/%post.
- postfix 2.11.3:
* Fix for configurations that prepend message headers with Postfix
access maps, policy servers or Milter applications. Postfix now
hides its own Received: header from Milters and exposes prepended
headers to Milters, regardless of the mechanism used to prepend
a header. This fix reverts a partial solution that was released
on October 13, 2014, and replaces it with a complete solution.
* Portability fix for MacOS X 10.7.x (Darwin 11.x) build procedure.
- postfix 2.11.2:
* Fix for DMARC implementations based on SPF policy plus DKIM
Milter. The PREPEND access/policy action added headers ABOVE
Postfix's own Received: header, exposing Postfix's own Received:
header to Milters (protocol violation) and hiding the PREPENDed
header from Milters. PREPENDed headers are now added BELOW
Postfix's own Received: header and remain visible to Milters.
* The Postfix SMTP server logged an incorrect client name in
reject messages for check_reverse_client_hostname_access and
check_reverse_client_hostname_{mx,ns}_access. They replied with
the verified client name, instead of the name that was rejected.
* The qmqpd daemon crashed with null pointer bug when logging a
lost connection while not in a mail transaction.
- switch from md5 based signature to one using the SHA-512 digest
algorithm supplied by maintainer on ML to pass source_validator
- postfix 2.11.1:
* With connection caching enabled (the default), recipients could
be given to the wrong mail server.
* Enforce TLS when TLSA records exist, but all are unusable.
* Don't leak memory when TLSA records exist, but all are unusable.
* Prepend "-I. -I../../include" to the compiler command-line
options, to avoid name clashes with non-Postfix header files.
* documentation fixes
* logging fixes
- fix dynamic_maps patch to enable memcache support, which does not
need any libraries
- Rename rpmlintrc to %{name}-rpmlintrc.
Follow the packaging guidelines.
- fix typo in postfix-SuSE/update_chroot.systemd
- fix config.postfix
* 'insserv amavis' -> 'chkconfig amavis on'
- rework main.cf patch
* fix virtual stuff
* add some dovecot stuff
- rework master.cf patch
* add some dovecot stuff
- The included postfix-mysql.tar.bz2 was using a MySQL 4.1 style of
table engine specification. Modified so that the sql uses
'ENGINE=' instead of 'TYPE=' for creating tables.
- bnc#816769 - config.postfix issues warnings about missing master.cf
- bnc#882033 - Package postfix has changed files according to rpm
- bnc#855688 - possible systemd bug: postfix & cifs dependency confict
- bnc#863350 - SuSEconfig.postfix complains about modified /etc/postfix/main.cf after updating postfix
- replace vda patch:
* add postfix-vda-v13-2.10.0.patch
* remove postfix-vda-v11-2.9.6.patch
- rebase patches
- config.postfix
* add master.cf support for submission (587)
* rework master.cf support for smtps
- bnc#862662 - Unable to configure postfix SMTP with forced TLS using YaST2
- Update to 2.11.0
* TLS
o Support for PKI-less TLS server certificate verification, where
the CA public key or the server certificate is identified via DNSSEC lookup
* LMDB database support
* master
o The master_service_disable parameter value syntax has changed:
use "service/type" instead of "service.type".
* postconf:
o Support for advanced master.cf query and update operations.
This was implemented primarily to support automated system management tools.
o The postconf command produces more warnings
* relay safety
New smtpd_relay_restrictions parameter built-in default settings:
smtpd_relay_restrictions =
permit_mynetworks
permit_sasl_authenticated
defer_unauth_destination
* postscreen whitelisting
Allow a remote SMTP client to skip postscreen(8) tests based on
its postscreen_dnsbl_sites score.
- Ignore errors in %pre/%post.
- two improvements for 13.1 and factory
* postfix-opensslconfig.patch call openSSL_config
so postfix respects the system's openssl configuration
* postfix-SuSE/postfix.service since a few months there
is no mail-transfer-agent.target, units must be ordered
after a list of smtpd implementations instead.
- Proc is not needed in chroot anymore
- postfix-main.cf.patch: remove duplicate entry for inet_protocols
- fix for warning
* unused parameter: virtual_create_maildirsize=yes
* unused parameter: virtual_mailbox_extended=yes
* rework main.cf.patch
- fix rcpostfix for sysvinit systems
* /etc/postfix/system/update_postmaps: No such file or directory
- rebase patches
* vda-v11-2.9.5 -> vda-v11-2.9.6
- fix file postfix-SuSE.tar.gz
* made a tar.gz
- postfix.spec forces the use of SSL and SASL libraries,
so make sure the BuildRequires are there
- Add postfix-db6.diff to fix compile abort with libdb-6.0
- Add Source URL, see https://en.opensuse.org/SourceUrls
- Add GPG verification
- postfix-SuSE/postfix.service do not Require or
order after syslog.target as it no longer exists
postfix will fail to start in the next systemd version.
- Install postfix.service accordingly (/usr/lib/systemd for 12.3
and up or /lib/systemd for older versions).
- update to 2,9.6
Bugfix: the local(8) delivery agent dereferenced a null pointer
while delivering to null command (for example, "|" in a .forward file).
Bugfix: memory leak in program initialization. tls/tls_misc.c.
Bugfix: he undocumented OpenSSL X509_pubkey_digest() function is
unsuitable for computing certificate PUBLIC KEY fingerprints.
Postfix now provides a correct procedure that accounts for
the algorithm and parameters in addition to the key data. Specify
"tls_legacy_public_key_fingerprints = yes" if you need backwards compatibility.
- bnc#796162 - script to assign path elements not working in postfix install Build-0284(iso)
- rebase patches
* vda-v10-2.8.12 -> vda-v11-2.9.5 (and to be a p0)
* main, master, post-instal, ssl-release-buffers (remove version)
* dynamic_maps, dynamic_maps_pie, pointer_to_literals
- update to 2,9.5
* tls support:
Support to turn off the TLSv1.1 and TLSv1.2 protocols:
To temporarily turn off problematic protocols globally:
/etc/postfix/main.cf:
smtp_tls_protocols = !SSLv2, !TLSv1.1, !TLSv1.2
smtp_tls_mandatory_protocols = !SSLv2, !TLSv1.1, !TLSv1.2
However, it may be better to temporarily turn off problematic
protocols for broken sites only:
/etc/postfix/main.cf:
smtp_tls_policy_maps = hash:/etc/postfix/tls_policy
/etc/postfix/tls_policy:
example.com may protocols=!SSLv2:!TLSv1.1:!TLSv1.2
* 20111012 To simplify integration with third-party
applications, the Postfix sendmail command now always transforms
all input lines ending in <CR><LF> into UNIX format (lines ending
in <LF>). Specify "sendmail_fix_line_endings = strict" to restore
historical Postfix behavior (i.e. convert all input lines ending
in <CR><LF> only if the first line ends in <CR><LF>).
* 20120114 Logfile-based alerting systems may need to be
updated to look for "error" messages in addition to "fatal" messages.
Specify "daemon_table_open_error_is_fatal = yes" to get the historical
behavior (immediate termination with "fatal" message).
* enable_long_queue_ids Postfix 2.9 introduces support for non-repeating queue IDs (also
used as queue file names). These names are encoded in a mix of upper
case, lower case and decimal digit characters. Long queue IDs are
disabled by default to avoid breaking tools that parse logfiles and
that expect queue IDs with the smaller [A-F0-9] character set.
* 20111209 memcache lookup and update support. This provides
a way to share postscreen(8) or verify(8) caches between Postfix
instances. See MEMCACHE_README and memcache_table(5) for details
and limitations.
* 20111218 To support external SASL authentication, e.g.,
in an NGINX proxy daemon, the Postfix SMTP server now always checks
the smtpd_sender_login_maps table, even without having
"smtpd_sasl_auth_enable = yes" in main.cf.
* ipv6
o The default inet_protocols value is now "all" instead of "ipv4",
meaning use both IPv4 and IPv6.
o The default smtp_address_preference value is now "any" instead
of "ipv6", meaning choose randomly between IPv6 and IPv4. With
this the Postfix SMTP client will have more success delivering
mail to sites that have problematic IPv6 configurations.
- update to 2.8.13
* 20121029
Workaround: strip datalink suffix from IPv6 addresses
returned by the system getaddrinfo() routine. Such suffixes
mess up the default mynetworks value, host name/address
verification and possibly more. This change obsoletes the
20101108 change that removes datalink suffixes in the SMTP
and QMQP servers, but we leave that code alone. File:
util/myaddrinfo.c.
* 20121013
Cleanup: to compute the LDAP connection cache lookup key,
join the numeric fields with null, just like string fields.
Viktor Dukhovni. File: global/dict_ldap.c.
* 20121010
Bugfix (introduced: Postfix 2.5): memory leak in program
initialization. Reported by Coverity. File: tls/tls_misc.c.
Bugfix (introduced: Postfix 2.3): memory leak in the unused
oqmgr program. Reported by Coverity. File: oqmgr/qmgr_message.c.
* 20121003
Bugfix: the postscreen_access_list feature was case-sensitive
in the first character of permit, reject, etc. Reported by
Feancis Picabia. File: global/server_acl.c.
- rebase dynamic_maps_pie patch
- rpmlint
* invalid-suse-version-check 1140
* obsolete-suse-version-check 920 (changes file)
- bnc#790141 - Command SuSEconfig.postfix reports ERROR -
"can not find /lib/YaST/SuSEconfig.functions!!"
- bnc#782048 - postfix uses /sbin/conf.d
- bnc#784659 - remove SuSEconfig calls from yast2-mail
- update to 2.8.12
* 20120730
Bugfix (introduced: 20000314): AUTH is not allowed after
MAIL. Timo Sirainen. File: smtpd/smtpd_sasl_proto.c.
* 20120702
Bugfix (introduced: 19990127): the BIFF client leaked an
unprivileged UDP socket. Fix by Jaroslav Skarvada. File:
local/biff_notify.c.
* 20120621
Bugfix (introduced: Postfix 2.8): the unused "pass" trigger
client could close the wrong file descriptors. File:
util/unix_pass_trigger.c.
- fix for bnc#771303
* add 'version = 3' to ldap_aliases.cf
- rebase patches
* main, master, post-install: 2.8.3 -> 2.8.12
* ssl-release-buffers: 2.8.5 -> 2.8.12
* vda-v10: 2.8.9 -> 2.8.12
* dynamic_maps, dynamic_maps_pie, ipv6_disabled, pointer_to_literals
- fix changes file
- bnc#771811 - postfix update does not regenerate the maps
- update to 2.8.11
* 20120520
- Bugfix (introduced Postfix 2.4): the event_drain() function
was comparing bitmasks incorrectly causing the program to
always wait for the full time limit. This error affected
the unused postkick command, but only after s/fifo/unix/
in master.cf. File: util/events.c.
- Cleanup: laptop users have always been able to avoid
unnecessary disk spin-up by doing s/fifo/unix/ in master.cf
(this is currently not supported on Solaris systems).
However, to make this work reliably, the "postqueue -f"
command must wait until its requests have reached the pickup
and qmgr servers before closing the UNIX-domain request
sockets. Files: postqueue/postqueue.c, postqueue/Makefile.in.
- bnc#753910 - {name} instead of %{name} in postfix .spec
- bnc#756452 - VUL-1: postfix: VRFY allows enumerating users
- update to 2.8.10
* 20120401
Bitrot: shut up useless warnings about Cyrus SASL call-back
function pointer type mis-matches. Files: xsasl/xsasl_cyrus.h,
xsasl/xsasl_cyrus_server.c, xsasl/xsasl_client.c.
* 20120422
Bit-rot: OpenSSL 1.0.1 introduces new protocols. Update the
known TLS protocol list so that protocols can be turned off
selectively to work around implementation bugs. Based on
a patch by Victor Duchovni. Files: proto/TLS_README.html,
proto/postconf.proto, tls/tls.h, tls/tls_misc.c, tls/tls_client.c,
tls/tls_server.c.
- update to 2.8.9
* 20120217
Cleanup: missing #include statement for bugfix code added
20111226. File: local/unknown.c.
* 20120214
Bugfix (introduced: Postfix 2.4): extraneous null assignment
caused core dump when postlog emitted the "usage" message.
Reported by Kant (fnord.hammer). File: postlog/postlog.c.
* 20120202
Bugfix (introduced: Postfix 2.3): the "change header" milter
request could replace the wrong header. A long header name
could match a shorter one, because a length check was done
on the wrong string. Reported by Vladimir Vassiliev. File:
cleanup/cleanup_milter.c.
- use latest VDA patch (2.8.9)
- bnc#756450 - postfix: remove version from banner
- add port 587 smtp-auth submission to postfix-fw bnc#756289
- set exit code explicitely in cond_slp, systemd checks for it
- Documentation for bnc#751994 - SuSEconfig module postfix does not exist
- rcpostfix now updates the aliases too
- update to 2.8.8
Bugfixes:
tlsproxy(8) stored TLS sessions with a serverID of
"tlsproxy" instead of "smtpd", wasting an opportunity for
session reuse. File: tlsproxy/tlsproxy.c.
missing lookup table entry and terminator, causing
proxymap server segfault when postscreen(8) or verify(8)
attempted to access their cache via the proxymap server.
This could never have worked anyway, because the Postfix
2.8 proxymap protocol does not support cache cleanup. File
util/dict.c.
the Postfix client sqlite
quoting routine returned the unquoted result instead of the
quoted text. The opportunities for misuse are limited,
because Postfix sqlite files are usually owned by root, and
Postfix daemons usually run with non-root privileges so
they can't corrupt the database. Problem reported by Rob
McGee (rob0). File: global/dict_sqlite.c.
the trace service did not
distinguish between notifications for a non-bounce or a
bounce message. This code pre-dates DSN support and should
have been updated when it was re-purposed to handle DSN
SUCCESS notifications. Problem reported by Sabahattin
Gucukoglu. File: bounce/bounce_trace_service.c.
- use latest VDA patch (2.8.5)
- bnc#743369 - yast2 mail module does not open the firewall
- Set MD5DIR in SuSEconfig.postfix to avoid warnings
- bnc738693 - upgrade from 11.4 enables mysql service for systemd
- Add postmap rebuild script to systemv init script too
- bnc#738900 - cyrus-imapd not receiving mail from postfix
- Move the post map rebuild script into the start script
- Fix the last change in %post
- bnc#728308 - warning output after update the postfix package
- update to 2.8.7
Bugfixes:
smtpd(8) did not sanitize newline characters in cleanup(8)
REJECT messages, causing them to be sent out via SMTP as bare newline characters.
smtpd(8) sent multi-line responses from a before-queue content filter as text with
bare <LF> instead of <CR><LF>.
Workaround: postscreen sent non-compliant SMTP responses (220- followed by 421)
when it could not give a connection to a real smtpd process, causing some
remote SMTP clients to bounce mail.
- Use the systemd macros in the spec file
- only fix files that exists in %post
- Use SSL_MODE_RELEASE_BUFFERS if available, see
SSL_CTX_set_mode man page and
http://www.imperialviolet.org/2010/06/25/overclocking-ssl.html
for the full details.
- update to 2.8.5
* Bugfix: allow for Milters that send an SMTP server reply
without RFC 3463 enhanced status code. Reported by Vladimir
Vassiliev. File: milter/milter8.c.
- bnc#684304 - server:mail/postfix: Bugs in SuSEconfig chroot setup script
- Aplly SASL_SOCKET_DIR patch
- Move SuSEconfig.postfix into /usr/sbin/
(FATE#311272: Do not rewrite postfix.cf via SuSEconfig)
SuSEconfig.postfix will be executed only once after installation
automaticaly. Afterwards only you can start it manually or via
yast2 mail module.
- Just the first strep forward to systemd, please test out
/etc/postfix/system/update_chroot
/etc/postfix/system/wait_qmgr
/etc/postfix/system/cond_slp
and
/lib/systemd/system/postfix.service
and also fill out the missing description.
- rework SuSE patch
* add missing SASL stuff in rc.postfix
- when chrooted and using SASL
o mount -o bind SASL_SOCKET_DIR into postfix CHROOT
- update to 2.8.4
o Linux kernel version 3 support.
for more info see ChangeLog
- bnc#686436 - postfix bounces messages with improper use of 8-bit data in message body
- Apply patch
- rework master.cf patch
o fix receive_override_options line
- rework SuSE patch
o sysconfig: remove POSTFIX_WITH_POP_BEFORE_SMTP
o SuSEconfig: fix receive_override_options line
- replace vda patch
o 2.8.1 -> 2.8.3
- fix files doc
o remove 'doc auxiliary'
instead cp to pf_docdir
- fix spec for building on all repos
- bnc#679187 - suseconfig/postfix: missing dependency
- fix master.cf
o fix missing
- amavis unix - - n - 4 smtp
- localhost:10025 inet n - n - - smtpd
o add master.cf patch
- rework patches
o main.cf (add two missing sasl vars)
o postfix-SuSE (SuSEconfig, cleanup those vars,...)
- rework TLS stuff
o reworked main.cf patch
o added postfix-SuSE patch
o added post-install patch
Editing /etc/postfix/master.cf, adding missing entry for tlsmgr service
add only if it really does not exist
- removed Author from description
- updated vda patch
o vda-2.7.1 > vda-v10-2.8.1
- fix build for SLE_10
o no fdupes ;)
- remove document paths from postfix-files to avoid error messages
when postfix-doc is not installed
- update to 2.8.3 - VUL-0: postfix memory corruption
- bnc#641271 - postfix-2.7.1: init script cannot properly stop
multi-instance configurations
- update to 2.8.2
* DNSBL/DNSWL:
o Support for address patterns in DNS blacklist and whitelist lookup results.
o The Postfix SMTP server now supports DNS-based whitelisting with several safety features
* Support for read-only sqlite database access.
* Alias expansion:
o Postfix now reports a temporary delivery error when the result
of virtual alias expansion would exceed the virtual_alias_recursion_limit
or virtual_alias_expansion_limit.
o To avoid repeated delivery to mailing lists with pathological
nested alias configurations, the local(8) delivery agent now keeps
the owner-alias attribute of a parent alias, when delivering mail
to a child alias that does not have its own owner alias.
* The Postfix SMTP client no longer appends the local domain when
looking up a DNS name without ".".
* The SMTP server now supports contact information that is appended
to "reject" responses: smtpd_reject_footer
* Postfix by default no longer adds a "To: undisclosed-recipients:;"
header when no recipient specified in the message header.
* tls support:
o The Postfix SMTP server now always re-computes the SASL mechanism
list after successful completion of the STARTTLS command.
o The smtpd_starttls_timeout default value is now stress-dependent.
o Postfix no longer appends the system-supplied default CA certificates
to the lists specified with *_tls_CAfile or with *_tls_CApath.
* New feature: Prototype postscreen(8) server that runs a number
of time-consuming checks in parallel for all incoming SMTP connections,
before clients are allowed to talk to a real Postfix SMTP server.
It detects clients that start talking too soon, or clients that appear
on DNS blocklists, or clients that hang up without sending any command.
- bnc#667299 - Postfix LICENSE not marked as documentation
- add some min LDAP support for virtual LDAP-users
o sysconfig "WITH_LDAP"
o add ldap_aliases.cf
o SuSEconfig.postfix
virtual_alias_maps = ... ldap:/etc/postfix/ldap_aliases.cf
- update to 2.7.2
* Bugfix (introduced Postfix 2.2): Postfix no longer appends
the system default CA certificates to the lists specified
with *_tls_CAfile or with *_tls_CApath. This prevents
third-party certificates from getting mail relay permission
with the permit_tls_all_clientcerts feature. Unfortunately
this may cause compatibility problems with configurations
that rely on certificate verification for other purposes.
To get the old behavior, specify "tls_append_default_CA =
yes". Files: tls/tls_certkey.c, tls/tls_misc.c,
global/mail_params.h. proto/postconf.proto, mantools/postlink.
* Compatibility with Postfix < 2.3: fix 20061207 was incomplete
(undoing the change to bounce instead of defer after
pipe-to-command delivery fails with a signal). Fix by Thomas
Arnett. File: global/pipe_command.c.
* Bugfix: the milter_header_checks parser provided only the
actions that change the message flow (reject, filter,
discard, redirect) but disabled the non-flow actions (warn,
replace, prepend, ignore, dunno, ok). File:
cleanup/cleanup_milter.c.
* Performance: fix for poor smtpd_proxy_filter TCP performance
over loopback (127.0.0.1) connections. Problem reported by
Mark Martinec. Files: smtpd/smtpd_proxy.c.
* Cleanup: don't apply reject_rhsbl_helo to non-domain forms
such as network addresses. This would cause false positives
with dbl.spamhaus.org. File: smtpd/smtpd_check.c.
* Bugfix: the "421" reply after Milter error was overruled
by Postfix 1.1 code that replied with "503" for RFC 2821
compliance. We now make an exception for "final" replies,
as permitted by RFC. Solution by Victor Duchovni. File:
smtpd/smtpd.c.
- update vda patch
o remove 2.6.1-vda-ng.patch
o remove 2.6.1-vda-ng-64bit.patch
o add vda-2.7.1.patch
- rework main.cf.patch
o remove 2.2.9-main.cf.patch
o add 2.7.1-main.cf.patch
- prereq init scripts network and syslog
- Remove obsolate postscripts
- bnc#625657 - SuSEconfig.postfix and smtp_use_tls
- bnc#622873 - postfix doesn't start if ipv6 is disabled
- reworked bnc#606251 stuff (not checked in to Factory)
o used my_print_defaults command for parsing of /etc/my.cnf
o using quotation marks: "$PF_CHROOT"
o added sysconfig option POSTFIX_MYSQL_CONN=(socket,tcp)
- bnc#606251 - postfix chrooted mysql.sock lost on mysql restart
o Now MYSQL_SOCK_DIR is mounted with '-o bind' to postfix CHROOT
- update to 2.7.1
* Bugfix (introduced Postfix 2.6) in the XFORWARD implementation,
which sends remote SMTP client attributes through SMTP-based content filters.
The Postfix SMTP client did not skip "unknown" SMTP client attributes,
causing a syntax error when sending an "unknown" client PORT attribute.
* Robustness: skip LDAP queries with non-ASCII search strings, instead of failing with a database lookup error.
* Safety: Postfix processes now log a warning when a matchlist has
a #comment at the end of a line (for example mynetworks or relay_domains).
* Portability: OpenSSL 1.0.0 changes the priority of anonymous cyphers.
* Portability: Berkeley DB 5.x is now supported.
- fix obviously lost POSTFIX_MYHOSTNAME in SuSEconfig.postfix
- New file check_mail_queue. This script checks if there are some
mails in the queue and starts postfix if necessary. After delivering
the mails postfix will be stoped.
- bnc#559145 - Changed Domain name not reflected when sending mail
First /var/run/dhcp-hostname will be evaluated
- Now POSTFIX_SMTP_TLS_CLIENT is ternary : no yes must
- update to 2.7.0
* performance
- Periodic cache cleanup for the verify(8) cache database.
- Improved before-queue filter performance.
* sender reputation
- The FILTER action in access maps or header/body_checks now supports sender
reputation schemes that dynamically choose the SMTP source IP address.
* address verification
- The verify(8) service now uses a persistent cache by default.
* content filter
- The meaning of an empty filter next-hop destination has changed.
- The FILTER action in access maps or header/body_checks now supports sender
reputation schemes that dynamically choose the SMTP source IP address.
* milter
- Support for header checks on Milter-generated message headers.
Please read /usr/share/doc/packages/postfix/RELEASE_NOTES for details.
- revert the change to PreReq openldap-devel, this increases the
default installation several MBs
- bnc#567569 - Postfix: move ldap support to a separate package
- bnc#557239 - postfix delivers mail to user's home instead of /var/spool/mail
- rpmlint fixes
o init-script-undefined-dependency $network-remotefs
- fix for SuSEconfig.postfix
o if use_amavis eq "yes"
then content_filter "amavis:[127.0.0.1]:10024]" is defined,
so removed "-o content_filter=smtp:[127.0.0.1]:10024" for smtp
- s#ldconfig#/sbin/ldconfig#
- Add support for dovecot as MDA to SuSEconfig.
- Package documentation as noarch
- Remove postfixs update script. This does not work now.
- Fix the %post section add missed %{fillup_only -an mail}
- bnc#555814 ? VUL-0: SMTPD_LISTEN_REMOTE="yes" by default
- bnc#555732 - Invalid $(hostname -i) usage SuSEconfig.postfix
- bnc#547928 ? Postfix does not start during boot process
- Avoid append relay multiple times in POSTFIX_MAP_LIST
- bnc#549612 ? SuSEconfig.postfix
- bnc#540538 ? postfix-2.6.1-10.1 installs new files in /etc/postfix and does not generate <file>.db
- bnc#519438 - Postfix: Running chrooted lets qmgr loosing his syslog-socket
- remove obsolate version tests from SuSEconfig.postfix
- bnc#525825 - when using cyrus in a chroot environment Suseconfig does not
create socket /var/lib/imap/socket/lmtp
- spec
o fdupes if >= 1100
- update to 2.6.1
o merge home:varkoly:Factory and o:F
- spec mods
o use of getent
- rpmlint
o remove unneeded dists from examples/chroot-setup/
o postin-without-ldconfig
o files-duplicate /usr/share/doc/packages/postfix-doc/html/
o files-duplicate /usr/share/man/man?
- added VDA patch
o Mailbox / Maildir size limit, known also as "soft quota",
to avoid user take all you disk space
o Customizable "limit" message when the soft quota limit is reached.
NOTE: message is sent to senders, but NOT to the owner of the mailbox.
o Limit only 'INBOX', because some people use IMAP and don't want
the same limit in IMAP folder that are differents from INBOX.
o Support for 'Courier' style Maildir, usefull for people that
use courier as pop3/imap server and to get fast soft quota summary.
Note that it is also compatible with qmail maildir per default.
o Supports for Courier 'maildirsize' file in Maildir folder that
is used to read quotas quickly. Note that this option is not
actived per default and can be dangerous on some NFS client
implementation
(like for example Solaris that cache some filesystem operations).
o Customisable suffix for Maildir support, when share same external
dict between postfix and pop3/imap server sometime "Maildir/" suffix
is needed to avoid extra database handling (eg LDAP, MySQL...).
- some improvements of SuSEconfig.postfix
o POSTFIX_LISTEN: Comma separated list of IP's
o POSTFIX_INET_PROTO: ipv4, ipv6, all
o POSTFIX_MYHOSTNAME: define SMTPs FQHOSTNAME
o POSTFIX_WITH_MYSQL: when using MySQL as backend
o POSTFIX_BASIC_SPAM_PREVENTION: "custom"
you can now define your own rules
- POSTFIX_SMTPD_CLIENT_RESTRICTIONS
- POSTFIX_SMTPD_HELO_RESTRICTIONS
- POSTFIX_SMTPD_SENDER_RESTRICTIONS
- POSTFIX_SMTPD_RECIPIENT_RESTRICTIONS
- added helo_access for helo checks
- added relay for relaying domain
- added MySQL stuff when using MySQL as backend (virtuser)
o you should consider postfixAdmin as mgmnt interface
o when runninng postfix chrooted:
you have to run SUSEconfig each time when you have restarted MySQL
because of linking mysql.sock
- bnc#439287 - not all POSTFIX_ADD_* values are properly handled
by SuSEconfig.postfix
- bnc#483208 - Postfix configuration trashed after update
- bnc#488268 - SuSEconfig.postfix chroot setup misses /etc/ssl/certs
- bnc#465165 - postfix src package
- bnc#464869 - SuSEconfig.postfix causes DNS lookup
- bnc#460442 - amavisd-new and Postfix need fqdn-hostname in "uname -n"
- update to 2.5.6
- The SMTP server did not ask for a client certificate
with "smtpd_tls_req_ccert = yes". Reported by Rob Foehl.
- Avoid reduced TCP performance when reusing an SMTP connection
with a larger than 4096-byte TCP MSS value. In practice, this
could happen only with loopback (localhost) connections.
- (bnc#442456) - chrooted postfix and saslauthd
- fix build
- upgrade must not be executed during installation
- (bnc#403976) - permissions on /var/lib/postfix changed
- (bnc#433916) - postfix should be splitted into postfix and postfix-doc
- (bnc#415216) - Postfix RPM Install Displays Multiple Warnings
- clean up spec file
- Update to Version 2.5 patchlevel 5
* Bugfix (introduced Postfix 2.4): epoll file descriptor leak.
With Postfix >= 2.4 on Linux >= 2.6, Postfix has an epoll
file descriptor leak when it executes non-Postfix commands
in, for example, user-controlled $HOME/.forward files.
* Security: some systems have changed their link() semantics,
and will hardlink a symlink, contrary to POSIX and XPG4.
Sebastian Krahmer, SuSE. File: util/safe_open.c.
The solution introduces the following incompatible change:
when the target of mail delivery is a symlink, the parent
directory of that symlink must now be writable by root only
(in addition to the already existing requirement that the
symlink itself is owned by root). This change will break
legitimate configurations that deliver mail to a symbolic
link in a directory with less restrictive permissions.
* Bugfix: dangling pointer in vstring_sprintf_prepend().
File: util/vstring.c.
- init script: copy LSB *-Start tags to *-Stop
- spec file: removed obsolete rc.config update hooks
- (bnc#414959) postfix doesn't have any "Name: " tag in firewall definition
- (bnc#405900) SuSEconfig.postfix changes owner and permissions of
/tmp if smtpd_tls_CApath is not set
- Update to Version 2.5 patchlevel 3
* Cleanup of code
* defer delivery when a mailbox file is not owned by the recipient.
Requested by Sebastian Krahmer, SuSE.
Specify "strict_mailbox_ownership=no" to ignore ownership discrepancies.
* Bugfix: null-terminate CN comment string after sanitization.
* Bugfix (introduced Postfix 2.0): after "warn_if_reject
reject_unlisted_recipient/sender", the SMTP server mistakenly
remembered that recipient/sender validation was already done.
- (fate#305005) Enable SMTPS in postfix ootb
- (bnc#396985) sending of NUL character disallowed by RFC2822
- (bnc#397127) without relay is silent about undeliverable mails
- (bnc#389670) - postfix generates invalid config
- remove dir /usr/share/omc/svcinfo.d as it is provided now
by filesystem
- Update to Version 2.5 patchlevel 1
Changes: The Postfix 2.5 "postfix upgrade-configuration" command
now works even with Postfix 2.4 or earlier versions of the
postfix command. When installing Postfix 2.5.0 without upgrading
from an existing master.cf file, the new master.cf file had an
incorrect process limit for the proxywrite service. This service
is used only by the obscure "smtp_sasl_auth_cache_name" and
"lmtp_sasl_auth_cache_name" configuration parameters. Someone
needed multi-line support for header/body Milter replies. The
LDAP client's TLS support was broken in several ways.
- #360572 - postfix %post script leaves lots of backup files in /etc/postfix/
- Update to Version 2.5 patchlevel 0
Major changes - critical
- -----------------------
[Incompat 20071224] The protocol to send Milter information from
smtpd(8) to cleanup(8) processes was cleaned up. If you use the
Milter feature, and upgrade a live Postfix system, you may see an
"unexpected record type" warning from a cleanup(8) server process.
To prevent this, execute the command "postfix reload". The
incompatibility affects only systems that use the Milter feature.
It does not cause loss of mail, just a minor delay until the remote
SMTP client retries.
[Incompat 20071212] The allow_min_user feature now applies to both
sender and recipient addresses in SMTP commands. With earlier Postfix
versions, only recipients were subject to the allow_min_user feature,
and the restriction took effect at mail delivery time, causing mail
to be bounced later instead of being rejected immediately.
[Incompat 20071206] The "make install" and "make upgrade" procedures
now create a Postfix-owned directory for Postfix-writable data files
such as caches and random numbers. The location is specified with
the "data_directory" parameter (default: "/var/lib/postfix"), and
the ownership is specified with the "mail_owner" parameter.
[Incompat 20071206] The tlsmgr(8) and verify(8) servers no longer
use root privileges when opening the address_verify_map,
* _tls_session_cache_database, and tls_random_exchange_name cache
files. This avoids a potential security loophole where the ownership
of a file (or directory) does not match the trust level of the
content of that file (or directory).
[Incompat 20071206] The tlsmgr(8) and verify(8) cache files should
now be stored as Postfix-owned files under the Postfix-owned
data_directory. As a migration aid, attempts to open these files
under a non-Postfix directory are redirected to the Postfix-owned
data_directory, and a warning is logged.
This is an example of the warning messages:
Dec 6 12:56:22 bristle postfix/tlsmgr[7899]: warning: request
to update file /etc/postfix/prng_exch in non-postfix directory
/etc/postfix
Dec 6 12:56:22 bristle postfix/tlsmgr[7899]: warning: redirecting
the request to postfix-owned data_directory /var/lib/postfix
If you wish to continue using a pre-existing tls_random_exchange_name
or address_verify_map file, move it to the Postfix-owned data_directory
and change ownership from root to Postfix (that is, change ownership
to the account specified with the mail_owner configuration parameter).
[Feature 20071205] The "make install" and "make upgrade" procedures
now create a Postfix-owned directory for Postfix-writable data files
such as caches and random numbers. The location is specified with
the "data_directory" parameter (default: "/var/lib/postfix"), and
the ownership is specified with the "mail_owner" parameter.
[Incompat 20071203] The "make upgrade" procedure adds a new service
"proxywrite" to the master.cf file, for read/write lookup table
access. If you copy your old configuration file over the updated
one, you may see warnings in the maillog file like this:
connect #xx to subsystem private/proxywrite: No such file or directory
To recover, run "postfix upgrade-configuration" again.
[Incompat 20070613] The pipe(8) delivery agent no longer allows
delivery with the same group ID as the main.cf postdrop group.
Major changes - malware defense
- ------------------------------
[Feature 20080107] New "pass" service type in master.cf. Written
years ago, this allows future front-end daemons to accept all
connections from the network, and to hand over connections from
well-behaved clients to Postfix. Since this feature uses file
descriptor passing, it imposes no overhead once a connection is
handed over to Postfix. See master(5) for a few details.
[Feature 20070911] Stress-adaptive behavior. When a "public" network
service runs into an "all processes are busy" condition, the master(8)
daemon logs a warning, restarts the service, and runs it with "-o
stress=yes" on the command line (under normal conditions it runs
the service with "-o stress=" on the command line). This can be
used to make main.cf parameter settings stress dependent, for
example:
/etc/postfix/main.cf:
smtpd_timeout = ${stress?10}${stress:300}
smtpd_hard_error_limit = ${stress?1}${stress:20}
Translation: under conditions of stress, use an smtpd_timeout value
of 10 seconds instead of 300, and use smtpd_hard_error_limit of 1
instead of 20. The syntax is explained in the postconf(5) manpage.
The STRESS_README file gives examples of how to mitigate flooding
problems.
Major changes - tls support
- --------------------------
[Incompat 20080109] TLS logging output has changed to make it more
useful. Existing logfile parser regular expressions may need
adjustment.
- More log entries include the "hostnamename[ipaddress]" of the
remote SMTP peer.
- Certificate trust chain error reports show only the first
error certificate (closest to the trust chain root), and the
reporting is more human-readable for the most likely errors.
- After the completion of the TLS handshake, the session is logged
with TLS loglevel >= 1 as either "Untrusted", "Trusted" or
"Verified" (SMTP client only).
- "Untrusted" means that the certificate trust chain is invalid,
or that the root CA is not trusted.
- "Trusted" means that the certificate trust chain is valid, and
that the root CA is trusted.
- "Verified" means that the certificate meets the SMTP client's
matching criteria for the destination:
- In the case of a destination name match, "Verified" also
implies "Trusted".
- In the case of a fingerprint match, CA trust is not applicable.
- The logging of protocol states with TLS loglevel >= 2 no longer
reports bogus error conditions when OpenSSL asks Postfix to refill
(or flush) network I/O buffers. This loglevel is for debugging
only; use 0 or 1 in production configurations.
[Feature 20080109] The Postfix SMTP client has a new "fingerprint"
security level. This avoids dependencies on CAs, and relies entirely
on bi-lateral exchange of public keys (really self-signed or private
CA signed X.509 public key certificates). Scalability is clearly
limited. For details, see the fingerprint discussion in TLS_README.
[Feature 20080109] The Postfix SMTP server can now use SHA1 instead
of MD5 to compute remote SMTP client certificate fingerprints. For
backwards compatibility, the default algorithm is MD5. For details,
see the "smtpd_tls_fingerprint_digest" parameter in the postconf(5)
manual.
[Feature 20080109] The maximum certificate trust chain depth
(verifydepth) is finally implemented in the Postfix TLS library.
Previously, the parameter had no effect. The default depth was
changed to 9 (the OpenSSL default) for backwards compatibility.
If you have explicity limited the verification depth in main.cf,
check that the configured limit meets your needs. See the
"lmtp_tls_scert_verifydepth", "smtp_tls_scert_verifydepth" and
"smtpd_tls_ccert_verifydepth" parameters in the postconf(5) manual.
[Feature 20080109] The selection of SSL/TLS protocols for mandatory
TLS can now use exclusion rather than inclusion. Either form is
acceptable; see the "lmtp_tls_mandatory_protocols",
"smtp_tls_mandatory_protocols" and "smtpd_tls_mandatory_protocols"
parameters in the postconf(5) manual.
Major changes - scheduler
- ------------------------
[Feature 20071130] Revised queue manager with separate mechanisms
for per-destination concurrency control and for dead destination
detection. The concurrency control supports less-than-1 feedback
to allow for more gradual concurrency adjustments, and uses hysteresis
to avoid rapid oscillations. A destination is declared "dead" after
a configurable number of pseudo-cohorts(*) reports connection or
handshake failure.
(*) A pseudo-cohort is a number of delivery requests equal to a
destination's delivery concurrency.
The drawbacks of the old +/-1 feedback scheduler are a) overshoot
due to exponential delivery concurrency growth with each pseudo-cohort(*)
(5-10-20...); b) throttling down to zero concurrency after a single
pseudo-cohort(*) failure. The latter was especially an issue with
low-concurrency channels where a single failure could be sufficient
to mark a destination as "dead", and suspend further deliveries.
New configuration parameters: destination_concurrency_feedback_debug,
default_destination_concurrency_positive_feedback,
default_destination_concurrency_negative_feedback,
default_destination_concurrency_failed_cohort_limit, as well as
transport-specific versions of the same.
The default parameter settings are backwards compatible with older
Postfix versions. This may change after better defaults are field
tested.
The updated SCHEDULER_README document describes the theory behind
the new concurrency scheduler, as well as Patrik Rak's preemptive
job scheduler. See postconf(5) for more extensive descriptions of
the configuration parameters.
Major changes - small/home office
- --------------------------------
[Feature 20080115] Preliminary SOHO_README document that combines
bits and pieces from other document in one place, so that it is
easier to find. This document describes the "mail sending" side
only.
[Feature 20071202] Output rate control in the queue manager. For
example, specify "smtp_destination_rate_delay = 5m", to pause five
minutes between message deliveries. More information in the postconf(5)
manual under "default_destination_rate_delay".
Major changes - smtp client
- --------------------------
[Incompat 20080114] The Postfix SMTP client now by default defers
mail after a remote SMTP server rejects a SASL authentication
attempt. Specify "smtp_sasl_auth_soft_bounce = no" for the old
behavior.
[Feature 20080114] The Postfix SMTP client can now avoid making
repeated SASL login failures with the same server, username and
password. To enable this safety feature, specify for example
"smtp_sasl_auth_cache_name = proxy:btree:/var/lib/postfix/sasl_auth_cache"
(access through the proxy service is required). Instead of trying
to SASL authenticate, the Postfix SMTP client defers or bounces
mail as controlled with the new smtp_sasl_auth_soft_bounce configuration
parameter.
[Feature 20071111] Header/body checks are now available in the SMTP
client, after the implementation was moved from the cleanup server
to a library module. The SMTP client provides only actions that
don't change the message delivery time or destination: warn, replace,
prepend, ignore, dunno, ok.
[Incompat 20070614] By default, the Postfix Cyrus SASL client no
longer sends a SASL authoriZation ID (authzid); it sends only the
SASL authentiCation ID (authcid) plus the authcid's password. Specify
"send_cyrus_sasl_authzid = yes" to get the old behavior.
Major changes - smtp server
- --------------------------
[Feature 20070724] Not really major. New support for RFC 3848
(Received: headers with ESMTPS, ESMTPA, or ESMTPSA); updated SASL
support according to RFC 4954, resulting in small changes to SMTP
reply codes and (DSN) enhanced status codes.
Major changes - milter
- ---------------------
[Incompat 20071224] The protocol to send Milter information from
smtpd(8) to cleanup(8) processes was cleaned up. If you use the
Milter feature, and upgrade a live Postfix system, you may see an
"unexpected record type" warning from a cleanup(8) server process.
To prevent this, execute the command "postfix reload". The
incompatibility affects only systems that use the Milter feature.
It does not cause loss of mail, just a minor delay until the remote
SMTP client retries.
[Feature 20071221] Support for most of the Sendmail 8.14 Milter
protocol features.
To enable the new features specify "milter_protocol = 6" and link
the filter application with a libmilter library from Sendmail 8.14
or later.
Sendmail 8.14 Milter features supported at this time:
- NR_CONN, NR_HELO, NR_MAIL, NR_RCPT, NR_DATA, NR_UNKN, NR_HDR,
NR_EOH, NR_BODY: The filter can tell Postfix that it won't reply
to some of the SMTP events that Postfix sends. This makes the
protocol less chatty and improves performance.
- SKIP: The filter can tell Postfix to skip sending the rest of
the message body, which also improves performance.
- HDR_LEADSPC: The filter can request that Postfix does not delete
the first space character between header name and header value
when sending a header to the filter, and that Postfix does not
insert a space character between header name and header value
when receiving a header from the filter. This fixes a limitation
in the old Milter protocol that can break DKIM and DK signatures.
- SETSYMLIST: The filter can override one or more of the main.cf
milter_xxx_macros parameter settings.
Sendmail 8.14 Milter features not supported at this time:
- RCPT_REJ: report rejected recipients to the mail filter.
- CHGFROM: replace sender, with optional ESMTP command parameters.
- ADDRCPT_PAR: add recipient, with optional ESMTP command parameters.
It is unclear when (if ever) the missing features will be implemented.
SMFIP_RCPT_REJ requires invasive changes in the SMTP server recipient
processing and error handling. SMFIR_CHGFROM and SMFIR_ADDRCPT_PAR
require ESMTP command-line parsing in the cleanup server. Unfortunately,
Sendmail's documentation does not specify what ESMTP options are
supported, but only discusses examples of things that don't work.
Major changes - address verification
- -----------------------------------
[Incompat 20070514] The default sender address for address verification
probes was changed from "postmaster" to "double-bounce", so that
the Postfix SMTP server no longer causes surprising behavior by
excluding "postmaster" from SMTP server access controls.
Major changes - ldap
- -------------------
[Incompat 20071216] Due to an incompatible API change between
OpenLDAP 2.0.11 and 2.0.12, an LDAP client compiled for OpenLDAP
version <= 2.0.11 will refuse to work with an OpenLDAP library
version >= 2.0.12 and vice versa.
Major changes - logging
- ----------------------
[Incompat 20080109] TLS logging output has changed to make it more
useful. Existing logfile parser regular expressions may need
adjustment.
- More log entries include the "hostnamename[ipaddress]" of the
remote SMTP peer.
- Certificate trust chain error reports show only the first
error certificate (closest to the trust chain root), and the
reporting is more human-readable for the most likely errors.
- After the completion of the TLS handshake, the session is logged
with TLS loglevel >= 1 as either "Untrusted", "Trusted" or
"Verified" (SMTP client only).
- "Untrusted" means that the certificate trust chain is invalid,
or that the root CA is not trusted.
- "Trusted" means that the certificate trust chain is valid, and
that the root CA is trusted.
- "Verified" means that the certificate meets the SMTP client's
matching criteria for the destination:
- In the case of a destination name match, "Verified" also
implies "Trusted".
- In the case of a fingerprint match, CA trust is not applicable.
- The logging of protocol states with TLS loglevel >= 2 no longer
reports bogus error conditions when OpenSSL asks Postfix to refill
(or flush) network I/O buffers. This loglevel is for debugging
only; use 0 or 1 in production configurations.
[Incompat 20071216] The SMTP "transcript of session" email now
includes the remote SMTP server TCP port number.
Major changes - loop detection
- -----------------------------
[Incompat 20070422] [Incompat 20070422] When the pipe(8) delivery
agent is configured to create the optional Delivered-To: header,
it now first checks if that same header is already present in the
message. If so, the message is returned as undeliverable. This test
should have been included with Postfix 2.0 when Delivered-To: support
was added to the pipe(8) delivery agent.
- Remove previous fix
- #301335 - [SuSEconfig]: Postfix module uses stderr
- Update to Version 2.4 patchlevel 6
Bugfix (introduced Postfix 2.2.11): TLS client certificate
with unparsable canonical name caused the SMTP server's
policy client to allocate zero-length memory, triggering
an assertion that it shouldn't do such things. File:
smtpd/smtpd_check.c.
Bugfix (introduced Postfix 2.4) missing initialization of
event mask in the event_mask_drain() routine (used by the
obsolete postkick(1) command). Found by Coverity. File:
util/events.c.
Workaround: the flush daemon forces an access time update
for the per-destination logfile, to prevent an excessive
rate of delivery attempts when the queue file system is
mounted with "noatime". File: flush/flush.c.
- #330276 ? /sbin/conf.d/SuSEconfig.postfix could copy certs into smtpd_tls_CApath
- Use correct SuSEfirewall2 rule directory.
- #333629 - saslauthd typo in SuSEconfig.postfix
- #331044 - Postfix uses receive_override_options in main.cf
- fix the last fix
- fix the last fix
- Fixing bug: #297622 - SMTPD_LISTEN_REMOTE has no effect
- Update to Version 2.4 patchlevel 5
Bugfix: the loopback TCP performance workaround was ineffective
due to a wetware bit-flip during code cleanup. File:
util/vstream_tweak.c.
(patch level 4)
Bugfix: the Milter client assumed that a Milter application
does not modify the message header or envelope, after that
same Milter application has modified the message body of
that same email message. This is not a problem with updates
by different Milter applications. Problem was triggered
by Jose-Marcio Martins da Cruz. Also simplified the handling
of queue file update errors. File: milter/milter8.c.
Workaround: some non-Cyrus SASL SMTP servers require SASL
login without authzid (authoriZation ID), i.e. the client
must send only the authcid (authentiCation ID) + the authcid's
password. In this case the server is supposed to derive
the authzid from the authcid. This works as expected when
authenticating to a Cyrus SASL SMTP server. To get the old
behavior specify "send_cyrus_sasl_authzid = yes", in which
case Postfix sends the (authzid, authcid, password), with
the authzid equal to the authcid. File: xsasl/xsasl_cyrus_client.c.
Portability: /dev/poll support for Solaris chroot jail setup
scripts. Files: examples/chroot-setup/Solaris8,
examples/chroot-setup/Solaris10.
Cleanup: Milter client error handling, so that the (Postfix
SMTP server's Milter client) does not get out of sync with
Milter applications after the (cleanup server's Milter
client) encounters some non-recoverable problem. Files:
milter/milter8.c, smtpd/smtpd.c.
Performance: workaround for poor TCP performance on loopback
(127.0.0.1) connections. Problem reported by Mark Martinec.
Files: util/vstream_tweak.c, milter/milter8.c, smtp/smtp_connect.c,
smtpstone/*source.c.
Bugfix: when a milter replied with ACCEPT at or before the
first RCPT command, the cleanup server would apply the
non_smtpd_milters setting as if the message was a local
submission. Problem reported by Jukka Salmi. Also, the
cleanup server would get out of sync with the milter when
a milter replied with ACCEPT at the DATA command. Files:
cleanup/cleanup_envelope.c, smtpd/smtpd.c, milter/milters.c.
- rediffed patches
- Update to Version 2.4 patchlevel 3
(patch level 1)
Bugfix (introduced Postfix 2.3): segfault with HOLD action
in access/header_checks/body_checks on 64-bit platforms.
File: cleanup/cleanup_api.c.
Portability (introduced 20070325): the fix for hardlinks
and symlinks in postfix-install forgot to work around shells
where "IFS=/ command" makes the IFS setting permanent. This
is allowed by some broken standard, and affects Solaris.
File: postfix-install.
Portability (introduced 20070212): the workaround for
non-existent library bugs with descriptors >= FD_SETSIZE
broke with "fcntl F_DUPFD: Invalid argument" on 64-bit
Solaris. Files: master/multi_server.c, *qmgr/qmgr_transport.c.
Cleanup: on (Linux) platforms that cripple signal handlers
with deadlock, "postfix stop" now forcefully stops all the
processes in the master's process group, not just the master
process alone. File: conf/postfix-script.
(patch level 2)
Bugfix: don't falsely report "lost connection from
localhost[127.0.0.1]" when Postfix is being portscanned.
Files: smtpd/smtpd_peer.c, qmqpd/qmqpd_peer.c.
Robustness: recommend a "0" process limit for policy servers
to avoid "connection refused" problems when the smtpd process
limit exceeds the default process limit. File:
proto/SMTPD_POLICY_README.html.
Safety: when IPv6 (or IPv4) is turned off, don't treat an
IPv6 (or IPv4) connection from e.g. inetd as if it comes
from localhost[127.0.0.1]. Files: smtpd/smtpd_peer.c,
qmqpd/qmqpd_peer.c.
Bugfix: Content-Transfer-Encoding: attribute values are
case insensitive. File: src/cleanup/cleanup_message.c.
Bugfix: mailbox_transport(_maps) and fallback_transport(_maps)
were broken when used with the error(8) or discard(8)
transports. Cause: insufficient documentation. Files:
error/error.c, discard/discard.c.
Bugfix (problem introduced Postfix 2.3): when DSN support
was introduced it broke "agressive" recipient duplicate
elimination with "enable_original_recipient = no". File:
cleanup/cleanup_out_recipient.c.
Bugfix (introduced Postfix 2.3): the sendmail/postdrop
commands would hang when trying to submit a message larger
than the per-message size limit. File: postdrop/postdrop.c.
Sabotage the saboteur who insists on breaking Postfix by
adding gethostbyname() calls that cause maildir delivery
to fail when the machine name is not found in /etc/hosts,
or that cause Postfix processes to hang when the network
is down.
(patch level 3)
Portability: Victor helpfully pointed out that change
20070425 broke on non-IPv6 systems. Files: smtpd/smtpd_peer.c,
qmqpd/qmqpd_peer.c.
- Bug 285553 amavisd inconsistency
- provide smtp meta-service as well
- don't PreRequire /sbin/ip: removed call in SuSEconfig.postfix
- dynamic_maps.patch: readded the chunk for dict_tcp and dict_pcre
- replaced prereq for postfix with a prereq on
%{name} = %{version}
- updated to postfix 2.4, patchlevel 0
Major changes - safety
* As a safety measure, Postfix now by default creates mailbox dotlock
files on all systems. This prevents problems with GNU POP3D which
subverts kernel locking by creating a new mailbox file and deleting
the old one
Major changes - Milter support
* The support for Milter header modification
requests was revised. With minimal change in the on-disk representation,
the code was greatly simplified, and regression tests were updated
to ensure that old errors were not re-introduced. The queue file
format is entirely backwards compatible with Postfix 2.3.
* Support for Milter requests to replace the message
body. Postfix now implements all the header/body modification
requests that are available with Sendmail 8.13.
* A new field is added to the queue file "size"
record that specifies the message content length. Postfix 2.3 and
older Postfix 2.4 snapshots will ignore this field, and will report
the message size as it was before the body was replaced.
Major changes - TLS support
* The check_smtpd_policy client sends TLS certificate
attributes (client ccert_subject, ccert_issuer) only after successful
client certificate verification. The reason is that the certification
verification status itself is not available in the policy request.
* The check_smtpd_policy client sends TLS certificate
fingerprint information even when the certificate itself was not
verified.
* The remote SMTP client TLS certificate fingerprint
can be used for access control even when the certificate itself was
not verified.
* The format of SMTP server TLS session cache
lookup keys has changed. The lookup key now includes the master.cf
service name.
Major changes - performance
* Better support for systems that run thousands
of Postfix processes. Postfix now supports FreeBSD kqueue(2),
Solaris poll(7d) and Linux epoll(4) as more scalable alternatives
to the traditional select(2) system call, and uses poll(2) when
examining a single file descriptor for readability or writability.
These features are supported on sufficiently recent versions of
FreeBSD, NetBSD, OpenBSD, Solaris and Linux; support for other
systems will be added as evidence becomes available that usable
implementations exist.
Major changes - delivery status notifications
* Small changes were made to the default bounce
message templates, to prevent HTML-aware software from hiding or
removing the text "<postmaster>", and producing misleading text.
* Postfix no longer announces its name in delivery
status notifications. Users believe that Wietse provides a free
help desk service that solves all their email problems.
Major changes - ETRN support
* More precise queue flushing with the ETRN,
"postqueue -s site", and "sendmail -qRsite" commands, after
minimization of race conditions. New per-queue-file flushing with
"postqueue -i queueid" and "sendmail -qIqueueid".
Major changes - small office/home office support
* Postfix no longer requires a domain name. It
uses "localdomain" as the default Internet domain name when no
domain is specified via main.cf or via the machine's hostname.
Major changes - SMTP access control
* The check_smtpd_policy client sends TLS certificate
attributes (client ccert_subject, ccert_issuer) only after successful
client certificate verification. The reason is that the certification
verification status itself is not available in the policy request.
* The check_smtpd_policy client sends TLS certificate
fingerprint information even when the certificate itself was not
verified.
* The remote SMTP client TLS certificate fingerprint can be used for
access control even when the certificate itself was not verified.
* The Postfix installation procedure no longer
updates main.cf with "unknown_local_recipient_reject_code = 450".
Four years after the introduction of mandatory recipient validation,
this transitional tool is no longer neeed.
- Add pwdutils BuildRequires to allow postinst script to succeed.
- Add /usr/share/omc directory.
- #247351 - postfix - Ports for SuSEfirewall added via packages
- Move postfix.xml into the postfix-SuSE tarball
- #228479 - Postfix is configured for inet_protocols=all if
selecting ipv4 only support during installation.
Now we set both inet_protocols and inet_interfaces to all.
This means the available interfaces and protocols will be used.
To avoid bogus warnings inet_proto.c was patched.
- #251598 - postfix use pointers for literals
- #144104 - postfix does not start
- Implementing Fate #301840: Postfix XML Service Description Document
- Enhancing /etc/sysconfig/postfix descripton to avoid problems
like Bug 228678 - Problems with setting up chroot environment if
/var/spool is not on same filesystem as /var
- moved the dict handling into a preun script instead of postun
and do not remove the dict entry on upgrade (#223176)
- removed duplicates in the filelists.
- #218229 - Postfix SuSEconfig script increases the max_proc line each run in master.cf
- #206414 - /usr/lib/sasl2/smtpd.conf misplaced
- #202119 ? SuSEconfig script for Postfix incomplete
- #202162 ? Postfix 2.3.2 slightly incorrect, Cyrus SASL unavailable
- #203174 ? /sbin/conf.d/SuSEconfig.postfix should configure a TLS session cache for postfix 2.2
- #203575 ? postfix-2.2.9-10 chokes without scache
- #213589 - No development package/headers for postfix
- also add libpostfix-milter.so*
- updated to postfix 2.3, patchlevel 2
- Major changes
- Name server replies that contain a malformed hostname are now flagged
as permanent errors instead of transient errors.
- DSN support as described in RFC 3461 .. RFC 3464.
- The SMTP client now implements the LMTP protocol.
- Milter (mail filter) application support, compatible with Sendmail
version 8.13.6 and earlier.
- Major changes - SASL authentication
- Plug-in support for SASL authentication in the SMTP server and in the
SMTP/LMTP client.
- The Postfix-with-Cyrus-SASL build procedure has changed.
- Support for sender-dependent ISP accounts.
- Major changes - SMTP client
- The SMTP client now implements the LMTP protocol.
- This version addresses a performance stability problem with remote
SMTP servers.
- Major changes - SMTP server
- The Postfix SMTP server now refuses to receive mail from the network
if it isn't running with postfix mail_owner privileges.
- Optional suppression of remote SMTP client hostname lookup and hostname
verification.
- SMTPD Access control based on the existence of an address->name mapping
- Major changes - TLS
- New concept: TLS security levels ("none", "may", "encrypt", "verify"
or "secure") in the Postfix SMTP client.
- Both the Postfix SMTP client and server can be configured without a
client or server certificate.
- See
/usr/share/doc/packages/postfix/RELEASE_NOTES
/usr/share/doc/packages/postfix/TLS_CHANGES
/usr/share/doc/packages/postfix/README_FILES/SASL_README
for detailed informations.
- Only %{conf_backup_dir} is contained by the package not /var/adm/backup
- Bugfix: #190639 Default number of processes for postfix
- Bugfix: #190270 postfix-postgresql
- Bugfix: #98188 - SuSE.tar.gz filename collision in cyrus/postfix SRPMs
- Bugfix: #165786 - yast2-mail modul uses obsolate postfix attributes
- updated to postfix 2.2, patchlevel 9.
- Reasons:
Bugfix: the LMTP client would reuse a session after negative
reply to the RSET command (which may happen when client and
server somehow get out of sync).
Bugfix: race condition in the connection caching protocol,
causing the SMTP delivery agent to hang after delivering
mail, while trying to save a connection.
Bugfix: the best_mx_transport, mailbox_transport and
fallback_transport features did not write a per-recipient
defer logfile record when the target delivery agent was
broken.
Bugfix: an EHLO I/O error after STARTTLS would be reported
as a STARTTLS I/O error.
Bugfix: the *SQL, proxy and LDAP maps were not defined in
user-land commands such as postqueue.
Bugfix: the anvil server would terminate after "max_idle"
seconds, even when this was less than the anvil_rate_time_unit
interval.
Portability: 64-bit support for LINUX chroot script by Keith
Owens.
Safety: new "smtp_cname_overrides_servername" parameter.
Bugfix: mailbox_command_maps was not subject to $name
expansion.
Bugfix: don't ignore the per-site policy when SSL library
initialization fails.
Bugfix: a TLS per-site MUST_NOPEERMATCH policy could not
override a stronger main.cf policy, while a per-site NONE
policy could.
Bugfix: a combined TLS per-site (host, recipient) policy
of (NONE, MAY) changed a global MUST policy into NONE, and
a global MUST_NOPEERMATCH into MAY. The result is now NONE.
Problem found by exhaustive simulation.
Bugfix: an empty remote_header_rewrite_domain value caused
trivial-rewrite to dereference a null pointer, but only in
regression tests, not in production. Postfix rewrites
addresses in the remote rewriting context only when the
remote_header_rewrite_domain parameter value is non-empty.
Workaround: a malformed domain name lookup result (such as
null MX record) is now treated as a hard error, so that
Postfix will no longer repeatedly try to deliver mail until
the message expires in the queue. However, this will not
reject mail with reject_unknown_sender/recipient_domain.
That would require too much change for a stable release.
- converted neededforbuild to BuildRequires
- Fixing the spec-file
- Bugfix: ID#143682 - Spurious (obsoleted?) configuration variable in postfix's main.cf
- Bugfix: ID#140173 postfix allows relaying on the whole subnet
- Bugfix: ID#144091 postfix doesn't start with the latest kernel
- Bugfix: ID#144091
- Postfix makes an entry in slp servre for smtp & smtps
- removing openldap from "neededforbuild"
- updated to postfix 2.2, patchlevel 6
- added patch ldap_api_changes.patch: openldap2.3 enforces to use
"The C LDAP Application Program Interface"
- Bugfix Bugzilla ID#104663 - consistent use of variables in postfix
init-script
- Bugfix Bugzilla ID#104568 - SuSEconfig.postfix doesnt set $PATH properly to
find all binaries.
- Package the /usr/lib/sendmail -> /usr/sbin/sendmail link [#102947]
- Bugfix Bugzilla ID#93884 - package postfix uses -fsigned-char
Remove -fsigned-char option for ppc and s390 archs
- updated to postfix 2.2, patchlevel 5:
- Portability: the connection caching code broke on LP64
systems (inherited from Stevens Network Programming).
Files: util/unix_send_fd.c, util/unix_recv_fd.c. This code
is back-ported from the Postfix 2.3 snapshot release.
- Robustness: the SMTP client now disables connection caching
when it is unable to communicate with the scache(8) server,
instead of looping forever and not delivering mail. File:
global/scache_clnt.c. This code is back-ported from the
Postfix 2.3 snapshot release.
- Portability: after sending a socket, the scache(8) server
now waits for an ACK from the connection cache client before
closing the socket that it just sent. Files: scache/scache.c,
global/scache_clnt.c. This code is back-ported from the
Postfix 2.3 snapshot release.
- Portability: on LP64 systems, integer expressions are int,
but sizeof() and pointer difference expressions are larger.
Point fixes for a few discrepancies with variadic functions
that expect int (the permanent fix is to change the receiving
modules, but that results in too much change, and is not
allowed in the stable release). Files: tls/tls_scache.c,
util/clean_env.c, util/vstring.h, smtpstone/qmqp-source.c.
- force to set strict_8bitmime to "no" when POSTFIX_MDA != cyrus,
because once it is set to "yes", nobody sets it back.
- only install /etc/pam.d/smtp if suse_version > 920
- use Prereq instead of Requires for mysql and postgresql subpackages
- added /etc/pam.d/smtp configuration file
- Fixed build on x86_64: use -fPIC for libraries and -fPIE for the
rest
- applied dynamic maps patch of LaMont Jones at debian
- Fix to SuSEconfig.postfix: only touch tlsmgr line in master.cf,
if it is the new one using unix socket instead of fifo
- build with -fPIE (not -fpie) to avoid GOT overflow on s390x
- updated to postfix 2.2, patchlevel 4
- fixed build using -pie/-fpie (hopefully)
- Build using -pie
- set strict_8bitmime parameter to yes when using cyrus mailbox
delivery
- Bugfix ID#66325 - postfix: permissions
also ship a postfix.paranoid file with the package with all suid and sgid
bits disabled
- updated to postfix 2.2, patchlevel 3
- Bugfix ID#75717 - postfix init scripts reports success allthough postfix is
not running:
use checkproc again instead of "master -t", as "master -t" seems to be broken
- updated to postfix 2.2, patchlevel 2
- Bugfix ID#74712, problems with read-only mounting of $chroot/proc:
don't mount /var/spool/postfix/proc ro as that results in /proc also mounted
ro.
- Bugfix ID#74709, postfix configuration and USE_IPV6 in
sysconfig/network/config
- updated to postfix 2.2, patchlevel 1
Postfix 2.2.1 solves four portability problems that surfaced in
the week since the 2.2.0 release, one harmless bug in the TLS
session cache cleaning code, and cleans up minor documentation
problems.
- 2.2.0 is out
- update to RC2
- make it compile with gcc4
- RC1 of 2.2 is out
- use "usr/sbin/postfix upgrade-configuration" now instead of
"etc/postfix/post-install upgrade-package"
- removed some @ chars (don't know how they slipped in)
- update to current pre 2.2 snapshot (2.2-20050216)
2.2 release could happen next week
- added patch needed for the Kolab project (this patch is part of the upcoming
postfix 2-2 release), see
http://wiki.kolab.org/index.php/Kolab-major-app-patches
- s/X-UnitedLinux-Should-Start/Should-Start/
- added long_header.patch
long lines piped into postfix sendmail can lead to errors.
- Bugfix ID#49307: faster postfix startup: don't use hashed directories if
possible:
- added patch empty_hash_queue_names.patch to be able to modify
hash_queue_names parameter.
- added check to %post to change hash_queue_names in case of
/var/spool/postfix residing on a reiserfs partition when doing
a fresh installation
- Bugfix ID#50386 - postfix must prereq /sbin/ip (iproute2)
- updated tls+ipv6 patchkit to v1.26
- Bugfix: Incomplete error checking in getaddrinfo() could cause lmtpd to
crash with debug_peer_list defined. Carsten Hoeger, SuSE. File:
util/match_ops.c
- Linux workaround: When mynetworks isn't set, a chrooted process could not
read the IPv6 address information from /proc. We now invoke own_inet_addr()
before chrooting, while processing main.cf. [backported from 2.2-nonprod
snapshot] File: global/mail_params.c
- Safety: when IPv6 netmask can't be determined, mynetworks is not set and
mynetworks_style = subnet, assume /128 (host only). Until now, Tru64Unix
assumed /64 (good for real subnets, but not safe for tunnel ranges etc.).
File: util/inet_addr_local.c
- Use <owner>:<group> in permissions file.
- Two fixes to ipv6-patch related bugs:
- Bugfix Bugzilla ID#49435 - VUL-0: Postfix, permit_mx_backup, IPv6, chroot
- -> Open Relay!
- Bugfix Bugzilla ID#49695 - SEGV while lmtp delivery
- mount /proc into chroot jail to be able to access /proc/net/if_inet6
- Put options first in find command line.
- setting LC_ALL=POSIX in SuSEconfig.postfix
- Bugfix Bugzilla ID#46462, postfix should switch biff off
- updated to postfix 2.1, patchlevel 5
(several small bugfixes)
- updated tls+ipv6 patchkit (there have been some small bugs)
- use v4 address 127.0.0.1 as amavisd-new local contact address
as amavisd is not listening on any v6 address
- also chmod the .db file resulting of a postmap (related to
bugfix ID#39045
- Bugfix Bugzilla ID#39045 - tls_per_site table updates in SuSEconfig.postfix
introduced POSTFIX_MAP_LIST in /etc/sysconfig/postfix where additional
maps maintained by SuSEconfig.postfix can be added
- Bugfix Bugzilla ID#45252 - rpm calls SuSEconfig.permissions which calls rpm
- > 3 minute timeout
Also don't call rpm from SuSEconfig.postfix
- Speedup: set timestamp of $TMPDIR/main.cf into the past to workaround
postconf safety which is not neccessary, because we do not touch the main.cf,
the postfix daemons are using.
- added $time to Required-Start in init-script
- do not filter locally delivered mail when USE_AMAVIS=yes
(don't set content_filter=vscan in main.cf)
- removed obsolete vscan service definition from master.cf
- use "$MASTER_BIN -t" to check whether postfix is already running
in start section of init-script. That's more reliable then checkproc.
- Bugfix Bugzilla ID#42995 - SuSEconfig.postfix should ignore
.swp and other files in /etc/aliases.d
- Bugfix Bugzilla ID#42281, openssl ca segfaults:
added missing [ policy_anything ] configuration
options to openssl.cnf
- updated to postfix 2.1, patchlevel 4
- updated tls+ipv6 patchkit to v1.25
- new feature POSTFIX_REGISTER_SLP in /etc/sysconfig/postfix
to be able to totally disable slptool from being started
- updated tls+ipv6 patchkit to v1.24:
- Bugfix: Prefixlen non-null host portion validation (in CIDR maps for
example) yielded incorrect results sometimes because signed arithmetic was
used instad of unsigned.
- Patch correction: The TLS+IPv6 patch for Postfix 2.1.0 missed the master.cf
update (used for new installattions). Added it back.
- as tls and ipv6 patches have not been completely ported to postfix 2.1
new documentation system, especially the new postconf(5) manpage is
missing the complete ipv6 and tls related configuration parameters,
readded the sample-* files from ipv6+tls to %doc/samples
- update to postfix 2.1, patchlevel 1:
- Patch 01 fixes a signal 11 problem in the check_policy_service
feature when SASL support is compiled in but turned off in the
SMTP server (smtpd_sasl_auth_enable = no).
- added now officially released tls patchkit 0.8.18-2.1.0-0.9.7d to
the source package for the user to be able to build a non-ipv6
postfix package
- official tls+ipv6 v1.23 patchkit released:
- Patch fixes: Several code fixes to make the patch compile and work
correctly when compiled without IPv6 support.
- Bugfix (Solaris only?): address family length was not updated
which could cause client hostname validation errors. File:
smtpd/smtpd_peer.c
- Portability: added support for Darwin 7.3+. This may need some
further testing.
- Cleanup: Restructure and redocument interface address retrieval
functions. (This reduced the number of preprocessor statements
from 99 to 93 ;) File: util/inet_addr_local.c
- Cleanup: make several explicit casts to have compilers shut their
pie holes about uninteresting things.
- update to final postfix v2.1
- Bugfix: changed {main,master}.cf backup path in specfile, but not in
SuSEconfig script
- update to postfix 2.1 RC5
- update to current postfix 2.1 release candidate (RC4)
- Bugfix Bugzilla ID#38569, exit SuSEconfig.postfix if
mktemp fails
- Bugfix Bugzilla ID#37409
the saslauthd socket is not copied to chroot jail due to
a wrong test in SuSEconfig.postfix (used -L instead of -S)
- only add ::1 to inet_interfaces when SMTPD_LISTEN_REMOTE=no
AND ipv6 is enabled
- Bugfix Bug ID#37293, SuSEConfig complains POSTFIX_ADD_* parameters are
unknown (in turkish locale settings)
added LC_CTYPE=POSIX to SuSEconfig.postfix
- updated to tls+ipv6 version 1.22 (related to Bugzilla ID#35884)
- Feature: Support "inet_interfaces = IPv4:all" and "inet_interfaces =
IPv6:all", to restrict postfix to use either IPv4-only or IPv6-only. A more
complete implementation will be part of a future patch. (Slightly modified)
patch by Michal Ludvig, SuSE. Files: util/interfaces_to_af.[ch],
util/inet_addr_local.c, global/own_inet_addr.c,
global/wildcard_inet_addr.[ch], master/master_ent.ch
- Bugfix: In Postfix snapshots, a #define was misplaced with the effect that
IPv6 subnets were not included in auto- generated $mynetworks (i.e.,
mynetworks not defined in main.cf, when also mynetworks_style=subnet) on
Linux 2.x systems. File: utils/sys_defs.h
- now adding ::1 to inet_interfaces when SMTPD_LISTEN_REMOTE=no
(related to Bugzilla ID#35884)
- enabled ipv6 again
- updated to most recent snapshot version 2.0.19-20040312:
Patch 19 fixes two low-priority problems:
- When mail is submitted at a high rate with the Postfix sendmail
command, the pickup daemon is keps busy long enough that it it
terminated by the watchdog timer (a feature that prevents Postfix
from locking up permanently).
- Malformed addresses in SMTP commands could result in table looks
with zero-length search strings, causing trouble with NIS lookups.
- disable IPv6 patch as it introduces problems for people
who do not use IPv6, see Bugzilla ID#35884,
"ipv6 mynetworks don't work"
- be a nice packager and strictly follow
http://www.porcupine.org/postfix-mirror/newdoc/PACKAGE_README.html
(added setgid_group=... to post-install upgrade-package)
- update to most recent version 2.0.18-20040209
- Bugfix Bugzilla ID#34817, SuSEconfig.postfix doesn't specify direct path to
"postconf" and generates errors if run via sudo by a non-root user.
- update to postfix 2.0.18-20040205
- enabled tls+ipv6 patch as it is now available for latest
pre 2.1 snapshot
- finally, the official TLS patchkit of Lutz hit the ground
- additional fix for the TLS extensions patch
should also fix Bugzilla ID#34218
- fixed the smtp segfault
- updated to postfix 2.0.18-20040122
- added new feature for specfile usetls to en/dis-able TLS
support
- temporary removed TLS support (self adapted patch to most recent
postfix snapshot version) as it currently results in smtp segfaulting
- update to recent postfix snapshot version 2.0.17-20040120
which will become the next official release 2.1 around
next week according to Wietse Venema.
- added possibility to compile using the combined IPV6/TLS patch
which can be downloaded from http://www.ipnet6.org/postfix/
just set useipv6 to 1 at the top of the specfile.
- remove call to ldap_enable_cache
(function has been removed from openldap and was already
obsolete before (warning was issued back then))
- added openslp register/derigister calls to postfix init-script
- add postfix user to group mail in case of POSTFIX_MDA==cyrus
to let postfix lmtp access /var/lib/imap/socket/lmtp
- Bugfix Bugzilla ID#33421, SMTP-Auth and relaying
added permit_sasl_authenticated also to smtpd_recipient_restrictions
in SuSEconfig.postfix
- always create temp files and always remove them later on
- some .spec improvements
- Run SuSEconfig after install
- Don't build as root
- Be nice and clean up after ourselves
- update to postfix v2.0.16
- update to tls extensions v0.8.16
- Fix for Bugzilla ID#32114, fixed some if condition syntaxes
- fixed example for POSTFIX_RELAYHOST, Bug ID#30756
- updated some sysconfig descriptions
- removed relays.osirosoft.com from the examples, Bug ID#30215
- Fix next useradd call
- conf/postfix-files as input for /etc/permissions.d/postfix (Bug ID#29915)
- generate better amavisd-new master.cf line:
limit maxproc to 2 and use brackets around localhost
(Bug ID#29917)
- use conf/postfix-files as input for directories and permissions
for files/directories in/below $queue_directory and $command_directory
- use /var/lib/imap/socket/lmtp as lmtp socket in SuSEconfig.postfix
and change access modes of /var/lib/imap and /var/lib/imap/socket
to let postfix lmtp access the unix socket
- Create postfix user as system account [Bug #29611]
- Adjust sendmail permissions
- Create /var/spool/postfix/public with permissions postfix is
using
- Add sendmail to /etc/sysconfig/mail
- update to Postfix 2.0 Patch 14
- Bugfix Bugzilla ID#28921:
missing activation metadata in sysconfig template
- new macros for stop/restart of services on rpm update/removal
- chown user:group instead of user.group
- update to tls extensions 0.8.15-2.0.13-0.9.7b
- updated SuSEconfig to use amavisd-new instead of amavis[d]-postfix
- update to Postfix 2.0 Patch 13
- After "postfix reload", the master daemon now warns when the
inet_interfaces parameter setting has changed, and ignores the
change, instead of passing incorrect information to the smtp
server.
- After the postdrop command change with Postfix 2.0.11, the postcat
command no longer recognized "maildrop" queue files as valid.
- Mail could bounce when two messages were delivered simultaneously
to a non-existent mailbox file. The safe_open() code that prevents
race condition exploits will now try a little harder when it
actually encounters a race condition.
- update to tls extensions 0.8.14-2.0.12-0.9.7b
- also change path to smtpd.conf in sysconfig template parameter
description dependent on what %{_lib} is set to.
- update to postfix 2.0, patchlevel 12
- mkdir -p $RPM_BUILD_ROOT/%{_libdir}/sasl2 instead of
$RPM_BUILD_ROOT/usr/lib/sasl2
and we also can build on 64bit archs
- package /usr/lib/sasl2/smtpd.conf using %{_libdir}/sasl2/smtpd.conf
- added /etc/postfix to filelist
- update to postfix 2.0, patchlevel 11
- update to tls extensions 0.8.13-2.0.10-0.9.7b
- updated SuSE/master.cf toplevel comments
- update to postfix 2.0, patchlevel 10
- remove installed (but unpackaged) file /etc/postfix/aliases
- path to ca, certificate and key is relative to $POSTFIX_SSL_PATH,
added $POSTFIX_SSL_PATH/ to the relevant parts of SuSEconfig.postfix
- correctly handle new POSTFIX_SMTP_TLS_CLIENT parameter in
SuSEconfig.postfix (activate/deactivate master.cf entries)
- added libxcrypt to chroot jail, Bugzilla ID#25766
- added TLS_CLIENT support, Bugzilla ID#26647
- update to postfix 2.0, patchlevel 9
- fixed neededforbuild
- update to postfix 2.0, patchlevel 7
- update to tls extensions 0.8.13-2.0.6-0.9.7a
- Bugfix Bugzilla ID#25905, do not restrict mailbox size per default
- use checkproc to check if there really is a postfix master
process running when there's a pid file lying around.
(Bugzilla ID#24910)
- update to Postfix 2.0 Patch 06
- Postfix now truncates non-address information in message address
headers (comments, etc.) to 250 characters per address. This should
rarely present a problem. Reportedly, junk mail from poorly written
software can trigger the protection, but that is no great loss.
- Some little fixes to documentation.
- update to Postfix 2.0 Patch 05
- The SMTP server's hard and soft error limits were off by one.
With "smtpd_hard_error_limit = 1", Postfix will now disconnect
after the first error, instead of the second one.
- The proxymap server could deadlock when the mydestination parameter
setting included a proxymapped lookup table.
- Some little fixes to documentation.
- when updating postfix, check whether post-install changed
main/master.cf and update md5sums to not confuse SuSEconfig
- when installing postfix on a fresh system, create md5sums
in %post to be able to let check_md5_and_move() detect
changes that a user might have done without running SuSEconfig
before.
- no longer remove md5sums of main.cf and master.cf during
postinstall, as SuSEconfig then no longer knows, whether
main.cf/master.cf had been modified by the user.
Disadvantage: as postfix permanently needs basic changes
to both main and master.cf, SuSEconfig.postfix will frequently
generate .SuSEconfig files although the user did not change anything
Bugzilla ID#24432
- update to Postfix 2.0 Patch 04
- The format of maildir filenames is synchronized with the present
version of the maildir definition document. This format was already
adopted by the 20030126 snapshot release.
- The time limit on delivery to external commands was not enforced.
This was broken probably some time before the first public Postfix
release.
- Duplicate elimination after virtual alias expansion works again.
This was broken with the introduction of the original recipient
attribute.
- The local pickup daemon dropped incomplete records from local
submissions. This was broken somewhere in the middle of 2002.
- Bugfix Bugzilla ID#23675: new service proxymap will not be
appended during update
- also check whether amavisd-postfix is installed and set up
filter section in master.cf
- update to Postfix 2.0 Patch 03
- Postfix 2.0 broke relocated table lookup results with mail not
rejected at the SMTP port, causing "User has moved to" text to be
deleted.
- A widely used maildir filename generating algorithm was broken.
This affects all Postfix versions with maildir support. Instead of
TIME.PID_COUNT.HOST Postfix now uses TIME.DEVICE_INODE.HOST.
- Postfix 2.0 gave incorrect FILTER_README instructions for sites
that wish to disable virtual alias mapping before the content
filter.
- postfix-lib64.patch code now integrated in postfix
- changed SuSEconfig.postfix and smtpd.conf to use sasl2
- forgot to add tlsmgr to master.cf
- Hmmm, just noticed, that suddenly 2.0.0.x became 2.0.x
must have missed something...
- updated SuSE/master.cf (new proxymap service)
- added POSTFIX_ADD_MESSAGE_SIZE_LIMIT as example to sysconfig.postfix
(Bugzilla ID#22907)
- build using sasl2
- update to postfix v2 (version 2.0.0.2)
- added sysconfig metadata to sysconfig templates
- updated to new tls extensions
- Bugfix Bugzilla ID#21865: don't copy directories into
directories when updating chroot jail in cpifnewer()
- Update to version 1.11, pl12
- new SuSEconfig.postfix features:
. SMTP-AUTH server
. SMTP-AUTH client
. TLS Server
- quote args of tr command
- new feature: POSTFIX_ADD_* command in sysconfig/postfix to
be able to add any regular postfix command via SuSEconfig
- Bugfix Bugzilla ID#21120 added POSTFIX_ADD_MAILBOX_SIZE_LIMIT
as example with value 0 (unlimited)
- added a header to main.cf explaining that many postfix
parameters have been added to the end of main.cf
- Bugfix for Bugzilla ID#20754
missed some parameters when restoring main.cf or master.cf
from scratch
- NULLCLIENT did not work because SuSEconfig searches for the wrong
keyword
- Bugfix related to Bugzilla IDs 20506, 18298, 19294:
masquerade_classes should not be extended by envelope_recipient
- added ypbind to X-UnitedLinux-Should-Start in init-script
- added restoration mechanism to restore master.cf and/or main.cf
if they got deleted by (intention or) accident to SuSEconfig.postfix
- added ldap to X-UnitedLinux-Should-Start
- Bugfix Bugzilla ID#18298: when setting FROM_HEADER, also unqualified
envelope recipients should be qualified to FROM_HEADER, not to
myorigin, added envelope_recipient to masquerade_classes
- Bugfix Bugzilla ID#18297: %post touches main.cf and master.cf so it
may happen, that an update leaves .SuSEconfig files.
Remove /var/adm/SuSEconfig/md5/etc/postfix/main.cf and master.cf
in %post
- Bugfix Bugzilla ID#18301: sendmail and postfix have different
opinions on the usage of NULLCLIENT. Moved NULLCLIENT to
sysconfig.postfix.POSTFIX_NULLCLIENT
- added exim to Conflicts
- wait for qmgr in the background for a maximum of 60 seconds
- Bugfix for init-script:
wait for qmgr to be ready before calling postfix flush
- added accidently removed line in master.cf for amavis,
Bugzilla ID#17732
- exclude .rpmsave and .rpmorig from /etc/aliases.d expansion
- added netcfg to Prereq (/etc/aliases)
- added pcre openldap2-client to prereq (Bugzilla ID#17447)
- completed Prereq
- Bugfix for the handling of POSTFIX_MASQUERADE_DOMAIN
and FROM_HEADER
- removed main.cf from SuSE.tar.gz
- added X-UnitedLinux-Should-Start: cyrus to init-script
- set local as default MDA again
reason: postfix does not execute any external programs like procmail
with uid 0, so root mails will go to /var/mail/nobody, which
will confuse people
- remove setting of SUSE_RELEASE version in the (E)SMTP banner
- removed /etc/aliases from filelist, it's now in netcfg
- removed 'q' flag from vscan transport definition, because
current amavis versions have a rfc2821_mailbox_addr function
- remove old aliases.db files in %post
- do not use unset in %post
- make procmail the default MDA
- use %{_lib} macro to detect platforms with lib64
directories
- make chroot jail function lib64 aware
- fixed libnsl detection on lib64 systems
- ldap_url_search_st is no longer available in OpenLDAP v2.1
added a patch, that uses ldap_url_parse
- added new feature POSTFIX_MDA, Bugzilla ID#16720
- changed POSTFIX_BASIC_SPAM_PREVENTION. It can now be set to
either off(default), medium or hard
- cleaned up SuSEconfig.postfix
- prepared for /etc/aliases.d
- new FEATURES: POSTFIX_RBL_HOSTS, POSTFIX_BASIC_SPAM_PREVENTION,
Bugzilla ID#16383
- moved sample-*.cf files to %{_docdir}/postfix/samples
- update to patchlevel 11, version 1.1.11
- new FEATURE: POSTFIX_UPDATE_MAPS
- update to patchlevel 10, version 1.1.10
- create required users and groups in %pre install
- removed provides of my own packagename...
