Please note that this mail was generated by a script.
The described changes are computed based on the aarch64 DVD.
The full online repo contains too many changes to be listed here.

Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=3&version=Tumbleweed&build=20240303

Please do not reply to this email to report issues, rather file a bug
on bugzilla.opensuse.org. For more information on filing bugs please
see https://en.opensuse.org/openSUSE:Submitting_bug_reports

Packages changed:
  AppStream (1.0.1 -> 1.0.2)
  ImageMagick (7.1.1.26 -> 7.1.1.29)
  apparmor
  bash
  bluez
  coreutils
  coreutils-systemd
  cyrus-sasl
  dcraw
  dmraid
  fillup
  findutils
  gdm
  glibc
  gmp
  gnu-unifont-fonts (15.1.04 -> 15.1.05)
  google-noto-fonts (20240101 -> 20240301)
  gpm
  gzip
  irda
  kbd
  kernel-firmware (20240220 -> 20240229)
  kernel-source (6.7.6 -> 6.7.7)
  libX11
  libXcursor (1.2.1 -> 1.2.2)
  libXdmcp (1.1.4 -> 1.1.5)
  libaio
  libao
  libapparmor
  libatasmart
  libavc1394
  libbase
  libcddb
  libdb-4_8
  libe-book
  libev
  libevent
  libfontenc (1.1.7 -> 1.1.8)
  libfonts
  libformula
  libgpod
  libgsm
  libixion
  libkate
  libloader
  libmad
  libmetalink
  libmpd
  libmspub
  libmwaw
  libnscd
  liboauth
  libofa
  libogg
  liborcus
  libotf
  libpcap
  libpciaccess
  libraw1394
  librepository
  libsamplerate
  libserializer
  libspectre
  libstorage-ng (4.5.193 -> 4.5.197)
  libunwind (1.8.0 -> 1.8.1)
  libvdpau
  libvisual
  libvorbis
  libxcb (1.16 -> 1.16.1)
  live555
  lmdb
  lomoco
  luajit (5.1.2.1.0+git.1693350652.41fb94d -> 5.1.2.1.0+git.1707061634.0d313b2)
  m4
  mc (4.8.30 -> 4.8.31)
  netcontrol
  openblas_openmp (0.3.25 -> 0.3.26)
  openblas_pthreads (0.3.25 -> 0.3.26)
  openslp
  openssl-3
  openssl
  pcmciautils
  pcr-oracle
  pcre
  pcsc-lite
  pentaho-libxml
  perl-IPC-Run3 (0.048 -> 0.49.0)
  perl-LWP-Protocol-https (6.110.0 -> 6.130.0)
  perl-URI (5.210.0 -> 5.270.0)
  perl-libwww-perl (6.720.0 -> 6.760.0)
  phalanx
  pipewire
  ppp
  pptp
  procinfo
  procmail
  procps
  psmisc
  ptools
  pwgen
  python-cffi
  python-pygit2 (1.14.0 -> 1.14.1)
  python311
  python311-core
  qemu
  qpdf (11.8.0 -> 11.9.0)
  rpm
  screen
  sharutils
  slang
  susefirewall2-to-firewalld
  tcl (8.6.13 -> 8.6.14)
  tgt
  time
  unbound (1.19.0 -> 1.19.1)
  update-alternatives
  xen
  xorg-x11-fonts
  xorg-x11-fonts-converted
  yast2-bootloader (5.0.5 -> 5.0.6)

=== Details ===

==== AppStream ====
Version update (1.0.1 -> 1.0.2)
Subpackages: libAppStreamQt5-3 libappstream5

- Update to 1.0.2
  Features:
  * qt: Allow building for multiple Qt major versions at once
  * Improve low-quality category check and extend its blacklist
  * validator: Add some limited developer-ID validation
  * validator: Emit an overridable warning if homepage URL was omitted
  * compose: Allow rendering vector graphics to HiDPI bitmaps unconditionally
  * compose: Allow setting a custom icon-policy on the command-line
  Specification:
  * docs: Mention that <summary/> tag can be translated
  * docs: Generate validation issue tag documentation from code
  * docs: Add information on how to exclude elements from translation
  * spec: Recommend using rDNS strings or Fediverse handles as developer-ID
  * spec: Make launchable requirement for desktop-apps more strict
  Bugfixes:
  * qt: Component::customValue should be const
  * validator: Remove mention of shorthands from 
relation-display-length-value-invalid
  * sysinfo: Swap arguments of g_pattern_match_simple
  * qt: Add missing screenshot sorting function
  * qt: pool: Add missing Q_EMIT keyword
  * validator: Improve error message if no valid categories were found
  * validator: Make some length limitations more strict
  * validator: Only emit developer-name-tag-deprecated once
  * validator: Ensure filename is properly included in location info again
  * validator: Improve error reporting on images with missing/bad locales
  * compose: Don't accidentally set icon scale to 0 in some cases
  * compose: Add heuristics to show out-of-scope errors if filters were set
  * Don't prematurely abort URL validity check during semi-large redirects
  * docs: Update supported hashsums to reflect reality
  * docs: Describe version comparison letters special case
  * docs: Clarify release descriptions *must not* contain embedded URL
  * docs: Explicitly mention /var/cache/swcatalog is a valid
    catalog data location
  * tests: Fix tests with old & new FontConfig
  * its: Allow untranslatable developer/name and agreement sections
  Miscellaneous:
  * compose: Clarify that "no valid category" can mean bad ones
    were ignored
  * news-convert: Don't strip out the last text in brackets
- Drop patch, merged upstream:
  * # 0001-Don-t-prematurely-abort-URL-validity-check-during-se.patch
- Add upstream change to fix potential URL validity check errors:
  * 0001-Don-t-prematurely-abort-URL-validity-check-during-se.patch

==== ImageMagick ====
Version update (7.1.1.26 -> 7.1.1.29)
Subpackages: ImageMagick-extra libMagickCore-7_Q16HDRI10 
libMagickWand-7_Q16HDRI10

