Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version... Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: abseil-cpp amarok (3.2.1 -> 3.2.2) fontconfig (2.15.0 -> 2.16.0) fwupd (2.0.5 -> 2.0.6) gdb (14.2 -> 15.2) geoclue2 kernel-firmware-i915 (20250210 -> 20250217) kernel-firmware-sound (20250210 -> 20250217) libstorage-ng (4.5.234 -> 4.5.239) liburing nvidia-open-driver-G06-signed (570.86.16_k6.13.1_1 -> 570.86.16_k6.13.2_1) openSUSE-release (20250217 -> 20250218) openssh (9.9p1 -> 9.9p2) patterns-media psmisc python-M2Crypto (0.43.0 -> 0.44.0) python-contextvars woff2 wol xdg-desktop-portal (1.19.3 -> 1.19.4) xdg-desktop-portal-gnome (47.2 -> 47.3) yaml-cpp yast2-samba-client (5.0.0 -> 5.0.1) yast2-samba-server (5.0.0 -> 5.0.1) yast2-trans (84.87.20250209.5d5ae60d41 -> 84.87.20250214.b4c23644e7) zsh === Details === ==== abseil-cpp ==== Subpackages: libabsl_2501_0_0 libabsl_lite_2501_0_0 - do not obsolete the shared libary package ==== amarok ==== Version update (3.2.1 -> 3.2.2) - Update to 3.2.2 * https://blogs.kde.org/2025/02/15/amarok-3.2.2-released/ * Try to preserve collection browser order when adding tracks to playlist (kde#180404) * Fix DAAP collection connections, browsing and playing (kde#498654) * Fix first line of lyrics.ovh lyrics missing (kde#493882) ==== fontconfig ==== Version update (2.15.0 -> 2.16.0) Subpackages: fontconfig-lang libfontconfig1 - update to 2.16.0: * Fix misleading-indentation warning * Deal with glob string properly * Allow comma as a delimiter in postscriptname and ignore it on matching * Refactor exclusive language logic into separate file * Use proper postscriptname for named instance if any * Remove redundant leaf assignment in fcfreetype.c * Ensure lock/unlock symmetry * Ensure config is locked during retry in FcConfigReference * Unlock on allocation failure in FcCacheInsert * Fix FcSerialize undefined behavior with null pointer usage * Fix undefined behavior issue on qsort call * Add cop.orth for Coptic language * Add got.orth for Gothic language * Fix a memory leak in fc-list/fc-query/fc-scan * mark _FcPatternIter as may_alias * Accept integer for pixelsize * Improve hinting detection for fonthashint object * Add FcConfigSetFontSetFilter * Fix some code found by SAST * Set FcTypeVoid if no valid types to convert * Fix a memory leak in _get_real_paths_from_prefix * Fix double slashes in path * More information when no writable cache directories * Fix test case for reproducible builds * Fix invalid escape character \s * Sort out bitmap related config files * Clean up .uuid files with fc-cache -f too - add fontconfig-autoconf269.patch to start leap build ==== fwupd ==== Version update (2.0.5 -> 2.0.6) Subpackages: fwupd-bash-completion fwupd-lang libfwupd3 typelib-1_0-Fwupd-2_0 - Update to version 2.0.6: + This release adds the following features: - Add 'fwupdtool efiboot-hive' to allow setting the nmbl cmdline - Allow setting the inhibit reason from fwupdmgr - Allow USB-provided hidraw devices to use DS-20 descriptors + This release fixes the following bugs: - Correctly deploy the dbx on MSI hardware - Correctly extract the milestone from Lenovo version numbers - Do not add invalid CoSWID entities to fix a fuzzing hang - Fix Logitech HID++ child device detection - Get the correct internal network VID and PID from Redfish - Include the payload length in the Wacom scaler update start command - Only use emulated devices when using device-emulate - Reload the thunderbolt retimer version after the payload is deployed - Speed up startup by ~1% by limiting the precision of percentage updates - Support new version formats for future Huddly devices - Updating the Logitech Rallybar in a more reliable way + This release adds support for the following hardware: - HPE Gen10/Gen10+ devices using Redfish ==== gdb ==== Version update (14.2 -> 15.2) - Maintenance script qa.sh: * Add PR32712 kfail. - Mention changes in GDB 15: * The MPX commands "show/set mpx bound" have been deprecated, as Intel listed MPX as removed in 2019. * GDB index now contains information about the main function. * This speeds up startup when it is being used for some large binaries. * On hosts where threading is available, DWARF reading is now done in the background, resulting in faster startup. This can be controlled using "maint set dwarf synchronous". * Changed commands: * disassemble: Attempting to use both the 'r' and 'b' flags with the disassemble command will now give an error. Previously the 'b' flag would always override the 'r' flag. * gcore, generate-core-file: GDB now generates sparse core files, on systems that support it. * maintenance info line-table: Add an EPILOGUE-BEGIN column to the output of the command. It indicates if the line is considered the start of the epilogue, and thus a point at which the frame can be considered destroyed. * set unwindonsignal on|off, show unwindonsignal: These commands are now aliases for the new set/show unwind-on-signal. * target record-full: This command now gives an error if any