Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20240309 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MozillaFirefox (123.0 -> 123.0.1) flatpak fontconfig (2.14.2 -> 2.15.0) gnome-shell gpg2 (2.4.4 -> 2.4.5) graphviz inkscape libaccounts-glib libassuan (2.5.6 -> 2.5.7) libqt5-qtwebengine libwacom (2.8.0 -> 2.10.0) mariadb-connector-c poppler (24.02.0 -> 24.03.0) poppler-qt5 (24.02.0 -> 24.03.0) rebootmgr (2.2 -> 2.3) salt sssd unbound (1.19.1 -> 1.19.2) yast2-storage-ng (5.0.7 -> 5.0.8) === Details === ==== MozillaFirefox ==== Version update (123.0 -> 123.0.1) Subpackages: MozillaFirefox-translations-common - Mozilla Firefox 123.0.1 * Fixed the *Firefox Translation* language indicator in the address bar displaying a colored square icon instead of the language code icon. (bmo#1879415) * Fixed a regression with the `onChange` event not firing when clearing the value of a `textarea` HTML field. (bmo#1881457) * Fixed a regression in the JavaScript JIT engine incorrectly inlining strings in some cases. (bmo#1882386) * Fixed: Fixed low contrast of text when selecting rows in the Developer tools' Storage panel. (bmo#1877090) ==== flatpak ==== Subpackages: flatpak-remote-flathub libflatpak0 system-user-flatpak - Add a flatpak-selinux subpackage that provides a SELinux policy module (boo#1220591). ==== fontconfig ==== Version update (2.14.2 -> 2.15.0) Subpackages: fontconfig-lang libfontconfig1 - update to 2.15.0: * Do not change the order of orth files * Convert tabs to spaces * Convert more tabs to spaces in docs * Report more detailed logs instead of assertion. * Add some missing constant names for weight. * Adujst indentation between programlisting in fontconfig-user.sgml * Add another test case for flatpak * Update 65-nonlatin.conf for macOS * Change the order of the properties to the order of fontconfig cache format * Add missing property descriptions * Add namedinstance property * Remove the problematic language from code and doc * Use 'outline' instead of 'scalable' for bitmaps * Add more docs about selectfont * Rework CI implementation * Fix uninitialized memory access when failing memory allocation. * Create a symlink with relative path * Fix an error of "initializer element is not constant" * Update CaseFolding.txt to Unicode 15.1 * Update the encoding table for Simplified Chinese * Retry to decode strings in the name table as UTF-16BE in some cases. * Work around decoding strings in Macintosh encoding for the name table. * Use memmove instead of memcpy * Rename README to NEWS and add README.md * Update so version * Fix leak of `reason` in _FcConfigParse when not complaining ==== gnome-shell ==== Subpackages: gnome-extensions gnome-shell-calendar gnome-shell-lang - Update gnome-shell-gdm-login-applet.patch: Clean up JS errors (bsc#1221100). ==== gpg2 ==== Version update (2.4.4 -> 2.4.5) Subpackages: dirmngr gpg2-lang - Update to 2.4.5: * gpg,gpgv: New option --assert-pubkey-algo. [T6946] * gpg: Emit status lines for errors in the compression layer. [T6977] * gpg: Fix invocation with --trusted-keys and --no-options. [T7025] * gpgsm: Allow for a longer salt in PKCS#12 files. [T6757] * gpgtar: Make --status-fd=2 work on Windows. [T6961] * scd: Support for the ACR-122U NFC reader. [rG1682ca9f01] * scd: Suport D-TRUST ECC cards. [T7000,T7001] * scd: Allow auto detaching of kernel drivers; can be disabled with the new compatibility-flag ccid-no-auto-detach. [rGa1ea3b13e0] * scd: Allow setting a PIN length of 6 also with a reset code for openpgp cards. [T6843] * agent: Allow GET_PASSPHRASE in restricted mode. [rGadf4db6e20] * dirmngr: Trust system's root CAs for checking CRL issuers. [T6963] * dirmngr: Fix regression in 2.4.4 in fetching keys via hkps. [T6997] * gpg-wks-client: Make option --mirror work properly w/o specifying domains. [rG37cc255e49] * g13,gpg-wks-client: Allow command style options as in "g13 mount foo". [rGa09157ccb2] * Allow tilde expansion for the foo-program options. [T7017] * Make the getswdb.sh tool usable outside the GnuPG tree. * Release-info: https://dev.gnupg.org/T6960 * Update the required versions for the dependencies. ==== graphviz ==== Subpackages: libcdt5 libcgraph6 libgvc6 libpathplan4 - VUL-0: CVE-2023-46045: graphviz: out-of-bounds read via a crafted config6a file bsc#1219491 A gvc-detect-plugin-installation-failure-and-display-an-error.patch - Some alphabetical re-ordering and other spec file changes which should not have any functional change which came from some kind of auto-spec cleaner ==== inkscape ==== Subpackages: inkscape-extensions-extra inkscape-extensions-fig inkscape-extensions-gimp inkscape-lang - Add inkscape-poppler-24.03.0.patch: Fix build with poppler >= 