- version update to 7.1.1.29
  https://github.com/ImageMagick/Website/blob/main/ChangeLog.md
- Use %patch -P N instead of deprecated %patchN.
- version update to 7.1.1.28
  https://github.com/ImageMagick/Website/blob/main/ChangeLog.md
- version update to 7.1.1.27
  https://github.com/ImageMagick/Website/blob/main/ChangeLog.md
- only one configuration again, based on upstream 'secure' policy
- other upstream policies packaged in documentation
- use correct policy.xml
- Fix incomplete removal of update-alternatives for config
- Replace obsolete 'otherproviders(imagick-%{config_spec})' with
  'Conflicts: imagick-%{config_spec}'

==== apparmor ====
Subpackages: apparmor-abstractions apparmor-docs apparmor-parser 
apparmor-profiles apparmor-utils python3-apparmor

- Remove workaround for boo#853019 in %postun parser -
  apparmor.service contains a more safe workaround.
  This also fixes boo#1220708 (missing daemon-reload).
- Add smbd-unix_chkpwd.diff to allow smbd to execute
  unix_chkpwd and fix other pam related denies; (boo#1220032).

==== bash ====
Subpackages: bash-doc bash-sh

- Harden bash to be compiled with gcc 14 (boo#1220564)
  * Modify patch bash-4.2-nscdunmap.dif to include <sys/mman.h>
  * Port bash-5.2.dif to the former change
  * Add patch bash-5.2-gcc14.patch

==== bluez ====
Subpackages: bluez-auto-enable-devices bluez-cups libbluetooth3

- Add necessary Supplements (gnome-bluetooth, blueman, bluedevil5)
  to bluez-obexd, so that file transfer features of the applications
  can be used by default (bsc#1209153).
- Update the description of bluez-obexd.

==== coreutils ====

- Use %patch -P N instead of deprecated %patchN.

==== coreutils-systemd ====

- Use %patch -P N instead of deprecated %patchN.

==== cyrus-sasl ====
Subpackages: cyrus-sasl-crammd5 cyrus-sasl-digestmd5 cyrus-sasl-gssapi 
cyrus-sasl-plain libsasl2-3

- Use %patch -P N instead of deprecated %patchN.

==== dcraw ====
Subpackages: dcraw-lang

- Add fix_gcc14_errors.patch (bsc#1220467)

==== dmraid ====

- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.
- Rebase 0001-remove-partitions-with-O_RDONLY.patch to apply -p1.

==== fillup ====

- Use %patch -P N instead of deprecated %patchN.

==== findutils ====

- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.

==== gdm ====
Subpackages: gdm-schema gdmflexiserver libgdm1 typelib-1_0-Gdm-1_0

- Add gdm-xvnc-start-session-failed.patch: None seat0 session runs
  without running launcher(bsc#1219205 glgo#GNOME/gdm#909).

==== glibc ====
Subpackages: glibc-devel glibc-extra glibc-locale glibc-locale-base nscd

- nsswitch.conf: Add systemd also for shadow lookups, use merge
  strategy for group lookups
- s390-clone-error-clobber-r7.patch: S390: Do not clobber r7 in clone (BZ
  [#31402])

==== gmp ====

- Use %patch -P N instead of deprecated %patchN.

==== gnu-unifont-fonts ====
Version update (15.1.04 -> 15.1.05)

- update to 15.1.05:
  * Plane 0: redraw all Hangul glyphs not in the Hangul Syllables
    range, so their style more closely resembles the style of the
    Hangul Syllables range
  * improve several glyphs in the range U+2100..U+214F
    Letterlike Symbols.
  * redraw U+013D LATIN CAPITAL LETTER L WITH CARON for better
    compatibility with other glyphs in the Czech and Slovak
    alphabets.
  * Planes 2 and 3: almost 600 new ideographs
  * Plane F: modify the Sitelen Pona script, added combining
    character indicators and adding several new glyphs since the
    last release

==== google-noto-fonts ====
Version update (20240101 -> 20240301)

- Update to 20240301
  * Fixes to Balinese, Sans Canadian Aboriginal, Sans Georgian
    and Kufi Arabic
- Remove fonttools build requires
- Delete old specfile constructs.

==== gpm ====
Subpackages: libgpm2

- Use %patch -P N instead of deprecated %patchN.

==== gzip ====

- Use %patch -P N instead of deprecated %patchN.

==== irda ====

- Use %patch -P N instead of deprecated %patchN.

==== kbd ====
Subpackages: kbd-legacy

- Use %patch -P N instead of deprecated %patchN.

==== kernel-firmware ====
Version update (20240220 -> 20240229)
Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k 
kernel-firmware-ath11k kernel-firmware-ath12k kernel-firmware-atheros 
kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm 
kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 
kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio 
kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek 
kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network 
kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform 
kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic 
kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial 
kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle 
kernel-firmware-usb-network

- Update to version 20240229 (git commit 977332782302):
  * amdgpu: Update VCN firmware binaries
  * Intel IPU2: Add firmware files
  * brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet
  * i915: Add Xe2LPD DMC v2.18
  * i915: Update MTL DMC v2.21

==== kernel-source ====
Version update (6.7.6 -> 6.7.7)

