Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=3&version=Tumbleweed&build=20230226 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ImageMagick (7.1.0.61 -> 7.1.0.62) NetworkManager (1.42.0 -> 1.42.2) bluedevil5 (5.27.0 -> 5.27.1) breeze (5.27.0 -> 5.27.1) breeze-gtk (5.27.0 -> 5.27.1) createrepo_c discover (5.27.0 -> 5.27.1) drkonqi5 (5.27.0 -> 5.27.1) flatpak gimp (2.10.32 -> 2.10.34) gjs (1.74.1 -> 1.74.2) glib2 (2.74.5 -> 2.74.6) greybird-geeko-theme grub2 harfbuzz (7.0.0 -> 7.0.1) heaptrack kactivitymanagerd (5.27.0 -> 5.27.1) kcm_flatpak (5.27.0 -> 5.27.1) kcm_sddm (5.27.0 -> 5.27.1) kde-cli-tools5 (5.27.0 -> 5.27.1) kde-gtk-config5 (5.27.0 -> 5.27.1) kgamma5 (5.27.0 -> 5.27.1) khotkeys5 (5.27.0 -> 5.27.1) kinfocenter5 (5.27.0 -> 5.27.1) kmenuedit5 (5.27.0 -> 5.27.1) kpipewire (5.27.0 -> 5.27.1) kscreen5 (5.27.0 -> 5.27.1) kscreenlocker (5.27.0 -> 5.27.1) ksshaskpass5 (5.27.0 -> 5.27.1) ksystemstats5 (5.27.0 -> 5.27.1) kwayland-integration (5.27.0 -> 5.27.1) kwin5 (5.27.0 -> 5.27.1) kwrited5 (5.27.0 -> 5.27.1) lapack layer-shell-qt (5.27.0 -> 5.27.1) libcbor libfido2 (1.12.0 -> 1.13.0) libguestfs (1.50.0 -> 1.50.1) libjpeg-turbo (2.1.4 -> 2.1.5.1) libkdecoration2 (5.27.0 -> 5.27.1) libkscreen2 (5.27.0 -> 5.27.1) libksysguard5 (5.27.0 -> 5.27.1) libnotify (0.8.1 -> 0.8.2) libyui (4.4.8 -> 4.4.9) libyui-ncurses (4.4.8 -> 4.4.9) libyui-ncurses-pkg (4.4.8 -> 4.4.9) libyui-qt (4.4.8 -> 4.4.9) libyui-qt-graph (4.4.8 -> 4.4.9) libyui-qt-pkg (4.4.8 -> 4.4.9) mariadb (10.10.2 -> 10.10.3) milou5 (5.27.0 -> 5.27.1) nodejs19 (19.6.0 -> 19.7.0) oxygen5-sounds (5.27.0 -> 5.27.1) pango (1.50.12 -> 1.50.13) plasma-browser-integration (5.27.0 -> 5.27.1) plasma-nm5 (5.27.0 -> 5.27.1) plasma5-addons (5.27.0 -> 5.27.1) plasma5-desktop (5.27.0 -> 5.27.1) plasma5-disks (5.27.0 -> 5.27.1) plasma5-integration (5.27.0 -> 5.27.1) plasma5-openSUSE plasma5-pa (5.27.0 -> 5.27.1) plasma5-systemmonitor (5.27.0 -> 5.27.1) plasma5-thunderbolt (5.27.0 -> 5.27.1) plasma5-workspace (5.27.0 -> 5.27.1) polkit-kde-agent-5 (5.27.0 -> 5.27.1) powerdevil5 (5.27.0 -> 5.27.1) python-iniconfig (1.1.1 -> 2.0.0) python-lxml python-typing_extensions (4.4.0 -> 4.5.0) snapper spice-gtk (0.41 -> 0.42) sqlite3 (3.40.1 -> 3.41.0) sudo (1.9.13 -> 1.9.13p1) systemsettings5 (5.27.0 -> 5.27.1) thunar (4.18.3 -> 4.18.4) tiff unbound (1.17.0 -> 1.17.1) xdg-desktop-portal-kde (5.27.0 -> 5.27.1) xmlsec1 yast2-python-bindings (4.5.1 -> 4.5.2) yast2-security (4.5.5 -> 4.5.6) zstd (1.5.2 -> 1.5.4) === Details === ==== ImageMagick ==== Version update (7.1.0.61 -> 7.1.0.62) Subpackages: ImageMagick-config-7-SUSE ImageMagick-extra libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - version update to 7.1.0.62 https://github.com/ImageMagick/Website/blob/main/ChangeLog.md - add %bcond_without djvulibre ==== NetworkManager ==== Version update (1.42.0 -> 1.42.2) Subpackages: NetworkManager-bluetooth NetworkManager-pppoe NetworkManager-tui NetworkManager-wwan libnm0 typelib-1_0-NM-1_0 - Update to version 1.42.2: + Add build option to set the mobile-broadband-provider-info database path. + Add new "ipv[46].replace-local-rule" setting to control whether to remove the local route rule that is automatically generated. + Add the DHCPv6 IAID to the lease information exposed in /run and on D-Bus. + Fix assuming team connections at boot. + Fix race condition when setting the MAC address of an OVS interface. + Fix constructing the IPv4 name servers variable passed to dispatcher scripts. + Don't use tentative IPv6 address to resolve the system hostname via DNS. + Deprecate the "Master" property of the NMActiveConnection D-Bus object in favor of the new "Controller" property. - Drop 1539.patch: Fixed upstream. - Refresh patch with quilt: + 0001-Coerce-connectivity-LIMITED-to-NONE-when-device-is-d.patch ==== bluedevil5 ==== Version update (5.27.0 -> 5.27.1) Subpackages: bluedevil5-lang - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== breeze ==== Version update (5.27.0 -> 5.27.1) Subpackages: breeze5-cursors breeze5-decoration breeze5-style breeze5-style-lang libbreezecommon5-5 - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== breeze-gtk ==== Version update (5.27.0 -> 5.27.1) Subpackages: gtk2-metatheme-breeze gtk3-metatheme-breeze gtk4-metatheme-breeze metatheme-breeze-common - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== createrepo_c ==== Subpackages: libcreaterepo_c0 python3-createrepo_c - Precompile the python bytecode to avoid lingering files on package removal. - Add upstream patches (already merged) to publish IMA metadata in repomd repositories + 0001-Add-optional-filelists_ext-metadata.patch + 0002-Rename-filelists_ext-to-filelists-ext-to-be-consiste.patch + 0003-Rename-filelists_ext.xml-metadata-to-filelists-ext.x.patch + 0004-Add-missing-ext-to-filelists-ext-repomd-record.patch - Add upstream patches (under review) to rename filelists-ext + 0005-Complete-renaming-to-filelists-ext.patch - Use git for merging in %autosetup ==== discover ==== Version update (5.27.0 -> 5.27.1) Subpackages: discover-backend-flatpak discover-backend-fwupd discover-backend-packagekit discover-lang - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - Changes since 5.27.0: * [notifier] Fix KAboutData component name * Fix parsing of the <Categories> tag. * Extend CategoriesTest with checking of <Categories> tag parsing. * flatpak: fix build with appstream<0.16 * flatpak: Allow using newer appstream API to look up by bundle id ==== drkonqi5 ==== Version update (5.27.0 -> 5.27.1) Subpackages: drkonqi5-lang - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - Changes since 5.27.0: * Make python distro and psutil modules in the gdb preable optional * Handle WITH_SENTRY correctly * login on field accepting (kde#466109) - Drop patches, now upstream: * 0001-Handle-WITH_SENTRY-correctly.patch * 0002-Make-python-distro-and-psutil-modules-in-the-gdb-pre.patch ==== flatpak ==== Subpackages: flatpak-remote-flathub flatpak-zsh-completion libflatpak0 system-user-flatpak - Add flatpak-fix-gpg-agent-double-free.patch: stdout stream of a subprocess is owned by the subprocess, not the caller, so don't use g_autoptr for it to prevent double free (bsc#1207434). ==== gimp ==== Version update (2.10.32 -> 2.10.34) Subpackages: gimp-plugin-aa gimp-plugins-python libgimp-2_0-0 libgimpui-2_0-0 - Update to 2.10.34: - Core: - Check for updates now works on macOS (backported from 2.99.14). - Update help IDs for better integration with the documentation website. - Symmetry dockable contents is now shown, yet deactivated, when no images are opened, improving discoverability (backported from 2.99.14). - DBus fully disabled on macOS (in some case, it could even freeze GIMP process when dbus is present yet not responding). Open With feature (e.g. from file browsers) still work fine as it uses a different code path on macOS. Other features using dbus (opening files or running batch commands from a separate GIMP process) won't work, but they probably never did on macOS anyway. - "Canvas Size" dialog took too much vertical space and now better uses the horizontal space by moving the preview and offset fiels to the right side, and the "Center" button just below (backported from 2.99.8). - Template selector (backported from 2.99.6) in resize dialog. - Color scale preferences (0..255/0..100 and LCh/HSV settings in Colors selection dialogs) are now remembered across sessions. - Eye icon header added to the item tree views to make it more obvious where to click for item visibility and links (backported from 2.99.10) - Revert color proofing behavior changed in 2.10.32 which resulted in inconsistent past workflows. - "Lock path strokes" tooltip for the dockable icon was renamed "Lock path". - Plug-ins: - DDS: make GUI translatable. - file-raw: added high bit depth precision export (partial backport from 2.99.12). - TIFF: * Various bug fixes; * better check for invalid resolutions on import; * do not generated warnings for incorrect RichTIFFIPTC tags produced by Adobe products (only output a message to stderr, for not completely ignoring these); * Loading "reduced" image or not is now an option. We use a heuristic for the default value of said option (trying to guess if it's a thumbnail by using common usage), but final decision is now up to one knowing the image you load (backported from 2.99.14); * Default TIFF export format is "normal" TIFF, not BigTIFF (making it default was definitely an error in 2.10.32). - PSD: * Various bug fixes; * Useless physical unit conversion removed; * Backported improvement (2.99.10) for importing layers with clipping set (leading to color bleeding); * Backported improvements (2.99.10) for importing clipping layers; * Paths are now exported (backported from 2.99.14). - WebP: more informative error messages in some cases. - Flame: various bug fixes. - JPEG-XL: * metadata import backported from 2.99.14 - (requires libjxl 0.7.0) * Partial backport (2.99.8) of JPEG-XL export; export is always in 8bit lossless. - HEIF: various bug fixes. - Dicom: various bug fixes. - help: * macOS: https support now working fine for help files (bypassing lack of support in GIO for macOS platform). - animation-play: fixed on macOS. - PDF: * Import: new option "Fill transparent areas with white" to fill the background in white (ON by default as most office PDF writers seem to rely on readers filling the background with white), allowing importing transparent PDF files. * Export: new option "Fill transparent areas with background color" allowing to decide whether to export a PDF with transparent background. - TGA: * Added a workaround to load wrongful TGA files exported by Krita (which they fixed on their side too now, see Krita bug 464484). - ICO and CUR: * Magics detection for these formats has been removed (now using only using filename extension) because it was interfering with the detection of certain types of TGA images (which are likely more common than ICO and CUR files, and extension for these should be reliable enough). - Libgimpbase: - GimpMetadata API (in particular the