Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=3&version=Tumbleweed&build=20250422 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: apache2-mod_php8 (8.4.5 -> 8.4.6) kernel-firmware-amdgpu (20250328 -> 20250419) kernel-firmware-intel (20250331 -> 20250419) kernel-firmware-sound (20250408 -> 20250415) libXft (2.3.8 -> 2.3.9) libsoup libspelling (0.4.7 -> 0.4.8) libtirpc openSUSE-release (20250420 -> 20250422) pcre2 (10.44 -> 10.45) php8 (8.4.5 -> 8.4.6) python-pip (24.3.1 -> 25.0.1) sdbootutil (1+git20250410.9086124 -> 1+git20250421.7ffd25a) vim (9.1.1258 -> 9.1.1330) yast2-bootloader (5.0.15 -> 5.0.16) yast2-trans (84.87.20250413.d6cedb22b0 -> 84.87.20250416.5cd9324ae2) === Details === ==== apache2-mod_php8 ==== Version update (8.4.5 -> 8.4.6) - version update to 8.4.6 BCMath: Fixed pointer subtraction for scale. Core: Fixed property hook backing value access in multi-level inheritance. Fixed accidentally inherited default value in overridden virtual properties. Fixed bug GH-17376 (Broken JIT polymorphism for property hooks added to child class). Fixed bug GH-17913 (ReflectionFunction::isDeprecated() returns incorrect results for closures created from magic __call()). Fixed bug GH-17941 (Stack-use-after-return with lazy objects and hooks). Fixed bug GH-17988 (Incorrect handling of hooked props without get hook in get_object_vars()). Fixed bug GH-17998 (Skipped lazy object initialization on primed SIMPLE_WRITE cache). Fixed bug GH-17998 (Assignment to backing value in set hook of lazy proxy calls hook again). Fixed bug GH-17961 (use-after-free during dl()'ed module class destruction). Fixed bug GH-15367 (dl() of module with aliased class crashes in shutdown). Fixed OSS-Fuzz #403308724. Fixed bug GH-13193 again (Significant performance degradation in 'foreach'). DBA: Fixed assertion violation when opening the same file with dba_open multiple times. DOM: Fixed bug GH-17991 (Assertion failure dom_attr_value_write). Fix weird unpack behaviour in DOM. Fixed bug GH-18090 (DOM: Svg attributes and tag names are being lowercased). Fix xinclude destruction of live attributes. Fuzzer: Fixed bug GH-18081 (Memory leaks in error paths of fuzzer SAPI). GD: Fixed bug GH-17984 (calls with arguments as array with references). LDAP: Fixed bug GH-18015 (Error messages for ldap_mod_replace are confusing). Mbstring: Fixed bug GH-17989 (mb_output_handler crash with unset http_output_conv_mimetypes). Opcache: Fixed bug GH-15834 (Segfault with hook "simple get" cache slot and minimal JIT). Fixed bug GH-17966 (Symfony JIT 1205 assertion failure). Fixed bug GH-18037 (SEGV Zend/zend_execute.c). Fixed bug GH-18050 (IN_ARRAY optimization in DFA pass is broken). Fixed bug GH-18113 (stack-buffer-overflow ext/opcache/jit/ir/ir_sccp.c). Fixed bug GH-18112 (NULL access with preloading and INI option). Fixed bug GH-18107 (Opcache CFG jmp optimization with try-finally breaks the exception table). PDO: Fix memory leak when destroying PDORow. Standard: Fix memory leaks in array_any() / array_all(). SOAP: Fixed bug #66049 (Typemap can break parsing in parse_packet_soap leading to a segfault) . SPL: Fixed bug GH-18018 (RC1 data returned from offsetGet causes UAF in ArrayObject). Treewide: Fixed bug GH-17736 (Assertion failure zend_reference_destroy()). Windows: Fixed bug GH-17836 (zend_vm_gen.php shouldn't break on Windows line endings). ==== kernel-firmware-amdgpu ==== Version update (20250328 -> 20250419) - Update to version 20250419 (git commit 5aa42075d00c): * amdgpu: update vcn 4.0.5 firmware * amdgpu: update psp 14.0.0 firmware * amdgpu: update vcn 4.0.2 firmware * amdgpu: update psp 13.0.4 firmware * amdgpu: update gc 11.0.1 