Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
installation-images-MicroOS (17.81 -> 17.86)
libcontainers-common
libgudev
libverto
libxmlb (0.3.10 -> 0.3.11)
libzypp (17.31.10 -> 17.31.11)
makedumpfile (1.7.2 -> 1.7.3)
perl-Bootloader (0.941 -> 1.0)
postfix (3.7.4 -> 3.8.0)
protobuf
systemd
xdpyinfo (1.3.3 -> 1.3.4)
zbar
=== Details ===
==== installation-images-MicroOS ====
Version update (17.81 -> 17.86)
- merge gh#openSUSE/installation-images#644
- fix minor usrmerge issue
- 17.86
- merge gh#openSUSE/installation-images#643
- usrmerge fixes in module config creation
- allow firmware file names with spaces
- add qrtr* kernel modules (bsc#1209965)
- 17.85
- merge gh#openSUSE/installation-images#642
- adjust module config for kernel 6.3
- 17.84
- merge gh#openSUSE/installation-images#641
- add cpio-mt to spec file
- 17.83
- merge gh#openSUSE/installation-images#640
- add mt to rescue system (bsc#1188998)
- 17.82
==== libcontainers-common ====
- Own /etc/containers/systemd and /usr/share/containers/systemd,
useful for podman quadlet.
==== libgudev ====
- Add 2 upstream bug fix patches:
* 71b2fda04dd71c637361e8ead103980ad6f27ed5.patch: gudev: Fix
newline stripping by always reading using udev.
* 4216ecd4513bd4c8af73543817a51d6f72f166cc.patch: build: let
meson handle gir, vala, gtk-doc dependencies
- Use ldconfig_scriptlets macro.
==== libverto ====
- Add _multibuild to define 2nd spec file as additional flavor.
Eliminates the need for source package links in OBS.
==== libxmlb ====
Version update (0.3.10 -> 0.3.11)
- update to 0.3.11:
* Add limited support for XPath 1.0 'in' (Richard Hughes)
* Add support for zstd (Richard Hughes)
* Do not assert() when decompressing invalid LZMA (Richard
Hughes)
==== libzypp ====
Version update (17.31.10 -> 17.31.11)
- MediaCurl: Fix endless loop if wrong credentials are stored in
credentials.cat (bsc#1210870)
Since libzypp-17.31.7 wrong credentials stored in credentials.cat
may lead to an endless loop. Rather than asking for the right
credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
(bsc#1208329)
Maximum time in seconds that you allow the connection phase to
the server to take. This only limits the connection phase, it has
no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)
- fix build with boost 1.82
==== makedumpfile ====
Version update (1.7.2 -> 1.7.3)
- update to 1.7.3:
* Support kernels up to v6.3 (x86_64)
* Support sadump with 5-level paging
- temporarily disable eppic until v5.0 branch can be supported
==== perl-Bootloader ====
Version update (0.941 -> 1.0)
- merge gh#openSUSE/perl-bootloader#143
- adjust Makefile for usrmerge and legacy package split
- move obs spec file to git repo
- split off old perl code to perl-Bootloader-legacy package
- remove legacy part completely
- 1.0
- merge gh#openSUSE/perl-bootloader#142
- use fw_platform_size to distinguish between 32 bit and 64 bit
UEFI platforms (bsc#1208003)
- 0.942
==== postfix ====
Version update (3.7.4 -> 3.8.0)
- update to 3.8.0
* Support to look up DNS SRV records in the Postfix SMTP/LMTP
client, Based on code by Tomas Korbar (Red Hat). For example,
with "use_srv_lookup = submission" and "relayhost =
example.com:submission", the Postfix SMTP client will look up
DNS SRV records for _submission._tcp.example.com, and will relay
email through the hosts and ports that are specified with those
records.
* TLS obsolescence: Postfix now treats the "export" and "low"
cipher grade settings as "medium". The "export" and "low" grades
are no longer supported in OpenSSL 1.1.1, the minimum version
required in Postfix 3.6.0 and later. Also, Postfix default
settings now exclude deprecated or unused ciphers (SEED, IDEA,
3DES, RC2, RC4, RC5), digest (MD5), key exchange algorithms
(DH, ECDH), and public key algorithm (DSS).
* Attack resistance: the Postfix SMTP server can now aggregate
smtpd_client_*_rate and smtpd_client_*_count statistics by
network block instead of by IP address, to raise the bar against
a memory exhaustion attack in the anvil(8) server; Postfix TLS
support unconditionally disables TLS renegotiation in the middle
of an SMTP connection, to avoid a CPU exhaustion attack.
* The PostgreSQL client encoding is now configurable with the
"encoding" Postfix configuration file attribute. The default
is "UTF8". Previously the encoding was hard-coded as "LATIN1",
which is not useful in the context of SMTP.
* The postconf command now warns for #comment in or after a Postfix
parameter value. Postfix programs do not support #comment after
other text, and treat that as input.
- rebase/refresh patches
* pointer_to_literals.patch
* postfix-linux45.patch
* postfix-master.cf.patch
* postfix-ssl-release-buffers.patch
* set-default-db-type.patch
==== protobuf ====
Subpackages: libprotobuf-lite3_21_12 libprotobuf3_21_12 python310-protobuf
- Mention the rpmlintrc file in the spec.
- Make possible to build on older systems, like SLE12 that miss
some of the used macros.
==== systemd ====
Subpackages: libsystemd0 libudev1 systemd-coredump systemd-doc systemd-lang udev
- Re-add back 'arabic' keymap mapping as YaST needs more time than expected to
cope with this change.
- systemd.spec: don't call %systemd_{pre,post} on units shipped by the main
package since they don't have any effect during installation (systemctl is not
yet installed when %pre script is executed). This is actually the reason why
it's handled by the %%posttrans scripts of systemd-presets-common-SUSE.
- kbd-model-map.legacy: 'arabic' vc keymap has been renamed 'ara' (bsc#1210702)
- add some green to systemd-boot menu
- kbd-model-map.legacy: drop some entries no longer needed
by YaST (related to bsc#1194609)
- tmpfiles-suse.conf (jsc#PED-3144):
- Remove lastlog entry, replaced by lastlog2
- Remove btmp entry, not Y2038 safe
==== xdpyinfo ====
Version update (1.3.3 -> 1.3.4)
- Update to version 1.3.4
* This release stops compiling support for the XF86-Misc extension by
default, and thus stops linking with the deprecated libXxf86misc
library by default. This support can still be enabled for now by
passing --with-xf86misc to the configure script, but as the server
side of this extension was removed in the xserver-1.6.0 release in 2008
there is little reason to do so, and the support may be removed entirely
in a future release of xdpyinfo.
- we have xorg-server >= 1.6 since sle11-sp1, so we are on the safe
side with our customers
==== zbar ====
- add py311.patch to fix build against python 3.11
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
ModemManager (1.18.12 -> 1.20.6)
breeze
dmidecode
ghostscript
gnome-shell (44.0+42 -> 44.1)
gstreamer-plugins-bad
gtk4
kernel-firmware (20230406 -> 20230427)
libmbim (1.26.4 -> 1.28.4)
librsvg
libstorage-ng (4.5.97 -> 4.5.100)
libva
libva-gl
mdadm
mutter (44.0+54 -> 44.1)
patterns-gnome
power-profiles-daemon (0.12 -> 0.13)
publicsuffix (20230414 -> 20230426)
python-blinker
python-numpy
runc (1.1.6 -> 1.1.7)
yast2-samba-client (4.6.0 -> 4.6.1)
=== Details ===
==== ModemManager ====
Version update (1.18.12 -> 1.20.6)
Subpackages: ModemManager-bash-completion ModemManager-lang libmm-glib0
- Update to version 1.20.6:
+ build: New build option to allow disabling the installation of
examples.
+ core:
- Fix crash when uninhibiting partially removed device.
- Fix crash when attempting to load an invalid shared utils
library.
+ mmcli:
- Allow JSON and key/value output when creating SMS messages.
- Improved JSON output in network scan results.
+ libmm-glib:
- Avoid using g_time_zone_new_offset() unless glib >= 2.58.
- Fix flags to string conversion utils to allow multiple flags.
+ MBIM:
- Reset cached SIM info when SIM is unlocked.
- Fix synchronizing the state of the SIM hot swap configured
flag.
- Fix bug cleaning up the LTE attach info unsolicited message
handler.
- Fallback from QMI UIM service only if unsupported.
- Add missing support for 'emergency' APN type.
+ QMI:
- Fix processing and exposing PCOs.
- Fix power up on modems that don't support power state change
indications.
+ plugins:
- telit:
. add additional support for 5G modems.
. added port type hints for FN990 0x1070, 0x1071
compositions.
. increase allowed initial delay in AT ports.
. fallback to AT commands if loading revision via MBIM fails.
- quectel: add support for EC21-EUX usb modules.
- xmm: fix crash parsing XACT? response.
- Changes from version 1.20.4:
+ build:
- Don't hardcode building shared libraries, so that meson's
default_library option can be used properly,
- po: Added missing Georgian translation in LINGUAS.
+ QMI:
- Fixed loading NR5G signal info.
- Fixed memory leaks when processing signal info.
- Correctly scaled the SNR value reported in NR5G.
- Fixed invalid use-after-free actions due to improper handling
of proxy removal events.
+ MBIM:
- Fixed processing MbimSmsStatusFlag as flags, not as an enum.
- Fixed invalid use-after-free actions due to improper handling
of proxy removal events.
- Chained up device notifications through the MMPortMbim
object.
+ Messaging: Allowed Delete operation during enabling/disabling.
+ Core: Don't assume port tables always exist so that
long-standing operations holding an object reference can finish
cleanly even after the initial object disposal has already been
run.
+ plugins:
- quectel: added new firehose/sahara support udev tags in new
models.
- broadmobi: added MM_PLUGIN_REQUIRED_QCDM flag.
- cinterion:
. added a delay to the ^SWWAN? command.
. added retry mechanism to the ^SWWAN? command.
- Changes from version 1.20.2:
+ build:
- Fixed building without MBIM support.
- Fixed building without tests support.
- Disabled test interface in base manager if building without
tests.
- Updated intel plugin dependencies to require XMM shared
utils.
- Fixed templates to make build reproducible.
+ FCC unlock: Updated shell scripts to avoid requiring bash.
+ MBIM:
- Ignored SIM related indications during a SIM slot switch
operation.
- Updated capabilities loading to use Microsoft Extensions if
available.
- Updated supported modes loading to use the CustomDataClass
field contents.
+ SIM: Fixed length when reading GID1/GID2 using AT commands.
+ Several other minor improvements and fixes.
- Changes from version 1.20.0:
+ API:
- New 'Modem.Sar' interface to allow the host to manage the SAR
power level.
- New 'Modem.GetCellInfo()' method, that allows querying
information about the current serving and neighboring cells.
Currently including 'cell-type' and 'serving' fields for all
cell types, plus additional type-specific fields:
. CDMA: 'nid', 'sid', 'base-station-id', 'ref-pn' and
'pilot-strength'.
. GSM: 'operator-id', 'lac', 'ci', 'timing-advance', 'arfcn',
'base-station-id' and 'rx-level'.
. UMTS: 'operator-id', 'lac', 'ci', 'frequency-fdd-ul',
'frequency-fdd-dl', 'frequency-tdd', 'uarfcn', 'psc',
'rscp', 'ecio' and 'path-loss'.
. TDSCDMA: 'operator-id', 'lac', 'ci', 'uarfcn',
'cell-parameter-id', 'timing-advance', 'rscp' and
... changelog too long, skipping 133 lines ...
dependencies.
==== breeze ====
Subpackages: breeze5-cursors breeze5-decoration breeze5-style breeze5-style-lang breeze5-wallpapers libbreezecommon5-5
- Add patch to avoid CPU use in idle apps (boo#1210747, kde#468903):
* 0001-ProgressBar-Stop-emitting-polish-requests-when-item-.patch
==== dmidecode ====
Fix a potential regression:
- use-read_file-to-read-from-dump.patch: Fix an old harmless bug
which would prevent root from using the --from-dump option since
the latest security fixes.
==== ghostscript ====
Subpackages: ghostscript-x11
- Replace BuildRequire on xorg-x11-devel by pkgconfig(...)
==== gnome-shell ====
Version update (44.0+42 -> 44.1)
Subpackages: gnome-extensions gnome-shell-calendar gnome-shell-lang
- Update to version 44.1:
+ Add section title in background apps menu.
+ Fix visibility of xembed icons.
+ Fix placeholder alignment in bluetooth menu.
+ Fix recording screenshots in recent items.
+ Fix reloading extensions on version-validation changes.
+ Fix force-enabling animations at runtime.
+ Fix stuck session after logout dialog timeout.
+ Fix window screenshots with pointer.
+ Only show network subtitles if they don't match the title.
+ Fix constructing QuickMenuToggles with icon-name.
+ Fix accessible names in VPN menu.
+ Don't fail extracting extensions without schemas.
+ Fixes and improvements to the light theme variant.
+ Improve accessible name of wireless menu items.
+ Use consistent naming for "Power Mode" toggle.
+ Fix support for transparent colors in symbolic SVGs.
+ Fix notifications getting stuck indefinitely.
+ Fix keynav of menu-less buttons.
+ Fix corner cases when matching apps on StartupWmClass.
+ Fix occasional misalignment of search results.
+ Fix regression in content-type sniffing on autorun.
+ Fix building API documentation.
+ Fixed crash.
+ Plugged leak
+ Misc. bug fixes and cleanups
+ Updated translations.
- Enable gtk_doc passed to meson again, build the docs.
- Move file wrongly placed in the split out gnome-extensions
sub-package. There is the gui app and there is the commandline
binary. These two are destinct from one another.
- Mark patch that needs rebase correctly.
==== gstreamer-plugins-bad ====
Subpackages: gstreamer-plugins-bad-lang libgstadaptivedemux-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstcuda-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstphotography-1_0-0 libgstplay-1_0-0 libgstplayer-1_0-0 libgstsctp-1_0-0 libgsttranscoder-1_0-0 libgsturidownloader-1_0-0 libgstva-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 libgstwebrtcnice-1_0-0
- Only build build vo-amrwbenc plugin on openSUSE, vo-amrwbenc
license is problematic for commercial use.
==== gtk4 ====
Subpackages: gtk4-lang gtk4-schema gtk4-tools libgtk-4-1 typelib-1_0-Gtk-4_0
- Do not build media playback when bootstrapping on Workbench.
==== kernel-firmware ====
Version update (20230406 -> 20230427)
Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network ucode-amd
- Update to version 20230427 (git commit fab149657d8d):
* Group all Conexant V4L devices together
* rtl_nic: update firmware of USB devices
* linux-firmware: Update firmware file for Intel Bluetooth AX200
* linux-firmware: Update firmware file for Intel Bluetooth AX201
* linux-firmware: Update firmware file for Intel Bluetooth AX203
* linux-firmware: Update firmware file for Intel Bluetooth AX203
* linux-firmware: Update firmware file for Intel Bluetooth AX211
* linux-firmware: Update firmware file for Intel Bluetooth AX211
* linux-firmware: Update firmware file for Intel Bluetooth AX210
* linux-firmware: update firmware for MT7981
* qca: Update firmware files for BT chip WCN6750
* mt76xx: Move the old Mediatek WiFi firmware to mediatek
* rtl_bt: Add firmware and config files for RTL8851B
* linux-firmware: Update AMD cpu microcode
* linux-firmware: add firmware for MT7981
* linux-firmware: update firmware for MT7921 WiFi device
* linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
* linux-firmware: update qat firmware
* linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops
==== libmbim ====
Version update (1.26.4 -> 1.28.4)
Subpackages: libmbim-glib4 mbimcli-bash-completion
- Update to version 1.28.4:
+ libmbim-glib:
- Fixed context type conversions to consider all possible APN
types.
- Duplicate UTF-16 strings during processing to avoid alignment
issues.
- Changes from version 1.28.2:
+ libmbim-glib: fixed validation of complete fragments to avoid
reading out of bounds.
+ mbim-proxy: added --verbose-full flag to allow printing logs
with personal info included.
- Changes from version 1.28:
+ This version includes support for most operations in MBIM
Extensions v2 (for 5G NSA) and v3 (for 5G SA). The enabling of
the updated extensions requires the user of the library to
explicitly request what version wants to be used, via the new
'MBIM_DEVICE_OPEN_FLAGS_MS_MBIMEX_V2' or
'MBIM_DEVICE_OPEN_FLAGS_MS_MBIMEX_V3' flags in the device open
request. Please note that if one process enables the v2 or v3
support, it will apply to operations done by other processes as
well. When using the proxy, the current version support is
propagated to all clients of the proxy automatically.
+ The verbose message logging will now by default hide all fields
that are considered personal information. Extended message
logging including all field contents should be explicitly
requested.
+ Build:
- The GNU autotools (autoconf/automake/libtool) support has
been fully removed, this release requires the use of the
meson build system.
- The 'instrospection' meson option is now a boolean.
- New boolean 'man' meson option to allow disabling the man
page generation.
+ Extended the Basic Connect service, including the following
operations:
- MBIM_CID_BASIC_CONNECT_REGISTER_STATE (MBIMEx v2.0)
- MBIM_CID_BASIC_CONNECT_PACKET_SERVICE (MBIMEx v2.0)
- MBIM_CID_BASIC_CONNECT_SIGNAL_STATE (MBIMEx v2.0)
- MBIM_CID_BASIC_CONNECT_SUBCRIBER_READY_STATUS (MBIMEx v3.0)
- MBIM_CID_BASIC_CONNECT_PACKET_SERVICE (MBIMEx v3.0)
- MBIM_CID_BASIC_CONNECT_CONNECT (MBIMEx v3.0)
- MBIM_CID_BASIC_CONNECT_IP_PACKET_FILTERS (MBIMEx v3.0)
+ Extended the Microsoft-defined Basic Connect Extensions
service, including the following operations:
- MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_LOCATION_INFO_STATUS
(MBIMEx v1.0)
- MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_PROVISIONED_CONTEXTS
(MBIMEx v1.0)
- MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_BASE_STATIONS_INFO
(MBIMEx v1.0)
- MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_VERSION (MBIMEx v2.0)
- MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_DEVICE_CAPS
(MBIMEx v3.0)
- MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_MODEM_CONFIGURATION
(MBIMEx v3.0)
- MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_REGISTRATION_PARAMETERS
(MBIMEx v3.0)
- MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_LTE_ATTACH_INFO
(MBIMEx v3.0)
- MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_BASE_STATIONS_INFO
(MBIMEx v3.0)
- MBIM_CID_MS_BASIC_CONNECT_EXTENSIONS_WAKE_REASON
(MBIMEx v3.0)
+ Extended the Microsoft-defined UICC Low Level Access service,
including the following operations:
- MBIM_CID_MS_UICC_LOW_LEVEL_ACCESS_APPLICATION_LIST
- MBIM_CID_MS_UICC_LOW_LEVEL_ACCESS_FILE_STATUS
- MBIM_CID_MS_UICC_LOW_LEVEL_ACCESS_READ_BINARY
- MBIM_CID_MS_UICC_LOW_LEVEL_ACCESS_READ_RECORD
+ New Microsoft-defined Voice Extensions service, including the
following operations: MBIM_CID_MS_VOICE_EXTENSIONS_NITZ
+ Extended the Intel-defined Firmware Update service, including
the following operations:
MBIM_CID_INTEL_FIRMWARE_UPDATE_MODEM_REBOOT (MBIMEx v2.0)
+ New Intel-defined Thermal RF service, including the following
operations: MBIM_CID_INTEL_THERMAL_RF_RFIM
+ Extended the QDU service, including the following operations:
- MBIM_CID_QDU_QUECTEL_REBOOT
- MBIM_CID_QDU_QUECTEL_READ_VERSION
+ libmbim-glib:
- Updated the net link operations to support devices exposed by
the wwan subsystem.
- New mbim_message_get_printable_full() method to print the
contents of a given message specifying the specific MBIMEx
version in use.
- New mbim_message_validate() method to validate the contents
of the headers in a MBIM message, to be used before accessing
its contents.
- Updated all MbimMessage getters so that an implicit
validation is done in the g_return_* macros. This validation
will not be done if those macros are disabled during build.
- New MBIM_DEVICE_CONSECUTIVE_TIMEOUTS signal in the MbimDevice
to report the number of consecutive MBIM request timeouts
detected.
- New mbim_device_[get|set|check]_ms_mbimex_version() methods
to manage the MBIMEx version support in the MbimDevice.
- New MBIM_DEVICE_OPEN_FLAGS_MS_MBIMEX_[V2|V3] flags in
mbim_device_open_full() to allow enabling MBIMEx v2.0 or v3.0
support.
... changelog too long, skipping 95 lines ...
+ 0002-intel-tools-new-service-trace-config.patch
==== librsvg ====
Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2 rsvg-thumbnailer typelib-1_0-Rsvg-2_0
- Update licence tag, there is no longer any Apache licensed code.
- Use __rustflags macro and drop no longer needed rustflags global.
==== libstorage-ng ====
Version update (4.5.97 -> 4.5.100)
Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1
- merge gh#openSUSE/libstorage-ng#927
- fixed set_lockfile_root function
- 4.5.100
- Translated using Weblate (Georgian) (bsc#1149754)
- 4.5.99
- Translated using Weblate (Georgian) (bsc#1149754)
- 4.5.98
==== libva ====
Subpackages: libva-drm2 libva-x11-2 libva2
- reintroduce propagate-dpy.patch (regression fix), since the issue
still hasn't been fixed in libva-vdpau-driver ...
==== libva-gl ====
- reintroduce propagate-dpy.patch (regression fix), since the issue
still hasn't been fixed in libva-vdpau-driver ...
==== mdadm ====
- Fixes for mdmon to ensure it run at the right time in the
fight mount namespace. This fixes various problems with
IMSM raid arrays in 15-SP4 (bsc#1205493, bsc#1205830)
- mdmon: fix segfault
0052-mdmon-fix-segfault.patch
- util: remove obsolete code from get_md_name
0053-util-remove-obsolete-code-from-get_md_name.patch
- mdmon: don't test both 'all' and 'container_name'.
0054-mdmon-don-t-test-both-all-and-container_name.patch
- mdmon: change systemd unit file to use --foreground
0055-mdmon-change-systemd-unit-file-to-use-foreground.patch
- mdmon: Remove need for KillMode=none
0056-mdmon-Remove-need-for-KillMode-none.patch
- mdmon: Improve switchroot interactions.
0057-mdmon-Improve-switchroot-interactions.patch
- mdopen: always try create_named_array()
0058-mdopen-always-try-create_named_array.patch
- Improvements for IMSM_NO_PLATFORM testing
0059-Improvements-for-IMSM_NO_PLATFORM-testing.patch
==== mutter ====
Version update (44.0+54 -> 44.1)
Subpackages: mutter-lang
- Update to version 44.1:
+ Fall back to the default, not the unknown color space.
+ Fix resizing windows via keyboard.
+ Fix possible screen freeze after resume with multiple monitors.
+ Fix anchor position when dragging window.
+ Fix applying XSettings to decorations on X11.
+ Allow clipped redraws for headless backend.
+ Improve screencast support.
+ Fix focus-on-click for server-side decorated windows.
+ Fix initial fullscreen state of server-side decorated windows.
+ Fix feedback loop triggering bursts of excessive CPU load.
+ Enable modifiers by default on non-native backend.
+ Check EDID for supported sink Colorimetry.
+ Fix artifacts in titlebars on some hardware.
+ Fix map transitions for X11 windows on wayland.
+ Fixed crashes.
+ Plugged leaks.
+ Misc. bug fixes and cleanups.
+ Updated translations.
- Drop 2963.patch: Fixed upstream.
==== patterns-gnome ====
Subpackages: patterns-gnome-gnome_basic patterns-gnome-gnome_basis patterns-gnome-gnome_basis_opt patterns-gnome-sw_management_gnome
- Delete archived applications (gnome-dictionary)
- Remove gnome-screenshot recommendation (replaced by the new
screenshot tool in gnome-shell >= 42)
==== power-profiles-daemon ====
Version update (0.12 -> 0.13)
- Update to version 0.13:
* Add support for the AMD P-State driver included in Linux 6.3
* Fix mismatched profiles on some HP laptops and some
miscellaneous bug fixes.
==== publicsuffix ====
Version update (20230414 -> 20230426)
- Update to version 20230426:
* Update public_suffix_list.dat (#1747)
* Update README.md - added link to sorting
==== python-blinker ====
- move documentation into the main package for SLE15
==== python-numpy ====
- add sle15_python_module_pythons (jsc#PED-68)
==== runc ====
Version update (1.1.6 -> 1.1.7)
- Update to runc v1.1.7. Upstream changelog is available from
<https://github.com/opencontainers/runc/releases/tag/v1.1.7>.
- Update runc.keyring to upstream version.
==== yast2-samba-client ====
Version update (4.6.0 -> 4.6.1)
- Install samba-gpupdate when enabling Group Policy; (bsc#1207604).
- 4.6.1
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
MozillaFirefox (112.0.1 -> 112.0.2)
docker (20.10.23_ce -> 23.0.5_ce)
git (2.40.0 -> 2.40.1)
gtk3 (3.24.37 -> 3.24.37+68)
keylime (6.7.0 -> 7.0.0)
libalternatives (1.2+3.b848aad -> 1.2+30.a5431e9)
libsrtp2
libyui (4.5.1 -> 4.5.2)
libyui-ncurses (4.5.1 -> 4.5.2)
libyui-ncurses-pkg (4.5.1 -> 4.5.2)
libyui-qt (4.5.1 -> 4.5.2)
libyui-qt-graph (4.5.1 -> 4.5.2)
libyui-qt-pkg (4.5.1 -> 4.5.2)
mozjs102
openvpn (2.5.9 -> 2.6.3)
setools (4.4.1 -> 4.4.2)
tracker (3.5.0 -> 3.5.1)
tracker-miners (3.5.0 -> 3.5.1)
vim (9.0.1443 -> 9.0.1488)
xset
=== Details ===
==== MozillaFirefox ====
Version update (112.0.1 -> 112.0.2)
Subpackages: MozillaFirefox-translations-common
- Mozilla Firefox 112.0.2
* Fix a high memory usage issue with animated images in minimized
(or completely covered) windows, especially when using animated
themes (bmo#1828587)
* Fix an issue where Linux users with bitmap fonts installed may
have had entire sections of text invisible to them on some
sites (bmo#1827950)
- Include Leap 15.5 in check for which python version is required.
==== docker ====
Version update (20.10.23_ce -> 23.0.5_ce)
Subpackages: docker-bash-completion
- Update to Docker 23.0.5-ce. See upstream changelog online at
<https://docs.docker.com/engine/release-notes/23.0/#2305>.
- Rebase patches:
* cli-0001-docs-include-required-tools-in-source-tree.patch
- Update to Docker 23.0.4-ce. See upstream changelog online at
<https://docs.docker.com/engine/release-notes/23.0/#2304>. bsc#1208074
- Rebase patches:
* 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
* 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
* 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
- 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
- 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport <https://github.com/docker/cli/pull/4228> to allow man pages to be
built without internet access in OBS.
+ cli-0001-docs-include-required-tools-in-source-tree.patch
==== git ====
Version update (2.40.0 -> 2.40.1)
- git 2.40.1:
* CVE-2023-25652: By feeding specially crafted input to git apply
- -reject, a path outside the working tree can be overwritten
with partially controlled contents (corresponding to the
rejected hunk(s) from the given patch).
* CVE-2023-25815: When Git is compiled with runtime prefix
support and runs without translated messages, it still used
the gettext machinery to display messages, which subsequently
potentially looked for translated messages in unexpected
places. This allowed for malicious placement of crafted
messages.
* CVE-2023-29007: When renaming or deleting a section from a
configuration file, certain malicious configuration values may
be misinterpreted as the beginning of a new configuration
section, leading to arbitrary configuration injection.
==== gtk3 ====
Version update (3.24.37 -> 3.24.37+68)
Subpackages: gtk3-data gtk3-immodule-amharic gtk3-immodule-inuktitut gtk3-immodule-thai gtk3-immodule-tigrigna gtk3-immodule-vietnamese gtk3-immodule-xim gtk3-lang gtk3-schema gtk3-tools libgtk-3-0 typelib-1_0-Gtk-3_0
- Update to version 3.24.37+68:
+ application: Clean up signal handlers
+ OLE2 DND: Check if move is supported
+ Address issue 5711 by checking that the context is not NULL
+ wayland:
- Don't crash without xdg_activation_v1
- Don't crash on cursor size 0
+ gdkscreen-wayland: Notify initial setting change from
org.gtk.Settings
+ gdk: Swap Cairo calls when reading back from a GdkWindow
+ Updated translations.
- Deprecate %gtk_immodule_(requires|post|postun) macros defined in
the macros.gtk3 file. Since we are using RPM file triggers to
provide their functionality, without nullifying them the commands
will run twice, once by the file triggers and another time by the
macros.
==== keylime ====
Version update (6.7.0 -> 7.0.0)
Subpackages: keylime-config keylime-firewalld keylime-logrotate keylime-registrar keylime-tenant keylime-tpm_cert_store keylime-verifier python310-keylime
- Remove the agent subpackage
- Remove keylime_ima_emulator binary
- Add keylime_create_policy and keylime_sign_runtime_policy
- Update to version v7.0.0:
* bump version to 7.0.0
* bump to version 6.8.0
* build-sys: Use comma-separated list for running multiple linters
* tenant: Add brackets to ipv6 addresses when used in URL
* registrar: Detect IPv6 addresses to bind to and set address_family
* setup.cfg: use license_files instead of license_file
* Do not run Packit tests on F38
* tests: Use Rust agent from COPR for e2e tests
* tenant: Raise a UserError on status_code != 200 returned from server
* Add missing test from keylime testsuite to e2e plan
* tests: remove tpm2-tss downgrade as Fedora bug got fixed
* da: non-zero exit code for attestation replay failures.
* ca:CLI utilities (keylime_ca,keylime_tenant) read password from ca.conf
* log: add a barebones log config in case configuration files not present
* Fix typo
* Use subtest in unittest.
* create_policy: Strip newline from file path read from measurement list
* create_policy: Validate policies against the JSON schema
* create_policy: Clarify help text for IMA measurement list
* create_policy: Add list of ignored keyrings after processing base policy
* create_policy: Add support for adding an IMA exclude list to the policy
* create_policy: Avoid duplicate entries in lists
* codestyle: Annotate with RuntimePolicyType and adapt code
* codestyle: Import urllib to make pyright happy
* Introduce PathLike_str for older python versions
* codestyle: Annotate create_policy.py and add to mypy
* docs: Update docs to reflect renaming of create_policy tool
* create_policy: Fix issues related to filelists-ext
* Move create_policy to keylime/cmd and install as keylime_create_policy
* Implement DSSE signature verification for runtime policies
* tenant: Raise UserError on (add/update)runtimepolicy status codes 401
* tests: Split unittests into two runs to avoid issue
* ima: Add a JSON schema for the runtime policy and use it on given policies
* Implement DSSE policy signing tool
* ima: Derive RUNTIME_POLICY_GENERATOR from enum.IntEnum
* packit: use rust agent for e2e tests
* services: remove agent systemd services
* tests: remove unused code
* tests: remove agent from config test
* tpm_ek_ca: remove check_tpm_cert_store(..) function
* tpm, measured boot: remove refrences to virtual TPMs
* tpm: remove unsed variables and some refactoring
* algorithms: remove unused from_algorithm method
* mpypy, pyright: remove refrences to agent in ignores
* config: remove refrences to agent
* crypto: remove unused functions
* secure_mount: removal
* tpm: remove unsed functions
* registar_client: remove functions only used by the agent
* user_utils: removal
* revocation notifier: remove zeroMQ client code
* ca_util: remove listen command and related functions
* revocation actions: remove all
* ima emulator: full removal
* agent: remove agent code
* agentstates: rename tpm_clocking to tpm_clockinfo
==== libalternatives ====
Version update (1.2+3.b848aad -> 1.2+30.a5431e9)
Subpackages: alts libalternatives1
- Update to version v1.2+30.a5431e9: (bsc#1191692)
* Change license to less restrictive Apache 2.0
* doc: fixing a few typos
* Adds option to display target executable only
* Makefiles and cmake: rework for reproducible build
* Improve Makefile
* libalts_exec_default: fix memory leak on error condition
* libalts_write_binary_configured_priority_to_file: fix memory leak
* saveConfigData(): fix file descriptor leak in while loop error case
* loadConfigData(): use goto exit label to prevent file descriptor leaks
* libalts_load_available_binaries: use goto err: label to fix leaks
* loadAlternativeForBinary: goto-assisted error handling to avoid leaks
* checkGroupConsistencies(): explicitly ignore unused `flags`
* lib: refactor error handling of findAltConfig()
* utils: fix possible memory leaks on error conditions
* docs: fix some typos and grammar
* Update README.md
* lib: generally open[at] with O_CLOEXEC
* Fix logic in options parser
* Add basic Makefile for buidling without cmake
* Added description for options=KeepArgv0
* cmake: Express the dependency on CUnit correctly for building tests
* cmake: Build and install CMake and PkgConfig files
* cmake: Fix setup of shared linker flags
* config.h: Fix the version to match the current latest tag
==== libsrtp2 ====
- Enable running the regression tests:
* Add libsrtp2-test-verbose.patch from the debian folks:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=460534
==== libyui ====
Version update (4.5.1 -> 4.5.2)
- Qt UI: Fixed regression for icon loading (bsc#1210712)
https://github.com/libyui/libyui/pull/100
- 4.5.2
==== libyui-ncurses ====
Version update (4.5.1 -> 4.5.2)
- Qt UI: Fixed regression for icon loading (bsc#1210712)
https://github.com/libyui/libyui/pull/100
- 4.5.2
==== libyui-ncurses-pkg ====
Version update (4.5.1 -> 4.5.2)
- Qt UI: Fixed regression for icon loading (bsc#1210712)
https://github.com/libyui/libyui/pull/100
- 4.5.2
==== libyui-qt ====
Version update (4.5.1 -> 4.5.2)
- Qt UI: Fixed regression for icon loading (bsc#1210712)
https://github.com/libyui/libyui/pull/100
- 4.5.2
==== libyui-qt-graph ====
Version update (4.5.1 -> 4.5.2)
- Qt UI: Fixed regression for icon loading (bsc#1210712)
https://github.com/libyui/libyui/pull/100
- 4.5.2
==== libyui-qt-pkg ====
Version update (4.5.1 -> 4.5.2)
- Qt UI: Fixed regression for icon loading (bsc#1210712)
https://github.com/libyui/libyui/pull/100
- 4.5.2
==== mozjs102 ====
- Add missing copyright in the spec to claim:
+ Frantisek Zatloukal's work from:
https://src.fedoraproject.org/rpms/mozjs102/blob/rawhide/f/mozjs102.spec
+ Wolfgang Rosenauer's work from:
https://build.opensuse.org/package/view_file/openSUSE:Leap:42.3/mozjs38/moz…
==== openvpn ====
Version update (2.5.9 -> 2.6.3)
Subpackages: openvpn-auth-pam-plugin
- update to 2.6.3:
* For full changelog please refer to:
https://github.com/OpenVPN/openvpn/blob/v2.6.3/Changes.rst
* implement byte counter statistics for DCO Linux (p2mp server
and client)
* implement byte counter statistics for DCO Windows (client only)
* '--dns server <n> address ...' now permits up to 8 v4 or v6
addresses
* fix a few cases of possibly undefined behaviour detected by ASAN
* add more unit tests for Windows cryptoapi interface
* Dynamic TLS Crypt When both peers are OpenVPN 2.6.1+, OpenVPN
will dynamically create a tls-crypt key that is used for
renegotiation. This ensure that only the previously authenticated
peer can do trigger renegotiation and complete renegotiations.
* Keying Material Exporters (RFC 5705) based key generation
* As part of the cipher negotiation OpenVPN will automatically prefer
the RFC5705 based key material generation to the current custom
OpenVPN PRF. This feature requires OpenSSL or mbed TLS 2.18+.
* OpenVPN will now work with OpenSSL in FIPS mode. Note, no effort
has been made to check or implement all the requirements/
recommendation of FIPS 140-2. This just allows OpenVPN to be run on
a system that be configured OpenSSL in FIPS mode.
* mlock will now check if enough memlock-able memory has been reserved,
and if less than 100MB RAM are available, use setrlimit() to upgrade
the limit. See Trac #1390. Not available on OpenSolaris.
* The --peer-fingerprint option has been introduced to give users an
easy to use alternative to the tls-verify for matching the fingerprint
of the peer. The option takes use a number of allowed SHA256
certificate fingerprints.
* When --peer-fingerprint is used, the --ca and --capath option become
optional. This allows for small OpenVPN setups without setting up a
PKI with Easy-RSA or similar software.
* The --auth-user-pass-verify script supports now deferred authentication.
