Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20230912 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: Mesa-demo bind libeconf libportal (0.7 -> 0.7.1) libwacom (2.5.0 -> 2.8.0) perl-Mojolicious (9.33 -> 9.340.0) pipewire procps4 (4.0.3 -> 4.0.4) python-Brotli (1.0.9 -> 1.1.0) python-httpcore (0.17.0 -> 0.17.3) python-httpx (0.24.0 -> 0.24.1) python-requests rsync vim (9.0.1632 -> 9.0.1894) yast2-trans (84.87.20230901.be24cb382f -> 84.87.20230909.35988571be) === Details === ==== Mesa-demo ==== Subpackages: Mesa-demo-egl Mesa-demo-es Mesa-demo-x - don't package "bitmap" sample (conflict with /usr/bin/bitmap of package bitmap) {boo#1215185) ==== bind ==== Subpackages: bind-doc bind-utils - Enable crypto-policies support: [bsc#1211301] * Rebase vendor-files/config/named.conf ==== libeconf ==== Subpackages: libeconf0 libeconf0-32bit - Additional info for version 0.5.2: * Fixed a stack-buffer-overflow vulnerability in "econf_writeFile" function. (CVE-2023-30078, CVE-2023-32181, bsc#1211078) * Fixed a stack-buffer-overflow vulnerability in "read_file" function. (CVE-2023-30079, CVE-2023-22652, bsc#1211078) ==== libportal ==== Version update (0.7 -> 0.7.1) Subpackages: libportal-1 libportal-gtk3-1 libportal-gtk4-1 - Update to version 0.7.1: + Restore ability to call g_object_new (XDP_TYPE_PORTAL, ...). ==== libwacom ==== Version update (2.5.0 -> 2.8.0) Subpackages: libwacom-data libwacom9 - update to 2.8.0 (bsc#1214390): * data: Add "Wacom One pen tablet" * data: add Wacom One 12 & Wacom One 13 * data: Add support for the Samsung Chromebook Plus v2 * data: Add support for Nuvision Solo 10 Draw * data: add ELAN 2C1B and 2D55 (Asus ZenBook Pro Duo UX482EG) * data: create a stylus group for the generic-no-eraser pen * data: create a generic-with-eraser group for the default stylus * data: include another device name for the Huion H950P * libwacom 2.8.0 * data: add XP Pen Deco mini7 - update keyring with keys from https://github.com/whot.gpg - update to 2.7.0: * Added support for XP-Pen Deco MW (#548) * Add support for Lenovo Ideapad Duet 5i * Add support for HP Spectre x360 14 * data: make XP-Pen Deco Pro MW layout generic * data: Add XP-Pen Deco Pro SW * Format python files with Python black * tools: add list-local-devices as builddir tool * data: narrow down the Huion H950p to include a name match * tools: list the kernel name together with the event node * Add ID 04f3:23b9 for HP Envy x360 ar0xxx (#550) * Add Wacom HID 52D3 (Lenovo Yoga 7 14ARB7) * Update to follow auto-generated standard * Add Wacom HID 52D5 (Lenovo Yoga 7 14ARB7) (#549) * Support for xp-pen deco pro mw (#552) - update to libwacom-2.6.0: * Add Ugee M708 v1 tablet * Add tablet definition for Wacom HID 52FA Pen (#536) * Added support for XP-Pen Deco01 v2 * tools/clean_svg: don't modify the dict while iterating * data: add the sysinfo to the wacom.example file * CI: update some actions to newer versions * CI: bump an action to the current version * README: note that we support tablets other than Wacom's too * CI: bump to use latest Ubuntu LTS * Add tablet definition for Huion Kamvas 13 * tests: fix failure if system doesn't use systemd ==== perl-Mojolicious ==== Version update (9.33 -> 9.340.0) - updated to 9.34 see /usr/share/doc/packages/perl-Mojolicious/Changes 9.34 2023-09-11 - Added support for serving static files with a prefix. - Deprecated Mojo::File::spurt in favor of Mojo::File::spew. - Added prefix attribute to Mojolicious::Static. - Added url_for_file method to Mojolicious::Controller. - Added file_path method to Mojolicious::Static. - Added spew method to Mojo::File. (genio) - Added encoding option to slurp method in Mojo::File. (genio) - Added url_for_asset and url_for_file helpers to Mojolicious::Plugins::DefaultHelpers. - Added favicon helper to Mojolicious::Plugin::TagHelpers. - Fixed support for module_true Perl feature in Mojolicious apps. (haarg) - Fixed a bug in Mojo::Promise where map could hang on false values after concurrency limit. (ilmari) - Fixed built-in templates to not require