Packages changed: ImageMagick (7.1.0.27 -> 7.1.0.28) Mesa (22.0.0 -> 22.0.1) Mesa-drivers (22.0.0 -> 22.0.1) cfitsio (4.0.0 -> 4.1.0) createrepo_c (0.17.3 -> 0.20.0) cronie dhcp edict firewalld (1.1.0 -> 1.1.1) gnome-control-center grub2 kidletime kmod knewstuff libevdev (1.12.0 -> 1.12.1) libfido2 (1.9.0 -> 1.10.0) libical (3.0.13 -> 3.0.14) libical-glib (3.0.13 -> 3.0.14) libstorage-ng (4.4.94 -> 4.5.1) lvm2 lvm2-device-mapper mozjs91 mutter open-vm-tools (11.3.5 -> 12.0.0) openldap2 (2.4.59 -> 2.5.9) openvpn (2.5.5 -> 2.5.6) pipewire (0.3.48 -> 0.3.49) python-kiwisolver (1.3.2 -> 1.4.1) python-prettytable (2.5.0 -> 3.2.0) python-pytz (2021.3 -> 2022.1) python-scipy (1.7.3 -> 1.8.0) python-trio (0.19.0 -> 0.20.0) qemu shaderc spice virtualbox virtualbox-kmp wireplumber === Details === ==== ImageMagick ==== Version update (7.1.0.27 -> 7.1.0.28) Subpackages: ImageMagick-config-7-SUSE ImageMagick-extra libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - update to 7.1.0.28: * support 10-bit AVIF * fix PS and EPS %%BoundingBox not being parsed * fix stack based buffer overflow in _TIFFVGetField (https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42549) * fix heap buffer overflow in dcm image reading (https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45640) ==== Mesa ==== Version update (22.0.0 -> 22.0.1) Subpackages: Mesa-dri-devel Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - Update to 22.0.1 * fixes in lavapipe and zink, maintainer scripts and panfrost - supersedes U_meson-restore-private-requires-to-libdrm-in-dri.pc-f.patch ==== Mesa-drivers ==== Version update (22.0.0 -> 22.0.1) Subpackages: Mesa-dri Mesa-gallium Mesa-libva libvdpau_r300 libvdpau_r600 libvdpau_radeonsi libxatracker2 - Update to 22.0.1 * fixes in lavapipe and zink, maintainer scripts and panfrost - supersedes U_meson-restore-private-requires-to-libdrm-in-dri.pc-f.patch ==== cfitsio ==== Version update (4.0.0 -> 4.1.0) - Update to version 4.1.0: * Calls to the zlib inflate() function in zcompress.c now handle the Z_BUF_ERROR return value rather than exiting. * The SUBTRACTIVE_DITHER_2 option has been removed when using the HCOMPRESS algorithm. * Updated fits_get_version function to return a float calculated from 3 version fields. * Added handling of SBYTE_IMG and ULONGLONG_IMG types to the fits_resize_img function. * Updates made to C/Fortran interfacing in cfortran.h and f77_wrap.h specifically driven by new Mac/ARM architecture. * Fix to the fits_insert_col functions to handle columns with TULONGLONG data. ==== createrepo_c ==== Version update (0.17.3 -> 0.20.0) Subpackages: libcreaterepo_c0 python3-createrepo_c - Update to 0.20.0 + Remove obsoleted API cr_xml_parse_main_metadata_together + Fix ampersand encoding in attributes when parsing repodata + Add a streaming parsing API that is user-controllable + Fix a bug in cr_repomd_record_compress_and_fill() + Zero init buffer to prevent use of garbage values if input is too short + Use copy+delete fallback when moving of a dir fails + Switch default of --keep-all-metadata to TRUE and add --discard-additional-metadata + Set database version only for the database records, not everything + If the new repodata generated during an --update run exactly matches the old repodata don't touch the files + Use --error-exit-val option by default + Remove insecure hashes SHA-1 and MD5 from the default build (rh#1935486) + Fix error when updating repo with removed modules metadata + Exit with status code 1 when loading of repo's metadata fails + Fix memory leaks and covscan warnings ==== cronie ==== Subpackages: cron - Update to 1.6.0: * Add switch -f for foreground mode * Fix regression