Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=3&version=Tumbleweed&build=20220804 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: Mesa (22.1.3 -> 22.1.4) Mesa-drivers (22.1.3 -> 22.1.4) MozillaFirefox (101.0.1 -> 103.0.1) apparmor (3.0.5 -> 3.0.6) bind fetchmail (6.4.31 -> 6.4.32) firewalld gcal gdb (11.1 -> 12.1) gnome-settings-daemon gnutls (3.7.6 -> 3.7.7) iso-codes (4.10.0 -> 4.11.0) kernel-source (5.18.12 -> 5.18.15) libapparmor (3.0.5 -> 3.0.6) libavif libblockdev (2.26 -> 2.27) libgcrypt libgsm (1.0.19 -> 1.0.20) libnvme (1.1~rc0 -> 1.1) libvirt (8.5.0 -> 8.6.0) mokutil (0.5.0 -> 0.6.0) mozilla-nss (3.79 -> 3.80) mpg123 (1.30.1 -> 1.30.2) mxml (3.3 -> 3.3.1) nano nvme-cli (2.1~rc0 -> 2.1.1) oath-toolkit pipewire polkit poppler (22.07.0 -> 22.08.0) poppler-qt5 (22.07.0 -> 22.08.0) python-Genshi (0.7.5 -> 0.7.7) python-cffi (1.15.0 -> 1.15.1) python-cryptography (37.0.2 -> 37.0.4) python-gobject (3.42.1 -> 3.42.2) python-hatchling (1.4.1 -> 1.6.0) python-httpcore (0.14.7 -> 0.15.0) python-importlib-metadata (4.11.4 -> 4.12.0) python-libvirt-python (8.5.0 -> 8.6.0) python-numexpr python-psutil python-pycairo python-scipy python-urllib3 (1.26.9 -> 1.26.11) python-wcwidth read-only-root-fs (1.0+git20200730.1243fd0 -> 1.0+git20220801.cbb90bc) rsync tiff tmux (3.2a -> 3.3a) unbound (1.16.1 -> 1.16.2) util-linux-systemd vim (9.0.0073 -> 9.0.0135) webkit2gtk3 (2.36.4 -> 2.36.5) webkit2gtk3-soup2 (2.36.4 -> 2.36.5) xdg-utils (1.1.3+20201113 -> 1.1.3+20210805) xen (4.16.1_02 -> 4.16.1_06) yast2-trans (84.87.20220729.608d4643aa -> 84.87.20220730.27a80cdf03) zlib-ng-compat === Details === ==== Mesa ==== Version update (22.1.3 -> 22.1.4) Subpackages: Mesa-dri-devel Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - update to 22.1.4: * anv: disable non uniform indexing of UBOs * anv: use the right helper to invalidate memory * intel/fs: ray query fix for global address * isl: add new helper for format component compatibility * radeonsi: fix random PS wave size * r300: Keep rc_rename_regs() from overflowing * aco/ra: update register file when updating phi definition * radv: Fix vkCmdCopyQueryResults -> vkCmdResetPool hazard ==== Mesa-drivers ==== Version update (22.1.3 -> 22.1.4) Subpackages: Mesa-dri Mesa-gallium Mesa-libva - update to 22.1.4: * anv: disable non uniform indexing of UBOs * anv: use the right helper to invalidate memory * intel/fs: ray query fix for global address * isl: add new helper for format component compatibility * radeonsi: fix random PS wave size * r300: Keep rc_rename_regs() from overflowing * aco/ra: update register file when updating phi definition * radv: Fix vkCmdCopyQueryResults -> vkCmdResetPool hazard ==== MozillaFirefox ==== Version update (101.0.1 -> 103.0.1) Subpackages: MozillaFirefox-translations-common - Mozilla Firefox 103.0.1 * Enabled hardware acceleration on newer AMD cards. * Fixed a crash on Firefox shutdown caused by a bug in the audio manager - Mozilla Firefox 103.0 https://www.mozilla.org/en-US/firefox/103.0/releasenotes MFSA 2022-28 (bsc#1201758) * CVE-2022-36319 (bmo#1737722) Mouse Position spoofing with CSS transforms * CVE-2022-36317 (bmo#1759951) Long URL would hang Firefox for Android * CVE-2022-36318 (bmo#1771774) Directory indexes for bundled resources reflected URL parameters * CVE-2022-36314 (bmo#1773894) Opening local <code>.lnk</code> files could cause unexpected network loads * CVE-2022-36315 (bmo#1762520) Preload Cache Bypasses Subresource Integrity * CVE-2022-36316 (bmo#1768583) Performance API leaked whether a cross-site resource is redirecting * CVE-2022-36320 (bmo#1759794, bmo#1760998) Memory safety bugs fixed in Firefox 103 * CVE-2022-2505 (bmo#1769739, bmo#1772824) Memory safety bugs fixed in Firefox 103 and 102.1 - requires NSS >= 3.80 rust = 1.61 rust-cbindgen >= 0.24.3 - Move %limit_build set before mozilla config to actually set the value of %jobs to MOZ_MAKE_FLAGS to fix build on aarch64 - Firefox 102.0.1: * Fixed: Fixed bookmarks sidebar flashing white when opened in dark mode (bmo#1776157) * Fixed: Fixed multilingual spell checking not working with content in both English and a non-Latin alphabet (bmo#1773802) * Fixed: Developer tools: Fixed an issue where the console output keep getting scrolled to the bottom when the last visible message is an evaluation result (bmo#1776262) * Fixed: Fixed *Delete cookies and site data when Firefox is closed* checkbox getting disabled on startup (bmo#1777419) * Fixed: Various stability fixes - Firefox 102.0 * You can now disable automatic opening of the download panel every time a new download starts * Firefox now mitigates query parameter tracking when navigating sites in ETP strict mode * Improved security by moving audio decoding into a separate process with stricter sandboxing, thus improving process isolation * https://www.mozilla.org/en-US/firefox/102.0/releasenotes MFSA 2022-24 (bsc#1200793) * CVE-2022-34479 (bmo#1745595) A popup window could be resized in a way to overlay the address bar with web content * CVE-2022-34470 (bmo#1765951) Use-after-free in nsSHistory * CVE-2022-34468 (bmo#1768537) CSP sandbox header without `allow-scripts` can be bypassed via retargeted javascript: URI * CVE-2022-34482 (bmo#845880) Drag and drop of malicious image could have led to malicious executable and potential code execution * CVE-2022-34483 (bmo#1335845) Drag and drop of malicious image could have led to malicious executable and potential code execution * CVE-2022-34476 (bmo#1387919) ASN.1 parser could have been tricked into accepting malformed ASN.1 * CVE-2022-34481 (bmo#1483699, bmo#1497246) Potential integer overflow in ReplaceElementsAt * CVE-2022-34474 (bmo#1677138) Sandboxed iframes could redirect to external schemes * CVE-2022-34469 (bmo#1721220) TLS certificate errors on HSTS-protected domains could be bypassed by the user on Firefox for Android * CVE-2022-34471 (bmo#1766047) Compromised server could trick a browser into an addon downgrade * CVE-2022-34472 (bmo#1770123) Unavailable PAC file resulted in OCSP requests being blocked * CVE-2022-34478 (bmo#1773717) Microsoft protocols can be attacked if a user accepts a prompt * CVE-2022-2200 (bmo#1771381) Undesired attributes could be set as part of prototype pollution * CVE-2022-34480 (bmo#1454072) Free of uninitialized pointer in lg_init * CVE-2022-34477 (bmo#1731614) MediaError message property leaked information on cross- origin same-site pages * CVE-2022-34475 (bmo#1757210) HTML Sanitizer could have been bypassed via same-origin script via use tags * CVE-2022-34473 (bmo#1770888) HTML Sanitizer could have been bypassed via use tags * CVE-2022-34484 (bmo#1763634, bmo#1772651) Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11 * CVE-2022-34485 (bmo#1768409, bmo#1768578) Memory safety bugs fixed in Firefox 102 - requires ... changelog too long, skipping 11 lines ... - add some more returns to the no-return-patch ==== apparmor ==== Version update (3.0.5 -> 3.0.6) Subpackages: apparmor-abstractions apparmor-docs apparmor-parser apparmor-profiles apparmor-utils pam_apparmor python3-apparmor - update to AppArmor 3.0.6 - fix LTO build in the parser - remove dbus deny rule in abstractions/exo-open - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.6 for the detailed upstream changelog - drop upstream patch dirtest-sort-mr900.diff ==== bind ==== Subpackages: bind-doc bind-utils - Add systemd drop-in directory for named service [bsc#1201689, bind.spec] ==== fetchmail ==== Version update (6.4.31 -> 6.4.32) Subpackages: fetchmailconf - Update to 6.4.32: * Use configure to find rst2html, some systems install it only with .py suffix, others only without, and some install both. * Update README.maintainer * Translations updated. - Reapplied patches - Add 44-uncorrupt_runfetchmail.patch to clean up some contrib/ scripts (gl#fetchmail/fetchmail#44). ==== firewalld ==== Subpackages: firewalld-bash-completion firewalld-zsh-completion python3-firewall - readd ipset buildrequires to reenable ipset support (bsc#1202043) - readd ebtables too, as there is no builtin support. ==== gcal ==== - use -D_FORTIFY_SOURCE=2 to fix crashes ==== gdb ==== Version update (11.1 -> 12.1) - Maintenance script qa.sh: * Add SLE-12/x86_64 to "known clean configs". * Add fail for PR29405. * Add fail for PR26915. - Patches added: * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch - Maintenance script qa.sh: * Remove PR29247 internal-error. * Add SLE-15/aarch64 to "known clean configs". - Patches added: * gdb-fix-watchpoints-triggered.patch - Maintenance script qa.sh: * Add kfails for PR25038, PR29253, and PR29423. * Remove gdb.mi/mi-var-invalidate-shlib.exp kfails. - Mention qa-local.sh, qa-remote.sh and README.qa as sources. - Maintenance script qa-local.sh: * Use have_combo consistently. - Maintenance script qa.sh: * Add kfail_aarch64. * Add PR29419/PR29409 kfails. * Update PR29247 kfails. - Patches added: * make-gdb.ada-float-bits.exp-more-generic.patch * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch - Actually apply fixup-gdb-test-bt-cfi-without-die.patch and fixup-2-gdb-rhbz1553104-s390x-arch12-test.patch. - Also remove gdb-6.5-readline-long-line-crash-test.patch from patches list in gdb.spec. - Patches added: * powerpc-add-support-for-ieee-128-bit-format.patch * powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch * gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch * powerpc-fix-for-gdb.base-eh_return.exp.patch * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch * fixup-gdb-test-bt-cfi-without-die.patch * fix-core-file-detach-crash-corefiles-29275.patch * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch * fix-for-gdb.base-solib-search.exp-test.patch - Patch removed: * gdb-6.7-ppc-clobbered-registers-O2-test.patch * gdb-6.5-readline-long-line-crash-test.patch - Patches updated: * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch * gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch - Maintenance script qa.sh: * Add PR28504 KFAILs. * Make .sum file matching less complex. * Add fedora test-case kfail. - Maintenance script qa-local.sh: * Fix incorrect path name. - Update comments in gdb.spec. - Patches added: * powerpc-update-expected-floating-point-output-for-gdb.arch-altivec-regs.exp-and-gdb.arch-vsx-regs.exp.patch - Patches updated: * gdb-testsuite-support-recording-of-getrandom.patch (add aarch64 part) - Maintenance script qa.sh: * Add i586 to known clean configs. - Patches added: * gdb-testsuite-enable-some-test-cases-for-x86_64-m32.patch * gdb-testsuite-fix-gdb.reverse-i387-env-reverse.exp-for-pie.patch * gdb-testsuite-support-recording-of-getrandom.patch - Patches updated: * gdb-record-handle-statx-system-call.patch - Maintenance script qa.sh: * Allow only two summary files, for i586. * Add i586 KFAILs. - Maintenance script qa-local.sh: * Add i586. - Maintenance script qa-local.sh: * Fix rpm pathname. - Maintenance script qa-remote.sh: * Skip stale config openSUSE_Leap_15.2. - Maintenance script qa.sh: * Drop known clean config: Leap 15.2 x86_64. - Maintenance script qa-local.sh: * Add cleanup step. * Add "build all configs without testsuite" step. * For "build all configs with testsuite" step, redirect output to log and produce PASS/FAIL line, and make sure buildroot is removed also in case of missing rpm. * Use "--clean --trust-all-projects" for osc build commands. * Drop openSUSE_Leap_15.2. - Maintenance script qa.sh: * Rename argument 6 to -local. * Add PR29247 KFAILs. * Update