Packages changed: PackageKit desktop-file-utils gnutls (3.8.2 -> 3.8.3) iputils (20231222 -> 20240117) java-21-openjdk (21.0.1.0 -> 21.0.2.0) libstorage-ng (4.5.173 -> 4.5.174) ncurses (6.4.20240106 -> 6.4.20240113) patterns-microos === Details === ==== PackageKit ==== Subpackages: PackageKit-backend-dnf PackageKit-backend-zypp PackageKit-gstreamer-plugin PackageKit-gtk3-module PackageKit-lang libpackagekit-glib2-18 typelib-1_0-PackageKitGlib-1_0 - Add PackageKit-find-python-3-6.patch: Specify the Python version we need to build this package. ==== desktop-file-utils ==== - support non-SUSE distributions ==== gnutls ==== Version update (3.8.2 -> 3.8.3) - Update to 3.8.3: * libgnutls: Fix more timing side-channel inside RSA-PSK key exchange. [GNUTLS-SA-2024-01-14, CVSS: medium] [bsc#1218865, CVE-2024-0553] * libgnutls: Fix assertion failure when verifying a certificate chain with a cycle of cross signatures. [GNUTLS-SA-2024-01-09, CVSS: medium] [bsc#1218862, CVE-2024-0567] * libgnutls: Fix regression in handling Ed25519 keys stored in PKCS#11 token certtool was unable to handle Ed25519 keys generated on PKCS#11 with pkcs11-tool (OpenSC). This is a regression introduced in 3.8.2. * Rebase gnutls-FIPS-140-3-references.patch * Updated upstream gnutls.keyring ==== iputils ==== Version update (20231222 -> 20240117) - Update to version 20240117 (ping bugfix release) https://github.com/iputils/iputils/releases/tag/20240117 ==== java-21-openjdk ==== Version update (21.0.1.0 -> 21.0.2.0) Subpackages: java-21-openjdk-headless - Update to upstream tag jdk-21.0.2+13 (January 2024 CPU) * CVEs + CVE-2024-20918, bsc#1218907 + CVE-2024-20919, bsc#1218903 + CVE-2024-20921, bsc#1218905 + CVE-2024-20945, bsc#1218909 + CVE-2024-20952, bsc#1218911 * Security fixes + JDK-8308204: Enhanced certificate processing + JDK-8314295: Enhance verification of verifier + JDK-8314307: Improve loop handling + JDK-8314468: Improve Compiler loops + JDK-8316976: Improve signature handling + JDK-8317547: Enhance TLS connection support * Other changes + JDK-8038244: (fs) Check return value of malloc in Java_sun_nio_fs_AixNativeDispatcher_getmntctl() + JDK-8161536: sun/security/pkcs11/sslecc/ /ClientJSSEServerJSSE.java fails with ProviderException + JDK-8219652: [aix] Tests failing with JNI attach problems. + JDK-8225377: type annotations are not visible to javac plugins across compilation boundaries + JDK-8232839: JDI AfterThreadDeathTest.java failed due to "FAILED: Did not get expected IllegalThreadStateException on a StepRequest.enable()" + JDK-8267502: JDK-8246677 caused 16x performance regression in SynchronousQueue + JDK-8267509: Improve IllegalAccessException message to include the cause of the exception + JDK-8268916: Tests for AffirmTrust roots + JDK-8286757: adlc tries to build with /pathmap but without /experimental:deterministic + JDK-8294156: Allow PassFailJFrame.Builder to create test UI + JDK-8294158: HTML formatting for PassFailJFrame instructions + JDK-8294427: Check boxes and radio buttons have rendering issues on Windows in High DPI env + JDK-8294535: Add screen capture functionality to PassFailJFrame + JDK-8295068: SSLEngine throws NPE parsing CertificateRequests + JDK-8295555: Primitive wrapper caches could be `@Stable` + JDK-8299614: Shenandoah: STW mark should keep nmethod/oops referenced from stack chunk alive + JDK-8300663: java/util/concurrent/SynchronousQueue/ /Fairness.java failed with "Error: fair=true i=0 j=1" + JDK-8301247: JPackage app-image exe launches multiple exe's in JDK 17+ + JDK-8301341: LinkedTransferQueue does not respect timeout for poll() + JDK-8301457: Code in SendPortZero.java is uncommented even after JDK-8236852 