Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
NetworkManager
NetworkManager-branding-openSUSE
SVT-AV1 (1.0.0 -> 1.2.0)
accountsservice
bind
bluedevil5 (5.25.3 -> 5.25.4)
breeze (5.25.3 -> 5.25.4)
breeze-gtk (5.25.3 -> 5.25.4)
coreutils
discover (5.25.3 -> 5.25.4)
drkonqi5 (5.25.3 -> 5.25.4)
flatpak
gdm
gedit (42.1 -> 42.2)
gvfs
kactivitymanagerd (5.25.3 -> 5.25.4)
kcm_sddm (5.25.3 -> 5.25.4)
kde-cli-tools5 (5.25.3 -> 5.25.4)
kde-gtk-config5 (5.25.3 -> 5.25.4)
kgamma5 (5.25.3 -> 5.25.4)
khotkeys5 (5.25.3 -> 5.25.4)
kinfocenter5 (5.25.3 -> 5.25.4)
kmenuedit5 (5.25.3 -> 5.25.4)
kscreen5 (5.25.3 -> 5.25.4)
kscreenlocker (5.25.3 -> 5.25.4)
ksshaskpass5 (5.25.3 -> 5.25.4)
ksystemstats5 (5.25.3 -> 5.25.4)
kwayland-integration (5.25.3 -> 5.25.4)
kwin5 (5.25.3 -> 5.25.4)
kwrited5 (5.25.3 -> 5.25.4)
layer-shell-qt (5.25.3 -> 5.25.4)
ldb (2.5.1 -> 2.5.2)
libbpf (0.8.0 -> 0.8.1)
libkdecoration2 (5.25.3 -> 5.25.4)
libkscreen2 (5.25.3 -> 5.25.4)
libksysguard5 (5.25.3 -> 5.25.4)
libnotify (0.7.12 -> 0.8.1)
libostree (2021.6 -> 2022.5)
milou5 (5.25.3 -> 5.25.4)
nano (6.3 -> 6.4)
oxygen5-sounds (5.25.3 -> 5.25.4)
pcre2
plasma-browser-integration (5.25.3 -> 5.25.4)
plasma-nm5 (5.25.3 -> 5.25.4)
plasma5-addons (5.25.3 -> 5.25.4)
plasma5-desktop (5.25.3 -> 5.25.4)
plasma5-disks (5.25.3 -> 5.25.4)
plasma5-integration (5.25.3 -> 5.25.4)
plasma5-openSUSE
plasma5-pa (5.25.3 -> 5.25.4)
plasma5-systemmonitor (5.25.3 -> 5.25.4)
plasma5-thunderbolt (5.25.3 -> 5.25.4)
plasma5-workspace (5.25.3 -> 5.25.4)
polkit-default-privs (1550+20220608.097448e -> 1550+20220727.3ce2e2f)
polkit-kde-agent-5 (5.25.3 -> 5.25.4)
powerdevil5 (5.25.3 -> 5.25.4)
python-M2Crypto
python-ipython
python-sympy
samba (4.16.2+git.288.4d64e4651f0 -> 4.16.4+git.297.1497eb221ed)
systemsettings5 (5.25.3 -> 5.25.4)
texinfo
xdg-desktop-portal-kde (5.25.3 -> 5.25.4)
=== Details ===
==== NetworkManager ====
Subpackages: NetworkManager-bluetooth NetworkManager-lang NetworkManager-tui NetworkManager-wwan libnm0 typelib-1_0-NM-1_0
- Create /etc/NetworkManager/conf.d by default, allowing easy
override for NetworkManager.conf file with drop-in.
- Move default config file to
/usr/lib/NetworkManager/NetworkManager.conf, as part of main
package.
- Branding upstream package is now just a config drop-in to
disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.
==== NetworkManager-branding-openSUSE ====
- Move conncheck config file out of /etc. No longer
import main config file.
==== SVT-AV1 ====
Version update (1.0.0 -> 1.2.0)
- Update to release 1.2.0
* TPL tradeoff optimizations for 4L pred structure
* Quality-vs-cycles tradeoff improvements across all presets
* Add ability to force key_frame positions through ffmpeg for
CRF mode
* Minimize the quality impact of fast-decode while maintaining
the decoder speedup
* AVX2 optimizations for low delay mode
* Improve CRF preset tradeoffs for both the default and
fast-decode modes
* Improve the SSIM-based tradeoffs of the presets without
impacting those of PSNR / VMAF
* Improve CBR mode by enhancing the bit-distribution within the
GOP
* Added support for reference frame scaling
* Added support for quantization matrices
* AVX2 optimizations for low-delay mode
* TPL-based VBR mode improvements
* Improved Chroma RDOQ
* Improve TPL QP Scaling
* Add length info to ivf header
* Fix support for metadata pass-through
* Add ability to specify Chroma and Luma qindex offsets
independently on top of CRF qp assignments
==== accountsservice ====
Subpackages: accountsservice-lang libaccountsservice0 typelib-1_0-AccountsService-1_0
- Remove BuildIgnore for rpmlint-mini. This is a violation of the
security policies applying to SUSE products as it circumvents the
SUSE security team's control over what enters Factory and what
not.
- Allow to build without vala support.
- Refresh harden_accounts-daemon.service.patch to not duplicate
existing entries.
==== bind ====
- When enabling query_logging by un-commenting an example in
bind.conf, named attempts to create a file in /var/log which
fails due to missing credentials. This also applies to the
"dump-file" and the "statistics-file".
This is solved by having systemd-tmpfiles create a subdirectory
"/var/log/named" owned by named:named and changing the file
paths accordingly:
/var/log/named_querylog -> /var/log/named/querylog
/var/log/named_dump.db -> /var/log/named/dump.db
/var/log/named.stats -> /var/log/named/stats
Also, in "named.service", the ReadWritePath was changed to
include "/var/log/named" rather than just "var/log".
[bsc#1200685, bind.conf, vendor-files/config/named.conf,
vendor-files/system/named.service]
==== bluedevil5 ====
Version update (5.25.3 -> 5.25.4)
Subpackages: bluedevil5-lang
- Update to 5.25.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.25.4
- No code changes since 5.25.3
==== breeze ====
Version update (5.25.3 -> 5.25.4)
Subpackages: breeze5-cursors breeze5-decoration breeze5-style breeze5-style-lang breeze5-wallpapers libbreezecommon5-5
- Update to 5.25.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.25.4
- Changes since 5.25.3:
* kstyle: Use menuTitle font metrics for size calculation (kde#443805)
==== breeze-gtk ====
Version update (5.25.3 -> 5.25.4)
Subpackages: gtk2-metatheme-breeze gtk3-metatheme-breeze metatheme-breeze-common
- Update to 5.25.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.25.4
- No code changes since 5.25.3
==== coreutils ====
Subpackages: coreutils-doc coreutils-lang
- add missing hostname buildrequires
- refresh coreutils-i18n.patch to prevent unexpand from failing on control
characters (brc#2112870) (bsc#1202029)
- extend psuffix handling to be quilt(1) compatible
==== discover ====
Version update (5.25.3 -> 5.25.4)
Subpackages: discover-backend-flatpak discover-backend-fwupd discover-backend-packagekit discover-lang discover-notifier
- Update to 5.25.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.25.4
- Changes since 5.25.3:
* Fix crash after update (kde#457278)
* Do not change the sorting among resources in the default backend (kde#451667)
* Sources: Give a minimum size to section headers (kde#434349)
* fwupd: Make sure we don't crash trying to print an error (kde#455132)
* kns: Make KNSReview aware of its possible lack of AtticaProvider (kde#457145)
* AppListPage: Make sure the PlaceholderMessage doesn't get in the way (kde#457029)
* appstream: Do not treat spdx operators as licenses
* appstream: Treat unknown licences
* kns: join into the AppStreamUtils::license party
* pk: Try harder to convert non-appstream packages licences (kde#454480)
* pk: Allow some error codes from offline updates (kde#443090)
* snap: Do not install a categories file (kde#456889)
* Do not warn anymore about missing categories
* odrs: Make sure we don't fail when the application page is opened early (kde#426270)
* Fix submitting usefulness
==== drkonqi5 ====
Version update (5.25.3 -> 5.25.4)
Subpackages: drkonqi5-lang
- Update to 5.25.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.25.4
- No code changes since 5.25.3
==== flatpak ====
Subpackages: libflatpak0 system-user-flatpak
- variant-schema-compiler requires the Python module pyparsing
==== gdm ====
Subpackages: gdm-lang gdm-schema gdmflexiserver libgdm1 typelib-1_0-Gdm-1_0
- Fix specfile: Adapt macros %_pam_moduledir (boo#1191033).
==== gedit ====
Version update (42.1 -> 42.2)
Subpackages: gedit-lang python3-gedit
- Update to version 42.2:
+ Fix bug: text cut off at the bottom in certain situations.
+ Updated translations.
==== gvfs ====
Subpackages: gvfs-backend-afc gvfs-backend-samba gvfs-backends gvfs-fuse gvfs-lang
- recommend pkexec in gvfs-backends. (not requires to allow customers
to remove pkexec) (bsc#1202070)
==== kactivitymanagerd ====
Version update (5.25.3 -> 5.25.4)
Subpackages: kactivitymanagerd-lang
- Update to 5.25.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.25.4
- No code changes since 5.25.3
==== kcm_sddm ====
Version update (5.25.3 -> 5.25.4)
Subpackages: kcm_sddm-lang
- Update to 5.25.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.25.4
- No code changes since 5.25.3
==== kde-cli-tools5 ====
Version update (5.25.3 -> 5.25.4)
Subpackages: kde-cli-tools5-lang
- Update to 5.25.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.25.4
- No code changes since 5.25.3
==== kde-gtk-config5 ====
Version update (5.25.3 -> 5.25.4)
Subpackages: kde-gtk-config5-gtk3
- Update to 5.25.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.25.4
- No code changes since 5.25.3
==== kgamma5 ====
Version update (5.25.3 -> 5.25.4)
Subpackages: kgamma5-lang
- Update to 5.25.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.25.4
- No code changes since 5.25.3
==== khotkeys5 ====
Version update (5.25.3 -> 5.25.4)
Subpackages: khotkeys5-lang
- Update to 5.25.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.25.4
- No code changes since 5.25.3
==== kinfocenter5 ====
Version update (5.25.3 -> 5.25.4)
Subpackages: kinfocenter5-lang
- Update to 5.25.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.25.4
- Changes since 5.25.3:
* Add missing include on <array>
==== kmenuedit5 ====
Version update (5.25.3 -> 5.25.4)
Subpackages: kmenuedit5-lang
- Update to 5.25.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.25.4
- No code changes since 5.25.3
==== kscreen5 ====
Version update (5.25.3 -> 5.25.4)
Subpackages: kscreen5-lang kscreen5-plasmoid
- Update to 5.25.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.25.4
- No code changes since 5.25.3
==== kscreenlocker ====
Version update (5.25.3 -> 5.25.4)
Subpackages: kscreenlocker-lang libKScreenLocker5
- Update to 5.25.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.25.4
- No code changes since 5.25.3
==== ksshaskpass5 ====
Version update (5.25.3 -> 5.25.4)
Subpackages: ksshaskpass5-lang
- Update to 5.25.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.25.4
- No code changes since 5.25.3
==== ksystemstats5 ====
Version update (5.25.3 -> 5.25.4)
Subpackages: ksystemstats5-lang
- Update to 5.25.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.25.4
- No code changes since 5.25.3
==== kwayland-integration ====
Version update (5.25.3 -> 5.25.4)
- Update to 5.25.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.25.4
- No code changes since 5.25.3
==== kwin5 ====
Version update (5.25.3 -> 5.25.4)
Subpackages: kwin5-lang
- Update to 5.25.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.25.4
- Changes since 5.25.3:
* Update QtQuick views at the start of the frame
* xkb: Use Ctrl+Mrys+Zenkaku_Hankaku to toggle the touchpad
* input: don't forward gestures used by KWin to applications (kde#455952)
* effects/private: Raise currently dragged window higher than anything (kde#456936)
* Fix activity swtiching through UserActions menu (kde#456873)
* backends/drm: fix build
* backends/drm: fix memory leak
* backends/drm: explicitly initialize all fields of drmModeModeInfo
* effects/colorpicker: Fix picking colors (kde#454974)
* wayland/tablet_v2: Keep also the pad surface in a QPointer (kde#456817)
* Support keyboard navigation between windows across desktops (kde#456068)
* Make DesktopView a FocusScope
* Accept keys in windowheap conditionally
* activation: Be liberal about the StartupWMClass
* activation: Fix activation notification of Xwayland clients (kde#455265)
* activation: Simplify icon loading logic
* x11: Fix shading with non-zero border (kde#450582)
* backends/drm: don't crash if importing a texture fails
* Swapping desktops: only swap windows on current activity. (kde#386769)
* Don't use Plasma-themed icons in Present Windows (kde#455368)
* TabBox: Fix loading a different switcher after one has failed (kde#445455)
* backends/drm: handle broken legacy drivers better (kde#453860)
* wayland/drmlease: split up DrmLeaseV1Interface::deny
* wayland/drmlease: correct DrmLeaseDeviceV1Interface::setDrmMaster
* drmlease: send device done event correctly
==== kwrited5 ====
Version update (5.25.3 -> 5.25.4)
- Update to 5.25.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.25.4
- No code changes since 5.25.3
==== layer-shell-qt ====
Version update (5.25.3 -> 5.25.4)
- Update to 5.25.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.25.4
- No code changes since 5.25.3
==== ldb ====
Version update (2.5.1 -> 2.5.2)
Subpackages: libldb2 python3-ldb
- Update to version 2.5.2;
+ CVE-2022-32746: Use-after-free occurring in database audit
logging module; (bso#15009); (bsc#1201490);
==== libbpf ====
Version update (0.8.0 -> 0.8.1)
- Update to release 0.8.1:
* make shared xsk creation network namespace aware
==== libkdecoration2 ====
Version update (5.25.3 -> 5.25.4)
Subpackages: libkdecorations2-5 libkdecorations2-5-lang libkdecorations2private9
- Update to 5.25.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.25.4
- No code changes since 5.25.3
==== libkscreen2 ====
Version update (5.25.3 -> 5.25.4)
Subpackages: libKF5Screen7 libkscreen2-plugin
- Update to 5.25.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.25.4
- No code changes since 5.25.3
==== libksysguard5 ====
Version update (5.25.3 -> 5.25.4)
Subpackages: ksysguardsystemstats-data libKSysGuardSystemStats1 libksysguard5-imports libksysguard5-lang libksysguard5-plugins
- Update to 5.25.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.25.4
- No code changes since 5.25.3
==== libnotify ====
Version update (0.7.12 -> 0.8.1)
Subpackages: libnotify4 typelib-1_0-Notify-0_7
- Update to version 0.8.1:
+ Keep version of bindings at 0.7.
- Changes from version 0.8.0:
+ Use Desktop Portal Notification when running confined (snap and
flatpak).
+ Now the library acts like a wrapper in such scenario, with some
limited.
+ capabilities, but this will enforce security and user control
over the allowed notifications.
+ notify-send: Handles SIGINT gracefully, closing waiting
notification.
+ Use NotifyClosedReason enum as closed reason return value.
+ Bump dependency on GLib 2.38.
+ Various introspection docs improvements and fixes.
- Use ldconfig_scriptlets macro for post(un) handling.
