Packages changed: Mesa (22.1.7 -> 22.2.0) Mesa-drivers (22.1.7 -> 22.2.0) btrfsprogs (5.19 -> 5.19.1) expat (2.4.8 -> 2.4.9) glibc grep gtksourceview5 (5.6.0 -> 5.6.1) kernel-source (5.19.8 -> 5.19.10) kwayland logrotate pangomm1_4 (2.46.2 -> 2.46.3) python-atspi (2.45.90 -> 2.46.0) redis (7.0.4 -> 7.0.5) rpm-config-SUSE (20220921 -> 20220421) tuned === Details === ==== Mesa ==== Version update (22.1.7 -> 22.2.0) Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - update to 22.2.0 * AMD RDNA3 Prep, Intel Arc Graphics, Many Vulkan Improvements; more details on Phoronix: https://www.phoronix.com/news/Mesa-22.2-Released - supersedes llvm15.patch - refreshed n_no-sse2-on-ix86-except-for-intel-drivers.patch ==== Mesa-drivers ==== Version update (22.1.7 -> 22.2.0) Subpackages: Mesa-dri Mesa-gallium Mesa-libva - update to 22.2.0 * AMD RDNA3 Prep, Intel Arc Graphics, Many Vulkan Improvements; more details on Phoronix: https://www.phoronix.com/news/Mesa-22.2-Released - supersedes llvm15.patch - refreshed n_no-sse2-on-ix86-except-for-intel-drivers.patch ==== btrfsprogs ==== Version update (5.19 -> 5.19.1) Subpackages: btrfsprogs-udev-rules libbtrfs0 - update to 5.19.1: * fix memory leaks (extent buffer, path) * check: verify block device size vs item * rescue fix-device-size: allow to shrink device item * receive: fix crash on wrong pinter free() * other: * experimental: support for block-group-tree * documentation updates * new tests ==== expat ==== Version update (2.4.8 -> 2.4.9) Subpackages: libexpat1 - update to 2.4.9: (bsc#1203438) * Security fixes: - CVE-2022-40674 -- Heap use-after-free vulnerability in function doContent. Expected impact is denial of service or potentially arbitrary code execution. * Bug fixes: - MinGW: Fix mis-compilation for -D__USE_MINGW_ANSI_STDIO=0 - docs: Fix documentation on effect of switch XML_DTD on symbol visibility in doc/reference.html * Other changes: - MinGW: Make fix-xmltest-log.sh drop more Wine bug output - Autotools: Sync CMake templates with CMake 3.22 - CMake: Migrate from use of CMAKE_*_POSTFIX to dedicated variables EXPAT_*_POSTFIX to stop affecting other projects - Windows|CMake: Add missing -DXML_STATIC to test runners and fuzzers - Windows|CMake: Render .def file from a template to fix linking with -DEXPAT_DTD=OFF and/or -DEXPAT_ATTR_INFO=ON - MinGW|CMake: Apply MSVC .def file when linking - MinGW|CMake: Sync library name with GNU Autotools, i.e. produce libexpat-1.dll rather than libexpat.dll by default. Filename libexpat.dll.a is unaffected. - MinGW|CMake: Set missing variable CMAKE_RC_COMPILER in toolchain file "cmake/mingw-toolchain.cmake" to avoid error "windres: Command not found" on e.g. Ubuntu 20.04 - CMake: Unify inconsistent use of set() and option() in context of public build time options to take need for set(.. FORCE) in projects using Expat by means of add_subdirectory(..) off Expat's users' shoulders - Stop exporting API symbols when building a static library - Resolve use of deprecated "fgrep" by "grep -F" - CMake: Make documentation on variables a bit more consistent - CMake: Drop leading whitespace from a #cmakedefine line in file expat_config.h.cmake - xmlwf: Fix harmless variable mix-up in function nsattcmp - Address Cppcheck warnings - Address Clang 15 compiler warnings - Version info bumped from 9:8:8 to 9:9:8; see https://verbump.de/ for what these numbers do * Infrastructure: - CI: Windows: Start covering MSVC 2022 - CI: macOS: Migrate off deprecated macOS 10.15 - CI: Linux: Make migration off deprecated Ubuntu 18.04 work - CI: Upgrade Clang from 14 to 15 - apply-clang-format.sh: Add support for BSD find - coverage.sh: Exclude MinGW headers - coverage.sh: Fix name collision for -funsigned-char ==== glibc ==== Subpackages: glibc-extra glibc-lang glibc-locale glibc-locale-base nscd - makeflags.patch: Makerules: fix MAKEFLAGS assignment for upcoming make-4.4 (BZ# 29564) ==== grep ==== Subpackages: grep-lang - efgrep-warning.patch: remove warning from [ef]grep ==== gtksourceview5 ==== Version update (5.6.0 -> 5.6.1) Subpackages: gtksourceview5-lang libgtksourceview-5-0 - Update to version 5.6.1: + Improve resilience of GtkSourceHover assistants to prevent unbreakable grabs by application added widgets. + Hide all assistants when unmapping GtkSourceViews. + Don't dismiss hover delay timeout from pointer clicks, allow them to click through to display hover information. + Don't show new assistants unless parent GtkSourceView is mapped. This can improve situations with tabbed editors and asynchronous operations to load completion, hover data, etc. + Additional Vim commands. + Updated languages: go.lang. + Updated translations. ==== kernel-source ==== Version update (5.19.8 -> 5.19.10) - Revert "iommu/vt-d: Fix possible recursive locking in intel_iommu_init()" (iommu bug). - commit 9392b7d - Linux 5.19.10 (bsc#1012628). - Input: goodix - add compatible string for GT1158 (bsc#1012628). - RDMA/irdma: Use s/g array in post send only when its valid (bsc#1012628). - gpio: 104-idio-16: Make irq_chip immutable (bsc#1012628). - gpio: 104-dio-48e: Make irq_chip immutable (bsc#1012628). - LoongArch: Fix arch_remove_memory() undefined build error (bsc#1012628). - LoongArch: Fix section mismatch due to acpi_os_ioremap() (bsc#1012628). - platform/x86: asus-wmi: Increase FAN_CURVE_BUF_LEN to 32 (bsc#1012628). - usb: storage: Add ASUS <0x0b05:0x1932> to IGNORE_UAS (bsc#1012628). - platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes (bsc#1012628). - perf/arm_pmu_platform: fix tests for platform_get_irq() failure (bsc#1012628). - net: dsa: hellcreek: Print warning only once (bsc#1012628). - drm/amd/amdgpu: skip ucode loading if ucode_size == 0 (bsc#1012628). - nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change() (bsc#1012628). - nvme-pci: add NVME_QUIRK_BOGUS_NID for Lexar NM610 (bsc#1012628). - drm/amd/pm: use vbios carried pptable for all SMU13.0.7 SKUs (bsc#1012628). - drm/amdgpu: disable FRU access on special SIENNA CICHLID card (bsc#1012628). - Input: iforce - add support for Boeder Force Feedback Wheel (bsc#1012628). - ieee802154: cc2520: add rc code in cc2520_tx() (bsc#1012628). - gpio: mockup: remove gpio debugfs when remove device (bsc#1012628). - r8152: add PID for the Lenovo OneLink+ Dock (bsc#1012628). - tg3: Disable tg3 device on system reboot to avoid triggering AER (bsc#1012628). - Bluetooth: MGMT: Fix Get Device Flags (bsc#1012628). - hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message (bsc#1012628). - HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo (bsc#1012628). - dt-bindings: iio: gyroscope: bosch,bmg160: correct number of pins (bsc#1012628). - kvm: x86: mmu: Always flush TLBs when enabling dirty logging (bsc#1012628). - peci: cpu: Fix use-after-free in adev_release() (bsc#1012628). - drm/msm/rd: Fix FIFO-full deadlock (bsc#1012628). - platform/surface: aggregator_registry: Add support for Surface Laptop Go 2 (bsc#1012628). - Input: goodix - add support for GT1158 (bsc#1012628). - ACPI: resource: skip IRQ override on AMD Zen platforms (bsc#1012628). - RDMA/mlx5: Fix UMR cleanup on error flow of driver init (bsc#1012628). - RDMA/mlx5: Add a umr recovery flow (bsc#1012628). - RDMA/mlx5: Rely on RoCE fw cap instead of devlink when setting profile (bsc#1012628). - net/mlx5: Use software VHCA id when it's supported (bsc#1012628). - net/mlx5: Introduce ifc bits for using software vhca id (bsc#1012628). - iommu/vt-d: Fix kdump kernels boot failure with scalable mode (bsc#1012628). - commit 28d7d4c - Linux 5.19.9 (bsc#1012628). - efi: libstub: Disable struct randomization (bsc#1012628). - efi: capsule-loader: Fix use-after-free in efi_capsule_write (bsc#1012628). - wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd() (bsc#1012628). - fs: only do a memory barrier for the first set_buffer_uptodate() (bsc#1012628). - soc: fsl: select FSL_GUTS