Packages changed: audit-secondary avahi avahi-glib2 dracut (055+suse.119.g6c4187af -> 055+suse.129.g7d8c3ce3) e2fsprogs fcoe-utils fwupd gdm gnome-online-accounts (3.40.0 -> 3.40.1) gpsd iso-codes (4.6.0 -> 4.7.0) jack (1.9.18 -> 1.9.19) kbd libaom (3.1.3 -> 3.2.0) libcdio libgphoto2 librsvg (2.52.1 -> 2.52.2) libzypp (17.28.5 -> 17.28.6) mpg123 (1.29.0 -> 1.29.1) plasma5-openSUSE python-Jinja2 (3.0.1 -> 3.0.2) python-alembic (1.6.5 -> 1.7.4) python-apipkg (1.5 -> 2.1.0) python-greenlet (1.1.0 -> 1.1.2) python-idna (3.2 -> 3.3) python-more-itertools (8.8.0 -> 8.10.0) python-pyrsistent (0.17.3 -> 0.18.0) python-pytz (2021.1 -> 2021.3) python-zipp (3.5.0 -> 3.6.0) qemu systemd (249.4 -> 249.5) timezone (2021c -> 2021d) wireless-regdb (20210421 -> 20210828) xkeyboard-config (2.33 -> 2.34) zypper (1.14.49 -> 1.14.50) === Details === ==== audit-secondary ==== Subpackages: audit python3-audit system-group-audit - Add CONFIG parameter to %sysusers_generate_pre - Create separate service for augenrules (bsc#1191614, bsc#1181400) * add create-augenrules-service.patch Remove ReadWritePaths=/etc/audit from auditd.service, also removes augenrules call from ExecStartPost. Create augenrules.service with the ReadWritePaths directive above. This makes /etc/audit only accessible by augenrules.service and let auditd.service (and daemon) to be sandboxed again. - Update audit-secondary.spec to accomodate the new service file. ==== avahi ==== Subpackages: libavahi-client3 libavahi-common3 libavahi-core7 - Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd (boo#1191750). - Remove obsolete translation-update-upstream support (jsc#SLE-21105). ==== avahi-glib2 ==== - Remove obsolete translation-update-upstream support (jsc#SLE-21105). ==== dracut ==== Version update (055+suse.119.g6c4187af -> 055+suse.129.g7d8c3ce3) Subpackages: dracut-ima dracut-mkinitrd-deprecated - Update to version 055+suse.129.g7d8c3ce3: * fix(kernel-modules): add blk_mq_alloc_disk and blk_cleanup_disk to blockfuncs (bsc#1190326) * docs: update SUSE maintainers doc * fix(suse): add 60-io-scheduler.rules (bsc#1188713) * revert: remove /sbin/installkernel script from dracut package * spec: modernize specfile constructs ==== e2fsprogs ==== Subpackages: libcom_err2 libext2fs2 - Drop ProtectClock hardening, can cause issues if other device acceess is needed ==== fcoe-utils ==== - Drop ProtectClock hardening, can cause issues if other device acceess is needed ==== fwupd ==== Subpackages: libfwupd2 libfwupdplugin2 typelib-1_0-Fwupd-2_0 - Added hardening to systemd service(s) (bsc#1181400). Added patch(es): * harden_fwupd-offline-update.service.patch * harden_fwupd-refresh.service.patch ==== gdm ==== Subpackages: gdmflexiserver libgdm1 typelib-1_0-Gdm-1_0 - Add gdm-daemon-Infer-session-type-from-desktop-file.patch (bsc#1191809, bsc#1191248) - Rebase gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch (bsc#1191014). ==== gnome-online-accounts ==== Version update (3.40.0 -> 3.40.1) Subpackages: libgoa-1_0-0 libgoa-backend-1_0-1 - Update to version 3.40.1: + Bugs fixed: glgo#GNOME/gnome-online-accounts!68 dbus: Add missing since tag for IsSupportedProvider. + Updated translations. - Remove obsolete translation-update-upstream support (jsc#SLE-21105). ==== gpsd ==== - Re-enable LTO on aarch64 ==== iso-codes ==== Version update (4.6.0 -> 4.7.0) - update to 4.7.0: * Fix weblate check: Remove double spaces * Rename ku.po to kmr.po. * Add common names for South and North Korea. * Updates for Indonesia * ISO 3166-1 translations * ISO 3166-2 translations * ISO 3166-3 translations * ISO 639-2 translations * ISO 639-3 translations * ISO 639-5 translations * ISO 4217 translations * ISO 15924 translations ==== jack ==== Version update (1.9.18 -> 1.9.19) - drop 0001-Fix-compilation-of-documentation.patch (upstream). - update to 1.9.19: * Add jack_position_t::tick_double, and flags around it * Add zalsa "-w" argument to wait for soundcard to be available * Bump internal protocol version to 9 (due to