Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=3&version=Tumbleweed&build=20240306 https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&component=MicroOS&query_format=advanced&resolution=--- Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ImageMagick Mesa Mesa-drivers PackageKit atkmm1_6 checkmedia (6.2 -> 6.3) cifs-utils cockpit expat (2.6.0 -> 2.6.1) gdm gettext-runtime (0.21.1 -> 0.22.5) ghostscript gnome-themes-extra grub2 gstreamer (1.22.9 -> 1.24.0) gstreamer-plugins-bad (1.22.9 -> 1.24.0) gstreamer-plugins-base (1.22.9 -> 1.24.0) gstreamer-plugins-good (1.22.9 -> 1.24.0) gtk2-engines hwdata (0.379 -> 0.380) libcdio libgdata libostree (2023.7 -> 2024.4) libshout libstorage-ng (4.5.197 -> 4.5.200) mkfontscale (1.2.2 -> 1.2.3) mokutil (0.6.0 -> 0.7.0) openjpeg2 (2.5.0 -> 2.5.2) opus (1.4 -> 1.5.1) orc (0.4.37 -> 0.4.38) postfix (3.8.5 -> 3.8.6) publicsuffix (20240212 -> 20240303) qemu raptor shim startup-notification telepathy-glib texlive transactional-update (4.5.0 -> 4.6.0) vlc wireplumber (0.4.17 -> 0.4.90) xauth (1.1.2 -> 1.1.3) xmessage (1.0.6 -> 1.0.7) yast2-storage-ng (5.0.6 -> 5.0.7) === Details === ==== ImageMagick ==== Subpackages: libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - We can not replace a symlink with a directory on the directly Unregister the whole group manually in %pre with update-alternatives. (boo#1220818) Restore Requires(pre) on update-alternatives for the mean time. ==== Mesa ==== Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - Enable zink driver build on aarch64, this is needed for Qualcomm Adreno a7xx to use hw accelerated GL. - buildrequire llvm17 also on sle15-sp5/Leap15.5 ==== Mesa-drivers ==== Subpackages: Mesa-dri Mesa-gallium Mesa-libva - Enable zink driver build on aarch64, this is needed for Qualcomm Adreno a7xx to use hw accelerated GL. - buildrequire llvm17 also on sle15-sp5/Leap15.5 ==== PackageKit ==== Subpackages: PackageKit-backend-dnf PackageKit-backend-zypp PackageKit-gstreamer-plugin PackageKit-gtk3-module libpackagekit-glib2-18 typelib-1_0-PackageKitGlib-1_0 - Drop baselibs.conf: the -32bit packages are no longer needed and have not been part of Tumbleweed for a while already (build for i586 only enabled in LegacyX86). ==== atkmm1_6 ==== - Drop baselibs.conf: the -32bit packages are no longer needed and have not been part of Tumbleweed for a while already (build for i586 only enabled in LegacyX86). ==== checkmedia ==== Version update (6.2 -> 6.3) Subpackages: libmediacheck6 - merge gh#openSUSE/checkmedia#18 - tagmedia: fix size detection for block devices (bsc#1220972) - 6.3 ==== cifs-utils ==== - Use %patch -P N instead of deprecated %patchN. ==== cockpit ==== Subpackages: cockpit-bridge cockpit-packagekit cockpit-system - cockpit.pam: respect /etc/cockpit/disallowed-users This means by default root cannot login with password to cockpit (bsc#1216080) - Remove SELinux file context for /usr/bin/cockpit-bridge, this is already defined in the main selinux-policy package (bsc#1220385). Modified selinux_libdir.patch - Use %patch -P N instead of deprecated %patchN. ==== expat ==== Version update (2.6.0 -> 2.6.1) Subpackages: libexpat1 - update to 2.6.1: * Expose billion laughs API with XML_DTD defined and XML_GE undefined, regression from 2.6.0 * Make tests independent of CPU speed, and thus more robust - drop libxml2-fix-xmlwf.1-handling.patch, upstream ==== gdm ==== Subpackages: gdm-schema gdmflexiserver libgdm1 typelib-1_0-Gdm-1_0 - Update gdm-xvnc-start-session-failed.patch: Following the upstream final solution(bsc#1219205 glgo#GNOME/gdm#909). ==== gettext-runtime ==== Version update (0.21.1 -> 0.22.5) Subpackages: libtextstyle0 - Use %patch -P N instead of deprecated %patchN. - update to 0.22.5: * xgettext's processing of Vala files with printf method invocations has been corrected (regression in 0.22) - Update to version 0.22.4 * Bug fixes: - AM_GNU_GETTEXT now recognizes a statically built libintl on macOS and AIX. - Build fixes on AIX - Update to version 0.22.3 * Portability: - The libintl library now works on macOS 14. (Older versions of libintl crash on macOS 14, due to an incompatible change in macOS.) - Update to version 0.22.2 * No information available upstream - Update to version 0.22.1 * Bug fixes: - The libintl shared library now exports again some symbols that were accidentally missing. - xgettext's processing of large Perl files may have led to errors. - "xgettext --join-existing" could encounter errors. * Portability: - Building on Android is now supported. - Update to version 0.22.0 * PO file format: - When a #: line contains