driver for DPIO (bsc#1012628). - Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()" (bsc#1012628). - scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX (bsc#1012628). - scsi: core: Allow the ALUA transitioning state enough time (bsc#1012628). - scsi: megaraid_sas: Fix double kfree() (bsc#1012628). - drm/gem: Fix GEM handle release errors (bsc#1012628). - drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini (bsc#1012628). - drm/amdgpu: fix hive reference leak when adding xgmi device (bsc#1012628). - drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup (bsc#1012628). - drm/amdgpu: Remove the additional kfd pre reset call for sriov (bsc#1012628). - drm/radeon: add a force flush to delay work when radeon (bsc#1012628). - scsi: ufs: core: Reduce the power mode change timeout (bsc#1012628). - Revert "parisc: Show error if wrong 32/64-bit compiler is being used" (bsc#1012628). ... changelog too long, skipping 298 lines ... - commit 23d9d61 ==== kwayland ==== - Add upstream fix (kde#459188) * 0001-client-plasmashell-add-fallback-for-applet-popups.patch ==== logrotate ==== - Ignoring vendor logs settings in /usr/etc/logrotate.d if they have already been defined by the the admin in the /etc/logrotate.d directory (bsc#1173319). - Removed logrotate-3.20.0-man_logrotate.patch. - Added logrotate-vendor-dir.patch ==== pangomm1_4 ==== Version update (2.46.2 -> 2.46.3) - Update to version 2.46.3: + Context::get_font_map(): Fix reference count. + Build: - Require Meson >= 0.55.0 - Meson build: . Specify 'check' option in run_command(). Will be necessary with future versions of Meson. . Check if Perl is required for building documentation. . Avoid unnecessary configuration warnings. . Re-organize warning-related compiler flags for MSVC. ==== python-atspi ==== Version update (2.45.90 -> 2.46.0) - Update to version 2.46.0: + No changes, stable bump only. ==== redis ==== Version update (7.0.4 -> 7.0.5) - Update to version 7.0.5 (boo#1203638) + Security Fixes: * (CVE-2022-35951) Executing a XAUTOCLAIM command on a stream key in a specific state, with a specially crafted COUNT argument, may cause an integer overflow, a subsequent heap overflow, and potentially lead to remote code execution. The problem affects Redis versions 7.0.0 or newer [reported by Xion (SeungHyun Lee) of KAIST GoN]. + Module API changes * Fix RM_Call execution of scripts when used with M/W/S flags to properly handle script flags (#11159) * Fix RM_SetAbsExpire and RM_GetAbsExpire API registration (#11025, #8564) + Bug Fixes * Fix a hang when eviction is combined with lazy-free and maxmemory-eviction-tenacity is set to 100 (#11237) * Fix a crash when a replica may attempt to set itself as its master as a result of a manual failover (#11263) * Fix a bug where a cluster-enabled replica node may permanently set its master's hostname to '?' (#10696) * Fix a crash when a Lua script returns a meta-table (#11032) + Fixes for issues in previous releases of Redis 7.0 * Fix redis-cli to do DNS lookup before sending CLUSTER MEET (#11151) * Fix crash when a key is lazy expired during cluster key migration (#11176) * Fix AOF rewrite to fsync the old AOF file when a new one is created (#11004) * Fix some crashes involving a list containing entries larger than 1GB (#11242) * Correctly handle scripts with a non-read-only shebang on a cluster replica (#11223) * Fix memory leak when unloading a module (#11147) * Fix bug with scripts ignoring client tracking NOLOOP (#11052) * Fix client-side tracking breaking protocol when FLUSHDB / FLUSHALL / SWAPDB is used inside MULTI-EXEC (#11038) * Fix ACL: BITFIELD with GET and also SET / INCRBY can be executed with read-only key permission (#11086) * Fix missing sections for INFO ALL when also requesting a module info section (#11291) ==== rpm-config-SUSE ==== Version update (20220921 -> 20220421) ==== tuned ==== - Use %_modprobedir - Move dbus-1 system.d file to /usr (bsc#1202339)