an internet connection. (hernan604) ==== pipewire ==== Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-jack pipewire-lang pipewire-libjack-0_3 pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Add patch from upstream to fix a regression introduced in 0.3.77 which made it fail to open a monitor device as source: * 0001-pulse-server-allow-monitors-when-selecting-source-by-index.patch - Add patch from upstream to fix a bug which caused 100% cpu usage under some circumstances: * 0001-Revert-v4l2-handle-inotify-errors.patch * 0002-Revert-v4l2-dont-set-inotify-on-_dev.patch * 0003-spa-v4l2-use-a-separate-watch-for-each-device.patch ==== procps4 ==== Version update (4.0.3 -> 4.0.4) Subpackages: libproc2-0 procps4-lang - Update to procps-ng-4.0.4 * library (API & ABI unchanged) increment revision: 0:2:0 tolerates all potential 'cpuinfo' formats issue #272 restore the proper main thread tics valuations issue #280 Remove myself from proc count merge #193 Refactor the escape code Debian #1035649 * free: -L one line output issue #156 * pgrep: Use only --signal option for signal Debian #1031765 * pgrep: suppress >15 warning if using regex Debian #1037450 * pidof: Add -t option to show threads merge #190 * pmap: Reset totals between processes issue #298 * ps: fixed missing or corrupted fields with -m option Debian #1036631, issue #279 * ps: Fix buffer overflow in -C option CVE-2023-4016 Debian #1042887, issue #297 * ps: Add --signames to show signal names in masks merge #98 * sysctl: -N show names merge #198, RH #2222056 * tests: dont compare floats with == issue #271 * tests: skips tests if maps missing merge #197, Gentoo #583036 * top: bad command line arguments yield EXIT_FAILURE issue #273 * top: avoids keystroke induced '%Cpu' distortions * top: includes VM (guest) tics in 'system' overhead issue #274 * top: includes VM (guest) tics with '!' toggle merge #179 * top: lessen summary cpu distortions on first display merge #180 * top: better backspace handling wtth line edits issue #278 * vmstat: Print guest time in non-wide mode * w: Fix musl UT_HOSTSIZE issue - Remove patches now upstream * CVE-2023-4016.patch * procps-ng-4.0.3-logind.patch - Port patches * procps-ng-3.3.10-errno.patch * procps-ng-3.3.10-slab.patch * procps-ng-3.3.10-xen.dif * procps-ng-3.3.11-pmap4suse.patch * procps-ng-3.3.8-petabytes.patch * procps-ng-3.3.8-tinfo.dif * procps-ng-3.3.9-w-notruncate.diff * procps-v3.3.3-columns.dif * procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff ==== python-Brotli ==== Version update (1.0.9 -> 1.1.0) - update to 1.1.0: * added CLI --dictionary option * decoder: faster decoding * encoder: faster encoding * encoder: smaller stack frames ==== python-httpcore ==== Version update (0.17.0 -> 0.17.3) - update to 0.17.3 * Support async cancellations, ensuring that the connection pool is left in a clean state when cancellations occur. (#726) * The networking backend interface has been added to the public API. Some classes which were previously private implementation detail are now part of the top-level public API. (#699) * Graceful handling of HTTP/2 GoAway frames, with requests being transparently retried on a new connection. (#730) * Add exceptions when a synchronous trace callback is passed to an asynchronous request or an asynchronous trace callback is passed to a synchronous request. (#717) - version 0.17.2 * Add socket_options argument to ConnectionPool and HTTProxy classes. (#668) * Improve logging with per-module logger names. (#690) * Add sni_hostname request extension. (#696) * Resolve race condition during import of anyio package. (#692) * Enable TCP_NODELAY for all synchronous sockets. (#651) - version 0.17.1 * If 'retries' is set, then allow retries if an SSL handshake error occurs. (#669) * Improve correctness of tracebacks on network exceptions, by raising properly chained exceptions. (#678) * Prevent connection-hanging behaviour when HTTP/2 connections are closed by a server-sent 'GoAway' frame". (#679) * Fix edge-case exception when removing requests from the