- Bugfix for README.SuSE: POSTFIX_CREATECF is now
MAIL_CREATE_CONFIG
- update to patchlevel 7, version 1.1.7
- introduced new feature POSTFIX_LAPTOP
- update to patchlevel 5, version 1.1.5
- Bugfix: don't check whether POSTFIX_MASQUERADE_DOMAIN is empty
or not, because else we won't be able to clear it.
- added flags=q to amavis transport definition (link(a)suse.de):
[...]
If your postfix is older than snapshot 20010610, leave out the
"flags=q" part. However, amavis will not function properly with
envelope adresses that contain whitespace in the local-part.
This is quite rare, but has been observed a few times.
[...]
- update to version 1.1.4 (1.1, patchlevel 4)
Bugfix (excerpt from HISTORY):
..................................................................
off-by-one error, causing a null byte to be
written outside dynamically allocated memory in
the queue manager with addresses of exactly 100
bytes long, resulting in SIGSEGV on systems with
an "exact fit" malloc routine.
..................................................................
- added new option SMTPD_LISTEN_REMOTE to /etc/sysconfig/mail
which has been introduced by the SuSE dist-team (excerpt):
..................................................................
sendmail does have an option to listen only on the local port,
this should be the default.
A flag "SMTPD_LISTEN_REMOTE" in /etc/sysconfig/mail will be used
to decide if port 25 should be opened externally.
The sendmail package will send a mail to root explaining this
fact. sendmail updates will copy the value of START_SMTPD to this
new flag.
..................................................................
As this is a totally different behaviour compared to old releases,
SMTPD_LISTEN_REMOTE will be set to "yes", if POSTFIX_CREATECF
(now MAIL_CREATE_CONFIG) had been set to "yes" before the update.
- fillup workaround
- hostname handling is still annoying
added some piece of code to SuSEconfig.postfix to
get a valid hostname
- %postinst cleanup:
. use rename_sysconfig_variable macro
. use remove_and_set macro
instead of directly calling fillup
- FQHOSTNAME has been removed from /etc/sysconfig/network/config
and is now set in /etc/HOSTNAME, which wasn't FQ in the past.
* Please, don't change it again*
- if POSTFIX_LOCALDOMAINS is set, do not append
"$myhostname, localhost.$mydomain" anymore
- Also take care of the localhost:10025 mailer definition when
setting up chroot options
- Do not set myorigin to FROM_HEADER
- Bugfix(SuSEconfig.postfix): typo in path to /etc/sysconfig/amavis
- SuSEconfig.postfix enhancement: get hostname from hostname -f
Bugfix: get FQHOSTNAME from /etc/sysconfig/network/config
- added -y to fillup_and_insserv to create startlinks
after installation
- changed company name to SuSE Linux AG in copyright headers
- update to postfix 1.1.3 and tls extensions 0.8.3
minor bugfixes
http://groups.yahoo.com/group/postfix-users/message/52953
- Bugfix: Forgot to assign a name to TMPDIR in SuSEconfig.postfix
- added resolve_local_panic.patch
http://groups.yahoo.com/group/postfix-users/message/52746
- update of tls extensions to 0.8.2
- update to version 1.1.2
- sysconfig.mail changes
- renamed cleanup.fillup to sysconfig.postfix.cleanup
- added postqueue patch, see
http://groups.yahoo.com/group/postfix-users/message/51611
for more details
- update to official release version 1.1.0
- moved some stuff to /etc/sysconfig/mail
- cleaned up /etc/rc.config access
- added some safety checks to SuSEconfig.postfix
- update to version 20020115 (release candidate for Postfix
official release version 1.1)
- some improvements to SuSEconfig.postfix
- updated to version 20020107
- added postinstall section to update from previous versions
of postfix
- Changed /sbin/init.d to /etc/init.d in init script comment
- added sender_canonical_maps to SuSEconfig.postfix to let
the new YaST2 module setup this map similar to sendmails
genericstable
- SuSEconfig.postfix shell script is no config file [Bug #12712]
- Made initscript more LSB compliant (status codes)
- Bugfix for Bugzilla ID#12672 (improve explanation
of POSTFIX_LOCALDOMAINS)
- robustness enhancement for SuSEconfig.postfix
- typo in specfile (master.cf installed as main.cf)
- update to version 20011210
- some changes to SuSEconfig.postfix:
. added POSTFIX_UPDATE_CHROOT_JAIL variable, see README.SuSE
. some cleanups for chroot jail
. little bugfixes
- moved rc.config.d -> sysconfig
- update to version 20011127
- some changes to SuSEconfig.postfix:
. added more robustness (Jehova)
. do not chown -R postfix to /var/spool/postfix
. query for package cyrus-sasl instead of sasl
- update to version 20011115
Bugfix for a memory exhaustion bug in smtpd
see http://groups.yahoo.com/group/postfix-users/message/46597
- remove START_ variable
- some changes to specfile (thanks to Simon J Mudd from whom
I copied some code)
- fix some SuSEconfig.postfix bugs:
. master.cf chroot column can also contain '-'
. don't do anything if POSTFIX_CREATECF != yes
- update to most recent snapshot version 20011008
- update to pl05
- Bugfix, Bugzilla ID#11914
- ALWAYS create master.cf, even is POSTFIX_CREATECF is set
to no, because else chroot mode may not work, Bugzilla ID#11359
- removed an obsolete echo in start section of init-script
- Bugfix in init-script: redirect output of postfix start
to dev/null and do not use startproc to start postfix
- update to tls-extensions v0.7.9
see http://groups.yahoo.com/group/postfix-users/message/41094
for details
- update of tls-extensions to 0.7.8
- update of postfix to pl04
- Bugfix: - check if postfix spool is set up before starting postfix
- start postfix with postfix start, because postfix-script
wouldn't be executed, else.
- update of tls-extensions to 0.7.3
- bugfix: remove libs from chroot jail, that are no longer
valid, Bugzilla ID#9133
- bugfix: init script was not LSB compliant, Bugzilla ID#9063
- added cyrus to require start in init-script
- "bugfix": bootstrap problem cyrus-imapd <-> postfix:
cyrus-imapd must run before postfix, but fails to create
lmtp socket, because /var/spool/postfix/public directory
isn't present. FIX: add it to filelist
- install postrop with special SGID modes
- improved SuSEconfig.postfix
- better main.cf handling
- new feature: chroot or not chroot
- major bugfix: memory leak in the LDAP client module
- minor bugfixes
- bzip2 sources
- updated to pl02, bugfixrelease
- Bugfix for SuSEconfig.postfix:
Handling of TIMEZONE variable if set to unappropriate or no
value
- Improvement: Warnings are printed out in bold
- Don't use a RPM macro for version number
- update to pl01, bugfixrelease
- added libcrack to chroot jail, because
it is needed by pam_pwcheck
- fixed neededforbuild for openldap
- first non-beta of the next postfix generation
- v20010228
- added cyrus-sasl-devel to neededforbuild
- new version, 20010225
- removed notification message
- bugfix: wrong permissions for maildrop directory
- update to version 20010128
- now linked against ldaplib2
- bugfix: maildrop must be owned by postfix.root
- update to version 20001212
- bugfix: insserv
- bugfix: missed openssl in neededforbuilt
- renamed to postfix, because a non-crypto version
is no longer needed
- Bugfix: postfix-script was not executable
- Bugfixes:
Provides in initscript
Use /bin/bash in SuSEconfig.postfix
- Update to version 20001210
- startscript sbin -> etc
- new version
- fix for neededforbuild
- fix for master.cf
- adopted to new init scheme
- fixed neededforbuild
- update to version 20001030
- long packagename
- added rpm buildroot
- fixed neededforbuild
- src/util/dict_ldap.c:dict_ldap_lookup(): fix missing **-termination.
- s390,ppc: added -fsigned-char compiler option, to fix obscure segfaults.
(code is not signed/unsigned-char-clean)
- yet another SuSEconfig.postfix bug (incorrect link)
- bugfix for SuSEconfig.postfix
- bugfix: missed to install new flush service
- inititial revision of pfixtls
==== privoxy ====
- Added hardening to systemd service(s) (bsc#1181400). Modified:
* privoxy.service
==== python ====
- BuildRequire rpm-build-python: The provider to inject python(abi)
has been moved there. rpm-build pulls rpm-build-python
automatically in when building anything against python3-base, but
this implies that the initial build of python3-base does not
trigger the automatic installation.
==== python-Babel ====
- Added BuildRequires: alts
- Use libalternatives instead of update-alternatives.
==== python-Mako ====
Version update (1.1.4 -> 1.1.5)
- update to 1.1.5:
* Fixed some issues with running the test suite which would
be revealed by running tests in random order.
- Remove obsolete %suse_version %if
- Added BuildRequires: alts
- Use libalternatives instead of update-alternatives.
==== python-base ====
Subpackages: libpython2_7-1_0 python-xml
- BuildRequire rpm-build-python: The provider to inject python(abi)
has been moved there. rpm-build pulls rpm-build-python
automatically in when building anything against python3-base, but
this implies that the initial build of python3-base does not
trigger the automatic installation.
==== python-cryptography ====
Version update (3.3.2 -> 3.4.8)
- Add disable-RustExtension.patch in order to avoid a build
requirement setuptools_rust
- Next version (35.0) needs a full Rust toolchain.
- Clean runtime, build and test requirements
- Disable python2 build: Not supported anymore
- update to 3.4.8
- keep new rust support disabled for now to avoid new dependencies
==== python-numpy ====
- The update- and libalternatives logic is required in the standard
build, not the hpc flavor
- Use libalternatives instead of update-alternatives.
==== python-pandas ====
Version update (1.3.3 -> 1.3.4)
- Update to version 1.3.4
* Fixed regression in DataFrame.convert_dtypes() incorrectly
converts byte strings to strings (GH43183)
* Fixed regression in GroupBy.agg() where it was failing
silently with mixed data types along axis=1 and MultiIndex (GH43209)
* Fixed regression in merge() with integer and NaN keys
failing with outer merge (GH43550)
* Fixed regression in DataFrame.corr() raising ValueError with
method="spearman" on 32-bit platforms (GH43588)
* Fixed performance regression in MultiIndex.equals() (GH43549)
* Fixed performance regression in GroupBy.first() and GroupBy.last()
with StringDtype (GH41596)
* Fixed regression in Series.cat.reorder_categories() failing to
update the categories on the Series (GH43232)
* Fixed regression in Series.cat.categories() setter failing to
update the categories on the Series (GH43334)
* Fixed regression in read_csv() raising UnicodeDecodeError exception
when memory_map=True (GH43540)
* Fixed regression in DataFrame.explode() raising AssertionError
when column is any scalar which is not a string (GH43314)
* Fixed regression in Series.aggregate() attempting to pass args
and kwargs multiple times to the user supplied func in certain cases (GH43357)
* Fixed regression when iterating over a DataFrame.groupby.rolling
object causing the resulting DataFrames to have an incorrect index if the input groupings were not sorted (GH43386)
* Fixed regression in DataFrame.groupby.rolling.cov() and
DataFrame.groupby.rolling.corr() computing incorrect results if the
input groupings were not sorted (GH43386)
* Fixed bug in pandas.DataFrame.groupby.rolling() and
pandas.api.indexers.FixedForwardWindowIndexer leading to
segfaults and window endpoints being mixed across groups (GH43267)
* Fixed bug in GroupBy.mean() with datetimelike values
including NaT values returning incorrect results (GH43132)
* Fixed bug in Series.aggregate() not passing the first args
to the user supplied func in certain cases (GH43357)
* Fixed memory leaks in Series.rolling.quantile() and
Series.rolling.median() (GH43339)
==== python-rpm ====
Version update (4.16.1.3 -> 4.17.0)
- update to rpm-4.17.0
==== python38 ====
Subpackages: python38-curses python38-dbm python38-tk
- BuildRequire rpm-build-python: The provider to inject python(abi)
has been moved there. rpm-build pulls rpm-build-python
automatically in when building anything against python3-base, but
this implies that the initial build of python3-base does not
trigger the automatic installation.
==== python38-core ====
Subpackages: libpython3_8-1_0 python38-base
- BuildRequire rpm-build-python: The provider to inject python(abi)
has been moved there. rpm-build pulls rpm-build-python
automatically in when building anything against python3-base, but
this implies that the initial build of python3-base does not
trigger the automatic installation.
==== python38-documentation ====
- BuildRequire rpm-build-python: The provider to inject python(abi)
has been moved there. rpm-build pulls rpm-build-python
automatically in when building anything against python3-base, but
this implies that the initial build of python3-base does not
trigger the automatic installation.
==== qca-qt5 ====
Subpackages: libqca-qt5-2 qca-qt5-plugins
- Set LD_LIBRARY_PATH before running tests.
==== rpm ====
Version update (4.16.1.3 -> 4.17.0)
Subpackages: librpmbuild9
- update to rpm-4.17.0
- dropped support for berkeley db
- archive unpacking failures no longer leave garbage
- unified built-in and user-define macro syntax and calling conventions
- python generators and debuginfo extraction has been split into a
separate upstream project
- support for ed25519 signatures
- easier rpm macro access in lua
- new patches:
* python-rpm-packaging.diff
* singlefilemode.diff
* verbosearg.diff
- modified patches:
* usr-lib-sysimage-rpm.patch
* localetag.diff
* brp.diff
* findlang.diff
* macrosin.diff
* rpmqpack.diff
* build.diff
* whatrequires-doc.diff
* remove-brp-strips.diff
* fileattrs.diff
* langnoc.diff
* find-lang-qt-qm.patch
* findsupplements.diff
* finddebuginfo.diff
* finddebuginfo-absolute-links.diff
* debugsubpkg.diff
* debuglink.diff
* debuginfo-mono.patch
- dropped patches:
* db.diff
* dbfsync.diff
* dbprivate.diff
* dwarf5.diff
* ndbglue.diff
* pythondistdeps.diff
* suspendlock.diff
* taggedfileindex.diff
* waitlock.diff
* add-dwz-single-file-mode-option.patch
==== rpm-config-SUSE ====
Version update (0.g83 -> 0.g89)
- Update to version 0.g89:
* find-provides.ksyms: Do not set IFS - it is not needed for anything.
* find-provides.ksyms: Fix compressed modules.
* Allow locale directory to be named "locales" too
==== rsyslog ====
Version update (8.2108.0 -> 8.2110.0)
- Upgrade to rsyslog 8.2110.0:
* 2021-10-13: config bugfix: global(security.abortonidresolutionfail=) did not work
when used with rscript based configuration, it was not checked.
* 2021-10-13: config bugfix: global param $privDropToUser did not work correctly
The parameter was not implemented for rscript based configuration and
did not properly apply to legacy configuration. In essence, it almost always
did not work as expected.
see also: https://github.com/rsyslog/rsyslog/issues/4642
see also: https://github.com/rsyslog/rsyslog/commit/cbcaf2c7e5b67e5465e47bc7cc67af2ea…
* 2021-10-12: rscript bugfix: ruleset called async when ruleset had queue.type="direct"
The call rscript statement is able to call a rule set either synchronously or
asynchronously. We did this, because practice showed that both modes
are needed. For various reasons we decided to make async
calls if the ruleset has a queue assigned and sync if not.
To know if a "queue is assigned" we just checked if queue parameters were
given. It was overlookeded the case of someone explicitly specifying a
"direct queue", aka "no queue". As such, queue="direct" triggered async
calls. That in turn meant that when a write operation to a variable was
made inside that rule set, other rulesets could or could not see the
write. While if was often not seen, this was a data race where the
change could also be seen by the outside.
This is now fixed. No matter if queue.type="direct" is specified or
left out, the call will always by synchronous. Any values written to
variables will also be seen by the "outside world" in later processing
stages.
Note that this has some potential to BREAK EXISTING CONFIGURATIONS.
We deem this acceptable because:
1. this was racy at all, so unexpected behaviour could alwas occur
2. it is actually unlikely that someone used the triggering conditions
in practice. But we can not outrule this, especially when the
configuration was auto-generated.
Potential compatibility issues can be solved by defining a small
array-memory queue on the ruleset in question instead of specifying
direct type.
Again, we expect that almost all users will never experience any
problems. If you do, however, please let us know: we may add an
option to re-enable the bug.
* 2021-10-12: ksi bugfix: locking bug fixed in rsksiCtxOpenFile
Thanks to Taavi Valjaots for the patch.
* 2021-10-11: core bugfix: fix typo in error message
Thanks to github user jkschulz for the patch.
* 2021-10-11: tcpsrv bugfix: compilation without exceptions
tcpsrv.c:992:1: error: label at end of compound statement
finalize_it:
^~~~~~~~~~~
Quoting from pthread.h:
pthread_cleanup_push and pthread_cleanup_pop are macros and must always
be used in matching pairs at the same nesting level of braces.
Amends commit bcdd220142ec9eb106550195ba331fd114adb0bd.
Thanks to Orgad Shaneh for the patch.
* 2021-10-11: mkubernetes bugfix: no connection retry to kubernetes APP
When connection to the kubernates API was not possible, mmkubernetes
did not retry. This does now happen via regular rsyslog retry
mechanism.
Thanks to github user jayme-github for the analysis and patch.
closes https://github.com/rsyslog/rsyslog/issues/4669
* 2021-10-11: openssl bugfix: Correct gnutlsPriorityString (custom ciphers) behaviour
* Only apply default anon ciphers if gnutlsPriorityString is NULL and
Authentication Mode is set to anon. Otherwise we do not set them
as they overwrite custom Ciphers.
* Added two tests for custom cipher configuration (anon/certvalid mode).
* Add call for applyGnutlsPriorityString if gnutlsPriorityString changes.
* Merged openssl init code from Connect into osslInitSession
closes: https://github.com/rsyslog/rsyslog/issues/4686
* 2021-10-11: build issue: handle undefined MAXPATHLEN, PATH_MAX
While we handled missing PATH_MAX, we did not handle missing MAXPATHLEN.
This happens under GNU/Hurd, because there is no official limit. However,
extremely long pathes are extremely uncommon, so we do not want to
use slow dynamic alloc each time we need to build pathes. So we
impose a limit of 4KiB, which should be fairly enough. Note that
this obviously increases stack requirements in GNU/Hurd.
As suggested by Michael Biebl, we have now implemented a generic
approach to handle this via autoconf.
* 2021-09-12: openssl: extended output information on connection failure
Now includes the remote client/server IP address in the log output.
* 2021-09-12: imhttp enhancements - query parameter ingestion & basic auth support
* Basic Authentication support & tests
* configured via imhttp option "basicAuthFile". This option should be configured
to point to your htpasswd file generated via a standard htpasswd tool.
tests:
* imhttp-post-payload-basic-auth.sh
* imhttp-post-payload-basic-auth-vg.sh
* Query parameter ingestion capability & tests
use t `addmetadata` option to inject query parameters into
metadata for imhttp input.
DISTRO PACKAGERS BEWARE: NEW DEPENDENCY FOR IMHTTP:
libaprutil (libaprutil1-dev on debian'ish, apr-util-devel on Red Hat)
Thanks to Nelson Yen for the patch.
* 2021-09-07: testbench bugfix: privdrop tests under root user did not work
When running under root, the privdrop tests did not properly work. This
patch fixes the issue and skips test where necessary.
This also includes some modernization of the related tests.
closes https://github.com/rsyslog/rsyslog/issues/4619
* 2021-09-07: core/ratelimiting: fix rate limiting for already parsed messages
Rate limiting may not have worked if the considered message had already
been parsed (not having NEEDS_PARSING in msgFlags).
This affects also imuxsock in its default configuration
(useSpecialParser="true" and ratelimit.severity="1")
* 2021-09-07: core bugfix: use of property $wday terminates string
When $wday is used inside a template, all template parts after it
are ignored. For exmaple:
template(name="json_filename" type="string" string="/var/log/%$wday%.log")
would generate something like "/var/log/0" - the ".log" part would be
missing. For the same reason, $wday can not reliably checked in script
filters.
Thanks to Alain Thivillon for reporting the bug and providing an
excellent analysis, which essentiellay was exactly this fix here.
closes https://github.com/rsyslog/rsyslog/issues/4670
* 2021-09-07: core/queue bugfix: potential misadressing when queue discarded messages
When a discard mark was set, the queue was very busy and discarded messages, a
NULL pointer access could happen. Depending on circumstances, several problems
could occur, including a SEGFAULT. This is now fixed.
closes: https://github.com/rsyslog/rsyslog/issues/4437
* 2021-09-07: imdiga bugfix: iOverallQueueSize calculation could be incorrect
This issue only affects testbench and rsyslog development debugging. The active
messages counter, used for synchronizing test steps, went wrong when the queue
discarded messages on it's consumer thread. Now fixed.
* 2021-09-06: gnutls driver: SAN priority did not work correctly on server side
PrioritizeSAN was not propagated when accepting a new connection, this is now fixed.
Thanks to Attila Lakatos for the patch.
* 2021-08-24: config: implement script-equavalent for $PrivDrop* statements
closes https://github.com/rsyslog/rsyslog/issues/891
==== suse-module-tools ====
Version update (16.0.11 -> 16.0.13)
- Update to version 16.0.13:
* fixup "rpm-script: fix bad exit status in OpenQA (bsc#1191922)"
- Update to version 16.0.12:
* rpm-script: fix bad exit status in OpenQA (bsc#1191922)
* cert-script: Deal with existing $cert.delete file (bsc#1191804).
* cert-script: Ignore kernel keyring for kernel certificates (bsc#1191480).
* cert-script: Only print mokutil output in verbose mode.
==== systemd-rpm-macros ====
- Use %{load:} instead of %{?load:}: fix build with RPM 4.17.
==== tigervnc ====
Subpackages: libXvnc1 xorg-x11-Xvnc xorg-x11-Xvnc-module
- Not using System crypto policies for <= sle15-sp3 (boo#1191394)
==== transactional-update ====
Version update (3.5.6 -> 3.6.0)
Subpackages: dracut-transactional-update libtukit0 transactional-update-zypp-config tukit
- Version 3.6.0
- Simplify mount hierarchy by just using a single slave bind
mount as the root of the update environment; this may avoid the
error messages of failed unmounts
May fix [boo#1191945]
- Version 3.5.7
Various fixes affecting Salt support:
- t-u: Don't squash stderr messages into stdout
- t-u: Correctly handle case when the snapshot has been deleted due to
using --drop-if-no-change: Don't show reboot messages and avoid an awk
error message [bsc#1191475]
- tukit: Make inotify handler less sensitive / ignore more directories
[bsc#1191475]
==== u-boot-rpiarm64 ====
Subpackages: u-boot-rpiarm64-doc
Patch queue updated from https://github.com/openSUSE/u-boot.git tumbleweed-2021.10
* Patches added:
0015-Enable-EFI-and-ISO-partitions-suppo.patch - boo#1191966
0016-Revert-video-backlight-fix-pwm-s-du.patch - boo#1187573
==== virt-manager ====
Subpackages: virt-install virt-manager-common
- Add dependency in spec file for python3-gobject-Gdk (bsc#1191705)
virt-manager.spec
- bsc#1191358 - The Virtual Machine Manager shows disconnected
after rebooting virtual machine in Xen mode in SLES15 SP3.
virtman-init-viewer-on-reboot.patch
==== yast2-country ====
Version update (4.4.6 -> 4.4.7)
Subpackages: yast2-country-data
- Use official China timezone Asia/Shanghai (bsc#1187857)
- 4.4.7
1
0
Hi all,
I tested the U-Boot fix for several versions and it works perfect for all
of them.
Version | Build | U.Boot | Kernel | Boot
Leap 15.1 | 2019.05.17-Snapshot1.105 | 2019.01 | 4.12.14 | OK
Leap 15.2 | 2020.07.08-Build1.276 | 2020.01 | 5.3.18 | OK
Leap 15.3 | 2021.05.31-Build8.7 | 2021.01 | 5.3.18 | freezing
Tumbleweed | 2021.09.21-Snapshot20211008 | 2021.10 | 5.14.9 | OK
Tumbleweed | 2021.10.20-Snapshot20211023 | 2021.10 | 5.14.11-2 | OK
But it looks like there is an additional problem with Leap 15.3 which
freezes at boot.
Booting `openSUSE Leap 15.3'
Loading Linux 5.3.18-59.25-default ...
Loading initial ramdisk ...
EFI stub: Entering in SVC mode with MMU enabled
EFI stub: Booting Linux Kernel...
EFI stub: Using DTB from configuration table
EFI stub: Exiting boot services and installing virtual address map...
Deasserting all peripheral resets
[freeze]
I also upgraded a fixed Leap 15.2 to 15.3 and the same thing happens (Only
without the "Deasserting all peripheral resets" message) for kernel
5.3.18-59.25-default. The older kernels 5.3.18-lp152.95 and
5.3.18-lp152.92 are booting without any problem.
Any ideas how to debug this further?
Regards,
Christian
2
2
Please note that this mail was generated by a script.
The described changes are computed based on the aarch64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=3&versio…
Please do not reply to this email to report issues, rather file a bug
on bugzilla.opensuse.org. For more information on filing bugs please
see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
389-ds
ImageMagick (7.1.0.8 -> 7.1.0.10)
Mesa (21.2.3 -> 21.2.4)
Mesa-drivers (21.2.3 -> 21.2.4)
MozillaFirefox (92.0.1 -> 93.0)
acpid (2.0.32 -> 2.0.33)
adwaita-qt (1.3.1 -> 1.4.0)
akonadi-calendar (21.08.1 -> 21.08.2)
akonadi-calendar-tools (21.08.1 -> 21.08.2)
akonadi-contact (21.08.1 -> 21.08.2)
akonadi-import-wizard (21.08.1 -> 21.08.2)
akonadi-mime (21.08.1 -> 21.08.2)
akonadi-notes (21.08.1 -> 21.08.2)
akonadi-search (21.08.1 -> 21.08.2)
akonadi-server (21.08.1 -> 21.08.2)
akregator (21.08.1 -> 21.08.2)
alsa-utils
analitza (21.08.1 -> 21.08.2)
apache2-mod_php7
apparmor
ark (21.08.1 -> 21.08.2)
at
atkmm1_6
attica-qt5 (5.86.0 -> 5.87.0)
audacity (3.0.4 -> 3.0.5)
audit-secondary
avahi
avahi-glib2
baloo5 (5.86.0 -> 5.87.0)
baloo5-widgets (21.08.1 -> 21.08.2)
bash-completion
bind
blinken (21.08.1 -> 21.08.2)
blosc (1.21.0 -> 1.21.1)
bluedevil5 (5.22.5 -> 5.23.1)
bluez-qt (5.86.0 -> 5.87.0)
boost-base
boost-extra
bovo (21.08.1 -> 21.08.2)
breeze (5.22.5 -> 5.23.1)
breeze-gtk (5.22.5 -> 5.23.1)
breeze5-icons (5.86.0 -> 5.87.0)
brltty (6.3 -> 6.4)
busybox
ca-certificates (2+git20210723.27a0476 -> 2+git20211004.3efbea9)
calendarsupport (21.08.1 -> 21.08.2)
cervisia (21.08.1 -> 21.08.2)
checkmedia (5.4 -> 6.1)
chrony
codec2
compat-usrmerge
crash (7.2.9_k5.14.9_1 -> 7.2.9_k5.14.11_2)
ddclient
discover (5.22.5 -> 5.23.1)
dolphin (21.08.1 -> 21.08.2)
dracut (055+suse.119.g6c4187af -> 055+suse.129.g7d8c3ce3)
dragonplayer (21.08.1 -> 21.08.2)
drbd-utils (9.18.0 -> 9.19.0)
drkonqi5 (5.22.5 -> 5.23.1)
e2fsprogs
emacs-w3m (1.4.632+396+g051dba16 -> 1.4.632+501+gc088fe62)
eventviews (21.08.1 -> 21.08.2)
evince (40.4 -> 41.2)
fetchmail (6.4.21 -> 6.4.22)
ffmpegthumbs (21.08.1 -> 21.08.2)
file (5.40 -> 5.41)
firewalld (1.0.0 -> 1.0.1)
flatpak (1.11.3 -> 1.12.1)
frameworkintegration (5.86.0 -> 5.87.0)
freerdp
fwupd (1.5.8 -> 1.6.2)
gc (8.0.4 -> 8.0.6)
gcr (3.40.0 -> 3.41.0)
gdm
gegl (0.4.30 -> 0.4.32)
gimp (2.10.24 -> 2.10.28)
git (2.33.0 -> 2.33.1)
gjs
glibc
glibmm2_4 (2.66.1 -> 2.66.2)
glusterfs (9.1 -> 9.3)
gnome-clocks (40.0 -> 41.0)
gnome-online-accounts (3.40.0 -> 3.40.1)
gnome-shell
gnome-shell-extensions
gpm
gpsd (3.23 -> 3.23.1)
grantleetheme (21.08.1 -> 21.08.2)
graphviz (2.48.0 -> 2.49.1)
graphviz-addons (2.48.0 -> 2.49.1)
grilo (0.3.13 -> 0.3.14)
grilo-plugins (0.3.13 -> 0.3.14)
gwenview5 (21.08.1 -> 21.08.2)
hwdata (0.351 -> 0.352)
hwinfo (21.76 -> 21.77)
hylafax+ (7.0.3 -> 7.0.4)
incidenceeditor (21.08.1 -> 21.08.2)
inotify-tools (3.21.9.5 -> 3.21.9.6)
inxi (3.3.03 -> 3.3.07)
iputils
irda
iso-codes (4.6.0 -> 4.7.0)
jack (1.9.18 -> 1.9.19)
java-11-openjdk (11.0.12.0 -> 11.0.13.0)
jfsutils
juk (21.08.1 -> 21.08.2)
k3b (21.08.1 -> 21.08.2)
kaccounts-integration (21.08.1 -> 21.08.2)
kaccounts-providers (21.08.1 -> 21.08.2)
kactivities-stats (5.86.0 -> 5.87.0)
kactivities5 (5.86.0 -> 5.87.0)
kactivitymanagerd (5.22.5 -> 5.23.1)
kaddressbook (21.08.1 -> 21.08.2)
kalarmcal (21.08.1 -> 21.08.2)
kalgebra (21.08.1 -> 21.08.2)
kamera (21.08.1 -> 21.08.2)
kanagram (21.08.1 -> 21.08.2)
kapptemplate (21.08.1 -> 21.08.2)
karchive (5.86.0 -> 5.87.0)
kate (21.08.1 -> 21.08.2)
katomic (21.08.1 -> 21.08.2)
kauth (5.86.0 -> 5.87.0)
kbd
kblackbox (21.08.1 -> 21.08.2)
kblocks (21.08.1 -> 21.08.2)
kbookmarks (5.86.0 -> 5.87.0)
kbounce (21.08.1 -> 21.08.2)
kbreakout (21.08.1 -> 21.08.2)
kbruch (21.08.1 -> 21.08.2)
kcachegrind (21.08.1 -> 21.08.2)
kcalc (21.08.1 -> 21.08.2)
kcalendarcore (5.86.0 -> 5.87.0)
kcalutils (21.08.1 -> 21.08.2)
kcharselect (21.08.1 -> 21.08.2)
kcm_sddm (5.22.5 -> 5.23.1)
kcmutils (5.86.0 -> 5.87.0)
kcodecs (5.86.0 -> 5.87.0)
kcolorchooser (21.08.1 -> 21.08.2)
kcompletion (5.86.0 -> 5.87.0)
kconfig (5.86.0 -> 5.87.0)
kconfigwidgets (5.86.0 -> 5.87.0)
kcontacts (5.86.0 -> 5.87.0)
kcoreaddons (5.86.0 -> 5.87.0)
kcrash (5.86.0 -> 5.87.0)
kcron (21.08.1 -> 21.08.2)
kdav (5.86.0 -> 5.87.0)
kdbusaddons (5.86.0 -> 5.87.0)
kde-cli-tools5 (5.22.5 -> 5.23.1)
kde-gtk-config5 (5.22.5 -> 5.23.1)
kde-print-manager (21.08.1 -> 21.08.2)
kdeclarative (5.86.0 -> 5.87.0)
kdeconnect-kde (21.08.1 -> 21.08.2)
kded (5.86.0 -> 5.87.0)
kdeedu-data (21.08.1 -> 21.08.2)
kdegraphics-thumbnailers (21.08.1 -> 21.08.2)
kdelibs4support (5.86.0 -> 5.87.0)
kdenetwork-filesharing (21.08.1 -> 21.08.2)
kdepim-addons (21.08.1 -> 21.08.2)
kdepim-runtime (21.08.1 -> 21.08.2)
kdesu (5.86.0 -> 5.87.0)
kdf (21.08.1 -> 21.08.2)
kdialog (21.08.1 -> 21.08.2)
kdiamond (21.08.1 -> 21.08.2)
kdnssd-framework (5.86.0 -> 5.87.0)
kdoctools (5.86.0 -> 5.87.0)
kemoticons (5.86.0 -> 5.87.0)
kernel-64kb (5.14.9 -> 5.14.11)
kernel-source (5.14.9 -> 5.14.11)
kfilemetadata5 (5.86.0 -> 5.87.0)
kgamma5 (5.22.5 -> 5.23.1)
kgeography (21.08.1 -> 21.08.2)
kget (21.08.1 -> 21.08.2)
kglobalaccel (5.86.0 -> 5.87.0)
kgoldrunner (21.08.1 -> 21.08.2)
kguiaddons (5.86.0 -> 5.87.0)
khangman (21.08.1 -> 21.08.2)
khelpcenter5 (21.08.1 -> 21.08.2)
kholidays (5.86.0 -> 5.87.0)
khotkeys5 (5.22.5 -> 5.23.1)
khtml (5.86.0 -> 5.87.0)
ki18n (5.86.0 -> 5.87.0)
kiconthemes (5.86.0 -> 5.87.0)
kidentitymanagement (21.08.1 -> 21.08.2)
kidletime (5.86.0 -> 5.87.0)
kig (21.08.1 -> 21.08.2)
kimageformats (5.86.0 -> 5.87.0)
kimap (21.08.1 -> 21.08.2)
kinfocenter5 (5.22.5 -> 5.23.1)
kinit (5.86.0 -> 5.87.0)
kio (5.86.0 -> 5.87.0)
kio-extras5 (21.08.1 -> 21.08.2)
kio_audiocd (21.08.1 -> 21.08.2)
kipi-plugins (21.08.1 -> 21.08.2)
kirigami2 (5.86.0 -> 5.87.0)
kiriki (21.08.1 -> 21.08.2)
kitemmodels (5.86.0 -> 5.87.0)
kitemviews (5.86.0 -> 5.87.0)
kiten (21.08.1 -> 21.08.2)
kitinerary (21.08.1 -> 21.08.2)
kjobwidgets (5.86.0 -> 5.87.0)
kjs (5.86.0 -> 5.87.0)
kjumpingcube (21.08.1 -> 21.08.2)
kldap (21.08.1 -> 21.08.2)
kleopatra (21.08.1 -> 21.08.2)
klines (21.08.1 -> 21.08.2)
kmag (21.08.1 -> 21.08.2)
kmahjongg (21.08.1 -> 21.08.2)
kmail (21.08.1 -> 21.08.2)
kmail-account-wizard (21.08.1 -> 21.08.2)
kmailtransport (21.08.1 -> 21.08.2)
kmbox (21.08.1 -> 21.08.2)
kmenuedit5 (5.22.5 -> 5.23.1)
kmime (21.08.1 -> 21.08.2)
kmines (21.08.1 -> 21.08.2)
kmousetool (21.08.1 -> 21.08.2)
kmouth (21.08.1 -> 21.08.2)
kmplot (21.08.1 -> 21.08.2)
knavalbattle (21.08.1 -> 21.08.2)
knetwalk (21.08.1 -> 21.08.2)
knewstuff (5.86.0 -> 5.87.0)
knotes (21.08.1 -> 21.08.2)
knotifications (5.86.0 -> 5.87.0)
knotifyconfig (5.86.0 -> 5.87.0)
kolf (21.08.1 -> 21.08.2)
kollision (21.08.1 -> 21.08.2)
kolourpaint (21.08.1 -> 21.08.2)
kompare (21.08.1 -> 21.08.2)
konquest (21.08.1 -> 21.08.2)
konsole (21.08.1 -> 21.08.2)
kontact (21.08.1 -> 21.08.2)
kontactinterface (21.08.1 -> 21.08.2)
konversation (21.08.1 -> 21.08.2)
kopete (21.08.1 -> 21.08.2)
korganizer (21.08.1 -> 21.08.2)
kpackage (5.86.0 -> 5.87.0)
kparts (5.86.0 -> 5.87.0)
kpat (21.08.1 -> 21.08.2)
kpeople5 (5.86.0 -> 5.87.0)
kpimtextedit (21.08.1 -> 21.08.2)
kpkpass (21.08.1 -> 21.08.2)
kplotting (5.86.0 -> 5.87.0)
kpty (5.86.0 -> 5.87.0)
kqtquickcharts (21.08.1 -> 21.08.2)
kquickcharts (5.86.0 -> 5.87.0)
krdc (21.08.1 -> 21.08.2)
kreversi (21.08.1 -> 21.08.2)
krfb (21.08.1 -> 21.08.2)
kross (5.86.0 -> 5.87.0)
kruler (21.08.1 -> 21.08.2)
kscreen5 (5.22.5 -> 5.23.1)
kscreenlocker (5.22.5 -> 5.23.1)
kservice (5.86.0 -> 5.87.0)
kshisen (21.08.1 -> 21.08.2)
ksirk (21.08.1 -> 21.08.2)
ksmtp (21.08.1 -> 21.08.2)
kspaceduel (21.08.1 -> 21.08.2)
ksquares (21.08.1 -> 21.08.2)
ksshaskpass5 (5.22.5 -> 5.23.1)
ksudoku (21.08.1 -> 21.08.2)
ksystemlog (21.08.1 -> 21.08.2)
ksystemstats5 (5.22.5 -> 5.23.1)
kteatime (21.08.1 -> 21.08.2)
ktexteditor (5.86.0 -> 5.87.0)
ktextwidgets (5.86.0 -> 5.87.0)
ktimer (21.08.1 -> 21.08.2)
ktnef (21.08.1 -> 21.08.2)
ktouch (21.08.1 -> 21.08.2)
kturtle (21.08.1 -> 21.08.2)
kubrick (21.08.1 -> 21.08.2)
kunitconversion (5.86.0 -> 5.87.0)
kwallet (5.86.0 -> 5.87.0)
kwalletmanager5 (21.08.1 -> 21.08.2)
kwayland (5.86.0 -> 5.87.0)
kwayland-integration (5.22.5 -> 5.23.1)
kwayland-server (5.22.5 -> 5.23.1)
kwidgetsaddons (5.86.0 -> 5.87.0)
kwin5 (5.22.5 -> 5.23.1)
kwindowsystem (5.86.0 -> 5.87.0)
kwordquiz (21.08.1 -> 21.08.2)
kwrited5 (5.22.5 -> 5.23.1)
kxmlgui (5.86.0 -> 5.87.0)
layer-shell-qt (5.22.5 -> 5.23.1)
libHX (3.26 -> 4.2)
libKF5ModemManagerQt (5.86.0 -> 5.87.0)
libKF5NetworkManagerQt (5.86.0 -> 5.87.0)
libaom (3.1.2 -> 3.2.0)
libapparmor
libcap (2.51 -> 2.59)
libcdio
libdlm (4.0.9 -> 4.1.0)
libglvnd
libgphoto2
libgravatar (21.08.1 -> 21.08.2)
libinput (1.19.1 -> 1.19.2)
libkcddb (21.08.1 -> 21.08.2)
libkcompactdisc (21.08.1 -> 21.08.2)
libkdcraw (21.08.1 -> 21.08.2)
libkdecoration2 (5.22.5 -> 5.23.1)
libkdegames (21.08.1 -> 21.08.2)
libkdepim (21.08.1 -> 21.08.2)
libkeduvocdocument (21.08.1 -> 21.08.2)
libkexiv2 (21.08.1 -> 21.08.2)
libkgapi (21.08.1 -> 21.08.2)
libkipi (21.08.1 -> 21.08.2)
libkleo (21.08.1 -> 21.08.2)
libkmahjongg (21.08.1 -> 21.08.2)
libkomparediff2 (21.08.1 -> 21.08.2)
libksane (21.08.1 -> 21.08.2)
libkscreen2 (5.22.5 -> 5.23.1)
libksieve (21.08.1 -> 21.08.2)
libksysguard5 (5.22.5 -> 5.23.1)
libktorrent (21.08.1 -> 21.08.2)
libqb (2.0.2+20201203.def947e -> 2.0.3+20210303.404adbc)
libqt5-qttranslations (5.15.2+kde20 -> 5.15.2+kde22)
libreoffice (7.1.5.2 -> 7.2.2.2)
librsvg (2.52.0 -> 2.52.2)
libsamplerate (0.2.1 -> 0.2.2)
libstorage-ng (4.4.43 -> 4.4.51)
libteam
liburing (2.0 -> 2.1)
libvirt (7.7.0 -> 7.8.0)
libwebp (1.2.0 -> 1.2.1)
libyui (4.2.16 -> 4.2.19)
libyui-ncurses (4.2.16 -> 4.2.19)
libyui-ncurses-pkg (4.2.16 -> 4.2.19)
libyui-qt (4.2.16 -> 4.2.19)
libyui-qt-graph (4.2.16 -> 4.2.19)
libyui-qt-pkg (4.2.16 -> 4.2.19)
libzypp (17.28.4 -> 17.28.6)
libzypp-plugin-appdata
lightdm
lirc
lokalize (21.08.1 -> 21.08.2)
lskat (21.08.1 -> 21.08.2)
luajit
mailcommon (21.08.1 -> 21.08.2)
mailimporter (21.08.1 -> 21.08.2)
mailutils
man
mariadb
mariadb-connector-c (3.2.3 -> 3.2.4)
mbox-importer (21.08.1 -> 21.08.2)
mc (4.8.26 -> 4.8.27)
mdadm
messagelib (21.08.1 -> 21.08.2)
milou5 (5.22.5 -> 5.23.1)
mlocate
mobipocket (21.08.1 -> 21.08.2)
mpg123 (1.29.0 -> 1.29.1)
mutter
nano (5.8 -> 5.9)
nbd (3.21 -> 3.22)
ncurses (6.2.20210911 -> 6.2.20211002)
ndctl
ntp
numad
nvme-cli
okular (21.08.1 -> 21.08.2)
open-iscsi
open-vm-tools (11.3.0 -> 11.3.5)
openssh (8.4p1 -> 8.8p1)
openssh-askpass-gnome (8.4p1 -> 8.8p1)
oxygen5 (5.22.5 -> 5.23.1)
pam-config (1.4 -> 1.5)
pangomm1_4
parley (21.08.1 -> 21.08.2)
patterns-gnome
pcsc-lite (1.9.3 -> 1.9.4)
perl-Cpanel-JSON-XS (4.26 -> 4.27)
perl-Crypt-OpenSSL-RSA (0.31 -> 0.32)
perl-Image-ExifTool
phodav
php7
pidgin
pim-data-exporter (21.08.1 -> 21.08.2)
pim-sieve-editor (21.08.1 -> 21.08.2)
pimcommon (21.08.1 -> 21.08.2)
pinfo
pipewire (0.3.37 -> 0.3.38)
plasma-browser-integration (5.22.5 -> 5.23.1)
plasma-framework (5.86.0 -> 5.87.0)
plasma-nm5 (5.22.5 -> 5.23.1)
plasma5-addons (5.22.5 -> 5.23.1)
plasma5-desktop (5.22.5 -> 5.23.1)
plasma5-disks (5.22.5 -> 5.23.1)
plasma5-integration (5.22.5 -> 5.23.1)
plasma5-openSUSE
plasma5-pa (5.22.5 -> 5.23.1)
plasma5-systemmonitor (5.22.5 -> 5.23.1)
plasma5-thunderbolt (5.22.5 -> 5.23.1)
plasma5-workspace (5.22.5 -> 5.23.1)
pmdk (1.11.0 -> 1.11.1)
polkit-default-privs (1550+20210818.b0c41fd -> 1550+20211008.9751669)
polkit-kde-agent-5 (5.22.5 -> 5.23.1)
poppler (21.08.0 -> 21.10.0)
poppler-qt5 (21.08.0 -> 21.10.0)
postfix
postgresql (13 -> 14)
postgresql14 (13.4 -> 14.0)
powerdevil5 (5.22.5 -> 5.23.1)
prison-qt5 (5.86.0 -> 5.87.0)
privoxy
publicsuffix (20210928 -> 20211016)
pulseaudio
purpose (5.86.0 -> 5.87.0)
python-Jinja2 (3.0.1 -> 3.0.2)
python-alembic (1.6.5 -> 1.7.4)
python-apipkg (1.5 -> 2.1.0)
python-cachetools (4.2.2 -> 4.2.4)
python-click (8.0.1 -> 8.0.3)
python-decorator (5.0.9 -> 5.1.0)
python-distro
python-ecdsa (0.16.1 -> 0.17.0)
python-greenlet (1.1.0 -> 1.1.2)
python-idna (3.2 -> 3.3)
python-libvirt-python (7.7.0 -> 7.8.0)
python-more-itertools (8.8.0 -> 8.10.0)
python-networkx (2.6.1 -> 2.6.3)
python-outcome (1.0.1 -> 1.1.0)
python-psycopg2 (2.8.6 -> 2.9.1)
python-pycryptodome (3.10.1 -> 3.11.0)
python-pygit2 (1.3.0 -> 1.7.0)
python-pygraphviz (1.6 -> 1.7)
python-pytz (2021.1 -> 2021.3)
python-qt5 (5.15.4 -> 5.15.5)
python-urwid
python-zipp (3.5.0 -> 3.6.0)
python-zope.hookable (5.0.1 -> 5.1.0)
python-zope.i18nmessageid
python-zope.interface
qemu
qqc2-desktop-style (5.86.0 -> 5.87.0)
raspberrypi-firmware (2021.03.10 -> 2021.09.30)
raspberrypi-firmware-config (2021.03.10 -> 2021.09.30)
raspberrypi-firmware-dt (2021.03.15 -> 2021.09.17)
rdma-core (36.0 -> 37.1)
remmina (1.4.20 -> 1.4.21)
rsyslog (8.2106.0 -> 8.2108.0)
rubygem-bootsnap (1.7.7 -> 1.9.1)
rubygem-ffi (1.15.3 -> 1.15.4)
rubygem-marcel (1.0.1 -> 1.0.2)
rubygem-nokogiri (1.12.3 -> 1.12.5)
rubygem-parallel (1.20.1 -> 1.21.0)
rubygem-puma (5.4.0 -> 5.5.0)
rubygem-rubocop (1.19.1 -> 1.22.1)
rubygem-rubocop-ast (1.11.0 -> 1.12.0)
rubygem-spring (2.1.1 -> 3.0.0)
rubygem-unf_ext (0.0.7.7 -> 0.0.8)
rubygem-unicode-display_width (2.0.0 -> 2.1.0)
rubygem-yast-rake (0.2.41 -> 0.2.42)
salt
signon-kwallet-extension (21.08.1 -> 21.08.2)
skanlite (21.08.1 -> 21.08.2)
skopeo (1.2.3 -> 1.5.0)
solid (5.86.0 -> 5.87.0)
sonnet (5.86.0 -> 5.87.0)
spectacle (21.08.1 -> 21.08.2)
sscep (0.9.1 -> 0.10.0)
subversion
syndication (5.86.0 -> 5.87.0)
syntax-highlighting (5.86.0 -> 5.87.0)
systemd (249.4 -> 249.5)
systemd-presets-common-SUSE
systemsettings5 (5.22.5 -> 5.23.1)
thai-fonts (0.7.2 -> 0.7.3)
threadweaver (5.86.0 -> 5.87.0)
timezone (2021c -> 2021d)
timezone-java (2021c -> 2021d)
tlp
totem (3.38.1 -> 3.38.2)
tumbler
unbound
virt-manager
vmaf (2.2.0 -> 2.3.0)
webkit2gtk3 (2.34.0 -> 2.34.1)
webkit2gtk3-soup2 (2.34.0 -> 2.34.1)
wireless-regdb (20210421 -> 20210828)
xdg-desktop-portal (1.10.0 -> 1.10.1)
xdg-desktop-portal-kde (5.22.5 -> 5.23.1)
xdg-user-dirs
xf86-input-libinput
xfce4-whiskermenu-plugin (2.6.0 -> 2.6.1)
xfsprogs
xkeyboard-config (2.33 -> 2.34)
xlockmore (5.66 -> 5.67)
xwayland
yarn (1.22.11 -> 1.22.13)
yast2-installation (4.4.19 -> 4.4.20)
yast2-network (4.4.26 -> 4.4.27)
yast2-pkg-bindings (4.4.2 -> 4.4.3)
yast2-python-bindings (4.4.1 -> 4.4.2)
yast2-storage-ng (4.4.8 -> 4.4.11)
yast2-theme (4.4.3 -> 4.4.4)
yast2-trans (84.87.20210914.a5d6b81b64 -> 84.87.20210929.6d3a97ea50)
yast2-users (4.4.6 -> 4.4.7)
z3 (4.8.11 -> 4.8.12)
zypper (1.14.49 -> 1.14.50)
=== Details ===
==== 389-ds ====
Subpackages: lib389 libsvrcore0
- Add missing dependency on iproute2 for lib389
==== ImageMagick ====
Version update (7.1.0.8 -> 7.1.0.10)
Subpackages: ImageMagick-config-7-SUSE ImageMagick-extra libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10
- update to 7.1.0.10:
* improved algorithm for automatic calculation of pointsize for caption and
labels.
* support -auto-orient option in the identify utlity.
- previous version updates fixed also:
CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
CVE-2021-20246
(bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
bsc#1182337)
- version update to 7.1.0.9:
* Squash a dump truck load of VisualStudio compiler warnings.
* improved algorithm for automatic calculation of word breaks and pointsize
for caption and labels.
* improve wrapping between words and within words (reference
https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
disable Contrast test for i586 on SLE 15
+ ImageMagick-filter.t-disable-Contrast.patch
==== Mesa ====
Version update (21.2.3 -> 21.2.4)
Subpackages: Mesa-dri-devel Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1
- update to 21.2.4
* fourth bugfix release
* 300 fixes from the new r300 maintainer! Additionally, panfrost,
lots of crocus, some freedreno, intel, radv, core meas, gallivum,
anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch
- u_fix-build-on-ppc64le.patch
* fixes build on ppc64le (boo#1191569)
==== Mesa-drivers ====
Version update (21.2.3 -> 21.2.4)
Subpackages: Mesa-dri Mesa-gallium Mesa-libva libvdpau_r300 libvdpau_r600 libvdpau_radeonsi libvulkan_radeon
- update to 21.2.4
* fourth bugfix release
* 300 fixes from the new r300 maintainer! Additionally, panfrost,
lots of crocus, some freedreno, intel, radv, core meas, gallivum,
anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch
- u_fix-build-on-ppc64le.patch
* fixes build on ppc64le (boo#1191569)
==== MozillaFirefox ====
Version update (92.0.1 -> 93.0)
Subpackages: MozillaFirefox-translations-common
- Add patch to fix build on aarch64 - bmo#1729124
* mozilla-bmo1729124.patch
- Mozilla Firefox 93.0
* supports the new AVIF image format
* PDF viewer now supports filling more forms (XFA-based forms)
* now blocks downloads that rely on insecure connections,
protecting against potentially malicious or unsafe downloads
* Improved web compatibility for privacy protections with SmartBlock 3.0
* Introducing a new referrer tracking protection in Strict Tracking
Protection and Private Browsing
* TLS ciphersuites that use 3DES have been disabled. Such
ciphersuites can only be enabled when deprecated versions of
TLS are also enabled
* The download panel now follows the Firefox visual styles
MFSA 2021-43 (bsc#1191332)
* CVE-2021-38496 (bmo#1725335)
Use-after-free in MessageTask
* CVE-2021-38497 (bmo#1726621)
Validation message could have been overlaid on another origin
* CVE-2021-38498 (bmo#1729642)
Use-after-free of nsLanguageAtomService object
* CVE-2021-32810 (bmo#1729813)
https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmh…)
Data race in crossbeam-deque
* CVE-2021-38500 (bmo#1725854, bmo#1728321)
Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
and Firefox ESR 91.2
* CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2
* CVE-2021-38499 (bmo#1667102, bmo#1723170, bmo#1725356, bmo#1727364)
Memory safety bugs fixed in Firefox 93
- removed obsolete mozilla-bmo1708709.patch
- require NSS >= 3.70
- allow to override wayland detection by defining MOZ_ENABLE_WAYLAND
explicitely as 0 or 1
- fix aarch64 build by updating constraints
- add mozilla-bmo1725828.patch to fix widevine (bsc#1190842)
- add mozilla-bmo531915.patch to fix build for i586
==== acpid ====
Version update (2.0.32 -> 2.0.33)
- update to 2.0.33:
- Detect newer GNOME power manager.
- openrc-shutdown: Set shutdown time to 'now'.
- Attempt to open input layer devices whose permissions have changed.
- Comments added.
==== adwaita-qt ====
Version update (1.3.1 -> 1.4.0)
Subpackages: adwaita-qt5 libadwaitaqt1
- Update to version 1.4.0
+ Base colors are now parsed from stylesheets provided by GTK 4
+ Added variants for HighContrast and HighContrastInverse
==== akonadi-calendar ====
Version update (21.08.1 -> 21.08.2)
Subpackages: akonadi-calendar-lang akonadi-plugin-calendar libKF5AkonadiCalendar5
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== akonadi-calendar-tools ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== akonadi-contact ====
Version update (21.08.1 -> 21.08.2)
Subpackages: akonadi-plugin-contacts libKF5AkonadiContact5 libKF5ContactEditor5
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== akonadi-import-wizard ====
Version update (21.08.1 -> 21.08.2)
Subpackages: libKPimImportWizard5
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== akonadi-mime ====
Version update (21.08.1 -> 21.08.2)
Subpackages: akonadi-plugin-mime libKF5AkonadiMime5
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== akonadi-notes ====
Version update (21.08.1 -> 21.08.2)
Subpackages: akonadi-notes-lang libKF5AkonadiNotes5
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== akonadi-search ====
Version update (21.08.1 -> 21.08.2)
Subpackages: libKF5AkonadiSearch
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== akonadi-server ====
Version update (21.08.1 -> 21.08.2)
Subpackages: libKF5AkonadiAgentBase5 libKF5AkonadiCore5 libKF5AkonadiPrivate5 libKF5AkonadiWidgets5 libKF5AkonadiXml5
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== akregator ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== alsa-utils ====
- Drop ProtectClock hardening, can cause issues if other device acceess is needed
==== analitza ====
Version update (21.08.1 -> 21.08.2)
Subpackages: libAnalitza5
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== apache2-mod_php7 ====
- previous version updates fixes also:
CVE-2020-7068,CVE-2020-7069,CVE-2020-7070,CVE-2020-7071,
CVE-2021-21702,CVE-2021-21704,CVE-2021-21705
bsc#1175223,bsc#1177351,bsc#1177352,bsc#1180706,
bsc#1182049,bsc#1188035,bsc#1188037
==== apparmor ====
Subpackages: apparmor-abstractions apparmor-docs apparmor-parser apparmor-profiles apparmor-utils pam_apparmor python3-apparmor
- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)
==== ark ====
Version update (21.08.1 -> 21.08.2)
Subpackages: ark-lang libkerfuffle21
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- Changes since 21.08.1:
* fix: Dolphin doesn't fully quit after Compress from context menu (kde#441813)
==== at ====
- Added hardening to systemd service(s). Added patch(es):
* harden_atd.service.patch
Modified:
* atd.service
==== atkmm1_6 ====
- turn off doc build, it does not work with new doxygen
==== attica-qt5 ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5Attica5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Do not mark jobs that have been aborted as errored
* Add Gitlab CI configuration
* Ensure categories.xml is only fetched once in parallel
* Do not start basejobs twice
* Add CI configuration file
- Drop upstream patch:
* 0001-Ensure-categories.xml-is-only-fetched-once-in-parall.patch
- Add upstream patch to avoid unnecessary network traffic:
* 0001-Ensure-categories.xml-is-only-fetched-once-in-parall.patch
==== audacity ====
Version update (3.0.4 -> 3.0.5)
Subpackages: audacity-lang
- Update to release 3.0.5.
- Upstream changes:
* Fix bug 1571.
Convert to C locale decimal point for stable parsing.
* Download manual from GitHub.
* Set release version to 3.0.5 in preparation of hotfix.
==== audit-secondary ====
Subpackages: audit python3-audit system-group-audit
- Add CONFIG parameter to %sysusers_generate_pre
- Create separate service for augenrules (bsc#1191614, bsc#1181400)
* add create-augenrules-service.patch
Remove ReadWritePaths=/etc/audit from auditd.service, also removes
augenrules call from ExecStartPost.
Create augenrules.service with the ReadWritePaths directive above.
This makes /etc/audit only accessible by augenrules.service and
let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.
==== avahi ====
Subpackages: libavahi-client3 libavahi-common3 libavahi-core7
- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
(boo#1191750).
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
==== avahi-glib2 ====
Subpackages: libavahi-glib1 libavahi-gobject0 libavahi-ui-gtk3-0
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
==== baloo5 ====
Version update (5.86.0 -> 5.87.0)
Subpackages: baloo5-file baloo5-file-lang baloo5-imports baloo5-kioslaves baloo5-kioslaves-lang baloo5-tools baloo5-tools-lang libKF5Baloo5 libKF5BalooEngine5 libKF5BalooEngine5-lang
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Native Gitlab CI configuration
==== baloo5-widgets ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== bash-completion ====
- Add patch boo1190929-9af4afd0.patch for boo#1190929
add support for compeletion modinfo completion recognize .ko.zst
as well as .ko.bz2
==== bind ====
Subpackages: bind-doc bind-utils python3-bind
- Just specifying "geoip-directory;" in /etc/named.conf is not
correct syntax. Must either put a path name or the string
"none". Appended the work "none" to make it correct syntax.
- Added build requirement of libmaxminddb to the spec file
Also added an entry for "geoip-directory" with the default path
to /etc/named.conf.
[bsc#1190884, vendor-files/config/named.conf, bind.spec]
==== blinken ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== blosc ====
Version update (1.21.0 -> 1.21.1)
- Update to 1.21.1
* Fix pthread on ppc64le.
* Updates in internal codecs, important performance improvements
==== bluedevil5 ====
Version update (5.22.5 -> 5.23.1)
Subpackages: bluedevil5-lang
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* Remove applet list item animations
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Confirm deleting a bluetooth device pairing.
* Add keywords to bluetooth KCM
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* Let the user choose Bluetooth status on login (kde#440493)
* [applet] Show the text "Connected" for connected devices (kde#440423)
* [applet] Give FullRepresentation an implicit size (kde#439981)
* Embed JSON metadata in KIOSlaves
* Remove obsolete .protocol files
* Convert protocol files to JSON
* Use version-less qt DBus macros
* Use ellipses instead of triple period
==== bluez-qt ====
Version update (5.86.0 -> 5.87.0)
Subpackages: bluez-qt-imports bluez-qt-udev libKF5BluezQt6
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== boost-base ====
Subpackages: boost-license1_77_0 libboost_date_time1_77_0 libboost_filesystem1_77_0 libboost_iostreams1_77_0 libboost_locale1_77_0 libboost_program_options1_77_0 libboost_thread1_77_0
- make boost-json-devel require boost-container-devel (bsc#1191822)
==== boost-extra ====
- make boost-json-devel require boost-container-devel (bsc#1191822)
==== bovo ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== breeze ====
Version update (5.22.5 -> 5.23.1)
Subpackages: breeze5-cursors breeze5-decoration breeze5-style breeze5-style-lang libbreezecommon5-5
- Add patch to fix the version number:
* 0001-Update-version-number-for-5.23.1.patch
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
* Don't set alignment for spinboxes (kde#443769)
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* kstyle: Limit what kinds of QPushButtons can use autoDefault
* Revert accidental revert of f763f27ebf3bbb21235ab3df0f7b9ef035cc71b5
* kstyle: Clean up tab painting and tweak tab highlight
* Don't reserve room for spinbox buttons if buttons disabled (kde#440718)
* kstyle: use checked color consistent with button down color for checkboxes and radiobuttons
* kstyle: visible neutral highlight on not hovered checkboxes and radio buttons
* KTitleWidget: Make background transparent again (kde#442860)
* Revert "kstyle: make spinboxes look like qqc2-breeze-style"
* Revert "kstyle: centre spinbox text"
* Revert "Don't reserve room for spinbox buttons if buttons disabled"
* Revert "Center all QAbstractSpinBox, not just integer QSpinBox"
* Revert "kstyle: make spinbox buttons consistently widthed"
* Revert "kstyle: fix misalignment of spinbox item sizes"
* Darken hard-to-read positive, negative, and neutral selection colors (kde#406239)
* Fix incorrect link selection color in Breeze Light color scheme (kde#419960)
* Fix incorrect active selection color in Breeze Light color scheme (kde#442478)
* Restore auto default button behavior (kde#438994)
* kstyle: use antialiasing on combobox items
- Add new key + signature to plasma.keyring
- Drop patches, now upstream:
* 0001-Restore-auto-default-button-behavior.patch
- Add patch to automatically set a default button again (kde#438994):
* 0001-Restore-auto-default-button-behavior.patch
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here
==== breeze-gtk ====
Version update (5.22.5 -> 5.23.1)
Subpackages: gtk2-metatheme-breeze gtk3-metatheme-breeze metatheme-breeze-common
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Add patch to fix toolbutton appearance (kde#443626):
* 0001-Revert-gtk3-gtk4-update-button-style.patch
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* gtk3, gtk4: update button style
* Use Breeze Light as the default color scheme
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* ci: introduce .kde-ci.yml
* Use the python version found by cmake in build_theme.sh
==== breeze5-icons ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Native Gitlab CI configuration
* Fix KTimeTracker icon sizes (kde#442993)
* Tweaks to AnyDesk icons
* Fix index.theme issues from !124
* Add 22px variants of the preferences icons
* Add AnyDesk icons
* Add more Godot MIME icons
* Add symlink for skanlite's new icon name
* Add process-working-symbolic, overhaul 22px animation
==== brltty ====
Version update (6.3 -> 6.4)
Subpackages: brltty-driver-at-spi2 brltty-driver-brlapi brltty-driver-speech-dispatcher brltty-driver-xwindow libbrlapi0_8 python3-brlapi xbrlapi
- Move sysusers.d to separate package
- Remove old SUSE RPM constructs
- Use sysuser-tools to process included sysusers.d file correctly
(bsc#1191465)
- Update to version 6.4:
+ See ChangeLog for changes.
- API version is now 0.8.3.
- Add at-spi2 to BuildRequires. Now needed for at-spi driver.
==== busybox ====
Subpackages: busybox-static
- Create separate 'Warewulf3' (https://github.com/warewulf/warewulf3)
flavor of busybox with the
additional setting:
CONFIG_REBOOT=y
CONFIG_SWITCH_ROOT=y
CONFIG_CTTYHACK=y
(bsc#1191514).
==== ca-certificates ====
Version update (2+git20210723.27a0476 -> 2+git20211004.3efbea9)
- Update to version 2+git20211004.3efbea9:
* Ensure --root option propagates prefix properly to other scripts
==== calendarsupport ====
Version update (21.08.1 -> 21.08.2)
Subpackages: libKF5CalendarSupport5
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- Changes since 21.08.1:
* Improve incidence formatting in printed month etc
* Truncate holiday names in print-outs so they don't overlap dates
* Remove all days of multi-day holidays from the workday list (kde#441738)
==== cervisia ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== checkmedia ====
Version update (5.4 -> 6.1)
- merge gh#openSUSE/checkmedia#16
- fix auto-detecting a suitable signature location for rh media
- 6.1
- merge gh#openSUSE/checkmedia#15
- add --version option to tagmedia
- use volume id if app id is missing for nice output
- add support for rh style meta data and digest calculation
- extend fragment calculation to suse style
- show signee if signature is ok
- add --create-signature option
- fix large file support
- updated unit tests
- enhance documentation
- add new and shiny README.adoc
- 6.0
==== chrony ====
Subpackages: chrony-pool-openSUSE
- boo#1190926: PrivateDevices is too strict, we might need to
access the rtc and ptp devices.
- Add back support to build chrony on SLE12.
- Drop dependency on asciidoctor. It is only needed for building
the HTML documentation which we don't package anyway.
==== codec2 ====
- Added a patch moved-freedv_callback_rx_sym-into-internal-header.patch
to fix building gnuradio (patch taken from upstream)
- Drop handcrafted generation of the pkgconfig file
- Remove "-Wno-dev"
==== compat-usrmerge ====
- Fix logic for detecting conflicts with directories (boo#1191111)
==== crash ====
Version update (7.2.9_k5.14.9_1 -> 7.2.9_k5.14.11_2)
- Fix crash view of task_struct_state changes for kernel 5.14
(bsc#1191206)
+ crash-handle-by-kernel-task_struct-state-member-changes.patch
==== ddclient ====
- Added hardening to systemd service(s). Modified:
* ddclient.service
==== discover ====
Version update (5.22.5 -> 5.23.1)
Subpackages: discover-backend-flatpak discover-backend-fwupd discover-backend-packagekit discover-lang
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
* flatpak: Don't reuse GError instances (kde#426565)
* flatpak: Set the real value of the remotes (kde#443455)
* SourcesPage: Address how we show the checked state (kde#406295)
* Suggest correct words in the search field (kde#443945)
* SourcesPage: Use ItemIsUserCheckable to check if a source is checkable
* flatpak: Do not crash when a source is disabled
* Remove pointless tooltip from Labelbackground
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* flatpak: Also show the installed version (kde#443256)
* Improve margins around Updates page messages
* Do not show tooltips when fetching updates (kde#443050)
* snap: Don't mark as cancelled until we get the reply (kde#425680)
* flatpak: Also search flatpakref files where the id doesn't include .desktop
* flatpak: Fix installing sources
* flatpak: Reuse remote when opening a well-known flatpakref file
* flatpak: Do not crash when using a flatpakref file (kde#442709)
* Explicitly set the interactive flag for PackageKit transactions (kde#442383)
* Link against Qt::Widgets (kde#442866)
* Sources: Fix displaying sources (kde#442604)
* kns: Do not process entries from invalid backends
* Stop bringing kxmlgui
* Port away from KIO::AccessManager
* Fix the InstallApplicationButton with QQC2 Breeze
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here
==== dolphin ====
Version update (21.08.1 -> 21.08.2)
Subpackages: dolphin-part dolphin-part-lang libdolphinvcs5
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- Changes since 21.08.1:
* Fix closing a secondary viewContainer on startup settings change (kde#426221)
* Don't force icon for preferred search tool action if one is manually configured (kde#442815)
* Fixed a missing bracket.
* Make "Empties Trash to create free space" translatable.
==== dracut ====
Version update (055+suse.119.g6c4187af -> 055+suse.129.g7d8c3ce3)
Subpackages: dracut-mkinitrd-deprecated
- Update to version 055+suse.129.g7d8c3ce3:
* fix(kernel-modules): add blk_mq_alloc_disk and blk_cleanup_disk to blockfuncs (bsc#1190326)
* docs: update SUSE maintainers doc
* fix(suse): add 60-io-scheduler.rules (bsc#1188713)
* revert: remove /sbin/installkernel script from dracut package
* spec: modernize specfile constructs
==== dragonplayer ====
Version update (21.08.1 -> 21.08.2)
Subpackages: dragonplayer-lang
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== drbd-utils ====
Version update (9.18.0 -> 9.19.0)
- Update to 9.19.0
* v9,events2: show changes of peer-client
* v9: rr-conflict strategy auto-discard for protocol A
* windrbd: various fixes including setting the systemd root
* containers: switch to UBI8
* v9,wait-*: fix segfault
- bsc#1191058, active UsrMerge to install in /usr
Add patch usrmerge_move_lib_to_prefix_lib.patch
- Remove patch fix-libdir-in-Makefile.patch
Remove patch systemd-drbd-service-needs-network-online.patch (included)
- Add drbd-utils.rpmlintrc for Error missing-call-to-setgroups-before-setuid
- Add rpmlint-build-error.patch to fix rpmbuild build errors
==== drkonqi5 ====
Version update (5.22.5 -> 5.23.1)
Subpackages: drkonqi5-lang
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here
==== e2fsprogs ====
Subpackages: e2fsprogs-scrub libcom_err2 libext2fs2
- Drop ProtectClock hardening, can cause issues if other device acceess is needed
==== emacs-w3m ====
Version update (1.4.632+396+g051dba16 -> 1.4.632+501+gc088fe62)
- Update to version 1.4.632+501+gc088fe62:
* * w3m-lnum.el (w3m-lnum-get-match-info, w3m-lnum-get-action): Rearrange docstrings so to be in 80-column
* Typo fix
* Use rfc6068.el if possible instead of rfc2368.el (issue #109)
* * sb-sankei.el (shimbun-sankei-keep-login): Consult akamai cookie instead of local timer for expiry period. (shimbun-sankei-logout): Remove login/out cookies first and save last. (shimbun-sankei-login): Remove akamai cookie first as well. (shimbun-sankei-last-login): Remove variable. (shimbun-sankei-get-headers): Use date-to-time instead of encode-time and parse-time-string or timezone-parse-date.
* * w3m-filter.el (w3m-filter-configuration): Add desc template
* * w3m-filter.el (w3m-filter-configuration): Make Custom-set work
* * w3m-bookmark.el (w3m-bookmark-menubar-update): Add a workaround to avoid a miscellaneous error
* Treat application/emacs-lisp as text/plain ([emacs-w3m:13845])
* user-agents: bugfix, update, improve friendliness (PR#106)
* * w3m.el (w3m-user-agent-alist): Fill in in 80-column, reindent
* user-agent variables: update, and add reference feature
* w3m-user-agent-default-alist: bugfix macro element
* New and improved filter for github (PR#105)
* * w3m-filter.el (w3m-filter-github): Fill in in 80-column, reindent
* w3m-filter: new and improved filter for github
* * sb-sankei.el (shimbun-headers): Run shimbun-sankei-keep-login
* * sb-sankei.el (shimbun-sankei-login): Cache a copy of password always
* * sb-sankei.el (shimbun-sankei-logout{in|out}): Make those functions, instead of shimbun-sankei-keep-login, manage shimbun-sankei-last-login.
* * sb-sankei.el (shimbun-sankei-keep-login): Fix last commit
* Keep logging in in Sankei
* Add timeout to w3m-download
* Fix last commit (1059e92)
* Hard-code the shell used in `w3m-download' with "sh" ([emacs-w3m:13826])
* Use defvar-local in w3m.el (PR#101)
* Replace make-variable-buffer-local with defvar-local
* Bugfix: db-history single-page advances point too far (PR#100)
* * w3m.el (w3m--goto-url--handler-function): Fix point position. (PR#99)
* Position point on the first entry in the db history (PR#99) ;; slightly modified by yamaoka
* Fix typo ?????
* reindent
* Bugfix: db-history single-page advances point too far
* * w3m.el (w3m--goto-url--handler-function): Fix point position. (PR#99)
* Position point on the first entry in the db history (PR#99) ;; slightly modified by yamaoka
* Fix typo ?????
* reindent
* Fix typo ?????
* Add docstring for function w3m--goto-url--handler-function
* db-history: advance to first history link
* reindent
* force-wide-display
* (shimbun-sankei-clear-contents): Show restrictions
* Fix previous commit
* Delete nonsense distinction of writer and byliner
* (shimbun-sankei-clear-contents): Distinguish author and writer
* Fix last commit
* Fix last commit
* Add iframe tag to movie tag so to be able to view it in other browsers
* Add links to embedded movies on Sankei
* * sb-sankei.el (shimbun-sankei-clear-contents): Fix regexp
* * sb-sankei.el (shimbun-sankei-clear-contents): Fix regexp
* Support multiple article pages on Sankei
* Minor fix in last commit
* Show author name if it is expressed clearly in the original
* Minor improvements on read and scan-sexps usage
* * sb-yoshirin.el: Spelling fix: thumnail -> thumbnail
* Minor fix to Sankei
* Display most detailed headline on Sankei
* Display headline that might be the only place to show the author
* Bugfix: make w3m-select-buffer-toggle-style work properly (PR#95)
* Make Sankei support raw html embedded in java script
* * sb-sankei.el (shimbun-sankei-clear-contents): Modify last commit
* * sb-sankei.el (shimbun-sankei-clear-contents): Don't infloop
* * sb-sankei.el (shimbun-sankei-clear-contents) : Fix regexps
* * sb-sankei.el (shimbun-sankei-clear-contents) : Trivial fix
* Make Sankei work on Emacs 26 and 27
* Make Sankei support raw html embedded in java script
* * sb-sankei.el (shimbun-sankei-clear-contents): Modify last commit
* * sb-sankei.el (shimbun-sankei-clear-contents): Don't infloop
* * sb-sankei.el (shimbun-sankei-clear-contents) : Fix regexps
* * sb-sankei.el (shimbun-sankei-clear-contents) : Trivial fix
* Make Sankei work on Emacs 26 and 27
* Sigh; w3m-select-buffer-window needs to match the selected w3m buffer, not the select buffer.
* Ensure that w3m-select-buffer-window is kept updated properly.
* By the time split-window is called, the locally let selected-window variable is no longer a valid window. Thus, we *actually* need to call the selected-window function here.
* Fetch more images
* * doc/emacs-w3m.texi, doc/emacs-w3m-ja.texi (Newspapers Supported by Shimbun): Update Sankei groups.
* Make Sankei work
* Make Mainichi work
* Make Asahi work (as for at least the rss group)
* Declare w3m-queries-log-file in w3m-util.el
* Move w3m-queries-log-file from w3m-util.el to w3m.el
* Update
* Reindent
* w3m-queries-log-file: Use expand-file-name in variable defcustom
* tweaks to handling url query parts
* Update
* Reindent
* Place entire logic in function w3m-external-view
* Revert last change that made `w3m-process-stop' do kill page buffer
* Reindent
* w3m-delete-buffer-if-empty: Only operate on live buffers
* Fixes for w3m-current-url = NIL, loading images from ext program
* Delete useless history warning
* Make shimbun-sankei-login work
* Silence the byte compiler on Emacs 28
==== eventviews ====
Version update (21.08.1 -> 21.08.2)
Subpackages: libKF5EventViews5
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- Changes since 21.08.1:
* Simplify drawBackground()
* Use theme colors for today's cell and the selected cell in the Month View
* CI: use stable-kf5-qt5 BRANCH_GROUP in stable branch
* Do not use "due today" color for completed to-dos in Agenda View (kde#122776)
* src/helper.cpp - fix crash in setResourceColor (kde#426906)
* Display multi-day holidays as one wide block in the Month View (kde#187116)
* Avoid vertical gaps around multi-day events in the month view (kde#435667)
==== evince ====
Version update (40.4 -> 41.2)
Subpackages: evince-plugin-comicsdocument evince-plugin-djvudocument evince-plugin-dvidocument evince-plugin-pdfdocument evince-plugin-tiffdocument evince-plugin-xpsdocument libevdocument3-4 libevview3-3 nautilus-evince typelib-1_0-EvinceDocument-3_0 typelib-1_0-EvinceView-3_0
- Update to version 41.2:
+ data: Remove alphanumeric version from AppStream.
+ Include subproject (libhandy) as part of the tarball.
- Update to version 41.1:
+ build: Revert project name capitalization.
- Changes from version 41.0:
+ backends:
- Add format attribute to stop warning on string literal
- Make function static as only used in this file
- Simplify metadata tags getters
- Use SaveToBufferData only with "struct" before
+ browser-plugin: Remove browser-plugin support
+ build:
- Add option to control internal vs external synctex
- Allow building without libhandy-1 available
- Bump version requirement for Poppler
- Fix conversion to match new version scheme
- Modernize and simplify meson files
- Remove Changelog target
- Update build libtiff-4 dependency
- Use devel icon for unstable version installed
- Remove c++ dependency, and use only C
- Fix compilation error when DBus is disabled
+ data:
- Update URL to submit issues
- Fix AppData urls for issues
- Add new-window desktop action
- Fix donation link
+ help:
- Fix 404 link to on-wiki bug reporting guidelines
- Update Evince icon as svg
- Correct Window action
+ libview:
- Open new annotation window only for text annotation
- Fix dual page option ignored for single page documents
+ shell:
- Add mnemonics to annotations contextual menus
- Added mnemonic for highlight option in context menu
- Adding padding to improve readability
- Always show the annotation window on new annotations
- Enable annotation actions only in document that supports them
- Enable odd pages left when dual page is on
- Expand sidebar annotations by default
- Fix libhandy includes
- Implemented headerbar for Annotation Properties dialog
- Reload annotation sidebar on annotation properties changes
- Reload the annotation sidebar when the type changes
- Show annotation contents in sidebar when available
- Show content in tooltip popup in annotations sidebar
- Fix g_critical about removing non-existant timer
- Show filename in recent view when title has only spaces
- Show None when missing creation/modification date
- Add comment about logic of 'first_iteration'
- Use a constant for GString init size
- Support duration in decimal value
- Be able to collapse/expand all entries
+ Updated translations.
- Replace c++_compiler with c_compiler BuildRequires.
- Replace libtiff-devel with pkgconfig(libtiff-4) BuildRequires.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Update to version 41.alpha:
+ Backends:
- Add format attribute to stop warning on string literal.
- Make function static as only used in this file.
- Simplify metadata tags getters.
- Use SaveToBufferData only with "struct" before.
+ browser-plugin: Remove browser-plugin support.
+ Help:
- Update Evince icon as svg.
- Correct Window action.
+ libview: dual page option is ignored for single page documents.
+ Shell:
- Add mnemonics to annotations contextual menus.
- Added mnemonic for highlight option in context menu.
- Adding padding to improve readability.
- Always show the annotation window on new annotations.
- Enable odd pages left when dual page is on.
- Expand sidebar annotations by default.
- Implemented headerbar for Annotation Properties dialog.
- Reload annotation sidebar on annotation properties changes.
- Reload the annotation sidebar when the type changes.
- Show annotation contents in sidebar when available.
- Show content in tooltip popup in annotations sidebar.
- Show filename in recent view when title has only spaces.
- Support duration in decimal value.
- Be able to collapse/expand all entries.
- Fix g_critical about removing non-existant timer.
- Fix compilation error when DBus is disabled.
- Add new-window desktop action.
- Show None when missing creation/modification date.
+ Updated translations.
==== fetchmail ====
Version update (6.4.21 -> 6.4.22)
Subpackages: fetchmailconf
- Update to 6.4.22: [bsc#1190069, CVE-2021-39272]
* OPENSSL AND LICENSING NOTE:
- fetchmail 6.4.22 is compatible with OpenSSL 1.1.1 and 3.0.0.
OpenSSL's licensing changed between these releases from dual
OpenSSL/SSLeay license to Apache License v2.0, which is
considered incompatible with GPL v2 by the FSF. For
implications and details, see the file COPYING.
* SECURITY FIXES:
- CVE-2021-39272: fetchmail-SA-2021-02: On IMAP connections,
without --ssl and with nonempty --sslproto, meaning that
fetchmail is to enforce TLS, and when the server or an attacker
sends a PREAUTH greeting, fetchmail used to continue an
unencrypted connection. Now, log the error and abort the
connection. --Recommendation for servers that support
SSL/TLS-wrapped or "implicit" mode on a dedicated port
(default 993): use --ssl, or the ssl user option in an rcfile.
- On IMAP and POP3 connections, --auth ssh no longer prevents
STARTTLS negotiation.
- On IMAP connections, fetchmail does not permit overriding
a server-side LOGINDISABLED with --auth password any more.
- On POP3 connections, the possibility for RPA authentication
(by probing with an AUTH command without arguments) no longer
prevents STARTTLS negotiation.
- For POP3 connections, only attempt RPA if the authentication
type is "any".
* BUG FIXES:
- On IMAP connections, when AUTHENTICATE EXTERNAL fails and we
have received the tagged (= final) response, do not send "*".
- On IMAP connections, AUTHENTICATE EXTERNAL without username
will properly send a "=" for protocol compliance.
- On IMAP connections, AUTHENTICATE EXTERNAL will now check if
the server advertised SASL-IR (RFC-4959) support and otherwise
refuse (fetchmail <= 6.4 has not supported and does not support
the separate challenge/response with command continuation)
- On IMAP connections, when --auth external is requested but not
advertised by the server, log a proper error message.
- Fetchmail no longer crashes when attempting a connection with
- -plugin "" or --plugout "".
- Fetchmail no longer leaks memory when processing the arguments
of --plugin or --plugout on connections.
- On POP3 connections, the CAPAbilities parser is now caseblind.
- Fix segfault on configurations with "defaults ... no envelope".
This is a regression in fetchmail 6.4.3 and happened when
plugging memory leaks, which did not account for that the
envelope parameter is special when set as "no envelope". The
segfault happens in a constant strlen(-1), triggered by trusted
local input => no vulnerability.
- Fix program abort (SIGABRT) with "internal error" when invalid
sslproto is given with OpenSSL 1.1.0 API compatible SSL
implementations.
* CHANGES:
- IMAP: When fetchmail is in not-authenticated state and the server
volunteers CAPABILITY information, use it and do not re-probe.
(After STARTTLS, fetchmail must and will re-probe explicitly.)
- For typical POP3/IMAP ports 110, 143, 993, 995, if port and --ssl
option do not match, emit a warning and continue.
- fetchmail.man and README.SSL were updated in line with
RFC-8314/8996/8997 recommendations to prefer Implicit TLS
(--ssl/ssl) and TLS v1.2 or newer, placing --sslproto tls1.2+
more prominently. The defaults shall not change between 6.4.X
releases for compatibility.
