Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20240930 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ModemManager (1.20.6 -> 1.22.0) amarok (3.1.0 -> 3.1.1) audit (3.1.1 -> 4.0) audit-secondary (3.1.1 -> 4.0) cheese gtkmm4 (4.14.0 -> 4.16.0) gtksourceview5 (5.12.1 -> 5.14.0) ibus-libpinyin libwnck mozilla-nss (3.103 -> 3.104) pangomm (2.52.0 -> 2.54.0) pipewire (1.2.4 -> 1.2.5) python-cryptography (43.0.0 -> 43.0.1) virtualbox (7.0.20 -> 7.1.0) virtualbox-kmp (7.0.20_k6.11.0_1 -> 7.1.0_k6.11.0_1) === Details === ==== ModemManager ==== Version update (1.20.6 -> 1.22.0) Subpackages: ModemManager-bash-completion ModemManager-lang libmm-glib0 - Update to version 1.22.0: + A new "MSG" (message) log verbosity level is introduced, which is also the new default one if none explicitly defined. This level takes the place of the old "INFO" level, as a level including the most important messages that should be logged without needing to be warnings or errors. The new "INFO" level is more verbose than "MSG" but less verbose than "DBG", and may be useful as default in systems where active debugging of WWAN related issues is required. E.g. all user operations triggered via DBus method calls are logged in "INFO" level. + Introduced the concept of "personal information" which should by default not be included in log messages. Enabling personal information in logs requires to run the daemon with the '--log-personal-info' option. This feature is mostly implemented for QMI and MBIM specific logs, but hasn't yet been included in generic daemon logs or when using the AT protocol. Changes and fixes related to this feature will be cherry-picked and included in the future stable branch updates. - Update URL and Source adresses. ==== amarok ==== Version update (3.1.0 -> 3.1.1) - Update to 3.1.1 * Most of the context view QML items ported from QtControls 1 to QtControls 2 * Default to no fadeout on pause and stop (kde#491603) * Actually show the file browser panel toolbar * Fix track editor autocompletions (kde#491520) * Ensure home icon is shown in browser breadcrumb widgets (kde#491354) ==== audit ==== Version update (3.1.1 -> 4.0) Subpackages: libaudit1 libaudit1-32bit libauparse0 - Update to 4.0 - Drop python2 support - Drop auvirt and autrace programs - Drop SysVinit support - Require the use of the 5.0 or later kernel headers - New README.md file - Rewrite legacy service functions in terms of systemctl - Consolidate and update end of event detection to a common function - Split off rule loading from auditd.service into audit-rules.service - Refactor libaudit.h to split out logging functions and record numbers - Speed up aureport --summary reports - Limit libaudit python bindings to logging functions - Add a metrics function for auparse - Change auditctl to use pidfd_send_signal for signaling auditd - Adjust watches to optimize syscalls hooked when watch file access - Drop nispom rules - Add intepretations for fsconfig, fsopen, fsmount, & move_mount - Many code fixups (cgzones) - Update syscall and interpretation tables to the 6.8 kernel (from v3.1.2) - When processing a run level change, make auditd exit - In auditd, fix return code when rules added in immutable mode - In auparse, when files are given, also consider EUID for access - Auparse now interprets unnamed/anonymous sockets (Enzo Matsumiya) - Disable Python bindings from setting rules due to swig bug (S. Trofimovich) - Update all lookup tables for the 6.5 kernel - Don't be as paranoid about auditctl -R file permissions - In ausearch, correct subject/object search to be an and if both are given - Adjust formats for 64 bit time_t - Fix segfault in python bindings around the feed API - Add feed_has_data, get_record_num, and get/goto_field_num to python bindings - Update spec: * Add fix-auparse-test.patch (downstream): Upstream tests uses a static value (42) for 'gdm' uid/gid (based on Fedora values, apparently). Replace these occurrences with 'unknown(123456)' * Replace '--with-python' with '--with-python3' on %configure * Add new headers 'audit_logging.h' and 'audit-records.h' for audit-devel ==== audit-secondary ==== Version update (3.1.1 -> 4.0) Subpackages: audit python3-audit system-group-audit - Update audit-secondary.spec: * Add "Requires: audit-rules" for audit package * Remove preun/postun handling of audit-rules.service - Update to 4.0 - Drop python2 support - Drop auvirt and autrace programs - Drop SysVinit support - Require the use of the 5.0 or later kernel headers - New README.md file - Rewrite legacy service functions in terms of systemctl - Consolidate and update end of event detection to a common function - Split off rule loading from auditd.service into audit-rules.service - Refactor libaudit.h to split out logging functions and record numbers - Speed up aureport --summary reports - Limit libaudit python bindings to logging functions - Add a metrics function for auparse - Change auditctl to use pidfd_send_signal for signaling auditd - Adjust watches to optimize syscalls hooked when watch file access - Drop nispom rules - Add intepretations for fsconfig, fsopen, fsmount, & move_mount - Many code fixups (cgzones) - Update syscall and interpretation tables to the 6.8 kernel (from v3.1.2) - When processing a