Packages changed: apache2-mod_php8 checkpolicy (3.4 -> 3.5) cppcheck (2.10 -> 2.10.2) ethtool graphviz grub2 gtk4 (4.8.3 -> 4.10.0) harfbuzz (7.0.1 -> 7.1.0) icu krb5 lib2geom libadwaita (1.2.2 -> 1.2.3) libhandy (1.8.1 -> 1.8.2) libpaper (2.0.9 -> 2.0.10) libselinux (3.4 -> 3.5) libselinux-bindings (3.4 -> 3.5) libsemanage (3.4 -> 3.5) libsepol (3.4 -> 3.5) mariadb (10.10.3 -> 10.11.2) openexr patterns-fonts php8 policycoreutils (3.4 -> 3.5) postfix (3.7.3 -> 3.7.4) python-base python-semanage (3.4 -> 3.5) restorecond (3.4 -> 3.5) selinux-policy systemd (252.6 -> 252.7) vim (9.0.1367 -> 9.0.1386) xscreensaver yast2 (4.6.0 -> 4.6.1) yast2-sudo (4.6.0 -> 4.6.1) yast2-trans (84.87.20230211.83e08d8766 -> 84.87.20230306.ba31ff5670) === Details === ==== apache2-mod_php8 ==== - add "/usr/share/php" to include_path - allow to specify load order of extensions in %{php_sysconf}/conf.d [bsc#1205162] ==== checkpolicy ==== Version update (3.4 -> 3.5) - Update to version 3.5 * error out if required permission would exceed limit * Improve error message for type bounds - Added additional developer key (Jason Zaman) ==== cppcheck ==== Version update (2.10 -> 2.10.2) - update to 2.10.2: * GUI: Set proper title for compliance report dialog * GUI: Generate compliance report * Tokenizer: tweaked simplification of function pointers ==== ethtool ==== - Split bash-completion to separate sub-package ==== graphviz ==== Subpackages: libcdt5 libcgraph6 libgvc6 libpathplan4 - Fix RPM conditionals for PHP, elif does not work on Leap 15.x - Remove unused ghostscript_any BuildRequires for qt5 and main flavors ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen - Fix riscv64 error for relocation 0x13 is not implemented yet * 0001-RISC-V-Handle-R_RISCV_CALL_PLT-reloc.patch ==== gtk4 ==== Version update (4.8.3 -> 4.10.0) Subpackages: gtk4-lang gtk4-schema gtk4-tools libgtk-4-1 typelib-1_0-Gtk-4_0 - Update to version 4.10.0: + GtkTextView: Document hanging indentation + GtkListView: Fix a size allocation problem + GtkFileChooser: - Fix paned behavior - Fix a crash + GtkText: Fix various problems with undo + Accessibility: - Make some getters transfer-full - Allow setting accessible parents and siblings - Add a role for toggle buttons - Miscellaneous property fixes and improvements + gtk: Improve the handling resize-during-size-allocate + gdk: - Introduce GdkTextureDownloader and use it - Make gdk_texture_get_format public + gsk: - Make mask nodes more versatile - Improve the GL implementation for texture scale nodes + X11: Fix key handling during DND + Tools: - gtk-builder-tool: Try harder to handle templates - gtk-builder-tool: Prefer properties over <child> + Updated translations. - Update to version 4.9.4: + Printing: - Add a CPDB backend - Drop the lpr backend + GtkFileDialog: Robustness fixes + GtkScaleButton: Add an 'active' property + GtkSearchEntry: Add placeholder text + Fix conflicting type names between gtk and gio + Gsk: - Settable filtering for scaled textures - Add mask nodes - Some robustness and crash fixes + Wayland: Handle dispatch failing in more places + Deprecations: GtkVolumeButton + Updated translations. - Changes from version 4.9.3: + Add GtkUriLauncher, as replacement for gtk_show_uri + Add GdkMonitor::description + Fix problems with tooltip sizing + Deprecations: - GtkStatusbar - GtkAssistant - GtkLockButton - gtk_gesture_set_sequence_state + GtkColumnView: Only create widgets for visible columns + GtkFileDialog: Drop shortcut folders API + GtkCalendar: Make marked days work again + GtkSwitch: Make state and active independently settable + GtkFileChooser: - Fix a crash with DND - Fix excessively wide sidebar - Make context menus work again + Accessibility: - Make GtkAccessible public, so it can