Packages changed: alsa-plugins ell (0.54 -> 0.55) exo (4.16.4 -> 4.18.0) gstreamer (1.20.4 -> 1.20.5) gstreamer-plugins-bad (1.20.4 -> 1.20.5) gstreamer-plugins-base (1.20.4 -> 1.20.5) gstreamer-plugins-good (1.20.4 -> 1.20.5) gstreamer-plugins-libav (1.20.4 -> 1.20.5) gstreamer-plugins-ugly (1.20.4 -> 1.20.5) opencc (1.1.4 -> 1.1.6) pam-full-src permissions (1599_20220912 -> 1599_20221220) python-httpcore (0.15.0 -> 0.16.3) samba (4.17.3+git.283.2157972742b -> 4.17.4+git.300.305b22bfce) spamassassin (3.4.6 -> 4.0.0) tcl thunar (4.16.11 -> 4.18.1) thunar-volman (4.16.0 -> 4.18.0) tumbler (4.16.1 -> 4.18.0) xfce4-panel (4.16.5 -> 4.18.0) xfconf (4.16.0 -> 4.18.0) xfdesktop (4.16.1 -> 4.18.0) xfwm4 (4.16.1 -> 4.18.0) === Details === ==== alsa-plugins ==== Subpackages: alsa-plugins-pulse alsa-plugins-pulse-32bit alsa-plugins-speexrate alsa-plugins-upmix - Replace pkgconfig(libavresample) with pkgconfig(libswresample) BuildRequires as rate-lav was ported to use the latter. ==== ell ==== Version update (0.54 -> 0.55) - update to 0.55: * Fix issue with DHCP and blocked unicast requests. ==== exo ==== Version update (4.16.4 -> 4.18.0) Subpackages: exo-data exo-lang exo-tools libexo-2-0 - Update to version 4.18.0 * Bump requirements for Xfce 4.18 * Translation Updates ==== gstreamer ==== Version update (1.20.4 -> 1.20.5) Subpackages: gstreamer-lang gstreamer-utils libgstreamer-1_0-0 typelib-1_0-Gst-1_0 - update to 1.20.5: + This release only contains bugfixes and it should be safe to upgrade from 1.20.x. + systemclock waiting fixes for certain 32-bit platforms/libcs + alphacombine: robustness improvements for corner case scenarios + avfvideosrc: Report latency when doing screen capture + d3d11videosink: various thread-safety and stability fixes + decklink: fix performance issue when HDMI signal has been lost for a long time + flacparse: Fix handling of headers advertising 32 bits per sample + mpegts: Handle when iconv doesn't support ISO 6937 (e.g. musl libc) + opengl: fix automatic dispmanx detection for rpi4 and fix usage of eglCreate/DestroyImage + opusdec: Various channel-related fixes + textrender: event handling fixes, esp. for GAP event + subparse: Fix non-closed tag handling + videoscale: fix handling of unknown buffer metas + videosink: reverse playback handling fixes + qtmux: Prefill mode fixes, especially for raw audio + multiudpsink: allow binding to IPv6 address + rtspsrc: - Fix usage of IPv6 connections in SETUP - Only EOS on timeout if all streams are timed out/EOS + splitmuxsrc: fix playback stall if there are unlinked pads + v4l2: Fix SIGSEGV on state change during format changes + wavparse robustness fixes + Fix static linking on macOS (opengl, vulkan) + gstreamer-vaapi: fix headless build against mesa >= 22.3.0 + GStreamer Editing Services library: Fix build with tools disabled + webrtc example/demo fixes + unit test fixes for aesdec and rtpjitterbuffer + Cerbero: Fix ios cross-compile with cmake on M1; some recipe updates and other build fixes + Miscellaneous bug fixes, memory leak fixes, and other stability and reliability improvements + Performance improvements + Changes in gstreamer base package: - allocator: Copy allocator name in gst_allocator_register() - concat: Properly propagate EOS seqnum - fakesrc: avoid time overflow with datarate - Fix build of 1.20 branch with Meson 0.64.1 for those who have hotdoc installed on their system. - gst-inspect: Don't leak list - meson: fix check for pthread_setname_np() - miniobject: support higher refcount values - pads: Fix non-serialized sticky event push, e.g. instant change rate events - padtemplate: Fix annotations - systemclock: Use futex_time64 syscall on x32 and other platforms that always... - -Wimplicit-function-declaration in pthread_setname_np check (missing GNUSOURCE) ==== gstreamer-plugins-bad ==== Version update (1.20.4 -> 1.20.5) Subpackages: gstreamer-plugins-bad-lang