Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version=Tumbleweed&build=20231025 https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&component=MicroOS&query_format=advanced&resolution=--- Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: aaa_base (84.87+git20230815.cab7b44 -> 84.87+git20231023.f347d36) bluedevil5 (5.27.8 -> 5.27.9) breeze (5.27.8 -> 5.27.9) breeze-gtk (5.27.8 -> 5.27.9) discover (5.27.8 -> 5.27.9) drkonqi5 (5.27.8 -> 5.27.9) fde-tools (0.7.0 -> 0.7.1) firewalld (2.0.0 -> 2.0.1) git glib2 gnome-control-center (45.0+34 -> 45.1) gnome-shell gnome-terminal (3.50.0 -> 3.50.1) gnome-user-docs (45.0 -> 45.1) icewm installation-images-MicroOS (17.97 -> 17.98) iptables java-21-openjdk (21.0.0.0 -> 21.0.1.0) kaccounts-providers kactivitymanagerd (5.27.8 -> 5.27.9) kcm_flatpak (5.27.8 -> 5.27.9) kcm_sddm (5.27.8 -> 5.27.9) kde-cli-tools5 (5.27.8 -> 5.27.9) kde-gtk-config5 (5.27.8 -> 5.27.9) kernel-firmware (20231006 -> 20231019) kgamma5 (5.27.8 -> 5.27.9) khotkeys5 (5.27.8 -> 5.27.9) kinfocenter5 (5.27.8 -> 5.27.9) kmenuedit5 (5.27.8 -> 5.27.9) kpipewire (5.27.8 -> 5.27.9) kscreen5 (5.27.8 -> 5.27.9) kscreenlocker (5.27.8 -> 5.27.9) ksshaskpass5 (5.27.8 -> 5.27.9) kwayland-integration (5.27.8 -> 5.27.9) kwin5 (5.27.8 -> 5.27.9) kwrited5 (5.27.8 -> 5.27.9) layer-shell-qt (5.27.8 -> 5.27.9) libkdecoration2 (5.27.8 -> 5.27.9) libkscreen2 (5.27.8 -> 5.27.9) libksysguard5 (5.27.8 -> 5.27.9) libmysofa (1.3.1 -> 1.3.2) libnet (1.2 -> 1.3) libnma libphonenumber (8.13.15 -> 8.13.23) libstorage-ng (4.5.149 -> 4.5.151) milou5 (5.27.8 -> 5.27.9) multipath-tools (0.9.6+71+suse.f07325e -> 0.9.6+115+suse.07776fb) nautilus (45.0 -> 45.1) net-snmp (5.9.3 -> 5.9.4) open-vm-tools openssh oxygen5-sounds (5.27.8 -> 5.27.9) pam_kwallet (5.27.8 -> 5.27.9) patterns-fonts plasma-browser-integration (5.27.8 -> 5.27.9) plasma-nm5 (5.27.8 -> 5.27.9) plasma5-addons (5.27.8 -> 5.27.9) plasma5-desktop (5.27.8 -> 5.27.9) plasma5-disks (5.27.8 -> 5.27.9) plasma5-integration (5.27.8 -> 5.27.9) plasma5-openSUSE plasma5-pa (5.27.8 -> 5.27.9) plasma5-systemmonitor (5.27.8 -> 5.27.9) plasma5-thunderbolt (5.27.8 -> 5.27.9) plasma5-workspace (5.27.8 -> 5.27.9) polkit-kde-agent-5 (5.27.8 -> 5.27.9) powerdevil5 (5.27.8 -> 5.27.9) psmisc python-lark python-redis (4.5.5 -> 5.0.1) redis (7.0.12 -> 7.2.2) sdbootutil (1+git20231005.890f70c -> 1+git20231023.873adb9) systemsettings5 (5.27.8 -> 5.27.9) vte (0.74.0 -> 0.74.1) xdg-desktop-portal-gtk (1.14.1 -> 1.15.1) xdg-desktop-portal-kde (5.27.8 -> 5.27.9) xorg-x11-server (21.1.8 -> 21.1.9) xwayland (23.2.1 -> 23.2.2) yast2 (5.0.1 -> 5.0.2) yast2-x11 (5.0.1 -> 5.0.2) zeromq (4.3.4 -> 4.3.5) zlib (1.2.13 -> 1.3) === Details === ==== aaa_base ==== Version update (84.87+git20230815.cab7b44 -> 84.87+git20231023.f347d36) Subpackages: aaa_base-extras - Update to version 84.87+git20231023.f347d36: * Remove %ghost lastlog entry, lastlog is long gone * Remove shaky safe-rm and safe-rmdir helpers (bsc#1159103) ==== bluedevil5 ==== Version update (5.27.8 -> 5.27.9) Subpackages: bluedevil5-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 ==== breeze ==== Version update (5.27.8 -> 5.27.9) Subpackages: breeze5-cursors breeze5-decoration breeze5-style breeze5-style-lang breeze5-wallpapers libbreezecommon5-5 - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 ==== breeze-gtk ==== Version update (5.27.8 -> 5.27.9) Subpackages: gtk2-metatheme-breeze gtk3-metatheme-breeze gtk4-metatheme-breeze metatheme-breeze-common - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 ==== discover ==== Version update (5.27.8 -> 5.27.9) Subpackages: discover-backend-flatpak discover-backend-fwupd discover-backend-packagekit discover-lang discover-notifier - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - Changes since 5.27.8: * Fix network cache size for first run * packagekit: attach timer to stream rather than backend * packagekit: hold stream in a qpointer (kde#467888,kde#465711,kde#473921) * Only preload a couple of screens worth of comments (kde#474944) * flatpak: make FlatpakTransactionThread a qrunnable instead (kde#474231) ==== drkonqi5 ==== Version update (5.27.8 -> 5.27.9) Subpackages: drkonqi5-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - Changes since 5.27.8: * Fix malloc-delete mismatch ==== fde-tools ==== Version update (0.7.0 -> 0.7.1) - Update to version 0.7.1 + add-secondary-key: remove the generation of the secondary password + add-secondary-key: remove the inclusion of 'add-secondary-password' + luks: list all underlying LUKS device + Introduce FDE_DEVS to list all LUKS devices - Drop upstreamd patch + fde-tools-remove-redundant-2nd-pw-creation.patch ==== firewalld ==== Version update (2.0.0 -> 2.0.1) Subpackages: firewalld-bash-completion firewalld-lang python3-firewall - update to 2.0.1: * fix(cli): all --list-all-zones output identical (d30bc61) * fix(cli): properly show default zone attribute (ea8d9a8) * fix(cli): properly show active attribute for zones and policies (b202403) * fix(cli): --get-active-zones should include the default zone (dae9112) * fix(nftables): always flush main table on start (cd20981) * fix(runtimeToPermanent): deepcopy settings before mangling (9c53639) * docs: fix reference to lockdown-whitelist.xml in SYNOPSIS section (1c77205) * fix(firewall-config): escape markup stored in bindings store (c876fd0) * fix(tests): avoid deprecated assertRaisesRegexp for assertRaisesRegex (2935119) * fix(icmp): fix check_icmpv6_name() to use correct IPv6 names (af3c35b) * fix(ipset): fix configuring IP range for ipsets with nftables (6a050ec) * fix(ipset): fix