Packages changed: ImageMagick (7.1.1.3 -> 7.1.1.5) Mesa-demo (8.5.0 -> 9.0.0) aaa_base (84.87+git20220822.6b9f7a3 -> 84.87+git20230329.b39efbc) container-selinux (2.198.0 -> 2.206.0) coreutils (9.1 -> 9.2) gcc12 gegl (0.4.42 -> 0.4.44) gnome-characters gnome-control-center (44.0+7 -> 44.0+20) gnome-shell (44.0+28 -> 44.0+42) gnome-weather gobject-introspection gstreamer-plugins-bad kernel-source (6.2.8 -> 6.2.9) ldb (2.7.1 -> 2.7.2) libcap (2.67 -> 2.68) libgarcon (4.18.0 -> 4.18.1) libheif (1.15.1 -> 1.15.2) libnvme (1.3 -> 1.4) libstorage-ng (4.5.88 -> 4.5.92) libupnp (1.14.15 -> 1.14.16) libxcrypt libxfce4ui (4.18.2 -> 4.18.3) mutter (44.0+8 -> 44.0+18) nfs-utils nvme-cli (2.3 -> 2.4) open-vm-tools (12.1.5 -> 12.2.0) perl-Image-ExifTool (12.58 -> 12.59) polkit python-numpy (1.24.1 -> 1.24.2) python-setuptools (65.6.3 -> 67.6.0) ruby3.2 (3.2.1 -> 3.2.2) samba (4.18.0+git.294.508b693e5c -> 4.18.1+git.298.4ccf830b2a4) shared-mime-info snapper systemd-rpm-macros (19 -> 20) thunar-plugin-archive (0.5.0 -> 0.5.1) timezone (2023b -> 2023c) timezone-java (2023b -> 2023c) util-linux util-linux-systemd vim (9.0.1392 -> 9.0.1430) vulkan-loader (1.3.239.0 -> 1.3.243.0) vulkan-tools (1.3.239.0 -> 1.3.243.0) xen (4.17.0_04 -> 4.17.0_06) xfce4-panel (4.18.2 -> 4.18.3) xfce4-pulseaudio-plugin (0.4.5 -> 0.4.6) xfce4-session (4.18.1 -> 4.18.2) xorg-x11-server (21.1.7 -> 21.1.8) xwayland (23.1.0 -> 23.1.1) yast2-storage-ng (4.6.2 -> 4.6.3) === Details === ==== ImageMagick ==== Version update (7.1.1.3 -> 7.1.1.5) Subpackages: ImageMagick-config-7-SUSE ImageMagick-extra libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - update to 7.1.1.5: https://github.com/ImageMagick/Website/blob/main/ChangeLog.md#711-5---2023-03-26 ==== Mesa-demo ==== Version update (8.5.0 -> 9.0.0) Subpackages: Mesa-demo-egl Mesa-demo-es Mesa-demo-x - enabled osmesa and libdrm support - enabled vulkan support (first Vulkan demo: vkgears!) - Update to version 9.0.0 - supersedes n_install-more-egl-binaries.patch ==== aaa_base ==== Version update (84.87+git20220822.6b9f7a3 -> 84.87+git20230329.b39efbc) Subpackages: aaa_base-extras - Update to version 84.87+git20230329.b39efbc: * Fix glibc requirement - Update to version 84.87+git20230309.04eae92: * Add conditional glibc requirement back * Keep owning /etc/sysctl.conf to avoid rpmsave - Update to version 84.87+git20230220.2991cfd: * Add instructions to build in place * Remove pre scriptlet * Don't create mtab symlink * Don't create /root/.bash_history * Don't enable lastlog by default * Fix #91: do not accidental unset shell functions * Prepare more /etc cleanup ==== container-selinux ==== Version update (2.198.0 -> 2.206.0) - Update to version 2.206.0: * Allow unconfined domains to transition to container_runtime_t * Allow container domains to transition to install_t * Allow avirt_sandbox_domain to manage container_file_t types * Allow containers to watch sysfs_t directories * Allow spc_t to transption to rpm_script_t * Add support to new user_namespace access check * Smaller permission changes for container_init_t - Drop spc.patch, is now included ==== coreutils ==== Version update (9.1 -> 9.2) - update to 9.2: * cksum now accepts the --base64 (-b) option to print base64-encoded checksums. It also accepts/checks such checksums. * cksum now accepts the --raw option to output a raw binary checksum. No file name or other information is output in this mode. * cp, mv, and install now accept the --debug option to print details on how a file is being copied. * factor now accepts the --exponents (-h) option to print factors in the form p^e, rather than repeating the prime p, e times. * ls now supports the --time=modification option, to explicitly select the default mtime timestamp for display and sorting. * mv now supports the --no-copy option, which causes it to fail when asked to move a file to a different file system. * split now accepts options like '-n SIZE' that exceed machine integer range, when they can be implemented as if they were infinity. * split -n now accepts piped input even when not in round-robin mode, by first copying input to a temporary file to determine its size. * wc now accepts the --total={auto,never,always,only} option to give explicit control over when the total is output. * 'cp --reflink=always A B' no longer leaves behind a newly created empty file B merely because copy-on-write clones are not supported. * 'cp -n' and 'mv -n' now exit with nonzero status if they skip their action because the destination exists, and likewise for 'cp - i', 'ln -i', and 'mv -i' when the user declines. (POSIX specifies this for 'cp -i' and 'mv -i'.) * cp, mv, and install again read in multiples of the reported block size, to support unusual devices that