Please note that this mail was generated by a script.
The described changes are computed based on the aarch64 DVD.
The full online repo contains too many changes to be listed here.

Please check the known defects of this snapshot before upgrading:
https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=3&version=Tumbleweed&build=20250614

Please do not reply to this email to report issues, rather file a bug
on bugzilla.opensuse.org. For more information on filing bugs please
see https://en.opensuse.org/openSUSE:Submitting_bug_reports

Packages changed:
  apparmor
  audit (4.0 -> 4.0.2)
  audit-secondary (4.0 -> 4.0.2)
  cnf
  cpupower (6.14.6 -> 6.15.2)
  curl
  dracut (059+suse.725.g1df2cbe1 -> 059+suse.732.g739e1c2f)
  emacs
  ffmpeg-7
  gnome-maps (48.3 -> 48.4)
  gtk4 (4.18.5 -> 4.18.6)
  jq
  kernel-firmware-iwlwifi (20250603 -> 20250609)
  kernel-firmware-mediatek (20250603 -> 20250606)
  kernel-firmware-nvidia
  kernel-source (6.15.1 -> 6.15.2)
  ktextaddons (1.5.4 -> 1.6.0)
  libapparmor
  libarchive (3.7.9 -> 3.8.1)
  libass (0.17.3 -> 0.17.4)
  libgcrypt
  libimobiledevice (1.3.0+263git.20250123 -> 1.3.0+283git.20250610)
  liblouis (3.33.0 -> 3.34.0)
  libopenmpt (0.7.13 -> 0.8.0)
  libportal
  libslirp (4.9.0+5 -> 4.9.1+1)
  libstorage-ng (4.5.258 -> 4.5.259)
  libupnp (1.14.23 -> 1.14.24)
  nano (8.4 -> 8.5)
  openSUSE-release (20250610 -> 20250614)
  openal-soft (1.24.2 -> 1.24.3~179)
  orca (48.1 -> 48.2)
  ovmf (202502 -> 202505)
  patterns-base
  pcre2
  perl-Archive-Zip (1.68 -> 1.680.0)
  perl-Digest-SHA1 (2.13 -> 2.130.0)
  perl-Socket6 (0.29 -> 0.290.0)
  perl-XML-Twig (3.530.0 -> 3.540.0)
  pipewire (1.4.4 -> 1.4.5)
  python-argcomplete
  python-gevent (25.4.2 -> 25.5.1)
  python-greenlet (3.2.2 -> 3.2.3)
  python-ptyprocess
  python-pycairo (1.26.1 -> 1.28.0)
  python-pyinotify
  python-pysmbc
  python-python-slugify
  python-pyzmq
  python-requests (2.32.3 -> 2.32.4)
  python-scour
  python-webencodings
  python311 (3.11.12 -> 3.11.13)
  python311-core (3.11.12 -> 3.11.13)
  qemu (10.0.0 -> 10.0.2)
  qpdf (11.9.1 -> 11.10.1)
  rdma-core (56.1 -> 57.0)
  rpm
  salt
  samba (4.22.1+git.393.a3fcbaec1e5 -> 4.22.2+git.396.c752843dcf4)
  sdbootutil (1+git20250529.307d6ff -> 1+git20250613.ee73e55)
  simple-scan (46.0 -> 48.1)
  sqlite3 (3.49.2 -> 3.50.1)
  tigervnc
  u-boot-rpiarm64
  uriparser
  vlc
  vsftpd
  xdp-tools (1.4.2 -> 1.5.5)
  yast2-bootloader (5.0.16 -> 5.0.20)
  yast2-kdump (5.0.4 -> 5.0.5)
  yast2-storage-ng (5.0.29 -> 5.0.32)

=== Details ===

==== apparmor ====
Subpackages: apparmor-abstractions apparmor-docs apparmor-parser 
apparmor-profiles apparmor-utils python3-apparmor

- update dovecot24.diff - more permissions for dovecot 2.4 (boo#1243008)

==== audit ====
Version update (4.0 -> 4.0.2)
Subpackages: libaudit1 libauparse0

- Refresh systemd service patches:
  - audit-allow-manual-stop.patch
  - auditd.service-fix-plugin-termination.patch
  - enable-stop-rules.patch
  - fix-hardened-service.patch
  - harden_auditd.service.patch
- Update to 4.0.2
  - Fix musl C builds
  - Many code cleanups (Yugend)
  - Use atomic variables if available for signal related flags
  - Dont rotate audit logs when auditd is in debug mode
  - Fix a couple memory leaks on error paths
  - Correct output when displaying rules with exe/path/dir (Attila Lakatos)
  - Fix auparse lookup test to not use the system libaupaurse
  - Improve auparse metrics
  - Update auparse normalizer for recent syscalls
  - Make status report uniform
- Update to 4.0.1
  - Update TRUSTED_APP interpretation to look for known fields
  - In auditd plugins, allow variable amount of arguments (Attila Lakatos)
  - Fix augenrules to work correctly when kernel is in immutable mode
  - Add ausearch_cur_event to auparse library (Attila Lakatos)
  - Add audisp-filter plugin (Attila Lakatos)
  - Improve sorting speed of aureport --summary reports
  - auditd & audit-rules.service pick up paths automatically (Laurent 
Bigonville)
  - Update auparse normalizer for new syscalls

==== audit-secondary ====
Version update (4.0 -> 4.0.2)
Subpackages: audit audit-rules python3-audit system-group-audit

- Refresh systemd service patches:
  - audit-allow-manual-stop.patch
  - auditd.service-fix-plugin-termination.patch
  - enable-stop-rules.patch
  - fix-hardened-service.patch
  - harden_auditd.service.patch
- Update to 4.0.2
  - Fix musl C builds
  - Many code cleanups (Yugend)
  - Use atomic variables if available for signal related flags
  - Dont rotate audit logs when auditd is in debug mode
  - Fix a couple memory leaks on error paths
  - Correct output when displaying rules with exe/path/dir (Attila Lakatos)
  - Fix auparse lookup test to not use the system libaupaurse
  - Improve auparse metrics
  - Update auparse normalizer for recent syscalls
  - Make status report uniform
- Update to 4.0.1
  - Update TRUSTED_APP interpretation to look for known fields
  - In auditd plugins, allow variable amount of arguments (Attila Lakatos)
  - Fix augenrules to work correctly when kernel is in immutable mode
  - Add ausearch_cur_event to auparse library (Attila Lakatos)
  - Add audisp-filter plugin (Attila Lakatos)
  - Improve sorting speed of aureport --summary reports
  - auditd & audit-rules.service pick up paths automatically (Laurent 
Bigonville)
  - Update auparse normalizer for new syscalls

==== cnf ====
Subpackages: cnf-bash

- enable build for all rust architectures

==== cpupower ====
Version update (6.14.6 -> 6.15.2)
Subpackages: cpupower-bash-completion libcpupower1

- Apply cpupower_fix_library_so_name.patch only for kernel < 6.15.0

==== curl ====
Subpackages: libcurl4

- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.

