Packages changed: Mesa Mesa-drivers bind (9.18.7 -> 9.18.8) dnsmasq (2.86 -> 2.87) gedit (43.alpha -> 43.1) glib-networking gnome-packagekit (3.32.0 -> 43.0) gnome-shell (43.0 -> 43.1) gnome-shell-extensions (43.0 -> 43.1) gtksourceview4 (4.8.3 -> 4.8.4) irqbalance (1.9.1 -> 1.9.2) libpaper (1.2.2 -> 2.0.3) libsoup (3.2.1 -> 3.2.2) lvm2 lvm2-device-mapper mutter (43.0 -> 43.1) openexr texlive texlive-specs-n (2022.195.2.005svn61719 -> 2022.196.2.005svn61719) === Details === ==== Mesa ==== Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - Release 22.2.2 covers bugfixes for bsc#1197045,bsc#1197046,bsc#1200965,bsc#1202850 ==== Mesa-drivers ==== Subpackages: Mesa-dri Mesa-gallium Mesa-libva - Release 22.2.2 covers bugfixes for bsc#1197045,bsc#1197046,bsc#1200965,bsc#1202850 ==== bind ==== Version update (9.18.7 -> 9.18.8) - Update to bind release 9.18.8 New Features: * Support for parsing and validating the dohpath service parameter in SVCB records was added. * named now logs the supported cryptographic algorithms during startup and in the output of named -V. * The recursion not available and query (cache) '...' denied log messages were extended to include the name of the ACL that caused a given query to be denied. Bug Fixes: * An assertion failure was fixed in named that was caused by aborting the statistics channel connection while sending statistics data to the client. * Changing just the TSIG key names for primaries in catalog zones’ member zones was not effective. This has been fixed. Known Issues: * Upgrading from BIND 9.16.32, 9.18.6, or any older version may require a manual configuration change. The following configurations are affected: - type primary zones configured with dnssec-policy but without either allow-update or update-policy, - type secondary zones configured with dnssec-policy. In these cases please add inline-signing yes; to the individual zone configuration(s). Without applying this change, named will fail to start. For more details, see https://kb.isc.org/docs/dnssec-policy-requires-dynamic-dns-or-inline-signing * BIND 9.18 does not support dynamic update forwarding (see allow-update-forwarding) in conjuction with zone transfers over TLS (XoT). This obsoletes the following patch: * fix_documentation-Sphinx.patch ==== dnsmasq ==== Version update (2.86 -> 2.87) - update to 2.87 (bsc#1197872, CVE-2022-0934): * Allow arbitrary prefix lengths in --rev-server and - -domain=....,local * Replace --address=/#/..... functionality which got missed in the 2.86 domain search rewrite. * Add --nftset option, like --ipset but for the newer nftables. * Add --filter-A and --filter-AAAA options, to remove IPv4 or IPv6 addresses from DNS answers. * Fix crash doing netbooting when --port is set to zero to disable the DNS server. Thanks to Drexl Johannes for the bug report. * Generalise --dhcp-relay. Sending via broadcast/multicast is now supported for both IPv4 and IPv6 and the configuration syntax made easier (but backwards compatible). * Add snooping of IPv6 prefix-delegations to the DHCP-relay system. * Finesse parsing of --dhcp-remoteid and --dhcp-subscrid. To be treated as hex, the pattern must consist of only hex digits AND contain at least one ':'. Thanks to Bengt-Erik Sandstrom who tripped over a pattern consisting of a decimal number which was interpreted surprisingly. * Include client address in TFTP file-not-found error reports. Thanks to Stefan Rink for the initial patch, which has been re-worked by me (srk). All bugs mine. * Note in manpage the change in behaviour of -address. This behaviour actually changed in v2.86, but was undocumented there. From 2.86 on, (eg) --address=/example.com/1.2.3.4 ONLY applies to A queries. All other types of query will be sent upstream. Pre 2.86, that would catch the whole example.com domain and queries for other types would get a local NODATA answer. The pre-2.86 behaviour is still available, by configuring --address=/example.com/1.2.3.4 --local=/example.com/ * Fix problem with binding DHCP sockets to an individual interface. Despite the fact that the system call tales the interface _name_ as a parameter, it actually, binds the socket to interface _index_. Deleting the interface and creating a new one with the same name leaves the socket bound to the old index. (Creating new sockets always allocates a fresh index, they are not reused). We now take this behaviour into account and keep up with changing indexes. * Add --conf-script configuration option. * Enhance --domain to accept, for instance, - -domain=net2.thekelleys.org.uk,eth2 so that hosts get a domain which relects the interface they are attached to in a way which doesn't require hard-coding addresses. Thanks to Sten Spans for the idea. * Fix write-after-free error in DHCPv6 server code. CVE-2022-0934 refers. * Add the ability to specify destination port in DHCP-relay mode. This change also removes a previous bug where --dhcp-alternate-port would affect the port used to relay _to_ as well as the port being listened on. The new feature allows configuration to provide bug-for-bug compatibility, if required. Thanks to Damian Kaczkowski for the feature suggestion. * Bound the value of UDP packet size in the EDNS0 header of forwarded queries to the configured or default value of edns-packet-max. There's no point letting a client set a larger value if we're unable to return the answer. Thanks to Bertie Taylor for pointing out the problem and supplying the patch. - drop dnsmasq-CVE-2022-0934.patch, dnsmasq-resolv-conf.patch (upstream) ==== gedit ==== Version update (43.alpha -> 43.1) Subpackages: python3-gedit - Update to version 43.1: + Be able to build with Meson >= 0.61 + AppData fix + Add some BuildStream element files in build-aux/buildstream/ - Add api_ver define and set it to 3.38 - Update to version 43.0: + Come back to the source code of gedit 40.0 and continue again from there. It is based on the Tepl and Amtk libraries. The single Open button is again split in two with a drop-down menu for recent files. + Workaround for bug: text cut off at the bottom in certain situations. + Change app name from "Text Editor" back to "gedit". + AppData: some updates, take a new screenshot. + Remove gitlab-ci. + Remove outdated build-aux/osx/ directory (several MB). + Flatpak: generate JSON manifest from YAML manifest. + File browser plugin: more robust check if Nautilus GSettings can be used, even if the key doesn't exist anymore. + Rework the I/O error info bars. + Handle application/x-zerosize mimetype. + Small code maintenance. + Documentation updates. + Updated translations. - Rebase gedit-desktop.patch with quilt. - Add pkgconfig(amtk-5) and pkgconfig(tepl-6) BuildRequires: New dependencies. ==== glib-networking ==== - Fix build with gnutls 3.7.8: * tests: skip tls-exporter test for TLS 1.2 * https://gitlab.gnome.org/GNOME/glib-networking/-/issues/201 * Add glib-networking-gnutls-tls-exporter-tls12.patch ==== gnome-packagekit ==== Version update (3.32.0 -> 43.0) - Update to version 43.0: + Add icon for critical updates. + Fix smallscreen support. + Add back logout support. + Automatically remove unused dependencies by default. - Add explicit pkgconfig(gio-2.0) BuildRequires, as meson checks for it. - Drop desktop-file-utils and gnome-menus-devel BuildRequires, no longer needed. - Drop patches fixed upstream: + gnome-packagekit-displaysize.patch + gnome-packagekit-bring-back-logout-support.patch + gnome-packagekit-define-HAVE_SYSTEMD.patch + gnome-packagekit-drop-NEWEST-on-get-updates.patch - Rebase patches with quilt. ==== gnome-shell ==== Version update (43.0 -> 43.1) Subpackages: gnome-extensions gnome-shell-calendar - Update to version 43.1: + Fix default keyboard layout during initial setup. + Show Bluetooth switch in more cases. + Include origin in sound device switcher. + Fix remembering inhibit-shortcut