Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20200628 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ImageMagick (7.0.10.18 -> 7.0.10.21) Mesa (20.1.1 -> 20.1.2) Mesa-drivers (20.1.1 -> 20.1.2) curl (7.70.0 -> 7.71.0) gcc10 (10.1.1+git40 -> 10.1.1+git290) glibc hplip (3.19.12 -> 3.20.6) libzypp (17.23.7 -> 17.23.8) perl-libwww-perl (6.45 -> 6.46) pulseaudio python3 python3-base valgrind (3.15.0 -> 3.16.0) === Details === ==== ImageMagick ==== Version update (7.0.10.18 -> 7.0.10.21) Subpackages: ImageMagick-config-7-SUSE ImageMagick-extra libMagick++-7_Q16HDRI4 libMagickCore-7_Q16HDRI7 libMagickWand-7_Q16HDRI7 - version update to 7.0.10.21 * new image property, %N, only report the # of frames in an image sequence, just once rather than on a per frame basis * problems converting CMYK to RGB regression (reference https://github.com/ImageMagick/ImageMagick6/issues/83) * Added support for 32 bit zip with prediction format to the PSD decoder (reference https://github.com/ImageMagick/ImageMagick/issues/455). * Fix out-of-bounds vulnerability when reading sixel images (reference https://github.com/ImageMagick/ImageMagick/issues/2143). * Fix incorrect parsing of font family list (reference https://github.com/ImageMagick/ImageMagick/issues/2153). * Improve checking for write failures (reference https://github.com/ImageMagick/ImageMagick/pull/2081). ==== Mesa ==== Version update (20.1.1 -> 20.1.2) Subpackages: Mesa-dri-devel Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - update to 20.1.2 * second bugfix release for the 20.1 branch * most of the fixes here are to the AMD drivers, and the rest is scattered over the tree. - enable valgrind support (boo#1173355) ==== Mesa-drivers ==== Version update (20.1.1 -> 20.1.2) Subpackages: Mesa-dri Mesa-dri-nouveau Mesa-gallium Mesa-libva libvdpau_nouveau libvdpau_r300 libvdpau_r600 libvdpau_radeonsi libvulkan_intel libvulkan_radeon libxatracker2 - update to 20.1.2 * second bugfix release for the 20.1 branch * most of the fixes here are to the AMD drivers, and the rest is scattered over the tree. - enable valgrind support (boo#1173355) ==== curl ==== Version update (7.70.0 -> 7.71.0) Subpackages: libcurl4 - Update to 7.71.0 [bsc#1173026, CVE-2020-8169][bsc#1173027, CVE-2020-8177] * Changes: - CURLOPT_SSL_OPTIONS: optional use of Windows' CA store (with openssl) - setopt: add CURLOPT_PROXY_ISSUERCERT(_BLOB) for coherency - setopt: support certificate options in memory with struct curl_blob - tool: Add option --retry-all-errors to retry on any error * Bugfixes: - *_sspi: fix bad uses of CURLE_NOT_BUILT_IN - altsvc: bump to h3-29 - altsvc: fix 'dsthost' may be used uninitialized in this function - altsvc: fix parser for lines ending with CRLF - altsvc: remove the num field from the altsvc struct - asyn-*: remove support for never-used NULL entry pointers - azure: use matrix strategy to avoid configuration redundancy - build: disable more code/data when built without proxy support - buildconf: remove -print from the find command that removes files - checksrc: enhance the ASTERISKSPACE and update code accordingly - cirrus: disable SFTP and SCP tests - CMake: add ENABLE_ALT_SVC option - CMake: add HTTP/3 support (ngtcp2+nghttp3, quiche) - CMake: add libssh build support - configure: fix pthread check with static boringssl - configure: for wolfSSL, check for the DES func needed for NTLM - configure: only strip first -L from LDFLAGS - configure: repair the check if argv can be written to - configure: the wolfssh backend does not provide SCP - connect: improve happy eyeballs handling - connect: make happy eyeballs work for QUIC (again) - curl: remove -J "informational" written on stdout - Curl_addrinfo: use one malloc instead of three - dynbuf: introduce internal generic dynamic