connection pool. (#680) * Fix pool timeout edge-case. (#688) ==== python-httpx ==== Version update (0.24.0 -> 0.24.1) - update to 0.24.1 * Provide additional context in some InvalidURL exceptions. (#2675) * Fix optional percent-encoding behaviour. (#2671) * More robust checking for opening upload files in binary mode. (#2630) * Properly support IP addresses in NO_PROXY environment variable. (#2659) * Set default file for NetRCAuth() to None to use the stdlib default. (#2667) * Set logging request lines to INFO level for async requests, in line with sync requests. (#2656) * Fix which gen-delims need to be escaped for path/query/fragment components in URL. (#2701) ==== python-requests ==== - switch from unmaintained brotlipy to Brotli (same as urllib3) ==== rsync ==== - Use "slp" for bcond, not "openslp", like we use for all other packages, too. - Disable slp patch and configure option if bcond slp is disabled. - add fortified-strlcpy-fix.patch (bsc#1214616) - Disable openslp support on new distros (bsc#1214884) ==== vim ==== Version update (9.0.1632 -> 9.0.1894) Subpackages: vim-data vim-data-common xxd - Updated to version 9.0.1894, fixes the following problems - drop patches: disable-unreliable-tests.patch ignore-flaky-test-failure.patch vim-8.1.0297-dump3.patch - fixes: + boo#1214922 - CVE-2023-4738 + boo#1214925 - CVE-2023-4734 + boo#1214924 - CVE-2023-4735 + boo#1214921 - CVE-2023-4751 - droped %check - most of tests didn't work correctly in OBS and maitenace burden of this was getting too big * Not all cabal config files are recognized. * Duplicate code for converting float to string. * Message is cleared when removing mode message (Gary Johnson). * Error message is cleared when removing mode message. * Expanding a pattern interferes with command line completion. * Compiler warning for uninitialized variable. * crypt tests hang and cause memory errors * Build failure without the crypt feature. * Compiler warning for unused variables without the crypt feature. * The log file does not give information about window sizes. * Build failure with tiny features. * Filetype detection fails if file name ends in many '~'. * Not all filetype file name matches are tested. * zserio files are not recognized. * Insufficient testing for syntax plugins. * Result of syntax tests is hard to see. * Syntax test failure causes script to abort. * Unclear why syntax test fails on Mac. * Unclear why syntax test fails on Mac. * Syntax test fails when Vim window is not tall enough. * Syntax test fails when detected shell type differs. * One more syntax test depends on the system. * Autoload files for "zig" are not installed. * Termdebug: default highlight cleared when changing colorscheme. * Error for using matchfuzzy() in Vim9 script returning a list of dicts. * BUCK files are not recognized. * Crash when using a class member twice. (Christian J. Robinson) * Termdebug on MS-Windows: some file names are not recognized. * Divide by zero when scrolling with 'smoothscroll' set. * Empty CmdlineEnter autocommand causes errors in Ex mode. * Compiler may warn for uninitialized variable. * Regression test doesn't fail when fix is reverted. * PEM files are not recognized. * Crash syncing swapfile in new buffer when using sodium crypt. (James McCoy) * Resetting local option to global value is inconsistent. * Termdebug: error with more than 99 breakpoints. * Tabline highlight wrong after truncated double width label. * Cannot produce a status 418 or 503 message. * Help for builtin functions is not sorted properly. * Test may run into timeout when using valgrind. * Warning for buffer in use when exiting early. * Typo in syntax test input file. * Blade files are not recognized. ==== yast2-trans ==== Version update (84.87.20230901.be24cb382f -> 84.87.20230909.35988571be) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sr yast2-trans-sv yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20230909.35988571be: * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Indonesian) * Translated using Weblate (Russian)