Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20241211 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: binutils gedit (48.0 -> 48.1) gstreamer (1.24.9 -> 1.24.10) gstreamer-plugins-bad (1.24.9 -> 1.24.10) gstreamer-plugins-base (1.24.9 -> 1.24.10) gstreamer-plugins-good (1.24.9 -> 1.24.10) gstreamer-plugins-libav (1.24.9 -> 1.24.10) gstreamer-plugins-ugly (1.24.9 -> 1.24.10) json-glib (1.10.0 -> 1.10.6) libgedit-gfls (0.2.0 -> 0.2.1) libgedit-gtksourceview (299.3.0 -> 299.4.0) libgedit-tepl (6.11.0 -> 6.12.0) libiscsi (1.20.0+git.20240530 -> 1.20.0+git.20241207) localsearch (3.8.1 -> 3.8.2) mcelog (201 -> 202) mutter (47.2 -> 47.3) nautilus (47.0+14 -> 47.1) nvidia-open-driver-G06-signed-cuda pixman plocate (1.1.22 -> 1.1.23) python-argcomplete (3.5.1 -> 3.5.2) subversion (1.14.4 -> 1.14.5) suse-module-tools (16.0.53 -> 16.0.54) === Details === ==== binutils ==== Subpackages: libctf-nobfd0 libctf0 - Update to current 2.43.1 branch [PED-10254, PED-10306]: * s390 - Add arch15 instructions * various fixes from upstream: PR32153, PR32171, PR32189, PR32196, PR32191, PR32109, PR32372, PR32387 - Adjusted binutils-2.43-branch.diff.gz. - Disable zstd-by-default again (needs adjustments in at least golang,llvm15,llvm17 first) - Add binutils-fix-branch.diff. - Check non-changing of flex/bison inputs only after applying branch and fix-branch diffs. - drop ld-relro.diff (relro is the default for some time) and it warns on avr spuriously (bsc#1233520) - Add loongarch64 as new target - Enable zstd compression algorithm (instead of zlib) for debug info sections by default. ==== gedit ==== Version update (48.0 -> 48.1) Subpackages: gedit-lang python3-gedit - Update to version 48.1: + Removed plugins: External Tools, Snippets, Python Console. + Text Size plugin: rewrite in C. + Remove the background-pattern feature (with the grid). + Fix bug on Wayland to unmaximize the window. + Code refactorings. + Fix compilation warning. + Updated translations. - Drop gedit-plugins-python-env.patch: No longer needed, nor applies. ==== gstreamer ==== Version update (1.24.9 -> 1.24.10) Subpackages: gstreamer-lang gstreamer-utils libgstreamer-1_0-0 typelib-1_0-Gst-1_0 - Update to version 1.24.10: + Highlighted bugfixes: - More than 40 security fixes across a wide range of elements following an audit by the GitHub Security Lab, including the MP4, Matroska, Ogg and WAV demuxers, subtitle parsers, image decoders, audio decoders and the id3v2 tag parser. - avviddec: Fix regression that could trigger assertions about width/height mismatches. - appsink and appsrc fixes. - closed caption handling fixes. - decodebin3 and urisourcebin fixes. - glupload: dmabuf: Fix emulated tiled import. - level: fix LevelMeta values outside of the stated range. - mpegtsmux, flvmux: fix potential busy looping with high cpu usage in live mode. - pipeline dot file graph generation improvements. - qt(6): fix criticals with multiple qml(6)gl{src,sink}. - rtspsrc: Optionally timestamp RTP packets with their receive times in TCP/HTTP mode to enable clock drift handling. - splitmuxsrc: reduce number of file descriptors used. - systemclock: locking order fixes. - v4l2: fix possible v4l2videodec deadlock on shutdown; 8-bit bayer format fixes. - x265: Fix build with libx265 version >= 4.1 after masteringDisplayColorVolume API change. - macOS: fix rendering artifacts in retina displays, plus ptp clock fixes. - cargo: Default to thin lto for the release profile (for faster builds with lower memory requirements). - Various bug fixes, build fixes, memory leak fixes, and other stability and reliability improvements. - Updated translations. + gstreamer: - allocator: Avoid integer overflow when allocating sysmem and avoid integer overflow in qtdemux theora extension parsing. - deviceprovider: fix leaking hidden providers. - gstreamer: prefix debug dot node names to prevent splitting. - pad: Never push sticky events