libgstadaptivedemux-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstphotography-1_0-0 libgstplay-1_0-0 libgstplayer-1_0-0 libgstsctp-1_0-0 libgsturidownloader-1_0-0 libgstva-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 - Update to version 1.20.5: + aesdec: - Fix padding removal for per-buffer-padding=FALSE - Fix test failing in gst-plugins-bad + alphacombine: Add missing query handler for gaps + avfdeviceprovider: do not leak the properties + avfvideosrc: Report latency when doing screen capture + d3d11screencapturesrc: Specify PAR 1/1 to template caps + d3d11videosink: - Fixing focus lost on desktop layout change - Call ShowWindow() from window thread - Fix deadlock when parent window is busy - Always clear back buffer on resize + decklink: reset calculation of time_mapping to fix clipping HDMI video + directshow: Fix build error with glib 2.75 and newer + dvbsubenc: - Forward GAP events as-is if we wouldn't produce an end packet - Write Display Definition Segment if a non-default width/height is used + h265decoder: Do not abort when failed to prepare ref pic set + h264parser: Fix a typo in pred_weight_table parsing. + mediafoundation, d3d11: Fix memory leak and make leak tracer happy + mpegts: - Handle when iconv doesn't support ISO 6937 (e.g. musl libc) - Check continuity counter on section streams + mpegtsdemux: Always clear packetizer on DISCONT push mode + srt: various fixes - improve stats and error handling + rtmp2: Improve error messages + rtmp2sink: Correctly return GST_FLOW_ERROR on error + vulkan: Fix static linking on macOS + webrtcbin: also add rtcp-fb ccm fir for video mlines by default + webrtc/nice: fix small leak of split strings ==== gstreamer-plugins-base ==== Version update (1.20.4 -> 1.20.5) Subpackages: gstreamer-plugins-base-lang libgstallocators-1_0-0 libgstapp-1_0-0 libgstaudio-1_0-0 libgstfft-1_0-0 libgstgl-1_0-0 libgstpbutils-1_0-0 libgstriff-1_0-0 libgstrtp-1_0-0 libgstrtsp-1_0-0 libgstsdp-1_0-0 libgsttag-1_0-0 libgstvideo-1_0-0 typelib-1_0-GstAudio-1_0 typelib-1_0-GstPbutils-1_0 typelib-1_0-GstTag-1_0 typelib-1_0-GstVideo-1_0 - Update to version 1.20.5: + audioconvert, audioresample, audiofilter: fix divide by 0 for input buffer without caps + cdparanoia: Ignore compiler warning coming from the cdparanoia header + oggdemux, parsebin: More leak fixes + opengl: - Fix automatic dispmanx detection for rpi4 - Fix usage of eglCreate/DestroyImage - Fix static linking on macOS + Bump core requirement in 1.20 branch to 1.20.4 + oggdemux: Don't leak incoming EOS event + opusdec: Various channel-related fixes + subparse: Fix non-closed tag handling. + textrender: - Don't blindly forward all events and don't blindly forward all events - Negotiate caps on a GAP event if none were negotiated yet + timeoverlay: fix pad leak + videodecoder: Only post latency message if it changed + videoscale: buffer meta handling fixes (NULL-terminate array of valid meta tags) + videosink: Don't return unknown end-time from get_times() ==== gstreamer-plugins-good ==== Version update (1.20.4 -> 1.20.5) Subpackages: gstreamer-plugins-good-extra gstreamer-plugins-good-gtk gstreamer-plugins-good-jack gstreamer-plugins-good-lang gstreamer-plugins-good-qtqml - Update to version 1.20.5: + flacparse: Fix handling of headers advertising 32bps + multiudpsink: allow binding to IPv6 address + oss4: Fix debug category initialization + qt5: - Deactivate context if fill_info fails - Initialize GError properly in gst_qt_get_gl_wrapcontext() + qtdemux: - Check return value from gst_structure_get in PIFF box - Use unsigned int types to store result of QT_UINT32 - Prefill mode fixes + rtpjitterbuffer tests: Cast drop-messages-interval type properly (fixing it on 32-bit architectures) + rtspsrc: - Don't replace 404 errors with "no auth protocol found" - Fix seek event leaks - Fix usage of IPv6 connections in SETUP - Only EOS on timeout if all streams are timed out/EOS + splitmuxsrc: don't queue data on unlinked pads + v4l2: Fix SIGSEGV on 'change state' during 'format change' + v4l2videodec: Fix activation of internal pool + wavparse: - Avoid occasional crash due to referencing freed buffer. - Fix crash that occurs in push mode when header chunks are corrupted in certain ways. ==== gstreamer-plugins-libav ==== Version update (1.20.4 -> 1.20.5) - Update to version 1.20.5: + avdec_h265: Fix endless renegotiation with alternate interlacing + avviddec: Avoid flushing on framerate changes ==== gstreamer-plugins-ugly ==== Version update (1.20.4 -> 1.20.5) Subpackages: gstreamer-plugins-ugly-lang - Update to version 1.20.5: + No changes, version bump only. ==== opencc ==== Version update (1.1.4 -> 1.1.6) Subpackages: libopencc1_1 opencc-data - update to 1.1.6: * FTBFS for MacOS w/ Python 3.11 * Support Python 3.11 * Automatically name SO files * Add support for Apple silicon build tag * other minor fixes ==== pam-full-src ==== - Also obsolete pam_unix-32bit to have clean upgrade path. - Merge pam_unix back into pam, seperate package not needed anymore - Update pam-git.diff to current upstream - pam_env: Use vendor specific pam_env.conf and environment as fallback - pam_shells: Use the vendor directory obsoletes pam_env_econf.patch - Refresh docbook5.patch ==== permissions ==== Version update (1599_20220912 -> 1599_20221220) Subpackages: chkstat permissions-config - Update to version 20221220: * profiles: remove outdated kdesud, apptainer entries ==== python-httpcore ==== Version update (0.15.0 -> 0.16.3) - Update to 0.16.3 * Allow ws and wss schemes. Allows us to properly support websocket upgrade connections. (#625) * Forwarding HTTP proxies use a connection-per-remote-host. Required by some proxy implementations. (#637) * Don't raise RuntimeError when closing a connection pool with active connections. Removes some error cases when cancellations are used. (#631) * Lazy import anyio, so that it's no longer a hard dependancy, and isn't imported if unused. (#639) - Add httpcore-allow-deprecationwarnings-test.patch gh#encode/httpcore#511, gh#agronholm/anyio#470 - update to 0.16.2: * Revert 'Fix async cancellation behaviour', which introduced race conditions * Raise RuntimeError if attempting to us UNIX domain sockets on Windows * Fix HTTP/1.1 interim informational responses, such as "100 Continue" * Support HTTP/1.1 informational responses. * Fix async cancellation behaviour. * Support h11 0.14 ==== samba ==== Version update (4.17.3+git.283.2157972742b -> 4.17.4+git.300.305b22bfce) Subpackages: libsamba-policy0-python3 samba-ad-dc-libs samba-ad-dc-libs-32bit samba-client samba-client-32bit samba-client-libs samba-client-libs-32bit samba-gpupdate samba-ldb-ldap samba-libs samba-libs-32bit samba-libs-python3 samba-python3 samba-winbind samba-winbind-libs samba-winbind-libs-32bit - Update to 4.17.4 * CVE-2022-44640 Upstream Heimdal free of user-controlled pointer in FAST; (bsc#14929); * CVE-2021-20251 Bad password count not incremented atomically; (bsc#14611); * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability; (bsc#15203); * CVE-2022-37966 rc4-hmac Kerberos session keys issued to modern servers; (bso#15237); * CVE-2022-37967 Kerberos constrained delegation ticket forgery possible against Samba AD DC; (bso#15231); * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided; (bso#15240); * pam_winbind uses time_t and pointers assuming they are of the same size; (bso#15224); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); * filter-subunit is inefficient with large numbers of knownfails; (bso#15258); * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories; (bso#15252); * The KDC logic arround msDs-supportedEncryptionTypes differs from Windows; (bso#13135); * libnet: change_password() doesn't work with dcerpc_samr_ChangePasswordUser4(); (bso#15206); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); * Memory leak in snprintf replacement functions; (bso#15230); * RODC doesn't reset