Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20220624 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: Imath (3.1.3 -> 3.1.5) accountsservice (0.6.55 -> 22.08.8) amarok (2.9.75git.20220224T114455~9300034c57 -> 2.9.75git.20220614T014846~dc55a00143) dracut (056+suse.275.g4ce7a6a7 -> 057+suse.292.g508db4cd) firewalld glslang (11.9.0 -> 11.10.0) gstreamer (1.20.2 -> 1.20.3) gstreamer-devtools (1.20.2 -> 1.20.3) gstreamer-editing-services (1.20.2 -> 1.20.3) gstreamer-plugins-bad (1.20.2 -> 1.20.3) gstreamer-plugins-base (1.20.2 -> 1.20.3) gstreamer-plugins-good (1.20.2 -> 1.20.3) gstreamer-plugins-libav (1.20.2 -> 1.20.3) gstreamer-plugins-ugly (1.20.2 -> 1.20.3) hwinfo (21.81 -> 21.82) jasper (3.0.4 -> 3.0.5) openslp pipewire python-Cycler (0.10.0 -> 0.11.0) python-PyYAML python-Twisted (22.2.0 -> 22.4.0) python-traitlets (5.2.2 -> 5.3.0) salt systemd-presets-common-SUSE virt-manager virtualbox virtualbox-kmp === Details === ==== Imath ==== Version update (3.1.3 -> 3.1.5) - update to 3.1.5: * Update CI workflow matrix for VFX-CY2022 * Use _WIN32 instead of _MSC_VER to fix mingw build * Fix 32-bit x86 build failure with 16c instructions * Move numeric_limits specializations into half.h * Change references to "master" branch to "main" * Remove some simple typos in the code * Added missing check _M_IX86 or _M_X64 when using __lzcnt. * SolveNormalizedCubic fix to return proper real root * Add docs target only if not a subproject * Fix docs race condition and make installation optional * Remove dead PyImath code and references to ilmbase * Use equalWithAbsError instead of equal operator for float * Fix sphinx warnings and man page filenames * Adding missing stdexcept header * for better SIMD auto-vectorization * Remove extra project layer for the pyimath code * Successor/predecessor functions use isnan() and isinf() * Fix python imath export * Cuda safety fixes * Sort Imath source files * Fix formatting in release notes ==== accountsservice ==== Version update (0.6.55 -> 22.08.8) Subpackages: accountsservice-lang libaccountsservice0 typelib-1_0-AccountsService-1_0 - Update to version 22.08.8 + Handle missing admin groups when changing account types + Set PrivateTmp to false in the systemd service + Add function to set user password expiration policy - Update to version 22.04.62 + Updated Swedish translation + Updated Indonesian translation + Updated German translation + Updated slovak translation + Update Ukrainian translation + Updated Brazilian Portuguese translation + act-user: Use stronger hashing methods in make_crypted() if available. + act-user-manager: Watch for the daemon going away and coming back + user-manager: Update users tables on username changes + user: Translate property x-session property name to match the proxy one + Check GDBusMessage for INTERACTIVE_AUTHORIZATION flag + daemon: Fix error check in save_autologin() + Never delete the root filesystem when removing users + Remove user heuristics + user-classify: Add git to username blacklist + daemon: ensure cache files for system users are processed + daemon: Don't try to add admin users to non existing groups + Move D-Bus conf file to $(datadir)/dbus-1/system.d - Rebased patches: + accountsservice-sysconfig.patch + accountsservice-filter-suse-accounts.patch + as-fate318433-prevent-same-account-multi-logins.patch - Drop upstream fixed patches: + ac9b14f1c1bbca413987d0bbfeaad05804107e9a.patch + accountsservice-fix-gdm-crash.patch + accountsservice-read-root-user-cache.patch + accountsservice-wtmp-io-improvements.patch ==== amarok ==== Version update (2.9.75git.20220224T114455~9300034c57 -> 2.9.75git.20220614T014846~dc55a00143) - Update to version 2.9.75git.20220614T014846~dc55a00143: * Mark Amarok as a single main window program - Update translations - Rebase flac_mimetype_bnc671581.diff ==== dracut ==== Version update (056+suse.275.g4ce7a6a7 -> 057+suse.292.g508db4cd) Subpackages: