Removed rpms ============ - liblmdb-0_9_17 Added rpms ========== - aha - liblmdb-0_9_30 Package Source Changes ====================== ImageMagick + fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c + + ImageMagick-CVE-2023-1906.patch + +- security update +- added patches MozillaFirefox +- Firefox Extended Support Release 102.10.0 ESR + Placeholder changelog-entry (bsc#1210212) + - Placeholder changelog-entry (bsc#1209173) + * Fixed: Various security fixes. + MFSA 2023-10 (bsc#1209173) + * CVE-2023-25751 (bmo#1814899) + Incorrect code generation during JIT compilation + * CVE-2023-28164 (bmo#1809122) + URL being dragged from a removed cross-origin iframe into the + same tab triggered navigation + * CVE-2023-28162 (bmo#1811327) + Invalid downcast in Worklets + * CVE-2023-25752 (bmo#1811627) + Potential out-of-bounds when accessing throttled streams + * CVE-2023-28163 (bmo#1817768) + Windows Save As dialog resolved environment variables + * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904, + bmo#1817442, bmo#1818674) + Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9 autoyast2 +- Rebuild the RPM database during upgrade (--rebuilddb) (bsc#1209565) +- 4.5.13 + grub2 +- Fix no prep partition error on non-PReP architectures by making the + prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489) + * 0004-Introduce-prep_load_env-command.patch +- Fix the issue of freeing an uninitialized pointer + * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch +- Rediff + * 0005-export-environment-at-start-up.patch + +- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made + enhancements to PPC secure boot's root device discovery config (bsc#1207230) +- Ensure get_devargs and get_devname functions are consistent + * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch +- Fix regex for Open Firmware device specifier with encoded commas + * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch +- Fix regular expression in PPC secure boot config to prevent escaped commas + from being treated as delimiters when retrieving partition substrings. +- Use prep_load_env in PPC secure boot config to handle unset host-specific + environment variables and ensure successful command execution. + * 0004-Introduce-prep_load_env-command.patch +- Refreshed + * 0005-export-environment-at-start-up.patch + harfbuzz +- Add CVE-2023-25193.patch: limit how far we skip when looking + back (bsc#1207922 CVE-2023-25193). + hwdata +- update to 0.368: + * Update pci, usb and vendor ids + +- update to 0.367: + * Update pci, usb and vendor ids + +- update to 0.366: + * Update pci, usb and vendor ids + kernel-64kb +- ice: avoid bonding causing auxiliary plug/unplug under RTNL lock + (bsc#1210158). +- commit bca1250 + +- Fix a compile warning in the previous nouveau patch (bsc#1208209) + Refreshed: + patches.suse/drm-nouveau-blacklist-Turing-and-Ampere-models-as-default.patch +- commit b2a56d6 + +- tracing: Fix poll() and select() do not work on per_cpu + trace_pipe and trace_pipe_raw (git-fixes, bsc#1209841). +- commit b44ae5f + +- drm/nouveau: blacklist Turing and Ampere models as default + (bsc#1208209). +- commit b751cb8 + +- rpm/constraints.in: increase the disk size for armv6/7 to 24GB + It grows and the build fails recently on SLE15-SP4/5. +- commit 8ba35ca + kernel-default +- ice: avoid bonding causing auxiliary plug/unplug under RTNL lock + (bsc#1210158). +- commit bca1250 + +- Fix a compile warning in the previous nouveau patch (bsc#1208209) + Refreshed: + patches.suse/drm-nouveau-blacklist-Turing-and-Ampere-models-as-default.patch +- commit b2a56d6 + +- tracing: Fix poll() and select() do not work on per_cpu + trace_pipe and trace_pipe_raw (git-fixes, bsc#1209841). +- commit b44ae5f + +- drm/nouveau: blacklist Turing and Ampere models as default + (bsc#1208209). +- commit b751cb8 + +- rpm/constraints.in: increase the disk size for armv6/7 to 24GB + It grows and the build fails recently on SLE15-SP4/5. +- commit 8ba35ca + kinfocenter5 +- Update to 5.27.4 + * New bugfix release + * For more details please see: + * https://kde.org/announcements/plasma/5/5.27.4 +- Changes since 5.27.3: + * energy: Use text colour for the grid lines + +- Update to 5.27.3 + * New bugfix release + * For more details please see: + * https://kde.org/announcements/plasma/5/5.27.3 +- No code changes since 5.27.2 + +- Update to 5.27.2 + * New bugfix release + * For more details please see: + * https://kde.org/announcements/plasma/5/5.27.2 +- No code changes since 5.27.1 + +- Update to 5.27.1 + * New bugfix release + * For more details please see: + * https://kde.org/announcements/plasma/5/5.27.1 +- Changes since 5.27.0: + * Fix typo in string (kde#466144) + +- Update to 5.27.0 + * New bugfix release + * For more details please see: + * https://kde.org/announcements/plasma/5/5.27.0 +- No code changes since 5.26.90 + +- Update to 5.26.90 + * New feature release + * For more details please see: + * https://kde.org/announcements/plasma/5/5.26.90 +- Changes since 5.26.5: + * Show OpenCL info + * about-distro: do not recreate dialog + * Add "kinfocenter" as a keyword to application desktop file + * Install translated documentation from po/ too + * refine new osversion a bit + * Show BUILD_ID in kinfocenter if ShowBuild set in kcm-about-distrorc. + * remove bad commit + * CommandOutputKCM: Fix text sizing and make it selectable + * Add FreeBSD Qt6 CI + * Add Linux Qt6 CI + * Perform initialization in initialization list + * Move graph controls to be below the graph + * Fix labels in Energy module wrapping unnecessarily + * Make value labels in form layouts individually selectable and copyable (kde#428881) + * Install po folder + * Set bugReportURL for all KCMs in tihs repo + * Find qdbus command correctly + +- Update to 5.26.5 + * New bugfix release + * For more details please see: + * https://kde.org/announcements/plasma/5/5.26.5 +- No code changes since 5.26.4 + +- Update to 5.26.4 + * New bugfix release + * For more details please see: + * https://kde.org/announcements/plasma/5/5.26.4 +- Changes since 5.26.3: + * Install translated documentation from po/ too + +- Update to 5.26.3 + * New bugfix release + * For more details please see: + * https://kde.org/announcements/plasma/5/5.26.3 +- No code changes since 5.26.2 + +- Update to 5.26.2 + * New bugfix release + * For more details please see: + * https://kde.org/announcements/plasma/5/5.26.2 +- Changes since 5.26.1: + * CommandOutputKCM: Fix text sizing and make it selectable + +- Update to 5.26.1 + * New bugfix release + * For more details please see: + * https://kde.org/announcements/plasma/5/5.26.1 +- No code changes since 5.26.0 + +- Update to 5.26.0 + * New bugfix release + * For more details please see: + * https://kde.org/announcements/plasma/5/5.26.0 +- Changes since 5.25.90: + * Install po folder + * Find qdbus command correctly +- Drop patches, now upstream: + * 0001-Find-qdbus-command-correctly.patch + +- Add patch to fix the KWin supportinfo module: + * 0001-Find-qdbus-command-correctly.patch + +- Update to 5.25.90 + * New feature release + * For more details please see: + * https://kde.org/announcements/plasma/5/5.25.90 +- Too many changes to list here + +- Update to 5.25.5 + * New bugfix release + * For more details please see: + * https://kde.org/announcements/plasma/5/5.25.5 +- Changes since 5.25.4: + * smb: show the share page in properties dialog (kde#457854) + +- Update to 5.25.4 + * New bugfix release + * For more details please see: + * https://kde.org/announcements/plasma/5/5.25.4 +- Changes since 5.25.3: + * Add missing include on + +- Update to 5.25.3 + * New bugfix release + * For more details please see: + * https://kde.org/announcements/plasma/5/5.25.3 +- Changes since 5.25.2: + * Remove root Messages.sh there's no "kinfocenter" app anymore + +- Update to 5.25.2 + * New bugfix release + * For more details please see: + * https://kde.org/announcements/plasma/5/5.25.2 +- No code changes since 5.25.1 + +- Update to 5.25.1 + * New bugfix release + * For more details please see: + * https://kde.org/announcements/plasma/5/5.25.1 +- No code changes since 5.25.0 + +- Update to 5.25.0 + * New bugfix release + * For more details please see: + * https://kde.org/announcements/plasma/5/5.25.0 +- Changes since 5.24.90: + * redirect stderr to stdout (kde#454197) +- Fix 0002-Look-for-binaries-in-Mesa-demos-path-as-well.patch (boo#1199975) + +- Update to 5.24.90 + * New feature release + * For more details please see: + * https://kde.org/announcements/plasma/5/5.24.90 +- Changes since 5.24.5: + * Fix about distro KCM not being able to be pinned + * Fix: Iterate with std::as_const, to avoid copying vector + * Finishing touches for the Qt6 build + * Use non-deprecated KAuth includes + * modules/about-distro: use standard inner margins for page + * modules/about-distro: simplify spacing before "open in Info Center" button + * modules/about-distro: remove bottom padding from page (kde#452437) + * Explicitly set parent app for energyinfo KCM + * Add some DMI data to about-distro + * Hide filter bar when showing an error message + * Display more informative and actionable error messages + * Use not deprecated ECMFindQmlModule + * Fix install against qt6 + * Also horizontally center the error messages in their pages + * new module firmware security + * Allow to build against qt6 + * fix up help paths (kde#450918) + * about-distro: remove unnecessary spacers above sections + * Search in /usr/local/sbin:/usr/sbin:/sbin as fallback (kde#449792) + * Add plasma-systemmonitor as the dependency of kinfocenter + * Don't use deprecated variable + * Drop unnecessary KIconThemes dependency +- Refresh 0002-Look-for-binaries-in-Mesa-demos-path-as-well.patch + +- Update to 5.24.5 + * New bugfix release + * For more details please see: + * https://kde.org/announcements/plasma/5/5.24.5 +- No code changes since 5.24.4 + lapack +- Fix update-alternatives for lapacke (bsc#1207358). libgarcon +- Correction of license should be LGPL-2.0-only and GFDL-1.1-only + * confirmed with suse legal + liblouis +- Add liblouis-CVE-2023-26768.patch: Check filename before copying + to initialLogFileName(CVE-2023-26768 bsc#1209431 bsc#1209855). + - copying into tableFile(CVE-2023-26769 bsc#1209432). + copying into tableFile(CVE-2023-26769 bsc#1209432 bsc#1209855). - copying into dataPath(CVE-2023-26767 bsc#1209429). + copying into dataPath(CVE-2023-26767 bsc#1209429 bsc#1209855). lmdb +- update to 0.9.30: + * LMDB page_split: key threshold depends on page + size + * avoid gcc optimization bug on sparc64 linux + * - Mark infrequently used functions as cold + * clear C_EOF on cursor with MDB_FIRST_DUP + * Use sys/cachectl.h rather than asm/cachectl.h on + mips + +- update to 0.9.29: + * lmdump is not creating lock files + +- update to 0.9.29: + * ITS#9461 refix ITS#9376 + * ITS#9500 fix regression from ITS#8662 + +- LMDB 0.9.28 Release (2021/02/04) + * ITS#8662 add -a append option to mdb_load +- LMDB 0.9.27 Release (2020/10/26) + * ITS#9376 fix repeated DUPSORT cursor deletes +- LMDB 0.9.26 Release (2020/08/11) + * ITS#9278 fix robust mutex cleanup for FreeBSD +- LMDB 0.9.25 Release (2020/01/30) + * ITS#9068 fix mdb_dump/load backslashes in printable content + * ITS#9118 add MAP_NOSYNC for FreeBSD + * ITS#9155 free mt_spill_pgs in non-nested txn on end + +- copy the pkg config support from the fedora package + +- LMDB 0.9.24 Release (2019/07/24) + * ITS#8969 Tweak mdb_page_split + * ITS#8975 WIN32 fix writemap set_mapsize crash + * ITS#9007 Fix loose pages in WRITEMAP +- LMDB 0.9.23 Release (2018/12/19) + * ITS#8756 Fix loose pages in dirty list + * ITS#8831 Fix mdb_load flag init + * ITS#8844 Fix mdb_env_close in forked process + * Documentation + + ITS#8857 mdb_cursor_del doesn't invalidate cursor + + ITS#8908 GET_MULTIPLE etc don't change passed in key +- Drop upstream 0001-ITS-8756-remove-loose-pg-from-dirty-list-in-freelist.patch +- Drop upstream 0001-ITS-8336-fix-page_search_root-assert-on-FreeDB.patch +- Cleanup: + * Use %license, drop %defattr + * Use https for Url tag +- LMDB 0.9.22 Release (2018-03-22) + * Fix MDB_DUPSORT alignment bug (ITS#8819) + * Fix regression with new db from 0.9.19 (ITS#8760) + * Fix liblmdb to build on Solaris (ITS#8612) + * Fix delete behavior