==== libostree ====
Version update (2021.6 -> 2022.5)
Subpackages: libostree-1-1
- update to 2022.5:
+ Greatly improved performance for ostree prune on large repositories
+ Support for in-place kargs changes
+ includes a fix for ed25519: Invalid out of bound reads
Did not affect previous openSUSE packages [boo#1201800]
- includes changes from 2022.4:
+ A new repository option bls-append-except-default intended to
help with enabling GRUB password locking
+ Further fixes for s390x SE
+ Several API additions and fixes to the Rust bindings
- includes changes from 2022.3:
+ GLib requirement to 2.66
+ documentation for using IMA with ostree
+ A few static analyzer fixes
+ refcounting fix in OstreeRepoAutoTransaction
+ close longstanding conflict between ostree and per-machine
SELinux policy customizations
+ ostree learned how to use bubblewrap to create a container
targeting the pending deployment to re-build the policy if
necessary
- includes changes from 2022.2:
+ improve reliability of pulls with static deltas
+ new ostree prune --commit-only
- includes changes from 2022.1:
+ add transparent support for external sub-commands on the ostree
binary. Custom binaries present in PATH in the form of
ostree-<subcmd> will be now used as a fallback for sub-
commands that are not natively implemented.
+ address some static analysis warnings
+ The git submodule for bsdiff has been updated to latest
upstream revision, picking up additional bound-checks and
fixing CVE-2014-9862 boo#1201770
- enable ed25519 support with libsodium, introduced with 2020.4
- switch to upstream tarball
==== milou5 ====
Version update (5.25.3 -> 5.25.4)
Subpackages: milou5-lang
- Update to 5.25.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.25.4
- No code changes since 5.25.3
==== nano ====
Version update (6.3 -> 6.4)
Subpackages: nano-lang
- update to 6.4:
* The file browser does not crash when moving up to the root folder.
* Softwrapping very long lines is done more efficiently.
* Invoking the formatter does not blink the screen.
==== oxygen5-sounds ====
Version update (5.25.3 -> 5.25.4)
- Update to 5.25.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.25.4
- No code changes since 5.25.3
==== pcre2 ====
Subpackages: libpcre2-16-0 libpcre2-32-0 libpcre2-8-0
- Fix the profiling call to be non-parallel again (fighting spec cleaner)
==== plasma-browser-integration ====
Version update (5.25.3 -> 5.25.4)
Subpackages: plasma-browser-integration-lang
- Update to 5.25.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.25.4
- No code changes since 5.25.3
==== plasma-nm5 ====
Version update (5.25.3 -> 5.25.4)
Subpackages: plasma-nm5-lang plasma-nm5-openvpn
- Update to 5.25.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.25.4
- No code changes since 5.25.3
==== plasma5-addons ====
Version update (5.25.3 -> 5.25.4)
Subpackages: plasma5-addons-lang
- Update to 5.25.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.25.4
- Changes since 5.25.3:
* applets/calculator: read the answer after pressing `=`
* applets/calculator: move focus to the corresponding button when pressing keys
* applets/colorpicker: press space to open color menu
* applets/colorpicker: add name to color rectangle
* applets/fuzzy-clock: add a11y properties
* [applets/comic] Fix configurationRequired and busy state when deactivating the last provider
* [applets/comic] Update providers list after (un)installing provider
* Add missing include to array
* [applets/comic] Disable most context menu actions when comic is not ready (kde#406991)
* Remove clipPath portion of SVG (kde#399568)
==== plasma5-desktop ====
Version update (5.25.3 -> 5.25.4)
Subpackages: plasma5-desktop-emojier plasma5-desktop-lang
- Update to 5.25.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.25.4
- Changes since 5.25.3:
* Fix mouse settings not being loaded when a mouse is connected (kde#435113)
* applets/kimpanel: add accessible properties
* applets/kimpanel: add keyboard navigation support
* applets/kickoff: add text to allow screen reader to read button name
* applets/taskmanager: use `model.display` in accessible properties
* [applets/pager] Fix button group management on configuration page (kde#456525)
* applets/taskmanager: press `Esc` to close group dialog
* [kcms/landingpage] Strip whitespace at the beginning of a telemetry description
==== plasma5-disks ====
Version update (5.25.3 -> 5.25.4)
Subpackages: plasma5-disks-lang
- Update to 5.25.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.25.4
- No code changes since 5.25.3
==== plasma5-integration ====
Version update (5.25.3 -> 5.25.4)
Subpackages: plasma5-integration-plugin plasma5-integration-plugin-lang
- Update to 5.25.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.25.4
- No code changes since 5.25.3
==== plasma5-openSUSE ====
Subpackages: plasma5-defaults-openSUSE plasma5-theme-openSUSE plasma5-workspace-branding-openSUSE sddm-theme-openSUSE
- Update to 5.25.4
==== plasma5-pa ====
Version update (5.25.3 -> 5.25.4)
Subpackages: plasma5-pa-lang
- Update to 5.25.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.25.4
- Changes since 5.25.3:
* VolumeMonitor: Don't set stream on source output monitor
==== plasma5-systemmonitor ====
Version update (5.25.3 -> 5.25.4)
Subpackages: plasma5-systemmonitor-lang
- Update to 5.25.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.25.4
- No code changes since 5.25.3
==== plasma5-thunderbolt ====
Version update (5.25.3 -> 5.25.4)
Subpackages: plasma5-thunderbolt-lang
- Update to 5.25.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.25.4
- No code changes since 5.25.3
==== plasma5-workspace ====
Version update (5.25.3 -> 5.25.4)
Subpackages: gmenudbusmenuproxy plasma5-session plasma5-session-wayland plasma5-workspace-lang plasma5-workspace-libs xembedsniproxy
- Update to 5.25.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.25.4
- Changes since 5.25.3:
* wallpaper/slideshow: shouldn't display "current" item in image list (kde#457327)
* Disable toplevel fixed positions on Wayland
* runners/helprunner: Fix launching of plasmasearch kcm with args
* [kicker/kickoff] Fix urls for search results (kde#456984)
* applets/icon: fix invalid `Accessible.description`
* applets/devicenotifier: improve accessible properties
* applets/batterymonitor: add accessible properties to slider
* [FIX] Unable to remove manually added wallpaper (kde#457019)
* kcms/colors: make sure the preview uses the right colours (kde#456648)
* Don't break configuration when saving layouts
* [Notifications] When there is no thumbnail available, use file icon as drag pixmap
* [Notifications] Ignore stopped job in job aggregator
* [applet/{analog,digital}-clock] Use `onPressed: wasExpanded = ...` idiom
* Fix non-functional lockscreen due to bad cherry-pick (kde#456639)
- Drop patches, now upstream:
* 0001-Fix-non-functional-lockscreen-due-to-bad-cherry-pick.patch
==== polkit-default-privs ====
Version update (1550+20220608.097448e -> 1550+20220727.3ce2e2f)
- Update to version 1550+20220727.3ce2e2f:
* iio-sensor-proxy (bsc#1201558): add claim-sensor action
==== polkit-kde-agent-5 ====
Version update (5.25.3 -> 5.25.4)
Subpackages: polkit-kde-agent-5-lang
- Update to 5.25.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.25.4
- No code changes since 5.25.3
==== powerdevil5 ====
Version update (5.25.3 -> 5.25.4)
Subpackages: powerdevil5-lang
- Update to 5.25.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.25.4
- Changes since 5.25.3:
* Update battery notifications if they remain open
* When battery drains, show a notification even when AC is plugged in
==== python-M2Crypto ====
- update CVE-2020-25657-Bleichenbacher-attack.patch to actually
contain the fix rather than just being empty (CVE-2020-25657,
bsc#1178829)
==== python-ipython ====
- Add ipython-pr13714-xxlimited.patch gh#ipython/ipython#13714
- Remove nbformat from the :test flavor. Run locally
`--with localtests` for not skipping the tests.
==== python-sympy ====
- Switch off tests (they run 7h53m47s).
==== samba ====
Version update (4.16.2+git.288.4d64e4651f0 -> 4.16.4+git.297.1497eb221ed)
Subpackages: libsamba-policy0-python3 samba-ad-dc-libs samba-client samba-client-libs samba-libs samba-libs-python3 samba-python3
- Update to 4.16.4
* CVE-2022-2031: Samba AD users can bypass certain restrictions
associated with changing passwords; (bsc#1201495); (bso#15047);
* CVE-2022-32744: Samba AD users can forge password change
requests for any user; (bsc#1201493); (bso#15074);
* CVE-2022-32745: Samba AD users can crash the server process
with an LDAP add or modify request; (bsc#1201492); (bso#15008);
* CVE-2022-32746: Samba AD users can induce a use-after-free in
the server process with an LDAP add or modify request;
(bsc#1201490); (bso#15009);
* CVE-2022-32742: Server memory information leak via SMB1;
(bsc#1201496); (bso#15085);
- Update to 4.16.3
* Using vfs_streams_xattr and deleting a file causes a panic;
(bso#15099);
* Add support for bind 9.18; (bso#14986);
* logging dsdb audit to specific files does not work;
(bso#15076);
* Problem when winbind renews Kerberos; (bso#14979);
(bsc#1196224);
* Samba with new lorikeet-heimdal fails to build on gcc 12.1 in
developer mode; (bso#15095);
* Crash in streams_xattr because fsp->base_fsp->fsp_name is
NULL; (bso#15105);
* Crash in rpcd_classic - NULL pointer deference in
mangle_is_mangled(); (bso#15118);
* smbclient commands del & deltree fail with
NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);
(bsc#1200556);
* Fix check for chown when processing NFSv4 ACL; (bso#15120);
* The pcap background queue process should not be stopped;
(bso#15082);
* testparm: Fix typo in idmap rangesize check; (bso#15097);
* net ads info returns LDAP server and LDAP server name as
null; (bso#15106);
* ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link;
(bso#15108);
* CTDB child process logging does not work as expected;
(bso#15090);
==== systemsettings5 ====
Version update (5.25.3 -> 5.25.4)
Subpackages: systemsettings5-lang
- Update to 5.25.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.25.4
- Changes since 5.25.3:
* Fix showing translations for kinfocenter
==== texinfo ====
Subpackages: info info-lang info-std
- In case of an update of package info: do never remove existing
info page from dir file (boo#1201852)
- Do lua scripting only once for execute() function
- Check for filetrigger lua scriplets if rpm.execute() as function
call is given and used this
==== xdg-desktop-portal-kde ====
Version update (5.25.3 -> 5.25.4)
Subpackages: xdg-desktop-portal-kde-lang
- Update to 5.25.4
* New bugfix release
* For more details please see:
* https://kde.org/announcements/plasma/5/5.25.4
- No code changes since 5.25.3
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the aarch64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=microos&groupid=3&version…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
Mesa (22.1.3 -> 22.1.4)
Mesa-drivers (22.1.3 -> 22.1.4)
MozillaFirefox (101.0.1 -> 103.0.1)
apparmor (3.0.5 -> 3.0.6)
bind
firewalld
gdb (11.1 -> 12.1)
gnome-settings-daemon
gnutls (3.7.6 -> 3.7.7)
iso-codes (4.10.0 -> 4.11.0)
kernel-source (5.18.12 -> 5.18.15)
libapparmor (3.0.5 -> 3.0.6)
libavif
libblockdev (2.26 -> 2.27)
libgcrypt
libgsm (1.0.19 -> 1.0.20)
libnvme (1.1~rc0 -> 1.1)
mokutil (0.5.0 -> 0.6.0)
mozilla-nss (3.79 -> 3.80)
mpg123 (1.30.1 -> 1.30.2)
nano
nvme-cli (2.1~rc0 -> 2.1.1)
pandoc (2.17.1.1 -> 2.18)
pipewire
polkit
poppler (22.07.0 -> 22.08.0)
poppler-qt5 (22.07.0 -> 22.08.0)
python-Genshi (0.7.5 -> 0.7.7)
python-Mako (1.1.6 -> 1.2.1)
python-alembic (1.8.0 -> 1.8.1)
python-cffi (1.15.0 -> 1.15.1)
python-cryptography (37.0.2 -> 37.0.4)
python-gobject (3.42.1 -> 3.42.2)
python-hatchling (1.4.1 -> 1.6.0)
python-httpcore (0.14.7 -> 0.15.0)
python-importlib-metadata (4.11.4 -> 4.12.0)
python-ipywidgets (7.6.5 -> 7.7.1)
python-jsonschema (4.5.1 -> 4.8.0)
python-jupyter-core (4.9.2 -> 4.11.1)
python-jupyter_console (6.4.3 -> 6.4.4)
python-jupyterlab (3.2.3 -> 3.4.4)
python-jupyterlab-pygments (0.1.2 -> 0.2.2)
python-nbclassic (0.3.7 -> 0.4.3)
python-notebook
python-numexpr
python-psutil
python-pycairo
python-regex (2022.6.2 -> 2022.7.9)
python-scipy
python-urllib3 (1.26.9 -> 1.26.11)
python-wcwidth
python-widgetsnbextension (3.6.0 -> 3.6.1)
read-only-root-fs (1.0+git20200730.1243fd0 -> 1.0+git20220801.cbb90bc)
rsync
tiff
util-linux-systemd
vim (9.0.0073 -> 9.0.0135)
webkit2gtk3 (2.36.4 -> 2.36.5)
webkit2gtk3-soup2 (2.36.4 -> 2.36.5)
webkit2gtk4 (2.36.4 -> 2.36.5)
xdg-utils (1.1.3+20201113 -> 1.1.3+20210805)
zlib-ng-compat
=== Details ===
==== Mesa ====
Version update (22.1.3 -> 22.1.4)
Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1
- update to 22.1.4:
* anv: disable non uniform indexing of UBOs
* anv: use the right helper to invalidate memory
* intel/fs: ray query fix for global address
* isl: add new helper for format component compatibility
* radeonsi: fix random PS wave size
* r300: Keep rc_rename_regs() from overflowing
* aco/ra: update register file when updating phi definition
* radv: Fix vkCmdCopyQueryResults -> vkCmdResetPool hazard
==== Mesa-drivers ====
Version update (22.1.3 -> 22.1.4)
Subpackages: Mesa-dri Mesa-gallium Mesa-libva
- update to 22.1.4:
* anv: disable non uniform indexing of UBOs
* anv: use the right helper to invalidate memory
* intel/fs: ray query fix for global address
* isl: add new helper for format component compatibility
* radeonsi: fix random PS wave size
* r300: Keep rc_rename_regs() from overflowing
* aco/ra: update register file when updating phi definition
* radv: Fix vkCmdCopyQueryResults -> vkCmdResetPool hazard
==== MozillaFirefox ====
Version update (101.0.1 -> 103.0.1)
- Mozilla Firefox 103.0.1
* Enabled hardware acceleration on newer AMD cards.
