Packages changed: AppStream (0.14.6 -> 0.15.1) Mesa (21.3.1 -> 21.3.3) Mesa-drivers (21.3.1 -> 21.3.3) createrepo_c double-conversion (3.1.6 -> 3.1.7) enchant evolution-data-server (3.42.2 -> 3.42.3) gcc11 (11.2.1+git1018 -> 11.2.1+git1173) gdm glib-networking gnome-autoar (0.4.1 -> 0.4.2) gnome-software (41.2 -> 41.3) gtk4 (4.4.1 -> 4.6.0) hunspell hwdata (0.354 -> 0.355) ibus installation-images-MicroOS (17.31 -> 17.33) iptables kdump (0.9.1 -> 0.9.2) lapack libeconf (0.4.2+git20211111.c7a2c52 -> 0.4.4+git20220104.962774f) libglvnd (1.3.3 -> 1.4.0) libgphoto2 (2.5.27 -> 2.5.28) libjcat (0.1.8 -> 0.1.9) libmodulemd libsndfile libsoup (3.0.3 -> 3.0.4) libssh lua54 multipath-tools (0.8.8+38+suse.2bdd3a14 -> 0.8.8+13+suse.79c3556f) openexr openssl (1.1.1l -> 1.1.1m) openssl-1_1 (1.1.1l -> 1.1.1m) osinfo-db (20211013 -> 20211216) perl-libwww-perl (6.59 -> 6.60) pkcs11-helper (1.25.1 -> 1.27.0) pulseaudio python-kiwisolver (1.3.1 -> 1.3.2) python-pandas (1.3.4 -> 1.3.5) python-prettytable (2.4.0 -> 2.5.0) python-pyzmq (22.2.1 -> 22.3.0) python-requests (2.26.0 -> 2.27.1) rav1e sg3_utils (1.47 -> 1.47+2.388b767) suse-module-tools (16.0.17 -> 16.0.18) systemd vim (8.2.3863 -> 8.2.3995) xorg-x11-server (21.1.2 -> 21.1.3) yast2 (4.4.32 -> 4.4.34) zchunk zstd (1.5.0 -> 1.5.1) === Details === ==== AppStream ==== Version update (0.14.6 -> 0.15.1) Subpackages: libAppStreamQt2 libappstream4 - Update to version 0.15.1 * compose: Port over font support from appstream-generator * compose: Allow overriding unit used for locale processing * compose: Refine legacy support for desktop-id launchables * compose: Allow setting the custom desktop-entry translation function * compose: Allow to run with threading (mostly) disabled * compose: Reorganize feature flags, allow to disable l10n * compose: Allow setting a screenshot file size limit * compose: Allow to disable screencast processing explicitly * compose: Allow to test whether result has a specific hint tag * news-convert: Support a "Translators" section * validator: Check that first rDNS component-ID parts are always lowercased * validator: Validate capitalization for some selected text blocks * vapi: Rename PoolFlag to PoolFlags to add the missing deprecated flags * Fix cache always getting updated even if unnacessary on Debian systems * Still verify download return codes if download was aborted intentionally * compose: Warn if metainfo files are missing and data was processed anyway - Update to version 0.15.0 * This release contains a complete rewrite of AppStream's caching code, making use of libxmlb instead of LMDB now. This will allow for more complex queries and simplifies the caching code a bit. * Allow clients to configure the addon autoresolve magic * Allow clients to control the local metainfo preference * qt: Add wrappers for new AsPool API * qt: Wrap the AsPool ::changed signal * Implement the new "Tags" tag * Make component-ID search case-insensitive * compose: Adjust to rsvg API changes * qt: Align API deprecations with C library API * Cache Flatpak data properly, and add some quirk fixes for it - Add BuildRequires itstool - Add BuildRequires xmlb >= 0.3.6 - Update BuildRequires glib-2.0 to >= 2.62 - Remove BuildRequires lmdb-devel ==== Mesa ==== Version update (21.3.1 -> 21.3.3) Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - rename n_no-sse2-on-ix86.patch to n_no-sse2-on-ix86-except-for-intel-drivers.patch * no longer disable sse2 support for intel drivers, since this breaks build, which is probably unresolvable (boo1190409) - n_no-sse2-on-ix86.patch * disabled sse2 support on %ix86 (boo#1190409) - update to 21.3.3 * Bug fixes * Assassin?s Creed Syndicate crashes with Mesa 21.3.0+ ACO * [21.3 regression] swr: Build failure with MSVC * anv: dEQP-VK.graphicsfuzz.spv-stable-pillars-volatile-nontemporal-store fails ==== Mesa-drivers ==== Version update (21.3.1 -> 21.3.3) Subpackages: Mesa-dri Mesa-gallium - rename n_no-sse2-on-ix86.patch to n_no-sse2-on-ix86-except-for-intel-drivers.patch * no longer disable sse2 support for intel drivers, since this breaks build, which is probably unresolvable (boo1190409) - n_no-sse2-on-ix86.patch * disabled sse2 support on %ix86 (boo#1190409) - update to 21.3.3 * Bug fixes * Assassin?s Creed Syndicate crashes with Mesa 21.3.0+ ACO * [21.3 regression] swr: Build failure with MSVC * anv: dEQP-VK.graphicsfuzz.spv-stable-pillars-volatile-nontemporal-store fails ==== createrepo_c ==== Subpackages: libcreaterepo_c0 python3-createrepo_c - python3-nose is not required for the testsuite, update BuildRequires to the actual package used, python3-setuptools. ==== double-conversion ==== Version update (3.1.6 -> 3.1.7) - update to 3.1.7: * Reintroduce macros, if DOUBLE_CONVERSION_NON_PREFIXED_MACROS is set * Also add support for Synopsys ARC64 architecture ==== enchant ==== Subpackages: enchant-2-backend-hunspell enchant-data libenchant-2-2 - Add missing closing parentheses for packageand Supplements. ==== evolution-data-server ==== Version update (3.42.2 -> 3.42.3) Subpackages: libcamel-1_2-63 libebackend-1_2-10 libebook-1_2-20 libebook-contacts-1_2-3 libecal-2_0-1 libedata-book-1_2-26 libedata-cal-2_0-1 libedataserver-1_2-26 libedataserverui-1_2-3 - Update to version 3.42.3: + e-cal-client: Correct non-NULL check in e_cal_client_create_objects_sync(). + Calendar: Adapt to libical 3.0.12 change. + Bufs fixed: glgo#GNOME/evolution-data-server#368, glgo#GNOME/evolution-data-server#371. + Updated translations. ==== gcc11 ==== Version update (11.2.1+git1018 -> 11.2.1+git1173) Subpackages: cpp11 libgcc_s1 libgfortran5 libgomp1 libstdc++6 libubsan1 - Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173 * Fix D memory corruption in -M output. * Fix ICE in is_this_parameter with coroutines. [boo#1193659] ==== gdm ==== Subpackages: gdmflexiserver libgdm1 typelib-1_0-Gdm-1_0 - Move %{_datadir}/glib-2.0/schemas/org.gnome.login-screen.gschema.xml from main package to new gdm-schema split package and make libgdm1 depend on the new gdm-schema split package. Currently, the gdm-schema is required for gnome-shell to work, but gnome-shell only depends on libgdm1 and not on gdm as a whole, causing a crash of gnome-shell if the gdm main package is not installed. By moving the gdm-schema to it's own split package and making libgdm1 actually require it, the crash can be prevented. Fixes boo#1194183. ==== glib-networking ==== - Increase testsuite timeout ==== gnome-autoar ==== Version update (0.4.1 -> 0.4.2) - Update to version 0.4.2: + Fix extraction to root directory. + Fix extraction of raw format archives. + Do not leave read-only directory in the tree after running tests. ==== gnome-software ==== Version update (41.2 -> 41.3) - Update to version 41.3: + Remove various cultural sensitivity badges. ==== gtk4 ==== Version update (4.4.1 -> 4.6.0) Subpackages: gtk4-schema libgtk-4-1 typelib-1_0-Gtk-4_0 - Add gtk4-make-our-stack-noexec.patch: Make our stack noexec. - Update to version 4.6.0: + GtkProgressBar: Fix handling of "inverted". + GtkLabel: Add a "natural wrap mode" property to influence how natural width is determined. + GtkTextView: Scroll insertion on-screen after undo / redo. + gsk: Abort region diffing when changes are too complex. + gdk: - Avoid compressing discrete scroll events. - Fix problems with hiding windows. - Improve GL and GLES version checks. + Wayland: Support new high-contrast setting. + Inspector: Add DND inspection support. + build: Avoid deprecated meson apis. + Updated translations. - Update to version 4.5.1: + GtkWidget sizing has been rewritten to implement width-for-height more properly. This had some fallout, and some widgets may still not react kindly to the new way of doing things. See https://blog.gtk.org/2021/12/03/sizable-news/ for details, and please file issues if you notice fallout. + Rename git `master` branch to `main` + Css: - Fully support font-variant-caps - Fix a crash with gradients + Make various widgets activatable: - GtkComboBox - GtkDropDown + GtkPopover: Make focus indicators not disappear + GtkTextView: - Don't leave embedded children stranded when scrolling - Don't insert Emoji into non-editable textviews - Fix Emoji chooser positioning - Fix problems with pasting text - Improve scroll-to-mark behavior - Support right-aligned, centered and decimal tabs - Make child anchor replacement character settable - Provide more context to input methods + GtkDragIcon: Provide default icons for paintables and files + GtkBuilder: