Packages changed: ImageMagick (7.1.1.5 -> 7.1.1.6) binutils btrfsprogs (6.2.2 -> 6.1.3) gnome-control-center isl (0.25 -> 0.26) libXpm libgcrypt (1.10.1 -> 1.10.2) libgit2 (1.6.3 -> 1.6.4) libgpg-error (1.46 -> 1.47) libsolv (0.7.23 -> 0.7.24) libva (2.17.0 -> 2.18.0) libva-gl (2.17.0 -> 2.18.0) libvirt libzypp (17.31.8 -> 17.31.10) microos-tools (2.20 -> 2.20+git20230413.2a43cdb) ncurses (6.4.20230311 -> 6.4.20230408) xdg-desktop-portal-gtk zypper (1.14.59 -> 1.14.60) === Details === ==== ImageMagick ==== Version update (7.1.1.5 -> 7.1.1.6) Subpackages: ImageMagick-config-7-SUSE ImageMagick-extra libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - version update to 7.1.1.6 - https://github.com/ImageMagick/Website/blob/main/ChangeLog.md#711-6---2023-04-02 - fixes CVE-2023-1906 [bsc#1210308] ==== binutils ==== Subpackages: libctf-nobfd0 libctf0 - Rebase branch patch (includes fix for PR30281). ==== btrfsprogs ==== Version update (6.2.2 -> 6.1.3) Subpackages: btrfsprogs-bash-completion btrfsprogs-udev-rules libbtrfs0 libbtrfsutil1 ==== gnome-control-center ==== Subpackages: gnome-control-center-color gnome-control-center-goa gnome-control-center-lang gnome-control-center-user-faces - Rebase gnome-control-center-disable-error-message-for-NM.patch - Add gnome-control-center-fix-6f1567f23.patch: network/connection-editor: fix crash when removing a connection (glgo#GNOME/gnome-control-center/commit/8cb77b4d3, bsc#1210377). ==== isl ==== Version update (0.25 -> 0.26) - update to 0.26: * fix inherited overloaded methods in Python bindings * decompose topological sort of clusters in incremental scheduler * improved isl_pw_aff_list_{min,max} * add some convenience functions * more exports to (templated C++) bindings * slightly improved conversion from binary relation to function ==== libXpm ==== - with switching to suggests making use of (n)compress no longer needs to be limited to openSUSE - suggests instead of require compress (see changelog below) - require compress (ncompress package) on openSUSE; it's not supported on SLE - Drop n_no-compress-on-sle.patch and set XPM_PATH_COMPRESS instead (xpmPipeThrough function returns NULL when the command is not available; so same result as with the patch applied; that the child process for executing 'compress' returns with exit(1) doesn't matter much; it might even be useful to see the error message ...) - Depend also on /usr/bin/uncompress, not only /usr/bin/gzip; Requiring binaries instead of packages resolves the file conflict with busybox-gzip, which is used when building nginx opensuse images; dep chain was: nginx -> libdg3 -> libXpm4 -> gzip ==> conflict with busybox-gzip - Depend on /usr/bin/gzip, not gzip ==== libgcrypt ==== Version update (1.10.1 -> 1.10.2) Subpackages: libgcrypt20 libgcrypt20-32bit libgcrypt20-hmac - Update to 1.10.2: * Bug fixes: - Fix Argon2 for the case output > 64. [rC13b5454d26] - Fix missing HWF_PPC_ARCH_3_10 in HW feature. [rCe073f0ed44] - Fix RSA key generation failure in forced FIPS mode. [T5919] - Fix gcry_pk_hash_verify for explicit hash. [T6066] - Fix a wrong result of gcry_mpi_invm. [T5970] - Allow building with --disable-asm for HPPA. [T5976] - Allow building with -Oz. [T6432] - Enable the fast path to ChaCha20 only when supported. [T6384] - Use size_t to avoid counter overflow in Keccak when directly feeding more than 4GiB. [T6217] * Other: - Do not use secure memory for a DRBG instance. [T5933] - Do not allow PKCS#1.5 padding for encryption in FIPS mode. [T5918] - Fix the behaviour for child process re-seeding in the DRBG. [rC019a40c990] - Allow verification of small RSA signatures in FIPS mode. [T5975] - Allow the use of a shorter salt for KDFs in FIPS mode. [T6039] - Run digest+sign self tests for RSA and ECC in FIPS mode. [rC06c9350165] - Add function-name based FIPS indicator function. GCRYCTL_FIPS_SERVICE_INDICATOR_FUNCTION. This is not considered an ABI changes because the new FIPS features were not yet approved. [rC822ee57f07] - Improve PCT in FIPS mode. [rC285bf54b1a, rC4963c127ae, T6397] - Use getrandom (GRND_RANDOM) in FIPS mode. [rCcf10c74bd9] - Disable RSA-OAEP padding in FIPS mode. [rCe5bfda492a] - Check minimum allowed key size in PBKDF in FIPS mode. [T6039,T6219] - Get maximum 32B of entropy at once in FIPS mode. [rCce0df08bba] - Prefer gpgrt-config when available. [T5034] - Mark AESWRAP as approved FIPS algorithm. [T5512] - Prevent usage of long salt for PSS in FIPS mode. [rCfdd2a8b332] - Prevent usage of X9.31 keygen in