Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Packages changed: Mesa-demo (8.2.0 -> 8.3.0) PackageKit (1.0.10 -> 1.0.11) boost chromaprint clamav duplicity (0.7.05 -> 0.7.06) ghostscript git (2.6.3 -> 2.6.4) glibc glibc grub2 gssdp (0.14.12 -> 0.14.12.1) gtk2 (2.24.28 -> 2.24.29) hplip (3.15.9 -> 3.15.11) kdebase4-workspace kdelibs4 libXfont libchamplain (0.12.11 -> 0.12.12) libfallocate libgusb (0.2.7 -> 0.2.8) libwebp (0.4.3 -> 0.4.4) mlterm (3.4.5 -> 3.6.1) mono-core openjpeg2 postfix python-httplib2 (0.9.1 -> 0.9.2) subversion (1.9.2 -> 1.9.3) suse-xsl-stylesheets (2.0.3 -> 2.0.4) tiff (4.0.4 -> 4.0.6) wget (1.17 -> 1.17.1) yast2-control-center (3.1.5 -> 3.1.6) zsh === Details === ==== Mesa-demo ==== Version update (8.2.0 -> 8.3.0) - Update to version 8.3.0 * This new mesa-demos release fixes the build issue against mesa 10.6 (Bug #91643) and picks up the latest glxinfo changes. - supersedes u_mesa-demos_missing-libs.diff - no longer disable egl build ==== PackageKit ==== Version update (1.0.10 -> 1.0.11) Subpackages: PackageKit-backend-zypp PackageKit-browser-plugin PackageKit-gstreamer-plugin PackageKit-gtk3-module libpackagekit-glib2-18 typelib-1_0-PackageKitGlib-1_0 - Update to version 1.0.11: + By popular demand, reintroduce the UpgradeSystem method. + Backends: - python: . Make PackagekitProgress an Iterable. . Set steps on PackagekitProgress instanciation. - zypp: Raise priority of ZYPP stack updates if a security patch is shadowed (bsc#951592). - dummy: Implement simulating UpgradeSystem and respect the transaction flags. - Lots of fixes for aptcc, hif and portage backends. + New Features: Allow the use of variadic functions in vala. + Bugfixes: Make pk_details_get_size documentation more specific. - Add PackageKit-zypp-buildfix.patch: Fix build of the zypp backend. ==== boost ==== Subpackages: boost-devel boost-license1_59_0 libboost_atomic1_59_0 libboost_chrono1_59_0 libboost_container1_59_0 libboost_context1_59_0 libboost_coroutine1_59_0 libboost_date_time1_59_0 libboost_filesystem1_59_0 libboost_graph1_59_0 libboost_graph_parallel1_59_0 libboost_iostreams1_59_0 libboost_locale1_59_0 libboost_log1_59_0 libboost_math1_59_0 libboost_mpi1_59_0 libboost_program_options1_59_0 libboost_python1_59_0 libboost_random1_59_0 libboost_regex1_59_0 libboost_serialization1_59_0 libboost_signals1_59_0 libboost_system1_59_0 libboost_test1_59_0 libboost_thread1_59_0 libboost_timer1_59_0 libboost_wave1_59_0 - Add boost-visibility.patch to make members of basic_xml_grammar<char> visible (boo#958150). - Fix redefinition of _docdir. ==== chromaprint ==== - Use pkg-config to detect ffmpeg in cmake chromaprint-ffmpeg-pkgconfig.patch - Add bcond_without to use ffmpeg unconditional- Remove broken libffmpeg requires in devel pkg ==== clamav ==== - Version 0.99 fixes bsc#957728. ==== duplicity ==== Version update (0.7.05 -> 0.7.06) - update to 0.7.06 * This adds support for AWS S3's newly announced Infrequent Access storage class and is intended to implement Blueprint: https://blueprints.launchpad.net/duplicity/+spec/aws-s3-std-ia-class * A new command line option, --s3-use-ia, is added, and boto backend will automatically use the correct storage class value depending on whether --s3-use-rrs and --s3-use-ia is set. Command line parser will prompt error if both --s3-use-ia and --s3-use-rrs are used together, as they conflict with each other. * Upgrade to newest version of pep8 and pylint * WindowsAzureMissingResourceError and WindowsAzureConflictError changed due to SDK changes. * make sure packages using python's tempfile create temp files in duplicity's temp dir * Fixed bug #1511308 - Cannot restore no-encryption, no-compression backup * Fix missing SWIFT_ENDPOINT_TYPE env var, bug #1519694. * Fix bug #1520691 - Shell Code Injection in hsi backend * Support new version of Azure Storage SDK * Adds a backend for BackBlaze's (currently beta) B2 backup service.