run level change, make auditd exit - In auditd, fix return code when rules added in immutable mode - In auparse, when files are given, also consider EUID for access - Auparse now interprets unnamed/anonymous sockets (Enzo Matsumiya) - Disable Python bindings from setting rules due to swig bug (S. Trofimovich) - Update all lookup tables for the 6.5 kernel - Don't be as paranoid about auditctl -R file permissions - In ausearch, correct subject/object search to be an and if both are given - Adjust formats for 64 bit time_t - Fix segfault in python bindings around the feed API - Add feed_has_data, get_record_num, and get/goto_field_num to python bindings - Update spec: * Move rules-related files into new subpackage `audit-rules': * Files moved: - /sbin/auditctl, /sbin/augenrules, /etc/audit/{audit.rules,rules.d/audit.rules,audit-stop.rules} - manpages for auditctl, augenrules, and audit.rules - /etc/audit is now owned by `audit-rules' as well * Add new file /usr/lib/systemd/system/audit-rules.service * Remove in-house create-augenrules-service.patch that generated augenrules.service systemd unit service * Remove ownership of /usr/share/audit * Create /usr/share/audit-rules directory on %install * Remove audit-userspace-517-compat.patch (fixed upstream) * Remove libev-werror.patch (fixed upstream) * Remove audit-allow-manual-stop.patch (fixed upstream) * Add fix-auparse-test.patch (downstream): Upstream tests uses a static value (42) for 'gdm' uid/gid (based on Fedora values, apparently). Replace these occurrences with 'unknown(123456)' * Replace '--with-python' with '--with-python3' on %configure * Remove autrace and auvirt references (upstream) * Replace README with README.md - Drop `--enable-systemd' from %configure as SysV-style scripts aren't supported in upstream since 113ae191758c ("Drop support for SysVinit") ==== cheese ==== Subpackages: cheese-lang libcheese-common libcheese-gtk25 libcheese8 typelib-1_0-Cheese-3_0 - Add 73.patch: Fix JSON validation. Fixes startup with json-glib 1.10. ==== gtkmm4 ==== Version update (4.14.0 -> 4.16.0) - Update to version 4.16.0: + Almost identical to 4.15.1. - Update to version 4.15.1: + Gdk: - DrawContext: Deprecate begin_frame(), end_frame(), is_in_frame(), get_frame_region(). - Surface: Deprecate set_opaque_region(). - Cursor: Rename create(const SlotGetTexture& slot, .....). Call it create_from_slot(). It was added in 4.15.0, but some create() calls in old code became ambiguous. + Gtk: - Window: Add set_interactive_debugging(). - TextBuffer: Add enum TextBuffer::NotifyFlags, add_commit_notify(), remove_commit_notify(). + Build: Require gtk4 >= 4.15.5. - Drop gtkmm4-docs-without-timestamp.patch: Fixed upstream. ==== gtksourceview5 ==== Version update (5.12.1 -> 5.14.0) Subpackages: gtksourceview5-lang libgtksourceview-5-0 - Update to version 5.14.0: + Fix an issue where the gutter would not redraw when focus changes. + Add support for Groff syntax. - Changes from version 5.13.1: + Documentation improvements + Improve performance of BuilderBlocks font loading. Some of this effort required changes to the TTF, so user testing with a wide variety of languages is desired. This should reduce startup time of GtkSourceView using applications. + gtk-doc.lang: highlight `backtick` spans + c.lang: highlight [[]] style attributes + java.lang: improve escaped character matching + Adwaita.xml, Adwaita-dark.xml: style updates to track platform changes for GNOME 47. - Changes from version 5.13.0: + Ensure gutter renderers are released during dispose + Make default auto-indenter keep indentation when cursor is at line start + python3.lang: Fix f-string in curly braces to have no-spellcheck applied + Updated translations. ==== ibus-libpinyin ==== - Update ibus-libpinyin.spec: Change python depending version, Since tumbleweed and SLE already totally switch to python3, no longer coexist with python2. (boo#1228652) - Add ibus-libpinyin-revert-python-3.2.patch: Backporting cf67e92a from upstream, Revert python3 version checking to 3.2 to enable lower python version building. (boo#1228652) ==== libwnck ==== Subpackages: libwnck-3-0 libwnck-lang typelib-1_0-Wnck-3_0 - BuildRequire gettext-devel instead of gettext: allow OBS to shortcut through gettext-runtime-mini. ==== mozilla-nss ==== Version update (3.103 -> 3.104) Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs mozilla-nss-sysinit mozilla-nss-tools - Fix build error under Leap by rebasing nss-fips-safe-memset.patch. - update to NSS 3.104 * bmo#1910071 - Copy original corpus to heap-allocated buffer * bmo#1910079 - Fix min ssl version for DTLS client fuzzer * bmo#1908990 - Remove OS2 support just like we did on NSPR * bmo#1910605 - clang-format NSS improvements * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function * bmo#1908990 - removing dirent.c from build * bmo#1902078 - Allow handing in keymaterial to shlibsign to make the output reproducible * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR, openunix, sco, unixware or reliantUnix * bmo#1908990 - remove mentions of WIN95 * bmo#1908990 - remove mentions of WIN16 * bmo#1913750 - More explicit directory naming * bmo#1913755 - Add more options to TLS server fuzz target * bmo#1913675 - Add more options to TLS client fuzz target * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI * bmo#1908012 - set nssckbi version number to 2.70. * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert. * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA. * bmo#1908006 - Add Cybertrust Japan Roots to NSS. * bmo#1908004 - Add Taiwan CA Roots to NSS. * bmo#1911354 - remove search by decoded serial in nssToken_FindCertificateByIssuerAndSerialNumber * bmo#1913132 - Fix tstclnt CI build failure * bmo#1913047 - vfyserv: ensure peer cert chain is in db for CERT_VerifyCertificateNow * bmo#1912427 - Enable all supported protocol versions for UDP * bmo#1910361 - Actually use random PSK hash type * bmo#1911576 - Initialize NSS DB once * bmo#1910361 - Additional ECH cipher suites and PSK hash types * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE * bmo#1910605 - clang-format shlibsign.c - remove obsolete nss-reproducible-builds.patch ==== pangomm ==== Version update (2.52.0 -> 2.54.0) - Update to version 2.54.0: + Color: Add parse_with_alpha(). + Context: Add set/get_round_glyph_positions(). + Item: Add default constructor, get_char_offset(). + Layout: Add set/get_justify_last_line(), get_direction(), get_caret_pos(). + LayoutIter: Add operator bool(), get_run_baseline(). + LayoutLine: Add is_paragraph_start(), get_resolved_direction(), get_height(). + TabArray: Add TabArray(const Glib::ustring& text) constructor, operator bool(), set_positions_in_pixels(), to_string(), set/get_decimal_point(), sort(). + Documentation: - Language::get_scripts(): Improve documentation. - Don't link to removed parts of library.gnome.org. + Build: - Require pango >= 1.54.0. - Meson build: Require meson >= 0.62.0. - Use Meson's pkgconfig module instead of using the *.pc.in templates. - Drop pangomm-docs-without-timestamp.patch, fixed upstream. ==== pipewire ==== Version update (1.2.4 -> 1.2.5) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-jack pipewire-lang pipewire-libjack-0_3 pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Update to version 1.2.5: + Highlights - Fix an fd mismatch in the protocol in some cases that could lead to fd leaks and crashes. - Fix a bug where the mixer was not updated after setting the port, which would cause muted audio at boot or resume from suspend. - Fix a potential use-after-free in module-rt when stopping a thread. - Cached objects are now freed in the JACK API to avoid memory leaks. - Some more fixes and improvements. + PipeWire - RequestProcess commands are now only sent after the node completes the state change to RUNNING. - More FreeBSD fixes. - Handle ACTIVE links going to < PAUSED as well. This improves renegotiation in some cases. - Fix an fd mismatch in the protocol in some cases that could lead to fd leaks and crashes. + Modules - Many of the network modules can now also accept hostnames instead of IP addresses. - Fix a potential use-after-free in module-rt when stopping the thread. + SPA - Support for elogind was added. - Some more errors are checked when converting JSON to POD. - Fix a bug where the mixer was not updated after setting the port, which would cause muted audio at boot or resume from suspend. + JACK - The BBT transport handling was improved. Some fields were added to be able to handle the JACK semantics correctly. - Buffers are now aligned according to the maximum CPU alignment instead of the hardcoded 16 bytes alignment. - Cached objects are now freed correctly. + Doc - Some small doc updates. - Don't try to enable apparmor support if without_apparmor is defined (as in SLFO). ==== python-cryptography ==== Version update (43.0.0 -> 43.0.1) - update to 43.0.1: * Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.3.2. ==== virtualbox ==== Version update (7.0.20 -> 7.1.0) - Update to release 7.1 * The GUI now offers a selection between Basic and Experienced user level with reduced or full UI functionality. * VRDE: If user does not set up TLS with custom certificates, enable it with self-signed certificate, including issuing a new one before the old one expires * NAT: New engine with IPv6 support. * Linux host and guest: Added Wayland support for Clipboard sharing. - Add cxx17.patch to workaround "new" build failures with gcc14/C++17 - Move the C++17 command line switch from vbox-vboxadd-init-script.diff to cxx17.patch - Add Conflict markers to prevent the situation {virtualbox-7.1 combined with virtualbox-qt-7.0}; old VBQT did not have the right (strong enough) Requires lines. ==== virtualbox-kmp ==== Version update (7.0.20_k6.11.0_1 -> 7.1.0_k6.11.0_1) - Update to release 7.1 * The GUI now offers a selection between Basic and Experienced user level with reduced or full UI functionality. * VRDE: If user does not set up TLS with custom certificates, enable it with self-signed certificate, including issuing a new one before the old one expires * NAT: New engine with IPv6 support. * Linux host and guest: Added Wayland support for Clipboard sharing. - Add cxx17.patch to workaround "new" build failures with gcc14/C++17 - Move the C++17 command line switch from vbox-vboxadd-init-script.diff to cxx17.patch - Add Conflict markers to prevent the situation {virtualbox-7.1 combined with virtualbox-qt-7.0}; old VBQT did not have the right (strong enough) Requires lines.