references to file names that contain spaces, these file names are surrounded by Unicode characters U+2068 and U+2069. This makes it possible to parse such references correctly. * Improvements for maintainers: - The AM_GNU_GETTEXT macro now defines two variables localedir_c and localedir_c_make, that can be used in C code or in Makefiles, respectively, for representing the value of the --localedir configure option. * Programming languages support: - C, C++: + xgettext now supports gettext-like functions that take wide strings (of type 'const wchar_t *', 'const char16_t *', or 'const char32_t *') as arguments. + xgettext now recognizes numbers with digit separators, as defined by ISO C 23, as tokens. + xgettext and msgfmt now recognize the format string directive %b (for binary integer output, as defined by ISO C 23) in format strings. + xgettext and msgfmt now recognize the argument size specifiers w8, w16, w32, w64, wf8, wf16, wf32, wf64 (as defined by ISO C 23) in format strings. + xgettext and msgfmt now recognize C++ format strings, as defined by ISO C++ 20. They are marked as 'c++-format' in POT and PO files. A new example has been added, 'hello-c++20', that illustrates how to use these format strings with gettext. - Java: + The build system and tools now also support Java versions newer than Java 11. This is known to work up to Java 20, at least. On the other hand, support for old versions of Java (Java 1.5 and GCJ) has been dropped. + Tcl: xgettext now supports the \x, \u, and \U escapes as defined in Tcl 8.6. * Portability: - On systems with musl libc, the *gettext() functions in libc now work with MO files generated from PO files with an encoding other than UTF-8. To this effect, the msgfmt program now converts the messages to UTF-8 encoding before storing them in a MO file. You can prevent this byusing the msgfmt - -no-convert option. - On systems with musl libc, the *gettext() functions in libc now work with MO files generated from PO files with ISO C 99 <inttypes.h> format string directive macros. To this effect, the msgfmt program pre-expands strings with such macros. You can prevent this by using the msgfmt --no-redundancy option. * xgettext: - The xgettext option '--sorted-output' is now deprecated. - xgettext input files of type PO that are not all ASCII and not UTF-8 encoded are now handled correctly. * The base Unicode standard is now updated to 15.0.0. * Emacs PO mode: - Fix an incompatibility with Emacs version 29 or newer. - Rebase patches: * gettext-dont-test-gnulib.patch * 0001-msgcat-Add-feature-to-use-the-newest-po-file.patch * 0002-msgcat-Merge-headers-when-use-first.patch - Drop patch which isn't required anymore since newer java versions are already supported by upstream: * gettext-0.21-jdk17.patch ==== ghostscript ==== Subpackages: ghostscript-x11 - Use %patch -P N instead of deprecated %patchN. - Allow to disable apparmor support (ALP supports only SELinux) ==== gnome-themes-extra ==== Subpackages: gnome-themes-accessibility gnome-themes-accessibility-gtk2 gtk2-metatheme-adwaita gtk2-theming-engine-adwaita gtk3-metatheme-adwaita metatheme-adwaita-common - Drop baselibs.conf: the -32bit packages are no longer needed and have not been part of Tumbleweed for a while already (build for i586 only enabled in LegacyX86). ==== grub2 ==== Subpackages: grub2-arm64-efi grub2-snapper-plugin grub2-systemd-sleep-plugin - Update grub2-change-bash-completion-dir.patch to support bash completion correctly (bsc#1218875) - Drop grub2-bash-completion-2.12.patch since the have() function is not used in those scripts anymore - disable the file 20_memtest86+ * added a deprecation note in the header - Add patch grub2-bash-completion-2.12.patch The shell function have() had become deprecated with 2.11 and had been removed from 2.12 which is now providing the shell function _comp_have_command() (boo#1220626) ==== gstreamer ==== Version update (1.22.9 -> 1.24.0) Subpackages: libgstreamer-1_0-0 typelib-1_0-Gst-1_0 - Update to version 1.24.0: * Highlights - New Discourse forum and Matrix chat space - New Analytics and Machine Learning abstractions and elements - Playbin3 and decodebin3 are now stable and the default in gst-play-1.0, GstPlay/GstPlayer - The va plugin is now preferred over gst-vaapi and has higher ranks - GstMeta serialization/deserialization and other GstMeta improvements - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data - New unixfd plugin for efficient 1:N inter-process communication on Linux - cudaipc source and sink for zero-copy CUDA memory sharing between processes - New intersink and