in response to a FLUSH_STOP. - systemclock: Fix lock order violation and some cleanup. - utils: improve gst_util_ceil_log2(). - ptp: use ip_mreq instead of ip_mreqn for macos. - tracers: unlock leaks tracer if already tracking. ==== gstreamer-plugins-bad ==== Version update (1.24.9 -> 1.24.10) Subpackages: gstreamer-plugins-bad-lang libgstadaptivedemux-1_0-0 libgstanalytics-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstcuda-1_0-0 libgstinsertbin-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstmse-1_0-0 libgstphotography-1_0-0 libgstplay-1_0-0 libgstplayer-1_0-0 libgstsctp-1_0-0 libgsttranscoder-1_0-0 libgsturidownloader-1_0-0 libgstva-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 libgstwebrtcnice-1_0-0 - Update to version 1.24.10: + ccconverter: Don't override in_fps_entry when trying to take output. + ccutils fixes. + kmssink: Add mediatek auto-detection + mpegtsmux: Don't time out in live mode if no timestamped next buffer is available (fixes busy loop with high cpu usage). + mpegvideoparse: do not set delta unit flag on unknown frame type. + mxfmux: Fix off-by-one in the month when generating a timestamp for now. + timecodestamper: Don't fail the latency query in LTC mode if we have no framerate. + webrtc: don't crash on invalid bundle id. + x265: Allow building with x265-4.1 (after masteringDisplayColorVolume API change). + meson: Don't unconditionally invoke the libsoup subproject for tests. ==== gstreamer-plugins-base ==== Version update (1.24.9 -> 1.24.10) Subpackages: gstreamer-plugins-base-lang libgstallocators-1_0-0 libgstapp-1_0-0 libgstaudio-1_0-0 libgstfft-1_0-0 libgstgl-1_0-0 libgstpbutils-1_0-0 libgstriff-1_0-0 libgstrtp-1_0-0 libgstrtsp-1_0-0 libgstsdp-1_0-0 libgsttag-1_0-0 libgstvideo-1_0-0 typelib-1_0-GstAudio-1_0 typelib-1_0-GstPbutils-1_0 typelib-1_0-GstTag-1_0 typelib-1_0-GstVideo-1_0 - Update to version 1.24.10: + appsink: fix timeout logic for gst_app_sink_try_pull_sample(). + appsrc: Fix use-after-free when making buffer / buffer-lists writable. + audiostreamalign: Don't report disconts for every buffer if alignment-threshold is too small. + decodebin3: Unify collection switching checks. + discoverer: - Don't print channel layout for more than 64 channels. - Make sure the missing elements details array is NULL-terminated in a thread-safe way. - Fix segfault in race condition adding a new uri. + id3v2: Don't try parsing extended header if not enough data is available. + glupload: dmabuf: Fix emulated tiled import. + gl: - cocoa: fix rendering artifacts in retina displays. - meson: Don't use libdrm_dep in cc.has_header(). + oggstream: fix invalid ogg_packet->packet accesses, address invalid writes CVE. + opusdec: Set at most 64 channels to NONE position. + playbin: Fix caps leak in get_n_common_capsfeatures(). + playbin3: ERROR when setting new HLS URI with instant-uri=true. + sdp: Add debug categories for message and mikey modules. + ssaparse: Search for closing brace after opening brace. + splitmuxsrc: Convert part reader to a bin with a non-async bus. + subparse: Check for NULL return of strchr() when parsing LRC subtitles. + streamsynchronizer: Only send GAP events out of source pads. + urisourcebin: Also use event probe for HLS use-cases. + video-converter: Set TIME segment format on appsrc. + vorbisdec: Set at most 64 channels to NONE position. + Translation for gst-plugins-base 1.24.0 not sync-ed with Translation Project. + Updated translations. ==== gstreamer-plugins-good ==== Version update (1.24.9 -> 1.24.10) Subpackages: gstreamer-plugins-good-gtk gstreamer-plugins-good-lang - Update to version 1.24.10: + avisubtitle: Fix size checks and avoid overflows when checking sizes. + flvmux: Don't time out in live mode if no timestamped next buffer is available. + gdkpixbufdec: Check if initializing the video info actually succeeded. + jpegdec: Directly error out on negotiation failures. + level: - Fix