Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20230906 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: alsa (1.2.9 -> 1.2.10) alsa-ucm-conf (1.2.9 -> 1.2.10) alsa-utils (1.2.9 -> 1.2.10) at-spi2-core (2.48.3 -> 2.48.4) bluez (5.68 -> 5.69) elfutils-debuginfod glib2 (2.76.4 -> 2.76.5) gnome-shell (44.3 -> 44.4) grub2 javapackages-tools (6.1.0 -> 6.2.0) konsole libadwaita (1.3.4 -> 1.3.5) libei (1.0.0 -> 1.0.901) libgphoto2 (2.5.30 -> 2.5.31) libstorage-ng (4.5.136 -> 4.5.139) lsb-release man manpages-l10n (4.19.0 -> 4.20.0) mozilla-nss (3.92 -> 3.93) mozjs102 (102.14.0 -> 102.15.0) mutter (44.3 -> 44.4) nodejs20 (20.5.1 -> 20.6.0) open-isns perl-URI (5.19 -> 5.210.0) pigz (2.7 -> 2.8) python-chardet (5.1.0 -> 5.2.0) python-setuptools (67.8.0 -> 68.1.2) qpdf (11.5.0 -> 11.6.0) rdma-core suse-module-tools (16.0.34 -> 16.0.35) vsftpd webkit2gtk3 webkit2gtk3-soup2 yast2-trans (84.87.20230818.ea489402e5 -> 84.87.20230901.be24cb382f) zvbi (0.2.41 -> 0.2.42) zypper (1.14.62 -> 1.14.64) === Details === ==== alsa ==== Version update (1.2.9 -> 1.2.10) Subpackages: libasound2 libatopology2 - Update to version 1.2.10: * MIDI 2.0 feature support * build fixes for various platforms * various documentation fixes * misc topology fixes * ucm fixes and cleanups For details, see: https://www.alsa-project.org/wiki/Changes_v1.2.9_v1.2.10#alsa-lib - Took upstream fix for possible build errors: 0001-control.h-Fix-ump-header-file-detection.patch ==== alsa-ucm-conf ==== Version update (1.2.9 -> 1.2.10) - Update to version 1.2.10: * updates / fixes for various devices: mtk-rt5650, usb-audio, tegra es8316, sof-essx8336, pinephone, Steinberg UR44C, AMD ACP RPL, ACP63, sof-hda-dsp, etc For details, see: https://www.alsa-project.org/wiki/Changes_v1.2.9_v1.2.10#alsa-ucm-conf - Upstream regression fix: 0001-SplitPCM-Device-argument-may-not-be-set.patch ==== alsa-utils ==== Version update (1.2.9 -> 1.2.10) - Update to alsa-utils 1.2.10: * MIDI 2.0 / UMP support for sequencer programs * nhlt: add nhlt-dmic-info utility * Build fixes and cleanups * speaker-test: allow large buffer and period time setup - up to 100 seconds * various topology fixes For details, see: https://www.alsa-project.org/wiki/Changes_v1.2.9_v1.2.10#alsa-utils - Fix the builds with old gcc: 0001-axfer-use-ATTRIBUTE_UNUSED-instead-remove-argument-n.patch 0002-amidi-use-ATTRIBUTE_UNUSED-instead-remove-argument-n.patch 0003-alsaloop-use-ATTRIBUTE_UNUSED-instead-remove-argumen.patch 0004-bat-use-ATTRIBUTE_UNUSED-instead-remove-argument-nam.patch 0005-seq-use-ATTRIBUTE_UNUSED-instead-remove-argument-nam.patch 0006-alsaucm-use-ATTRIBUTE_UNUSED-instead-remove-argument.patch 0007-topology-use-ATTRIBUTE_UNUSED-instead-remove-argumen.patch ==== at-spi2-core ==== Version update (2.48.3 -> 2.48.4) Subpackages: at-spi2-core-lang libatk-1_0-0 libatk-bridge-2_0-0 libatspi0 typelib-1_0-Atk-1_0 typelib-1_0-Atspi-2_0 - Update to version 2.48.4: + Add atspi_get_version() to return the runtime version of the AT-SPI library. + collection: - Fix match testing for attributes. - Avoid locking up if an object has a very large child count. + Fix possible NULL pointer dereference when deregistering an event listener. + Various fixes for the new key grabbing API. ==== bluez ==== Version update (5.68 -> 5.69) Subpackages: bluez-auto-enable-devices bluez-cups bluez-zsh-completion libbluetooth3 - update to 5.69 * Fix issue with BAP enabling state correctly when resuming. * Fix issue with detaching source ASEs only after Stop Ready. * Fix issue with handling VCP audio location and descriptor. * Fix issue with generating IRK for adapter with privacy enabled. * Add support for BAP broadcast sink. - Add