* Fixed a crash on Firefox shutdown caused by a bug in the
audio manager
- Mozilla Firefox 103.0
https://www.mozilla.org/en-US/firefox/103.0/releasenotes
MFSA 2022-28 (bsc#1201758)
* CVE-2022-36319 (bmo#1737722)
Mouse Position spoofing with CSS transforms
* CVE-2022-36317 (bmo#1759951)
Long URL would hang Firefox for Android
* CVE-2022-36318 (bmo#1771774)
Directory indexes for bundled resources reflected URL
parameters
* CVE-2022-36314 (bmo#1773894)
Opening local <code>.lnk</code> files could cause unexpected
network loads
* CVE-2022-36315 (bmo#1762520)
Preload Cache Bypasses Subresource Integrity
* CVE-2022-36316 (bmo#1768583)
Performance API leaked whether a cross-site resource is
redirecting
* CVE-2022-36320 (bmo#1759794, bmo#1760998)
Memory safety bugs fixed in Firefox 103
* CVE-2022-2505 (bmo#1769739, bmo#1772824)
Memory safety bugs fixed in Firefox 103 and 102.1
- requires
NSS >= 3.80
rust = 1.61
rust-cbindgen >= 0.24.3
- Move %limit_build set before mozilla config to actually set the
value of %jobs to MOZ_MAKE_FLAGS to fix build on aarch64
- Firefox 102.0.1:
* Fixed: Fixed bookmarks sidebar flashing white when opened in
dark mode (bmo#1776157)
* Fixed: Fixed multilingual spell checking not working with
content in both English and a non-Latin alphabet
(bmo#1773802)
* Fixed: Developer tools: Fixed an issue where the console
output keep getting scrolled to the bottom when the last
visible message is an evaluation result (bmo#1776262)
* Fixed: Fixed *Delete cookies and site data when Firefox is
closed* checkbox getting disabled on startup (bmo#1777419)
* Fixed: Various stability fixes
- Firefox 102.0
* You can now disable automatic opening of the download panel
every time a new download starts
* Firefox now mitigates query parameter tracking when navigating
sites in ETP strict mode
* Improved security by moving audio decoding into a separate
process with stricter sandboxing, thus improving process isolation
* https://www.mozilla.org/en-US/firefox/102.0/releasenotes
MFSA 2022-24 (bsc#1200793)
* CVE-2022-34479 (bmo#1745595)
A popup window could be resized in a way to overlay the
address bar with web content
* CVE-2022-34470 (bmo#1765951)
Use-after-free in nsSHistory
* CVE-2022-34468 (bmo#1768537)
CSP sandbox header without `allow-scripts` can be bypassed
via retargeted javascript: URI
* CVE-2022-34482 (bmo#845880)
Drag and drop of malicious image could have led to malicious
executable and potential code execution
* CVE-2022-34483 (bmo#1335845)
Drag and drop of malicious image could have led to malicious
executable and potential code execution
* CVE-2022-34476 (bmo#1387919)
ASN.1 parser could have been tricked into accepting malformed ASN.1
* CVE-2022-34481 (bmo#1483699, bmo#1497246)
Potential integer overflow in ReplaceElementsAt
* CVE-2022-34474 (bmo#1677138)
Sandboxed iframes could redirect to external schemes
* CVE-2022-34469 (bmo#1721220)
TLS certificate errors on HSTS-protected domains could be
bypassed by the user on Firefox for Android
* CVE-2022-34471 (bmo#1766047)
Compromised server could trick a browser into an addon downgrade
* CVE-2022-34472 (bmo#1770123)
Unavailable PAC file resulted in OCSP requests being blocked
* CVE-2022-34478 (bmo#1773717)
Microsoft protocols can be attacked if a user accepts a prompt
* CVE-2022-2200 (bmo#1771381)
Undesired attributes could be set as part of prototype pollution
* CVE-2022-34480 (bmo#1454072)
Free of uninitialized pointer in lg_init
* CVE-2022-34477 (bmo#1731614)
MediaError message property leaked information on cross-
origin same-site pages
* CVE-2022-34475 (bmo#1757210)
HTML Sanitizer could have been bypassed via same-origin
script via use tags
* CVE-2022-34473 (bmo#1770888)
HTML Sanitizer could have been bypassed via use tags
* CVE-2022-34484 (bmo#1763634, bmo#1772651)
Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
* CVE-2022-34485 (bmo#1768409, bmo#1768578)
Memory safety bugs fixed in Firefox 102
- requires
... changelog too long, skipping 11 lines ...
- add some more returns to the no-return-patch
==== apparmor ====
Version update (3.0.5 -> 3.0.6)
Subpackages: apparmor-abstractions apparmor-parser apparmor-profiles apparmor-utils python3-apparmor
- update to AppArmor 3.0.6
- fix LTO build in the parser
- remove dbus deny rule in abstractions/exo-open
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.6
for the detailed upstream changelog
- drop upstream patch dirtest-sort-mr900.diff
==== bind ====
- Add systemd drop-in directory for named service
[bsc#1201689, bind.spec]
==== firewalld ====
Subpackages: firewalld-bash-completion python3-firewall
- readd ipset buildrequires to reenable ipset support (bsc#1202043)
- readd ebtables too, as there is no builtin support.
==== gdb ====
Version update (11.1 -> 12.1)
- Maintenance script qa.sh:
* Add SLE-12/x86_64 to "known clean configs".
* Add fail for PR29405.
* Add fail for PR26915.
- Patches added:
* gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch
- Maintenance script qa.sh:
* Remove PR29247 internal-error.
* Add SLE-15/aarch64 to "known clean configs".
- Patches added:
* gdb-fix-watchpoints-triggered.patch
- Maintenance script qa.sh:
* Add kfails for PR25038, PR29253, and PR29423.
* Remove gdb.mi/mi-var-invalidate-shlib.exp kfails.
- Mention qa-local.sh, qa-remote.sh and README.qa as sources.
- Maintenance script qa-local.sh:
* Use have_combo consistently.
- Maintenance script qa.sh:
* Add kfail_aarch64.
* Add PR29419/PR29409 kfails.
* Update PR29247 kfails.
- Patches added:
* make-gdb.ada-float-bits.exp-more-generic.patch
* gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch
- Actually apply fixup-gdb-test-bt-cfi-without-die.patch and
fixup-2-gdb-rhbz1553104-s390x-arch12-test.patch.
- Also remove gdb-6.5-readline-long-line-crash-test.patch from
patches list in gdb.spec.
- Patches added:
* powerpc-add-support-for-ieee-128-bit-format.patch
* powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch
* gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch
* powerpc-fix-for-gdb.base-eh_return.exp.patch
* fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch
* gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch
* fixup-gdb-test-bt-cfi-without-die.patch
* fix-core-file-detach-crash-corefiles-29275.patch
* gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch
* gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch
* gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch
* fix-for-gdb.base-solib-search.exp-test.patch
- Patch removed:
* gdb-6.7-ppc-clobbered-registers-O2-test.patch
* gdb-6.5-readline-long-line-crash-test.patch
- Patches updated:
* gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch
* gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch
- Maintenance script qa.sh:
* Add PR28504 KFAILs.
* Make .sum file matching less complex.
* Add fedora test-case kfail.
- Maintenance script qa-local.sh:
* Fix incorrect path name.
- Update comments in gdb.spec.
- Patches added:
* powerpc-update-expected-floating-point-output-for-gdb.arch-altivec-regs.exp-and-gdb.arch-vsx-regs.exp.patch
- Patches updated:
* gdb-testsuite-support-recording-of-getrandom.patch
(add aarch64 part)
- Maintenance script qa.sh:
* Add i586 to known clean configs.
- Patches added:
* gdb-testsuite-enable-some-test-cases-for-x86_64-m32.patch
* gdb-testsuite-fix-gdb.reverse-i387-env-reverse.exp-for-pie.patch
* gdb-testsuite-support-recording-of-getrandom.patch
- Patches updated:
* gdb-record-handle-statx-system-call.patch
- Maintenance script qa.sh:
* Allow only two summary files, for i586.
* Add i586 KFAILs.
- Maintenance script qa-local.sh:
* Add i586.
- Maintenance script qa-local.sh:
* Fix rpm pathname.
- Maintenance script qa-remote.sh:
* Skip stale config openSUSE_Leap_15.2.
- Maintenance script qa.sh:
* Drop known clean config: Leap 15.2 x86_64.
- Maintenance script qa-local.sh:
* Add cleanup step.
* Add "build all configs without testsuite" step.
* For "build all configs with testsuite" step, redirect output
to log and produce PASS/FAIL line, and make sure buildroot is
removed also in case of missing rpm.
* Use "--clean --trust-all-projects" for osc build commands.
* Drop openSUSE_Leap_15.2.
- Maintenance script qa.sh:
* Rename argument 6 to -local.
* Add PR29247 KFAILs.
* Update internal-error regexps.
- New maintenance script qa-remote.sh.
- Add "build all configs without testsuite" step in README.qa.
- Patches added (backport from trunk):
* gdb-testsuite-remove-attach-test-from-can_spawn_for_attach.patch
- README.qa:
* Add remote qa entry.
* Update local qa entry:
* Add notes entry.
* Other updates to match changes in qa-local.sh.
... changelog too long, skipping 312 lines ...
* Add Leap 15.4 x86_64 to know good configs.
==== gnome-settings-daemon ====
- Change dependency from polkit to /usr/bin/pkexec: pkexec has been
split out of polkit. Requiring the explicit capability seems
better here than having to worry what package carries the binary.
==== gnutls ====
Version update (3.7.6 -> 3.7.7)
- Update to 3.7.7: [bsc#1202020, CVE-2022-2509]
* libgnutls: Fixed double free during verification of pkcs7
signatures. CVE-2022-2509
* libgnutls: gnutls_hkdf_expand now only accepts LENGTH argument
less than or equal to 255 times hash digest size, to comply with
RFC 5869 2.3.
* libgnutls: Length limit for TLS PSK usernames has been increased
from 128 to 65535 characters
* libgnutls: AES-GCM encryption function now limits plaintext
length to 2^39-256 bits, according to SP800-38D 5.2.1.1.
* libgnutls: New block cipher functions have been added to
transparently handle padding. gnutls_cipher_encrypt3 and
gnutls_cipher_decrypt3 can be used in combination of
GNUTLS_CIPHER_PADDING_PKCS7 flag to automatically add/remove
padding if the length of the original plaintext is not a multiple
of the block size.
* libgnutls: New function for manual FIPS self-testing.
* API and ABI modifications:
- gnutls_fips140_run_self_tests: New function
- gnutls_cipher_encrypt3: New function
- gnutls_cipher_decrypt3: New function
- gnutls_cipher_padding_flags_t: New enum
* guile: Guile 1.8 is no longer supported
* guile: Session record port treats premature termination as EOF Previously,
a 'gnutls-error' exception with the 'error/premature-termination' value
would be thrown while reading from a session record port when the
underlying session was terminated prematurely. This was inconvenient
since users of the port may not be prepared to handle such an exception.
Reading from the session record port now returns the end-of-file object
instead of throwing an exception, just like it would for a proper
session termination.
* guile: Session record ports can have a 'close' procedure. The
'session-record-port' procedure now takes an optional second parameter,
and a new 'set-session-record-port-close!' procedure is provided to
specify a 'close' procedure for a session record port. This 'close'
procedure lets users specify cleanup operations for when the port is
closed, such as closing the file descriptor or port that backs the
underlying session.
* Rebase patches:
- gnutls-3.6.6-set_guile_site_dir.patch
- gnutls-FIPS-TLS_KDF_selftest.patch
- gnutls-FIPS-disable-failing-tests.patch
* Remove patch merged upstream:
- gnutls-FIPS-PBKDF2-KAT-requirements.patch
- https://gitlab.com/gnutls/gnutls/merge_requests/1561
==== iso-codes ====
Version update (4.10.0 -> 4.11.0)
Subpackages: iso-codes-lang
- Update to version 4.11.0:
+ Update ISO 639-3 codes from SIL website.
+ Updated translations.
==== kernel-source ====
Version update (5.18.12 -> 5.18.15)
- Linux 5.18.15 (bsc#1012628).
- watch-queue: remove spurious double semicolon (bsc#1012628).
- ASoC: SOF: Intel: disable IMR boot when resuming from ACPI S4
and S5 states (bsc#1012628).
- ASoC: SOF: pm: add definitions for S4 and S5 states
(bsc#1012628).
- ASoC: SOF: pm: add explicit behavior for ACPI S1 and S2
(bsc#1012628).
- watchqueue: make sure to serialize 'wqueue->defunct' properly
(bsc#1012628).
- x86/alternative: Report missing return thunk details
(bsc#1012628).
- x86/amd: Use IBPB for firmware calls (bsc#1012628).
- exfat: use updated exfat_chain directly during renaming
(bsc#1012628).
- exfat: fix referencing wrong parent directory information
after renaming (bsc#1012628).
- crypto: qat - re-enable registration of algorithms
(bsc#1012628).
- crypto: qat - add param check for DH (bsc#1012628).
- crypto: qat - add param check for RSA (bsc#1012628).
- crypto: qat - remove dma_free_coherent() for DH (bsc#1012628).
- crypto: qat - remove dma_free_coherent() for RSA (bsc#1012628).
- crypto: qat - fix memory leak in RSA (bsc#1012628).
- crypto: qat - add backlog mechanism (bsc#1012628).
- crypto: qat - refactor submission logic (bsc#1012628).
- crypto: qat - use pre-allocated buffers in datapath
(bsc#1012628).
- crypto: qat - set to zero DH parameters before free
(bsc#1012628).
- dlm: fix pending remove if msg allocation fails (bsc#1012628).
- clk: lan966x: Fix the lan966x clock gate register address
(bsc#1012628).
- x86/bugs: Warn when "ibrs" mitigation is selected on Enhanced
IBRS parts (bsc#1012628).
- perf/x86/intel/lbr: Fix unchecked MSR access error on HSW
(bsc#1012628).
- sched/deadline: Fix BUG_ON condition for deboosted tasks
(bsc#1012628).
- bpf: Make sure mac_header was set before using it (bsc#1012628).
- mm/mempolicy: fix uninit-value in mpol_rebind_policy()
(bsc#1012628).
- KVM: Don't null dereference ops->destroy (bsc#1012628).
- spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref
for non DMA transfers (bsc#1012628).
- KVM: selftests: Fix target thread to be migrated in rseq_test
(bsc#1012628).
- gpio: gpio-xilinx: Fix integer overflow (bsc#1012628).
- selftests: gpio: fix include path to kernel headers for out
of tree builds (bsc#1012628).
- net/sched: cls_api: Fix flow action initialization
(bsc#1012628).
- tcp: Fix data-races around sysctl_tcp_max_reordering
(bsc#1012628).
- tcp: Fix a data-race around sysctl_tcp_abort_on_overflow
(bsc#1012628).
- tcp: Fix a data-race around sysctl_tcp_rfc1337 (bsc#1012628).
- tcp: Fix a data-race around sysctl_tcp_stdurg (bsc#1012628).
- tcp: Fix a data-race around sysctl_tcp_retrans_collapse
(bsc#1012628).
- tcp: Fix data-races around sysctl_tcp_slow_start_after_idle
(bsc#1012628).
- tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts
(bsc#1012628).
- tcp: Fix data-races around sysctl_tcp_recovery (bsc#1012628).
- tcp: Fix a data-race around sysctl_tcp_early_retrans
(bsc#1012628).
- tcp: Fix data-races around sysctl knobs related to SYN option
(bsc#1012628).
- udp: Fix a data-race around sysctl_udp_l3mdev_accept
(bsc#1012628).
- ip: Fix data-races around sysctl_ip_prot_sock (bsc#1012628).
- ipv4: Fix data-races around sysctl_fib_multipath_hash_fields
(bsc#1012628).
- ipv4: Fix data-races around sysctl_fib_multipath_hash_policy
(bsc#1012628).
- ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh
(bsc#1012628).
- can: rcar_canfd: Add missing of_node_put() in rcar_canfd_probe()
(bsc#1012628).
- drm/imx/dcss: Add missing of_node_put() in fail path
(bsc#1012628).
- drm/panel-edp: Fix variable typo when saving hpd absent delay
from DT (bsc#1012628).
- amt: do not use amt->nr_tunnels outside of lock (bsc#1012628).
- amt: drop unexpected multicast data (bsc#1012628).
- amt: drop unexpected query message (bsc#1012628).
- amt: drop unexpected advertisement message (bsc#1012628).
- amt: add missing regeneration nonce logic in request logic
(bsc#1012628).
- amt: use READ_ONCE() in amt module (bsc#1012628).
- amt: remove unnecessary locks (bsc#1012628).
- amt: use workqueue for gateway side message handling
(bsc#1012628).
- net: dsa: vitesse-vsc73xx: silent spi_device_id warnings
(bsc#1012628).
- net: dsa: sja1105: silent spi_device_id warnings (bsc#1012628).
- be2net: Fix buffer overflow in be_get_module_eeprom
(bsc#1012628).
... changelog too long, skipping 599 lines ...
