Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=3&version=Tumbleweed&build=20231002 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ImageMagick (7.1.1.17 -> 7.1.1.18) SDL2 (2.28.3 -> 2.28.4) apache2-mod_php8 (8.2.10 -> 8.2.11) container-selinux (2.215.0 -> 2.222.0) crypto-policies (20230614.5f3458e -> 20230920.570ea89) emacs glib2 gnome-remote-desktop (45.rc -> 45.0) grub2 kbd (2.6.2 -> 2.6.3) kdepim-runtime libblockdev (3.0.2 -> 3.0.3) libdecor (0.1.1 -> 0.2.0) libnbd (1.14.1 -> 1.18.0) libnvme (1.4 -> 1.6) libwebp nbdkit (1.32.2 -> 1.36.0) nvme-cli (2.4 -> 2.6) pam-config (2.8 -> 2.9) php8 (8.2.10 -> 8.2.11) poppler poppler-qt5 python-argparse-manpage (4.3 -> 4.5) qt6-base (6.5.2 -> 6.5.3) qt6-declarative (6.5.2 -> 6.5.3) qt6-imageformats (6.5.2 -> 6.5.3) qt6-translations (6.5.2 -> 6.5.3) qt6-wayland (6.5.2 -> 6.5.3) rubygem-mini_portile2 (2.8.0 -> 2.8.4) screen (4.9.0 -> 4.9.1) shadow suse-module-tools (16.0.35 -> 16.0.36) systemd (254.3 -> 254.5) xdg-desktop-portal-kde xdg-utils (1.1.3+20230831 -> 1.2.0~beta1+20230929) yast2-trans (84.87.20230922.91d997adab -> 84.87.20230930.5f9e01162a) === Details === ==== ImageMagick ==== Version update (7.1.1.17 -> 7.1.1.18) Subpackages: ImageMagick-config-7-SUSE ImageMagick-extra libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - version update to 7.1.1.18 * upstream changelog: https://github.com/ImageMagick/Website/blob/main/ChangeLog.md ==== SDL2 ==== Version update (2.28.3 -> 2.28.4) - Update to release 2.28.4 * Enable clipping for zero sized rectangles in the SDL renderer * Notify X11 clipboard managers when the clipboard changes * Fixed sensor timestamps for third-party PS5 controllers * Added detection for Logitech and Simagic racing wheels ==== apache2-mod_php8 ==== Version update (8.2.10 -> 8.2.11) - version update to 8.2.11 * This is a bug fix release. * https://www.php.net/ChangeLog-8.php#8.2.11 ==== container-selinux ==== Version update (2.215.0 -> 2.222.0) - Update to version 2.222: * Allow containers to read/write inherited dri devices - Update to version 2.221: * Allow containers to shutdown sockets inherited from container runtimes * Allow spc_t to use execmod libraries on container file systems * Add boolean to allow containers to read all cert files * More MLS Policy allow rules * Allow container runtimes using pasta bind icmp_socket to port_t * Fix spc_t transitions from container_runtime_domain ==== crypto-policies ==== Version update (20230614.5f3458e -> 20230920.570ea89) Subpackages: crypto-policies-scripts - nss: Skip the NSS policy check if the mozilla-nss-tools package is not installed. This avoids adding more dependencies in ring0. * Add crypto-policies-nss.patch [bsc#1211301] - Update to version 20230920.570ea89: * fips-mode-setup: more thorough --disable, still unsupported * FIPS:OSPP: tighten beyond reason for OSPP 4.3 * krb5: sort enctypes mac-first, cipher-second, prioritize SHA-2 ones * openssl: implement relaxing EMS in FIPS (NO-ENFORCE-EMS) * gnutls: prepare for tls-session-hash option coming * nss: prepare for TLS-REQUIRE-EMS option coming * NO-ENFORCE-EMS: add subpolicy * FIPS: set __ems = ENFORCE * cryptopolicies: add enums and __ems tri-state * docs: replace `FIPS 140-2` with just `FIPS 140` * .gitlab-ci: remove forcing OPENSSH_MIN_RSA_SIZE * cryptopolicies: add comments on dunder options * nss: retire NSS_OLD and replace with NSS_LAX 3.80 check * BSI: start a BSI TR 02102 policy [jsc#PED-4933] * Rebase patches: - crypto-policies-policygenerators.patch - crypto-policies-revert-rh-allow-sha1-signatures.patch - crypto-policies-FIPS.patch - Conditionally recommend the crypto-policies-scripts package when python is not installed in the system [bsc#1215201] ==== emacs ==== Subpackages: emacs-el emacs-eln emacs-info emacs-nox emacs-x11 etags - For