Packages changed:
ImageMagick (7.1.1.35 -> 7.1.1.36)
MozillaFirefox (128.0.3 -> 129.0)
NetworkManager (1.48.6 -> 1.48.8)
PackageKit
SDL2 (2.30.4 -> 2.30.6)
accountsservice
apache-commons-logging (1.2 -> 1.3.3)
apache2-mod_php8 (8.3.9 -> 8.3.10)
binutils (2.42 -> 2.43)
btrfsprogs (6.10 -> 6.10.1)
bubblewrap (0.9.0 -> 0.10.0)
curl (8.9.0 -> 8.9.1)
emacs
ethtool (6.9 -> 6.10)
ffmpeg-6
gdm
gegl
gnome-bluetooth (46.0 -> 46.1)
gnome-control-center (46.3 -> 46.4)
gnome-remote-desktop (46.3 -> 46.4)
gnome-shell
gnome-software (46.3 -> 46.4)
gnome-user-docs (46.1 -> 46.4)
gom (0.5.2 -> 0.5.3)
gpg2
guestfs-tools (1.53.1 -> 1.53.2)
iproute2 (6.9 -> 6.10)
kernel-firmware (20240728 -> 20240809)
kernel-source (6.10.3 -> 6.10.5)
kexec-tools (2.0.28 -> 2.0.29)
lib2geom
libadwaita (1.5.2 -> 1.5.3)
libass (0.17.1 -> 0.17.3)
libei (1.2.1 -> 1.3.0)
libgphoto2
libheif (1.18.1 -> 1.18.2)
liblc3 (1.0.4 -> 1.1.1)
libnftnl (1.2.6 -> 1.2.7)
libqt5-qtwebengine
libshumate (1.2.2 -> 1.2.3)
liburing
libxml++30 (3.2.4 -> 3.2.5)
lvm2
lvm2-device-mapper
lz4
makedumpfile
mutter
ncurses (6.5.20240713 -> 6.5.20240810)
openSUSE-release (20240812 -> 20240818)
ovmf
patterns-base
patterns-media
pcre2 (10.43 -> 10.44)
php8 (8.3.9 -> 8.3.10)
polkit
protobuf
protobuf-c
ptools
python-M2Crypto (0.40.0 -> 0.42.0)
python-anyio (4.3.0 -> 4.4.0)
python-argcomplete
python-cryptography
qt6-webengine
rdma-core (52.0 -> 53.0)
selinux-policy (20240809 -> 20240814)
sensors
shadow
suse-module-tools (16.0.48 -> 16.0.49)
sysvinit (3.08 -> 3.10)
texlive
totem-pl-parser (3.26.6 -> 3.26.6+30)
unbound (1.20.0 -> 1.21.0)
virt-v2v (2.5.5 -> 2.5.6)
webkit2gtk3 (2.44.2 -> 2.44.3)
wtmpdb (0.13.0+git.20240726 -> 0.13.0+git.20240814)
xdm
xfce4-notifyd (0.9.4 -> 0.9.6)
xfwm4
yast2-bootloader (5.0.10 -> 5.0.11)
=== Details ===
==== ImageMagick ====
Version update (7.1.1.35 -> 7.1.1.36)
Subpackages: ImageMagick-config-7-SUSE libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10
- version update to 7.1.1.36
* uhdr.c: default initialize range field for hdr/sdr intent inputs to
enc by @aayushsoni111 in #7482
* Fixed typo in documentation of MagickAdaptiveBlurImage by @JonahEMorgan
in #7500
* Silence warning when freetype delegate is disabled. by @niclet in #7515
==== MozillaFirefox ====
Version update (128.0.3 -> 129.0)
- Mozilla Firefox 129.0
https://www.mozilla.org/en-US/firefox/129.0/releasenotes
MFSA 2024-33 (bsc#1228648))
* CVE-2024-7518 (bmo#1875354)
Fullscreen notification dialog can be obscured by document content
* CVE-2024-7519 (bmo#1902307)
Out of bounds memory access in graphics shared memory handling
* CVE-2024-7520 (bmo#1903041)
Type confusion in WebAssembly
* CVE-2024-7521 (bmo#1904644)
Incomplete WebAssembly exception handing
* CVE-2024-7522 (bmo#1906727)
Out of bounds read in editor component
* CVE-2024-7523 (bmo#1908344)
Document content could partially obscure security prompts
* CVE-2024-7524 (bmo#1909241)
CSP strict-dynamic bypass using web-compatibility shims
* CVE-2024-7525 (bmo#1909298)
Missing permission check when creating a StreamFilter
* CVE-2024-7526 (bmo#1910306)
Uninitialized memory used by WebGL
* CVE-2024-7527 (bmo#1871303)
Use-after-free in JavaScript garbage collection
* CVE-2024-7528 (bmo#1895951)
Use-after-free in IndexedDB
* CVE-2024-7529 (bmo#1903187)
Document content could partially obscure security prompts
* CVE-2024-7530 (bmo#1904011)
Use-after-free in JavaScript code coverage collection
* CVE-2024-7531 (bmo#1905691)
PK11_Encrypt using CKM_CHACHA20 can reveal plaintext on Intel
Sandy Bridge machines
- removed obsolete patches
mozilla-bmo1905018.patch
mozilla-bmo1504834-part3.patch
mozilla-bmo1512162.patch
mozilla-bmo1822730.patch
mozilla-fix-aarch64-libopus.patch
mozilla-partial-revert-1768632.patch
- requires NSS 3.102.1
- extended mozilla-silence-no-return-type.patch
==== NetworkManager ====
Version update (1.48.6 -> 1.48.8)
Subpackages: NetworkManager-bluetooth NetworkManager-tui NetworkManager-wwan libnm0 typelib-1_0-NM-1_0
- Update to version 1.48.8:
+ ovs: fix triggering stage3 activation without DHCP client
initialized
+ config: parse autoconnect-ports value on config
+ ndisc: preserve router preferences
==== PackageKit ====
Subpackages: PackageKit-backend-zypp PackageKit-gstreamer-plugin PackageKit-gtk3-module libpackagekit-glib2-18 typelib-1_0-PackageKitGlib-1_0
- Add PackageKit-mark-as-compulsory.patch: Prevent PackageKit from
user uninstallable for most desktops (bsc#1226269).
==== SDL2 ====
Version update (2.30.4 -> 2.30.6)
- Update to release 2.30.6
* Improved detection of Nintendo Switch Pro controller report mode
* Fixed a rare crash when a controller is disconnected
==== accountsservice ====
Subpackages: libaccountsservice0 typelib-1_0-AccountsService-1_0
- Drop as-fate318433-prevent-same-account-multi-logins.patch.
Gnome-shell now has similar functionality upstream.
==== apache-commons-logging ====
Version update (1.2 -> 1.3.3)
- Upgrade to 1.3.3
* Bug Fixes:
+ * LOGGING-193: Update Log4j 2 OSGi imports #268.
+ * Fix PMD UnnecessaryFullyQualifiedName in SimpleLog.
+ * Fix NullPointerException in SimpleLog#write(Object) on null
input.
+ Fix NullPointerException in SimpleLog#write(StringBuffer) on
null input.
- Includes changes from 1.3.2
* Fixed Bugs
+ LOGGING-190: Add OSGi metadata to enable Service Loader
Mediator #234.
+ LOGGING-191: Apache commons logging shows 1.4 as latest
release instead of 1.3.1.
+ Deprecate
org.apache.commons.logging.LogSource.jdk14IsAvailable.
- Includes changes from 1.3.1
* New features
+ Add Maven property project.build.outputTimestamp for build
reproducibility.
* Fixed Bugs
+ Remove references to very old JDK and Commons Logging
versions #201.