may have this constraint. * du --apparent now counts apparent sizes only of regular files and symbolic links. POSIX does not specify the meaning of apparent sizes (i.e., st_size) for other file types, and counting those sizes could cause confusing and unwanted size mismatches. * 'ls -v' and 'sort -V' go back to sorting ".0" before ".A", reverting to the behavior in coreutils-9.0 and earlier. This behavior is now documented. * ls --color now matches a file extension case sensitively if there are different sequences defined for separate cases. * printf unicode \uNNNN, \UNNNNNNNN syntax, now supports all valid unicode code points. Previously is was restricted to the C universal character subset, which restricted most points <= 0x9F. * runcon now exits with status 125 for internal errors. Previously upon internal errors it would exit with status 1, which was less distinguishable from errors from the invoked command. * 'split -n N' now splits more evenly when the input size is not a multiple of N, by creating N output files whose sizes differ by at most 1 byte. Formerly, it did this only when the input size was less than N. * 'stat -c %s' now prints sizes as unsigned, consistent with 'ls'. * a long list of bugfixes, see included NEWS file for details - drop gnulib-simple-backup-fix.patch (upstream) - drop coreutils-tests-workaround-make-fdleak.patch (obsolete) ==== gcc12 ==== - Speed up builds with --enable-link-serialization. ==== gegl ==== Version update (0.4.42 -> 0.4.44) Subpackages: gegl-0_4 libgegl-0_4-0 - Update to version 0.4.44: + This release fixes a crashing bug what is umasked by GLib 2.75.3 and newer. Never-allocated data were being passed to g_slice_free, in GeglBuffer’s handling of copy-on-write tiles. + ctx: Updated vendored library from upstream. ==== gnome-characters ==== Subpackages: gnome-shell-search-provider-gnome-characters - Replace noto-coloremoji-fonts with google-noto-coloremoji-fonts Recommends, font package was renamed. ==== gnome-control-center ==== Version update (44.0+7 -> 44.0+20) Subpackages: gnome-control-center-color gnome-control-center-goa gnome-control-center-user-faces - Update to version 44.0+20: + datetime: Fix NTP switch getting out of sync. + shell/style: Add workaround to make disabled pictures are painted as such. + illustrated-row, split-row: Add widget name and css class. + region: Fix label of formats for the login screen. + keyboard: Fix cancel button issue. + Updated translations. ==== gnome-shell ==== Version update (44.0+28 -> 44.0+42) Subpackages: gnome-extensions gnome-shell-calendar - Update to version 44.0+42: + appFavorite: - Add missing .desktop extension for simplescan - Rename simple-scan.desktop + style: Light variant fixes and accommodations + extensionDownloader: Check schemadir existence and type + status/network: Fix a11y names for VPN connection menu items + quickSettings: Fix icon-name construct property in menu toggles + screenshot: Fix broken GLib.Error.matches call + Updated translations. ==== gnome-weather ==== Subpackages: gnome-shell-search-provider-gnome-weather - Add gnome-weather-BackgroundService-service-fails-to-start.patch: org.gnome.Weather.BackgroundService fails to start (bsc#1209391 glgo#GNOME/gnome-weather!132). ==== gobject-introspection ==== Subpackages: girepository-1_0 libgirepository-1_0-1 - Run meson_test only on x86(_64) arches until upstream issue is fixed. https://gitlab.gnome.org/GNOME/gobject-introspection/-/issues/458 ==== gstreamer-plugins-bad ==== Subpackages: libgstadaptivedemux-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstcuda-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstphotography-1_0-0 libgstplay-1_0-0 libgstplayer-1_0-0 libgstsctp-1_0-0 libgsttranscoder-1_0-0 libgsturidownloader-1_0-0 libgstva-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 libgstwebrtcnice-1_0-0 - Move conditional pkgconfig(vo-amrwbenc) BuildRequires to main part of spec, now available in distro. Stop passing voamrwbenc=disabled to meson. ==== kernel-source ==== Version update (6.2.8 -> 6.2.9) Subpackages: kernel-64kb kernel-default - Linux 6.2.9 (bsc#1012628). - interconnect: qcom: osm-l3: fix icc_onecell_data allocation (bsc#1012628). - interconnect: qcom: sm8450: switch to qcom_icc_rpmh_* function (bsc#1012628). - interconnect: qcom: qcm2290: Fix MASTER_SNOC_BIMC_NRT (bsc#1012628). - perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output (bsc#1012628). - perf: fix perf_event_context->time (bsc#1012628). - tracing/hwlat: Replace sched_setaffinity with set_cpus_allowed_ptr (bsc#1012628). - drm/amd/display: fix k1 k2 divider programming for phantom streams (bsc#1012628). - drm/amd/display: Remove OTG DIV register write for Virtual signals (bsc#1012628). - drm/amd/display: Fix DP MST sinks removal issue (bsc#1012628). - arm64: dts: freescale: imx8-ss-lsio: Fix flexspi clock order (bsc#1012628). - arm64: dts: qcom: sc8280xp: Add label property to vadc channel nodes (bsc#1012628). - arm64: dts: qcom: sm6375: Add missing power-domain-named to CDSP (bsc#1012628). - arm64: dts: qcom: sm8450: correct WSA2 assigned clocks (bsc#1012628). - arm64: dts: qcom: sm8450: Mark UFS controller as cache coherent (bsc#1012628). - power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition (bsc#1012628). - power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition (bsc#1012628). - wifi: mt76: do not run mt76_unregister_device() on unregistered hw (bsc#1012628). - wifi: mt76: connac: do not check WED status for non-mmio devices (bsc#1012628). - efi: earlycon: Reprobe after parsing config tables (bsc#1012628). - arm64: dts: imx8dxl-evk: Disable hibernation mode of AR8031 for EQOS (bsc#1012628). - arm64: dts: imx8dxl-evk: Fix eqos phy reset gpio (bsc#1012628). - ARM: dts: imx6sll: e70k02: fix usbotg1 pinctrl (bsc#1012628). - ARM: dts: imx6sll: e60k02: fix usbotg1 pinctrl (bsc#1012628). - ARM: dts: imx6sl: tolino-shine2hd: fix usbotg1 pinctrl (bsc#1012628). - arm64: dts: imx8mn: specify #sound-dai-cells for SAI nodes (bsc#1012628). - arm64: dts: imx93: add missing #address-cells and #size-cells to i2c nodes (bsc#1012628). - NFS: Fix /proc/PID/io read_bytes for buffered reads (bsc#1012628). - NFS: Correct timing for assigning access cache timestamp (bsc#1012628). - xsk: Add missing overflow check in xdp_umem_reg (bsc#1012628). - iavf: fix inverted Rx hash condition leading to disabled hash (bsc#1012628). - iavf: fix non-tunneled IPv6 UDP packet type and hashing (bsc#1012628). - iavf: do not track VLAN 0 filters (bsc#1012628). - intel/igbvf: free irq on the error path in igbvf_request_msix() (bsc#1012628). - igbvf: Regard vf reset nack as success (bsc#1012628). - igc: fix the validation logic for taprio's gate list (bsc#1012628). - i2c: imx-lpi2c: check only for enabled interrupt flags (bsc#1012628). - i2c: mxs: ensure that DMA buffers are safe for DMA (bsc#1012628). - i2c: hisi: Only use the completion interrupt to finish the transfer (bsc#1012628). - scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate() (bsc#1012628). - nfsd: don't replace page in rq_pages if it's a continuation of last page (bsc#1012628). - net: dsa: b53: mmap: fix device tree support (bsc#1012628). - net: usb: smsc95xx: Limit packet length to skb->len (bsc#1012628). - qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info (bsc#1012628). - xirc2ps_cs: Fix use after free bug in xirc2ps_detach (bsc#1012628). - net: phy: Ensure state transitions are processed from phy_stop() (bsc#1012628). - net: mdio: fix owner field for mdio buses registered using device-tree (bsc#1012628). - net: mdio: fix owner field for mdio buses registered using ACPI (bsc#1012628). - net: stmmac: Fix for mismatched host/device DMA address width (bsc#1012628). - thermal/drivers/mellanox: Use generic thermal_zone_get_trip() function (bsc#1012628). - mlxsw: core_thermal: Fix fan speed in maximum cooling state (bsc#1012628). - drm/i915/fbdev: lock the fbdev obj before vma pin (bsc#1012628). - drm/i915/mtl: Disable MC6 for MTL A step (bsc#1012628). - drm/i915/guc: Rename GuC register state capture node to be more obvious (bsc#1012628). - drm/i915/guc: Fix missing ecodes (bsc#1012628). - drm/i915/gt: perform uc late init after probe error injection (bsc#1012628). ... changelog too long, skipping 340 lines ... - commit c9a94ac ==== ldb ==== Version update (2.7.1 -> 2.7.2) Subpackages: libldb2 python3-ldb - CVE-2023-0614: Access controlled AD LDAP attributes can be discovered (bso#15270); (bsc#1209485). ==== libcap ==== Version update (2.67 -> 2.68) - update to 2.68: * Force libcap internal functions to be hidden outside the library * Expanded the list of man page (links) to all of the supported API functions. * fixed some formatting issues with the libpsx(3) manpage. * Add support for a markdown preamble and postscript when generating .md versions of the man pages (Bug 217007) * psx package clean up * fix some copy-paste errors with TestShared() * added a more complete psx testing into this test as well * cap package clean up * drop an unnecessary use of ", _" in the sources * cleaned up cap.NamedCount documentation * Converted goapps/web/README to .md format and fixed the instructions to indicate go mod tidy is needed. * cap_compare test binary now cleans up after itself (Bug 217018) * Figured out how to cross compile Go programs for arm (i.e. RPi) that use C code, don't use cgo but do use the psx package * Eliminate use of vendor directory ==== libgarcon ==== Version update (4.18.0 -> 