- mptcp: fix possible deadlock in subflow diag (git-fixes).
- mptcp: avoid printing warning once on client side (git-fixes).
- commit 1ff84c5
- Linux 6.7.7 (bsc#1012628).
- dmaengine: apple-admac: Keep upper bits of REG_BUS_WIDTH
  (bsc#1012628).
- scsi: smartpqi: Add new controller PCI IDs (bsc#1012628).
- scsi: smartpqi: Fix logical volume rescan race condition
  (bsc#1012628).
- tools: selftests: riscv: Fix compile warnings in hwprobe
  (bsc#1012628).
- tools: selftests: riscv: Fix compile warnings in cbo
  (bsc#1012628).
- tools: selftests: riscv: Fix compile warnings in vector tests
  (bsc#1012628).
- tools: selftests: riscv: Fix compile warnings in mm tests
  (bsc#1012628).
- scsi: target: core: Add TMF to tmr_list handling (bsc#1012628).
- cifs: open_cached_dir should not rely on primary channel
  (bsc#1012628).
- dmaengine: shdma: increase size of 'dev_id' (bsc#1012628).
- dmaengine: fsl-qdma: increase size of 'irq_name' (bsc#1012628).
- dmaengine: dw-edma: increase size of 'name' in debugfs code
  (bsc#1012628).
- wifi: cfg80211: fix missing interfaces when dumping
  (bsc#1012628).
- wifi: mac80211: fix race condition on enabling fast-xmit
  (bsc#1012628).
- fbdev: savage: Error out if pixclock equals zero (bsc#1012628).
- fbdev: sis: Error out if pixclock equals zero (bsc#1012628).
- platform/mellanox: mlxbf-tmfifo: Drop Tx network packet when
  Tx TmFIFO is full (bsc#1012628).
- spi: intel-pci: Add support for Arrow Lake SPI serial flash
  (bsc#1012628).
- spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were
  detected (bsc#1012628).
- block: Fix WARNING in _copy_from_iter (bsc#1012628).
- smb: Work around Clang __bdos() type confusion (bsc#1012628).
- cifs: cifs_pick_channel should try selecting active channels
  (bsc#1012628).
- cifs: translate network errors on send to -ECONNABORTED
  (bsc#1012628).
- cifs: helper function to check replayable error codes
  (bsc#1012628).
- ahci: asm1166: correct count of reported ports (bsc#1012628).
- aoe: avoid potential deadlock at set_capacity (bsc#1012628).
- spi: cs42l43: Handle error from devm_pm_runtime_enable
  (bsc#1012628).
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061
  controllers (bsc#1012628).
- ARM: dts: Fix TPM schema violations (bsc#1012628).
- drm/amd/display: Disable ips before dc interrupt setting
  (bsc#1012628).
- MIPS: reserve exception vector space ONLY ONCE (bsc#1012628).
- platform/x86: touchscreen_dmi: Add info for the TECLAST X16
  Plus tablet (bsc#1012628).
- ext4: avoid dividing by 0 in mb_update_avg_fragment_size()
  when block bitmap corrupt (bsc#1012628).
- ext4: avoid allocating blocks from corrupted group in
  ext4_mb_try_best_found() (bsc#1012628).
- ext4: avoid allocating blocks from corrupted group in
  ext4_mb_find_by_goal() (bsc#1012628).
- Input: goodix - accept ACPI resources with gpio_count == 3 &&
  gpio_int_idx == 0 (bsc#1012628).
- dmaengine: ti: edma: Add some null pointer checks to the
  edma_probe (bsc#1012628).
- ASoC: amd: acp: Add check for cpu dai link initialization
  (bsc#1012628).
- regulator: pwm-regulator: Add validity checks in continuous
  .get_voltage (bsc#1012628).
- HID: logitech-hidpp: add support for Logitech G Pro X Superlight
  2 (bsc#1012628).
- ALSA: hda: Replace numeric device IDs with constant values
  (bsc#1012628).
- ALSA: hda: Increase default bdl_pos_adj for Apollo Lake
  (bsc#1012628).
- HID: nvidia-shield: Add missing null pointer checks to LED
  initialization (bsc#1012628).
- nvmet-tcp: fix nvme tcp ida memory leak (bsc#1012628).
- usb: ucsi_acpi: Quirk to ack a connector change ack cmd
  (bsc#1012628).
- ALSA: usb-audio: Check presence of valid altsetting control
  (bsc#1012628).
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
  (bsc#1012628).
- ALSA: hda: cs35l41: Support additional ASUS Zenbook UX3402VA
  (bsc#1012628).
- ALSA: hda: cs35l41: Support ASUS Zenbook UM3402YAR
  (bsc#1012628).
- regulator (max5970): Fix IRQ handler (bsc#1012628).
- spi: sh-msiof: avoid integer overflow in constants
  (bsc#1012628).
- Input: xpad - add Lenovo Legion Go controllers (bsc#1012628).
- misc: open-dice: Fix spurious lockdep warning (bsc#1012628).
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag
  setting in sctp_new (bsc#1012628).
- drm/amdkfd: Use correct drm device for cgroup permission check
  (bsc#1012628).
- drm/amd/display: increased min_dcfclk_mhz and min_fclk_mhz
    ... changelog too long, skipping 511 lines ...
- commit ce46963

==== libX11 ====
Subpackages: libX11-6 libX11-data libX11-xcb1

- Trim descriptions for size (keep the big one for the prominently
  installed libX11-6).
- Spin documentation off to libX11-devel-doc, this saves buildroots
  800+ files and time (mandb is run in %posttrans).
- Use %patch -P N instead of deprecated %patchN.

==== libXcursor ====
Version update (1.2.1 -> 1.2.2)

- Update to version 1.2.2
  * gitlab CI: stop requiring Signed-off-by in commits
  * configure: Use LT_INIT from libtool 2 instead of deprecated
    AC_PROG_LIBTOOL
  * If O_CLOEXEC is defined, add "e" to fopen modes
  * Add comment about keeping libxcb-cursor copy of code in sync
  * XcursorXcFileLoad: plug memory leak in error paths
  * Remove superfluous and unguarded config.h include

==== libXdmcp ====
Version update (1.1.4 -> 1.1.5)

- Update to version 1.1.5
  * Remove "All rights reserved" from Oracle copyright notices
  * configure: Use LT_INIT from libtool 2 instead of deprecated
    AC_PROG_LIBTOOL
  * Xdmcp.h: add access attributes to function prototypes
  * Clear -Wunused-macros warnings when arc4random_buf() is available
  * XdmcpWriteHeader: drop unnecessary cast of free() argument
  * XdmcpWriteHeader: use calloc instead of malloc to alloc buffer
  * gitlab CI: add xz-utils to container for "make distcheck"

==== libaio ====

- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN

==== libao ====
Subpackages: libao-plugins4 libao4

- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN

==== libapparmor ====

- Remove workaround for boo#853019 in %postun parser -
  apparmor.service contains a more safe workaround.
  This also fixes boo#1220708 (missing daemon-reload).
- Add smbd-unix_chkpwd.diff to allow smbd to execute
  unix_chkpwd and fix other pam related denies; (boo#1220032).

