RE: New Arm Tumbleweed snapshot 20221006 released!

10 Oct 2022


      Update released via Tumbleweed Update channel.
...
-----Original Message-----
From: Guillaume Gardet <Guillaume.Gardet@arm.com>
Sent: 10 October 2022 10:16
To: arm@lists.opensuse.org
Cc: nd <nd@arm.com>
Subject: RE: New Arm Tumbleweed snapshot 20221006 released!
Please note this snapshot has the following known bug while you run zipper dup:
  error: unpacking of archive failed on file
/usr/lib/firmware/qcom/LENOVO/21BX;633f2acf: cpio: File from package already
exists as a directory in system
  error: kernel-firmware-qcom-20220930-1.1.noarch: install failed
  error: kernel-firmware-qcom-20220902-1.1.noarch: erase skipped
  ( 82/133) Installing: kernel-firmware-qcom-20220930-
1.1.noarch ...............................................................[error]
  Installation of kernel-firmware-qcom-20220930-1.1.noarch failed:
  Error: Subprocess failed. Error: RPM failed: Command exited with status 1.
But, you can ignore the issue for now (fix is on the way to Factory) or try this
workaround: https://bugzilla.opensuse.org/show_bug.cgi?id=1204103#c13
Cheers,
Guillaume
...
-----Original Message-----
From: Guillaume Gardet <guillaume.gardet@arm.com>
Sent: 10 October 2022 09:06
To: arm@lists.opensuse.org
Subject: New Arm Tumbleweed snapshot 20221006 released!
Please note that this mail was generated by a script.
The described changes are computed based on the aarch64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=3&v
ers
ion=Tumbleweed&build=20221006
Please do not reply to this email to report issues, rather file a bug
on bugzilla.opensuse.org. For more information on filing bugs please
see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
  Mesa
  Mesa-drivers
  PackageKit
  amarok
  exiv2
  gptfdisk
  hplip
  iputils
  kernel-firmware (20220902 -> 20220930)
  kernel-source (5.19.12 -> 6.0.0)
  libbluray (1.3.2 -> 1.3.3)
  libcap (2.65 -> 2.66)
  libebml (1.4.2 -> 1.4.3)
  libglvnd (1.4.0 -> 1.5.0)
  libopenmpt (0.6.4 -> 0.6.6)
  libpng16 (1.6.37 -> 1.6.38)
  libreoffice
  libva (2.15.0 -> 2.16.0)
  libva-gl (2.15.0 -> 2.16.0)
  libverto (0.3.1 -> 0.3.2)
  libyuv
  links (2.27 -> 2.28)
  lirc
  live555 (2022.07.14 -> 2022.10.01)
  llvm15 (14.0.6 -> 15.0.1)
  lttng-modules (2.13.4_k5.19.12_1 -> 2.13.7_k6.0.0_3)
  lttng-ust (2.13.4 -> 2.13.5)
  osinfo-db (20220727 -> 20220830)
  patterns-kde (20220215 -> 20221001)
  perl-IO-Socket-SSL (2.074 -> 2.075)
  permissions
  popt (1.18 -> 1.19)
  postgresql (14 -> 15)
  postgresql15 (14.5 -> 15~rc1)
  pragha
  python-cryptography (37.0.4 -> 38.0.1)
  python-pyspnego (0.4.0 -> 0.5.0)
  python-pyudev (0.23.2+14 -> 0.24.0)
  python-requests-toolbelt
  shim
  tdb (1.4.6 -> 1.4.7)
  xapian-core (1.4.20 -> 1.4.21)
  yast2-network (4.5.7 -> 4.5.8)
  yast2-trans (84.87.20220923.15c6c6ee84 -> 84.87.20220930.817f83073b)
=== Details ===
==== Mesa ====
Subpackages: Mesa-dri-devel Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0
libgbm1
- Add build_orig conditional switch for video codecs define.
==== Mesa-drivers ====
Subpackages: Mesa-dri Mesa-gallium Mesa-libva
- Add build_orig conditional switch for video codecs define.
==== PackageKit ====
Subpackages: PackageKit-backend-zypp PackageKit-gstreamer-plugin
PackageKit- gtk3-module libpackagekit-glib2-18
typelib-1_0-PackageKitGlib-1_0
- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).