+ Update from Logj 1 to the Log4j 2 API compatibility layer
[#231].
+ Allow Servlet 4 in OSGi environment #191.
+ Fix generics warnings #213.
+ LOGGING-189: Fix Import-Package entry for org.slf4j #188.
- Includes changes from 1.3.0
* New Features:
+ Add support for Log4j API and SLF4J #177.
+ Deprecate org.apache.commons.logging.impl.WeakHashtable
without replacement. LOGGING-188: Deprecate and disable
`Jdk13LumberjackLogger` and `Log4JLogger`. LOGGING-173:
+ Deprecate and disable `AvalonLogger` and `LogKitLogger`.
+ LOGGING-165: Add Automatic-Module-Name Manifest Header for
Java 9 compatibility.
* Fixed Bugs:
+ LOGGING-163: BufferedReader is not closed properly.
+ LOGGING-177: Remove redundant initializer #46
+ Use a weak reference for the cached class loader #71.
+ Add more entries to .gitignore file #25.
+ Minor Improvements #34.
+ [StepSecurity] ci: Harden GitHub Actions #145.
+ LOGGING-185: Replace custom code with `ServiceLoader` call.
+ Fix possible NPEs in LogFactoryImpl.
+ LOGGING-185: Fix failing tests #180.
+ Deprecate LogConfigurationException.cause in favor of
getCause().
+ Fix SpotBugs [ERROR] High: Found reliance on default encoding
in org.apache.commons.logging.LogFactory.initDiagnostics():
new java.io.PrintStream(OutputStream)
[org.apache.commons.logging.LogFactory] At
LogFactory.java:[line 1205] DM_DEFAULT_ENCODING.
+ Fix SpotBugs [ERROR] Medium: Class
org.apache.commons.logging.impl.WeakHashtable defines
non-transient non-serializable instance field queue
[org.apache.commons.logging.impl.WeakHashtable] In
WeakHashtable.java SE_BAD_FIELD.
+ Set java.logging as optional module #183.
+ Fix SpotBugs [ERROR] Medium: Switch statement found in
org.apache.commons.logging.impl.SimpleLog.log(int, Object,
Throwable) where default case is missing
[org.apache.commons.logging.impl.SimpleLog] At
SimpleLog.java:[lines 505-522] SF_SWITCH_NO_DEFAULT.
+ Deprecate
org.apache.commons.logging.impl.Jdk13LumberjackLogger.dummyLevel
without replacement.
- Remove deprecated patch files:
* commons-logging-1.1.3-src-junit.diff
* commons-logging-1.2-sourcetarget.patch
* commons-logging-manifests.patch
* no-tests.patch
- Reinstate ant build (removed upstream)
* add build.xml
* add build.properties
- Remove unnecessary dependencies
* add commons-logging-1.3.3-dependencies.patch
- Add upstream dev's public key to apache-commons-logging.keyring
==== apache2-mod_php8 ====
Version update (8.3.9 -> 8.3.10)
- version update to 8.3.10
Core:
Fixed bug GH-13922 (Fixed support for systems with sysconf(_SC_GETPW_R_SIZE_MAX) == -1).
Fixed bug GH-14626 (Fix is_zend_ptr() for huge blocks).
Fixed bug GH-14590 (Memory leak in FPM test gh13563-conf-bool-env.phpt.
Fixed OSS-Fuzz #69765.
Fixed bug GH-14741 (Segmentation fault in Zend/zend_types.h).
Fixed bug GH-14969 (Use-after-free in property coercion with __toString()).
Dom:
Fixed bug GH-14702 (DOMDocument::xinclude() crash).
Fileinfo:
Fixed bug GH-14888 (README.REDIST.BINS refers to non-existing LICENSE).
Gd:
ext/gd/tests/gh10614.phpt: skip if no PNG support.
restored warning instead of fata error.
LibXML:
Fixed bug GH-14563 (Build failure with libxml2 v2.13.0).
Opcache:
Fixed bug GH-14550 (No warning message when Zend DTrace is enabled that opcache.jit is implictly disabled).
Output:
Fixed bug GH-14808 (Unexpected null pointer in Zend/zend_string.h with empty output buffer).
PDO:
Fixed bug GH-14712 (Crash with PDORow access to null property).
Phar:
Fixed bug GH-14603 (null string from zip entry).
PHPDBG:
Fixed bug GH-14596 (crashes with ASAN and ZEND_RC_DEBUG=1).
Fixed bug GH-14553 (echo output trimmed at NULL byte).
Shmop:
Fixed bug GH-14537 (shmop Windows 11 crashes the process).
SPL:
Fixed bug GH-14639 (Member access within null pointer in ext/spl/spl_observer.c).
Standard:
Fixed bug GH-14775 (range function overflow with negative step argument).
Fix 32-bit wordwrap test failures.
Fixed bug GH-14774 (time_sleep_until overflow).
Streams:
Fixed bug GH-14930 (Custom stream wrapper dir_readdir output truncated to 255 characters in PHP 8.3).
Tidy:
Fix memory leak in tidy_repair_file().
Treewide:
Fix compatibility with libxml2 2.13.2.
XML:
Move away from to-be-deprecated libxml fields.
Fixed bug GH-14834 (Error installing PHP when --with-pear is used).
==== binutils ====
Version update (2.42 -> 2.43)
Subpackages: libctf-nobfd0 libctf0
- Update to version 2.43:
* new .base64 pseudo-op, allowing base64 encoded data as strings
* Intel APX: add support for CFCMOV, CCMP, CTEST, zero-upper, NF
(APX_F now fully supported)
* x86 Intel syntax now warns about more mnemonic suffixes
* macros and .irp/.irpc/.rept bodies can use \+ to get at number
of times the macro/body was executed
* aarch64: support 'armv9.5-a' for -march, add support for LUT
and LUT2
* s390: base register operand in D(X,B) and D(L,B) can now be
omitted (ala 'D(X,)'); warn when register type doesn't match
operand type (use option
'warn-regtype-mismatch=[strict|relaxed|no]' to adjust)
* riscv: support various extensions: Zacas, Zcmp, Zfbfmin,
Zvfbfmin, Zvfbfwma, Smcsrind/Sscsrind, XCvMem, XCvBi, XCvElw,
XSfCease, all at version 1.0;
remove support for assembly of privileged spec 1.9.1 (linking
support remains)
* arm: remove support for some old co-processors: Maverick and FPA
* mips: '--trap' now causes either trap or breakpoint instructions
to be emitted as per current ISA, instead of always using trap
insn and failing when current ISA was incompatible with that
* LoongArch: accept .option pseudo-op for fine-grained control
of assembly code options; add support for DT_RELR
* readelf: now displays RELR relocations in full detail;
add -j/--display-section to show just those section(s) content
according to their type
* objdump/readelf now dump also .eh_frame_hdr (when present) when
dumping .eh_frame
* gprofng: add event types for AMD Zen3/Zen4 and Intel Ice Lake
processors; add minimal support for riscv
* linker:
- put .got and .got.plt into relro segment
- add -z isa-level-report=[none|all|needed|used] to the x86 ELF
linker to report needed and used x86-64 ISA levels
- add --rosegment option which changes the -z separate-code
option so that only one read-only segment is created (instead
of two)
- add --section-ordering-file <FILE> option to add extra
mapping of input sections to output sections
- add -plugin-save-temps to store plugin intermediate files
permanently
- Removed binutils-2.42.tar.bz2, binutils-2.42-branch.diff.gz.
- Added binutils-2.43.tar.bz2, binutils-2.43-branch.diff.gz.
- Removed upstream patch riscv-no-relax.patch.
- Rebased ld-relro.diff and binutils-revert-rela.diff.