* Rebase patches:
fetchmail-add-imap-oauthbearer-support.patch
fetchmail-add-query_to64_outsize-utility-function.patch
fetchmail-support-oauthbearer-xoauth2-with-pop3.patch
==== ffmpegthumbs ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== file ====
Version update (5.40 -> 5.41)
Subpackages: file-magic libmagic1
- Remove file-5.38-allow-readlinkat.dif as already doen in latest
file 5.41
- Update to 5.41:
* Avinash Sonawane: Fix tzname detection
* Fix relationship tests with "search" magic, don't short circuit
logic
* Fix memory leak in compile mode
* PR/272: kiefermat: Only set returnval = 1 when we printed something
(in all cases print or !print). This simplifies the logic and fixes
the issue in the PR with -k and --mime-type there was no continuation
printed before the default case.
* PR/270: Don't translate unprintable characters in %s magic formats
when -r
* PR/269: Avoid undefined behavior with clang (adding offset to NULL)
* Add a new flag (f) that requires that the match is a full word,
not a partial word match.
* Add varint types (unused)
* PR/256: mutableVoid: If the file is less than 3 bytes, use the file
length to determine type
* PR/259: aleksandr.v.novichkov: mime printing through indirect magic
is not taken into account, use match directly so that it does.
- Remove patches now upstream
* file-5.40-1c677c04.patch
* file-5.40-3096f87f.patch
* file-5.40-4c5fe1ad.patch
* file-5.40-6b34436a.patch
* file-5.40-749e1ecf.patch
* file-5.40-9b0459af.patch
* file-5.40-9e2becec.patch
* file-5.40-ascii.patch
* file-5.40-f0601504.patch
* file-5.40-f7705dca.patch
- Port patches
* file-5.19-biorad.dif
* file-5.19-printf.dif
* file-5.19-zip2.0.dif
* file-5.23-endian.patch
* file-5.28-btrfs-image.dif
* file-5.38-allow-readlinkat.dif
* file-secure_getenv.patch
- Port and rename patch file-5.39.dif which is now file-5.41.dif
==== firewalld ====
Version update (1.0.0 -> 1.0.1)
Subpackages: firewalld-bash-completion firewalld-zsh-completion python3-firewall
- Update to 1.0.1:
* keep linux capability CAP_SYS_MODULE
* UPnP Client: actually allow SSDP traffic
* Fix RPM macros to test if firewall-cmd is executable
==== flatpak ====
Version update (1.11.3 -> 1.12.1)
Subpackages: libflatpak0 system-user-flatpak
- Update to version 1.12.1:
+ The security fix in the 1.12.0 release failed when used with
some older versions of libseccomp (that don't know about the
new syscalls).
- Update to version 1.12.0:
+ This is the first stable release in the 1.12.x series. The
major changes in this series is the support for better control
of sub-sandboxes, as used by the steam flatpak.
+ In addition, this release fixes a security vulnerability in the
portal support. Some recently added syscalls were not blocked
by the seccomp rules which allowed the application to create
sub-sandboxes which can confuse the sandboxing verification
mechanisms of the portal. This has been fixed by extending the
seccomp rules (boo#1191507, CVE-2021-41133)
+ Some test fixes
+ Support for specifying the flatpak binary to use during exports
+ Install translations for all languages in the locale, not just
the ones in LC_MESSAGES.
+ Fix progress reporting in flatpak fsck
+ Handle cases where /var/tmp is a symlink
+ Expose /etc/gai.conf to the sandbox
+ Fix the parental control checks for root
+ Handle missing /etc/ld.so.cache (musl)
+ Updated translations
==== frameworkintegration ====
Version update (5.86.0 -> 5.87.0)
Subpackages: frameworkintegration-plugin libKF5Style5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== freerdp ====
Subpackages: libfreerdp2 libwinpr2
- Finally nailed it: CMAKE_INSTALL_LIBDIR is absolute on Leaps and
relative on TW, but freerdp requires the relative variant.
Fixes boo#1190919
- Remove freerdp-fix-plugin-path.patch again, the problem was
introduced/fixed by cmake changes
==== fwupd ====
Version update (1.5.8 -> 1.6.2)
Subpackages: libfwupd2 typelib-1_0-Fwupd-2_0
- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
* harden_fwupd-offline-update.service.patch
* harden_fwupd-refresh.service.patch
- Update to version 1.6.2
- The fwupd efi program be separated to fwupd-efi package.
- Removed pesign-obs-integration, moved needssslcertforbuild
, SBAT and EFI signing stuff to fwupd-efi.
- Moved libfwupdplugin1 to libfwupdplugin2
- Change log from upstream:
https://github.com/fwupd/fwupd/blob/main/data/org.freedesktop.fwupd.metainf…
- This release adds the following features:
* Add a plugin to check Lenovo firmware settings
* Add initial support for the powerd daemon
* Add support for CapsuleOnDisk
* Add support for installing UEFI updates from GRUB
* Add support for soft-requirements that can be ignored with --force
* Allow devices to only accept version upgrades
* Allow discovery of Redfish BMCs specified by VID-PID or MAC
* Allow the daemon to request interactive action from the end user
* Automatically connect the BMC network interface at startup
* Show the build timestamp if set on the device
* Show the user how to switch out of Wacom tablet Android-mode
- This release fixes the following bugs:
* Add the alternate vendor name into the 8BitDo allowlist
* Allow multiple devices to set WAIT_FOR_REPLUG
* Allow the client to watch for more property changes
* Always ensure the SuperIO version string is NUL terminated
* Automatically clear the update error as required
* Disable all UX capsules for Lenovo hardware
* Do not assume the metainfo file is NUL-terminated
* Do not save invalid files on LVFS server error
* Fix a VLI regression in enumerating the PD device
* Fix a VLI regression when installing VL820Q7 firmware
* Fix enumeration of the Synaptics Prometheus config child
* Fix parsing Redfish USB/PCI network VID/PIDs
* Fix the fwupdmgr progressbar spinner to actually work
* Fix version number for legacy Wacom Bluetooth modules
* Ignore virtual M.2 ATA devices
* Preserve NEEDS_REBOOT on successful update
* Prevent a corrupt PHAT table from allocating lots of memory
* Read the Redfish SMBIOS table when required
* Remove the vendor string from the device name where required
* Save the update state to the database correctly all of the time
* Switch from sysctl to ioctl for ESRT on FreeBSD
* Try reading from /sys/class/dmi if SMBIOS direct access fails
* Watch for children added or removed after setup has been completed
* Work around a XCC-ism on Lenovo hardware
- This release adds support for the following hardware:
* ModemManager devices supporting Firehose or MBIM QDU
* More models of RTS54HUB
* More Poly DFU devices
* Parade LSPCON
* PixArt receiver and wireless hardware
* Realtek MST with RTD2142
* SuperIO IT5570
* USB4 Dell dock
==== gc ====
Version update (8.0.4 -> 8.0.6)
- Update to release 8.0.6
* Allocate start_info struct on the stack in GC_pthread_create.
* Allow GC_PAUSE_TIME_TARGET environment variable values
smaller than 5 ms.
* Disable mprotect-based incremental GC if /proc roots are used.
* Enable sbrk-to-mmap fallback on major supported Unix-like
platforms.
* Ensure process is running on one CPU core if AO ops are
emulated with locks.
* Fix data race regarding *rlh value in generic_malloc_many.
* Fix handling of areas smaller than page size in
GC_scratch_recycle.
* Limit number of unmapped regions.
==== gcr ====
Version update (3.40.0 -> 3.41.0)
Subpackages: gcr-data gcr-prompter gcr-ssh-askpass gcr-viewer libgck-1-0 libgcr-3-1 typelib-1_0-Gck-1 typelib-1_0-Gcr-3
- Update to version 3.41.0:
+ Port ssh-agent from gnome-keyring.
+ build: Fix parallel build failure due to missing marshal
dependency.
+ Fix warnings by dropping `volatile` for g_once_init_inter
locations.
+ tests: More robust against GTask unref race condition.
+ Updated translations.
- Add pkgconfig(libsecret-1), pkgconfig(libsystemd),
pkgconfig(systemd) and openssh-clients BuildRequires: Build new
standalone ssh-agent, and split it out in own sub-package.
==== gdm ====
Subpackages: gdmflexiserver libgdm1 typelib-1_0-Gdm-1_0
- Add gdm-daemon-Infer-session-type-from-desktop-file.patch
(bsc#1191809, bsc#1191248)
- Rebase gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch
(bsc#1191014).
==== gegl ====
Version update (0.4.30 -> 0.4.32)
Subpackages: gegl-0_4 libgegl-0_4-0
- disable docs until the upstream bug is solved
https://gitlab.gnome.org/GNOME/gegl/-/issues/294#note_1281553
==== gimp ====
Version update (2.10.24 -> 2.10.28)
Subpackages: gimp-plugin-aa gimp-plugins-python libgimp-2_0-0 libgimpui-2_0-0
- Add upstream patch (GIMP issue #6210)
+ 0001-Issue-6210-Subpixel-font-rendering-system-settings-s.patch
Fix issue where the textool produces false color artifacts
when using font anti-aliasing and system is set to subpixel
rendering.
- gimp-tips no longer has translations
- Update to 2.10.28
- Core:
- Dashboard now has memory support in OpenBSD.
- Default shortcuts Shift+[ and ] for tool size changed to {
and }.
- Performance improvements for GIMP on macOS Big Sur: these
improvements were actually already applied in our macOS
packages since GIMP 2.10.22, but were applied upstream
directly only now.
- User Interface:
- Dark theme: improve accessibility of GtkRadioButton by adding
a white border on mouse-hover.
- Gray theme: set light background for selected text in Layers
and Paths dockable dialogs to make text visible.
- Dark, Gray and Light themes: remove 3D shadow box around eye
and link toggles in Layers, Channels, and Paths dockable
dialog tree views.
- Plug-ins:
- Improved DDS support and fix some red/blue bit swap for
RGB10A2 DDS. The plug-in version is incremented so that it
is able to catch and correct previously incorrect RGB10A2
images exported by older versions of our plug-in.
- DDS files with "L16" - a 16 bit luminance channel - are now
loaded in 16-bit.
- DICOM images:
* Support for planar configuration. Support for deprecated
* big endian transfer.
- TIFF images:
* Thumbnail storing now done by storing the thumbnail as the
* second
page in the file (through Exiv2) and setting metadata
"Exif.Thumbnail.NewSubfileType" to 1 (reduced resolution
image) instead of storing the thumbnail as a subifd. This
was done because of a Windows bug locking TIFF files with
thumbnail stored as subfid.
* Symmetrically, loading will ignore pages marked as "reduced
resolution image" (i.e. it will consider them as
thumbnails), as well as try to guess if a page (without
subfile type) is a thumbnail when it meets following
criteria: second page with YCbCr PhotometricInterpretation,
old style jpeg compression while the first page has a
different PhotometricInterpretation or compression.
- Script-fu:
- New (dir-make "/dir/name" mode) function to create a
directory.
- Build:
- Fix uninstalled white-border prelight file.
- On Windows, *.rs file extension is not associated with SUN
Raster images anymore. The reason is that this file extension
is mostly used for Rust code files nowadays. If Windows could
detect file formats with "magic numbers" (i.e. byte
identifiers), it would not be a problem, but since it relies
apparently only the extension, it's better to remove this
association.
- Oppositely on Linux and other Unix-like systems using desktop
files, add the image/x-sun-raster MimeType which was
forgotten (there, detection should be fine and not depend on
file extension).
- gimp30-tips.mo is not installed anymore (only used during the
build to generate gimp-tips.xml with multiple language
support).
- --enable-check-update now has an "auto" value, which is the
new default. It is equivalent to "yes" for Windows and macOS
and "no" in all other cases.
- New unit test to check that localizations listed in the
installer script match available po files in
po-windows-installer/.
- "msys*" host value now detected as Windows builds.
- Bumping minimum GEGL to version 0.4.32.
==== git ====
Version update (2.33.0 -> 2.33.1)
Subpackages: git-core git-cvs git-daemon git-email git-gui git-svn git-web gitk perl-Git
- git 2.33.1:
* fix "git pull" and "git rebase -r" various corner cases and bugs
* "git commit --fixup" now works with "--edit" again.
* Fix "git send-email" unwanted threading
* Fix output from "git fast-export" anonymization feature
showing an annotated tag incorrectly.
* Fixes for various command output
* fix "git difftool --dir-diff" mishandling symbolic links
* Redact sensitive data in the HTTP trace for HTTP/2 requests
* further bug fixes for various git operations
- Added hardening to systemd service(s) (bsc#1181400). Modified:
* git-daemon.service
==== gjs ====
Subpackages: libgjs0 typelib-1_0-GjsPrivate-1_0
- Add upstream crash fixer patches from stable branch:
+ b9e122044a7ccc1e2a3374c680b6ea82066bfa59.patch: arg: Replace
gsize with size_t
+ 62025d4a2738a36ea5f1a7cebef08b22b5eef613.patch: Handle optional
out parameters in callbacks
- Stop disabling lto: Following this, stop passing dtrace=true and
systemtap=true to meson, aswell as dropping systemtap-sdt-devel
BuildRequires, follow upstream default.
- Add optional pkgconfig(gtk4) BuildRequires: meson checks for it.
==== glibc ====
Subpackages: glibc-devel glibc-extra glibc-locale glibc-locale-base nscd
- ld-show-auxv-colon.patch: elf: Fix missing colon in LD_SHOW_AUXV output
(BZ #282539
- x86-string-control-test.patch: x86-64: Use testl to check
__x86_string_control
- pthread-kill-fail-after-exit.patch: nptl: pthread_kill, pthread_cancel
should not fail after exit (BZ #19193)
- pthread-kill-race-thread-exit.patch: nptl: Fix race between pthread_kill
and thread exit (BZ #12889)
- getcwd-attribute-access.patch: posix: Fix attribute access mode on
getcwd (BZ #27476)
- pthread-kill-return-esrch.patch: nptl: pthread_kill needs to return
ESRCH for old programs (BZ #19193)
- pthread-mutexattr-getrobust-np-type.patch: nptl: Fix type of
pthread_mutexattr_getrobust_np, pthread_mutexattr_setrobust_np (BZ
[#28036])
- setxid-deadlock-blocked-signals.patch: nptl: Avoid setxid deadlock with
blocked signals in thread exit (BZ #28361)
- pthread-kill-send-specific-thread.patch: nptl: pthread_kill must send
signals to a specific thread (BZ #28407)
- sysconf-nprocessors-affinity.patch: linux: Revert the use of
sched_getaffinity on get_nproc (BZ #28310)
- iconv-charmap-close-output.patch: renamed from
icon-charmap-close-output.patch
==== glibmm2_4 ====
Version update (2.66.1 -> 2.66.2)
Subpackages: libgiomm-2_4-1 libglibmm-2_4-1
- Update to version 2.66.2:
+ Glib, Gio: Replace all g_quark_from_static_string() by
g_quark_from_string()
+ Gio:
- FileEnumerator: Remove refreturn to avoid memory leak
- ListModel::get_object(): Make it work for interface classes
+ Build: MSVC build: Remove extraneous GLIBMM_API in
Glib::ustring
==== glusterfs ====
Version update (9.1 -> 9.3)
Subpackages: libgfapi0 libgfrpc0 libgfxdr0 libglusterfs0
- Update to release 9.3
* New reset-brick command
* Ability to get node level status of a cluster
* Multi-threaded self-heal for Disperse volumes
* Lock revocation feature
* On-demand scrubbing for bitrot detection
* Real time Cluster notifications using Events APIs
- Move mount helper to /usr/sbin [boo#1191062]
==== gnome-clocks ====
Version update (40.0 -> 41.0)
Subpackages: gnome-shell-search-provider-gnome-clocks
- Update to version 41.0:
+ Updated translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
==== gnome-online-accounts ====
Version update (3.40.0 -> 3.40.1)
Subpackages: libgoa-1_0-0 libgoa-backend-1_0-1 typelib-1_0-Goa-1_0
- Update to version 3.40.1:
+ Bugs fixed: glgo#GNOME/gnome-online-accounts!68 dbus: Add
missing since tag for IsSupportedProvider.
+ Updated translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
==== gnome-shell ====
Subpackages: gnome-extensions gnome-shell-calendar
- Add 380d2db1d9047ecffcef7d78f00184963b403efc.patch: inputMethod:
Clear preeditStr before reset. Previously, these were performed
in a different order before GNOME 41. During some other changes
they were swapped.
However, this causes both GTK 3 and GTK 4 applications to scroll
to incorrect positions from the preedit change.
==== gnome-shell-extensions ====
Subpackages: gnome-shell-classic gnome-shell-extensions-common
- Update sle-classic to version 41
+ Update gse-sle-classic-ext.patch
+ Update sle-classic(a)suse.com.tar.gz
==== gpm ====
Subpackages: libgpm2
- Added hardening to systemd service(s) (bsc#1181400). Modified:
* gpm.service
==== gpsd ====
Version update (3.23 -> 3.23.1)
- Re-enable LTO on aarch64
- Set ProtectClock to false or gpsd will not start
- Don't use gpsd version in patches (will break with every update)
% harden_gpsd.service.patch
% harden_gpsdctl@.service.patch
- Update to version 3.23.1
* Improve ubx cycle detection.
* Add quirks for Jackson Labs nonstandard NMEA
* Change STATUS_NO_FIX to STATUS_UNK to avoid confusion with fix
mode.
* Change STATUS_FIX to STATUS_GPS to avoid confusion with fix
mode.
* Change STATUS_DGPS_FIX to STATUS_DGPS to avoid confusion with
fix mode.
* Split SOURCE_ACM from SOURCE_USB. ACM has no speeds.
* Add speeds 1 mbps, 1.152 mbps, 1.5 mbps, and higher. When libc
supports them.
* Improve autobaud.
* Add new u-blox M10 messages.
* Fix u-blox M6, M7 initialization issues.
* Various ubxtool and gpxlogger updates.
* Add mtk3301_speed_switcher()
* No API, ABI changes.
* Fallback to "python3" if "python" not found.
- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
* harden_gpsd.service.patch
* harden_gpsdctl@.service.patch
==== grantleetheme ====
Version update (21.08.1 -> 21.08.2)
Subpackages: libKF5GrantleeTheme5
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== graphviz ====
Version update (2.48.0 -> 2.49.1)
Subpackages: graphviz-plugins-core libgraphviz6
- update to 2.49.1:
- the CMake build system installs gzipped man pages if `gzip` is available #1883
- CMake projects using Graphviz as a subproject (`add_subdirectory`) can now
link against and use `gvc`.
- various problems in the generation of Javascript bindings
- 2.48.0: test suite is failing #2112
- Ensure correct file-level dependency for generated file in cmake generated
projects #2119
- compile failures with a C++20-compatible toolchain #2122
- compile errors on macOS when using Bison 3.8 #2127
- Make Graphviz buildable as a cmake subproject/subdirectory #1477
- Header not found in Cmake project #2109
- a very basic C++ API for a subset of the functions in lib/cgraph and
lib/gvc, allowing a graph to be rendered from DOT source to a
specified format. The new API is available through two new
libraries: lib/cgraph++ and lib/gvc++. It is experimental, meaning
that it might have breaking changes also in upcoming patch or minor
releases (towards #2001)
- CMake builds now support an `with_expat` option that allows the support for
using HTML-like labels through the optional expat library to be explicitly
enabled (default) or disabled
- CMake builds now support an with_zlib option that allows the support for
raster image compression through the optional zlib library to be explicitly
enabled (default) or disabled
- the CMake build system now enables `-Wextra` when building C++
- some Cgraph functions that take `char*` arguments that they do not modify have
been updated to take `const char*` arguments #634
- incorrectly using the `layout` attribute on anything other than a graph now
results in a warning about this being invalid #2078
- `edgepaint` accepts more standard `--` prefixed command line arguments and
rejects invalid options #1971
- improved detection of Lefty dependencies in the Autotools build system
- libexpr rejects printing the time (`%t`) if no format is provided
- `-DDATE=?` option in the CMake build system has been removed
- the Autotools build system no longer writes the DATE file and the portable
source tarball no longer includes this
- The attached dot file causes a segfault when processed #2095
- fix typos and update URLs in `edgepaint` usage text and man page
- Fix clang's undefined behavior warning in dotLayout
- gvpr doesn't build on macOS but MKDEFS_EXECUTABLE points to wrong
directory #2101
- the generated gdefs.h header is no longer installed
- `ccomps` out-of-memory message no longer incorrectly refers to `gc`
- do not abort when `calloc(0, x)` or `calloc(x, 0)` in `gcalloc` return `NULL`
- failed Exshort_t type discrimination #1799
- dot manpage is in wrong directory on Windows #1936
- CMake builds fail when when the ltdl library is not available even if the
`enable_ltdl` option is `ON`
- CMake builds fail when when the optional `zlib` library is not available
- fix graph rotation in quartz plugin
==== graphviz-addons ====
Version update (2.48.0 -> 2.49.1)
Subpackages: graphviz-gd graphviz-gnome
- update to 2.49.1:
- the CMake build system installs gzipped man pages if `gzip` is available #1883
- CMake projects using Graphviz as a subproject (`add_subdirectory`) can now
link against and use `gvc`.
- various problems in the generation of Javascript bindings
- 2.48.0: test suite is failing #2112
- Ensure correct file-level dependency for generated file in cmake generated
projects #2119
- compile failures with a C++20-compatible toolchain #2122
- compile errors on macOS when using Bison 3.8 #2127
- Make Graphviz buildable as a cmake subproject/subdirectory #1477
- Header not found in Cmake project #2109
- a very basic C++ API for a subset of the functions in lib/cgraph and
lib/gvc, allowing a graph to be rendered from DOT source to a
specified format. The new API is available through two new
libraries: lib/cgraph++ and lib/gvc++. It is experimental, meaning
that it might have breaking changes also in upcoming patch or minor
releases (towards #2001)
- CMake builds now support an `with_expat` option that allows the support for
using HTML-like labels through the optional expat library to be explicitly
enabled (default) or disabled
- CMake builds now support an with_zlib option that allows the support for
raster image compression through the optional zlib library to be explicitly
enabled (default) or disabled
- the CMake build system now enables `-Wextra` when building C++
- some Cgraph functions that take `char*` arguments that they do not modify have
been updated to take `const char*` arguments #634
- incorrectly using the `layout` attribute on anything other than a graph now
results in a warning about this being invalid #2078
- `edgepaint` accepts more standard `--` prefixed command line arguments and
rejects invalid options #1971
- improved detection of Lefty dependencies in the Autotools build system
- libexpr rejects printing the time (`%t`) if no format is provided
- `-DDATE=?` option in the CMake build system has been removed
- the Autotools build system no longer writes the DATE file and the portable
source tarball no longer includes this
- The attached dot file causes a segfault when processed #2095
- fix typos and update URLs in `edgepaint` usage text and man page
- Fix clang's undefined behavior warning in dotLayout
- gvpr doesn't build on macOS but MKDEFS_EXECUTABLE points to wrong
directory #2101
- the generated gdefs.h header is no longer installed
- `ccomps` out-of-memory message no longer incorrectly refers to `gc`
- do not abort when `calloc(0, x)` or `calloc(x, 0)` in `gcalloc` return `NULL`
- failed Exshort_t type discrimination #1799
- dot manpage is in wrong directory on Windows #1936
- CMake builds fail when when the ltdl library is not available even if the
`enable_ltdl` option is `ON`
- CMake builds fail when when the optional `zlib` library is not available
- fix graph rotation in quartz plugin
==== grilo ====
Version update (0.3.13 -> 0.3.14)
Subpackages: libgrilo-0_3-0 libgrlnet-0_3-0 libgrlpls-0_3-0 typelib-1_0-Grl-0_3
- Update to version 0.3.14:
+ CVE-2021-39365: Fix TLS cert validation not being done for any
network call.
+ Fix double-free when using GrlNet in Python.
+ Load config from GRL_CONFIG_PATH if set.
+ Clarify LGPLv2.1 or later license.
+ Handle numeric limits for GrlOperationOptions.
+ Updated translations.
- Drop grilo-CVE-2021-39365.patch: fixed upstream.
==== grilo-plugins ====
Version update (0.3.13 -> 0.3.14)
Subpackages: grilo-plugin-tracker grilo-plugin-youtube
- Update to version 0.3.14:
+ Fix lua-factory crash on >= 5.4.3.
+ Clarify LGPLv2.1 or later license.
+ tracker3: Make resolve async.
+ euronews: Use YouTube feeds.
+ Updated translations.
- Drop 108.patch: fixed upstream.
==== gwenview5 ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- Changes since 21.08.1:
* Restore the ability to quickly switch between "Zoom to Fit" and "Actual
Size" with a keyboard shortcut (kde#441152)
==== hwdata ====
Version update (0.351 -> 0.352)
- Update to version 0.352 (bsc#1191375:
+ Updated pci, usb and vendor ids.
==== hwinfo ====
Version update (21.76 -> 21.77)
- merge gh#openSUSE/hwinfo#105
- Use license file from gnu.org
- Fix spelling
- Add missing final newline
- Trim excess whitespace
- Simple maintenance improvements
- 21.77
==== hylafax+ ====
Version update (7.0.3 -> 7.0.4)
Subpackages: hylafax+-client
- version 7.0.4
* README.SUSE renamed
* hylafax.diff added for boo#1191571 (pre-correction)
* Dependencies on systemd-services adjusted
* retry training twice at the same bitrate unless FTT (26 Aug 2021)
* add missing reason messages for session failures (21 Aug 2021)
* stop attempts to send or receive signals if the call ended prematurely (16-19 Aug 2021)
* add Class1HasRMHookIndication (16 Aug 2021)
* don't attempt sending DCN if we're already on hook (15, 17 Aug 2021)
* end session sooner if receiver hangs up immediately after TCF or during prologue (14 Aug 2021)
* fix some behavior following frame reception timeouts (13 Aug 2021)
* improve behavior if procedural interrupt fails (12 Aug 2021)
* handle sender repeating RR after we transmit MCF (10 Aug 2021)
* add session logging of receipt of CFR/FTT signals (3 Aug 2021)
* cope with receipt of PPR following CTC (3 Aug 2021)
* attempt to cope with NSF/CSI/DIS after PPS, CTR, ERR, RR and improve coping with
the same after MPS/EOP/EOM (2, 12, 14, 18 Aug 2021)
* identify DCN after PPS as a receiver abort (2 Aug 2021)
* attempt to cope with receipt of CTR after sending PPS (2 Aug 2021)
* remove use of deprecated libtiff integer types and "register" storage class specifier (25 Jul 2021)
* don't employ senderFumblesECM if V.34-Fax was negotiated (25 Jul 2021)
* update configure to accept libtiff v4.2 and v4.3 (24 Jul 2021)
* fix page handling "botch" if a job's first and previous attempts were on a proxy (20 Jul 2021)
* fix data timeout for bitrates less than 14400 bps when non-zero scanline time (15 Jul 2021)
* try to cope with T.38 invite stutter at beginning of send (15 Jul 2021)
* decouple session logging from direct filesystem I/O (15 Jul 2021)
* try to help receivers who may expect initial 1-bits to start high-speed data (8, 9 Jul, 4 Aug 2021)
* improve tenacity of "persistent" ECM (26 Jun 2021)
* maintain the same SSL Fax passcode during a single session (20 May 2021)
* log detection of binary file transfer support in receivers (1 Apr 2021)
* add support for SiLabs Si2417/Si2435 (5 Feb 2021)
- Drop ProtectClock hardening, can cause issues if other device acceess is needed
==== incidenceeditor ====
Version update (21.08.1 -> 21.08.2)
Subpackages: libKF5IncidenceEditor5
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- Changes since 21.08.1:
* Do not create duplicate tags (kde#441846)
==== inotify-tools ====
Version update (3.21.9.5 -> 3.21.9.6)
Subpackages: libinotifytools0
- update to 3.21.9.6:
* update path for includes in stats.h
* Fix spellings in manpages
==== inxi ====
Version update (3.3.03 -> 3.3.07)
- update to 3.3.07:
* /usr/share/doc/packages/inxi/inxi.changelog.
==== iputils ====
Subpackages: rarpd
- Drop ProtectClock hardening, can cause issues if other device acceess is needed
==== irda ====
- Drop ProtectClock hardening, can cause issues if other device acceess is needed
==== iso-codes ====
Version update (4.6.0 -> 4.7.0)
- update to 4.7.0:
* Fix weblate check: Remove double spaces
* Rename ku.po to kmr.po.
* Add common names for South and North Korea.
* Updates for Indonesia
* ISO 3166-1 translations
* ISO 3166-2 translations
* ISO 3166-3 translations
* ISO 639-2 translations
* ISO 639-3 translations
* ISO 639-5 translations
* ISO 4217 translations
* ISO 15924 translations
==== jack ====
Version update (1.9.18 -> 1.9.19)
Subpackages: libjack-devel libjack0 libjacknet0 libjackserver0
- drop 0001-Fix-compilation-of-documentation.patch (upstream).
- update to 1.9.19:
* Add jack_position_t::tick_double, and flags around it
* Add zalsa "-w" argument to wait for soundcard to be available
* Bump internal protocol version to 9 (due to struct alignment)
* Fix alignment of fields for atomic accesses
* Fix build for platforms needing __STDC_FORMAT_MACROS
* Fix compilation of documentation
==== java-11-openjdk ====
Version update (11.0.12.0 -> 11.0.13.0)
Subpackages: java-11-openjdk-headless
- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
* Security fixes
+ JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
enabled cipher suites preference
+ JDK-8254967, CVE-2021-35565, bsc#1191909:
com.sun.net.HttpsServer spins on TLS session close
+ JDK-8263314: Enhance XML Dsig modes
+ JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
+ JDK-8265574: Improve handling of sheets
+ JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
RTF kit
+ JDK-8265776: Improve Stream handling for SSL
+ JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
support
+ JDK-8266103: Better specified spec values
+ JDK-8266109: More Resilient Classloading
+ JDK-8266115: More Manifest Jar Loading
+ JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
integrity
+ JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
Delegation
+ JDK-8267086: ArrayIndexOutOfBoundsException in
java.security.KeyFactory.generatePublic
+ JDK-8267712: Better LDAP reference processing
+ JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
handshaking
+ JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
+ JDK-8268193: Improve requests of certificates
+ JDK-8268199: Correct certificate requests
+ JDK-8268205: Enhance DTLS client handshake
+ JDK-8268506: More Manifest Digests
+ JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
identification
+ JDK-8269624: Enhance method selection support
+ JDK-8270398: Enhance canonicalization
+ JDK-8270404: Better canonicalization
* Other changes
+ JDK-8024368: private methods are allocated vtable indices
+ JDK-8042902: Test java/net/Inet6Address/serialize/
/Inet6AddressSerializationTest.java fails intermittently
+ JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
+ JDK-8157404: Unable to read certain PKCS12 keystores from
SequenceInputStream
+ JDK-8158066: SourceDebugExtensionTest fails to rename file
+ JDK-8168304: Make all of DependencyContext_test available in
product mode
+ JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
fails intermittently with BindException
+ JDK-8181313: SA: Remove libthread_db dependency on Linux
+ JDK-8193214: Incorrect annotations.without.processors
warnings with JDK 9
+ JDK-8194230: jdk/internal/jrtfs/remote/
/RemoteRuntimeImageTest.java fails with
java.lang.NullPointerException
+ JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
fails
+ JDK-8199931: java/net/MulticastSocket/
/UnreferencedMulticastSockets.java fails with "incorrect data
received"
+ JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
version changes
+ JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
failed on Mac 10.13 with zh_CN and zh_TW locales.
+ JDK-8207316: java/nio/channels/spi/SelectorProvider/
/inheritedChannel/InheritedChannelTest.java failed
+ JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
+ JDK-8208363: test/jdk/java/lang/Package/
/PackageFromManifest.java missing module dependencies
declaration
+ JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
compiler warnings
+ JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
to plain java test
+ JDK-8209772: Refactor shell test java/util/ServiceLoader/
/basic/basic.sh to java
+ JDK-8209773: Refactor shell test javax/naming/module/basic.sh
to java
+ JDK-8209832: Refactor jdk/internal/reflect/Reflection/
/GetCallerClassTest.sh to plain java test
+ JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
to plain java test
+ JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
tests to plain java tests
+ JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
plain java tests
+ JDK-8210495: compiler crashes because of illegal signature in
otherwise legal code
+ JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
image layout
+ JDK-8210802: temp files left by tests in
jdk/java/net/httpclient
+ JDK-8210819: Update the host name in CNameTest.java
+ JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
java test
+ JDK-8210934: Move sun/net/www/protocol/http/
/GetErrorStream.java to OpenJDK
+ JDK-8210959: JShell fails and exits when statement throws an
exception whose message contains a '%'.
+ JDK-8211055: Provide print to a file (PDF) feature even when
printer was not connected
+ JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
/MultiThreadTest.java fails intermittently when cleaning up
+ JDK-8211296: Remove HotSpot deprecation warning suppression
for Mac/clang
+ JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
with cleaning up
+ JDK-8212040: Compilation error due to wrong usage of
NSPrintJobDispositionValue in mac10.12
+ JDK-8212695: Add explicit timeout to several HTTP Client tests
+ JDK-8212718: Refactor some annotation processor tests to
better use collections
+ JDK-8213007: Update the link in test/jdk/sun/security/
/provider/SecureRandom/DrbgCavp.java
+ JDK-8213137: Remove static initialization of monitor/mutex
instances
+ JDK-8213235: java/nio/channels/SocketChannel/
/AsyncCloseChannel.java fails with threads that didn't exit
+ JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
to plain java tests
+ JDK-8213576: Make test AsyncCloseChannel.java run in othervm
+ JDK-8213694: Test Timeout.java should run in othervm mode
+ JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
/except/except002 and except003
+ JDK-8213922: fix ctw stand-alone build
+ JDK-8214195: Align stdout messages in
test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
+ JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
/NonUniqueAliases.java failed with incorrect jtreg tags order
+ JDK-8214937: sun/security/tools/jarsigner/warnings/
/NoTimestampTest.java failed due to unexpected expiration date
+ JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
+ JDK-8217825: Verify @AfterTest is used correctly in WebSocket
tests
+ JDK-8218145: block_if_requested is not proper inlined due to
size
+ JDK-8219417: bump jtreg requiredVersion to b14
+ JDK-8219552: bump jtreg requiredVersion to b14 in
test/jdk/sanity/client/
+ JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
intermittently due to NumberFormatException
+ JDK-8220445: Support for side by side MSVC Toolset versions
+ JDK-8221988: add possibility to build with Visual Studio 2019
+ JDK-8222751: closed/test/jdk/sun/security/util/
/DerIndefLenConverter/IndefBerPkcs12.java fail
+ JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
Dependencies::find_unique_concrete_method() for non-virtual
methods
+ JDK-8224853: CDS address sanitizer errors
+ JDK-8225082: Remove IdenTrust certificate that is expiring in
September 2021
+ JDK-8225583: Examine the HttpResponse.BodySubscribers for
null handling and multiple subscriptions
+ JDK-8225690: Multiple AttachListener threads can be created
+ JDK-8225790: Two NestedDialogs tests fail on Ubuntu
+ JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
/BodySubscribersTest.java
+ JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
statically bindable methods directly
+ JDK-8226602: Test convenience reactive primitives from
java.net.http with RS TCK
+ JDK-8226683: Remove review suggestion from fix to 8219804
+ JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
to "exit code is 134"
+ JDK-8227766: CheckUnhandledOops is broken in MemAllocator
+ JDK-8227815: Minimal VM: set_state is not a member of
AttachListener
+ JDK-8230674: Heap dumps should exclude dormant CDS archived
objects of unloaded classes
+ JDK-8230808: Remove Access::equals()
+ JDK-8230841: Remove oopDesc::equals()
+ JDK-8231717: Improve performance of charset decoding when
charset is always compactable
+ JDK-8232243: Wrong caret position in JTextPane on Windows
with a screen resolution > 100%
+ JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
(aarch64)
+ JDK-8233790: Forward output from heap dumper to jcmd/jmap
+ JDK-8233989: Create an IPv4 version of
java/net/MulticastSocket/SetLoopbackMode.java
+ JDK-8234510: Remove file seeking requirement for writing a
heap dump
+ JDK-8235211: serviceability/attach/
/RemovingUnixDomainSocketTest.java fails with
AttachNotSupportedException: Unable to open socket file
+ JDK-8235216: typo in test filename
+ JDK-8235866: bump jtreg requiredVersion to 4.2b16
+ JDK-8236111: narrow allowSmartActionArgs disabling
+ JDK-8236413: AbstractConnectTimeout should tolerate both
NoRouteToHostException and UnresolvedAddressException
+ JDK-8236671: NullPointerException in JKS keystore
+ JDK-8238930: problem list compiler/c2/Test8004741.java
+ JDK-8238943: switch to jtreg 5.0
+ JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
breaks QuietOption.java test
+ JDK-8240983: Incorrect copyright header in Apache Santuario
2.1.3 files
+ JDK-8241336: Some java.net tests failed with
NoRouteToHostException on MacOS with special network
configuration
+ JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
+ JDK-8241768: git needs .gitattributes
+ JDK-8242882: opening jar file with large manifest might throw
NegativeArraySizeException
+ JDK-8244973: serviceability/attach/
/RemovingUnixDomainSocketTest.java fails "stderr was not
empty"
+ JDK-8245134: test/lib/jdk/test/lib/security/
/KeyStoreUtils.java should allow to specify aliases
+ JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
expected [18:14:22] but found [18:14:23]"
+ JDK-8246387: switch to jtreg 5.1
+ JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
allocating blob
+ JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
offline cpus are present and cpusets.effective_cpus is not
available
+ JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
/TextLayout/ArabicDiacriticTest.java can leave frame open
+ JDK-8248403: AArch64: Remove uses of kernel integer types
+ JDK-8248414: AArch64: Remove uses of long and unsigned long
ints
+ JDK-8248657: Windows: strengthening in ThreadCritical
regarding memory model
+ JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
+ JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
+ JDK-8248671: AArch64: Remove unused variables
+ JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
+ JDK-8248816: C1: Fix signature conflict in
LIRGenerator::strength_reduce_multiply
+ JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
fails on Windows
+ JDK-8249548: backward focus traversal gets stuck in button
group
+ JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
failure due to stray packets and interference
+ JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
bug-id
+ JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
@ignore w/o bug-id
+ JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
@ignore w/o bug-id
+ JDK-8250588: Shenandoah: LRB needs to save/restore fp
registers for runtime call
+ JDK-8250824: AArch64: follow up for JDK-8248414
+ JDK-8251166: Add automated testcases for changes done in
JDK-8214112
+ JDK-8251252: Add automated testcase for fix done in
JDK-8214253
+ JDK-8251254: Add automated test for fix done in JDK-8218472
+ JDK-8251361: Potential race between Logger configuration and
GCs in HttpURLConWithProxy test
+ JDK-8251549: Update docs on building for Git
+ JDK-8251945: SIGSEGV in
PackageEntry::purge_qualified_exports()
+ JDK-8252194: Add automated test for fix done in JDK-8218469
+ JDK-8252648: Shenandoah: name gang tasks consistently
+ JDK-8252825: Add automated test for fix done in JDK-8218479
+ JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
fails intermittently with C1
+ JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
consistent
+ JDK-8253048: AArch64: When CallLeaf, no need to preserve
callee-saved registers in caller
+ JDK-8253424: Add support for running pre-submit testing using
GitHub Actions
+ JDK-8253631: Remove unimplemented CompileBroker methods after
JEP-165
+ JDK-8253865: Pre-submit testing using GitHub Actions does not
detect failures reliably
+ JDK-8253899: Make IsClassUnloadingEnabled signature match
specification
+ JDK-8254024: Enhance native libs for AWT and Swing to work
with GraalVM Native Image
+ JDK-8254054: Pre-submit testing using GitHub Actions should
not use the deprecated set-env command
+ JDK-8254173: Add Zero, Minimal hotspot targets to submit
workflow
+ JDK-8254175: Build no-pch configuration in debug mode for
submit checks
+ JDK-8254244: Some code emitted by TemplateTable::branch is
unused when running TieredCompilation
+ JDK-8254270: linux 32 bit build doesn't compile
libjdwp/log_messages.c
+ JDK-8254282: Add Linux x86_32 builds to submit workflow
+ JDK-8254850: Update terminology in java.awt.GridBagLayout
source code comments
+ JDK-8255255: Update Apache Santuario (XML Signature) to
version 2.2.1
+ JDK-8255305: Add Linux x86_32 tier1 to submit workflow
+ JDK-8255352: Archive important test outputs in submit workflow
+ JDK-8255373: Submit workflow artifact name is always
"test-results_.zip"
+ JDK-8255452: Doing GC during JVMTI MethodExit event posting
breaks return oop
+ JDK-8255718: Zero: VM should know it runs in interpreter-only
mode
+ JDK-8255790: GTKL&F: Java 16 crashes on initialising GTKL&F
on Manjaro Linux
+ JDK-8255810: Zero: build fails without JVMTI
+ JDK-8255895: Submit workflow artifacts miss hs_errs/replays
due to ZIP include mismatch
+ JDK-8256127: Add cross-compiled foreign architectures builds
to submit workflow
+ JDK-8256215: Shenandoah: re-organize saving/restoring machine
state in assembler code
+ JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
x86_32 and lower -XX:+UseSSE
+ JDK-8256277: Github Action build on macOS should define OS
and Xcode versions
+ JDK-8256354: Github Action build on Windows should define OS
and MSVC versions
+ JDK-8256393: Github Actions build on Linux should define OS
and GCC versions
+ JDK-8256414: add optimized build to submit workflow
+ JDK-8256747: GitHub Actions: decouple the hotspot build-only
jobs from Linux x64 testing
+ JDK-8257056: Submit workflow should apt-get update to avoid
package installation errors
+ JDK-8257148: Remove obsolete code in AWTView.m
+ JDK-8257497: Update keytool to create AKID from the SKID of
the issuing certificate as specified by RFC 5280
+ JDK-8257620: Do not use objc_msgSend_stret to get macOS
version
+ JDK-8257913: Add more known library locations to simplify
Linux cross-compilation
+ JDK-8258703: Incorrect 512-bit vector registers restore on
x86_32
+ JDK-8259338: Add expiry exception for identrustdstx3 alias to
VerifyCACerts.java test
+ JDK-8259535: ECDSA SignatureValue do not always have the
specified length
+ JDK-8259679: GitHub actions should use MSVC 14.28
+ JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
not configure libc6:i386"
+ JDK-8260460: GitHub actions still fail on Linux x86_32 with
"Could not configure libc6:i386"
+ JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
+ JDK-8260923: Add more tests for SSLSocket input/output
shutdown
+ JDK-8261072: AArch64: Fix MacroAssembler::get_thread
convention
+ JDK-8261147: C2: Node is wrongly marked as reduction
resulting in a wrong execution due to wrong vector instructions
+ JDK-8261238: NMT should not limit baselining by size threshold
+ JDK-8261496: Shenandoah: reconsider pacing updates memory
ordering
+ JDK-8261652: Remove some dead comments from os_bsd_x86
+ JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
with the StackFrameStream
+ JDK-8262000: jdk/jfr/event/gc/detailed/
/TestPromotionFailedEventWithParallelScavenge.java failed with
"OutOfMemoryError: Java heap space"
+ JDK-8262017: C2: assert(n != __null) failed: Bad immediate
dominator info.
+ JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
+ JDK-8262409: sun/security/ssl/SSLSocketImpl/
/SSLSocketImplThrowsWrongExceptions. SSL test failures caused
by java failed with "Server reported the wrong exception"
+ JDK-8262470: Printed GlyphVector outline with low DPI has bad
quality on Windows
+ JDK-8262862: Harden tests sun/security/x509/URICertStore/
/ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
+ JDK-8263136: C4530 was reported from VS 2019 at access bridge
+ JDK-8263227: C2: inconsistent spilling due to dead nodes in
exception block
+ JDK-8263382: java/util/logging/ParentLoggersTest.java failed
with "checkLoggers: getLoggerNames() returned unexpected
loggers"
+ JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
+ JDK-8263432: javac may report an invalid package/class clash
on case insensitive filesystems
+ JDK-8263490: [macos] Crash occurs on JPasswordField with
activated InputMethod
+ JDK-8263531: Remove unused buffer int
+ JDK-8263667: Avoid running GitHub actions on branches named
pr/*
+ JDK-8263776: [JVMCI] add helper to perform Java upcalls
+ JDK-8264016: [JVMCI] add some thread local fields for use by
JVMCI
+ JDK-8264752: SIGFPE crash with option
FlightRecorderOptions:threadbuffersize=30M
+ JDK-8265132: C2 compilation fails with assert "missing
precedence edge"
+ JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
fix for JDK-8264821
+ JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
description
+ JDK-8265756: AArch64: initialize memory allocated for locals
according to Windows AArch64 stack page growth requirement in
template interpreter
+ JDK-8265761: Font with missed font family name is not
properly printed on Windows
+ JDK-8265773: incorrect jdeps message "jdk8internals" to
describe a removed JDK internal API
+ JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
incorrect CPU load inside a container
+ JDK-8266018: Shenandoah: fix an incorrect assert
+ JDK-8266206: Build failure after JDK-8264752 with older GCCs
+ JDK-8266248: Compilation failure in
PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
+ JDK-8266288: assert root method not found in
witnessed_reabstraction_in_supers is too strong
+ JDK-8266404: Fatal error report generated with
- XX:+CrashOnOutOfMemoryError should not contain suggestion to
submit a bug report
+ JDK-8266480: Implicit null check optimization does not update
control of hoisted memory operation
+ JDK-8266615: C2 incorrectly folds subtype checks involving an
interface array
+ JDK-8266642: Improve ResolvedMethodTable hash function
+ JDK-8266749: AArch64: Backtracing broken on PAC enabled
systems
+ JDK-8266761: AssertionError in
sun.net.httpserver.ServerImpl.responseCompleted
+ JDK-8266813: Shenandoah: Use shorter instruction sequence for
checking if marking in progress
+ JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
to uninitialized BasicObjectLock::_displaced_header
+ JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
Metaspace with less classes
+ JDK-8267396: Avoid recording "pc" in unhandled oops detector
for better performance
+ JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
test failed with assertion
+ JDK-8267424: CTW: C1 fails with "State must not be null"
+ JDK-8267459: Pasting Unicode characters into JShell does not
work.
+ JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
+ JDK-8267666: Add option to jcmd GC.heap_dump to use existing
file
+ JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
+ JDK-8267751: (test) jtreg.SkippedException has no serial
VersionUID
+ JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
min_jint correctly
+ JDK-8268103: JNI functions incorrectly return a double after
JDK-8265836
+ JDK-8268127: Shenandoah: Heap size may be too small for
region to align to large page size
+ JDK-8268261: C2: assert(n != __null) failed: Bad immediate
dominator info.
+ JDK-8268347: C2: nested locks optimization may create
unbalanced monitor enter/exit code
+ JDK-8268360: Missing check for infinite loop during node
placement
+ JDK-8268362: [REDO] C2 crash when compile negative
Arrays.copyOf length after loop
+ JDK-8268366: Incorrect calculation of has_fpu_registers in C1
linear scan
+ JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
missing null check
+ JDK-8268417: Add test from JDK-8268360
+ JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
performance
+ JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
fails with NPE
+ JDK-8268620: InfiniteLoopException test may fail on x86
platforms
+ JDK-8268635: Corrupt oop in ClassLoaderData
+ JDK-8268699: Shenandoah: Add test for JDK-8268127
+ JDK-8268771: javadoc -notimestamp option does not work on
index.html
+ JDK-8268775: Password is being converted to String in
AccessibleJPasswordField
+ JDK-8268776: Test `ADatagramSocket.java` missing /othervm
from @run tag
+ JDK-8268965: TCP Connection Reset when connecting simple
socket to SSL server
+ JDK-8269304: Regression ~5% in 2005 in b27
+ JDK-8269415: [11u] Remove ea from
DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
+ JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
be more resilient
+ JDK-8269529: javax/swing/reliability/
/HangDuringStaticInitialization.java fails in Windows debug
build
+ JDK-8269594: assert(_handle_mark_nesting > 1) failed: memory
leak: allocating handle outside HandleMark
+ JDK-8269614: [s390] Interpreter checks wrong bit for slow
path instance allocation
+ JDK-8269650: Optimize gc-locker in
[Get|Release]StringCritical for latin string
+ JDK-8269661: JNI_GetStringCritical does not lock char array
+ JDK-8269668: [aarch64] java.library.path not including
/usr/lib64
+ JDK-8269763: The JEditorPane is blank after JDK-8265167
+ JDK-8269795: C2: Out of bounds array load floats above its
range check in loop peeling resulting in SEGV
+ JDK-8269847: JDK-8269594 backport breaks 11u builds
+ JDK-8269850: Most JDK releases report macOS version 12 as
10.16 instead of 12.0
+ JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
incorrect process cpu usage in containers
+ JDK-8269882: stack-use-after-scope in NewObjectA
+ JDK-8269934: RunThese24H.java failed with
EXCEPTION_ACCESS_VIOLATION in
java_lang_Thread::get_thread_status
+ JDK-8270096: Shenandoah: Optimize gc/shenandoah/
/TestRefprocSanity.java for interpreter mode
+ JDK-8270137: Kerberos Credential Retrieval from Cache not
Working in Cross-Realm Setup
+ JDK-8270184: [TESTBUG] Add coverage for jvmci
ResolvedJavaType.toJavaName() for lambdas
+ JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
incorrect type name for lambdas
+ JDK-8270556: Exclude security/infra/java/security/cert/
/CertPathValidator/certification/LetsEncryptCA
+ JDK-8270893: IndexOutOfBoundsException while reading large
TIFF file
+ JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
+ JDK-8272124: Cgroup v1 initialization causes
NullPointerException when cgroup path contains colon
+ JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
when clone null CallProjections.fallthrough_ioproj
+ JDK-8272197: Update 11u GHA workflow with Shenandoah
configurations
+ JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
after JDK-8255790
+ JDK-8272472: StackGuardPages test doesn't build with glibc
2.34
+ JDK-8272602: [macos] not all KEY_PRESSED events sent when
control modifier is used
+ JDK-8272628: Problemlist gc/stress/gcbasher/
/TestGCBasherWithCMS.java for x86_32
+ JDK-8272700: [macos] Build failure with Xcode 13.0 after
JDK-8264848
+ JDK-8272772: Shenandoah: compiler/c2/aarch64/
/TestVolatilesShenandoah.java fails in 11u
+ JDK-8273939: Backport of 8248414 to JDK11 breaks
MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
* icedtea-sound-1.0.1-jdk9.patch
* icedtea-sound-soundproperties.patch
+ not needed since the icedtea-sound provider is removed
* jdk11-glibc234.patch
+ integrated upstream
==== jfsutils ====
- UsrMerge: don't override _sbindir (bsc#1191065)
==== juk ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== k3b ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kaccounts-integration ====
Version update (21.08.1 -> 21.08.2)
Subpackages: libkaccounts2
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kaccounts-providers ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kactivities-stats ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kactivities5 ====
Version update (5.86.0 -> 5.87.0)
Subpackages: kactivities5-imports libKF5Activities5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kactivitymanagerd ====
Version update (5.22.5 -> 5.23.1)
Subpackages: kactivitymanagerd-lang
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
* Fix build by lowering KDE_COMPILERSETTINGS_LEVEL
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* desktop switch support for wayland (kde#439183)
* Port away from deprecated KPluginLoader
* krunner plugin: Avoid querying DBus runner unnecessarily
* Clean up unneeded JSON parameter in kcoreaddons_add_plugin
* Port from KPluginLoader::pluginsById to KPluginMetaData::pluginById
* Use version-less qt DBus macros
* Clean up ServiceType property usage for JSON based plugins
* Remove empty dependencies value of JSON plugin metadata
==== kaddressbook ====
Version update (21.08.1 -> 21.08.2)
Subpackages: kaddressbook-doc libKPimAddressbookImportExport5
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kalarmcal ====
Version update (21.08.1 -> 21.08.2)
Subpackages: akonadi-plugin-kalarmcal libKF5AlarmCalendar5
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kalgebra ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kamera ====
Version update (21.08.1 -> 21.08.2)
Subpackages: kamera-lang kio_kamera
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kanagram ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kapptemplate ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== karchive ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kate ====
Version update (21.08.1 -> 21.08.2)
Subpackages: kate-plugins
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- Changes since 21.08.1:
* Fix replicode plugin not deleting its toolview (kde#441859)
* Fix commit dialog width
- Change the license tag to LGPL-2.0-only AND LGPL-2.1-or-later.
There are no GPL-3.0 files.
==== katomic ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kauth ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5Auth5 libKF5Auth5-lang libKF5AuthCore5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kbd ====
Subpackages: kbd-legacy
- regenerated cz-map.patch needed for xkeyboard-config 2.34 update
==== kblackbox ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kblocks ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kbookmarks ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5Bookmarks5 libKF5Bookmarks5-lang
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kbounce ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kbreakout ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kbruch ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kcachegrind ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kcalc ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kcalendarcore ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Set the correct last modified time when creating an exception for a recurring event.
* icalformat_p.cpp - support ATTACH parameter FILENAME (kde#436161)
* Add Qt5Gui as dependency in pkgconfig file.
* autotests/testicaltimezones.cpp - fix unused variable warning
* Read floating date time as LocalTime
* Implement PERIOD support in RDATE
==== kcalutils ====
Version update (21.08.1 -> 21.08.2)
Subpackages: libKF5CalendarUtils5
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- Changes since 21.08.1:
* Display completion date as a date and time
==== kcharselect ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kcm_sddm ====
Version update (5.22.5 -> 5.23.1)
Subpackages: kcm_sddm-lang
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Add keywords to SDDM KCM
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* Re-word synchronization text for greater usability (kde#439217)
* Port OverlaySheet headers to use new title: property
* Sync the current kscreen configuration
* Print an error when the copy didn't work
* Close sheets after successfully interacting with them (kde#433919,kde#436137)
* Mark simple data files as non-copyrightable
* Convert LicenseRef-KDE-Accepted-GPL license headers to SPDX
* Convert license headers to SPDX
==== kcmutils ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5KCMUtils5 libKF5KCMUtils5-lang
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Fix Warning: Property type "Int" is not a known QVariant type
* Add support for static builds
* Add compat code for KService based plugin loading
* Introduce KCModuleProxy::isChanged method
* Un-overload KCModuleProxy:changed signal
==== kcodecs ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5Codecs5 libKF5Codecs5-lang
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* KCodecs::decodeRFC2047String(): return "UTF-8" when multiple charsets used
* Add CI configuration file
==== kcolorchooser ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kcompletion ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5Completion5 libKF5Completion5-lang
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* New shouldAutoSuggest property on KCompletion.
* Fix typo in argument name (autosubject -> autoSuggest)
==== kconfig ====
Version update (5.86.0 -> 5.87.0)
Subpackages: kconf_update5 libKF5ConfigCore5 libKF5ConfigCore5-lang libKF5ConfigGui5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Android: Fix writing to config if path is a content:// Uri
* Add Gitlab CI configuration
* kconfigini: Only open the file once to write
* Allow KConfigXT to use KSharedConfig::openStateConfig
==== kconfigwidgets ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5ConfigWidgets5 libKF5ConfigWidgets5-lang
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Do not emit deprecation warnings for overload which gets chosen by compiler
==== kcontacts ====
Version update (5.86.0 -> 5.87.0)
Subpackages: kcontacts-lang libKF5Contacts5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kcoreaddons ====
Version update (5.86.0 -> 5.87.0)
Subpackages: kcoreaddons-lang libKF5CoreAddons5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* KStringHandler: add a new perlSplit() overload that takes a QStringView
* ktexttohtml: port QStringRef (deprecated) to QStringView and minor refactor
* Port QStringRef (deprected) to QStringView
* Deprecate KPluginMetaData::extraInformation
* Don't forward-declare QVector
* Fix python bindings generation
==== kcrash ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kcron ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kdav ====
Version update (5.86.0 -> 5.87.0)
Subpackages: kdav-lang libKF5DAV5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kdbusaddons ====
Version update (5.86.0 -> 5.87.0)
Subpackages: kdbusaddons-tools libKF5DBusAddons5 libKF5DBusAddons5-lang
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Introduce UpdateLaunchEnvJob
* Correct to make sure we use the matching ECM version
* Add CI configuration file
==== kde-cli-tools5 ====
Version update (5.22.5 -> 5.23.1)
Subpackages: kde-cli-tools5-lang
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* kioclient: Add a 'stat' command
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* kcmshell: Allow loading KCMs using plugin path
* kcmshell: general code cleanup
* General code cleanup
* kcmshell: Re-group includes
* Replace QtDBus include with includes for specific classes
* plasma-open-settings: support both systemsettings:// and :///
* Include settings-open that allows summoning system settings from a URL
* Relicense file to LGPL-2.0-or-later
==== kde-gtk-config5 ====
Version update (5.22.5 -> 5.23.1)
Subpackages: kde-gtk-config5-gtk3
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* kwin_bridge: Load DecorationButton without the "button" keyword (kde#442659)
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* kded: listen for changes to accent colours
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* Make sure to actually commit GSettings changes
* Drop unused dependency on gtk+-2.0
* Minor color-reload-module clean-up.
* Fix license identifier statement
* Adapt to recent kdecoration private api changes
* Restore preview.ui
- Drop patches, now upstream:
* 0001-Drop-unused-dependency-on-gtk-2.0.patch
==== kde-print-manager ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kdeclarative ====
Version update (5.86.0 -> 5.87.0)
Subpackages: kdeclarative-components libKF5CalendarEvents5 libKF5Declarative5 libKF5Declarative5-lang libKF5QuickAddons5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Make sure the object gets destroyed before the view
* Add support for static builds
* SimpleKCM: Remove last vestiges of previously-removed properties
* SimpleKCM: remove custom header and footer handling
==== kdeconnect-kde ====
Version update (21.08.1 -> 21.08.2)
Subpackages: kdeconnect-kde-zsh-completion
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- Changes since 21.08.1:
* [sendreplydialog] Move focus on tab
* [sendreplydialog] Submit on enter, enter newline on shift+enter
* Install status icons again
==== kded ====
Version update (5.86.0 -> 5.87.0)
Subpackages: kded-lang
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kdeedu-data ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kdegraphics-thumbnailers ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kdelibs4support ====
Version update (5.86.0 -> 5.87.0)
Subpackages: kdelibs4support-lang libKF5KDELibs4Support5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kdenetwork-filesharing ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kdepim-addons ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kdepim-runtime ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- Changes since 21.08.1:
* Consider the online state when attempting to reconnect
* DAV resource: support exception incidences
==== kdesu ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5Su5 libKF5Su5-lang
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kdf ====
Version update (21.08.1 -> 21.08.2)
Subpackages: kwikdisk
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kdialog ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kdiamond ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kdnssd-framework ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5DNSSD5 libKF5DNSSD5-lang
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kdoctools ====
Version update (5.86.0 -> 5.87.0)
Subpackages: kdoctools-lang libKF5DocTools5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kemoticons ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kernel-64kb ====
Version update (5.14.9 -> 5.14.11)
- Linux 5.14.11 (bsc#1012628).
- Revert "ARM: imx6q: drop of_platform_default_populate() from
init_machine" (bsc#1012628).
- Revert "brcmfmac: use ISO3166 country code and 0 rev as
fallback" (bsc#1012628).
- libata: Add ATA_HORKAGE_NO_NCQ_ON_ATI for Samsung 860 and 870
SSD (bsc#1012628).
- perf/x86: Reset destroy callback on event init failure
(bsc#1012628).
- KVM: x86: nSVM: restore int_vector in svm_clear_vintr
(bsc#1012628).
- kvm: x86: Add AMD PMU MSRs to msrs_to_save_all[] (bsc#1012628).
- KVM: x86: reset pdptrs_from_userspace when exiting smm
(bsc#1012628).
- KVM: do not shrink halt_poll_ns below grow_start (bsc#1012628).
- selftests: KVM: Align SMCCC call with the spec in steal_time
(bsc#1012628).
- kasan: always respect CONFIG_KASAN_STACK (bsc#1012628).
- tools/vm/page-types: remove dependency on opt_file for idle
page tracking (bsc#1012628).
- block: don't call rq_qos_ops->done_bio if the bio isn't tracked
(bsc#1012628).
- io_uring: allow conditional reschedule for intensive iterators
(bsc#1012628).
- x86/insn, tools/x86: Fix undefined behavior due to potential
unaligned accesses (bsc#1012628).
- smb3: correct smb3 ACL security descriptor (bsc#1012628).
- irqchip/gic: Work around broken Renesas integration
(bsc#1012628).
- scsi: ses: Retry failed Send/Receive Diagnostic commands
(bsc#1012628).
- thermal/drivers/tsens: Fix wrong check for tzd in irq handlers
(bsc#1012628).
- nvme-fc: avoid race between time out and tear down
(bsc#1012628).
- nvme-fc: update hardware queues before using them (bsc#1012628).
- swiotlb-xen: ensure to issue well-formed XENMEM_exchange
requests (bsc#1012628).
- Xen/gntdev: don't ignore kernel unmapping error (bsc#1012628).
- selftests: kvm: fix get_run_delay() ignoring fscanf() return
warn (bsc#1012628).
- selftests: kvm: move get_run_delay() into lib/test_util
(bsc#1012628).
- selftests:kvm: fix get_trans_hugepagesz() ignoring fscanf()
return warn (bsc#1012628).
- selftests:kvm: fix get_warnings_count() ignoring fscanf()
return warn (bsc#1012628).
- selftests: be sure to make khdr before other targets
(bsc#1012628).
- habanalabs/gaudi: fix LBW RR configuration (bsc#1012628).
- habanalabs: fail collective wait when not supported
(bsc#1012628).
- habanalabs/gaudi: use direct MSI in single mode (bsc#1012628).
- usb: dwc2: check return value after calling
platform_get_resource() (bsc#1012628).
- usb: testusb: Fix for showing the connection speed
(bsc#1012628).
- scsi: elx: efct: Do not hold lock while calling
fc_vport_terminate() (bsc#1012628).
- scsi: sd: Free scsi_disk device via put_device() (bsc#1012628).
- drm/amdkfd: fix svm_migrate_fini warning (bsc#1012628).
- drm/amdkfd: handle svm migrate init error (bsc#1012628).
- ext2: fix sleeping in atomic bugs on error (bsc#1012628).
- platform/x86: gigabyte-wmi: add support for B550I Aorus Pro AX
(bsc#1012628).
- sparc64: fix pci_iounmap() when CONFIG_PCI is not set
(bsc#1012628).
- xen-netback: correct success/error reporting for the
SKB-with-fraglist case (bsc#1012628).
- net: mdio: introduce a shutdown method to mdio device drivers
(bsc#1012628).
- btrfs: fix mount failure due to past and transient device
flush error (bsc#1012628).
- btrfs: replace BUG_ON() in btrfs_csum_one_bio() with proper
error handling (bsc#1012628).
- nfsd: back channel stuck in SEQ4_STATUS_CB_PATH_DOWN
(bsc#1012628).
- platform/x86: touchscreen_dmi: Update info for the Chuwi Hi10
Plus (CWI527) tablet (bsc#1012628).
- platform/x86: touchscreen_dmi: Add info for the Chuwi HiBook
(CWI514) tablet (bsc#1012628).
- afs: Add missing vnode validation checks (bsc#1012628).
- spi: rockchip: handle zero length transfers without timing out
(bsc#1012628).
- commit 834dddd
- iwlwifi: Fix MODULE_FIRMWARE() for non-existing ucode version
(boo#1191417).
- commit 6597512
- Linux 5.14.10 (bsc#1012628).
- media: hantro: Fix check for single irq (bsc#1012628).
- media: cedrus: Fix SUNXI tile size calculation (bsc#1012628).
- media: s5p-jpeg: rename JPEG marker constants to prevent build
warnings (bsc#1012628).
- ASoC: fsl_sai: register platform component before registering
cpu dai (bsc#1012628).
- ASoC: fsl_esai: register platform component before registering
cpu dai (bsc#1012628).
- ASoC: fsl_micfil: register platform component before registering
cpu dai (bsc#1012628).
- ASoC: fsl_spdif: register platform component before registering
cpu dai (bsc#1012628).
- ASoC: fsl_xcvr: register platform component before registering
cpu dai (bsc#1012628).
- ASoC: mediatek: common: handle NULL case in suspend/resume
function (bsc#1012628).
- scsi: elx: efct: Fix void-pointer-to-enum-cast warning for
efc_nport_topology (bsc#1012628).
- ASoC: SOF: Fix DSP oops stack dump output contents
(bsc#1012628).
- ASoC: SOF: imx: imx8: Bar index is only valid for IRAM and
SRAM types (bsc#1012628).
- ASoC: SOF: imx: imx8m: Bar index is only valid for IRAM and
SRAM types (bsc#1012628).
- pinctrl: qcom: spmi-gpio: correct parent irqspec translation
(bsc#1012628).
- net/mlx4_en: Resolve bad operstate value (bsc#1012628).
- s390/qeth: Fix deadlock in remove_discipline (bsc#1012628).
- s390/qeth: fix deadlock during failing recovery (bsc#1012628).
- m68k: Update ->thread.esp0 before calling syscall_trace()
in ret_from_signal (bsc#1012628).
- NIOS2: fix kconfig unmet dependency warning for
SERIAL_CORE_CONSOLE (bsc#1012628).
- kasan: fix Kconfig check of CC_HAS_WORKING_NOSANITIZE_ADDRESS
(bsc#1012628).
- HID: amd_sfh: Fix potential NULL pointer dereference
(bsc#1012628).
- perf test: Fix DWARF unwind for optimized builds (bsc#1012628).
- perf iostat: Use system-wide mode if the target cpu_list is
unspecified (bsc#1012628).
- perf iostat: Fix Segmentation fault from NULL 'struct
perf_counts_values *' (bsc#1012628).
- watchdog/sb_watchdog: fix compilation problem due to
COMPILE_TEST (bsc#1012628).
- tty: Fix out-of-bound vmalloc access in imageblit (bsc#1012628).
- cpufreq: schedutil: Use kobject release() method to free
sugov_tunables (bsc#1012628).
- scsi: qla2xxx: Changes to support kdump kernel for NVMe BFS
(bsc#1012628).
- drm/amdgpu: adjust fence driver enable sequence (bsc#1012628).
- drm/amdgpu: avoid over-handle of fence driver fini in s3 test
(v2) (bsc#1012628).
- drm/amdgpu: stop scheduler when calling hw_fini (v2)
(bsc#1012628).
- cpufreq: schedutil: Destroy mutex before kobject_put() frees
the memory (bsc#1012628).
- scsi: ufs: ufs-pci: Fix Intel LKF link stability (bsc#1012628).
- ALSA: rawmidi: introduce SNDRV_RAWMIDI_IOCTL_USER_PVERSION
(bsc#1012628).
- ALSA: firewire-motu: fix truncated bytes in message tracepoints
(bsc#1012628).
- ALSA: hda/realtek: Quirks to enable speaker output for Lenovo
Legion 7i 15IMHG05, Yoga 7i 14ITL5/15ITL5, and 13s Gen2 laptops
(bsc#1012628).
- ACPI: NFIT: Use fallback node id when numa info in NFIT table
is incorrect (bsc#1012628).
- fs-verity: fix signed integer overflow with i_size near S64_MAX
(bsc#1012628).
- hwmon: (tmp421) handle I2C errors (bsc#1012628).
- hwmon: (w83793) Fix NULL pointer dereference by removing
unnecessary structure field (bsc#1012628).
- hwmon: (w83792d) Fix NULL pointer dereference by removing
unnecessary structure field (bsc#1012628).
- hwmon: (w83791d) Fix NULL pointer dereference by removing
unnecessary structure field (bsc#1012628).
- gpio: pca953x: do not ignore i2c errors (bsc#1012628).
- scsi: ufs: Fix illegal offset in UPIU event trace (bsc#1012628).
- mac80211: fix use-after-free in CCMP/GCMP RX (bsc#1012628).
- platform/x86/intel: hid: Add DMI switches allow list
(bsc#1012628).
- x86/kvmclock: Move this_cpu_pvti into kvmclock.h (bsc#1012628).
- ptp: Fix ptp_kvm_getcrosststamp issue for x86 ptp_kvm
(bsc#1012628).
- KVM: x86: Fix stack-out-of-bounds memory access from
ioapic_write_indirect() (bsc#1012628).
- KVM: x86: nSVM: don't copy virt_ext from vmcb12 (bsc#1012628).
- KVM: x86: Clear KVM's cached guest CR3 at RESET/INIT
(bsc#1012628).
- KVM: x86: Swap order of CPUID entry "index" vs. "significant
flag" checks (bsc#1012628).
- KVM: nVMX: Filter out all unsupported controls when eVMCS was
activated (bsc#1012628).
- KVM: SEV: Update svm_vm_copy_asid_from for SEV-ES (bsc#1012628).
- KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA
(bsc#1012628).
- KVM: SEV: Acquire vcpu mutex when updating VMSA (bsc#1012628).
- KVM: SEV: Allow some commands for mirror VM (bsc#1012628).
- KVM: SVM: fix missing sev_decommission in sev_receive_start
(bsc#1012628).
- KVM: nVMX: Fix nested bus lock VM exit (bsc#1012628).
- KVM: VMX: Fix a TSX_CTRL_CPUID_CLEAR field mask issue
(bsc#1012628).
- mmc: renesas_sdhi: fix regression with hard reset on old SDHIs
(bsc#1012628).
- media: ir_toy: prevent device from hanging during transmit
(bsc#1012628).
- RDMA/cma: Do not change route.addr.src_addr.ss_family
(bsc#1012628).
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing
more requests (bsc#1012628).
- nbd: use shifts rather than multiplies (bsc#1012628).
- drm/amd/display: initialize backlight_ramping_override to false
(bsc#1012628).
- drm/amd/display: Pass PCI deviceid into DC (bsc#1012628).
- drm/amd/display: Fix Display Flicker on embedded panels
(bsc#1012628).
- drm/amdgpu: force exit gfxoff on sdma resume for rmb s0ix
(bsc#1012628).
- drm/amdgpu: check tiling flags when creating FB on GFX8-
(bsc#1012628).
- drm/amdgpu: correct initial cp_hqd_quantum for gfx9
(bsc#1012628).
- interconnect: qcom: sdm660: Fix id of slv_cnoc_mnoc_cfg
(bsc#1012628).
- interconnect: qcom: sdm660: Correct NOC_QOS_PRIORITY shift
and mask (bsc#1012628).
- drm/i915/gvt: fix the usage of ww lock in gvt scheduler
(bsc#1012628).
- ipvs: check that ip_vs_conn_tab_bits is between 8 and 20
(bsc#1012628).
- bpf: Handle return value of BPF_PROG_TYPE_STRUCT_OPS prog
(bsc#1012628).
- IB/cma: Do not send IGMP leaves for sendonly Multicast groups
(bsc#1012628).
- RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure
(bsc#1012628).
- bpf, mips: Validate conditional branch offsets (bsc#1012628).
- hwmon: (mlxreg-fan) Return non-zero value when fan current
state is enforced from sysfs (bsc#1012628).
- RDMA/irdma: Skip CQP ring during a reset (bsc#1012628).
- RDMA/irdma: Validate number of CQ entries on create CQ
(bsc#1012628).
- RDMA/irdma: Report correct WC error when transport retry
counter is exceeded (bsc#1012628).
- RDMA/irdma: Report correct WC error when there are MW bind
errors (bsc#1012628).
- netfilter: nf_tables: unlink table before deleting it
(bsc#1012628).
- netfilter: log: work around missing softdep backend module
(bsc#1012628).
- Revert "mac80211: do not use low data rates for data frames
with no ack flag" (bsc#1012628).
- mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug
(bsc#1012628).
- mac80211: limit injected vht mcs/nss in
ieee80211_parse_tx_radiotap (bsc#1012628).
- mac80211: mesh: fix potentially unaligned access (bsc#1012628).
- mac80211-hwsim: fix late beacon hrtimer handling (bsc#1012628).
- driver core: fw_devlink: Add support for
FWNODE_FLAG_NEEDS_CHILD_BOUND_ON_ADD (bsc#1012628).
- net: mdiobus: Set FWNODE_FLAG_NEEDS_CHILD_BOUND_ON_ADD for
mdiobus parents (bsc#1012628).
- sctp: break out if skb_header_pointer returns NULL in
sctp_rcv_ootb (bsc#1012628).
- mptcp: don't return sockets in foreign netns (bsc#1012628).
- mptcp: allow changing the 'backup' bit when no sockets are open
(bsc#1012628).
- RDMA/hns: Work around broken constant propagation in gcc 8
(bsc#1012628).
- hwmon: (tmp421) report /PVLD condition as fault (bsc#1012628).
- hwmon: (tmp421) fix rounding for negative values (bsc#1012628).
- net: enetc: fix the incorrect clearing of IF_MODE bits
(bsc#1012628).
- net: ipv4: Fix rtnexthop len when RTA_FLOW is present
(bsc#1012628).
- smsc95xx: fix stalled rx after link change (bsc#1012628).
- drm/i915/request: fix early tracepoints (bsc#1012628).
- drm/i915: Remove warning from the rps worker (bsc#1012628).
- dsa: mv88e6xxx: 6161: Use chip wide MAX MTU (bsc#1012628).
- dsa: mv88e6xxx: Fix MTU definition (bsc#1012628).
- dsa: mv88e6xxx: Include tagger overhead when setting MTU for
DSA and CPU ports (bsc#1012628).
- e100: fix length calculation in e100_get_regs_len (bsc#1012628).
- e100: fix buffer overrun in e100_get_regs (bsc#1012628).
- RDMA/hfi1: Fix kernel pointer leak (bsc#1012628).
- RDMA/hns: Fix the size setting error when copying CQE in
clean_cq() (bsc#1012628).
- RDMA/hns: Add the check of the CQE size of the user space
(bsc#1012628).
- bpf: Exempt CAP_BPF from checks against bpf_jit_limit
(bsc#1012628).
- libbpf: Fix segfault in static linker for objects without BTF
(bsc#1012628).
- selftests, bpf: Fix makefile dependencies on libbpf
(bsc#1012628).
- selftests, bpf: test_lwt_ip_encap: Really disable rp_filter
(bsc#1012628).
- bpf, x86: Fix bpf mapping of atomic fetch implementation
(bsc#1012628).
- net: ks8851: fix link error (bsc#1012628).
- ionic: fix gathering of debug stats (bsc#1012628).
- Revert "block, bfq: honor already-setup queue merges"
(bsc#1012628).
- scsi: csiostor: Add module softdep on cxgb4 (bsc#1012628).
- ixgbe: Fix NULL pointer dereference in ixgbe_xdp_setup
(bsc#1012628).
- net: hns3: do not allow call hns3_nic_net_open repeatedly
(bsc#1012628).
- net: hns3: remove tc enable checking (bsc#1012628).
- net: hns3: don't rollback when destroy mqprio fail
(bsc#1012628).
- net: hns3: fix mixed flag HCLGE_FLAG_MQPRIO_ENABLE and
HCLGE_FLAG_DCB_ENABLE (bsc#1012628).
- net: hns3: fix show wrong state when add existing uc mac address
(bsc#1012628).
- net: hns3: reconstruct function hns3_self_test (bsc#1012628).
- net: hns3: fix always enable rx vlan filter problem after
selftest (bsc#1012628).
- net: hns3: disable firmware compatible features when uninstall
PF (bsc#1012628).
- net: phy: bcm7xxx: Fixed indirect MMD operations (bsc#1012628).
- net: sched: flower: protect fl_walk() with rcu (bsc#1012628).
- net: stmmac: fix EEE init issue when paired with EEE capable
PHYs (bsc#1012628).
- af_unix: fix races in sk_peer_pid and sk_peer_cred accesses
(bsc#1012628).
- objtool: Teach get_alt_entry() about more relocation types
(bsc#1012628).
- perf/x86/intel: Update event constraints for ICX (bsc#1012628).
- sched/fair: Add ancestors of unthrottled undecayed cfs_rq
(bsc#1012628).
- sched/fair: Null terminate buffer when updating tunable_scaling
(bsc#1012628).
- hwmon: (occ) Fix P10 VRM temp sensors (bsc#1012628).
- hwmon: (pmbus/mp2975) Add missed POUT attribute for page 1
mp2975 controller (bsc#1012628).
- kvm: fix objtool relocation warning (bsc#1012628).
- nvme: add command id quirk for apple controllers (bsc#1012628).
- elf: don't use MAP_FIXED_NOREPLACE for elf interpreter mappings
(bsc#1012628).
- driver core: fw_devlink: Improve handling of cyclic dependencies
(bsc#1012628).
- debugfs: debugfs_create_file_size(): use IS_ERR to check for
error (bsc#1012628).
- ipack: ipoctal: fix stack information leak (bsc#1012628).
- ipack: ipoctal: fix tty registration race (bsc#1012628).
- ipack: ipoctal: fix tty-registration error handling
(bsc#1012628).
- ipack: ipoctal: fix missing allocation-failure check
(bsc#1012628).
- ipack: ipoctal: fix module reference leak (bsc#1012628).
- ext4: fix loff_t overflow in ext4_max_bitmap_size()
(bsc#1012628).
- ext4: limit the number of blocks in one ADD_RANGE TLV
(bsc#1012628).
- ext4: fix reserved space counter leakage (bsc#1012628).
- ext4: add error checking to ext4_ext_replay_set_iblocks()
(bsc#1012628).
- ext4: fix potential infinite loop in ext4_dx_readdir()
(bsc#1012628).
- ext4: flush s_error_work before journal destroy in
ext4_fill_super (bsc#1012628).
- HID: u2fzero: ignore incomplete packets without data
(bsc#1012628).
- net: udp: annotate data race around udp_sk(sk)->corkflag
(bsc#1012628).
- NIOS2: setup.c: drop unused variable 'dram_start' (bsc#1012628).
- usb: hso: remove the bailout parameter (bsc#1012628).
- HID: betop: fix slab-out-of-bounds Write in betop_probe
(bsc#1012628).
- netfilter: ipset: Fix oversized kvmalloc() calls (bsc#1012628).
- mm: don't allow oversized kvmalloc() calls (bsc#1012628).
- HID: usbhid: free raw_report buffers in usbhid_stop
(bsc#1012628).
- crypto: aesni - xts_crypt() return if walk.nbytes is 0
(bsc#1012628).
- KVM: x86: Handle SRCU initialization failure during page track
init (bsc#1012628).
- netfilter: conntrack: serialize hash resizes and cleanups
(bsc#1012628).
- netfilter: nf_tables: Fix oversized kvmalloc() calls
(bsc#1012628).
- drivers: net: mhi: fix error path in mhi_net_newlink
(bsc#1012628).
- objtool: print out the symbol type when complaining about it
(bsc#1012628).
- HID: amd_sfh: Fix potential NULL pointer dereference - take 2
(bsc#1012628).
- commit 7c980ba
- ALSA: hda: intel: Allow repeatedly probing on codec
configuration errors (bsc#1190801).
- commit 924f4be
- rpm: use _rpmmacrodir (boo#1191384)
- commit e350c14
==== kernel-source ====
Version update (5.14.9 -> 5.14.11)
Subpackages: kernel-default kernel-docs
- Linux 5.14.11 (bsc#1012628).
- Revert "ARM: imx6q: drop of_platform_default_populate() from
init_machine" (bsc#1012628).
- Revert "brcmfmac: use ISO3166 country code and 0 rev as
fallback" (bsc#1012628).
- libata: Add ATA_HORKAGE_NO_NCQ_ON_ATI for Samsung 860 and 870
SSD (bsc#1012628).
- perf/x86: Reset destroy callback on event init failure
(bsc#1012628).
- KVM: x86: nSVM: restore int_vector in svm_clear_vintr
(bsc#1012628).
- kvm: x86: Add AMD PMU MSRs to msrs_to_save_all[] (bsc#1012628).
- KVM: x86: reset pdptrs_from_userspace when exiting smm
(bsc#1012628).
- KVM: do not shrink halt_poll_ns below grow_start (bsc#1012628).
- selftests: KVM: Align SMCCC call with the spec in steal_time
(bsc#1012628).
- kasan: always respect CONFIG_KASAN_STACK (bsc#1012628).
- tools/vm/page-types: remove dependency on opt_file for idle
page tracking (bsc#1012628).
- block: don't call rq_qos_ops->done_bio if the bio isn't tracked
(bsc#1012628).
- io_uring: allow conditional reschedule for intensive iterators
(bsc#1012628).
- x86/insn, tools/x86: Fix undefined behavior due to potential
unaligned accesses (bsc#1012628).
- smb3: correct smb3 ACL security descriptor (bsc#1012628).
- irqchip/gic: Work around broken Renesas integration
(bsc#1012628).
- scsi: ses: Retry failed Send/Receive Diagnostic commands
(bsc#1012628).
- thermal/drivers/tsens: Fix wrong check for tzd in irq handlers
(bsc#1012628).
- nvme-fc: avoid race between time out and tear down
(bsc#1012628).
- nvme-fc: update hardware queues before using them (bsc#1012628).
- swiotlb-xen: ensure to issue well-formed XENMEM_exchange
requests (bsc#1012628).
- Xen/gntdev: don't ignore kernel unmapping error (bsc#1012628).
- selftests: kvm: fix get_run_delay() ignoring fscanf() return
warn (bsc#1012628).
- selftests: kvm: move get_run_delay() into lib/test_util
(bsc#1012628).
- selftests:kvm: fix get_trans_hugepagesz() ignoring fscanf()
return warn (bsc#1012628).
- selftests:kvm: fix get_warnings_count() ignoring fscanf()
return warn (bsc#1012628).
- selftests: be sure to make khdr before other targets
(bsc#1012628).
- habanalabs/gaudi: fix LBW RR configuration (bsc#1012628).
- habanalabs: fail collective wait when not supported
(bsc#1012628).
- habanalabs/gaudi: use direct MSI in single mode (bsc#1012628).
