May 2023 - openSUSE Factory - openSUSE Mailing Lists

New Tumbleweed snapshot 20230520 released!
by Dominique Leuenberger 21 May '23

21 May '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: audacity (3.3.1 -> 3.3.2) emacs-apel (10.8+80+g6947dc4 -> 10.8+81+g82eb232) emacs-flim (1.14.9+130+g289e5bbd66f6 -> 1.14.9+136+g2cf5a78) libcap (2.68 -> 2.69) permissions (1699_20230424 -> 1699_20230516) polkit-default-privs (1550+20230307.7f42172 -> 1550+20230517.ab68b2d) python-gevent (22.10.1 -> 22.10.2) python-greenlet (1.1.3 -> 2.0.2) update-alternatives === Details === ==== audacity ==== Version update (3.3.1 -> 3.3.2) Subpackages: audacity-lang - Update to 3.3.2 This is a hotfix release. It fixes the following bugs: * #4629 Linux AppImage fails to start. * #4637 Issues with selection and time toolbars on Linux packages. * #4639 Missing duration input in generators on Linux packages. * #4646 Potentialy extreme memory usage with Jack host. * #4654 Anonymous upload to audio.com is disabled. ==== emacs-apel ==== Version update (10.8+80+g6947dc4 -> 10.8+81+g82eb232) - Update to version 10.8+81+g82eb232: * Update docstring syntax ==== emacs-flim ==== Version update (1.14.9+130+g289e5bbd66f6 -> 1.14.9+136+g2cf5a78) - Update to version 1.14.9+136+g2cf5a78: * Don't inhibit EOL conversion for oauth2.el. * Use `ash' instead of `lsh' * Fix CCL lexical analyzer fails to parse quoted-string * Add redirect URI for Gmail * Update docstring syntax * * README: Update requirements. Wide int feature is required. ==== libcap ==== Version update (2.68 -> 2.69) Subpackages: libcap2 libcap2-32bit - updated to 2.69 - An audit was performed on libcap and friends by https://x41-dsec.de/ (blog) . The audit (final report, 2023-05-10) was sponsored by the the Open Source Technology Improvement Fund, https://ostif.org/ (blog). Five issues were found. Four of them are addressed in this release. Each issue was labeled in the audit results as follows: - LCAP-CR-23-01 (SEVERITY) LOW (CVE-2023-2602) - found by David Gstir (bsc#1211418) - LCAP-CR-23-02 (SEVERITY) MEDIUM (CVE-2023-2603) - found by Richard Weinberger (bsc#1211419) - LCAP-CR-23-100 (SEVERITY) NONE - LCAP-CR-23-101 (SEVERITY) NONE - LCAP-CR-23-102 (SEVERITY) NONE - Man page style improvement from Emanuele Torre ==== permissions ==== Version update (1699_20230424 -> 1699_20230516) Subpackages: chkstat permissions-config - Update to version 20230516: * common permissions: add icingaweb2 setgid directory (bsc#1211314) ==== polkit-default-privs ==== Version update (1550+20230307.7f42172 -> 1550+20230517.ab68b2d) - Update to version 1550+20230517.ab68b2d: * rename com.deepin.api to org.deepin.dde (bsc#1211376) ==== python-gevent ==== Version update (22.10.1 -> 22.10.2) - Add patch handle-python-ssl-changes.patch: * Handle Python 3.10 changes where ssl.shared_ciphers() changes behaviour. - skip one more test from testsuite - update to 22.10.2: * Update to greenlet 2.0. This fixes a deallocation issue that required a change in greenlet's ABI. The design of greenlet 2.0 is intended to prevent future fixes and enhancements from requiring an ABI change, making it easier to update gevent and greenlet independently. - Switch documentation to be within the main package. ==== python-greenlet ==== Version update (1.1.3 -> 2.0.2) - update to 2.0.2: * Fix calling ``greenlet.settrace()`` with the same tracer object that was currently active. * Various compilation and standards conformance fixes. * Python 3.11: Fix a memory leak. See issue 328 and gevent issue 1924. - 2.0.0.post0 (2022-11-03) * Add Programming Language :: Python :: 3.11 to the PyPI classifier metadata. - 2.0.0rc5 (2022-10-31) * Linux: Fix another group of rare crashes that could occur when shutting down an interpeter running multiple threads. See issue 325. - 2.0.0rc4 (2022-10-30) * Linux: Fix a rare crash that could occur when shutting down an interpreter running multiple threads, when some of those threads are in greenlets making calls to functions that release the GIL. - 2.0.0rc1 (2022-10-27) * Deal gracefully with greenlet switches that occur while deferred deallocation of objects is happening using CPython's "trash can" mechanism. Previously, if a large nested container held items that switched greenlets during delayed deallocation, and that second greenlet also invoked the trash can, CPython's internal state could become corrupt. This was visible as an assertion error in debug builds. Now, the relevant internal state is saved and restored during greenlet switches. See also gevent issue 1909. * Rename the C API function PyGreenlet_GET_PARENT to PyGreenlet_GetParent for consistency. The old name remains available as a deprecated alias. - 2.0.0a1 (2022-01-20) * Drop support for very old versions of GCC and MSVC. Compilation now requires a compiler that either supports C++11 or has some other intrinsic way to create thread local variables; for older GCC, clang and SunStudio we use __thread, while for older MSVC we use __declspec(thread). * This version of greenlet is known to compile and pass tests on CPython 3.11.0a4. Earlier or later 3.11 releases may or may not work. See PR 280. Special thanks to Brandt Bucher and the CPython developers. * Fix several leaks that could occur when using greenlets from multiple threads. For example, it is no longer necessary to call getcurrent() before exiting a thread to allow its main greenlet to be cleaned up. See issue 252. * Fix the C API PyGreenlet_Throw to perform the same error checking that the Python API greenlet.throw() does. Previously, it did no error checking. - drop sphinx-6.0.0.patch (upstream) ==== update-alternatives ==== - Add _multibuild to define additional spec files as additional flavors. Eliminates the need for source package links in OBS.