==== btrfsprogs ====
Version update (6.10 -> 6.10.1)
Subpackages: btrfsprogs-bash-completion btrfsprogs-udev-rules libbtrfs0 libbtrfsutil1
- update to 6.10.1
* mkfs: rework --rootdir traversal, skip hardlinks and create new inodes
instead, also warn about them, this did not work as expected and will be
fixed in the future
* receive: search in older trees for UUIDs when detecting clone sources
* libbtrfsutil: bindings available at https://pypi.org/project/btrfsutil
* libbtrfs:
* patchlevel version update 0.1.4
* cleanup in headers, removed unused definitions, no functional changes
* don't ship list.h and rbtree.h
* other: documentation updates
==== bubblewrap ====
Version update (0.9.0 -> 0.10.0)
Subpackages: bubblewrap-zsh-completion
- Update to version v0.10.0:
* New features: Add the --[ro-]bind-fd option, which can be used
to mount a filesystem represented by a file descriptor without
time-of-check/time-of-use attacks. This is needed when
resolving CVE-2024-42472 in Flatpak.
* Other changes: Fix some confusing syntax in SetupOpFlag (no
functional change).
==== curl ====
Version update (8.9.0 -> 8.9.1)
Subpackages: curl-zsh-completion libcurl4
- Fix regression introduced in version 8.9.1:
* sigpipe: init the struct so that first apply ignores
* Add curl-sigpipe.patch
- Update to 8.9.1:
* Security fixes:
- curl: ASN.1 date parser overread [bsc#1228535, CVE-2024-7264]
* Bugfixes:
- cmake: detect 'libssh' via 'pkg-config'
- cmake: detect 'nettle' when building with GnuTLS
- connect: fix connection shutdown for event based processing
- curl: more defensive socket code for --ip-tos
- CURLOPT_SSL_CTX_FUNCTION.md: mention CA caching
- CURLSHOPT_SHARE.md: mention sessions/cookies as not thread-safe
- ftpserver.pl: make POP3 LIST serve content from the test file
- lib: survive some NULL input args
- os400: build cli manual.
- os400: workaround an IBM ASCII run-time library bug
- transfer: speed limiting fix for 32bit systems
- vtls: avoid forward declaration in MultiSSL builds
- x509asn1: unittests and fixes for gtime2str
==== emacs ====
Subpackages: emacs-el emacs-eln emacs-games emacs-info emacs-nox etags
- Set find-function-C-source-directory in site-start so sources
provided by the debugsource package can be found user intervention
inside Emacs
==== ethtool ====
Version update (6.9 -> 6.10)
Subpackages: ethtool-bash-completion
- update to upstream release 6.10
* Feature: suport for PoE in PSE (--show-pse and --set-pse)
* Feature: add statistics support to tsinfo (-T)
* Feature: add JSON output to base command (no option)
* Feature: add JSON output to EEE info (--show-eee)
* Fix: qsfp: better handling on page 03h read failure (-m)
* Fix: handle zero arguments for module eeprom dump (-m)
* Fix: check for missing arguments in do_srxfh() (-X)
* Misc: more descriptive error when JSON output is not available
==== ffmpeg-6 ====
Subpackages: libavcodec60 libavfilter9 libavformat60 libavutil58 libpostproc57 libswresample4 libswscale7
- Remove ffmpeg-6-CVE-2024-32228-shim-5d7f234e.patch and
ffmpeg-6-CVE-2024-32228.patch to make the bot happy.
- Renumber patches.
- Disable ffmpeg-6-CVE-2024-32228-shim-5d7f234e.patch and
ffmpeg-6-CVE-2024-32228.patch as they brake compilation with
BUILD_ORIG enabled, i.e. Packman.
==== gdm ====
Subpackages: gdm-schema gdmflexiserver libgdm1 typelib-1_0-Gdm-1_0
- Add pam_pkcs11 as Recommends for smartcard login (bsc#1223580).
- Fix applying patches when sle_version is defined
==== gegl ====
Subpackages: gegl-0_4 libgegl-0_4-0
- Add backported 66de8124.patch: Fix build against ffmpeg-7.
==== gnome-bluetooth ====
Version update (46.0 -> 46.1)
Subpackages: libgnome-bluetooth-3_0-13 libgnome-bluetooth-ui-3_0-13 typelib-1_0-GnomeBluetooth-3_0
- Update to version 46.1:
+ This version contains translation updates and a bug fix for
some device icons not appearing correctly.
==== gnome-control-center ====
Version update (46.3 -> 46.4)
Subpackages: gnome-control-center-color gnome-control-center-goa gnome-control-center-user-faces gnome-control-center-users
- Update to version 46.4:
+ Accessibility: Fix enum value for follow centered
+ Apps: Fix memory leak for MMManager object in default apps page
+ Network: Don't set empty ignored hosts
+ Privacy: Fix visibility issue of Bolt settings when Bolt isn't
available
+ Users:
- Avoid accidental mnemonics for user name rows
- Show correctly the remaining list of fingerprints to enroll
+ WWAN: Fix crash on Unlock SIM dialog
==== gnome-remote-desktop ====
Version update (46.3 -> 46.4)
- Update to version 46.4:
+ Gracefully handle invalid x224Crq data
+ Fix file descriptor leak
+ Updated translations.
==== gnome-shell ====
Subpackages: gnome-extensions gnome-shell-calendar
- Drop gs-fate318433-prevent-same-account-multi-logins.patch.
Upstream now does this.
==== gnome-software ====
Version update (46.3 -> 46.4)
Subpackages: gnome-software-plugin-packagekit
- Update to version 46.4:
+ Correct broken formatting when using <code> in AppStream
metadata
+ Updated translations.
==== gnome-user-docs ====
Version update (46.1 -> 46.4)
- Update to version 46.4:
+ Updates to GNOME Help.
+ Updated translations.
==== gom ====
Version update (0.5.2 -> 0.5.3)
- Update to version 0.5.3:
+ Automatically ignore read-only properties
+ Add support for GParamSpec which are GBytes
==== gpg2 ====
Subpackages: dirmngr
- Remove explicit runtime library dependency, pick ease of
maintenance in Tumbleweed over mixed project use runtime bugs.
==== guestfs-tools ====
Version update (1.53.1 -> 1.53.2)
- Update to version 1.53.2 (jsc#PED-6305)
* Implement --inject-blnsvr operation
* mlcustomize: firstboot: Use Linux path for Powershell script path
* mlcustomize: firstboot: Use powershell.exe instead of path
* mlcustomize: firstboot: Use Powershell -NoProfile flag
* mlcustomize: Revert delay installation of qemu-ga MSI
* mldrivers/linux_kernels.ml: Prefix general information with ^info:
* mlcustomize: Use Start-Process -Wait to run qemu-ga installer
* mlcustomize: Add Firstboot.firstboot_dir function
* mlcustomize: Place powershell scripts into <firstboot_dir>\Temp
* mlcustomize: Inject qemu-ga & blnsvr into <firstboot_dir>/Temp
* mlcustomize: Write qemu-ga log file name to log.txt
==== iproute2 ====
Version update (6.9 -> 6.10)
Subpackages: iproute2-bash-completion
- Update to release 6.10
* ip: ipnexthop: Support dumping next hop group stats
* ip: Support filter links with no VF info
* ip: PFCP device support
* ip link: hsr: Add support for passing information about
INTERLINK device
==== kernel-firmware ====
Version update (20240728 -> 20240809)
Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-ath12k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network
- Update to version 20240809 (git commit 36db650dae03):
* qcom: update path for video firmware for vpu-1/2/3.0
* QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642
* rtw89: 8852c: add fw format-1 v0.27.97.0
* rtw89: 8852bt: add firmware 0.29.91.0
* amdgpu: Update ISP FW for isp v4.1.1
* mediatek: Update mt8195 SOF firmware
* amdgpu: DMCUB updates for DCN314
* xe: First GuC release v70.29.2 for BMG
* xe: Add GuC v70.29.2 for LNL
* i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL
* i915: Update MTL DMC v2.22
* i915: update MTL GSC to v102.0.10.1878
* xe: Add BMG HuC 8.2.10
* xe: Add GSC 104.0.0.1161 for LNL
* xe: Add LNL HuC 9.4.13
* i915: update DG2 HuC to v7.10.16
* amdgpu: Update ISP FW for isp v4.1.1
* QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641
==== kernel-source ====
Version update (6.10.3 -> 6.10.5)
- Refresh
patches.suse/Revert-ata-libata-scsi-Honor-the-D_SENSE-bit-for-CK_.patch.
