Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=3&version=Tumbleweed&build=20231013 https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&component=MicroOS&query_format=advanced&resolution=--- Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ImageMagick (7.1.1.19 -> 7.1.1.20) baloo5-widgets (23.08.1 -> 23.08.2) containerd (1.7.6 -> 1.7.7) curl (8.3.0 -> 8.4.0) docker dolphin (23.08.1 -> 23.08.2) ffmpegthumbs (23.08.1 -> 23.08.2) filelight (23.08.1 -> 23.08.2) freetype2 (2.13.1 -> 2.13.2) gnome-control-center gnome-shell grub2 gtk3 installation-images-MicroOS (17.96 -> 17.97) kaccounts-integration (23.08.1 -> 23.08.2) kaccounts-providers (23.08.1 -> 23.08.2) kate (23.08.1 -> 23.08.2) kde-print-manager (23.08.1 -> 23.08.2) kdegraphics-thumbnailers (23.08.1 -> 23.08.2) kdenetwork-filesharing (23.08.1 -> 23.08.2) kdialog (23.08.1 -> 23.08.2) kernel-firmware (20230829 -> 20231006) khelpcenter5 (23.08.1 -> 23.08.2) kio-extras5 (23.08.1 -> 23.08.2) konsole (23.08.1 -> 23.08.2) kpmcore (23.08.1 -> 23.08.2) kwalletmanager5 (23.08.1 -> 23.08.2) libev libgcrypt libgexiv2 libglvnd (1.6.0 -> 1.7.0) libkdcraw (23.08.1 -> 23.08.2) libkexiv2 (23.08.1 -> 23.08.2) libnvme libtirpc (1.3.3 -> 1.3.4) libyui (4.6.0 -> 4.6.1) libyui-ncurses (4.6.0 -> 4.6.1) libyui-ncurses-pkg (4.6.0 -> 4.6.1) libyui-qt (4.6.0 -> 4.6.1) libyui-qt-graph (4.6.0 -> 4.6.1) libyui-qt-pkg (4.6.0 -> 4.6.1) libzypp (17.31.20 -> 17.31.22) malcontent (0.10.4 -> 0.11.1) microos-tools (2.21+git0 -> 2.21+git5) mobipocket (23.08.1 -> 23.08.2) mutter nvme-cli partitionmanager (23.08.1 -> 23.08.2) patterns-microos pipewire (0.3.80 -> 0.3.81) python-pycurl python-sniffio python-urllib3 samba (4.19.0+git.306.19d2e214c58 -> 4.19.1+git.312.c912b3d2ef6) selinux-policy (20230728 -> 20231012) signon-kwallet-extension (23.08.1 -> 23.08.2) spectacle (23.08.1 -> 23.08.2) udisks2 wireplumber (0.4.14 -> 0.4.15) xscreensaver (6.07 -> 6.08) yast2-country (4.6.3 -> 5.0.1) yast2-x11 (4.6.0 -> 5.0.1) zypper (1.14.64 -> 1.14.66) === Details === ==== ImageMagick ==== Version update (7.1.1.19 -> 7.1.1.20) Subpackages: ImageMagick-config-7-SUSE libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - version update to 7.1.1.20 * https://github.com/ImageMagick/Website/blob/main/ChangeLog.md ==== baloo5-widgets ==== Version update (23.08.1 -> 23.08.2) - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== containerd ==== Version update (1.7.6 -> 1.7.7) - Update to containerd v1.7.7. Upstream release notes: https://github.com/containerd/containerd/releases/tag/v1.7.7 - Add patch to fix build on SLE-12: + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch ==== curl ==== Version update (8.3.0 -> 8.4.0) Subpackages: libcurl4 - Update to 8.4.0: * Security fixes: - SOCKS5 heap buffer overflow [bsc#1215888, CVE-2023-38545] - cookie injection with none file [bsc#1215889, CVE-2023-38546] * Changes: - curl: add support for the IPFS protocols via HTTP gateway - curl_multi_get_handles: get easy handles from a multi handle - mingw: delete support for legacy mingw.org toolchain * Bugfixes: - base64: also build for curl - cf-socket: simulate slow/blocked receives in debug - configure: check for the capath by default - connect: expire the timeout when trying next - connect: only start the happy eyeballs timer when needed - cookie: do not store the expire or max-age strings - cookie: remove unnecessary struct fields - cookie: set ->running in cookie_init even if data is NULL - create-dirs.d: clarify it also uses --output-dirs - http2: refused stream handling for retry - http: h1/h2 proxy unification - http: use per-request counter to check too large headers - idn: if idn2_check_version returns NULL, return error - lib: enable hmac for digest as well - lib: let the max filesize option stop too big transfers too - lib: move handling of 'data->req.writer_stack' into Curl_client_write() - lib: provide and use Curl_hexencode - lib: use wrapper for curl_mime_data fseek callback - libssh2: fix error message on failed pubkey-from-file - libssh: cap SFTP packet size sent - MQTT: improve receive of ACKs - multi: do CURLM_CALL_MULTI_PERFORM at two more places - multi: round the timeout up to prevent early wakeups - openssl: improve ssl shutdown handling - openssl: use X509_ALGOR_get0 instead of reaching into X509_ALGOR - pytest: exclude test_03_goaway in CI runs due to timing dependency - quic: set ciphers/curves the same way regular TLS does - quiche: fix build error with --with-ca-fallback - socks: return error if hostname too long for remote resolve - tftpd: always use curl's own tftp.h - tool_getparam: accept variable expansion on file names too - upload-file.d: describe the file name slash/backslash handling - url: fall back to http/https proxy env-variable if ws/wss not set - url: fix netrc info message - wolfssh: do cleanup in Curl_ssh_cleanup - wolfssl: allow capath with CURLOPT_CAINFO_BLOB - wolfssl: if CURLOPT_CAINFO_BLOB is set, ignore the CA files - wolfssl: ignore errors in CA path * Rebase libcurl-ocloexec.patch ==== docker ==== Subpackages: docker-bash-completion docker-rootless-extras - Add a patch to fix apparmor on SLE-12, reverting the upstream removal of version-specific templating for the default apparmor profile. bsc#1213500 + 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch - Rebase patches: * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch ==== dolphin ==== Version update (23.08.1 -> 23.08.2) Subpackages: dolphin-part libdolphinvcs5 - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== ffmpegthumbs ==== Version update (23.08.1 -> 23.08.2) - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - Changes since 23.08.1: * Drop unused KI18n header/dependency ==== filelight ==== Version update (23.08.1 -> 23.08.2) - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - Changes since 23.08.1: * Revert "Fix ignore path support. Fix crash when we load root path" * tests: cripple freebsd testing ==== freetype2 ==== Version update (2.13.1 -> 2.13.2) - Update to version 2.13.2: - Better support for CFF2 variation fonts. - TrueType interpreter version 38 (also known as 'Infinality') has been removed. - Improved OpenVMS support. ==== gnome-control-center ==== Subpackages: gnome-control-center-color gnome-control-center-goa gnome-control-center-user-faces - Add gnome-control-center-network-fix-nmce-popup.patch: network-connection-editor: Close the editor when nm-connection-editor exits(bsc#1208193 glgo#GNOME/gnome-control-center!1956). ==== gnome-shell ==== Subpackages: gnome-extensions gnome-shell-calendar - Add gnome-shell-add-linkoption-dl.patch on SLE and Leap: the -ldl option to build gnome-shell main programme is needed because an upstream fix. This option needs explicitly given on current SLE build environment. See: https://gitlab.gnome.org/GNOME/gnome-shell/-/commit/65cde18786e2bea8ffe33317... ==== grub2 ==== Subpackages: grub2-arm64-efi grub2-snapper-plugin grub2-systemd-sleep-plugin - Fix CVE-2023-4692 (bsc#1215935) - Fix CVE-2023-4693 (bsc#1215936) * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch * 0006-fs-ntfs-Make-code-more-readable.patch - Bump upstream SBAT generation to 4 ==== gtk3 ==== Subpackages: gtk3-data gtk3-immodule-amharic gtk3-immodule-inuktitut gtk3-immodule-thai gtk3-immodule-tigrigna gtk3-immodule-vietnamese gtk3-schema gtk3-tools libgtk-3-0 typelib-1_0-Gtk-3_0 - Revert RPM ternary operations on