integer overflow when filling LevelMeta. - Produces level value outside of Stated Range. + matroskademux: header parsing fixes. + qtdemux: - Header and sample table parsing fixes. - Avoid integer overflow in theora extension parsing. + qt(6)/material: ensure that we always update the context in setBuffer(). + rtspsrc: Optionally timestamp RTP packets with their receive times in TCP/HTTP mode. + rtp: Fix precision loss in gst_rtcp_ntp_to_unix(). + rtpfunnel: Ensure segment events are forwarded after flushs. + rtpmanager: don't map READWRITE in twcc header ext. + rtph264depay, rtph265depay: Fix various OOB reads / NULL pointer dereferences in parameter-set string handling. + shout2send: Unref event at the end of the event function. + udpsrc: protect cancellable from unlock/unlock_stop race. + v4l2object: - Fixed incorrect maximum value for int range. - Remove little endian marker on 8 bit bayer format names. + v4l2videodec: fix freeze race condition. + wavparse: Fix various (missing) size checks and other parsing problems. ==== gstreamer-plugins-libav ==== Version update (1.24.9 -> 1.24.10) - Update to version 1.24.10: + avcodecmap: Use avcodec_get_supported_config() instead of struct fields. + libav: viddec: provide details if meta has the wrong resolution. + avviddec: Unlock video decoder stream lock temporarily while finishing frames. ==== gstreamer-plugins-ugly ==== Version update (1.24.9 -> 1.24.10) Subpackages: gstreamer-plugins-ugly-lang - Update to version 1.24.10: + No changes, stable version bump only. ==== json-glib ==== Version update (1.10.0 -> 1.10.6) Subpackages: json-glib-lang libjson-glib-1_0-0 typelib-1_0-Json-1_0 - Update to version 1.10.6: + Allow single quoted strings when running in non-strict mode. + Allow escaped characters when running in non-strict mode. + Add missing nullable annotation. ==== libgedit-gfls ==== Version update (0.2.0 -> 0.2.1) - Update to version 0.2.1: + Updated translations. - Add new lang package via lang macros now that package is translated. Following this, add libgedit-gfls Provides to libgedit-gfls-1-0, make the lang package installable. ==== libgedit-gtksourceview ==== Version update (299.3.0 -> 299.4.0) Subpackages: libgedit-gtksourceview-lang typelib-1_0-GtkSource-300 - Update to version 299.4.0: + Remove the background-pattern (with the grid) feature. + Fix some crashes. + Fix GI annotation warnings. + Updated translations. - Add sover define. ==== libgedit-tepl ==== Version update (6.11.0 -> 6.12.0) Subpackages: libgedit-tepl-6-lang typelib-1_0-Tepl-6 - Update to version 6.12.0: + New and removed API: see the API reference. + Fix compilation warnings. + Updated translations. - Bump libver ==== libiscsi ==== Version update (1.20.0+git.20240530 -> 1.20.0+git.20241207) Subpackages: libiscsi10 libiscsi10-x86-64-v3 - Update to version 1.20.0+git.20241207: * fix: scan PDUs before exiting event_loop due to connect timedout * lib: finish event_loop on invalid fd * lib: reserve the fd on reconnect * Fix free pdu mismatch with alloc * Fix pdu indata of iser alloc and free mismatch * feat: add iscsi_reset_next_reconnect interface * For failing writes, show what is in the sector instead * libcunit1-dev is required for iscsi-test-cu to be build * install binaries and manpage to rpm * Add utils.h to dist_noinst_HEADERS ==== localsearch ==== Version update (3.8.1 -> 3.8.2) Subpackages: localsearch-lang - Update to version 3.8.2: + Fix database inconsistency resulting from some patterns of folder updates, and possible resulting CPU churn. ==== mcelog ==== Version update (201 -> 202) - Update to version 202: * mcelog: Wire up model-specific decoding for Clearwater Forest * mcelog: New model number for Clearwater Forest - PED-10052 ==== mutter ==== Version update (47.2 -> 47.3) Subpackages: mutter-lang - Update to version 47.3: + Fix maximized X11 when using native xwayland scaling + Fix blank screen in remote headless