IceWeasel-75.0-1.parabola2 brings an important update to the default configuration. We are relaxing the WebRTC privacy settings to allow Jitsi to function, bringing fully free video conferencing to parabola GNU/Linux-libre. The flip side of this change is that under certain circumstances this may be exploited in a way that the browser may leak local addresses in VPN connections. The browser extension 'uBlock Origin' provides a setting to prevent this from happening, and we are investigating ways to harden IceWeasel against such attacks.
In the meantime, to retain the old behaviour, set 'media.peerconnection.enabled' to 'false' in about:config.
The zn_poly package prior to version 0.9.2-2 was missing a soname link. This has been fixed in 0.9.2-2, so the upgrade will need to overwrite the untracked files created by ldconfig. If you get an error
zn_poly: /usr/lib/libzn_poly-0.9.so exists in filesystem
when updating, use
pacman -Syu --overwrite usr/lib/libzn_poly-0.9.so
to perform the upgrade.
The nss and lib32-nss packages prior to version 3.51.1-1 were missing a soname link each. This has been fixed in 3.51.1-1, so the upgrade will need to overwrite the untracked files created by ldconfig. If you get any of these errors
nss: /usr/lib/p11-kit-trust.so exists in filesystem
lib32-nss: /usr/lib32/p11-kit-trust.so exists in filesystem
when updating, use
pacman -Syu --overwrite /usr/lib\*/p11-kit-trust.so
to perform the upgrade.
The hplip package prior to version 3.20.3-2.par1 was missing the compiled python modules. This has been fixed in 3.20.3-2.par1, so the upgrade will need to overwrite the untracked pyc files that were created. If you get errors such as these
hplip: /usr/share/hplip/base/__pycache__/__init__.cpython-38.pyc exists in filesystem
hplip: /usr/share/hplip/base/__pycache__/avahi.cpython-38.pyc exists in filesystem
hplip: /usr/share/hplip/base/__pycache__/codes.cpython-38.pyc exists in filesystem
...many more...
when updating, use
pacman -Suy --overwrite /usr/share/hplip/\*
to perform the upgrade.
Our rsync package was shipped with bundled zlib to provide compatibility with the old-style --compress option up to version 3.1.0. Version 3.1.1 was released on 2014-06-22 and is shipped by all major distributions now.
So we decided to finally drop the bundled library and ship a package with system zlib. This also fixes security issues, actual ones and in future. Go and blame those running old versions if you encounter errors with rsync 3.1.3-3.