be implemented outside GTK - Support accessible implementation for editables + CSS: Fix randomly stopping CSS animations + GL: - Fix synchronization with GStreamer - Fix problems with 3rd party GL in the same thread + Wayland: Fix startup notification with xdg_activation + Broadway: Implement modal windows + macOS: Make DND work + Build: - Require graphene 1.10 - Require gobject-introspection 1.72 + Updated translations. - Update to version 4.9.2: + GtkFileChooserWidget: Add a grid view. + GtkText, GtkTextView: - Fix activation of the on-screen keyboard. - Prevent unexpected text direction changes. + GtkCenterBox: Add properties for children. + GtkTreeExpander: Add a hide-expander property. + GtkStringList: Add a construct-only strings property. + GtkBuilder: Support parsing Pango attributes in string form. + GtkGestureStylus: Add a stylus-only property. + GtkFileLauncher: New async-style api to replace gtk_show_uri. + GtkColorDialog, GtkFontDialog, GtkFileDialog, GtkAlertDialog: - APIs have seen some tweaks - Prefer portals when available - Fixes for cancellation + Add GDK_DEBUG=no-portals + Improve file DND with remote files + GtkInfoBar has been deprecated + gtk_widget_show/hide have been deprecated + gtk_show_uri has been deprecated + Wayland: - Fix button mask handling - Fix problems with cursor size on hi-dpi screens - Support newer versions of some protocols - Fix handling of surrounding text in input methods - Changes from version 4.9.1: + GtkTreeView, GtkIconView, GtkComboBox and auxiliary classes have been deprecated. ... changelog too long, skipping 20 lines ... + Increase the memory limit for the jpeg loader to 1G. ==== harfbuzz ==== Version update (7.0.1 -> 7.1.0) Subpackages: libharfbuzz-gobject0 libharfbuzz-icu0 libharfbuzz-subset0 libharfbuzz0 libharfbuzz0-32bit typelib-1_0-HarfBuzz-0_0 - Update to version 7.1.0: + New experimental API that uses font variations to expand or shrink the text to a given advance + Various build and bug fixes. + New API: hb_font_set_variation(). ==== icu ==== Subpackages: libicu72 libicu72-ledata - Use -fexcess-precision=fast as GCC 13 will default to -fexcess-precision=standard for C++. ==== krb5 ==== Subpackages: krb5-32bit krb5-client - Update 0007-SELinux-integration.patch for SELinux 3.5; (bsc#1208887); ==== lib2geom ==== - Use -fexcess-precision=fast as GCC 13 changes the default for C++ compiler and without the change some tests fail on i586. More info can be seen here: https://gcc.gnu.org/gcc-13/porting_to.html#excess-precision ==== libadwaita ==== Version update (1.2.2 -> 1.2.3) Subpackages: libadwaita-1-0 libadwaita-lang typelib-1_0-Adw-1 - Update to version 1.2.3: + AdwEntryRow: Fix :disabled styles. + AdwExpanderRow: Expose expanded state for a11y. + Memory leak fixes. ==== libhandy ==== Version update (1.8.1 -> 1.8.2) Subpackages: libhandy-1-0 libhandy-lang typelib-1_0-Handy-1_0 - Update to version 1.8.2: + Demo: - Correctly use GtkSwitch - Fix a GLib deprecation + Docs: Fix dependency names + HdyTabView: - Fix set_menu_model() input check - Fix a typo in docs + HdySwipeable: Fix get_swipe_area() fallback + Memory leak fixes + Updated translations. ==== libpaper ==== Version update (2.0.9 -> 2.0.10) Subpackages: libpaper-tools libpaper2 - Update to 2.0.10: * minor build fix. ==== libselinux ==== Version update (3.4 -> 3.5) Subpackages: libselinux1 libselinux1-32bit selinux-tools - Update to version 3.5: * check for truncations * avoid newline in avc message * bail out on path truncations * add getpidprevcon to gather the previous context before the last exec of a given process * Workaround for heap overhead of pcre * fix memory leaks on the audit2why module init * ignore invalid class name lookup - Drop restorecon_pin_file.patch, is