three new man pages ==== elfutils-debuginfod ==== Subpackages: debuginfod-client debuginfod-profile libdebuginfod1 - Conditionalize config(debuginfod-profile) Requires tag in the debuginfod-client sub-package, with the help of the %sle_version macro, so only Tumbleweed (currently the only distro supported by debuginfod.opensuse.org) sets it. ==== glib2 ==== Version update (2.76.4 -> 2.76.5) Subpackages: glib2-lang glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 libgthread-2_0-0 - Update to version 2.76.5: + Bugs fixed: - Possible SEGV (null pointer deref) in distribute_method_call(). - Possible SEGV (null pointer deref) in _g_resource_file_new(). - Backport !3529 “gmenuexporter: synchronization in org_gtk_Menus_get_interface.” to glib-2-76. - Backport !3547 “glib/gfileutils.c: use 64 bits for value in get_tmp_file()” to glib-2-76. - Backport !3554 “gresourcefile: Fix crash if called with a badly escaped URI” to glib-2-76. - Backport !3555 “gkeyfile: Fix overwriting of GError” to glib-2-76. - Backport !3539 “gdbusmessage: Validate required headers have the right type” to glib-2-76. ==== gnome-shell ==== Version update (44.3 -> 44.4) Subpackages: gnome-extensions gnome-shell-calendar gnome-shell-lang - Update to version 44.4: + Fix accessibility of quick settings sliders. + Allow notification dismissal with backspace. + Misc. bug fixes and cleanups. + Updated translations. ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - grub2-mkconfig-riscv64.patch: Handle riscv64 in mkconfig ==== javapackages-tools ==== Version update (6.1.0 -> 6.2.0) Subpackages: javapackages-filesystem - Upgrade to upstream version 6.2.0 * Întegrate our changes from javapackages-6.1.0-maven-depmap.patch - Removed patch: * javapackages-6.1.0-maven-depmap.patch + upstreamed - Added patch: * 0001-Make-the-alias-generation-reproducible.patch + separate patch for our reproducible changes that was not part of the integrated pull request ==== konsole ==== Subpackages: konsole-part konsole-part-lang konsole-zsh-completion - Add upstream crash fix (kde#473043) * 0001-Fix-crashes-in-testTerminalInterface.patch ==== libadwaita ==== Version update (1.3.4 -> 1.3.5) Subpackages: libadwaita-1-0 libadwaita-lang typelib-1_0-Adw-1 - Update to version 1.3.5: + Set the correct gettext domain on all widgets. + AdwExpanderRow: Accessibility fixes. + AdwStyleManager: Fix over-releasing a string on macOS. + Demo: Correctly dismiss the last toast in the dialogs demo. + Stylesheet: - Fix menubutton.card corners. - Fix button.card focus ring transition. - Avoid background overdraw in GtkColumnView. + Updated translations. ==== libei ==== Version update (1.0.0 -> 1.0.901) - Update to release 1.0.901 (1.1.0~rc1) * ei_device_get_region_at() and its libeis equivalent was added as a helper to obtain a device's region at a given point. * ei_region_get_mapping_id() returns the mapping id previously set by the EIS implementation via eis_region_set_mapping_id(). This mapping id can be used to identify external resources that have a relationship with this region. This is a protocol addition and bumps the ei_device protocol to version 2. ==== libgphoto2 ==== Version update (2.5.30 -> 2.5.31) Subpackages: libgphoto2-6 libgphoto2-6-lang libgphoto2_port12 - updated to 2.5.31 release ptp2: * do better event queueing during capture (makes capture faster, avoids losing events) * Canon EOS: OLC logic rewritten to be table driven, more debugging of the content, config "testolc" to generate debugoutput. Supports more cameras better. * Canon EOS: various bugfixes * Sony Alpha: Added config options: focusarea, liveviewsettingeffect * Olympus: Enabled OM-1 capture * Battery