Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=3&version=Tumbleweed&build=20250423 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: bash cfitsio (4.5.0 -> 4.6.2) gnome-settings-daemon (48.0+3 -> 48.1) irqbalance kernel-firmware-bluetooth (20250408 -> 20250422) kernel-firmware-media (20250408 -> 20250422) kernel-firmware-platform (20250220 -> 20250422) kernel-firmware-qcom (20250408 -> 20250422) kernel-firmware-realtek (20250313 -> 20250422) kernel-firmware-sound (20250415 -> 20250422) kernel-source (6.14.2 -> 6.14.3) krb5 libgpg-error (1.53 -> 1.54) libsoup2 libxml2 (2.13.7 -> 2.13.8) libxml2-python (2.13.7 -> 2.13.8) mariadb-connector-c (3.3.13 -> 3.4.5) nftables (1.1.2 -> 1.1.3) openSUSE-release (20250422 -> 20250423) patterns-gnome python-gevent python-rich sbc (1.5 -> 2.1) snapper (0.12.1 -> 0.12.2) snappy tinysparql (3.9.1 -> 3.9.2) === Details === ==== bash ==== Subpackages: bash-sh - add -std=gnu17 to CFLAGS to fix gcc15 compile time error ==== cfitsio ==== Version update (4.5.0 -> 4.6.2) - Update to version 4.6.2: * Updated autotools configure script to use AM_MAINTAINER_MODE; disables automatic regeneration of the build system unless configure is invoked with '--enable-maintainer-mode' - Changes from version 4.6.1: * Updated CMake configuration to use GNUInstallDirs module and to use CMAKE_INSTALL_LIBDIR and CMAKE_INSTALL_INCLUDEDIR; fixes bug in 4.6.0 that led to an empty 'includedir' in cfitsio.pc. - Changes from version 4.6.0: * Improved the empty primary data test performed in fits_open_file. * Correction to eval_defs.h typedefs to allow for compilation on old gcc compilers. * The fitsverify utility tool now distinguishes between alternate coordinate systems when testing positions of WCSAXES keywords. * Updates made for greater C23 compatibility as required for gcc-15. * Possible memory vulnerabilities patched. * Fix to a possible heap buffer overflow in a utility tool. * Negative size parameter vulnerability patched in utility tool. - Drop cfitsio-nullptr.patch: incorporated upstream. - Drop cfitsio-cmake-devel-scripts-destination.patch: fixed upstream (also fixes boo#1236985). ==== gnome-settings-daemon ==== Version update (48.0+3 -> 48.1) - Update to version 48.1: + Cleanups and fixes + Power: - Ensure the backlight interface signal gets emitted on startup - Avoid using uninitialized value when restoring brightness + Sharing: Fixes to shutdown of sharing services + Updated translations. - Drop gnome-settings-daemon-fix-stop-service.patch, 411.patch and 413.patch, fixed upstream. - Rebase patches with quilt. ==== irqbalance ==== Subpackages: irqbalance-ui - Adopt license to GPL-2.0-only according to COPYING as suggested by licensedigger ==== kernel-firmware-bluetooth ==== Version update (20250408 -> 20250422) - Update to version 20250422 (git commit 944acaa23457): * rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 ==== kernel-firmware-media ==== Version update (20250408 -> 20250422) - Update to version 20250422 (git commit 944acaa23457): * qcom: vpu: add video firmware binary for qcm6490 ==== kernel-firmware-platform ==== Version update (20250220 -> 20250422) - Update to version 20250422 (git commit 944acaa23457): * bmi260: Add BMI260 IMU initial configuration data file ==== kernel-firmware-qcom ==== Version update (20250408 -> 20250422) - Update to version 20250422 (git commit 944acaa23457): * qcom: add QUPv3 firmware for QCS9100 platform ==== kernel-firmware-realtek ==== Version update (20250313 -> 20250422) - Update to version 20250422 (git commit 944acaa23457): * rtw89: 8922a: update element RF TXPWR to R40 * rtw89: 8852c: update element RF TXPWR to R78 * rtw89: 8852c: add fw v0.27.125.0 with format version 2 * Revert "rtw89: 8852c: update fw to v0.27.125.0" ==== kernel-firmware-sound ==== Version update (20250415 -> 20250422) - Update to version 20250422 (git commit 944acaa23457): * ASoC: tas2781: Swap channel for SPI projects. ==== kernel-source ==== Version update (6.14.2 -> 6.14.3) Subpackages: kernel-64kb kernel-default - Bluetooth: qca: fix NV variant for one of WCN3950 SoCs (git-fixes). - commit 