New Arm Tumbleweed snapshot 20230707 released!

10 Jul 2023

      Please note that this mail was generated by a script.
The described changes are computed based on the aarch64 DVD.
The full online repo contains too many changes to be listed here.

Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=3&version=Tumbleweed&build=20230707

Please do not reply to this email to report issues, rather file a bug
on bugzilla.opensuse.org. For more information on filing bugs please
see https://en.opensuse.org/openSUSE:Submitting_bug_reports

Packages changed:
  MozillaFirefox (114.0.2 -> 115.0)
  accountsservice
  akonadi-calendar (23.04.2 -> 23.04.3)
  akonadi-calendar-tools (23.04.2 -> 23.04.3)
  akonadi-contact (23.04.2 -> 23.04.3)
  akonadi-import-wizard (23.04.2 -> 23.04.3)
  akonadi-mime (23.04.2 -> 23.04.3)
  akonadi-notes (23.04.2 -> 23.04.3)
  akonadi-search (23.04.2 -> 23.04.3)
  akonadi-server (23.04.2 -> 23.04.3)
  akregator (23.04.2 -> 23.04.3)
  analitza (23.04.2 -> 23.04.3)
  ark (23.04.2 -> 23.04.3)
  baloo5-widgets (23.04.2 -> 23.04.3)
  bind
  blinken (23.04.2 -> 23.04.3)
  calendarsupport (23.04.2 -> 23.04.3)
  dolphin (23.04.2 -> 23.04.3)
  eog (44.2 -> 44.3)
  eventviews (23.04.2 -> 23.04.3)
  evince (44.2 -> 44.3)
  ffmpegthumbs (23.04.2 -> 23.04.3)
  filelight (23.04.2 -> 23.04.3)
  fwupd
  gdm
  gnome-maps (44.2 -> 44.3)
  gnome-user-docs (44.1 -> 44.3)
  grantleetheme (23.04.2 -> 23.04.3)
  gupnp (1.6.3 -> 1.6.4)
  gwenview5 (23.04.2 -> 23.04.3)
  hwinfo (22.3 -> 23.1)
  incidenceeditor (23.04.2 -> 23.04.3)
  kaccounts-integration (23.04.2 -> 23.04.3)
  kaccounts-providers (23.04.2 -> 23.04.3)
  kaddressbook (23.04.2 -> 23.04.3)
  kalgebra (23.04.2 -> 23.04.3)
  kamera (23.04.2 -> 23.04.3)
  kanagram (23.04.2 -> 23.04.3)
  kapptemplate (23.04.2 -> 23.04.3)
  kate (23.04.2 -> 23.04.3)
  kbruch (23.04.2 -> 23.04.3)
  kcachegrind (23.04.2 -> 23.04.3)
  kcalc (23.04.2 -> 23.04.3)
  kcalutils (23.04.2 -> 23.04.3)
  kcharselect (23.04.2 -> 23.04.3)
  kcolorchooser (23.04.2 -> 23.04.3)
  kde-print-manager (23.04.2 -> 23.04.3)
  kdeconnect-kde (23.04.2 -> 23.04.3)
  kdeedu-data (23.04.2 -> 23.04.3)
  kdegraphics-thumbnailers (23.04.2 -> 23.04.3)
  kdenetwork-filesharing (23.04.2 -> 23.04.3)
  kdepim-addons (23.04.2 -> 23.04.3)
  kdepim-runtime (23.04.2 -> 23.04.3)
  kdevelop5 (23.04.2 -> 23.04.3)
  kdialog (23.04.2 -> 23.04.3)
  kgeography (23.04.2 -> 23.04.3)
  khangman (23.04.2 -> 23.04.3)
  khelpcenter5 (23.04.2 -> 23.04.3)
  kidentitymanagement (23.04.2 -> 23.04.3)
  kig (23.04.2 -> 23.04.3)
  kimap (23.04.2 -> 23.04.3)
  kio-extras5 (23.04.2 -> 23.04.3)