firmware * amdgpu: update navy flounder firmware * amdgpu: update psp 14.0.4 firmware * amdgpu: update gc 11.5.2 firmware * amdgpu: update vcn 5.0.0 firmware * amdgpu: update smu 14.0.3 firmware * amdgpu: update psp 14.0.3 firmware * amdgpu: update gc 12.0.1 firmware * amdgpu: update sienna cichlid firmware * amdgpu: update yellow carp firmware * amdgpu: update smu 14.0.2 firmware * amdgpu: update psp 14.0.2 firmware * amdgpu: update gc 12.0.0 firmware * amdgpu: update vega20 firmware * amdgpu: update navi14 firmware * amdgpu: update vega12 firmware * amdgpu: update vcn 4.0.4 firmware * amdgpu: update smu 13.0.7 firmware * amdgpu: update psp 13.0.7 firmware * amdgpu: update gc 11.0.2 firmware * amdgpu: update vega10 firmware * amdgpu: update psp 13.0.5 firmware * amdgpu: update navi12 firmware * amdgpu: update psp 13.0.10 firmware * amdgpu: update gc 11.0.3 firmware * amdgpu: update navi10 firmware * amdgpu: update vangogh firmware * amdgpu: update picasso firmware * amdgpu: update vcn 4.0.0 firmware * amdgpu: update psp 13.0.0 firmware * amdgpu: update gc 11.0.0 firmware * amdgpu: update psp 13.0.14 firmware * amdgpu: update gc 9.4.4 firmware * amdgpu: update arcturus firmware * amdgpu: update psp 13.0.6 firmware * amdgpu: update gc 9.4.3 firmware * amdgpu: update beige goby firmware * amdgpu: update psp 13.0.8 firmware * amdgpu: update psp 14.0.1 firmware * amdgpu: update gc 11.5.1 firmware * amdgpu: update psp 13.0.11 firmware * amdgpu: update gc 11.0.4 firmware * amdgpu: update dimgrey cavefish firmware * amdgpu: update aldebaran firmware * amdgpu: update dcn 4.01 frmware to 0.1.6.0 ==== kernel-firmware-intel ==== Version update (20250331 -> 20250419) - Update to version 20250419 (git commit 5aa42075d00c): * intel: ish: Update license file for ISH ==== kernel-firmware-sound ==== Version update (20250408 -> 20250415) - Update to version 20250415 (git commit 2f411c10e457): * intel: avs: Update topology file for I2S Analog Devices 4567 * intel: avs: Update topology file for I2S Realtek 5663 * intel: avs: Update topology file for I2S Realtek 5640 * intel: avs: Update topology file for I2S Realtek 5514 * intel: avs: Update topology file for I2S Realtek 298 * intel: avs: Update topology file for I2S Realtek 286 * intel: avs: Update topology file for I2S Realtek 274 * intel: avs: Update topology file for I2S Nuvoton 8825 * intel: avs: Update topology file for I2S Maxim 98927 * intel: avs: Update topology file for I2S Maxim 98373 * intel: avs: Update topology file for I2S Maxim 98357a * intel: avs: Update topology file for HDAudio codecs * intel: avs: Update topology file for HDMI codecs * intel: avs: Update topology file for Digital Microphone Array * intel: avs: Update topology file for I2S Dialog 7219 ==== libXft ==== Version update (2.3.8 -> 2.3.9) - Update to version 2.3.9 * Remove support for building with pre-X11R7 versions of X * Remove support for building with pre-C89 versions of C * Require xproto >= 7.0.22 for _X_UNUSED * meson: Add option to build with meson * fix potential buffer overrun in _XftGlyphDefault * issue 19: Problem loading "SourceCodePro-Regular" font in Fedora * build-fix for older versions of freetype2: FT_HAS_SVG was added late in 2021 * issue 21: remove redundant/out-of-place prototype for XftNameUnparse * manpage formatting-fixes ==== libsoup ==== Subpackages: libsoup-3_0-0 typelib-1_0-Soup-3_0 - Add CVE fixes: + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914) + libsoup-CVE-2025-32908.patch (boo#1241223 CVE-2025-32908) - Rerun tests once for s390x should they fail, tests for this arch is very flaky. ==== libspelling ==== Version update (0.4.7 -> 0.4.8) - Update to version 