Packages changed: containers-systemd (0.0+git20211129.1b144ae -> 0.0+git20220131.79f09c7) gnome-terminal kbd kdump (1.0 -> 1.0.2) lcms2 (2.12 -> 2.13) libcap (2.62 -> 2.63) libnvme (1.0~0 -> 1.0~2) libopenmpt (0.5.14 -> 0.6.1) libwebp (1.2.1 -> 1.2.2) libzypp (17.28.8 -> 17.29.3) multipath-tools (0.8.8+13+suse.79c3556f -> 0.8.8+45+suse.628d603e) nvme-cli (2.0~0 -> 2.0~2) openblas_pthreads pipewire (0.3.44 -> 0.3.45) python-pandas (1.3.5 -> 1.4.0) python-psutil python-scipy (1.6.3 -> 1.7.3) samba (4.15.4+git.224.dea2f6dc836 -> 4.15.5+git.328.f1f29505d84) sudo (1.9.8p2 -> 1.9.9) tevent wireplumber zypper (1.14.50 -> 1.14.51) === Details === ==== containers-systemd ==== Version update (0.0+git20211129.1b144ae -> 0.0+git20220131.79f09c7) - Update to version 0.0+git20220131.79f09c7: * Adjust timing for start limits in case of errors * Fix typo - Update to version 0.0+git20211130.31bd054: * Use Type=notify instead of forking (following podman upstream) ==== gnome-terminal ==== Subpackages: nautilus-extension-terminal - Add 9a168cc23962ce9fa106dc8a40407d381a3db403.patch: Fix build with meson 0.61.0 and newer. ==== kbd ==== Subpackages: kbd-legacy - use bash for invoking bash scripts ==== kdump ==== Version update (1.0 -> 1.0.2) - kdump-calibrate.conf-depends-on-kdumptool.patch: calibrate.conf: Add dependency on kdumptool. - kdump-calibrate-fix-nic-naming.patch: calibrate: Fix network interface naming. - kdump-calibrate-include-af_packet.patch: calibrate: Explicitly include af_packet in the test initrd. - Update to 1.0.2 * Adjust crash kernel reservation at boot time (jsc#SLE-18441). - All remaining patches have been upstreamed: * kdump-fillupdir-fixes.patch * kdump-use-pbl.patch * kdump-calibrate-Ignore-malformed-VMCOREINFO.patch ==== lcms2 ==== Version update (2.12 -> 2.13) - Update to 2.13: * Added support for premultiplied alpha * tifficc can now handle alpha channels, both unassociated and premultiplied * CGATS parser can now deal with very long strings * Added Projects for Visual Studio 2020 * Added ARM64 target to visual studio 2019 (thanks to gaborkertesz-linaro) * Added thread safe code to get time * Added automatic linear space detection * Added cmsGetStageContextID function * Added cmsDetectRGBProfileGamma function * configure now accepts --without-fastfloat to turn plugin off * Checked to work on STM32 Cortex-A, Cortex-M families * Bug & typos fixing (thanks to many reporters and contributors) - Rebase lcms2-visibility.patch ==== libcap ==== Version update (2.62 -> 2.63) - update to 2.63: * restore errno to zero by the time main() is executed * Consistent psx handling (a panic) for syscalls that return thread dependent status Inconsistend behavior noticed by Lorenz Bauer * Add a test case for a deadlock under investigation in golang * Trim some of the #include file use to make the tree compile more efficiently ==== libnvme ==== Version update (1.0~0 -> 1.0~2) - Update to version 1.0~2: * Add fabrics config option 'tls' * Logging infrastructure reworked (API break) * Changed argument structs layout (API break) * Changed scan API (API break) * Fixed ctrl_loss_tmo handling concerning values of '-1' * Various build fixes ==== libopenmpt ==== Version update (0.5.14 -> 0.6.1) - Update to 0.6.1: * [Bug] Possible hang with malformed DMF, DSM, MED, MUS, OKT and SymMOD files containing 65536 or more patterns when destroying the module. * [Bug] Avoid NaNs and infinite values with custom tunings and in the I3DL2Reverb plugin. * MIDI macros are now evaluated when seeking. * The letter ?z? is now evaluated in fixed MIDI macros (Z80?ZFF) the same way as in Impulse Tracker. * MOD: Loosened VBlank timing heuristics so that ?frame of mind? by Dascon plays correctly. * MOD: Validate the contents of ?hidden? patterns beyond the end of the order list when the file size matches the expected size when only taken ?official? patterns into account. This fixes Shofixti Ditty.mod from Star Control 2 while keeping other (partly broken) modules working. * MED: Command 20 (reverse sample) is now only applied when it?s next to a note. * S3M: Introducing the ?Send OPL key-off when triggering notes? compatibility setting broke retrigger for OPL notes again (they retriggered rather than not retriggering). * S3M: Retriggering a note no longer resets its pitch after a portamento. * S3M: Partially implement retrigger behaviour for stopped notes in SoundBlaster mode: Like in IT, it is not possible to retrigger a sample that has already stopped playing. * DIGI: Improve compatibility with E3x reverse sample