struct alignment) * Fix alignment of fields for atomic accesses * Fix build for platforms needing __STDC_FORMAT_MACROS * Fix compilation of documentation ==== kbd ==== Subpackages: kbd-legacy - regenerated cz-map.patch needed for xkeyboard-config 2.34 update ==== libaom ==== Version update (3.1.3 -> 3.2.0) - Update to version 3.2.0: * This release includes compression efficiency and perceptual quality improvements, speedup and memory optimizations, as well as some new features. * New Features: + Introduced speeds 7, 8, and 9 for all intra mode. + Introduced speed 10 for real time mode. + Introduced an API that allows external partition decisions. + SVC: added support for compound prediction. + SVC: added support for fixed SVC modes. * Compression Efficiency Improvements: + Intra-mode search improvement. + Improved real time (RT) mode BDrate savings by ~5% (RT speed 5) and ~12% (RT speed 6). The improvement was measured on the video conference set. + Improved real time mode for nonrd path (speed 7, 8, 9): BDrate gains of ~3-5%. + Rate control and RD adjustments based on ML research in VP9. Gains of ~0.5-1.0% for HD. * Perceptual Quality Improvements: + Added a new mode --deltaq-mode=3 to improve perceptual quality based on a differential contrast model for still images. + Added a new mode ?deltaq-mode=4 to improve perceptual quality based on user rated cq_level data set for still images. + Weighting of some intra mode and partition size choices to better manage and retain texture. * Speedup and Memory Optimizations: + Further improved 2-pass good quality encoder speed: . Speed 2 speedup: 18% . Speed 3 speedup: 22% . Speed 4 speedup: 37% . Speed 5 speedup: 30% . Speed 6 speedup: 20% + Optimized the real time encoder (measured on the video conference set): . RT speed 5 speedup: 110% . RT speed 6 speedup: 77% * Bug Fixes + Issue 3069: Fix one-pass mode keyframe placement off-by-one error. + Issue 3156: Fix a bug in av1_quantize_lp AVX2 optimization. - Drop libaom-CVE-2021-30475.patch: Fixed upstream. - Remove changesgenerate option from _service file, use data from CHANGELOG to fill .changes instead as it it much nicer and human readable than just a list of commit messages. ==== libcdio ==== - Bump cdiopp_name libcdio++0 to libcdio++1, this was missed when it was bumped by upstream. Followup change in baselibs.conf to. - Split out new subpackage libiso9660++0, add needed Requires and entry in baselibs.conf. ==== libgphoto2 ==== - split out libgphoto2_port for now to meet new shared library policy requirements. bsc#1191764 ==== librsvg ==== Version update (2.52.1 -> 2.52.2) Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2 rsvg-thumbnailer typelib-1_0-Rsvg-2_0 - Update to version 2.52.2: + New features: - rsvg-convert now supports generating multi-page PDFs in a sensible way. - With one SVG document per page, each page with the SVG's natural size: - rsvg-convert --format=pdf -o out.pdf a.svg b.svg c.svg - With all pages sized as portrait US Letter, and each SVG scaled to fit so that there is a 1in margin around each page: rsvg-convert --format=pdf -o out.pdf \ - -page-width=8.5in --page-height=11in \ - -width=6.5in --height=8.5in --keep-aspect-ratio \ - -top=1in --left=1in a.svg b.svg c.svg Please see the man page for details. - Support elements inside . Also, support the CSS :link pseudo-class for matching against links. - Support the CSS :lang() pseudo-class for matching against an element's xml:lang attribute. - Support the mask-type property from SVG2. + Bugs fixed: - Don't panic when a shorthand property is set to inherit. - Fix regression with the viewport size of interior elements. - Allow length units to be case-insensitive, per SVG2. + Documentation: - There is now a FEATURES.md in the repository, where you can see all the elements, attributes, and properties that librsvg supports. We will be adding detail to this gradually. - For developers, there is now devel-docs/adding-a-property.md with a tutorial on how to add support