Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here.
Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=3&version=Tumbleweed&build=20250912 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: bind (9.20.12 -> 9.20.13) black-hole-solver (1.12.0 -> 1.14.0) chrony (4.7 -> 4.8) dracut (059+suse.749.g280c842e -> 059+suse.757.g0d1d426d) freecell-solver (6.12.0 -> 6.14.0) gdm grub2 openSUSE-release (20250911 -> 20250912) ovmf (202505 -> 202508) python-pycurl (7.45.3 -> 7.45.6) python-typing_extensions (4.14.1 -> 4.15.0) setools (4.5.1 -> 4.6.0) update-bootloader (1.25 -> 1.26) === Details === ==== bind ==== Version update (9.20.12 -> 9.20.13) Subpackages: bind-doc bind-utils - Upgrade to release 9.20.13 New Features: * Add a new option `manual-mode` to dnssec-policy. * Add a new option `servfail-until-ready` to response-policy zones. * Support for parsing HHIT and BRID records has been added. Removed Features: * Deprecate the `tkey-gssapi-credential` statement. * Obsolete the `tkey-domain` statement. Bug Fixes: * Prevent spurious SERVFAILs for certain 0-TTL resource records. * Fix unexpected termination if catalog-zones had undefined `default-primaries`. ==== black-hole-solver ==== Version update (1.12.0 -> 1.14.0) - update to 1.4.0: * Fixed running black_hole_solver_run with the same (or a smaller) iterations limit. It ran indefinetely then (Possible Denial-of-service?) * Fix some hypothetical rresource leaks (e.g.: with "fopen()"). * Cleanups: add "const"s , convert "int" to "bool", etc. * Add tests. ==== chrony ==== Version update (4.7 -> 4.8) Subpackages: chrony-pool-openSUSE - Update to version 4.8: * Add maxunreach option to limit selection of unreachable sources * Add -u option to chronyc to drop root privileges (default chronyc user is set by configure script) * Fix refclock extpps option to work on Linux >= 6.15 * Validate refclock samples for reachability updates * Obsoletes chrony-unix-socket.patch * Obsoletes chrony-remove-chmod.patch ==== dracut ==== Version update (059+suse.749.g280c842e -> 059+suse.757.g0d1d426d) - Update to version 059+suse.757.g0d1d426d: Additional fixes for PXE boot with filled-in NBFT (bsc#1238848): * fix(74nvmf): make sure autoconnect script is run at least once * fix(74nvmf): only set netroot if it's yet empty Other: * fix(dracut): library directory creation in --kernel-only * improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces * fix(kernel-modules-extra): remove stray \ before / * fix(dracut): use "-name" to avoid find matching temporary directory * feat(dracut.sh): output error message for --regenerate-all ==== freecell-solver ==== Version update (6.12.0 -> 6.14.0) Subpackages: freecell-solver-presets libfreecell-solver0 - Update to 6.14.0: - Require pysol_cards.gen_multi_cli and avoid requiring random2. - Add comments and documentation. - Apply add_tag("tests_may_fail") to more failing compile-time configurations. - Add âSTRICT â 1â to Template Toolkit invocations. - clang-format and perltidy syntax fixes. ==== gdm ==== Subpackages: gdm-schema gdm-xdm-integration gdmflexiserver libgdm1 typelib-1_0-Gdm-1_0 - Create /run/gdm in case it would not exist yet; this could potentially happen on offline upgrades. ==== grub2 ==== Subpackages: grub2-arm64-efi grub2-arm64-efi-bls grub2-common grub2-snapper-plugin grub2-systemd-sleep-plugin - Add support for `LoaderEntryDefault` EFI variable * grub2-bls-loader-entry-default.patch ==== openSUSE-release ==== Version update (20250911 -> 20250912) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== ovmf ==== Version update (202505 -> 202508) Subpackages: qemu-uefi-aarch64 - Update to edk2-stable202508 - New Features & Bug Fixes (https://github.com/tianocore/edk2/releases): - update to openssl 3.5.1 - MdeModule: Update oniguruma to v6.9.10 - Support Standalone MM on OVMF - MdePkg/IndustryStandard: update Tpm2Acpi table to revision 5 - Adding FF-A memory management library - Add UUID-GUID conversion interfaces in ArmFfaLib - BaseTools: Add support for mingw-w64 - Remove UGA support - Add support for ARM GICv5 - RISC-V: Support PEI booting - Patches (git log --oneline --date-order edk2-stable202505..edk2-stable202508): d46aa46c83 ShellPkg: Remove EmbeddedPkg dependency db5b28ed9e MdePkg, EmbeddedPkg: Move Fdt Table Guid to MdePkg 808f1f1f87 UefiPayloadPkg: Scan for Option ROMs 072ab3846c Revert "SecurityPkg: CodeQL Fixes." 8d984e6a57 MdeModulePkg: XhciDxe: Fix comment grammar in XhcMonitorAsyncRequests 6d37ca427e MdeModulePkg: XhciDxe: Fix USB reset issue: callback / update order e69d7653b9 MdeModulePkg: XhciDxe: Fix USB reset issue: use after free b58ce4c226 MdeModulePkg: Support conditional UFS initialization 9baa6193c2 Update reviewer for SecurityPkg: Tcg related modules and UefiCpuPkg 4488d4479a UefiPayloadPkg/BlSupportDxe: Drop manual reservations for APIC and HPET 44d88d5d0c MdeModulePkg: Remove obsolete PEI_USB_HOST_CONTROLLER_PPI 834586f316 MdeModulePkg/UsbBusPei: Drop support for obsolete host controller PPI 4e950950a4 MdeModulePkg/Usb: Remove UhciPei 9688712f1d MdeModulePkg: Usb cumulative codeql issues. d68f418300 MdeModulePkg: Variable cumulative codeql issues. 504a80c151 SecurityPkg/Tcg/OpalPasswordDxe: Fix logic for RemoveDevice() bd785cedc3 StandaloneMmPkg/MmCore: Correct EndOfDxe to EndOfPei in MmEndOfPeiHandler d192e7ea75 StandaloneMmPkg/MmIpl: Correct CreatMmHobList to CreateMmHobList 9418a9f1e7 .azurepipelines: Use Fedora 41 imagBug 1245454 - iSCSI boot support is disabled in OVMF imagese for Linux CI jobs 057a611ae6 SecurityPkg: Added basic DxeImageVerificationLib tests 5125e2d6b1 CryptoPkg: workaround for MSVC linking tolower d55642f537 MdePkg: added mocks for DevicePathLib and OpenProtocol 1c3a22059b MdeModulePkg: added SecurityManagementLib mock 3f453cd7aa Add Poncho Figueroa as BaseTools reviewer d1c1f7e354 StandaloneMmPkg/MmIpl: Call CreatMmHobList() with page aligned size 0662754134 MdePkg/Library: Remove MM_STANDALONE LibraryClass in UefiDevicePathLib.inf fdd6796d08 MdePkg/Library: Remove UefiDevicePathLibStandaloneMm.inf 80f9e3aa2f OvmfPkg/OvmfPkg.dsc:Update DevicePathLib mapping for MM_STANDALONE drivers 6e4bf7f934 .mergify: Set max parallel checks to 1 5c7ef27b96 MdeModulePkg: UefiBootManagerLib Change default alignment for ramdisk boot. 686f1e3ea8 CryptoPkg/BaseCryptLibMbedTls : Add strpbrk() support to MbedTls d2d8d38ee0 UefiCpuPkg/PiSmmCpuDxeSmm: Safe handling of IDT register on SMM entry 7fe3609022 DynamicTablesPkg: Add alias for