Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20220203 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ImageMagick (7.1.0.19 -> 7.1.0.22) apache2 apache2-manual apache2-prefork apache2-utils glslang (11.7.1 -> 11.8.0) gnome-terminal java-11-openjdk (11.0.13.0 -> 11.0.14.0) kbd kdump (1.0 -> 1.0.2) lcms2 (2.12 -> 2.13) ldns (1.7.1 -> 1.8.1) libcap (2.62 -> 2.63) libnvme (1.0~0 -> 1.0~2) libopenmpt (0.5.14 -> 0.6.1) libplacebo (4.192.0 -> 4.192.1) libwebp (1.2.1 -> 1.2.2) libzypp (17.28.8 -> 17.29.3) multipath-tools (0.8.8+13+suse.79c3556f -> 0.8.8+45+suse.628d603e) nvme-cli (2.0~0 -> 2.0~2) openblas_pthreads orca (41.1 -> 41.2) pipewire (0.3.44 -> 0.3.45) plymouth python-black python-boto3 (1.20.40 -> 1.20.46) python-botocore (1.23.40 -> 1.23.46) python-dnspython (2.1.0 -> 2.2.0) python-fixtures python-pandas (1.3.5 -> 1.4.0) python-psutil python-pyudev python-scipy (1.6.3 -> 1.7.3) python-tomli (1.2.1 -> 2.0.0) qtkeychain-qt5 ruby3.1 rubygem-ed25519 (1.2.4 -> 1.3.0) rubygem-excon (0.85.0 -> 0.90.0) rubygem-fast_gettext (2.0.3 -> 2.2.0) rubygem-ffi (1.15.4 -> 1.15.5) rubygem-formatador (1.1.0 -> 0.3.0) rubygem-rb-kqueue (0.2.6 -> 0.2.7) rubygem-rspec-expectations (3.10.1 -> 3.10.2) salt samba (4.15.4+git.224.dea2f6dc836 -> 4.15.5+git.328.f1f29505d84) sane-backends (1.0.32 -> 1.1.1) sendmail shaderc (2021.3 -> 2022.0) sudo (1.9.8p2 -> 1.9.9) tcsh (6.23.02 -> 6.24.00) tevent vsftpd wireplumber yast2-bootloader (4.4.15 -> 4.4.16) yast2-dns-server (4.4.0 -> 4.4.1) yast2-installation (4.4.37 -> 4.4.39) yast2-kdump (4.4.2 -> 4.4.3) yast2-network (4.4.35 -> 4.4.36) yast2-printer (4.4.1 -> 4.4.2) yast2-samba-server (4.4.1 -> 4.4.2) yast2-trans (84.87.20220123.256c7f91b3 -> 84.87.20220131.0700dd3449) zypper (1.14.50 -> 1.14.51) === Details === ==== ImageMagick ==== Version update (7.1.0.19 -> 7.1.0.22) Subpackages: ImageMagick-config-7-SUSE ImageMagick-extra libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - version update to 7.1.0.22 * limit colorname length to avoid possible DoS * restore MPRI URI in SVG * PDF now shows the correct Unicode title (reference https://github.com/ImageMagick/ImageMagick/issues/4771). * optimize Fx image statistics (reference https://github.com/ImageMagick/ImageMagick/discussions/4533). * Support seamless blending of a foreground and background image. * Support saliency blending of a foreground and background image. * Support QOI image format. * Perist frame delay when converting APNG to Webp (reference https://github.com/ImageMagick/ImageMagick/issues/4704). * -fx performance increase by one or two orders of magnitude (reference https://github.com/ImageMagick/ImageMagick/discussions/4533). * Add support for formatted text (reference https://github.com/ImageMagick/ImageMagick/discussions/4515). ==== apache2 ==== - ssl-global.conf: set SSLCipherSuite to PROFILE=SYSTEM instead of DEFAULT_SUSE [jsc#SLE-22561] - set also SSLProxyCipherSuite to PROFILE=SYSTEM - modified sources % apache2-ssl-global.conf ==== apache2-manual ==== - ssl-global.conf: set SSLCipherSuite to PROFILE=SYSTEM instead of DEFAULT_SUSE [jsc#SLE-22561] - set also SSLProxyCipherSuite to PROFILE=SYSTEM - modified sources % apache2-ssl-global.conf ==== apache2-prefork ==== - ssl-global.conf: set SSLCipherSuite to PROFILE=SYSTEM instead of DEFAULT_SUSE [jsc#SLE-22561] - set also SSLProxyCipherSuite to PROFILE=SYSTEM - modified sources % apache2-ssl-global.conf ==== apache2-utils ==== - ssl-global.conf: set SSLCipherSuite to PROFILE=SYSTEM instead of DEFAULT_SUSE [jsc#SLE-22561] - set also SSLProxyCipherSuite to PROFILE=SYSTEM - modified sources % apache2-ssl-global.conf ==== glslang ==== Version update (11.7.1 -> 11.8.0) - Update to release 11.8.0 * Add support for SPIR-V 1.6 * Add support for Vulkan 1.3 * Add --hlsl-dx-position-w option - Delete glslang-big-endian_1.patch, glslang-big-endian_2.patch, glslang-big-endian_3.patch (merged) ==== gnome-terminal ==== Subpackages: gnome-shell-search-provider-gnome-terminal gnome-terminal-lang nautilus-extension-terminal - Add 9a168cc23962ce9fa106dc8a40407d381a3db403.patch: Fix build with meson 0.61.0 and newer. ==== java-11-openjdk ==== Version update (11.0.13.0 -> 11.0.14.0) Subpackages: java-11-openjdk-headless - Update to upstream tag jdk-11.0.14+9 (January 2022 CPU) * New features + JDK-8248238: Implementation: JEP 388: Windows AArch64 Support * Security fixes + JDK-8217375: jarsigner breaks old signature with long lines in manifest + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if zip has dir named "." inside + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM serialization + JDK-8268488: More valuable DerValues + JDK-8268494: Better inlining of inlined interfaces + JDK-8268512: More content for ContentInfo + JDK-8268795: Enhance digests of Jar files + JDK-8268801: Improve PKCS attribute handling + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String matching + JDK-8269151: Better construction of EncryptedPrivateKeyInfo + JDK-8269944: Better HTTP transport redux + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification of scan methods + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String constructions + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction of Identity maps + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of URIs + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser configuration management + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of XML entities + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file handling + JDK-8271962: Better TrueType font loading + JDK-8271968: Better canonical naming + JDK-8271987: Manifest improved manifest entries + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array indexing + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar Verification + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms for transport + JDK-8272272: Enhance jcmd communication + JDK-8272462: Enhance image handling + JDK-8273290: Enhance sound handling + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image support + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP processing + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of image files + JDK-8279541: Improve HarfBuzz * Other changes + JDK-6849922: java/awt/Choice/ChoiceKeyEventReaction/ /ChoiceKeyEventReaction.html fails + JDK-7105119: [TEST_BUG] [macosx] In test UIDefaults.toString() must be called with the invokeLater() + JDK-7151826: [TEST_BUG] [macosx] The test javax/swing/JPopupMenu/4966112/bug4966112.java not for mac + JDK-7179006: [macosx] Print-to-file doesn't work: printing to the default printer instead + JDK-8015602: [macosx] Test javax/swing/SpringLayout/4726194/ /bug4726194.java fails on MacOSX + JDK-8034084: nsk.nsk/jvmti/ThreadStart/threadstart003 Wrong number of thread end events + JDK-8039261: [TEST_BUG]: There is not a minimal security level in Java Preferences and the TestApplet.html is blocked. + JDK-8047218: [TEST_BUG] java/awt/FullScreen/AltTabCrashTest/ /AltTabCrashTest.java fails with exception + JDK-8075909: [TEST_BUG] The regression-swing case failed as it does not have the 'Open' button when select 'subdir' folder with NimbusLAF + JDK-8078219: Verify lack of @test tag in files in java/net test directory + JDK-8080569: java/lang/ProcessBuilder/DestroyTest.java fails with "RuntimeException: Process terminated prematurely" + JDK-8081652: [TESTBUG] java/lang/management/ThreadMXBean/ /ThreadMXBeanStateTest.java timed out intermittently + JDK-8129310: java/net/Socket/asyncClose/AsyncClose.java fails intermittently + JDK-8131745: java/lang/management/ThreadMXBean/ /AllThreadIds.java still fails intermittently + JDK-8136517: [macosx] Test java/awt/Focus/8073453/ /AWTFocusTransitionTest.java fails on MacOSX + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/ /4251579/bug4251579.java failure due to timing + JDK-8143021: [TEST_BUG] Test javax/swing/JColorChooser/ /Test6541987.java fails + JDK-8159597: [TEST_BUG] closed/javax/swing/JPopupMenu/4760494/ /bug4760494.java leaves key pressed + JDK-8159904: [TEST_BUG] Failure on solaris of java/awt/Window/MultiWindowApp/MultiWindowAppTest.java + JDK-8163086: java/awt/Window/TranslucentJAppletTest/ /TranslucentJAppletTest.java fails + JDK-8165828: [TEST_BUG] The reg case: javax/swing/plaf/metal/ /MetalIcons/MetalHiDPIIconsTest.java failed as No Metal Look and Feel + JDK-8169953: JComboBox/8057893: ComboBoxEdited event is not fired! on Windows + JDK-8169954: JFileChooser/8021253: java.lang.RuntimeException: Default button is not pressed + JDK-8169959: javax/swing/JTable/6263446/bug6263446.java: Table should be editing + JDK-8171381: [TEST_BUG] [macos] javax/swing/JPopupMenu/ /7156657/bug7156657.java fails on OS X + JDK-8171998: javax/swing/JMenu/4692443/bug4692443.java fails on Windows + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java fails intermittently + JDK-8179880: Refactor javax/security shell tests to plain java tests + JDK-8180568: Refactor javax/crypto shell tests to plain java tests + JDK-8180569: Refactor sun/security/krb5/ shell tests to plain java tests + JDK-8180571: Refactor sun/security/pkcs11 shell tests to plain java tests and fix failures + JDK-8180573: Refactor sun/security/tools shell tests to plain java tests + JDK-8187649: ArrayIndexOutOfBoundsException in java.util.JapaneseImperialCalendar + JDK-8190753: (zipfs): Accessing a large entry (> 2^31 bytes) leads to a negative initial size for ByteArrayOutputStream + JDK-8195703: BasicJDWPConnectionTest.java: 'App exited unexpectedly with 2' + JDK-8196096: javax/swing/JPopupMenu/6580930/bug6580930.java fails + JDK-8197560: test javax/swing/JTree/8003400/Test8003400.java fails + JDK-8197800: Test java/awt/Focus/NonFocusableWindowTest/ /NoEventsTest.java fails on Windows + JDK-8197811: Test java/awt/Choice/PopupPosTest/ /PopupPosTest.java fails on Windows + JDK-8198616: java/awt/Focus/6378278/InputVerifierTest.java fails on mac + JDK-8198617: java/awt/Focus/6382144/EndlessLoopTest.java fails on mac + JDK-8198619: java/awt/Focus/FocusTraversalPolicy/ /ButtonGroupLayoutTraversal/ButtonGroupLayoutTraversalTest.java fails on mac + JDK-8198623: java/awt/KeyboardFocusmanager/TypeAhead/ /EnqueueWithDialogButtonTest/EnqueueWithDialogButtonTest.java fails on mac + JDK-8198624: java/awt/KeyboardFocusmanager/TypeAhead/ /SubMenuShowTest/SubMenuShowTest.html fails on mac + JDK-8199138: Add RISC-V support to Zero + JDK-8199529: javax/swing/text/Utilities/8142966/ /SwingFontMetricsTest.java fails on windows + JDK-8201224: Make string buffer size dynamic in mlvmJvmtiUtils.c + JDK-8202342: [Graal] fromTonga/nsk/jvmti/unit/ /FollowReferences/followref003/TestDescription.java fails with "Location mismatch" errors + JDK-8204161: [TESTBUG] auto failed with the "Applet thread threw exception: java.lang.UnsupportedOperationException" exception + JDK-8206085: Refactor langtools/tools/javac/versions/Versions.java + JDK-8207936: TestZipFile failed with java.lang.AssertionError exception + JDK-8208242: Add @requires to vmTestbase/gc/g1 tests + JDK-8209611: use C++ compiler for hotspot tests + JDK-8210182: Remove macros for C compilation from vmTestBase but non jvmti + JDK-8210198: Clean up JNI_ENV_ARG for vmTestbase/jvmti/Get[A-F] tests + JDK-8210205: build fails on AIX in hotspot cpp tests (for example getstacktr001.cpp) + JDK-8210242: [TESTBUG] vmTestbase/nsk/stress/jni/ /jnistress001.java crashes with EXCEPTION_ACCESS_VIOLATION on windows-x86 + JDK-8210353: Move java/util/Arrays/TimSortStackSize2.java back to tier1 + JDK-8210385: Clean up JNI_ENV_ARG and factorize the macros for vmTestbase/jvmti[A-N] tests + JDK-8210392: assert(Compile::current()->live_nodes() < Compile::current()->max_node_limit()) failed: Live Node limit exceeded limit + JDK-8210395: Add doc to SecurityTools.java + JDK-8210429: Clean up JNI_ENV_ARG for vmTestbase/jvmti/Get[G-Z] tests + JDK-8210481: Remove #ifdef cplusplus from vmTestbase + JDK-8210593: Clean up JNI_ENV_ARG and factorize the macros for vmTestbase/jvmti[N-R] tests + JDK-8210665: Clean up JNI_ENV_ARG and factorize the macros for vmTestbase/jvmti[R-U] tests + JDK-8210689: Remove the multi-line old C style for string literals + JDK-8210700: Clean up JNI_ENV_ARG and factorize the macros for vmTestbase/jvmti/unit tests + JDK-8210726: Fix up a few minor nits forgotten by JDK-8210665 + JDK-8210920: Native C++ tests are not using CXXFLAGS + JDK-8210984: [TESTBUG] hs203t003 fails with "# ERROR: hs203t003.cpp, 218: NSK_CPP_STUB2 ( ResumeThread, jvmti, thread)" + JDK-8211036: Remove the NSK_STUB macros from vmTestbase for non jvmti + JDK-8211131: Remove the NSK_CPP_STUB macros from vmTestbase for jvmti/[G-I]* + JDK-8211148: var in implicit lambdas shouldn't be accepted for source < 11 + JDK-8211171: move JarUtils to top-level testlibrary + JDK-8211227: Inconsistent TLS protocol version in debug output + JDK-8211261: Remove the NSK_CPP_STUB macros from vmTestbase for jvmti/[A-G]* + JDK-8211432: [REDO] Handle JNIGlobalRefLocker.cpp + JDK-8211782: Remove the NSK_CPP_STUB macros from vmTestbase for jvmti/[I-S]* + JDK-8211801: Remove the NSK_CPP_STUB macros from vmTestbase for jvmti/scenarios/[A-E] + JDK-8211899: Remove the NSK_CPP_STUB macros from vmTestbase for jvmti/scenarios/[E-M] + JDK-8211905: Remove multiple casts for EM06 file + JDK-8211999: Window positioning bugs due to overlapping GraphicsDevice bounds (Windows/HiDPI) + JDK-8212082: Remove the NSK_CPP_STUB macros for remaining vmTestbase/jvmti/[sS]* + JDK-8212083: Handle remaining gc/lock native code and fix two strings + JDK-8212148: Remove remaining NSK_CPP_STUBs + JDK-8213110: Remove the use of applets in automatic tests + JDK-8213189: Make restricted headers in HTTP Client configurable and remove Date by default + JDK-8213263: fix legal headers in test/langtools + JDK-8213296: Fix legal headers in test/jdk/java/net + JDK-8213301: Fix legal headers in jdk logging tests + JDK-8213305: Fix legal headers in test/java/math + JDK-8213306: Fix legal headers in test/java/nio + JDK-8213328: Update test copyrights in test/java/util/zip and test/jdk/tools + JDK-8213330: Fix legal headers in i18n tests + JDK-8213707: [TEST] vmTestbase/nsk/stress/except/ /except011.java failed due to wrong class name + JDK-8214469: [macos] PIT: java/awt/Choice/ /ChoiceKeyEventReaction/ChoiceKeyEventReaction.java fails + JDK-8215410: Regression test for JDK-8214994 + JDK-8215568: Refactor SA clhsdb tests to use ClhsdbLauncher + JDK-8215624: Add parallel heap iteration for jmap \u2013histo + JDK-8215889: assert(!_unloading) failed: This oop is not available to unloading class loader data with ZGC + JDK-8216318: The usage of Disposer in the java.awt.Robot can be deleted + JDK-8216417: cleanup of IPv6 scope-id handling + JDK-8217377: javax/swing/JPopupMenu/6583251/bug6583251.java failed with UnsupportedOperation exception + JDK-8217438: Adapt tools//launcher/Test7029048.java for AIX + JDK-8217633: Configurable extensions with system properties + JDK-8217882: java/net/httpclient/MaxStreams.java failed once + JDK-8217903: java/net/httpclient/Response204.java fails with 404 + JDK-8218483: Crash in "assert(_daemon_threads_count->get_value() > daemon_count) failed: thread count mismatch 5 : 5" + JDK-8219986: Change to Xcode 10.1 for building on Macosx at Oracle + JDK-8220575: Correctly format test URI's that contain a retrieved IPv6 address + JDK-8221259: New tests for java.net.Socket to exercise long standing behavior + JDK-8221305: java/awt/FontMetrics/MaxAdvanceIsMax.java fails on MacOS + Solaris + JDK-8221902: PIT: javax/swing/JRadioButton/FocusTraversal/ /FocusTraversal.java fails on ubuntu + JDK-8221903: PIT: javax/swing/RepaintManager/IconifyTest/ /IconifyTest.java fails on ubuntu18.04 + JDK-8222446: assert(C->env()->system_dictionary_modification_counter_changed()) failed: Must invalidate if TypeFuncs differ + JDK-8223137: Rename predicate 'do_unroll_only()' to 'is_unroll_only()'. + JDK-8223138: Small clean-up in loop-tree support. + JDK-8223139: Rename mandatory policy-do routines. + JDK-8223140: Clean-up in 'ok_to_convert()' + JDK-8223141: Change (count) suffix _ct into _cnt. + JDK-8223400: Replace some enums with static const members in hotspot/runtime + JDK-8223658: Performance regression of XML.validation in 13-b19 + JDK-8223923: C2: Missing interference with mismatched unsafe accesses + JDK-8224829: AsyncSSLSocketClose.java has timing issue + JDK-8225083: Remove Google certificate that is expiring in December 2021 + JDK-8226514: Replace wildcard address with loopback or local host in tests - part 17 + JDK-8226943: compile error in libfollowref003.cpp with XCode 10.2 on macosx + JDK-8228442: DHKeyExchange/LegacyDHEKeyExchange.java failed due to "SSLException: An established connection was aborted by the software in your host machine" + JDK-8228508: [TESTBUG] java/net/httpclient/SmokeTest.java fails on Windows7 + JDK-8229935: [TEST_BUG]: bug8132119.java inconsistently positions text + JDK-8230019: [REDO] compiler/types/correctness/* tests fail with "assert(recv == __null || recv->is_klass()) failed: wrong type" + JDK-8230067: Add optional automatic retry when running jtreg tests + JDK-8230228: [TESTBUG] Several runtime/ErrorHandling tests may fail on some platforms + JDK-8231501: VM crash in MethodData::clean_extra_data(CleanExtraDataClosure*): fatal error: unexpected tag 99 + JDK-8233403: Improve verbosity of some httpclient tests + JDK-8233550: [TESTBUG] JTree tests fail regularly on MacOS + JDK-8233552: [TESTBUG] JTable Test bug7068740.java fails on MacOS + JDK-8233553: [TESTBUG] JSpinner test bug4973721.java fails on MacOS + JDK-8233555: [TESTBUG] JRadioButton tests failing on MacoS + JDK-8233556: [TESTBUG] JPopupMenu tests fail on MacOS + JDK-8233559: [TESTBUG] TestNimbusOverride.java is failing on macos + JDK-8233560: [TESTBUG] ToolTipManager/Test6256140.java is failing on macos + JDK-8233561: [TESTBUG] Swing text test bug8014863.java fails on macos + JDK-8233562: [TESTBUG] Swing StyledEditorKit test bug4506788.java fails on MacOS + JDK-8233564: [TESTBUG] MouseComboBoxTest.java is failing + JDK-8233566: [TESTBUG] KeyboardFocusManager tests failing on MacoS + JDK-8233567: [TESTBUG] FocusSubRequestTest.java fails on macos + JDK-8233569: [TESTBUG] JTextComponent test bug6361367.java fails on macos + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is failing on macos + JDK-8233634: [TESTBUG] Swing text test bug4278839.java fails on macos + JDK-8233635: [TESTBUG] ProgressMonitorEscapeKeyPress.java fails on macos + JDK-8233637: [TESTBUG] Swing ActionListenerCalledTwiceTest.java fails on macos + JDK-8233638: [TESTBUG] Swing test ScreenMenuBarInputTwice.java fails on macos + JDK-8233641: [TESTBUG] JMenuItem test bug4171437.java fails on macos + JDK-8233642: [TESTBUG] JMenuBar test bug 4750590.java fails on macos + JDK-8233643: [TESTBUG] JMenu test bug4515762.java fails on macos + JDK-8233644: [TESTBUG] JInternalFrame test bug8020708.java is failing on macos + JDK-8233647: [TESTBUG] JColorChooser/Test8051548.java is failing on macos + JDK-8234802: [TESTBUG] Test Right Mouse Button Drag Gesture Recognition in all the platforms + JDK-8234823: java/net/Socket/Timeouts.java testcase testTimedConnect2() fails on Windows 10 + JDK-8235784: java/lang/invoke/VarHandles/ /VarHandleTestByteArrayAsInt.java fails due to timeout with fastdebug bits + JDK-8236042: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java fails with -Xcomp -XX:TieredStopAtLevel=1 + JDK-8236177: assert(status == 0) failed: error ETIMEDOUT(60), cond_wait + JDK-8236596: HttpClient leaves HTTP/2 sockets in CLOSE_WAIT, when using proxy tunnel + JDK-8237354: Add option to jcmd to write a gzipped heap dump + JDK-8237589: Fix copyright header formatting + JDK-8238677: java/net/httpclient/ssltest/CertificateTest.java should not specify TLS version + JDK-8239334: Tab Size does not work correctly in JTextArea with setLineWrap on + JDK-8239422: [TESTBUG] compiler/c1/TestPrintIRDuringConstruction.java failed when C1 is disabled + JDK-8239827: The test OpenByUNCPathNameTest.java should be changed to be manual + JDK-8240256: Better resource cleaning for SunPKCS11 Provider + JDK-8242044: Add basic HTTP/1.1 support to the HTTP/2 Test Server + JDK-8242526: PIT: javax/swing/JInternalFrame/8020708/ /bug8020708.java fails in mach5 ubuntu system + JDK-8242793: Incorrect copyright header in ContinuousCallSiteTargetChange.java + JDK-8243543: jtreg test security/infra/java/security/cert/ /CertPathValidator/certification/BuypassCA.java fails + JDK-8244292: Headful clients failing with - -illegal-access=deny + JDK-8245147: Refactor and improve utility of test/langtools/tools/javac/versions/Versions.java + JDK-8245165: Update bug id for javax/swing/text/StyledEditorKit/4506788/bug4506788.java in ProblemList + JDK-8245665: Test WeakAlg.java should only make sure no warning for weak signature algorithms by keytool on root CA + JDK-8246114: java/net/MulticastSocket/Promiscuous.java fails after 8241072 (multi-homed systems) + JDK-8246807: Incorrect copyright header in TimeZoneDatePermissionCheck.sh + JDK-8247403: JShell: No custom input (e.g. from GUI) possible with JavaShellToolBuilder + JDK-8247510: typo in IllegalHandshakeMessage + JDK-8248187: [TESTBUG] javax/swing/plaf/basic/ /BasicGraphicsUtils/8132119/bug8132119.java fails with String is not properly drawn + JDK-8248341: ProblemList java/lang/management/ThreadMXBean/ /ThreadMXBeanStateTest.java + JDK-8248500: AArch64: Remove the r18 dependency on Windows AArch64 + JDK-8248899: security/infra/java/security/cert/ /CertPathValidator/certification/QuoVadisCA.java fails, Certificate has been revoked + JDK-8249195: Change to Xcode 11.3.1 for building on Macos at Oracle + JDK-8250521: Configure initial RTO to use minimal retry for loopback connections on Windows + JDK-8250810: Push missing parts of JDK-8248817 + JDK-8250839: Improve test template SSLEngineTemplate with SSLContextTemplate + JDK-8250863: Build error with GCC 10 in NetworkInterface.c and k_standard.c + JDK-8250888: nsk/jvmti/scenarios/general_functions/GF08/ /gf08t001/TestDriver.java fails + JDK-8251155: HostIdentifier fails to canonicalize hostnames starting with digits + JDK-8251377: [macos11] JTabbedPane selected tab text is barely legible + JDK-8251570: JDK-8215624 causes assert(worker_id < _n_workers) failed: Invalid worker_id + JDK-8251930: AArch64: Native types mismatch in hotspot + JDK-8252049: Native memory leak in ciMethodData ctor + JDK-8252051: Make mlvmJvmtiUtils strncpy uses GCC 10.x friendly + JDK-8252114: Windows-AArch64: Enable and test ZGC and ShenandoahGC + JDK-8253015: Aarch64: Move linux code out from generic CPU feature detection + JDK-8253147: The javax/swing/JPopupMenu/7154841/bug7154841.java fail on big screens + JDK-8253497: Core Libs Terminology Refresh + JDK-8253682: The AppletInitialFocusTest1.java is unstable + JDK-8253763: ParallelObjectIterator should have virtual destructor + JDK-8253866: Security Libs Terminology Refresh + JDK-8254802: ThrowingPushPromisesAsStringCustom.java fails in "try throwing in GET_BODY" + JDK-8255227: java/net/httpclient/FlowAdapterPublisherTest.java intermittently failing with TestServer: start exception: java.io.IOException: Invalid preface + JDK-8255264: Support for identifying the full range of IPv4 localhost addresses on Windows + JDK-8255716: AArch64: Regression: JVM crashes if manually offline a core + JDK-8255722: Create a new test for rotated blit + JDK-8256009: Remove src/hotspot/share/adlc/Test/i486.ad + JDK-8256066: Tests use deprecated TestNG API that is no longer available in new versions + JDK-8256152: tests fail because of ambiguous method resolution + JDK-8256182: Update qemu-debootstrap cross-compilation recipe + JDK-8256201: java/awt/FullScreen/FullscreenWindowProps/ /FullscreenWindowProps.java failed + JDK-8256202: Some tweaks for jarsigner tests PosixPermissionsTest and SymLinkTest + JDK-8256372: [macos] Unexpected symbol was displayed on JTextField with Monospaced font + JDK-8256956: RegisterImpl::max_slots_per_register is incorrect on AMD64 + JDK-8258457: testlibrary_tests/ctw/JarDirTest.java fails with InvalidPathException on windows + JDK-8258855: Two tests sun/security/krb5/auto/ /ReplayCacheTestProc.java and ReplayCacheTestProcWithMD5.java failed on OL8.3 + JDK-8259237: Demo selection changes with left/right arrow key. No need to press space for selection. + JDK-8260571: Add PrintMetaspaceStatistics to print metaspace statistics upon VM exit + JDK-8260690: JConsole User Guide Link from the Help menu is not accessible by keyboard + JDK-8261036: Reduce classes loaded by CleanerFactory initialization + JDK-8261071: AArch64: Refactor interpreter native wrappers + JDK-8261075: Create stubRoutines.inline.hpp with SafeFetch implementation + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when StressGCM is enabled + JDK-8261297: NMT: Final report should use scale 1 + JDK-8261661: gc/stress/TestReclaimStringsLeaksMemory.java fails because Reserved memory size is too big + JDK-8261916: gtest/GTestWrapper.java vmErrorTest.unimplemented1_vm_assert failed + JDK-8262438: sun/security/ssl/SSLLogger/ /LoggingFormatConsistency.java failed with "SocketException: Socket is closed" + JDK-8262731: [macOS] Exception from "Printable.print" is swallowed during "PrinterJob.print" + JDK-8262844: (fs) FileStore.supportsFileAttributeView might return false negative in case of ext3 + JDK-8263059: security/infra/java/security/cert/ /CertPathValidator/certification/ComodoCA.java fails due to revoked cert + JDK-8263068: Rename safefetch.hpp to safefetch.inline.hpp + JDK-8263303: C2 compilation fails with assert(found_sfpt) failed: no node in loop that's not input to safepoint + JDK-8263362: Avoid division by 0 in java/awt/font/TextJustifier.java justify + JDK-8263773: Reenable German localization for builds at Oracle + JDK-8263897: compiler/c2/aarch64/TestVolatilesSerial.java failed with "java.lang.RuntimeException: Wrong method" + JDK-8264526: javax/swing/text/html/parser/Parser/8078268/ /bug8078268.java timeout + JDK-8264824: java/net/Inet6Address/B6206527.java doesn't close ServerSocket properly + JDK-8265019: Update tests for additional TestNG test permissions + JDK-8265173: [test] divert spurious log output away from stream under test in ProcessBuilder Basic test + JDK-8265524: Upgrading JSZip from v3.2.2 to v3.6.0 + JDK-8266182: Automate manual steps listed in the test jdk/sun/security/pkcs12/ParamsTest.java + JDK-8266579: Update test/jdk/java/lang/ProcessHandle/ /PermissionTest.java & test/jdk/java/sql/testng/util/ /TestPolicy.java + JDK-8266949: Check possibility to disable OperationTimedOut on Unix + JDK-8267246: -XX:MaxRAMPercentage=0 is unreasonable for jtreg tests on many-core machines + JDK-8267256: Extend minimal retry for loopback connections on Windows to PlainSocketImpl + JDK-8267304: Bump global JTReg memory limit to 768m + JDK-8267652: c2 loop unrolling by 8 results in reading memory past array + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop detected + JDK-8268093: Manual Testcase: "sun/security/krb5/config/ /native/TestDynamicStore.java" Fails with NPE + JDK-8268555: Update HttpClient tests that use ITestContext to jtreg 6+1 + JDK-8268672: C2: assert(!loop->is_member(u_loop)) failed: can be in outer loop or out of both loops only + JDK-8269034: AccessControlException for SunPKCS11 daemon threads + JDK-8269426: Rename test/jdk/java/lang/invoke/t8150782 to accessClassAndFindClass + JDK-8269574: C2: Avoid redundant uncommon traps in GraphKit::builtin_throw() for JVMTI exception events + JDK-8269656: The test test/langtools/tools/javac/versions/ /Versions.java has duplicate test cycles + JDK-8269768: JFR Terminology Refresh + JDK-8269951: [macos] Focus not painted in JButton when setBorderPainted(false) is invoked + JDK-8269984: [macos] JTabbedPane title looks like disabled + JDK-8269993: [Test]: java/net/httpclient/ /DigestEchoClientSSL.java contains redundant @run tags + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to run in all LaFs, including Aqua on macOS + JDK-8270216: [macOS] Update named used for Java run loop mode + JDK-8270280: security/infra/java/security/cert/ /CertPathValidator/certification/LetsEncryptCA.java OCSP response error + JDK-8270290: NTLM authentication fails if HEAD request is used + JDK-8270317: Large Allocation in CipherSuite + JDK-8270344: Session resumption errors + JDK-8270517: Add Zero support for LoongArch + JDK-8270533: AArch64: size_fits_all_mem_uses should return false if its output is a CAS + JDK-8270886: Crash in PhaseIdealLoop::verify_strip_mined_scheduling + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with "lists don't have the same size expected" + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop + JDK-8271341: Opcode() != Op_If && Opcode() != Op_RangeCheck) || outcnt() == 2 assert failure with Test7179138_1.java + JDK-8271459: C2: Missing NegativeArraySizeException when creating StringBuilder with negative capacity + JDK-8271490: [ppc] [s390]: Crash in JavaThread::pd_get_top_frame_for_profiling + JDK-8271560: sun/security/ssl/DHKeyExchange/ /LegacyDHEKeyExchange.java still fails due to "An established connection was aborted by the software in your host machine" + JDK-8271567: AArch64: AES Galois CounterMode (GCM) interleaved implementation using vector instructions + JDK-8272180: Upgrade JSZip from v3.6.0 to v3.7.1 + JDK-8272181: Windows-AArch64:Backport fix of `Backtracing broken on PAC enabled systems` + JDK-8272316: Wrong Boot JDK help message in 11 + JDK-8272318: Improve performance of HeapDumpAllTest + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/ /PageDialogMarginTest.java catches all exceptions + JDK-8272570: C2: crash in PhaseCFG::global_code_motion + JDK-8272574: C2: assert(false) failed: Bad graph detected in build_loop_late + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh fails after JDK-8266182 + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/ /security/cert/CertPathValidator/certification/BuypassCA.java no longer needs ocspEnabled + JDK-8272720: Fix the implementation of loop unrolling heuristic with LoopPercentProfileLimit + JDK-8272783: Epsilon: Refactor tests to improve performance + JDK-8272806: [macOS] "Apple AWT Internal Exception" when input method is changed + JDK-8272828: Add correct licenses to jszip.md + JDK-8272836: Limit run time for java/lang/invoke/LFCaching tests + JDK-8272850: Drop zapping values in the Zap* option descriptions + JDK-8272902: Bump update version for OpenJDK: jdk-11.0.14 + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test groups + JDK-8272966: test/jdk/java/awt/Robot/FlushCurrentEvent.java fails by timeout + JDK-8273026: Slow LoginContext.login() on multi threading application + JDK-8273229: Update OS detection code to recognize Windows Server 2022 + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on Windows 32bit + JDK-8273308: PatternMatchTest.java fails on CI + JDK-8273314: Add tier4 test groups + JDK-8273342: Null pointer dereference in classFileParser.cpp:2817 + JDK-8273358: macOS Monterey does not have the font Times needed by Serif + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on Zero + JDK-8273498: compiler/c2/Test7179138_1.java timed out + JDK-8273541: Cleaner Thread creates with normal priority instead of MAX_PRIORITY - 2 + JDK-8273547: [11u] [JVMCI] Partial module-info.java backport of JDK-8223332 + JDK-8273606: Zero: SPARC64 build fails with si_band type mismatch + JDK-8273646: Add openssl from path variable also in to Default System Openssl Path in OpensslArtifactFetcher + JDK-8273671: Backport of 8260616 misses one JNF header inclusion removal + JDK-8273790: Potential cyclic dependencies between Gregorian and CalendarSystem + JDK-8273795: Zero SPARC64 debug builds fail due to missing interpreter fields + JDK-8273826: Correct Manifest file name and NPE checks + JDK-8273894: ConcurrentModificationException raised every time ReferralsCache drops referral + JDK-8273924: ArrayIndexOutOfBoundsException thrown in java.util.JapaneseImperialCalendar.add() + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file path contains '+' character + JDK-8273968: JCK javax_xml tests fail in CI + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects + JDK-8274083: Update testing docs to mention tiered testing + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork is deprecated + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/ /macosx/CAccessibility in JavaComponentAccessibility.m + JDK-8274329: Fix non-portable HotSpot code in MethodMatcher::parse_method_pattern + JDK-8274381: missing CAccessibility definitions in JNI code + JDK-8274407: (tz) Update Timezone Data to 2021c + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b + JDK-8274468: TimeZoneTest.java fails with tzdata2021b + JDK-8274522: java/lang/management/ManagementFactory/ /MXBeanException.java test fails with Shenandoah + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with NoSuchElementException after JDK-8271287 + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently fails on weak memory model platform + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient incorrectly check request method when set to POST + JDK-8274840: Update OS detection code to recognize Windows 11 + JDK-8274860: gcc 10.2.1 produces an uninitialized warning in sharedRuntimeTrig.cpp + JDK-8275051: Shenandoah: Correct ordering of requested gc cause and gc request flag + JDK-8275131: Exceptions after a touchpad gesture on macOS + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc + JDK-8275766: (tz) Update Timezone Data to 2021e + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to suboptimal performance + JDK-8276139: TestJpsHostName.java not reliable, better to expand HostIdentifierCreate.java test + JDK-8276157: C2: Compiler stack overflow during escape analysis on Linux x86_32 + JDK-8276201: Shenandoah: Race results degenerated GC to enter wrong entry point + JDK-8276536: Update TimeZoneNames files to follow the changes made by JDK-8275766 + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend + JDK-8276774: Cookie stored in CookieHandler not sent if user headers contain cookie + JDK-8276854: Windows GHA builds fail due to broken Cygwin + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify output array sizes + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString() throws NPE + JDK-8277529: SIGSEGV in C2 CompilerThread Node::rematerialize() compiling Packet::readUnsignedTrint + JDK-8277815: Fix mistakes in legal header backports - Removed patch: * riscv64-zero.patch + integrated upstream - Modified patch: * fips.patch + rediff to changed context ==== kbd ==== Subpackages: kbd-legacy - use bash for invoking bash scripts ==== kdump ==== Version update (1.0 -> 1.0.2) - kdump-calibrate.conf-depends-on-kdumptool.patch: calibrate.conf: Add dependency on kdumptool. - kdump-calibrate-fix-nic-naming.patch: calibrate: Fix network interface naming. - kdump-calibrate-include-af_packet.patch: calibrate: Explicitly include af_packet in the test initrd. - Update to 1.0.2 * Adjust crash kernel reservation at boot time (jsc#SLE-18441). - All remaining patches have been upstreamed: * kdump-fillupdir-fixes.patch * kdump-use-pbl.patch * kdump-calibrate-Ignore-malformed-VMCOREINFO.patch ==== lcms2 ==== Version update (2.12 -> 2.13) - Update to 2.13: * Added support for premultiplied alpha * tifficc can now handle alpha channels, both unassociated and premultiplied * CGATS parser can now deal with very long strings * Added Projects for Visual Studio 2020 * Added ARM64 target to visual studio 2019 (thanks to gaborkertesz-linaro) * Added thread safe code to get time * Added automatic linear space detection * Added cmsGetStageContextID function * Added cmsDetectRGBProfileGamma function * configure now accepts --without-fastfloat to turn plugin off * Checked to work on STM32 Cortex-A, Cortex-M families * Bug & typos fixing (thanks to many reporters and contributors) - Rebase lcms2-visibility.patch ==== ldns ==== Version update (1.7.1 -> 1.8.1) Subpackages: libldns3 - new version 1.8.1 + 1.8.1 2021-12-03 * bugfix #146: ldns-1.7.1 had soname 3.0, so ldns-1.8.x soname needs to larger. * Undo PR#123 fix ldns.pc installation when building out-of-source + 1.8.0 2021-11-26 * bugfix #38: Print "line" before line number when printing zone parse errors. Thanks Petr ?pa?ek. * bugfix: Revert unused variables in ldns-config removal patch. * bugfix #50: heap Out-of-bound Read vulnerability in rr_frm_str_internal reported by pokerfacett. (bsc#1195057, CVE-2020-19860) * bugfix #51: Heap Out-of-bound Read vulnerability in ldns_nsec3_salt_data reported by pokerfacett. (bsc#1195058, CVE-2020-19861) * Fix memory leak in examples/ldns-testns handle_tcp routine. * Detect fixed time memory compare for openssl 0.9.8. * Fix compile warning by variable initialisation for older gcc. * Fix #92: ldns-testns.c:429:15: error: 'fork' is unavailable: not available on tvOS. * Fix for #93: fix packaging/libldns.pc Makefile rule. * ZONEMD support in ldns-signzone and ldns-verify-zone * ldns-testns can answer several queries over one tcp connection, if they arrive within 100msec of each other. * Fix so that ldns-testns does not leak sockets if the read fails. * SVCB and HTTPS draft rrtypes. Enable with --enable-rrtype-svcb-https. * bugfix #117: Assertion failure with DNSSEC validating of non existence of RR types at the root. Thanks ZjYwMj * Set NSEC(3) ttls to the minimum of the MINIMUM field of the SOA record and the TTL of the SOA itself. draft-ietf-dnsop-nsec-ttl * bugfix #119: Let example tools read longer RR's than LDNS_MAX_LINELEN * Add SVCPARAMS to python ldns_rdf_type2str function. * PR #134 Miscellaneous spelling fixes. Thanks jsoref! * Fix that ldns-read-zone and ldns_zone_new_frm_fp_l properly return the $INCLUDE not implemented error. * Fix that ldns-read-zone and ldns_zone_new_frm_fp_l count the line number for an empty line after a comment. * Fix #135: Fix compile with OpenSSL-3.0.0-beta2. * PR #107: Added ldns_pkt2buffer_wire_compress() to make dname compression optional when converting packets to wire format. Thanks Eli Lindsey * Option to ldns-keygen to create symlinks with known names (i.e. without the key id) to the created files. Thanks Andreas Schulze * Fix #121: Correct handling of centimetres by LOC parser. Thanks Felipe Gasper * PR #126: Link with libldns.la in Makefile.in. Thanks orbea * PR #127: Addes option -Q to drill to give short answer. Thanks niknah * PR #133: Update m4 files for python modules. Thanks Petr Men?ík * Bufix CAA value fields may be empty: Thanks Robert Mortimer * PR #108: Fix for ldns-compare-zones net detecting when first zone has a RRset that shrinks from two to one RRs, or grows from one to two RRs. Thanks Emilio Caballero * Fix #131: Drill sig chasing breaks with gcc-11 and strict-aliasing. Thanks Stanislav Levin * Fix #130: Unless $TLL is defined, ttl defaults to the last explicitly stated value. Thanks Benno * Fix #48: Missing UNSIGNED legend with drill. Thanks reedjc * Fix #143: EVP_PKEY_base_id became a macro with OpenSSL > 3.0 Thanks Daniel J. Luke * Let ldns-signzone warn for high NSEC3 iteration counts. Thanks Andreas Schulze ==== libcap ==== Version update (2.62 -> 2.63) Subpackages: libcap2 libcap2-32bit - update to 2.63: * restore errno to zero by the time main() is executed * Consistent psx handling (a panic) for syscalls that return thread dependent status Inconsistend behavior noticed by Lorenz Bauer * Add a test case for a deadlock under investigation in golang * Trim some of the #include file use to make the tree compile more efficiently ==== libnvme ==== Version update (1.0~0 -> 1.0~2) - Update to version 1.0~2: * Add fabrics config option 'tls' * Logging infrastructure reworked (API break) * Changed argument structs layout (API break) * Changed scan API (API break) * Fixed ctrl_loss_tmo handling concerning values of '-1' * Various build fixes ==== libopenmpt ==== Version update (0.5.14 -> 0.6.1) - Update to 0.6.1: * [Bug] Possible hang with malformed DMF, DSM, MED, MUS, OKT and SymMOD files containing 65536 or more patterns when destroying the module. * [Bug] Avoid NaNs and infinite values with custom tunings and in the I3DL2Reverb plugin. * MIDI macros are now evaluated when seeking. * The letter ?z? is now evaluated in fixed MIDI macros (Z80?ZFF) the same way as in Impulse Tracker. * MOD: Loosened VBlank timing heuristics so that ?frame of mind? by Dascon plays correctly. * MOD: Validate the contents of ?hidden? patterns beyond the end of the order list when the file size matches the expected size when only taken ?official? patterns into account. This fixes Shofixti Ditty.mod from Star Control 2 while keeping other (partly broken) modules working. * MED: Command 20 (reverse sample) is now only applied when it?s next to a note. * S3M: Introducing the ?Send OPL key-off when triggering notes? compatibility setting broke retrigger for OPL notes again (they retriggered rather than not retriggering). * S3M: Retriggering a note no longer resets its pitch after a portamento. * S3M: Partially implement retrigger behaviour for stopped notes in SoundBlaster mode: Like in IT, it is not possible to retrigger a sample that has already stopped playing. * DIGI: Improve compatibility with E3x reverse sample command. * DSym: Tempos < 32 were treated as tempo slides. * SymMOD: Key-off command was not implemented properly. - Changes in 0.6.0: * [New] MUS files from Psycho Pinball and Micro Machines 2 are now supported. * [New] SymMOD files created with Symphonie / Symphonie Pro are now supported. * [New] FMT files created with Davey W Taylor?s FM Tracker are now supported. * [New] DSYM files created with Digital Symphony are now supported. * [New] STX files (transitional format between Scream Tracker 2 and 3) are now supported. * [New] TakeTracker MODs with TDZ1 to TDZ3 magic bytes are now supported. * [New] libopenmpt_ext: New interface interactive2 adding openmpt::ext::interactive2::note_off(), openmpt::ext::interactive2::note_fade(), openmpt::ext::interactive2::set_channel_panning(), openmpt::ext::interactive2::get_channel_panning(), openmpt::ext::interactive2::set_note_finetune(), and openmpt::ext::interactive2::get_note_finetune() (C++) and openmpt_module_ext_interface_interactive2.note_off(), openmpt_module_ext_interface_interactive2.note_fade(), openmpt_module_ext_interface_interactive2.set_channel_panning(), openmpt_module_ext_interface_interactive2.get_channel_panning(), openmpt_module_ext_interface_interactive2.set_note_finetune(), and