for new CSS properties. ==== libzypp ==== Version update (17.28.5 -> 17.28.6) - Zypper should keep cached files if transaction is aborted (bsc#1190356) Singletrans mode currently does not keep files around if the transaction is aborted. This patch fixes the problem. - Require a minimum number of mirrors for multicurl (bsc#1191609) - Use procfs to detect nr of open fd's if rlimit is too high (bsc#1191324) Especially in a VM iterating over all possible fd's to close open ones right before a exec() slows down zypper unnecessarily. This patch uses /proc/self/fd to iterate over open fd's in case rlimit is above 1024. - po: Fix some lost '%' signs in positional args (bsc#1191370) - RepoManager: Don't probe for plaindir repo if URL schema is plugin: (bsc#1191286) - version 17.28.6 (22) ==== mpg123 ==== Version update (1.29.0 -> 1.29.1) - Update to version 1.29.1 mpg123: * Keep default output encoding of s16 for raw and file outputs also with the new resampler. This reverts the unintentional change in 1.26.0 of switching to f32 for forced output rate unless the NtoM resampler is selected. In any case, you should make sure to specify your desired --encoding if you depend on it. * Catch error in indexing (mpg123_scan() return value was ignored before, bug 322). mpg123-strip: * Lift the resync limit, as it should be to clean up really dirty streams. mpg123-id3dump: * Also lift resync limit for the same reasons. libout123: * Fix reporting of device property flags for buffer libmpg123: * More safeguarding against attempts to decode if decoder setup failed and user ignored the returned error code (bug 322) ==== plasma5-openSUSE ==== Subpackages: plasma5-defaults-openSUSE plasma5-theme-openSUSE sddm-theme-openSUSE - Update to 5.23.1 ==== python-Jinja2 ==== Version update (3.0.1 -> 3.0.2) - dropped obsolete no-warnings-as-errors.patch - update to 3.0.2 * Fix a loop scoping bug that caused assignments in nested loops to still be referenced outside of it. #1427 * Make compile_templates deterministic for filter and import names. #1452, #1453 * Revert an unintended change that caused Undefined to act like StrictUndefined for the in operator. #1448 * Imported macros have access to the current template globals in async environments. #1494 * PackageLoader will not include a current directory (.) path segment. This allows loading templates from the root of a zip import. #1467 ==== python-alembic ==== Version update (1.6.5 -> 1.7.4) - update to 1.7.4: * Fixed a regression that prevented the use of post write hooks on python version lower than 3.9 * Added missing attributes from context stubs. * Fixed issue where registration of custom ops was prone to failure due to the registration process running exec() on generated code that as of the 1.7 series includes pep-484 annotations, which in the case of end user code would result in name resolution errors when the exec occurs - specfile: * skip python 2 builds * require importlib-resources - update to version 1.7.1: * Corrected "universal wheel" directive in setup.cfg so that building a wheel does not target Python 2. The PyPi files index for 1.7.0 was corrected manually. Pull request courtesy layday. * Fixed issue in generated .pyi files where default values for "Optional" arguments were missing, thereby causing mypy to consider them as required. * Fixed regression in batch mode due to :ticket:`883` where the "auto" mode of batch would fail to accommodate any additional migration directives beyond encountering an "add_column()" directive, due to a mis-application of the conditional logic that was added as part of this change, leading to "recreate" mode not being used in cases where it is required for SQLite such as for unique constraints. - changes from version 1.7.0: * Fixed regression due to :ticket:`803` where the ".info" and ".comment" attributes of "Table" would be lost inside of the :class:`.DropTableOp` class, which when "reversed" into a :class:`.CreateTableOp` would then have lost these elements. Pull