* Both auth plugin and script can now signal pending authentication to
the client when using deferred authentication. The new client-crresponse
script option and OPENVPN_PLUGIN_CLIENT_CRRESPONSE plugin function can
be used to parse a client response to a CR_TEXT two factor challenge.
* The modernisation of defaults can impact the compatibility of OpenVPN
2.6.0 with older peers. The options --compat-mode allows UIs to provide
users with an easy way to still connect to older servers.
* OpenSSL 3.0 has been added. Most of OpenSSL 3.0 changes are not user
visible but improve general compatibility with OpenSSL 3.0.
- -tls-cert-profile insecure has been added to allow selecting the lowest
OpenSSL security level (not recommended, use only if you must). OpenSSL
3.0 no longer supports the Blowfish (and other deprecated) algorithm by
default and the new option --providers allows loading the legacy provider
to renable these algorithms.
* Ciphers in --data-ciphers can now be prefixed with a ? to mark those as
optional and only use them if the SSL library supports them.
* The --mssfix and --fragment options now allow an optional mtu parameter to
specify that different overhead for IPv4/IPv6 should taken into account
and the resulting size is specified as the total size of the VPN packets
including IP and UDP headers.
* Instead of allocating a connection for each client on the initial packet
OpenVPN server will now use an HMAC based cookie as its session id. This way
the server can verify it on completing the handshake without keeping state.
This eliminates the amplification and resource exhaustion attacks.
For tls-crypt-v2 clients, this requires OpenVPN 2.6 clients or later because
the client needs to resend its client key on completing the hand shake.
The tls-crypt-v2 option allows controlling if older clients are accepted.
- Removed openvpn-fips140-2.3.2.patch
==== setools ====
Version update (4.4.1 -> 4.4.2)
- Update to version 4.4.2:
* Make NetworkX optional. sedta and seinfoflow tools, along with the
equivalent analyses in apol require NetworkX.
* Remove neverallow options in sesearch and apol. These are not usable
since they are removed in the final binary policy.
- Drop make_networkx_optional.patch, now merged upstream
==== tracker ====
Version update (3.5.0 -> 3.5.1)
Subpackages: libtracker-sparql-3_0-0 tracker-data-files tracker-lang
- Update to version 3.5.1:
+ Reintroduce order/distance independent handling of FTS terms.
+ Documentation improvements.
+ Do not prune too early content of failed batches for error
processing purposes.
==== tracker-miners ====
Version update (3.5.0 -> 3.5.1)
Subpackages: tracker-miner-files tracker-miners-lang
- Update to version 3.5.1:
+ The tracker-extract-3 service moved all SPARQL queries and
updates to a GResource. Consistently uses
TrackerSparqlStatement/TrackerResource for updates.
+ Fixes in uniquely identifying files in BTRFS subvolumes.
+ Ensure deletion of files lingering in content graphs.
+ Ensure correct nie:dataSource after moving files between
indexed folders.
+ Optimize mass removal of deleted files found during
initialization.
+ Documentation improvements for the miner services.
+ Do not let systemd spuriously start the tracker-extract-3
service.
+ Test suite fixes.
==== vim ====
Version update (9.0.1443 -> 9.0.1488)
Subpackages: vim-data vim-data-common vim-small xxd
- Updated to version 9.0.1488, fixes the following problems
* Ending Insert mode when accessing a hidden prompt buffer.
* Crash when passing NULL to setcmdline(). (Andreas Louv)
* openSUSE: configure doesn't find the Motif library. (Tony Mechelynck)
* Unnecessary checks for the "skip" flag when skipping.
* Condition is always true.
* Diff test fails on MacOS 13.
* Test for prompt buffer is flaky.
* Unnecessary redrawing when 'showcmdloc' is not "last".
* Code using EVAL_CONSTANT is dead, it is never set.
* Typos in source code and tests.
* Code indenting is confused by macros.
* C++ 20 modules are not recognized.
* Shortmess test depends on order of test execution.
* No regression test for what patch 9.0.1333 fixes.
* Buffer overflow when expanding long file name.
* Typo in name of type.
* Insufficient testing for getcmdcompltype().
* Ruler not drawn correctly when using 'rulerformat'.
* Recursively calling :defer function if it does :qa.
* Virtual text truncation only works with Unicode 'encoding'.
* Strace filetype detection is expensive.
* Haiku build fails.
* Cannot use an object member name as a method argument.
* Jenkinsfiles are not recognized as groovy.
* Recursively calling :defer function if it does :qa in a compiled function.
* Deferred functions not called from autocommands.
* Deferred functions invoked in unexpected order when using :qa and
autocommands.
* Warnings for function declarations.
* ":drop fname" may change the last used tab page.
* Busted configuration files are not recognized.
* Lines put in non-current window are not displayed. (Marius Gedminas)
* Crash when recovering from corrupted swap file.
* Filetypes for *.v files not detected properly.
* Small source file problems; outdated list of distributed files.
* Using popup menu may leave text in the command line.
* Decrypting with libsodium may fail if the library changes.
* Crash when textprop has a very large "padding" value. (Yegappan Lakshmanan)
* += operator does not work on class member.
* Coverity warns for using invalid array index.
* no functions for converting from/to UTF-16 index.
* Parallel make might not work.
* Content-type header for LSP channel not according to spec.
* xchacha20v2 crypt header is platform dependent.
==== xset ====
- Disable building with libXfontcache. xorg-server 1.6 removed the
corresponding feature, and it seems unlikely and unusual for
anyone to e.g. ssh from an old Xorg system to a contemporary
SUSE to attempt to run the (undocumented) `xset fc` command.
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
dnsmasq
firewalld (1.3.1 -> 1.3.2)
gstreamer-plugins-bad
libxml2
numactl (2.0.15.0.g01a39cb -> 2.0.16.21.g693fee1)
plymouth
selinux-policy (20230420 -> 20230425)
texlive-specs-n
xbitmaps
zxing-cpp
=== Details ===
==== dnsmasq ====
- bsc#1209358, CVE-2023-28450, dnsmasq-CVE-2023-28450.patch:
default maximum EDNS.0 UDP packet size should be 1232
==== firewalld ====
Version update (1.3.1 -> 1.3.2)
Subpackages: firewalld-bash-completion firewalld-lang python3-firewall
- update to 1.3.2:
* test(container): add centos9-stream (b7bb3d0)
* test(functions): iptables: normalize protocols to numeric values (33a1b16)
* test(functions): ip6tables: normalize opt field output (eeac39c)
==== gstreamer-plugins-bad ====
Subpackages: gstreamer-plugins-bad-lang libgstadaptivedemux-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstcuda-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstphotography-1_0-0 libgstplay-1_0-0 libgstplayer-1_0-0 libgstsctp-1_0-0 libgsttranscoder-1_0-0 libgsturidownloader-1_0-0 libgstva-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 libgstwebrtcnice-1_0-0
- Add missing plugin in build_orig part of spec, BuildRequires
already in place, just missing the built plugin in file section.
==== libxml2 ====
Subpackages: libxml2-2 libxml2-tools
- Remove unneeded dependency (bsc#1209918).
==== numactl ====
Version update (2.0.15.0.g01a39cb -> 2.0.16.21.g693fee1)
Subpackages: libnuma1
- Update to version 2.0.16.21.g693fee1:
* fix typo
* Add fuzzer for OSS-Fuzz integration
* numactl.c: Fix merging of neighboring pages' policies in dump_shm
* memhog: Update memhog usage
* feat: Add minimum permissions to makefile.yml
* feat: Add minimum permissions to cut-release.yml
* feat: Add minimum permissions to codeql.yml
- jsc#PED-3367
- Remove unneeded defattr(root,root) statements from spec file from dmueller
- Replace deletion of *.la files with a more general version from dmueller
- Update to version 2.0.16.14.gc09fefd:
* numactl.c: Remove unused variable
* shm.c: Replace stat64/fstat64/ftruncate64mmap64 with normal functions
* configure: Check for largefile support
* numastat: Update system hugepages memory info from sysfs/node/hugepages directory
* numastat: statistical errors occur when huge pages is used
* fix wrong nodemask_sz when CONFIG_NODES_SHIFT is less than 5
* libnuma: clear errno at the end of numa_init
* numastat: Add SwapCached to list of known fields in meminfo
* numastat: Add SecPageTables to list of known fields in meminfo
* numastat: Add ShadowCallStack to list of known fields in meminfo
* numastat: Add FileHugePages/FilePmdMapped to list of known fields in meminfo
* numactl: 'numactl --length=xxx --shm xxx -px' doesn't work
* numactl: Fix shm verfiy for preferred policy
* link with -latomic if needed (again ...)
* Release numactl 2.0.16
* add cut-release github workflow (#142)
* when preferred_many is not supported, fall back to preferred will report error.
* fix the memory leak of numa_preferred api
* build: Refactor autotools setup to store version in separate file
* Revert "numademo: fix error on 32bit system"
==== plymouth ====
Subpackages: libply-splash-core5 libply-splash-graphics5 libply5 plymouth-dracut plymouth-lang plymouth-plugin-label plymouth-plugin-two-step plymouth-scripts plymouth-theme-bgrt plymouth-theme-spinner
- Update plymouth.spec: Change bootup terminal to default to satisfy
Nvidia proprietary driver (bsc#1208726).
==== selinux-policy ====
Version update (20230420 -> 20230425)
Subpackages: selinux-policy-targeted
- Update to version 20230425:
* Remove unneeded manage_dirs_pattern for lastlog_t (bsc#1210461)
* Add policy for wtmpdb (bsc#1210717)
- Update to version 20230425:
* Add support for lastlog2 (bsc#1210461)
* allow the chrony client to use unallocated ttys (bsc#1210672)
==== texlive-specs-n ====
- Map the upstream license fdl tag to newer GFDL-1.3.or-later (bsc#1210680)
==== xbitmaps ====
- Fix license tag to X11.
==== zxing-cpp ====
- Drop support for building on SLE12.
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
container-selinux (2.206.0 -> 2.211.0)
dracut (059+suse.368.g2e7ac134 -> 059+suse.375.gafb362e4)
glib2 (2.76.1 -> 2.76.2)
gnome-user-docs (44.0 -> 44.1)
libadwaita (1.3.1 -> 1.3.2)
libcdio
libgphoto2
libjxl
libmtp (1.1.20 -> 1.1.21)
libreoffice
nautilus (44.0 -> 44.1)
protobuf-c
python-apipkg
python-py
sddm
zstd (1.5.4 -> 1.5.5)
=== Details ===
==== container-selinux ====
Version update (2.206.0 -> 2.211.0)
- Update to version 2.211.0:
* Don't transition to initrc_t domains from spc_t
* Add tunable to allow sshd_t to launch container engines
* Allow syslogd_t gettatr on inheritited runtime tmpfs files
* Add container_file_t and container_ro_file_t as user_home_type
* Set default context for local-path-provisioner
* Allow daemon to send dbus messages to spc_t by
==== dracut ====
Version update (059+suse.368.g2e7ac134 -> 059+suse.375.gafb362e4)
Subpackages: dracut-ima
- Update to version 059+suse.375.gafb362e4:
* fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
fips=1 and separate /boot break s390x (bsc#1204478):
* fix(fips): move fips-boot script to pre-pivot
* fix(fips): only unmount /boot if it was mounted by the fips module
* feat(fips): add progress messages
* fix(fips): do not blindly remove /boot
==== glib2 ====
Version update (2.76.1 -> 2.76.2)
Subpackages: glib2-lang glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 libgthread-2_0-0
- Update to version 2.76.2:
+ Fixed various build failures in less common setups
+ Fix launching files in Windows via GtkFileLauncher
+ Bugs fixed:
- GMarkupParser documentation completion
- Disagreement between runtime and docs on whether interfaces
are "classed"
- gdbus-example-proxy-subclass.c is not complete
- GAppInfoMonitor documentation deficiencies
- Check for __kernel_long_t when enabling futex()
- Documentation mentions non-existing function `g_value_free`
- Not clear that GPollableInputStream methods are undefined if
can_poll() returns FALSE
- Missing docs for GOption (commandline parser)
- GDebugControllerDBus wrong default in documentation
- Probably wrong information regarding G_PLATFORM_WIN32 in
README.win32.md
- Multiple Definition Error When Generating
gio/tests/test5.gresource
- user docs: GLib.DateTime.format: broken highlighting
- GtkFileLauncher: generated paths not recognized on Win32
- Build failed due to NULL pointer redefinition in C++
- Build randomly fails with: 'gmodule/gmodule-visibility.h'
file not found
- unicode: add tests for g_utf8_normalize() and empty strings
- build: Drop old .gitignore files from test directories
- tools: Drop check-abis.sh script
- docs: Drop section about default branch renaming from
README.md
- tests: Update Unicode normalisation tests from Unicode 15
- Make clang++ happier when using G_STATIC_ASSERT
- gwin32: Avoid use of function call with side effect in
g_return_* macro
- gsignal: Clarify documentation for GSignalMatchType matching
+ Updated translations.
==== gnome-user-docs ====
Version update (44.0 -> 44.1)
- Update to version 44.1:
+ Updates to GNOME Help.
+ Updated translations.
==== libadwaita ====
Version update (1.3.1 -> 1.3.2)
Subpackages: libadwaita-1-0 libadwaita-lang typelib-1_0-Adw-1
- Update to version 1.3.2:
+ AdwAvatar: Fix a memory leak
+ AdwMessageDialog: Fix criticals when using choose() with
hide-on-close=true
+ AdwTabBar/Overview: Correctly unparent context menu
+ Build: Fix build on Windows
+ Demo: Fix a critical when trying to set a non-image file as
avatar
+ Docs:
- Remove an erroneous mention of mnemonics in row subtitles
- Clarify AdwBanner title placement
- Mention the version .large-title is deprecated since
- Fix successs/error color values
- List thumbnail colors on the named colors page
+ Stylesheet:
- Improve selected list/grid item contrast
- Fix file chooser grid dimensions
- Fix button.card checked state
+ Updated translations.
==== libcdio ====
- Add _multibuild definition: define the additional spec file as a
2nd flavor to build.
==== libgphoto2 ====
Subpackages: libgphoto2-6 libgphoto2-6-lang libgphoto2_port12
- libgphoto2-enable-vusb-ptp.patch: enable virtual PTP camera in vusb
- added %bcond_with vusb in case anyone needs a test drive
==== libjxl ====
- Refresh 0001-Remove-LCMS-mutex.patch
==== libmtp ====
Version update (1.1.20 -> 1.1.21)
Subpackages: libmtp-udev libmtp9
- updated to 1.1.21 release
Bugs fixed:
- Fix LIBMTP_STORAGE_SORTBY_MAXSPACE not working (copy-paste mistake)
- fix warnings regarding mismatched parameter docs
- fix comment above sort_storage_bysort_storage_by
- Revert "ptp_pack_string: check string length for no iconv situation"
- remove dependency on ptp.h
- fixed paste error vendor/product id
- libusb-glue: check return value of ptp_init_send_memory_handler
- ptp_pack_string: check string length for no iconv situation
- ptp-pack: fix ucs2str overflow
Features:
- add a LIBMTP_FreeMemory function that wraps free()
- added functions to get device by serial number
- added serial number of device to output of 'mtp-files'
- added optional serial number parameter to 'mtp-getfile'
- added optional serial number parameter to 'mtp-delfile'
- feat: Add LIBMTP_Get_Children() to read the list of raw IDs of a folder.
- merge a patch from google https://source.chromium.org/chromiumos/chromiumos/codesearch/+/main:src/thi…
- several new devices added, some device renaming for consistency.
==== libreoffice ====
Subpackages: libreoffice-base libreoffice-branding-upstream libreoffice-calc libreoffice-draw libreoffice-filters-optional libreoffice-gnome libreoffice-gtk3 libreoffice-icon-themes libreoffice-impress libreoffice-l10n-cs libreoffice-l10n-da libreoffice-l10n-de libreoffice-l10n-el libreoffice-l10n-en libreoffice-l10n-en_GB libreoffice-l10n-es libreoffice-l10n-fr libreoffice-l10n-hu libreoffice-l10n-it libreoffice-l10n-ja libreoffice-l10n-pl libreoffice-l10n-pt_BR libreoffice-l10n-ru libreoffice-l10n-zh_CN libreoffice-l10n-zh_TW libreoffice-mailmerge libreoffice-math libreoffice-pyuno libreoffice-qt5 libreoffice-writer libreofficekit
- Do not use binutils-gold as the package is unmaintained
and will be removed in the future (boo#1210687).
==== nautilus ====
Version update (44.0 -> 44.1)
Subpackages: gnome-shell-search-provider-nautilus libnautilus-extension4 nautilus-lang
- Update to version 44.1:
+ Resolve some crashes.
+ Visual bugfixes:
- Tweak style colors in view items
- Show custom emblems from extensions again
- Relayout SELinux property row
- Flip switches correctly
+ Other bugfixes:
- Disable some actions when not usefull
- Fix dead characters handling in batch rename dialog
- Fix crashes when rapidly opening and closing windows
- Prevent location change when autofs timeouts
- Fix issues with translations in libadwaita widgets
- Drop workarounds for fixed GTK bugs
- Fix other issues
+ Enhancements:
- Dismiss toast on undo
- Select right items after some operations
- Paste into expanded folders
- Allow extraction of .tar.zst and .zstd archives
- Performance optimization
+ Updated translations.
==== protobuf-c ====
- Add protobuf-devel to devel package recommends as the binary there
is required to actually generated protobuf headers.
==== python-apipkg ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-py ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== sddm ====
Subpackages: sddm-branding-openSUSE
- Add patch to fix delays on shutdown (boo#1210391):
* 0001-Avoid-starting-a-new-session-on-exit.patch
==== zstd ====
Version update (1.5.4 -> 1.5.5)
Subpackages: libzstd1
- update to 1.5.5:
* fix: fix rare corruption bug affecting the high compression
mode, reported by @danlark1
* perf: improve mid-level compression speed
* lib: deprecated bufferless block-level API (#3534) by
@terrelln
* cli: mmap large dictionaries to save memory, by
@daniellerozenblit
* cli: improve speed of --patch-from mode (~+50%) (#3545) by
@daniellerozenblit
* cli: improve i/o speed (~+10%) when processing lots of small
files (#3479) by @felixhandte
* cli: zstd no longer crashes when requested to write into
write-protected directory (#3541) by @felixhandte
* cli: fix decompression into block device using -o, reported
by @georgmu
* misc: improve seekable format ingestion speed (~+100%) for
very small chunk sizes (#3544) by @Cyan4973
* misc: tests/fullbench can benchmark multiple files (#3516) by
@dloidolt
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
baloo5-widgets (22.12.3 -> 23.04.0)
coreutils (9.2 -> 9.3)
dolphin (22.12.3 -> 23.04.0)
ebook-tools
ffmpegthumbs (22.12.3 -> 23.04.0)
filelight (22.12.3 -> 23.04.0)
gtk4 (4.10.1 -> 4.10.3)
gupnp
kaccounts-integration (22.12.3 -> 23.04.0)
kaccounts-providers (22.12.3 -> 23.04.0)
kate (22.12.3 -> 23.04.0)
kde-print-manager (22.12.3 -> 23.04.0)
kdegraphics-thumbnailers (22.12.3 -> 23.04.0)
kdenetwork-filesharing (22.12.3 -> 23.04.0)
kdialog (22.12.3 -> 23.04.0)
khelpcenter5 (22.12.3 -> 23.04.0)
kio-extras5 (22.12.3 -> 23.04.0)
konsole (22.12.3 -> 23.04.0)
kwalletmanager5 (22.12.3 -> 23.04.0)
libkdcraw (22.12.3 -> 23.04.0)
libkexiv2 (22.12.3 -> 23.04.0)
libqt5-qtbase (5.15.8+kde185 -> 5.15.9+kde151)
libqt5-qtdeclarative (5.15.8+kde22 -> 5.15.9+kde23)
libqt5-qtgraphicaleffects (5.15.8+kde0 -> 5.15.9+kde0)
libqt5-qtimageformats (5.15.8+kde9 -> 5.15.9+kde9)
libqt5-qtlocation (5.15.8+kde4 -> 5.15.9+kde5)
libqt5-qtmultimedia (5.15.8+kde3 -> 5.15.9+kde3)
libqt5-qtquickcontrols (5.15.8+kde0 -> 5.15.9+kde0)
libqt5-qtquickcontrols2 (5.15.8+kde7 -> 5.15.9+kde5)
libqt5-qtsensors (5.15.8+kde0 -> 5.15.9+kde0)
libqt5-qtspeech (5.15.8+kde1 -> 5.15.9+kde1)
libqt5-qtsvg (5.15.8+kde8 -> 5.15.9+kde7)
libqt5-qttools (5.15.8+kde1 -> 5.15.9+kde1)
libqt5-qttranslations (5.15.8+kde0 -> 5.15.9+kde0)
libqt5-qtvirtualkeyboard (5.15.8+kde0 -> 5.15.9+kde0)
libqt5-qtwayland (5.15.8+kde63 -> 5.15.9+kde55)
libqt5-qtwebchannel (5.15.8+kde3 -> 5.15.9+kde3)
libqt5-qtwebview (5.15.8+kde0 -> 5.15.9+kde0)
libqt5-qtx11extras (5.15.8+kde0 -> 5.15.9+kde0)
libqt5-qtxmlpatterns (5.15.8+kde0 -> 5.15.9+kde0)
llvm16 (16.0.1 -> 16.0.2)
mobipocket (22.12.3 -> 23.04.0)
nfs-utils
python-anyio
python-cryptography
signon-kwallet-extension (22.12.3 -> 23.04.0)
spectacle (22.12.3 -> 23.04.0)
xdg-desktop-portal-gnome (44.0 -> 44.1)
xdg-desktop-portal-gtk
yast2-trans (84.87.20230420.b54e9530 -> 84.87.20230421.14b25cdb42)
=== Details ===
==== baloo5-widgets ====
Version update (22.12.3 -> 23.04.0)
Subpackages: baloo5-widgets-lang
- Update to 23.04.0
* New feature release
* For more details please see:
* https://kde.org/announcements/gear/23.04.0/
- Update to 23.03.90
* New feature release
- Update to 23.03.80
* New feature release
==== coreutils ====
Version update (9.2 -> 9.3)
Subpackages: coreutils-doc coreutils-lang
- update to 9.3:
Bug fixes:
* cp --reflink=auto (the default), mv, and install
will again fall back to a standard copy in more cases.
Previously copies could fail with permission errors on
more restricted systems like android or containers etc.
[bug introduced in coreutils-9.2]
* cp --recursive --backup will again operate correctly.
Previousy it may have issued "File exists" errors when
it failed to appropriately rename files being replaced.
[bug introduced in coreutils-9.2]
* date --file and dircolors will now diagnose a failure to read a file.
Previously they would have silently ignored the failure.
[This bug was present in "the beginning".]
* md5sum --check again correctly prints the status of each file checked.
Previously the status for files was printed as 'OK' once any file had passed.
This also applies to cksum, sha*sum, and b2sum.
[bug introduced in coreutils-9.2]
* wc will now diagnose if any total counts have overflowed.
[This bug was present in "the beginning".]
* `wc -c` will again correctly update the read offset of inputs.
Previously it deduced the size of inputs while leaving the offset unchanged.
[bug introduced in coreutils-8.27]
* Coreutils programs no longer fail for timestamps past the year 2038
on obsolete configurations with 32-bit signed time_t, because the
build procedure now rejects these configurations.
[This bug was present in "the beginning".]
Changes in behavior:
* 'cp -n' and 'mv -n' now issue an error diagnostic if skipping a file,
to correspond with -n inducing a nonzero exit status as of coreutils 9.2.
Similarly 'cp -v' and 'mv -v' will output a message for each file skipped
due to -n, -i, or -u.
New features:
* cp and mv now support --update=none to always skip existing files
in the destination, while not affecting the exit status.
This is equivalent to the --no-clobber behavior from before v9.2.
- drop fix-reflink-fallback.patch (upstream).
==== dolphin ====
Version update (22.12.3 -> 23.04.0)
Subpackages: dolphin-part dolphin-part-lang libdolphinvcs5
- Update to 23.04.0
* New feature release
* For more details please see:
* https://kde.org/announcements/gear/23.04.0/
- Update to 23.03.90
* New feature release
- Update to 23.03.80
* New feature release
- Rebase patches:
* dolphin-go_up.diff
* 0001-Revert-Disallow-executing-Dolphin-as-root-on-Linux.patch
==== ebook-tools ====
- Fix a crash when an itemref in the spine has no idref,
see kde#466540.
* add 0002-Avoid-crash-on-spine-itemref-without-idref.patch
- Replace 0001-Avoid-crash-on-toc-navPoint-without-navLabel.patch
with 0001-Avoid-crash-on-toc.ncx-navPoint-without-navLabel.patch
==== ffmpegthumbs ====
Version update (22.12.3 -> 23.04.0)
- Update to 23.04.0
* New feature release
* For more details please see:
* https://kde.org/announcements/gear/23.04.0/
- Update to 23.03.90
* New feature release
- Update to 23.03.80
* New feature release
==== filelight ====
Version update (22.12.3 -> 23.04.0)
Subpackages: filelight-lang
- Update to 23.04.0
* New feature release
* For more details please see:
* https://kde.org/announcements/gear/23.04.0/
- Update to 23.03.90
* New feature release
- Update to 23.03.80
* New feature release
==== gtk4 ====
Version update (4.10.1 -> 4.10.3)
Subpackages: gtk4-lang gtk4-schema gtk4-tools libgtk-4-1 typelib-1_0-Gtk-4_0
- Update to version 4.10.3:
+ Fix a popover positioning regression in 4.10.2.
+ Fix issues with slow loading files in the file chooser.
- Update to version 4.10.2:
+ Holding control to select multiple files broken in filechooser
+ Inspector crash
+ Listbase doesn't account for bottom padding in
size_allocate_child
+ Leaking AT contexts
+ OpenGL / Windows: Crash when closing gtk4-widget-factory
+ GTK apps crash on startup when setting cursor-size to 0 on
Wayland
+ Segmentation fault: gdk_wayland_toplevel_set_startup_id() needs
to null-check display->xdg_activation before using it
+ Possible use-after-free under
gtk_scrolled_window_update_use_indicators()
+ Wrong error message in `gtk_init`
+ Segfault when scrolling after changing ListView model
+ Bluetooth panel from the Settings app: clicking in the
"Downloads" link no longer opens Nautilus
+ Broadway docs or code is broken
+ Disabled GtkPicture's are not properly themed
+ Setting CSS padding to a GtkTextView gives the context menu an
offset
+ A11y: the Showing state is used only for windows
+ Gtk4 expander: CSS nodes mismatch code vs. documentation
+ Invoking gtk inspector on a folder results in a crash
+ Double tap requires very precise touch input
+ Name autocompletion dropdown in the GTK4 FileChooser's Save
dialog gets stuck, creates artifacts, jumps around
+ Links are not opened when xdg-desktop-portal OpenURI is not
available
+ GtkSnapshot generates no nodes appending whitespace-only
layouts
+ Updated translations.
==== gupnp ====
- Update license tag to LGPL-2.1-or-later.
==== kaccounts-integration ====
Version update (22.12.3 -> 23.04.0)
Subpackages: kaccounts-integration-lang libkaccounts2
- Update to 23.04.0
* New feature release
* For more details please see:
* https://kde.org/announcements/gear/23.04.0/
- Update to 23.03.90
* New feature release
- Update to 23.03.80
* New feature release
==== kaccounts-providers ====
Version update (22.12.3 -> 23.04.0)
Subpackages: kaccounts-providers-lang
- Update to 23.04.0
* New feature release
* For more details please see:
* https://kde.org/announcements/gear/23.04.0/
- Update to 23.03.90
* New feature release
- Update to 23.03.80
* New feature release
==== kate ====
Version update (22.12.3 -> 23.04.0)
Subpackages: kate-lang kate-plugins
- Update to 23.04.0
* New feature release
* For more details please see:
* https://kde.org/announcements/gear/23.04.0/
- Update to 23.03.90
* New feature release
- Update to 23.03.80
* New feature release
- Rebase patch:
* 0001-Defuse-root-block.patch
==== kde-print-manager ====
Version update (22.12.3 -> 23.04.0)
Subpackages: kde-print-manager-lang
- Update to 23.04.0
* New feature release
* For more details please see:
* https://kde.org/announcements/gear/23.04.0/
- Update to 23.03.90
* New feature release
- Update to 23.03.80
* New feature release
==== kdegraphics-thumbnailers ====
Version update (22.12.3 -> 23.04.0)
- Update to 23.04.0
* New feature release
* For more details please see:
* https://kde.org/announcements/gear/23.04.0/
- Update to 23.03.90
* New feature release
- Update to 23.03.80
* New feature release
==== kdenetwork-filesharing ====
Version update (22.12.3 -> 23.04.0)
Subpackages: kdenetwork-filesharing-lang
- Update to 23.04.0
* New feature release
* For more details please see:
* https://kde.org/announcements/gear/23.04.0/
- Update to 23.03.90
* New feature release
- Update to 23.03.80
* New feature release
==== kdialog ====
Version update (22.12.3 -> 23.04.0)
Subpackages: kdialog-lang
- Update to 23.04.0
* New feature release
* For more details please see:
* https://kde.org/announcements/gear/23.04.0/
- Update to 23.03.90
* New feature release
- Update to 23.03.80
* New feature release
==== khelpcenter5 ====
Version update (22.12.3 -> 23.04.0)
Subpackages: khelpcenter5-lang
- Update to 23.04.0
* New feature release
* For more details please see:
* https://kde.org/announcements/gear/23.04.0/
- Update to 23.03.90
* New feature release
- Update to 23.03.80
* New feature release
==== kio-extras5 ====
Version update (22.12.3 -> 23.04.0)
Subpackages: kio-extras5-lang libkioarchive5
- Update to 23.04.0
* New feature release
* For more details please see:
* https://kde.org/announcements/gear/23.04.0/
- Update to 23.03.90
* New feature release
- Update to 23.03.80
* New feature release
==== konsole ====
Version update (22.12.3 -> 23.04.0)
Subpackages: konsole-part konsole-part-lang
- Update to 23.04.0
* New feature release
* For more details please see:
* https://kde.org/announcements/gear/23.04.0/
- Update to 23.03.90
* New feature release
- Update to 23.03.80
* New feature release
==== kwalletmanager5 ====
Version update (22.12.3 -> 23.04.0)
Subpackages: kwalletmanager5-lang
- Update to 23.04.0
* New feature release
* For more details please see:
* https://kde.org/announcements/gear/23.04.0/
- Update to 23.03.90
* New feature release
- Update to 23.03.80
* New feature release
==== libkdcraw ====
Version update (22.12.3 -> 23.04.0)
- Update to 23.04.0
* New feature release
* For more details please see:
* https://kde.org/announcements/gear/23.04.0/
- Update to 23.03.90
* New feature release
- Update to 23.03.80
* New feature release
==== libkexiv2 ====
Version update (22.12.3 -> 23.04.0)
- Update to 23.04.0
* New feature release
* For more details please see:
* https://kde.org/announcements/gear/23.04.0/
- Update to 23.03.90
* New feature release
- Update to 23.03.80
* New feature release
==== libqt5-qtbase ====
Version update (5.15.8+kde185 -> 5.15.9+kde151)
Subpackages: libQt5Concurrent5 libQt5Core5 libQt5DBus5 libQt5Gui5 libQt5Network5 libQt5OpenGL5 libQt5PrintSupport5 libQt5Sql5 libQt5Sql5-sqlite libQt5Test5 libQt5Widgets5 libQt5Xml5 libqt5-qtbase-platformtheme-gtk3
- Update to version 5.15.8+kde329, rebased upstream:
* QCborValue: fix incorrect to{Array,Map} when the value is empty
* QMargins: fix a missing "full stop" in the docs
* QLibrary: restore translated string
* QLibrary: fix possible arg() format clobbering
* iOS: Use python3 for enumerating test target devices
* Android: Treat ACTION_CANCEL as TouchCancelEvent
* Doc: Fix broken formatting
* QFileSystemEngine: fix potential formatting error
* QString::asprintf: check that passing field widths as arguments works
* Backport recent QFlags tests
* network: Fix typos in documentation
* Fix accuracy with screen composition
* Doc: Update documentation for QElapsedTimer's in Windows
* Document that QStandardPath::findExecutable works with absolute paths
* macOS: Use native resize cursors for diagonal resize
* Fix clipped glyphs in text rendering of QGraphicsTextItem
* Change comparison data type to fix int overflow
* Add missing Q_WEAK_OVERLOAD definition
* Update QFileInfo docs to mention macOS aliases
* Distinguish macOS aliases from normal symbolic links
* Windows QPA: Fix frameless maximize on secondary screens
* Rewrite tst_qdataurl as a data-driven test
* Fix compilation for wasm
* QIOSFileDialog/QIOSDocumentPickerController - handle dismissed view controller
* Fix QDockWidget's dock area permissions after hovering
* Fix C++20 ambiguous relational operators between QJsonValue{,Ref}
* Android: make sure that orientationChange is reported after resize
* Android: set all QScreen's geometry-related parameters together
* Blacklist: test cases blacklisted in tst_QDBusConnection:
* wasm: fix issue with passing username/password to network request
* macOS: Pass multi arch flags when linking qmake
* QCocoaFileDialogHelper: Always enable symlinks and aliases to directories
* Android: terminate argv passed to main() with nullptr
* Update bundled libjpeg-turbo to version 2.1.3
* ANGLE: Load the DirectX libraries from the system path directly
* SQLite: Update SQLite to v3.37.2
* Fix compiler warnings about unused parameters
* Fix getsockopt option_value initial initialization
* Http2: Fix redirect-handling
* Android A11Y: Fix value rounding
* Android A11Y: Announce value together with element name when focused
* Android A11Y: handle valueChanged events
* tst_QSystemSemaphore: give proper path to test-helper
* QNX: Silence compiler warning by initializing variable
* Update LICENSE.QT-LICENSE-AGREEMENT
* winrt appxmanifest: Properly replace VCLibs version for newer MSVC versions
* QAbstractSocket: Don't pretend pause and resume is a stack
* Gui: test also depends for clipboard feature
* QDesktopServices: deprecate destroying URL handlers w/o explicit unsetUrlHandler()
* macOS: Respect QMAKE_APPLE_DEVICE_ARCHS when building qmake
* HTTP: Make redirect response parsing more generic
* BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 20.04
* Android A11Y: populate child elements when constructing node info
* Fix issue where readyRead() could happen after disconnected()
* QStringView: add missing constexpr so we can use is_constant_evaluated
* Use Android's View.generateViewId() for generating ids for views/surfaces
* Remove documentation of non-existing QAccessible state
* Doc: Fix snippet to match actual QFileInfo behavior
* Android: Re-focus focused accessibility node after orientation change
* Android A11Y: execute C++ code on main Qt thread
* Android: extract parentId for hidden object in advance
* xcb: Show valuator atom names properly in categorized logging
* Android: replace stacktrace with debug message in search for setService
* Better document attaching a QFutureWatcher to a started QFuture
* doc: Update GenericDataLocation location on iOS
* BLACKLIST test_Gestures tests for RHEL-8.4
* QPlainTestLogger: do not print "failure location" if there's no failure
* QAbstractItemView: do not access invalid model indices (3/N)
* Win32: always allow the event loop to be woken up by posted events
* rhi: d3d11: Use __uuidof where we can
* Don't QEXPECT_FAIL tst_QLineEdit::testQuickSelectionWithMouse on macOS ARM
* Network: Emit authenticationRequired when using Ntlm
* testlib: Disable window restoration on macOS in a non-persistent way
* QAbstractItemView: do not access invalid model indices (2/N)
* QAbstractItemView: do not access invalid model indices (1/N)
* QAbstractItemView: code tidies
* Update float16 part of TestLib selftest
* QGuiApplication: constant-initialize lastCursorPosition
* Blacklist tst_QFileSystemWatcher::signalsEmittedAfterFileMoved on all Windows versions
* [Android]: Handle the screen name, modes and refreshRate properly
* QVersionNumber: remove the "pure" attribute from commonPrefix()
* QEvent: initialize the static userEventTypeRegistry constexprly
* Let QXcbGlxWindow::createVisual fallback to QXcbWindow::createVisual
* Android A11Y: fix content update notification when object is hidden
* Android: explicitly remove accessibility focus when element is hidden
* BLACKLIST tst_qfont for Red Hat 8.4 and Ubuntu 20.04
* QtCore: includemocs
* Fix memory leak in QtConcurrent::run when called with a NULL QThreadPool
* INTEGRITY: Prevent deletion of virtual functions
* QMake: replace a Q_ASSERT() with a Q_UNREACHABLE()
* QTransform benchmark: measure what was promised
* QStaticByteArrayMatcher: add a useful comment
* QMacStyle: use the 'momentary push in' type for push buttons
* qopengl.h: Move C header #include(s) out of the QT_NAMESPACE
* Enable all supported 1.0 device features in QVulkanWindow
* Fix queue passed to vkQueuePresent
* QFusionStyle: don't draw an invalid outline for up/down buttons
* Doc: Make QListIterator snippets more robust
... changelog too long, skipping 46 lines ...
