Packages changed: graphviz gstreamer (1.20.3 -> 1.20.4) gstreamer-plugins-bad (1.20.3 -> 1.20.4) gstreamer-plugins-base (1.20.3 -> 1.20.4) gstreamer-plugins-good (1.20.3 -> 1.20.4) multipath-tools (0.9.1+52+suse.be8809e -> 0.9.2+57+suse.cf3c1e9) pam-config (1.7 -> 1.8) python-psutil (5.9.2 -> 5.9.3) python-urllib3 xwayland (22.1.3 -> 22.1.4) yast2-trans (84.87.20221016.284cfa770d -> 84.87.20221023.365770fb5e) zchunk (1.2.2 -> 1.2.3) === Details === ==== graphviz ==== Subpackages: libcdt5 libcgraph6 libgvc6 libpathplan4 - add swig-4.1.0.patch to work around graphviz's incompatibility with swig-4.1.0. ==== gstreamer ==== Version update (1.20.3 -> 1.20.4) Subpackages: gstreamer-lang libgstreamer-1_0-0 typelib-1_0-Gst-1_0 - Update to version 1.20.4: + Highlighted bugfixes in 1.20.4: - avaudiodec: fix playback issue with WMA files, would throw an error at EOS with FFmpeg 5.x - Fix deadlock when loading gst-editing-services plugin - Fix input buffering capacity in live mode for aggregator, video/audio aggregator subclasses, muxers - glimagesink: fix crash on Android - subtitle handling and subtitle overlay fixes - matroska-mux: allow width + height changes for avc3|hev1|vp8|vp9 - rtspsrc: fix control url handling for spec compliant servers and add fallback for incompliant servers - WebRTC fixes - RTP retransmission fixes - video: fixes for formats with 4x subsampling and horizontal co-sited chroma (Y41B, YUV9, YVU9 and IYU9) - Fix consuming of the macOS package as a framework in XCode - Performance improvements - Miscellaneous bug fixes, memory leak fixes, and other stability and reliability improvements + gstreamer: - buffer: drop parent meta in deep copy/foreach_metadata - devicemonitor: Use a sync bus handler for the provider to avoid accumulating all messages until the provider is stopped - element: Fix requesting of pads with string templates - gst: . Protect initialization state with a recursive mutex . Add missing define guard for build without gstreamer debug logging support - gst_init: Initialize static plugins just before dynamic plugins - info: Parse "NONE" as a valid level name - meta: Set the parent refcount of the GstStructure correctly - pluginloader: Don't hang on short reads/writes - tracers: leaks: . Fix potentially invalid memory access when trying to detect object type . Fix object-refings.class flags - uri: When setting the same string again do nothing - value: Don't loop forever when serializing invalid flag + Base Libraries: - aggregator: . Fix input buffering in live mode (was too low before in many cases) . Fix reversed active/flushing arguments in debug log output . Reset EOS flag after receiving a stream-start event + Core Elements: queue2: - Hold the lock when modifying sinkresult - Fix deadlock when deactivate is called in pull mode ==== gstreamer-plugins-bad ==== Version update (1.20.3 -> 1.20.4) Subpackages: gstreamer-plugins-bad-lang libgstadaptivedemux-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstphotography-1_0-0 libgstplay-1_0-0 libgstplayer-1_0-0 libgstsctp-1_0-0 libgsturidownloader-1_0-0 libgstva-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 - Update to version 1.20.4: + amcvideodec: fix GstAmcSurfaceTexture segfault. + audiobuffersplit: Fix drift that was introduced by wrong calculations in gapless mode. + audiovisualizer: fix buffer mapping to not increase refcount. + avfvideosrc: Fix wrong default framerate value. + d3d11decoder: Check 16K resolution support. + d3d11videosink: Fix for force-aspect-ratio setting when rendering on shared texture. + GstPlay: missing cleanup for g_autoptr. + mxfdemux: Always calculate BlockAlign of raw audio to work around files with broken BlockAlign field in the headers. + nvdec: Fix for HEVC decoding when coded resolution is larger than display resolution. + openh264enc: Fix constrained-high encoding. + openh264: Register debug categories earlier. + openmpt: update from now deprecated api. + player/play: Fix object construction and various leaks. + player: Plug a memory leak. + proxysink: Make sure stream-start and caps events are forwarded, and fix memory leak. + tests: skip unit