Packages changed: PackageKit busybox-links gdbm (1.18.1 -> 1.19) gnome-shell harfbuzz (2.7.2 -> 2.7.4) kernel-firmware (20201130 -> 20201218) kernel-source (5.10.1 -> 5.10.3) libimagequant (2.12.6 -> 2.13.1) libjpeg-turbo libproxy (0.4.15 -> 0.4.17) libqt5-qtbase mobile-broadband-provider-info (20190618 -> 20201225) plasma5-workspace pngquant (2.12.6 -> 2.13.1) python-pytz (2020.4 -> 2020.5) system-users tiff (4.1.0 -> 4.2.0) === Details === ==== PackageKit ==== Subpackages: PackageKit-backend-zypp libpackagekit-glib2-18 - Add PackageKit-fix-crash-pre-dbus.patch: Do not crash when calling pk_dbus_get_uid() before D-Bus is setup. ==== busybox-links ==== Subpackages: busybox-coreutils busybox-gawk busybox-grep busybox-gzip busybox-psmisc busybox-sed - busybox-sendmail also conflicts with the postfix-bdb flavor. ==== gdbm ==== Version update (1.18.1 -> 1.19) Subpackages: libgdbm6 libgdbm_compat4 - version update to 1.19 * Pre-read the memory mapped regions on systems that support it. This speeds up operations on big databases. * gdbmtool: tagged initialization of structured data Initializers for structured data can be given in tagged form, e.g.: store somekey { status=2, id={a,u,x}, name="foo" } * Bugfixes: * * Preserve locking type during database reorganization - modified patches % gdbm-no-build-date.patch (refreshed) - deleted patches - gdbm-no-common.patch (upstreamed) ==== gnome-shell ==== Subpackages: gnome-shell-calendar - Re-enable gnome-shell-private-connection.patch: it was rebased back in October, but not enabled (boo#1180230). - Add missing pkgconfig(libpipewire-0.3) BuildRequires and gstreamer-plugin-pipewire Requires, needed now to build the screen-cast support. ==== harfbuzz ==== Version update (2.7.2 -> 2.7.4) Subpackages: libharfbuzz-gobject0 libharfbuzz-icu0 libharfbuzz0 typelib-1_0-HarfBuzz-0_0 - harfbuzz 2.7.4: - Fix missing --enable-introspection configure option - includes changes from 2.7.3: - Update USE shaper to 2020-08-13 specification, and other improvements - Don?t disable liga feature in myanmar shaper, to match Uniscribe - Improvements to language and script tags handling. - Update language system tag registry to OpenType 1.8.4 - Support for serializing and deserializing Unicode buffers - Increase buffer work limits to handle fonts with many complex lookups - Handle more shaping operations in trace output - Memory access fixes - More OOM fixes - Improved documentation ==== kernel-firmware ==== Version update (20201130 -> 20201218) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network ucode-amd - Update to version 20201218 (git commit 646f159690e2): * make AP6212 in bananpi m2 plus/zero work * linux-firmware: Update firmware file for Intel Bluetooth AX210 * linux-firmware: Update firmware file for Intel Bluetooth AX200 * linux-firmware: Update firmware file for Intel Bluetooth AX201 * linux-firmware: Update firmware file for Intel Bluetooth 9560 * linux-firmware: Update firmware file for Intel Bluetooth 9260 * linux-firmware: add firmware for Lontium LT9611UXC DSI to HDMI bridge * mediatek: update MT8173 VPU firmware to v1.1.6 * QCA : Updated firmware files for WCN3991 - Remove the already upstreamed extrawhence entry - Update topic entry for lt9611uxc - Update aliases from 5.10.x kernels ==== kernel-source ==== Version update (5.10.1 -> 5.10.3) - media: uvcvideo: Accept invalid bFormatIndex and bFrameIndex values (bsc#1180117). - commit b9a0c5f - iwlwifi: dbg: Don't touch the tlv data (bsc#1180344). - commit cd8100a - Linux 5.10.3 (bsc#1012628). - md: fix a warning caused by a race between concurrent md_ioctl()s (bsc#1012628). - nl80211: validate key indexes for cfg80211_registered_device (bsc#1012628). - crypto: af_alg - avoid undefined behavior accessing salg_name (bsc#1012628). - media: msi2500: assign SPI bus number dynamically (bsc#1012628). - fs: quota: fix array-index-out-of-bounds bug by passing correct argument to vfs_cleanup_quota_inode() (bsc#1012628). - quota: Sanity-check quota file headers on load (bsc#1012628). - Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt() (bsc#1012628). - f2fs: prevent creating duplicate encrypted filenames (bsc#1012628). - ext4: prevent creating duplicate encrypted filenames (bsc#1012628). - ubifs: prevent creating duplicate encrypted filenames (bsc#1012628). - fscrypt: add fscrypt_is_nokey_name() (bsc#1012628). - fscrypt: remove kernel-internal constants from UAPI header (bsc#1012628). - serial_core: Check for port state when tty is in error state (bsc#1012628). - HID: i2c-hid: add Vero K147 to descriptor override (bsc#1012628). - scsi: megaraid_sas: Check user-provided offsets (bsc#1012628). - f2fs: init dirty_secmap incorrectly (bsc#1012628). - f2fs: fix to seek incorrect data offset in inline data file (bsc#1012628). - coresight: etm4x: Handle TRCVIPCSSCTLR accesses (bsc#1012628). - coresight: etm4x: Fix accesses to TRCPROCSELR (bsc#1012628). - coresight: etm4x: Fix accesses to TRCCIDCTLR1 (bsc#1012628). - coresight: etm4x: Fix accesses to TRCVMIDCTLR1 (bsc#1012628). - coresight: etm4x: Skip setting LPOVERRIDE bit for qcom, skip-power-up (bsc#1012628). - coresight: etb10: Fix possible NULL ptr dereference in etb_enable_perf() (bsc#1012628). - coresight: tmc-etr: Fix barrier packet insertion for perf buffer (bsc#1012628). - coresight: tmc-etr: Check if page is valid before dma_map_page() (bsc#1012628). - coresight: tmc-etf: Fix NULL ptr dereference in tmc_enable_etf_sink_perf() (bsc#1012628). - ARM: dts: exynos: fix USB 3.0 pins supply being turned off on Odroid XU (bsc#1012628). - ARM: dts: exynos: fix USB 3.0 VBUS control and over-current pins on Exynos5410 (bsc#1012628). - ARM: dts: exynos: fix roles of USB 3.0 ports on Odroid XU (bsc#1012628). - usb: chipidea: ci_hdrc_imx: Pass DISABLE_DEVICE_STREAMING flag to imx6ul (bsc#1012628). - USB: gadget: f_rndis: fix bitrate for SuperSpeed and above (bsc#1012628). - usb: gadget: f_fs: Re-use SS descriptors for SuperSpeedPlus (bsc#1012628). - USB: gadget: f_midi: setup SuperSpeed Plus descriptors (bsc#1012628). - USB: gadget: f_acm: add support for SuperSpeed Plus (bsc#1012628). - USB: serial: option: add interface-number sanity check to flag handling (bsc#1012628). - usb: mtu3: fix memory corruption in mtu3_debugfs_regset() (bsc#1012628). - soc/tegra: fuse: Fix index bug in get_process_id (bsc#1012628). - exfat: Avoid allocating upcase table using kcalloc() (bsc#1012628). - x86/split-lock: Avoid returning with interrupts enabled (bsc#1012628). - net: ipconfig: Avoid spurious blank lines in boot log (bsc#1012628). - commit 246b3e0 - reset: raspberrypi: Don't reset USB if already up (bsc#1180336). - commit cbfc03c - series.conf: cleanup - update upstream reference and move to "almost mainline" section: patches.suse/clk-bcm-dvp-add-module_device_table.patch - commit 24deb54 - config: refresh - drop USB_SISUSBVGA_CON (no longer accessible) - commit c403c88 - Linux 5.10.2 (bsc#1012628). - serial: 8250_omap: Avoid FIFO corruption caused by MDR1 access (bsc#1012628). - ALSA: pcm: oss: Fix potential out-of-bounds shift (bsc#1012628). - USB: sisusbvga: Make console support depend on BROKEN (bsc#1012628). - USB: UAS: introduce a quirk to set no_write_same (bsc#1012628). - xhci-pci: Allow host runtime PM as default for Intel Maple Ridge xHCI (bsc#1012628). - xhci-pci: Allow host runtime PM as default for Intel Alpine Ridge LP (bsc#1012628). - usb: xhci: Set quirk for XHCI_SG_TRB_CACHE_SIZE_QUIRK (bsc#1012628). - xhci: Give USB2 ports time to enter U3 in bus suspend (bsc#1012628). - ALSA: usb-audio: Fix control 'access overflow' errors from chmap (bsc#1012628). - ALSA: usb-audio: Fix potential out-of-bounds shift (bsc#1012628). - USB: add RESET_RESUME quirk for Snapscan 1212 (bsc#1012628). - USB: dummy-hcd: Fix uninitialized array use in init() (bsc#1012628). - USB: legotower: fix logical error in recent commit (bsc#1012628). - ktest.pl: Fix the logic for truncating the size of the log file for email (bsc#1012628). - ktest.pl: If size of log is too big to email, email error message (bsc#1012628). - ptrace: Prevent kernel-infoleak in ptrace_get_syscall_info() (bsc#1012628). - commit 0c7d1c1 - clk: bcm: dvp: Add MODULE_DEVICE_TABLE() (bsc#1180260). - commit fa7a177 ==== libimagequant ==== Version update (2.12.6 -> 2.13.1) - update to 2.13.1: * Support OpenMP in clang * speed improvements ==== libjpeg-turbo ==== - version update to 2.0.6 1. Fixed "using JNI after critical get" errors that occurred on Android platforms when using any of the YUV encoding/compression/decompression/decoding methods in the TurboJPEG Java API. 2. Fixed or worked around multiple issues with `jpeg_skip_scanlines()`: - Fixed segfaults or "Corrupt JPEG data: premature end of data segment" errors in `jpeg_skip_scanlines()` that occurred when decompressing 4:2:2 or 4:2:0 JPEG images using merged (non-fancy) upsampling/color conversion (that is, when setting `cinfo.do_fancy_upsampling` to `FALSE`.) 