openmpt_module_ext_interface_interactive2.get_note_finetune() (C). * [Change] libopenmpt no longer generates internal interpolation tables on library load time, but instead only on first module load time. * libopenmpt can now detect infinite pattern loops and treats them as the song end. This means that setting a repeat count other than -1 now always guarantees that playback will eventually end. The song loop counter is decremented each time it ends up at the start of the infinite loop, so the song does not restart from the beginning even if the repeat count is not 0. * openmpt::module::set_position_seconds() accuracy has been improved for modules with pattern loops. * Samples played at the wrong volume when rendering modules in mono. * IT: Portamentos in files with Linear Slides disabled are now more accurate. * IT: Pitch/Pan Separation was affected by note-off commands, and wasn?t reset by panning commands like in Impulse Tracker. * IT: Even after libopenmpt 0.5.14 the filter reset logic was still not 100% identical to Impulse Tracker: A note triggered on tick 0 of a row with a Pattern Delay effect still caused the filter to be reset on repetitions of that row even though the note wasn?t retriggered. * IT: Added read-only support for BeRoTracker commands 1 and 2 (equivalent to XM commands K and L). * XM: BeRoTracker saves smooth MIDI macros in a different way from OpenMPT. This command is now imported correctly. * XM: Emulate FT2 Tone Portamento quirk that inverts portamento direction after the target was reached (if target note was higher than previous note). * S3M files saved with Impulse Tracker and latest Schism Tracker now also compute sample playback speed in Hertz. * Depending on whether an S3M file was last saved in Scream Tracker with the Sound Blaster or Gravis Ultrasound drivers loaded, different compatibility flags are now applied. For files saved with the GUS, the sample volume factor is now also ignored (fixes volume levels in S3Ms made on the GUS, in particular if they use both samples and OPL instruments). * S3M: Enforce the lower frequency bound. * MOD: Loosened VBlank timing heuristics so that the original copy of Guitar Slinger from Dizzy Tunes II plays correctly. * FAR: Correct portamento depth is now used. * DMF / IMF: Improved accuracy of finetune commands. * MDL: Implemented finetune command. * OKT: Various accuracy improvements such as: Sharing volume between mixed channels, volume commands on mixed channels are permanent (not reset with new notes), mixed channels do not support default sample volume, 7-bit samples are actually supposed to be played as-is (not amplified to full 8-bit range), reject speed command parameters >= 20. ==== libplacebo ==== Version update (4.192.0 -> 4.192.1) - Update libplacebo to version 4.192.1. See details in: https://code.videolan.org/videolan/libplacebo/-/tags/v4.192.1 - Update nuklear.h to 4.9.5 - Add dav1d dependency ==== libwebp ==== Version update (1.2.1 -> 1.2.2) Subpackages: libwebp7 libwebpdemux2 libwebpmux3 - update to 1.2.2: * webpmux: add "-set bgcolor A,R,G,B" * add ARM64 NEON support for MSVC builds (#539) * doc updates and bug fixes (#538, #544, #548, #550) ==== libzypp ==== Version update (17.28.8 -> 17.29.3) - Public header files on older distros must use c++11 (bsc#1194597) - Fix exception handling when reading or writing credentials (bsc#1194898) - version 17.29.3 (22) - Fix Legacy include (bsc#1194597) - version 17.29.2 (22) - Fix broken install path for parser compat headers (fixes #372, bsc#1194597) - RepoManager: remember exec errors in exception history (bsc#1193007) - version 17.29.1 (22) - Use the default zypp.conf settings if no zypp.conf exists (bsc#1193488) - Fix wrong encoding of iso: URL components (bsc#954813) - Handle armv8l as armv7hl compatible userland. - Introduce zypp-curl a sublibrary for CURL related code. - zypp-rpm: Increase rpm loglevel if ZYPP_RPM_DEBUG is set. - Save all signatures associated with a public key in its PublicKeyData. - version 17.29.0 (22) ==== multipath-tools ==== Version update (0.8.8+13+suse.79c3556f -> 0.8.8+45+suse.628d603e) Subpackages: kpartx libmpath0 - Version 0.8.8+45+suse.628d603e * fix handling of historical-service-time path selector (bsc#1195425) * fix marking multipath devices as failed prematurely on startup (bsc#1195426) * multipathd.service: remove LimitCORE=infinity directive This should only be enabled for debugging. * multipathd.service: don't load scsi_dh modules (bsc#1195397) This is done via modules-load.d functionality on (open)SUSE - Upstream fixes: * Fix claiming of paths with "find_multipaths strict" * Avoid unnecessary read-only reloads ==== nvme-cli ==== Version update (2.0~0 -> 2.0~2) Subpackages: nvme-cli-bash-completion nvme-cli-zsh-completion - Update to version 2.0~2: * Adapt to logging API changes in libnvme * Adapt to scan API changes in libnvme * Reworked error message handling * Fix 'list-ns' (bsc#1195151) * Add 'gen-tls-key' and 'check-tls-key' * Add Media Unit Status log page support * Cleanups and build fixes - Fix path to systemctl (bsc#1193699) ==== openblas_pthreads ==== - Partly revert: Thu Jul 8 12:35:35 UTC 2021 - Dominique Leuenberger <dimstar@opensuse.org> - Do not create dummy symlinks on $self in /etc/alternatives: those files are packages as %ghost and any real file existance only confuses brp-checks, as it detects circular symlinks. for all suse_versions < current Factory in an attempt to fix bsc#1195232. ==== orca ==== Version update (41.1 -> 41.2) Subpackages: orca-lang - Update to version 41.2: + Web: Fix bug causing widgets descending from off-screen label elements to be skipped over. + General: - Fix bug causing accessing preferences to fail for Esperanto. - Add more event-flood detection and handling for improved performance. ==== pipewire ==== Version update (0.3.44 -> 0.3.45) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-lang pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Update to version 0.3.45: * Highlights - Zoom, telegram and other apps should be able to play sound again. - Implement a better way to force and lock JACK buffersize. - Default sink and source names and properties are improved. - The config loader can now load and merge fragments in conf.d directories for easier user configuration of config files. - Many small bug fixes and improvements. * PipeWire - pw-cli can now also send Commands to nodes. This can be used to Suspend a device, for example. - The eventfd was removed from loops and invoke is now used to stop the loop, this saves an fd. - New Alpine CI target to test musl builds, various build fixes. - Add force-quantum and force-rate properties. - The config loader can now load and merge fragments in conf.d directories. (#207) - resource error methods can be called without a resource and then just log an error message. - link-factory can now also work from the config. (#2095) * modules - module-simple-protocol has better argument parsing and can handle channelmap now. (#2068) It's also possible to configure latency and rate. - The native protocol now does extra checks for invalid data. (#2070) * ALSA - TI2902 chips as found in various Behringer cards should have inputs again. - Better handling of busy devices in udev, retry when the inotify close event is emited. * SPA - plugins now handle alignment properly and only expect the max alignment required for the CPU. (#2074) * Bluetooth - SBC-XQ is now enabled for the JBL Endurance RUN BT headset. - Support for non-hexadecimal XAPL version strings to improve compatibility. - Use HCI commands again to probe the adapter msbc capability. This improves compatibility with some adapters. (#2030) - Set the right startup volume. - Better A2DP source idle handling. - Fix a timer bug in SCO sink that could cause busy looping. * pulse-server - A playback issue when the tlength > maxlength was fixed. (#2069) This affected Zoom and other applications. - The STREAM_BUFFER_ATTR command is now implemented. - Module names are improved. (#2076) - Many small fixes and improvements. - Fix a pavucontrol crash with invalid channels. (#1442) * JACK - Use the new force-quantum and force-rate properties in the JACK API to switch quantum and ensure it can't change for the lifetime of the JACK app. (#2079) - Rebase patch: * reduce-meson-dependency.patch - pipewire should be a true dependency, not just recommended (e.g., so that any setup that use no-recommends, like MicroOS, also work) ==== plymouth ==== Subpackages: libply-boot-client5 libply-splash-core5 libply-splash-graphics5 libply5 plymouth-dracut plymouth-lang plymouth-plugin-label plymouth-plugin-two-step plymouth-scripts plymouth-theme-bgrt plymouth-theme-spinner - Add plymouth-watermark-config.patch: Add two-step theme watermark configuration support, make the tumbleweed watermark could show in the boot splash (bsc#1189613). - Add plymouth-quiet-dracut-build-info.patch: Avoid the dracut building info which is useless for plymouth(bsc#1189613). - Add plymouth-install-label-library-and-font-file-to-initrd.patch: Compress label.so and current theme's font into initrd to avoid prompt disappear when the folder in which has been encrypt (boo#1183425). ==== python-black ==== - Unpin tomli and pathspec * black-pr2718-unpin.patch -- gh#psf/black#2718 * gh#psf/black#2703 - Remove obsolete python36 flavor expression - Update requirements for Python 3.6 distros ==== python-boto3 ==== Version update (1.20.40 -> 1.20.46) - Update to version 1.23.46 * api-change:``appconfigdata``: [``botocore``] Documentation updates for AWS AppConfig Data. * api-change:``athena``: [``botocore``] This release adds a field, AthenaError, to the GetQueryExecution response object when a query fails. * api-change:``appconfig``: [``botocore``] Documentation updates for AWS AppConfig * api-change:``cognito-idp``: [``botocore``] Doc updates for Cognito user pools API Reference. * api-change:``secretsmanager``: [``botocore``] Feature are ready to release on Jan 28th * api-change:``sagemaker``: [``botocore``] This release added a new NNA accelerator compilation support for Sagemaker Neo. - from version 1.20.45 * api-change:``ec2``: [``botocore``] X2ezn instances are powered by Intel Cascade Lake CPUs that deliver turbo all core frequency of up to 4.5 GHz and up to 100 Gbps of networking bandwidth * api-change:``kafka``: [``botocore``] Amazon MSK has updated the CreateCluster and UpdateBrokerStorage API that allows you to specify volume throughput during cluster creation and broker volume updates. * api-change:``connect``: [``botocore``] This release adds support for configuring a custom chat duration when starting a new chat session via the StartChatContact API. The default value for chat duration is 25 hours, minimum configurable value is 1 hour (60 minutes) and maximum configurable value is 7 days (10,080 minutes). * api-change:``amplify``: [``botocore``] Doc only update to the description of basicauthcredentials to describe the required encoding and format. * api-change:``opensearch``: [``botocore``] Allows customers to get progress updates for blue/green deployments - from version 1.20.44 * api-change:``frauddetector``: [``botocore``] Added new APIs for viewing past predictions and obtaining prediction metadata including prediction explanations: ListEventPredictions and GetEventPredictionMetadata * api-change:``ebs``: [``botocore``] Documentation updates for Amazon EBS Direct APIs. * api-change:``codeguru-reviewer``: [``botocore``] Added failure state and adjusted timeout in waiter * api-change:``securityhub``: [``botocore``] Adding top level Sample boolean field * api-change:``sagemaker``: [``botocore``] API changes relating to Fail steps in model building pipeline and add PipelineExecutionFailureReason in PipelineExecutionSummary. - from version 1.20.43 * api-change:``fsx``: [``botocore``] This release adds support for growing SSD storage capacity and growing/shrinking SSD IOPS for FSx for ONTAP file systems. * api-change:``efs``: [``botocore``] Update efs client to latest version * api-change:``connect``: [``botocore``] This release adds support for custom vocabularies to be used with Contact Lens. Custom vocabularies improve transcription accuracy for one or more specific words. * api-change:``guardduty``: [``botocore``] Amazon GuardDuty expands threat detection coverage to protect Amazon Elastic Kubernetes Service (EKS) workloads. - from version 1.20.42 * api-change:``route53-recovery-readiness``: [``botocore``] Updated documentation for Route53 Recovery Readiness APIs. - from version 1.20.41 * enhancement:Exceptions: [``botocore``] ProxyConnectionError previously provided the full proxy URL. User info will now be appropriately masked if needed. * api-change:``mediaconvert``: [``botocore``] AWS Elemental MediaConvert SDK has added support for 4K AV1 output resolutions & 10-bit AV1 color, the ability to ingest sidecar Dolby Vision XML metadata files, and the ability to flag WebVTT and IMSC tracks for accessibility in HLS. * api-change:``transcribe``: [``botocore``] Add support for granular PIIEntityTypes when using Batch ContentRedaction. ==== python-botocore ==== Version update (1.23.40 -> 1.23.46) - Version to update to 1.23.46 * api-change:``appconfigdata``: Documentation updates for AWS AppConfig Data. * api-change:``athena``: This release adds a field, AthenaError, to the GetQueryExecution response object when a query fails. * api-change:``appconfig``: Documentation updates for AWS AppConfig * api-change:``cognito-idp``: Doc updates for Cognito user pools API Reference. * api-change:``secretsmanager``: Feature are ready to release on Jan 28th * api-change:``sagemaker``: This release added a new NNA accelerator compilation support for Sagemaker Neo. - from version 1.23.45 * api-change:``ec2``: X2ezn instances are powered by Intel Cascade Lake CPUs that deliver turbo all core frequency of up to 4.5 GHz and up to 100 Gbps of networking bandwidth * api-change:``kafka``: Amazon MSK has updated the CreateCluster and UpdateBrokerStorage API that allows you to specify volume throughput during cluster creation and broker volume updates. * api-change:``connect``: This release adds support for configuring a custom chat duration when starting a new chat session via the StartChatContact API. The default value for chat duration is 25 hours, minimum configurable value is 1 hour (60 minutes) and maximum configurable value is 7 days (10,080 minutes). * api-change:``amplify``: Doc only update to the description of basicauthcredentials to describe the required encoding and format. * api-change:``opensearch``: Allows customers to get progress updates for blue/green deployments - from version 1.23.44 * api-change:``frauddetector``: Added new APIs for viewing past predictions and obtaining prediction metadata including prediction explanations: ListEventPredictions and GetEventPredictionMetadata * api-change:``ebs``: Documentation updates for Amazon EBS Direct APIs. * api-change:``codeguru-reviewer``: Added failure state and adjusted timeout in waiter * api-change:``securityhub``: Adding top level Sample boolean field * api-change:``sagemaker``: API changes relating to Fail steps in model building pipeline and add PipelineExecutionFailureReason in PipelineExecutionSummary. - from version 1.23.43 * api-change:``fsx``: This release adds support for growing SSD storage capacity and growing/shrinking SSD IOPS for FSx for ONTAP file systems. * api-change:``efs``: Update efs client to latest version * api-change:``connect``: This release adds support for custom vocabularies to be used with Contact Lens. Custom vocabularies improve transcription accuracy for one or more specific words. * api-change:``guardduty``: Amazon GuardDuty expands threat detection coverage to protect Amazon Elastic Kubernetes Service (EKS) workloads. - from version 1.23.42 * api-change:``route53-recovery-readiness``: Updated documentation for Route53 Recovery Readiness APIs. - from version 1.23.41 * enhancement:Exceptions: ProxyConnectionError previously provided the full proxy URL. User info will now be appropriately masked if needed. * api-change:``mediaconvert``: AWS Elemental MediaConvert SDK has added support for 4K AV1 output resolutions & 10-bit AV1 color, the ability to ingest sidecar Dolby Vision XML metadata files, and the ability to flag WebVTT and IMSC tracks for accessibility in HLS. * api-change:``transcribe``: Add support for granular PIIEntityTypes when using Batch ContentRedaction. ==== python-dnspython ==== Version update (2.1.0 -> 2.2.0) - Break build dependency cycle through :test multibuild - PEP517 style: poetry-core is enough to build the package - Clean up old python36 requirements: no longer in Tumbleweed - Update dependencies to cover all optional features and dependencies in a more structured way and describe it in the package description. - update to version 2.2.0: - SVCB and HTTPS records have been updated to track the evolving draft standard. - The ZONEMD type has been added. - The resolver now returns a LifetimeTimeout exception which includes an error trace like the NoNameservers exception. This class is a subclass of dns.exception.Timeout for backwards compatibility. - DNS-over-HTTPS will try to use HTTP/2 if the httpx and h2 packages are installed. - DNS-over-HTTPS is now supported for asynchronous queries and resolutions. - dns.zonefile.read_rrsets() has been added, which allows rrsets in zonefile format, or a restrition of it, to be read. This function is useful for applications that want to read DNS data in text format, but do not want to use a Zone. - On Windows systems, if the WMI module is available, the resolver will retrieve the nameserver from WMI instead of trying to figure it out by reading the registry. This may lead to more accurate results in some cases. - The CERT rdatatype now supports certificate types IPKIX, ISPKI, IPGP, ACPKIX, and IACPKIX. - The CDS rdatatype now allows digest type 0. - Dnspython zones now enforces that a node is either a CNAME node or an ?other data? node. A CNAME node contains only CNAME, RRSIG(CNAME), NSEC, RRSIG(NSEC), NSEC3, or RRSIG(NSEC3) rdatasets. An ?other data? node contains any rdataset other than a CNAME or RRSIG(CNAME) rdataset. The enforcement is ?last update wins?. For example, if you have a node which contains a CNAME rdataset, and then add an MX rdataset to it, then the CNAME rdataset will be deleted. Likewise if you have a node containing an MX rdataset and add a CNAME rdataset, the MX rdataset will be deleted. - Extended DNS Errors, as specified in RFC 8914, are now supported. ==== python-fixtures ==== - Add missing BuildRequire on python-setuptools (this was implicitly pulled in only). ==== python-pandas ==== Version update (1.3.5 -> 1.4.0) - Skip more tests on non-intel architectures boo#1167730 - Update to version 1.4.0 * https://pandas.pydata.org/docs/whatsnew/v1.4.0.html * Enhancements - Improved warning messages - Index can hold arbitrary ExtensionArrays - Enhancements in Styler - Multi-threaded CSV reading with a new CSV Engine based on pyarrow - Rank function for rolling and expanding windows - Groupby positional indexing - DataFrame.from_dict and DataFrame.to_dict have new 'tight' option * Notable bug fixes - Inconsistent date string parsing - Ignoring dtypes in concat with empty or all-NA columns - Null-values are no longer coerced to NaN-value in value_counts and mode - mangle_dupe_cols in read_csv no longer renames unique columns conflicting with target names - unstack and pivot_table no longer raises ValueError for result that would exceed int32 limit - groupby.apply consistent transform detection * API changes - Index.get_indexer_for() no longer accepts keyword arguments (other than target); in the past these would be silently ignored if the index was not unique (GH42310) - Change in the position of the min_rows argument in DataFrame.to_string() due to change in the docstring (GH44304) - Reduction operations for DataFrame or Series now raising a ValueError when None is passed for skipna (GH44178) - read_csv() and read_html() no longer raising an error when one of the header rows consists only of Unnamed: columns (GH13054) - Changed the name attribute of several holidays in USFederalHolidayCalendar to match official federal holiday names. * Deprecations - Deprecated Int64Index, UInt64Index & Float64Index - Deprecated Frame.append and Series.append - Split out test runs into separate flavors, optimize memory usage in pytest-xdist runs ==== python-psutil ==== - Fix name of Patch4, it is skip-partitions-erros.patch - Add skip-partitions-erros.patch skipping tests failing on Linux (gh#giampaolo/psutil#2043). ==== python-pyudev ==== - Don't add date to version for reproducible builds (boo#1047218) ==== python-scipy ==== Version update (1.6.3 -> 1.7.3) - Provide empty debuginfo extraction for :test flavor - Update to version 1.7.3 * 3rd bugfix release since 1.7.0 - Highlights from the 1.7.0 release * A new submodule for quasi-Monte Carlo, scipy.stats.qmc, was added * The documentation design was updated to use the same PyData-Sphinx theme as NumPy and other ecosystem libraries. * We now vendor and leverage the Boost C++ library to enable numerous improvements for long-standing weaknesses in scipy.stats * scipy.stats has six new distributions, eight new (or overhauled) hypothesis tests, a new function for bootstrapping, a class that enables fast random variate sampling and percentile point function evaluation, and many other enhancements. * cdist and pdist distance calculations are faster for several metrics, especially weighted cases, thanks to a rewrite to a new C++ backend framework * A new class for radial basis function interpolation, RBFInterpolator, was added to address issues with the Rbf class. - Enable fast part of the test suite ==== python-tomli ==== Version update (1.2.1 -> 2.0.0) - Upgrade to 2.0.0: - Removed Python 3.6 support - Support for text file objects as load input. Use binary file objects instead. - First argument of load and loads can no longer be passed by keyword. - Allow lower case "t" and "z" in datetimes - Raise an error when dotted keys define values outside the "current table". Technically speaking TOML v1.0.0 does allow such assignments but that isn't intended by specification writers, and will change in a future specification version (see the pull request). - Illegal characters in error messages were surrounded by two pairs of quotation marks - TOMLDecodeError.