==== dracut ====
Version update (059+suse.725.g1df2cbe1 -> 059+suse.732.g739e1c2f)

- Update to version 059+suse.732.g739e1c2f:
  * ci(suse.conf.example): change log levels (jsc#PED-12922)
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)

==== emacs ====
Subpackages: emacs-el emacs-eln emacs-info emacs-nox etags

- Try some tricks like -j1 and SOURCE_DATE_EPOCH
- Add patches
  * 0009-pdumper-set-DUMP_RELOC_ALIGNMENT_BITS-1-for-m68k.patch
  * 0012-Add-inhibit-native-compilation.patch
  * 0013-Rename-to-inhibit-automatic-native-compilation.patch
  * 0015-Change-native-comp-async-jobs-number-default-to-1.patch
  * 0016-Change-native-comp-async-report-warnings-errors-to-s.patch
  * emacs-30.1-silent.patch
- Last change does not work as the new binary with unexec are
  also *not* reproducible
- For SLES use not pdmp images but unexec as well avoid eln files
  to have reproducible binary files and programs (boo#1239628)

==== ffmpeg-7 ====
Subpackages: libavcodec61 libavfilter10 libavformat61 libavutil59 libpostproc58 
libswresample5 libswscale8

- Enable libiec61883 integration

==== gnome-maps ====
Version update (48.3 -> 48.4)

- Update to version 48.4:
  + Fix search result popover not fitting on small screen (phone)
    devices
  + Show correct place type description for places of type "office"
    that are tagged on an entire building in OpenStreetMap
  + Updated translations.

==== gtk4 ====
Version update (4.18.5 -> 4.18.6)
Subpackages: gtk4-schema gtk4-tools libgtk-4-1 typelib-1_0-Gtk-4_0

- Update to version 4.18.6:
  + Bugs fixed:
  - Wrong behavior of GdkKeymap on macOS
  - cups: NULL-terminate array of choices
  - Fix the android build
  - icontheme: Load the missing image icon from the theme
  + Updated translations.

==== jq ====
Subpackages: libjq1

- Add patch CVE-2024-23337.patch (CVE-2024-23337, bsc#1243450)

==== kernel-firmware-iwlwifi ====
Version update (20250603 -> 20250609)

- Update to version 20250609 (git commit 0d92efb540f4):
  * Revert "iwlwifi: add Bz/gl FW for core96-76 release"

==== kernel-firmware-mediatek ====
Version update (20250603 -> 20250606)

- Update to version 20250606 (git commit 4f0106cf1943):
  * mediatek MT7922: update bluetooth firmware to 20250523103438
  * mediatek MT7921: update bluetooth firmware to 20250523111333
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device

==== kernel-firmware-nvidia ====

- Fix zypper conflict about directory -> symlink workaround (bsc#1244458)

==== kernel-source ====
Version update (6.15.1 -> 6.15.2)
Subpackages: kernel-64kb kernel-default

- Linux 6.15.2 (bsc#1012628).
- tracing: Fix compilation warning on arm32 (bsc#1012628).
- pinctrl: armada-37xx: use correct OUTPUT_VAL register for
  GPIOs > 31 (bsc#1012628).
- pinctrl: armada-37xx: set GPIO output value before setting
  direction (bsc#1012628).
- clk: samsung: correct clock summary for hsi1 block
  (bsc#1012628).
- acpi-cpufreq: Fix nominal_freq units to KHz in
  get_max_boost_ratio() (bsc#1012628).
- Documentation: ACPI: Use all-string data node references
  (bsc#1012628).
- pinctrl: mediatek: eint: Fix invalid pointer dereference for
  v1 platforms (bsc#1012628).
- rtc: Make rtc_time64_to_tm() support dates before 1970
  (bsc#1012628).
- rtc: Fix offset calculation for .start_secs < 0 (bsc#1012628).
- bcachefs: Kill un-reverted directory i_size code (bsc#1012628).
- bcachefs: Repair code for directory i_size (bsc#1012628).
- bcachefs: delete dead code from may_delete_deleted_inode()
  (bsc#1012628).
- bcachefs: Run may_delete_deleted_inode() checks in
  bch2_inode_rm() (bsc#1012628).
- bcachefs: Fix subvol to missing root repair (bsc#1012628).
- usb: quirks: Add NO_LPM quirk for SanDisk Extreme 55AE
  (bsc#1012628).
- usb: storage: Ignore UAS driver for SanDisk 3.2 Gen2 storage
  device (bsc#1012628).
- USB: serial: pl2303: add new chip PL2303GC-Q20 and PL2303GT-2AB
  (bsc#1012628).
- usb: typec: ucsi: fix Clang -Wsign-conversion warning
  (bsc#1012628).
- Bluetooth: hci_qca: move the SoC type check to the right place
  (bsc#1012628).
- serial: jsm: fix NPE during jsm_uart_port_init (bsc#1012628).
- nvmem: rmem: select CONFIG_CRC32 (bsc#1012628).
- usb: usbtmc: Fix timeout value in get_stb (bsc#1012628).
- binder: fix use-after-free in binderfs_evict_inode()
  (bsc#1012628).
- binder: fix yet another UAF in binder_devices (bsc#1012628).
- thunderbolt: Do not double dequeue a configuration request
  (bsc#1012628).
- dt-bindings: pwm: adi,axi-pwmgen: Fix clocks (bsc#1012628).
- dt-bindings: remoteproc: qcom,sm8150-pas: Add missing SC8180X
  compatible (bsc#1012628).
- dt-bindings: usb: cypress,hx3: Add support for all variants
  (bsc#1012628).
- dt-bindings: phy: imx8mq-usb: fix
  fsl,phy-tx-vboost-level-microvolt property (bsc#1012628).
- Rename to
  
patches.kernel.org/6.15.2-002-Revert-x86-smp-Eliminate-mwait_play_dead_cpuid.patch.
- Rename to
  patches.kernel.org/6.15.2-003-ACPICA-Introduce-ACPI_NONSTRING.patch.
- Rename to
  patches.kernel.org/6.15.2-004-ACPICA-Apply-ACPI_NONSTRING.patch.
- Rename to
  
patches.kernel.org/6.15.2-005-ACPICA-Apply-ACPI_NONSTRING-in-more-places.patch.
- Rename to
  
patches.kernel.org/6.15.2-034-Revert-drm-amd-display-more-liberal-vmin-vmax-.patch.
- commit bcb3897
- mkspec: Exclude rt flavor from kernel-syms dependencies (bsc#1244337).
- commit 7c95ae0
- MyBS: Do not build kernel-obs-qa with limit_packages
  Fixes: 58e3f8c34b2b ("bs-upload-kernel: Pass limit_packages also on 
multibuild")
- commit f4c6047
- MyBS: Simplify qa_expr generation
  Start with a 0 which makes the expression valid even if there are no QA
  repositories (currently does not happen). Then separator is always
  needed.
- commit e4c2851
- MyBS: Correctly generate build flags for non-multibuild package limit
  (bsc# 1244241)
  Fixes: 0999112774fc ("MyBS: Use buildflags to set which package to build")
- commit 27588c9
- bs-upload-kernel: Pass limit_packages also on multibuild
  Fixes: 0999112774fc ("MyBS: Use buildflags to set which package to build")
  Fixes: 747f601d4156 ("bs-upload-kernel, MyBS, Buildresults: Support 
multibuild (JSC-SLE#5501, boo#1211226, bsc#1218184)")
- commit 8ef486c
- Refresh
  patches.suse/Revert-drm-amd-display-more-liberal-vmin-vmax-update.patch.
  Update upstream status.
- commit f548b28
- series.conf: cleanup
- update upstream reference and resort
  - patches.suse/iommu-Allow-attaching-static-domains-in-iommu_attach.patch
- commit 7c1c418
- drm/amd/display: Fix default DC and AC levels (bsc#1240650).
- drm/amd/display: Add debugging message for brightness caps
  (bsc#1240650).
- commit 98de36e
- kernel-source: Do not use multiple -r in sed parameters
  This usage is enabled in commit b18d64d
  (sed: allow multiple (non-conflicting) -E/-r parameters, 2016-07-31)
  only available since sed 4.3
  Fixes: dc2037cd8f94 ("kernel-source: Also replace bin/env"
- commit 91ad98e

