Packages changed: Mesa (22.1.3 -> 22.1.4) Mesa-drivers (22.1.3 -> 22.1.4) MozillaFirefox (101.0.1 -> 103.0.1) apparmor (3.0.5 -> 3.0.6) bind firewalld gdb (11.1 -> 12.1) gnome-settings-daemon gnutls (3.7.6 -> 3.7.7) iso-codes (4.10.0 -> 4.11.0) kernel-source (5.18.12 -> 5.18.15) libapparmor (3.0.5 -> 3.0.6) libavif libblockdev (2.26 -> 2.27) libgcrypt libgsm (1.0.19 -> 1.0.20) libnvme (1.1~rc0 -> 1.1) mokutil (0.5.0 -> 0.6.0) mozilla-nss (3.79 -> 3.80) mpg123 (1.30.1 -> 1.30.2) nano nvme-cli (2.1~rc0 -> 2.1.1) pandoc (2.17.1.1 -> 2.18) pipewire polkit poppler (22.07.0 -> 22.08.0) poppler-qt5 (22.07.0 -> 22.08.0) python-Genshi (0.7.5 -> 0.7.7) python-Mako (1.1.6 -> 1.2.1) python-alembic (1.8.0 -> 1.8.1) python-cffi (1.15.0 -> 1.15.1) python-cryptography (37.0.2 -> 37.0.4) python-gobject (3.42.1 -> 3.42.2) python-hatchling (1.4.1 -> 1.6.0) python-httpcore (0.14.7 -> 0.15.0) python-importlib-metadata (4.11.4 -> 4.12.0) python-ipywidgets (7.6.5 -> 7.7.1) python-jsonschema (4.5.1 -> 4.8.0) python-jupyter-core (4.9.2 -> 4.11.1) python-jupyter_console (6.4.3 -> 6.4.4) python-jupyterlab (3.2.3 -> 3.4.4) python-jupyterlab-pygments (0.1.2 -> 0.2.2) python-nbclassic (0.3.7 -> 0.4.3) python-notebook python-numexpr python-psutil python-pycairo python-regex (2022.6.2 -> 2022.7.9) python-scipy python-urllib3 (1.26.9 -> 1.26.11) python-wcwidth python-widgetsnbextension (3.6.0 -> 3.6.1) read-only-root-fs (1.0+git20200730.1243fd0 -> 1.0+git20220801.cbb90bc) rsync tiff util-linux-systemd vim (9.0.0073 -> 9.0.0135) webkit2gtk3 (2.36.4 -> 2.36.5) webkit2gtk3-soup2 (2.36.4 -> 2.36.5) webkit2gtk4 (2.36.4 -> 2.36.5) xdg-utils (1.1.3+20201113 -> 1.1.3+20210805) zlib-ng-compat === Details === ==== Mesa ==== Version update (22.1.3 -> 22.1.4) Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - update to 22.1.4: * anv: disable non uniform indexing of UBOs * anv: use the right helper to invalidate memory * intel/fs: ray query fix for global address * isl: add new helper for format component compatibility * radeonsi: fix random PS wave size * r300: Keep rc_rename_regs() from overflowing * aco/ra: update register file when updating phi definition * radv: Fix vkCmdCopyQueryResults -> vkCmdResetPool hazard ==== Mesa-drivers ==== Version update (22.1.3 -> 22.1.4) Subpackages: Mesa-dri Mesa-gallium Mesa-libva - update to 22.1.4: * anv: disable non uniform indexing of UBOs * anv: use the right helper to invalidate memory * intel/fs: ray query fix for global address * isl: add new helper for format component compatibility * radeonsi: fix random PS wave size * r300: Keep rc_rename_regs() from overflowing * aco/ra: update register file when updating phi definition * radv: Fix vkCmdCopyQueryResults -> vkCmdResetPool hazard ==== MozillaFirefox ==== Version update (101.0.1 -> 103.0.1) - Mozilla Firefox 103.0.1 * Enabled hardware acceleration on newer AMD cards. * Fixed a crash on Firefox shutdown caused by a bug in the audio manager - Mozilla Firefox 103.0 https://www.mozilla.org/en-US/firefox/103.0/releasenotes MFSA 2022-28 (bsc#1201758) * CVE-2022-36319 (bmo#1737722) Mouse Position spoofing with CSS transforms * CVE-2022-36317 (bmo#1759951) Long URL would hang Firefox for Android * CVE-2022-36318 (bmo#1771774) Directory indexes for bundled resources reflected URL parameters * CVE-2022-36314 (bmo#1773894) Opening local .lnk files could cause unexpected network loads * CVE-2022-36315 (bmo#1762520) Preload Cache Bypasses Subresource Integrity * CVE-2022-36316 (bmo#1768583) Performance API leaked whether a cross-site resource is redirecting * CVE-2022-36320 (bmo#1759794, bmo#1760998) Memory safety bugs fixed in Firefox 103 * CVE-2022-2505 (bmo#1769739, bmo#1772824) Memory safety bugs fixed in Firefox 103 and 102.1 - requires NSS >= 3.80 rust = 1.61 rust-cbindgen >= 0.24.3 - Move %limit_build set before mozilla config to actually set the value of %jobs to MOZ_MAKE_FLAGS to fix build on aarch64 - Firefox 102.0.1: * Fixed: Fixed bookmarks sidebar flashing white when opened in dark mode (bmo#1776157) * Fixed: Fixed multilingual spell checking not working with content in both English and a non-Latin alphabet (bmo#1773802) * Fixed: Developer tools: Fixed an issue where the console output keep getting scrolled to the bottom when the last visible message is an evaluation result (bmo#1776262) * Fixed: Fixed *Delete cookies and site data when Firefox is closed* checkbox getting disabled on startup (bmo#1777419) * Fixed: Various stability fixes - Firefox 102.0 * You can now disable automatic opening of the download panel every time a new download starts * Firefox now mitigates query parameter tracking when navigating sites in ETP strict mode * Improved security by moving audio decoding into a separate process with stricter sandboxing, thus improving process isolation * https://www.mozilla.org/en-US/firefox/102.0/releasenotes MFSA 2022-24 (bsc#1200793) * CVE-2022-34479 (bmo#1745595) A popup window could be resized in a way to overlay the address bar with web content * CVE-2022-34470 (bmo#1765951) Use-after-free in nsSHistory * CVE-2022-34468 (bmo#1768537) CSP sandbox header without `allow-scripts` can be bypassed via retargeted javascript: URI * CVE-2022-34482 (bmo#845880) Drag and drop of malicious image could have led to malicious executable and potential code execution * CVE-2022-34483 (bmo#1335845) Drag and drop of malicious image could have led to malicious executable and potential code execution * CVE-2022-34476 (bmo#1387919) ASN.1 parser could have been tricked into accepting malformed ASN.1 * CVE-2022-34481 (bmo#1483699, bmo#1497246) Potential integer overflow in ReplaceElementsAt * CVE-2022-34474 (bmo#1677138) Sandboxed iframes could redirect to external schemes * CVE-2022-34469 (bmo#1721220) TLS certificate errors on HSTS-protected domains could be bypassed by the user on Firefox for Android * CVE-2022-34471 (bmo#1766047) Compromised server could trick a browser into an addon downgrade * CVE-2022-34472 (bmo#1770123) Unavailable PAC file resulted in OCSP requests being blocked * CVE-2022-34478 (bmo#1773717) Microsoft protocols can be attacked if a user accepts a prompt * CVE-2022-2200 (bmo#1771381) Undesired attributes could be set as part of prototype pollution * CVE-2022-34480 (bmo#1454072) Free of uninitialized pointer in lg_init * CVE-2022-34477 (bmo#1731614) MediaError message property leaked information on cross- origin same-site pages * CVE-2022-34475 (bmo#1757210) HTML Sanitizer could have been bypassed via same-origin script via use tags * CVE-2022-34473 (bmo#1770888) HTML Sanitizer could have been bypassed via use tags * CVE-2022-34484 (bmo#1763634, bmo#1772651) Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11 * CVE-2022-34485 (bmo#1768409, bmo#1768578) Memory safety bugs fixed in Firefox 102 - requires ... changelog too long, skipping 11 lines ... - add some more returns to the no-return-patch ==== apparmor ==== Version update (3.0.5 -> 3.0.6) Subpackages: apparmor-abstractions apparmor-parser apparmor-profiles apparmor-utils python3-apparmor - update to AppArmor 3.0.6 - fix LTO build in the parser - remove dbus deny rule in abstractions/exo-open - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.6 for the detailed upstream changelog - drop upstream patch dirtest-sort-mr900.diff ==== bind ==== - Add systemd drop-in directory for named service [bsc#1201689, bind.spec] ==== firewalld ==== Subpackages: firewalld-bash-completion python3-firewall - readd ipset buildrequires to reenable ipset support (bsc#1202043) - readd ebtables too, as there is no builtin support. ==== gdb ==== Version update (11.1 -> 12.1) - Maintenance script qa.sh: * Add SLE-12/x86_64 to "known clean configs". * Add fail for PR29405. * Add fail for PR26915. - Patches added: * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch - Maintenance script qa.sh: * Remove PR29247 internal-error. * Add SLE-15/aarch64 to "known clean configs". - Patches added: * gdb-fix-watchpoints-triggered.patch - Maintenance script qa.sh: * Add kfails for PR25038, PR29253, and PR29423. * Remove gdb.mi/mi-var-invalidate-shlib.exp kfails. - Mention qa-local.sh, qa-remote.sh and README.qa as sources. - Maintenance script qa-local.sh: * Use have_combo consistently. - Maintenance script qa.sh: * Add kfail_aarch64. * Add PR29419/PR29409 kfails. * Update PR29247 kfails. - Patches added: * make-gdb.ada-float-bits.exp-more-generic.patch * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch - Actually apply fixup-gdb-test-bt-cfi-without-die.patch and fixup-2-gdb-rhbz1553104-s390x-arch12-test.patch. - Also remove gdb-6.5-readline-long-line-crash-test.patch from patches list in gdb.spec. - Patches added: * powerpc-add-support-for-ieee-128-bit-format.patch * powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch * gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch * powerpc-fix-for-gdb.base-eh_return.exp.patch * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch * fixup-gdb-test-bt-cfi-without-die.patch * fix-core-file-detach-crash-corefiles-29275.patch * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch * fix-for-gdb.base-solib-search.exp-test.patch - Patch removed: * gdb-6.7-ppc-clobbered-registers-O2-test.patch * gdb-6.5-readline-long-line-crash-test.patch - Patches updated: * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch * gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch - Maintenance script qa.sh: * Add PR28504 KFAILs. * Make .sum file matching less complex. * Add fedora test-case kfail. - Maintenance script qa-local.sh: * Fix incorrect path name. - Update comments in gdb.spec. - Patches added: * powerpc-update-expected-floating-point-output-for-gdb.arch-altivec-regs.exp-and-gdb.arch-vsx-regs.exp.patch - Patches updated: * gdb-testsuite-support-recording-of-getrandom.patch (add aarch64 part) - Maintenance script qa.sh: * Add i586 to known clean configs. - Patches added: * gdb-testsuite-enable-some-test-cases-for-x86_64-m32.patch * gdb-testsuite-fix-gdb.reverse-i387-env-reverse.exp-for-pie.patch * gdb-testsuite-support-recording-of-getrandom.patch - Patches updated: * gdb-record-handle-statx-system-call.patch - Maintenance script qa.sh: * Allow only two summary files, for i586. * Add i586 KFAILs. - Maintenance script qa-local.sh: * Add i586. - Maintenance script qa-local.sh: * Fix rpm pathname. - Maintenance script qa-remote.sh: * Skip stale config openSUSE_Leap_15.2. - Maintenance script qa.sh: * Drop known clean config: Leap 15.2 x86_64. - Maintenance script qa-local.sh: * Add cleanup step. * Add "build all configs without testsuite" step. * For "build all configs with testsuite" step, redirect output to log and produce PASS/FAIL line, and make sure buildroot is removed also in case of missing rpm. * Use "--clean --trust-all-projects" for osc build commands. * Drop openSUSE_Leap_15.2. - Maintenance script qa.sh: * Rename argument 6 to -local. * Add PR29247 KFAILs. * Update internal-error regexps. - New maintenance script qa-remote.sh. - Add "build all configs without testsuite" step in README.qa. - Patches added (backport from trunk): * gdb-testsuite-remove-attach-test-from-can_spawn_for_attach.patch - README.qa: * Add remote qa entry. * Update local qa entry: * Add notes entry. * Other updates to match changes in qa-local.sh. ... changelog too long, skipping 312 lines ... * Add Leap 15.4 x86_64 to know good configs. ==== gnome-settings-daemon ==== - Change dependency from polkit to /usr/bin/pkexec: pkexec has been split out of polkit. Requiring the explicit capability seems better here than having to worry what package carries the binary. ==== gnutls ==== Version update (3.7.6 -> 3.7.7) - Update to 3.7.7: [bsc#1202020, CVE-2022-2509] * libgnutls: Fixed double free during verification of pkcs7 signatures. CVE-2022-2509 * libgnutls: gnutls_hkdf_expand now only accepts LENGTH argument less than or equal to 255 times hash digest size, to comply with RFC 5869 2.3. * libgnutls: Length limit for TLS PSK usernames has been increased from 128 to 65535 characters * libgnutls: AES-GCM encryption function now limits plaintext length to 2^39-256 bits, according to SP800-38D 5.2.1.1. * libgnutls: New block cipher functions have been added to transparently handle padding. gnutls_cipher_encrypt3 and gnutls_cipher_decrypt3 can be used in combination of GNUTLS_CIPHER_PADDING_PKCS7 flag to automatically add/remove padding if the length of the original plaintext is not a multiple of the block size. * libgnutls: New function for manual FIPS self-testing. * API and ABI modifications: - gnutls_fips140_run_self_tests: New function - gnutls_cipher_encrypt3: New function - gnutls_cipher_decrypt3: New function - gnutls_cipher_padding_flags_t: New enum * guile: Guile 1.8 is no longer supported * guile: Session record port treats premature termination as EOF Previously, a 'gnutls-error' exception with the 'error/premature-termination' value would be thrown while reading from a session record port when the underlying session was terminated prematurely. This was inconvenient since users of the port may not be prepared to handle such an exception. Reading from the session record port now returns the end-of-file object instead of throwing an exception, just like it would for