dracut-mkinitrd-deprecated - Update to version 057+suse.292.g508db4cd: See https://github.com/dracutdevs/dracut/releases/tag/057 for details. Additional changes: * fix(integrity): do not enable EVM if there is no key (bsc#1200718) * fix(dracut.sh): temporary workaround for kiwi (bsc#1199051) * chore(suse): update spec ==== firewalld ==== Subpackages: firewalld-bash-completion firewalld-lang firewalld-zsh-completion python3-firewall - Moved logrotate files from user specific directory /etc/logrotate.d to vendor specific directory /usr/etc/logrotate.d. ==== glslang ==== Version update (11.9.0 -> 11.10.0) - Update to release 11.10.0 * Generate OpLine before OpFunction * Add support for VK_EXT_fragment_shader_barycentric * Add whitelist filtering for debug comments in SPIRV-Remap * Add support for GL_EXT_ray_cull_mask ==== gstreamer ==== Version update (1.20.2 -> 1.20.3) Subpackages: gstreamer-lang gstreamer-utils libgstreamer-1_0-0 typelib-1_0-Gst-1_0 - Update to version 1.20.3 + Highlighted bugfixes: - Security fixes in Matroska, MP4 and AVI demuxers - Fix scrambled video playback with hardware-accelerated VA-API decoders on certain Intel hardware - playbin3/decodebin3 regression fix for unhandled streams - Fragmented MP4 playback fixes - Android H.265 encoder mapping - Playback of MXF files produced by FFmpeg before March 2022 - Fix rtmp2sink crashes on 32-bit platforms - WebRTC improvements - D3D11 video decoder and screen recorder fixes - Performance improvements - Support for building against OpenCV 4.6 and other build fixes - Miscellaneous bug fixes, memory leak fixes, and other stability and reliability improvements + gstreamer: - clock: Avoid creating a weakref with every entry (performance improvement) - plugin: add Apache 2 license to list of known licenses to avoid warning - gst_plugin_load_file: force plugin reload if filename differs Add support for LoongArch ==== gstreamer-devtools ==== Version update (1.20.2 -> 1.20.3) - Update to version 1.20.3: + No upstream changes available. ==== gstreamer-editing-services ==== Version update (1.20.2 -> 1.20.3) Subpackages: libges-1_0-0 typelib-1_0-GES-1_0 - Update to version 1.20.3: + Update validate test scenarios for videoaggregator rounding behaviour change ==== gstreamer-plugins-bad ==== Version update (1.20.2 -> 1.20.3) Subpackages: gstreamer-plugins-bad-lang libgstadaptivedemux-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstphotography-1_0-0 libgstplay-1_0-0 libgstplayer-1_0-0 libgstsctp-1_0-0 libgsturidownloader-1_0-0 libgstva-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 - Update to version 1.20.3: + GstPlay: Fix new error + warning parsing API (was unusuable before) + av1parse: let the parser continue on verbose OBUs + d3d11converter: Fix RGB to GRAY conversion, broken debug messages, and add missing GRAY conversion + gs: look for google_cloud_cpp_storage.pc + ipcpipeline: fix crash and error on windows with SOCKET or _pipe() + ivfparse: Don't set zero resolution on caps + mpegtsdemux: Handle PES headers bigger than a mpeg-ts packet; fix locking in error code path; handle more program updates + mpegtsmux: Start last_ts with GST_CLOCK_TIME_NONE to fix VBR muxing behaviour + mpegtsmux: Thread safety fixes: lock mux->tsmux, the programs hash table, and pad streams + mpegtsmux: Skip empty buffers + osxaudiodeviceprovider: Add initial support for duplex devices on OSX + rtpldacpay: Fix missing payload information + sdpdemux: add media attributes to caps, fixes ptp clock handling + mfaudioenc: Handle empty IMFMediaBuffer + nvdecoder: Various fixes for 4:4:4 and high-bitdepth decoding + nvenc: Fix deadlock because of too strict buffer pool size + va: fix library build issues, caps leaks in the vpp transform function, and add vaav1dec to documentation + v4l2codecs: vp9: Minor fixes + v4l2codecs: h264: Correct scaling matrix ABI check + dtlstransport: Notify