Speed up template precompilation + Actions: - Reduce allocations during signal emissions - Avoid duplication and unnecessary recursion + Inspector: - Show the selected im-module in the General tab - Add a clipboard viewer - Make the recorder record events too - Add a graph visualizing gtk_widget_measure() + Gsk: - Fix hexbox rendering - Fix transformed linear gradient rendering + Printing: Fix dialog-less printing + X11: - Improve behavior of windows drags on headerbar controls - Trap errors for RANDR changes - Fix problems with drag icons + Wayland: Ensure we prefer the Wayland im-module over others + Updated translations. - Changes from version 4.5.0: + gsk: - Drop the GL renderer in favor of NGL - Rename NGL to GL - Fix some coordinate overflow issues - Reimplement texture upload and download for better support of image formats and color spaces - New api: * gsk_transform_skew * gsk_transform_to_2d_components + gdk: - Support HSL in gdk_rgba_parse - Use libpng, libjpeg and libtiff directly when loading textures, and support more image formats (including 16bit and float formats) - New apis: * gdk_texture_new_from_bytes * gdk_texture_new_from_filename * gdk_texture_download_float * gdk_texture_save_to_png_bytes * gdk_texture_save_to_tiff * gdk_texture_save_to_tiff_bytes * gdk_display_create_gl_context - Implement GIcon and GLoadableIcon in GdkTexture - Move EGL initialization to the frontend - Use configless EGL contexts, if supported - Use >8bit pixel formats, if supported and requested + css: - Add support for line-height - Add support for text-transform + theme: Fixes for buttons in toolbars + input: - Update compose sequences from libX11 1.7.2 - Accept replacement string longer than 20 characters + text: - Implement sloped caret drawing - Add a gtk-hint-font-metrics setting to switch font rendering to be more similar to GTK3 + GtkTextView: - Add support for line height - Add support for text transforms - Misc fixes for css->pango attribute translations - Invalidate pango contexts when font settings change - Improve undo grouping when overwriting + GtkListView: - Make tree indentation more flexible with GtkTreeExpander:indent-for-icon + GtkMenuButton: Support custom children + GtkFlowBox: Add prepend and append + GtkCalendar: Fix handling of weeks starting on Monday + GtkWindow: Add a titlebar property + GtkDropDown: Add a show-arrow property + GtkPopoverMenu: Support a use-markup attribute in menu models + Add GtkSymbolicPaintable + Tools: Support DND in gtk4-node-editor and the inspector's recorder + Demos: Improve the font rendering demo + Build: - Require Pango 1.49 - Require libpng, libtiff and libjpeg - Speed up handling of resources during build + X11: Support touchpad gestures with XInput 2.4 + Updated translations. - Drop gtk4-fix-link-to-g_signal_emit.patch: fixed upstream. - Add docutils, pkgconfig(libjpeg), pkgconfig(libpng) and pkgconfig(libtiff-4) BuildRequires: New dependencies. ==== hunspell ==== - suggests english directory [bsc#1193627] ==== hwdata ==== Version update (0.354 -> 0.355) - Update to version 0.355 (bsc#1194338): + Updated pci, usb and vendor ids. ==== ibus ==== Subpackages: libibus-1_0-5 typelib-1_0-IBus-1_0 - Do not introduce ibus-gtk4-32bit unless there will be demand for it: drop its definition from baselibs.conf. - Fix name of gtk4 flavor generated packages (was ibus-gtk4-gtk4). - Split build of gtk4 module into an own flavor, allowing us to break a build cycle. - Enable GTK 4 IM Module for Leap 15.4 and Tumbleweed - Remove ibus-python-install-dir.patch * Not used for build anymore ==== installation-images-MicroOS ==== Version update (17.31 -> 17.33) - merge gh#openSUSE/installation-images#561 - Remove more binaries appearing with Ruby 3.1 (bsc#1193192) - 17.33 - merge gh#openSUSE/installation-images#560 - Add s390x to architecture list for net_repos (boo#1193479) - Define zsystems as the_arch for s390x - 17.32 ==== iptables ==== Subpackages: libip4tc2 libip6tc2 libxtables12 xtables-plugins - Only use nftables backend when iptables-backend-nft is installed when using libalternatives ==== kdump ==== Version update (0.9.1 -> 0.9.2) - kdump-0.9.2-mkdumprd-properly-pass-compression-params.patch: Fix malformation in passing