0.4.8: + Improve initial dictionary selection which is particularly useful for languages which don't typically use spaces to separate word boundaries. + Build system fixes for building without enchant + Updated translations. ==== libtirpc ==== Subpackages: libtirpc-netconfig libtirpc3 - add patches from upstream to fix gcc-15 compile time errors: * libtirpc-1.3.6-gcc15-part1.patch * libtirpc-1.3.6-gcc15-part2.patch ==== openSUSE-release ==== Version update (20250420 -> 20250422) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== pcre2 ==== Version update (10.44 -> 10.45) Subpackages: libpcre2-16-0 libpcre2-32-0 libpcre2-8-0 libpcre2-posix3 - Update to 10.45: * New upstream maintainers (and signing key) * Update Unicode support to UCD 16 * Case-insensitive matching of Unicode properties Ll, Lt, and Lu has been changed to match Perl * Case-insensitive matching of backreferences now respects the PCRE2_EXTRA_CASELESS_RESTRICT option * Parsing of the \x escape is stricter, and is no longer parsed as an escape for the NUL character if not followed by '{' or a hexadecimal digit. Use \x00 instead. * Add a new feature called scan substring. This is a type of assertion which matches the content of a capturing block to a sub-pattern. * Add support for UTS#18 compatible character classes * Add support for Perl-style extended character classes * JIT compilation now fails with the new error code PCRE2_ERROR_JIT_UNSUPPORTED for patterns which use features not supported by the JIT compiler. * New options PCRE2_EXTRA_NO_BS0 (disallow \0 as an escape for the NUL character); PCRE2_EXTRA_PYTHON_OCTAL (use Python disambiguation rules for deciding whether \12 is a backreference or an octal escape); PCRE2_EXTRA_NEVER_CALLOUT (disable callout syntax entirely); PCRE2_EXTRA_TURKISH_CASING (use Turkish rules for case-insensitive matching). * Add new API function pcre2_set_optimize() for controlling which optimizations are enabled. * A variety of extensions have been made to pcre2_substitute() and its syntax for replacement strings. These now support: \123 octal escapes; titlecasing \u\L; \1 backreferences; \g<1> and $<NAME> backreferences; $& $` $' and $_; new function pcre2_set_substitute_case_callout() to allow locale-aware case transformation. - drop pcre2-10.44-github-issue-415.patch, included upstream - update license to BSD-3-Clause WITH PCRE2-exception and cascade to subpackages and parts (boo#1240358) ==== php8 ==== Version update (8.4.5 -> 8.4.6) Subpackages: php8-ctype php8-dom php8-iconv php8-openssl php8-pdo php8-sqlite php8-tokenizer php8-xmlreader php8-xmlwriter - version update to 8.4.6 BCMath: Fixed pointer subtraction for scale. Core: Fixed property hook backing value access in multi-level inheritance. Fixed accidentally inherited default value in overridden virtual properties. Fixed bug GH-17376 (Broken JIT polymorphism for property hooks added to child class). Fixed bug GH-17913 (ReflectionFunction::isDeprecated() returns incorrect results for closures created from magic __call()). Fixed bug GH-17941 (Stack-use-after-return with lazy objects and hooks). Fixed bug GH-17988 (Incorrect handling of hooked props without get hook in get_object_vars()). Fixed bug GH-17998 (Skipped lazy object initialization on primed SIMPLE_WRITE cache). Fixed bug GH-17998 (Assignment to backing value in set hook of lazy proxy calls hook again). Fixed bug GH-17961 (use-after-free during dl()'ed module class destruction). Fixed bug GH-15367 (dl() of module with aliased class crashes in shutdown). Fixed OSS-Fuzz #403308724. Fixed bug GH-13193 again (Significant performance degradation in 'foreach'). DBA: Fixed assertion violation when