Packages changed: dbus-1 (1.14.6 -> 1.14.8) fuse-overlayfs (1.10 -> 1.12) gjs (1.76.0 -> 1.76.1) gvfs kbd libadwaita (1.3.2 -> 1.3.3) libmysofa liburing (2.3 -> 2.4) systemd-presets-common-SUSE wget wtmpdb (0.5.0 -> 0.6.0) xterm (380 -> 382) yast2-users (4.6.1 -> 4.6.2) zenity (3.92.0 -> 3.99.0) === Details === ==== dbus-1 ==== Version update (1.14.6 -> 1.14.8) Subpackages: dbus-1-common dbus-1-daemon dbus-1-tools libdbus-1-3 - update to 1.14.8 (bsc#1212126, CVE-2023-34969): * Denial-of-service fixes: * Fix an assertion failure in dbus-daemon when a privileged Monitoring connection (dbus-monitor, busctl monitor, gdbus monitor or similar) is active, and a message from the bus driver cannot be delivered to a client connection due to <deny> rules or outgoing message quota. This is a denial of service if triggered maliciously by a local attacker. * Fix compilation on compilers not supporting __FUNCTION__ * Fix some memory leaks on out-of-memory conditions * Fix syntax of a code sample in dbus-api-design ==== fuse-overlayfs ==== Version update (1.10 -> 1.12) - update to 1.12: * change license to GPL-2.0-or-later. * main: if a lower layer doesn't support ACLs do not enable them. ==== gjs ==== Version update (1.76.0 -> 1.76.1) Subpackages: libgjs0 typelib-1_0-GjsPrivate-1_0 - Update to version 1.76.1: + Various fixes ported from the development branch. + Closed bugs and merge requests: - gnome-shell crashes on exit in js::gc::Cell::storeBuffer - Memory leak with GError - GVariant return values leaked - GBytes's are leaked when passed as-is to a function - Transformated GValues are leaking temporary instances - GHash value infos are leaked - "flat" arrays of GObject's are leaked - Gjs console leaks invalid option errors - gjs can't print null - Enable tests during build again. ==== gvfs ==== Subpackages: gvfs-backend-afc gvfs-backend-goa gvfs-backend-samba gvfs-backends gvfs-fuse gvfs-lang - Add upstream fixes from the stable branch: + fc2669f63c5def1528dda2e7833db5774aa08e22.patch: mtp: Emit delete event on device when disconnected + 85bfb701fc95abeaa8a8ca3d9059378a9490f738.patch: smb: Allow renaming a file to the same name with a different case ==== kbd ==== Subpackages: kbd-legacy - Remove additional vfonts, they are freeware, not opensource (bsc#1210678). - Adjust license tag, pinephone keymap is under GPL-3.0-or-later. - Rename 'arabic' keyboard console layout into 'ara' and drop 'korean' symlink (bsc#1210702) ==== libadwaita ==== Version update (1.3.2 -> 1.3.3) Subpackages: libadwaita-1-0 libadwaita-lang typelib-1_0-Adw-1 - Update to version 1.3.3: + Fix doc include path + AdwCarousel: Fix scrolling to a recently inserted item + AdwEntryRow: Fix accessibility + AdwPreferencesWindow: Fix markup handling when searching + AdwStyleManager: Fix get_for_display() annotation + AdwTabBar/AdwTabOverview: Fix dropping data onto tabs/thumbnails + Updated translations. ==== libmysofa ==== - Add 0001-fix-big-endian-convertion-of-double-value.patch: backport bigendian fixes from upstream git. ==== liburing ==== Version update (2.3 -> 2.4) - Update to 2.4: * Add io_uring_{major,minor,check}_version() functions. * Add IO_URING_{MAJOR,MINOR,CHECK}_VERSION() macros. * FFI support (for non-C/C++ languages integration). * Add io_uring_prep_msg_ring_cqe_flags() function. * Deprecate --nolibc configure option. * CONFIG_NOLIBC is always enabled on x86-64, x86, and aarch64. * Add support for IORING_REGISTER_USE_REGISTERED_RING and use if available. * Add io_uring_close_ring_fd() function. * Add io_uring_prep_msg_ring_fd_alloc function. * Add io_uring_free_buf_ring() and io_uring_setup_buf_ring() functions. * Ensure that io_uring_prep_accept_direct(), io_uring_prep_openat_direct(), io_uring_prep_openat2_direct(), io_uring_prep_msg_ring_fd(), and io_uring_prep_socket_direct() factor in being called with IORING_FILE_INDEX_ALLOC for allocating a direct descriptor. * Add io_uring_prep_sendto() function. - Add liburing-ffi2 package for corresponding FFI library, given that dependents will normally require either that or the base library (not both). - Drop upstream patches: * 0001-Do-not-always-expect-multishot-recv-to-stop-posting-.patch * 0001-test-file-verify.t-Don-t-run-over-mlock-limit-when-r.patch * 0001-test-helpers-fix-socket-length-type.patch ==== systemd-presets-common-SUSE ==== - Add wtmpdb-update-boot.service and wtmpdb-rotate.timer to enable wtmpdb as Y2038 safe wtmp replacement ==== wget ==== Subpackages: wget-lang - Update wget-libproxy.patch: ensure to properly use libproxy cflags from pkg-config. Fixes build against libproxy 0.5. ==== wtmpdb ==== Version update (0.5.0 -> 0.6.0) Subpackages: libwtmpdb0 - Update to version 0.6.0 - wtmpdb rotate: move old log entries into wtmpdb_<yyyymmdd>.db ==== xterm ==== Version update (380 -> 382) Subpackages: xterm-bin xterm-resize - update to 382: * amend change to CursorBack> in patch 380, allowing the result to be on the hidden right-half of double-cell characters * amend xtermDrawString, fixing regression with - -disable-wide-chars configuration from patch #380 * corrected pathname for run-tic.sh, for full install in an out-of-tree build * fix a regression in wide bitmap fonts versus check for missing glyphs ==== yast2-users ==== Version update (4.6.1 -> 4.6.2) - Write the users when using AutoYaST on an installed system (bsc#1211753). - Move Ruby classes in Yast::Users (SSHAuthorizedKeysFile and SSHAuthorizedKeyring) to the Y2Users module to remove duplication Yast::Users Perl module. - 4.6.2 ==== zenity ==== Version update (3.92.0 -> 3.99.0) Subpackages: zenity-lang - Update to version 3.99.0: + option: Add various non-fatal deprecation warnings that were previously missing, and fix a misleading deprecation message for `--window-icon` + main: Add G_APPLICATION_FLAGS_NON_UNIQUE to GApplication flags + progress: Cleanup unnecessary static objects and remove spurious builder unref + util: - Remove fatal assert on exit if window invalid GtkWindow - Ignore superfluous quit requests - Remove superfluous GtkWindow cast check + data: Manpage generation changes; don't automatically generate the manpage from help2man for now (this will preferably be reinstated post-4.0 once the issues are worked out) + a11y: Label the widgets in a forms UI properly + Updated translations.