Dracut compression parameters in mkdumprd (bsc#1193765). - Refresh existing patches. - Sync with SLE15-SP4 changelog. These patches were never applied to Factory: * kdump-avoid-endless-loop-EAI_AGAIN.patch * kdump-calibrate-Add-LUKS2-Argon2-requirements-to-the-reser.patch * kdump-calibrate-Fix-kernel-command-line-parsing.patch * kdump-do-not-add-rd.neednet.patch * kdump-Do-not-list-all-block-devices-if-no-block-devices-ar.patch * kdump-ensure-initrd.target.wants-directory.patch * kdump-Enumerate-all-BTRFS-devices-for-btrfs-mount-points.patch * kdump-Implement-KString-isHexNumber.patch * kdump-install-etc-resolv.conf-using-resolved-path.patch * kdump-Mount-and-device-resolution-using-libmount-and-lsblk.patch * kdump-remove-console-hvc0-from-commandline.patch * kdump-set-serial-console-from-Xen-cmdline.patch - Update to 0.9.2 * Isolate fadump initrd within the default one (jsc#SLE-18272) * Bug fixes * Code cleanups - Remove patches that have been upstreamed: * kdump-mounts.cc-Include-sys-ioctl.h.patch * kdump-Add-bootdev-to-dracut-command-line.patch * kdump-do-not-iterate-past-end-of-string.patch * kdump-fix-incorrect-exit-code-checking.patch * kdump-avoid-endless-loop-on-EAI_AGAIN.patch * kdump-install-real-resolv.conf.patch * kdump-Store-kdump-initrd-in-kernel-image-path.patch - Remove patches that have been solved differently: * kdump-on-error-option-yesno.patch ==== lapack ==== Subpackages: libblas3 libcblas3 liblapack3 - Add Fix-out-of-bounds-read.patch to fix out of bound reads when user input is not validated properly. (bsc#1193562, CVE-2021-4048) ==== libeconf ==== Version update (0.4.2+git20211111.c7a2c52 -> 0.4.4+git20220104.962774f) - Update to version 0.4.4+git20220104.962774f: * Fixed i586 build (#158) - Update to version 0.4.2+git20220104.5dfd69d: * Reading numbers with different bases (e.g. oktal) (bsc#1193632) (#157) ==== libglvnd ==== Version update (1.3.3 -> 1.4.0) - update to 1.4.0: * tests cleanups * Update bin/symbols-check.py from mesa/mesa@6f854145 * Remove extra paragraph from license text. * Add one more missing dep_x11_headers * Update uthash to v2.3.0 * EGL: Add support for eglQueryDisplayAttribKHR and NV. ==== libgphoto2 ==== Version update (2.5.27 -> 2.5.28) Subpackages: libgphoto2-6 libgphoto2_port12 - updated to 2.5.28 release general: * OS/2 support removed (broken and unused since at least 2006) * remove built-in rpm packaging (use distro packaging instead) * remove linux-hotplug rule creation (removed from distros around 2006) * remaining text which was iso-8859 is UTF-8 now (except one po file) * To override docdir and htmldir, use configure arguments --docdir= and --htmldir= instead of --with-doc-dir= and --with-html-dir= * some code cleanups, especially handling of include files and i18n handling ptp2: * wait event * property changes now reported with "'name' to 'value'" added * object info changes now reported as FILE_CHANGED events (e.g. if you change protection flags) * Nikon J1: capture fixed * Olympus: fixed that wait time was twice as long as required if no events arrived * Sigma Fp: added basic beta support for capture, live view and config. * Sony: * mark all widgets as read-write again, read-only logic was not 100% correct * speed-ups and fixes to the stepping based config setting * Canon EOS * handle newer EOS R series reporting of configs (ISO, Aperture, Shutterspeed) * track UI lock state to avoid device busy reports * fixed "zoom" range settings (for lenses with powered zoom, also for today Powershot) * Fuji: * ptpip improvements * bug fixes * some Fuji cameras have now liveview only for webcam (need new firmware) * various small fixes and code cleanups * New ids: * Sony Alpha-RX1R II, ILCE-7C, ZV-E10, A6600, DSC HX-80, ILCE-7RM3A, ILCE-7RM4A, DSC-A7S III * Nikon Coolpix B500, Zfc * Canon EOS M50m2, Digital IXUS 132 * Fuji X-Pro3, GFX 100S, X100V canon: * fixed wait event crashes * correctly mark read only config widgets as read-only pentax: * fix PEF raw files for non-K100D translations: * updated german, french, polish, ukrainian ==== libjcat ==== Version update (0.1.8 -> 0.1.9) - update to 0.1.9: * Set which backends are supported in the pkgconfig file * Use -Dcli=false to reduce the install size * Return an