Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20210321 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: alsa-utils clutter gtk3 (3.24.25 -> 3.24.27) gtkmm3 (3.24.3 -> 3.24.4) iputils libebml libgdata (0.18.0 -> 0.18.1) libgee (0.20.3 -> 0.20.4) libgnomesu (2.0.5 -> 2.0.6) libgxps (0.3.1 -> 0.3.2) libostree libsndfile (1.0.28 -> 1.0.31) libvirt-glib (3.0.0 -> 4.0.0) multipath-tools (0.8.5+26+suse.2cbedfd -> 0.8.5+29+suse.5dabcd2) pango (1.48.2 -> 1.48.3) pipewire (0.3.23 -> 0.3.24) poppler (21.02.0 -> 21.03.0) poppler-qt5 (21.02.0 -> 21.03.0) protobuf (3.14.0 -> 3.15.6) pulseaudio python-atspi (2.38.0 -> 2.38.1) python-mysqlclient (1.4.6 -> 2.0.3) sqlite3 (3.35.0 -> 3.35.2) xen (4.14.1_12 -> 4.14.1_14) zisofs-tools === Details === ==== alsa-utils ==== - Fix superfluous asound.state migration (bsc#1183672) ==== clutter ==== Subpackages: clutter-lang libclutter-1_0-0 typelib-1_0-Clutter-1_0 - Enable LTO (boo#1133118) as it works now. ==== gtk3 ==== Version update (3.24.25 -> 3.24.27) Subpackages: gtk3-data gtk3-immodule-amharic gtk3-immodule-inuktitut gtk3-immodule-thai gtk3-immodule-tigrigna gtk3-immodule-vietnamese gtk3-immodule-xim gtk3-lang gtk3-schema gtk3-tools libgtk-3-0 typelib-1_0-Gtk-3_0 - Update to version 3.24.27: + Input: Ensure preedit-start and preedit-end are emitted properly. + GtkScrolledWindow: Revert a change that broke touch scrolling. + Theme: - Fix a problem with size changes in SSD decorations that caused mutter crashes - Use transparent black for window border in the dark theme. + Updated translations. - Update to version 3.24.26: + Input: - Fix a few oversights in Compose file parsing. - Fine-tune Compose preedit display. + Theme: - Fine-tune scrollbar size and transitions. - Reinstate invisible borders for tiled windows. + Wayland: Fix a problem with font settings not being found. + Updated translations. ==== gtkmm3 ==== Version update (3.24.3 -> 3.24.4) - Update to version 3.24.4: + The 'GTKMM_API' decoration was missed from the '_WRAP_COMPARE' item, making the code fail to link for Inkscape on Windows. ==== iputils ==== Subpackages: rarpd - Binaries were found to be not optimized or built with proper %optflags. ==== libebml ==== - Add patch to fix build with GCC 11 (boo#1183715) * 0001-include-appropriate-header-files-for-std-numeric_lim.patch ==== libgdata ==== Version update (0.18.0 -> 0.18.1) Subpackages: libgdata-lang libgdata22 - Update to version 0.18.1: + Updated translations. ==== libgee ==== Version update (0.20.3 -> 0.20.4) - Update to version 0.20.4: + Fixes for newer valac. ==== libgnomesu ==== Version update (2.0.5 -> 2.0.6) Subpackages: libgnomesu-lang libgnomesu0 - Update to version 2.0.6: + Updated translations. ==== libgxps ==== Version update (0.3.1 -> 0.3.2) - Update to version 0.3.2: + New features: Add support to wdp images on Windows using WIC API. + Bug fixes: Fix a crash in tools when the surface is NULL on conversion end. + Build: - Improve dependency check on Windows. - Don't assume that cross builds can't generate gir. ==== libostree ==== Subpackages: libostree-1-1 - Enable LTO (boo#1133120) as it works now. ==== libsndfile ==== Version update (1.0.28 -> 1.0.31) - BuildRequire python3-base instead of the full python3 package: manages to break a build cycle, is cheaper, and still sufficient. - update to 1.0.31: * documentation fixes and updates * Change CMake's project name from sndfile to libsndfile as it should be. * Fix memory leak in wav_read_smpl_chunk() function, credit to OSS-Fuzz. * Fix aiff_read_header() memory leak(), credit to OSS-Fuzz. * Fix leak in wav_read_header(), credit to OSS-Fuzz. * Fix leak in wavlike_read_cart_chunk(), credit to OSS-Fuzz. * Fix memory leak in wav_read_acid_chunk(), credit to OSS-Fuzz. * Fix memory leak in