Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20221125
Please do not reply to this email to report issues, rather file a bug
on bugzilla.opensuse.org. For more information on filing bugs please
see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
apparmor (3.0.7 -> 3.1.2)
babl (0.1.96 -> 0.1.98)
busybox
gegl (0.4.38 -> 0.4.40)
grub2
hicolor-icon-theme
highway
icewm (3.2.0 -> 3.2.2)
inxi (3.3.21 -> 3.3.23)
iproute2
iso-codes (4.11.0 -> 4.12.0)
k3b
libapparmor (3.0.7 -> 3.1.2)
libcaca (0.99.beta19.git20171003 -> 0.99.beta20)
libdrm
live555 (2022.10.01 -> 2022.11.19)
luajit (2.1.0~beta3+git.1647772157.43ebb949 -> 2.1.0~beta3+git.1669107176.46aa45d)
mutter
nano (6.4 -> 7.0)
nghttp2 (1.50.0 -> 1.51.0)
openvpn (2.5.7 -> 2.5.8)
perl-IO-Socket-SSL (2.075 -> 2.077)
perl-IO-Tty (1.16 -> 1.17)
perl-Mojolicious (9.28 -> 9.30)
python
python-base
python-httpcore
ruby-common (2.6 -> 3.2)
ruby3.1 (3.1.2 -> 3.1.3)
rubygem-gem2rpm
schily
sdl12_compat (1.2.52 -> 1.2.60)
selinux-policy
sqlite3 (3.39.4 -> 3.40.0)
systemd
systemd-rpm-macros (17 -> 18)
vim (9.0.0814 -> 9.0.0924)
vlc (3.0.17.4 -> 3.0.18)
=== Details ===
==== apparmor ====
Version update (3.0.7 -> 3.1.2)
Subpackages: apparmor-abstractions apparmor-docs apparmor-parser apparmor-parser-lang apparmor-profiles apparmor-utils apparmor-utils-lang pam_apparmor pam_apparmor-32bit python3-apparmor
- update to AppArmor 3.1.2
- lots of cleanups, improvements and bugfixes in all areas
- rework internal profile storage and handling in the aa-* tools
- support boolean variable definitions in the aa-* tools
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.1
and https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.2
for the detailed upstream changelog
- remove upstream(ed) patches:
- apparmor-3.0.7-egrep.patch
- dnsmasq.diff
- profiles-permit-php-fpm-pid-files-directly-under-run.patch
- zgrep-profile-mr870.diff
- no longer ship precompiled profile cache for Tumbleweed (boo#1205659)
- BuildRequire iproute2 (needed for aa-unconfined tests)
==== babl ====
Version update (0.1.96 -> 0.1.98)
- update to 0.1.98:
* More robust bounds protection in ICC handling, avoid garbage collecting
lookup tables in-line with processing.
==== busybox ====
Subpackages: busybox-static
- Add e63d7cdf.patch: awk: fix use after free (CVE-2022-30065,
boo#1199744).
==== gegl ====
Version update (0.4.38 -> 0.4.40)
Subpackages: gegl-0_4 gegl-0_4-lang libgegl-0_4-0
- luajit was disabled for riscv64 ppc64 ppc64le, patch it here
accordingly (boo#1205102)
- Update to version 0.4.40:
+ Operations:
- newsprint: do not drop alpha channel in RGB modes.
+ Core:
- fixes for legacy build, still supporting building latest GEGL
for stable GIMP with old babl (not recommended if distros can
have recent enough meson).
- avoiding possible multi thread race in babl garbage
collection,
==== grub2 ====
Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen
- Make full utilization of btrfs bootloader area (bsc#1161823)
* 0001-fs-btrfs-Use-full-btrfs-bootloader-area.patch
* 0002-Mark-environmet-blocks-as-used-for-image-embedding.patch
- Patch removed
* 0001-i386-pc-build-btrfs-zstd-support-into-separate-modul.patch
==== hicolor-icon-theme ====
- Add 1024x1024 directory for package ownership
==== highway ====
- Fix the library being built for incorrect microarchitecture
on armv{6,7}hl.