error if we try to self-sign no bytes of data * Show a more accurate output when not all engines are enabled ==== libmodulemd ==== - Drop unknown meson parameters: developer_build, with_py2_overrides, with_py3_overrides. ==== libsndfile ==== - Fix heap buffer overflow in flac_buffer_copy (CVE-2021-4156, bsc#1194006): libsndfile-CVE-2021-4156.patch ==== libsoup ==== Version update (3.0.3 -> 3.0.4) Subpackages: libsoup-3_0-0 typelib-1_0-Soup-3_0 - Update to version 3.0.4: + Fix HTTP/2 not properly handling socket timeouts. + Improvements to test reliablity. + Fix cross-compiling to Windows. + Fix tests with development glib-networking. + Expose soup_uri_copy() to Vala. ==== libssh ==== Subpackages: libssh-config libssh4 - Add patch to make the compression option more compatible (boo#1192731): * 0001-Soften-behaviour-of-the-Compression-no-yes-option.patch ==== lua54 ==== - Re-enable readline support in Lua, the way to do this changed in Lua 5.4 - Because we are linking with readline add GPLv3+ only to the main package - Subsequently, update main_test.patch to ignore another test - Update upstream-bugs.patch and upstream-bugs-test.patch to fix bugs 9,10,12 for build and tests respectively. Bug 11 changes interface of luaD_pretailcall. ==== multipath-tools ==== Version update (0.8.8+38+suse.2bdd3a14 -> 0.8.8+13+suse.79c3556f) Subpackages: kpartx libmpath0 - Version 0.8.8+13+suse.79c3556f * code-wise identical to 0.8.8+38+suse.2bdd3a14 (previous version number was too high by mistake) ==== openexr ==== Subpackages: libIex-3_1-30 libIlmThread-3_1-30 libOpenEXR-3_1-30 - security update - added patches fix CVE-2021-45942 [bsc#1194333], heap-based buffer overflow in Imf_3_1:LineCompositeTask:execute + openexr-CVE-2021-45942.patch ==== openssl ==== Version update (1.1.1l -> 1.1.1m) - Update to 1.1.1m release ==== openssl-1_1 ==== Version update (1.1.1l -> 1.1.1m) Subpackages: libopenssl1_1 - Update to 1.1.1m: * Avoid loading of a dynamic engine twice. * Prioritise DANE TLSA issuer certs over peer certs - Rebased patches: * openssl-1.1.1-evp-kdf.patch * openssl-1.1.1-system-cipherlist.patch ==== osinfo-db ==== Version update (20211013 -> 20211216) - Update to database version 20211216 osinfo-db-20211216.tar.xz - Drop add-missing-oracle-linux-versions.patch ==== perl-libwww-perl ==== Version update (6.59 -> 6.60) - updated to 6.60 see /usr/share/doc/packages/perl-libwww-perl/Changes 6.60 2021-12-17 22:29:57Z - Warn if updating modification time of mirrored file fails (GH#399) (Ville Skyttä) ==== pkcs11-helper ==== Version update (1.25.1 -> 1.27.0) Subpackages: libpkcs11-helper1 - update to 1.27.0: * core: handle PIN expiration after C_Login as C_Login may take a while * core: return explict success when plugin&play and no threading and no safefork, thanks to Tunnelblick * openssl: build with openssl ec disabled * openssl: support RSA_NO_PADDING padding, thanks to Selva Nair * core: reduce mutex lock scope of add/remove provider, thanks to Frank Morgner * core: improve the fork fixup sequence ==== pulseaudio ==== Subpackages: libpulse-mainloop-glib0 libpulse0 pulseaudio-setup - Fix parameters passed to meson: * access-group, => access_group, system-group => system_group, and system-user => system_user for them to actually have an effect. ==== python-kiwisolver ==== Version update (1.3.1 -> 1.3.2) - update to 1.3.2: - Add support for Python 3.10, drop official support Python 3.6 - Remove direct accesses to ob_type in C-API use Py_TYPE instead ==== python-pandas ==== Version update (1.3.4 -> 1.3.5) - Update to version 1.3.5 * Fixed regression in Series.equals() when comparing floats with dtype object to None (GH44190) * Fixed regression in merge_asof() raising error when array was supplied as join key (GH42844) * Fixed regression when resampling DataFrame with DateTimeIndex with empty groups and uint8, uint16 or uint32 columns incorrectly raising RuntimeError (GH43329) * Fixed regression in creating a DataFrame from a timezone-aware Timestamp scalar near a Daylight Savings Time transition (GH42505) * Fixed performance regression in read_csv() (GH44106) * Fixed regression in Series.duplicated() and Series.drop_duplicates() when Series has Categorical dtype with boolean categories (GH44351) * Fixed regression in GroupBy.sum() with timedelta64[ns] dtype containing NaT failing to treat that value as NA (GH42659) * Fixed regression in RollingGroupby.cov() and RollingGroupby.corr() when other had the same shape as each group would incorrectly return superfluous groups in the result (GH42915) ==== python-prettytable ==== Version update (2.4.0 -> 2.5.0) - update to 2.5.0: * Add Single Border table style ==== python-pyzmq ==== Version update (22.2.1 -> 22.3.0) - Skip test_log due to flaky socket handling inside obs environments. - Add less-flaky.patch to increase flakiness of test_retry_poll and test_timeout. - Update to 22.3.0: - Fix strlcpy compilation issues on alpine, freebsd. Adds new build-time dependency on packaging. - In event-loop integration: warn instead of raise when triggering callback on a socket whose context has been closed. - Bundled libzmq in wheels backport a patch to avoid crashes due to inappropriate closing of libsodium's random generator when using CurveZMQ. - New ResourceWarnings when contexts and sockets are closed by garbage collection, which can be a source of hangs and leaks (matches open files) ==== python-requests ==== Version update (2.26.0 -> 2.27.1) - update to 2.27.1 * Fixed parsing issue that resulted in the auth component being dropped from proxy URLs. (#6028) - update to 2.27.0: * Officially added support for Python 3.10. (#5928) * Added a `requests.exceptions.JSONDecodeError` to unify JSON exceptions between Python 2 and 3. This gets raised in the `response.json()` method, and is backwards compatible as it inherits from previously thrown exceptions. Can be caught from `requests.exceptions.RequestException` as well. (#5856) * Improved error text for misnamed `InvalidSchema` and `MissingSchema` exceptions. This is a temporary fix until exceptions can be renamed (Schema->Scheme). (#6017) * Improved proxy parsing for proxy URLs missing a scheme. This will address recent changes to `urlparse` in Python 3.9+. (#5917) * Fixed defect in `extract_zipped_paths` which could result in an infinite loop for some paths. (#5851) * Fixed handling for `AttributeError` when calculating length of files obtained by `Tarfile.extractfile()`. (#5239) * Fixed urllib3 exception leak, wrapping `urllib3.exceptions.InvalidHeader` with `requests.exceptions.InvalidHeader`. (#5914) * Fixed bug where two Host headers were sent for chunked requests. (#5391) * Fixed regression in Requests 2.26.0 where `Proxy-Authorization` was incorrectly stripped from all requests sent with `Session.send`. (#5924) * Fixed performance regression in 2.26.0 for hosts with a large number of proxies available in the environment. (#5924) * Fixed idna exception leak, wrapping `UnicodeError` with `requests.exceptions.InvalidURL` for URLs with a leading dot (.) in the domain. (#5414) * Requests support for Python 2.7 and 3.6 will be ending in 2022. While we don't have exact dates, Requests 2.27.x is likely to be the last release series providing support. ==== rav1e ==== - resolve bsc#1194113 (CVE-2018-25023) - resolve bsc#1194119 (CVE-2021-45710) ==== sg3_utils ==== Version update (1.47 -> 1.47+2.388b767) Subpackages: libsgutils2-1_47-2 - Update to version 1.47+2.388b767: * rescan-scsi-bus.sh: apply fix for '-r' (boo#1194293) * _service: use openSUSE github repo again (with cherry-picks from upstream) * spec file: suppress commit ID in library version ==== suse-module-tools ==== Version update (16.0.17 -> 16.0.18) - Update to version 16.0.18: * cdrom: Disable autoclose by default (boo#1165047). * Make regenerate-initrd-posttrans compatible with Dracut's UEFI mode (unified kernel image) ==== systemd ==== Subpackages: libsystemd0 libudev1 systemd-sysvinit udev - Update systemd-user PAM service again Change the default implementation of pam_setcred() again, previously customized to run the full "auth" PAM stack and only call pam_deny.so which is basically the SUSE default behavior without pam_warn.so. This is considered safer, especially on SLE where a regression was spotted by QA. - move files related to static nodes to udev - Replace S:$n references with SOURCE$n. Makes vim * search work. ==== vim ==== Version update (8.2.3863 -> 8.2.3995) Subpackages: vim-data-common