badPwdCount reliable via an RWDC (CVE-2021-20251 regression); (bso#15253); * Prevent EBADF errors with vfs_glusterfs; (bso#15198); * %U for include directive doesn't work for share listing (netshareenum); (bso#15243); * Stack smashing in net offlinejoin requestodj; (bso#15257); * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue; (bso#15197); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); - Remove deprecated if-{down,up} scripts; (bsc#1206444); - Adjust the systemd drop-in file for named service; (bsc#1201689); * Paths are additive so do not repeat paths from named.service * Prefix the samba DLZ directory with "-" to ignore this path if it does not exists - Migration PAM settings to /usr/etc: Saving user changed configuration files in /etc and restoring them while an RPM update. ==== spamassassin ==== Version update (3.4.6 -> 4.0.0) Subpackages: perl-Mail-SpamAssassin spamassassin-spamc - Add BuildRequires Text::Diff that was accidentally removed from original submission - Update known warnings % spamassassin-rpmlintrc - Update to spamassissin 4.0.0: * Notable internal changes: - Meta rules no longer use priority values, they are evaluated dynamically when the rules they depend on are finished - DNS and other asynchronous lookups like DCC or Razor2 plugins are now launched when priority -100 is reached. This allows short circuiting at lower priority without sending unneeded DNS queries - New internal Mail::SpamAssassin::GeoDB module supporting RelayCountry and URILocalBL plugins provides a unified interface to Geographic IP modules. These include: MaxMind::DB::Reader (GeoIP2) Geo::IP IP::Country::DB_File IP::Country::Fast. * New plugins: - Mail::SpamAssassin::Plugin::ExtractText - Mail::SpamAssassin::Plugin::DMARC - Mail::SpamAssassin::Plugin::DecodeShortURLs * HashCash module has been removed completely * Full detailed changelog: https://svn.apache.org/repos/asf/spamassassin/trunk/Changes - Update to iXhash2 4.00: * Minimum required version: SpamAssassin 4.0.0 - Update to spampd 2.61: * Performance and diagnostic improvements, quicker startups, and a lot of documentation updates. * Add support for configuration files (examples included in /misc folder and in POD). * Add optional "scalable mode" using Net::Server::PreFork module (16-year TODO!). More info in POD. * Add --logfile option to control logging destination(s) (syslog, stderr, and/or file/device). * Add --logident, --logfacility options for syslog. * Add multiple levels of help, including full "man" output with optional HTML formatting. * Add --show argument for printing default option values and other debug. * Fix SpamAssassin debug logging with versions 3.1+ (output was going to stderr/wrong syslog/null). * Fix for IPv6 addresses being used on --host and --relayhost options (was not possible due to ":" check). * SIGHUP will now reload SpamAssassin and SpamPD configuration files (and all module code), still with graceful child process shutdown. * Use SpamAssassin::Logger module (with SA 3.1+) for all logging. * Log to stderr by default if running non-daemonized * Child processes are now renamed to "spampd child" to distinguish them from the parent in task lists. * Now requires Net::Server v0.89+ (though latest 2.009 is recommended). * The --auto-whitelist option is no longer allowed with SpamAssassin v3+. * Improve --debug option, adding ability to specify SpamAssassin (v3.1+) debug areas (aka channels/facilities). * All boolean options can take 0/1 argument and be negated with "no-" prefix. * The --children (-c) option is now more formally named - -max-servers (-mxs), but still accepted. * IO::Socket::UNIX and ::IP are only required if actually needed for --relaysocket / --relayhost options. ==== tcl ==== - bsc#1206623, tcl-string-compare.patch: Fix a bug in string comparison on big endian that made test string-2.20.1 fail. ==== thunar ==== Version update (4.16.11 -> 4.18.1) Subpackages: libthunarx-3-0 