GNUS: Use message-user-fqdn instead of gnus-local-organization - Now with changed pdump.patch patch from bjorn.bidar@thaodan.de - Build also wayland gtk based binary - Support wayland binary by checking for XDG_SESSION_TYPE - Provide eln native shared binaries for all emacs program binaries - Pass libdir to configure so native Emacs lisp files are installed correctly on 64bit systems ==== glib2 ==== Subpackages: glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 libgthread-2_0-0 - Fix NetworkManager crashing repeatedly with glib 2.78.0; (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch ==== gnome-remote-desktop ==== Version update (45.rc -> 45.0) - Update to version 45.0: + vnc: Also include DRM format modifiers when resizing PipeWire stream. + rdp: Also include DRM format modifiers when resizing PipeWire stream. + Updated translations. - Change compression of tarball in service and spec to zst from xz. - Drop dbus-1-daemon Requires, only needed for tests, and we are not building them currently. ==== grub2 ==== Subpackages: grub2-arm64-efi grub2-snapper-plugin grub2-systemd-sleep-plugin - Only build with fde-tpm-helper-rpm-macros for the architectures supporting the newer UEFI and TPM 2.0. * Also correct the location of %fde_tpm_update_requires - Fix a boot delay regression in PowerPC PXE boot (bsc#1201300) * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch - Add the new BuildRequires for EFI builds for the better FDE support: fde-tpm-helper-rpm-macros + Also add the the macros to %post and %posttrans - Correct the type of allocated EFI pages for ARM64 kernel (bsc#1215151) * arm64-Use-proper-memory-type-for-kernel-allocation.patch ==== kbd ==== Version update (2.6.2 -> 2.6.3) Subpackages: kbd-legacy - Update to version 2.6.3: - libkfont: * Don't look for fonts in the current directory. - showkey: * Add parameter to allow to change timeout. - po: * Update po files. ==== kdepim-runtime ==== - Add libetebase-devel to BuildRequires to enable the etesync resource for factory builds ==== libblockdev ==== Version update (3.0.2 -> 3.0.3) Subpackages: libbd_btrfs3 libbd_crypto3 libbd_fs3 libbd_loop3 libbd_lvm3 libbd_mdraid3 libbd_nvme3 libbd_part3 libbd_swap3 libbd_utils3 libblockdev3 - Update to version 3.0.3: * Always use "--fs ignore" with lvresize * nvme: - Use interim buffer for nvme_get_log_sanitize() - Generate HostID when missing * tests: - Specificy required versions when importing GLib and BlockDev introspection - Minor NVMe HostNQN fixes - Replace deprecated unittest assert calls * fs: - Fix leaking directories with temporary mounts - Fix memory leak * crypto: Correctly convert passphrases from Python to C ==== libdecor ==== Version update (0.1.1 -> 0.2.0) Subpackages: libdecor-0-0 - Update to version 0.2.0: * Various bug and leak fixes. * New gtk plugin. - Update URL and source to new home. - Add pkgconfig(gtk-3.0) BuildRequires, new dependency. - Use ldconfig_scriptlets macro for post(un) handling. ==== libnbd ==== Version update (1.14.1 -> 1.18.0) - Update to version 1.18.0: * CVE-2023-5215 (bsc#1215799) * docs: Add link to nbd_get_size announcement in release notes * docs: Add URL to list post on nbd_get_size security * docs: Update release notes for nbd_get_size backport to 1.16.5 * docs: Finalize release notes for release tomorrow * dump: Add more examples of running subprocesses from nbddump * info: Tolerate missing size * block_status: Fix assertion on bad 64-bit block status reply * block_status: Fix assertion with large server size * api: Sanitize sizes larger than INT64_MAX ==== libnvme ==== Version update (1.4 -> 1.6) Subpackages: libnvme-mi1 libnvme1 - Update to version 1.6: * docs: Fix Read-the-Docs configuration (deprecated config param) * mi-mctp: Fix free() in error path of mi_open_mctp * types: Use NVME_SET