Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20230225 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ImageMagick (7.1.0.61 -> 7.1.0.62) NetworkManager (1.42.0 -> 1.42.2) createrepo_c flatpak glib2 (2.74.5 -> 2.74.6) grub2 lapack libcbor libfido2 (1.12.0 -> 1.13.0) libjpeg-turbo (2.1.4 -> 2.1.5.1) libnotify (0.8.1 -> 0.8.2) libyui (4.4.8 -> 4.4.9) libyui-ncurses (4.4.8 -> 4.4.9) libyui-ncurses-pkg (4.4.8 -> 4.4.9) libyui-qt (4.4.8 -> 4.4.9) libyui-qt-graph (4.4.8 -> 4.4.9) libyui-qt-pkg (4.4.8 -> 4.4.9) mariadb (10.10.2 -> 10.10.3) ndctl (75 -> 76) python-iniconfig (1.1.1 -> 2.0.0) python-lxml python-pexpect python-typing_extensions (4.4.0 -> 4.5.0) snapper spice-gtk (0.41 -> 0.42) sudo (1.9.13 -> 1.9.13p1) unbound (1.17.0 -> 1.17.1) yast2-python-bindings (4.5.1 -> 4.5.2) yast2-security (4.5.5 -> 4.5.6) zstd (1.5.2 -> 1.5.4) === Details === ==== ImageMagick ==== Version update (7.1.0.61 -> 7.1.0.62) Subpackages: ImageMagick-config-7-SUSE ImageMagick-extra libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - version update to 7.1.0.62 https://github.com/ImageMagick/Website/blob/main/ChangeLog.md - add %bcond_without djvulibre ==== NetworkManager ==== Version update (1.42.0 -> 1.42.2) Subpackages: NetworkManager-bluetooth NetworkManager-lang NetworkManager-pppoe NetworkManager-tui NetworkManager-wwan libnm0 typelib-1_0-NM-1_0 - Update to version 1.42.2: + Add build option to set the mobile-broadband-provider-info database path. + Add new "ipv[46].replace-local-rule" setting to control whether to remove the local route rule that is automatically generated. + Add the DHCPv6 IAID to the lease information exposed in /run and on D-Bus. + Fix assuming team connections at boot. + Fix race condition when setting the MAC address of an OVS interface. + Fix constructing the IPv4 name servers variable passed to dispatcher scripts. + Don't use tentative IPv6 address to resolve the system hostname via DNS. + Deprecate the "Master" property of the NMActiveConnection D-Bus object in favor of the new "Controller" property. - Drop 1539.patch: Fixed upstream. - Refresh patch with quilt: + 0001-Coerce-connectivity-LIMITED-to-NONE-when-device-is-d.patch ==== createrepo_c ==== Subpackages: libcreaterepo_c0 python3-createrepo_c - Precompile the python bytecode to avoid lingering files on package removal. - Add upstream patches (already merged) to publish IMA metadata in repomd repositories + 0001-Add-optional-filelists_ext-metadata.patch + 0002-Rename-filelists_ext-to-filelists-ext-to-be-consiste.patch + 0003-Rename-filelists_ext.xml-metadata-to-filelists-ext.x.patch + 0004-Add-missing-ext-to-filelists-ext-repomd-record.patch - Add upstream patches (under review) to rename filelists-ext + 0005-Complete-renaming-to-filelists-ext.patch - Use git for merging in %autosetup ==== flatpak ==== Subpackages: flatpak-remote-flathub flatpak-zsh-completion libflatpak0 system-user-flatpak - Add flatpak-fix-gpg-agent-double-free.patch: stdout stream of a subprocess is owned by the subprocess, not the caller, so don't use g_autoptr for it to prevent double free (bsc#1207434). ==== glib2 ==== Version update (2.74.5 -> 2.74.6) Subpackages: glib2-lang glib2-tools libgio-2_0-0 libgio-2_0-0-32bit libglib-2_0-0 libglib-2_0-0-32bit libgmodule-2_0-0 libgmodule-2_0-0-32bit libgobject-2_0-0 libgobject-2_0-0-32bit libgthread-2_0-0 libgthread-2_0-0-32bit - Update to version 2.74.6: + Bugs fixed: glgo#GNOME/GLib!3239 Backport glgo#GNOME/GLib!3237 âFix safe_wspawnve #defineâ to glib-2-74. + Updated translations. ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024) * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch - Fix lpar got hung at grub after inactive migration (bsc#1207684) * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch - Rediff * safe_tpm_pcr_snapshot.patch - Patch supersceded * 0001-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch ==== lapack ==== Subpackages: libblas3 libcblas3 liblapack3 - Set -mfpmath=sse for the entire build for ix86 platforms on SLE/Leap. Since we build for x86_64, we know that sse is available. This helps to avoid effects from excess precision that can be seen in the test suite. On Factory we leave -ffloat-store for the test suite only as this option comes at a performance penalty. We may see precision related issues in the test suite with future compilers regardless. ==== libcbor ==== - Merge change from SLE15 SP4 made by pgajdos@suse.com on Tue Apr 5 14:36:56 UTC 2022: - do not build manual page for 15sp4, it does not succeed [bsc#1197743] - added sources + libcbor.3 ==== libfido2 ==== Version update (1.12.0 -> 1.13.0) - Version 1.13.0 (2023-02-20) * Support for linking against OpenSSL on Windows; gh#668. * New API calls: + fido_assert_empty_allow_list; + fido_cred_empty_exclude_list. * fido2-token: fix issue when listing large blobs. * Improved support for different fuzzing engines. ==== libjpeg-turbo ==== Version update (2.1.4 -> 2.1.5.1) Subpackages: libjpeg8 libjpeg8-32bit libturbojpeg0 - update to 2.1.5.1: * Fixed a regression introduced by 2.0 beta1[15] that caused a buffer overrun in the progressive Huffman encoder when attempting to transform a specially-crafted malformed 12-bit-per-component JPEG image into a progressive 12-bit-per-component JPEG image using a 12-bit-per-component build of libjpeg-turbo. * Fixed an issue whereby, when using a 12-bit-per-component build of libjpeg-turbo (-DWITH_12BIT=1), passing samples with values greater than 4095 or less than 0 to jpeg_write_scanlines() caused a buffer overrun or underrun in the RGB-to-YCbCr color converter. * Fixed a floating point exception that occurred when attempting to use the jpegtran -drop and -trim options to losslessly transform a specially-crafted malformed JPEG image. * Fixed an issue in tjBufSizeYUV2() whereby it returned a bogus result, rather than throwing an error, if the align parameter was not a power of 2. * Fixed a similar issue in tjCompressFromYUV() whereby it generated a corrupt JPEG image in certain cases, rather than throwing an error, if the align parameter was not a power of 2. * Fixed an issue whereby tjDecompressToYUV2(), which is a wrapper for tjDecompressToYUVPlanes(), used the desired YUV image dimensions rather than the actual scaled image dimensions when computing the plane pointers and strides to pass to tjDecompressToYUVPlanes(). This caused a buffer overrun and subsequent segfault if the desired image dimensions exceeded the scaled image dimensions. * Fixed an issue whereby, when decompressing a 12-bit-per-component JPEG image (-DWITH_12BIT=1) using an alpha-enabled output color space such as JCS_EXT_RGBA, the alpha channel was set to 255 rather than 4095. * Fixed an issue whereby the Java version of TJBench did not accept a range of quality values. * Fixed an issue whereby, when -progressive was passed to TJBench, the JPEG input image was not transformed into a progressive JPEG image prior to decompression. ==== libnotify ==== Version update (0.8.1 -> 0.8.2) Subpackages: libnotify-tools libnotify4 typelib-1_0-Notify-0_7 - Update to version 0.8.2: + Set new summary for library. + Docs: - Port to gi-docgen. - Fix URL to Desktop Notification Spec. + meson: - Replace deprecated meson.source_root() calls. - Bump minimum meson version to 0.58. + Introspection docs fixes. - Following upstreams port to gi-docgen, drop gtk-doc and add meson, xsltproc and