vim-small - Updated to version 8.2.3995, fixes the following problems - fixed boo#1194219 * Various build flags accidentally enabled. * Cannot disable requesting key codes from xterm. * Vim9: compiler complains about using "try" as a struct member. * Vim9: type checking global variables is inconsistent. * Implementation of some list functions too complicated. * Vim9: function test fails. * Vim9: type checking for "any" is inconsistent. context menu. (Gabriel Dupras) * List.c contains code for dict and blob. * Vim9: finddir() and uniq() return types can be more specific. * go.mod files are not recognized. * Cannot highlight the number column for a sign. * gcc complains about buffer overrun. * 'cindent' does not recognize inline namespace. * Function does not abort after a type error in compare * Vim9: debugger tries to read more lines than there are. * getreg() and getregtype() contain dead code. * Solution filter files are not recognized. * More duplicated code in f_getreginfo(). * Crash when switching to other regexp engine fails. * Crash when clearing the argument list while using it. * Arglist test fails. * Can define autocmd for every event by using "au!". * E1135 is used for two different errors. * The argument list may contain duplicates. * Duplicate code for translating script-local function name. * Vim9: type check for using v: variables is basic. * When modifyOtherKeys is used CTRL-C is not recognized. * Vim9: many local variables are initialized with an instruction. * Vim9: no proper type check for first argument of call(). * Vim9: confusing error when using function() with a number. * Vim9: no test for nested function not available later. * Vim9: the second argument of map() and filter() is not checked at compile time. * Vim9: not sufficient testing for variable initialization. * Vim9: test for map() on string fails. * It is not easy to use a script-local function for an option. * Vim9: Cannot set 'cpo' in main .vimrc if using Vim9 script. * Vim9: double free with nested :def function. * "gM" does not count tabs as expected. * Vim9: skip expression type is not checked at compile time. * Dockerfile using prefix name not recognized. * Vim9 help still contains "under development" warnings. * Error messages are spread out. * Cannot use a script-local function for 'foldtext'. * Containerfile using prefix name not recognized. * When the compare function of sort() produces and error then sort() does not abort. * Vim9: type check for filter() does not accept unknown. * The ins_complete() function is much too long. * Help for expressions does not mention Vim9 syntax. * Various spelling mistakes in comments. * illegal memory access when completing with invalid bytes. * No error for passing an invalid line number to append(). * The eval.txt help file is way too big. * Function list test fails. * Vim9: wrong argument for append() results in two errors. * Restoring directory after using another window is inefficient. * The way xdiff is used is inefficient. * Cannot build with dynamic Ruby 3.1. * Vim9: double free if a nested function has a line break in the argument list. * Vim9: no error if something follows :enddef in a nested function. * Diff mode confused by NUL bytes. * Build failure without the 'autochdir' option. (John Marriott) * Vim9: double free when using lambda. * Heredoc test fails. * Using unititialized variable. * getcmdline() argument has a misleading type. * Coverity reports a memory leak. * C line comment not formatted properly. * After ":cd" fails ":cd -" is incorrect. * Repeating line comment is undesired for "O" command. * CTRL-U in Insert mode does not fix the indent. * No proper test for maintaining change mark in diff mode. * Insert mode completion function is too long. * Line comment start is also found in a string. * Match highlight disappears when doing incsearch for ":s/pat". * SIGTSTP is not handled. * Coverity reports a possible memory leak. * Compiler warning from gcc for uninitialized variable. * Insert mode completion functions are too long. * Vim9: partial variable argument types are wrong, leading to a crash. * When an internal error makes Vim exit the error is not seen. * Unnecessary check for NULL pointer. * Vim9: failure with