for status type mask to get status value * types: Define FLBAS MASK and SHIFT to use NVME_GET * types: Support Phy Rx Eye Opening Measurement Log * log: Add nvme root global variable to set for default output * types: Add support for the OAQD ID controller field * test: use non deprecated API * test: add tests for Get/Set Features functions * ioctl: implement nvme_set_features_lba_range() * ioctl: pass NSID in Get/Set Features commands that use it * ioctl: fix swapped parameters in nvme_set_features_host_id() * ioctl: export nvme_{g,s}et_features_iocs_profile() * ioctl: pass ENDGID in nvme_get_features_endurance_event_cfg() * ioctl: don't set SAVE bit on unsaveable features * ioctl: avoid sending uninitialized timestamp * ioctl: pass data for Get/Set Features commands * ioctl: set correct bits in Set Features commands * ioctl: correct feature IDs in Get/Set Features commands * tree: Add 2 new public functions to lookup existing controllers * ioctl: Add debugging feature to show command outputs * Fix incorrect article 'an' as 'a' to use for a description * linux: Added functions to enable faster telemetry data retrieval. Moved telemetry data area support detection into separate function. Added possibility to modify data transfer chunk size. Enable telemetry extraction up to specified data area. Removed some printf() and perror(). * test: account for discovery log page entry stripping * fabrics: unconditionally strip discovery entry strings * fabrics: only look for spaces in strchomp() * tree: Use early return instead of else statements * test: fix lookup test case * test: make all function static * test: add tests for new tcp controller matching algorithm * tree: Improve TCP controller matching algorithm * util: Add functions to parse the system's interfaces * types: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP * mi: remove nsid from nvme_mi_admin_identify_secondary_ctrl_list() * test: add tests for nvme_ctrl_get_src_addr() * tree: Add nvme_ctrl_get_src_addr() to get the controller's src_addr * util: Split _nvme_ipaddrs_eq() from nvme_ipaddrs_eq() * test: add tests for Identify functions * ioctl: use available Identify helper functions * test: pass a large enough buffer to nvme_identify_ns_descs() * ioctl: remove nsid from nvme_identify_secondary_ctrl_list() * meson: Don't hard-code path to "internal/config.h" * fabrics: Do not pass disable_sqflow if not supported * fabrics: Read the supported options lazy * test: add discovery log page tests * test: add infra for mocking passthru ioctls * tree: fix segfault in nvme_scan_subsystem() * src/nvme/tree.c: make __nvme_scan_subsystem() returning bool * doc: fix minor mistake in README.md about dependencies * nvme-tree: avoid warning in 'list-subsys' * tree: Add getter for subsystem iopolicy * fabrics: Consider also all hosts settings for context match * tree: Scan all subsystems * doc: Fixing compile instruction in README * mi: allow non-4-byte-aligned responses * mi-mctp: use a linear response buffer * mi: implement length and offset alignment checks in admin_xfer() * tree: Don't open nvme devices until it's absolutely required * tree: missing closedir() causes fd leak for "/sys/bus/pci/slots" * mi: don't return from mi_mctp_submit with a tag held * util: Provide empty nvme_ipaddrs_eq for static builds * fabrics: Relax match on well known disc ctrl lookup * tree: Ignore NULL address pointer for phy slot lookup * fabrics: Filter discovery ctrls out during application context check * util: Add ignored error code * json: Use memory block allocated by realloc() instead printbuf * util: Use HAVE_NETDB instead of HAVE_LIBNSS * tree: Add PCI physical slot number for controller * tree: Use nvme_ipaddrs_eq() to compare IP addresses * fabrics: Add EADDRNOTAVAIL error mapping * fabrics: filter