Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=3&version=Tumbleweed&build=20250803 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: Mesa (25.1.6 -> 25.1.7) Mesa-drivers (25.1.6 -> 25.1.7) MozillaFirefox PackageKit-Qt6 (1.1.2 -> 1.1.3) container-selinux cyrus-imapd dracut-pcr-signature (0.6+2 -> 0.6+3) faad2 ffmpeg-7 fwupd grub2 gstreamer-plugins-bad harfbuzz (11.3.2 -> 11.3.3) hwdata (0.395 -> 0.397) kdump (2.1.4 -> 2.1.5) kernel-firmware-amdgpu (20250718 -> 20250725) kernel-firmware-i915 (20250708 -> 20250730) kernel-firmware-media (20250717 -> 20250725) kernel-firmware-qcom (20250714 -> 20250725) libeconf (0.7.9 -> 0.7.10) libheif libjcat libnvme (1.13 -> 1.15) libstorage-ng (4.5.266 -> 4.5.271) libvirt (11.5.0 -> 11.6.0) libzypp (17.37.14 -> 17.37.15) llvm20 lua54 makedumpfile mpg123 (1.33.0 -> 1.33.1) nfs-utils nvme-cli (2.13 -> 2.15) openSUSE-release (20250727 -> 20250803) openssl-3 patterns-base perl-Crypt-URandom pinentry (1.3.1 -> 1.3.2) pinentry-gui (1.3.1 -> 1.3.2) python-numpy python-packaging (24.2 -> 25.0) python-zstandard (0.22.0 -> 0.23.0) rpcbind (1.2.7 -> 1.2.8) rpm samba (4.22.3+git.401.c70158430cc -> 4.22.3+git.403.4e078bdb832) sbl sdbootutil (1+git20250724.553d46c -> 1+git20250731.055e2fe) selinux-policy (20250716 -> 20250730) sssd (2.10.2 -> 2.11.1) systemd tbb tftp webkit2gtk3 (2.48.3 -> 2.48.4) wget xdpyinfo (1.3.4 -> 1.4.0) xkeyboard-config yast2-bootloader (5.0.22 -> 5.0.23) yast2-trans (84.87.20250721.46ecd273d2 -> 84.87.20250727.0ccf40f675) zbar === Details === ==== Mesa ==== Version update (25.1.6 -> 25.1.7) Subpackages: Mesa-libEGL1 Mesa-libGL1 libgbm1 - Update to release 25.1.7 - -> https://docs.mesa3d.org/relnotes/25.1.7 - Bump required versions of the wayland packages. ==== Mesa-drivers ==== Version update (25.1.6 -> 25.1.7) Subpackages: Mesa-dri Mesa-gallium Mesa-libva Mesa-vulkan-device-select libvulkan_lvp - Update to release 25.1.7 - -> https://docs.mesa3d.org/relnotes/25.1.7 - Bump required versions of the wayland packages. ==== MozillaFirefox ==== Subpackages: MozillaFirefox-branding-upstream - Update memory constraints ==== PackageKit-Qt6 ==== Version update (1.1.2 -> 1.1.3) - Update to 1.1.3 * Build with Qt6 by default, instead of Qt5 * Bump cmake version * Add new GetResult* methods of the Offline interface ==== container-selinux ==== - Add workaround for rootless docker iptables AVCs (bsc#1246348) adding rootless-docker_iptables.patch ==== cyrus-imapd ==== Subpackages: cyradm libcyrus0 perl-Cyrus-Annotator perl-Cyrus-IMAP perl-Cyrus-SIEVE-managesieve - Only BuildRequire systemd-rpm-macros instead of systemd to reduce unneeded OBS rebuilds ==== dracut-pcr-signature ==== Version update (0.6+2 -> 0.6+3) - Update to version 0.6+3: * Use installkernel() only to install kernel modules ==== faad2 ==== - Tweak _service. Compress archive during build. ==== ffmpeg-7 ==== Subpackages: libavcodec61 libavfilter10 libavformat61 libavutil59 libpostproc58 libswresample5 libswscale8 - Add vvenc build conditional - Add ffmpeg-CVE-2025-7700.patch: Add check for the return value of av_malloc_array() and av_calloc() to avoid potential NULL pointer dereference(CVE-2025-7700, bsc#1246790). ==== fwupd ==== Subpackages: fwupd-bash-completion libfwupd3 typelib-1_0-Fwupd-2_0 - drop unneeded gpgme build dependency. GPG support is provided with libjcat ==== grub2 ==== Subpackages: grub2-arm64-efi grub2-arm64-efi-bls grub2-common grub2-snapper-plugin grub2-systemd-sleep-plugin - Fix CVE-2024-56738: side-channel attack due to not constant-time algorithm in grub_crypto_memcmp (bsc#1234959) * grub2-constant-time-grub_crypto_memcmp.patch ==== gstreamer-plugins-bad ==== Subpackages: libgstadaptivedemux-1_0-0 libgstanalytics-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstcuda-1_0-0 libgstinsertbin-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstmse-1_0-0 libgstphotography-1_0-0 libgstplay-1_0-0 