partial with unknown argument count. * Using freed memory with /\%V. * Going beyond the end of the line with /\%V. * Vim9: memory leak when text after a nested function. * First line not redrawn when adding lines to an empty buffer. * Insert completion code is too complicated. * Vim9: no error for shadowing if script var is declared later. * Duplicate assignment. * Build failure compiling xxd with "-std=c2x". * Error messages are spread out. * Build fails for missing error message. * Build failure with tiny and small features. (Tony Mechelynck) * Some common lisp and scheme files not recognized. * Vim9: no easy way to check if Vim9 script is supported. * When using feedkeys() abbreviations may be blocked. * Error messages are spread out. * Build failure. * Value of MAXCOL not available in Vim script. * Error messages are spread out. * Build fails. * Error messages are spread out. * Tiny build fails. * Vim9: LISTAPPEND instruction does not check for a locked list. * Error messages are spread out. * FEARG_LAST is never used. (Dominique Pellé) * Error messages are spread out. * Build error when using dynamycally loaded Python 3. * Vim9: the feature is not mentioned in the right places. * If 'operatorfunc' invokes an operator the remembered Visual mode may be changed. (Naohiro Ono) * Vim9: debugging a for loop doesn't stop before it starts. * Some lines of code not covered by tests. * Error messages are spread out. * Tiny build fails. * Some insert completion code is not tested. * Testing wrong operator. * Vim9: error when extending dict with another type that it was initialized with. * Wrong local-additions in the help with language mix. * When recording a change in Select mode the first typed character appears twice. * Vim9: extend() complains about the type even when it was not declared. * Not all sshconfig files are detected as such. ==== xorg-x11-server ==== Version update (21.1.2 -> 21.1.3) Subpackages: xorg-x11-server-Xvfb - u_xfree86-activate-GPU-screens-on-autobind.patch * Part of the original patch by Dave Airlie has landed 078277e4d92f05a90c4715d61b89b9d9d38d68ea, this contains the remainder of what was in SUSE before Xorg 21.1. (github issue#1254, boo#1192751) - Update to version 21.1.3 * This release fixes several regressions since 1.20.x and 21.1.1 + glx/dri: Filter out fbconfigs that don't have a supported pixmap format + xf86/logind: Fix compilation error when built without logind/platform bus + xf86/logind: fix missing call to vtenter if the platform device is not paused + Convert more funcs to use InternalEvent. + os: Try to discover the current seat with the XDG_SEAT var first ==== yast2 ==== Version update (4.4.32 -> 4.4.34) - Fixed test failure in Ruby 2.5, caused by the fix for Ruby 3.0 (related to bsc#1193192) - 4.4.34 - Y2Packager::Resolvable: added none? method in order to not crash in case of rubocop automatic change (bsc#1194387) - 4.4.33 ==== zchunk ==== - add zstd-1.5.1.patch (gh#zchunk/zchunk/57) ==== zstd ==== Version update (1.5.0 -> 1.5.1) Subpackages: libzstd1 - add noexecstack.patch (bsc#1194337) - fix pkgconfig pc file settings by passing in right prefix during build - update to 1.5.1: * perf: rebalanced compression levels, to better match the intended speed/level curve * perf: faster huffman decoder, using x64 assembly * perf: slightly faster high speed modes (strategies fast & dfast) * perf: improved binary size and faster compilation times * perf: new row64 mode, used notably in level 12 * perf: faster mid-level compression speed in presence of highly repetitive patterns * perf: minor compression ratio improvements for small data at high levels * perf: reduced stack usage (mostly useful for Linux Kernel) * perf: faster compression speed on incompressible data * perf: on-demand reduced ZSTD_DCtx state size, using build macro ZSTD_DECODER_INTERNAL_BUFFER, at a small cost of performance * build: allows hiding static symbols in the dynamic library, using build macro * build: support for m68k (Motorola 68000's) * build: improved AIX support * build: improved meson unofficial build * cli : custom memory limit when training dictionary (#2925) * cli : report advanced parameters information when compressing in very verbose mode (``-vv`)