ICE transport property changes + webrtc: Various fixes to the webrtc-sendrecv python example + webrtc-ice: Fix memory leaks in gst_webrtc_ice_add_candidate() + Support build against libfreeaptx in openaptx plugin + Fix linking issues on Illumos distros ==== gstreamer-plugins-base ==== Version update (1.20.2 -> 1.20.3) Subpackages: gstreamer-plugins-base-lang libgstallocators-1_0-0 libgstapp-1_0-0 libgstaudio-1_0-0 libgstfft-1_0-0 libgstgl-1_0-0 libgstpbutils-1_0-0 libgstriff-1_0-0 libgstrtp-1_0-0 libgstrtsp-1_0-0 libgstsdp-1_0-0 libgsttag-1_0-0 libgstvideo-1_0-0 typelib-1_0-GstAudio-1_0 typelib-1_0-GstPbutils-1_0 typelib-1_0-GstTag-1_0 typelib-1_0-GstVideo-1_0 - Update to version 1.20.3: + typefindfunctions: Fix WebVTT format detection for very short files + gldisplay: Reorder GST_GL_WINDOW check for egl-device + rtpbasepayload: Copy all buffer metadata instead of just GstMetas for the input meta buffer + codec-utils: Avoid out-of-bounds error + navigation: Fix Since markers for mouse scroll events + videoaggregator: Fix for unhandled negative rate + videoaggregator: Use floor() to calculate current position + video-color: Fix for missing clipping in PQ EOTF function + gst-play-1.0: Fix trick-mode handling in keyboard shortcut + audiovisualizer: shader: Fix out of bound write ==== gstreamer-plugins-good ==== Version update (1.20.2 -> 1.20.3) Subpackages: gstreamer-plugins-good-extra gstreamer-plugins-good-gtk gstreamer-plugins-good-jack gstreamer-plugins-good-lang gstreamer-plugins-good-qtqml - Update to version 1.20.3: + deinterlace: various bug fixes for yadif method + deinterlace: Refactor greedyh and fix planar formats + deinterlace: Prevent race between method configuration and latency query + gtk video sink: Fix rotation not being applied when paused + jpegdec: fix RGB conversion handling + matroskademux: improved ProRes video handling + matroskamux: Handle multiview-mode/flags/pixel-aspect-ratio caps fields correctly when checking caps equality on input caps changes + rtprtx: don't access type-system per buffer (performance optimisation); code cleanups + rtpulpfecenc: fix unmatched g_slice_free() + rtpvp8depay: fix crash when making GstRTPPacketLost custom event + qtmux: Don't post an error message if pushing a sample failed with FLUSHING (e.g. on pipeline shutdown) + soup: Lookup libsoup dylib files on Apple platforms & fix Cerbero static build on Android and iOS + souphttpsrc: element not present on iOS after 1.20.0 update + v4l2tuner: return NULL if no norm set + v4l2bufferpool: Fix race condition between qbuf and pool streamoff + meson: Don't build lame plugin with -Dlame=disabled ==== gstreamer-plugins-libav ==== Version update (1.20.2 -> 1.20.3) - Update to version 1.20.3: + No Changes ==== gstreamer-plugins-ugly ==== Version update (1.20.2 -> 1.20.3) Subpackages: gstreamer-plugins-ugly-lang - Update to version 1.20.3: + x264enc: fix plugin long-name and description ==== hwinfo ==== Version update (21.81 -> 21.82) - merge gh#openSUSE/hwinfo#113 - Keep NVMe's namespace output consistency when nvme_core.multipath=1 (bsc#1199948) - 21.82 ==== jasper ==== Version update (3.0.4 -> 3.0.5) - Update to 3.0.5: * Fix a minor build issue (#328). ==== openslp ==== Subpackages: libslp1 openslp-server - Moved logrotate files from user specific directory /etc/logrotate.d to vendor specific directory /usr/etc/logrotate.d. ==== pipewire ==== Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-lang pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Add patch from upstream to remove 44.1kHz from allowed rates. This reverts the new behaviour in 0.3.52 which is causing problems to too many people (boo#1200760): * 0001-settings-remove-44.1KHz-from-allowed-rates-again.patch ==== python-Cycler ==== Version update (0.10.0 -> 0.11.0) - update to 0.11.0: * Added Cycler.by_key, which produces values by key (#26) * Added Cycler.