Packages changed: audit-secondary bash bluez (5.63 -> 5.64) dnf (4.10.0 -> 4.11.1) file gnome-terminal (3.43.90 -> 3.44.0) gstreamer-plugins-bad gstreamer-plugins-base ibus (1.5.25 -> 1.5.26) inih (53 -> 55) iproute2 (5.16 -> 5.17) kernel-source (5.16.15 -> 5.17.1) libdnf (0.65.0 -> 0.66.0) mozilla-nss polkit-default-privs (1550+20220303.95a78fb -> 1550+20220325.163dbdf) python-MarkupSafe (2.0.1 -> 2.1.1) python-alembic (1.7.6 -> 1.7.7) python-cryptography (36.0.1 -> 36.0.2) srt (1.4.3 -> 1.4.4) vte (0.67.90 -> 0.68.0) wireless-regdb (20220218 -> 20220324) xdg-desktop-portal xdg-desktop-portal-gtk (1.12.0 -> 1.14.0) === Details === ==== audit-secondary ==== Subpackages: audit python3-audit system-group-audit - Fix buildrequire for openldap2-devel - audit doesn't require the (outdated) C++ binding, but the C headers that happen to be pulled in by buildrequiring the C++ devel package - Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645) * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch - Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517) * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch - add audit-userspace-517-compat.patch ==== bash ==== Subpackages: bash-sh - Do use old legacy PreReq to get bash installed before bash-sh but do not require bash-sh by bash (bsc#1197448) ==== bluez ==== Version update (5.63 -> 5.64) Subpackages: bluez-cups libbluetooth3 - update to version 5.64: This is another release mostly with bug fixes on HOG, GATT, A2DP, Media, AVDTP, AVRCP, and scanning failure. This release includes a fix for building with old glibc (< 2.25) and other minor issues found with the static code analyzing tool. ISO packet support is added to the emulator as a part of LE Audio development. - removed obsoleted 0002-Use-g_memdup2-everywhere.patch ==== dnf ==== Version update (4.10.0 -> 4.11.1) - Update to 4.11.1 + Allow destdir option with modulesync command + Add documentation for query api flags (rh#2035577) + Fix swap command to work with local rpm files correctly (rh#2036434) + Fix regression in verifying signatures using rpmkeys + Use rpm.TransactionSet.dbCookie() to determining if rpmdb has changed (rh#2043476) + Fix decompression of groups.xml (rh#2030255) + Fix history undo on a Reason Change (rh#2010259, rh#2053014) + Remove /usr/bin from sys.path to avoid accidentally importing garbage + Fix: Python dnf API does not respect cacheonly (rh#1862970) + Fix python3.11 build: remove deprecated, update traceback regex + fix dnf mark error when history sqlite missing + [doc] Improve description of multilib_policy=all (rh#1996681, rh#1995630) + [doc] clarify effect of --enablerepo and --disablerepo options (rh#2031414) + [doc] default values for module_obsoletes and module_stream_switch (rh#2051846) - Add Fix-processing-of-download-errors.patch backported from upstream * Fix dnf incorrectly aborting on non-English systems when packages already cached (rh#2024527) ==== file ==== Subpackages: file-magic libmagic1 - add file-5.41-cache-regexps-locale-restore.patch to restore previous locale handling behavior - add file-5.41-cache-regexps.patch to cache regexp lookups ==== gnome-terminal ==== Version update (3.43.90 -> 3.44.0) Subpackages: nautilus-extension-terminal - Update to version 3.44.0: + all: Insert text as paste. + Updated translations. ==== gstreamer-plugins-bad ==== Subpackages: libgstphotography-1_0-0 libgstplay-1_0-0 libgstplayer-1_0-0 - Add 8440e2a373e5ce681d15f5880cb2f2562be332cf.patch: nvh264dec,nvh265dec: Fix broken key-unit trick and reverse playback. - Quiet setup, we do not need to see the unpacking of the tarball. ==== gstreamer-plugins-base ==== Subpackages: libgstallocators-1_0-0 libgstapp-1_0-0 libgstaudio-1_0-0 libgstfft-1_0-0 libgstgl-1_0-0 libgstpbutils-1_0-0 libgstriff-1_0-0 libgsttag-1_0-0 libgstvideo-1_0-0 - Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink: Complete reconfiguration on pad release. - Use ldconfig_scriptlets macro for post(un) handling. ==== ibus ==== Version update (1.5.25 -> 1.5.26) Subpackages: libibus-1_0-5 typelib-1_0-IBus-1_0 - Update version to 1.5.26 * Enhance compose keys * Enhance Emoji features * Implement clear preedit for GTK4 * Calculate keycode from keysym in GTK3 