  kio_audiocd (23.04.2 -> 23.04.3)
  kipi-plugins (23.04.2 -> 23.04.3)
  kiten (23.04.2 -> 23.04.3)
  kitinerary (23.04.2 -> 23.04.3)
  kldap (23.04.2 -> 23.04.3)
  kleopatra (23.04.2 -> 23.04.3)
  kmag (23.04.2 -> 23.04.3)
  kmahjongg (23.04.2 -> 23.04.3)
  kmail (23.04.2 -> 23.04.3)
  kmail-account-wizard (23.04.2 -> 23.04.3)
  kmailtransport (23.04.2 -> 23.04.3)
  kmbox (23.04.2 -> 23.04.3)
  kmime (23.04.2 -> 23.04.3)
  kmines (23.04.2 -> 23.04.3)
  kmousetool (23.04.2 -> 23.04.3)
  kmplot (23.04.2 -> 23.04.3)
  knotes (23.04.2 -> 23.04.3)
  kompare (23.04.2 -> 23.04.3)
  konsole (23.04.2 -> 23.04.3)
  kontact (23.04.2 -> 23.04.3)
  kontactinterface (23.04.2 -> 23.04.3)
  konversation (23.04.2 -> 23.04.3)
  korganizer (23.04.2 -> 23.04.3)
  kpat (23.04.2 -> 23.04.3)
  kpimtextedit (23.04.2 -> 23.04.3)
  kpkpass (23.04.2 -> 23.04.3)
  kqtquickcharts (23.04.2 -> 23.04.3)
  kreversi (23.04.2 -> 23.04.3)
  ksanecore (23.04.2 -> 23.04.3)
  ksmtp (23.04.2 -> 23.04.3)
  ksudoku (23.04.2 -> 23.04.3)
  ktnef (23.04.2 -> 23.04.3)
  ktouch (23.04.2 -> 23.04.3)
  kwalletmanager5 (23.04.2 -> 23.04.3)
  kwordquiz (23.04.2 -> 23.04.3)
  libgravatar (23.04.2 -> 23.04.3)
  libkcddb (23.04.2 -> 23.04.3)
  libkcompactdisc (23.04.2 -> 23.04.3)
  libkdcraw (23.04.2 -> 23.04.3)
  libkdegames (23.04.2 -> 23.04.3)
  libkdepim (23.04.2 -> 23.04.3)
  libkeduvocdocument (23.04.2 -> 23.04.3)
  libkexiv2 (23.04.2 -> 23.04.3)
  libkgapi (23.04.2 -> 23.04.3)
  libkipi (23.04.2 -> 23.04.3)
  libkleo (23.04.2 -> 23.04.3)
  libkmahjongg (23.04.2 -> 23.04.3)
  libkomparediff2 (23.04.2 -> 23.04.3)
  libksane (23.04.2 -> 23.04.3)
  libksieve (23.04.2 -> 23.04.3)
  libstorage-ng (4.5.121 -> 4.5.122)
  libxcrypt (4.4.34 -> 4.4.35)
  lokalize (23.04.2 -> 23.04.3)
  mailcommon (23.04.2 -> 23.04.3)
  mailimporter (23.04.2 -> 23.04.3)
  mariadb (10.11.3 -> 11.0.2)
  mbox-importer (23.04.2 -> 23.04.3)
  messagelib (23.04.2 -> 23.04.3)
  mobipocket (23.04.2 -> 23.04.3)
  mozilla-nss (3.89.1 -> 3.90)
  okular (23.04.2 -> 23.04.3)
  parley (23.04.2 -> 23.04.3)
  pim-data-exporter (23.04.2 -> 23.04.3)
  pim-sieve-editor (23.04.2 -> 23.04.3)
  pimcommon (23.04.2 -> 23.04.3)
  pulseaudio
  python-configobj
  python-urllib3 (2.0.2 -> 2.0.3)
  python311 (3.11.3 -> 3.11.4)
  python311-core (3.11.3 -> 3.11.4)
  signon-kwallet-extension (23.04.2 -> 23.04.3)
  skanlite (23.04.2 -> 23.04.3)
  spectacle (23.04.2 -> 23.04.3)
  step (23.04.2 -> 23.04.3)
  swtpm
  umbrello (23.04.2 -> 23.04.3)
  upower (1.90.0 -> 1.90.1)
  wicked

=== Details ===

==== MozillaFirefox ====
Version update (114.0.2 -> 115.0)