command. * DSym: Tempos < 32 were treated as tempo slides. * SymMOD: Key-off command was not implemented properly. - Changes in 0.6.0: * [New] MUS files from Psycho Pinball and Micro Machines 2 are now supported. * [New] SymMOD files created with Symphonie / Symphonie Pro are now supported. * [New] FMT files created with Davey W Taylor?s FM Tracker are now supported. * [New] DSYM files created with Digital Symphony are now supported. * [New] STX files (transitional format between Scream Tracker 2 and 3) are now supported. * [New] TakeTracker MODs with TDZ1 to TDZ3 magic bytes are now supported. * [New] libopenmpt_ext: New interface interactive2 adding openmpt::ext::interactive2::note_off(), openmpt::ext::interactive2::note_fade(), openmpt::ext::interactive2::set_channel_panning(), openmpt::ext::interactive2::get_channel_panning(), openmpt::ext::interactive2::set_note_finetune(), and openmpt::ext::interactive2::get_note_finetune() (C++) and openmpt_module_ext_interface_interactive2.note_off(), openmpt_module_ext_interface_interactive2.note_fade(), openmpt_module_ext_interface_interactive2.set_channel_panning(), openmpt_module_ext_interface_interactive2.get_channel_panning(), openmpt_module_ext_interface_interactive2.set_note_finetune(), and openmpt_module_ext_interface_interactive2.get_note_finetune() (C). * [Change] libopenmpt no longer generates internal interpolation tables on library load time, but instead only on first module load time. * libopenmpt can now detect infinite pattern loops and treats them as the song end. This means that setting a repeat count other than -1 now always guarantees that playback will eventually end. The song loop counter is decremented each time it ends up at the start of the infinite loop, so the song does not restart from the beginning even if the repeat count is not 0. * openmpt::module::set_position_seconds() accuracy has been improved for modules with pattern loops. * Samples played at the wrong volume when rendering modules in mono. * IT: Portamentos in files with Linear Slides disabled are now more accurate. * IT: Pitch/Pan Separation was affected by note-off commands, and wasn?t reset by panning commands like in Impulse Tracker. * IT: Even after libopenmpt 0.5.14 the filter reset logic was still not 100% identical to Impulse Tracker: A note triggered on tick 0 of a row with a Pattern Delay effect still caused the filter to be reset on repetitions of that row even though the note wasn?t retriggered. * IT: Added read-only support for BeRoTracker commands 1 and 2 (equivalent to XM commands K and L). * XM: BeRoTracker saves smooth MIDI macros in a different way from OpenMPT. This command is now imported correctly. * XM: Emulate FT2 Tone Portamento quirk that inverts portamento direction after the target was reached (if target note was higher than previous note). * S3M files saved with Impulse Tracker and latest Schism Tracker now also compute sample playback speed in Hertz. * Depending on whether an S3M file was last saved in Scream Tracker with the Sound Blaster or Gravis Ultrasound drivers loaded, different compatibility flags are now applied. For files saved with the GUS, the sample volume factor is now also ignored (fixes volume levels in S3Ms made on the GUS, in particular if they use both samples and OPL instruments). * S3M: Enforce the lower frequency bound. * MOD: Loosened VBlank timing heuristics so that the original copy of Guitar Slinger from Dizzy Tunes II plays correctly. * FAR: Correct portamento depth is now used. * DMF / IMF: Improved accuracy of finetune commands. * MDL: Implemented finetune command. * OKT: Various accuracy improvements such as: Sharing volume between mixed channels, volume commands on mixed channels are permanent (not reset with new notes), mixed channels do not support default sample volume, 7-bit samples are actually supposed to be played as-is (not amplified to full 8-bit range), reject speed command parameters >= 20. ==== libwebp ==== Version update (1.2.1 -> 1.2.2) Subpackages: libwebp7 libwebpdemux2 libwebpmux3 - update to 1.2.2: * webpmux: add "-set bgcolor A,R,G,B" * add ARM64 NEON support for MSVC builds (#539) * doc updates and bug fixes (#538, #544, #548, #550) ==== libzypp ==== Version update (17.28.8 -> 17.29.3) - Public header files on older distros must use c++11 (bsc#1194597) - Fix exception handling when reading or writing credentials (bsc#1194898) - version 17.29.3 (22) - Fix Legacy include (bsc#1194597) - version 17.29.2 (22) - Fix broken install path for parser compat headers (fixes #372, bsc#1194597) - RepoManager: remember exec errors in exception history (bsc#1193007) - version 17.29.1 (22) - Use the default zypp.conf settings if no zypp.conf exists (bsc#1193488) - Fix wrong encoding of iso: URL components (bsc#954813) - Handle armv8l as armv7hl compatible userland. - Introduce zypp-curl a sublibrary for CURL related code. - zypp-rpm: Increase rpm loglevel if ZYPP_RPM_DEBUG is set. - Save all signatures associated with a public key in its PublicKeyData. - version 17.29.0 (22) ==== multipath-tools ==== Version update (0.8.8+13+suse.79c3556f -> 0.8.8+45+suse.628d603e) Subpackages: kpartx libmpath0 - Version 0.8.8+45+suse.628d603e * fix handling of historical-service-time path selector (bsc#1195425) * fix marking multipath devices as failed prematurely on startup (bsc#1195426) * multipathd.service: remove LimitCORE=infinity directive This should only be enabled for debugging. * multipathd.service: don't load scsi_dh modules (bsc#1195397) This is done via modules-load.d functionality on (open)SUSE - Upstream fixes: * Fix claiming of paths with "find_multipaths strict" * Avoid unnecessary read-only reloads ==== nvme-cli ==== Version update (2.0~0 -> 2.0~2) - Update to version 2.0~2: * Adapt to logging API changes in libnvme * Adapt to scan API changes in libnvme * Reworked error message handling * Fix 'list-ns' (bsc#1195151) * Add 'gen-tls-key' and 'check-tls-key' * Add Media Unit Status log page support * Cleanups and build fixes - Fix path to systemctl (bsc#1193699) ==== openblas_pthreads ==== - Partly revert: Thu Jul 8 12:35:35 UTC 2021 - Dominique Leuenberger - Do not create dummy symlinks on $self in /etc/alternatives: those files are packages as %ghost and any real file existance only confuses brp-checks, as it detects circular symlinks. for all suse_versions < current Factory in an attempt to fix bsc#1195232. ==== pipewire ==== Version update (0.3.44 -> 0.3.45) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Update to version 0.3.45: * Highlights - Zoom, telegram and other apps should be able to play sound again. - Implement a better way to force and lock JACK buffersize. - Default sink and source names and properties are improved. - The config loader can now load and merge fragments in conf.d directories for easier user configuration of config files. - Many small bug fixes and improvements. * PipeWire - pw-cli can now also send Commands to nodes. This can be used to Suspend a device, for example. - The eventfd was removed from loops and invoke is now used to stop the loop, this saves an fd. - New Alpine CI target to test musl builds, various build fixes. - Add force-quantum and force-rate properties. - The config loader can now load and merge fragments in conf.d directories. (#207) - resource error methods can be called without a resource and then just log an error message. - link-factory can now also work from the config. (#2095) * modules - module-simple-protocol has better argument parsing and can handle channelmap now. (#2068) It's also possible to configure latency and rate. - The native protocol now does extra checks for invalid data. (#2070) * ALSA - TI2902 chips as found in various Behringer cards should have inputs again. - Better handling of busy devices in udev, retry when the inotify close event is emited. * SPA - plugins now handle alignment properly and only expect the max alignment required for the CPU. (#2074) * Bluetooth - SBC-XQ is now enabled for the JBL Endurance RUN BT headset. - Support for non-hexadecimal XAPL version strings to improve compatibility. - Use HCI commands again to probe the adapter msbc capability. This improves compatibility with some adapters. (#2030) - Set the right startup volume. - Better A2DP source idle handling. - Fix a timer bug in SCO sink that could cause busy looping. * pulse-server - A playback issue when the tlength > maxlength was fixed. (#2069) This affected Zoom and other applications. - The STREAM_BUFFER_ATTR command is now implemented. - Module names are improved. (#2076) - Many small fixes and improvements. - Fix a pavucontrol crash with invalid channels. (#1442) * JACK - Use the new force-quantum and force-rate properties in the JACK API to switch quantum and ensure it can't change for the lifetime of the JACK app. (#2079) - Rebase patch: * reduce-meson-dependency.patch - pipewire should be a true dependency, not just recommended (e.g., so that any setup that use no-recommends, like MicroOS, also work) ==== python-pandas ==== Version update (1.3.5 -> 1.4.0) - Skip more tests