internal-error regexps. - New maintenance script qa-remote.sh. - Add "build all configs without testsuite" step in README.qa. - Patches added (backport from trunk): * gdb-testsuite-remove-attach-test-from-can_spawn_for_attach.patch - README.qa: * Add remote qa entry. * Update local qa entry: * Add notes entry. * Other updates to match changes in qa-local.sh. ... changelog too long, skipping 312 lines ... * Add Leap 15.4 x86_64 to know good configs. ==== gnome-settings-daemon ==== - Change dependency from polkit to /usr/bin/pkexec: pkexec has been split out of polkit. Requiring the explicit capability seems better here than having to worry what package carries the binary. ==== gnutls ==== Version update (3.7.6 -> 3.7.7) Subpackages: libgnutls-dane0 libgnutls30 libgnutls30-hmac - Update to 3.7.7: [bsc#1202020, CVE-2022-2509] * libgnutls: Fixed double free during verification of pkcs7 signatures. CVE-2022-2509 * libgnutls: gnutls_hkdf_expand now only accepts LENGTH argument less than or equal to 255 times hash digest size, to comply with RFC 5869 2.3. * libgnutls: Length limit for TLS PSK usernames has been increased from 128 to 65535 characters * libgnutls: AES-GCM encryption function now limits plaintext length to 2^39-256 bits, according to SP800-38D 5.2.1.1. * libgnutls: New block cipher functions have been added to transparently handle padding. gnutls_cipher_encrypt3 and gnutls_cipher_decrypt3 can be used in combination of GNUTLS_CIPHER_PADDING_PKCS7 flag to automatically add/remove padding if the length of the original plaintext is not a multiple of the block size. * libgnutls: New function for manual FIPS self-testing. * API and ABI modifications: - gnutls_fips140_run_self_tests: New function - gnutls_cipher_encrypt3: New function - gnutls_cipher_decrypt3: New function - gnutls_cipher_padding_flags_t: New enum * guile: Guile 1.8 is no longer supported * guile: Session record port treats premature termination as EOF Previously, a 'gnutls-error' exception with the 'error/premature-termination' value would be thrown while reading from a session record port when the underlying session was terminated prematurely. This was inconvenient since users of the port may not be prepared to handle such an exception. Reading from the session record port now returns the end-of-file object instead of throwing an exception, just like it would for a proper session termination. * guile: Session record ports can have a 'close' procedure. The 'session-record-port' procedure now takes an optional second parameter, and a new 'set-session-record-port-close!' procedure is provided to specify a 'close' procedure for a session record port. This 'close' procedure lets users specify cleanup operations for when the port is closed, such as closing the file descriptor or port that backs the underlying session. * Rebase patches: - gnutls-3.6.6-set_guile_site_dir.patch - gnutls-FIPS-TLS_KDF_selftest.patch - gnutls-FIPS-disable-failing-tests.patch * Remove patch merged upstream: - gnutls-FIPS-PBKDF2-KAT-requirements.patch - https://gitlab.com/gnutls/gnutls/merge_requests/1561 ==== iso-codes ==== Version update (4.10.0 -> 4.11.0) Subpackages: iso-codes-lang - Update to version 4.11.0: + Update ISO 639-3 codes from SIL website. + Updated translations. ==== kernel-source ==== Version update (5.18.12 -> 5.18.15) Subpackages: kernel-64kb kernel-default - Linux 5.18.15 (bsc#1012628). - watch-queue: remove spurious double semicolon (bsc#1012628). - ASoC: SOF: Intel: disable IMR boot when resuming from ACPI S4 and S5 states (bsc#1012628). - ASoC: SOF: pm: add definitions for S4 and S5 states (bsc#1012628). - ASoC: SOF: pm: add explicit behavior for ACPI S1 and S2 (bsc#1012628). - watchqueue: make sure to serialize 'wqueue->defunct' properly (bsc#1012628). - x86/alternative: Report missing return thunk details (bsc#1012628). - x86/amd: Use IBPB for firmware calls (bsc#1012628). - exfat: use updated exfat_chain directly during renaming (bsc#1012628). - exfat: fix referencing wrong parent directory information after renaming (bsc#1012628). - crypto: qat - re-enable registration of algorithms (bsc#1012628). - crypto: qat - add param check for DH (bsc#1012628). - crypto: qat - add param check for RSA (bsc#1012628). - crypto: qat - remove dma_free_coherent() for DH (bsc#1012628). - crypto: qat - remove dma_free_coherent() for RSA (bsc#1012628). - crypto: qat - fix memory leak in RSA (bsc#1012628). - crypto: qat - add backlog mechanism (bsc#1012628). - crypto: qat - refactor submission logic (bsc#1012628). - crypto: qat - use pre-allocated buffers in datapath (bsc#1012628). - crypto: qat - set to zero DH parameters before free (bsc#1012628). - dlm: fix pending remove if msg allocation fails (bsc#1012628). - clk: lan966x: Fix the lan966x clock gate register address (bsc#1012628). - x86/bugs: Warn when "ibrs" mitigation is selected on Enhanced IBRS parts (bsc#1012628). - perf/x86/intel/lbr: Fix unchecked MSR access error on HSW (bsc#1012628). - sched/deadline: Fix BUG_ON condition for deboosted tasks (bsc#1012628). - bpf: Make sure mac_header was set before using it (bsc#1012628). - mm/mempolicy: fix uninit-value in mpol_rebind_policy() (bsc#1012628). - KVM: Don't null dereference ops->destroy (bsc#1012628). - spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for non DMA transfers (bsc#1012628). - KVM: selftests: Fix target thread to be migrated in rseq_test (bsc#1012628). - gpio: gpio-xilinx: Fix integer overflow (bsc#1012628). - selftests: gpio: fix include path to kernel headers for out of tree builds (bsc#1012628). - net/sched: cls_api: Fix flow action initialization (bsc#1012628). - tcp: Fix data-races around sysctl_tcp_max_reordering (bsc#1012628). - tcp: Fix a data-race around