EArchCommonObjPciConfigSpaceInfo a60334ad59 BaseTools: Fix FMMT FvHandler Padding operation issue 491530abaa MdeModulePkg: Change PCD type to support dynamic 3b48f8ccab UefiPayloadPkg: Fix calling convention 0d82e48221 DynamicTablesPkg: add Tpm2DeviceTableLib to generate Tpm2 device table faeedaa54b DynamicTablesPkg: add ArchCommonObjTpm2DeviceInfo 47e818016a ShellPkg/Library: Remove unecessary error check 97b0f1ea3b OvmfPkg/CloudHv: bump PcdCpuMaxLogicalProcessorNumber to 254 be6342d64f ShellPkg: Fixed Deadcode and Null field Coverity warnings. 01295fd25b ShellPkg: DtbTableAddress via config in dmem f41cc8ac79 ArmVirtPkg: Introduce ArmTransferListLib to ArmVirtPkg adf345e27b ArmPlatformPkg: Introduce TransferList Guid Hob for SEC c1e3e71643 ArmPlatformPkg: Introduce gArmTransferListPpiGuid 0bad279bd4 ArmPkg: Add gArmTransferListPpiGuid 6a329eb853 ArmPlatformPkg: Capture TransferList Information for SEC 078414f045 ArmPlatformPkg: Introduce TransferList Guid Hob for PeilessSec 78d17ce5d2 ArmPkg: Add ArmTransferListHob Guid b1096651d8 ArmPlatformPkg: Capture TransferList information for PeilessSec e841099600 ArmPkg/ArmTransferListLib: Add utility functions 5fc1ba3f25 SecurityPkg/Tcg2Config: add Tcg2ConfigFfaPei f47216f159 SecurityPkg/Library: Tpm2DeviceSecLibFfa for PeilessSec ee9950d3fb SecurityPkg/Library: separate logics geting TPM2 information with FF-A ba6a8eb045 SecurityPkg: CodeQL Fixes. 690929c458 SecurityPkg: Tpm2DumpLib: Make All Prints at DEBUG_SECURITY 05c966e8f1 StandaloneMmPkg: Unify EfiFileName Parsing c3479204cc MdeModulePkg: Unify EfiFileName Parsing bcd8509640 StandaloneMmPkg: Always Print Driver Load Messages 1ec1f5d711 MdeModulePkg: Always Print Driver Load Messages 43d696a366 OvmfPkg/CpuHotplugSmm: hook up MSR_IA32_FEATURE_CONTROL with platform info 0e814e829e OvmfPkg/CpuHotplugSmm: set MSR_IA32_FEATURE_CONTROL in first SMI handler f92ba13a66 OvmfPkg/CpuHotplugSmm: add whitespace c37e2d38d6 OvmfPkg/PlatformPei: record "etc/msr_feature_control" presence explicitly c27552f343 ShellPkg: Shell Validate parameter before use. 04fe3f50d6 OvmfPkg/RiscVVirt: Adopt New CpuExceptionHandlerLib 4052e8f155 UefiCpuPkg: CpuExceptionHandlerLib: RISC-V: Support backtrace aee4d29d56 BaseTools/tools_def: Enable frame pointer for RISC-V 3a06b5dac9 OvmfPkg/RiscVVirt/PlatformSecLib: Clear s0 (fp) at entry point db299fa788 UefiCpuPkg: CpuExceptionHandlerLib: Support RISC-V c840e5f95b EmbeddedPkg: Fix incorrect define for hardware interrupt2 protocol 188f8c686e BaseTools/tools_def: Always link with -Wl,-z,notext for BFD/LLD d7ccf477f5 BaseTools/tools_def: Make linker warnings fatal for RISCV + LOONGARCH64 35a93babfb BaseTools/tools_def: Drop unused GCC IA32/X64 flag variables 1caa6a92ea ArmPlatformPkg/PL011UartLib: Prevent data loss in conversion. 