* add arm-disable-runtime-dispatch.patch to fix compiler error
- Actually run the testsuite.
==== icewm ====
Version update (3.2.0 -> 3.2.2)
Subpackages: icewm-config-upstream icewm-default icewm-lang icewm-lite
- Update to version 3.2.2:
+ Freeze the task pane layout while Alt is pressed,
+ Only sort Alt+Tab on WM_CLASS when persistent,
+ Also sort Alt+Tab on the 'order' winoption when persistent,
+ Let the Escape key cancel a menu with all its submenu's,
+ Add a menu entry to rename the window title manually,
+ Adapt absolute paths in .desktop files to the installation
prefix,
+ The sorting of windows in the window list window was improved a
lot,
+ Restore the named frame tabs when recovering from a crash,
+ Preserve the non-fullscreen non-maximized window geometry
across restarts,
+ Try harder to avoid a situation where nothing is focused,
+ Update the window list when a tab is moved to its own frame,
+ Make the window list menu actions more tab-savvy.
+ Drop the obsolete LSM file altogether.
- Changes from version 3.2.1:
+ Add QuickSwitchPersistence=0 preference for stateful Alt+Tab.
+ Demarcate workspaces with a horizontal line in Alt+Tab.
+ Fixes for Alt+Tab size calculations.
+ Fix for changing workspace when Alt+Tab is open.
+ Fix for KeySysSwitchClass history.
+ Don't attempt to focus NoInput windows.
+ Ensure that active Alt+Tab item is visible.
+ Also sort Alt+Tab items on WM_CLASS.
+ Fix a compile error for GCC 4.8.5.
+ When moving a tab to a new frame, activate it.
+ Updated translations.
==== inxi ====
Version update (3.3.21 -> 3.3.23)
- Update to version 3.3.23:
+ /usr/share/doc/packages/inxi/inxi.changelog.
==== iproute2 ====
Subpackages: iproute2-bash-completion
- Replace routel program by a non-python version [boo#1205632]
==== iso-codes ====
Version update (4.11.0 -> 4.12.0)
Subpackages: iso-codes-lang
- Update to version 4.12.0:
+ ISO 3166-1: Update name for TR (Türkiye). Fixes #38
+ Updated translations for ISO 3166-1, ISO 3166-2, ISO 3166-3,
ISO 639-2, ISO 639-3, ISO 639-5, ISO 4217, and ISO 15924.
==== k3b ====
Subpackages: k3b-lang
- Add patch to fix knewstuff install location:
* 0001-remove-unnecessary-and-incorrect-version-check.patch
==== libapparmor ====
Version update (3.0.7 -> 3.1.2)
Subpackages: libapparmor1 libapparmor1-32bit
- update to AppArmor 3.1.2
- lots of cleanups, improvements and bugfixes in all areas
- rework internal profile storage and handling in the aa-* tools
- support boolean variable definitions in the aa-* tools
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.1
and https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.2
for the detailed upstream changelog
- remove upstream(ed) patches:
- apparmor-3.0.7-egrep.patch
- dnsmasq.diff
- profiles-permit-php-fpm-pid-files-directly-under-run.patch
- zgrep-profile-mr870.diff
- no longer ship precompiled profile cache for Tumbleweed (boo#1205659)
- BuildRequire iproute2 (needed for aa-unconfined tests)
==== libcaca ====
Version update (0.99.beta19.git20171003 -> 0.99.beta20)
- add patch [libcaca-autoconf-2.69.patch]
* Don't force autoconf to be at version 2.71
- Upgrade to 0.99.beta20
* IPv6 support in cacaserver
* fixed a bug from 2004 that caused PDF documentation generation to fail
* memory allocation functions are now more robust
* numerous fixes for memory leaks and invalid memory accesses:
* CVE-2021-30498
* CVE-2021-30499
* CVE-2021-3410
* CVE-2018-20546
* CVE-2018-20547
* CVE-2018-20545
* CVE-2018-20548
* CVE-2018-20549
- Dropped upstream fixed patches
* libcaca-bsc1182731-prevent-overflow.patch
* libcaca-variable-type.patch
* Bug1120502-add_cast_to_prevent_overflow.patch
==== libdrm ====
Subpackages: libdrm2 libdrm_amdgpu1 libdrm_intel1 libdrm_nouveau2 libdrm_radeon1
- Apply n_libdrm-drop-valgrind-dep-generic.patch and
n_libdrm-drop-valgrind-dep-intel.patch only when the build uses
meson < 0.64. With meson 0.64, we don't get the dependency on
valgraind added.