==== libatasmart ====
Subpackages: libatasmart-utils libatasmart4

- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN

==== libavc1394 ====

- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN

==== libbase ====

- Use %patch -P N instead of deprecated %patchN.

==== libcddb ====

- Use %patch -P N instead of deprecated %patchN.

==== libdb-4_8 ====
Subpackages: db48-utils

- Use %patch -P N instead of deprecated %patchN.

==== libe-book ====

- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN

==== libev ====

- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN
- modified patches
  % libev-4.15_compiler_warnings.patch (refreshed)

==== libevent ====

- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN

==== libfontenc ====
Version update (1.1.7 -> 1.1.8)

- update to 1.1.8
  * This release includes build system cleanups and adds "e" to the
    fopen() flags to avoid leaking fd's when calling applications
    exec another program.

==== libfonts ====

- Use %patch -P N instead of deprecated %patchN.

==== libformula ====

- Use %patch -P N instead of deprecated %patchN.

==== libgpod ====
Subpackages: libgpod-tools libgpod4

- Use %patch -P N instead of deprecated %patchN.

==== libgsm ====

- Use %patch -P N instead of deprecated %patchN.

==== libixion ====

- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN

==== libkate ====
Subpackages: libkate1 liboggkate1

- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN

==== libloader ====

- Use %patch -P N instead of deprecated %patchN.

==== libmad ====

- Use %patch -P N instead of deprecated %patchN.

==== libmetalink ====

- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN

==== libmpd ====

- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN

==== libmspub ====

- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN

==== libmwaw ====

- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN

==== libnscd ====

- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN

==== liboauth ====

- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN

==== libofa ====

- Use %patch -P N instead of deprecated %patchN.

==== libogg ====

- Use %patch -P N instead of deprecated %patchN.

==== liborcus ====

- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN

==== libotf ====

- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN

==== libpcap ====

- Use %patch -P N instead of deprecated %patchN.

==== libpciaccess ====

- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN

==== libraw1394 ====

- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN

==== librepository ====

- Use %patch -P N instead of deprecated %patchN.

==== libsamplerate ====

- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN

==== libserializer ====

- Use %patch -P N instead of deprecated %patchN.

==== libspectre ====

- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN

==== libstorage-ng ====
Version update (4.5.193 -> 4.5.197)
Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1

- Translated using Weblate (Spanish) (bsc#1149754)
- 4.5.197
- Translated using Weblate (Portuguese (Brazil)) (bsc#1149754)
- 4.5.196
- Translated using Weblate (Italian) (bsc#1149754)
- merge gh#openSUSE/libstorage-ng#989
- simplify memory handling in SystemCmd class
- 4.5.195
- Translated using Weblate (German) (bsc#1149754)
- 4.5.194

==== libunwind ====
Version update (1.8.0 -> 1.8.1)

- Update to 1.8.1:
  * Fix issue #713 by @cshung in #717
  * Add do-release script by @bregma in #725
  * Backport dotnet-runtime fixes to the 1.8 branch by @bregma in #726
  * [v1.8] Make tests installable by @bregma in #722
  * Bump version to 1.8.1 by @bregma in #727

==== libvdpau ====

- Use %patch -P N instead of deprecated %patchN.

==== libvisual ====

- Use %patch -P N instead of deprecated %patchN.

==== libvorbis ====
Subpackages: libvorbis0 libvorbisenc2 libvorbisfile3

- Use %patch -P N instead of deprecated %patchN.

==== libxcb ====
Version update (1.16 -> 1.16.1)
Subpackages: libxcb-composite0 libxcb-damage0 libxcb-dpms0 libxcb-dri2-0 
libxcb-dri3-0 libxcb-glx0 libxcb-present0 libxcb-randr0 libxcb-record0 
libxcb-render0 libxcb-res0 libxcb-shape0 libxcb-shm0 libxcb-sync1 
libxcb-xfixes0 libxcb-xinerama0 libxcb-xinput0 libxcb-xkb1 libxcb-xv0 libxcb1

- Update to version 1.16.1
  * This release fixes build issues for Windows & NetBSD platforms
  * For those building for 32-bit platforms, it also enables use of
    the "large file" APIs - though xcb mainly uses stat() calls on
    sockets, not normal files.
- Use %patch -P N instead of deprecated %patchN.

==== live555 ====
Subpackages: libBasicUsageEnvironment2 libUsageEnvironment3 libgroupsock30 
libliveMedia112

- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN

==== lmdb ====

- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN

==== lomoco ====

- Use %patch -P N instead of deprecated %patchN.

==== luajit ====
Version update (5.1.2.1.0+git.1693350652.41fb94d -> 
5.1.2.1.0+git.1707061634.0d313b2)

