Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20231020 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: glibc gpg2 kcalendarcore libgcrypt libgpg-error libheif (1.16.2 -> 1.17.1) libqt5-qtbase (5.15.11+kde134 -> 5.15.11+kde138) libsndfile (1.2.0 -> 1.2.2) libxkbcommon (1.5.0 -> 1.6.0) man (2.11.2 -> 2.12.0) nftables (1.0.8 -> 1.0.9) openssl-3 perl-CryptX (0.078 -> 0.80.0) python-typing_extensions (4.7.1 -> 4.8.0) sdbootutil (1+git20230817.2a3cd34 -> 1+git20231005.890f70c) sg3_utils (1.48+1.889c3e3 -> 1.48+3.b642f6a) sqlite3 (3.42.0 -> 3.43.2) vorbis-tools yast2 (4.6.2 -> 5.0.1) yast2-add-on (4.6.1 -> 5.0.0) yast2-alternatives (4.6.0 -> 5.0.0) yast2-auth-client (4.6.1 -> 5.0.0) yast2-auth-server (4.6.2 -> 5.0.0) yast2-configuration-management (4.6.0 -> 5.0.0) yast2-control-center (4.6.1 -> 5.0.0) yast2-core (4.6.0 -> 5.0.0) yast2-firewall (4.6.0 -> 5.0.0) yast2-firstboot (4.6.1 -> 5.0.0) yast2-ftp-server (4.6.0 -> 5.0.0) yast2-hardware-detection (4.6.0 -> 5.0.0) yast2-iscsi-client (4.6.0 -> 5.0.1) yast2-journal (4.6.0 -> 5.0.0) yast2-kdump (4.6.1 -> 5.0.0) yast2-ldap (4.6.0 -> 5.0.0) yast2-mail (4.6.0 -> 5.0.0) yast2-metapackage-handler (4.6.0 -> 5.0.0) yast2-multipath (4.6.0 -> 5.0.0) yast2-network (4.6.5 -> 5.0.0) yast2-nfs-client (4.6.1 -> 5.0.0) yast2-nfs-server (4.6.0 -> 5.0.0) yast2-ntp-client (4.6.0 -> 5.0.0) yast2-online-update (4.6.1 -> 5.0.0) yast2-packager (4.6.2 -> 5.0.1) yast2-pam (4.6.0 -> 5.0.0) yast2-perl-bindings (4.6.0 -> 5.0.0) yast2-pkg-bindings (4.6.2 -> 5.0.2) yast2-printer (4.6.0 -> 5.0.0) yast2-proxy (4.6.0 -> 5.0.0) yast2-ruby-bindings (4.6.2 -> 5.0.0) yast2-samba-client (4.6.1 -> 5.0.0) yast2-samba-server (4.6.0 -> 5.0.0) yast2-scanner (4.6.0 -> 5.0.0) yast2-security (4.6.0 -> 5.0.0) yast2-services-manager (4.6.1 -> 5.0.0) yast2-slp (4.6.0 -> 5.0.0) yast2-snapper (4.6.1 -> 5.0.0) yast2-squid (4.6.0 -> 5.0.0) yast2-sysconfig (4.6.0 -> 5.0.0) yast2-tftp-server (4.6.0 -> 5.0.0) yast2-theme (4.6.0 -> 5.0.1) yast2-transfer (4.6.0 -> 5.0.0) yast2-tune (4.6.0 -> 5.0.0) yast2-update (4.6.1 -> 5.0.0) yast2-vm (4.6.1 -> 5.0.0) yast2-xml (4.6.0 -> 5.0.0) yast2-ycp-ui-bindings (4.6.0 -> 5.0.0) === Details === ==== glibc ==== Subpackages: glibc-32bit glibc-devel glibc-extra glibc-lang glibc-locale glibc-locale-base nscd - dtors-reverse-ctor-order.patch: Remove, has been reverted - Avoid use of SSE in i586 build - Add systemd also to gshadow lookups (jsc#PED-5188) - For SLE continue to use nsswitch.conf without systemd ==== gpg2 ==== Subpackages: dirmngr gpg2-lang - Do not pull revision info from GIT when autoconf is run. This removes the -unknown suffix after the version number. * Add gnupg-nobetasuffix.patch [bsc#1216334] ==== kcalendarcore ==== - Add upstream change (kde#421400, boo#1171450): * 0001-ICalFormat-don-t-shift-all-day-invite-dates-to-UTC.patch ==== libgcrypt ==== Subpackages: libgcrypt20 libgcrypt20-32bit - Do not pull revision info from GIT when autoconf is run. This removes the -unknown suffix after the version number. * Add libgcrypt-nobetasuffix.patch [bsc#1216334] ==== libgpg-error ==== Subpackages: libgpg-error0 libgpg-error0-32bit - Do not pull revision info from GIT when autoconf is run. This removes the -unknown suffix after the version number. * Add libgpg-error-nobetasuffix.patch [bsc#1216334] ==== libheif ==== Version update (1.16.2 -> 1.17.1) Subpackages: gdk-pixbuf-loader-libheif libheif-rav1e libheif-svtenc libheif1 - update to 1.17.1: * fix issue of loading images with premultiplied alpha channel * correctly set compatible_version for macOS dylib builds * fix loading HDR PNGs, but encoding them as 8-bit SDR * fix saving AVIF with alpha using the SVT-AV1 encoder - cmake-presets version 3 requires cmake >= 3.21 - update to 1.17.0: * Kvazaar encoder (HEIC) as alternative to x265 * ffmpeg decoder (HEIC) decoding with potential hardware decoder support * jpegdec / jpegenc codecs for JPEG in HEIF * j2kdec, j2kenc codecs for JPEG-2000 in HEIF (still experimental) * added support for region masks * added support for alpha channels in images decoded with JS/WASM * heif-enc and heif-convert can be called with only input filenames, input and output filename, or with -o option. This makes the use of the two command more consistent. * added 4:2:2 <-> 4:4:4 color conversion with bilinear upscaling / average filtering * heif_context_get_image_handle() can now also access non-top-level images * add script to build Android libraries for all platforms * known bugs have been fixed ==== libqt5-qtbase ==== Version update (5.15.11+kde134 -> 5.15.11+kde138) Subpackages: libQt5Concurrent5 libQt5Core5 libQt5DBus5 libQt5Gui5 libQt5Network5 libQt5OpenGL5 libQt5PrintSupport5 libQt5Sql5 libQt5Sql5-mysql libQt5Sql5-sqlite libQt5Test5 libQt5Widgets5 libQt5Xml5 libqt5-qtbase-platformtheme-gtk3 - Update to version 5.15.11+kde138: * QLibraryPrivate: Actually merge load hints * QPluginLoader: report the right load hints * xkb: fix build with libxkbcommon 1.6.0 and later * a11y atspi: Map ButtonMenu role to AT-SPI equivalent ==== libsndfile ==== Version update (1.2.0 -> 1.2.2) - Update to 1.2.1: * Various bug fixes (issue #908, #907, #934, #950, #930) - Update to 1.2.2: * Fixed invalid regex in src/create_symbols_file.py * Fixed passing null pointer to printf %s in tests - Fix signed integers overflows in au_read_header() (bsc#121345, CVE-2022-33065): libsndfile-CVE-2022-33065.patch ==== libxkbcommon ==== Version update (1.5.0 -> 1.6.0) Subpackages: libxkbcommon-x11-0 libxkbcommon0 libxkbregistry0 - Update to release 1.6.0 * Remove keysyms: XKB_KEY_dead_lowline, XKB_KEY_dead_aboveverticalline, XKB_KEY_dead_belowverticalline, XKB_KEY_dead_longsolidusoverlay * Add Compose iterator API to iterate the entries in a compose table. * Structured log messages with a message registry. There is an ongoing work to assign unique identifiers to log messages and add a corresponding error index documentation page. * Add a new warning for numeric keysyms references in XKB files: the preferred keysym reference form is its name or its Unicode value, if relevant. * Add the upper bound `XKB_KEYSYM_MAX` to check valid keysyms. * Add a warning when loading a keymap using RMLVO with no layout but with the variant set. * Add support for ``modifier_map None { ⦠}``. This feature is missing compared to the X11 implementation. It allows to reset the modifier map of a key. ==== man ==== Version update (2.11.2 -> 2.12.0) - Update to 2.12.0: * Fix some manual page portability issues with groff 1.23.0. * Fix test failures when a working `iconv` is not available. * Ensure that timestamps read from the database can go past the year 2038, even on systems where this is not the default. * Fix `manpath` not parsing `PATH` entries with trailing slash correctly for guessing `MANPATH` entries. * More accurately document the behaviour of passing file names as arguments to `man` without the `-l`/`--local-file` option. * Avoid duplicate cleanup of old cat pages by both `man-db.service` and `systemd-tmpfiles-clean.service`. Improvements: * Update system call lists in `seccomp` sandbox from `systemd`. * Upgrade to Gnulib `stable-202307`. * Work around the Firebuild accelerator in `seccomp` sandbox: if this is in use then we need to allow some socket-related system calls. * `man -K` now deduplicates search results that point to the same page. * Warn if `mandb` drops to `--user-db` mode due to running as the wrong user. * Change section title recommendations in `man(1)` to mention `STANDARDS` rather than `CONFORMING TO`, in line with `man-pages(7)`. * Add a `STANDARDS` section to `man(1)` itself. * Document that `man -K` may suffer from false negatives as well as false positives. * Take advantage of newer `groff` facilities to implement `man - -no-hyphenation` and `man --no-justification`, if available. * `man -f` and `man -k` now pass any `-r`/`--regex` or `-w`/`--wildcard` options on to `whatis` and `apropos` respectively. * Always pass a line length to `nroff`, even if we believe that it matches the default. * Allow disabling `groff` warnings via `man --warnings`, by prefixing a warning name with `!`. - Drop man-db-groff-1.23.0-warnings.patch - Refresh man-db-2.9.4.patch ==== nftables ==== Version update (1.0.8 -> 1.0.9) Subpackages: libnftables1 - Update to release 1.0.9 * Custom conntrack timeouts can use time specification with units other than seconds. * Allow combination of dnat with numgen. * Allow for using constants as key in dynamic sets. * Support for matching on the target address of a IPv6 neighbour solicitation/advertisement. * Restore bitwise operations in combination with maps, e.g. jump to chain depending on bitwise operation on packet mark. * Fix crash with log prefix longer that 127 bytes. - Drop merged 0001-Revert-py-replace-distutils-with-setuptools.patch ==== openssl-3 ==== Subpackages: libopenssl3 libopenssl3-32bit - As of openssl 3.1.3, the devel package installs at least 5200 manpage files and is the owner of the most files in