Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=3&version=Tumbleweed&build=20220928 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ffmpeg-5 (5.1.1 -> 5.1.2) libffi libimagequant libqt5-qtbase (5.15.5+kde166 -> 5.15.6+kde177) libqt5-qtconnectivity (5.15.5+kde5 -> 5.15.6+kde5) libqt5-qtdeclarative (5.15.5+kde19 -> 5.15.6+kde20) libqt5-qtgraphicaleffects (5.15.5+kde0 -> 5.15.6+kde0) libqt5-qtimageformats (5.15.5+kde3 -> 5.15.6+kde4) libqt5-qtlocation (5.15.5+kde3 -> 5.15.6+kde3) libqt5-qtmultimedia (5.15.5+kde1 -> 5.15.6+kde1) libqt5-qtnetworkauth (5.15.5+kde0 -> 5.15.6+kde0) libqt5-qtquickcontrols (5.15.5+kde0 -> 5.15.6+kde0) libqt5-qtquickcontrols2 (5.15.5+kde6 -> 5.15.6+kde5) libqt5-qtsensors (5.15.5+kde0 -> 5.15.6+kde0) libqt5-qtserialport (5.15.5+kde0 -> 5.15.6+kde0) libqt5-qtspeech (5.15.5+kde1 -> 5.15.6+kde1) libqt5-qtsvg (5.15.5+kde10 -> 5.15.6+kde9) libqt5-qttools (5.15.5+kde1 -> 5.15.6+kde1) libqt5-qtvirtualkeyboard (5.15.5+kde3 -> 5.15.6+kde1) libqt5-qtwayland (5.15.5+kde39 -> 5.15.6+kde49) libqt5-qtwebchannel (5.15.5+kde3 -> 5.15.6+kde3) libqt5-qtwebengine libqt5-qtwebsockets (5.15.5+kde3 -> 5.15.6+kde2) libqt5-qtx11extras (5.15.5+kde0 -> 5.15.6+kde0) libqt5-qtxmlpatterns (5.15.5+kde0 -> 5.15.6+kde0) liburing mozilla-nss (3.81 -> 3.82) nautilus perl-Mojolicious (9.26 -> 9.27) python-pyzmq (23.2.1 -> 24.0.1) rpm-config-SUSE (20220421 -> 20220926) rubygem-net-ssh tcl timezone (2022c -> 2022d) timezone-java (2022c -> 2022d) unbound (1.16.2 -> 1.16.3) unzip yast2-ntp-client (4.5.0 -> 4.5.1) yast2-storage-ng (4.5.8 -> 4.5.9) yast2-trans (84.87.20220917.4034baecb2 -> 84.87.20220923.15c6c6ee84) === Details === ==== ffmpeg-5 ==== Version update (5.1.1 -> 5.1.2) Subpackages: libavcodec59 libavdevice59 libavfilter8 libavformat59 libavutil57 libpostproc56 libswresample4 libswscale6 - Update to release 5.1.2 * Add more field checks, add checks against overflows, or outright use larger integer types. * avformat/dashdec: Fix crash on invalid input/ENOMEM, fix leak * lavc/videotoolbox: do not pass AVCodecContext to decoder output callback * lavc/pthread_frame: always transfer stashed hwaccel state * avcodec/arm/sbcenc: avoid callee preserved vfp registers * avformat/riffdec: don't unconditionally overwrite WAVEFORMATEXTENSIBLE layout * avfilter/vf_scale: overwrite the width and height expressions with the original values * lavc/pthread_frame: avoid leaving stale hwaccel state in worker threads ==== libffi ==== - add riscv-rvalue-ext.patch to fix libffi for RISCV64 ==== libimagequant ==== - disable sse on non-x86 architectures ==== libqt5-qtbase ==== Version update (5.15.5+kde166 -> 5.15.6+kde177) Subpackages: libQt5Concurrent5 libQt5Core5 libQt5DBus5 libQt5Gui5 libQt5Network5 libQt5OpenGL5 libQt5PrintSupport5 libQt5Sql5 libQt5Sql5-mysql libQt5Sql5-sqlite libQt5Test5 libQt5Widgets5 libQt5Xml5 libqt5-qtbase-platformtheme-gtk3 - Update to version 5.15.6+kde177, rebased upstream: * QStringIterator: fix UB [2/2]: use std::less to compare pointers * QStringIterator: fix UB [1/2]: use has{Next,Previous}() more * Assert validity in QStringIterator's unchecked methods * eglfs: Fix crash when painting the mouse cursor in a multiscreen setup * xcb: fix the build of native painting * QNetworkReplyFileImpl: Don't emit 'finished' in the ctor * Fix typo in code * Fix typo in QAbstractItemModelTester * sqldrivers: Fix typo in error message * network: Fix typos in messages * Remove XCB_EVENT_MASK_RESIZE_REDIRECT for