intersrc elements for 1:N pipeline decoupling within the same process - Qt5 + Qt6 QML integration improvements including qml6glsrc, qml6glmixer, qml6gloverlay, and qml6d3d11sink elements - DRM Modifier Support for dmabufs on Linux - OpenGL, Vulkan and CUDA integration enhancements - Vulkan H.264 and H.265 video decoders - RTP stack improvements including new RFC7273 modes and more correct header extension handling in depayloaders - WebRTC improvements such as support for ICE consent freshness, and a new webrtcsrc element to complement webrtcsink - WebRTC signallers and webrtcsink implementations for LiveKit and AWS Kinesis Video Streams - WHIP server source and client sink, and a WHEP source - Precision Time Protocol (PTP) clock support for Windows and other additions - Low-Latency HLS (LL-HLS) support and many other HLS and DASH enhancements - New W3C Media Source Extensions library - Countless closed caption handling improvements including new cea608mux and cea608tocea708 elements - Translation support for awstranscriber - Bayer 10/12/14/16-bit depth support - MPEG-TS support for asynchronous KLV demuxing and segment seeking, plus various new muxer features - Capture source and sink for AJA capture and playout cards - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder - New uvcsink element for exporting streams as UVC camera - DirectWrite text rendering plugin for windows - Direct3D12-based video decoding, conversion, composition, and rendering - AMD Advanced Media Framework AV1 + H.265 video encoders with 10-bit and HDR support - AVX/AVX2 support and NEON support on macOS on Apple ARM64 CPUs via new liborc - GStreamer C# bindings have been updated - Rust bindings improvements and many new and improved Rust plugins - Rust plugins now shipped in packages for all major platforms including Android and iOS - Lots of new plugins, features, performance improvements and bug fixes * For more detailed information on this update, please see https://gstreamer.freedesktop.org/releases/1.24/ - Rebase patches: * gstreamer-pie.patch * gstreamer-rpm-prov.patch - Remove patch reduce-required-meson.patch since meson 1.1 is really required now. ==== gstreamer-plugins-bad ==== Version update (1.22.9 -> 1.24.0) Subpackages: libgstadaptivedemux-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstcuda-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstphotography-1_0-0 libgstplay-1_0-0 libgstplayer-1_0-0 libgstsctp-1_0-0 libgsttranscoder-1_0-0 libgsturidownloader-1_0-0 libgstva-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 libgstwebrtcnice-1_0-0 - baselibs.conf: Produce -32bit biarch packages of libgstanalytics-1_0-0 and libgstmse-1_0-0: dependencies of gstreamer-plugins-bad-32bit. - Add new gstreamer plugins to baselibs.conf - Update to version 1.24.0: * Highlights - New Discourse forum and Matrix chat space - New Analytics and Machine Learning abstractions and elements - Playbin3 and decodebin3 are now stable and the default in gst-play-1.0, GstPlay/GstPlayer - The va plugin is now preferred over gst-vaapi and has higher ranks - GstMeta serialization/deserialization and other GstMeta improvements - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data - New unixfd plugin for efficient 1:N inter-process communication on Linux - cudaipc source and sink for zero-copy CUDA memory sharing between processes - New intersink and intersrc elements for 1:N pipeline decoupling within the same process - Qt5 + Qt6 QML integration improvements including qml6glsrc, qml6glmixer, qml6gloverlay, and qml6d3d11sink elements - DRM Modifier Support for dmabufs on Linux - OpenGL, Vulkan and CUDA integration enhancements - Vulkan H.264 and H.265 video decoders - RTP stack improvements including new RFC7273 modes and more correct header extension handling in depayloaders - WebRTC improvements such as support for ICE consent freshness, and a new webrtcsrc element to complement webrtcsink - WebRTC signallers and webrtcsink implementations for LiveKit and AWS Kinesis Video Streams - WHIP server source and client sink, and a WHEP source - Precision Time Protocol (PTP) clock support for Windows and other additions - Low-Latency HLS (LL-HLS) support and many other HLS and DASH enhancements - New W3C Media Source Extensions library - Countless closed caption handling improvements including new cea608mux and cea608tocea708 elements - Translation support for awstranscriber - Bayer 10/12/14/16-bit depth support - MPEG-TS support for asynchronous KLV demuxing and segment seeking, plus various new muxer features - Capture source and sink for AJA capture and