the man3 directory (in second place after lapack-man); move these manpages off to the -doc subpackage to reduce the walltime to install just openssl-3-devel (because there is also an invocation of mandb that runs at some point). ==== perl-CryptX ==== Version update (0.078 -> 0.80.0) - updated to 0.080 see /usr/share/doc/packages/perl-CryptX/Changes 0.080 2023-10-04 - fix #95 AES-NI troubles on MS Windows (gcc compiler) - fix #96 Tests failure with Math::BigInt >= 1.999840 - Enabled AES-NI for platforms with gcc/clang/llvm 0.079 2023-10-01 - fix #92 update libtomcrypt - bundled libtomcrypt update branch:develop (commit:1e629e6f 2023-06-22) ==== python-typing_extensions ==== Version update (4.7.1 -> 4.8.0) - Update to 4.8.0: - Add typing_extensions.Doc, as proposed by PEP 727 - Drop support for Python 3.7 (including PyPy-3.7) - Fix bug where get_original_bases() would return incorrect results when called on a concrete subclass of a generic class - Fix bug where ParamSpec(default=...) would raise a TypeError on Python versions <3.11 ==== sdbootutil ==== Version update (1+git20230817.2a3cd34 -> 1+git20231005.890f70c) Subpackages: sdbootutil-rpm-scriptlets sdbootutil-snapper - Add changes from gh#openSUSE/sdbootutil#21: * sdbootutil.spec: Add missing efibootmgr dependency * sdbootutil.spec: Make sdbootutil-snapper a hard dependency - Update to version 1+git20231005.890f70c: * Add --no-reuse-initrd option * Refactor boot descriptive entries * feat: more descriptive bootmenu entries * Remove stray set -x * speed up snapper list * Fix misleading comment * Fix helptext ==== sg3_utils ==== Version update (1.48+1.889c3e3 -> 1.48+3.b642f6a) Subpackages: libsgutils2-1_48-2 - rescan-scsi-bus.sh: remove /tmp/rescan-scsi-mpath-info.txt (gh#doug-gilbert/sg3_utils#44) - rescan_scsi_bus.sh: fix multipath issue when called with -s and without -u (bsc#1215720, bsc#1216355) ==== sqlite3 ==== Version update (3.42.0 -> 3.43.2) Subpackages: libsqlite3-0 sqlite3-tcl - sqlite3-rtree-i686.patch: temporary build fix for 32-bit x86. - Update to: 3.43.2: * Fix a couple of obscure UAF errors and an obscure memory leak. * Omit the use of the sprintf() function from the standard library in the CLI, as this now generates warnings on some platforms. * Avoid conversion of a double into unsigned long long integer, as some platforms do not do such conversions correctly. - Update to: 3.43.1 * Fix a regression in the way that the sum(), avg(), and total() aggregate functions handle infinities. * Fix a bug in the json_array_length() function that occurs when the argument comes directly from json_remove(). * Fix the omit-unused-subquery-columns optimization (introduced in in version 3.42.0) so that it works correctly if the subquery is a compound where one arm is DISTINCT and the other is not. - Update to 3.43.0: * Add support for Contentless-Delete FTS5 Indexes. This is a variety of FTS5 full-text search index that omits storing the content that is being indexed while also allowing records to be deleted. * Enhancements to the date and time functions: + Added new time shift modifiers of the form ±YYYY-MM-DD HH:MM:SS.SSS. + Added the timediff() SQL function. * Added the octet_length(X) SQL function. * Added the sqlite3_stmt_explain() API. * Query planner enhancements: + Generalize the LEFT JOIN strength reduction optimization so that it works for RIGHT and FULL JOINs as well. Rename it to OUTER JOIN strength reduction. + Enhance the theorem prover in the OUTER JOIN strength reduction optimization so that it returns fewer false-negatives. * Enhancements to the decimal extension: + New function decimal_pow2(N) returns the N-th power of 2 for integer N between -20000 and +20000. + New function decimal_exp(X) works like decimal(X) except that it returns the result in exponential notation - with a "e+NN" at the end. + If X is a floating-point value, then the decimal(X) function now does a full expansion of that value into its exact decimal equivalent. * Performance enhancements to JSON processing results in a 2x performance improvement for some kinds of processing on large JSON strings. * The VFS for unix now assumes that the nanosleep() system call is available unless compiled with -DHAVE_NANOSLEEP=0. ==== vorbis-tools ==== Subpackages: vorbis-tools-lang - Fix buffer overflow vulnerability during the conversion of wav files to ogg files (bsc#1215942, CVE-2023-43361): vorbis-tools-CVE-2023-43361.patch ==== yast2 ==== Version update (4.6.2 -> 5.0.1) Subpackages: yast2-logs - Fix case-insensitive finding of LICENSE.