libgstplayer-1_0-0 libgstsctp-1_0-0 libgsttranscoder-1_0-0 libgsturidownloader-1_0-0 libgstva-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 libgstwebrtcnice-1_0-0 - Fix really disabling faad when building without faad support. - Do not build with faad in SLE16 where faad2 is not available. ==== harfbuzz ==== Version update (11.3.2 -> 11.3.3) Subpackages: libharfbuzz-gobject0 libharfbuzz-icu0 libharfbuzz-subset0 libharfbuzz0 typelib-1_0-HarfBuzz-0_0 - Update to version 11.3.3: + Fix bug in vertical shaping of fonts without the vmtx table. ==== hwdata ==== Version update (0.395 -> 0.397) - Update to version 0.397: * Update pci and vendor ids ==== kdump ==== Version update (2.1.4 -> 2.1.5) - upgrade to version 2.1.5 * kdumptool calibrate: use kernel flavour from the kdump kernel (jsc#PED-12971) * order kdump-commandline.service after kdump.service * updated documentation (bsc#1246908) ==== kernel-firmware-amdgpu ==== Version update (20250718 -> 20250725) - Update to version 20250725 (git commit 4bb152fb4405): * amdgpu: update dmcub fw for dcn314 ==== kernel-firmware-i915 ==== Version update (20250708 -> 20250730) - Update to version 20250730 (git commit 910c19074091): * i915: Xe3LPD DMC v2.29 ==== kernel-firmware-media ==== Version update (20250717 -> 20250725) - Update to version 20250725 (git commit 4bb152fb4405): * qcom: Add firmware binary for SM8750. ==== kernel-firmware-qcom ==== Version update (20250714 -> 20250725) - Update to version 20250725 (git commit 4bb152fb4405): * qcom: Add QCS6490 symlink for QUPv3 firmware ==== libeconf ==== Version update (0.7.9 -> 0.7.10) - Update to version 0.7.10: * cmake: Fix .pc file with absolute CMAKE_INSTALL_<dir> (#237) * Add build options for the CMake build (#230) * check NULL for default string (bnc#1247107) ==== libheif ==== Subpackages: gdk-pixbuf-loader-libheif libheif-aom libheif-dav1d libheif-ffmpeg libheif-jpeg libheif-openjpeg libheif-rav1e libheif-svtenc libheif1 - Remove conditionals for openh264, we can build against noopenh264 ==== libjcat ==== - adjust gpgme build dependency for future-proofing - drop unneeded help2man build dependency - add upstream signing key and validate source signature ==== libnvme ==== Version update (1.13 -> 1.15) Subpackages: libnvme-mi1 libnvme1 - Update to version 1.15: * Release v1.15 * doc: Regenerate all docs for v1.15 * tree: always set the host key (bsc#1246560) * json: do not leak port_obj for PCI devices * Revert "linux: TLS PSK derivation fixes" * linux: TLS PSK derivation fixes * mi: correct mi admin feature functions map file * mi: add power management feature functions * mi: add arbitration feature get function * libnvme: sanitize free() handling * ioctl: fix nvme_get_log_endurance_grp_evt() description * tree: free ctrl attributes when (re)configure ctrl (bsc#1243716) * types: Add Create Queue Specific (CQS) shift and mask for LM CDQ command * test: add tests for miscellaneous ioctl functions * test: move _cleanup_free_ to util.h * ioctl: fix nvme_directive_recv_stream_status * test: add tests for miscellaneous ioctl functions * tree: filter tree after scan has completed (bsc#1243716) * build: disable liburing support per default * ioctl: introduce force xfer length configuration knob * mi: nvme_mi_mi_xfer() is overly restrictive * mi: Additional define options for older systems with SIOCMCTPALLOC * types: Fix nvme_ns_id_desc packing * types: add SMART / health information CW shift and mask values * doc: fix return value description for nvme_scan_topology * test: add tests for zns functions * test: add missing tests for features functions * ioctl: fix nvme_lm_set_features_ctrl_data_queue * test: extend sysfs tree dump test * tree: add attribute numa_nodes for NVMe path object * tree: add queue-depth attribute for nvme path object * tree: add support for discovering nvme paths using sysfs multipath link * test: add tests for log functions * test: add missing tests for identify functions * ioctl: only use io_uring for char devices * examples: Make examples build selectable * examples: remove unnecessary include of <bits/pthreadtypes.h> * tree: handle the case when host_iface/host_traddr are set to "none" * Release v1.14 * doc: Regenerate all docs for v1.14 * examples: add explicit pthread dependency to meson * build: disable netdb test for static builds * build: make 'clean' target an alias for 'purge' * types: Change LM CDQ sz argument from u8 to u32. * Revert "fabrics: retry connect command on EINTR" * ioctl: add temperature threshold TMPSEL and THSEL parameters to get * types: add temperature threshold feature TMPTHH field * mi: Introduce asynchronous event message handling * types,util: add enums for Boot Partition Write Protection Config feature * tests: Add an empty NBFT table * tests: Add sample NBFT table with empty HFI ipv6 address * mi: Add support for multiple csi buffers * mi: add nvme_mi_submit entry and exit weak functions * util: add FDP events feature length * tree: add routine to fetch subsys serial number * mi: fix unrleased section name * build: use newer build container for readthedocs * build: update readthedocs commands * scripts: update UNRELEASED export map on release * src: introduce unreleased export section * biuld: patch the meson.build for test pypi upload * build: split 'dev' postfix from version string * build: cleanup python test pypi upload * build: fix test pypi cleanup task * build: add cleanup task for pypi test uploads * build: upload unique pypi test versions * util: add performance characteristic feature length * types: add performance characteristics attribute definitions * build: allow to specify tag for workflow_dispatch * build: switch to new python meson backend - disable liburing support, upstream disabled it on default. ==== libstorage-ng ==== Version update (4.5.266 -> 4.5.271) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#1035 - handle exception of BlkDevice::set_name() in bindings - split internal file and consistent coding style - 4.5.271 - merge gh#openSUSE/libstorage-ng#1034 - added testcases - 4.5.270 - merge gh#openSUSE/libstorage-ng#1033 - work on device names and mount points with '#' sign - added testcase - extended logging - 4.5.269 - merge gh#openSUSE/libstorage-ng#1032 - work on encryption names with spaces (bsc#1247173) - coding style - 4.5.268 - merge gh#openSUSE/libstorage-ng#1031 - Call nvme tools with --output-format instead of --output (bsc#1247053) - 4.5.267 ==== libvirt ==== Version update (11.5.0 -> 11.6.0) Subpackages: libvirt-client libvirt-daemon-common libvirt-daemon-config-network libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-lock libvirt-daemon-log libvirt-daemon-plugin-lockd libvirt-daemon-qemu libvirt-libs - Update to libvirt 11.6.0 - Revert commit c2c165ea6c to fix build with old libattr in SLE15 - Many incremental improvements and bug fixes, see https://libvirt.org/news.html#v11-6-0-2025-08-01 ==== libzypp ==== Version update (17.37.14 -> 17.37.15) - Append RepoInfo::path() to the mirror URLs in Preloader (bsc#1247054) - version 17.37.15 (35) ==== llvm20 ==== - Enable lldb on riscv64 ==== lua54 ==== - Switch from update-alternatives to libalternatives (and dependency on lua-interpreter) - improve .gitignore and overall improve the packaging. - this package also provides devel symlink directly and conflicts other -devel packages ==== makedumpfile ==== - makedumpfile-fix-multi-threading-data-race.patch: Fix a data race in multi-threading mode (--num-threads=N) (bsc#1245569). ==== mpg123 ==== Version update (1.33.0 -> 1.33.1) Subpackages: libmpg123-0 mpg123-openal - Update to version 1.33.1 * Finally formatted README. Maybe do it in Markdown sometime, as that's the fashion. build: * The ports/cmake only installs manpages for BUILD_PROGRAMS now. * The configure gives better hint