Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=3&version=Tumbleweed&build=20240328 https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&component=MicroOS&query_format=advanced&resolution=--- Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MicroOS-release (20240327 -> 20240328) avahi avahi-glib2 bluedevil6 (6.0.2 -> 6.0.3) breeze6 (6.0.2 -> 6.0.3) breeze6-gtk (6.0.2 -> 6.0.3) crda curl (8.6.0 -> 8.7.1) discover6 (6.0.2 -> 6.0.3) flatpak-kcm6 (6.0.2 -> 6.0.3) gnutls (3.8.3 -> 3.8.4) kactivitymanagerd6 (6.0.2 -> 6.0.3) kde-cli-tools6 (6.0.2 -> 6.0.3) kde-gtk-config6 (6.0.2 -> 6.0.3) kdecoration6 (6.0.2 -> 6.0.3) kdeplasma6-addons (6.0.2 -> 6.0.3) kgamma6 (6.0.2 -> 6.0.3) kglobalacceld6 (6.0.2 -> 6.0.3) kinfocenter6 (6.0.2 -> 6.0.3) kmenuedit6 (6.0.2 -> 6.0.3) kpipewire6 (6.0.2 -> 6.0.3) kscreen6 (6.0.2 -> 6.0.3) kscreenlocker6 (6.0.2 -> 6.0.3) ksshaskpass6 (6.0.2 -> 6.0.3) ksystemstats6 (6.0.2 -> 6.0.3) kwayland-integration6 (6.0.2 -> 6.0.3) kwayland6 (6.0.2 -> 6.0.3) kwin6 (6.0.2 -> 6.0.3.1) kwrited6 (6.0.2 -> 6.0.3) layer-shell-qt6 (6.0.2 -> 6.0.3) libkscreen6 (6.0.2 -> 6.0.3) libksysguard6 (6.0.2 -> 6.0.3) libplasma6 (6.0.2 -> 6.0.3) milou6 (6.0.2 -> 6.0.3) ocean-sound-theme6 (6.0.2 -> 6.0.3) pam_kwallet6 (6.0.2 -> 6.0.3) perl-HTML-Parser (3.81 -> 3.820.0) perl-HTML-Tagset (3.20 -> 3.240.0) perl-IO-Socket-SSL (2.84.0 -> 2.85.0) perl-LWP-Protocol-https (6.130.0 -> 6.140.0) perl-Net-SSLeay (1.92 -> 1.940.0) perl-libwww-perl (6.760.0 -> 6.770.0) plasma5support6 (6.0.2 -> 6.0.3) plasma6-activities (6.0.2 -> 6.0.3) plasma6-activities-stats (6.0.2 -> 6.0.3) plasma6-browser-integration (6.0.2 -> 6.0.3) plasma6-desktop (6.0.2 -> 6.0.3) plasma6-disks (6.0.2 -> 6.0.3) plasma6-integration (6.0.2 -> 6.0.3) plasma6-nm (6.0.2 -> 6.0.3) plasma6-openSUSE plasma6-pa (6.0.2 -> 6.0.3) plasma6-print-manager (6.0.2 -> 6.0.3) plasma6-systemmonitor (6.0.2 -> 6.0.3) plasma6-thunderbolt (6.0.2 -> 6.0.3) plasma6-workspace (6.0.2 -> 6.0.3) polkit-kde-agent-6 (6.0.2 -> 6.0.3) powerdevil6 (6.0.2 -> 6.0.3) qqc2-breeze-style6 (6.0.2 -> 6.0.3) qt6-base (6.6.2 -> 6.6.3) qt6-declarative (6.6.2 -> 6.6.3) qt6-imageformats (6.6.2 -> 6.6.3) qt6-multimedia (6.6.2 -> 6.6.3) qt6-positioning (6.6.2 -> 6.6.3) qt6-qt5compat (6.6.2 -> 6.6.3) qt6-quick3d (6.6.2 -> 6.6.3) qt6-quicktimeline (6.6.2 -> 6.6.3) qt6-sensors (6.6.2 -> 6.6.3) qt6-shadertools (6.6.2 -> 6.6.3) qt6-speech (6.6.2 -> 6.6.3) qt6-svg (6.6.2 -> 6.6.3) qt6-tools (6.6.2 -> 6.6.3) qt6-translations (6.6.2 -> 6.6.3) qt6-virtualkeyboard (6.6.2 -> 6.6.3) qt6-wayland (6.6.2 -> 6.6.3) qt6-webchannel (6.6.2 -> 6.6.3) qt6-webengine (6.6.2 -> 6.6.3) qt6-webview (6.6.2 -> 6.6.3) sddm-kcm6 (6.0.2 -> 6.0.3) sof-firmware (2023.12 -> 2023.12.1) systemsettings6 (6.0.2 -> 6.0.3) usb_modeswitch wacomtablet-kcm6 (6.0.2 -> 6.0.3) webkit2gtk3 webkit2gtk4 wireless-tools xdg-desktop-portal-kde6 (6.0.2 -> 6.0.3) xz (5.6.1 -> 5.6.1.revertto5.4) === Details === ==== MicroOS-release ==== Version update (20240327 -> 20240328) Subpackages: MicroOS-release-appliance MicroOS-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== avahi ==== Subpackages: libavahi-client3 libavahi-common3 libavahi-core7 - Add avahi-CVE-2023-38471.patch: Extract host name using avahi_unescape_label (bsc#1216594, CVE-2023-38471). - Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource records (bsc#1216598, CVE-2023-38469). ==== avahi-glib2 ==== - Add avahi-CVE-2023-38471.patch: Extract host name using avahi_unescape_label (bsc#1216594, CVE-2023-38471). - Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource records (bsc#1216598, CVE-2023-38469). ==== bluedevil6 ==== Version update (6.0.2 -> 6.0.3) - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * Remove sl documentation * update version for new release * fix pairing bug ==== breeze6 ==== Version update (6.0.2 -> 6.0.3) Subpackages: breeze6-cursors breeze6-decoration breeze6-style breeze6-wallpapers - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release * kstyle/animations: Call QWidget::update in BusyIndicatorEngine * Use QEvent::ApplicationPaletteChanged instead