1 0

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 21 May '23

21 May '23

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have had problems for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - FreeFileSync: Fails to build - breezy: Fails to build - erlang-rebar: Fails to build - firecracker: Fails to build - htcondor: Fails to build - lalpulsar: Fails to build - lalsimulation: Fails to build - libwebsockets: Fails to build - lsyncd: Fails to build - monero: Fails to build - python-PyCBC: Fails to build - python-afdko: Fails to build - python-aws-xray-sdk: Fails to build - python-django-oscar: Fails to build - python-django-tagging: Fails to build - python-efl: Fails to build - python-gwpy: Fails to build - python-pyheif: Fails to build - python-pytest-qt: Fails to build - qtile: Fails to build - rr: Fails to build - tensorflow-lite: Fails to build - xsane: Fails to build Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

4 4

New Tumbleweed snapshot 20230519 released!
by Dominique Leuenberger 20 May '23

20 May '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: createrepo_c dos2unix (7.4.4 -> 7.5.0) librdkafka (2.1.0 -> 2.1.1) llvm16 (16.0.3 -> 16.0.4) nghttp2 (1.52.0 -> 1.53.0) pipewire (0.3.70 -> 0.3.71) poppler (23.04.0 -> 23.05.0) poppler-qt5 (23.04.0 -> 23.05.0) python-anyio python-attrs (22.2.0 -> 23.1.0) python-httpcore (0.16.3 -> 0.17.0) python-requests (2.28.2 -> 2.30.0) python-urllib3 (1.26.15 -> 2.0.2) rubygem-packaging_rake_tasks (1.5.1 -> 1.5.3) tracker (3.5.1 -> 3.5.2) tracker-miners (3.5.1 -> 3.5.2) yast2-storage-ng (4.6.8 -> 4.6.9) === Details === ==== createrepo_c ==== Subpackages: libcreaterepo_c0 python3-createrepo_c - disable DeltaRPM for ALP ==== dos2unix ==== Version update (7.4.4 -> 7.5.0) - update to 7.5.0: * New option -e, --add-eol to add a line break to the last line if the isn't one * New option -O, --to-stdout to write to standard output ==== librdkafka ==== Version update (2.1.0 -> 2.1.1) - update to 2.1.1: * Avoid duplicate messages when a fetch response is received * in the middle of an offset validation request * Fix segmentation fault when subscribing to a non-existent topic and calling `rd_kafka_message_leader_epoch()` on the polled `rkmessage` * Fix a segmentation fault when fetching from follower and the partition lease expires while waiting for the result of a list offsets operation * Fix documentation for the admin request timeout, incorrectly stating -1 for infinite * timeout. That timeout can't be infinite. * Fix CMake pkg-config cURL require and use * pkg-config `Requires.private` field * Fixes certain cases where polling would not keep the consumer * in the group or make it rejoin it * Fix to the C++ set_leader_epoch method of TopicPartitionImpl, * that wasn't storing the passed value * Duplicate messages can be emitted when a fetch response is received in the middle of an offset validation request. Solved by avoiding a restart from last application offset when offset validation succeeds. * When fetching from follower, if the partition lease expires after 5 minutes, and a list offsets operation was requested to retrieve the earliest or latest offset, it resulted in segmentation fault. This was fixed by allowing threads different from the main one to call the `rd_kafka_toppar_set_fetch_state` function, given they hold the lock on the `rktp`. * In v2.1.0, a bug was fixed which caused polling any queue to reset the `max.poll.interval.ms`. Only certain functions were made to reset the timer, but it is possible for the user to obtain the queue with messages from the broker, skipping these functions. This was fixed by encoding information in a queue itself, that, whether polling, resets the timer. ==== llvm16 ==== Version update (16.0.3 -> 16.0.4) Subpackages: clang-tools clang16 libLLVM16 libclang-cpp16 libclang13 llvm16-gold - Update to version 16.0.4. * This release contains bug-fixes for the LLVM 16.0.0 release. This release is API and ABI compatible with 16.0.0. - Rebase patches: * llvm-do-not-install-static-libraries.patch * llvm-remove-clang-only-flags.patch ==== nghttp2 ==== Version update (1.52.0 -> 1.53.0) - Update to version 1.53.0: * https://nghttp2.org/blog/2023/05/10/nghttp2-v1-53-0/ ==== pipewire ==== Version update (0.3.70 -> 0.3.71) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-lang pipewire-libjack-0_3 pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Update to version 0.3.71: * Highlights - A new zero-latency jackdbus bridge was added. This works similar to what PulseAudio has to offer and creates a sink/source when jackdbus is started. It is however much more efficient and runs the complete PipeWire graph as a synchronous JACK client with no added latency. - Many performance improvements. Activation of remote nodes is more efficient, fewer eventfds are required on the clients, less callback overhead in performence critical paths and an optimized poll function was added. This was mainly driven by the jackdbus module to get the lowest possible overhead when running the graph. - The JACK notify callback implementation was reworked to emulate better what JACK does, improving compatibility with ardour7 and the JACK stress test. - More work on BAP devices. Device latency is now passed on to applications also for multi-device headsets, and channel allocation is handled better. - Many more improvements and bugfixes. * PipeWire - Remove the hardcoded limit on io_areas. This is used to link nodes together and exchange buffers, it was limited to 2048 but now dynamically scales based on requirements. - Rate and quantum changes are now applied correctly in more cases. (#3159) - Updates to client-node to more efficiently process the driver. - The profiler information was improved to be more accurate. It should now work better for remote drivers. - Some potential memory map errors were fixed in the protocol because in some case with large messages, some fds were closed too soon. - pw-filter now implements the pw_filter_set_active() method. - A potential out-of-buffers case was fixed in capture pw-streams where buffers were not moved to the recycle queue when the node suspended. - Nodes are now always woken up with the eventfd. Previously there were some optimiztions in the server to directly call into the node process function but that optimization is not necessary. Without this optimization it is now possible to run nodes in different threads. - pw-stream trigger is now implemented correctly in all cases. - Remote nodes now use one eventfd less because they get triggered with the node eventfd directly. - Monitor ports are now ignored in latency updates. - A potential race when reporting an error to a client was fixed. (#3192) - Fix a bug where always_process nodes would sometimes IDLE. (#3189) - Optimize peer activation. Nodes are now activated more efficiently and independent of the number of links. It also reduces the number of eventfds and memory in remote clients. - A bug in property serialization was fixed. Values with spaces would only serialize the first part of the value. * Modules - Correctly handle the echo-canceler plugin init method fallback. The samplerate was not correctly configured. This is only a regression for people that have external echo-canceler plugins. - RAOP sink now only sets the volume on the remote end when the stream is recording. (#3175) - RAOP discover now tries to deduplicate entries from the same host. - A new zero-latency jackdbus bridge was added. This works similar to what pulseaudio has to offer and creates a sink/source when jackdbus is started. It is however much more efficient and runs the complete PipeWire graph as a synchronous JACK client. - The access module uses a more secure way to check the application executable. - module-combine-stream now has configurable delay and latency for each stream. This can be used to align sinks/sources with different latencies. - A potential crash in module-pulse-tunnel was fixed when shutting down. (#3199) - Module-rt will now clamp the nice value to the min allowed value to avoid errors from rtkit. (#3186) - Fix a bug with the session counters in module-rtp-sap. Also use the right format for L24. Improve the AES67 example config. - Improve some warning and info messages in