a proper session termination. * guile: Session record ports can have a 'close' procedure. The 'session-record-port' procedure now takes an optional second parameter, and a new 'set-session-record-port-close!' procedure is provided to specify a 'close' procedure for a session record port. This 'close' procedure lets users specify cleanup operations for when the port is closed, such as closing the file descriptor or port that backs the underlying session. * Rebase patches: - gnutls-3.6.6-set_guile_site_dir.patch - gnutls-FIPS-TLS_KDF_selftest.patch - gnutls-FIPS-disable-failing-tests.patch * Remove patch merged upstream: - gnutls-FIPS-PBKDF2-KAT-requirements.patch - https://gitlab.com/gnutls/gnutls/merge_requests/1561 ==== iso-codes ==== Version update (4.10.0 -> 4.11.0) Subpackages: iso-codes-lang - Update to version 4.11.0: + Update ISO 639-3 codes from SIL website. + Updated translations. ==== kernel-source ==== Version update (5.18.12 -> 5.18.15) - Linux 5.18.15 (bsc#1012628). - watch-queue: remove spurious double semicolon (bsc#1012628). - ASoC: SOF: Intel: disable IMR boot when resuming from ACPI S4 and S5 states (bsc#1012628). - ASoC: SOF: pm: add definitions for S4 and S5 states (bsc#1012628). - ASoC: SOF: pm: add explicit behavior for ACPI S1 and S2 (bsc#1012628). - watchqueue: make sure to serialize 'wqueue->defunct' properly (bsc#1012628). - x86/alternative: Report missing return thunk details (bsc#1012628). - x86/amd: Use IBPB for firmware calls (bsc#1012628). - exfat: use updated exfat_chain directly during renaming (bsc#1012628). - exfat: fix referencing wrong parent directory information after renaming (bsc#1012628). - crypto: qat - re-enable registration of algorithms (bsc#1012628). - crypto: qat - add param check for DH (bsc#1012628). - crypto: qat - add param check for RSA (bsc#1012628). - crypto: qat - remove dma_free_coherent() for DH (bsc#1012628). - crypto: qat - remove dma_free_coherent() for RSA (bsc#1012628). - crypto: qat - fix memory leak in RSA (bsc#1012628). - crypto: qat - add backlog mechanism (bsc#1012628). - crypto: qat - refactor submission logic (bsc#1012628). - crypto: qat - use pre-allocated buffers in datapath (bsc#1012628). - crypto: qat - set to zero DH parameters before free (bsc#1012628). - dlm: fix pending remove if msg allocation fails (bsc#1012628). - clk: lan966x: Fix the lan966x clock gate register address (bsc#1012628). - x86/bugs: Warn when "ibrs" mitigation is selected on Enhanced IBRS parts (bsc#1012628). - perf/x86/intel/lbr: Fix unchecked MSR access error on HSW (bsc#1012628). - sched/deadline: Fix BUG_ON condition for deboosted tasks (bsc#1012628). - bpf: Make sure mac_header was set before using it (bsc#1012628). - mm/mempolicy: fix uninit-value in mpol_rebind_policy() (bsc#1012628). - KVM: Don't null dereference ops->destroy (bsc#1012628). - spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for non DMA transfers (bsc#1012628). - KVM: selftests: Fix target thread to be migrated in rseq_test (bsc#1012628). - gpio: gpio-xilinx: Fix integer overflow (bsc#1012628). - selftests: gpio: fix include path to kernel headers for out of tree builds (bsc#1012628). - net/sched: cls_api: Fix flow action initialization (bsc#1012628). - tcp: Fix data-races around sysctl_tcp_max_reordering (bsc#1012628). - tcp: Fix a data-race around sysctl_tcp_abort_on_overflow (bsc#1012628). - tcp: Fix a data-race around sysctl_tcp_rfc1337 (bsc#1012628). - tcp: Fix a data-race around sysctl_tcp_stdurg (bsc#1012628). - tcp: Fix a data-race around sysctl_tcp_retrans_collapse (bsc#1012628). - tcp: Fix data-races around sysctl_tcp_slow_start_after_idle (bsc#1012628). - tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts (bsc#1012628). - tcp: Fix data-races around sysctl_tcp_recovery (bsc#1012628). - tcp: Fix a data-race around sysctl_tcp_early_retrans (bsc#1012628). - tcp: Fix data-races around sysctl knobs related to SYN option (bsc#1012628). - udp: Fix a data-race around sysctl_udp_l3mdev_accept (bsc#1012628). - ip: Fix data-races around sysctl_ip_prot_sock (bsc#1012628). - ipv4: Fix data-races around sysctl_fib_multipath_hash_fields (bsc#1012628). - ipv4: Fix data-races around sysctl_fib_multipath_hash_policy (bsc#1012628). - ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh (bsc#1012628). - can: rcar_canfd: Add missing of_node_put() in rcar_canfd_probe() (bsc#1012628). - drm/imx/dcss: Add missing of_node_put() in fail path (bsc#1012628). - drm/panel-edp: Fix variable typo when saving hpd absent delay from DT (bsc#1012628). - amt: do not use amt->nr_tunnels outside of lock (bsc#1012628). - amt: drop unexpected multicast data (bsc#1012628). - amt: drop unexpected query message (bsc#1012628). - amt: drop unexpected advertisement message (bsc#1012628). - amt: add missing regeneration nonce logic in request logic (bsc#1012628). - amt: use READ_ONCE() in amt module (bsc#1012628). - amt: remove unnecessary locks (bsc#1012628). - amt: use workqueue for gateway side message handling (bsc#1012628). - net: dsa: vitesse-vsc73xx: silent spi_device_id warnings (bsc#1012628). - net: dsa: sja1105: silent spi_device_id warnings (bsc#1012628). - be2net: Fix buffer overflow in be_get_module_eeprom (bsc#1012628). ... changelog too long, skipping 599 lines ... - commit fcd7336 ==== libapparmor ==== Version update (3.0.5 -> 3.0.6) - update to AppArmor 3.0.6 - fix LTO build in the parser - remove dbus deny rule in abstractions/exo-open - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.6 for the detailed upstream changelog - drop upstream patch dirtest-sort-mr900.diff ==== libavif ==== - Enable libyuv on TW ==== libblockdev ==== Version update (2.26 -> 2.27) Subpackages: libbd_btrfs2 libbd_crypto2 libbd_fs2 libbd_loop2 libbd_lvm2 libbd_mdraid2 libbd_part2 libbd_swap2 libbd_utils2 libblockdev2 - Update to version 2.27: + Fix for s390x: Remove double fclose in bd_s390_dasd_online + fs: Return BD_FS_ERROR_UNKNOWN_FS on mounting unknown filesystem + overrides: Fix translating exceptions in ErrorProxy + vdo_stats: Default to 100 % savings for invalid savings values + lvm-dbus: Add support for changing compression and deduplication + lvm: - Fix reading statistics for VDO pools with VDO 8 - Do not set global config to and empty string - Do not include duplicate entries in bd_lvm_lvs output - Use correct integer type in for comparison + crypto: Remove useless comparison in progress report in luks_format ==== libgcrypt ==== - Fix reproducible build problems: - Do not use %release in binaries (but use SOURCE_DATE_EPOCH) - Fix date call messed up by spec-cleaner ==== libgsm ==== Version update (1.0.19 -> 1.0.20) - Update to 1.0.20: * Use $(RMFLAGS) with the rms in the Makefile; add -f to $(RMFLAGS) to avoid spurious error messages during build. - Rebase and rename libgsm-1.0.20.patch from libgsm-1.0.13.patch. - Rebase libgsm-include.patch. ==== libnvme ==== Version update (1.1~rc0 -> 1.1) - Update to version 1.1: * Regenerate all documentation * json: fixup dhchap_ctrl_key definitions * fabrics: Fix build_options() return values * fabrics: sanitize dump-config output * Fix poll.h includes * build: Drop -nostdinc for LibreSSL header checks * ioctl: Honor rae in nvme_get_nsid_log * build: Add support to build against LibreSSL * rpmbuild: Enable 'make rpm' to build rpm pkgs #408 * mi: unify MI Get Log Page function with ioctl API * python: add missing ctrl attrs to Python bindings * mi-mctp: Add timeout support to MCTP transport * mi: Add maximum More Processing Required limit API * mi: Add endpoint get/set timeout API ==== mokutil ==== Version update (0.5.0 -> 0.6.0) - Update to 0.6.0 + 6c98907 SBAT revocation update support + 0276891 mokutil: Add trust_mok_keys and untrust_mok_keys + 57bc385 mokutil: enable setting fallback verbosity and noreboot mode + b15e7c4 util: add the missing stdio.h - Drop mokutil-fix-missing-header.patch (upstream) ==== mozilla-nss ==== Version update (3.79 -> 3.80) Subpackages: libfreebl3 libfreebl3-hmac libsoftokn3 libsoftokn3-hmac mozilla-nss-certs - update to NSS 3.80 * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h. * bmo#1617956 - Add support for asynchronous client auth hooks. * bmo#1497537 - nss-policy-check: make unknown keyword check optional. * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations by allocating it on initialization. Replaced redundant code with assert. Debug builds: Added buffer freeing/allocation for each record. * bmo#1773022 - Mark 3.79 as an ESR release. * bmo#1764206 - Bump nssckbi version number for June. * bmo#1759815 - Remove Hellenic Academic 2011 Root. * bmo#1770267 - Add E-Tugra Roots. * bmo#1768970 - Add Certainly Roots. * bmo#1764392 - Add DigitCert Roots. * bmo#1759794 - Protect SFTKSlot needLogin with slotLock. * bmo#1366464 - Compare signature and signatureAlgorithm fields in legacy certificate verifier. * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld. * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg. * bmo#1771498 - Uninitialized value in cert_ComputeCertType. * bmo#1760998 - Avoid data race on primary password change. * bmo#1769063 - Replace ppc64 dcbzl intrinisic. * bmo#1771036 - Allow LDFLAGS override in makefile builds. ==== mpg123 ==== Version update (1.30.1 -> 1.30.2) Subpackages: libmpg123-0 mpg123-openal - Update to version 1.30.2 * Only use EWOULDBLOCK if the macro is defined. ==== nano ==== - Added obs-channel-and-patchinfo-syntax.patch to support syntax highlighting for _channel and _patchinfo files used by OBS ==== nvme-cli ==== Version update (2.1~rc0 -> 2.1.1) Subpackages: nvme-cli-bash-completion - Update to version 2.1.1: * build: Update version to v2.1.1 * build: Extend release script to support micro version releases * build: Add minimum build requirement on libnvme * wrapper: Add weak nvme_init_copy_range_f1 symbol * build: Update version before regenerating docs * build: Update release version rules - Update to version v2.1: * nvme: Do not print error message in collect_effects_log helper * fabrics: Remove dhchap-ctrl-secret from discover/connect-all * nvme-print: sanitize the get-feature async event config output * nvme: Set default rae value for nvme_get_nsid_log users * fabrics: Avoid nvme_scan_ctrl when disconnecting * print: Fix nvme_id_uuid_list ==== pandoc ==== Version update (2.17.1.1 -> 2.18) - Update pandoc to version 2.18. [#]# pandoc 2.18 (2022-04-22) * New input formats: `endnotexml` (EndNote XML bibliography), `ris` (RIS bibliography). * A RIS bibliography file may now be used with `--citeproc`. * Citeproc: Allow a formatted bibliography to be placed in metadata fields via a Div with class `refs` (#7969, #526). Thus, one can include a metadata field, say `refs`, whose content is an empty div with id `refs`, and the formatted bibliography will be put into this metadata field. It may then be interpolated into a template using the variable `refs`. * Ensure that you don't get PDF output to terminal. `-t pdf` now behaves like `-t docx` and gives an error unless the output is redirected. * `--version` now prints hslua version (#7929) and Lua version (#7997, Albert Krewinkel). * Change `--metadata-file` parsing so that, when the input format is not markdown or a markdown variant, pandoc's markdown is used (#6832, #7926). When the input format is a markdown variant, the same format is used. Reason for the change: it doesn't make sense to run the markdown parser with a set of extensions designed for a non-markdown format, and this dramatically limits what people can do in metadata files. * Trim whitespace from math in `--webtex` (#7892). This fixes problems with --webtex and markdown output, when display math starts or ends with a newline. * New exported module Text.Pandoc.Readers.EndNote, exporting `readEndNoteXML`, `readEndNoteXMLCitation`, and `readEndNoteXMLReferences`. [API change] * `--self-contained`: issue warning rather than failing with an error if a resource can't be found (#7904). * New exported module, Text.Pandoc.Readers.RIS, exporting `readRIS` (#7894). * LaTeX reader: + Handle subequations as inline math environment (#7883). + Rudimentary support for `vbox` (#7939). + Support `\today` (#7905). + Handle `\label` and `\ref` for footnotes (#7930). + Allow inline groups starting with `\bgroup` (#7953). + Use custom TokStream that keeps track of whether macros are expanded. This allows us to improve performance a bit by avoiding unnecessary runs of the macro expansion code (e.g. from 24 ms to 20 ms on our standard benchmark). + Further optimizations for inline parsing. + Better handling of `\usepackage`. If the package is local but causes parse errors, parse everything up to the error and skip the rest. Issue a `CouldNotParseIncludeFile` warning indicating that parsing failed at that point. + Text.Pandoc.Readers.LaTeX.Parsing: Monoid and Semigroup instances for TokStream. * HTML reader: + Give warnings and emit empty note when parsing `` and the identifier doesn't correspond to anything in the note table (#7884). Previously we just silently skipped these cases. + Fix parsing of epub footnotes (#7884). * DocBook reader: + Handle complete set of entities as specified at (#7938). + Handle abstract in info section (#7747). + Improve info parsing. + Simplify