out subsystems with non-matching application string * libnvme: add 'application' setting to nvme_root * libnvme: add 'application' setting to the subsystem * test: Add more code coverage for nvme_ipaddrs_eq() * util: rename ipaddrs_eq() to nvme_ipaddrs_eq() and make public. * util: Add ipaddrs_eq() to check whether two IP addresses are equal * test: Add unit test for ctrl lookups * ioctl: fix RAE bit on last Get Log Page command * fabrics: check genctr after getting discovery entries * fabrics: handle /dev/nvme-fabrics read failure * fabrics: fix potential invalid memory access in __nvmf_supported_option() * Python: Fix crash during garbage collection * python/swig: Check swig version to determine whether -py3 is needed * python/swig: Wrap swig-sensitive struct inside #ifwdef SWIG * mi: Add nvme_mi_ctrl_id to retrieve controller ID * Python: Suppress swig warnings about unnamed struct * examples: fix incorrect controller status in MI info output * ioctl: Explicitly initialize all members of struct nvme_ns_mgmt_args * Python: make NBFT data more pythonic * ioctl: io management send, receive args fix * python: Update test data * NBFT: Remove documentation from nbft.c since it's also in nbft.h * Python: Add NBFT support * nbft: Doc typo - Use nvme_nbft_free() instead of nbft_free() * nbft: Parse the {HOSTID,HOSTNQN}_CONFIGURED flags * nbft: Fix nbft_ssns_flags endianness test * nbft: Add a simple unit test * doc: Update README ... changelog too long, skipping 12 lines ... * tree: Fix argument check in nvme_bytes_to_lba ==== libwebp ==== Subpackages: libsharpyuv0 libwebp7 libwebpdecoder3 libwebpdemux2 libwebpmux3 - Add 0001-Fix-invalid-incremental-decoding-check.patch A fuzzing finding fixed in the SLE/Leap updates ==== nbdkit ==== Version update (1.32.2 -> 1.36.0) Subpackages: nbdkit-basic-filters nbdkit-basic-plugins nbdkit-curl-plugin nbdkit-nbd-plugin nbdkit-python-plugin nbdkit-server nbdkit-ssh-plugin - Update to version 1.36.0: * Version 1.36.0. * evil: Fix typo in man page * tests: Rename test-curl-options.sh and add more tests * docs: Finalize release notes for release tomorrow * curl: Use new curl_multi_get_handles API to simplify code * curl: Store pointer from curl easy handle to our struct curl_handle * README: Recommend new syntax for ASAN_OPTIONS * fuzzing/README: Remove advice to set ASAN_OPTIONS * docs: Small tweaks to the release notes * docs: Add outline release notes for forthcoming nbdkit 1.36 * tests: Add some consistency checks of the tests themselves * tests/test-evil-cosmic.sh: Use requires_nbdcopy * tests/test-nozero.sh: Test uses nbdsh -u but does not declare requirement * tests: Fix a couple more tests that are missing requires_run * docs: Expand Network Block Device (for NBD) in title ==== nvme-cli ==== Version update (2.4 -> 2.6) Subpackages: nvme-cli-bash-completion nvme-cli-zsh-completion - Update to version 2.6: * nvme: allocate payload buffer in create-ns command * nvme-print-stdout: Add CAP.CPS and CAP.NSSS human readable outputs * nvme: Add output-format default option instead of argconfig json option * nvme: fw-download offset only describes FW offset, not file offset * unit: add locale number test * util: handle utf-8 thousend separators correctly * nvme: Change to use NVME_ARGS verbose default option from OPT_ARGS * fabrics: Fix NVMF_ARGS macro to use parameter n correctly * nvme: Add verbose default option to show command debug output * util: Fix to set argconfig output format json option correctly * util: Split argconfig output format json function to set and get * nvme: Spport Phy Rx Eye Opening Measurement Log * nvme: Introduce nvme_realloc function * nvme: Fix for fdpa reserved field printing * completion: add 'version' and 'help' to list * udev-rule: apply round-robin iopolicy on i/o subsystems alone * nvme: Add support for the OAQD ID controller field * plugins/solidigm: use static log macro to calc bitmask * plugins/ocp: Rename FW activation history command * nvme: auto free nvme_dev resource * nvme: allocate aligned payloads for all nvme commands * nvme: introduce alloc helper with alignment support * util: add cleanup function for generic memory allocations * nvme: append huge to nvme_{alloc|free} function * nvme: fw_download use nvme_alloc only * fabrics: Removing duplicate code and moving to libnvme * nvme-print: omit size of protection information * tree: Modify label name close_fd to close_dev * fabrics: For TCP/RDMA, compare IP addresses with nvme_ipaddrs_eq() * fabrics: lookup_discovery_ctrl() must look under host and not root * nvme: Do not map status to errno codes * completions: Add bash completion for DSSD Power state feature(FID: C7h) * Documentation: Add document for DSSD Power state feature(FID: C7h) * plugins/ocp: Add DSSD Power state feature(FID: C7h) * avoid casting pointer arguments to argconfig functions * nvme-print: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP * nvme-print: Fix endurance_log whitespace changes * nvme: Fix retrieval of telemetry log up to specified data area. * nvme: Update list secondary command * wdc: Add support for SN861 drive * util: Set errno to 0 before strtol/stroul call * nvme: Revert passthru and submit_io to print status to stderr from stdout * plugins/zns: Fix offset in report zones * nvme-rpmb: Fix nvme_show_id_ctrl_rpmbs() definition error * fabrics: Use corresponding hostid when hostnqn is generated * json: fix seg. fault converting NULL to JSON string * nvme-cli: fix extended metadata size calculation * nvme-print: Show subsystem iopolicy * nvme-print-stdout: Do not show non reachable ns in namespace topology * nvme-print: Fix show-topolocy for ctrls * doc: Fix typo in documentation * nvme-print-stdout: fix storage tag size label * nvme-print-stdout: List only ctrls which are part of ns * nvme-print-stdout: Support subsys reachable from several hosts * ccan: Add htable, strset and dependencies * ccan: Remove unused documentation * nvme-print: Split max power flags * nvme-print: fix counter while looping through uuid_list * fabrics: only look for matching ctrl on same host * README: Correct hugetlbfs spelling error * util: Delete unused CFG_BOOL argconfig type as duplicated with CFG_FLAG * util: Set LC_ALL=C as default if -H option is not used * nvme: Add support for create-ns command endg-id option parameter * nvme-print: fix argument order for show functions * plugins/solidigm: Added Marketing Name Log support for Solidigm. * nvme-print: Remove left overs from refactoring * nvme-print: Move num argument parsing into callbacks * nvme-print: Fix typo in callback definition * scripts: Make release script project neutral * scripts: Update update-docs.sh scripts * scripts: Execute the scripts from toplevel directory * scripts: Move helper scripts to a central place * docs: Update file modes * doc: Add information on --context * nvmf-autoconnect: Annotate the context to autoconnect * fabrics: Add support for volatile configuration * plugins/solidigm: Formated log page directory table consistently with "nvme list" format. * plugins/solidigm: Added Identify controller VU extensions parsing. * nvme-print-json: Print PCI pysical slot number for controller * nvme-print-stdout: Print PCI physical slot number for controller * libnvme.wrap: Bump to 42ac453 * plugins/nbft: Use common code to parse print flags * fabrics: Do not print device on connect per default * fabrics: Revert 'fabrics: prevent 'nvme connect' to well-known discovery NQN' * nvme-print: fix wrong list-subsys output when ns are attached to different ctrls * plugins/micron: Correct NULL pointer checking error * plugins/innogrit: Add vendor command get-eventlog and get-cdump * nvme: Use correct data buffer size * nvme: Fix quoted string split across lines to use quoted newline * plugins/zns: Fix zns.c linux kernel check patch errors and warnings * plugins/ymtc: Fix ymtc-nvme.c linux kernel check patch warning * plugins/ymtc: Fix ymtc-nvme.c space indentation to tab indentation * plugins/virtium: Fix virtium-nvme.c linux kernel check patch errors and warnings * plugins/transcend: Fix transcend-nvme.c linux kernel check patch errors and warnings * plugins/solidigm: Fix linux kernel check patch errors and warnings * plugins/shannon: Fix shannon-nvme.c linux kernel check patch errors and warnings * plugins/seagate: Fix seagate-nvme.c linux kernel check patch warnings * plugins/scaleflux: Fix sfx-nvme.c linux kernel check patch errors and warnings ... changelog too long, skipping 111 lines ... - Fix install path for nvme-regress script ==== pam-config ==== Version update (2.8 -> 2.9) - Update to version 2.9 - Add support for kanidm ==== php8 ==== Version update (8.2.10 -> 8.2.11) Subpackages: php8-cli php8-ctype php8-dom php8-gd php8-gettext php8-iconv php8-mbstring php8-mysql php8-openssl php8-pdo php8-sqlite php8-tokenizer php8-xmlreader php8-xmlwriter - version update to 8.2.11 * This is a bug fix release. * https://www.php.net/ChangeLog-8.php#8.2.11 ==== poppler ==== Subpackages: libpoppler-cpp0 libpoppler-glib8 libpoppler131 poppler-tools - build with gpgmepp for signing documents (bsc#1215632) ==== poppler-qt5 ==== - build with gpgmepp for signing documents (bsc#1215632) ==== python-argparse-manpage ==== Version update (4.3 -> 4.5) - update to 4.5: * We newly provide build_manpages.build_py and build_manpages.install command classes that are re-usable from pyproject.toml. No need to provide setup.py because of argparse-manpage. * The prog= specifier (in setup.py/setup.cfg/pyproject.toml) is now better handled so it doesn't conflict with ArgumentParser(prog=..). ==== qt6-base ==== Version update (6.5.2 -> 6.5.3) Subpackages: libQt6Core6 libQt6DBus6 libQt6Gui6 libQt6Network6 libQt6OpenGL6 libQt6Sql6 libQt6Test6 libQt6Widgets6 qt6-network-tls qt6-platformtheme-gtk3 - Update to 6.5.3 * https://www.qt.io/blog/qt-6.5.3-released - Drop patch, merged upstream: * CVE-2023-38197-qtbase-6.5.diff - Enable the experimental native painting feature to improve remote desktop performances (boo#1214915) exporting QT_XCB_NATIVE_PAINTING is required to use the feature. ==== qt6-declarative ==== Version update (6.5.2 -> 6.5.3) Subpackages: libQt6LabsAnimation6 libQt6LabsFolderListModel6 libQt6LabsQmlModels6 libQt6LabsSettings6 libQt6LabsSharedImage6 libQt6LabsWavefrontMesh6 libQt6Qml6 libQt6QmlCore6 libQt6QmlLocalStorage6 libQt6QmlModels6 libQt6QmlWorkerScript6 libQt6QmlXmlListModel6 libQt6Quick6 libQt6QuickControls2-6 libQt6QuickControls2Impl6 libQt6QuickDialogs2-6 libQt6QuickDialogs2QuickImpl6 libQt6QuickDialogs2Utils6 libQt6QuickEffects6 libQt6QuickLayouts6 libQt6QuickParticles6 libQt6QuickShapes6 libQt6QuickTemplates2-6 libQt6QuickTest6 qt6-declarative-imports - Update to 6.5.3 * https://www.qt.io/blog/qt-6.5.3-released ==== qt6-imageformats ==== Version update (6.5.2 -> 6.5.3) - Update to 6.5.3 * https://www.qt.io/blog/qt-6.5.3-released ==== qt6-translations ==== Version update (6.5.2 -> 6.5.3) - Update to 6.5.3 * https://www.qt.io/blog/qt-6.5.3-released ==== qt6-wayland ==== Version update (6.5.2 -> 6.5.3) Subpackages: libQt6WaylandClient6 libQt6WaylandCompositor6 libQt6WaylandEglClientHwIntegration6 libQt6WaylandEglCompositorHwIntegration6 libQt6WlShellIntegration6 - Update to 6.5.3 * https://www.qt.io/blog/qt-6.5.3-released ==== rubygem-mini_portile2 ==== Version update (2.8.0 -> 2.8.4) - updated to version 2.8.4 Various fixes to build system ==== screen ==== Version