sysctl_tcp_abort_on_overflow (bsc#1012628). - tcp: Fix a data-race around sysctl_tcp_rfc1337 (bsc#1012628). - tcp: Fix a data-race around sysctl_tcp_stdurg (bsc#1012628). - tcp: Fix a data-race around sysctl_tcp_retrans_collapse (bsc#1012628). - tcp: Fix data-races around sysctl_tcp_slow_start_after_idle (bsc#1012628). - tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts (bsc#1012628). - tcp: Fix data-races around sysctl_tcp_recovery (bsc#1012628). - tcp: Fix a data-race around sysctl_tcp_early_retrans (bsc#1012628). - tcp: Fix data-races around sysctl knobs related to SYN option (bsc#1012628). - udp: Fix a data-race around sysctl_udp_l3mdev_accept (bsc#1012628). - ip: Fix data-races around sysctl_ip_prot_sock (bsc#1012628). - ipv4: Fix data-races around sysctl_fib_multipath_hash_fields (bsc#1012628). - ipv4: Fix data-races around sysctl_fib_multipath_hash_policy (bsc#1012628). - ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh (bsc#1012628). - can: rcar_canfd: Add missing of_node_put() in rcar_canfd_probe() (bsc#1012628). - drm/imx/dcss: Add missing of_node_put() in fail path (bsc#1012628). - drm/panel-edp: Fix variable typo when saving hpd absent delay from DT (bsc#1012628). - amt: do not use amt->nr_tunnels outside of lock (bsc#1012628). - amt: drop unexpected multicast data (bsc#1012628). - amt: drop unexpected query message (bsc#1012628). - amt: drop unexpected advertisement message (bsc#1012628). - amt: add missing regeneration nonce logic in request logic (bsc#1012628). - amt: use READ_ONCE() in amt module (bsc#1012628). - amt: remove unnecessary locks (bsc#1012628). - amt: use workqueue for gateway side message handling (bsc#1012628). - net: dsa: vitesse-vsc73xx: silent spi_device_id warnings (bsc#1012628). - net: dsa: sja1105: silent spi_device_id warnings (bsc#1012628). - be2net: Fix buffer overflow in be_get_module_eeprom (bsc#1012628). ... changelog too long, skipping 599 lines ... - commit fcd7336 ==== libapparmor ==== Version update (3.0.5 -> 3.0.6) - update to AppArmor 3.0.6 - fix LTO build in the parser - remove dbus deny rule in abstractions/exo-open - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.6 for the detailed upstream changelog - drop upstream patch dirtest-sort-mr900.diff ==== libavif ==== - Enable libyuv on TW ==== libblockdev ==== Version update (2.26 -> 2.27) Subpackages: libbd_btrfs2 libbd_crypto2 libbd_fs2 libbd_loop2 libbd_lvm2 libbd_mdraid2 libbd_part2 libbd_swap2 libbd_utils2 libblockdev2 - Update to version 2.27: + Fix for s390x: Remove double fclose in bd_s390_dasd_online + fs: Return BD_FS_ERROR_UNKNOWN_FS on mounting unknown filesystem + overrides: Fix translating exceptions in ErrorProxy + vdo_stats: Default to 100 % savings for invalid savings values + lvm-dbus: Add support for changing compression and deduplication + lvm: - Fix reading statistics for VDO pools with VDO 8 - Do not set global config to and empty string - Do not include duplicate entries in bd_lvm_lvs output - Use correct integer type in for comparison + crypto: Remove useless comparison in progress report in luks_format ==== libgcrypt ==== Subpackages: libgcrypt20 libgcrypt20-hmac - Fix reproducible build problems: - Do not use %release in binaries (but use SOURCE_DATE_EPOCH) - Fix date call messed up by spec-cleaner ==== libgsm ==== Version update (1.0.19 -> 1.0.20) - Update to 1.0.20: * Use $(RMFLAGS) with the rms in the Makefile; add -f to $(RMFLAGS) to avoid spurious error messages during build. - Rebase and rename libgsm-1.0.20.patch from libgsm-1.0.13.patch. - Rebase libgsm-include.patch. ==== libnvme ==== Version update (1.1~rc0 -> 1.1) - Update to version 1.1: * Regenerate all documentation * json: fixup dhchap_ctrl_key definitions * fabrics: Fix build_options() return values * fabrics: sanitize dump-config output * Fix poll.h includes * build: Drop -nostdinc for LibreSSL header checks * ioctl: Honor rae in nvme_get_nsid_log * build: Add support to build against LibreSSL * rpmbuild: Enable 'make rpm' to build rpm pkgs #408 * mi: unify MI Get Log Page function with ioctl API * python: add missing ctrl attrs to Python bindings * mi-mctp: Add timeout support to MCTP transport * mi: Add maximum More Processing Required limit API * mi: Add endpoint get/set timeout API ==== libvirt ==== Version update (8.5.0 -> 8.6.0) Subpackages: libvirt-client libvirt-daemon libvirt-daemon-config-network libvirt-daemon-driver-interface libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-qemu libvirt-libs - Update to libvirt 8.6.0 - Many incremental improvements and bug fixes, see https://libvirt.org/news.html#v8-6-0-2022-08-01 - spec: Don't redefine libexecdir boo#1201565 ==== mokutil ==== Version update (0.5.0 -> 0.6.0) - Update to 0.6.0 + 6c98907 SBAT revocation update support + 0276891 mokutil: Add trust_mok_keys and untrust_mok_keys + 57bc385 mokutil: enable setting fallback verbosity and noreboot mode + b15e7c4 util: add the missing stdio.h - Drop mokutil-fix-missing-header.patch (upstream) ==== mozilla-nss ==== Version update (3.79 -> 3.80) Subpackages: libfreebl3 libfreebl3-hmac libsoftokn3 libsoftokn3-hmac mozilla-nss-certs mozilla-nss-tools - update to NSS 3.80 * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h. * bmo#1617956 - Add support for asynchronous client auth hooks. * bmo#1497537 - nss-policy-check: make unknown keyword check optional. * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations by allocating it on initialization. Replaced redundant code with assert. Debug builds: Added buffer freeing/allocation for each record. * bmo#1773022 - Mark 3.79 as an ESR release. * bmo#1764206 - Bump nssckbi version number for June. * bmo#1759815 - Remove Hellenic Academic 2011 Root. * bmo#1770267 - Add E-Tugra