SLE where rpm version is not ready. ==== installation-images-MicroOS ==== Version update (17.96 -> 17.97) - merge gh#openSUSE/installation-images#665 - add kernel modules needed for MediaTek boards 'mt8195-demo' and 'genio-1200-evk' (bsc#1215995) - 17.97 ==== kaccounts-integration ==== Version update (23.08.1 -> 23.08.2) Subpackages: libkaccounts2 - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kaccounts-providers ==== Version update (23.08.1 -> 23.08.2) - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kate ==== Version update (23.08.1 -> 23.08.2) Subpackages: kate-plugins - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - Changes since 23.08.1: * ensure we don't crash if no item is selected (kde#475379) * Fix prettier.resolveConfig.sync is not a function (kde#474722) * Explicitly call QCoreApplication::exit() ==== kde-print-manager ==== Version update (23.08.1 -> 23.08.2) - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kdegraphics-thumbnailers ==== Version update (23.08.1 -> 23.08.2) - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kdenetwork-filesharing ==== Version update (23.08.1 -> 23.08.2) - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kdialog ==== Version update (23.08.1 -> 23.08.2) - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kernel-firmware ==== Version update (20230829 -> 20231006) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Add Provides to sub-packages from kernel-firmware (bsc#1214789); this will work around the potential conflicts of compressed vs uncompressed installations - Update to version 20231006 (git commit 389575a8a177) (jsc#PED-6130, jsc#PED-6081): * WHENCE: add symlink for BananaPi M64 * linux-firmware: Add firmware file for Intel Bluetooth AX211 * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth AX211 * linux-firmware: Update firmware file for Intel Bluetooth AX211 * linux-firmware: Update firmware file for Intel Bluetooth AX210 * linux-firmware: Update firmware file for Intel Bluetooth 9560 * linux-firmware: Update firmware file for Intel Bluetooth 9260 * Build debian and fedora images * Add new Makefile target to build a deb and rpm package * i915: Update MTL DMC to v2.17 * iwlwifi: add FWs for new GL and MA device types with multiple RF modules * amd_pmf: Add initial PMF TA for Smart PC Solution Builder * linux-firmware: Update FW files for MRVL PCIE 8997 chipsets * rtl_bt: Update RTL8851B BT USB firmware to 0x048A_D230 * iwlwifi: add new FWs from core81-65 release * iwlwifi: update cc/Qu/QuZ firmwares for core81-65 release - Drop fdupes to avoid missing files for split packages (bsc#1215464) - Add conflicts to each split subpk against uncompressed raw package; the contents may conflict and the compressed files won't be effective unless the raw files get removed - Update aliases - Update to version 20230918 (commit f48da6da5507): * Run merge request pipelines for pre-commit. * linux-firmware: amd-ucode: Add note on fam19h warnings * i915: update MTL HuC to version 8.5.4 * amdgpu: update DMCUB to 0.0.183.0 for various AMDGPU ASICs - Update to version 20230907 (git commit c801b3b807d2): * Turn off textwidth check * linux-firmware: add link to sc8280xp audioreach firmware * qcom: sm8250: add RB5 sensors DSP firmware * qcom: Update vpu-1.0 firmware * qcom: sm8250: update DSP firmware * qcom: add firmware for the onboard WiFi on qcm2290 / qrb4210 * qcom: add venus firmware files for v6.0 * qcom: add firmware for QRB4210 platforms * qcom: add firmware for QCM2290 platforms * qcom: add GPU firmware for QCM2290 / QRB2210 * ath10k/WCN3990: move wlanmdsp to qcom/sdm845 * WHENCE: Don't compress qcom json files * WHENCE: amd-ucode: Use new RawFile keyword * check_whence: Recognize RawFile keyword * Only run ci-fairy on merge requests * Capture artifacts from `make dist` to save at release time. * Add new toplevel 'make dist' target. * Create symlinks for all firmware that is duplicate using rdfind * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00605 * Add shellcheck pre-commit target * Fix carl9170fw shell scripts for shellcheck errors * Add a rule for automatic tagging releases by pipeline schedule * Add gitlab ci for calling pre-commit and ci-fairy * Add Dockerfile used to build CI image * Rewrite README in markdown * Wire up pre-commit to `make check` * Add pre-commit hooks and codespell template * check_whence: reformat using python black - Drop obsoleted amd-ucode-rawfile.patch - Fix make-files.sh to handle RawFile tag correctly - Update aliases from 6.6-rc1 ==== khelpcenter5 ==== Version update (23.08.1 -> 23.08.2) - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kio-extras5 ==== Version update (23.08.1 -> 23.08.2) Subpackages: libkioarchive5 - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - Changes since 23.08.1: * thumbnail Jpegcreator: skip exif thumbnail when too small (kde#466658) ==== konsole ==== Version update (23.08.1 -> 23.08.2) Subpackages: konsole-part konsole-part-lang - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kpmcore ==== Version update (23.08.1 -> 23.08.2) Subpackages: libkpmcore12 - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== kwalletmanager5 ==== Version update (23.08.1 -> 23.08.2) - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - Changes since 23.08.1: * Fix configure module name for Qt5 as well ==== libev ==== - changed comment in sig file - modified sources % libev-4.33.tar.gz.sig ==== libgcrypt ==== - POWER: performance enhancements for cryptography [jsc#PED-5088] * Optimize Chacha20 and Poly1305 for PPC P10 LE: [T6006] - Chacha20/poly1305: Optimized chacha20/poly1305 for P10 operation [rC88fe7ac33eb4] - ppc: enable P10 assembly with ENABLE_FORCE_SOFT_HWFEATURES on arch-3.00 [rC2c5e5ab6843d] * Add patches: - libgcrypt-Chacha20-poly1305-Optimized-chacha20-poly1305.patch - libgcrypt-ppc-enable-P10-assembly-with-ENABLE_FORCE_SOF.patch ==== libgexiv2 ==== - Package sub-package python3-gexiv2 as noarch. ==== libglvnd ==== Version update (1.6.0 -> 1.7.0) - Update to 1.7.0: * meson.build: error out on unsupported OSes * Update bin/symbols-check.py from mesa/mesa@9d42e31b * EGL/libeglcurrent: fix crash on library unload * HGL: add Haiku libGL.so implementation based on EGL * symbols-check: Add Haiku platform symbols * tests/egl: Fix LIBRARY_PATH on Haiku ==== libkdcraw ==== Version update (23.08.1 -> 23.08.2) - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== libkexiv2 ==== Version update (23.08.1 -> 23.08.2) - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== libnvme ==== Subpackages: libnvme-mi1 libnvme1 - Add missing jsc# tracking references to changelog ==== libtirpc ==== Version update (1.3.3 -> 1.3.4) Subpackages: libtirpc-netconfig libtirpc3 - update to 1.3.4 (bsc#1199467) * binddynport.c honor ip_local_reserved_ports * gss-api: expose gss major/minor error in authgss_refresh() * rpcb_clnt.c: Eliminate double frees in delete_cache() * rpcb_clnt.c: memory leak in destroy_addr * portmapper: allow TCP-only portmapper * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep * clnt_raw.c: fix a possible null pointer dereference * bindresvport.c: fix a potential resource leakage ==== libyui ==== Version update (4.6.0 -> 4.6.1) - Qt Pkg: Show patterns order column if environment variable Y2_SHOW_PATTERNS_ORDER is set - Qt Pkg: Show invisible patterns if environment variable SHOW_INVISIBLE_PATTERNS is set - Qt Pkg: Fixed pattern