playout cards - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder - New uvcsink element for exporting streams as UVC camera - DirectWrite text rendering plugin for windows - Direct3D12-based video decoding, conversion, composition, and rendering - AMD Advanced Media Framework AV1 + H.265 video encoders with 10-bit and HDR support - AVX/AVX2 support and NEON support on macOS on Apple ARM64 CPUs via new liborc - GStreamer C# bindings have been updated - Rust bindings improvements and many new and improved Rust plugins - Rust plugins now shipped in packages for all major platforms including Android and iOS - Lots of new plugins, features, performance improvements and bug fixes * For more detailed information on this update, please see https://gstreamer.freedesktop.org/releases/1.24/ - Remove patch reduce-required-meson.patch since meson 1.1 is really required now. - Remove patch which is already included in this version: * 0001-Update-code-for-webrtc-audio-processing-1.patch - Disable webrtc audio processing dependency on s390 s390x ppc64: webrtc-autio-processing is excluded on these architectures. ==== gstreamer-plugins-base ==== Version update (1.22.9 -> 1.24.0) Subpackages: libgstallocators-1_0-0 libgstapp-1_0-0 libgstaudio-1_0-0 libgstfft-1_0-0 libgstgl-1_0-0 libgstpbutils-1_0-0 libgstriff-1_0-0 libgstrtp-1_0-0 libgstrtsp-1_0-0 libgstsdp-1_0-0 libgsttag-1_0-0 libgstvideo-1_0-0 typelib-1_0-GstTag-1_0 - Update to version 1.24.0: * Highlights - New Discourse forum and Matrix chat space - New Analytics and Machine Learning abstractions and elements - Playbin3 and decodebin3 are now stable and the default in gst-play-1.0, GstPlay/GstPlayer - The va plugin is now preferred over gst-vaapi and has higher ranks - GstMeta serialization/deserialization and other GstMeta improvements - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data - New unixfd plugin for efficient 1:N inter-process communication on Linux - cudaipc source and sink for zero-copy CUDA memory sharing between processes - New intersink and intersrc elements for 1:N pipeline decoupling within the same process - Qt5 + Qt6 QML integration improvements including qml6glsrc, qml6glmixer, qml6gloverlay, and qml6d3d11sink elements - DRM Modifier Support for dmabufs on Linux - OpenGL, Vulkan and CUDA integration enhancements - Vulkan H.264 and H.265 video decoders - RTP stack improvements including new RFC7273 modes and more correct header extension handling in depayloaders - WebRTC improvements such as support for ICE consent freshness, and a new webrtcsrc element to complement webrtcsink - WebRTC signallers and webrtcsink implementations for LiveKit and AWS Kinesis Video Streams - WHIP server source and client sink, and a WHEP source - Precision Time Protocol (PTP) clock support for Windows and other additions - Low-Latency HLS (LL-HLS) support and many other HLS and DASH enhancements - New W3C Media Source Extensions library - Countless closed caption handling improvements including new cea608mux and cea608tocea708 elements - Translation support for awstranscriber - Bayer 10/12/14/16-bit depth support - MPEG-TS support for asynchronous KLV demuxing and segment seeking, plus various new muxer features - Capture source and sink for AJA capture and playout cards - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder - New uvcsink element for exporting streams as UVC camera - DirectWrite text rendering plugin for windows - Direct3D12-based video decoding, conversion, composition, and rendering - AMD Advanced Media Framework AV1 + H.265 video encoders with 10-bit and HDR support - AVX/AVX2 support and NEON support on macOS on Apple ARM64 CPUs via new liborc - GStreamer C# bindings have been updated - Rust bindings improvements and many new and improved Rust plugins - Rust plugins now shipped in packages for all major platforms including Android and iOS - Lots of new plugins, features, performance improvements and bug fixes * For more detailed information on this update, please see https://gstreamer.freedesktop.org/releases/1.24/ - Remove patch reduce-required-meson.patch since meson 1.1 is really required now. - Add gst-plugins-base-audiobasesink-gap.patch: Revert a gap change causing EOS, affecting strawberry playback causing playback to stop when using mute or fading features. Upstream issue: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303 ==== gstreamer-plugins-good ==== Version update (1.22.9 -> 1.24.0) Subpackages: gstreamer-plugins-good-gtk - Update to version 1.24.0: * Highlights - New Discourse forum and Matrix chat space - New Analytics and Machine