in handling */x crontab entries * Add random within range '~' operator * Fix RandomScale calculation * crond: Fix description of '-P' option * Increase the maximum number of crontab entries * crontab: use bold colors - Remove upstreamed patches: * cronie-1.5.7-increase_crontab_limit.patch * cronie-piddir.patch - Refresh patches: * cronie-nheader_lines.diff * cronie-cron_pid.diff ==== dhcp ==== Subpackages: dhcp-relay dhcp-server - Require hostname binary, not package [bsc#1197087] ==== edict ==== Subpackages: edict2 jmdict - Update to snapshot 20220402 * No changelog recorded. ==== firewalld ==== Version update (1.1.0 -> 1.1.1) Subpackages: firewalld-bash-completion firewalld-lang firewalld-zsh-completion python3-firewall - Update to 1.1.1: * fix(build): oci: use centos:stream8 instead of ubi:8 * fix(functions): --check-config fails if direct.xml exists * fix(build): oci: use dbus inside the container * docs(README): add note about container host integration * docs: typo fixes ==== gnome-control-center ==== Subpackages: gnome-control-center-color gnome-control-center-goa gnome-control-center-lang gnome-control-center-user-faces - Add gnome-control-center-goa-helper-on-X11.patch: Fix GOA helper not showing up on X11 [glgo#GNOME/gnome-control-center!1651]. ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - Fix wrong order in kernel sorting of listing rc before final release (bsc#1197376) * grub2-use-rpmsort-for-version-sorting.patch ==== kidletime ==== - Add upstream fix (kde#451946): * 0001-Fixed-crash-during-KIdleTime-timeoutReached.patch ==== kmod ==== Subpackages: kmod-bash-completion libkmod2 - add keyring so that gpg validation actually does something ==== knewstuff ==== Subpackages: knewstuff-imports libKF5NewStuff5 libKF5NewStuff5-lang libKF5NewStuffCore5 - Add upstream fix (kde#451165): * 0001-Do-not-set-user-visible-name-as-additional-agent-inf.patch ==== libevdev ==== Version update (1.12.0 -> 1.12.1) Subpackages: libevdev-devel libevdev-tools libevdev2 - update to 1.12.1: * Add manpage for mouse-dpi-tool * include sync key codes from kernel 5.17 ==== libfido2 ==== Version update (1.9.0 -> 1.10.0) - Version 1.10.0 (2022-01-17) * hid_osx: handle devices with paths > 511 bytes; gh#462. * bio: fix CTAP2 canonical CBOR encoding in fido_bio_dev_enroll_*(); gh#480. * winhello: fallback to GetTopWindow() if GetForegroundWindow() fails. * winhello: fallback to hid_win.c if webauthn.dll isn?t available. * New API calls: - fido_dev_info_set; - fido_dev_io_handle; - fido_dev_new_with_info; - fido_dev_open_with_info. * Cygwin and NetBSD build fixes. * Documentation and reliability fixes. * Support for TPM 2.0 attestation of COSE_ES256 credentials. ==== libical ==== Version update (3.0.13 -> 3.0.14) - update to 3.0.14: * icalvalue: Reset non-UTC icaltimetype::zone on set * Fix icalcomponent_set_due not removing TZID when necessary ==== libical-glib ==== Version update (3.0.13 -> 3.0.14) - update to 3.0.14: * icalvalue: Reset non-UTC icaltimetype::zone on set * Fix icalcomponent_set_due not removing TZID when necessary ==== libstorage-ng ==== Version update (4.4.94 -> 4.5.1) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#866 - fix for volume groups with extent sizes of 4 GiB and up (bsc#1197779) - 4.5.1 - merge gh#openSUSE/libstorage-ng#865 - NFS: Validate fstype in fstab - Cleanup, rename argument - NFS/fstab: Validate file system type (gh#openSUSE/libstorage-ng#864) - 4.5.0 ==== lvm2 ==== Subpackages: liblvm2cmd2_03 - lvm2-monitor.service reported warning messages for udev didn't finish to set up device database (bsc#1197183) + 0025-vgchange-monitor-don-t-use-udev-info.patch ==== lvm2-device-mapper ==== Subpackages: device-mapper libdevmapper-event1_03 libdevmapper1_03 libdevmapper1_03-32bit - lvm2-monitor.service reported warning messages for udev didn't finish to set up device database (bsc#1197183) + 0025-vgchange-monitor-don-t-use-udev-info.patch ==== mozjs91 ==== - Change version number of icudt67l.dat to icudt69l.dat to fix build for bigendian ==== mutter ==== Subpackages: mutter-lang - Add mutter-42.0-fix-top-bar-elements-hovering-effect.patch based on commits: 0280b0aaa563db65bf79a3643f6a9e8e76bfe458 and 2aad56b949b86b4f1d0eab6d3d3b0d5491e8515b. A fix for elements in the top bar not losing the cursor-hovering effect if the cursor immediately enters an app window (glgo#GNOME/gnome-shell#203). ==== open-vm-tools ==== Version update (11.3.5 -> 12.0.0) Subpackages: libvmtools0 open-vm-tools-desktop - Update to 12.0.0 (build 19345655) (boo#1196803) - jsc#SLE-24097 ECO Update open-vm-tools 12.0.0 + New/Updated features: - Support for managing Salt Minion through guest variables. A new open-vm-tools-salt-minion rpm is added to handle this support. jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4 jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3 jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5 - New ComponentMgr plugin to manage (add, remove, monitor) components on the guest VM. - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804). - Build vmhgfs with either libfuse2 or libfuse3. + A number of Coverity and Codacy reported issues have been addressed. + The following issues and pull requests reported on github.com/vmware/open-vm-tools have been addressed: Issue # 128, Issue # 314, Pull # 513, Pull # 544, Pull # 573 - Added patches + gcc_size_t.patch (boo#1196804) ==== openldap2 ==== Version update (2.4.59 -> 2.5.9) Subpackages: libldap-data openldap2-client - Add _multibuild support to integrate the build of libldapcpp-devel to drop the outdated copy - update to 2.5.9 OpenLDAP 2.5.9 Release (2021/10/25) Fixed slapo-accesslog to initialize minCSN on import of 2.4 databases (ITS#9720) - update to 2.5.8 OpenLDAP 2.5.8 Release (2021/10/11) Fixed libldap ldap_int_tls_connect: isdigit() requires unsigned char (ITS#9668) Fixed libldap memory leak in ldap_get_option LDAP_OPT_X_TLS_PEERCERT (ITS#9696) Fixed slapd to allow normalized values for namingContexts in cn=monitor (ITS#8341) Fixed slapd to normalize the suffix in rootDSE (ITS#9664) Fixed slapd slapadd to avoid destroying configDB prematurely (ITS#9678) Fixed slapd to not spam logs with lastbind information (ITS#9156) Fixed slapd slaptest migration to correctly set olcTSLVerifyClient (ITS#9711) Fixed slapd-mdb multival delete handling (ITS#9712) Fixed slapd-sql ldap_entry_objectclass table for mariadb/mysql (ITS#9679) Fixed slapd-wt multiple issues (ITS#9463) Fixed slapd-wt to close cache db correctly (ITS#9631) Fixed slapo-ppolicy to restore OpenLDAP 2.4 compatibilty (ITS#9671) Fixed slapo-syncprov to free uuid list when finished replaying sessionlog (ITS#6467) Build Fixed libldap result.c compilation on musl systems (ITS#9648) Fixed slapd duplicate definition of peerbv (ITS#9659) Fixed test suite with memberof modular builds (ITS#9464) Contrib Added man page for ppm contrib module (ITS#9644) Fix crash when pwdCheckModuleArg is not defined for ppm (ITS#9656) Documentation Fixed guide download link for heimdal (ITS#9669) Fixed guide documentation for TLSECName (ITS#9687) Fixed guide documentation missing tags (ITS#9693) Fixed guide loadbalancer typo (ITS#9699) Fixed guide synprov-nopresent redundant text (ITS#9689) Fixed guide various typos and fix config alignment (ITS#9706) Removed ppolicy.schema from servers/slapd/schema/README (ITS#9156) Fixed slapd.conf(5)/slapd-config(5) to document default for database monitoring (ITS#9674) Fixed slapd-meta(5)/slapd-asyncmeta(5) verbiage for try-propagate (ITS#9646) Fixed slapo-syncprov(5) to note entryCSN indexing is highly recommended (ITS#9688) - Update to upstream version 2.5.7 Fixed lloadd client state tracking (ITS#9624) Fixed slapd bconfig to canonicalize structuralObjectclass (ITS#9611) Fixed slapd-ldif duplicate controls response (ITS#9497) Fixed slapd-mdb multival crash when attribute is missing an equality matchingrule (ITS#9621) Fixed slapd-mdb compatibility with OpenLDAP 2.4 MDB databases (ITS#8958) Fixed slapd-mdb idlexp maximum size handling (ITS#9637) Fixed slapd-monitor number of ops executing with asynchronous backends (ITS#9628) Fixed slapd-sql to add support for ppolicy attributes (ITS#9629) Fixed slapd-sql to close transactions after bind and search (ITS#9630) Fixed slapo-accesslog to make reqMod optional (ITS#9569) Fixed slapo-ppolicy logging when pwdChangedTime attribute is not present (ITS#9625) Documentation slapd-mdb(5) note max idlexp size is 30, not 31 (ITS#9637) slapo-accesslog(5) note that reqMod is optional (ITS#9569) Add ldapvc(1) man page (ITS#9549) Add guide section on load balancer (ITS#9443) Updated guide to document multiprovider as replacement for mirrormode (ITS#9200) Updated guide to clarify slapd-mdb upgrade requirements (ITS#9200) Updated guide to document removal of deprecated options from client tools (ITS#9200) - Major version update to 2.5.6 See https://www.openldap.org/software/release/announce.html for a list of changes. - The threaded version of the OpenLDAP libraries, libldap_r, has been merged with libldap with 2.5. Removed all related downstream changes, including the openldap-r-only.dif patch. Introduce a new compatibility symlink in the other direction: libldap_r pointing to libldap. - Removed the ppolicy-check-password module. It is unmaintained and does not build any more. As part of that also remove the patch patch 0200-Fix-incorrect-calculation-of-consecutive-number-of-c.patch, which is applied to this module. - Removed patch 0001-ITS-8866-slapo-unique-to-return-filter-used-in-diagn.patch Fixed upstream in 2.5 (ITS#8866) - Updated patch 0005-pie-compile.dif Removed the hunks on back-bdb and back-hdb, which are retired backends in 2.5. - Removed patch 0007-Recover-on-DB-version-change.dif The back-bdb backend was retired. - Removed patch 0011-openldap-re24-its7796.patch Fixed upstream in 2.5 (ITS#7796) - Remove non-existant configure arguments: - -enable-rewrite, --enable-monitor, --enable-lmpasswd - Add the --enable-dynacl configure option, which is required for --enable-aci - Add the --with-argon2 configure option and remove it from the contrib modules, since it is now official (ITS#9453). - Pass mandir to smbk5pwd to ensure the man page ends up in /usr/share. - Include the new overlays in libdir/openldap in the packages. - Add the pkgconfig files to the devel package. - Remove compat macro for _fillupdir, which was introduced in Nov 2017 and should be widely available now. ==== openvpn ==== Version update (2.5.5 -> 2.5.6) - update to 2.5.6: * bsc#1197341, CVE-2022-0547: possible authentication bypass in external authentication plug-in * Fix "--mtu-disc maybe|yes" on Linux * Fix $common_name variable passed to scripts when username-as-common-name is in effect. * Fix potential memory leaks in add_route() and add_route_ipv6(). * Apply connect-retry backoff only to one side of the connection in p2p mode. * repair "--inactive" handling with a 'bytes' parameter larger than 2 Gbytes. * new plugin (sample-plugin/defer/multi-auth.c) to help testing with