4.18.1) Subpackages: libgarcon-1-0 libgarcon-data libgarcon-lang - Update to version 4.18.1 * garcon-gtk: Add missing lock when filling the GtkMenu * Wait for any async operation to finish before releasing locks * Use GIcons for menu icons instead of loading surfaces * Revert "garcon-gtk: Fix menu icon blurriness when UI scale factor != 1" * Revert "Load icons using icon theme scaling functions correctly" * garcon-gtk: Properly update GtkMenu is_populated state * Load icons using icon theme scaling functions correctly * Translation Updates ==== libheif ==== Version update (1.15.1 -> 1.15.2) Subpackages: gdk-pixbuf-loader-libheif libheif1 - update to 1.15.2 * Fixes an incompatibility with AOM v3.6.0. * A couple of smaller fixes. ==== libnvme ==== Version update (1.3 -> 1.4) Subpackages: libnvme-mi1 libnvme1 - Update to version 1.4: * fabrics: Filter out invalid UUIDs from DMI * fabrics: Add define for DMI sysinfo * Print out correct TREQ strings for discovery * tree: fix generic device open failure * fabrics: add configuration option 'tls_key' * fabrics: add configuration option 'keyring' * linux: add key helper functions * nvme: add 'nvme_insert_tls_key()' function * linux: add nvme_lookup_keyring() * python: Change python option from combo to feature * types: add opcode field to error log page (TP4113) * python: Add setter property for controller DHCHAP Key * python: Remove redundant host.set_key() method * build, meson: Print option summary * Python: Add support for setting/getting Host DHCHAP key * Python: Add hostnqn_from_file() and hostid_from_file() * types: Update position of elbatm in struct nvme_copy_range{_f1} * doc: fix kernel-doc-check warning * python, meson: Assert that deps are present for -Dpython=true * python: Reformat SWIG input file * python test: Check there is no SIGSEGV during garbage collection * python: Return PyObject* from __str__() instead of a static char[] * python: Fix segmentation fault during garbage collection * build: Enable test in muon minimal build * build: Streamline workflows with nvme-cli * mi: Add nvme_mi_admin_get_log_page * ioctl: Set file descriptor in nvme_get_log_page() * fix endians * fabrics: Do not ignore one char whitespace when string sanitizing ==== libstorage-ng ==== Version update (4.5.88 -> 4.5.92) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - Translated using Weblate (Portuguese (Brazil)) (bsc#1149754) - 4.5.92 - merge gh#openSUSE/libstorage-ng#922 - add PCIe as disk transport - 4.5.91 - merge gh#openSUSE/libstorage-ng#921 - fixed setting sysfs-name for partitions on nvme disks - 4.5.90 - Translated using Weblate (Georgian) (bsc#1149754) - 4.5.89 ==== libupnp ==== Version update (1.14.15 -> 1.14.16) Subpackages: libixml11 libupnp17 - Update to release 1.14.16 * Fix memory leak and ActionExAsync ==== libxcrypt ==== Subpackages: libcrypt1 libxcrypt-devel - Enable LTO now (boo#1138833) and use FAT LTO objects for static libs. ==== libxfce4ui ==== Version update (4.18.2 -> 4.18.3) Subpackages: libxfce4kbd-private-3-0 libxfce4ui-2-0 libxfce4ui-lang libxfce4ui-tools typelib-1_0-Libxfce4ui-2_0 - Update to version 4.18.3 * Add comment about the need for gtk_widget_destroy() * Fix memory management in Vala generated code * Add annotation "(nullable)" where appropriate * Replace deprecated annotation: "(allow-none)" * Harden xfce_gtk_handle_tab_accels (thunar#1067) * screensaver: Avoid Xfconf warning * shortcuts-grabber: Ignore keyboard layout change * screensaver: Fix Xfconf memory management ==== mutter ==== Version update (44.0+8 -> 44.0+18) - Update to version 44.0+18: + backends: Use meta_gamma_lut_new_sized() in a few more places + compositor: - Drop anchor_window_pos field from MetaWindowDrag - Use relative anchor coordinates for window drags - Avoid use of variable during resize + onscreen/native: Avoid freezing the frame clock on failed cursor commits + window-actor-x11: Check array bounds before accessing array + build: Don't disable checks in release builds + tests: Use a more interoperable path to bash + backend/nested: Ignore setting pointer constraint + Updated translations. - Clean up spec, drop old disabled and unneeded pkgconfig(gtk+-3.0) BuildRequires and move disabled patches to SLE. ==== nfs-utils ==== Subpackages: libnfsidmap1 nfs-client nfs-kernel-server - Add 0007-mount.nfs-always-include-mountpoint-or-spec-if-error.patch boo#1157881 - Add 0008-nfsd.man-fix-typo-in-section-on-scope.patch bsc#1209859 - Allow scope to be sed in sysconfig: NFSD_SCOPE - Add explicit pkgconfig(libkeyutils) BuildRequires: nfs-utils requires this for nfsv4 and we should not rely on the devel package being brought in by other deps. ==== nvme-cli ==== Version update (2.3 -> 2.4) Subpackages: nvme-cli-bash-completion