- usb: dwc2: check return value after calling
platform_get_resource() (bsc#1012628).
- usb: testusb: Fix for showing the connection speed
(bsc#1012628).
- scsi: elx: efct: Do not hold lock while calling
fc_vport_terminate() (bsc#1012628).
- scsi: sd: Free scsi_disk device via put_device() (bsc#1012628).
- drm/amdkfd: fix svm_migrate_fini warning (bsc#1012628).
- drm/amdkfd: handle svm migrate init error (bsc#1012628).
- ext2: fix sleeping in atomic bugs on error (bsc#1012628).
- platform/x86: gigabyte-wmi: add support for B550I Aorus Pro AX
(bsc#1012628).
- sparc64: fix pci_iounmap() when CONFIG_PCI is not set
(bsc#1012628).
- xen-netback: correct success/error reporting for the
SKB-with-fraglist case (bsc#1012628).
- net: mdio: introduce a shutdown method to mdio device drivers
(bsc#1012628).
- btrfs: fix mount failure due to past and transient device
flush error (bsc#1012628).
- btrfs: replace BUG_ON() in btrfs_csum_one_bio() with proper
error handling (bsc#1012628).
- nfsd: back channel stuck in SEQ4_STATUS_CB_PATH_DOWN
(bsc#1012628).
- platform/x86: touchscreen_dmi: Update info for the Chuwi Hi10
Plus (CWI527) tablet (bsc#1012628).
- platform/x86: touchscreen_dmi: Add info for the Chuwi HiBook
(CWI514) tablet (bsc#1012628).
- afs: Add missing vnode validation checks (bsc#1012628).
- spi: rockchip: handle zero length transfers without timing out
(bsc#1012628).
- commit 834dddd
- iwlwifi: Fix MODULE_FIRMWARE() for non-existing ucode version
(boo#1191417).
- commit 6597512
- Linux 5.14.10 (bsc#1012628).
- media: hantro: Fix check for single irq (bsc#1012628).
- media: cedrus: Fix SUNXI tile size calculation (bsc#1012628).
- media: s5p-jpeg: rename JPEG marker constants to prevent build
warnings (bsc#1012628).
- ASoC: fsl_sai: register platform component before registering
cpu dai (bsc#1012628).
- ASoC: fsl_esai: register platform component before registering
cpu dai (bsc#1012628).
- ASoC: fsl_micfil: register platform component before registering
cpu dai (bsc#1012628).
- ASoC: fsl_spdif: register platform component before registering
cpu dai (bsc#1012628).
- ASoC: fsl_xcvr: register platform component before registering
cpu dai (bsc#1012628).
- ASoC: mediatek: common: handle NULL case in suspend/resume
function (bsc#1012628).
- scsi: elx: efct: Fix void-pointer-to-enum-cast warning for
efc_nport_topology (bsc#1012628).
- ASoC: SOF: Fix DSP oops stack dump output contents
(bsc#1012628).
- ASoC: SOF: imx: imx8: Bar index is only valid for IRAM and
SRAM types (bsc#1012628).
- ASoC: SOF: imx: imx8m: Bar index is only valid for IRAM and
SRAM types (bsc#1012628).
- pinctrl: qcom: spmi-gpio: correct parent irqspec translation
(bsc#1012628).
- net/mlx4_en: Resolve bad operstate value (bsc#1012628).
- s390/qeth: Fix deadlock in remove_discipline (bsc#1012628).
- s390/qeth: fix deadlock during failing recovery (bsc#1012628).
- m68k: Update ->thread.esp0 before calling syscall_trace()
in ret_from_signal (bsc#1012628).
- NIOS2: fix kconfig unmet dependency warning for
SERIAL_CORE_CONSOLE (bsc#1012628).
- kasan: fix Kconfig check of CC_HAS_WORKING_NOSANITIZE_ADDRESS
(bsc#1012628).
- HID: amd_sfh: Fix potential NULL pointer dereference
(bsc#1012628).
- perf test: Fix DWARF unwind for optimized builds (bsc#1012628).
- perf iostat: Use system-wide mode if the target cpu_list is
unspecified (bsc#1012628).
- perf iostat: Fix Segmentation fault from NULL 'struct
perf_counts_values *' (bsc#1012628).
- watchdog/sb_watchdog: fix compilation problem due to
COMPILE_TEST (bsc#1012628).
- tty: Fix out-of-bound vmalloc access in imageblit (bsc#1012628).
- cpufreq: schedutil: Use kobject release() method to free
sugov_tunables (bsc#1012628).
- scsi: qla2xxx: Changes to support kdump kernel for NVMe BFS
(bsc#1012628).
- drm/amdgpu: adjust fence driver enable sequence (bsc#1012628).
- drm/amdgpu: avoid over-handle of fence driver fini in s3 test
(v2) (bsc#1012628).
- drm/amdgpu: stop scheduler when calling hw_fini (v2)
(bsc#1012628).
- cpufreq: schedutil: Destroy mutex before kobject_put() frees
the memory (bsc#1012628).
- scsi: ufs: ufs-pci: Fix Intel LKF link stability (bsc#1012628).
- ALSA: rawmidi: introduce SNDRV_RAWMIDI_IOCTL_USER_PVERSION
(bsc#1012628).
- ALSA: firewire-motu: fix truncated bytes in message tracepoints
(bsc#1012628).
- ALSA: hda/realtek: Quirks to enable speaker output for Lenovo
Legion 7i 15IMHG05, Yoga 7i 14ITL5/15ITL5, and 13s Gen2 laptops
(bsc#1012628).
- ACPI: NFIT: Use fallback node id when numa info in NFIT table
is incorrect (bsc#1012628).
- fs-verity: fix signed integer overflow with i_size near S64_MAX
(bsc#1012628).
- hwmon: (tmp421) handle I2C errors (bsc#1012628).
- hwmon: (w83793) Fix NULL pointer dereference by removing
unnecessary structure field (bsc#1012628).
- hwmon: (w83792d) Fix NULL pointer dereference by removing
unnecessary structure field (bsc#1012628).
- hwmon: (w83791d) Fix NULL pointer dereference by removing
unnecessary structure field (bsc#1012628).
- gpio: pca953x: do not ignore i2c errors (bsc#1012628).
- scsi: ufs: Fix illegal offset in UPIU event trace (bsc#1012628).
- mac80211: fix use-after-free in CCMP/GCMP RX (bsc#1012628).
- platform/x86/intel: hid: Add DMI switches allow list
(bsc#1012628).
- x86/kvmclock: Move this_cpu_pvti into kvmclock.h (bsc#1012628).
- ptp: Fix ptp_kvm_getcrosststamp issue for x86 ptp_kvm
(bsc#1012628).
- KVM: x86: Fix stack-out-of-bounds memory access from
ioapic_write_indirect() (bsc#1012628).
- KVM: x86: nSVM: don't copy virt_ext from vmcb12 (bsc#1012628).
- KVM: x86: Clear KVM's cached guest CR3 at RESET/INIT
(bsc#1012628).
- KVM: x86: Swap order of CPUID entry "index" vs. "significant
flag" checks (bsc#1012628).
- KVM: nVMX: Filter out all unsupported controls when eVMCS was
activated (bsc#1012628).
- KVM: SEV: Update svm_vm_copy_asid_from for SEV-ES (bsc#1012628).
- KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA
(bsc#1012628).
- KVM: SEV: Acquire vcpu mutex when updating VMSA (bsc#1012628).
- KVM: SEV: Allow some commands for mirror VM (bsc#1012628).
- KVM: SVM: fix missing sev_decommission in sev_receive_start
(bsc#1012628).
- KVM: nVMX: Fix nested bus lock VM exit (bsc#1012628).
- KVM: VMX: Fix a TSX_CTRL_CPUID_CLEAR field mask issue
(bsc#1012628).
- mmc: renesas_sdhi: fix regression with hard reset on old SDHIs
(bsc#1012628).
- media: ir_toy: prevent device from hanging during transmit
(bsc#1012628).
- RDMA/cma: Do not change route.addr.src_addr.ss_family
(bsc#1012628).
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing
more requests (bsc#1012628).
- nbd: use shifts rather than multiplies (bsc#1012628).
- drm/amd/display: initialize backlight_ramping_override to false
(bsc#1012628).
- drm/amd/display: Pass PCI deviceid into DC (bsc#1012628).
- drm/amd/display: Fix Display Flicker on embedded panels
(bsc#1012628).
- drm/amdgpu: force exit gfxoff on sdma resume for rmb s0ix
(bsc#1012628).
- drm/amdgpu: check tiling flags when creating FB on GFX8-
(bsc#1012628).
- drm/amdgpu: correct initial cp_hqd_quantum for gfx9
(bsc#1012628).
- interconnect: qcom: sdm660: Fix id of slv_cnoc_mnoc_cfg
(bsc#1012628).
- interconnect: qcom: sdm660: Correct NOC_QOS_PRIORITY shift
and mask (bsc#1012628).
- drm/i915/gvt: fix the usage of ww lock in gvt scheduler
(bsc#1012628).
- ipvs: check that ip_vs_conn_tab_bits is between 8 and 20
(bsc#1012628).
- bpf: Handle return value of BPF_PROG_TYPE_STRUCT_OPS prog
(bsc#1012628).
- IB/cma: Do not send IGMP leaves for sendonly Multicast groups
(bsc#1012628).
- RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure
(bsc#1012628).
- bpf, mips: Validate conditional branch offsets (bsc#1012628).
- hwmon: (mlxreg-fan) Return non-zero value when fan current
state is enforced from sysfs (bsc#1012628).
- RDMA/irdma: Skip CQP ring during a reset (bsc#1012628).
- RDMA/irdma: Validate number of CQ entries on create CQ
(bsc#1012628).
- RDMA/irdma: Report correct WC error when transport retry
counter is exceeded (bsc#1012628).
- RDMA/irdma: Report correct WC error when there are MW bind
errors (bsc#1012628).
- netfilter: nf_tables: unlink table before deleting it
(bsc#1012628).
- netfilter: log: work around missing softdep backend module
(bsc#1012628).
- Revert "mac80211: do not use low data rates for data frames
with no ack flag" (bsc#1012628).
- mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug
(bsc#1012628).
- mac80211: limit injected vht mcs/nss in
ieee80211_parse_tx_radiotap (bsc#1012628).
- mac80211: mesh: fix potentially unaligned access (bsc#1012628).
- mac80211-hwsim: fix late beacon hrtimer handling (bsc#1012628).
- driver core: fw_devlink: Add support for
FWNODE_FLAG_NEEDS_CHILD_BOUND_ON_ADD (bsc#1012628).
- net: mdiobus: Set FWNODE_FLAG_NEEDS_CHILD_BOUND_ON_ADD for
mdiobus parents (bsc#1012628).
- sctp: break out if skb_header_pointer returns NULL in
sctp_rcv_ootb (bsc#1012628).
- mptcp: don't return sockets in foreign netns (bsc#1012628).
- mptcp: allow changing the 'backup' bit when no sockets are open
(bsc#1012628).
- RDMA/hns: Work around broken constant propagation in gcc 8
(bsc#1012628).
- hwmon: (tmp421) report /PVLD condition as fault (bsc#1012628).
- hwmon: (tmp421) fix rounding for negative values (bsc#1012628).
- net: enetc: fix the incorrect clearing of IF_MODE bits
(bsc#1012628).
- net: ipv4: Fix rtnexthop len when RTA_FLOW is present
(bsc#1012628).
- smsc95xx: fix stalled rx after link change (bsc#1012628).
- drm/i915/request: fix early tracepoints (bsc#1012628).
- drm/i915: Remove warning from the rps worker (bsc#1012628).
- dsa: mv88e6xxx: 6161: Use chip wide MAX MTU (bsc#1012628).
- dsa: mv88e6xxx: Fix MTU definition (bsc#1012628).
- dsa: mv88e6xxx: Include tagger overhead when setting MTU for
DSA and CPU ports (bsc#1012628).
- e100: fix length calculation in e100_get_regs_len (bsc#1012628).
- e100: fix buffer overrun in e100_get_regs (bsc#1012628).
- RDMA/hfi1: Fix kernel pointer leak (bsc#1012628).
- RDMA/hns: Fix the size setting error when copying CQE in
clean_cq() (bsc#1012628).
- RDMA/hns: Add the check of the CQE size of the user space
(bsc#1012628).
- bpf: Exempt CAP_BPF from checks against bpf_jit_limit
(bsc#1012628).
- libbpf: Fix segfault in static linker for objects without BTF
(bsc#1012628).
- selftests, bpf: Fix makefile dependencies on libbpf
(bsc#1012628).
- selftests, bpf: test_lwt_ip_encap: Really disable rp_filter
(bsc#1012628).
- bpf, x86: Fix bpf mapping of atomic fetch implementation
(bsc#1012628).
- net: ks8851: fix link error (bsc#1012628).
- ionic: fix gathering of debug stats (bsc#1012628).
- Revert "block, bfq: honor already-setup queue merges"
(bsc#1012628).
- scsi: csiostor: Add module softdep on cxgb4 (bsc#1012628).
- ixgbe: Fix NULL pointer dereference in ixgbe_xdp_setup
(bsc#1012628).
- net: hns3: do not allow call hns3_nic_net_open repeatedly
(bsc#1012628).
- net: hns3: remove tc enable checking (bsc#1012628).
- net: hns3: don't rollback when destroy mqprio fail
(bsc#1012628).
- net: hns3: fix mixed flag HCLGE_FLAG_MQPRIO_ENABLE and
HCLGE_FLAG_DCB_ENABLE (bsc#1012628).
- net: hns3: fix show wrong state when add existing uc mac address
(bsc#1012628).
- net: hns3: reconstruct function hns3_self_test (bsc#1012628).
- net: hns3: fix always enable rx vlan filter problem after
selftest (bsc#1012628).
- net: hns3: disable firmware compatible features when uninstall
PF (bsc#1012628).
- net: phy: bcm7xxx: Fixed indirect MMD operations (bsc#1012628).
- net: sched: flower: protect fl_walk() with rcu (bsc#1012628).
- net: stmmac: fix EEE init issue when paired with EEE capable
PHYs (bsc#1012628).
- af_unix: fix races in sk_peer_pid and sk_peer_cred accesses
(bsc#1012628).
- objtool: Teach get_alt_entry() about more relocation types
(bsc#1012628).
- perf/x86/intel: Update event constraints for ICX (bsc#1012628).
- sched/fair: Add ancestors of unthrottled undecayed cfs_rq
(bsc#1012628).
- sched/fair: Null terminate buffer when updating tunable_scaling
(bsc#1012628).
- hwmon: (occ) Fix P10 VRM temp sensors (bsc#1012628).
- hwmon: (pmbus/mp2975) Add missed POUT attribute for page 1
mp2975 controller (bsc#1012628).
- kvm: fix objtool relocation warning (bsc#1012628).
- nvme: add command id quirk for apple controllers (bsc#1012628).
- elf: don't use MAP_FIXED_NOREPLACE for elf interpreter mappings
(bsc#1012628).
- driver core: fw_devlink: Improve handling of cyclic dependencies
(bsc#1012628).
- debugfs: debugfs_create_file_size(): use IS_ERR to check for
error (bsc#1012628).
- ipack: ipoctal: fix stack information leak (bsc#1012628).
- ipack: ipoctal: fix tty registration race (bsc#1012628).
- ipack: ipoctal: fix tty-registration error handling
(bsc#1012628).
- ipack: ipoctal: fix missing allocation-failure check
(bsc#1012628).
- ipack: ipoctal: fix module reference leak (bsc#1012628).
- ext4: fix loff_t overflow in ext4_max_bitmap_size()
(bsc#1012628).
- ext4: limit the number of blocks in one ADD_RANGE TLV
(bsc#1012628).
- ext4: fix reserved space counter leakage (bsc#1012628).
- ext4: add error checking to ext4_ext_replay_set_iblocks()
(bsc#1012628).
- ext4: fix potential infinite loop in ext4_dx_readdir()
(bsc#1012628).
- ext4: flush s_error_work before journal destroy in
ext4_fill_super (bsc#1012628).
- HID: u2fzero: ignore incomplete packets without data
(bsc#1012628).
- net: udp: annotate data race around udp_sk(sk)->corkflag
(bsc#1012628).
- NIOS2: setup.c: drop unused variable 'dram_start' (bsc#1012628).
- usb: hso: remove the bailout parameter (bsc#1012628).
- HID: betop: fix slab-out-of-bounds Write in betop_probe
(bsc#1012628).
- netfilter: ipset: Fix oversized kvmalloc() calls (bsc#1012628).
- mm: don't allow oversized kvmalloc() calls (bsc#1012628).
- HID: usbhid: free raw_report buffers in usbhid_stop
(bsc#1012628).
- crypto: aesni - xts_crypt() return if walk.nbytes is 0
(bsc#1012628).
- KVM: x86: Handle SRCU initialization failure during page track
init (bsc#1012628).
- netfilter: conntrack: serialize hash resizes and cleanups
(bsc#1012628).
- netfilter: nf_tables: Fix oversized kvmalloc() calls
(bsc#1012628).
- drivers: net: mhi: fix error path in mhi_net_newlink
(bsc#1012628).
- objtool: print out the symbol type when complaining about it
(bsc#1012628).
- HID: amd_sfh: Fix potential NULL pointer dereference - take 2
(bsc#1012628).
- commit 7c980ba
- ALSA: hda: intel: Allow repeatedly probing on codec
configuration errors (bsc#1190801).
- commit 924f4be
- rpm: use _rpmmacrodir (boo#1191384)
- commit e350c14
==== kfilemetadata5 ====
Version update (5.86.0 -> 5.87.0)
Subpackages: kfilemetadata5-lang
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kgamma5 ====
Version update (5.22.5 -> 5.23.1)
Subpackages: kgamma5-lang
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
==== kgeography ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kget ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kglobalaccel ====
Version update (5.86.0 -> 5.87.0)
Subpackages: kglobalaccel5 libKF5GlobalAccel5 libKF5GlobalAccel5-lang libKF5GlobalAccelPrivate5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Remove obsolete LGPL-2.0-only license text
* Relicense remaining LGPL-2.0-only file
* Remove unneeded header
==== kgoldrunner ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kguiaddons ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Use imported target for X11 libs
* Add explicit option for controlling X11 support
* Relicense remaining files away from LGPL-2.0-only
* Add missing static dependency to Config.cmake.in
==== khangman ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== khelpcenter5 ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kholidays ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5Holidays5 libKF5Holidays5-lang
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Update Canadian holidays
* Update README.md
==== khotkeys5 ====
Version update (5.22.5 -> 5.23.1)
Subpackages: khotkeys5-lang
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Make unused variables anonymous or Q_UNUSED
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* Remove autotests
* replace klineedit
* helper: fix warning from .ui file
* app: the kded library needn't link directly to kdelibs4 or xtest either
* testing: the standalone (test)app needs no kdelibs4 or XTest
* helpers: tidy up
* lib: replace use of KApplication
* KCM: use KF5-era UI-wrangling
* CMake: fix up FindKF5 bits
* Arts: one more ARTS-related file (was not hooked to build anymore)
* Arts: fix build after ARTS-removal
* Arts: remove ARTS-related files
* lib: replace deprecated methods
* Use version-less qt DBus macros
==== khtml ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5KHtml5 libKF5KHtml5-lang
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== ki18n ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5I18n5 libKF5I18n5-lang
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kiconthemes ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5IconThemes5 libKF5IconThemes5-lang
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kidentitymanagement ====
Version update (21.08.1 -> 21.08.2)
Subpackages: kidentitymanagement-lang libKF5IdentityManagement5
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kidletime ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kig ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kimageformats ====
Version update (5.86.0 -> 5.87.0)
Subpackages: kimageformats-eps
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* avif: performance and quality improvements
==== kimap ====
Version update (21.08.1 -> 21.08.2)
Subpackages: kimap-lang libKF5IMAP5
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- Changes since 21.08.1:
* Disconnect rather than reconnect when not ignoring SSL errors
==== kinfocenter5 ====
Version update (5.22.5 -> 5.23.1)
Subpackages: kinfocenter5-lang
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* fix up about-distro exec
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here
- Drop patches, now upstream:
* 0001-Handle-libpci-errors-gracefully.patch
* 0002-Enable-the-PCI-module-everywhere.patch
- Drop patch, now longer necessary:
* plasma-session-name.patch
==== kinit ====
Version update (5.86.0 -> 5.87.0)
Subpackages: kinit-lang
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Fix KDE shutdown bug
==== kio ====
Version update (5.86.0 -> 5.87.0)
Subpackages: kio-core kio-lang
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Too many changes since 5.86.0, only listing bugfixes:
* KUrlCompletion blocks autosuggestion from happening if the
input is an exact directory path. (kde#420966)
* KDirOperator: provide an option to enable showing open-with item actions (kde#440748)
* Fix permissions when copying files (kde#404777)
* KFileItem: refresh() shouldn't discard ACL attributes (kde#299155)
* KPropertiesDialog: show text label with item name for readonly items too (kde#442237)
==== kio-extras5 ====
Version update (21.08.1 -> 21.08.2)
Subpackages: libkioarchive5
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- Changes since 21.08.1:
* Fix kio-mtp with libmtp 1.1.19
==== kio_audiocd ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kipi-plugins ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kirigami2 ====
Version update (5.86.0 -> 5.87.0)
Subpackages: kirigami2-lang libKF5Kirigami2-5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Too many changes since 5.86.0, only listing bugfixes:
* PageRow: Do not async load the global header (kde#442660)
==== kiriki ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kitemmodels ====
Version update (5.86.0 -> 5.87.0)
Subpackages: kitemmodels-imports libKF5ItemModels5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kitemviews ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5ItemViews5 libKF5ItemViews5-lang
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Relicense files from LGPL-2.0-only to LGPL-2.0-or-later
==== kiten ====
Version update (21.08.1 -> 21.08.2)
Subpackages: fonts-KanjiStrokeOrders
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kitinerary ====
Version update (21.08.1 -> 21.08.2)
Subpackages: libKPimItinerary5 libKPimItinerary5-lang
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- Changes since 21.08.1:
* Correctly decode HTML MIME nodes which specify codecs in HTML and MIME
* Handle US date formats in Accor hotel reservations
* Add extractor for onepagebooking
* Add extractor for Feratel cards
* Fix extracting English language SNCF tickets
==== kjobwidgets ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5JobWidgets5 libKF5JobWidgets5-lang
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Add CI configuration file
==== kjs ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5JS5 libKF5JSApi5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kjumpingcube ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kldap ====
Version update (21.08.1 -> 21.08.2)
Subpackages: libKF5Ldap5
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kleopatra ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- Changes since 21.08.1:
* Ask GnuPG for the correct path for the uiserver socket (kde#441957)
* Fix duplicate release versions
* Fix version number
* Use correct name for third number of RELEASE_SERVICE_VERSION
==== klines ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kmag ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kmahjongg ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kmail ====
Version update (21.08.1 -> 21.08.2)
Subpackages: kmail-application-icons ktnef
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kmail-account-wizard ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kmailtransport ====
Version update (21.08.1 -> 21.08.2)
Subpackages: libKF5MailTransport5 libKF5MailTransportAkonadi5
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kmbox ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kmenuedit5 ====
Version update (5.22.5 -> 5.23.1)
Subpackages: kmenuedit5-lang
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* mimeData signature was changed in qt6 (scripted)
* Add build support + clazy
==== kmime ====
Version update (21.08.1 -> 21.08.2)
Subpackages: kmime-lang libKF5Mime5
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kmines ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kmousetool ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kmouth ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kmplot ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== knavalbattle ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== knetwalk ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== knewstuff ====
Version update (5.86.0 -> 5.87.0)
Subpackages: knewstuff-imports libKF5NewStuff5 libKF5NewStuff5-lang libKF5NewStuffCore5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Too many changes since 5.86.0, only listing bugfixes:
* Fix crash in DownloadWidget (kde#443025)
- Drop upstream patches:
* 0001-Include-a-user-agent-on-KNS-requests.patch
* fix-crash.patch
==== knotes ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== knotifications ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5Notifications5 libKF5Notifications5-lang
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Add support for static builds
* Fix HIG URL
* Correct the version of Phonon that we use
* Remove non-KDE project
==== knotifyconfig ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5NotifyConfig5 libKF5NotifyConfig5-lang
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kolf ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kollision ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kolourpaint ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kompare ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== konquest ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== konsole ====
Version update (21.08.1 -> 21.08.2)
Subpackages: konsole-part konsole-part-lang
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- Changes since 21.08.1:
* Update copyright year to 2021 (kde#442016)
* improve session closing behavior (kde#401898)
* Hide the Plugins menu if no plugins were loaded (kde#441199)
* Fix the maximum port number in the SSH Manager plugin (kde#441889)
* The default navigation method should be TabbedNavigation
* Don't resize window when switching virtual desktops in OpenBox (kde#441610)
- Drop upstream patch:
* 0001-Don-t-resize-window-when-switching-virtual-desktops-.patch
==== kontact ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kontactinterface ====
Version update (21.08.1 -> 21.08.2)
Subpackages: kontactinterface-lang libKF5KontactInterface5
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== konversation ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kopete ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== korganizer ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- Changes since 21.08.1:
* Remove duplicated workDays() function
* Update the Search dialog when items in the calendar change
* Separate the Search dialog and Event List configurations
==== kpackage ====
Version update (5.86.0 -> 5.87.0)
Subpackages: kpackage-lang
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kparts ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5Parts5 libKF5Parts5-lang
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kpat ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kpeople5 ====
Version update (5.86.0 -> 5.87.0)
Subpackages: kpeople5-lang
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kpimtextedit ====
Version update (21.08.1 -> 21.08.2)
Subpackages: libKF5PimTextEdit5
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- Changes since 21.08.1:
* Fix text color
* Fix Bug 442416 - Text highlight while composing or replaying the message (kde#442416)
==== kpkpass ====
Version update (21.08.1 -> 21.08.2)
Subpackages: libKPimPkPass5
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kplotting ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kpty ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5Pty5 libKF5Pty5-lang
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kqtquickcharts ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kquickcharts ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== krdc ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kreversi ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== krfb ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kross ====
Version update (5.86.0 -> 5.87.0)
Subpackages: kross-lang
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kruler ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kscreen5 ====
Version update (5.22.5 -> 5.23.1)
Subpackages: kscreen5-lang kscreen5-plasmoid
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
* Fix algorithm for common sizes in Generator::cloneScreens (kde#442822)
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* fix all the new settings
* kcm: Use more conventional parent/background for OverlaySheet (kde#442563)
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Remove obsolete COPYING files
* Improve formatting of license headers
* Clarify sponsoring note
* Convert license headers to SPDX
* Add keywords to display KCM to improve search
* Do not bind "keep" to enter key
* support rgb range setting
* Allow to refresh view when modes change
* feat(kcm): add revert timer
* Import QtQuick 2.15 to enable Connection's items function onFoo Syntax
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* [kcm] Correct punctuation of "only when in tablet mode" string
* [kcm] Sort output's refresh rates descending (kde#439515)
* plasmoid: Use K_PLUGIN_CLASS_WITH_JSON directly
* Update IRC network name in CONTRIBUTING.md
* Use version-less qt DBus macros
* [kcm] Show on mobile
* [kcm] Align right edges of all comboboxes
==== kscreenlocker ====
Version update (5.22.5 -> 5.23.1)
Subpackages: kscreenlocker-lang libKScreenLocker5
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
* Fix sleep and hibernate actions
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Add keywords to KScreenLocker to improve search
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* Avoid creating windows for placeholder screens. (kde#439096)
* Simplify multi-screen handling
* Move DBus logic back into the greeter
* Use imported targets for X11 libs
* kcheckpass: Fix incorrect kevent() argument
* Handle ConvPutAuthAbort as an authentication failure (kde#438099)
* Make it compile with last ecm
* Remind people to log out of the VT after they unlock the session (kde#410772)
* --warning: use non-deprecated API
* Properly define Q_ENUM()
* [kcm] Fix icon name in metadata.desktop
* Use version-less qt DBus macros
* Show kcm on mobile
* Remove plasmashell protocol leftovers
* Fix logind test
==== kservice ====
Version update (5.86.0 -> 5.87.0)
Subpackages: kservice-lang
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Deprecate KAutostart class
* Deprecate KService::parentApp
* Deprecate KService::pluginKeyword property
==== kshisen ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== ksirk ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== ksmtp ====
Version update (21.08.1 -> 21.08.2)
Subpackages: ksmtp-lang libKPimSMTP5
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- Changes since 21.08.1:
* Emit an error rather than reconnect when SSL errors are not ignored (kde#423424)
==== kspaceduel ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== ksquares ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== ksshaskpass5 ====
Version update (5.22.5 -> 5.23.1)
Subpackages: ksshaskpass5-lang
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
==== ksudoku ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== ksystemlog ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== ksystemstats5 ====
Version update (5.22.5 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* Fix ksystemstatstest failure
* Add description for the Sensors package
* Move find_package line
* Fix missing "Hardware Sensors" on Linux (kde#442528)
* Read extra amd gpu sensors
* Correct discoverSensors chip detection (kde#442042)
* Initialize some more pointer members to nullptr
- Drop patches, now upstream:
* 0001-Initialize-some-more-pointer-members-to-nullptr.patch
* 0001-Fix-ksystemstatstest-failure.patch
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* [plugins/gpu] Initialise properties (kde#442023)
* Discover more hardware gpu sensors (kde#438318)
* Use sensors to read amd gpu temperature
* Use SensorFeatureSensor in CPU plugin
* Use SensorsFeatureSensor from libksysguard
* Make libsensors required on Linux
* Do not dereference iterator that has been invalidated
* Only add a new VolumeObject if there's no other one with the same mounting point (kde#440477)
* Add maximum for total GPU usage (kde#441148)
* viewer: expand README with usage examples
* viewer: drop the "rolling" display, expand diagnostics
* daemon: log successfully loaded plugins, too
* freebsd-cpu: fix CPU load data retrieval
* freebsd-cpu: fix sysctl name of temperature sensor
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* Fix handling of IPV6 addresses (kde#436296)
* gpu: Only scan pci devices
* Add load averages sensors
* Don't crash if there's no input subfeature (kde#439615)
* Only add "All GPUs" sensors when there is at least one GPU with statistics (kde#436770)
* Use 500ms update rate for network traffic sensors in NetworkManager backend
* Filter duplicate provider names
* Simplify plugin loading
* Use version-less qt DBus macros
* Init lib sensors centrally in the daemon (kde#437523)
* Update .gitignore
- Add patch to fix autotest failure:
* 0001-Fix-ksystemstatstest-failure.patch
- Add patch to fix crash on startup:
* 0001-Initialize-some-more-pointer-members-to-nullptr.patch
==== kteatime ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== ktexteditor ====
Version update (5.86.0 -> 5.87.0)
Subpackages: ktexteditor-lang
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* The user is not selecting as soon as we clearSelection
* fix missing i18n (kde#442071)
==== ktextwidgets ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5TextWidgets5 libKF5TextWidgets5-lang
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Handle RTL text selection the same way as Qt (kde#397922)
==== ktimer ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== ktnef ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== ktouch ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kturtle ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kubrick ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kunitconversion ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5UnitConversion5 libKF5UnitConversion5-lang
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kwallet ====
Version update (5.86.0 -> 5.87.0)
Subpackages: kwallet-tools kwallet-tools-lang kwalletd5 kwalletd5-lang libKF5Wallet5 libkwalletbackend5-5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kwalletmanager5 ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kwayland ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* KWayland depends on libraries/plasma-wayland-protocols
==== kwayland-integration ====
Version update (5.22.5 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
* fix: Kicker's sub-menus are covered up by Plasma panels (kde#378694)
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* fix a dirty shadows (kde#439408)
* Implement setting frost
* Add pre-commit hook for clang-format
* Add .git-blame-ignore-revs file
* Run clang-format
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* Guard use of activation proxy (kde#440448)
* Fix compile with last ecm
* Fix build with GCC
* Be more explicit about types, hopefully fix CI builds
* Improve the behaviour when we are requesting without a window
* Also link against xkb and fix build
* Provide an implementation for the xdg_activation_v1 API
==== kwayland-server ====
Version update (5.22.5 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* Automatically close fds for inert resources (kde#438097)
* outputdevice: add missing done events
* Send kde_output_device_v1.current_mode to the right resource
* Fix texture format handling for Nvidia driver
* fix rgb range sending (kde#442548)
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here
==== kwidgetsaddons ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5WidgetsAddons5 libKF5WidgetsAddons5-lang
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Make lupdate happier
* KCharSelect: Added option to show all blocks found in the data file (in the section menu).
* KFontChooser: the widget shouldn't become wider when toggling show fixed only
* KMessageDialog: disconnect default buttonbox signals as we emit done() manually
==== kwin5 ====
Version update (5.22.5 -> 5.23.1)
Subpackages: kwin5-lang
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
* platforms/drm: fix disabled outputs with legacy drivers
* platforms/drm: reverse output creation order
* x11: Properly unredirect windows if compositing is not possible (kde#443953)
* Restore old behavior of Workspace::clientArea(clientOpt, Toplevel) (kde#443787)
* Do not ask for decoration settings without guarding
* scripting: Guard against nullptr m_client in WindowThumbnailItem (kde#443765)
* Properly update parent item's bounding rect when moving item (kde#443756)
* Fix AbstractClient::adjustedSize() for wayland windows with no committed buffer (kde#443705)
* Set KDE_COMPILERSETTINGS_LEVEL
* pipewire: Fix downloading software-rotated textures
* [wayland] fix crash on startup with lv3:ralt_alt XKB option (kde#440027)
- Drop patches, now upstream:
* kde443953.patch
- Add patch to fix black screen when compositing fails to initialize
(kde#443953):
* kde443953.patch
- Make pipewire-devel BR versioned
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Too many changes to list here
- Drop patches, now upstream:
* 0001-Fix-build-on-32bit-platforms.patch
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here
- Adjust 0001-Export-consistent-hostname-as-XAUTHLOCALHOSTNAME.patch
- Add patch to fix build on 32bit:
* 0001-Fix-build-on-32bit-platforms.patch
==== kwindowsystem ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5WindowSystem5 libKF5WindowSystem5-lang
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== kwordquiz ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== kwrited5 ====
Version update (5.22.5 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
==== kxmlgui ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5XmlGui5 libKF5XmlGui5-lang
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Add missing Q_INIT_RESOURCE(kxmlgui)
* Replace "Libraries" by "Components" to show KAboutComponents info
==== layer-shell-qt ====
Version update (5.22.5 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Fix a crash when creating views on the placeholder screen
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* Fix compile with last ecm.
* Mark .gitignore file as non-copyrightable
==== libHX ====
Version update (3.26 -> 4.2)
- Update to release 4.2
* string: New functions ``HX_strtod_unit``, ``HX_strtoull_unit``,
``HX_unit_size``, ``HX_unit_size_cu`` for converting between
sizes and human-readable sizes like 1457664 <-> "1.45M"/"1.39M".
- Update to release 4.1
* io: fix a use-after-free in conjunction with HX_realpath
- Update to release 4.0.1
* lib: add ``HX_slurp_fd``, ``HX_slurp_file``
* proc: add ``HXproc_switch_user``
* proc: add ``HXproc_top_fd``
* socket: add ``HX_socket_from_env``
* opt: add ``HXOPT_KEEP_ARGV`` flag
==== libKF5ModemManagerQt ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Introduce countryCode Modem3gpp API
==== libKF5NetworkManagerQt ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== libaom ====
Version update (3.1.2 -> 3.2.0)
- Update to version 3.2.0:
* This release includes compression efficiency and perceptual
quality improvements, speedup and memory optimizations, as well
as some new features.
* New Features:
+ Introduced speeds 7, 8, and 9 for all intra mode.
+ Introduced speed 10 for real time mode.
+ Introduced an API that allows external partition decisions.
+ SVC: added support for compound prediction.
+ SVC: added support for fixed SVC modes.
* Compression Efficiency Improvements:
+ Intra-mode search improvement.
+ Improved real time (RT) mode BDrate savings by ~5% (RT speed
5) and ~12% (RT speed 6). The improvement was measured on the
video conference set.
+ Improved real time mode for nonrd path (speed 7, 8, 9):
BDrate gains of ~3-5%.
+ Rate control and RD adjustments based on ML research in VP9.
Gains of ~0.5-1.0% for HD.
* Perceptual Quality Improvements:
+ Added a new mode --deltaq-mode=3 to improve perceptual
quality based on a differential contrast model for still
images.
+ Added a new mode ?deltaq-mode=4 to improve perceptual quality
based on user rated cq_level data set for still images.
+ Weighting of some intra mode and partition size choices to
better manage and retain texture.
* Speedup and Memory Optimizations:
+ Further improved 2-pass good quality encoder speed:
. Speed 2 speedup: 18%
. Speed 3 speedup: 22%
. Speed 4 speedup: 37%
. Speed 5 speedup: 30%
. Speed 6 speedup: 20%
+ Optimized the real time encoder (measured on the video
conference set):
. RT speed 5 speedup: 110%
. RT speed 6 speedup: 77%
* Bug Fixes
+ Issue 3069: Fix one-pass mode keyframe placement off-by-one
error.
+ Issue 3156: Fix a bug in av1_quantize_lp AVX2 optimization.
- Drop libaom-CVE-2021-30475.patch: Fixed upstream.
- Remove changesgenerate option from _service file, use data from
CHANGELOG to fill .changes instead as it it much nicer and human
readable than just a list of commit messages.
- fix service data
- Update to version 3.1.3:
* Update CHANGELOG for v3.1.3-rc2
* Detect chroma subsampling more directly
* Detect chroma subsampling more directly
* image2yuvconfig() should calculate uv_crop_width
* aom/aom_encoder.h: remove configure option reference
* aom_encoder.h: fix rc_overshoot_pct range
* Update AUTHORS,CHANGELOG,CMakeLists.txt for v3.1.3
* aom_install: don't exclude msvc from install
* aom_install: use relpath for install
* aom_install: Install lib dlls to bindir
==== libapparmor ====
- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)
==== libcap ====
Version update (2.51 -> 2.59)
- update to 2.59:
* Fixed a potential libcap memory leak by adding a destructor
* Major improvement is that there is a path for Linux-PAM compliant
applications to support setting Ambient vector Capabilities via pam_cap.so now
* Added libcap cap_proc_root() API function
* Added color support to captree
* Fixed contrib/sucap/su to correctly handle the Inheritable flag
* capsh enhancements
* getcap -r / now generates readable output
* The shared library objects: pam_cap.so, libcap.so and libpsx.so, are all now
runnable as standalone binaries
* The module pam_cap.so now contains support for a default=<IAB> module argument
* Enhanced capsh --suggest to also compare against the capability value names
and not just their descriptions
* Added capsh --current support
* Added a contrib/sucap/su.c pure-capabilities PAM implementation of su
* Fix for a corner case infinite loop handling long strings
* Added libcap cap_iab_compare() and cap_iab_get_pid() APIs
* Added a Go utility, captree, to display the process (and thread) graph along with
the POSIX.1e and IAB capabilities of each PID{TID} tree.
==== libcdio ====
Subpackages: libcdio19 libiso9660-11
- Bump cdiopp_name libcdio++0 to libcdio++1, this was missed when
it was bumped by upstream. Followup change in baselibs.conf to.
- Split out new subpackage libiso9660++0, add needed Requires and
entry in baselibs.conf.
==== libdlm ====
Version update (4.0.9 -> 4.1.0)
Subpackages: libdlm3
- Update to v4.1.0+ (bsc#1191734)
* include some fixes/enhancements upstream patches based on 4.1.0 tag
+ bug-1191734_0001-libdlm-add-stdint.h-to-api-header.patch
+ bug-1191734_0002-dlm_controld-create-var-parent-directories.patch
+ bug-1191734_0003-stonith_helper-fix-build.patch
+ bug-1191734_0004-plock-move-clear-waiter-to-debug-info.patch
+ bug-1191734_0005-treewide-try-to-resolve-symbols-at-linking-time.patch
+ bug-1191734_0006-dlm_controld-add-version-check-for-libquorum.patch
+ bug-1191734_0007-dlm_tool-man-add-command-joinleave-USAGE.patch
+ bug-1191734_0008-man-add-reload_config-in-dlm_tool-dlm.conf.patch
+ bug-1191734_0009-add-new-dlm_tool-command-reload_config.patch
+ bug-1191734_0010-dlm_tool-man-add-new-command-set_config.patch
+ bug-1191734_0011-dlm_tool-dlm_controld-add-new-feature-set_config.patch
+ bug-1191734_0012-fix-some-minor-bugs.patch
+ bug-1191734_0013-dlm_controld-fix-string-copies.patch
+ bug-1191734_0014-man-page-updates.patch
* patch for compatible with corosync-2.4.5+
+ bug-1191734_0015-Revert-dlm_controld-add-version-check-for-libquorum.patch
+ bug-1191734_0016-Revert-dlm_controld-use-new-quorum-api-to-detect-mis.patch
* drop 2 patches which are already included in upstream code
- cluster-ringid-seq.patch
- sysmacros.patch
* change name and modify patch for code changed
- dlm_controld-add-note-that-the-dlm-file-is-not-creat.patch
+ 0004-man-dlm.conf-add-note-that-the-file-is-not-creat.patch
* change libdlm.spec to seperate upsteam patch and suse special patch
==== libglvnd ====
- libglvnd.rpmlintrc
* workaround for future buildcheck (boo#1191763)
==== libgphoto2 ====
- split out libgphoto2_port for now to meet new shared library policy
requirements. bsc#1191764
==== libgravatar ====
Version update (21.08.1 -> 21.08.2)
Subpackages: libKF5Gravatar5
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== libinput ====
Version update (1.19.1 -> 1.19.2)
Subpackages: libinput-udev libinput10
- Update to release 1.19.2:
* quirks: add quirk for GPD Win Max
* evdev: disable button scroll timeout for extra mouse buttons
* evdev: avoid usage of bogus BTN_FORWARD name
* gestures: avoid processing the last hold and
motion event twice
* quirks: Add quirk for StarLabs clickpads with two
phyisical buttons
* quirks: Update dmi for StarBook Mk V
* quirks: relax DMI modalias match for Purism Librem 14v1
==== libkcddb ====
Version update (21.08.1 -> 21.08.2)
Subpackages: libKF5Cddb5
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== libkcompactdisc ====
Version update (21.08.1 -> 21.08.2)
Subpackages: libKF5CompactDisc5 libkcompactdisc-lang
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== libkdcraw ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== libkdecoration2 ====
Version update (5.22.5 -> 5.23.1)
Subpackages: libkdecorations2-5 libkdecorations2-5-lang
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* Add kdecoration to plasma group for documentation purpose
* Build KDecoration with -DQT_NO_KEYWORDS
* Replace emit with Q_EMIT
* Introduce Decoration::damaged signal
==== libkdegames ====
Version update (21.08.1 -> 21.08.2)
Subpackages: kdegames-carddecks-default libkf5kdegames6
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== libkdepim ====
Version update (21.08.1 -> 21.08.2)
Subpackages: libKF5Libkdepim5
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== libkeduvocdocument ====
Version update (21.08.1 -> 21.08.2)
Subpackages: libKEduVocDocument5 libkeduvocdocument-lang
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== libkexiv2 ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== libkgapi ====
Version update (21.08.1 -> 21.08.2)
Subpackages: libKPimGAPICalendar5 libKPimGAPIContacts5 libKPimGAPICore5 libKPimGAPITasks5 libkgapi-lang sasl2-kdexoauth2
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== libkipi ====
Version update (21.08.1 -> 21.08.2)
Subpackages: libKF5Kipi32_0_0 libkipi-data
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== libkleo ====
Version update (21.08.1 -> 21.08.2)
Subpackages: libKF5Libkleo5
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- Changes since 21.08.1:
* src/CMakeLists.txt - New fix: Add Boost::headers to link libraries
* Add Boost::headers to link libraries
==== libkmahjongg ====
Version update (21.08.1 -> 21.08.2)
Subpackages: libKF5KMahjongglib5
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== libkomparediff2 ====
Version update (21.08.1 -> 21.08.2)
Subpackages: libkomparediff2-5 libkomparediff2-lang
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== libksane ====
Version update (21.08.1 -> 21.08.2)
Subpackages: libKF5Sane5 libksane-lang
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- Changes since 21.08.1:
* set initial values for the scan thread
* Fix multi page detection when 'source' is const
==== libkscreen2 ====
Version update (5.22.5 -> 5.23.1)
Subpackages: libKF5Screen7 libkscreen2-plugin
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* Fix autorotate when "only in tablet mode" is selected (kde#428626)
* fix all the new settings (kde#442520)
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* wayland: Fix output hotplugging
* wayland: Fix output transforms
* add rgb range setting
* Add support for plasma wayland protocol kde_output_device_v2
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* Natural sort the outputs modes in kscreen-doctor
* Use qEnvironmentVariable() with a default instead of qgetenv()
* dpms: Remove boilerplatey code
* dpms: Do not hardcode the wayland socket
* Update IRC network name in CONTRIBUTING.md
* Use version-less qt DBus macros
* We depend against 5.82
* Use the same wayland connection to fetch screen information
==== libksieve ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== libksysguard5 ====
Version update (5.22.5 -> 5.23.1)
Subpackages: ksysguardsystemstats-data libKSysGuardSystemStats1 libksysguard5-imports libksysguard5-lang
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* Add Plasma System Monitor to "Tools" menu
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here
==== libktorrent ====
Version update (21.08.1 -> 21.08.2)
Subpackages: libKF5Torrent6 libktorrent-lang
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== libqb ====
Version update (2.0.2+20201203.def947e -> 2.0.3+20210303.404adbc)
- Update to version 2.0.3+20210303.404adbc (v2.0.3):
- syslog: Add a message-id parameter for messages (gh#ClusterLabs/libqb#433)
- timers: Add some locking (gh#ClusterLabs/libqb#436)
- ipcc: Have a few goes at tidying up after a dead server (gh#ClusterLabs/libqb#434)
- strlcpy: Check for maxlen underflow (gh#ClusterLabs/libqb#432)
- doxygen2man: fix printing of lines starting with '.' (gh#ClusterLabs/libqb#431)
- doxygen2man: ignore all-whitespace brief descriptions (gh#ClusterLabs/libqb#430)
==== libqt5-qttranslations ====
Version update (5.15.2+kde20 -> 5.15.2+kde22)
- Update to version 5.15.2+kde22:
* fix pt_BR meta catalog
* rename (outdated) qt_pt.ts => qt_pt_PT.ts
==== libreoffice ====
Version update (7.1.5.2 -> 7.2.2.2)
Subpackages: libreoffice-base libreoffice-calc libreoffice-draw libreoffice-filters-optional libreoffice-gnome libreoffice-gtk3 libreoffice-icon-themes libreoffice-impress libreoffice-l10n-en libreoffice-mailmerge libreoffice-math libreoffice-pyuno libreoffice-qt5 libreoffice-writer libreofficekit
- Update to 7.2.2.2
- Update to 7.2.2.1
- Refresh pld-skia-patches.patch
- Fix bsc#1189813: LO-L3: Shadow effect for tables in PPTX partly incorrect
* bsc1189813.patch
- Add vendored poppler to use for all codestreams except Tumbleweed.
- Use vendored boost for all codestreams except Tumbleweed.
Update boost vendored version.
- Update to 7.2.1.2:
* LO minor release
- Added patch:
* pld-skia-patches.patch
* skia-freetype2.11.patch
==== librsvg ====
Version update (2.52.0 -> 2.52.2)
Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2 rsvg-thumbnailer typelib-1_0-Rsvg-2_0
- Update to version 2.52.2:
+ New features:
- rsvg-convert now supports generating multi-page PDFs in a
sensible way.
- With one SVG document per page, each page with the SVG's
natural size:
- rsvg-convert --format=pdf -o out.pdf a.svg b.svg c.svg
- With all pages sized as portrait US Letter, and each SVG
scaled to fit so that there is a 1in margin around each page:
rsvg-convert --format=pdf -o out.pdf \
- -page-width=8.5in --page-height=11in \
- -width=6.5in --height=8.5in --keep-aspect-ratio \
- -top=1in --left=1in a.svg b.svg c.svg
Please see the man page for details.
- Support <a> elements inside <text>. Also, support the CSS
:link pseudo-class for matching against links.
- Support the CSS :lang() pseudo-class for matching against an
element's xml:lang attribute.
- Support the mask-type property from SVG2.
+ Bugs fixed:
- Don't panic when a shorthand property is set to inherit.
- Fix regression with the viewport size of interior <svg>
elements.
- Allow length units to be case-insensitive, per SVG2.
+ Documentation:
- There is now a FEATURES.md in the repository, where you can
see all the elements, attributes, and properties that librsvg
supports. We will be adding detail to this gradually.
- For developers, there is now devel-docs/adding-a-property.md
with a tutorial on how to add support for new CSS properties.
- Update to version 2.52.1:
+ Fix ordering of tspan inside text elements for right-to-left
languages.
+ Fix text-anchor positioning for right-to-left languages.
+ Fix regression in computing sizes when an SVG has only one of
width/height and a viewBox.
+ Spec compliance - the writing-mode property applies only to
text elements, no to individual tspan elements.
+ Fix build on big-endian platforms.
+ Clarify documentation for the rsvg_handle_write() /
rsvg_handle_close() deprecated APIs.
==== libsamplerate ====
Version update (0.2.1 -> 0.2.2)
- update to 0.2.2:
* Fix CMake overlinking for examples (#146)
* Switch to GCC's visibility for hiding more implementation details
* Check GNU ld instead of gcc for exported symbols control logic in configure.ac
* Disable static builds using Autotools by default.
* ABI version incompatibility between Autotools and CMake build on Apple platforms.
* Fixes and improvements for CMake build system.
* Fixes and improvements for Autotools build system.
* Switch to .xz over .bz2 for release tarballs.
* Minor bug fixes and updates.
==== libstorage-ng ====
Version update (4.4.43 -> 4.4.51)
Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1
- Translated using Weblate (Czech) (bsc#1149754)
- 4.4.51
- merge gh#openSUSE/libstorage-ng#840
- BIOS RAIDs can also not be removed
- 4.4.50
- Translated using Weblate (Japanese) (bsc#1149754)
- 4.4.49
- merge gh#openSUSE/libstorage-ng#839
- allow to create partitions with any number
- coding style
- 4.4.48
- merge gh#openSUSE/libstorage-ng#838
- Use dev name in fstab for LUKS devices (jsc#SLE-20416, bsc#1181196)
- 4.4.47
- Translated using Weblate (Slovak) (bsc#1149754)
- 4.4.46
- merge gh#openSUSE/libstorage-ng#837
- simplified parted flag handling
- added partition id for 'linux-home'
- 4.4.45
- merge gh#openSUSE/libstorage-ng#836
- added non-const versions of several existing functions
- added detect_remove_info()
- 4.4.44
==== libteam ====
- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
* harden_teamd@.service.patch
==== liburing ====
Version update (2.0 -> 2.1)
- update to 2.1:
* Ignore spurious fadvise/madvise failures
* build: add -D_GNU_SOURCE to all CPPFLAGS/CFLAGS.
* man: clean up spelling
* man/io_uring_enter.2: add notes about direct open/accept
* io_uring.h: sync with 5.15 kernel
* Fix IORING_REGISTER_IOWQ_MAX_WORKERS name
* man: document new register/update API
* liburing: add helpers for direct open/accept
* liburing.h: correct max_worker name
* Change IORING_REGISTER_IOWQ_MAX_UNBOUND_WORKERS
* src/syscall.h: get rid of useless externs
* man/io_uring_enter.2: document IORING_ENTER_EXT_ARG
* Add io_uring_register_iowq_max_unbound() helper
* Get rid of useless 'extern' on function declarations in liburing.h
* Add (UN)REGISTER_IOWQ_AFF helpers
* man/io_uring_register.2: note when MAX_UNBOUND became available
* man/io_uring_register.2: add missing punctuation
* man/io_uring_register.2: document IORING_REGISTER_IOWQ_MAX_UNBOUND
* man/io_uring_enter.2: add IORING_OP_TIMEOUT clock sources
* man/io_uring_enter.2: improve timeout entry
* man/io_uring_enter.2: update SQE
* man/io_uring_enter.2: note that not all requests support fixed files
* man/io_uring_enter.2: add new 5.15 opcodes
* man/io_uring_enter.2: note that cqe->flags is indeed used
* man/io_uring_enter.2: add poll update and multishot mode
* man/io_uring_register.2: add IORING_(UN)REGISTER_IOWQ
* man: update notes on register quiesce
* man: fix io_uring_sqe alignment
* register: add tagging and buf update helpers
* liburing.h: make header clean for implicit sign and size conversions
* configure: document --cc and --cxx options
* io_uring: update buffer update feature testing
* liburing.h: dedup poll mask conversion
* liburing.h: add a multipoll helper
* Update io_uring.h
* examples: disable ucontext-cp for elbrus (e2k) architecture
* Update io_uring_setup.2
* man/io_uring_setup.2: document the two most recent FEAT flags
* man/io_uring_setup.2: make sure FEAT flags are kernel versioned
* correct syscall NR in mips
* Fix 32-bit compile warnings
* liburing.h: make all file/IO offset __u64
* src/queue: don't flush SQ ring for new wait interface
* man/io_uring_enter.2: further clarify what cqe->res holds
* Clarify information about error results
* Refer to the accept_flags in io_uring_enter manual
* Fix a bug due to the unreleased lock before function returns
* debian/rules: add missing slash for relativelibdir
* man/io_uring_enter.2: clarify io_uring_enter(2) SQPOLL return value
* liburing.h: add linkat prep helper
* io_uring.h: add linkat opcode
* liburing.h: add symlinkat prep helper
* io_uring.h: add symlinkat opcode
* liburing.h: add mkdirat prep helper
* update rsrc register/update ABI and tests
* queue: clean up SQ flushing
* io_uring_enter(2): Clarify how to read from and write to non-seekable files
* clarify an edge case of IORING_SETUP_SQ_AFF
* io_uring_enter(2): clarify OP_READ and OP_WRITE
* sync io_uring.h API file with Linux 5.13
* man: Fix typo in man io_uring_queue_exit
* examples/link-cp: fix a couple of strerror negations
* src/setup: don't treat dummy ring init as failure
* src/setup: add some documentation to the memlock helpers
* examples/ucontext-cp.c: cope with variable SIGSTKSZ
* setup: provide helpers to inquire about necessary mlock sizes
* examples/io_uring-cp: wait for pending writes before exit copy loop
* spec: add explicit build dependency on make
* spec: bump version to 2.0
* man/io_uring_enter.2: note that -EBUSY can also happen for getevents
==== libvirt ====
Version update (7.7.0 -> 7.8.0)
Subpackages: libvirt-client libvirt-daemon libvirt-daemon-driver-interface libvirt-daemon-driver-lxc libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-lxc libvirt-daemon-qemu libvirt-libs
- supportconfig: Use systemctl command 'is-active' instead of
'is-enabled' when checking if libvirtd is active
- Drop 'Requires: libvirt-daemon-driver-lxc' from the main libvirt
package
jsc#SLE-22296
- qemu: Do not report eof when processing monitor IO
2703b0b5-qemu-dont-report-eof.patch
bsc#1190917
- lxc: controller: Fix container launch on cgroup v1
1b9ce05c-lxc-fix-cgroupV1.patch
boo#1183247
- tools: Fix virt-host-validate SEV detection
3f9c1a4b-fix-host-validate-sev.patch
boo#1188715
- Update to libvirt 7.8.0
- jsc#SLE-18260
- Many incremental improvements and bug fixes, see
https://libvirt.org/news.html
- Dropped patches:
b75a16ae-libxl-improve-die-id.patch,
65fab900-libxl-fix-driver-reload.patch,
51eb680b-libxl-dont-autostart-on-reload.patch
- spec: Fix hangs during package update
bsc#1177902, bsc#1190693
- spec: Don't add --timeout arg to /etc/sysconfig/libvirtd when
running in traditional mode without socket activation
bsc#1190695
==== libwebp ====
Version update (1.2.0 -> 1.2.1)
Subpackages: libwebp7 libwebpdemux2 libwebpmux3
- update to 1.2.1:
* minor lossless encoder improvements and x86 color conversion
speed up
* further security related hardening in libwebp & examples
* toolchain updates and bug fixes
* use more inclusive language within the source
==== libyui ====
Version update (4.2.16 -> 4.2.19)
- Fixed crash in NCurses online update when retracted packages
are present (bsc#1191130)
- 4.2.19
- Add debug_label as filter and improve error handling (bsc#1174390)
- 4.2.18
- Fixed empty entries in YQPackageSelector Zypp history window
(bsc#1191430)
- Added missing textdomain (bsc#1190805)
- 4.2.17
==== libyui-ncurses ====
Version update (4.2.16 -> 4.2.19)
- Fixed crash in NCurses online update when retracted packages
are present (bsc#1191130)
- 4.2.19
- Add debug_label as filter and improve error handling (bsc#1174390)
- 4.2.18
- Fixed empty entries in YQPackageSelector Zypp history window
(bsc#1191430)
- Added missing textdomain (bsc#1190805)
- 4.2.17
==== libyui-ncurses-pkg ====
Version update (4.2.16 -> 4.2.19)
- Fixed crash in NCurses online update when retracted packages
are present (bsc#1191130)
- 4.2.19
- Add debug_label as filter and improve error handling (bsc#1174390)
- 4.2.18
- Fixed empty entries in YQPackageSelector Zypp history window
(bsc#1191430)
- Added missing textdomain (bsc#1190805)
- 4.2.17
==== libyui-qt ====
Version update (4.2.16 -> 4.2.19)
- Fixed crash in NCurses online update when retracted packages
are present (bsc#1191130)
- 4.2.19
- Add debug_label as filter and improve error handling (bsc#1174390)
- 4.2.18
- Fixed empty entries in YQPackageSelector Zypp history window
(bsc#1191430)
- Added missing textdomain (bsc#1190805)
- 4.2.17
==== libyui-qt-graph ====
Version update (4.2.16 -> 4.2.19)
- Fixed crash in NCurses online update when retracted packages
are present (bsc#1191130)
- 4.2.19
- Add debug_label as filter and improve error handling (bsc#1174390)
- 4.2.18
- Fixed empty entries in YQPackageSelector Zypp history window
(bsc#1191430)
- Added missing textdomain (bsc#1190805)
- 4.2.17
==== libyui-qt-pkg ====
Version update (4.2.16 -> 4.2.19)
- Fixed crash in NCurses online update when retracted packages
are present (bsc#1191130)
- 4.2.19
- Add debug_label as filter and improve error handling (bsc#1174390)
- 4.2.18
- Fixed empty entries in YQPackageSelector Zypp history window
(bsc#1191430)
- Added missing textdomain (bsc#1190805)
- 4.2.17
==== libzypp ====
Version update (17.28.4 -> 17.28.6)
- Zypper should keep cached files if transaction is aborted
(bsc#1190356)
Singletrans mode currently does not keep files around if the
transaction is aborted. This patch fixes the problem.
- Require a minimum number of mirrors for multicurl (bsc#1191609)
- Use procfs to detect nr of open fd's if rlimit is too high
(bsc#1191324)
Especially in a VM iterating over all possible fd's to close open
ones right before a exec() slows down zypper unnecessarily. This
patch uses /proc/self/fd to iterate over open fd's in case rlimit
is above 1024.
- po: Fix some lost '%' signs in positional args (bsc#1191370)
- RepoManager: Don't probe for plaindir repo if URL schema is
plugin: (bsc#1191286)
- version 17.28.6 (22)
- Downloader does not respect checkExistsOnly flag (bsc#1190712)
A missing check causes zyppng::Downloader to always download full
files even if the checkExistsOnly flag is set. This patch adds
the missing logic.
- Fix kernel-*-livepatch removal in purge-kernels (bsc#1190815)
The kernel-*-livepatch packages are supposed to serve as a stable
handle for the ephemeral kernel livepatch packages. See
FATE#320268 for details. As part of the kernel live patching
ecosystem, kernel-*-livepatch packages should not block the
purge-kernels step.
- version 17.28.5 (22)
==== libzypp-plugin-appdata ====
- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
* harden_appstream-sync-cache.service.patch
==== lightdm ====
Subpackages: liblightdm-gobject-1-0 lightdm-lang
- Replace /usr/etc to /etc for products if suse_version < 1550
(bsc#1190289)
==== lirc ====
- Revert "Require typelib packages": better to have rpm auto-detect
them.
- Add gobject-introspection BuildRequires to have the typelib dep
scanner on board.
- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
* harden_irexec.service.patch
* harden_lircd-uinput.service.patch
* harden_lircd.service.patch
* harden_lircmd.service.patch
- Require typelib packages, otherwise lirc-setup fails to start.
==== lokalize ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== lskat ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== luajit ====
- Exclude s390x for now. There is a not-yet-upstreamed port
available, but we would need to rebase it for our release.
==== mailcommon ====
Version update (21.08.1 -> 21.08.2)
Subpackages: libKF5MailCommon5
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- Changes since 21.08.1:
* Make sure that quota value was defined
==== mailimporter ====
Version update (21.08.1 -> 21.08.2)
Subpackages: libKF5MailImporter5 libKF5MailImporterAkonadi5
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== mailutils ====
- Modify patch mailutils-3.5-guile-2.0.patch and apply later
if needed for older guile versions
- Increase somajor spec file macro to value 8 (boo#1191772)
- Add check for any version change of shared the libraries
==== man ====
- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
* harden_man-db.service.patch
Modified:
* man-db-create.service
==== mariadb ====
Subpackages: libmariadbd19 mariadb-client mariadb-errormessages
- Fix socket address in mariadb@.socket file
==== mariadb-connector-c ====
Version update (3.2.3 -> 3.2.4)
- Update to 3.2.4:
* release notes and changelog:
https://mariadb.com/kb/en/library/mariadb-connector-c-324-release-notes
https://mariadb.com/kb/en/library/mariadb-connector-c-324-changelog
==== mbox-importer ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== mc ====
Version update (4.8.26 -> 4.8.27)
Subpackages: mc-lang
- Midnight Commander 4.8.27:
* Core
- Minimal version of Autoconf is 2.64 (#3603)
- Minimal version of Automake is 1.12 (#3986)
- Minimal version of Gettext is 0.18.2 (#3603)
- Minimal version of libssh2 is 1.2.8 (#4259)
- Reimplement version detection (#3603, #4249)
- Significantly reduce rebuilt time after version change (#2252, #4266)
- Drop automatic migration of configuration from ~/.mc to XDG-based directories (#3682)
- zsh: support custom configuration file: ~/.local/share/mc/.zshrc (#4203)
- Widgets: implement WST_VISIBLE state to show/hide widgets (#2919)
- Find File: add Follow symlinks option (#2020)
* VFS
- extfs: support unrar-6 (#4154)
- extfs: support official 7z binary (7zz) (#4239)
- ftpfs: apply file list parser from lftp project (#2841, #3174)
* Editor
- Word completion: get candidates from all open files (#4160)
- etags: get rid of hardcoded list length and window width (#4132)
- Update syntax files:
- python (#4140)
- Add syntax highlighting:
- Verilog and SystemVerilog? header files (#4215)
- JSON (#4250)
- openrc-run scripts (#4246)
* Viewer
* Diff viewer
* Misc
- Code clean up (#4179, #4173, #4269)
- Filehighlight of c++ and h++ files as sources (#4194)
- Filehighlight of JSON files as documents (#4250)
- Support of alacritty terminal emulator (?https://github.com/alacritty/alacritty) (#4248)
- Support of foot terminal emulator (?https://codeberg.org/dnkl/foot) (#4251)
- Support of (alt+)shift+arrow keys in st terminal emulator (st.suckless.org) (#4267)
- Mouse support in screen: don't check variable (#4233)
- mc.ext: support fb2 e-books (#4167)
- ext.d: use mediainfo to view info about various media files (#4167)
- Remove OS/distro-specific package-related stuff from source tree (#4217)
* Fixes
- FTBFS against NCurses on OS X 10.9.5 (#4181)
- Segfault on dialog before panels get visible (#4244)
- Crash if shadow is out of screen (build against NCurses) (#4192)
- Crash in search (#4222)
- Crash on startup with enabled subshell in FreeBSD (workaround) (#4213)
- Hang on start randomly with zsh as subshell (#4198)
- If command line is invisible it's partially displayed (#4182)
- Broken handling of zip archives (#4180, #4183)
- Broken handling of jar files as zip archives (#4223)
- Timestamps of symlinks, sockets, fifos, etc are not preserved after copy/move (#3985)
- %view action in the user menu doesn't work on no-exec filesystem (#4242)
- Hardlinks are not colored by file type or extension (#3375)
- mcedit: silent macro makes terminal disrupted (#4171)
- mcedit: disrupting of TAGS file path (#4207)
- vfs: unable to browse compressed tar archives (#4191)
- sftpfs vfs: CVE-2021-36370: server fingerprint isn't verified
(discovered by AUT-milCERT during an audit of open source software) (#4259)
- ftpfs vfs: month of file is always January (#4260)
- Tests: log files are written by libcheck and automake simultaneously (#3986)
- Rebase mc-ext-audio.patch.
- Rebase mc-extd-sound.patch.
==== mdadm ====
- Install mdadm in _sbindir rather than /sbin. This is more
appropriate now that we have a merged-/usr.
(bsc#1191076)
==== messagelib ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- Changes since 21.08.1:
* Fix Bug 443108 - Ability to copy tables with original formatting (kde#443108)
* Store in completion list too
* Set RUN_SERIAL test property for all add_gpg_crypto_test tests
==== milou5 ====
Version update (5.22.5 -> 5.23.1)
Subpackages: milou5-lang
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* Remove no longer needed CMake code
* Remove Preview stuff
* Fix error about "reversed" not being defined
* Make results delegate list items a bit taller with bigger icons (kde#422567)
==== mlocate ====
Subpackages: mlocate-lang
- Added hardening to systemd service(s) (bsc#1181400). Modified:
* mlocate.service
==== mobipocket ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== mpg123 ====
Version update (1.29.0 -> 1.29.1)
Subpackages: libmpg123-0 mpg123-openal
- Update to version 1.29.1
mpg123:
* Keep default output encoding of s16 for raw and file outputs
also with the new resampler. This reverts the unintentional
change in 1.26.0 of switching to f32 for forced output rate
unless the NtoM resampler is selected. In any case, you
should make sure to specify your desired --encoding if you
depend on it.
* Catch error in indexing (mpg123_scan() return value was
ignored before, bug 322).
mpg123-strip:
* Lift the resync limit, as it should be to clean up really
dirty streams.
mpg123-id3dump:
* Also lift resync limit for the same reasons.
libout123:
* Fix reporting of device property flags for buffer
libmpg123:
* More safeguarding against attempts to decode if decoder
setup failed and user ignored the returned error code (bug
322)
==== mutter ====
- Rebase mutter-SLE-bsc984738-grab-display.patch.
==== nano ====
Version update (5.8 -> 5.9)
- GNU nano 5.9:
* The extension of a filename is added to the name of a
corresponding temporary file, so that spell checking a C file,
for example, will check only the comments and strings
(when using 'aspell').
* The process number is added to the name of an emergency save
file, so that when multiple nanos die they will not fight over
a filename.
* Undoing a cutting operation will restore an anchor that was
located in the cut area to its original line.
* When using --locking, saving a new buffer will create a lock
file.
* Syntax highlighting for YAML files has been added
==== nbd ====
Version update (3.21 -> 3.22)
- update to 3.22:
- nbd-server: handle auth for v6-mapped IPv4 addresses
- nbd-client.c: parse the next option in all cases
- configure.ac: silence a few autoconf 2.71 warnings
- spec: Relax NBD_OPT_LIST_META_CONTEXTS
- client: Don't confuse Unix socket with TLS hostname
- server: Avoid deprecated g_memdup
==== ncurses ====
Version update (6.2.20210911 -> 6.2.20211002)
Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen
- Add ncurses patch 20211002
+ use return-value from vsnprintf to reallocate as needed to allow for
buffers larger than the screen size (report by "_RuRo_").
+ modify tset "-q" option to refrain from modifying terminal modes, to
match the documentation.
+ add section on margins to terminfo.5, adapted from X/Open Curses.
+ make tput/tset warning messages consistently using alias names when
those are used, rather than the underlying program's name.
+ improve tput usage message for aliases such as clear, by eliminating
tput-specific portions.
+ add a check in toe to ensure that a "termcap file" is text rather
than binary.
+ further build-fixes for OpenBSD 6.9, whose header files differ from
- Add ncurses patch 20210925
+ add kbeg to xterm+keypad to accommodate termcap applications -TD
+ add smglp and smgrp to vt420+lrmm, to provide useful data for the
"tabs" +m option -TD
+ build-fix for gcc 3.4.3 with Solaris10, which does not allow forward
reference of anonymous struct typedef.
+ modify tput to allow multiple commands per line.
+ minor fixes for tset manpage.
- Correct offsets of patch ncurses-6.2.dif
==== ndctl ====
- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
* harden_ndctl-monitor.service.patch
==== ntp ====
- Added hardening to systemd service(s) (bsc#1181400). Modified:
* conf.ntp-wait.service
* conf.ntpd.service
==== numad ====
- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
* harden_numad.service.patch
==== nvme-cli ====
Subpackages: nvme-cli-bash-completion
- Drop ProtectClock hardening, can cause issues if other device acceess is needed
- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
* harden_nvmf-connect@.service.patch
==== okular ====
Version update (21.08.1 -> 21.08.2)
Subpackages: okular-spectre
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- Changes since 21.08.1:
* markdown: Only remove text if we're going to add something (kde#443057)
* Automatically enable and disable "Force Rasterization" when required (kde#434247)
* annotationtoolbartest: Remove unneded cast
* Don't allow saving over read-only files (kde#440986)
* Remove \n if it's the last char of the selected text (kde#342874)
==== open-iscsi ====
Subpackages: iscsiuio libopeniscsiusr0_2_0
- Fix possible systemd cycle by adding an "obsoletes" for
the old libopeniscsiusr for older versions.
==== open-vm-tools ====
Version update (11.3.0 -> 11.3.5)
Subpackages: libvmtools0 open-vm-tools-desktop
- Update to 11.3.5 (build 18557794) (boo#1190987)
+ New/Updated features:
- Added a configurable logging capability to the network script.
The network script has been updated to:
use vmware-toolbox-cmd to query any network logging configuration from
the tools.conf file. Use vmtoolsd --cmd "log ..." to log a message to
the vmx logfile when the logging handler is configured to "vmx" or when
the logfile is full or is not writeable.
- The hgfsmounter (mount.vmhgfs) command has been removed from
open-vm-tools.
The hgfsmounter (mount.vmhgfs) command is no longer used in
Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
removing all references to the hgfsmounter in Linux builds.
+ Resolved issues:
- Customization: Retry the Linux reboot if telinit is a soft link to
systemctl.
- Open-vm-tools commands would hang if configured with "--enable-valgrind".
+ Spec file updates for:
- rpmlint errors
- arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.
==== openssh ====
Version update (8.4p1 -> 8.8p1)
Subpackages: openssh-clients openssh-common openssh-server
- Version update to 8.8p1:
= Security
* sshd(8) from OpenSSH 6.2 through 8.7 failed to correctly initialise
supplemental groups when executing an AuthorizedKeysCommand or
AuthorizedPrincipalsCommand, where a AuthorizedKeysCommandUser or
AuthorizedPrincipalsCommandUser directive has been set to run the
command as a different user. Instead these commands would inherit
the groups that sshd(8) was started with.
Depending on system configuration, inherited groups may allow
AuthorizedKeysCommand/AuthorizedPrincipalsCommand helper programs to
gain unintended privilege.
Neither AuthorizedKeysCommand nor AuthorizedPrincipalsCommand are
enabled by default in sshd_config(5).
= Potentially-incompatible changes
* This release disables RSA signatures using the SHA-1 hash algorithm
by default. This change has been made as the SHA-1 hash algorithm is
cryptographically broken, and it is possible to create chosen-prefix
hash collisions for <USD$50K.
For most users, this change should be invisible and there is
no need to replace ssh-rsa keys. OpenSSH has supported RFC8332
RSA/SHA-256/512 signatures since release 7.2 and existing ssh-rsa keys
will automatically use the stronger algorithm where possible.
Incompatibility is more likely when connecting to older SSH
implementations that have not been upgraded or have not closely tracked
improvements in the SSH protocol. For these cases, it may be necessary
to selectively re-enable RSA/SHA1 to allow connection and/or user
authentication via the HostkeyAlgorithms and PubkeyAcceptedAlgorithms
options.
= New features
* ssh(1): allow the ssh_config(5) CanonicalizePermittedCNAMEs
directive to accept a "none" argument to specify the default
behaviour.
= Bugfixes
* scp(1): when using the SFTP protocol, continue transferring files
after a transfer error occurs, better matching original scp/rcp
behaviour.
* ssh(1): fixed a number of memory leaks in multiplexing,
* ssh-keygen(1): avoid crash when using the -Y find-principals
command.
* A number of documentation and manual improvements, including
bz#3340, PR139, PR215, PR241, PR257
- Additional changes from 8.7p1 release:
= Potentially-incompatible changes
* scp(1): this release changes the behaviour of remote to remote
copies (e.g. "scp host-a:/path host-b:") to transfer through the
local host by default. This was previously available via the -3
flag. This mode avoids the need to expose credentials on the
origin hop, avoids triplicate interpretation of filenames by the
shell (by the local system, the copy origin and the destination)
and, in conjunction with the SFTP support for scp(1) mentioned
below, allows use of all authentication methods to the remote
hosts (previously, only non-interactive methods could be used).
A -R flag has been added to select the old behaviour.
* ssh(1)/sshd(8): both the client and server are now using a
stricter configuration file parser. The new parser uses more
shell-like rules for quotes, space and escape characters. It is
also more strict in rejecting configurations that include options
lacking arguments. Previously some options (e.g. DenyUsers) could
appear on a line with no subsequent arguments. This release will
reject such configurations. The new parser will also reject
configurations with unterminated quotes and multiple '='
characters after the option name.
* ssh(1): when using SSHFP DNS records for host key verification,
ssh(1) will verify all matching records instead of just those
with the specific signature type requested. This may cause host
key verification problems if stale SSHFP records of a different
or legacy signature type exist alongside other records for a
particular host. bz#3322
* ssh-keygen(1): when generating a FIDO key and specifying an
explicit attestation challenge (using -Ochallenge), the challenge
will now be hashed by the builtin security key middleware. This
removes the (undocumented) requirement that challenges be exactly
32 bytes in length and matches the expectations of libfido2.
* sshd(8): environment="..." directives in authorized_keys files are
now first-match-wins and limited to 1024 discrete environment
variable names.
= New features
* scp(1): experimental support for transfers using the SFTP protocol
as a replacement for the venerable SCP/RCP protocol that it has
traditionally used. SFTP offers more predictable filename handling
and does not require expansion of glob(3) patterns via the shell
on the remote side.
* sftp-server(8): add a protocol extension to support expansion of
~/ and ~user/ prefixed paths. This was added to support these
paths when used by scp(1) while in SFTP mode.
* ssh(1): add a ForkAfterAuthentication ssh_config(5) counterpart to
the ssh(1) -f flag. GHPR231
* ssh(1): add a StdinNull directive to ssh_config(5) that allows the
config file to do the same thing as -n does on the ssh(1) command-
line. GHPR231
* ssh(1): add a SessionType directive to ssh_config, allowing the
configuration file to offer equivalent control to the -N (no
session) and -s (subsystem) command-line flags. GHPR231
* ssh-keygen(1): allowed signers files used by ssh-keygen(1)
signatures now support listing key validity intervals alongside
they key, and ssh-keygen(1) can optionally check during signature
verification whether a specified time falls inside this interval.
This feature is intended for use by git to support signing and
verifying objects using ssh keys.
* ssh-keygen(8): support printing of the full public key in a sshsig
signature via a -Oprint-pubkey flag.
= Bugfixes
* ssh(1)/sshd(8): start time-based re-keying exactly on schedule in
the client and server mainloops. Previously the re-key timeout
could expire but re-keying would not start until a packet was sent
or received, causing a spin in select() if the connection was
quiescent.
* ssh-keygen(1): avoid Y2038 problem in printing certificate
validity lifetimes. Dates past 2^31-1 seconds since epoch were
displayed incorrectly on some platforms. bz#3329
* scp(1): allow spaces to appear in usernames for local to remote
and scp -3 remote to remote copies. bz#1164
* ssh(1)/sshd(8): remove references to ChallengeResponseAuthentication
in favour of KbdInteractiveAuthentication. The former is what was in
SSHv1, the latter is what is in SSHv2 (RFC4256) and they were
treated as somewhat but not entirely equivalent. We retain the old
name as a deprecated alias so configuration files continue to work
as well as a reference in the man page for people looking for it.
bz#3303
* ssh(1)/ssh-add(1)/ssh-keygen(1): fix decoding of X.509 subject name
when extracting a key from a PKCS#11 certificate. bz#3327
* ssh(1): restore blocking status on stdio fds before close. ssh(1)
needs file descriptors in non-blocking mode to operate but it was
not restoring the original state on exit. This could cause
problems with fds shared with other programs via the shell,
bz#3280 and GHPR246
* ssh(1)/sshd(8): switch both client and server mainloops from
select(3) to pselect(3). Avoids race conditions where a signal
may arrive immediately before select(3) and not be processed until
an event fires. bz#2158
* ssh(1): sessions started with ControlPersist were incorrectly
executing a shell when the -N (no shell) option was specified.
bz#3290
* ssh(1): check if IPQoS or TunnelDevice are already set before
overriding. Prevents values in config files from overriding values
supplied on the command line. bz#3319
* ssh(1): fix debug message when finding a private key to match a
certificate being attempted for user authentication. Previously it
would print the certificate's path, whereas it was supposed to be
showing the private key's path. GHPR247
* sshd(8): match host certificates against host public keys, not
private keys. Allows use of certificates with private keys held in
a ssh-agent. bz#3524
* ssh(1): add a workaround for a bug in OpenSSH 7.4 sshd(8), which
allows RSA/SHA2 signatures for public key authentication but fails
to advertise this correctly via SSH2_MSG_EXT_INFO. This causes
clients of these server to incorrectly match
PubkeyAcceptedAlgorithmse and potentially refuse to offer valid
keys. bz#3213
* sftp(1)/scp(1): degrade gracefully if a sftp-server offers the
limits(a)openssh.com extension but fails when the client tries to
invoke it. bz#3318
* ssh(1): allow ssh_config SetEnv to override $TERM, which is
otherwise handled specially by the protocol. Useful in ~/.ssh/config
to set TERM to something generic (e.g. "xterm" instead of
"xterm-256color") for destinations that lack terminfo entries.
* sftp-server(8): the limits(a)openssh.com extension was incorrectly
marked as an operation that writes to the filesystem, which made it
unavailable in sftp-server read-only mode. bz#3318
* ssh(1): fix SEGV in UpdateHostkeys debug() message, triggered when
the update removed more host keys than remain present.
* Many manual page fixes.
- Additional changes from 8.6p1 release:
= Security
* sshd(8): OpenSSH 8.5 introduced the LogVerbose keyword. When this
option was enabled with a set of patterns that activated logging
in code that runs in the low-privilege sandboxed sshd process, the
log messages were constructed in such a way that printf(3) format
strings could effectively be specified the low-privilege code.
= New features
* sftp-server(8): add a new limits(a)openssh.com protocol extension
that allows a client to discover various server limits, including
maximum packet size and maximum read/write length.
* sftp(1): use the new limits(a)openssh.com extension (when available)
to select better transfer lengths in the client.
* sshd(8): Add ModuliFile keyword to sshd_config to specify the
location of the "moduli" file containing the groups for DH-GEX.
* unit tests: Add a TEST_SSH_ELAPSED_TIMES environment variable to
enable printing of the elapsed time in seconds of each test.
= Bugfixes
* ssh_config(5), sshd_config(5): sync CASignatureAlgorithms lists in
manual pages with the current default. GHPR174
* ssh(1): ensure that pkcs11_del_provider() is called before exit.
GHPR234
* ssh(1), sshd(8): fix problems in string->argv conversion. Multiple
backslashes were not being dequoted correctly and quoted space in
the middle of a string was being incorrectly split. GHPR223
* ssh(1): return non-zero exit status when killed by signal; bz#3281
* sftp-server(8): increase maximum SSH2_FXP_READ to match the maximum
packet size. Also handle zero-length reads that are not explicitly
banned by the spec.
- Additional changes from 8.5p1 release:
= Security
* ssh-agent(1): fixed a double-free memory corruption that was
introduced in OpenSSH 8.2 . We treat all such memory faults as
potentially exploitable. This bug could be reached by an attacker
with access to the agent socket.
= Potentially-incompatible changes
* ssh(1), sshd(8): this release changes the first-preference signature
algorithm from ECDSA to ED25519.
* ssh(1), sshd(8): set the TOS/DSCP specified in the configuration
for interactive use prior to TCP connect. The connection phase of
the SSH session is time-sensitive and often explicitly interactive.
The ultimate interactive/bulk TOS/DSCP will be set after
authentication completes.
* ssh(1), sshd(8): remove the pre-standardization cipher
rijndael-cbc(a)lysator.liu.se. It is an alias for aes256-cbc before
it was standardized in RFC4253 (2006), has been deprecated and
disabled by default since OpenSSH 7.2 (2016) and was only briefly
documented in ssh.1 in 2001.
* ssh(1), sshd(8): update/replace the experimental post-quantum
hybrid key exchange method based on Streamlined NTRU Prime coupled
with X25519. The previous sntrup4591761x25519-sha512(a)tinyssh.org
method is replaced with sntrup761x25519-sha512(a)openssh.com.
* ssh(1): disable CheckHostIP by default. It provides insignificant
benefits while making key rotation significantly more difficult,
especially for hosts behind IP-based load-balancers.
= New features
* ssh(1): this release enables UpdateHostkeys by default subject to
some conservative preconditions:
- The key was matched in the UserKnownHostsFile (and not in the
GlobalKnownHostsFile).
- The same key does not exist under another name.
- A certificate host key is not in use.
- known_hosts contains no matching wildcard hostname pattern.