metadata parsing code (#7747). Handle abstract as block-level content. Report skipped info elements with `--verbose`. + Handle address and coyright in metadata (#7747). * DokuWiki reader: + Add DokuWiki table alignment (#5202, damon-sava-stanley). * RST reader: + Fix treatment of headerless simple tables (#7902). + Wrap math in Span to preserve attributes (#7998, Albert Krewinkel). Math elements with a name, classes, or other fields are wrapped in a `Span` with these attributes. * JATS reader: + Improve handling of fn-group elements (#6348, Albert Krewinkel). Footnotes in `` elements are collected and re-inserted into the document as proper footnotes in the place where they are referenced. + Handle `pub-date` (#8000). + Support PMID, DOI, issue in citations (#7995). + Improve refs parsing. Handle `issn` and `isbn`; use simpler form for issued date. + Strip 'ref-' from ref id in constructing CSL id. This allows better round-tripping, because the JATS writer adds the `ref-` prefix to the citation id to get the ref element's id. * Org reader: + Allow ":" in property drawer keys (Lucas V. R). Any non-space character is allowed as property drawer key, including ":" itself (so it is not really a delimiter). The real delimiter is a space character, so in a drawer like ``` :PROPERTIES: ::k:ey:: value :END: ``` ":k:ey:" is a key with value "value". + Allow comments above property drawer. + More flexible LaTeX environments (Lucas V. R). + Handle `#+bibliography:` as metadata so that it can work with `--citeproc`. + Parse `#+print_bibliography:` as Div with id `refs`. + Allow multiple `#+bibliography:`. * Markdown reader: + Allow one-column pipe tables with pipe on right (#7919). ... changelog too long, skipping 171 lines ... with hslua 2.1 and Lua 5.3, otherwise hslua 2.2 and Lua 5.4. ==== pipewire ==== Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Recommend pipewire-alsa (instead of alsa-plugins-pulse) from pipewire-pulseaudio (boo#1201409) ==== polkit ==== Subpackages: libpolkit-agent-1-0 libpolkit-gobject-1-0 typelib-1_0-Polkit-1_0 - add split-provides for polkit:/usr/bin/pkexec. (bsc#1202070) ==== poppler ==== Version update (22.07.0 -> 22.08.0) Subpackages: libpoppler-cpp0 libpoppler-glib8 poppler-tools - update to 22.08.0: * Fix rendering text on some forms * CairoOutputDev: Support Type3 charprocs having Resources * Fix crashes on malformed files ==== poppler-qt5 ==== Version update (22.07.0 -> 22.08.0) - update to 22.08.0: * Fix rendering text on some forms * CairoOutputDev: Support Type3 charprocs having Resources * Fix crashes on malformed files ==== python-Genshi ==== Version update (0.7.5 -> 0.7.7) - Update to 0.7.7: * Declared setuptools as the build backend (#65) * Fixed deprecation warnings caused by escape sequences in regex pattern strings (#63) - Changes from 0.7.6: * Added support for Python 3.10 and 3.11 (#54, #56, #58) * Replaced assertEquals with assertEqual. assertEquals was deprecated in Python 3.2. (#42) * Removed used of element.getchildren() which has been removed from the Python standard library elementtree in Python 3.9. (#57) * Added support for Python 3.10 by using CodeType.replace in `build_code_chunk` to make code object updates more robust against changes in CodeType. (#49) * Moved tests and releases workflows to GitHub Actions (#61, #51) * Fixed reference leak in Markup.join C implementation. (#47) * Sort directives only by directive index. Previously they were sorted by the class, namespace and arguments of the directives. This was acceptable in Python 2, but is a bug in Python 3 since some the arguments may not be comparable. (#44) * Add support for msgctxt to i18n. (#13) * Implemented skipping of empty attributes during translation to match the behaviour during translation extraction (i.e. don't try to translate empty strings that are not extracted). (#38) * Ported setuptools options to declarative config in setup.cfg. (#40) * Removed used of deprecated setuptools Feature in setup.py. (#39) - Removed patches, already in upstream: * Genshi-pr39-fix-setuptools-extension.patch * Genshi-pr49-fix-python310-tests.patch ==== python-Mako ==== Version update (1.1.6 -> 1.2.1) - Update to 1.2.1: * [bug] [tests] Various fixes to the test suite in the area of exception message rendering to accommodate for variability in Python versions as well as Pygments. * [performance] Optimized some codepaths within the lexer/Python code generation process, improving performance for generation of templates prior to their being cached. Pull request courtesy Takuto Ikuta. * [changed] [py3k] Corrected "universal wheel" directive in setup.cfg so that building a wheel does not target Python 2. * [changed] [py3k] The bytestring_passthrough template argument is removed, as this flag only applied to Python 2. * [changed] [py3k] With the removal of Python 2's cStringIO, Mako now uses its own internal FastEncodingBuffer exclusively. * [changed] Refactored test utilities into mako.testing module. Removed unittest.TestCase dependency in favor of pytest. * [changed] [setup] Replaced the use of pkg_resources with the importlib library. For Python < 3.8 the library importlib_metadata is used. * [changed] [py3k] Removed support for Python 2 and Python 3.6. Mako now requires Python >= 3.7. * [bug] [py3k] Mako now performs exception chaining using raise from, correctly identifying underlying exception conditions when it raises its own exceptions. Pull request courtesy Ram Rachum. - Remove python2 gubbins, since it is no longer supported. ==== python-alembic ==== Version update (1.8.0 -> 1.8.1) - update to 1.8.1: * Fixed bug where the SQLite implementation of :meth:`.Operations.rename_table` would render an explicit schema name for both the old and new table name, which while is the standard ALTER syntax, is not accepted by SQLite's syntax which doesn't support a rename across schemas. In particular, the syntax issue would prevent batch mode from working for SQLite databases that made use of attached databases (which are treated as "schemas" in SQLAlchemy). * Added an error raise for the condition where :meth:`.Operations.batch_alter_table` is used in ``--sql`` mode, where the operation requires table reflection, as is the case when running against SQLite without giving it a fixed ``Table`` object. Previously the operation would fail with an internal error. To get a "move and copy" batch operation as a SQL script without connecting to a database, a ``Table`` object should be passed to the :paramref:`.Operations.batch_alter_table.copy_from` parameter so that reflection may be skipped. ==== python-cffi ==== Version