if pkg-config was missing during generation mpg123: * Replace usage of signal() in terminal code with our sigaction() wrapper to fix repeated handling for --sigusr1 and --sigusr2, which got subtly broken on Linux + glibc by a feature test macro change in mpg123 1.31. ==== nfs-utils ==== Subpackages: libnfsidmap1 nfs-client nfs-kernel-server - update to 2.8.3: - https://kernel.org/pub/linux/utils/nfs-utils/2.8.3/2.8.3-Changelog * nfs(5): Add new rdirplus functionality, clarify * nfsdcld: fix cld pipe read size * gssd: do not use krb5_cc_initialize * gssd: unconditionally use krb5_get_init_creds_opt_alloc * nfsdctl: ensure autostart honors the default nfs.conf versX.Y settings * nfsdctl: dont ignore rdma listener return * nfsdctl: add necessary bits to configure lockd * nfsdctl: fix host-limited add listener * nfsdctl: cleanup listeners if some failed * nfsdctl: fix autostart * nfsdctl: fix update_listeners * systemd: mount nfsd after load kernel module * mountstats/nfsiostat: merge and rework the infinite and counted loops * mountstats/nfsiostat: Move the checks for empty mountpoint list into the print function * mountstats: filter for nfs mounts in a function, each iostat iteration * nfsiostat: fix crash when filtering mountstats after unmount * nfsiostat: mirror how mountstats iostat prints the stats * mountstats: when printing iostats, verify that old and new types are the same * mountstats/nfsiostat: add a function to return the fstype * nfsiostat: skip argv[0] when parsing command-line * nfsd: fix version sanity check * nfsdctl: tweak the nfs.conf version handling * nfsdctl: tweak the version subcommand behavior * NFS export symlink vulnerability fix * conffile: add 'arg' argument to conf_remove_now() - Removed obsolete patch from this release: - nfs-utils-1.0.7-bind-syntax.patch - Added upstream patches: - nfs-utils-Fix-build-with-glibc-2.42.patch - nfs-utils-nfsdctl-fix-lockd-config-during-autostart.patch ==== nvme-cli ==== Version update (2.13 -> 2.15) Subpackages: nvme-cli-bash-completion - Update to version 2.15: * Release v2.15 * doc: Regenerate all docs for v2.15 * nvme-rpmb: print error message when setting auth key fails * nvme-cli: sanitize free() handling * udev: Add custom udev rules for HPE Alletra Storage * nvme-print-stdout: add get-log command verbose outputs * build: bump libnvme wrap * sndk: Add support for retrieving data area 4 * sndk: Add support for new PCI device id * nvme-list: fix verbose JSON output for 'nvme list' command * nvme-wrap: add power management and arbitration features functions * build: bump libnvme wrap * wdc: Fix for get-drive-status wdc plugin command * nvme: Added message key for printable eye in normal format * nvme: plot eye chart data and hex dumping VS eye data * nvme-print-stdout: add get log verbose outputs * nvme-print: fix stdout_endurance_group_event_agg_log() parameter * nvme-print-stdout: add ANA, PEL and LBA status log verbose outputs * nvme-print-stdout: add get log command verbose outputs * feat: add volatile-wc command * doc: add get and set feature commands symbolic names * nvme: add get and set feature commands symbolic names * doc: add get-log command symbolic names * nvme: add get-log command symbolic names * CI: adopt kubevirt-action for self-hosted ARC * netapp-smdev: update invalid device handling * netapp-ontapdev: update invalid device handling * wdc: invalid customer ID fix * sndk: vs-internal-log udui support * nvme: fix mem leak in nvme copy (bsc#1243716) * nvme-print: suppress output when no ctrl is present for list-subsys (bsc#1243716) * nvme: extend filter to match device name (bsc#1243716) * doc: add note about huge TLB when using fw-download * nvme: add command line argument to disable retries * list-ctrl: limit to JSON and normal output * nvme: output nvme_alloc_huge() error message * sndk: rework shared capabilities with wdc plugin * wdc: Fix uuid-index