Packages changed: NetworkManager-branding-openSUSE dhcp flatpak (1.6.3 -> 1.6.4) graphene (1.10.0 -> 1.10.2) gssdp (1.2.2 -> 1.2.3) gtk3 (3.24.20 -> 3.24.21) gtksourceview4 (4.6.0 -> 4.6.1) gupnp (1.2.2 -> 1.2.3) haveged (1.9.8 -> 1.9.13) lame libnma (1.8.28 -> 1.8.30) mozilla-nss (3.52.1 -> 3.53.1) patterns-containers perl-HTTP-Message (6.24 -> 6.25) pipewire (0.3.5 -> 0.3.6) plasma5-workspace python-py (1.8.1 -> 1.9.0) python-rpm-macros (20200529.b301e36 -> 20200625.e862151) rpm sysfsutils vulkan-loader (1.2.141 -> 1.2.145) yast2 (4.3.9 -> 4.3.12) === Details === ==== NetworkManager-branding-openSUSE ==== - Also fix variable expansion in %description (boo#1172773). ==== dhcp ==== Subpackages: dhcp-client - The server package still requires insserv-compat: the .service files only call out to legacy sysv init scripts that are still sourcing /etc/rc.status (boo#1173440). ==== flatpak ==== Version update (1.6.3 -> 1.6.4) Subpackages: libflatpak0 system-user-flatpak typelib-1_0-Flatpak-1_0 - Update to version 1.6.4: + This release backports some of the OCI authenticator fixes from the 1.7 series, and should now be able to host flatpak images on e.g. docker hub. + Other changes: - Fix a use-after free in libflatpak. - Don't list p2p downgrades in list of available updates. ==== graphene ==== Version update (1.10.0 -> 1.10.2) Subpackages: libgraphene-1_0-0 typelib-1_0-Graphene-1_0 - Update to version 1.10.2: + Disable SSE on 32bit builds on Windows with MSVC + Add more documentation on the conventions used by matrix operations + Fix Euler angles/matrix conversion + Various bugs fixed. ==== gssdp ==== Version update (1.2.2 -> 1.2.3) - Update to version 1.2.3: + Prevent crash if client is not initialized + Fix critical if network device does not exists + Fix ::1 multicast + client. Add getter for network mask ==== gtk3 ==== Version update (3.24.20 -> 3.24.21) Subpackages: gtk3-data gtk3-schema gtk3-tools libgtk-3-0 typelib-1_0-Gtk-3_0 - Update to version 3.24.21: + Wayland: - Prevent crashes with offscreen windows. - Handle disorderly tablet/pad disconnects. + GtkFileChooser: - Translate the type column. - Add a tracker3 search engine. - Rate-limit trash monitoring. - Make get_filter work for native chooser. + GtkGLArea: Fix a redraw problem. + GtkScrolledWindow: Fix kinetic scrolling. + Add a gtk-cursor-aspect-ratio setting. + GDK: - Improve frame clock smoothness. - Fix frame clock monotonicity. + Adwaita: Improve notebook tab legibility. + Updated translations. ==== gtksourceview4 ==== Version update (4.6.0 -> 4.6.1) - Update to version 4.6.1: + Fix various G-I annotations + Improve draw-spaces coloring in solarized-light + javascript.lang: Performance improvements + c.lang: Fixes for #include preprocessor + sql.lang: Language completeness improvements + latex.lang: additional keywords + sh.lang: improved parameter expansion + yara.lang: initial support for YARA + Updated translations. ==== gupnp ==== Version update (1.2.2 -> 1.2.3) - Update to version 1.2.3: + Requires GSSDP 1.2.3 + Always build the gupnp-binding-tool manpage + Fix static linking issue caused by libguul subproject + Add mitigations for CVE-2020-12695 + Implement UDA 2.0 April 17 2020 Addendum ==== haveged ==== Version update (1.9.8 -> 1.9.13) - Update to 1.9.13: * added support for --version [Jirka Hladky] * updated systemd service file [Jirka Hladky] * fix a memory leak in havege_destroy [Anakin Zhang] * updated version reported by program [Jirka Hladky] * fix ordering cycle with private tmp [Christian Hesse] * Updated systemd service file [Nicolas Braud-Santoni] * Bump soname [Nicolas Braud-Santoni] * Fix crash on shutdown in threaded mode [Sergei Trofimovich] * Fix compilation with --enable-threads [Lars Wendler] ==== lame ==== - Create pkgconfig file. ==== libnma ==== Version update (1.8.28 -> 1.8.30) Subpackages: libnma0 typelib-1_0-NMA-1_0 - Update to version 1.8.30: + Properly dispose wireless security objects. + Don't clear the key when users set a non-pkcs12 certificate in the certificate chooser UI. + Added missing VAPI macro file. - Drop libnma-fix-segment-fault.patch: Fixed upstream. ==== mozilla-nss ==== Version update (3.52.1 -> 3.53.1) Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs - add FIPS mode patches from SLE stream nss-fips-aes-keywrap-post.patch nss-fips-approved-crypto-non-ec.patch nss-fips-cavs-dsa-fixes.patch nss-fips-cavs-general.patch nss-fips-cavs-kas-ecc.patch nss-fips-cavs-kas-ffc.patch nss-fips-cavs-keywrap.patch nss-fips-cavs-rsa-fixes.