configuring "timeout","maxelem" values for ipsets with nftables (7d3340c) * fix(core): fix exception while parsing invalid "tcp-mss-clamp" in policy (ff61209) * docs(policy): fix wrong documentation of in man firewalld.policy (21026d9) - removed following patch: [- fix_list_all_zones_output.patch] ==== git ==== - Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501). - gitweb.cgi AppArmor profile - make the profile a named profile - add local/ include to make custom additions easier ==== glib2 ==== Subpackages: glib2-lang glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 libgthread-2_0-0 - Use sed call to replace gio-querymodules with gio-querymodules-64 in gio-2.0.pc where appropiate. - Require /usr/bin/dbus-daemon by the devel package: GDBusTest launches an own dbus-daemon with a separate environment, so that test code does not have to rely on the session bus. Ensure consumers of GDBusTest have the needed dep present. - Change the dbus-launch Requires to %{_bindir}/dbus-launch: be flexible about potential future package layout changes. ==== gnome-control-center ==== Version update (45.0+34 -> 45.1) Subpackages: gnome-control-center-color gnome-control-center-goa gnome-control-center-lang gnome-control-center-user-faces - Update to version 45.1: + About: Add more types of processor support + Accessibility: Make Cursor Size dialog close on Escape key + Keyboard: Allow closing Shortcuts dialog with Escape key + Mouse: - Fix linked style of primary mouse button in RTL languages - Avoid making videos blurry + Network: - Fix editing connections without a device - Revert "Disable DNS entry if automatic DNS option is enabled" ==== gnome-shell ==== Subpackages: gnome-extensions gnome-shell-calendar gnome-shell-lang - Rebase patches for SLE-15-SP6 (bsc#1216072): + Rebase endSession-dialog-update-time-label-every-sec.patch + Rebase gnome-shell-disable-ibus-when-not-installed.patch + Rebase gnome-shell-domain.patch + Rebase gnome-shell-exit-crash-workaround.patch + Rebase gnome-shell-fate324570-Make-GDM-background-image-configurable.patch + Rebase gnome-shell-gdm-login-applet.patch + Rebase gnome-shell-jsc#SLE-16051-Input-method-recommendation.patch + Rebase gnome-shell-jscSLE9267-Remove-sessionList-of-endSessionDialog.patch + Rebase gnome-shell-screen-disappear.patch + Remove aboutMenu.js ==== gnome-terminal ==== Version update (3.50.0 -> 3.50.1) Subpackages: gnome-shell-search-provider-gnome-terminal gnome-terminal-lang nautilus-extension-terminal - Update to version 3.50.1: * util: check flatpak for alternate terminals * prefs: Get the headerbar pref * build: Bump vte req version ==== gnome-user-docs ==== Version update (45.0 -> 45.1) - Update to version 45.1: + Updates to GNOME Help. + Updated translations. ==== icewm ==== Subpackages: icewm-config-upstream icewm-default icewm-lang - Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer needed nor used (in our case, we use the new default Imlib2). - Add explicit pkgconfig(gdk-pixbuf-2.0) BuildRequires: Needed to build {_bindir}/icewm-menu-fdo. ==== installation-images-MicroOS ==== Version update (17.97 -> 17.98) - merge gh#openSUSE/installation-images#666 - remove termcap dependency, it's not used (bsc#1216448) - 17.98 ==== iptables ==== Subpackages: libip4tc2 libip6tc2 libxtables12 xtables-plugins - The presence of nftables does not mandate that iptables use backend-nft [bsc#1206383]. ==== java-21-openjdk ==== Version update (21.0.0.0 -> 21.0.1.0) Subpackages: java-21-openjdk-headless - Upgrade to upstream tag jdk-21.0.1+12 (October 2023 CPU) * Security fixes: + JDK-8286503: Enhance security classes + JDK-8308204: Enhanced certificate processing + JDK-8309966, CVE-2023-22081, bsc#1216374: Enhanced TLS connections + JDK-8312248: Enhanced archival support redux + JDK-8314649: Enhanced archival support redux + JDK-8317121, CVE-2023-22025, bsc#1216339: vector_masked_load instruction is moved too early after JDK-8286941 * Other changes: + JDK-8240567: MethodTooLargeException thrown while creating a jlink image + JDK-8284772: GHA: Use GCC Major Version Dependencies Only + JDK-8293114: JVM should trim the native heap + JDK-8296581: Better system proxy support + JDK-8297856: Improve handling of Bidi characters + JDK-8299658: C1 compilation crashes in LinearScan::resolve_exception_edge + JDK-8302017: Allocate BadPaddingException only if it will be thrown + JDK-8303815: Improve Metaspace test speed + JDK-8304954: SegmentedCodeCache fails when using large pages + JDK-8307766: Linux: Provide the option to override the timer slack + JDK-8308042: [macos] Developer ID Application Certificate not picked up by jpackage if it contains UNICODE characters + JDK-8308047: java/util/concurrent/ScheduledThreadPoolExecutor/ /BasicCancelTest.java timed out and also had jcmd pipe errors + JDK-8308184: Launching java with large number of jars in classpath with java.protocol.handler.pkgs system property set can lead to StackOverflowError + JDK-8308474: DSA does not reset SecureRandom when initSign is called again + JDK-8308609: java/lang/ScopedValue/StressStackOverflow.java fails with "-XX:-VMContinuations" + JDK-8309032: jpackage does not work for module projects unless --module-path is specified + JDK-8309088: security/infra/java/security/cert/ /CertPathValidator/certification/AmazonCA.java fails + JDK-8309214: sun/security/pkcs11/KeyStore/ /CertChainRemoval.java fails after 8301154 + JDK-8309475: Test java/foreign/TestByteBuffer.java fails: a problem with msync (aix) + JDK-8309502: RISC-V: String.indexOf intrinsic may produce misaligned memory loads + JDK-8309591: Socket.setOption(TCP_QUICKACK) uses