Packages changed: gspell (1.12.0 -> 1.12.1) gtk3 (3.24.37+68 -> 3.24.37+70) gucharmap (15.0.2 -> 15.0.4) kernel-source (6.2.12 -> 6.3.1) less (608 -> 632) libjcat (0.1.12 -> 0.1.13) libraw librdkafka (2.0.2 -> 2.1.0) libstorage-ng (4.5.100 -> 4.5.101) libvirt (9.2.0 -> 9.3.0) python-Pygments (2.14.0 -> 2.15.1) python-iniconfig python-libvirt-python (9.2.0 -> 9.3.0) swtpm systemd tmux vim (9.0.1488 -> 9.0.1504) === Details === ==== gspell ==== Version update (1.12.0 -> 1.12.1) Subpackages: libgspell-1-2 typelib-1_0-Gspell-1 - Update to version 1.12.1: + Build: remove gtk-mac-integration dependency. + Documentation improvements. + Updated translations. - Use autosetup and ldconfig_scriptlets macros. ==== gtk3 ==== Version update (3.24.37+68 -> 3.24.37+70) Subpackages: gtk3-data gtk3-immodule-amharic gtk3-immodule-inuktitut gtk3-immodule-thai gtk3-immodule-tigrigna gtk3-immodule-vietnamese gtk3-schema gtk3-tools libgtk-3-0 typelib-1_0-Gtk-3_0 - Update to version 3.24.37+70: + Fix a crash. ==== gucharmap ==== Version update (15.0.2 -> 15.0.4) Subpackages: libgucharmap_2_90-7 - Update to version 15.0.4: + Update application screenshots to version 15. + unicode: Derive some more character names. + Updated translations. ==== kernel-source ==== Version update (6.2.12 -> 6.3.1) - SUNRPC: Fix encoding of rejected RPCs (bsc#1210995). - commit 9aec45d - Linux 6.3.1 (bsc#1012628). - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() (bsc#1012628). - fsverity: reject FS_IOC_ENABLE_VERITY on mode 3 fds (bsc#1012628). - drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var (bsc#1012628). - fsverity: explicitly check for buffer overflow in build_merkle_tree() (bsc#1012628). - gpiolib: acpi: Add a ignore wakeup quirk for Clevo NL5xNU (bsc#1012628). - bluetooth: Perform careful capability checks in hci_sock_ioctl() (bsc#1012628). - wifi: brcmfmac: add Cypress 43439 SDIO ids (bsc#1012628). - btrfs: fix uninitialized variable warnings (bsc#1012628). - USB: serial: option: add UNISOC vendor and TOZED LT70C product (bsc#1012628). - driver core: Don't require dynamic_debug for initcall_debug probe timing (bsc#1012628). - commit 4fd5b5c - mm/mremap: fix vm_pgoff in vma_merge() case 3 (bsc#1210903). Update upstream status. - commit 602ef9b - [PATCH for v6.3 regression] mm/mremap: fix vm_pgoff in vma_merge() case 3 (bsc#1210903). - commit 1fc982b - series.conf: cleanup - update upstream reference and move into sorted section - patches.suse/ath11k-pci-Add-more-MODULE_FIRMWARE-entries.patch - commit 5408aa8 - update and reenable armv6hl configs New values are copied from arvm7hl. - commit efbf06e - update and reenable armv7hl configs Where possible, new values are copied from arm64. The rest is guessed, mostly based on existing values of similar config options. - commit 6fb5695 - update and reenable arm64 configs Where possible, new values are copied from x86_64, i386 or riscv64. The rest is guessed, mostly based on existing values of similar config options. - commit 9d6bb12 - config.sh: add :LegacyX86 To pull i586 and build against that. - commit 723ba5c - wifi: ath11k: pci: Add more MODULE_FIRMWARE() entries (bsc#1209965). - Refresh patches.suse/wifi-ath11k-reduce-the-MHI-timeout-to-20s.patch. Update to upstream versions. - commit 996f7a1 - Update to 6.3 final - update configs - commit 9cc1a40 ==== less ==== Version update (608 -> 632) - Update to 632 * Add LESSUTFCHARDEF environment variable (github #275). * Add # command (github #330). * Add ^S search modifier (github #196). * Add --wordwrap option (github #113). * Add --no-vbell option (github #304). * Add --no-search-headers option (github #44). * Add --modelines option (github #89). * Add --intr option (github #224). * Add --proc-backspace, --proc-tab and --proc-return options (github #335). * Add --show-preproc-errors option (github #258). * Add LESS_LINES and LESS_COLUMNS environment variables (github #84). * Add LESS_DATA_DELAY environment variable (github #337). * Allow empty "lines" field in --header option. * Update Unicode tables. * Improve ability of ^X to interrupt F command (github #49). * Status column (-J) shows off-screen matches. * Parenthesized sub-patterns in searches are colored with unique colors, if supported by the regular expression library (github #196). * Don't allow opening a tty as file input unless -f is set (github #309). * Don't require newline input after +&... option (github #339). * Fix incorrect handling of some Private Use Unicode characters. * Fix ANSI color bug when overstriking with colored chars (github #276). * Fix compiler const warning (github #279). * Fix signal race in iread (github #280). * Fix reading procfs files on