493ad77 - Linux 6.14.3 (bsc#1012628). - ASoC: Intel: adl: add 2xrt1316 audio configuration (bsc#1012628). - cgroup/cpuset: Fix incorrect isolated_cpus update in update_parent_effective_cpumask() (bsc#1012628). - cgroup/cpuset: Fix error handling in remote_partition_disable() (bsc#1012628). - cgroup/cpuset: Fix race between newly created partition and dying one (bsc#1012628). - tracing: fprobe: Cleanup fprobe hash when module unloading (bsc#1012628). - gpiolib: of: Fix the choice for Ingenic NAND quirk (bsc#1012628). - selftests/futex: futex_waitv wouldblock test should fail (bsc#1012628). - ublk: fix handling recovery & reissue in ublk_abort_queue() (bsc#1012628). - drm/virtio: Fix flickering issue seen with imported dmabufs (bsc#1012628). - drm/i915: Disable RPG during live selftest (bsc#1012628). - x86/acpi: Don't limit CPUs to 1 for Xen PV guests due to disabled ACPI (bsc#1012628). - net: ethtool: fix ethtool_ringparam_get_cfg() returns a hds_thresh value always as 0 (bsc#1012628). - drm/xe/hw_engine: define sysfs_ops on all directories (bsc#1012628). - drm/xe: Restore EIO errno return when GuC PC start fails (bsc#1012628). - ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe() (bsc#1012628). - objtool: Fix INSN_CONTEXT_SWITCH handling in validate_unret() (bsc#1012628). - tipc: fix memory leak in tipc_link_xmit (bsc#1012628). - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (bsc#1012628). - net: tls: explicitly disallow disconnect (bsc#1012628). - octeontx2-pf: qos: fix VF root node parent queue index (bsc#1012628). - tc: Ensure we have enough buffer space when sending filter netlink notifications (bsc#1012628). - net: ethtool: Don't call .cleanup_data when prepare_data fails (bsc#1012628). - drm/tests: modeset: Fix drm_display_mode memory leak (bsc#1012628). - drm/tests: helpers: Create kunit helper to destroy a drm_display_mode (bsc#1012628). - drm/tests: cmdline: Fix drm_display_mode memory leak (bsc#1012628). - drm/tests: modes: Fix drm_display_mode memory leak (bsc#1012628). - drm/tests: probe-helper: Fix drm_display_mode memory leak (bsc#1012628). - net: libwx: handle page_pool_dev_alloc_pages error (bsc#1012628). - cifs: Fix support for WSL-style symlinks (bsc#1012628). - ata: sata_sx4: Add error handling in pdc20621_i2c_read() (bsc#1012628). - drm/i915/huc: Fix fence not released on early probe errors (bsc#1012628). - s390/cpumf: Fix double free on error in cpumf_pmu_event_init() (bsc#1012628). - nvmet-fcloop: swap list_add_tail arguments (bsc#1012628). - net_sched: sch_sfq: use a temporary work area for validating configuration (bsc#1012628). - net_sched: sch_sfq: move the limit validation (bsc#1012628). - smb: client: fix UAF in decryption with multichannel (bsc#1012628). - net: phy: move phy_link_change() prior to mdio_bus_phy_may_suspend() (bsc#1012628). - net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (bsc#1012628). - net: ppp: Add bound checking for skb data on ppp_sync_txmung (bsc#1012628). - nft_set_pipapo: fix incorrect avx2 match of 5th field octet (bsc#1012628). - ethtool: cmis_cdb: Fix incorrect read / write length extension (bsc#1012628). - iommu/exynos: Fix suspend/resume with IDENTITY domain (bsc#1012628). - iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group (bsc#1012628). - net: libwx: Fix the wrong Rx descriptor field (bsc#1012628). - perf/core: Simplify the perf_event_alloc() error path (bsc#1012628). - perf: Fix hang while freeing sigtrap event (bsc#1012628). - fs: consistently deref the files table with rcu_dereference_raw() (bsc#1012628). - umount: Allow superblock owners to force umount (bsc#1012628). - srcu: Force synchronization for srcu_get_delay() (bsc#1012628). - pm: cpupower: bench: Prevent NULL dereference on malloc failure (bsc#1012628). - irqchip/gic-v3: Add Rockchip 3568002 erratum workaround (bsc#1012628). - x86/mm: Clear _PAGE_DIRTY for kernel mappings when we clear _PAGE_RW (bsc#1012628). - x86/percpu: Disable named address spaces for UBSAN_BOOL with ... changelog too long, skipping 749 lines ... - commit 607aeeb ==== krb5 ==== Subpackages: krb5-client - add -std=gnu11 to CFLAGS to fix gcc15 compile time error, and to still allow build on Leap 15.6 ==== libgpg-error ==== Version update (1.53 -> 1.54) - Update to 1.54: * Fix a regression in 1.52 which did not allow to open UNC specified files on Windows. [rE28ae4ee194] * Ignore log file specification from the Registry in the gpg-error tool. ==== libsoup2 ==== - Add more CVE fixes: + ef6c4bf6.patch (boo#1240750 CVE-2025-2784) + 96c22b67.patch (boo#1240750 CVE-2025-2784) + 19124679.patch (boo#1240752 CVE-2025-32050) + a5b86bfc.patch (boo#1240756 CVE-2025-32052) + 5739a090.patch (boo#1240757 CVE-2025-32053) ==== libxml2 ==== Version update (2.13.7 -> 2.13.8) Subpackages: libxml2-2 libxml2-tools - Update to version 2.13.8: + Security: - [CVE-2025-32415] schemas: Fix heap buffer overflow in xmlSchemaIDCFillNodeTables. - [CVE-2025-32414] python: Read at most len/4 characters. - bug references: [bsc#1241453], [bsc#1241551] ==== libxml2-python ==== Version update (2.13.7 -> 2.13.8) - Update to version 2.13.8: + Security: - [CVE-2025-32415] schemas: Fix heap buffer overflow in xmlSchemaIDCFillNodeTables. - [CVE-2025-32414] python: Read at most len/4 characters. - bug references: [bsc#1241453], [bsc#1241551] ==== mariadb-connector-c ==== Version update (3.3.13 -> 3.4.5) - Update to 3.4.5: * https://mariadb.com/kb/en/mariadb-connector-c-3-4-5-release-notes/ * https://mariadb.com/kb/en/mariadb-connector-c-3-4-4-release-notes/ * https://mariadb.com/kb/en/mariadb-connector-c-3-4-3-release-notes/ * https://mariadb.com/kb/en/mariadb-connector-c-3-4-2-release-notes/ * https://mariadb.com/kb/en/mariadb-connector-c-3-4-1-release-notes/ * https://mariadb.com/kb/en/mariadb-connector-c-3-4-0-release-notes/ - Refresh mariadb-connector-c-2.3.1_unresolved_symbols.patch ==== nftables ==== Version update (1.1.2 -> 1.1.3) Subpackages: libnftables1 python313-nftables - Update to release 1.1.3 * Fix incorrect bytecode for vlan pcp mangling from netdev family chains such as ingress/egress: `... vlan pcp set 6 counter` * Fix bogus element in large concatenated set ranges, leading to: ``16777216 . 00:11:22:33:44:55 . 10.1.2.3 comment "123"`` instead of: ``"lo" . 00:11:22:33:44:55 . 10.1.2.3 comment "123"`` * Restore set auto-merge feature with timeouts, disabled in the previous v1.1.2 release. ==== openSUSE-release ==== Version update (20250422 -> 20250423) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== patterns-gnome ==== Subpackages: patterns-gnome-gnome patterns-gnome-gnome_basic patterns-gnome-gnome_basis patterns-gnome-gnome_games patterns-gnome-gnome_imaging patterns-gnome-gnome_internet patterns-gnome-gnome_multimedia patterns-gnome-gnome_office patterns-gnome-gnome_utilities patterns-gnome-gnome_x11 patterns-gnome-gnome_yast patterns-gnome-sw_management_gnome - Switch to Loupe and Papers for TW. ==== python-gevent ==== - Handle BrokenPipeError in src/gevent/ssl.py [bsc#1241037] * Upstream PR: https://github.com/gevent/gevent/pull/2103 * Add gevent-openssl35-test-fix.patch ==== python-rich ==== - Add test dependency on attrs ==== sbc ==== Version update (1.5 -> 2.1) Subpackages: libsbc1 - Update to version 2.1 * Fix issue when compiling without SBC_BUILD_WITH_SSE_SUPPORT. - Update to version 2.0 * Fix issue with SSE primitives on non-x86. - Drop patch: * fix-build-on-non-x86.patch (not longer needed) - Use ldconfig_scriptlets macro - Use correct Group tags - Specfile cleanup ==== snapper ==== Version update (0.12.1 -> 0.12.2) Subpackages: libsnapper7 snapper-zypp-plugin - use correct btrfs binary for target commands in snbk (gh#openSUSE/snapper#998) - version 0.12.2 - avoid running 'btrfs qgroup clear-stale' if quota is disabled (gh#openSUSE/snapper#987) - avoid build dependency e2fsprogs-devel ==== snappy ==== - Update summary of the most prominently installed (sub)package. ==== tinysparql ==== Version update (3.9.1 -> 3.9.2) Subpackages: libtracker-sparql-3_0-0 typelib-1_0-Tracker-3_0 - Update to version 3.9.2: + Fix installing pre-generated documentation in tarballs + Performance improvements in handling parser errors + Fixes for issues reported by OSS Fuzz