Update upstream status.
- commit b7789d6
- netfilter: nfnetlink: Initialise extack before use in ACKs (netlink-crash).
See:
https://github.com/systemd/systemd/actions/runs/10282472628/job/28454253577?pr=33958#step:12:30
- commit da1090b
- btrfs: fix invalid mapping of extent xarray state (git-fixes).
- commit b18d7b9
- Linux 6.10.5 (bsc#1012628).
- drm/amd/display: Refactor function
dm_dp_mst_is_port_support_mode() (bsc#1012628).
- locking/pvqspinlock: Correct the type of "old" variable in
pv_kick_node() (bsc#1012628).
- perf/x86/intel/cstate: Add Arrowlake support (bsc#1012628).
- perf/x86/intel/cstate: Add Lunarlake support (bsc#1012628).
- perf/x86/intel/cstate: Add pkg C2 residency counter for Sierra
Forest (bsc#1012628).
- platform/x86: intel-vbtn: Protect ACPI notify handler against
recursion (bsc#1012628).
- irqchip/mbigen: Fix mbigen node address layout (bsc#1012628).
- platform/x86/intel/ifs: Initialize union ifs_status to zero
(bsc#1012628).
- jump_label: Fix the fix, brown paper bags galore (bsc#1012628).
- perf/x86/amd: Use try_cmpxchg() in events/amd/{un,}core.c
(bsc#1012628).
- perf/x86/intel: Support the PEBS event mask (bsc#1012628).
- perf/x86: Support counter mask (bsc#1012628).
- perf/x86: Fix smp_processor_id()-in-preemptible warnings
(bsc#1012628).
- selftests: ksft: Fix finished() helper exit code on skipped
tests (bsc#1012628).
- x86/mm: Fix pti_clone_pgtable() alignment assumption
(bsc#1012628).
- x86/mm: Fix pti_clone_entry_text() for i386 (bsc#1012628).
- smb: client: handle lack of FSCTL_GET_REPARSE_POINT support
(bsc#1012628).
- power: supply: rt5033: Bring back i2c_set_clientdata
(bsc#1012628).
- sctp: Fix null-ptr-deref in reuseport_add_sock() (bsc#1012628).
- net: pse-pd: tps23881: Fix the device ID check (bsc#1012628).
- gve: Fix use of netif_carrier_ok() (bsc#1012628).
- virtio-net: unbreak vq resizing when coalescing is not
negotiated (bsc#1012628).
- net: usb: qmi_wwan: fix memory leak for not ip packets
(bsc#1012628).
- net: bridge: mcast: wait for previous gc cycles when removing
port (bsc#1012628).
- net: linkwatch: use system_unbound_wq (bsc#1012628).
- net: dsa: microchip: Fix Wake-on-LAN check to not return an
error (bsc#1012628).
- ice: Fix reset handler (bsc#1012628).
- Bluetooth: l2cap: always unlock channel in
l2cap_conless_channel() (bsc#1012628).
- Bluetooth: hci_sync: avoid dup filtering when passive scanning
with adv monitor (bsc#1012628).
- net/smc: add the max value of fallback reason count
(bsc#1012628).
- net: dsa: bcm_sf2: Fix a possible memory leak in
bcm_sf2_mdio_register() (bsc#1012628).
- idpf: fix memory leaks and crashes while performing a soft reset
(bsc#1012628).
- idpf: fix UAFs when destroying the queues (bsc#1012628).
- l2tp: fix lockdep splat (bsc#1012628).
- net: bcmgenet: Properly overlay PHY and MAC Wake-on-LAN
capabilities (bsc#1012628).
- net: fec: Stop PPS on driver remove (bsc#1012628).
- net: pse-pd: tps23881: include missing bitfield.h header
(bsc#1012628).
- net: dsa: microchip: disable EEE for
KSZ8567/KSZ9567/KSZ9896/KSZ9897 (bsc#1012628).
- regmap: kunit: Fix memory leaks in gen_regmap() and
gen_raw_regmap() (bsc#1012628).
- gpio: prevent potential speculation leaks in
gpio_device_get_desc() (bsc#1012628).
- hwmon: corsair-psu: add USB id of HX1200i Series 2023 psu
(bsc#1012628).
- Revert "rcu-tasks: Fix synchronize_rcu_tasks() VS
zap_pid_ns_processes()" (bsc#1012628).
- platform/chrome: cros_ec_lpc: Add a new quirk for ACPI id
(bsc#1012628).
- rcutorture: Fix rcu_torture_fwd_cb_cr() data race (bsc#1012628).
- md: do not delete safemode_timer in mddev_suspend (bsc#1012628).
- md: change the return value type of md_write_start to void
(bsc#1012628).
- md/raid5: avoid BUG_ON() while continue reshape after
reassembling (bsc#1012628).
- debugobjects: Annotate racy debug variables (bsc#1012628).
- nvme: apple: fix device reference counting (bsc#1012628).
- block: change rq_integrity_vec to respect the iterator
(bsc#1012628).
- rcu: Fix rcu_barrier() VS post CPUHP_TEARDOWN_CPU invocation
(bsc#1012628).
- clocksource/drivers/sh_cmt: Address race condition for clock
events (bsc#1012628).
- ACPI: battery: create alarm sysfs attribute atomically
(bsc#1012628).
- ACPI: SBS: manage alarm sysfs attribute through psy core
... changelog too long, skipping 636 lines ...
- commit b60be3e
==== kexec-tools ====
Version update (2.0.28 -> 2.0.29)
- update to 2.0.29:
* update man and --help
* powerpc/kexec_load: add hotplug support
* kexec_load: Use new kexec flag for hotplug support
* x86-linux-setup.c: Use POSIX basename API
* LoongArch: fix load command line segment error
* LoongArch: add multi crash kernel segment support
* LoongArch: fix kernel image size error
* Arm: Fix add_buffer_phys_virt() align issue
* Fix incorrect Free Software Foundation address in the license
* util_lib/elf_info.c: fix a warning
* kexec_file: add kexec_file flag to support debug printing
* workflow: update to use checkout@v4
- drop kexec-dont-use-kexec_file_load-on-xen.patch, upstream
- drop fix-building-on-x86_64-with-binutils-2.41.patch, upstream
- kexec-tools-riscv-hotplug.patch: Fix build for riscv64.
==== lib2geom ====
- Add skip_failing_tests_gcc14.diff to fix more instable
intersection tests. This allows the 32bit version of the package
to be built with GCC14.
==== libadwaita ====
Version update (1.5.2 -> 1.5.3)
Subpackages: libadwaita-1-0 typelib-1_0-Adw-1
- Update to version 1.5.3:
+ AdwAlertDialog: Expose body text as a11y description
+ AdwDialog:
- Fix a memory leak
- Speed up switching presentation
+ AdwPreferencesPage: Add an a11y relation to the description
+ AdwSpinRow: Set accessible role to presentation
+ AdwSwitchRow: Set accessible role to switch
+ AdwTabBar/Overview: Fix a use after free when closing tabs
+ Stylesheet: Fix a specificity issue with scrolled windows in
popovers
+ Docs:
- Don't annotate user_data params with closure
- Fix typos in migrating to breakpoints page
+ Updated translations.