- VerifyHostKeyDNS is not enabled.
- The default UserKnownHostsFile is in use.
* ssh(1), sshd(8): add a new LogVerbose configuration directive for
that allows forcing maximum debug logging by file/function/line
pattern-lists.
* ssh(1): when prompting the user to accept a new hostkey, display
any other host names/addresses already associated with the key.
* ssh(1): allow UserKnownHostsFile=none to indicate that no
known_hosts file should be used to identify host keys.
* ssh(1): add a ssh_config KnownHostsCommand option that allows the
client to obtain known_hosts data from a command in addition to
the usual files.
* ssh(1): add a ssh_config PermitRemoteOpen option that allows the
client to restrict the destination when RemoteForward is used
with SOCKS.
* ssh(1): for FIDO keys, if a signature operation fails with a
"incorrect PIN" reason and no PIN was initially requested from the
user, then request a PIN and retry the operation. This supports
some biometric devices that fall back to requiring PIN when reading
of the biometric failed, and devices that require PINs for all
hosted credentials.
* sshd(8): implement client address-based rate-limiting via new
sshd_config(5) PerSourceMaxStartups and PerSourceNetBlockSize
directives that provide more fine-grained control on a per-origin
address basis than the global MaxStartups limit.
= Bugfixes
* ssh(1): Prefix keyboard interactive prompts with "(user@host)" to
make it easier to determine which connection they are associated
with in cases like scp -3, ProxyJump, etc. bz#3224
* sshd(8): fix sshd_config SetEnv directives located inside Match
blocks. GHPR201
* ssh(1): when requesting a FIDO token touch on stderr, inform the
user once the touch has been recorded.
* ssh(1): prevent integer overflow when ridiculously large
ConnectTimeout values are specified, capping the effective value
(for most platforms) at 24 days. bz#3229
* ssh(1): consider the ECDSA key subtype when ordering host key
algorithms in the client.
* ssh(1), sshd(8): rename the PubkeyAcceptedKeyTypes keyword to
PubkeyAcceptedAlgorithms. The previous name incorrectly suggested
that it control allowed key algorithms, when this option actually
specifies the signature algorithms that are accepted. The previous
name remains available as an alias. bz#3253
* ssh(1), sshd(8): similarly, rename HostbasedKeyTypes (ssh) and
HostbasedAcceptedKeyTypes (sshd) to HostbasedAcceptedAlgorithms.
* sftp-server(8): add missing lsetstat(a)openssh.com documentation
and advertisement in the server's SSH2_FXP_VERSION hello packet.
* ssh(1), sshd(8): more strictly enforce KEX state-machine by
banning packet types once they are received. Fixes memleak caused
by duplicate SSH2_MSG_KEX_DH_GEX_REQUEST (oss-fuzz #30078).
* sftp(1): allow the full range of UIDs/GIDs for chown/chgrp on 32bit
platforms instead of being limited by LONG_MAX. bz#3206
* Minor man page fixes (capitalization, commas, etc.) bz#3223
* sftp(1): when doing an sftp recursive upload or download of a
read-only directory, ensure that the directory is created with
write and execute permissions in the interim so that the transfer
can actually complete, then set the directory permission as the
final step. bz#3222
* ssh-keygen(1): document the -Z, check the validity of its argument
earlier and provide a better error message if it's not correct.
bz#2879
* ssh(1): ignore comments at the end of config lines in ssh_config,
similar to what we already do for sshd_config. bz#2320
* sshd_config(5): mention that DisableForwarding is valid in a
sshd_config Match block. bz3239
* sftp(1): fix incorrect sorting of "ls -ltr" under some
circumstances. bz3248.
* ssh(1), sshd(8): fix potential integer truncation of (unlikely)
timeout values. bz#3250
* ssh(1): make hostbased authentication send the signature algorithm
in its SSH2_MSG_USERAUTH_REQUEST packets instead of the key type.
This make HostbasedAcceptedAlgorithms do what it is supposed to -
filter on signature algorithm and not key type.
- Rebased patches:
* openssh-7.7p1-IPv6_X_forwarding.patch
* openssh-7.7p1-X11_trusted_forwarding.patch
* openssh-7.7p1-X_forward_with_disabled_ipv6.patch
* openssh-7.7p1-cavstest-ctr.patch
* openssh-7.7p1-cavstest-kdf.patch
* openssh-7.7p1-disable_openssl_abi_check.patch
* openssh-7.7p1-eal3.patch
* openssh-7.7p1-enable_PAM_by_default.patch
* openssh-7.7p1-fips.patch
* openssh-7.7p1-fips_checks.patch
* openssh-7.7p1-host_ident.patch
* openssh-7.7p1-hostname_changes_when_forwarding_X.patch
* openssh-7.7p1-ldap.patch
* openssh-7.7p1-no_fork-no_pid_file.patch
* openssh-7.7p1-pam_check_locks.patch
* openssh-7.7p1-pts_names_formatting.patch
* openssh-7.7p1-remove_xauth_cookies_on_exit.patch
* openssh-7.7p1-seccomp_ipc_flock.patch
* openssh-7.7p1-seccomp_stat.patch
* openssh-7.7p1-send_locale.patch
* openssh-7.7p1-sftp_force_permissions.patch
* openssh-7.7p1-sftp_print_diagnostic_messages.patch
* openssh-7.7p1-systemd-notify.patch
* openssh-7.9p1-keygen-preserve-perms.patch
* openssh-7.9p1-revert-new-qos-defaults.patch
* openssh-8.0p1-gssapi-keyex.patch
* openssh-8.1p1-audit.patch
* openssh-8.1p1-seccomp-clock_gettime64.patch
* openssh-8.1p1-seccomp-clock_nanosleep.patch
* openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
* openssh-8.1p1-use-openssl-kdf.patch
* openssh-8.4p1-vendordir.patch
* openssh-fips-ensure-approved-moduli.patch
* openssh-link-with-sk.patch
* openssh-reenable-dh-group14-sha1-default.patch
* openssh-whitelist-syscalls.patch
- Removed openssh-fix-ssh-copy-id.patch (fixed upstream).
- openssh.keyring: rotated to new key from https://cdn.openbsd.org/pub/OpenBSD/OpenSSH/RELEASE_KEY.asc
- sshd-gen-keys-start:
- only source sysconfig file if it exists.
- create /etc/ssh if it does not exists.
Required for image based installation/updates.
==== openssh-askpass-gnome ====
Version update (8.4p1 -> 8.8p1)
- Version upgrade to 8.8p1
* No changes for askpass, see main package changelog for
details
==== oxygen5 ====
Version update (5.22.5 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Fix a clang compiler warning -Winfinite-recursion
* Port away from deprecated KF and Qt methods
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* Remove unneeded KCM plugin keyword stuff
* Convert remaining copyright texts to SPDX
* Remove obsolete COPYING files
* Convert cursors/src copyright to SPDX
* Adjust formatting of license header
* Convert license headers to SPDX
* Update IRC network name in the cursors README
* Readd the old and longer logoff sound from KDE 4.0 as an option
==== pam-config ====
Version update (1.4 -> 1.5)
- Update to Version 1.5
- Don't print an error message if one of the systemd PAM modules
does not exist if creating the *-pc files [bsc#1191528]
- Drop pam_systemd_home again [bsc#1191528]
==== pangomm1_4 ====
- turn off doc build, it does not work with new doxygen
==== parley ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== patterns-gnome ====
Subpackages: patterns-gnome-gnome patterns-gnome-gnome_basic patterns-gnome-gnome_basis patterns-gnome-gnome_basis_opt patterns-gnome-gnome_games patterns-gnome-gnome_imaging patterns-gnome-gnome_internet patterns-gnome-gnome_multimedia patterns-gnome-gnome_office patterns-gnome-gnome_utilities patterns-gnome-gnome_x11 patterns-gnome-gnome_yast patterns-gnome-sw_management_gnome
- Drop gnome-power-manager Recommends: Package is dormant upstream
and on its way to be replaced by new features inside of
gnome-control-center.
==== pcsc-lite ====
Version update (1.9.3 -> 1.9.4)
Subpackages: libpcsclite1
- version 1.9.4
* fix a memory leak when libusb is used for hotplug
(i.e. non-Linux systems)
==== perl-Cpanel-JSON-XS ====
Version update (4.26 -> 4.27)
- updated to 4.27
see /usr/share/doc/packages/perl-Cpanel-JSON-XS/Changes
4.27 2021-10-13 (rurban)
- Only add -Werror=declaration-after-statement for 5.035004 and earlier (PR #186 nwc)
- Fix 125_shared_boolean.t for threads (PR #184 Sinan Unur)
==== perl-Crypt-OpenSSL-RSA ====
Version update (0.31 -> 0.32)
- updated to 0.32
see /usr/share/doc/packages/perl-Crypt-OpenSSL-RSA/Changes
0.32 Wed Sep 8 2021
- Prefix internal bn2sv function so it doesn't collide with Net::SSLeay
- Ensure that verify() leaves openssl error stack clean on failure
- Fixed broken SEE ALSO links.
- prevent outer $SIG{__DIE__} handler from being called during optional require.
- omit done_testing since it does not work for older perl versions
* Rebase Crypt-OpenSSL-RSA.patch
==== perl-Image-ExifTool ====
Subpackages: exiftool
- require File::RandomAccess otherwise exiftool(1) won't start
==== phodav ====
- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
* harden_spice-webdavd.service.patch
==== php7 ====
Subpackages: php7-cli php7-ctype php7-dom php7-gd php7-gettext php7-iconv php7-json php7-mbstring php7-mysql php7-openssl php7-pdo php7-sqlite php7-tokenizer php7-xmlreader php7-xmlwriter
- previous version updates fixes also:
CVE-2020-7068,CVE-2020-7069,CVE-2020-7070,CVE-2020-7071,
CVE-2021-21702,CVE-2021-21704,CVE-2021-21705
bsc#1175223,bsc#1177351,bsc#1177352,bsc#1180706,
bsc#1182049,bsc#1188035,bsc#1188037
==== pidgin ====
Subpackages: libpurple libpurple-plugin-sametime libpurple-tcl
- Add pidgin-fix-double-free-crash.patch: fix double free crash
==== pim-data-exporter ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== pim-sieve-editor ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== pimcommon ====
Version update (21.08.1 -> 21.08.2)
Subpackages: libKF5PimCommon5 libKF5PimCommonAkonadi5
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== pinfo ====
- added -Wno-error=format to CPPFLAGS to avoid compilation errors
==== pipewire ====
Version update (0.3.37 -> 0.3.38)
Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-media-session pipewire-modules pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools
- Add patch from upstream to fix compilation on ARM (boo#1191600):
* 0001-fix-compilation-on-ARM.patch
- Update to version 0.3.38:
* Highlights
- Topic based logging was added to improve debugging.
- An off-by-one error was fixed in the audio resampler that could
cause distortion when downsampling.
- Various bluetooth compatibility improvements.
- More fixes and improvements.
* PipeWire
- module-pulse-tunnel now has better default latency to make it work
better in more cases. There is also an option to configure the
desired latency.
- pw-cli now has readline support.
- Topic based logging was added. Log lines can now be filtered by
topic using wildcards. This should improve debugging.
- The systemd service files should now have better descriptions.
- Fix a crash in module-zeroconf-discover when unloading.
- Fix a crash in filter-chain when using unaligned memory.
* ALSA
- Sync the udev rules and profiles with pulseaudio.
- Fix a memory leak.
* SPA plugins
- An off-by-one error was fixed in the resampler that could cause
distortion when downsampling. (#1646)
* Bluetooth
- Avoid probing the native backend because it might block for DBus
activation. This fixes some long startup times.
- Fix the kernel version check, 5.14.x kernels should also support
mSBC.
- Fix FastStream microphone support in more cases.
- Add workaround for Intel AX200.
- SCO sink should now also work in follower mode.
* PulseAudio server
- Make the service file require a session manager.
- Add BuildRequires: pkgconfig(readline) so pw-cli is built with
readline support
==== plasma-browser-integration ====
Version update (5.22.5 -> 5.23.1)
Subpackages: plasma-browser-integration-lang
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Add .git-blame-ignore-revs file
* Add pre-commit hook for clang-format
* Run clang-format
* Prevent clang-format uglification
* [purpose] Use ShareUrl plugin type instead of Export
* [History Runner] Request favicon with device pixel ratio
* Use version-less qt DBus macros
==== plasma-framework ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5Plasma5 plasma-framework-components plasma-framework-lang
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Too many changes since 5.86.0, only listing bugfixes:
* Revert "Change busywidget to a gear" (kde#442525)
* ExpandableListitem: Correct expanded view height calculation (kde#442537)
==== plasma-nm5 ====
Version update (5.22.5 -> 5.23.1)
Subpackages: plasma-nm5-lang plasma-nm5-openconnect plasma-nm5-openvpn plasma-nm5-pptp plasma-nm5-vpnc
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
* openconnect: Adjust version check in CMake and allow version 3.99 again
* openconnect widget: Default to "anyconnect" when protocol is not set.
* openconnect: Make FSID passphrase + empty private key combination work. (kde#443770)
* Only include mobileproviderstest with ModemManager
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* Remove applet list item animations
- Add new key + signature to plasma.keyring
- Drop hard requirement on NM-fortisslvpn for now to avoid
installcheck failure in staging
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here
==== plasma5-addons ====
Version update (5.22.5 -> 5.23.1)
Subpackages: plasma5-addons-lang
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* Make colors in color picker respond properly to right click and Menu key
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here
==== plasma5-desktop ====
Version update (5.22.5 -> 5.23.1)
Subpackages: plasma5-desktop-emojier
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
* Fix "clear emoji history" action (kde#443974)
* kickoff: Replace Kicker DragHelper with Qt Quick Drag (kde#443708)
* Make tooltip interactive when there is a player but no window is present (kde#443425)
* taskmanager: Disconnect from backend.showAllPlaces on destruction (kde#443820)
* Add systemsettings runner to hardcoded list of allowed runners for kicker (kde#443776)
* Folder View: Don't cancel multi-selection with right-click (kde#443743)
* [applets/kicker] Explicitly set visible property when opacity is 0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* [wayland] fix activity switching shortcut (Meta+Tab) (kde#443323)
* kickoff: Fix dragEnabled error for KickoffItemDelegates in singleton
* [applets/taskmanger] Do not overlay scrollbars over contents (kde#443173)
* kickoff: Fix null width/height error for some app grid view delegates
* kickoff: re-add drag and drop for favorites (kde#440308)
* kickoff: center align GridView
* kickoff: move isSearchDelegate binding to where search view is
* kickoff: simplify KickoffItemDelegate MouseArea anchor margins
* kickoff: fix hover changing index when moving between search and normal pages (kde#443076)
* kickoff: fix wrong activefocus being used in KickoffItemDelegate
* kickoff: Fix misspelled module qualifier
* Make clicking one item when multiple are selected deselect everything else (kde#424152)
* kcm_touchpad: fix translation for scroll speed setting slider
* Indicate when one of the thumbnails on the quick settings kcm has focus
* Check for currentApplet existence (kde#443287)
* KCM Touchpad: hide right and middle click sections when unavailable
* Open context menu under the cursor again (kde#443278)
* Adjust position of panel config bar when Enter is pressed (kde#443280)
* CompactApplet: Only draw separator line for panel applets (kde#439374)
* [keyboardlayout applet] fix non-working context menu (kde#441239)
* [Emojier] Set highlightMoveDuration to zero
* applets/kickoff: Improve list item touch targets and general aesthetics (kde#442661)
* Use Kirigami.Avatar in Kickoff Header bar (kde#442776)
* [kcms/activities] Fix QML i18n calls (kde#442514)
* kickoff: implement directional navigation
* kickoff: keep delegate highlight visible more often
* kickoff: Use attached tooltip for leave buttons
- Drop patches, now upstream:
* 0001-Use-Kirigami.Avatar-in-Kickoff-Header-bar.patch
- Add new key + signature to plasma.keyring
- Add patch to fix fallback user icon in Kickoff (kde#442776):
* 0001-Use-Kirigami.Avatar-in-Kickoff-Header-bar.patch
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here
==== plasma5-disks ====
Version update (5.22.5 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* add magnificent advanced data (kde#440486)
* actually start the reload timer :O
* don't require auth_admin for inactive sessions
* drop usless is directory check
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* Remove unneeded main.cpp
* Remove unneeded X-KDE-PluginKeyword
* search for smartctl in /usr/local/sbin as well
* don't notify on instabilities
* add pipeline for reuse compliance
* Use version-less qt DBus macros
* Remove not necessary qt prefix
==== plasma5-integration ====
Version update (5.22.5 -> 5.23.1)
Subpackages: plasma5-integration-plugin plasma5-integration-plugin-lang
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Backport "FileChooser portal: send window id in hex" from qtbase
* QXdgDesktopPortalFileDialog: use QUrl to store directory & selection
* More p-m-f connect() signal/slot syntax
* Use pointer-to-member-function signal/slot syntax
* Add pre-commit hook for clang-format
* Add .git-blame-ignore-revs file
* Run clang-format
* Add trailing commas
* Remove obsolete COPYING file
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* Make it compile without deprecated enum
* Convert license headers to SPDX
* Stop advertising titlebar "What's This?" help button
* Remove wayland roundtrip
* Use version-less qt DBus macros
==== plasma5-openSUSE ====
Subpackages: plasma5-defaults-openSUSE plasma5-theme-openSUSE plasma5-workspace-branding-openSUSE sddm-theme-openSUSE
- Update to 5.23.1
- Update to 5.23.0
- Update to 5.22.90
==== plasma5-pa ====
Version update (5.22.5 -> 5.23.1)
Subpackages: plasma5-pa-lang
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* [speakertest] Force canberra driver to PulseAudio (kde#442781)
* Fix a bug that caused the handle of the volume slider to show artifacts (kde#434927)
* Fix balance setting (kde#439751)
- Add supplements for pipewire-pulseaudio as well
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Add keywords to audio KCM
* Integrate the advanced options under `Configure...` in the main page
* Disable global mute when changing volume
* [kcm] Avoid string puzzle
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* Remove unneeded target
* [applet] Don't install as bundled package
* [ListItemBase] Open menu on press
* Remove unneeded X-KDE-PluginKeyword
* [applet] Only set VolumeMonitor object if it's valid
* Always disconnect streams (kde#439347)
* [applet] Fix QML error
* Use version-less qt DBus macros
* Use ellipses instead of triple period
* Set meta + mute as a default shortcut to mute the microphone
* Support multiple default shortcuts
* Fix crash when target is destroyed before monitor (kde#437184)
* Indicate when application is "corked" (kde#398476)
==== plasma5-systemmonitor ====
Version update (5.22.5 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* Avoid basing a preferredWidth on a currentWidth
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here
==== plasma5-thunderbolt ====
Version update (5.22.5 -> 5.23.1)
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Add keywords to Thunderbolt KCM
* Use version-less qt DBus macros
==== plasma5-workspace ====
Version update (5.22.5 -> 5.23.1)
Subpackages: gmenudbusmenuproxy plasma5-session plasma5-session-wayland plasma5-workspace-lang plasma5-workspace-libs xembedsniproxy
- Add back X11 root window properties until firefox is adjusted
(boo#1191825):
* 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
* 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
* [freespacenotifier] impr: no notification for ro filesystems
* kcms/colors: Don't apply header accent colors to non-Header color schemes (kde#443786)
* [kcms/colors] Notify global settings change after saving
* krdb: Fix removal of Xft.dpi from Xresources (kde#350039)
* sddm-theme: fix missing password field on "Other" page (kde#443737)
* pipewire: Report DRM_FORMAT_MOD_INVALID when no modifiers are offered
* [digital-clock] Do not assign undefined when agenda is not visible (kde#443380)
- Drop patches, now upstream:
* 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch
- Add patch to show password input on the "Other" page in SDDM (kde#443737):
* 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* Revert "xembed: adapt to changes in KNotifications" (kde#442758)
* sddm-theme: Fix using mouse movements to show the UI
* [systemtray] Check for menuItemFactory.object existence (kde#443377)
* applets/devicenotifier: Remove applet list item animations
* sddm-theme: Fix use of needsPassword and related button layout
* [klipper] Fix shortcut of OK button in the clipboard content edit dialog (kde#400623)
* Fix Kickoff context menu actions for System Settings results (kde#442522)
* klipper: Fix reading from plasma on wayland
* Fix build with gpsd 3.23.1
* Unbreak fontinst KCM (kde#442748)
* Address regression in VT switching code (kde#442852)
* libtaskmanager: Don't request dmabuf if not supported (kde#428284)
* Port away from Kirigami.Units.devicePixelRatio
* lookandfeel: don't nuke accent colour (kde#442812)
* kcm/colors: Improve some bindings on accent colors
* sddm-theme: fix default username font size
* PipeWire: Include defines for older PipeWire versions
* pipewire: Properly compare pipewire versions using QVersionNumber
* [Klipper] Guard against broken data fetches
* [Klipper] Handle incoming UTF-8 mime types (kde#424694)
* PipeWire: Make sure thumbnails properly use dmabuf again
* [shell/panel] Fix ability to type in textfield (kde#442557)
- Drop patches, now upstream:
* 0001-Fix-build-with-gpsd-3.23.1.patch
* 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
* 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch
* 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
* 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
* 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
* 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
* 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
* 0007-Klipper-Guard-against-broken-data-fetches.patch
* 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
* 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
* 0010-sddm-theme-fix-default-username-font-size.patch
* 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch
- Refresh 0001-Ignore-default-sddm-face-icons.patch
- Add new key + signature to plasma.keyring
- Add patch to fix build with gpsd:
* 0001-Fix-build-with-gpsd-3.23.1.patch
- Add patch to fix window thumbnails if dmabuf is not supported (kde#428284):
* 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch
- Add patches from Plasma/5.23 branch:
* 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
* 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
* 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
* 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
* 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
* 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
* 0007-Klipper-Guard-against-broken-data-fetches.patch
* 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
* 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
* 0010-sddm-theme-fix-default-username-font-size.patch
- Add patch to fix XEmbed context menus (kde#442758)
* 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Too many changes to list here
- Refresh patches:
* 0001-Revert-No-icons-on-the-desktop-by-default.patch
* 0001-Use-qdbus-qt5.patch
- Drop patches, now upstream:
* Call-UnInhibit-with-correct-signature-in-powermanagement-dataengine.patch
==== pmdk ====
Version update (1.11.0 -> 1.11.1)
Subpackages: libpmem1 libpmemobj1
- Update to PMDK 1.11.1
* Bugfixes:
* doc: remove exprimental moniker from libpmem2(7)
* common: fix missing sfence in non-temporal memcpy
* common: fix a mismatch between prototype and body
* common: fix mismatched function args
* obj: rename vars clashing with those of a containing block
* pmem2: don't force smaller alignment for fsdax mappings
* pool: don't trample upon users of localtime()
* rpmem: Fix RPMEM_RAW_BUFF_SIZE and LANE_ALIGN_SIZE for powerpc64le
==== polkit-default-privs ====
Version update (1550+20210818.b0c41fd -> 1550+20211008.9751669)
- drop backward compatibility symlink in /etc/polkit-default-privs.standard.
rpmlint 2.0 is now in Factory and the check there directly uses the profile
in /usr/etc/polkit-default-privs/profiles/standard.
- drop polkit-whitelisting sub-package. This is now handled in rpmlint 2.0
internally.
- Update to version 1550+20211008.9751669:
* whitelist power-profiles-daemon actions (bsc#1189900)
* cleanup: remove polkit-rules-whitelist.json
==== polkit-kde-agent-5 ====
Version update (5.22.5 -> 5.23.1)
Subpackages: polkit-kde-agent-5-lang
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- No code changes since 5.22.90
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* Clean up CMake code
* Build with QT_NO_KEYWORDS
* Use version-less qt DBus macros
* Remove obsolete COPYING file
* Add license information to non-copyrightable files
* Convert license headers to SPDX
==== poppler ====
Version update (21.08.0 -> 21.10.0)
Subpackages: libpoppler-cpp0 libpoppler-glib8 poppler-tools
- Update to 21.10.0:
core:
* Add support for setting custom stamp annotations
* Add default appearance for the well known stamp names
* Correct encoding of signature's properties Reason & Location
* Splash: Fix rendering of some odd patterns
* SignatureHandler::validateCertificate: Add option to not do OCSP revocation check
* SignatureHandler::validateCertificate: Add support for AIA fetching to verify certificates
* greallocn: if memory allocation fails, free the previous pointer to avoid memory leak
* Fix issues with malformed files
utils:
* pdfsig: Add a way to list certificate nicknames
* pdfsig: You can now add signatures from pdfsig
* pdfsig: Add option to not do OCSP revocation check
* pdfsig: Add option for AIA fetching to verify certificates
* pdfinfo: Add -custom option to print custom metadata
* pdfinfo: add metadata flags
qt:
* Add support for setting custom stamp annotations
* Add getters for signature's properties Reason & Location
glib:
* Remove incorrect PopplerAttachment deprecation
- Update to 21.09.0:
core:
* Splash: Massive speed improvement on files that use lots of save/restore (q/Q) operators
* Correct decoding of signature properties Reason & Location when they are Unicode
* Fix issues with malformed files
==== poppler-qt5 ====
Version update (21.08.0 -> 21.10.0)
- Update to 21.10.0:
core:
* Add support for setting custom stamp annotations
* Add default appearance for the well known stamp names
* Correct encoding of signature's properties Reason & Location
* Splash: Fix rendering of some odd patterns
* SignatureHandler::validateCertificate: Add option to not do OCSP revocation check
* SignatureHandler::validateCertificate: Add support for AIA fetching to verify certificates
* greallocn: if memory allocation fails, free the previous pointer to avoid memory leak
* Fix issues with malformed files
utils:
* pdfsig: Add a way to list certificate nicknames
* pdfsig: You can now add signatures from pdfsig
* pdfsig: Add option to not do OCSP revocation check
* pdfsig: Add option for AIA fetching to verify certificates
* pdfinfo: Add -custom option to print custom metadata
* pdfinfo: add metadata flags
qt:
* Add support for setting custom stamp annotations
* Add getters for signature's properties Reason & Location
glib:
* Remove incorrect PopplerAttachment deprecation
- Update to 21.09.0:
core:
* Splash: Massive speed improvement on files that use lots of save/restore (q/Q) operators
* Correct decoding of signature properties Reason & Location when they are Unicode
* Fix issues with malformed files
==== postfix ====
Subpackages: postfix-doc
- Ensure postfix can write to home directory or server side
filtering wont work (sieve)
- Ensure service can write to /etc/postfix
- Added hardening to systemd service (bsc#1181400). Added
harden_postfix.service.patch
- config.postfix not updatet after lmdb switch
(bsc#1190945)
Adapt config.postfix
==== postgresql ====
Version update (13 -> 14)
Subpackages: postgresql-contrib postgresql-docs postgresql-llvmjit postgresql-server
- Bump version and default to 14.
==== postgresql14 ====
Version update (13.4 -> 14.0)
- Let genlists skip non-existing binaries to avoid lots of version
conditionals in the file lists.
- Remove postgresql-testsuite-int8.sql.patch, because its purpose
is unclear. This affects only the test subpackage.
- Upgrade to 14.0
https://www.postgresql.org/about/news/postgresql-14-released-2318/
https://www.postgresql.org/docs/14/release-14.html
- Let genlists skip non-existing binaries to avoid lots of version
conditionals in the file lists.
- Upgrade to 14~rc1
https://www.postgresql.org/about/news/postgresql-14-rc-1-released-2309/
https://www.postgresql.org/docs/14/release-14.html
https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items
- Upgrade to 14~beta2
https://www.postgresql.org/about/news/postgresql-14-beta-2-released-2249/
https://www.postgresql.org/docs/14/release-14.html
https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items
- Upgrade to 14~beta1
https://www.postgresql.org/about/news/postgresql-14-beta-1-released-2213/
https://www.postgresql.org/docs/14/release-14.html
https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items
- disable postgresql-testsuite-int8.sql.patch:
it seems it is not needed anymore, need to be double checked.
- bsc#1185952: llvm12 breaks PostgreSQL 11 and 12 on s390x.
Use llvm11 as a workaround.
- Upgrade to version 13.3:
* https://www.postgresql.org/docs/13/release-13-3.html
* CVE-2021-32027, bsc#1185924:
Prevent integer overflows in array subscripting calculations.
* CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
columns in INSERT ... ON CONFLICT ... UPDATE target lists.
* CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
computation of UPDATE ... RETURNING
"pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
and got removed from openSUSE. %_restart_on_update is also
private, but still supported and needed for now (bsc#1183168).
- Re-enable build of the llvmjit subpackage on SLE, but it will
only be delivered on PackageHub for now (boo#1183118).
- Remove leftover PreReq on chkconfig, we stopped using it long
time ago.
- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.
- Upgrade to version 13.2:
* https://www.postgresql.org/docs/13/release-13-2.html
* Updating stored views and reindexing might be needed after
applying this update.
* CVE-2021-3393, bsc#1182040: Fix information leakage in
constraint-violation error messages.
* CVE-2021-20229, bsc#1182039: Fix failure to check per-column
SELECT privileges in some join queries.
* Obsoletes postgresql-icu68.patch.
- Add postgresql-icu68.patch: fix build with ICU 68
- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
them to avoid dangling symlinks in the devel package.
- Upgrade to version 13.1:
* CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
and firing of deferred triggers within index expressions and
materialized view queries.
* CVE-2020-25694, bsc#1178667:
a) Fix usage of complex connection-string parameters in pg_dump,
pg_restore, clusterdb, reindexdb, and vacuumdb.
b) When psql's \connect command re-uses connection parameters,
ensure that all non-overridden parameters from a previous
connection string are re-used.
* CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
modifying specially-treated variables.
* Fix recently-added timetz test case so it works when the USA
is not observing daylight savings time.
(obsoletes postgresql-timetz.patch)
* https://www.postgresql.org/about/news/2111/
* https://www.postgresql.org/docs/13/release-13-1.html
- Fix a DST problem in the test suite: postgresql-timetz.patch
https://postgr.es/m/16689-57701daa23b377bf@postgresql.org
- Initial packaging of PostgreSQL 13:
* https://www.postgresql.org/about/news/2077/
* https://www.postgresql.org/docs/13/release-13.html
==== powerdevil5 ====
Version update (5.22.5 -> 5.23.1)
Subpackages: powerdevil5-lang
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* Clear alwaysActionBox before filling (kde#443114)
* Remove inappropriate low maximum width for spinboxes (kde#442556)
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Add keywords to power KCMs
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* powerprofiles: Add support for ProfileHolds
* powerprofiles: expose PerformanceDegraded property
* Fix crash if dbus call finishes before we have a valid config group (kde#440338)
* Handle DBus call finishing before buildUI is called (kde#440223)
* Integrate power-profiles daemon
* Use version-less qt DBus macros
* Use ellipses instead of triple period
==== prison-qt5 ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5Prison5 prison-qt5-imports
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Select the most efficient QR encoding mode rather than always using 8bit
* Only build and run datamatrixtest if libdmtx is available
==== privoxy ====
- Revert privoxy-nopcreposix.patch because of bsc#1184945.
==== publicsuffix ====
Version update (20210928 -> 20211016)
- Update to version 20211016:
* Fix sorting of One.com domains
* Add siiites.com (#1416)
* Add ts.net and beta.tailscale.net domains. (#1453)
* Revise Sorting for Cape Verde (.cv)
* Update public_suffix_list.dat (#1456)
* updated email address (#1450)
* util: gTLD data autopull updates for 2021-10-08T15:12:46 UTC (#1451)
* add ip.linodeusercontent.com (#1448)
* Adding upli.io (#1446)
* added tickets.io (#1429)
* util: gTLD data autopull updates for 2021-10-07T15:11:34 UTC (#1449)
* util: gTLD data autopull updates for 2021-10-06T15:12:57 UTC (#1447)
- Update to version 20211006:
* Update Pull Request Template to add clarity
* util: gTLD data autopull updates for 2021-10-01T15:13:10 UTC (#1445)
==== pulseaudio ====
Subpackages: libpulse-mainloop-glib0 libpulse0 pulseaudio-bash-completion pulseaudio-gdm-hooks pulseaudio-module-bluetooth pulseaudio-module-gsettings pulseaudio-module-x11 pulseaudio-module-zeroconf pulseaudio-utils pulseaudio-zsh-completion
- Make system-user-pulse noarch
- Split sysusers.d file to separate package as needed by brltty
(bsc#1191465)
==== purpose ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5Purpose5 libKF5PurposeWidgets5 purpose-lang
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* plugins/barcode: Call it a "QR code" in the UI
* Add Barcode plugin
==== python-Jinja2 ====
Version update (3.0.1 -> 3.0.2)
- dropped obsolete no-warnings-as-errors.patch
- update to 3.0.2
* Fix a loop scoping bug that caused assignments in nested loops to still
be referenced outside of it. #1427
* Make compile_templates deterministic for filter and import names. #1452, #1453
* Revert an unintended change that caused Undefined to act like
StrictUndefined for the in operator. #1448
* Imported macros have access to the current template globals in async
environments. #1494
* PackageLoader will not include a current directory (.) path segment.
This allows loading templates from the root of a zip import. #1467
==== python-alembic ====
Version update (1.6.5 -> 1.7.4)
- update to 1.7.4:
* Fixed a regression that prevented the use of post write hooks on python
version lower than 3.9
* Added missing attributes from context stubs.
* Fixed issue where registration of custom ops was prone to failure due to
the registration process running exec() on generated code that as of the
1.7 series includes pep-484 annotations, which in the case of end user code
would result in name resolution errors when the exec occurs
- specfile:
* skip python 2 builds
* require importlib-resources
- update to version 1.7.1:
* Corrected "universal wheel" directive in setup.cfg so that
building a wheel does not target Python 2. The PyPi files index
for 1.7.0 was corrected manually. Pull request courtesy layday.
* Fixed issue in generated .pyi files where default values for
"Optional" arguments were missing, thereby causing mypy to
consider them as required.
* Fixed regression in batch mode due to :ticket:`883` where the
"auto" mode of batch would fail to accommodate any additional
migration directives beyond encountering an "add_column()"
directive, due to a mis-application of the conditional logic that
was added as part of this change, leading to "recreate" mode not
being used in cases where it is required for SQLite such as for
unique constraints.
- changes from version 1.7.0:
* Fixed regression due to :ticket:`803` where the ".info" and
".comment" attributes of "Table" would be lost inside of the
:class:`.DropTableOp` class, which when "reversed" into a
:class:`.CreateTableOp` would then have lost these elements. Pull
request courtesy Nicolas CANIART.
* Enhance "version_locations" parsing to handle paths containing
spaces. The new configuration option "version_path_separator"
specifies the character to use when splitting the
"version_locations" string. The default for new configurations is
"version_path_separator = os", which will use "os.pathsep" (e.g.,
";" on Windows).
* Alembic 1.7 now supports Python 3.6 and above; support for prior
versions including Python 2.7 has been dropped.
* Batch "auto" mode will now select for "recreate" if the
"add_column()" operation is used on SQLite, and the column itself
meets the criteria for SQLite where ADD COLUMN is not allowed, in
this case a functional or parenthesized SQL expression or a
"Computed" (i.e. generated) column.
* Make the "python-dateutil" library an optional dependency. This
library is only required if the "timezone" option is used in the
Alembic configuration. An extra require named "tz" is available
with "pip install alembic[tz]" to install it.
* Re-implemented the "python-editor" dependency as a small internal
function to avoid the need for external dependencies.
* Named CHECK constraints are now supported by batch mode, and will
automatically be part of the recreated table assuming they are
named. They also can be explicitly dropped using
"op.drop_constraint()". For "unnamed" CHECK constraints, these are
still skipped as they cannot be distinguished from the CHECK
constraints that are generated by the "Boolean" and "Enum"
datatypes. Note that this change may require adjustments to
migrations that drop or rename columns which feature an associated
named check constraint, such that an additional
"op.drop_constraint()" directive should be added for that named
constraint as there will no longer be an associated column for it;
for the "Boolean" and "Enum" datatypes, an "existing_type" keyword
may be passed to "BatchOperations.drop_constraint" as well.
* The dependency on "pkg_resources" which is part of "setuptools"
has been removed, so there is no longer any runtime dependency on
"setuptools". The functionality has been replaced with
"importlib.metadata" and "importlib.resources" which are both part
of Python std.lib, or via pypy dependency "importlib-metadata" for
Python version < 3.8 and "importlib-resources" for Python version
< 3.9 (while importlib.resources was added to Python in 3.7, it
did not include the "files" API until 3.9).
* Created a "test suite" similar to the one for SQLAlchemy, allowing
developers of third-party dialects to test their code against a
set of Alembic tests that have been specially selected to exercise
back-end database operations. At the time of release, third-party
dialects that have adopted the Alembic test suite to verify
compatibility include `CockroachDB
<https://pypi.org/project/sqlalchemy-cockroachdb/>`_ and `SAP ASE
(Sybase) <https://pypi.org/project/sqlalchemy-sybase/>`_.
* Fixed issue where usage of the PostgreSQL "postgresql_include"
option within a :meth:`.Operations.create_index` would raise a
KeyError, as the additional column(s) need to be added to the
table object used by the construct internally. The issue is
equivalent to the SQL Server issue fixed in :ticket:`513`. Pull
request courtesy Steven Bronson.
* pep-484 type annotations have been added throughout the library.
Additionally, stub .pyi files have been added for the
"dynamically" generated Alembic modules "alembic.op" and
"alembic.config", which include complete function signatures and
docstrings, so that the functions in these namespaces will have
both IDE support (vscode, pycharm, etc) as well as support for
typing tools like Mypy. The files themselves are statically
generated from their source functions within the source tree.
==== python-apipkg ====
Version update (1.5 -> 2.1.0)
- Update to v2.1.0
* fix race condition for import of modules using apipkg.initpkg
in Python 3.3+ by updating existing modules in-place rather
than replacing in sys.modules with an apipkg.ApiModule
instances. This race condition exists for import statements
(and __import__) in Python 3.3+ where sys.modules is checked
before obtaining an import lock, and for
importlib.import_module in Python 3.11+ for the same reason.
- Release 2.0.1
* fix race conditions for attribute creation
- Release 2.0.0
* also transfer __spec__ attribute
* make py.test hack more specific to avoid hiding real errors
* switch from Travis CI to GitHub Actions
* modernize package build
* reformat code with black
- Drop pytest4.patch
==== python-cachetools ====
Version update (4.2.2 -> 4.2.4)
- update to 4.2.4:
- Add submodule shims for backward compatibility.
- Add documentation and tests for using ``TTLCache`` with
``datetime``.
- Link to typeshed typing stubs.
- Flatten package file hierarchy.
==== python-click ====
Version update (8.0.1 -> 8.0.3)
- update to 8.0.3:
* Fix issue with ``Path(resolve_path=True)`` type creating invalid
paths. :issue:`2088`
* Importing ``readline`` does not cause the ``confirm()`` prompt to
disappear when pressing backspace. :issue:`2092`
* Any default values injected by ``invoke()`` are cast to the
corresponding parameter's type. :issue:`2089, 2090`
* ``is_bool_flag`` is not set to ``True`` if ``is_flag`` is ``False``.
* Bash version detection is locale independent. :issue:`1940`
* Empty ``default`` value is not shown for ``multiple=True``.
* Fix shell completion for arguments that start with a forward slash
such as absolute file paths. :issue:`1929`
* ``Path`` type with ``resolve_path=True`` resolves relative symlinks
to be relative to the containing directory. :issue:`1921`
* Completion does not skip Python's resource cleanup when exiting,
avoiding some unexpected warning output. :issue:`1738, 2017`
* Fix type annotation for ``type`` argument in ``prompt`` function.
* Fix overline and italic styles, which were incorrectly added when
adding underline. :pr:`2058`
* An option with ``count=True`` will not show "[x>=0]" in help text.
* Default values are not cast to the parameter type twice during
processing.
* Options with ``multiple`` and ``flag_value`` use the flag value
instead of leaving an internal placeholder.
==== python-decorator ====
Version update (5.0.9 -> 5.1.0)
- update to 5.1.0:
* Added a function `decoratorx` using the `FunctionMaker` and thus
preserving the signature of `__code__` objects.
* Sphinx was printing a few warnings when building the documentation
* functions decorated with `decorator.contextmanager` were one-shot,
as discovered by Alex Pizarro.
* `decorator.decorator` was not passing the kwsyntax argument.
- drop kwsyntax.patch (usptream)
==== python-distro ====
- Expliciting setting of locale is not necessary anymore
(gh#python-distro/distro#223).
==== python-ecdsa ====
Version update (0.16.1 -> 0.17.0)
- Update to 0.17.0
* Keys that use explicit curve parameters can now be read and written.
Reading of explicit curves can be disabled by using the
`valid_curve_encodings` keyword argument in `VerifyingKey.from_pem()`,
`VerifyingKey.from_der()`, `SigningKey.from_pem()`, and
`SigningKey.from_der()`.
* Keys can now be written with use of explicit curve parameters,
use `curve_parameters_encoding` keyword argument of `VerifyingKey.to_pem()`,
`VerifyingKey.to_der()`, `SigningKey.to_pem(), or `SigningKey.to_der()` to
specify the format. By default `named_curve` will be used, unless the
curve doesn't have an associated OID (as will be the case for an unsupported
curve), then `explicit` encoding will be used.
* Allow specifying acceptable point formats when loading public keys
(this also fixes a minor bug where python-ecdsa would accept raw
encoding for points in PKCS#8 files). Set of accepted encodings is controlled
by `valid_encodings` keyword argument in
`ECDH.load_received_public_key_bytes()`, `VerifyingKey.from_string()`,
`VerifyingKey.from_pem()`, VerifyingKey.from_der()`.
* `PointJacobi` and `Point` now inherit from `AbstractPoint` that implements
the methods for parsing points. That added `from_bytes()` and
`to_bytes()` methods to both of them.
* Curve parameters can now be read and written to PEM and DER files. The
`Curve` class supports new `to_der()`, `from_der()`, `to_pem()`, and
`from_pem()` methods.
* Describe in detail which methods can raise `RSZeroError`, and that
`SigningKey.sign_deterministic()` won't raise it.
* Correctly truncate hash values larger than the curve order (only impacted
custom curves and the curves added in this release).
* Correctly handle curves for which the order is larger than the prime
(only impacted custom curves and the secp160r1 curve added in this release).
* Fix the handling of `==` and `!=` for `Public_key`, `Private_key`, `Point`,
`PointJacobi`, `VerifyingKey`, and `SigningKey` so that it behaves
consistently and in the expected way both in Python 2 and Python 3.
* Implement lock-less algorithm inside PointJacobi for keeping shared state
so that when a calculation is aborted with KeyboardInterrupt, the state
doesn't become corrupted (this fixes the occasional breakage of ecdsa in
interactive shells).
* The `speed.py` script now provides performance for signature verification
without the use of precomputation.
* New curves supported: secp112r1, secp112r2, secp128r1, secp160r1.
* Use 2-ary Non-Adjacent Form for the combined multiply-add. This speeds up
single-shot verify (i.e. without precomputation) by about 4 to 5%.
* Use native Python 3.8 support for calculating multiplicative inverses.
* Include Python 3.9 in PyPI keywords.
* More realistic branch coverage counting (ignore Python version-specific
branches).
* Additional test coverage to many parts of the library.
* Migrate to Github Actions for Continuous Testing.
==== python-greenlet ====
Version update (1.1.0 -> 1.1.2)
- update to 1.1.2:
- Fix a potential crash due to a reference counting error when Python
subclasses of ``greenlet.greenlet`` were deallocated. The crash
became more common on Python 3.10; on earlier versions, silent
memory corruption could result.
- Fix a leak of a list object when the last reference to a greenlet
was deleted from some other thread than the one to which it
belonged. For this to work correctly, you must call a greenlet API
like ``getcurrent()`` before the thread owning the greenlet exits:
this is a long-standing limitation that can also lead to the leak of
a thread's main greenlet if not called; we hope to lift this
limitation. Note that in some cases this may also fix leaks of
greenlet objects themselves. See `issue 251
- Python 3.10: Tracing or profiling into a spawned greenlet didn't
work as expected. See `issue 256
==== python-idna ====
Version update (3.2 -> 3.3)
- update to 3.3:
- Update to Unicode 14.0.0
- Update to in-line type annotations
- Throw IDNAError exception correctly for some malformed input
- Advertise support for Python 3.10
- Improve testing regime on Github
- Fix Russian typo in documentation
==== python-libvirt-python ====
Version update (7.7.0 -> 7.8.0)
- Update to 7.8.0
- Add all new APIs and constants in libvirt 7.8.0
- jsc#SLE-18260
==== python-more-itertools ====
Version update (8.8.0 -> 8.10.0)
- update to 8.10.0:
* The type stub for :func:`iter_except` was improved (thanks to MarcinKonowalczyk)
* Type stubs now ship with the source release (thanks to saaketp)
* The Sphinx docs were improved (thanks to MarcinKonowalczyk)
* New functions
* :func:`interleave_evenly` (thanks to mbugert)
* :func:`repeat_each` (thanks to FinalSh4re)
* :func:`chunked_even` (thanks to valtron)
* :func:`map_if` (thanks to sassbalint)
* :func:`zip_broadcast` (thanks to kalekundert)
* Changes to existing functions
* The type stub for :func:`chunked` was improved (thanks to PhilMacKay)
* The type stubs for :func:`zip_equal` and `zip_offset` were improved (thanks to maffoo)
* Building Sphinx docs locally was improved (thanks to MarcinKonowalczyk)
==== python-networkx ====
Version update (2.6.1 -> 2.6.3)
- update to 2.6.3:
* Fix modularity functions (gh#networkx/networkx#5072)
* CI/MAINT: drop gdal tests (gh#networkx/networkx#5068)
* modularity_max: provide labels to get_edge_data (gh#networkx/networkx#4965)
* Improvements to greedy_modularity_community (gh#networkx/networkx#4996)
* use weight arg instead of 'weight' key at greedy_modularity_communities()
* modularity_max: breaking the loop when given community size is reached (gh#networkx/networkx#4950)
* modularity_max: allow input of desired number of communities
* greedy_modularity_communities with digraphs and multi(di)graphs (gh#networkx/networkx#5007) (gh#networkx/networkx#5007)
* Allow greedy_modularity_communities to use floating point weights or resolution (gh#networkx/networkx#5065)
* change i,j,k notation to u,v,w (no indexes since gh#networkx/networkx#5007)
==== python-outcome ====
Version update (1.0.1 -> 1.1.0)
- update to version 1.1.0
* Tweaked the implementation of Error.unwrap to avoid creating a
reference cycle between the exception object and the unwrap
method's frame. This shouldn't affect most users, but it
slightly reduces the amount of work that CPython's cycle
collector has to do, and may reduce GC pauses in some cases. (#29)
* Drop support for Python 2.7, 3.4, and 3.5. (#27)
==== python-psycopg2 ====
Version update (2.8.6 -> 2.9.1)
- Update to 2.9.1
- Fix regression with named `sql.Placeholder` (:ticket:`1291`).
- Update to 2.9.0
- ``with connection`` starts a transaction on autocommit transactions too
(:ticket:`#941`).
- Timezones with fractional minutes are supported on Python 3.7 and following
(:ticket:`#1272`).
- Escape table and column names in `~cursor.copy_from()` and `~cursor.copy_to()`.
- Connection exceptions with sqlstate ``08XXX`` reclassified as
`~psycopg2.OperationalError` (a subclass of the previously used
`~psycopg2.DatabaseError`) (:ticket:`#1148`).
- Include library dirs required from libpq to work around MacOS build problems
(:ticket:`#1200`).
- Dropped support for Python 2.7, 3.4, 3.5 (:ticket:`#1198, #1000, #1197`).
- Dropped support for mx.DateTime.
- Use `datetime.timezone` objects by default in datetime objects instead of
`~psycopg2.tz.FixedOffsetTimezone`.
- The `psycopg2.tz` module is deprecated and scheduled to be dropped in the
next major release.
- Provide :pep:`599` wheels packages (manylinux2014 tag) for i686 and x86_64
platforms.
- Provide :pep:`600` wheels packages (manylinux_2_24 tag) for aarch64 and
ppc64le platforms.
- Wheel package compiled against OpenSSL 1.1.1k and PostgreSQL 13.3.
- Build system for Linux/MacOS binary packages moved to GitHub action.
==== python-pycryptodome ====
Version update (3.10.1 -> 3.11.0)
- update to 3.11.0:
* GH#512: Especially for very small bit sizes, ``Crypto.Util.number.getPrime()`` was
occasionally generating primes larger than given the bit size.
* GH#552: Correct typing annotations for ``PKCS115_Cipher.decrypt()``.
* GH#555: ``decrypt()`` method of a PKCS#1v1.5 cipher returned a ``bytearray`` instead of ``bytes``.
* GH#557: External DSA domain parameters were accepted even when the modulus (``p``) was not prime.
This affected ``Crypto.PublicKey.DSA.generate()`` and ``Crypto.PublicKey.DSA.construct()``.
* Added cSHAKE128 and cSHAKE256 (of SHA-3 family).
* GH#558: The flag RTLD_DEEPBIND passed to ``dlopen()`` is not well supported by
`address sanitizers <https://github.com/google/sanitizers/issues/611>`_.
It is now possible to set the environment variable ``PYCRYPTDOME_DISABLE_DEEPBIND``
to drop that flag and allow security testing.
==== python-pygit2 ====
Version update (1.3.0 -> 1.7.0)
- Update to 1.7.0:
- Upgrade to libgit2 1.3.0
- Add support for Python 3.10
- Drop support for Python 3.6
- New `pygit2.GIT_CHECKOUT_SKIP_LOCKED_DIRECTORIES`
- New optional argument ``location`` in
``Repository.applies(..)`` and ``Repository.apply(..)``
- Fix: Now the `flags` argument in `Repository.blame()` is
passed through
- CI: Stop using Travis, move to GitHub actions
- Fix a number of reference leaks
- Review custom object backends
- In custom backends the callbacks have been renamed from ``read`` to
``read_cb``, ``write`` to ``write_cb``, and so on.
- New optional ``proxy`` argument in ``Remote`` methods
- New GIT_MERGE_PREFERENCE constants
- Don't require cached-property with Python 3.8 or later
- Refactored build and CI, new ``build.sh`` script
- Remove deprecated ``GIT_CREDTYPE_XXX`` contants, use
``GIT_CREDENTIAL_XXX`` instead.
- Remove deprecated ``Patch.patch`` getter, use ``Patch.text``
instead.
- New ``PackBuilder`` class and ``Repository.pack(...)``
- New ``Config.delete_multivar(...)``
- New ``Repository.is_shallow``
- New optional ``message`` argument in
``Repository.create_reference(...)``
- Fix truncated diff when there are nulls
- Fix ``Index.add(...)`` raise ``TypeError`` instead of
``AttributeError`` when arguments are of unexpected type
- Upgrade to libgit2 1.1, new ``GIT_BLAME_IGNORE_WHITESPACE`` constant
- Drop support for PyPy3 7.2
- New optional ``flags`` argument in ``Repository.__init__(...)``,
new ``GIT_REPOSITORY_OPEN_*`` constants
- Remove upstreamed libgit2_1.patch.
==== python-pygraphviz ====
Version update (1.6 -> 1.7)
- Update to 1.7:
- Drop Python 3.6 support
- Add Python 3.9 support
- Require Graphviz 2.42+, (Graphviz 2.46+ recommended)
- Improve installation process and documentation
- Switch from nose to pytest
- Remove old Python 2 code
- AGraph.eq includes attribute comparison (PR #246)
==== python-pytz ====
Version update (2021.1 -> 2021.3)
- update to 2021.3
* matches tzdata 2021c
==== python-qt5 ====
Version update (5.15.4 -> 5.15.5)
- Update to v5.15.5
* Added the missing QPdfWriter.setPageSize() overload.
* pylupdate5 now assumes that the default codec is UTF-8 and
specified v2.1
as the .ts file format.
* Bug fixes.
- Silence some rpmlint errors
==== python-urwid ====
- %check: use %pyunittest rpm macro
==== python-zipp ====
Version update (3.5.0 -> 3.6.0)
- update to 3.6.0:
* Only ``Path`` is exposed in the public API.
* Remove news file intended only for CPython.
==== python-zope.hookable ====
Version update (5.0.1 -> 5.1.0)
- update to version 5.1.0
- Add support for Python 3.9.
- Create Linux aarch64 wheels.
- %check: use %pyunittest rpm macro
- added sources
+ _multibuild
==== python-zope.i18nmessageid ====
- %check: use %pyunittest rpm macro
- added sources
+ _multibuild
==== python-zope.interface ====
- %check: use %pyunittest rpm macro
- added sources
+ _multibuild
==== qemu ====
Subpackages: qemu-accel-qtest qemu-accel-tcg-x86 qemu-arm qemu-audio-spice qemu-block-curl qemu-block-dmg qemu-block-gluster qemu-block-iscsi qemu-block-nfs qemu-block-rbd qemu-block-ssh qemu-chardev-baum qemu-chardev-spice qemu-guest-agent qemu-hw-display-qxl qemu-hw-display-virtio-gpu qemu-hw-display-virtio-gpu-pci qemu-hw-display-virtio-vga qemu-hw-usb-host qemu-hw-usb-redirect qemu-hw-usb-smartcard qemu-ipxe qemu-ksm qemu-lang qemu-microvm qemu-ppc qemu-s390x qemu-seabios qemu-sgabios qemu-skiboot qemu-tools qemu-ui-curses qemu-ui-gtk qemu-ui-opengl qemu-ui-spice-app qemu-ui-spice-core qemu-vgabios qemu-vhost-user-gpu qemu-x86
- Stable fixes from upstream
* Patches added:
block-introduce-max_hw_iov-for-use-in-sc.patch
hmp-Unbreak-change-vnc.patch
qemu-nbd-Change-default-cache-mode-to-wr.patch
target-arm-Don-t-skip-M-profile-reset-en.patch
vhost-vsock-fix-migration-issue-when-seq.patch
virtio-mem-pci-Fix-memory-leak-when-crea.patch
virtio-net-fix-use-after-unmap-free-for-.patch
==== qqc2-desktop-style ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Properly get the path from a QUrl
* Port away from devicePixelRatio
* MenuSeparator: fix height being wrong, rewrite whole file to be more correct
* Button, ToolButton: improve implicit sizing, correctly set default button state
* Use more process-working-symbolic icon for busy spinner
==== raspberrypi-firmware ====
Version update (2021.03.10 -> 2021.09.30)
- Update to b5257da58c (2021-09-30):
* firmware: arm_loader: Allow non-optional reads of current clock
See: #1619
* firmware: dispmanx: Demote null eptr from vcos_verify to no warning
See: raspberrypi/linux#4592
* firmware: filesystem: sdcard: Probe FAT type in GPT ESD partitions
* firmware: tvservice: Add check to warn when running with kms
* firmware: filesystem: sdcard: Fix Hybrid GPT partitions
See: #1465
* firmware: video_decode: Ensure all buffers are flushed before
port disable completes
* firmware: arm_loader: Allow hvs interrupt during SET_NOTIFY_DISPLAY_DONE
* firmware: arm_display: Allow null buffer in successful call
See: raspberrypi/linux#4540
- Update to b80f36b3fb (2021-09-13):
* firmware: hdmi_2711: Use HDMI block REPEAT_PIXEL instead of PV
See: https://forum.libreelec.tv/thread/24415-le-10-beta-for-i4-force-hdmi-resolu…
* firmware: DSI display autodetection for kms
* firmware: arm_dt: Load overlays for detected cameras
* firmware: Make more use of the user-warnings DT property
* firmware: arm_loader: Consider required flags from GET_CLOCK_RATE
See: #1598
* firmware: arm_loader: Make most arm clock requests required
See: #1598
* firmware: firmware: Disable VLL loading from file system
See: #1605
* firmware: video_decode: Use the ISP instead of vc_image_convert
* firmware: video_decode: Correct support for YVU formats using ISP
* firmware: arm_dt: Limit CMA to 256MB if total_mem < 2GB or gpu_mem > 256MB
See: #1603
* firmware: hdmi_cec: Remove TX/RX SW_INIT on power_on
See: Hexxeh/rpi-firmware#267
See: https://www.raspberrypi.org/forums/viewtopic.php?p=1895082#p1895082
* firmware: cec: Avoid sending messages with kms
See: raspberrypi/linux#4460
* firmware: Revert: video_decode: Use the ISP instead of vc_image_convert
* firmware: isp: Set the YUV420/YVU420 format stride to 64 byte
* arm_loader: Add message to release firmware framebuffer
* firmware: video_decode: Use the ISP instead of vc_image_convert
* firmware: hdmi-2711: Wait for HDMI hardware scheduler to activate in HDMI mode
* firmware: bcm_host: Recognise all Pi 4 variants, add BCM2711
See: raspberrypi/userland#695
* firmware: PoE+ HAT support
See: raspberrypi/linux#4367
* firmware: arm_loader: Use Pi4 bootloader MAC_ADDRESS if set
* firmware: platform: Apply ARM thermal throttling rules on BCM2711
* firmware: dt-blob.dts: Correct HDMI HPD and EMMC_ENABLE for CM4
See: https://www.raspberrypi.org/forums/viewtopic.php?f=29&p=1858516
* firmware: vcfw/hdmi: CUSTOM modes used for FKMS didn't set RGB quant range correctly
See: #1580
* firmware: platform: Remove build-time constant for MICROVOLTS_PER_PIP
* firmware: Pi400: Reduce MII clock freq when probing ethernet PHY
* firmware: isp: Ensure the VRF is locked when setting up video colour denoise
See: raspberrypi/libcamera-apps#19
* firmware: isp: Remove custom EV mappings from camera tunings
* firmware: Add support for board-type=0xXX conditional filters in bootloader, bootcode and firmware
* firmware: Two UART1 patches
See: #1566
* firmware: arm_loader: kernel_old=1 should force kernel_address=0
See: #1561
* firmware: scalerlib: Fix offset applied to x coordinate of YUV10COL image
See: https://forum.kodi.tv/showthread.php?tid=361164&pid=3024654#pid3024654
* firmware: vcfw/power: Add a new latch for power_pad_control
See: #1552
* firmware: board-info: Fix memsize on 3B+
* firmware: Move core to PLLA and support accurate clk108
See: xbmc/xbmc#19263
* firmware: board_info: Separate memory size from OTP field encoding
* firmware: power: Swap DA9090 ADC assignments to match XR77004
* firmware: vl805: Remove redundant log statement and fix warning
* firmware: power: Fix DA9090 ADC1 register definition
* firmware: arm_loader: Only report clocks arm has set, not siblings
* firmware: arm_loader: Don't report clocks set as turbo side effect of arm clock
* firmware: arm_loader: 2711: gpu clocks are not dependant
* firmware: platform: Need to clear cached versions of get_max_clock_internal vars
* firmware: video_decode: For VC1/WMV with no signalled header bytes, use start of 1st buffer
See: raspberrypi/linux#4113
- Use smbios overlay to get minimal SMBIOS information through dmidecode (bsc#1183079)
==== raspberrypi-firmware-config ====
Version update (2021.03.10 -> 2021.09.30)
- Update to b5257da58c (2021-09-30):
* firmware: arm_loader: Allow non-optional reads of current clock
See: #1619
* firmware: dispmanx: Demote null eptr from vcos_verify to no warning
See: raspberrypi/linux#4592
* firmware: filesystem: sdcard: Probe FAT type in GPT ESD partitions
* firmware: tvservice: Add check to warn when running with kms
* firmware: filesystem: sdcard: Fix Hybrid GPT partitions
See: #1465
* firmware: video_decode: Ensure all buffers are flushed before
port disable completes
* firmware: arm_loader: Allow hvs interrupt during SET_NOTIFY_DISPLAY_DONE
* firmware: arm_display: Allow null buffer in successful call
See: raspberrypi/linux#4540
- Update to b80f36b3fb (2021-09-13):
* firmware: hdmi_2711: Use HDMI block REPEAT_PIXEL instead of PV
See: https://forum.libreelec.tv/thread/24415-le-10-beta-for-i4-force-hdmi-resolu…
* firmware: DSI display autodetection for kms
* firmware: arm_dt: Load overlays for detected cameras
* firmware: Make more use of the user-warnings DT property
* firmware: arm_loader: Consider required flags from GET_CLOCK_RATE
See: #1598
* firmware: arm_loader: Make most arm clock requests required
See: #1598
* firmware: firmware: Disable VLL loading from file system
See: #1605
* firmware: video_decode: Use the ISP instead of vc_image_convert
* firmware: video_decode: Correct support for YVU formats using ISP
* firmware: arm_dt: Limit CMA to 256MB if total_mem < 2GB or gpu_mem > 256MB
See: #1603
* firmware: hdmi_cec: Remove TX/RX SW_INIT on power_on
See: Hexxeh/rpi-firmware#267
See: https://www.raspberrypi.org/forums/viewtopic.php?p=1895082#p1895082
* firmware: cec: Avoid sending messages with kms
See: raspberrypi/linux#4460
* firmware: Revert: video_decode: Use the ISP instead of vc_image_convert
* firmware: isp: Set the YUV420/YVU420 format stride to 64 byte
* arm_loader: Add message to release firmware framebuffer
* firmware: video_decode: Use the ISP instead of vc_image_convert
* firmware: hdmi-2711: Wait for HDMI hardware scheduler to activate in HDMI mode
* firmware: bcm_host: Recognise all Pi 4 variants, add BCM2711
See: raspberrypi/userland#695
* firmware: PoE+ HAT support
See: raspberrypi/linux#4367
* firmware: arm_loader: Use Pi4 bootloader MAC_ADDRESS if set
* firmware: platform: Apply ARM thermal throttling rules on BCM2711
* firmware: dt-blob.dts: Correct HDMI HPD and EMMC_ENABLE for CM4
See: https://www.raspberrypi.org/forums/viewtopic.php?f=29&p=1858516
* firmware: vcfw/hdmi: CUSTOM modes used for FKMS didn't set RGB quant range correctly
See: #1580
* firmware: platform: Remove build-time constant for MICROVOLTS_PER_PIP
* firmware: Pi400: Reduce MII clock freq when probing ethernet PHY
* firmware: isp: Ensure the VRF is locked when setting up video colour denoise
See: raspberrypi/libcamera-apps#19
* firmware: isp: Remove custom EV mappings from camera tunings
* firmware: Add support for board-type=0xXX conditional filters in bootloader, bootcode and firmware
* firmware: Two UART1 patches
See: #1566
* firmware: arm_loader: kernel_old=1 should force kernel_address=0
See: #1561
* firmware: scalerlib: Fix offset applied to x coordinate of YUV10COL image
See: https://forum.kodi.tv/showthread.php?tid=361164&pid=3024654#pid3024654
* firmware: vcfw/power: Add a new latch for power_pad_control
See: #1552
* firmware: board-info: Fix memsize on 3B+
* firmware: Move core to PLLA and support accurate clk108
See: xbmc/xbmc#19263
* firmware: board_info: Separate memory size from OTP field encoding
* firmware: power: Swap DA9090 ADC assignments to match XR77004
* firmware: vl805: Remove redundant log statement and fix warning
* firmware: power: Fix DA9090 ADC1 register definition
* firmware: arm_loader: Only report clocks arm has set, not siblings
* firmware: arm_loader: Don't report clocks set as turbo side effect of arm clock
* firmware: arm_loader: 2711: gpu clocks are not dependant
* firmware: platform: Need to clear cached versions of get_max_clock_internal vars
* firmware: video_decode: For VC1/WMV with no signalled header bytes, use start of 1st buffer
See: raspberrypi/linux#4113
==== raspberrypi-firmware-dt ====
Version update (2021.03.15 -> 2021.09.17)
- Update to 2425833c7ff5 (2021-09-17)
* Switch to 5.14 branch
* Drop upstream-overlay-rpi-poe.patch
==== rdma-core ====
Version update (36.0 -> 37.1)
Subpackages: libefa1 libibverbs libibverbs1 libmlx4-1 libmlx5-1 librdmacm1
- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
- Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files
==== remmina ====
Version update (1.4.20 -> 1.4.21)
Subpackages: remmina-lang remmina-plugin-rdp remmina-plugin-secret remmina-plugin-vnc
- Updated to remmina version 1.4.21
* Nullify host if qucikconnect isn't a valid address
* rdp_plugin.c: Fix dereferencing of NULL variable when profile name is empty
* Resolve label spacing in preferences window
* GNOME 40 runtime and other updates
* Add support for ESX web console login
* Added RDP general option to remap scancodes
* Back compatibility with WebKit < 2.32.0
* Make screenshot file names iso8601 compliant
* Typo in bug-report template
* Typo in merge-request template
* Implementing restricted-mode and password hash
* Unitialized var by @qarmin (Rafa? Mikrut ). Closes #2594
* Add integer-only input field for plugin settings in Remmina Editor
* Adding VNCI Listen port field tooltip
* Fix the translation problem of "tooltip" in ssh window
* Rework x2go_plugin.c to comply with remmina coding style.
* Add validation system for Remmina Editor
* Small changes to README, AUTHORS and error message adjusting in remmina_file_editor.c
* remmina_file_editor.c: Readd by mistake removed '!'
* Mitigation for #1951 and extra RDP clibpoard debug messages
* Rollback Let's Encrypt SSL workaround
* Add RDP clipboard support for Microsoft HTML Clipboard Format
* Building FreeRDP with icu support
* Resource renaming to comply with the Freedesktop rules
- Package all icons in the main package
- The new x2go packages are not yet packaged, as x2go is not available in the
openSUSE distributions
==== rsyslog ====
Version update (8.2106.0 -> 8.2108.0)
- Upgrade to rsyslog 8.2108.0:
* 2021-08-16: openssl tls: Improved error message output on tls failures.
closes: https://github.com/rsyslog/rsyslog/issues/4645
* 2021-08-16: impstats: add percentile metrics tracking functionality
Brief overview:
TO configure tracking percentile metrics in rainerscript:
User would need to define:
- which percentile to track, such as [p50, p99, etc.]
- window size - note, this correlates directly with memory usage to
track the percentiles.
To track a value, user would call built-in function `percentile_observe()` in their configurations to
record an integer value, and percentile metrics would be emitted every
impstats interval.
Thanks to Nelson Yen for the patch.
* 2021-08-12: imfile: add parameter "ignoreolderthanoption"
instructs imfile not to ingest a file that has not been modified in the
specified number of seconds.
Thanks to github user yanjunli76 for the patch (submitted from Nelson Yen)
* 2021-08-10: imklog bugfix: invalid memory adressing, could cause abort
This is a regeression from commit 94c4a87. It introduced a free() call
using an object that was no longer valid (the main pointer to the
to-be-freed object) was already freed at time of use. This could
cause various issues, including a segfault.
Note: this bug was triggerred only during late phase of rsyslog
shutdown, so it did not affect regular operation.
Special thanks to github user wxiaoguang for analyzing the issue
and providing a draft fix proposal, on which this patch builds.
see also https://github.com/rsyslog/rsyslog/pull/4629
closes https://github.com/rsyslog/rsyslog/issues/4625
* 2021-08-09: imfile bugfix: deleteStateOnFileDelete missed some state files
When the log file is deleted, imfile would attempt to delete the statefile but it
was missing the file_id part of the statefile name. This means the statefiles were
only removed in the log file was less than 512 characters, because for very small
files the file ID hash is not created. This lead to some state files not being
deleted.
Thanks to pearseimperva for the patch.
* 2021-08-09: imfile bugfix: hash char invalidly added in readmode != 0
If imfile is ingesting log files with readMode set to 2 or 1, the resulting
messages all have a '#' character at the end. This patch corrects the behaviour.
Note: if some external script "supported" the bug of extra hash character at
the end of line, it may be necessary to update them.
closes https://github.com/rsyslog/rsyslog/issues/4491
* 2021-08-09: omelasticsearch bugfix: errorFile mutex was not consistently locked
Lock the file during SIGHUPs to avoid issues with concurrent accesses by
writeDataError().
Thanks to François Poirotte for the patch.
* 2021-08-09: imudp: add socket type (IPv4 vs. 6) to input name
Most importantly, the input name is used for stats counter names as
well. Previously, the same name was used for IPv4 and IPv6, so we had
two counters with an equal name. That left users puzzled.
Unfortunately, this change can potentially require changes to existing
analysis scripts, as the name is now slightly different.
closes https://github.com/rsyslog/rsyslog/issues/4364
* 2021-08-06: omfwd: add capability for action-specific TLS certificate settings
This permits to override the global definitions for TLS certificates
at the action() level.
* 2021-08-06: imfile bugfix: file handle leak if "freshStartTail" was turned on
* 2021-08-05: imtcp: permit to use different certificate files per input/action
This completes the ability to override global/default TLS settings at the imtcp
input() level. Support for using multiple CAs/Certs per Connection is now provided.
* 2021-08-04: imptcp bugfix: keep alive interval was incorrectly set
The interval was accidentally set to keep alive interval. This has been
corrected.
closes https://github.com/rsyslog/rsyslog/issues/4609
* 2021-07-08: openssl network driver bugfix: small memory leak
Fixes a static, non-growing memory leak which existed when parameter
"GnutTLSPriorityString" was used. This was primarily a cosmetic issue,
but caused some grief during development in regard to memory leak
detectors.
Note: yes, this is for openssl -- the parameter name is historical.
* 2021-07-07: psrv bugfix: abort if no listener could be started
Modules (like imtcp and imdiag) which use tcpsrv could abort or
otherwise malfunction if no listener for a specific input could
be started.
Found during implementing a new feature, no report from practice.
But could very well happen.
* 2021-07-07: mmkubernetes bugfix: apiserver error handling
- Added graceful handling of apiserver errors with unexpected responses,
i.e., anything other than 200, 404, or 429. Idea is that apiserver
transient error state will recover. We don't want mmkubernetes to miss
metadata resolution for containers that don't have cached metadata.
During these transient error states, mmkubernetes will provide basic
container file path based resolution of namespace and pod metadata for
new pods whose metadata is not yet cached. After this error state
recovers, mmkubernetes is expected to resume its metadata resolution as
expected.
- Added a unit test case for apiserver return 500 with changes to mock server
- Fixed existing unit test that was failing due to missing expected results file
- Added mmkubernetes unit tests to testbench
Thanks to Abdul Waheed for the patch (submitted from Nelson Yen).
* 2021-07-07: ommongodb bugfixes
- Fix Segmentation fault when server is down
- Add server connexion check while resuming
Thanks to Kevin Guillemot for the patch.
* 2021-06-28: omkafka improvements
- drain librdkafka queues and retry later during rsyslog restart or hup. This
re-injects messages into rsyslog's native queues.
- add statsname on per kafka instance for better visibility
- omkafka - count errors related ssl as "errors_ssl"
Thanks to Nelson Yen for the patch.
* 2021-06-23: some CI/QA improvements, Travis-CI disabled
For the time being, Travis CI is disabled because it was outdated and Travis also
changed their system. We will re-evaluate if we re-enable it. Since quite a while
the Travits tests were redundant with the rest of CI, so this does not reduce
coverage.
* 2021-06-23: omhttp bugfix: dynrestpath param in batch mode invalid
When batchmode was used, the templates could not be used to
expand dynrestpath. We are now storing the restpath param
within the batch data if we are in batch mode.
When we are in batch mode, and the restpath value changes, the
batch is submitted and reinitialized
closes: https://github.com/rsyslog/rsyslog/issues/4567
* 2021-06-17: add predefined template RSYSLOG_SyslogRFC5424Format
This is essentially the same as RSYSLOG_SyslogProtocol23Format with
a better name and a fix to remove the unnecessary LF at the end of
the message.
The different name also enables us to fix the LF issue without
any concern about backwards compatibility.
closes https://github.com/rsyslog/rsyslog/issues/4384
* 2021-06-17: impstats/bugfix: _sender_stats reports integer counter as string
Note that this introduces a small backwards incompatibility: in previous output
the field was of string type, now it is integer (as intended). We discussed this
on the mailing list and the overwhelming thought was that this is not a problem
because almost all analysis backends are able to cover that format change. This made
the bugfix essentially costmetic.
HOWEVER, if you still experience issues, please let us know. We can add an option
to provide the previous format, and just spared to do so because there was no
evidence it was needed.
==== rubygem-bootsnap ====
Version update (1.7.7 -> 1.9.1)
Subpackages: ruby2.7-rubygem-bootsnap ruby3.0-rubygem-bootsnap
- updated to version 1.9.1
* Removed a forgotten debug statement in JSON precompilation
==== rubygem-ffi ====
Version update (1.15.3 -> 1.15.4)
Subpackages: ruby2.7-rubygem-ffi ruby3.0-rubygem-ffi
- updated to version 1.15.4
Fixed:
* Fix build for uClibc. #913
* Correct module lookup when including `ffi-module` gem. #912
Changed:
* Use ruby code of the ffi gem in JRuby-9.2.20+. #915
==== rubygem-marcel ====
Version update (1.0.1 -> 1.0.2)
- updated to version 1.0.2
* Include Apache license in gem release. (a525d5b)
* Prefer audio/x-wav for WAV audio files. (#45)
* Prefer application/x-x509-ca-cert for Privacy-Enhanced Mail certificates. (#46)
* Prefer audio/flac for FLAC audio files. (#47)
* Prefer audio/aac for Advanced Audio Coding audio files. (#49)
* Prefer application/vnd.ms-access for Microsodt Access DB files. (#50)
* Support text/x-scss and text/x-sass stylesheets. (#52)
* Support encrypted Microsoft Access DB files. (#53)
* Prefer application/x-ole-storage for Microsoft Office files. (#54)
* Prefer text/markdown for Markdown files. (#55)
* Prefer audio/mpc for Musepack audio files. (#56)
* Support audio/webm audio files. (#58)
* Support image/avif images files. (#63)
==== rubygem-nokogiri ====
Version update (1.12.3 -> 1.12.5)
Subpackages: ruby2.7-rubygem-nokogiri ruby3.0-rubygem-nokogiri
- updated to version 1.12.5
[#]# 1.12.5 / 2021-09-27
[#]## Security
[JRuby] Address CVE-2021-41098 ([GHSA-2rr5-8q37-2w7h](https://github.com/sparklemotion/nokogiri/security/adv…).
In Nokogiri v1.12.4 and earlier, on JRuby only, the SAX parsers resolve external entities (XXE) by default. This fix turns off entity-resolution-by-default in the JRuby SAX parsers to match the CRuby SAX parsers' behavior.
CRuby users are not affected by this CVE.
[#]## Fixed
* [CRuby] `Document#to_xhtml` properly serializes self-closing tags in libxml > 2.9.10. A behavior change introduced in libxml 2.9.11 resulted in emitting start and and tags (e.g., `<br></br>`) instead of a self-closing tag (e.g., `<br/>`) in previous Nokogiri versions. [[#2324](https://github.com/sparklemotion/nokogiri/issues/2324)]
[#]# 1.12.4 / 2021-08-29
[#]## Notable fix: Namespace inheritance
Namespace behavior when reparenting nodes has historically been poorly specified and the behavior diverged between CRuby and JRuby. As a result, making this behavior consistent in v1.12.0 introduced a breaking change.
This patch release reverts the Builder behavior present in v1.12.0..v1.12.3 but keeps the Document behavior. This release also introduces a Document attribute to allow affected users to easily change this behavior for their legacy code without invasive changes.
[#]### Compensating Feature in XML::Document
This release of Nokogiri introduces a new `Document` boolean attribute, `namespace_inheritance`, which controls whether children should inherit a namespace when they are reparented. `Nokogiri::XML:Document` defaults this attribute to `false` meaning "do not inherit," thereby making explicit the behavior change introduced in v1.12.0.
CRuby users who desire the pre-v1.12.0 behavior may set `document.namespace_inheritance = true` before reparenting nodes.
See https://nokogiri.org/rdoc/Nokogiri/XML/Document.html#namespace_inheritance-… for example usage.
[#]### Fix for XML::Builder
However, recognizing that we want `Builder`-created children to inherit namespaces, Builder now will set `namespace_inheritance=true` on the underlying document for both JRuby and CRuby. This means that, on CRuby, the pre-v1.12.0 behavior is restored.
Users who want to turn this behavior off may pass a keyword argument to the Builder constructor like so:
``` ruby
Nokogiri::XML::Builder.new(namespace_inheritance: false)
```
See https://nokogiri.org/rdoc/Nokogiri/XML/Builder.html#label-Namespace+inherit… for example usage.
[#]### Downstream gem maintainers
Note that any downstream gems may want to specifically omit Nokogiri v1.12.0--v1.12.3 from their dependency specification if they rely on child namespace inheritance:
``` ruby
Gem::Specification.new do |gem|
[#] ...
gem.add_runtime_dependency 'nokogiri', '!=1.12.3', '!=1.12.2', '!=1.12.1', '!=1.12.0'
[#] ...
end
```
[#]## Fixed
* [JRuby] Fix NPE in Schema parsing when an imported resource doesn't have a `systemId`. [[#2296](https://github.com/sparklemotion/nokogiri/issues/2296)] (Thanks, [@pepijnve](https://github.com/pepijnve)!)