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch nss-fips-constructor-self-tests.patch nss-fips-detect-fips-mode-fixes.patch nss-fips-dsa-kat.patch nss-fips-gcm-ctr.patch nss-fips-pairwise-consistency-check.patch nss-fips-rsa-keygen-strictness.patch nss-fips-tls-allow-md5-prf.patch nss-fips-use-getrandom.patch nss-fips-use-strong-random-pool.patch nss-fips-zeroization.patch nss-fix-dh-pkcs-derive-inverted-logic.patch - update to NSS 3.53.1 * required for Firefox 78 * CVE-2020-12402 - Use constant-time GCD and modular inversion in MPI. (bmo#1631597, bsc#1173032) - Add ppc-old-abi-v3.patch as per upstream bug https://bugzilla.mozilla.org/show_bug.cgi?id=1642174 - update to NSS 3.53 Notable changes * SEED is now moved into a new freebl directory freebl/deprecated bmo#1636389 * SEED will be disabled by default in a future release of NSS. At that time, users will need to set the compile-time flag (bmo#1622033) to disable that deprecation in order to use the algorithm. * Algorithms marked as deprecated will ultimately be removed * Several root certificates in the Mozilla program now set the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can query to further refine trust decisions. (bmo#1618404, bmo#1621159). If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp before the SCT or NotBefore date of a certificate that builtin issued, then clients can elect not to trust it. ==== patterns-containers ==== - Remove duplicate word in description of kubic_admin pattern - Fix Summary of kubeadm pattern to start with a capital letter ==== perl-HTTP-Message ==== Version update (6.24 -> 6.25) - updated to 6.25 see /usr/share/doc/packages/perl-HTTP-Message/Changes 6.25 2020-06-28 17:52:12Z - Don't run Changes test on master in GH actions - move Clone from required to suggests prerequisite, to re-enable fatpacking ==== pipewire ==== Version update (0.3.5 -> 0.3.6) Subpackages: libpipewire-0_3-0 pipewire-modules pipewire-spa-tools pipewire-tools - Update to version 0.3.6: * Extensive memory leak fixing and stress testing was done. A big leak in screen sharing with DMA-BUF was fixed. * Compile fixes * Stability improvements in jack and pulseaudio layers. * Added the old portal module to make the Camera portal work again. This will be moved to the session manager in future versions. * Improvements to the GStreamer source and sink shutdown. * Fix compatibility with v2 clients again when negotiating buffers. - Disable vulkan if the vulkan package is too old (as in SLE 15 SP0 and SP1) - Add patch to build with meson >= 0.46.0 since 0.50.0 is not really needed: * fix-meson-required-version.patch ==== plasma5-workspace ==== Subpackages: gmenudbusmenuproxy plasma5-session plasma5-session-wayland plasma5-workspace-libs xembedsniproxy - Add patch to speed up artwork shader compilation in VMs (boo#1172763): * 0001-mediacontroller-Use-half-the-samples-for-better-perf.patch ==== python-py ==== Version update (1.8.1 -> 1.9.0) - Update to 1.9.0 * Add type annotation stubs ==== python-rpm-macros ==== Version update (20200529.b301e36 -> 20200625.e862151) - Update to version 20200625.e862151: * fix pytest_arch PYTHONPATH * expand calls pyproject* macros (revert #45) * let the shell expand PYTHONPATH - Update to version 20200623.3ea9b62: * fix PYTHONPATH on pytest_arch macro - Update to version 20200622.1919233: * Expand %buildroot first (avoid endless cycle; bsc#1162743) - Update to version 20200622.1f4c5d2: * Add missing semicolon - For Factory change %system_python to python3. - Update to version 20200603.503823c: * Don't add empty path to PYTHONPATH setting. * Do not expand macros, just print them unexpanded (for %pytest* and %pyproject* macros) * Replace py.test -> pytest ==== rpm ==== - temporarily back out change of %_libexecdir to /usr/libexec - Update rpmconfigcheck: Remove bashism and use /bin/sh instead of /bin/bash. - update auto-config-update-aarch64-ppc64le.diff (bsc#1170849): * only update if hostarch isn't there ==== sysfsutils ==== - Added a _service file, as per new OBS requirement - Added a patch to bring sysfsutils up to latest upstream, which now is in place: * sysfsutils-latest-changes.diff.gz - Added patches which have been submitted upstream but not yet merged: * 0001-Fix-compiler-complain-about-multiple-defs-of-my_stdo.patch * 0002-Fix-compiler-complaint-about-string-truncation.patch * 0003-Fix-more-string-issues-for-gcc-10.patch And removing a patch that's subsumed by the above patches: * sysfsutils-fix-compiler-issues.patch Lastly, replaced the hand-rolled sysfsutils-2.1.0.tar.gz with upstream archive file sysfsutils-sysfsutils-2_1_0.tar.gz (retreived with OBS download service), though the contents of the two are the same. ==== vulkan-loader ==== Version update (1.2.141 -> 1.2.145) - Update to release 1.2.145 * scripts: Use named params for generator options * loader: Fix crash in vkGetDeviceQueue2 * loader: Use MoltenVK in app bundle if found * build: include system headers last ==== yast2 ==== Version update (4.3.9 -> 4.3.12) - Products: Do not solve dependencies while checking libzypp connection (bsc#1170322). - 4.3.12 - Avoid failure when downloading release notes from an inoperative proxy (bsc#1173447). - 4.3.11 - AutoClient#export method can receive a hash as an argument (bsc#1171356). - 4.3.10