- current FTP default is lftp; therefore recommend that instead of ncftp ==== ghostscript ==== Subpackages: ghostscript-devel ghostscript-x11 - Do not use library sources for freetype jpeg libpng tiff zlib from the Ghostscript upstream tarball because we prefer to use for long-established standard libraries the ones from SUSE in particular to automatically get SUSE security updates for standard libraries. In contrast we use e.g. lcms2 from the Ghostscript upstream tarball because this one is specially modified to work with Ghostscript so that we cannot use lcms2 from SUSE. - remove-zlib-h-dependency.patch removes dependency on zlib/zlib.h in makefiles as we do not use the zlib sources from the Ghostscript upstream tarball. ==== git ==== Version update (2.6.3 -> 2.6.4) Subpackages: git-core git-cvs git-daemon git-email git-gui git-svn git-web gitk - git 2.6.4: * Add support for talking http/https over socks proxy. * Allow all hooks to ignore their standard input, rather than having git complain of SIGPIPE. * Allow tilde-expansion in some http config variables. * Make git-p4 work on a detached head. * Add "git rebase --no-autostash" * Allow "git interpret-trailers" to run outside of a Git repository. ==== glibc ==== Subpackages: glibc-32bit glibc-locale-32bit - reinitialize-dl_load_write_lock.patch: Reinitialize dl_load_write_lock on fork (BZ #19282) ==== glibc ==== Subpackages: glibc-devel glibc-extra glibc-info glibc-locale nscd - reinitialize-dl_load_write_lock.patch: Reinitialize dl_load_write_lock on fork (BZ #19282) ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - Add 0001-Fix-security-issue-when-reading-username-and-passwor.patch Fix for CVE-2015-8370 [boo#956631]- Update grub2-efi-xen-chainload.patch - fix copying of Linux kernel and initrd to ESP (boo#958193)- Rename grub2-xen.cfg to grub2-xen-pv-firmware.cfg (boo#926795)- grub2-xen.cfg: to handle grub1 menu.lst in PV guest (boo#926795)- Expand list of grub.cfg search path in PV Xen guest for systems installed to btrfs snapshot. (bsc#946148) (bsc#952539) * modified grub2-xen.cfg - drop grub2-fix-Grub2-with-SUSE-Xen-package-install.patch (bsc#774666) ==== gssdp ==== Version update (0.14.12 -> 0.14.12.1) - Update to version 0.14.12.1: + Update m4 macros from autoconf-archive (bgo#758778). ==== gtk2 ==== Version update (2.24.28 -> 2.24.29) Subpackages: gtk2-data gtk2-devel gtk2-immodule-amharic gtk2-immodule-inuktitut gtk2-immodule-thai gtk2-immodule-vietnamese gtk2-immodule-xim gtk2-tools gtk2-tools-32bit libgtk-2_0-0 libgtk-2_0-0-32bit typelib-1_0-Gtk-2_0 - Update to version 2.24.29: + OS X: Partial aspect ratio support. + Bugs fixed: bgo#345345, bgo#745127, bgo#749507, bgo#752638, bgo#753644, bgo#753691, bgo#753992, bgo#754046. + Updated translations. - Drop gtk2-gdk_region_destroy_instead_of_cairo_region_destroy: fixed upstream. ==== hplip ==== Version update (3.15.9 -> 3.15.11) Subpackages: hplip-hpijs hplip-sane - Fix build on SLE11 by removing not required and wrongly installed selinux support config - Remove another nested conditions