request courtesy Nicolas CANIART. * Enhance "version_locations" parsing to handle paths containing spaces. The new configuration option "version_path_separator" specifies the character to use when splitting the "version_locations" string. The default for new configurations is "version_path_separator = os", which will use "os.pathsep" (e.g., ";" on Windows). * Alembic 1.7 now supports Python 3.6 and above; support for prior versions including Python 2.7 has been dropped. * Batch "auto" mode will now select for "recreate" if the "add_column()" operation is used on SQLite, and the column itself meets the criteria for SQLite where ADD COLUMN is not allowed, in this case a functional or parenthesized SQL expression or a "Computed" (i.e. generated) column. * Make the "python-dateutil" library an optional dependency. This library is only required if the "timezone" option is used in the Alembic configuration. An extra require named "tz" is available with "pip install alembic[tz]" to install it. * Re-implemented the "python-editor" dependency as a small internal function to avoid the need for external dependencies. * Named CHECK constraints are now supported by batch mode, and will automatically be part of the recreated table assuming they are named. They also can be explicitly dropped using "op.drop_constraint()". For "unnamed" CHECK constraints, these are still skipped as they cannot be distinguished from the CHECK constraints that are generated by the "Boolean" and "Enum" datatypes. Note that this change may require adjustments to migrations that drop or rename columns which feature an associated named check constraint, such that an additional "op.drop_constraint()" directive should be added for that named constraint as there will no longer be an associated column for it; for the "Boolean" and "Enum" datatypes, an "existing_type" keyword may be passed to "BatchOperations.drop_constraint" as well. * The dependency on "pkg_resources" which is part of "setuptools" has been removed, so there is no longer any runtime dependency on "setuptools". The functionality has been replaced with "importlib.metadata" and "importlib.resources" which are both part of Python std.lib, or via pypy dependency "importlib-metadata" for Python version < 3.8 and "importlib-resources" for Python version < 3.9 (while importlib.resources was added to Python in 3.7, it did not include the "files" API until 3.9). * Created a "test suite" similar to the one for SQLAlchemy, allowing developers of third-party dialects to test their code against a set of Alembic tests that have been specially selected to exercise back-end database operations. At the time of release, third-party dialects that have adopted the Alembic test suite to verify compatibility include `CockroachDB `_ and `SAP ASE (Sybase) `_. * Fixed issue where usage of the PostgreSQL "postgresql_include" option within a :meth:`.Operations.create_index` would raise a KeyError, as the additional column(s) need to be added to the table object used by the construct internally. The issue is equivalent to the SQL Server issue fixed in :ticket:`513`. Pull request courtesy Steven Bronson. * pep-484 type annotations have been added throughout the library. Additionally, stub .pyi files have been added for the "dynamically" generated Alembic modules "alembic.op" and "alembic.config", which include complete function signatures and docstrings, so that the functions in these namespaces will have both IDE support (vscode, pycharm, etc) as well as support for typing tools like Mypy. The files themselves are statically generated from their source functions within the source tree. ==== python-apipkg ==== Version update (1.5 -> 2.1.0) - Update to v2.1.0 * fix race condition for import of modules using apipkg.initpkg in Python 3.3+ by updating existing modules in-place rather than replacing in sys.modules with an apipkg.ApiModule instances. This race condition exists for import statements (and __import__) in Python 3.3+ where