unexpected arguments are found after the command. * list .: When using the command "list ." in a location that has no debug information or no file loaded, GDB now says that there is no debug information to print lines. This makes it more obvious that there is no information, as opposed to implying there is no inferior loaded. * New commands: * info missing-debug-handler: List all the registered missing debug handlers. * enable missing-debug-handler LOCUS HANDLER, disable missing-debug-handler LOCUS HANDLER: Enable or disable a missing debug handler with a name matching the regular expression HANDLER, in LOCUS. LOCUS can be 'global' to operate on global missing debug handler, 'progspace' to operate on handlers within the current program space, or can be a regular expression which is matched against the filename of the primary executable in each program space. * maintenance info linux-lwps: List all LWPs under control of the linux-nat target. * set remote thread-options-packet, show remote thread-options-packet: Set/show the use of the thread options packet. * set direct-call-timeout SECONDS, show direct-call-timeout, set indirect-call-timeout SECONDS, show indirect-call-timeout: These new settings can be used to limit how long GDB will wait for an inferior function call to complete. The direct timeout is used for inferior function calls from e.g. 'call' and 'print' commands, while the indirect timeout is used for inferior function calls from within a conditional breakpoint expression. The default for the direct timeout is unlimited, while the default for the indirect timeout is 30 seconds. These timeouts will only have an effect for targets that are operating in async mode. For non-async targets the timeouts are ignored, GDB will wait indefinitely for an inferior function to complete, unless interrupted by the user using Ctrl-C. * set unwind-on-timeout on|off, show unwind-on-timeout: These commands control whether GDB should unwind the stack when a timeout occurs during an inferior function call. The default is off, in which case the inferior will remain in the frame where the timeout occurred. When on, GDB will unwind the stack removing the dummy frame that was added for the inferior call, and restoring the inferior state to how it was before the inferior call started. * set unwind-on-signal on|off, show unwind-on-signal: These new commands replaces the existing set/show unwindonsignal. The old command is maintained as an alias. * New features in the GDB remote stub, GDBserver: * The --remote-debug and --event-loop-debug command line options have been removed. * The --debug command line option now takes an optional comma separated list of components to emit debug for. The currently supported components are: all, threads, event-loop, and remote. If no components are given then threads is assumed. * The 'monitor set remote-debug' and 'monitor set event-loop-debug' command have been removed. * The 'monitor set debug 0|1' command has been extended to take a component name, e.g.: 'monitor set debug COMPONENT off|on'. Possible component names are: all, threads, event-loop, and remote. * Python API: * New function gdb.notify_mi(NAME, DATA), that emits custom GDB/MI async notification. * New read/write attribute gdb.Value.bytes that contains a bytes object holding the contents of this value. ... changelog too long, skipping 407 lines ... - Add "BuildRequires: libgo23" to fix unresolved for factory. ==== geoclue2 ==== Subpackages: system-user-srvGeoClue typelib-1_0-Geoclue-2_0 - Move xdg/autostart filesto /usr/etc (boo#1237248). ==== kernel-firmware-i915 ==== Version update (20250210 -> 20250217) - Update to version 20250217 (git commit 487f2f2421ae): * i915: Update Xe3LPD DMC to v2.17 - Drop duplicated aliases ==== kernel-firmware-sound ==== Version update (20250210 -> 20250217) - Update to version 20250217 (git commit 487f2f2421ae): * ASoC: tas2781: Change regbin firmwares for single device - Drop duplicated aliases ==== libstorage-ng ==== Version update (4.5.234 -> 4.5.239) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - Translated using Weblate (French) (bsc#1149754) - 4.5.239 - Translated using Weblate (Japanese) (bsc#1149754) - 4.5.238 - Translated using Weblate (Catalan) (bsc#1149754) - 4.5.237 - Translated using Weblate (Slovak) (bsc#1149754) - merge gh#openSUSE/libstorage-ng#1018 - updated pot and po files - 4.5.236 - merge gh#openSUSE/libstorage-ng#1017 - use convenience function - improved message of action - updated history file - 4.5.235 ==== liburing ==== - disable even more tests ==== nvidia-open-driver-G06-signed ==== Version update (570.86.16_k6.13.1_1 -> 570.86.16_k6.13.2_1) - In the module install path revert the order of the 'updates' subdirectory and the package name & version. This satisfies the kmp dependency checker (boo#1237308). ==== openSUSE-release ==== Version update (20250217 -> 20250218) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== openssh ==== Version update (9.9p1 -> 9.9p2) Subpackages: openssh-clients