on non-intel architectures boo#1167730 - Update to version 1.4.0 * https://pandas.pydata.org/docs/whatsnew/v1.4.0.html * Enhancements - Improved warning messages - Index can hold arbitrary ExtensionArrays - Enhancements in Styler - Multi-threaded CSV reading with a new CSV Engine based on pyarrow - Rank function for rolling and expanding windows - Groupby positional indexing - DataFrame.from_dict and DataFrame.to_dict have new 'tight' option * Notable bug fixes - Inconsistent date string parsing - Ignoring dtypes in concat with empty or all-NA columns - Null-values are no longer coerced to NaN-value in value_counts and mode - mangle_dupe_cols in read_csv no longer renames unique columns conflicting with target names - unstack and pivot_table no longer raises ValueError for result that would exceed int32 limit - groupby.apply consistent transform detection * API changes - Index.get_indexer_for() no longer accepts keyword arguments (other than target); in the past these would be silently ignored if the index was not unique (GH42310) - Change in the position of the min_rows argument in DataFrame.to_string() due to change in the docstring (GH44304) - Reduction operations for DataFrame or Series now raising a ValueError when None is passed for skipna (GH44178) - read_csv() and read_html() no longer raising an error when one of the header rows consists only of Unnamed: columns (GH13054) - Changed the name attribute of several holidays in USFederalHolidayCalendar to match official federal holiday names. * Deprecations - Deprecated Int64Index, UInt64Index & Float64Index - Deprecated Frame.append and Series.append - Split out test runs into separate flavors, optimize memory usage in pytest-xdist runs ==== python-psutil ==== - Fix name of Patch4, it is skip-partitions-erros.patch - Add skip-partitions-erros.patch skipping tests failing on Linux (gh#giampaolo/psutil#2043). ==== python-scipy ==== Version update (1.6.3 -> 1.7.3) - Provide empty debuginfo extraction for :test flavor - Update to version 1.7.3 * 3rd bugfix release since 1.7.0 - Highlights from the 1.7.0 release * A new submodule for quasi-Monte Carlo, scipy.stats.qmc, was added * The documentation design was updated to use the same PyData-Sphinx theme as NumPy and other ecosystem libraries. * We now vendor and leverage the Boost C++ library to enable numerous improvements for long-standing weaknesses in scipy.stats * scipy.stats has six new distributions, eight new (or overhauled) hypothesis tests, a new function for bootstrapping, a class that enables fast random variate sampling and percentile point function evaluation, and many other enhancements. * cdist and pdist distance calculations are faster for several metrics, especially weighted cases, thanks to a rewrite to a new C++ backend framework * A new class for radial basis function interpolation, RBFInterpolator, was added to address issues with the Rbf class. - Enable fast part of the test suite ==== samba ==== Version update (4.15.4+git.224.dea2f6dc836 -> 4.15.5+git.328.f1f29505d84) Subpackages: samba-client samba-client-libs samba-libs - Update to 4.15.5 * CVE-2021-44141: UNIX extensions in SMB1 disclose whether the outside target of a symlink exists; (bso#14911); (bsc#1193690). * CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit module; (bso#14914); (bsc#1194859). * CVE-2022-0336: Re-adding an SPN skips subsequent SPN conflict checks; bso#14950); (bsc#1195048). - CVE-2021-44141: Information leak via symlinks of existance of files or directories outside of the exported share; (bso#14911); (bsc#1193690); - CVE-2021-44142: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution; (bso#14914); (bsc#1194859); - CVE-2022-0336: Samba AD users with permission to write to an account can impersonate arbitrary services; (bso#14950); (bsc#1195048); ==== sudo ==== Version update (1.9.8p2 -> 1.9.9) - Update to 1.9.9 * Sudo can now be built with OpenSSL 3.0 without generating warnings about deprecated OpenSSL APIs. * A digest can now be specified along with the ALL command in the LDAP and SSSD back-ends. Sudo 1.9.0 introduced support for this in the sudoers file but did not include corresponding changes for the other back-ends. * visudo now only warns about an undefined alias or a cycle in an alias once for each alias. * The sudoRole cn was truncated by a single character in warning messages. GitHub issue #115. * The cvtsudoers utility has new --group-file and --passwd-file options to use a custom passwd or group file when the - -match-local option is also used. * The