permission for multiple apps. + Forward TERMINAL input purpose to ibus. + Fix style glitches. + Fix tracking of newly installed apps. + Fix space key getting stuck in on-screen keyboard. + Fix showing passwords as on-screen keyboard suggestions. + Fix network portal regression. + Fix possible freeze during initialization. + Misc. bug fixes and cleanups. + Updated translations. ==== gnome-shell-extensions ==== Version update (43.0 -> 43.1) Subpackages: gnome-shell-classic gnome-shell-extensions-common - Update to version 43.1: + Fixed crash. + Misc. bug fixes and cleanups. + Updated translations. ==== gtksourceview4 ==== Version update (4.8.3 -> 4.8.4) Subpackages: libgtksourceview-4-0 typelib-1_0-GtkSource-4 - Update to version 4.8.4: + Style updates to kate, classic, tango. + Language updates to vala, python3, c, cuda, latex. + Add unit tests for language specs. + Updated translations. ==== irqbalance ==== Version update (1.9.1 -> 1.9.2) Subpackages: irqbalance-ui - update to 1.9.2: * avoid coredump on build_one_dev_entry() * avoid double free on deinit_thermal() * change the log level in thermal.c * fix a minor typo - drop Avoid-double-free-on-deinit_thermal.patch, uninitialized.patch: (upstream) ==== libpaper ==== Version update (1.2.2 -> 2.0.3) Subpackages: libpaper-tools - Update to 2.0.3: * avoid error in paperconfig * paperinit: fix a space leak in case of error parsing paperspecs * paper.c: make unit_list const char *, to fix a warning * paper.c: fix a trivial leak * fix segfault when HOME is unset (thanks, Werner Fink) * fix a segfault in systempapername() (fix from Werner Fink, thanks!) * hardwire papersize configuration filename to ‘papersize’ - Remove upstreamed libpaper-foul.patch ==== libsoup ==== Version update (3.2.1 -> 3.2.2) Subpackages: libsoup-3_0-0 typelib-1_0-Soup-3_0 - Update to version 3.2.2: + Various HTTP/2 Fixes: - Fix `content-sniffed` not being emitted for resources without content. - Fix leak of SoupServerConnection when stolen. - Enable tests on 32-bit again, fixed upstream. ==== lvm2 ==== Subpackages: liblvm2cmd2_03 - killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216) - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch ==== lvm2-device-mapper ==== Subpackages: device-mapper libdevmapper-event1_03 libdevmapper1_03 - killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216) - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch ==== mutter ==== Version update (43.0 -> 43.1) - Update to version 43.1: + Add quirk to work around issue with Mali GPUs. + Notify changes to night-light support over D-Bus. + Fix always-on-top windows unexpectedly taking focus. + Fix accidental direct scanout. + Disable client modifiers with amdgpu driver. + Cancel pointer gesture on wl_pointer.leave. + Add black padding to fixed-size wayland fullscreen windows. + Stop sending frame callbacks to minimized clients. + Fix scrolling in clients with no hi-res scroll support in RDP. + Fix skipped low-res scroll events with some high-res mice. + Throttle interactive move and resize updates. + wayland-keyboard: Send pressed keys on enter. + Fix some X11 windows getting unredirected erroneously. + Fix Flatpak applications bypassing X11 permission. + Fix always visible cursor in virtual streams. + Fixed crashes. + Misc. bug fixes and cleanups. + Updated translations. - Drop b81429ac.patch: Fixed upstream. ==== openexr ==== Subpackages: libIex-3_1-30 libIlmThread-3_1-30 libOpenEXR-3_1-30 - Add _constraints: 6000 MiB memory ==== texlive ==== - Make it build even ol ppc64le ==== texlive-specs-n ==== Version update (2022.195.2.005svn61719 -> 2022.196.2.005svn61719) - The boldtensors styles should require the bbold fonts - Use https for urls - Update mltex to latest version 4.2svn63213 as upstream has now removed all .dvi, .pdf, and .tex files from doc tree due to the used Creative Commons Attribution-NonCommercial-ShareAlike license