==== amarok ====
- Use FFmpeg 4 to build amarok on Tumbleweed. The FFmpeg 5 port
  needs more work.
==== exiv2 ====
- add tracker for SLE (jsc#PED-1393)
==== gptfdisk ====
- Add patch to fix sgdisk with popt 1.19:
  * 0001-Fix-failure-crash-of-sgdisk-when-compiled-with-lates.patch
==== hplip ====
Subpackages: hplip-hpijs hplip-sane
- Move the hplip-udev-rules requirement from hplip to hplip-hpijs.
  The main package will get it via indirect dependencies then.
- Split off hplip-udev-rules hplip-udev-rules so that you can install
  hplip-sane only and scan as a normal user, fixes boo#1203811
==== iputils ====
- Backport 2 fixes for bsc#1203957:
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch
==== kernel-firmware ====
Version update (20220902 -> 20220930)
Subpackages: kernel-firmware-all kernel-firmware-amdgpu
kernel-firmware- ath10k kernel-firmware-ath11k kernel-firmware-atheros
kernel-firmware- bluetooth kernel-firmware-bnx2 kernel-firmware-brcm
kernel-firmware-chelsio
kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel
kernel- firmware-iwlwifi kernel-firmware-liquidio
kernel-firmware-marvell kernel- firmware-media
kernel-firmware-mediatek kernel-firmware-mellanox kernel-
firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-
firmware-nvidia kernel-firmware-platform kernel-firmware-prestera
kernel- firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon
kernel- firmware-realtek kernel-firmware-serial kernel-firmware-sound
kernel- firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network
- Update to version 20220930 (git commit fdf1a6525852):
  * linux-firmware: Update AMD cpu microcode
  * mediatek: mt8195: Update scp.img to v2.0.11956
  * mediatek: Add new mt8195 SOF firmware
  * mediatek: Update mt8186 SOF firmware to v0.2.1
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9B8_8207
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * cxgb4: Update firmware to revision 1.27.0.0
  * i915: Add versionless HuC files for current platforms
  * i915: Add GuC v70.5.1 for DG1, DG2, TGL and ADL-P
  * qca: Update firmware files for BT chip WCN3991.
  * Removing crnv32
  * amdgpu: update yellow carp DMCUB firmware
  * amdgpu: add firmware for VCN 3.1.2 IP block
  * amdgpu: add firmware for SDMA 5.2.6 IP block
  * amdgpu: add firmware for PSP 13.0.5 IP block
  * amdgpu: add firmware for GC 10.3.6 IP block
  * amdgpu: add firmware for DCN 3.1.5 IP block
  * qcom: rename Lenovo ThinkPad X13s firmware paths
  * rtw89: 8852c: update fw to v0.27.42.0
  * rtw89: 8852c: update fw to v0.27.36.0
- Fix install-split.sh for dealing with a symlink of directory
==== kernel-source ====
Version update (5.19.12 -> 6.0.0)
- Refresh
  patches.suse/vduse-prevent-uninitialized-memory-accesses.patch.
  Update upstream status.
- commit 39efccd
- Update to 6.0 final
- eliminate 1 patch
  - patches.suse/vduse-prevent-uninitialized-memory-accesses.patch
- refresh configs (headers only)
- commit a7dafe3
==== libbluray ====
Version update (1.3.2 -> 1.3.3)
- update to 1.3.3:
  * Initial support for Java 18.
  * Add support for OpenBSD operating system.
  * Improve support for FreeBSD, NetBSD and DragonFlyBSD
  * Improve Java 17 support.
==== libcap ====
Version update (2.65 -> 2.66)
- update to 2.66:
  * Fix documentation typos in cap_from_text.3
  * Some getpcaps code clean up and a fix for PID argument parsing from Jakub
    Wilk.
  * Slightly more robust Makefiles to address an error with make -j48
test observed
  * Include a simple Go program, captrace, to trace kernel capability validation
    checks
  * This program can be used to figure out what capabilities a program needs to
    operate.
  * captrace (a wrapper for bpftrace) uses BPF kprobes to monitor the kernel for
    capability checks and whether or not they succeed for the system, a specific
    PID or a program's direct execution.