==== rubygem-parallel ====
Version update (1.20.1 -> 1.21.0)
- updated to version 1.21.0
* no changelog found
==== rubygem-puma ====
Version update (5.4.0 -> 5.5.0)
- updated to version 5.5.0
* Features
* Automatic SSL certificate provisioning for localhost, via localhost gem ([#2610], [#2257])
* add support for the PROXY protocol (v1 only) ([#2654], [#2651])
* Add a semantic CLI option for no config file ([#2689])
* Bugfixes
* More elaborate exception handling - lets some dead pumas die. ([#2700], [#2699])
* allow multiple after_worker_fork hooks ([#2690])
* Preserve BUNDLE_APP_CONFIG on worker fork ([#2688], [#2687])
* Performance
* Fix performance of server-side SSL connection close. ([#2675])
==== rubygem-rubocop ====
Version update (1.19.1 -> 1.22.1)
- updated to version 1.22.1
[#]# 1.22.1 (2021-10-04)
[#]## Bug fixes
* [#10143](https://github.com/rubocop/rubocop/issues/10143): Fix an error for `Lint/RequireRelativeSelfPath` when using a variable as an argument of `require_relative`. ([@koic][])
* [#10140](https://github.com/rubocop/rubocop/issues/10140): Fix false positive for `Layout/DotPosition` when a heredoc receives a method on the same line as the start sigil in `trailing` style. ([@dvandersluis][])
* [#10148](https://github.com/rubocop/rubocop/issues/10148): Fix `Style/QuotedSymbols` handling escaped characters incorrectly. ([@dvandersluis][])
* [#10145](https://github.com/rubocop/rubocop/issues/10145): Update `Style/SelectByRegexp` to ignore cases where the receiver appears to be a hash. ([@dvandersluis][])
[#]# 1.22.0 (2021-09-29)
[#]## New features
* [#8431](https://github.com/rubocop/rubocop/issues/8431): Add `Safety` section to documentation for all cops that are `Safe: false` or `SafeAutoCorrect: false`. ([@dvandersluis][])
* [#10132](https://github.com/rubocop/rubocop/issues/10132): Reorganize output of `rubocop --help` for better clarity. ([@dvandersluis][])
* [#10111](https://github.com/rubocop/rubocop/pull/10111): Add new `Style/NumberedParametersLimit` cop. ([@dvandersluis][])
* [#10025](https://github.com/rubocop/rubocop/pull/10025): Changed cop `SpaceInsideParens` to include a `compact` style. ([@itay-grudev][])
* [#10084](https://github.com/rubocop/rubocop/issues/10084): Add new `Lint/RequireRelativeSelfPath` cop. ([@koic][])
* [#8327](https://github.com/rubocop/rubocop/issues/8327): Add new cop `Style/SelectByRegexp`. ([@dvandersluis][])
* [#10100](https://github.com/rubocop/rubocop/pull/10100): Add new `Style/NumberedParameters` cop. ([@Hugo-Hache][])
* [#10103](https://github.com/rubocop/rubocop/issues/10103): Add `AllowHttpProtocol` option to `Bundler/InsecureProtocolSource`. ([@koic][])
* [#10102](https://github.com/rubocop/rubocop/pull/10102): Add new `Security/IoMethods` cop. ([@koic][])
[#]## Bug fixes
* [#10110](https://github.com/rubocop/rubocop/issues/10110): Update `Layout/DotPosition` to be able to handle heredocs. ([@dvandersluis][])
* [#10134](https://github.com/rubocop/rubocop/issues/10134): Update `Style/MutableConstant` to not consider multiline uninterpolated strings as unfrozen in ruby 3.0. ([@dvandersluis][])
* [#10124](https://github.com/rubocop/rubocop/pull/10124): Fix `Layout/RedundantLineBreak` adding extra space within method chains. ([@dvandersluis][])
* [#10118](https://github.com/rubocop/rubocop/issues/10118): Fix crash with `Style/RedundantSort` when the block doesn't only contain a single `send` node. ([@dvandersluis][])
* [#10135](https://github.com/rubocop/rubocop/issues/10135): Fix `Style/WordArray` to exclude files in `--auto-gen-config` when `percent` style is given but brackets are required. ([@dvandersluis][])
* [#10090](https://github.com/rubocop/rubocop/issues/10090): Fix a false negative for `Style/ArgumentsForwarding` when using only kwrest arg. ([@koic][])
* [#10099](https://github.com/rubocop/rubocop/pull/10099): Update`Style/RedundantFreeze` to stop considering `ENV` values as immutable. ([@byroot][])
* [#10078](https://github.com/rubocop/rubocop/pull/10078): Fix `Layout/LineLength` reported length when ignoring directive comments. ([@dvandersluis][])
* [#9934](https://github.com/rubocop/rubocop/issues/9934): Fix configuration loading to not raise an error for an obsolete ruby version that is subsequently overridden. ([@dvandersluis][])
* [#10136](https://github.com/rubocop/rubocop/issues/10136): Update `Lint/AssignmentInCondition` to not consider assignments within blocks in conditions. ([@dvandersluis][])
* [#9588](https://github.com/rubocop/rubocop/issues/9588): Fix causing a variable to be shadowed from outside the rescue block in the logic of Naming/RescuedExceptionsVariableName. ([@lilisako][])
* [#10096](https://github.com/rubocop/rubocop/issues/10096): Fix `Lint/AmbiguousOperatorPrecedence` with `and`/`or` operators. ([@dvandersluis][])
* [#10106](https://github.com/rubocop/rubocop/issues/10106): Fix `Style/RedundantSelf` for pattern matching. ([@dvandersluis][])
* [#10066](https://github.com/rubocop/rubocop/issues/10066): Fix how `MinDigits` is calculated for `Style/NumericLiterals` when generating a configuration file. ([@dvandersluis][])
[#]## Changes
* [#10088](https://github.com/rubocop/rubocop/pull/10088): Update `Lint/BooleanSymbol` to be `SafeAutoCorrect: false` rather than `Safe: false`. ([@dvandersluis][])
* [#10122](https://github.com/rubocop/rubocop/pull/10122): Update `Style/RedundantSort` to be unsafe, and revert the special case for `size` from [#10061](https://github.com/rubocop/rubocop/pull/10061). ([@dvandersluis][])
* [#10130](https://github.com/rubocop/rubocop/issues/10130): Update `Lint/ElseLayout` to be able to handle an `else` with only a single line. ([@dvandersluis][])
[#]# 1.21.0 (2021-09-13)
[#]## New features
* [#7849](https://github.com/rubocop/rubocop/issues/7849): Add new `Lint/AmbiguousOperatorPrecedence` cop. ([@dvandersluis][])
* [#9061](https://github.com/rubocop/rubocop/issues/9061): Add new `Lint/IncompatibleIoSelectWithFiberScheduler` cop. ([@koic][])
[#]## Bug fixes
* [#10067](https://github.com/rubocop/rubocop/pull/10067): Fix an error for `Lint/NumberConversion` when using nested number conversion methods. ([@koic][])
* [#10054](https://github.com/rubocop/rubocop/pull/10054): Fix a false positive for `Layout/SpaceAroundOperators` when match operators between `<<` and `+=`. ([@koic][])
* [#10061](https://github.com/rubocop/rubocop/issues/10061): Fix a false positive for `Style/RedundantSort` when using `size` method in the block. ([@koic][])
* [#10063](https://github.com/rubocop/rubocop/pull/10063): Fix a false positive for `Layout/SingleLineBlockChain` when method call chained on a new line after a single line block with trailing dot. ([@koic][])
* [#10064](https://github.com/rubocop/rubocop/pull/10064): Fix `Style/ExplicitBlockArgument` corrector assuming any existing block argument was named `block`. ([@byroot][])
* [#10070](https://github.com/rubocop/rubocop/issues/10070): Fix a false positive for `Style/MutableConstant` when using non-interpolated heredoc in Ruby 3.0. ([@koic][])
[#]## Changes
* [#9674](https://github.com/rubocop/rubocop/issues/9674): Disable `Style/AsciiComments` by default. ([@dvandersluis][])
* [#10051](https://github.com/rubocop/rubocop/pull/10051): Improve the messaging for `Style/Documentation` to be more clear about what class/module needs documentation. ([@dvandersluis][])
* [#10074](https://github.com/rubocop/rubocop/pull/10074): Update `Naming/InclusiveLanguage` to be disabled by default. ([@dvandersluis][])
* [#10068](https://github.com/rubocop/rubocop/pull/10068): Mark `Style/AndOr` as unsafe auto-correction. ([@koic][])
[#]# 1.20.0 (2021-08-26)
[#]## New features
* [#10040](https://github.com/rubocop/rubocop/pull/10040): Make `Lint/Debugger` aware of debug.rb. ([@koic][])
* [#9580](https://github.com/rubocop/rubocop/issues/9580): Add a new cop that enforces which bundler gem file to use. ([@gregfletch][])
[#]## Bug fixes
* [#10033](https://github.com/rubocop/rubocop/issues/10033): Fix an incorrect auto-correct for `Style/BlockDelimiters` when there is a comment after the closing brace and using method chanin. ([@koic][])
* [#6630](https://github.com/rubocop/rubocop/issues/6630): Updated `Style/CommentAnnotation` to be able to handle multiword keyword phrases. ([@dvandersluis][])
* [#7836](https://github.com/rubocop/rubocop/issues/7836): Update `Style/BlockDelimeters` to add `begin`...`end` when converting a block containing `rescue` or `ensure` to braces. ([@dvandersluis][])
* [#10031](https://github.com/rubocop/rubocop/issues/10031): Fix a false positive for `Style/HashExcept` when comparing with hash value. ([@koic][])
[#]## Changes
* [#10034](https://github.com/rubocop/rubocop/pull/10034): Add `RubyJard` debugger calls to Lint/Debugger/DebuggerMethods. ([@DanielVartanov][])
* [#10006](https://github.com/rubocop/rubocop/pull/10006): Interpolated string literals are no longer frozen since Ruby 3.0. ([@splattael][])
* [#9328](https://github.com/rubocop/rubocop/issues/9328): Recognize shareable_constant_value magic comment. ([@thearjunmdas][], [@caalberts][])
* [#10036](https://github.com/rubocop/rubocop/issues/10036): Mark `Style/StructInheritance` as unsafe auto-correction. ([@koic][])
==== rubygem-rubocop-ast ====
Version update (1.11.0 -> 1.12.0)
- updated to version 1.12.0
[#]## Bug fixes
* [#208](https://github.com/rubocop/rubocop-ast/issues/208): Update `MethodDispatchNode#block_literal?` to return true for `numblock`s. ([@dvandersluis][])
==== rubygem-spring ====
Version update (2.1.1 -> 3.0.0)
Subpackages: ruby2.7-rubygem-spring ruby3.0-rubygem-spring
- updated to version 3.0.0
* Require applications to have reloading enabled in the managed environments.
* Require Ruby 2.5.
* Require Rails 5.2.
==== rubygem-unf_ext ====
Version update (0.0.7.7 -> 0.0.8)
- updated to version 0.0.8
* No functional change in the library code.
* Include Windows binaries for Ruby 3.0.
* Drop support for Ruby 2.1 and earlier.
* Replace Travis CI with Github Actions.
* Fix cross-build after upgrading rake-compiler/rake-compiler-dock to 1.1.1/1.1.0.
==== rubygem-unicode-display_width ====
Version update (2.0.0 -> 2.1.0)
- updated to version 2.1.0
* Unicode 14.0
==== rubygem-yast-rake ====
Version update (0.2.41 -> 0.2.42)
- Fixed running the GitHub Actions locally ("rake actions:run"),
allow settting additional Docker options in the YAML config
or via DOCKER_OPTIONS environment variable (bsc#1191400)
- 0.2.42
==== salt ====
Subpackages: python3-salt salt-master salt-minion salt-transactional-update
- Fix issues with salt-ssh's extra-filerefs
- Added:
* fix-issues-with-salt-ssh-s-extra-filerefs.patch
- Fix crash when calling manage.not_alive runners
- Added:
* fix-crash-when-calling-manage.not_alive-runners.patch
- Do not consider skipped targets as failed for ansible.playbooks state (bsc#1190446)
- Added:
* 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
==== signon-kwallet-extension ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== skanlite ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- Changes since 21.08.1:
* Only depend on major.minor version of KF5Sane
==== skopeo ====
Version update (1.2.3 -> 1.5.0)
- Update to version 1.5.0:
* bump deps
* Update VM Images + Drop prior-ubuntu references
* Update installation doc with latest steps
* Introduce a --ignore option to allow "sync" command to continue
syncing even after a particular image sync fails
* vendor-in-container: update to golang:1.16
* update c/common, c/image, c/storage
* Add timeouts when waiting on OpenShift or the registry to start
* Add docs and bash completions
* Add support for decompressing while copying to dir://
* Update to enabled containers/image version
* Fix two instances of unused err found by go-staticcheck
* Test both imageOptions and imageDestOptions in TestTLSVerifyFlags
* Split testing of --tls-verify into separate TestTLSVerifyFlags
* Add the --tls-verify option to (skopeo logout)
* Added `format` parameter to `sync` command
* copy: Add --digestfile
==== solid ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5Solid5 libKF5Solid5-lang solid-imports solid-tools
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Add support for static builds
* support extracting cpu model on ppc64
==== sonnet ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5SonnetCore5 libKF5SonnetCore5-lang libKF5SonnetUi5
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== spectacle ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== sscep ====
Version update (0.9.1 -> 0.10.0)
- Update to version 0.10.0
* Added auto-selection of default protection algorithms (-E, -S
and -F) based on getcaps, unless specified explicitly.
* Added parameter -W sec to wait for network connectivity
(default 0).
* Engines are now disabled by default and need to be enabled by
./configure --enable-engines or cmake . -DENABLE_ENGINES=ON
* Compatible with OpenSSL 3.0.0
* Removed support for OpenSSL < 1.1.0
==== subversion ====
Subpackages: libsvn_auth_gnome_keyring-1-0 libsvn_auth_kwallet-1-0 subversion-bash-completion subversion-perl subversion-server subversion-tools
- always build with kwallet support, no longer make a
distrinction between openSUSE and SLE (boo#1191282)
==== syndication ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== syntax-highlighting ====
Version update (5.86.0 -> 5.87.0)
Subpackages: libKF5SyntaxHighlighting5 libKF5SyntaxHighlighting5-lang
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
* Add basic QML API docs
* yara - add new 4.x keywords
* Tests result
* Fix operators and included more blocks on test
* Change license to MIT
* Included test reference
* Removed items that are generating errors for now
* initial work on terraform syntax highlight
* Port AbstractHighlighter::highlightLine to QStringView
==== systemd ====
Version update (249.4 -> 249.5)
Subpackages: libsystemd0 libudev-devel libudev1 systemd-container systemd-doc systemd-sysvinit udev
- Import commit 8521f8d22fd44400289fcea03493ebd7f8b1487d (merge of v249.5)
For a complete list of changes, visit:
https://github.com/openSUSE/systemd/compare/355e113ce193e5e2d195278c57d47f9…
- Import commit 355e113ce193e5e2d195278c57d47f9a1b00ae46
3b4a005095 meson: add missing include directory when using xkbcommon
4c4e642712 meson: allow extra net naming schemes to be defined during configuration (jsc#SLE-18514)
78466e4464 meson: drop the list of valid net naming schemes
b9a2098f9d netif-naming: inline one iterator variable
d7fbbc5e74 Add remaining supported schemes as options for default-net-naming-scheme
- Rename %{gnu-efi} into %{sd_boot}
Build conditionals (%bcond_with and %bcond_without) are used to
define a specific feature of systemd. "gnu-efi" is rather an
implemenation detail. Also not really sure what "efi" option alone
is useful for since systemd-boot & co depends on "gnu-efi".
- Enable sd_boot support for aarch64
- Ghost own directories /var/log/journal and /var/log/journal/remote again
rpmlint no more complain about the setgid bit, see sr#923496.
- Overwriting rootprefix= is only required when split-usr is enabled
- Rename %usrmerged into %split_usr
- Suppress PAM warning when the credentials for user@.service service
are established (bsc#1190515)
systemd-user PAM service needs to define a default implementation of
pam_setcred() otherwise the fallback (defined by /etc/pam.d/other)
is used, which consists of pam_warn.so + pam_deny.so, and will throw
a warning each time a user logs in.
- No need to install upstream pam configuration file "systemd-user"
It's overwritten by the SUSE version anyway.
==== systemd-presets-common-SUSE ====
- Haveged as a daemon is no longer required since kernel 5.6
do not enable by default.
==== systemsettings5 ====
Version update (5.22.5 -> 5.23.1)
Subpackages: systemsettings5-lang
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* Revert "Use level 2 header"
* sidebar: make placeholder message non-visible when at 0 opacity (kde#443016)
* Use level 2 header
* Support left/right and escape for key navigation in the sidebar
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Swap the position of the hamburger menu and home buttons
* Don't load all subpages of a category when clicked (kde#438362)
* Sidebar: set background colors in the correct way
* Sidebar: Unify "Show Changed Settings" button toolbar implementations
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* Clean up leftovers from systemsettingsrunner import
* Port deprecated setDelayed
* Use explicit + use override
* [sidebar] Enable/disable mousearea instead of changing accepted buttons
* [sidebar] Refactor subcategory button to use rectangle as its base item
* Don't request context help titlebar button
* Remove About Current Module
* Import services runner & strip out unneeded parts
* Fix highlight default for category owner children and when changing data from landing page
* Allow compiling without KF5DocTools
* Create simple getter to check if KCM is an SystemSettingsExternalApp
* Port ExternalAppModule away from KCModuleInfo
* Port loading of categories away from KServiceTypeTrader
* [sidebar] Port away from KDeclarative
* Remove old category files
* [sidebar] Add missing subcategory header spacing for widescreen view (kde#438377)
* only update the global header reacting to the active page (kde#437088)
* Use ellipses instead of triple period
* make sure we have 2 columns when loading a category (kde#435461)
* [sidebar] Don't show back button for subcategory header in widescreen view
==== thai-fonts ====
Version update (0.7.2 -> 0.7.3)
- Update to version 0.7.3.
* Purisa, Sawasdee: now can be embeded as installable in PDF.
* TlwgTypo, TlwgTypist: fix uneven widths of some glyphs.
* TlwgTypo, TlwgTypist, TlwgMono, TlwgTypewriter: clear PANOSE to use
calculated values, so as to get listed in gvim.
* Norasi: add 'onum' and 'smcp' OpenType features for access to
old style figures and small caps glyphs.
* LaTeX: Add old style figures and small caps supports for Norasi.
==== threadweaver ====
Version update (5.86.0 -> 5.87.0)
- Update to 5.87.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
* Add Gitlab CI configuration
==== timezone ====
Version update (2021c -> 2021d)
- timezone update 2021d:
* Fiji suspends DST for the 2021/2022 season
* 'zic -r' marks unspecified timestamps with "-00"
==== timezone-java ====
Version update (2021c -> 2021d)
- timezone update 2021d:
* Fiji suspends DST for the 2021/2022 season
* 'zic -r' marks unspecified timestamps with "-00"
==== tlp ====
Subpackages: tlp-rdw
- tlp-sleep.service does not exist anymore
- Make %files section a bit more precise
==== totem ====
Version update (3.38.1 -> 3.38.2)
Subpackages: totem-plugins
- Update to version 3.38.2:
+ Add support for MPL subtitles.
+ Fix OpenUri method in MPRIS plugin.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
==== tumbler ====
Subpackages: libtumbler-1-0 tumbler-folder-thumbnailer tumbler-lang tumbler-webp-thumbnailer
- Add Recommends: ffmpegthumbnailer
==== unbound ====
Subpackages: libunbound8 unbound-anchor
- Fix pidfile location
==== virt-manager ====
Subpackages: virt-install virt-manager-common
- bsc#1191356 - virt-manager should not depend on gtk4
Modified files:
virt-manager.spec
virtman-dont-specify-gtksource-version.patch
virtman-dont-specify-vte-version.patch
- jsc#SLE-20856 Dev: KVM: Enable vfio-ccw and vfio-ap in virt-* tools
965480e8-virt-install-add-mediated-device.patch
==== vmaf ====
Version update (2.2.0 -> 2.3.0)
- Update to release 2.3.0
* Added Contrast Aware Multiscale Banding Index.
* Added pixel format VMAF_PIX_FMT_YUV400P.
- Update to release 2.2.1
* Fix a race condition in vmaf_thread_pool_wait().
* Avoid chroma resampling for 420mpeg2 y4m input.
==== webkit2gtk3 ====
Version update (2.34.0 -> 2.34.1)
Subpackages: libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles
- Update to version 2.34.1:
+ Update user agent browser versions.
+ Fix a crash with GTK >= 3.24.30.
+ Fix a crash when loading videos on reddit.
+ Fix file type detection when application calls
g_desktop_app_info_set_as_default_for_extension() passing html.
==== webkit2gtk3-soup2 ====
Version update (2.34.0 -> 2.34.1)
Subpackages: libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 typelib-1_0-JavaScriptCore-4_0 typelib-1_0-WebKit2-4_0 webkit2gtk-4_0-injected-bundles
- Update to version 2.34.1:
+ Update user agent browser versions.
+ Fix a crash with GTK >= 3.24.30.
+ Fix a crash when loading videos on reddit.
+ Fix file type detection when application calls
g_desktop_app_info_set_as_default_for_extension() passing html.
==== wireless-regdb ====
Version update (20210421 -> 20210828)
- Update to version 20210828:
* wireless-regdb: update regulatory database based on preceding changes
* Update regulatory rules for Ecuador (EC)
* wireless-regdb: Update regulatory rules for Norway (NO) on 6 and 60 GHz
* wireless-regdb: Update regulatory rules for Germany (DE) on 6GHz
* wireless-regdb: update regulatory database based on preceding changes
* wireless-regdb: reduce bandwidth for 5730-5850 and 5850-5895 MHz in US
* wireless-regdb: remove PTMP-ONLY from 5850-5895 MHz for US
* wireless-regdb: recent FCC report and order allows 5850-5895 immediately
* wireless-regdb: update 5725-5850 MHz rule for GB
==== xdg-desktop-portal ====
Version update (1.10.0 -> 1.10.1)
- Update to version 1.10.1:
+ Revert a breaking change to the screencast and inhibit portal.
==== xdg-desktop-portal-kde ====
Version update (5.22.5 -> 5.23.1)
Subpackages: xdg-desktop-portal-kde-lang
- Update to 5.23.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.1
- No code changes since 5.23.0
- Update to 5.23.0
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
* Update dbus-advertised screencast source types
* Inhibit portal: send reply to the Close() request to release inhibition
- Add new key + signature to plasma.keyring
- Update to 5.22.90
* New feature release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.22.90
- Changes since 5.22.5:
* Fix crash when in X11
* Remove unnecessary attribute
* Now we are using Qt's internal connection, we should not set an eventqueue
* Remove unused output initialisation
* Explicitly set KDE_COMPILERSETTINGS_LEVEL
* Guard use of wayland connection
* Avoid second wayland connection in xdg-desktop-portal-kde
* Add missing properties for 2 dbus interfaces
* Background portal: avoid crash when allowing app to run in background (kde#438954)
* Fix compile with last ecm
* Pass the version to the project call
* Use version-less qt DBus macros
* Remove unused method
* Add a SNI for active screencasting sessions
==== xdg-user-dirs ====
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
==== xf86-input-libinput ====
- reverted previous change; the issue was broken ckb-next, not
the usage of libinput v120 API (boo#1190646)
- switch to libinput v120 API broke the driver, so disable it for
now via patching config.h in specfile after running configure
(boo#1190646)
==== xfce4-whiskermenu-plugin ====
Version update (2.6.0 -> 2.6.1)
Subpackages: xfce4-whiskermenu-plugin-lang
- Update to version 2.6.1
* Fix menu not toggling.
(gxo#panel-plugins/xfce4-whiskermenu-plugin#61)
* Fix small icon in multi-row panels.
(gxo#panel-plugins/xfce4-whiskermenu-plugin#37)
* Fix missing minimize and maximize buttons in settings dialog.
* Replace deprecated code for grab check.
* Translation updates
==== xfsprogs ====
Subpackages: libhandle1 xfsprogs-scrub
- move fsck.xfs, mkfs.xfs and xfs_repair from /sbin to /usr/sbin
(bsc#1191105)
The default rpmbuild %configure macro passes --sbindir=/usr/sbin to
every configure script, but the xfsprogs configure script ignores it
when --exec-prefix is also set. Unset --exec-prefix since it is not
really required (all other paths are explicitly passed via the rpm
configure macro), so that the --sbindir is respected.
==== xkeyboard-config ====
Version update (2.33 -> 2.34)
- update to version 2.34
* xml2lst: use dynamic Perl path
* Resolved 101key Old Hungarian II
* Old turkish f layout (with pc104 support) added.
* Fix wrong key symbol name
* Added International Phonetic Alphabet (QWERTY)
* gitlab CI: update to latest ci-templates
* Hellenic keyboard perfected.
* lt: Place sterling symbol on AD03, layer 4 (with E and euro)
* Use single guillemots on L4 (not less/greater) where L3 has guillemots
* Added English (Dvorak, Macintosh) based on the MacOS dvorak layout
* Accommodate uppercase/lowercase ß, long s, §; deduplicate ?
* Move left/right quotes one key to the right, place lower quotes on AB04
* Update symbols/it adding credits and reference for fur lang
* lt/us: Inherit AE09/AE10 from latin
* Add Russian GOST layouts
* Add Polish(lefty) layout
* Add Arabic(Ergoarabic) keyboard layout
* translation sync
* Hebrew translation added
==== xlockmore ====
Version update (5.66 -> 5.67)
- update to 5.67:
* Fixing specified bound equals destination size warning in iostuff.c.
* Port updated for xscreensaver-6.01. With help from EoflaOE ViceCity.
* maze3d.c updated for VMS as CRTL now contains more standard functions
==== xwayland ====
- Specfile cleanup
==== yarn ====
Version update (1.22.11 -> 1.22.13)
- update to 1.22.13:
https://github.com/yarnpkg/yarn/releases/tag/v1.22.13
==== yast2-installation ====
Version update (4.4.19 -> 4.4.20)
- Fix file copying when using relurl:// and file:// naming schemes
(bsc#1191160).
- 4.4.20
==== yast2-network ====
Version update (4.4.26 -> 4.4.27)
- Fix reading of the routing configuration (bsc#1191589)
- 4.4.27
==== yast2-pkg-bindings ====
Version update (4.4.2 -> 4.4.3)
- Use the C++17 standard, required by the latest libzypp
(bsc#1191829)
- 4.4.3
==== yast2-python-bindings ====
Version update (4.4.1 -> 4.4.2)
- Fix yast2-python-bindings requires Python (bsc#1190890).
- 4.4.2
==== yast2-storage-ng ====
Version update (4.4.8 -> 4.4.11)
- Install by default to any available Dell BOSS drive and identify
such drives more clearly in the Guided Setup (jsc#SLE-17578).
- Try to avoid by default to install into SD Cards if a fixed disk
is available (bsc#1187438).
- 4.4.11
- Do not force the same mount_by method in fstab and in crypttab
(needed for jsc#SLE-20416 and bsc#1181196)
- 4.4.10
- Fix (un)masking systemd units by using the systemctl --plain
flag for getting an output without status glyphs (bsc#1191347).
- 4.4.9
==== yast2-theme ====
Version update (4.4.3 -> 4.4.4)
Subpackages: yast2-theme-breeze
- Remove unnecesary rej file (bsc#1191830)
- 4.4.4
==== yast2-trans ====
Version update (84.87.20210914.a5d6b81b64 -> 84.87.20210929.6d3a97ea50)
Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu
- Update to version 84.87.20210929.6d3a97ea50:
* New POT for text domain 'nfs'.
* New POT for text domain 'network'.
* Translated using Weblate (Italian)
* Translated using Weblate (Italian)
* Translated using Weblate (Italian)
* New POT for text domain 'cluster'.
* Translated using Weblate (Turkish)
* Translated using Weblate (Turkish)
* Translated using Weblate (Turkish)
* Translated using Weblate (Turkish)
* New POT for text domain 'network'.
* Translated using Weblate (Greek)
* Translated using Weblate (Greek)
* New POT for text domain 'add-on'.
* Translated using Weblate (Czech)
* New POT for text domain 'base'.
* Translated using Weblate (Portuguese (Brazil))
* Translated using Weblate (Portuguese (Brazil))
* Translated using Weblate (Slovak)
* Translated using Weblate (Dutch)
* Translated using Weblate (Catalan)
* Translated using Weblate (Japanese)
* New POT for text domain 'packager'.
* New POT for text domain 'online-update'.
* New POT for text domain 'bootloader'.
* New POT for text domain 'base'.
* Translated using Weblate (Turkish)
* Translated using Weblate (Turkish)
* Translated using Weblate (Turkish)
* Translated using Weblate (Turkish)
* Translated using Weblate (Turkish)
* Translated using Weblate (Turkish)
* Translated using Weblate (Turkish)
* Translated using Weblate (Turkish)
* Translated using Weblate (Turkish)
* Translated using Weblate (Turkish)
* Translated using Weblate (Turkish)
==== yast2-users ====
Version update (4.4.6 -> 4.4.7)
- The shadow tools are used for reading the useradd default values
(bsc#1190864).
- Unsupported useradd attributes (i.e., skel and groups) are
removed from the UI.
- 4.4.7
==== z3 ====
Version update (4.8.11 -> 4.8.12)
- update to 4.8.12:
Release provided to fix git tag discrepancy issues with 4.8.11
==== zypper ====
Version update (1.14.49 -> 1.14.50)
Subpackages: zypper-log zypper-needs-restarting
- Fix compiler warning.
- zypper.conf: New option whether to collect subcommands found in
$PATH (fixes #379)
+[subcommand] i
+
+## Whether to look for subcommands in $PATH
+##
+## If a subcommand is not found in the zypper_execdir, the wrapper
+## will look in the rest of your $PATH for it. Thus, it's possible
+## to write local zypper extensions that don't live in system space.
+## See section SUBCOMMANDS in the zypper manpage.
+##
+## Valid values: boolean
+## Default value: yes
+##
+# seachSubcommandInPath = yes.
- help subcommand: show path of command found in $PATH.
- version 1.14.50
1
0
Hi,
I wrote already in April 2020 about this to the mailing list. However, the
situation did not improve since then.
The one and only appliance booting on the DE0-Nano-SoC is Leap 15.0, all
newer fail.
openSUSE-Leap15.0-ARM-JeOS-socfpgade0nanosoc.armv7l-2018.07.02-Buildlp150.1.1
boots
openSUSE-Leap-15.1-ARM-JeOS-socfpgade0nanosoc.armv7l end up at u
ends up showing the u-boot prompt: "=>"
openSUSE-Leap-15.2-ARM-JeOS-socfpgade0nanosoc.armv7l-2020.02.26-Build1.63
and all newer do not even get to u-boot.
Does nobody beside me use the DE0-Nano-SoC or DE10-Nano?
Thanks,
Christian
4
5
Please note that this mail was generated by a script.
The described changes are computed based on the aarch64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=3&versio…
Please do not reply to this email to report issues, rather file a bug
on bugzilla.opensuse.org. For more information on filing bugs please
see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
Mesa
Mesa-drivers
apache2 (2.4.49 -> 2.4.51)
apache2-manual (2.4.49 -> 2.4.51)
apache2-prefork (2.4.49 -> 2.4.51)
apache2-utils (2.4.49 -> 2.4.51)
bash
ca-certificates-mozilla (2.50 -> 2.52)
cepces
cogl
e2fsprogs
elfutils
elfutils-debuginfod
filesystem
gawk
gtk4
hiredis (1.0.0 -> 1.0.2)
ldb (2.3.0 -> 2.4.0)
libsolv (0.7.19 -> 0.7.20)
libsoup2
libstorage-ng (4.4.41 -> 4.4.43)
llvm12
llvm13 (12.0.1 -> 13.0.0)
lz4
mozilla-nss (3.69.1 -> 3.70)
redis (6.2.5 -> 6.2.6)
samba (4.14.6+git.182.2205d5224e3 -> 4.15.0+git.185.378416e547c)
tar
texinfo
timezone (2021a -> 2021c)
timezone-java (2021a -> 2021c)
transactional-update (3.5.5 -> 3.5.6)
trousers
u-boot-rpiarm64 (2021.07 -> 2021.10)
=== Details ===
==== Mesa ====
Subpackages: Mesa-dri-devel Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1
- Fix build with LLVM 13:
* U_gallivm-add-new-wrapper-around-Module.patch
* U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch
==== Mesa-drivers ====
Subpackages: Mesa-dri Mesa-gallium Mesa-libva libvdpau_r300 libvdpau_r600 libvdpau_radeonsi libvulkan_radeon
- Fix build with LLVM 13:
* U_gallivm-add-new-wrapper-around-Module.patch
* U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch
==== apache2 ====
Version update (2.4.49 -> 2.4.51)
- version update to 2.4.51
* ) SECURITY: CVE-2021-42013: Path Traversal and Remote Code
Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete
fix of CVE-2021-41773) (cve.mitre.org)
* ) core: Add ap_unescape_url_ex() for better decoding control, and deprecate
unused AP_NORMALIZE_DROP_PARAMETERS flag.
- version update to 2.4.50
* ) core: AP_NORMALIZE_DECODE_UNRESERVED should normalize the second dot in
the uri-path when it's preceded by a dot. [Yann Ylavic]
* ) mod_md: when MDMessageCmd for a 'challenge-setup:<type>:<dnsname>'
fails (!= 0 exit), the renewal process is aborted and an error is
reported for the MDomain. This provides scripts that distribute
information in a cluster to abort early with bothering an ACME
server to validate a dns name that will not work. The common
retry logic will make another attempt in the future, as with
other failures.
Fixed a bug when adding private key specs to an already working
MDomain, see <https://github.com/icing/mod_md/issues/260>.
[Stefan Eissing]
* ) mod_proxy: Handle UDS URIs with empty hostname ("unix:///...") as if they
had no hostname ("unix:/..."). [Yann Ylavic]
* ) mod_md: fixed a bug in handling multiple parallel OCSP requests. These could
run into an assertion which terminated (and restarted) the child process where
the task was running. Eventually, all OCSP responses were collected, but not
in the way that things are supposed to work.
See also <https://bz.apache.org/bugzilla/show_bug.cgi?id=65567>.
The bug was possibly triggered when more than one OCSP status needed updating
at the same time. For example for several renewed certificates after a server
reload.
* ) mod_rewrite: Fix UDS ("unix:") scheme for [P] rules. PR 57691 + 65590.
[Janne Peltonen <janne.peltonen sange.fi>]
* ) event mpm: Correctly count active child processes in parent process if
child process dies due to MaxConnectionsPerChild.
PR 65592 [Ruediger Pluem]
* ) mod_http2: when a server is restarted gracefully, any idle h2 worker
threads are shut down immediately.
Also, change OpenSSL API use for deprecations in OpenSSL 3.0.
Adds all other, never proposed code changes to make a clean
sync of http2 sources. [Stefan Eissing]
* ) mod_dav: Correctly handle errors returned by dav providers on REPORT
requests. [Ruediger Pluem]
* ) core: do not install core input/output filters on secondary
connections. [Stefan Eissing]
* ) core: Add ap_pre_connection() as a wrapper to ap_run_pre_connection()
and use it to prevent that failures in running the pre_connection
hook cause crashes afterwards. [Ruediger Pluem]
* ) mod_speling: Add CheckBasenameMatch PR 44221. [Christophe Jaillet]
==== apache2-manual ====
Version update (2.4.49 -> 2.4.51)
- version update to 2.4.51
* ) SECURITY: CVE-2021-42013: Path Traversal and Remote Code
Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete
fix of CVE-2021-41773) (cve.mitre.org)
* ) core: Add ap_unescape_url_ex() for better decoding control, and deprecate
unused AP_NORMALIZE_DROP_PARAMETERS flag.
- version update to 2.4.50
* ) core: AP_NORMALIZE_DECODE_UNRESERVED should normalize the second dot in
the uri-path when it's preceded by a dot. [Yann Ylavic]
* ) mod_md: when MDMessageCmd for a 'challenge-setup:<type>:<dnsname>'
fails (!= 0 exit), the renewal process is aborted and an error is
reported for the MDomain. This provides scripts that distribute
information in a cluster to abort early with bothering an ACME
server to validate a dns name that will not work. The common
retry logic will make another attempt in the future, as with
other failures.
Fixed a bug when adding private key specs to an already working
MDomain, see <https://github.com/icing/mod_md/issues/260>.
[Stefan Eissing]
* ) mod_proxy: Handle UDS URIs with empty hostname ("unix:///...") as if they
had no hostname ("unix:/..."). [Yann Ylavic]
* ) mod_md: fixed a bug in handling multiple parallel OCSP requests. These could
run into an assertion which terminated (and restarted) the child process where
the task was running. Eventually, all OCSP responses were collected, but not
in the way that things are supposed to work.
See also <https://bz.apache.org/bugzilla/show_bug.cgi?id=65567>.
The bug was possibly triggered when more than one OCSP status needed updating
at the same time. For example for several renewed certificates after a server
reload.
* ) mod_rewrite: Fix UDS ("unix:") scheme for [P] rules. PR 57691 + 65590.
[Janne Peltonen <janne.peltonen sange.fi>]
* ) event mpm: Correctly count active child processes in parent process if
child process dies due to MaxConnectionsPerChild.
PR 65592 [Ruediger Pluem]
* ) mod_http2: when a server is restarted gracefully, any idle h2 worker
threads are shut down immediately.
Also, change OpenSSL API use for deprecations in OpenSSL 3.0.
Adds all other, never proposed code changes to make a clean
sync of http2 sources. [Stefan Eissing]
* ) mod_dav: Correctly handle errors returned by dav providers on REPORT
requests. [Ruediger Pluem]
* ) core: do not install core input/output filters on secondary
connections. [Stefan Eissing]
* ) core: Add ap_pre_connection() as a wrapper to ap_run_pre_connection()
and use it to prevent that failures in running the pre_connection
hook cause crashes afterwards. [Ruediger Pluem]
* ) mod_speling: Add CheckBasenameMatch PR 44221. [Christophe Jaillet]
==== apache2-prefork ====
Version update (2.4.49 -> 2.4.51)
- version update to 2.4.51
* ) SECURITY: CVE-2021-42013: Path Traversal and Remote Code
Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete
fix of CVE-2021-41773) (cve.mitre.org)
* ) core: Add ap_unescape_url_ex() for better decoding control, and deprecate
unused AP_NORMALIZE_DROP_PARAMETERS flag.
- version update to 2.4.50
* ) core: AP_NORMALIZE_DECODE_UNRESERVED should normalize the second dot in
the uri-path when it's preceded by a dot. [Yann Ylavic]
* ) mod_md: when MDMessageCmd for a 'challenge-setup:<type>:<dnsname>'
fails (!= 0 exit), the renewal process is aborted and an error is
reported for the MDomain. This provides scripts that distribute
information in a cluster to abort early with bothering an ACME
server to validate a dns name that will not work. The common
retry logic will make another attempt in the future, as with
other failures.
Fixed a bug when adding private key specs to an already working
MDomain, see <https://github.com/icing/mod_md/issues/260>.
[Stefan Eissing]
* ) mod_proxy: Handle UDS URIs with empty hostname ("unix:///...") as if they
had no hostname ("unix:/..."). [Yann Ylavic]
* ) mod_md: fixed a bug in handling multiple parallel OCSP requests. These could
run into an assertion which terminated (and restarted) the child process where
the task was running. Eventually, all OCSP responses were collected, but not
in the way that things are supposed to work.
See also <https://bz.apache.org/bugzilla/show_bug.cgi?id=65567>.
The bug was possibly triggered when more than one OCSP status needed updating
at the same time. For example for several renewed certificates after a server
reload.
* ) mod_rewrite: Fix UDS ("unix:") scheme for [P] rules. PR 57691 + 65590.
[Janne Peltonen <janne.peltonen sange.fi>]
* ) event mpm: Correctly count active child processes in parent process if
child process dies due to MaxConnectionsPerChild.
PR 65592 [Ruediger Pluem]
* ) mod_http2: when a server is restarted gracefully, any idle h2 worker
threads are shut down immediately.
Also, change OpenSSL API use for deprecations in OpenSSL 3.0.
Adds all other, never proposed code changes to make a clean
sync of http2 sources. [Stefan Eissing]
* ) mod_dav: Correctly handle errors returned by dav providers on REPORT
requests. [Ruediger Pluem]
* ) core: do not install core input/output filters on secondary
connections. [Stefan Eissing]
* ) core: Add ap_pre_connection() as a wrapper to ap_run_pre_connection()
and use it to prevent that failures in running the pre_connection
hook cause crashes afterwards. [Ruediger Pluem]
* ) mod_speling: Add CheckBasenameMatch PR 44221. [Christophe Jaillet]
==== apache2-utils ====
Version update (2.4.49 -> 2.4.51)
- version update to 2.4.51
* ) SECURITY: CVE-2021-42013: Path Traversal and Remote Code
Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete
fix of CVE-2021-41773) (cve.mitre.org)
* ) core: Add ap_unescape_url_ex() for better decoding control, and deprecate
unused AP_NORMALIZE_DROP_PARAMETERS flag.
- version update to 2.4.50
* ) core: AP_NORMALIZE_DECODE_UNRESERVED should normalize the second dot in
the uri-path when it's preceded by a dot. [Yann Ylavic]
* ) mod_md: when MDMessageCmd for a 'challenge-setup:<type>:<dnsname>'
fails (!= 0 exit), the renewal process is aborted and an error is
reported for the MDomain. This provides scripts that distribute
information in a cluster to abort early with bothering an ACME
server to validate a dns name that will not work. The common
retry logic will make another attempt in the future, as with
other failures.
Fixed a bug when adding private key specs to an already working
MDomain, see <https://github.com/icing/mod_md/issues/260>.
[Stefan Eissing]
* ) mod_proxy: Handle UDS URIs with empty hostname ("unix:///...") as if they
had no hostname ("unix:/..."). [Yann Ylavic]
* ) mod_md: fixed a bug in handling multiple parallel OCSP requests. These could
run into an assertion which terminated (and restarted) the child process where
the task was running. Eventually, all OCSP responses were collected, but not
in the way that things are supposed to work.
See also <https://bz.apache.org/bugzilla/show_bug.cgi?id=65567>.
The bug was possibly triggered when more than one OCSP status needed updating
at the same time. For example for several renewed certificates after a server
reload.
* ) mod_rewrite: Fix UDS ("unix:") scheme for [P] rules. PR 57691 + 65590.
[Janne Peltonen <janne.peltonen sange.fi>]
* ) event mpm: Correctly count active child processes in parent process if
child process dies due to MaxConnectionsPerChild.
PR 65592 [Ruediger Pluem]
* ) mod_http2: when a server is restarted gracefully, any idle h2 worker
threads are shut down immediately.
Also, change OpenSSL API use for deprecations in OpenSSL 3.0.
Adds all other, never proposed code changes to make a clean
sync of http2 sources. [Stefan Eissing]
* ) mod_dav: Correctly handle errors returned by dav providers on REPORT
requests. [Ruediger Pluem]
* ) core: do not install core input/output filters on secondary
connections. [Stefan Eissing]
* ) core: Add ap_pre_connection() as a wrapper to ap_run_pre_connection()
and use it to prevent that failures in running the pre_connection
hook cause crashes afterwards. [Ruediger Pluem]
* ) mod_speling: Add CheckBasenameMatch PR 44221. [Christophe Jaillet]
==== bash ====
Subpackages: bash-doc
- Install bash_builtins manpage under the correct name
==== ca-certificates-mozilla ====
Version update (2.50 -> 2.52)
- updated to 2.50 state of the Mozilla NSS Certificate store (bsc#1188006)
- Added CAs:
+ HARICA Client ECC Root CA 2021
+ HARICA Client RSA Root CA 2021
+ HARICA TLS ECC Root CA 2021
+ HARICA TLS RSA Root CA 2021
+ TunTrust Root CA
- remove the DST_Root_CA_X3.pem trust, as it expires september 30th 2021.
(bsc#1190858)
==== cepces ====
Subpackages: cepces-certmonger cepces-selinux python3-cepces
- Only install the selinux policy if necessary
- Add missing dependency on the main package to the certmonger
subpackage
- Use %license and move it to the common subpackage
- Avoid bashisms
- Fix file list for the python subpackage for 3.10+
- Also disable selinux in 15.4, since it is still not supported.
==== cogl ====
Subpackages: libcogl-pango20 libcogl20 typelib-1_0-Cogl-1_0 typelib-1_0-CoglPango-1_0
- Add 2bd3cbed45d633fb15625d58e6b7cb8721b0ba98.patch: cogl-gles2:
Fix undefined references. Following this, add libtool
BuildRequires and pass autoreconf call before configure as the
patch touches the buildsystem.
- Add patches from fedora that should have gone upstream:
+ 0001-egl-Use-eglGetPlatformDisplay-not-eglGetDisplay.patch:
egl: Use eglGetPlatformDisplay not eglGetDisplay.
+ 0002-add-GL_ARB_shader_texture_lod-support.patch: Add
GL_ARB_shader_texture_lod support.
+ 0003-texture-support-copy_sub_image.patch: texture: Support
copy_sub_image.
==== e2fsprogs ====
Subpackages: e2fsprogs-scrub libcom_err2 libext2fs2
- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
version 0 quota format (jsc#SLE-17360)
quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
files (jsc#SLE-17360)
e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
trash user limits when processing orphan list (jsc#SLE-17360)
debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
commands (jsc#SLE-17360)
quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
with them
==== elfutils ====
Subpackages: libasm1 libdw1 libelf1
- Enhance license fields: all the libraries actually have a different
license to the tools. While the tools are GPL-3.0-or-later, the
libraries are (LGPL-3.0-or-later OR GPL-2.0-or-later)
SLE bug (for tracking the above) bsc#1191310
==== elfutils-debuginfod ====
- Enhance license fields: all the libraries actually have a different
license to the tools. While the tools are GPL-3.0-or-later, the
libraries are (LGPL-3.0-or-later OR GPL-2.0-or-later)
==== filesystem ====
- don't perform UsrMerge if ZYPP_SINGLE_RPMTRANS is set. Rely on
file trigger compat mode in that case and do it posttrans
(boo#1189788).
- generic %ghost handling instead of hardcoding
==== gawk ====
- remove update-alternatives support, as on linux systems GNU software
(i.e. gawk in this case) is usually considered the default implementation.
- use %make macros
==== gtk4 ====
Subpackages: gtk4-schema libgtk-4-1 typelib-1_0-Gtk-4_0
- Fix a syntax error in the gtk4_immodule_postun RPM macro
==== hiredis ====
Version update (1.0.0 -> 1.0.2)
- hiredis 1.0.2
* Hiredis v1.0.2 is a security release with a fix for CVE-2021-32765.
v1.0.1 erroneously bumped the SONAME so should be skipped.
- hiredis 1.0.1:
* CVE-2021-32765: integer overflow if provided maliciously
crafted or corrupted RESP mult-bulk protocol data boo#1191331
==== ldb ====
Version update (2.3.0 -> 2.4.0)
Subpackages: libldb2 python3-ldb
- Update to version 2.4.0
+ Improve calculate_popt_array_length()
+ Use C99 initializers for builtin_popt_options[]
+ pyldb: Fix Message.items() for a message containing elements
+ pyldb: Add test for Message.items()
+ tests: Use ldbsearch '--scope instead of '-s'
+ pyldb: fix a typo
+ Change page size of guidindexpackv1.ldb
+ Use a 1MiB lmdb so the test also passes on aarch64 CentOS stream
+ attrib_handler casefold: simplify space dropping
+ fix ldb_comparison_fold off-by-one overrun
+ CVE-2020-27840: pytests: move Dn.validate test to ldb
+ CVE-2020-27840 ldb_dn: avoid head corruption in ldb_dn_explode
+ CVE-2021-20277 ldb/attrib_handlers casefold: stay in bounds
+ CVE-2021-20277 ldb tests: ldb_match tests with extra spaces
+ improve comments for ldb_module_connect_backend()
+ test/ldb_tdb: correct introductory comments
+ ldb.h: remove undefined async_ctx function signatures
+ correct comments in attrib_handers val_to_int64
+ dn tests use cmocka print functions
+ ldb_match: remove redundant check
+ add tests for ldb_wildcard_compare
+ ldb_match: trailing chunk must match end of string
+ pyldb: catch potential overflow error in py_timestring
+ ldb: remove some 'if PY3's in tests
+ Add missing break in switch statement
==== libsolv ====
Version update (0.7.19 -> 0.7.20)
Subpackages: libsolv-tools python3-solv ruby-solv
- fix misparsing of '&' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20
- Disable python2 usage on suse_version >= 1550 by default (still
possible to use osc build --with=python).
==== libsoup2 ====
Subpackages: libsoup-2_4-1 typelib-1_0-Soup-2_4
- Add libsoup2-extend-test-cert.patch to fix tests after 2027 (boo#1102840)
==== libstorage-ng ====
Version update (4.4.41 -> 4.4.43)
Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1
- merge gh#openSUSE/libstorage-ng#835
- generate pools with dasds
- extended testsuite
- 4.4.43
- merge gh#openSUSE/libstorage-ng#834
- added get_dasd_type_name() and get_dasd_format_name()
- 4.4.42
==== llvm12 ====
Subpackages: clang12 clang12-doc libLLVM12 libLTO12 libclang12
- Don't build clang-tools, libc++ and python3-clang anymore,
because they come from llvm13 now.
- Remove version requirement from clang-tools dependency.
==== llvm13 ====
Version update (12.0.1 -> 13.0.0)
Subpackages: clang-tools libc++-devel libc++1 libc++abi-devel libc++abi1
- Update to version 13.0.0.
* For details, see the release notes:
- https://releases.llvm.org/13.0.0/docs/ReleaseNotes.html
- https://releases.llvm.org/13.0.0/tools/clang/docs/ReleaseNotes.html
- https://releases.llvm.org/13.0.0/tools/clang/tools/extra/docs/ReleaseNotes.…
- https://releases.llvm.org/13.0.0/projects/libcxx/docs/ReleaseNotes.html
- https://releases.llvm.org/13.0.0/tools/lld/docs/ReleaseNotes.html
* New LLVM tools:
- llvm-otool: Mach-O object file displaying tool.
- llvm-sim: LLVM IR Similarity Visualizer.
- llvm-tapi-diff: Diff tool for tbd files.
- llvm-windres: Tool to manipulate Windows resources.
* llvm-elfabi was removed.
* New Clang tools:
- clang-repl, an interactive interpreter for C/C++.
- intercept-build, analyze-build: the former intercepts build
commands to build a compilation database, the latter runs
the static analyzer over all translation units.
- scan-build-py: Python reimplementation of scan-build.
- Rebase patches:
* link-clang-shared.patch
* llvm-do-not-install-static-libraries.patch
* llvm-exegesis-link-dylib.patch
- Drop patches that have landed upstream:
* tablegen-test-link-static.patch
- Run tests on more architectures, disable those that seem to hang.
Don't run libcxx tests at all anymore because they take so long.
- Relax constraints so that we can build on more machines.
==== lz4 ====
- version 1.9.3 fixes also CVE-2021-3520 [bsc#1185438]
==== mozilla-nss ====
Version update (3.69.1 -> 3.70)
Subpackages: libfreebl3 libfreebl3-hmac libsoftokn3 libsoftokn3-hmac mozilla-nss-certs mozilla-nss-tools
- update to NSS 3.70
* bmo#1726022 - Update test case to verify fix.
* bmo#1714579 - Explicitly disable downgrade check in TlsConnectStreamTls13.EchOuterWith12Max
* bmo#1714579 - Explicitly disable downgrade check in TlsConnectTest.DisableFalseStartOnFallback
* bmo#1681975 - Avoid using a lookup table in nssb64d.
* bmo#1724629 - Use HW accelerated SHA2 on AArch64 Big Endian.
* bmo#1714579 - Change default value of enableHelloDowngradeCheck to true.
* bmo#1726022 - Cache additional PBE entries.
* bmo#1709750 - Read HPKE vectors from official JSON.
- required for Firefox 93
==== redis ====
Version update (6.2.5 -> 6.2.6)
- redis 6.2.6 with security fixes for
* Security fixes:
- CVE-2021-41099: Integer to heap buffer overflow handling certain string
commands and network payloads, when proto-max-bulk-len is manually configured
to a non-default, very large value (boo#1191299)
- CVE-2021-32762: Integer to heap buffer overflow issue in redis-cli and
redis-sentinel parsing large multi-bulk replies on some older and less common
platforms (boo#1191300)
- CVE-2021-32687: Integer to heap buffer overflow with intsets, when
set-max-intset-entries is manually configured to a non-default, very large
value (boo#1191302)
- CVE-2021-32675: Denial Of Service when processing RESP request payloads with
a large number of elements on many connections (boo#1191303)
- CVE-2021-32672: Random heap reading issue with Lua Debugger (boo#1191304)
- CVE-2021-32628: Integer to heap buffer overflow handling ziplist-encoded
data types, when configuring a large, non-default value for
hash-max-ziplist-entries, hash-max-ziplist-value, zset-max-ziplist-entries
or zset-max-ziplist-value (boo#1191305)
- CVE-2021-32627: Integer to heap buffer overflow issue with streams, when
configuring a non-default, large value for proto-max-bulk-len and
client-query-buffer-limit (boo#1191305)
- CVE-2021-32626: Specially crafted Lua scripts may result with Heap buffer
overflow (boo#1191306)
* Bug fixes that involve behavior changes:
- GEO* STORE with empty source key deletes the destination key and return 0
Previously it would have returned an empty array like the non-STORE variant.
- PUBSUB NUMPAT replies with number of patterns rather than number of subscriptions
This actually changed in 6.2.0 but was overlooked and omitted from the release notes.
* Bug fixes that are only applicable to previous releases of Redis 6.2:
- Fix CLIENT PAUSE, used an old timeout from previous PAUSE
- Fix CLIENT PAUSE in a replica would mess the replication offset
- Add some missing error statistics in INFO errorstats
* Other bug fixes:
- Fix incorrect reply of COMMAND command key positions for MIGRATE command
- Fix appendfsync to always guarantee fsync before reply, on MacOS and FreeBSD (kqueue)
- Fix the wrong misdetection of sync_file_range system call, affecting performance
* CLI tools:
- When redis-cli received ASK response, it didn't handle it
* Improvements:
- Add latency monitor sample when key is deleted via lazy expire
- Sanitize corrupt payload improvements
- Delete empty keys when loading RDB file or handling a RESTORE command
==== samba ====
Version update (4.14.6+git.182.2205d5224e3 -> 4.15.0+git.185.378416e547c)
Subpackages: libdcerpc-binding0 libdcerpc0 libndr-krb5pac0 libndr-nbt0 libndr-standard0 libnetapi0 libsamba-credentials1 libsamba-errors0 libsamba-hostconfig0 libsamba-passdb0 libsamba-policy0-python3 libsamba-util0 libsamdb0 libsmbclient0 libsmbconf0 libsmbldap2 libtevent-util0 libwbclient0 samba-client samba-doc samba-gpupdate samba-ldb-ldap samba-libs samba-libs-python3 samba-python3 samba-winbind
- Adjust spec to use pam macros; (bsc#1191046).
- Adjust spec for size
* allow some Recommends instead Requires to be configured
for cifs-utils, samba-libs-python3 & samba-gpupdate;
(bsc#1182847).
* remove fam, undocumented and unneeded.
- Add missing build dependency on bison when building with the
embedded Heimdal Kerberos
- Update to 4.15.0
* Removed SMB development dialects SMB2_22, SMB2_24 and SMB3_10
* VFS layer modernized.
* Add the ability to set allow/deny lists for zone transfer clients
in Bind DLZ plugin
* Server multi-channel support no longer experimental
* Improved command line user experience, unifying the options in
different commands
* Winbindd no longer scans trusted domains on startup and will use
enterprise principals by default.
* The net utility is now able to support the offline domain join feature
* New options for 'samba-tool dns zoneoptions' for aging control
and to mark old records as static or dynamic
* DNS tombstones are now deleted as appropriate and use a consistent
timestamp format
* The 'samba-tool dns update' command validates and rejects now malformed
IPv4 and IPv6 addresses
* The 'samba-tool domain backup' command correctly takes out locks
against concurrent modification during backup when using the LMDB
backend
* TruACL support has been removed
* NIS support has been removed
- Update to 4.14.7
* smbd panic on force-close share during offload write; (bso#14769);
* smbd should support copy_file_range() for FSCTL_SRV_COPYCHUNK;
(bso#12033);
* Fix returned attributes on fake quota file handle and avoid hitting
the VFS; (bso#14731);
* vfs_shadow_copy2 fix inodes not correctly updating inode numbers;
(bso#14756);
* Fix build on Solaris; (bso#14774);
* Make dos attributes available for unreadable files; (bso#14654);
* Work around special SMB2 READ response behavior of NetApp Ontap
7.3.7; (bso#14607);
* Start the SMB encryption as soon as possible; (bso#14793);
==== tar ====
Subpackages: tar-rmt
- The following issues have already been fixed in this package but
weren't previously mentioned in the changes file:
* bsc#1181131
* bsc#1120610
==== texinfo ====
Subpackages: info info-std
- Move to /usr for UsrMerge (boo#1191099)
==== timezone ====
Version update (2021a -> 2021c)
- timezone update 2021c:
* Revert almost all of 2021b's changes to the 'backward' file
* Fix a bug in 'zic -b fat' that caused old timestamps to be
mishandled in 32-bit-only readers
- timezone update 2021b:
* Jordan now starts DST on February's last Thursday.
* Samoa no longer observes DST.
* Move some backward-compatibility links to 'backward'.
* Rename Pacific/Enderbury to Pacific/Kanton.
* Correct many pre-1993 transitions in Malawi, Portugal, etc.
* zic now creates each output file or link atomically.
* zic -L no longer omits the POSIX TZ string in its output.
* zic fixes for truncation and leap second table expiration.
* zic now follows POSIX for TZ strings using all-year DST.
* Fix some localtime crashes and bugs in obscure cases.
* zdump -v now outputs more-useful boundary cases.
* tzfile.5 better matches a draft successor to RFC 8536.
==== timezone-java ====
Version update (2021a -> 2021c)
- timezone update 2021c:
* Revert almost all of 2021b's changes to the 'backward' file
* Fix a bug in 'zic -b fat' that caused old timestamps to be
mishandled in 32-bit-only readers
- timezone update 2021b:
* Jordan now starts DST on February's last Thursday.
* Samoa no longer observes DST.
* Move some backward-compatibility links to 'backward'.
* Rename Pacific/Enderbury to Pacific/Kanton.
* Correct many pre-1993 transitions in Malawi, Portugal, etc.
* zic now creates each output file or link atomically.
* zic -L no longer omits the POSIX TZ string in its output.
* zic fixes for truncation and leap second table expiration.
* zic now follows POSIX for TZ strings using all-year DST.
* Fix some localtime crashes and bugs in obscure cases.
* zdump -v now outputs more-useful boundary cases.
* tzfile.5 better matches a draft successor to RFC 8536.
==== transactional-update ====
Version update (3.5.5 -> 3.5.6)
Subpackages: dracut-transactional-update libtukit0 transactional-update-zypp-config tukit
- Version 3.5.6
- tukit: Add S/390 bootloader support [bsc#1189807]
- t-u: support purge-kernels with t-u patch [bsc#1190788]
==== trousers ====
- move libraries to /usr/lib (bsc#1191102)
==== u-boot-rpiarm64 ====
Version update (2021.07 -> 2021.10)
Subpackages: u-boot-rpiarm64-doc
- Update to 2021.10
Fix Grub loading slowdown when connecting USB keyboard (bsc#1171222).
Enable BTRFS for Risc-V.
Patch queue updated from https://github.com/openSUSE/u-boot.git tumbleweed-2021.10
* Patches added:
0013-riscv-enable-CMD_BTRFS.patch
0014-Disable-timer-check-in-file-loading.patch
- Update to 2021.10-rc5
- Patch queue updated from https://github.com/openSUSE/u-boot.git tumbleweed-2021.10
* Patches dropped (upstreamed):
0013-configs-rpi-Enable-SMBIOS-sysinfo-d.patch
- Add hack to allow enabling CONFIG_CMD_BTRFS on riscv64
- Add sifiveunmatched flavor
- Update to 2021.10-rc4
- Patch queue updated from https://github.com/openSUSE/u-boot.git tumbleweed-2021.10
* Patches dropped:
0014-btrfs-Use-default-subvolume-as-file.patch
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the aarch64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=3&versio…
Please do not reply to this email to report issues, rather file a bug
on bugzilla.opensuse.org. For more information on filing bugs please
see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
bolt
hxtools (20210803 -> 20210928)
k4dirstat (3.2.2 -> 3.3.0)
kernel-64kb (5.14.6 -> 5.14.9)
kernel-source (5.14.6 -> 5.14.9)
libjpeg-turbo
mhvtl (1.63_release+759.35ddb48e5262_k5.14.6_2 -> 1.63_release+759.35ddb48e5262_k5.14.9_1)
opensc (0.21.0 -> 0.22.0)
python-lazr.config (2.2.2 -> 2.2.3)
rng-tools
rubygem-sassc-2.2
squid (4.16 -> 5.2)
step (21.08.1 -> 21.08.2)
suse-module-tools (16.0.10+7 -> 16.0.11)
sweeper (21.08.1 -> 21.08.2)
umbrello (21.08.1 -> 21.08.2)
yakuake (21.08.1 -> 21.08.2)
=== Details ===
==== bolt ====
- Need in SLE
* Support for working with adapters without ROMs is needed
(jsc#SLE-19359)
==== hxtools ====
Version update (20210803 -> 20210928)
Subpackages: fd0ssh ofl
- Update to release 20210928
* vfontas: add recognition for BDF glyphs as produced by
fontforge from PCF
* kbd: map beta to eszett on cp437x
* vfontas: recognize "idem" lines in kbd unimaps
* vfontas: add -setbold, -setprop, -lgeu, -lgeuf commands
==== k4dirstat ====
Version update (3.2.2 -> 3.3.0)
Subpackages: k4dirstat-lang
- Update to 3.3.0
* Show free space in the status bar
* Refresh tree after deleting a file
* Fix a crash when clicking on the name column
* Quote %-escapes strings in the .desktop Exec key
* Fix all compilation warnings with Qt 5.15 and KDE 5.85
==== kernel-64kb ====
Version update (5.14.6 -> 5.14.9)
- ALSA: usb-audio: Restrict rates for the shared clocks
(bsc#1190418).
- commit d0ace7f
- Update
patches.kernel.org/5.14.9-147-Revert-drm-vc4-hdmi-runtime-PM-changes.patch
(bsc#1012628 bsc#1190469).
- Delete patches.suse/drm-vc4-hdmi-Fix-HPD-GPIO-detection.patch.
The former superseded the latter.
- commit 2bc4ba2
- Linux 5.14.9 (bsc#1012628).
- mm, hwpoison: add is_free_buddy_page() in HWPoisonHandlable()
(bsc#1012628).
- ocfs2: drop acl cache for directories too (bsc#1012628).
- mm/debug: sync up MR_CONTIG_RANGE and MR_LONGTERM_PIN
(bsc#1012628).
- mm: fix uninitialized use in overcommit_policy_handler
(bsc#1012628).
- usb: gadget: r8a66597: fix a loop in set_feature()
(bsc#1012628).
- usb: gadget: u_audio: EP-OUT bInterval in fback frequency
(bsc#1012628).
- usb: dwc2: gadget: Fix ISOC flow for BDMA and Slave
(bsc#1012628).
- usb: dwc2: gadget: Fix ISOC transfer complete handling for DDMA
(bsc#1012628).
- usb: musb: tusb6010: uninitialized data in
tusb_fifo_write_unaligned() (bsc#1012628).
- cifs: Not to defer close on file when lock is set (bsc#1012628).
- cifs: Fix soft lockup during fsstress (bsc#1012628).
- cifs: fix incorrect check for null pointer in header_assemble
(bsc#1012628).
- xen/x86: fix PV trap handling on secondary processors
(bsc#1012628).
- usb-storage: Add quirk for ScanLogic SL11R-IDE older than 2.6c
(bsc#1012628).
- USB: serial: cp210x: add ID for GW Instek GDM-834x Digital
Multimeter (bsc#1012628).
- USB: cdc-acm: fix minor-number release (bsc#1012628).
- Revert "USB: bcma: Add a check for devm_gpiod_get"
(bsc#1012628).
- binder: make sure fd closes complete (bsc#1012628).
- binder: fix freeze race (bsc#1012628).
- staging: greybus: uart: fix tty use after free (bsc#1012628).
- usb: isp1760: do not sleep in field register poll (bsc#1012628).
- Re-enable UAS for LaCie Rugged USB3-FW with fk quirk
(bsc#1012628).
- usb: dwc3: core: balance phy init and exit (bsc#1012628).
- usb: cdns3: fix race condition before setting doorbell
(bsc#1012628).
- usb: core: hcd: Add support for deferring roothub registration
(bsc#1012628).
- USB: serial: mos7840: remove duplicated 0xac24 device ID
(bsc#1012628).
- USB: serial: option: add Telit LN920 compositions (bsc#1012628).
- USB: serial: option: remove duplicate USB device ID
(bsc#1012628).
- USB: serial: option: add device id for Foxconn T99W265
(bsc#1012628).
- misc: bcm-vk: fix tty registration race (bsc#1012628).
- misc: genwqe: Fixes DMA mask setting (bsc#1012628).
- mcb: fix error handling in mcb_alloc_bus() (bsc#1012628).
- KVM: rseq: Update rseq when processing NOTIFY_RESUME on xfer
to KVM guest (bsc#1012628).
- erofs: fix up erofs_lookup tracepoint (bsc#1012628).
- nexthop: Fix division by zero while replacing a resilient group
(bsc#1012628).
- btrfs: prevent __btrfs_dump_space_info() to underflow its free
space (bsc#1012628).
- xhci: Set HCD flag to defer primary roothub registration
(bsc#1012628).
- serial: 8250: 8250_omap: Fix RX_LVL register offset
(bsc#1012628).
- serial: mvebu-uart: fix driver's tx_empty callback
(bsc#1012628).
- scsi: sd_zbc: Ensure buffer size is aligned to SECTOR_SIZE
(bsc#1012628).
- drm/amd/pm: Update intermediate power state for SI
(bsc#1012628).
- net: hso: fix muxed tty registration (bsc#1012628).
- platform/x86: amd-pmc: Increase the response register timeout
(bsc#1012628).
- arm64: Restore forced disabling of KPTI on ThunderX
(bsc#1012628).
- arm64: Mitigate MTE issues with str{n}cmp() (bsc#1012628).
- comedi: Fix memory leak in compat_insnlist() (bsc#1012628).
- regulator: qcom-rpmh-regulator: fix pm8009-1 ldo7 resource name
(bsc#1012628).
- afs: Fix page leak (bsc#1012628).
- afs: Fix incorrect triggering of sillyrename on 3rd-party
invalidation (bsc#1012628).
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS
server (bsc#1012628).
- afs: Fix updating of i_blocks on file/dir extension
(bsc#1012628).
- platform/x86/intel: punit_ipc: Drop wrong use of ACPI_PTR()
(bsc#1012628).
- regulator: max14577: Revert "regulator: max14577: Add proper
module aliases strings" (bsc#1012628).
- NLM: Fix svcxdr_encode_owner() (bsc#1012628).
- virtio-net: fix pages leaking when building skb in big mode
(bsc#1012628).
- enetc: Fix illegal access when reading affinity_hint
(bsc#1012628).
- enetc: Fix uninitialized struct dim_sample field usage
(bsc#1012628).
- net: dsa: tear down devlink port regions when tearing down
the devlink port on error (bsc#1012628).
- net: bgmac-bcma: handle deferred probe error due to mac-address
(bsc#1012628).
- napi: fix race inside napi_enable (bsc#1012628).
- bnxt_en: Fix TX timeout when TX ring size is set to the smallest
(bsc#1012628).
- net: hns3: fix change RSS 'hfunc' ineffective issue
(bsc#1012628).
- net: hns3: fix inconsistent vf id print (bsc#1012628).
- net: hns3: fix misuse vf id and vport id in some logs
(bsc#1012628).
- net: hns3: check queue id range before using (bsc#1012628).
- net: hns3: check vlan id before using it (bsc#1012628).
- net: hns3: fix a return value error in hclge_get_reset_status()
(bsc#1012628).
- net/smc: add missing error check in smc_clc_prfx_set()
(bsc#1012628).
- net/smc: fix 'workqueue leaked lock' in smc_conn_abort_work
(bsc#1012628).
- net: dsa: fix dsa_tree_setup error path (bsc#1012628).
- net: dsa: don't allocate the slave_mii_bus using devres
(bsc#1012628).
- net: dsa: realtek: register the MDIO bus under devres
(bsc#1012628).
- platform/x86: dell: fix DELL_WMI_PRIVACY dependencies & build
error (bsc#1012628).
- kselftest/arm64: signal: Add SVE to the set of features we
can check for (bsc#1012628).
- kselftest/arm64: signal: Skip tests if required features are
missing (bsc#1012628).
- spi: Revert modalias changes (bsc#1012628).
- s390/qeth: fix NULL deref in qeth_clear_working_pool_list()
(bsc#1012628).
- gpiolib: acpi: Make set-debounce-timeout failures non fatal
(bsc#1012628).
- gpio: uniphier: Fix void functions to remove return value
(bsc#1012628).
- qed: rdma - don't wait for resources under hw error recovery
flow (bsc#1012628).
- mptcp: ensure tx skbs always have the MPTCP ext (bsc#1012628).
- nexthop: Fix memory leaks in nexthop notification chain
listeners (bsc#1012628).
- nfc: st-nci: Add SPI ID matching DT compatible (bsc#1012628).
- net: ethernet: mtk_eth_soc: avoid creating duplicate offload
entries (bsc#1012628).
- net: mscc: ocelot: fix forwarding from BLOCKING ports remaining
enabled (bsc#1012628).
- net/mlx4_en: Don't allow aRFS for encapsulated packets
(bsc#1012628).
- atlantic: Fix issue in the pm resume flow (bsc#1012628).
- drm/amdkfd: map SVM range with correct access permission
(bsc#1012628).
- drm/amdkfd: fix dma mapping leaking warning (bsc#1012628).
- scsi: iscsi: Adjust iface sysfs attr detection (bsc#1012628).
- scsi: target: Fix the pgr/alua_support_store functions
(bsc#1012628).
- tty: synclink_gt: rename a conflicting function name
(bsc#1012628).
- fpga: machxo2-spi: Return an error on failure (bsc#1012628).
- fpga: machxo2-spi: Fix missing error code in
machxo2_write_complete() (bsc#1012628).
- x86/fault: Fix wrong signal when vsyscall fails with pkey
(bsc#1012628).
- nvme-tcp: fix incorrect h2cdata pdu offset accounting
(bsc#1012628).
- nvme: keep ctrl->namespaces ordered (bsc#1012628).
- thermal/core: Potential buffer overflow in
thermal_build_list_of_policies() (bsc#1012628).
- cifs: fix a sign extension bug (bsc#1012628).
- scsi: sd_zbc: Support disks with more than 2**32 logical blocks
(bsc#1012628).
- scsi: ufs: Revert "Utilize Transfer Request List Completion
Notification Register" (bsc#1012628).
- scsi: ufs: Retry aborted SCSI commands instead of completing
these successfully (bsc#1012628).
- scsi: ufs: core: Unbreak the reset handler (bsc#1012628).
- scsi: qla2xxx: Restore initiator in dual mode (bsc#1012628).
- scsi: lpfc: Use correct scnprintf() limit (bsc#1012628).
- irqchip/goldfish-pic: Select GENERIC_IRQ_CHIP to fix build
(bsc#1012628).
- irqchip/gic-v3-its: Fix potential VPE leak on error
(bsc#1012628).
- md: fix a lock order reversal in md_alloc (bsc#1012628).
- x86/asm: Fix SETZ size enqcmds() build failure (bsc#1012628).
- io_uring: fix race between poll completion and cancel_hash
insertion (bsc#1012628).
- io_uring: fix missing set of EPOLLONESHOT for CQ ring overflow
(bsc#1012628).
- io_uring: put provided buffer meta data under memcg accounting
(bsc#1012628).
- io_uring: don't punt files update to io-wq unconditionally
(bsc#1012628).
- blktrace: Fix uaf in blk_trace access after removing by sysfs
(bsc#1012628).
- net: phylink: Update SFP selected interface on advertising
changes (bsc#1012628).
- net: macb: fix use after free on rmmod (bsc#1012628).
- net: stmmac: allow CSR clock of 300MHz (bsc#1012628).
- blk-mq: avoid to iterate over stale request (bsc#1012628).
- m68k: Double cast io functions to unsigned long (bsc#1012628).
- ipv6: delay fib6_sernum increase in fib6_add (bsc#1012628).
- dma-debug: prevent an error message from causing runtime
problems (bsc#1012628).
- cpufreq: intel_pstate: Override parameters if HWP forced by BIOS
(bsc#1012628).
- bpf: Add oversize check before call kvcalloc() (bsc#1012628).
- xen/balloon: use a kernel thread instead a workqueue
(bsc#1012628).
- nvme-multipath: fix ANA state updates when a namespace is not
present (bsc#1012628).
- nvme-rdma: destroy cm id before destroy qp to avoid use after
free (bsc#1012628).
- sparc32: page align size in arch_dma_alloc (bsc#1012628).
- amd/display: downgrade validation failure log level
(bsc#1012628).
- drm/ttm: fix type mismatch error on sparc64 (bsc#1012628).
- block: check if a profile is actually registered in
blk_integrity_unregister (bsc#1012628).
- block: flush the integrity workqueue in blk_integrity_unregister
(bsc#1012628).
- blk-cgroup: fix UAF by grabbing blkcg lock before destroying
blkg pd (bsc#1012628).
- compiler.h: Introduce absolute_pointer macro (bsc#1012628).
- net: i825xx: Use absolute_pointer for memcpy from fixed memory
location (bsc#1012628).
- sparc: avoid stringop-overread errors (bsc#1012628).
- qnx4: avoid stringop-overread errors (bsc#1012628).
- parisc: Use absolute_pointer() to define PAGE0 (bsc#1012628).
- drm/amdkfd: make needs_pcie_atomics FW-version dependent
(bsc#1012628).
- drm/amd/display: Fix unstable HPCP compliance on Chrome Barcelo
(bsc#1012628).
- drm/amd/display: Link training retry fix for abort case
(bsc#1012628).
- amd/display: enable panel orientation quirks (bsc#1012628).
- arm64: Mark __stack_chk_guard as __ro_after_init (bsc#1012628).
- alpha: Declare virt_to_phys and virt_to_bus parameter as
pointer to volatile (bsc#1012628).
- net: 6pack: Fix tx timeout and slot time (bsc#1012628).
- spi: Fix tegra20 build with CONFIG_PM=n (bsc#1012628).
- libperf evsel: Make use of FD robust (bsc#1012628).
- Revert drm/vc4 hdmi runtime PM changes (bsc#1012628).
- EDAC/synopsys: Fix wrong value type assignment for edac_mode
(bsc#1012628).
- EDAC/dmc520: Assign the proper type to dimm->edac_mode
(bsc#1012628).
- x86/setup: Call early_reserve_memory() earlier (bsc#1012628).
- thermal/drivers/int340x: Do not set a wrong tcc offset on resume
(bsc#1012628).
- irqchip/armada-370-xp: Fix ack/eoi breakage (bsc#1012628).
- arm64: add MTE supported check to thread switching and syscall
entry/exit (bsc#1012628).
- USB: serial: cp210x: fix dropped characters with CP2102
(bsc#1012628).
- software node: balance refcount for managed software nodes
(bsc#1012628).
- xen/balloon: fix balloon kthread freezing (bsc#1012628).
- qnx4: work around gcc false positive warning bug (bsc#1012628).
- usb: gadget: f_uac2: Add missing companion descriptor for
feedback EP (bsc#1012628).
- usb: gadget: f_uac2: Populate SS descriptors' wBytesPerInterval
(bsc#1012628).
- Refresh patches.suse/drm-vc4-hdmi-Fix-HPD-GPIO-detection.patch.
- commit 85f5318
- arm64: Update config files. (bsc#1185927)
Set PINCTRL_ZYNQMP as build-in.
- commit 4ae263c
- blacklist.conf: add idxd commit
- commit 06dbf6b
- nvmet: fix a width vs precision bug in
nvmet_subsys_attr_serial_show() (git-fixes).
- commit fef4ef0
- Linux 5.14.8 (bsc#1012628).
- drm/nouveau/nvkm: Replace -ENOSYS with -ENODEV (bsc#1012628).
- selinux,smack: fix subjective/objective credential use mixups
(bsc#1012628).
- io_uring: fix off-by-one in BUILD_BUG_ON check of
__REQ_F_LAST_BIT (bsc#1012628).
- cifs: properly invalidate cached root handle when closing it
(bsc#1012628).
- sched/idle: Make the idle timer expire in hard interrupt context
(bsc#1012628).
- rtc: rx8010: select REGMAP_I2C (bsc#1012628).
- blk-mq: allow 4x BLK_MAX_REQUEST_COUNT at blk_plug for
multiple_queues (bsc#1012628).
- blk-throttle: fix UAF by deleteing timer in blk_throtl_exit()
(bsc#1012628).
- block: genhd: don't call blkdev_show() with major_names_lock
held (bsc#1012628).
- nvmet: fixup buffer overrun in nvmet_subsys_attr_serial()
(bsc#1012628).
- pwm: stm32-lp: Don't modify HW state in .remove() callback
(bsc#1012628).
- pwm: rockchip: Don't modify HW state in .remove() callback
(bsc#1012628).
- pwm: img: Don't modify HW state in .remove() callback
(bsc#1012628).
- habanalabs: cannot sleep while holding spinlock (bsc#1012628).
- habanalabs: add "in device creation" status (bsc#1012628).
- habanalabs: fix mmu node address resolution in debugfs
(bsc#1012628).
- habanalabs: add validity check for event ID received from F/W
(bsc#1012628).
- drm/amdgpu: fix fdinfo race with process exit (bsc#1012628).
- drm/amd/display: Fix memory leak reported by coverity
(bsc#1012628).
- drm/amdgpu: Fixes to returning VBIOS RAS EEPROM address
(bsc#1012628).
- habanalabs: fix nullifying of destroyed mmu pgt pool
(bsc#1012628).
- thermal/drivers/rcar_gen3_thermal: Store TSC id as unsigned int
(bsc#1012628).
- nilfs2: fix memory leak in nilfs_sysfs_delete_snapshot_group
(bsc#1012628).
- nilfs2: fix memory leak in nilfs_sysfs_create_snapshot_group
(bsc#1012628).
- nilfs2: fix memory leak in nilfs_sysfs_delete_##name##_group
(bsc#1012628).
- nilfs2: fix memory leak in nilfs_sysfs_create_##name##_group
(bsc#1012628).
- nilfs2: fix NULL pointer in nilfs_##name##_attr_release
(bsc#1012628).
- nilfs2: fix memory leak in nilfs_sysfs_create_device_group
(bsc#1012628).
- btrfs: fix lockdep warning while mounting sprout fs
(bsc#1012628).
- btrfs: delay blkdev_put until after the device remove
(bsc#1012628).
- btrfs: update the bdev time directly when closing (bsc#1012628).
- s390/unwind: use current_frame_address() to unwind current task
(bsc#1012628).
- ceph: lockdep annotations for try_nonblocking_invalidate
(bsc#1012628).
- ceph: remove the capsnaps when removing caps (bsc#1012628).
- ceph: request Fw caps before updating the mtime in
ceph_write_iter (bsc#1012628).
- ceph: fix memory leak on decode error in ceph_handle_caps
(bsc#1012628).
- ACPI: PM: s2idle: Run both AMD and Microsoft methods if both
are supported (bsc#1012628).
- ASoC: audio-graph: respawn Platform Support (bsc#1012628).
- s390: add kmemleak annotation in stack_alloc() (bsc#1012628).
- dmaengine: xilinx_dma: Set DMA mask for coherent APIs
(bsc#1012628).
- dmaengine: ioat: depends on !UML (bsc#1012628).
- cxl/pci: Introduce cdevm_file_operations (bsc#1012628).
- cxl: Move cxl_core to new directory (bsc#1012628).
- dmaengine: sprd: Add missing MODULE_DEVICE_TABLE (bsc#1012628).
- dmaengine: idxd: depends on !UML (bsc#1012628).
- riscv: dts: microchip: mpfs-icicle: Fix serial console
(bsc#1012628).
- of: property: Disable fw_devlink DT support for X86
(bsc#1012628).
- drm/ttm: Fix a deadlock if the target BO is not idle during swap
(bsc#1012628).
- arm64: mm: limit linear region to 51 bits for KVM in nVHE mode
(bsc#1012628).
- iommu/vt-d: Fix a deadlock in intel_svm_drain_prq()
(bsc#1012628).
- iommu/vt-d: Fix PASID leak in intel_svm_unbind_mm()
(bsc#1012628).
- iommu/amd: Relocate GAMSup check to early_enable_iommus
(bsc#1012628).
- parisc: Move pci_dev_is_behind_card_dino to where it is used
(bsc#1012628).
- dma-buf: DMABUF_DEBUG should depend on DMA_SHARED_BUFFER
(bsc#1012628).
- Update config files.
- dma-buf: DMABUF_MOVE_NOTIFY should depend on DMA_SHARED_BUFFER
(bsc#1012628).
- Update config files.
- drivers: base: cacheinfo: Get rid of
DEFINE_SMP_CALL_CACHE_FUNCTION() (bsc#1012628).
- drm/amdgpu: Disable PCIE_DPM on Intel RKL Platform
(bsc#1012628).
- thermal/core: Fix thermal_cooling_device_register() prototype
(bsc#1012628).
- tracing/boot: Fix to loop on only subkeys (bsc#1012628).
- tools/bootconfig: Fix tracing_on option checking in
ftrace2bconf.sh (bsc#1012628).
- Kconfig.debug: drop selecting non-existing
HARDLOCKUP_DETECTOR_ARCH (bsc#1012628).
- init: move usermodehelper_enable() to populate_rootfs()
(bsc#1012628).
- math: RATIONAL_KUNIT_TEST should depend on RATIONAL instead
of selecting it (bsc#1012628).
- SUNRPC: don't pause on incomplete allocation (bsc#1012628).
- s390/entry: make oklabel within CHKSTG macro local
(bsc#1012628).
- platform/chrome: cros_ec_trace: Fix format warnings
(bsc#1012628).
- platform/chrome: sensorhub: Add trace events for sample
(bsc#1012628).
- dmaengine: idxd: clear block on fault flag when clear wq
(bsc#1012628).
- dmaengine: idxd: fix abort status check (bsc#1012628).
- dmaengine: idxd: fix wq slot allocation index check
(bsc#1012628).
- dmaengine: idxd: have command status always set (bsc#1012628).
- dmanegine: idxd: cleanup all device related bits after disabling
device (bsc#1012628).
- pwm: mxs: Don't modify HW state in .probe() after the PWM chip
was registered (bsc#1012628).
- pwm: lpc32xx: Don't modify HW state in .probe() after the PWM
chip was registered (bsc#1012628).
- ceph: cancel delayed work instead of flushing on mdsc teardown
(bsc#1012628).
- thermal/drivers/qcom/spmi-adc-tm5: Don't abort probing if a
sensor is not used (bsc#1012628).
- PM: sleep: core: Avoid setting power.must_resume to false
(bsc#1012628).
- profiling: fix shift-out-of-bounds bugs (bsc#1012628).
- nilfs2: use refcount_dec_and_lock() to fix potential UAF
(bsc#1012628).
- prctl: allow to setup brk for et_dyn executables (bsc#1012628).
- pwm: ab8500: Fix register offset calculation to not depend on
probe order (bsc#1012628).
- 9p/trans_virtio: Remove sysfs file on probe failure
(bsc#1012628).
- thermal/drivers/exynos: Fix an error code in exynos_tmu_probe()
(bsc#1012628).
- n64cart: fix return value check in n64cart_probe()
(bsc#1012628).
- staging: rtl8723bs: fix wpa_set_auth_algs() function
(bsc#1012628).
- perf tools: Allow build-id with trailing zeros (bsc#1012628).
- perf symbol: Look for ImageBase in PE file to compute .text
offset (bsc#1012628).
- perf test: Fix bpf test sample mismatch reporting (bsc#1012628).
- dmaengine: acpi: Avoid comparison GSI with Linux vIRQ
(bsc#1012628).
- RDMA/mlx5: Fix xlt_chunk_align calculation (bsc#1012628).
- RDMA/hns: Enable stash feature of HIP09 (bsc#1012628).
- um: virtio_uml: fix memory leak on init failures (bsc#1012628).
- coredump: fix memleak in dump_vma_snapshot() (bsc#1012628).
- um: fix stub location calculation (bsc#1012628).
- staging: rtl8192u: Fix bitwise vs logical operator in
TranslateRxSignalStuff819xUsb() (bsc#1012628).
- console: consume APC, DM, DCS (bsc#1012628).
- PCI: aardvark: Fix reporting CRS value (bsc#1012628).
- PCI: pci-bridge-emul: Add PCIe Root Capabilities Register
(bsc#1012628).
- commit 94242c6
- kernel-binary.spec: suse-kernel-rpm-scriptlets required for uninstall as
well.
Fixes: e98096d5cf85 ("rpm: Abolish scritplet templating (bsc#1189841).")
- commit e082fbf
- Linux 5.14.7 (bsc#1012628).
- net: stmmac: fix MAC not working when system resume back with
WoL active (bsc#1012628).
- io_uring: ensure symmetry in handling iter types in
loop_rw_iter() (bsc#1012628).
- swiotlb-xen: avoid double free (bsc#1012628).
- swiotlb-xen: fix late init retry (bsc#1012628).
- xen: reset legacy rtc flag for PV domU (bsc#1012628).
- xen: fix usage of pmd_populate in mremap for pv guests
(bsc#1012628).
- bnx2x: Fix enabling network interfaces without VFs
(bsc#1012628).
- arm64/sve: Use correct size when reinitialising SVE state
(bsc#1012628).
- PM: base: power: don't try to use non-existing RTC for storing
data (bsc#1012628).
- PCI: Add AMD GPU multi-function power dependencies
(bsc#1012628).
- drm/amd/display: Get backlight from PWM if DMCU is not
initialized (bsc#1012628).
- drm/amd/display: dsc mst 2 4K displays go dark with 2 lane HBR3
(bsc#1012628).
- drm/amd/display: Fix white screen page fault for gpuvm
(bsc#1012628).
- drm/amd/pm: fix runpm hang when amdgpu loaded prior to sound
driver (bsc#1012628).
- drm/amd/amdgpu: Increase HWIP_MAX_INSTANCE to 10 (bsc#1012628).
- drm/amdgpu: use IS_ERR for debugfs APIs (bsc#1012628).
- drm/amdgpu: fix use after free during BO move (bsc#1012628).