==== ktextaddons ====
Version update (1.5.4 -> 1.6.0)
Subpackages: libKF6TextAddons1

- Update to 1.6.0. No changelog.
- Drop patch, merged upstream:
  * 0001-Add-missing-include.patch

==== libapparmor ====

- update dovecot24.diff - more permissions for dovecot 2.4 (boo#1243008)

==== libarchive ====
Version update (3.7.9 -> 3.8.1)

- update to 3.8.1:
  * libarchive: fix FILE_skip regression
  * compress: Prevent call stack overflow
  * iso9660: always check archive_string_ensure return value
  * tar: Support negative time values with pax
  * tar: Reset accumulated header state after reading macOS metadata blob
  * tar: Keep block alignment after pax error
  * tar: Handle extra bytes after sparse entries
- includes changes from 3.8.0:
  * bsdtar: support --mtime and --clamp-mtime
  * 7-zip reader: improve self-extracting archive detection
  * xar: xmllite support for the XAR reader and writer
  * zip writer: added XZ, LZMA, ZSTD and BZIP2 support
  * zip writer: added LZMA + RISCV BCJ filter
  * rar: do not skip past EOF while reading (boo#1244159)
  * rar: fix double free with over 4 billion nodes (boo#1244160)
  * rar: fix heap-buffer-overflow (boo#1244161)
  * warc: prevent signed integer overflow (boo#1244162)
  * tar: fix overflow in build_ustar_entry (boo#1244163)
  * bsdtar: don't hardlink negative inode files together
  * gz: allow setting the original filename for gzip compressed files
  * lib: improve lseek handling
  * lib: support @-prefixed Unix epoch timestamps as date strings
  * rar: support large headers on 32 bit systems
  * tar reader: Improve LFS support on 32 bit systems
- drop lib-suffix.patch, different implementation upstream
- spec file clean-up, removing currently unused -static

==== libass ====
Version update (0.17.3 -> 0.17.4)

- Update to 0.17.4:
  * add new API to prune old events from memory
  - ass_prune_events for manual pruning
  - ass_configure_prune to set up automatic pruning
  * add ASS_OVERRIDE_BIT_BLUR flag
  * fontconfig: fix minor memory leaks in pathological font setups
  * coretext: fix build on older compilers or Mac OS X 10.5
  * checkasm: fix build for older compilers
  * aarch64: fix assembly build on strict compilers due to oversized align
  * meson: improve ASM configuration on x86 Android
  * meson: align MSVC warnings and optimisations closer to gcc-like compilers
  * meson can now build all dev utility executables

==== libgcrypt ====

- Security fix [bsc#1221107, CVE-2024-2236]
  * Add --enable-marvin-workaround to spec to enable workaround
  * Fix  timing based side-channel in RSA implementation ( Marvin attack )
  * Add libgcrypt-CVE-2024-2236.patch

==== libimobiledevice ====
Version update (1.3.0+263git.20250123 -> 1.3.0+283git.20250610)

- Update to version 1.3.0+283git.20250610:
  * Use updated libplist API if available
  * Use SHA256 signature instead of SHA1 for iOS 4 and newer when creating and 
signing pairing certificates

==== liblouis ====
Version update (3.33.0 -> 3.34.0)
Subpackages: liblouis-data liblouis20 python3-louis

- Update to version 3.34.0:
  + This release brings significant improvements to various
    language tables, particularly for Classical/Biblical Hebrew
    where three main standards are now supported. We have a new
    table for Thai Grade 2 contracted braille, and substantial
    updates to Lithuanian braille tables. There are also
    improvements to Hungarian, Dutch, Norwegian, and Turkish
    tables. On the technical side, there's new support for building
    macOS universal binaries and the pre-built html and plain text
    documentation is no longer packaged with the released tarball.

==== libopenmpt ====
Version update (0.7.13 -> 0.8.0)

- Update to 0.8.0:
  * [New] Can now read PumaTracker (PUMA) modules.
  * [New] Can now read Face The Music (FTM) modules.
  * [New] Can now read Future Composer (FC / FC13 / FC14 / SMOD)
    modules.
  * [New] Can now read Game Music Creator (GMC) modules.
  * [New] Can now read Chuck Biscuits / Black Artist (CBA) modules
    from the Expoze musicdisk by Heretics
  * [New] Can now read Real Tracker 2 (RTM) modules.
  * [New] Can now read Images Music System (IMS) modules.
  * [New] Can now read ChipTracker (MOD) modules.
  * [New] Can now read TCB Tracker (MOD) modules.
  * [New] Can now read EasyTrax (ETX) modules.
  * [New] Can now load UNIC Tracker v1 (UNIC) files.
  * [New] MED: Synthesized and hybrid instruments are now
    supported.
  * [New] GT2: Better support for old “envelopes”, in particular
    adding support for the previously missing
    tremor / tremolo / vibrato.
  * [New] NST: His Master’s Noise “Mupp” instruments are now
    supported, as well as command 7 “mega-arp”.
  * [New] libopenmpt: New APIs for determining whether order list
    entries or pattern indices have a special meaning:
    openmpt::module::is_order_skip_entry(),
    openmpt::module::is_pattern_skip_item(),
    openmpt::module::is_order_stop_entry(),
    openmpt::module::is_pattern_stop_item() (C++),
    and openmpt_module_is_order_skip_entry(),
    openmpt_module_is_pattern_skip_item(),
    openmpt_module_is_order_stop_entry(),
    openmpt_module_is_pattern_stop_item() (C).
  * [New] libopenmpt: New APIs for retrieving pattern time
    signature information:
    openmpt::module::get_pattern_rows_per_beat(),
    openmpt::module::get_pattern_rows_per_measure() (C++),
    and openmpt_module_get_pattern_rows_per_beat(),
    openmpt_module_get_pattern_rows_per_measure() (C).
  * [New] libopenmpt: New APIs for retrieving the
    restart / loop position:
    openmpt::module::get_restart_order(),
    openmpt::module::get_restart_row() (C++),
    and openmpt_module_get_restart_order(),
    openmpt_module_get_restart_row() (C).
  * [New] libopenmpt: New API for retrieving the playback time at a
    given order / row combination:
    openmpt::module::get_time_at_position() (C++),
    and openmpt_module_get_time_at_position() (C).
  * When formatting pattern data, effect letters in the volume
    column are now always formatted correctly, regardless of the
    module format.
  * IT: Various playback fixes.
  * IT: When using tone portamento to another sample after the
    previous sample’s sustain loop has been released, the new
    sample should also not play its sustain loop.
  * IT: When triggering an empty instrument note slot, completely
    ignore the pattern cell - do not reset the currently playing
    instrument’s envelopes, and also don’t process any
    effects - including global ones.
  * IT: Offset with instrument number but no note should play
    offset effect with previous note.
  * IT: Fixed various combinations of volume column and effect
    column portamento effects.
  * IT: Implemented a quirk in command Lxx that always executes a
    portamento down when no tone portamento has been set up before,
    sometimes causing the target note to be reached immediately,
    or sliding the note down very subtly.
  * IT: Envelope Carry should not be influenced by a previous
    note-off.
  * XM: When a key-off is encountered before auto-vibrato reaches
    full depth, the depth is reset.
  * S3M: Combined slides (Kxy / Lxy) are no longer run on the first
    tick of a row in files made with Scream Tracker.
  * MOD: Groo’s “The Ultimate Beeper” now plays like in ProTracker.
  * DTM: Portamentos are now also evaluated on the first tick of
    the row.
  * MO3: If multiple sample slots shared the same Ogg Vorbis
    sample, only one sample slot was loaded.
  * MED: Various playback fixes.
  * SymMOD: Files containing more than 127 channels are no longer
    rejected.
  * Better support for automatic slide commands (commands that keep
    sliding on following rows) in various formats.
  * The pattern channel limit was raised from 127 to 192 for some
    formats.
  * openmpt123: Multi-threaded encoding is enabled with
    libFLAC 1.5.0 or newer.
  * xmp-openmpt: Memory consumption during file loading has been
    reduced.