pkgconfig(gi-docgen) BuildRequires. Also pass explicit man=true to meson, ensure we are building manpages. ==== libyui ==== Version update (4.4.8 -> 4.4.9) - Fixed build with GCC13 (-Woverloaded-virtual) (bsc#1208238) - build-all: Don't build bindings with --small (-s) - More docs for YShortcutManager (FAQ for our QA) - Merged PR #88 from krai: libyui-ncurses: Replace off64_t with off_t and stat64 with stat - 4.4.9 ==== libyui-ncurses ==== Version update (4.4.8 -> 4.4.9) - Fixed build with GCC13 (-Woverloaded-virtual) (bsc#1208238) - build-all: Don't build bindings with --small (-s) - More docs for YShortcutManager (FAQ for our QA) - Merged PR #88 from krai: libyui-ncurses: Replace off64_t with off_t and stat64 with stat - 4.4.9 ==== libyui-ncurses-pkg ==== Version update (4.4.8 -> 4.4.9) - Fixed build with GCC13 (-Woverloaded-virtual) (bsc#1208238) - build-all: Don't build bindings with --small (-s) - More docs for YShortcutManager (FAQ for our QA) - Merged PR #88 from krai: libyui-ncurses: Replace off64_t with off_t and stat64 with stat - 4.4.9 ==== libyui-qt ==== Version update (4.4.8 -> 4.4.9) - Fixed build with GCC13 (-Woverloaded-virtual) (bsc#1208238) - build-all: Don't build bindings with --small (-s) - More docs for YShortcutManager (FAQ for our QA) - Merged PR #88 from krai: libyui-ncurses: Replace off64_t with off_t and stat64 with stat - 4.4.9 ==== libyui-qt-graph ==== Version update (4.4.8 -> 4.4.9) - Fixed build with GCC13 (-Woverloaded-virtual) (bsc#1208238) - build-all: Don't build bindings with --small (-s) - More docs for YShortcutManager (FAQ for our QA) - Merged PR #88 from krai: libyui-ncurses: Replace off64_t with off_t and stat64 with stat - 4.4.9 ==== libyui-qt-pkg ==== Version update (4.4.8 -> 4.4.9) - Fixed build with GCC13 (-Woverloaded-virtual) (bsc#1208238) - build-all: Don't build bindings with --small (-s) - More docs for YShortcutManager (FAQ for our QA) - Merged PR #88 from krai: libyui-ncurses: Replace off64_t with off_t and stat64 with stat - 4.4.9 ==== mariadb ==== Version update (10.10.2 -> 10.10.3) Subpackages: libmariadbd19 mariadb-client mariadb-errormessages - Update to 10.10.3: https://mariadb.com/kb/en/mariadb-10-10-3-release-notes/ https://mariadb.com/kb/en/mariadb-10-10-3-changelog/ - Update mariadb.keyring ==== ndctl ==== Version update (75 -> 76) - Update to version 76 * daxctl-online-memory: fix a memblock enumeration off-by-one * daxctl-online-memory: tolerate non-memblock sysfs attrs that start with 'memory_' * cxl-monitor: new command to monitor CXL events - Add build fixes for TW and Leap + cxl-monitor-fix-include-paths-for-tracefs-and-tracee.patch + cxl-event-trace-use-the-wrapped-util_json_new_u64.patch ==== python-iniconfig ==== Version update (1.1.1 -> 2.0.0) - update to 2.0.0: * Drop Python 3.6 * Add Python 3.11 support * type hints added - use gh tarball for tests ==== python-lxml ==== - allow building against any libxml2 version in sle15 ==== python-pexpect ==== - Clean up SPEC file ==== python-typing_extensions ==== Version update (4.4.0 -> 4.5.0) - update to version 4.5.0 Details can be found here: https://pypi.org/project/typing-extensions/4.5.0/ - obsoletes _typed_dict_test_helper.py hack ==== snapper ==== Subpackages: libsnapper6 snapper-zypp-plugin - wait for existing btrfs quota rescans to finish (bsc#1206814) ==== spice-gtk ==== Version update (0.41 -> 0.42) Subpackages: libspice-client-glib-2_0-8 libspice-client-glib-helper libspice-client-gtk-3_0-5 typelib-1_0-SpiceClientGlib-2_0 typelib-1_0-SpiceClientGtk-3_0 - Update to version 0.42. Features and Issues addressed: * !115 - Fix compilation on win32 with EGL * !114 - spice-widget: fix hotspot position on Wayland/HiDPI * !112 - meson: Allow