openssh-common openssh-server - Update to openssh 9.9p2: = Security * Fix CVE-2025-26465 - ssh(1) in OpenSSH versions 6.8p1 to 9.9p1 (inclusive) contained a logic error that allowed an on-path attacker (a.k.a MITM) to impersonate any server when the VerifyHostKeyDNS option is enabled. This option is off by default. * Fix CVE-2025-26466 - sshd(8) in OpenSSH versions 9.5p1 to 9.9p1 (inclusive) is vulnerable to a memory/CPU denial-of-service related to the handling of SSH2_MSG_PING packets. This condition may be mitigated using the existing PerSourcePenalties feature. Both vulnerabilities were discovered and demonstrated to be exploitable by the Qualys Security Advisory team. The openSSH team thanks them for their detailed review of OpenSSH. = Bugfixes * ssh(1), sshd(8): fix regression in Match directive that caused failures when predicates and their arguments were separated by '=' characters instead of whitespace (bz3739). * sshd(8): fix the "Match invalid-user" predicate, which was matching incorrectly in the initial pass of config evaluation. * ssh(1), sshd(8), ssh-keyscan(1): fix mlkem768x25519-sha256 key exchange on big-endian systems. * Fix a number of build problems on particular operating systems and configurations. - Remove patches that are already included in 9.9p2: * 0001-fix-utmpx-ifdef.patch * 0002-upstream-fix-regression-introduced-when-I-switched-the-Match.patch * 0003-upstream-fix-previous-change-to-ssh_config-Match_-which-broken-on.patch * 0004-upstream-fix-ML-KEM768x25519-KEX-on-big-endian-systems-spotted-by.patch * fix-CVE-2025-26465-and-CVE-2025-26466.patch - Fix a MitM attack against OpenSSH's VerifyHostKeyDNS-enabled client and a DoS attack against OpenSSH's client and server (bsc#1237040, CVE-2025-26465, bsc#1237041, CVE-2025-26466): * fix-CVE-2025-26465-and-CVE-2025-26466.patch ==== patterns-media ==== Subpackages: patterns-media-rest_cd_core patterns-media-rest_dvd - Added grub2-x86_64-efi-bls for EFI-BLS bootloader. ==== psmisc ==== Subpackages: psmisc-lang - Looks like Factory and TW includes glibc-gconv-modules-extra at build time ==== python-M2Crypto ==== Version update (0.43.0 -> 0.44.0) - Fix spelling of BSD-2-Clause license. - Add rpmlintrc ⦠overflow of ignorable rpmlint warnings caused me not to see the previous problem. - Update to 0.44.0: - fix(rsa): introduce internal cache for rsa.check_key() (bsc#1236664, srht#mcepl/m2crypto#369) - fix[authcookie]: modernize the module - fix(_lib): add missing #include for windows - ci: relax fedora crypto policy to legacy. - enhance setup.py for macos compatibility - prefer packaging.version over distutils.version - fix segfault with openssl 3.4.0 - fix[ec]: raise ioerror instead when load_key_bio() cannot read the file. - doc: update installation instructions for windows. - fix setting x509.verify_* variables - fix building against openssl in non-standard location - test_x509: use only x509_version_1 (0) as version for csr. - The real license is BSD 2-Clause, not MIT. ==== python-contextvars ==== - Build package for multiple Python flavors on the SLE15 family ==== woff2 ==== Subpackages: libwoff2common1_0_2 libwoff2dec1_0_2 - Add patch to fix build with gcc15: + woff2-gcc15.patch ==== wol ==== Subpackages: wol-lang - Added wol-gcc15.patch to fix build with gcc15. ==== xdg-desktop-portal ==== Version update (1.19.3 -> 1.19.4) Subpackages: xdg-desktop-portal-lang - Update to version 1.19.4: + New Features: Introduce the host app registry. This interface allows host system apps (i.e. apps not running under a sandboxing mechanism like Flatpak) register themselves with XDG Desktop Portal. This allows XDG Desktop Portal to use a proper app id, and desktop file, improving the interaction with portal backends. + Enhancements: Use a new internal script to simply running tests. + Bug Fixes: - Properly escape notification body in the Notification portal. - Fix various documentation links in the USB portal documentation page. ==== xdg-desktop-portal-gnome ==== Version update (47.2 -> 47.3) Subpackages: xdg-desktop-portal-gnome-lang - Update to version 47.3: + Fix build against xdg-desktop-portal >= 1.19.1 + Fix initialization of X11 display. - Drop patches fixed upstream: + notification-Add-missing-GUnixFDList-argument.patch + notification-null-icon-pointer.patch ==== yaml-cpp ==== - added patches fix https://github.com/jbeder/yaml-cpp/commit/7b469b4220f96fb3d036cf68cd7bd30bd3... + yaml-cpp-gcc15.patch ==== yast2-samba-client ==== Version update (5.0.0 -> 5.0.1) - Remove nscd-related code (bsc#1236308) - 5.0.1 ==== yast2-samba-server ==== Version update (5.0.0 -> 5.0.1) - Remove nscd-related code (bsc#1236308) - 5.0.1 ==== yast2-trans ==== Version update (84.87.20250209.5d5ae60d41 -> 84.87.20250214.b4c23644e7) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20250214.b4c23644e7: * Translated using Weblate (Slovak) * Translated using Weblate (Slovak) * Translated using Weblate (Slovak) * Translated using Weblate (Slovak) ==== zsh ==== - Make it build with texinfo 7.1 (boo#1237196)