- Mozilla Firefox 115.0
  * Support for importing payment methods saved in Chrome-based browser
  * Hardware video decoding is now enabled for Intel GPUs on Linux
  * The Tab Manager dropdown now features close buttons, so tabs
    can be closed more quickly
  * Streamlined the user interface for importing data in from other browsers
  * Users without platform support for H264 video decoding can now
    fallback to Cisco's OpenH264 plugin for playback.
  * Undo and redo are now available in Password fields
  * Changed: On Linux, middle clicks on the new tab button will
    now open the xclipboard contents in the new tab. If the
    xclipboard content is a URL then that URL is opened, any
    other text is opened with your default search provider.
  * Changed: For users with a Firefox Colorways built-in theme,
    the theme will be automatically migrated to the same theme
    hosted on addons.mozilla.org for Firefox profiles that have
    disabled add-ons auto-updates. This will allow users to keep
    their Colorways theme when they are later removed from
    Firefox installer files.
  * Changed: Certain Firefox users may come across a message in
    the extensions panel indicating that their add-ons are not
    allowed on the site currently open. We have introduced a new
    back-end feature to only allow some extensions monitored by
    Mozilla to run on specific websites for various reasons,
    including security concerns.
  * HTML5: The builtin editor now behaves similarly to other
    browsers with `contenteditable` and `designMode` when
    splitting a node, e.g. typing Enter to split a paragraph, and
    also when joining two nodes, e.g. typing Backspace at the
    start of a paragraph to join the paragraph and the previous
    one.
    When a node is split, the builtin editor creates a new node
    after the original one instead of before, i.e. creates the
    right node instead of the left node.
    Similarly, when two nodes are joined, the builtin editor
    deletes the latter node and moves its children to the end of
    the preceding node instead of deleting the former node and
    moving its child to the start of the following node.
  * HTML5: WebRTC application developers can now specify a target
    in milliseconds of media for the jitter buffer to hold.
    Altering the target value allows applications to control the
    tradeoff between playout delay and the risk of running out of
    audio or video frames due to network jitter.
  * HTML5: Change array by copy provides additional methods on
    `Array.prototype` and `TypedArray.prototype` to enable
    changes on the array by returning a new copy of it with the
    change.
  * HTML5: The animation-composition property is now supported,
    allowing a declarative way to define the composite operation
    used when multiple animations affect the same property
    simultaneously.
  * HTML5: Added the URL.canParse() function to allow easy and
    fast checking if URLs are valid and parseable.
  * HTML5: IndexedDB is now also supported in private browsing
    without memory limits thanks to encrypted storage on disk.
    The temporary keys to decrypt the information are hold in RAM
    only and all stored information is purged at the normal end
    of a private browsing session from disk.
  * HTML5: Supports conditions are now supported in CSS import
    rules @import supports(...)
  * Developer: In web development, we rely on third-party
    libraries which you may not be interested in while debugging.
    These can be ignored. Ignoring them means that breakpoints
    will not get hit and they are skipped during stepping.
    You can now choose to **Hide ignore-listed sources** in the
    Developer Tools source tree
  * Developer: We have introduced a new option,
    `devtools.f12_enabled`, that can be utilized to prevent the
    accidental use of the F12 key, which opens the DevTools
    toolbox (bug).
  * Enterprise: You can find information about policy updates and
    enterprise specific bug fixes in the Firefox for Enterprise
    115 Release Notes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    ... changelog too long, skipping 9 lines ...
- removed obsolete mozilla-buildfixes.patch

==== accountsservice ====
Subpackages: libaccountsservice0 typelib-1_0-AccountsService-1_0

- Rebase accountsservice-sysconfig.patch: (boo#1212675 boo#1212973).
- Remove accountsservice-assume-gdm.patch: Fixed by new rebasing
  of accountsservice-sysconfig.patch.

==== akonadi-calendar ====
Version update (23.04.2 -> 23.04.3)
Subpackages: akonadi-plugin-calendar kalendarac libKPim5AkonadiCalendar5

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== akonadi-calendar-tools ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== akonadi-contact ====
Version update (23.04.2 -> 23.04.3)
Subpackages: akonadi-plugin-contacts libKPim5AkonadiContact5 libKPim5ContactEditor5

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== akonadi-import-wizard ====
Version update (23.04.2 -> 23.04.3)
Subpackages: libKPim5ImportWizard5

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== akonadi-mime ====
Version update (23.04.2 -> 23.04.3)
Subpackages: akonadi-plugin-mime libKPim5AkonadiMime5

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== akonadi-notes ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== akonadi-search ====
Version update (23.04.2 -> 23.04.3)
Subpackages: libKPim5AkonadiSearch5

