Packages changed: gnome-autoar gnome-settings-daemon gnome-shell gupnp libgweather webkit2gtk3 === Details === ==== gnome-autoar ==== - Drop gnome-autoar-CVE-2020-36241.patch on SLE and Leap 15.4: fixed upstream. ==== gnome-settings-daemon ==== - Drop patches fixed upstream on SLE and Leap 15.4: + gnome-settings-daemon-jscSLE16518-update-subprojects-libgvc.patch + gnome-settings-daemon-media-keys-warnings-cleanup-for-gvc-update.patch + gnome-settings-daemon-not-warn-about-starting-stopping-services.patch ==== gnome-shell ==== Subpackages: gnome-shell-calendar - Drop patches fixed upstream: + gnome-shell-network-agent-not-pop-up.patch + gnome-shell-jscSLE16518-update-subprojects-libgvc.patch + gnome-shell-CVE-2020-17489.patch ==== gupnp ==== - Drop patches fixed upstream on SLE and Leap 15.4 gupnp-validate-host-header.patch. - Add gupnp-validate-host-header.patch: validate host header (boo#1186590 glgo#GNOME/gupnp#24 CVE-2021-33516). ==== libgweather ==== Subpackages: gweather-data libgweather-3-16 typelib-1_0-GWeather-3_0 - Drop patches merged upstream on SLE and Leap 15.4: + libgweather-use-after-free-libsoup.patch + libgweather-yrno-xml-parser-leak.patch + libgweather-forecast-attribution-leak.patch + libgweather-metno-api.patch - Add libgweather-use-after-free-libsoup.patch: fix a possible use after free (glgo#GNOME/libgweather#34). - Add libgweather-yrno-xml-parser-leak.patch and libgweather-forecast-attribution-leak.patch: fix memory leaks, taken from upstream gnome-3-34 branch. - Add libgweather-metno-api.patch: use new metno API (bsc#1185651 glgo#GNOME/libgweather#82). ==== webkit2gtk3 ==== Subpackages: libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 webkit2gtk-4_0-injected-bundles - Drop unneeded patch on Leap and SLE by now: webkit2gtk3-restore-npapi.patch (bsc#1189105).