==== libportal ====
Subpackages: libportal-gtk3-1 libportal-gtk4-1 libportal1 typelib-1_0-Xdp-1_0

- Fix qt devel sub-packages Requires.
- Use _multibuild for qt5 and qt6 so we can disable building the
  qt5 flavor in SLE16/SLFO and enable it in Leap 16.

==== libslirp ====
Version update (4.9.0+5 -> 4.9.1+1)

- Update to version 4.9.1+1:
  * Mention how to get debugging prints
  * Release v4.9.1
  * tcp: Fix starting the linger2 timer on socket shutdown
  * tcp: Reduce linger time to two minutes
  * tcp: on input during init, reset TCPT_KEEP to TCPTV_KEEP_INIT
  * tcp: on input, reset TCPT_KEEP to TCPTV_KEEP_IDLE rather than 
TCPTV_KEEPINTVL
  * Modified util.c to handle WSA function return values closer to 
specification. Explicit checks for INVALID_SOCKET and SOCKET_ERROR are made.
  * apple: Fix getting IPv4 DNS server address when IPv4 and IPv4 are 
interleaved
  * Do not link tests with libslirp.map

==== libstorage-ng ====
Version update (4.5.258 -> 4.5.259)
Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1

- Translated using Weblate (Portuguese (Brazil)) (bsc#1149754)
- 4.5.259

==== libupnp ====
Version update (1.14.23 -> 1.14.24)
Subpackages: libixml11 libupnp17

- Update to release 1.14.24
  * Fix possible close() on non-initialized socket

==== nano ====
Version update (8.4 -> 8.5)

- GNU nano 8.5
  * Anchors are now saved when a file is closed, and restored when
    the file is reopened -- if and when --positionlog is active
  * Nano exits with an error status upon keystrokes ^O^Q and ^X^Q
  * Keystroke ^L just centers the cursor, while M-% cycles it
  * Option --whitespace is accepted, but left undocumented
  * Syntax coloring now works correctly in more locales

==== openSUSE-release ====
Version update (20250610 -> 20250614)
Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd

- automatically generated by openSUSE-release-tools/pkglistgen

==== openal-soft ====
Version update (1.24.2 -> 1.24.3~179)
Subpackages: libopenal1 openal-soft-data

- Use the @TAG@~@VERSION@ format specifier in obs_scm service
- Update to git version 1.24.3+git7f56dcdf. This includes the port
  to Qt6 added as a patch previously and also other fixes that
  let this build in Leap 15.6.
- Drop patch that's already included in this version:
  * 1132.patch
- Use %cmake_build instead of %make_jobs
- Add 1132.patch: port to Qt6
- Apply spec-cleaner -ki changes
- Replaced deprecated ALSOFT_CONFIG CMake option with
  ALSOFT_INSTALL_UTILS
- Update to version 1.24.3:
  * Fixed handling WASAPI enumerated device changes
  * Fixed a crash with UWP builds when __wargv is null
  * Fixed using AL_FORMAT_BFORMAT3D_I32
  * Improved the bsinc resamplers' cutoff frequencies
  * Slightly reduced the aliasing noise in the cubic spline
    resampler
  * Added new bsinc48 and fast_bsinc48 resampler options.
  * Added support for using NFC filters with UHJ output.

==== orca ====
Version update (48.1 -> 48.2)

- Update to version 48.2:
  + Web:
  - Fix two instances of Orca failing to interrupt speech during
    navigation.
  - Handle structural navigation among headings with broken ARIA
    authoring.
  - Fix population of the enable-structural-navigation checkbox.
  + Flat Review:
  - Fall back to clicking on object when clicking on character
    fails.
  - Work around issue causing objects with "dead"/missing
    children to not be included in the collection of objects.
  + General:
  - Fix several unhandled exceptions.
  - Fix chattiness related to deleting selected text.
  - Include state expanded when generating braille for table rows.
  - Include ancestors when generating speech for focused combo
    boxes.
  + Updated translations.