that are the same- Do not bother with fsf address fix, if they move again or if the package update it we would needlessly fail - Do not bother with one condition that is equal to the following one- Version upgrade to 3.15.11: Significant Changes: - Provided custom apparmor profiles and selinux policy for HPLIP. - Supported auto-discovery of network scanners. Added Support for the Following New Printers: HP Color LaserJet Pro MFP M274n HP LaserJet Enterprise M506 series HP Laserjet Enterprise M506n HP Laserjet Enterprise M506dn HP Laserjet Enterprise M506x HP Laserjet Enterprise M506dh HP Color Laserjet Pro M452dn HP Color Laserjet Pro M452dw HP Color Laserjet Pro M452nw HP Laserjet Pro MFP M426fdn HP Laserjet Pro MFP M426fdw HP Laserjet Pro MFP M427dn HP Laserjet Pro MFP M427fdw HP Laserjet Pro MFP M426dw HP Laserjet Pro MFP M427dw HP Laserjet Enterprise MFP M527dn HP Laserjet Enterprise MFP M527f HP Laserjet Enterprise Flow MFP M527c HP Laserjet Enterprise Flow MFP M527z HP Color LaserJet Enterprise MFP M577 Series HP Color LaserJet Enterprise MFP M577dn HP Color LaserJet Enterprise MFP M577f HP Color LaserJet Enterprise Flow MFP M577z HP Color LaserJet Enterprise Flow MFP M577c HP LaserJet Pro M402-M403 series HP LaserJet Pro M402-M403 n-dn series HP LaserJet Pro M402dw HP LaserJet Pro M402n HP LaserJet Pro M402dn HP LaserJet Pro M402d HP LaserJet Pro M403n HP LaserJet Pro M403dw HP LaserJet Pro M403dn HP LaserJet Pro M403d HP Color Laserjet Pro MFP M477fnw HP Color Laserjet Pro MFP M477fdn HP Color Laserjet Pro MFP M477fdw HP Envy 5543 All-in-One Printer HP Envy 5544 All-in-One Printer HP Envy 5546 All-in-One Printer HP Envy 5542 e-All-in-One Printer HP DeskJet 2134 All-in-One Printer HP DeskJet 3633 All-in-One Printer HP DeskJet 3634 All-in-One Printer HP OfficeJet 4654 All-in-One Printer HP ENVY 4524 All-in-One Printer HP ENVY 4523 All-in-One Printer HP ENVY 4520 All-in-One Printer HP DeskJet Ink Advantage Ultra 4720 All-in-One Printer series HP DeskJet Ink Advantage Ultra 4729 All-in-One Printer HP DeskJet Ink Advantage 5640 All-in-One Printer series HP DeskJet Ink Advantage 5645 All-in-One Printer HP DeskJet Ink Advantage 4675 All-in-One HP DeskJet Ink Advantage 4676 All-in-One HP DeskJet Ink Advantage 4535 All-in-One HP DeskJet Ink Advantage 4536 All-in-One HP DeskJet Ink Advantage 5570 All-in-One HP DeskJet Ink Advantage 5575 All-in-One HP Scanjet Pro 3500 f1 Flatbed Scanner HP ENVY 5531 e-All-in-One Printer HP ENVY 5532 e-All-in-One Printer HP ENVY 5534 e-All-in-One Printer HP ENVY 5536 e-All-in-One Printer HP ENVY 5539 e-All-in-One Printer Added support for the following new Distro's: - Ubuntu 15.10 - Fedora 23 - OpenSUSE 42.1 Issues fixed: - Provided knowledge base article to unblock the ports and enable SLP and mDNS services using opensuse firewall utility at http://hplipopensource.com/node/375 - remove patch104: do_not_open_mdns_port.diff, no more needed because since HPLIP 3.15.11 there is no longer "open_mdns_port=..." in distros.dat for any "SUSE" distribution - insert check for Leap so Leap can use his own cups - insert check for 13.2 and Leap for udev-dirs because of rpmlint-error: directory not owned by package - fix rpmlint-error: incorrect fsf-address ==== kdebase4-workspace ==== Subpackages: kdebase4-workspace-libs python-kdebase4 - Replace libusb-devel with pkgconfig(libusb-1.0); ensure kdebase4-workspace build against libusb-1.0 ==== kdelibs4 ==== Subpackages: kdelibs4-core kdelibs4-doc libkde4 