wrong level + JDK-8309746: Reconfigure check should include make/conf/version-numbers.conf + JDK-8309889: [s390] Missing return statement after calling jump_to_native_invoker method in generate_method_handle_dispatch. + JDK-8310106: sun.security.ssl.SSLHandshake .getHandshakeProducer() incorrectly checks handshakeConsumers + JDK-8310171: Bump version numbers for 21.0.1 + JDK-8310211: serviceability/jvmti/thread/GetStackTrace/ /getstacktr03/getstacktr03.java failing + JDK-8310233: Fix THP detection on Linux + JDK-8310268: RISC-V: misaligned memory access in String.Compare intrinsic + JDK-8310321: make JDKOPT_CHECK_CODESIGN_PARAMS more verbose + JDK-8310586: ProblemList java/lang/ScopedValue/ /StressStackOverflow.java#default with virtual threads on linux-all + JDK-8310687: JDK-8303215 is incomplete + JDK-8310873: Re-enable locked_create_entry symbol check in runtime/NMT/CheckForProperDetailStackTrace.java for RISC-V + JDK-8311026: Some G1 specific tests do not set -XX:+UseG1GC + JDK-8311033: [macos] PrinterJob does not take into account Sides attribute + JDK-8311160: [macOS, Accessibility] VoiceOver: No announcements on JRadioButtonMenuItem and JCheckBoxMenuItem + JDK-8311249: Remove unused MemAllocator::obj_memory_range + JDK-8311285: report some fontconfig related environment variables in hs_err file + JDK-8311511: Improve description of NativeLibrary JFR event + JDK-8311592: ECKeySizeParameterSpec causes too many exceptions on third party providers + JDK-8311682: Change milestone to fcs for all releases + JDK-8311862: RISC-V: small improvements to shift immediate instructions + JDK-8311917: MAP_FAILED definition seems to be obsolete in src/java.desktop/unix/native/common/awt/fontpath.c + JDK-8311921: Inform about MaxExpectedDataSegmentSize in case of pthread_create failures on AIX + JDK-8311923: TestIRMatching.java fails on RISC-V + JDK-8311926: java/lang/ScopedValue/StressStackOverflow.java takes 9mins in tier1 + JDK-8311955: c++filt is now ibm-llvm-cxxfilt when using xlc17 / clang on AIX + JDK-8311981: Test gc/stringdedup/ /TestStringDeduplicationAgeThreshold.java#ZGenerational timed out + JDK-8312127: FileDescriptor.sync should temporarily increase parallelism + JDK-8312180: (bf) MappedMemoryUtils passes incorrect arguments to msync (aix) + JDK-8312182: THPs cause huge RSS due to thread start timing issue ... changelog too long, skipping 113 lines ... - Compiler flags to realign stack on ix86 (bsc#1214790) ==== kaccounts-providers ==== Subpackages: kaccounts-providers-lang - Only require signon-plugin-oauth2 when QtWebEngine is an option: signon-plugin-oauth2 depends on signon-ui, which in turn dependson QtWebEngine. ==== kactivitymanagerd ==== Version update (5.27.8 -> 5.27.9) Subpackages: kactivitymanagerd-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - Changes since 5.27.8: * Avoid race condition on startup (kde#422682) ==== kcm_flatpak ==== Version update (5.27.8 -> 5.27.9) Subpackages: kcm_flatpak-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 ==== kcm_sddm ==== Version update (5.27.8 -> 5.27.9) Subpackages: kcm_sddm-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - Changes since 5.27.8: * Add missing KService dependency ==== kde-cli-tools5 ==== Version update (5.27.8 -> 5.27.9) Subpackages: kde-cli-tools5-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - Changes since 5.27.8: * kcmshell: focus on content area by default ==== kde-gtk-config5 ==== Version update (5.27.8 -> 5.27.9) Subpackages: kde-gtk-config5-gtk3 - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - Changes since 5.27.8: * kded/config_editor: make it compile with GLib < 2.74 * kded/config_editor: add a timer to reduce duplicate setting sync ==== kernel-firmware ==== Version update (20231006 -> 20231019) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network ucode-amd - Update to version 20231019 (git commit d983107a2dfa): * Fix the robot email script * linux-firmware: Update AMD cpu microcode * Add support for sending emails while processing a PR/patch * amdgpu: update SMU 13.0.0 firmware * linux-firmware: add Amlogic bluetooth firmware * Add a script for a robot to open up pull requests * i915: Add GuC v70.13.1 for DG2, TGL, ADL-P and MTL * iwlwifi: add a missing FW from core80-39 release * amdgpu: update raven firmware from 5.7 branch * amdgpu: update SDMA 5.2.7 firmware from 5.7 branch * amdgpu: update PSP 13.0.8 firmware from 5.7 branch * amdgpu: update GC 10.3.7 firmware from 5.7 branch * amdgpu: update DCN 3.1.6 firmware from 5.7 branch * amdgpu: update SDMA 5.2.6 firmware from 5.7 branch * amdgpu: update PSP 13.0.5 firmware from 5.7 branch * amdgpu: update GC 10.3.6 firmware from 5.7 branch * amdgpu: update VCN 4.0.0 firmware from 5.7 branch * amdgpu: update SMU 13.0.0 firmware from 5.7 branch * amdgpu: update SDMA 6.0.0 firmware from 5.7 branch * amdgpu: update PSP 13.0.0 firmware from 5.7 branch * amdgpu: update GC 11.0.0 firmware from 5.7 branch * amdgpu: update vega20 firmware from 5.7 branch * amdgpu: update beige goby firmware from 5.7 branch * amdgpu: update vega12 firmware from 5.7 branch * amdgpu: update vega10 firmware from 5.7 branch * amdgpu: update dimgrey cavefish firmware from 5.7 branch * amdgpu: update picasso firmware from 5.7 branch * amdgpu: update navy flounder firmware from 5.7 branch * amdgpu: update vangogh firmware from 5.7 branch * amdgpu: update green sardine firmware from 5.7 branch * amdgpu: update sienna cichlid firmware from 5.7 branch * amdgpu: update PSP 13.0.11 firmware from 5.7 branch * amdgpu: update GC 11.0.4 firmware from 5.7 branch * amdgpu: update SDMA 6.0.1 firmware from 5.7 branch * amdgpu: update PSP 13.0.4 firmware from 5.7 branch * amdgpu: update GC 11.0.1 firmware from 5.7 branch * amdgpu: update navi14 firmware from 5.7 branch * amdgpu: update renoir firmware from 5.7 branch * amdgpu: update navi12 firmware from 5.7 branch * amdgpu: update VCN 4.0.4 firmware from 5.7 branch * amdgpu: update SMU 13.0.7 firmware from 5.7 branch * amdgpu: update SDMA 6.0.2 firmware from 5.7 branch * amdgpu: update PSP 13.0.7 firmware from 5.7 branch * amdgpu: update GC 11.0.2 firmware from 5.7 branch * amdgpu: update yellow carp firmware from 5.7 branch * amdgpu: update navi10 firmware from 5.7 branch * amdgpu: update raven2 firmware from 5.7 branch * amdgpu: update SMU 13.0.10 firmware from 5.7 branch * amdgpu: update PSP 13.0.10 firmware from 5.7 branch * amdgpu: update GC 11.0.3 firmware from 5.7 branch * amdgpu: update aldebaran firmware from 5.7 branch ==== kgamma5 ==== Version update (5.27.8 -> 5.27.9) Subpackages: kgamma5-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 ==== khotkeys5 ==== Version update (5.27.8 -> 5.27.9) Subpackages: khotkeys5-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 ==== kinfocenter5 ==== Version update (5.27.8 -> 5.27.9) Subpackages: kinfocenter5-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - Changes since 5.27.8: * find KF5Auth ==== kmenuedit5 ==== Version update (5.27.8 -> 5.27.9) Subpackages: kmenuedit5-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - Changes since 5.27.8: * Better construct command line (kde#474758) ==== kpipewire ==== Version update (5.27.8 -> 5.27.9) Subpackages: kpipewire-imports libKPipeWire5 libKPipeWire5-lang libKPipeWireDmaBuf5 libKPipeWireRecord5 - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 ==== kscreen5 ==== Version update (5.27.8 -> 5.27.9) Subpackages: kscreen5-lang kscreen5-plasmoid - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - Changes since 5.27.8: * Only modify `Coordinate Transformation Matrix` (kde#474110) * Drop unused KIconThemes dependency ==== kscreenlocker ==== Version update (5.27.8 -> 5.27.9) Subpackages: kscreenlocker-lang libKScreenLocker5 - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - Changes since 5.27.8: * greeter: disable qml disk cache (kde#471952) ==== ksshaskpass5 ==== Version update (5.27.8 -> 5.27.9) Subpackages: ksshaskpass5-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 ==== kwayland-integration ==== Version update (5.27.8 -> 5.27.9) - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 ==== kwin5 ==== Version update (5.27.8 -> 5.27.9) Subpackages: kwin5-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - Changes since 5.27.8: * platformsupport/scenes/opengl: don't release egl resources from the thread (kde#466174) * kcms/screenedges: Fix listing of effects * Fix misgenerated QHoverEvent * Add QKeySequence to VirtualDesktopManager::addAction overload (kde#475748) * kcms/screenedges: Fix buttons overlap on a too narrow vertical screen (kde#475579) * kcms/screenedges: Slightly refactor monitor size calculation * kcms/screenedges: Remove commented out dead code * Use itemChange instead of a connect to windowChanged * plugins/slide: add special case for instant animations (kde#472901) * plugins/screencast: Remove "frame dropped" log messages * fix segfault in EglGbmBackend::textureForOutput * Drop unused kitemviews dependency * Add missing QtNetwork dependency * plugins/qpa: implement platform accessibility (kde#472643) * backends/drm: check activePending instead of active for when applying a new gamma ramp is allowed (kde#471562) ==== kwrited5 ==== Version update (5.27.8 -> 5.27.9) - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 ==== layer-shell-qt ==== Version update (5.27.8 -> 5.27.9) - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 ==== libkdecoration2 ==== Version update (5.27.8 -> 5.27.9) Subpackages: libkdecorations2-5 libkdecorations2-5-lang libkdecorations2private10 - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 ==== libkscreen2 ==== Version update (5.27.8 -> 5.27.9) Subpackages: libKF5Screen8 libKF5Screen8-lang libKF5ScreenDpms8 libkscreen2-plugin - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 ==== libksysguard5 ==== Version update (5.27.8 -> 5.27.9) Subpackages: ksysguardsystemstats-data libKSysGuardSystemStats1 libksysguard5-imports libksysguard5-lang libksysguard5-plugins - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 ==== libmysofa ==== Version update (1.3.1 -> 1.3.2) - Update to 1.3.2: * allow slightly more dense HRTFs * allow all kinds of room types * target exporting * bug fix in memory reader * enable big endian support - Drop 0001-fix-big-endian-convertion-of-double-value.patch - Add Install-header-when-only-building-shared-lib.patch See https://github.com/hoene/libmysofa/issues/210 ==== libnet ==== Version update (1.2 -> 1.3) - update to 1.3: * Add support for LLDP, mandatory TLVs. * Add support for Cisco UniDirectional Link Detection (UDLD), RFC5171 * Calling libnet_init() with a RAW type no longer sets a TX buffer max size. Use the new libnet_setfd_max_sndbuf() instead when needed. * Fix #122: unused parameter warnings * Fix #123: potential memory leak in libnet_cq_add() * Fix #124: potential name conflict with C++ keyword new * Fix #96: pointer type warnings when dumping raw data with %p * Fix #97: non-standard types * Fix #98: lots of signed vs unsigned comparisons * Fix #102: possible buffer overflows in libnet_plist_chain_dump_string() * Fix #120: possible NULL pointer dereference in libnet_cq_add() * Fix #120: memory leak in libnet_plist_chain_new() * Fix