categories order: Use first, not last pattern (bsc#1216093) https://github.com/libyui/libyui/pull/107 - 4.6.1 ==== libyui-ncurses ==== Version update (4.6.0 -> 4.6.1) - Qt Pkg: Show patterns order column if environment variable Y2_SHOW_PATTERNS_ORDER is set - Qt Pkg: Show invisible patterns if environment variable SHOW_INVISIBLE_PATTERNS is set - Qt Pkg: Fixed pattern categories order: Use first, not last pattern (bsc#1216093) https://github.com/libyui/libyui/pull/107 - 4.6.1 ==== libyui-ncurses-pkg ==== Version update (4.6.0 -> 4.6.1) - Qt Pkg: Show patterns order column if environment variable Y2_SHOW_PATTERNS_ORDER is set - Qt Pkg: Show invisible patterns if environment variable SHOW_INVISIBLE_PATTERNS is set - Qt Pkg: Fixed pattern categories order: Use first, not last pattern (bsc#1216093) https://github.com/libyui/libyui/pull/107 - 4.6.1 ==== libyui-qt ==== Version update (4.6.0 -> 4.6.1) - Qt Pkg: Show patterns order column if environment variable Y2_SHOW_PATTERNS_ORDER is set - Qt Pkg: Show invisible patterns if environment variable SHOW_INVISIBLE_PATTERNS is set - Qt Pkg: Fixed pattern categories order: Use first, not last pattern (bsc#1216093) https://github.com/libyui/libyui/pull/107 - 4.6.1 ==== libyui-qt-graph ==== Version update (4.6.0 -> 4.6.1) - Qt Pkg: Show patterns order column if environment variable Y2_SHOW_PATTERNS_ORDER is set - Qt Pkg: Show invisible patterns if environment variable SHOW_INVISIBLE_PATTERNS is set - Qt Pkg: Fixed pattern categories order: Use first, not last pattern (bsc#1216093) https://github.com/libyui/libyui/pull/107 - 4.6.1 ==== libyui-qt-pkg ==== Version update (4.6.0 -> 4.6.1) - Qt Pkg: Show patterns order column if environment variable Y2_SHOW_PATTERNS_ORDER is set - Qt Pkg: Show invisible patterns if environment variable SHOW_INVISIBLE_PATTERNS is set - Qt Pkg: Fixed pattern categories order: Use first, not last pattern (bsc#1216093) https://github.com/libyui/libyui/pull/107 - 4.6.1 ==== libzypp ==== Version update (17.31.20 -> 17.31.22) - Preliminary disable 'rpm --runposttrans' usage for chrooted systems (bsc#1216091) This limits the %transfiletrigger(postun|in) support in the default installer if --root is used (as described in bsc#1041742). The chrooted execution of the scripts in 'rpm --runposttrans' broke in rpm-4.18. It's expected to be fixed in rpm-4.19. Then we'll enable the feature again. - fix comment typo on zypp.conf (boo#1215979) - version 17.31.22 (22) - Attempt to delay %transfiletrigger(postun|in) execution if rpm supports it (bsc#1041742) Decide during installation whether rpm is capable of delayed %posttrans %transfiletrigger(postun|in) execution or whether we can just handle the packages %posttrans. On TW a delayed %transfiletrigger handling is possible since rpm-4.17. - Make sure the old target is deleted before a new one is created (bsc#1203760) - version 17.31.21 (22) ==== malcontent ==== Version update (0.10.4 -> 0.11.1) Subpackages: libmalcontent-0-0 typelib-1_0-Malcontent-0 - Update to version 0.11.1: + Bugs fixed: build: Switch to Mesonâs gnome.post_install function + Updated translations. - Changes from version 0.11.0: + libmalcontent-ui, and the malcontent-control application, now use libappstream rather than appstream-glib. + libmalcontent-ui, and the malcontent-control application, now use GTK 4 and libadwaita rather than GTK+ 3. + As a result of these changes, the pkg-config name has been bumped to libmalcontent-ui-1, and the gobject-introspection name to MalcontentUi-1. + Improve keyboard navigation of the malcontent-control application. + Updated translations. - Drop pkgconfig(gtk+-3.0) BuildRequires, and add desktop-file-utils, pkgconfig(gtk4) and