of QEvent::PaletteChanged * kstyle: Don't send event to disabled scroll bar (kde#483487) ==== breeze6-gtk ==== Version update (6.0.2 -> 6.0.3) Subpackages: gtk2-metatheme-breeze6 gtk3-metatheme-breeze6 gtk4-metatheme-breeze6 metatheme-breeze6-common - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * fix ecm version number * update version for new release ==== crda ==== - Use %patch -P N instead of deprecated %patchN. ==== curl ==== Version update (8.6.0 -> 8.7.1) Subpackages: libcurl4 - Update to 8.7.1: * Fixed empty tool_hugehelp.c file - Update to 8.7.0: * Security fixes: - [bsc#1221665, CVE-2024-2004] Usage of disabled protocol - [bsc#1221667, CVE-2024-2398] HTTP/2 push headers memory-leak - [bsc#1221666, CVE-2024-2379] QUIC certificate check bypass with wolfSSL - [bsc#1221668, CVE-2024-2466] TLS certificate check bypass with mbedTLS * Changes: - configure: add --disable-docs flag - CURLINFO_USED_PROXY: return bool whether the proxy was used - digest: support SHA-512/256 * Bugfixes: - asyn-thread: use wakeup_close to close the read descriptor - bufq: writing into a softlimit queue cannot be partial - cmake: add USE_OPENSSL_QUIC support - cookie: if psl fails, reject the cookie - curl: exit on config file parser errors - digest: add check for hashing error - docs/libcurl: add TLS backend info for all TLS options - file: use xfer buf for file:// transfers - ftp: do lineend conversions in client writer - ftp: fix socket wait activity in ftp_domore_getsock - http2: memory errors in the push callbacks are fatal - http2: push headers better cleanup - libssh/libssh2: return error on too big range - OpenSSL QUIC: adapt to v3.3.x - setopt: fix check for CURLOPT_PROXY_TLSAUTH_TYPE value - setopt: fix disabling all protocols - sha512_256: add support for GnuTLS and OpenSSL - smtp: fix STARTTLS - strtoofft: fix the overflow check - TIMER_STARTTRANSFER: set the same for everyone - TLS: start shutdown only when peer did not already close - tool_getparam: accept a blank -w "" - tool_getparam: handle non-existing (out of range) short-options - tool_operate: change precedence of server Retry-After time - transfer.c: break receive loop in speed limited transfers - version: allow building with ancient libpsl - vquic-tls: fix the error code returned for bad CA file - vtls: fix tls proxy peer verification - vtls: revert "receive max buffer" + add test case - VULN-DISCLOSURE-POLICY.md: update detail about CVE requests - websocket: fix curl_ws_recv() * Remove patch upstream: - 0001-vtls-revert-receive-max-buffer-add-test-case.patch ==== discover6 ==== Version update (6.0.2 -> 6.0.3) Subpackages: discover6-backend-flatpak discover6-backend-fwupd discover6-backend-packagekit discover6-notifier - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * revert duplicated appstream edit * update version for new release * kns: Make sure we only launch requests once * kns: fix entry deduplication * packagekitbackend: de-thread the appstream loading hotfix * Fix build with c++17 * flatpak: Rescue local files that might exist before creating a new file ==== flatpak-kcm6 ==== Version update (6.0.2 -> 6.0.3) - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - No code changes since 6.0.2 ==== gnutls ==== Version update (3.8.3 -> 3.8.4) - jitterentropy: Release the memory of the entropy collector when using jitterentropy with phtreads as there is also a pre-intitization done in the main thread. [bsc#1221242] * Add gnutls-FIPS-jitterentropy-deinit-threads.patch - Update to 3.8.4: * libgnutls: RSA-OAEP encryption scheme is now supported To use it with an unrestricted RSA private key, one would need to initialize a gnutls_x509_spki_t object with necessary parameters for RSA-OAEP and attach it to the private key. It is also possible to import restricted private keys if they are stored in PKCS#8 format. * libgnutls: Fix side-channel in the deterministic ECDSA. Reported by George Pantelakis (#1516). [GNUTLS-SA-2023-12-04, CVSS: medium] [bsc#1221746, CVE-2024-28834] * libgnutls: Fixed a bug where certtool crashed when verifying a certificate chain with