==== libass ====
Version update (0.17.1 -> 0.17.3)
- Update to 0.17.3:
* Fix 0.17.2 regression in the fontconfig fontprovider leading to
undesirable widths being chosen from large typographic families
* Fix configure generated with slibtool-provided autoconf macros
* Fix make check for shared-only builds
* Constify some API parameters in a backwards-compatible manner
* Add new ass_malloc and ass_free API functions
* Tweak default optimization flags
* Speed up parsing of events with very long override blocks
* Improve handling of HarfBuzz-related failures
- reintroduce 'make check' as the issue has been fixed upstream
- Update to 0.17.2:
* This release brings optimized assembly routines for aarch64,
as well as numerous individual improvements and fixes.
* Detailed Changes:
- Fix rendering of \h in certain cases
- Fix a minor memory leak in the CoreText and DirectWrite font provider
- Fix wrong ASS_Image dimensions for huge BorderStyle=4 backgrounds
potentially leading to out of bound reads by API users
- Improve quality of animated rectangular clips
- Improve accuracy of cache limits
- Full-Unicode cmaps are now always preferred
- Improve font selection compatibility in the DirectWrite font provider
- Improved documentation
- Updating selective overrides now forces a cache clear to avoid issues
with outdated caches
- Frame and storage resolutions are now limited to what a single ASS_Image
can represent
- make check now runs checkasm if assembly is enabled
- CoreText can now be used on Mac OS X 10.5
- Meson/muon is now offered as a secondary build system bringing back
first-party MSVC support
- Note however it is not at feature parity with autotools in all cases
- aarch64: add optimized assembly routines covering the same set as on x86;
they work on both little and big endian systems
- x86: add SSSE3 versions of some assembly routines to help CPUs without
AVX2
- x86: it is now possible to build binaries with optimized assembly an
SHSTK support
- Improve VSFilter compatibility
- 'make check' is broken for --disable-static builds because checkasm needs to
access symbols that aren't part of the public API, so just disable it.
- Require libunibreak during build for better linebreaking of
unicode text.
==== libei ====
Version update (1.2.1 -> 1.3.0)
- Update to release 1.3.0
* Devices without regions or with multiple regions previously
failed region checks for touch events and absolute pointer
events (now fixed).
* liboeffis's ConnectToEIS dbus call is now async to avoid stalling
the client.
* many clarifications for ambiguity in the protocol documentation.
==== libgphoto2 ====
Subpackages: libgphoto2-6 libgphoto2_port12
- Adding libgphoto2-c99.patch so that the package builds for 32bit
with GCC 14.
- Using %autosetup -p1 because this is the prefered way to apply
patches.
==== libheif ====
Version update (1.18.1 -> 1.18.2)
Subpackages: gdk-pixbuf-loader-libheif libheif-aom libheif-dav1d libheif-ffmpeg libheif-jpeg libheif-openjpeg libheif-rav1e libheif-svtenc libheif1
- update to 1.18.2:
* fix regression that Exif orientation was not correctly reset when
converting rotated HEIF (heif-dec)
* swap Exif width/height when rotating image by 90 degrees
* fix memory leak in OpenJPEG decoding plugin
* pay attention to DESTDIR variable when installing heif-convert symlink
==== liblc3 ====
Version update (1.0.4 -> 1.1.1)
- Update to version 1.1.1:
+ Wasm Compilation cleanup
+ build: fix rpath issue
+ Add build-macos-meson job
+ Bluetooth Conformance test updated for LC3
- Changes from version 1.1.0:
+ LC3 Plus features
+ Python library wrapper
+ Add WASM compilation target
==== libnftnl ====
Version update (1.2.6 -> 1.2.7)
- Update to release 1.2.7
* Avoid potential use-after-free when clearing set's expression
list
* Avoid misc buffer overflows in attribute setters
* Implement nftnl_obj_unset symbol already exported in
libnftnl.map
* Remove unimplemented symbols from libnftnl.map
* Validate per-expression and per-object attribute value and
data length
* Fix synproxy object setter with unaligned data
==== libqt5-qtwebengine ====
- Add ffmpeg 7 compatibility patch (Picked from Arch):
* qt5-webengine-ffmpeg7.patch
==== libshumate ====
Version update (1.2.2 -> 1.2.3)
Subpackages: libshumate-1_0-1 typelib-1_0-Shumate-1_0
- Update to version 1.2.3:
+ Fix build with -Dvector_renderer=false
==== liburing ====
- Skip test buf-ring-nommap.t if ENOMEM appears (happens in ppc64le arch).
* test-buf-ring-nommap-skip-the-test-on-queue-init-ENO.patch
==== libxml++30 ====
Version update (3.2.4 -> 3.2.5)
- Update to version 3.2.5:
+ Documentation:
- Update Visual Studio build docs
- Parser docs: Add a link to parser options
+ Meson build:
- Detect if we build from a git subtree
- Don't copy files with configure_file()
- Fix the evaluation of is_git_build on Windows
- Backport libxml2 CMake support from libxml++-5.0
- Don't fail if warning_level=everything
- Don't require the 'dot' command to build the documentation
- Add the build-manual option
- Add bcrypt dependency when libxml2 is a subproject
+ Build: Make it compatible with libxml2 >= 2.12.0 by modifying
[#]include directives
- Add check section and run meson_test macro.
==== lvm2 ====
Subpackages: liblvm2cmd2_03
- lvm2-monitor.service fails to start (boo#1228854)
+ bug-1228854_lvm2-monitor-service-start-after-system-fully-booted.patch
==== lvm2-device-mapper ====
Subpackages: device-mapper libdevmapper-event1_03 libdevmapper1_03
- lvm2-monitor.service fails to start (boo#1228854)
+ bug-1228854_lvm2-monitor-service-start-after-system-fully-booted.patch
==== lz4 ====
- Switch to cmake build system: Creates extra cmake modules for
consuming projects
==== makedumpfile ====
- add (bsc#1226183)
* make-reserve_diskspace-do-nothing-for-flattened-form.patch
==== mutter ====
- Fix build if sle_version is defined: Patch3 no longer exists, and
add back Patch4 for SLE builds that was mistakenly removed in
last change.
==== ncurses ====
Version update (6.5.20240713 -> 6.5.20240810)
Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen
- Add patch fix-20240810.patch
* Workaround for changes in last patch 20240810 that is provide
GLOB_FULLPATH_POSIX and GLOB_FULLPATH_OTHER in status script
- Add ncurses patch 20240810
+ modify misc/Makefile.in and misc/run_tic.in so that $DESTDIR is set
and used only in the makefile.
+ modify CF_WITH_PKG_CONFIG_LIBDIR to allow for pkg-config using
DOS/Windows pathname syntax (report by Eli Zaretskii).
+ improve glob-expressions in configure script
+ remove unused Get_Menu_Screen() macro from menu.priv.h
+ update config.guess, config.sub
- Add ncurses patch 20240727
+ improve formatting/style of manpages (patches by Branden Robinson).
+ fixes for compiler warnings/cppcheck.
+ modify wattron/wattroff calls in form/m_post.c to call wattr_on and
wattr_off to omit cast used in the former for X/Open compatibility
(patch by Bill Gray).
+ modify wezterm, omitting its broken left/right margin feature (report
by Thayne McCombs) -TD
- Modify patch ncurses-6.4.dif to get offsets correct
- Add ncurses patch 20240720
+ improve formatting/style of manpages (patches by Branden Robinson).
+ modify configure script and misc/Makefile to accept glob expressions
that include Windows/DOS drive-letters (report by Eli Zaretskii).