Learning abstractions and elements - Playbin3 and decodebin3 are now stable and the default in gst-play-1.0, GstPlay/GstPlayer - The va plugin is now preferred over gst-vaapi and has higher ranks - GstMeta serialization/deserialization and other GstMeta improvements - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data - New unixfd plugin for efficient 1:N inter-process communication on Linux - cudaipc source and sink for zero-copy CUDA memory sharing between processes - New intersink and intersrc elements for 1:N pipeline decoupling within the same process - Qt5 + Qt6 QML integration improvements including qml6glsrc, qml6glmixer, qml6gloverlay, and qml6d3d11sink elements - DRM Modifier Support for dmabufs on Linux - OpenGL, Vulkan and CUDA integration enhancements - Vulkan H.264 and H.265 video decoders - RTP stack improvements including new RFC7273 modes and more correct header extension handling in depayloaders - WebRTC improvements such as support for ICE consent freshness, and a new webrtcsrc element to complement webrtcsink - WebRTC signallers and webrtcsink implementations for LiveKit and AWS Kinesis Video Streams - WHIP server source and client sink, and a WHEP source - Precision Time Protocol (PTP) clock support for Windows and other additions - Low-Latency HLS (LL-HLS) support and many other HLS and DASH enhancements - New W3C Media Source Extensions library - Countless closed caption handling improvements including new cea608mux and cea608tocea708 elements - Translation support for awstranscriber - Bayer 10/12/14/16-bit depth support - MPEG-TS support for asynchronous KLV demuxing and segment seeking, plus various new muxer features - Capture source and sink for AJA capture and playout cards - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder - New uvcsink element for exporting streams as UVC camera - DirectWrite text rendering plugin for windows - Direct3D12-based video decoding, conversion, composition, and rendering - AMD Advanced Media Framework AV1 + H.265 video encoders with 10-bit and HDR support - AVX/AVX2 support and NEON support on macOS on Apple ARM64 CPUs via new liborc - GStreamer C# bindings have been updated - Rust bindings improvements and many new and improved Rust plugins - Rust plugins now shipped in packages for all major platforms including Android and iOS - Lots of new plugins, features, performance improvements and bug fixes * For more detailed information on this update, please see https://gstreamer.freedesktop.org/releases/1.24/ - Remove patch reduce-required-meson.patch since meson 1.1 is really required now. ==== gtk2-engines ==== - Drop baselibs.conf: the -32bit packages are no longer needed and have not been part of Tumbleweed for a while already (build for i586 only enabled in LegacyX86). ==== hwdata ==== Version update (0.379 -> 0.380) - update to 0.380: * Update pci, usb and vendor ids ==== libcdio ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN ==== libgdata ==== - Drop baselibs.conf: the -32bit packages are no longer needed and have not been part of Tumbleweed for a while already (build for i586 only enabled in LegacyX86). - Add explicit pkgconfig(gtk+-3.0) BuildRequires: meson checks for it and we just relied on it being brought in indirectly. ==== libostree ==== Version update (2023.7 -> 2024.4) Subpackages: libostree-1-1 - Update to version 2024.4: + Support for a new root.transient flag that makes / an overlayfs that is persistent across reboots but not across upgrades + Expand ostree admin pin command + root.transient switches to tmpfs + Composefs recommended to be enabled via ostree-prepare-root.conf and not the ex-integrity.composefs + Finalize "deployment finalization locking" feature + Add ostree admin post-copy + Speed-up through reflinks + improvements to system root and bootloader + Bug fixes, documentation updates, and developer visible fixes ==== libshout ==== - Fix build errors with gcc14 (bsc#1220975): 0001-icy-include-stdlib-h-and-stdio-h.patch 0002-legacy-include-stdlib-h.patch ==== libstorage-ng ==== Version update (4.5.197 -> 4.5.200) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - Translated using Weblate (French) (bsc#1149754) - 4.5.200 - Translated using Weblate (Chinese (Taiwan) (zh_TW)) (bsc#1149754) - 4.5.199 - Translated using Weblate (Italian) (bsc#1149754) - Translated using Weblate (Chinese (China) (zh_CN)) (bsc#1149754) - 4.5.198 ==== mkfontscale ==== Version update (1.2.2 -> 1.2.3) - Update to version 1.2.3 * configure: Use pkg-config to find zlib * configure: Use AC_SYS_LARGEFILE to enable large file support * gitlab CI: stop