- Update to version 5.1.2.1.0+git.1707061634.0d313b2:
  * Rework stack overflow handling.
  * Preserve keys with dynamic values in template tables when saving bytecode.
  * Prevent include of luajit_rolling.h.
  * Fix documentation bug about '\z' string escape.
  * Fix zero stripping in %g number formatting.
  * Fix unsinking of IR_FSTORE for NULL metatable.
  * DynASM/x86: Add endbr instruction.
  * MIPS64 R2/R6: Fix FP to integer conversions.
  * Add cross-32/64 bit and deterministic bytecode generation.
  * DynASM/x86: Allow [&expr] operand.
  * Check for IR_HREF vs. IR_HREFK aliasing in non-nil store check.
  * Respect jit.off() on pending trace exit.
  * Simplify handling of instable types in TNEW/TDUP load forwarding.
  * Only emit proper parent references in snapshot replay.
  * Fix anchoring for string buffer set() method (again).
  * ARM: Fix stack restore for FP slots.
  * Document workaround for multilib vs. cross-compiler conflict.
  * Fix anchoring for string buffer set() method.
  * Fix runtime library flags for MSVC debug builds.
  * Fix .debug_abbrev section in GDB JIT API.
  * Optimize table.new() with constant args to (sinkable) IR_TNEW.
  * Emit sunk IR_NEWREF only once per key on snapshot replay.
  * Fix last commit.
  * x86/x64: Don't fuse loads across IR_NEWREF.
  * Improve last commit.
  * x86/x64: Don't fuse loads across table.clear.
  * x86/x64: Add more red zone checks to assembler backend.
  * Add stack check to pcall/xpcall.
  * Invalidate SCEV entry when returning to lower frame.
  * FFI: Fix pragma push stack limit check and throw on overflow.
  * ARM64: Fix disassembly of ldp/stp offsets.
  * Check for upvalue state transition in IR_UREFO.
  * x64: Properly fix __call metamethod return dispatch.
  * Windows/x86: _BitScan*64 are only available on 64 bit archs.
  * Add 'cc' file type for saving bytecode.
  * FFI/Windows: Fix type declaration for int64_t and uint64_t.
  * FFI: Fix dangling reference to CType in carith_checkarg().
  * DynASM/ARM64: Support ldp/stp of q registers.
  * ARM64: Use ADR and ADRP to form constants.
  * ARM64: Fix disassembly of U12 loads.
  * ARM64: Unify constant register handling in interpreter.
  * ARM: Fix register hint for FFI calls with FP results.
  * ARM64: Fix register hint for FFI calls with FP results.
  * ARM64: Restore fp before sp in C stack unwinders.
  * FFI: Fix ffi.abi("pauth").
  * Maintain chain invariant in DCE.
  * LJ_FR2: Fix stack checks in vararg calls.
  * Follow-up fix for stack overflow handling cleanup.
  * Handle OOM error on stack resize in coroutine.resume and lua_checkstack.
  * Restore cur_L for specific Lua/C API use case.
  * Consistently use 64 bit constants for 64 bit IR instructions.
  * ARM64: Fix IR_HREF code generation for constant FP keys.
  * ARM64: Fuse negative 32 bit constants into arithmetic ops again.
  * Handle all stack layouts in (delayed) TRACE vmevent.
  * Add missing coercion when recording select(string, ...)
  * Cleanup stack overflow handling.
  * Windows/ARM64: Add MSVC cross-build support for x64 to ARM64.
  * IR_MIN/IR_MAX is non-commutative due to underlying FPU ops.
  * ARM64: Set fixed interpreter registers before rethrow.
  * Windows/ARM64: Update install docs.
  * Windows: Call C++ destructors without compiling with /EHa.
  * Windows: Pass scratch CONTEXT record to RtlUnwindEx.
  * ARM64: External unwinder already restores non-volatile registers.
  * Windows/ARM64: Fix exception unwinding (again).
  * Windows/ARM64: Fix typo in exception unwinding.
  * FFI: Fix 64 bit shift fold rules.
  * Windows/ARM64: Support Windows calling conventions.
  * Windows/ARM64: Fix exception unwinding.
  * ARM64: Remove unneeded IRCALL_* defs for math intrinsics.
  * Fix Cygwin build.
  * Allow path overrides in genversion.lua with minilua, too.
  * Windows/ARM64: Add initial support.
  * Improve architecture detection error messages.
  * ARM64: Fuse rotates into logical operands.
  * ARM64: Don't fuse sign extensions into logical operands.
  * ARM64: Disassemble rotates on logical operands.
  * ARM: Fix stack check code generation.
  * ARM64: Fix LDP/STP fusion (again).
  * ARM64: Ensure branch is in range before emitting TBZ/TBNZ.
  * Fix mcode limit check for non-x86 archs.
  * ARM64: Improve BC_JLOOP.
  * ARM64: Improve integer IR_MUL code generation.
  * ARM64: Simplify code generation for IR_STRTO.
  * ARM64: Use RID_TMP instead of scratch register in more places.
  * ARM64: Improve IR_OBAR code generation.
  * ARM64: Improve IR_UREF code generation.
  * ARM64: Improve IR_HREF code generation.
  * ARM64: Reload BASE via GL instead of spilling it.
  * ARM64: Consolidate 32/64-bit constant handling in assembler.
  * ARM64: Tune emit_lsptr. Avoid wrong load for asm_prof.
  * ARM64: Inline only use of emit_loada.
  * ARM64: Improve K13 constant rematerialization.
  * Add NaN check to IR_NEWREF.
  * Allow override of paths for genversion.lua.
  * Fix native MinGW build.
- Also refresh luajit-s390x.patch from the rebased pull request.

==== m4 ====

- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN

==== mc ====
Version update (4.8.30 -> 4.8.31)
Subpackages: mc-lang

- Use %patch -P N instead of deprecated %patchN.
- Update to 4.8.31
  - Core
  * Minimal version of GLib is 2.32.0.
  - VFS
  * fish: drop support of native FISH server and protocol. Rename VFS to shell 
(#4232)
  * extfs;
  - uc1541 extfs: update up to 3.6 version (#4511)
  - s3+: port to Python3 (#4324)
  * Support for LZO/LZOP compression format (#4509)
  - Misc
  * Skins: add color for non-printable characters in editor (#4433)
  - Fixes
  * FTBFS on FreeBSD with ext2fs attribute support (#4493)
  * Broken stickchars (-a) mode (#4498)
  * Wrong timestamp after resuming of file copy operation (#4499)
  * Editor: wrong deletion of marked column (#3761)
  * Diff viewer: segfault when display of line numbers is enabled (#4500)
  * Tar VFS: broken handling of hard links (#4494)
  * Sftp VFS: failure establishing SSH session due hashed host names in 
~/.ssh/known_hosts (#4506)
  * Shell VFS: incorrect file names with cyrillic or diacritic symbols (#4507)
  * mc.ext.ini: incorrect description of of how multiple sections and keys with 
same names are processed (#4497)
  * mc.ext.ini: unescaped backslash \ is treated as invalid escape sequence in 
glib-2.77.3 and glib-2.79 (#4502)
  * mc.ext.ini: file "Makefile.zip" is handled as Makefile not as zip-arhive 
(#4419)
- Rebase mc-ext-audio.patch, mc-extd-xdg.patch and
  mc-vfs-fish-deleted_source_file.patch