+ fix misspelled ifdef and correct return-value of _nc_mingw_tcflush in
win_driver.c (report/patch by Eli Zaretskii).
==== openSUSE-release ====
Version update (20240812 -> 20240818)
Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd
- automatically generated by openSUSE-release-tools/pkglistgen
==== ovmf ====
Subpackages: qemu-uefi-aarch64
- Add ovmf-x86_64-sev flavor to X64 against AMD SEV.
- Moved "-D SECURE_BOOT_ENABLE" from OVMF_FLAGS to EXTRA_FLAGS_X64,
, BUILD_OPTIONS_X86, BUILD_OPTIONS_AA64 and BUILD_OPTIONS_RV64
because SEV can NOT work with secure boot.
- Removed ovmf-Revert-OvmfPkg-PlatformPei-Update-ReserveEmuVariable.patch
because the SEV ovmf be separated from X64 ovmf as an independent flavor.
- The original patch reverts "58eb8517ad OvmfPkg/PlatformPei: Update
ReserveEmuVariableNvStore" which affects all ovmf flavor.
- The secure boot be disabled in SEV flavor, so we do not need revert
58eb8517ad anymore. (bsc#1209266)
- Add 50-ovmf-x86_64-sev.json to descriptors.tar.xz for SEV flavor
- Removed features tag:
"acpi-s3", "requires-smm", "secure-boot", "enrolled-keys"
- Add features tag:
"amd-sev", "amd-sev-es", "amd-sev-snp"
==== patterns-base ====
Subpackages: patterns-base-apparmor patterns-base-base patterns-base-basesystem patterns-base-basic_desktop patterns-base-console patterns-base-enhanced_base patterns-base-minimal_base patterns-base-selinux patterns-base-sw_management patterns-base-transactional_base patterns-base-x11 patterns-base-x11_enhanced
- Remove nfsidmap, package got dropped
- Remove nfs-client and autofs: in most scenarios, especially
desktops, no longer used, but pull in many "deprecated" packages
==== patterns-media ====
Subpackages: patterns-media-rest_cd_core patterns-media-rest_dvd
- Ensure autofs is on the DVD: it is tested by openQA in staging.
==== pcre2 ====
Version update (10.43 -> 10.44)
Subpackages: libpcre2-16-0 libpcre2-32-0 libpcre2-8-0
- Fix GitHub issue #415: Test suite fails when targeting i686.
The fix is taken straight from PR #418, also on GitHub.
- Add patch file:
* pcre2-10.44-github-issue-415.patch
- update to 10.44:
* This is mostly a bug-fix and tidying release. There is one
new function, to set a maximum size for a compiled pattern.
The maximum name length for groups is increased to 128.
* Some auxiliary files for building under VMS are added.
==== php8 ====
Version update (8.3.9 -> 8.3.10)
Subpackages: php8-ctype php8-dom php8-iconv php8-openssl php8-pdo php8-sqlite php8-tokenizer php8-xmlreader php8-xmlwriter
- version update to 8.3.10
Core:
Fixed bug GH-13922 (Fixed support for systems with sysconf(_SC_GETPW_R_SIZE_MAX) == -1).
Fixed bug GH-14626 (Fix is_zend_ptr() for huge blocks).
Fixed bug GH-14590 (Memory leak in FPM test gh13563-conf-bool-env.phpt.
Fixed OSS-Fuzz #69765.
Fixed bug GH-14741 (Segmentation fault in Zend/zend_types.h).
Fixed bug GH-14969 (Use-after-free in property coercion with __toString()).
Dom:
Fixed bug GH-14702 (DOMDocument::xinclude() crash).
Fileinfo:
Fixed bug GH-14888 (README.REDIST.BINS refers to non-existing LICENSE).
Gd:
ext/gd/tests/gh10614.phpt: skip if no PNG support.
restored warning instead of fata error.
LibXML:
Fixed bug GH-14563 (Build failure with libxml2 v2.13.0).
Opcache:
Fixed bug GH-14550 (No warning message when Zend DTrace is enabled that opcache.jit is implictly disabled).
Output:
Fixed bug GH-14808 (Unexpected null pointer in Zend/zend_string.h with empty output buffer).
PDO:
Fixed bug GH-14712 (Crash with PDORow access to null property).
Phar:
Fixed bug GH-14603 (null string from zip entry).
PHPDBG:
Fixed bug GH-14596 (crashes with ASAN and ZEND_RC_DEBUG=1).
Fixed bug GH-14553 (echo output trimmed at NULL byte).
Shmop:
Fixed bug GH-14537 (shmop Windows 11 crashes the process).
SPL:
Fixed bug GH-14639 (Member access within null pointer in ext/spl/spl_observer.c).
Standard:
Fixed bug GH-14775 (range function overflow with negative step argument).
Fix 32-bit wordwrap test failures.
Fixed bug GH-14774 (time_sleep_until overflow).
Streams:
Fixed bug GH-14930 (Custom stream wrapper dir_readdir output truncated to 255 characters in PHP 8.3).
Tidy:
Fix memory leak in tidy_repair_file().
Treewide:
Fix compatibility with libxml2 2.13.2.
XML:
Move away from to-be-deprecated libxml fields.
Fixed bug GH-14834 (Error installing PHP when --with-pear is used).
==== polkit ====
Subpackages: libpolkit-agent-1-0 libpolkit-gobject-1-0 pkexec typelib-1_0-Polkit-1_0
- BuildRequire gettext-devel instead of gettext: Allows OBS to
shortcut throught gettext-runtime-mini.
==== protobuf ====
Subpackages: libprotobuf-lite25_4_0 libprotobuf25_4_0
- tweak and correct how minimum version of abseil is specified
(20230125 to 20230125.3)
- Remove explicit requirements of the protobuf-devel package, as
the they are autogenerated when needed
==== protobuf-c ====
- BuildRequire a C++ compiler, previously pulled in via protobuf
==== ptools ====
- Added fix-32bit-cast.diff which replaces a cast which is OK for
64bit targets but not for 32 bit targets to make the package
buildable with GCC 14 on i586.
