Packages changed:
NetworkManager (1.36.2 -> 1.36.4)
at-spi2-core (2.42.0 -> 2.44.0)
ceph (16.2.7.596+g7d574789716 -> 16.2.7.640+gceb23c7491b)
cyrus-sasl (2.1.27 -> 2.1.28)
gdk-pixbuf (2.42.6 -> 2.42.8)
glib-networking (2.70.1 -> 2.72.0)
glib2 (2.70.4 -> 2.70.5)
gobject-introspection (1.70.0 -> 1.72.0)
gsettings-desktop-schemas (41.0 -> 42.0)
libpeas (1.30.0 -> 1.32.0)
libxml2 (2.9.12 -> 2.9.13)
makedumpfile
nfs-utils
nghttp2 (1.46.0 -> 1.47.0)
rdma-core
vim (8.2.4542 -> 8.2.4602)
=== Details ===
==== NetworkManager ====
Version update (1.36.2 -> 1.36.4)
Subpackages: libnm0
- Update to version 1.36.4:
+ The internal DHCPv4 client now discards NAKs packets coming
from servers different from the one that sent the offer.
+ Fix activation of PPPoE connections with "pppoe.parent" unset.
+ Fix potential libnm crash when the client object initialization
gets canceled.
+ Other various fixes and improvements.
==== at-spi2-core ====
Version update (2.42.0 -> 2.44.0)
Subpackages: libatspi0
- Update to version 2.44.0:
+ Unlink the socket before binding when using dbus-broker. Fixes
regression introduced in 2.43.92 where restarting the bus
launcher would fail.
- Update to version 2.43.92:
+ The AT-SPI bus now uses the user's XDG_RUNTIME_DIR for its
socket. Fixes accessibility for Snap-confined applications.
+ Caps lock is now unlocked for key synthesis. Fixes cutting and
pasting from brltty when caps lock is on.
+ Several fixes to the dbus specification.
+ Fix the build when x11 is disabled.
+ Fix several compiler warnings.
- Use ldconfig_scriptlets macro for post(un) handling.
- Move autostart .desktop and xwayland-session config to
distconfdir.
==== ceph ====
Version update (16.2.7.596+g7d574789716 -> 16.2.7.640+gceb23c7491b)
Subpackages: ceph-common libcephfs2 librados2 librbd1 librgw2 python3-ceph-argparse python3-ceph-common python3-cephfs python3-rados python3-rbd python3-rgw
- Update to 16.2.7-640-gceb23c7491b
+ (bsc#1194875) common: fix FTBFS due to dout & need_dynamic on GCC-12
+ (bsc#1196938) cephadm: preserve authorized_keys file during upgrade
==== cyrus-sasl ====
Version update (2.1.27 -> 2.1.28)
Subpackages: cyrus-sasl-gssapi libsasl2-3
- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
* https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)
==== gdk-pixbuf ====
Version update (2.42.6 -> 2.42.8)
Subpackages: gdk-pixbuf-query-loaders libgdk_pixbuf-2_0-0
- Update to version 2.42.8:
+ Clear the pixbuf's memory buffer to avoid returning
uninitialized memory.
+ Turn GdkPixbufModule functions into typed callbacks.
+ tiff: Use non-deprecated C99 integer types.
+ gif: Check for overflow when compositing or clearing frames.
+ Change png/jpeg/tiff build options from boolean to feature.
+ jpeg: Do not rely on UB around setjmp/longjmp.
+ Build fixes.
+ Documentation fixes.
+ Updated translations.
- Stop passing options to meson that just follow upstream default,
just rely on upstream providing sane defaults, apart from where
we want to deviate.
==== glib-networking ====
Version update (2.70.1 -> 2.72.0)
- Update to version 2.72.0:
+ Fix proxy tests.
+ GnuTLS: use IANA-style ciphersuite names with GnuTLS 3.7.4.
+ meson devenv.
+ Updated translations.
- Update to version 2.72.beta:
+ Add environment variable proxy resolver.