module-rt. (#3194) - module-rtp-session should now do something when started without arguments. - A potential crash in module-rtp-session was fixed. (#3217) - module-filter-chain has better error reporting when a convolver fails to load. (#3223) * SPA - Move some things around to avoid compiler warnings. (#3171) - Increase mixer ports. Reorganize some things and bump mixer input ports from 128 to 512. - Fix a potential crash when a node is scheduled before it completes the setup. - The JACK sink and source SPA plugins have seen some improvements. - Allow the peaks resampler still if we disabled resampling. - Perform more cleanup in audioadapter when in error. - An optimized non-cancellable loop implementation was added. - Callbacks were optimized with a _fast() varsion that doesn't ... changelog too long, skipping 47 lines ... - Document the PipeWire native protocol. ==== poppler ==== Version update (23.04.0 -> 23.05.0) Subpackages: libpoppler-cpp0 libpoppler-glib8 poppler-tools - update to 23.05.0: * Fix crash when filling some forms * Set SigFlags when signing unsigned signature * Add some infrastructure code to support multiple signing backends * Fix potential stack overflow in PostScriptFunction::parseCode * Fix some minor uninitialised memory reads ==== poppler-qt5 ==== Version update (23.04.0 -> 23.05.0) - update to 23.05.0: * Fix crash when filling some forms * Set SigFlags when signing unsigned signature * Add some infrastructure code to support multiple signing backends * Fix potential stack overflow in PostScriptFunction::parseCode * Fix some minor uninitialised memory reads ==== python-anyio ==== - Add patch fix-failing-tls-tests.patch: * Fix test failures with Python TLS changes. ==== python-attrs ==== Version update (22.2.0 -> 23.1.0) - Update to 23.1.0: [#] Backwards-incompatible Changes * Python 3.6 has been dropped and packaging switched to static package data using Hatch. #993 [#] Deprecations * The support for zope-interface via the attrs.validators.provides validator is now deprecated and will be removed in, or after, April 2024. * The presence of a C-based package in our developement dependencies has caused headaches and we're not under the impression it's used a lot. * Let us know if you're using it and we might publish it as a separate package. #1120 [#] Changes * attrs.filters.exclude() and attrs.filters.include() now support the passing of attribute names as strings. #1068 * attrs.has() and attrs.fields() now handle generic classes correctly. #1079 * Fix frozen exception classes when raised within e.g. contextlib.contextmanager, which mutates their __traceback__ attributes. #1081 * @frozen now works with type checkers that implement PEP-681 (ex. pyright). #1084 * Restored ability to unpickle instances pickled before 22.2.0. [#1085] * attrs.asdict()'s and attrs.astuple()'s type stubs now accept the attrs.AttrsInstance protocol. #1090 * Fix slots class cellvar updating closure in CPython 3.8+ even when __code__ introspection is unavailable. #1092 * attrs.resolve_types() can now pass include_extras to typing.get_type_hints() on Python 3.9+, and does so by default. [#1099] * Added instructions for pull request workflow to CONTRIBUTING.md. [#1105] * Added type parameter to attrs.field() function for use with attrs.make_class(). * Please note that type checkers ignore type metadata passed into make_class(), but it can be useful if you're wrapping attrs. #1107 * It is now possible for attrs.evolve() (and attr.evolve()) to change fields named inst if the instance is passed as a positional argument. * Passing the instance using the inst keyword argument is now deprecated and will be removed in, or after, April 2024. #1117 * attrs.validators.optional() now also accepts a tuple of validators (in addition to lists of validators). #1122 ==== python-httpcore ==== Version update (0.16.3 -> 0.17.0) - update to 0.17.0: * Add DEBUG level logging. (#648) * Respect HTTP/2 max concurrent streams when settings updates are sent by server. (#652) * Increase the allowable HTTP header size to 100kB. (#647) * Add `retries` option to SOCKS proxy classes. (#643) ==== python-requests ==== Version update (2.28.2 -> 2.30.0) - add sle15_python_module_pythons - Update to 2.30.0: * Added support for urllib3 2.0. ï¿¼ * Defer chunked requests to the urllib3 implementation to improve standardization. * Relax header component requirements to support bytes/str subclasses. ==== python-urllib3 ==== Version update (1.26.15 -> 2.0.2) - update to 2.0.2: * Fixed ``HTTPResponse.stream()`` to continue yielding bytes if buffered decompressed data was still available to be read even if the underlying socket is closed. This prevents a compressed response from being truncated. - Update to 2.0.1: * Fixed a socket leak when fingerprint or hostname verifications fail. * Fixed an error when HTTPResponse.read(0) was the first read call or when the internal response body buffer was otherwise empty. * Removed support for Python 2.7, 3.5, and 3.6. * Removed fallback on certificate commonName in match_hostname() function. * Removed support for Python with an ssl module compiled with LibreSSL, CiscoSSL, wolfSSL, and all other OpenSSL alternatives. * Removed support for OpenSSL versions earlier than 1.1.1. * Removed urllib3.contrib.appengine.AppEngineManager and support for Google App Engine Standard Environment. * Changed ssl_version to instead set the corresponding SSLContext.minimum_version and SSLContext.maximum_version values. * Changed default SSLContext.minimum_version to be TLSVersion.TLSv1_2 in line with Python 3.10. * Changed urllib3.util.create_urllib3_context to not override the system cipher suites with a default value. * Changed multipart/form-data header parameter formatting matches the WHATWG HTML Standard as of 2021-06-10. * Changed HTTPConnection.request() to always use lowercase chunk boundaries when sending requests with Transfer-Encoding: chunked. * Changed enforce_content_length default to True, preventing silent data loss when reading streamed responses. * Changed all parameters in the HTTPConnection and HTTPSConnection constructors to be keyword-only except host and port. * Changed HTTPConnection.getresponse() to set the socket timeout from HTTPConnection.timeout value before reading data from the socket. * Changed name of Retry.BACK0FF_MAX to be Retry.DEFAULT_BACKOFF_MAX. * Changed TLS handshakes to use SSLContext.check_hostname when possible. * Changed the default blocksize to 16KB to match OpenSSL's default read amounts. * Changed HTTPResponse.read() to raise an error when calling with decode_content=False after using decode_content=True to prevent data loss. * Fixed thread-safety issue where accessing a PoolManager with many distinct origins would cause connection pools to be closed while requests are in progress. * Fixed the default value of HTTPSConnection.socket_options to match HTTPConnection. * Fixed a socket leak if HTTPConnection.connect() fails. - Drop patch remove_mock.patch, included upstream. - Fiddle with {Build,}Requires as appropiate, six finally dropped. ==== rubygem-packaging_rake_tasks ==== Version update (1.5.1 -> 1.5.3) - Added support for multi build packages in "build_dependencies:*" rake tasks (related to bsc#1211319) - 1.5.3 - Stop using File.exists? which no longer works in Ruby 3.2 (bsc#1206419) - 1.5.2 ==== tracker ==== Version update (3.5.1 -> 3.5.2) Subpackages: libtracker-sparql-3_0-0 tracker-data-files tracker-lang typelib-1_0-Tracker-3_0 - Update to version 3.5.2: + Fix several possible crashers. + Fix bashisms in doc generation scripts. + Fix ISO8601 date strings in cursors on Darwin. + Plug leak. - Add 63ea8f1a.patch: Revert build: Detect appropriate strftime() year modifier at build time. Revert upstream commit for now as it breaks build for i586. ==== tracker-miners ==== Version update (3.5.1 -> 3.5.2) Subpackages: tracker-miner-files tracker-miners-lang - Update to version 3.5.2: + Fix a number of potential crashers. + Fix possibly stuck extractor process. + Restore performance lost in 3.5.1 of extractor query to get unextracted items. + Plug memory leak. ==== yast2-storage-ng ==== Version update (4.6.8 -> 4.6.9) - GuidedProposal: allow Agama to configure exactly what to do with every existing partition (gh#yast/yast-storage-ng#1337). - 4.6.9