upstream - Added additional developer key (Jason Zaman) ==== libselinux-bindings ==== Version update (3.4 -> 3.5) - Update to version 3.5: * check for truncations * avoid newline in avc message * bail out on path truncations * add getpidprevcon to gather the previous context before the last exec of a given process * Workaround for heap overhead of pcre * fix memory leaks on the audit2why module init * ignore invalid class name lookup - Drop restorecon_pin_file.patch, is upstream - Refreshed python3.8-compat.patch - Added additional developer key (Jason Zaman) ==== libsemanage ==== Version update (3.4 -> 3.5) Subpackages: libsemanage-conf libsemanage-migrate-store libsemanage2 - Update to version 3.5 * Allow user to set SYSCONFDIR * always write kernel policy when check_ext_changes is specified - Added additional developer key (Jason Zaman) ==== libsepol ==== Version update (3.4 -> 3.5) - Update to version 3.5 * Stricter policy validation * do not write empty class definitions to allow simpler round-trip tests * reject attributes in type av rules for kernel policies - Added additional developer key (Jason Zaman) ==== mariadb ==== Version update (10.10.3 -> 10.11.2) Subpackages: libmariadbd19 mariadb-client mariadb-errormessages - Update to 10.11.2: * release notes and changelog: https://mariadb.com/kb/en/changes-improvements-in-mariadb-1011/ https://mariadb.com/kb/en/mariadb-10-11-2-release-notes/ https://mariadb.com/kb/en/mariadb-10-11-2-changelog/ https://mariadb.com/kb/en/mariadb-10-11-1-release-notes/ https://mariadb.com/kb/en/mariadb-10-11-1-changelog/ https://mariadb.com/kb/en/mariadb-10-11-0-release-notes/ https://mariadb.com/kb/en/mariadb-10-11-0-changelog/ - Refresh mariadb-10.2.4-logrotate.patch ==== openexr ==== Subpackages: libIex-3_1-30 libIlmThread-3_1-30 libOpenEXR-3_1-30 - Add upstream fix gcc13-fix.patch. ==== patterns-fonts ==== Subpackages: patterns-fonts-fonts patterns-fonts-fonts_opt - Revert back to efont-unicode-bitmap-fonts from babelstone-han-fonts. The latter are apparently broken for Japanese at least. - Fix changelog entries with invalid format. ==== php8 ==== Subpackages: php8-cli php8-ctype php8-dom php8-gd php8-gettext php8-iconv php8-mbstring php8-mysql php8-openssl php8-pdo php8-sqlite php8-tokenizer php8-xmlreader php8-xmlwriter - add "/usr/share/php" to include_path - allow to specify load order of extensions in %{php_sysconf}/conf.d [bsc#1205162] ==== policycoreutils ==== Version update (3.4 -> 3.5) Subpackages: policycoreutils-lang policycoreutils-python-utils python3-policycoreutils - Update to version 3.5 * fixfiles: Unmount temporary bind mounts on SIGINT * Lots of smaller changes - Refreshed get_os_version.patch - Drop chcat_handle_missing_translations.patch, is upstream - Add additional BuildRequires for python - Added additional developer key (Jason Zaman) - Add requires for python3-distro for the devel package ==== postfix ==== Version update (3.7.3 -> 3.7.4) - update to 3.7.4 * Workaround: with OpenSSL 3 and later always turn on SSL_OP_IGNORE_UNEXPECTED_EOF, to avoid warning messages and missed opportunities for TLS session reuse. This is safe because the SMTP protocol implements application-level framing, and is therefore not affected by TLS truncation attacks. * Workaround: OpenSSL 3.x EVP_get_digestbyname() can return lazily-bound handles for digest implementations. In sufficiently hostile configurations, Postfix could mistakenly believe that a digest algorithm is available, and fail when it is not. A similar workaround may be needed for EVP_get_cipherbyname(). * Bugfix (bug introduced in Postfix 2.11): the checkok() macro in tls/tls_fprint.c evaluated its argument unconditionally; it should evaluate the argument only if there was no prior error. * Bugfix (bug introduced in Postfix 2.8): postscreen died with a segmentation violation when postscreen_dnsbl_threshold < 1. It should reject such input with a fatal error instead. * Bitrot: fixes for linker warnings from newer Darwin (MacOS) versions. * Portability: Linux 6 support. * Added missing documentation that cidr:, pcre: and regexp: tables support inline specification only in Postfix 3.7 and later. * Rebased postfix-linux45.patch ==== python-base ==== Subpackages: libpython2_7-1_0 python-xml - SLE-12 builds nis.so as well. ==== python-semanage ==== Version update (3.4 -> 3.5) - Update to version 3.5 * Allow user to set SYSCONFDIR * always write kernel policy when check_ext_changes is specified - Added additional developer key (Jason Zaman) ==== restorecond ==== Version update (3.4 -> 3.5) - Update to version 3.5 * Code improvements, no user visible changes - Added additional developer key (Jason Zaman) ==== selinux-policy ==== Subpackages: selinux-policy-targeted - Remove erroneous SUSE man page. Will not be created with the 3.5 toolchain ==== systemd ==== Version update (252.6 -> 252.7) Subpackages: libsystemd0 libsystemd0-32bit libudev1 libudev1-32bit systemd-32bit systemd-container systemd-coredump systemd-lang udev - Import commit d447802feee7752cd1756f8fa86ce2a6314ba24f (merge of v252.7) For a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/8e0a8094b8bbc442d262795b85ac57a37264c5fe...d447802feee7752cd1756f8fa86ce2a6314ba24f - Fix return non-zero value when disabling SysVinit service(bsc#1208432) ==== vim ==== Version update (9.0.1367 -> 9.0.1386) Subpackages: vim-data vim-data-common - Updated to version 9.0.1386, fixes the following problems * Divide by zero in zero-width window. * Bass files are not recognized. * Still some "else if" constructs for setting options. * Crash when using a NULL object. (Ernie Rael) * Ballooneval interferes with Insert completion. * Test for 'toolbariconsize' may fail. * Wrong text displayed when using both 'linebreak' and 'list'. * Function for setting options not used consistently. * Crash when getting member of obj of unknown class. * Accessing invalid memory with put in Visual block mode. * job_status() may return "dead" if the process parent changed. * Illegal memory access when using virtual editing. * Functions for handling options are not ordered. * CTRL-X on 2**64 subtracts two. (James McCoy) * ACCESS_ names have a conflict with on some systems. * Failing test for strptime() doesn't show returned value. * xxd: combination of little endian and cols fails. (Aapo Rantalainen) * Setting HOMEBREW_NO_AUTO_UPDATE is not needed with Homebew version 4. * g'Esc is considered an error. * Options test fails with some window width. ==== xscreensaver ==== Subpackages: xscreensaver-data xscreensaver-data-extra xscreensaver-lang - Added spec file changes to handle hard-coded PAM directories. * bsc#1204744 - Added fix for configuration reading * Added xscreensaver-bsc1204744.patch * bsc#1204744 * Patch provided by Jaroslav Jindrak ==== yast2 ==== Version update (4.6.0 -> 4.6.1) Subpackages: yast2-logs - Merged SLE-15-SP5 branch - Revert restoring DnsServerAPI.pm (bsc#1208833) - 4.6.1 ==== yast2-sudo ==== Version update (4.6.0 -> 4.6.1) - Stop using File.exists? which no longer works in Ruby 3.2 (bsc#1206419) - 4.6.1 ==== yast2-trans ==== Version update (84.87.20230211.83e08d8766 -> 84.87.20230306.ba31ff5670) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20230306.ba31ff5670: * Fixed string interpolations * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Swedish) * Translated using Weblate (Persian) * New POT for text domain 'control'. * New POT for text domain 'security'. * New POT for text domain 'packager'. * Translated using Weblate (Czech)