* QDateTime: Don't require c++17
==== libqt5-qtdeclarative ====
Version update (5.15.8+kde22 -> 5.15.9+kde23)
- Update to version 5.15.8+kde67, rebased upstream:
* QQuickItem: Fix effective visibility for items without parent
* Prevent crash when destroying asynchronous Loader
* Quick Animations: Fix crash
* qv4function: Fix crash due to reference being invalidated
* Models: Avoid crashes when deleting cache items
* QQuickState::when: handle QJSValue properties correctly
* QQmlImportDatabase: Make sure the newly added import path be first
* Revert "Fix missing glyphs when using NativeRendering"
* Fix missing glyphs when using NativeRendering
* Update the window cursor on mouse release
* Blacklist: test cases blacklisted in tst_QQuickListView:
* Blacklist: test cases blacklisted in tst_QQuickMultiPointTouchArea:
* Fix crash with NativeRendering on RHI
* A11Y: make QQuickText focusable for A11Y
* QQuickWindow: improve docs for activeFocusItem
* Doc: add example snippets for containmentMask
* Fix typo in qquickdroparea/BLACKLIST for Ubuntu-20.04
* QQmlAdaptorModel: Do not use reparenting for lifetime managemment
* Correctly handle QQuickState::when
* CMake: Fix handling of empty qrc files with qtquickcompiler
* CMake: Skip qtquickcompiler cmake test on macOS ARM
* Fix indices alignment problem
* Fix indentation in positioners example
* doc: Fix QQuickItem point/rect mapping methods signatures
* Instantiator: Do not load items when inactive
* Doc: Fix QtQuick::Loader::item type
* Doc: fix incorrect type name on focus page
* icutils::Node: GCC 11 -Werror=maybe-uninitialized w/-fsanitize=undefined
* tst_qquickimageprovider: fix some memleaks
* Fix incorrect behavior after displace transition
* Fix edge cases in arcTo
* Don't blacklist tst_QQuickFramebufferObject::everything on b2qt
* Use tree hash rather than commit hash in .tag file
* Adjust default max call depth for QNX
* Blacklist containsDrag_internal on Ubuntu 20.04
* QQmlLoggingCategory: Avoid unnecessary warnings from setters
* Blacklist flakey tst_QPauseAnimationJob::multipleSequentialGroups on macOS
* Assert that QQmlDelegateModel's count can't be less than zero
* qml{plugindump|importscanner}: Don't mix std::cerr and std::wcerr
* Treat unknown tablet device as stylus and create QTabletEvent
* GridView: Set content position when changing cell size
* QQuickItemViewTransitionAttached: Avoid dangling pointers
* Bound animatorjob value to the given range
- Commits dropped by the rebase:
* Document that StyledText also supports and "
==== libqt5-qtgraphicaleffects ====
Version update (5.15.8+kde0 -> 5.15.9+kde0)
- Update to version 5.15.8+kde2, rebased upstream:
* No code changes
==== libqt5-qtimageformats ====
Version update (5.15.8+kde9 -> 5.15.9+kde9)
- Update to version 5.15.8+kde12, rebased upstream:
* Update bundled libwebp to version 1.2.2
==== libqt5-qtlocation ====
Version update (5.15.8+kde4 -> 5.15.9+kde5)
- Update to version 5.15.8+kde7, rebased upstream:
* No code changes
==== libqt5-qtmultimedia ====
Version update (5.15.8+kde3 -> 5.15.9+kde3)
- Update to version 5.15.8+kde7, rebased upstream:
* Fix duration() with very long media with gstreamer
* Blacklist tst_QAudioOutput on macOS ARM
==== libqt5-qtquickcontrols ====
Version update (5.15.8+kde0 -> 5.15.9+kde0)
- Update to version 5.15.8+kde2, rebased upstream:
* No code changes
==== libqt5-qtquickcontrols2 ====
Version update (5.15.8+kde7 -> 5.15.9+kde5)
Subpackages: libQt5QuickControls2-5 libQt5QuickTemplates2-5
- Update to version 5.15.8+kde11, rebased upstream:
* SwipeView: don't cull every child item that gets added
* AbstractButton: fix fast clicks being treated as double clicks
==== libqt5-qtsensors ====
Version update (5.15.8+kde0 -> 5.15.9+kde0)
Subpackages: libQt5Sensors5 libQt5Sensors5-imports
- Update to version 5.15.8+kde2, rebased upstream:
* No code changes
==== libqt5-qtspeech ====
Version update (5.15.8+kde1 -> 5.15.9+kde1)
Subpackages: libQt5TextToSpeech5 libqt5-qtspeech-plugin-speechd
- Update to version 5.15.8+kde4, rebased upstream:
* Fix QtSpeech example querying locales before initialising
==== libqt5-qtsvg ====
Version update (5.15.8+kde8 -> 5.15.9+kde7)
- Update to version 5.15.8+kde10, rebased upstream:
* No code changes
==== libqt5-qttools ====
Version update (5.15.8+kde1 -> 5.15.9+kde1)
Subpackages: libqt5-qdbus libqt5-qtpaths
- Update to version 5.15.8+kde10, rebased upstream:
* qdoc: Fix assert on empty link target
* macdeployqt: donât err on unexpected otool output
* Don't run qdoc tests if qdoc was not enabled during configure
* CMake: Fix qt_create_translation to not remove .ts files on "clean"
* lupdate: Support numeric literal separators
* designer: Fix MSVC warning about returning address of local variable or temporary
* Bump copyright year to 2022
==== libqt5-qttranslations ====
Version update (5.15.8+kde0 -> 5.15.9+kde0)
- Update to version 5.15.8+kde2, rebased upstream:
* No code changes
==== libqt5-qtvirtualkeyboard ====
Version update (5.15.8+kde0 -> 5.15.9+kde0)
Subpackages: libQt5HunspellInputMethod5 libQt5VirtualKeyboard5 libqt5-qtvirtualkeyboard-hunspell
- Update to version 5.15.8+kde6, rebased upstream:
* Fix activation of input panel when initial active focus is set
* Blacklist: test cases blacklisted in inputpanel:
* Blacklist more test_fullScreenModeSelectionHandles rows
* Disable Windows IME when Qt Virtual Keyboard plugin is loaded
==== libqt5-qtwayland ====
Version update (5.15.8+kde63 -> 5.15.9+kde55)
Subpackages: libQt5WaylandClient5 libQt5WaylandCompositor5
- Update to version 5.15.8+kde70, rebased upstream:
* Don't keep eglConfig in hardwareintegration
* Update the window geometry when changing decorations
* Fix build with -no-feature-tabletevent
* Fix wayland touch event to use time stamp from wayland compositor
* wayland touch event to add key modifier
==== libqt5-qtwebchannel ====
Version update (5.15.8+kde3 -> 5.15.9+kde3)
Subpackages: libQt5WebChannel5 libQt5WebChannel5-imports
- Update to version 5.15.8+kde5, rebased upstream:
* No code changes
==== libqt5-qtwebview ====
Version update (5.15.8+kde0 -> 5.15.9+kde0)
Subpackages: libQt5WebView5 libQt5WebView5-imports
- Update to version 5.15.8+kde3, rebased upstream:
* Android: Enable local storage by default
==== libqt5-qtx11extras ====
Version update (5.15.8+kde0 -> 5.15.9+kde0)
- Update to version 5.15.8+kde2, rebased upstream:
* No code changes
==== libqt5-qtxmlpatterns ====
Version update (5.15.8+kde0 -> 5.15.9+kde0)
Subpackages: libQt5XmlPatterns5 libqt5-qtxmlpatterns-imports
- Update to version 5.15.8+kde2, rebased upstream:
* No code changes
==== llvm16 ====
Version update (16.0.1 -> 16.0.2)
- Update to version 16.0.2.
* This release contains bug-fixes for the LLVM 16.0.0 release.
This release is API and ABI compatible with 16.0.0.
- Rebase check-no-llvm-exegesis.patch.
- Rebase llvm-do-not-install-static-libraries.patch.
- Relax requirements for clang-tools to allow installation of older
versions of libclang13 with the -devel package. (boo#1210176)
- Enable ThinLTO for ARM 6/7/8 again. (boo#1178070)
- bsc#1210383 - Add aarch64 to lldb platforms
==== mobipocket ====
Version update (22.12.3 -> 23.04.0)
- Update to 23.04.0
* New feature release
* For more details please see:
* https://kde.org/announcements/gear/23.04.0/
- Update to 23.03.90
* New feature release
- Update to 23.03.80
* New feature release
==== nfs-utils ====
Subpackages: libnfsidmap1 nfs-client
- Update to version 2.6.3
- https://kernel.org/pub/linux/utils/nfs-utils/2.6.3/2.6.3-Changelog
- Remove patches from this release:
- 0006-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
- 0007-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
- 0008-nfsd.man-fix-typo-in-section-on-scope.patch
- Remove systemd/50-nfs.conf (was removed in upstream in d8d29f85)
and the realted patch (bsc#1200710).
0005-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch.
- New file /usr/lib/udev/rules.d/60-nfs.rules (which replaced in upstream
systemd/50-nfs.conf in 9466df03).
- Add fsidd:
- /usr/lib/systemd/system/fsidd.service
- /usr/lib/udev/rules.d/60-nfs.rules
- /usr/sbin/fsidd
==== python-anyio ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-cryptography ====
- add sle15_python_module_pythons (jsc#PED-68)
==== signon-kwallet-extension ====
Version update (22.12.3 -> 23.04.0)
- Update to 23.04.0
* New feature release
* For more details please see:
* https://kde.org/announcements/gear/23.04.0/
- Update to 23.03.90
* New feature release
- Update to 23.03.80
* New feature release
==== spectacle ====
Version update (22.12.3 -> 23.04.0)
Subpackages: spectacle-lang
- Update to 23.04.0
* New feature release
* For more details please see:
* https://kde.org/announcements/gear/23.04.0/
- Update to 23.03.90
* New feature release
- Update to 23.03.80
* New feature release
==== xdg-desktop-portal-gnome ====
Version update (44.0 -> 44.1)
Subpackages: xdg-desktop-portal-gnome-lang
- Update to version 44.1:
+ Improve handling of non-existing files on the filechooser
portal
+ Minor debugging improvements to the backgrounds portal
+ More precise initialization timing
+ Fix duplicate monitor and window streams
+ Updated translations.
==== xdg-desktop-portal-gtk ====
Subpackages: xdg-desktop-portal-gtk-lang
- Pass missing --disable-lockdown to configure,
xdg-desktop-portal-gnome handles that one too.
==== yast2-trans ====
Version update (84.87.20230420.b54e9530 -> 84.87.20230421.14b25cdb42)
Subpackages: yast2-trans-cs yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-fr yast2-trans-hu yast2-trans-it yast2-trans-ja yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ru yast2-trans-zh_CN yast2-trans-zh_TW
- Update to version 84.87.20230421.14b25cdb42:
* Translated using Weblate (Slovak)
* Translated using Weblate (Catalan)
* Translated using Weblate (Japanese)
* Translated using Weblate (Macedonian)
* Translated using Weblate (Macedonian)
* New POT for text domain 'authserver'.
* Translated using Weblate (Slovak)
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the aarch64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=microos&groupid=3&version…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
ImageMagick (7.1.1.5 -> 7.1.1.6)
Mesa (23.0.1 -> 23.0.2)
Mesa-drivers (23.0.1 -> 23.0.2)
MozillaFirefox (110.0.1 -> 112.0)
QGnomePlatform-qt5
adobe-sourcesans3-fonts (3.046 -> 3.052)
attica-qt5 (5.104.0 -> 5.105.0)
augeas
autoyast2 (4.6.0 -> 4.6.1)
avahi
avahi-glib2
baloo5 (5.104.0 -> 5.105.0)
bash-completion
bluedevil5 (5.27.3 -> 5.27.4)
bluez-qt (5.104.0 -> 5.105.0)
breeze (5.27.3 -> 5.27.4)
breeze-gtk (5.27.3 -> 5.27.4)
breeze5-icons (5.104.0 -> 5.105.0)
ca-certificates (2+git20211004.3efbea9 -> 2+git20230406.2dae8b7)
coreutils
discover (5.27.3 -> 5.27.4)
dmidecode
dnf
dracut (059+suse.366.gf45bc67a -> 059+suse.368.g2e7ac134)
drkonqi5 (5.27.3 -> 5.27.4)
firewalld (1.3.0 -> 1.3.1)
frameworkintegration (5.104.0 -> 5.105.0)
gcc13 (13.0.1+git6840 -> 13.0.1+git7162)
gdb
gdm
ghostscript
git
glib2-branding-openSUSE
glibc
glslang
gnome-control-center
gnome-settings-daemon (44.0 -> 44.1)
gnome-shell
gnome-terminal (3.48.0 -> 3.48.1)
gnutls (3.7.9 -> 3.8.0)
gpgme
grub2
gstreamer (1.22.1 -> 1.22.2)
gstreamer-plugins-bad (1.22.1 -> 1.22.2)
gstreamer-plugins-base (1.22.1 -> 1.22.2)
gstreamer-plugins-good (1.22.1 -> 1.22.2)
gtk4
gvfs
hwdata (0.368 -> 0.369)
ibus
isl (0.25 -> 0.26)
kactivities-stats (5.104.0 -> 5.105.0)
kactivities5 (5.104.0 -> 5.105.0)
kactivitymanagerd (5.27.3 -> 5.27.4)
karchive (5.104.0 -> 5.105.0)
kauth (5.104.0 -> 5.105.0)
kbookmarks (5.104.0 -> 5.105.0)
kcm_flatpak (5.27.3 -> 5.27.4)
kcm_sddm (5.27.3 -> 5.27.4)
kcmutils (5.104.0 -> 5.105.0)
kcodecs (5.104.0 -> 5.105.0)
kcompletion (5.104.0 -> 5.105.0)
kconfig (5.104.0 -> 5.105.0)
kconfigwidgets (5.104.0 -> 5.105.0)
kcoreaddons (5.104.0 -> 5.105.0)
kcrash (5.104.0 -> 5.105.0)
kdbusaddons (5.104.0 -> 5.105.0)
kde-cli-tools5 (5.27.3 -> 5.27.4)
kde-gtk-config5 (5.27.3 -> 5.27.4)
kdeclarative (5.104.0 -> 5.105.0)
kded (5.104.0 -> 5.105.0)
kdelibs4support (5.104.0 -> 5.105.0)
kdesu (5.104.0 -> 5.105.0)
kdnssd-framework (5.104.0 -> 5.105.0)
kdoctools (5.104.0 -> 5.105.0)
kernel-firmware (20230320 -> 20230406)
kernel-source (6.2.9 -> 6.2.10)
kexec-tools
kfilemetadata5 (5.104.0 -> 5.105.0)
kgamma5 (5.27.3 -> 5.27.4)
kglobalaccel (5.104.0 -> 5.105.0)
kguiaddons (5.104.0 -> 5.105.0)
kholidays (5.104.0 -> 5.105.0)
khotkeys5 (5.27.3 -> 5.27.4)
khtml (5.104.0 -> 5.105.0)
ki18n (5.104.0 -> 5.105.0)
kiconthemes (5.104.0 -> 5.105.0)
kidletime (5.104.0 -> 5.105.0)
kimageformats (5.104.0 -> 5.105.0)
kinfocenter5 (5.27.3 -> 5.27.4)
kinit (5.104.0 -> 5.105.0)
kio (5.104.0 -> 5.105.0)
kirigami2 (5.104.0 -> 5.105.0)
kitemmodels (5.104.0 -> 5.105.0)
kitemviews (5.104.0 -> 5.105.0)
kjobwidgets (5.104.0 -> 5.105.0)
kjs (5.104.0 -> 5.105.0)
kmenuedit5 (5.27.3 -> 5.27.4)
knewstuff (5.104.0 -> 5.105.0)
knotifications (5.104.0 -> 5.105.0)
knotifyconfig (5.104.0 -> 5.105.0)
kpackage (5.104.0 -> 5.105.0)
kparts (5.104.0 -> 5.105.0)
kpeople5 (5.104.0 -> 5.105.0)
kpipewire (5.27.3 -> 5.27.4)
kpty (5.104.0 -> 5.105.0)
kquickcharts (5.104.0 -> 5.105.0)
krunner (5.104.0 -> 5.105.0)
kscreen5 (5.27.3 -> 5.27.4)
kscreenlocker (5.27.3 -> 5.27.4)
kservice (5.104.0 -> 5.105.0)
ksshaskpass5 (5.27.3 -> 5.27.4)
ksystemstats5 (5.27.3 -> 5.27.4)
ktexteditor (5.104.0 -> 5.105.0)
ktextwidgets (5.104.0 -> 5.105.0)
kunitconversion (5.104.0 -> 5.105.0)
kwallet (5.104.0 -> 5.105.0)
kwayland (5.104.0 -> 5.105.0)
kwayland-integration (5.27.3 -> 5.27.4)
kwidgetsaddons (5.104.0 -> 5.105.0)
kwin5 (5.27.3 -> 5.27.4)
kwindowsystem (5.104.0 -> 5.105.0)
kwrited5 (5.27.3 -> 5.27.4)
kxmlgui (5.104.0 -> 5.105.0)
layer-shell-qt (5.27.3 -> 5.27.4)
lcms2 (2.14 -> 2.15)
libKF5ModemManagerQt (5.104.0 -> 5.105.0)
libKF5NetworkManagerQt (5.104.0 -> 5.105.0)
libXfixes (6.0.0 -> 6.0.1)
libXft (2.3.7 -> 2.3.8)
libXpm (3.5.14 -> 3.5.16)
libXt (1.2.1 -> 1.3.0)
libgcrypt (1.10.1 -> 1.10.2)
libgpg-error (1.46 -> 1.47)
libkdecoration2 (5.27.3 -> 5.27.4)
libkscreen2 (5.27.3 -> 5.27.4)
libksysguard5 (5.27.3 -> 5.27.4)
libmemcached (1.0.18 -> 1.1.4)
libnice
libopenmpt (0.6.9 -> 0.6.10)
libpcap (1.10.3 -> 1.10.4)
libqmi (1.30.8 -> 1.32.4)
libqt5-qtbase (5.15.8+kde183 -> 5.15.8+kde185)
libqt5-qtwebengine
libsolv (0.7.23 -> 0.7.24)
libstorage-ng (4.5.92 -> 4.5.96)
libtomcrypt
libva (2.17.0 -> 2.18.0)
libva-gl (2.17.0 -> 2.18.0)
libyui (4.5.0 -> 4.5.1)
libyui-ncurses (4.5.0 -> 4.5.1)
libyui-ncurses-pkg (4.5.0 -> 4.5.1)
libyui-qt (4.5.0 -> 4.5.1)
libyui-qt-graph (4.5.0 -> 4.5.1)
libyui-qt-pkg (4.5.0 -> 4.5.1)
libzypp (17.31.8 -> 17.31.10)
llvm16 (16.0.0 -> 16.0.1)
lua54
mdadm
microos-tools (2.20 -> 2.20+git20230413.2a43cdb)
milou5 (5.27.3 -> 5.27.4)
mobile-broadband-provider-info (20221107 -> 20230416)
mozilla-nss (3.88.1 -> 3.89)
mozjs102 (102.9.0 -> 102.10.0)
mutter (44.0+18 -> 44.0+54)
ncurses (6.4.20230311 -> 6.4.20230408)
nghttp2 (1.51.0 -> 1.52.0)
open-iscsi
open-vm-tools
openexr (3.1.6 -> 3.1.7)
openldap2 (2.6.3 -> 2.6.4)
openldap2-contrib-src (2.6.3 -> 2.6.4)
openssh
oxygen5-sounds (5.27.3 -> 5.27.4)
pam-config (2.2 -> 2.4)
pam_kwallet (5.27.3 -> 5.27.4)
patterns-base
patterns-gnome
patterns-kde (20221001 -> 20230403)
patterns-microos
pipewire (0.3.67 -> 0.3.69)
plasma-browser-integration (5.27.3 -> 5.27.4)
plasma-framework (5.104.0 -> 5.105.0)
plasma-nm5 (5.27.3 -> 5.27.4)
plasma5-addons (5.27.3 -> 5.27.4)
plasma5-desktop (5.27.3 -> 5.27.4)
plasma5-disks (5.27.3 -> 5.27.4)
plasma5-integration (5.27.3 -> 5.27.4)
plasma5-openSUSE
plasma5-pa (5.27.3 -> 5.27.4)
plasma5-systemmonitor (5.27.3 -> 5.27.4)
plasma5-thunderbolt (5.27.3 -> 5.27.4)
plasma5-workspace (5.27.3 -> 5.27.4.1)
podman (4.4.4 -> 4.5.0)
polkit-kde-agent-5 (5.27.3 -> 5.27.4)
poppler (23.03.0 -> 23.04.0)
poppler-qt5 (23.03.0 -> 23.04.0)
powerdevil5 (5.27.3 -> 5.27.4)
prison-qt5 (5.104.0 -> 5.105.0)
publicsuffix (20230226 -> 20230414)
purpose (5.104.0 -> 5.105.0)
python-cryptography (40.0.1 -> 40.0.2)
python-pexpect
python-pytz (2023.2 -> 2023.3)
python-redis (4.3.3 -> 4.5.4)
python-setuptools (67.6.0 -> 67.6.1)
qqc2-desktop-style (5.104.0 -> 5.105.0)
raspberrypi-firmware (2023.02.22 -> 2023.03.22)
raspberrypi-firmware-config (2023.02.22 -> 2023.03.22)
rav1e (0.6.2+0 -> 0.6.4+0)
redis (7.0.8 -> 7.0.11)
rsync
rubygem-ruby-dbus (0.20.0 -> 0.21.0)
runc (1.1.5 -> 1.1.6)
rust-keylime (0.2.0+git.1677691779.f7edd9a -> 0.2.0+git.1681457715.54484b7)
sddm
shadow
shim
snapper
solid (5.104.0 -> 5.105.0)
sonnet (5.104.0 -> 5.105.0)
sudo
syndication (5.104.0 -> 5.105.0)
syntax-highlighting (5.104.0 -> 5.105.0)
systemd (253.1 -> 253.3)
systemsettings5 (5.27.3 -> 5.27.4)
talloc
tcl
texlive
texlive-specs-n (2022.196.2.005svn61719 -> 2023.201.2.005svn65956)
threadweaver (5.104.0 -> 5.105.0)
tigervnc
util-linux
util-linux-systemd
vim (9.0.1430 -> 9.0.1443)
vte (0.72.0 -> 0.72.1)
webkit2gtk3
webkit2gtk4
wireplumber (0.4.13 -> 0.4.14)
wsdd (0.7.0 -> 0.7.1)
xdg-desktop-portal-gtk
xdg-desktop-portal-kde (5.27.3 -> 5.27.4)
xdm
xf86-input-libinput (1.2.1 -> 1.3.0)
xz
yast2-installation (4.6.1 -> 4.6.2)
yast2-packager (4.6.0 -> 4.6.1)
yast2-pkg-bindings (4.6.0 -> 4.6.1)
yast2-ruby-bindings (4.6.1 -> 4.6.2)
yast2-snapper (4.6.0 -> 4.6.1)
yast2-storage-ng (4.6.3 -> 4.6.5)
yast2-update (4.6.0 -> 4.6.1)
yast2-users (4.6.0 -> 4.6.1)
zlib-ng-compat (2.0.6 -> 2.0.7)
zvbi
zypper (1.14.59 -> 1.14.60)
=== Details ===
==== ImageMagick ====
Version update (7.1.1.5 -> 7.1.1.6)
Subpackages: ImageMagick-config-7-SUSE libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10
- version update to 7.1.1.6
- https://github.com/ImageMagick/Website/blob/main/ChangeLog.md#711-6---2023-…
- fixes CVE-2023-1906 [bsc#1210308]
==== Mesa ====
Version update (23.0.1 -> 23.0.2)
Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1
- Update to version 23.0.2
* 2nd bug fix release: lots of patches for all over the tree,
zink being the biggest singel source of changes.
==== Mesa-drivers ====
Version update (23.0.1 -> 23.0.2)
Subpackages: Mesa-dri Mesa-gallium Mesa-libva
- Update to version 23.0.2
* 2nd bug fix release: lots of patches for all over the tree,
zink being the biggest singel source of changes.
==== MozillaFirefox ====
Version update (110.0.1 -> 112.0)
- Mozilla Firefox 112.0
* https://www.mozilla.org/en-US/firefox/112.0/releasenotes/
MFSA 2023-13 (bsc#1210212)
* CVE-2023-29531 (bmo#1794292)
Out-of-bound memory access in WebGL on macOS
* CVE-2023-29532 (bmo#1806394)
Mozilla Maintenance Service Write-lock bypass
* CVE-2023-29533 (bmo#1798219, bmo#1814597)
Fullscreen notification obscured
* CVE-2023-29534 (bmo#1816007, bmo#1816059, bmo#1821155, bmo#1821576,
bmo#1821906, bmo#1822298, bmo#1822305)
Fullscreen notification could have been obscured on Firefox
for Android
* MFSA-TMP-2023-0001 (bmo#1819244)
Double-free in libwebp
* CVE-2023-29535 (bmo#1820543)
Potential Memory Corruption following Garbage Collector compaction
* CVE-2023-29536 (bmo#1821959)
Invalid free from JavaScript code
* CVE-2023-29537 (bmo#1823365, bmo#1824200, bmo#1825569)
Data Races in font initialization code
* CVE-2023-29538 (bmo#1685403)
Directory information could have been leaked to WebExtensions
* CVE-2023-29539 (bmo#1784348)
Content-Disposition filename truncation leads to Reflected
File Download
* CVE-2023-29540 (bmo#1790542)
Iframe sandbox bypass using redirects and sourceMappingUrls
* CVE-2023-29541 (bmo#1810191)
Files with malicious extensions could have been downloaded
unsafely on Linux
* CVE-2023-29542 (bmo#1810793, bmo#1815062)
Bypass of file download extension restrictions
* CVE-2023-29543 (bmo#1816158)
Use-after-free in debugging APIs
* CVE-2023-29544 (bmo#1818781)
Memory Corruption in garbage collector
* CVE-2023-29545 (bmo#1823077)
Windows Save As dialog resolved environment variables
* CVE-2023-29546 (bmo#1780842)
Screen recording in Private Browsing included address bar on
Android
* CVE-2023-29547 (bmo#1783536)
Secure document cookie could be spoofed with insecure cookie
* CVE-2023-29548 (bmo#1822754)
Incorrect optimization result on ARM64
* CVE-2023-29549 (bmo#1823042)
Javascript's bind function may have failed
* CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498, bmo#1814217,
bmo#1818357, bmo#1818762, bmo#1819493, bmo#1820389, bmo#1820602,
bmo#1821448, bmo#1822413, bmo#1824828)
Memory safety bugs fixed in Firefox 112 and Firefox ESR 102.10
* CVE-2023-29551 (bmo#1763625, bmo#1814314, bmo#1815798, bmo#1815890,
bmo#1819239, bmo#1819465, bmo#1819486, bmo#1819492, bmo#1819957,
bmo#1820514, bmo#1820776, bmo#1821838, bmo#1822175, bmo#1823547)
Memory safety bugs fixed in Firefox 112
- requires
* NSS 3.89
* Python >= 3.7 (for build)
- removed obsolete mozilla-bmo1807652.patch
- Fix Icons displayed incorrectly on GNOME/wayland via WMCLASS
in desktop file
- Mozilla Firefox 111.0.1 (boo#1209688)
* Fixed a crash on macOS while pinch-zooming under some circumstances
(bmo#1658986)
* Fixed a bug causing Firefox to freeze on startup for some
Windows users (bmo#1823159)
- fix build on Tumbleweed (mozilla-bmo1807652.patch)
- exclude i586/i686 once again because it fails to link libxul due
to its size
- Mozilla Firefox 111.0
* https://www.mozilla.org/en-US/firefox/111.0/releasenotes
MFSA 2023-09 (bsc#1209173)
* CVE-2023-28159 (bmo#1783561)
Fullscreen Notification could have been hidden by download
popups on Android
* CVE-2023-25748 (bmo#1798798)
Fullscreen Notification could have been hidden by window
prompts on Android
* CVE-2023-25749 (bmo#1810705)
Firefox for Android may have opened third-party apps without
a prompt
* CVE-2023-25750 (bmo#1814733)
Potential ServiceWorker cache leak during private browsing mode
* CVE-2023-25751 (bmo#1814899)
Incorrect code generation during JIT compilation
* CVE-2023-28160 (bmo#1802385)
Redirect to Web Extension files may have leaked local path
* CVE-2023-28164 (bmo#1809122)
URL being dragged from a removed cross-origin iframe into the
same tab triggered navigation
* CVE-2023-28161 (bmo#1811181)
One-time permissions granted to a local file were extended to
other local files loaded in the same tab
* CVE-2023-28162 (bmo#1811327)
Invalid downcast in Worklets
* CVE-2023-25752 (bmo#1811627)
Potential out-of-bounds when accessing throttled streams
* CVE-2023-28163 (bmo#1817768)
... changelog too long, skipping 12 lines ...
- update create-tar.sh
==== QGnomePlatform-qt5 ====
- Add 0001-fix-qt-6.5-compilation.patch to fix a compilation
error with qt 6.5
==== adobe-sourcesans3-fonts ====
Version update (3.046 -> 3.052)
- Update to 3.052:
* Adds Medium weight requested by user. (GitHub issue #253)
* Updates the design of several glyphs to arrive at more compact
vertical metrics
==== attica-qt5 ====
Version update (5.104.0 -> 5.105.0)
Subpackages: libKF5Attica5
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== augeas ====
Subpackages: augeas-lenses libaugeas0 libfa1
- Use the correct license - LGPL-2.1
==== autoyast2 ====
Version update (4.6.0 -> 4.6.1)
- Rebuild the RPM database during upgrade (--rebuilddb) (bsc#1209565)
- 4.6.1
==== avahi ====
Subpackages: libavahi-client3 libavahi-common3 libavahi-core7
- Add avahi-CVE-2023-1981.patch: emit error if requested service
is not found (boo#1210328 CVE-2023-1981).
==== avahi-glib2 ====
- Add avahi-CVE-2023-1981.patch: emit error if requested service
is not found (boo#1210328 CVE-2023-1981).
==== baloo5 ====
Version update (5.104.0 -> 5.105.0)
Subpackages: baloo5-file baloo5-file-lang baloo5-imports baloo5-kioslaves baloo5-kioslaves-lang baloo5-tools baloo5-tools-lang libKF5Baloo5 libKF5BalooEngine5 libKF5BalooEngine5-lang
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- Changes since 5.104.0:
* Add conventional python virtual-env folder to exclude filters
* [TermGenerator] Skip all unprintable characters
* Define the translation domain of BalooEngine
==== bash-completion ====
- Move cmake config files to devel
==== bluedevil5 ====
Version update (5.27.3 -> 5.27.4)
Subpackages: bluedevil5-lang
- Update to 5.27.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.27.4
- No code changes since 5.27.3
==== bluez-qt ====
Version update (5.104.0 -> 5.105.0)
Subpackages: bluez-qt-imports bluez-qt-udev libKF5BluezQt6
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== breeze ====
Version update (5.27.3 -> 5.27.4)
Subpackages: breeze5-cursors breeze5-decoration breeze5-style breeze5-style-lang breeze5-wallpapers libbreezecommon5-5
- Update to 5.27.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.27.4
- Changes since 5.27.3:
* CheckBox,RadioButton: Fix RTL icon alignment
* CheckBox,RadioButton: Fix RTL focus frame positioning
* CheckBox,RadioButton: Extend focus line to cover an icon too (kde#467824)
* Fix RTL for SP_ToolBarHorizontalExtensionButton
* KStyle: make painted arrows more scalable, fix RTL delay menu arrows
==== breeze-gtk ====
Version update (5.27.3 -> 5.27.4)
Subpackages: gtk2-metatheme-breeze gtk3-metatheme-breeze gtk4-metatheme-breeze metatheme-breeze-common
- Add patch to fix oversized titlebuttons in GTK3 apps (kde#468203)
* 0001-gtk3-restore-old-icon-size-for-titlebutton.patch
- Update to 5.27.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.27.4
- Changes since 5.27.3:
* gtk4/windowcontrols: reduce right margin of close button
* gtk3/titlebutton: extend control area to window borders
* gtk4/windowcontrols: extend control area to window borders (kde#414777)
* iconhelper: Query size via CSS
* gtk4/aboutdialog: set icon size for large icons
* gtk4/theme: Use 0.5 opacity for disabled pictures
* menus: make size react to fractional scaling
==== breeze5-icons ====
Version update (5.104.0 -> 5.105.0)
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- Changes since 5.104.0:
* Add icons for showing and hiding a virtual keyboard
* Redshift icons: Add missing semi-transparency, add new breeze-dark icons
* Update Redshift icons to off on & sun (kde#462215)
* Delete false Gparted and Kwikdisk icons (kde#467319)
==== ca-certificates ====
Version update (2+git20211004.3efbea9 -> 2+git20230406.2dae8b7)
- Update to version 2+git20230406.2dae8b7:
* Build in place support
* Fix up argument parsing
* merge spec file into git
==== coreutils ====
Subpackages: coreutils-doc
- add fix-reflink-fallback.patch (bsc#1210033)
==== discover ====
Version update (5.27.3 -> 5.27.4)
Subpackages: discover-backend-flatpak discover-backend-fwupd discover-backend-packagekit discover-lang discover-notifier
- Update to 5.27.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.27.4
- Changes since 5.27.3:
* rpm-ostree: Improve handling of externally started transactions
* rpm-ostree: Correctly set fetching and transaction state
* rpm-ostree: Unify transaction setup in a single function
* pk: Clear the offline state before starting a new one (kde#467638)
* notifier: Don't show updates notification if Discover is running
* pk: Do not create a QSet unnecessarily for isPackageNameUpgradeable
* pk: Group getUpdateDetail calls into one
* pk: Group offline updates resource size notifications
* PackageKitNotifier: Do not refresh database if an offline update is pending
==== dmidecode ====
- dmioem-hpe-oem-record-237-firmware-change.patch: Fix the decoding
of the last field of HPE OEM record type 237 (DIMM Vendor
Information).
==== dnf ====
- BuildRequire pkgconfig(bash-completion) instead of
bash-completion: the build system needs this to find out where to
install the completion files to.
==== dracut ====
Version update (059+suse.366.gf45bc67a -> 059+suse.368.g2e7ac134)
Subpackages: dracut-ima
- Update to version 059+suse.368.g2e7ac134:
* chore(suse): remove mkinitrd wrapper (bsc#1202351) (jsc#PED-1919)
==== drkonqi5 ====
Version update (5.27.3 -> 5.27.4)
Subpackages: drkonqi5-lang
- Update to 5.27.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.27.4
- No code changes since 5.27.3
==== firewalld ====
Version update (1.3.0 -> 1.3.1)
Subpackages: firewalld-bash-completion python3-firewall
- update to 1.3.1:
* fix(fw_nm): use IP interface names for connection lookup (18c8b81)
* fix(fw_policy): raise exceptions (5ae9322)
* fix(service): include: when used with rich rule (986f0be)
* fix(nftables): rich: log: limit was not taking effect (0dc0575)
* fix(build): rpm must build all as prerequisite (6896748)
* fix: use error codes for FirewallError instances (370e5f2)
* fix(ipset): chunk entries when restoring set (8a88855)
* fix(applet): allows using KDE network connection editor (29c8ef6)
==== frameworkintegration ====
Version update (5.104.0 -> 5.105.0)
Subpackages: frameworkintegration-plugin libKF5Style5
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- Changes since 5.104.0:
* Don't play sound for plain notification (kde#457672)
==== gcc13 ====
Version update (13.0.1+git6840 -> 13.0.1+git7162)
Subpackages: cpp13 libgcc_s1 libgfortran5 libgomp1 libobjc4 libstdc++6 libstdc++6-pp libubsan1
- Bump to d339e9802f758e051b0a1ef6db732ff846cbf4e3, git7162.
- Add new x86-related intrinsics (amxcomplexintrin.h).
- riscv-atomic.patch: RISC-V: Add support for inlining subword atomic
operations
- riscv-pthread.patch: Don't add -latomic with -pthread
- Bump to d0b961b802dd7d9d555ff4515835a479329326e9, git6995.
==== gdb ====
- Fix license, again (bsc#1210081).
==== gdm ====
Subpackages: gdm-schema gdmflexiserver libgdm1 typelib-1_0-Gdm-1_0
- Create two set of pam configuration files:
+ *-sle.pamd are for SLES15 and older
+ add postlogin-* includes to the others as required by openSUSEs
PAM config policy
==== ghostscript ====
Subpackages: ghostscript-x11
- CVE-2023-28879.patch fixes CVE-2023-28879
Buffer Overflow in s_xBCPE_process
cf. https://bugs.ghostscript.com/show_bug.cgi?id=706494
(bsc#1210062)
==== git ====
- sha256_clone_fix.patch: fix cloning of empty sha256 repositories (jsc#PED-3891)
==== glib2-branding-openSUSE ====
- prefer org.gnome.TextEditor.desktop instead of gedit.
patterns-gnome was changed to install TextEditor (boo#1210648).
