Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20210828 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: java-11-openjdk kio-extras5 konsole libgcrypt (1.9.3 -> 1.9.4) libgpg-error libssh (0.9.5 -> 0.9.6) openssl (1.1.1k -> 1.1.1l) openssl-1_1 (1.1.1k -> 1.1.1l) pipewire (0.3.33 -> 0.3.34) pkgconf (1.7.4 -> 1.8.0) postfix python python-aioitertools (0.7.1 -> 0.8.0) python-base python-fsspec wireshark (3.4.7 -> 3.4.8) yast2-installation (4.4.16 -> 4.4.17) === Details === ==== java-11-openjdk ==== Subpackages: java-11-openjdk-headless - Added patch: * jdk11-glibc234.patch + fix build with glibc-2.34 (bsc#1189201) - riscv64-zero.patch: Add support for riscv64 (zero VM) ==== kio-extras5 ==== Subpackages: kio-extras5-lang libkioarchive5 - Don't delete the DBus service file, it's got nothing to do with development (boo#1189687) ==== konsole ==== Subpackages: konsole-part konsole-part-lang - Add patch from upstream to fix KXmlGUI toolbars and Konsole MainWindow size (kde#436471, kde#430036, kde#439339, boo#1188074): * 0001-Fix-KXmlGUI-toolbars-and-konsole-MainWindow-size.patch - Add patch from upstream to fix the MainWindow size when there is no saved size (like the first time a user runs Konsole) (kde#437791): * 0001-Fix-MainWindow-size-when-there-is-no-saved-size.patch ==== libgcrypt ==== Version update (1.9.3 -> 1.9.4) Subpackages: libgcrypt20 libgcrypt20-32bit libgcrypt20-hmac - Update to 1.9.4: * Bug fixes: - Fix Elgamal encryption for other implementations. [CVE-2021-33560] - Fix alignment problem on macOS. - Check the input length of the point in ECDH. - Fix an abort in gcry_pk_get_param for "Curve25519". * Other features: - Add GCM and CCM to OID mapping table for AES. * Upstream libgcrypt-CVE-2021-33560-fix-ElGamal-enc.patch - Remove not needed patch libgcrypt-sparcv9.diff - Fix building test t-lock with pthread. [bsc#1189745] * Explicitly add -lpthread to compile the t-lock test. * Add libgcrypt-pthread-in-t-lock-test.patch ==== libgpg-error ==== Subpackages: libgpg-error0 libgpg-error0-32bit - Drop --with-pic (no effect with --disable-static). ==== libssh ==== Version update (0.9.5 -> 0.9.6) Subpackages: libssh-config libssh4 - Update to version 0.9.6 (bsc#1189608, CVE-2021-3634) * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6 ==== openssl ==== Version update (1.1.1k -> 1.1.1l) - Update to 1.1.1l release ==== openssl-1_1 ==== Version update (1.1.1k -> 1.1.1l) Subpackages: libopenssl1_1 libopenssl1_1-32bit libopenssl1_1-hmac - Update to 1.1.1l: * [bsc#1189520, CVE-2021-3711] Fixed an SM2 Decryption Buffer Overflow. * [bsc#1189521, CVE-2021-3712] Fixed various read buffer overruns processing ASN.1 strings - Require the crypto-policies package from libopenssl-1_1 ==== pipewire ==== Version update (0.3.33 -> 0.3.34) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-lang pipewire-media-session pipewire-modules pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Add BuildRequires: pkgconfig(libcap) since it's being searched by the build scripts. - Replace BuildRequires: pkgconfig(libopenaptx) with libfreeaptx since openaptx has a license issue - Use bcond_with to enable/disable the usage of libcamera (the defaults are not changed: it's disabled in Leap since upstream doesn't recommend enabling it yet and enabled in TW since we can allow some experimental support there) - Changes suggested by darix. - Update to version 0.3.34: * Highlights - Fixes some critical issues with previous release. Such as devices not showing up and default devices being lost. - Support for consumer driver streams to make the producer v-sync to the consumer monitor in a headless compositor setup. - Improvements to routing of streams. - Bluetooth battery status support for head-set profile and using Apple extensions. aptX-LL and FastStream codec support was added. - Internal latency of ALSA devices can now be configured. - A fast convolver was added to the filter-chain to implement virtual surround sinks or reverbs. * PipeWire - Add support for streams that are driver nodes for the graph. This was already possible for source streams but it is now also possible for playback streams. This can be used to let a producer v-sync to the consumer monitor in a headless compositor setup. (#1484) - State files are now stored in XDG_STATE_HOME instead of XDG_CONFIG_HOME. They will still be loaded from the config home if they are not in the new state home, to ease migration. - Set a driver on inactive nodes to make transport work in xjadeo. (#1491) - Fix parsing of filter-chain controls. - A new FFT based convolver was added to module-filter-chain. It uses a 0-latency 2 stage convolver with small FFT for the head and a large FFT for the tail of the convolution. A convolution can be used to implement IR based reverbs, HRIR surround sound or other convolution based operations. An example HRIR virtual surround sound sink has been added as well. - module-filter-chain was reworked a bit to support more config options for the plugins. - Endian conversion and alaw/ulaw formats are now supported for streams. - pw-cat will now suggest a samplerate for the graph. - SPA_PLUGIN_DIR can now search in multiple paths separated with a ':'. - Passthrough mode has been worked on and has been partially merged. S/PDIF definitions have been added and ALSA devices updated to report and configure S/PDIF formats. The session manager changes to fully configure and enable passthrough mode will hopefully