libkde4-devel libkdecore4 libkdecore4-devel libksuseinstall1 - Use yast2 sw_single package instead of invoking zypper in interactive mode. bnc#858018 ==== libXfont ==== Subpackages: libXfont-devel libXfont1 - U_bdfReadCharacters-Allow-negative-DWIDTH-values.patch Negative DWIDTH is legal. This was broken by the fix for CVE-2015-1804. Fixed upstream with commit 1a73d6 (boo#958383). ==== libchamplain ==== Version update (0.12.11 -> 0.12.12) Subpackages: libchamplain-0_12-0 typelib-1_0-Champlain-0_12 - Update to version 0.12.12: + Add possibility to export maps. + Fix map getting blank after some mouse actions. + Fix tile loading at higher zoom levels. + Improve mouse wheel zoom handling. ==== libfallocate ==== - Cleanup spec file with spec-cleaner - Update dependencies ==== libgusb ==== Version update (0.2.7 -> 0.2.8) - Update to version 0.2.8: + New Features: - Add a PERMISSION_DENIED error enum. - Add a thin glib wrapper around a libusb_interface_descriptor. - Add g_usb_device_get_interfaces(). - Add g_usb_device_get_release(). - Add g_usb_device_set_interface_alt(). + Bugfix: Ignore the not-found error when resetting a device. ==== libwebp ==== Version update (0.4.3 -> 0.4.4) Subpackages: libwebp-devel libwebp5 libwebpdecoder1 libwebpdemux1 libwebpmux1 - Update to version 0.4.4 * rescaling out-of-bounds read fix (issue #254) * various build fixes and improvements (issues #253, #259, #262, #267, #268) * container documentation update * gif2webp transparency fix (issue #245) - Add freeglut-devel build requires ==== mlterm ==== Version update (3.4.5 -> 3.6.1) - updated to 3.6.1: * Support DECDHL and DECDWL. * Add 'autohide' value to 'scrollbar_mode' option * Disable conversion from Unicode to ISCII if use_ctl = false. * Support ssh2 connection on framebuffer. * Set XID of text screen instead of top window as the value of WINDOWID environmental variable. * Add "geometry" to OSC 5379. * Add "mlconfig" to OSC 5379. * Add "Columns" and "Rows" to "Others" tab of mlconfig. etc., see en/ReleaseNote for details ==== mono-core ==== Subpackages: libmono-2_0-1 libmono-2_0-devel libmonoboehm-2_0-1 libmonoboehm-2_0-devel libmonosgen-2_0-1 mono-data mono-data-sqlite mono-extras mono-mvc mono-wcf mono-web mono-winforms mono-winfxcore - retrieve from upstream all ppc patches not yet in 4.2.1 tarball ppc_instruction_length_of_atomic_add_i4_is_28.patch fix_atomic_add_i4_support_for_32bit_ppc.patch basic_changes_powerpc_be.patch (already done yesterday) ppc_add_monocontext_and_async_callback.patch fix_passing_struct_parms_per_elf_abiv2.patch update_elf_abiv2_testcases.patch partial_sharing_false_4_powerpc.patch fix_exception_when_reading_from_timezone_file.patch- new basic_changes_powerpc_be.patch to build ppc64 archi and disable ppc build that still segfault. ==== openjpeg2 ==== - Add a pkg-config dependency; expand pkgconfig ==== postfix ==== Subpackages: postfix-doc - bnc#958329 postfix fails to start when openslp is not installed ==== python-httplib2 ==== Version update (0.9.1 -> 0.9.2) - Update to version 0.9.2: * Fix incorrect ResponseNotReady exceptions, retry on transient errors.