- commit fcd7336
==== libapparmor ====
Version update (3.0.5 -> 3.0.6)
- update to AppArmor 3.0.6
- fix LTO build in the parser
- remove dbus deny rule in abstractions/exo-open
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.6
for the detailed upstream changelog
- drop upstream patch dirtest-sort-mr900.diff
==== libavif ====
- Enable libyuv on TW
==== libblockdev ====
Version update (2.26 -> 2.27)
Subpackages: libbd_btrfs2 libbd_crypto2 libbd_fs2 libbd_loop2 libbd_lvm2 libbd_mdraid2 libbd_part2 libbd_swap2 libbd_utils2 libblockdev2
- Update to version 2.27:
+ Fix for s390x: Remove double fclose in bd_s390_dasd_online
+ fs: Return BD_FS_ERROR_UNKNOWN_FS on mounting unknown
filesystem
+ overrides: Fix translating exceptions in ErrorProxy
+ vdo_stats: Default to 100 % savings for invalid savings values
+ lvm-dbus: Add support for changing compression and
deduplication
+ lvm:
- Fix reading statistics for VDO pools with VDO 8
- Do not set global config to and empty string
- Do not include duplicate entries in bd_lvm_lvs output
- Use correct integer type in for comparison
+ crypto: Remove useless comparison in progress report in
luks_format
==== libgcrypt ====
- Fix reproducible build problems:
- Do not use %release in binaries (but use SOURCE_DATE_EPOCH)
- Fix date call messed up by spec-cleaner
==== libgsm ====
Version update (1.0.19 -> 1.0.20)
- Update to 1.0.20:
* Use $(RMFLAGS) with the rms in the Makefile; add -f to $(RMFLAGS) to
avoid spurious error messages during build.
- Rebase and rename libgsm-1.0.20.patch from libgsm-1.0.13.patch.
- Rebase libgsm-include.patch.
==== libnvme ====
Version update (1.1~rc0 -> 1.1)
- Update to version 1.1:
* Regenerate all documentation
* json: fixup dhchap_ctrl_key definitions
* fabrics: Fix build_options() return values
* fabrics: sanitize dump-config output
* Fix poll.h includes
* build: Drop -nostdinc for LibreSSL header checks
* ioctl: Honor rae in nvme_get_nsid_log
* build: Add support to build against LibreSSL
* rpmbuild: Enable 'make rpm' to build rpm pkgs #408
* mi: unify MI Get Log Page function with ioctl API
* python: add missing ctrl attrs to Python bindings
* mi-mctp: Add timeout support to MCTP transport
* mi: Add maximum More Processing Required limit API
* mi: Add endpoint get/set timeout API
==== mokutil ====
Version update (0.5.0 -> 0.6.0)
- Update to 0.6.0
+ 6c98907 SBAT revocation update support
+ 0276891 mokutil: Add trust_mok_keys and untrust_mok_keys
+ 57bc385 mokutil: enable setting fallback verbosity and noreboot mode
+ b15e7c4 util: add the missing stdio.h
- Drop mokutil-fix-missing-header.patch (upstream)
==== mozilla-nss ====
Version update (3.79 -> 3.80)
Subpackages: libfreebl3 libfreebl3-hmac libsoftokn3 libsoftokn3-hmac mozilla-nss-certs
- update to NSS 3.80
* bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
* bmo#1617956 - Add support for asynchronous client auth hooks.
* bmo#1497537 - nss-policy-check: make unknown keyword check optional.
* bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
by allocating it on initialization. Replaced
redundant code with assert. Debug builds: Added
buffer freeing/allocation for each record.
* bmo#1773022 - Mark 3.79 as an ESR release.
* bmo#1764206 - Bump nssckbi version number for June.
* bmo#1759815 - Remove Hellenic Academic 2011 Root.
* bmo#1770267 - Add E-Tugra Roots.
* bmo#1768970 - Add Certainly Roots.
* bmo#1764392 - Add DigitCert Roots.
* bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
* bmo#1366464 - Compare signature and signatureAlgorithm fields in
legacy certificate verifier.
* bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
* bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
* bmo#1771498 - Uninitialized value in cert_ComputeCertType.
* bmo#1760998 - Avoid data race on primary password change.
* bmo#1769063 - Replace ppc64 dcbzl intrinisic.
* bmo#1771036 - Allow LDFLAGS override in makefile builds.
==== mpg123 ====
Version update (1.30.1 -> 1.30.2)
Subpackages: libmpg123-0 mpg123-openal
- Update to version 1.30.2
* Only use EWOULDBLOCK if the macro is defined.
==== nano ====
- Added obs-channel-and-patchinfo-syntax.patch to support syntax
highlighting for _channel and _patchinfo files used by OBS
==== nvme-cli ====
Version update (2.1~rc0 -> 2.1.1)
Subpackages: nvme-cli-bash-completion
- Update to version 2.1.1:
* build: Update version to v2.1.1
* build: Extend release script to support micro version releases
* build: Add minimum build requirement on libnvme
* wrapper: Add weak nvme_init_copy_range_f1 symbol
* build: Update version before regenerating docs
* build: Update release version rules
- Update to version v2.1:
* nvme: Do not print error message in collect_effects_log helper
* fabrics: Remove dhchap-ctrl-secret from discover/connect-all
* nvme-print: sanitize the get-feature async event config output
* nvme: Set default rae value for nvme_get_nsid_log users
* fabrics: Avoid nvme_scan_ctrl when disconnecting
* print: Fix nvme_id_uuid_list
==== pandoc ====
Version update (2.17.1.1 -> 2.18)
- Update pandoc to version 2.18.
[#]# pandoc 2.18 (2022-04-22)
* New input formats: `endnotexml` (EndNote XML bibliography),
`ris` (RIS bibliography).
* A RIS bibliography file may now be used with `--citeproc`.
* Citeproc: Allow a formatted bibliography to be placed in metadata fields
via a Div with class `refs` (#7969, #526). Thus, one can include a
metadata field, say `refs`, whose content is an
empty div with id `refs`, and the formatted bibliography will be put into
this metadata field. It may then be interpolated into a template using the
variable `refs`.
* Ensure that you don't get PDF output to terminal. `-t pdf` now behaves
like `-t docx` and gives an error unless the output is redirected.
* `--version` now prints hslua version (#7929) and
Lua version (#7997, Albert Krewinkel).
* Change `--metadata-file` parsing so that, when the input format is not
markdown or a markdown variant, pandoc's markdown is used (#6832, #7926).
When the input format is a markdown variant, the same format is used.
Reason for the change: it doesn't make sense to run the markdown parser
with a set of extensions designed for a non-markdown format, and
this dramatically limits what people can do in metadata files.
* Trim whitespace from math in `--webtex` (#7892).
This fixes problems with --webtex and markdown output,
when display math starts or ends with a newline.
* New exported module Text.Pandoc.Readers.EndNote, exporting
`readEndNoteXML`, `readEndNoteXMLCitation`,
and `readEndNoteXMLReferences`. [API change]
* `--self-contained`: issue warning rather than failing with an error
if a resource can't be found (#7904).
* New exported module, Text.Pandoc.Readers.RIS, exporting `readRIS` (#7894).
* LaTeX reader:
+ Handle subequations as inline math environment (#7883).
+ Rudimentary support for `vbox` (#7939).
+ Support `\today` (#7905).
+ Handle `\label` and `\ref` for footnotes (#7930).
+ Allow inline groups starting with `\bgroup` (#7953).
+ Use custom TokStream that keeps track of whether macros are expanded.
This allows us to improve performance a bit by avoiding unnecessary
runs of the macro expansion code (e.g. from 24 ms to 20 ms on
our standard benchmark).
+ Further optimizations for inline parsing.
+ Better handling of `\usepackage`. If the package is local but
causes parse errors, parse everything up to the error and skip the
rest. Issue a `CouldNotParseIncludeFile` warning indicating that
parsing failed at that point.
+ Text.Pandoc.Readers.LaTeX.Parsing: Monoid and Semigroup instances for
TokStream.
* HTML reader:
+ Give warnings and emit empty note when parsing
`<a epub:type="noteref">` and the identifier
doesn't correspond to anything in the note table (#7884).
Previously we just silently skipped these cases.
+ Fix parsing of epub footnotes (#7884).
* DocBook reader:
+ Handle complete set of entities as specified at
<https://www.w3.org/2003/entities/2007doc/byalpha.html> (#7938).
+ Handle abstract in info section (#7747).
+ Improve info parsing.
+ Simplify metadata parsing code (#7747).
Handle abstract as block-level content.
Report skipped info elements with `--verbose`.
+ Handle address and coyright in metadata (#7747).
* DokuWiki reader:
+ Add DokuWiki table alignment (#5202, damon-sava-stanley).
* RST reader:
+ Fix treatment of headerless simple tables (#7902).
+ Wrap math in Span to preserve attributes (#7998, Albert Krewinkel).
Math elements with a name, classes, or other fields are wrapped in a
`Span` with these attributes.
* JATS reader:
+ Improve handling of fn-group elements (#6348, Albert Krewinkel).
Footnotes in `<fn-group>` elements are collected and re-inserted into
the document as proper footnotes in the place where they are referenced.
+ Handle `pub-date` (#8000).
+ Support PMID, DOI, issue in citations (#7995).
+ Improve refs parsing. Handle `issn` and `isbn`; use simpler form
for issued date.
+ Strip 'ref-' from ref id in constructing CSL id. This allows better
round-tripping, because the JATS writer adds the `ref-` prefix to
the citation id to get the ref element's id.
* Org reader:
+ Allow ":" in property drawer keys (Lucas V. R).
Any non-space character is allowed as property drawer key, including ":"
itself (so it is not really a delimiter). The real delimiter is a space
character, so in a drawer like
```
:PROPERTIES:
::k:ey:: value
:END:
```
":k:ey:" is a key with value "value".
+ Allow comments above property drawer.
+ More flexible LaTeX environments (Lucas V. R).
+ Handle `#+bibliography:` as metadata so that it can work with
`--citeproc`.
+ Parse `#+print_bibliography:` as Div with id `refs`.
+ Allow multiple `#+bibliography:`.
* Markdown reader:
+ Allow one-column pipe tables with pipe on right (#7919).
... changelog too long, skipping 171 lines ...
with hslua 2.1 and Lua 5.3, otherwise hslua 2.2 and Lua 5.4.
==== pipewire ====
Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools
- Recommend pipewire-alsa (instead of alsa-plugins-pulse) from
pipewire-pulseaudio (boo#1201409)
==== polkit ====
Subpackages: libpolkit-agent-1-0 libpolkit-gobject-1-0 typelib-1_0-Polkit-1_0
- add split-provides for polkit:/usr/bin/pkexec. (bsc#1202070)
==== poppler ====
Version update (22.07.0 -> 22.08.0)
Subpackages: libpoppler-cpp0 libpoppler-glib8 poppler-tools
- update to 22.08.0:
* Fix rendering text on some forms
* CairoOutputDev: Support Type3 charprocs having Resources
* Fix crashes on malformed files
==== poppler-qt5 ====
Version update (22.07.0 -> 22.08.0)
- update to 22.08.0:
* Fix rendering text on some forms
* CairoOutputDev: Support Type3 charprocs having Resources
* Fix crashes on malformed files
==== python-Genshi ====
Version update (0.7.5 -> 0.7.7)
- Update to 0.7.7:
* Declared setuptools as the build backend (#65)
* Fixed deprecation warnings caused by escape sequences in regex pattern
strings (#63)
- Changes from 0.7.6:
* Added support for Python 3.10 and 3.11 (#54, #56, #58)
* Replaced assertEquals with assertEqual. assertEquals was deprecated in
Python 3.2. (#42)
* Removed used of element.getchildren() which has been removed from the Python
standard library elementtree in Python 3.9. (#57)
* Added support for Python 3.10 by using CodeType.replace in
`build_code_chunk` to make code object updates more robust against changes
in CodeType. (#49)
* Moved tests and releases workflows to GitHub Actions (#61, #51)
* Fixed reference leak in Markup.join C implementation. (#47)
* Sort directives only by directive index. Previously they were sorted by the
class, namespace and arguments of the directives. This was acceptable in
Python 2, but is a bug in Python 3 since some the arguments may not be
comparable. (#44)
* Add support for msgctxt to i18n. (#13)
* Implemented skipping of empty attributes during translation to match the
behaviour during translation extraction (i.e. don't try to translate empty
strings that are not extracted). (#38)
* Ported setuptools options to declarative config in setup.cfg. (#40)
* Removed used of deprecated setuptools Feature in setup.py. (#39)
- Removed patches, already in upstream:
* Genshi-pr39-fix-setuptools-extension.patch
* Genshi-pr49-fix-python310-tests.patch
==== python-Mako ====
Version update (1.1.6 -> 1.2.1)
- Update to 1.2.1:
* [bug] [tests] Various fixes to the test suite in the area of exception
message rendering to accommodate for variability in Python versions as
well as Pygments.
* [performance] Optimized some codepaths within the lexer/Python code
generation process, improving performance for generation of templates
prior to their being cached. Pull request courtesy Takuto Ikuta.
* [changed] [py3k] Corrected "universal wheel" directive in setup.cfg so
that building a wheel does not target Python 2.
* [changed] [py3k] The bytestring_passthrough template argument is removed,
as this flag only applied to Python 2.
* [changed] [py3k] With the removal of Python 2's cStringIO, Mako now uses
its own internal FastEncodingBuffer exclusively.
* [changed] Refactored test utilities into mako.testing module. Removed
unittest.TestCase dependency in favor of pytest.
* [changed] [setup] Replaced the use of pkg_resources with the importlib
library. For Python < 3.8 the library importlib_metadata is used.
* [changed] [py3k] Removed support for Python 2 and Python 3.6. Mako now
requires Python >= 3.7.
* [bug] [py3k] Mako now performs exception chaining using raise from,
correctly identifying underlying exception conditions when it raises its
own exceptions. Pull request courtesy Ram Rachum.
- Remove python2 gubbins, since it is no longer supported.
==== python-alembic ====
Version update (1.8.0 -> 1.8.1)
- update to 1.8.1:
* Fixed bug where the SQLite implementation of
:meth:`.Operations.rename_table` would render an explicit schema name for
both the old and new table name, which while is the standard ALTER syntax,
is not accepted by SQLite's syntax which doesn't support a rename across
schemas. In particular, the syntax issue would prevent batch mode from
working for SQLite databases that made use of attached databases (which are
treated as "schemas" in SQLAlchemy).
* Added an error raise for the condition where
:meth:`.Operations.batch_alter_table` is used in ``--sql`` mode, where the
operation requires table reflection, as is the case when running against
SQLite without giving it a fixed ``Table`` object. Previously the operation
would fail with an internal error. To get a "move and copy" batch
operation as a SQL script without connecting to a database,
a ``Table`` object should be passed to the
:paramref:`.Operations.batch_alter_table.copy_from` parameter so that
reflection may be skipped.
==== python-cffi ====
Version update (1.15.0 -> 1.15.1)
- update to 1.15.1:
* If you call ffi.embedding_api() but donât write any extern âPythonâ function
there, then the resulting C code would fail an assert. Fixed.
* Updated Windows/arm64 embedded libffi static lib to v3.4.2, and scripted to
ease future updates (thanks Niyas Sait!)
==== python-cryptography ====
Version update (37.0.2 -> 37.0.4)
- update to 37.0.4:
* updated wheels to b ecompiled against openssl 3.0.5
==== python-gobject ====
Version update (3.42.1 -> 3.42.2)
Subpackages: python310-gobject python310-gobject-Gdk python310-gobject-cairo
- Update to version 3.42.2:
+ Error out instead of crashing when marshaling unsupported
fundamental types in some cases.
+ Add a workaround for a PyPy 3.9+ bug when threads are used.
+ Fix crashes when marshaling zero terminated arrays for certain
item types.
+ Fix a crash/refcounting error in case marshaling a hash table
fails.
+ Make the test suite pass again with PyPy.
+ tests: support running tests with (MSVC) CPython 3.8+ on
Windows.
+ interface: Fix leak when overriding GInterfaceInfo.
+ setup.py: look up pycairo headers without importing the module
(helps with building on Windows and MSVC CPython 3.8+).