Qt:WindowTransparentForInput * Fix build without dbus support * Revert "Remove the dead code for blocking methods from QtConcurrent" * QAIV: Reset double-click flag in mousePressEvent * Fix possible undefined behavior in clear_thread_data * Revert "xcb: implement missing bits from ICCCM 4.1.4 WM_STATE handling" * 3rdparty: apply a fix to the last zlib fix * add color picking support on wayland using the XDG desktop portal * Use class scope to refer to static function * fix AT_SPI_BUS_ADDRESS actually working * 3rdparty/zlib: backport the fix to CVE-2022-37434 * widgets: avoid setting X11BypassWindowManagerHint in QToolBar * Don't access QObjectPrivate::declarativeData unguarded * Apply CVE-2022-27404-27405-27406-qtbase-5.15.diff * xcb: Update _NET_SUPPORTED when the window manager changes it * Revert "CUPS: Add support for accessible IPP printers" * QtConcurrent::ReduceKernel: fix race conditions * Fix crash in QKmsDevice::createScreenForConnector * Fix compile with MinGW-W64 9.0.0: Redefinition of 'struct _FILE_ID_INFO' * Fallback to another file dialog implementation when XDP is inaccessible * Add QXdgDesktopPortalFileDialog::useNativeFileDialog() * qmake: Ignore stderr when determining the macOS SDK version * Fix QDBusInterface crashing with empty path on construction * Network: Update expired cert * Android: guard getStateCount() with correct VERSION.SDK_INT * Add note on selecting the device which is used to run tests on Android * fc: Clean up current config on shutdown * Doc: Add see also links to operator== and operator!= * Fix framework dependencies in .la files * Fix Style java code format and warnings * wasm: fix network crash on abort * Update bundled Freetype to 2.10.4 * CMake: Prevent multiple creation of the targets 'aab' and 'apk' * Android: Fix fullscreen bottom bar hide issues * xkb.compose: get locale from user env settings * xcb: implement missing bits from ICCCM 4.1.4 WM_STATE handling * macOS: Fix leaked NSMutableArray in applicationActivationChanged * StyleSheet: Use rule for ComboBox in embedded QLineEdit * Fix hidden API access for Android style * Fix memory leak if eXIf has incorrect crc * Fix invalid snippet reference in qtnetwork-index.html * Doc: Fix QList<T>::fromVector example in QList<T> documentation * Turn off feature timezone for emscripten * QXpmHandler: actually limit characters-per-pixel to four * QXpmHandler: fix re-entrancy bug in xpm_color_name * QObject: cleanup the orphaned connection lists on destruction * Fix crash in concurrent disconnect * cleanOrphanedConnectionsImpl: Allow to skip locking * QOrderedMutexLocker: Disable copy and provide explicit dismiss function * Handle even more include in enum cases * macOS: Stop relying on balanced CGDisplay reconfiguration callbacks * QFuture: fix result reporting in the filter mode * Doc: Minor cleanup in QWidget docs * Don't report results when the results list is empty * Windows QPA: Fix coordinates reported through UI Automation * Make QSqlRecord benchmarks non-fatuous * Halve the data-set size of tst_QSqlRecord::benchmarkRecord() * Update deprecated NSAccessibility method * H2: emit encrypted for at least the first reply, similar to H1 * QFile benchmark: only set up and tear down the data directory once * Unify and clean up two identical tst_qfile::*_data() functions * Move QSKIP()s to _data() functions in QFile benchmark * Scale image with MDI icons using the correction factor * QNetworkDiskCache: Fix tracking of size during