requiring Signed-off-by in commits * Remove "All rights reserved" from Oracle copyright notices * Convert to X.Org standard code style * doDirectory: add missing check for malloc() returning NULL * mkfontscale.c: handle -Wshadow warnings from gcc * ident.c: clear -Wdeclaration-after-statement warning * Variable scope reductions as recommended by cppcheck * Resolve some -Wsign-conversion warnings from clang * Fix -Wimplicit-float-conversion warnings from clang * configure: Move check for zlib into its own section * Address a UBSan warning about int left shift overflow ==== mokutil ==== Version update (0.6.0 -> 0.7.0) - Update to 0.7.0 + 82694cb Show usage instead of aborting on bad flags + 04791c2 mokutil bugfix: del unused opt "-s" + d978c18 Fix leak of list in delete_data_from_req_var() + e498f64 Fix leak of fd in mok_get_variable() + 7b6258a Show the key owner GUID + 51b5e55 Use PKG_PROG_PKG_CONFIG macro from pkg.m4 to detect pkg-config + 1aefcdb mokutil: handle the parsing error from "mok-variables" + 71140ef mokutil: Fix memory leak in export_db_keys + 0011d52 mokutil:check the result of malloc() is necessary + a0d8702 Fix inconsistency in skip messages + ae59d89 man: add "--trust-mok" and "--untrust-mok" + dd55c28 Avoid conflicting efi_char16_t type definitions + 8b6d116 fix: typo "accesss" -> "access" + f68a4f4 Do not exit with non zero status for version query + 5f49730 Check for efi variabales support after processing commands + 2d6c409 Return 0 after printing help messages + c64741d Add support for SSPPolicy, depricate --set-sbat-policy delete + 48e3d2a Fix tab alignment for help (set-fallback-verbosity/set-fallback-noreboot) + c361087 (HEAD -> master, tag: 0.7.0, origin/ssppolicy-v2-fix, origin/master, origin/HEAD) Rename "previous" revocations to "automatic" ==== openjpeg2 ==== Version update (2.5.0 -> 2.5.2) - Update to 2.5.2: * Make sure openjpeg.h includes opj_config.h #1514 - Update to 2.5.1: * CMake: drop support for cmake < 3.5 * Several bugfixes, including #1509 for CVE-2021-3575 (bsc#1187048) * Significant speed-up rate allocation by rate/distoratio ratio #1440 - Set devel-doc subpackage to noarch - Change cmake parameters (see c7bccf) ==== opus ==== Version update (1.4 -> 1.5.1) - Update to 1.5.1: * Significant improvement to packet loss robustness using Deep Redundancy (DRED) * Improved packet loss concealment through Deep PLC * Low-bitrate speech quality enhancement down to 6 kb/s wideband * Improved x86 (AVX2) and Arm (Neon) optimizations * Support for 4th and 5th order ambisonics ==== orc ==== Version update (0.4.37 -> 0.4.38) - Backport patch from SLE - Add relax-tests.patch to increase test timeouts to 2 minutes, also limit the max value for memcpy_speed.c test bsc#1130085 - Enable tests - version update to 0.4.38 0.4.38 ====== - x86: account for XSAVE when checking for AVX support, fixing usage on hardened linux kernels where AVX support has been disabled (L. E. Segovia) - neon: Use the real intrinsics for divf and sqrtf (L. E. Segovia) - orc.m4 for autotools is no longer shipped. If anyone still uses it they can copy it into their source tree (Tim-Philipp Müller) ==== postfix ==== Version update (3.8.5 -> 3.8.6) - update to 3.8.6 * Bugfix (defect introduced: Postfix 2.3, date 20051222): the Dovecot auth client did not reset the 'reason' from a previous Dovecot auth service response, before parsing the next Dovecot auth server response in the same SMTP session, resulting in a nonsensical "authentication failed" warning message. Reported by Stephan Bosch. * Bugfix (defect introduced: Postfix 3.1, date: 20151128): "postqueue -j" produced broken JSON when escaping a control character as \uXXXX. Found during code maintenance. * Cleanup: this fixes posttls-finger certificate match expectations for all TLS security levels, including warnings for levels that don't implement certificate matching. By Viktor Dukhovni. * Bugfix (defect introduced: Postfix 2.3): after prepending a header at the top of a message (with an access(5), header_checks(5) or Milter action), the Postfix Milter "delete header" or "update header" action was skipping the prepended header, instead of skipping the Postfix-generated Received: header. Problem report by Carlos Velasco. * Workaround: tlsmgr logfile spam. Reportedly, some OS lies under load: it says that a socket is readable, then it says that the socket has unread data, and then it says that read returns EOF, causing Postfix to spam the log with a warning message. * Bugfix (defect introduced: Postfix 3.4): the SMTP server's BDAT command handler could be tricked to read $message_size_limit bytes into memory. Found during code maintenance. * Safety: limit the total size of DNS lookup results to 100 records; drop the excess records, and log a warning. This limit is 20x larger than the number of server addresses that the Postfix SMTP client is willing to consider when delivering mail, and is far below the number of records that could cause a tail recursion crash in dns_rr_append() as reported by Toshifumi Sakaguchi. This fix also limits the number of DNS requests that a check_*_*_access restriction can make. * Performance, related to the previous problem: eliminate worst-case behavior where the queue manager could defer delivery to all destinations over a specific delivery transport, after only a single delivery agent crash. The scheduler now throttles deliveries to one destination, and allows other deliveries to keep making progress. - change to functioning mirror (http://cdn.postfix.johnriley.me/ has been dead for a while although it is still listed upstream) - make output of %setup less verbose by restoring -q option - %autosetup does not works with multiple -a. https://github.com/rpm-software-management/rpm/issues/1204 - Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN. ==== publicsuffix ==== Version update (20240212 -> 20240303) - Update to version 20240303: * add `*.my.canvasite.cn` and `*.my.canva.site` (#1739) * Add on.crisp.email (Crisp IM SAS) (#1904) * add `ngrok.pro` (#1895) * Add adaptable.app domain (#1824) * Add STACKIT free customer subdomains (#1785) * Add `modx.dev` (#1804) * Add `ewp.live` (EasyWP) (#1773) * Add convex.site (#1767) * Add `involve.me` user domains (#1731) * Add `replit.app` and `replit.dev` (#1679) * Add f5.si (#1664) * Add *.c.ts.net. (#1618) * Add `webflow.io` and `webflowtest.io` (#1722) * Add 3 Streak domains (#1720) * add myradweb.net and servername.us to Rad Web Hosting (#1760) ==== qemu ==== - Fix bsc#1220799. Amended commit: * [openSUSE]: Increase default phys bits to 42, if host supports that (bsc#1205978, bsc#1219977, bsc#1220799) ==== raptor ==== - Use %patch -P N instead of deprecated %patchN. ==== shim ==== - Use %autosetup macro. Allows to eliminate the usage of deprecated PatchN. ==== startup-notification ==== - Drop baselibs.conf: the -32bit packages are no longer needed and have not been part of Tumbleweed for a while already (build for i586 only enabled in LegacyX86). ==== telepathy-glib ==== Subpackages: libtelepathy-glib0 typelib-1_0-TelepathyGlib-0_12 - Drop baselibs.conf: the -32bit packages are no longer needed and have not been part of Tumbleweed for a while already (build for i586 only enabled in LegacyX86). ==== texlive ==== - Use %patch -P N instead of deprecated %patchN. ==== transactional-update ==== Version update (4.5.0 -> 4.6.0) Subpackages: dracut-transactional-update libtukit4 transactional-update-zypp-config tukit - Version 4.6.0 - tukit / t-u: Implement support for systemd soft-reboot, but needs package manager support (provided by zypp-boot-plugin on openSUSE) to determine which kind of reboot is required; the minimally required reboot method (soft-reboot, kexec, full reboot) will be used automatically if enabled (see tukit.conf). This deprecates the "kexec" reboot method in favor of automatic selection. - tukit: Determine D-Bus availability via system socket instead of brute force - tukit: Don't ignore return status of snapper - plugins can return an error code now where tukit has to fail [gh##118] / [poo#127169] - tukit: Remove BTRFS dependencies in snapper backend, user snapper for for everything directly. In theory this should support further file systems such as bcachefs if they follow the same layout (untested). - t-u: Add safety net before deleting overlays [boo#1217416] - t-u: Remove telemetry support, the required packages haven't been in the repository for quite some time as they were abandoned upstream. - doc: Document option to use names in BINDDIRS array - doc: Mention tukit.conf in t-u man page - doc: Link Reboot.hpp as an officially supported API on the main page - Code cleanup ==== vlc ==== Subpackages: libvlc5 libvlccore9 vlc-codec-gstreamer vlc-lang vlc-noX - Whitelist executable-stack for armv7 ==== wireplumber ==== Version update (0.4.17 -> 0.4.90) Subpackages: wireplumber-audio - Revert that last change. Obsoletes shouldn't be used for that. - Obsolete libwireplumber-0_4-0 from libwireplumber-0_5-0 - Add patch from upstream to fix a typo a lua script: * 0001-scripts-fix-typo-in-rescan-virtual-links.lua.patch - Update to version 0.4.90 (0.5.0 RC1) * Highlights: - The configuration system has been changed