sys.modules is checked before obtaining an import lock, and for importlib.import_module in Python 3.11+ for the same reason. - Release 2.0.1 * fix race conditions for attribute creation - Release 2.0.0 * also transfer __spec__ attribute * make py.test hack more specific to avoid hiding real errors * switch from Travis CI to GitHub Actions * modernize package build * reformat code with black - Drop pytest4.patch ==== python-greenlet ==== Version update (1.1.0 -> 1.1.2) - update to 1.1.2: - Fix a potential crash due to a reference counting error when Python subclasses of ``greenlet.greenlet`` were deallocated. The crash became more common on Python 3.10; on earlier versions, silent memory corruption could result. - Fix a leak of a list object when the last reference to a greenlet was deleted from some other thread than the one to which it belonged. For this to work correctly, you must call a greenlet API like ``getcurrent()`` before the thread owning the greenlet exits: this is a long-standing limitation that can also lead to the leak of a thread's main greenlet if not called; we hope to lift this limitation. Note that in some cases this may also fix leaks of greenlet objects themselves. See `issue 251 - Python 3.10: Tracing or profiling into a spawned greenlet didn't work as expected. See `issue 256 ==== python-idna ==== Version update (3.2 -> 3.3) - update to 3.3: - Update to Unicode 14.0.0 - Update to in-line type annotations - Throw IDNAError exception correctly for some malformed input - Advertise support for Python 3.10 - Improve testing regime on Github - Fix Russian typo in documentation ==== python-more-itertools ==== Version update (8.8.0 -> 8.10.0) - update to 8.10.0: * The type stub for :func:`iter_except` was improved (thanks to MarcinKonowalczyk) * Type stubs now ship with the source release (thanks to saaketp) * The Sphinx docs were improved (thanks to MarcinKonowalczyk) * New functions * :func:`interleave_evenly` (thanks to mbugert) * :func:`repeat_each` (thanks to FinalSh4re) * :func:`chunked_even` (thanks to valtron) * :func:`map_if` (thanks to sassbalint) * :func:`zip_broadcast` (thanks to kalekundert) * Changes to existing functions * The type stub for :func:`chunked` was improved (thanks to PhilMacKay) * The type stubs for :func:`zip_equal` and `zip_offset` were improved (thanks to maffoo) * Building Sphinx docs locally was improved (thanks to MarcinKonowalczyk) ==== python-pyrsistent ==== Version update (0.17.3 -> 0.18.0) - update to 0.18.0: * Fix #209 Update freeze recurse into pyrsistent data structures and thaw to recurse into lists and dicts * Fix #226, stop using deprecated exception.message. * Fix #211, add union operator to persistent maps. * Fix #194, declare build dependencies through pyproject.toml. * Officially drop Python 3.5 support. * Fix #223, release wheels for all major platforms. * Fix #221, KeyError obscured by TypeError if key is a tuple. * Fix LICENSE file name spelling. * Fix #216, add abstractmethod decorator for CheckedType and ABCMeta for _CheckedTypeMeta. * Fix #228, rename example classes in tests to avoid name clashes with pytest. ==== python-pytz ==== Version update (2021.1 -> 2021.3) - update to 2021.3 * matches tzdata 2021c ==== python-zipp ==== Version update (3.5.0 -> 3.6.0) - update to 3.6.0: * Only ``Path`` is exposed in the public API. * Remove news file intended only for CPython. ==== qemu ==== - Stable fixes from upstream * Patches added: block-introduce-max_hw_iov-for-use-in-sc.patch hmp-Unbreak-change-vnc.patch qemu-nbd-Change-default-cache-mode-to-wr.patch target-arm-Don-t-skip-M-profile-reset-en.patch vhost-vsock-fix-migration-issue-when-seq.patch virtio-mem-pci-Fix-memory-leak-when-crea.patch virtio-net-fix-use-after-unmap-free-for-.patch ==== systemd ==== Version update (249.4 -> 249.5) Subpackages: libsystemd0 libudev1 systemd-sysvinit udev - Import commit 8521f8d22fd44400289fcea03493ebd7f8b1487d (merge of v249.5) For