aiff_read_basc_chunk(), credit to OSS-Fuzz. * Fix memory leak in wavlike_read_peak_chunk(), credit to OSS-Fuzz. * Fix memory leak in aiff_read_header(), credit to OSS-Fuzz. * Fix use of uninitialized value in exif_subchunk_parse(), credit to OSS-Fuzz. * Fix use of uninitialized value in endswap_int64_t_array(), credit to * OSS-Fuzz. * Fix up the fuzzer so that it can't under or overseek, * thanks to Max Dymond cmeister2@gmail.com. * Fix Autotools configure on macOS, thanks to @tmcguire and @nwh. * Exclude repository-configuration from git-archive, thanks to @umlaeute. * Use version-script when compiling with clang on Unix with Autotools, thanks * to @tstellar. * Improve handling of SMPL chunks in WAV files, thanks to @zodf0055980. - update to 1.0.30: * Move sndfile.h.in from src/ to include/ directory. * Huge documentation update. * Fix opus test failures on BE platforms * Fix bug when sf_open_fd() function sometimes leaves filehandle open, even if close_desc parameter is TRUE, thanks to @umläute. * Fix infinite loops on some pathological SD2 files * Switch to GitHub Actions for continuous integration. * Add OSS-Fuzz tests to GitHub Actions workflow * Fix memory leak in wavlike_read_bext_chunk() function, credit to OSS-Fuzz. * Fix undefined behavior in avr-read_header() function, credit to OSS-Fuzz. - update to 1.0.29: * Fixes for: CVE-2017-12562, CVE-2017-17456, CVE-2017-17457, CVE-2018-19661, CVE-2018-19662, CVE-2018-19758 and CVE-2019-3832. * Add BWF v2 loudness parameters. * Wave64: Permit and skip arbitrary chunks prior to the data chunk. * Fix ASAN crash in wavlike_ima_seek(). * Fix IMA-ADPCM encoding for AIFF files. * sndfile-convert: Handle gsm, vox and opus extensions the same way. * Add SFC_SET_OGG_PAGE_LATENCY_MS command to get Ogg page latency for Ogg Opus files. * Fix parsing of some SD2 files. * Documentation updates. * Minor bug fixes and improvements. - drop libsndfile-CVE-2017-17456-alaw-range-check.patch libsndfile-CVE-2017-17457-ulaw-range-check.patch libsndfile-wav-loop-count-fix.patch 0001-FLAC-Fix-a-buffer-read-overrun.patch 0002-src-flac.c-Fix-a-buffer-read-overflow.patch 0010-src-aiff.c-Fix-a-buffer-read-overflow.patch 0020-src-common.c-Fix-heap-buffer-overflows-when-writing-.patch 0030-double64_init-Check-psf-sf.channels-against-upper-bo.patch 0031-sfe_copy_data_fp-check-value-of-max-variable.patch: upstream ==== libvirt-glib ==== Version update (3.0.0 -> 4.0.0) Subpackages: libvirt-glib-1_0-0 typelib-1_0-LibvirtGLib-1_0 - Update to version 4.0.0: + Replace autotools build system with meson. + Mandate libvirt >= 1.2.8. + Mandate libxml2 >= 2.9.1. + Mandate glib >= 2.48.0. + Mandate gobject-introspection >= 1.46.0. + Fix docs incompatibility with gtk-doc >= 1.30. + Misc API docs fixes. + Add constants related to NVRAM during domain delete. + Add domain config API for controller ports attribute. + Fix compat with newer glib by avoid volatile for enum types. + Updated translations. - Switch build system to meson: + Drop libtool BuildRequires: no longer needed. + Add meson BuildRequires. + Add gtk-doc BuildRequires: new dependency. + Replace configure/make/make_install macros with meson/meson_build/meson_install variants. ==== multipath-tools ==== Version update (0.8.5+26+suse.2cbedfd -> 0.8.5+29+suse.5dabcd2) Subpackages: kpartx libmpath0 - Update to version 0.8.5+29+suse.5dabcd2: * 11-dm-mpath.rules: run "multipath -U" with -v1 (bsc#1182871) * libmultipath: merge update_multipath_table() and update_multipath_status() (bsc#1183666) ==== pango ==== Version update (1.48.2 -> 1.48.3) Subpackages: libpango-1_0-0 libpango-1_0-0-32bit typelib-1_0-Pango-1_0 - Update to version 1.48.3: + Miscellaneous introspection fixes + Make pango_attr_list_splice clip inserted attrbiutes + Do costly