*.TXT (bsc#1215698) - 5.0.1 - 5.0.0 (bsc#1185510) ==== yast2-add-on ==== Version update (4.6.1 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-alternatives ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-auth-client ==== Version update (4.6.1 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-auth-server ==== Version update (4.6.2 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-configuration-management ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-control-center ==== Version update (4.6.1 -> 5.0.0) Subpackages: yast2-control-center-qt - 5.0.0 (bsc#1185510) ==== yast2-core ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-firewall ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-firstboot ==== Version update (4.6.1 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-ftp-server ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-hardware-detection ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-iscsi-client ==== Version update (4.6.0 -> 5.0.1) - Add support packages on demand (bsc#1214273) - 5.0.1 - 5.0.0 (bsc#1185510) ==== yast2-journal ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-kdump ==== Version update (4.6.1 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-ldap ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-mail ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-metapackage-handler ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-multipath ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-network ==== Version update (4.6.5 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-nfs-client ==== Version update (4.6.1 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-nfs-server ==== Version update (4.6.0 -> 5.0.0) Subpackages: yast2-nfs-common - 5.0.0 (bsc#1185510) ==== yast2-ntp-client ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-online-update ==== Version update (4.6.1 -> 5.0.0) Subpackages: yast2-online-update-frontend - 5.0.0 (bsc#1185510) ==== yast2-packager ==== Version update (4.6.2 -> 5.0.1) - Properly save the repo file when changing URL of a repository from a service (bsc#1214135) - Also display a warning when changing URL of a service repository, the change might be lost after the service is refreshed - 5.0.1 - 5.0.0 (bsc#1185510) ==== yast2-pam ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-perl-bindings ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-pkg-bindings ==== Version update (4.6.2 -> 5.0.2) - Pkg.SourceEditSet() - Allow setting the repository service name (related to bsc#1214135) - 5.0.2 - Fixed crash in the Pkg.Commit() function when passing "exclude_docs" or "no_signature" options (bsc#1215238) - 5.0.1 - 5.0.0 (bsc#1185510) ==== yast2-printer ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-proxy ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-ruby-bindings ==== Version update (4.6.2 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-samba-client ==== Version update (4.6.1 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-samba-server ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-scanner ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-security ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-services-manager ==== Version update (4.6.1 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-slp ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-snapper ==== Version update (4.6.1 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-squid ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-sysconfig ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-tftp-server ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-theme ==== Version update (4.6.0 -> 5.0.1) Subpackages: yast2-theme-breeze - Dropped unmaintained "gulp-stylelint" internal development dependency - Manually updated the internal development dependencies to the latest NPM packages - The stylesheets have been rebuilt with the new dependencies - Updated README.md - 5.0.1 - 5.0.0 (bsc#1185510) ==== yast2-transfer ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-tune ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-update ==== Version update (4.6.1 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-vm ==== Version update (4.6.1 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-xml ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510) ==== yast2-ycp-ui-bindings ==== Version update (4.6.0 -> 5.0.0) - 5.0.0 (bsc#1185510)