==== ovmf ====
Version update (202502 -> 202505)
Subpackages: qemu-uefi-aarch64

- Update to edk2-stable202505
  - New Features & Bug Fixes (https://github.com/tianocore/edk2/releases):
  - NetworkPkg/IScsiDxe:Fix for out of bound memory access for bz4207 
(CVE-2024-38805)
  - Multiple packages: stop using EmbeddedPkg libfdt
  - Adding support for TPM over FF-A on ARM platforms
  - SecurityPkg: Prevent invalid DBX from being set
  - SecurityPkg: Out of bound read in HashPeImageByType()
  - Adding support for MM Communicate v3
  - BaseTools: Disable VS2019/2022 ARM/AARCH64 Stack Cookies
  - Introduce Redfish Platform Wanted Device Lib
  - HobLib: Add two new APIs in HobLib
  - Patches (git log --oneline --date-order 
edk2-stable202502..edk2-stable202505):
    6951dfe7d5 OvmfPkg/VirtCommunicationDxe: add IoLib to 
VirtMmCommunication.inf
    2e5b357a1f SecurityPkg/Tpm2InstanceLibFfa: Fix constructor wrong name
    5ea30a061c MdeModulePkg/HiiDatabaseDxe: Fix BlockSize length
    b3a2f7ff24 NetworkPkg/IScsiDxe:Fix for out of bound memory access for 
bz4207 (CVE-2024-38805)
    607c58ef01 .github: Compare collaborator GitHub ID's in single case
    399a40e5cb ArmVirtPkg: Fix dsc include ordering
    b2db39cefe MdeModulePkg: Correct Usb Mouse Z for absolute pointer.
    fc215474c4 UefiCpuPkg: Enable the IPI vectors on LoongArch
    7cea938ac5 UefiCpuPkg: Fix a bug about MP init on LoongArch
    43e29830ef BaseTools: Fix Macro Expansion on Machine Architecture for 
Components
    5bc52de687 MdeModulePkg: DebugImageInfoTable: Fix Array Maintenance
    867fad874a MdeModulePkg: Fix Image Memory Protection Applying
    28653a1c8a UefiCpuPkg/PiSmmCpuDxeSmm: Fix SMRAM memory leak during S3 resume
    d6101acb08 MdeModulePkg: Shortcircuit GCD Dumping Logic if Not Printing
    2cff8743ce MdeModulePkg/Spi: Solving potential null ptr deref. in 
SpiNorFlashJedecSfdp
    02ec228654 BaseTools: Change arm align value from 32 to 64
    77b199b7b9 BaseTools: Update tools_def for aarch64
    dca5d26bc5 UefiCpuPkg/MpInitLib: Fix SNP AP creation when using known APIC 
IDs
    dd8c272555 MdeModulePkg/AcpiTableDxe: Add function for extract ACPI table 
from HOB.
    225bf1277c RedfishPkg/RedfishExDxe: call platform device wanted lib
    b2c4294c49 RedfishPkg: introduce platform wanted device lib
    31fc56c70a ArmFfaLib: Replace SMCCC_VERSION check with FF-A version check
    9948a30645 MdePkg/IndustryStandard: fix PASID supported bit
    8aad683e59 ArmVirtPkg,DynamicTablesPkg,EmbeddedPkg,OvmfPkg: use MdePkg 
BaseFdtLib
    37652b830e ArmVirtPkg/ArmVirtCloudHv: add missing PrePiLib 
dependency/resolution
    a862c07a3a MdePkg/BaseFdtLib: add FdtGetPropertyW wrapper
    cc52f88e61 MdePkg/BaseFdtLib: add FdtSubnodeOffset prototype
    e25331fc45 MdePkg,UefiPayloadPkg: clean up BaseFdtLib API confusion
    e1dee2bcfa MdeModulePkg SpiBus: Use correct GUID
    defdccd4ae ShellPkg: Add PCIe extended capability
    aa32d2cfc2 MdePkg: Add additional PCIe extended capabilities
    98351bb0d9 NetworkPkg: Add PCD for HTTP transfer buffer size
    d985bd4b97 BaseTools: Scripts: efi_debugging.py: search for 
EFI_SYSTEM_TABLE_POINTER
    55b4688157 BaseTools/Conf: Enable GCC preprocessor line-markers for VFR
    bf99048365 BaseTools: Add support for GCC preprocessor line directives
    091bd7958b ReadMe.rst: Update pipeline badges for new pipelines
    7664c0b4a6 DynamicTablesPkg: Fix incorrect WSMT table size
    5ccb5fff02 MdeModulePkg: DxeCore: Set Image Protections Through GCD
    6c6d6f42db MdeModulePkg: DxeCore: Lower Image Protection Print to Verbose 
Log Level
    856bdc8eec OvmfPkg/CcExitLib: Use the proper register when filtering MSRs
    956ef6cd8b ArmPkg/ArmScmiDxe: Use array indexing to access adjacent buffers
    c6db76402c MdeModulePkg BmDriverHealth.c: Support dump the driver name
    135e07c6e5 DeviceManagerUiLib:Update DeviceManager form data when the form 
opens.
    864cc900ab DisplayEngineDxe: Fix length when displaying menu string
    7711e8a167 DynamicTablesPkg: Add Dbg2Generator Hostbased test
    d8d47a0ae6 DynamicTablesPkg: Add support for non-serial DBG2 devices
    42c6deb6f8 DynamicTablesPkg/AcpiDbg2Lib.inf: Add support for X64 Build
    8910f722c9 OvmfPkg/VirtMmCommunicationDxe: stop on init failure
    4846ac933f ArmVirtPkg: set PcdQemuVarsRequire
    9af96e21d8 OvmfPkg: add PcdQemuVarsRequire
    cd6f84b70c ArmVirtPkg/ArmVirtQemu: add QEMU_PV_VARS option
    44989944a0 OvmfPkg/OvmfPkgX64: add QEMU_PV_VARS option
    9dd47eeea1 OvmfPkg: add new VirtMmCommunicationDxe driver
    d198c80157 OvmfPkg: add IndustryStandard/QemuUefiVars.h
    d85ee54d53 OvmfPkg/HardwareInfoLib: add support for qemu vars device
    26fb5edff3 MdeModulePkg/ArmFfaLib: Add depex on 
gEfiPeiMemoryDiscoveredPpiGuid
    002d69ad9e OvmfPkg: Update ubuntu VM image to 24.04
    06746e4b06 EmulatorPkg: Update ubuntu VM image to 24.04
    e944c98e1b ArmVirtPkg: Update ubuntu VM image to 24.04
    1ac795ea6c .azurepipelines: Update ubuntu VM image to 24.04
    b833c2f3a6 .pytool: Update pipeline filename instructions
    ab3a451b1b OvmfPkg: Update pipeline filenames
    b9f565f8c9 EmulatorPkg: Update pipeline filenames
    1566205a40 ArmVirtPkg: Rename Linux pipeline file
    a0d785a560 .azurepipelines: Update pipeline filenames
    d3b2ee2df3 ShellPkg: Updated Memory Form Factor definition per SMBIOS 3.8.0
    1c4c85a003 MdePkg/Library: Remove unused gEfiDevicePathProtocolGuid
    be4ae9a97d MdePkg/Include/Ppi: Add back gEdkiiPeiMpServices2PpiGuid
    3c79bd38e0 UefiCpuPkg: Add back gEdkiiPeiMpServices2PpiGuid
    63e4713c48 OvmfPkg: switch 4M builds to full openssl
    30c754d853 OvmfPkg: move openssl/tls library config to .dsc.inc file
    f96d38f432 ArmPkg/ArmScmiDxe: Fix SCMI param overwrite in multi-transaction 
scenario
    8406e672e8 MdePkg: Updated Memory Form Factor definition per SMBIOS 3.8.0
    99a5f388df UefiPayloadPkg: Fix a typo in SMM base
    238dfc54d0 UefiPayloadPkg: Add MemoryTypeInformation HOB
    19c6189f54 UefiPayloadPkg: Fix SMM build failure
    003873db21 MdeModulePkg: PiSmmIpl: Fix physical address dereferencing
    2e85d12685 CryptoPkg: Resolve CodeQL Errors
    62390a89c5 MdePkg: Fix typos in PerformanceLib.h
    5e5ca20bf7 Maintainers.txt: Add Kun Qin as reviewer for ARM-FFA folders in 
SecurityPkg
    548c29129c SecurityPkg: Tpm2InstanceLibFfa: Introduce Tpm2InstanceLib over 
FF-A
    86d5680817 SecurityPkg: Tpm2DeviceLibFfa: Introduce TPM device library over 
FF-A
    df77417d39 SecurityPkg: Tpm2ServiceFfa: Introduce TPM over FF-A Definitions
    7d297e370e SecurityPkg: Tcg2AcpiFfa: Add Tcg2Acpi for FFA enabled ARM 
platforms
    219c3bac05 SecurityPkg: SmmTcg2PhysicalPresenceLib: Add ARM platforms 
implementation
    ec5d8ad35f SecurityPkg: Tcg2StandaloneMmArm: Add Tcg2StandaloneMm for ARM 
platforms
    f89ae9ca2a SecurityPkg: PhysicalPresenceData: Add a GUID used for ACPI 
functions
    ... changelog too long, skipping 263 lines ...
  - ovmf-Revert-Add-Stack-Cookie-Support-to-MSVC-and-GCC.patch

==== patterns-base ====
Subpackages: patterns-base-apparmor patterns-base-base patterns-base-basesystem 
patterns-base-basic_desktop patterns-base-console patterns-base-enhanced_base 
patterns-base-minimal_base patterns-base-selinux patterns-base-sw_management 
patterns-base-x11 patterns-base-x11_enhanced

- Remove xf86-video-fbdev from x11_raspberrypi pattern as the
  package has been removed - boo#1243696
- Add cockpit-packages to sw_management Recommends for SLES 16.0
  (bsc#1240517).