Roots. * bmo#1768970 - Add Certainly Roots. * bmo#1764392 - Add DigitCert Roots. * bmo#1759794 - Protect SFTKSlot needLogin with slotLock. * bmo#1366464 - Compare signature and signatureAlgorithm fields in legacy certificate verifier. * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld. * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg. * bmo#1771498 - Uninitialized value in cert_ComputeCertType. * bmo#1760998 - Avoid data race on primary password change. * bmo#1769063 - Replace ppc64 dcbzl intrinisic. * bmo#1771036 - Allow LDFLAGS override in makefile builds. ==== mpg123 ==== Version update (1.30.1 -> 1.30.2) Subpackages: libmpg123-0 mpg123-openal - Update to version 1.30.2 * Only use EWOULDBLOCK if the macro is defined. ==== mxml ==== Version update (3.3 -> 3.3.1) - update to 3.3.1: * Fixed POSIX thread cleanup bugs ==== nano ==== - Added obs-channel-and-patchinfo-syntax.patch to support syntax highlighting for _channel and _patchinfo files used by OBS ==== nvme-cli ==== Version update (2.1~rc0 -> 2.1.1) Subpackages: nvme-cli-bash-completion nvme-cli-zsh-completion - Update to version 2.1.1: * build: Update version to v2.1.1 * build: Extend release script to support micro version releases * build: Add minimum build requirement on libnvme * wrapper: Add weak nvme_init_copy_range_f1 symbol * build: Update version before regenerating docs * build: Update release version rules - Update to version v2.1: * nvme: Do not print error message in collect_effects_log helper * fabrics: Remove dhchap-ctrl-secret from discover/connect-all * nvme-print: sanitize the get-feature async event config output * nvme: Set default rae value for nvme_get_nsid_log users * fabrics: Avoid nvme_scan_ctrl when disconnecting * print: Fix nvme_id_uuid_list ==== oath-toolkit ==== - Use %_pam_moduledir instead of hardcoding %{_lib}/security - Define macro _pam_moduledir if not set to fix builds for Leap and SLE ==== pipewire ==== Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Recommend pipewire-alsa (instead of alsa-plugins-pulse) from pipewire-pulseaudio (boo#1201409) ==== polkit ==== Subpackages: libpolkit-agent-1-0 libpolkit-gobject-1-0 typelib-1_0-Polkit-1_0 - add split-provides for polkit:/usr/bin/pkexec. (bsc#1202070) ==== poppler ==== Version update (22.07.0 -> 22.08.0) Subpackages: libpoppler-cpp0 libpoppler-glib8 poppler-tools - update to 22.08.0: * Fix rendering text on some forms * CairoOutputDev: Support Type3 charprocs having Resources * Fix crashes on malformed files ==== poppler-qt5 ==== Version update (22.07.0 -> 22.08.0) - update to 22.08.0: * Fix rendering text on some forms * CairoOutputDev: Support Type3 charprocs having Resources * Fix crashes on malformed files ==== python-Genshi ==== Version update (0.7.5 -> 0.7.7) - Update to 0.7.7: * Declared setuptools as the build backend (#65) * Fixed deprecation warnings caused by escape sequences in regex pattern strings (#63) - Changes from 0.7.6: * Added support for Python 3.10 and 3.11 (#54, #56, #58) * Replaced assertEquals with assertEqual. assertEquals was deprecated in Python 3.2. (#42) * Removed used of element.getchildren() which has been removed from the Python standard library elementtree in Python 3.9. (#57) * Added support for Python 3.10 by using CodeType.replace in `build_code_chunk` to make code object updates more robust against changes in CodeType. (#49) * Moved tests and releases workflows to GitHub Actions (#61, #51) * Fixed reference leak in Markup.join C implementation. (#47) * Sort directives only by directive index. Previously they were sorted by the class, namespace and arguments of the directives. This was acceptable in Python 2, but is a bug in Python 3 since some the arguments may not be comparable. (#44) * Add support for msgctxt to i18n. (#13) * Implemented skipping of empty attributes during translation to match the behaviour during translation extraction (i.e. don't try to translate empty strings that are not extracted). (#38) * Ported setuptools options to declarative config in setup.cfg. (#40) * Removed used of deprecated setuptools Feature in setup.py. (#39) - Removed patches, already in upstream: * Genshi-pr39-fix-setuptools-extension.patch * Genshi-pr49-fix-python310-tests.patch ==== python-cffi ==== Version update (1.15.0 -> 1.15.1) - update to 1.15.1: * If you call ffi.embedding_api() but don’t write any extern “Python” function there, then the resulting C code would fail an assert. Fixed. * Updated Windows/arm64 embedded libffi static lib to v3.4.2, and scripted to ease future updates (thanks Niyas Sait!) ==== python-cryptography ==== Version update (37.0.2 -> 37.0.4) - update to 37.0.4: * updated wheels to b ecompiled against openssl 3.0.5 ==== python-gobject ==== Version update (3.42.1 -> 3.42.2) Subpackages: python310-gobject python310-gobject-Gdk python310-gobject-cairo - Update to version 3.42.2: + Error out instead of crashing when marshaling unsupported fundamental types in some cases. + Add a workaround for a PyPy 3.9+ bug when threads are used. + Fix crashes when marshaling zero terminated arrays for certain item types. + Fix a crash/refcounting error in case marshaling a hash table fails. + Make the test suite pass again with PyPy. + tests: support running tests with (MSVC) CPython 3.8+ on Windows. + interface: Fix leak when overriding GInterfaceInfo. + setup.py: look up pycairo headers without importing the module (helps with building on Windows and MSVC CPython 3.8+). - Work around vendored distutils in setuptools >= 60 incorrectly installing pkgconfig files into the wrong libdir ==== python-hatchling ==== Version update (1.4.1 -> 1.6.0) - update to version 1.6.0: * Changed: + When no build targets are specified on the command line, now default