  * Trim down the default file capabilities for contrib/sucap/su to those actually
    needed and set USER and HOME environment variables so bash doesn't
complain
    about a sourcing error.
==== libebml ====
Version update (1.4.2 -> 1.4.3)
- update to 1.4.3:
  * A C++14 compliant C++ compiler is now required.
  * Fix compilation with g++ 11. Fixes #80.
  * Remove Coremake project files
  * Updated the bundled utf8cpp to v3.2.1.
  * Fixed several problems in `EbmlBinary:` potential segfault by
    writing to a `nullptr`, potential memory leak under certain error
    conditions.
  * Fixed problems with the generated `pkg-config` files if any of the
    installation paths are absolute.
- drop 0001-include-appropriate-header-files-for-std-numeric_lim.patch
(upstream)
==== libglvnd ====
Version update (1.4.0 -> 1.5.0)
- update to 1.5.0:
  * Add BTI landing pads for aarch64
  * Set current thread state to NULL in teardown
  * Moving setspecific to before DestroyThreadState
  * Fix a memory leak in libGLdispatch
  * Use assembly stubs on armv6
- drop libglvnd-add-bti.patch (upstream)
==== libopenmpt ====
Version update (0.6.4 -> 0.6.6)
- Update to 0.6.6
  * [Sec] Possible crash when playing manipulated IT / MPTM files
    with a T00 command.
  * MTM: In MultiTracker, setting speed and tempo are mutually
    exclusive commands. Still, some MultiTracker modules were made
    to be played with external players such as DMP, so they
    actually rely on âstandardâ speed / tempo behaviour. Decide
    which behaviour to use by checking of speed and tempo commands
    are found on the same row.
  * MTM: Ignore sample loops if the loop end is <= 2.
  * Echo DMO: Migrate left and right delay values in modules made
    with OpenMPT versions between 1.27.01.00 and 1.30.05.00 to the
    correct interpretation.
- Changes in 0.6.5:
  * [Bug] Makefile now also uses CC, CXX, LD, and AR when set as
    environment variables.
  * [New] Makefile now uses PKG_CONFIG as path to pkg-config.
  * DBM: Sample middle-C frequencies were slightly off.
    laffik_-_marynarze.dbm sounds much more bearable now.
  * DBM: Fixed pattern break parameter interpretation.
  * Echo DMO: Setting the delay parameter to 0 yielded a 2-second
    echo delay instead of 1ms.
  * Digi Booster Echo: Setting the delay parameter to 0 yielded a
    510ms echo delay instead of approximately 334ms.
==== libpng16 ====
Version update (1.6.37 -> 1.6.38)
- update to 1.6.38:
  * Added configurations and scripts for continuous integration.
  * Fixed various errors in the handling of tRNS, hIST and eXIf.
  * Implemented many stability improvements across all platforms.
  * Updated the internal documentation.
==== libreoffice ====
Subpackages: libreoffice-base libreoffice-calc libreoffice-draw
libreoffice-filters- optional libreoffice-gnome libreoffice-gtk3
libreoffice-icon-themes libreoffice- impress libreoffice-l10n-en
libreoffice-mailmerge libreoffice-math libreoffice- pyuno
libreoffice-qt5 libreoffice-writer libreofficekit
- Change egrep/fgrep calls to grep -E/-F, respectively boo#1203092
  add libreoffice-7.4.1.2-grep.patch
==== libva ====
Version update (2.15.0 -> 2.16.0)
Subpackages: libva-drm2 libva-x11-2 libva2
- update to 2.16.0:
  * add: Add HierarchicalFlag & hierarchical_level_plus1 for AV1e.