buffer functions - easy: fix dangling pointer on easy_perform fail - examples/ephiperfifo: turn off interval when setting timerfd - examples/http2-down/upload: add error checks - FILEFORMAT: add more features that tests can depend on - FILEFORMAT: describe verify/stderr - ftp: make domore_getsock() return the secondary socket properly - ftp: mark return-ignoring calls to Curl_GetFTPResponse with (void) - ftp: shut down the secondary connection properly when SSL is used - GnuTLS: Backend support for CURLINFO_SSL_VERIFYRESULT - hostip: make Curl_printable_address not return anything - http2: keep trying to send pending frames after req.upload_done - http2: simplify and clean up trailer handling - http: move header storage to Curl_easy from connectdata - libssh2: improved error output for wrong quote syntax - libssh2: keep sftp errors as 'unsigned long' - libssh2: set the expected total size in SCP upload init - multi: add defensive check on data->multi->num_alive - multi: implement wait using winsock events - ngtcp2: cleanup memory when failing to connect - ngtcp2: fix build with current ngtcp2 master implementing draft 28 - ngtcp2: fix happy eyeballs quic connect crash - ngtcp2: introduce qlog support - ngtcp2: never call fprintf() in lib code in release version - ngtcp2: update with recent API changes - ntlm: enable NTLM support with wolfSSL - OpenSSL: have CURLOPT_CRLFILE imply CURLSSLOPT_NO_PARTIALCHAIN - openssl: set FLAG_TRUSTED_FIRST unconditionally - projects: Add crypt32.lib to dependencies for all OpenSSL configs - quiche: clean up memory properly when failing to connect - quiche: enable qlog output - quiche: update SSLKEYLOGFILE support - Revert "ssh: ignore timeouts during disconnect" - select: fix overflow protection in Curl_socket_check - sendf: make failf() use the mvsnprintf() return code - server/sws: fix asan warning on use of uninitialized variable - server/util: fix logmsg format using curl_off_t argument - sha256: fixed potentially uninitialized variable - share: don not set the share flag it something fails - sockfilt: make select_ws stop waiting on exit signal event - socks: detect connection close during handshake - socks: fix expected length of SOCKS5 reply - socks: remove unreachable breaks in socks.c and mime.c - source cleanup: remove all custom typedef structs - timeouts: change millisecond timeouts to timediff_t from time_t - timeouts: move ms timeouts to timediff_t from int and long - tool_cfgable: free login_options at exit - tool_getparam: -i is not OK if -J is used - tool_getparam: fix memory leak in parse_args - tool_operate: fixed potentially uninitialized variables - tool_paramhlp: fixed potentially uninitialized strtol() variable - transfer: close connection after excess data has been read - typecheck-gcc.h: CURLINFO_PRIVATE does not need a 'char *' - unit1604.c: fix implicit conv from 'SANITIZEcode' to 'CURLcode' - url: accept "any length" credentials for proxy auth - url: alloc the download buffer at transfer start - url: make the updated credentials URL-encoded in the URL - url: reject too long input when parsing credentials - url: sort the protocol schemes in rough popularity order - urlapi: accept :: as a valid IPv6 address - urldata: leave the HTTP method untouched in the set.