cvtsudoers utility can now filter or match based on a command. * The cvtsudoers utility can now produce output in csv (comma-separated value) format. This can be used to help generate entitlement reports. * Fixed a bug in sudo_logsrvd that could result in the connection being dropped for very long command lines. * Fixed a bug where sudo_logsrvd would not accept a restore point of zero. * Fixed a bug in visudo where the value of the editor setting was not used if it did not match the user?s EDITOR environment variable. This was only a problem if the env_editor setting was not enabled. Bug #1000. * Sudo now builds with the -fcf-protection compiler option and the - z now linker option if supported. * The output of sudoreplay -l now more closely matches the traditional sudo log format. * The sudo_sendlog utility will now use the full contents of the log.json file, if present. This makes it possible to send sudo-format I/O logs that use the newer log.json format to sudo_logsrvd without losing any information. * Fixed compilation of the arc4random_buf() replacement on systems with arc4random() but no arc4random_buf(). Bug #1008. * Sudo now uses its own getentropy() by default on Linux. The GNU libc version of getentropy() will fail on older kernels that don?t support the getrandom() system call. * It is now possible to build sudo with WolfSSL?s OpenSSL compatibility layer by using the --enable-wolfssl configure option. * Fixed a bug related to Daylight Saving Time when parsing timestamps in Generalized Time format. This affected the NOTBEFORE and NOTAFTER options in sudoers. Bug #1006. * Added the -O and -P options to visudo, which can be used to check or set the owner and permissions. This can be used in conjunction with the -c option to check that the sudoers file ownership and permissions are correct. Bug #1007. * It is now possible to set resource limits in the sudoers file itself. The special values default and ?user? refer to the default system limit and invoking user limit respectively. The core dump size limit is now set to 0 by default unless overridden by the sudoers file. * The cvtsudoers utility can now merge multiple sudoers sources into a single, combined sudoers file. If there are conflicting entries, cvtsudoers will attempt to resolve them but manual intervention may be required. The merging of sudoers rules is currently fairly simplistic but will be improved in a future release. * Sudo was parsing but not applying the ?deref? and ?tls_reqcert? ldap.conf settings. This meant the options were effectively ignored which broke dereferencing of aliases in LDAP. Bug #1013. * Clarified in the sudo man page that the security policy may override the user?s PATH environment variable. Bug #1014. * When sudo is run in non-interactive mode (with the -n option), it will now attempt PAM authentication and only exit with an error if user interaction is required. This allows PAM modules that don?t interact with the user to succeed. Previously, sudo would not attempt authentication if the -n option was specified. Bug #956 and GitHub issue #83. * Fixed a regression introduced in version 1.9.1 when sudo is built with the --with-fqdn configure option. The local host name was being resolved before the sudoers file was processed, making it impossible to disable DNS lookups by negating the fqdn sudoers option. Bug #1016. * Added support for negated sudoUser attributes in the LDAP and SSSD sudoers back ends. A matching sudoUser that is negated will cause the sudoRole containing it to be ignored. * Fixed a bug where the stack resource limit could be set to a value smaller than that of the invoking user and not be reset before the command was run. Bug #1016. - sudo no longer ships schema for LDAP. - sudo-feature-negated-LDAP-users.patch dropped, included upstream - refreshed sudo-sudoers.patch - Add support in the LDAP filter for negated users, patch taken from upstream (jsc#20068) * Adds sudo-feature-negated-LDAP-users.patch ==== tevent ==== - Fix build on 15.3 (for the heimdal addc build), by bundling cmocka. ==== wireplumber ==== Subpackages: libwireplumber-0_4-0 wireplumber-audio - Use the default lua instead of hardcoding 5.3 ==== zypper ==== Version update (1.14.50 -> 1.14.51) Subpackages: zypper-needs-restarting - Singletrans: handle fatal and non-fatal script errors properly. - Add SingleTransReportReceiver. - Immediately write out additional rpm output. - BuildRequires: libzypp-devel >= 17.29.0. Need SingleTransReport and immediate rpm script output reports. - version 1.14.51