pkgconfig(libadwaita-1) following upstream changes. - Rename libmalcontent-ui-0-0, typelib-1_0-MalcontentUi-0 and typelib-1_0-MalcontentUi-0 to libmalcontent-ui-1-1, typelib-1_0-MalcontentUi-1 and typelib-1_0-MalcontentUi-1 following upstream soname changes. ==== microos-tools ==== Version update (2.21+git0 -> 2.21+git5) - Update to version 2.21+git5: * 98selinux-microos: Set mount propagation properly * 98selinux-microos: Convert tabs to spaces * 98selinux-microos: Don't include setenforce unnecessarily * Add spec file * systemd-proxy-env: fix typos in setup-systemd-proxy-env - Use the .spec file from the repo ==== mobipocket ==== Version update (23.08.1 -> 23.08.2) - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== mutter ==== - Drop mutter-crash-meta_context_terminate.patch: Closed upstream via https://gitlab.gnome.org/GNOME/mutter/-/merge_requests/2609 ==== nvme-cli ==== Subpackages: nvme-cli-bash-completion - Add missing jsc# and bsc# tracking entries in change log. ==== partitionmanager ==== Version update (23.08.1 -> 23.08.2) - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== patterns-microos ==== Subpackages: patterns-microos-alt_onlyDVD patterns-microos-apparmor patterns-microos-base patterns-microos-base-microdnf patterns-microos-base-packagekit patterns-microos-base-zypper patterns-microos-basesystem patterns-microos-cloud patterns-microos-cockpit patterns-microos-defaults patterns-microos-desktop-common patterns-microos-desktop-gnome patterns-microos-desktop-kde patterns-microos-hardware patterns-microos-ima_evm patterns-microos-onlyDVD patterns-microos-ra_agent patterns-microos-ra_verifier patterns-microos-selinux patterns-microos-sssd_ldap - Also only require sdboot* on architectures where systemd-boot exists. ==== pipewire ==== Version update (0.3.80 -> 0.3.81) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-jack pipewire-libjack-0_3 pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Add patches from upstream that fix pro-audio not producing any sound in 0.3.81: * 0001-alsa-add-api.alsa.auto-link-option.patch * 0002-acp-fix-compilation.patch * 0003-acp-only-join-and-link-when-1-capture-and-1-playback.patch * 0004-acp-only-disable-tsched-when-linking.patch - Add patch from upstream that fixes issues when PCM is stopped, which includes fixing sound in qemu: * 0001-alsa-dont-check-early-wakeup-when-PCM-stopped.patch - Pipewire now requires vulkan 1.3, so we have to disable vulkan support if this requirement is not fulfilled in order to build correctly in Leap. - Update to version 0.3.81: * Highlights - jackdbus support is now enabled by default. - IRQ based scheduling in ALSA was improved and enabled by default for Pro-Audio profile. It will also link the pcms together to get lower latency. This now matches what JACK does and gives equal latency to PipeWire for Pro-Audio profiles. - Support both old and new versions of webrtc-audio-processing to make the transition easier. - Forced quantum changes by nodes or metadata will now also force a suspend and resume of the graph, like the rate changes to make sure all nodes adapt to the new quantum. This is important for Pro-Audio nodes that need to reconfigure the hardware to a new period in IRQ-based scheduling. - Fix a regression in regex parsing. - Many bugfixes and improvements. * PipeWire - jackdbus is by default enabled now. The idea is that when jackdbus is installed, the real libjack.so is in the path and we can become a real JACK client. - Forces quantum changes by nodes or metadata will now also force a suspend and resume in the graph, like the rate changes to make sure all nodes adapt to the new quantum. This is important for Pro-Audio nodes that need to reconfigure