{"affected":[{"ecosystem_specific":{"binaries":[{"tcl-devel":"8.6.12-11.3.1","tk-devel":"8.6.12-11.3.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","name":"tcl","purl":"pkg:rpm/suse/tcl&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"8.6.12-11.3.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"tcl-devel":"8.6.12-11.3.1","tk-devel":"8.6.12-11.3.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","name":"tk","purl":"pkg:rpm/suse/tk&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"8.6.12-11.3.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"tcl":"8.6.12-11.3.1","tcl-32bit":"8.6.12-11.3.1","tk":"8.6.12-11.3.1","tk-32bit":"8.6.12-11.3.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","name":"tcl","purl":"pkg:rpm/suse/tcl&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"8.6.12-11.3.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"tcl":"8.6.12-11.3.1","tcl-32bit":"8.6.12-11.3.1","tk":"8.6.12-11.3.1","tk-32bit":"8.6.12-11.3.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","name":"tk","purl":"pkg:rpm/suse/tk&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"8.6.12-11.3.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"tcl":"8.6.12-11.3.1","tcl-32bit":"8.6.12-11.3.1","tk":"8.6.12-11.3.1","tk-32bit":"8.6.12-11.3.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","name":"tcl","purl":"pkg:rpm/suse/tcl&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"8.6.12-11.3.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"tcl":"8.6.12-11.3.1","tcl-32bit":"8.6.12-11.3.1","tk":"8.6.12-11.3.1","tk-32bit":"8.6.12-11.3.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","name":"tk","purl":"pkg:rpm/suse/tk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"8.6.12-11.3.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This feature update for tcl and tk fix the following issues:\n\nUpdate tcl and tk to version 8.6.12 (jsc#SLE-21015, jsc#SLE-23283):\n\n- Move tcl.macros to /usr/lib/rpm/macros.d (bsc#1185662) \n- Use FAT LTO objects in order to provide proper static library (bsc#1138797)\n- Fix tcl build issues on s390 architecture (bnc#1085480)\n- Fix tcl build issues caused by deprecated libieee in tcl configs (bsc#1179615, bsc#1181840)\n- Whitelist PowerPC tests that are not needed  (bsc#1072657)\n- Add [combobox current] support 'end' index\n- Add fixes in [text] bindings\n- Add missing 'deferred clear code' support to GIF photo images\n- Add new virtual event <<TkWorldChanged>> \n- Add new keycodes: CodeInput, SingleCandidate, MultipleCandidate, PreviousCandidate\n- Add new support for POSIX error: EILSEQ\n- Add new command [tcl::unsupported::corotype]\n- Add new command [tcl::unsupported::timerate] for performance testing\n- Add new option -state to [ttk::scale]\n- Add portable keycodes: OE, oe, Ydiaeresis\n- Add support for backrefs in [array names -regexp]\n- Add support for Unicode 14\n- Disfavor Master/Slave terminology\n- Enhance [oo::object] to acquire or lose a class identity dynamically\n- Fix canvas rotated text overlap detection\n- Fix canvas closed polylines yo fully honor -joinstyle\n- Fix display of Long non-wrapped lines in text\n- Fix display treeview focus ring when -selectmode none\n- Fix focus events not to break entry validation\n- Fix [package prefer stable] failing case\n- Fix auto_path initialization by Safe Base interps\n- Fix bad interaction between grab and mouse pointer warp\n- Fix borderwidth calculations on menu items\n- Fix cascade tearoff menu redraw artifacts\n- Fix coords rounding when drawing canvas items\n- Fix corrupt result from [$c postscript] with -file or -channel\n- Fix errno management in socket full close\n- Fix failure when a [proc] argument name is computed, not literal\n- Fix focus on unmapped windows\n- Fix handling of duplicates in spinbox -values list\n- Fix incomplete read of multi-image GIF\n- Fix initialization order of static package in wish \n- Fix issue when trying to display angled text without Xft\n- Fix issue with font initialization when no font is installed\n- Fix problems with Noto Color Emoji font\n- Fix race conditions in [file delete] and [file mkdir]\n- Fix Std channel initialization for multi-thread operations\n- Fix tearoff menu redraw artifacts\n- Fix up arrow key in [text] to correctly move cursor to index 1.0\n- Fix various cursor issues\n- Fix various encoding issues\n- Fix various fontchooser issues\n- Fix various issues causing crashes and hang in\n- Fix various memory issues\n- Fix various scrolling bugs and add improvements\n- Fix 32/64-bit confusion of FS DIR operations reported for AIX\n- Improve appearance of text selection in [*entry] widgets\n- Improve checkbutton handling of -selectcolor\n- Improve handling of resolution changes\n- Improve multi-thread safety when Xft is in use \n- Improve ttk high-contrast-mode support\n- Improve emoji support\n- Improve legacy support for [tk_setPalette]\n- Make combobox -postoffset option work with default style\n- Make spinbox use proper names in query of option database\n- Menu flaws when empty menubar clicked\n- New index argument in [$menubutton post x y index]\n- Preserve canvas tag list order during add/delete\n- Prevent cross-manager loops of geom management\n- Rewrite of zlib inflation for multi-stream and completeness\n- Run fileevents in proper thread after [thread::attach $channel]\n- Stop [unload] corruption of list of loaded packages\n- Stop app switching exposing withdrawn windows as zombies\n- Tk now denied access to PRIMARY selection from safe interps\n- TkpDrawAngledCharsInContext leaked a CGColor\n- Try to restore Tcl's [update] command when Tk is unloaded\n- Changed [info * methods] to include mixins\n- [package require] is now NR-enabled\n\nThe following fixes might show some potential incompatibilities with existing software:\n\n- Revised [binary (en|de)code base64] for RFC compliance and roundtrip\n- Fix precision of Tcl_DStringAppendElement quoting of #\n- Extended [clock scan] ISO format and time zone support\n- Allow for select/copy from disabled text widget on all platforms\n- Revised case of [info loaded] module names\n- [info hostname] reports DNS name, not NetBIOS name\n- Force -eofchar \\032 when evaluating library scripts\n- Revised error messages: 'too few' => 'not enough'\n- Performed rewrite of Tk event loop to prevent ring overflow\n- Refactored all MouseWheel bindings\n- Revised precision of ::scale widget tick mark values\n- Prevent transient window cycles (crashed on Aqua)\n- Builds no longer use -lieee\n- Quoting of command line arguments by [exec] on Windows revised. Prior\n  quoting rules left holes where some values would not pass through, but\n  could trigger substitutions or program execution. See\n  https://core.tcl-lang.org/tcl/info/21b0629c81 \n- [lreplace] accepts all out-of-range index values\n","id":"SUSE-FU-2022:0484-1","modified":"2022-02-18T03:29:03Z","published":"2022-02-18T03:29:03Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/-2022-484/suse-fu-20220484-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1072657"},{"type":"REPORT","url":"https://bugzilla.suse.com/1085480"},{"type":"REPORT","url":"https://bugzilla.suse.com/1138797"},{"type":"REPORT","url":"https://bugzilla.suse.com/1179615"},{"type":"REPORT","url":"https://bugzilla.suse.com/1181840"},{"type":"REPORT","url":"https://bugzilla.suse.com/1185662"},{"type":"REPORT","url":"https://bugzilla.suse.com/1195257"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-35331"}],"related":["CVE-2021-35331"],"summary":"Feature update for tcl and tk","upstream":["CVE-2021-35331"]}