with DUPSORT DB (ITS#8622) + * Fix mdb_cursor_get/mdb_cursor_del behavior (ITS#8722) +- LMDB 0.9.21 Release (2017/06/01) + * Fix xcursor after cursor_del (ITS#8622) +- LMDB 0.9.20 (Withdrawn) + * Fix mdb_load with escaped plaintext (ITS#8558) + * Fix mdb_cursor_last / mdb_put interaction (ITS#8557) +- LMDB 0.9.19 Release (2016/12/28) + * Fix mdb_env_cwalk cursor init (ITS#8424) + * Fix robust mutexes on Solaris 10/11 (ITS#8339) + * Tweak Win32 error message buffer + * Fix MDB_GET_BOTH on non-dup record (ITS#8393) + * Optimize mdb_drop + * Fix xcursors after mdb_cursor_del (ITS#8406) + * Fix MDB_NEXT_DUP after mdb_cursor_del (ITS#8412) + * Fix mdb_cursor_put resetting C_EOF (ITS#8489) + * Fix mdb_env_copyfd2 to return EPIPE on SIGPIPE (ITS#8504) + * Fix mdb_env_copy with empty DB (ITS#8209) + * Fix behaviors with fork (ITS#8505) + LMDB leaks database FD into child processes (bsc#1178706) + * Fix mdb_dbi_open with mainDB cursors (ITS#8542) + * Fix robust mutexes on kFreeBSD (ITS#8554) + * Fix utf8_to_utf16 error checks (ITS#7992) + * Fix F_NOCACHE on MacOS, error is non-fatal (ITS#7682) + * Build + Make shared lib suffix overridable (ITS#8481) + * Documentation + + Cleanup doxygen nits + + Note reserved vs actual mem/disk usage +- LMDB 0.9.18 Release (2016/02/05) + * Fix robust mutex detection on glibc 2.10-11 (ITS#8330) + * Fix page_search_root assert on FreeDB (ITS#8336) + * Fix MDB_APPENDDUP vs. rewrite(single item) (ITS#8334) + * Fix mdb_copy of large files on Windows + * Fix subcursor move after delete (ITS#8355) + * Fix mdb_midl_shirnk off-by-one (ITS#8363) + * Check for utf8_to_utf16 failures (ITS#7992) + * Catch strdup failure in mdb_dbi_open + * Build + + Additional makefile var tweaks (ITS#8169) + * Documentation + + Add Getting Started page + + Update WRITEMAP description +- Drop 0002-Autoconf-files.patch, soname-configurable.patch and + add Makefile-build-use-shared-lib.patch instead. Instead of + replacing the Makefile with a libtool/automake based one, just + patch the relevant parts of the upstream Makefile. + -- automake.diff changes: - * for autoconf tests to have effect, (like those in - 0001-Patch-for-LMDB-to-use-robust-mutexes.patch) config.h must be - included as first file in all C code. - * in 32 bit systems, ensure we support large databases. - * Switch the compiler to the current C standard, currently -std=gnu99 - in upcoming autoconf versions it is C11 though. -- liblmdb-implicit-decl.patch atol() requires stdlib.h -- Enable verbose build, rpmlint depends on that to work. - makedumpfile +- fix wrong free issue in init_xen_crash_info (bsc#1201209) + openSUSE-build-key +- Added 2023 opensuse container key 4096bit RSA key. +- Added 2023 opensuse container key in PEM format to + /usr/share/pki/containers/ for use by podman or sigstore +- Remove SLE11 1024bit RSA key , and obsolete it to remove it. + -- remove generated key rings, no longer needed by - installation-images and linuxrc (bnc#724625) -- remove security@suse.de key, never used for package signing -- remove old build@suse.de key, was used on sle10 -- remove openSUSE\x3aFactory@build.opensuse.org key, not used anymore -- leave sle11 build@suse.de key as backup - php7 + fix CVE-2022-4900 [bsc#1209537], potential buffer overflow via PHP_CLI_SERVER_WORKERS environment variable + + php7-CVE-2022-4900.patch + +- fix potential buffer overflow [bsc#1208199] +- modified patches + % php-systzdata-v19.patch (refreshed) + +- ensure extension=mysqlnd will be called before extension=mysqli + [bsc#1205162] + +- security update +- added patches polkit-default-privs +- Update to version 13.2+20230317.d2bceab: + * backport of kinfocenter5 (bsc#1209378) + systemd-rpm-macros +- Bump version to 12 + +- Don't emit a warning when the flag file in /var/lib/systemd/migrated/ is not + present as it's expected (bsc#1208079). + yast2-pkg-bindings +- Pkg.TargetInitializeOptions() - added a new option for + rebuilding the RPM database (--rebuilddb) (bsc#1209565) +- 4.5.2 + yast2-update +- Rebuild the RPM database during upgrade (--rebuilddb) (bsc#1209565) +- 4.5.3 +