be merged next time. - Fix a race in pw-stream where it would not always emit the right events. * ALSA - Fix volume changed check. It was checking against the wrong value and this could cause rounding errors. - The ALSA plugin now also uses RT scheduling. - Fix the behringer UMC202 usb device id, it was using a generic TI chip ID that caused problems. - Fix USB devices that don't show up anymore. Use an ALSA workaround to fix this. (#1478) - Add a rule for the new firmware of Sennheiser GSX 1200. - ALSA sink and source can now use ProcessLatency param to configure the internal latency. The latencyOffsetNsec property is also exposed so that the latency can be adjusted in pavucontrol as well. * media-session - Fix a critical issue where the default device was not remembered anymore when it was removed. - Fix the issue where some apps need to be restarted when nodes go away and reappear. - Improve routing of streams. Streams that have a specific target set will now be moved to the target when it appears instead of staying on the fallback. - Small memory leak fixes. - Try to switch back to the user selected profile after finishing a Bluetooth recording. * Bluetooth - Add support for HF indicator 2 battery status. - Add support for XAPL battery status. - Set the Communication intended role for HFP profile. - Enable SBC-XQ by default if not disabled by quirks. - Fix some potential crashes due to excessive polling. - Add aptx-LL codec and enable duplex for aptx-LL devices. - Add FastStream codec. This is a codec that can use a duplex SBC channel. * PulseAudio server - Suggests a samplerate for the graph. - Support for handling S/PDIF (IEC958) formats was added. This will start working when the session manager supports configuring streams and nodes in passthrough mode. - Be smarter when handling devices without a negotiated format yet so that they are visible as well. This makes virtual devices show up immediately. * ALSA plugin - Now suggests a samplerate for the graph. * JACK - The jack.pc file can only be generated with meson >= 0.59.0. When the jack-devel option is enabled, it will generate an error with older meson. - Small stability improvements when connecting/disconnecting in Ardour. ==== pkgconf ==== Version update (1.7.4 -> 1.8.0) Subpackages: libpkgconf3 pkgconf-m4 pkgconf-pkg-config - Update to version 1.8.0: + Fix a minor memory leak relating to cross-personalities + Fix some edge cases with --redefine-prefix + Do not prepend sysroot_dir if the .pc file does not exist in the sysroot + Do not perform path filtering on default system include and library path lists. ==== postfix ==== Subpackages: postfix-doc - postfix fails with glibc 2.34 Define HAS_CLOSEFROM (bsc#1189101) add patch - postfix-3.6.2-glibc-234-build-fix.patch ==== python ==== - Renamed patch for assigned CVE: * bpo44022-fix-http-client-infinite-line-reading-after-a-HTTP-100-Continue.patch -> CVE-2021-3737-fix-HTTP-client-infinite-line-reading-after-a-HTTP-100-Continue.patch (boo#1189241, CVE-2021-3737) - Renamed patch for assigned CVE: * bpo43075-fix-ReDoS-in-request.patch -> CVE-2021-3733-fix-ReDoS-in-request.patch (boo#1189287, CVE-2021-3733) - Fix python-doc build (bpo#35293): * sphinx-update-removed-function.patch - Update documentation formatting for Sphinx 3.0 (bpo#40204). ==== python-aioitertools ==== Version update (0.7.1 -> 0.8.0) - Update to 0.8.0: - Added `builtins.any()` and `builtins.all()` (#44) - `builtins.next()` takes an optional `default` parameter (#40, #41) - `asyncio.gather()` now handles cancellation (#64) - Better exception handling in `itertools.tee()` (#47) - Removed dependency on typing_extensions for Python 3.8 and newer (#49) - Improved documentation and formatting - Drop patches for issues fixed upstream - stdlib-typing_extensions.patch ==== python-base ==== Subpackages: libpython2_7-1_0 python-xml - Renamed patch for assigned CVE: * bpo44022-fix-http-client-infinite-line-reading-after-a-HTTP-100-Continue.patch -> CVE-2021-3737-fix-HTTP-client-infinite-line-reading-after-a-HTTP-100-Continue.patch (boo#1189241, CVE-2021-3737) - Renamed patch for assigned CVE: * bpo43075-fix-ReDoS-in-request.patch -> CVE-2021-3733-fix-ReDoS-in-request.patch (boo#1189287, CVE-2021-3733) - Fix python-doc build (bpo#35293): * sphinx-update-removed-function.patch - Update documentation formatting for Sphinx 3.0 (bpo#40204). ==== python-fsspec ==== - Add fsspec-pr710-bytesreturn.patch in order to fix zarr * gh#intake/filesystem_spec#710 * gh#zarr-developers/zarr-python#812 ==== wireshark ==== Version update (3.4.7 -> 3.4.8) Subpackages: libwireshark14 libwiretap11 libwsutil12 wireshark-ui-qt - Wireshark 3.4.8: * Dissector bug reported for Bluetooth Cycling Power Measurement characteristic for extreme angles value * Raknet Addresses are incorrectly identified. * Editcap saving files as ethernet when specifying '-T ieee-802-11-*' * CoAP dissector confuses Content-Format with Accept - Further features, bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-3.4.8.html ==== yast2-installation ==== Version update (4.4.16 -> 4.4.17) - Refactored umount_finish.rb (bsc#1149980) More details: https://github.com/yast/yast-installation/pull/975 - Moved out the unmounting part to a new (testable!) Unmounter class - Now using a dedicated FinishClient base class - Killed a lot of YCP zombies - Removed dead code going back to storage-old - Modularized the code - Made the client invokable stand-alone - 4.4.17