==== netcontrol ====

- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN

==== openblas_openmp ====
Version update (0.3.25 -> 0.3.26)

- Remove DYNAMIC_LIST for aarch64 for older gcc versions: This has
  been fixed upstream.
- Update to version 0.3.26:
  * General:
  - Improved the version of openblas.pc that is created by the
    CMAKE build.
  - Fixed a CMAKE-specific build problem on older versions of
    MacOS.
  - Worked around linking problems on old versions of MacOS.
  - Corrected installation location of the lapacke_mangling
    header in CMAKE builds.
  - Added type declarations for complex variables to the
    MSVC-specific parts of the LAPACK header.
  - Significantly sped up ?GESV for small problem sizes by
    introducing a lower bound for multithreading.
  - Imported additions and corrections from the Reference-LAPACK
    project:
    + Added new LAPACK functions for truncated QR with pivoting
    (Reference-LAPACK PRs 891&941).
    + Handle miscalculation of minimum work array size in corner
    cases (Reference-LAPACK PR 942).
    + Fixed use of uninitialized variables in ?GEDMD and
    improved inline documentation.
    + Fixed use of uninitialized variables (and consequential
    failures) in ?BBCSD.
    + Added tests for the recently introduced Dynamic Mode
    Decomposition functions.
    + Fixed several memory leaks in the LAPACK testsuite.
    + Fixed counting of testsuite results by the Python script.
  * x86-64:
  - Fixed computation of CASUM on SkylakeX and newer targets in
    the special case that AVX512 is not supported by the compiler
    or operating environment.
  - Fixed potential undefined behaviour in the CASUM/ZASUM
    kernels for AVX512 targets.
  - worked around a problem in the pre-AVX kernels for GEMV
  * arm64:
  - Sped up SGEMM and DGEMM on Neoverse V1 and N1.
  - Sped up ?DOT on SVE-capable targets.
  - Reduced the number of targets in DYNAMIC_ARCH builds by
    eliminating functionally equivalent ones.
  * POWER:
  - Improved the SGEMM kernel for POWER10.
  - Fixed compilation with (very) old versions of gcc.
  - Fixed detection of old 32bit PPC targets in CMAKE-based
    builds.
  - Added autodetection of the POWERPC 7400 subtype.
  - Fixed CMAKE-based compilation for PPCG4 and PPC970 targets.
  * LONGARCH64:
  - Added and improved optimized kernels for almost all BLAS
    functions.

==== openblas_pthreads ====
Version update (0.3.25 -> 0.3.26)

- Remove DYNAMIC_LIST for aarch64 for older gcc versions: This has
  been fixed upstream.
- Update to version 0.3.26:
  * General:
  - Improved the version of openblas.pc that is created by the
    CMAKE build.
  - Fixed a CMAKE-specific build problem on older versions of
    MacOS.
  - Worked around linking problems on old versions of MacOS.
  - Corrected installation location of the lapacke_mangling
    header in CMAKE builds.
  - Added type declarations for complex variables to the
    MSVC-specific parts of the LAPACK header.
  - Significantly sped up ?GESV for small problem sizes by
    introducing a lower bound for multithreading.
  - Imported additions and corrections from the Reference-LAPACK
    project:
    + Added new LAPACK functions for truncated QR with pivoting
    (Reference-LAPACK PRs 891&941).
    + Handle miscalculation of minimum work array size in corner
    cases (Reference-LAPACK PR 942).
    + Fixed use of uninitialized variables in ?GEDMD and
    improved inline documentation.
    + Fixed use of uninitialized variables (and consequential
    failures) in ?BBCSD.
    + Added tests for the recently introduced Dynamic Mode
    Decomposition functions.
    + Fixed several memory leaks in the LAPACK testsuite.
    + Fixed counting of testsuite results by the Python script.
  * x86-64:
  - Fixed computation of CASUM on SkylakeX and newer targets in
    the special case that AVX512 is not supported by the compiler
    or operating environment.
  - Fixed potential undefined behaviour in the CASUM/ZASUM
    kernels for AVX512 targets.
  - worked around a problem in the pre-AVX kernels for GEMV
  * arm64:
  - Sped up SGEMM and DGEMM on Neoverse V1 and N1.
  - Sped up ?DOT on SVE-capable targets.
  - Reduced the number of targets in DYNAMIC_ARCH builds by
    eliminating functionally equivalent ones.
  * POWER:
  - Improved the SGEMM kernel for POWER10.
  - Fixed compilation with (very) old versions of gcc.
  - Fixed detection of old 32bit PPC targets in CMAKE-based
    builds.
  - Added autodetection of the POWERPC 7400 subtype.
  - Fixed CMAKE-based compilation for PPCG4 and PPC970 targets.
  * LONGARCH64:
  - Added and improved optimized kernels for almost all BLAS
    functions.

==== openslp ====
Subpackages: libslp1 openslp-server

- Use %patch -P N instead of deprecated %patchN.

==== openssl-3 ====
Subpackages: libopenssl3

- Build the 32bit flavor of libopenssl-3-fips-provider [bsc#1220232]
  * Update baselibs.conf

==== openssl ====

- Build the 32bit flavor of libopenssl-fips-provider [bsc#1220232]
  * Update baselibs.conf

==== pcmciautils ====

- Use %patch -P N instead of deprecated %patchN.

==== pcr-oracle ====

- Remove fix_efi_measure.patch
- Add fix_efi_measure_and_shim.patch (bsc#1219807)

==== pcre ====

- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.