1 0

M17N is unmaintained?
by Tranter Madi 20 May '23

20 May '23

Hi everyone, I sent this Request [1] a month ago but haven't got any response from the maintainer. What's happening with it? [1] https://build.opensuse.org/request/show/1077954

4 4

New Tumbleweed snapshot 20230518 released!
by Dominique Leuenberger 19 May '23

19 May '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: bind (9.18.14 -> 9.18.15) cups-filters curl (8.0.1 -> 8.1.0) kiten libstorage-ng (4.5.105 -> 4.5.106) rubygem-ruby-dbus (0.21.0 -> 0.22.1) sqlite3 (3.41.2 -> 3.42.0) wpa_supplicant === Details === ==== bind ==== Version update (9.18.14 -> 9.18.15) Subpackages: bind-doc bind-utils - Update to release 9.18.15 Bug Fixes: * The max-transfer-time-in and max-transfer-idle-in statements have not had any effect since the BIND 9 networking stack was refactored in version 9.16. The missing functionality has been re-implemented and incoming zone transfers now time out properly when not progressing. * The read timeout in rndc is now 60 seconds, matching the behavior in BIND 9.16 and earlier. It had previously been lowered to 30 seconds by mistake. * When the ISC_R_INVALIDPROTO (ENOPROTOOPT, EPROTONOSUPPORT) error code is returned by libuv, it is now treated as a network failure: the server for which that error code is returned gets marked as broken and is not contacted again during a given resolution process. * When removing delegations from an opt-out range, empty-non-terminal NSEC3 records generated by those delegations were not cleaned up. This has been fixed. * Log file rotation code did not clean up older versions of log files when the logging channel had an absolute path configured as a file destination. This has been fixed. Known Issues: * Sending NOTIFY messages silently fails when the source port specified in the notify-source statement is already in use. This can happen e.g. when multiple servers are configured as NOTIFY targets for a zone and some of them are unresponsive. This issue can be worked around by not specifying the source port for NOTIFY messages in the notify-source statement; note that source port configuration is already deprecated and will be removed altogether in a future release. ==== cups-filters ==== - cups-filters-1.28.15-0001-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch cups-filters-1.28.15-0002-beh-backend-Extra-checks-against-odd-forged-input-CVE-2023-24805.patch cups-filters-1.28.15-0003-beh-backend-Further-improvements-CVE-2023-24805.patch are the upstream 0001-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch 0002-beh-backend-Extra-checks-against-odd-forged-input-CVE-2023-24805.patch 0003-beh-backend-Further-improvements-CVE-2023-24805.patch backported to cups-filters-1.28.15 to fix CVE-2023-24805: RCE in cups-filters, beh CUPS backend (bsc#1211340) and https://github.com/OpenPrinting/cups-filters/commit/8f274035756c04efeb77eb6… ==== curl ==== Version update (8.0.1 -> 8.1.0) Subpackages: libcurl4 - Update to 8.1.0: * Security fixes: - UAF in SSH sha256 fingerprint [bsc#1211230, CVE-2023-28319] - siglongjmp race condition [bsc#1211231, CVE-2023-28320] - IDN wildcard match [bsc#1211232, CVE-2023-28321] - POST-after-PUT confusion [bsc#1211233, CVE-2023-28322] - See also: https://curl.se/docs/security.html * Changes: - curl: add --proxy-http2 - CURLPROXY_HTTPS2: for HTTPS proxy that may speak HTTP/2 - hostip: refuse to resolve the .onion TLD - tool_writeout: add URL component variables * Bugfixes: - See full changelog here: https://curl.se/changes.html#8_1_0 ==== kiten ==== Subpackages: fonts-KanjiStrokeOrders kiten-lang - Reuse system edict dictionaries and shave off 13 MB worth of data. The system edict is also (much) newer and more comprehensive. ==== libstorage-ng ==== Version update (4.5.105 -> 4.5.106) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#932 - check for more aliases when looking up udev info - 4.5.106 ==== rubygem-ruby-dbus ==== Version update (0.21.0 -> 0.22.1) - 0.22.1 Bug fixes: * Fix OBS building by disabling IPv6 tests, gh#mvidner/ruby-dbus#134. - 0.22.0 Features: * Enable using nokogiri without rexml (by Dominik Andreas Schorpp, gh#mvidner/ruby-dbus#132) Bug fixes: * Respect DBUS_SYSTEM_BUS_ADDRESS environment variable. Other: * For NameRequestError, mention who is the other owner. * Session bus autolaunch still does not work, but: don't try launchd except on macOS, and improve the error message. * examples/gdbus split off to its own repository ==== sqlite3 ==== Version update (3.41.2 -> 3.42.0) Subpackages: libsqlite3-0 sqlite3-tcl - Update to 3.42.0: * Add the FTS5 secure-delete command. This option causes all forensic traces to be removed from the FTS5 inverted index when content is deleted. * Enhance the JSON SQL functions to support JSON5 extensions. * The SQLITE_CONFIG_LOG and SQLITE_CONFIG_PCACHE_HDRSZ calls to sqlite3_config() are now allowed to occur after sqlite3_initialize(). * New sqlite3_db_config() options: SQLITE_DBCONFIG_STMT_SCANSTATUS and SQLITE_DBCONFIG_REVERSE_SCANORDER. * Query planner improvements. * Add the --unsafe-testing command-line option. * Allow commands ".log on" and ".log off", even in --safe mode. * "--" as a command-line argument means all subsequent arguments that start with "-" are interpreted as normal non-option argument. * Magic parameters ":inf" and ":nan" bind to floating point literals Infinity and NaN, respectively. * Add the ability for application-defined SQL functions to have the same name as join keywords: CROSS, FULL, INNER, LEFT, NATURAL, OUTER, or RIGHT. * Enhancements to PRAGMA integrity_check * Allow the session extension to be configured to capture changes from tables that lack an explicit ROWID. * Added the subsecond modifier to the date and time functions. * Negative values passed into sqlite3_sleep() are henceforth interpreted as 0. * The maximum recursion depth for JSON arrays and objects is lowered from 2000 to 1000. * Extended the built-in printf() function so the comma option now works with floating-point conversions in addition to integer conversions. * Miscellaneous bug fixes and performance optimizations. ==== wpa_supplicant ==== - Change ctrl_interface from /var/run to %_rundir (/run)

1 0

Request to change ( related to web page )
by Ayhem Kahri 18 May '23

18 May '23

Hello everyone, I hope you're all having a great day! I'm excited to be a part of the SUSE community, and I'm looking forward to learning more about openSUSE. As a web developer, I'm always striving for a clean and user-friendly UI/UX. Sometimes, small details can get overlooked, especially when we're busy working on other things. With that in mind, I'd like to make a suggestion about the copyright section of the SUSE website.Currently, the copyright information is as follows:(© 2001–2021 SUSE LLC, © 2005–2021 openSUSE contributors & others. ) I think it would be great to add a script that automatically updates the year and date. This would save web developers the time and hassle of having to update it manually each year. I know it's a small thing, but I think it would make a big difference in the overall look and feel of the website. Thanks for your time, and I look forward to hearing your thoughts. Sincerely, Ayhem