building on a Wayland-only environment * !110 - usb-backend: Fix devices not being enumerated * !108 - spicy: Add keyboard shortcuts for copy/paste sync * Require meson >= 0.56 ==== sudo ==== Version update (1.9.13 -> 1.9.13p1) Subpackages: sudo-plugin-python - Update to 1.9.13p1: Fixed a typo in the configure script that resulted in a line like â]: command not foundâ in the output. GitHub issue #238. Corrected the order of the C23 [[noreturn]] attribute in function prototypes. This fixes a build error with GCC 13. GitHub issue #239. The check make target misbehaved when there was more than one version of the UTF-8 C locale in the output of locale -a. GitHub issue #241. Removed a dependency on the AC_SYS_YEAR2038 macro in configure.ac. This was added in autoconf 2.72 but sudoâs configure.ac only required autoconf 2.70. GitHub issue #242. Relaxed the autoconf version requirement to version 2.69. ==== unbound ==== Version update (1.17.0 -> 1.17.1) Subpackages: libunbound8 unbound-anchor - Update to 1.17.1: * Features: - Expose 'statistics-inhibit-zero' as a configuration option; the default value retains Unbound's behavior. - Expose 'max-sent-count' as a configuration option; the default value retains Unbound's behavior. - Merge #461 from Christian Allred: Add max-query-restarts option. Exposes an internal configuration but the default value retains Unbound's behavior. - Merge #569 from JINMEI Tatuya: add keep-cache option to 'unbound-control reload' to keep caches. * Bug Fixes: - Merge #768 from fobser: Arithmetic on a pointer to void is a GNU extension. - In unit test, print python script name list correctly. - testcode/dohclient sets log identity to its name. - Clarify the use of MAX_SENT_COUNT in the iterator code. - Fix that cachedb does not store failures in the external cache. - Merge #767 from jonathangray: consistently use IPv4/IPv6 in unbound.conf.5. - Fix to ignore tcp events for closed comm points. - Fix to make sure to not read again after a tcp comm point is closed. - Fix #775: libunbound: subprocess reap causes parent process reap to hang. - iana portlist update. - Complementary fix for distutils.sysconfig deprecation in Python 3.10 to commit 62c5039ab9da42713e006e840b7578e01d66e7f2. - Fix #779: [doc] Missing documention in ub_resolve_event() for callback parameter was_ratelimited. - Ignore expired error responses. - Merge #720 from jonathangray: fix use after free when WSACreateEvent() fails. - Fix for the ignore of tcp events for closed comm points, preserve the use after free protection features. - Fix #782: Segmentation fault in stats.c:404. - Add SVCB and HTTPS to the types removed by 'unbound-control flush'. - Clear documentation for interactivity between the subnet module and the serve-expired and prefetch configuration options. - Fix #773: When used with systemd-networkd, unbound does not start until systemd-networkd-wait-online.service times out. - Merge #808: Wrap Makefile script's directory variables in quotes. - Fix to wrap Makefile scripts directory in quotes for uninstall. - Fix windows compile for libunbound subprocess reap comm point closes. - Update github workflows to use checkout v3. - Fix wildcard in hyperlocal zone service degradation, reported by Sergey Kacheev. * Add signature and keyring files - Tighten permissions (boo#1173619) - Add missing dependency: unbound-control-setup needs /usr/bin/openssl. ==== yast2-python-bindings ==== Version update (4.5.1 -> 4.5.2) - Misc fixes to examples; (bsc#1199343). - Fix python2 utf8 handling (python2 code wasn't displaying unicode strings); (bsc#1199348). - Change conversion of Py_None to YCP_Void instead of YCP_Null; (bsc#1199344). - 4.5.2 ==== yast2-security ==== Version