24.03.0. ==== libaccounts-glib ==== - Add upstream changes: * 0001-ag-account-fix-incorrect-cleanup-in-ag_account_final.patch * 0002-Build-Don-t-install-Python-overrides-by-default.patch * 0003-Lib-do-not-attempt-to-terminate-the-GTask-twice.patch * 0004-ag-provider-fix-memory-leak-on-provider-tags.patch * 0006-ag-account-do-not-emit-misleading-enabled-signals-on.patch - Spec cleanup ==== libassuan ==== Version update (2.5.6 -> 2.5.7) - Update to 2.5.7: * New configure option --with-libtool-modification. [T6619] * Change the naming of the 64 bit Windows DLL from libassuan6-0.dll to libassuan-0.dll to sync this with what we did for libgpg-error. * Release-info: https://dev.gnupg.org/T7028 - Update upstream libassuan.keyring ==== libqt5-qtwebengine ==== - Drop BuildRequire on libsrtp, qt builds a bundled copy. ==== libwacom ==== Version update (2.8.0 -> 2.10.0) Subpackages: libwacom-data libwacom9 - update to 2.10.0: * Append to DeviceMatch for X1 Yoga Gen 5 (#632) * Add .tablet file for Ingenic touch and pen display (#621) * Update the name for the Dell Active Pen (#628) * Add support for xp-pen artist 10s table (#625) * github: Minimize permissions granted to automated workflows / jobs * data: Update ModelName for DTH134 and DTC121 * data: Add Wacom HID-5362 * github: update the issue templates * github: add a label commenter bot * Add an editorconfig file * github: fix the sysinfo check workflow * tools: fix a memleak in list-local-devices * Fix an indentation issue * data: Intuos Pro 2 is compatible with Intuos 4 styli * libwacom 2.10.0 * data: add isdv4-50a0 (#630) * build(deps): bump tj-actions/changed-files in /.github/workflows * Add support for Lenovo ThinkPad X1 Yoga Gen 7 (#626) - update to 2.9.0: * data: add Wacom Cintiq Pro 22 & 17 * data: remove erroneous dash from latest Cintiq Pro model names * data: add dtc121 * data: add dth134 * meson.build: correct license to HPND * Switch strcmp to g_str_equal() * meson.build: remove duplicate pytest run * Add support for evdev code parsing * Drop the separate Button= assignment * database: move parsing the features into a helper * data: add a new Keys/KeyCodes entry to the tablet files * CI: fix the pages job for the new libevdev dependency * libwacom: only memcmp the led data if we have leds * libwacom 2.9.0 * data: Add isdv-48b7 (#604) * Add data for XP-Pen G430s (#603) * data: Add XP-Pen Artist 13.3 Pro (#601) - requires libevdev >= 1.7.0 ==== mariadb-connector-c ==== - Fix build with gcc14, bsc#1221007 * fix-build-gcc14.patch ==== poppler ==== Version update (24.02.0 -> 24.03.0) Subpackages: libpoppler-cpp0 libpoppler-glib8 poppler-tools - version update to 24.03.0 Release 24.03.0: core: * Fix opening some malformed files. Issue #1447 * Skip drawing image when it has singular matrix. Issue #1114 * Fix crash on malformed files * Small internal code cleanup utils: * pdfdetach: Fix potential directory traversal * pdfimages: Enable to print filenames to stdout. * pdfsig: Add visible name/date when signing an existing form signature field - Bump poppler_sover to 135 following upstream changes. - Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN. ==== poppler-qt5 ==== Version update (24.02.0 -> 24.03.0) - version update to 24.03.0 Release 24.03.0: core: * Fix opening some malformed files. Issue #1447 * Skip drawing image when it has singular matrix. Issue #1114 * Fix crash on malformed files * Small internal code cleanup utils: * pdfdetach: Fix potential directory traversal * pdfimages: Enable to print filenames to stdout. * pdfsig: Add visible name/date when signing an existing form signature field - Bump poppler_sover to 135 following upstream changes. - Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN. ==== rebootmgr ==== Version update (2.2 -> 2.3) - Update to version 2.3 - rebootmgrd: add verbose mode - Enable verbose mode in rebootmgr.service by default ==== salt ==== Subpackages: python3-salt salt-master salt-minion salt-transactional-update - Make importing seco.range thread safe (bsc#1211649) - Added: * make-importing-seco.range-thread-safe-bsc-1211649.patch ==== sssd ==== Subpackages: libsss_certmap0 libsss_idmap0 libsss_nss_idmap0 sssd-krb5-common sssd-ldap - remove dependency on /usr/bin/python3 using %python3_fix_shebang_path macro, [bsc#1212476] ==== unbound ==== Version update (1.19.1 -> 1.19.2) Subpackages: libunbound8 unbound-anchor - Update to 1.19.2: * Bug Fixes: - Fix CVE-2024-1931, Denial of service when trimming EDE text on positive replies. [bsc#1221164] ==== yast2-storage-ng ==== Version update (5.0.7 -> 5.0.8) - Share the logic for generating the description of a device and the label of a file system. - Needed for (gh#openSUSE/agama#1079). - 5.0.8