Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20221025 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: cepces (0.3.4 -> 0.3.6) eog (43.0 -> 43.1) gnome-maps (43.0 -> 43.1) gnome-remote-desktop (43.0 -> 43.1) graphviz gstreamer (1.20.3 -> 1.20.4) gstreamer-plugins-bad (1.20.3 -> 1.20.4) gstreamer-plugins-base (1.20.3 -> 1.20.4) gstreamer-plugins-good (1.20.3 -> 1.20.4) gstreamer-plugins-libav (1.20.3 -> 1.20.4) gstreamer-plugins-ugly (1.20.3 -> 1.20.4) libHX (4.6 -> 4.7) libguestfs libshumate (1.0.1 -> 1.0.2) multipath-tools (0.9.1+52+suse.be8809e -> 0.9.2+57+suse.cf3c1e9) nodejs-common (5.0 -> 5.1) ocfs2-tools pam-config (1.7 -> 1.8) python-psutil (5.9.2 -> 5.9.3) python-urllib3 tumbler xtables-addons (3.21_k6.0.3_1 -> 3.22_k6.0.3_1) xwayland (22.1.3 -> 22.1.4) yast2-trans (84.87.20221016.284cfa770d -> 84.87.20221023.365770fb5e) zchunk (1.2.2 -> 1.2.3) === Details === ==== cepces ==== Version update (0.3.4 -> 0.3.6) Subpackages: cepces-certmonger cepces-selinux python3-cepces Release v0.3.6: - Fix Bug #15 cepces.conf.dist: server should be pointed to actual CEP host - Replace old requests_kerberos with requests_gssapi - setup: Do not install example configs - setup: Respect the prefix the user specifies - Delete the spec file - Make Kerberos delegation configurable - Fix Bug #24 cepces-submit 'TypeError: option values must be strings' - Removed b755b56d25f3e54f8f15d9985fd0597b21c1051d.patch because it is now upstream. Release v0.3.5: - Added polling_interval which tells certmonger how long to wait in seconds before retrying. - Implemented Certificate authentication method. - Python 3.10 compatible. ==== eog ==== Version update (43.0 -> 43.1) Subpackages: eog-lang - Update to version 43.1: + desktop: Remove obsolete Bugzilla entries + Add Swedish help images. + Updated translations. ==== gnome-maps ==== Version update (43.0 -> 43.1) Subpackages: gnome-maps-lang - Update to version 43.1: + Fixing various issues left after the GTK 4 port. + Fix setting adaptive narrow (phone) mode on first launch on portrait displays. + Fix dragging-and-dropping route entris in the sidebar. + Fix opening shapelayer files when dragged-and-dropped onto the main window. + Fix selecting turnpoint instructions showing the position of the instruction on the map. + Fix local tiles (using the --local command-line option). + Fix location service dialog. + Fix send-to dialog. + Updated translations. ==== gnome-remote-desktop ==== Version update (43.0 -> 43.1) Subpackages: gnome-remote-desktop-lang - Update to version 43.1: + clipboard: Always clear mime type tables when updating clients clipboard + hwaccel-nvidia: - Also output actual NVENC errors when API calls fail - Always output CUDA errors when API calls fail - Fix small style issue + man: Only include man page content for compiled-in backends + rdp-audio-output-stream: Set stream inactive before destroying it + rdp-monitor-config: Fix typo in verify_monitor_config + rdp/nw-auto: Fix crash when updating unchanged ping source + rdp: - Suspend PipeWire stream on exit instead of flushing it - Unlock stream lock mutex while suspending other audio streams + session-rdp: - Also check VCM handle when clearing it - Fix check when creation of virtual channel manager fails - Only print colour depth fix message when situation applies + vnc: Suspend PipeWire stream on exit instead of flushing it + Updated translations. ==== graphviz ==== Subpackages: libcdt5 libcgraph6 libgvc6 libpathplan4 - add swig-4.1.0.patch to work around graphviz's incompatibility with swig-4.1.0. ==== gstreamer ==== Version update (1.20.3 -> 1.20.4) Subpackages: gstreamer-lang gstreamer-utils libgstreamer-1_0-0 typelib-1_0-Gst-1_0 - Update to version 1.20.4: + Highlighted bugfixes in 1.20.4: - avaudiodec: fix playback issue with WMA files, would throw an error at EOS with FFmpeg 5.x - Fix deadlock when loading gst-editing-services plugin - Fix input buffering capacity in live mode for aggregator, video/audio aggregator subclasses, muxers - glimagesink: fix crash on Android - subtitle handling and subtitle overlay fixes - matroska-mux: allow width + height changes for avc3|hev1|vp8|vp9 - rtspsrc: fix control url handling for spec compliant servers and add fallback for incompliant