setting for WD 0xC2 log page * nvme-print-stdout: add name space usage binary suffix verbose print * doc: add nvme list namespace usage sizes description * nvme-print-stdout: add format command relatives prints * feat: add arbitration command * sndk: Add sndk cu-smart-log plugin command * wdc: Add support for clear-assert-dump to SNTMP drives * wdc: Add support for cu_smart-log command on SN861 * wdc: Fix for vs-smart-add-log wdc plugin command * nvme: change NS management status message as error * plugins/micron: adding missing product support * wdc: use HAVE_TM_GMTOFF meson configuration variable * Documentation: Add man page for mangoboost command * Release v2.14 * doc: Regenerate all docs for v2.14 * build: bump libnvme wrap * logging: output command and latency debug for json format * nvme: change get_dev() to call nvme_show_init() for debug log level * nvme-print-json: count json_show_init() and json_show_finish() calls * nvme: output copy command success message for json format * nvme-print-json: output actual lbaf data size for verbose mode * util: add json_object_add_string() function * plugin/ocp: Added the OCP Get Feature FID=C8h command api * wdc: fix muon build warning * build: fix the static build * build: always use meson commands * build: make 'clean' target an alias for 'purge' * nvme-print-json: reverse pel power on reset parameter order error * Fixed OCP Latency Monitor stdout spacing in column header * plugins/micron: update to support latest products * tests: validate create-ns command nsid json output * nvme: output NS management command result by json * nvme-print: add show_key_value print_ops * sighdl: include stddef header file for NULL definition * logging: add nvme_mi_submit entry and exit functions * build: delete docs=disabled muon build option * doc: update dir-send command documentation on -H * fabrics: refactor error propagation in nvmf_connect * nvme: check errno not return value * CI: move to self-hosted GitHub ARC infrastructure * plugin/ocp: Added the OCP Get Feature FID=C3h command API * feat: fix to set perfc feature save argument correctly * feat: add temp-thresh command * feat: add timestamp command * nvme: add dir-send command human-readable deprecated help text * nvme: add output-format-version option * nvme-print: print Boot Partition Write Protection Config feature field * nvme: retry commands on EAGAIN and EINTR * util: add SIGINT handler * build: bump libnvme wrap * nvme-print: display serial num in list-subsys output * build: bump libnvme wrap * feat: add FEAT_ARGS to use instead of NVME_ARGS * doc: add opcode description as mandatory * nvme: make --opcode argument mandatory * nvme: delete host identifier feature length checking * feat: combine get functions * plugin/ocp: Added the OCP Get Feature FID=C5h command api * nvme: add general_help str parameter to filter sub-commands * plugins/mangoboost: Add plugin to support MangoBoost * nvme: add dry-run NVME_ARGS default option ... changelog too long, skipping 16 lines ... * sed: better error messages for revert and password ==== openSUSE-release ==== Version update (20250727 -> 20250803) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== openssl-3 ==== Subpackages: libopenssl3 - Disable LTO for userspace livepatching [jsc#PED-13245] - Use termios instead of obsolete termio ==== patterns-base ==== Subpackages: patterns-base-apparmor patterns-base-base patterns-base-basesystem patterns-base-basic_desktop patterns-base-console patterns-base-enhanced_base patterns-base-minimal_base patterns-base-selinux patterns-base-sw_management patterns-base-x11 patterns-base-x11_enhanced - No longer require issue-generator on transactional systems. agetty produces the needed output by itself. ==== perl-Crypt-URandom ==== - fix build for SLE12 ==== pinentry ==== Version update (1.3.1 -> 1.3.2) - Update to 1.3.2: * qt,qt5: Ensure that input field is large