segmentation fault in libnet_ifaddrlist() * Fix #150: segfault when number of IPs > 512 - Drop upstreamed reproducible.patch ==== libnma ==== Subpackages: libnma-glib-schema libnma-gtk4-0 libnma-lang libnma0 typelib-1_0-NMA4-1_0 - Drop pkgconfig(gck-1) and pkgconfig(gcr-3) BuildRequires: No longer needed, we build with gck-2 and gcr-4. ==== libphonenumber ==== Version update (8.13.15 -> 8.13.23) - Update to version 8.13.28: * Updated phone metadata, carrier data, geocoding data, short number metadata for a number of region and calling codes - drop 0001-Build-with-C-17.patch now upstream ==== libstorage-ng ==== Version update (4.5.149 -> 4.5.151) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#957 - extended testsuite - 4.5.151 - merge gh#openSUSE/libstorage-ng#956 - improved error handling in SystemCmd - 4.5.150 ==== milou5 ==== Version update (5.27.8 -> 5.27.9) Subpackages: milou5-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 ==== multipath-tools ==== Version update (0.9.6+71+suse.f07325e -> 0.9.6+115+suse.07776fb) Subpackages: kpartx libmpath0 - Update to version 0.9.6+115+suse.07776fb * multipathd: Added support to handle FPIN-Li events for FC-NVMe - Update to version 0.9.6+110+suse.5dfdf35: * The options "bindings_file", "prkeys_file", and "wwids_file", which have been deprecated since multipath-tools 0.8.8, aren't supported any more. The paths to these files are now hard-coded to "bindings", "prkeys" and "wwids" under /etc/multipath. * Strictly avoid assigning map aliases that are already taken (bsc#1213265) * Improve handling of user-friendly names * avoid "multipath -d" (dry-run) changing SCSI timeouts in sysfs (bsc#1213809) - spec file: * adapt prefix values to upstream changes * fix compilation flags for "make check" * pass EXTRAVERSION to build ==== nautilus ==== Version update (45.0 -> 45.1) Subpackages: gnome-shell-search-provider-nautilus libnautilus-extension4 nautilus-lang - Update to version 45.1: + Don't crash when opening Properties from admin://* + Don't crash on unmount + Stop jumping to top when using the Menu key + Properly reorder bookmarks by drag and drop + Re-add search results when switching view mode + Fix compilation on 32-bit musl - Fix various leaks and warnings + Updated translations. - Update to version 45.0+12: + gtk/placessidebar: Use list box for coordinates translation. + list-base: Stop jumping to top on Menu key. + Updated translations. - Switch to source service, explicit commit from the stable branch. ==== net-snmp ==== Version update (5.9.3 -> 5.9.4) Subpackages: libsnmp40 perl-SNMP snmp-mibs - Update to net-snmp-5.9.4 (bsc#1214364). add (rename): * net-snmp-5.9.4-add-lustre-fs-support.patch * net-snmp-5.9.4-fix-create-v3-user-outfile.patch * net-snmp-5.9.4-fixed-python2-bindings.patch * net-snmp-5.9.4-fix-Makefile.PL.patch * net-snmp-5.9.4-modern-rpm-api.patch * net-snmp-5.9.4-net-snmp-config-headercheck.patch * net-snmp-5.9.4-perl-tk-warning.patch * net-snmp-5.9.4-pie.patch * net-snmp-5.9.4-snmpstatus-suppress-output.patch * net-snmp-5.9.4-socket-path.patch * net-snmp-5.9.4-subagent-set-response.patch * net-snmp-5.9.4-suse-systemd-service-files.patch * net-snmp-5.9.4-testing-empty-arptable.patch delete (now part of v5.9.4): * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch * net-snmp-5.9.3-grep.patch delete (rename): * net-snmp-5.9.1-add-lustre-fs-support.patch * net-snmp-5.9.2-fix-create-v3-user-outfile.patch * net-snmp-5.9.3-fixed-python2-bindings.patch * net-snmp-5.9.1-fix-Makefile.PL.patch * net-snmp-5.9.1-modern-rpm-api.patch * net-snmp-5.9.1-net-snmp-config-headercheck.patch * net-snmp-5.9.1-perl-tk-warning.patch * net-snmp-5.9.2-pie.patch * net-snmp-5.9.1-snmpstatus-suppress-output.patch * net-snmp-5.9.1-socket-path.patch * net-snmp-5.9.1-subagent-set-response.patch * net-snmp-5.9.1-suse-systemd-service-files.patch * net-snmp-5.9.1-testing-empty-arptable.patch - Removing legacy MIBs used by Velocity Software (jira#PED-6416). delete: * net-snmp-5.9.1-velocity-mib.patch - Re-add support for hostname netgroups that was removed accidentally and previously added with FATE#316305 (bsc#1207697). '@hostgroup' can be specified for multiple hosts add: * net-snmp-5.9.4-add-netgroups-functionality.patch - Hardening systemd services setting "ProtectHome=true" caused home directory size and allocation to be listed incorrectly (bsc#1206044). add (rename): * net-snmp-5.9.4-harden_snmpd.service.patch * net-snmp-5.9.4-harden_snmptrapd.service.patch delete (rename): * net-snmp-5.9.1-harden_snmpd.service.patch * net-snmp-5.9.1-harden_snmptrapd.service.patch ==== open-vm-tools ==== Subpackages: libvmtools0 open-vm-tools-desktop - Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer needed, nor used (since 12.3.0 release). ==== openssh ==== Subpackages: openssh-clients openssh-common openssh-server - Add cb4ed12f.patch: Fix build using zlib 1.3. The check expected a version in the form a.b.c[.d], which no longer matches 1.3. ==== oxygen5-sounds ==== Version update (5.27.8 -> 5.27.9) - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 ==== pam_kwallet ==== Version update (5.27.8 -> 5.27.9) Subpackages: pam_kwallet-common - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 ==== patterns-fonts ==== Subpackages: patterns-fonts-fonts patterns-fonts-fonts_opt - Require fonts so the pattern also works when Recommends are turned off - Don't pull in Type 1 ghostscript-fonts-* and texlive-lm-fonts by default (boo#1216494) ==== plasma-browser-integration ==== Version update (5.27.8 -> 5.27.9) Subpackages: plasma-browser-integration-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - Changes