gimp_metadata_set_from_*() functions) are now much less memory-hungry (backported from the main dev branch) when using GExiv 0.12.2 or over. With some huge metadata, it could cause long freeze or even crashes of plug-ins. - Libgimpwidgets: - Color-picking with X11 is now the default when compiled with X11, even if a color-picking portal also exists, because it is always right, whereas portals return color in display space without the space information itself (i.e. without profiles). - New dedicated GimpPickButton implementation for Windows (backported from 2.99.14). - Libgimp: - New wrapper functions around GEGL ops, which also map to items in our Color menu: * gimp_drawable_shadows_highlights() * gimp_drawable_extract_component() ==== gjs ==== Version update (1.74.1 -> 1.74.2) Subpackages: libgjs0 typelib-1_0-GjsPrivate-1_0 - Update to version 1.74.2: + Various fixes ported from the development branch. + Closed bugs and merge requests: - Build error with clang - Can't compile current version with mozjs 102 - Enabling window-list extension causes gnome-shell to crash when running "dconf update" as root - log: Fix an off-by-one buffer overflow ==== glib2 ==== Version update (2.74.5 -> 2.74.6) Subpackages: glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 libgthread-2_0-0 - Update to version 2.74.6: + Bugs fixed: glgo#GNOME/GLib!3239 Backport glgo#GNOME/GLib!3237 “Fix safe_wspawnve #define” to glib-2-74. + Updated translations. ==== greybird-geeko-theme ==== Subpackages: gtk2-metatheme-greybird-geeko gtk3-metatheme-greybird-geeko gtk4-metatheme-greybird-geeko metatheme-greybird-geeko-common - Make "*:link:selected" optional to work around too old gtk4 libs on Leap 15.5, too. ==== grub2 ==== Subpackages: grub2-arm64-efi grub2-snapper-plugin grub2-systemd-sleep-plugin - Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024) * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch - Fix lpar got hung at grub after inactive migration (bsc#1207684) * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch - Rediff * safe_tpm_pcr_snapshot.patch - Patch supersceded * 0001-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch ==== harfbuzz ==== Version update (7.0.0 -> 7.0.1) Subpackages: libharfbuzz-gobject0 libharfbuzz-icu0 libharfbuzz-subset0 libharfbuzz0 typelib-1_0-HarfBuzz-0_0 - Update to version 7.0.1: + Various build and bug fixes ==== heaptrack ==== Subpackages: heaptrack-gui - Try another way to ignore the GLIBC_PRIVATE requirement ==== kactivitymanagerd ==== Version update (5.27.0 -> 5.27.1) - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== kcm_flatpak ==== Version update (5.27.0 -> 5.27.1) - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - Changes since 5.27.0: * DRY the code a bit * use range based for loops where possible * make clazy happy * typo-- * always use frontend strings but convert to backend strings when saving (kde#465818) * add a test case to cover BUG 465818 * don't needlessly define a default constructor * don't else after return * initialize variables where possible * don't declare multiple variables in a single line * don't const primitives * pass qstrings by reference where appropriate * refresh git-blame-ignore-revs for latest clang-format run * automatic clang-format run (clang 15) * enable clang-format * print a cmake feature summary * don't needlessly define default dtors * mark constructors explicit where appropriate * don't declare getters as slots * sort includes * Avoid creating empty fs permission entry from overrides ==== kcm_sddm ==== Version update (5.27.0 -> 5.27.1) - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== kde-cli-tools5 ==== Version update (5.27.0 -> 5.27.1) - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== kde-gtk-config5 ==== Version update (5.27.0 -> 5.27.1) Subpackages: kde-gtk-config5-gtk3 - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - Changes since 5.27.0: * xsettings: restrict `pidof` to own processes * Add support for XWayland client scaling (kde#465733) * Remove unnecessary `canConvert` check * Unset `Gdk/UnscaledDPI` and `Gdk/WindowScalingFactor` on Wayland (kde#465733) ==== kgamma5 ==== Version update (5.27.0 -> 5.27.1) - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== khotkeys5 ==== Version update (5.27.0 -> 5.27.1) - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== kinfocenter5 ==== Version update (5.27.0 -> 5.27.1) Subpackages: kinfocenter5-lang - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - Changes since 5.27.0: * Fix typo in string (kde#466144) ==== kmenuedit5 ==== Version update (5.27.0 -> 5.27.1) - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== kpipewire ==== Version update (5.27.0 -> 5.27.1) Subpackages: kpipewire-imports libKPipeWire5 libKPipeWireDmaBuf5 libKPipeWireRecord5 - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== kscreen5 ==== Version update (5.27.0 -> 5.27.1) Subpackages: kscreen5-plasmoid - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - Changes since 5.27.0: * kcm: notify scale factor change through DBus * kcm: Use correct