Packages changed: AppStream (1.1.3 -> 1.1.5) MicroOS-release (20260726 -> 20260728) faad2 (2.11.2.git13 -> 2.11.2.git18) gvfs highway libmysofa (1.3.3 -> 1.3.5) net-tools (3.14~alpha~git.20251212.7011617 -> 3.14~alpha~git.20260718.4f5bfb2) systemd (261.1 -> 261.2) tesseract-ocr (5.5.2 -> 5.5.3) zimg (3.0.6+20250919.gdf9c147 -> 3.0.6+20260720.g1ad1895) === Details === ==== AppStream ==== Version update (1.1.3 -> 1.1.5) Subpackages: libAppStreamQt3 libappstream5 - Update to 1.1.5 Features: * sysinfo: Implement display size detection on macOS * sysinfo: Assume a more modern display for the handset chassis template * sysinfo: Assume a more modern display for the tablet chassis template * sysinfo: Initial code to autodetect the display size on Wayland * sysinfo: Handle fractional display scaling via xdg-output * Implement support for GCVE as vulnerability database provider * qt: Sync enum mirrors with the C library * qt: Add Artifact, Checksum, Reference, Review and Agreement wrappers * qt: Wrap missing C API on existing classes * reviews: Add simple interface to fetch ODRS reviews for a component * reviews: Implement support for submitting reviews Specification: * docs: Suggest using the longest display side for maximum size constraints Bugfixes: * qt: Add back wrong const Component::addBundle for ABI compatibility * qt: Use strndup for C string-list conversion * pool: Fix bidirectional wildcard search for modalias provides * Make GResources we need outlive main thread destruction * pool: Properly implement cancellation of load operations * sysinfo: Fix display-length setter overriding the shortest edge * relation-check: Don't zero the score if a required check errored * curl: Harden downloader by restricting protocols to only HTTP(S) * curl: Allow making POST requests and changing the user agent * curl: Fix retry-loop data corruption and don't blindly retry POST requests * yaml: Fix potential crashes when encountering missing relation entry values * yaml: Adjust tests and emitter to work around libfyaml string-quoting change * yaml: Ensure version relations are consistently quoted * qt: Fix buffer overrun in stringListToCharArray - Drop patches: * 0001-yaml-Fix-potential-crashes-when-encountering-missing.patch * 0001-yaml-Adjust-tests-and-emitter-to-work-around-libfyam.patch * 0001-yaml-Ensure-version-relations-are-consistently-quote.patch * 0001-trivial-yaml-Ensure-branding-color-values-are-also-c.patch ==== MicroOS-release ==== Version update (20260726 -> 20260728) Subpackages: MicroOS-release-appliance MicroOS-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== faad2 ==== Version update (2.11.2.git13 -> 2.11.2.git18) - Update to version 2.11.2.git18: * fix signed overflow in fixed-point sample rounding before saturation * prevent num_bits_left underflow in ps_data extension parsing * cap escape length in huffman_spectral_data_2 * fix signed overflow in estimate_current_envelope energy sum * fix ssr_gc_function signature mismatch in ssr gain control ==== gvfs ==== Subpackages: gvfs-backends - don't package capabilities in RPM but rely on permissions profiles instead (bsc#1268674). An upcoming change in rpmlint will raise badness when capabilities are directly packaged in an RPM. gvfsd-nfsd is already whitelisted in the permissions profiles and the proper capabilities will be assigned during %post. ==== highway ==== - Add upstream patch to fix build on aarch64 with gcc16: * gcc16-aarch64.patch ==== libmysofa ==== Version update (1.3.3 -> 1.3.5) - Update to 1.3.5: * Harden HDF/SOFA parser against malformed input * Fixed issue with missing boundary check which lead to a stall - Changes in 1.3.4: * “fixes issues with v1.3.3” * added support for General FIR-E ==== net-tools ==== Version update (3.14~alpha~git.20251212.7011617 -> 3.14~alpha~git.20260718.4f5bfb2) - Update to version 3.14~alpha~git.20260718.4f5bfb2: * Update config.in: disable AF and HW ROSE by default (obsoletes Update_config.in.patch) * netstat: Keep UTF-8 characters in process names (bsc#1254323, obsoletes net-tools-netstat-ansi-injection.patch) - Update to version 3.14~alpha~git.20260612.2ab3c5e: * netstat: Update email address * doc: describe missing headers * passes -Wunused-parameter * fix type limit warnings * Remove anchient gettext ABOUT-NLS * TODO: removed NLS, add -Wextra * INSTALLING: musl, all features, compile warning todos * netstat.8: minor edits * chore: pedantic zizmor is happy on GH actions * Unified man example format * netstat.8: warn on trustworthyness of program name * man: netstat: add two examples * Rarp: fix nullpointer on unknown hosts * netstat: safe cycles and fix comment * Sanitize cmdline (bsc#1254323, CVE-2024-58251) * Updated translations. - Add Update_config.in.patch: Update config.in: disable AF and HW ROSE by default. This is longer part of the kernel 7.1 source tree. ==== systemd ==== Version update (261.1 -> 261.2) Subpackages: libsystemd0 libudev1 systemd-boot systemd-container udev - Import commit 4925d9f07fc697efccd98a93046ff535b8832445 (merge of v261.2) For a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/eff9446d505d62c075bed37d606860b38cfe51fb...4925d9f07fc697efccd98a93046ff535b8832445 - Move systemd-vmspawn from the experimental sub-package to systemd-container ==== tesseract-ocr ==== Version update (5.5.2 -> 5.5.3) Subpackages: libtesseract5 tesseract-ocr-common - Update to version 5.5.3: * Fix missing closing tags in multi-page PAGE XML output * Correct a mutex call to prevent multiple instances * Document memory ownership and lifecycle in the C API * Fix CMAKE_SYSTEM_PROCESSOR detection when cross-compiling on Apple platforms - Switch the documentation BuildRequires from asciidoc to rubygem(asciidoctor): upstream now generates the man pages with asciidoctor and silently skips them otherwise - Drop the gcc13 fallback for Leap 15.x: 15.6 is out of support and its repository has been retired from the devel project ==== zimg ==== Version update (3.0.6+20250919.gdf9c147 -> 3.0.6+20260720.g1ad1895) - Update to version 3.0.6+20260720.g1ad1895: * colorspace: add chromatic adaptation support, disabled by default (new zfilter_graph_builder_params field, required by VapourSynth R78) * colorspace: add BT.1361 transfer characteristics, simplify the xvYCC EOTF, add FMA and F16C feature checks, fix the hash function and an assertion on 240M->709 gamma * depth: add NEON-optimized error diffusion dithering * resize: fix integer weight rounding compensation and impose a maximum tap count on Lanczos * Fix out-of-bounds accesses in several SIMD code paths: the AVX2 u16 permute resizer load, AVX2 and NEON ordered dither reads, NEON error diffusion read, NEON float-to-half write, NEON byte-to-word left-shift read and the AVX2 unresize buffer size calculation * unresize: special-case the LU decomposition of a 1x1 matrix and use double epsilon * common: fix matrix row offset tracking after compaction * graph: fix the 64-byte alignment check, rename factory to observer * Update the bundled graphengine * Test-only, MSVC/Windows and example-code changes omitted here