6 11

New Tumbleweed snapshot 20230517 released!
by Dominique Leuenberger 18 May '23

18 May '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: apache2-mod_php8 (8.1.18 -> 8.1.19) dnsmasq firewalld gawk gnutls hwdata (0.369 -> 0.370) inxi (3.3.23 -> 3.3.27) kernel-source (6.3.1 -> 6.3.2) libnettle (3.8.1 -> 3.9) libpng16 libstorage-ng (4.5.103 -> 4.5.105) memtest86+ (6.10 -> 6.20) mousepad (0.6.0 -> 0.6.1) nodejs20 php8 (8.1.18 -> 8.1.19) ristretto (0.13.0 -> 0.13.1) rp-pppoe (3.15 -> 4.0) setxkbmap (1.3.3 -> 1.3.4) sysvinit (3.00 -> 3.07) texlive tnftp (20210827 -> 20230507) yast2-installation (4.6.2 -> 4.6.3) yast2-pkg-bindings (4.6.1 -> 4.6.2) yast2-services-manager (4.6.0 -> 4.6.1) === Details === ==== apache2-mod_php8 ==== Version update (8.1.18 -> 8.1.19) - version update to 8.1.19 * This is a bug fix release. * https://www.php.net/ChangeLog-8.php#8.1.19 - modified patches % php-ar-flags.patch (refreshed) % php-build-reproducible-phar.patch (refreshed) % php-ini.patch (refreshed) % php-systzdata-v23.patch (refreshed) ==== dnsmasq ==== - Correct rundir from /var/run to /run for pid file ==== firewalld ==== Subpackages: firewalld-bash-completion firewalld-lang firewalld-zsh-completion python3-firewall - Add firewalld-runstatedir.patch: change pid file location from /var/run to /run ==== gawk ==== - enable profiling ==== gnutls ==== Subpackages: libgnutls-dane0 libgnutls30 libgnutls30-32bit libgnutls30-hmac - Disable GNULIB's year2038 also for 32-bit arm - boo#1211394 ==== hwdata ==== Version update (0.369 -> 0.370) - update to 0.370: * Update pci, usb and vendor ids ==== inxi ==== Version update (3.3.23 -> 3.3.27) - Update to version 3.3.27: + /usr/share/doc/packages/inxi/inxi.changelog. ==== kernel-source ==== Version update (6.3.1 -> 6.3.2) - Linux 6.3.2 (bsc#1012628). - netfilter: nf_tables: deactivate anonymous set from preparation phase (bsc#1012628). - arch_topology: Remove early cacheinfo error message if -ENOENT (bsc#1012628). - debugobject: Ensure pool refill (again) (bsc#1012628). - cifs: avoid potential races when handling multiple dfs tcons (bsc#1012628). - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (bsc#1012628). - cifs: fix potential race when tree connecting ipc (bsc#1012628). - cifs: fix sharing of DFS connections (bsc#1012628). - cifs: protect session status check in smb2_reconnect() (bsc#1012628). - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (bsc#1012628). - io_uring/rsrc: check for nonconsecutive pages (bsc#1012628). - perf intel-pt: Fix CYC timestamps after standalone CBR (bsc#1012628). - perf auxtrace: Fix address filter entire kernel size (bsc#1012628). - dm: don't lock fs when the map is NULL in process of resume (bsc#1012628). - dm ioctl: fix nested locking in table_clear() to remove deadlock concern (bsc#1012628). - dm flakey: fix a crash with invalid table line (bsc#1012628). - dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path (bsc#1012628). - dm clone: call kmem_cache_destroy() in dm_clone_init() error path (bsc#1012628). - dm verity: fix error handling for check_at_most_once on FEC (bsc#1012628). - vhost_vdpa: fix unmap process in no-batch mode (bsc#1012628). - mm/hugetlb: fix uffd-wp during fork() (bsc#1012628). - mm/mempolicy: correctly update prev when policy is equal on mbind (bsc#1012628). - ia64: fix an addr to taddr in huge_pte_offset() (bsc#1012628). - s390/dasd: fix hanging blockdevice after request requeue (bsc#1012628). - btrfs: scrub: reject unsupported scrub flags (bsc#1012628). - scripts/gdb: fix lx-timerlist for Python3 (bsc#1012628). - afs: Avoid endless loop if file is larger than expected (bsc#1012628). - afs: Fix getattr to report server i_size on dirs, not local size (bsc#1012628). - afs: Fix updating of i_size with dv jump from server (bsc#1012628). - PM: hibernate: Do not get block device exclusively in test_resume mode (bsc#1012628). - PM: hibernate: Turn snapshot_test into global variable (bsc#1012628). - ACPI: PM: Do not turn of unused power resources on the Toshiba Click Mini (bsc#1012628). - hte: tegra-194: Fix off by one in tegra_hte_map_to_line_id() (bsc#1012628). - hte: tegra: fix 'struct of_device_id' build error (bsc#1012628). - mfd: arizona-spi: Add missing MODULE_DEVICE_TABLE (bsc#1012628). - mfd: ocelot-spi: Fix unsupported bulk read (bsc#1012628). - mfd: tqmx86: Correct board names for TQMxE39x (bsc#1012628). - mfd: tqmx86: Specify IO port register range more precisely (bsc#1012628). - mfd: tqmx86: Do not access I2C_DETECT register through io_base (bsc#1012628). - thermal/drivers/mediatek: Use devm_of_iomap to avoid resource leak in mtk_thermal_probe (bsc#1012628). - pinctrl-bcm2835.c: fix race condition when setting gpio dir (bsc#1012628). - dmaengine: at_xdmac: do not enable all cyclic channels (bsc#1012628). - dmaengine: at_xdmac: restore the content of grws register (bsc#1012628). - dmaengine: at_xdmac: do not resume channels paused by consumers (bsc#1012628). - dmaengine: at_xdmac: fix imbalanced runtime PM reference counter (bsc#1012628). - dmaengine: at_xdmac: disable/enable clock directly on suspend/resume (bsc#1012628). - dmaengine: dw-edma: Fix to enable to issue dma request on DMA processing (bsc#1012628). - dmaengine: dw-edma: Fix to change for continuous transfer (bsc#1012628). - dma: gpi: remove spurious unlock in gpi_ch_init (bsc#1012628). - phy: ti: j721e-wiz: Fix unreachable code in wiz_mode_select() (bsc#1012628). - phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port (bsc#1012628). - soundwire: intel: don't save hw_params for use in prepare (bsc#1012628). - pwm: mtk-disp: Configure