- drm/amdgpu: add amdgpu_amdkfd_resume_iommu (bsc#1012628).
- drm/amdgpu: move iommu_resume before ip init/resume
(bsc#1012628).
- drm/amd/pm: fix the issue of uploading powerplay table
(bsc#1012628).
- drm/amdkfd: separate kfd_iommu_resume from kfd_resume
(bsc#1012628).
- drm/radeon: pass drm dev radeon_agp_head_init directly
(bsc#1012628).
- io_uring: allow retry for O_NONBLOCK if async is supported
(bsc#1012628).
- drm/etnaviv: return context from etnaviv_iommu_context_get
(bsc#1012628).
- drm/etnaviv: put submit prev MMU context when it exists
(bsc#1012628).
- drm/etnaviv: stop abusing mmu_context as FE running marker
(bsc#1012628).
- drm/etnaviv: keep MMU context across runtime suspend/resume
(bsc#1012628).
- drm/etnaviv: exec and MMU state is lost when resetting the GPU
(bsc#1012628).
- drm/etnaviv: fix MMU context leak on GPU reset (bsc#1012628).
- drm/etnaviv: reference MMU context when setting up hardware
state (bsc#1012628).
- drm/etnaviv: add missing MMU context put when reaping MMU
mapping (bsc#1012628).
- s390/sclp: fix Secure-IPL facility detection (bsc#1012628).
- net: qrtr: revert check in qrtr_endpoint_post() (bsc#1012628).
- x86/pat: Pass valid address to sanitize_phys() (bsc#1012628).
- x86/mm: Fix kern_addr_valid() to cope with existing but not
present entries (bsc#1012628).
- x86/mce: Avoid infinite loop for copy from user recovery
(bsc#1012628).
- net: remove the unnecessary check in cipso_v4_doi_free
(bsc#1012628).
- net/{mlx5|nfp|bnxt}: Remove unnecessary RTNL lock assert
(bsc#1012628).
- net-caif: avoid user-triggerable WARN_ON(1) (bsc#1012628).
- ptp: dp83640: don't define PAGE0 (bsc#1012628).
- dccp: don't duplicate ccid when cloning dccp sock (bsc#1012628).
- net/l2tp: Fix reference count leak in l2tp_udp_recv_core
(bsc#1012628).
- r6040: Restore MDIO clock frequency after MAC reset
(bsc#1012628).
- tipc: increase timeout in tipc_sk_enqueue() (bsc#1012628).
- drm/rockchip: cdn-dp-core: Make cdn_dp_core_resume
__maybe_unused (bsc#1012628).
- rtc: cmos: Disable irq around direct invocation of
cmos_interrupt() (bsc#1012628).
- drm/i915/dp: return proper DPRX link training result
(bsc#1012628).
- perf machine: Initialize srcline string member in add_location
struct (bsc#1012628).
- net/mlx5: FWTrace, cancel work on alloc pd error flow
(bsc#1012628).
- net/mlx5: Fix potential sleeping in atomic context
(bsc#1012628).
- net: stmmac: fix system hang caused by eee_ctrl_timer during
suspend/resume (bsc#1012628).
- igc: fix tunnel offloading (bsc#1012628).
- nvme-tcp: fix io_work priority inversion (bsc#1012628).
- powerpc/64s: system call scv tabort fix for corrupt irq
soft-mask state (bsc#1012628).
- events: Reuse value read using READ_ONCE instead of re-reading
it (bsc#1012628).
- net: ipa: initialize all filter table slots (bsc#1012628).
- gen_compile_commands: fix missing 'sys' package (bsc#1012628).
- vhost_net: fix OoB on sendmsg() failure (bsc#1012628).
- net/af_unix: fix a data-race in unix_dgram_poll (bsc#1012628).
- net: dsa: destroy the phylink instance on any error in
dsa_slave_phy_setup (bsc#1012628).
- x86/uaccess: Fix 32-bit __get_user_asm_u64() when
CC_HAS_ASM_GOTO_OUTPUT=y (bsc#1012628).
- tcp: fix tp->undo_retrans accounting in tcp_sacktag_one()
(bsc#1012628).
- selftest: net: fix typo in altname test (bsc#1012628).
- qed: Handle management FW error (bsc#1012628).
- udp_tunnel: Fix udp_tunnel_nic work-queue type (bsc#1012628).
- dt-bindings: arm: Fix Toradex compatible typo (bsc#1012628).
- ibmvnic: check failover_pending in login response (bsc#1012628).
- KVM: PPC: Book3S HV: Tolerate treclaim. in fake-suspend mode
changing registers (bsc#1012628).
- powerpc/64s: system call rfscv workaround for TM bugs
(bsc#1012628).
- powerpc/mce: Fix access error in mce handler (bsc#1012628).
- s390/pci_mmio: fully validate the VMA before calling
follow_pte() (bsc#1012628).
- bnxt_en: make bnxt_free_skbs() safe to call after
bnxt_free_mem() (bsc#1012628).
- net: hns3: pad the short tunnel frame before sending to hardware
(bsc#1012628).
- net: hns3: change affinity_mask to numa node range
(bsc#1012628).
- net: hns3: disable mac in flr process (bsc#1012628).
- net: hns3: fix the timing issue of VF clearing interrupt sources
(bsc#1012628).
- net: stmmac: platform: fix build warning when with
!CONFIG_PM_SLEEP (bsc#1012628).
- Drivers: hv: vmbus: Fix kernel crash upon unbinding a device
from uio_hv_generic driver (bsc#1012628).
- net/mlx5e: Fix mutual exclusion between CQE compression and
HW TS (bsc#1012628).
- ice: Correctly deal with PFs that do not support RDMA
(bsc#1012628).
- net: dsa: qca8k: fix kernel panic with legacy mdio mapping
(bsc#1012628).
- net: dsa: lantiq_gswip: Add 200ms assert delay (bsc#1012628).
- net: hns3: fix the exception when query imp info (bsc#1012628).
- nvme: avoid race in shutdown namespace removal (bsc#1012628).
- blkcg: fix memory leak in blk_iolatency_init (bsc#1012628).
- net: dsa: flush switchdev workqueue before tearing down CPU/DSA
ports (bsc#1012628).
- mlxbf_gige: clear valid_polarity upon open (bsc#1012628).
- dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation
(bsc#1012628).
- remoteproc: qcom: wcnss: Fix race with iris probe (bsc#1012628).
- mfd: db8500-prcmu: Adjust map to reality (bsc#1012628).
- PCI: Add ACS quirks for NXP LX2xx0 and LX2xx2 platforms
(bsc#1012628).
- fuse: fix use after free in fuse_read_interrupt() (bsc#1012628).
- PCI: tegra194: Fix handling BME_CHGED event (bsc#1012628).
- PCI: tegra194: Fix MSI-X programming (bsc#1012628).
- PCI: tegra: Fix OF node reference leak (bsc#1012628).
- mfd: Don't use irq_create_mapping() to resolve a mapping
(bsc#1012628).
- PCI: rcar: Fix runtime PM imbalance in rcar_pcie_ep_probe()
(bsc#1012628).
- riscv: fix the global name pfn_base confliction error
(bsc#1012628).
- KVM: arm64: Make hyp_panic() more robust when protected mode
is enabled (bsc#1012628).
- tracing/probes: Reject events which have the same name of
existing one (bsc#1012628).
- PCI: cadence: Use bitfield for *quirk_retrain_flag* instead
of bool (bsc#1012628).
- PCI: cadence: Add quirk flag to set minimum delay in LTSSM
Detect.Quiet state (bsc#1012628).
- PCI: j721e: Add PCIe support for J7200 (bsc#1012628).
- PCI: j721e: Add PCIe support for AM64 (bsc#1012628).
- PCI: Add ACS quirks for Cavium multi-function devices
(bsc#1012628).
- watchdog: Start watchdog in watchdog_set_last_hw_keepalive
only if appropriate (bsc#1012628).
- octeontx2-af: Add additional register check to rvu_poll_reg()
(bsc#1012628).
- Set fc_nlinfo in nh_create_ipv4, nh_create_ipv6 (bsc#1012628).
- flow: fix object-size-mismatch warning in
flowi{4,6}_to_flowi_common() (bsc#1012628).
- net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920
(bsc#1012628).
- block, bfq: honor already-setup queue merges (bsc#1012628).
- PCI: ibmphp: Fix double unmap of io_mem (bsc#1012628).
- loop: reduce the loop_ctl_mutex scope (bsc#1012628).
- ethtool: Fix an error code in cxgb2.c (bsc#1012628).
- NTB: Fix an error code in ntb_msit_probe() (bsc#1012628).
- NTB: perf: Fix an error code in perf_setup_inbuf()
(bsc#1012628).
- stmmac: dwmac-loongson:Fix missing return value (bsc#1012628).
- net: phylink: add suspend/resume support (bsc#1012628).
- mfd: axp20x: Update AXP288 volatile ranges (bsc#1012628).
- backlight: ktd253: Stabilize backlight (bsc#1012628).
- PCI: controller: PCI_IXP4XX should depend on ARCH_IXP4XX
(bsc#1012628).
- PCI: of: Don't fail devm_pci_alloc_host_bridge() on missing
'ranges' (bsc#1012628).
- PCI: iproc: Fix BCMA probe resource handling (bsc#1012628).
- netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with
mutex (bsc#1012628).
- KVM: arm64: Restrict IPA size to maximum 48 bits on 4K and
16K page size (bsc#1012628).
- PCI: Fix pci_dev_str_match_path() alloc while atomic bug
(bsc#1012628).
- mfd: tqmx86: Clear GPIO IRQ resource when no IRQ is set
(bsc#1012628).
- tracing/boot: Fix a hist trigger dependency for boot time
tracing (bsc#1012628).
- mtd: mtdconcat: Judge callback existence based on the master
(bsc#1012628).
- mtd: mtdconcat: Check _read, _write callbacks existence before
assignment (bsc#1012628).
- KVM: arm64: Fix read-side race on updates to vcpu reset state
(bsc#1012628).
- KVM: arm64: Handle PSCI resets before userspace touches vCPU
state (bsc#1012628).
- PCI/PTM: Remove error message at boot (bsc#1012628).
- PCI: Sync __pci_register_driver() stub for CONFIG_PCI=n
(bsc#1012628).
- mtd: rawnand: cafe: Fix a resource leak in the error handling
path of 'cafe_nand_probe()' (bsc#1012628).
- ARC: export clear_user_page() for modules (bsc#1012628).
- perf config: Fix caching and memory leak in
perf_home_perfconfig() (bsc#1012628).
- perf unwind: Do not overwrite
FEATURE_CHECK_LDFLAGS-libunwind-{x86,aarch64} (bsc#1012628).
- perf bench inject-buildid: Handle writen() errors (bsc#1012628).
- gpio: mpc8xxx: Fix a resources leak in the error handling path
of 'mpc8xxx_probe()' (bsc#1012628).
- gpio: mpc8xxx: Fix a potential double iounmap call in
'mpc8xxx_probe()' (bsc#1012628).
- gpio: mpc8xxx: Use 'devm_gpiochip_add_data()' to simplify the
code and avoid a leak (bsc#1012628).
- io_uring: retry in case of short read on block device
(bsc#1012628).
- net: dsa: tag_rtl4_a: Fix egress tags (bsc#1012628).
- tools build: Fix feature detect clean for out of source builds
(bsc#1012628).
- mptcp: fix possible divide by zero (bsc#1012628).
- selftests: mptcp: clean tmp files in simult_flows (bsc#1012628).
- net: hso: add failure handler for add_net_device (bsc#1012628).
- net: dsa: b53: Fix calculating number of switch ports
(bsc#1012628).
- net: dsa: b53: Set correct number of ports in the DSA struct
(bsc#1012628).
- mptcp: Only send extra TCP acks in eligible socket states
(bsc#1012628).
- netfilter: socket: icmp6: fix use-after-scope (bsc#1012628).
- fq_codel: reject silly quantum parameters (bsc#1012628).
- qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom
(bsc#1012628).
- iwlwifi: move get pnvm file name to a separate function
(bsc#1012628).
- iwlwifi: pnvm: Fix a memory leak in 'iwl_pnvm_get_from_fs()'
(bsc#1012628).
- ip_gre: validate csum_start only on pull (bsc#1012628).
- net: dsa: b53: Fix IMP port setup on BCM5301x (bsc#1012628).
- bnxt_en: fix stored FW_PSID version masks (bsc#1012628).
- bnxt_en: Fix asic.rev in devlink dev info command (bsc#1012628).
- bnxt_en: Fix possible unintended driver initiated error recovery
(bsc#1012628).
- ip6_gre: Revert "ip6_gre: add validation for csum_start"
(bsc#1012628).
- mfd: lpc_sch: Rename GPIOBASE to prevent build error
(bsc#1012628).
- cxgb3: fix oops on module removal (bsc#1012628).
- net: renesas: sh_eth: Fix freeing wrong tx descriptor
(bsc#1012628).
- bnxt_en: Fix error recovery regression (bsc#1012628).
- net: dsa: bcm_sf2: Fix array overrun in
bcm_sf2_num_active_ports() (bsc#1012628).
- s390/bpf: Fix optimizing out zero-extensions (bsc#1012628).
- s390/bpf: Fix 64-bit subtraction of the -0x80000000 constant
(bsc#1012628).
- s390/bpf: Fix branch shortening during codegen pass
(bsc#1012628).
- Update config files.
- commit aa9b3e1
- Revert "Revert "rpm: Abolish scritplet templating (bsc#1189841).""
This reverts commit f924054cc523527b52203e352adb073db0962f5f.
New suse-module-tools were accepted to factory:
https://build.opensuse.org/request/show/919089
- commit 6abad1e
==== kernel-source ====
Version update (5.14.6 -> 5.14.9)
- ALSA: usb-audio: Restrict rates for the shared clocks
(bsc#1190418).
- commit d0ace7f
- Update
patches.kernel.org/5.14.9-147-Revert-drm-vc4-hdmi-runtime-PM-changes.patch
(bsc#1012628 bsc#1190469).
- Delete patches.suse/drm-vc4-hdmi-Fix-HPD-GPIO-detection.patch.
The former superseded the latter.
- commit 2bc4ba2
- Linux 5.14.9 (bsc#1012628).
- mm, hwpoison: add is_free_buddy_page() in HWPoisonHandlable()
(bsc#1012628).
- ocfs2: drop acl cache for directories too (bsc#1012628).
- mm/debug: sync up MR_CONTIG_RANGE and MR_LONGTERM_PIN
(bsc#1012628).
- mm: fix uninitialized use in overcommit_policy_handler
(bsc#1012628).
- usb: gadget: r8a66597: fix a loop in set_feature()
(bsc#1012628).
- usb: gadget: u_audio: EP-OUT bInterval in fback frequency
(bsc#1012628).
- usb: dwc2: gadget: Fix ISOC flow for BDMA and Slave
(bsc#1012628).
- usb: dwc2: gadget: Fix ISOC transfer complete handling for DDMA
(bsc#1012628).
- usb: musb: tusb6010: uninitialized data in
tusb_fifo_write_unaligned() (bsc#1012628).
- cifs: Not to defer close on file when lock is set (bsc#1012628).
- cifs: Fix soft lockup during fsstress (bsc#1012628).
- cifs: fix incorrect check for null pointer in header_assemble
(bsc#1012628).
- xen/x86: fix PV trap handling on secondary processors
(bsc#1012628).
- usb-storage: Add quirk for ScanLogic SL11R-IDE older than 2.6c
(bsc#1012628).
- USB: serial: cp210x: add ID for GW Instek GDM-834x Digital
Multimeter (bsc#1012628).
- USB: cdc-acm: fix minor-number release (bsc#1012628).
- Revert "USB: bcma: Add a check for devm_gpiod_get"
(bsc#1012628).
- binder: make sure fd closes complete (bsc#1012628).
- binder: fix freeze race (bsc#1012628).
- staging: greybus: uart: fix tty use after free (bsc#1012628).
- usb: isp1760: do not sleep in field register poll (bsc#1012628).
- Re-enable UAS for LaCie Rugged USB3-FW with fk quirk
(bsc#1012628).
- usb: dwc3: core: balance phy init and exit (bsc#1012628).
- usb: cdns3: fix race condition before setting doorbell
(bsc#1012628).
- usb: core: hcd: Add support for deferring roothub registration
(bsc#1012628).
- USB: serial: mos7840: remove duplicated 0xac24 device ID
(bsc#1012628).
- USB: serial: option: add Telit LN920 compositions (bsc#1012628).
- USB: serial: option: remove duplicate USB device ID
(bsc#1012628).
- USB: serial: option: add device id for Foxconn T99W265
(bsc#1012628).
- misc: bcm-vk: fix tty registration race (bsc#1012628).
- misc: genwqe: Fixes DMA mask setting (bsc#1012628).
- mcb: fix error handling in mcb_alloc_bus() (bsc#1012628).
- KVM: rseq: Update rseq when processing NOTIFY_RESUME on xfer
to KVM guest (bsc#1012628).
- erofs: fix up erofs_lookup tracepoint (bsc#1012628).
- nexthop: Fix division by zero while replacing a resilient group
(bsc#1012628).
- btrfs: prevent __btrfs_dump_space_info() to underflow its free
space (bsc#1012628).
- xhci: Set HCD flag to defer primary roothub registration
(bsc#1012628).
- serial: 8250: 8250_omap: Fix RX_LVL register offset
(bsc#1012628).
- serial: mvebu-uart: fix driver's tx_empty callback
(bsc#1012628).
- scsi: sd_zbc: Ensure buffer size is aligned to SECTOR_SIZE
(bsc#1012628).
- drm/amd/pm: Update intermediate power state for SI
(bsc#1012628).
- net: hso: fix muxed tty registration (bsc#1012628).
- platform/x86: amd-pmc: Increase the response register timeout
(bsc#1012628).
- arm64: Restore forced disabling of KPTI on ThunderX
(bsc#1012628).
- arm64: Mitigate MTE issues with str{n}cmp() (bsc#1012628).
- comedi: Fix memory leak in compat_insnlist() (bsc#1012628).
- regulator: qcom-rpmh-regulator: fix pm8009-1 ldo7 resource name
(bsc#1012628).
- afs: Fix page leak (bsc#1012628).
- afs: Fix incorrect triggering of sillyrename on 3rd-party
invalidation (bsc#1012628).
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS
server (bsc#1012628).
- afs: Fix updating of i_blocks on file/dir extension
(bsc#1012628).
- platform/x86/intel: punit_ipc: Drop wrong use of ACPI_PTR()
(bsc#1012628).
- regulator: max14577: Revert "regulator: max14577: Add proper
module aliases strings" (bsc#1012628).
- NLM: Fix svcxdr_encode_owner() (bsc#1012628).
- virtio-net: fix pages leaking when building skb in big mode
(bsc#1012628).
- enetc: Fix illegal access when reading affinity_hint
(bsc#1012628).
- enetc: Fix uninitialized struct dim_sample field usage
(bsc#1012628).
- net: dsa: tear down devlink port regions when tearing down
the devlink port on error (bsc#1012628).
- net: bgmac-bcma: handle deferred probe error due to mac-address
(bsc#1012628).
- napi: fix race inside napi_enable (bsc#1012628).
- bnxt_en: Fix TX timeout when TX ring size is set to the smallest
(bsc#1012628).
- net: hns3: fix change RSS 'hfunc' ineffective issue
(bsc#1012628).
- net: hns3: fix inconsistent vf id print (bsc#1012628).
- net: hns3: fix misuse vf id and vport id in some logs
(bsc#1012628).
- net: hns3: check queue id range before using (bsc#1012628).
- net: hns3: check vlan id before using it (bsc#1012628).
- net: hns3: fix a return value error in hclge_get_reset_status()
(bsc#1012628).
- net/smc: add missing error check in smc_clc_prfx_set()
(bsc#1012628).
- net/smc: fix 'workqueue leaked lock' in smc_conn_abort_work
(bsc#1012628).
- net: dsa: fix dsa_tree_setup error path (bsc#1012628).
- net: dsa: don't allocate the slave_mii_bus using devres
(bsc#1012628).
- net: dsa: realtek: register the MDIO bus under devres
(bsc#1012628).
- platform/x86: dell: fix DELL_WMI_PRIVACY dependencies & build
error (bsc#1012628).
- kselftest/arm64: signal: Add SVE to the set of features we
can check for (bsc#1012628).
- kselftest/arm64: signal: Skip tests if required features are
missing (bsc#1012628).
- spi: Revert modalias changes (bsc#1012628).
- s390/qeth: fix NULL deref in qeth_clear_working_pool_list()
(bsc#1012628).
- gpiolib: acpi: Make set-debounce-timeout failures non fatal
(bsc#1012628).
- gpio: uniphier: Fix void functions to remove return value
(bsc#1012628).
- qed: rdma - don't wait for resources under hw error recovery
flow (bsc#1012628).
- mptcp: ensure tx skbs always have the MPTCP ext (bsc#1012628).
- nexthop: Fix memory leaks in nexthop notification chain
listeners (bsc#1012628).
- nfc: st-nci: Add SPI ID matching DT compatible (bsc#1012628).
- net: ethernet: mtk_eth_soc: avoid creating duplicate offload
entries (bsc#1012628).
- net: mscc: ocelot: fix forwarding from BLOCKING ports remaining
enabled (bsc#1012628).
- net/mlx4_en: Don't allow aRFS for encapsulated packets
(bsc#1012628).
- atlantic: Fix issue in the pm resume flow (bsc#1012628).
- drm/amdkfd: map SVM range with correct access permission
(bsc#1012628).
- drm/amdkfd: fix dma mapping leaking warning (bsc#1012628).
- scsi: iscsi: Adjust iface sysfs attr detection (bsc#1012628).
- scsi: target: Fix the pgr/alua_support_store functions
(bsc#1012628).
- tty: synclink_gt: rename a conflicting function name
(bsc#1012628).
- fpga: machxo2-spi: Return an error on failure (bsc#1012628).
- fpga: machxo2-spi: Fix missing error code in
machxo2_write_complete() (bsc#1012628).
- x86/fault: Fix wrong signal when vsyscall fails with pkey
(bsc#1012628).
- nvme-tcp: fix incorrect h2cdata pdu offset accounting
(bsc#1012628).
- nvme: keep ctrl->namespaces ordered (bsc#1012628).
- thermal/core: Potential buffer overflow in
thermal_build_list_of_policies() (bsc#1012628).
- cifs: fix a sign extension bug (bsc#1012628).
- scsi: sd_zbc: Support disks with more than 2**32 logical blocks
(bsc#1012628).
- scsi: ufs: Revert "Utilize Transfer Request List Completion
Notification Register" (bsc#1012628).
- scsi: ufs: Retry aborted SCSI commands instead of completing
these successfully (bsc#1012628).
- scsi: ufs: core: Unbreak the reset handler (bsc#1012628).
- scsi: qla2xxx: Restore initiator in dual mode (bsc#1012628).
- scsi: lpfc: Use correct scnprintf() limit (bsc#1012628).
- irqchip/goldfish-pic: Select GENERIC_IRQ_CHIP to fix build
(bsc#1012628).
- irqchip/gic-v3-its: Fix potential VPE leak on error
(bsc#1012628).
- md: fix a lock order reversal in md_alloc (bsc#1012628).
- x86/asm: Fix SETZ size enqcmds() build failure (bsc#1012628).
- io_uring: fix race between poll completion and cancel_hash
insertion (bsc#1012628).
- io_uring: fix missing set of EPOLLONESHOT for CQ ring overflow
(bsc#1012628).
- io_uring: put provided buffer meta data under memcg accounting
(bsc#1012628).
- io_uring: don't punt files update to io-wq unconditionally
(bsc#1012628).
- blktrace: Fix uaf in blk_trace access after removing by sysfs
(bsc#1012628).
- net: phylink: Update SFP selected interface on advertising
changes (bsc#1012628).
- net: macb: fix use after free on rmmod (bsc#1012628).
- net: stmmac: allow CSR clock of 300MHz (bsc#1012628).
- blk-mq: avoid to iterate over stale request (bsc#1012628).
- m68k: Double cast io functions to unsigned long (bsc#1012628).
- ipv6: delay fib6_sernum increase in fib6_add (bsc#1012628).
- dma-debug: prevent an error message from causing runtime
problems (bsc#1012628).
- cpufreq: intel_pstate: Override parameters if HWP forced by BIOS
(bsc#1012628).
- bpf: Add oversize check before call kvcalloc() (bsc#1012628).
- xen/balloon: use a kernel thread instead a workqueue
(bsc#1012628).
- nvme-multipath: fix ANA state updates when a namespace is not
present (bsc#1012628).
- nvme-rdma: destroy cm id before destroy qp to avoid use after
free (bsc#1012628).
- sparc32: page align size in arch_dma_alloc (bsc#1012628).
- amd/display: downgrade validation failure log level
(bsc#1012628).
- drm/ttm: fix type mismatch error on sparc64 (bsc#1012628).
- block: check if a profile is actually registered in
blk_integrity_unregister (bsc#1012628).
- block: flush the integrity workqueue in blk_integrity_unregister
(bsc#1012628).
- blk-cgroup: fix UAF by grabbing blkcg lock before destroying
blkg pd (bsc#1012628).
- compiler.h: Introduce absolute_pointer macro (bsc#1012628).
- net: i825xx: Use absolute_pointer for memcpy from fixed memory
location (bsc#1012628).
- sparc: avoid stringop-overread errors (bsc#1012628).
- qnx4: avoid stringop-overread errors (bsc#1012628).
- parisc: Use absolute_pointer() to define PAGE0 (bsc#1012628).
- drm/amdkfd: make needs_pcie_atomics FW-version dependent
(bsc#1012628).
- drm/amd/display: Fix unstable HPCP compliance on Chrome Barcelo
(bsc#1012628).
- drm/amd/display: Link training retry fix for abort case
(bsc#1012628).
- amd/display: enable panel orientation quirks (bsc#1012628).
- arm64: Mark __stack_chk_guard as __ro_after_init (bsc#1012628).
- alpha: Declare virt_to_phys and virt_to_bus parameter as
pointer to volatile (bsc#1012628).
- net: 6pack: Fix tx timeout and slot time (bsc#1012628).
- spi: Fix tegra20 build with CONFIG_PM=n (bsc#1012628).
- libperf evsel: Make use of FD robust (bsc#1012628).
- Revert drm/vc4 hdmi runtime PM changes (bsc#1012628).
- EDAC/synopsys: Fix wrong value type assignment for edac_mode
(bsc#1012628).
- EDAC/dmc520: Assign the proper type to dimm->edac_mode
(bsc#1012628).
- x86/setup: Call early_reserve_memory() earlier (bsc#1012628).
- thermal/drivers/int340x: Do not set a wrong tcc offset on resume
(bsc#1012628).
- irqchip/armada-370-xp: Fix ack/eoi breakage (bsc#1012628).
- arm64: add MTE supported check to thread switching and syscall
entry/exit (bsc#1012628).
- USB: serial: cp210x: fix dropped characters with CP2102
(bsc#1012628).
- software node: balance refcount for managed software nodes
(bsc#1012628).
- xen/balloon: fix balloon kthread freezing (bsc#1012628).
- qnx4: work around gcc false positive warning bug (bsc#1012628).
- usb: gadget: f_uac2: Add missing companion descriptor for
feedback EP (bsc#1012628).
- usb: gadget: f_uac2: Populate SS descriptors' wBytesPerInterval
(bsc#1012628).
- Refresh patches.suse/drm-vc4-hdmi-Fix-HPD-GPIO-detection.patch.
- commit 85f5318
- arm64: Update config files. (bsc#1185927)
Set PINCTRL_ZYNQMP as build-in.
- commit 4ae263c
- blacklist.conf: add idxd commit
- commit 06dbf6b
- nvmet: fix a width vs precision bug in
nvmet_subsys_attr_serial_show() (git-fixes).
- commit fef4ef0
- Linux 5.14.8 (bsc#1012628).
- drm/nouveau/nvkm: Replace -ENOSYS with -ENODEV (bsc#1012628).
- selinux,smack: fix subjective/objective credential use mixups
(bsc#1012628).
- io_uring: fix off-by-one in BUILD_BUG_ON check of
__REQ_F_LAST_BIT (bsc#1012628).
- cifs: properly invalidate cached root handle when closing it
(bsc#1012628).
- sched/idle: Make the idle timer expire in hard interrupt context
(bsc#1012628).
- rtc: rx8010: select REGMAP_I2C (bsc#1012628).
- blk-mq: allow 4x BLK_MAX_REQUEST_COUNT at blk_plug for
multiple_queues (bsc#1012628).
- blk-throttle: fix UAF by deleteing timer in blk_throtl_exit()
(bsc#1012628).
- block: genhd: don't call blkdev_show() with major_names_lock
held (bsc#1012628).
- nvmet: fixup buffer overrun in nvmet_subsys_attr_serial()
(bsc#1012628).
- pwm: stm32-lp: Don't modify HW state in .remove() callback
(bsc#1012628).
- pwm: rockchip: Don't modify HW state in .remove() callback
(bsc#1012628).
- pwm: img: Don't modify HW state in .remove() callback
(bsc#1012628).
- habanalabs: cannot sleep while holding spinlock (bsc#1012628).
- habanalabs: add "in device creation" status (bsc#1012628).
- habanalabs: fix mmu node address resolution in debugfs
(bsc#1012628).
- habanalabs: add validity check for event ID received from F/W
(bsc#1012628).
- drm/amdgpu: fix fdinfo race with process exit (bsc#1012628).
- drm/amd/display: Fix memory leak reported by coverity
(bsc#1012628).
- drm/amdgpu: Fixes to returning VBIOS RAS EEPROM address
(bsc#1012628).
- habanalabs: fix nullifying of destroyed mmu pgt pool
(bsc#1012628).
- thermal/drivers/rcar_gen3_thermal: Store TSC id as unsigned int
(bsc#1012628).
- nilfs2: fix memory leak in nilfs_sysfs_delete_snapshot_group
(bsc#1012628).
- nilfs2: fix memory leak in nilfs_sysfs_create_snapshot_group
(bsc#1012628).
- nilfs2: fix memory leak in nilfs_sysfs_delete_##name##_group
(bsc#1012628).
- nilfs2: fix memory leak in nilfs_sysfs_create_##name##_group
(bsc#1012628).
- nilfs2: fix NULL pointer in nilfs_##name##_attr_release
(bsc#1012628).
- nilfs2: fix memory leak in nilfs_sysfs_create_device_group
(bsc#1012628).
- btrfs: fix lockdep warning while mounting sprout fs
(bsc#1012628).
- btrfs: delay blkdev_put until after the device remove
(bsc#1012628).
- btrfs: update the bdev time directly when closing (bsc#1012628).
- s390/unwind: use current_frame_address() to unwind current task
(bsc#1012628).
- ceph: lockdep annotations for try_nonblocking_invalidate
(bsc#1012628).
- ceph: remove the capsnaps when removing caps (bsc#1012628).
- ceph: request Fw caps before updating the mtime in
ceph_write_iter (bsc#1012628).
- ceph: fix memory leak on decode error in ceph_handle_caps
(bsc#1012628).
- ACPI: PM: s2idle: Run both AMD and Microsoft methods if both
are supported (bsc#1012628).
- ASoC: audio-graph: respawn Platform Support (bsc#1012628).
- s390: add kmemleak annotation in stack_alloc() (bsc#1012628).
- dmaengine: xilinx_dma: Set DMA mask for coherent APIs
(bsc#1012628).
- dmaengine: ioat: depends on !UML (bsc#1012628).
- cxl/pci: Introduce cdevm_file_operations (bsc#1012628).
- cxl: Move cxl_core to new directory (bsc#1012628).
- dmaengine: sprd: Add missing MODULE_DEVICE_TABLE (bsc#1012628).
- dmaengine: idxd: depends on !UML (bsc#1012628).
- riscv: dts: microchip: mpfs-icicle: Fix serial console
(bsc#1012628).
- of: property: Disable fw_devlink DT support for X86
(bsc#1012628).
- drm/ttm: Fix a deadlock if the target BO is not idle during swap
(bsc#1012628).
- arm64: mm: limit linear region to 51 bits for KVM in nVHE mode
(bsc#1012628).
- iommu/vt-d: Fix a deadlock in intel_svm_drain_prq()
(bsc#1012628).
- iommu/vt-d: Fix PASID leak in intel_svm_unbind_mm()
(bsc#1012628).
- iommu/amd: Relocate GAMSup check to early_enable_iommus
(bsc#1012628).
- parisc: Move pci_dev_is_behind_card_dino to where it is used
(bsc#1012628).
- dma-buf: DMABUF_DEBUG should depend on DMA_SHARED_BUFFER
(bsc#1012628).
- Update config files.
- dma-buf: DMABUF_MOVE_NOTIFY should depend on DMA_SHARED_BUFFER
(bsc#1012628).
- Update config files.
- drivers: base: cacheinfo: Get rid of
DEFINE_SMP_CALL_CACHE_FUNCTION() (bsc#1012628).
- drm/amdgpu: Disable PCIE_DPM on Intel RKL Platform
(bsc#1012628).
- thermal/core: Fix thermal_cooling_device_register() prototype
(bsc#1012628).
- tracing/boot: Fix to loop on only subkeys (bsc#1012628).
- tools/bootconfig: Fix tracing_on option checking in
ftrace2bconf.sh (bsc#1012628).
- Kconfig.debug: drop selecting non-existing
HARDLOCKUP_DETECTOR_ARCH (bsc#1012628).
- init: move usermodehelper_enable() to populate_rootfs()
(bsc#1012628).
- math: RATIONAL_KUNIT_TEST should depend on RATIONAL instead
of selecting it (bsc#1012628).
- SUNRPC: don't pause on incomplete allocation (bsc#1012628).
- s390/entry: make oklabel within CHKSTG macro local
(bsc#1012628).
- platform/chrome: cros_ec_trace: Fix format warnings
(bsc#1012628).
- platform/chrome: sensorhub: Add trace events for sample
(bsc#1012628).
- dmaengine: idxd: clear block on fault flag when clear wq
(bsc#1012628).
- dmaengine: idxd: fix abort status check (bsc#1012628).
- dmaengine: idxd: fix wq slot allocation index check
(bsc#1012628).
- dmaengine: idxd: have command status always set (bsc#1012628).
- dmanegine: idxd: cleanup all device related bits after disabling
device (bsc#1012628).
- pwm: mxs: Don't modify HW state in .probe() after the PWM chip
was registered (bsc#1012628).
- pwm: lpc32xx: Don't modify HW state in .probe() after the PWM
chip was registered (bsc#1012628).
- ceph: cancel delayed work instead of flushing on mdsc teardown
(bsc#1012628).
- thermal/drivers/qcom/spmi-adc-tm5: Don't abort probing if a
sensor is not used (bsc#1012628).
- PM: sleep: core: Avoid setting power.must_resume to false
(bsc#1012628).
- profiling: fix shift-out-of-bounds bugs (bsc#1012628).
- nilfs2: use refcount_dec_and_lock() to fix potential UAF
(bsc#1012628).
- prctl: allow to setup brk for et_dyn executables (bsc#1012628).
- pwm: ab8500: Fix register offset calculation to not depend on
probe order (bsc#1012628).
- 9p/trans_virtio: Remove sysfs file on probe failure
(bsc#1012628).
- thermal/drivers/exynos: Fix an error code in exynos_tmu_probe()
(bsc#1012628).
- n64cart: fix return value check in n64cart_probe()
(bsc#1012628).
- staging: rtl8723bs: fix wpa_set_auth_algs() function
(bsc#1012628).
- perf tools: Allow build-id with trailing zeros (bsc#1012628).
- perf symbol: Look for ImageBase in PE file to compute .text
offset (bsc#1012628).
- perf test: Fix bpf test sample mismatch reporting (bsc#1012628).
- dmaengine: acpi: Avoid comparison GSI with Linux vIRQ
(bsc#1012628).
- RDMA/mlx5: Fix xlt_chunk_align calculation (bsc#1012628).
- RDMA/hns: Enable stash feature of HIP09 (bsc#1012628).
- um: virtio_uml: fix memory leak on init failures (bsc#1012628).
- coredump: fix memleak in dump_vma_snapshot() (bsc#1012628).
- um: fix stub location calculation (bsc#1012628).
- staging: rtl8192u: Fix bitwise vs logical operator in
TranslateRxSignalStuff819xUsb() (bsc#1012628).
- console: consume APC, DM, DCS (bsc#1012628).
- PCI: aardvark: Fix reporting CRS value (bsc#1012628).
- PCI: pci-bridge-emul: Add PCIe Root Capabilities Register
(bsc#1012628).
- commit 94242c6
- kernel-binary.spec: suse-kernel-rpm-scriptlets required for uninstall as
well.
Fixes: e98096d5cf85 ("rpm: Abolish scritplet templating (bsc#1189841).")
- commit e082fbf
- Linux 5.14.7 (bsc#1012628).
- net: stmmac: fix MAC not working when system resume back with
WoL active (bsc#1012628).
- io_uring: ensure symmetry in handling iter types in
loop_rw_iter() (bsc#1012628).
- swiotlb-xen: avoid double free (bsc#1012628).
- swiotlb-xen: fix late init retry (bsc#1012628).
- xen: reset legacy rtc flag for PV domU (bsc#1012628).
- xen: fix usage of pmd_populate in mremap for pv guests
(bsc#1012628).
- bnx2x: Fix enabling network interfaces without VFs
(bsc#1012628).
- arm64/sve: Use correct size when reinitialising SVE state
(bsc#1012628).
- PM: base: power: don't try to use non-existing RTC for storing
data (bsc#1012628).
- PCI: Add AMD GPU multi-function power dependencies
(bsc#1012628).
- drm/amd/display: Get backlight from PWM if DMCU is not
initialized (bsc#1012628).
- drm/amd/display: dsc mst 2 4K displays go dark with 2 lane HBR3
(bsc#1012628).
- drm/amd/display: Fix white screen page fault for gpuvm
(bsc#1012628).
- drm/amd/pm: fix runpm hang when amdgpu loaded prior to sound
driver (bsc#1012628).
- drm/amd/amdgpu: Increase HWIP_MAX_INSTANCE to 10 (bsc#1012628).
- drm/amdgpu: use IS_ERR for debugfs APIs (bsc#1012628).
- drm/amdgpu: fix use after free during BO move (bsc#1012628).
- drm/amdgpu: add amdgpu_amdkfd_resume_iommu (bsc#1012628).
- drm/amdgpu: move iommu_resume before ip init/resume
(bsc#1012628).
- drm/amd/pm: fix the issue of uploading powerplay table
(bsc#1012628).
- drm/amdkfd: separate kfd_iommu_resume from kfd_resume
(bsc#1012628).
- drm/radeon: pass drm dev radeon_agp_head_init directly
(bsc#1012628).
- io_uring: allow retry for O_NONBLOCK if async is supported
(bsc#1012628).
- drm/etnaviv: return context from etnaviv_iommu_context_get
(bsc#1012628).
- drm/etnaviv: put submit prev MMU context when it exists
(bsc#1012628).
- drm/etnaviv: stop abusing mmu_context as FE running marker
(bsc#1012628).
- drm/etnaviv: keep MMU context across runtime suspend/resume
(bsc#1012628).
- drm/etnaviv: exec and MMU state is lost when resetting the GPU
(bsc#1012628).
- drm/etnaviv: fix MMU context leak on GPU reset (bsc#1012628).
- drm/etnaviv: reference MMU context when setting up hardware
state (bsc#1012628).
- drm/etnaviv: add missing MMU context put when reaping MMU
mapping (bsc#1012628).
- s390/sclp: fix Secure-IPL facility detection (bsc#1012628).
- net: qrtr: revert check in qrtr_endpoint_post() (bsc#1012628).
- x86/pat: Pass valid address to sanitize_phys() (bsc#1012628).
- x86/mm: Fix kern_addr_valid() to cope with existing but not
present entries (bsc#1012628).
- x86/mce: Avoid infinite loop for copy from user recovery
(bsc#1012628).
- net: remove the unnecessary check in cipso_v4_doi_free
(bsc#1012628).
- net/{mlx5|nfp|bnxt}: Remove unnecessary RTNL lock assert
(bsc#1012628).
- net-caif: avoid user-triggerable WARN_ON(1) (bsc#1012628).
- ptp: dp83640: don't define PAGE0 (bsc#1012628).
- dccp: don't duplicate ccid when cloning dccp sock (bsc#1012628).
- net/l2tp: Fix reference count leak in l2tp_udp_recv_core
(bsc#1012628).
- r6040: Restore MDIO clock frequency after MAC reset
(bsc#1012628).
- tipc: increase timeout in tipc_sk_enqueue() (bsc#1012628).
- drm/rockchip: cdn-dp-core: Make cdn_dp_core_resume
__maybe_unused (bsc#1012628).
- rtc: cmos: Disable irq around direct invocation of
cmos_interrupt() (bsc#1012628).
- drm/i915/dp: return proper DPRX link training result
(bsc#1012628).
- perf machine: Initialize srcline string member in add_location
struct (bsc#1012628).
- net/mlx5: FWTrace, cancel work on alloc pd error flow
(bsc#1012628).
- net/mlx5: Fix potential sleeping in atomic context
(bsc#1012628).
- net: stmmac: fix system hang caused by eee_ctrl_timer during
suspend/resume (bsc#1012628).
- igc: fix tunnel offloading (bsc#1012628).
- nvme-tcp: fix io_work priority inversion (bsc#1012628).
- powerpc/64s: system call scv tabort fix for corrupt irq
soft-mask state (bsc#1012628).
- events: Reuse value read using READ_ONCE instead of re-reading
it (bsc#1012628).
- net: ipa: initialize all filter table slots (bsc#1012628).
- gen_compile_commands: fix missing 'sys' package (bsc#1012628).
- vhost_net: fix OoB on sendmsg() failure (bsc#1012628).
- net/af_unix: fix a data-race in unix_dgram_poll (bsc#1012628).
- net: dsa: destroy the phylink instance on any error in
dsa_slave_phy_setup (bsc#1012628).
- x86/uaccess: Fix 32-bit __get_user_asm_u64() when
CC_HAS_ASM_GOTO_OUTPUT=y (bsc#1012628).
- tcp: fix tp->undo_retrans accounting in tcp_sacktag_one()
(bsc#1012628).
- selftest: net: fix typo in altname test (bsc#1012628).
- qed: Handle management FW error (bsc#1012628).
- udp_tunnel: Fix udp_tunnel_nic work-queue type (bsc#1012628).
- dt-bindings: arm: Fix Toradex compatible typo (bsc#1012628).
- ibmvnic: check failover_pending in login response (bsc#1012628).
- KVM: PPC: Book3S HV: Tolerate treclaim. in fake-suspend mode
changing registers (bsc#1012628).
- powerpc/64s: system call rfscv workaround for TM bugs
(bsc#1012628).
- powerpc/mce: Fix access error in mce handler (bsc#1012628).
- s390/pci_mmio: fully validate the VMA before calling
follow_pte() (bsc#1012628).
- bnxt_en: make bnxt_free_skbs() safe to call after
bnxt_free_mem() (bsc#1012628).
- net: hns3: pad the short tunnel frame before sending to hardware
(bsc#1012628).
- net: hns3: change affinity_mask to numa node range
(bsc#1012628).
- net: hns3: disable mac in flr process (bsc#1012628).
- net: hns3: fix the timing issue of VF clearing interrupt sources
(bsc#1012628).
- net: stmmac: platform: fix build warning when with
!CONFIG_PM_SLEEP (bsc#1012628).
- Drivers: hv: vmbus: Fix kernel crash upon unbinding a device
from uio_hv_generic driver (bsc#1012628).
- net/mlx5e: Fix mutual exclusion between CQE compression and
HW TS (bsc#1012628).
- ice: Correctly deal with PFs that do not support RDMA
(bsc#1012628).
- net: dsa: qca8k: fix kernel panic with legacy mdio mapping
(bsc#1012628).
- net: dsa: lantiq_gswip: Add 200ms assert delay (bsc#1012628).
- net: hns3: fix the exception when query imp info (bsc#1012628).
- nvme: avoid race in shutdown namespace removal (bsc#1012628).
- blkcg: fix memory leak in blk_iolatency_init (bsc#1012628).
- net: dsa: flush switchdev workqueue before tearing down CPU/DSA
ports (bsc#1012628).
- mlxbf_gige: clear valid_polarity upon open (bsc#1012628).
- dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation
(bsc#1012628).
- remoteproc: qcom: wcnss: Fix race with iris probe (bsc#1012628).
- mfd: db8500-prcmu: Adjust map to reality (bsc#1012628).
- PCI: Add ACS quirks for NXP LX2xx0 and LX2xx2 platforms
(bsc#1012628).
- fuse: fix use after free in fuse_read_interrupt() (bsc#1012628).
- PCI: tegra194: Fix handling BME_CHGED event (bsc#1012628).
- PCI: tegra194: Fix MSI-X programming (bsc#1012628).
- PCI: tegra: Fix OF node reference leak (bsc#1012628).
- mfd: Don't use irq_create_mapping() to resolve a mapping
(bsc#1012628).
- PCI: rcar: Fix runtime PM imbalance in rcar_pcie_ep_probe()
(bsc#1012628).
- riscv: fix the global name pfn_base confliction error
(bsc#1012628).
- KVM: arm64: Make hyp_panic() more robust when protected mode
is enabled (bsc#1012628).
- tracing/probes: Reject events which have the same name of
existing one (bsc#1012628).
- PCI: cadence: Use bitfield for *quirk_retrain_flag* instead
of bool (bsc#1012628).
- PCI: cadence: Add quirk flag to set minimum delay in LTSSM
Detect.Quiet state (bsc#1012628).
- PCI: j721e: Add PCIe support for J7200 (bsc#1012628).
- PCI: j721e: Add PCIe support for AM64 (bsc#1012628).
- PCI: Add ACS quirks for Cavium multi-function devices
(bsc#1012628).
- watchdog: Start watchdog in watchdog_set_last_hw_keepalive
only if appropriate (bsc#1012628).
- octeontx2-af: Add additional register check to rvu_poll_reg()
(bsc#1012628).
- Set fc_nlinfo in nh_create_ipv4, nh_create_ipv6 (bsc#1012628).
- flow: fix object-size-mismatch warning in
flowi{4,6}_to_flowi_common() (bsc#1012628).
- net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920
(bsc#1012628).
- block, bfq: honor already-setup queue merges (bsc#1012628).
- PCI: ibmphp: Fix double unmap of io_mem (bsc#1012628).
- loop: reduce the loop_ctl_mutex scope (bsc#1012628).
- ethtool: Fix an error code in cxgb2.c (bsc#1012628).
- NTB: Fix an error code in ntb_msit_probe() (bsc#1012628).
- NTB: perf: Fix an error code in perf_setup_inbuf()
(bsc#1012628).
- stmmac: dwmac-loongson:Fix missing return value (bsc#1012628).
- net: phylink: add suspend/resume support (bsc#1012628).
- mfd: axp20x: Update AXP288 volatile ranges (bsc#1012628).
- backlight: ktd253: Stabilize backlight (bsc#1012628).
- PCI: controller: PCI_IXP4XX should depend on ARCH_IXP4XX
(bsc#1012628).
- PCI: of: Don't fail devm_pci_alloc_host_bridge() on missing
'ranges' (bsc#1012628).
- PCI: iproc: Fix BCMA probe resource handling (bsc#1012628).
- netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with
mutex (bsc#1012628).
- KVM: arm64: Restrict IPA size to maximum 48 bits on 4K and
16K page size (bsc#1012628).
- PCI: Fix pci_dev_str_match_path() alloc while atomic bug
(bsc#1012628).
- mfd: tqmx86: Clear GPIO IRQ resource when no IRQ is set
(bsc#1012628).
- tracing/boot: Fix a hist trigger dependency for boot time
tracing (bsc#1012628).
- mtd: mtdconcat: Judge callback existence based on the master
(bsc#1012628).
- mtd: mtdconcat: Check _read, _write callbacks existence before
assignment (bsc#1012628).
- KVM: arm64: Fix read-side race on updates to vcpu reset state
(bsc#1012628).
- KVM: arm64: Handle PSCI resets before userspace touches vCPU
state (bsc#1012628).
- PCI/PTM: Remove error message at boot (bsc#1012628).
- PCI: Sync __pci_register_driver() stub for CONFIG_PCI=n
(bsc#1012628).
- mtd: rawnand: cafe: Fix a resource leak in the error handling
path of 'cafe_nand_probe()' (bsc#1012628).
- ARC: export clear_user_page() for modules (bsc#1012628).
- perf config: Fix caching and memory leak in
perf_home_perfconfig() (bsc#1012628).
- perf unwind: Do not overwrite
FEATURE_CHECK_LDFLAGS-libunwind-{x86,aarch64} (bsc#1012628).
- perf bench inject-buildid: Handle writen() errors (bsc#1012628).
- gpio: mpc8xxx: Fix a resources leak in the error handling path
of 'mpc8xxx_probe()' (bsc#1012628).
- gpio: mpc8xxx: Fix a potential double iounmap call in
'mpc8xxx_probe()' (bsc#1012628).
- gpio: mpc8xxx: Use 'devm_gpiochip_add_data()' to simplify the
code and avoid a leak (bsc#1012628).
- io_uring: retry in case of short read on block device
(bsc#1012628).
- net: dsa: tag_rtl4_a: Fix egress tags (bsc#1012628).
- tools build: Fix feature detect clean for out of source builds
(bsc#1012628).
- mptcp: fix possible divide by zero (bsc#1012628).
- selftests: mptcp: clean tmp files in simult_flows (bsc#1012628).
- net: hso: add failure handler for add_net_device (bsc#1012628).
- net: dsa: b53: Fix calculating number of switch ports
(bsc#1012628).
- net: dsa: b53: Set correct number of ports in the DSA struct
(bsc#1012628).
- mptcp: Only send extra TCP acks in eligible socket states
(bsc#1012628).
- netfilter: socket: icmp6: fix use-after-scope (bsc#1012628).
- fq_codel: reject silly quantum parameters (bsc#1012628).
- qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom
(bsc#1012628).
- iwlwifi: move get pnvm file name to a separate function
(bsc#1012628).
- iwlwifi: pnvm: Fix a memory leak in 'iwl_pnvm_get_from_fs()'
(bsc#1012628).
- ip_gre: validate csum_start only on pull (bsc#1012628).
- net: dsa: b53: Fix IMP port setup on BCM5301x (bsc#1012628).
- bnxt_en: fix stored FW_PSID version masks (bsc#1012628).
- bnxt_en: Fix asic.rev in devlink dev info command (bsc#1012628).
- bnxt_en: Fix possible unintended driver initiated error recovery
(bsc#1012628).
- ip6_gre: Revert "ip6_gre: add validation for csum_start"
(bsc#1012628).
- mfd: lpc_sch: Rename GPIOBASE to prevent build error
(bsc#1012628).
- cxgb3: fix oops on module removal (bsc#1012628).
- net: renesas: sh_eth: Fix freeing wrong tx descriptor
(bsc#1012628).
- bnxt_en: Fix error recovery regression (bsc#1012628).
- net: dsa: bcm_sf2: Fix array overrun in
bcm_sf2_num_active_ports() (bsc#1012628).
- s390/bpf: Fix optimizing out zero-extensions (bsc#1012628).
- s390/bpf: Fix 64-bit subtraction of the -0x80000000 constant
(bsc#1012628).
- s390/bpf: Fix branch shortening during codegen pass
(bsc#1012628).
- Update config files.
- commit aa9b3e1
- Revert "Revert "rpm: Abolish scritplet templating (bsc#1189841).""
This reverts commit f924054cc523527b52203e352adb073db0962f5f.
New suse-module-tools were accepted to factory:
https://build.opensuse.org/request/show/919089
- commit 6abad1e
==== libjpeg-turbo ====
Subpackages: libjpeg8 libturbojpeg0
- previous version updates fixes following bugs:
CVE-2014-9092, CVE-2018-14498, CVE-2019-2201, CVE-2020-17541
(bsc#1128712, bsc#1186764, bsc#807183, bsc#906761)
==== mhvtl ====
Version update (1.63_release+759.35ddb48e5262_k5.14.6_2 -> 1.63_release+759.35ddb48e5262_k5.14.9_1)
- Remoed the "BuildRequires: lzo-devel" line from the SPEC file,
since this dependence was removed with upstream commit
c327afb77cff ("Remove dependency on external lzo packages").
==== opensc ====
Version update (0.21.0 -> 0.22.0)
- Update to OpenSC 0.22.0:
* Removed changes in opensc-gcc11.patch already present in upstream.
- See https://github.com/OpenSC/OpenSC/pull/2241/commits/e549e9c62eb4fcd2260800e2…
* Removed some false positives from the openrc-rpmlintrc file.
* Use standard paths for file cache on Linux (#2148) and OSX (#2214)
* Various issues of memory/buffer handling in legacy drivers mostly reported by oss-fuzz and coverity (tcos, oberthur, isoapplet, iasecc, westcos, gpk, flex, dnie, mcrd, authentic, belpic)
* Add threading test to `pkcs11-tool` (#2067)
* Add support to generate generic secret keys (#2140)
* `opensc-explorer`: Print information about LCS (Life cycle status byte) (#2195)
* Add support for Apple's arm64 (M1) binaries, removed TokenD. A seperate installer with TokenD (and without arm64 binaries) will be available (#2179).
* Support for gcc11 and its new strict aliasing rules (#2241, #2260)
* Initial support for building with OpenSSL 3.0 (#2343)
* pkcs15-tool: Write data objects in binary mode (#2324)
* Avoid limited size of log messages (#2352)
* Support for ECDSA verification (#2211)
* Support for ECDSA with different SHA hashes (#2190)
* Prevent issues in p11-kit by not returning unexpected return codes (#2207)
* Add support for PKCS#11 3.0: The new interfaces, profile objects and functions (#2096, #2293)
* Standardize the version 2 on 2.20 in the code (#2096)
* Fix CKA_MODIFIABLE and CKA_EXTRACTABLE (#2176)
* Copy arguments of C_Initialize (#2350)
* Fix RSA-PSS signing (#2234)
* Fix DO deletion (#2215)
* Add support for (X)EdDSA keys (#1960)
* Add support for applet version 3 and fix RSA-PSS mechanisms (#2205)
* Add support for applet version 4 (#2332)
* New configuration option for opensc.conf to disable pkcs1_padding (#2193)
* Add support for ECDSA with different hashes (#2190)
* Enable more mechanisms (#2178)
* Fixed asking for a user pin when formatting a card (#1737)
* Added support for French CPx Healthcare cards (#2217)
* Added ATR for new CardOS 5.4 version (#2296)
==== python-lazr.config ====
Version update (2.2.2 -> 2.2.3)
- Update to 2.2.3:
- Fix tests with zope.interface >= 5.0.0.
- Fix deprecation warning on Python >= 3.2. (lp#1870199)
==== rng-tools ====
- disable nistbeacon support
==== rubygem-sassc-2.2 ====
- Rename rpmlintrc, cleanup dotfiles & cleanup spec file
==== squid ====
Version update (4.16 -> 5.2)
- transition to squid 5.x. This is a major release and for changes
and how to transition from 4.x, see the release notes,
http://www.squid-cache.org/Versions/v5/RELEASENOTES.html
- update to 5.2
* fixes issues with WCCP protocol that may lead to information
disclosure (bsc#1189403, CVE-2021-28116)
- drop unused BR: db-devel, ed, opensp-devel, pkgconfig(kdb)
- new BR: pkgconfig(tdb)
==== step ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== suse-module-tools ====
Version update (16.0.10+7 -> 16.0.11)
- Update to version 16.0.11:
* inkmp-script(postun): don't pass existing files to weak-modules2
(boo#1191200)
* kernel-scriptlets: skip cert scriptlet on non-UEFI systems
(boo#1191260)
==== sweeper ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== umbrello ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
==== yakuake ====
Version update (21.08.1 -> 21.08.2)
- Update to 21.08.2
* New bugfix release
* For more details please see:
* https://kde.org/announcements/gear/21.08.2/
- No code change since 21.08.1
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the aarch64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=3&versio…
Please do not reply to this email to report issues, rather file a bug
on bugzilla.opensuse.org. For more information on filing bugs please
see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
Mesa (21.2.2 -> 21.2.3)
Mesa-demo
Mesa-drivers (21.2.2 -> 21.2.3)
MozillaFirefox (92.0 -> 92.0.1)
MozillaThunderbird (91.1.0 -> 91.1.2)
audit (3.0.3 -> 3.0.5)
audit-secondary (3.0.3 -> 3.0.5)
blog (2.20 -> 2.21)
btrfsprogs (5.14 -> 5.14.1)
codec2 (1.0.0 -> 1.0.1)
crypto-policies (20210225.05203d2 -> 20210917.c9d86d1)
desktop-file-utils
diffutils
dracut (055+suse.117.ge5fc2048 -> 055+suse.119.g6c4187af)
exim (4.94.2 -> 4.95)
ffmpeg-4
gamin
gcc
gd
gegl
iio-sensor-proxy (3.1 -> 3.3)
inotify-tools (3.20.11.0 -> 3.21.9.5)
kernel-firmware (20210901 -> 20210928)
knewstuff
liberation-fonts (2.1.4 -> 2.1.5)
libinput (1.19.0 -> 1.19.1)
libmtp (1.1.18 -> 1.1.19)
libnss_usrfiles
libsoup
libsrtp2 (2.4.1 -> 2.4.2)
libstorage-ng (4.4.37 -> 4.4.41)
libupnp (1.14.10 -> 1.14.12)
libva
libva-gl
mailutils (3.8 -> 3.13)
mhvtl (1.63_release+759.35ddb48e5262_k5.14.6_1 -> 1.63_release+759.35ddb48e5262_k5.14.6_2)
monitoring-plugins
mozjs78 (78.13.0 -> 78.14.0)
nmap
open-iscsi
openSUSE-build-key
openafs
opie
perl-Convert-ASN1 (0.31 -> 0.33)
perl-Mail-AuthenticationResults (2.20210112 -> 2.20210915)
perl-ldap
perl-libwww-perl (6.56 -> 6.57)
portaudio (190600_20161030 -> 190700_20210406)
publicsuffix (20210908 -> 20210928)
python
python-base
python-evtx (0.6.1 -> 0.7.4)
python-jmespath
python-requests-oauthlib
python-tabulate
rav1e
rtl8812au (5.9.3.2+git20210427.6ef5d8f_k5.14.6_1 -> 5.9.3.2+git20210427.6ef5d8f_k5.14.6_2)
salt (3002.2 -> 3003.3)
selinux-policy
systemd
sysvinit (2.99 -> 3.00)
tdb (1.4.3 -> 1.4.4)
tevent (0.10.2 -> 0.11.0)
xrdb
xwayland
yast2-alternatives (4.3.1 -> 4.4.0)
yast2-installation (4.4.18 -> 4.4.19)
yast2-slp-server (4.3.0 -> 4.4.0)
yast2-storage-ng (4.4.7 -> 4.4.8)
zimg (3.0.1 -> 3.0.3)
=== Details ===
==== Mesa ====
Version update (21.2.2 -> 21.2.3)
Subpackages: Mesa-dri-devel Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1
- update to 21.2.3
* third bugfix release
==== Mesa-demo ====
- Introduce new subpackage -es for GLES based demos
- Symlink es2_info, es2gears_x11, es2tri to %_bindir
==== Mesa-drivers ====
Version update (21.2.2 -> 21.2.3)
Subpackages: Mesa-dri Mesa-gallium Mesa-libva libvdpau_r300 libvdpau_r600 libvdpau_radeonsi libvulkan_radeon
- update to 21.2.3
* third bugfix release
==== MozillaFirefox ====
Version update (92.0 -> 92.0.1)
Subpackages: MozillaFirefox-translations-common
- Mozilla Firefox 92.0.1
* Fixed: Fixes an issue where audio playback was not working on
some Linux systems (bmo#1730499)
* Fixed: Fixes issues with the findbar close button on
different operating systems (bmo#1728368)
==== MozillaThunderbird ====
Version update (91.1.0 -> 91.1.2)
- Mozilla Thunderbird 91.1.2
* Thunderbird will now warn if an S/MIME encrypted message includes
BCC recipients
* several bugfixes listed on
https://www.thunderbird.net/en-US/thunderbird/91.1.2/releasenotes/
- Mozilla Thunderbird 91.1.1
* Menu item for disabling subject encryption for a single message added
* Printing messages that are not currently displayed is no longer
supported, including printing multiple messages at once
* for bugfixes see
https://www.thunderbird.net/en-US/thunderbird/91.1.1/releasenotes
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
if already set before startup
==== audit ====
Version update (3.0.3 -> 3.0.5)
Subpackages: libaudit1 libauparse0
- Update to version 3.0.5:
* In auditd, flush uid/gid caches when user/group added/deleted/modified
* Fixed various issues when dealing with corrupted logs
* In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
* Apply performance speedups to auparse library
* Optimize rule loading in auditctl
* Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
* Update syscall table to the 5.14 kernel
* Fixed various issues when dealing with corrupted logs
==== audit-secondary ====
Version update (3.0.3 -> 3.0.5)
Subpackages: audit python3-audit system-group-audit
- Fix hardened auditd.service (bsc#1181400)
* add fix-hardened-service.patch
Make /etc/audit read-write from the service.
Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
* add enable-stop-rules.patch
- Change default log_format from ENRICHED to RAW (bsc#1190500):
* add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
* In auditd, flush uid/gid caches when user/group added/deleted/modified
* Fixed various issues when dealing with corrupted logs
* In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
* Apply performance speedups to auparse library
* Optimize rule loading in auditctl
* Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
* Update syscall table to the 5.14 kernel
* Fixed various issues when dealing with corrupted logs
==== blog ====
Version update (2.20 -> 2.21)
Subpackages: libblogger2
- Move to /usr for UsrMerge (boo#1191057)
==== btrfsprogs ====
Version update (5.14 -> 5.14.1)
Subpackages: btrfsprogs-udev-rules libbtrfs0
- Update to 5.14.1
* fixes:
* defrag: fix parsing of compression (option -c)
* add workaround for old kernels when reading zone sizes
* let only check and restore open the fs with transid failures, namely
preventing btrfstune to do so
* convert: --uuid copy does not fail on duplicate uuids
==== codec2 ====
Version update (1.0.0 -> 1.0.1)
- Update to version 1.0.1:
* Release to support freedv-gui 1.6.1
==== crypto-policies ====
Version update (20210225.05203d2 -> 20210917.c9d86d1)
Subpackages: crypto-policies-scripts
- Remove the scripts and documentation regarding
fips-finish-install and test-fips-setup
* Add crypto-policies-FIPS.patch
- Update to version 20210917.c9d86d1:
* openssl: fix disabling ChaCha20
* pacify pylint 2.11: use format strings
* pacify pylint 2.11: specify explicit encoding
* fix minor things found by new pylint
* update-crypto-policies: --check against regenerated
* update-crypto-policies: fix --check's walking order
* policygenerators/gnutls: revert disabling DTLS0.9...
* policygenerators/java: add javasystem backend
* LEGACY: bump 1023 key size to 1024
* cryptopolicies: fix 'and' in deprecation warnings
* *ssh: condition ecdh-sha2-nistp384 on SECP384R1
* nss: hopefully the last fix for nss sigalgs check
* cryptopolicies: Python 3.10 compatibility
* nss: postponing check + testing at least something
* Rename 'policy modules' to 'subpolicies'
* validation.rules: fix a missing word in error
* cryptopolicies: raise errors right after warnings
* update-crypto-policies: capitalize warnings
* cryptopolicies: syntax-precheck scope errors
* .gitlab-ci.yml, Makefile: enable codespell
* all: fix several typos
* docs: don't leave zero TLS/DTLS protocols on
* openssl: separate TLS/DTLS MinProtocol/MaxProtocol
* alg_lists: order protocols new-to-old for consistency
* alg_lists: max_{d,}tls_version
* update-crypto-policies: fix pregenerated + local.d
* openssh: allow validation with pre-8.5
* .gitlab-ci.yml: run commit-range against upstream
* openssh: Use the new name for PubkeyAcceptedKeyTypes
* sha1_in_dnssec: deprecate
* .gitlab-ci.yml: test commit ranges
* FIPS:OSPP: sign = -*-SHA2-224
* scoped policies: documentation update
* scoped policies: use new features to the fullest...
* scoped policies: rewrite + minimal policy changes
* scoped policies: rewrite preparations
* nss: postponing the version check again, to 3.64
- Remove patches fixed upstream: crypto-policies-typos.patch
- Rebase: crypto-policies-test_supported_modules_only.patch
- Merge crypto-policies-asciidoc.patch into
crypto-policies-no-build-manpages.patch
==== desktop-file-utils ====
- suse-update-mime-defaults: add Pantheon desktop environment
==== diffutils ====
- Skip stack overflow tests under qemu emulation (bsc#1190046)
==== dracut ====
Version update (055+suse.117.ge5fc2048 -> 055+suse.119.g6c4187af)
Subpackages: dracut-mkinitrd-deprecated
- Update to version 055+suse.119.g6c4187af:
* fix(suse-initrd): handle cases with zero modprobe.d files (bsc#1189895)
==== exim ====
Version update (4.94.2 -> 4.95)
- update to exim 4.95
* includes taintwarn (taintwarn.patch)
* fast-ramp queue run
* native SRS
* TLS resumption
* LMDB lookups with single key
* smtp transport option "message_linelength_limit"
* optionally ignore lookup caches
* quota checking for appendfile transport during message reception
* sqlite lookups allow a "file=<path>" option
* lsearch lookups allow a "ret=full" option
* command line option for the notifier socket
* faster TLS startup
* new main config option "proxy_protocol_timeout"
* expand "smtp_accept_max_per_connection"
* log selector "queue_size_exclusive"
* main config option "smtp_backlog_monitor"
* main config option "hosts_require_helo"
* main config option "allow_insecure_tainted_data"
==== ffmpeg-4 ====
Subpackages: libavcodec58_134 libavdevice58_13 libavfilter7_110 libavformat58_76 libavresample4_0 libavutil56_70 libpostproc55_9 libswresample3_9 libswscale5_9
- Add ffmpeg-CVE-2020-22037.patch: Backport from upstream to fix
denial of service vulnerability exists due to a memory leak in
avcodec_alloc_context3 at options.c (bsc#1186756).
==== gamin ====
- Fix source URI.
==== gcc ====
Subpackages: cpp gcc-info libstdc++-devel
- Move /lib/cpp to /usr/lib/cpp for the usr merge. [bsc#1191060]
==== gd ====
Subpackages: libgd3
- reenable gd/gd2 legacy formats, was disabled by upstream by
default [bsc#1190762]
==== gegl ====
Subpackages: gegl-0_4 libgegl-0_4-0
- Also disable luajit on ppc64le and s390x. Package is
unavailable.
==== iio-sensor-proxy ====
Version update (3.1 -> 3.3)
- Update to version 3.3:
* Fix a bug left-over in one of the 3.2 bug fixes where some
accelerometers would fail to initialise.
- Changes from version 3.2:
* Fix problems parsing numbers with decimal separator.
- Require gudev >= 237 for building (for consistency with
upstream).
- Drop the rpmlintrc file and add back appropriate service macros
in pre/post scriptlets.
==== inotify-tools ====
Version update (3.20.11.0 -> 3.21.9.5)
Subpackages: libinotifytools0
- update to 3.21.9.5:
* Fix Wrong pointer passed to realloc
* Fix offset compiler warning
* various static code analyse annotations and fixes
==== kernel-firmware ====
Version update (20210901 -> 20210928)
Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network
- Update to version 20210928 (git commit 7a30050592e2):
* brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
* linux-firmware: Update firmware file for Intel Bluetooth 9462
* amdgpu: update VCN firmware for dimgrey cavefish
* amdgpu: update VCN firmware for navy flounder
* amdgpu: update VCN firmware for sienna cichlid
* amdgpu: update VCN firmware for vangogh
* amdgpu: update VCN firmware for renoir
* amdgpu: update VCN firmware for picasso
* amdgpu: update VCN firmware for raven2
* amdgpu: update VCN firmware for raven
* amdgpu: Add initial firmware for Beige Goby
* cxgb4: Update firmware to revision 1.26.2.0
* linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
* linux-firmware: Update firmware file for Intel Bluetooth AX211
* linux-firmware: Update firmware file for Intel Bluetooth AX201
* linux-firmware: Update firmware file for Intel Bluetooth 9560
* qed: Add firmware 8.59.1.0
* linux-firmware: Update firmware file for Intel Bluetooth AX211
* linux-firmware: Update firmware file for Intel Bluetooth AX210
* linux-firmware: Update firmware file for Intel Bluetooth AX200
* linux-firmware: Update firmware file for Intel Bluetooth AX201
* linux-firmware: Update firmware file for Intel Bluetooth 9560
* linux-firmware: Update firmware file for Intel Bluetooth 9260
* linux-firmware: Update firmware file for Intel Bluetooth 8265
* iwlwifi: add FWs for new So device types with multiple RF modules
* amdgpu: add initial firmware for Yellow Carp
* i915: Update ADLP DMC v2.12
* linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
* linux-firmware: Update AMD SEV firmware (bsc#1186938)
* Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases
==== knewstuff ====
Subpackages: knewstuff-imports libKF5NewStuff5 libKF5NewStuff5-lang libKF5NewStuffCore5
- Add upstream patch:
* 0001-Include-a-user-agent-on-KNS-requests.patch
- Add fix-crash.patch. This patch fixes a crash in DownloadWidget.
(kde#443025)
==== liberation-fonts ====
Version update (2.1.4 -> 2.1.5)
- Update to release 2.1.5
* More fixes to Superscript and subscript Numbers missing issues.
* Fixed inconsistent weight, missing glyphs and GSUB issues.
==== libinput ====
Version update (1.19.0 -> 1.19.1)
Subpackages: libinput-udev libinput10
- Update to release 1.19.1
* New: Detects (and works around) buggy devices that claim to
have a high-resolution scroll wheel but which do not actually
send events.
* New assumption that any non-bluetooth touchpad is internal.
* Jumping cursor warning has been reduced once again.
==== libmtp ====
Version update (1.1.18 -> 1.1.19)
Subpackages: libmtp-udev libmtp9
- updated to 1.1.19 release
- Lots of USB ids added, especially Garmin devices
- use a local libusb context, not the global one
- various bugfixes
==== libnss_usrfiles ====
- Install into _libdir [bsc#1191070]
==== libsoup ====
Subpackages: libsoup-3_0-0 typelib-1_0-Soup-3_0
- Ignore test failure on 32-bit arm, as it is done for 32-bit x86
https://gitlab.gnome.org/GNOME/libsoup/-/issues/236
==== libsrtp2 ====
Version update (2.4.1 -> 2.4.2)
- Update to release 2.4.2
* Fixes an unspecified regression introduced in 2.4.1
==== libstorage-ng ====
Version update (4.4.37 -> 4.4.41)
Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1
- merge gh#openSUSE/libstorage-ng#833
- avoid sporadic out-of-memory during build (on Fedora)
- 4.4.41
- merge gh#openSUSE/libstorage-ng#832
- added BlkDevice::can_be_removed()
- 4.4.40
- merge gh#openSUSE/libstorage-ng#831
- added non-const Encryption::get_blk_device()
- 4.4.39
- merge gh#openSUSE/libstorage-ng#830
- added get_encryption_type_name()
- coding style
- 4.4.38
==== libupnp ====
Version update (1.14.10 -> 1.14.12)
Subpackages: libixml11 libupnp17
- Update to release 1.4.12
* Changes to build system only; nothing user-visible.
==== libva ====
Subpackages: libva-drm2 libva-x11-2 libva2
- fixed JIRA number in previous changelog
==== libva-gl ====
Subpackages: libva-glx2 libva-wayland2
- fixed JIRA number in previous changelog
==== mailutils ====
Version update (3.8 -> 3.13)
Subpackages: libmailutils5
- Update to mailutils 3.13
* Fix boo#1190694: mail processing escape sequences in bodies
non-interactively
* Improved mailbox locking
* Changes in the 'locking' configuration statement.
* mail utility
+ Fix semantics of mail sending and saving commands
+ Fix the -F option
+ Improve POSIX mailx compatible mode
+ Compose escapes are recognized only in interactive mode
* Bugfixes
+ QP decoder: Accept soft line breaks (RFC 2045, 6.7, page 19).
+ Fix stream reference policy in filter streams.
+ Various bugfixes in IMAP client.
+ Fix handling of single-path MIME messages.
* Fix expunging of mailboxes in mbox and dotmail format in a read-only directory
* inc: when updating the "unseen" sequence, translate message numbers to uids
* Fix default port selection in SMTP mailer
* Fix building the mda utilities with mailbox quotas off
* Fix bugs in the testsuite
* Support for the traditional mbox format rewritten from scratch
* Fix incorrect message flags in maildir
* Fix persistency of UIDs for all mailbox formats
* Fix message ordering in maildir.
* Fix parsing of IMAP ranges
* mail
+ Changed syntax for addressing MIME message part
+ write command
* New utility: decodemail
* readmsg
+ MIME messages are decoded on output
+ Improve searches
* imap4d: implement TLS in inetd mode
* imap client code
+ Fix handling of [TRYCREATE] and similar imap responses
* sieve: quoted strings may span several lines
* Dropped support for Python 2.x
* Rewrite the AM_GNU_MAILUTILS macro to avoid using mailutils-config
* mda: restore the message-id-header configuration statement
* Changes to the libmailutils library
+ New functions for MIME parsing and mime object creation:
* Bugfixes
+ Fix intermixed I/O in buffered streams
+ Fix handling of INTR in the "mail" utility shell
+ Fix compilation without libunistring
+ Fix operation of associative arrays in case-insensitive mode
+ Fix memory leaks
+ Fix compilation with gcc 10
+ smtp mailer: fix multiple open/close on the same mailer
+ Fix list sort function
* dotmail: fix mailbox opening in append-only mode
* Fix mda testsuite
* Remove deprecated ioctls
* mail: fix composing MIME messages
* Fix build on FreeBSD
* Fix detection of Kerberos libraries
* Fix build with Python 3.8 (bug #57318)
- Remove patche now upstream
* python38-compat.patch
* silent-common-mu_tcp_wrapper_daemon.patch
- Port patch mailutils-3.5-guile-2.0.patch
==== mhvtl ====
Version update (1.63_release+759.35ddb48e5262_k5.14.6_1 -> 1.63_release+759.35ddb48e5262_k5.14.6_2)
- Fix failing OBS build, since it doesn't like empty DB files
being installed as part of the package. The DB-creation
script was copied from the Makefile (under "make install") to
a SPEC-file "%post" script.
==== monitoring-plugins ====
Subpackages: monitoring-plugins-breeze monitoring-plugins-by_ssh monitoring-plugins-cluster monitoring-plugins-common monitoring-plugins-cups monitoring-plugins-dhcp monitoring-plugins-dig monitoring-plugins-disk monitoring-plugins-disk_smb monitoring-plugins-dns monitoring-plugins-dummy monitoring-plugins-file_age monitoring-plugins-flexlm monitoring-plugins-http monitoring-plugins-icmp monitoring-plugins-ide_smart monitoring-plugins-ifoperstatus monitoring-plugins-ifstatus monitoring-plugins-ircd monitoring-plugins-load monitoring-plugins-log monitoring-plugins-mailq monitoring-plugins-mrtg monitoring-plugins-mrtgtraf monitoring-plugins-nagios monitoring-plugins-nt monitoring-plugins-ntp_peer monitoring-plugins-ntp_time monitoring-plugins-nwstat monitoring-plugins-oracle monitoring-plugins-overcr monitoring-plugins-ping monitoring-plugins-procs monitoring-plugins-real monitoring-plugins-rpc monitoring-plugins-sensors monitoring-plugins-smtp monitoring-plugins-ssh monitoring-plugins
-swap monitoring-plugins-tcp monitoring-plugins-time monitoring-plugins-ups monitoring-plugins-users monitoring-plugins-wave
- Remove unneeded build requirement on "syslog"
==== mozjs78 ====
Version update (78.13.0 -> 78.14.0)
- Update to version 78.14.0esr.
==== nmap ====
- Do not build with python2 support for SLE15-SP4, bsc#1190997
==== open-iscsi ====
Subpackages: iscsiuio libopeniscsiusr0_2_0
- Update to latest from upstream, fixing:
* Moving the executables from /sbin to /usr/sbin (bsc#1191054)
* Remove default dependencies from iscsi-init.service
(bsc#1187190)
==== openSUSE-build-key ====
- Only add openSUSE Backports key when building for a Leap system
(sle_version > 0). Tumbleweed does not use Backports.
==== openafs ====
Subpackages: openafs-client openafs-kmp-64kb openafs-kmp-default
- Fix %ifarch for 32-bit arm
==== opie ====
- use %_pam_moduledir (bsc#1191045)
==== perl-Convert-ASN1 ====
Version update (0.31 -> 0.33)
- Fix perl-Convert-ASN1-0.31-test.patch and add -p0
- updated to 0.33
see /usr/share/doc/packages/perl-Convert-ASN1/ChangeLog
0.33 -- Wed Sep 22 19:49:53 ADT 2021
* Official CPAN release of 0.33
0.32 -- Tue Sep 21 18:45:20 ADT 2021
* examples/x509decode: parameters are optional for AlgorithmIdentifier when using [ec]dsa algorithms
* t/19issue14.t: issue with warnings
* Fixes #44 Redundant argument in printf warning
* examples/x509decode: fix prototype error
* examples/ldap: fix asn1_dump not working
==== perl-Mail-AuthenticationResults ====
Version update (2.20210112 -> 2.20210915)
- updated to 2.20210915
see /usr/share/doc/packages/perl-Mail-AuthenticationResults/Changes
2.20210915 2021-09-15 11:10:20+00:00 UTC
- Fix for older versions of Perl
2.20210914 2021-09-14 05:17:31+00:00 UTC
- New method to copy children from 1 object to another
==== perl-ldap ====
- fix build with perl 5.34.0
==== perl-libwww-perl ====
Version update (6.56 -> 6.57)
- updated to 6.57
see /usr/share/doc/packages/perl-libwww-perl/Changes
6.57 2021-09-20 20:20:14Z
- Update docs for protocols_allowed and protocols forbidden (GH#386) (Olaf Alders)
==== portaudio ====
Version update (190600_20161030 -> 190700_20210406)
- Correct download source URL
- Update to version v190700_20210406
- removed patch `0001-Merge-branch-ticket_275_pass_void-into-master.patch`
as it is included in this release.
==== publicsuffix ====
Version update (20210908 -> 20210928)
- Update to version 20210928:
* Remove Clic2000 entries (#1434)
* ondigitalocean.app: update comment for DigitalOcean App Platform (#1431)
* add prequalifyme.today to private section (#1311)
* util: gTLD data autopull updates for 2021-09-28T15:12:52 UTC (#1438)
* Add *.usercontent.goog (#1417)
* Add digitaloceanspaces.com & regional subdomains (#1421)
* Update public_suffix_list.dat (#1426)
- Update to version 20210909:
* Adding new .ar SLDs and official nic.ar URL correction (#1414)
==== python ====
- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
(CVE-2019-20907, bpo#39017) avoiding possible infinite loop
in specifically crafted tarball.
Add recursion.tar as a testing tarball for the patch.
- Provide the newest setuptools wheel (bsc#1176262,
CVE-2019-20916) in their correct form (bsc#1180686).
- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
(CVE-2020-26116, bpo#39603) no longer allowing special characters in
the method parameter of HTTPConnection.putrequest in httplib, stopping
injection of headers. Such characters now raise ValueError.
==== python-base ====
Subpackages: libpython2_7-1_0 python-xml
- Add CVE-2019-20907_tarfile-inf-loop.patch fixing bsc#1174091
(CVE-2019-20907, bpo#39017) avoiding possible infinite loop
in specifically crafted tarball.
Add recursion.tar as a testing tarball for the patch.
- Provide the newest setuptools wheel (bsc#1176262,
CVE-2019-20916) in their correct form (bsc#1180686).
- Add CVE-2020-26116-httplib-header-injection.patch fixing bsc#1177211
(CVE-2020-26116, bpo#39603) no longer allowing special characters in
the method parameter of HTTPConnection.putrequest in httplib, stopping
injection of headers. Such characters now raise ValueError.
==== python-evtx ====
Version update (0.6.1 -> 0.7.4)
- Update to 0.7.4
* relax dependencies for most users #72
* show records by date filter
* handling of invalid dates #43
* handling of malformed evtx files
* pin dependencies due to py2 deprecation #67
* testing on pytest 4
- Drop pytest4.patch merged upstream
- Fix rpmlint alternative link errors
- Fix missing python2-xml requirement
==== python-jmespath ====
- Add patch remove-nose.patch:
* Remove use of nose in the tests.
==== python-requests-oauthlib ====
- Use pytest to run the testsuite.
==== python-tabulate ====
- Remove unneeded BuildRequires on nose.
