Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20220928 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ffmpeg-5 (5.1.1 -> 5.1.2) libffi libimagequant libqt5-qtbase (5.15.5+kde166 -> 5.15.6+kde177) libqt5-qtconnectivity (5.15.5+kde5 -> 5.15.6+kde5) libqt5-qtdeclarative (5.15.5+kde19 -> 5.15.6+kde20) libqt5-qtgraphicaleffects (5.15.5+kde0 -> 5.15.6+kde0) libqt5-qtimageformats (5.15.5+kde3 -> 5.15.6+kde4) libqt5-qtlocation (5.15.5+kde3 -> 5.15.6+kde3) libqt5-qtmultimedia (5.15.5+kde1 -> 5.15.6+kde1) libqt5-qtnetworkauth (5.15.5+kde0 -> 5.15.6+kde0) libqt5-qtquickcontrols (5.15.5+kde0 -> 5.15.6+kde0) libqt5-qtquickcontrols2 (5.15.5+kde6 -> 5.15.6+kde5) libqt5-qtsensors (5.15.5+kde0 -> 5.15.6+kde0) libqt5-qtserialport (5.15.5+kde0 -> 5.15.6+kde0) libqt5-qtspeech (5.15.5+kde1 -> 5.15.6+kde1) libqt5-qtsvg (5.15.5+kde10 -> 5.15.6+kde9) libqt5-qttools (5.15.5+kde1 -> 5.15.6+kde1) libqt5-qtvirtualkeyboard (5.15.5+kde3 -> 5.15.6+kde1) libqt5-qtwayland (5.15.5+kde39 -> 5.15.6+kde49) libqt5-qtwebchannel (5.15.5+kde3 -> 5.15.6+kde3) libqt5-qtwebengine libqt5-qtwebsockets (5.15.5+kde3 -> 5.15.6+kde2) libqt5-qtx11extras (5.15.5+kde0 -> 5.15.6+kde0) libqt5-qtxmlpatterns (5.15.5+kde0 -> 5.15.6+kde0) liburing nautilus perl-Mojolicious (9.26 -> 9.27) python-pyzmq (23.2.1 -> 24.0.1) rpm-config-SUSE (20220421 -> 20220926) rubygem-net-ssh tcl timezone (2022c -> 2022d) timezone-java (2022c -> 2022d) unbound (1.16.2 -> 1.16.3) unzip yast2-ntp-client (4.5.0 -> 4.5.1) yast2-storage-ng (4.5.8 -> 4.5.9) yast2-trans (84.87.20220917.4034baecb2 -> 84.87.20220923.15c6c6ee84) === Details === ==== ffmpeg-5 ==== Version update (5.1.1 -> 5.1.2) Subpackages: libavcodec59 libavdevice59 libavfilter8 libavformat59 libavutil57 libpostproc56 libswresample4 libswscale6 - Update to release 5.1.2 * Add more field checks, add checks against overflows, or outright use larger integer types. * avformat/dashdec: Fix crash on invalid input/ENOMEM, fix leak * lavc/videotoolbox: do not pass AVCodecContext to decoder output callback * lavc/pthread_frame: always transfer stashed hwaccel state * avcodec/arm/sbcenc: avoid callee preserved vfp registers * avformat/riffdec: don't unconditionally overwrite WAVEFORMATEXTENSIBLE layout * avfilter/vf_scale: overwrite the width and height expressions with the original values * lavc/pthread_frame: avoid leaving stale hwaccel state in worker threads ==== libffi ==== Subpackages: libffi8 libffi8-32bit - add riscv-rvalue-ext.patch to fix libffi for RISCV64 ==== libimagequant ==== - disable sse on non-x86 architectures ==== libqt5-qtbase ==== Version update (5.15.5+kde166 -> 5.15.6+kde177) Subpackages: libQt5Concurrent5 libQt5Core5 libQt5DBus5 libQt5Gui5 libQt5Network5 libQt5OpenGL5 libQt5PrintSupport5 libQt5Sql5 libQt5Sql5-mysql libQt5Sql5-sqlite libQt5Test5 libQt5Widgets5 libQt5Xml5 libqt5-qtbase-platformtheme-gtk3 - Update to version 5.15.6+kde177, rebased upstream: * QStringIterator: fix UB [2/2]: use std::less to compare pointers * QStringIterator: fix UB [1/2]: use has{Next,Previous}() more * Assert validity in QStringIterator's unchecked methods * eglfs: Fix crash when painting the mouse cursor in a multiscreen setup * xcb: fix the build of native painting * QNetworkReplyFileImpl: Don't emit 'finished' in the ctor * Fix typo in code * Fix typo in QAbstractItemModelTester * sqldrivers: Fix typo in error message * network: Fix typos in messages * Remove XCB_EVENT_MASK_RESIZE_REDIRECT for Qt:WindowTransparentForInput * Fix build without dbus support * Revert "Remove the dead code for blocking methods from QtConcurrent" * QAIV: Reset double-click flag in mousePressEvent * Fix possible undefined behavior in clear_thread_data * Revert "xcb: implement missing bits from ICCCM 4.1.4 WM_STATE handling" * 3rdparty: apply a fix to the last zlib fix * add color picking support on wayland using the XDG desktop portal * Use class scope to refer to static function * fix AT_SPI_BUS_ADDRESS actually working * 3rdparty/zlib: backport the fix to CVE-2022-37434 * widgets: avoid setting X11BypassWindowManagerHint in QToolBar * Don't access QObjectPrivate::declarativeData unguarded * Apply CVE-2022-27404-27405-27406-qtbase-5.15.diff * xcb: Update _NET_SUPPORTED when the window manager changes it * Revert "CUPS: Add support for accessible IPP printers" * QtConcurrent::ReduceKernel: fix race conditions * Fix crash in QKmsDevice::createScreenForConnector * Fix compile with MinGW-W64 9.0.0: Redefinition of 'struct _FILE_ID_INFO' * Fallback to another file dialog implementation when XDP is inaccessible * Add QXdgDesktopPortalFileDialog::useNativeFileDialog() * qmake: Ignore stderr when determining the macOS SDK version * Fix QDBusInterface crashing with empty path on construction * Network: Update expired cert * Android: guard getStateCount() with correct VERSION.SDK_INT * Add note on selecting the device which is used to run tests on Android * fc: Clean up current config on shutdown * Doc: Add see also links to operator== and operator!= * Fix framework dependencies in .la files * Fix Style java code format and warnings * wasm: fix network crash on abort * Update bundled Freetype to 2.10.4 * CMake: Prevent multiple creation of the targets 'aab' and 'apk' * Android: Fix fullscreen bottom bar hide issues * xkb.compose: get locale from user env settings * xcb: implement missing bits from ICCCM 4.1.4 WM_STATE handling * macOS: Fix leaked NSMutableArray in applicationActivationChanged * StyleSheet: Use rule for ComboBox in embedded QLineEdit * Fix hidden API access for Android style * Fix memory leak if eXIf has incorrect crc * Fix invalid snippet reference in qtnetwork-index.html * Doc: Fix QList<T>::fromVector example in QList<T> documentation * Turn off feature timezone for emscripten * QXpmHandler: actually limit characters-per-pixel to four * QXpmHandler: fix re-entrancy bug in xpm_color_name * QObject: cleanup the orphaned connection lists on destruction * Fix crash in concurrent disconnect * cleanOrphanedConnectionsImpl: Allow to skip locking * QOrderedMutexLocker: Disable copy and provide explicit dismiss function * Handle even more include in enum cases * macOS: Stop relying on balanced CGDisplay reconfiguration callbacks * QFuture: fix result reporting in the filter mode * Doc: Minor cleanup in QWidget docs * Don't report results when the results list is empty * Windows QPA: Fix coordinates reported through UI Automation * Make QSqlRecord benchmarks non-fatuous * Halve the data-set size of tst_QSqlRecord::benchmarkRecord() * Update deprecated NSAccessibility method * H2: emit encrypted for at least the first reply, similar to H1 * QFile benchmark: only set up and tear down the data directory once * Unify and clean up two identical tst_qfile::*_data() functions * Move QSKIP()s to _data() functions in QFile benchmark * Scale image with MDI icons using the correction factor * QNetworkDiskCache: Fix tracking of size during storeItem() * Always update the input method when QLineEdit receives focus * Fix qdbusperformance and qprocess benchmarks * QListView: don't scroll if selected items are removed * macOS: Detect sandboxed state for command line apps * Update obsoleted functionality in preparation for Qt 6 * Change QCollator's default locale to QLocale().collation() * QDuplicateTracker: reserve() for at least Prealloc elements * Point out that QTreeView's expandAll/expandToDepth don't fetch data * QDuplicateTracker: fix the static buffer size calculation * macOS: Don't make frameless tool windows miniaturizable * macOS: Don't mangle QByteArray settings with @ prefix by decoding as UTF-8 * tst_QtConcurrentThreadEngine: fix the threadCount() test * Fix QTextFormat::FullWidthSelection for right-to-left text layouts * Fix auto completion in QFileDialog on Windows * QFile benchmark: always use Unbuffered for QFSFileEngine tests * Fix QDirIterator benchmark to actually find its test data * macOS: Keep NSWindow alive after handling windowShouldClose callback * Windows QPA: Fix dock widget drag&drop failure * Remove the dead code for blocking methods from QtConcurrent * QtConcurrent: call the non-blocking versions in blocking ones * macOS 10.15: Fix focus frame for combo boxes * Fix placement of placeholder text in QLineEdits with action icons * macOS: fix separator actions not showing in menus * QIcc: Update test for invalid values ... changelog too long, skipping 52 lines ... - Refresh 0001-Add-remote-print-queue-support.patch ==== libqt5-qtconnectivity ==== Version update (5.15.5+kde5 -> 5.15.6+kde5) Subpackages: libQt5Bluetooth5 libQt5Bluetooth5-imports libQt5Nfc5 libQt5Nfc5-imports libqt5-qtconnectivity-tools - Update to version 5.15.6+kde5, rebased upstream: * Doc: Fix typo * QWinRTBluetoothDeviceDiscoveryWorker: Add error handling * Improve detection of enabled location service on SDK<28 ==== libqt5-qtdeclarative ==== Version update (5.15.5+kde19 -> 5.15.6+kde20) - Update to version 5.15.6+kde20, rebased upstream: * Reset currentChanges if currentChanges is active when refilling listView * QmlPreview: Protect QQmlPreviewFileLoader::load with another mutex * Use QDateTime to get offsets for emscripten (wasm) * Doc: fix AnchorChanges typo * Avoid crash for deep aliases * doc: Improve the Input Handlers index page * DropArea: Tell qdoc that DropArea indeed inherits Item * QV4::Heap::GeneratorObject: remove unused member * Sync shadereffect materialType cleanup between renderloops * Avoid infinite loop in designer support * Pass the focus reason through to the control on mouse press * Update QQuickImage's DPR if re-loading the image didn't * Doc: Document matrix4x4 transformation functions * Add tests of matrix4x4 transformation functions * Handle QScreen::physicalDotsPerInchChanged changes for the initial screen * Don't let PointerHandler steal mouse grab from keepMouseGrab layer * Emit grabChanged() from DragHandler and PinchHandler * Resolve data race on QQmlPropertyCache's arguments object * Resolve data race in QQmlPropertyData in a minimally invasive way * Register the QML builtin sequence metatypes only once * doc: Improve QQuickItem::containmentMask() docs * When setting the line dash to be an empty array reset the style to Solid * Fix QtQtuickImage docs: correct properties' signatures * crash fix - avoid wrong gcc optimization * Fix warnings * doc: Use DragHandler rather than MouseArea in the externaldrag snippet * Ensure model is in context if required properties are not used * QQuickItem::forceActiveFocus(): actually force active focus * a11y: make links have pressAction first * Set a11y role for QQuickTextInput to EditableText ==== libqt5-qtgraphicaleffects ==== Version update (5.15.5+kde0 -> 5.15.6+kde0) - Update to version 5.15.6+kde0, rebased upstream: * No code changes ==== libqt5-qtimageformats ==== Version update (5.15.5+kde3 -> 5.15.6+kde4) - Update to version 5.15.6+kde4, rebased upstream: * jp2: use new APIs for jasper 3 * Patch bundled libtiff to compile on Integrity * Update bundled libtiff to version 4.3.0 ==== libqt5-qtlocation ==== Version update (5.15.5+kde3 -> 5.15.6+kde3) Subpackages: libQt5Location5 libQt5Positioning5 libQt5PositioningQuick5 - Update to version 5.15.6+kde3, rebased upstream: * QGeoCoordinate: fix toString() conversion ==== libqt5-qtmultimedia ==== Version update (5.15.5+kde1 -> 5.15.6+kde1) - Update to version 5.15.6+kde1, rebased upstream: * No code changes ==== libqt5-qtnetworkauth ==== Version update (5.15.5+kde0 -> 5.15.6+kde0) - Update to version 5.15.6+kde0, rebased upstream: * Doc: Remove mention of Mozilla Persona ==== libqt5-qtquickcontrols ==== Version update (5.15.5+kde0 -> 5.15.6+kde0) - Update to version 5.15.6+kde0, rebased upstream: * No code changes ==== libqt5-qtquickcontrols2 ==== Version update (5.15.5+kde6 -> 5.15.6+kde5) Subpackages: libQt5QuickControls2-5 libQt5QuickTemplates2-5 - Update to version 5.15.6+kde5, rebased upstream: * Revert "ToolTip: use contentWidth of Text contentItem to account for newlines" * Doc: make it clear that Page doesn't render its title text * QQuickComboBox: fix acceptableInput being wrong if no validator was set * Add recursion guard to QQuickApplicationWindowPrivate::relayout() * Fix SwipeDelegate losing swipes to parent