storeItem() * Always update the input method when QLineEdit receives focus * Fix qdbusperformance and qprocess benchmarks * QListView: don't scroll if selected items are removed * macOS: Detect sandboxed state for command line apps * Update obsoleted functionality in preparation for Qt 6 * Change QCollator's default locale to QLocale().collation() * QDuplicateTracker: reserve() for at least Prealloc elements * Point out that QTreeView's expandAll/expandToDepth don't fetch data * QDuplicateTracker: fix the static buffer size calculation * macOS: Don't make frameless tool windows miniaturizable * macOS: Don't mangle QByteArray settings with @ prefix by decoding as UTF-8 * tst_QtConcurrentThreadEngine: fix the threadCount() test * Fix QTextFormat::FullWidthSelection for right-to-left text layouts * Fix auto completion in QFileDialog on Windows * QFile benchmark: always use Unbuffered for QFSFileEngine tests * Fix QDirIterator benchmark to actually find its test data * macOS: Keep NSWindow alive after handling windowShouldClose callback * Windows QPA: Fix dock widget drag&drop failure * Remove the dead code for blocking methods from QtConcurrent * QtConcurrent: call the non-blocking versions in blocking ones * macOS 10.15: Fix focus frame for combo boxes * Fix placement of placeholder text in QLineEdits with action icons * macOS: fix separator actions not showing in menus * QIcc: Update test for invalid values ... changelog too long, skipping 52 lines ... - Refresh 0001-Add-remote-print-queue-support.patch ==== libqt5-qtconnectivity ==== Version update (5.15.5+kde5 -> 5.15.6+kde5) Subpackages: libQt5Bluetooth5 libQt5Bluetooth5-imports libQt5Nfc5 libQt5Nfc5-imports libqt5-qtconnectivity-tools - Update to version 5.15.6+kde5, rebased upstream: * Doc: Fix typo * QWinRTBluetoothDeviceDiscoveryWorker: Add error handling * Improve detection of enabled location service on SDK<28 ==== libqt5-qtdeclarative ==== Version update (5.15.5+kde19 -> 5.15.6+kde20) - Update to version 5.15.6+kde20, rebased upstream: * Reset currentChanges if currentChanges is active when refilling listView * QmlPreview: Protect QQmlPreviewFileLoader::load with another mutex * Use QDateTime to get offsets for emscripten (wasm) * Doc: fix AnchorChanges typo * Avoid crash for deep aliases * doc: Improve the Input Handlers index page * DropArea: Tell qdoc that DropArea indeed inherits Item * QV4::Heap::GeneratorObject: remove unused member * Sync shadereffect materialType cleanup between renderloops * Avoid infinite loop in designer support * Pass the focus reason through to the control on mouse press * Update QQuickImage's DPR if re-loading the image didn't * Doc: Document matrix4x4 transformation functions * Add tests of matrix4x4 transformation functions * Handle QScreen::physicalDotsPerInchChanged changes for the initial screen * Don't let PointerHandler steal mouse grab from keepMouseGrab layer * Emit grabChanged() from DragHandler and PinchHandler * Resolve data race on QQmlPropertyCache's arguments object * Resolve data race in QQmlPropertyData in a minimally invasive way * Register the QML builtin sequence metatypes only once * doc: Improve QQuickItem::containmentMask() docs * When setting the line dash to be an empty array reset the style to Solid * Fix QtQtuickImage docs: correct properties' signatures * crash fix - avoid wrong gcc optimization * Fix warnings * doc: Use DragHandler rather than MouseArea in the externaldrag snippet * Ensure