==== pcsc-lite ====
Subpackages: libpcsclite1

- Use %patch -P N instead of deprecated %patchN.

==== pentaho-libxml ====

- Use %patch -P N instead of deprecated %patchN.

==== perl-IPC-Run3 ====
Version update (0.048 -> 0.49.0)

- updated to 0.049
  see /usr/share/doc/packages/perl-IPC-Run3/Changes
  0.049 2024-01-20
  - avoid some uninitialized warnings in ProfLogReader
  - improve errno handling on Windows (thanks, Graham Ollis)
  - avoid leaking fds (thanks, Dan Book)
  - fix typos in docs (thanks, Yoshikazu Sawa and Jakub Wilk)

==== perl-LWP-Protocol-https ====
Version update (6.110.0 -> 6.130.0)

- updated to 6.13
  see /usr/share/doc/packages/perl-LWP-Protocol-https/Changes
  6.13      2024-02-06 01:00:50Z
  - Fix ssl upgrade for regular host names (GH#77) (Axel Burri)
  6.12      2024-01-22 17:51:31Z
  - Enable MultiHomed for IO::Socket::SSL (GH#61) (ℕicolas ℝ.)
  - Making it possible to use IPv6 in https call through https proxy
    environment (in case of using CONNECT method to create a tunnel) (GH#74)
    (Dmitriy Shamatrin)

==== perl-URI ====
Version update (5.210.0 -> 5.270.0)

- updated to 5.27
  see /usr/share/doc/packages/perl-URI/Changes
  5.27      2024-02-09 15:01:24Z
  - Add missing NAME section to POD of URI::geo (GH#142) (gregor herrmann)
  5.26      2024-02-02 19:04:40Z
  - Add URI::geo (GH#141) (david-dick)
  5.25      2024-01-27 16:11:41Z
  - cache scheme so it never attempt to load it again (GH#55) (mschae94)
  5.24      2024-01-26 04:36:32Z
  - Really revert "use Scalar::Util::reftype instead of ref to check for
    ARRAY" (GH#136) (Olaf Alders)
  5.23      2024-01-25 21:02:18Z
  - Revert the reftype change introduced in 5.22 as it causes warnings.
    (GH#134) (Olaf Alders)
  5.22      2024-01-25 15:22:54Z
  - Use Scalar::Util::reftype instead of ref to check for ARRAY (GH#132)
    (Jacques Deguest)

==== perl-libwww-perl ====
Version update (6.720.0 -> 6.760.0)

- updated to 6.76
  see /usr/share/doc/packages/perl-libwww-perl/Changes
  6.76      2024-01-25 18:31:25Z
  - Simplify code slightly for Perl v5.8+ (GH#455) (James Raspass)
  - Move HTTP::CookieJar::LWP to test requires (GH#453) (Olaf Alders)
  6.75      2024-01-24 14:29:17Z
  - Update lwp-request to suport PATCH HTTP method (GH#452) (Javier Puche)
  6.74      2024-01-22 17:48:18Z
  - Making it possible to use IPv6 in https call through https proxy
    environment (in case of using CONNECT method to create a tunnel) (GH#450)
    (Dmitriy Shamatrin)
  6.73      2024-01-13 20:19:09Z
  - Fix no_proxy subdomain matching (GH#447) (Axel Burri)

==== phalanx ====

- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.

==== pipewire ====
Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa 
pipewire-jack pipewire-libjack-0_3 pipewire-modules-0_3 pipewire-pulseaudio 
pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools

- Use %patch -P N instead of deprecated %patchN.

==== ppp ====

- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.

==== pptp ====

- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.

==== procinfo ====

- Use %patch -P N instead of deprecated %patchN.

==== procmail ====

- Use %patch -P N instead of deprecated %patchN.

==== procps ====
Subpackages: libprocps8

- Use %patch -P N instead of deprecated %patchN.

==== psmisc ====

- Use %patch -P N instead of deprecated %patchN.

==== ptools ====

- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.

==== pwgen ====

- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.

==== python-cffi ====

- drop unnecessary buildrequire python-py

==== python-pygit2 ====
Version update (1.14.0 -> 1.14.1)

- update to 1.14.1:
  * Now `Object.filemode` returns `enums.FileMode` and
    `Reference.type` returns `enums.ReferenceType`
  * Fix tests on Fedora 40
  * Deprecate `ReferenceType.OID`, use `ReferenceType.DIRECT`
  * Deprecate `ReferenceType.LISTALL`, use `ReferenceType.ALL`

==== python311 ====
Subpackages: python311-curses python311-dbm

- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Remove double definition of /usr/bin/idle%%{version} in
  %%files.

==== python311-core ====
Subpackages: libpython3_11-1_0 python311-base

- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Remove double definition of /usr/bin/idle%%{version} in
  %%files.

==== qemu ====
Subpackages: qemu-arm qemu-audio-spice qemu-block-curl qemu-block-nfs 
qemu-block-rbd qemu-chardev-spice qemu-guest-agent qemu-hw-display-qxl 
qemu-hw-display-virtio-gpu qemu-hw-display-virtio-gpu-pci 
qemu-hw-display-virtio-vga qemu-hw-usb-host qemu-hw-usb-redirect 
qemu-hw-usb-smartcard qemu-img qemu-ipxe qemu-ksm qemu-pr-helper qemu-tools 
qemu-ui-curses qemu-ui-gtk qemu-ui-opengl qemu-ui-spice-app qemu-ui-spice-core 
qemu-vgabios

- Backports and bugfixes:
  * [openSUSE]: Increase default phys bits to 42, if host supports that
    (bsc#1205978, bsc#1219977)
  * vfio/pci: Clear MSI-X IRQ index always (bsc#1220275)

==== qpdf ====
Version update (11.8.0 -> 11.9.0)