Level: also support ENUM style battery reporting for Canon * Nikon 1: S1 also does not support everything * Sony Alpha: small changes in config setters * merged some improvements from NorthOfYou fork for Canon EOS, Nikon and Sony * New ids: - Canon EOS 850D, R7, R10, R5 C, R6m2 - Fuji X-H2, X-T5 - GOPRO HERO 11 BLACK, 11 BLACK mini - new ids also imported from libmtp - Nikon Z30, Z8 - OMSYSTEM OM-1 - Pentax KP (PTP mode) - Ricoh GR IIIx - Sigma fp L - Sony A7S III, ILCE-1, ILME-FX3, 7RM5 aka A7-RV, digigr8: * fixed init to not switch to webcam mode pentax: * Added Pentax KP general: * disable log formatting when we are not logging (speeds up large downloads, as we are not hex dumping the whole data and immediately discard the result) * libltdl usage now thread-safe. (some other library pieces are not threadsafe yet) * some time_t 32bit vs 64bit fixes * some cleanups and warning fixes translations: * updated swedish, spanish * added georgian, friulian - libgphoto2-enable-vusb-ptp.patch: upstream ==== libstorage-ng ==== Version update (4.5.136 -> 4.5.139) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#946 - improved json parse functions to handle string and integer - 4.5.139 - merge gh#openSUSE/libstorage-ng#945 - fixed parsing of lsscsi version for older lsscsi versions (bsc#1214814) - 4.5.138 - merge gh#openSUSE/libstorage-ng#944 - add awk to GitHub action for Tumbleweed - 4.5.137 ==== lsb-release ==== - add 797e459ecaa482bf8e7bfe02cf5f1cea367ba9e9.patch to fix bashisms ==== man ==== - Fix the content in patch file man-propose-online.patch ==== manpages-l10n ==== Version update (4.19.0 -> 4.20.0) Subpackages: man-pages-cs man-pages-da man-pages-de man-pages-el man-pages-es man-pages-fr man-pages-hu man-pages-it man-pages-pl man-pages-pt_BR man-pages-ru - Update to version 4.20.0: Updated and added many translations. - Rebase broken links patch: * Remove manpages-l10n-4.16.0-fix-links.patch. * Add manpages-l10n-4.20.0-fix-links.patch. - Update macros: * Switch from Leap 15.5 to Leap 15.6. * Switch from Fedora 38 to Fedora 39. ==== mozilla-nss ==== Version update (3.92 -> 3.93) Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs mozilla-nss-tools - Update to NSS 3.93: + bmo#1849471 - Update zlib in NSS to 1.3. + bmo#1848183 - softoken: iterate hashUpdate calls for long inputs. + bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980). - Rebase nss-fips-pct-pubkeys.patch. ==== mozjs102 ==== Version update (102.14.0 -> 102.15.0) - Update to version 102.15.0: + Various security fixes and other quality improvements. + CVE-2023-4573: Memory corruption in IPC CanvasTranslator + CVE-2023-4574: Memory corruption in IPC ColorPickerShownCallback + CVE-2023-4575: Memory corruption in IPC FilePickerShownCallback + CVE-2023-4576: Integer Overflow in RecordedSourceSurfaceCreation + CVE-2023-4581: XLL file extensions were downloadable without warnings + CVE-2023-4584: Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2 ==== mutter ==== Version update (44.3 -> 44.4) Subpackages: mutter-lang - Update to version 44.4: + Fix xwayland-allow-byte-swapped-clients setting. + Fix restoring focus when leaving the overview. + Fix touch move operations on subsurfaces. + Fix flickering when DRI driver isn't available. + Fix unexpected cursor changes over non-resizable windows. + Fix restoring maximized state of SSD windows. + Fix window focus unexpectedly moving to secondary monitor when changing workspaces. + Fixed crash. + Misc. bug fixes and cleanups. + Updated translations. ==== nodejs20 ==== Version update (20.5.1 -> 20.6.0) Subpackages: npm20 - Update to 20.6.0: * add support for .env files to configure envrionment variables * import.meta.resolve unflagged * deps: npm updated to 9.8.1 - nodejs.keyring: updated to include current upstream releasers ==== open-isns ==== - Disable SLP by default for Factory and ALP (bsc#1214884) ==== perl-URI ==== Version update (5.19 -> 5.210.0) - updated to 5.21 see /usr/share/doc/packages/perl-URI/Changes 5.21 2023-08-23 16:02:14Z - Fix version declarations in icap.pm and icaps.pm (GH#131) (Olaf Alders) 5.20 2023-08-23 14:13:23Z - Remove Shebang and Taint from all tests. - Fix t/query.t to get rid of a warning about join() on array with undef - Add icap and icaps URIs (GH#130) (david-dick) ==== pigz ==== Version update (2.7 -> 2.8) - version update to 2.8 - Fixed a version bug when compiling with the just-released zlib 1.3 - Will save a modification time only for regular files (just like gzip since 1.10) - Will write all available uncompressed data on an error, for partial data recovery - deleted patches - pigz-2.7-NOTHREAD-tests.patch (upstreamed) ==== python-chardet ==== Version update (5.1.0 -> 5.2.0) - update to 5.2.0: * Adds support for running chardet CLI via `python -m chardet` ==== python-setuptools ==== Version update (67.8.0 -> 68.1.2) - update to 68.1.2 * Fix editable install finder handling of nested packages, by only handling 1 level of nesting and relying on importlib.machinery to find the remaining modules based on the parent package path. - add sphinx72.patch: address circular imports in sphinx 7.2+ - update to 68.1.0 * Removed code referencing bdist_wininst in install_scripts. * Promote pyproject.toml’s [tool.setuptools] out of beta. * Automatically add files listed in Extension.depends to sdists, as long as they are contained in the project directory * Require Python 3.8 or later. * Use default encoding to create .pth files with editable_wheel. * Detects (and complain about) scripts and gui-scripts set via setup.py when pyproject.toml does not include them in dynamic. - update to 68.0.0: * Removed verification for existing ``depends.txt`` file * Remove autofixing of broken ``.egg-info`` directories containing the ``-`` character in their base name (without suffix). * Remove deprecated APIs in ``easy_install``: ``get_script_args``, ``get_script_header`` and ``get_writer``. * Removed ``egg_info.get_pkg_info_revision`` (deprecated * Removed ``setuptools.dist._get_unpatched`` (deprecated * Removed support for SVN in ``setuptools.package_index`` (deprecated since 2018). * Removed support for invalid ``pyproject.toml`` files. * Added symlink support to launcher for installed executables -- by :user:`eugene-sevostianov-sc` * Updated vendored ``packaging`` version from 23.0 to 23.1 -- by :user:`MetRonnie` * Implemented workaround for old versions of ``vswhere``, which miss the * ``-requiresAny`` parameter, such as the ones distributed together with Visual Studio 2017 < 15.6. * Changed ``DistutilsMetaFinder`` to skip ``spec_for_pip`` on Python >= 3.12. * Removed ``_distutils_hack.remove_shim`` on Python >= 3.12 (since ``distutils`` was removed from the standard library, ``DistutilsMetaFinder`` cannot be disabled on Python >= 3.12). * #3920: Add a link to deprecation warning in ``pkg_resources`` and improve ``stacklevel`` for better visibility. - drop use-tarfile-extraction_filter.patch (upstream) ==== qpdf ==== Version update (11.5.0 -> 11.6.0) - version update to 11.6.0 - Bug fixes: - Fix corner case in the ASCII85 decoder. - Properly report warnings when ``--pages`` is used and the warnings appear in other than the primary file. - Improve ``--bash-completion`` and ``--zsh-completion`` to better support paths with spaces in them. - Move detection of random number device from compile-time to