Linux (github #282). * Fix --ignore-case with ctrl-R (no regex) search (github #300). * Fix bug doing repeat search after setting & filter (github #299). * Fix bug doing repeat search before non-repeat search. * Fix crash with -R and certain line lengths (github #338). * Fix input of Windows dead keys (github #352). * Don't retain search options from a cancelled search (github #302). * Don't call realpath on fake filenames like "-" (github #289). * Implement lesstest test suite. * Convert function parameter definitions from K&R to C89 (github #316). - Version 629 news * Add LESSUTFCHARDEF environment variable (github #275). * Add # command (github #330). * Add ^S search modifier (github #196). * Add --wordwrap option (github #113). * Add --no-vbell option (github #304). * Add --no-search-headers option (github #44). * Add --modelines option (github #89). * Add --intr option (github #224). * Add --proc-backspace, --proc-tab and --proc-return options (github #335). * Add --show-preproc-errors option (github #258). * Add LESS_LINES and LESS_COLUMNS environment variables (github #84). * Allow empty "lines" field in --header option. * Update Unicode tables. * Improve ability of ^X to interrupt F command (github #49). * Status column (-J) shows off-screen matches. * Parenthesized sub-patterns in searches are colored with unique colors, if supported by the regular expression library (github #196). * Don't allow opening a tty as file input unless -f is set (github #309). * Don't require newline input after +&... option (github #339). * Fix incorrect handling of some Private Use Unicode characters. * Fix ANSI color bug when overstriking with colored chars (github #276). * Fix compiler const warning (github #279). * Fix signal race in iread (github #280). * Fix reading procfs files on Linux (github #282). * Fix --ignore-case with ctrl-R (no regex) search (github #300). * Fix bug doing repeat search after setting & filter (github #299). * Fix bug doing repeat search before non-repeat search. * Fix crash with -R and certain line lengths (github #338). * Don't retain search options from a cancelled search (github #302). * Don't call realpath on fake filenames like "-" (github #289). * Implement lesstest test suite. * Convert function parameter definitions from K&R to C89 (github #316). - Remove cve-2022-46663.patch that was applied upstream - Refresh less-429-more.patch and less-429-shell.patch ==== libjcat ==== Version update (0.1.12 -> 0.1.13) - update to 0.1.13: * Add support for SHA512 checksums (Richard Hughes) * Add the ability to add and remove support for blob types * Fix header includes for clang-tidy (Richard Hughes) * Show the expected SHA checksum in the error (Richard Hughes) ==== libraw ==== - security update - added patches fix CVE-2023-1729 [bsc#1210720], a heap-buffer-overflow in raw2image_ex() + libraw-CVE-2023-1729.patch ==== librdkafka ==== Version update (2.0.2 -> 2.1.0) - update to 2.1.0: * Allow fetchers to detect and handle log truncation (#4122). * Fix a reference count issue blocking the consumer from closing (#4187). * Fix a protocol issue with ListGroups API, where an extra * field was appended for API Versions greater than or equal to 3 (#4207). * Fix an issue with `max.poll.interval.ms`, where polling any queue would cause the timeout to be reset (#4176). * Fix seek partition timeout, was one thousand times lower than the passed value (#4230). * Fix multiple inconsistent behaviour in batch APIs during * *pause** or **resume** operations (#4208). * Update lz4.c from upstream. Fixes CVE-2021-3520 * Upgrade OpenSSL to v3.0.8 with various security fixes * Added `rd_kafka_topic_partition_get_leader_epoch()` (and `set..()`). * A reference count issue was blocking the consumer from closing. * Fixed known issues related to Batch Consume APIs mentioned in v2.0.0 release notes. * Fixed `rd_kafka_consume_batch()` and `rd_kafka_consume_batch_queue()` intermittently updating `app_offset` and `store_offset` incorrectly when **pause** or **resume** was being used for a partition. * Fixed `rd_kafka_consume_batch()` and `rd_kafka_consume_batch_queue()` intermittently skipping offsets when **pause** or **resume** was being used for a partition. ==== libstorage-ng ==== Version update (4.5.100 -> 4.5.101) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#928 - add color attribute to Action class - 4.5.101 ==== libvirt ==== Version update (9.2.0 -> 9.3.0) Subpackages: libvirt-client libvirt-daemon-common libvirt-daemon-config-network libvirt-daemon-driver-interface libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-lock libvirt-daemon-log libvirt-daemon-plugin-lockd libvirt-daemon-proxy