- Work around vendored distutils in setuptools >= 60 incorrectly
installing pkgconfig files into the wrong libdir
==== python-hatchling ====
Version update (1.4.1 -> 1.6.0)
- update to version 1.6.0:
* Changed:
+ When no build targets are specified on the command line, now
default to sdist and wheel targets rather than what happens
to be defined in config
+ The code version source now only supports files with known
extensions
+ Global build hooks now run before target-specific build hooks
to better match expected behavior
* Added:
+ The code version source now supports loading extension
modules
+ Add search-paths option for the code version source
* Fixed:
+ Fix removing sources using an empty string value in the
mapping
+ The strict-naming option now also applies to the metadata
directory of wheel targets
- update to version 1.5.0:
* Added:
+ Support the final draft of PEP 639
+ Add strict-naming option for sdist and wheel targets
* Fixed: Project names are now stored in sdist and wheel target
core metadata exactly as defined in pyproject.toml without
normalization to allow control of how PyPI displays them
- require python 3.7 as minimum version to match upstream
requirement
==== python-httpcore ====
Version update (0.14.7 -> 0.15.0)
- Update to 0.15.0
* Drop Python 3.6 support (#535)
* Ensure HTTP proxy CONNECT requests include timeout
configuration. (#506)
* Switch to explicit typing.Optional for type hints (#513)
* For trio map OSError exceptions to ConnectError (#543)
- Fix forgotten test package dep drops -- gh#encode/httpcore#473
==== python-importlib-metadata ====
Version update (4.11.4 -> 4.12.0)
- update to 4.12.0:
* py-93259: Now raise ``ValueError`` when ``None`` or an empty
string are passed to ``Distribution.from_name`` (and other
callers).
==== python-ipywidgets ====
Version update (7.6.5 -> 7.7.1)
- Update to version 7.7.1
* Fix broken link icon for FontAwesome 4 and 5 #3495
* Fix message throttling bug #3494
* Fix state message parsing to be more permissive #3486
* Fix tests on Python 3.11 #3480
* Add better front-page docs #3496
- Release 7.7
* Fix installation on Python 3.10. #3368
* Throw an error if we cannot render a widget, enabling the
rendering system to fall back to rendering a different data
type if available. #3290
* Create a new widget control comm channel, enabling more
efficient fetching of kernel widget state. #3201
* Refactor logic for fetching kernel widget state to the manager
base class. This logic first tries to use the new widget
control comm channel, falling back to the existing method of
requesting each widget's state individually. #3337
* Enable HTMLManager output widgets to render state updates.
[#3372]
* Do not reset JupyterLab CSS variables if they are already
defined. #3344
* Fix variable inspector example. #3302
* Introduce new widget manager has_model method for synchronously
checking if a widget model is registered. #3377
* Work around bug in Chrome rendering Combobox arrows. #3375
* Optionally echo update messages from frontends to other
frontends. This enables widget views in different frontends to
maintain consistent state simultaneously, and also makes sure
that simultaneous updates from the kernel and frontend resolve
to a consistent state. This is off by default in ipywidgets
7.7, and it is anticipated this will be on by default in
ipywidgets 8.0. To enable echo update messages across
ipywidgets, set the environment variable JUPYTER_WIDGETS_ECHO
to 1. To opt a specific attribute out of echo updates, tag the
attribute with echo_update=False metadata (we do this in core
for the FileUpload widget's data attribute). #3400, #3394
- Drop ipywidgets-pr2655-collectionsabc.patch
==== python-jsonschema ====
Version update (4.5.1 -> 4.8.0)
- update to 4.8.0:
* ``best_match`` no longer traverses into ``anyOf`` and ``oneOf`` when all of
the errors within them seem equally applicable. This should lead to clearer
error messages in some cases where no branches were matched.
- update to 4.7.2:
* Fix best_match's type matching when it's an array.
- update to 4.7.1:
* Minor case correction for PyPI links
- update to 4.7.0:
* Enhance best match to prefer errors from matching types. by @Julian in #972
- update to 4.6.2:
* docs: Fix a few typos by @timgates42 in #969
- update to 4.6.1:
* Type annotate format checker methods by @sirosen in #958
* Fix fuzzer to include instrumentation by @DavidKorczynski in #965
* [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #967
- update to 4.6.0:
* Add package_url for changelog by @fhightower in #950
* Only validate unevaluated properties/items on applicable types by @EpicWink in #949
* Add v4.5.1 to changelog by @sirosen in #956
* Modernize the packaging setup via PEP 621 and Hatch. by @Julian in #957
==== python-jupyter-core ====
Version update (4.9.2 -> 4.11.1)
- Update to 4.11.1
* Fix inclusion of jupyter file and check in CI by @blink1073 in
[#276]
- Release 4.11.0
* Use hatch backend by @blink1073 in #265
* is_hidden: Use normalized paths by @martinRenou in #271
- Release 4.10.0
* Include all files from jupyter_core by @jonringer in #253
- Refresh use_rpms_paths.patch
==== python-jupyter_console ====
Version update (6.4.3 -> 6.4.4)
- Update to 6.4.4
* Use asyncio.create_task and asyncio.get_running_loop with
interact().
* Drop Python 3.6. #270 (@encukou)
==== python-jupyterlab ====
Version update (3.2.3 -> 3.4.4)
Subpackages: jupyter-jupyterlab python310-jupyterlab
- Update to 3.4.4
Enhancements made
* Adds version maintenance policy #12829 (@jweill-aws)
* Increase title width in simple mode #11546 (@SylvainCorlay)
* Bump xtermjs to latest #12715 (@yuvipanda)
* Debugger: Make kernel source list react based #12751 (@vidartf)
* Optimize debugger editor eachLine loops #12746 (@vidartf)
* Make password inputs not give away how many characters were
typed #12659 (@jasongrout)
Bugs fixed
* Remove drive prefix from the file path when creating the new
path #12824 (@hbcarlos)
* Use path to extract tmpPath #12823 (@fcollonval)
* update tab name after file rename #12791 (@RobbyPratl)
* Update base.css #12783 (@siddartha-10)
* Pin nbclassic below 0.4.0 #12767 (@fcollonval)
* Set focus when active cell changes only from mouse click #12735
(@fcollonval)
* Fix staging/yarn.lock registry #12742 (@vidartf)
* Debugger: Fix CSS for variables inspecting #12749
(@martinRenou)
* Translate "Default: " and "Remove" in custom fields #12732
(@krassowski)
* Fix cell toolbar overlap in side-by-side render mode #12710
(@peytondmurray)
* Remove ipywidgets message count in the execution indicator
model #12665 (@trungleduc)
Maintenance and upkeep improvements
* Update verdaccio, start registry on 0.0.0.0 #12825
(@fcollonval)
* Use Vega SVG renderer to drop canvas dependency #12811
(@fcollonval)
* Bump moment from 2.29.2 to 2.29.4 #12781 (@dependabot[bot])
* [memory-leaks] Fixes following cell addition analysis #12774
(@fcollonval)
* Bump @lumino/widgets to 1.33.0 #12777 (@fcollonval)
* Fix memory leaks #12750 (@fcollonval)
* Bump version of marked and @types/marked #12747 (@krassowski)
* Drop pre-commit from build dependencies (#12680) #12706
(@jtpio)
- Release 3.4.3
New features added
* Persistent side-by-side ratio setting #12633 (@echarles)
Enhancements made
* Persistent side-by-side ratio setting #12633 (@echarles)
* Add "Open in Simple Mode" contextMenu option #12577
* (@fcollonval)
Bugs fixed
* Always check local packages against abspath #10662 (@mlucool)
* Fix arrow position on unrendered markdown cell #12660
(@fcollonval)
* Fix the side-by-side cell resize handle #12611 (@echarles)
* Fix loading toolbar factory twice #12599 (@fcollonval)
* Fixes behavior of maxNumberOutputs #12598 (@fcollonval)
* Focus not set when clicking on cell margin #12447 (@fcollonval)
* Make selected text translucent so the cursor is visible in vim
mode #12520 (@Jessie-Newman)
* Fix file browser search highlighting bug #12578 (@fcollonval)
- Release 3.4.2
* Building extensions fail if not using latest patch #12571
(@ajbozarth)
* fixed shouldOverwrite is never called when rename target exists
[#12543] (@ephes)
- Release 3.4.1
Enhancements made
* Setting to use the advanced setting editor for the settings
* #12466 (@echarles)
Bugs fixed
* Allow users to yarn link @jupyterlab/builder #12533
(@ajbozarth)
* Get Auto Close Brackets working consistently in Consoles #12508
(@Jessie-Newman)
* Handled new dialog creation with no buttons #12496 (@Jnnamchi)
* Handle missing preferredPath from the page config #12521
(@jtpio)
- Release 3.4.0
Enhancements made
* Add ability to open settings editor to specific plugin's
settings #12506 (@fcollonval)
* Don't sort context menu items by selector #12505 (@fcollonval)
* Allow downstream extension to set toolbar layout #12503
(@fcollonval)
* Display default value in setting editor for changed values
[#12468] (@echarles)
* Uses dark theme for Vega when JupyterLab theme is dark #12411
(@jweill-aws)
* Creates cell-toolbar, cell-toolbar-extension packages and
populates toolbar #12028 (@jweill-aws)
* Customize the file browser toolbar via the settings #12441
(@fcollonval)
* Wait until file browser commands are ready before activating
file browser widget #12435 (@fcollonval)
* Add a "New Tab" button that opens the launcher #12195
(@ajbozarth)
* Simplify galata import by proxying expect #12311 (@fcollonval)
* Open terminal in cwd from launcher #12250 (@rccern)
* Add support for filtering by field names in setting editor
[#12082] (@marthacryan)
* Use transform to quickly switch between tabs. #11074
... changelog too long, skipping 24 lines ...
ChANGELOG.md
==== python-jupyterlab-pygments ====
Version update (0.1.2 -> 0.2.2)
- Update to v0.2.2
* no release notes
- Add labextensions subpackage
==== python-nbclassic ====
Version update (0.3.7 -> 0.4.3)
Subpackages: jupyter-nbclassic python310-nbclassic
- Update to 0.4.3
* Handle execution errors with empty traceback entries similar to
Lab #126 (@kevin-bates)
* fix some import errors in 0.4 #130 (@minrk)
* fix enable-on-install #127 (@minrk)
* Fix notebook shim version check #129 (@minrk)
- Release 0.4.2
* Don't shim notebook if notebook<7 is available #123 (@echarles)
* Relax assert for IPythonHandler in case of notebook<6 #122
(@echarles)
* Fix executable name in desktop file #119 (@antonio-rojas)
- Release 0.4.0
* Shim to support the notebook extensions #113 (@echarles)
* nbclassic to use its own static assets #96 (@echarles)
* Add the notebook 6.4.x tests, docs and companion files (with
git history) #94 (@echarles)
* Add the notebook static assets (with git history) #93
(@echarles)
- Use the pure wheel for install which has the JS stuff.
- Override notebook entrypoints with higer priority libalternatives
configurations gh#jupyter/notebook#6501
- Test in multibuild for all the dependencies. Stay with nbclassic
tests only, not the notebook tests further down in the tree.
==== python-notebook ====
Subpackages: jupyter-notebook python310-notebook
- Enforce libalternatives grouping for nbclassic alternatives
gh#jupyter/notebook#6501
==== python-numexpr ====
- Fix requirements
==== python-psutil ====
- Fix tests: setuptools changed the builddir library path and does
not find the module from it. Use the installed platlib instead
and exclude psutil.tests only later.
- Refresh skip-obs.patch
==== python-pycairo ====
- Work around vendored distutils in setuptools >= 60 incorrectly
installing pkgconfig files into the wrong libdir
- Deduplicate files in python_sitearch
==== python-regex ====
Version update (2022.6.2 -> 2022.7.9)
- update to 2022.7.9:
* Fix Emoji classified as letter
* Revisit compilation flag to prevent adding a single explicitly compiled regex to cache
* Fix Scoped inline flags 'a', 'u', and 'L' affecting global flags
==== python-scipy ====
- Keep lowercase egg-info despite setuptools 60+
==== python-urllib3 ====
Version update (1.26.9 -> 1.26.11)
- update to 1.26.11
* Fix OverflowError when TLS is used on some Python versions
- update to 1.26.10:
* Removed support for Python 3.5
* Fixed an issue where a ``ProxyError`` recommending configuring the proxy as HTTP
instead of HTTPS could appear even when an HTTPS proxy wasn't configured.
- refresh remove_mock.patch with extra mock usages
==== python-wcwidth ====
- Add patch remove-pkg_resources.patch:
* Use importlib.metadata rather than pkg_resources.
- Since importlib.metadata is not as a stickler as pkg_resources is, remove
multibuild.
==== python-widgetsnbextension ====
Version update (3.6.0 -> 3.6.1)
Subpackages: jupyter-widgetsnbextension python310-widgetsnbextension
- Update to 3.6.1
* no release notes (JS static version bumps)
==== read-only-root-fs ====
Version update (1.0+git20200730.1243fd0 -> 1.0+git20220801.cbb90bc)
- Update to version 1.0+git20220801.cbb90bc:
* Add another workaround for read-only subvolumes (boo#1202000)
* Correctly declare mount-overlay.sh as Bash file
- Update source service URL
==== rsync ====
- Security fix: [bsc#1201840, CVE-2022-29154]
* arbitrary file write vulnerability via do_server_recv function
* Added patch rsync-rsync-CVE-2022-29154.patch
==== tiff ====
- security update:
* CVE-2022-34526 [bsc#1202026]
+ tiff-CVE-2022-34526.patch
==== util-linux-systemd ====
- exclude bash-completion stuff for programs that are in
util-linux-systemd from util-linux for real.
==== vim ====
Version update (9.0.0073 -> 9.0.0135)
Subpackages: vim-data vim-data-common vim-small
- Updated to version 9.0.0135, fixes the following problems
* Coverity warns for double free.
* Some compilers warn for using an uninitialized variable. (Tony Mechelynck)
* No test for what patch 8.1.1424 fixes.
* When switching window in autocmd the restored cursor position may be wrong.
* Star register is changed when deleting and both "unnamed" and "unnamedplus"
are in 'clipboard'.
* Error in autoload script not reported for 'foldexpr'.
* Compiler warning for size_t to int conversion.
* Command line completion of user command may have duplicates. (Dani
Dickstein)
* Cannot interrupt global command from command line.
* ModeChanged event not triggered when leaving the cmdline window.
* Using "terraform" filetype for .tfvars file is bad.
* ":write" fails after ":file name" and then ":edit".
* Tabline is not redrawn when entering command line.
* MS-Windows: CTRL-[ on Belgian keyboard does not work like Esc.
* Pattern for detecting bitbake files is not sufficient.
* Fuzzy argument completion doesn't work for shell commands.
* No error when assigning bool to a string option with setwinvar().
* Duplicate error number.
* Plugins cannot change v:completed_item.
* Sway config files are recognized as i3config.
* Cursor restored unexpected with nested autocommand.
* Conditions are always true.
* Flag "new_value_alloced" is always true.
* Long quickfix line is truncated for :clist.
* missing include file in timer_create configure check.
* Scrollback can be wrong after redrawing the command line.
* Get hit-enter prompt for system() when '!' is in 'guioptions'.
* Invalid memory access in diff mode with "dp" and undo.
* Reading past end of line with insert mode completion.
* If running configure with cached results -lrt may be missing.
* Illegal memory access when pattern starts with illegal byte.
* Illegal byte regexp test doesn't fail when fix is reversed.
* Condition always has the same value.
* Configure check for timer_create may give wrong error.
* Writing over the end of a buffer on stack when making list of spell
suggestions.
* Help tag generation picks up words in code examples.
* "nocombine" is missing from synIDattr().
* has() is not strict about parsing the patch version.
* The command line takes up space even when not used.