FIPS mode. [rC392e0ccd25] - Remove GCM mode from the allowed FIPS indicators. [rC1540698389] - Add explicit FIPS indicators for hash and MAC algorithms. [T6376] * Release-info: https://dev.gnupg.org/T5905 * Rebase FIPS patches: - libgcrypt-FIPS-SLI-hash-mac.patch - libgcrypt-FIPS-SLI-kdf-leylength.patch - libgcrypt-FIPS-SLI-pk.patch ==== libgit2 ==== Version update (1.6.3 -> 1.6.4) - Update to 1.6.4: * config: return GIT_ENOTFOUND for missing programdata - move experimental cli into libgit2-tools as intended ==== libgpg-error ==== Version update (1.46 -> 1.47) Subpackages: libgpg-error0 libgpg-error0-32bit - Update to 1.47: * New error codes for PUKs and reset codes. [T6421] * Avoid segv in logging with improper use of the "socket://". * Fixed translation of argparse's internal option --help. * Interface changes relative to the 1.46 release: - GPG_ERR_SOURCE_TKD NEW. - GPG_ERR_BAD_PUK NEW. - GPG_ERR_NO_RESET_CODE NEW. - GPG_ERR_BAD_RESET_CODE NEW. - GPGRT_SPAWN_KEEP_STDIN NEW. - GPGRT_SPAWN_KEEP_STDOUT NEW. - GPGRT_SPAWN_KEEP_STDERR NEW. - GPGRT_SPAWN_INHERIT_FILE NEW. * Release-info: https://dev.gnupg.org/T6231 ==== libsolv ==== Version update (0.7.23 -> 0.7.24) Subpackages: libsolv-tools python3-solv ruby-solv - handle learnt rules in solver_alternativeinfo() - support x86_64_v[234] architecture levels - implement decision sorting for package decisionlists - add back findutils requires for the libsolv-tools packagse [bsc#1195633] - bump version to 0.7.24 ==== libva ==== Version update (2.17.0 -> 2.18.0) Subpackages: libva-drm2 libva-wayland2 libva-x11-2 libva2 - Update to version 2.18.0: * doc: Add build and install libva informatio in home page. * fix: - Add libva.def into distribution package - NULL check before calling strncmp. - Remove reference to non-existent symbol * meson: docs: - Add encoder interface for av1 - Use libva_version over project_version() * va: - Add VAProfileH264High10 - Always build with va-messaging API - Fix the codying style of CHECK_DISPLAY - Remove Android pre Jelly Bean workarounds - Remove dummy isValid() hook - Remove unused drm_sarea.h include & ANDROID references in va_dricommon.h - va/sysdeps.h: remove Android section * x11: - Allow disabling DRI3 via LIBVA_DRI3_DISABLe env var - Use LIBVA_DRI3_DISABLE in GetNumCandidates - Switch to multibuild style. Drop libva-gl.spec|changes and pre_checkin.sh. - Switch to meson build system, add meson BuildRequires, drop libtool and xz BuildRequires, and replace gcc-c++ with generic c++_compiler. - Use autosetup and ldconfig_scriptlets macros. - Add libva-wayland to baselibs.conf, now that its build have moved to the main part of spec, source validator should no longer complain on SLE. - Drop propagate-dpy.patch: The upstream issue was closed without the patch ever getting applied, and the issue that it fixed was deemed to not be a libva issue. See upstream issue: https://github.com/intel/libva/issues/479 ==== libva-gl ==== Version update (2.17.0 -> 2.18.0) - Update to version 2.18.0: * doc: Add build and install libva informatio in home page. * fix: - Add libva.def into distribution package - NULL check before calling strncmp. - Remove reference to non-existent symbol * meson: docs: - Add encoder interface for av1 - Use libva_version over project_version() * va: - Add VAProfileH264High10 - Always build with va-messaging API - Fix the codying style of CHECK_DISPLAY - Remove Android pre Jelly Bean workarounds - Remove dummy isValid() hook - Remove unused drm_sarea.h include & ANDROID references in va_dricommon.h - va/sysdeps.h: remove Android section * x11: - Allow disabling DRI3 via LIBVA_DRI3_DISABLe env var - Use LIBVA_DRI3_DISABLE in GetNumCandidates - Switch to multibuild style. Drop libva-gl.spec|changes and pre_checkin.sh. - Switch to meson build system, add meson BuildRequires, drop libtool and xz BuildRequires, and replace gcc-c++ with generic c++_compiler. - Use autosetup and ldconfig_scriptlets macros. - Add libva-wayland to baselibs.conf, now that its build have moved to the main part of spec, source validator should no longer complain on SLE. - Drop propagate-dpy.patch: The upstream issue was closed without the patch ever getting applied, and the issue that it fixed was deemed to not be a libva issue. See upstream issue: https://github.com/intel/libva/issues/479 - update to 2.17.0: * win: Simplify signature for driver name loading * win: Rewrite driver registry query and fix some bugs/leaks/inefficiencies * win: Add missing null check