==== pcre2 ====
Subpackages: libpcre2-16-0 libpcre2-32-0 libpcre2-8-0 libpcre2-posix3

- Mark profiling as non-deterministic (boo#1040589)

==== perl-Archive-Zip ====
Version update (1.68 -> 1.680.0)

- Normalize CPAN version
  See https://github.com/openSUSE/cpanspec/issues/47 for details

==== perl-Digest-SHA1 ====
Version update (2.13 -> 2.130.0)

- Normalize CPAN version
  See https://github.com/openSUSE/cpanspec/issues/47 for details

==== perl-Socket6 ====
Version update (0.29 -> 0.290.0)

- Normalize CPAN version
  See https://github.com/openSUSE/cpanspec/issues/47 for details

==== perl-XML-Twig ====
Version update (3.530.0 -> 3.540.0)

- Updated perl-XML-Twig-CVE-2016-9180.patch
- updated to 3.540.0 (3.54)
  see /usr/share/doc/packages/perl-XML-Twig/Changes
  3.54 2025-06-11  minor maintenance release
  - changed the minimum version of Perl to 5.10
    That should be old enough: "On December 18, 2007, the 20th
    anniversary of Perl 1.0, Perl 5.10. 0 was released."
  - fixed the "build" system
    moved .pm files in the usual place for CPAN modules (lib/)
    used PM_FILTER in Makefile.PL to inline some method calls
    thanks to Daniel Macks for having a look at this and suggesting most
    of the improvements
  - fixed del_atts/set_att broke keep_atts_order
    see https://stackoverflow.com/questions/79369132
  - fixed #TEXT handlers not being called when set using setTwigHandlers
    see https://github.com/mirod/xmltwig/issues/36
    and fixed bugs in triggering #TEXT handlers in mixed content
  - fixed test special casing "SA" PERL_UNICODE instead of looking for
    S and A in the variable
    see https://github.com/mirod/xmltwig/issues/32
  - fixed docs for comment processing
    see https://github.com/mirod/xmltwig/issues/31
  - documentation cleanup
    thanks to chrispitude for the massive cleanup in
    https://github.com/mirod/xmltwig/pull/34
    and to zostay and asb-capfan for finding typos in
    https://github.com/mirod/xmltwig/pull/29 and
    https://github.com/mirod/xmltwig/pull/33
  - improved strip_att to allow more than 1 attribute to be stripped
    thanks to chrispitude for https://github.com/mirod/xmltwig/pull/37
  - added HTML style aliases for positions for paste and insert_new_elt
    beforebegin for before
    afterbegin for first_child
    beforeend for last_child
    afterend for after
  - improved insert_new_elt to allow for the element to insert to be
    a well-formed XML string, similar to insertAdjacentHTML in js

==== pipewire ====
Version update (1.4.4 -> 1.4.5)
Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa 
pipewire-jack pipewire-libjack-0_3 pipewire-modules-0_3 pipewire-pulseaudio 
pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools

- Update to version 1.4.5:
  * Highlights
  - Fix negotiation errors when using multichannel output.
    Fixes audio in some games and mpv in some cases.
  - 1 Small fix and 1 improvement.
  * SPA
  - Fix another bug caused by reversing the filter default
    value preference. (#4722)
  * pulse-server
  - Implement STREAM_DONT_INHIBIT_AUTO_SUSPEND flags. This
    can reduce power in pavucontrol when monitoring inactive
    streams.  (#4255 #4726)
  * ALSA
  - Fix a potential deadlock when calling _drop and _drain at
    the same time. (#4728)

==== python-argcomplete ====

- Remove executable bit on files installed outside of the path. (bsc#1244435)

==== python-gevent ====
Version update (25.4.2 -> 25.5.1)

- Update to 25.5.1
  * Update the bundled libuv to 1.51 from 1.44.2.
  * Note that this changes the minimum supported versions of various
    operating systems. Linux now requires kernel 3.10 and glibc 2.17,
    up from 2.6.32 and glibc 2.12; macOS now requires version 11, up
    from version 10.15; Windows now requires Windows 10 and Visual
    Studio 2017, up from Windows 8 and VS 2015; finally, FreeBSD now
    requires version 12, up from version 10.
  * The musl Linux wheels are now built with muslinux_1_2 instead of
    musllinux_1_1. See issue #2108.
  * Add support for Cython 3.1 on Windows.
  * Add support for Python 3.14b1 and significantly expand the set of
    standard library tests we run with monkey-patching.
- Update BuildRequires and Requires from pyproject.toml

==== python-greenlet ====
Version update (3.2.2 -> 3.2.3)

- Update to 3.2.3
  * Make greenlet build and run on Python 3.14 beta 2 on Windows amd64.
  * Potentially fix build on NetBSD/sparc64. See PR 447.

==== python-ptyprocess ====
Subpackages: python311-ptyprocess python313-ptyprocess

- Switch to pyproject macros.
- No more greedy globs in %files.

==== python-pycairo ====
Version update (1.26.1 -> 1.28.0)
Subpackages: python311-pycairo python313-pycairo

- Update to 1.28.0:
  * Changes:
    + Remove hypothesis test dependency
    + Release the input buffer passed to ImageSurface.create_for_data() when
    calling Surface.finish() already, not just when the underlying surface
    is destroyed
    + Return a PathDataType (int subtype) instead of int with Path.__iter__()
    + Emit a DeprecationWarning in case ImageSurface.get_data() is called on
    an already finished surface.
    + Emit a DeprecationWarning for the undocumented num_glyphs parameter in
    Context.glyph_extents(), Context.glyph_path(), Context.show_glyphs(),
    ScaledFont.glyph_extents()
  * Fixes:
    + Remove the executable bit from cairo/__init__.py
    + Remove usage of removed typing.ByteString to fix compatibility with
    Python 3.14.0a1
    + Drop support for Python 3.8
    + Port PEP517/wheel build from setuptools to meson-python.
    + meson: install the package metadata to .dist-info/METADATA instead
    of .egg-info

==== python-pyinotify ====
Subpackages: python311-pyinotify python313-pyinotify

- Switch to pyproject macros.

==== python-pysmbc ====

- Convert to pip-based build

==== python-python-slugify ====

- Switch to pyproject macros.

==== python-pyzmq ====

- Switch to pyproject macros.