double buffering before reading in .get_state() (bsc#1012628). - pwm: mtk-disp: Disable shadow registers before setting backlight values (bsc#1012628). - leds: tca6507: Fix error handling of using fwnode_property_read_string (bsc#1012628). - dmaengine: mv_xor_v2: Fix an error code (bsc#1012628). - pinctrl: ralink: reintroduce ralink,rt2880-pinmux compatible string (bsc#1012628). - leds: TI_LMU_COMMON: select REGMAP instead of depending on it (bsc#1012628). ... changelog too long, skipping 1100 lines ... - commit 26ec1ca ==== libnettle ==== Version update (3.8.1 -> 3.9) Subpackages: libhogweed6 libhogweed6-32bit libnettle8 libnettle8-32bit - update to 3.9 * rewrite of the C and plain x86_64 assembly implementations of GHASH to use precomputed tables in a different way, with tables always accessed in the same sequential manner. This should make Nettle's GHASH implementation side-channel silent on all platforms, but considerably slower on platforms without carry- less mul instructions. E.g., benchmarks of the C implementation on x86_64 showed a slowdown of 3 times. * Fix bug in ecdsa and gostdsa signature verify operation, for the unlikely corner case that point addition really is point duplication. * Fix for chacha on Power7, nettle's assembly used an instruction only available on later processors * Add support for the SM4 block cipher * Add support for the Balloon password hash * Add support for SIV-GCM authenticated encryption mode * Add support for OCB authenticated encryption mode. * New exported functions md5_compress, sha1_compress, sha256_compress, sha512_compress * multiple performance optimizations * Delete all arcfour assembly code. Affects 32-bit x86, 32-bit and 64-bit sparc ==== libpng16 ==== - do not use NEON instructions [bsc#1211176] ==== libstorage-ng ==== Version update (4.5.103 -> 4.5.105) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#931 - added test programs for nvme list and list-subsys - 4.5.105 - merge gh#openSUSE/libstorage-ng#930 - avoid to handle some fstab entries twice - 4.5.104 ==== memtest86+ ==== Version update (6.10 -> 6.20) - Revert change from Mon Mar 13, as this prevents the use of memtest and memtest is no longer displayed in the boot menu. - Update to 6.20 - Add support for Alder Lake-N CPUs - Add support for VIA VT8233(A)/VT8237 - Add support for nVidia nForce 3 - Add support for ALi M1533/1543(C)/1535 - Add temperature reporting on AMD K8 CPUs - Add some JEDEC Manufacturers - Better handling of SPD reading on Mobile CPUs - Fix APIC Timer fail on some mobile platforms - Fix older CPU (P5/P6-class) detection - don't install files in /boot. The OS needs to stay in /usr ==== mousepad ==== Version update (0.6.0 -> 0.6.1) Subpackages: libmousepad0 mousepad-lang - Update to version 0.6.1 * I18n: Update po/LINGUAS list * build: Optionally require polkit * build: Use m4_defined min versions and cleanup * build: Use XDT_VERSION_INIT and get rid of configure.ac.in * build: Switch from intltool to gettext * menubar: Improve some strings * search: Use consistent naming * history: Properly restore multi-window session * Restore opening mode only when it was overridden from the command line * Add "X of Y matches" to search bar and replace dialog (Closes #174) * Add application/x-zerosize to supported mime types (Fixes #194) * Apply opening mode also to the open dialog (Fixes #181) * Properly reconnect signal handler when auto-reload is enabled * Translation Updates ==== nodejs20 ==== Subpackages: npm20 - fix_ci_tests.patch: increase default timeout on unit tests to 20min from 2min. This seems to have lead to build failures on some platforms, like s390x in Factory. (bsc#1211407) ==== php8 ==== Version update (8.1.18 -> 8.1.19) Subpackages: php8-cli php8-ctype php8-dom php8-gd php8-gettext php8-iconv php8-mbstring php8-mysql php8-openssl php8-pdo php8-sqlite php8-tokenizer php8-xmlreader php8-xmlwriter - version update to 8.1.19 * This is a bug fix release. * https://www.php.net/ChangeLog-8.php#8.1.19 - modified patches % php-ar-flags.patch (refreshed) % php-build-reproducible-phar.patch (refreshed) % php-ini.patch (refreshed) % php-systzdata-v23.patch (refreshed) ==== ristretto ==== Version update (0.13.0 -> 0.13.1) Subpackages: ristretto-lang - Update to version 0.13.1 * I18n: Update po/LINGUAS list * Force g_file_query_info if magic_file returns "application/octet-stream" * build: Use m4_defined min versions and cleanup * Replace XDT_CHECK_LIBX11 and guard x11 code paths * build: Use XDT_VERSION_INIT and get rid of configure.ac.in * build: Switch from intltool to gettext * viewer: Paint background icon at window scale * Translation Updates ==== rp-pppoe ==== Version update (3.15 -> 4.0) - Updated to 4.0: * SPDX-License-Identifier: tags added to most source files * rp-pppoe.so plugin: Modified to compile against both pppd >= 2.5.0 and pppd < 2.5.0. * pppoe-server: If -L or -R option is specified as 0.0.0.0, then IP allocation is delegated to pppd. * pppoe-server: New -g option specifies the path of the rp-pppoe.so plugin to use with pppd in kernel-mode PPPoE. * pppoe-server: New -U option specifies a UNIX-domain control socket. This lets you send control commands to the server while it is running; see the pppoe-server man page for details. * All source code: Many cleanups and use of standard types like uint16_t rather than ones we define. * All source code: Support for OSes other than Linux has been dropped. * Documentation: Updated from modern Linux systems. * Cleanup: The following old and obsolete files have been removed: - Old connection scripts