role for revert button (kde#465788) - Add patch to fix the revert button: * 0001-kcm-use-onRejected-to-handle-reject-button-click.patch ==== kscreenlocker ==== Version update (5.27.0 -> 5.27.1) Subpackages: kscreenlocker-lang libKScreenLocker5 - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - Changes since 5.27.0: * Install logging categories, to make them configurable via KDebugSettings * CMake: Clean up whitespace ==== ksshaskpass5 ==== Version update (5.27.0 -> 5.27.1) Subpackages: ksshaskpass5-lang - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== ksystemstats5 ==== Version update (5.27.0 -> 5.27.1) - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - Changes since 5.27.0: * gpu/nvidia: lower pci id (kde#462512) ==== kwayland-integration ==== Version update (5.27.0 -> 5.27.1) - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== kwin5 ==== Version update (5.27.0 -> 5.27.1) - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - Changes since 5.27.0: * effects/glide: Fix transform (kde#465849) * Aurorae: Add dummy window for working device pixel ratio (kde#452730,kde#465790) * tiling: Make child tiles inherit padding from parent tile (kde#465842) * effects/contrast: Round device coordinates when creating geometry (kde#464526) * cursorsource: fix scaling with Xwayland (kde#466094) * cursordelgate: round cursor position when rendering * outputchangeset: Round passed scale (kde#465850) * Mark Window as damaged when decoration or shadow changes (kde#464417) * Add missing cerrno include. * effects/tileseditor: Set translation domain in QML files (kde#464572) * wayland: Remove SeatInterfacePrivate::accumulatedCapabilities * Match pointer/keyboard/touch lifespan to Seat lifespan * add support for Lima, V3D, VC4 (based on https://github.com/OpenMandrivaAssociation/kwin/blob/master/kwin-5.21.4-add-... made by Bernhard Rosenkraenzer) and update list of supported devices for Panfrost * x11: Drop xv-related workaround * XWayland: Don't dispatch xwayland events in QAbstractEventDispatcher sleeps * tiling: Evacuate tiled windows from custom & quick tiling on output removal (kde#465522) * wayland: Fix a typo in DataControlDeviceV1Interface::sendPrimarySelection() * wayland: Version check before send_primary_selection calls (kde#465657) * Set CXX standard for crossbuilding utility * Include missing header for std::round * Fix button to Qt::MouseButton mapping (kde#465463) * backends/drm: set cursor again after it was hidden (kde#461181) * screencast: Fix region screencasts top coordinate ==== kwrited5 ==== Version update (5.27.0 -> 5.27.1) - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== lapack ==== Subpackages: libblas3 libcblas3 liblapack3 - Set -mfpmath=sse for the entire build for ix86 platforms on SLE/Leap. Since we build for x86_64, we know that sse is available. This helps to avoid effects from excess precision that can be seen in the test suite. On Factory we leave -ffloat-store for the test suite only as this option comes at a performance penalty. We may see precision related issues in the test suite with future compilers regardless. ==== layer-shell-qt ==== Version update (5.27.0 -> 5.27.1) - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== libcbor ==== - Merge change from SLE15 SP4 made by pgajdos@suse.com on Tue Apr 5 14:36:56 UTC 2022: - do not build manual page for 15sp4, it does not succeed [bsc#1197743] - added sources + libcbor.3 ==== libfido2 ==== Version update (1.12.0 -> 1.13.0) - Version 1.13.0 (2023-02-20) * Support for linking against OpenSSL on Windows; gh#668. * New API calls: + fido_assert_empty_allow_list; + fido_cred_empty_exclude_list. * fido2-token: fix issue when listing large blobs. * Improved support for different fuzzing engines. ==== libguestfs ==== Version update (1.50.0 -> 1.50.1) Subpackages: libguestfs-xfs libguestfs0 - Update to version 1.50.1 * This is a bug fix release. No upstream changelog. ==== libjpeg-turbo ==== Version update (2.1.4 -> 2.1.5.1) Subpackages: libjpeg8 libturbojpeg0 - update to 2.1.5.1: * Fixed a regression introduced by 2.0 beta1[15] that caused a buffer overrun in the progressive Huffman encoder when attempting to transform a specially-crafted malformed 12-bit-per-component JPEG image into a progressive 12-bit-per-component JPEG image using a 12-bit-per-component build of libjpeg-turbo. * Fixed an issue whereby, when using a 12-bit-per-component build of libjpeg-turbo (-DWITH_12BIT=1), passing samples with values greater than 4095 or less than 0 to jpeg_write_scanlines() caused a buffer overrun or underrun in the RGB-to-YCbCr color converter. * Fixed a floating point exception that occurred when attempting to use the jpegtran -drop and -trim options to losslessly transform a specially-crafted malformed JPEG image. * Fixed an issue in tjBufSizeYUV2() whereby it returned a bogus result, rather than throwing an error, if the align parameter was not a power of 2. * Fixed a similar issue in tjCompressFromYUV() whereby it generated a corrupt JPEG image in certain cases, rather than