- split n_libdrm-drop-valgrind-dep.patch into
n_libdrm-drop-valgrind-dep-generic.patch and
n_libdrm-drop-valgrind-dep-intel.patch to fix build on s390 and
armv7l
- Only apply libdrm-drop-valgrind-dep.patch if valgrnid_support is
enabled (fix build on e.g. aarch64).
- renamed libdrm-drop-valgrind-dep.patch to
n_libdrm-drop-valgrind-dep.patch in order to mark it as 'never
to be upstreamed'
- Add libdrm-drop-valgrind-dep.patch (as source): drop dependency
on valgrind on generated pkgconfig files. The .pc files are
auto-generated by meson and are 'technically' correct, but we do
not want to inject valgrind here (we can get away with this hack
as it's only relevant when using pkg-config --static, and we
do not provide static libs anyway).
==== live555 ====
Version update (2022.10.01 -> 2022.11.19)
Subpackages: libBasicUsageEnvironment1 libUsageEnvironment3 libgroupsock30 libliveMedia107
- update to 2022.11.19:
- Added a new global variable "ReceivingInterfaceAddr6" (analogous to the existing
variable "ReceivingInterfaceAddr" for IPv4) to allow applications to optionally
change the default receiving address for IPv6.
==== luajit ====
Version update (2.1.0~beta3+git.1647772157.43ebb949 -> 2.1.0~beta3+git.1669107176.46aa45d)
- Update to version 2.1.0~beta3+git.1669107176.46aa45d:
* NX: Always compile with -fPIC.
* Clarify contact page.
* Ensure correct stack top for OOM error message.
* ARM64: Fix IR_SLOAD assembly.
* Fix trace join to BC_JLOOP originating from BC_ITERN.
* Fix compiler warnings.
* Fix last edit.
* Remove dead Wiki links.
* Fix QNX build.
* Add -F option to override filename in jit.bcsave (luajit -b).
* Patch luajit.pc with INSTALL_INC, if customized.
* LJ_GC64: Fix lua_concat().
* Prevent use of RTLD_DEFAULT when NO_RTLD_DEFAULT is defined.
* Improve GC estimation for userdata with attached managed memory.
* Add missing GC steps to string buffer methods.
* x86/x64: Limit VLOAD fusion to simple cases.
* OSX/iOS/ARM64: Fix generation of Mach-O object files.
* Prevent trace start at BC_ITERL after compiled BC_ITERN.
* ARM64: Allow building with unwinding disabled.
* FFI: Fix sizeof expression in C parser for reference types.
* FFI: Fix ffi.alignof() for reference types.
* FFI: Allow ffi.metatype() for typedefs with attributes.
* OSX/iOS/ARM64: Fix bytecode embedding in Mach-O object file.
* LJ_GC64: Fix IR_VARG offset for fixed number of results.
* x86/x64: Fix math.ceil(-0.9) result sign.
* Grammar and spell check.
* Make embedded bytecode readable and forward-compatible.
* DynASM: Fix warnings.
* Fix warnings in minilua.c.
* Update console build instructions.
* Add Nintendo Switch port.
* Avoid zero-sized arrays in jit_State.
* Don't use jit_State during build with JIT disabled.
* DynASM/ARM64: Fix LSL/BFI* encoding with variable registers.