scripts/pppoe-connect.in, scripts/pppoe-start.in, scripts/pppoe-init-suse.in, scripts/pppoe-setup.in, scripts/pppoe-status, scripts/pppoe-init.in, and scripts/pppoe-stop.in * Obsolete firewall scripts configs/firewall-standalone and configs/firewall-masq - Obsolete configuration files configs/pppoe.conf and configs/pap-secrets - The Tcl/Tk gui script gui/tkpppoe.in and supporting files - The RPM spec file rp-pppoe.spec - Drop rp-pppoe-3.14-nonrfc-modems.patch, rp-pppoe-3.14-resolve-conf.patch, rp-pppoe-3.14-config.patch, rp-pppoe-3.14-init.patch, patched scripts no longer exists. - Drop rp-pppoe-3.14-release-buildsystem.patch, rp-pppoe-3.14-pie.patch rp-pppoe-3.14-strip.patch, no longer needed. ==== setxkbmap ==== Version update (1.3.3 -> 1.3.4) - Update to version 1.3.4 * gitlab CI: stop requiring Signed-off-by in commits * Be more careful about querying randr * Fix "Xwayland" spelling * Check for the XWAYLAND extension * Route the Xwayland warning through stderr ==== sysvinit ==== Version update (3.00 -> 3.07) - Update to sysvinit 3.07 * Fixed killall5 so that processes in the omit list are not sent any signals, including SIGSTOP. * Fixed usage message for killall5 to be more accurate. * pidof was not returning PIDs of programs which were launched using a symbolic link. (ie /tmp/sleep when /tmp/sleep links to /usr/bin/sleep). This is now fixed as we check both the realpath and symbolic path for processes. In other words, "pidof /tmp/sleep" and "pidof /usr/bin/sleep" will return the same PIDs when /tmp/sleep is a symbolic link to /usr/bin/sleep. * Fixed memory initialization error in pidof. Fix provided by Markus Fischer. * Accepted patch from Mark Hindley which avoids clearing realpath information in pidof when trying to find matching executables. * Mark Hindley fixed typo in es.po * Mark Hindley cleaned up translation code in src/Makefile. * Drop sulogin from Debian build. Removed libcrypt-dev dependency. * Fixed pt translation pages which were failing due to mis-matched open/close tags. * Makefile now respects ROOT prefix when setting up pidof-to-killall5 symbolic link. * Removed redundant translation files from man directory. * Makefile now respects DESTDIR. User can specify either ROOT= or DESTDIR= to set install prefix. * Helge Kreutzmann provided updated Makefile for translation of manual pages. This has been added to the man directory. * Added sys/sysmacros.h include in mountpoint.c to fix compiler errors on systems where major/minor macros were not defined. * Applied patches from Mark Hindley to clean up man page Makefile, translations and installs of new man pages. * Remove reliance on linux/fs.h as it conflicts with glibc 2.36. Patch provided by lucascars. * Mark Hindley supplied patch to make bootlogd compile on GNU Hurd systems. Was missing major/minor macro. * Fixed formatting in init.8 man page. Patch provided by Mark Hindley. * Added q and Q flags to synopsis in shutdown manual page. * Applied fixes for markup and spacing in manual pages. Patch provided by Mario Blattermann. * Added translation framework (po4a) from Mario Blttermann. * Added Makefile for man/ directory. Will handle translations and substitutions. * Applied new translations for multiple languages from Mario Blattermann. * Added ability to use "@" symbol in command named in the inittab file. This treats commands as literal and does not launch a shell to interpret them. * Updated inittab manual page to include overview of symbols which trigger a shell interpretor and how to disable them using the @ symbol. * Introduced change which adds error checking in bootlogd when performing chdir(). - Provided by Alexander Vickberg * Add check for console using TIOCGDEV on Linux systems in bootlogd to make finding console more robust. - Provided by Alexander Vickberg * Default to showing processes in the uninterruptable state (D). The -z flag no longer affects whether processes in D state are shown. The -z flag does still toggle whether zombie (Z) processes are shown. * Removed unnecessary check which is always true from init tab parsing. - Port patches * sysvinit-2.88dsf-suse.patch * sysvinit-2.90-no-kill.patch * sysvinit-2.90.dif - Add keyring as well as signature for source tar ball of sysvinit ==== texlive ==== Subpackages: libkpathsea6 libsynctex2 - Add patch source-luatex.dif * Update to luatex 1.17.0 with the fixes for CVE-2023-32668 and CVE-2023-32700 (bsc#1211389) VUL-0: TeXLive: Arbitrary code execution in LuaTeX ==== tnftp ==== Version update (20210827 -> 20230507) - Update to version 20230507 * Add timeout for SSL connection setup, defaulting to 60 seconds. * Consistently use poll(2) instead of select(2). * Check EAGAIN as well as EINTR. * Simplify includes. - Update to version 20230409 * Add option sslnoverify to control validation of SSL certificates. * Add netrc processing to fetch-mode (URL on command line) to enable options and autologin via netrc. * Fix SSL cleanup in some error paths. * Support SSL certificate validation by default. FTPSSLNOVERIFY=1 in the environment to disable validation. * Handle relative URLs. * Improve ftp(1) markup. * Fix -? in a more portable manner. ==== yast2-installation ==== Version update (4.6.2 -> 4.6.3) - Use a larger font for xterm during installation via X resources (bsc#1211267) Details: https://github.com/yast/yast-installation/pull/1085 4.6.3 ==== yast2-pkg-bindings ==== Version update (4.6.1 -> 4.6.2) - Dropped the *-devel-doc subpackage (related to bsc#1211319) - 4.6.2 ==== yast2-services-manager ==== Version update (4.6.0 -> 4.6.1) - Improved help text for services table (bsc#1211320) - 4.6.1