multiple parallel plugins that succeed/fail in direct/deferred mode. ==== pipewire ==== Version update (0.3.48 -> 0.3.49) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-lang pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Reorder BuildRequires and space conditions a bit better in the spec file. - Update to version 0.3.49: * Highlights - Sample rate switching should work again. - pw-dot can now use the output of pw-dump to render a graph. - Bluetooth A2DP streaming was improved that would reduce stuttering on some devices. - A JACK bug was fixed that would sometimes make it impossible to add more tracks in Ardour. (#1714) - Many bugfixes and improvements. * PipeWire - Fix a potential crash when NULL params were configured. - Add some simple functional tests to avoid some recent regressions. Improve the test framework for this as well. - Improvements to the poll loop to avoid some use-after-free scenarios. - Fix samplerate switching again. - setlocale is not called anymore from the pipewire library. This should be called by the application. (#2223) - pw_init() and pw_deinit() can now be nested and called multiple times. - pw_stream will now report the resampler delay in the pw_time.queued field. * modules - module-filter-chain now supports arbitrary many properties and will use property hints to assign them the right type. - The ROC modules now accept a sink/source_properties parameter. - The module-rt can now also be built without RT-Kit support. - module-echo-cancel can now use a fraction to specify the delay for more precise control. * SPA - The channelmixer will now do upmixing by default and will not use normalization. It will also use a simple upmixing algorithm that duplicates channels by default. A more interesting upmix method is also available (PSD) but needs to be enabled manually. (#861) - Add SSE optimized (de)interleave functions for 32 bits samples with and without byteswap. - JSON parsing of empty strings will now give an invalid number instead of 0. - JSON numbers are now parsed and serialized in a locale independent way so that , and . are not mixed up. - The resampler will now report the resample delay and queued samples as the extra delay. * tools - pw-cat will read more dsf files correctly and will not crash at the end. - pw-top now has a man page. - pw-dot can now use the output of pw-dump to render a graph. * bluetooth - Improve interactions with oFono. - Fix recovery with slow connections. - Improve frame size of AptX-ll. - A2DP can now use any quantum and will flush packets in smaller chunks when needed to adapt. This improves stuttering in some cases. * pulse-server - The server configuration can now be placed in pulse.properties section, which also makes it possible to have custom overrides. - Implement FIX_ flags for capture as well. - Small fixes and improvements in module loading. * JACK - Clear the last error before executing a new action or else we could end up with error from a previous action. This causes some problems in Ardour where adding a track would fail after some time. (#1714) - Rebase reduce-meson-dependency.patch. ==== python-kiwisolver ==== Version update (1.3.2 -> 1.4.1) - Update to 1.4.1 * add missing include PR #129 * re-organize the Python binding sources to properly ship type hints PR #131 * make installation PEP517 compliant PR #125 * add type hints PR #125 * add Constraint::violated() method PR #128 * make the the c++ part of the code c++20 compliant PR #120 * test with c++11 and c++20 PR #120 - Switch to PyPI sources ==== python-prettytable ==== Version update (2.5.0 -> 3.2.0) - Update to 3.2.0 * Drop support for EOL Python 3.6 (#152) @hugovk * Use