a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/355e113ce193e5e2d195278c57d47f9a1b00ae46...8521f8d22fd44400289fcea03493ebd7f8b1487d - Import commit 355e113ce193e5e2d195278c57d47f9a1b00ae46 3b4a005095 meson: add missing include directory when using xkbcommon 4c4e642712 meson: allow extra net naming schemes to be defined during configuration (jsc#SLE-18514) 78466e4464 meson: drop the list of valid net naming schemes b9a2098f9d netif-naming: inline one iterator variable d7fbbc5e74 Add remaining supported schemes as options for default-net-naming-scheme - Rename %{gnu-efi} into %{sd_boot} Build conditionals (%bcond_with and %bcond_without) are used to define a specific feature of systemd. "gnu-efi" is rather an implemenation detail. Also not really sure what "efi" option alone is useful for since systemd-boot & co depends on "gnu-efi". - Enable sd_boot support for aarch64 - Ghost own directories /var/log/journal and /var/log/journal/remote again rpmlint no more complain about the setgid bit, see sr#923496. - Overwriting rootprefix= is only required when split-usr is enabled - Rename %usrmerged into %split_usr - Suppress PAM warning when the credentials for user@.service service are established (bsc#1190515) systemd-user PAM service needs to define a default implementation of pam_setcred() otherwise the fallback (defined by /etc/pam.d/other) is used, which consists of pam_warn.so + pam_deny.so, and will throw a warning each time a user logs in. - No need to install upstream pam configuration file "systemd-user" It's overwritten by the SUSE version anyway. ==== timezone ==== Version update (2021c -> 2021d) - timezone update 2021d: * Fiji suspends DST for the 2021/2022 season * 'zic -r' marks unspecified timestamps with "-00" ==== wireless-regdb ==== Version update (20210421 -> 20210828) - Update to version 20210828: * wireless-regdb: update regulatory database based on preceding changes * Update regulatory rules for Ecuador (EC) * wireless-regdb: Update regulatory rules for Norway (NO) on 6 and 60 GHz * wireless-regdb: Update regulatory rules for Germany (DE) on 6GHz * wireless-regdb: update regulatory database based on preceding changes * wireless-regdb: reduce bandwidth for 5730-5850 and 5850-5895 MHz in US * wireless-regdb: remove PTMP-ONLY from 5850-5895 MHz for US * wireless-regdb: recent FCC report and order allows 5850-5895 immediately * wireless-regdb: update 5725-5850 MHz rule for GB ==== xkeyboard-config ==== Version update (2.33 -> 2.34) - update to version 2.34 * xml2lst: use dynamic Perl path * Resolved 101key Old Hungarian II * Old turkish f layout (with pc104 support) added. * Fix wrong key symbol name * Added International Phonetic Alphabet (QWERTY) * gitlab CI: update to latest ci-templates * Hellenic keyboard perfected. * lt: Place sterling symbol on AD03, layer 4 (with E and euro) * Use single guillemots on L4 (not less/greater) where L3 has guillemots * Added English (Dvorak, Macintosh) based on the MacOS dvorak layout * Accommodate uppercase/lowercase ß, long s, §; deduplicate ? * Move left/right quotes one key to the right, place lower quotes on AB04 * Update symbols/it adding credits and reference for fur lang * lt/us: Inherit AE09/AE10 from latin * Add Russian GOST layouts * Add Polish(lefty) layout * Add Arabic(Ergoarabic) keyboard layout * translation sync * Hebrew translation added ==== zypper ==== Version update (1.14.49 -> 1.14.50) Subpackages: zypper-needs-restarting - Fix compiler warning. - zypper.conf: New option whether to collect subcommands found in $PATH (fixes #379) +[subcommand] i + +## Whether to look for subcommands in $PATH +## +## If a subcommand is not found in the zypper_execdir, the wrapper +## will look in the rest of your $PATH for it. Thus, it's possible +## to write local zypper extensions that don't live in system space. +## See section SUBCOMMANDS in the zypper manpage. +## +## Valid values: boolean +## Default value: yes +## +# seachSubcommandInPath = yes. - help subcommand: show path of command found in $PATH. - version 1.14.50