to sdist and wheel targets rather than what happens to be defined in config + The code version source now only supports files with known extensions + Global build hooks now run before target-specific build hooks to better match expected behavior * Added: + The code version source now supports loading extension modules + Add search-paths option for the code version source * Fixed: + Fix removing sources using an empty string value in the mapping + The strict-naming option now also applies to the metadata directory of wheel targets - update to version 1.5.0: * Added: + Support the final draft of PEP 639 + Add strict-naming option for sdist and wheel targets * Fixed: Project names are now stored in sdist and wheel target core metadata exactly as defined in pyproject.toml without normalization to allow control of how PyPI displays them - require python 3.7 as minimum version to match upstream requirement ==== python-httpcore ==== Version update (0.14.7 -> 0.15.0) - Update to 0.15.0 * Drop Python 3.6 support (#535) * Ensure HTTP proxy CONNECT requests include timeout configuration. (#506) * Switch to explicit typing.Optional for type hints (#513) * For trio map OSError exceptions to ConnectError (#543) - Fix forgotten test package dep drops -- gh#encode/httpcore#473 ==== python-importlib-metadata ==== Version update (4.11.4 -> 4.12.0) - update to 4.12.0: * py-93259: Now raise ``ValueError`` when ``None`` or an empty string are passed to ``Distribution.from_name`` (and other callers). ==== python-libvirt-python ==== Version update (8.5.0 -> 8.6.0) - Update to 8.6.0 - Add all new APIs and constants in libvirt 8.6.0 ==== python-numexpr ==== - Fix requirements ==== python-psutil ==== - Fix tests: setuptools changed the builddir library path and does not find the module from it. Use the installed platlib instead and exclude psutil.tests only later. - Refresh skip-obs.patch ==== python-pycairo ==== - Work around vendored distutils in setuptools >= 60 incorrectly installing pkgconfig files into the wrong libdir - Deduplicate files in python_sitearch ==== python-scipy ==== - Keep lowercase egg-info despite setuptools 60+ ==== python-urllib3 ==== Version update (1.26.9 -> 1.26.11) - update to 1.26.11 * Fix OverflowError when TLS is used on some Python versions - update to 1.26.10: * Removed support for Python 3.5 * Fixed an issue where a ``ProxyError`` recommending configuring the proxy as HTTP instead of HTTPS could appear even when an HTTPS proxy wasn't configured. - refresh remove_mock.patch with extra mock usages ==== python-wcwidth ==== - Add patch remove-pkg_resources.patch: * Use importlib.metadata rather than pkg_resources. - Since importlib.metadata is not as a stickler as pkg_resources is, remove multibuild. ==== read-only-root-fs ==== Version update (1.0+git20200730.1243fd0 -> 1.0+git20220801.cbb90bc) - Update to version 1.0+git20220801.cbb90bc: * Add another workaround for read-only subvolumes (boo#1202000) * Correctly declare mount-overlay.sh as Bash file - Update source service URL ==== rsync ==== - Security fix: [bsc#1201840, CVE-2022-29154] * arbitrary file write vulnerability via do_server_recv function * Added patch rsync-rsync-CVE-2022-29154.patch ==== tiff ==== Subpackages: libtiff5 - security update: * CVE-2022-34526 [bsc#1202026] + tiff-CVE-2022-34526.patch ==== tmux ==== Version update (3.2a -> 3.3a) - switch to screen-256color as default terminal to fix incompatibility with yast2-ruby-testsuite - update to 3.3a: * Do not crash when run-shell produces output from a config file. * Do not unintentionally turn off all mouse mode when button mode is also present. - update to 3.3: * Add an ACL list for users connecting to the tmux socket. Users may be forbidden from attaching, forced to attach read-only, or allowed to attach read-write. A new command, server-access, configures the list. File system permissions must still be configured manually. * Emit window-layout-changed on swap-pane. * Better error reporting when applying custom layouts. * Handle ANSI escape sequences in run-shell output. * Add pane_start_path to match start_command. * Set PWD so shells have a hint about the real path. * Do not allow pipe-pane on dead panes. * Do not report mouse positions (incorrectly) above the maximum of 223 in normal mouse mode. * Add an option (default off) to control the passthrough escape sequence. * Support more mouse buttons when the terminal sends them. * Add a window-resized hook which is fired when the window is actually resized which may be later than the client resize. * Add next_session_id format with the next session ID. * Add formats for client and server UID and user. * Add argument to refresh-client -l to forward clipboard to a pane. * Add remain-on-exit-format to set text shown when pane is dead. * With split-window -f use percentages of window size not pane size. * Add an option (fill-character) to set the character used for unused areas of a client. * Add an option (scroll-on-clear) to control if tmux scrolls into history on clear. * Add a capability for OSC 7 and use it similarly to how the title is set (and controlled by the same set-titles option). * Add support for systemd socket activation (where systemd creates the Unix domain socket for tmux rather than tmux creating it). Build with - -enable-systemd. * Add an option (pane-border-indicators) to select how the active pane is shown on the pane border (colour, arrows or both). * Support underscore styles with capture-pane -e. * Make pane-border-format a pane option rather than window. * Respond to OSC 4 queries * Fix g/G keys in modes to do the same thing as copy mode (and vi). * Bump the time terminals have to respond to device attributes queries to three seconds. * If