+ OpenSSL: fix uninitialized memory use.
- Update to version 2.72.alpha:
+ OpenSSL:
- Fix unsafe error handling.
- Fail when appropriate if Must-Staple extension is set.
+ GnuTLS: fix TLS 1.3 ciphersuite names, should use underscores.
+ Improve failure of tls-unique channel binding requests.
+ Do not fill SNI extension with IP address.
==== glib2 ====
Version update (2.70.4 -> 2.70.5)
Subpackages: glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0
- Update to version 2.70.5:
+ g_time_zone_new_offset() assertion failure if offset >= 25
hours.
+ glib: fix buffer overflow in g_canonicalize_filename().
+ gtimezone: Fix assertion failure when called with a huge
offset.
+ Updated translations.
- Split gtk-docs from -devel package, these are not needed
during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
regarding the documentation - builds single-jobs only and
twice (again during %install). This way the rest of distribution
waiting for glib2-devel to be available is not blocked by this
==== gobject-introspection ====
Version update (1.70.0 -> 1.72.0)
Subpackages: girepository-1_0 libgirepository-1_0-1
- Update to version 1.72.0:
+ Add new utility API to libgirepository for bindings
implementing an argument cache.
+ Update the GIR data for GLib, GObject, GModule, and GIO.
- Update to version 1.71.0:
+ Create new API for libffi closures
+ Treat @-prefixed shlib paths as absolute on macOS
+ Add new `forever` scope
+ Build fixes with newer Meson
+ Improve regression test suite
+ Avoid a segfault when using an invalid GType
+ Build fixes on Windows when using g-i as a subproject
+ Warn about property name collisions
+ Add "strict" warnings to g-ir-scanner
+ Add the "emitter" annotation for signal emitters
+ Add a command line option to g-ir-scanner to specify the
compiler
+ Add new convenience API to libgirepository
+ Build fixes on Windows when using MSVC
+ Documentation fixes
+ Update the GIR data for GLib, GObject, and GIO
- Drop patches fixed upstream:
+ 7c1178069f1c58a05ec56a94ca6ba124215a947b.patch
+ effb1e09dee263cdac4ec593e8caf316e6f01fe2.patch
+ 827494d6415b696a98fa195cbd883b50cc893bfc.patch
==== gsettings-desktop-schemas ====
Version update (41.0 -> 42.0)
- Update to version 42.0:
+ Updated translations.
- Update to version 42.rc:
+ Updated translations.
- Update to version 42.beta:
+ Add setting to control privacy screen feature.
+ Updated translations.
- Update to version 42.alpha:
+ Add color scheme setting and high-contrast preference
+ Updated translations.
==== libpeas ====
Version update (1.30.0 -> 1.32.0)
- Update to version 1.32.0:
+ Icon licenses have been corrected.
+ Parallel build system operation fixes.
+ Various build warnings squashed.
+ Various GIR data that should not have been exported was
removed.
+ Use gi-docgen for documentation.
+ Updated translations.
- Drop patches fixed upstream:
+ a9d2ba590641d832dcf6b97184687b6eb424c00f.patch
+ dfc763c16c0ce66a180ccb13205f1ca9666278a8.patch
+ 2a976339f444d70f10949901a6ee2b1f8ccb24b6.patch
- Replace gtk-doc with pkgconfig(gi-docgen) BuildRequires following
upstream changes.
==== libxml2 ====
Version update (2.9.12 -> 2.9.13)
Subpackages: libxml2-2 libxml2-tools
- Build python bindings in a 2nd run, using multibuild: otherwise,
libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
to bootstrap.
- Update to version 2.9.13:
* Security fixes:
+ [CVE-2022-23308] Use-after-free of ID and IDREF attributes
(boo#1196490);
+ Several memory leaks and another issues.
* Many regressions fixes.
* Numerous bug fixes, including, among many others:
+ xmllint's --maxmem option should work as expected now;
+ xmllint now returns an error if arguments are missing.
