Packages changed: cups fftw3 lcms2 (2.11 -> 2.12) libressl (3.2.5 -> 3.3.3) xconsole xrdb xset xsetroot === Details === ==== cups ==== Subpackages: cups-client cups-config libcups2 libcupsimage2 - When cupsd creates directories with specific owner group and permissions (usually owner is 'root' and group matches "configure --with-cups-group=lp") specify same owner group and permissions in the RPM spec file to ensure those directories are installed by RPM with the right settings because if those directories were installed by RPM with different settings then cupsd would use them as is and not adjust its specific owner group and permissions which could lead to privilege escalation from 'lp' user to 'root' via symlink attacks e.g. if owner is falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161) ==== fftw3 ==== - Follow the distro default openmpi implementation: + Eliminate the usage of the mpi_implem variable (obsolete) + BuildRequire openmpi-macros-devel instead of %{mpi_implem}-devel + Require openmpi-devel in the mpi-devel package + Use %setup_openmpi to source mpivars.sh ==== lcms2 ==== Version update (2.11 -> 2.12) - update to 2.12: * Added build system for fast-float plugin (see plugin documentation) * Added new build-in sigmoidal tone curve * Added XCode 12 project * Added support for multichannel input up to 15 channels * Fix LUT8 write matrix * Fix version mess on 10/11 * Fix tools & samples xgetopt * Fix warnings on different function pointers * Fix matlab MEX compilation * plugin: cleanup and better SSE detection * plugin: add lab to any on float * plugin: it can now be compiled as C++ * recover PDF documentation, but try to keep it under a resonable size. * Prevent a rare but possible out-of-bounds read in postscript generator * Fix some compiler warnings * Add named color profile building sample to testbed ==== libressl ==== Version update (3.2.5 -> 3.3.3) Subpackages: libcrypto46 libssl48 libtls20 - Update to release 3.3.3 * Support for DTLSv1.2. * Continued rewrite of the record layer for the legacy stack. * Numerous bugs and interoperability issues were fixed in the new verifier. A few bugs and incompatibilities remain, so this release uses the old verifier by default. * The OpenSSL 1.1 TLSv1.3 API is not yet available. ==== xconsole ==== - modernize spec (move license to licensedir) ==== xrdb ==== - modernize spec file (move license to licensedir) ==== xset ==== - modernize spec-file (move license to licensedir) ==== xsetroot ==== - modernize spec file (move license to licensedir)