automatic-rename is off, allow the rename escape sequence to set an empty name. * Trim menu item text more intelligently. * Add cursor-style and cursor-colour options to set the default cursor style and colour. * Accept some useful and non-conflicting emacs keys in vi normal mode at the command prompt. * Add a format modifier (c) to force a colour to RGB. * Add -s and -S to display-popup to set styles, -b to set lines and -T to set popup title. New popup-border-lines, popup-border-style and popup-style options set the defaults. * Add -e flag to set an environment variable for a popup. * Make send-keys without arguments send the key it is bound to (if bound to a key). * Try to leave terminal cursor at the right position even when tmux is drawing its own cursor or selection (such as at the command prompt and in choose mode) for people using screen readers and similar which can make use of it. * Change so that {} is converted to tmux commands immediately when parsed. This means it must contain valid tmux commands. For commands which expand %% and %%%, this now only happens within string arguments. Use of nested aliases inside {} is now forbidden. Processing of commands given in quotes remains the same. * Disable evports on SunOS since they are broken. * Do not expand the file given with tmux -f so it can contain :s. * Bump FORMAT_LOOP_LIMIT and add a log message when hit. * Add a terminal feature for the mouse (since FreeBSD termcap does not have kmous). * Forbid empty session names. * Improve error reporting when the tmux /tmp directory cannot be created or used. * Give #() commands a one second grace period where the output is empty before telling the user they aren't doing anything ("not ready"). * When building, pick default-terminal from the first of tmux-256color, tmux, screen-256color, screen that is available on the build system (--with-TERM can override). * Do not close popups on resize, instead adjust them to fit. * Add a client-active hook. * Make window-linked and window-unlinked window options. * Do not configure on macOS without the user making a choice about utf8proc (either --enable-utf8proc or --disable-utf8proc). * Do not freeze output in panes when a popup is open, let them continue to redraw. * Add pipe variants of the line copy commands. * Change copy-line and copy-end-of-line not to cancel and add -and-cancel variants, like the other copy commands. * Support the OSC palette-setting sequences in popups. * Add a pane-colours array option to specify the defaults palette. * Add support for Unicode zero-width joiner. * Make newline a style delimiter as well so they can cross multiple lines for readability in configuration files. * Change focus to be driven by events rather than scanning panes so the ordering of in and out is consistent. * Add display-popup -B to open a popup without a border. * Add a menu for popups that can be opened with button three outside the popup or on the left or top border. Resizing now only works on the right and bottom ... changelog too long, skipping 16 lines ... - set default TERM to recommended tmux-256colors ==== unbound ==== Version update (1.16.1 -> 1.16.2) Subpackages: libunbound8 unbound-anchor - update to 1.16.2 (boo#1202031 boo#1202033) * Features - Merge #718: Introduce infra-cache-max-rtt option to config max retransmit timeout. * Bug Fixes - Fix the novel ghost domain issues CVE-2022-30698 and CVE-2022-30699. - Fix bug introduced in 'improve val_sigcrypt.c::algo_needs_missing for one loop pass'. - Merge PR #668 from Cristian Rodríguez: Set IP_BIND_ADDRESS_NO_PORT on outbound tcp sockets. - Fix verbose EDE error printout. - Fix dname count in sldns parse type descriptor for SVCB and HTTPS. - For windows crosscompile, fix setting the IPV6_MTU socket option equivalent (IPV6_USER_MTU); allows cross compiling with latest cross-compiler versions. - Merge PR 714: Avoid treat normal hosts as unresponsive servers. And fixup the lock code. - iana portlist update. - Update documentation for 'outbound-msg-retry:'. - Tests for ghost domain fixes. ==== util-linux-systemd ==== - exclude bash-completion stuff for programs that are in util-linux-systemd from util-linux for real. ==== vim ==== Version update (9.0.0073 -> 9.0.0135) Subpackages: gvim vim-data vim-data-common - Updated to version 9.0.0135, fixes the following problems * Coverity warns for double free. * Some compilers warn for using an uninitialized variable. (Tony Mechelynck) * No test for what patch 8.1.1424 fixes. * When switching window in autocmd the restored cursor position may be wrong. * Star register is changed when deleting and both "unnamed" and "unnamedplus" are in 'clipboard'. * Error in autoload script not reported for 'foldexpr'. * Compiler warning for size_t to int conversion. * Command line completion of user command may have duplicates. (Dani Dickstein) * Cannot interrupt global command from command line. * ModeChanged event not triggered when leaving the cmdline window. * Using "terraform" filetype for .tfvars file is bad. * ":write" fails after ":file name" and then ":edit". * Tabline is not redrawn when entering command line. * MS-Windows: CTRL-[ on Belgian keyboard does not work like Esc. * Pattern for detecting bitbake files is not sufficient. * Fuzzy argument completion doesn't work for shell commands. * No error when assigning bool to a string option with setwinvar(). * Duplicate error number. * Plugins cannot change v:completed_item. * Sway config files are recognized as i3config. * Cursor restored unexpected with nested autocommand. * Conditions are always true. * Flag "new_value_alloced" is always true. * Long quickfix line is truncated for :clist. * missing include file in timer_create configure check. * Scrollback