update (4.9.0 -> 4.9.1) - update to 4.9.1 (bsc#1210272, CVE-2023-24626): * Support stop/parity bits on serial port * Add needed system headers in checks and return values for implicit function declarations * Avoid zombies after shell exit * Missed signal sending permission check on failed query messages (CVE-2023-24626) * manpage fixes * source code fixes during cleanup * UTF-8 encoding can emit invalid UTF-8 sequences * for out of range unicode values ==== shadow ==== Subpackages: libsubid4 login_defs - Add shadow-4.14.0-selinux-labels.patch: Set proper SELinux labels for new homedirs. See gh/shadow-maint/shadow#812. ==== suse-module-tools ==== Version update (16.0.35 -> 16.0.36) Subpackages: suse-module-tools-scriptlets - Update to version 16.0.36 * blacklist RNDIS modules (bsc#1205767, jsc#PED-5731) * modprobe.d: Blacklist cls_tcindex module (bsc#1210335, CVE-2023-1829) ==== systemd ==== Version update (254.3 -> 254.5) Subpackages: libsystemd0 libudev1 systemd-container systemd-coredump udev - Import commit 9674bb256205e6c643feadbcccfd1ee8feeee684 (merge of v254.5) For a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/6ed5b11298005e07509832881a0c5ff1... - Make sure to call %sysusers_create only when transfiletrigger is disabled. - systemd.spec: switch to %ldconfig_scriptlets - systemd.spec: add `%tmpfiles_create systemd-resolve` It's only needed by SLE distros since systemd packages rely on transtriggerfiles in Factory. - Import commit 6ed5b11298005e07509832881a0c5ff1a80bf225 (merge of v254.4) For a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/b6b4e5a8a82d1f13f265a4ef170f2d13... ==== xdg-desktop-portal-kde ==== - Add: 0001-kde_portals.patch (kde#474746) * Add a fallback to the GTK portal for settings. This makes sure that GTK apps always get valid fonts and related settings. ==== xdg-utils ==== Version update (1.1.3+20230831 -> 1.2.0~beta1+20230929) - Update to version 1.2.0-beta1+20230929: * Set Version to 1.2.0-beta1 * Update Changes and Release Notes * fix(xdg-open): handle spaces in .desktop file path * Quote Browser variable to avod unintentional code execution * Add missing result gathering * Enhance LXQt Desktop Enviromment support * xdg-terminal: don't run 'kreadconfig' if KDE_SESSION_VERSION is >= 5 - Drop the following fix, now actually included upstream * xdg-terminal-don-t-run-kreadconfig-if-KDE_SESSION_VE.patch - The following entries may have been missed in previous changelog versions * all: shellcheck fixes; make xdg-mime DASH-compatible * xdg-email: do not run BROWSER if xdg-open failed * Ensure POSIX-compliant shell scripting to support DASH * all: spelling fixes * Fix set_url_scheme_handler_gnome3 to not associate text/html handler * xdg-screensaver: fix the freedesktop screensaver * xdg-screensaver: implement support for "gnome3" DE * xdg-screensaver: better error detection for freedesktop 'status' command * xdg-desktop-menu: Drop obsolete GNOME support * xdg-open: support WSL (FDO#108975) * xdg-su: support deepin * xdg-mime: If mimeapps.list is a symlink, retain the symlink (#7) * xdg-open: fix search_desktop_file's logic * xdg-open: handle local hostname in `file:` URLs * xdg-desk-menu: Check if defaults file exists during installation * xdg-su: Remove quotes for lxqt-sudo cmd arg * xdg-open: handle opening files when DE=flatpak ==== yast2-trans ==== Version update (84.87.20230922.91d997adab -> 84.87.20230930.5f9e01162a) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sr yast2-trans-sv yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20230930.5f9e01162a: * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Italian) * Translated using Weblate (Spanish) * Translated using Weblate (Spanish) * Translated using Weblate (Spanish) * Translated using Weblate (Spanish) * New POT for text domain 'storage'.