==== python-requests ====
Version update (2.32.3 -> 2.32.4)
Subpackages: python311-requests python313-requests

- update to 2.32.4:
  * CVE-2024-47081 Fixed an issue where a maliciously crafted URL
    and trusted environment will retrieve credentials for the wrong
    hostname/machine from a netrc file
  * Numerous documentation improvements
  * Added support for pypy 3.11 for Linux and macOS.
  * Dropped support for pypy 3.9 following its end of support.
- drop CVE-2024-47081.patch (merged upstream)

==== python-scour ====

- Convert to pip-based build and libalternatives

==== python-webencodings ====

- Switch to pyproject macros.

==== python311 ====
Version update (3.11.12 -> 3.11.13)
Subpackages: python311-curses python311-dbm

- Update to 3.11.13:
  - Security
  - gh-135034: Fixes multiple issues that allowed tarfile
    extraction filters (filter="data" and filter="tar") to be
    bypassed using crafted symlinks and hard links.
    Addresses CVE-2024-12718 (bsc#1244056), CVE-2025-4138
    (bsc#1244059), CVE-2025-4330 (bsc#1244060), and
    CVE-2025-4517 (bsc#1244032).
  - gh-133767: Fix use-after-free in the “unicode-escape”
    decoder with a non-“strict” error handler (CVE-2025-4516,
    bsc#1243273).
  - gh-128840: Short-circuit the processing of long IPv6
    addresses early in ipaddress to prevent excessive memory
    consumption and a minor denial-of-service.
  - Library
  - gh-128840: Fix parsing long IPv6 addresses with embedded
    IPv4 address.
  - gh-134062: ipaddress: fix collisions in __hash__() for
    IPv4Network and IPv6Network objects.
  - gh-123409: Fix ipaddress.IPv6Address.reverse_pointer output
    according to RFC 3596, §2.5. Patch by Bénédikt Tran.
  - bpo-43633: Improve the textual representation of
    IPv4-mapped IPv6 addresses (RFC 4291 Sections 2.2, 2.5.5.2)
    in ipaddress. Patch by Oleksandr Pavliuk.
- Remove upstreamed patches:
  - gh-126572-test_ssl-no-stop-ThreadedEchoServer-OSError.patch
  - CVE-2025-4516-DecodeError-handler.patch

==== python311-core ====
Version update (3.11.12 -> 3.11.13)
Subpackages: libpython3_11-1_0 python311-base

- Update to 3.11.13:
  - Security
  - gh-135034: Fixes multiple issues that allowed tarfile
    extraction filters (filter="data" and filter="tar") to be
    bypassed using crafted symlinks and hard links.
    Addresses CVE-2024-12718 (bsc#1244056), CVE-2025-4138
    (bsc#1244059), CVE-2025-4330 (bsc#1244060), and
    CVE-2025-4517 (bsc#1244032).
  - gh-133767: Fix use-after-free in the “unicode-escape”
    decoder with a non-“strict” error handler (CVE-2025-4516,
    bsc#1243273).
  - gh-128840: Short-circuit the processing of long IPv6
    addresses early in ipaddress to prevent excessive memory
    consumption and a minor denial-of-service.
  - Library
  - gh-128840: Fix parsing long IPv6 addresses with embedded
    IPv4 address.
  - gh-134062: ipaddress: fix collisions in __hash__() for
    IPv4Network and IPv6Network objects.
  - gh-123409: Fix ipaddress.IPv6Address.reverse_pointer output
    according to RFC 3596, §2.5. Patch by Bénédikt Tran.
  - bpo-43633: Improve the textual representation of
    IPv4-mapped IPv6 addresses (RFC 4291 Sections 2.2, 2.5.5.2)
    in ipaddress. Patch by Oleksandr Pavliuk.
- Remove upstreamed patches:
  - gh-126572-test_ssl-no-stop-ThreadedEchoServer-OSError.patch
  - CVE-2025-4516-DecodeError-handler.patch

==== qemu ====
Version update (10.0.0 -> 10.0.2)
Subpackages: qemu-arm qemu-audio-spice qemu-block-curl qemu-block-nfs 
qemu-block-rbd qemu-chardev-spice qemu-guest-agent qemu-hw-display-qxl 
qemu-hw-display-virtio-gpu qemu-hw-display-virtio-gpu-pci 
qemu-hw-display-virtio-vga qemu-hw-usb-host qemu-hw-usb-redirect 
qemu-hw-usb-smartcard qemu-img qemu-ipxe qemu-ksm qemu-pr-helper qemu-tools 
qemu-ui-curses qemu-ui-gtk qemu-ui-opengl qemu-ui-spice-app qemu-ui-spice-core 
qemu-vgabios

- Update to stable release 10.0.2:
  Full list of backports here:
  
https://lore.kernel.org/qemu-devel/1748499690.323471.13081.nullmailer@localhost/
  A selection of them is reported here too:
  Revert "Drop support for Python 3.8"
  Update version for 10.0.1 release
  Drop support for Python 3.8
  target/hppa: Fix FPE exceptions
  linux-user/hppa: Send proper si_code on SIGFPE exception
  target/hppa: Copy instruction code into fr1 on FPU assist fault
  migration: Allow caps to be set when preempt or multifd cap enabled
  migration/multifd: Don't send device state packets with zerocopy flag
  qapi/misc-target: Fix the doc to distinguish query-sgx and 
query-sgx-capabilities
  hw/pci-host: Remove unused pci_host_data_be_ops
  hw/pci-host/gt64120: Fix endianness handling
  i386/hvf: Make CPUID_HT supported
  i386/tcg: Make CPUID_HT and CPUID_EXT3_CMP_LEG supported
  target/riscv/kvm: do not read unavailable CSRs
  target/riscv/kvm: add kvm_csr_cfgs[]
  target/riscv/kvm: turn kvm_riscv_reg_id_ulong() into a macro
  target/riscv/kvm: turn u32/u64 reg functions into macros
  target/riscv/kvm: fix leak in kvm_riscv_init_multiext_cfg()
  target/riscv/kvm: minor fixes/tweaks
  target/riscv: Fix vslidedown with rvv_ta_all_1s
  target/riscv: Fix the rvv reserved encoding of unmasked instructions
  ...

==== qpdf ====
Version update (11.9.1 -> 11.10.1)

- version update to 11.10.1
  11.10.1: February 15, 2025
    Build fixes
    .  Fix incorrect detection of zopfli.
    .  Recognize cygwin perl as Windows when running test suite.
  11.10.0: February 8, 2025
    Bug fixes
    .  Detect and break loops in the outline (bookmark) tree.
    .  Correctly handle outline (bookmark) items where the destination is
    given as a dictionary with ‘/D’ entry.
    .  When loading object streams, ignore any objects not included in the
    xref table.
    .  When writing real numbers as JSON ensure they do not end in a
    trailing decimal point.
    .  When QPDF::getObject, getObjectByObjGen or getObjectByID are called
    with a QPDFObjGen that does not
    exists in the xref and object tables return a direct null.
    .  Fix handling of certain deleted objects in hybrid reference files.
    .  Default the stream decode level to generalized.
    .  Reject CLI flags with parameters.
    CLI Enhancements
    .  The fix-qdf command now allows an output file to be specified as an
    optional second argument.
    .  New --remove-metadata and --remove-info options to exclude document
    metadata and information from the output PDF.
    Library Enhancements
    .  qpdf can now be built with zopfli support.
    .  Add QPDFObjectHandle operator bool.
    .  New C API function qpdf_oh_free_buffer to free malloc allocated buffers.
  * for other changes see
    https://qpdf.readthedocs.io/en/stable/release-notes.html
- deleted patches
  - qpdf-11.9.1-gcc15.patch (upstreamed)