==== python-M2Crypto ====
Version update (0.40.0 -> 0.42.0)
- Update 0.42.0:
- allow ASN1_{Integer,String} be initialized directly
- minimal infrastructure for type hints for a C extension and
some type hints for some basic modules
- time_t on 32bit Linux is 32bit (integer) not 64bit (long)
- EOS for CentOS 7
- correct checking for OpenSSL version number on Windows
- make compatible with Python 3.13 (replace PyEval_CallObject
with PyObject_CallObject)
- fix typo in extern function signature (and proper type of
engine_ctrl_cmd_string())
- move the package to Sorucehut
- setup CI to use Sourcehut CI
- setup CI on GitLab for Windows as well (remove Appveyor)
- initial draft of documentation for migration to
pyca/cryptography
- fix Read the Docs configuration (contributed kindly by Facundo
Tuesca)
- Remove upstreamed 32bit_ASN1_Time.patch
- Remove python-M2Crypto.keyring, because PyPI broke GPG support
==== python-anyio ====
Version update (4.3.0 -> 4.4.0)
- update to 4.4.0:
* Added the BlockingPortalProvider class to aid with
constructing synchronous counterparts to asynchronous
interfaces that would otherwise require multiple blocking
portals
* Added __slots__ to AsyncResource so that child classes can
use __slots__
* Added the TaskInfo.has_pending_cancellation() method
* Fixed erroneous RuntimeError: called 'started' twice on the
same task status when cancelling a task in a TaskGroup
created with the start() method before the first checkpoint
is reached after calling task_status.started()
* Fixed two bugs with TaskGroup.start() on asyncio: Fixed
erroneous RuntimeError: called 'started' twice on the same
task status when cancelling a task in a TaskGroup created
with the start() method before the first checkpoint is
reached after calling task_status.started() (#706; PR by
Dominik Schwabe) Fixed the entire task group being cancelled
if a TaskGroup.start() call gets cancelled (#685, #710)
* Fixed erroneous RuntimeError: called 'started' twice on the
same task status when cancelling a task in a TaskGroup
created with the start() method before the first checkpoint
is reached after calling task_status.started()
* Fixed the entire task group being cancelled if a
TaskGroup.start() call gets cancelled
* Fixed a race condition that caused crashes when multiple
event loops of the same backend were running in separate
threads and simultaneously attempted to use AnyIO for their
first time
* Fixed cancellation delivery on asyncio incrementing the wrong
cancel scope's cancellation counter when cascading a cancel
operation to a child scope, thus failing to uncancel the host
task
* Fixed erroneous TypedAttributeLookupError if a typed
attribute getter raises KeyError
* Fixed the asyncio backend not respecting the
PYTHONASYNCIODEBUG environment variable when setting the
debug flag in anyio.run()
* Fixed SocketStream.receive() not detecting EOF on asyncio if
there is also data in the read buffer
* Fixed MemoryObjectStream dropping an item if the item is
delivered to a recipient that is waiting to receive an item
but has a cancellation pending
* Emit a ResourceWarning for MemoryObjectReceiveStream and
MemoryObjectSendStream that were garbage collected without
being closed (PR by Andrey Kazantcev)
* Fixed MemoryObjectSendStream.send() not raising
BrokenResourceError when the last corresponding
MemoryObjectReceiveStream is closed while waiting to send a
falsey item
==== python-argcomplete ====
- require ca-certificates-mozilla for the pip >= 24.2
==== python-cryptography ====
- Fix building optimized binaries with debuginfo.
- Update building of Rust modules to use modern cargo_vendor
service
- Remove unneeded use-offline-build.patch
==== qt6-webengine ====
Subpackages: libQt6WebEngineCore6 libQt6WebEngineQuick6 libQt6WebEngineWidgets6 qt6-webengine-imports
- Add patch to build qtwebengine with ffmpeg 7 (picked from Arch)
* qtwebengine-ffmpeg-7.patch
==== rdma-core ====
Version update (52.0 -> 53.0)
Subpackages: libefa1 libhns1 libibverbs libibverbs1 libmana1 libmlx4-1 libmlx5-1 librdmacm1 rdma-ndd
- Update to rdma-core v53.0
- No release notes available
- Remove Added-suffix-libdrm-to-CMakeLists.txt-for-drm.patch
as it was merged upstream.
==== selinux-policy ====
Version update (20240809 -> 20240814)
Subpackages: selinux-policy-targeted
- Update to version 20240814:
* Dontaudit dac_override of fstab generator (bsc#1229127)
- Drop varrun-convert.sh script as it causes issues with
container-selinux update (bsc#1228951)
- Update to version 20240812:
* Update libvirt policy
* Add port 80/udp and 443/udp to http_port_t definition
* Additional updates stalld policy for bpf usage
* Label systemd-pcrextend and systemd-pcrlock properly
* Allow coreos_installer_t work with partitions
* Revert "Allow coreos-installer-generator work with partitions"
* Add policy for systemd-pcrextend
* Update policy for systemd-getty-generator
* Allow ip command write to ipsec's logs
* Allow virt_driver_domain read virtd-lxc files in /proc
* Revert "Allow svirt read virtqemud fifo files"
* Update virtqemud policy for libguestfs usage
* Allow virtproxyd create and use its private tmp files
* Allow virtproxyd read network state
* Allow virt_driver_domain create and use log files in /var/log
* Allow samba-dcerpcd work with ctdb cluster
* Allow NetworkManager_dispatcher_t send SIGKILL to plugins
* Allow setroubleshootd execute sendmail with a domain transition
* Allow key.dns_resolve set attributes on the kernel key ring
* Update qatlib policy for v24.02 with new features
* Label /var/lib/systemd/sleep with systemd_sleep_var_lib_t
* Allow tlp status power services
* Allow virtqemud domain transition on passt execution
* Allow virt_driver_domain connect to systemd-userdbd over a unix socket
* Allow boothd connect to systemd-userdbd over a unix socket
* Update policy for awstats scripts
* Allow bitlbee execute generic programs in system bin directories
* Allow login_userdomain read aliases file
* Allow login_userdomain read ipsec config files
* Allow login_userdomain read all pid files
* Allow rsyslog read systemd-logind session files
* Allow libvirt-dbus stream connect to virtlxcd
==== sensors ====
Subpackages: libsensors4
- Drop lm_sensors-revert-6b5a19b708.patch because the previously
incompatible types have been changed in the callee in package
rrdtool too, which means that there is a type incompatibility again.
Because the other change reportedly makes more sense, I'm dropping
this one.
==== shadow ====
Subpackages: libsubid5 login_defs
- Disable flushing sssd caches. The sssd's files provider is no
longer available.
==== suse-module-tools ====
Version update (16.0.48 -> 16.0.49)
Subpackages: suse-module-tools-scriptlets
- Update to version 16.0.49:
* Require sdbootutil if already installed
==== sysvinit ====
Version update (3.08 -> 3.10)
- Add patch killproc-2.23.dif
* Fix shell command in Makefile to get detection statx declaration correct
- Update to sysvinit 3.10
* When the user executes "machinectl stop", systemd sends SIGRTMIN+4 to PID 1
in the container, and expects that to initiate a graceful shutdown (power-off).
SysV init now catches this signal and initiates a shutdown (shutdown -hP now).
- floppym provided patch to accomplish this.
* Fix issue in bootlogd which could cause the service to enter an endless loop
(and use too much CPU) when it is able to open a device for writing, but not actually
able to write to it. This resulted in bootlogd closing and re-opening the device over
and over. Now bootlogd should simply fail gracefully when it cannot write to an open
file/device.
* Fix formatting in shutdown.8 manual page. Cleaned up whitespace and special characters.
* Patch for man/Makefile to fix the clean recipe.
Provided by Lucas Nussabaum and Mark Hindley
* On Linux systems, allow reboot command to pass a message
to the system firmware during the restart. This is
accomplished with the -m flag.
* Patch from kraj which allows hddown to compile
when musl is the C library.
==== texlive ====
- Add patch source-pdftex-gcc14.patch
* Add fix in change file pdftex.ch to really fix boo#1228342
(Thanks goes to Andreas Scherer)
- Remove former work around
- Added -Wno-error=incompatible-pointer-types to optflags to work
around boo#1228342 and enable build with GCC 14 on 32bit
architectures.
==== totem-pl-parser ====
Version update (3.26.6 -> 3.26.6+30)
Subpackages: libtotem-plparser-mini18 libtotem-plparser18 typelib-1_0-TotemPlParser-1_0
- Update to version 3.26.6+30:
+ plparser:
- Fix guard return type.
- Fix TotemPlParserMetadata in bindings.
- Fix return value from cancelled calls.
- Fix retval when guard are triggered.
+ Various test fixes.
+ Updated translations.
- Add pkgconfig(uchardet) BuildRequires and pass
enable-uchardet=yes to meson, build ucharded support.
- Use ldconfig_scriptlets macro for post(un) handling.
==== unbound ====
Version update (1.20.0 -> 1.21.0)
Subpackages: libunbound8 unbound-anchor
- Update to 1.21.0:
Security Fixes:
* Merge #1073: fix null pointer dereference issue in function
ub_ctx_set_fwd.
[CVE-2024-43167, bsc#1229068]
Features:
* Fix #1071: [FR] Clear both in-memory and cachedb module cache
with `unbound-control flush*` commands.
* Fix #144: Port ipset to BSD pf tables.
