Packages changed: bluez dnsmasq less (590 -> 608) openblas_pthreads opensuse-welcome (0.1.8+git.46.64e51ec -> 0.1.9+git.0.66be0d8) plymouth protobuf (21.5 -> 21.6) vim (9.0.0453 -> 9.0.0500) yast2-trans (84.87.20220910.dcdb12a597 -> 84.87.20220917.4034baecb2) === Details === ==== bluez ==== Subpackages: bluez-auto-enable-devices bluez-cups libbluetooth3 - For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and log: (jsc#PED-1407) - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch be merged to 5.51 mainline. So 5.65 bluez already includes it. - Add the following patches from the bluez-5.62 of 15-SP5: - disable_some_obex_tests.patch - disable tests for bypass boo#1078285 - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch - bsc#1013708 CVE-2016-9797 - Al Cho has sent it to upstream but it not be merged: https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/ - hcidump-Fix-memory-leak-with-malformed-packet.patch - bsc#1015171 CVE-2016-9917 - Al Cho has sent it to upstream but it not be merged: https://www.spinics.net/lists/linux-bluetooth/msg79852.html - hcidump-Fixed-malformed-segment-frame-length.patch - bsc#1013712 CVE-2016-9798 - Did not send to upstream. - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902 - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html - Respin the following patches - bluez-test-2to3.diff - Removed some parts of patch because those codes be included in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65. - The following patches are the same between SLE15-SP5 with openSUSE TW: - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with bluez-disable-broken-tests.diff in openSUSE TW. - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5 matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in openSUSE TW. ==== dnsmasq ==== - Ensure the dnsmasq user's group is used - Remove nogroup requirement ==== less ==== Version update (590 -> 608) - Update to 608: * Add the --header option (github #43). * Add the --no-number-headers option (github #178). * Add the --status-line option. * Add the --redraw-on-quit option (github #36). * Add the --search-options option (github #213). * Add the --exit-follow-on-close option (github #244). * Add 'H' color type to set color of header lines. * Add #version conditional to lesskey. * Add += syntax to variable section in lesskey files. * Allow option name in -- command to end with '=' in addition to '\n'. * Add $HOME/.config to possible locations of lesskey file (github #153). * Add $XDG_STATE_HOME and $HOME/.local/state to possible locations of history file (github #223). * Don't read or write history file in secure mode (github #201). * Fix display of multibyte and double-width chars in prompt. * Fix ESC-BACKSPACE command when BACKSPACE key does not send 0x08 (github #188). * Add more \k codes to lesskey format. * Fix bug when empty file is modified while viewing it. * Fix bug when parsing a malformed lesskey file (githb #234). * Fix bug scrolling history when --incsearch is set (github #214). * Fix buffer overflow when invoking lessecho with more than 63 -m/-n options (github #198). * Fix buffer overflow in bin_file (github #271). * Fix bug restoring color at end of highlighted text. * Fix bug in parsing lesskey file. * Defer moving cursor to lower left in some more cases. * Suppress TAB filename expansion in some cases where it doesn't make sense. * Fix termlib detection when compiler doesn't accept calls to undeclared functions. * Escape filenames when invoking LESSCLOSE. * Fix bug using multibyte UTF-8 char in search string with --incsearch (github #273). ==== openblas_pthreads ==== - The toolchain and 'make' in TW have been updated to handle parallel makes spawned by gcc (for LTO optimization) properly. Thus, remove restrictions. - Disable lto when linking test programs to speeds up building. ==== opensuse-welcome ==== Version update (0.1.8+git.46.64e51ec -> 0.1.9+git.0.66be0d8) - Update to version 0.1.9+git.0.66be0d8: * fix: it's called Plasma * fix: make openSUSE welcome work again (boo#1194380) * fix: undead the URLs to Telegram groups * Translation updates ==== plymouth ==== Subpackages: libply-splash-core5 libply-splash-graphics5 libply5 plymouth-dracut plymouth-lang plymouth-plugin-label plymouth-plugin-two-step plymouth-scripts plymouth-theme-bgrt plymouth-theme-spinner - Stop providing version-release for the upstream-branding sub-package. It leads to publishing of every new rebuild, goes against the goal of reproducible builds/packages. - Update Supplements to current standard. ==== protobuf ==== Version update (21.5 -> 21.6) - update to 21.6: C++: * Reduce memory consumption of MessageSet parsing ==== vim ==== Version update (9.0.0453 -> 9.0.0500) Subpackages: vim-data vim-data-common vim-small - Updated to version 9.0.0500, fixes the following problems - boo#1203508 - CVE-2022-3234 - boo#1203509 - CVE-2022-3235 * On an AZERTY keyboard digit keys get the shift modifier. * Incorrect color for modeless selection with GTK. * A few problems with 'splitscroll'. * Function called at debug prompt is also debugged. * Substitute prompt does not highlight an empty match. * Splitting a line with a text prop "above" moves it to a new line below. * Vim9: block in for loop doesn't behave like a code block. * Loop variable can't be found. * 'scroll' is not always updated. * ASAN warning for integer overflow. * Command line test leaves directory behind. * With virtual text "above" indenting doesn't work well. * Cursor moves when cmdwin is closed when 'splitscroll' is off. * Virtual text wrong after adding line break after line. * Build failure. * Exectution stack underflow without the +eval feature. (Dominique Pellé) * Cursor moves if cmdwin is closed when 'splitscroll' is off. * In a :def function all closures in a loop get the same variables. * No test for what patch 9.0.0469 fixes. * Virtual text "below" doesn't show in list mode. * fullcommand() only works for the current script version. * fullcommand() test failure. * Not using deferred delete in tests. * Varargs does not work for replacement function of substitute(). * Missing dependency may cause crashes on incomplete build. * Test for 'splitscroll' takes too much time. * Valva Date Format files are not recognized. * Cannot use a :def varargs function with substitute(). * In a :def function all closures in a loop get the same variables. * "g0" moves to wrong location with virtual text "above". * Illegal memory access when replacing in virtualedit mode. * In a :def function all closures in a loop get the same variables. * Text scrolled with 'nosplitscroll', autocmd win opened and help window closed. * Using freed memory with combination of closures. * Cursor in wrong position with virtual text "above" and 'showbreak'. * Using "end_lnum" with virtual text causes problems. * Using freed memory with cmdwin and BufEnter autocmd. * No good reason to build without the float feature. * Cmdwin test fails on MS-Windows. * Perl test fails. * Small build misses float function declaraitons. * Closure doesn't work properly in nested loop. * No good reason to keep supporting Windows-XP. * LyRiCs files are not recognized. * Various small issues. * In :def function list created after const is locked. * When quitting the cmdline window with CTRL-C it remains visible. ==== yast2-trans ==== Version update (84.87.20220910.dcdb12a597 -> 84.87.20220917.4034baecb2) Subpackages: yast2-trans-cs yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-fr yast2-trans-hu yast2-trans-it yast2-trans-ja yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ru yast2-trans-zh_CN yast2-trans-zh_TW - Update to version 84.87.20220917.4034baecb2: * Translated using Weblate (Spanish) * New POT for text domain 'http-server'. * New POT for text domain 'base'. * Translated using Weblate (Czech) * Translated using Weblate (Russian) * Translated using Weblate (Russian) * Translated using Weblate (Russian) * Translated using Weblate (Russian) * Translated using Weblate (Russian) * New POT for text domain 'kdump'. * New POT for text domain 'bootloader'.