throwing an error, if the align parameter was not a power of 2. * Fixed an issue whereby tjDecompressToYUV2(), which is a wrapper for tjDecompressToYUVPlanes(), used the desired YUV image dimensions rather than the actual scaled image dimensions when computing the plane pointers and strides to pass to tjDecompressToYUVPlanes(). This caused a buffer overrun and subsequent segfault if the desired image dimensions exceeded the scaled image dimensions. * Fixed an issue whereby, when decompressing a 12-bit-per-component JPEG image (-DWITH_12BIT=1) using an alpha-enabled output color space such as JCS_EXT_RGBA, the alpha channel was set to 255 rather than 4095. * Fixed an issue whereby the Java version of TJBench did not accept a range of quality values. * Fixed an issue whereby, when -progressive was passed to TJBench, the JPEG input image was not transformed into a progressive JPEG image prior to decompression. ==== libkdecoration2 ==== Version update (5.27.0 -> 5.27.1) Subpackages: libkdecorations2-5 libkdecorations2-5-lang libkdecorations2private10 - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== libkscreen2 ==== Version update (5.27.0 -> 5.27.1) Subpackages: libKF5Screen8 libKF5ScreenDpms8 libkscreen2-plugin - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - Changes since 5.27.0: * Fix potential crash setting new configs (kde#464590) ==== libksysguard5 ==== Version update (5.27.0 -> 5.27.1) Subpackages: ksysguardsystemstats-data libKSysGuardSystemStats1 libksysguard5-imports libksysguard5-plugins - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - Changes since 5.27.0: * formatter: Properly extract strings to a translation catalog (kde#465281,kde#465282) ==== libnotify ==== Version update (0.8.1 -> 0.8.2) Subpackages: libnotify-tools libnotify4 typelib-1_0-Notify-0_7 - Update to version 0.8.2: + Set new summary for library. + Docs: - Port to gi-docgen. - Fix URL to Desktop Notification Spec. + meson: - Replace deprecated meson.source_root() calls. - Bump minimum meson version to 0.58. + Introspection docs fixes. - Following upstreams port to gi-docgen, drop gtk-doc and add meson, xsltproc and pkgconfig(gi-docgen) BuildRequires. Also pass explicit man=true to meson, ensure we are building manpages. ==== libyui ==== Version update (4.4.8 -> 4.4.9) - Fixed build with GCC13 (-Woverloaded-virtual) (bsc#1208238) - build-all: Don't build bindings with --small (-s) - More docs for YShortcutManager (FAQ for our QA) - Merged PR #88 from krai: libyui-ncurses: Replace off64_t with off_t and stat64 with stat - 4.4.9 ==== libyui-ncurses ==== Version update (4.4.8 -> 4.4.9) - Fixed build with GCC13 (-Woverloaded-virtual) (bsc#1208238) - build-all: Don't build bindings with --small (-s) - More docs for YShortcutManager (FAQ for our QA) - Merged PR #88 from krai: libyui-ncurses: Replace off64_t with off_t and stat64 with stat - 4.4.9 ==== libyui-ncurses-pkg ==== Version update (4.4.8 -> 4.4.9) - Fixed build with GCC13 (-Woverloaded-virtual) (bsc#1208238) - build-all: Don't build bindings with --small (-s) - More docs for YShortcutManager (FAQ for our QA) - Merged PR #88 from krai: libyui-ncurses: Replace off64_t with off_t and stat64 with stat - 4.4.9 ==== libyui-qt ==== Version update (4.4.8 -> 4.4.9) - Fixed build with GCC13 (-Woverloaded-virtual) (bsc#1208238) - build-all: Don't build bindings with --small (-s) - More docs for YShortcutManager (FAQ for our QA) - Merged PR #88 from krai: libyui-ncurses: Replace off64_t with off_t and stat64 with stat - 4.4.9 ==== libyui-qt-graph ==== Version update (4.4.8 -> 4.4.9) - Fixed build with GCC13 (-Woverloaded-virtual) (bsc#1208238) - build-all: Don't build bindings with --small (-s) - More docs for YShortcutManager (FAQ for our QA) - Merged PR #88 from krai: libyui-ncurses: Replace off64_t with off_t and stat64 with stat - 4.4.9 ==== libyui-qt-pkg ==== Version update (4.4.8 -> 4.4.9) - Fixed build with GCC13 (-Woverloaded-virtual) (bsc#1208238) - build-all: Don't build bindings with --small (-s) - More docs for YShortcutManager (FAQ for our QA) - Merged PR #88 from krai: libyui-ncurses: Replace off64_t with off_t and stat64 with stat - 4.4.9 ==== mariadb ==== Version update (10.10.2 -> 10.10.3) Subpackages: libmariadbd19 mariadb-client mariadb-errormessages - Update to 10.10.3: https://mariadb.com/kb/en/mariadb-10-10-3-release-notes/ https://mariadb.com/kb/en/mariadb-10-10-3-changelog/ - Update mariadb.keyring ==== milou5 ==== Version update (5.27.0 -> 5.27.1) Subpackages: milou5-lang - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== nodejs19 ==== Version update (19.6.0 -> 19.7.0) Subpackages: npm19 - Update to version 19.7.0: * deps: + upgrade npm to 9.5.0 + update undici to v5.20.0 * stream: add abort signal for ReadableStream and WritableStream * url: replace url-parser with ada (not language) - Changes in version 19.6.1: * fixes permissions policies can be bypassed via process.mainModule (bsc#1208481, CVE-2023-23918) * fixes insecure loading of ICU data through ICU_DATA environment variable (bsc#1208487, CVE-2023-23920) * fixes OpenSSL error handling issues in nodejs crypto library (bsc#1208483, CVE-2023-23919) * updates undici to v5.19.1 + Fetch API in Node.js did not protect against CRLF injection in host headers + Regular Expression Denial of Service in Headers in Node.js fetch API (bsc#1208413, bsc#1208485, CVE-2023-24807, CVE-2023-23936) - linker_lto_jobs.patch: refreshed - node-gyp_7.1.2.tar.xz: added dependencies - node-gyp-config.patch: allows gyp 7.1.2 to run with node 19.x ==== oxygen5-sounds ==== Version update (5.27.0 -> 5.27.1) - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== pango ==== Version update (1.50.12 -> 1.50.13) Subpackages: libpango-1_0-0 typelib-1_0-Pango-1_0 - Update to version 1.50.13: + win32: - Add back fallback for empty fontsets - Improve DirectWrite support + Fix word segmentation for Japanese + Don't set backspace-deletes-char for math symbols + coretext: Fix a crash + cairo: Apply metrics hinting to underlines too + Treat COLRv1 fonts as color fonts ==== plasma-browser-integration ==== Version update (5.27.0 -> 5.27.1) - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== plasma-nm5 ==== Version update (5.27.0 -> 5.27.1) Subpackages: plasma-nm5-openconnect plasma-nm5-openvpn plasma-nm5-pptp plasma-nm5-vpnc - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - Changes since 5.27.0: * Guard against double instantiation or double-free of PlasmaNM.NetworkModel (kde#465805) * Filter out the loopback device (kde#465655) * Revert "Use QWindow instead of KWindowSystem to set KeepAbove" (kde#465751) ==== plasma5-addons ==== Version update (5.27.0 -> 5.27.1) Subpackages: plasma5-addons-lang - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== plasma5-desktop ==== Version update (5.27.0 -> 5.27.1) Subpackages: plasma5-desktop-emojier - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - Changes since 5.27.0: * applets/taskmanager: don't honor groupPopups setting in IOTM form factor (kde#464627) ==== plasma5-disks ==== Version update (5.27.0 -> 5.27.1) - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== plasma5-integration ==== Version update (5.27.0 -> 5.27.1) Subpackages: plasma5-integration-plugin plasma5-integration-plugin-lang - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - Changes since 5.27.0: * autotests: Link against KXmlGui * autotests: Fix CMake code style (use some line breaks) * Remove unused include ==== plasma5-openSUSE ==== Subpackages: plasma5-defaults-openSUSE plasma5-theme-openSUSE plasma5-workspace-branding-openSUSE sddm-theme-openSUSE - Update to 5.27.1 ==== plasma5-pa ==== Version update (5.27.0 -> 5.27.1) Subpackages: plasma5-pa-lang - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== plasma5-systemmonitor ==== Version update (5.27.0 -> 5.27.1) - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== plasma5-thunderbolt ==== Version update (5.27.0 -> 5.27.1) - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== plasma5-workspace ==== Version update (5.27.0 -> 5.27.1) Subpackages: gmenudbusmenuproxy plasma5-session plasma5-session-wayland plasma5-workspace-libs xembedsniproxy - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - Changes since 5.27.0: * sddm-wayland-session: Disable global shortcuts * kcms/users: Port Connections to modern syntax * Better screen removal handling (kde#465892) * applets/digital-clock: fix logic error in tooltip (kde#465873) * Fix search for DWD weather data engine * applets/mediacontroller: add test for interacting with MPRIS2 interface * kcms/region_language: Down highlight delegate on press * If the desktopview is not deleted, don'r emit screenRemoved (kde#465536) * set LANG if we have language to glibc locale mapping (kde#464983) * plasmacalendarintegration: Omit astronomical events from Holidays data (kde#465539) * shell: read thickness from default group * use KDE_INSTALL_LIBEXECDIR ==== polkit-kde-agent-5 ==== Version update (5.27.0 -> 5.27.1) - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== powerdevil5 ==== Version update (5.27.0 -> 5.27.1) Subpackages: powerdevil5-lang - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - Changes since 5.27.0: * Only skip batteries if neither start or stop thresholds are available (kde#464535) ==== python-iniconfig ==== Version update (1.1.1 -> 2.0.0) - update to 2.0.0: * Drop Python 3.6 * Add Python 3.11 support * type hints added - use gh tarball for tests ==== python-lxml ==== - allow building against any libxml2 version in sle15 ==== python-typing_extensions ==== Version update (4.4.0 -> 4.5.0) - update to version 4.5.0 Details can be found here: https://pypi.org/project/typing-extensions/4.5.0/ - obsoletes _typed_dict_test_helper.py hack ==== snapper ==== Subpackages: libsnapper6 snapper-zypp-plugin - wait for existing btrfs quota rescans to finish (bsc#1206814) ==== spice-gtk ==== Version update (0.41 -> 0.42) Subpackages: libspice-client-glib-2_0-8 libspice-client-glib-helper libspice-client-gtk-3_0-5 typelib-1_0-SpiceClientGlib-2_0 typelib-1_0-SpiceClientGtk-3_0 - Update to version 0.42. Features