update (1.15.0 -> 1.15.1) - update to 1.15.1: * If you call ffi.embedding_api() but don’t write any extern “Python” function there, then the resulting C code would fail an assert. Fixed. * Updated Windows/arm64 embedded libffi static lib to v3.4.2, and scripted to ease future updates (thanks Niyas Sait!) ==== python-cryptography ==== Version update (37.0.2 -> 37.0.4) - update to 37.0.4: * updated wheels to b ecompiled against openssl 3.0.5 ==== python-gobject ==== Version update (3.42.1 -> 3.42.2) Subpackages: python310-gobject python310-gobject-Gdk python310-gobject-cairo - Update to version 3.42.2: + Error out instead of crashing when marshaling unsupported fundamental types in some cases. + Add a workaround for a PyPy 3.9+ bug when threads are used. + Fix crashes when marshaling zero terminated arrays for certain item types. + Fix a crash/refcounting error in case marshaling a hash table fails. + Make the test suite pass again with PyPy. + tests: support running tests with (MSVC) CPython 3.8+ on Windows. + interface: Fix leak when overriding GInterfaceInfo. + setup.py: look up pycairo headers without importing the module (helps with building on Windows and MSVC CPython 3.8+). - Work around vendored distutils in setuptools >= 60 incorrectly installing pkgconfig files into the wrong libdir ==== python-hatchling ==== Version update (1.4.1 -> 1.6.0) - update to version 1.6.0: * Changed: + When no build targets are specified on the command line, now default to sdist and wheel targets rather than what happens to be defined in config + The code version source now only supports files with known extensions + Global build hooks now run before target-specific build hooks to better match expected behavior * Added: + The code version source now supports loading extension modules + Add search-paths option for the code version source * Fixed: + Fix removing sources using an empty string value in the mapping + The strict-naming option now also applies to the metadata directory of wheel targets - update to version 1.5.0: * Added: + Support the final draft of PEP 639 + Add strict-naming option for sdist and wheel targets * Fixed: Project names are now stored in sdist and wheel target core metadata exactly as defined in pyproject.toml without normalization to allow control of how PyPI displays them - require python 3.7 as minimum version to match upstream requirement ==== python-httpcore ==== Version update (0.14.7 -> 0.15.0) - Update to 0.15.0 * Drop Python 3.6 support (#535) * Ensure HTTP proxy CONNECT requests include timeout configuration. (#506) * Switch to explicit typing.Optional for type hints (#513) * For trio map OSError exceptions to ConnectError (#543) - Fix forgotten test package dep drops -- gh#encode/httpcore#473 ==== python-importlib-metadata ==== Version update (4.11.4 -> 4.12.0) - update to 4.12.0: * py-93259: Now raise ``ValueError`` when ``None`` or an empty string are passed to ``Distribution.from_name`` (and other callers). ==== python-ipywidgets ==== Version update (7.6.5 -> 7.7.1) - Update to version 7.7.1 * Fix broken link icon for FontAwesome 4 and 5 #3495 * Fix message throttling bug #3494 * Fix state message parsing to be more permissive #3486 * Fix tests on Python 3.11 #3480 * Add better front-page docs #3496 - Release 7.7 * Fix installation on Python 3.10. #3368 * Throw an error if we cannot render a widget, enabling the rendering system to fall back to rendering a different data type if available. #3290 * Create a new widget control comm channel, enabling more efficient fetching of kernel widget state. #3201 * Refactor logic for fetching kernel widget state to the manager base class. This logic first tries to use the new widget control comm channel, falling back to the existing method of requesting each widget's state individually. #3337 * Enable HTMLManager output widgets to render state updates. [#3372] * Do not reset JupyterLab CSS variables if they are already defined. #3344 * Fix variable inspector example. #3302 * Introduce new widget manager has_model method for synchronously checking if a widget model is registered. #3377 * Work around bug in Chrome rendering Combobox arrows. #3375 * Optionally echo update messages from frontends to other frontends. This enables widget views in different frontends to maintain consistent state simultaneously, and also makes sure that simultaneous updates from the kernel and frontend resolve to a consistent state. This is off by default in ipywidgets 7.7, and it is anticipated this will be on by default in ipywidgets 8.0. To enable echo update messages across ipywidgets, set the environment variable JUPYTER_WIDGETS_ECHO to 1. To opt a specific attribute out of echo updates, tag the attribute with echo_update=False metadata (we do this in core for the FileUpload widget's data attribute). #3400, #3394 - Drop ipywidgets-pr2655-collectionsabc.patch ==== python-jsonschema ==== Version update (4.5.1 -> 4.8.0) - update to 4.8.0: * ``best_match`` no longer traverses into ``anyOf`` and ``oneOf`` when all of the errors within them seem equally applicable. This should lead to clearer error messages in some cases where no branches were matched. - update to 4.7.2: * Fix best_match's type matching when it's an array. - update to 4.7.1: * Minor case correction for PyPI links - update to 4.7.0: * Enhance best match to prefer errors from matching types. by @Julian in #972 - update to 4.6.2: * docs: Fix a few typos by @timgates42 in #969 - update to 4.6.1: * Type annotate format checker methods by @sirosen in #958 * Fix fuzzer to include instrumentation by @DavidKorczynski in #965 * [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #967 - update to 4.6.0: * Add package_url for changelog by @fhightower in #950 * Only validate unevaluated properties/items on applicable types by @EpicWink in #949 * Add v4.5.1 to changelog by @sirosen in #956 * Modernize the packaging setup via PEP 621 and Hatch. by @Julian in #957 ==== python-jupyter-core ==== Version update (4.9.2 -> 4.11.1) - Update to 4.11.1 * Fix inclusion of jupyter file and check in CI by @blink1073 in [#276] - Release 4.11.0 * Use hatch backend by @blink1073 in #265 * is_hidden: Use normalized paths by @martinRenou in #271 - Release 4.10.0 * Include all files from jupyter_core by @jonringer in #253 - Refresh use_rpms_paths.patch ==== python-jupyter_console ==== Version update (6.4.3 -> 6.4.4) - Update to 6.4.4 * Use asyncio.create_task and asyncio.get_running_loop with interact(). * Drop Python 3.6. #270 (@encukou) ==== python-jupyterlab ==== Version update (3.2.3 -> 3.4.4) Subpackages: jupyter-jupyterlab