forward-key-event * Fix to send char position at update_preedit_text * Deprecate gettext.bind_textdomain_codeset() since Python 3.8 * Fix ibus_key_event_from_string for gobject-introspection * Fix a key event loop with forwarding keys * Delete gnome-autogen dependency * Change XKB layout string color in panel * Add IBUS_INPUT_HINT_PRIVATE for browser private mode * mkdir socket dirs instead of socket paths * Add org.freedesktop.IBus.session.generic.service * Check XDG_SESSION_DESKTOP for Plasma desktop * Update simple.xml with xkeyboard-config 2.35.1 * Update ibusunicodegen.h with unicode-ucd 14.0.0 * Enhance CI * Fix typos * Fix wrong cursor location in gtk3 apps * Update URLS * invalidate cache based on symlink mtime too * Fix unref problems with floating references * Update man page for Emoji shortcut key * Add systemd unit file * Fix forward key keycode for GTK4 - Drop ibus-fix-wrong-cursor-location.patch, merged by upstream ==== inih ==== Version update (53 -> 55) - Update to version 55 * Include proper version in installed pkgconfig files. - Update to version 54 * Improve quality of shared objects by explicitly defining symbol visibility. ==== iproute2 ==== Version update (5.16 -> 5.17) - update to 5.17: * lib/fs: fix memory leak in get_task_name() * bridge: Remove vlan listing from `bridge link` * bond: add arp_missed_max option * libnetlink: fix socket leak in rtnl_open_byproto() * dcb: Fix error reporting when accessing "dcb app" * tc_util: Fix parsing action control with space and slash * lib: fix ax25.h include for musl * uapi: add missing rose and ax25 files * rdma: Fix res_print_uint() and add res_print_u64() * tc: Add support for ce_threshold_value/mask in fq_codel - Add tmpfiles.d conf for /run/netns ==== kernel-source ==== Version update (5.16.15 -> 5.17.1) - Revert "config: Enable BPF LSM" (bsc#1197746) This reverts commit c2c25b18721866d6211054f542987036ed6e0a50. - commit 58205bc - Revert "swiotlb: rework "fix info leak with DMA_FROM_DEVICE"" (bsc#1197460). - commit ffd9dce - block: restore the old set_task_ioprio() behaviour wrt PF_EXITING (bsc#1197582). - commit c349fed - Linux 5.17.1 (bsc#1012628). - llc: only change llc->dev when bind() succeeds (bsc#1012628). - drm/msm/gpu: Fix crash on devices without devfreq support (v2) (bsc#1012628). - nds32: fix access_ok() checks in get/put_user (bsc#1012628). - m68k: fix access_ok for coldfire (bsc#1012628). - wcn36xx: Differentiate wcn3660 from wcn3620 (bsc#1012628). - tpm: use try_get_ops() in tpm-space.c (bsc#1012628). - tpm: fix reference counting for struct tpm_chip (bsc#1012628). - mac80211: fix potential double free on mesh join (bsc#1012628). - uaccess: fix integer overflow on access_ok() (bsc#1012628). - rcu: Don't deboost before reporting expedited quiescent state (bsc#1012628). - jbd2: fix use-after-free of transaction_t race (bsc#1012628). - drm/virtio: Ensure that objs is not NULL in virtio_gpu_array_put_free() (bsc#1012628). - Revert "ath: add support for special 0x0 regulatory domain" (bsc#1012628). - Bluetooth: btusb: Use quirk to skip HCI_FLT_CLEAR_ALL on fake CSR controllers (bsc#1012628). - Bluetooth: hci_sync: Add a new quirk to skip HCI_FLT_CLEAR_ALL (bsc#1012628). - Bluetooth: btusb: Add one more Bluetooth part for the Realtek RTL8852AE (bsc#1012628). - crypto: qat - disable registration of algorithms (bsc#1012628). - ACPI: video: Force backlight native for Clevo NL5xRU and NL5xNU (bsc#1012628). - ACPI: battery: Add device HID and quirk for Microsoft Surface Go 3 (bsc#1012628). - ACPI / x86: Work around broken XSDT on Advantech DAC-BJ01 board (bsc#1012628). - netfilter: nf_tables: validate registers coming from userspace (bsc#1012628). - netfilter: nf_tables: initialize registers in nft_do_chain() (bsc#1012628). - drivers: net: xgene: Fix regression in CRC stripping (bsc#1012628). - ALSA: pci: fix reading of swapped values from pcmreg in AC97 codec (bsc#1012628). - ALSA: cmipci: Restore aux vol on suspend/resume (bsc#1012628). - ALSA: usb-audio: Add mute TLV for playback volumes on RODE NT-USB (bsc#1012628). - ALSA: pcm: Add stream lock during PCM reset ioctl operations (bsc#1012628). - ALSA: pcm: Fix races among concurrent prealloc proc writes (bsc#1012628). - ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls (bsc#1012628). - ALSA: pcm: Fix races among concurrent read/write and buffer changes (bsc#1012628). - ALSA: pcm: Fix races among concurrent hw_params and hw_free calls (bsc#1012628). - ALSA: hda/realtek: Add quirk for ASUS GA402 (bsc#1012628). - ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671 (bsc#1012628). - ALSA: hda/realtek: Add quirk for Clevo NP50PNJ (bsc#1012628). - ALSA: hda/realtek: Add quirk for Clevo NP70PNJ (bsc#1012628). - ALSA: usb-audio: add mapping for new Corsair Virtuoso SE (bsc#1012628). - ALSA: oss: Fix PCM OSS buffer allocation overflow (bsc#1012628). - ASoC: sti: Fix deadlock via snd_pcm_stop_xrun() call (bsc#1012628). - llc: fix netdevice reference leaks in llc_ui_bind() (bsc#1012628). - Bluetooth: btusb: Add another Realtek 8761BU (bsc#1012628). - tpm: Fix error handling in async work (bsc#1012628). - commit e830013 - series.conf: cleanup - update mainline references and move into sorted section: - patches.suse/Bluetooth-btusb-Add-missing-Chicony-device-for-Realt.patch - patches.suse/bpf-add-config-to-allow-loading-modules-with-BTF-mis.patch - commit 62d2682 - Revert "Input: clear BTN_RIGHT/MIDDLE on buttonpads" (bsc#1197243). - commit 7257225 - Drop HID multitouch fix patch (bsc#1197243) Delete patches.suse/HID-multitouch-fix-Dell-Precision-7550-and-7750-butt.patch. Replaced with another revert patch. - commit 01821ca - rpm/constraints.in: skip SLOW_DISK workers for kernel-source - commit e84694f - Revert "rpm/macros.kernel-source: avoid %if's and %define's" This reverts commit d0cec50d019c853336e26f5ff5df5a4c9c3ea120. - commit b20736a - macros.kernel-source: Fix conditional expansion. Fixes: bb95fef3cf19 ("rpm: Use bash for %() expansion (jsc#SLE-18234).") - commit 7e857f7 - rpm/macros.kernel-source: avoid %if's and %define's It's not supported in rpm macros scripts. So for now, resolve %kernel_build_shell_package to bash-sh in stable branch unconditionally. When this is fixed in the packaging branch, revert this. - commit d0cec50 - Refresh patches.suse/Bluetooth-btusb-Add-missing-Chicony-device-for-Realt.patch. Update upstream status. - commit 36a1351 - Update to 5.17 final - refresh configs (headers only) - commit be2cbd1 - rpm: Use bash for %() expansion (jsc#SLE-18234). Since 15.4 alternatives for /bin/sh are provided by packages -sh. While the interpreter for the build script can be selected the interpreter for %() cannot. The kernel spec files use bashisms in %(). While this could technically be fixed there is more serious underlying problem: neither bash nor any of the alternatives are 100% POSIX compliant nor bug-free. It is not my intent to maintain bug compatibility with any number of shells for shell scripts embedded in the kernel spec file. The spec file syntax is not documented so embedding the shell script in it causes some unspecified transformation to be applied to it. That means that ultimately any changes must be tested by building the kernel, n times if n shells are supported. To reduce maintenance effort require that bash is used for kernel build always. - commit bb95fef - Linux 5.16.16 (bsc#1012628). - ice: Fix race condition during interface enslave (bsc#1012628). - kselftest/vm: fix tests build with old libc (bsc#1012628). - bnx2: Fix an error message (bsc#1012628). - sfc: extend the locking on mcdi->seqno (bsc#1012628). - tcp: make tcp_read_sock() more robust (bsc#1012628). - nl80211: Update bss channel on channel switch for P2P_CLIENT (bsc#1012628). - drm/vrr: Set VRR capable prop only if it is attached to connector (bsc#1012628). - iwlwifi: don't advertise TWT support (bsc#1012628). - Input: goodix - workaround Cherry Trail devices with a bogus ACPI Interrupt() resource (bsc#1012628). - Input: goodix - use the new soc_intel_is_byt() helper (bsc#1012628). - netfilter: egress: silence egress hook lockdep splats (bsc#1012628). - atm: firestream: check the return value of ioremap() in fs_init() (bsc#1012628). - can: rcar_canfd: rcar_canfd_channel_probe(): register the CAN device when fully ready (bsc#1012628). - Bluetooth: hci_core: Fix leaking sent_cmd skb (bsc#1012628). - ARM: 9178/1: fix unmet dependency on BITREVERSE for HAVE_ARCH_BITREVERSE (bsc#1012628). - MIPS: smp: fill in sibling and core maps earlier (bsc#1012628). - mac80211: refuse aggregations sessions before authorized (bsc#1012628). - ARM: dts: rockchip: fix a typo on rk3288 crypto-controller (bsc#1012628). - ARM: dts: rockchip: reorder rk322x hmdi clocks (bsc#1012628). - arm64: dts: agilex: use the compatible "intel,socfpga-agilex-hsotg" (bsc#1012628). - arm64: dts: rockchip: reorder rk3399 hdmi clocks (bsc#1012628). - arm64: dts: rockchip: align pl330 node name with dtschema (bsc#1012628). - arm64: dts: rockchip: fix rk3399-puma eMMC HS400 signal integrity (bsc#1012628). - xfrm: Fix xfrm migrate issues when address family changes (bsc#1012628). - xfrm: Check if_id in xfrm_migrate (bsc#1012628). - arm64: dts: rockchip: fix rk3399-puma-haikou USB OTG mode (bsc#1012628). - arm64: dts: rockchip: fix dma-controller node names on rk356x (bsc#1012628). - Revert "xfrm: state and policy should fail if XFRMA_IF_ID 0" (bsc#1012628). - commit d9656de - HID: multitouch: fix Dell Precision 7550 and 7750 button type (bsc#1197243). - commit 5500e44 - Disable 5.16.10-026-NFSv4.1-query-for-fs_location-attr-on-a-new-f.patch (boo#1196521) This patch causes a regression and probably should not have been backported to stable anyway. Disable it. Links to upstream discussions in the bug. - commit 40a4b1d ==== libdnf ==== Version update (0.65.0 -> 0.66.0) Subpackages: libdnf-repo-config-zypp libdnf2 - Update to 0.66.0 + Use `rpmdbCookie` from librpm, remove `hawkey.Sack._rpmdb_version` + Fix handling transaction id in resolveTransactionItemReason (rh#2010259, rh#2053014) + Remove deprecated assertions (rh#2027383) + Increase required rpm version since we use `rpmdbCookie()` + Skip rich deps for autodetection of unmet dependencies (rh#2033130) - Use ldconfig_scriptlets macro for ldconfig scriptlets ==== mozilla-nss ==== Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs - Add nss-util pkgconfig and config files (copied from RH/Fedora) ==== polkit-default-privs ==== Version update (1550+20220303.95a78fb -> 1550+20220325.163dbdf) - Update to version 1550+20220325.163dbdf: * whitelisting: add usbguard actions (bsc#1196621) - Update to version 1550+20220324.7f46822: * Fix generation of file /etc/polkit-1/rules.d/90-default-privs.rules ==== python-MarkupSafe ==== Version update (2.0.1 -> 2.1.1) - specfile: * update copyright year * require python >= 3.7 - update to version 2.1.1: * Avoid ambiguous regex matches in "striptags". :pr:`293` - changes from version 2.1.0: * Drop support for Python 3.6. :pr:`262` * Remove "soft_unicode", which was previously deprecated. Use "soft_str" instead. :pr:`261` * Raise error on missing single placeholder during string interpolation. :issue:`225` * Disable speedups module for GraalPython. :issue:`277` ==== python-alembic ==== Version update (1.7.6 -> 1.7.7) - update to 1.7.7: * Fixed issue where using :meth:`.Operations.create_table` in conjunction with a :class:`.CheckConstraint` that referred to table-bound :class:`.Column` objects rather than string expressions would be added to the parent table potentially multiple times, resulting in an incorrect DDL sequence. Pull request courtesy Nicolas CANIART. * The ``logging.fileConfig()`` line in ``env.py`` templates, which is used to setup Python logging for the migration run, is now conditional on :attr:`.Config.config_file_name` not being ``None``. Otherwise, the line is skipped as there is no default logging configuration present. * Fixed bug where an :meth:`.Operations.alter_column` operation would change a "NOT NULL" column to "NULL" by emitting an ALTER COLUMN statement that did not specify "NOT NULL". (In the absence of "NOT NULL" T-SQL was implicitly assuming "NULL"). An :meth:`.Operations.alter_column` operation that specifies :paramref:`.Operations.alter_column.type` should also specify include either :paramref:`.Operations.alter_column.nullable` or :paramref:`.Operations.alter_column.existing_nullable` to inform Alembic as to whether the emitted DDL should include "NULL" or "NOT NULL"; a warning is now emitted if this is missing under this scenario. ==== python-cryptography ==== Version update (36.0.1 -> 36.0.2) - update to 36.0.2: * Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 