__contains__, which adds support for in checks (#34) * Wheels now includes the LICENSE file (#48) * The sdist now includes the LICENSE (#58) and tests (#32) * Cycler no longer supports Python 2. Supported versions of Python are 3.6 and above. - enable tests ==== python-PyYAML ==== - Clean up the SPEC file. ==== python-Twisted ==== Version update (22.2.0 -> 22.4.0) - Update to 22.4.0 * twisted.python.failure.Failure tracebacks now capture module information, improving compatibility with the Raven Sentry client. (#7796) * twisted.python.failure.Failure objects are now compatible with dis.distb, improving compatibility with post-mortem debuggers. (#9599) * twisted.internet.interfaces.IReactorSSL.listenSSL now has correct type annotations. (#10274) * twisted.internet.test.test_glibbase.GlibReactorBaseTests now passes. (#10317) * Conch - twisted.conch.ssh now supports using RSA keys with SHA-2 signatures (RFC 8332) when acting as a server. The rsa-sha2-512 and rsa-sha2-256 public key signature algorithms are automatically preferred over ssh-rsa if the client advertises support for them; the actual public keys do not need to change. (#9765) - twisted.conch.ssh now has an alternative Ed25519 implementation using PyNaCl, in order to support platforms that lack OpenSSL >= 1.1.1b. The new "conch_nacl" extra has the necessary dependency. (#10208) * Web - Twisted is now compatible with h2 4.x.x. (#10182) - twisted.web.http had several several defects in HTTP request parsing that could permit HTTP request smuggling. It now disallows signed Content-Length headers, forbids illegal characters in chunked extensions, forbids a ``0x`` prefix to chunk lengths, and only strips spaces and horizontal tab characters from header values. These changes address CVE-2022-24801 and GHSA-c2jg-hw38-jrqq. (#10323) * Mail - twisted.mail.pop3.APOPCredentials is now correctly marked as implementing twisted.cred.credentials.IUsernamHashedPassword, rather than IUsernamePassword. (#10305) * Trial - `trial --until-failure --jobs=N` now reports the number of each test pass as it begins. (#10312) - twisted.trial.unittest.TestCase now discards cleanup functions after running them. Notably, this prevents them from being run an ever growing number of times with trial -u .... (#10320) - Drop CVE-2022-24801-http-1.1-leniency.patch fixed upstream - Refresh remove-dependency-version-upper-bounds.patch - Move extra_requires optional dependencies to meta sub packages - Create :test multibuild flavor ==== python-traitlets ==== Version update (5.2.2 -> 5.3.0) - Update to 5.3.0 * Fix traitlet name in docstring by @fcollonval in #745 * Re-support multiple-alias key for ArgParseConfigLoader by @azjps in #687 - Drop traitlets-pr739-fixversion.patch ==== salt ==== Subpackages: python3-salt salt-master salt-minion salt-transactional-update - Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566) - Added: * fix-for-cve-2022-22967-bsc-1200566.patch - Make sure SaltCacheLoader use correct fileclient (bsc#1199149) - Added: * make-sure-saltcacheloader-use-correct-fileclient-519.patch ==== systemd-presets-common-SUSE ==== - Modify branding-preset-states to fix systemd-presets-common-SUSE not enabling new user systemd service preset configuration just as it handles system service presets. By passing an (optional) second parameter "user", the save/apply-changes commands now work with user services instead of system ones (boo#1200485) - enable ignition-delete-config by default (bsc#1199524) ==== virt-manager ==== Subpackages: virt-install virt-manager-common - bsc#1200691 - SLES 15 SP4 GMC --os-variant tag shouldn't be mandatory on s390x (see also bsc#1200422) revert-363fca41-virt-install-Require-osinfo-for-non-x86-HVM-case-too.patch ==== virtualbox ==== Subpackages: virtualbox-guest-tools virtualbox-guest-x11 - Package vboximg-mount correctly. boo#1200769. ==== virtualbox-kmp ==== - Package vboximg-mount correctly. boo#1200769.