==== glibc ====
Subpackages: glibc-extra glibc-locale glibc-locale-base nscd
- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
is unset (bsc#1209229, BZ #30235)
==== glslang ====
- Add StandAlone/ to glslang-nonstd-devel
==== gnome-control-center ====
Subpackages: gnome-control-center-color gnome-control-center-goa gnome-control-center-user-faces
- Rebase gnome-control-center-disable-error-message-for-NM.patch
- Add gnome-control-center-fix-6f1567f23.patch:
network/connection-editor: fix crash when removing a connection
(glgo#GNOME/gnome-control-center/commit/8cb77b4d3, bsc#1210377).
==== gnome-settings-daemon ====
Version update (44.0 -> 44.1)
- Update to version 44.1:
+ Build improvements
+ Power:
- Connect to light sensor asynchronously
- Initialize check for VM environment earlier
+ Rfkill: Monitor WwanEnabled property changes properly
+ Smartcards: Check for the addition of new smartcard readers
+ Xsettings: Do not force deprecated High Contrast icon theme
+ Updated translations.
- Use autopatch.
==== gnome-shell ====
Subpackages: gnome-extensions gnome-shell-calendar
- Update gnome-shell-private-connection.patch: (bsc#1209373)
==== gnome-terminal ====
Version update (3.48.0 -> 3.48.1)
Subpackages: gnome-shell-search-provider-gnome-terminal nautilus-extension-terminal
- Update to version 3.48.1:
+ help: Add help translation for TR locale
+ server: More env var sanitisation
+ Updated translations.
==== gnutls ====
Version update (3.7.9 -> 3.8.0)
- Temporarily disable GNULIB's year2038 support for 64bit time_t
by using the --disable-year2038 flag. This omits support for
timestamps past the year 2038:
* Fixes the public API on 32-bit architectures avoiding to
change the size of time_t as it cannot be changed without
breaking the ABI compatibility.
* Upstream issue: https://gitlab.com/gnutls/gnutls/-/issues/1466
- Update to 3.8.0: [bsc#1205763, bsc#1209627]
* libgnutls: Fix a Bleichenbacher oracle in the TLS RSA key
exchange. Reported by Hubert Kario (#1050). Fix developed by
Alexander Sosedkin. [GNUTLS-SA-2020-07-14, CVSS: medium]
[CVE-2023-0361]
* libgnutls: C++ library is now header only. All definitions
from gnutlsxx.c have been moved into gnutlsxx.h. Users of the
C++ interface have two options:
1. include gnutlsxx.h in their application and link against
the C library. (default)
2. include gnutlsxx.h in their application, compile with
GNUTLS_GNUTLSXX_NO_HEADERONLY macro defined and link
against the C++ library.
* libgnutls: GNUTLS_NO_STATUS_REQUEST flag and %NO_STATUS_REQUEST
priority modifier have been added to allow disabling of the
status_request TLS extension in the client side.
* libgnutls: TLS heartbeat is disabled by default.
The heartbeat extension in TLS (RFC 6520) is not widely used
given other implementations dropped support for it. To enable
back support for it, supply --enable-heartbeat-support to
configure script.
* libgnutls: SRP authentication is now disabled by default.
It is disabled because the SRP authentication in TLS is not
up to date with the latest TLS standards and its ciphersuites
are based on the CBC mode and SHA-1. To enable it back, supply
- -enable-srp-authentication option to configure script.
* libgnutls: All code has been indented using "indent -ppi1 -linux".
CI/CD has been adjusted to catch regressions. This is implemented
through devel/indent-gnutls, devel/indent-maybe and .gitlab-ci.ymlâs
commit-check. You may run devel/indent-gnutls to fix any
indentation issues if you make code modifications.
* guile: Guile-bindings removed. They have been extracted into a
separate project to reduce complexity and to simplify maintenance,
see <https://gitlab.com/gnutls/guile/>.
* minitasn1: Upgraded to libtasn1 version 4.19.
* API and ABI modifications:
GNUTLS_NO_STATUS_REQUEST: New flag
GNUTLS_SRTP_AEAD_AES_128_GCM: New gnutls_srtp_profile_t enum member
GNUTLS_SRTP_AEAD_AES_256_GCM: New gnutls_srtp_profile_t enum member
* Merge gnutls-FIPS-Set-error-state-when-jent-init-failed.patch
and gnutls-FIPS-jitterentropy-threadsafe.patch into the main
patch gnutls-FIPS-jitterentropy.patch
* Rebase gnutls-FIPS-140-3-references.patch
* Rebase patches with upstream version:
- gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch
* Remove patches merged/fixed upstream:
- gnutls-FIPS-disable-failing-tests.patch
- gnutls-verify-library-HMAC.patch
- gnutls_ECDSA_signing.patch
- gnutls-Make-XTS-key-check-failure-not-fatal.patch
- gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch
* Update keyring with https://gnutls.org/gnutls-release-keyring.gpg
- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
* Add gnutls-FIPS-jitterentropy-threadsafe.patch
- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
* Rebase patches with the version submitted upstream.
* Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
* Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch
==== gpgme ====
Subpackages: libgpgme11 libgpgmepp6 python310-gpg
- Add a Qt6 flavor to build Qt6 bindings
- Use %ldconfig_scriptlets
==== grub2 ====
Subpackages: grub2-arm64-efi grub2-snapper-plugin grub2-systemd-sleep-plugin
- Fix no prep partition error on non-PReP architectures by making the
prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
* 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
* 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
* 0005-export-environment-at-start-up.patch
* 0009-Add-crypttab_entry-to-obviate-the-need-to-input-pass.patch
- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
* 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
* 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
environment variables and ensure successful command execution.
* 0004-Introduce-prep_load_env-command.patch
- Refreshed
* 0005-export-environment-at-start-up.patch
==== gstreamer ====
Version update (1.22.1 -> 1.22.2)
Subpackages: libgstreamer-1_0-0 typelib-1_0-Gst-1_0
- Update to version 1.22.2:
+ Highlighted bugfixes:
- avdec_h264: fix decoder deadlocks with FFmpeg 6.0
- rtspsrc:
. fix regression with URI protocols in OPTIONS requests for
RTSP over TLD
. improved control url handling compatibility for broken
servers
- decklink: fix 10 bit RGB (r210) format auto detection for
capture and fix playout if video caps are configured before
audio caps
- d3d11videosink: Fix tearing in case of fullscreen mode
- playbin: fix deadlock when stopping stream with subtitles
visible (even more)
- typefinding: fix regression not detecting
application/dash+xml in some corner cases
- osxvideosink: fix broken aspect ratio and frame drawing
region
- decodebin3, parsebin: Improve elementary stream handling when
decoders are not present and fix hang when removing a failing
stream
- urisourcebin: Propagate sticky events from parsebin, so that
the `STREAM_START` event with the `GstStream` info is always
available when pads get exposed
- v4l2: Add support for YVU420M format; mark JPEG content as
parsed
- h264decoder, h265decoder: DPB bumping process and latency
reporting fixes
- Opus: Fix reading of extended channel config in MPEG-TS and
fix missing sample rate when remuxing from RTP to Matroska
- zxing: add support for building against zxing-c++ 2.0
- cerbero: Fix packaging of Rust plugins on Android; fix modern
Gentoo distro detection
- various bug fixes, memory leak fixes, and other stability and
reliability improvements
+ Gstreamer:
- datetime: Return G_MAXFLOAT instead of G_MAXDOUBLE for no
timezone offset
- inputselector: Wake up streaming thread before
PLAYING_TO_PAUSED transition
- tools: fix potential crash when passing command-line options
on Windows
- Rebase patches with quilt.
==== gstreamer-plugins-bad ====
Version update (1.22.1 -> 1.22.2)
Subpackages: libgstadaptivedemux-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstcuda-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstphotography-1_0-0 libgstplay-1_0-0 libgstplayer-1_0-0 libgstsctp-1_0-0 libgsttranscoder-1_0-0 libgsturidownloader-1_0-0 libgstva-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 libgstwebrtcnice-1_0-0
- Update to version 1.22.2:
+ cea708overlay: fix HCR interpretation
+ d3d11bufferpool: Fix invalid access in debug print loop
+ d3d11compositor: Fix composition error on release_pad()
+ d3d11converter: Fix conversion backend selection
+ d3d11videosink: Fix tearing in case of fullscreen mode
+ d3d11window: fix memory leak
+ debugqroverlay: fix string leak
+ decklinkaudiosink: Fix playback when video caps is configured
before audio
+ decklink: fix 10 bit RGB (r210) format auto detection
+ decklinkvideosrc:
- RGB 4:4:4 doesn't work after GStreamer upgrade (regression)
- unable to show HDMI stream that Blackmagic's Media Express is
able to see
+ gtkwaylandsink:
- Destroy GstWlWindow when parent GtkWindow is destroyed
- Fix crash when rendering after the window is closed
+ h264decoder: Fix DPB bumping process
+ h264decoder, h265decoder: Latency reporting related fixes
+ h264parse: Validate VUI framerate
+ jpegparse: reset parse state when the SOI is not the first
marker
+ ksvideo, directshow: Fix reference leaks in device providers
+ nvencoder: Fix CQP option setting
+ nvh264encoder: Fix template caps to include progressive mode as
well
+ openjpegdec: allow multithread decoding only in subframe mode
+ tsdemux: Fix reading of extended Opus channel configuration
+ vulkan: fix validation layer issues
+ vulkanoverlaycompositor: fix potential use after free
+ vulkanswapper: correctly handle force-aspect-ratio=false
+ wasapi2: Fix potential crash on device activation failure
+ webrtc: Fix segfault traversing ice transports
+ webrtc: patch leak caused by early return
+ zxing: add support for zxing-c++ 2.0
- Rebase reduce-required-meson.patch.
- Move pkgconfig(libchromaprint) BuildRequires to chromaprint
plugin sub-package, and drop the hard
gstreamer-plugins-bad-chromaprint Requires from our devel
sub-package. This is a "stand alone" plugin, and this way
packages depending on gstreamer-plugins-bad during build avoids
pulling in libavcodec and libavfilter + ffmpeg-mini-devel
packages for no reason.
==== gstreamer-plugins-base ====
Version update (1.22.1 -> 1.22.2)
Subpackages: libgstallocators-1_0-0 libgstapp-1_0-0 libgstaudio-1_0-0 libgstfft-1_0-0 libgstgl-1_0-0 libgstpbutils-1_0-0 libgstriff-1_0-0 libgstrtp-1_0-0 libgstrtsp-1_0-0 libgstsdp-1_0-0 libgsttag-1_0-0 libgstvideo-1_0-0 typelib-1_0-GstTag-1_0
- Update to version 1.22.2:
+ alsasink: Fix for being stuck in stop_streaming_threads state
+ decodebin3: fix hang when removing a failing stream
+ gl: wayland: cleanup on close
+ parsebin: Improve elementary stream handling
+ playbin: fix deadlock when stopping stream with subtitles
visible even more
+ sdp: Skip source-specific caps fields when creating an SDP
media from caps
+ urisourcebin:
- Propagate sticky events from parsebin
- Activate pad before transferring sticky events
+ typefinding: fix failure to recognize application/dash+xml in
some cases
- Rebase patches with quilt.
==== gstreamer-plugins-good ====
Version update (1.22.1 -> 1.22.2)
Subpackages: gstreamer-plugins-good-gtk
- Update to version 1.22.2:
+ osxvideosink: fix broken aspect ratio and frame drawing region
+ qtdemux: Fix seek adjustment with SNAP_AFTER flag
+ rtpopusdepay, matroskamux: Fix invalid rate while muxing Opus
in Matroska
+ rtpmanager: twcc: Fix duplicate packet handling
+ rtsp: url: fix incorrect request URI scheme for TLS transport
methods (regression)
+ rtspsrc:
- Consider "451: Parameter Not Understood" when handling broken
control urls
- fix behavior change with URI protocols in OPTIONS requests
- Skip PTs with caps incompatible to the global caps
- rtpjpegdepay: fix logic error when checking if an end of
image (EOI) tag is present
+ v4l2:
- Add support for YVU420M format
- mark JPEG as parsed
- Rebase patch with quilt.
==== gtk4 ====
Subpackages: gtk4-schema gtk4-tools libgtk-4-1 typelib-1_0-Gtk-4_0
- Place English translations in the tools sub-package instead of
lang. This should offer translations for the main English locales
without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.
- Disable vulkan support, stop passing vulkan=enabled to meson.
Disable vulkan-devel Requires and BuildRequires.
- Disable pkgconfig(libavfilter) BuildRequires, upstream do not
enable ffmpeg support by default and we do not enable it, so no
need to carry the dependency.
- Use ldconfig_scriptlets macro.
- Pass build-testsuite=false, build-tests=false and
build-examples=false to meson, no longer build these as we are
not running or installing them anyway, save a lot on buildtime.
==== gvfs ====
Subpackages: gvfs-backend-afc gvfs-backend-goa gvfs-backend-samba gvfs-backends gvfs-fuse
- Add 41862c0179f834d8bc3bd84ce78ee495050f2676.patch: trash: Sync
trash dir items when files change.
- Use auto(setup|patch) macros.
==== hwdata ====
Version update (0.368 -> 0.369)
- update to 0.369:
* Update pci, usb and vendor ids
==== ibus ====
Subpackages: libibus-1_0-5 typelib-1_0-IBus-1_0
- Fix key typing order
* This prevents that keys get stuck in games with wine/proton (steam)
* Added ibus-fix-key-release.patch
==== isl ====
Version update (0.25 -> 0.26)
- update to 0.26:
* fix inherited overloaded methods in Python bindings
* decompose topological sort of clusters in incremental
scheduler
* improved isl_pw_aff_list_{min,max}
* add some convenience functions
* more exports to (templated C++) bindings
* slightly improved conversion from binary relation to function
==== kactivities-stats ====
Version update (5.104.0 -> 5.105.0)
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== kactivities5 ====
Version update (5.104.0 -> 5.105.0)
Subpackages: kactivities5-imports libKF5Activities5
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- Changes since 5.104.0:
* Remove unused CI dep
==== kactivitymanagerd ====
Version update (5.27.3 -> 5.27.4)
- Update to 5.27.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.27.4
- No code changes since 5.27.3
==== karchive ====
Version update (5.104.0 -> 5.105.0)
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== kauth ====
Version update (5.104.0 -> 5.105.0)
Subpackages: libKF5Auth5 libKF5Auth5-lang libKF5AuthCore5
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== kbookmarks ====
Version update (5.104.0 -> 5.105.0)
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== kcm_flatpak ====
Version update (5.27.3 -> 5.27.4)
- Update to 5.27.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.27.4
- Too many changes to list here
==== kcm_sddm ====
Version update (5.27.3 -> 5.27.4)
- Update to 5.27.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.27.4
- No code changes since 5.27.3
==== kcmutils ====
Version update (5.104.0 -> 5.105.0)
Subpackages: kcmutils-imports libKF5KCMUtils5 libKF5KCMUtilsCore5
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== kcodecs ====
Version update (5.104.0 -> 5.105.0)
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== kcompletion ====
Version update (5.104.0 -> 5.105.0)
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== kconfig ====
Version update (5.104.0 -> 5.105.0)
Subpackages: kconf_update5 libKF5ConfigCore5 libKF5ConfigGui5 libKF5ConfigQml5
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== kconfigwidgets ====
Version update (5.104.0 -> 5.105.0)
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- Changes since 5.104.0:
* KColorSchemeManager: don't override color scheme set by platform theme (kde#447029)
* CommandBar: Fix lastUsedActions not restored
* KCModule: Add porting aid for KF6 changes
==== kcoreaddons ====
Version update (5.104.0 -> 5.105.0)
Subpackages: libKF5CoreAddons5
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- Changes since 5.104.0:
* Prevent KSignalHandler leaking signalfd file descriptors
==== kcrash ====
Version update (5.104.0 -> 5.105.0)
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== kdbusaddons ====
Version update (5.104.0 -> 5.105.0)
Subpackages: kdbusaddons-tools libKF5DBusAddons5
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== kde-cli-tools5 ====
Version update (5.27.3 -> 5.27.4)
- Update to 5.27.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.27.4
- No code changes since 5.27.3
==== kde-gtk-config5 ====
Version update (5.27.3 -> 5.27.4)
Subpackages: kde-gtk-config5-gtk3
- Update to 5.27.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.27.4
- Changes since 5.27.3:
* kded: provide `org.gtk.Settings` when `GTK_USE_PORTAL` is not set on Wayland (kde#421745)
* gtkconfig: set `color-scheme` when current color scheme changes
* gsettings: check param exists before setting value
* Beside monitor scaling factors, a user may specify a preferred text DPI size from the system configuration utility (KCM fonts) That setting is stored inside the kcmfonts configuration file; one entry is kept for Plasma/X11 sessions, "forceFontDPI", and another for Plasma/Wayland sessions, "forceFontDPIWayland". (kde#466463,kde#461106)
==== kdeclarative ====
Version update (5.104.0 -> 5.105.0)
Subpackages: kdeclarative-components libKF5CalendarEvents5 libKF5Declarative5 libKF5QuickAddons5
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- Changes since 5.104.0:
* API dox: add some minimal docs to namespace & classes to trigger coverage
* API dox: cover CalendarEvents in generated QCH file
* Overhaul configmodule docs
==== kded ====
Version update (5.104.0 -> 5.105.0)
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== kdelibs4support ====
Version update (5.104.0 -> 5.105.0)
Subpackages: libKF5KDELibs4Support5
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== kdesu ====
Version update (5.104.0 -> 5.105.0)
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- Changes since 5.104.0:
* Have KDE4 compat header emit compiler warnings about their use
==== kdnssd-framework ====
Version update (5.104.0 -> 5.105.0)
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== kdoctools ====
Version update (5.104.0 -> 5.105.0)
Subpackages: libKF5DocTools5
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- Changes since 5.104.0:
* kdoctools_install: fix doc detection in path with special chars
==== kernel-firmware ====
Version update (20230320 -> 20230406)
Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network
- Update to version 20230406 (git commit 86da2ac9b4e5):
* linux-firmware: update firmware for MT7916
* rtw89: 8852b: update format-1 fw to v0.29.29.1
* rtw89: 8852c: update fw to v0.27.56.13
* ath11k: WCN6855 hw2.0: update board-2.bin
* ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
* ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
* ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
* ath11k: IPQ8074 hw2.0: update board-2.bin
* ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
* ath11k: IPQ6018 hw1.0: update board-2.bin
* ath10k: QCA99X0 hw2.0: update board-2.bin
* ath10k: QCA9984 hw1.0: update board-2.bin
* ath10k: QCA9888 hw2.0: update board-2.bin
* ath10k: QCA6174 hw3.0: update board-2.bin
* ath10k: QCA4019 hw1.0: update board-2.bin
* nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
* linux-firmware: update firmware for MT7922 WiFi device
* linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
* linux-firmware: Amphion: Update vpu firmware
* iwlwifi: add new FWs from core78-32 release
* iwlwifi: update 9000-family firmwares to core78-32
* amdgpu: Update SDMA 6.0.1 firmware
* amdgpu: Add PSP 13.0.11 firmware
* amdgpu: Update PSP 13.0.4 firmware
* amdgpu: Update GC 11.0.1 firmware
* amdgpu: Update DCN 3.1.4 firmware
* amdgpu: Add GC 11.0.4 firmware
* rtw88: 8822c: Update normal firmware to v9.9.15
==== kernel-source ====
Version update (6.2.9 -> 6.2.10)
- Linux 6.2.10 (bsc#1012628).
- thunderbolt: Limit USB3 bandwidth of certain Intel USB4 host
routers (bsc#1012628).
- cifs: update ip_addr for ses only for primary chan setup
(bsc#1012628).
- cifs: prevent data race in cifs_reconnect_tcon() (bsc#1012628).
- cifs: avoid race conditions with parallel reconnects
(bsc#1012628).
- zonefs: Reorganize code (bsc#1012628).
- zonefs: Simplify IO error handling (bsc#1012628).
- zonefs: Reduce struct zonefs_inode_info size (bsc#1012628).
- zonefs: Separate zone information from inode information
(bsc#1012628).
- zonefs: Fix error message in zonefs_file_dio_append()
(bsc#1012628).
- btrfs: rename BTRFS_FS_NO_OVERCOMMIT to
BTRFS_FS_ACTIVE_ZONE_TRACKING (bsc#1012628).
- btrfs: zoned: count fresh BG region as zone unusable
(bsc#1012628).
- btrfs: zoned: drop space_info->active_total_bytes (bsc#1012628).
- fsverity: don't drop pagecache at end of FS_IOC_ENABLE_VERITY
(bsc#1012628).
- cifs: fix missing unload_nls() in smb2_reconnect()
(bsc#1012628).
- xfrm: Zero padding when dumping algos and encap (bsc#1012628).
- ASoC: codecs: tx-macro: Fix for KASAN: slab-out-of-bounds
(bsc#1012628).
- ASoC: Intel: avs: max98357a: Explicitly define codec format
(bsc#1012628).
- ASoC: Intel: avs: da7219: Explicitly define codec format
(bsc#1012628).
- ASoC: Intel: avs: rt5682: Explicitly define codec format
(bsc#1012628).
- ASoC: Intel: avs: ssm4567: Remove nau8825 bits (bsc#1012628).
- ASoC: Intel: avs: nau8825: Adjust clock control (bsc#1012628).
- lib: zstd: Backport fix for in-place decompression
(bsc#1012628).
- zstd: Fix definition of assert() (bsc#1012628).
- ACPI: video: Add backlight=native DMI quirk for Dell Vostro
15 3535 (bsc#1012628).
- ACPI: x86: Introduce an acpi_quirk_skip_gpio_event_handlers()
helper (bsc#1012628).
- ACPI: x86: Add skip i2c clients quirk for Acer Iconia One 7
B1-750 (bsc#1012628).
- ACPI: x86: Add skip i2c clients quirk for Lenovo Yoga Book X90
(bsc#1012628).
- ASoC: SOF: ipc3: Check for upper size limit for the received
message (bsc#1012628).
- ASoC: SOF: ipc4-topology: Fix incorrect sample rate print unit
(bsc#1012628).
- ASoC: SOF: Intel: pci-tng: revert invalid bar size setting
(bsc#1012628).
- ASoC: SOF: Intel: hda-dsp: harden D0i3 programming sequence
(bsc#1012628).
- ASoC: SOF: Intel: hda-ctrl: re-add sleep after entering and
exiting reset (bsc#1012628).
- ASoC: SOF: IPC4: update gain ipc msg definition to align with fw
(bsc#1012628).
- ASoC: hdmi-codec: only startup/shutdown on supported streams
(bsc#1012628).
- wifi: mac80211: check basic rates validity (bsc#1012628).
- md: avoid signed overflow in slot_store() (bsc#1012628).
- x86/PVH: obtain VGA console info in Dom0 (bsc#1012628).
- drm/amdkfd: Fix BO offset for multi-VMA page migration
(bsc#1012628).
- drm/amdkfd: fix a potential double free in pqm_create_queue
(bsc#1012628).
- drm/amdgpu/vcn: custom video info caps for sriov (bsc#1012628).
- drm/amdkfd: fix potential kgd_mem UAFs (bsc#1012628).
- drm/amd/display: Fix HDCP failing to enable after suspend
(bsc#1012628).
- net: hsr: Don't log netdev_err message on unknown prp dst node
(bsc#1012628).
- ALSA: asihpi: check pao in control_message() (bsc#1012628).
- ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set()
(bsc#1012628).
- fbdev: tgafb: Fix potential divide by zero (bsc#1012628).
- ACPI: tools: pfrut: Check if the input of level and type is
in the right numeric range (bsc#1012628).
- sched_getaffinity: don't assume 'cpumask_size()' is fully
initialized (bsc#1012628).
- nvme-pci: fixing memory leak in probe teardown path
(bsc#1012628).
- nvme-pci: add NVME_QUIRK_BOGUS_NID for Lexar NM620
(bsc#1012628).
- drm/amdkfd: Fixed kfd_process cleanup on module exit
(bsc#1012628).
- net/mlx5e: Lower maximum allowed MTU in XSK to match XDP
prerequisites (bsc#1012628).
- fbdev: nvidia: Fix potential divide by zero (bsc#1012628).
- fbdev: intelfb: Fix potential divide by zero (bsc#1012628).
- fbdev: lxfb: Fix potential divide by zero (bsc#1012628).
- fbdev: au1200fb: Fix potential divide by zero (bsc#1012628).
- tools/power turbostat: Fix /dev/cpu_dma_latency warnings
(bsc#1012628).
- tools/power turbostat: fix decoding of HWP_STATUS (bsc#1012628).
- tracing: Fix wrong return in kprobe_event_gen_test.c
(bsc#1012628).
- btrfs: fix uninitialized variable warning in
... changelog too long, skipping 235 lines ...
- commit f0487ac
==== kexec-tools ====
- Update kexec-tools-SYS_getrandom.patch to fix build errors on
old x86_64 distributions
==== kfilemetadata5 ====
Version update (5.104.0 -> 5.105.0)
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== kgamma5 ====
Version update (5.27.3 -> 5.27.4)
- Update to 5.27.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.27.4
- No code changes since 5.27.3
==== kglobalaccel ====
Version update (5.104.0 -> 5.105.0)
Subpackages: kglobalaccel5 libKF5GlobalAccel5 libKF5GlobalAccelPrivate5
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== kguiaddons ====
Version update (5.104.0 -> 5.105.0)
Subpackages: libKF5GuiAddons5
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== kholidays ====
Version update (5.104.0 -> 5.105.0)
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== khotkeys5 ====
Version update (5.27.3 -> 5.27.4)
- Update to 5.27.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.27.4
- No code changes since 5.27.3
==== khtml ====
Version update (5.104.0 -> 5.105.0)
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== ki18n ====
Version update (5.104.0 -> 5.105.0)
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- Changes since 5.104.0:
* Use compat headers with deprecation warnings for KuitMarkup/kuitmarkup.h
* cmake: Do not rebuild po and ts files if they did not change
==== kiconthemes ====
Version update (5.104.0 -> 5.105.0)
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- Changes since 5.104.0:
* Add missing comma between enum values
- Drop patch, merged upstream:
* 0001-Add-missing-comma-between-enum-values.patch
==== kidletime ====
Version update (5.104.0 -> 5.105.0)
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== kimageformats ====
Version update (5.104.0 -> 5.105.0)
- Add support for RAW image formats
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- Changes since 5.104.0:
* psd: Fix alpha blending (KF5)
==== kinfocenter5 ====
Version update (5.27.3 -> 5.27.4)
Subpackages: kinfocenter5-lang
- Update to 5.27.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.27.4
- Changes since 5.27.3:
* energy: Use text colour for the grid lines
==== kinit ====
Version update (5.104.0 -> 5.105.0)
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== kio ====
Version update (5.104.0 -> 5.105.0)
Subpackages: kio-core
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- Changes since 5.104.0:
* CommandLauncher: call emitResult() as soon as process has started (kde#466359)
* Also handle copy_file_range failing with ENOENT
* widgets/renamefiledialog: set number limit again (kde#466636)
==== kirigami2 ====
Version update (5.104.0 -> 5.105.0)
Subpackages: libKF5Kirigami2-5
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- Changes since 5.104.0:
* Fix quit action code
* GlobalDrawer: Fix header with invisible content taking up space
* ColorUtils: Handle cases where hue is -1 in linearInterpolate
* NavigationTabBar: Fix imports in doc example
* NavigationTabBar: Factor out minDelegateWidth part of expression
* Action Name Not required KF5
* Default page categorized settings
* Show back button when pushing a pagerow
* shadowed*rectangle: Don't use base class result if materials are different
* Set fallback theme path when a custom icon theme is used
==== kitemmodels ====
Version update (5.104.0 -> 5.105.0)
Subpackages: kitemmodels-imports libKF5ItemModels5
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== kitemviews ====
Version update (5.104.0 -> 5.105.0)
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== kjobwidgets ====
Version update (5.104.0 -> 5.105.0)
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== kjs ====
Version update (5.104.0 -> 5.105.0)
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== kmenuedit5 ====
Version update (5.27.3 -> 5.27.4)
- Update to 5.27.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.27.4
- No code changes since 5.27.3
==== knewstuff ====
Version update (5.104.0 -> 5.105.0)
Subpackages: knewstuff-imports libKF5NewStuff5 libKF5NewStuffCore5 libKF5NewStuffWidgets5
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- Changes since 5.104.0:
* QtQuickDialogWrapper: Print out errors if component creation failed
* Deprecate knewstuffcore_version.h & knewstuffquick_version.h
* Add missing deps to KF5NewStuffCoreConfig
==== knotifications ====
Version update (5.104.0 -> 5.105.0)
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== knotifyconfig ====
Version update (5.104.0 -> 5.105.0)
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== kpackage ====
Version update (5.104.0 -> 5.105.0)
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== kparts ====
Version update (5.104.0 -> 5.105.0)
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== kpeople5 ====
Version update (5.104.0 -> 5.105.0)
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== kpipewire ====
Version update (5.27.3 -> 5.27.4)
Subpackages: kpipewire-imports libKPipeWire5 libKPipeWireDmaBuf5 libKPipeWireRecord5
- Update to 5.27.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.27.4
- Changes since 5.27.3:
* source: Handle BGRA buffers gracefully
* record: Only create the sws_context when necessary
* record: Use a good amount of threads as recommended by QThread
* record: Make sure we process all the frames before leaving
* record: Improve packet fetching
* Use a different API call to make importing DmaBufs work on Nvidia (kde#448839)
* options to disable motion estimation and in-loop filtering
* record: Refactor thread distribution
* record: Allocate SwsContext only when necessary
* recording: Allocate frames when we render
* recording: Extend the encoders API
==== kpty ====
Version update (5.104.0 -> 5.105.0)
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== kquickcharts ====
Version update (5.104.0 -> 5.105.0)
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== krunner ====
Version update (5.104.0 -> 5.105.0)
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== kscreen5 ====
Version update (5.27.3 -> 5.27.4)
Subpackages: kscreen5-plasmoid
- Update to 5.27.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.27.4
- Changes since 5.27.3:
* OSD: Do not connect to member QObject's destroyed signal (kde#466914)
* Display connector name instead of type name when serial number is identical (kde#466046)
==== kscreenlocker ====
Version update (5.27.3 -> 5.27.4)
Subpackages: kscreenlocker-lang libKScreenLocker5
- Update to 5.27.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.27.4
- No code changes since 5.27.3
==== kservice ====
Version update (5.104.0 -> 5.105.0)
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- Changes since 5.104.0:
* Remove unused include
==== ksshaskpass5 ====
Version update (5.27.3 -> 5.27.4)
Subpackages: ksshaskpass5-lang
- Update to 5.27.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.27.4
- No code changes since 5.27.3
==== ksystemstats5 ====
Version update (5.27.3 -> 5.27.4)
- Update to 5.27.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.27.4
- No code changes since 5.27.3
==== ktexteditor ====
Version update (5.104.0 -> 5.105.0)
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- Changes since 5.104.0:
* try to improve test stability
* autoindent: fix indentation when "keep extra spaces" is enabled
* Julia indent: fix indentation when "keep extra spaces" is enabled,
also fix indentation when a line ends with a string assignment
==== ktextwidgets ====
Version update (5.104.0 -> 5.105.0)
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== kunitconversion ====
Version update (5.104.0 -> 5.105.0)
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== kwallet ====
Version update (5.104.0 -> 5.105.0)
Subpackages: kwallet-tools kwalletd5 libKF5Wallet5 libkwalletbackend5-5
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== kwayland ====
Version update (5.104.0 -> 5.105.0)
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== kwayland-integration ====
Version update (5.27.3 -> 5.27.4)
- Update to 5.27.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.27.4
- Changes since 5.27.3:
* Implement SkipSwitcher state for plasma surfaces
==== kwidgetsaddons ====
Version update (5.104.0 -> 5.105.0)
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- Changes since 5.104.0:
* Allow searching 2-character strings (kde#449003)
* Initialize KCharSelectTablePrivate::chr
==== kwin5 ====
Version update (5.27.3 -> 5.27.4)
- Add patch to fix monitor settings issue on amdgpu (kde#468235):
* 0001-backends-drm-set-the-scaling-mode-to-none.patch
- Update to 5.27.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.27.4
- Changes since 5.27.3:
* Revert "backends/libinput: don't multiply v120 value by scroll speed" (kde#464592)
* Improve Workspace::outputAt()
* workspace: prevent dangling pointers in output order list
* dpms: Make sure we are not calling the interface after the output is gone (kde#466346)
* backends/drm: restrict common mode generation to drivers that support scaling
* kcms/rules: Make Comboboxes bordered again
* backends/drm: consider color property changes as failed when the output is off
* wayland: Handle xdg_wm_base being destroyed before surface role
* Avoid accidental creation of backing stores for offscreen surfaces (kde#465790)
* inputmethod: Properly report that it's not visible
* wayland: Truncate strings sent via plasmawindowmanager interface (kde#465775)
* Simplify tile dismissal (kde#465740)
* Fix picking drag target
* Screencast: avoid using DMABufs exclusively to allow renegotiation
==== kwindowsystem ====
Version update (5.104.0 -> 5.105.0)
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== kwrited5 ====
Version update (5.27.3 -> 5.27.4)
- Update to 5.27.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.27.4
- No code changes since 5.27.3
==== kxmlgui ====
Version update (5.104.0 -> 5.105.0)
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== layer-shell-qt ====
Version update (5.27.3 -> 5.27.4)
- Update to 5.27.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.27.4
- No code changes since 5.27.3
==== lcms2 ====
Version update (2.14 -> 2.15)
- update to 2.15:
* New MESON build system, many thanks to amispark and Lovell
Fuller for bringing this.
* Fixed a bug that caused memory corruption on colord
* cmsReadRawTag can read portions of tags again. Removing this
caused colord to segfault when dumping profiles
* Added more checks based of fuzzer discoveries.
* MSYS2 can now compile lcms2
* Checked on Apple Silicon M1 and M2
* Fixed a bug of fastfloat plug-in that affected Krita CMYK
color selector
- drop 0001-fix-memory-corruption-when-unregistering-plugins.patch (upstream)
==== libKF5ModemManagerQt ====
Version update (5.104.0 -> 5.105.0)
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== libKF5NetworkManagerQt ====
Version update (5.104.0 -> 5.105.0)
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== libXfixes ====
Version update (6.0.0 -> 6.0.1)
- add keyring validation
- modernize spec file. install license and documentation
- Update to version 6.0.1
* Fix spelling/wording issues
* gitlab CI: add a basic build test
* Remove unnecessary casts from malloc & free calls
* Variable scope reduction as recommended by cppcheck
* Mark two dpy parameters const as suggested by cppcheck
* Quiet -Wconditional-uninitialized warnings from clang
* Resolve 36 of 40 -Wextra-semi-stmt warnings from clang
* Handle 63 of 63 -Wshorten-64-to-32 warnings from clang
* Handle 60 of 60 -Wimplicit-int-conversion warnings from clang
* Handle 6 of 9 -Wsign-conversion warnings from clang
* XFixesCloseDisplay: Mark codes as unused
* Require LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL
* Remove "All rights reserved" from Oracle copyright notices
==== libXft ====
Version update (2.3.7 -> 2.3.8)
- Updat to version 2.3.8
* configure: Use LT_INIT from libtool 2 instead of deprecated
AC_PROG_LIBTOOL
* add check for missing glyph in XftFontCheckGlyph()
* issue 17: libxft-2.3.7: Bold fonts in urxvt missing leftmost pixels
* issue 18: Problems with rotated text (monospace font only)
==== libXpm ====
Version update (3.5.14 -> 3.5.16)
- update to 3.5.16:
* test: skip compressed file tests when --disable-open-zfile is used
* gitlab CI: build with each of --enable-open-zfile & --disable-open-zfile
* configure: correct error message to suggest --disable-open-zfile
* open-zfile: Make compress & uncompress commands optional
* Require LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL
* XpmCreateDataFromXpmImage: Fix misleading indentation
* parse.c: Wrap FREE_CIDX definition in do { ... } while(0)
* parse.c: remove unused function xstrlcpy()
* test: Use PACKAGE_BUGREPORT instead of hard-coded URL's
* test: Add simple test cases for functions in src/rgb.c
* xpmReadRgbNames: constify filename argument
* Fix a memleak in ParsePixels error code path
- with switching to suggests making use of (n)compress no longer
needs to be limited to openSUSE
- suggests instead of require compress (see changelog below)
- require compress (ncompress package) on openSUSE; it's not
supported on SLE
- Drop n_no-compress-on-sle.patch and set XPM_PATH_COMPRESS instead
(xpmPipeThrough function returns NULL when the command is not
available; so same result as with the patch applied; that the
child process for executing 'compress' returns with exit(1)
doesn't matter much; it might even be useful to see the error
message ...)