tests for dependency-less elements that have been disabled. + tsdemux: Don't trigger a program change when falling back to ignore-pcr behaviour. + va: - allocator: Fix translation of VADRMPRIMESurfaceDescriptor. - h265dec: Fix a crash because of missing reference frame. - vah265dec: Decoder segfaults on seek. + wasapi2: Fix initial mute/volume setting. + wasapi: Implement default audio channel mask. + webrtcbin: - Fix pointer dereference before null check. - Limit sink query to sink pads. + webrtc: Make sure to return NULL when validating TURN server fails. - Drop va-allocator-fix.patch: fixed upstream. ==== gstreamer-plugins-base ==== Version update (1.20.3 -> 1.20.4) Subpackages: gstreamer-plugins-base-lang libgstallocators-1_0-0 libgstapp-1_0-0 libgstaudio-1_0-0 libgstfft-1_0-0 libgstgl-1_0-0 libgstpbutils-1_0-0 libgstriff-1_0-0 libgstrtp-1_0-0 libgstrtsp-1_0-0 libgstsdp-1_0-0 libgsttag-1_0-0 libgstvideo-1_0-0 typelib-1_0-GstTag-1_0 - Update to version 1.20.4: + decodebin3: - Fix mutex leaks - Fix memory issues with active selection list - uridecodebin3, urisourcebin: Event handling fixes - Fix EOS event sequence + parsebin: - Avoid crash with unknown streams - SIGSEGV during HLS stream using souphttpsrc + glimagesink: - Only allow setting the GL display/context if it is a valid value - Segfault on android devices + gstgl: Fix several memory leaks in macOS + opusenc: improve inband-fec property documentation + playsink: Hold a reference to the soft volume element + pbutils: descriptions: fix gst_pb_utils_get_caps_description_flags() + rtspurl: Use gst_uri_join_strings() in gst_rtsp_url_get_request_uri_with_control() instead of a hand-crafted, wrong version + rtspconnection: protect cancellable by a mutex + sdpmessage: Don't set SDP medias from caps without media/payload/clock-rate fields + samiparse: fix handling of self-closing tags + ssaparse: include required system headers for isspace() and sscanf() functions + subparse: fix crash when parsing invalid timestamps in mpl2 + subparse fixes + textoverlay: Don't miscalculate text running times + videoaggregator: always convert when user provides converter-config + video: Fix scaling in 4x horizontal co-sited chroma (Y41B, YUV9, YVU9 and IYU9) + xmptag: register musicbrainz tags during init to fix critical in jpegparse + xvimagesink: fix image leaks in error code path + tests: skip unit tests for dependency-less elements that have been disabled ==== gstreamer-plugins-good ==== Version update (1.20.3 -> 1.20.4) Subpackages: gstreamer-plugins-good-gtk gstreamer-plugins-good-lang - Update to version 1.20.4: + alpha: fix stride issue when out buffer has padding on right + isoff: Fix earliest pts field parse issue + matroska-mux: allow width + height changes for avc3|hev1|vp8|vp9 + qt: Fix another instance of Qt/GStreamer both defining GLsync differently + qtdemux: - Avoid crash on reconfiguring. - Guard against timestamp calculation overflow in gap event loop - Don't use invalid values from failed trex parsing - Possible endless loop + rtpjitterbuffer: - Only unschedule timers for late packets if they're not RTX packets and only once - Remove lost timer for out of order packets + rtspsrc: - SETUP generates 400 Bad Request - Retry SETUP with non-compliant URL resolution on "Bad Request" and "Not found" + rtpst2022-1-fecenc: Drain column packets on EOS + rtpvp8depay: If configured to wait for keyframes after packet loss, also do that if incomplete frames are detected + splitmuxsink: Don't crash on EOS without buffer + splitmuxsrc: - Stop pad task before cleanup - Don't consider unlinked pads when deactivating part + soup: libsoup3 makes audio streaming stop + v4l2: fix critical when unreferencign buffer with no data + v4l2bufferpool: Fix debug trace + v4l2object: Add support for Apple's full-range bt709 colorspace variant 1:3:5:1 + v4l2videocodec: workaround for failure to fully drain frames preceding MIDSTREAM renegotiation + v4l2allocator: Fix invalid imported dmabuf fd + videoflip: Fix caps negotiation when method is selected + build failure trying to build jack examples + examples: don't try and build jack examples if