fontconfig calls in threads + markup: Fix issues with accel handling + docs: Convert docs to use gi-docgen + Fix build against harfbuzz < 2.6 - Disable gtk-doc for now since upstream have moved to gi-docgen and it is not in Factory yet ==== pipewire ==== Version update (0.3.23 -> 0.3.24) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-modules pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Enable or disable the ldac codec depending if ldacBT is available or not to fix build in s390x (where it's not available) - Add some more information and fix indentation on previous changelog entries. - Update to 0.3.24: + This is a bugfix release that is API and ABI compatible with previous 0.3.x releases. + Highlights - Many JACK midi improvements and device support. - Fixes in gnome-control-center default sink/source handling. - Many small performance improvements in alsa device handling and latency. There should also be less cracks/pops and xruns now. - More bluetooth compatibility improvements. + PipeWire improvements - Implement simple upmixing - Disable the resampler when not used. This improves latency and CPU usage. - Handle max-quantum on devices and try to not make the quantum larger than the device buffer size. - improvements to how nodes and links are activated. It should now result in less xruns and cracks/pops. - meson uses the feature options everywhere now - Handle volume remap in the channelmixer. This fixes the channels on multichannel devices. - Try to escape invalid JSON string characters - Keep better track of changed parameters in audioconvert. - Improve config files, make arrays where needed. - Respect NO_COLOR where possible - Support in-place config file parsing to avoid allocations and improve startup performance. - There is no a config option to enable non-power-of-two quantums. - Preliminary support for upmixing and generating LFE channels. + Session-manager - default nodes are not stored as JSON in the metadata. This is more readable and introspectable. - More default-nodes and default-routes improvements. port switching should work better now. - Wait until all devices are scanned before linking clients. - Fixes some crashes - Sinks (monitors) can now be set as default sources. + Device support - Fix startup timers for alsa devices. - Improve timers in alsa when quantum changes. It should cause less xruns and cracks. - Fix UCM setup of capture devices. - Only disable IRQ in alsa when not batch. For batch devices the hw pointers are updated each IRQ so we need to keep them enabled. This massively improves latency on USB batch devices to the same level as JACK (with small enough period size). + Bluetooth - Improvements to profile switches. - Improvements to volume handling. - Fixes for A2DP sources - Add support for battery status when available. - Many other small improvements. + PulseAudio server - handle NULL in set_default_sink/source to clear the default - Implement a workaround for gnome-control-center when setting the default sink/source. It also sets the target in stream-restore to the new default. This fixes moving streams in gnome-control-center. - Fix some races by replying to some requests after the operation completed. - Prefer formats of the extended format API. - Create a pid file on startup to improve compatibility with apps that look for it. - Capture streams can now be moved to monitors with pavucontrol - Fixes for crashes + JACK - jack clients can now connect to the 'default' server - Move midi ports back to the midi client - Only mark midi hardware ports as terminal/physical - Use the same midi names as a2jmidid - match system ports in get_ports. - Improve compatibility with some apps that require a fixed latency. - Beginnings of the libjackserver implementation. - Switch