thunar-lang - Update to version 4.18.1 * Fix several thumbnailing issues * 'replace' option fixed for copy with '*.partial~' (gxo#xfce/thunar#974) * Preserve trusted state when launchers are copied * Don't reset zoom-level for directory specific settings (gxo#xfce/thunar#970) * Prevent build failure for NixOS (gxo#xfce/thunar#972) * Prevent location bar crash (gxo#xfce/thunar#968) * Translation Updates - Update to version 4.18.0: New features: (see https://alexxcons.github.io/blogpost_8.html) - List View - Image Preview - Undo and Redo - File Highlight - Customizable Toolbar - Split View - Statusbar - Recursive Search - Recently used files shown in the side pane - New Bookmark Menu - Trash directory with easy access to `Empty Trash' and `Restore' functionality - Improvements to the Default Applications management - Custom Actions can be arranged in cascading submenus - Preferences dialogs got streamlined Bug fixes: * Dont reset zoom-level for directory specific settings (gxo#xfce/thunar#970) * Prevent build failure for NixOS (gxo#xfce/thunar#972) * Prevent location bar crash (gxo#xfce/thunar#968) * build: Let xdt-depends.m4 macros set GLib macros * Translate the string "Search: " (gxo#xfce/thunar#953) * Fix typo in tooltip - Bump build requirements for 4.18.0 - Remove _service stuff ==== thunar-volman ==== Version update (4.16.0 -> 4.18.0) Subpackages: thunar-volman-lang - Update to version 4.18.0: * Bump build requirements for Xfce 4.18.0 - Update to 4.17.1: * bump copyright year * Drop subtitle from settings dialog - Update to 4.17.0: * autoconf: Use AC_CONFIG_MACRO_DIRS * build: Fix intltool lock file problem during make distcheck * Update COPYING * Fix compilation warnings * automake: Enable subdir-objects * autoconf: Some updates * Update `.gitignore` * Replace ExoBinding with GBinding * Remove GSourceFunc casts (!5) * Translation Updates: Arabic, Belarusian, Catalan, Croatian, Czech, Estonian, Galician, Greek, Hebrew, Hindi, Norwegian Bokmål, Occitan (post 1500), Romanian, Russian, Spanish, Turkish ==== tumbler ==== Version update (4.16.1 -> 4.18.0) Subpackages: libtumbler-1-0 tumbler-folder-thumbnailer tumbler-lang tumbler-webp-thumbnailer - Update to version 4.18.0 * Bump requirements for Xfce 4.18 * Performance improvements for the pixbuf-thumbnailer and the scheduler * Implement multiple overwrite options for the desktop-thumbnailer * Add support for the thumbnail sizes x-large and xx-large, which are very useful for high resolution displays * Tumbler and Thunar now support shared thumbnail repositories, like described in the freedesktop.org thumbnail specification. This feature can be used to produce thumbnails for a folder in advance, directly located near the pictures. Like that, the thumbnails don't need to be re-generated for each individual user. * tumbler.rc: Fix typo in explanatory comment * For the full list of changes from the 4.17 development branch see the packaged NEWS file. - Restore RAW tumbnailer as issue with libopenraw 0.3 should be fixed ==== xfce4-panel ==== Version update (4.16.5 -> 4.18.0) Subpackages: libxfce4panel-2_0-4 xfce4-panel-lang xfce4-panel-restore-defaults - Update to version 4.18.0 * Bump requirements for Xfce 4.18 * Translation Updates ==== xfconf ==== Version update (4.16.0 -> 4.18.0) Subpackages: libxfconf-0-3 typelib-1_0-Xfconf-0 xfconf-lang - Update to version 4.18.0 * Bump requirements for Xfce 4.18 * xfconf: Prevent Use-After-Free in GClosureNotify ==== xfdesktop ==== Version update (4.16.1 -> 4.18.0) Subpackages: xfdesktop-lang - Rebase xfdesktop-default-background-image.patch for Xfce 4.18 - Add *.svg wallpapers to the file list - Update to version 4.18.0 * Bump requirements for Xfce 4.18 * Add wallpapers of Xfce 4.18 wallpaper contest * Delete" menu entry in the context menu can now be hidden. * On pressing 'rearrange desktop icons', the user is asked for confirmation * Translation Updates * For the complete list of changes from