opening the same file with dba_open multiple times. DOM: Fixed bug GH-17991 (Assertion failure dom_attr_value_write). Fix weird unpack behaviour in DOM. Fixed bug GH-18090 (DOM: Svg attributes and tag names are being lowercased). Fix xinclude destruction of live attributes. Fuzzer: Fixed bug GH-18081 (Memory leaks in error paths of fuzzer SAPI). GD: Fixed bug GH-17984 (calls with arguments as array with references). LDAP: Fixed bug GH-18015 (Error messages for ldap_mod_replace are confusing). Mbstring: Fixed bug GH-17989 (mb_output_handler crash with unset http_output_conv_mimetypes). Opcache: Fixed bug GH-15834 (Segfault with hook "simple get" cache slot and minimal JIT). Fixed bug GH-17966 (Symfony JIT 1205 assertion failure). Fixed bug GH-18037 (SEGV Zend/zend_execute.c). Fixed bug GH-18050 (IN_ARRAY optimization in DFA pass is broken). Fixed bug GH-18113 (stack-buffer-overflow ext/opcache/jit/ir/ir_sccp.c). Fixed bug GH-18112 (NULL access with preloading and INI option). Fixed bug GH-18107 (Opcache CFG jmp optimization with try-finally breaks the exception table). PDO: Fix memory leak when destroying PDORow. Standard: Fix memory leaks in array_any() / array_all(). SOAP: Fixed bug #66049 (Typemap can break parsing in parse_packet_soap leading to a segfault) . SPL: Fixed bug GH-18018 (RC1 data returned from offsetGet causes UAF in ArrayObject). Treewide: Fixed bug GH-17736 (Assertion failure zend_reference_destroy()). Windows: Fixed bug GH-17836 (zend_vm_gen.php shouldn't break on Windows line endings). ==== python-pip ==== Version update (24.3.1 -> 25.0.1) Subpackages: python311-pip python313-pip - update to 25.0.1 * Fix an unsupported type annotation on Python 3.10 and earlier. (#13181) * Fix a regression where truststore would never be used while installing build dependencies. (#13186) * Deprecate the no-python-version-warning flag as it has long done nothing since Python 2 support was removed in pip 21.0. (#13154) * Prefer to display PEP 639 License-Expression in pip show if metadata version is at least 2.4. (#13112) * Support PEP 639 License-Expression and License-File metadata fields in JSON output. pip inspect and pip install --report now emit license_expression and license_file fields in the metadata object, if the corresponding fields are present in the installed METADATA file. (#13134) * Files in the network cache will inherit the read/write permissions of pipâs cache directory (in addition to the current user retaining read/write access). This enables a single cache to be shared among multiple users. (#11012) * Return the size, along with the number, of files cleared on pip cache purge and pip cache remove (#12176) * Cache python-requires checks while filtering potential installation candidates. (#13128) * Optimize package collection by avoiding unnecessary URL parsing and other processing. (#13132) * Reorder the encoding detection when decoding a requirements file, relying on UTF-8 over the locale encoding by default, matching the documented behaviour. (#12771) * The pip version self check is disabled on EXTERNALLY-MANAGED environments. (#11820) * Fix a security bug allowing a specially crafted wheel to execute code during installation. (#13079) * The inclusion of packaging 24.2 changes how pre-release specifiers with < and > behave. Including a pre-release version with these specifiers now implies accepting pre-releases (e.g., <2.0dev can include 1.0rc1). To avoid implying pre-releases, avoid specifying them (e.g., use <2.0). The exception is !