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== akonadi-server ====
Version update (23.04.2 -> 23.04.3)
Subpackages: libKPim5AkonadiAgentBase5 libKPim5AkonadiCore5 libKPim5AkonadiPrivate5 libKPim5AkonadiWidgets5 libKPim5AkonadiXml5

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== akregator ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== analitza ====
Version update (23.04.2 -> 23.04.3)
Subpackages: libAnalitza8

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== ark ====
Version update (23.04.2 -> 23.04.3)
Subpackages: libkerfuffle23

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== baloo5-widgets ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== bind ====
Subpackages: bind-doc bind-utils

- rebuild bind-utils on libuv updates (bsc#1212090)

==== blinken ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== calendarsupport ====
Version update (23.04.2 -> 23.04.3)
Subpackages: libKPim5CalendarSupport5

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== dolphin ====
Version update (23.04.2 -> 23.04.3)
Subpackages: dolphin-part dolphin-zsh-completion libdolphinvcs5

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== eog ====
Version update (44.2 -> 44.3)

- Update to version 44.3:
  + EOG gets stuck in infinite while loop if animation loops a
    finite number of times.
  + Updated translations.

==== eventviews ====
Version update (23.04.2 -> 23.04.3)
Subpackages: libKPim5EventViews5

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- Changes since 23.04.2:
  * Invalidate model to apply sortCompletedTodosSeparately pref (kde#458254)

==== evince ====
Version update (44.2 -> 44.3)
Subpackages: evince-plugin-comicsdocument evince-plugin-djvudocument evince-plugin-dvidocument evince-plugin-pdfdocument evince-plugin-tiffdocument evince-plugin-xpsdocument libevdocument3-4 libevview3-3 typelib-1_0-EvinceDocument-3_0 typelib-1_0-EvinceView-3_0

- Update to version 44.3:
  + Add support for validating appdata versions.
  + Check for NEWS and appdata updates for new releases.
  + Don't discard matches without text area in the find bar.
  + Updated translations.

==== ffmpegthumbs ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== filelight ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== fwupd ====
Subpackages: fwupd-bash-completion libfwupd2 typelib-1_0-Fwupd-2_0

- Enable efi_fw_update on riscv64
- fwupdagent and dfu-tool are only built %{with efi_fw_update}

==== gdm ====
Subpackages: gdm-schema gdmflexiserver libgdm1 typelib-1_0-Gdm-1_0

- Merge pulseaudio-gdm-hooks into the gdm package. This was previously
  part of pulseaudio.spec, which was fairly complex (dir ownership,
  separate tmpfiles, dependencies) and it also caused pulseaudio.spec
  to runtime depend on gdm. Avoid all of that by just adding it here:
  + Add default.pa
  + Add entries to gdm.tmpfiles

==== gnome-maps ====
Version update (44.2 -> 44.3)

- Update to version 44.3:
  + Add support for auth headers in the OpenTripPlanner plugin.
  + Updated translations.

==== gnome-user-docs ====
Version update (44.1 -> 44.3)

- Update to version 44.3:
  + Updated translations.

==== grantleetheme ====
Version update (23.04.2 -> 23.04.3)
Subpackages: libKPim5GrantleeTheme5

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== gupnp ====
Version update (1.6.3 -> 1.6.4)

- Update to version 1.6.4:
  + Keep a weak reference to proxy in action.
  + Add API to provide HTTP credentials for simple authentication.
  + Remove xmlRecoverMemory usage.
- Drop 80e68995.patch: Fixed upstream.

==== gwenview5 ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- Changes since 23.04.2:
  * Pass exivData as argument to avoid crash in exiv2 library (kde#470880)

==== hwinfo ====
Version update (22.3 -> 23.1)

- merge gh#openSUSE/hwinfo#137
- adjust exported symbols to yast2-hardware-detection test case
- 23.1
- merge gh#openSUSE/hwinfo#134
- restrict libhd exported symbols to the documented API
  (bsc#1212756)
- fix pppoe compile warning
- 23.0

==== incidenceeditor ====
Version update (23.04.2 -> 23.04.3)
Subpackages: libKPim5IncidenceEditor5

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== kaccounts-integration ====
Version update (23.04.2 -> 23.04.3)
Subpackages: libkaccounts2

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== kaccounts-providers ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== kaddressbook ====
Version update (23.04.2 -> 23.04.3)
Subpackages: kaddressbook-doc libKPim5AddressbookImportExport5

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== kalgebra ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== kamera ====
Version update (23.04.2 -> 23.04.3)
Subpackages: kamera-lang kio_kamera

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== kanagram ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- Changes since 23.04.2:
  * Fix a minor bug Removing letters while a guess is being checked is no longer possible.