- Depend also on /usr/bin/uncompress, not only /usr/bin/gzip;
Requiring binaries instead of packages resolves the file
conflict with busybox-gzip, which is used when building nginx
opensuse images; dep chain was: nginx -> libdg3 -> libXpm4 -> gzip
==> conflict with busybox-gzip
- Depend on /usr/bin/gzip, not gzip
- n_no-compress-on-sle.patch
* we can't handle .Z files, since we don't have ncompress package
on SLE; so disable this feature as before (bsc#1207031)
- BuildRequires
* removed again ncompress
* added again autoconf, automake, libtool
- run again autoreconf due to patch above
- update to 3.5.15:
* Use gzip -d instead of gunzip
* Prevent a double free in the error code path
* Fix CVE-2022-4883: compression commands depend on $PATH
* Fix CVE-2022-44617: Runaway loop with width of 0 and enormous height
* test: add test cases for CVE-2022-44617 (zero-width w/enormous height)
* Fix CVE-2022-46285: Infinite loop on unclosed comments
* test: add test case for CVE-2022-46285 (unclosed comments)
* cxpm: getc/ungetc wrappers should not adjust position when c == EOF
* test: Add unit tests using glib framework
* configure: add --disable-open-zfile instead of requiring -DNO_ZPIPE
* man pages: Apply standard man page style/formatting
* man pages: Replace "See Also" entries with more useful ones
* man pages: Fix typos and other minor editing
- drop U_0001-configure-add-disable-open-zfile-instead-of-requirin.patch,
U_0002-Fix-CVE-2022-46285-Infinite-loop-on-unclosed-comment.patch,
U_0004-Fix-CVE-2022-44617-Runaway-loop-with-width-of-0-and-.patch,
U_0005-Fix-CVE-2022-4883-compression-commands-depend-on-PAT.patch,
U_regression-bug1207029_1207030_1207031.patch
U_regression2-bug1207029_1207030_1207031.patch: upstream
- switch urls to https
- spec file cleanups
- add gpg keyring validation
==== libXt ====
Version update (1.2.1 -> 1.3.0)
- update to 1.3.0
* gitlab CI: add a basic build test
* Fix spelling/wording issues
* gitlab CI: stop requiring Signed-off-by in commits
* Use memcpy() instead of memmove() when buffers are known not to overlap
* Use memcpy() instead of XtMemmove() when buffers are known to differ
* tests: update g_test_bug_base url from bugzilla to gitlab
* tests: Use XORG_MEMORY_CHECK_FLAGS from xorg-macros 1.16
* tests: Replace g_assert() calls with g_assert_*() calls
* configure.ac: Replace HAVE_LIBRARY with AC_CHECK_LIB
* Add xfilesearchpath to xt.pc
* TMstate.c: Handle -Wduplicated-branches warnings
* Remove "All rights reserved" from Oracle copyright notices
* configure: Use LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL
* test: Add unit tests for XtMalloc, XtCalloc, & XtRealloc
* Add XtReallocArray() for overflow checking of multiplied args
* Replace XtRealloc() calls with XtReallocArray()
* Replace XtMalloc() calls with XtMallocArray()
* Define LONG64 if __SIZEOF_LONG__ indicates 64-bit long
* XtArgVal: Support architectures where pointers are bigger than long
* Use XtUIntPtr for integer types that can hold pointers
* Cast via intptr_t when converting integers to pointers
* Fix XrmResource layout if pointers are bigger than long
* Fix InternalCallbackRec layout if pointers are bigger than 64 bits
* Support buttons > 5 in translation tables [v2]
* add _X_NORETURN to agree with header-file
* codespell-fixes
* cppcheck and clang --analyze fixes
* fixes for gcc13 warnings
* cppcheck fixes (const, null dereferencing, uninitialized, scope)
* cppcheck (revise IsDescendant() to fix possible null-dereference)
* update copyright-date
==== libgcrypt ====
Version update (1.10.1 -> 1.10.2)
- Update to 1.10.2:
* Bug fixes:
- Fix Argon2 for the case output > 64. [rC13b5454d26]
- Fix missing HWF_PPC_ARCH_3_10 in HW feature. [rCe073f0ed44]
- Fix RSA key generation failure in forced FIPS mode. [T5919]
- Fix gcry_pk_hash_verify for explicit hash. [T6066]
- Fix a wrong result of gcry_mpi_invm. [T5970]
- Allow building with --disable-asm for HPPA. [T5976]
- Allow building with -Oz. [T6432]
- Enable the fast path to ChaCha20 only when supported. [T6384]
- Use size_t to avoid counter overflow in Keccak when directly
feeding more than 4GiB. [T6217]
* Other:
- Do not use secure memory for a DRBG instance. [T5933]
- Do not allow PKCS#1.5 padding for encryption in FIPS mode. [T5918]
- Fix the behaviour for child process re-seeding in the DRBG. [rC019a40c990]
- Allow verification of small RSA signatures in FIPS mode. [T5975]
- Allow the use of a shorter salt for KDFs in FIPS mode. [T6039]
- Run digest+sign self tests for RSA and ECC in FIPS mode. [rC06c9350165]
- Add function-name based FIPS indicator function.
GCRYCTL_FIPS_SERVICE_INDICATOR_FUNCTION. This is not considered
an ABI changes because the new FIPS features were not yet
approved. [rC822ee57f07]
- Improve PCT in FIPS mode. [rC285bf54b1a, rC4963c127ae, T6397]
- Use getrandom (GRND_RANDOM) in FIPS mode. [rCcf10c74bd9]
- Disable RSA-OAEP padding in FIPS mode. [rCe5bfda492a]
- Check minimum allowed key size in PBKDF in FIPS mode. [T6039,T6219]
- Get maximum 32B of entropy at once in FIPS mode. [rCce0df08bba]
- Prefer gpgrt-config when available. [T5034]
- Mark AESWRAP as approved FIPS algorithm. [T5512]
- Prevent usage of long salt for PSS in FIPS mode. [rCfdd2a8b332]
- Prevent usage of X9.31 keygen in FIPS mode. [rC392e0ccd25]
- Remove GCM mode from the allowed FIPS indicators. [rC1540698389]
- Add explicit FIPS indicators for hash and MAC algorithms. [T6376]
* Release-info: https://dev.gnupg.org/T5905
* Rebase FIPS patches:
- libgcrypt-FIPS-SLI-hash-mac.patch
- libgcrypt-FIPS-SLI-kdf-leylength.patch
- libgcrypt-FIPS-SLI-pk.patch
==== libgpg-error ====
Version update (1.46 -> 1.47)
- Update to 1.47:
* New error codes for PUKs and reset codes. [T6421]
* Avoid segv in logging with improper use of the "socket://".
* Fixed translation of argparse's internal option --help.
* Interface changes relative to the 1.46 release:
- GPG_ERR_SOURCE_TKD NEW.
- GPG_ERR_BAD_PUK NEW.
- GPG_ERR_NO_RESET_CODE NEW.
- GPG_ERR_BAD_RESET_CODE NEW.
- GPGRT_SPAWN_KEEP_STDIN NEW.
- GPGRT_SPAWN_KEEP_STDOUT NEW.
- GPGRT_SPAWN_KEEP_STDERR NEW.
- GPGRT_SPAWN_INHERIT_FILE NEW.
* Release-info: https://dev.gnupg.org/T6231
==== libkdecoration2 ====
Version update (5.27.3 -> 5.27.4)
Subpackages: libkdecorations2-5 libkdecorations2-5-lang libkdecorations2private10
- Update to 5.27.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.27.4
- No code changes since 5.27.3
==== libkscreen2 ====
Version update (5.27.3 -> 5.27.4)
Subpackages: libKF5Screen8 libKF5ScreenDpms8 libkscreen2-plugin
- Update to 5.27.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.27.4
- No code changes since 5.27.3
==== libksysguard5 ====
Version update (5.27.3 -> 5.27.4)
Subpackages: ksysguardsystemstats-data libKSysGuardSystemStats1 libksysguard5-imports libksysguard5-plugins
- Update to 5.27.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.27.4
- Changes since 5.27.3:
* Add translation domain before diving in subdirectories
==== libmemcached ====
Version update (1.0.18 -> 1.1.4)
- Re-enable SASL support (boo#1210290)
- Add requirement for libmemcachedprotocol0 to devel package
- Update to new maintained fork of libmemcached
- Update to 1.1.4:
* Lot of bugfixes
* Have a look at Changelog-1.1.md for the complete list of changes
- Removed patches:
* libmemcached-pthread.patch
* libmemcached-automake1_14.diff
* libmemcached-no-docs-available.patch
* libmemcached-1.0.18-fix-build-gcc7.patch
- Remove libmemcached.keyring
==== libnice ====
Subpackages: gstreamer-libnice libnice10
- Add libnice-port-gupnp-igd-bump.patch: Port to new gupnp-igd.
- Replace libgupnp-igd-devel and gobject-introspection-devel with
pkgconfig(gupnp-igd-1.6) and pkgconfig(gobject-introspection-1.0)
BuildRequires, align with what meson checks for.
- Use ldconfig_scriptlets macro.
- Enable meson_test macro in check section, run tests during build.
Remove the single test that does not work in the build service
via sed call.
==== libopenmpt ====
Version update (0.6.9 -> 0.6.10)
- Update to 0.6.10
* [Bug] File probing and loading results could be inconsistent
for SFX files, so that probing could claim that a file is
definitely not playable even if it would be.
* MOD: VBlank heuristics are now applied to MOD files with M!K!
signature. Fixes mod.siedler ii.
* NoiseTracker MODs are now always played with VBlank timing.
* MED: Add support for default instrument pitch.
* MED: Global play transpose value was not considered for MMD0
files.
* 669: Reject files with lots of control characters in song
message.
* mpg123: Update to v1.31.3 (2023-03-19).
==== libpcap ====
Version update (1.10.3 -> 1.10.4)
- update to 1.10.4:
* rpcap: Fix name of launchd service.
* documentation updates and build system tweaks
==== libqmi ====
Version update (1.30.8 -> 1.32.4)
Subpackages: libqmi-glib5 libqmi-tools
- Update to version 1.32.4:
* libqmi-glib: Schedule indications with G_PRIORITY_DEFAULT to
ensure correct processing order between responses and
ndications.
* build: If QRTR enabled the pkg-config should publicly require
libqrtr-glib.
- Changes from version 1.32.2:
* libqmi-glib: fixed message header validation to avoid reading
out of bounds.
* qmi-proxy: added --verbose-full flag to allow printing logs
with personal info included.
- Changes from version 1.32.0:
* There is no longer an upstream-provided source tarball, please
use the signed git tag '1.32.0' instead to refer to the sources
of this release.
* The verbose message logging will now by default hide all fields
that are considered personal information. Extended message
logging including all field contents should be explicitly
requested.
* Build:
- The GNU autotools (autoconf/automake/libtool) support has
been fully removed, this release requires the use of the
meson build system.
- The 'instrospection' meson option is now a boolean.
- New boolean 'man' meson option to allow disabling the man
page generation.
* New services: New 'FOX' service for operations defined by
Foxconn, including "Get Firmware Version" for now.
* qmicli:
- New '--verbose-full' option to request enabling logs that
include personal information.
- New '--pdc-monitor-refresh' command.
- New '--gas-dms-set-usb-composition' and
'--gas-dms-get-usb-composition' commands.
- New '--wms-set-routes' command.
- New '--dsd-get-system-status' command.
- Updated the '--wda-set-data-format' command with new optional
fields to configure the uplink data aggregation max size and
max datagrams.
* Several other minor improvements and fixes.
- Switch to meson buildsystem, add meson BuildRequires and macros.
- Add help2man, pkgconfig(bash-completion) and
pkgconfig(gobject-introspection-1.0) BuildRequires: New
dependencies.
- Use ldconfig_scriptlets macro.
- New home, URL and Source.
- Drop sig and keyfile, no longer available.
==== libqt5-qtbase ====
Version update (5.15.8+kde183 -> 5.15.8+kde185)
Subpackages: libQt5Concurrent5 libQt5Core5 libQt5DBus5 libQt5Gui5 libQt5Network5 libQt5PrintSupport5 libQt5Sql5 libQt5Sql5-sqlite libQt5Test5 libQt5Widgets5 libQt5Xml5 libqt5-qtbase-platformtheme-gtk3
- Update to version 5.15.8+kde185:
* QFSFileEngine: fix overflow bug when using lseek64
* Add QImage null check when QOpenGLTexture converts
- Add patch to fix return key handling in QGroupBox on GNOME (bsc#1209364):
* 0001-Revert-QGnomeTheme-Allow-Space-Return-Enter-and-Sele.patch
- Add patch to fix XInput2 events in big-endian X11 clients (bsc#1204883, QTBUG-105157):
* big-endian-scroll.patch
==== libqt5-qtwebengine ====
- Add patch to fix build with GCC 13 (boo#1207469):
* 0001-Fixes-for-building-with-GCC-13.patch
==== libsolv ====
Version update (0.7.23 -> 0.7.24)
Subpackages: libsolv-tools python3-solv ruby-solv
- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
[bsc#1195633]
- bump version to 0.7.24
==== libstorage-ng ====
Version update (4.5.92 -> 4.5.96)
Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1
- Translated using Weblate (Georgian) (bsc#1149754)
- 4.5.96
- merge gh#openSUSE/libstorage-ng#925
- disable NVMe detection since it is not correct
- 4.5.95
- merge gh#openSUSE/libstorage-ng#924
- added GitHub Action using Fedora
- 4.5.94
- merge gh#openSUSE/libstorage-ng#923
- detect transport for NVMe disks (bsc#1210144)
- cleanup
- 4.5.93
==== libtomcrypt ====
- Modernise spec file
- Run tests during build
==== libva ====
Version update (2.17.0 -> 2.18.0)
Subpackages: libva-drm2 libva-x11-2 libva2
- Update to version 2.18.0:
* doc: Add build and install libva informatio in home page.
* fix:
- Add libva.def into distribution package
- NULL check before calling strncmp.
- Remove reference to non-existent symbol
* meson: docs:
- Add encoder interface for av1
- Use libva_version over project_version()
* va:
- Add VAProfileH264High10
- Always build with va-messaging API
- Fix the codying style of CHECK_DISPLAY
- Remove Android pre Jelly Bean workarounds
- Remove dummy isValid() hook
- Remove unused drm_sarea.h include & ANDROID references in
va_dricommon.h
- va/sysdeps.h: remove Android section
* x11:
- Allow disabling DRI3 via LIBVA_DRI3_DISABLe env var
- Use LIBVA_DRI3_DISABLE in GetNumCandidates
- Switch to multibuild style. Drop libva-gl.spec|changes and
pre_checkin.sh.
- Switch to meson build system, add meson BuildRequires, drop
libtool and xz BuildRequires, and replace gcc-c++ with generic
c++_compiler.
- Use autosetup and ldconfig_scriptlets macros.
- Add libva-wayland to baselibs.conf, now that its build have moved
to the main part of spec, source validator should no longer
complain on SLE.
- Drop propagate-dpy.patch: The upstream issue was closed without
the patch ever getting applied, and the issue that it fixed was
deemed to not be a libva issue. See upstream issue:
https://github.com/intel/libva/issues/479
==== libva-gl ====
Version update (2.17.0 -> 2.18.0)
- Update to version 2.18.0:
* doc: Add build and install libva informatio in home page.
* fix:
- Add libva.def into distribution package
- NULL check before calling strncmp.
- Remove reference to non-existent symbol
* meson: docs:
- Add encoder interface for av1
- Use libva_version over project_version()
* va:
- Add VAProfileH264High10
- Always build with va-messaging API
- Fix the codying style of CHECK_DISPLAY
- Remove Android pre Jelly Bean workarounds
- Remove dummy isValid() hook
- Remove unused drm_sarea.h include & ANDROID references in
va_dricommon.h
- va/sysdeps.h: remove Android section
* x11:
- Allow disabling DRI3 via LIBVA_DRI3_DISABLe env var
- Use LIBVA_DRI3_DISABLE in GetNumCandidates
- Switch to multibuild style. Drop libva-gl.spec|changes and
pre_checkin.sh.
- Switch to meson build system, add meson BuildRequires, drop
libtool and xz BuildRequires, and replace gcc-c++ with generic
c++_compiler.
- Use autosetup and ldconfig_scriptlets macros.
- Add libva-wayland to baselibs.conf, now that its build have moved
to the main part of spec, source validator should no longer
complain on SLE.
- Drop propagate-dpy.patch: The upstream issue was closed without
the patch ever getting applied, and the issue that it fixed was
deemed to not be a libva issue. See upstream issue:
https://github.com/intel/libva/issues/479
- update to 2.17.0:
* win: Simplify signature for driver name loading
* win: Rewrite driver registry query and fix some
bugs/leaks/inefficiencies
* win: Add missing null check after calloc
* va: Update security disclaimer
* dep:remove the file .cvsignore
* pkgconfig: add 'with-legacy' for emgd, nvctrl and fglrx
* meson: add 'with-legacy' for emgd, nvctrl and fglrx
* x11: move all FGLRX code to va_fglrx.c
* x11: move all NVCTRL code to va_nvctrl.c
* meson: stop using deprecated meson.source_root()
* meson: stop using configure_file copy=true
* va: correctly include the win32 (local) headers
* win: clean-up the coding style
* va: dos2unix all the files
* drm: remove unnecessary dri2 version/extension query
* trace: annotate internal functions with DLL_HIDDEN
* build/sysdeps: Remove HAVE_GNUC_VISIBILITY_ATTRIBUTE and use _GNUC_
support level attribute instead
* meson: Check support for -Wl,-version-script and build link_args
accordingly
* meson: Set va_win32 soversion to '' and remove the install_data rename
* fix: resouce check null
* va_trace: Add Win32 memory types in va_TraceSurfaceAttributes
* va_trace: va_TraceSurfaceAttributes should check the
VASurfaceAttribMemoryType
* va: Adds Win32 Node and Windows build support
* va: Adds compat_win32 abstraction for Windows build and prepares va
common code for windows build
* pkgconfig: Add Win32 package for when WITH_WIN32 is enabled
* meson: Add with_win32 option, makes libdrm non-mandatory on Win
* x11: add basic DRI3 support
* drm: remove VA_DRM_IsRenderNodeFd() helper
* drm: add radeon drm + radeonsi mesa combo
==== libyui ====
Version update (4.5.0 -> 4.5.1)
- Qt UI: Fixed loading icons from an absolute path (bsc#1210591)
https://github.com/libyui/libyui/pull/94
- 4.5.1
==== libyui-ncurses ====
Version update (4.5.0 -> 4.5.1)
- Qt UI: Fixed loading icons from an absolute path (bsc#1210591)
https://github.com/libyui/libyui/pull/94
- 4.5.1
==== libyui-ncurses-pkg ====
Version update (4.5.0 -> 4.5.1)
- Qt UI: Fixed loading icons from an absolute path (bsc#1210591)
https://github.com/libyui/libyui/pull/94
- 4.5.1
==== libyui-qt ====
Version update (4.5.0 -> 4.5.1)
- Qt UI: Fixed loading icons from an absolute path (bsc#1210591)
https://github.com/libyui/libyui/pull/94
- 4.5.1
==== libyui-qt-graph ====
Version update (4.5.0 -> 4.5.1)
- Qt UI: Fixed loading icons from an absolute path (bsc#1210591)
https://github.com/libyui/libyui/pull/94
- 4.5.1
==== libyui-qt-pkg ====
Version update (4.5.0 -> 4.5.1)
- Qt UI: Fixed loading icons from an absolute path (bsc#1210591)
https://github.com/libyui/libyui/pull/94
- 4.5.1
==== libzypp ====
Version update (17.31.8 -> 17.31.10)
- BuildRequires: libsolv-devel >= 0.7.24 for x86_64_v[234]
support.
- version 17.31.10 (22)
- Workround bsc#1195633 while libsolv <= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
(boo#1127591)
Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
[#439])
Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)
==== llvm16 ====
Version update (16.0.0 -> 16.0.1)
- Update to version 16.0.1.
* This release contains bug-fixes for the LLVM 16.0.0 release.
This release is API and ABI compatible with 16.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
==== lua54 ====
- Added more numbered patches from upstream:
* luabugs11.patch
==== mdadm ====
- sysconfig.mdadm: Remove ServiceRestart line to mdadm since there
is not such systemd service. (bsc#1203491)
==== microos-tools ====
Version update (2.20 -> 2.20+git20230413.2a43cdb)
- Update to version 2.20+git20230413.2a43cdb:
* Drop extra sysctl file for coredumps (boo#1091684)
- remove conflict with systemd-coredump (boo#1091684). There is no actual
conflict. It actually works fine to install systemd-coredump in addition.
==== milou5 ====
Version update (5.27.3 -> 5.27.4)
Subpackages: milou5-lang
- Update to 5.27.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.27.4
- No code changes since 5.27.3
==== mobile-broadband-provider-info ====
Version update (20221107 -> 20230416)
- Update to version 20230416:
* MAINTAINERS: update from mobile-broadband-provider-info.doap
* ua: fix +7Telecom
* all: include a <name> in <country>
* ru: add Vainah Telecom
* ru: add Tinkoff Mobile
* ru: add STS
* ru: add SberMobile
* ru: add Phoenix
* ru: add Letai
* ru: add Gazprombank Mobile
* ru: add +7Telecom
* ru: add VTB Mobile
* ua: add Win Mobile
* ua: add Volna mobile
* ua: add Krymtelekom
* ru: update operators
* ru: clean up old operators
* ca: add Rogers LTE APNs
* gb:Add Superdrug Mobile
* dk: Update Telenor DNS
* pk: unbreak Pakistani MCC
* doap: add Guido to maintainer list
* us: AT&T: add RESELLER as MVNO APN
==== mozilla-nss ====
Version update (3.88.1 -> 3.89)
Subpackages: libfreebl3 libfreebl3-hmac libsoftokn3 libsoftokn3-hmac mozilla-nss-certs
- update to NSS 3.89
* bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
* bmo#1820175 - PR_STATIC_ASSERT is cursed
* bmo#1767883 - Need to add policy control to keys lengths for signatures
* bmo#1820175 - Fix unreachable code warning in fuzz builds
* bmo#1820175 - Fix various compiler warnings in NSS
* bmo#1820175 - Enable various compiler warnings for clang builds
* bmo#1815136 - set PORT error after sftk_HMACCmp failure
* bmo#1767883 - Need to add policy control to keys lengths for signatures
* bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
* bmo#1804660 - Make high tag number assertion failure an error
* bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
length from 284 to 384
* bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
* bmo#1789436 - Fix build failure on Windows
* bmo#1811337 - migrate Win 2012 tasks to Azure
* bmo#1810702 - fix title length in doc
* bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
* bmo#1570615 - Add presence/absence tests for TLS GREASE
* bmo#1804688 - Correct addition of GREASE value to ALPN xtn
* bmo#1789436 - CH extension permutation
* bmo#1570615 - TLS GREASE (RFC8701)
* bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
* bmo#1815870 - use a different treeherder symbol for each docker
image build task
* bmo#1815868 - pin an older version of the ubuntu:18.04 and
20.04 docker images
* bmo#1810702 - remove nested table in rst doc
* bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
* bmo#1812671 - build failure while implicitly casting SECStatus
to PRUInt32
==== mozjs102 ====
Version update (102.9.0 -> 102.10.0)
- Update to version 102.10.0:
+ Various security fixes.
+ CVE-2023-29531: Out-of-bound memory access in WebGL on macOS
+ CVE-2023-29532: Mozilla Maintenance Service Write-lock bypass
+ CVE-2023-29533: Fullscreen notification obscured
+ MFSA-TMP-2023-0001: Double-free in libwebp
+ CVE-2023-29535: Potential Memory Corruption following Garbage
Collector compaction
+ CVE-2023-29536: Invalid free from JavaScript code
+ CVE-2023-29539: Content-Disposition filename truncation leads
to Reflected File Download
+ CVE-2023-29541: Files with malicious extensions could have been
downloaded unsafely on Linux
+ CVE-2023-29542: Bypass of file download extension restrictions
+ CVE-2023-29545: Windows Save As dialog resolved environment
variables
+ CVE-2023-1945: Memory Corruption in Safe Browsing Code
+ CVE-2023-29548: Incorrect optimization result on ARM64
+ CVE-2023-29550: Memory safety bugs fixed in Firefox 112 and
Firefox ESR 102.10
- Replace clang-devel and llvm-devel with clang and llvm-gold
BuildRequires.
==== mutter ====
Version update (44.0+18 -> 44.0+54)
- Update to version 44.0+54:
+ backends/stage: Pass ClutterFrame to MetaStageWatchFunc
+ clutter/paint-context: Allow assigning a ClutterFrame
+ clutter/stage: Assign frames to paint context
+ core:
- Create passive button grab on topmost Window
- Minor refactor
- Pass MetaWindow on passive button grab machinery
+ cursor-tracker: Enhance the documentation and increase
annotation coverage
+ dnd: Clear Wayland drag source when cancelled from stage grab
context
+ frames/content: Use gtk_widget_compute_point()
+ frames: Forward _NET_WM_STATE during frame initialization
+ output-xrandr:
- Consistently return -1 on error
- Don't treat 0 as invalid backlight value
+ screen-cast/monitor-src:
- Record DMA-BUF frames immediately
- Record frames with presentation time
+ screen-cast/src:
- Add frame recording variant with timestamp
- Clean up DMA-BUF only error paths
+ screen-cast-stream-src:
- Shuffle a variable around
- Export damaged video regions
- Minor adjustment
+ stage-impl: Do clipped redraws when drawing offscreen
+ wayland/data-device: Clear data source when cancelling drag
with ESC
+ wayland:
- Don't leak XDnD mime type strings
- Set compositor when creating MetaWaylandDataSourceXWayland
+ wayland/xdg-shell:
- Dismiss instead of destroy invalid popup
- Ignore reposition if popup was dismissed
+ workspace: Only consider windows that should be showing as
focusable
+ x11:
- Fix remaining leaks from switch to XGetAtomName()
- Remove unused member variables from
MetaX11SelectionInputStream
- Use Atoms when constructing a new
MetaX11SelectionOutputStream
+ xdg-shell: Early out of apply if dismissed
- Add 2963.patch: xdg-shell: Always handle frame callbacks in
popup_apply_state(). Fixes a crash in mutter.
- Use auto(setup|patch) macros.
- Update to version 44.0+24:
+ x11: Wrap X call with error traps. And pass Atom directly. This
should make Mutter more resilient and avoid a type of crash on
gnome-shell.
+ frames/window-tracker: Select StructureNotifyMask X11 events.
+ Updated translations.
==== ncurses ====
Version update (6.4.20230311 -> 6.4.20230408)
Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen
- Add ncurses patch 20230408
+ document limitations of tparm, and error-returns in curs_terminfo.3x
+ document limitations of tgoto, and error-returns in curs_termcap.3x
+ add xterm+focus to alacritty+common (patch by Christian Duerr).
+ add "-v" option to tput, to show warnings.
> improve checks for malformed terminfo data (report/analysis by
Jonathan Bar Or, Michael Pearse, Emanuele Cozzi).
+ make the parameter type/count checks in _nc_tiparm() more stringent
+ update tgoto() to account for _nc_tiparm() changes
+ add checks in tparm() and tiparm() for misuse of string parameters
+ add special cases in tput to handle extensions Cs/Ms parameters
+ ignore compiled-terminfo where the array sizes exceed the standard
- Skip gzipping manual pages as brp-compress does the job
- Add ncurses patch 20230401
+ modify experimental Windows driver to work with xterm mouse protocol.
+ remove DECCOLM+DECSCLM from foot (patch by Daniel Ekloef).
==== nghttp2 ====
Version update (1.51.0 -> 1.52.0)
- update to 1.52.0:
* https://nghttp2.org/blog/2023/02/13/nghttp2-v1-52-0/
* sphinx_rtd_theme has been removed from the repository
and archive.
* The deprecated Python bindings has been removed.
* The deprecated libnghttp2_asio has been removed.
* llhttp and neverbleed have been updated.
* This release fixes the bug that stalls TLS connection.
* This release adds more http3 integration tests.
- drop nghttp2-remove-python-build.patch: obsolete as the code got removed
==== open-iscsi ====
Subpackages: iscsiuio libopeniscsiusr0
- Remove "--strip" in SPEC file for meson build, so that
debuginfo is generated. (from mwilck) (bsc#1210536)
==== open-vm-tools ====
Subpackages: libvmtools0 open-vm-tools-desktop
- As per jsc-PED-1344, update spec file to only build the containerinfo
plugin for TW/SLES 15 SP5 and newer.
==== openexr ====
Version update (3.1.6 -> 3.1.7)
Subpackages: libIex-3_1-30 libIlmThread-3_1-30 libOpenEXR-3_1-30
- update to 3.1.7:
* Patch release that fixes a build regression on ARMv7, and
fixes a build issue with zlib.
==== openldap2 ====
Version update (2.6.3 -> 2.6.4)
Subpackages: libldap-data libldap2 openldap2-client
- update to 2.6.4:
* Fixed client tools to remove 'h' and 'p' options
* Fixed ldapsearch memory leak with paged results (ITS#9860)
* Fixed libldap ldif_open_urlto check for failure (ITS#9904)
* Fixed libldap ldap_url_parsehosts check for failure
* Fixed liblunicode UTF8bvnormalize buffer size (ITS#9955)
* Fixed lloadd memory leaks (ITS#9907)
* Fixed lloadd shutdown code to protect memory correctly
* Fixed lloadd race in epoch.c (ITS#9947)
* Fixed lloadd potential deadlock with cn=monitor (ITS#9951)
* Fixed lloadd to keep listener base around when not active
* Fixed lloadd object reclamation sequencing (ITS#9983)
* Fixed slapd memory leak with olcAuthIDRewrite (ITS#6035)
* Fixed slapd free of redundant cmdline option (ITS#9912)
* Fixed slapd transactions extended operations cleanup after
* Fixed slapd deadlock with replicated cn=config
* Fixed slapd connection close logic (ITS#9991)
* Fixed slapd bconfig locking of cn=config entries (ITS#9045)
* Fixed slapd-mdb max number of index databases to 256
* Fixed slapd-mdb to always release entries from ADD operations
* Fixed slapd-mdb to fully init empty DN in tool_entry_get
* Fixed slapd-monitor memory leaks with lloadd (ITS#9906)
* Fixed slapd-monitor to free remembered cookies (ITS#9339)
* Fixed slapo-accesslog reqStart ordering matching rule
* Fixed slapo-deref memory leak (ITS#9924)
* Fixed slapo-dynlist to ignore irrelevant objectClasses
* Fixed slapo-dynlist to avoid unnecessary searches (ITS#9929)
* Fixed slapo-dynlist to mark internal searches as such
* Fixed slapo-pcache crash in consistency_check (ITS#9966)
* Fixed slapo-remoteauth memory leaks (ITS#9438)
* Fixed slapo-rwm memory leaks (ITS#9817)
* Build Environment
* Fixed ancient DOS related ifdef checks (ITS#9925)
* Fixed build process to not use gmake specific features
* Fixed source tree to remove symlinks (ITS#9926)
* Fixed slapo-otp testdir creation (ITS#9437)
* Fixed slapd-tester memory leak (ITS#9908)
* Fixed usage of non-standard C syntax (ITS#9898, ITS#9899,
ITS#9901)
* Fixed usage of bashism (ITS#9900)
* Fixed test suite portability (ITS#9931)
* Documentation
* Fixed ldap_bind(3) to document ber_bvfree in ldap_sasl_bind
(ITS#9976)
* Fixed slapo-asyncmeta(5) to clarify scheduling for target
connections (ITS#9941)
* Fixed slapo-dynlist(5) to clarify configuration settings
(ITS#9957)
* Fixed slapo-unique(5) to clarify when quoting should be used
(ITS#9915)
* Minor cleanup
==== openldap2-contrib-src ====
Version update (2.6.3 -> 2.6.4)
- update to 2.6.4:
* Fixed client tools to remove 'h' and 'p' options
* Fixed ldapsearch memory leak with paged results (ITS#9860)
* Fixed libldap ldif_open_urlto check for failure (ITS#9904)
* Fixed libldap ldap_url_parsehosts check for failure
* Fixed liblunicode UTF8bvnormalize buffer size (ITS#9955)
* Fixed lloadd memory leaks (ITS#9907)
* Fixed lloadd shutdown code to protect memory correctly
* Fixed lloadd race in epoch.c (ITS#9947)
* Fixed lloadd potential deadlock with cn=monitor (ITS#9951)
* Fixed lloadd to keep listener base around when not active
* Fixed lloadd object reclamation sequencing (ITS#9983)
* Fixed slapd memory leak with olcAuthIDRewrite (ITS#6035)
* Fixed slapd free of redundant cmdline option (ITS#9912)
* Fixed slapd transactions extended operations cleanup after
* Fixed slapd deadlock with replicated cn=config
* Fixed slapd connection close logic (ITS#9991)
* Fixed slapd bconfig locking of cn=config entries (ITS#9045)
* Fixed slapd-mdb max number of index databases to 256
* Fixed slapd-mdb to always release entries from ADD operations
* Fixed slapd-mdb to fully init empty DN in tool_entry_get
* Fixed slapd-monitor memory leaks with lloadd (ITS#9906)
* Fixed slapd-monitor to free remembered cookies (ITS#9339)
* Fixed slapo-accesslog reqStart ordering matching rule
* Fixed slapo-deref memory leak (ITS#9924)
* Fixed slapo-dynlist to ignore irrelevant objectClasses
* Fixed slapo-dynlist to avoid unnecessary searches (ITS#9929)
* Fixed slapo-dynlist to mark internal searches as such
* Fixed slapo-pcache crash in consistency_check (ITS#9966)
* Fixed slapo-remoteauth memory leaks (ITS#9438)
* Fixed slapo-rwm memory leaks (ITS#9817)
* Build Environment
* Fixed ancient DOS related ifdef checks (ITS#9925)
* Fixed build process to not use gmake specific features
* Fixed source tree to remove symlinks (ITS#9926)
* Fixed slapo-otp testdir creation (ITS#9437)
* Fixed slapd-tester memory leak (ITS#9908)
* Fixed usage of non-standard C syntax (ITS#9898, ITS#9899,
ITS#9901)
* Fixed usage of bashism (ITS#9900)
* Fixed test suite portability (ITS#9931)
* Documentation
* Fixed ldap_bind(3) to document ber_bvfree in ldap_sasl_bind
(ITS#9976)
* Fixed slapo-asyncmeta(5) to clarify scheduling for target
connections (ITS#9941)
* Fixed slapo-dynlist(5) to clarify configuration settings
(ITS#9957)
* Fixed slapo-unique(5) to clarify when quoting should be used
(ITS#9915)
* Minor cleanup
==== openssh ====
Subpackages: openssh-clients openssh-common openssh-server
- Rename sshd.pamd to sshd-sle.pamd and fix order of pam_keyinit
- Add new sshd.pamd including postlogin-* config files
==== oxygen5-sounds ====
Version update (5.27.3 -> 5.27.4)
- Update to 5.27.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.27.4
- No code changes since 5.27.3
==== pam-config ====
Version update (2.2 -> 2.4)
- Update to version 2.4
- Read postlogin files, too
- Update to version 2.3
- Add silent_if option for pam_lastlog2
==== pam_kwallet ====
Version update (5.27.3 -> 5.27.4)
Subpackages: pam_kwallet-common
- Update to 5.27.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.27.4
- Changes since 5.27.3:
* Exit early if the target user is root
* Don't do anything if the password is empty
* Verify that XDG_RUNTIME_DIR is usable
- Drop patches, now upstream:
* 0001-Verify-that-XDG_RUNTIME_DIR-is-usable.patch
* 0002-Don-t-do-anything-if-the-password-is-empty.patch
* 0003-Exit-early-if-the-target-user-is-root.patch
==== patterns-base ====
Subpackages: patterns-base-base patterns-base-bootloader patterns-base-documentation patterns-base-enhanced_base patterns-base-minimal_base patterns-base-sw_management patterns-base-x11 patterns-base-x11_enhanced
- base: Add lastlog2 as Y2038 safe lastlog replacement
==== patterns-gnome ====
Subpackages: patterns-gnome-gnome_basic patterns-gnome-gnome_basis patterns-gnome-gnome_basis_opt patterns-gnome-sw_management_gnome
- Replace gedit with gnome-text-editor as default editor. Following
this, drop all gedit-plugins Suggests.
- Downgrade glade Recommends to Suggests in gnome_ide pattern.
==== patterns-kde ====
Version update (20221001 -> 20230403)
Subpackages: patterns-kde-kde_plasma patterns-kde-kde_yast
- Add the qt6-grpc and qt6-location devel packages to the Qt6
pattern.