  * dep: Update README.md to remove badge links
  * dep: Removed waffle-io badge from README to fix broken link
  * dep: Drop mailing list, IRC and Slack
  * autotools: use wayland-scanner private-code
  * autotools: use the wayland-scanner.pc to locate the prog
  * meson: use wayland-scanner private-code
  * meson: request native wayland-scanner
  * meson: use the wayland-scanner.pc to locate the prog
  * meson: set HAVE_VA_X11 when applicable
  * style:Correct slight coding style in several new commits
  * trace: add Linux ftrace mode for va trace
  * trace: Add missing pthread_mutex_destroy
  * drm: remove no-longer needed X == X mappings
  * drm: fallback to drm driver name == va driver name
  * drm: simplify the mapping table
  * x11: simplify the mapping table
- No code changes
- Update to version 2.15.0 was part of Intel oneVPL GPU Runtime
  2022Q2 Release 22.4.4
==== libva-gl ====
Version update (2.15.0 -> 2.16.0)
Subpackages: libva-glx2 libva-wayland2
- update to 2.16.0:
  * add: Add HierarchicalFlag & hierarchical_level_plus1 for AV1e.
  * dep: Update README.md to remove badge links
  * dep: Removed waffle-io badge from README to fix broken link
  * dep: Drop mailing list, IRC and Slack
  * autotools: use wayland-scanner private-code
  * autotools: use the wayland-scanner.pc to locate the prog
  * meson: use wayland-scanner private-code
  * meson: request native wayland-scanner
  * meson: use the wayland-scanner.pc to locate the prog
  * meson: set HAVE_VA_X11 when applicable
  * style:Correct slight coding style in several new commits
  * trace: add Linux ftrace mode for va trace
  * trace: Add missing pthread_mutex_destroy
  * drm: remove no-longer needed X == X mappings
  * drm: fallback to drm driver name == va driver name
  * drm: simplify the mapping table
  * x11: simplify the mapping table
- No code changes
- Update to version 2.15.0 was part of Intel oneVPL GPU Runtime
  2022Q2 Release 22.4.4
==== libverto ====
Version update (0.3.1 -> 0.3.2)
- update to 0.3.2:
  * Fix use-after-free in verto_reinitialize
  * Fix use-after-free in verto_free()
  * Remove broken tevent support
==== libyuv ====
- Use YUV_VERSION for library VERSION and YUV_VER_MAJOR for
  SOVERSION
==== links ====
Version update (2.27 -> 2.28)
- update to 2.28:
  * Disable cache when following redirects from consent.google.com
  * Fix a display glitch on framebuffer, if the user doesn't have mouse and
    if he presses F5, F6, F7 or F8
==== lirc ====
- Fix up timestamps from patching generated files
==== live555 ====
Version update (2022.07.14 -> 2022.10.01)
Subpackages: libBasicUsageEnvironment1 libUsageEnvironment3
libgroupsock30
libliveMedia107
- update to 2022.10.01:
  - Updated the previous revision so that the virtual function
"specialHandlingOfAuthenticationFailure()"
    is now called only if there is an actual authentication failure -
not on the first time that
    we send back a "401 Unauthorized" response.
  - Added a new virtual function
"specialHandlingOfAuthenticationFailure()" to "RTSPServer" to
    allow a subclassed "RTSPServer" to take special action (e.g., statistics logging)
    whenever an authentication failure occurs.
==== llvm15 ====
Version update (14.0.6 -> 15.0.1)
Subpackages: clang-tools libc++-devel libc++1 libc++abi-devel
libc++abi1
libclang13
- Update to version 15.0.1.
  * This release contains bug-fixes for the LLVM 15.0.1 release.
    This release is API and ABI compatible with 15.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
==== lttng-modules ====
Version update (2.13.4_k5.19.12_1 -> 2.13.7_k6.0.0_3)
- Update to version 2.13.7 (changes since 2.13.4):
  * Fix: incorrect stub prototypes when
    CONFIG_HAVE_SYSCALL_TRACEPOINTS=n.
  * Fix: mm/tracing: add 'accounted' entry into output of
    allocation tracepoints (v6.0).
  * Fix: block: remove bdevname (v6.0).
  * Fix: fs/jbd2: Fix the documentation of the
    jbd2_write_superblock() callers (v6.0).
  * Fix: tie compaction probe build to CONFIG_COMPACTION.
  * Fix: net: skb: introduce kfree_skb_reason() (v5.15.58..v5.16).
  * Fix: workqueue: Fix type of cpu in trace event (v5.19).
  * Fix: fs: Remove flags parameter from aops->write_begin (v5.19).