update (4.5.5 -> 4.5.6) - bsc#1208492 - do not store empty values in CFA login.defs empty value to avoid crash when parsing according to login.defs lens - 4.5.6 ==== zstd ==== Version update (1.5.2 -> 1.5.4) Subpackages: libzstd1 libzstd1-32bit - update to 1.5.4: * perf: +20% faster huffman decompression for targets that can't compile x64 assembly * perf: up to +10% faster streaming compression at levels 1-2 * perf: +4-13% for levels 5-12 by optimizing function generation * pref: +3-11% compression speed for `arm` target * perf: +5-30% faster dictionary compression at levels 1-4 * perf: +10-20% cold dict compression speed by prefetching CDict tables * perf: +1% faster compression by removing a branch in ZSTD_fast_noDict * perf: Small compression ratio improvements in high compression mode * perf: small speed improvement by better detecting `STATIC_BMI2` for `clang` * perf: Improved streaming performance when `ZSTD_c_stableInBuffer` is set * cli: Asynchronous I/O for improved cli speed * cli: Change `zstdless` behavior to align with `zless` * cli: Keep original file if `-c` or `--stdout` is given * cli: Keep original files when result is concatenated into a single output with `-o` * cli: Preserve Permissions and Ownership of regular files * cli: Print zlib/lz4/lzma library versions with `-vv` * cli: Print checksum value for single frame files with `-lv` * cli: Print `dictID` when present with `-lv` * cli: when `stderr` is *not* the console, disable status updates, but preserve final summary * cli: support `--best` and `--no-name` in `gzip` compatibility mode * cli: support for `posix` high resolution timer `clock_gettime()`, for improved benchmark accuracy * cli: improved help/usage (`-h`, `-H`) formatting * cli: Fix better handling of bogus numeric values * cli: Fix input consists of multiple files _and_ `stdin` * cli: Fix tiny files passthrough * cli: Fix for `-r` on empty directory * cli: Fix empty string as argument for `--output-dir-*` * cli: Fix decompression memory usage reported by `-vv --long` * cli: Fix infinite loop when empty input is passed to trainer * cli: Fix `--adapt` doesn't work when `--no-progress` is also set * api: Support for Block-Level Sequence Producer * api: Support for in-place decompression * api: New `ZSTD_CCtx_setCParams()` function, set all parameters defined in a `ZSTD_compressionParameters` structure * api: Streaming decompression detects incorrect header ID sooner * api: Window size resizing optimization for edge case * api: More accurate error codes for busy-loop scenarios * api: Fix limit overflow in `compressBound` and `decompressBound` (#3362, #3373, Cyan4973) reported by @nigeltao * api: Deprecate several advanced experimental functions: streaming (#3408, @embg), copy * bug: Fix corruption that rarely occurs in 32-bit mode with wlog=25 * bug: Fix for block-splitter * bug: Fixes for Sequence Compression API * bug: Fix leaking thread handles on Windows * bug: Fix timing issues with cmake/meson builds * build: Allow user to select legacy level for cmake * build: Enable legacy support by default in cmake * build: Meson build script improvements * build: Add aarch64 to supported architectures for zstd_trace * build: support AIX architecture * build: Fix `ZSTD_LIB_MINIFY` build macro, which now reduces static library size by half * build: Fix Windows issues with Multithreading translation layer (#3364, #3380, @yoniko) and ARM64 target * build: Fix `cmake` script * doc: Updated man page, providing more details for `--train` mode * doc: Add decompressor errata document * misc: Enable Intel CET * misc: Fix `contrib/` seekable format * misc: Improve speed of the one-file library generator - rebase pzstd.1.patch