1.1.1n. ==== srt ==== Version update (1.4.3 -> 1.4.4) - update to 1.4.4: * Monotonic/steady clock is enabled by default. * Changed the default value of SRTO_RETRANSMITALGO socket option to 1. This activates the efficient retransmission algorithm on the sender side which optimizes the bandwidth usage by producing fewer retransmissions per lost packet. The algorithm is available since v1.4.2. Intensive retransmission algorithm (the former default) can be activated by setting SRTO_RETRANSMITALGO=0. * Improved random integer retrieval, which is mainly used for initial socket ID and Initial Sequence Number (ISN) generation. * Improved clock drift compensation algorithm. RTT samples are now taken into account when estimating clock drift. * Improved round-trip time (RTT) estimation. On the receiver side, smoothed RTT (SRTT) is set to the first RTT measurement obtained from the first ACK/ACKACK pair. When a subsequent RTT measurement is made, an exponentially weighted moving average (EWMA) is used to update smoothed RTT. Before the very first RTT sample is available, SRTT is initialized as 100 ms or taken from the cache if one exists. * On the sender side, in the case of unidirectional transmission, the values of smoothed RTT and RTT variance are now extracted from ACK packets. In the case of bidirectional transmission, an EWMA is still applied to be consistent with the previous behavior. * Improved 'No room to store incoming packet' warning with additional hints to identify a possible reason. * Added support for atomic types. * Improved the logic of switching between main and backup links, extended the list of member link states as well as defined events resulting in state transition for Main/Backup mode of Connection Bonding. * Documented Main/Backup mode of Connection Bonding. See here. * Fixed group read-readiness update on the receiver side. * Added missing lock when checking for read-readiness of a group member and fixed the resulting crash. * Fixed base time and drift synchronization in a group, which caused insufficient packet loss recovery and end-to-end latency maintenance by a group receiver. * Fixed validation of the packet sequence number when reading from a group member, which was causing an incorrect decision to break a member connection. * Fixed crash on dereferencing null CryptoControl instance in handshake reply. * Placed some of the SRT classes under the 'srt' namespace. * Fixed possible incorrect outcome of cookie contest function (rendezvous connection mode) under certain compiler optimizations. * Fixed uninitialized destination socket ID in Shutdown control message. * Set CLOEXEC for epoll on Linux. * Added missing receiver buffer lock into CUDT::receiveBuffer(..) and CUDT::recvfile(..) functions. * Make sure TTL will not drop packets over the last block. * Fixed the value of the Last Packet Sequence Number field in Drop Request control message on TTL packet drop. * Fixed the content of the Drop Request control message. If a loss of packets already missing in the sender buffer was reported, the very first packet present in the sender buffer was incorrectly included in the range of packets to be dropped. * Fixed version rejection for handshake v4 caller (SRT prior to v1.3.0). * Fixed the crash when referencing a resource already freed in CRendezvousQueue class. * Fixed detection of reusable bindings and binding conflicts. * Updated SRTO_RETRANSMITALGO socket option description. ==== vte ==== Version update (0.67.90 -> 0.68.0) - Update to version 0.68.0: + spawn: Fix build without CLOSE_RANGE_CLOEXEC + Revert "emulation: Support XTVERSION sequence" ==== wireless-regdb ==== Version update (20220218 -> 20220324) - Update to version 20220324: * wireless-regdb: Update regulatory rules for Israel (IL) ==== xdg-desktop-portal ==== - Update /usr/bin/fusermount requires to /usr/bin/fusermount3: the code has been changed to call fusermount3 as part of version 1.14.0: document-portal: Move to the libfuse3 API (boo#1197567). ==== xdg-desktop-portal-gtk ==== Version update (1.12.0 -> 1.14.0) - Update to version 1.14.0: + Add an implementation of the dynamic launcher portal + notification: Fix activation of default action with target + Updated translations.