* struct - urlglob: treat literal IPv6 addresses with zone IDs as a host name - user-agent.d: spell out what happens given a blank argument - vauth/cleartext: fix theoretical integer overflow - version.d: expanded and alpha-sorted - vtls: Extract and simplify key log file handling from OpenSSL - wolfssl: add SSLKEYLOGFILE support - wording: avoid blacklist/whitelist stereotypes - write-out.d: added "response_code" ==== gcc10 ==== Version update (10.1.1+git40 -> 10.1.1+git290) Subpackages: cpp10 gcc10-c++ gcc10-fortran gcc10-info gcc10-locale gcc10-objc libasan6 libatomic1 libgcc_s1 libgcc_s1-32bit libgfortran5 libgomp1 libitm1 liblsan0 libobjc4 libquadmath0 libstdc++6 libstdc++6-32bit libstdc++6-devel-gcc10 libstdc++6-locale libstdc++6-pp-gcc10 libstdc++6-pp-gcc10-32bit libtsan0 libubsan1 - Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290. * Includes fix for PR95719, fixing LibreOffice. - Enable c++ for arm-none-eabi - Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68. - Add gcc10-foffload-default.patch to make offloading ignore offload targets that have not been installed both at compile and runtime (for the libgomp plugin part). ==== glibc ==== Subpackages: glibc-32bit glibc-devel glibc-extra glibc-info glibc-lang glibc-locale glibc-locale-base nscd - long-double-alias.patch: Fix build with GCC 10 when long double = double - nscd-gc-cycle.patch: nscd: bump GC cycle during cache pruning (bsc#1171878, BZ #26130) ==== hplip ==== Version update (3.19.12 -> 3.20.6) Subpackages: hplip-hpijs hplip-sane - hplip-3.20.6.tar.gz has been updated on HP download server, causing the OBS download_files bot to fail. Fix it. - postscriptdriver provides are now enabled indirectly via cups-devel (boo#1172407) - Update to 3.20.6 Add support for the following printers: * HP Color LaserJet Managed MFP E78223a * HP Color LaserJet Managed MFP E78223dv * HP Color LaserJet Managed MFP E78223dn * HP Color LaserJet Mngd MFP E78223dn Plus * HP Color LaserJet Mngd MFP E78223dn CN * HP Color LaserJet Managed MFP E78228dn * HP Color LaserJet Managed MFP E78228dn Plus * HP Color LaserJet Managed MFP E78228dn CN * HP Color LaserJet Managed Flow MFP E78330z Plus * HP Color LaserJet Managed Flow MFP E78330z CN * HP Color LaserJet Managed MFP E78330dn * HP Color LaserJet Mngd MFP E78330dn Plus * HP Color LaserJet Mngd MFP E78330dn CN * HP Color LaserJet Managed MFP E78330z * HP Color LaserJet Managed Flow MFP E78325z Plus * HP Color LaserJet Managed Flow MFP E78325dn CN * HP Color LaserJet Managed Flow MFP E78325z CN * HP Color LaserJet Managed MFP E78325dn * HP Color LaserJet Managed MFP E78325z * HP Color LaserJet Managed Flow MFP E78323z * HP Color LaserJet Mgd Flw MFPE78323Z Plus * HP Color LaserJet Mgd Flw MFPE78323z CN * HP Color LaserJet Managed MFP E78323dn * HP Color LaserJet Mngd MFP E78323dn Plus * HP Color LaserJet Mngd MFP E78323dn CN * HP DeskJet 1200 * HP DeskJet Ink Advantage 1200 * HP DeskJet 2300 All-in-One * HP DeskJet Ink Advantage 2300 All-in-One * HP ENVY 6000 series * HP DeskJet Plus 6000 series * HP ENVY Pro 6400 series * HP DeskJet Plus 6400 series * HP DeskJet 2700 All-in-One Printer series * HP DeskJet Ink Advantage 2700 All-in-One Printer series * HP DeskJet Plus 4100 All-in-One Printer series * HP DeskJet Ink Advantage 4100 All-in-One Printer series * HP LaserJet Enterprise M610dn * HP LaserJet Enterprise M611dn * HP LaserJet Enterprise M611x * HP LaserJet Enterprise M612dn * HP LaserJet Enterprise M612x * HP LaserJet Enterprise MFP M634dn * HP LaserJet Enterprise MFP M634z * HP LaserJet Enterprise Flow MFP M634h * HP LaserJet Enterprise MFP M635h * HP LaserJet Enterprise MFP M635fht * HP LaserJet Enterprise Flow MFP M635z * HP LaserJet Enterprise MFP M636fh * HP LaserJet Enterprise Flow MFP M636z * HP Neverstop Laser MFP 1200n * HP Neverstop Laser MFP 1201n * HP Neverstop Laser MFP 1200nw * HP Neverstop Laser MFP 1202nw * HP Laser NS MFP 1005n * HP Neverstop Laser 1000n * HP Neverstop Laser 1001nw * HP Laser NS 1020n * HP ScanJet Pro 2000 s2 * HP ScanJet Pro 3000 s4 * HP ScanJet Pro N4000 snw1 * HP ScanJet Enterprise Flow 5000 s5 * HP ScanJet Enterprise Flow N7000 snw1 ==== libzypp ==== Version update (17.23.7 -> 17.23.8) - Fix core dump with corrupted history file (bsc#1170801) - version 17.23.8 (22) ==== perl-libwww-perl ==== Version update (6.45 -> 6.46) - updated to 6.46 see /usr/share/doc/packages/perl-libwww-perl/Changes 6.46 2020-06-23 21:19:26Z - Fix a looping regression in 6.45 for redirect responses without a Location header (GH PR#342, Niko Tyni) ==== pulseaudio ==== Subpackages: libpulse-mainloop-glib0 libpulse0 pulseaudio-bash-completion pulseaudio-gdm-hooks pulseaudio-lang pulseaudio-module-bluetooth pulseaudio-module-gsettings pulseaudio-module-x11 pulseaudio-module-zeroconf pulseaudio-utils pulseaudio-zsh-completion - Fixes for %_libexecdir changing to /usr/libexec ==== python3 ==== Subpackages: python3-curses python3-dbm - Replace OBS_dev-shm.patch with the upstream PR#20944 ==== python3-base ==== Subpackages: libpython3_8-1_0 - Replace OBS_dev-shm.patch with the upstream PR#20944 ==== valgrind ==== Version update (3.15.0 -> 3.16.0) - Use autopatch - Change armv6-support.diff to a/b format - update to 3.16.0: * Many bugfixes, too many to list here, see NEWS file - The implicit memcpy done by each call to realloc now counts towards the read and write counts of resized heap blocks, making those counts higher and more accurate. - cg_annotate's --auto and --show-percs options now default to 'yes', because they are usually wanted. - callgrind_annotate's --auto and --show-percs options now default to 'yes', because they are usually wanted. - The command option --collect-systime has been enhanced to specify the unit used to record the elapsed time spent during system calls. The command option now accepts the values no|yes|msec|usec|nsec, where yes is a synonym of msec. When giving the value nsec, the system cpu time of system calls is also recorded. - Several memcheck options are now dynamically changeable. Use valgrind --help-dyn-options to list them. - The release 3.15 introduced a backward incompatible change for some suppression entries related to preadv and pwritev syscalls. When reading a suppression entry using the unsupported 3.14 format, valgrind will now produce a warning to say the suppression entry will not work, and suggest the needed change. - Significantly fewer false positive errors on optimised code generated by Clang and GCC. In particular, Memcheck now deals better with the situation where the compiler will transform C-level "A && B" into "B && A" under certain circumstances (in which the transformation is valid). Handling of integer equality/non-equality checks on partially defined values is also improved on some architectures. - The exprimental Stack and Global Array Checking tool has been removed. It only ever worked on x86 and amd64, and even on those it had a high false positive rate and was slow. An alternative for detecting stack and global array overruns is using the AddressSanitizer (ASAN) facility of the GCC and Clang compilers, which require you to rebuild your code with -fsanitize=address. - Option -T tells vgdb to output a timestamp in the vgdb information messages. - The gdbserver monitor commands that require an address and an optional length argument now accepts the alternate 'C like' syntax "address[length]". For example, the memcheck command "monitor who_points_at 0x12345678 120" can now also be given as "monitor who_points_at 0x12345678[120]". - 001-Add-newer-constants-for-prctl-syscall.patch 0001-Fix-makefile-consistency-check.patch 0001-s390x-Add-CPU-model-for-z15.patch 0001-s390x-Add-models-z14-and-z14-ZR1.patch 0001-s390x-Clean-up-s390-check-opcodes.pl.patch 0001-Add-newer-constants-for-prctl-syscall.patch 0002-Add-support-for-PR_CAPBSET_READ-and-_DROP-syscalls.patch: dropped as those patches were from upstream and are already in 3.16.0 - add 0001-Power-PC-Fix-extraction-of-the-L-field-for-sync-inst.patch (bsc#1173135) -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org