sessions + Fix touch-triggered popups being cancelled too early + Fix pointer cursor during compositor grabs + Fixed crash ==== nautilus ==== Version update (47.0+14 -> 47.1) Subpackages: gnome-shell-search-provider-nautilus libnautilus-extension4 nautilus-lang - Update to version 47.1: + Enhancements: Speed up thumbnail loading. + Bugfixes: - Do not force reload when error is present to avoid showing auth dialog. - Open folder in correct window during a DnD hover. - Show username in file properties if name is an empty string. - Various a11y fixes. - Fix number placement when making new name for directory. - Various pathbar fixes. - Show alert dialog when a symlink is broken. - Fix crashes when opening. - Various sidebar fixes. - Fix ctrl + scroll to zoom in and out of view. + Updated translations. - Drop revert-post-release-bump.patch: No longer needed. - Update to version 47.0+38: * gtk/placessidebar: Fix placeholder sometimes being stuck at the bottom * pathbar: Remove dir separator in front of some schemes * gtk/placessidebar: Don't open insensitive rows * gtk/nautilusgtkplacessidebar: Don't start drag timer if row can't be known * file-chooser: Focus file name entry when cancelling overwrite * list-base: Activate folder to open on drag instead of opening through application * properties: Hide extensions list box when empty * file: Ignore empty strings for owner name * general: Various a11y fixes * files-view: Fix leak * compress-dialog: Fix name entry activation * file-utilities: Ignore extension when making new name for directories * pathbar: Stop adding extra space to buttons * pathbar: Don't show the pathbar button menu in file chooser * ui: Add missing accel labels * preferences: Clear weak pointer * nautilus-mime-actions: Actually report when a symlink is broken * xdp-gnome/externalwindow: Call gtk_init before opening a display * xdp-gnome/externalwindow: Override current session with GDK_BACKEND * nautilus-properties-window: Set use-markup=False in several rows ==== nvidia-open-driver-G06-signed-cuda ==== - Do not set %{?linux_make_arch} for running make modules/modules-install - supersedes 550.135.patch - obsolete <=560.35.03 -cuda KMPs; mistakenly we released 560.35.03 for SP4 ... ==== pixman ==== - Increase test timeout on s390x. Several tests can be slow and sometimes times out in our builds. - Use autosetup macro. ==== plocate ==== Version update (1.1.22 -> 1.1.23) - tweak file plocate-updatedb.service: * remove ProtectSystem=full (plocate ignores bind mounts by default) * add additional hardening taken from upstream version - update to version 1.1.23: * Run updatedb with low scheduling priority * Avoid writing uninitialized header data * Don't leak file descriptor * Reset string explicitely to prevent undefined behavior * Suggest starting timer immediately instead of on reboot * Sandbox plocate-updatedb.service some more - remove ConditionACPower systemd condition. Updates are generally fast, so no excessive battery drainage has to be expected. Reason for missing updates on laptops is not easy to figure out. - remove rc* service link, sysV init has long gone. ==== python-argcomplete ==== Version update (3.5.1 -> 3.5.2) - Update to version 3.5.2 * Fix _parse_known_args monkeypatching. This fix is required to restore compatibility with Python 3.12.8 and 3.13.1. ==== subversion ==== Version update (1.14.4 -> 1.14.5) Subpackages: libsvn_auth_gnome_keyring-1-0 libsvn_auth_kwallet-1-0 subversion-bash-completion subversion-perl - Apache Subversion 1.14.5 * CVE-2024-46901: mod_dav_svn denial-of-service via control characters in paths (boo#1234317) - drop patches included upstream: * subversion-1.14.4-swig-4.3.0-swig-py.patch * subversion-1.14.4-swig-4.3.0-swig-rb.patch ==== suse-module-tools ==== Version update (16.0.53 -> 16.0.54) Subpackages: suse-module-tools-scriptlets * rpm-script: create dangling symlinks in kiwi environments (bsc#1234275)