since 5.27.8: * Add missing KService dependency ==== plasma-nm5 ==== Version update (5.27.8 -> 5.27.9) Subpackages: plasma-nm5-lang plasma-nm5-openconnect plasma-nm5-openvpn - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - Changes since 5.27.8: * Revert "Don't force active dialogs right after showing" * [libreswan] should save even when group name is empty. ==== plasma5-addons ==== Version update (5.27.8 -> 5.27.9) Subpackages: plasma5-addons-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 ==== plasma5-desktop ==== Version update (5.27.8 -> 5.27.9) Subpackages: plasma5-desktop-emojier plasma5-desktop-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - Changes since 5.27.8: * Don't add recursively every file copied to desktop * kcm/recentFiles: making it compatible with kconfigwidgets:v5.102.0 ==== plasma5-disks ==== Version update (5.27.8 -> 5.27.9) Subpackages: plasma5-disks-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 ==== plasma5-integration ==== Version update (5.27.8 -> 5.27.9) Subpackages: plasma5-integration-plugin plasma5-integration-plugin-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - Changes since 5.27.8: * Force WindowCloseButtonHint for toplevel dialogs (kde#464193) ==== plasma5-openSUSE ==== Subpackages: plasma5-defaults-openSUSE plasma5-theme-openSUSE plasma5-workspace-branding-openSUSE sddm-theme-openSUSE - Update to 5.27.9 ==== plasma5-pa ==== Version update (5.27.8 -> 5.27.9) Subpackages: plasma5-pa-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - Changes since 5.27.8: * applet: refresh slider value when `to` changes on startup (kde#472245) * Use context object with KConfigWatcher signal ==== plasma5-systemmonitor ==== Version update (5.27.8 -> 5.27.9) Subpackages: plasma5-systemmonitor-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 ==== plasma5-thunderbolt ==== Version update (5.27.8 -> 5.27.9) Subpackages: plasma5-thunderbolt-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 ==== plasma5-workspace ==== Version update (5.27.8 -> 5.27.9) Subpackages: gmenudbusmenuproxy plasma5-session plasma5-session-wayland plasma5-workspace-lang plasma5-workspace-libs xembedsniproxy - Add patch to fix the logout applet: * 0001-applets-lock_logout-use-PlasmaCore.IconItem.patch - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - Changes since 5.27.8: * Do not consider icon changes excess notification creation * lockscreen: handle user switching also on nopassword page (kde#458951) * applets/lock_logout: add a11y properties and restore tooltip * runners/recentdocuments: Fix results being discarded when casing is different (kde#474782) * [plasmacalendarintegration] Fix selected regions are randomly reset to default (kde#472483) * libtaskmanager: test waylandtasksmodel ==== polkit-kde-agent-5 ==== Version update (5.27.8 -> 5.27.9) Subpackages: polkit-kde-agent-5-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 ==== powerdevil5 ==== Version update (5.27.8 -> 5.27.9) Subpackages: powerdevil5-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - Changes since 5.27.8: * Provide a default action in Suspend session config (kde#475866) ==== psmisc ==== Subpackages: psmisc-lang - Fix version at configure time as there was no .tarball-version ==== python-lark ==== - Remove not needed python-Js2Py BuildRequires ==== python-redis ==== Version update (4.5.5 -> 5.0.1) - Add pytest.ini source needed to run tests - Remove/disable broken tests because of suse environment - drop tox.ini. seems it does no longer exist in 5.0.1 - add support to easily disable the testsuite at build time - update to 5.0.1 - ð New Features - Provide aclose() / close() for classes requiring lifetime management (#2898) - Add support for ModuleCommands in cluster (#2951) - Add support for multiple values in RPUSHX (#2949) - Add Redis.from_pool() class method, for explicitly owning and closing a ConnectionPool (#2913) - ð Bug Fixes - Fixing monitor parsing for messages containing specific substrings (#2950) - Cluster determine slot command name need to be upper (#2919) - Support timeout = 0 in search query (#2934) - Fix async sentinel: add push_request keyword argument to read_response (#2922) - Fix protocol checking for search commands (#2923) - Fix: SentinelManagedConnection.read_response() got an unexpected keyword argument 'push_request' (#2894) - Fix: automatically close connection pool for async Sentinel (#2900) - Save a reference to created async tasks, to avoid tasks potentially disappearing (#2816) - Avoid reference cycling by the garbage collector during response reading (#2932) - 𧰠Maintenance - Type hint improvements (#2952) - Replace clear_connect_callbacks with _deregister_connect_callback (#2955) - Async fixes, remove del and other things (#2870) - Add pagination, sorting and grouping examples to search json example (#2890) - Remove process-id checks from asyncio. Asyncio and fork() does not mix. (#2911) - Fix resource usage and cleanup Mocks in the unit tests (#2936) - Remove mentions of tox (#2929) - Add 7.2 to supported Redis versions (#2896) - Fix resource warnings in unit tests (#2899) - Fix typo in redis-stream-example.ipynb (#2918) - Deprecate RedisGraph (#2927) - Fix redis 7.2.0 tests (#2902) - Fix test_scorer (search) (#2920) - changes from 5.0.0 - What's new? - Triggers and Functions support Triggers and Functions allow you to execute server-side functions triggered when key values are modified or created in Redis, a stream entry arrival, or explicitly calling them. Simply put, you can replace Lua scripts with easy-to-develop JavaScript