* When 'cmdheight' is zero pressing ':' may scroll a window.
* Virtual text not displayed if 'signcolumn' is "yes".
* Text of removed textprop with text is not freed.
* No test for what patch 9.0.0155 fixes.
* Tiny chance that creating a backup file fails.
* Cannot put virtual text after or below a line.
* Breakindent test fails.
* Cannot build with small features.
* Code has more indent than needed.
* Cursor positioned wrong with virtual text after the line.
* Expanding file names fails in directory with more than 255 entries.
* Unused variable.
* Coverity complains about possible double free.
* Compiler warning for int/size_t usage.
* Cursor position wrong when inserting around virtual text.
* Virtual text with Tab is not displayed correctly.
* Multi-byte characters in virtual text not handled correctly.
* Virtual text after line moves to joined line. (Yegappan Lakshmanan)
* No test for text property with column zero.
==== webkit2gtk3 ====
Version update (2.36.4 -> 2.36.5)
Subpackages: libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 webkit2gtk-4_1-injected-bundles
- Update to version 2.36.5 (boo#1201980):
+ Add support for PAC proxy in the WebDriver implementation.
+ Fix video playback when loaded through custom URIs, this fixes
video playback in the Yelp documentation browser.
- Fix WebKitWebView::context-menu when using GTK4.
- Fix LTO builds with GCC.
- Fix several crashes and rendering issues.
+ Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.
==== webkit2gtk3-soup2 ====
Version update (2.36.4 -> 2.36.5)
Subpackages: libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 webkit2gtk-4_0-injected-bundles
- Update to version 2.36.5 (boo#1201980):
+ Add support for PAC proxy in the WebDriver implementation.
+ Fix video playback when loaded through custom URIs, this fixes
video playback in the Yelp documentation browser.
- Fix WebKitWebView::context-menu when using GTK4.
- Fix LTO builds with GCC.
- Fix several crashes and rendering issues.
+ Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.
==== webkit2gtk4 ====
Version update (2.36.4 -> 2.36.5)
Subpackages: libjavascriptcoregtk-5_0-0 libwebkit2gtk-5_0-0 typelib-1_0-JavaScriptCore-5_0 typelib-1_0-WebKit2-5_0 webkit2gtk-5_0-injected-bundles
- Update to version 2.36.5 (boo#1201980):
+ Add support for PAC proxy in the WebDriver implementation.
+ Fix video playback when loaded through custom URIs, this fixes
video playback in the Yelp documentation browser.
- Fix WebKitWebView::context-menu when using GTK4.
- Fix LTO builds with GCC.
- Fix several crashes and rendering issues.
+ Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.
==== xdg-utils ====
Version update (1.1.3+20201113 -> 1.1.3+20210805)
- Update to version 1.1.3+20210805:
* xdg-email fails on kde with desktop files #187
- switch to obs_scm
==== zlib-ng-compat ====
- Add baselibs.conf
1
0
Please note that this mail was generated by a script.
The described changes are computed based on the x86_64 DVD.
The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version…
https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&com…
Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org.
For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports
Packages changed:
Mesa (22.1.3 -> 22.1.4)
Mesa-drivers (22.1.3 -> 22.1.4)
MozillaFirefox (102.0.1 -> 103.0.1)
apparmor (3.0.5 -> 3.0.6)
bind
firewalld
gdb (11.1 -> 12.1)
gnome-settings-daemon
gnutls (3.7.6 -> 3.7.7)
iso-codes (4.10.0 -> 4.11.0)
kernel-source (5.18.12 -> 5.18.15)
libapparmor (3.0.5 -> 3.0.6)
libavif
libblockdev (2.26 -> 2.27)
libgcrypt
libnvme (1.1~rc0 -> 1.1)
mokutil (0.5.0 -> 0.6.0)
mpg123 (1.30.1 -> 1.30.2)
nvme-cli (2.1~rc0 -> 2.1.1)
opencc (1.1.3 -> 1.1.4)
polkit
poppler (22.07.0 -> 22.08.0)
poppler-qt5 (22.07.0 -> 22.08.0)
python-Genshi (0.7.5 -> 0.7.7)
python-Mako (1.1.6 -> 1.2.1)
python-alembic (1.8.0 -> 1.8.1)
python-cffi (1.15.0 -> 1.15.1)
python-cryptography (37.0.2 -> 37.0.4)
python-gobject (3.42.1 -> 3.42.2)
python-hatchling (1.4.1 -> 1.6.0)
python-httpcore (0.14.7 -> 0.15.0)
python-importlib-metadata (4.11.4 -> 4.12.0)
python-jsonschema (4.5.1 -> 4.8.0)
python-jupyter-core (4.9.2 -> 4.11.1)
python-nbclassic (0.3.7 -> 0.4.3)
python-notebook
python-numexpr
python-psutil
python-pycairo
python-regex (2022.6.2 -> 2022.7.9)
python-scipy
python-urllib3 (1.26.9 -> 1.26.11)
python-wcwidth
python-widgetsnbextension (3.6.0 -> 3.6.1)
read-only-root-fs (1.0+git20200730.1243fd0 -> 1.0+git20220801.cbb90bc)
rsync
util-linux
util-linux-systemd
vim (9.0.0073 -> 9.0.0135)
xdg-utils (1.1.3+20201113 -> 1.1.3+20210805)
=== Details ===
==== Mesa ====
Version update (22.1.3 -> 22.1.4)
Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1
- update to 22.1.4:
* anv: disable non uniform indexing of UBOs
* anv: use the right helper to invalidate memory
* intel/fs: ray query fix for global address
* isl: add new helper for format component compatibility
* radeonsi: fix random PS wave size
* r300: Keep rc_rename_regs() from overflowing
* aco/ra: update register file when updating phi definition
* radv: Fix vkCmdCopyQueryResults -> vkCmdResetPool hazard
==== Mesa-drivers ====
Version update (22.1.3 -> 22.1.4)
Subpackages: Mesa-dri Mesa-gallium Mesa-libva
- update to 22.1.4:
* anv: disable non uniform indexing of UBOs
* anv: use the right helper to invalidate memory
* intel/fs: ray query fix for global address
* isl: add new helper for format component compatibility
* radeonsi: fix random PS wave size
* r300: Keep rc_rename_regs() from overflowing
* aco/ra: update register file when updating phi definition
* radv: Fix vkCmdCopyQueryResults -> vkCmdResetPool hazard
==== MozillaFirefox ====
Version update (102.0.1 -> 103.0.1)
Subpackages: MozillaFirefox-translations-common
- Mozilla Firefox 103.0.1
* Enabled hardware acceleration on newer AMD cards.
* Fixed a crash on Firefox shutdown caused by a bug in the
audio manager
- Mozilla Firefox 103.0
https://www.mozilla.org/en-US/firefox/103.0/releasenotes
MFSA 2022-28 (bsc#1201758)
* CVE-2022-36319 (bmo#1737722)
Mouse Position spoofing with CSS transforms
* CVE-2022-36317 (bmo#1759951)
Long URL would hang Firefox for Android
* CVE-2022-36318 (bmo#1771774)
Directory indexes for bundled resources reflected URL
parameters
* CVE-2022-36314 (bmo#1773894)
Opening local <code>.lnk</code> files could cause unexpected
network loads
* CVE-2022-36315 (bmo#1762520)
Preload Cache Bypasses Subresource Integrity
* CVE-2022-36316 (bmo#1768583)
Performance API leaked whether a cross-site resource is
redirecting
* CVE-2022-36320 (bmo#1759794, bmo#1760998)
Memory safety bugs fixed in Firefox 103
* CVE-2022-2505 (bmo#1769739, bmo#1772824)
Memory safety bugs fixed in Firefox 103 and 102.1
- requires
NSS >= 3.80
rust = 1.61
rust-cbindgen >= 0.24.3
- Move %limit_build set before mozilla config to actually set the
value of %jobs to MOZ_MAKE_FLAGS to fix build on aarch64
==== apparmor ====
Version update (3.0.5 -> 3.0.6)
Subpackages: apparmor-abstractions apparmor-parser apparmor-parser-lang apparmor-profiles apparmor-utils apparmor-utils-lang python3-apparmor
- update to AppArmor 3.0.6
- fix LTO build in the parser
- remove dbus deny rule in abstractions/exo-open
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.6
for the detailed upstream changelog
- drop upstream patch dirtest-sort-mr900.diff
==== bind ====
- Add systemd drop-in directory for named service
[bsc#1201689, bind.spec]
==== firewalld ====
Subpackages: firewalld-bash-completion firewalld-lang python3-firewall
- readd ipset buildrequires to reenable ipset support (bsc#1202043)
- readd ebtables too, as there is no builtin support.
==== gdb ====
Version update (11.1 -> 12.1)
- Maintenance script qa.sh:
* Add SLE-12/x86_64 to "known clean configs".
* Add fail for PR29405.
* Add fail for PR26915.
- Patches added:
* gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch
- Maintenance script qa.sh:
* Remove PR29247 internal-error.
* Add SLE-15/aarch64 to "known clean configs".
- Patches added:
* gdb-fix-watchpoints-triggered.patch
- Maintenance script qa.sh:
* Add kfails for PR25038, PR29253, and PR29423.
* Remove gdb.mi/mi-var-invalidate-shlib.exp kfails.
- Mention qa-local.sh, qa-remote.sh and README.qa as sources.
- Maintenance script qa-local.sh:
* Use have_combo consistently.
- Maintenance script qa.sh:
* Add kfail_aarch64.
* Add PR29419/PR29409 kfails.
* Update PR29247 kfails.
- Patches added:
* make-gdb.ada-float-bits.exp-more-generic.patch
* gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch
- Actually apply fixup-gdb-test-bt-cfi-without-die.patch and
fixup-2-gdb-rhbz1553104-s390x-arch12-test.patch.
- Also remove gdb-6.5-readline-long-line-crash-test.patch from
patches list in gdb.spec.
- Patches added:
* powerpc-add-support-for-ieee-128-bit-format.patch
* powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch
* gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch
* powerpc-fix-for-gdb.base-eh_return.exp.patch
* fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch
* gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch
* fixup-gdb-test-bt-cfi-without-die.patch
* fix-core-file-detach-crash-corefiles-29275.patch
* gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch
* gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch
* gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch
* fix-for-gdb.base-solib-search.exp-test.patch
- Patch removed:
* gdb-6.7-ppc-clobbered-registers-O2-test.patch
* gdb-6.5-readline-long-line-crash-test.patch
- Patches updated:
* gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch
* gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch
- Maintenance script qa.sh:
* Add PR28504 KFAILs.
* Make .sum file matching less complex.
* Add fedora test-case kfail.
- Maintenance script qa-local.sh:
* Fix incorrect path name.
- Update comments in gdb.spec.
- Patches added:
* powerpc-update-expected-floating-point-output-for-gdb.arch-altivec-regs.exp-and-gdb.arch-vsx-regs.exp.patch
- Patches updated:
* gdb-testsuite-support-recording-of-getrandom.patch
(add aarch64 part)
- Maintenance script qa.sh:
* Add i586 to known clean configs.
- Patches added:
* gdb-testsuite-enable-some-test-cases-for-x86_64-m32.patch
* gdb-testsuite-fix-gdb.reverse-i387-env-reverse.exp-for-pie.patch
* gdb-testsuite-support-recording-of-getrandom.patch
- Patches updated:
* gdb-record-handle-statx-system-call.patch
- Maintenance script qa.sh:
* Allow only two summary files, for i586.
* Add i586 KFAILs.
- Maintenance script qa-local.sh:
* Add i586.
- Maintenance script qa-local.sh:
* Fix rpm pathname.
- Maintenance script qa-remote.sh:
* Skip stale config openSUSE_Leap_15.2.
- Maintenance script qa.sh:
* Drop known clean config: Leap 15.2 x86_64.
- Maintenance script qa-local.sh:
* Add cleanup step.
* Add "build all configs without testsuite" step.
* For "build all configs with testsuite" step, redirect output
to log and produce PASS/FAIL line, and make sure buildroot is
removed also in case of missing rpm.
* Use "--clean --trust-all-projects" for osc build commands.
* Drop openSUSE_Leap_15.2.
- Maintenance script qa.sh:
* Rename argument 6 to -local.
* Add PR29247 KFAILs.
* Update internal-error regexps.
- New maintenance script qa-remote.sh.
- Add "build all configs without testsuite" step in README.qa.
- Patches added (backport from trunk):
* gdb-testsuite-remove-attach-test-from-can_spawn_for_attach.patch
- README.qa:
* Add remote qa entry.
* Update local qa entry:
* Add notes entry.
* Other updates to match changes in qa-local.sh.
... changelog too long, skipping 312 lines ...
* Add Leap 15.4 x86_64 to know good configs.
==== gnome-settings-daemon ====
Subpackages: gnome-settings-daemon-lang
- Change dependency from polkit to /usr/bin/pkexec: pkexec has been
split out of polkit. Requiring the explicit capability seems
better here than having to worry what package carries the binary.
==== gnutls ====
Version update (3.7.6 -> 3.7.7)
- Update to 3.7.7: [bsc#1202020, CVE-2022-2509]
* libgnutls: Fixed double free during verification of pkcs7
signatures. CVE-2022-2509
* libgnutls: gnutls_hkdf_expand now only accepts LENGTH argument
less than or equal to 255 times hash digest size, to comply with
RFC 5869 2.3.
* libgnutls: Length limit for TLS PSK usernames has been increased
from 128 to 65535 characters
* libgnutls: AES-GCM encryption function now limits plaintext
length to 2^39-256 bits, according to SP800-38D 5.2.1.1.
* libgnutls: New block cipher functions have been added to
transparently handle padding. gnutls_cipher_encrypt3 and
gnutls_cipher_decrypt3 can be used in combination of
GNUTLS_CIPHER_PADDING_PKCS7 flag to automatically add/remove
padding if the length of the original plaintext is not a multiple
of the block size.
* libgnutls: New function for manual FIPS self-testing.
* API and ABI modifications:
- gnutls_fips140_run_self_tests: New function
- gnutls_cipher_encrypt3: New function
- gnutls_cipher_decrypt3: New function
- gnutls_cipher_padding_flags_t: New enum
* guile: Guile 1.8 is no longer supported
* guile: Session record port treats premature termination as EOF Previously,
a 'gnutls-error' exception with the 'error/premature-termination' value
would be thrown while reading from a session record port when the
underlying session was terminated prematurely. This was inconvenient
since users of the port may not be prepared to handle such an exception.
Reading from the session record port now returns the end-of-file object
instead of throwing an exception, just like it would for a proper
session termination.
* guile: Session record ports can have a 'close' procedure. The
'session-record-port' procedure now takes an optional second parameter,
and a new 'set-session-record-port-close!' procedure is provided to
specify a 'close' procedure for a session record port. This 'close'
procedure lets users specify cleanup operations for when the port is
closed, such as closing the file descriptor or port that backs the
underlying session.
* Rebase patches:
- gnutls-3.6.6-set_guile_site_dir.patch
- gnutls-FIPS-TLS_KDF_selftest.patch
- gnutls-FIPS-disable-failing-tests.patch
* Remove patch merged upstream:
- gnutls-FIPS-PBKDF2-KAT-requirements.patch
- https://gitlab.com/gnutls/gnutls/merge_requests/1561
==== iso-codes ====
Version update (4.10.0 -> 4.11.0)
Subpackages: iso-codes-lang
- Update to version 4.11.0:
+ Update ISO 639-3 codes from SIL website.
+ Updated translations.
==== kernel-source ====
Version update (5.18.12 -> 5.18.15)
- Linux 5.18.15 (bsc#1012628).
- watch-queue: remove spurious double semicolon (bsc#1012628).
- ASoC: SOF: Intel: disable IMR boot when resuming from ACPI S4
and S5 states (bsc#1012628).
- ASoC: SOF: pm: add definitions for S4 and S5 states
(bsc#1012628).