was fixed + JDK-8301489: C1: ShortLoopOptimizer might lift instructions before their inputs + JDK-8301846: Invalid TargetDataLine after screen lock when using JFileChooser or COM library + JDK-8303737: C2: Load can bypass subtype check that enforces it's from the right object type + JDK-8306561: Possible out of bounds access in print_pointer_information + JDK-8308103: Massive (up to ~30x) increase in C2 compilation time since JDK 17 + JDK-8308452: Extend internal Architecture enum with byte order and address size + JDK-8308479: [s390x] Implement alternative fast-locking scheme + JDK-8308592: Framework for CA interoperability testing + JDK-8308593: Add KEEPALIVE Extended Socket Options Support for Windows + JDK-8309209: C2 failed "assert(_stack_guard_state == stack_guard_reserved_disabled) failed: inconsistent state" + JDK-8309305: sun/security/ssl/SSLSocketImpl/ /BlockedAsyncClose.java fails with jtreg test timeout + JDK-8309545: Thread.interrupted from virtual thread needlessly resets interrupt status + JDK-8309663: test fails "assert(check_alignment(result)) failed: address not aligned: 0x00000008baadbabe" + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when using second test directory + JDK-8309974: some JVMCI tests fail when VM options include - XX:+EnableJVMCI + JDK-8310239: Add missing cross modifying fence in nmethod entry barriers + JDK-8310512: Cleanup indentation in jfc files + JDK-8310596: Utilize existing method frame::interpreter_frame_monitor_size_in_bytes() + JDK-8310982: jdk/internal/util/ArchTest.java fails after JDK-8308452 failed with Method isARM() + JDK-8311261: [AIX] TestAlwaysPreTouchStacks.java fails due to java.lang.RuntimeException: Did not find expected NMT output + JDK-8311514: Incorrect regex in TestMetaSpaceLog.java + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java + JDK-8311591: Add SystemModulesPlugin test case that splits module descriptors with new local variables defined by DedupSetBuilder + JDK-8311630: [s390] Implementation of Foreign Function & Memory API (Preview) + JDK-8311631: When multiple users run tools/jpackage/share/ /LicenseTest.java, Permission denied for writing /var/tmp/*.files + JDK-8311680: Update the release version after forking Oct CPU23_10 ... changelog too long, skipping 419 lines ... 2x slower when AVX instructions are used ==== libstorage-ng ==== Version update (4.5.173 -> 4.5.174) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#979 - allow to get Arch object from SystemInfo - make testcase more robust - coding style - 4.5.174 ==== ncurses ==== Version update (6.4.20240106 -> 6.4.20240113) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch 20240113 + improve formatting/style of manpages (patches by Branden Robinson). + modify dist.mk to avoid passing developer's comments in manpages into the generated html documentation. + use ansi+local, ansi+local1, ansi+pp, ansi+rca, ansi+rca2, ansi+sgr to trim -TD + restore padding for wy520* and vt320-k311 (report by Sven Joachim). ==== patterns-microos ==== Subpackages: patterns-microos-alt_onlyDVD patterns-microos-apparmor patterns-microos-base patterns-microos-base-microdnf patterns-microos-base-packagekit patterns-microos-base-zypper patterns-microos-basesystem patterns-microos-cloud patterns-microos-cockpit patterns-microos-defaults patterns-microos-desktop-common patterns-microos-desktop-gnome patterns-microos-desktop-kde patterns-microos-hardware patterns-microos-ima_evm patterns-microos-onlyDVD patterns-microos-ra_agent patterns-microos-ra_verifier patterns-microos-selinux patterns-microos-sssd_ldap - Switch from phonon4qt5-backend-gstreamer to phonon4qt5-backend-vlc as recommended by upstream