libvirt-daemon-qemu libvirt-libs - Update to libvirt 9.3.0 - Many incremental improvements and bug fixes, see https://libvirt.org/news.html#v9-3-0-2023-05-02 - boo#1210654 ==== python-Pygments ==== Version update (2.14.0 -> 2.15.1) - add sle15_python_module_pythons (jsc#PED-68) - update to 2.15.1: * Updated lexers: + Java properties: Fix catastrophic backtracking (#2356, #2404) * Fix Python console traceback lexing being too strict and sometimes reordering output (#2407, #2410, #2412) - update to 2.15.0: * Added lexers: + Carbon (#2362, #2365, #2366, #2367, #2368, #2369, #2370) + Dax (#2335, #2345) + MediaWiki Wikitext (#2373, #827) + PostgreSQL Explain (#2398) + WGSL (WebGPU Shading Language) (#2386) + X++ (#2339) * Updated lexers: + AMDGPU: Add support for scratch_ instructions, the attr*.* argument, as well as the off modifier (#2327). + APDL: Miscellaneous improvements (#2314) + bash/tcsh: - Move break to keywords (#2377) - Improve bash math expansion lexing (#2255, #2353) + Chapel: Support attributes (#2376) + CMake: Implement bracket style comments (#2338, #2354) + CSS: Improve lexing of numbers inside function calls (#2382, [#2383]) + diff: Support normal diff syntax, as opposed to unified diff syntax (#2321) + GLSL, HLSL: - Support line continuations in preprocessor code (#2350) - Improve preprocessor directive handling (#2357) + LilyPond: minor update of builtins + PHP: support attributes (#2055, #2347, #2360), fix anonymous classes without parameters (#2359), improve lexing of variable variable syntax (#2358) + Python: - Add missing builtins (#2334) - Fix inconsistent lexing of None (#2406) + Rebol/Red: Don’t require script headers (#2348, #2349) + Spice: Update keywords (#2336) + SQL+Jinja (analyse_text method): Fix catastrophic backtracking (#2355) + Terraform: Add hcl alias (#2375) * Declare support for Python 3.11 and drop support for Python 3.6 (#2324). * Update native style to improve contrast (#2325). * Update github-dark` style to match latest Primer style (#2401) * Revert a change that made guessing lexers based on file names slower on Python 3.10 and older (#2328). * Fix some places where a locale-dependent encoding could unintentionally be used instead of UTF-8 (#2326). * Fix Python traceback handling (#2226, #2329). * Groff formatter: sort color definitions for reproducibility (#2343) * Move project metadata to pyproject.toml, remove setup.py and setup.cfg (#2342) * The top-level Makefile has been removed. - increase required python version to 3.7 - set a minimum version for setuptools to match the requirement from upstream - since setup.py is gone: * require pip and wheel to build * use pyproject macros to build and install ==== python-iniconfig ==== - Don't catchall filelist - Clean dependencies ==== python-libvirt-python ==== Version update (9.2.0 -> 9.3.0) - Update to 9.3.0 - Add all new APIs and constants in libvirt 9.3.0 ==== swtpm ==== Subpackages: swtpm-selinux - remove python3 dependency, no longer needed after rewrite (bsc#1211010) ==== systemd ==== Subpackages: libsystemd0 libudev1 systemd-container systemd-coredump udev - Revert changes that dropped calls to %systemd_{pre,post} in the main package Until we switch to filetriggers these calls are needed when a new version of systemd introduced a new config file during an update. - We also introduce a new build conditional "%filetriggers" to identify easily which parts of the code will become obsolete when we'll switch to file triggers (WIP). This is important as this is unlikely to happen on SLE. ==== tmux ==== - add ncurses.patch for compactibility with new ncurses fixes boo#1210552 ==== vim ==== Version update (9.0.1488 -> 9.0.1504) Subpackages: vim-data vim-data-common xxd - Updated to version 9.0.1504, fixes the following problems - fixes boo#1210996 - CVE-2023-2426 * xchacha20v2 crypt header is platform dependent. * Crypt with libsodium is not tested on CI. * The ModeChanged event may be triggered too often. * Wrong scrolling with ls=0 and :botright split. * Using uninitialized memory when argument is missing. * Popup menu position wrong in window with toolbar. * Crash when recovering from corrupted swap file. * GTK3: hiding the mouse pointer does not work. (Rory O’Kane) * Test restoring register with wrong value. * The ruler percentage can't be localized. * In a terminal window the cursor may jump around. (Kenny Stauffer) * Using uninitialized memory with fuzzy matching. * The falsy operator is not tested properly. * Crash with nested :try and :throw in catch block. * No test for deleting the end of a long wrapped line. * Luau files are not recognized. * No error when calling remote_startserver() with an empty string.