- Update to 11.9.0:
  * CLI Enhancements
  - Add new command-line arguments --file and --range which can be
    used within --pages in place of positional arguments. Allow
  - -file to be used inside of --overlay and --underlay as well.
    These new options can be freely intermixed with positional
    arguments.
  - Allow --overlay and --underlay to be repeated. They may appear
    multiple times on the command-line and will be stacked in the
    order in which they appear. In QPDFJob JSON (see QPDFJob: a
    Job-Based Interface), the overlay and underlay keys may contain
    arrays. For compatibility, they may also contain a single dictionary.
  * Library Enhancements
  - Add file(), range(), and password() to QPDFJob::PagesConfig
    as an alternative to pageSpec.
  - Add QPDFObjectHandle::writeJSON to write the JSON representation
    of the object directly to a pipeline. This is much faster than
    calling QPDFObjectHandle::getJSON.
  * Other Enhancements
  - There have been non-user-visible improvements to the reliability
    of the JSON parser. The JSON parser has been added to fuzz testing
    with OSS-Fuzz.
  * Remove openssl3_2-fuzz-16214.patch fixed upstream

==== rpm ====
Subpackages: librpmbuild10

- added a missing %patch NR conversion

==== screen ====

- Use %patch -P N instead of deprecated %patchN.

==== sharutils ====

- Use %patch -P N instead of deprecated %patchN.

==== slang ====

- Drop slsh/lib/test/test_timestamp.sl: Do not test timestamps but
  trust on upstream (calculations in leap years are off in the
  test).

==== susefirewall2-to-firewalld ====

- Use %autosetup macro. Allows to eliminate the usage of deprecated
  PatchN.

==== tcl ====
Version update (8.6.13 -> 8.6.14)

- Version 8.6.14:
  * Backport TIP #402: path name starting with '//' not replaced by
    '/' also on Cygwin and QNX
  * (bug) [8f7fde] string compare failing on big endian
  * (bug) [3e8074] y2k38 problem in [interp limit time -seconds]
  * (bug) [e3dcab] crash with tcl_precision equal 15..18
  * (bug) [d19fe0] output replacement character on incomplete
    sequences in unicode encoding
  * (bug) [534172] sporadic crash in memchan thread cleanup.
  * (bug) [f9eafc] throw error in zip command when file
    comment/filename to long or not iso-latin-1
  * (bug)[183a1a] Prevent BO by Tcl_UtfToExternal
  * (bug) [ea69b0], crash when using a channel transformation on
    TCP client socket
  * (bug)[026575] Prevent invalid read in Tcl_UtfToUniChar
  * (rfe) Allow empty mode in [chan create] to allow refchan
    version of [socket -server]
  * (bug) [ab123c] argument position overflow in [scan %num$mode]
  * (bug) [784bef] tailcall crash
  * (bug) [af3ebc] clock scan and clock add bugs in error cases /
    with abbreviated options
  * (bug) [66ffaf] incomplete double byte encoding sequences
    ignored like in [encoding convertfrom gb12345 x]
  * (rfe) [c54e4a] fork multithreading performance by using
    vfork/spawn when supported
  * Update libtommath to version 1.2.1
  * (bug) [60cacf] Fix tclvfs tkt Segmentation Fault at
    interpreter exit when tclvfs loaded.
  * (bug) [b5ac3e] Tcl_GetUniChar reads beyond string length for
    ASCII strings
  * Unicode 15.1
  * (bug) [00655c] ClockGetdatefieldsObjCmd(): avoid signed integer
    overflow and platform-dependent behavior
  * TIP #662: Tcl_VarEval is not depreciated any more
  * (bug) [7b3167] tclOO.c: initialize fakeObject.refCount
  * (bug) [7371b6] AddressSanitizer use-after-return detection
    breaks NRE tests, coroutines
  * (bug)[32b889] prevent spurious errors from [clock format]
  * (rfe) [0ac9d0] Don't call getsockname(2) in
    Tcl_MakeFileChannel(3) unless absolutely necessary. Permits
    better constraining of Tcl/tclsh via OpenBSD's pledge(2) or
    similar mechanisms. Minor rewrite.
  * (feature) Adapt tcltest to support Tcl 9.
  * (bug) [fd27ad] doc change of Tcl_PkgRequire & friends: version
    string specification refers to "package require".
  * (bug) [16e25e] error for
    [tcl_startOfPreviousWord string end-1]
  * [db4f28] segfault when Tcl_ReadChars is called with unicode
    object
  * fix/document Tcl_ObjPrintf with "ll" modifier
  * [8e666d] endless loop when redefining proc ::history
  * [86b3c1] endless loop when ::unknown is moved into a namespace
- Obsoleted patches:
  * tcl-interp-limit-time.patch
  * tcl-refchan-mode-needed.patch
  * tcl-string-compare.patch

==== tgt ====

- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN

==== time ====

- Use %patch -P N instead of deprecated %patchN.

==== unbound ====
Version update (1.19.0 -> 1.19.1)
Subpackages: libunbound8 unbound-anchor

- Update to 1.19.1:
  * Bug Fixes: [bsc#1219823, CVE-2023-50387][bsc#1219826, CVE-2023-50868]
  - Fix CVE-2023-50387, DNSSEC verification complexity can be
    exploited to exhaust CPU resources and stall DNS resolvers.
  - Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust CPU.

==== update-alternatives ====

- Prepare for RPM 4.20.

==== xen ====
Subpackages: xen-libs xen-tools-domU

- bsc#1219885 - VUL-0: CVE-2023-46841: xen: x86: shadow stack vs
  exceptions from emulation stubs (XSA-451)
  xsa451.patch

==== xorg-x11-fonts ====
Subpackages: xorg-x11-fonts-core xorg-x11-fonts-legacy

- encodings-1.1.0
  * Add a meson build system
  * Add the ISO8859-14 encoding

==== xorg-x11-fonts-converted ====

- encodings-1.1.0
  * Add a meson build system
  * Add the ISO8859-14 encoding

==== yast2-bootloader ====
Version update (5.0.5 -> 5.0.6)

- Feature: Do not timeout boot menue in systemd-boot. (bsc#1216366)
- 5.0.6


Reply via email to