servers - WebRTC fixes - RTP retransmission fixes - video: fixes for formats with 4x subsampling and horizontal co-sited chroma (Y41B, YUV9, YVU9 and IYU9) - Fix consuming of the macOS package as a framework in XCode - Performance improvements - Miscellaneous bug fixes, memory leak fixes, and other stability and reliability improvements + gstreamer: - buffer: drop parent meta in deep copy/foreach_metadata - devicemonitor: Use a sync bus handler for the provider to avoid accumulating all messages until the provider is stopped - element: Fix requesting of pads with string templates - gst: . Protect initialization state with a recursive mutex . Add missing define guard for build without gstreamer debug logging support - gst_init: Initialize static plugins just before dynamic plugins - info: Parse "NONE" as a valid level name - meta: Set the parent refcount of the GstStructure correctly - pluginloader: Don't hang on short reads/writes - tracers: leaks: . Fix potentially invalid memory access when trying to detect object type . Fix object-refings.class flags - uri: When setting the same string again do nothing - value: Don't loop forever when serializing invalid flag + Base Libraries: - aggregator: . Fix input buffering in live mode (was too low before in many cases) . Fix reversed active/flushing arguments in debug log output . Reset EOS flag after receiving a stream-start event + Core Elements: queue2: - Hold the lock when modifying sinkresult - Fix deadlock when deactivate is called in pull mode ==== gstreamer-plugins-bad ==== Version update (1.20.3 -> 1.20.4) Subpackages: gstreamer-plugins-bad-lang libgstadaptivedemux-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstphotography-1_0-0 libgstplay-1_0-0 libgstplayer-1_0-0 libgstsctp-1_0-0 libgsturidownloader-1_0-0 libgstva-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 - Update to version 1.20.4: + amcvideodec: fix GstAmcSurfaceTexture segfault. + audiobuffersplit: Fix drift that was introduced by wrong calculations in gapless mode. + audiovisualizer: fix buffer mapping to not increase refcount. + avfvideosrc: Fix wrong default framerate value. + d3d11decoder: Check 16K resolution support. + d3d11videosink: Fix for force-aspect-ratio setting when rendering on shared texture. + GstPlay: missing cleanup for g_autoptr. + mxfdemux: Always calculate BlockAlign of raw audio to work around files with broken BlockAlign field in the headers. + nvdec: Fix for HEVC decoding when coded resolution is larger than display resolution. + openh264enc: Fix constrained-high encoding. + openh264: Register debug categories earlier. + openmpt: update from now deprecated api. + player/play: Fix object construction and various leaks. + player: Plug a memory leak. + proxysink: Make sure stream-start and caps events are forwarded, and fix memory leak. + tests: skip unit tests for dependency-less elements that have been disabled. + tsdemux: Don't trigger a program change when falling back to ignore-pcr behaviour. + va: - allocator: Fix translation of VADRMPRIMESurfaceDescriptor. - h265dec: Fix a crash because of missing reference frame. - vah265dec: Decoder segfaults on seek. + wasapi2: Fix initial mute/volume setting. + wasapi: Implement default audio channel mask. + webrtcbin: - Fix pointer dereference before null check. - Limit sink query to sink pads. + webrtc: Make sure to return NULL when validating TURN server fails. - Drop va-allocator-fix.patch: fixed upstream. ==== gstreamer-plugins-base ==== Version update (1.20.3 -> 1.20.4) Subpackages: gstreamer-plugins-base-lang libgstallocators-1_0-0 libgstapp-1_0-0 libgstaudio-1_0-0 libgstfft-1_0-0 libgstgl-1_0-0 libgstpbutils-1_0-0 libgstriff-1_0-0 libgstrtp-1_0-0 libgstrtsp-1_0-0 libgstsdp-1_0-0 libgsttag-1_0-0 libgstvideo-1_0-0 typelib-1_0-GstAudio-1_0 typelib-1_0-GstPbutils-1_0 typelib-1_0-GstTag-1_0 typelib-1_0-GstVideo-1_0 - Update to version 1.20.4: + decodebin3: - Fix mutex leaks - Fix memory issues with active selection list - uridecodebin3, urisourcebin: Event handling fixes - Fix EOS event sequence + parsebin: - Avoid crash with unknown streams - SIGSEGV during HLS stream using souphttpsrc + glimagesink: - Only allow setting the GL display/context if it is a valid value - Segfault