__module__ is now the public import path (tomli) instead of private import path (tomli._parser) - Eliminated an import cycle when typing.TYPE_CHECKING is True. This allows sphinx-autodoc-typehints to resolve type annotations. ==== qtkeychain-qt5 ==== Subpackages: libqt5keychain1 libqt5keychain1-lang - Add patch to restore compatibility with CMake 3.16: * 0001-Define-a-poper-exported-CMake-target-instead-of-intr.patch - Fix qtkeychain users on Leap. ==== ruby3.1 ==== Subpackages: libruby3_1-3_1 - Added https://github.com/ruby/ipaddr/commit/77fe1fca0abb56f7f07725c0a3803d53a315c8... Fix vagrant with ruby 3.1 ==== rubygem-ed25519 ==== Version update (1.2.4 -> 1.3.0) updated to version 1.3.0 see installed CHANGES.md [#]# [1.3.0] (2022-01-16) [1.3.0]: https://github.com/crypto-rb/ed25519/compare/v1.2.4...v1.3.0 - Bump rubocop dependencies. ([#30]) - Add support for Ruby 3 & JRuby 9.3.0. ([#31]) [#30]: https://github.com/crypto-rb/ed25519/pull/30 [#31]: https://github.com/crypto-rb/ed25519/pull/31 ==== rubygem-excon ==== Version update (0.85.0 -> 0.90.0) updated to version 0.90.0 no changelog found ==== rubygem-fast_gettext ==== Version update (2.0.3 -> 2.2.0) updated to version 2.2.0 see installed CHANGELOG 2.1.0 -- Remove taint checking https://github.com/grosser/fast_gettext/pull/133 ==== rubygem-ffi ==== Version update (1.15.4 -> 1.15.5) updated to version 1.15.5 see installed CHANGELOG.md 1.15.5 / 2022-01-10 - ------------------ Fixed: * Fix long double argument or return values on 32bit i686. #849 * FFI::ConstGenerator: avoid usage of the same binary file simultaneously. #929 Added: * Add Windows fat binary gem for Ruby-3.1 Removed: * Remove Windows fat binary gem for Ruby < 2.4 ==== rubygem-formatador ==== Version update (1.1.0 -> 0.3.0) updated to version 0.3.0 see installed changelog.txt v0.3.0 06/17/21 =============== add travis badge to readme change readme to md fix markdown readme fix travis badge monkey-patch StringIO to try and fix jruby build override tty? for jruby build fix copyright statement use unicode.width instead of string.length remove unicode from requirements, use only if loaded display datum who's value is a FalseClass more colors with syntax-specific code/length limitations better code visualization in readme update readme remove broken rubinius build from CI fix length method to detect multibyte char width fix test for table with multi byte chars support multibyte characters update CI to 2.2.7, 2.3.4, and 2.4.1 drop rubyforge_project from gemspec and rakefile change github reference to https change readme.rdoc to readme.md in gemspec - Cleanup rpmlint warnings - updated to version 0.2.5 - updated to version 0.2.4 - initial package (version 0.2.3) ==== rubygem-rb-kqueue ==== Version update (0.2.6 -> 0.2.7) updated to version 0.2.7 no changelog found ==== rubygem-rspec-expectations ==== Version update (3.10.1 -> 3.10.2) updated to version 3.10.2 see installed Changelog.md [#]## Development [Full Changelog](http://github.com/rspec/rspec-expectations/compare/v3.10.2...3-10-maintenanc...) [#]## 3.10.2 / 2022-01-14 [Full Changelog](http://github.com/rspec/rspec-expectations/compare/v3.10.1...v3.10.2) Bug Fixes: * Fix support for dynamic matchers for expectation target checks (Phil Pirozhkov, #1294) * Fix `expect(array).to include(hash).times`, previously this would fail due to matching the entire array as a single hash, rather than a member of the hash. (Slava Kardakov, #1322) * Ensure `raise_error` matches works with the `error_highlight` option from Ruby 3.1. (Peter Goldstein, #1339) ==== salt ==== Subpackages: python3-salt salt-master salt-minion salt-transactional-update - Fix exception in batch_async caused by a bad function call - Added: * drop-serial-from-event.unpack-in-cli.batch_async.patch - Fix inspector module export function (bsc#1097531) - Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357) - Added: * fix-inspector-module-export-function-bsc-1097531-481.patch * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch ==== samba ==== Version update (4.15.4+git.224.dea2f6dc836 -> 4.15.5+git.328.f1f29505d84) Subpackages: libsamba-policy0-python3 samba-ad-dc-libs samba-client samba-client-32bit samba-client-libs samba-client-libs-32bit samba-gpupdate samba-ldb-ldap samba-libs samba-libs-python3 samba-python3 samba-winbind samba-winbind-libs samba-winbind-libs-32bit - Update to 4.15.5 * CVE-2021-44141: UNIX extensions in SMB1 disclose whether the outside target of a symlink exists; (bso#14911); (bsc#1193690). * CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit module; (bso#14914); (bsc#1194859). * CVE-2022-0336: Re-adding an SPN skips subsequent SPN conflict checks; bso#14950); (bsc#1195048). - CVE-2021-44141: Information leak via symlinks of existance of files or directories outside of the exported share; (bso#14911); (bsc#1193690); - CVE-2021-44142: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution; (bso#14914); (bsc#1194859); - CVE-2022-0336: Samba AD users with permission to write to an account can impersonate arbitrary services; (bso#14950); (bsc#1195048); ==== sane-backends ==== Version update (1.0.32 -> 1.1.1) Subpackages: libsane1 sane-backends-autoconfig - Upgraded to sane-backends version 1.1.1 * Backends + epson2: Fixed support for many scanners that don't support focus command. + epson2: Improve reliability of long scans. + epsonds: Implemented support for the following Epson scanners: - DS-1610, DS-1630, DS-1660W, DS-310, DS-320, DS-360W, DS-410, DS-530, DS-530II, DS-531, DS-535, DS-535H, DS-535II, DS-570W, DS-570WII, DS-571W, DS-575W, DS-575WII, DS-70, DS-80W - ES-200, ES-300W, ES-300WR, ES-400, ES-400II, ES-50, ES-500W, ES-500WII, ES-500WR, ES-55R, ES-580W, ES-60W, ES-60WB, ES-60WW, ES-65WR, - ET-2700 Series, ET-2710 Series, ET-2810 Series, ET-M2140 Series, ET-M3140 Series, - EW-052A Series, - FF-680W, - L3150 Series, L3200 Series, L3210 Series, L3250 Series, L4150 Series, - M2140 Series, M3140 Series, - RR-60, RR-600W, RR-70W, - XP-2100 Series, XP-2150 Series + epson2: Marked XP-452 455 series as supported in documentation + escl: Fixed scanning problems on certain scanners due to incorrect URL being used (#479) + escl: Fixed support for different resolutions when using JPEG format + escl: Fixed handling of ipp-usb redirects to localhost which previously caused certain scanners to be always reported as busy + escl: Added support for Brother DCP-J772DW and Epson ET-2750 scanners + escl: Marked the following scanners as supported in documentation: - Canon PIXMA G4511 - Canon PIXMA TR4550 Series - Canon PIXMA TR4551 Series - Epson ET-6100 + escl: Implemented support for disabling PDF output on scanners where it's broken (#510) + escl: Implemented support for Canon PIXME TR4520 and TR7500 scanners + genesys: Improved scan quality on Canon LiDE 35/40/50/60 by using brighter LED illumination + genesys: Fixed control of contrast and brigthness on certain scanners (#271) + genesys: Fixed crashes when handling slightly unexpected conditions (#464) + genesys: Fixed support for Plustek Opticfilm 7200 v2 scanner + genesys: Fixed button support on HP ScanJet G4010 + genesys: Fixed compilation on gcc-4.8 + genesys: Fixed incorrect LED exposure calculation leading to wrong color balance on certain resolutions on gl841 scanners + genesys: Improved gray scan quality on Canon LiDE 110, 120, 210, 220 (#106, #52) + genesys: Fixed issue of motor becoming stuck at certain resolutions on Canon LiDE 50 and possibly other gl841 scanners (#357) + genesys: Fixed periodic black lines in gray scans on Canon LiDE 80 + genesys: Removed support for broken 75 and 100 dpi hardware resolutions to fix preview scans (#383). These resolutions did not have any benefit compared to next smallest 150 dpi resolution + genesys: Add support for running in embedded environments that don't support threads + genesys: Fixed gray scans to use white color for illumination instead of red on Canon LiDE 35/40/50/60 and potentially other gl841 scanners. Old behavior can be restored via the color filter setting to select specific color component for the gray scan + genesys: The genesys backend is now distributed under GPL v2 or later license. Previously there existed an exception that allowed additional uses of the backend + gt68xx: Fixed several memory issues that can potentially lead to crashes or increased memory use + hp4200: Fixed crash when using HP ScanJet 4200C (#454) + microtek: Fixed support for embedded platforms using uclibc + pieusb: Implemented support for Reflecta RPS 10M scanner + pieusb: Fixed support for automatically advancing slides on DigitDia 4000 + pixma: Fixed compliation with NDEBUG macro defined + pixma: Marked Canon PIXMA G4511 as supported in documentation + scangearmp2: Mark GX6000, GX7000, TS5400 and MX455 series as supported * Frontends + Improved documentation of scanimage concerning options provided by backends + scanimage: Improved help to specify which options are advanced + scanimage: Implemented support for PDF output format - Cleanup create_hpaio.desc_from_models.dat: * Remove scanners unsupported by hplip (scan-type < 0) * Simplify and significantly speed it up ==== sendmail ==== Subpackages: libmilter1_0 - Allow mail delivery below /home again, that is disable "ProtectHome=read-only" for now ==== shaderc ==== Version update (2021.3 -> 2022.0) - Update to release 2022.0 * Update to Glslang 11.8.0 * Support Vulkan 1.3 * Support targeting SPIR-V 1.6, which is the default for Vulkan 1.3 ==== sudo ==== Version update (1.9.8p2 -> 1.9.9) Subpackages: sudo-plugin-python - Update to 1.9.9 * Sudo can now be built with OpenSSL 3.0 without generating warnings about deprecated OpenSSL APIs. * A digest can now be specified along with the ALL command in the LDAP and SSSD back-ends. Sudo 1.9.0 introduced support for this in the sudoers file but did not include corresponding changes for the other back-ends. * visudo now only warns about an undefined alias or a cycle in an alias once for each alias. * The sudoRole cn was truncated by a single character in warning messages. GitHub issue #115. * The cvtsudoers utility has new --group-file and --passwd-file options to use a custom passwd or group file when the - -match-local option is also used. * The cvtsudoers utility can now filter or match based on a command. * The cvtsudoers utility can now produce output in csv (comma-separated value) format. This can be used to help generate entitlement reports. * Fixed a bug in sudo_logsrvd that could result in the connection being dropped for very long command lines. * Fixed a bug where sudo_logsrvd would not accept a restore point of zero. * Fixed a bug in visudo where the value of the editor setting was not used if it did not match the user?s EDITOR environment variable. This was only a problem if the env_editor setting was not enabled. Bug #1000. * Sudo now builds with the -fcf-protection compiler option and the - z now linker option if supported. * The output of sudoreplay -l now more closely matches the traditional sudo log format. * The sudo_sendlog utility will now use the full contents of the log.json file, if present. This makes it possible to send sudo-format I/O logs that use the newer log.json format to sudo_logsrvd without losing any information. * Fixed compilation of the arc4random_buf() replacement on systems with arc4random() but no arc4random_buf(). Bug #1008. * Sudo now uses its own getentropy() by default on Linux. The GNU libc version of getentropy() will fail on older kernels that don?t support the getrandom() system call. * It is now possible to build sudo with WolfSSL?s OpenSSL compatibility layer by using the --enable-wolfssl configure option. * Fixed a bug related to Daylight Saving Time when parsing timestamps in Generalized Time format. This affected the NOTBEFORE and NOTAFTER options in sudoers. Bug #1006. * Added the -O and -P options to visudo, which can be used to check or set the owner and permissions. This can be used in conjunction with the -c option to check that the sudoers file ownership and permissions are correct. Bug #1007. * It is now possible to set resource limits in the sudoers file itself. The special values default and ?user? refer to the default system limit and invoking user limit respectively. The core dump size limit is now set to 0 by default unless overridden by the sudoers file. * The cvtsudoers utility can now merge multiple sudoers sources into a single, combined sudoers file. If there are conflicting entries, cvtsudoers will attempt to resolve them but manual intervention may be required. The merging of sudoers rules is currently fairly simplistic but will be improved in a future release. * Sudo was parsing but not applying the ?deref? and ?tls_reqcert? ldap.conf settings. This meant the options were effectively ignored which broke dereferencing of aliases in LDAP. Bug #1013. * Clarified in the sudo man page that the security policy may override the user?s PATH environment variable. Bug #1014. * When sudo is run in non-interactive mode (with the -n option), it will now attempt PAM authentication and only exit with an error if user interaction is required. This allows PAM modules that don?t interact with the user to succeed. Previously, sudo would not attempt authentication if the -n option was specified. Bug #956 and GitHub issue #83. * Fixed a regression introduced in version 1.9.1 when sudo is built with the --with-fqdn configure option. The local host name was being resolved before the sudoers file was processed, making it impossible to disable DNS lookups by negating the fqdn sudoers option. Bug #1016. * Added support for negated sudoUser attributes in the LDAP and SSSD sudoers back ends. A matching sudoUser that is negated will cause the sudoRole containing it to be ignored. * Fixed a bug where the stack resource limit could be set to a value smaller than that of the invoking user and not be reset before the command was run. Bug #1016. - sudo no longer ships schema for LDAP. - sudo-feature-negated-LDAP-users.patch dropped, included upstream - refreshed sudo-sudoers.patch - Add support in the LDAP filter for negated users, patch taken from upstream (jsc#20068) * Adds sudo-feature-negated-LDAP-users.patch ==== tcsh ==== Version update (6.23.02 -> 6.24.00) Subpackages: tcsh-lang - Add patch tcsh-6.24.00-which.dif from upstream mailing list to fix bug in which builtin, that is return error if a command is not found - Update to tcsh 6.24.00 11. Update config.guess and config.sub so arm64 is recognized ==== tevent ==== Subpackages: libtevent0 libtevent0-32bit python3-tevent - Fix build on 15.3 (for the heimdal addc build), by bundling cmocka. ==== vsftpd ==== - Add "seccomp-fixes.patch" to fix the syscall architecture offset from 4 to 5, this change was documented in <https://lore.kernel.org/patchwork/patch/554803/>. - Add "vsftpd-openlog-force.patch" to a logic error in the way the force option for syslog's openlog() call was handled. - Add "vsftpd-seccomp-getrandom.patch" to fix a seccomp failure in FIPS mode when SSL was enabled. [bsc#1052900] - Add "vsftpd-seccomp-ssl.patch" to allow stat() to be called, which is required during SSL initialization by RAND_load_file(). - Add "vsftpd-seccomp-wait4.patch" to allow wait4() to be called so that the broker can wait for its child processes. [bsc#1021387] - Refresh patches to -p1 style so that we can use %autosetup: * vsftpd-2.0.4-dmapi.patch * vsftpd-2.0.4-enable-ssl.patch * vsftpd-2.0.5-enable-debuginfo.patch * vsftpd-2.0.5-utf8-log-names.patch * vsftpd-2.0.5-vuser.patch * vsftpd-2.3.5-conf.patch - Apply "revert-undocumented-config-file-format-changes.patch" to revert the "ssl_tlsv1_X"-style config file options back to their original spelling. The changes that dropped the underscore from the version numbers in release 3.0.4 breaks existing configurations and it was never documented anywhere -- not in the package's changelog and not in the packages's own man page. - Apply "use-system-wide-tls-cipher-policy.patch" so that vsftpd follows the system-wide TLS cipher policy "DEFAULT_SUSE" by default. Run the command "openssl ciphers -v DEFAULT_SUSE" to see which ciphers this includes. - Apply "add vsftpd-allow-dev-log-socket.patch" to allow sendto() syscall when /dev/log support is enabled. [bnc#786024] - Apply "vsftpd-enable-sendto-for-prelogin-syslog.patch" to allow sendto() to be called from check_limits(), which is necessary for vsftpd to write to the system log. ==== wireplumber ==== Subpackages: libwireplumber-0_4-0 wireplumber-audio - Use the default lua instead of hardcoding 5.3 ==== yast2-bootloader ==== Version update (4.4.15 -> 4.4.16) - Allow product/system role to select boot timeout (jsc#SLE-22667) - 4.4.16 ==== yast2-dns-server ==== Version update (4.4.0 -> 4.4.1) - jsc#SLE-22015 - Master/Slave servers and zones renamed to conform to inclusive naming. According to RFC8499 primary/secondary names are used now. - 4.4.1 ==== yast2-installation ==== Version update (4.4.37 -> 4.4.39) - Fixed crash in Ruby 3.1 after pressing the hamburger menu icon in the welcome screen (bsc#1195422) - 4.4.39 - Redirect the STDERR output in the memsample script to not break the YaST UI (bsc#1195116) - 4.4.38 ==== yast2-kdump ==== Version update (4.4.2 -> 4.4.3) - Improve visual perception in help text (by @TarasPanchenko Github user, bsc#1195372) - 4.4.3 ==== yast2-network ==== Version update (4.4.35 -> 4.4.36) - jsc#SLE-22015 - renamed slaves CLI option to conform to inclusive naming: yast lan add name=bond0 bond_ports=eth0 eth1 bootproto=dhcp - the "slaves=" option stays for backward compatibility - 4.4.36 ==== yast2-printer ==== Version update (4.4.1 -> 4.4.2) - Fix broken help text (by @TarasPanchenko Github user, bsc#1195370) - 4.4.2 ==== yast2-samba-server ==== Version update (4.4.1 -> 4.4.2) - Remove libsmbclient-devel BuildRequires in favor of pkgconfig(smbclient); (jsc#SLE-20577); - 4.4.2 ==== yast2-trans ==== Version update (84.87.20220123.256c7f91b3 -> 84.87.20220131.0700dd3449) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20220131.0700dd3449: * Translated using Weblate (Finnish) * Translated using Weblate (Ukrainian) * Translated using Weblate (Finnish) * Translated using Weblate (Finnish) * Translated using Weblate (Ukrainian) * Translated using Weblate (Finnish) * Translated using Weblate (Finnish) * Translated using Weblate (Finnish) * Translated using Weblate (Finnish) * Translated using Weblate (Finnish) * Translated using Weblate (Finnish) * Translated using Weblate (Finnish) * Translated using Weblate (Ukrainian) * Translated using Weblate (Ukrainian) * Translated using Weblate (Ukrainian) * Translated using Weblate (Ukrainian) * Translated using Weblate (Ukrainian) * Translated using Weblate (Ukrainian) * Translated using Weblate (Slovak) * Translated using Weblate (Japanese) * Translated using Weblate (Slovak) * Translated using Weblate (Czech) * Translated using Weblate (Dutch) * Translated using Weblate (Catalan) * New POT for text domain 'storage'. * New POT for text domain 'security'. * New POT for text domain 'installation'. * New POT for text domain 'base'. * Translated using Weblate (Ukrainian) * Translated using Weblate (Ukrainian) * Translated using Weblate (Slovak) * Translated using Weblate (Ukrainian) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Dutch) * Translated using Weblate (Catalan) * Translated using Weblate (Japanese) * New POT for text domain 'control'. * New POT for text domain 'autoinst'. * Translated using Weblate (German) * Translated using Weblate (Spanish) ==== zypper ==== Version update (1.14.50 -> 1.14.51) Subpackages: zypper-log zypper-needs-restarting - Singletrans: handle fatal and non-fatal script errors properly. - Add SingleTransReportReceiver. - Immediately write out additional rpm output. - BuildRequires: libzypp-devel >= 17.29.0. Need SingleTransReport and immediate rpm script output reports. - version 1.14.51