nvme-cli-zsh-completion - Update to version 2.4: * plugins/ocp: Add SMART cloud log to solidigm plugin * nvme-print: Unify number base format for nsid * nvme-(discover,connect,connect-all): enable options '--keyring' and '--tls_key' * nvme-connect: enable option '--tls' * nvme-check-tls-key: add options to derive a 'retained' TLS key * nvme-gen-tls-key: add options to derive a TLS key * plugins/ocp: Move SMART cloud log methods to separate file for reusability * nvme: validate storage tag size correctly * nvme-print-json: Add json output status function * util: Cleanup argconfig parse function * nvme: Fix format command function indentation errors * util: Use argconfig commandline options pointer directly * nvme-print: Fix nvme show status function indentation errors * nvme: Check fw-commit command support MUD * print: print csi and opcode in error log (TP4113) * plugins/inspur: Cast vendor specific smart log value * nvme: Use correct ABORT type for self abort test * plugins/solidigm: Do not overwrite previously initialized variable * nvme-print: sanitize supported-log-pages output * nvme: Enforce length to a multiple of 4 in get_log_page * nvme: fix block count and data size logic * util: Introduce argconfig simple helper to check seen condition * plugins/ocp: Add set feature EOL/PLP failure mode no-uuid option * plugins/ocp: Refactor to clear feature identifier C1h and C3h * plugins/ocp: Add support for clear PCIe correctable error counters feature * nvme-doc: update man page for supported-log-pages * plugins/ocp: OCP 2.0 field updates for SMART cloud log * nvme: Fix parameter limit range * fdp: Fix wrong Reclaim Unit Handle Status size * plugins/ocp: Add support for EOL/PLP failure mode feature * nvme-print: Fix printing of u32 values * nvme: Fix invalid memory access in show_registers * util: Add argconfig seen flag parameter to check if feature NSID set * nvme-print: fix segfault in supported-log-pages json output * fabrics: Fix ordering for auto connect services * nvme.c: Check Firmware Update Granularity in fwdl * log: high latency timestamp issue * nvme: Align get feature data buffer length by page size to allocate * nvme: Continue get feature on invalid NS error to get multiple feature ids * plugins/ocp: SMART cloud log bug fixes. * Made temperature readouts in line with the SI. * Changed 'Kelvin' to 'kelvin', as recommended by the BIPM. * plugins/ocp: Fix whitespace and style issues * util: Revert JSON output to plain numbers * nvme: Add rae argument to telemetry-log command * nvme: Refactor get telemetry log page helper * nvme: Factor out parse telemetry log da element * nvme: Fix type in error message * unit: Add test-argconfig-parse * nvme: Use chunked read in get_log() * nvme: Use fprintf for error message logging in get_log() * nvme: fix /dev/spkd/ typo * doc: --storage-tag-check doesn't take any arguments * fabrics: Ensure host-traddr/iface consistency for "connect-all" * nvme-print: print the nvme generic name in json output as well * plugins/innogrit: modify command opcode for eventlog and cdump * completion: fix typo, add missing args * plugins/wdc: Fix data Formatting for Latency Monitor Log Page * nvme: Make json-c optional again * nvme-print: Move JSON printing function into a new file * plugins/solidigm: Use json_create_object wrapper * plugins/solidigm: Use struct json_object instead of typedef * fabrics: No need to sanitize trsvcid and traddr * docs: Fixed typos and missing options * util: Numbers without any suffix are also valid * util: Update suffix_binary_parse API * util: Reimplement suffix_si_parse * nvme: Filter out status flags for get feature command * util: Add crc32 implementation * nvme-print: Use attrs_info as key for Zone Attributes Information * nvme: Support effects-log for fabrics ctrl * plugins/solidigm: Add uuid index resolution * plugins/ocp: Use network byte order for OCP UUID value ==== open-vm-tools ==== Version update (12.1.5 -> 12.2.0) Subpackages: libvmtools0 open-vm-tools-desktop - Update to 12.2.0 (build 21223074) (boo#1209128) - There are no new features in the open-vm-tools 12.2.0 release. This is primarily a maintenance release that addresses a few critical problems, including: - Linux quiesced snapshots have been updated to avoid intermittent hangs of the vmtoolsd process. - Updated the guestOps to handle some edge cases when File_GetSize() fails or returns -1. - A number of Coverity reported issues have been addressed. - Detect the proto files for the containerd grpc client in alternate locations. Pull request #626 - FreeBSD: Support newer releases and code clean-up for earlier versions. Pull request #584 - Please refer to the release notes at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md - The granular changes that have gone into the 12.2.0 release are in the ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ open-vm-tools/ChangeLog - Update detect-suse-location.patch to remove upstream accepted portion of the patch (jsc-PED-1344). ==== perl-Image-ExifTool ==== Version update (12.58 -> 12.59) Subpackages: exiftool perl-File-RandomAccess - Update to 12.59: * COMPATIBILITY WARNING: Changed the calculated ImageDataMD5 for JPEG images to include all data from the SOS to the EOI (including the SOS marker but not the EOI marker) * Added new -fileNUM option to load tags from alternate files * Added family 8 groups for accessing tags from alternate files * Added new XMP-et:OriginalImageMD5 tag for storing ImageDataMD5 value * Added verbose ImageDataMD5 message for JPEG files * Added a new Nikon LensID (thanks Warren Hatch) * Decode a new Olympus tag and improved decoding of another (thanks Herb) * Decode a couple of new PanasonicRaw tags * Decode image coordinates for a couple more VNT object types * Enhanced ImageDataMD5 to also support MRW, CR3, PNG, MOV/MP4 and RIFF-based files * Improved verbose messages when deleting NikonApp trailer * Patched to avoid structure warnings when copying tags from Nikon files containing NKSC metadata * Fixed %-C filename format code to work properly with the -fileOrder and - progress options * Fixed new ImageDataMD5 tag to work properly with PhaseOne IIQ files * Fixed potential ValueConv warning when reading LIF files * API Changes: - Added SetAlternateFile method ==== polkit ==== Subpackages: libpolkit-agent-1-0 libpolkit-gobject-1-0 pkexec typelib-1_0-Polkit-1_0 - Change permissions for rules folders (bsc#1209282) ==== python-numpy ==== Version update (1.24.1 -> 1.24.2) - Add patch ignore-pkg_resources-deprecation.patch: * Ignore DeprecationWarning from pkg_resources. - update to 1.24.2: just bugfixes, see https://github.com/numpy/numpy/releases/tag/v1.24.2 for details ==== python-setuptools ==== Version update (65.6.3 -> 67.6.0) - Update to 67.6.0: * Deprecations + #3434: Added deprecation warning for pkg_resources.declare_namespace. * Breaking Changes + #3741: Removed patching of distutils._msvccompiler.gen_lib_options for compatibility with Numpy < 1.11.2 -- by :user:`mgorny` + #2497: Support for PEP 440 non-conforming versions has been removed. * Changes + #3804: Added caching for supported wheel tags. + #3846: Added pruning heuristics to PackageFinder based on exclude. + #3843: Although pkg_resources has been discouraged for use, some projects still consider pkg_resources viable for usage. This change makes it clear that pkg_resources should not be used, emitting a DeprecationWarning when imported. + #3809: Merge with distutils@8c3c3d29, including fix for sysconfig.get_python_inc() (pypa/distutils#178), fix for segfault on MinGW (pypa/distutils#196), and better has_function support (pypa/distutils#195, #3648). + #3795: Ensured that __file__ is an absolute path when executing setup.py as part of setuptools.build_meta. + #3685: Fix improper usage of deprecated/removed pkgutil APIs in Python 3.12+. + #3769: Replace 'appdirs' with 'platformdirs'. * Misc + #3838: Improved error messages for pyproject.toml validations. + #3839: Fixed pkg_resources errors caused when parsing metadata of packages that are already installed but do not conform with PEP 440. + #3823: Fixes egg_info code path triggered during integration with pip. + #3782: Fixed problem with file directive in tool.setuptools.dynamic when value is a simple string instead of list. ==== ruby3.2 ==== Version update (3.2.1 -> 3.2.2) Subpackages: libruby3_2-3_2 - update to 3.2.2 (boo#1209891 CVE-2023-28755 boo#1209967 CVE-2023-28756) https://www.ruby-lang.org/en/news/2023/03/30/redos-in-time-cve-2023-28756/ https://www.ruby-lang.org/en/news/2023/03/28/redos-in-uri-cve-2023-28755/ https://www.ruby-lang.org/en/news/2023/03/30/ruby-3-2-2-released/ - drop ruby-3.1.3-remove-timezone-test.patch solved differently upstream ==== samba ==== Version update (4.18.0+git.294.508b693e5c -> 4.18.1+git.298.4ccf830b2a4) Subpackages: libsamba-policy0-python3 samba-ad-dc-libs samba-client samba-client-libs samba-gpupdate samba-ldb-ldap samba-libs samba-libs-python3 samba-python3 samba-winbind samba-winbind-libs - Update to 4.18.1 * CVE-2023-0225: AD DC "dnsHostname" attribute can be deleted by unprivileged authenticated users. (bso#15276);(bsc#1209483). * CVE-2023-0614: Access controlled AD LDAP attributes can be discovered (bso#15270); (bsc#1209485). * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords in cleartext(bso#15315);(bsc#1209481). * ldb wildcard matching makes excessive allocations; (bso#15331). * large_ldap test is inefficient; (bso#15332). ==== shared-mime-info ==== - Filter out dependency on /usr/bin/pkg-config: this package is installed on basically all systems, but it also contains a .pc file. Splitting this into a -devel package seems not reasonable. ==== snapper ==== Subpackages: libsnapper6 snapper-zypp-plugin - use xz compression instead of bzip2 for source tar (gh#openSUSE/snapper#277) ==== systemd-rpm-macros ==== Version update (19 -> 20) - Bump to version 20 - %service_del_postun: make sure to restart services if /etc/sysconfig/service is not present. - Drop support for -n/-f options in %service_del_postun These options have been deprecated since a long time and the last package relying on them (drkonqi5) in the Factory repository has been updated. ==== thunar-plugin-archive ==== Version update (0.5.0 -> 0.5.1) Subpackages: thunar-plugin-archive-lang - Update to version 0.5.1 * Fix use-after-free crash in "tap_provider_child_watch_destroy" * build: Add GLib requirement * build: Fix autotools warnings * Use generic package icon name in dialog header * Translation Updates ==== timezone ==== Version update (2023b -> 2023c) - timezone update 2023c: * Reverts changes for 2023 Lebanon DST change to 2023a data ==== timezone-java ==== Version update (2023b -> 2023c) - timezone update 2023c: * Reverts changes for 2023 Lebanon DST change to 2023a data ==== util-linux ==== Subpackages: libblkid1 libfdisk1 libmount1 libsmartcols1 libuuid1 - login.pamd, remote.pamd: include postlogin-* rules - runuser.pamd, su.pamd: Include common-session-nonlogin instead of common-session ==== util-linux-systemd ==== - login.pamd, remote.pamd: include postlogin-* rules - runuser.pamd, su.pamd: Include common-session-nonlogin instead of common-session ==== vim ==== Version update (9.0.1392 -> 9.0.1430) Subpackages: vim-data vim-data-common - Updated to version 9.0.1430, fixes the following problems * The included xdiff code is a bit outdated. * Lean files are not recognized. * Build failure because SIZE_MAX is not defined. * Nu files are not recognized. * Sage files are not recognized. * WebAssembly Interface Type files are not recognized. * Unused macros are defined. * "wat" and "wast" files are one filetype. * Indent wrong after "export namespace" in C++. * Warning for uninitialized variable. (Tony Mechelynck) * Cursor in wrong position when leaving insert mode. * Invalid memory access when ending insert mode. * Livebook files are not recognized. - Create a standalone package for xxd * This is used by non-vim tools too - Updated to version 9.0.1418, fixes the following problems - fixes CVE-2023-1355 * Using NULL pointer with nested :open command. * Cairo files are not recognized. * Unx Tal files are not recognized. * Odin files are not recognized. * sort(list, 'N') does not work in Vim9 script context. * Highlight for popupmenu kind and extra cannot be set. * Profile test repeats the headers many times. * Highlight test script has a few problems. * find_file_in_path() is not reentrant. * Condition is always true. * Crash when using null_class. * Unused variables and functions. * Compilation error with some compilers. * Missing check for out-of-memory. * ILE RPG files are not recognized. * TableGen files are not recognized. * QMLdir files are not recognized. * Racket files are recognized as scheme. * Accuracy of profiling is not optimal. * Pony files are not recognized. * Compiler warning for unused variable. * in Kitty does not use the Shift modifier. * Crystal files are not recognized. * Crash when collection is modified when using filter(). * ESDL files are not recognized. * The included xdiff code is a bit outdated. ==== vulkan-loader ==== Version update (1.3.239.0 -> 1.3.243.0) - Update to release SDK-1.3.243.0 * Log when VK_LAYER_PATH is ignored * Implement VK_LUNARG_direct_driver_loading ==== vulkan-tools ==== Version update (1.3.239.0 -> 1.3.243.0) - Update to release SDK-1.3.243.0 * mockicd: Add Support for testing Ray Tracing * mockicd: Add Support for testing Video decoding * vulkaninfo: Dont enable Direct Driver Loading Ext ==== xen ==== Version update (4.17.0_04 -> 4.17.0_06) Subpackages: xen-libs xen-tools-domU - Upstream bug fixes (bsc#1027519) 63a03b73-VMX-VMExit-based-BusLock-detection.patch 63a03ba6-VMX-INTR_SHADOW_NMI-helper.patch 63a03bce-VMX-Notify-VMExit.patch 63e53ac9-x86-CPUID-leaves-7-1-ecx-edx.patch 63e53ac9-x86-disable-CET-SS-when-fractured-updates.patch 63f4d045-x86-ucode-AMD-apply-early-on-all-threads.patch 63fe06e0-x86-ucode-AMD-apply-late-on-all-threads.patch 641041e8-VT-d-constrain-IGD-check.patch 6419697d-AMD-IOMMU-no-XT-x2APIC-phys.patch - Use "proper" upstream backports: 640f3035-x86-altp2m-help-gcc13.patch 64104238-bunzip-gcc13.patch 64199e0c-x86-shadow-account-for-log-dirty-mode.patch 