- Include 0.9.1 in SLE 12 (FATE#319904, bsc#954690) ==== subversion ==== Version update (1.9.2 -> 1.9.3) Subpackages: libsvn_auth_gnome_keyring-1-0 libsvn_auth_kwallet-1-0 subversion-bash-completion subversion-devel subversion-perl subversion-python subversion-server subversion-tools - Apache Subversion 1.9.3 This release fixes two security issues: * Remotely triggerable heap overflow and out-of-bounds read caused by integer overflow in the svn:// protocol parser. CVE-2015-5259 [boo#958299] * Remotely triggerable heap overflow and out-of-bounds read in mod_dav_svn caused by integer overflow when parsing skel- encoded request bodies. CVE-2015-5343 [boo#958300] Other changes: * svn: fix possible crash in auth credentials cache * cleanup: avoid unneeded memory growth during pristine cleanup * diff: fix crash when repository is on server root * fix translations for commit notifications * ra_serf: fix crash in multistatus parser * svn: report lock/unlock errors as failures * svn: cleanup user deleted external registrations * svn: allow simple resolving of binary file text conflicts * svnlook: properly remove tempfiles on diff errors * ra_serf: report built- and run-time versions of libserf * ra_serf: set Content-Type header in outgoing requests * svn: fix merging deletes of svn:eol-style CRLF/CR files * ra_local: disable zero-copy code path * mod_authz_svn: fix authz with mod_auth_kerb/mod_auth_ntlm * mod_dav_svn: fix display of process ID in cache statistics * mod_dav_svn: use LimitXMLRequestBody for skel-encoded requests * svnadmin dump: preserve no-op changes * fsfs: avoid unneeded I/O when opening transactions * javahl: fix ABI incompatibilty with 1.8 * javahl: allow non-absolute paths in SVNClient.vacuum * fix patch filter invocation in svn_client_patch() * add @since information to config defines * fix running the tests in compatibility mode * clarify documentation of svn_fs_node_created_rev() * fix overflow detection in svn_stringbuf_remove and _replace * don't ignore some of the parameters to svn_ra_svn_create_conn3 ==== suse-xsl-stylesheets ==== Version update (2.0.3 -> 2.0.4) Stable release DAPS 2.0.4: Find issues in our GitHub tracker at https://github.com/openSUSE/suse-xsl/issues/NUMBER * Schema - Allow constant and see (inside `<indexterm>`); make db.all.blocks zero or more (*) for question (fbebfb6) - Remove XLinks from DB5 elements (suse-xsl #99) - Disallow db.all.blocks in lists (suse-xsl #100) - Remove `<menuchoice>` from guiinlines (Novdoc) (a049b85) - Allow `<menuchoice>` in titles (Novdoc) (975b8d6) * Stylesheets (PDF) - "unbolded" admonition titles (suse-xsl #46) - Odd space in footer where `<productname>` used to be, `<productname>` not displayed on book title page (suse-xsl #50) - Fix style of `<sect5>` titles (suse-xsl #52, bsc#955663) - FOP don't like empty `<fo:table-cell>`s (suse-xsl #97) - Make `<remark>` handling a little more elegant - Attribute sets: fix logic for replacing bold/italic in CJK languages * Stylesheets (XHTML) - Make Callouts "uncopyable" (suse-xsl #55) - Don't link inline images (suse-xsl #65) - Publication date is incorrectly capitalized (suse-xsl #70) - Create better plain-text output via DAPS (suse-xsl #101) - debug.filename-id: Use `xml:id` for metadata - Various fixes for JS code for tracker * Common Stylesheet Changes - Style for `<package>` (issue #49) - xrefs to variablelists in another book is broken (suse-xsl #73) - Trim spaces/newlines at beginning/end of verbatim elements (suse-xsl #53) - Fix bugtracker for db4 (suse-xsl #102) ==== tiff ==== Version update (4.0.4 -> 4.0.6) Subpackages: libtiff-devel libtiff5 libtiff5-32bit - Update to version 4.0.6 * Supports CMake 2.8.9 and later. * Add missing file which wasn't being distributed, causing unit tests to fail. * Make shared/static library building configurable. * CMake reads all version