  * Fix: mm/page_alloc: fix tracepoint mm_page_alloc_zone_locked()
    (v5.19).
  * Fix: bytecode validator: reject specialised load field/context
    ref instructions.
  * Fix: bytecode validator: reject specialised load instructions.
  * Fix: honour "user" attribute for array/sequence of user integers.
  * wrapper: powerpc64: fix kernel crash caused by do_get_kallsyms.
  * Fix: event notification: Remove duplicate event enabled check.
  * Fix: event notification capture: validate buffer length.
  * Fix: handle capture page faults as skip field.
  * Fix: event notification capture error handling.
  * Fix: capture_sequence_element_{un,}signed: handle user-space
    input.
  * Fix: notification capture: handle userspace strings.
  * Implement lttng_msgpack_write_user_str.
  * Fix: bytecode interpreter: LOAD_FIELD: handle user fields.
  * Fix: move "user" attribute from field to type.
  * Introduce lttng_copy_from_user_check_nofault.
  * Fix: adjust range v5.10.137 in block probe.
  * Fix: handle integer capture page faults as skip field.
- Drop lttng-modules-2.13.4-linux-5.19.patch: merged upstream.
==== lttng-ust ====
Version update (2.13.4 -> 2.13.5)
- Update to version 2.13.5:
  * Fix: bytecode validator: reject specialised load field/context
    ref instructions.
  * Fix: bytecode validator: reject specialised load instructions.
  * Fix: event notification capture: validate buffer length.
  * Fix: event notification capture error handling.
  * Fix: lttng-ust-comm: wait on wrong child process.
  * fix: 'make dist' without javah.
==== osinfo-db ====
Version update (20220727 -> 20220830)
- Update to database version 20220830
  osinfo-db-20220830.tar.xz
==== patterns-kde ====
Version update (20220215 -> 20221001)
Subpackages: patterns-kde-kde patterns-kde-kde_edutainment
patterns-kde- kde_games patterns-kde-kde_ide patterns-kde-kde_imaging
patterns-kde- kde_internet patterns-kde-kde_multimedia
patterns-kde-kde_office patterns- kde-kde_pim patterns-kde-kde_plasma
patterns-kde-kde_utilities patterns-kde- kde_utilities_opt
patterns-kde-kde_yast
- Update the Qt6 pattern for the 6.4.0 release
- Remove obsolete or missing packages from KDE patterns
==== perl-IO-Socket-SSL ====
Version update (2.074 -> 2.075)
- updated to 2.075
  see /usr/share/doc/packages/perl-IO-Socket-SSL/Changes
  2.075
  - treat SSL_write returning 0 same as previously -1, as suggested by both
    OpenSSL and LibreSSL documentation
  - propagate error from SSL_shutdown, but if the shutdown is caused by an
outer
    SSL error keep the original error
  - small tests fixes
==== permissions ====
Subpackages: chkstat permissions-config
- skip tests on qemu user builds
==== popt ====
Version update (1.18 -> 1.19)
- popt 1.19:
  * various build system fixes
  * various developer visible fixes
  * Fix the handling of superfluous args passed with =
  * Fix multiple resource and memory leaks
  * Fix '=' getting shown for short options
  * Improve random number handling
  * translation updates and documentation improvements
- refresh spec file, run tests, package license in every package,
  and treat all compiler warnings and errors
==== postgresql ====
Version update (14 -> 15)
Subpackages: postgresql-contrib postgresql-llvmjit postgresql-server
- avoid bashisms in /bin/sh based startup script
- Bump to postgresql 15
==== postgresql15 ====
Version update (14.5 -> 15~rc1)
- Fix source URLs
- Update to 15~rc1
  https://www.postgresql.org/about/news/p-2516/
- Create mechanism to specify the latest supported LLVM version.
  Automatically pin to that version if the distribution has a newer
  unsupported default version.
- Disable LLVM JIT on riscv64
- Update to 15~beta4
  https://www.postgresql.org/about/news/p-2507/
- Update to 15~beta3
  https://www.postgresql.org/about/news/p-2496/
==== pragha ====
Subpackages: pragha-lang
- Bump gupnp version requirement to fix Tumbleweed build
==== python-cryptography ====
Version update (37.0.4 -> 38.0.1)
- update to 38.0.1:
  * Fixed parsing TLVs in ASN.1 with length greater than 65535 bytes (typically
    seen in large CRLs).