- ASoC: SOF: pm: add explicit behavior for ACPI S1 and S2
(bsc#1012628).
- watchqueue: make sure to serialize 'wqueue->defunct' properly
(bsc#1012628).
- x86/alternative: Report missing return thunk details
(bsc#1012628).
- x86/amd: Use IBPB for firmware calls (bsc#1012628).
- exfat: use updated exfat_chain directly during renaming
(bsc#1012628).
- exfat: fix referencing wrong parent directory information
after renaming (bsc#1012628).
- crypto: qat - re-enable registration of algorithms
(bsc#1012628).
- crypto: qat - add param check for DH (bsc#1012628).
- crypto: qat - add param check for RSA (bsc#1012628).
- crypto: qat - remove dma_free_coherent() for DH (bsc#1012628).
- crypto: qat - remove dma_free_coherent() for RSA (bsc#1012628).
- crypto: qat - fix memory leak in RSA (bsc#1012628).
- crypto: qat - add backlog mechanism (bsc#1012628).
- crypto: qat - refactor submission logic (bsc#1012628).
- crypto: qat - use pre-allocated buffers in datapath
(bsc#1012628).
- crypto: qat - set to zero DH parameters before free
(bsc#1012628).
- dlm: fix pending remove if msg allocation fails (bsc#1012628).
- clk: lan966x: Fix the lan966x clock gate register address
(bsc#1012628).
- x86/bugs: Warn when "ibrs" mitigation is selected on Enhanced
IBRS parts (bsc#1012628).
- perf/x86/intel/lbr: Fix unchecked MSR access error on HSW
(bsc#1012628).
- sched/deadline: Fix BUG_ON condition for deboosted tasks
(bsc#1012628).
- bpf: Make sure mac_header was set before using it (bsc#1012628).
- mm/mempolicy: fix uninit-value in mpol_rebind_policy()
(bsc#1012628).
- KVM: Don't null dereference ops->destroy (bsc#1012628).
- spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref
for non DMA transfers (bsc#1012628).
- KVM: selftests: Fix target thread to be migrated in rseq_test
(bsc#1012628).
- gpio: gpio-xilinx: Fix integer overflow (bsc#1012628).
- selftests: gpio: fix include path to kernel headers for out
of tree builds (bsc#1012628).
- net/sched: cls_api: Fix flow action initialization
(bsc#1012628).
- tcp: Fix data-races around sysctl_tcp_max_reordering
(bsc#1012628).
- tcp: Fix a data-race around sysctl_tcp_abort_on_overflow
(bsc#1012628).
- tcp: Fix a data-race around sysctl_tcp_rfc1337 (bsc#1012628).
- tcp: Fix a data-race around sysctl_tcp_stdurg (bsc#1012628).
- tcp: Fix a data-race around sysctl_tcp_retrans_collapse
(bsc#1012628).
- tcp: Fix data-races around sysctl_tcp_slow_start_after_idle
(bsc#1012628).
- tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts
(bsc#1012628).
- tcp: Fix data-races around sysctl_tcp_recovery (bsc#1012628).
- tcp: Fix a data-race around sysctl_tcp_early_retrans
(bsc#1012628).
- tcp: Fix data-races around sysctl knobs related to SYN option
(bsc#1012628).
- udp: Fix a data-race around sysctl_udp_l3mdev_accept
(bsc#1012628).
- ip: Fix data-races around sysctl_ip_prot_sock (bsc#1012628).
- ipv4: Fix data-races around sysctl_fib_multipath_hash_fields
(bsc#1012628).
- ipv4: Fix data-races around sysctl_fib_multipath_hash_policy
(bsc#1012628).
- ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh
(bsc#1012628).
- can: rcar_canfd: Add missing of_node_put() in rcar_canfd_probe()
(bsc#1012628).
- drm/imx/dcss: Add missing of_node_put() in fail path
(bsc#1012628).
- drm/panel-edp: Fix variable typo when saving hpd absent delay
from DT (bsc#1012628).
- amt: do not use amt->nr_tunnels outside of lock (bsc#1012628).
- amt: drop unexpected multicast data (bsc#1012628).
- amt: drop unexpected query message (bsc#1012628).
- amt: drop unexpected advertisement message (bsc#1012628).
- amt: add missing regeneration nonce logic in request logic
(bsc#1012628).
- amt: use READ_ONCE() in amt module (bsc#1012628).
- amt: remove unnecessary locks (bsc#1012628).
- amt: use workqueue for gateway side message handling
(bsc#1012628).
- net: dsa: vitesse-vsc73xx: silent spi_device_id warnings
(bsc#1012628).
- net: dsa: sja1105: silent spi_device_id warnings (bsc#1012628).
- be2net: Fix buffer overflow in be_get_module_eeprom
(bsc#1012628).
... changelog too long, skipping 599 lines ...
- commit fcd7336
==== libapparmor ====
Version update (3.0.5 -> 3.0.6)
- update to AppArmor 3.0.6
- fix LTO build in the parser
- remove dbus deny rule in abstractions/exo-open
- see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.6
for the detailed upstream changelog
- drop upstream patch dirtest-sort-mr900.diff
==== libavif ====
- Enable libyuv on TW
==== libblockdev ====
Version update (2.26 -> 2.27)
Subpackages: libbd_btrfs2 libbd_crypto2 libbd_fs2 libbd_loop2 libbd_lvm2 libbd_mdraid2 libbd_part2 libbd_swap2 libbd_utils2 libblockdev2
- Update to version 2.27:
+ Fix for s390x: Remove double fclose in bd_s390_dasd_online
+ fs: Return BD_FS_ERROR_UNKNOWN_FS on mounting unknown
filesystem
+ overrides: Fix translating exceptions in ErrorProxy
+ vdo_stats: Default to 100 % savings for invalid savings values
+ lvm-dbus: Add support for changing compression and
deduplication
+ lvm:
- Fix reading statistics for VDO pools with VDO 8
- Do not set global config to and empty string
- Do not include duplicate entries in bd_lvm_lvs output
- Use correct integer type in for comparison
+ crypto: Remove useless comparison in progress report in
luks_format
==== libgcrypt ====
- Fix reproducible build problems:
- Do not use %release in binaries (but use SOURCE_DATE_EPOCH)
- Fix date call messed up by spec-cleaner
==== libnvme ====
Version update (1.1~rc0 -> 1.1)
- Update to version 1.1:
* Regenerate all documentation
* json: fixup dhchap_ctrl_key definitions
* fabrics: Fix build_options() return values
* fabrics: sanitize dump-config output
* Fix poll.h includes
* build: Drop -nostdinc for LibreSSL header checks
* ioctl: Honor rae in nvme_get_nsid_log
* build: Add support to build against LibreSSL
* rpmbuild: Enable 'make rpm' to build rpm pkgs #408
* mi: unify MI Get Log Page function with ioctl API
* python: add missing ctrl attrs to Python bindings
* mi-mctp: Add timeout support to MCTP transport
* mi: Add maximum More Processing Required limit API
* mi: Add endpoint get/set timeout API
==== mokutil ====
Version update (0.5.0 -> 0.6.0)
- Update to 0.6.0
+ 6c98907 SBAT revocation update support
+ 0276891 mokutil: Add trust_mok_keys and untrust_mok_keys
+ 57bc385 mokutil: enable setting fallback verbosity and noreboot mode
+ b15e7c4 util: add the missing stdio.h
- Drop mokutil-fix-missing-header.patch (upstream)
==== mpg123 ====
Version update (1.30.1 -> 1.30.2)
Subpackages: libmpg123-0 mpg123-openal
- Update to version 1.30.2
* Only use EWOULDBLOCK if the macro is defined.
==== nvme-cli ====
Version update (2.1~rc0 -> 2.1.1)
Subpackages: nvme-cli-bash-completion
- Update to version 2.1.1:
* build: Update version to v2.1.1
* build: Extend release script to support micro version releases
* build: Add minimum build requirement on libnvme
* wrapper: Add weak nvme_init_copy_range_f1 symbol
* build: Update version before regenerating docs
* build: Update release version rules
- Update to version v2.1:
* nvme: Do not print error message in collect_effects_log helper
* fabrics: Remove dhchap-ctrl-secret from discover/connect-all
* nvme-print: sanitize the get-feature async event config output
* nvme: Set default rae value for nvme_get_nsid_log users
* fabrics: Avoid nvme_scan_ctrl when disconnecting
* print: Fix nvme_id_uuid_list
==== opencc ====
Version update (1.1.3 -> 1.1.4)
Subpackages: libopencc1_1 opencc-data
- update to 1.1.4:
* Add python 3.10 support
* remove support for python < 3.7 and node 10.x
* small bugfixes
- add fix-soversion.patch for fixing the leftover .so version tag
==== polkit ====
Subpackages: libpolkit-agent-1-0 libpolkit-gobject-1-0 typelib-1_0-Polkit-1_0
- add split-provides for polkit:/usr/bin/pkexec. (bsc#1202070)
==== poppler ====
Version update (22.07.0 -> 22.08.0)
Subpackages: libpoppler-cpp0 libpoppler-glib8 poppler-tools
- update to 22.08.0:
* Fix rendering text on some forms
* CairoOutputDev: Support Type3 charprocs having Resources
* Fix crashes on malformed files
==== poppler-qt5 ====
Version update (22.07.0 -> 22.08.0)
- update to 22.08.0:
* Fix rendering text on some forms
* CairoOutputDev: Support Type3 charprocs having Resources
* Fix crashes on malformed files
==== python-Genshi ====
Version update (0.7.5 -> 0.7.7)
- Update to 0.7.7:
* Declared setuptools as the build backend (#65)
* Fixed deprecation warnings caused by escape sequences in regex pattern
strings (#63)
- Changes from 0.7.6:
* Added support for Python 3.10 and 3.11 (#54, #56, #58)
* Replaced assertEquals with assertEqual. assertEquals was deprecated in
Python 3.2. (#42)
* Removed used of element.getchildren() which has been removed from the Python
standard library elementtree in Python 3.9. (#57)
* Added support for Python 3.10 by using CodeType.replace in
`build_code_chunk` to make code object updates more robust against changes
in CodeType. (#49)
* Moved tests and releases workflows to GitHub Actions (#61, #51)
* Fixed reference leak in Markup.join C implementation. (#47)
* Sort directives only by directive index. Previously they were sorted by the
class, namespace and arguments of the directives. This was acceptable in
Python 2, but is a bug in Python 3 since some the arguments may not be
comparable. (#44)
* Add support for msgctxt to i18n. (#13)
* Implemented skipping of empty attributes during translation to match the
behaviour during translation extraction (i.e. don't try to translate empty
strings that are not extracted). (#38)
* Ported setuptools options to declarative config in setup.cfg. (#40)
* Removed used of deprecated setuptools Feature in setup.py. (#39)
- Removed patches, already in upstream:
* Genshi-pr39-fix-setuptools-extension.patch
* Genshi-pr49-fix-python310-tests.patch
==== python-Mako ====
Version update (1.1.6 -> 1.2.1)
- Update to 1.2.1:
* [bug] [tests] Various fixes to the test suite in the area of exception
message rendering to accommodate for variability in Python versions as
well as Pygments.
* [performance] Optimized some codepaths within the lexer/Python code
generation process, improving performance for generation of templates
prior to their being cached. Pull request courtesy Takuto Ikuta.
* [changed] [py3k] Corrected "universal wheel" directive in setup.cfg so
that building a wheel does not target Python 2.
* [changed] [py3k] The bytestring_passthrough template argument is removed,
as this flag only applied to Python 2.
* [changed] [py3k] With the removal of Python 2's cStringIO, Mako now uses
its own internal FastEncodingBuffer exclusively.
* [changed] Refactored test utilities into mako.testing module. Removed
unittest.TestCase dependency in favor of pytest.
* [changed] [setup] Replaced the use of pkg_resources with the importlib
library. For Python < 3.8 the library importlib_metadata is used.
* [changed] [py3k] Removed support for Python 2 and Python 3.6. Mako now
requires Python >= 3.7.
* [bug] [py3k] Mako now performs exception chaining using raise from,
correctly identifying underlying exception conditions when it raises its
own exceptions. Pull request courtesy Ram Rachum.
- Remove python2 gubbins, since it is no longer supported.
==== python-alembic ====
Version update (1.8.0 -> 1.8.1)
- update to 1.8.1:
* Fixed bug where the SQLite implementation of
:meth:`.Operations.rename_table` would render an explicit schema name for
both the old and new table name, which while is the standard ALTER syntax,
is not accepted by SQLite's syntax which doesn't support a rename across
schemas. In particular, the syntax issue would prevent batch mode from
working for SQLite databases that made use of attached databases (which are
treated as "schemas" in SQLAlchemy).
* Added an error raise for the condition where
:meth:`.Operations.batch_alter_table` is used in ``--sql`` mode, where the
operation requires table reflection, as is the case when running against
SQLite without giving it a fixed ``Table`` object. Previously the operation
would fail with an internal error. To get a "move and copy" batch
operation as a SQL script without connecting to a database,
a ``Table`` object should be passed to the
:paramref:`.Operations.batch_alter_table.copy_from` parameter so that
reflection may be skipped.
==== python-cffi ====
Version update (1.15.0 -> 1.15.1)
- update to 1.15.1:
* If you call ffi.embedding_api() but donât write any extern âPythonâ function
there, then the resulting C code would fail an assert. Fixed.
* Updated Windows/arm64 embedded libffi static lib to v3.4.2, and scripted to
ease future updates (thanks Niyas Sait!)
==== python-cryptography ====
Version update (37.0.2 -> 37.0.4)
- update to 37.0.4:
* updated wheels to b ecompiled against openssl 3.0.5
==== python-gobject ====
Version update (3.42.1 -> 3.42.2)
Subpackages: python310-gobject python310-gobject-Gdk python310-gobject-cairo
- Update to version 3.42.2:
+ Error out instead of crashing when marshaling unsupported
fundamental types in some cases.
+ Add a workaround for a PyPy 3.9+ bug when threads are used.
+ Fix crashes when marshaling zero terminated arrays for certain
item types.
+ Fix a crash/refcounting error in case marshaling a hash table
fails.
+ Make the test suite pass again with PyPy.
+ tests: support running tests with (MSVC) CPython 3.8+ on
Windows.
+ interface: Fix leak when overriding GInterfaceInfo.
+ setup.py: look up pycairo headers without importing the module
(helps with building on Windows and MSVC CPython 3.8+).
- Work around vendored distutils in setuptools >= 60 incorrectly
installing pkgconfig files into the wrong libdir
==== python-hatchling ====
Version update (1.4.1 -> 1.6.0)
- update to version 1.6.0:
* Changed:
+ When no build targets are specified on the command line, now
default to sdist and wheel targets rather than what happens
to be defined in config
+ The code version source now only supports files with known
extensions
+ Global build hooks now run before target-specific build hooks
to better match expected behavior
* Added:
+ The code version source now supports loading extension
modules
+ Add search-paths option for the code version source
* Fixed:
+ Fix removing sources using an empty string value in the
mapping
+ The strict-naming option now also applies to the metadata
directory of wheel targets
- update to version 1.5.0:
* Added:
+ Support the final draft of PEP 639
+ Add strict-naming option for sdist and wheel targets
* Fixed: Project names are now stored in sdist and wheel target
core metadata exactly as defined in pyproject.toml without
normalization to allow control of how PyPI displays them
- require python 3.7 as minimum version to match upstream
requirement
==== python-httpcore ====
Version update (0.14.7 -> 0.15.0)
- Update to 0.15.0
* Drop Python 3.6 support (#535)
* Ensure HTTP proxy CONNECT requests include timeout
configuration. (#506)
* Switch to explicit typing.Optional for type hints (#513)
* For trio map OSError exceptions to ConnectError (#543)
- Fix forgotten test package dep drops -- gh#encode/httpcore#473
==== python-importlib-metadata ====
Version update (4.11.4 -> 4.12.0)
- update to 4.12.0:
* py-93259: Now raise ``ValueError`` when ``None`` or an empty
string are passed to ``Distribution.from_name`` (and other
callers).