enough for generated password. [rP86ab46ebe9] * qt,qt5: Make Show/Hide Password functionality accessible. [T7736] * qt,qt5: Use light icons in dark mode. [T7230, T7737] * qt: Make showing/hiding the password accessible. [T7736] ==== pinentry-gui ==== Version update (1.3.1 -> 1.3.2) Subpackages: pinentry-gnome3 pinentry-gtk2 pinentry-qt6 - Update to 1.3.2: * qt,qt5: Ensure that input field is large enough for generated password. [rP86ab46ebe9] * qt,qt5: Make Show/Hide Password functionality accessible. [T7736] * qt,qt5: Use light icons in dark mode. [T7230, T7737] * qt: Make showing/hiding the password accessible. [T7736] ==== python-numpy ==== Subpackages: python311-numpy python313-numpy - Add reproducible.patch to make debuginfo reproducible (bsc#1245203) ==== python-packaging ==== Version update (24.2 -> 25.0) - update to 25.0: * PEP 751: Add support for extras and dependency_groups markers. (#885) * PEP 738: Add support for Android platform tags. (#880) ==== python-zstandard ==== Version update (0.22.0 -> 0.23.0) Subpackages: python311-zstandard python313-zstandard - Update to 0.23.0 * tests: suppress data_too_large health check * zstd: upgrade vendored zstd to 1.5.6 * setup: Python 3.13 support * rust: upgrade packages in Cargo.toml * build: fix building with modern setuptools backend ==== rpcbind ==== Version update (1.2.7 -> 1.2.8) - Update to rpcbind 1.2.8 https://lore.kernel.org/linux-nfs/[email protected]/ * Added -v (print version and compile flags) * A number of systemd updates/bug fixes. * A number of manpage updates. * Moved rpcbind.lock and default configs to /run instead of /var/run * A couple of bug fixes - systemd: Upstream added systemd EnvironmentFile: 1) /etc/rpcbind.conf 2) /etc/default/rpcbind 3) /etc/sysconfig/rpcbind (the only one originally used in openSUSE patch for boo#1117217) - systemd: Add 'systemd-tmpfiles-setup.service' into 'Wants' and 'After' targets (originally openSUSE patch for boo#1117217 added 'After=sysinit.target') - Removed openSUSE downstream patches (accepted upstream): * 0001-systemd-rpcbind.service-Fix-ordering-add-etc-sysconf.patch * 0001-systemd-rpcbind.service-Add-hardening-bsc-1181400.patch * 0001-change-lockingdir-to-run.patch ==== rpm ==== Subpackages: librpmbuild10 - flush scriptlet notification messages in --runposttrans * needed to fix leaking tmp files [bsc#1218459] * updated patch: posttrans.diff * added "rpm_flushes_runposttrans" provides for libzypp ==== samba ==== Version update (4.22.3+git.401.c70158430cc -> 4.22.3+git.403.4e078bdb832) Subpackages: libldb2 python3-ldb samba-ad-dc-libs samba-client samba-client-libs samba-dcerpc samba-gpupdate samba-ldb-ldap samba-libs samba-libs-python3 samba-python3 samba-winbind samba-winbind-libs - adjust gpgme build dependency for future-proofing ==== sbl ==== - use-termios.patch: Use <termios.h> instead of obsolete <termio.h> ==== sdbootutil ==== Version update (1+git20250724.553d46c -> 1+git20250731.055e2fe) Subpackages: sdbootutil-dracut-measure-pcr sdbootutil-snapper - Update to version 1+git20250731.055e2fe: * Refactor the write_issue_file function - Update to version 1+git20250731.b7568e3: * Some style changes * Exit if no encrypted devices - Update to version 1+git20250729.9dba13a: * sdbootutil-enroll: support agetty for issue.d, too * Support riscv64 in set_image_name ==== selinux-policy ==== Version update (20250716 -> 20250730) Subpackages: selinux-policy-targeted - Change default of example config to enforcing mode. With selinux-autorelabel taking care of relabeling this should work nowadays - Update to version 20250730: * Set /srv/tftpboot = /var/lib/tftpboot as equivalent file context (bsc#1247381) * Create unconfined type for salt-minion bsc#1228984 - Explain that disabling SELinux should not be done via the config file anymore (bsc#1246549) - Drop mls option, as we don't provide this ATM ==== sssd ==== Version update (2.10.2 -> 2.11.1) Subpackages: libnfsidmap-sss libsss_certmap0 libsss_idmap0 sssd-krb5-common sssd-ldap - Update to release 2.11.1 * Fixed AD users in external groups not being cleared once the cache expires. * Fixed `cache_credentials=true` not having any effect. * Fixed socket activation not having an effect for sssd_pam. - Add logrotate.patch [boo#1246537] - Install file in krb5.conf.d to include sssd krb5 config snippets; (bsc#1244325); - Update to release 2.11 * The deprecated tool `sss_ssh_knownhostsproxy` was finally removed. * Support for `id_provider = files` was removed. * SSSD doesn't create any more missing path components of DIR:/FILE: ccache types while acquiring user's TGT. * New generic id and auth provider for Identity Providers (IdPs) for Keycloak/EntraID. [Not enabled in openSUSE for now.] - Run mkdir/rm with verbose mode for the build log ==== systemd ==== Subpackages: libsystemd0 libudev1 systemd-boot systemd-container systemd-experimental udev - Remove the script used to help migrating the language and locale settings located in /etc/sysconfig/language on old systems to the systemd default locations (bsc#1247074) The script was introduced more than 7 years ago and all systems running TW should have been migrated since then. Moreover the installer supports the systemd default locations since approximately SLE15. ==== tbb ==== - Change tbb-2022.2.0.tar.gz file [boo#1247142] ==== tftp ==== - Allow enabling the service via `systemctl enable tftp` to create the tftp.socket symlink [bsc#1215520, bsc#1246141] ==== webkit2gtk3 ==== Version update (2.48.3 -> 2.48.4) Subpackages: libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles - Update to version 2.48.4: + Improve emoji font selection with USE_SKIA=ON. + Improve playback of multimedia streams from blob URLs. + Fix the build with USE_SKIA_OPENTYPE_SVG=ON and USE_SYSPROF_CAPTURE=ON. + Fix the build on LoongArch with USE_SKIA=ON. + Fix crash when using a WebKitWebView widget in an offscreen window. + Fix several crashes and rendering issues. ==== wget ==== - adjust gpgme (and other) build dependencies for future-proofing - drop unused build dependency ==== xdpyinfo ==== Version update (1.3.4 -> 1.4.0) - Update to version 1.4.0 * gitlab CI: Update to latest CI templates & Debian stable release * XFree86-DGA: -ext all shoudn't exit on XF86DGAClientNotLocal error * Present: add -ext present that prints version & screen capabilities * Present: add per-crtc capabilities to -ext output * meson: Add option to build with meson * Add -help option * Accept --help & --version as aliases to -help & -version * man page: fix warnings from `mandoc -T lint` * Fix alignment of -help description in -help output - switched to meson build ==== xkeyboard-config ==== - adjust the lua code for LUA 5.2+; builtin LUA currently seems to be LUA 5.4 in RPM 4.20 on Tumbleweed (boo#1247050) - improved lua script in %pretrans (boo#1246768, boo#1247050) * better diagnostics for the failure in distrobox containers * add a fallback to use cp and rm if rename fails ==== yast2-bootloader ==== Version update (5.0.22 -> 5.0.23) - Proposal cleanup: If the system supports BLS bootloader, select the BLS bootloader which is defined in the control.xml file. If no one has been set, grub2-bls will be taken as default. (jsc#PED-10703) - 5.0.23 ==== yast2-trans ==== Version update (84.87.20250721.46ecd273d2 -> 84.87.20250727.0ccf40f675) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20250727.0ccf40f675: * Translated using Weblate (Thai) * Translated using Weblate (Thai) * Translated using Weblate (Thai) * Translated using Weblate (Ukrainian) * Translated using Weblate (Ukrainian) * Translated using Weblate (Ukrainian) * Translated using Weblate (Ukrainian) * Translated using Weblate (Indonesian) ==== zbar ==== - Do not build with Qt in TW and SLE16. zbar only supports Qt5 and it seems to be mostly unmaintained.