  * Final deprecation of OpenSSL 1.1.0. The next release of ``cryptography``
    will drop support.
  * We no longer ship ``manylinux2010`` wheels. Users should upgrade to the
    latest ``pip`` to ensure this doesn't cause issues downloading wheels on
    their platform. We now ship ``manylinux_2_28`` wheels for users on new
    enough platforms.
  * Updated the minimum supported Rust version (MSRV) to 1.48.0, from 1.41.0.
    Users with the latest ``pip`` will typically get a wheel and not need Rust
    installed, but check :doc:`/installation` for documentation on installing a
    newer ``rustc`` if required.
  * :meth:`~cryptography.fernet.Fernet.decrypt` and related methods
now accept
    both ``str`` and ``bytes`` tokens.
  * Parsing ``CertificateSigningRequest`` restores the behavior of enforcing
    that the ``Extension`` ``critical`` field must be correctly encoded DER. See
    `the issue <https://github.com/pyca/cryptography/issues/6368>`_
for complete
    details.
  * Added two new OpenSSL functions to the bindings to support an upcoming
    ``pyOpenSSL`` release.
  * When parsing :class:`~cryptography.x509.CertificateRevocationList` and
    :class:`~cryptography.x509.CertificateSigningRequest` values, it is now
    enforced that the ``version`` value in the input must be valid according to
    the rules of :rfc:`2986` and :rfc:`5280`.
  * Using MD5 or SHA1 in :class:`~cryptography.x509.CertificateBuilder` and
    other X.509 builders is deprecated and support will be removed in the next
    version.
  * Added additional APIs to
:class:`~cryptography.x509.certificate_transparency.SignedCertificateT
imestam
p`, including
:attr:`~cryptography.x509.certificate_transparency.SignedCertificateTi
mestamp
.signature_hash_algorithm`,
:attr:`~cryptography.x509.certificate_transparency.SignedCertificateTi
mestamp
.signature_algorithm`,
:attr:`~cryptography.x509.certificate_transparency.SignedCertificateTi
mestamp
.signature`, and
:attr:`~cryptography.x509.certificate_transparency.SignedCertificateTi
mestamp
.extension_bytes`.
  * Added
:attr:`~cryptography.x509.Certificate.tbs_precertificate_bytes`,
allowing
    users to access the to-be-signed pre-certificate data needed for signed
    certificate timestamp verification.
  * :class:`~cryptography.hazmat.primitives.kdf.kbkdf.KBKDFHMAC` and
    :class:`~cryptography.hazmat.primitives.kdf.kbkdf.KBKDFCMAC` now support
:attr:`~cryptography.hazmat.primitives.kdf.kbkdf.CounterLocation.Middl
eFixed
`
    counter location.
  * Fixed :rfc:`4514` name parsing to reverse the order of the RDNs according
    to the section 2.1 of the RFC, affecting method
    :meth:`~cryptography.x509.Name.from_rfc4514_string`.
  * It is now possible to customize some aspects of encryption when serializing
    private keys, using
:meth:`~cryptography.hazmat.primitives.serialization.PrivateFormat.enc
ryption
_builder`.
  * Removed several legacy symbols from our OpenSSL bindings. Users of
pyOpenSSL
    versions older than 22.0 will need to upgrade.
  * Added
    :class:`~cryptography.hazmat.primitives.ciphers.algorithms.AES128` and
    :class:`~cryptography.hazmat.primitives.ciphers.algorithms.AES256` classes.
    These classes do not replace
    :class:`~cryptography.hazmat.primitives.ciphers.algorithms.AES` (which
    allows all AES key lengths), but are intended for applications where
    developers want to be explicit about key length.
==== python-pyspnego ====
Version update (0.4.0 -> 0.5.0)
- update to 0.5.0:
  * Added the `auth_stage` extra_info for a CredSSP context to give a human
    friendly indication of what sub auth stage it is up to.
  * Added the `protocol_version` extra_info for a CredSSP context to return the
    negotiated CredSSP protocol version.