model is in context if required properties are not used * QQuickItem::forceActiveFocus(): actually force active focus * a11y: make links have pressAction first * Set a11y role for QQuickTextInput to EditableText ==== libqt5-qtgraphicaleffects ==== Version update (5.15.5+kde0 -> 5.15.6+kde0) - Update to version 5.15.6+kde0, rebased upstream: * No code changes ==== libqt5-qtimageformats ==== Version update (5.15.5+kde3 -> 5.15.6+kde4) - Update to version 5.15.6+kde4, rebased upstream: * jp2: use new APIs for jasper 3 * Patch bundled libtiff to compile on Integrity * Update bundled libtiff to version 4.3.0 ==== libqt5-qtlocation ==== Version update (5.15.5+kde3 -> 5.15.6+kde3) Subpackages: libQt5Location5 libQt5Positioning5 libQt5PositioningQuick5 - Update to version 5.15.6+kde3, rebased upstream: * QGeoCoordinate: fix toString() conversion ==== libqt5-qtmultimedia ==== Version update (5.15.5+kde1 -> 5.15.6+kde1) - Update to version 5.15.6+kde1, rebased upstream: * No code changes ==== libqt5-qtnetworkauth ==== Version update (5.15.5+kde0 -> 5.15.6+kde0) - Update to version 5.15.6+kde0, rebased upstream: * Doc: Remove mention of Mozilla Persona ==== libqt5-qtquickcontrols ==== Version update (5.15.5+kde0 -> 5.15.6+kde0) - Update to version 5.15.6+kde0, rebased upstream: * No code changes ==== libqt5-qtquickcontrols2 ==== Version update (5.15.5+kde6 -> 5.15.6+kde5) Subpackages: libQt5QuickControls2-5 libQt5QuickTemplates2-5 - Update to version 5.15.6+kde5, rebased upstream: * Revert "ToolTip: use contentWidth of Text contentItem to account for newlines" * Doc: make it clear that Page doesn't render its title text * QQuickComboBox: fix acceptableInput being wrong if no validator was set * Add recursion guard to QQuickApplicationWindowPrivate::relayout() * Fix SwipeDelegate losing swipes to parent flickables * Blacklist some flaky tst_qquickdrawer functions on openSUSE * Fix warnings in some tests * ToolTip: use contentWidth of Text contentItem to account for newlines ==== libqt5-qtsensors ==== Version update (5.15.5+kde0 -> 5.15.6+kde0) Subpackages: libQt5Sensors5 libQt5Sensors5-imports - Update to version 5.15.6+kde0, rebased upstream: * No code changes ==== libqt5-qtserialport ==== Version update (5.15.5+kde0 -> 5.15.6+kde0) - Update to version 5.15.6+kde0, rebased upstream: * No code changes ==== libqt5-qtspeech ==== Version update (5.15.5+kde1 -> 5.15.6+kde1) Subpackages: libQt5TextToSpeech5 libqt5-qtspeech-plugin-speechd - Update to version 5.15.6+kde1, rebased upstream: * No code changes ==== libqt5-qtsvg ==== Version update (5.15.5+kde10 -> 5.15.6+kde9) - Update to version 5.15.6+kde9, rebased upstream: * Fix assert with wrong number of argument to animateTransform * Avoid undefined behavior when painter transform goes oob ==== libqt5-qttools ==== Version update (5.15.5+kde1 -> 5.15.6+kde1) Subpackages: libQt5Designer5 libQt5Help5 libqt5-qdbus libqt5-qtpaths - Update to version 5.15.6+kde1, rebased upstream: * windeployqt: Account for debug version of ICU library when deploying * Doc: Fix a typo in the "Introduction to QDoc" documentation page * Doc: Remove mention of custom filters * Examples: Don't use QDir::separator() in internal paths * Assistant: Make QResultWidget linkColor stylable ==== libqt5-qtvirtualkeyboard ==== Version update (5.15.5+kde3 -> 5.15.6+kde1) Subpackages: libQt5HunspellInputMethod5 libQt5VirtualKeyboard5 libqt5-qtvirtualkeyboard-hunspell - Update to version 5.15.6+kde1, rebased upstream: * Doc: Add readonly command to VirtualKeyboardSettings::availableLocales * pinyin: Do not accept invalid input as pinyin initial * pinyin: Prevent crash when pinyin dictionary cannot be loaded * plugins/openwnn: reset() should not modify pre-edit text * plugins/openwnn: Set word candidate index when item is selected ==== libqt5-qtwayland ==== Version update (5.15.5+kde39 -> 5.15.6+kde49) Subpackages: libQt5WaylandClient5 libQt5WaylandCompositor5 - Update to version 5.15.6+kde49, rebased upstream: * Call `finishDrag()` in `QWaylandDataDevice::dragSourceCancelled()` * Client: support high-dpi mode for window icon * Avoid calling requestUpdate from wrong thread * Fix missing update when toggling client-side decorations * Use CRLF line delimiter for text/uri-list data * Fix compile tests * client: Synthesize enter/leave event for popup in xdg-shell * Guard mResizeDirty by the correctMutex * Client: clear focus on touch cancel * Build fixes for GCC 11 * Only close popup in the the hierchary * Cleanup up all subsurface QQuickItems correctly * linux-dmabuf-unstable-v1: Fix importing dmabuf buffers with modifiers * Add BlankCursor for cursor names map * client: Gracefully handle shutdown and window hiding - Drop patches, now upstream: * 0002-Guard-mResizeDirty-by-the-correctMutex.patch ==== libqt5-qtwebchannel ==== Version update (5.15.5+kde3 -> 5.15.6+kde3) Subpackages: libQt5WebChannel5 libQt5WebChannel5-imports - Update to version 5.15.6+kde3, rebased upstream: * No code changes ==== libqt5-qtwebengine ==== - Use python 3.9 to build qtwebengine on Leap 15. ==== libqt5-qtwebsockets ==== Version update (5.15.5+kde3 -> 5.15.6+kde2) Subpackages: libQt5WebSockets5 libQt5WebSockets5-imports - Update to version 5.15.6+kde2, rebased upstream: * Clear frame before emitting signals to prevent duplicating messages ==== libqt5-qtx11extras ==== Version update (5.15.5+kde0 -> 5.15.6+kde0) - Update to version 5.15.6+kde0, rebased upstream: * Update obsoleted functionality in preparation for Qt 6 ==== libqt5-qtxmlpatterns ==== Version update (5.15.5+kde0 -> 5.15.6+kde0) Subpackages: libQt5XmlPatterns5 libqt5-qtxmlpatterns-imports - Update to version 5.15.6+kde0, rebased upstream: * No code changes ==== liburing ==== - skip checks on qemu_linux_user builds ==== mozilla-nss ==== Version update (3.81 -> 3.82) Subpackages: libfreebl3 libfreebl3-hmac libsoftokn3 libsoftokn3-hmac mozilla-nss-certs mozilla-nss-tools - update to NSS 3.82 * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length * bmo#1784724 - Initialize local variables in TlsConnectTestBase::ConnectAndCheckCipherSuite * bmo#1784191 - Cast the result of GetProcAddress * bmo#1681099 - pk11wrap: Tighten certificate lookup based on PKCS #11 URI. ==== nautilus ==== Subpackages: gnome-shell-search-provider-nautilus libnautilus-extension4 - Add nautilus-revert-extra-large-thumbnails.patch: Revert "thumbnails: Create larger thumbnails for higher density displays"; patch taken from upstream merge request (glgo#GNOME/nautilus#2487, boo#1203697). ==== perl-Mojolicious ==== Version update (9.26 -> 9.27) - updated to 9.27 see /usr/share/doc/packages/perl-Mojolicious/Changes 9.27 2022-09-10 - Added support for static assets. - Added support for JSON and plain text exceptions. - Removed experimental status from capture method in Mojo::Log. - Added asset_dir attribute to Mojolicious::Static. - Added asset_path method to Mojolicious::Static. - Added url_for_asset method to