64199e0d-x86-HVM-bound-number-of-pca-regions.patch 64199e0e-x86-HVM-serialize-pca-list-manipulation.patch 64199e0f-x86-spec-ctrl-defer-CR4_PV32_RESTORE-for-CSTAR.patch - ... in place of: bunzip-gcc13.patch altp2m-gcc13.patch xsa427.patch xsa428-1.patch xsa428-2.patch xsa429.patch - bsc#1209245 - fix host-assisted kexec/kdump for HVM domUs libxl.fix-guest-kexec-skip-cpuid-policy.patch - bsc#1209017 - VUL-0: CVE-2022-42332: xen: x86 shadow plus log-dirty mode use-after-free (XSA-427) xsa427.patch - bsc#1209018 - VUL-0: CVE-2022-42333,CVE-2022-42334: xen: x86/HVM pinned cache attributes mis-handling (XSA-428) xsa428-1.patch xsa428-2.patch - bsc#1209019 - VUL-0: CVE-2022-42331: xen: x86: speculative vulnerability in 32bit SYSCALL path (XSA-429) xsa429.patch ==== xfce4-panel ==== Version update (4.18.2 -> 4.18.3) Subpackages: libxfce4panel-2_0-4 xfce4-panel-lang xfce4-panel-restore-defaults - Update to version 4.18.3 * launcher: Show action menu also when there are several items * Fix memory management of vala generated plugins * panel: Rephrase "Don't reserve space on borders" (V2) * panel: Make property migration generic * launcher: Avoid "no trigger event" warning when showing the menu * launcher: Guard access to the plugin menu GdkWindow * libxfce4panel: Unregister menu also on GtkWidget::hide * panel: Do not reset output name if a monitor does not have a model name * libxfce4panel: Fix memory management of source for menu positioning * panel: Delay removal of ExternalPlugin to prevent use-after-free * systray: Cancel any async D-Bus operation in finalize() * tasklist: Do not try to resolve /proc/pid/exe to launch new instance * Translation Updates ==== xfce4-pulseaudio-plugin ==== Version update (0.4.5 -> 0.4.6) Subpackages: xfce4-pulseaudio-plugin-lang - Update to version 0.4.6 * Fix changing default sink and source devices * Fix flickering mic icon when recording application is connected * Avoid critical from xfce4-notifyd if gauge_value > 100 * Display maximum volume of all channels instead of volume of left channel * Add recording base volume indicator * Control mic volume/mute when mouse cursor is over the mic icon * Lower warning level * Improve volume notifications settings * Show volume notifications from hotkeys according to comment * Don't set negative volume from hotkeys * Use correct variable for "volume-mic-changed" signal ID * Don't force set the default device * Set recording icon according to recording volume level * Show source monitor if it is a default source * Check for recording state on context ready * Allow volume step configuration in dialog (gxo#panel-plugins/xfce4-pulseaudio-plugin#28) * wnck: Add missing LIBS/CFLAGS in Makefile * wnck: Use Libxfce4windowing when available * wnck: Guard X11 code path to prevent crash on Wayland * wnck: Improve RaiseWnck a bit * Fix memory leak * cleanup: Fix formatting * Fix blurry media player icon from file when UI scale > 1 * Fix blurry icons in prefs dialog when UI scale factor > 1 * Use "logo-icon-name" instead of "logo" in about dialog * Do not override fatal log level * build: Bump GLib minimum required to 2.44 * Translation Updates ==== xfce4-session ==== Version update (4.18.1 -> 4.18.2) Subpackages: xfce4-session-lang - Update to version 4.18.2 * manager: Fix GQueue memory management * Fix Xfconf memory management * Update bug report address * Fix suspend/hibernation bug on ConsoleKit2 (Fixes #164) ==== xorg-x11-server ==== Version update (21.1.7 -> 21.1.8) Subpackages: xorg-x11-server-Xvfb xorg-x11-server-extra - Update to version 21.1.8 (CVE-2023-1393): * This release contains the fix for CVE-2023-1393 * composite: Fix use-after-free of the COW * xkbUtils: use existing symbol names instead of deleted deprecated ones - Drop U_xserver-composite-Fix-use-after-free-of-the-COW.patch: Fixed upstream - Switch back to tarball release, drop source service, add keyring and sig files. ==== xwayland ==== Version update (23.1.0 -> 23.1.1) - Update to version 23.1.1 (CVE-2023-1393): + This release contains the fix for CVE-2023-1393. + xkbUtils: use existing symbol names instead of deleted deprecated ones + glamor: Don't glFlush/ctx switch unless any work has been performed + xwayland: - Refactor xwl_present_for_each_frame_callback helper - Prevent nested xwl_present_for_each_frame_callback calls + composite: Fix use-after-free of the COW - Drop U_xserver-composite-Fix-use-after-free-of-the-COW.patch: Fixed upstream. - U_xserver-composite-Fix-use-after-free-of-the-COW.patch * overlay window use-after-free (CVE-2023-1393, ZDI-CAN-19866, bsc#1209543) ==== yast2-storage-ng ==== Version update (4.6.2 -> 4.6.3) - Fix the translation of widgets titles in the dialog to select a partitioning scheme (bsc#1209697). - 4.6.3