  * Added the `credssp_min_protocol` keyword argument for a CredSSP
context to
    set a minimum version the caller will accept of the peer.
  * This can be set to `5+` to ensure the peer supports and applies
the mitigations for CVE-2018-0886.
  * Added safeguards when trying to retrieve the completed context attributes
    of `NegotiateProxy` before any contexts have been set up
==== python-pyudev ====
Version update (0.23.2+14 -> 0.24.0)
- update to 0.24.0:
  * Remove six dependency
  * Drop pylint tasks
  * Support python 3.9 and 3.10
==== python-requests-toolbelt ====
- Add patch stop-using-pyopenssl-compat.patch:
  * Stop importing (and using!) a pyopenssl compatibility module
    to avoid a DeprecationWarning.
==== shim ====
- shim-install: ensure grub.cfg created is not overwritten after
  installing grub related files
==== tdb ====
Version update (1.4.6 -> 1.4.7)
Subpackages: libtdb1 python3-tdb
- update to 1.4.7:
  * configure/Makefile: export PYTHONHASHSEED=1 in all 'configure/Makefile'
scripts
  * lib:tdb: Reformat shell scripts
- spec file cleanups
==== xapian-core ====
Version update (1.4.20 -> 1.4.21)
- update to 1.4.21:
  * Stop trying to check for incompatible C++ ABI between the compiler used to
    build xapian-core and the compiler used to build code using xapian-core.
  * Fix new warnings from GCC 12.
  * Avoid undefined value use when unpacking a key in a corrupted glass
docdata
    table.  We now skip further checks on the entry in this case.
  * Merge allocations in MSVC directory reading compatibility code so we can
    allocate in a single malloc() call.
  * Add accept() wrapper which checks an assumption that Microsoft's
SOCKET type
    only actually holds 32 bit values even in 64 bit platforms and throws an
    exception if violated.
  * Eliminate a use of sprintf.
  * Squash some unhelpful MSVC deprecation warnings.
  * Declare dummy invalid parameter handler noexcept to fix a warning
from MSVC.
  * Include <stdlib.h> in configure check for sys_errlist as that's where it is
    with mingw and MSVC.
==== yast2-network ====
Version update (4.5.7 -> 4.5.8)
- Fixed issue when writing the NetworkManager config without a
  gateway (bsc#1203866)
- 4.5.8
==== yast2-trans ====
Version update (84.87.20220923.15c6c6ee84 ->
84.87.20220930.817f83073b)
Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg
yast2-trans-bn yast2- trans-bs yast2-trans-ca yast2-trans-cs
yast2-trans-cy yast2-trans-da yast2-trans- de yast2-trans-el
yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa
yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu
yast2-trans-hi yast2- trans-hr yast2-trans-hu yast2-trans-id
yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka
yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-
trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa
yast2-trans- pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro
yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl
yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2- trans-th
yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa
yast2-trans- xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu
- Update to version 84.87.20220930.817f83073b:
  * Translated using Weblate (Russian)
  * Translated using Weblate (Russian)
  * Translated using Weblate (Russian)
  * Translated using Weblate (Russian)
  * Translated using Weblate (Russian)
  * Translated using Weblate (Russian)
  * Translated using Weblate (Russian)
  * Translated using Weblate (Russian)
  * Translated using Weblate (Russian)
  * Translated using Weblate (Russian)
  * Translated using Weblate (Russian)
  * Translated using Weblate (Russian)
  * Translated using Weblate (Russian)
  * Translated using Weblate (Russian)
  * Translated using Weblate (Russian)
  * Translated using Weblate (Russian)
  * Translated using Weblate (Russian)
  * Translated using Weblate (Russian)
  * Translated using Weblate (Russian)
  * New POT for text domain 'base'.
  * Translated using Weblate (Czech)
  * Translated using Weblate (Romanian)
  * Translated using Weblate (Romanian)
  * New POT for text domain 'journal'.
  * Translated using Weblate (Slovak)
  * Translated using Weblate (Dutch)
  * Translated using Weblate (French)
  * Translated using Weblate (Catalan)
  * Translated using Weblate (Japanese)
  * New POT for text domain 'storage'.
  * New POT for text domain 'ntp-client'.