Packages changed: Mesa Mesa-drivers MicroOS-release (20250325 -> 20250326) abseil-cpp (20250127.0 -> 20250127.1) ca-certificates-mozilla cpio dbus-1-glib gnutls kernel-firmware-amdgpu (20250318 -> 20250322) kernel-firmware-ath10k kernel-firmware-bluetooth kernel-firmware-media kernel-firmware-mediatek kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-qcom kernel-firmware-sound (20250318 -> 20250321) kernel-source (6.13.7 -> 6.13.8) libcap (2.73 -> 2.75) librist (0.2.10 -> 0.2.11) passt (20250217.a1e48a0 -> 20250320.32f6212) poppler (25.02.0 -> 25.03.0) poppler-qt6 (25.02.0 -> 25.03.0) rebootmgr (3.2+git20250213.bff65b1 -> 3.2+git20250317.27192cc) sdbootutil (1+git20250311.8d3db8b -> 1+git20250324.c1cd393) soxr spiel timezone (2025a -> 2025b) === Details === ==== Mesa ==== Subpackages: Mesa-libEGL1 Mesa-libGL1 libgbm1 - Fix regression in winsys/amdgpu (boo#1239657) revert_8c91624614c1f939974fe0d2d1a3baf83335cecb.patch https://gitlab.freedesktop.org/mesa/mesa/-/issues/12809 https://gitlab.freedesktop.org/mesa/mesa/-/commit/8c91624614c1f939974fe0d2d1a3baf83335cecb ==== Mesa-drivers ==== Subpackages: Mesa-dri Mesa-gallium - Fix regression in winsys/amdgpu (boo#1239657) revert_8c91624614c1f939974fe0d2d1a3baf83335cecb.patch https://gitlab.freedesktop.org/mesa/mesa/-/issues/12809 https://gitlab.freedesktop.org/mesa/mesa/-/commit/8c91624614c1f939974fe0d2d1a3baf83335cecb ==== MicroOS-release ==== Version update (20250325 -> 20250326) Subpackages: MicroOS-release-appliance MicroOS-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== abseil-cpp ==== Version update (20250127.0 -> 20250127.1) Subpackages: libabsl_2501_0_0 libabsl_lite_2501_0_0 - Update to 20250127.1: * Improved Bazel support * Added ABSL_ATTRIBUTE_VIEW and ABSL_ATTRIBUTE_OWNER for diagnosing certain lifetime issues * Many performance improvements * potential integer overflow in hash container create/resize fixed again - boo#1236438 ==== ca-certificates-mozilla ==== - Fix awk to compare (missing a =) and give the following output: [#] NSS_BUILTINS_LIBRARY_VERSION "2.74" - pass file argument to awk (bsc#1240009) ==== cpio ==== - Use -std=gnu11 to avoid extra diagnostics when calling an unprototyped function which is no longer possible with C23, the new default with GCC 15. ==== dbus-1-glib ==== - Fix build with GCC 15 via exporting -std=gnu17 to cflags. GCC 15 defaults to C23, but the latest release is from 2021, and this is deprecated upstream and no longer under development. ==== gnutls ==== - FIPS: Mark SHA-1 as non-approved in the SLI for all operations. [jsc#PED-12224] * Add gnutls-FIPS-disable-mac-sha1.patch - bsc#1237101, FIPS selfcheck fails on tumbleweed * Match dependent library names ( nettle, gmp, hogweed ) even when they include full verison in soname * Add gnutls-fips-sonames-check.patch ==== kernel-firmware-amdgpu ==== Version update (20250318 -> 20250322) - Fix a typo in download URL - Update to version 20250322 (git commit 710a336b3198): * amdgpu: update dcn 4.01 firmware to 0.1.3.0 * amdgpu: update dcn 3.5 firmware to 0.1.0.0 - Update kernel-firmware-tools scripts to be downloadable ==== kernel-firmware-ath10k ==== - Fix a typo in download URL - Correct aliases with comma (bsc#1239877) - Update spec to make kernel-firmware-tools downloadable ==== kernel-firmware-bluetooth ==== - Fix a typo in download URL - Correct aliases with comma (bsc#1239877) - Update spec to make kernel-firmware-tools downloadable ==== kernel-firmware-media ==== - Fix a typo in download URL - Correct aliases with comma (bsc#1239877) - Update spec to make kernel-firmware-tools downloadable ==== kernel-firmware-mediatek ==== - Fix a typo in download URL - Correct aliases with comma (bsc#1239877) - Update spec to make kernel-firmware-tools downloadable ==== kernel-firmware-nvidia ==== - Fix a typo in download URL - Correct aliases with comma (bsc#1239877) - Update spec to make kernel-firmware-tools downloadable ==== kernel-firmware-platform ==== - Fix a typo in download URL - Correct aliases with comma (bsc#1239877) - Update spec to make kernel-firmware-tools downloadable ==== kernel-firmware-qcom ==== - Fix a typo in download URL - Correct aliases with comma (bsc#1239877) - Update spec to make kernel-firmware-tools downloadable ==== kernel-firmware-sound ==== Version update (20250318 -> 20250321) - Fix a typo in download URL - Correct aliases with comma (bsc#1239877) - Update to version 20250321 (git commit e61b8981aeef): * cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - Update to version 20250320 (git commit a60087f7c925): * cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - Update kernel-firmware-tools scripts to be downloadable ==== kernel-source ==== Version update (6.13.7 -> 6.13.8) - Revert "Update config files. Disable OVPN temporarily." This reverts commit bca56f08ab2271cfe4d6ff271d57fb773cca295c. The issue has been fixed. - commit 7089702 - Refresh patches.suse/drm-amd-display-Use-HW-lock-mgr-for-PSR1-when-only-o.patch. Update upstream status. - commit 614d9ea - Revert "gre: Fix IPv6 link-local address generation." (git-fixes). - commit 5d9714b - Linux 6.13.8 (bsc#1012628). - mm: fix kernel BUG when userfaultfd_move encounters swapcache (bsc#1012628). - userfaultfd: fix PTE unmapping stack-allocated PTE copies (bsc#1012628). - mm/slab/kvfree_rcu: Switch to WQ_MEM_RECLAIM wq (bsc#1012628). - virt: sev-guest: Move SNP Guest Request data pages handling under snp_cmd_mutex (bsc#1012628). - fbdev: hyperv_fb: iounmap() the correct memory when removing a device (bsc#1012628). - pinctrl: bcm281xx: Fix incorrect regmap max_registers value (bsc#1012628). - pinctrl: nuvoton: npcm8xx: Add NULL check in npcm8xx_gpio_fw (bsc#1012628). - netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template (bsc#1012628). - ice: do not configure destination override for switchdev (bsc#1012628). - ice: fix memory leak in aRFS after reset (bsc#1012628). - ice: Fix switchdev slow-path in LAG (bsc#1012628). - netfilter: nf_conncount: garbage collection is not skipped when jiffies wrap around (bsc#1012628). - netfilter: nf_tables: make destruction work queue pernet (bsc#1012628). - sched: address a potential NULL pointer dereference in the GRED scheduler (bsc#1012628). - wifi: iwlwifi: mvm: fix PNVM timeout for non-MSI-X platforms (bsc#1012628). - wifi: mac80211: don't queue sdata::work for a non-running sdata (bsc#1012628). - wifi: cfg80211: cancel wiphy_work before freeing wiphy (bsc#1012628). - Bluetooth: SCO: fix sco_conn refcounting on sco_conn_ready (bsc#1012628). - Bluetooth: hci_event: Fix enabling passive scanning (bsc#1012628). - Revert "Bluetooth: hci_core: Fix sleeping function called from invalid context" (bsc#1012628). - net/mlx5: Fill out devlink dev info only for PFs (bsc#1012628). - net: dsa: mv88e6xxx: Verify after ATU Load ops (bsc#1012628). - net: mctp i3c: Copy headers if cloned (bsc#1012628). - net: mctp i2c: Copy headers if cloned (bsc#1012628). - netpoll: hold rcu read lock in __netpoll_send_skb() (bsc#1012628). - drm/hyperv: Fix address space leak when Hyper-V DRM device is removed (bsc#1012628). - fbdev: hyperv_fb: Fix hang in kdump kernel when on Hyper-V Gen 2 VMs (bsc#1012628). - fbdev: hyperv_fb: Simplify hvfb_putmem (bsc#1012628). - fbdev: hyperv_fb: Allow graceful removal of framebuffer (bsc#1012628). - Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio() (bsc#1012628). - net/mlx5: handle errors in mlx5_chains_create_table() (bsc#1012628). - eth: bnxt: fix truesize for mb-xdp-pass case (bsc#1012628). - eth: bnxt: return fail if interface is