off libopenaptx and fdk-aac (because they are patent-encumbered) and libcamera (problems in building). - systemd-rpm-macros doesn't have a consistent versioning between distributions, so better assume it's updated enough to support %systemd_user_pre - Add systemd rpm macros for pipewire.service as well as pipewire.socket . - Use the new %systemd_user_pre macro on %pre to be able to recognize when a service was installed for the first time and enable it on %systemd_user_post (boo#1183012) ==== poppler ==== Version update (21.02.0 -> 21.03.0) Subpackages: libpoppler-cpp0 libpoppler-glib8 poppler-tools - update to 21.03.0: core: * Fix parsing text in some broken pdf files. Issue #1040 * Fix memory issue when using threads. Issue #1050 * TextSelectionDumper: Fix getText() for space after word * Change signature of OutputDev:tilingPatternFill * Make PDFDocBuilder return a std::unique_ptr * Improve well formed check for shading functions * Fix leak in case of fread failing * Fix memory leak in broken file in JBIG2Stream::readGenericBitmap * PSOutputDev: Fix stack overflow in broken files glib: * poppler_annot_free_text_get_callout_line: Fix wrong static cast * poppler-structure-element: fix memleak * Improve documentation * demo: keep same visual appearance between displayed and copied text utils: * pdftotext: Add -cropbox option * pdftoppm: Add -progress option * pdftoppm: Fix rounding bug in computation of output bitmap size. Issue #927 qt6: * Add missing poppler-qt6.pc.cmake ==== poppler-qt5 ==== Version update (21.02.0 -> 21.03.0) - update to 21.03.0: core: * Fix parsing text in some broken pdf files. Issue #1040 * Fix memory issue when using threads. Issue #1050 * TextSelectionDumper: Fix getText() for space after word * Change signature of OutputDev:tilingPatternFill * Make PDFDocBuilder return a std::unique_ptr * Improve well formed check for shading functions * Fix leak in case of fread failing * Fix memory leak in broken file in JBIG2Stream::readGenericBitmap * PSOutputDev: Fix stack overflow in broken files glib: * poppler_annot_free_text_get_callout_line: Fix wrong static cast * poppler-structure-element: fix memleak * Improve documentation * demo: keep same visual appearance between displayed and copied text utils: * pdftotext: Add -cropbox option * pdftoppm: Add -progress option * pdftoppm: Fix rounding bug in computation of output bitmap size. Issue #927 qt6: * Add missing poppler-qt6.pc.cmake ==== protobuf ==== Version update (3.14.0 -> 3.15.6) - update to 3.15.6: Ruby * Fixed bug in string comparison logic (#8386) * Fixed quadratic memory use in array append (#8379) * Fixed SEGV when users pass nil messages (#8363) * Fixed quadratic memory usage when appending to arrays (#8364) * Ruby <2.7 now uses WeakMap too, which prevents memory leaks. (#8341) * Fix for FieldDescriptor.get(msg) (#8330) * Bugfix for Message.[] for repeated or map fields (#8313) PHP * read_property() handler is not supposed to return NULL (#8362) Protocol Compiler * Optional fields for proto3 are enabled by default, and no longer require the --experimental_allow_proto3_optional flag. C++ * Do not disable RTTI by default in the CMake build (#8377) * Create a CMake option to control whether or not RTTI is enabled (#8361) * Fix PROTOBUF_CONSTINIT macro redefinition (#8323) * MessageDifferencer: fixed bug when using custom ignore with multiple unknown fields * Use init_seg in MSVC to push initialization to an earlier phase. * Runtime no longer triggers -Wsign-compare warnings. * Fixed -Wtautological-constant-out-of-range-compare warning. * DynamicCastToGenerated works for nullptr input for even if RTTI is disabled * Arena is refactored and optimized. * Clarified/specified that the exact value of Arena::SpaceAllocated() is an