* Numerous tests and code and fuzzing fixes and improvements.
* Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
https://download.gnome.org/sources/libxml2/2.9/\
libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
statement from spec file.
- Drop merged upstream patches:
libxml2-fix-lxml-corrupted-subtree-structures.patch;
libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.
==== makedumpfile ====
- makedumpfile-sadump-kaslr-fix-kaslr_offset-calculation.patch:
sadump, kaslr: fix failure of calculating kaslr_offset
(bsc#1196736).
==== nfs-utils ====
Subpackages: libnfsidmap1 nfs-client
- drop reenable-nfsv2.patch (poo#106679)
==== nghttp2 ====
Version update (1.46.0 -> 1.47.0)
- update to 1.47.0:
* see https://nghttp2.org/blog/2022/02/23/nghttp2-v1-47-0/
==== rdma-core ====
Subpackages: libefa1 libibverbs libibverbs1 libmlx4-1 libmlx5-1 librdmacm1
- util-Add-barriers-support-for-RISC-V.patch: Backport from upstream: Add
barriers support for RISC-V
==== vim ====
Version update (8.2.4542 -> 8.2.4602)
Subpackages: vim-data-common vim-small
- Updated to version 8.2.4602, fixes the following problems
* Vim9: "break" inside try/catch not handled correctly.
* Coverity warning for refactored tag search code.
* Coverity warnings for not using returned value.
* Duplicate #undef.
* The neXTaw GUI is old and does not work well.
* Script-local function is deleted when used in a funcref.
* Cannot build with Motif and editres. (Tony Mechelynck)
* When mapping <Esc> terminal codes are not recognized.
* In a :def function "put = expr" does not work.
* Linear tag search is a bit slow.
* Vim9: using null values not sufficiently tested.
* getmousepos() returns the wrong column. (Ernie Rael)
* Test fails without the +job or +channel feature. (Dominique Pellé)
* Confusing comment about 'cursorlineopt'.
* getmousepos() returns the screen column. (Ernie Rael)
* Suspending with CTRL-Z does not work on DragonFlyBSD.
* Build failure with some combination of features. (John Marriott)
* Linear tag search is not optimal.
* "z=" in Visual mode may go beyond the end of the line.
* Running test leaves file behind. (Dominique Pellé)
* No command line completion for :breakadd and :breakdel.
* Check for existing buffer in session file does not work for files in
the home directory.
* Bracketed paste doesn't work well in Visual linewise mode.
* getmousepos() does not compute the column below the last line.
* Coverity warning for not using a return value.
* No command line completion for :profile and :profdel.
* Not all gdb files are recognized.
* Vim9: return type "any" is sometimes changed to first returned type.
(Virginia Senioria)
* A nested function (closure) is compiled for debugging without context.
* Vim9: test for profiling fails.
* Vim9: error for comparing with null can be annoying.
* Message test is flaky. (Elimar Riesebieter)
* No warning when an autoload script for completion function has an error.
* Cannot use page-up and page-down in the command line completion popup menu.
* Vim9: incorrect error for shadowing variable.
* Null types not fully tested.
* Useless code handling a type declaration.
* Screendump test fails.
* Error for using autoload function in custom completion.
* Cannot use keypad page-up/down for completion menu.
* Vim9: no error for using lower case name for "func" argument. (Ernie Rael)
* Vim9: double free after unpacking a list.
* Mapping with key code after other matching mapping does not work.
* Cannot index the g: dictionary.
* Vim9: range type check has wrong offset.
* Cursor line not updated when a callback moves the cursor.
* Search continues after giving E1204.
* Unnecessary call to redraw_later().
* Need to write script to a file to be able to source them.
* X11: using --remote-wait may keep the CPU busy.
* Installing tutor binary may fail.
* LuaV_debug() not covered by tests.
* Profile completion test sometimes fails.
* GTK: get assertion errors when scrolling a split window.
* Vim9: not enough test coverage for executing :def function.