=, which never implies pre-releases. (#13163) * The --cert and --client-cert command-line options are now respected while installing build dependencies. Consequently, the private _PIP_STANDALONE_CERT environment variable is no longer used. (#5502) * The --proxy command-line option is now respected while installing build dependencies. (#6018) ==== sdbootutil ==== Version update (1+git20250410.9086124 -> 1+git20250421.7ffd25a) Subpackages: sdbootutil-dracut-measure-pcr sdbootutil-snapper - Update to version 1+git20250421.7ffd25a: * Report when PCR 15 cannot be predicted * Reap failed keys * Improve asking passwords (bsc#1241171) ==== vim ==== Version update (9.1.1258 -> 9.1.1330) Subpackages: vim-data vim-data-common xxd - update to 9.1.1330: * patch 9.1.1330: may receive E315 in terminal * patch 9.1.1329: cannot get information about command line completion * patch 9.1.1328: too many strlen() calls in indent.c * patch 9.1.1327: filetype: nroff detection can be improved * runtime(doc): cross-link :| meaning :p and explain E749 * runtime(doc): style: clarify to prefer 2 spaces after a sentence * runtime(pov): deprecate `#render` and `#statistics` in syntax script * patch 9.1.1326: invalid cursor position after 'tagfunc' * runtime(keymaps): update Brazilian keymaps * patch 9.1.1325: tests: not checking error numbers properly * runtime(doc): clarify 'includeexpr' is not used for <cfile> * runtime(filetype): improve *.h filetype detection * runtime(indent-tests): Raise timeouts for "search*()"es * runtime(indent-tests): Annotate timed "search*()"es for tracing * runtime(indent-tests): Instrument timed "search*()" calls * patch 9.1.1324: undefined behaviour if X11 connection dies * patch 9.1.1323: b:undo_ftplugin not executed when re-using buffer * runtime(nix): set iskeyword and b:match_words in ftplugin * runtime(doc): clarify "nearest" value for 'completeopt' * runtime(doc): Tweak documentation style a bit * patch 9.1.1322: small delete register cannot paste multi-line correctly * patch 9.1.1321: filetype: MS ixx and mpp files are not recognized * patch 9.1.1320: filetype: alsoft config files are not recognized * patch 9.1.1319: Various typos in the code, issue with test_inst_complete.vim * patch 9.1.1318: tests: test_format fails * runtime(jjdescription): Don't require a space to start comments * patch 9.1.1317: noisy error when restoring folds from session fails * patch 9.1.1316: missing memory allocation failure in os_mswin.c * patch 9.1.1315: completion: issue with fuzzy completion and 'completefuzzycollect' * patch 9.1.1314: max allowed string width too small * patch 9.1.1313: compile warning about uninitialized value * patch 9.1.1312: tests: Test_backupskip() fails when HOME is defined * patch 9.1.1311: completion: not possible to limit number of matches * patch 9.1.1310: completion: redundant check for preinsert effect * runtime(gleam): Update ftplugin, use recommended_style config variable * patch 9.1.1309: tests: no test for 'pummaxwidth' with non-truncated "kind" * runtime: set 'cpoptions' for line-continuation in various runtime files * runtime(tar): remove dependency on netrw#WinPath, include mapping doc * runtime(netrw): remove deprecated functions * patch 9.1.1308: completion: cannot order matches by distance to cursor * patch 9.1.1307: make syntax does not reliably detect different flavors * patch 9.1.1306: completion menu rendering can be improved * patch 9.1.1305: completion menu active after switching windows/tabs * patch 9.1.1304: filetype: some man files are not recognized * runtime(netrw): upstream snapshot of v180 * patch 9.1.1303: missing out-of-memory check in linematch.c * patch 9.1.1302: Coverity warns about using uninitialized value * patch 9.1.1301: completion: cannot configure completion functions with 'complete' * patch 9.1.1300: wrong detection of -inf * runtime(doc): update enum helptext * patch 9.1.1299: filetype: mbsyncrc files are not recognized * runtime(doc): update options.txt and clarify 'wildmode' further * runtime(gleam): update Maintainer and filetype options * patch 9.1.1298: define_function() is too long * patch 9.1.1297: Ctrl-D scrolling can get stuck * runtime(new-tutor): update tutor and correct comandline completion * patch 9.1.1296: completion: incorrect truncation logic * patch 9.1.1295: clientserver: does not handle :stopinsert correctly * runtime(doc): disable last-position-jump in diff mode * runtime(doc): Improve 'wildmode' setting desciption * patch 9.1.1294: gui tabline menu does not use confirm when closing tabs * runtime(doc): correct backslash escaping comma example * patch 9.1.1293: comment plugin does not handle 'exclusive' selection for comment object * patch 9.1.1292: statusline not correctly evaluated * runtime(sh): Do not look up a "sh" utility in $PATH for "sh_13.sh" * runtime(filetype): make shell filetype detection more robust * patch 9.1.1291: too many strlen() calls in buffer.c * runtime(keymaps): include 2 Brazilian Keymaps * runtime(vim): Update-base-syntax, match full :*grep, :make, :sort and :filter commands * patch 9.1.1290: tests: missing cleanup in test_filetype.vim * patch 9.1.1289: tests: no test for matchparen plugin with WinScrolled event * runtime(remind): include remind.vim ftplugin * runtime(vim): Update base-syntax, improve :command highlighting * runtime(help): add omni completion and 'iskeyword' to filetype plugin * runtime(lf): improve syntax script, add filetype plugin * patch 9.1.1288: Using wrong window in ll_resize_stack() * runtime(doc): rename wrong option to 'pummaxwidth' * patch 9.1.1287: quickfix code can be further improved * patch 9.1.1286: filetype: help files not detected when 'iskeyword' includes ":" * patch 9.1.1285: Vim9: no error message for missing method after "super." * patch 9.1.1284: not possible to configure pum truncation char * runtime(lua): fix whitespace style issues in lua ftplugin * runtime(lua): improve foldexpr, add vim9 script version * runtime(doc): Fix minor typo in options.txt * runtime(fstab): set formatoptions-=t in filetype plugin * runtime(svelte): add matchit support to svelte filetype plugin * patch 9.1.1283: quickfix stack is limited to 10 items * patch 9.1.1282: Build and test failure without job feature * patch 9.1.1281: extra newline output when editing stdin * patch 9.1.1280: trailing additional semicolon in get_matches_in_str() * patch 9.1.1279: Vim9: null_object and null_class are no reserved names * patch 9.1.1278: Vim9: too long functions in vim9type.c * runtime(vim): Update base-syntax, match full :redir command * patch 9.1.1277: tests: trailing comment char in test_popupwin * patch 9.1.1276: inline word diff treats multibyte chars as word char * runtime(doc): update WinScrolled documentation * runtime(vim): Update base-syntax, improve :set backslash handling * patch 9.1.1275: MS-Windows: Not possible to pass additional flags to Make_mvc ... changelog too long, skipping 30 lines ... - add more units for rlimit rules ==== yast2-bootloader ==== Version update (5.0.15 -> 5.0.16) - Calling "sdbootutil set-timeout" with the correct parameters (bsc#1236578). - 5.0.16 ==== yast2-trans ==== Version update (84.87.20250413.d6cedb22b0 -> 84.87.20250416.5cd9324ae2) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20250416.5cd9324ae2: * Translated using Weblate (Chinese (China) (zh_CN)) * Translated using Weblate (Spanish) * Translated using Weblate (Spanish) * Translated using Weblate (Georgian) * Translated using Weblate (Slovenian)