on android devices + gstgl: Fix several memory leaks in macOS + opusenc: improve inband-fec property documentation + playsink: Hold a reference to the soft volume element + pbutils: descriptions: fix gst_pb_utils_get_caps_description_flags() + rtspurl: Use gst_uri_join_strings() in gst_rtsp_url_get_request_uri_with_control() instead of a hand-crafted, wrong version + rtspconnection: protect cancellable by a mutex + sdpmessage: Don't set SDP medias from caps without media/payload/clock-rate fields + samiparse: fix handling of self-closing tags + ssaparse: include required system headers for isspace() and sscanf() functions + subparse: fix crash when parsing invalid timestamps in mpl2 + subparse fixes + textoverlay: Don't miscalculate text running times + videoaggregator: always convert when user provides converter-config + video: Fix scaling in 4x horizontal co-sited chroma (Y41B, YUV9, YVU9 and IYU9) + xmptag: register musicbrainz tags during init to fix critical in jpegparse + xvimagesink: fix image leaks in error code path + tests: skip unit tests for dependency-less elements that have been disabled ==== gstreamer-plugins-good ==== Version update (1.20.3 -> 1.20.4) Subpackages: gstreamer-plugins-good-extra gstreamer-plugins-good-gtk gstreamer-plugins-good-jack gstreamer-plugins-good-lang gstreamer-plugins-good-qtqml - Update to version 1.20.4: + alpha: fix stride issue when out buffer has padding on right + isoff: Fix earliest pts field parse issue + matroska-mux: allow width + height changes for avc3|hev1|vp8|vp9 + qt: Fix another instance of Qt/GStreamer both defining GLsync differently + qtdemux: - Avoid crash on reconfiguring. - Guard against timestamp calculation overflow in gap event loop - Don't use invalid values from failed trex parsing - Possible endless loop + rtpjitterbuffer: - Only unschedule timers for late packets if they're not RTX packets and only once - Remove lost timer for out of order packets + rtspsrc: - SETUP generates 400 Bad Request - Retry SETUP with non-compliant URL resolution on "Bad Request" and "Not found" + rtpst2022-1-fecenc: Drain column packets on EOS + rtpvp8depay: If configured to wait for keyframes after packet loss, also do that if incomplete frames are detected + splitmuxsink: Don't crash on EOS without buffer + splitmuxsrc: - Stop pad task before cleanup - Don't consider unlinked pads when deactivating part + soup: libsoup3 makes audio streaming stop + v4l2: fix critical when unreferencign buffer with no data + v4l2bufferpool: Fix debug trace + v4l2object: Add support for Apple's full-range bt709 colorspace variant 1:3:5:1 + v4l2videocodec: workaround for failure to fully drain frames preceding MIDSTREAM renegotiation + v4l2allocator: Fix invalid imported dmabuf fd + videoflip: Fix caps negotiation when method is selected + build failure trying to build jack examples + examples: don't try and build jack examples if jack was disabled + tests: skip unit tests for dependency-less elements that have been disabled ==== gstreamer-plugins-libav ==== Version update (1.20.3 -> 1.20.4) - Update to version 1.20.4: + avauddec: - Fix regression with WMA files, would throw an error at EOS. - Fix unnecessary reconfiguration if the audio layout isn't specified. + libav: Fix for APNG encoder property registration. + Failure to decode end of WMA file. ==== gstreamer-plugins-ugly ==== Version update (1.20.3 -> 1.20.4) Subpackages: gstreamer-plugins-ugly-lang - Update to version 1.20.4: + tests: skip unit tests for dependency-less elements that have been disabled. ==== libHX ==== Version update (4.6 -> 4.7) Subpackages: libHX32 libHX32-32bit - Update to release 4.7 * string: new quoting modes HXQUOTE_BASE64URL & HXQUOTE_BASE64IMAP ==== libguestfs ==== Subpackages: libguestfs-xfs libguestfs0 - Drop reiserfs (boo#1191092) ==== libshumate ==== Version update (1.0.1 -> 1.0.2) Subpackages: libshumate-1_0-1 libshumate-lang typelib-1_0-Shumate-1_0 - Update to version 1.0.2: + Avoid flickering when panning the map. + Fix warnings about min/max zoom levels for the viewport. + Fix documentation comments. + Fix cross-compilation for gi-docgen. ==== multipath-tools ==== Version update (0.9.1+52+suse.be8809e -> 0.9.2+57+suse.cf3c1e9) Subpackages: kpartx libmpath0 - Update to version 0.9.2+57+suse.cf3c1e9: * Fix multipathd authorization bypass and symlink attack (bsc#1202739 CVE-2022-41973 CVE-2022-41974) * add multipath-dracut.conf: dracut config file to install tmpfiles.d/multipath.conf in initramfs * Use "queue_mode bio" for NVMeoF/TCP devices * Upstream bug fixes and hwtable updates - Drop recompress.service, it just slows down build ==== nodejs-common ==== Version update (5.0 -> 5.1) - Use NodeJS 19 as default for TW ==== ocfs2-tools ==== - ocfs2-tools: finish UsrMerge, install to /usr (bsc#1191084) + modify ocfs2_tools.spec to use %suse_version to replace %UsrMerge ==== pam-config ==== Version update (1.7 -> 1.8) - Update to Version 1.8 - Move systemd_home after all optional modules (#13) - Add pam_u2f support [bsc#1115512] ==== python-psutil ==== Version update (5.9.2 -> 5.9.3) - update to version 5.9.3: * Enhancements + 2040, [macOS]: provide wheels for arm64 architecture. (patch by Matthieu Darbois) * Bug fixes + 2116, [macOS], [critical]: `psutil.net_connections`_ fails with RuntimeError. + 2135, [macOS]: Process.environ() may contain garbage data. Fix out-of-bounds read around sysctl_procargs. (patch by Bernhard Urban-Forster) + 2138, [Linux], [critical]: can't compile psutil on Android due to undefined ethtool_cmd_speed symbol. + 2142, [POSIX]: net_if_stats() 's flags on Python 2 returned unicode instead of str. (patch by Matthieu Darbois) + 2147, [macOS] Fix disk usage report on macOS 12+. (patch by Matthieu Darbois) + 2150, [Linux] Process.threads() may raise NoSuchProcess. Fix race condition. (patch by Daniel Li) + 2153, [macOS] Fix race condition in test_posix.TestProcess.test_cmdline. (patch by Matthieu Darbois) ==== python-urllib3 ==== - Fix pycache when undbundling six ==== tumbler ==== Subpackages: libtumbler-1-0 tumbler-folder-thumbnailer tumbler-lang tumbler-webp-thumbnailer - Exclude RAW thumbnailer on Leap 15.5+ as well ==== xtables-addons ==== Version update (3.21_k6.0.3_1 -> 3.22_k6.0.3_1) - Update to release 3.22 * Support for up to Linux 6.1 ==== xwayland ==== Version update (22.1.3 -> 22.1.4) - U_Do-not-ignore-leave-events.patch * fixes xwayland issue#1397, issue#1395 - Update to version 22.1.4 * xwayland: Aggregate scroll axis events to fix kinetic scrolling * Forbid server grabs by non-WM on *rootless* XWayland * xkb: Avoid length-check failure on empty strings. * ci: remove redundant slash in libxcvt repository url * dix: Skip more code in SetRootClip for ROOT_CLIP_INPUT_ONLY * dix: Fix overzealous caching of ResourceClientBits() * xwayland: Prevent Xserver grabs with rootless * xwayland: Delay wl_surface destruction * build: Bump wayland requirement to 1.18 * xwayland: set tag on our surfaces * xwayland: Clear the "xwl-window" tag on unrealize * xwayland: correct the type for the discrete scroll events * xkb: fix some possible memleaks in XkbGetKbdByName * xkb: length-check XkbGetKbdByName before accessing the fields * xkb: length-check XkbListComponents before accessing the fields * xkb: proof GetCountedString against request length attacks - supersedes security patches: * U_xkb-fix-some-possible-memleaks-in-XkbGetKbdByName.patch * U_xkb-proof-GetCountedString-against-request-length-at.patch ==== yast2-trans ==== Version update (84.87.20221016.284cfa770d -> 84.87.20221023.365770fb5e) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20221023.365770fb5e: * Translated using Weblate (Czech) * Translated using Weblate (Czech) * Translated using Weblate (Dutch) * Translated using Weblate (Dutch) * Translated using Weblate (Slovak) * Translated using Weblate (Slovak) * Translated using Weblate (Japanese) * Translated using Weblate (Catalan) * Translated using Weblate (Japanese) * Translated using Weblate (Catalan) * New POT for text domain 'registration'. * New POT for text domain 'installation'. * New POT for text domain 'firstboot'. * New POT for text domain 'country'. * New POT for text domain 'network'. * New POT for text domain 'autoinst'. ==== zchunk ==== Version update (1.2.2 -> 1.2.3) - update to 1.2.3: * Remove meson deprecation warning * Add license scan report and status * test/zck_cmp_uncomp: fix printf format types * meson: add option to build without docs * zck: declare write_data as static