1 0

Betterbird - Thunderbird fork by original developer
by Larry Len Rainey 17 May '23

17 May '23

9 9

OpenSSH updates
by David B 16 May '23

16 May '23

Greetings, What's the status of OpenSSH updates? Tumbleweed currently 8.9p1 which was released on 2022-02-23 and there were 4 more releases since then with the newest being 9.3p1 released on 2023-03-15. The main reason I'm asking is I want to use my YubiKey's FIDO2 for SSH and newer versions have related fixes/features. Are there currently any plans to pull in 9.3p1 for example? https://www.openssh.com/releasenotes.html David B Sent with [Proton Mail](https://proton.me/) secure email.

2 2

New Tumbleweed snapshot 20230515 released!
by Dominique Leuenberger 16 May '23

16 May '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MozillaFirefox (113.0 -> 113.0.1) kwin5 lhasa (0.3.1 -> 0.4.0) rubygem-rails-7.0 yast2-trans (84.87.20230507.125aa699e6 -> 84.87.20230513.307f8d2fb9) === Details === ==== MozillaFirefox ==== Version update (113.0 -> 113.0.1) Subpackages: MozillaFirefox-translations-common - Mozilla Firefox 113.0.1 * UI fixes for other platforms - upstream signing key updated ==== kwin5 ==== Subpackages: kwin5-lang - Add patch to fix pointer constraint region handling (kde#469555): * revert-avoid-pointer-warp.patch ==== lhasa ==== Version update (0.3.1 -> 0.4.0) Subpackages: liblhasa0 - Update to release 0.4.0 * A verbose mode was added to the list output that shows the full file timestamp. * Support for archives generated by the DOS LHARK tool was added. ==== rubygem-rails-7.0 ==== - fix the additional Requires for the rubyX.Y-rails-7.0: this requires the new ruby-common (boo#1208872) ==== yast2-trans ==== Version update (84.87.20230507.125aa699e6 -> 84.87.20230513.307f8d2fb9) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sr yast2-trans-sv yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20230513.307f8d2fb9: * Translated using Weblate (German) * Translated using Weblate (German) * Translated using Weblate (German) * Translated using Weblate (German) * Translated using Weblate (Catalan) * New POT for text domain 'vm'. * Translated using Weblate (Czech) * Translated using Weblate (Czech) * Translated using Weblate (Czech) * Translated using Weblate (Czech) * Translated using Weblate (Czech) * Translated using Weblate (Czech) * Translated using Weblate (Czech) * New POT for text domain 's390'. * New POT for text domain 'network'.

1 0