runtime to improve cross compilation. - Fix bugs around attempting to copy ``/Pages`` objects with ``copyForeignObject`` (which explicitly doesn't allow this). ==== rdma-core ==== Subpackages: libefa1 libibverbs libibverbs1 libmana1 libmlx4-1 libmlx5-1 librdmacm1 rdma-ndd - Add missing-quoting.patch - Use normal GNU tar option syntax - Remove old RPM spec logic (%defattr) ==== suse-module-tools ==== Version update (16.0.34 -> 16.0.35) Subpackages: suse-module-tools-scriptlets - Update to version 16.0.35: * split off regenerate-initrd-posttrans in the kernel-scriptlets package (boo#1213459) * wm2: Update for usrmerge (boo#1214428) ==== vsftpd ==== - Use pam macros to install pam config in /usr/lib/pam.d - Adjust vsftpd.pam to include postlogin config (replace wtmp with wtmpdb for Y2038 [jsc#3144]) ==== webkit2gtk3 ==== Subpackages: WebKitGTK-4.1-lang libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles - Expand lang sub-package in spec file unconditionally to handle previous name change from WebKit2GTK-lang to WebKitGTK-lang. This change affected the automatic generated Requires tag on WebKit2GTK-%{_apiver}, then getting out of sync of what's being required and what's being provided. Now, any sub-package that was providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver} instead (boo#1214835, boo#1214640). ==== webkit2gtk3-soup2 ==== Subpackages: WebKitGTK-4.0-lang libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 webkit2gtk-4_0-injected-bundles - Expand lang sub-package in spec file unconditionally to handle previous name change from WebKit2GTK-lang to WebKitGTK-lang. This change affected the automatic generated Requires tag on WebKit2GTK-%{_apiver}, then getting out of sync of what's being required and what's being provided. Now, any sub-package that was providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver} instead (boo#1214835, boo#1214640). ==== yast2-trans ==== Version update (84.87.20230818.ea489402e5 -> 84.87.20230901.be24cb382f) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sr yast2-trans-sv yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20230901.be24cb382f: * Translated using Weblate (Slovak) * Translated using Weblate (Dutch) * Translated using Weblate (Japanese) * Translated using Weblate (Czech) * Translated using Weblate (Catalan) * New POT for text domain 'bootloader'. * Translated using Weblate (Kurdish) * Translated using Weblate (Kurdish) ==== zvbi ==== Version update (0.2.41 -> 0.2.42) - version update to 0.2.42 * Fix several compiler warnings. * Apply patch to consider ERASE_PAGE flag with single page transmissions. ==== zypper ==== Version update (1.14.62 -> 1.14.64) Subpackages: zypper-log zypper-needs-restarting - Fix name of the bash completion script (bsc#1215007) In 1.14.63 the location of the bash completion script was changed to /usr/share/bash-completion/completions/. But the patch failed to also rename the completion script. The original script name zypper.sh is not recognized at the new location. - Update notes about failing signature checks (bsc#1214395) It might be a transient issue if the server is in the midst of receiving new data. Retry after a few minutes might work. - Improve the SIGINT handler to be signal safe (bsc#1214292) This patch updates the SIGINT handling strategy to be signal safe. Meaning the signal handler will do not much more than setting a flag, which we are going to check in the normal program flow as much as possible. - version 1.14.64 - Changed location of bash completion script (bsc#1213854). This changes the location of zypper.sh bash completion script from /usr/share/bash-completion/completions/. - version 1.14.63