can be wrong after redrawing the command line. * Get hit-enter prompt for system() when '!' is in 'guioptions'. * Invalid memory access in diff mode with "dp" and undo. * Reading past end of line with insert mode completion. * If running configure with cached results -lrt may be missing. * Illegal memory access when pattern starts with illegal byte. * Illegal byte regexp test doesn't fail when fix is reversed. * Condition always has the same value. * Configure check for timer_create may give wrong error. * Writing over the end of a buffer on stack when making list of spell suggestions. * Help tag generation picks up words in code examples. * "nocombine" is missing from synIDattr(). * has() is not strict about parsing the patch version. * The command line takes up space even when not used. * When 'cmdheight' is zero pressing ':' may scroll a window. * Virtual text not displayed if 'signcolumn' is "yes". * Text of removed textprop with text is not freed. * No test for what patch 9.0.0155 fixes. * Tiny chance that creating a backup file fails. * Cannot put virtual text after or below a line. * Breakindent test fails. * Cannot build with small features. * Code has more indent than needed. * Cursor positioned wrong with virtual text after the line. * Expanding file names fails in directory with more than 255 entries. * Unused variable. * Coverity complains about possible double free. * Compiler warning for int/size_t usage. * Cursor position wrong when inserting around virtual text. * Virtual text with Tab is not displayed correctly. * Multi-byte characters in virtual text not handled correctly. * Virtual text after line moves to joined line. (Yegappan Lakshmanan) * No test for text property with column zero. ==== webkit2gtk3 ==== Version update (2.36.4 -> 2.36.5) Subpackages: libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles - Update to version 2.36.5 (boo#1201980): + Add support for PAC proxy in the WebDriver implementation. + Fix video playback when loaded through custom URIs, this fixes video playback in the Yelp documentation browser. - Fix WebKitWebView::context-menu when using GTK4. - Fix LTO builds with GCC. - Fix several crashes and rendering issues. + Security fixes: CVE-2022-32792, CVE-2022-32816. - Drop webkit2gtk3-fix-build.patch: fixed upstream. ==== webkit2gtk3-soup2 ==== Version update (2.36.4 -> 2.36.5) Subpackages: libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 typelib-1_0-JavaScriptCore-4_0 typelib-1_0-WebKit2-4_0 webkit2gtk-4_0-injected-bundles - Update to version 2.36.5 (boo#1201980): + Add support for PAC proxy in the WebDriver implementation. + Fix video playback when loaded through custom URIs, this fixes video playback in the Yelp documentation browser. - Fix WebKitWebView::context-menu when using GTK4. - Fix LTO builds with GCC. - Fix several crashes and rendering issues. + Security fixes: CVE-2022-32792, CVE-2022-32816. - Drop webkit2gtk3-fix-build.patch: fixed upstream. ==== xdg-utils ==== Version update (1.1.3+20201113 -> 1.1.3+20210805) - Update to version 1.1.3+20210805: * xdg-email fails on kde with desktop files #187 - switch to obs_scm ==== xen ==== Version update (4.16.1_02 -> 4.16.1_06) Subpackages: xen-libs xen-tools-domU - Added --disable-pvshim when running configure in xen.spec. We have never shipped the shim and don't need to build it. - bsc#1199965 - VUL-0: CVE-2022-26362: xen: Race condition in typeref acquisition 62a1e594-x86-clean-up-_get_page_type.patch 62a1e5b0-x86-ABAC-race-in-_get_page_type.patch - bsc#1199966 - VUL-0: CVE-2022-26363,CVE-2022-26364: xen: Insufficient care with non-coherent mappings 62a1e5d2-x86-introduce-_PAGE_-for-mem-types.patch 62a1e5f0-x86-dont-change-cacheability-of-directmap.patch 62a1e60e-x86-split-cache_flush-out-of-cache_writeback.patch 62a1e62b-x86-AMD-work-around-CLFLUSH-ordering.patch 62a1e649-x86-track-and-flush-non-coherent.patch - bsc#1200549 VUL-0: CVE-2022-21123,CVE-2022-21125,CVE-2022-21166: xen: x86: MMIO Stale Data vulnerabilities (XSA-404) 62ab0fab-x86-spec-ctrl-VERW-flushing-runtime-cond.patch 62ab0fac-x86-spec-ctrl-enum-for-MMIO-Stale-Data.patch 62ab0fad-x86-spec-ctrl-add-unpriv-mmio.patch - bsc#1201469 - VUL-0: CVE-2022-23816,CVE-2022-23825,CVE-2022-29900: xen: retbleed - arbitrary speculative code execution with return instructions (XSA-407) 62cc31ed-x86-honour-spec-ctrl-0-for-unpriv-mmio.patch 62cc31ee-cmdline-extend-parse_boolean.patch 62cc31ef-x86-spec-ctrl-fine-grained-cmdline-subopts.patch 62cd91d0-x86-spec-ctrl-rework-context-switching.patch 62cd91d1-x86-spec-ctrl-rename-SCF_ist_wrmsr.patch 62cd91d2-x86-spec-ctrl-rename-opt_ibpb.patch 62cd91d3-x86-spec-ctrl-rework-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch 62cd91d4-x86-spec-ctrl-IBPB-on-entry.patch 62cd91d5-x86-cpuid-BTC_NO-enum.patch 62cd91d6-x86-spec-ctrl-enable-Zen2-chickenbit.patch 62cd91d7-x86-spec-ctrl-mitigate-Branch-Type-Confusion.patch - Upstream bug fixes (bsc#1027519) 62a99614-IOMMU-x86-gcc12.patch 62bdd840-x86-spec-ctrl-only-adjust-idle-with-legacy-IBRS.patch 62bdd841-x86-spec-ctrl-knobs-for-STIBP-and-PSFD.patch - Drop patches replaced by upstream versions xsa401-1.patch xsa401-2.patch xsa402-1.patch xsa402-2.patch xsa402-3.patch xsa402-4.patch xsa402-5.patch - bsc#1201394 - VUL-0: CVE-2022-33745: xen: insufficient TLB flush for x86 PV guests in shadow mode (XSA-408) xsa408.patch - Fix gcc13 compilation error 62c56cc0-libxc-fix-compilation-error-with-gcc13.patch ==== yast2-trans ==== Version update (84.87.20220729.608d4643aa -> 84.87.20220730.27a80cdf03) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20220730.27a80cdf03: * Translated using Weblate (Slovak) ==== zlib-ng-compat ==== Subpackages: libz-ng-compat1 zlib-ng-compat-devel - Add baselibs.conf