after calloc * va: Update security disclaimer * dep:remove the file .cvsignore * pkgconfig: add 'with-legacy' for emgd, nvctrl and fglrx * meson: add 'with-legacy' for emgd, nvctrl and fglrx * x11: move all FGLRX code to va_fglrx.c * x11: move all NVCTRL code to va_nvctrl.c * meson: stop using deprecated meson.source_root() * meson: stop using configure_file copy=true * va: correctly include the win32 (local) headers * win: clean-up the coding style * va: dos2unix all the files * drm: remove unnecessary dri2 version/extension query * trace: annotate internal functions with DLL_HIDDEN * build/sysdeps: Remove HAVE_GNUC_VISIBILITY_ATTRIBUTE and use _GNUC_ support level attribute instead * meson: Check support for -Wl,-version-script and build link_args accordingly * meson: Set va_win32 soversion to '' and remove the install_data rename * fix: resouce check null * va_trace: Add Win32 memory types in va_TraceSurfaceAttributes * va_trace: va_TraceSurfaceAttributes should check the VASurfaceAttribMemoryType * va: Adds Win32 Node and Windows build support * va: Adds compat_win32 abstraction for Windows build and prepares va common code for windows build * pkgconfig: Add Win32 package for when WITH_WIN32 is enabled * meson: Add with_win32 option, makes libdrm non-mandatory on Win * x11: add basic DRI3 support * drm: remove VA_DRM_IsRenderNodeFd() helper * drm: add radeon drm + radeonsi mesa combo ==== libvirt ==== Subpackages: libvirt-client libvirt-daemon-common libvirt-daemon-config-network libvirt-daemon-driver-interface libvirt-daemon-driver-libxl libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-lock libvirt-daemon-log libvirt-daemon-plugin-lockd libvirt-daemon-proxy libvirt-daemon-qemu libvirt-daemon-xen libvirt-libs - qemu: Fix potential crash during driver cleanup bsc#1209861 ==== libzypp ==== Version update (17.31.8 -> 17.31.10) - BuildRequires: libsolv-devel >= 0.7.24 for x86_64_v[234] support. - version 17.31.10 (22) - Workround bsc#1195633 while libsolv <= 0.7.23 is used. - Fix potential endless loop in new ZYPP_MEDIANETWORK. - ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors parsed from a metalink file. - multicurl: propagate ssl settings stored in repo url (boo#1127591) Closes #335. - Teach MediaNetwork to retry on HTTP2 errors. - fix CapDetail to return Rel::NONE if an EXPRESSION is used as a NAMED cap. - Capability: support parsing richdeps from string. - defaultLoadSystem: default to LS_NOREFRESH if not root. - Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes [#439]) Merges rpm-software-management/rpm#2412: The bit for LZCNT is in CPUID 0x80000001, not 1. - Detect x86_64_v[234] architecture levels (fixes #439) - Support x86_64_v[234] architecture levels (for #439) - version 17.31.9 (22) ==== microos-tools ==== Version update (2.20 -> 2.20+git20230413.2a43cdb) - Update to version 2.20+git20230413.2a43cdb: * Drop extra sysctl file for coredumps (boo#1091684) ==== ncurses ==== Version update (6.4.20230311 -> 6.4.20230408) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch 20230408 + document limitations of tparm, and error-returns in curs_terminfo.3x + document limitations of tgoto, and error-returns in curs_termcap.3x + add xterm+focus to alacritty+common (patch by Christian Duerr). + add "-v" option to tput, to show warnings. > improve checks for malformed terminfo data (report/analysis by Jonathan Bar Or, Michael Pearse, Emanuele Cozzi). + make the parameter type/count checks in _nc_tiparm() more stringent + update tgoto() to account for _nc_tiparm() changes + add checks in tparm() and tiparm() for misuse of string parameters + add special cases in tput to handle extensions Cs/Ms parameters + ignore compiled-terminfo where the array sizes exceed the standard - Skip gzipping manual pages as brp-compress does the job - Add ncurses patch 20230401 + modify experimental Windows driver to work with xterm mouse protocol. + remove DECCOLM+DECSCLM from foot (patch by Daniel Ekloef). ==== xdg-desktop-portal-gtk ==== Subpackages: xdg-desktop-portal-gtk-lang - Change Supplements: Replace gtk3 with gtk3-schema, ensure the supplements gets triggered. - Add (gtk4-schema and (flatpak or snapd)) Supplements: Futureproof the supplements, as more and more of GNOME moves to gtk4. ==== zypper ==== Version update (1.14.59 -> 1.14.60) Subpackages: zypper-log zypper-needs-restarting - Fix selecting installed patterns from picklist (bsc#1209406) - man: better explanation of --priority (fixes #480) - version 1.14.60