implementation detail users must not rely on. It should not be used in unit tests. * Change the signature of Any::PackFrom() to return false on error. * Add fast reflection getter API for strings. * Constant initialize the global message instances * Avoid potential for missed wakeup in UnknownFieldSet * Now Proto3 Oneof fields have "has" methods for checking their presence in C++. * Bugfix for NVCC * Return early in _InternalSerialize for empty maps. * Adding functionality for outputting map key values in proto path logging output (does not affect comparison logic) and stop printing 'value' in the path. The modified print functionality is in the MessageDifferencer::StreamReporter. * Fixed https://github.com/protocolbuffers/protobuf/issues/8129 * Ensure that null char symbol, package and file names do not result in a crash. * Constant initialize the global message instances * Pretty print 'max' instead of numeric values in reserved ranges. * Removed remaining instances of std::is_pod, which is deprecated in C++20. * Changes to reduce code size for unknown field handling by making uncommon cases out of line. * Fix std::is_pod deprecated in C++20 (#7180) * Fix some -Wunused-parameter warnings (#8053) * Fix detecting file as directory on zOS issue #8051 (#8052) * Don't include sys/param.h for _BYTE_ORDER (#8106) * remove CMAKE_THREAD_LIBS_INIT from pkgconfig CFLAGS (#8154) * Fix TextFormatMapTest.DynamicMessage issue#5136 (#8159) * Fix for compiler warning issue#8145 (#8160) * fix: support deprecated enums for GCC < 6 (#8164) * Fix some warning when compiling with Visual Studio 2019 on x64 target (#8125) Python * Provided an override for the reverse() method that will reverse the internal collection directly instead of using the other methods of the BaseContainer. * MessageFactory.CreateProtoype can be overridden to customize class creation. * Fix PyUnknownFields memory leak (#7928) * Add macOS big sur compatibility (#8126) JavaScript * Generate `getDescriptor` methods with `*` as their `this` type. * Enforce `let/const` for generated messages. * js/binary/utils.js: Fix jspb.utils.joinUnsignedDecimalString to work with negative bitsLow and low but non-zero bitsHigh parameter. (#8170) PHP * Added support for PHP 8. (#8105) * unregister INI entries and fix invalid read on shutdown (#8042) * Fix PhpDoc comments for message accessors to include "|null". (#8136) * fix: convert native PHP floats to single precision (#8187) * Fixed PHP to support field numbers >=2**28. (#8235) * feat: add support for deprecated fields to PHP compiler (#8223) * Protect against stack overflow if the user derives from Message. (#8248) * Fixed clone for Message, RepeatedField, and MapField. (#8245) * Updated upb to allow nonzero offset minutes in JSON timestamps. (#8258) Ruby * Added support for Ruby 3. (#8184) * Rewrote the data storage layer to be based on upb_msg objects from the upb library. This should lead to much better parsing performance, particularly for large messages. (#8184). * Fill out JRuby support (#7923) * [Ruby] Fix: (SIGSEGV) gRPC-Ruby issue on Windows. memory alloc infinite recursion/run out of memory (#8195) * Fix jruby support to handle messages nested more than 1 level deep (#8194) Java * Avoid possible UnsupportedOperationException when using CodedInputSteam with a direct ByteBuffer. * Make Durations.comparator() and Timestamps.comparator() Serializable. * Add more detailed error information for dynamic message field type validation failure * Removed declarations of functions declared in java_names.h from java_helpers.h. * Now Proto3 Oneof fields have "has" methods for checking their presence in Java. * Annotates Java proto generated *_FIELD_NUMBER constants. * Add -assumevalues to remove JvmMemoryAccessor on