python310-jupyterlab - Update to 3.4.4 Enhancements made * Adds version maintenance policy #12829 (@jweill-aws) * Increase title width in simple mode #11546 (@SylvainCorlay) * Bump xtermjs to latest #12715 (@yuvipanda) * Debugger: Make kernel source list react based #12751 (@vidartf) * Optimize debugger editor eachLine loops #12746 (@vidartf) * Make password inputs not give away how many characters were typed #12659 (@jasongrout) Bugs fixed * Remove drive prefix from the file path when creating the new path #12824 (@hbcarlos) * Use path to extract tmpPath #12823 (@fcollonval) * update tab name after file rename #12791 (@RobbyPratl) * Update base.css #12783 (@siddartha-10) * Pin nbclassic below 0.4.0 #12767 (@fcollonval) * Set focus when active cell changes only from mouse click #12735 (@fcollonval) * Fix staging/yarn.lock registry #12742 (@vidartf) * Debugger: Fix CSS for variables inspecting #12749 (@martinRenou) * Translate "Default: " and "Remove" in custom fields #12732 (@krassowski) * Fix cell toolbar overlap in side-by-side render mode #12710 (@peytondmurray) * Remove ipywidgets message count in the execution indicator model #12665 (@trungleduc) Maintenance and upkeep improvements * Update verdaccio, start registry on 0.0.0.0 #12825 (@fcollonval) * Use Vega SVG renderer to drop canvas dependency #12811 (@fcollonval) * Bump moment from 2.29.2 to 2.29.4 #12781 (@dependabot[bot]) * [memory-leaks] Fixes following cell addition analysis #12774 (@fcollonval) * Bump @lumino/widgets to 1.33.0 #12777 (@fcollonval) * Fix memory leaks #12750 (@fcollonval) * Bump version of marked and @types/marked #12747 (@krassowski) * Drop pre-commit from build dependencies (#12680) #12706 (@jtpio) - Release 3.4.3 New features added * Persistent side-by-side ratio setting #12633 (@echarles) Enhancements made * Persistent side-by-side ratio setting #12633 (@echarles) * Add "Open in Simple Mode" contextMenu option #12577 * (@fcollonval) Bugs fixed * Always check local packages against abspath #10662 (@mlucool) * Fix arrow position on unrendered markdown cell #12660 (@fcollonval) * Fix the side-by-side cell resize handle #12611 (@echarles) * Fix loading toolbar factory twice #12599 (@fcollonval) * Fixes behavior of maxNumberOutputs #12598 (@fcollonval) * Focus not set when clicking on cell margin #12447 (@fcollonval) * Make selected text translucent so the cursor is visible in vim mode #12520 (@Jessie-Newman) * Fix file browser search highlighting bug #12578 (@fcollonval) - Release 3.4.2 * Building extensions fail if not using latest patch #12571 (@ajbozarth) * fixed shouldOverwrite is never called when rename target exists [#12543] (@ephes) - Release 3.4.1 Enhancements made * Setting to use the advanced setting editor for the settings * #12466 (@echarles) Bugs fixed * Allow users to yarn link @jupyterlab/builder #12533 (@ajbozarth) * Get Auto Close Brackets working consistently in Consoles #12508 (@Jessie-Newman) * Handled new dialog creation with no buttons #12496 (@Jnnamchi) * Handle missing preferredPath from the page config #12521 (@jtpio) - Release 3.4.0 Enhancements made * Add ability to open settings editor to specific plugin's settings #12506 (@fcollonval) * Don't sort context menu items by selector #12505 (@fcollonval) * Allow downstream extension to set toolbar layout #12503 (@fcollonval) * Display default value in setting editor for changed values [#12468] (@echarles) * Uses dark theme for Vega when JupyterLab theme is dark #12411 (@jweill-aws) * Creates cell-toolbar, cell-toolbar-extension packages and populates toolbar #12028 (@jweill-aws) * Customize the file browser toolbar via the settings #12441 (@fcollonval) * Wait until file browser commands are ready before activating file browser widget #12435 (@fcollonval) * Add a "New Tab" button that opens the launcher #12195 (@ajbozarth) * Simplify galata import by proxying expect #12311 (@fcollonval) * Open terminal in cwd from launcher #12250 (@rccern) * Add support for filtering by field names in setting editor [#12082] (@marthacryan) * Use transform to quickly switch between tabs. #11074 ... changelog too long, skipping 24 lines ... ChANGELOG.md ==== python-jupyterlab-pygments ==== Version update (0.1.2 -> 0.2.2) - Update to v0.2.2 * no release notes - Add labextensions subpackage ==== python-nbclassic ==== Version update (0.3.7 -> 0.4.3) Subpackages: jupyter-nbclassic python310-nbclassic - Update to 0.4.3 * Handle execution errors with empty traceback entries similar to Lab #126 (@kevin-bates) * fix some import errors in 0.4 #130 (@minrk) * fix enable-on-install #127 (@minrk) * Fix notebook shim version check #129 (@minrk) - Release 0.4.2 * Don't shim notebook if notebook<7 is available #123 (@echarles) * Relax assert for IPythonHandler in case of notebook<6 #122 (@echarles) * Fix executable name in desktop file #119 (@antonio-rojas) - Release 0.4.0 * Shim to support the notebook extensions #113 (@echarles) * nbclassic to use its own static assets #96 (@echarles) * Add the notebook 6.4.x tests, docs and companion files (with git history) #94 (@echarles) * Add the notebook static assets (with git history) #93 (@echarles) - Use the pure wheel for install which has the JS stuff. - Override notebook entrypoints with higer priority libalternatives configurations gh#jupyter/notebook#6501 - Test in multibuild for all the dependencies. Stay with nbclassic tests only, not the notebook tests further down in the tree. ==== python-notebook ==== Subpackages: jupyter-notebook python310-notebook - Enforce libalternatives grouping for nbclassic alternatives gh#jupyter/notebook#6501 ==== python-numexpr ==== - Fix requirements ==== python-psutil ==== - Fix tests: setuptools changed the builddir library path and does not find the module from it. Use the installed platlib instead and exclude psutil.tests only later. - Refresh skip-obs.patch ==== python-pycairo ==== - Work around vendored distutils in setuptools >= 60 incorrectly installing pkgconfig files into the wrong libdir - Deduplicate files in python_sitearch ==== python-regex ==== Version update (2022.6.2 -> 2022.7.9) - update to 2022.7.9: * Fix Emoji classified as letter * Revisit compilation flag to prevent adding a single explicitly compiled regex to cache * Fix Scoped inline flags 'a', 'u', and 'L' affecting global flags ==== python-scipy ==== - Keep lowercase egg-info despite setuptools 60+ ==== python-urllib3 ==== Version update (1.26.9 -> 1.26.11) - update to 1.26.11 * Fix OverflowError when TLS is used on some Python versions - update to 1.26.10: * Removed support for Python 3.5 * Fixed an issue where a ``ProxyError`` recommending configuring the proxy as HTTP instead of HTTPS could appear even when an HTTPS proxy wasn't configured. - refresh remove_mock.patch with extra mock usages ==== python-wcwidth ==== - Add patch remove-pkg_resources.patch: * Use importlib.metadata rather than pkg_resources. - Since importlib.metadata is not as a stickler as pkg_resources is, remove multibuild. ==== python-widgetsnbextension ==== Version update (3.6.0 -> 3.6.1) Subpackages: jupyter-widgetsnbextension python310-widgetsnbextension - Update to 3.6.1 * no release notes (JS static version bumps) ==== read-only-root-fs ==== Version update (1.0+git20200730.1243fd0 -> 1.0+git20220801.cbb90bc) - Update to version 1.0+git20220801.cbb90bc: * Add another workaround for read-only subvolumes (boo#1202000) * Correctly declare mount-overlay.sh as Bash file - Update source service URL ==== rsync ==== - Security fix: [bsc#1201840, CVE-2022-29154] * arbitrary file write vulnerability via do_server_recv function * Added patch rsync-rsync-CVE-2022-29154.patch ==== tiff ==== - security update: * CVE-2022-34526 [bsc#1202026] + tiff-CVE-2022-34526.patch ==== util-linux-systemd ==== - exclude bash-completion stuff for programs that are in util-linux-systemd from util-linux for real. ==== vim ==== Version update (9.0.0073 -> 9.0.0135) Subpackages: vim-data vim-data-common vim-small - Updated to version 9.0.0135, fixes the following problems * Coverity warns for double free. * Some compilers warn for using an uninitialized variable. (Tony Mechelynck) * No test for what patch 8.1.1424 fixes. * When switching window in autocmd the restored cursor position may be wrong. * Star register is changed when deleting and both "unnamed" and "unnamedplus" are in 'clipboard'. * Error in autoload script not reported for 'foldexpr'. * Compiler warning for size_t to int conversion. * Command line completion of user command may have duplicates. (Dani Dickstein) * Cannot interrupt global command from command line. * ModeChanged event not triggered when leaving the cmdline window. * Using "terraform" filetype for .tfvars file is bad. * ":write" fails after ":file name" and then ":edit". * Tabline is not redrawn when entering command line. * MS-Windows: CTRL-[ on Belgian keyboard does not work like Esc. * Pattern for detecting bitbake files is not sufficient. * Fuzzy argument completion doesn't work for shell commands. * No error when assigning bool to a string option with setwinvar(). * Duplicate error number. * Plugins cannot change v:completed_item. * Sway config files are recognized as i3config. * Cursor restored unexpected with nested autocommand. * Conditions are always true. * Flag "new_value_alloced" is always true. * Long quickfix line is truncated for :clist. * missing include file in timer_create configure check. * Scrollback can be wrong after redrawing the command line. * Get hit-enter prompt for system() when '!' is in 'guioptions'. * Invalid memory access in diff mode with "dp" and undo. * Reading past end of line with insert mode completion. * If running configure with cached results -lrt may be missing. * Illegal memory access when pattern starts with illegal byte. * Illegal byte regexp test doesn't fail when fix is reversed. * Condition always has the same value. * Configure check for timer_create may give wrong error. * Writing over the end of a buffer on stack when making list of spell suggestions. * Help tag generation picks up words in code examples. * "nocombine" is missing from synIDattr(). * has() is not strict about parsing the patch version. * The command line takes up space even when not used. * When 'cmdheight' is zero pressing ':' may scroll a window. * Virtual text not displayed if 'signcolumn' is "yes". * Text of removed textprop with text is not freed. * No test for what patch 9.0.0155 fixes. * Tiny chance that creating a backup file fails. * Cannot put virtual text after or below a line. * Breakindent test fails. * Cannot build with small features. * Code has more indent than needed. * Cursor positioned wrong with virtual text after the line. * Expanding file names fails in directory with more than 255 entries. * Unused variable. * Coverity complains about possible double free. * Compiler warning for int/size_t usage. * Cursor position wrong when inserting around virtual text. * Virtual text with Tab is not displayed correctly. * Multi-byte characters in virtual text not handled correctly. * Virtual text after line moves to joined line. (Yegappan Lakshmanan) * No test for text property with column zero. ==== webkit2gtk3 ==== Version update (2.36.4 -> 2.36.5) Subpackages: libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 webkit2gtk-4_1-injected-bundles - Update to version 2.36.5 (boo#1201980): + Add support for PAC proxy in the WebDriver implementation. + Fix video playback when loaded through custom URIs, this fixes video playback in the Yelp documentation browser. - Fix WebKitWebView::context-menu when using GTK4. - Fix LTO builds with GCC. - Fix several crashes and rendering issues. + Security fixes: CVE-2022-32792, CVE-2022-32816. - Drop webkit2gtk3-fix-build.patch: fixed upstream. ==== webkit2gtk3-soup2 ==== Version update (2.36.4 -> 2.36.5) Subpackages: libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 webkit2gtk-4_0-injected-bundles - Update to version 2.36.5 (boo#1201980): + Add support for PAC proxy in the WebDriver implementation. + Fix video playback when loaded through custom URIs, this fixes video playback in the Yelp documentation browser. - Fix WebKitWebView::context-menu when using GTK4. - Fix LTO builds with GCC. - Fix several crashes and rendering issues. + Security fixes: CVE-2022-32792, CVE-2022-32816. - Drop webkit2gtk3-fix-build.patch: fixed upstream. ==== webkit2gtk4 ==== Version update (2.36.4 -> 2.36.5) Subpackages: libjavascriptcoregtk-5_0-0 libwebkit2gtk-5_0-0 typelib-1_0-JavaScriptCore-5_0 typelib-1_0-WebKit2-5_0 webkit2gtk-5_0-injected-bundles - Update to version 2.36.5 (boo#1201980): + Add support for PAC proxy in the WebDriver implementation. + Fix video playback when loaded through custom URIs, this fixes video playback in the Yelp documentation browser. - Fix WebKitWebView::context-menu when using GTK4. - Fix LTO builds with GCC. - Fix several crashes and rendering issues. + Security fixes: CVE-2022-32792, CVE-2022-32816. - Drop webkit2gtk3-fix-build.patch: fixed upstream. ==== xdg-utils ==== Version update (1.1.3+20201113 -> 1.1.3+20210805) - Update to version 1.1.3+20210805: * xdg-email fails on kde with desktop files #187 - switch to obs_scm ==== zlib-ng-compat ==== - Add baselibs.conf