==== patterns-microos ====
Subpackages: patterns-microos-alt_onlyDVD patterns-microos-apparmor patterns-microos-base patterns-microos-base-microdnf patterns-microos-base-packagekit patterns-microos-base-zypper patterns-microos-basesystem patterns-microos-cloud patterns-microos-cockpit patterns-microos-defaults patterns-microos-desktop-common patterns-microos-desktop-gnome patterns-microos-desktop-kde patterns-microos-hardware patterns-microos-ima_evm patterns-microos-onlyDVD patterns-microos-ra_agent patterns-microos-ra_verifier patterns-microos-selinux patterns-microos-sssd_ldap
- Add discover-backend-fwupd for automated firmware updates on
plasma
- Use lastlog2 as Y2038 safe lastlog replacement
- Add Requires kio-fuse and kdenetwork-filesharing to kde pattern
(boo#1210125)
- Add systemd-coredump to defaults (boo#1091684)
- remove systemd-logger requirement from defaults. It got merged into the main
package meanwhile.
==== pipewire ====
Version update (0.3.67 -> 0.3.69)
Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-libjack-0_3 pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools
- Add patch from upstream for https://bugs.archlinux.org/task/78195
* 0001-Revert-alsa-mixer-allow-to-re-attach-the-mixer-control.patch
- Add patch from upstream to fix some potentially broken devices:
* 0002-alsa-fix-area-pointers.patch
- Only apply reduce-meson-dependency.patch when meson present
during build is too old.
- Add patch to build pipewire in Leap 15.4:
* reduce-meson-dependency.patch
- Update to version 0.3.69:
* Highlights:
- Reverted the UCM changes, they seem to cause regressions
causing audio to be muted in some cases.
- Fix a regression in the scheduler where a driver node might
not be marked as runnable in some cases, like when
echo-cancel is used.
- Handle links from the driver to itself. This makes the midi
bridge work again.
- ALSA rate matching for sources was fixed. It would previously
wait too long for rate matching and then cause drift. This
should reduce crackling and stuttering whan capturing in
low latency.
- Fix the GStreamer clock to make cheese video recording work
again.
- More fixes and improvements.
* PipeWire:
- Fix a regression in the scheduler where a driver node might
not be marked as runnable in some cases, like when
echo-cancel is used.
- Handle links from the driver to itself. This makes the midi
bridge work again.
- Some man pages were improved.
- Fix a potential crash when thread-loop is destroyed before
the loop.
* Modules:
- A new raw biquad filter was added to filter-chain. You can
manually set the 6 parameters and you can use this to create
custom filters per sample rate.
- The echo-canceller now supports different channels for the
capture and playback streams.
* SPA:
- A SB Audigy specific profile set was added to make better use
of the controls.
- More ALSA IRQ based scheduling improvements.
- ALSA rate matching for sources was fixed. It would previously
wait too long for rate matching and then cause drift. This
should reduce crackling and stuttering whan capturing in
low latency.
- The echo-cancel plugin API has a new method to make it
possible to have different channels for capture, source and
playback.
- Reverted the UCM changes, they seem to cause regressions
causing audio to be muted in some cases.
* Bluetooth:
- Many more BAP fixes and improvements. Devices are now
created as a set and can be combined into one device by the
session manager.
* GStreamer:
- Fix the GStreamer clock to make cheese video recording work
again.
- Enable gstreamer-device-provider (rh#2183691).
- Update to version 0.3.68:
* Highlights:
- Symbolic links to the pipewire binary are now used instead of
recompiling the same binary multiple times.
- Changes to the graph scheduler related to quantum/rate
updates and calculation of the node states. Things should
start and switch between quantums and rates more smoothly now
and especially virtual devices should now only run when
required.
- A new RTP session module was added. This uses the Apple MIDI
protocol to configure low-latency bidirectional MIDI (and
with a PipeWire specific extension, also audio) between
machines. OPUS encoding was added to the RTP formats.
The SAP module was separated from the rtp-sink/source module
to make it more usable.
- A new runtime debug property was added to all streams and
nodes to trigger a save of the raw samples to a wav file.
Support for this has also been added to the echo-canceler to
debug potential issues.
- Module pulse-tunnel has improved rate matching and
synchronisation support. It should also not drift anymore for
capture devices.
- The link-factory now ignores by default the link.passive
property. This means that tools like pw-link or jack clients
and wireplumber can't make passive links anymore. The reason
is that there is now much more advanced logic in PipeWire
itself to handle passive links based on node and port
properties.
- The RAOP sink was ported to new OpenSSL functions. Digest
passwords are handled correctly now and support for more
devices was added.
- The ACP code was updated with new PulseAudio UCM code:
"Create multiple profiles per verb for conflicting devices".
This might change the names of devices, profiles and ports so
scripts might need to be updated.
- Upmixing is disabled again by default. We now ship config
files that distros can install to enable upmixing again. The
reason being that PipeWire should not apply fancy DSP
processing to audio by default.
... changelog too long, skipping 101 lines ...
- Sort the device by priority in deviceprovider.
==== plasma-browser-integration ====
Version update (5.27.3 -> 5.27.4)
- Update to 5.27.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.27.4
- No code changes since 5.27.3
==== plasma-framework ====
Version update (5.104.0 -> 5.105.0)
Subpackages: libKF5Plasma5 plasma-framework-components
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- Changes since 5.104.0:
* DataEngines: Add forward compatibility as a porting aid
* containmentinterface: get applet position when menu key is pressed
==== plasma-nm5 ====
Version update (5.27.3 -> 5.27.4)
Subpackages: plasma-nm5-openconnect plasma-nm5-openvpn
- Update to 5.27.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.27.4
- No code changes since 5.27.3
==== plasma5-addons ====
Version update (5.27.3 -> 5.27.4)
Subpackages: plasma5-addons-lang
- Update to 5.27.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.27.4
- Changes since 5.27.3:
* wallpapers/potd: replace `anchor.{left,right}` with `Layout.fillWidth`
* ProfilesModel: Add placeholder for option "Start Kate (no arguments)" (kde#464724)
==== plasma5-desktop ====
Version update (5.27.3 -> 5.27.4)
Subpackages: plasma5-desktop-emojier
- Update to 5.27.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.27.4
- Changes since 5.27.3:
* applets/taskmanager: don't refresh virtual desktop info when menu item is not enabled
* applets/taskmanager: skip updating tooltip when it's disabled (kde#467709)
* Divide minimum panel size by two when not floating (kde#466098)
* applets/taskmanager: press menu key to open task menu
* applets/kicker: Hide separators when sorted alphabetically (kde#465865)
* Activate Emoji Selector using emoji key
==== plasma5-disks ====
Version update (5.27.3 -> 5.27.4)
- Update to 5.27.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.27.4
- No code changes since 5.27.3
==== plasma5-integration ====
Version update (5.27.3 -> 5.27.4)
Subpackages: plasma5-integration-plugin plasma5-integration-plugin-lang
- Update to 5.27.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.27.4
- No code changes since 5.27.3
==== plasma5-openSUSE ====
Subpackages: plasma5-defaults-openSUSE plasma5-theme-openSUSE plasma5-workspace-branding-openSUSE sddm-theme-openSUSE
- Update to 5.27.4
==== plasma5-pa ====
Version update (5.27.3 -> 5.27.4)
Subpackages: plasma5-pa-lang
- Update to 5.27.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.27.4
- Changes since 5.27.3:
* kcm: stop setting sourceSize in avatar
* kcm/DeviceListItem: Set width for comboboxes, with correctly sized popup
* applet: add missing function for "Show virtual devices" menu item (kde#465996)
==== plasma5-systemmonitor ====
Version update (5.27.3 -> 5.27.4)
- Update to 5.27.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.27.4
- No code changes since 5.27.3
==== plasma5-thunderbolt ====
Version update (5.27.3 -> 5.27.4)
- Update to 5.27.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.27.4
- No code changes since 5.27.3
==== plasma5-workspace ====
Version update (5.27.3 -> 5.27.4.1)
Subpackages: gmenudbusmenuproxy plasma5-session plasma5-session-wayland plasma5-workspace-libs xembedsniproxy
- Recommend filelight (boo#1210331)
- Update to 5.27.4.1
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.27.4
- Changes since 5.27.3:
* applets/systemtray: press and hold to open context menu for plasmoids
* applets/digital-clock: reload timezone after saving in Datetime KCM (kde#467494)
* components/keyboardlayout: Fix forced activation of vkbd
* Create directory before installing session-local
* applets/systemtray: fix menu key not working in SNI
* Find PkgConfig before first call to pkg_check_modules
* sddm-theme: Populate keyboard layouts menu only on first show
* [dashboard] Skip task switcher
* klipper: test bug 465225
* systemtraytest: take screenshot only when test fails
* kcms/nightcolor: fix timing strings with narrow window widths
* libtaskmanager: simplify `test_openCloseWindow`
==== podman ====
Version update (4.4.4 -> 4.5.0)
Subpackages: podman-cni-config
- Update to version 4.5.0:
* Release v4.5.0
* [CI:DOCS] Final release notes for v4.5.0
* Quadlet - do not set log-driver by default
* Return title fields as a list
* Bump to v4.5.0-dev
* Bump to v4.5.0-RC2
* Final release notes for v4.5.0-RC2
* test/e2e: remove unnecessary SkipIfNetavark() calls
* test/e2e: deduplicated network test
* docs: update podman-network-create.1
* network create: add --interface-name
* test/system/252-quadlet.bats: fix flake
* Read kube_generate_type from containers.conf
* Debian setup: workaround for runc /dev/char/10:200 bug
* pkg/rootless: use catatonit from /usr/libexec/podman
* rootless: make sure we only use a single pause process
* Use atomic config writing strategy for podman machine config files
* Add remaining release notes for v4.5.0-RC2
* GHA: Use version instead of SHA for actions
* chore(deps): update dependency containers/automation_images to v20230405
* build: pass env by reference
* test: retrofit error message
* test/system: expect 12 char for short id
* vendor: bump containers/(storage, common, buildah, image)
* [skip-ci] Update actions/upload-artifact action to v3
* [skip-ci] Update actions/stale action to v8
* [skip-ci] Update actions/setup-go action to v4
* [skip-ci] Update github/issue-labeler action to v2.6
* Fix up codespell errors
* Capitalize all uid,gid and id words that are not options in docs
* build(deps): bump golang.org/x/tools from 0.7.0 to 0.8.0 in /test/tools
* Properly remove the service container during kube down
* quadlet: add `UserNS` option key
* [CI:DOCS] Release notes for 4.5.0 Part 1
* "podman pull by digest and list --all" test: untag instead of rmi
* build(deps): bump golang.org/x/text from 0.8.0 to 0.9.0
* Add renovate.json configuration
* CI: postbuild step: skip under nightly treadmill
* The `--ulimit` option accepts the name with an `RLIMIT_` prefix both upper and lower case
* test/e2e: use custom network config dir where needed
* chore: replace `github.com/ghodss/yaml` with `sigs.k8s.io/yaml`
* update completion scripts for cobra v1.7.0
* libpod.storageService.CreateContainerStorage(): retrieve ID maps
* Fix invalid pod name and hostname during kube generate
* e2e tests: fix racy flakes
* Cirrus: Enable labeling of EC2 VMs
* Cirrus: Fix aarch64 clone_script 404 errors
* e2e: GinkgoParallelNode() -> ...Process()
* build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
* build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0
* [CI:DOCS] --creds and registries
* Copr: fix build deps for /usr/bin/envsubst
* Don't error when removing non-existant env vars
* e2e: healthcheck on stopped container: fix flake
* test/apiv2/80-kube.at
* test/apiv2/80-kube.at
* system service: do not close Body
* rm `hack/release.sh`
* build(deps): bump github.com/onsi/gomega from 1.27.5 to 1.27.6
* add `quadlet -version` flag
* add version/rawversion package
* quadlet: use `Flag` suffix for variables
* quadlet: implement `Tmpfs` option
* Bump to v4.5.0-dev
* Bump to 4.5.0-rc1
* Update release notes from 4.4 branch
* rootless netns: recover from invalid netns
* System tests: unverbosify a flake log
* Add support for secret exists
* Fix Win install task failures with large PR bodies
* docs: add `starting` to `HealthCheckResults.Status`
* Add support for cgroup_config from containers.conf
* libpod: mount safely subpaths
* Support Deployment generation with kube generate
* Use secret.items to create volume mounts if present
* [CI:DOCS] fix typo in --systemd option
* rootless: drop preexec hook error message
* Edit the docker wrapper to use the install prefix
* Update podman-for-windows.md
* Quadlet: RemapUsers documentation fixes
* speed up image listing
* vendor containers/common@e27c30ee9b1b
* fix volume-plugin-test flake
* Document building Podman remote on Windows hosts
* test/e2e: gpg keep stdout/err attached
* auto-update: stop+start instead of restart sytemd units
* [CI:DOCS] Improve basic tutorial
* Update docs/source/markdown/podman-network.1.md
* Add debug to --wait test
* fix slirp4netns resolv.conf ip with a userns
* Quadlet: add support for keep-id with mapping values
* Quadlet E2E test - run quadlet as user generator
* sqlite: do not `Ping()` after connecting
* Quadlet - treat paths starting with systemd specifiers as absolute
* Update docs/source/markdown/podman-kube-play.1.md.in
* system tests: use CONTAINERS_CONF_OVERRIDE
* implement podman machine set for hyperv
* [CI:DOCS] Add network subnets info to network man page
... changelog too long, skipping 332 lines ...
- Don't build against EoL go versions, fixes bsc#1210299
==== polkit-kde-agent-5 ====
Version update (5.27.3 -> 5.27.4)
- Update to 5.27.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.27.4
- No code changes since 5.27.3
==== poppler ====
Version update (23.03.0 -> 23.04.0)
Subpackages: libpoppler-cpp0 libpoppler-glib8 poppler-tools
- update to 23.04.0:
* Fix memory issue when signing fails. Issue #1372
* Internal improvements of signature related code
* CairoOutputDev: improve type3 font rendering
* Fix memory leak in
GlobalParams::findSystemFontFileForFamilyAndStyle
* pdftocairo: Fix crash in some special situations
* pdfsig: allow holes in -dump signature list
* pdfsig: Support --help
==== poppler-qt5 ====
Version update (23.03.0 -> 23.04.0)
- update to 23.04.0:
* Fix memory issue when signing fails. Issue #1372
* Internal improvements of signature related code
* CairoOutputDev: improve type3 font rendering
* Fix memory leak in
GlobalParams::findSystemFontFileForFamilyAndStyle
* pdftocairo: Fix crash in some special situations
* pdfsig: allow holes in -dump signature list
* pdfsig: Support --help
==== powerdevil5 ====
Version update (5.27.3 -> 5.27.4)
Subpackages: powerdevil5-lang
- Cleanup build dependencies:
* Remove unused KDELibs4Support and KF5Wayland
* Explicitly add KF5Crash, KF5DocTools and KF5Notifications
* Update required versions.
- Update to 5.27.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.27.4
- No code changes since 5.27.3
==== prison-qt5 ====
Version update (5.104.0 -> 5.105.0)
Subpackages: libKF5Prison5 prison-qt5-imports
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== publicsuffix ====
Version update (20230226 -> 20230414)
- Update to version 20230414:
* util: gTLD data autopull updates for 2023-04-14T15:13:16 UTC (#1738)
* Change - update comments/policy for the French ccTLDs (`.fr`, `.pm`, `.re`, `.tf`, `.wf`, `.yt`) by Administrator (#1732)
* New policy for .museum, without all the SLD (Second-Level Domains) (#1729)
* Add ladesk.com (#1538)
* util: gTLD data autopull updates for 2023-03-18T15:13:12 UTC (#1723)
* util: gTLD data autopull updates for 2023-03-08T15:15:40 UTC (#1714)
* Additional ngrok domains - more `ngrok.io` from #48 + `ngrok.app` `ngrok-free.app` `ngrok.dev` `ngrok-free.dev` `ngrok.pizza` (#1653)
* Add `ie.ua` (#1597)
==== purpose ====
Version update (5.104.0 -> 5.105.0)
Subpackages: libKF5Purpose5 libKF5PurposeWidgets5
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== python-cryptography ====
Version update (40.0.1 -> 40.0.2)
- update to 40.0.2:
* Fixed compilation when using LibreSSL 3.7.2.
- rebase patch remove_python_3_6_deprecation_warning.patch
==== python-pexpect ====
- Skip REPLWrapTestCase.test_existing_spawn which seems to still
fail on s390x (gh#pexpect/pexpect#750, bsc#1209560).
==== python-pytz ====
Version update (2023.2 -> 2023.3)
- update to 2023.3:
* Update to IANA 2023c
==== python-redis ====
Version update (4.3.3 -> 4.5.4)
- Update to 4.5.4:
* Security
+ Cancelling an async future does not, properly trigger, leading to a
potential data leak in specific cases. (CVE-2023-28858, bsc#1209811)
+ Cancelling an async future does not, properly trigger, leading to a
potential data leak in specific cases. (CVE-2023-28859, bsc#1209812)
* New Features
+ Introduce AbstractConnection so that UnixDomainSocketConnection can
call super().init (#2588)
+ Added queue_class to REDIS_ALLOWED_KEYS (#2577)
+ Made search document subscriptable (#2615)
+ Sped up the protocol parsing (#2596)
+ Use hiredis::pack_command to serialized the commands. (#2570)
+ Add support for unlink in cluster pipeline (#2562)
* Bug Fixes
+ Fixing cancelled async futures (#2666)
+ Fix: do not use asyncio's timeout lib before 3.11.2 (#2659)
+ Fix UDS in v4.5.2: UnixDomainSocketConnection missing constructor
argument (#2630)
+ CWE-404 AsyncIO Race Condition Fix (#2624, #2579)
+ Fix behaviour of async PythonParser to match RedisParser as for
issue #2349 (#2582)
+ Replace async_timeout by asyncio.timeout (#2602)
+ Update json().arrindex() default values (#2611)
+ Fix #2581 UnixDomainSocketConnection object has no attribute
_command_packer (#2583)
+ Fix issue with pack_commands returning an empty byte sequence (#2416)
+ Async HiredisParser should finish parsing after a
Connection.disconnect() (#2557)
+ Check for none, prior to raising exception (#2569)
+ Tuple function cannot be passed more than one argument (#2573)
+ Synchronise concurrent command calls to single-client to single-client
mode (#2568)
+ Async: added 'blocking' argument to call lock method (#2454)
+ Added a replacement for the default cluster node in the event of
failure. (#2463)
+ Fixed geosearch: Wrong number of arguments for geosearch command (#2464)
- Clean up BuildRequires and Requires.
- Disable broken test test_xautoclaim gh#redis/redis-py#2554
- udpate to 4.3.5:
* Add support for TIMESERIES 1.8 (#2296)
* Graph - add counters for removed labels and properties (#2292)
* Add support for TDIGEST.QUANTILE extensions (#2317)
* Add TDIGEST.TRIMMED_MEAN (#2300)
* Add support for async GRAPH module (#2273)
* Support TDIGEST.MERGESTORE and make compression optional on TDIGEST.CREATE
(#2319)
* Adding reserve as an alias for create, so that we have BF.RESERVE and
CF.RESERVE accuratenly supported (#2331)
* Fix async connection.is_connected to return a boolean value (#2278)
* Fix: workaround asyncio bug on connection reset by peer (#2259)
* Fix crash: key expire while search (#2270)
* Async cluster: fix concurrent pipeline (#2280)
* Fix async SEARCH pipeline (#2316)
* Fix KeyError in async cluster - initialize before execute multi key
commands (#2439)
* Supply chain risk reduction: remove dependency on library named deprecated
(#2386)
* Search test - Ignore order of the items in the response (#2322)
* Fix GRAPH.LIST & TDIGEST.QUANTILE tests (#2335)
* Fix TimeSeries range aggregation (twa) tests (#2358)
* Mark TOPK.COUNT as deprecated (#2363)
- update to 4.3.4:
* Fix backward compatibility from 4.3.2 in Lock.acquire()
* Fix XAUTOCLAIM to return the full response, instead of only keys 2+
* Added dynamic_startup_nodes configuration to RedisCluster.
* Fix retries in async mode
* Async cluster: fix simultaneous initialize
* Uppercased commands in CommandsParser.get_keys
* Late eval of the skip condition in async tests
* Reuse the old nodes' connections when a cluster topology refresh is being done
* Docs: add pipeline examples
* Correct retention_msecs value
* Cluster: use pipeline to execute split commands
* Docs: Add a note about client_setname and client_name difference
==== python-setuptools ====
Version update (67.6.0 -> 67.6.1)
- update to 67.6.1:
* #3865: Fixed ``_WouldIgnoreField`` warnings for ``scripts``
and ``gui_scripts``, when ``entry-points`` is not listed in dynamic.
* #3875: Update code generated by ``validate-pyproject`` to use
v0.12.2.
* This should fix default license patterns when
``pyproject.toml`` is used.
==== qqc2-desktop-style ====
Version update (5.104.0 -> 5.105.0)
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- Changes since 5.104.0:
* CheckIndicator: Allow exclusive buttons to be detected via their ButtonGroup (kde#467390)
==== raspberrypi-firmware ====
Version update (2023.02.22 -> 2023.03.22)
- Update to c4122b870 (2023-03-22):
* firmware: gencmd: Add a fallback to mailbox interface if vchiq is not available
* firmware: Handle 64-bitness of named kernels
See: #1792
* firmware: bootloader: Fix automatic 64bit selection on Pi3s
See: https://forums.raspberrypi.com/viewtopic.php?p=2089764#p2089764
* firmware: bootloader: Raise CMA cap to 512MB on a 64-bit Pi4
* firmware: bootloader: Prefer 64-bit kernels on Pi 4s
See: https://forums.raspberrypi.com/viewtopic.php?p=2088935#p2088935
* firmware: platform: clocks: Replace m2mc with hdmi for state machine clock on 2711
==== raspberrypi-firmware-config ====
Version update (2023.02.22 -> 2023.03.22)
- Update to c4122b870 (2023-03-22):
* firmware: gencmd: Add a fallback to mailbox interface if vchiq is not available
* firmware: Handle 64-bitness of named kernels
See: #1792
* firmware: bootloader: Fix automatic 64bit selection on Pi3s
See: https://forums.raspberrypi.com/viewtopic.php?p=2089764#p2089764
* firmware: bootloader: Raise CMA cap to 512MB on a 64-bit Pi4
* firmware: bootloader: Prefer 64-bit kernels on Pi 4s
See: https://forums.raspberrypi.com/viewtopic.php?p=2088935#p2088935
* firmware: platform: clocks: Replace m2mc with hdmi for state machine clock on 2711
==== rav1e ====
Version update (0.6.2+0 -> 0.6.4+0)
- Update to version 0.6.4+0:
* Safety critical bounds checking is off-by-one in sgrproj_box_ab_internal
* Initialize `low` array in a more rust-like way in `kmeans`
* Rework mutable borrows for symbol_with_update
* Drop explicit size for macro symbol_with_update
* Use const generics for CDFContextLog
* Fix undefined behavior in CDFContextLogOps
* ec: Simplify lr_compute function
* Use a bit counter instead of a byte counter in WriterRecorder
* Minimize bounds checks in pred functions
* Use generics for BD-8 on sgrproj functions
* Use saturating_sub in sgrproj_sum_finish
* Move bounds checks out of hot loop in sgrproj
* Ensure quantizer values are non-zero with a const fn
* Optimize base quants using NonZero integers (#3115)
* Move quant tables to separate file to improve organization (#3113)
* Use is_power_of_two method in divu_gen
* Fix rounding issue in HBD CDEF code
* Hint that creating a region from an empty plane is unlikely
* Minor optimization to take_slice
* Clean up cdef_dist
* Minor optimizations
* Optimizations for weighted_sse
* Add HBD AVX2 assembly for SAD (#3099)
* ec: Manually inline `msb()` and `ilog()` for clarity (#3104)
* Comment regarding cnt being unused
* Improve naming
* Use a bit counter instead of a byte counter in EC
* Add 10-bit cdef_dist ASM
* Optimise sad_plane_internal
* Save some bounds checks on me_stats
* Minor optimization to av1_get_mv_joint
* Use chunks_exact for performance in diff method
* Integrate CfL AC x86 assembly functions
* benches: Fix alignment issue for cfl_rdo
* Move luma_ac to predict module
* Extract luma_ac_internal with const generics
* Optimise plane::as_region
* Optimise BlockSize::from_width_and_height_opt
* Improve vectorization in get_sad
* Template entropy coding functions to help optimiser
* Enable SSE2/AVX512ICL put/prep/avg x86 assembly
* Enable AVX2 12-bit Inverse Transform x86 assembly
* Enable new SSE4.1 HBD Inverse Transform x86 assembly
* Pin assert_cmd, predicates and clap in Cargo.toml for rust 1.60.0
* Prepare for release
* Fix header coding for level_idx < 7.
==== redis ====
Version update (7.0.8 -> 7.0.11)
- redis 7.0.11
- (CVE-2023-28856) Authenticated users can use the HINCRBYFLOAT
command to create an invalid hash field that will crash Redis
on access (boo#1210548)
- Add a missing fsync of AOF file in rare cases
- Disconnect pub-sub subscribers when revoking allchannels
permission
- Fix a compiler fortification induced crash when used with link
time optimizations
- Drop get-old-size-calculations.patch:
replaced with proper fix
- Added get-old-size-calculations.patch:
my workaround for https://github.com/redis/redis/issues/11965
- redis 7.0.10
* CVE-2023-28425: Specially crafted MSETNX command can lead to
assertion and denial-of-service (boo#1209528)
* Large blocks of replica client output buffer may lead to psync
loops and unnecessary memory usage
* Fix CLIENT REPLY OFF|SKIP to not silence push notifications
* Trim excessive memory usage in stream nodes when exceeding
`stream-node-max-bytes`
* Fix module RM_Call commands failing with OOM when maxmemory is
changed to zero
- redis 7.0.9
* CVE-2023-25155: Specially crafted SRANDMEMBER, ZRANDMEMBER, and
HRANDFIELD commands can trigger an integer overflow, resulting
in a runtime assertion and termination of the Redis server
process. Previously patched, drop
Integer-Overflow-in-RAND-commands-can-lead-to-assert.patch
* CVE-2022-36021: String matching commands (like SCAN or KEYS)
with a specially crafted pattern to trigger a denial-of-service
attack on Redis, causing it to hang and consume 100% CPU time.
Previously upatched, drop
String-pattern-matching-had-exponential-time-complex.patch
* Fix a crash when reaching the maximum invalidations limit of
client-side tracking
* Fix a crash when SPUBLISH is used after passing the
cluster-link-sendbuf-limit
* Fix possible memory corruption in FLUSHALL when a client
watches more than one key
* Fix cluster inbound link keepalive time
* Flush propagation list in active-expire of writable replicas to
fix an assertion
* Avoid propagating DEL of lazy expire from SCAN and RANDOMKEY as
MULTI-EXEC
* Avoid realloc to reduce size of strings when it is unneeded
* Improve CLUSTER SLOTS reply efficiency for non-continuous slots
==== rsync ====
- Switch rsyncd symlink to a wrapper script to allow setting a distinct
SELinux type (bsc#1209654)
==== rubygem-ruby-dbus ====
Version update (0.20.0 -> 0.21.0)
- 0.21.0
Features:
* Respect env RUBY_DBUS_ENDIANNESS=B (or =l) for outgoing messages.
Bug fixes:
* Reduce socket buffer allocations (gh#mvidner/ruby-dbus#129).
* Message#marshall speedup: don't marshall the body twice.
==== runc ====
Version update (1.1.5 -> 1.1.6)
- Update to runc v1.1.6. Upstream changelog is available from
<https://github.com/opencontainers/runc/releases/tag/v1.1.6>.
==== rust-keylime ====
Version update (0.2.0+git.1677691779.f7edd9a -> 0.2.0+git.1681457715.54484b7)
Subpackages: keylime-ima-policy
- Update to version 0.2.0+git.1681457715.54484b7:
* build(deps): bump h2 from 0.3.14 to 0.3.17 (CVE-2023-26964,
bsc#1210344)
* build(deps): bump reqwest from 0.11.15 to 0.11.16
- Update to version 0.2.0+git.1681223954.646cf61:
* Allow setting measured boot log path for testing
* build(deps): bump base64 from 0.13.1 to 0.21.0
* build(deps): bump wiremock from 0.5.14 to 0.5.18
* Build Fedora and CentOS packages on Copr using packit
* build(deps): bump serde_json from 1.0.91 to 1.0.95
* build(deps): bump actix-rt from 2.7.0 to 2.8.0
* build(deps): bump base64 from 0.13.1 to 0.21.0
* build(deps): bump serde from 1.0.147 to 1.0.159
* build(deps): bump glob from 0.3.0 to 0.3.1
* Add missing test from keylime testsuite to e2e plan
* Fix typo in name of test for generating coverage
* build(deps): bump thiserror from 1.0.38 to 1.0.40
* build(deps): bump base64 from 0.13.1 to 0.21.0
* build(deps): bump actix-web from 4.2.1 to 4.3.1
* build(deps): bump serde from 1.0.145 to 1.0.147
* build(deps): bump libc from 0.2.139 to 0.2.140
* build(deps): bump futures from 0.3.25 to 0.3.27
* build(deps): bump reqwest from 0.11.12 to 0.11.15
* build(deps): bump config from 0.13.2 to 0.13.3
* build(deps): bump openssl from 0.10.45 to 0.10.48
* build(deps): bump tokio from 1.24.2 to 1.26.0
* Cargo: Update tempfile to 3.4.0 version
==== sddm ====
Subpackages: sddm-branding-openSUSE
- Replace proper_pam.diff with installation of source files:
* sddm.pam, sddm-autologin.pam, sddm-greeter.pam
- PAM services:
* Make use of substack for common-*
* Include postlogin-*
* Run pam_keyinit before common-session
* Deny password in sddm-greeter
- /run/sddm is owned by root:root
- Add patch to fix possible deadlock:
* 0001-Process-all-available-auth-messages-in-a-loop.patch
- Add missing dependencies on update-alternatives
- Migration of PAM settings to /usr/lib/pam.d.
==== shadow ====
Subpackages: libsubid4 login_defs
- Rename lastlog to lastlog.legacy to be able to switch to
Y2038 safe lastlog2 as default [jsc#PED-3144]
==== shim ====
- Removed POST_PROCESS_PE_FLAGS=-N from the build command in shim.spec to
enable the NX compatibility flag when using post-process-pe after
discussed with grub2 experts in mail. It's useful for further development
and testing. (bsc#1205588)
- Updated shim signature after shim 15.7 of SLE be signed back:
signature-sles.x86_64.asc, signature-sles.aarch64.asc (bsc#1198458)
==== snapper ====
Subpackages: snapper-zypp-plugin
- allow to show read-only state in list output and allow to
change read-only state (gh#openSUSE/snapper#804)
- support read-only options for LVM
- allow to set a snapshot as default (gh#openSUSE/snapper#803)
- avoid stale btrfs qgroups on transactional systems (bsc#1210151)
- fixed error message (gh#openSUSE/snapper#801)
==== solid ====
Version update (5.104.0 -> 5.105.0)
Subpackages: libKF5Solid5 solid-imports solid-tools
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- Changes since 5.104.0:
* Remove some obsolete and incorrect code from UPower and UDisks2 backend
* Deprecate "Recall" API for batteries
* Avoid synchronous DBus calls for devices list
* Initialize supported interfaces with member initializer list
* Replace generic UPower QDBusInterface with concrete implementation
* Remove support for UPower < 0.99
* Remove invalid Refresh DBus call from UPower backend
==== sonnet ====
Version update (5.104.0 -> 5.105.0)
Subpackages: libKF5SonnetCore5 libKF5SonnetUi5 sonnet-imports
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== sudo ====
Subpackages: sudo-plugin-python
- sudo.pamd: Use common-session-nonlogin for >15 codestreams
More info in https://github.com/SUSE/pam-config/pull/16
==== syndication ====
Version update (5.104.0 -> 5.105.0)
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== syntax-highlighting ====
Version update (5.104.0 -> 5.105.0)
Subpackages: libKF5SyntaxHighlighting5 syntax-highlighting-imports
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- Changes since 5.104.0:
* Highlight the QML "required" keyword, added in Qt 5.15
==== systemd ====
Version update (253.1 -> 253.3)
Subpackages: libsystemd0 libudev1 systemd-coredump systemd-doc udev
- testsuite: TEST-75-RESOLVED needs knot DNS server
- Import commit 66f3a8a47d5bf6aea3f6fb181c01550a1a54406e (merge of v253.3)
This merge also includes the following fix, which is not part of the stable
release:
d2413cec02 test/test-functions: fix typo in install_suse_systemd()
For a complete list of changes, visit:
https://github.com/openSUSE/systemd/compare/03cfbe767327d01d5a71131d91bf06f…
- Import commit 03cfbe767327d01d5a71131d91bf06fdc0047ca1
03cfbe7673 test: use setpriv instead of su for user switch from root
857843834c test: wrap mkfs.*/mksquashfs/mkswap binaries when running w/ ASan
be7388f8c5 test: do not remove state directory on failure
1b2885bd16 test: fix regexp in testsuite-74.mount.sh
41142f8013 test: drop extraneous bracket in testsuite-74.mount.sh
- systemd.spec: add files.coredump
- Import commit b63f58661b08037d8cb04ed97b5e39d9bf415fdc (merge of v253.2)
For a complete list of changes, visit:
https://github.com/openSUSE/systemd/compare/8b01686dd20124efc300d21ef38d85c…
- Move systemd-fsck stuff to udev sub-package.
- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
That way "systemd --user" instances get their own session keyring instead of
the user default session keyring. For some reasons cifscreds refuses to work
with the latter. That's what is expected for every PAM session anyway.
- Import commit 8b01686dd20124efc300d21ef38d85c1f75c372f
8b01686dd2 test: don't export $TOOLS_DIR
7a56b1b2f0 test: clean up $STATEDIR too
324bb19eb8 test: $STATEDIR should not point to /usr/lib/systemd/tests when NO_BUILD=1
2251735482 test: install symlinks with valid targets on SUSE and Debian
c30905a269 test: on openSUSE install the collection of unit test binaries in the target only for TEST-02-UNITTESTS
797ced15d8 meson: make sure the unit test scripts find testdata/ even if they are not installed in the same directory
04dc5b44b7 meson: define testdata_dir globally
69643c6c96 test: install unit tests in a dedicated subdirectory below '$testsdir'
==== systemsettings5 ====
Version update (5.27.3 -> 5.27.4)
- Update to 5.27.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.27.4
- Changes since 5.27.3:
* Cancel pending resolveChanges dialog when a new one is started (kde#465510)
* Include version number in bug report URL (kde#466881)
==== talloc ====
Subpackages: libtalloc2 python3-talloc
- Build AVX2 enabled hwcaps library for x86_64-v3
==== tcl ====
- Update tcl-refchan-mode-needed.patch to the upstream version.