flickables * Blacklist some flaky tst_qquickdrawer functions on openSUSE * Fix warnings in some tests * ToolTip: use contentWidth of Text contentItem to account for newlines ==== libqt5-qtsensors ==== Version update (5.15.5+kde0 -> 5.15.6+kde0) Subpackages: libQt5Sensors5 libQt5Sensors5-imports - Update to version 5.15.6+kde0, rebased upstream: * No code changes ==== libqt5-qtserialport ==== Version update (5.15.5+kde0 -> 5.15.6+kde0) - Update to version 5.15.6+kde0, rebased upstream: * No code changes ==== libqt5-qtspeech ==== Version update (5.15.5+kde1 -> 5.15.6+kde1) Subpackages: libQt5TextToSpeech5 libqt5-qtspeech-plugin-speechd - Update to version 5.15.6+kde1, rebased upstream: * No code changes ==== libqt5-qtsvg ==== Version update (5.15.5+kde10 -> 5.15.6+kde9) - Update to version 5.15.6+kde9, rebased upstream: * Fix assert with wrong number of argument to animateTransform * Avoid undefined behavior when painter transform goes oob ==== libqt5-qttools ==== Version update (5.15.5+kde1 -> 5.15.6+kde1) Subpackages: libQt5Designer5 libQt5Help5 libqt5-qdbus libqt5-qtpaths - Update to version 5.15.6+kde1, rebased upstream: * windeployqt: Account for debug version of ICU library when deploying * Doc: Fix a typo in the "Introduction to QDoc" documentation page * Doc: Remove mention of custom filters * Examples: Don't use QDir::separator() in internal paths * Assistant: Make QResultWidget linkColor stylable ==== libqt5-qtvirtualkeyboard ==== Version update (5.15.5+kde3 -> 5.15.6+kde1) Subpackages: libQt5HunspellInputMethod5 libQt5VirtualKeyboard5 libqt5-qtvirtualkeyboard-hunspell - Update to version 5.15.6+kde1, rebased upstream: * Doc: Add readonly command to VirtualKeyboardSettings::availableLocales * pinyin: Do not accept invalid input as pinyin initial * pinyin: Prevent crash when pinyin dictionary cannot be loaded * plugins/openwnn: reset() should not modify pre-edit text * plugins/openwnn: Set word candidate index when item is selected ==== libqt5-qtwayland ==== Version update (5.15.5+kde39 -> 5.15.6+kde49) Subpackages: libQt5WaylandClient5 libQt5WaylandCompositor5 - Update to version 5.15.6+kde49, rebased upstream: * Call `finishDrag()` in `QWaylandDataDevice::dragSourceCancelled()` * Client: support high-dpi mode for window icon * Avoid calling requestUpdate from wrong thread * Fix missing update when toggling client-side decorations * Use CRLF line delimiter for text/uri-list data * Fix compile tests * client: Synthesize enter/leave event for popup in xdg-shell * Guard mResizeDirty by the correctMutex * Client: clear focus on touch cancel * Build fixes for GCC 11 * Only close popup in the the hierchary * Cleanup up all subsurface QQuickItems correctly * linux-dmabuf-unstable-v1: Fix importing dmabuf buffers with modifiers * Add BlankCursor for cursor names map * client: Gracefully handle shutdown and window hiding - Drop patches, now upstream: * 0002-Guard-mResizeDirty-by-the-correctMutex.patch ==== libqt5-qtwebchannel ==== Version update (5.15.5+kde3 -> 5.15.6+kde3) Subpackages: libQt5WebChannel5 libQt5WebChannel5-imports - Update to version 5.15.6+kde3, rebased upstream: * No code changes ==== libqt5-qtwebengine ==== - Use python 3.9 to build qtwebengine on Leap 15. ==== libqt5-qtwebsockets ==== Version update (5.15.5+kde3 -> 5.15.6+kde2) Subpackages: libQt5WebSockets5 libQt5WebSockets5-imports - Update to version 5.15.6+kde2, rebased upstream: * Clear frame before emitting signals to prevent duplicating messages ==== libqt5-qtx11extras ==== Version update (5.15.5+kde0 -> 5.15.6+kde0) - Update to version 5.15.6+kde0, rebased upstream: * Update obsoleted functionality in preparation for Qt 6 ==== libqt5-qtxmlpatterns ==== Version update (5.15.5+kde0 -> 5.15.6+kde0) Subpackages: libQt5XmlPatterns5 libqt5-qtxmlpatterns-imports - Update to version 5.15.6+kde0, rebased upstream: * No code changes ==== liburing ==== - skip checks on qemu_linux_user builds ==== nautilus ==== Subpackages: gnome-shell-search-provider-nautilus libnautilus-extension4 nautilus-lang - Add nautilus-revert-extra-large-thumbnails.patch: Revert "thumbnails: Create larger thumbnails for higher density displays"; patch taken from upstream merge request (glgo#GNOME/nautilus#2487, boo#1203697). ==== perl-Mojolicious ==== Version update (9.26 -> 9.27) - updated to 9.27 see /usr/share/doc/packages/perl-Mojolicious/Changes 9.27 2022-09-10 - Added support for static assets. - Added support for JSON and plain text exceptions. - Removed experimental status from capture method in Mojo::Log. - Added asset_dir attribute to Mojolicious::Static. - Added asset_path method to Mojolicious::Static. - Added url_for_asset method to Mojolicious::Controller. - Added reply->html_exception, reply->html_not_found, reply->json_exception, reply->json_not_found, reply->http_exception, reply->http_not_found, reply->txt_exception and reply->txt_not_found helpers to Mojolicious::Plugin::DefaultHelpers. - Added asset_tag helper to Mojolicious::Plugin::TagHelpers. - Fixed a bug where async rendering did not work properly in the before_dispatch hook. (andrii-suse) ==== python-pyzmq ==== Version update (23.2.1 -> 24.0.1) - update to version 24.0.1: * Fix several possible resource warnings and deprecation warnings when cleaning up contexts and sockets, especially in pyzmq's own tests and when implicit teardown of objects is happening during process teardown. - update to version 24.0.0: * Breaking changes: + Due to a libzmq bug causing unavoidable crashes for some users, Windows wheels no longer bundle libzmq with AF_UNIX support. In order to enable AF_UNIX on Windows, pyzmq must be built from source, linking an appropriate build of libzmq (e.g. libzmq-v142). AF_UNIX support will be re-enabled in pyzmq wheels when libzmq published fixed releases. + Using a {class}zmq.Context as a context manager or deleting a context without closing it now calls {meth}zmq.Context.destroy at exit instead of {meth}zmq.Context.term. This will have little effect on most users, but changes what happens when user bugs result in a context being implicitly destroyed while sockets are left open. In almost all cases, this will turn what used to be a hang into a warning. However, there may be some cases where sockets are actively used in threads, which could result in a crash. To use sockets across threads, it is critical to properly and explicitly close your contexts and sockets, which will always avoid this issue. ==== rpm-config-SUSE ==== Version update (20220421 -> 20220926) - Update to version 20220926: * Revert macros.debuginfo and prefer a direct rpm patch * Fix kernel builds after #59 * Redefine %__debug_install_post to simplify debuginfo setup * Fix bug not using custom name for summary and description in language packages (boo#1137381) ==== rubygem-net-ssh ==== - limit to ruby 2.7 and 3.1 on leap ==== tcl ==== - skip more tests with qemu_user builds (e.g. riscv64) ==== timezone ==== Version update (2022c -> 2022d) - timezone update 2022d: * Palestine transitions are now Saturdays at 02:00 * Simplify three Ukraine zones into one ==== timezone-java ==== Version update (2022c -> 2022d) - timezone update 2022d: * Palestine transitions are now Saturdays at 02:00 * Simplify three Ukraine zones into one ==== unbound ==== Version update (1.16.2 -> 1.16.3) Subpackages: libunbound8 unbound-anchor - update to 1.16.3 fixes Non-Responsive Delegation Attack (CVE-2022-3204) ==== unzip ==== Subpackages: unzip-doc - Build unzip-rcc using multibuild and update unzip-rcc.spec file ==== yast2-ntp-client ==== Version update (4.5.0 -> 4.5.1) - Skip to write and update netconfig configuration when netconfig executable does not exist (bsc#1198066, bsc#1202748) - 4.5.1 ==== yast2-storage-ng ==== Version update (4.5.8 -> 4.5.9) - Decouple user interface logic from the probing process (related to gh#yast/d-installer#247). - 4.5.9 ==== yast2-trans ==== Version update (84.87.20220917.4034baecb2 -> 84.87.20220923.15c6c6ee84) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20220923.15c6c6ee84: * New POT for text domain 'bootloader'. * New POT for text domain 'bootloader'. * New POT for text domain 'kdump'.