2.0.0[6] was a similar fix, but it did not cover all cases. - `jpeg_skip_scanlines()` now throws an error if two-pass color quantization is enabled. Two-pass color quantization never worked properly with `jpeg_skip_scanlines()`, and the issues could not readily be fixed. - Fixed an issue whereby `jpeg_skip_scanlines()` always returned 0 when skipping past the end of an image. 3. The Arm 64-bit (Armv8) Neon SIMD extensions can now be built using MinGW toolchains targetting Arm64 (AArch64) Windows binaries. 4. Fixed unexpected visual artifacts that occurred when using `jpeg_crop_scanline()` and interblock smoothing while decompressing only the DC scan of a progressive JPEG image. 5. Fixed an issue whereby libjpeg-turbo would not build if 12-bit-per-component JPEG support (`WITH_12BIT`) was enabled along with libjpeg v7 or libjpeg v8 API/ABI emulation (`WITH_JPEG7` or `WITH_JPEG8`.) - modified sources % libjpeg-turbo.keyring ==== libproxy ==== Version update (0.4.15 -> 0.4.17) - Update to version 0.4.17: + python bindings: fix "TypeError: argtypes must be a sequence of types". - Drop 147.patch: fixed upstream. - Add 147.patch: python bindings: fix "TypeError: _argtypes_ must be a sequence of types". - Update to version 0.4.16: + Port to, and require, SpiderMonkey 6. + Use closesocket() instead of close() on Windows. + Add symbol versions - be ready to introduce new APIs as needed. + Add public px_proxy_factory_free_proxies function. + Add PacRunner config backend (largely untested; feedback welcome!). + Small performance improvements. + pxgsettings: use the correct syntax to connect to the changed signal (silences annoying output on console). + Support python3 up to version 3.9. + Fix buffer overflow when PAC is enabled (CVE-2020-26154). + Rewrite url::recvline to be nonrecursive (CVE-2020-25219). + Remove nonfunctional and crashy pacrunner caching. + Never use system libmodman (no other consumers, not maintained). - Drop upstream merged patches: + libproxy-python3.7.patch + libproxy-pxgsettings.patch + libproxy-CVE-2020-25219.patch libproxy-fix-pac-buffer-overflow.patch - Create new sub-package libproxy1-config-pacrunner. ==== libqt5-qtbase ==== Subpackages: libQt5Concurrent5 libQt5Core5 libQt5DBus5 libQt5Gui5 libQt5Network5 libQt5OpenGL5 libQt5PrintSupport5 libQt5Sql5 libQt5Sql5-sqlite libQt5Test5 libQt5Widgets5 libQt5Xml5 - Add patch to avoid excessive use of memory by lconvert: * 0001-Fix-allocated-memory-of-QByteArray.patch ==== mobile-broadband-provider-info ==== Version update (20190618 -> 20201225) - Update to version 20201225: * release: bump version to 20201225 * Add to .doap file * th: add new provider AIS (AWN) * pl/nju mobile: Fix the balance check USSD code * trivial: fix spurious whitespaces * Add Polish MVNOs "nju mobile" and "Virgin Mobile" * Remove defunct Polish MVNOs * Update configuration for Polish operators * pl: fix APN for Polish provider PLUS * Rename Swiss provider Orange to Salt * Add APN Information for Aliv Bahamas * Add China Telecom as LTE carrier * Add SpeedTalk Mobile MVNO * Add gitltab-ci * at: add balance check and top-up code for hot.at * sg/Starhub: Add USSD command to fetch balance info * Add Airtel Malawi settings * Add a new provider: Yota (25011) * Add eSwatini mobile provider info ==== plasma5-workspace ==== Subpackages: gmenudbusmenuproxy plasma5-session plasma5-session-wayland plasma5-workspace-libs xembedsniproxy - RPM got fixed, so use %fdupes on TW again ==== pngquant ==== Version update (2.12.6 -> 2.13.1) - update to 2.13.1: - small speed and quality improvements ==== python-pytz ==== Version update (2020.4 -> 2020.5) - update to 2020.5: * update to IANA 2020e timezone release ==== system-users ==== Subpackages: system-group-hardware system-group-kvm system-user-lp system-user-nobody - Add system-user-vscan subpackage with vscan user and group and /var/spool/amavis as home directory ==== tiff ==== Version update (4.1.0 -> 4.2.0) - version update to 4.2.0 Major changes: * Optional support for using libdeflate is added. * Many of the tools now support a memory usage limit. See http://www.simplesystems.org/libtiff/v4.2.0.html for more.