==== texlive ====
- Really update biber to version 2.19 (boo#1210257)
- Use ERR trap in bash used by spec file to catch rare and random
bibtexu/bibtex8 FAILS
- Do not build nor test bibtex8/bibtexu in parallel
- Support mkiv as well as lmtx ConTeXt formats
- Enlarge main memory of xmltex to get a format
- Modify patch source-warns.dif
* Remove change for decNumber.h from icu library source
as it is incompatible with icu 72 ans above
- Add patch source-decNumber.dif
* make libmp and libcu using the same decNumber scheme to
get e.g. bibtex8 working on all architectures
- Add patch luametatex.dif
* Also use the same decNumber scheme here
- Add patch biblatex-ms-missing.dif
* Allow two biber binbaries with different perl includes
- Add patch biblatex-ms-encoding.dif
* Make it work
- Delete patch biber-missing-semicolon.patch now upstream
- Update to final TeXLive 2023
- Do not touch libs/icu/icu-src/source/i18n/decNumber.h in
source-warns.dif as otherwise libicu does not compile
- Update to pretest TeXLive 2023
==== texlive-specs-n ====
Version update (2022.196.2.005svn61719 -> 2023.201.2.005svn65956)
- Support mkiv as well as lmtx ConTeXt formats
- Correct supplements tags of texlive packages to use
the new texlive-alldocuments meta package
- Move cenccmn.tex fro mdoc to tex tree to let be find by
the ucs font definitions
- Move pgfPT.input.library.tex from doc to tex tree to make
it visible for the pgf-PeriodicTable.sty
- Enlarge main memory of xmltex to get a format
- Update to final TeXLive 2023
- Add fix for boo#1204746
* New meta package texlive-documentation which triggers installation
of documentation packages of already installed packages
- Ported changes
* kpathsea_cnf.dif
* latexmk_conf.dif
* latexpand_perl.dif
* luaotfload_varfonts.dif
* luatex_cnf.dif
* texlive-scripts_scripts.dif
- New change context_cnf.dif
* help ConteXt to find its system wide files
- Upstream dropped packages
* aleph.tar.xz
* ametsoc.doc.tar.xz
* ametsoc.tar.xz
* amscls-doc.tar.xz
* amslatex-primer.tar.xz
* amsldoc-it.tar.xz
* amsldoc-vn.tar.xz
* amsmath-it.tar.xz
* amsthdoc-it.tar.xz
* anufinalexam.tar.xz
* apprends-latex.tar.xz
* around-the-bend.tar.xz
* ascii-chart.tar.xz
* asymptote-by-example-zh-cn.tar.xz
* asymptote-faq-zh-cn.tar.xz
* asymptote-manual-zh-cn.tar.xz
* autosp.tar.xz
* beamer-FUBerlin.doc.tar.xz
* beamer-FUBerlin.tar.xz
* beamer-tut-pt.tar.xz
* biber.tar.xz
* biblatex-cheatsheet.tar.xz
* bibtexu.tar.xz
* booktabs-de.tar.xz
* booktabs-fr.tar.xz
* components-of-TeX.doc.tar.xz
* components-of-TeX.tar.xz
* comprehensive.tar.xz
* context-inifile.doc.tar.xz
* context-inifile.tar.xz
* context-notes-zh-cn.doc.tar.xz
* context-notes-zh-cn.tar.xz
* csquotes-de.tar.xz
* cstex.tar.xz
* ctan_chk.tar.xz
* ctex-faq.tar.xz
* ctie.tar.xz
* cursolatex.tar.xz
* detex.tar.xz
* dickimaw.tar.xz
* doc-pictex.tar.xz
* docsurvey.tar.xz
* dtl.tar.xz
* dtxgallery.tar.xz
* dtxtut.tar.xz
* dvi2tty.doc.tar.xz
* dvi2tty.tar.xz
* dvicopy.tar.xz
* dvidvi.tar.xz
* dviljk.tar.xz
* dviout-util.tar.xz
* dvipng.tar.xz
* dvipos.tar.xz
* dvisvgm.tar.xz
* ebong.doc.tar.xz
* ebong.tar.xz
* ecothesis.tar.xz
* ednotes.doc.tar.xz
* ednotes.tar.xz
* elegantbook.doc.tar.xz
* elegantbook.tar.xz
* elegantnote.doc.tar.xz
* elegantnote.tar.xz
* elegantpaper.doc.tar.xz
* elegantpaper.tar.xz
* epslatex-fr.tar.xz
* es-tex-faq.tar.xz
* etdipa.tar.xz
* etoolbox-de.tar.xz
* expkv-cs.doc.tar.xz
* expkv-cs.tar.xz
* expkv-def.doc.tar.xz
* expkv-def.tar.xz
* expkv-opt.doc.tar.xz
* expkv-opt.tar.xz
* expkv.doc.tar.xz
* expkv.tar.xz
... changelog too long, skipping 546 lines ...
- For dvips do not require but recommend metapost (boo#1206850)
==== threadweaver ====
Version update (5.104.0 -> 5.105.0)
- Update to 5.105.0
* New feature release
* For more details please see:
* https://kde.org/announcements/frameworks/5/5.105.0
- No code change since 5.104.0
==== tigervnc ====
Subpackages: libXvnc1 xorg-x11-Xvnc xorg-x11-Xvnc-module
- xorg-x11-Xvnc requires dbus-1-x11 (bsc#1207730)
- Fixes for bsc#1209283
* Drop chown vnc:vnc calls in with-vnc-key.sh
* Add TLSNone to -securitytypes to increase security in xvnc@.service
==== util-linux ====
Subpackages: libblkid1 libfdisk1 libmount1 libsmartcols1 libuuid1
- su.pamd: Fixup common-session-nonlogin usage
- runuser.pamd, su.pamd: Guard common-session-nonlogin away for <=15 codestreams
More info in https://github.com/SUSE/pam-config/pull/16
==== util-linux-systemd ====
- su.pamd: Fixup common-session-nonlogin usage
- runuser.pamd, su.pamd: Guard common-session-nonlogin away for <=15 codestreams
More info in https://github.com/SUSE/pam-config/pull/16
==== vim ====
Version update (9.0.1430 -> 9.0.1443)
Subpackages: vim-data vim-data-common vim-small xxd
- Updated to version 9.0.1443, fixes the following problems
* Livebook files are not recognized.
* getscriptinfo() loops even when specific SID is given.
* Completion popup in wrong position with virtual text "above".
* On some systems the Lua library is not found.
* Crash when adding package already in 'runtimepath'.
* Scrolling too many lines when 'wrap' and 'diff' are set.
* Cannot compare a typed variable with v:none.
* Test fails with different error number.
* .fs files are falsely recognized as forth files.
* Start Insert mode when accessing a hidden prompt buffer.
* "rvim" can execute a shell through :diffpatch.
* mapset() does not restore non-script context.
* Ending Insert mode when accessing a hidden prompt buffer.
==== vte ====
Version update (0.72.0 -> 0.72.1)
- Update to version 0.72.1:
+ emulation: Fix invalid mouse scroll event on window edge
+ widget:
- Fix compilation
- Fix setting clipboard with html data
- Fix introspection warnings
- Fix cursor blink timeout
+ Updated translations.
==== webkit2gtk3 ====
Subpackages: libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles
- Add fix-gst-crash.patch: Fix crash in
webkit_media_stream_src_class_init().
https://bugs.webkit.org/show_bug.cgi?id=254025
- Add reproducibility.patch: Make build more reproducible. Still
not there yet though. Inject fixed year in file.
==== webkit2gtk4 ====
Subpackages: libjavascriptcoregtk6_0-1 libwebkitgtk6_0-4 webkitgtk-6_0-injected-bundles
- Add fix-gst-crash.patch: Fix crash in
webkit_media_stream_src_class_init().
https://bugs.webkit.org/show_bug.cgi?id=254025
- Add reproducibility.patch: Make build more reproducible. Still
not there yet though. Inject fixed year in file.
==== wireplumber ====
Version update (0.4.13 -> 0.4.14)
Subpackages: libwireplumber-0_4-0 wireplumber-audio
- Update to version 0.4.14:
* Additions
- Add support for managing Bluetooth-MIDI, complementing the
parts that were merged in PipeWire recently.
- Add a default volume configuration option for streams whose
volume has never been saved before; that allows starting new
streams at a lower volume than 100% by default, if desired.
- Add support for managing link errors and propagating them to
the client(s) involved. This allows better error handling on
the application side in case a format cannot be negotiated -
useful in video streams.
- snd_aloop devices are now described as being "Loopback"
devices.
- ALSA nodes in the pro audio profile now get increased graph
priority, so that they are more likely to become the driver
in the graph.
- Add support for disabling libcamera nodes & devices with
node.disabled and device.disabled, like it works for ALSA
and V4L2.
- Drop reduce-meson-required-version.patch: openSUSE Leap 15.3 is
no longer supported.
- Drop patches already included upstream:
* 0001-alsa-monitor-handle-snd_aloop-devices-better.patch
* 0001-spa-json-make-sure-we-only-add-encoded-string-data.patch
* 0001-m-lua-scripting-ignore-string-integer-table-keys-when-constructing-a-JSON-Array-Object.patch
==== wsdd ====
Version update (0.7.0 -> 0.7.1)
- Fix previous change: really limit the forced change to python
3.10 on suse_version <= 1500 (up to SLE/Leap 15); newer products
already use python 3.10 (or newer) as default.
- Force the use of python 3.10 for openSUSE Leap
- Update to version 0.7.1
* GitHub workflow for static analyses added (syntax, format, and type checks are performed).
* Added EnvironmentFile and according example for systemd-based distros.
* Make wsdd work (again) on MacOS (#139). Thanks to Eugene Gershnik.
* Application profile for UFW has been added (#169)
* Use of implicitly present async I/O loop instead created one for API servers. Fixes regression due
to changed API in Python 3.10 (see #162)
* Source code is spiced with type hints now.
* man page moved to section 8.
==== xdg-desktop-portal-gtk ====
- Change Supplements: Replace gtk3 with gtk3-schema, ensure the
supplements gets triggered.
- Add (gtk4-schema and (flatpak or snapd)) Supplements:
Futureproof the supplements, as more and more of GNOME moves to
gtk4.
==== xdg-desktop-portal-kde ====
Version update (5.27.3 -> 5.27.4)
- Update to 5.27.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.27.4
- No code changes since 5.27.3
==== xdm ====
- Create two set of pam configuration files:
+ *.sle15 are for SLES15 and older
+ add postlogin-* includes to the others as required by new
openSUSE's PAM config policy
==== xf86-input-libinput ====
Version update (1.2.1 -> 1.3.0)
- Update to version 1.3.0
The main feature in this version is support for the new 'custom' pointer
acceleration profile in libinput 1.23.0. This acceleration profile is
quite flexible, so it is exposed via several properties:
- "libinput Accel Custom Fallback Points" and "libinput Accel Custom Fallback Step"
- "libinput Accel Custom Motion Points" and "libinput Accel Custom Motion Step"
- "libinput Accel Custom Scroll Points" and "libinput Accel Custom Scroll Points"
For details on what these mean, please see the man page and the
libinput documentation:
https://wayland.freedesktop.org/libinput/doc/latest/pointer-acceleration.ht…
In addition, the "libinput Accel Profiles Available" and
"libinput Accel Profile Enabled" properties have been expanded to 3 values. For
backwards compatibility, the "libinput Accel Profile Enabled" continues
to support setting 2 values only.
==== xz ====
Subpackages: liblzma5
- Update license tag, there is GPL-3.0-or-later code too.
==== yast2-installation ====
Version update (4.6.1 -> 4.6.2)
- yupdate - improved Live ISO detection, added "--force" option
(related to bsc#1206927)
- 4.6.2
==== yast2-packager ====
Version update (4.6.0 -> 4.6.1)
- Adapt test to changes in ruby-bindings when detecting Yast
modules using public only methods (related to bsc#1210051)
- Comment out expensive debug calls to improve performance
(bsc#1210051)
- 4.6.1
==== yast2-pkg-bindings ====
Version update (4.6.0 -> 4.6.1)
- Pkg.TargetInitializeOptions() - added a new option for
rebuilding the RPM database (--rebuilddb) (bsc#1209565)
- 4.6.1
==== yast2-ruby-bindings ====
Version update (4.6.1 -> 4.6.2)
- Improve YaST memory consumption related to import+publish (bsc#1210051)
- 4.6.2
==== yast2-snapper ====
Version update (4.6.0 -> 4.6.1)
- Fixed translations: Moved variable message part out of _(...)
(bsc#1209956)
- 4.6.1
==== yast2-storage-ng ====
Version update (4.6.3 -> 4.6.5)
- Adjusted detection of Dell BOSS devices (bsc#1200975).
- Partitioner: improved column Type for disks (bsc#1200975).
- 4.6.5
- AutoYaST: export thin LVM volumes when cloning (bsc#1209725)
- 4.6.4
==== yast2-update ====
Version update (4.6.0 -> 4.6.1)
- Rebuild the RPM database during upgrade (--rebuilddb) (bsc#1209565)
- 4.6.1
==== yast2-users ====
Version update (4.6.0 -> 4.6.1)
- Stop mangling the value of "Create as Btrfs Subvolume" for new
users when clicking on "Edit -> Details" (bsc#1209377).
- 4.6.1
- AutoYaST: Fix creation of home for system users (bsc#1202974).
==== zlib-ng-compat ====
Version update (2.0.6 -> 2.0.7)
- Update to 2.0.7:
* Fix CVE-2022-37434 #1328
* Fix chunkmemset #1196
* Fix deflateBound too small #1236
* Fix Z_SOLO #1263
* Fix ACLE variant of crc32 #1274
* Fix inflateBack #1311
* Fix deflate_quick windowsize #1431
* Fix DFLTCC bugs related to adler32 #1349 and #1390
* Fix warnings #1194 #1312 #1362
* MacOS build fix #1198
* Add invalid windowBits handling #1293
* Support for Force TZCNT #1186
* Support for aligned_alloc() #1360
* Minideflate improvements #1175 #1238
* Dont use unaligned access for memcpy #1309
* Build system #1209 #1233 #1267 #1273 #1278 #1292 #1316 #1318 #1365
* Test improvements #1208 #1227 #1241 #1353
* Cleanup #1266
* Documentation #1205 #1359
* Misc improvements #1294 #1297 #1306 #1344 #1348
* Backported zlib fixes
* Backported CI workflows from Develop branch
- Drop upstream patches:
* 1297.patch
* 0001-Add-one-extra-byte-to-return-value-of-compressBound-.patch
==== zvbi ====
- Set minimum version for gettext
==== zypper ====
Version update (1.14.59 -> 1.14.60)
Subpackages: zypper-log zypper-needs-restarting
- Fix selecting installed patterns from picklist (bsc#1209406)
- man: better explanation of --priority (fixes #480)
- version 1.14.60
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
MozillaFirefox (112.0 -> 112.0.1)
NetworkManager (1.42.4 -> 1.42.6)
bind (9.18.13 -> 9.18.14)
containerd (1.6.19 -> 1.6.20)
evolution-data-server (3.48.0 -> 3.48.1)
freetype2
gcc13 (13.0.1+git7162 -> 13.0.1+git7231)
glib2
gnome-control-center (44.0+20 -> 44.1)
gnome-software (44.0 -> 44.1)
gpgme (1.19.0 -> 1.20.0)
grub2
gssdp
kernel-source (6.2.10 -> 6.2.12)
libsoup (3.4.0 -> 3.4.1)
libstorage-ng (4.5.96 -> 4.5.97)
liburing
opus (1.3.1 -> 1.4)
python-Automat
python-Babel
python-Brotli
python-CommonMark
python-Jinja2
python-MarkupSafe
python-PyJWT
python-PySocks
python-PyYAML
python-SQLAlchemy
python-Twisted
python-async_timeout
python-attrs
python-blinker
python-certifi
python-cffi
python-click
python-configobj
python-constantly
python-decorator
python-dnspython
python-gevent
python-greenlet
python-h11
python-h2
python-hpack
python-httpcore
python-httpx
python-hyperframe
python-hyperlink
python-idna
python-incremental
python-iniconfig
python-jsonpatch
python-jsonpointer
python-jsonschema
python-lark
python-netifaces
python-oauthlib
python-pexpect
python-pip
python-psutil
python-ptyprocess
python-pyOpenSSL
python-pyasn1
python-pyasn1-modules
python-pycares
python-pycparser
python-pycurl
python-pylibmc
python-pyrsistent
python-pyserial
python-python-dateutil
python-pytz
python-pyudev
python-requests-toolbelt
python-responses
python-rfc3986
python-rich
python-service_identity
python-simplejson
python-sniffio
python-tornado6
python-typing_extensions
python-urllib3
python-zope.event
python-zope.interface
webkit2gtk3 (2.40.0 -> 2.40.1)
webkit2gtk4 (2.40.0 -> 2.40.1)
=== Details ===
==== MozillaFirefox ====
Version update (112.0 -> 112.0.1)
Subpackages: MozillaFirefox-translations-common
- Mozilla Firefox 112.0.1
* Fix a bug where cookie dates appear to be set in the far
future after updating Firefox. This may have caused cookies to
be unintentionally purged (bmo#1827669)
==== NetworkManager ====
Version update (1.42.4 -> 1.42.6)
Subpackages: NetworkManager-bluetooth NetworkManager-lang NetworkManager-tui NetworkManager-wwan libnm0 typelib-1_0-NM-1_0
- Update to version 1.42.6:
+ Emit the dhcp-change dispatcher event also after a lease
renewal.
+ Fix assertion failure on DHCP renewal.
+ Add support for EC2 IMDSv2 in nm-cloud-setup.
+ Allow setting tunnel flags for ip6gre & ip6gretap connection
profiles.
+ Improve the Wi-Fi hotspot functionality.
+ Fix setting the Wi-Fi roaming policy based on the number of
seen BSSIDs.
+ Support the "no-aaaa" resolv.conf option.
+ Some oFono fixes.
==== bind ====
Version update (9.18.13 -> 9.18.14)
- Update to release 9.18.14
Removed Features:
* Zone type delegation-only, and the delegation-only and
root-delegation-only statements, have been deprecated. A
warning is now logged when they are used.
* These statements were created to address the SiteFinder
controversy, in which certain top-level domains redirected
misspelled queries to other sites instead of returning NXDOMAIN
responses. Since top-level domains are now DNSSEC-signed, and
DNSSEC validation is active by default, the statements are no
longer needed.
Bug Fixes:
* Several bugs which could cause named to crash during catalog
zone processing have been fixed.
* Previously, downloading large zones over TLS (XoT) from a
primary could hang the transfer on the secondary, especially
when the connection was unstable. This has been fixed.
* Performance of DNSSEC validation in zones with many DNSKEY
records has been improved.
==== containerd ====
Version update (1.6.19 -> 1.6.20)
- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
<https://github.com/containerd/containerd/releases/tag/v1.6.20>
==== evolution-data-server ====
Version update (3.48.0 -> 3.48.1)
Subpackages: evolution-data-server-lang libcamel-1_2-64 libebackend-1_2-11 libebook-1_2-21 libebook-contacts-1_2-4 libecal-2_0-2 libedata-book-1_2-27 libedata-cal-2_0-2 libedataserver-1_2-27 libedataserverui-1_2-4
- Update to version 3.48.1:
+ WebDAV Notes: Fallback to derive component summary from
description.
+ CamelFilterDriver: Unset info's headers only when folder has
summary.
+ Bugs fixed:
- Camel: POP3's 'UTF8' command blocking login.
- backends: React to destination URI changes.
- Fails to refresh backend with offline changes and broken
local cache state.
- IMAPx: Ignore 'Permission denied' error on refresh.
- libedataserver: Disable deprecation notice around
e_flag_timed_wait.
- Calendar: Change file backend discard_alarm() function.
+ Updated translations.
==== freetype2 ====
- Fix license tag to FTL and GPL-2.0-only.
==== gcc13 ====
Version update (13.0.1+git7162 -> 13.0.1+git7231)
Subpackages: cpp13 libatomic1 libgcc_s1 libgfortran5 libgomp1 libobjc4 libquadmath0 libstdc++6 libstdc++6-locale libstdc++6-pp libubsan1
- Bump to f980561c60b0446cc427595198d7f3f4f90e0924, git7231.
* fixes compile-time issue reported in [bsc#1210557]
* GCC 13.1 RC3
- Disable building the rust frontend.
==== glib2 ====
Subpackages: glib2-lang glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 libgthread-2_0-0
- Add mate-mimeapps.list for MATE-specific MIME associations
generated by suse-update-mime-defaults
==== gnome-control-center ====
Version update (44.0+20 -> 44.1)
Subpackages: gnome-control-center-color gnome-control-center-goa gnome-control-center-lang gnome-control-center-user-faces
- Update to version 44.1:
+ Common:
- Update hostname only after apply is clicked.
- Add widget name and css class to CcIllustratedRow and
CcSplitRow.
+ Color: Do not try to access to null pointer in destruction.
+ Date & Time: Fix NTP switch getting out of sync.
+ Display:
- Allow configuring all monitors and apply settings at once.
- Disconnect config manager changed handler.
- Don't leak config manager proxy.
+ Network: Fix crash when removing a connection.
+ Region: Fix label of formats for the login screen.
+ Sharing: Fix network row visible name bug.
+ Shell: Add workaround to make disabled pictures are painted as
such.
+ Sound:
- Prevent duplicate sound device entries.
- Revert accidental libgvc downgrade.
+ Updated translations.
- Drop gnome-control-center-fix-6f1567f23.patch: Fixed upstream.
==== gnome-software ====
Version update (44.0 -> 44.1)
Subpackages: gnome-software-lang gnome-software-plugin-packagekit
- Update to version 44.1:
+ Fix firmware updates state change after update.
+ Fix origin reference information for PackageKit apps.
+ Fix a crash after dismissing firmware update warning dialog.
+ Fix a crash on repo removal.
+ Updated translations.
==== gpgme ====
Version update (1.19.0 -> 1.20.0)
Subpackages: libgpgme11 libgpgmepp6 python310-gpg
- Update to 1.20.0:
* On Windows, the gettext functions provided by gpgrt are switched
into utf8 mode, so that all localized texts returned by GpgME or
gpgrt, e.g. the texts for error codes are now UTF-8 encoded. [T5960]
* Key::canSign now returns false for OpenPGP keys without signing
(sub)key. [T6456]
* The new macOS Homebrew location is now by default supported. [T6440]
* Fix regression in 1.19.0.
* Fix invocation of gpgtar on Windows.
* Interface changes relative to the 1.19.0 release:
- gpgme_subkey_t EXTENDED: New field 'can_renc'.
- gpgme_subkey_t EXTENDED: New field 'can_timestamp'.
- gpgme_subkey_t EXTENDED: New field 'is_group_owned'.
- cpp: Subkey::canRenc NEW.
- cpp: Subkey::canTimestamp NEW.
- cpp: Subkey::isGroupOwned NEW.
- cpp: Key::canReallySign DEPRECATED.
* Release-info: https://dev.gnupg.org/T6463
==== grub2 ====
Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi
- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
* 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
* 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch
==== gssdp ====
- Update license tag to LGPL-2.1-or-later.
==== kernel-source ====
Version update (6.2.10 -> 6.2.12)
- Linux 6.2.12 (bsc#1012628).
- nvme-pci: add NVME_QUIRK_BOGUS_NID for T-FORCE Z330 SSD
(bsc#1012628).
- nvme-pci: mark Lexar NM760 as IGNORE_DEV_SUBNQN (bsc#1012628).
- cifs: fix negotiate context parsing (bsc#1012628).
- i2c: ocores: generate stop condition after timeout in polling
mode (bsc#1012628).
- x86/rtc: Remove __init for runtime functions (bsc#1012628).
- sched/fair: Fix imbalance overflow (bsc#1012628).
- powerpc/papr_scm: Update the NUMA distance table for the target
node (bsc#1012628).
- i2c: mchp-pci1xxxx: Update Timing registers (bsc#1012628).
- ubi: Fix deadlock caused by recursively holding work_sem
(bsc#1012628).
- ubi: Fix failure attaching when vid_hdr offset equals to
(sub)page size (bsc#1012628).
- selftests: mptcp: userspace pm: uniform verify events
(bsc#1012628).
- mptcp: fix NULL pointer dereference on fastopen early fallback
(bsc#1012628).
- mptcp: stricter state check in mptcp_worker (bsc#1012628).
- mptcp: use mptcp_schedule_work instead of open-coding it
(bsc#1012628).
- drm/amd/pm: correct SMU13.0.7 max shader clock reporting
(bsc#1012628).
- drm/amd/pm: correct SMU13.0.7 pstate profiling clock settings
(bsc#1012628).
- cgroup/cpuset: Add cpuset_can_fork() and cpuset_cancel_fork()
methods (bsc#1012628).
- cgroup/cpuset: Make cpuset_fork() handle CLONE_INTO_CGROUP
properly (bsc#1012628).
- cgroup/cpuset: Wake up cpuset_attach_wq tasks in
cpuset_cancel_attach() (bsc#1012628).
- cgroup/cpuset: Fix partition root's cpuset.cpus update bug
(bsc#1012628).
- cgroup: fix display of forceidle time at root (bsc#1012628).
- x86/PCI: Add quirk for AMD XHCI controller that loses MSI-X
state in D3hot (bsc#1012628).
- PCI/MSI: Provide missing stub for pci_msix_can_alloc_dyn()
(bsc#1012628).
- PCI: Fix use-after-free in pci_bus_release_domain_nr()
(bsc#1012628).
- drm/amd/pm: correct the pcie link state check for SMU13
(bsc#1012628).
- thermal: intel: Avoid updating unsupported THERM_STATUS_CLEAR
mask bits (bsc#1012628).
- scsi: ses: Handle enclosure with just a primary component
gracefully (bsc#1012628).
- net: phy: nxp-c45-tja11xx: fix unsigned long multiplication
overflow (bsc#1012628).
- net: phy: nxp-c45-tja11xx: add remove callback (bsc#1012628).
- net: sfp: initialize sfp->i2c_block_size at sfp allocation
(bsc#1012628).
- HID: intel-ish-hid: Fix kernel panic during warm reset
(bsc#1012628).
- riscv: add icache flush for nommu sigreturn trampoline
(bsc#1012628).
- ksmbd: avoid out of bounds access in decode_preauth_ctxt()
(bsc#1012628).
- maple_tree: fix write memory barrier of nodes once dead for
RCU mode (bsc#1012628).
- tracing: Have tracing_snapshot_instance_cond() write errors
to the appropriate instance (bsc#1012628).
- tracing: Add trace_array_puts() to write into instance
(bsc#1012628).
- ACPI: resource: Add Medion S17413 to IRQ override quirk
(bsc#1012628).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
(bsc#1012628).
- drm/amdgpu: Force signal hw_fences that are embedded in
non-sched jobs (bsc#1012628).
- drm/amdgpu: add mes resume when do gfx post soft reset
(bsc#1012628).
- wifi: iwlwifi: mvm: protect TXQ list manipulation (bsc#1012628).
- wifi: iwlwifi: mvm: fix mvmtxq->stopped handling (bsc#1012628).
- nvme: send Identify with CNS 06h only to I/O controllers
(bsc#1012628).
- asymmetric_keys: log on fatal failures in PE/pkcs7
(bsc#1012628).
- verify_pefile: relax wrapper length check (bsc#1012628).
- hwmon: (xgene) Fix ioremap and memremap leak (bsc#1012628).
- hwmon: (peci/cputemp) Fix miscalculated DTS for SKX
(bsc#1012628).
- drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Book
X90F (bsc#1012628).
- ACPI: video: Add backlight=native DMI quirk for Acer Aspire
3830TG (bsc#1012628).
- block: ublk_drv: mark device as LIVE before adding disk
(bsc#1012628).
- efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L
(bsc#1012628).
- i2c: hisi: Avoid redundant interrupts (bsc#1012628).
- i2c: imx-lpi2c: clean rx/tx buffers upon new message
(bsc#1012628).
- wifi: mwifiex: mark OF related data as maybe unused
(bsc#1012628).
- selftests/bpf: Fix progs/find_vma_fail1.c build error
(bsc#1012628).
- power: supply: axp288_fuel_gauge: Added check for negative
... changelog too long, skipping 444 lines ...
- commit 4e944ba
==== libsoup ====
Version update (3.4.0 -> 3.4.1)
Subpackages: libsoup-3_0-0 libsoup-lang typelib-1_0-Soup-3_0
- Update to version 3.4.1:
+ Fix HTTP/2 on platforms with unsigned char.
+ Change request cancellation to be handled earlier.
+ Add names to GSources and source tags to GTasks to aid
debugging.
- Run meson_test macro for all arches.
==== libstorage-ng ====
Version update (4.5.96 -> 4.5.97)
Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1
- merge gh#openSUSE/libstorage-ng#926
- reimplemented transport detection for NVMe (bsc#1210144)
- added tests for nvme parsers
- 4.5.97
==== liburing ====
- Add 0001-test-file-verify.t-Don-t-run-over-mlock-limit-when-r.patch
fixes test with kernel <= 5.16 (bsc#1209723)
==== opus ====
Version update (1.3.1 -> 1.4)
- Update to version 1.4:
* Improved tuning of the Opus in-band FEC (LBRR). See the
https://gitlab.xiph.org/xiph/opus/-/issues/2360 for details
* Added a OPUS_SET_INBAND_FEC(2) option that turns on FEC, but
does not force SILK mode (FEC will be disabled in CELT mode)
* Improved tuning and various fixes to DTX
* Added Meson support, improved CMake support
- Change Source to new home on github.
- Use autosetup, make_build and ldconfig_scriptlets macros.
- Move AUTHORS and README docs to devel package.
- Drop patches fixed upstream:
* opus-Fix-celt-decoder-assertion-when-using-OPUS_CUSTOM.patch
* opus-Silk-CNG-adapts-faster.patch
* opus-Silk-fix-arm-optimization.patch
==== python-Automat ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-Babel ====
- Make calling of %{sle15modernpython} optional.
==== python-Brotli ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-CommonMark ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-Jinja2 ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-MarkupSafe ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-PyJWT ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-PySocks ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-PyYAML ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-SQLAlchemy ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-Twisted ====
Subpackages: python310-Twisted python310-Twisted-tls
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-async_timeout ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-attrs ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-blinker ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-certifi ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-cffi ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-click ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-configobj ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-constantly ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-decorator ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-dnspython ====
- add sle15_python_module_pythons (jsc#PED-68)
- add sle15_python_module_pythons (jsc#PED-68)
==== python-gevent ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-greenlet ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-h11 ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-h2 ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-hpack ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-httpcore ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-httpx ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-hyperframe ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-hyperlink ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-idna ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-incremental ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-iniconfig ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-jsonpatch ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-jsonpointer ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-jsonschema ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-lark ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-netifaces ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-oauthlib ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-pexpect ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-pip ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-psutil ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-ptyprocess ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-pyOpenSSL ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-pyasn1 ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-pyasn1-modules ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-pycares ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-pycparser ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-pycurl ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-pylibmc ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-pyrsistent ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-pyserial ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-python-dateutil ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-pytz ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-pyudev ====
- add sle15_python_module_pythons (jsc#PED-68)
==== python-requests-toolbelt ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-responses ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-rfc3986 ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-rich ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-service_identity ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-simplejson ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-sniffio ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-tornado6 ====
- add sle15_python_module_pythons (jsc#PED-68)
==== python-typing_extensions ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-urllib3 ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-zope.event ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== python-zope.interface ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== webkit2gtk3 ====
Version update (2.40.0 -> 2.40.1)
Subpackages: WebKitGTK-4.1-lang libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles
- Update to version 2.40.1 (boo#1210295 boo#1210731):
+ The Bubblewrap sandbox no longer requires setting an
application identifier via GApplication to operate correctly.
Using GApplication is still recommended, but optional.
+ Adjust the scrolling speed for mouse wheels to make it feel
more natural.
+ Allow pasting content using the Asynchronous Clipboard API when
the origin is the same as the clipboard contents.
+ Improvements to the GStreamer multimedia playback, in
particular around MSE, WebRTC, and seeking.
+ Make all supported image types appear in the Accept HTTP
header.
+ Fix text caret blinking when blinking is disabled in the GTK
settings.
+ Fix default database quota size definition.
+ Fix application of all caps tags listed in the
font-feature-settings CSS property.
+ Fix the build with journald support enabled when using elogind
instead of the systemd libraries.
+ Fix the build when libgcrypt provides a libgcrypt-config script
instead of a pkg-config module file.
+ Fix font height calculations for the font-size-adjust CSS
property.
+ Fix the build when ccache is used in certain setups.
+ Fix the build for RISC-V 64-bit targets.
+ Fix the build with GCC 13.
+ Fix several crashes and rendering issues.
+ Security fixes: CVE-2022-0108, CVE-2023-28205, CVE-2022-32885,
CVE-2023-27932, CVE-2023-27954.
- Drop regression-fix.patch and fix-gst-crash.patch: fixed
upstream.
- Rebase gcc13-fix.patch.
==== webkit2gtk4 ====
Version update (2.40.0 -> 2.40.1)
Subpackages: WebKitGTK-6.0-lang libjavascriptcoregtk6_0-1 libwebkitgtk6_0-4 webkitgtk-6_0-injected-bundles
- Update to version 2.40.1 (boo#1210295 boo#1210731):
+ The Bubblewrap sandbox no longer requires setting an
application identifier via GApplication to operate correctly.
Using GApplication is still recommended, but optional.
+ Adjust the scrolling speed for mouse wheels to make it feel
more natural.
+ Allow pasting content using the Asynchronous Clipboard API when
the origin is the same as the clipboard contents.
+ Improvements to the GStreamer multimedia playback, in
particular around MSE, WebRTC, and seeking.
+ Make all supported image types appear in the Accept HTTP
header.
+ Fix text caret blinking when blinking is disabled in the GTK
settings.
+ Fix default database quota size definition.
+ Fix application of all caps tags listed in the
font-feature-settings CSS property.
+ Fix the build with journald support enabled when using elogind
instead of the systemd libraries.
+ Fix the build when libgcrypt provides a libgcrypt-config script
instead of a pkg-config module file.
+ Fix font height calculations for the font-size-adjust CSS
property.
+ Fix the build when ccache is used in certain setups.
+ Fix the build for RISC-V 64-bit targets.
+ Fix the build with GCC 13.
+ Fix several crashes and rendering issues.
+ Security fixes: CVE-2022-0108, CVE-2023-28205, CVE-2022-32885,
CVE-2023-27932, CVE-2023-27954.
- Drop regression-fix.patch and fix-gst-crash.patch: fixed
upstream.
- Rebase gcc13-fix.patch.
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
desktop-file-utils
ffmpeg-5 (5.1.2 -> 5.1.3)
gnome-branding-MicroOS (20230323 -> 20230420)
grep (3.9 -> 3.10)
libpaper (2.0.10 -> 2.1.0)
libpng16
libunistring
libxml2 (2.10.3 -> 2.10.4)
microos-tools (2.20+git20230413.2a43cdb -> 2.21+git0)
mpfr
ncurses (6.4.20230408 -> 6.4.20230418)
pam (1.5.2 -> 1.5.2.90)
pam-config (2.4 -> 2.5)
pam-full-src (1.5.2 -> 1.5.2.90)
patterns-gnome
patterns-microos
plasma-branding-MicroOS (20230323 -> 20230420)
plasma5-desktop
python-pymemcache
qalculate (4.5.1 -> 4.6.1)
selinux-policy (20230321 -> 20230420)
shadow
snapper
tuned (2.19.0.29+git.b894a3e -> 2.20.0.18+git.7b1a20b)
vulkan-loader (1.3.243.0 -> 1.3.247)
vulkan-tools (1.3.243.0 -> 1.3.247)
xkeyboard-config
yast2-trans (84.87.20230416.972001c66e -> 84.87.20230420.b54e9530)
=== Details ===
==== desktop-file-utils ====
- suse-update-mime-defaults:
* add support for MATE desktop
* ensure C locale is set for sorting order
* fix quoting of DESTDIR
==== ffmpeg-5 ====
Version update (5.1.2 -> 5.1.3)
Subpackages: libavcodec59 libavfilter8 libavformat59 libavutil57 libpostproc56 libswresample4_ff5 libswscale6
- Update to version 5.1.3:
* avcodec/012v: Order operations for odd size handling
* avcodec/alsdec:
- Check bits left before block decoding in non multi channel
coding loop
- The minimal block is at least 7 bits
* avcodec/atrac3plus: reorder channels to match the output layout
* avcodec/audiotoolboxenc: return AVERROR_EXTERNAL immediately
when encode error
* avcodec/bink:
- Avoid undefined out of array end pointers in
binkb_decode_plane()
- Fix off by 1 error in ref end
* avcodec/eac3dec: avoid float noise in fixed mode addition to
overflow
* avcodec/eatgq: : Check index increments in tgq_decode_block()
* avcodec/escape124:
- Fix signdness of end of input check
- Fix some return codes
* avcodec/ffv1dec:
- Check that num h/v slices is supported
- Fail earlier if prior context is corrupted
* avcodec/ffv1dec: restructure slice coordinate reading a bit
* avcodec/h274: fix include
* avcodec/libjxldec:
- Fix gamma22 and gamma28 recognition
- Avoid hard failure with unspecified primaries
* avcodec/mjpegenc: take into account component count when
writing the SOF header size
* avcodec/mlpdec: Check max matrix instead of max channel in
noise check
* avcodec/motionpixels: Mask pixels to valid values
* avcodec/mpeg12dec:
- Check input size
- Use init_get_bits8 and check the return value
* avcodec/nvenc: fix vbv buffer size in cq mode
* avcodec/pictordec: Remove mid exit branch
* avcodec/pngdec:
- Check deloco index more exactly
- Dont skip/read chunk twice
* avcodec/rpzaenc: stop accessing out of bounds frame
* avcodec/scpr3: Check bx
* avcodec/scpr: Test bx before use
* avcodec/smcenc: stop accessing out of bounds frame
* avcodec/snowenc: Fix visual weight calculation
* avcodec/speedhq: Check buf_size to be big enough for DC
* avcodec/speexdec: Check channels > 2
* avcodec/sunrast: Fix maplength check
* avcodec/tests/snowenc:
- Fix 2nd test
- Return a failure if DWT/IDWT mismatches
- Unbreak DWT tests
* avcodec/tiff: Ignore tile_count
* avcodec/utils:
- Allocate a line more for VC1 and WMV3
- Ensure linesize for SVQ3
- Use 32pixel alignment for bink
* avcodec/videodsp_template: Adjust pointers to avoid undefined
pointer things
* avcodec/wavpack:
- Avoid undefined shift in get_tail()
- Check for end of input in wv_unpack_dsd_high()
* avcodec/xpmdec: Check size before allocation to avoid
truncation
* avcodec/aacdec: fix parsing streams with channel configuration
11
* avformat/id3v2: Check taglen in read_uslt()
* avformat/mov: Check samplesize and offset to avoid integer
overflow
* avformat/mxfdec: Use 64bit in remainder
* avformat/replaygain: avoid undefined / negative abs
* avformat/vividas: Check packet size
* avutil/tx: Use unsigned in ff_tx_fft_sr_combine() to avoid
undefined behavior
* hwcontext_vulkan: remove optional encode/decode extensions from
the list
* lavf/async: Fix ring_write return value
* lavu/vulkan: fix handle type for 32-bit targets
* libswscale: force a minimum size of the slide for bayer sources
* swscale/input: Use more unsigned intermediates
* swscale/output:
- Bias 16bps output calculations to improve non overflowing
range
- Bias 16bps output calculations to improve non overflowing
range for GBRP16/GBRPF32
* swscale: aarch64: Fix yuv2rgb with negative strides
* Use https for repository links
* vulkan: Fix win/i386 calling convention
- Rebase patches with quilt.
