Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version=Tumbleweed&build=20230303 https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&component=MicroOS&query_format=advanced&resolution=--- Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ImageMagick Mesa Mesa-drivers QGnomePlatform-qt5 baloo5-widgets (22.12.2 -> 22.12.3) bcache-tools cups-filters dolphin (22.12.2 -> 22.12.3) ffmpegthumbs (22.12.2 -> 22.12.3) kaccounts-integration (22.12.2 -> 22.12.3) kaccounts-providers (22.12.2 -> 22.12.3) kate (22.12.2 -> 22.12.3) kde-print-manager (22.12.2 -> 22.12.3) kdegraphics-thumbnailers (22.12.2 -> 22.12.3) kdenetwork-filesharing (22.12.2 -> 22.12.3) kdialog (22.12.2 -> 22.12.3) khelpcenter5 (22.12.2 -> 22.12.3) kio-extras5 (22.12.2 -> 22.12.3) konsole (22.12.2 -> 22.12.3) kwalletmanager5 (22.12.2 -> 22.12.3) libkdcraw (22.12.2 -> 22.12.3) libkexiv2 (22.12.2 -> 22.12.3) libqt5-qtbase libqt5-qtdeclarative mobipocket (22.12.2 -> 22.12.3) openvpn (2.5.8 -> 2.5.9) qpdf (11.2.0 -> 11.3.0) redis rust-keylime (0.2.0+git.1677002906.cf6c4f0 -> 0.2.0+git.1677691779.f7edd9a) signon-kwallet-extension (22.12.2 -> 22.12.3) spectacle (22.12.2 -> 22.12.3) v4l-utils (1.22.1 -> 1.24.1) vim (9.0.1357 -> 9.0.1367) === Details === ==== ImageMagick ==== Subpackages: ImageMagick-config-7-SUSE libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - cleanup old conditional, really build without djvulibre if requested (now %bcond_without djvu) ==== Mesa ==== Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - U_glx-fix-indirect-initialization-crash.patch * Fixes: b090246a ("glx: Only compute client GL extensions for indirect contexts") * Closes: https://gitlab.freedesktop.org/mesa/mesa/-/issues/8393 - supersedes n_Revert-glx-Only-compute-client-GL-extensions-for-ind.patch ==== Mesa-drivers ==== Subpackages: Mesa-dri Mesa-gallium Mesa-libva - U_glx-fix-indirect-initialization-crash.patch * Fixes: b090246a ("glx: Only compute client GL extensions for indirect contexts") * Closes: https://gitlab.freedesktop.org/mesa/mesa/-/issues/8393 - supersedes n_Revert-glx-Only-compute-client-GL-extensions-for-ind.patch ==== QGnomePlatform-qt5 ==== - Don't use %elif which is not supported in SLE/Leap - Use qt6 macros when building the qt6 flavor so the correct compiler is used to build the package in SLE/Leap - Add patch to fix an undefined reference to XSetTransientForHint in SLE/Leap: * fix-XSetTransientForHint.patch ==== baloo5-widgets ==== Version update (22.12.2 -> 22.12.3) Subpackages: baloo5-widgets-lang - Update to 22.12.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.3/ ==== bcache-tools ==== - bcache-tools: improve is_zoned_device() (bsc#1208425) 0029-bcache-tools-improve-is_zoned_device.patch ==== cups-filters ==== - require_cxx17.patch: qpdf dependency is using std::string_view which is a c++17 feature... so we can't use c++11... Maybe it made sense to force c++11 at some point when it was not default, but with new compilers, we are actually downgrading features sets. - removed spec configure references to filter (ijs, opvp) that were removed in version 1.25 ==== dolphin ==== Version update (22.12.2 -> 22.12.3) Subpackages: dolphin-part dolphin-part-lang libdolphinvcs5 - Update to 22.12.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.3/ ==== ffmpegthumbs ==== Version update (22.12.2 -> 22.12.3) - Update to 22.12.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.3/ ==== kaccounts-integration ==== Version update (22.12.2 -> 22.12.3) Subpackages: kaccounts-integration-lang libkaccounts2 - Update to 22.12.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.3/ ==== kaccounts-providers ==== Version update (22.12.2 -> 22.12.3) Subpackages: kaccounts-providers-lang - Update to 22.12.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.3/ ==== kate ==== Version update (22.12.2 -> 22.12.3) Subpackages: kate-lang kate-plugins - Update to 22.12.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.3/ ==== kde-print-manager ==== Version update (22.12.2 -> 22.12.3) Subpackages: kde-print-manager-lang - Update to 22.12.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.3/ ==== kdegraphics-thumbnailers ==== Version update (22.12.2 -> 22.12.3) - Update to 22.12.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.3/ ==== kdenetwork-filesharing ==== Version update (22.12.2 -> 22.12.3) Subpackages: kdenetwork-filesharing-lang - Update to 22.12.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.3/ ==== kdialog ==== Version update (22.12.2 -> 22.12.3) Subpackages: kdialog-lang - Update to 22.12.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.3/ ==== khelpcenter5 ==== Version update (22.12.2 -> 22.12.3) Subpackages: khelpcenter5-lang - Update to 22.12.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.3/ ==== kio-extras5 ==== Version update (22.12.2 -> 22.12.3) Subpackages: kio-extras5-lang libkioarchive5 - Update to 22.12.