or TypeScript code. Move your business logic closer to the data to ensure a lower latency, and forget about updating dependent key values manually in your code. Try it for yourself with Quick start - Full Redis 7.2 and RESP3 support - Python 3.7 End-of-Life - Python 3.7 has reached its end-of-life (EOL) as of June 2023. This means that starting from this date, Python 3.7 will no longer receive any updates, including security patches, bug fixes, or improvements. If you continue to use Python 3.7 post-EOL, you may expose your projects and systems to potential security vulnerabilities. We ended its support in this version and strongly recommend migrating to Python 3.10. - ð Bug Fixes - Fix timeout retrying on pipeline execution (#2812) - Fix socket garbage collection (#2859) - 𧰠Maintenance - Updating client license to clear, MIT (#2884) - Add py.typed in accordance with PEP-561 (#2738) - Dependabot label change (#2880) - Fix type hints in SearchCommands (#2817) - Add sync modules (except search) tests to cluster CI (#2850) - Fix a duplicate word in CONTRIBUTING.md (#2848) - Fixing doc builds (#2869) - Change cluster docker to edge and enable debug command (#2853) - changes from 4.6.0 - 𧪠Experimental Features - Support JSON.MERGE command (#2761) - Support JSON.MSET command (#2766) - ð New Features - Extract abstract async connection class (#2734) - Add support for WAITAOF (#2760) - Introduce OutOfMemoryError exception for Redis write command rejections due to OOM errors (#2778) - Add WITHSCORE argument to ZRANK (#2758) - ð Bug Fixes - Fix dead weakref in sentinel connection causing ReferenceError (#2767) (#2771) - Fix Key Error in parse_xinfo_stream (#2788) - Remove unnecessary __del__ handlers (#2755) - Added support for missing argument to SentinelManagedConnection.read_response() (#2756) - 𧰠Maintenance - Fix type hint for retry_on_error in async cluster (#2804) - Clean up documents and fix some redirects (#2801) - Add unit tests for the connect method of all Redis connection classes (#2631) - Docstring formatting fix (#2796) ==== redis ==== Version update (7.0.12 -> 7.2.2) - redis 7.2.2: * (CVE-2023-45145) The wrong order of listen(2) and chmod(2) calls creates a race condition that can be used by another process to bypass desired Unix socket permissions on startup, bsc#1216376 * WAITAOF could timeout in the absence of write traffic in case a new AOF is created and an AOF rewrite can't immediately start * Fix crash when running rebalance command in a mixed cluster of 7.0 and 7.2 nodes * Fix the return type of the slot number in cluster shards to integer, which makes it consistent with past behavior * Fix CLUSTER commands are called from modules or scripts to return TLS info appropriately redis-cli, fix crash on reconnect when in SUBSCRIBE mode * Fix overflow calculation for next timer event - redis 7.2.1: * (CVE-2023-41053) Redis does not correctly identify keys accessed by SORT_RO and, as a result, may grant users executing this command access to keys that are not explicitly authorized by the ACL configuration. (bsc#1215094) * Fix crashes when joining a node to an existing 7.0 Redis Cluster * Correct request_policy and response_policy command tips on for some admin / configuration commands - Refresh redis.hashes - redis 7.2.0 - Bug Fixes - redis-cli in cluster mode handles unknown-endpoint (#12273) - Update request / response policy hints for a few commands (#12417) - Ensure that the function load timeout is disabled during loading from RDB/AOF and on replicas. (#12451) - Fix false success and a memory leak for ACL selector with bad parenthesis combination (#12452) - Fix the assertion when script timeout occurs after it signaled a blocked client (#12459) - Fixes for issues in previous releases of Redis 7.2 - Update MONITOR client's memory correctly for INFO and client-eviction (#12420) - The response of cluster nodes was unnecessarily adding an extra comma when no hostname was present. (#12411) - refreshed redis-conf.patch: - switch to autosetup now that we switched the last patch to patch level 1 ==== sdbootutil ==== Version update (1+git20231005.890f70c -> 1+git20231023.873adb9) Subpackages: sdbootutil-rpm-scriptlets sdbootutil-snapper - Update to version 1+git20231023.873adb9: * Use correct image name on aarch64 ==== systemsettings5 ==== Version update (5.27.8 -> 5.27.9) Subpackages: systemsettings5-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 ==== vte ==== Version update (0.74.0 -> 0.74.1) Subpackages: libvte-2_91-0 vte-lang - Update to version 0.74.1: * ci: Only upload docs for tags * widget: VteTerminalSpawnAsyncCallback's error is nullable * Updated translations. - Drop f1a547f1dfebd8860021b6b727fa5d5717e9f143.patch: fixed upstream. ==== xdg-desktop-portal-gtk ==== Version update (1.14.1 -> 1.15.1) Subpackages: xdg-desktop-portal-gtk-lang - Update to version 1.15.1: + Fix build of feature-gated portals. - Update to version 1.15.0: + Switch to the Meson build system, and drop Autotools + Drop most use of private GNOME API; the following portal interfaces have been removed: - org.freedesktop.impl.portal.Screenshot - org.freedesktop.impl.portal.ScreenCast - org.freedesktop.impl.portal.RemoteDesktop - org.freedesktop.impl.portal.Background + Do not add duplicate notifications + Expose the org.gnome.desktop.calendar settings + Fix type for org.gnome.desktop.background.picture-uri setting + Support current_folder in org.freedesktop.impl.portal.FileChooser + Update list of translatable files + Updated translations. - Add meson BuildRequires and macros following upstreams port. ==== xdg-desktop-portal-kde ==== Version update (5.27.8 -> 5.27.9) Subpackages: xdg-desktop-portal-kde-lang - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - Changes since 5.27.8: * remote desktop: Close streams on session exit * data/kde-portals.conf: Fallback to GTK portals for Settings (kde#474746) * Add missing KF5Service find_package call - Drop patches, now upstream: * 0001-kde_portals.patch ==== xorg-x11-server ==== Version update (21.1.8 -> 21.1.9) Subpackages: xorg-x11-server-Xvfb xorg-x11-server-extra - Update to version 21.1.9 * This release contains fixes for CVE-2023-5367, CVE-2023-5380 and CVE-2023-5574 as reported in today's security advisory: https://lists.x.org/archives/xorg-announce/2023-October/003430.html - adjusted u_Use-better-fallbacks-to-generate-cookies-if-arc4rand.patch ==== xwayland ==== Version update (23.2.1 -> 23.2.2) - Update to version 23.2.2 * This release contains the fix for CVE-2023-5367 and CVE-2023-5574 in today's security advisory: https://lists.x.org/archives/xorg-announce/2023-October/003430.html Xwayland does not support multiple protocol screens (Zaphod) and is thus not affected by CVE-2023-5380. * Additionally, there is a change in the default behaviour of Xwayland: Since version 23.2.0 Xwayland (via liboeffis) automatically tries to connect to the XDG Desktop Portal's RemoteDesktop interface to obtain the EI socket. That socket is used to send XTest events to the compositor. * However, the connection to the session-wide Portal is unsuitable when Xwayland is running in a nested compositor. Xwayland cannot tell whether it's running on a nested compositor and to keep backwards compatibility with Xwayland prior to 23.2.0, Xwayland must now be started with "-enable-ei-portal" to connect to the portal. * Compositors (who typically spawn Xwayland rootless) must now pass this option to get the same behaviour as 23.2.x. * Finally, Xwayland now uses libbsd-overlay instead of libbsd. ==== yast2 ==== Version update (5.0.1 -> 5.0.2) Subpackages: yast2-logs - Fix firewalld zones reader adapting it to the new firewall-cmd - -list-all-zones output format (bsc#1216534) - 5.0.2 ==== yast2-x11 ==== Version update (5.0.1 -> 5.0.2) - Prevent testX from hanging in second stage if no supported WM can be started (bsc#1216297) - 5.0.2 ==== zeromq ==== Version update (4.3.4 -> 4.3.5) Subpackages: libzmq5 zeromq-tools - update to 4.3.5: * Relicensing from LGPL-3.0+ (with custom exceptions) to MPL-2.0 is now complete. libzmq is now distributed under the Mozilla Public License 2.0. Relicensing grants have been collected from all relevant authors, and some functionality has been clean-room reimplemented where that was not possible. In layman terms, the new license provides the same rights and obligations as before. Source files are now tagged using the SPDX license identifier format. Details of the relicensing process can be seen at: #2376 Relicensing grants have been archived at: https://github.com/rlenferink/libzmq-relicense A special thanks to everybody who helped with this long and difficult task, with the process, the reimplementations, the collections and everything else. * New DRAFT (see NEWS for 4.2.0) socket options: ZMQ_BUSY_POLL will set the SO_BUSY_POLL socket option on the underlying sockets, if it is supported. ZMQ_HICCUP_MSG will send a message when the peer has been disconnected. ZMQ_XSUB_VERBOSE_UNSUBSCRIBE will configure a socket to pass all unsubscription messages, including duplicated ones. ZMQ_TOPICS_COUNT will return the number of subscribed topics on a PUB/SUB socket. ZMQ_NORM_MODE, ZMQ_NORM_UNICAST_NACK, ZMQ_NORM_BUFFER_SIZE, ZMQ_NORM_SEGMENT_SIZE, ZMQ_NORM_BLOCK_SIZE, ZMQ_NORM_NUM_PARITY, ZMQ_NORM_NUM_AUTOPARITY and ZMQ_NORM_PUSH to control various aspect of NORM sockets. See doc/zmq_setsockopt.txt and doc/zmq_getsockopt.txt for details. * New DRAFT (see NEWS for 4.2.0) zmq_ppoll APIs was added that differs from zmq_poll in the same way that ppoll differs from poll. See doc/zmq_ppoll.txt for details. * Various bug fixes and performance improvements. - qemu-user.patch: upstreamed, removed ==== zlib ==== Version update (1.2.13 -> 1.3) Subpackages: libminizip1 libz1 - Update to 1.3: * Building using K&R (pre-ANSI) function definitions is no longer supported. * Fixed a bug in deflateBound() for level 0 and memLevel 9. * Fixed a bug when gzungetc() is used immediately after gzopen(). * Fixed a bug when using gzflush() with a very small buffer. * Fixed a crash when gzsetparams() is attempted for a transparent write. * Fixed test/example.c to work with FORCE_STORED. * Fixed minizip to allow it to open an empty zip file. * Fixed reading disk number start on zip64 files in minizip. * Fixed a logic error in minizip argument processing. - Added patches: * zlib-1.3-IBM-Z-hw-accelerated-deflate-s390x.patch - Refreshed patches: * zlib-1.2.12-add-optimized-slide_hash-for-power.patch * zlib-1.2.12-add-vectorized-longest_match-for-power.patch * zlib-1.2.12-adler32-vector-optimizations-for-power.patch * zlib-1.2.13-optimized-s390.patch * zlib-format.patch * zlib-no-version-check.patch - Removed patches: * bsc1210593.patch * zlib-1.2.13-fix-bug-deflateBound.patch * zlib-1.2.12-s390-vectorize-crc32.patch * zlib-1.2.13-IBM-Z-hw-accelerated-deflate-s390x.patch * zlib-1.2.12-add-optimized-slide_hash-for-power.patch * zlib-1.2.12-fix-invalid-memory-access-on-ppc-and-ppc64.patch * zlib-1.2.12-add-vectorized-longest_match-for-power.patch * zlib-1.2.12-adler32-vector-optimizations-for-power.patch - Fix CVE-2023-45853, integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_6, bsc#1216378 * CVE-2023-45853.patch