==== rdma-core ====
Version update (56.1 -> 57.0)
Subpackages: libefa1 libhns1 libibverbs libibverbs1 libmana1 libmlx4-1 
libmlx5-1 librdmacm1 rdma-ndd

- Update to rdma-core v57.0
  - No release notes available

==== rpm ====
Subpackages: librpmbuild10

- use the pubkey modification time instead of the creation time
  as the release number, as it was with older rpm versions
  * new patch: pgpreleasemtime.diff

==== salt ====
Subpackages: python311-salt salt-master salt-minion

- Add subsystem filter to udev.exportdb (bsc#1236621)
- tornado.httputil: raise errors instead of logging in
  multipart/form-data parsing (CVE-2025-47287, bsc#1243268)
- Added:
  * add-subsystem-filter-to-udev.exportdb-bsc-1236621-71.patch
  * fix-of-cve-2025-47287-bsc-1243268-718.patch

==== samba ====
Version update (4.22.1+git.393.a3fcbaec1e5 -> 4.22.2+git.396.c752843dcf4)
Subpackages: libldb2 python3-ldb samba-ad-dc-libs samba-client 
samba-client-libs samba-dcerpc samba-gpupdate samba-ldb-ldap samba-libs 
samba-libs-python3 samba-python3 samba-winbind samba-winbind-libs

- Update to 4.22.2
  * (CVE-2025-0620) [SECURITY] CVE-2025-0620: smbd doesn't pick
    up group membership changes when re-authenticating an expired
    SMB session; (bso#15707); (bsc#1244136).
  * Profile sync fails due to Directory Leases; (bso#15861).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727).
  * dcerpcd not able to bind to listening port; (bso#15851).
  * vfs_ceph_snapshots fails to list snapshots for entries at any
    level beyond share root; (bso#15819).
  * CTDB does not put nodes running NFS into grace on graceful
    shutdown; (bso#15858).

==== sdbootutil ====
Version update (1+git20250529.307d6ff -> 1+git20250613.ee73e55)
Subpackages: sdbootutil-dracut-measure-pcr sdbootutil-snapper

- Update to version 1+git20250613.ee73e55:
  * Fix uhmac installation
  * Remove edition downgrade
  * Update Cargo.lock

==== simple-scan ====
Version update (46.0 -> 48.1)

- Update to version 48.1:
  + Always tag JPEG-compressed PDF output as 8-bit RGB.
  + Use "view-more-symbolic" for the "Scan Options" button icon.
  + Add a test if the post-processing script path is empty
    (boo#1244036).
  + Fix the docker image name of the Arch Linux Distribution.
  + Update Ubuntu documentation.
  + metainfo: Fix wrong developer id.
  + Correct issue tracker URL.
  + Update minimum Meson version to 0.46.
  + Use RDNN app ID.
  + Updated translations.

==== sqlite3 ====
Version update (3.49.2 -> 3.50.1)
Subpackages: libsqlite3-0 sqlite3-tcl

- Update to 3.50 (3.50.1):
  * Improved handling and robust output of control characters
  * sqlite3_rsync no longer requires WAL mode and needs less
    bandwidth
  * Bug fixes and optimized JSON handling
  * Performance optimizations and developer visible fixes

==== tigervnc ====
Subpackages: libXvnc1 tigervnc-selinux xorg-x11-Xvnc xorg-x11-Xvnc-module

- no longer require xinit so it can be dropped from SLE16

==== u-boot-rpiarm64 ====
Subpackages: u-boot-rpiarm64-doc

- Add u-boot-roc-cc-rk3328

==== uriparser ====

- Use Qt6's qhelpgenerator instead of Qt5's and fix its usage since
  Qt5 was being BuildRequired but qch docs weren't being generated.

==== vlc ====
Subpackages: libvlc5 libvlccore9 vlc-codec-gstreamer vlc-noX vlc-qt vlc-vdpau

- Add 5590.patch: opus_header: fix channel mapping family 1 parsing
  (boo#1244167).

==== vsftpd ====

- Apply "terminate-peers-on-quit.patch" to introduce the new
  internal PRIV_SOCK_QUIT command which vsftpd sends to privileged
  parent processes to properly shut down the TLS connection in case
  we've received QUIT from the session client. This change avoids
  misleading error messages in the servers log file. [bsc#1199250]

==== xdp-tools ====
Version update (1.4.2 -> 1.5.5)

- Update to v1.5.5
  - added xdp-forward for forwarding traffic between interfaces
  - libxdp: options-based API for more flexible af_xdp umem and
  socket creation
  - libxdp: added support for af_xdp tx metadata
  - xdp-bench: improved reliability by removing packet header
  location assumptions
  - xdp-bench: new program for redirect benchmarking
  - xdp-trafficgen: support for specifying udp packet size
  - xdp-trafficgen: probe command can now target a specific
  interface
  - xdp-trafficgen: auto-load dummy xdp program to ensure packet
  sending
  - xdp-dump: increased max supported cpus to 512
  - xdp-loader: allow loading xdp programs that modify the packet
  pointer
  - utils: improved pps statistics accuracy in xdp_sample
  - utils: correctly print statistics summary on signal interruption
  in xdp_sample
  - xdp-trafficgen: fix failure to exit after packet transmission
  loop
  - libxdp: fix incorrect xdp_umem_reg setsockopt size
  - libxdp: ensure correct error propagation by returning -errno
  - utils: fix incorrect packet count calculation in xdp_sample
- Drop fix-clang20-build.patch since upstream remedy is included
  since v1.5.4

==== yast2-bootloader ====
Version update (5.0.16 -> 5.0.20)

- grub2-bls/systemdboot: Writing kernel parameters before installing
  the bootloader (bsc#1244399)
- 5.0.20
- Selecting grub2-bls bootloader if a TPM2/FIDO2 device is used for
  checking encryptions (jsc#PED-10703).
- 5.0.19
- Fixed following bugs:
  - - systemdboot_widgets shows undefined method >= for nil
    (bsc#1234871)
  - - Installer tries disabling sdboot timeout by setting -1
    (bsc#1240896)
  - - Error in Bootloader::Grub2Bls#grub2bls_architecture
    Details: undefined method (bsc#1241651)
  - - YaST installation with sd-boot: Disabling the menu
    timeout is not possible (bsc#1216366)
- 5.0.18
- Fixed typo "prefered_bootloader" (jsc#PED-1906).
- 5.0.17

==== yast2-kdump ====
Version update (5.0.4 -> 5.0.5)

- Fixed testsuite (a follow up of jsc#PED-10703)
- 5.0.5

==== yast2-storage-ng ====
Version update (5.0.29 -> 5.0.32)

- Reorganize public methods of DiskAnalyzer (needed by
  gh#agama-project/agama#2388).
- 5.0.32
- Supporting systemd-fde encryption and TPM2/FIDO2
  (jsc#PED-10703).
- 5.0.31
- Make method DiskAnalyzer#candidate_device? public
  (gh#agama-project/agama#2338).
- 5.0.30


Reply via email to