Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=3&version=Tumbleweed&build=20241126 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: gnome-control-center (47.1.1+9 -> 47.2) gnome-maps (47.1 -> 47.2) gnome-music (47.0 -> 47.1) gnome-online-accounts (3.52.1 -> 3.52.2) gnome-terminal (3.54.1 -> 3.54.2) gnome-user-share (47.0+0 -> 47.2) gtk4 (4.16.6 -> 4.16.7) kdump (2.0.11 -> 2.0.12) libadwaita (1.6.1 -> 1.6.2) libnetfilter_conntrack libnvme libsoup (3.6.0 -> 3.6.1) orca (47.1 -> 47.2) python-numpy python-tornado6 (6.4.1 -> 6.4.2) tree-sitter (0.24.3 -> 0.24.4) vte (0.78.1 -> 0.78.2) xdm xen (4.19.0_04 -> 4.19.0_06) === Details === ==== gnome-control-center ==== Version update (47.1.1+9 -> 47.2) Subpackages: gnome-control-center-color gnome-control-center-goa gnome-control-center-user-faces gnome-control-center-users - Update to version 47.2: + Accessibility: Remove "screen" labels that take too much space + Appearance: Fix accidental reset of accent colors config + Apps: Fix some memory leaks + Color: Ensure profiles are connected before operating on them + Mobile Networks: Fix alignment of status pages + Mouse: - Fix illustration assets requiring gstreamer-plugins-bad - Update illustration assets + Printers: Remove wrong tooltip in the "Add Printer" button + Updated translations. ==== gnome-maps ==== Version update (47.1 -> 47.2) - Update to version 47.2: + Fix a bug where the zoom level was reset to 0 when opening a geo: URI not specifying an explicit zoom level. + Updated translatations. ==== gnome-music ==== Version update (47.0 -> 47.1) - Update to version 47.1: + Bugs fixed: - Do not open multiple preferences windows using keyboard shortcut. - Show MPRIS albumart on delayed retrieval. ==== gnome-online-accounts ==== Version update (3.52.1 -> 3.52.2) Subpackages: libgoa-1_0-0 libgoa-backend-1_0-2 - Update to version 3.52.2: + Bugs fixed: - goadavclient.c: add WebDAV default candidate to test - goafedoraprovider: fix use-after-free + Updated translations. ==== gnome-terminal ==== Version update (3.54.1 -> 3.54.2) Subpackages: gnome-shell-search-provider-gnome-terminal nautilus-extension-terminal - Update to version 3.54.2: + Updated translations. ==== gnome-user-share ==== Version update (47.0+0 -> 47.2) - Adjust _service definition: upstream has changed their tag format to be a simple VERSION tag. - Update to version 47.2: + Fix a compiling issue for non-gnu C toolchain. ==== gtk4 ==== Version update (4.16.6 -> 4.16.7) Subpackages: gtk4-schema gtk4-tools libgtk-4-1 typelib-1_0-Gtk-4_0 - Update to version 4.16.7: + Text: Reduce the size of error underlines. + Accessibility: - Fix a wrong return value type. - Fix an invalid free call. ==== kdump ==== Version update (2.0.11 -> 2.0.12) - upgrade to version 2.0.12 * fadump: pass additional parameters for capture kernel (jsc#PED-9889) ==== libadwaita ==== Version update (1.6.1 -> 1.6.2) Subpackages: libadwaita-1-0 typelib-1_0-Adw-1 - Update to version 1.6.2: + AdwDialog: Fix accessible role critical when using window-backed dialogs. + AdwHeaderBar: Fix a typo in docs. + AdwMessageDialog: Fix a typo in adw_message_dialog_response() deprecation message. + AdwStyleManager: Fix initial color scheme value on Windows. + Updated translations. ==== libnetfilter_conntrack ==== - Specfile modernization ==== libnvme ==== Subpackages: libnvme-mi1 libnvme1 - Fix tests on s390 * add 0002-test-mock-pass-thru-unknown-ioctls.patch ==== libsoup ==== Version update (3.6.0 -> 3.6.1) Subpackages: libsoup-3_0-0 typelib-1_0-Soup-3_0 - Update to version 3.6.1: + Fix `soup_uri_copy()` reading port as a long instead of an int + Fix possible NULL deref in `soup_uri_decode_data_uri()` + Fix possible overflow in `SoupContentSniffer` + Fix assertion in `soup_uri_decode_data_uri()` on URLs with a path starting with `//` + headers: Be more robust against invalid input when parsing params + websocket: Fix possibility of being stuck in a read loop - Drop patches fixed upstream: + 6adc0e3e.patch + 29b96fab.patch + a35222dd.patch + 4c9e75c6.patch ==== orca ==== Version update (47.1 -> 47.2) - Update to version 47.2: + Web: - Report "required" and "invalid" state on password input. - Present ARIA alerts as UI; not a text container. - Fix regression in presentation of table cell content during word nav. + LibreOffice: Ensure we announce Calc sheet changes. + General: - Multiple "chattiness" fixes. - Treat GTK4 groupings as panels. - Fix performance issue determining posinset and setsize in giant sets. - Try to filter out redundant description-change events. + Updated translations. ==== python-numpy ==== - Add update-meson-1_5_2.patch (gh#numpy/numpy#27531) - Skip failing test test_api_importable ==== python-tornado6 ==== Version update (6.4.1 -> 6.4.2) - Update to 6.4.2: + Security Improvements: * Parsing of the cookie header is now much more efficient. The older algorithm sometimes had quadratic performance which allowed for a denial-of-service attack in which the server would spend excessive CPU time parsing cookies and block the event loop. (CVE-2024-52804, bsc#1233668) ==== tree-sitter ==== Version update (0.24.3 -> 0.24.4) - update to 0.24.4: * loader: Add language_for_configuration * loader: Add error message when a tree-sitter.json file is invalid * node: Support single-file executables via bun build --compile * node: Update bindings when necessary * Return LanguageRef in Parser::language * bindings: Update CMakeLists.txt file * cli: Pass all fields to tree-sitter.json in init * cli: Use contains over is in warning * cmake: Use current source dir for EXISTS check * generate: Do not set the unit reduction symbol if it's in the extras array * init: Use current path if unspecified * init: Use camel name from config in missing spots * lib: Simplify edge cases with zero-width tokens * lib: Correctly fetch the node name in query errors * loader: Don't print warnings if the file is not found * loader: Improve language lookup speed * bindings: Rename cmake test target * Memory errors in wasm_store ==== vte ==== Version update (0.78.1 -> 0.78.2) Subpackages: libvte-2_91-0 typelib-1_0-Vte-2_91 - Update to version 0.78.2: + build: Fix typo in pread check + emulation: Use U+2426 for SUB + lib: Remove an unnecessary move + widget: - Use correct type for out param - Use correct termprop name ==== xdm ==== - tweak the login screen: * use sans serif font * use branding wallpaper and colors * do not require xli, recommend feh ==== xen ==== Version update (4.19.0_04 -> 4.19.0_06) Subpackages: xen-libs xen-tools-domU - bsc#1232622 - VUL-0: CVE-2024-45818: xen: Deadlock in x86 HVM standard VGA handling (XSA-463) xsa463-01.patch xsa463-02.patch xsa463-03.patch xsa463-04.patch xsa463-05.patch xsa463-06.patch xsa463-07.patch xsa463-08.patch xsa463-09.patch - bsc#1232624 - VUL-0: CVE-2024-45819: xen: libxl leaks data to PVH guests via ACPI tables (XSA-464) xsa464.patch - Drop stdvga-cache.patch - bsc#1232542 - remove usage of net-tools-deprecated from supportconfig plugin