the hardware to a new period. - The stream now has an EARLY_PROCESS option that can be used to implement custom buffer fill levels. - Fix a regression in regex parsing. - Fix a bug in position reporting in the driver node. - Destroying a link will now recalculate the graph correctly. - Fix the rate comparison for finding the best rate in the graph. - Use malloc_trim() when available to release memory. * Tools - pw-cat now supports DFF DSD files. - pw-cli avoid some NULL derefs in some cases. * Modules - The RAOP sink has seen some cleanups and improvements. It will now ask for feedback every 2 seconds to keep some devices alive. - A bug in filter-chain was fixed where it would fail to apply the gain when when mixing just one source. - The filter-chain can now pass the stream volume to a control in the filter-chain graph. - Improve volume handling in RAOP sink. * Pulse-server - Some cleanup in the pending_stream handling. - Fix a regression in the event emission code where it failed to emit a changed event when a node was linked. - Lower the realtime priority of pulseaudio clients. - Set pulse.module.id on the echo-cancel streams. * SPA - Support both old and new versions of webrtc-audio-processing to make the transition easier. - The ALSA driver now does the synch of all followers directly from the wakeup event. This results in more stable rate matching. - IRQ based scheduling in ALSA was improved and enabled by default for Pro-Audio profile. It will also link the pcms together to get lower latency. This now matches what JACK does and gives equal latency to PipeWire for Pro-Audio profiles. - GNU/Hurd support was added. - Some improvements to passthrough handling. * Bluetooth - Improvements to the codec handling when PipeWire is used as Audio Gateway. - Adapt to new Bluez API for BAP devices. * JACK - When the jack library is set in the default library path, avoid using LD_LIBRARY_PATH because this can cause confusion. - Handle clearing the latency on a port. - jack_property now always manages to actually change the metadata because it waits for a roundtrip before exiting. ==== python-pycurl ==== - Skip test_multi_socket_select (gh#pycurl/pycurl#819), test_multi_socket_action (gh#pycurl/pycurl#729), and test_request_with_verifypeer (gh#pycurl/pycurl#822). ==== python-sniffio ==== - Clean up the SPEC file ==== python-urllib3 ==== - Update Buildrequires to upstream list. ==== samba ==== Version update (4.19.0+git.306.19d2e214c58 -> 4.19.1+git.312.c912b3d2ef6) Subpackages: libsamba-policy0-python3 samba-ad-dc-libs samba-client samba-client-libs samba-libs samba-libs-python3 samba-python3 - CVE-2023-4091: samba: Client can truncate file with read-only permissions; (bsc#1215904); (bso#15439). - CVE-2023-42669: samba: rpcecho, enabled and running in AD DC, allows blocking sleep on request; (bso#1215905); (bso#15474). - CVE-2023-42670: samba: The procedure number is out of range when starting Active Directory Users and Computers; (bsc#1215906); (bso#15473). - CVE-2023-3961: samba: Unsanitized client pipe name passed to local_np_connect(); (bsc#1215907); (bso#15422). - CVE-2023-4154: samba: dirsync allows SYSTEM access with only "GUID_DRS_GET_CHANGES" right, not "GUID_DRS_GET_ALL_CHANGES; (bsc#1215908); (bso#15424). ==== selinux-policy ==== Version update (20230728 -> 20231012) Subpackages: selinux-policy-targeted - Update to version 20231012: * Allow sssd_t watch permission to net_conf_t dirs (bsc#1216052) * Revert fix for bsc#1205770 since it causes a regression for bsc#1214887 ==== signon-kwallet-extension ==== Version update (23.08.1 -> 23.08.2) - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== spectacle ==== Version update (23.08.1 -> 23.08.2) - Update to 23.08.2 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.08.2/ - No code change since 23.08.1 ==== udisks2 ==== Subpackages: libudisks2-0 libudisks2-0_btrfs udisks2-bash-completion - fix mount failure on ntfs formatted usb disks (bsc#1216055) * add: 0001-doc-Clarify-the-Filesystem.Size-property-presence.patch 0001-tests-Mark-UDF-fstab-filesystem-tests-as-unstable.patch 0001-udiskslinuxfilesystem-Refactor-internal-whitelists.patch 0001-tests-Add-offline-and-online-filesystem-grow-tests.patch 0001-udiskslinuxfilesystem-Force-native-tools-for-mounted.patch ==== wireplumber ==== Version update (0.4.14 -> 0.4.15) Subpackages: libwireplumber-0_4-0 wireplumber-audio - Update to version 0.4.15: * Additions: - A new "DSP policy" module has been added; its purpose is to automatically load a filter-chain when a certain hardware device is present, so that audio always goes through this software DSP before reaching the device. This is mainly to support Apple M1/M2 devices, which require a software DSP to be always present - WpImplModule now supports loading module arguments directly from a SPA-JSON config file; this is mainly to support DSP configuration for Apple M1/M2 and will likely be reworked for 0.5 - Added support for automatically combining Bluetooth LE Audio device sets (e.g. pairs of earbuds) (!500) - Added command line options in wpctl to display device/node names and nicknames instead of descriptions - Added zsh completions file for wpctl - The device profile selection policy now respects the device.profile property if it is set on the device; this is useful to hand-pick a profile based on static configuration rules (alsa_monitor.rules) * Changes/Fixes: - Linking policy now sends an error to the client before destroying the node, if it determines that the node cannot be linked to any target; this fixes error reporting on the client side - Fixed a crash in suspend-node that could happen when destroying virtual sinks that were loaded from another process such as pw-loopback - Virtual machine default period size has been bumped to 1024 - Updated bluez5 default configuration, using bluez5.roles instead of bluez5.headset-roles now (!498) - Disabled Bluetooth autoconnect by default (!514) - Removed RestrictNamespaces option from the systemd services in order to allow libcamera to load sandboxed IPA modules - Fixed a JSON encoding bug with empty strings - Lua code can now parse strings without quotes from SPA-JSON - Added some missing \since annotations and made them show up in the generated gobject-introspection file, to help bindings generators - Add zsh-completion subpackage ==== xscreensaver ==== Version update (6.07 -> 6.08) Subpackages: xscreensaver-data xscreensaver-lang - update to 6.08: * fixes for other platforms ==== yast2-country ==== Version update (4.6.3 -> 5.0.1) Subpackages: yast2-country-data - use also kbd-model-map.xkb-generated (bsc#1211104) - sort the selection box of keyboard layouts alphabetically - 5.0.1 - 5.0.0 (#bsc1185510) ==== yast2-x11 ==== Version update (4.6.0 -> 5.0.1) - xkbctrl: use also kbd-model-map.xkb-generated (bsc#1211104) - 5.0.1 - 5.0.0 (#bsc1185510) ==== zypper ==== Version update (1.14.64 -> 1.14.66) Subpackages: zypper-log zypper-needs-restarting - Return 104 also if info suggests near matches (fixes #504) - Rephrase upgrade message for openSUSE Tumbleweed (bsc#1212422) - Fix typo (fixes #484) - version 1.14.66 - Fix some typos and spelling errors found by Lintian (fixes #501) - Prefer unaliased `grep` to avoid unexpected/wrong completions. (#503) - commit: Insert a headline to separate output of different rpm scripts (bsc#1041742) - Fix typo in changes file. - version 1.14.65