==== python-jsonschema ====
Version update (4.5.1 -> 4.8.0)
- update to 4.8.0:
* ``best_match`` no longer traverses into ``anyOf`` and ``oneOf`` when all of
the errors within them seem equally applicable. This should lead to clearer
error messages in some cases where no branches were matched.
- update to 4.7.2:
* Fix best_match's type matching when it's an array.
- update to 4.7.1:
* Minor case correction for PyPI links
- update to 4.7.0:
* Enhance best match to prefer errors from matching types. by @Julian in #972
- update to 4.6.2:
* docs: Fix a few typos by @timgates42 in #969
- update to 4.6.1:
* Type annotate format checker methods by @sirosen in #958
* Fix fuzzer to include instrumentation by @DavidKorczynski in #965
* [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #967
- update to 4.6.0:
* Add package_url for changelog by @fhightower in #950
* Only validate unevaluated properties/items on applicable types by @EpicWink in #949
* Add v4.5.1 to changelog by @sirosen in #956
* Modernize the packaging setup via PEP 621 and Hatch. by @Julian in #957
==== python-jupyter-core ====
Version update (4.9.2 -> 4.11.1)
- Update to 4.11.1
* Fix inclusion of jupyter file and check in CI by @blink1073 in
[#276]
- Release 4.11.0
* Use hatch backend by @blink1073 in #265
* is_hidden: Use normalized paths by @martinRenou in #271
- Release 4.10.0
* Include all files from jupyter_core by @jonringer in #253
- Refresh use_rpms_paths.patch
==== python-nbclassic ====
Version update (0.3.7 -> 0.4.3)
Subpackages: jupyter-nbclassic python310-nbclassic
- Update to 0.4.3
* Handle execution errors with empty traceback entries similar to
Lab #126 (@kevin-bates)
* fix some import errors in 0.4 #130 (@minrk)
* fix enable-on-install #127 (@minrk)
* Fix notebook shim version check #129 (@minrk)
- Release 0.4.2
* Don't shim notebook if notebook<7 is available #123 (@echarles)
* Relax assert for IPythonHandler in case of notebook<6 #122
(@echarles)
* Fix executable name in desktop file #119 (@antonio-rojas)
- Release 0.4.0
* Shim to support the notebook extensions #113 (@echarles)
* nbclassic to use its own static assets #96 (@echarles)
* Add the notebook 6.4.x tests, docs and companion files (with
git history) #94 (@echarles)
* Add the notebook static assets (with git history) #93
(@echarles)
- Use the pure wheel for install which has the JS stuff.
- Override notebook entrypoints with higer priority libalternatives
configurations gh#jupyter/notebook#6501
- Test in multibuild for all the dependencies. Stay with nbclassic
tests only, not the notebook tests further down in the tree.
==== python-notebook ====
Subpackages: jupyter-notebook python310-notebook
- Enforce libalternatives grouping for nbclassic alternatives
gh#jupyter/notebook#6501
==== python-numexpr ====
- Fix requirements
==== python-psutil ====
- Fix tests: setuptools changed the builddir library path and does
not find the module from it. Use the installed platlib instead
and exclude psutil.tests only later.
- Refresh skip-obs.patch
==== python-pycairo ====
- Work around vendored distutils in setuptools >= 60 incorrectly
installing pkgconfig files into the wrong libdir
- Deduplicate files in python_sitearch
==== python-regex ====
Version update (2022.6.2 -> 2022.7.9)
- update to 2022.7.9:
* Fix Emoji classified as letter
* Revisit compilation flag to prevent adding a single explicitly compiled regex to cache
* Fix Scoped inline flags 'a', 'u', and 'L' affecting global flags
==== python-scipy ====
- Keep lowercase egg-info despite setuptools 60+
==== python-urllib3 ====
Version update (1.26.9 -> 1.26.11)
- update to 1.26.11
* Fix OverflowError when TLS is used on some Python versions
- update to 1.26.10:
* Removed support for Python 3.5
* Fixed an issue where a ``ProxyError`` recommending configuring the proxy as HTTP
instead of HTTPS could appear even when an HTTPS proxy wasn't configured.
- refresh remove_mock.patch with extra mock usages
==== python-wcwidth ====
- Add patch remove-pkg_resources.patch:
* Use importlib.metadata rather than pkg_resources.
- Since importlib.metadata is not as a stickler as pkg_resources is, remove
multibuild.
==== python-widgetsnbextension ====
Version update (3.6.0 -> 3.6.1)
Subpackages: jupyter-widgetsnbextension python310-widgetsnbextension
- Update to 3.6.1
* no release notes (JS static version bumps)
==== read-only-root-fs ====
Version update (1.0+git20200730.1243fd0 -> 1.0+git20220801.cbb90bc)
- Update to version 1.0+git20220801.cbb90bc:
* Add another workaround for read-only subvolumes (boo#1202000)
* Correctly declare mount-overlay.sh as Bash file
- Update source service URL
==== rsync ====
- Security fix: [bsc#1201840, CVE-2022-29154]
* arbitrary file write vulnerability via do_server_recv function
* Added patch rsync-rsync-CVE-2022-29154.patch
==== util-linux ====
Subpackages: libblkid1 libfdisk1 libmount1 libsmartcols1 libuuid1 util-linux-lang
- exclude bash-completion stuff for programs that are in
util-linux-systemd from util-linux for real.
==== util-linux-systemd ====
- exclude bash-completion stuff for programs that are in
util-linux-systemd from util-linux for real.
==== vim ====
Version update (9.0.0073 -> 9.0.0135)
Subpackages: vim-data vim-data-common vim-small
- Updated to version 9.0.0135, fixes the following problems
* Coverity warns for double free.
* Some compilers warn for using an uninitialized variable. (Tony Mechelynck)
* No test for what patch 8.1.1424 fixes.
* When switching window in autocmd the restored cursor position may be wrong.
* Star register is changed when deleting and both "unnamed" and "unnamedplus"
are in 'clipboard'.
* Error in autoload script not reported for 'foldexpr'.
* Compiler warning for size_t to int conversion.
* Command line completion of user command may have duplicates. (Dani
Dickstein)
* Cannot interrupt global command from command line.
* ModeChanged event not triggered when leaving the cmdline window.
* Using "terraform" filetype for .tfvars file is bad.
* ":write" fails after ":file name" and then ":edit".
* Tabline is not redrawn when entering command line.
* MS-Windows: CTRL-[ on Belgian keyboard does not work like Esc.
* Pattern for detecting bitbake files is not sufficient.
* Fuzzy argument completion doesn't work for shell commands.
* No error when assigning bool to a string option with setwinvar().
* Duplicate error number.
* Plugins cannot change v:completed_item.
* Sway config files are recognized as i3config.
* Cursor restored unexpected with nested autocommand.
* Conditions are always true.
* Flag "new_value_alloced" is always true.
* Long quickfix line is truncated for :clist.
* missing include file in timer_create configure check.
* Scrollback can be wrong after redrawing the command line.
* Get hit-enter prompt for system() when '!' is in 'guioptions'.
* Invalid memory access in diff mode with "dp" and undo.
* Reading past end of line with insert mode completion.
* If running configure with cached results -lrt may be missing.
* Illegal memory access when pattern starts with illegal byte.
* Illegal byte regexp test doesn't fail when fix is reversed.
* Condition always has the same value.
* Configure check for timer_create may give wrong error.
* Writing over the end of a buffer on stack when making list of spell
suggestions.
* Help tag generation picks up words in code examples.
* "nocombine" is missing from synIDattr().
* has() is not strict about parsing the patch version.
* The command line takes up space even when not used.
* When 'cmdheight' is zero pressing ':' may scroll a window.
* Virtual text not displayed if 'signcolumn' is "yes".
* Text of removed textprop with text is not freed.
* No test for what patch 9.0.0155 fixes.
* Tiny chance that creating a backup file fails.
* Cannot put virtual text after or below a line.
* Breakindent test fails.
* Cannot build with small features.
* Code has more indent than needed.
* Cursor positioned wrong with virtual text after the line.
* Expanding file names fails in directory with more than 255 entries.
* Unused variable.
* Coverity complains about possible double free.
* Compiler warning for int/size_t usage.
* Cursor position wrong when inserting around virtual text.
* Virtual text with Tab is not displayed correctly.
* Multi-byte characters in virtual text not handled correctly.
* Virtual text after line moves to joined line. (Yegappan Lakshmanan)
* No test for text property with column zero.
==== xdg-utils ====
Version update (1.1.3+20201113 -> 1.1.3+20210805)
- Update to version 1.1.3+20210805:
* xdg-email fails on kde with desktop files #187
- switch to obs_scm
1
0
Hello everyone,
So, the TL;DR here is that I think that distrobox [1] is a better fit
than toolbox [2] for MicroOS Desktop (and _only_ for Desktop), and we
should switch to that. There are some things that I'd like to make
happen, however, before we do that, one of which is us having an
official distrobox container image (reason explained below), like we
have for toolbox [3]. It could be something like this one:
podman pull registry.opensuse.org/home/dfaggioli/images/container/opensuse/tumbleweed-d…
https://build.opensuse.org/package/show/home:dfaggioli:images/tumbleweed-di…
Does anyone know what's the process for making it live in something
like opensuse/tumbleweed-distrobox:latest rather than in my
home/dfaggioli/images/container/opensuse ?
Another thing. For actually putting Distrobox there, I think I should
add `Requires: distrobox` to the "desktop-common" section of the
patterns-microos.spec. But how do I get rid of toolbox in a way that
it's not installed only for Desktop flavors? (Actually, I don't even
see any Requires: for toolbox in that spec file. Anyone knows what
brings it in?
I would not like to go and make distrobox and toolbox conflict. Sure,
we do want only one there in MicroOS, by default, but it's entirely
possible that someone wants to use them together...
---
Now, the long part. distrobox is better for Desktop, IMO. It is born
for that purpose, it has some very nice features, for when one is
inside of the container, like distrobox-export and distrobox-host-exec,
it has the nice bonus added feature that it gives the user the chance
to use a wide range of other distro's images [4].
In particular for GUI apps (yes, I know, flatpaks; but if a flatpak is
not available or does not work well, it's really handy to be able to
run GUI stuff in a toolbox/distrobox), the out-of-the box experience is
awesome, as you just install the app inside of the distrobox, and it
works. While in toolbox, it's all a bit meh, and a few tricky steps are
necessary.
In fact, all the things I mentioned are possible with toolbox too,
either already or they can be implemented. But they'd made toolbox
quite a bit more complex, and it would be just duplicating the effort
(or someone may say triplicating, considering there's Fedora toolbox
too).
Distrobox also has an active and vibrant community, new features are
continuously added (and bugs are being fixed, of course), it is
(rightfully) getting a lot of attention in the news and at conferences
and it has some _awesome_ documentation [5].
Toolbox, on the other hand, is perfect for the debugging and tweaking
use-cases. The "user mode" that I added a while back is IMO still very
useful, even in that case (if you even have a !root user in the
system), and I plan to continue working on and maintaining it. It is
super simple to understand and to hack and it is super fast and very
lean, e.g., in terms of how small the image we use for it is.
And these are pretty much the reasons why I propose that we go for
distrobox in Desktop and toolbox in !Desktop. If we do, we'd be the
first distro integrating it by default, at least as far as I'm aware
of.
Now, the only problem distrobox has it that the first time that one
uses it, it needs to:
- pull down an image
- start an container, out of that image
- "prepare" this container a little bit
This is common to both toolbox and distrobox, of course. For toolbox,
we use a special image, derived from TW, but with some (debugging
oriented) packages included already. It's very small, which means it's
fast to pull. During the "preparation" phase, we don't do much. We do
check if some packages are there, and potentially install them, but
it's just a few, and the process is still very quick (which was the
actual goal).
On the other hand, however, if the user really wants to use toolbox as
his/hers own everyday environment, quite a bit of tweaking is
necessary. Of course, we could put some of this tweaking either in the
image or in the preparation phase, but that would make the image larger
and/or the first setup of the container slow.
Which is, in fact, the case of distrobox. :-) With distrobox, once the
container is created, is already ready for everyday usage. Right now we
don't have a special image for distrobox, so all that it's necessary
for making it so, needs to happen in the preparation phase. This
includes installing quite a few packages, which takes time.
Let's look at some numbers:
* Toolbox:
time toolbox run -c test-tw whoami
real 1m27.740s
So, not too bad.
* Distrobox:
time distrobox enter -- whoami
real 5m27,693s
So, really slow. To the point of being unacceptable... :-/
Let's also check what happens when we try to use such containers,
though, sticking to the example of a GUI app.
* Toolbox:
time sudo zypper --non-interactive in gedit
real 2m43.442s
And, please, consider that after doing this, gedit *will* *not* start,
printing some super weird errors, which are rather tricky to understand
and get around. _If_ you remember to do `zypper in --recommends gedit`,
that will probably work (but takes longer, as more packages are
installed).
* Distrobox:
time sudo zypper --non-interactive in gedit
real 0m29.143s
And gedit works!
In summary, distrobox is super slow when creating the container the
first time, but then it's fast and all is working. Toolbox is fast when
starting, but then normal operation might be a bit slow and tricky.
In my opinion, this makes distrobox a preferable. It'd be awesome,
however, if we could make the first time setup faster. As a metter of
fact, we can, with a custom image for distrobox, here's what we get:
time distrobox enter -n test-dbx -- whoami
real 2m32.939s
Which is quite fine, as it's only 1 minute slower than toolbox. And in
return we get all the features and all the benefits of a fast and fully
functional out-of-the box environment.
The custom image I'm using for these experiments is this one:
https://build.opensuse.org/package/show/home:dfaggioli:images/tumbleweed-di…
Note that this is just a first attempt. There are high chances that the
image can be further optimized (and both me and Luca will look into
that), hence reducing the first time setup time even more.
This means that we can achieve a combined effect of first time creation
time of 2m30sec (or less), and quick and 100% working out of the box
experience (gedit installed and working in 30secs).
And this is why I'm asking whether it would be possible to make it
official, published under something like:
registry.opensuse.org/opensuse/tumbleweed-distrobox:latest
And, if yes, what's the process for getting it there?
Thanks and Regards
[1] https://github.com/89luca89/distrobox
[2] https://github.com/openSUSE/microos-toolbox
[3] https://registry.opensuse.org/cgi-bin/cooverview?srch_term=project%3D%5Eope…
[4] https://github.com/89luca89/distrobox/blob/main/docs/compatibility.md
[5] https://github.com/89luca89/distrobox/tree/main/docs
--
Dario Faggioli, Ph.D
http://about.me/dario.faggioli
Virtualization Software Engineer
SUSE Labs, SUSE https://www.suse.com/
-------------------------------------------------------------------
<<This happens because _I_ choose it to happen!>> (Raistlin Majere)
3
2
Good day
I (ab)use the change of the mailing list to introduce myself. Long time
Unix developer from Switzerland, former BSD developer and kernel hacker.
I bought to HP 380 servers and I plan to install 6 VMs on each to run
microOS and host Kubernetes, using k3s. So on each server two k3s
controller and four worker nodes.
- Marc
1
0
This email is just really to check if the mailinglist is working, as
all previous test emails seemed to vanish and never showed on the
archive.
Hopefully this one will, then I'll start telling people about the list
--
Richard Brown
Linux Distribution Engineer - Future Technology Team
SUSE Software Solutions Germany GmbH, Frankenstraße 146, D-90461
Nuremberg, Germany
(HRB 36809, AG Nürnberg)
Managing Directors/Geschäftsführer: Ivo Totev, Andrew Myers, Andrew
McDonald, Martje Boudien Moerman
2
1