the development branch 4.17 please see the packaged NEWS file - Removed unused _service file ==== xfwm4 ==== Version update (4.16.1 -> 4.18.0) Subpackages: xfwm4-lang - Update version to 4.18.0 * Bump requirements for Xfce 4.18 * Added functionality to move window to another monitor * Added radio buttons and checkboxes to window menu * bump copyright to 2022 * Change dialog help and close button icons * cleanup: Don't use parenthesis when returning constants * client: Do not hide transients for group if above * client: Fix * client: Get the GdkDisplay from ScreenInfo * client: Handle removal of GTK_FRAME_EXTENTS * client: Move getSizeExcludingMargins() * client: No need to always reconfigure on monitor change * client: Preserve saved position on monitor change * client: Toggle from partial maximization to unmaximize * client: Update workarea only for windows with struts * client.c: fix a little typo * client.h: move STRUTS_SIZE to hints.h * common: xfwm_get_monitor_geometry() report fail via return code, fix potential NULL * compositor: Add support for adaptive vsync with GLX * compositor: Add throttled repaint * compositor: Clear root backing pixmap before use * compositor: Damage window when adding the opaque region * compositor: Disable GLX on mutli-screen (Zaphod) * compositor: Disable GLX vblank with virgl * compositor: Do not clear timeout on retry * compositor: Do not set deprecated compositor selection * compositor: fix ifdef * compositor: fix printf format strings * compositor: Fix repaint timeout * configure.ac.in: configure option to enable poswin * configure.ac.in: drop obsolete check for libSM * configure.ac.in: drop unused HAVE_CYGWIN conditional * configure.ac.in: fix obsolete AC_HEADER_STDC / obsolete checks * configure.ac.in: replace obsolete AC_HELP_STRING * display: check for XResQueryClientIds to enable XRes extension. * drop obsolete and unsupported KDE systray protocol * Drop subtitle and use symbolic close icon * Drop subtitle from workspace settings dialog * Fix build warnings * Fix intltool lock file bug in make distcheck * focus: Check for user focus for when passing focus * focus: Fix focus being lost on workspace switch * gitignore: add files generated by distcheck * icons: Check XGetGeometry() appropriate return value * icons: Gracefully handle non-existent icons * Make workspace setting workable with other window managers * Makefile.am: remove stale intltool-merge lockfile * menu: Small code cleanup * Merge branch 'drsudo/xfwm4-layerRadioBox' * netwm: Do not use _NET_WM_PING in multi-screen * netwm: Fix clientValidateNetStrut() * netwm.c: simplify and optimize struts array * placement: Add new function to compute the max space available * placement: Auto-maximize windows with both width and height * placement: clientMaxSpace() drop unused variable * placement: Compute struts using output scale * placement: Factorize max space computation * placement: Fix the initial position * placement: Ignore struts from windows on other monitors * placement: Remove the "same monitor" param * placement: Restack fullscreen window when necessary * placement: Small cleanup * placement: Use a GdkRectangle instead of multiple coords * placement: Windows on different screens cannot overlap * Post release tag bump * poswin: Fix location with client-side decorations * Remove redundant code * Replace stock icons * screen: Add a new API to get the screen max space * settings-dialogs: Remove ENABLE_NLS ifdefs * settings: Enable either windows wrap or tiling * settings: Fix untranslatable string * stacking: Above goes on top of fullscreen * startup-notification: Fix timeout computation * startup-notification: Reduce timeout to 10 seconds * Translation Updates * ui_style: drop unused getUIPangoContext() * updated NEWS * Use symbolic icons * wireframe: add window class hint to wireframes * workspace: Update maximized on struts change * xfce-wm-menu.png: Fix the 22x22 icon size