==== kapptemplate ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== kate ====
Version update (23.04.2 -> 23.04.3)
Subpackages: kate-plugins

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- Changes since 23.04.2:
  * Improve code action invocation with no selection
  * Fix LSP inlay hint deserialization
  * lsp: Use label as insertText as a last resort

==== kbruch ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== kcachegrind ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== kcalc ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== kcalutils ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== kcharselect ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== kcolorchooser ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== kde-print-manager ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== kdeconnect-kde ====
Version update (23.04.2 -> 23.04.3)
Subpackages: kdeconnect-kde-zsh-completion

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- Changes since 23.04.2:
  * Fix kdeconnect_open desktop file type (kde#424782)
  * Use explicit constructor for QSslCertificate with value initialized argument (kde#469428)

==== kdeedu-data ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== kdegraphics-thumbnailers ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== kdenetwork-filesharing ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== kdepim-addons ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== kdepim-runtime ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== kdevelop5 ====
Version update (23.04.2 -> 23.04.3)
Subpackages: kdevplatform libkdevplatform511

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== kdialog ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== kgeography ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== khangman ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== khelpcenter5 ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== kidentitymanagement ====
Version update (23.04.2 -> 23.04.3)
Subpackages: kidentitymanagement-lang libKPim5IdentityManagement5 libKPim5IdentityManagementWidgets5

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== kig ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== kimap ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== kio-extras5 ====
Version update (23.04.2 -> 23.04.3)
Subpackages: libkioarchive5

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== kio_audiocd ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== kipi-plugins ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== kiten ====
Version update (23.04.2 -> 23.04.3)
Subpackages: fonts-KanjiStrokeOrders

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== kitinerary ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- Changes since 23.04.2:
  * Use a faster regex for matching Grimaldi Line passenger data
  * Add Color Line extractor script
  * Support onepagebooking PDFs as well
  * Expand the Fjord Line trigger expression to cover newer tickets
  * Treat any sequence of * characters as RCT2 empty marker
  * Accept also slightly larger ERA SSBv3 codes
  * Simplify Trenitalia extractor
  * Extract DJH membership card barcodes
  * Fix extraction of multi-page Trenitalia tickets
  * Improve handling of Flixbus train tickets
  * Add additional sanity checks for ERA SSBv2 tickets
  * Relax the SNCB barcode trigger pattern a bit

==== kldap ====
Version update (23.04.2 -> 23.04.3)
Subpackages: libKPim5Ldap5

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== kleopatra ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== kmag ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== kmahjongg ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== kmail ====
Version update (23.04.2 -> 23.04.3)
Subpackages: kmail-application-icons ktnef

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- Changes since 23.04.2:
  * Don't remove margins
  * Quote html chars in subject too
  * Remove unused QtDBus
  * kmsearchmessagemodel.cpp - Avoid crash for invalid Akonadi::Item
  * Allow to restore recent dir
  * Fix display email when we have < ... >

==== kmail-account-wizard ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== kmailtransport ====
Version update (23.04.2 -> 23.04.3)
Subpackages: libKPim5MailTransport5 libKPim5MailTransportAkonadi5

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== kmbox ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== kmime ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== kmines ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== kmousetool ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== kmplot ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== knotes ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== kompare ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== konsole ====
Version update (23.04.2 -> 23.04.3)
Subpackages: konsole-part konsole-part-lang konsole-zsh-completion

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- Changes since 23.04.2:
  * Tab bar settings: fix MIME type filtering of custom CSS file picker
  * Hides redundant widgets on dialog for emoji font selection (kde#469563)

==== kontact ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== kontactinterface ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== konversation ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- Changes since 23.04.2:
  * Highlights sounds file picker: fix setting file filter by MIME types (kde#433667)

==== korganizer ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== kpat ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- Changes since 23.04.2:
  * Solve the simple simon autodrop problem less aggressively (kde#469991)
  * Reinit Golf solver correctly after switching games (kde#470166)