jack was disabled + tests: skip unit tests for dependency-less elements that have been disabled ==== multipath-tools ==== Version update (0.9.1+52+suse.be8809e -> 0.9.2+57+suse.cf3c1e9) Subpackages: kpartx libmpath0 - Update to version 0.9.2+57+suse.cf3c1e9: * Fix multipathd authorization bypass and symlink attack (bsc#1202739 CVE-2022-41973 CVE-2022-41974) * add multipath-dracut.conf: dracut config file to install tmpfiles.d/multipath.conf in initramfs * Use "queue_mode bio" for NVMeoF/TCP devices * Upstream bug fixes and hwtable updates - Drop recompress.service, it just slows down build ==== pam-config ==== Version update (1.7 -> 1.8) - Update to Version 1.8 - Move systemd_home after all optional modules (#13) - Add pam_u2f support [bsc#1115512] ==== python-psutil ==== Version update (5.9.2 -> 5.9.3) - update to version 5.9.3: * Enhancements + 2040, [macOS]: provide wheels for arm64 architecture. (patch by Matthieu Darbois) * Bug fixes + 2116, [macOS], [critical]: `psutil.net_connections`_ fails with RuntimeError. + 2135, [macOS]: Process.environ() may contain garbage data. Fix out-of-bounds read around sysctl_procargs. (patch by Bernhard Urban-Forster) + 2138, [Linux], [critical]: can't compile psutil on Android due to undefined ethtool_cmd_speed symbol. + 2142, [POSIX]: net_if_stats() 's flags on Python 2 returned unicode instead of str. (patch by Matthieu Darbois) + 2147, [macOS] Fix disk usage report on macOS 12+. (patch by Matthieu Darbois) + 2150, [Linux] Process.threads() may raise NoSuchProcess. Fix race condition. (patch by Daniel Li) + 2153, [macOS] Fix race condition in test_posix.TestProcess.test_cmdline. (patch by Matthieu Darbois) ==== python-urllib3 ==== - Fix pycache when undbundling six ==== xwayland ==== Version update (22.1.3 -> 22.1.4) - U_Do-not-ignore-leave-events.patch * fixes xwayland issue#1397, issue#1395 - Update to version 22.1.4 * xwayland: Aggregate scroll axis events to fix kinetic scrolling * Forbid server grabs by non-WM on *rootless* XWayland * xkb: Avoid length-check failure on empty strings. * ci: remove redundant slash in libxcvt repository url * dix: Skip more code in SetRootClip for ROOT_CLIP_INPUT_ONLY * dix: Fix overzealous caching of ResourceClientBits() * xwayland: Prevent Xserver grabs with rootless * xwayland: Delay wl_surface destruction * build: Bump wayland requirement to 1.18 * xwayland: set tag on our surfaces * xwayland: Clear the "xwl-window" tag on unrealize * xwayland: correct the type for the discrete scroll events * xkb: fix some possible memleaks in XkbGetKbdByName * xkb: length-check XkbGetKbdByName before accessing the fields * xkb: length-check XkbListComponents before accessing the fields * xkb: proof GetCountedString against request length attacks - supersedes security patches: * U_xkb-fix-some-possible-memleaks-in-XkbGetKbdByName.patch * U_xkb-proof-GetCountedString-against-request-length-at.patch ==== yast2-trans ==== Version update (84.87.20221016.284cfa770d -> 84.87.20221023.365770fb5e) Subpackages: yast2-trans-cs yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-fr yast2-trans-hu yast2-trans-it yast2-trans-ja yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ru yast2-trans-zh_CN yast2-trans-zh_TW - Update to version 84.87.20221023.365770fb5e: * Translated using Weblate (Czech) * Translated using Weblate (Czech) * Translated using Weblate (Dutch) * Translated using Weblate (Dutch) * Translated using Weblate (Slovak) * Translated using Weblate (Slovak) * Translated using Weblate (Japanese) * Translated using Weblate (Catalan) * Translated using Weblate (Japanese) * Translated using Weblate (Catalan) * New POT for text domain 'registration'. * New POT for text domain 'installation'. * New POT for text domain 'firstboot'. * New POT for text domain 'country'. * New POT for text domain 'network'. * New POT for text domain 'autoinst'. ==== zchunk ==== Version update (1.2.2 -> 1.2.3) - update to 1.2.3: * Remove meson deprecation warning * Add license scan report and status * test/zck_cmp_uncomp: fix printf format types * meson: add option to build without docs * zck: declare write_data as static