6cb4523704 ArmPlatformPkg/PL011SerialPortLib: Support dynamic PCD type. 095bfacc9e DynamicTablesPkg: Implement X64-specific SsdtSerialPortFixupLib 7d8760875a DynamicTablesPkg: Adds AML code generation for serial UART RD d1f8485822 DynamicTablesPkg: Adds AML code generation for IRQ 10f0364b61 MdePkg/Acpi50: Add revision macro for Serial Bus UART structure 988162092b MdePkg: Acpi66: Update FADT and MADT versions b0fb8da1fa MdePkg: Acpi66: Add newly defined RISC-V affinity structure 6b8522d007 MdePkg: Acpi66: Add RISC-V MADT and RHCT structures 6f939cee32 UefiCpuPkg/MpInitLib: Rename FillExchangeInfoDataSevEs() 046ba401c2 UefiCpuPkg/MpInitLib: Fix random SEV-ES guest boot crash 0bb4cf0228 SecurityPkg: Clarify Is800155Event ... changelog too long, skipping 339 lines ... - Add build flag NETWORK_ISCSI_DEFAULT_ENABLE for x64 OVMF to enable iSCSI boot support by default ==== python-pycurl ==== Version update (7.45.3 -> 7.45.6) Subpackages: python311-pycurl python313-pycurl - Add patch handle-change-debug-curl-8.16.0.patch (bsc#1249448, gh#pycurl/pycurl@eb7f52eeef85) - Drop patch test-bottle-flask.patch, not needed anymore - Update to 7.45.6: * Re-enable building Linux wheels with CA bundle autodetection - 7.45.5 * Enable GSS-API and brotli support in wheels (patch by Scott Talbert). * Add support for calling getinfo with CURLOPT_*_T arguments (patch by Scott Talbert) * Change wheels to build using shared libraries (vice static libraries) (patch by Scott Talbert) * Build wheels with curl 8.12.1 (mainly for security fixes) - 7.45.4 * Add support for CURLOPT_HAPROXY_CLIENT_IP (patch by Scott Talbert). * Port tests from bottle to flask (patch by Miro HronÄok). * Add constant for CURL_HTTP_VERSION_3ONLY (patch by Pavel HoráÄek). * Add EFFECTIVE_METHOD info option (patch by Pavel HoráÄek). * Don't use `-flat_namespace` on macOS (patch by Michael Cho). * Add some missing GIL checks to callback functions (patch by Scott Talbert). * Fix assorted bugs in pycurl tests, including a segfault (patch by Scott Talbert). All tests should now pass on Linux and macOS. * Fix minor bug in examples/multi-socket_action-select.py (patch by Oleg Broytman). * Build all wheels using the latest version of libcurl and its dependencies (patch by Scott Talbert). All wheels should now have openssl, HTTP2, and SSH support. * Implement Certificate Authority path autodetection when building Linux wheels (patch by Scott Talbert). ==== python-typing_extensions ==== Version update (4.14.1 -> 4.15.0) - Update to 4.15.0 * Add the @typing_extensions.disjoint_base decorator, as specified in PEP 800. * Add typing_extensions.type_repr, a backport of annotationlib.type_repr, introduced in Python 3.14. * Fix behavior of type params in typing_extensions.evaluate_forward_ref. ==== setools ==== Version update (4.5.1 -> 4.6.0) Subpackages: python313-setools setools-console - Move tests to a test multibuild flavor - Update to version 4.6.0: - User Visible Changes * Add seinfo option to see roles allowed for a specified type. * Add sechecker module for asserting kernel modules are read-only. * Add support for the nlmsg extended permission. - Under The Hood Changes * Significant code quality and unit testing improvements. * Drop methods marked for deprecation. - Packaging Changes * Refactor packaging to use pyproject.toml. - Add %check section and run tests (Factory only) - Fix %fdupes call to clean up duplicates for all Python versions - Add minimum required dependency versions ==== update-bootloader ==== Version update (1.25 -> 1.26) - merge gh#openSUSE/perl-bootloader#193 - adjust test cases - 1.26 - merge gh#openSUSE/perl-bootloader#192 - Implement config for BLS (boo#1246013)