and Issues addressed: * !115 - Fix compilation on win32 with EGL * !114 - spice-widget: fix hotspot position on Wayland/HiDPI * !112 - meson: Allow building on a Wayland-only environment * !110 - usb-backend: Fix devices not being enumerated * !108 - spicy: Add keyboard shortcuts for copy/paste sync * Require meson >= 0.56 ==== sqlite3 ==== Version update (3.40.1 -> 3.41.0) Subpackages: libsqlite3-0 sqlite3-tcl - Update to 3.41.0: * https://www.sqlite.org/releaselog/3_41_0.html * Various query planner improvements. * Add the built-in unhex() SQL function. * Add the base64 and base85 application-defined functions as an extension and include that extension in the CLI. * In-memory databases created using sqlite3_deserialize() now report their filename as an empty string, not as 'x'. * The ".scanstats est" command provides query planner estimates in profiles. * Enhance the --safe command-line option to disallow dangerous SQL functions. * The double-quoted string misfeature is now disabled by default for CLI builds. * Various other improvements and performance enhancements. - The new version obsoletes sqlite-src-3390000-func7-pg-181.patch ==== sudo ==== Version update (1.9.13 -> 1.9.13p1) Subpackages: sudo-plugin-python - Update to 1.9.13p1: Fixed a typo in the configure script that resulted in a line like “]: command not found” in the output. GitHub issue #238. Corrected the order of the C23 [[noreturn]] attribute in function prototypes. This fixes a build error with GCC 13. GitHub issue #239. The check make target misbehaved when there was more than one version of the UTF-8 C locale in the output of locale -a. GitHub issue #241. Removed a dependency on the AC_SYS_YEAR2038 macro in configure.ac. This was added in autoconf 2.72 but sudo’s configure.ac only required autoconf 2.70. GitHub issue #242. Relaxed the autoconf version requirement to version 2.69. ==== systemsettings5 ==== Version update (5.27.0 -> 5.27.1) - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - No code changes since 5.27.0 ==== thunar ==== Version update (4.18.3 -> 4.18.4) Subpackages: libthunarx-3-0 thunar-lang - Update to 4.18.4: * Dont open folder when mounting device (Issue #919) * Dont show full menu for unmounted devices (#1049) * Support handling URIs via desktop file (#1044) * Focus correct split pane on mouse click (#1039) * Prevent wrong undo/redo notify (#1036) * Support undo trash for linked pathes (#1030) * Always ask before delete files via undo (#1027) * Fix use after free fault (#1031) * Allow symlink creation on remote locations (#875) * Prevent crash when closing window (#884) * Keep directory specific sort details (#1017) * Dont add extra-dot when creating links (#1019) * Translation Updates ==== tiff ==== Subpackages: libtiff6 - security update: * CVE-2023-0795 [bsc#1208226] * CVE-2023-0796 [bsc#1208227] * CVE-2023-0797 [bsc#1208228] * CVE-2023-0798 [bsc#1208229] * CVE-2023-0799 [bsc#1208230] + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch * CVE-2023-0800 [bsc#1208231] * CVE-2023-0801 [bsc#1208232] * CVE-2023-0802 [bsc#1208233] * CVE-2023-0803 [bsc#1208234] * CVE-2023-0804 [bsc#1208236] + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch ==== unbound ==== Version update (1.17.0 -> 1.17.1) Subpackages: libunbound8 unbound-anchor - Update to 1.17.1: * Features: - Expose 'statistics-inhibit-zero' as a configuration option; the default value retains Unbound's behavior. - Expose 'max-sent-count' as a configuration option; the default value retains Unbound's behavior. - Merge #461 from Christian Allred: Add max-query-restarts option. Exposes an internal configuration but the default value retains Unbound's behavior. - Merge #569 from JINMEI Tatuya: add keep-cache option to 'unbound-control reload' to keep caches. * Bug Fixes: - Merge #768 from fobser: Arithmetic on a pointer to void is a GNU extension. - In unit test, print python script name list correctly. - testcode/dohclient sets log identity to its name. - Clarify the use of MAX_SENT_COUNT in the iterator code. - Fix that cachedb does not store failures in the external cache. - Merge #767 from jonathangray: consistently use IPv4/IPv6 in unbound.conf.5. - Fix to ignore tcp events for closed comm points. - Fix to make sure to not read again after a tcp comm point is closed. - Fix #775: libunbound: subprocess reap causes parent process reap to hang. - iana portlist update. - Complementary fix for distutils.sysconfig deprecation in Python 3.10 to commit 62c5039ab9da42713e006e840b7578e01d66e7f2. - Fix #779: [doc] Missing documention in ub_resolve_event() for callback parameter was_ratelimited. - Ignore expired error responses. - Merge #720 from jonathangray: fix use after free when WSACreateEvent() fails. - Fix for the ignore of tcp events for closed comm points, preserve the use after free protection features. - Fix #782: Segmentation fault in stats.c:404. - Add SVCB and HTTPS to the types removed by 'unbound-control flush'. - Clear documentation for interactivity between the subnet module and the serve-expired