- Drop ffmpeg-CVE-2022-3964.patch: Fixed upstream.
- Drop no-vk-video-decoding.patch: Upstream removed this optional
code.
- Use ldconfig_scriptlets macro.
==== gnome-branding-MicroOS ====
Version update (20230323 -> 20230420)
- Remove unneeded cleanup of desktop drop-in
- 20230420
- Correct location for Desktop drop-in config
- Clean up invalid desktop drop-in file
- 20230419
==== grep ====
Version update (3.9 -> 3.10)
Subpackages: grep-lang
- update to 3.10:
* With -P, \d now matches only ASCII digits, regardless of
PCRE options/modes. The changes in grep-3.9 to make ^H and \w
work properly had the undesirable side effect of making \d
also match e.g., the Arabic digits: ٠١٢٣٤٥٦٧٨٩.
With grep-3.9, -P '\d+' would match that ten-digit (20-byte)
string. Now, to match such a digit, you would use \p{Nd}.
Similarly, \D is now mapped to [^0-9].
==== libpaper ====
Version update (2.0.10 -> 2.1.0)
Subpackages: libpaper-tools libpaper2
- Update to 2.1.0:
* This release reintroduces the old âpaperconfâ utility, for
backwards compatibility only.
==== libpng16 ====
- Fix license tag to libpng-2.0.
==== libunistring ====
- Fix license tag to GPL-3.0-or-later or LGPL-3.0-or-later.
==== libxml2 ====
Version update (2.10.3 -> 2.10.4)
Subpackages: libxml2-2 libxml2-tools
- Update to version 2.10.4:
+ Security:
- [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
isnât deterministic
- [CVE-2023-28484, bsc#1210411] Fix null deref in
xmlSchemaFixupComplexType
- schemas: Fix null-pointer-deref in
xmlSchemaCheckCOSSTDerivedOK
+ Regressions:
- SAX2: Ignore namespaces in HTML documents
- io: Fix âbuffer fullâ error with certain buffer sizes
==== microos-tools ====
Version update (2.20+git20230413.2a43cdb -> 2.21+git0)
- Switch to obs_scm
- Call autogen.sh so that it actually builds
- Update to version 2.21+git0:
* Release version 2.21
* 98selinux-microos: Work around overlayfs bug (bsc#1210690)
* 98selinux-microos: Create .relabelled marker before relabelling
==== mpfr ====
- Add mpfr-4.2.0-cummulative.patch, cummulative patches for
mpfr 4.2.0:
* A test of the thousands separator in tsprintf.c is based on the
output from the GNU C Library up to 2.36, which is incorrect.
* The mpfr_ui_pow_ui function has infinite loop in case of overflow.
* The tfprintf and tprintf tests may fail in locales where decimal_point
has several bytes, such as ps_AF.
* In particular cases that are very hard to round, mpfr_rec_sqrt may yield
a stack overflow due to many small allocations in the stack, based on
alloca().
- Remove tests-tsprintf.patch that's included in the above set.
==== ncurses ====
Version update (6.4.20230408 -> 6.4.20230418)
Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen
- Fix get_version_number.sh to show version without suffix gz.asc
- Add ncurses patch 20230418 (boo#1210485, (boo#1210434)
+ improve checks for limits on privileged execution:
+ modify _nc_syserr_abort() to use _nc_env_access(), rather than
only checking root uid.
+ use getauxval() when available, to improve setuid/setgid checks.
+ modify test packages to disable root access/environ options.
+ modify tgoto() to accept no-parameter capabilities, for joe editor
(OpenSUSE #1210485, Gentoo #904263).
- Add signatures of the patches as well in patch tar ball
- Add ncurses patch 20230415 (boo#1210485)
+ configure script fixes:
+ fix copy/paste error in configure option --disable-root-access
(report/patch by Sven Joachim).
+ modify CF_XOPEN_SOURCE macro's amend default case to avoid
undefining _XOPEN_SOURCE if _POSIX_C_SOURCE is defined.
+ modify test_tparm to account for extended capabilities.
+ add checks in tparm() and tiparm() for misuse of numeric parameters,
overlooked in 20230408.
+ fix errata in clear.1 and curs_terminfo.3x
==== pam ====
Version update (1.5.2 -> 1.5.2.90)
- pam-extra: add split provide
- pam-userdb: add split provide
- Drop pam-xauth_ownership.patch, got fixed in sudo itself
- Drop pam-bsc1177858-dont-free-environment-string.patch, was a
fix for above patch
- Use bcond selinux to disable SELinux
- Remove old pam_unix_* compat symlinks
- Move pam_userdb to own pam-userdb sub-package
- pam-extra contains now modules having extended dependencies like
libsystemd
- Update to 1.5.3.90 git snapshot
- Drop merged patches:
- pam-git.diff
- docbook5.patch
- pam_pwhistory-docu.patch
- pam_xauth_data.3.xml.patch
- Drop Linux-PAM-1.5.2.90.tar.xz as we have to rebuild all
documentation anyways and don't use the prebuild versions
- Move all devel manual pages to pam-manpages, too. Fixes the
problem that adjusted defaults not shown correct.
==== pam-config ====
Version update (2.4 -> 2.5)
- Update to version 2.5
- Add skip_if option for pam_wtmpdb
==== pam-full-src ====
Version update (1.5.2 -> 1.5.2.90)
- pam-extra: add split provide
- pam-userdb: add split provide
- Drop pam-xauth_ownership.patch, got fixed in sudo itself
- Drop pam-bsc1177858-dont-free-environment-string.patch, was a
fix for above patch
- Use bcond selinux to disable SELinux
- Remove old pam_unix_* compat symlinks
- Move pam_userdb to own pam-userdb sub-package
- pam-extra contains now modules having extended dependencies like
libsystemd
- Update to 1.5.3.90 git snapshot
- Drop merged patches:
- pam-git.diff
- docbook5.patch
- pam_pwhistory-docu.patch
- pam_xauth_data.3.xml.patch
- Drop Linux-PAM-1.5.2.90.tar.xz as we have to rebuild all
documentation anyways and don't use the prebuild versions
- Move all devel manual pages to pam-manpages, too. Fixes the
problem that adjusted defaults not shown correct.
==== patterns-gnome ====
Subpackages: patterns-gnome-gnome_basic patterns-gnome-gnome_basis patterns-gnome-gnome_basis_opt patterns-gnome-sw_management_gnome
- Drop pidgin and planner Recommends from openSUSE, only install by
default on SLED. Planner is no longer available on Tumbleweed.
==== patterns-microos ====
Subpackages: patterns-microos-alt_onlyDVD patterns-microos-apparmor patterns-microos-base patterns-microos-base-microdnf patterns-microos-base-packagekit patterns-microos-base-zypper patterns-microos-basesystem patterns-microos-cloud patterns-microos-cockpit patterns-microos-defaults patterns-microos-desktop-common patterns-microos-desktop-gnome patterns-microos-desktop-kde patterns-microos-hardware patterns-microos-ima_evm patterns-microos-onlyDVD patterns-microos-ra_agent patterns-microos-ra_verifier patterns-microos-selinux patterns-microos-sssd_ldap
- Relocate the below change to kernel-firmware-all and sof-firmware
from base pattern to desktop-common - the requirement is for
very broad hardware support Desktops, not ever MicroOS install
- Add kernel-firmware-all and sof-firmware to the base pattern.
This should ensure any MicroOS system can handle the various
kinds/vendors of hardware out of the box, since those systems
don't use package recommendation/supplementation (boo#1184767,
boo#1210483).
- Add missing gtk4-branding-openSUSE requirement (GTK2 and GTK3 are
already being required).
- Drop duplicated NetworkManager requirement from GNOME pattern.
This is part of the base pattern which get's pulled in by any
MicrOS system.
- Move xdg-desktop-portal-gtk to the desktop common pattern. Both
GNOME and KDE need it for proper theming of GTK-based flatpak
apps.
==== plasma-branding-MicroOS ====
Version update (20230323 -> 20230420)
- Remove unneeded cleanup of desktop drop-in
- 20230420
- Correct location for Desktop drop-in config
- Clean up invalid desktop drop-in file
- 20230419
==== plasma5-desktop ====
Subpackages: plasma5-desktop-emojier plasma5-desktop-lang
- Add patch to fix configuration of mouse acceleration with
xf86-input-libinput >= 1.3.0 (kde#468217):
* 0001-KCM-mouse-enable-compatibility-with-x11-libinput-1.3.patch
==== python-pymemcache ====
- add sle15_python_module_pythons (jsc#PED-68)
- Make calling of %{sle15modernpython} optional.
==== qalculate ====
Version update (4.5.1 -> 4.6.1)
Subpackages: libqalculate22 qalculate-data
- Update to 4.6.1:
* Do not automatically by default set prefix higher than kilo for meter,
gram, higher than 1 (no prefix) for second and litre, or lower than 1
for byte and bit
* Do not use recently introduced SI prefixes (R, Q, r, q)
automatically by default
* Do not set automatic prefix if resulting multiplier is
less than 1 or greater than 1000, with some exceptions (e.g. km)
* Default prefix unit property (use for gram, and few other units,
instead of hard coded value)
* Option to change symbols used for output of digits 10 and 11 in
duodecimal numbers (use A and B as default digits)
* Allow the same variable left and right of the equals sign (e.g. var=var+2),
in variable assignment without colon, if the variable exists and the
previous value is known
* Use Unicode symbol for minus in scientific e notation
* Do not show multiplier if exactly 1, in HTML output of scientific notation
* Prefer Nm (torque) over J when the result is a vector with three components
* Add "amp" abbreviation to ampere unit, and "thou" name for 1/1000 in (mil)
* Fix unit order for Nm and Ws
* Fix conversion from ounce (interpreted as fluid ounce) to litre with prefix
* Fix automatic reactivation of global object after deletion of conflicting object
* Fix parsing of scientific e notation when the number is extremely large and
exponentiation fails because of floating point overflow
* Fixes for output of scientific notation using number bases other than decimal
* Fix prefix selection in denominator when multiplier is higher than the
value of the largest prefix
* Fix segfault in multisolve()
* Don't show anything on empty input
* Support "help [OPTION]" and "help set [OPTION]" command to display
description for a single set option
* Fix division and exponentiation of scalar by matrix/vector, e.g. 4./[8 4.5]
* Improve parsing of element-wise operators with comma as decimal separator
* Fix rref() with different units for different elements
* Fix segfault with empty vector in uncertainty calculation
* Fix segfault trying to solve cbrt(x)^(1/3)-x=0
* Fix segfault in handling of vector variable with uncertainty
* Fix internal id does not exist error
* Fix erroneous simplification of sin(x)^2*y-cos(x)sin(x)^2y
* Do not try to calculate norm() and magnitude() for matrices
* Fix some memory leaks
* Fix order of argument titles in csum() function
==== selinux-policy ====
Version update (20230321 -> 20230420)
Subpackages: selinux-policy-targeted
- Update to version 20230420:
* libzypp creates temporary files in /var/adm/mount. Label it with
rpm_var_cache_t to prevent wrong labels in /var/cache/zypp
* only use rsync_exec_t for the rsync server, not for the client
(bsc#1209890)
* properly label sshd-gen-keys-start to ensure ssh host keys have proper
labels after creation
* Allow dovecot-deliver write to the main process runtime fifo files
* Allow dmidecode write to cloud-init tmp files
* Allow chronyd send a message to cloud-init over a datagram socket
* Allow cloud-init domain transition to insights-client domain
* Allow mongodb read filesystem sysctls
* Allow mongodb read network sysctls
* Allow accounts-daemon read generic systemd unit lnk files
* Allow blueman watch generic device dirs
* Allow nm-dispatcher tlp plugin create tlp dirs
* Allow systemd-coredump mounton /usr
* Allow rabbitmq to read network sysctls
* Allow certmonger dbus chat with the cron system domain
* Allow geoclue read network sysctls
* Allow geoclue watch the /etc directory
* Allow logwatch_mail_t read network sysctls
* allow systemd_resolved_t to bind to all nodes (bsc#1200182)
* Allow insights-client read all sysctls
* Allow passt manage qemu pid sock files
* Allow sssd read accountsd fifo files
* Add support for the passt_t domain
* Allow virtd_t and svirt_t work with passt
* Add new interfaces in the virt module
* Add passt interfaces defined conditionally
* Allow tshark the setsched capability
* Allow poweroff create connections to system dbus
* Allow wg load kernel modules, search debugfs dir
* Boolean: allow qemu-ga manage ssh home directory
* Label smtpd with sendmail_exec_t
* Label msmtp and msmtpd with sendmail_exec_t
* Allow dovecot to map files in /var/spool/dovecot
* Confine gnome-initial-setup
* Allow qemu-guest-agent create and use vsock socket
* Allow login_pgm setcap permission
* Allow chronyc read network sysctls
* Enhancement of the /usr/sbin/request-key helper policy
* Fix opencryptoki file names in /dev/shm
* Allow system_cronjob_t transition to rpm_script_t
* Revert "Allow system_cronjob_t domtrans to rpm_script_t"
* Add tunable to allow squid bind snmp port
* Allow staff_t getattr init pid chr & blk files and read krb5
* Allow firewalld to rw z90crypt device
* Allow httpd work with tokens in /dev/shm
* Allow svirt to map svirt_image_t char files
* Allow sysadm_t run initrc_t script and sysadm_r role access
* Allow insights-client manage fsadm pid files
* Allowing snapper to create snapshots of /home/ subvolume/partition
* Add boolean qemu-ga to run unconfined script
* Label systemd-journald feature LogNamespace
* Add none file context for polyinstantiated tmp dirs
* Allow certmonger read the contents of the sysfs filesystem
* Add journalctl the sys_resource capability
* Allow nm-dispatcher plugins read generic files in /proc
- Add debug-build.sh script to make debugging without committing easier
==== shadow ====
Subpackages: libsubid4 login_defs
- bsc#1210507 (CVE-2023-29383):
Check for control characters
- Add shadow-CVE-2023-29383.patch
==== snapper ====
Subpackages: libsnapper7 snapper-zypp-plugin
- fixed deleting configs (bsc#1210716)
==== tuned ====
Version update (2.19.0.29+git.b894a3e -> 2.20.0.18+git.7b1a20b)
- New polkit interface has been reviewed by security bsc#1185418
- Remove old outdated spec scripts before suse_version 1500
- Separate SAP and related profiles to not be installed in SLE 15 SPx
and older, but add them with openSUSE (as before), ALP and upcoming
SLE distros
- Update to version tuned-2.20.0.18+git.7b1a20b
* scheduler: fix traceback if running with runtime=0
* plugin_scheduler: fix perf fd leaks
* Better log on unsupported hw for pm_qos_resume_latency_us option
* fix-tuned-profiles-adoc-error
* explicitly use /bin/bash for tuned scripts
* set the icon in the about dialog
* install dbus policy in /usr/share/dbus-1
* tuned-adm: better error message for unauthorized switch_profile
* man: updated manual pages to be more consistent
* spec: dropped unneeded ncat dependency
* fix log error
* Report reapplied sysctls only on different values
* Fixing no _evlist attribute when run without daemon
* fix 'is_active' does not work
* new release (2.20.0-rc.1)
* build: fixed FTBFS with python2
* Expose TuneD API to the Unix Domain Socket.
* Inform users about reapplied sysctls
* API: add support for moving devices between instances
* throughput-performance: set net.core.somaxconn to at least 2048
* Adding support for cpu intel_pstate scaling driver
* configparser: use no strict parser to mimic old behavior
* Adding pm_qos_resume_latency_us option for cpu plugin.i
* Makefile: added fix for python-3.12
* D-Bus: only send tracebacks through the D-Bus if in the debug mode
* update vendor_url in policy file
* correct section of the tuned-profiles-openshift manpage
* Allow selecting a different pkg-config executable
* fix tuned/gtk/gui_profile_loader.py spell error
* bootloader: create bootcmdline even when skip_grub_config=true
* profiles: added aws profile for aws ec2 instances
* Closing fd from perf module in scheduler plugin
==== vulkan-loader ====
Version update (1.3.243.0 -> 1.3.247)
- Update to 1.3.247
* Make correct layer be used when duplicates are present
* Fix ordering regression for VK_INSTANCE_LAYERS
==== vulkan-tools ====
Version update (1.3.243.0 -> 1.3.247)
- Update to release 1.3.247
* vulkaninfo: Dont enable Direct Driver Loading Ext
* vkcubepp: Fix custom height not working
==== xkeyboard-config ====
Subpackages: xkeyboard-config-lang
- remove CCDL from license strings (boo#1210681)
==== yast2-trans ====
Version update (84.87.20230416.972001c66e -> 84.87.20230420.b54e9530)
Subpackages: yast2-trans-cs yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-fr yast2-trans-hu yast2-trans-it yast2-trans-ja yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ru yast2-trans-zh_CN yast2-trans-zh_TW
- Update to version 84.87.20230420.b54e9530:
* Translated using Weblate (Dutch)
* Translated using Weblate (Japanese)
* Translated using Weblate (Catalan)
* New POT for text domain 'storage'.
* Translated using Weblate (Czech)
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
firewalld (1.3.0 -> 1.3.1)
glib2-branding-openSUSE
gnome-settings-daemon (44.0 -> 44.1)
grub2
gtk4
libXft (2.3.7 -> 2.3.8)
libXpm (3.5.15 -> 3.5.16)
libopenmpt (0.6.9 -> 0.6.10)
libstorage-ng (4.5.95 -> 4.5.96)
libyui (4.5.0 -> 4.5.1)
libyui-ncurses (4.5.0 -> 4.5.1)
libyui-ncurses-pkg (4.5.0 -> 4.5.1)
libyui-qt (4.5.0 -> 4.5.1)
libyui-qt-graph (4.5.0 -> 4.5.1)
libyui-qt-pkg (4.5.0 -> 4.5.1)
open-iscsi
openexr (3.1.6 -> 3.1.7)
podman (4.4.4 -> 4.5.0)
powerdevil5
publicsuffix (20230226 -> 20230414)
python-redis (4.3.3 -> 4.5.4)
redis (7.0.8 -> 7.0.11)
snapper
=== Details ===
==== firewalld ====
Version update (1.3.0 -> 1.3.1)
Subpackages: firewalld-bash-completion firewalld-lang python3-firewall
- update to 1.3.1:
* fix(fw_nm): use IP interface names for connection lookup (18c8b81)
* fix(fw_policy): raise exceptions (5ae9322)
* fix(service): include: when used with rich rule (986f0be)
* fix(nftables): rich: log: limit was not taking effect (0dc0575)
* fix(build): rpm must build all as prerequisite (6896748)
* fix: use error codes for FirewallError instances (370e5f2)
* fix(ipset): chunk entries when restoring set (8a88855)
* fix(applet): allows using KDE network connection editor (29c8ef6)
==== glib2-branding-openSUSE ====
- prefer org.gnome.TextEditor.desktop instead of gedit.
patterns-gnome was changed to install TextEditor (boo#1210648).
==== gnome-settings-daemon ====
Version update (44.0 -> 44.1)
Subpackages: gnome-settings-daemon-lang
- Update to version 44.1:
+ Build improvements
+ Power:
- Connect to light sensor asynchronously
- Initialize check for VM environment earlier
+ Rfkill: Monitor WwanEnabled property changes properly
+ Smartcards: Check for the addition of new smartcard readers
+ Xsettings: Do not force deprecated High Contrast icon theme
+ Updated translations.
- Use autopatch.
==== grub2 ====
Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi
- Fix no prep partition error on non-PReP architectures by making the
prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
* 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
* 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
* 0005-export-environment-at-start-up.patch
* 0009-Add-crypttab_entry-to-obviate-the-need-to-input-pass.patch
==== gtk4 ====
Subpackages: gtk4-lang gtk4-schema gtk4-tools libgtk-4-1 typelib-1_0-Gtk-4_0
- Place English translations in the tools sub-package instead of
lang. This should offer translations for the main English locales
without the need to install any additional package by default.
- Add "file-not-in-%lang" RPM Lint warning to rpmlintrc file for
the reason above.
- Drop "shlib-policy-name-error" unused filter from rpmlintrc.
==== libXft ====
Version update (2.3.7 -> 2.3.8)
- Updat to version 2.3.8
* configure: Use LT_INIT from libtool 2 instead of deprecated
AC_PROG_LIBTOOL
* add check for missing glyph in XftFontCheckGlyph()
* issue 17: libxft-2.3.7: Bold fonts in urxvt missing leftmost pixels
* issue 18: Problems with rotated text (monospace font only)
==== libXpm ====
Version update (3.5.15 -> 3.5.16)
- update to 3.5.16:
* test: skip compressed file tests when --disable-open-zfile is used
* gitlab CI: build with each of --enable-open-zfile & --disable-open-zfile
* configure: correct error message to suggest --disable-open-zfile
* open-zfile: Make compress & uncompress commands optional
* Require LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL
* XpmCreateDataFromXpmImage: Fix misleading indentation
* parse.c: Wrap FREE_CIDX definition in do { ... } while(0)
* parse.c: remove unused function xstrlcpy()
* test: Use PACKAGE_BUGREPORT instead of hard-coded URL's
* test: Add simple test cases for functions in src/rgb.c
* xpmReadRgbNames: constify filename argument
* Fix a memleak in ParsePixels error code path
==== libopenmpt ====
Version update (0.6.9 -> 0.6.10)
- Update to 0.6.10
* [Bug] File probing and loading results could be inconsistent
for SFX files, so that probing could claim that a file is
definitely not playable even if it would be.
* MOD: VBlank heuristics are now applied to MOD files with M!K!
signature. Fixes mod.siedler ii.
* NoiseTracker MODs are now always played with VBlank timing.
* MED: Add support for default instrument pitch.
* MED: Global play transpose value was not considered for MMD0
files.
* 669: Reject files with lots of control characters in song
message.
* mpg123: Update to v1.31.3 (2023-03-19).
==== libstorage-ng ====
Version update (4.5.95 -> 4.5.96)
Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1
- Translated using Weblate (Georgian) (bsc#1149754)
- 4.5.96
==== libyui ====
Version update (4.5.0 -> 4.5.1)
- Qt UI: Fixed loading icons from an absolute path (bsc#1210591)
https://github.com/libyui/libyui/pull/94
- 4.5.1
==== libyui-ncurses ====
Version update (4.5.0 -> 4.5.1)
- Qt UI: Fixed loading icons from an absolute path (bsc#1210591)
https://github.com/libyui/libyui/pull/94
- 4.5.1
==== libyui-ncurses-pkg ====
Version update (4.5.0 -> 4.5.1)
- Qt UI: Fixed loading icons from an absolute path (bsc#1210591)
https://github.com/libyui/libyui/pull/94
- 4.5.1
==== libyui-qt ====
Version update (4.5.0 -> 4.5.1)
- Qt UI: Fixed loading icons from an absolute path (bsc#1210591)
https://github.com/libyui/libyui/pull/94
- 4.5.1
==== libyui-qt-graph ====
Version update (4.5.0 -> 4.5.1)
- Qt UI: Fixed loading icons from an absolute path (bsc#1210591)
https://github.com/libyui/libyui/pull/94
- 4.5.1
==== libyui-qt-pkg ====
Version update (4.5.0 -> 4.5.1)
- Qt UI: Fixed loading icons from an absolute path (bsc#1210591)
https://github.com/libyui/libyui/pull/94
- 4.5.1
==== open-iscsi ====
Subpackages: iscsiuio libopeniscsiusr0
- Remove "--strip" in SPEC file for meson build, so that
debuginfo is generated. (from mwilck) (bsc#1210536)
==== openexr ====
Version update (3.1.6 -> 3.1.7)
Subpackages: libIex-3_1-30 libIlmThread-3_1-30 libOpenEXR-3_1-30
- update to 3.1.7:
* Patch release that fixes a build regression on ARMv7, and
fixes a build issue with zlib.
==== podman ====
Version update (4.4.4 -> 4.5.0)
Subpackages: podman-cni-config
- Update to version 4.5.0:
* Release v4.5.0
* [CI:DOCS] Final release notes for v4.5.0
* Quadlet - do not set log-driver by default
* Return title fields as a list
* Bump to v4.5.0-dev
* Bump to v4.5.0-RC2
* Final release notes for v4.5.0-RC2
* test/e2e: remove unnecessary SkipIfNetavark() calls
* test/e2e: deduplicated network test
* docs: update podman-network-create.1
* network create: add --interface-name
* test/system/252-quadlet.bats: fix flake
* Read kube_generate_type from containers.conf
* Debian setup: workaround for runc /dev/char/10:200 bug
* pkg/rootless: use catatonit from /usr/libexec/podman
* rootless: make sure we only use a single pause process
* Use atomic config writing strategy for podman machine config files
* Add remaining release notes for v4.5.0-RC2
* GHA: Use version instead of SHA for actions
* chore(deps): update dependency containers/automation_images to v20230405
* build: pass env by reference
* test: retrofit error message
* test/system: expect 12 char for short id
* vendor: bump containers/(storage, common, buildah, image)
* [skip-ci] Update actions/upload-artifact action to v3
* [skip-ci] Update actions/stale action to v8
* [skip-ci] Update actions/setup-go action to v4
* [skip-ci] Update github/issue-labeler action to v2.6
* Fix up codespell errors
* Capitalize all uid,gid and id words that are not options in docs
* build(deps): bump golang.org/x/tools from 0.7.0 to 0.8.0 in /test/tools
* Properly remove the service container during kube down
* quadlet: add `UserNS` option key
* [CI:DOCS] Release notes for 4.5.0 Part 1
* "podman pull by digest and list --all" test: untag instead of rmi
* build(deps): bump golang.org/x/text from 0.8.0 to 0.9.0
* Add renovate.json configuration
* CI: postbuild step: skip under nightly treadmill
* The `--ulimit` option accepts the name with an `RLIMIT_` prefix both upper and lower case
* test/e2e: use custom network config dir where needed
* chore: replace `github.com/ghodss/yaml` with `sigs.k8s.io/yaml`
* update completion scripts for cobra v1.7.0
* libpod.storageService.CreateContainerStorage(): retrieve ID maps
* Fix invalid pod name and hostname during kube generate
* e2e tests: fix racy flakes
* Cirrus: Enable labeling of EC2 VMs
* Cirrus: Fix aarch64 clone_script 404 errors
* e2e: GinkgoParallelNode() -> ...Process()
* build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
* build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0
* [CI:DOCS] --creds and registries
* Copr: fix build deps for /usr/bin/envsubst
* Don't error when removing non-existant env vars
* e2e: healthcheck on stopped container: fix flake
* test/apiv2/80-kube.at
* test/apiv2/80-kube.at
* system service: do not close Body
* rm `hack/release.sh`
* build(deps): bump github.com/onsi/gomega from 1.27.5 to 1.27.6
* add `quadlet -version` flag
* add version/rawversion package
* quadlet: use `Flag` suffix for variables
* quadlet: implement `Tmpfs` option
* Bump to v4.5.0-dev
* Bump to 4.5.0-rc1
* Update release notes from 4.4 branch
* rootless netns: recover from invalid netns
* System tests: unverbosify a flake log
* Add support for secret exists
* Fix Win install task failures with large PR bodies
* docs: add `starting` to `HealthCheckResults.Status`
* Add support for cgroup_config from containers.conf
* libpod: mount safely subpaths
* Support Deployment generation with kube generate
* Use secret.items to create volume mounts if present
* [CI:DOCS] fix typo in --systemd option
* rootless: drop preexec hook error message
* Edit the docker wrapper to use the install prefix
* Update podman-for-windows.md
* Quadlet: RemapUsers documentation fixes
* speed up image listing
* vendor containers/common@e27c30ee9b1b
* fix volume-plugin-test flake
* Document building Podman remote on Windows hosts
* test/e2e: gpg keep stdout/err attached
* auto-update: stop+start instead of restart sytemd units
* [CI:DOCS] Improve basic tutorial
* Update docs/source/markdown/podman-network.1.md
* Add debug to --wait test
* fix slirp4netns resolv.conf ip with a userns
* Quadlet: add support for keep-id with mapping values
* Quadlet E2E test - run quadlet as user generator
* sqlite: do not `Ping()` after connecting
* Quadlet - treat paths starting with systemd specifiers as absolute
* Update docs/source/markdown/podman-kube-play.1.md.in
* system tests: use CONTAINERS_CONF_OVERRIDE
* implement podman machine set for hyperv
* [CI:DOCS] Add network subnets info to network man page
... changelog too long, skipping 332 lines ...
- Don't build against EoL go versions, fixes bsc#1210299
==== powerdevil5 ====
Subpackages: powerdevil5-lang
- Cleanup build dependencies:
* Remove unused KDELibs4Support and KF5Wayland
* Explicitly add KF5Crash, KF5DocTools and KF5Notifications
* Update required versions.
==== publicsuffix ====
Version update (20230226 -> 20230414)
- Update to version 20230414:
* util: gTLD data autopull updates for 2023-04-14T15:13:16 UTC (#1738)
* Change - update comments/policy for the French ccTLDs (`.fr`, `.pm`, `.re`, `.tf`, `.wf`, `.yt`) by Administrator (#1732)
* New policy for .museum, without all the SLD (Second-Level Domains) (#1729)
* Add ladesk.com (#1538)
* util: gTLD data autopull updates for 2023-03-18T15:13:12 UTC (#1723)
* util: gTLD data autopull updates for 2023-03-08T15:15:40 UTC (#1714)
* Additional ngrok domains - more `ngrok.io` from #48 + `ngrok.app` `ngrok-free.app` `ngrok.dev` `ngrok-free.dev` `ngrok.pizza` (#1653)
* Add `ie.ua` (#1597)
==== python-redis ====
Version update (4.3.3 -> 4.5.4)
- Update to 4.5.4:
* Security
+ Cancelling an async future does not, properly trigger, leading to a
potential data leak in specific cases. (CVE-2023-28858, bsc#1209811)
+ Cancelling an async future does not, properly trigger, leading to a
potential data leak in specific cases. (CVE-2023-28859, bsc#1209812)
* New Features
+ Introduce AbstractConnection so that UnixDomainSocketConnection can
call super().init (#2588)
+ Added queue_class to REDIS_ALLOWED_KEYS (#2577)
+ Made search document subscriptable (#2615)
+ Sped up the protocol parsing (#2596)
+ Use hiredis::pack_command to serialized the commands. (#2570)
+ Add support for unlink in cluster pipeline (#2562)
* Bug Fixes
+ Fixing cancelled async futures (#2666)
+ Fix: do not use asyncio's timeout lib before 3.11.2 (#2659)
+ Fix UDS in v4.5.2: UnixDomainSocketConnection missing constructor
argument (#2630)
+ CWE-404 AsyncIO Race Condition Fix (#2624, #2579)
+ Fix behaviour of async PythonParser to match RedisParser as for
issue #2349 (#2582)
+ Replace async_timeout by asyncio.timeout (#2602)
+ Update json().arrindex() default values (#2611)
+ Fix #2581 UnixDomainSocketConnection object has no attribute
_command_packer (#2583)
+ Fix issue with pack_commands returning an empty byte sequence (#2416)
+ Async HiredisParser should finish parsing after a
Connection.disconnect() (#2557)
+ Check for none, prior to raising exception (#2569)
+ Tuple function cannot be passed more than one argument (#2573)
+ Synchronise concurrent command calls to single-client to single-client
mode (#2568)
+ Async: added 'blocking' argument to call lock method (#2454)
+ Added a replacement for the default cluster node in the event of
failure. (#2463)
+ Fixed geosearch: Wrong number of arguments for geosearch command (#2464)
- Clean up BuildRequires and Requires.
- Disable broken test test_xautoclaim gh#redis/redis-py#2554
- udpate to 4.3.5:
* Add support for TIMESERIES 1.8 (#2296)
* Graph - add counters for removed labels and properties (#2292)
* Add support for TDIGEST.QUANTILE extensions (#2317)
* Add TDIGEST.TRIMMED_MEAN (#2300)
* Add support for async GRAPH module (#2273)
* Support TDIGEST.MERGESTORE and make compression optional on TDIGEST.CREATE
(#2319)
* Adding reserve as an alias for create, so that we have BF.RESERVE and
CF.RESERVE accuratenly supported (#2331)
* Fix async connection.is_connected to return a boolean value (#2278)
* Fix: workaround asyncio bug on connection reset by peer (#2259)
* Fix crash: key expire while search (#2270)
* Async cluster: fix concurrent pipeline (#2280)
* Fix async SEARCH pipeline (#2316)
* Fix KeyError in async cluster - initialize before execute multi key
commands (#2439)
* Supply chain risk reduction: remove dependency on library named deprecated
(#2386)
* Search test - Ignore order of the items in the response (#2322)
* Fix GRAPH.LIST & TDIGEST.QUANTILE tests (#2335)
* Fix TimeSeries range aggregation (twa) tests (#2358)
* Mark TOPK.COUNT as deprecated (#2363)
- update to 4.3.4:
* Fix backward compatibility from 4.3.2 in Lock.acquire()
* Fix XAUTOCLAIM to return the full response, instead of only keys 2+
* Added dynamic_startup_nodes configuration to RedisCluster.
* Fix retries in async mode
* Async cluster: fix simultaneous initialize
* Uppercased commands in CommandsParser.get_keys
* Late eval of the skip condition in async tests
* Reuse the old nodes' connections when a cluster topology refresh is being done
* Docs: add pipeline examples
* Correct retention_msecs value
* Cluster: use pipeline to execute split commands
* Docs: Add a note about client_setname and client_name difference
==== redis ====
Version update (7.0.8 -> 7.0.11)
- redis 7.0.11
- (CVE-2023-28856) Authenticated users can use the HINCRBYFLOAT
command to create an invalid hash field that will crash Redis
on access (boo#1210548)
- Add a missing fsync of AOF file in rare cases
- Disconnect pub-sub subscribers when revoking allchannels
permission
- Fix a compiler fortification induced crash when used with link
time optimizations
- Drop get-old-size-calculations.patch:
replaced with proper fix
- Added get-old-size-calculations.patch:
my workaround for https://github.com/redis/redis/issues/11965
- redis 7.0.10
* CVE-2023-28425: Specially crafted MSETNX command can lead to
assertion and denial-of-service (boo#1209528)
* Large blocks of replica client output buffer may lead to psync
loops and unnecessary memory usage
* Fix CLIENT REPLY OFF|SKIP to not silence push notifications
* Trim excessive memory usage in stream nodes when exceeding
`stream-node-max-bytes`
* Fix module RM_Call commands failing with OOM when maxmemory is
changed to zero
- redis 7.0.9
* CVE-2023-25155: Specially crafted SRANDMEMBER, ZRANDMEMBER, and
HRANDFIELD commands can trigger an integer overflow, resulting
in a runtime assertion and termination of the Redis server
process. Previously patched, drop
Integer-Overflow-in-RAND-commands-can-lead-to-assert.patch
* CVE-2022-36021: String matching commands (like SCAN or KEYS)
with a specially crafted pattern to trigger a denial-of-service
attack on Redis, causing it to hang and consume 100% CPU time.
Previously upatched, drop
String-pattern-matching-had-exponential-time-complex.patch
* Fix a crash when reaching the maximum invalidations limit of
client-side tracking
* Fix a crash when SPUBLISH is used after passing the
cluster-link-sendbuf-limit
* Fix possible memory corruption in FLUSHALL when a client
watches more than one key
* Fix cluster inbound link keepalive time
* Flush propagation list in active-expire of writable replicas to
fix an assertion
* Avoid propagating DEL of lazy expire from SCAN and RANDOMKEY as
MULTI-EXEC
* Avoid realloc to reduce size of strings when it is unneeded
* Improve CLUSTER SLOTS reply efficiency for non-continuous slots
==== snapper ====
Subpackages: snapper-zypp-plugin
- allow to show read-only state in list output and allow to
change read-only state (gh#openSUSE/snapper#804)
- support read-only options for LVM
- allow to set a snapshot as default (gh#openSUSE/snapper#803)
- avoid stale btrfs qgroups on transactional systems (bsc#1210151)
1
0