information directly from configure.ac to avoid duplication of values. * CMake builds are now included in 'distcheck' target. * Autotools 'make distcheck' now tests the CMake-based build if CMake is available. * Fixes to avoid undefined behaviour of signed types (C standard compliance). * Fixes to avoid possible isses when casting to unsigned char. * Fixes to avoid undefined behaviour with shifts. * Fix generation of output with 16 bit or 32 bit integer, when byte swapping is needed, in horizontal predictor (#2521). * Fix decoding when there is a single pixel to decode (unlikely case...) and byte swapping is involved. * Add add explicit masking with 0xff before casting to uchar in floating-point horizontal differencing and accumulation routines. * Eliminate requirement for and use of 64-bit constant values. * tiffgt : Silence glut API deprecation warnings on MacOS X. * fax2ps : Detect failure to write to temporary file. - Changes from version 4.0.5 * Support for configure/build using CMake. * Support for large (> 2GB) files under Microsoft Windows. * Configuration and building using CMake is now supported under Microsoft Windows and on Unix-type systems. * Test for and use fseeko() if it is available. This allows supporting large files on Unix-type systems with a 32-bit 'long' type and a 64-bit 'off_t' type. * tiffiop.h: Macros added to use 64-bit equivalents for all standard I/O and POSIX APIs used by libtiff and its tools which are limited to 2GB in Windows builds. Note that these 64-bit equivalents were introduced by the CRT provided with Visual Studio 2005 and if the necessary CRT is not installed on the target computer, the program will not run. The wrapper macros will not be activated unless the definition _MSC_VER is at least 1400 or __MSVCRT_VERSION__ is at least 0x800. * tif_unix.c: Updated to support large files under Microsoft Windows. This makes tif_unix.c a completely viable candidate for use under Windows (in spite of its name) if the CRT is modern enough. Please note that tif_win32.c already supported large files, but only 'tiffinfo' and 'tiffdump' made any provision to support large files under Windows. * _tiffReadProc() and _tiffWriteProc() are modified to chunk I/O to a maximum size of 2GB for extremely large I/O requests. This surmounts limitations in the Microsoft Windows read() and write() APIs (which are limited to the range of a 32-bit 'int'), and may avoid poor behavior with extremely large I/O requests on other systems. * Updated to use I/O wrapper macros from tiffiop.h in order to support large files under Microsoft Windows. ==== wget ==== Version update (1.17 -> 1.17.1) - GNU wget 1.17.1: * Fix compile error when IPv6 is disabled or SSL is not present * Fix HSTS memory leak * Fix progress output in non-C locales * Fix SIGSEGV when -N and --content-disposition are used together * Add --check-certificate=quiet to tell wget to not print any warning about invalid certificates ==== yast2-control-center ==== Version update (3.1.5 -> 3.1.6) Subpackages: yast2-control-center-qt - Change the yast2-control-center-qt dependency on libyui-qt7 from Recommensd to Requires (bnc#958650) - Added support for KDE5 (added Supplements plasma5-session dependency) - 3.1.6- Recommend latest libyui-qt7, not obsolete libyui-qt5 in .spec file (bsc#952249) ==== zsh ==== - Add gpg signature Packages removed: jhead pfscalibration pfstmo Packages added: bundle-lang-common-sv -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org