Mojolicious::Controller. - Added reply->html_exception, reply->html_not_found, reply->json_exception, reply->json_not_found, reply->http_exception, reply->http_not_found, reply->txt_exception and reply->txt_not_found helpers to Mojolicious::Plugin::DefaultHelpers. - Added asset_tag helper to Mojolicious::Plugin::TagHelpers. - Fixed a bug where async rendering did not work properly in the before_dispatch hook. (andrii-suse) ==== python-pyzmq ==== Version update (23.2.1 -> 24.0.1) - update to version 24.0.1: * Fix several possible resource warnings and deprecation warnings when cleaning up contexts and sockets, especially in pyzmq's own tests and when implicit teardown of objects is happening during process teardown. - update to version 24.0.0: * Breaking changes: + Due to a libzmq bug causing unavoidable crashes for some users, Windows wheels no longer bundle libzmq with AF_UNIX support. In order to enable AF_UNIX on Windows, pyzmq must be built from source, linking an appropriate build of libzmq (e.g. libzmq-v142). AF_UNIX support will be re-enabled in pyzmq wheels when libzmq published fixed releases. + Using a {class}zmq.Context as a context manager or deleting a context without closing it now calls {meth}zmq.Context.destroy at exit instead of {meth}zmq.Context.term. This will have little effect on most users, but changes what happens when user bugs result in a context being implicitly destroyed while sockets are left open. In almost all cases, this will turn what used to be a hang into a warning. However, there may be some cases where sockets are actively used in threads, which could result in a crash. To use sockets across threads, it is critical to properly and explicitly close your contexts and sockets, which will always avoid this issue. ==== rpm-config-SUSE ==== Version update (20220421 -> 20220926) - Update to version 20220926: * Revert macros.debuginfo and prefer a direct rpm patch * Fix kernel builds after #59 * Redefine %__debug_install_post to simplify debuginfo setup * Fix bug not using custom name for summary and description in language packages (boo#1137381) ==== rubygem-net-ssh ==== - limit to ruby 2.7 and 3.1 on leap ==== tcl ==== - skip more tests with qemu_user builds (e.g. riscv64) ==== timezone ==== Version update (2022c -> 2022d) - timezone update 2022d: * Palestine transitions are now Saturdays at 02:00 * Simplify three Ukraine zones into one ==== timezone-java ==== Version update (2022c -> 2022d) - timezone update 2022d: * Palestine transitions are now Saturdays at 02:00 * Simplify three Ukraine zones into one ==== unbound ==== Version update (1.16.2 -> 1.16.3) Subpackages: libunbound8 unbound-anchor - update to 1.16.3 fixes Non-Responsive Delegation Attack (CVE-2022-3204) ==== unzip ==== Subpackages: unzip-doc - Build unzip-rcc using multibuild and update unzip-rcc.spec file ==== yast2-ntp-client ==== Version update (4.5.0 -> 4.5.1) - Skip to write and update netconfig configuration when netconfig executable does not exist (bsc#1198066, bsc#1202748) - 4.5.1 ==== yast2-storage-ng ==== Version update (4.5.8 -> 4.5.9) - Decouple user interface logic from the probing process (related to gh#yast/d-installer#247). - 4.5.9 ==== yast2-trans ==== Version update (84.87.20220917.4034baecb2 -> 84.87.20220923.15c6c6ee84) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20220923.15c6c6ee84: * New POT for text domain 'bootloader'. * New POT for text domain 'bootloader'. * New POT for text domain 'kdump'.