* Fix ITERN loop detection when hook checks are enabled.
* Prevent C compiler undefined-behavior optimization.
* Fix alias analysis for table length forwarding.
* Fix loop initialization in table.foreach().
* LJ_GC64: Fix HREFK optimization.
* Fix recording of __concat metamethod.
* Cleanup of system and architecture support docs.
* Add PS5 port.
* Fix assertions.
* x64: Fix RETHI/RETLO swap after call.
* Fix assertion for LJ_KEYINDEX.
* Add missing check for LJ_KEYINDEX in ITERN recording.
* DynASM/ARM64: Fix NOP instruction for aligment
- Was forced to remove perhaps in future important patches:
- luajit-ppc64-replace-asserts.patch
- 0004-Add-ppc64-support-based-on-koriakin-GitHub-patchset.patch
- Also exclude s390x from the build (boo#1204557).
==== mutter ====
Subpackages: mutter-lang
- Fix window freezes when maximized on Xorg (boo#1205714,
glgo#GNOME/mutter!2694, glgo#GNOME/gnome-shell#6054)
* add clutter-actor-Show-on-all-stage-views-when-actors-ha.patch
==== nano ====
Version update (6.4 -> 7.0)
Subpackages: nano-lang
- update to 7.0:
* String binds may contain bindable function names between braces
* Unicode codes can be entered (via M-V) without leading zeroes,
by finishing short codes with <Space> or <Enter>
* Word completion (^]) looks for candidates in all open buffers
* No regular expression matches the final empty line any more
==== nghttp2 ====
Version update (1.50.0 -> 1.51.0)
- update to 1.51.0:
* https://nghttp2.org/blog/2022/11/13/nghttp2-v1-51-0/
This release fixes affinity-cookie-stickiness parameter handling.
==== openvpn ====
Version update (2.5.7 -> 2.5.8)
- update to 2.5.8:
* allow running a default configuration with TLS libraries without BF-CBC
(even if TLS cipher negotiation would not actually use BF-CBC, the
long-term compatibility "default cipher BF-CBC" would trigger an error
on such TLS libraries)
* ``--auth-nocache'' was not always correctly clearing username+password
after a renegotiation
* ensure that auth-token received from server is cleared if requested
by the management interface ("forget password" or automatically
via ``--management-forget-disconnect'')
* in a setup without username+password, but with auth-token and
auth-token-username pushed by the server, OpenVPN would start asking
for username+password on token expiry. Fix.
* using ``--auth-token`` together with ``--management-client-auth``
(on the server) would lead to TLS keys getting out of sync and client
being disconnected. Fix.
* management interface would sometimes get stuck if client and server
try to write something simultaneously. Fix by allowing a limited
level of recursion in virtual_output_callback()
* fix management interface not returning ERROR:/SUCCESS: response
on "signal SIGxxx" commands when in HOLD state
* tls-crypt-v2: abort connection if client-key is too short
* make man page agree with actual code on replay-window backtrag log message
* remove useless empty line from CR_RESPONSE message
==== perl-IO-Socket-SSL ====
Version update (2.075 -> 2.077)
- updated to 2.077
see /usr/share/doc/packages/perl-IO-Socket-SSL/Changes
2.077 2022/11/21
- fix memory leak in session cache, thanks to genuaboro
https://github.com/noxxi/p5-io-socket-ssl/pull/118
- more race conditions in tests fixed thanks to jddurand
https://github.com/noxxi/p5-io-socket-ssl/issues/97
2.076 2022/11/12
- added curl like tracing based on contribution from jddurand
https://github.com/noxxi/p5-io-socket-ssl/pull/117
- fixed race condition in t/sni_verify.t based on analysis from jddurand
https://github.com/noxxi/p5-io-socket-ssl/issues/97
==== perl-IO-Tty ====
Version update (1.16 -> 1.17)
- updated to 1.17
see /usr/share/doc/packages/perl-IO-Tty/ChangeLog
1.17 2022-11-11 Todd Rinaldo