* Add dnstap-sample-rate that logs only 1/N messages, for high
volume server environments. Thanks Dan Luther.
* Add root key 38696 from 2024 for DNSSEC validation. It is added
to the default root keys in unbound-anchor. The content can be
inspected with `unbound-anchor -l`.
* Merge #1090: Cookie secret file. Adds `cookie-secret-file:
"unbound_cookiesecrets.txt"` option to store cookie secrets for
EDNS COOKIE secret rollover. The remote control
add_cookie_secret, activate_cookie_secret and
drop_cookie_secret commands can be used for rollover, the
command print_cookie_secrets shows the values in use.
Bug Fixes:
* Fix CAMP issues with global quota. Thanks to Huayi
Duan, Marco Bearzi, Jodok Vieli, and Cagin Tanir from NetSec
group, ETH Zurich.
* Fix CacheFlush issues with limit on NS RRs. Thanks to Yehuda
Afek, Anat Bremler-Barr, Shoham Danino and Yuval Shavitt
(Tel-Aviv University and Reichman University).
* Merge #1062: Fix potential overflow bug while parsing port in
function cfg_mark_ports.
* Fix for #1062: declaration before statement, avoid print of
null, and redundant check for array size.
* Fix to squelch udp connect errors in the log at low verbosity
about invalid argument for IPv6 link local addresses.
* Fix when the mesh jostle is exceeded that nameserver targets
are marked as resolved, so that the lookup is not stuck on the
requestlist.
* Add missing common functions to tdir tests.
* Merge #1070: Fix rtt assignement for low values of
infra-cache-max-rtt.
* Merge #1069: Fix unbound-control stdin commands for
multi-process Unbounds.
* Fix unbound-control commands that read stdin in multi-process
operation (local_zones_remove, local_zones, local_datas_remove,
local_datas, view_local_datas_remove, view_local_datas). They
will be properly distributed to all processes. dump_cache and
load_cache are no longer supported in multi-process operation.
* Remove testdata/remote-threaded.tdir.
testdata/09-unbound-control.tdir now checks both single and
multi process/thread operation.
* Fix to print a parse error when config is read with no name for
a forward-zone, stub-zone or view.
* Fix for parse end of forward-zone, stub-zone and view.
* Fix for #1064: Fix that cachedb expired messages are considered
insecure, and thus can be served to clients when dnssec is
enabled.
* Fix #1059: Intermittent DNS blocking failure with local-zone
and always_nxdomain. Addition of local_zones dynamically via
unbound-control was not finding the zone's parent correctly.
* Fix #1064: Unbound 1.20 Cachedb broken?
* Fix unused variable warning on compilation with no thread
support.
* unbound-control-setup: check openssl availability before doing
anything, patch from Michael Tokarev.
* Update patch to remove 'command' shell builtin and update error
text.
* Fix to enable that SERVFAIL is cached, for a short period, for
more cases. In the cases where limits are exceeded.
* Fix spelling of tcp-idle-timeout docs, from Michael Tokarev.
* Merge #1078: Only check old pid if no username.
* Fix #1079: tags from tagged rpz zones are no longer honored
after upgrade from 1.19.3 to 1.20.0.
* Fix for #1079: fix RPZ taglist in iterator callback that no
client info is like no taglist intersection.
* Fix to squelch connection reset by peer errors from log. And
fix that the tcp read errors are labeled as initial for the
first calls.
* Merge #1080: AddressSanitizer detection in tdir tests and
memory leak fixes.
* Fix memory leak when reload_keep_cache is used and num-threads
changes.
* Fix memory leak on exit for unbound-dnstap-socket; creates
false negatives during testing.
* Fix memory leak in setup of dsa sig.
* Fix typos for 'the the' in text.
* Fix validation for repeated use of a DNAME record.
* Add unit test for validation of repeated use of a DNAME record.
* Fix #1091: Build fails with OpenSSL >= 3.0 built with
OPENSSL_NO_DEPRECATED.
* Fix #1092: Ubuntu 22.04 Jammy fails to compile unbound 1.20.0;
by adding helpful text for the Python interpreter version and
allowing the default pkg-config unavailability error message to
be shown.
* Fix pkg-config availability check in dnstap/dnstap.m4 and
systemd.m4.
* Explicitly set the RD bit for the mesh query flags when
prefetching. These queries have no waiting client but they need
to be treated as recursive.
* Fix ip-ratelimit-cookie setting, it was not applied.
* Fix to remove unused include from the readzone test program.
... changelog too long, skipping 91 lines ...
example.conf.
==== virt-v2v ====
Version update (2.5.5 -> 2.5.6)
Subpackages: virt-v2v-bash-completion
- Update to virt-v2v 2.5.6 (jsc#PED-6305)
* -i ova: Ignore dot-underscore-files in OVA files
* mlcustomize: firstboot: Use Linux path for Powershell script path
* mlcustomize: firstboot: Use powershell.exe instead of path
* mlcustomize: firstboot: Use Powershell -NoProfile flag
* mlcustomize: Revert delay installation of qemu-ga MSI
* --mac: Allow gw and len fields to be empty
* Debugging enhancements
==== webkit2gtk3 ====
Version update (2.44.2 -> 2.44.3)
Subpackages: libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles
- Update to version 2.44.3:
+ Fix web process cache suspend/resume when sandbox is enabled.
+ Fix accelerated images dissapearing after scrolling.
+ Fix video flickering with DMA-BUF sink.
+ Fix pointer lock on X11.
+ Fix movement delta on mouse events in GTK3.
+ Undeprecate console message API and make it available in 2022
API.
+ Fix several crashes and rendering issues.
- Drop patches now upstream:
9d5844679af8f84036f1b800307e799bd7ab73ba.patch
webkit2gtk3-CVE-2024-40776.patch
webkit2gtk3-CVE-2024-40779.patch
webkit2gtk3-CVE-2024-40780.patch
webkit2gtk3-CVE-2024-40782.patch
==== wtmpdb ====
Version update (0.13.0+git.20240726 -> 0.13.0+git.20240814)
Subpackages: libwtmpdb0
- Update to version 0.13.0+git.20240814:
* wtmpdb-update-boot service requires dbus
==== xdm ====
- sysconfig/windowmanager is deprecated since 7 years, don't
read it if it does not exist.
==== xfce4-notifyd ====
Version update (0.9.4 -> 0.9.6)
Subpackages: xfce4-notifyd-lang
- update to 0.9.6:
* Use shared_module() for panel plugin meson build
* Fix menu being destroyed before item activation handlers running
* Translation Updates
- update to 0.9.5:
* Add an option to set the minimum width of notification windows
* Fix include issue with meson build
* Only emblem the panel plugin icon when theme lacks the 'new' variant
* Destroy and recreate the panel menu every time it's popped up
* Add meson build files
* Fix uninitialized field warning
* Move NOTIFICATIONS_SPEC_VERSION out of the build system
* Remove redundant positioning code from Wayland path
* Use different layer-shell anchors on Wayland
* build: clang: Silence -Wcast-align
* common: Explicitly depend on gio-unix-2.0
* Fix positioning on Wayland in multi-monitor setups
* Set output on layer-shell surface on Wayland
* Fix active-monitor notification positioning on Wayland
* Translation Updates
- Rebase xfce4-notifyd-relax-x11-version.patch
==== xfwm4 ====
Subpackages: xfwm4-lang
- Fix user-after-free in tabwinRemoveClient with
ce9f6e1187867c4fbb7935e08a9ab4d9d8dea8c3.patch (bsc#1228524)
==== yast2-bootloader ====
Version update (5.0.10 -> 5.0.11)
- add arm and riscv64 as not supported for secure boot
(bsc#1229070)
- 5.0.11
- Rename menue_timeout (menü) to menu_timeout
- Reference in text messages to menu