Packages changed: Mesa (26.1.2 -> 26.1.3) Mesa-drivers (26.1.2 -> 26.1.3) MicroOS-release (20260618 -> 20260619) ffmpeg-8 (8.1.1 -> 8.1.2) gpsd iproute2 (7.0 -> 7.1) libupnp (1.18.5 -> 2.0.2) liburing pipewire (1.6.6 -> 1.6.7) plasma-branding-Kalpa (20260601 -> 20260612) python313 python313-core selinux-policy (20260605 -> 20260618) xdg-desktop-portal (1.22.0 -> 1.22.1) === Details === ==== Mesa ==== Version update (26.1.2 -> 26.1.3) Subpackages: Mesa-libEGL1 Mesa-libGL1 libgbm1 - Update to 26.1.3 bugfix release - -> https://docs.mesa3d.org/relnotes/26.1.3 ==== Mesa-drivers ==== Version update (26.1.2 -> 26.1.3) Subpackages: Mesa-dri Mesa-vulkan-device-select libvulkan_lvp - Update to 26.1.3 bugfix release - -> https://docs.mesa3d.org/relnotes/26.1.3 ==== MicroOS-release ==== Version update (20260618 -> 20260619) Subpackages: MicroOS-release-appliance MicroOS-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== ffmpeg-8 ==== Version update (8.1.1 -> 8.1.2) Subpackages: libavcodec62 libavfilter11 libavformat62 libavutil60 libswresample6 libswscale9 - Update to release 8.1.2 * Fix some buffer overflows, integer overflows, negative indices, off-by-one erros and double frees in various codecs, muxers and filters. ==== gpsd ==== - Rewrite the SPEC file to build, remove Python 2 building, and clean up. - Needs more work to support building via wheels. - Add update-desktop-files.patch and remove `%suse_update_desktop_file` and dependency on `update-desktop-files` package (https://en.opensuse.org/openSUSE:Update-desktop-files_deprecation). ==== iproute2 ==== Version update (7.0 -> 7.1) - Update to release 7.1 * mptcp: monitor: add JSON support * iplink: bond_slave: print actor and partner churn state * dpll: add client-side filtering for device show, pin show * dpll: add pin filtering by parent-device and parent-pin * tc: Add JSON output support to HFSC/QFQ/multiq * ss: add support for showing TCP delack timers * Remove support for hamradio protocols ==== libupnp ==== Version update (1.18.5 -> 2.0.2) - Update to release 2.0.2 * Fixed Transfer-Encoding: chunked bodies bypassing the g_maxContentLength limit. * Fixed a NULL dereference in ixmlNode_compare. * Fixed a integer truncation in raw_to_int(). - Update to release 2.0.1 * miniserver: Nagle algorithm on accepted TCP sockets is now disabled. * Use poll() to support fds higher than 1024. * chore: Normalized HTTP response header names to title-case. * Added UpnpGetSsdpReqPort4/6() to query SSDP M-SEARCH source port. * Explicitly-named non-multicast interfaces in UpnpGetIfInfo are now allowed. * Now rejects oversized HTTP POST body before buffering. * Now accepts RFC 1918 cross-subnet delivery URLs in GENA subscriptions. * Removed UpnpPrintf from public API. ==== liburing ==== - disable failing tests via catch-all in SLE15, force bash ==== pipewire ==== Version update (1.6.6 -> 1.6.7) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Update to version 1.6.7: * This is a bugfix release that is API and ABI compatible with the previous 1.6.x releases. * Highlights - Fix a race issue where some ports would stay silent after a rate change. - Fix sync regressions between ALSA cards in some cases. - Small fixes and improvements. * PipeWire - Fix a scheduler regression where some driver nodes would not run correctly and cause sync issues. (#5210 (closed)) - Fix a race issue with suspend on samplerate changes. It can cause ports to be silent. (#3547 (closed)) * Modules - There are some locking issues in the RT portal, for now reduce the DBus timeout to something more sane. Also disable portal RT for pipewire and the pulse server. These are not usually run in a sandbox and can go directly to RTKit. - Fix potential incorrect delay in combine-stream. * SPA - Fix a regression in ALSA period_size calculations. For non-power-of-2 periods, it would in some cases round down a a power-of-2, causing a mismatch between requested and configured period_size. (#5302 (closed)) - Fix a potential segfault when removing a card because of bad ALSA api usage. (#5255 (closed)) - Emit a route param update when card properties change. Otherwise, jack port updates are not always reflected correctly. * Misc - Make sure we don't deal with uninitialized spa_dict. ==== plasma-branding-Kalpa ==== Version update (20260601 -> 20260612) - add 0001-add-missed-locale1-in-sddm-config.patch - Version 20260612 * Add cups.service.d drop-in to set SystemGroup in cups-files.conf, allowing wheel group members to administer CUPS ==== python313 ==== - Add test_UDPLITE_support.patch (bsc#1263787, gh#python/cpython!149081) improving testing for the support of IPPROTO_UDPLITE, which could be not present although header files are. - Add missing BR `crypto-policies-scripts` (need for the fix of bsc#1211301). ==== python313-core ==== Subpackages: libpython3_13-1_0 python313-base - Add test_UDPLITE_support.patch (bsc#1263787, gh#python/cpython!149081) improving testing for the support of IPPROTO_UDPLITE, which could be not present although header files are. - Add missing BR `crypto-policies-scripts` (need for the fix of bsc#1211301). ==== selinux-policy ==== Version update (20260605 -> 20260618) Subpackages: selinux-policy-targeted - Update to version 20260618: * Allow wireguard to setup DNS using dns_hatchet (bsc#1243148) * Add sysnet_mount_file() interface ==== xdg-desktop-portal ==== Version update (1.22.0 -> 1.22.1) - Update to version 1.22.1: + Security fixes: - Fix a security issue which allows a malicious sandboxed applications to redirect drag-and-drop and copy-paste data to itself via a predictable key in FileTransfer.RetrieveFiles (GHSA-c5cf-79w8-pvfh) - Fix a security issue which allows a malicious sandboxed applications to gain arbitrary write access to nonexistent files outside of the sandbox via the "files" option in FileChooser.SaveFiles (GHSA-cm83-2936-gxjm) - Validate all App IDs in the Document Portal to prevent malicious applications from providing a well-crafted App ID which causes the parsing of arbitrary files on the host as Glib.KeyFiles + Enhancements: Disable PipeWire's realtime module to prevent deadlocks