Android. C# * Fix parsing negative Int32Value that crosses segment boundary (#8035) * Change ByteString to use memory and support unsafe create without copy (#7645) * Optimize MapField serialization by removing MessageAdapter (#8143) * Allow FileDescriptors to be parsed with extension registries (#8220) * Optimize writing small strings (#8149) ==== pulseaudio ==== Subpackages: libpulse-mainloop-glib0 libpulse0 pulseaudio-bash-completion pulseaudio-gdm-hooks pulseaudio-lang pulseaudio-module-bluetooth pulseaudio-module-gsettings pulseaudio-module-x11 pulseaudio-module-zeroconf pulseaudio-utils pulseaudio-zsh-completion - move license to licensedir ==== python-atspi ==== Version update (2.38.0 -> 2.38.1) - Update to version 2.38.1: + Add sanity checks to getPath and findAncestor so that we don't hang if an accessible returns itself as its own parent. ==== python-mysqlclient ==== Version update (1.4.6 -> 2.0.3) - Update to 2.0.3: * Add -std=c99 option to cflags by default for ancient compilers that doesn't accept C99 by default. * You can customize cflags and ldflags by setting MYSQLCLIENT_CFLAGS and MYSQLCLIENT_LDFLAGS. It overrides mysql_config. - Change in 2.0.2: * Optimize fetching many rows with DictCursor. - Change in 2.0.1: * Fixed multithread safety issue in fetching row. * Removed obsolete members from Cursor. (e.g. messages, _warnings, _last_executed) - Change in 2.0.0: * Dropped Python 2 support * Dropped Django 1.11 support * Add context manager interface to Connection which closes the connection on __exit__. * Add ssl_mode option. ==== sqlite3 ==== Version update (3.35.0 -> 3.35.2) - Fix typo in macro definition. - SQLite 3.35.2: * Fix a problem in the appendvfs.c extension that was introduced into version 3.35.0. * Ensure that date/time functions with no arguments (which generate responses that depend on the current time) are treated as non-deterministic functions. * Fix a problem in the sqldiff utility program having to do with unusual whitespace characters in a virtual table definition. * Limit the new UNION ALL optimization described by item 8c in the 3.35.0 release so that it does not try to make too many new subqueries. - include changes from 3.35.1: * Fix a bug in the new DROP COLUMN feature when used on columns that are indexed and that are quoted in the index definition. * Improve the built-in documentation for the .dump command in the CLI. ==== xen ==== Version update (4.14.1_12 -> 4.14.1_14) Subpackages: xen-libs xen-tools xen-tools-domU - bsc#1177112 - Fix libxc.sr.superpage.patch The receiving side did detect holes in a to-be-allocated superpage, but allocated a superpage anyway. This resulted to over-allocation. - bsc#1167608 - adjust limit for max_event_channels A previous change allowed an unbound number of event channels to make sure even large domUs can start of of the box. This may have a bad side effect in the light of XSA-344. Adjust the built-in limit based on the number of vcpus. In case this is not enough, max_event_channels=/maxEventChannels= has to be used to set the limit as needed for large domUs adjust libxl.max_event_channels.patch - bsc#1183072 - VUL-0: xen: HVM soft-reset crashes toolstack (XSA-368) Also resolves, bsc#1179148 - kdump of HVM fails, soft-reset not handled by libxl bsc#1181989 - openQA job causes libvirtd to dump core when running kdump inside domain xsa368.patch ==== zisofs-tools ==== - refresh spec file (update licensedir) - Use macro for configure - Cleanup spec file with spec-cleaner - Don't ship INSTALL file - require mkisofs package instead of /usr/bin/mkisofs * Depending on the binary results in a conflict between the cdrkit-cdrtools-compat and mkisofs packages. * cdrkit-cdrtools-compat is to be replaced by cdrtools, which provides the mkisofs package