Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=3&version=Tumbleweed&build=20251001 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: bash curl (8.15.0 -> 8.16.0) edict (20230511 -> 20251001) gpg2 kernel-source (6.16.9 -> 6.17.0) libgpg-error nvidia-open-driver-G06-signed (580.82.07_k6.16.9_1 -> 580.95.05_k6.17.0_1) openSUSE-release (20250930 -> 20251001) patterns-xfce python313 python313-core xfce4-session === Details === ==== bash ==== Subpackages: bash-loadables bash-sh - DRop use of patchutils: the patch tarball seems to contain only patches to be applied -p0. This allows us to shorten the build cycle. ==== curl ==== Version update (8.15.0 -> 8.16.0) Subpackages: libcurl4 - curl: http: handle user-defined connection headers [bsc#1249448] * Add curl-handle_user-defined_connection_headers.patch - Update to 8.16.0: * Security fixes: - [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path - [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask * Changes: - curl: add --follow and --out-null - curl: add --parallel-max-host to limit concurrent connections per host - curl: make --retry-delay and --retry-max-time accept decimal seconds - hostip: cache negative name resolves - ip happy eyeballing: keep attempts running - multi: add curl_multi_get_offt - multi: add CURLMOPT_NETWORK_CHANGED to signal network changed - netrc: use the NETRC environment variable (first) if set - smtp: allow suffix behind a mail address for RFC 3461 - tls: make default TLS version be minimum 1.2 - tool_getparam: add support for `--longopt=value` - vquic: drop msh3 - websocket: support CURLOPT_READFUNCTION * Bugfixes: - _PROTOCOLS.md: mention file:// is only for absolute paths - acinclude: --with-ca-fallback only works with OpenSSL - bufq: add integer overflow checks before chunk allocations - cmake: fix `ENABLE_UNIX_SOCKETS=OFF` with pre-fill enabled on unix - cmake: fix setting LTO properties on the wrong targets - configure: tidy up internal names in ngtcp2 ossl detection logic - connectdata: remove primary+secondary ip_quadruple - connection: terminate after goaway - cookie: don't treat the leading slash as trailing - cookie: remove expired cookies before listing - curl: tool_read_cb fix of segfault - curl_ossl: extend callback table for nghttp3 1.11.0 - DEPRECATE.md: drop old OpenSSL versions - idn: reject conversions that end up as a zero length hostname - ngtcp2: extend callback tables for nghttp3 1.11.0 and ngtcp2 1.14.0 - ngtcp2: handshake timeout should be equal to --connect-timeout - openssl: add and use `HAVE_OPENSSL3` internal macro - openssl: check SSL_write() length on retries - openssl: clear errors after a failed `d2i_X509()` - openssl: drop redundant `HAVE_OPENSSL_VERSION` macro - openssl: drop single-use interim macro `USE_OPENSSL_SRP` - openssl: output unescaped utf8 x509 issuer/subject DNs - parallel-max: bump the max value to 65535 - resolving: dns error tracing - schannel: add an error message for client cert not found - schannel: assume `CERT_CHAIN_REVOCATION_CHECK_CHAIN` - schannel: fix renegotiation - schannel: improve handshake procedure - socks: do_SOCKS5: Fix invalid buffer content on short send - threaded-resolver: fix shutdown - tool_getparam: warn on more unicode prefixes - tool_urlglob: add integer overflow protection - urlapi: allow more path characters "raw" when asked to URL encode - urlglob: only accept 255 globs - vtls: set seen http version on successful ALPN - websocket: handling of PONG frames - websocket: improve handling of 0-len frames - websocket: reset upload_done when sending data - ws: avoid NULL pointer deref in curl_ws_recv * Rebase libcurl-ocloexec.patch ==== edict ==== Version update (20230511 -> 20251001) - Stop marking up edict as essential for locale(ja). - Update to snapshot 20251001 * No changelog recorded. ==== gpg2 ==== Subpackages: dirmngr - Remove the infodir directory if it exists. ==== kernel-source ==== Version update (6.16.9 -> 6.17.0) Subpackages: kernel-64kb kernel-default - docs: kdoc: handle the obsolescensce of docutils.ErrorString() (bsc#1250507). - commit 6ec5a94 - Update patches.kernel.org/6.16.8-120-tty-hvc_console-Call-hvc_kick-in-hvc_write-unc.patch (bsc#1012628 bsc#1230062). Add a bug reference. - commit 19ace99 - update to 6.17 final - update configs - i386 (copied from x86_64) - DEBUG_WX=y - PTDUMP_DEBUGFS=n - HID_LENOVO=m (ppc64le, armv7hl, armv6hl) - commit 50583f4 ==== libgpg-error ==== - No longer explicitly require info by -devel package: info files are handled by a transfiletrigger when info is present. ==== nvidia-open-driver-G06-signed ==== Version update (580.82.07_k6.16.9_1 -> 580.95.05_k6.17.0_1) - fixed 'osc service run download_files' - update to version 580.95.05 (boo#1250536) - get rid of multiversion for the KMPs, since it only brought/brings us trouble and no benefit at all (jsc#PED-12049) * remove any ^Conflicts and ^Provides: multiversion from /usr/lib/rpm/kernel-module-subpackage * set INSTALL_MOD_DIR back to %{kernel_module_package_moddir}, i.e. updates/ subdir ==== openSUSE-release ==== Version update (20250930 -> 20251001) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== patterns-xfce ==== Subpackages: patterns-xfce-xfce patterns-xfce-xfce_basis patterns-xfce-xfce_laptop - Correct supplements of patterns-xfce_laptop* to match with patterns-desktop-mobile instead of patterns-desktop-laptop (bsc#1248802) ==== python313 ==== Subpackages: python313-curses python313-dbm python313-tk - Add gh139257-Support-docutils-0.22.patch to fix build with latest docutils (>=0.22) gh#python/cpython#139257 ==== python313-core ==== Subpackages: libpython3_13-1_0 python313-base - Add gh139257-Support-docutils-0.22.patch to fix build with latest docutils (>=0.22) gh#python/cpython#139257 ==== xfce4-session ==== Subpackages: xfce4-session-lang - Add mic-mute and Windows-key handling for Wayland labwc (bsc#1248802)