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.3/ ==== konsole ==== Version update (22.12.2 -> 22.12.3) Subpackages: konsole-part konsole-part-lang - Update to 22.12.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.3/ ==== kwalletmanager5 ==== Version update (22.12.2 -> 22.12.3) Subpackages: kwalletmanager5-lang - Update to 22.12.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.3/ ==== libkdcraw ==== Version update (22.12.2 -> 22.12.3) - Update to 22.12.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.3/ ==== libkexiv2 ==== Version update (22.12.2 -> 22.12.3) - Update to 22.12.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.3/ ==== libqt5-qtbase ==== Subpackages: libQt5Concurrent5 libQt5Core5 libQt5DBus5 libQt5Gui5 libQt5Network5 libQt5OpenGL5 libQt5PrintSupport5 libQt5Sql5 libQt5Sql5-sqlite libQt5Test5 libQt5Widgets5 libQt5Xml5 libqt5-qtbase-platformtheme-gtk3 - Drop the mechanism for supporting systems without SSE2. glibc removed support for looking up libraries in sse2/ subdirectories and qtdeclarative without SSE2 crashes Plasma (boo#1208188) ==== libqt5-qtdeclarative ==== - Drop the mechanism for supporting systems without SSE2. glibc removed support for looking up libraries in sse2/ subdirectories and libQt5Qml5 without SSE2 crashes Plasma (boo#1208188): * sse2_nojit.patch ==== mobipocket ==== Version update (22.12.2 -> 22.12.3) - Update to 22.12.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.3/ ==== openvpn ==== Version update (2.5.8 -> 2.5.9) Subpackages: openvpn-auth-pam-plugin - update to 2.5.9: * Optional ciphers in --data-ciphers Ciphers in --data-ciphers can now be prefixed with a ? to mark those as optional and only use them if the SSL library supports them. * when compiling from a git checkout, put proper branch names into windows builds * do not include auth-token in pulled-option digest (interferes with persist-tun when auth-token is in use, GH #200). * fix corner case that might lead to leaked file descriptor * fix parser bug (parse_line()) that can lead to buffer overflows on malformed command line or server ccd file handling. Not exploitable. * pull-filter: ignore leading spaces in option names (work around server side bug with erroneous extra spaces) * push: do not add leading spaces to "out of renegotiations" pushed auth-token fix NULL pointer crash on "openvpn --show-tls" with mbedtls ==== qpdf ==== Version update (11.2.0 -> 11.3.0) - Use -fexcess-precision=fast as GCC 13 changes the default for C++ compiler and without the change some tests fail on i586. - update to 11.3.0: * When performing overlay or underlay operations, convert the original page to a form XObject instead of simply isolating its contents with q/Q operators. This prevents unbalanced q/Q operators in any of the original pages from messing up the graphics state of anything that is overlaid on top of it. ==== redis ==== - Fix CVE-2022-36021 (bsc#1208790 CVE-2022-36021) * String-pattern-matching-had-exponential-time-complex.patch - Fix CVE-2023-25155 (bsc#1208793 CVE-2023-25155) * Integer-Overflow-in-RAND-commands-can-lead-to-assert.patch ==== rust-keylime ==== Version update (0.2.0+git.1677002906.cf6c4f0 -> 0.2.0+git.1677691779.f7edd9a) - Update to version 0.2.0+git.1677691779.f7edd9a: * Disable e2e on Rawhide due to RHBZ#2171376 * Change number of required uploaded files * Coverage for rust agent as github action. * config: Skip validation of keylime_dir during tests - Create the certificiate directory ==== signon-kwallet-extension ==== Version update (22.12.2 -> 22.12.3) - Update to 22.12.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.3/ ==== spectacle ==== Version update (22.12.2 -> 22.12.3) Subpackages: spectacle-lang - Update to 22.12.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/22.12.3/ ==== v4l-utils ==== Version update (1.22.1 -> 1.24.1) Subpackages: libv4l libv4l1-0 libv4l2-0 libv4lconvert0 - Update to version 1.24.1: * Lot of changes, see ChangeLog for details. - Removed update-desktop-files and hicolor-icon-theme post requirements (not needed anymore). ==== vim ==== Version update (9.0.1357 -> 9.0.1367) Subpackages: vim-data vim-data-common vim-small - Updated to version 9.0.1367, fixes the following problems - dropped vim-fix-sh-syntax.patch - fixes boo#1208828 - CVE-2023-1127 * Using null_object results in an internal error. (Ernie Rael) * Compilation error with some compilers. * Too many "else if" statements in handling options. * Cue files are not recognized. * extendnew() not sufficiently tested. * ml_get error when going to another tab. (Daniel J. Perry) * Crash when :def function has :break in skipped block. (Ernie Rael) * Build error with older Mac OS. * Functions for setting options are in random order. * Divide by zero in zero-width window.