Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20240425 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ImageMagick (7.1.1.30 -> 7.1.1.31) Mesa (24.0.3 -> 24.0.5) Mesa-drivers (24.0.3 -> 24.0.5) bind (9.18.25 -> 9.18.26) distribution-logos-openSUSE (20240404 -> 20240424) dotconf (1.3 -> 1.4.1) dracut-pcr-signature (0.3+5 -> 0.3+6) ffmpeg-4 ffmpeg-6 flatpak (1.15.6 -> 1.15.8) gdb gedit gnome-settings-daemon grub2 gtk2 gtk2-engine-murrine gtksourceview kwin6 (6.0.4 -> 6.0.4.1) libical (3.0.17 -> 3.0.18) libical-glib (3.0.17 -> 3.0.18) liblouis libva (2.20.0 -> 2.21.0) libva-gl (2.20.0 -> 2.21.0) libwacom (2.10.0 -> 2.11.0) mozilla-nss (3.98 -> 3.99) openSUSE-release (20240423 -> 20240425) pcre2 python-numpy python-pyarrow (15.0.2 -> 16.0.0) sbl sg3_utils (1.48+8.37ca384 -> 1.48+9.ecc03bb) virtualbox virtualbox-kmp vlc wireplumber (0.5.1 -> 0.5.2) yast2-trans (84.87.20240414.d73f60d6af -> 84.87.20240421.63804708b7) === Details === ==== ImageMagick ==== Version update (7.1.1.30 -> 7.1.1.31) Subpackages: libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - version update to 7.1.1.31 * Convert big PDF documents is slow #7263 * Update release.yml #7258 * Update README.md #7245 * uhdr.c: verify the availability of error message before accessing it #7229 - removed patches - ImageMagick-wmflite-detection.patch (upstreamed) ` ==== Mesa ==== Version update (24.0.3 -> 24.0.5) Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - Update to bugfix release 24.0.5 - supersedes mesa-fix-llvm18.patch - adjusted 0004-glx-pass-implicit-load-param-through-allocation.patch, 0010-glx-silence-more-implicit-load-zink-errors.patch ==== Mesa-drivers ==== Version update (24.0.3 -> 24.0.5) Subpackages: Mesa-dri Mesa-gallium Mesa-libva libxatracker2 - Update to bugfix release 24.0.5 - supersedes mesa-fix-llvm18.patch - adjusted 0004-glx-pass-implicit-load-param-through-allocation.patch, 0010-glx-silence-more-implicit-load-zink-errors.patch ==== bind ==== Version update (9.18.25 -> 9.18.26) Subpackages: bind-doc bind-utils - Update to release 9.18.26 New Features: * The statistics channel now includes counters that indicate the number of currently connected TCP IPv4/IPv6 clients. * Added RESOLVER.ARPA to the built in empty zones. Bug Fixes: * Changes to listen-on statements were ignored on reconfiguration unless the port or interface address was changed, making it impossible to change a related listener transport type. That issue has been fixed. * A bug in the keymgr code unintentionally slowed down some DNSSEC key rollovers. This has been fixed. * Some ISO 8601 durations were accepted erroneously, leading to shorter durations than expected. This has been fixed. ==== distribution-logos-openSUSE ==== Version update (20240404 -> 20240424) Subpackages: distribution-logos-openSUSE-Tumbleweed distribution-logos-openSUSE-icons - Update to version 20240424: * Aeon: Make light versions actually light ==== dotconf ==== Version update (1.3 -> 1.4.1) - removed empty useless %check section - Update to version 1.4.1 * fix possible buffer overflows in get_path and dotconf_get_next_line - fixed package group - added empty %check section (no unit tests in the project) ==== dracut-pcr-signature ==== Version update (0.3+5 -> 0.3+6) - Update to version 0.3+6: * Add UTF8 character set ==== ffmpeg-4 ==== Subpackages: libavcodec58_134 libavformat58_76 libavutil56_70 libpostproc55_9 libswresample3_9 libswscale5_9 - Address boo#1223070/CVE-2024-31578: add patch 0001-avutil-hwcontext-Don-t-assume-frames_uninit-is-reent.patch ==== ffmpeg-6 ==== Subpackages: libavcodec60 libavfilter9 libavformat60 libavutil58 libpostproc57 libswresample4 libswscale7 - Address boo#1223215/CVE-2023-49501: add patch 0001-avfilter-asrc_afirsrc-fix-by-one-smaller-allocation-.patch - Address boo#1223235/CVE-2023-49502: add patch 0001-avfilter-bwdif-account-for-chroma-sub-sampling-in-mi.patch - Address boo#1222730/CVE-2023-49528: add patches 0001-avfilter-af_dialoguenhance-fix-overreads.patch, 0001-avfilter-af_dialoguenhance-simplify-channels-copy.patch, 0001-avfilter-af_dialoguenhance-do-output-scaling-once.patch - Address boo#1223070/CVE-2024-31578: add patch 0001-avutil-hwcontext-Don-t-assume-frames_uninit-is-reent.patch - Address boo#1223085/CVE-2024-31582: add patch 0001-avfilter-vf_codecview-fix-heap-buffer-overflow.patch ==== flatpak ==== Version update (1.15.6 -> 1.15.8) Subpackages: flatpak-remote-flathub flatpak-selinux flatpak-zsh-completion libflatpak0 system-user-flatpak - disable parental controls for now by using '-Dmalcontent=disabled', to work around issues with xdg-desktop-portal - Update to version 1.15.8: + Security fixes: - Don't allow an executable name to be misinterpreted as a command-line option for bwrap(1). This prevents a sandbox escape where a malicious or compromised app could ask xdg-desktop-portal to generate a .desktop file with access to files outside the sandbox. (CVE-2024-32462, boo#1223110). + Other bug fixes: - Pass the -export-dynamic linker option as - Wl,-export-dynamic, fixing build failures with clang 18 and lld 18. - Fix a double-free when installation is cancelled. - Fix installed-tests failure with "FUSERMOUNT: unbound variable". - Changes from version 1.15.7: + New features: - Automatically remove obsolete driver versions and other autopruned refs. - --socket=inherit-wayland-socket. - Automatically reload D-Bus session bus configuration after installing or upgrading apps, to pick up any exported D-Bus services. + Bug fixes: - Don't parse <developer><name/></developer> as the application name. - Don't refuse to start apps when there is no D-Bus system bus available. - Don't try to repeat migration of apps whose data was migrated to a new name and then deleted. - Improve handling of mixed locales on systems with systemd-localed. - Improve display of ellipsized columns in wide terminals. - Make flatpak info -e look for extensions in all installations. - Fix warnings from newer GLib versions. - Always set the container environment variable. - Always let the app inherit redirected file descriptors. - In flatpak ps, add xdg-desktop-portal-gnome to the list of backends we'll use to learn which apps are running in the background. - Don't use WAYLAND_SOCKET unless given - -socket=inherit-wayland-socket. - Use fusermount3 if compiled with FUSE 3, overridable with - Dsystem_fusermount compile-time option. - Avoid leaking a temporary variable from /etc/profile.d/flatpak.sh into the shell environment. - Improve async-signal safety. - Fix various memory leaks. - Avoid undefined behaviour of signed left-shift when storing object IDs in a hash table. - Detect the correct gtk-doc when cross-compiling. - Detect the correct wayland-scanner when cross-compiling. - Documentation improvements. - Skip more tests when FUSE isn't available. - Updated translations. - Add libglnx.patch: fix meson function detection. - Switch build system to meson: + Add meson BuildRequires. + Switch configure/make_build/make_install macros to meson/meson_build/meson_install, preserving the configure parameters as close as possible: - -disable-silent-rules => obsoleted - -with-system-bubblewrap => -Dsystem_bubblewrap=bwrap - -with-curl => -Dhttp_backend=curl - Add pkgconfig(malcontent-0) BuildRequires: enable malcontent support. ==== gdb ==== - Maintenance script qa.sh: * Add PR31671 unresolved. * Add unresolved for yama ptrace_scope == 1. * Limit PR31648 unresolved to SLE-11. ==== gedit ==== Subpackages: gedit-lang python3-gedit - Add gedit-quickhighlight-gtksourcestyle-api.patch: adapt quickhighlight plugin for new libgedit-gtksourceview API. ==== gnome-settings-daemon ==== Subpackages: gnome-settings-daemon-lang - Update gnome-settings-daemon-bgo793253.patch to fix the build with gcc 14. ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - remove deprecated file 20_memtest86+ * a similar file is provided by the package memtest86+ ==== gtk2 ==== Subpackages: gtk2-data gtk2-immodule-xim gtk2-lang gtk2-tools libgtk-2_0-0 - Add gtk2-gcc14.patch: fix build with gcc 14. ==== gtk2-engine-murrine ==== - Add murrine-missing-prototypes.patch: add missing prototypes. ==== gtksourceview ==== Subpackages: gtksourceview-lang libgtksourceview-3_0-1 typelib-1_0-GtkSource-3_0 - Add gtksourceview-gcc14.patch: fix assignment from incompatible pointer type. ==== kwin6 ==== Version update (6.0.4 -> 6.0.4.1) Subpackages: kwin6-lang kwin6-x11 libkwin6 - Update to 6.0.4.1: * New bugfix release - Changes since 6.0.4: * Fall back to breeze_cursors if neither configured nor default can be loaded * scene/workspacescene: don't check direct scanout candidates for a pixmap (kde#485639, kde#485730, kde#485712) ==== libical ==== Version update (3.0.17 -> 3.0.18) - update to 3.0.18: * Requires CMake v3.5.0 or higher * Escape ^ (U+005E) character in parameter values according to RFC 6868 * New CMake option LIBICAL_BUILD_EXAMPLES to disable building the examples * Should be able to use the project as a submodule * Built-in timezones updated to tzdata2024a ==== libical-glib ==== Version update (3.0.17 -> 3.0.18) - update to 3.0.18: * Requires CMake v3.5.0 or higher * Escape ^ (U+005E) character in parameter values according to RFC 6868 * New CMake option LIBICAL_BUILD_EXAMPLES to disable building the examples * Should be able to use the project as a submodule * Built-in timezones updated to tzdata2024a ==== liblouis ==== Subpackages: liblouis-data liblouis20 python3-louis - Add s390x-support.patch to fix issues with python bindings on big endian machines. (gh#liblouis/liblouis#1552, bsc#1198348) ==== libva ==== Version update (2.20.0 -> 2.21.0) Subpackages: libva-drm2 libva-wayland2 libva-x11-2 libva2 - update to 2.21.0: * va: Add allow_content_tools and force_intger_mv to AV1 enc * va: add VASurfaceAttribAlignmentSize * va: Re-add drm_state and fd checks to VA_DRM_GetDriverNames * va: export symbol vaGetLibFunc for Windows * va: Add PRIME3 defination and correct the value * va: add driver name map for new intel KMD xe * va: export symbol vaMapBuffer2 for Windows * va: add new interface vaMapBuffer2 for map operation optimization * va: Add VAConfigAttribEncMaxTileRows and VAConfigAttribEncMaxTileCols * va: fix handling when all wayland backends fail * va_trace:add return value trace for vaPutSurfaces ==== libva-gl ==== Version update (2.20.0 -> 2.21.0) - update to 2.21.0: * va: Add allow_content_tools and force_intger_mv to AV1 enc * va: add VASurfaceAttribAlignmentSize * va: Re-add drm_state and fd checks to VA_DRM_GetDriverNames * va: export symbol vaGetLibFunc for Windows * va: Add PRIME3 defination and correct the value * va: add driver name map for new intel KMD xe * va: export symbol vaMapBuffer2 for Windows * va: add new interface vaMapBuffer2 for map operation optimization * va: Add VAConfigAttribEncMaxTileRows and VAConfigAttribEncMaxTileCols * va: fix handling when all wayland backends fail * va_trace:add return value trace for vaPutSurfaces ==== libwacom ==== Version update (2.10.0 -> 2.11.0) Subpackages: libwacom-data libwacom9 - update to 2.11.0: * New Devices: - Asus Zenbook Duo - Lenovo Ideapad Duet, Ideapad Duet 3, Thinkpad L13 Yoga Gen 3 - HP Envy x360 * The default fallback device is now an integrated tablet ==== mozilla-nss ==== Version update (3.98 -> 3.99) Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs mozilla-nss-sysinit mozilla-nss-tools - update to NSS 3.99 * Removing check for message len in ed25519 (bmo#1325335) * add ed25519 to SECU_ecName2params. (bmo#1884276) * add EdDSA wycheproof tests. (bmo#1325335) * nss/lib layer code for EDDSA. (bmo#1325335) * Adding EdDSA implementation. (bmo#1325335) * Exporting Certificate Compression types (bmo#1881027) * Updating ACVP docker to rust 1.74 (bmo#1880857) * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335) * Add NSS_CMSRecipient_IsSupported. (bmo#1877730) ==== openSUSE-release ==== Version update (20240423 -> 20240425) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== pcre2 ==== Subpackages: libpcre2-16-0 libpcre2-32-0 libpcre2-8-0 libpcre2-8-0-32bit - build x86_64-v3 optimized libs ==== python-numpy ==== - Add patch fix-meson-multiple-python-versions.patch: * Ensure meson executes sys.executable when testing Cython. ==== python-pyarrow ==== Version update (15.0.2 -> 16.0.0) - Update to 16.0.0 * [Python] construct pandas.DataFrame with public API in to_pandas (#40897) * [Python] Fix ORC test segfault in the python wheel windows test (#40609) * [Python] Attach Python stacktrace to errors in ConvertPyError (#39380) * [Python] Plug reference leaks when creating Arrow array from Python list of dicts (#40412) * [Python] Empty slicing an array backwards beyond the start is now empty (#40682) * [Python] Slicing an array backwards beyond the start now includes first item. (#39240) * [Python] Calling pyarrow.dataset.ParquetFileFormat.make_write_options as a class method results in a segfault (#40976) * [Python] Fix parquet import in encryption test (#40505) * [Python] fix raising ValueError on _ensure_partitioning (#39593) * [Python] Validate max_chunksize in Table.to_batches (#39796) * [C++][Python] Fix test_gdb failures on 32-bit (#40293) * [Python] Make Tensor.__getbuffer__ work on 32-bit platforms (#40294) * [Python] Avoid using np.take in Array.to_numpy() (#40295) * [Python][C++] Fix large file handling on 32-bit Python build (#40176) * [Python] Update size assumptions for 32-bit platforms (#40165) * [Python] Fix OverflowError in foreign_buffer on 32-bit platforms (#40158) * [Python] Add Type_FIXED_SIZE_LIST to _NESTED_TYPES set (#40172) * [Python] Mark ListView as a nested type (#40265) * [Python] only allocate the ScalarMemoTable when used (#40565) * [Python] Error compiling Cython files on Windows during release verification * [Python] Fix flake8 failures in python/benchmarks/parquet.py (#40440) * [Python] Suppress python/examples/minimal_build/Dockerfile.* warnings (#40444) * [Python][Docs] Add workaround for autosummary (#40739) * [Python] BUG: Empty slicing an array backwards beyond the start should be empty * [CI][Python] Activate ARROW_PYTHON_VENV if defined in sdist-test job (#40707) * [CI][Python] CI failures on Python builds due to pytest_cython (#40975) * [Python] ListView pandas tests should use np.nan instead of None (#41040) * [C++][Python] Sporadic asof_join failures in PyArrow [#]# New Features and Improvements * [Python][CI] Remove legacy hdfs tests from hdfs and hypothesis setup (#40363) * [Python] Remove deprecated pyarrow.filesystem legacy implementations (#39825) * [C++][Python] Add missing methods to RecordBatch (#39506) * [Python][CI] Support ORC in Windows wheels * [Python] Correct test marker for join_asof tests (#40666) * [Python] Add join_asof binding (#34234) * [Python] Add a function to download and extract timezone database on Windows (#38179) * [Python][CI][Packaging] Enable ORC on Windows Appveyor CI and Windows wheels for pyarrow * [Python] Add a FixedSizeTensorScalar class (#37533) * [Python][CI][Dev][Python] Release and merge script errors (#37819)" (#40150) * [Python] Construct pyarrow.Field and ChunkedArray through Arrow PyCapsule Protocol (#40818) * [Python] Fix missing byte_width attribute on DataType class (#39592) * [Python] Compatibility with NumPy 2.0 * [Packaging][Python] Enable building pyarrow against numpy 2.0 (#39557) * [Python] Basic pyarrow bindings for Binary/StringView classes (#39652) * [Python] Expose force_virtual_addressing in PyArrow (#39819) * [Python][Parquet] Support hashing for FileMetaData and ParquetSchema (#39781) * [Python] Add bindings for ListView and