down in bnxt_queue_mem_alloc() (bsc#1012628). - eth: bnxt: do not use BNXT_VNIC_NTUPLE unconditionally in queue restart logic (bsc#1012628). - eth: bnxt: do not update checksum in bnxt_xdp_build_skb() (bsc#1012628). - eth: bnxt: fix kernel panic in the bnxt_get_queue_stats{rx | tx} (bsc#1012628). - eth: bnxt: fix memory leak in queue reset (bsc#1012628). - net: switchdev: Convert blocking notification chain to a raw one (bsc#1012628). - net: mctp: unshare packets when reassembling (bsc#1012628). - bonding: fix incorrect MAC address setting to receive NS messages (bsc#1012628). - selftests: bonding: fix incorrect mac address (bsc#1012628). - rtase: Fix improper release of ring list entries in rtase_sw_reset (bsc#1012628). - wifi: mac80211: fix MPDU length parsing for EHT 5/6 GHz (bsc#1012628). - netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1012628). - ipvs: prevent integer overflow in do_ip_vs_get_ctl() (bsc#1012628). - net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1012628). - netfilter: nft_exthdr: fix offset with ipv4_find_option() (bsc#1012628). - gre: Fix IPv6 link-local address generation (bsc#1012628). - net: openvswitch: remove misbehaving actions length check (bsc#1012628). - Revert "openvswitch: switch to per-action label counting in conntrack" (bsc#1012628). ... changelog too long, skipping 325 lines ... - commit 41f5788 ==== libcap ==== Version update (2.73 -> 2.75) - update to 1.2.75: * go related fixes - includes changes from 1.2.74: * Group syntax parsing bugfix for pam_cap * Doc typo fix for cap_get_proc.3 * Fix transitive include in capsh.c * go related changes ==== librist ==== Version update (0.2.10 -> 0.2.11) - update to 0.2.11: * Adds support for ephemeral listening ports, which allows for adding or taking down ports, primarily for new connections, after initialization * Adds a sender function rist_sender_npd_get to obtain current status of null_packet_deletion in client code * Adds a new function rist_peer_get_cname to allow for the extraction of the private cname property of a peer * various bug fixes and code improvements ==== passt ==== Version update (20250217.a1e48a0 -> 20250320.32f6212) Subpackages: passt-selinux - Update to version 20250320.32f6212: * Makefile: Enable -Wformat-security * conf: Include libgen.h for basename(), fix build against musl * tcp: Flush socket before checking for more data in active close state * migrate: Bump migration version number * migrate, tcp: Migrate RFC 7323 timestamp * migrate, tcp: More careful marshalling of mss parameter during migration * passt-repair: Fix build with -Werror=format-security * tcp, flow: Better use flow specific logging heleprs * conf: Unify several paths in conf_ports() * test/perf: Simplify iperf3 server lifetime management * conf: Limit maximum MTU based on backend frame size * pcap: Correctly set snaplen based on tap backend type * Simplify sizing of pkt_buf * tap: Use explicit defines for maximum length of L2 frame * packet: Remove redundant TAP_BUF_BYTES define * packet: Give explicit name to maximum packet size * conf: Detect vhost-user mode earlier * conf: Move mode detection into helper function * conf: Use the same optstring for passt and pasta modes * flow, repair: Wait for a short while for passt-repair to connect * passt-repair: Add directory watch * cppcheck: Add suppressions for "logically" exported functions * vhost_user: Don't export several functions * tcp: Don't export tcp_update_csum() * checksum: Don't export various functions * log: Don't export passt_vsyslog() * treewide: Mark assorted functions static * udp: create and send ICMPv6 to local peer when applicable * tap: break out building of udp header from tap_udp6_send function * udp: create and send ICMPv4 to local peer when applicable * tap: break out building of udp header from tap_udp4_send function * conf: Be more precise about minimum MTUs * tcp: Send RST in response to guest packets that match no connection * tap: Consider IPv6 flow label when building packet sequences * ip: Helpers to access IPv6 flow label * migrate, tcp: Don't flow_alloc_cancel() during incoming migration * tcp: Unconditionally move to CLOSED state on tcp_rst() * tcp: Correct error code handling from tcp_flow_repair_socket() * migrate, flow: Don't attempt to migrate TCP flows without passt-repair * migrate, flow: Trivially succeed if migrating with no flows * selinux: Fixes/workarounds for passt and passt-repair, mostly for libvirt usage * seccomp.sh: Silence stty errors * tap: always set the no_frag flag in IPv4 headers * contrib/fedora: Actually install passt-repair SELinux policy file * dhcp: Add option code byte in calculation for OPT_MAX boundary check * Makefile: Use mmap2() as alternative for mmap() in valgrind extra syscalls * conf: Use 0 instead of -1 as "unassigned" mtu value * conf: More thorough error checking when parsing --mtu option * flow: Clean up and generalise flow traversal macros * flow: Remove unneeded bound parameter from flow traversal macros * flow: Remove unneeded index from foreach_* macros * flow: Add flow_perror() helper * tcp: Don't pass both flow pointer and flow index * tcp: Remove spurious prototype for tcp_flow_migrate_shrink_window * tcp: More type safety for tcp_flow_migrate_target_ext() * tcp_vu: head_cnt need not be global * tap: Remove unused ETH_HDR_INIT() macro * packet: Don't pass start and offset separately to packet_check_range() * packet: Use flexible array member in struct pool * dhcp: Remove option 255 length byte ==== poppler ==== Version update (25.02.0 -> 25.03.0) Subpackages: libpoppler-cpp2 libpoppler-glib8 - version update to 25.03.0 core: * Fix opening some slightly malformed files * Signing: Support custom PGP signing * Signing: Do not embed fonts in the case of signatures without appearance * Signing: Improve error handling on bad passphrase * Signing-GPGME: more correct validation handling * Internal code improvements glib: * Fix default signature colors * Check file attachment annotation for this class before casting - gcc12: build with PIE [bsc#1239939] - Bump poppler sover following upstream changes. ==== poppler-qt6 ==== Version update (25.02.0 -> 25.03.0) - version update to 25.03.0 core: * Fix opening some slightly malformed files * Signing: Support custom PGP signing * Signing: Do not embed fonts in the case of signatures without appearance * Signing: Improve error handling on bad passphrase * Signing-GPGME: more correct validation handling * Internal code improvements glib: * Fix default signature colors * Check file attachment annotation for this class before casting - gcc12: build with PIE [bsc#1239939] - Bump poppler sover following upstream changes. ==== rebootmgr ==== Version update (3.2+git20250213.bff65b1 -> 3.2+git20250317.27192cc) - Update to version 3.2+git20250317.27192cc: * Set c_std to gnu17 ==== sdbootutil ==== Version update (1+git20250311.8d3db8b -> 1+git20250324.c1cd393) Subpackages: sdbootutil-dracut-measure-pcr sdbootutil-snapper sdbootutil-tukit - Update to version 1+git20250324.c1cd393: * Use filesystem order in grub2-bls ==== soxr ==== - Add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to fix FTBFS with cmake4 - Add %check section - Remove Group: declarations, no longer used ==== spiel ==== Subpackages: libspeech-provider-1_0 libspiel-1_0 - Add 42ad1741.patch: prevent crash when the host has no voice provider installed. ==== timezone ==== Version update (2025a -> 2025b) - Update to 2025b: * New zone for Aysén Region in Chile (America/Coyhaique) which moves from -04/-03 to -03