more than 16 certificates. Reported by William Woodruff (#1525) and yixiangzhike (#1527). [GNUTLS-SA-2024-01-23, CVSS: medium] [bsc#1221747, CVE-2024-28835] * libgnutls: Compression libraries are now loaded dynamically as needed instead of all being loaded during gnutls library initialization. As a result, the library initialization should be faster. * build: The gnutls library can now be linked with the static library of GMP. Note that in order for this to work libgmp.a needs to be compiled with -fPIC and libhogweed in Nettle also has to be linked to the static library of GMP. This can be used to prevent custom memory allocators from being overriden by other applications. * API and ABI modifications: - gnutls_x509_spki_get_rsa_oaep_params: New function. - gnutls_x509_spki_set_rsa_oaep_params: New function. - GNUTLS_PK_RSA_OAEP: New enum member of gnutls_pk_algorithm_t. * Rebase patches: - gnutls-FIPS-140-3-references.patch - gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch ==== kactivitymanagerd6 ==== Version update (6.0.2 -> 6.0.3) - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - No code changes since 6.0.2 ==== kde-cli-tools6 ==== Version update (6.0.2 -> 6.0.3) - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * Remove sl documentation * update version for new release ==== kde-gtk-config6 ==== Version update (6.0.2 -> 6.0.3) Subpackages: kde-gtk-config6-gtk3 - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release * gtkconfig.upd: Set Version=6 (kde#482763) - Drop patches, now upstream: * 0001-gtkconfig.upd-Set-Version-6.patch ==== kdecoration6 ==== Version update (6.0.2 -> 6.0.3) Subpackages: libkdecorations2-6 libkdecorations2private11 - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release ==== kdeplasma6-addons ==== Version update (6.0.2 -> 6.0.3) - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release * wallpapers/potd: check network information backend is available before querying capabilities * update version for new release * applets/weather: remove invalid bindings on Layout properties * Mark QtQuick3D as a runtime dependency ==== kgamma6 ==== Version update (6.0.2 -> 6.0.3) - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release ==== kglobalacceld6 ==== Version update (6.0.2 -> 6.0.3) Subpackages: libKGlobalAccelD6-0 - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release * Update service-based shortcuts when service database changes (kde#479730,kde#483918) * Fix KHotkeys migration (kde#484063) * Also consider actions when querying for applications with shortcuts (kde#483214) ==== kinfocenter6 ==== Version update (6.0.2 -> 6.0.3) - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * Remove sl documentation * update version for new release ==== kmenuedit6 ==== Version update (6.0.2 -> 6.0.3) - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * Remove sl documentation * update version for new release ==== kpipewire6 ==== Version update (6.0.2 -> 6.0.3) Subpackages: kpipewire6-imports libKPipeWire6 libKPipeWireDmaBuf6 libKPipeWireRecord6 - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * fix typo * update version for new release * Don't set PipeWireSourceItem::enabled to true when the item becomes visible * Drop redundant isComponentComplete() checks * Remove redundant code * Mark PipeWireSourceItem as enabled after receiving a frame ==== kscreen6 ==== Version update (6.0.2 -> 6.0.3) - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release * plasmoid: adapt to changed inhibition request handling (kde#477355) * OsdAction: fix finding best mode * OsdAction: fix applying mode on X11 (kde#482642) ==== kscreenlocker6 ==== Version update (6.0.2 -> 6.0.3) Subpackages: libKScreenLocker6 - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release ==== ksshaskpass6 ==== Version update (6.0.2 -> 6.0.3) - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release ==== ksystemstats6 ==== Version update (6.0.2 -> 6.0.3) - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release * cpu: Store physical ID with core ID when looking up coretemp sensors (kde#474766) ==== kwayland-integration6 ==== Version update (6.0.2 -> 6.0.3) - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release ==== kwayland6 ==== Version update (6.0.2 -> 6.0.3) Subpackages: libKWaylandClient6 - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release ==== kwin6 ==== Version update (6.0.2 -> 6.0.3.1) Subpackages: kwin6-x11 libkwin6 - Update to 6.0.3.1: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3.1 - Changes since 6.0.3: * plugins/screencast: Handle failing to import dmabuf * plugins/screencast: Simplify damage calculation in region screen cast source * plugins/screencast: Drop "stream" in ScreenCastStream::streamReady * plugins/screencast: Rename ScreenCastStream::stop() to close() * plugins/screencast: Pause/resume source when stream is paused/resumed * Fix oversights on shortcut handling within Overview/Grid effect (kde#482931) * tiles: Evacuate windows in CustomTile::remove() * tiles: Use deleteLater() in CustomTile::remove() - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Too many changes to list here ==== kwrited6 ==== Version update (6.0.2 -> 6.0.3) - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release ==== layer-shell-qt6 ==== Version update (6.0.2 -> 6.0.3) Subpackages: libLayerShellQtInterface6 - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release ==== libkscreen6 ==== Version update (6.0.2 -> 6.0.3) Subpackages: libKF6Screen8 libKF6ScreenDpms8 libkscreen6-plugin - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release ==== libksysguard6 ==== Version update (6.0.2 -> 6.0.3) Subpackages: ksysguardsystemstats6-data libKSysGuardSystemStats2 libksysguard6-imports libksysguard6-plugins - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release * colorgrid: Use the same background color as pie/bar charts (kde#482664) * faces/piechart: Explicitly set the thickness of the chart * faces/piechart: Don't hardcode background color but base it on theme * faces/horizontalbars: Repair compact representation (kde#481949) * faces/horizontalbars: Use a fixed background rather than relying on style (kde#480415) ==== libplasma6 ==== Version update (6.0.2 -> 6.0.3) Subpackages: libPlasma6 libplasma6-components libplasma6-desktoptheme - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release * Do not activate containment when one of its applet is activated (kde#483941,kde#479084) ==== milou6 ==== Version update (6.0.2 -> 6.0.3) - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release ==== ocean-sound-theme6 ==== Version update (6.0.2 -> 6.0.3) - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release ==== pam_kwallet6 ==== Version update (6.0.2 -> 6.0.3) Subpackages: pam_kwallet6-common - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release ==== perl-HTML-Parser ==== Version update (3.81 -> 3.820.0) - updated to 3.82 see /usr/share/doc/packages/perl-HTML-Parser/Changes 3.82 2024-03-13 - "img lowsrc" and "body background" are not in the HTMLv5 spec (GH#43) (Jess) - Replace "FileHandle" with "IO::File" (GH#42) (James Raspass) - Fix some minor typos (GH#41) (Yoshikazu Sawa) ==== perl-HTML-Tagset ==== Version update (3.20 -> 3.240.0) - updated to 3.24 see /usr/share/doc/packages/perl-HTML-Tagset/Changes 2024-03-11 Andy Lester * Release 3.24 No changes in functionality. Only updates metadata for builds. 2024-03-09 Andy Lester * Release 3.22 HTML::Tagset now requires Perl 5.10.1. It might run on earlier Perls but I don't have the infrastructure to test them. Added <ins> and <del> to %isPhraseMarkup (RT #151970) Fixed docs about %isBodyElement calling it %isBodyMarkup (RT #34913, RT #109024, RT #118356) Cleaned up metadata and version requirements. No changes have been made to handle HTML5. That is a bigger issue than "just add the tags to the hashes," because that would change functionality for existing users who are expecting HTML::Tagset to be HTML4. ==== perl-IO-Socket-SSL ==== Version update (2.84.0 -> 2.85.0) - Remove perl-IO-Socket-SSL-Openssl32.patch, fixed upstream - updated to 2.085 see /usr/share/doc/packages/perl-IO-Socket-SSL/Changes 2.085 2024/01/22 - #147 fix test which failed due to behavior changes in OpenSSL 3.2 - update PublicSuffix - add examples for TLS JA3/JA4 fingerprinting to tls_fingerprint/ ==== perl-LWP-Protocol-https ==== Version update (6.130.0 -> 6.140.0) - updated to 6.14 see /usr/share/doc/packages/perl-LWP-Protocol-https/Changes 6.14 2024-03-11 01:08:33Z - Inherit with 'use parent' instead of 'use base' (GH#78) (Marin Tsanov) ==== perl-Net-SSLeay ==== Version update (1.92 -> 1.940.0) - Remove Use-constants-X509_VERSION_3-and-X509_REQ_VERSION_1-when-available.patch (fixed upstream) - updated to 1.94 see /usr/share/doc/packages/perl-Net-SSLeay/Changes 1.94 2024-01-08 - New stable release incorporating all changes from developer releases 1.93_01 to 1.93_05. - Summary of major changes since version 1.92: - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and 3.2, and LibreSSL 3.5 - 3.8. - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to compile, it should now be much easier to identify the cause. - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl() function are now exposed, enabling fine-grained control over the initialisation and configuration of both libraries. - libssl functions implementing TLS 1.3 PSK authentication are now exposed, in particular SSL_CTX_set_psk_find_session_callback() (on the server side) and SSL_CTX_set_psk_use_session_callback() (on the client side). - libssl functions implementing server-side TLS 1.2 PSK authentication are now exposed, in particular SSL_CTX_set_psk_server_callback(). - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a TLS server to set a callback function that is executed when the server processes a ClientHello message. - Many more libcrypto/libssl constants and functions are now exposed; see the release notes for the 1.93 developer releases for a full list. 1.93_05 2024-01-06 - Remove support for automatic detection of libssl/libcrypto via pkg-config with ExtUtils::PkgConfig if it is installed, due to the compiler and linker options provided by pkg-config being used unconditionally (which is incompatible with the OPENSSL_PREFIX detection method). The implementation of this was merged in time for developer release 1.93_03 and therefore hasn't been included in a stable release yet, so this doesn't represent a breaking change to the way in which libssl/libcrypto are detected by Makefile.PL. This is, however, a very useful feature, and we intend to bring it back in time for Net-SSLeay 1.96 after ironing out the remaining bugs. 1.93_04 2024-01-05 - Use -DOPENSSL_API_COMPAT=908 when compiling SSLeay.xs to suppress OpenSSL deprecation warnings. - Expose a number of functions that were added in recent LibreSSL releases or were not otherwise exposed before: - SSL(_CTX)_get/set_security_level in LibreSSL 3.6.0 - SSL(_CTX)_get/set_num_tickets in LibreSSL 3.5.0 - SSL(_CTX)_set_ciphersuites in LibreSSL 3.4.0 - EVP_PKEY_security_bits in LibreSSL 3.6.0 - SSL_CTX_set_keylog_callback in LibreSSL 3.5.0 - SSL_is_dtls in LibreSSL 3.3.2 - Remove Tuure Vartiainen as an active contributor. Tuure's contributions were instrumental in the transition from ad hoc testing to CI-based testing, which has greatly improved Net-SSLeay's stability, reliability and compatibility. Thanks for your contributions, Tuure! 1.93_03 2024-01-02 - Pass RAND_seed()'s sole argument to the underlying RAND_seed() function in libcrypto, rather than passing the value of a non-existent second argument. Fixes GH-427. Thanks to cgf1 for the report. - Avoid explicit and implicit use of weak hash algorithms, such as MD5 and SHA-1, in test suite. This allows tests 44_sess.t and 45_exporter.t to correctly work on systems where crypto policies prohibit their direct use and TLS versions that require them. An example of such a system is Rocky Linux 9.2. Any Red Hat Enterprise Linux 9 and derived system is likely to have similar behaviour. Thanks to Paul Howarth for the investigation and patches. - LibreSSL 3.8.0 release notes state: The POLICY_TREE and its related structures and API were removed. The affected Net::SSLeay functions are: - X509_policy_level_get0_node - X509_policy_level_node_count - X509_policy_node_get0_parent - X509_policy_node_get0_policy - X509_policy_node_get0_qualifiers - X509_policy_tree_free - X509_policy_tree_get0_level - X509_policy_tree_get0_policies - X509_policy_tree_get0_user_policies - X509_policy_tree_level_count Patch by GitHub user orbea. - Add OpenSSL 3.1 and LibreSSL 3.7 minor releases to GitHub CI testing. Update the previous minor releases to their latest versions. Add NetBSD to BSDs job and update the other BSDs and Alpine Linux jobs to cover additional and latest releases. Use the latest MacOS runners. - Expose SSL_CTX_set_client_hello_cb for setting a callback the server calls when it processes a ClientHello. Expose the following functions that can be called only from the callback. None of these are available with LibreSSL. - SSL_client_hello_isv2 - SSL_client_hello_get0_legacy_version - SSL_client_hello_get0_random - SSL_client_hello_get0_session_id - SSL_client_hello_get0_ciphers - SSL_client_hello_get0_compression_methods - SSL_client_hello_get1_extensions_present - SSL_client_hello_get_extension_order - SSL_client_hello_get0_ext - Expose constants used by SSL_CTX_set_client_hello_cb related functions. - AD_ prefixed constants naming TLS alert codes for returning from a ClientHello callback or where alert types are used - CLIENT_HELLO_ERROR, CLIENT_HELLO_RETRY and ... changelog too long, skipping 249 lines ... support for old TLS versions. ==== perl-libwww-perl ==== Version update (6.760.0 -> 6.770.0) - updated to 6.77 see /usr/share/doc/packages/perl-libwww-perl/Changes 6.77 2024-03-11 00:56:14Z - Documentation updates for GH#448 (GH#457) (Russell Shingleton) ==== plasma5support6 ==== Version update (6.0.2 -> 6.0.3) Subpackages: libPlasma5Support6 - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release ==== plasma6-activities ==== Version update (6.0.2 -> 6.0.3) Subpackages: libPlasmaActivities6 plasma6-activities-imports - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release ==== plasma6-activities-stats ==== Version update (6.0.2 -> 6.0.3) Subpackages: libPlasmaActivitiesStats1 - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release ==== plasma6-browser-integration ==== Version update (6.0.2 -> 6.0.3) - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release ==== plasma6-desktop ==== Version update (6.0.2 -> 6.0.3) Subpackages: plasma6-desktop-emojier - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * revert duplicate appstream update * update version for new release * applets/taskmanager: remove unnecessary Layout properties * applets/taskmanager: Drop pipewire window thumbnail opacity animation * applets/taskmanager: Don't base the amount of space reserved for the thumbnail on the header (kde#481044) * Revert "Panel: Don't take keyboard focus when one of its widgets is activated" * Folder View: fix label rendering for popup and widget views (kde#484163) * Panel: don't round floating paddings to smoothen animation * applets/kimpanel: Fix save font option * Kicker: Fix submenus appearing in taskmanager (kde#481955) * Cancel edit prior reparenting the applet * solid-device-automounter/kcm: do not create proxy widget in initializer list * Filter out enter (kde#482123) ==== plasma6-disks ==== Version update (6.0.2 -> 6.0.3) - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * revert duplicate appstream update * update version for new release ==== plasma6-integration ==== Version update (6.0.2 -> 6.0.3) - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release ==== plasma6-nm ==== Version update (6.0.2 -> 6.0.3) Subpackages: plasma6-nm-openconnect plasma6-nm-openvpn - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release * Use "double" for storing received/sent bytes (kde#479230) ==== plasma6-openSUSE ==== Subpackages: plasma6-branding-openSUSE plasma6-sddm-theme-openSUSE plasma6-theme-openSUSE - Update to 6.0.3 ==== plasma6-pa ==== Version update (6.0.2 -> 6.0.3) - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release ==== plasma6-print-manager ==== Version update (6.0.2 -> 