LargeListView (#39813) * [Python][Packaging] Build pyarrow wheels with numpy RC instead of nightly (#41097) * [Python] Support creating Binary/StringView arrays from python objects (#39853) * [Python] ListView support for pa.array() (#40160) * [Python][CI] Remove upper pin on pytest (#40487) * [Python][FS][Azure] Minimal Python bindings for AzureFileSystem (#40021) * [Python] Low-level bindings for exporting/importing the C Device Interface (#39980) * [Python] Add ChunkedArray import/export to/from C (#39985) * [Python] Use Cast() instead of CastTo (#40116) * [C++][Python] Basic conversion of RecordBatch to Arrow Tensor (#40064) * [C++][Python] Basic conversion of RecordBatch to Arrow Tensor - add support for different data types (#40359) * [C++][Python] Basic conversion of RecordBatch to Arrow Tensor - add option to cast NULL to NaN (#40803) * [Python] Support requested_schema in __arrow_c_stream__() (#40070) * [Python] Support Binary/StringView conversion to numpy/pandas (#40093) ... changelog too long, skipping 36 lines ... - Add pyarrow-pr41319-numpy2-tests.patch gh#apache/arrow#41319 ==== sbl ==== - Add sbl-gcc14.patch: fix an implicit declaration. ==== sg3_utils ==== Version update (1.48+8.37ca384 -> 1.48+9.ecc03bb) Subpackages: libsgutils2-1_48-2 - sg_inq: re-add Unit serial number field (bsc#1219547) ==== virtualbox ==== - Provide a temporary fix to the problem of wrong timestamp for files in a shared folder since kernel 6.6. File "fix_shared_folder_time.patch" is added. This change fixes boo#1220524. ==== virtualbox-kmp ==== - Provide a temporary fix to the problem of wrong timestamp for files in a shared folder since kernel 6.6. File "fix_shared_folder_time.patch" is added. This change fixes boo#1220524. ==== vlc ==== Subpackages: libvlc5 libvlccore9 vlc-codec-gstreamer vlc-lang vlc-noX vlc-qt vlc-vdpau - Enable FluidSynth plugin using an optional package ==== wireplumber ==== Version update (0.5.1 -> 0.5.2) Subpackages: libwireplumber-0_5-0 wireplumber-audio wireplumber-lang wireplumber-zsh-completion - Update to version 0.5.2: * Highlights: - Added support for loading configuration files other than the default wireplumber.conf within Lua scripts (!629) - Added support for loading single-section configuration files, without fragments (!629) - Updated the node.software-dsp script to be able to load filter-chain graphs from external configuration files, which is needed for Asahi Linux audio DSP configuration (!629) * Fixes: - Fixed destroying camera nodes when the camera device is removed (#627, !631) - Fixed an issue with Bluetooth BAP device set naming (!632) - Fixed an issue caused by the pipewire event loop not being "entered" as expected (!634, #638) - A false positive warning about no modules being loaded is now suppressed when using libpipewire >= 1.0.5 (#620) - Default nodes can now be selected using priority.driver when priority.session is not set (#642) * Changes: - The library version is now generated following pipewire's versioning scheme: libwireplumber-0.5.so.0.5.2 becomes libwireplumber-0.5.so.0.0502.0 (!633) - Remove patches from upstream that are already in 0.5.2: * 0001-core-set-context.modules.allow-empty-to-silence-warning-in.patch * 0002-monitor-utils-clear-cam-data-after-creating-nodes.patch * 0003-monitors_bluez-fix-BAP-device-set-node-naming.patch ==== yast2-trans ==== Version update (84.87.20240414.d73f60d6af -> 84.87.20240421.63804708b7) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20240421.63804708b7: * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Romanian) * Translated using Weblate (Slovak) * Translated using Weblate (Czech) * Translated using Weblate (Dutch) * Translated using Weblate (Catalan) * Translated using Weblate (Japanese) * New POT for text domain 'storage'. * New POT for text domain 'docker'. * Translated using Weblate (Romanian) * Translated using Weblate (Romanian)