==== rav1e ====
- Replace rust-packaging with cargo-packaging
==== rtl8812au ====
Version update (5.9.3.2+git20210427.6ef5d8f_k5.14.6_1 -> 5.9.3.2+git20210427.6ef5d8f_k5.14.6_2)
- Exclude the s390x Architecture
==== salt ====
Version update (3002.2 -> 3003.3)
Subpackages: python3-salt salt-master salt-minion salt-transactional-update
- Do not break master_tops for minion with version lower to 3003
- Added:
* do-not-break-master_tops-for-minion-with-version-low.patch
- Support querying for JSON data in external sql pillar
- Added:
* 3003.3-postgresql-json-support-in-pillar-423.patch
- Update to Salt release version 3003.3
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3003.3.html
- Added:
* allow-vendor-change-option-with-zypper.patch
* support-transactional-systems-microos.patch
* virt-enhancements.patch
- Modified:
* adds-explicit-type-cast-for-port.patch
* use-adler32-algorithm-to-compute-string-checksums.patch
* do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
* fixes-56144-to-enable-hotadd-profile-support.patch
* include-aliases-in-the-fqdns-grains.patch
* implementation-of-held-unheld-functions-for-state-pk.patch
* add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
* debian-info_installed-compatibility-50453.patch
* fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
* update-target-fix-for-salt-ssh-to-process-targets-li.patch
* x509-fixes-111.patch
* prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
* restore-default-behaviour-of-pkg-list-return.patch
* adding-preliminary-support-for-rocky.-59682-391.patch
* add-astra-linux-common-edition-to-the-os-family-list.patch
* templates-move-the-globals-up-to-the-environment-jin.patch
* fix-bsc-1065792.patch
* add-migrated-state-and-gpg-key-management-functions-.patch
* zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
* improvements-on-ansiblegate-module-354.patch
* add-custom-suse-capabilities-as-grains.patch
* return-the-expected-powerpc-os-arch-bsc-1117995.patch
* revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
* enhance-openscap-module-add-xccdf_eval-call-386.patch
* implementation-of-suse_ip-execution-module-bsc-10999.patch
* add-missing-aarch64-to-rpm-package-architectures-405.patch
* async-batch-implementation.patch
* temporary-fix-extend-the-whitelist-of-allowed-comman.patch
* do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
* figure-out-python-interpreter-to-use-inside-containe.patch
* better-handling-of-bad-public-keys-from-minions-bsc-.patch
* early-feature-support-config.patch
* do-not-monkey-patch-yaml-bsc-1177474.patch
- Removed:
* fix-memory-leak-produced-by-batch-async-find_jobs-me.patch
* fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch
* fix-for-log-checking-in-x509-test.patch
* do-not-make-ansiblegate-to-crash-on-python3-minions.patch
* prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
* remove-msgpack-1.0.0-requirement-in-the-installed-me.patch
* move-server_id-deprecation-warning-to-reduce-log-spa.patch
* re-adding-function-to-test-for-root.patch
* make-profiles-a-package.patch
* handle-master-tops-data-when-states-are-applied-by-t.patch
* fix-unit-tests-for-batch-async-after-refactor.patch
* prevent-test_mod_del_repo_multiline_values-to-fail.patch
* prevent-import-errors-when-running-test_btrfs-unit-t.patch
* fix-failing-unit-tests-for-batch-async.patch
* remove-unnecessary-yield-causing-badyielderror-bsc-1.patch
* virt-use-dev-kvm-to-detect-kvm-383.patch
* 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
* add-docker-logout-237.patch
* drop-wrong-mock-from-chroot-unit-test.patch
* fix-async-batch-multiple-done-events.patch
* fix-unit-test-for-grains-core.patch
* remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
* pkgrepo-support-python-2.7-function-call-295.patch
* opensuse-3000-virt-defined-states-222.patch
* open-suse-3002.2-xen-grub-316.patch
* add-patch-support-for-allow-vendor-change-option-wit.patch
* fix-the-removed-six.itermitems-and-six.-_type-262.patch
* fix-aptpkg-systemd-call-bsc-1143301.patch
* add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
* fix-cve-2020-25592-and-add-tests-bsc-1178319.patch
* regression-fix-of-salt-ssh-on-processing-targets-353.patch
* do-not-break-repo-files-with-multiple-line-values-on.patch
* 3002-set-distro-requirement-to-oldest-supported-vers.patch
* integration-of-msi-authentication-with-azurearm-clou.patch
* zypperpkg-filter-patterns-that-start-with-dot-244.patch
* fix-for-temp-folder-definition-in-loader-unit-test.patch
* fix-novendorchange-option-284.patch
* backport-virt-patches-from-3001-256.patch
* allow-passing-kwargs-to-pkg.list_downloaded-bsc-1140.patch
* path-replace-functools.wraps-with-six.wraps-bsc-1177.patch
* virt-uefi-fix-backport-312.patch
* add-all_versions-parameter-to-include-all-installed-.patch
* add-pkg.services_need_restart-302.patch
* add-batch_presence_ping_timeout-and-batch_presence_p.patch
* allow-vendor-change-option-with-zypper-313.patch
* avoid-traceback-when-http.query-request-cannot-be-pe.patch
* changed-imports-to-vendored-tornado.patch
* fix-issue-parsing-errors-in-ansiblegate-state-module.patch
* sanitize-grains-loaded-from-roster_grains.json.patch
* handle-volumes-on-stopped-pools-in-virt.vm_info-373.patch
* add-multi-file-support-and-globbing-to-the-filetree-.patch
* loosen-azure-sdk-dependencies-in-azurearm-cloud-driv.patch
* backport-thread.is_alive-fix-390.patch
* get-os_arch-also-without-rpm-package-installed.patch
* python3.8-compatibility-pr-s-235.patch
* fixed-bug-lvm-has-no-parttion-type.-the-scipt-later-.patch
* ensure-virt.update-stop_on_reboot-is-updated-with-it.patch
* xfs-do-not-fails-if-type-is-not-present.patch
* grains-master-can-read-grains.patch
* invalidate-file-list-cache-when-cache-file-modified-.patch
* move-vendor-change-logic-to-zypper-class-355.patch
* implement-network.fqdns-module-function-bsc-1134860-.patch
* opensuse-3000.2-virt-backports-236-257.patch
* prevent-ansiblegate-unit-tests-to-fail-on-ubuntu.patch
* batch_async-avoid-using-fnmatch-to-match-event-217.patch
* provide-the-missing-features-required-for-yomi-yet-o.patch
* fix-__mount_device-wrapper-254.patch
* fix-ipv6-scope-bsc-1108557.patch
* fix-failing-unit-tests-for-systemd.patch
* use-current-ioloop-for-the-localclient-instance-of-b.patch
* revert-add-patch-support-for-allow-vendor-change-opt.patch
* remove-deprecated-warning-that-breaks-miniion-execut.patch
* prevent-systemd-run-description-issue-when-running-a.patch
* fix-grains.test_core-unit-test-277.patch
* prevent-command-injection-in-the-snapper-module-bsc-.patch
* backport-of-upstream-pr59492-to-3002.2-404.patch
* use-threadpool-from-multiprocessing.pool-to-avoid-le.patch
* reintroducing-reverted-changes.patch
* add-cpe_name-for-osversion-grain-parsing-u-49946.patch
* add-hold-unhold-functions.patch
* virt._get_domain-don-t-raise-an-exception-if-there-i.patch
* fix-error-handling-in-openscap-module-bsc-1188647-40.patch
* apply-patch-from-upstream-to-support-python-3.8.patch
* remove-deprecated-usage-of-no_mock-and-no_mock_reaso.patch
* add-supportconfig-module-for-remote-calls-and-saltss.patch
* allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
* fall-back-to-pymysql.patch
* fixes-cve-2018-15750-cve-2018-15751.patch
* do-not-crash-when-there-are-ipv6-established-connect.patch
* improve-batch_async-to-release-consumed-memory-bsc-1.patch
* support-config-non-root-permission-issues-fixes-u-50.patch
* transactional_update-detect-recursion-in-the-executo.patch
* open-suse-3002.2-virt-network-311.patch
* option-to-en-disable-force-refresh-in-zypper-215.patch
* do-noop-for-services-states-when-running-systemd-in-.patch
* exclude-the-full-path-of-a-download-url-to-prevent-i.patch
* fix-a-wrong-rebase-in-test_core.py-180.patch
* add-new-custom-suse-capability-for-saltutil-state-mo.patch
* opensuse-3000-libvirt-engine-fixes-251.patch
* accumulated-changes-from-yomi-167.patch
* fix-async-batch-race-conditions.patch
* fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
* loop-fix-variable-names-for-until_no_eval.patch
* batch-async-catch-exceptions-and-safety-unregister-a.patch
* grains.extra-support-old-non-intel-kernels-bsc-11806.patch
* backport-a-few-virt-prs-272.patch
* fix-git_pillar-merging-across-multiple-__env__-repos.patch
* drop-wrong-virt-capabilities-code-after-rebasing-pat.patch
* virt-adding-kernel-boot-parameters-to-libvirt-xml-55.patch
* async-batch-implementation-fix-320.patch
* support-for-btrfs-and-xfs-in-parted-and-mkfs.patch
* support-transactional-systems-microos-271.patch
* strip-trailing-from-repo.uri-when-comparing-repos-in.patch
* opensuse-3000.3-spacewalk-runner-parse-command-250.patch
* calculate-fqdns-in-parallel-to-avoid-blockings-bsc-1.patch
* add-virt.all_capabilities.patch
* ansiblegate-take-care-of-failed-skipped-and-unreacha.patch
* virt-pass-emulator-when-getting-domain-capabilities-.patch
* fixing-streamclosed-issue.patch
* fix-for-some-cves-bsc1181550.patch
* transactional_update-unify-with-chroot.call.patch
* do-not-raise-streamclosederror-traceback-but-only-lo.patch
* fix-batch_async-obsolete-test.patch
* fix-zypper-pkg.list_pkgs-expectation-and-dpkg-mockin.patch
* fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
* accumulated-changes-required-for-yomi-165.patch
* fix-virt.update-with-cpu-defined-263.patch
* remove-vendored-backports-abc-from-requirements.patch
* open-suse-3002.2-bigvm-310.patch
* xen-disk-fixes-264.patch
* virt.network_update-handle-missing-ipv4-netmask-attr.patch
* add-saltssh-multi-version-support-across-python-inte.patch
==== selinux-policy ====
Subpackages: selinux-policy-targeted
- Fix auditd service start with systemd hardening directives (boo#1190918)
* add fix_auditd.patch
==== systemd ====
Subpackages: libsystemd0 libudev-devel libudev1 systemd-container systemd-doc systemd-sysvinit udev
- Work around rpmlint complaining about /var/log/journal shipped with setgid bit
This setgid bit has been already reviewed in the past and wasn't a
concern. However we want the mode/ownership adjusted by tmpfiles and
avoid the duplication of these info in rpm.
- Don't ghost own any directories created dynamically by tmpfiles
Again rpmlint complains but it doesn't seem to make sense to try to
track all paths (including theirs perms, ownerships...) created
dynamically. And 'rpm -V' is likely to report issues later with
these paths anyway.
This effectively partially reverts the two previous commits.
- Make sure the build process won't create /var/log/journal
- /var/log/journal/remote is owned by systemd-journal-remote
- systemd.spec: fix a bunch of rpmlint errors/warnings
- Drop systemd-logger
This sub package was introduced in order to configure persistent
journal and also to make sure that another syslog provider (such as
rsyslog) couldn't be installed at the same time: each syslog
provider conflicts with each others.
However this mechanism didn't work since uninstalling systemd-logger
wasn't magically turning off persistent logging because
/var/log/journal is likely to be populated hence not removed.
Moreover using a subpackage to configure the mode of journald was
overkill and the usual ways (main conf file or drop-ins) should be
preferred.
- Import commit 7a5801342fe2f53e5c2a8578d6db132c0eca2d97
8d65ec4a66 test: wc is needed by test/units/testsuite-50.sh
1527bcc5dd test: make the installation of the debug tools optional in the image
f4e6bf0b37 journalctl: never fail at flushing when the flushed flag is set (bsc#1188588)
- Update the dependencies of the testsuite package
The debug tools are optional thus no more required.
OTOH strip(1) is needed when building the test image and nc(1) is
needed by some tests.
- Drop git internal files from the testsuite sub-package
- Adjust pam macros
==== sysvinit ====
Version update (2.99 -> 3.00)
- Update to sysvinit 3.00:
* Better device detection of bootlogd
==== tdb ====
Version update (1.4.3 -> 1.4.4)
Subpackages: libtdb1 python3-tdb
- Update to version 1.4.4
+ Fix a memory leak on error
+ python: remove all 'from __future__ import print_function'
+ Fix CID 1471761 String not null terminated
+ Use hex_byte() in parse_hex()
+ Use hex_byte() in read_data()
+ fix studio compiler build
+ Fix some signed/unsigned comparisons
+ also use __has_attribute macro to check for attribute support
+ Fix clang 9 missing-field-initializer warnings
+ pytdb tests: add test for storev()
+ pytdb: add python binding for storev()
+ tdbtorture: Use ARRAY_DEL_ELEMENT()
+ py3: Remove #define PyInt_FromLong PyLong_FromLong
+ py3: Remove #define PyInt_AsLong PyLong_AsLong
+ py3: Remove #define PyInt_Check PyLong_Check
+ tdb: Align integer types
- Drop obsolete patch ignore-tdb1-run-transaction-expand.diff
- Fix header file using undefined function visibility macro;
Add patch 0001-tdb-Fix-invalid-syntax-in-tdb.h.patch; (bso#14762);
==== tevent ====
Version update (0.10.2 -> 0.11.0)
Subpackages: libtevent0 python3-tevent
- Update to version 0.11.0
+ Other minor build fixes; (bso#14526);
+ Add custom tag to events
+ Add event trace api
==== xrdb ====
- Remove fallback to /lib/cpp, it's the same package as /usr/bin/cpp
anyway (boo#1191060).
==== xwayland ====
- U_glamor-Fix-handling-of-1-bit-pixmaps.patch
* glamor: Fix handling of 1-bit pixmaps; fixes e.g. issues with
gimp on Wayland (which needs Xwayland) (boo#1189310)
==== yast2-alternatives ====
Version update (4.3.1 -> 4.4.0)
- 4.4.0 (bsc#1185510)
==== yast2-installation ====
Version update (4.4.18 -> 4.4.19)
- Release the sources and close the libzypp cache to allow
cleanly unmounting /mnt/var/cache/zypp directory (bsc#1189793)
- 4.4.19
==== yast2-slp-server ====
Version update (4.3.0 -> 4.4.0)
- 4.4.0 (bsc#1185510)
==== yast2-storage-ng ====
Version update (4.4.7 -> 4.4.8)
- Recommend to install libyui-qt-graph package (bsc#1191109) in
order to offer the View/Device Graphs menu option.
- 4.4.8
==== zimg ====
Version update (3.0.1 -> 3.0.3)
- Update to 3.0.3:
* depth: fix out-of-bounds read in SSE2/AVX2 error diffusion
(introduced in 2.5)
* colorspace: revert SMPTE 240M behavior change (introduced in
3.0.2)
* Changes in version 3.0.2:
* api: default to ZIMG_CPU_AUTO when graph params are null
* colorspace: fix incorrect SMPTE 240M transfer function
* colorspace: fix underflow in AVX-512 ST.2084 transfer functions
* graph: fix conversion from fullrange grey to RGB
* arm: fix data alignment
* x86: optimizations for AMD Zen3 processors
- Add zimg-s390x-unit-tests.patch: fix unit tests on big endian
systems.
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the aarch64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=3&versio…
Please do not reply to this email to report issues, rather file a bug
on bugzilla.opensuse.org. For more information on filing bugs please
see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
MozillaFirefox-branding-openSUSE
NetworkManager-openvpn (1.8.14 -> 1.8.16)
adwaita-icon-theme (40.1.1 -> 41.0)
at-spi2-core (2.40.3 -> 2.42.0)
baobab (40.0 -> 41.0)
brasero (3.12.2+20200906.5945fdff -> 3.12.3)
cheese (3.38.0 -> 41.0)
curl (7.79.0 -> 7.79.1)
dleyna-connector-dbus (0.3.0 -> 0.4.1)
dleyna-core (0.6.0 -> 0.7.0)
dleyna-server (0.6.0 -> 0.7.1)
eog (40.3 -> 41.0)
evolution (3.40.4 -> 3.42.0)
evolution-data-server (3.40.4 -> 3.42.0)
evolution-ews (3.40.4 -> 3.42.0)
folks (0.14.0 -> 0.15.3)
gdm (3.38.2 -> 41.0)
gjs (1.68.4 -> 1.70.0)
glib-networking (2.68.1 -> 2.70.0)
glib2 (2.68.4 -> 2.70.0)
glibmm2_4 (2.66.0 -> 2.66.1)
gnome-calculator (40.1 -> 41.0)
gnome-characters (40.0 -> 41.0)
gnome-chess (40.1 -> 41.0)
gnome-contacts (40.0 -> 41.0)
gnome-control-center (40.1 -> 41.0)
gnome-desktop (40.4 -> 41.0)
gnome-disk-utility (40.2 -> 41.0)
gnome-music (40.1.1 -> 41.0)
gnome-online-miners
gnome-remote-desktop (40.2 -> 41.0)
gnome-settings-daemon (40.0.1 -> 41.0)
gnome-shell (40.5 -> 41.0)
gnome-shell-extensions (40.4 -> 41.0)
gnome-software (40.4 -> 41.0)
gnome-system-monitor (40.1 -> 41.0)
gnome-terminal (3.40.3 -> 3.42.0)
gnome-user-docs (40.5 -> 41.0)
gnome-weather (40.1 -> 41.0)
gobject-introspection (1.68.0 -> 1.70.0)
gsettings-desktop-schemas (40.0 -> 41.0)
gssdp (1.2.3 -> 1.4.0.1)
gtk4
gtkmm3 (3.24.4 -> 3.24.5)
gtksourceview4 (4.8.1 -> 4.8.2)
gupnp (1.2.7 -> 1.4.0)
gupnp-av (0.12.11 -> 0.14.0)
gupnp-dlna (0.10.5 -> 0.12.0)
inkscape (1.1 -> 1.1.1)
kmod
libdazzle (3.40.0 -> 3.42.0)
libhandy (1.2.3 -> 1.4.0)
libnss_nis
libpwquality
librsvg (2.50.7 -> 2.52.0)
libsoup2 (2.72.0 -> 2.74.0)
malcontent
mutter (40.5 -> 41.0)
nautilus (40.2 -> 41.0)
orca (40.0 -> 41.0)
pangomm1_4 (2.46.0 -> 2.46.1)
polari (40.1 -> 41.0)
python-atspi
python-cramjam
python-gobject (3.40.1 -> 3.42.0)
python-zope.event
rubygem-bundler (2.2.24 -> 2.2.27)
seahorse (40.0 -> 41.0)
seahorse-nautilus
shared-mime-info
sushi (3.38.1 -> 41.0)
swell-foop (40.1 -> 41.0.1)
tigervnc
tracker (3.1.2 -> 3.2.0)
tracker-miners (3.1.3 -> 3.2.0)
upower (0.99.11 -> 0.99.13)
vinagre
vte (0.64.2 -> 0.66.0)
webkit2gtk3-soup2 (2.32.4 -> 2.34.0)
xdg-desktop-portal-gtk (1.8.0 -> 1.10.0)
yast2-network (4.4.25 -> 4.4.26)
yast2-nfs-client (4.4.0 -> 4.4.1)
yelp (40.3 -> 41.1)
yelp-xsl (40.2 -> 41.0)
zenity (3.32.0 -> 3.41.0)
=== Details ===
==== MozillaFirefox-branding-openSUSE ====
- use HTTPS for software search plugin
==== NetworkManager-openvpn ====
Version update (1.8.14 -> 1.8.16)
Subpackages: NetworkManager-openvpn-gnome
- Update to version 1.8.16:
+ Fix detection of OpenVPN 2.5.0
+ Allow the connection to persist across network failures when
the VPN profile has 'vpn.persistent=yes'
+ Fix parsing of incomplete IPv6 configurations pushed by server
+ Improve logging message about deprecated tls-remote option
+ Updated translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
==== adwaita-icon-theme ====
Version update (40.1.1 -> 41.0)
- Update to version 41.0:
+ fullcolor network server and workgroup.
+ symbolic: larger symbolics for headerbar.
+ symbolic: larger notification.
+ updated guidelines.
+ symbolic: ascend/descending sort.
+ symbolic: edit-clear-all new metaphor.
+ fullcolor: application-x-addon and application-x-firmware.
==== at-spi2-core ====
Version update (2.40.3 -> 2.42.0)
Subpackages: libatspi0 typelib-1_0-Atspi-2_0
- Update to version 2.42.0:
+ Set X root property when Xwayland starts on demand.
+ Several dbus introspection fixes.
==== baobab ====
Version update (40.0 -> 41.0)
- Update to version 41.0:
+ Updated translations.
==== brasero ====
Version update (3.12.2+20200906.5945fdff -> 3.12.3)
Subpackages: brasero-nautilus libbrasero-burn3-1 libbrasero-media3-1 libbrasero-utils3-1
- Update to version 3.12.3:
+ Blu-ray fixes.
+ Support Tracker 3.0.
+ Transcode plugin gstreamer plugin improvement.
+ Fix crash with malformed URI.
+ Fix default project label.
+ Man page fixes.
+ Header guard fix.
+ Help improvements.
+ Updated translations.
- Re-enable tracker support, as Tracker 3.0 is now supported:
+ Pass --enable-search to configure.
+ Add tracker-devel BuildRequires.
- Switch back to regular release tarball.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
==== cheese ====
Version update (3.38.0 -> 41.0)
Subpackages: libcheese-common libcheese-gtk25 libcheese8
- Update to version 41.0:
+ Allow headerbar to appear on all desktops.
+ Update to runtime 40 and some meta-data fixes.
+ Reference of [GtkChild] fields is handled by GtkBuilder, type
must be unowned.
+ Change GLib.PtrArray into GLib.GenericArray.
+ libcheese: Fix critical on failing to load cropping cursor.
+ Allow device parameter to understand api.v4l2.path.
+ Update flatpak manifest and appdata.
+ Remember last used camera.
+ Enable cameras with only MJPEG output.
+ Preserve video/x-raw over image/jpeg.
+ Support camera video formats with MJPEG output.
+ Show better error when file info query fails.
+ Fix infinite loop if thumbnailer is not available.
+ Updated translations.
- Rename typelib-1_0-Cheese-3_0 subpackage to
typelib-1_0-Cheese-41_0, following upstream.
- Drop upstream fixed patches:
+ 1c1e7fa0c4608331fd89683ccb342ed3518acccc.patch
+ 5587daca748e9010f59250c5dcb8e8ea42266685.patch
+ 58de82b3d463b69f4c0bef75667e47020924e28b.patch
+ 7cf6268e54620bbbe5e6e61800c50fb0cb4bea57.patch
+ 9f0825c3169047da75d3fe91a3cb02bfe6fb7f25.patch
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Add upstream patches adding support for video MJPEG output:
+ 58de82b3d463b69f4c0bef75667e47020924e28b.patch
+ 1c1e7fa0c4608331fd89683ccb342ed3518acccc.patch
+ 5587daca748e9010f59250c5dcb8e8ea42266685.patch
+ 9f0825c3169047da75d3fe91a3cb02bfe6fb7f25.patch
==== curl ====
Version update (7.79.0 -> 7.79.1)
Subpackages: libcurl4
- Update to 7.79.1:
* Bugfixes:
- Curl_http2_setup: don't change connection data on repeat invokes
- curl_multi_fdset: make FD_SET() not operate on sockets out of range
- dist: provide lib/.checksrc in the tarball
- FAQ: add GOPHERS + curl works on data, not files
- hsts: CURLSTS_FAIL from hsts read callback should fail transfer
- hsts: handle unlimited expiry
- http: fix the broken >3 digit response code detection
- strerror: use sys_errlist instead of strerror on Windows
- test1184: disable: https://github.com/curl/curl/issues/7725
- tests/sshserver.pl: make it work with openssh-8.7p1
==== dleyna-connector-dbus ====
Version update (0.3.0 -> 0.4.1)
- Update to version 0.4.1:
+ Fix use-after-free on shutdown due to missing reference on bus
- Changes from version 0.4.0:
+ Remove build-time dependency on dbus-1
+ Move build system to meson
- Add meson BuildRequires and macros, and drop libtool
BuildRequires following upstreams port.
- Drop pkgconfig(dbus-1) BuildRequires following upstream changes.
- Update URL and Source to new home, as intel have dropped
maintenance of this package, go with the leading fork.
==== dleyna-core ====
Version update (0.6.0 -> 0.7.0)
- Update to version 0.7.0:
+ Port to GUPnP 1.2 API
+ Switch build system to meson
+ Make connector search path overridable by setting
DLEYNA_CONNECTOR_PATH environment variable
+ Stability improvements for the task processor
- Add meson BuildRequires and macros, and drop libtool
BuildRequires, following upstreams port.
- Drop dleyna-core-port-to-gupnp1_2.patch: Fixed upstream.
- Update URL and Source to new home, as intel have dropped
maintenance of this package, go with the leading fork.
==== dleyna-server ====
Version update (0.6.0 -> 0.7.1)
- Update to version 0.7.1:
+ Build fixes
+ Fix service file generation for non-default service name
+ Fix rpath linking errors
+ Do not use deprecated SoupSessionAsync
- Changes from version 0.7.0:
+ Port to GUPnP 1.2
+ Switch build system to meson
+ Drop signalfd for GLib's unix signal handling
+ Fix a potential crash when getting server properties
+ Add support for changing the D-Bus server name
+ Fix a use-after-free
+ Fix unintialized buffer use
- Add meson BuildRequires and macros + drop libtool BuildRequires:
No longer needed following upstreams port.
- Add pkgconfig(libxml-2.0) BuildRequires: New dependency.
- Drop dleyna-server-port-gupnp1_2.patch: Fixed upstream.
- Update URL and Source to new home, as intel have dropped
maintenance of this package, go with the leading fork.
==== eog ====
Version update (40.3 -> 41.0)
- Update to version 41.0:
+ Updated translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Update to version 41.rc:
+ Updated translations.
- Update to version 41.beta:
+ Fix deprecated functions.
+ Updated translations.
==== evolution ====
Version update (3.40.4 -> 3.42.0)
Subpackages: evolution-plugin-bogofilter evolution-plugin-pst-import evolution-plugin-spamassassin evolution-plugin-text-highlight
- Update to version 3.42.0:
+ help: Remove unused translated images.
+ Bugs fixed:
- Flatpak: Set StartupWMClass in the .desktop file.
- help: fix its:locNote placement.
- help/ldap - clarify search scopes.
+ Updated translations.
- Update to version 3.41.3:
+ EAttachmentIconView: Improve display settings (Milan Crha)
+ help:
- Cover more advanced mail thread sorting options.
- Update Exchange server related docs; link to OAuth2 wiki
page.
+ Updated translations.
- Update to version 3.41.2:
+ mail-notification: Show mail folder name as the last in the
notification.
+ Mail: Let the Enter key press in folder tree focus the message
list.
+ EShellSearchbar: Update actions only if the shell view is
active.
+ EAlert: Make it possible to mark actions as destructive in the
.error files.
+ help: Remove some obsolete comments; link to free form syntax.
+ Updated translations.
- Update to version 3.41.1:
+ certificate-manager: Provide columns with SHA256 certificate
checksum.
+ Calendar: Fix error detail reference for 'failed-make-movable'.
+ Disable sandboxing to enable printing, until WebKitGTK is
fixed.
+ Addressbook: Switch from GData Contacts API to CardDAV API for
Google books.
+ Flatpak: Replace --socket=x11 with --socket=fallback-x11.
+ Update developer documentation .sgml files with missing pieces.
+ EPictureGallery: Sort the content by the file name.
+ EToDoPane: Add 'Delete This and Future Occurrences' popup menu
option.
+ plugin-manager: Hide vertical scrollbar in plugin list, when
not needed.
+ help: Cover 'Edit Sort Order? option'.
+ help: Cover HTML vs Plain Text rendering.
+ Updated translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
==== evolution-data-server ====
Version update (3.40.4 -> 3.42.0)
Subpackages: libebackend-1_2-10 libebook-1_2-20 libebook-contacts-1_2-3 libecal-2_0-1 libedata-book-1_2-26 libedata-cal-2_0-1 libedataserver-1_2-26 libedataserverui-1_2-3
- Replace CMAKE_SKIP_RPATH=OFF with CMAKE_SKIP_INSTALL_RPATH=OFF
as that should be used with the newest cmake macros.
- Update to version 3.42.0:
+ Updated translations.
- Update to version 3.41.3:
+ Slow down automatic background downloads when in power saver
mode.
+ ERemindersWidget: Reverse order of the shown reminders.
+ vala: FolderThreadNode is a compact class.
+ Updated translations.
- Update to version 3.41.2:
+ CamelMimeFilterToHTML: Speed up read of long lines.
+ CamelMimeFilterToHTML: Correct filtering of text without new
line at the end.
+ alarm-notify: Focus window on status icon click when shown.
+ vala: Add support for the auth_type class field of CamelSasl.
+ vala: Properly annotate CamelServiceAuthType.
+ ESoupSession: Let it understand GSSAPI authentication method.
+ Updated translations.
- bump so_camel to 63: follow upstream changes.
- Update to version 3.41.1:
+ EWebDAVCollectionBackend: Preset also auth method on the new
child.
+ Camel: Fails to filter unread junk messages in a virtual Junk
folder.
+ Add Yahoo! OAuth2 service objects into the developer
documentation.
+ ESourceWebDAV: Fallback to SHA1 on SSL trust verification if
needed.
+ ECalBackendSync: Ensure no Recurrence-ID set when removing all
components.
+ PrintableOptions.cmake: Correct variable name comparison.
+ libecal: Fix a warning caught by a gcc static analyzer.
+ Updated translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
==== evolution-ews ====
Version update (3.40.4 -> 3.42.0)
- Update to version 3.42.0:
+ Updated translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Update to version 3.41.3:
+ EEwsConnection: Release queue lock as soon as possible in
ews_next_request().
+ Updated translations.
- Update to version 3.41.2:
+ Adapt to e_alert_add_action() API change.
+ ESoupAuthNegotiate: Improve thread safety.
+ ESoupAuthNegotiate: Fix two memory leaks.
+ Updated translations.
- Update to version 3.41.1:
+ PrintableOptions.cmake: Correct variable name comparison.
+ Updated translations.
==== folks ====
Version update (0.14.0 -> 0.15.3)
- Update to version 0.15.3:
+ Fix build against newer eds version.
- Changes from version 0.15.2:
+ Fixed build errors after API version bump.
+ Fixed gtk-doc errors due to missing version entities.
- Changes from version 0.15.1:
+ Dependencies:
- No more dependencies on libtracker
- GLib minimal requirement: 0.58
- E-D-S minimal requirement: 3.38
+ Major changes:
- This release drops the Tracker backend (along with it's
dependencies).
- A selection of (small) performance improvements.
- Auto-generation and deployment of the docs using CI.
- Drop conditional pkgconfig(tracker-sparql-2.0) BuildRequires, no
longer needed, nor used. Following this, drop sub-packages
typelib-1_0-FolksTracker-0_6 and libfolks-tracker25.
- Bump soversion and module version following upstream changes.
- Rename sub-packages (typelibs) following api/abi bump.
==== gdm ====
Version update (3.38.2 -> 41.0)
Subpackages: gdmflexiserver libgdm1 typelib-1_0-Gdm-1_0
- Rebase gdm-disable-gnome-initial-setup.patch.
- Update to version 41.0:
+ Updated translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Add gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch:
Support to start X under root instead of regular user.
(bnc#1188912 jsc#SLE-17880).
- Update X11-displaymanager-gdm file.
- Update to version 41.rc:
+ Fix fallback to Xorg at login screen.
+ Fix SessionType in AccountService user config.
+ Reuse VT on log out.
+ Updated translations.
- Update to version 41.alpha:
+ Allow user session to be Wayland even when login screen is
Xorg.
+ Allow wayland user sessions for single GPU vendor nvidia
machines.
+ Updated translations.
- Rebase patches:
+ gdm-s390-not-require-g-s-d_wacom.patch
+ gdm-disable-gnome-initial-setup.patch
- Rebased gdm-default-wm.patch.
- Drop patches fixed upstream on SLE and Leap 15.4:
+ gdm-enable-Wayland-on-Cirrus.patch
+ gdm-Remove-deprecated-StandardOutput-syslog.patch
+ gdm-fix-crash-when-using-Xvfb.patch
+ gdm-display-Exit-with-failure-if-loading-existing-users-fails.patch
- Update to version 40.1:
+ Better support for unlocking gnome-keyring with disk password
+ Better support for flatpak
+ Misc auth fixes
+ Improved error output in gdm-runtime-config
+ Sort session list on login screen
+ Support Session and SessionType properties from accountsservice
+ Updated translations.
- Rebase gdm-xauthlocalhostname.patch.
- Disable gdm-default-wm.patch, needs reworking.
- Add now working CONFIG parameter to sysusers generator
- Add gdm-Remove-deprecated-StandardOutput-syslog.patch: Remove
deprecated StandardOutput=syslog in gdm.service file
(bsc#1185146, glgo#GNOME/gdm!623).
- Update to version 40.0:
+ 100% CPU fix.
+ Updated translations.
- Update to version 40.rc:
+ Fingerprint auth fixes.
+ Fix timeout handling for graphics bringup.
+ Updated translations.
- Update to version 40.beta:
+ xinit script improvements.
+ Build goo fixes.
+ Support systems that boot before the graphics subsystem fully
loads.
+ Don't overwrite PATH set by user.
+ Generalize gdm-disable-wayland into new gdm-runtime-config
tool.
+ Fail hard if accountsservice fails.
+ PAM integration improvements.
+ Leak fixes.
+ Stop using deprecated systemd functions.
- Changes from version 3.38.2.1:
+ Address autologin unlock bug issue (CVE-2020-27837).
+ Updated translations.
- Rebase gdm-disable-wayland-on-mgag200-chipsets.patch.
- Drop gdm-UsrEtc.patch: merged upstream.
==== gjs ====
Version update (1.68.4 -> 1.70.0)
Subpackages: libgjs0 typelib-1_0-GjsPrivate-1_0
- Update to version 1.70.0:
+ No changes.
- Update to version 1.69.90:
+ Update ESLint to v8.
+ gi: Enable pending tests which are now correctly handled.
+ gi: Return null if return argument is a pointer type.
+ gi: Assume native enums are signed, avoid asserting. [!660, Evan Welsh]
+ Fix cppcheck failure.
+ Strange behavior for strings with NUL character.
+ 64-bit int GObject properties have some problems with
values > G_MAXINT32.
+ Crash on dynamic import in interactive interpreter.
+ 1.69.1: gjs test suite is failing when gjs is build with
- DG_DISABLE_ASSERT.
+ function: Warn about unhandled promise rejections in
System.exit().
+ attempting to wrap a new GObject mid-construction blows up.
+ Fix IWYU CI job.
+ Build fixes.
- Update to version 1.69.2:
+ The TextEncoder and TextDecoder global objects are now
available.
+ The 'console' global object is now available. This is for
compatibility with Node.js and browser environments, and for
familiarity for developers accustomed to them.
+ Cairo.Surface has gained getDeviceScale(), setDeviceScale(),
getDeviceOffset(), and setDeviceOffset() methods.
+ GLib.log_set_writer_func() and
GObject.Object.bind_property_full() now work.
+ There is also a 'console' built-in module which exports
functions setConsoleLogDomain() and getConsoleLogDomain(), for
controlling the GLib log domain that the console methods use.
+ The debugger has gained a 'set ignoreCaughtExceptions
(true/false)' option.
==== glib-networking ====
Version update (2.68.1 -> 2.70.0)
- Update to version 2.70.0:
+ Updated translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Update to version 2.70.rc:
+ gnutls:
- revert AuthorityInformationAccess implementation for now.
- fix use of non-default GTlsDatabases, Geary crash on startup.
- fix leak in g_tls_certificate_gnutls_copy.
- Unbreak GTLS_GNUTLS_CHECK_VERSION.
+ openssl: remove openssl-util.
- Update to version 2.70.beta:
+ gnutls: Ensure that PKCS #11 pins are NUL terminated.
+ openssl: Restore OCSP support.
- Update to version 2.70.alpha:
+ Fix TLS channel bindings tests.
+ Require OpenSSL 1.0.2.
+ Fix threadsafety issue in certificate verification.
+ dlopen libsoup for performing HTTP requests.
+ OpenSSL: add DTLS support, plus many related improvements.
+ Implement new GTlsCertificate details APIs.
+ GnuTLS: improve error handling for PIN failures.
+ GnuTLS: expose PIN type on PIN requests.
+ GnuTLS: check cancellable in pull timeout callback.
+ Improve automation of test certificate creation.
+ GnuTLS: use GnuTLS to implement all channel bindings.
+ GnuTLS: rework certificate verification to use TLS session.
+ GnuTLS: improve peer identity verification.
+ Bring back automatic downloading of missing intermediate
certificates (not fixed, may go away again).
==== glib2 ====
Version update (2.68.4 -> 2.70.0)
Subpackages: glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 libgthread-2_0-0
- Update to version 2.70.0:
+ Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
+ Updated translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
==== glibmm2_4 ====
Version update (2.66.0 -> 2.66.1)
Subpackages: libgiomm-2_4-1 libglibmm-2_4-1
- Update to version 2.66.1:
+ Glib: Variant: Fix template constructors so they work with
C++20.
+ Build:
- Meson build:
. Use relative paths to untracked/
. examples and tests: Add dependency('threads')
. Make it possible to use glibmm as a subproject
. No implicit_include_directories
. Make quiet installations possible
- MSVC build:
. Export Glib::manage()
. Avoid exporting classes with std::string members
- [gio|glib]mmconfig.h.*: Don't dllimport on MinGW
- Add glibmm2_4-docs-without-timestamp.patch: Do not add timestamps
to generated doc files.
- Add m4 BuildRequires: the generated gmmproc actually stores the
path to m4, as detected during build. Subsequent builds of other
* mm modules from git need a working setup for this.
==== gnome-calculator ====
Version update (40.1 -> 41.0)
Subpackages: gnome-shell-search-provider-gnome-calculator
- Update to version 41.0:
+ Use first translated symbol for conversion with button.
+ Appdata includes hardware support information.
+ Updated Translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Update to version 41.rc:
+ Updated translations.
- Update to version 41.alpha:
+ Adaptive preferences window.
+ Fixed currency conversion using convert button.
+ User interface reworked, adaptive UI.
+ Enlarged calculator icon in help.
+ Fixed kilohertz shorthand.
+ Added support using calculator without currency conversion for
privacy.
+ Added support for function description of custom functions
using @.
==== gnome-characters ====
Version update (40.0 -> 41.0)
Subpackages: gnome-shell-search-provider-gnome-characters
- Update to version 41.0:
+ Bugs fixed: window: Show the close button on the sidebar.
+ Updated translations.
==== gnome-chess ====
Version update (40.1 -> 41.0)
- Update to version 41.0:
+ Several updates to user help.
==== gnome-contacts ====
Version update (40.0 -> 41.0)
Subpackages: gnome-shell-search-provider-contacts
- Update to version 41.0:
+ Long names are wrapped over more lines, which makes them more
readable, especially in the case of a small screen.
+ Updated translations.
- Update Supplements syntax in sub-package to current standard.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Update to version 41.beta:
+ When adding or updating a contact, Contacts will now scroll the
list to the newly-made contact.
+ The Contacts title after cancelling selecting now correctly
shows "Contacts".
+ When opening a contact, a previously entered birthday is now
shown.
+ We now have a dedicated selection mode button, which makes the
UX for touchscreen devices much more intuitive.
+ Several small UI improvements, like extra tooltips that follow
the GNOME HIG.
+ Updated translations.
==== gnome-control-center ====
Version update (40.1 -> 41.0)
Subpackages: gnome-control-center-color gnome-control-center-goa gnome-control-center-user-faces
- Bring back gnome-control-center-disable-error-message-for-NM.patch
and rebase it against latest code base(bsc#1190875).
- Add power-profiles-daemon Recommends: Support the new power
profiles available.
- Refresh patches with quilt.
- Update to version 41.0:
+ Cleanup the development Flatpak manifest.
+ User Accounts: Add parental controls keywords.
+ Updated translations.
- Update to version 41.rc1:
+ Cellular: Various translation fixes.
+ User Accounts: Improve parental controls behavior.
+ Updated translations.
- Update to version 41.beta:
+ Introduce the new Cellular panel.
+ Introduce the new Multitasking panel.
+ About: Fix a crash due to uninitialized variables.
+ Bluetooth: Fix Bluetooth switch transitions.
+ Location: Fix permission store id (again).
+ Power: Polish power profiles section.
- Changes from version 41.alpha:
+ Improve and fix the development Flatpak manifest.
+ Drop dependency on grilo.
+ About:
- Don't show GNOME micro version number.
- Look for dark and text distro logo variants.
+ Accessibility: Add "Enable Animations" option.
+ Location: Fix permission store id.
+ Mouse & Touchpad: Update artwork.
+ Online Accounts: Present all online accounts providers at once.
+ Power:
- Integrate with new power profiles daemon API.
- Show more information about power profiles.
- Cleanup some preferences.
+ Updated translations.
- Drop pkgconfig(grilo-0.3) BuildRequires: no longer needed.
- Add pkgconfig(gcr-3) BuildRequires: dependency for the new
cellular panel.
==== gnome-desktop ====
Version update (40.4 -> 41.0)
Subpackages: gnome-version libgnome-desktop-3-19 libgnome-desktop-3_0-common typelib-1_0-GnomeDesktop-3_0
- Update to version 41.0:
+ Updated translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Update to version 41.rc:
+ Updated translations.
- Update to version 41.beta:
+ xkb: Clear cached layouts when necessary.
+ Updated translations.
- Update to version 41.alpha:
+ Stop mounting ld.so.cache on non-glibc systems.
+ Replace usage of non-portable `uselocale` with locale-dependent
functions.
+ Fix starttime hour parsing in animated background.
+ xkbinfo: only insert new layouts, skip over duplicate ones.
+ Updated translations.
==== gnome-disk-utility ====
Version update (40.2 -> 41.0)
- Update to version 41.0:
+ metainfo: Add minimum screen size requirement and input
recommendations
+ desktop-file: Add X-Purism-Form-Factor.
+ Updated translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Update to version 41.rc:
+ Updated translations.
- Update to version 41.beta:
+ gducreateformatdialog: Use LUKS2 for new encrypted partitions.
+ volume-menu/gduwindow: Add button and dialog to take filesystem
ownership.
+ ui: Change the icon of the detach loop device button.
+ shortcuts: Add keyboard shortcut for the application menu.
+ gduwindow: Make menus toggleable.
+ ui: Change the icon of the job cancel button.
+ ui: Align job section.
+ ui: Enable ellipsis on the job remaining label.
+ gdubenchmarkdialog: Save benchmark settings.
+ Flatpak build fixes.
+ Updated translations.
- Update to version 41.alpha:
+ UI: Highlight destructive actions.
+ Updated translations.
==== gnome-music ====
Version update (40.1.1 -> 41.0)
- Add missing typelib (GstTag) Requires: the gi-dep-scanner does
not understand the format used in gnome-music.
- Update to version 41.0:
+ Updated translations.
- Update to version 41.rc:
+ Touch-ups for the new design.
+ Async improvements.
+ Bugs fixed:
- Fix duplicated playlist song removal.
- Fix flowbox selection state.
+ Updated translations.
- Update to version 41.beta:
+ Implemented much of the new design mockups.
+ Updated translations.
- Add pkgconfig(libhandy-1) BuildRequires: new dependency.
==== gnome-online-miners ====
- Port to use tracker 3:
+ Add gom-port-tracker3.patch, from upstream/fedora.
+ Following this, replace pkgconfig(tracker-sparql-2.0 with
pkgconfig(tracker-sparql-3.0) BuildRequires and drop
pkgconfig(tracker-miner-2.0) BuildRequires, as it is no longer
checked for nor needed.
+ Add autoconf-archive and libtool BuildRequires and pass
autoreconf, as the above patch touches the buildsystem.
==== gnome-remote-desktop ====
Version update (40.2 -> 41.0)
- Update to version 41.0:
+ Updated translations.
- Set .changes to be filled via service file, since upstream fails
to provide a changelog/NEWS file.
==== gnome-settings-daemon ====
Version update (40.0.1 -> 41.0)
- Update to version 41.0:
+ USB protection: don't crash when screensaver service is
unavailable.
+ Power: Fix location of comments for translators.
+ Updated translations.
- Remove obsolete translation-update-upstream and
gnome-patch-translation support (jsc#SLE-21105).
- Update to version 41.rc:
+ Power:
- Enable power-saver profile when low on battery.
- Dim the screen quicker by default.
- Generalize laptop battery notifications.
- Refactor battery notifications for external devices.
+ Media-keys:
- Replace deprecated calls.
- Add one second delay between each rfkill event.
+ Housekeeping: Use GRefCount.
+ USB-protection:
- Authorize devices after screen has been locked.
- Improve debug output.
- Misc. fixes.
+ Xsettings: Add support for XFixes ClientDisconnectMode.
+ Updated translations.
- Add pkgconfig(xfixes) BuildRequires: new dependency.
==== gnome-shell ====
Version update (40.5 -> 41.0)
Subpackages: gnome-extensions gnome-shell-calendar
- Update to version 41.0:
+ Updated translations.
- Up mutter dependency.
- Update to version 41.rc.1:
+ Make tests optional.
+ Misc. bug fixes.
+ Updated translations.
- Update to version 41.rc:
+ Optimize rendering of fullscreen zoom.
+ Fix glitchy launch animations when leaving overview.
+ Show low priority notifications only in message list.
+ Support Soup 3 instead of 2.4.
+ Set log domain for extensions that use console.log().
+ Fix wrong separator position in dash.
+ Fix OSK not registering button presses on X11.
+ Fix work area getting messed up by hidden panels.
+ Fix IM candidate popover position.
+ Restrict callers of private D-Bus APIs.
+ Support committing preedit string on focus loss.
+ Misc. bug fixes and cleanups.
+ Updated translations.
- Update to version 41.beta:
+ Unbreak Xwayland apps when not using systemd in user session.
+ extension-tool: Always print location on successful creation.
+ Fix distributed man pages.
+ Immediately start app grid drags for non-touch devices.
+ Avoid unnecessary icon shadow changes.
+ Handle screencast failures more gracefully.
+ Use symbolic icons in looking glass toolbar.
+ Allow overriding super+number shortcuts in Settings.
+ Don't include hidden search results in keynav.
+ Use anaccelerated deltas in swipe tracker.
+ status/network: Do not disable on login screen.
+ Always take workarea into account when allocating workspaces.
+ location: Split out geoclue agent from indicator.
+ Add focus indication for switches.
+ Honor switch-user lockdown settings in unlock screen.
+ Fix glitch when dragging window preview in overview.
+ Lock down "Show Text" in password entries.
+ Add power mode selection to status menu.
+ workspace: Handle skip-taskbar changes.
+ status/network: Use WWan settings panel for GSM/LTE modems.
+ extensionUtils: Add gettext convenience helpers.
+ screenShield: Fix suspend inhibitor accounting.
+ Unify app context menus.
+ Use consistent terminology in window menu.
+ Fixed crashes.
+ Misc. bug fixes and cleanups.
+ Updated translations.
- Rebase gnome-shell-private-connection.patch.
==== gnome-shell-extensions ====
Version update (40.4 -> 41.0)
Subpackages: gnome-shell-classic gnome-shell-extensions-common
- Update to version 41.0:
+ No changes.
- Update to version 41.rc.1:
+ Fix pre-generating stylesheets in tarball.
- Changes from version 41.rc:
+ window-list: Adapt to overview-on-startup.
+ apps-menu: Use a custom 'toggle-menu' shortcut.
+ Misc. bug fixes and cleanups.
==== gnome-software ====
Version update (40.4 -> 41.0)
- Update to version 41.0:
+ Instead of showing all package-based apps as "potentially
unsafe", only use that language for 3rd party ones.
+ Fix a bug where the "Show more" button on an app details page
would flicker when the window is resized.
+ Fix a bug where Software sometimes shows an Uninstall button
after uninstalling something.
+ Add GNOME Circle apps to the featured carousel.
+ Fix a bug where Software would sometimes fail to execute an
install/remove operation for PackageKit software rather than
showing a PolicyKit password prompt.
+ Fix a bug where Software would fail to upgrade the distribution
via PackageKit.
+ Fix the hiding of rows on the Updates tab after they have been
updated.
+ Updated translations.
- Update to version 41.rc:
+ Tweaks to the context tiles and dialogs.
+ Fixes to the details page for non-desktop apps.
+ Re-add support for the add-ons categories.
+ Sort new and updated apps by release date on the category page.
+ Updated translations.
- Update to version 41.beta:
+ Many parts of the user interface reworked.
+ Fix when the 'Launch' button is shown after an application
install.
+ Fix appstream:// URL handling.
+ Fix application freeze on Flatpak application
install/remove/update.
+ Disable automatic update downloads when in power saver mode.
+ Updated translations.
- Update to version 41.alpha:
+ Many parts of the user interface reworked.
+ Improve error reporting from flatpak when low on disk space.
+ Fix issues with updating the UI when uninstalling apps with
add-ons.
+ Don?t keep rpm-ostreed alive forever.
+ Prevent polkit checks showing up for background operations.
+ Disallow submitting reviews for an app you haven?t installed.
+ Show download size in the Updates page.
+ Notify when restart is needed when uninstalling an app.
+ Fix some issues with searches not running.
+ Allow non-integer average star ratings for apps.
+ Reduce number of categories in the UI.
+ Improve ?pending updates? notifications.
+ Refine presentation of download and installed size on details
page.
+ Remove left over gnome-online-account dependencies.
+ Updated translations.
- Drop pkgconfig(goa-1.0) BuildRequires: no longer needed.
- Drop gnome-software-no-static-lib.patch: Fixed upstream.
==== gnome-system-monitor ====
Version update (40.1 -> 41.0)
- Update to version 41.0:
+ Updated translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Update to version 41.rc:
+ Removed leftover colors
+ Y axis and CPU percentage labels marked as translatable
+ Fix crash when changing the number of points
+ meson checks for itstool
+ Updated translations.
==== gnome-terminal ====
Version update (3.40.3 -> 3.42.0)
Subpackages: gnome-shell-search-provider-gnome-terminal nautilus-extension-terminal
- Update to version 3.42.0:
+ metainfo: Remove XML namespaces
+ window: Add close button to info bar
+ Revert "screen: Use clean env when creating new tab"
+ Updated translations.
- Changes from version 3.41.90:
+ app: Remove stray semicolon
+ metainfo: Add keyboard/pointer recommends
+ client: Add more env vars not to forward
+ Updated translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Update to version 3.41.0:
+ Port to meson build system.
+ nautilus: Fix extension library name.
+ settings: Fix crash when loading the reference schema source
fails.
+ Updated translations.
- Add meson and gcc-c++ BuildRequires: new dependencies.
- Replace configure/make/make_install macros with
meson/meson_build/meson_install.
==== gnome-user-docs ====
Version update (40.5 -> 41.0)
- Update to version 41.0:
+ Added docs for emoji picker.
+ Updated settings docs.
+ Added Ethernet diagram.
+ Updated translations.
- Update to version 41.rc:
+ Terminology updates for tablets and styluses.
+ Updated to Files documentation.
+ Updated translations.
==== gnome-weather ====
Version update (40.1 -> 41.0)
Subpackages: gnome-shell-search-provider-gnome-weather
- Update to version 41.0:
+ Updated translations.
==== gobject-introspection ====
Version update (1.68.0 -> 1.70.0)
Subpackages: girepository-1_0 libgirepository-1_0-1
- Update to version 1.70.0:
+ Update the GIR data for GLib, GObject, and GIO.
- Update to version 1.69.0:
+ Fix build when gobject-introspection is a subproject,
+ Add more float types,
+ Make test suite work with cross-related options,
+ Fix several leaks found by Coverity,
+ Fix enum member,
+ Add g-ir-doc-tool man page,
+ Export warnlib sources as variables,
+ Update the GLib annotations,
+ Add "final" class attribute,
+ Add option to make .gir files installation paths configurable,
+ Handle constructors with mismatched GTypes,
+ Add property accessors annotations,
==== gsettings-desktop-schemas ====
Version update (40.0 -> 41.0)
- Update to version 41.0:
+ Updated translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Update to version 41.rc:
+ Stop setting legacy GNOME 2 shortcut by default.
+ Updated translations.
- Update to version 41.alpha:
+ Add lockdown setting for revealing passwords.
+ Updated translations.
==== gssdp ====
Version update (1.2.3 -> 1.4.0.1)
- Pass -Dsniffer=false to meson: Disable build of sniffer. Allows
to drop pkgconfig(gtk4) BuildRequires and helps eliminate a build
cycle.
- Allow for easy toggling using bcond_with sniffer.
- Update to version 1.4.0.1:
+ Fix building the sniffer when built as subproject
+ Do not build docs by default
- Changes from version 1.3.1:
+ Implement MAC lookup on Windows
+ Implement interface index lookup on Windows
+ Fix distributing docs in the tarball
+ Build docs by default
- Changes from version 1.3.0:
+ Sniffer: Various deprecated function clean-up
+ Sniffer: Port to GTK4
+ Docs: Ported to gi-docgen
+ Docs: Clean-up and other improvements
+ Client: Minor dead code clean-up
+ Build: Make GSSDP usable as a subproject
+ All: Fixes from scan-build
+ All: Minor introspection fixes
- Replace pkgconfig(gtl+-3.0) BuildRequires with pkgconfig(gtk4):
Follow upstreams port to GTK 4.
- Enable test suite: enable meson_test in check section.
==== gtk4 ====
Subpackages: gtk4-schema libgtk-4-1 typelib-1_0-Gtk-4_0
- Add explicit pkgconfig(gstreamer-gl-1.0) BuildRequires: not new,
but tested by meson, so let's be explicit about the dependency.
==== gtkmm3 ====
Version update (3.24.4 -> 3.24.5)
- Update to version 3.24.5:
+ Gtk: TreeValueProxy: Mark the copy assignment operator as
deleted.
+ Build:
- Meson build: Use relative paths to untracked/.
- [gdk|gtk]mmconfig.h.*: Don't dllimport on MinGW.
- Meson build: Make it possible to use gtkmm as a subproject.
- Meson build: No implicit_include_directories.
- MSVC build: Gtk::TreeModelColumnRecord: Export class
selectively.
==== gtksourceview4 ====
Version update (4.8.1 -> 4.8.2)
Subpackages: libgtksourceview-4-0 typelib-1_0-GtkSource-4
- Update to version 4.8.2:
+ New syntax highlighting definition file for: STAR
+ Improved syntax highlighting definition file for: YARA, LLVM
+ GtkSourceMap now avoids animation while scrolling in response
to clicks. This should help prevent some hysteresis.
+ GObject Introspection fixes
+ Fixed decrement of negative numbers in GtkSourceView
+ Improvements to style schemes: kate
+ Fixed build-time macros for version checking in some scenarios
+ Updated translations.
- Drop d1ed58b2ab82bd5be55881088fc17ff1527511db.patch: fixed
upstream.
==== gupnp ====
Version update (1.2.7 -> 1.4.0)
- Update to version 1.4.0:
+ Fix fallback option for GSSDP dependency.
+ Linux CM: Fix address family filtering.
+ Linux CM: Fix a typo.
- Changes from version 1.3.1:
+ Add ContextFilter class, deprecate WhiteList.
+ Fix several reference leaks.
+ Fix broken boot-id logic.
Changes from version 1.3.0:
+ Service: name Tasks.
+ Doc: Some grammaer fixes.
+ Dead and deprecated code clean-up.
+ Move tests that are actually examples into examples.
+ Move tests from gtest to test.
+ Doc: General clean-up.
+ Fix some introspection annotations.
+ Build: Make gupnp usable as a subproject (more or less).
+ Make it possible to re-use a ServiceProxyAction.
+ Service: Validate "Host" header for GENA actions.
==== gupnp-av ====
Version update (0.12.11 -> 0.14.0)
Subpackages: libgupnp-av-1_0-2
- Update to version 0.14.0:
+ Re-tag of 0.13.1 as stable version, no other changes
- Changes from version 0.13.1:
+ Make Feature derivable again.
+ Fix unsetting subtitleFileType.
- Changes from version 0.13.0:
+ Fix stripping @refID.
+ Port to modern GObject.
+ Drop autotools.
+ Allow to be used as a subproject.
+ Remove hand-written ref-counting, use RcBox/AtomicRcBox
instead.
+ Obsolete code removal.
- Switch to meson build system, following upstream:
+ Add meson BuildRequires.
+ Replace configure/make/make_install with respective
meson/meson_build/meson_install macros.
- Enable test suite: add %meson_test call to %check section.
==== gupnp-dlna ====
Version update (0.10.5 -> 0.12.0)
- Update to version 0.12.0:
+ Re-tag of 0.11 as 0.12. No functional change
- Changes from version 0.11.0:
+ Drop GStreamer 0.10 back-end
+ Drop old compatibility code
+ Add meson support
+ Port to more modern GObject
- Switch to meson build system:
+ Add meson BuildRequires.
+ Replace configure/make/make_install macros with respective
meson/meson_build/meson_install.
- Enable test suite: add meson_test to check section.
==== inkscape ====
Version update (1.1 -> 1.1.1)
Subpackages: inkscape-extensions-extra inkscape-extensions-gimp
- Update to 1.1.1:
* Pressure sensitivity should work again in Windows
* Stroke to path working on text again
* Startup time improved
* Fix various crashes
==== kmod ====
Subpackages: kmod-bash-completion libkmod2
- Enable ZSTD on 15.4 (jsc#SLE-21256).
==== libdazzle ====
Version update (3.40.0 -> 3.42.0)
Subpackages: libdazzle-1_0-0 typelib-1_0-libdazzle-1_0
- Add manual libdazzle = %{version} Provides to make the lang pack
auto installable.
- Update to version 3.42.0:
+ Panel fixes.
+ Allow DzlTaskCache to use NULL copy/free funcs.
+ Updated translations.
- Add lang sub-package now that there are translations.
==== libhandy ====
Version update (1.2.3 -> 1.4.0)
Subpackages: libhandy-1-0 typelib-1_0-Handy-1_0
- Update to version 1.4.0:
+ Updated translations.
- Update to version 1.3.90:
+ HdyAvatar: Fix giving it the .image style class when needed.
+ HdyCarousel:
- Add the allow-scroll-wheel property.
- Fix the child size allocation.
+ HdyPreferencesGroup: Add the use-markup property.
+ Deprecate HdySwipeGroup and HdyTitleBar.
+ Fix translations by setting the translation domain in UI files.
+ Updated translations.
- Move to regular tarballs: drop _service file.
==== libnss_nis ====
- Install into _libdir [bsc#1191069]
==== libpwquality ====
Subpackages: libpwquality1 pam_pwquality
- Use %_pam_moduledir instead of hardcoding %{_lib}/security
(boo#1191042).
==== librsvg ====
Version update (2.50.7 -> 2.52.0)
Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2 rsvg-thumbnailer typelib-1_0-Rsvg-2_0
- Disable testsuite run on ix86 and arm.
- Update to version 2.52.0:
+ The biggest user-visible change is that rsvg-convert has been
ported to Rust.
+ rsvg-convert is now aware of physical units, and fixes a bug
where PDFs were created at the wrong size.
+ Support for Accept-Language.
+ rsvg-convert's default DPI is now 96, to better match W3C
standards.
+ SVG2/CSS3 features:
- Transform property from SVG2; previously librsvg only
supported the transform attribute from SVG1.1, which has
different syntax.
- context-fill and context-stroke for <marker> and <use>
elements.
- markers now support orient="auto-start-reverse".
- paint-order for text elements.
- "auto" values for the width and height attributes of the
<image>, <rect>, and <svg> elements.
- All the <filter-function> types from the Filter Effects
Module Level 1 specification: blur(), brightness(),
contrast(), drop-shadow(), grayscale(), hue-rotate(),
invert(), opacity(), sepia(), saturate().
- The filter property now supports chains of uri() filters or
<filter-function> shortcuts.
- Support CSS selectors for attribute matching, like
rect[attr^="prefix"]
+ New APIs: See the HTML documentation for details.
- Drop -lang package: there are no translations available anymore.
==== libsoup2 ====
Version update (2.72.0 -> 2.74.0)
Subpackages: libsoup-2_4-1 typelib-1_0-Soup-2_4
- Add Provides: libsoup2 to the library, so that the lang package
is installable.
- Remove the left-over provides/obsoltes for libsoup (which is now
libsoup 3).
- Rename source package to libsoup2, as a compatibility package
while the world moves to libsoup3 (with HTTP/2 support).
- Update to version 2.74.0:
+ IMPORTANT: Enable ssl-use-system-ca-file by default on
deprecated Sync and Async sessions.
+ Fix including headers in C++ projects.
+ Fix attempting to resolve relative paths with data URIs.
+ Support Content-Disposition headers without a disposition-type.
+ Fix building VAPI bindings with latest Vala.
+ Fix sending a Content-Length header in a response with status
code of 1xx or 204.
+ Updated translations.
- Drop libsoup-fix-SSL-test.patch: fixed upstream.
==== malcontent ====
Subpackages: libmalcontent-0-0 libmalcontent-ui-0-0 malcontent-control typelib-1_0-Malcontent-0
- Use %_pam_moduledir instead of harcoding %{_lib}/security
(boo#1191037).
==== mutter ====
Version update (40.5 -> 41.0)
- Update to version 41.0:
+ Avoid race in wl_seat capabilities.
+ Expose option groups/entries to introspection.
+ Updated translations.
- Add pkgconfig(xwayland) and drop xorg-x11-server-wayland
BuildRequires: use standalone xwayland during build and runtime.
- Add explicit gnome-settings-daemon Requires and pass initfd=auto
to meson now that we are using the new standalone xwayland.
- Update to version 41.rc:
+ Add clutter_stage_paint_to_content().
+ Add meta_cursor_tracker_get_scale().
+ wayland: Make each wl_output correspond to one monitor.
+ Expose 'inactive-since' timestamp to uresourced.
+ Pass dirty rects to secondary GPU.
+ Support commiting preedit string on focus loss.
+ Improve auto-rotation support.
+ Add meta_window_actor_paint_to_content().
+ Fixed crashes.
+ Misc. bug fixes and cleanups.
+ Updated translations.
- Add xvfb-run BuildRequires: new dependency for the test suite.
- Update to version 41.beta:
+ Manage idle monitors via MetaIdleManager.
+ Fix VKMS detection.
+ Fix swipe cancellation.
+ Fix mapping tablet to monitor.
+ Fix area screencasts when window is unredirected.
+ Don't require a newly attached buffer to apply state.
+ Close unused mode setting and rendering devices.
+ Only support super+scroll on wayland.
+ Implement the xdg-activation protocol.
+ Reduce input latency by computing max render time
heuristically.
+ Apply dithering to dispatch time when needed.
+ x11: Compute monitor scale per output.
+ Shrink and optimize the rounded-background-clip shader.
+ remote-desktop: Handle non-responding selection owners .
+ Improve sysprof support.
+ Allow clients to delegate titlebar gestures to the compositor.
+ Fix upside-down Xshape surface with EGLstream.
+ Fix 'kms-modifiers' experimental setting.
+ Make default focus window on each workspace appear focused.
+ Plugged memory leaks.
+ Fixed crashes crash.
+ Misc. bug fixes and cleanups.
+ Updated translations.
==== nautilus ====
Version update (40.2 -> 41.0)
Subpackages: gnome-shell-search-provider-nautilus libnautilus-extension1
- Update to version 41.0:
+ Updated translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Update to version 41.rc:
+ Disable background "Properties" while searching
+ Don't duplicate set wallpaper when not using portal
+ Updated translations.
- Updtae to version 41.beta:
+ Fix comma placement in the floating status bar.
+ Use standard::edit-name attribute where appropriate.
+ Bring "Open with..." options together in context menu.
+ Fix "Compress..." acting on file that was not the selected one.
+ Redesign "Compress..." dialog.
+ Provide creation of password-protected ZIP archives.
+ Fix search by date not working with Tracker engine'
+ Add link to Privacy Settings from Trash'
+ Indicate whether trash automatic emptying is enabled'
+ Updated translations.
- Update to version 41.alpha:
+ Replace deprecated gexiv2 symbols.
+ Make NautilusWindowSlot non-derivable.
+ Prevent closing popover when "Show Hidden Files" is toggled.
+ Hand preview updating over to FilesView.
+ Provide source .svg icon.
==== orca ====
Version update (40.0 -> 41.0)
- Update to version 41.0:
+ General: Fix compatibility with Python 3.10
+ Updated translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Update to version 41.rc:
+ Web:
- Fix several issues related to empty but "focusable" ARIA
tooltips
- Identify and work around (when possible) mismatched text and
hypertext implementations that can lead to looping inside
content
+ Updated translations.
- Update to version 41.beta:
+ General: Use new AT-SPI device API for keyboard monitoring when
available.
+ LibreOffice:
- Fix bug causing Orca to become silent due to setting
locusOfFocus to a defunct object.
- Work around missing focus event for Calc spreadsheet which
causes Orca to ignore subsequent events.
+ Speech: Do not set voice name when it is the default.
- Update to version 41.alpha:
+ General:
- Improve handling of accessible-event floods from apps.
- Fix bug in announcing selected items in icon views.
+ Web:
- Improve recovery from destruction of current object.
- Improve performance in response to caret-moved events.
- Fix crash resulting from subtree becoming hidden.
- Fix bug in toolbar browse-mode navigation.
- Fix bug causing a live region event to be ignored.
- Fix bug causing us to incorrectly switch to browse mode in
VSCode.
- Ensure we present caret-moved events after Alt+Tabbing into
web app.
- Don't repeat posinset and setsize for multi-line list items.
- Don't announce unselected state of grid cells/rows in browse
mode.
- Don't announce row and column count when they are both 0.
- Fix braille presentation of grid cell in browse mode.
- Improve browse-mode navigation of trees and tree tables.
- Eliminate some chattiness entering elements with a caption.
- Prevent double-presentation of description for alerts.
+ Email:
- Fix regression presenting plain-text messages in Thunderbird.
- Work around missing events from Evolution Add Accounts.
+ LibreOffice:
- Work around missing state-changed:focused event that caused
caret-moved events in documents to be ignored.
+ Speech:
- Ensure we enable/disable speech based on app-specific
settings.
- punctuation: Spell left/right_double_angle at level "most".
- Do not add mark within numbers (some synthesizers present
numbers incorrectly otherwise).
- Do not set language if it is empty (breaks output in older
versions of speech-dispatcher).
+ Mouse Review:
- Check if we have Wnck in activate() so we don't spew errors.
- Gracefully handle lack of pointer.
==== pangomm1_4 ====
Version update (2.46.0 -> 2.46.1)
- Add pangomm1_4-docs-without-timestamp.patch: do not add
timestampt to generated doc files.
- Update to version 2.46.1:
+ Meson build:
- Make it possible to use pangomm as a subproject.
- No implicit_include_directories.
- Use relative paths to untracked/.
+ pangommconfig.h.*: Don't dllimport on MinGW.
==== polari ====
Version update (40.1 -> 41.0)
- Update to version 41.0:
+ Update screenshots and metainfo.
+ Refresh application icon.
+ Updated translations.
- Update to version 41.rc:
+ Support Soup 3.
+ Replace custom logging with console module.
+ Fix pasting text files.
+ Put status message on the left.
+ Improve chat log appearance.
+ Port to GTK4.
+ Updated translations.
- Drop pkgconfig(gtk+-3.0) BuildRequires: no longer needed after
port to GTK4. NOTE: gtk4 is not needed during build.
==== python-atspi ====
- Add pyatspi-test-fixes.patch: fix tests on s390x (bsc#1190051).
==== python-cramjam ====
- Replace rust-packaging with cargo-packaging
==== python-gobject ====
Version update (3.40.1 -> 3.42.0)
Subpackages: python38-gobject python38-gobject-Gdk python38-gobject-cairo
- Update to version 3.42.0:
+ meson: Bump minimum meson_version to 0.47.0.
+ Expose GObject.Object.run_dispose().
+ docs: document Gtk.Template.
+ dev: Add poetry support.
+ meson: use main branch for glib subproject.
+ Fix some small memory leaks.
==== python-zope.event ====
- %check: do not use setup.py test
==== rubygem-bundler ====
Version update (2.2.24 -> 2.2.27)
- update to version 2.2.27
see installed CHANGELOG.md
[#]# Enhancements:
- Optimize some requires #4887
- Correctly redact credentials when using x-oauth-basic #4866
[#]# Bug fixes:
- Add missing key branches: to template for GitHub Actions #4883
- Fix bundle plugin install detection of already installed plugins #4869
- Make plugin installation idempotent #4864
- Fix bundle check showing duplicated gems when multiple platforms are locked #4854
- Fix bundle check incorrectly considering cached gems #4853
[#] 2.2.26 (August 17, 2021)
[#]# Enhancements:
- Remove RUBYGEMS_GEMDEPS warning #4827
- Better defaults for GitHub Actions template generated by bundle gem #4619
- Make bundle exec keep file descriptors by default #4812
- Exclude gemspec file itself from file list of gems generated by bundle gem #4650
- Fix a couple small typos in deprecation / error messages #4806
- Make script generated by bundle install --standalone resilient to
moving the application to a differently nested folder when path
sources are used #4792
- Exclude CI files and issue templates from file list of gems
generated by bundle gem #4033
[#]# Bug fixes:
- Respect BUNDLE_USER_HOME env when choosing config location #4828
- Fix bundle gem on path with spaces #4816
- Fix bundler hitting the network in some cases where not allowed #4805
[#] 2.2.25 (July 30, 2021)
[#]# Deprecations:
- Deprecate Gemfile without an explicit global source #4779
- Deprecate bundle cache --path #4496
[#]# Enhancements:
- Give better errors when materialization fails #4788
- Lazily load shellwords library #4786
- Show original error and backtrace directly on bundle install errors
instead of a more brittle gem install hint #4778
- Remove LoadError message in regards to requiring a relative file #4772
[#]# Bug fixes:
- Fix BUNDLE_USER_CONFIG no longer respected as config location #4797
- Fix --standalone installation of default gems #4782
- Fix --quiet flag not printing warnings #4781
- Fix bundler binstub version selection #4775
- Fix interrupt handling in Bundler workers #4767
- allow ruby 2.7 on newer openSUSE versions
==== seahorse ====
Version update (40.0 -> 41.0)
Subpackages: gnome-shell-search-provider-seahorse
- Update to version 41.0:
+ appdata: State hardware support.
+ Updated translations.
- Update Supplements syntax in sub-package to current standard.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Update to version 41.beta:
+ pgp:
- Redesign of the PGP key properties dialog
- Also monitor .kbx in gpghomedir, making sure we get notified
of new keys
- Start adding (basic) unit tests
- Make pgp key id equality accept more values
- Make HKP keyid check more robust
- Fix expiration date for certain keys
- Allow building with GnuPG-2.3.x
- Fix segfault when built with LDAP disabled
+ ui:
- Follow GNOME HIG more closely [!178]
- Datepicker now only pops down on double click
+ gkr:
- Fix warnings for items with NULL labels
- Don't show "Details" if no attributes are shown
+ appdata: Updated screenshot
+ Update README.md
+ Updated translations.
==== seahorse-nautilus ====
- Add 2.3 to the list of accepted GPG versions.
==== shared-mime-info ====
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Do not ghost own %{_datadir}/mime/[a-ms-vxX]*: as those
files/directories do not exist during build, RPM can't expand the
glob and adds it literally to the file list, not having any
effect in the end. A cleanup of the directory structure would not
work anyway, as there are also files generated inside.
==== sushi ====
Version update (3.38.1 -> 41.0)
- Update to version 41.0:
+ Drop libmusicbrainz dependency (use libsoup directly).
+ Account for scale-factor when estimating window size.
+ Build against webkit2gtk-4.1
+ Disable webkit sandboxing.
+ Updated translations.
- Drop pkgconfig(libmusicbrainz5) BuildRequires: No longer needed.
- Replace pkgconfig(webkit2gtk-4.0) with pkgconfig(webkit2gtk-4.1)
BuildRequires following upstream changes.
==== swell-foop ====
Version update (40.1 -> 41.0.1)
- Update to version 41.0.1:
+ Fixed versioning in appdata.
- Changes from version 41.0:
+ Updated translations.
- Update to version 41.alpha:
+ Fixed swell foop not starting from launcher.
+ Updated icon.
+ Updated translations.
==== tigervnc ====
Subpackages: libXvnc1 xorg-x11-Xvnc xorg-x11-Xvnc-module
- contains fix for crash in free() when using "-f" option of
vncpasswd command (bsc#1171519)
==== tracker ====
Version update (3.1.2 -> 3.2.0)
Subpackages: libtracker-sparql-3_0-0 tracker-data-files typelib-1_0-Tracker-3_0
- Update to version 3.2.0:
+ Fuller docs, with updated examples
+ Improved developer experience when designing ontologies, better
handling of inconsistent ontologies, and more accurate error
reporting.
+ Added new GDateTime helper API to resources, cursors and
statements.
+ Several fixes to build and run on MacOS, with a brew recipe now
available.
+ Added support for libsoup 3.x.
+ Fresher and more complete documentation, built with hotdoc.
+ Many other code fixes and performance improvements.
+ Updated translations.
- Add pkgconfig(libsoup-3.0) BuildRequires, following upstreams
changes to allow build against multiple versions of libsoup.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Update to version 3.2.0.rc:
+ Dropped bogus files from pre-generated documentation.
- Update to version 3.2.0.beta:
+ Improved error reporting when parsing ontologies.
+ Improvements to database rollback on ontology errors.
+ Ontology parsing crash fixes.
+ Make soup 2.x/3.x chosen at runtime.
+ Disable GVFS in functional tests.
+ Check accessible graphs when looking up resource URIs/IDs.
+ Port documentation to hotdoc.
+ Avoid "UPDATE ... FROM ..." SQL syntax only present in
recent SQLite versions.
+ Multiple build, ci, website and maintenance improvements.
+ Updated translations.
- Drop gtk-doc BuildRequires with hotdoc: No longer needed, as
upstream switched to hotdoc and we ship the upstream pre-built
documentation.
- Update to version 3.2.0.alpha.1:
+ Add support for libsoup 3.x.
+ Documentation fixes and updates.
+ Handle arbitrary order of SERVICE and regular graph patterns.
+ Added new GDateTime helper API to resources, cursors and
statements.
+ Implement missing TrackerSparqlConnection methods in bus
connections.
+ Many code cleanups and improvements.
+ Updated translatiosn.
- Add python3-gobject BuildRequires: new dependency.
==== tracker-miners ====
Version update (3.1.3 -> 3.2.0)
Subpackages: tracker-miner-files
- Update to version 3.2.0:
+ Highlighted changes since 3.1:
- File creation time is now part of the stored metadata
- Show additional information in "tracker3 info"
+ Updated translations.
- Update to version 3.2.0.rc:
+ Updated translations.
==== upower ====
Version update (0.99.11 -> 0.99.13)
Subpackages: libupower-glib3 typelib-1_0-UpowerGlib-1_0
- Update to version 0.99.13:
+ Tweak default percentage levels to better match other operating
systems.
+ Support large energy rates seen in some modern laptops.
+ Fix touchpads showing up as mice.
+ Fix composite battery state when multiple batteries are used
and one isn't drawing any power.
+ Make the icon and warning properties respect the "low battery
level" configuration option.
+ Stop the device being suspended during the 20-second "shutdown"
grace period.
- Changes from version 0.99.12:
+ Add a raft of new device types.
+ Add support for iPhone XR, XS and newer models.
+ Work-around incorrect battery percentage reported by MacBooks.
+ Identify keyboard/pointing device combos as keyboards.
+ Fix small memory leak in Bluetooth backend.
+ Fix warning in Bluetooth backend.
+ Set update time in Bluetooth backend.
+ Remove support for obsolete CSR devices.
- Drop upower-build-Use-a-newer-libplist-if-available.patch: fixed
upstream.
==== vinagre ====
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
==== vte ====
Version update (0.64.2 -> 0.66.0)
- Add vte-silence-COMMAND_PROMPT.patch: Silence warning when
opening terminal about PROMPT_COMMAND being an unknown command.
- Update to version 0.66.0:
+ emulation: Fix xterm window size request response.
+ widget: Adjust preedit position to GtkEntry.
+ vte.sh: Use PROMPT_COMMAND as an array when possible.
+ fonts: More metrics sanity checks.
+ Update translations.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Update to version 0.65.91:
+ Port to GTK 4.
+ all: Remove SIXEL support from stable branch
+ app: Add debug option to track clipboard targets
+ app: Add option to use a GtkScrolledWindow
+ lib: Fix switching encodings
+ parser: Add new OSC command from xterm 367
+ parser: Recognise more commands
+ sixel: Fix pixel aspect calculation
+ sixel: Remove ununused tracking of palette modification
+ sixel: Reset repeat counter when receiving the next command
+ widget: Add API to make adjustment values pixels
+ Updated translations.
==== webkit2gtk3-soup2 ====
Version update (2.32.4 -> 2.34.0)
Subpackages: libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 typelib-1_0-JavaScriptCore-4_0 typelib-1_0-WebKit2-4_0 webkit2gtk-4_0-injected-bundles
- Add libjavascriptcoregtk-4_0-18 and llibwebkit2gtk-4_0-37 to
baselibs.conf: provide those libraries as multilib version.
- Rename -lang packages to WebKit2GTK-%{_apiver}, making the
translations between the three flavors co-exist.
- Update to version 2.34.0:
+ Fix another regression in JavaScriptCore on 32bit systems.
- Update to version 2.33.91:
+ Use the right display refresh monitor for animations in
accelerated compositng mode.
+ Fix several issues in JavaScriptCore on 32bit systems.
+ Prefer python3 over python2 in CMake.
- Update to version 2.33.90:
+ Show TLS protocol version and ciphersuite name in the
inspector when building with libsoup3.
+ Add multi-track support to media backend.
+ Avoid strong alias computations in font fallback code.
+ Fix deadlock tearing down pipeline when using fallback sink.
+ Fix the build with gtk-doc enabled.
+ Fix several crashes and rendering issues.
- Add fix-warnings.patch: silence return-type warnings.
- Add a 3rd flavor: gtk3 with libsoup2 (which retains compatibility
to the olderversions, identified as API version 4.0).
- Add _multibuild file and enable build of webkit2gtk4.
- Update to version 2.33.3:
+ Add support for display capture.
+ Add new API to access/modify capture devices states.
+ Add new API to configure the memory pressure handler.
+ Add support for client side certifiates authentication.
+ Add support color-schemes CSS property.
+ Add support for dark scrollbars.
+ Keep GtkSettings used by web processes in sync with the
settings set in the UI process.
+ Add support for drawing the scrollbars corner.
+ Allow to opt-out of GL rendering at runtime for media player.
+ Add support for A420 compositing in media player.
+ Improve pinch to zoom gesture in accerlerated compositing mode.
+ Fix cookies configuration after a network process crash.
+ Fix touchscreen navigation swipe when the page scrolls
horizontally.
+ Fix rendering of elliptic radial gradients.
+ Fix several crashes and rendering issues.
+ Updated translations.
- Drop fix-lto.patch: fixed upstream.
- Add pkgconfig(lcms2) BuildRequires: new dependency.
- Replace pkgconfig(libsoup-2.4) BuildRequires with
pkgconfig(libsoup-3.0): Follow upstreams port to Libsoup 3.0.
==== xdg-desktop-portal-gtk ====
Version update (1.8.0 -> 1.10.0)
- Pass --disable-silent-rules, --disable-appchooser,
- -disable-background, --disable-screencast, --disable-screenshot,
- -disable-settings, and --disable-wallpaper to configure, make
use of xdg-desktop-portal-gnome, and more importantly, remove all
gnome-dependencies from this package.
- Following the above, drop pkgconfig(gio-2.0),
pkgconfig(gio-unix-2.0) and pkgconfig(gnome-desktop-3.0)
BuildRequires.
- Add explicit pkgconfig(fontconfig) BuildRequires.
- Add systemd_user_post and systemd_user_preun macros to post/preun
sections.
- Update to version 1.10.0:
+ filechooser: Fix a focus issue
+ inhibit: Autostart org.gnome.ScreenSaver
+ screencast: Force window icon size
+ Make portal backends with GNOME dependencies optional and
disable them by default. Use xdg-desktop-portal-gnome, or use
- -enable-wallpaper to build with the wallpaper backend
- -enable-screenshot to build with the screenshot backend
- -enable-screencast to build with screencast/remoting backends
- -enable-background to build with the background backend
- -enable-settings to build with the settings backend
- -enable-appchooser to build with the appchooser backend
+ Updated translations.
==== yast2-network ====
Version update (4.4.25 -> 4.4.26)
- Do not crash when the interfaces table contains a not configured
one (bnc#1190645, bsc#1190915)
- Fix the shown description using the interface friendly name when
it is empty (bsc#1190933)
- 4.4.26
==== yast2-nfs-client ====
Version update (4.4.0 -> 4.4.1)
- Support systemd mount options in fstab (bsc#1187781)
- 4.4.1
==== yelp ====
Version update (40.3 -> 41.1)
Subpackages: libyelp0
- Update to version 41.1:
+ Fixed validation issues in appdata file.
+ Updated yelp-xsl dependency.
- Replace pkgconfig(webkit2gtk-4.0) and
pkgconfig(webkit2gtk-web-extension-4.0) with
pkgconfig(webkit2gtk-4.1) and
pkgconfig(webkit2gtk-web-extension-4.1) BuildRequires and no
longer pass --with-webkit2gtk-4-0, we now have the new symbols
available.
- Update to version 41.0:
+ No changes.
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Update to version 41.beta2:
+ Fixed regression when opening document by file path.
+ Added content rating and release info to appdata file.
- Update to version 41.beta:
+ Revamped a lot of color code to avoid deprecated Gtk API.
+ Search results and 'All Help' now use current styling.
+ Fixed aliasing on the icon.
+ Build against webkit2gtk-4.1 by default.
+ Removed calls to deprecated Soup API.
+ Updated translations.
- Remporarily pass --with-webkit2gtk-4-0 to configure: we do not
yet have webkitgtk 4.1.
==== yelp-xsl ====
Version update (40.2 -> 41.0)
- Update to version 41.0:
+ No changes.
- Update to version 41.beta:
+ Loosen CSS match for title/desc in linkdiv.
+ Use better target contrasts for white-on-black.
==== zenity ====
Version update (3.32.0 -> 3.41.0)
- Remove obsolete translation-update-upstream support
(jsc#SLE-21105).
- Update to version 3.41.0:
+ Port to meson.
+ Code cleanups.
+ Updated translations.
- Add meson BuildRequires and replace configure/make/make_install
with meson/meson_build/meson_install macros.
- Drop zenity-Fix-segfault-on-multiple-lists.patch: fixed
upstream.
1
0