6.0.3) - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * revert duplicate appstream update * update version for new release ==== plasma6-systemmonitor ==== Version update (6.0.2 -> 6.0.3) - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * revert duplicate appstream update * update version for new release * GlobalMenu: Fix path to AboutPage.qml * page: Fix drag-sorting of pages in PageSortDialog (kde#482377) ==== plasma6-thunderbolt ==== Version update (6.0.2 -> 6.0.3) - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - No code changes since 6.0.2 ==== plasma6-workspace ==== Version update (6.0.2 -> 6.0.3) Subpackages: plasma6-session plasma6-session-x11 plasma6-workspace-libs sddm-qt6-branding-openSUSE - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Too many changes to list here ==== polkit-kde-agent-6 ==== Version update (6.0.2 -> 6.0.3) - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release ==== powerdevil6 ==== Version update (6.0.2 -> 6.0.3) - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release * kcmodule: Don't crash when a configured button action is unsupported (kde#482668) ==== qqc2-breeze-style6 ==== Version update (6.0.2 -> 6.0.3) - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release ==== qt6-base ==== Version update (6.6.2 -> 6.6.3) Subpackages: libQt6Concurrent6 libQt6Core6 libQt6DBus6 libQt6Gui6 libQt6Network6 libQt6OpenGL6 libQt6OpenGLWidgets6 libQt6PrintSupport6 libQt6Sql6 libQt6Test6 libQt6Widgets6 libQt6Xml6 qt6-network-tls qt6-networkinformation-glib qt6-networkinformation-nm qt6-platformtheme-gtk3 qt6-printsupport-cups qt6-sql-sqlite - Update to 6.6.3: * https://www.qt.io/blog/qt-6.6.3-released - Make libQt6PrintSupport6 require qt6-printsupport-cups (boo#1221576) ==== qt6-declarative ==== Version update (6.6.2 -> 6.6.3) Subpackages: libQt6LabsAnimation6 libQt6LabsFolderListModel6 libQt6LabsQmlModels6 libQt6LabsSettings6 libQt6LabsSharedImage6 libQt6LabsWavefrontMesh6 libQt6Qml6 libQt6QmlCore6 libQt6QmlLocalStorage6 libQt6QmlModels6 libQt6QmlWorkerScript6 libQt6QmlXmlListModel6 libQt6Quick6 libQt6QuickControls2-6 libQt6QuickControls2Impl6 libQt6QuickDialogs2-6 libQt6QuickDialogs2QuickImpl6 libQt6QuickDialogs2Utils6 libQt6QuickEffects6 libQt6QuickLayouts6 libQt6QuickParticles6 libQt6QuickShapes6 libQt6QuickTemplates2-6 libQt6QuickTest6 libQt6QuickWidgets6 qt6-declarative-imports - Update to 6.6.3: * https://www.qt.io/blog/qt-6.6.3-released - Drop patches, merged upstream: * 0001-QuickControls-Link-the-impl-libraries-into-the-base-.patch * 0001-Dialogs-Depend-on-controls-styles-in-QuickDialogs2Qu.patch ==== qt6-imageformats ==== Version update (6.6.2 -> 6.6.3) - Update to 6.6.3: * https://www.qt.io/blog/qt-6.6.3-released ==== qt6-multimedia ==== Version update (6.6.2 -> 6.6.3) Subpackages: libQt6Multimedia6 libQt6MultimediaQuick6 libQt6Quick3DSpatialAudio6 libQt6SpatialAudio6 qt6-multimedia-imports - Make libQt6Multimedia6 require the qtmultimedia plugins (related: boo#1222064) - Update to 6.6.3: * https://www.qt.io/blog/qt-6.6.3-released ==== qt6-positioning ==== Version update (6.6.2 -> 6.6.3) - Update to 6.6.3: * https://www.qt.io/blog/qt-6.6.3-released ==== qt6-qt5compat ==== Version update (6.6.2 -> 6.6.3) Subpackages: libQt6Core5Compat6 qt6-qt5compat-imports - Update to 6.6.3: * https://www.qt.io/blog/qt-6.6.3-released ==== qt6-quick3d ==== Version update (6.6.2 -> 6.6.3) Subpackages: libQt6Quick3D6 libQt6Quick3DAssetImport6 libQt6Quick3DAssetUtils6 libQt6Quick3DEffects6 libQt6Quick3DHelpers6 libQt6Quick3DHelpersImpl6 libQt6Quick3DParticleEffects6 libQt6Quick3DParticles6 libQt6Quick3DRuntimeRender6 libQt6Quick3DUtils6 qt6-quick3d-imports - Update to 6.6.3: * https://www.qt.io/blog/qt-6.6.3-released ==== qt6-quicktimeline ==== Version update (6.6.2 -> 6.6.3) - Update to 6.6.3: * https://www.qt.io/blog/qt-6.6.3-released ==== qt6-sensors ==== Version update (6.6.2 -> 6.6.3) - Update to 6.6.3: * https://www.qt.io/blog/qt-6.6.3-released ==== qt6-shadertools ==== Version update (6.6.2 -> 6.6.3) - Update to 6.6.3: * https://www.qt.io/blog/qt-6.6.3-released ==== qt6-speech ==== Version update (6.6.2 -> 6.6.3) Subpackages: libQt6TextToSpeech6 qt6-texttospeech - Update to 6.6.3: * https://www.qt.io/blog/qt-6.6.3-released ==== qt6-svg ==== Version update (6.6.2 -> 6.6.3) - Update to 6.6.3: * https://www.qt.io/blog/qt-6.6.3-released ==== qt6-tools ==== Version update (6.6.2 -> 6.6.3) Subpackages: libQt6UiTools6 qt6-tools-qdbus - Update to 6.6.3: * https://www.qt.io/blog/qt-6.6.3-released ==== qt6-translations ==== Version update (6.6.2 -> 6.6.3) - Update to 6.6.3: * https://www.qt.io/blog/qt-6.6.3-released ==== qt6-virtualkeyboard ==== Version update (6.6.2 -> 6.6.3) Subpackages: libQt6HunspellInputMethod6 libQt6VirtualKeyboard6 qt6-virtualkeyboard-imports - Update to 6.6.3: * https://www.qt.io/blog/qt-6.6.3-released - Drop patch, merged upstream: * 0001-Link-VKB-and-VKB.Settings-into-VKB.Components-and-VK.patch ==== qt6-wayland ==== Version update (6.6.2 -> 6.6.3) Subpackages: libQt6WaylandClient6 libQt6WaylandCompositor6 libQt6WaylandEglClientHwIntegration6 libQt6WaylandEglCompositorHwIntegration6 libQt6WlShellIntegration6 - Update to 6.6.3: * https://www.qt.io/blog/qt-6.6.3-released ==== qt6-webchannel ==== Version update (6.6.2 -> 6.6.3) Subpackages: libQt6WebChannel6 libQt6WebChannelQuick6 qt6-webchannel-imports - Update to 6.6.3: * https://www.qt.io/blog/qt-6.6.3-released ==== qt6-webengine ==== Version update (6.6.2 -> 6.6.3) Subpackages: libQt6WebEngineCore6 libQt6WebEngineQuick6 libQt6WebEngineWidgets6 qt6-webengine-imports - Update to 6.6.3: * https://www.qt.io/blog/qt-6.6.3-released ==== qt6-webview ==== Version update (6.6.2 -> 6.6.3) - Update to 6.6.3: * https://www.qt.io/blog/qt-6.6.3-released ==== sddm-kcm6 ==== Version update (6.0.2 -> 6.0.3) - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release * Sync the current kwin output configuration * Reset cursor theme and size to defaults if they are unset in Plasma * Allow unsetting values when syncing Plasma settings * Adapt to Qt6 QVariant::isNull() changes ==== sof-firmware ==== Version update (2023.12 -> 2023.12.1) - Updated to version 2023.12.1: * SOF v2.8.1 FW binaries. For older Intel platforms, FW from v2.2 stable * SOF v2.8 tools. For older Intel platforms, tools from v2.2 stable * SOF v2.8.1 DSP topologies. For older Intel platforms, topologies matching v2.2.8 - Update supplements for snd-sof-pci-intel-mtl ==== systemsettings6 ==== Version update (6.0.2 -> 6.0.3) - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * revert double appstream update * update version for new release ==== usb_modeswitch ==== Subpackages: usb_modeswitch-data - Use %patch -P N instead of deprecated %patchN. ==== wacomtablet-kcm6 ==== Version update (6.0.2 -> 6.0.3) - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * revert duplicate metadata * update version for new release ==== webkit2gtk3 ==== Subpackages: libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles - Use WebAssembly on aarch64. It is the upstream default and no longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON, - DENABLE_WEBASSEMBLY=OFF and -DENABLE_SAMPLING_PROFILER=OFF for the same reason. - Drop webkit2gtk3-llint-build-fix.patch: no longer needed. - Update some version requirements to match cmake checks. ==== webkit2gtk4 ==== Subpackages: libjavascriptcoregtk-6_0-1 libwebkitgtk-6_0-4 webkitgtk-6_0-injected-bundles - Use WebAssembly on aarch64. It is the upstream default and no longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON, - DENABLE_WEBASSEMBLY=OFF and -DENABLE_SAMPLING_PROFILER=OFF for the same reason. - Drop webkit2gtk3-llint-build-fix.patch: no longer needed. - Update some version requirements to match cmake checks. ==== wireless-tools ==== Subpackages: libiw30 - Use %patch -P N instead of deprecated %patchN. ==== xdg-desktop-portal-kde6 ==== Version update (6.0.2 -> 6.0.3) - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release * AppChooserDialog: Reload model when Sycoca database changes ==== xz ==== Version update (5.6.1 -> 5.6.1.revertto5.4) Subpackages: liblzma5 - restore a bigger version number so that update works