back to load files from the WirePlumber configuration directories, such as /etc/wireplumber and $XDG_CONFIG_HOME/wireplumber, unlike in the pre-releases. This was done because issues were observed with installations that use a different prefix for pipewire and wireplumber. If you had a wireplumber.conf file in /etc/pipewire or $XDG_CONFIG_HOME/pipewire, you should move it to /etc/wireplumber or $XDG_CONFIG_HOME/wireplumber respectively (!601) - The internal base directories lookup system now also respects the XDG_CONFIG_DIRS and XDG_DATA_DIRS environment variables, and their default values as per the XDG spec, so it is possible to install configuration files also in places like /etc/xdg/wireplumber and override system-wide data paths (!601) - wpctl now has a settings subcommand to show, change and delete settings at runtime. This comes with changes in the WpSettings system to validate settings using a schema that is defined in the configuration file. The schema is also exported on a metadata object, so it is available to any client that wants to expose WirePlumber settings (!599, !600) - The WpConf API has changed to not be a singleton and support opening arbitrary config files. The main config file now needs to be opened prior to creating a WpCore and passed to the core using a property. The core uses that without letting the underlying pw_context open and read the default client.conf. The core also closes the WpConf after all components are loaded, which means all the config loading is done early at startup. Finally, WpConf loads all sections lazily, keeping the underlying files memory mapped until it is closed and merging them on demand (!601, !606) - Remove patch that's already included: * 0001-wpctl-add-settings-subcomand-to-show_-delete-or-change.patch - Add patch from upstream to remove the "clear-persistent" sub-command and add a "settings" sub-command: * 0001-wpctl-add-settings-subcomand-to-show_-delete-or-change.patch - Update to version 0.4.82 (0.5.0 pre-release 2) * Highlights: - Bluetooth auto-switching is now implemented with a virtual source node. When an application links to it, the actual device switches to the HSP/HFP profile to provide the real audio stream. This is a more robust solution that works with more applications and is more user-friendly than the previous application whitelist approach - Added support for dynamic log level changes via the PipeWire settings metadata. Also added support for log level patterns in the configuration file - The "persistent" (i.e. stored) settings approach has changed to use two different metadata objects: sm-settings and persistent-sm-settings. Changes in the former are applied in the current session but not stored, while changes in the latter are stored and restored at startup. Some work was also done to expose a wpctl interface to read and change these settings, but more is underway - Several WirePlumber-specific node properties that used to be called target.* have been renamed to node.* to match the PipeWire convention of node.dont-reconnect. These are also now fully documented * Other changes: - Many documentation updates - Added support for SNAP container permissions - Fixed multiple issues related to restoring the Route parameter of devices, which includes volume state - Smart filters can now be targetted by specific streams directly when the filter.smart.targetable property is set - Ported the mechanism to override device profile priorities in the configuration, which is used to re-prioritize Bluetooth codecs - WpSettings is no longer a singleton class and there is a built-in component to preload an instance of it ==== xauth ==== Version update (1.1.2 -> 1.1.3) - Update to version 1.1.3 * config: Add missing AC_CONFIG_SRCDIR * Variable scope reductions, as suggested by cppcheck * Remove unnecessary casts from malloc() calls * Handle -Wempty-body warning for WRITES() macro * configure: Use AC_SYS_LARGEFILE to enable large file support * configure: raise minimum autoconf requirement to 2.70 * unifdef hpux * unifdef Lynx - adjusted xauth-tolerant-hostname-changes.diff ==== xmessage ==== Version update (1.0.6 -> 1.0.7) - Update to version 1.0.7 * Print which arguments were unknown before giving usage message * Add -version option * configure: Use AC_SYS_LARGEFILE to enable large file support ==== yast2-storage-ng ==== Version update (5.0.6 -> 5.0.7) - [Proposal] Apply mandatory SpaceMaker actions in all the affected disks (gh#yast/yast-storage-ng#1372). - [Proposal] Make it possible to specify that certain volumes should reuse given existing block devices. - 5.0.7