and prefetch configuration options. - Fix #773: When used with systemd-networkd, unbound does not start until systemd-networkd-wait-online.service times out. - Merge #808: Wrap Makefile script's directory variables in quotes. - Fix to wrap Makefile scripts directory in quotes for uninstall. - Fix windows compile for libunbound subprocess reap comm point closes. - Update github workflows to use checkout v3. - Fix wildcard in hyperlocal zone service degradation, reported by Sergey Kacheev. * Add signature and keyring files - Tighten permissions (boo#1173619) - Add missing dependency: unbound-control-setup needs /usr/bin/openssl. ==== xdg-desktop-portal-kde ==== Version update (5.27.0 -> 5.27.1) - Update to 5.27.1 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.1 - Changes since 5.27.0: * Extract i18n from QML files * appchooserdialog: show all apps while searching (kde#464521) ==== xmlsec1 ==== Subpackages: libxmlsec1-1 libxmlsec1-nss1 libxmlsec1-openssl1 - switch to pkgconfig(zlib) to allow alternative providers as well ==== yast2-python-bindings ==== Version update (4.5.1 -> 4.5.2) - Misc fixes to examples; (bsc#1199343). - Fix python2 utf8 handling (python2 code wasn't displaying unicode strings); (bsc#1199348). - Change conversion of Py_None to YCP_Void instead of YCP_Null; (bsc#1199344). - 4.5.2 ==== yast2-security ==== Version update (4.5.5 -> 4.5.6) - bsc#1208492 - do not store empty values in CFA login.defs empty value to avoid crash when parsing according to login.defs lens - 4.5.6 ==== zstd ==== Version update (1.5.2 -> 1.5.4) Subpackages: libzstd1 - update to 1.5.4: * perf: +20% faster huffman decompression for targets that can't compile x64 assembly * perf: up to +10% faster streaming compression at levels 1-2 * perf: +4-13% for levels 5-12 by optimizing function generation * pref: +3-11% compression speed for `arm` target * perf: +5-30% faster dictionary compression at levels 1-4 * perf: +10-20% cold dict compression speed by prefetching CDict tables * perf: +1% faster compression by removing a branch in ZSTD_fast_noDict * perf: Small compression ratio improvements in high compression mode * perf: small speed improvement by better detecting `STATIC_BMI2` for `clang` * perf: Improved streaming performance when `ZSTD_c_stableInBuffer` is set * cli: Asynchronous I/O for improved cli speed * cli: Change `zstdless` behavior to align with `zless` * cli: Keep original file if `-c` or `--stdout` is given * cli: Keep original files when result is concatenated into a single output with `-o` * cli: Preserve Permissions and Ownership of regular files * cli: Print zlib/lz4/lzma library versions with `-vv` * cli: Print checksum value for single frame files with `-lv` * cli: Print `dictID` when present with `-lv` * cli: when `stderr` is *not* the console, disable status updates, but preserve final summary * cli: support `--best` and `--no-name` in `gzip` compatibility mode * cli: support for `posix` high resolution timer `clock_gettime()`, for improved benchmark accuracy * cli: improved help/usage (`-h`, `-H`) formatting * cli: Fix better handling of bogus numeric values * cli: Fix input consists of multiple files _and_ `stdin` * cli: Fix tiny files passthrough * cli: Fix for `-r` on empty directory * cli: Fix empty string as argument for `--output-dir-*` * cli: Fix decompression memory usage reported by `-vv --long` * cli: Fix infinite loop when empty input is passed to trainer * cli: Fix `--adapt` doesn't work when `--no-progress` is also set * api: Support for Block-Level Sequence Producer * api: Support for in-place decompression * api: New `ZSTD_CCtx_setCParams()` function, set all parameters defined in a `ZSTD_compressionParameters` structure * api: Streaming decompression detects incorrect header ID sooner * api: Window size resizing optimization for edge case * api: More accurate error codes for busy-loop scenarios * api: Fix limit overflow in `compressBound` and `decompressBound` (#3362, #3373, Cyan4973) reported by @nigeltao * api: Deprecate several advanced experimental functions: streaming (#3408, @embg), copy * bug: Fix corruption that rarely occurs in 32-bit mode with wlog=25 * bug: Fix for block-splitter * bug: Fixes for Sequence Compression API * bug: Fix leaking thread handles on Windows * bug: Fix timing issues with cmake/meson builds * build: Allow user to select legacy level for cmake * build: Enable legacy support by default in cmake * build: Meson build script improvements * build: Add aarch64 to supported architectures for zstd_trace * build: support AIX architecture * build: Fix `ZSTD_LIB_MINIFY` build macro, which now reduces static library size by half * build: Fix Windows issues with Multithreading translation layer (#3364, #3380, @yoniko) and ARM64 target * build: Fix `cmake` script * doc: Updated man page, providing more details for `--train` mode * doc: Add decompressor errata document * misc: Enable Intel CET * misc: Fix `contrib/` seekable format * misc: Improve speed of the one-file library generator - rebase pzstd.1.patch