==== kpimtextedit ====
Version update (23.04.2 -> 23.04.3)
Subpackages: libKPim5TextEdit5

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- Changes since 23.04.2:
  * Remove prefix

==== kpkpass ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== kqtquickcharts ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== kreversi ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- Changes since 23.04.2:
  * fix board position in portrait mode (kde#445131)

==== ksanecore ====
Version update (23.04.2 -> 23.04.3)
Subpackages: ksanecore-lang libKSaneCore1

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== ksmtp ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== ksudoku ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== ktnef ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== ktouch ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== kwalletmanager5 ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== kwordquiz ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== libgravatar ====
Version update (23.04.2 -> 23.04.3)
Subpackages: libKPim5Gravatar5

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== libkcddb ====
Version update (23.04.2 -> 23.04.3)
Subpackages: libKF5Cddb5

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== libkcompactdisc ====
Version update (23.04.2 -> 23.04.3)
Subpackages: libKF5CompactDisc5 libkcompactdisc-lang

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== libkdcraw ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== libkdegames ====
Version update (23.04.2 -> 23.04.3)
Subpackages: kdegames-carddecks-default libKF5KDEGames7 libkdegames-qt5-imports

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== libkdepim ====
Version update (23.04.2 -> 23.04.3)
Subpackages: libKPim5Libkdepim5

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== libkeduvocdocument ====
Version update (23.04.2 -> 23.04.3)
Subpackages: libKEduVocDocument5 libkeduvocdocument-lang

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== libkexiv2 ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== libkgapi ====
Version update (23.04.2 -> 23.04.3)
Subpackages: libKPim5GAPICalendar5 libKPim5GAPICore5 libKPim5GAPIPeople5 libKPim5GAPITasks5 libkgapi-lang sasl2-kdexoauth2

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== libkipi ====
Version update (23.04.2 -> 23.04.3)
Subpackages: libKF5Kipi32_0_0 libkipi-data

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== libkleo ====
Version update (23.04.2 -> 23.04.3)
Subpackages: libKPim5libkleo5

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== libkmahjongg ====
Version update (23.04.2 -> 23.04.3)
Subpackages: libKF5KMahjongglib5

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== libkomparediff2 ====
Version update (23.04.2 -> 23.04.3)
Subpackages: libkomparediff2-5 libkomparediff2-lang

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- Changes since 23.04.2:
  * Add patch-level to version, also unbreaks KOMPAREDIFF2_VERSION C++ macro

==== libksane ====
Version update (23.04.2 -> 23.04.3)
Subpackages: libKF5Sane5 libksane-lang

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== libksieve ====
Version update (23.04.2 -> 23.04.3)
Subpackages: libksieve5

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== libstorage-ng ====
Version update (4.5.121 -> 4.5.122)
Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1

- merge gh#openSUSE/libstorage-ng#938
- prioritize activation of swap
- 4.5.122

==== libxcrypt ====
Version update (4.4.34 -> 4.4.35)
Subpackages: libcrypt1 libxcrypt-devel

- update to 4.4.35:
  * Fix build with Perl v5.38.0 (issue #170).
  * Fix build with MinGW-w(32|64).

==== lokalize ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- Changes since 23.04.2:
  * Ignore word wrapping newlines when creating message diffs

==== mailcommon ====
Version update (23.04.2 -> 23.04.3)
Subpackages: libKPim5MailCommon5

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== mailimporter ====
Version update (23.04.2 -> 23.04.3)
Subpackages: libKPim5MailImporter5 libKPim5MailImporterAkonadi5

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== mariadb ====
Version update (10.11.3 -> 11.0.2)
Subpackages: libmariadbd19 mariadb-client mariadb-errormessages

- Update to 11.0.2:
  * release notes and changelog:
    https://mariadb.com/kb/en/mariadb-11-0-2-release-notes/
    https://mariadb.com/kb/en/mariadb-11-0-2-changelog/

==== mbox-importer ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== messagelib ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== mobipocket ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== mozilla-nss ====
Version update (3.89.1 -> 3.90)
Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs mozilla-nss-tools

- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to
    sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths
    larger than the output size of the hash function used,
    or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian
    package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update
    whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- add nss-fix-bmo1836925.patch to fix build-errors
- Remove nss-fips-tls-allow-md5-prf.patch, since we no longer need
  the workaround in FIPS mode (bsc#1200325)
- Remove nss-fips-tests-skip.patch. This is no longer needed since
  we removed the code to short-circuit broken hashes and moved to
  using the SLI
- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken builds
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions
- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks

==== okular ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== parley ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== pim-data-exporter ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== pim-sieve-editor ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== pimcommon ====
Version update (23.04.2 -> 23.04.3)
Subpackages: libKF5PimCommon5 libKF5PimCommonAkonadi5

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== pulseaudio ====
Subpackages: libpulse-mainloop-glib0 libpulse0 pulseaudio-setup pulseaudio-utils system-user-pulse

- Drop pulseaudio-gdm-hooks subpackage including default.pa-for-gdm
  and pulseaudio-gdm-hooks.tmpfiles. Moved to gdm instead.

==== python-configobj ====

- Add remove_six.patch (gh#DiffSK/configobj#239) removing the
  need for six.

==== python-urllib3 ====
Version update (2.0.2 -> 2.0.3)

- Disable test_deprecated_no_scheme so it needs network connection to
  run correctly.
- update to 2.0.3:
  * Allowed alternative SSL libraries such as LibreSSL, while
    still issuing a warning as we cannot help users facing issues
    with implementations other than OpenSSL.
  * Deprecated URLs which don't have an explicit scheme
  * Fixed response decoding with Zstandard when compressed data
    is made of several frames.
  * Fixed ``assert_hostname=False`` to correctly skip hostname
    check.

==== python311 ====
Version update (3.11.3 -> 3.11.4)
Subpackages: python311-curses python311-dbm

- Update to Python 3.11.4:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2007-4559-filter-tarfile_extractall.patch

==== python311-core ====
Version update (3.11.3 -> 3.11.4)
Subpackages: libpython3_11-1_0 python311-base

- Update to Python 3.11.4:
  - gh-103142: The version of OpenSSL used in Windows and
    Mac installers has been upgraded to 1.1.1u to address
    CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
    as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
    fixed previously in 1.1.1t (gh-101727).
  - gh-102153: urllib.parse.urlsplit() now strips leading C0
    control and space characters following the specification for
    URLs defined by WHATWG in response to CVE-2023-24329
    (bsc#1208471).
  - gh-99889: Fixed a security in flaw in uu.decode() that could
    allow for directory traversal based on the input if no
    out_file was specified.
  - gh-104049: Do not expose the local on-disk
    location in directory indexes produced by
    http.client.SimpleHTTPRequestHandler.
  - gh-103935: trace.__main__ now uses io.open_code() for files
    to be executed instead of raw open().
  - gh-102953: The extraction methods in tarfile, and
    shutil.unpack_archive(), have a new filter argument that
    allows limiting tar features than may be surprising or
    dangerous, such as creating files outside the destination
    directory. See Extraction filters for details (fixing
    CVE-2007-4559, bsc#1203750).
- Remove upstreamed patches:
  - CVE-2007-4559-filter-tarfile_extractall.patch

==== signon-kwallet-extension ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== skanlite ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== spectacle ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== step ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== swtpm ====
Subpackages: swtpm-selinux

- Make selinux optional to allow building this package for Leap, too.

==== umbrello ====
Version update (23.04.2 -> 23.04.3)

- Update to 23.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/23.04.3/
- No code change since 23.04.2

==== upower ====
Version update (1.90.0 -> 1.90.1)
Subpackages: libupower-glib3 typelib-1_0-UpowerGlib-1_0

- Update to 1.90.1:
  * Detect headsets with kernel batteries such as Logitech and
    Steelseries headsets, and make them automatically disappear if
    the headset is turned off (if the kernel driver supports the
    wireless_status attribute)
  * Hide duplicate Logitech Bluetooth devices (Bolt-compatible devices
    connected through Bluetooth would show as 2 batteries)
  * Hide duplicate Logitech wireless devices when they get connected
    through USB as well
  * Fix Bluetooth device names not synchronising, and use user-chosen
    names when available
  * Handle the "present" sysfs attribute changing
  * Fix iDevices not appearing
  * Fix reading capacity_level with newer libgudev

==== wicked ====
Subpackages: wicked-service

- ifconfig: fix arp notify loop (boo#1212806) and burst sending
  [+ 0001-fix_arp_notify_loop_and_burst_sending.patch]

Guillaume Gardet

tags

participants (1)